Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/89f2b68358ab688dc85478b636dbb2617d50076e.roa
File:                     89f2b68358ab688dc85478b636dbb2617d50076e.roa (raw, json)
Hash identifier:          ffF1T7PZcAQsM72U+0jfTJ0ThEmDbmzO6PYtl2QMxW8=
Subject key identifier:   53:EF:18:BC:A3:44:D9:39:1F:3B:58:D7:7E:40:87:03:99:4F:39:FE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       136613
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/89f2b68358ab688dc85478b636dbb2617d50076e.roa
Signing time:             Wed 23 Jun 2021 18:02:21 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271315 (0x136613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=89f2b68358ab688dc85478b636dbb2617d50076e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b9:ac:0b:8d:f4:92:0a:c6:0e:9e:44:37:a2:
                    1c:1d:f2:a5:9d:8c:d4:75:93:07:3d:2f:6f:c1:d2:
                    74:4f:92:3d:3a:f7:bf:d6:7f:db:6f:2e:eb:79:5f:
                    e3:ef:ff:b8:30:33:42:f1:3a:6c:84:8c:aa:45:93:
                    26:c0:74:82:ef:7d:45:cc:bc:4d:63:21:6d:b6:1b:
                    22:58:e2:57:d9:87:f1:17:13:36:b3:21:e8:47:9a:
                    b8:03:08:a6:3c:39:48:cf:84:fe:40:af:7c:a1:ce:
                    80:e2:23:7d:62:db:16:b0:73:62:a5:fb:44:81:72:
                    0c:53:f2:f9:a4:fa:61:c2:ff:47:c4:bd:7d:da:e9:
                    3c:b3:f7:e7:fe:63:d0:d5:97:f4:bb:35:3b:85:b4:
                    2b:5d:f8:4d:bb:62:e9:e0:fa:e9:32:78:93:31:6b:
                    37:8e:9e:80:0c:46:a2:09:a5:80:f6:29:69:9e:6a:
                    41:4d:75:38:25:c8:32:f4:79:52:d3:64:70:56:a6:
                    2e:5f:6d:ec:6d:5f:cf:d2:d8:a8:46:71:60:5a:20:
                    e5:7b:01:b0:19:67:06:6e:72:e4:d5:c0:2f:2b:f0:
                    c6:57:8f:5e:c8:11:0c:c0:8c:4f:49:6a:0c:db:19:
                    f0:58:7e:23:07:de:6c:6e:f7:65:59:2f:8a:ca:19:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EF:18:BC:A3:44:D9:39:1F:3B:58:D7:7E:40:87:03:99:4F:39:FE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/89f2b68358ab688dc85478b636dbb2617d50076e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6023::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:fc:be:6e:da:51:cd:5f:ae:88:04:ae:21:ae:0e:f9:7d:
         d9:33:3c:54:48:f5:0d:db:6d:5e:33:f3:0b:4d:bf:33:1a:f0:
         0d:85:e1:53:49:3b:b3:be:01:cf:6d:d0:ef:8b:d0:2d:c4:0b:
         b9:48:28:93:0c:28:b6:b9:a6:38:0e:65:92:f8:e0:fb:8d:1a:
         5e:b2:fa:c9:dc:fa:ea:47:56:ac:b2:01:0b:22:e7:3e:bc:5c:
         a2:e8:2b:e9:d1:06:7d:96:6e:ed:4c:8a:0a:91:69:7b:99:e2:
         cc:7f:24:45:3d:e2:9e:31:c1:8c:98:09:9b:0b:03:3b:18:20:
         d0:a6:07:64:ce:52:4d:f6:32:40:ff:35:e8:96:06:2a:78:82:
         67:49:e0:7a:63:ce:1a:b5:dc:9b:d9:a8:04:ef:64:d2:2d:d6:
         a6:d9:32:58:d6:57:52:46:1a:de:8c:fd:0a:b6:a4:21:6c:f0:
         79:be:ed:ed:06:1b:19:05:14:22:c7:a0:29:5d:c8:79:73:1c:
         15:1a:3e:12:51:ca:08:94:a3:a3:dc:f1:6b:cd:c5:30:c6:c9:
         01:35:34:58:65:4d:69:49:ff:01:ef:e6:8f:df:12:8a:76:be:
         fe:65:54:62:de:a5:b0:9c:95:a3:42:13:7f:86:8e:40:22:26:
         aa:9b:bd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----