Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/447c8caa19b8923b7b9036de03d75ff3fe3770c2.roa
File:                     447c8caa19b8923b7b9036de03d75ff3fe3770c2.roa (raw, json)
Hash identifier:          Iwhk1LzkwQm9OyjUa+utBBeaoXRLrUa/hmOAKGHrsXc=
Subject key identifier:   01:D5:BC:DC:BD:5E:F9:FB:B7:37:9F:A3:2F:E7:20:B6:DC:AB:AF:04
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0C0836
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/447c8caa19b8923b7b9036de03d75ff3fe3770c2.roa
Signing time:             Wed 15 Feb 2023 01:14:40 +0000
ROA not before:           Tue 14 Feb 2023 01:14:06 +0000
ROA not after:            Sat 15 Feb 2025 01:14:06 +0000
asID:                     3640
IP address blocks:        2801:c4:fa::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788534 (0xc0836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:14:06 2023 GMT
            Not After : Feb 15 01:14:06 2025 GMT
        Subject: CN=447c8caa19b8923b7b9036de03d75ff3fe3770c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4b:79:a4:ad:e7:81:87:4c:ec:56:74:40:fa:
                    8f:9a:fa:6c:c0:fa:ab:3e:82:be:f5:60:52:ee:6a:
                    38:1c:53:b3:7e:8e:4e:62:bb:c2:03:42:9d:21:fd:
                    4d:bc:5b:5f:c8:50:b2:4d:84:67:e4:18:8f:2a:4a:
                    d8:28:9d:32:92:7a:89:5e:43:55:d5:b9:16:85:b9:
                    36:09:05:64:ba:23:c9:51:08:4a:8b:75:86:25:5b:
                    ed:d6:c8:91:c6:a9:72:a1:21:87:5e:3b:0b:2d:60:
                    c4:9b:e3:53:16:be:ae:1a:98:c9:96:52:78:d3:07:
                    d7:7e:55:f5:40:36:8f:6d:18:1c:64:1c:a8:4c:c9:
                    41:0f:a7:5a:de:1f:4a:fb:3d:2b:62:3e:7f:9f:45:
                    f9:e3:7f:a9:5d:91:d1:0d:d3:17:75:a0:3f:fd:7c:
                    d7:80:02:ac:fe:7d:78:37:8a:65:45:ea:cb:a2:2e:
                    52:d8:c3:f4:60:80:02:5e:a1:19:85:fe:21:ce:fe:
                    3a:c3:71:54:10:fd:9d:77:20:e1:14:73:3b:e5:f8:
                    1a:ba:2e:e0:74:2e:ad:7f:f6:ce:b3:a7:6b:8c:3e:
                    32:3e:9e:a1:0c:5f:ae:87:f6:8f:65:94:82:27:2d:
                    8d:fb:2b:28:51:3e:9e:6a:cb:c2:e8:34:d6:d9:80:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:BC:DC:BD:5E:F9:FB:B7:37:9F:A3:2F:E7:20:B6:DC:AB:AF:04
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/447c8caa19b8923b7b9036de03d75ff3fe3770c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:fa::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:89:c3:23:7e:db:5c:30:0c:74:12:42:50:39:e8:a4:9a:b0:
         46:4d:f1:22:4e:75:40:36:fc:eb:f3:fe:ae:3d:b8:ad:c7:5f:
         dc:ba:e4:37:12:c0:31:42:e5:ba:53:5d:ff:c5:cd:7f:5d:ce:
         5b:ed:41:d8:6b:1a:6f:43:33:47:48:84:da:7d:fe:74:e4:d4:
         39:e0:39:65:c7:7f:02:43:47:8f:72:27:d3:7c:6c:05:a7:50:
         9a:5d:63:84:b0:f9:1c:f4:e0:d2:cf:ba:3f:e0:3a:9a:b2:8c:
         37:a3:d4:6c:81:da:a1:69:e2:33:23:bb:8b:f2:82:3f:8f:12:
         a2:fc:cf:6e:dc:e1:d6:e1:85:38:f3:15:7e:51:e2:3b:d7:5b:
         a5:bd:38:4e:63:32:ad:f3:d5:cf:b8:10:cf:0d:28:bf:f2:0a:
         9c:ad:3b:90:29:d8:9c:48:56:c2:d1:10:18:b8:18:ce:ad:dd:
         f5:44:ab:a2:5d:3a:0d:9e:ac:f3:51:7f:8e:0d:ae:b6:61:fc:
         03:4b:86:e5:c6:86:17:c9:dc:e1:30:b3:40:98:0d:b9:35:84:
         4a:f7:30:f6:d7:8e:f7:c0:1d:27:84:18:fd:9a:af:13:3e:67:
         67:99:a2:58:d5:d5:fc:24:74:e9:1b:62:5b:1b:02:ec:a0:17:
         7d:01:b4:cd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDAg2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
MmMwMGQ5Y2QwMDY0YTA0MGYzOWUxNDA5NzRhOTg3NTg1ZmYxMmUwHhcNMjMwMjE0
MDExNDA2WhcNMjUwMjE1MDExNDA2WjAzMTEwLwYDVQQDEyg0NDdjOGNhYTE5Yjg5
MjNiN2I5MDM2ZGUwM2Q3NWZmM2ZlMzc3MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiEt5pK3ngYdM7FZ0QPqPmvpswPqrPoK+9WBS7mo4HFOzfo5O
YrvCA0KdIf1NvFtfyFCyTYRn5BiPKkrYKJ0yknqJXkNV1bkWhbk2CQVkuiPJUQhK
i3WGJVvt1siRxqlyoSGHXjsLLWDEm+NTFr6uGpjJllJ40wfXflX1QDaPbRgcZByo
TMlBD6da3h9K+z0rYj5/n0X543+pXZHRDdMXdaA//XzXgAKs/n14N4plRerLoi5S
2MP0YIACXqEZhf4hzv46w3FUEP2ddyDhFHM75fgaui7gdC6tf/bOs6drjD4yPp6h
DF+uh/aPZZSCJy2N+ysoUT6easvC6DTW2YC+HQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFAHVvNy9Xvn7tzefoy/nILbcq68EMB8GA1UdIwQYMBaAFG/3nAXGKw9xHL8f
BDDjoVVtrZ2DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzAyYzAw
ZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDJhNWYyMTgtZjdiMS00N2FmLTk1ZjQtYjFhMjE4
YTliOTZjLzQ0N2M4Y2FhMTliODkyM2I3YjkwMzZkZTAzZDc1ZmYzZmUzNzcwYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMmE1ZjIxOC1mN2IxLTQ3YWYtOTVmNC1iMWEy
MThhOWI5NmMvYzAyYzAwZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHASgBAMQA+jANBgkqhkiG9w0BAQsFAAOCAQEARonDI37bXDAM
dBJCUDnopJqwRk3xIk51QDb86/P+rj24rcdf3LrkNxLAMULlulNd/8XNf13OW+1B
2Gsab0MzR0iE2n3+dOTUOeA5Zcd/AkNHj3In03xsBadQml1jhLD5HPTg0s+6P+A6
mrKMN6PUbIHaoWniMyO7i/KCP48SovzPbtzh1uGFOPMVflHiO9dbpb04TmMyrfPV
z7gQzw0ov/IKnK07kCnYnEhWwtEQGLgYzq3d9USrol06DZ6s81F/jg2utmH8A0uG
5caGF8nc4TCzQJgNuTWESvcw9teO98AdJ4QY/ZqvEz5nZ5miWNXV/CR06RtiWxsC
7KAXfQG0zQ==
-----END CERTIFICATE-----