Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/53c6922c8ab3bc0d33d28c9305ae447f39f0d7db.roa
File:                     53c6922c8ab3bc0d33d28c9305ae447f39f0d7db.roa (raw, json)
Hash identifier:          HFyv1M+EADSPX1/cU2Ro1rOOlw7yyjRsAisp9he4EZ4=
Subject key identifier:   E0:8C:F5:5D:95:A4:19:D4:EA:30:A6:E8:08:40:7E:90:58:76:BB:8C
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       151FA5
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/53c6922c8ab3bc0d33d28c9305ae447f39f0d7db.roa
Signing time:             Wed 18 Aug 2021 18:40:05 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:603b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384357 (0x151fa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=53c6922c8ab3bc0d33d28c9305ae447f39f0d7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:da:dc:f9:02:b0:3d:93:07:3e:55:d2:3c:
                    4b:f5:a7:de:1f:14:b7:80:e3:f8:a3:47:72:bc:8e:
                    59:b8:e5:ef:7b:fa:4f:1e:5c:20:48:82:74:b1:74:
                    87:2b:35:af:a5:c8:d5:83:82:10:ca:0c:4e:ad:b9:
                    86:81:f5:2e:42:b9:e3:6b:15:47:f9:d8:af:bd:65:
                    39:3b:b8:9d:90:c3:68:2f:4e:3c:8d:b9:d1:58:b4:
                    3f:2f:e6:22:c4:16:15:1b:b3:98:67:95:c0:54:5e:
                    a9:4d:d4:e4:0f:41:5b:ff:fb:fc:eb:11:c0:9b:81:
                    83:33:3b:72:9b:1f:64:a2:00:b7:43:15:2e:19:fe:
                    cc:0e:2d:6a:f2:df:12:24:a4:ae:96:c8:fc:cc:61:
                    ec:a5:ca:b2:e9:91:8c:1a:d9:4b:29:9b:4c:a0:02:
                    90:42:5b:e3:81:dd:4b:e3:71:c5:a1:b0:a7:c5:03:
                    85:4d:89:88:85:02:41:c1:cc:d2:44:25:4c:a4:25:
                    d0:2b:6e:4a:4c:50:e0:ce:84:de:b8:78:eb:7c:ef:
                    5b:b8:3c:82:61:e8:f8:74:07:8f:7a:a0:1d:90:42:
                    22:16:27:64:67:9c:73:20:c7:57:87:08:c0:be:a0:
                    aa:70:22:4b:86:e6:0a:d6:3e:a7:34:04:5b:60:49:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8C:F5:5D:95:A4:19:D4:EA:30:A6:E8:08:40:7E:90:58:76:BB:8C
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/53c6922c8ab3bc0d33d28c9305ae447f39f0d7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:603b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:63:d7:e7:3e:82:09:92:b0:4c:e5:6e:7f:d5:d4:8a:16:
         e8:e1:19:0b:33:5e:57:80:cf:4f:6e:90:bd:e1:41:16:17:b7:
         b5:e3:4d:2b:02:49:94:30:0c:ec:14:9a:85:80:a7:40:d7:23:
         98:d9:13:06:c3:ef:e7:3b:d3:2b:0c:dd:ff:ae:88:3c:73:ab:
         4a:e9:4e:65:97:b7:04:72:19:4f:f2:4e:80:81:65:18:fb:d2:
         fe:4f:7e:24:e0:da:ab:84:f5:7d:5a:13:f0:e3:80:25:42:4f:
         f6:11:e2:b4:f3:82:43:22:4a:14:bc:46:07:5b:4e:7f:c8:c8:
         d9:87:35:d5:07:5c:18:53:9f:93:03:1b:28:7b:5d:2e:68:2a:
         a2:53:40:77:70:7b:d1:91:9f:31:ce:79:5d:ae:8d:8d:95:a5:
         29:4d:74:29:39:28:16:16:79:29:60:2d:41:41:a4:1f:73:1b:
         fb:30:4c:7b:29:70:8f:80:f7:97:35:5a:81:d3:63:bf:13:d8:
         31:ff:6d:e0:c4:ae:01:78:01:ac:80:d4:96:60:eb:85:1a:34:
         d7:f2:87:67:67:2b:f8:a8:36:21:15:fd:19:ae:3f:82:e7:37:
         eb:e4:49:54:4e:da:fc:4c:ac:cc:73:78:80:bd:71:d2:63:80:
         ce:7a:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----