Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/598a0d3358eecf5e89f03ae934b971cf6d597b9d.roa
File:                     598a0d3358eecf5e89f03ae934b971cf6d597b9d.roa (raw, json)
Hash identifier:          0PjHgA+/yHUK/eOFHmE30aAePmayqB4Lh/rsau0pmMQ=
Subject key identifier:   9B:CC:E7:58:86:F1:1F:6B:01:1F:E7:AE:AB:9F:BD:CD:F4:59:2A:35
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0C0339
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/598a0d3358eecf5e89f03ae934b971cf6d597b9d.roa
Signing time:             Wed 15 Feb 2023 01:14:04 +0000
ROA not before:           Tue 14 Feb 2023 01:11:52 +0000
ROA not after:            Sat 15 Feb 2025 01:11:52 +0000
asID:                     3640
IP address blocks:        2801:c4:f8::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787257 (0xc0339)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:11:52 2023 GMT
            Not After : Feb 15 01:11:52 2025 GMT
        Subject: CN=598a0d3358eecf5e89f03ae934b971cf6d597b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:57:d7:d4:59:88:07:1f:7e:0e:5c:04:9c:
                    af:c2:8f:0c:8e:b6:50:f3:c1:24:93:f7:02:1a:5d:
                    cf:09:b5:e4:10:fa:a3:72:b1:7f:10:e2:7f:08:de:
                    39:7b:1c:d4:96:59:7b:20:b1:88:31:7a:53:81:73:
                    1f:22:88:31:e2:d5:af:15:d1:20:c5:6f:71:d2:fc:
                    01:45:cf:30:d7:21:72:21:5b:14:2b:cd:87:7d:46:
                    1a:59:53:5a:dd:3e:3b:40:3e:d7:1a:ae:fa:c3:cb:
                    c6:31:11:91:17:0f:fa:0d:ea:88:ac:c8:9c:7b:b3:
                    10:18:4a:56:17:05:af:7c:6c:e1:99:aa:4f:08:4b:
                    60:e7:7c:0f:47:8f:49:7f:e7:7c:76:4d:f5:0a:d3:
                    5c:05:8a:14:4f:3d:b3:8f:9f:05:a4:99:5c:06:12:
                    c0:56:7d:60:74:c8:7c:16:dc:bb:62:db:0f:70:b3:
                    18:9a:fa:17:b5:c7:dd:76:f7:92:21:34:6d:e9:24:
                    07:10:42:37:5c:25:06:67:b2:f9:22:1f:00:50:5b:
                    a3:67:fe:23:be:24:2f:cd:fb:5c:e6:b7:ba:30:b2:
                    38:8c:6b:eb:4b:ba:e3:7d:2b:79:a2:b6:e6:b9:45:
                    f8:64:c0:b0:5f:2e:de:60:9b:01:69:2f:57:a3:1e:
                    31:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CC:E7:58:86:F1:1F:6B:01:1F:E7:AE:AB:9F:BD:CD:F4:59:2A:35
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/598a0d3358eecf5e89f03ae934b971cf6d597b9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f8::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:29:35:e8:a9:75:b0:53:85:dd:c8:98:43:a2:91:f9:d3:
         bf:bf:cc:1c:a9:57:2b:50:be:37:dd:60:50:f6:83:ab:15:98:
         65:32:f8:cf:f1:34:85:3b:4b:26:77:50:1e:05:15:d8:eb:a3:
         99:de:b8:2a:de:c0:10:f1:f7:99:cd:a2:58:2e:c4:08:dd:45:
         18:e9:0d:c0:e8:f3:77:a3:77:68:eb:ca:fa:75:e8:11:53:b0:
         f6:a3:87:64:65:ad:55:2e:15:08:e8:6d:b3:69:03:68:e8:ea:
         44:36:3d:f4:af:b5:01:12:d0:ec:ff:28:bd:b6:21:f2:e8:cd:
         64:df:89:23:df:97:a4:7c:33:57:ea:5e:6c:11:a5:55:2e:29:
         7e:02:88:d9:7a:29:6f:b6:ee:a9:e1:39:65:98:86:d5:fd:52:
         96:75:b3:3f:c8:74:13:e1:9a:dc:e9:d4:04:97:ff:a2:09:6e:
         b8:76:e2:b5:fb:a6:90:2b:62:e3:a0:1a:fe:9c:e2:3e:23:50:
         09:5e:d2:79:2d:c8:24:28:53:72:59:44:25:0e:c2:5c:e1:d7:
         59:04:48:db:b6:00:d7:2b:04:35:de:b2:d3:22:13:0c:0e:fc:
         e2:4f:00:bb:5b:3f:33:be:a0:a0:47:89:6b:85:d0:ba:09:75:
         d0:1c:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----