Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37d7bf288e24cae83d6d9d053df0db9695612a9e.roa
File:                     37d7bf288e24cae83d6d9d053df0db9695612a9e.roa (raw, json)
Hash identifier:          YOPz6T4+QTf3o32iyOFdtA6reYRNZ9lay3MaZDRJiwg=
Subject key identifier:   18:2B:C2:20:4E:12:9D:FA:2D:14:75:19:3C:EE:95:A8:BF:62:84:C0
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15D6FB
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37d7bf288e24cae83d6d9d053df0db9695612a9e.roa
Signing time:             Thu 26 Aug 2021 22:22:44 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:605f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431291 (0x15d6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=37d7bf288e24cae83d6d9d053df0db9695612a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:14:97:f8:f8:fb:d7:40:58:23:f1:70:b6:
                    f0:e7:ce:ee:38:4e:fe:b7:3b:e5:e3:37:07:e1:04:
                    1e:2c:ae:10:36:26:c4:0c:7a:db:bf:f2:b4:cc:06:
                    13:71:bd:9a:92:52:09:9d:cf:42:22:e3:ec:30:ce:
                    81:49:18:8a:67:b5:c9:d3:60:c5:e0:f1:69:ad:9f:
                    31:45:e6:fc:00:30:b4:b7:9e:66:10:8e:24:1f:1e:
                    bf:fb:94:92:ac:17:1a:13:0b:65:ad:6b:76:13:eb:
                    9d:7d:a8:20:e7:34:21:2e:07:b6:eb:99:e6:2c:00:
                    b8:c3:07:1a:7a:d0:3a:cf:f3:f2:d6:63:57:d5:90:
                    41:22:2f:5e:3f:ee:e9:00:d0:0d:5a:f7:49:2d:3a:
                    6e:37:fe:d9:83:ba:6d:52:63:97:bd:ea:a7:ee:86:
                    ac:00:40:1d:b6:65:2c:07:7e:01:1a:7b:04:6f:60:
                    60:69:20:f2:4e:de:d3:73:2c:df:b4:61:ad:7f:bb:
                    1a:04:3a:4e:64:a7:cb:32:d2:fd:e8:ed:0f:10:d1:
                    0f:9c:d8:14:14:4c:56:b1:50:04:38:b3:bc:fe:d8:
                    0d:0a:00:14:c1:a8:39:69:da:ed:bf:d4:f4:04:33:
                    1c:d4:7e:79:58:f0:44:16:c7:a5:3e:9d:04:b3:49:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:C2:20:4E:12:9D:FA:2D:14:75:19:3C:EE:95:A8:BF:62:84:C0
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/37d7bf288e24cae83d6d9d053df0db9695612a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:605f::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:36:cd:31:c9:16:fe:08:a9:f3:ee:89:a6:82:1c:cc:02:fa:
         1e:53:00:30:9c:e7:3d:fc:7c:4b:09:b8:32:a7:25:92:47:57:
         8b:20:58:c8:10:96:84:1d:1d:3a:85:b6:1e:81:89:a4:ba:a5:
         d7:f9:03:63:ca:71:7c:f2:b3:69:31:48:1e:b3:89:dd:b9:99:
         3d:dd:71:ee:b5:ec:0b:f0:7e:4e:42:34:c1:a0:e3:c0:4f:b5:
         71:1b:22:e0:62:7b:d3:4e:5d:47:f1:ec:ef:f0:4e:ca:b1:c6:
         44:5d:d3:ab:26:c4:5e:ce:4a:e2:0f:2b:32:fb:22:c5:bd:8c:
         1b:f9:eb:ec:aa:fe:d9:3f:d7:24:f1:6c:28:a5:19:49:a9:b4:
         a4:c4:c7:94:48:b7:5f:ca:c4:e8:31:1b:7c:2d:75:71:47:e3:
         bb:32:66:53:fe:45:aa:78:cf:74:fb:91:69:d7:81:31:d1:d3:
         0e:09:51:0f:04:bc:2c:87:48:f0:b6:be:da:47:f2:17:2f:ce:
         4b:27:b5:97:6f:7f:af:fe:1f:af:ed:fd:1b:3f:09:c6:b7:fd:
         af:f8:e9:bf:34:db:ef:58:06:fc:b9:f6:8e:00:9a:a9:31:a1:
         78:46:f3:d0:0b:d4:02:c8:83:36:63:61:51:cf:73:52:dc:cb:
         59:c0:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----