Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c8ff733fad67e48e95486ff496e67558ef58932d.roa
File:                     c8ff733fad67e48e95486ff496e67558ef58932d.roa (raw, json)
Hash identifier:          VUKuvzk3R3BdK223PgZrWtqY56JTSPVsb8qgtB9JF7c=
Subject key identifier:   7D:43:13:A9:55:A1:DA:86:69:23:9F:98:A9:6E:C4:F9:B8:B5:76:AF
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15A110
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c8ff733fad67e48e95486ff496e67558ef58932d.roa
Signing time:             Tue 24 Aug 2021 22:17:56 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6053::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417488 (0x15a110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=c8ff733fad67e48e95486ff496e67558ef58932d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:da:26:19:b4:db:be:4c:04:9d:e4:6c:62:2d:
                    a7:96:ed:fd:0e:ec:5c:7a:e9:2d:fe:a5:75:ed:76:
                    57:34:53:f8:f4:0c:fc:c3:ad:60:23:58:fe:3a:01:
                    35:9a:38:f0:9b:82:b1:5b:6b:10:d6:3b:82:d5:b3:
                    ef:a0:cc:02:67:76:cf:6e:72:50:b3:eb:f6:ca:1b:
                    a7:bf:66:41:44:31:0a:04:82:c6:54:f4:36:4f:ea:
                    6a:e8:10:03:9a:64:38:89:dc:23:85:bf:2e:08:a5:
                    51:b9:b6:bd:0b:d7:54:eb:cb:e3:74:97:63:82:f1:
                    76:78:81:25:a4:4e:10:2c:76:04:ea:a5:0a:aa:63:
                    de:61:50:7d:90:0e:4b:5d:2f:b6:45:33:59:c1:70:
                    2f:77:b0:cb:98:ef:43:c8:58:c2:0a:0a:35:ab:5a:
                    b6:1f:76:57:8b:45:0f:77:63:52:1a:62:d8:40:c2:
                    77:82:e1:64:51:c8:46:ac:cf:ee:8f:11:e7:03:9f:
                    92:77:28:dc:c5:a9:f2:86:8f:c0:74:49:e1:f4:63:
                    0e:70:6d:e9:c8:60:65:98:81:1a:cf:98:23:f7:2d:
                    25:8f:b3:f8:82:5c:51:8e:bc:72:de:1e:73:2d:54:
                    e4:3e:ed:fa:df:2d:92:c8:bb:40:d2:fb:b1:95:06:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:43:13:A9:55:A1:DA:86:69:23:9F:98:A9:6E:C4:F9:B8:B5:76:AF
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c8ff733fad67e48e95486ff496e67558ef58932d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6053::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:70:4b:8d:8f:df:6d:50:81:19:4d:a3:c5:3e:6d:fd:4a:
         0e:85:a7:6a:3f:86:a8:fa:ba:ad:03:ad:68:49:fc:62:52:41:
         3f:20:f1:1f:97:83:9c:13:34:a1:f4:dc:24:c5:8e:ab:96:37:
         4a:71:05:6f:ae:41:8a:19:cb:9b:bc:d9:06:a8:4b:74:b4:e0:
         ec:dd:0c:5d:83:c1:4e:d0:db:44:2f:2c:8c:a6:f8:b7:be:31:
         98:35:07:09:a1:be:a9:bc:a1:e3:3e:b2:0a:94:80:86:30:05:
         dd:ad:6c:e4:7b:88:02:3d:6c:65:37:4e:04:4c:ba:ab:5d:2a:
         00:9e:87:21:3a:11:e0:a4:c7:da:13:e7:17:2b:ff:95:00:e7:
         7c:75:41:52:a0:f3:e8:78:65:b6:59:8c:7f:28:29:46:2c:f9:
         dd:31:ad:79:d3:6d:1c:95:fb:34:c4:87:81:e8:e3:91:88:8c:
         17:47:1a:fd:2b:9f:c5:6a:8e:31:19:4b:7a:83:29:1c:2e:4b:
         29:2f:cb:43:34:83:02:75:77:f0:d5:64:e0:6a:25:d2:ba:2b:
         db:dd:a9:41:7c:fd:e4:71:ab:0e:f2:31:1f:f1:d9:8d:f7:17:
         24:10:c1:96:21:89:b4:64:25:f0:2c:bc:e4:d7:20:2a:f1:01:
         e8:3f:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----