Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b19266d6fb8abfaab92edb194f0a058e3272b856.roa
File:                     b19266d6fb8abfaab92edb194f0a058e3272b856.roa (raw, json)
Hash identifier:          1KZgtcYd86mJqr5tmqmmuFbXGz+bYVnwzYDMfrvweZY=
Subject key identifier:   27:25:4A:F4:BC:F5:47:F0:F5:E0:85:2E:AF:45:96:29:E5:14:A6:BE
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       152400
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b19266d6fb8abfaab92edb194f0a058e3272b856.roa
Signing time:             Wed 18 Aug 2021 18:41:52 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:603c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385472 (0x152400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=b19266d6fb8abfaab92edb194f0a058e3272b856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6a:e8:99:fb:17:c9:51:b3:7d:83:cc:fc:72:
                    10:d3:c4:39:f2:a5:69:f1:4b:20:d8:d5:d1:00:4f:
                    db:0e:96:98:22:9e:4c:33:c4:f1:b8:f6:2b:76:69:
                    d2:b1:0e:60:4e:fa:a2:87:5f:95:79:c3:2b:75:33:
                    e9:24:89:a9:87:b8:e0:67:f9:1c:54:a2:0e:fe:a1:
                    b8:28:1a:f2:9c:34:19:87:a4:0b:89:f3:be:68:a5:
                    92:dd:8a:de:74:2b:3e:21:cb:06:98:a6:2e:da:f9:
                    22:d8:b9:80:bb:58:2b:c0:df:1f:63:a7:af:f1:65:
                    04:92:6c:d8:77:13:c4:4b:5b:58:4b:ab:c8:f8:28:
                    0c:2a:30:cd:c4:8e:24:c8:cd:e9:e3:ee:05:70:d2:
                    98:66:40:be:ec:6a:aa:dd:e7:55:bc:f7:87:ec:43:
                    71:db:fd:6c:36:26:76:5a:0c:c1:c5:df:2e:5f:d0:
                    60:c1:b9:d4:bf:c8:dc:35:13:e9:53:a5:9e:df:cd:
                    2e:1a:e6:bb:d2:ce:3b:5b:0c:bc:2f:5a:70:c9:36:
                    65:44:26:36:80:6d:d2:3f:f4:9b:a3:4a:42:f1:e8:
                    79:74:fb:3c:41:30:19:5d:79:ed:7e:29:fc:64:45:
                    df:c1:3a:d2:c2:24:ac:d4:e2:b6:4a:8a:76:52:ed:
                    06:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:4A:F4:BC:F5:47:F0:F5:E0:85:2E:AF:45:96:29:E5:14:A6:BE
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b19266d6fb8abfaab92edb194f0a058e3272b856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:603c::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:de:eb:a6:5f:ea:10:eb:7c:28:4b:3f:1f:b9:f5:07:6e:5a:
         62:59:da:43:38:7a:46:9d:b0:60:6b:e2:cd:24:02:a0:1c:a5:
         a7:1f:dd:53:a6:b2:9f:34:9d:06:f1:c0:18:71:da:1d:1a:43:
         b4:d7:49:11:a0:43:35:10:90:62:3c:71:51:47:67:26:a7:6c:
         e1:6a:30:d8:46:8b:1f:35:b8:dd:b3:c7:70:88:4e:f3:a6:08:
         9b:f8:c5:69:df:8a:67:0b:41:1d:b7:93:c1:76:4b:e2:7b:fb:
         14:2c:32:0b:8d:ce:98:f8:06:4a:c6:d5:67:46:22:a0:62:2f:
         52:ca:6f:4e:2f:d3:3d:74:81:c0:ed:d0:a3:78:d9:67:8a:14:
         1a:61:7e:ac:97:e5:a7:12:d2:e4:63:2f:ed:60:5e:55:f1:b2:
         8c:bf:e7:6a:23:f5:45:8d:7b:f1:ec:b0:c7:9d:9c:eb:1c:ae:
         eb:f0:1b:9b:1c:5c:0f:67:0a:e6:f3:b9:7f:90:c2:a4:a6:18:
         31:f3:a6:0f:0a:44:34:09:a9:12:ec:3f:04:dc:d0:aa:6a:a6:
         19:b5:58:7e:ad:f6:20:9f:21:af:6c:2e:d5:33:6c:cb:22:79:
         82:a4:3c:77:41:30:7e:ac:db:64:4e:49:38:b6:87:be:91:06:
         75:1a:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----