Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/629051e90292435c5c5536b092275e2ad5b9d8c8.roa
File:                     629051e90292435c5c5536b092275e2ad5b9d8c8.roa (raw, json)
Hash identifier:          u319NRAZ190KBPTJZV8I0kZKjjabjKLqNiNM6t7XbmA=
Subject key identifier:   7A:12:F5:D4:D5:6B:9F:B0:D8:20:11:2B:71:14:E4:57:2B:D3:DE:64
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F7538
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/629051e90292435c5c5536b092275e2ad5b9d8c8.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:600f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013048 (0xf7538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=629051e90292435c5c5536b092275e2ad5b9d8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:09:de:e7:34:d5:f1:4e:71:fc:89:90:78:
                    bb:fc:8e:01:ac:fe:79:aa:70:6e:86:eb:a8:aa:74:
                    be:1b:80:90:03:15:2e:69:76:f3:2d:55:6d:ad:a8:
                    93:2c:04:07:ea:87:2a:34:f9:6b:3d:76:82:f9:98:
                    a3:71:ce:5a:d9:ef:fa:bb:23:d3:84:60:c6:11:ec:
                    7f:9d:33:a3:ed:13:5e:77:b0:24:a6:a7:0b:b8:e5:
                    55:d3:4d:30:5f:4c:d2:34:1e:0c:80:b6:31:f1:98:
                    8c:40:71:ca:23:77:32:c4:76:6f:2d:ed:42:47:c5:
                    72:81:98:51:5b:ac:34:60:1d:88:ba:bf:5d:07:27:
                    ec:b3:7e:2b:02:aa:9f:46:0b:ee:9f:95:d4:23:8e:
                    86:ca:c6:6f:24:80:e5:5b:2c:4c:9d:22:5d:97:45:
                    f4:b1:b9:c9:f9:d7:14:8a:29:a0:90:76:f3:b0:7a:
                    79:e4:8b:08:af:81:96:26:95:7c:e1:11:50:22:87:
                    a6:23:2b:88:0f:4a:eb:c0:78:54:fa:52:14:4c:09:
                    92:66:58:17:4e:a0:84:24:83:ef:21:f5:46:f7:7e:
                    98:2a:bd:98:29:e3:3f:ff:3f:01:4c:be:83:ff:ed:
                    dc:98:16:59:b1:60:49:30:bf:1f:11:c5:11:ec:44:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:12:F5:D4:D5:6B:9F:B0:D8:20:11:2B:71:14:E4:57:2B:D3:DE:64
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/629051e90292435c5c5536b092275e2ad5b9d8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:600f::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:87:84:6b:7a:7d:82:fe:e8:75:7c:7f:44:ef:d3:bd:33:a7:
         ac:8f:e9:4f:ab:7d:db:42:00:06:02:f5:32:4f:0f:a2:ac:e3:
         a8:d8:e0:31:3b:d4:e3:ea:f2:93:3f:50:4f:7c:4b:e5:6f:d9:
         90:ea:ff:49:6e:ae:4c:9f:95:a1:d8:b9:50:4f:a7:0e:da:1e:
         01:28:29:67:93:55:f2:9f:e8:eb:5a:bc:3a:31:00:fe:20:02:
         6a:16:e1:72:39:d7:e1:43:cf:98:81:e4:90:c5:88:91:49:97:
         7b:d3:e5:e0:79:5d:ad:2c:d9:ce:73:91:1f:d9:79:fc:90:b4:
         8b:1e:c8:41:3e:53:4c:32:be:95:2e:0b:3e:4b:ca:9f:f7:2f:
         3b:7c:97:ea:e4:c5:de:af:78:da:80:52:3c:ad:58:33:5d:5d:
         48:ae:9e:e7:8e:3d:83:95:ef:1a:cb:34:51:b3:ac:6f:4b:e1:
         0c:25:18:9c:6c:c8:8e:9c:8b:a1:3d:23:49:01:8a:5d:50:58:
         9f:68:4f:f3:87:1e:9a:59:41:ed:d6:df:5f:19:11:41:84:be:
         03:5a:a5:2d:fd:c4:ca:84:c4:af:6c:7c:8e:0c:89:8b:db:46:
         b9:71:a9:7e:f9:a3:27:ca:82:02:2f:58:c8:e7:a5:5c:0d:af:
         65:45:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----