Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/85ca8fc94004327b07ff9e42c834d5cb17544b5b.roa
File:                     85ca8fc94004327b07ff9e42c834d5cb17544b5b.roa (raw, json)
Hash identifier:          zWd5dKBhaqYVdnKbXdYAOANtkkWGHDME1GA3vKKhGL4=
Subject key identifier:   C4:67:1B:89:87:3E:6C:7B:C3:0B:9B:45:48:C3:B0:AA:21:99:43:47
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15817E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/85ca8fc94004327b07ff9e42c834d5cb17544b5b.roa
Signing time:             Tue 24 Aug 2021 18:18:45 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:604c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409406 (0x15817e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=85ca8fc94004327b07ff9e42c834d5cb17544b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:6f:86:f4:8d:b6:1a:bd:98:e1:31:87:56:
                    aa:99:5a:ca:97:02:8e:c7:33:24:4b:42:b2:b0:5f:
                    eb:3a:9c:28:38:63:d4:30:81:e8:05:2f:de:a2:b0:
                    59:bb:2b:06:9a:6f:af:ec:50:43:32:d7:86:7d:97:
                    9a:7d:56:85:a3:d9:f0:ed:b2:72:fc:02:a9:56:86:
                    e0:45:2d:6d:4c:c3:d0:b1:50:1d:7f:6c:58:bc:29:
                    6b:25:0b:fb:ae:a9:f1:f2:ab:ff:f0:3c:1e:20:85:
                    5a:d0:f8:e2:c5:b7:21:d6:15:1a:2f:44:96:22:5b:
                    59:e9:06:83:2b:18:be:25:7b:d7:d4:6e:a7:2a:64:
                    45:b7:f4:65:b2:95:0e:50:7e:a8:a9:ad:d9:52:7a:
                    a9:0f:0a:e5:6d:7a:84:1e:8c:1a:cf:f2:76:ac:54:
                    58:73:6c:93:72:67:ed:7c:a9:e9:7d:9e:ae:38:b4:
                    7a:7e:ef:fe:38:ea:90:59:44:c3:e6:43:9b:08:a8:
                    7b:79:90:e4:4f:df:94:88:1a:9f:14:b9:ee:52:31:
                    11:98:20:40:8e:cf:3c:e2:21:21:93:87:b3:45:08:
                    34:8f:9b:05:02:4f:a8:24:52:b3:ba:b2:f4:72:ab:
                    8d:ef:1f:db:e5:3e:5c:04:15:be:fc:12:b4:ad:80:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:1B:89:87:3E:6C:7B:C3:0B:9B:45:48:C3:B0:AA:21:99:43:47
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/85ca8fc94004327b07ff9e42c834d5cb17544b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:604c::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:75:d9:48:db:19:c8:ee:f0:a9:e1:61:47:0e:e7:b9:1e:52:
         e7:aa:83:9c:02:56:a2:ca:d3:66:37:48:43:2a:ff:5f:d8:4a:
         7a:10:cd:d2:d5:54:08:6d:6a:13:0f:a9:1f:3e:3b:57:e3:d3:
         12:5c:ba:c0:9f:a9:b4:d2:f3:0e:21:4b:78:52:7d:b2:e0:48:
         f3:25:e0:39:45:88:94:22:96:c9:42:74:9b:91:b0:98:cb:59:
         62:87:88:e5:9a:e3:f7:8f:68:f1:35:94:4e:16:a4:20:cf:12:
         2c:eb:8c:0e:65:1e:e9:de:bd:87:a2:6d:ec:ad:ee:df:f6:a6:
         c5:d9:c9:6d:a5:a5:ea:9b:68:36:bd:40:c6:cc:0f:8e:f8:e2:
         2f:e9:2f:3b:bc:63:0e:75:b5:6e:9f:67:b0:a9:d8:e8:df:f1:
         e4:65:e9:8b:5d:c3:f1:d6:02:b8:14:c7:95:6e:fc:02:41:cf:
         e1:76:56:cc:68:ca:40:16:fd:69:8f:e9:4c:71:d0:c3:93:b0:
         f9:c9:08:57:dc:d7:d6:2c:db:00:a3:92:98:8a:38:b7:ea:f1:
         fa:68:2d:dd:4a:9e:01:29:b7:84:c2:15:8c:e5:ee:e3:ec:03:
         50:fa:9f:50:71:f5:af:fb:83:6d:0a:2e:15:5e:a5:7f:16:18:
         4c:14:b9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----