Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/086f382179340b4dd0da995a3390cd025971473f.roa
File:                     086f382179340b4dd0da995a3390cd025971473f.roa (raw, json)
Hash identifier:          DvXIaqI9nFS5QPcmkMdsGTk1j5R+F2lI0bfLYQnoHSU=
Subject key identifier:   45:EB:C3:D5:17:D1:26:65:17:AD:8C:81:53:48:F2:2B:B6:F3:2A:6E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F85C2
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/086f382179340b4dd0da995a3390cd025971473f.roa
Signing time:             Wed 24 Mar 2021 14:43:53 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017282 (0xf85c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=086f382179340b4dd0da995a3390cd025971473f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cb:7d:81:34:5f:52:1b:a2:ff:d5:a5:77:04:
                    a0:a6:08:cd:e9:7f:fe:90:a8:62:7a:b3:02:87:80:
                    8e:92:99:ab:8d:be:8d:40:18:52:8f:ba:ef:af:f0:
                    d1:4d:d6:a1:9a:1a:83:22:96:29:c7:5b:02:3c:f6:
                    c8:46:f4:71:c6:ae:cb:98:80:cb:8c:7e:8d:d1:c5:
                    5c:83:00:53:56:d4:5b:5a:f3:bd:c7:69:b9:42:de:
                    08:cd:e8:b4:69:e2:8d:2f:20:a8:78:36:8d:02:67:
                    52:30:29:12:f9:03:a8:fb:a9:96:9f:6d:76:15:28:
                    95:bd:0a:e3:a1:74:0d:48:b1:8c:9d:a7:a8:26:47:
                    d3:6a:17:80:9e:50:ae:33:e8:3d:4d:19:b4:67:1d:
                    5f:1c:7d:22:86:35:97:61:a5:e0:19:fd:68:ed:f9:
                    f6:32:e4:92:5e:1d:54:f6:51:93:48:88:23:b1:4a:
                    e5:5e:7d:8e:6b:8e:7e:3f:40:b9:a0:69:38:f5:40:
                    84:01:ef:15:aa:07:8d:a3:73:b6:8f:ee:f3:b4:71:
                    38:2c:56:a3:97:1b:48:c6:a9:ab:06:9e:6a:86:06:
                    ff:45:7d:c2:5e:3d:f8:37:bc:12:2b:96:c2:f4:fd:
                    e1:5a:10:e7:a2:f9:3b:c6:1f:7c:9d:23:3f:45:7f:
                    69:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EB:C3:D5:17:D1:26:65:17:AD:8C:81:53:48:F2:2B:B6:F3:2A:6E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/086f382179340b4dd0da995a3390cd025971473f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6016::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:b5:ea:88:00:4b:8a:f3:6b:ae:65:25:a1:6e:48:d4:74:20:
         05:3e:94:17:9b:97:8f:b9:6b:a9:41:37:ed:d9:14:1c:7b:15:
         46:d6:38:8c:82:20:ee:3f:9a:30:05:af:e2:e3:87:9f:6b:67:
         d6:1d:45:5a:36:f4:3c:34:76:60:61:7b:b1:74:1d:f6:1d:f5:
         bb:c2:22:b4:52:c7:08:e1:34:80:cd:7d:db:cd:5b:f5:69:79:
         88:55:3d:3d:3e:0a:54:b2:32:9e:3f:66:45:ff:be:e9:6f:7b:
         13:0d:d2:3a:26:d5:55:3a:15:bf:cd:47:ae:6d:d2:41:e1:fc:
         6b:75:92:79:6c:7f:21:d2:51:fb:a8:ad:1a:56:f7:57:ae:3d:
         7d:69:67:b0:c2:f0:09:75:8d:e4:77:7f:29:64:05:be:f7:d1:
         d5:c5:6d:18:6c:21:73:96:7d:c1:15:bc:e6:b5:84:0b:e3:3d:
         44:bb:e3:e8:64:81:15:f5:3c:e6:56:4b:7e:19:5d:00:6b:a9:
         31:69:54:2a:57:f3:cf:36:2d:bc:31:5d:6c:b4:6d:4a:e9:75:
         d7:8a:24:61:ee:30:2a:0f:a5:ba:27:32:16:80:e1:c4:a8:b9:
         63:63:e7:52:ab:a0:91:e3:21:c9:a8:72:00:a7:65:ad:b4:c6:
         df:81:c2:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDD4XCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEygwODZmMzgyMTc5MzQw
YjRkZDBkYTk5NWEzMzkwY2QwMjU5NzE0NzNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm8t9gTRfUhui/9WldwSgpgjN6X/+kKhierMCh4COkpmrjb6N
QBhSj7rvr/DRTdahmhqDIpYpx1sCPPbIRvRxxq7LmIDLjH6N0cVcgwBTVtRbWvO9
x2m5Qt4Izei0aeKNLyCoeDaNAmdSMCkS+QOo+6mWn212FSiVvQrjoXQNSLGMnaeo
JkfTaheAnlCuM+g9TRm0Zx1fHH0ihjWXYaXgGf1o7fn2MuSSXh1U9lGTSIgjsUrl
Xn2Oa45+P0C5oGk49UCEAe8VqgeNo3O2j+7ztHE4LFajlxtIxqmrBp5qhgb/RX3C
Xj34N7wSK5bC9P3hWhDnovk7xh98nSM/RX9pvQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFEXrw9UX0SZlF62MgVNI8iu28ypuMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzA4NmYzODIxNzkzNDBiNGRkMGRhOTk1YTMzOTBjZDAyNTk3MTQ3M2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgFjANBgkqhkiG9w0BAQsFAAOCAQEAb7XqiABLivNr
rmUloW5I1HQgBT6UF5uXj7lrqUE37dkUHHsVRtY4jIIg7j+aMAWv4uOHn2tn1h1F
Wjb0PDR2YGF7sXQd9h31u8IitFLHCOE0gM19281b9Wl5iFU9PT4KVLIynj9mRf++
6W97Ew3SOibVVToVv81Hrm3SQeH8a3WSeWx/IdJR+6itGlb3V649fWlnsMLwCXWN
5Hd/KWQFvvfR1cVtGGwhc5Z9wRW85rWEC+M9RLvj6GSBFfU85lZLfhldAGupMWlU
KlfzzzYtvDFdbLRtSul114okYe4wKg+luicyFoDhxKi5Y2PnUqugkeMhyahyAKdl
rbTG34HCOw==
-----END CERTIFICATE-----