Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a860e0f0e185c696f9816eb5587e286dfb0dd172.roa
File:                     a860e0f0e185c696f9816eb5587e286dfb0dd172.roa (raw, json)
Hash identifier:          wXrZDpeqBpizvCx6IJP4EKwWGL7FeBpglxi/kIVFDes=
Subject key identifier:   91:93:43:BC:96:5C:6F:67:A8:58:10:A1:DC:59:BD:5A:DF:C0:F0:4E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F58EF
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a860e0f0e185c696f9816eb5587e286dfb0dd172.roa
Signing time:             Wed 24 Mar 2021 14:43:52 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        2001:1218:6002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005807 (0xf58ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=a860e0f0e185c696f9816eb5587e286dfb0dd172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:28:27:bb:2e:9c:1a:8f:81:be:58:7d:38:b7:
                    59:cd:94:0e:8d:48:4c:b7:1d:c0:de:f6:9a:12:e7:
                    19:85:b7:50:60:25:ae:b0:0a:42:44:04:86:32:34:
                    16:6a:23:af:11:5f:a4:12:94:22:1e:ea:85:7f:fb:
                    d2:b5:a7:a7:52:fa:25:3b:d4:c2:1b:84:a5:5f:b1:
                    08:ae:5e:90:0e:19:88:91:ed:cc:cc:b7:7c:6a:ca:
                    0e:55:9d:0e:d8:ce:70:cd:cc:b8:b4:96:af:91:34:
                    0f:5d:0a:0f:b3:98:c9:da:41:2e:cc:53:e0:18:f9:
                    85:9e:bf:28:19:0c:c0:c1:2b:cf:bc:2e:2e:e2:c0:
                    9d:59:e6:1f:03:1e:cb:f1:78:c4:f6:52:a8:0b:fb:
                    73:28:5e:3b:1d:ec:d2:8c:36:ad:b3:81:c3:3f:29:
                    e7:37:7c:70:dc:14:4c:2b:36:c1:72:85:96:33:2d:
                    75:7f:14:d1:1c:1d:3b:24:30:64:42:7b:25:74:50:
                    b5:54:3b:48:89:eb:cb:f8:26:01:a5:80:b6:8a:4b:
                    ce:14:86:59:7c:38:0e:5d:03:6d:81:f2:8c:9a:5f:
                    c0:e8:9e:04:93:1a:56:98:2d:63:e2:d2:97:be:1d:
                    15:f9:99:f5:db:66:25:1e:0b:f6:29:d1:7d:93:77:
                    82:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:93:43:BC:96:5C:6F:67:A8:58:10:A1:DC:59:BD:5A:DF:C0:F0:4E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/a860e0f0e185c696f9816eb5587e286dfb0dd172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:91:e5:40:8f:ee:78:7d:30:0c:cd:29:ea:20:d9:d8:e2:46:
         15:4b:ae:75:92:d4:09:55:e0:e6:6d:91:7c:14:3f:3c:cb:0a:
         e9:ce:67:0a:76:64:b3:3a:b9:3e:74:3a:62:d6:8d:ee:16:05:
         06:30:1f:6d:fb:40:a8:48:cb:40:d2:fd:29:88:a1:db:fc:fc:
         31:e3:f2:2a:ec:61:02:4b:2c:12:c3:78:34:dd:bd:94:03:b2:
         28:ee:1d:09:c4:12:b7:38:1b:95:cb:65:4c:c1:79:f2:c6:e8:
         14:b7:de:07:68:fc:76:e5:59:dc:52:cd:96:52:34:75:1e:e4:
         55:19:db:8b:10:f4:6b:03:a7:a7:d1:25:b0:04:88:fc:6c:a1:
         ef:2e:6d:0c:de:bf:a1:ca:ab:b4:1b:59:d5:1f:a7:1f:b1:37:
         51:d1:d0:5c:02:1e:22:19:d0:3a:33:4d:52:ea:be:45:5d:b2:
         21:82:42:d3:da:89:78:8a:2d:78:1e:14:a9:fb:d2:a9:00:0d:
         ba:a0:a5:39:5a:6b:03:68:f4:10:cf:f8:3b:e1:3f:59:b2:f0:
         0f:fc:91:52:3c:57:4d:60:f0:f1:b3:4f:0a:16:7d:39:f8:14:
         47:ff:23:c2:bf:3d:d8:55:17:a1:38:5d:e1:66:8a:ef:95:4a:
         c2:f8:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----