Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9c77d2513f2da33f8fc8753596de093397f6c20b.roa
File:                     9c77d2513f2da33f8fc8753596de093397f6c20b.roa (raw, json)
Hash identifier:          MJh3/dsQiORVgfAsI6SHsbTC+FWXmjrAQVYqZ2yp8rA=
Subject key identifier:   5D:BC:24:5D:09:44:08:EF:97:13:FF:3D:E5:DE:B2:15:9A:E5:24:76
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       125817
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9c77d2513f2da33f8fc8753596de093397f6c20b.roa
Signing time:             Thu 13 May 2021 01:21:38 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:601a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1202199 (0x125817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=9c77d2513f2da33f8fc8753596de093397f6c20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:fa:79:5b:14:73:49:b9:be:53:23:47:3f:
                    b9:f8:b3:51:65:3e:5d:44:a8:da:9a:61:70:f6:11:
                    35:d7:6b:42:01:1f:2f:ec:bb:76:79:3d:4d:e4:c2:
                    e0:19:2d:2b:52:6a:68:30:a9:7b:c4:58:bc:f9:de:
                    93:45:90:14:a8:56:1e:c6:e8:47:4a:57:3b:59:52:
                    85:d9:2d:7f:34:e2:4c:e2:d8:d5:d5:2a:77:e1:31:
                    65:df:79:02:6c:22:d7:7c:45:40:52:e3:60:3e:48:
                    2a:bb:55:62:7c:1e:de:01:96:b1:cf:9a:65:17:b0:
                    50:a3:43:01:e5:07:e1:a1:4d:71:6d:2f:fe:16:b9:
                    54:6e:3d:ec:52:ab:ed:d0:46:09:a7:69:05:e4:d2:
                    6b:f5:f2:b3:f2:ad:c8:33:79:c0:16:fb:76:54:84:
                    f7:70:7c:bd:9f:3e:c1:f6:12:f5:44:3a:df:19:66:
                    b2:0d:e1:07:51:67:bc:01:4d:4d:70:11:a0:fe:26:
                    02:ea:77:11:9a:69:24:0d:88:fd:bf:c9:69:d0:78:
                    cd:5a:3b:de:63:f0:f5:d1:5e:1e:3e:d4:57:1a:91:
                    f9:7f:c3:bf:fd:90:22:fa:2c:44:60:ef:0b:e6:d4:
                    90:f9:be:c3:9c:da:9f:6d:e8:09:09:49:ee:23:e6:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BC:24:5D:09:44:08:EF:97:13:FF:3D:E5:DE:B2:15:9A:E5:24:76
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9c77d2513f2da33f8fc8753596de093397f6c20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:dc:40:85:68:46:1f:60:65:36:82:6b:67:a6:01:31:6c:55:
         47:c3:b9:16:4b:b4:7c:4b:68:cc:4c:b4:a5:2d:22:71:69:df:
         58:7b:8b:05:f9:fd:d4:67:ed:f1:d9:34:b6:7c:74:43:6e:2e:
         f8:43:21:c4:bf:85:93:b0:0b:de:6e:50:12:3e:5e:11:2e:e1:
         5c:1c:a1:c8:d4:c7:96:9d:07:74:f5:bd:fd:72:62:3d:54:bf:
         d9:ee:1a:3a:43:c2:e7:65:d6:e7:77:24:14:4d:57:68:46:d3:
         a1:8a:e2:4e:ec:c0:d1:76:75:e5:dc:28:fc:61:da:16:9d:0b:
         5e:d5:fb:10:60:74:a8:03:5d:75:37:87:ce:4e:03:2c:b2:d0:
         b0:fc:97:da:9e:42:f1:a9:58:30:37:fa:93:0f:50:bd:c3:a8:
         54:ea:dc:91:35:6f:57:f8:db:78:72:74:66:84:2c:41:1d:3c:
         ae:11:0d:5d:65:e1:ab:78:2a:4a:55:bb:84:5d:29:fa:e0:58:
         f3:44:23:c0:a4:30:bd:b9:b7:b3:2f:64:cf:d0:eb:31:95:0a:
         84:50:cc:b1:25:b7:34:e1:1f:fe:c6:85:20:93:fc:23:74:03:
         ed:31:ac:92:bf:e7:f8:78:8a:2c:f2:a6:37:0b:82:bc:63:c1:
         c0:ee:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----