Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a07ff9bf71daf057ff4cb459d09de9da1a7d466.roa
File:                     6a07ff9bf71daf057ff4cb459d09de9da1a7d466.roa (raw, json)
Hash identifier:          IGizbZeQau++Ndnvn89DncsxzMsf3MrXMd2pF3BFu2k=
Subject key identifier:   8A:F6:30:17:51:21:02:98:C0:4B:42:59:58:A9:9B:25:A4:C5:2D:6C
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       111050
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a07ff9bf71daf057ff4cb459d09de9da1a7d466.roa
Signing time:             Wed 24 Mar 2021 14:44:30 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:5005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118288 (0x111050)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=6a07ff9bf71daf057ff4cb459d09de9da1a7d466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:d8:53:56:7b:ec:e0:44:c3:65:e2:7f:1e:
                    32:09:e0:47:e7:ae:46:91:3e:66:94:07:14:81:94:
                    97:07:fe:22:71:8b:77:2c:60:83:cd:3c:76:50:45:
                    d7:66:ca:d5:fe:f1:ec:2e:64:0f:18:75:d8:ed:f8:
                    e0:e9:99:b8:95:8d:b5:07:82:b3:9b:f9:18:45:0f:
                    2b:19:d0:e1:1b:47:86:07:80:92:70:30:3c:1e:a8:
                    60:09:0a:10:bb:c1:a1:ad:01:8c:92:ce:4f:db:67:
                    d7:ec:78:c7:91:a3:ef:c7:39:6f:aa:b3:58:00:07:
                    7f:f1:53:7f:bd:22:2d:23:da:f2:39:8c:f0:e8:56:
                    2e:79:6a:f7:aa:d8:42:80:6a:c7:9c:08:cd:a7:08:
                    44:03:39:a6:3c:78:8d:03:bf:4b:1c:22:89:92:be:
                    e3:b6:de:d8:00:e4:a6:20:05:75:28:18:a6:da:c1:
                    9e:eb:80:03:4c:36:e7:fc:ae:21:c7:22:da:a9:ae:
                    79:74:4e:c9:63:9a:d3:17:23:d6:7c:0a:3b:9a:f4:
                    cb:88:f3:66:31:42:ff:bf:98:08:b8:8e:e8:0b:17:
                    6b:a8:9a:55:af:4d:8f:76:5d:f6:2b:23:74:2e:c1:
                    e6:2e:59:1d:74:92:eb:fd:b4:bd:a5:ff:61:93:7e:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:30:17:51:21:02:98:C0:4B:42:59:58:A9:9B:25:A4:C5:2D:6C
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/6a07ff9bf71daf057ff4cb459d09de9da1a7d466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:5005::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:6c:21:45:a6:93:15:2f:91:b1:05:83:19:71:c0:f4:3d:ef:
         ea:45:6d:d4:4d:f9:83:20:b8:1b:23:ab:72:50:69:df:bf:fd:
         a4:32:d6:87:28:f2:50:d6:86:08:9b:11:36:bc:70:8d:8e:ab:
         4b:d3:a2:db:b0:22:3b:2c:9f:1c:1d:9a:29:5d:9f:8c:b5:7b:
         d4:7c:20:62:47:58:95:cb:32:6e:bc:7e:85:40:f7:01:a6:c4:
         b8:c0:47:d7:a4:74:e6:69:24:b3:fb:1e:8c:63:d8:a7:c9:e9:
         f6:c3:bd:ed:4d:7e:c0:67:12:4b:7e:80:cb:f7:15:aa:7f:97:
         f4:b1:66:33:f8:e9:66:e8:5d:15:96:9a:06:17:55:d2:0f:ce:
         b2:26:4d:93:4b:43:93:1a:df:e4:2d:4a:31:36:fd:b9:26:d5:
         f9:67:63:bb:0e:33:42:20:a3:31:00:e1:be:fc:57:2b:fb:48:
         21:52:1d:fb:95:28:cc:c9:48:1f:d2:3f:41:af:fa:00:dd:80:
         7a:0f:c2:e3:3d:70:b7:53:7b:a3:8c:ee:8b:c6:8b:99:91:35:
         ee:78:b4:82:c6:30:4e:c1:99:eb:fe:10:5c:78:41:c3:9b:da:
         e5:84:c0:19:26:ca:0e:82:6f:bb:41:8d:c1:cd:8a:ef:36:3b:
         b1:cb:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----