Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/649d4962bf0b97579b8e645c8f53a9441a84bbde.roa
File:                     649d4962bf0b97579b8e645c8f53a9441a84bbde.roa (raw, json)
Hash identifier:          LpqHQvtlKZ6aPqWp91wRDJ6MkbdOechaKEA1/EBWP/I=
Subject key identifier:   C3:F0:5C:E6:A1:6F:30:4C:38:83:DD:A8:12:75:80:BA:F9:53:BA:AE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1575F8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/649d4962bf0b97579b8e645c8f53a9441a84bbde.roa
Signing time:             Tue 24 Aug 2021 18:10:57 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:604a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406456 (0x1575f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=649d4962bf0b97579b8e645c8f53a9441a84bbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:04:8e:34:95:40:79:38:c2:0d:2a:f5:0d:
                    1c:78:8d:e8:b3:2f:e2:b4:53:51:31:35:d0:79:02:
                    76:6d:bb:54:ce:85:54:4f:ea:aa:97:02:07:be:1c:
                    f3:39:d4:15:3b:07:42:d1:cb:26:c9:03:b3:12:a0:
                    5c:20:ef:b3:bb:9d:37:9e:07:7c:47:7f:a3:85:3a:
                    e0:29:53:b5:86:f0:cb:94:e7:6d:5e:6a:02:84:e7:
                    0e:dd:52:f1:f3:7e:5c:79:dc:25:43:fd:87:ee:1d:
                    e3:8c:97:f9:7c:aa:ee:c0:64:6f:99:01:b5:62:aa:
                    d3:ea:cb:e8:a7:7f:2b:8c:db:8e:2a:94:96:43:3b:
                    7a:59:98:6f:e3:b5:d7:e8:8a:9c:46:fa:a9:8e:bc:
                    b0:18:1c:18:72:7b:6f:0d:31:68:27:50:56:a3:81:
                    90:55:09:6e:17:f2:20:e8:4d:2b:3e:a2:dd:02:63:
                    89:f6:0a:0c:33:f3:3d:b7:91:ec:80:f1:fb:3b:1e:
                    d3:8b:71:5d:66:b2:35:30:8d:eb:f6:c3:74:fe:7e:
                    9b:fc:c8:51:eb:94:b6:b0:8e:92:d7:ea:84:04:18:
                    c2:01:c8:6e:e1:15:85:81:32:6d:7a:34:37:a7:c0:
                    70:83:a0:80:1d:e4:35:9a:ff:c7:86:64:c0:29:a1:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F0:5C:E6:A1:6F:30:4C:38:83:DD:A8:12:75:80:BA:F9:53:BA:AE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/649d4962bf0b97579b8e645c8f53a9441a84bbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:604a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:45:e1:c0:01:1f:d4:bf:a7:17:91:e9:97:27:f5:68:63:e6:
         19:35:6c:dd:57:50:fa:56:04:fd:0a:22:bf:4c:c0:7f:9d:bb:
         04:8b:e4:94:b0:e9:f6:c4:88:f1:c9:70:c7:1e:34:57:d3:02:
         0b:6b:32:23:fa:2a:68:ba:32:a0:9b:ac:0e:3b:5d:4e:29:a2:
         9a:17:f9:5d:fb:7a:78:52:52:8a:bc:79:26:70:d4:fd:97:b6:
         c3:b9:be:3f:5e:a1:a2:ad:12:3e:30:1c:b1:d3:24:ce:1c:11:
         36:c4:a6:09:26:ce:f2:0e:54:ec:b5:b0:9b:30:7c:86:ee:de:
         6a:41:7a:e5:db:db:9c:7d:71:af:39:e7:33:fa:a5:90:83:43:
         9d:f2:6e:47:f9:1f:68:20:be:58:c2:c8:f2:9c:0d:b4:e4:77:
         c3:85:c0:a0:23:60:bf:d4:15:bf:bc:30:f1:8b:08:9e:ae:bb:
         b7:25:2b:5b:ae:b7:76:5e:8b:71:6e:91:70:7d:c7:87:bc:5d:
         50:50:ca:34:83:d2:c2:de:af:31:9d:2e:50:ee:16:fd:4d:03:
         d7:14:a3:6f:39:e3:e4:d1:51:8e:c4:5b:c1:c6:2e:93:a5:83:
         38:72:88:83:bd:5f:ec:3c:e4:d3:de:df:94:ea:e4:44:b4:24:
         e9:af:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----