Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/038a6deaa1454b50133f2a1a19a0d56a2073da06.roa
File:                     038a6deaa1454b50133f2a1a19a0d56a2073da06.roa (raw, json)
Hash identifier:          imTEgUzF/Uo3DkqMDjS5L7soBXdQhoe0E2jqd4Vo96Y=
Subject key identifier:   8B:6C:25:8B:D8:E2:88:55:D5:D0:66:B9:BE:CA:68:95:AC:6D:06:A7
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       161D3D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/038a6deaa1454b50133f2a1a19a0d56a2073da06.roa
Signing time:             Thu 26 Aug 2021 23:26:47 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60bf::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449277 (0x161d3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=038a6deaa1454b50133f2a1a19a0d56a2073da06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:4d:d8:2f:c5:5c:42:95:23:a5:92:6e:58:
                    db:04:66:94:3a:2b:27:ba:ec:27:96:d2:13:6a:13:
                    e9:97:4c:4b:32:4e:f2:b9:c1:e9:a2:e0:78:f8:d0:
                    0f:47:a1:a5:d9:e2:ad:2f:07:ca:d2:84:90:7a:16:
                    aa:d6:c7:77:ca:1a:20:44:37:3a:0e:80:b4:52:f8:
                    3a:72:82:8a:f7:dd:a0:3f:62:fb:12:9c:23:21:80:
                    35:a1:08:a4:26:4c:e7:75:d7:3e:d8:5e:52:07:7b:
                    07:ea:f0:b1:14:49:a5:2c:b2:96:5d:aa:79:da:76:
                    68:e6:af:2b:9e:b0:95:27:67:4e:d5:d6:77:fd:8f:
                    59:db:73:c0:74:d1:07:f4:eb:2a:b9:44:02:a7:ea:
                    2e:75:0c:a7:d3:69:96:fc:6a:be:a1:af:b2:3f:a0:
                    3d:f2:b3:87:1b:9f:47:1e:88:d1:1e:4a:a5:89:33:
                    91:1b:1c:d7:ed:0f:4a:f7:15:6e:ed:e2:5f:74:53:
                    75:43:86:24:df:a9:43:73:16:dc:33:ef:61:ca:fd:
                    4a:83:56:22:9a:c7:16:50:fe:11:23:9e:c2:bd:ef:
                    84:de:35:e4:e5:d0:fb:e1:e1:f9:6c:9b:50:c9:4c:
                    1e:0c:be:f7:f3:49:46:e6:cf:e3:15:79:36:35:7b:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6C:25:8B:D8:E2:88:55:D5:D0:66:B9:BE:CA:68:95:AC:6D:06:A7
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/038a6deaa1454b50133f2a1a19a0d56a2073da06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:9d:fc:cf:7c:98:90:05:11:66:61:2d:b5:84:73:dc:c0:
         95:ee:d6:6c:ca:b1:f9:97:30:15:02:dd:4e:86:b0:09:77:05:
         38:ea:d7:3c:ad:73:90:1b:5f:5a:64:0d:1b:b1:a0:61:72:58:
         a5:6e:fd:7d:bf:c7:57:28:81:3a:ab:5a:0b:71:e4:cb:74:3a:
         de:16:89:9a:a2:c4:8e:40:29:7a:97:ca:f0:80:1c:1e:f5:d6:
         ed:ff:44:dd:dc:e9:5b:18:8b:0b:5f:e3:00:16:fb:b4:e2:e4:
         5b:08:4b:15:a9:4b:5f:5b:ec:3b:49:d6:7e:5f:43:7a:41:44:
         0d:80:a1:b3:f6:eb:2e:83:cb:fa:47:bc:2f:2b:6a:de:2a:1f:
         48:0a:c0:6a:12:6e:87:b6:c4:ad:65:4b:40:a6:0a:77:86:e0:
         0a:e1:e6:54:bf:0d:07:06:b8:6d:ff:71:65:1d:ec:1b:30:1e:
         fb:c6:ad:e3:ab:c0:d5:45:65:84:31:67:33:8a:ea:e4:c6:f3:
         26:6c:46:44:78:7d:6e:97:76:83:6f:12:fe:02:40:62:83:6a:
         49:b1:65:9a:83:47:9a:02:a8:71:d0:4f:d2:26:f1:95:58:71:
         c1:68:21:22:b2:91:81:95:6e:c7:83:3d:65:5e:71:a5:0d:95:
         07:a2:a7:da
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFh09MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI2
MDMwMDAwWhcNMjMwODI2MDMwMDAwWjAzMTEwLwYDVQQDEygwMzhhNmRlYWExNDU0
YjUwMTMzZjJhMWExOWEwZDU2YTIwNzNkYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiGdN2C/FXEKVI6WSbljbBGaUOisnuuwnltITahPpl0xLMk7y
ucHpouB4+NAPR6Gl2eKtLwfK0oSQehaq1sd3yhogRDc6DoC0Uvg6coKK992gP2L7
EpwjIYA1oQikJkznddc+2F5SB3sH6vCxFEmlLLKWXap52nZo5q8rnrCVJ2dO1dZ3
/Y9Z23PAdNEH9OsquUQCp+oudQyn02mW/Gq+oa+yP6A98rOHG59HHojRHkqliTOR
GxzX7Q9K9xVu7eJfdFN1Q4Yk36lDcxbcM+9hyv1Kg1YimscWUP4RI57Cve+E3jXk
5dD74eH5bJtQyUweDL7380lG5s/jFXk2NXsLUQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFItsJYvY4ohV1dBmub7KaJWsbQanMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzAzOGE2ZGVhYTE0NTRiNTAxMzNmMmExYTE5YTBkNTZhMjA3M2RhMDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgvzANBgkqhkiG9w0BAQsFAAOCAQEASnmd/M98mJAF
EWZhLbWEc9zAle7WbMqx+ZcwFQLdToawCXcFOOrXPK1zkBtfWmQNG7GgYXJYpW79
fb/HVyiBOqtaC3Hky3Q63haJmqLEjkApepfK8IAcHvXW7f9E3dzpWxiLC1/jABb7
tOLkWwhLFalLX1vsO0nWfl9DekFEDYChs/brLoPL+ke8Lytq3iofSArAahJuh7bE
rWVLQKYKd4bgCuHmVL8NBwa4bf9xZR3sGzAe+8at46vA1UVlhDFnM4rq5MbzJmxG
RHh9bpd2g28S/gJAYoNqSbFlmoNHmgKocdBP0ibxlVhxwWghIrKRgZVux4M9ZV5x
pQ2VB6Kn2g==
-----END CERTIFICATE-----