Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/97063bc7ba0769404770870c0c04cb58bfd1fe98.roa
File:                     97063bc7ba0769404770870c0c04cb58bfd1fe98.roa (raw, json)
Hash identifier:          BRzzKWwValxsiTXxedVPjKEQqmeZ8p3ZX0XsFhU74DI=
Subject key identifier:   CE:A2:94:98:41:8C:D3:B3:15:91:7B:DD:EC:B0:39:5B:92:D6:7D:DB
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1544CA
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/97063bc7ba0769404770870c0c04cb58bfd1fe98.roa
Signing time:             Wed 18 Aug 2021 19:52:26 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6046::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393866 (0x1544ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=97063bc7ba0769404770870c0c04cb58bfd1fe98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:6e:2f:d9:b0:8a:da:7e:88:e6:05:16:97:
                    9a:36:58:60:3f:29:af:0e:87:02:f6:5b:ff:23:6d:
                    71:01:76:8c:44:be:7a:11:5b:64:3d:4b:c8:6f:49:
                    90:57:30:77:7f:f9:86:a0:d3:ff:08:e2:2f:dd:87:
                    15:f9:e8:1f:f4:94:1f:a9:89:57:aa:42:99:48:6d:
                    47:1b:a3:d1:c6:c6:68:c5:2e:c8:01:1b:be:ba:94:
                    23:37:a0:e9:5a:2f:66:77:bf:81:0d:79:6f:2a:89:
                    68:c7:16:16:2a:42:e1:75:b2:76:53:64:38:ca:5b:
                    9a:e4:c9:93:d8:e6:92:5f:a9:69:9c:b1:4d:7c:eb:
                    4a:ad:96:87:35:88:37:90:81:b3:60:1e:b0:a1:4d:
                    22:69:48:35:58:c0:2b:d5:1a:ba:9d:6e:b3:fa:2c:
                    89:32:50:86:d2:d1:13:69:1c:f8:ab:6d:90:42:8a:
                    94:3b:d8:3a:1e:31:02:88:c2:ce:fe:b6:3b:34:d0:
                    8e:50:52:6e:8b:64:4b:3f:9e:1c:53:d4:21:37:42:
                    e4:ee:85:59:68:c0:ae:b7:35:ce:f8:1e:73:4c:61:
                    58:82:09:fb:30:d2:96:de:88:65:ed:0c:de:8f:4a:
                    52:5d:53:93:36:e0:c5:e7:52:c2:43:53:99:7c:76:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A2:94:98:41:8C:D3:B3:15:91:7B:DD:EC:B0:39:5B:92:D6:7D:DB
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/97063bc7ba0769404770870c0c04cb58bfd1fe98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6046::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:52:8e:7b:e9:ec:18:b2:75:f5:da:c8:9e:fc:9b:75:07:
         12:dc:0c:ad:1c:bd:aa:0f:15:8b:d0:4c:5f:08:4c:0b:8b:cb:
         a4:32:69:05:2c:9b:3e:77:0a:8e:d9:0d:26:d4:87:57:60:f4:
         54:9f:62:44:94:9b:70:48:2d:31:80:49:5f:94:70:e8:8d:8e:
         a5:a0:fa:72:a5:9e:0e:ee:ca:16:09:44:5d:a5:bf:39:bd:99:
         a2:a9:a1:c0:70:2c:6d:64:e1:4d:58:24:20:ff:7a:21:d7:0a:
         32:1c:8e:f7:60:84:62:44:9c:84:b6:32:0f:a2:34:82:a5:fe:
         a0:6f:de:f8:f4:2c:0d:75:36:4b:70:c3:a6:36:b2:7f:90:85:
         2d:33:8c:d2:a0:80:df:2f:a6:fc:8b:17:40:5c:eb:7b:03:ab:
         50:c8:51:0f:6a:8a:37:8e:f9:53:e5:b3:b1:7f:99:fa:1e:8e:
         bf:42:b6:1b:79:d9:5d:d0:a2:41:7c:4d:d2:13:d5:5a:b2:cf:
         76:bb:c4:4b:b2:44:fc:3e:5e:40:09:3e:c3:1e:02:c0:53:bf:
         f3:16:6d:b7:4c:29:2f:9e:ab:63:72:1e:8b:95:23:03:e5:6a:
         c0:83:cb:9b:9e:dc:df:56:e3:40:fd:e2:6c:dc:68:be:0e:d6:
         12:b7:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----