Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/93dc2c138468cffe6926c341f1b5ca7cb37f9226.roa
File:                     93dc2c138468cffe6926c341f1b5ca7cb37f9226.roa (raw, json)
Hash identifier:          Bkleg7ZqEnNPGM2Jv0isF/5vgPO3rsCpUeZ8bMgAVak=
Subject key identifier:   49:2F:4B:76:D6:24:00:29:56:EE:C7:96:EF:45:6B:D6:01:36:5F:62
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F5C7B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/93dc2c138468cffe6926c341f1b5ca7cb37f9226.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006715 (0xf5c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=93dc2c138468cffe6926c341f1b5ca7cb37f9226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:87:e9:68:b3:fb:a0:55:a8:13:7d:e7:6a:
                    2a:9e:8b:5e:42:f6:08:4a:4b:29:0a:bd:c7:37:1c:
                    47:eb:25:98:3d:f8:32:84:10:46:47:da:30:de:11:
                    df:fe:78:0d:f5:61:aa:fd:65:4d:32:c1:56:af:df:
                    06:3f:95:6e:5d:4c:4e:03:e6:c9:86:c5:f9:39:9d:
                    9e:1f:b7:7e:a2:03:62:6a:00:9c:ab:4d:5a:13:f4:
                    94:2a:72:fe:ce:54:dd:35:a3:62:e6:85:c5:30:57:
                    8b:c8:3d:49:93:d0:ec:6f:fe:71:3a:66:04:21:1f:
                    7f:23:42:37:45:de:10:3f:2c:c2:82:29:ad:da:12:
                    ff:b5:29:da:d5:70:aa:a9:20:93:89:42:0e:ba:4e:
                    3b:d4:23:e6:ab:36:ec:de:96:b6:42:88:75:2f:7d:
                    53:1b:3b:75:ae:fd:ae:a6:73:a2:59:b6:4c:23:69:
                    a5:7b:ad:a4:52:7d:51:29:95:2a:0c:29:96:cb:e2:
                    38:bf:0c:ab:00:70:a1:10:0a:8a:b1:f2:60:27:44:
                    9f:06:8d:a6:8b:e5:95:4b:8b:85:08:4c:1e:9f:16:
                    af:ca:2a:4c:04:63:42:71:6b:a1:92:0f:e7:94:30:
                    94:32:73:ad:52:cc:6b:8e:1b:db:7c:5f:e9:f1:06:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:4B:76:D6:24:00:29:56:EE:C7:96:EF:45:6B:D6:01:36:5F:62
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/93dc2c138468cffe6926c341f1b5ca7cb37f9226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:11:3d:c1:5b:76:f5:1b:7f:01:a8:6c:f0:ed:96:3b:cb:09:
         b4:f2:4f:04:df:4a:24:ac:69:ba:94:04:da:7c:c7:d3:86:9f:
         31:d6:07:2e:b8:2a:79:bb:4c:bb:33:9e:5c:dc:c2:5c:78:a6:
         ae:fa:6b:7d:47:ec:57:79:70:a9:b5:36:2b:96:28:ef:02:55:
         9f:48:8e:b3:00:cc:6b:a6:e0:e6:5f:ab:be:42:bf:4b:1f:39:
         69:62:8c:ee:0f:cf:a6:4f:a8:f5:67:1a:68:6f:40:57:1f:e1:
         06:04:6a:d4:e3:3e:0a:0e:e8:98:c8:8f:eb:0f:14:2d:35:dc:
         65:c7:a3:02:7d:1d:4d:1b:7c:47:9f:db:5d:2a:b3:d8:19:58:
         13:09:c7:51:6c:86:e4:d1:27:be:47:46:f6:8d:82:4f:86:c4:
         2a:ea:83:6b:81:b8:b2:ad:66:bd:66:26:e8:99:ea:a0:2c:1a:
         7c:f7:23:ed:77:4e:14:0c:87:a3:47:a1:34:79:99:ba:bb:be:
         e5:f0:41:a8:81:2e:c8:be:c9:cb:88:d6:8d:13:a3:bf:bf:a5:
         10:31:e7:25:a6:78:ff:7f:50:6b:87:65:09:95:d2:3c:43:57:
         6f:0b:33:f9:57:58:a0:42:b8:11:9d:d6:9f:46:b4:19:47:1a:
         f0:b1:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----