Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          kImddzO5VogXkmhPjSFkp7AAzJvcQ+0rgIuU7uqJY0U=
Subject key identifier:   D2:EF:16:C0:92:1A:36:25:B9:09:8E:AE:7C:C4:F9:DF:1E:B6:38:88
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       6F10F704A950730A4448B362FC34CC7E9344D2B2
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 24 Mar 2025 11:58:52 +0000
ROA not before:           Mon 24 Mar 2025 11:53:52 +0000
ROA not after:            Mon 23 Mar 2026 11:58:52 +0000
asID:                     50224
IP address blocks:        2a0a:6040:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:10:f7:04:a9:50:73:0a:44:48:b3:62:fc:34:cc:7e:93:44:d2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 11:53:52 2025 GMT
            Not After : Mar 23 11:58:52 2026 GMT
        Subject: CN=D2EF16C0921A3625B9098EAE7CC4F9DF1EB63888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:2e:26:aa:b9:3f:d9:32:5b:24:c4:db:39:
                    15:3e:13:c1:86:d9:64:d7:f5:78:a5:64:da:e0:15:
                    3c:8a:7a:a7:3e:24:bc:47:4d:59:44:d0:1c:dd:ff:
                    be:8e:f5:15:88:1e:38:88:e0:79:f9:89:b1:30:77:
                    79:39:98:13:b4:5a:16:3f:cd:7a:13:55:02:12:49:
                    d7:a1:82:18:be:fc:d5:db:8f:27:6e:4f:51:1b:f0:
                    b9:73:d0:b3:74:27:27:09:24:37:47:21:2e:3e:b4:
                    d9:f0:8b:a0:16:1b:a3:2f:b6:0a:91:70:d7:9b:7f:
                    a1:c2:59:3a:b3:6c:9c:11:2b:f6:50:af:d2:ac:33:
                    57:e5:62:b7:32:64:43:fd:bf:05:10:d3:a9:73:d5:
                    32:55:a3:a9:7d:51:62:b5:d4:32:f8:72:5b:b4:13:
                    fc:7a:d7:d8:ba:86:dc:d0:14:a4:f2:d6:3b:79:13:
                    20:2e:88:2e:67:b6:5f:e4:12:4a:90:35:5f:44:37:
                    aa:f7:1d:fd:1a:ed:f3:1a:62:fe:74:ea:57:09:ae:
                    2c:b1:f8:ce:8d:0d:c9:f3:97:6e:c0:71:56:16:7f:
                    4c:1d:87:ff:87:e0:12:f6:26:68:66:b3:9d:fe:cb:
                    11:fe:61:80:51:30:ae:0b:d1:dd:7a:2a:e8:95:33:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:16:C0:92:1A:36:25:B9:09:8E:AE:7C:C4:F9:DF:1E:B6:38:88
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:60:69:60:cb:ac:52:5e:73:f4:18:53:a7:94:34:6e:8e:0b:
         10:d2:58:a7:6d:49:fc:54:34:b3:32:40:70:0a:13:f9:4b:15:
         d0:75:59:9a:41:40:13:3a:fe:db:49:98:5a:3b:ff:4e:bb:64:
         92:4e:e5:83:d8:c5:83:af:c7:21:03:56:61:09:b0:61:50:2a:
         34:68:c8:9b:34:68:f3:9a:bd:77:0f:f4:f7:61:ff:c8:b3:97:
         67:e6:19:27:30:80:42:d5:e0:02:d5:7a:09:e7:34:1a:5d:13:
         51:fb:97:73:25:58:29:67:41:bf:05:e8:9a:a7:c1:f7:0f:e6:
         95:b3:8f:2d:50:94:89:95:e0:e7:fe:57:d8:01:dc:08:e9:52:
         e2:ea:de:ab:37:33:88:2a:00:82:5d:0e:e4:13:cc:17:20:14:
         63:fd:f4:98:ad:23:06:44:48:c3:57:6f:bc:db:55:06:1e:20:
         2f:ef:1a:3d:ae:0d:a1:dc:cc:c8:98:9a:18:13:dc:d3:9f:9c:
         1c:2d:37:87:22:1d:4a:00:22:dd:5f:ff:f1:62:d7:28:51:7a:
         92:d5:77:65:66:50:5e:7c:68:1b:d7:81:b0:6c:3b:1d:af:a6:
         a7:36:5e:c2:6d:41:ec:41:0e:89:c3:bd:93:f3:81:ba:f9:8b:
         a2:75:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----