Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/29b8718337162e32aee958fca5905e12242cea5b.roa
File:                     29b8718337162e32aee958fca5905e12242cea5b.roa (raw, json)
Hash identifier:          A5VlfZryDylSEDurAxOLy2HmOf53GIJu+eSqgBGfGW8=
Subject key identifier:   4D:16:FC:5A:DA:16:AA:1E:7C:AC:71:C9:64:94:58:6E:75:AA:44:F0
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0BFD05
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/29b8718337162e32aee958fca5905e12242cea5b.roa
Signing time:             Wed 15 Feb 2023 01:11:51 +0000
ROA not before:           Tue 14 Feb 2023 01:08:54 +0000
ROA not after:            Sat 15 Feb 2025 01:08:54 +0000
asID:                     3640
IP address blocks:        2801:c4:f0::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785669 (0xbfd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:08:54 2023 GMT
            Not After : Feb 15 01:08:54 2025 GMT
        Subject: CN=29b8718337162e32aee958fca5905e12242cea5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6f:cd:3b:59:7f:d6:f5:71:3e:34:17:61:c3:
                    6e:10:c7:c2:c5:a8:df:ac:75:f1:40:d6:17:d1:5e:
                    66:fb:eb:0d:3f:4e:2c:e5:89:cb:ae:c1:50:fc:63:
                    3e:9d:17:17:14:4c:b8:72:e4:83:eb:95:97:df:bd:
                    2f:ed:21:a2:a4:48:79:30:15:51:bd:25:2d:0a:f4:
                    41:db:1f:c6:a1:92:e6:62:4c:2b:eb:be:e4:27:ac:
                    d1:6d:f3:0e:ca:a8:71:56:6a:1a:ed:a6:7b:b4:7d:
                    68:62:30:ae:a0:4c:ac:81:12:77:b5:68:39:d4:4f:
                    80:a6:92:27:05:a5:83:35:5e:6c:69:4e:8d:3c:9b:
                    19:5e:06:c2:9c:22:61:48:56:5c:c1:5b:eb:81:0d:
                    f0:05:a8:4c:7c:81:06:b7:a4:ec:4a:81:d7:3d:92:
                    90:ba:87:ba:2f:ea:7a:65:f9:22:42:60:9c:99:63:
                    54:e0:a9:61:6d:b4:d7:00:19:28:5b:b4:e7:59:df:
                    ac:ba:57:89:88:2d:ad:9a:ff:ae:e7:ef:9d:41:e2:
                    2f:59:c4:8d:26:23:b8:cb:8a:8f:cb:d2:c7:a8:aa:
                    c1:68:eb:4c:45:73:11:93:bf:24:87:ea:a9:2a:33:
                    86:e7:13:03:67:56:66:a6:c4:d1:5d:af:26:d9:6d:
                    4e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:FC:5A:DA:16:AA:1E:7C:AC:71:C9:64:94:58:6E:75:AA:44:F0
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/29b8718337162e32aee958fca5905e12242cea5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         57:df:2a:c5:75:d6:37:94:50:b4:d9:87:e0:b8:13:e1:aa:25:
         ed:63:5e:4f:3c:4c:a4:fa:41:ec:f9:f6:5c:34:01:dd:1b:61:
         86:7e:f3:8d:e0:95:10:5b:8e:dd:7c:cd:26:5a:af:5f:21:8e:
         62:be:c6:8b:69:4e:cd:f4:fe:15:f8:e5:9c:86:fb:b8:7a:26:
         65:5f:ed:f0:6f:22:24:d2:47:e1:0b:34:f2:78:9b:52:d6:5a:
         c1:be:b4:a8:33:68:91:41:da:5d:a9:83:16:ff:bd:b9:95:e3:
         cd:fc:79:81:86:89:56:28:95:3a:8e:e3:d6:d6:77:d0:18:ea:
         15:18:01:65:02:a2:82:1a:c2:4d:c1:d1:db:d6:6b:85:60:6f:
         ed:f2:90:39:71:80:35:fa:50:1e:b0:a6:f8:8c:fa:30:55:dd:
         31:77:d4:65:3a:68:08:04:0e:1d:da:3d:bd:84:dc:bb:96:52:
         5a:14:26:40:84:41:6f:1e:1c:20:59:f2:58:03:2c:92:c9:ed:
         63:94:82:f3:81:84:48:da:a8:11:02:ca:1a:99:a3:b0:25:01:
         9d:e0:9e:a3:cb:ea:4e:04:a3:fd:11:ae:16:e9:06:bc:11:0d:
         07:ae:9f:13:2d:a7:2f:7f:aa:0a:4c:c1:44:5d:1b:fc:7d:95:
         e2:e6:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----