Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/201a24c5ceb92018ce7cc15bc8b77140367e3621.roa
File:                     201a24c5ceb92018ce7cc15bc8b77140367e3621.roa (raw, json)
Hash identifier:          GPH3gMDpW1wpy066v5/J4NX61wAEW0nB+nCsPfBYVF4=
Subject key identifier:   98:7B:BD:13:E4:A5:4B:86:0C:9F:47:3F:30:C4:50:71:43:7E:27:05
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F808D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/201a24c5ceb92018ce7cc15bc8b77140367e3621.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015949 (0xf808d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=201a24c5ceb92018ce7cc15bc8b77140367e3621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:21:6b:09:b9:39:3e:96:f9:b4:0f:ad:55:
                    6a:44:45:4b:f1:cc:88:5a:c1:05:f2:a1:ea:a3:d3:
                    0d:4c:30:6c:af:60:8e:4a:f3:cf:24:36:45:bc:84:
                    05:9d:58:f8:c7:30:13:c0:cb:fd:a4:9c:2e:4c:16:
                    e2:cc:9a:ca:87:41:db:92:b0:da:51:67:2a:82:0e:
                    4a:72:5d:00:0d:3c:3c:e9:59:60:4e:8d:55:17:c5:
                    b0:f5:c9:1d:f1:a2:9b:ae:5b:de:f5:b4:9e:fa:6b:
                    ff:33:94:c0:cd:06:f6:7c:d4:2f:06:26:b4:b3:43:
                    93:90:50:41:9d:f1:97:f9:9a:6d:87:df:1d:b9:34:
                    d3:f3:59:65:f0:2d:f5:b8:7c:4c:ea:67:49:62:0a:
                    2a:02:77:65:f6:89:d2:85:8c:06:70:7f:b9:f0:ff:
                    f2:cd:d4:f0:bd:6e:20:15:6a:b9:54:7c:91:b0:65:
                    9e:29:5d:ca:ae:70:e5:a0:b2:76:50:06:6f:f1:b5:
                    8f:25:95:86:25:53:aa:2f:53:66:8e:81:af:2f:6c:
                    23:38:27:38:9b:ce:9e:7b:5b:77:5d:5d:2c:89:42:
                    53:f1:4e:e2:af:20:4a:71:11:7a:df:a3:90:1b:3a:
                    a0:bd:de:6f:b9:57:c9:29:cc:8f:66:c4:b4:5f:e3:
                    28:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7B:BD:13:E4:A5:4B:86:0C:9F:47:3F:30:C4:50:71:43:7E:27:05
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/201a24c5ceb92018ce7cc15bc8b77140367e3621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6014::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:b8:2f:2a:95:54:45:37:d2:1f:7c:e9:a8:0e:76:4e:5d:b1:
         5c:c1:ad:95:34:4a:83:af:77:9e:45:dd:6e:81:52:ea:92:16:
         2a:b7:87:8a:2b:9b:50:66:4d:c6:ce:10:eb:6b:0f:64:83:4e:
         91:d9:8c:82:4f:16:4b:0e:20:64:71:ee:5e:73:46:ab:ff:6d:
         05:86:5e:a7:54:37:2a:69:74:ae:d1:68:6f:fe:8a:b8:63:f8:
         2c:07:dd:24:33:8d:5b:7c:c7:26:69:bb:2e:2c:42:db:27:ed:
         98:99:ca:29:78:95:c8:65:4c:91:f0:fc:da:be:34:61:fa:9c:
         a8:4c:94:78:b7:b1:99:b2:a6:61:55:90:88:a2:51:ac:dc:c9:
         66:de:0f:c6:07:2d:05:ea:cd:07:a8:fd:b1:cb:81:04:27:0e:
         b2:2f:8c:d6:f6:4b:15:2c:f2:0a:05:ae:85:3e:95:10:ce:bf:
         78:22:5f:5e:ba:86:b7:e8:60:ef:67:3b:06:9b:24:c1:c0:24:
         ac:a0:8b:7c:e1:07:1d:2c:4b:ec:84:4a:ca:7a:18:49:ba:7f:
         ce:90:9e:36:11:96:60:c2:45:21:70:95:89:dd:74:f7:3d:00:
         a1:d2:29:6f:97:18:35:f0:29:07:8c:e8:bb:e7:97:81:50:25:
         01:bf:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----