Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7eb57d27c498371368c152860662b0e420c439b1.roa
File:                     7eb57d27c498371368c152860662b0e420c439b1.roa (raw, json)
Hash identifier:          LmMKKO9lKl1cDg3+9Q6H+I2meiX5r/YksMhj5X0gsYM=
Subject key identifier:   B6:5D:16:CF:6E:B8:73:02:01:CA:76:36:F0:EF:BA:7D:E5:D6:CB:85
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       153AAF
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7eb57d27c498371368c152860662b0e420c439b1.roa
Signing time:             Wed 18 Aug 2021 19:30:35 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6043::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391279 (0x153aaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=7eb57d27c498371368c152860662b0e420c439b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:21:ef:36:37:88:cf:c6:e2:a1:06:21:bc:
                    22:32:49:28:76:a4:31:0f:d7:fb:dc:fe:b3:73:6e:
                    b2:8d:4a:19:0e:9d:c7:b3:bc:d0:e9:d5:91:f3:0c:
                    f8:07:8b:8e:ed:d0:59:4e:c9:86:ad:08:e5:49:a5:
                    af:9a:66:3d:a7:5a:ce:09:3c:0c:e6:73:60:d2:f1:
                    6e:71:14:9e:44:8e:9f:55:e7:1b:82:d8:8a:61:ba:
                    ff:89:4e:09:66:a8:79:d7:18:49:60:b5:45:d0:20:
                    85:c9:83:cc:61:e9:11:36:bf:2d:8b:0f:02:73:db:
                    74:95:79:bd:67:f5:6c:e7:12:aa:59:ff:e2:1b:08:
                    ed:b5:90:f7:41:5e:8e:af:41:fe:90:f9:84:d1:49:
                    e7:a0:17:55:f5:32:fb:8d:31:24:9c:b8:7b:8d:e0:
                    22:04:0e:1c:1d:e6:e1:e5:60:de:5a:79:65:93:4f:
                    d0:fc:81:03:ea:6f:ed:62:d1:d8:0f:0d:20:99:0b:
                    48:e5:77:42:f6:7b:95:c1:9e:f5:39:50:17:ca:68:
                    1a:4f:ec:c4:49:92:5d:1c:02:dc:50:3a:d7:48:5d:
                    3e:dc:6d:9e:0c:27:87:18:b2:69:da:6b:e3:82:6a:
                    cd:35:9b:e0:38:8c:e3:91:4b:f4:4b:44:64:8b:03:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5D:16:CF:6E:B8:73:02:01:CA:76:36:F0:EF:BA:7D:E5:D6:CB:85
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/7eb57d27c498371368c152860662b0e420c439b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6043::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:ab:ff:1c:e9:8f:a8:4a:ab:f5:36:85:e6:18:18:95:ea:
         05:7a:45:77:92:14:13:08:51:64:a0:32:41:09:c9:88:a4:65:
         02:7c:ad:27:47:83:34:9c:73:e1:24:e1:13:b9:8b:93:98:f9:
         e1:03:f9:ba:13:e6:a2:4b:3f:a2:4c:09:0f:4a:7d:40:6c:6b:
         3e:bc:5d:4a:23:ea:92:4f:05:80:5d:d8:e2:64:58:4f:cc:2c:
         ef:86:8f:15:fd:1c:05:de:d9:7e:a0:64:4b:c9:7a:fe:da:b9:
         c5:bf:6b:2f:7b:cf:e0:43:77:65:81:0e:52:73:b6:e9:b5:91:
         03:ed:80:8f:c3:4a:ff:f4:62:2f:03:43:c9:a6:de:d5:06:9f:
         33:30:70:6d:96:df:53:c8:2c:56:cf:7a:5a:88:c9:e8:86:85:
         59:f6:a0:12:42:a2:83:a0:90:86:d3:57:0b:fe:82:2b:2a:e7:
         f6:6c:73:94:6c:04:85:03:88:26:84:0d:20:3a:e0:c2:d1:32:
         c4:a1:f0:12:0b:d4:44:4b:62:a3:76:95:c6:86:12:65:94:d4:
         20:2c:79:7a:ec:aa:67:9d:c0:28:5d:44:b7:55:75:94:d7:5a:
         cd:6a:9a:90:99:9a:7e:60:d1:ed:04:d5:79:13:91:fc:de:80:
         c0:a9:4c:40
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFTqvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZWI1N2QyN2M0OTgz
NzEzNjhjMTUyODYwNjYyYjBlNDIwYzQzOWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl9gh7zY3iM/G4qEGIbwiMkkodqQxD9f73P6zc26yjUoZDp3H
s7zQ6dWR8wz4B4uO7dBZTsmGrQjlSaWvmmY9p1rOCTwM5nNg0vFucRSeRI6fVecb
gtiKYbr/iU4JZqh51xhJYLVF0CCFyYPMYekRNr8tiw8Cc9t0lXm9Z/Vs5xKqWf/i
GwjttZD3QV6Or0H+kPmE0UnnoBdV9TL7jTEknLh7jeAiBA4cHebh5WDeWnllk0/Q
/IED6m/tYtHYDw0gmQtI5XdC9nuVwZ71OVAXymgaT+zESZJdHALcUDrXSF0+3G2e
DCeHGLJp2mvjgmrNNZvgOIzjkUv0S0RkiwOxbwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLZdFs9uuHMCAcp2NvDvun3l1suFMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzdlYjU3ZDI3YzQ5ODM3MTM2OGMxNTI4NjA2NjJiMGU0MjBjNDM5YjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgQzANBgkqhkiG9w0BAQsFAAOCAQEAQ42r/xzpj6hK
q/U2heYYGJXqBXpFd5IUEwhRZKAyQQnJiKRlAnytJ0eDNJxz4SThE7mLk5j54QP5
uhPmoks/okwJD0p9QGxrPrxdSiPqkk8FgF3Y4mRYT8ws74aPFf0cBd7ZfqBkS8l6
/tq5xb9rL3vP4EN3ZYEOUnO26bWRA+2Aj8NK//RiLwNDyabe1QafMzBwbZbfU8gs
Vs96WojJ6IaFWfagEkKig6CQhtNXC/6CKyrn9mxzlGwEhQOIJoQNIDrgwtEyxKHw
EgvUREtio3aVxoYSZZTUICx5euyqZ53AKF1Et1V1lNdazWqakJmafmDR7QTVeROR
/N6AwKlMQA==
-----END CERTIFICATE-----