Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7e51b18fe99bf0f134b0137776e3b86bab08426e.roa
File:                     7e51b18fe99bf0f134b0137776e3b86bab08426e.roa (raw, json)
Hash identifier:          Cu1UDpPnyXv0aSz7PqckTXg/Tkh17OtHU0i8tsHOqgk=
Subject key identifier:   10:2B:06:31:09:A4:95:80:F4:E8:C6:EB:3B:31:02:1D:56:32:43:1D
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15F99A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7e51b18fe99bf0f134b0137776e3b86bab08426e.roa
Signing time:             Thu 26 Aug 2021 23:03:16 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440154 (0x15f99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=7e51b18fe99bf0f134b0137776e3b86bab08426e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:d1:8e:31:d2:0c:3d:14:fa:04:47:cc:70:
                    1d:21:13:da:ad:a8:cd:d4:93:e7:18:e5:c8:fb:4d:
                    a6:37:b4:30:e8:1f:67:fc:37:09:6c:b3:c5:e7:f6:
                    c6:47:23:29:0f:6d:e7:f7:6f:72:2b:b2:0b:c1:02:
                    8d:11:e3:81:27:ae:a8:d7:c6:87:92:d8:47:99:b1:
                    b2:c7:b1:e0:25:67:52:3b:83:16:9a:fc:15:a1:2d:
                    0c:b0:4a:cc:e8:15:0f:c5:e4:96:df:19:58:69:0c:
                    61:02:97:61:49:db:3b:bf:b0:75:bd:eb:fe:d8:11:
                    ca:4f:99:37:c5:46:68:cc:c6:2c:9a:79:aa:79:73:
                    bf:fd:3f:cd:04:99:c7:c7:31:98:6b:af:80:c1:78:
                    89:a2:d4:6f:4b:4d:c5:b7:6f:44:49:4e:5d:36:73:
                    34:c1:41:53:56:87:e2:d0:33:4e:10:08:3b:6a:ff:
                    ff:ba:ca:ac:78:5d:1f:99:3c:5e:3e:3a:77:c9:4f:
                    48:33:a4:20:03:7a:1d:cf:76:b8:ad:f3:76:01:2c:
                    f2:54:8f:bf:f5:cb:cd:da:f8:f2:39:94:1a:6e:37:
                    a9:2d:dd:47:02:b8:d8:9c:60:10:fb:4e:fa:25:a0:
                    bd:a6:6d:d8:91:c4:ac:ae:44:02:66:fe:51:a0:da:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:06:31:09:A4:95:80:F4:E8:C6:EB:3B:31:02:1D:56:32:43:1D
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7e51b18fe99bf0f134b0137776e3b86bab08426e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:e1:5a:70:42:6b:fb:f9:88:7c:4d:de:94:1d:3a:1a:be:
         0b:8e:7e:62:9b:9b:32:08:1c:7a:a8:3c:eb:31:3b:10:7c:fd:
         95:c4:9d:85:14:ee:58:3c:8e:03:68:28:dd:1e:7d:6e:9d:3c:
         fc:66:8f:94:83:31:90:f7:d9:ae:e4:e9:a6:9d:40:95:ab:96:
         14:c6:9e:7e:b5:56:da:8f:7f:78:d0:c8:ed:ef:d9:47:c6:17:
         68:e6:32:f1:1c:8d:e8:36:0e:d3:97:54:20:84:f2:39:07:c0:
         01:e1:9f:2c:df:32:48:b3:44:b5:bd:85:cf:ff:f3:f5:f0:55:
         51:4e:ed:11:71:c6:fe:b8:4a:9a:33:d3:1c:5a:eb:07:da:1e:
         5b:1d:d0:3c:86:13:d5:be:fe:9b:fc:41:05:65:bc:13:58:0f:
         ff:c9:c3:08:83:e2:5e:66:a5:12:e1:d9:18:f5:22:11:60:71:
         e1:85:69:45:14:8f:75:0c:47:2a:b1:57:e5:bc:7e:d6:cb:b0:
         4b:dd:4e:2e:4f:7f:fd:44:12:f4:3c:69:46:3b:62:d0:c2:b5:
         7c:4a:34:55:7f:d1:34:be:6e:02:d2:08:b2:1a:ee:ea:17:90:
         f1:b1:2a:87:94:cd:46:a8:6c:94:e7:34:10:92:53:3a:f8:6b:
         95:7b:48:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----