Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1e99fb1a1d295c48eafe24cb2d3f00fdae676b17.roa
File:                     1e99fb1a1d295c48eafe24cb2d3f00fdae676b17.roa (raw, json)
Hash identifier:          6DOa2sF7sZ31aIRS4YDQRYqY+nkJnqByfhQyiwNevbQ=
Subject key identifier:   B9:74:46:1A:AB:32:E7:52:5B:01:6A:05:33:2A:8F:A5:9D:6D:78:71
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0C0E30
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1e99fb1a1d295c48eafe24cb2d3f00fdae676b17.roa
Signing time:             Wed 15 Feb 2023 01:15:41 +0000
ROA not before:           Tue 14 Feb 2023 01:15:16 +0000
ROA not after:            Sat 15 Feb 2025 01:15:16 +0000
asID:                     3640
IP address blocks:        2801:c4:fe::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790064 (0xc0e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:15:16 2023 GMT
            Not After : Feb 15 01:15:16 2025 GMT
        Subject: CN=1e99fb1a1d295c48eafe24cb2d3f00fdae676b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:13:c6:0b:12:84:e0:e0:b8:3a:03:88:72:ec:
                    34:cc:5d:bc:c2:9c:eb:35:67:15:e9:50:6b:63:85:
                    9f:51:2e:0d:07:f8:4b:f8:8f:a6:50:e6:bc:6d:05:
                    ee:6d:20:e9:0e:45:9f:b8:fa:97:00:f9:ad:bd:6b:
                    10:80:72:d1:9d:af:4e:0d:45:6c:57:82:fd:02:c5:
                    e3:2e:2f:37:a6:ad:f7:21:29:07:89:6c:d2:5a:49:
                    d6:cd:67:06:f9:57:b1:d6:c9:d7:fb:c1:cb:17:cb:
                    f7:22:11:5e:5e:9c:02:01:fb:d7:b5:cc:5e:ea:2e:
                    d7:84:a8:26:ea:a3:84:11:6a:54:4e:ff:35:dd:d9:
                    06:d6:84:5d:2c:02:88:fd:40:c5:19:53:2e:d6:f8:
                    f5:7f:06:0b:2a:3a:76:ca:8f:00:49:31:b3:4c:2e:
                    e5:6e:1c:a3:dd:86:20:76:57:68:0e:e1:54:9f:ad:
                    1a:6a:3c:d1:1a:5f:5a:3b:6e:eb:8c:02:1d:82:d8:
                    64:04:72:7a:46:1f:21:7a:e8:73:6f:62:2d:8b:7c:
                    bb:49:3d:0e:5b:33:b8:3c:87:20:6a:c0:57:94:50:
                    bc:26:c6:3e:4e:29:4b:33:e2:e2:7b:36:fa:0f:51:
                    f5:5a:0f:f9:2c:28:0c:af:50:9d:3a:fe:9c:28:4f:
                    1f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:46:1A:AB:32:E7:52:5B:01:6A:05:33:2A:8F:A5:9D:6D:78:71
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1e99fb1a1d295c48eafe24cb2d3f00fdae676b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:fe::/47

    Signature Algorithm: sha256WithRSAEncryption
         16:42:67:d4:0c:cb:3f:e4:aa:d1:52:c4:a5:f5:da:05:b3:f3:
         cd:57:3d:99:a9:d0:e3:77:f0:77:91:9a:30:61:73:43:34:34:
         39:29:99:89:2c:7d:28:75:3f:a8:4f:f1:70:99:a0:22:d3:34:
         69:09:11:28:79:02:03:ae:a9:f3:8c:a1:48:0b:fa:61:ee:7a:
         bc:87:24:4b:b9:76:ef:5a:b0:13:23:5c:5f:c6:ac:d8:ff:6a:
         67:45:07:ca:fc:46:bc:54:6a:3e:3b:83:36:63:8e:4e:24:64:
         6b:d8:a9:c0:1e:4b:f0:be:12:cc:c6:09:b7:00:b1:ed:74:89:
         f1:be:8d:fc:66:97:2c:e0:b7:ec:ce:b0:87:ba:dc:77:99:50:
         27:05:e6:3d:1d:7f:6c:38:8d:21:f7:c4:a2:e6:fe:83:30:75:
         d9:88:09:01:dc:c8:b8:96:11:cf:66:4a:b4:5f:ba:07:02:d2:
         e8:2f:86:71:bf:02:52:10:c4:86:2f:9c:35:9a:58:7b:07:d6:
         2a:1b:17:3f:61:39:fd:a3:66:0b:37:6a:e0:41:c6:2c:d1:f4:
         0c:f5:50:90:6a:57:fa:c8:d8:c9:11:b8:a0:19:0d:75:ed:7b:
         2c:05:f7:fd:ba:92:83:a9:76:2b:9a:46:f0:5a:9a:6a:20:fc:
         56:57:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----