Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b75dcc611a9a2f162ec9445d96c2f23be81e7c03.roa
File:                     b75dcc611a9a2f162ec9445d96c2f23be81e7c03.roa (raw, json)
Hash identifier:          iLMqsGyJiM5r2YtZopRg2KJDjypHkTA2uRxueqLS4ck=
Subject key identifier:   82:02:DE:17:62:BB:A3:69:EF:0F:1A:79:90:D8:B3:0A:E9:B7:AE:F9
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15897D
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b75dcc611a9a2f162ec9445d96c2f23be81e7c03.roa
Signing time:             Tue 24 Aug 2021 18:26:18 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:604e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1411453 (0x15897d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=b75dcc611a9a2f162ec9445d96c2f23be81e7c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:fb:a4:db:09:0e:52:00:1a:cf:43:a8:d9:
                    74:85:16:c4:e8:85:c0:61:b8:3b:6a:54:4e:91:7c:
                    66:da:27:a6:97:34:b7:15:ad:7c:45:4f:9c:16:e1:
                    a3:3c:7f:93:06:47:34:7e:a2:0c:57:24:0c:f1:c4:
                    8a:36:4e:14:68:c0:00:bc:ca:ae:e6:8e:ff:49:ad:
                    fd:f2:d9:f3:f7:ed:3f:db:e4:2b:50:79:13:9e:4e:
                    4b:9c:ce:32:a9:c9:9c:30:4f:a2:85:3c:8c:20:ce:
                    1a:91:0d:da:22:b5:1e:4f:09:d0:e0:ae:f2:8c:02:
                    44:91:1c:84:07:6b:86:44:23:2e:1b:39:8f:0e:7c:
                    d2:c6:c8:b8:be:5a:e6:90:e9:48:18:70:56:35:c0:
                    9f:dc:7b:c5:9f:71:81:d7:51:59:f5:82:28:a7:ad:
                    b3:f5:44:5e:16:d7:6b:50:bb:4b:f3:36:51:99:cf:
                    2f:30:43:4a:20:fb:7d:69:51:3d:d7:9c:4c:b7:06:
                    4a:87:37:dd:dc:65:af:48:35:9e:15:92:84:2c:40:
                    ee:16:a5:e2:9a:0e:b9:e7:b1:c0:e6:9d:17:8a:25:
                    56:67:e2:c8:8f:27:40:95:7b:18:a9:91:25:cd:7a:
                    5d:fe:51:3f:69:06:3e:b5:9f:36:24:38:06:c4:59:
                    68:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:DE:17:62:BB:A3:69:EF:0F:1A:79:90:D8:B3:0A:E9:B7:AE:F9
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/b75dcc611a9a2f162ec9445d96c2f23be81e7c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:604e::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:5e:a0:eb:ed:ae:7f:9e:b1:87:b0:17:76:5c:54:1d:c2:6a:
         77:68:31:38:60:f6:ad:40:18:03:4f:a5:41:3f:18:60:59:01:
         a3:b2:fe:8f:2a:74:81:80:f0:20:ab:49:2e:70:c9:fa:f3:47:
         0e:bd:86:44:3a:fd:95:20:df:96:93:fd:8f:f7:6c:f2:17:b2:
         42:86:6b:88:e6:f7:9e:74:99:a2:05:0e:ad:62:b7:67:f2:23:
         08:47:d8:8a:9a:a7:55:65:77:d6:81:1a:6b:48:07:cb:ce:10:
         71:13:29:8b:34:ba:f0:0d:f9:dc:76:b2:cc:ec:42:36:1b:25:
         15:f0:bd:93:d4:7b:de:fd:46:4f:5f:63:68:db:ae:1b:95:4d:
         5d:c0:76:56:35:fb:f3:c3:3b:f1:d1:e0:53:ad:bf:35:2a:de:
         80:35:64:36:0f:04:1f:80:db:42:70:4d:3e:3e:5e:ca:0d:ca:
         2f:2f:67:75:76:9b:44:55:06:7c:10:13:3c:0c:12:18:1c:3e:
         76:10:d7:e1:64:47:e0:46:ed:f6:5d:d4:9e:f3:96:8e:50:27:
         7d:9b:63:11:e5:b1:51:22:4e:e5:fd:52:ce:23:be:d0:7f:e0:
         a8:dd:4e:da:a4:fb:67:9c:f4:43:bc:17:40:ff:bb:27:02:ce:
         e8:2a:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----