Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8393cbd927395c7111477bff5a8a6b328995ea4c.roa
File:                     8393cbd927395c7111477bff5a8a6b328995ea4c.roa (raw, json)
Hash identifier:          yJnVYYw4CF68F0g0q7cp2r48VRnNrQn3EHCmtoG7ntY=
Subject key identifier:   A9:92:E5:69:D1:88:B1:97:8E:72:E1:B3:0C:B3:3D:29:57:C8:44:52
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F6F22
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8393cbd927395c7111477bff5a8a6b328995ea4c.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:600b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011490 (0xf6f22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=8393cbd927395c7111477bff5a8a6b328995ea4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:a3:5d:0e:8b:20:6c:c0:74:94:e8:8a:32:
                    66:1c:b3:46:26:3c:94:5b:eb:d1:72:96:7a:bd:8f:
                    2b:f9:04:1b:1b:60:fb:c6:32:be:1f:17:50:7e:ed:
                    63:b6:7e:02:79:ae:81:07:e6:17:92:3e:07:88:44:
                    94:06:0e:36:1a:db:f6:f0:10:52:f2:bb:a3:12:24:
                    2b:d5:ff:21:0f:cd:ef:d5:85:d0:55:86:5a:94:da:
                    45:25:e4:20:10:8d:35:37:a6:8b:c2:52:e2:0c:87:
                    6a:66:f1:0d:70:37:b0:23:71:32:42:92:ff:33:40:
                    f7:53:d9:14:fe:8e:eb:e9:78:8c:95:04:e0:7d:c3:
                    0a:ba:01:61:13:88:be:8c:59:e7:e0:f9:b4:42:62:
                    dc:75:c4:bd:da:02:ce:74:d9:ce:e1:42:12:bd:c8:
                    fb:dd:99:8e:68:44:88:f3:82:a0:b0:a1:de:1c:27:
                    3f:de:d9:ef:42:40:b4:0a:0d:28:de:04:1e:ba:8a:
                    16:12:9e:e5:d8:3d:a1:9f:fb:5c:c5:75:2e:ca:79:
                    99:eb:11:d0:95:2d:0f:db:58:58:88:49:39:5f:b9:
                    08:c7:65:56:72:6d:31:53:66:d0:1a:f7:e7:aa:43:
                    56:0b:df:7a:18:9b:66:54:fc:19:09:8b:89:64:b6:
                    d6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:92:E5:69:D1:88:B1:97:8E:72:E1:B3:0C:B3:3D:29:57:C8:44:52
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/8393cbd927395c7111477bff5a8a6b328995ea4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:87:19:64:cd:84:0d:bb:8d:d1:7b:a7:9c:c7:71:e3:de:27:
         69:1a:95:e8:88:b3:19:46:c1:13:c7:7d:a6:c5:ed:17:64:d5:
         be:c7:39:69:8e:72:dc:fa:da:5b:99:7e:20:1c:ff:8b:76:b6:
         2a:7d:50:5a:84:38:17:48:5c:9b:3b:76:ae:df:2d:5f:01:5a:
         92:81:51:41:e8:0b:84:dd:95:3f:d4:36:f0:c5:a4:3f:71:6b:
         5b:4c:b6:a5:6b:7a:7e:30:08:68:ca:22:e6:3d:7c:35:42:75:
         ba:61:5c:f3:39:a5:20:92:36:35:7c:b5:16:f7:d5:fa:96:d7:
         95:7c:8b:8f:07:68:94:d8:6f:4b:02:26:8c:d9:e6:68:6d:59:
         95:9e:e2:83:5a:e9:35:59:d9:ed:d4:60:1b:c5:41:d8:ac:a1:
         74:e4:10:b3:14:8c:54:d9:a2:e1:df:07:0f:85:c4:fc:81:be:
         06:9b:32:7b:0f:ea:6b:a9:3f:8b:09:ef:62:72:88:b7:e6:4d:
         6b:53:ae:7c:98:7f:a2:2d:50:27:a8:6c:05:c5:0e:5a:7f:d8:
         05:b1:12:5f:0f:b1:0f:25:45:84:bf:e4:69:e2:3f:c3:2a:c9:
         43:81:76:58:2d:f2:1c:0a:fd:f0:59:f8:f8:f8:05:ac:e0:75:
         61:3d:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----