Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1aca604d1121e9f75e3cfeccd17f5b3d51257df8.roa
File:                     1aca604d1121e9f75e3cfeccd17f5b3d51257df8.roa (raw, json)
Hash identifier:          rMlaWpSE6Xo+4SRFFW0gWcVjIRowgaW2tplo4RrWReY=
Subject key identifier:   E6:9A:FC:C0:BB:D7:E8:C5:A0:03:D7:05:83:12:55:B9:02:2E:F0:66
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0E85C4
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1aca604d1121e9f75e3cfeccd17f5b3d51257df8.roa
Signing time:             Mon 15 May 2023 22:12:47 +0000
ROA not before:           Sun 14 May 2023 22:12:46 +0000
ROA not after:            Thu 15 May 2025 22:12:46 +0000
asID:                     3640
IP address blocks:        158.97.128.0/17 maxlen: 17
                          192.84.12.0/24 maxlen: 24
                          158.97.64.0/19 maxlen: 23
                          158.97.64.0/23 maxlen: 23
                          158.97.96.0/19 maxlen: 22
                          158.97.0.0/18 maxlen: 18
                          2801:c4:f0::/44 maxlen: 48
                          2801:c4:f8::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951748 (0xe85c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: May 14 22:12:46 2023 GMT
            Not After : May 15 22:12:46 2025 GMT
        Subject: CN=1aca604d1121e9f75e3cfeccd17f5b3d51257df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:29:58:b8:2c:72:f8:c0:c6:3b:8c:7f:5e:
                    06:fa:5f:e6:c7:43:2e:7f:9f:67:91:ff:a7:3a:55:
                    a1:b5:89:ad:6c:d2:d7:e8:0d:18:9f:33:1d:42:e5:
                    4a:c8:34:31:db:75:f3:53:ac:cd:73:74:9c:64:26:
                    5d:c9:3a:e7:2b:47:b1:89:10:59:f9:85:dd:81:b3:
                    66:9c:56:40:99:aa:8c:94:ec:56:6b:27:02:15:16:
                    19:44:b5:a3:7c:a8:6c:95:35:e5:e5:a5:6c:d5:57:
                    9f:0a:41:cd:a4:54:4d:9f:b5:fb:75:c6:7e:9b:dd:
                    29:4b:9d:d3:bc:ba:85:f6:b7:f9:d8:91:d2:57:58:
                    98:94:de:f7:db:0f:8c:f4:1a:f5:4c:bf:ea:9a:58:
                    cd:bd:16:8f:8c:71:39:0a:36:7c:e6:bd:78:aa:ad:
                    ee:e3:9f:fa:f5:43:99:e0:15:e6:b3:d4:47:16:60:
                    22:cb:95:c6:6b:76:ca:6e:23:70:be:d9:69:ee:35:
                    46:f4:9f:96:fe:82:7a:08:2e:46:77:7c:45:69:45:
                    fc:60:9f:c6:e7:cb:86:47:81:f2:e3:ef:20:5b:a0:
                    df:49:2c:2e:83:29:8a:df:96:df:c5:44:67:90:70:
                    85:a9:f0:da:63:1d:0f:72:77:00:49:14:18:28:0e:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9A:FC:C0:BB:D7:E8:C5:A0:03:D7:05:83:12:55:B9:02:2E:F0:66
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1aca604d1121e9f75e3cfeccd17f5b3d51257df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.0.0/16
                  192.84.12.0/24
                IPv6:
                  2801:c4:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:75:b7:18:eb:6e:50:b4:89:6d:be:ea:92:9e:91:5e:18:
         26:db:36:f5:28:15:5f:5d:cb:9c:78:d9:cb:fd:11:6e:ee:b4:
         cc:e5:6c:7d:6a:67:8a:8a:77:db:dc:6b:3a:1d:78:75:8f:46:
         ee:5e:9f:f4:ff:b5:91:27:48:12:35:0d:78:90:70:eb:af:6c:
         84:4b:ab:e3:94:a6:18:e5:b6:84:8d:dd:1d:b0:07:1e:c7:60:
         66:06:2c:80:fd:39:ce:65:47:99:ce:49:ed:88:cb:f7:49:87:
         53:f5:ad:73:30:84:93:f2:24:69:e5:46:f6:95:b0:85:30:6b:
         da:6f:c9:71:69:aa:d1:9e:f9:a5:80:3a:58:3f:08:8f:a3:a1:
         7c:2f:bf:35:54:68:67:2d:71:00:c0:20:8f:75:78:f5:74:7c:
         fb:ed:5e:b4:fd:e1:33:5d:ea:23:fd:c0:9b:d1:b0:4f:e4:f7:
         03:cb:9f:0e:d6:49:19:f9:c1:07:45:b1:2e:aa:48:61:a7:cd:
         dc:a9:94:f5:fd:2f:da:cb:1f:83:0b:13:9b:63:fd:cf:a6:a6:
         24:b2:d9:03:7f:a2:b5:f8:f2:e6:26:fe:4a:f6:37:24:76:18:
         8e:f1:20:ae:12:59:bb:c0:bf:cb:db:81:4c:1c:c9:38:48:f4:
         57:e7:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----