Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a69136aef27d896db8bf973d0a0dc30caa213472.roa
File:                     a69136aef27d896db8bf973d0a0dc30caa213472.roa (raw, json)
Hash identifier:          eLA8mwAoYwAOmaUh+MagwyqHsu5kC1hFuJ8nV0Yw380=
Subject key identifier:   0E:16:D7:4D:D3:58:51:71:41:61:C4:4C:10:66:FD:9B:D1:CD:14:B9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F5033
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a69136aef27d896db8bf973d0a0dc30caa213472.roa
Signing time:             Wed 24 Mar 2021 14:43:51 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003571 (0xf5033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=a69136aef27d896db8bf973d0a0dc30caa213472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:14:d4:4b:79:e0:f3:1a:83:e5:2b:9c:b4:
                    c1:97:f3:e4:70:da:a5:bf:5d:5c:fe:41:d6:8c:97:
                    6a:b9:fc:b3:b7:56:be:6c:05:06:64:8a:dc:42:ba:
                    43:c8:d3:5f:e1:13:3b:3d:e1:79:3e:8e:70:67:00:
                    4f:08:38:46:24:6a:d8:5b:81:55:23:5c:6b:7d:48:
                    3c:e8:29:09:11:f1:1a:43:ec:c3:c4:5c:af:9b:3c:
                    ed:fb:b5:bc:4d:94:d3:b6:a9:23:55:c3:a0:2b:75:
                    ac:4a:bb:61:0e:d0:1b:6e:bc:89:fc:56:c2:d6:10:
                    92:2d:0d:32:e4:be:f0:a3:98:41:36:32:39:39:83:
                    3b:e6:ed:a4:1b:1d:86:06:44:ee:cf:95:4f:e1:46:
                    a5:43:31:7f:a5:c3:43:23:c8:e2:d1:0a:c2:60:77:
                    34:ff:c3:25:17:68:e0:a9:8f:25:0b:e6:17:21:b5:
                    7d:ac:ba:6f:d7:c0:dc:b5:18:74:dc:d9:21:d8:8d:
                    bd:c6:08:3d:cd:0a:93:1a:23:bb:ff:ea:6e:57:e6:
                    a4:2e:a3:4c:b9:3b:31:3b:31:89:4a:e7:fa:fc:43:
                    7d:be:a4:9a:eb:4c:ca:87:af:46:78:45:f9:a9:0d:
                    7b:1d:2a:3a:a3:71:10:d8:fd:28:01:bc:c6:54:63:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:16:D7:4D:D3:58:51:71:41:61:C4:4C:10:66:FD:9B:D1:CD:14:B9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a69136aef27d896db8bf973d0a0dc30caa213472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:cf:00:08:1e:99:b7:9e:6e:e5:43:63:49:ef:dd:d3:a2:57:
         95:f4:6b:88:eb:4c:99:ff:86:b6:61:37:d7:ef:28:dc:a2:23:
         3b:71:e4:87:80:c6:eb:bd:46:8d:ab:15:ff:bd:8c:59:a3:26:
         aa:2b:b6:a4:0d:18:63:0e:0f:9f:07:42:98:74:56:cf:a6:29:
         24:c4:e9:f3:1d:e4:1c:e5:46:f3:44:f4:65:96:c5:15:dc:19:
         55:87:ae:0d:28:b5:ea:4a:7e:cb:cc:12:3e:ab:07:f2:b1:cd:
         58:bc:8e:09:aa:50:cb:18:d5:1d:4a:cd:12:80:1b:3c:c3:3f:
         76:e5:72:5f:2e:c4:b0:a2:5a:2d:c8:57:1a:88:3b:b3:81:33:
         90:6e:35:d3:26:a4:32:af:bb:e5:6c:22:54:24:23:c2:99:f9:
         ee:2b:f9:92:21:33:88:dc:1b:44:07:f3:22:b5:81:bb:06:9b:
         f9:cf:df:06:e7:64:cb:19:ce:bd:1e:b7:84:96:ae:d9:f7:95:
         a2:0c:29:99:5f:d4:86:a7:f1:7c:23:68:76:47:d0:ef:7a:e2:
         c6:7c:5a:ff:c3:ad:4b:e5:24:1a:54:5e:dc:9e:a2:49:1f:3c:
         9d:7b:b4:4f:7b:6f:8f:48:f3:32:04:48:26:d1:4f:fa:54:d1:
         d0:60:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----