Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1df95098b96fc8a55c32e316e744d6d4a3247cc9.roa
File:                     1df95098b96fc8a55c32e316e744d6d4a3247cc9.roa (raw, json)
Hash identifier:          39vRKTgTNAj0k+0EgGZI3C5S2MA1/QBda1+ZdzwN4+w=
Subject key identifier:   D2:F3:36:22:D6:A0:9D:C3:64:64:ED:CE:A9:8E:45:EF:D2:43:0E:C8
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15E338
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1df95098b96fc8a55c32e316e744d6d4a3247cc9.roa
Signing time:             Thu 26 Aug 2021 22:31:57 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434424 (0x15e338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=1df95098b96fc8a55c32e316e744d6d4a3247cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dd:80:d4:b5:66:7c:f6:a6:32:2d:0b:37:9a:
                    a2:80:2a:ad:07:d8:04:03:9b:19:6f:48:69:d4:64:
                    63:f0:32:49:99:82:51:1b:22:0d:32:81:26:c6:7a:
                    2e:c6:08:82:9b:5f:60:d3:a0:78:66:08:49:9d:98:
                    9d:5b:e1:0b:73:bb:38:5b:fb:2a:82:77:1d:c0:55:
                    84:45:b7:9d:1c:dc:3c:79:7a:73:8d:5f:46:ad:8e:
                    2a:c8:2e:8e:1c:b2:8c:c0:2b:e2:f6:02:d4:22:a5:
                    6e:1c:4e:a7:d8:27:78:30:8d:ac:a3:ff:df:4c:52:
                    17:e0:d9:fe:04:4b:bd:e8:d7:f2:cb:e1:ff:a7:9f:
                    a9:e2:c4:20:c4:2c:cd:44:b7:d6:89:b0:b1:e4:87:
                    f3:45:71:ee:d2:a5:a7:5f:dc:28:82:45:02:e6:21:
                    c4:8c:7b:4e:3c:40:31:7b:c4:a4:4e:18:61:4b:4b:
                    4e:26:d6:12:7a:a8:6b:6c:bb:92:0b:25:d2:df:64:
                    0f:e0:e5:0a:38:d8:32:31:7d:35:ec:cd:c3:5a:64:
                    90:7b:e4:ca:fe:50:78:2b:2f:d5:b2:02:2d:76:b9:
                    c5:3c:f2:d3:72:ef:b8:c4:26:cd:ef:60:c9:64:41:
                    22:70:e3:ad:b1:24:6c:cb:a9:f6:d8:e8:e0:29:85:
                    8d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F3:36:22:D6:A0:9D:C3:64:64:ED:CE:A9:8E:45:EF:D2:43:0E:C8
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/1df95098b96fc8a55c32e316e744d6d4a3247cc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:db:e5:4d:f8:94:e7:32:3b:17:09:be:3f:af:25:f2:fd:
         11:8e:ae:a8:31:7a:97:82:38:e7:6a:5e:7b:66:45:d6:7f:c1:
         6a:d8:f4:89:ae:d7:9a:cb:10:56:69:c8:aa:95:e8:3b:94:2b:
         3d:95:4c:3f:17:70:53:64:7d:45:87:64:db:31:4e:73:40:98:
         bc:2f:7a:13:ac:dc:fd:e6:f1:18:7a:f8:1e:14:ae:2f:47:bf:
         d0:5a:54:ab:a2:6c:bd:ce:d3:f1:fc:3d:ed:ab:76:cd:54:11:
         0e:11:4b:9f:88:6b:45:26:29:eb:74:64:bd:88:39:fa:8a:3b:
         d3:41:7f:b4:74:0e:d1:23:81:11:21:e1:1f:84:f2:98:71:3c:
         24:ef:d7:88:7a:d2:1f:f0:39:88:fc:71:2c:fd:84:bd:5d:ab:
         56:c4:9d:89:aa:09:9f:13:fa:ca:91:ae:3b:37:69:cd:0b:f8:
         4f:36:d3:e3:7f:69:d8:74:86:9c:b1:2c:4b:b9:61:f3:1b:dd:
         3f:f8:14:3e:a8:67:e1:cb:f1:0e:16:51:e3:8d:4c:ef:d4:7d:
         17:d7:3a:0f:de:40:21:03:e9:19:df:7a:3b:1f:43:b4:63:60:
         d2:75:6c:45:3f:81:e2:f2:d5:a3:08:ac:42:60:96:cc:2f:3a:
         ac:44:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----