Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2199d46b405acfa64e42ee03be2b45ee882b9ea8.roa
File:                     2199d46b405acfa64e42ee03be2b45ee882b9ea8.roa (raw, json)
Hash identifier:          S9001g1TEKIkp7iro2tFdovQGMkdz+I3dueh8B9hioE=
Subject key identifier:   BC:C3:B2:62:6D:84:96:7F:AF:A5:EB:12:D8:7E:34:97:B9:E7:2B:23
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1612C4
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2199d46b405acfa64e42ee03be2b45ee882b9ea8.roa
Signing time:             Thu 26 Aug 2021 23:19:11 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60bc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446596 (0x1612c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=2199d46b405acfa64e42ee03be2b45ee882b9ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:b3:17:cb:ac:e5:25:cb:bf:0a:91:a0:8d:
                    2f:fa:8f:cb:8b:57:20:f4:c6:e0:a3:7b:38:8b:18:
                    34:91:f4:90:5c:19:41:11:fd:1f:b6:5c:75:f5:3f:
                    e8:6b:e4:14:df:e3:01:27:0f:00:c1:15:48:c3:af:
                    67:3e:de:69:49:3a:3e:a0:94:15:af:90:ee:24:39:
                    be:34:a4:39:5a:a2:8f:8a:4e:ec:28:f2:cd:6e:38:
                    93:14:be:d7:6f:c8:ca:e2:28:5c:30:4f:09:7c:c1:
                    77:5b:cc:fd:45:91:98:0d:26:04:df:7b:9f:7a:c7:
                    64:15:18:99:45:17:f4:67:da:4a:0c:c1:bc:f5:d8:
                    1e:6d:30:87:68:6b:83:4a:e2:67:c7:b6:17:2f:03:
                    42:e7:5b:5c:08:b6:35:7d:26:cf:ed:bf:8e:45:5b:
                    17:2e:e4:ea:92:72:85:0a:21:44:a9:a1:5e:0f:88:
                    31:e2:fe:f3:1e:21:6f:34:3e:02:48:af:ee:0b:07:
                    31:38:71:dc:e8:3c:0c:96:d0:ba:40:dc:47:cb:c1:
                    ee:5b:3d:52:68:d1:e7:88:b7:c4:6b:52:f9:2d:01:
                    03:ed:6c:56:79:05:2d:68:4b:83:ff:4a:57:b8:20:
                    4d:08:7d:3c:a9:b2:a7:99:0c:83:e4:44:89:62:0d:
                    92:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:B2:62:6D:84:96:7F:AF:A5:EB:12:D8:7E:34:97:B9:E7:2B:23
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2199d46b405acfa64e42ee03be2b45ee882b9ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:f4:80:f5:f7:d5:e1:f0:46:82:1e:93:3f:10:8f:4f:73:cb:
         39:a0:e7:93:94:3a:8e:e4:d8:8f:4c:71:e3:d5:24:ec:c7:57:
         08:e8:99:0d:1a:7c:81:ba:17:61:15:80:d1:07:62:5a:a5:62:
         27:ca:3e:a0:dc:c5:75:6e:27:d0:aa:ad:4d:51:18:06:38:26:
         d0:90:a8:53:47:99:43:24:c2:fd:97:c2:5a:ee:56:bb:fe:b3:
         8a:f2:11:61:70:6a:17:68:db:f1:08:39:b3:25:f6:b1:dd:80:
         4f:62:95:21:ee:87:75:a0:cf:bd:67:73:77:27:7d:08:f9:6d:
         1c:db:5f:84:df:b1:3f:fd:5b:65:a7:d1:63:09:9d:e0:c8:da:
         54:99:d3:e8:33:f6:74:81:3a:05:31:ad:6c:7a:46:80:ba:12:
         35:22:c2:87:ac:ac:d1:07:7f:8b:99:af:ca:0c:c7:77:be:88:
         10:29:6a:fd:06:22:fc:5e:c4:16:95:a4:72:47:a7:b6:4c:e6:
         26:be:1b:a4:dc:b3:7a:04:0e:78:65:9b:f0:6f:f5:ec:4f:d1:
         1c:48:b8:c7:2b:50:82:a2:bf:f2:14:6d:a1:d0:52:8d:a3:4d:
         51:92:1a:1e:c8:39:47:ed:0e:c6:a9:9f:ff:d7:f3:ba:d8:36:
         56:89:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----