Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/bbb59a2092a1ea1d789baf5cedd4d62d3ee1ad38.roa
File:                     bbb59a2092a1ea1d789baf5cedd4d62d3ee1ad38.roa (raw, json)
Hash identifier:          2pHNY4v4q3Fpqr48BI8gZ9LYtjLZV/TaI1eSUO4PmNc=
Subject key identifier:   D7:E2:BC:F9:C4:E5:D9:B9:BE:1C:29:05:9F:14:4B:70:79:73:94:81
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       0C1206
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/bbb59a2092a1ea1d789baf5cedd4d62d3ee1ad38.roa
Signing time:             Wed 15 Feb 2023 01:16:53 +0000
ROA not before:           Tue 14 Feb 2023 01:15:43 +0000
ROA not after:            Sat 15 Feb 2025 01:15:43 +0000
asID:                     3640
IP address blocks:        2801:c4:f8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791046 (0xc1206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Feb 14 01:15:43 2023 GMT
            Not After : Feb 15 01:15:43 2025 GMT
        Subject: CN=bbb59a2092a1ea1d789baf5cedd4d62d3ee1ad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:3e:3b:b4:a1:f3:a3:d3:50:4c:f1:79:34:
                    d2:56:b7:25:56:dd:3a:19:b8:77:e1:25:d7:65:1e:
                    e4:93:ea:b4:00:e3:19:f1:28:f3:b8:59:da:ba:38:
                    45:34:b0:15:01:03:65:8e:d6:31:9a:c0:39:5e:30:
                    df:8b:d6:5a:5e:da:0d:5e:2e:27:b2:fc:ce:30:b5:
                    5d:c1:f2:ad:9e:ce:35:6c:73:fe:51:2e:22:1b:1e:
                    78:be:78:8f:94:c1:b2:88:20:ad:08:72:02:a8:31:
                    b4:c5:8b:4e:64:9d:48:72:35:fa:45:db:44:3d:86:
                    34:2d:a4:a2:d6:5c:c8:96:92:d5:98:29:4a:64:ae:
                    59:9d:9c:cb:cb:a0:f7:ac:99:5c:15:10:c2:a4:2e:
                    93:05:3d:f6:49:f2:5d:48:9e:85:90:e8:85:3c:f0:
                    25:46:e9:51:47:42:fb:12:10:ec:b3:56:f6:1f:9f:
                    a9:82:fc:a4:75:31:81:d6:fa:bd:43:a3:82:c8:fd:
                    86:2a:fe:87:f9:72:7e:69:8f:cb:6a:77:bf:28:2c:
                    91:0b:aa:07:e2:82:c8:96:51:6f:e6:27:72:97:e8:
                    fb:ac:aa:85:cf:fc:ec:2a:52:9b:a9:f0:69:c5:a0:
                    1e:89:ea:03:28:ec:58:d7:f0:86:a1:f3:cd:b0:e2:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E2:BC:F9:C4:E5:D9:B9:BE:1C:29:05:9F:14:4B:70:79:73:94:81
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/bbb59a2092a1ea1d789baf5cedd4d62d3ee1ad38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:f8::/45

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:e6:0b:21:2a:0c:80:9c:ae:6c:86:32:86:b8:d1:51:04:
         05:df:66:e3:8c:3f:38:87:95:f3:cc:91:02:e3:57:7a:b0:b1:
         92:93:c2:2d:0b:9a:7a:b7:36:f7:60:8b:ed:92:1d:9d:7e:b8:
         23:36:8a:50:c4:c2:2c:5b:74:b6:7c:27:e2:45:3e:c8:1b:78:
         e5:b8:a8:a7:8f:12:6d:25:02:22:0b:72:28:59:f7:18:c7:76:
         dc:ee:41:bd:48:9c:2a:b3:d9:8b:b9:28:6c:58:24:9a:05:17:
         c0:bf:ce:34:54:ee:58:84:ed:f9:17:06:d1:23:fb:7f:ba:a3:
         c9:23:ea:bf:54:d6:ac:ca:04:84:bb:e8:7e:cf:c7:ac:9d:83:
         ab:e4:b5:0d:f0:7c:f2:cd:2b:d8:49:8d:ce:c5:36:9f:ce:11:
         91:71:7d:34:32:de:98:c3:e3:31:3f:97:88:86:8c:f1:b4:9a:
         7e:c4:15:d4:bc:62:df:1c:97:2c:44:10:d1:32:36:8d:e2:c6:
         69:cf:47:4a:b6:d0:cf:4a:07:ec:38:44:6e:bb:44:57:63:a3:
         8e:e6:dc:26:35:53:8e:aa:7d:4b:d1:c6:f5:ad:94:b3:84:23:
         2b:99:9d:3b:88:3b:2e:b6:2b:dc:ce:07:a4:b2:ea:43:28:93:
         64:b3:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----