Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2c9931440f72f4eba41d05922936b2558e036a7c.roa
File:                     2c9931440f72f4eba41d05922936b2558e036a7c.roa (raw, json)
Hash identifier:          KGIixomF7nyzaUlCG790I1YubhTSaU7Y76gQ/MY4WQY=
Subject key identifier:   3B:99:5B:81:70:96:86:8C:D6:A7:C7:8F:6B:8A:4F:E8:A1:12:10:D5
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       12385F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2c9931440f72f4eba41d05922936b2558e036a7c.roa
Signing time:             Wed 12 May 2021 03:27:52 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:601b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194079 (0x12385f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=2c9931440f72f4eba41d05922936b2558e036a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2a:13:66:36:51:dc:6f:16:19:62:64:df:b1:
                    1d:20:16:8b:a6:76:a3:ff:37:86:c7:e9:d5:95:54:
                    b0:b0:b5:f5:d3:10:f5:99:d5:bc:72:67:6f:d3:a3:
                    d5:97:e9:57:fe:21:4d:c5:79:0f:b4:39:86:44:fd:
                    75:1a:bd:4c:8a:b1:54:63:9e:85:52:89:5e:8d:97:
                    45:6a:7e:05:3b:8b:2b:f3:d9:41:82:a3:3a:04:79:
                    88:a1:3a:92:e2:44:cf:98:13:c4:44:37:3f:48:6a:
                    72:37:21:0c:e7:11:e1:d0:f2:36:54:bb:a8:8c:9a:
                    ad:ba:5b:aa:4e:df:0a:54:48:6b:c3:19:24:0e:1a:
                    3b:ad:e6:d9:8d:10:4c:00:a6:f8:ff:87:21:1b:83:
                    20:ce:af:6f:6e:bd:ac:c8:77:25:02:17:0c:62:bd:
                    6f:bf:df:af:f0:ce:56:f2:28:be:e8:1f:00:92:3f:
                    40:c2:ab:88:31:f5:c3:d3:f3:aa:0a:ab:98:65:f9:
                    6b:4d:7a:98:b2:13:e0:32:02:0e:fc:79:8b:9b:0e:
                    5f:66:a7:b9:3a:fe:c5:44:6f:9f:30:ff:1d:11:5f:
                    ea:54:37:80:d0:3a:44:03:98:97:90:06:9c:b8:c2:
                    1f:22:c4:23:75:21:47:3f:37:58:3d:a5:25:b5:bc:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:99:5B:81:70:96:86:8C:D6:A7:C7:8F:6B:8A:4F:E8:A1:12:10:D5
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2c9931440f72f4eba41d05922936b2558e036a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601b::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:29:2f:f9:01:5d:78:f2:14:a3:a6:e1:77:ea:df:71:08:3b:
         c7:65:0f:7a:07:82:51:11:75:92:c5:15:54:3f:51:d7:7f:a2:
         c0:fe:df:4c:d1:9a:d3:c6:bb:7c:e4:5e:00:3f:67:9a:2f:9b:
         16:54:25:47:c9:4e:f8:e2:05:cf:5a:a5:70:62:83:c2:7a:39:
         aa:10:c7:a8:90:a7:ac:bc:bb:05:ff:06:f0:55:a9:02:64:35:
         91:c5:e1:c5:f9:cd:ad:e7:7d:cc:33:4a:18:da:fc:50:07:63:
         10:b2:cf:e6:20:3a:2e:ba:21:4a:0e:92:2a:40:1d:8e:bb:32:
         59:57:11:b8:38:60:8c:ec:08:2d:84:11:64:1a:28:c1:03:93:
         53:44:59:68:79:ea:7e:73:45:b8:53:eb:0e:9d:37:7d:5b:7d:
         28:fc:42:48:b0:ac:fd:0e:5d:b3:53:8f:ed:19:9e:c6:5d:54:
         c8:ac:ac:33:2d:cd:c9:78:4d:28:89:88:79:b9:2d:03:4b:8b:
         55:2d:7a:9e:aa:71:29:fa:e4:a5:88:7e:fc:c4:05:9e:2e:aa:
         89:8d:33:bb:1a:33:81:0c:8e:22:2a:be:5e:09:86:11:13:5f:
         9a:db:47:1d:c4:a8:12:e6:03:5e:b3:14:1c:42:cc:9f:2d:9e:
         ea:a1:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----