Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/54bd26a44ebdb9a6ea61a3ad28c6f9aea5afefb9.roa
File:                     54bd26a44ebdb9a6ea61a3ad28c6f9aea5afefb9.roa (raw, json)
Hash identifier:          +YfKGMye/dX6By9uhW+9qABlZJYbI6hELr6UZED8IVo=
Subject key identifier:   E6:EE:2E:02:66:28:8D:C2:26:A5:3A:97:05:6E:06:47:10:BA:81:FB
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F612B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/54bd26a44ebdb9a6ea61a3ad28c6f9aea5afefb9.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007915 (0xf612b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=54bd26a44ebdb9a6ea61a3ad28c6f9aea5afefb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:c1:a4:db:bd:07:71:6d:25:b0:e3:85:82:
                    ca:bd:d4:79:29:27:01:c0:f1:53:1e:be:30:2b:89:
                    33:b9:30:a2:94:71:e8:e5:5b:55:41:1c:78:ac:c0:
                    36:71:eb:2b:4e:21:39:f2:2d:88:b8:af:99:50:73:
                    0f:8e:49:1e:2a:4d:cb:9d:5a:7e:ba:02:42:9a:57:
                    fe:7a:77:6b:9f:01:d6:ee:1c:3a:41:10:5f:88:d8:
                    86:ee:d7:9c:3f:e5:95:72:45:f3:0c:8c:00:eb:dc:
                    be:ed:5e:8a:03:4b:bb:c9:5a:16:b9:29:ca:3a:a2:
                    2e:28:99:a2:f2:5d:d9:97:dd:5d:d8:6a:a5:8b:75:
                    5a:09:9e:b5:32:25:7f:0c:25:01:a4:f5:d9:27:25:
                    c2:32:59:bd:ef:13:8b:ea:13:68:cf:cb:21:95:4b:
                    24:e4:2a:89:63:5c:ab:06:21:2b:21:ea:08:48:1f:
                    cf:97:f1:df:fc:1d:1a:58:a0:10:85:3e:d5:21:e5:
                    22:5f:ad:d0:54:7d:70:90:86:62:51:bb:78:3b:62:
                    c5:e2:53:7f:1c:e7:67:6c:12:66:08:86:52:d0:a3:
                    46:98:94:02:f2:76:af:a3:30:04:78:28:a4:07:a3:
                    7d:9e:21:41:d2:92:2e:ab:e3:d4:ec:db:a5:6f:6f:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:2E:02:66:28:8D:C2:26:A5:3A:97:05:6E:06:47:10:BA:81:FB
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/54bd26a44ebdb9a6ea61a3ad28c6f9aea5afefb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:12:6d:01:7a:4b:f0:44:e8:35:ac:c2:79:53:65:7f:24:38:
         15:42:7d:5b:89:b7:da:32:67:2d:b1:84:8b:e1:0d:61:66:ce:
         8c:85:13:9b:8b:2f:c2:6a:97:f7:44:ec:31:45:e8:c0:09:71:
         83:d0:70:d3:06:46:27:e9:77:97:1c:af:32:e8:f9:27:5a:20:
         7b:af:c9:63:a6:1d:46:40:83:5c:cf:21:60:48:35:df:9f:98:
         96:e5:24:39:ef:9f:80:fd:b1:70:b6:80:80:55:9b:73:90:11:
         e1:4f:a8:b3:6e:4a:24:19:5b:09:e6:27:46:fb:51:4f:75:1f:
         8f:54:95:3e:1e:5a:ff:79:92:eb:32:dc:e8:86:51:53:7e:c4:
         1b:ac:b5:52:99:a2:aa:cb:b8:c8:27:ff:0f:e8:f9:12:a8:93:
         56:ce:72:6f:07:3e:85:f6:c7:da:9d:c9:cd:ec:e5:c8:8f:c3:
         a6:84:13:ab:3b:bf:5f:37:27:a0:ba:72:70:c7:00:53:7a:73:
         94:4c:0f:dd:a3:39:0b:df:16:30:40:9b:fe:f9:f9:a6:27:c8:
         e5:30:2b:6a:8d:63:df:1e:ae:3e:40:e5:6f:bb:c5:2b:ab:fc:
         6e:df:35:0e:a8:4a:e3:94:1d:31:5b:6c:0d:38:38:9b:36:59:
         9c:c2:5a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----