Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/549d1f9bafc3d3785ef6da8b2980830f7588746f.roa
File:                     549d1f9bafc3d3785ef6da8b2980830f7588746f.roa (raw, json)
Hash identifier:          rMAxUZip8gxSuo2QOHf/v/qG/6ZXrgvhD0w+fSFBTBA=
Subject key identifier:   E3:A3:09:47:E1:7C:19:95:1F:E3:8E:1F:76:FC:12:04:94:93:17:70
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       160BBD
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/549d1f9bafc3d3785ef6da8b2980830f7588746f.roa
Signing time:             Thu 26 Aug 2021 23:12:53 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60ba::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444797 (0x160bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=549d1f9bafc3d3785ef6da8b2980830f7588746f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:dc:21:c8:b7:a6:e5:19:c1:cd:72:ff:bd:
                    c8:e4:ed:bc:29:3f:5e:2d:28:d8:fb:57:6c:8b:4e:
                    c5:7a:14:7b:ca:84:38:1b:ef:9b:95:83:4c:86:63:
                    03:a4:b9:10:e6:f2:e0:41:9a:d4:37:b5:22:23:2f:
                    40:e5:bc:86:12:fd:f7:40:be:14:60:3f:be:23:7e:
                    8a:38:cd:d5:76:c0:be:c4:e1:fc:63:a8:d9:c7:38:
                    43:8f:99:03:2e:37:e4:da:0a:33:8e:f0:8b:7a:77:
                    3d:ae:d0:10:6f:78:46:a0:df:15:28:a5:c9:93:89:
                    c3:70:d7:22:83:4e:c8:1f:a8:59:ed:0e:4b:fc:1e:
                    35:c9:87:e2:b8:cb:f8:9a:06:2b:2c:5d:72:82:57:
                    ef:18:08:c8:af:44:64:2b:bf:20:ea:4b:95:fe:a2:
                    a0:67:61:db:02:fd:43:52:05:2b:80:a1:12:ca:ab:
                    01:5a:e3:9d:eb:23:ea:77:4f:2b:f3:33:c4:ee:6b:
                    c5:df:ee:f0:8e:ef:89:6c:ab:52:40:5b:98:38:fe:
                    42:f3:e8:75:d0:38:fd:73:c9:27:9e:d6:3d:fc:75:
                    8a:03:ec:c2:62:37:b8:b9:09:4c:69:1d:55:66:00:
                    03:8c:04:41:60:9c:25:e5:e7:a9:6e:b4:8f:64:45:
                    40:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A3:09:47:E1:7C:19:95:1F:E3:8E:1F:76:FC:12:04:94:93:17:70
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/549d1f9bafc3d3785ef6da8b2980830f7588746f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:e3:ad:5a:ef:20:90:4d:92:0a:b7:cd:d2:ba:84:55:99:
         20:89:9f:65:bb:b9:41:49:90:1c:ec:ff:6f:24:b4:34:0c:a4:
         a3:46:63:72:33:23:c4:fc:c0:39:15:bf:86:e9:9f:1d:9e:51:
         86:12:5f:43:f4:c2:72:78:e3:4d:9d:fc:cd:1b:73:c5:f8:aa:
         81:c2:8a:a7:7a:e8:4f:e0:b9:c2:80:35:96:e4:2e:34:47:9e:
         f9:ce:26:4f:76:dd:70:6e:06:98:59:2f:0a:c6:6e:2b:33:6f:
         c2:5a:56:70:ed:b2:c1:25:85:fa:f5:7b:93:a0:44:6e:71:48:
         e7:59:f4:37:2f:e8:0d:77:72:fa:a5:bc:55:f9:af:fc:d0:1a:
         73:18:04:5d:80:6b:2d:ef:2a:fb:96:2c:11:25:5b:a0:6e:d3:
         3b:49:bd:d3:b6:b3:75:4f:33:f8:57:a6:15:67:88:7e:32:01:
         fc:06:ea:30:15:04:0b:e8:8d:99:9a:87:00:9e:11:02:e7:b9:
         9b:19:11:d4:bc:8d:e0:26:1c:48:fd:07:64:a0:c3:86:21:80:
         4a:00:2e:4a:bf:b2:5a:0a:b5:aa:3b:0d:16:4c:33:6a:fb:32:
         bf:9e:64:b6:73:cf:9a:38:a8:55:fc:cd:bf:a2:4a:81:91:b2:
         e8:e3:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----