Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/91c2bd6bac68dad2cccaf052656d0a2cdfa87b22.roa
File:                     91c2bd6bac68dad2cccaf052656d0a2cdfa87b22.roa (raw, json)
Hash identifier:          urZXbBqha540yJEURlvFDsT7jmAjdRVA5yGXiOmMmTY=
Subject key identifier:   9D:10:EA:A7:9A:93:4B:A7:5D:DF:05:EE:C6:42:56:1E:AF:38:C3:06
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15F157
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/91c2bd6bac68dad2cccaf052656d0a2cdfa87b22.roa
Signing time:             Thu 26 Aug 2021 22:55:50 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438039 (0x15f157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=91c2bd6bac68dad2cccaf052656d0a2cdfa87b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:bd:7d:c2:fb:59:83:10:06:42:92:4d:6b:
                    39:36:b3:0d:14:f1:1a:9e:cd:44:a3:a5:11:75:88:
                    e2:af:22:0b:39:f9:01:2f:03:a8:f2:a3:3e:e5:44:
                    4d:31:0d:6a:58:fd:5c:28:59:b7:0d:bc:c8:7e:18:
                    c0:87:54:0c:93:bf:e4:85:94:76:e5:40:07:89:33:
                    be:e0:62:56:80:b5:62:b9:a9:f9:cd:14:24:64:5c:
                    7d:47:44:49:07:d4:f3:be:bb:fa:24:89:f0:cc:23:
                    de:e2:59:7d:20:fa:5d:ee:3e:f8:7f:08:11:e5:99:
                    1e:7a:b6:a5:df:fe:16:9e:4e:4d:30:53:44:3d:d5:
                    df:55:db:c8:c4:1b:af:09:70:44:80:64:db:68:04:
                    02:03:d9:17:4f:aa:71:a5:c0:d7:ea:8a:24:68:12:
                    22:d7:45:86:16:c8:46:85:5b:3d:80:f9:20:2c:e6:
                    96:68:05:54:1a:7d:2a:d4:d9:da:ce:a5:ee:07:01:
                    0a:22:23:90:9c:73:29:56:df:89:0a:98:07:34:45:
                    f6:21:7d:0b:26:e3:84:b4:85:88:d1:bb:0a:8e:f8:
                    19:21:90:3f:9a:ab:4f:0d:84:6a:b0:34:3e:ba:4a:
                    41:26:17:8b:ec:4c:9b:c8:ef:8a:f2:c7:45:52:76:
                    65:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:EA:A7:9A:93:4B:A7:5D:DF:05:EE:C6:42:56:1E:AF:38:C3:06
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/91c2bd6bac68dad2cccaf052656d0a2cdfa87b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:fd:c8:e2:8f:23:73:25:ad:ae:38:0a:0b:a3:d5:69:b0:b8:
         76:af:25:4b:b5:e1:d0:7d:12:20:30:dd:f3:54:01:14:24:ad:
         45:7e:b7:4f:91:0e:f5:2e:92:13:ac:a7:72:1a:e7:8d:47:7f:
         aa:ee:61:1c:0c:3e:1e:dd:8e:44:3b:fc:34:62:b0:e4:4b:34:
         3a:c3:bf:4a:04:ca:0f:4f:e8:cd:00:07:16:86:ce:88:c8:51:
         ad:f8:8e:42:18:03:3c:3f:fe:e3:72:a6:c8:8c:31:9b:0d:ae:
         f8:fd:a7:4d:5e:14:82:b4:0f:cc:ce:48:b1:5b:a9:58:de:23:
         03:11:79:dd:88:ca:af:91:c2:ea:33:d6:ce:41:42:4c:82:3f:
         70:75:8b:bf:36:ea:9f:f9:10:2b:dd:ed:02:6b:be:26:b0:29:
         e8:c6:bc:42:2d:09:02:61:47:78:b2:4f:b4:de:b8:c7:93:9c:
         a7:96:56:d8:20:b6:69:29:4f:7b:f4:a9:d1:de:e3:24:de:eb:
         cd:84:0b:1c:52:1c:7e:8c:9e:02:b3:98:ba:2a:a3:b7:8d:1a:
         5f:ef:ef:74:10:ef:80:45:fb:96:98:60:34:fe:0b:27:81:ff:
         f5:b1:57:1c:dd:ec:56:ef:03:72:e4:55:3a:7a:a4:5d:a0:82:
         08:df:bd:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFfFXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI2
MDMwMDAwWhcNMjMwODI2MDMwMDAwWjAzMTEwLwYDVQQDEyg5MWMyYmQ2YmFjNjhk
YWQyY2NjYWYwNTI2NTZkMGEyY2RmYTg3YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArAq9fcL7WYMQBkKSTWs5NrMNFPEans1Eo6URdYjiryILOfkB
LwOo8qM+5URNMQ1qWP1cKFm3DbzIfhjAh1QMk7/khZR25UAHiTO+4GJWgLViuan5
zRQkZFx9R0RJB9Tzvrv6JInwzCPe4ll9IPpd7j74fwgR5Zkeeral3/4Wnk5NMFNE
PdXfVdvIxBuvCXBEgGTbaAQCA9kXT6pxpcDX6ookaBIi10WGFshGhVs9gPkgLOaW
aAVUGn0q1NnazqXuBwEKIiOQnHMpVt+JCpgHNEX2IX0LJuOEtIWI0bsKjvgZIZA/
mqtPDYRqsDQ+ukpBJheL7EybyO+K8sdFUnZl8QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJ0Q6qeak0unXd8F7sZCVh6vOMMGMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzkxYzJiZDZiYWM2OGRhZDJjY2NhZjA1MjY1NmQwYTJjZGZhODdiMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgtTANBgkqhkiG9w0BAQsFAAOCAQEAif3I4o8jcyWt
rjgKC6PVabC4dq8lS7Xh0H0SIDDd81QBFCStRX63T5EO9S6SE6ynchrnjUd/qu5h
HAw+Ht2ORDv8NGKw5Es0OsO/SgTKD0/ozQAHFobOiMhRrfiOQhgDPD/+43KmyIwx
mw2u+P2nTV4UgrQPzM5IsVupWN4jAxF53YjKr5HC6jPWzkFCTII/cHWLvzbqn/kQ
K93tAmu+JrAp6Ma8Qi0JAmFHeLJPtN64x5Ocp5ZW2CC2aSlPe/Sp0d7jJN7rzYQL
HFIcfoyeArOYuiqjt40aX+/vdBDvgEX7lphgNP4LJ4H/9bFXHN3sVu8DcuRVOnqk
XaCCCN+9Ow==
-----END CERTIFICATE-----