Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/6f15f9367bf7e3a4464fc6802dfd81536e65efb7.roa
File:                     6f15f9367bf7e3a4464fc6802dfd81536e65efb7.roa (raw, json)
Hash identifier:          HDeSsSN6tYvAOVFc8tJFdzk2iZaUpqOFJ7or2nOKYz8=
Subject key identifier:   F8:A5:46:8C:BB:8B:5D:3C:28:61:4C:87:3C:86:BF:21:84:7E:7E:DE
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0C0D8D
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/6f15f9367bf7e3a4464fc6802dfd81536e65efb7.roa
Signing time:             Wed 15 Feb 2023 01:15:14 +0000
ROA not before:           Tue 14 Feb 2023 01:14:41 +0000
ROA not after:            Sat 15 Feb 2025 01:14:41 +0000
asID:                     3640
IP address blocks:        2801:c4:fc::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789901 (0xc0d8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:14:41 2023 GMT
            Not After : Feb 15 01:14:41 2025 GMT
        Subject: CN=6f15f9367bf7e3a4464fc6802dfd81536e65efb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:6c:eb:09:e6:b8:2c:4c:9c:b9:b8:db:bf:
                    01:5f:50:a1:59:fd:b4:37:29:10:44:47:35:58:45:
                    97:98:de:33:aa:e6:dd:66:b7:67:5d:0c:a3:66:f9:
                    fa:8f:af:8d:6c:f4:a8:6d:57:56:47:2a:c5:3c:03:
                    5a:a7:a7:17:21:9e:81:f4:c3:a7:5c:94:2b:33:1b:
                    22:3b:d9:3e:96:ba:e1:7c:86:a2:f6:37:70:e9:47:
                    e4:61:0e:dd:d8:80:9e:c8:ff:96:31:fd:a1:28:48:
                    20:5d:ae:e9:4a:5d:39:72:b9:3d:d8:b3:15:90:c8:
                    cd:ca:7e:7b:ce:10:ee:4b:41:2a:91:2b:06:f8:ff:
                    63:07:a4:85:3f:db:85:6b:c8:25:3a:10:73:9b:8a:
                    d1:c5:2f:56:83:e9:60:06:c3:ee:7e:b5:82:c9:4b:
                    7e:44:58:bd:0e:78:31:0f:ed:3b:4f:6e:75:24:ab:
                    08:0c:0d:69:7f:e5:b9:8e:3c:1a:7a:e5:34:29:f3:
                    a5:02:5f:46:83:37:53:ee:7e:f9:de:f0:5c:19:69:
                    c6:b1:8a:35:21:13:5b:9a:ed:b8:ce:f8:08:70:14:
                    df:e8:28:3f:9c:ba:b9:13:6a:1a:fd:cd:01:aa:ee:
                    b2:25:07:e9:d1:fb:96:ee:e2:11:b4:07:77:d0:6e:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:46:8C:BB:8B:5D:3C:28:61:4C:87:3C:86:BF:21:84:7E:7E:DE
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/6f15f9367bf7e3a4464fc6802dfd81536e65efb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:fc::/47

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:40:d0:ab:f6:f3:7c:c9:cc:71:08:3d:56:af:43:c1:eb:
         79:e0:ef:0c:1a:4c:62:b3:32:2a:96:50:11:49:5b:65:05:d7:
         72:fa:59:70:b3:33:6e:d2:14:4b:35:39:1b:4c:70:90:6b:4a:
         ea:0d:47:d4:1a:4a:0f:8f:0a:fa:db:07:88:bb:b6:47:93:f8:
         3c:c9:0e:09:57:62:d6:03:3d:47:f8:24:23:51:76:93:18:19:
         8c:cd:36:0b:4d:c7:7f:d6:bc:f1:40:e8:de:d0:d7:90:82:8b:
         84:ea:0d:14:fc:f2:ba:87:30:31:5e:36:b0:2a:b4:36:2f:b5:
         f1:e0:d2:7b:78:5e:21:1e:eb:19:1c:d9:a7:0d:6f:b5:72:7d:
         d4:d0:d0:05:1a:51:d7:6a:d0:27:b0:33:56:a2:23:b6:a3:19:
         51:e7:74:ef:2a:fc:9b:ce:cb:68:fd:f3:a0:b6:61:43:e3:09:
         f7:53:73:a0:e5:f7:9e:89:76:8e:c9:e9:43:30:1b:bf:3e:a9:
         76:b7:1b:c5:2e:38:5f:d5:49:4a:5f:73:54:aa:55:3b:99:42:
         1c:82:b4:fe:48:b0:3c:91:87:74:35:44:48:13:89:63:24:04:
         1d:07:2f:ce:89:a5:36:62:ea:d8:41:e4:00:14:87:6b:dc:06:
         e4:58:1c:12
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDA2NMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
MmMwMGQ5Y2QwMDY0YTA0MGYzOWUxNDA5NzRhOTg3NTg1ZmYxMmUwHhcNMjMwMjE0
MDExNDQxWhcNMjUwMjE1MDExNDQxWjAzMTEwLwYDVQQDEyg2ZjE1ZjkzNjdiZjdl
M2E0NDY0ZmM2ODAyZGZkODE1MzZlNjVlZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkxNs6wnmuCxMnLm4278BX1ChWf20NykQREc1WEWXmN4zqubd
ZrdnXQyjZvn6j6+NbPSobVdWRyrFPANap6cXIZ6B9MOnXJQrMxsiO9k+lrrhfIai
9jdw6UfkYQ7d2ICeyP+WMf2hKEggXa7pSl05crk92LMVkMjNyn57zhDuS0EqkSsG
+P9jB6SFP9uFa8glOhBzm4rRxS9Wg+lgBsPufrWCyUt+RFi9DngxD+07T251JKsI
DA1pf+W5jjwaeuU0KfOlAl9GgzdT7n753vBcGWnGsYo1IRNbmu24zvgIcBTf6Cg/
nLq5E2oa/c0Bqu6yJQfp0fuW7uIRtAd30G7QKQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFPilRoy7i108KGFMhzyGvyGEfn7eMB8GA1UdIwQYMBaAFG/3nAXGKw9xHL8f
BDDjoVVtrZ2DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzAyYzAw
ZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDJhNWYyMTgtZjdiMS00N2FmLTk1ZjQtYjFhMjE4
YTliOTZjLzZmMTVmOTM2N2JmN2UzYTQ0NjRmYzY4MDJkZmQ4MTUzNmU2NWVmYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMmE1ZjIxOC1mN2IxLTQ3YWYtOTVmNC1iMWEy
MThhOWI5NmMvYzAyYzAwZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHASgBAMQA/DANBgkqhkiG9w0BAQsFAAOCAQEAoRZA0Kv283zJ
zHEIPVavQ8HreeDvDBpMYrMyKpZQEUlbZQXXcvpZcLMzbtIUSzU5G0xwkGtK6g1H
1BpKD48K+tsHiLu2R5P4PMkOCVdi1gM9R/gkI1F2kxgZjM02C03Hf9a88UDo3tDX
kIKLhOoNFPzyuocwMV42sCq0Ni+18eDSe3heIR7rGRzZpw1vtXJ91NDQBRpR12rQ
J7AzVqIjtqMZUed07yr8m87LaP3zoLZhQ+MJ91NzoOX3nol2jsnpQzAbvz6pdrcb
xS44X9VJSl9zVKpVO5lCHIK0/kiwPJGHdDVESBOJYyQEHQcvzomlNmLq2EHkABSH
a9wG5FgcEg==
-----END CERTIFICATE-----