Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c110ec67aea406061822ada678c9c07b3a842a6.roa
File:                     7c110ec67aea406061822ada678c9c07b3a842a6.roa (raw, json)
Hash identifier:          3o5TPDUdgyZjgRzgWA+1LrzOvtzk8Ktbcbz4MDdRHt4=
Subject key identifier:   9C:3F:C5:9F:1E:D0:EA:EB:6A:B8:6E:40:A3:AF:28:DE:04:E1:CC:AE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F679B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c110ec67aea406061822ada678c9c07b3a842a6.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6007::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009563 (0xf679b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=7c110ec67aea406061822ada678c9c07b3a842a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:52:0b:1e:10:2d:b3:82:61:0b:3a:a3:c9:
                    28:01:5e:45:03:fc:0d:80:e2:84:ee:d2:df:44:9d:
                    15:16:c0:26:31:58:cb:82:18:73:cd:29:2f:61:a2:
                    4c:ad:12:3c:c6:c3:4b:9a:df:09:73:3b:53:ab:cb:
                    83:4f:fe:82:1f:fe:10:09:f3:5d:a5:cf:c6:4e:16:
                    d1:fe:d3:00:dc:8f:f4:39:dd:71:e9:ad:89:fc:a8:
                    7c:92:4a:20:06:f0:84:67:87:40:25:1a:cc:e7:6f:
                    e9:35:b9:85:b4:22:6c:c2:8c:f1:e0:c9:03:52:4f:
                    39:d5:66:c7:3a:5a:61:57:aa:cc:26:0f:ed:aa:2f:
                    02:2a:2a:4e:ec:e9:0c:2a:78:18:f8:0f:3d:47:89:
                    e2:d2:a2:10:b4:e5:4d:44:1c:bd:b7:70:5b:38:28:
                    bc:7c:a1:02:e4:ca:78:fa:cd:45:3b:bb:0e:42:f8:
                    04:29:4a:06:00:34:92:95:91:72:52:13:1c:d9:2b:
                    bd:ac:c9:fb:6b:0c:3e:b9:b0:e3:fc:8a:57:3d:e0:
                    77:bf:39:cb:18:b4:c9:06:34:0b:cd:d8:05:af:be:
                    ef:11:98:cd:e1:4a:0e:b4:f1:21:8a:4d:e9:8c:52:
                    8e:4d:5e:c9:d1:71:df:8a:04:04:99:3f:e9:86:a2:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3F:C5:9F:1E:D0:EA:EB:6A:B8:6E:40:A3:AF:28:DE:04:E1:CC:AE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7c110ec67aea406061822ada678c9c07b3a842a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:31:fd:cd:ef:97:47:9a:7b:cc:3c:b3:1f:5f:cb:3c:c6:
         85:02:d5:58:ce:d2:14:48:c2:41:98:60:06:d6:9a:a4:38:86:
         11:9d:18:e2:dc:5d:ad:ab:8c:b4:5f:9a:11:09:43:d0:27:e8:
         11:9e:d5:30:87:75:12:c1:55:5a:80:35:4a:2c:4e:a7:11:1d:
         fb:e5:0e:a3:9a:a1:a5:13:6a:14:d6:17:41:c4:17:b4:0d:f4:
         dd:5d:4b:c4:00:d3:0a:d6:54:6c:a0:70:53:f0:8c:ec:af:18:
         e8:53:96:8e:f2:ea:bb:72:6a:2a:6b:c6:2e:3e:76:be:71:cf:
         92:77:7a:85:7d:99:4d:c5:3d:29:54:25:52:19:4d:6d:73:cc:
         e1:95:f7:93:cc:46:46:0a:05:2b:5c:d9:6b:b0:d1:73:fb:54:
         7a:d1:70:f7:39:43:26:8b:c5:c5:a1:e0:9f:ac:51:5f:2c:5b:
         ec:0c:bd:ff:72:ee:8b:09:f2:bd:7e:79:18:2a:c9:a6:5d:b1:
         57:02:75:a7:4b:e7:0b:23:09:93:7e:94:3e:4c:56:ec:e3:11:
         bb:0a:f4:ed:96:94:23:c9:00:65:f3:27:0a:b3:b5:99:18:58:
         9c:63:d7:52:1a:54:0a:fa:49:8c:33:59:3c:fa:f7:10:86:53:
         e1:93:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----