Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d667d24fb7c60e29981f8bca9cba45ec59617bfc.roa
File:                     d667d24fb7c60e29981f8bca9cba45ec59617bfc.roa (raw, json)
Hash identifier:          hFMI6ZvhF9PGME+WlRZEfW5sfeguWj9UNKtifZnOmOw=
Subject key identifier:   AD:BA:32:08:16:16:A8:5A:5C:E7:F4:A9:CB:EE:9C:67:B8:32:30:5F
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       159058
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d667d24fb7c60e29981f8bca9cba45ec59617bfc.roa
Signing time:             Tue 24 Aug 2021 18:41:50 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:604f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413208 (0x159058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=d667d24fb7c60e29981f8bca9cba45ec59617bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:88:df:9a:0a:6b:cb:83:34:3e:a5:9f:6a:cf:
                    01:74:84:8f:bb:07:3e:4d:d5:a0:7f:eb:80:ab:02:
                    7c:3f:ca:75:5a:48:16:03:30:4e:b5:5c:53:4f:f3:
                    20:fc:70:fd:d2:89:96:53:ba:3b:0b:cf:14:83:38:
                    aa:4a:c6:a6:8e:a0:0a:d2:9a:f9:5c:99:16:24:86:
                    4c:6b:db:6f:e0:6c:8f:9e:2e:2d:dd:6c:dc:04:f0:
                    cc:36:80:80:84:7e:c1:28:93:3f:fb:b7:bb:bc:2d:
                    c2:fb:f8:be:26:72:4d:83:1a:4e:60:80:a2:6d:2e:
                    73:27:f9:67:f4:b0:fe:82:fa:8f:ff:82:56:74:0a:
                    71:f4:7c:91:42:5d:08:39:e5:32:3c:83:06:af:d0:
                    d1:f9:bd:b1:dd:42:45:92:4b:17:27:fc:ed:c5:8e:
                    b2:58:80:91:63:b4:30:af:84:cb:40:75:f9:75:9d:
                    af:7c:23:85:9e:be:d5:d6:63:a2:39:16:30:08:53:
                    66:d1:ed:ed:19:20:16:b2:e6:39:18:34:f7:ab:19:
                    a3:15:36:dc:e4:79:55:81:5d:22:90:aa:c4:7e:a4:
                    1b:60:dc:47:f4:b0:72:ec:ef:f3:e9:ca:b5:e4:6e:
                    3c:f5:a6:eb:42:28:86:14:e9:db:ee:a9:7a:44:18:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:32:08:16:16:A8:5A:5C:E7:F4:A9:CB:EE:9C:67:B8:32:30:5F
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d667d24fb7c60e29981f8bca9cba45ec59617bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:604f::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1f:e9:0e:c9:b0:be:0a:a4:9a:fc:57:38:f4:1e:53:49:d4:
         71:77:10:3b:61:a5:78:b3:e7:83:38:80:49:d9:d9:d6:c6:e4:
         58:f8:cb:2a:49:54:07:5e:3f:9a:ad:af:da:3e:9c:aa:3b:0c:
         70:86:e5:53:54:cf:6e:43:76:79:03:c0:ad:a2:81:b4:56:44:
         73:50:91:e4:c0:fc:68:7e:57:65:40:78:21:ae:d6:fa:d8:6e:
         52:98:9c:4f:68:27:e6:16:4a:a2:3c:ab:ac:c9:a0:14:83:3c:
         83:fd:00:34:00:7f:1f:94:cf:97:d3:9c:3a:8c:5c:de:f8:10:
         dc:a2:88:1e:73:50:8e:82:b7:e3:ce:65:69:52:59:3e:d7:96:
         13:db:54:5b:9d:8d:12:61:29:0c:74:f7:fa:02:50:de:29:d0:
         24:5f:71:53:b1:2e:92:30:ed:59:51:1d:d3:6a:5c:92:39:5e:
         a3:92:9d:3a:a1:cd:c9:b4:0e:7c:2c:1c:ad:0d:c7:db:47:d2:
         d9:f2:e6:9a:7e:ab:8a:eb:ca:97:9b:f2:57:b8:b4:4a:a1:1e:
         4c:96:15:6e:f1:af:38:f7:ed:01:c5:f3:8d:cb:ef:16:60:cc:
         37:5b:77:72:00:c1:fc:c4:dd:2f:f3:b0:7f:e8:da:52:79:6e:
         48:9e:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----