Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c9646d2b56b7eb4e87e7c50015a02fdd0eef1e7a.roa
File:                     c9646d2b56b7eb4e87e7c50015a02fdd0eef1e7a.roa (raw, json)
Hash identifier:          F+acz9vRf4961m1J2rQ6bkrO7+EDFBpAezmNrzL5QEQ=
Subject key identifier:   2E:D4:0D:E5:A7:C7:C4:33:2A:C2:B3:B4:AE:5F:7F:B7:3C:E0:04:D6
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1532B8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c9646d2b56b7eb4e87e7c50015a02fdd0eef1e7a.roa
Signing time:             Wed 18 Aug 2021 19:19:10 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6041::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389240 (0x1532b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=c9646d2b56b7eb4e87e7c50015a02fdd0eef1e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:f1:4c:69:30:de:2a:b1:87:aa:28:38:b0:
                    41:69:a8:e9:ca:92:f8:95:6d:45:a5:b4:cc:42:1e:
                    47:08:4b:4b:20:c5:09:de:1e:95:40:58:1d:4b:64:
                    45:77:f2:5b:96:16:14:0e:d4:75:28:f1:24:e9:bd:
                    ca:67:92:ee:8a:00:1c:85:b5:4d:27:86:d8:ba:63:
                    33:4e:f8:77:87:87:67:b3:31:48:b9:53:76:d7:ea:
                    b1:a0:3e:4c:67:16:df:c6:cd:ea:74:61:ca:fb:81:
                    18:4c:fd:4f:60:d5:d6:b7:e4:35:e5:26:b6:66:a8:
                    0c:43:2a:98:1b:a0:cd:3d:8c:2f:c3:a7:d0:34:72:
                    80:27:7f:67:50:40:53:82:96:64:f7:b8:ab:c0:f7:
                    f1:8e:cf:e8:ed:ee:3f:4e:a6:d2:e5:dc:f0:dd:46:
                    3c:a9:e8:02:a4:e0:31:df:c5:5a:e0:78:28:c8:3d:
                    d2:29:f0:26:84:54:8a:c1:fa:9d:a0:6c:a9:d8:dd:
                    42:e3:29:0f:14:e1:9b:f3:55:c1:31:5a:9b:52:d8:
                    37:11:2a:fc:d0:1d:1e:40:a4:5b:b1:dc:87:c2:97:
                    8c:48:14:94:72:96:7b:ca:54:3b:5b:ac:45:82:2b:
                    e8:93:b6:6f:0b:d6:48:27:ee:89:9c:d3:a3:6d:a4:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D4:0D:E5:A7:C7:C4:33:2A:C2:B3:B4:AE:5F:7F:B7:3C:E0:04:D6
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/c9646d2b56b7eb4e87e7c50015a02fdd0eef1e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6041::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:3a:06:61:bc:47:01:fb:3b:19:84:aa:ef:3a:fc:a2:44:84:
         28:79:4b:7c:47:cc:45:38:fc:8f:c3:dd:af:8f:ec:5b:03:fd:
         ee:19:1e:2f:f0:e4:d0:68:3d:84:3c:c3:ba:dd:f0:f8:fd:e1:
         d6:92:d0:23:66:58:75:37:4a:c1:7b:b7:39:47:c2:c3:fd:b9:
         fd:af:5a:3a:71:13:b7:b8:54:9f:ed:33:2b:d1:3a:04:75:83:
         47:00:8f:4a:95:7a:f5:9c:43:a7:de:7d:41:5a:2a:80:23:75:
         26:3e:00:72:e5:e8:7c:27:af:7f:ce:bb:72:0a:9a:0c:55:32:
         01:4d:9c:18:bf:97:74:ab:d1:32:e2:cc:e0:b3:38:6a:0f:64:
         12:7f:58:5f:73:76:63:e3:6e:83:d1:96:5c:9b:66:27:67:e1:
         8f:9b:14:2d:6b:ce:b2:40:cc:1d:87:68:04:e5:a4:85:3f:64:
         4c:88:ad:aa:29:77:dc:2c:8a:a2:0d:a7:ca:d9:86:55:3a:0a:
         61:0c:13:92:ef:07:3d:e6:fc:f4:f5:46:db:cb:b0:19:98:23:
         b4:6d:76:1c:ec:e8:58:6a:88:22:88:47:28:db:e0:d6:40:a4:
         44:05:37:ee:ab:9d:3c:1a:be:dc:b8:af:4c:5c:2f:d7:a4:30:
         ec:12:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----