Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/438d00109415a645a7a75bcae353be205d5027c8.roa
File:                     438d00109415a645a7a75bcae353be205d5027c8.roa (raw, json)
Hash identifier:          d1hfF+TRGRbxUTqAfpdrsadpSWi8sx108omcfsbzxxg=
Subject key identifier:   5C:73:FE:7A:5C:1F:14:70:6B:B8:CC:66:F1:80:17:EC:DA:0D:C7:2A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1375D3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/438d00109415a645a7a75bcae353be205d5027c8.roa
Signing time:             Wed 23 Jun 2021 18:08:28 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6026::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275347 (0x1375d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=438d00109415a645a7a75bcae353be205d5027c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a2:f9:4f:98:ff:32:91:79:65:63:58:3d:35:
                    42:a0:64:b9:13:a1:4d:97:67:d2:76:09:ab:fd:d2:
                    79:fb:db:c3:51:8a:3d:c7:ed:b0:fa:94:a6:f2:dd:
                    71:ab:3c:cc:86:db:d8:71:4b:e2:8c:a0:4f:1c:cc:
                    e5:4d:0c:e7:e3:a2:18:4f:df:14:aa:86:69:d8:93:
                    d6:f1:d2:eb:68:fb:d7:08:c2:a2:10:cf:12:b8:3f:
                    24:ab:45:10:07:bc:54:d5:08:7c:bb:20:55:93:5d:
                    b1:63:7d:2e:b6:59:37:b6:85:6a:95:1f:82:eb:23:
                    fe:85:50:2b:1b:c9:e6:ab:d2:08:5d:6b:e4:c3:d8:
                    a8:e1:89:70:58:7c:0a:40:f8:bf:8d:3a:08:8d:79:
                    c7:35:55:25:ff:6a:ad:35:49:dc:13:7c:38:90:d9:
                    f2:4c:02:d5:b9:bd:f4:96:69:a4:68:98:52:66:e4:
                    cb:35:3f:a8:9e:ea:34:02:52:88:53:50:67:3b:50:
                    34:72:34:1b:ff:96:28:e5:2b:d8:b2:4f:a5:a7:70:
                    1d:1d:12:ea:c4:a6:e3:ce:2c:76:0f:1d:10:6d:46:
                    ae:fd:00:5b:52:42:eb:33:a0:15:8e:3f:4e:d1:42:
                    e3:4b:3b:65:f8:f1:b5:1a:4f:fe:89:de:54:5a:43:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:FE:7A:5C:1F:14:70:6B:B8:CC:66:F1:80:17:EC:DA:0D:C7:2A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/438d00109415a645a7a75bcae353be205d5027c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6026::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:26:ed:2b:09:12:86:3d:bd:89:31:bf:a3:cd:d3:c1:fd:4c:
         66:12:c4:25:f9:ab:6f:93:d1:89:7b:7d:f7:8f:74:10:b0:aa:
         3d:19:f4:d8:a3:79:52:c9:bc:4e:7b:74:61:6e:d1:63:a8:4c:
         8b:0a:de:7e:f8:e9:7a:2c:78:2f:7e:92:32:51:5c:d2:92:8a:
         65:4c:d5:4f:9e:41:3d:60:8d:ce:76:d4:0f:42:2e:92:bd:a7:
         ac:ea:64:66:ae:e4:84:03:96:6e:9c:1f:b5:ec:98:ca:34:46:
         1e:14:98:46:24:2d:d1:61:da:1b:ab:69:fc:51:a6:22:14:d9:
         c8:41:47:3a:4b:95:50:7a:00:e6:a6:82:a9:14:37:d2:6f:68:
         78:ce:e7:04:1a:f8:48:85:60:9b:a8:c5:1a:fc:1a:82:e0:57:
         c7:32:74:56:0b:05:f3:c4:f0:18:38:de:b1:a7:4a:84:5f:f4:
         cc:bc:fa:cb:79:00:ba:43:ba:72:ae:2f:5f:9b:0a:64:e1:aa:
         cd:63:94:63:3c:19:29:b5:50:27:f7:d7:d2:12:5a:eb:a6:be:
         45:f3:d7:b0:17:2d:45:ec:d7:9f:f0:74:a8:e1:6e:ec:83:c9:
         f5:09:75:fc:fb:f0:0d:2d:f4:cc:2e:b3:19:6c:14:3f:9e:78:
         a6:00:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----