Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2eb75701369e06b130e7419d78068ec96e10d688.roa
File:                     2eb75701369e06b130e7419d78068ec96e10d688.roa (raw, json)
Hash identifier:          S9RIEu2ihryH/awi1f4kBuhML7pnT/frQKcJjbCBGS8=
Subject key identifier:   9E:7F:15:4E:75:3C:18:6E:88:57:E7:0E:FA:A9:B1:F4:03:C6:E4:1D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       12503C
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2eb75701369e06b130e7419d78068ec96e10d688.roa
Signing time:             Wed 12 May 2021 03:44:27 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200188 (0x12503c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=2eb75701369e06b130e7419d78068ec96e10d688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:47:3d:66:ae:61:0a:41:1b:f1:9c:02:b9:
                    eb:1c:f9:bc:82:38:5f:0b:92:9a:e1:39:c4:a8:43:
                    79:36:f5:9d:eb:a7:30:6f:37:f9:66:07:b0:36:ef:
                    d1:7f:8e:41:1b:7a:20:7c:a0:09:11:cb:fe:16:56:
                    08:11:1a:1c:96:42:ca:50:89:0c:83:01:d5:2a:2f:
                    ec:6b:2f:66:db:0e:fc:f1:cc:37:aa:f2:a3:da:43:
                    4e:3c:67:8d:c2:a5:bb:c5:df:19:18:e4:92:5b:6f:
                    36:ff:be:67:59:5d:67:2d:ea:29:b5:c0:15:f4:21:
                    5a:92:27:39:b8:cf:77:8a:5b:94:97:48:e5:bc:69:
                    be:df:e0:e4:72:13:d6:dd:34:69:05:a3:ad:af:bc:
                    29:26:a0:8d:36:60:e9:06:70:fc:99:54:a6:95:1e:
                    fd:85:f5:dc:a4:a5:74:a9:c5:17:48:bf:52:54:9b:
                    8f:92:23:7f:1a:86:4a:c1:92:a0:89:43:46:33:96:
                    c2:02:9a:34:36:14:0f:b4:dd:3e:90:8e:4e:a9:82:
                    28:02:d4:9f:c9:b1:c7:ec:6d:ec:4c:05:0b:1e:2f:
                    9b:f4:e9:dc:52:c2:76:5f:04:48:fc:3f:d2:a4:48:
                    7b:9c:fa:17:cf:4d:e7:97:ef:1a:3b:94:20:dd:97:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:15:4E:75:3C:18:6E:88:57:E7:0E:FA:A9:B1:F4:03:C6:E4:1D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/2eb75701369e06b130e7419d78068ec96e10d688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6020::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:aa:3a:79:c5:b6:57:9f:c4:6f:07:63:98:92:cb:48:4b:26:
         da:e2:6b:cb:c3:29:6c:65:14:b7:3e:4f:8d:79:d4:4b:f0:ed:
         7c:fd:e8:f6:d2:d4:53:3b:1f:3a:3c:d1:f0:22:d0:78:f3:0f:
         f2:fd:1f:b9:ab:d4:a7:96:58:72:5f:d4:8a:a2:6a:9f:1e:8e:
         fa:40:8b:df:e2:3e:4e:3b:44:d9:24:5c:e4:52:2e:c3:bb:4d:
         ca:6e:01:ce:50:db:27:a3:bc:01:89:68:79:11:da:b1:6d:ab:
         96:8c:35:ed:de:0b:31:45:17:de:8f:df:0b:f1:67:c3:a7:94:
         f7:c9:74:1f:33:37:96:d9:e8:74:87:32:fb:3f:ed:f6:9c:4a:
         f0:ff:15:9d:dd:bf:e1:cb:b4:b6:ed:8c:80:ff:30:95:47:c1:
         f0:f0:2b:d4:62:89:b6:14:dd:f4:4c:0a:17:91:a9:1d:2a:64:
         85:e4:50:26:9e:00:5d:b4:83:7a:3c:1a:e9:7a:84:a1:69:7c:
         eb:8c:24:59:ca:ff:ed:12:f9:be:65:4c:6a:f8:94:b6:48:27:
         96:63:49:e2:57:01:9b:71:5f:1a:40:a2:69:74:d9:f4:6e:ba:
         76:5a:06:6b:78:62:25:5b:0d:f7:d8:7c:58:d8:9b:e7:13:14:
         59:96:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----