Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74ead21a865ab0c3efa3f64288da6bc61151cf94.roa
File:                     74ead21a865ab0c3efa3f64288da6bc61151cf94.roa (raw, json)
Hash identifier:          P2eMXuGEP7Dzjvm7VmXyITaig4FG7JHt5Uc84vmbhOk=
Subject key identifier:   CA:E7:4B:65:8A:AA:78:AF:F3:CE:4C:60:60:ED:03:24:33:77:EB:C9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14F582
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74ead21a865ab0c3efa3f64288da6bc61151cf94.roa
Signing time:             Wed 18 Aug 2021 17:30:35 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6032::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373570 (0x14f582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=74ead21a865ab0c3efa3f64288da6bc61151cf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e5:a5:d0:e4:3b:ef:de:01:6b:df:38:62:b2:
                    ce:22:f8:fa:7d:31:59:42:7e:5f:99:85:03:ed:af:
                    24:41:89:df:86:be:41:e0:8f:69:b7:6b:0a:02:1b:
                    c7:b2:ed:1f:9b:86:38:12:a5:c6:79:ac:61:02:95:
                    6e:d4:5b:d8:8c:4e:25:d2:91:1c:96:3d:fb:fd:2b:
                    b4:99:e6:e5:16:a4:9c:c3:e1:f4:25:31:4c:d7:9a:
                    96:9e:d9:07:b8:4c:cd:e2:7e:80:aa:fa:45:4c:f1:
                    6a:51:f4:09:f4:b3:70:05:86:ae:84:04:a9:f0:3e:
                    8d:a9:5a:72:cc:3e:b6:d4:a6:e2:65:d9:4e:fa:54:
                    a2:70:c7:5c:c6:09:41:08:da:95:19:72:d6:a5:6d:
                    92:66:04:53:d1:ad:8b:6a:35:59:6c:60:65:32:93:
                    a6:41:72:d0:e7:f4:2f:c0:ea:ad:1a:00:b1:ef:ba:
                    cf:de:b2:63:d2:d9:32:84:aa:39:e6:23:73:29:b6:
                    98:bc:d9:6e:8c:77:79:0a:2d:79:59:79:12:fa:99:
                    4b:af:cd:98:1f:e8:59:60:33:fe:1a:ab:27:5a:c7:
                    5b:bc:f7:fb:3d:ce:3f:20:4c:0d:44:45:35:14:8c:
                    d3:19:15:fb:65:7c:b0:88:c9:c0:1e:c5:68:df:ff:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E7:4B:65:8A:AA:78:AF:F3:CE:4C:60:60:ED:03:24:33:77:EB:C9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/74ead21a865ab0c3efa3f64288da6bc61151cf94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6032::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:09:bc:c3:06:a9:00:8d:04:cf:74:33:7d:03:b2:7c:be:d7:
         1e:40:82:2c:12:84:04:22:8a:5c:50:bf:ca:88:b1:90:95:49:
         98:bb:9d:b5:46:61:27:13:11:23:c7:79:ec:ea:77:37:7e:e0:
         53:03:2d:ac:e5:1a:d9:c9:05:40:96:ba:6f:fe:0b:12:33:3a:
         c1:0b:84:11:88:d0:1c:05:e5:44:0f:1c:68:97:f9:c9:d0:60:
         91:01:89:29:9b:57:63:2a:8b:2f:c6:a1:c0:ea:69:45:b3:1d:
         b4:60:fb:b5:48:f0:ad:b5:54:19:0c:be:1c:73:52:38:b9:62:
         87:a1:d5:b9:57:d9:8c:4c:74:55:62:f0:0e:a5:e5:85:b2:5e:
         46:98:0a:cc:94:2a:c2:e4:dc:26:6a:99:93:11:97:c2:f6:bb:
         e0:af:60:51:06:21:5a:56:0b:cb:65:a0:64:cf:b2:93:76:0d:
         1d:17:b5:e6:d0:f9:b3:2b:d6:73:5c:d4:57:95:3d:17:92:3c:
         d9:40:ac:85:72:d1:cf:50:f8:82:23:f2:34:38:46:5a:bf:00:
         74:e2:b5:63:80:78:77:b9:35:ee:53:5e:47:1c:14:02:f2:1c:
         6e:7b:65:af:78:a4:32:be:11:85:56:8e:ad:89:5c:a4:7d:3c:
         14:c8:3f:b2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFPWCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyg3NGVhZDIxYTg2NWFi
MGMzZWZhM2Y2NDI4OGRhNmJjNjExNTFjZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsuWl0OQ7794Ba984YrLOIvj6fTFZQn5fmYUD7a8kQYnfhr5B
4I9pt2sKAhvHsu0fm4Y4EqXGeaxhApVu1FvYjE4l0pEclj37/Su0meblFqScw+H0
JTFM15qWntkHuEzN4n6AqvpFTPFqUfQJ9LNwBYauhASp8D6NqVpyzD621KbiZdlO
+lSicMdcxglBCNqVGXLWpW2SZgRT0a2LajVZbGBlMpOmQXLQ5/QvwOqtGgCx77rP
3rJj0tkyhKo55iNzKbaYvNlujHd5Ci15WXkS+plLr82YH+hZYDP+GqsnWsdbvPf7
Pc4/IEwNREU1FIzTGRX7ZXywiMnAHsVo3/8pswIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMrnS2WKqniv885MYGDtAyQzd+vJMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4Lzc0ZWFkMjFhODY1YWIwYzNlZmEzZjY0Mjg4ZGE2YmM2MTE1MWNmOTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgMjANBgkqhkiG9w0BAQsFAAOCAQEAvAm8wwapAI0E
z3QzfQOyfL7XHkCCLBKEBCKKXFC/yoixkJVJmLudtUZhJxMRI8d57Op3N37gUwMt
rOUa2ckFQJa6b/4LEjM6wQuEEYjQHAXlRA8caJf5ydBgkQGJKZtXYyqLL8ahwOpp
RbMdtGD7tUjwrbVUGQy+HHNSOLlih6HVuVfZjEx0VWLwDqXlhbJeRpgKzJQqwuTc
JmqZkxGXwva74K9gUQYhWlYLy2WgZM+yk3YNHRe15tD5syvWc1zUV5U9F5I82UCs
hXLRz1D4giPyNDhGWr8AdOK1Y4B4d7k17lNeRxwUAvIcbntlr3ikMr4RhVaOrYlc
pH08FMg/sg==
-----END CERTIFICATE-----