Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/84942845317cf37ab8fd368264827bfdd2aa20fc.roa
File:                     84942845317cf37ab8fd368264827bfdd2aa20fc.roa (raw, json)
Hash identifier:          6a76n25+zZLNk5frsj0vZr52z6X0h3fXtGB8+P7v8EQ=
Subject key identifier:   F9:E7:8B:58:92:AF:57:18:BD:93:09:45:8F:94:93:5E:51:23:CC:65
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15305E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/84942845317cf37ab8fd368264827bfdd2aa20fc.roa
Signing time:             Wed 18 Aug 2021 19:16:29 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6040::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388638 (0x15305e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=84942845317cf37ab8fd368264827bfdd2aa20fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:ef:53:eb:1b:18:e1:d4:7a:e2:24:a7:3a:
                    1e:d0:8b:4d:fa:b6:01:4e:6b:33:7d:b0:14:42:fe:
                    7a:8c:67:24:3a:fd:0a:11:9a:bd:44:8a:7e:b4:69:
                    9d:78:59:c0:c0:a5:d1:c8:63:1f:e0:35:f1:37:0f:
                    02:f2:a8:1e:f0:39:e4:10:27:d7:64:9c:a1:33:b3:
                    a8:e2:d1:d2:44:05:47:cf:86:2c:8d:e8:65:5e:89:
                    a3:14:03:03:4c:3d:6d:3b:d7:3f:02:70:e9:82:6a:
                    f7:ca:1d:69:39:30:9e:1d:8a:3b:55:2c:bf:84:d5:
                    e7:47:da:a1:10:7c:9f:ad:70:cb:ca:f7:ef:73:75:
                    5d:b6:3b:48:38:5a:4d:d6:cc:44:2c:c2:2f:de:6c:
                    42:b6:c6:a9:22:c9:ef:e4:5c:43:ba:2a:ee:e1:f8:
                    11:6e:12:47:58:a1:d6:23:f5:22:aa:5a:51:ce:9e:
                    11:c3:50:f6:a0:ac:da:19:7d:28:7e:62:ac:fb:d9:
                    5e:ea:3b:ae:15:db:44:7e:71:e8:4a:f3:40:69:0f:
                    cf:d8:05:8a:6c:22:20:ee:dd:f9:e3:81:52:cc:b5:
                    7b:16:ee:71:8f:bd:3d:ef:85:5f:5f:53:68:4d:40:
                    b1:79:c2:10:1a:39:d6:a1:ec:bd:cb:62:a3:43:56:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E7:8B:58:92:AF:57:18:BD:93:09:45:8F:94:93:5E:51:23:CC:65
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/84942845317cf37ab8fd368264827bfdd2aa20fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6040::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:16:51:6c:24:5c:91:d5:ff:db:c1:e9:69:9c:b3:50:4d:1e:
         da:80:09:cd:70:43:78:c1:69:c8:5d:d8:18:b1:76:17:80:4a:
         b3:7f:da:38:12:d2:ed:c6:3e:6a:48:d3:84:a0:53:09:46:1a:
         d7:99:e5:04:06:9f:3b:68:32:65:f8:f3:20:ba:83:fb:a0:90:
         61:07:65:28:9b:f1:42:b1:86:b2:7e:f5:da:62:79:45:79:c0:
         45:de:b0:35:8f:06:1e:d0:09:ec:22:a2:f5:09:55:95:54:f3:
         2b:38:80:f8:39:fe:5d:0c:1b:7b:34:97:e6:ea:ee:53:eb:72:
         16:56:cd:63:e2:ef:11:7a:d3:72:88:ff:60:a1:f4:dc:57:e9:
         a6:f0:06:5c:06:35:7b:5b:65:75:f8:a9:0e:d5:ce:6d:0c:9b:
         a7:7c:e7:4a:c7:93:ba:6a:b7:3b:7e:b6:ed:14:ff:f3:11:66:
         b5:81:ea:39:31:c6:a8:df:12:50:de:ac:bc:24:6d:5a:fb:d6:
         ef:4c:e9:57:b3:92:a5:0e:a4:91:7b:fb:3f:de:a9:77:2d:b7:
         29:58:75:91:a0:4a:94:4e:8a:d5:f7:95:4e:29:01:4b:04:6d:
         1d:91:65:bc:e2:87:1f:55:30:c4:57:fd:21:bd:d3:56:2a:b3:
         59:bb:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----