Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef7259943d49470193c0dc376fe6f0d7b6f7d62.roa
File:                     9ef7259943d49470193c0dc376fe6f0d7b6f7d62.roa (raw, json)
Hash identifier:          Y9pFj0uoP3vSllJ+DGSKsyduvrs0ceXdt4vszqjMUrA=
Subject key identifier:   F7:60:8A:3E:E1:0C:E3:04:FF:13:E0:EA:BD:9A:81:5C:1E:A7:F4:8E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15F6E8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef7259943d49470193c0dc376fe6f0d7b6f7d62.roa
Signing time:             Thu 26 Aug 2021 23:00:17 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439464 (0x15f6e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=9ef7259943d49470193c0dc376fe6f0d7b6f7d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:da:6b:06:f5:34:a6:34:20:65:71:84:76:
                    68:d7:b0:49:81:e1:8a:a0:9e:25:b0:1f:18:63:17:
                    71:f3:ee:5f:df:6c:17:27:13:70:84:f1:4d:13:cc:
                    8c:a0:da:fe:6f:b7:64:d0:4b:50:2b:eb:52:32:85:
                    35:46:a4:9f:f9:fb:54:a2:45:cf:97:1e:51:26:22:
                    63:c7:ac:49:36:7b:f4:88:03:69:cf:79:af:5d:58:
                    01:ec:6f:e6:57:b5:14:b6:49:d5:5b:60:de:d6:0f:
                    37:51:8b:8e:18:43:45:2f:12:6d:40:23:e9:14:97:
                    e8:98:7a:43:67:4e:b0:08:5d:ce:3b:f4:3f:da:65:
                    1a:21:ae:f2:e2:6f:cb:d3:ce:6b:27:d9:57:bf:e1:
                    cc:b0:72:24:44:2b:fc:9f:e1:5f:76:45:d7:cb:f1:
                    02:59:8e:92:74:14:72:ca:34:61:43:50:ee:66:5c:
                    67:2c:a2:b8:06:72:02:d3:3d:3c:12:57:7a:e6:81:
                    4e:ad:56:31:b4:f8:f8:f6:d2:09:1a:94:e3:3f:bb:
                    57:d8:da:0c:37:b7:85:ee:21:4f:6f:9f:a5:9c:e3:
                    33:28:64:11:73:a5:44:88:99:e3:e2:bc:bc:b1:b8:
                    16:b3:54:52:75:df:8c:9f:67:41:71:bf:d3:b0:21:
                    d4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:8A:3E:E1:0C:E3:04:FF:13:E0:EA:BD:9A:81:5C:1E:A7:F4:8E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9ef7259943d49470193c0dc376fe6f0d7b6f7d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:6f:22:fe:96:4f:52:d9:7e:5d:39:cf:5d:69:e3:db:01:
         71:e1:73:a2:b8:4b:58:91:05:50:c3:d4:7b:cb:b3:84:e2:74:
         83:6c:26:6c:e6:d9:2c:f9:6b:6d:63:96:9a:26:86:ea:50:06:
         33:9e:23:b7:87:1e:eb:c1:6a:96:bd:7a:d2:c3:22:41:48:af:
         9b:7f:d0:f6:42:c0:fc:5e:e1:08:05:cd:ef:04:9b:23:43:71:
         4b:a0:b1:67:31:70:4e:29:46:1d:82:33:4e:32:0c:21:91:09:
         e0:58:02:f0:c2:1f:9c:2d:6e:34:62:6d:17:3b:bb:e9:a3:1c:
         b5:40:bc:1a:5a:2e:bb:bc:51:38:e7:05:fc:c5:33:c6:66:49:
         3d:bc:92:08:14:d8:10:12:c4:d8:54:d7:ce:c3:c7:d2:00:f3:
         95:ab:15:ab:c9:60:09:a3:0f:de:33:07:ed:c0:60:99:d2:03:
         1a:69:96:29:d8:c9:2d:a0:f7:8c:3b:66:6d:37:46:13:86:d4:
         8a:63:82:a7:af:9f:61:37:13:29:0e:16:1a:60:cd:8d:32:4a:
         d6:f3:21:7a:cd:c6:84:87:ac:df:71:a5:a1:6d:a9:bd:22:6b:
         0f:3e:27:ea:c7:fd:32:75:56:62:9e:ca:6c:8e:66:a1:32:a4:
         03:0a:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----