Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4ecbd6872c56b5489cc8336538a3b06fd5978790.roa
File:                     4ecbd6872c56b5489cc8336538a3b06fd5978790.roa (raw, json)
Hash identifier:          d+gEfTJy2wc4EeMs5UYhmr6E3zEWaMZibIDb/oGj43c=
Subject key identifier:   A8:EF:BD:BC:F7:C1:BF:1A:84:5B:E0:7F:83:36:96:DA:2E:17:DD:3B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       26157B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4ecbd6872c56b5489cc8336538a3b06fd5978790.roa
Signing time:             Thu 11 May 2023 08:31:10 +0000
ROA not before:           Wed 10 May 2023 08:31:10 +0000
ROA not after:            Fri 09 May 2025 08:31:10 +0000
asID:                     278
IP address blocks:        2001:1218:601e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2495867 (0x26157b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 10 08:31:10 2023 GMT
            Not After : May  9 08:31:10 2025 GMT
        Subject: CN=4ecbd6872c56b5489cc8336538a3b06fd5978790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:81:32:e0:b1:ed:e1:5a:f5:b0:0a:8d:a2:
                    c2:b3:c2:d3:26:6c:f1:65:d9:6d:d5:2c:4f:7e:a8:
                    4b:c8:c1:89:62:bd:8f:b8:fc:58:ca:6b:b5:c7:81:
                    ed:b5:d5:bd:52:b1:04:c0:04:ab:14:91:b8:b0:c0:
                    69:b7:9b:87:b4:78:60:8a:c0:56:3b:f9:bc:ae:c5:
                    0b:1d:2a:70:66:c8:b5:f2:45:c4:e7:23:ce:dc:f8:
                    2f:13:f4:81:53:af:aa:15:03:15:5d:d9:b5:47:99:
                    f5:c6:76:1f:01:a6:74:76:0f:95:b1:28:49:6f:fe:
                    a5:9b:12:62:77:5f:e9:73:87:6a:ab:b6:ff:74:39:
                    07:4e:b9:53:6a:27:5d:95:c3:a5:09:dd:8f:62:30:
                    da:6f:d1:29:16:36:44:c1:14:e4:7a:fe:79:1a:f3:
                    23:d7:ef:7f:a3:7e:0c:26:b5:79:f8:75:8a:0d:51:
                    ce:4b:ad:14:0d:ca:5a:6e:6f:59:2e:b5:29:34:23:
                    92:d8:68:7d:53:24:93:cf:75:d6:99:f8:aa:9f:a9:
                    66:4e:ae:a0:bf:7a:28:55:dd:94:9a:2d:1b:e8:25:
                    20:bb:aa:a1:97:47:d7:50:dc:b5:65:e1:7d:a7:31:
                    65:20:f8:4c:1a:1e:d7:c7:b1:3b:de:10:a6:e2:82:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:BD:BC:F7:C1:BF:1A:84:5B:E0:7F:83:36:96:DA:2E:17:DD:3B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4ecbd6872c56b5489cc8336538a3b06fd5978790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601e::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:4a:7c:24:37:3f:74:45:af:13:52:51:ca:29:cc:38:3b:
         30:a4:7e:e7:aa:af:47:8f:c9:35:cd:08:4d:e0:81:13:86:f9:
         f0:b2:8c:8d:c5:07:8e:c0:12:18:73:38:8b:2e:68:4a:47:59:
         60:4e:d7:1c:69:ef:62:17:c1:2c:3b:af:42:37:d0:c0:72:08:
         c2:ca:c1:5f:62:b7:43:cd:cb:53:94:00:43:91:e2:19:ba:1e:
         d3:d5:a3:8a:df:cb:54:97:82:59:c0:94:3f:33:a2:38:87:59:
         b5:a1:72:0a:ad:f1:c6:2c:1a:f0:4d:04:bb:b1:5b:9d:25:92:
         5e:7a:1b:28:11:d6:74:44:50:02:20:83:8d:bf:b1:75:7a:bf:
         7f:ea:80:ec:0d:68:55:d0:70:68:de:07:85:de:b3:11:75:8e:
         ea:d8:20:7c:fe:1d:31:a3:e2:a5:c1:eb:20:83:b2:d4:f4:13:
         aa:59:53:fa:f5:1d:ed:ce:e4:8f:9e:6e:51:5a:71:f6:7a:ca:
         70:96:5c:11:62:29:9d:97:88:d3:a7:1b:25:9b:2d:54:62:a0:
         52:48:1e:65:71:ff:b6:ac:e9:73:f6:b3:cf:8d:12:ba:93:d3:
         96:a0:38:0f:73:1f:69:f8:bf:cc:ec:8f:0b:de:5a:c6:44:d8:
         69:e7:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----