Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/263b705aa92a4c4ed2e032c1febe41cab9d11349.roa
File:                     263b705aa92a4c4ed2e032c1febe41cab9d11349.roa (raw, json)
Hash identifier:          mXAACcvs8ArT8rAx6vChgemioOQe0SHjsbHLP17s65k=
Subject key identifier:   78:B8:D7:DD:D4:2C:EA:A1:70:F0:02:49:9E:CC:D7:51:E6:6A:62:09
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15EF69
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/263b705aa92a4c4ed2e032c1febe41cab9d11349.roa
Signing time:             Thu 26 Aug 2021 22:50:24 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437545 (0x15ef69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=263b705aa92a4c4ed2e032c1febe41cab9d11349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:c6:f8:73:a1:1a:36:ab:5d:93:9a:eb:29:
                    28:28:37:70:1a:02:80:29:34:16:d5:12:db:f8:e6:
                    5c:82:8e:e7:29:a0:cf:06:db:90:57:df:79:2b:44:
                    c0:ac:23:d1:df:b6:d4:5d:b8:03:48:a9:0f:d3:8e:
                    9a:74:18:45:8a:3c:19:71:c3:60:d0:9c:68:c2:6c:
                    ad:64:8b:2f:de:20:02:b4:89:d9:ce:7a:71:aa:ff:
                    ce:54:46:6b:0f:b0:af:0d:d9:05:ce:ca:35:aa:47:
                    8b:53:15:92:f4:14:55:9a:61:ae:d2:1b:91:97:78:
                    01:0f:40:b6:ab:3b:b0:05:bb:17:af:d1:a5:b3:dc:
                    6c:9d:20:df:99:5f:5b:bd:27:86:b6:8b:b2:31:8c:
                    77:33:51:3a:15:f9:18:5b:d3:bf:88:8b:e0:06:c0:
                    96:01:8d:81:ee:56:ff:a4:a4:f6:47:82:8d:c3:f0:
                    39:a1:b2:59:ff:a2:42:0a:52:f6:a7:7b:ab:98:24:
                    1b:33:8e:22:bf:81:14:b6:c2:63:65:c4:8d:bb:30:
                    bc:c8:4d:3e:d5:c4:ba:a9:23:71:3f:40:f8:11:6a:
                    88:72:14:ad:23:85:12:00:fd:ad:9a:26:08:3b:2e:
                    3f:f4:55:a5:f4:22:cc:f2:40:d8:6e:c1:4c:c3:6a:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:D7:DD:D4:2C:EA:A1:70:F0:02:49:9E:CC:D7:51:E6:6A:62:09
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/263b705aa92a4c4ed2e032c1febe41cab9d11349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:c7:01:f6:74:3f:c2:e2:02:73:fb:4b:e4:bf:bf:63:0b:
         e2:98:b0:24:8b:e8:f3:fe:43:11:f2:b3:82:58:5f:cc:5e:9b:
         28:30:bd:57:d0:85:6a:fc:16:5d:9f:0b:9f:ec:e4:9b:4a:31:
         f7:52:56:8c:02:f7:e3:5e:cd:03:10:53:f9:8d:ac:df:6c:23:
         d1:74:1c:1b:73:5f:7e:78:b8:2d:02:df:2c:79:5f:d7:26:d7:
         74:ed:0c:0f:93:65:7e:fb:a3:f2:81:8b:92:c5:92:8c:67:6d:
         cf:b9:a5:f6:cd:50:be:8e:f3:65:df:84:1d:14:ba:e1:d6:8e:
         bc:6b:53:6f:ca:43:df:8c:5e:b3:13:b5:66:5d:59:1f:f1:bc:
         4a:91:7e:86:64:34:94:37:58:40:74:31:f0:0b:26:48:8c:ae:
         bc:7e:bf:83:7a:35:85:ee:99:eb:41:63:f3:d8:4f:40:3f:d6:
         a8:44:7b:b5:60:1a:f9:57:f8:8c:0b:14:3d:ef:34:41:39:0e:
         cd:c0:04:be:37:49:c1:71:35:73:d5:26:0f:e6:45:20:3d:76:
         48:60:09:83:3f:e0:39:29:f8:d4:f6:fa:0e:6a:a5:e0:a2:f3:
         eb:13:60:21:6a:45:e6:22:1e:a6:6b:fe:dc:47:97:62:c5:e7:
         71:2d:5d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----