Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d6c44d35cf139fb940621e993419ad347c53f008.roa
File:                     d6c44d35cf139fb940621e993419ad347c53f008.roa (raw, json)
Hash identifier:          wi3xshDT14ZQyZPNQ5k+CYUyB+5m6zbWP/zzFGQ3vFI=
Subject key identifier:   FD:76:59:CC:4B:55:F4:4D:92:5F:6D:53:6A:5F:98:F3:E3:D6:70:B3
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       136B15
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d6c44d35cf139fb940621e993419ad347c53f008.roa
Signing time:             Wed 23 Jun 2021 18:04:54 +0000
ROA not before:           Wed 23 Jun 2021 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6024::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272597 (0x136b15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun 23 03:00:00 2021 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=d6c44d35cf139fb940621e993419ad347c53f008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0b:5b:9e:b7:96:0b:af:cd:0f:4d:d2:31:c5:
                    ec:2d:25:ff:f6:43:fa:c2:a7:ce:a2:3b:fe:e0:e9:
                    34:37:de:89:06:db:21:9d:d4:18:0e:73:cf:8d:00:
                    00:ed:89:50:8d:8f:a9:2c:51:cc:c0:4e:78:40:9a:
                    59:0f:21:3d:4f:7f:e4:b2:98:7e:db:3d:23:48:6a:
                    3e:7d:52:44:b6:a5:27:0e:1c:c7:6c:70:c3:10:0f:
                    5f:3f:3d:f8:81:3e:20:4e:34:d2:88:9f:14:b2:9b:
                    05:13:d2:d1:33:8d:c2:28:a6:b7:13:7b:5e:f7:a2:
                    65:fe:bc:73:29:3c:af:26:a0:89:0c:c5:7f:13:bf:
                    7e:f4:ef:72:19:0d:bb:55:7c:db:4f:c6:39:b3:9f:
                    75:e5:9e:91:e2:2c:b4:ea:cf:3e:55:60:c3:43:8a:
                    0d:7c:54:52:04:12:ec:11:68:ea:97:ae:1b:d4:3d:
                    b6:04:95:0d:aa:f1:58:b7:4b:a5:ed:59:5d:78:f6:
                    7d:1d:1c:e5:8c:4a:2a:2f:e4:24:2e:3d:d0:2d:09:
                    48:6a:5f:4f:5d:60:f7:3b:24:f6:bf:3b:69:3c:c1:
                    b0:1b:06:07:d0:7c:97:e3:c0:88:95:7a:e9:b2:7a:
                    b9:85:78:e8:76:e2:c7:3b:d4:49:81:ea:0a:fc:cb:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:76:59:CC:4B:55:F4:4D:92:5F:6D:53:6A:5F:98:F3:E3:D6:70:B3
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/d6c44d35cf139fb940621e993419ad347c53f008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6024::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:ba:37:16:08:ab:e3:c0:43:bd:da:7c:16:62:97:66:1b:f6:
         8d:b1:80:47:18:ae:6c:97:a9:e5:7f:77:0a:42:59:bc:1c:c6:
         a9:34:23:8a:62:cb:5d:7a:80:07:72:f7:28:11:56:a3:57:a1:
         21:6f:11:08:45:48:66:32:5b:a4:6c:42:2b:e1:ba:fa:f3:f1:
         85:90:91:96:4c:57:c7:0d:56:dd:13:ff:97:1e:e6:20:fd:2d:
         b6:d5:3d:67:01:b0:39:cc:8d:67:92:0e:80:8e:c9:55:4c:0c:
         77:11:b3:da:3d:8a:3c:ad:97:5f:eb:c3:25:93:61:48:65:84:
         8c:fb:f1:11:a6:12:ab:c4:8b:1a:24:18:6c:c9:97:1c:32:71:
         bd:48:b3:d9:b2:2c:c4:b2:86:0b:59:17:ec:05:1a:49:4f:94:
         2d:f6:69:c5:97:a9:d5:cc:57:f7:30:96:35:f9:74:7c:38:67:
         5d:c6:86:82:c9:43:66:68:58:84:96:10:58:31:14:0e:9d:1f:
         d0:9d:60:b9:9b:2a:0f:40:26:7c:89:1c:33:50:a5:46:7b:df:
         db:6f:02:96:67:d3:f7:82:af:23:c1:6d:c2:67:e5:62:27:cf:
         99:4e:1a:58:32:aa:24:1f:32:54:13:03:5c:d4:b8:ad:35:47:
         c6:4b:ee:fe
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDE2sVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwNjIz
MDMwMDAwWhcNMjMwNjIzMDMwMDAwWjAzMTEwLwYDVQQDEyhkNmM0NGQzNWNmMTM5
ZmI5NDA2MjFlOTkzNDE5YWQzNDdjNTNmMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApgtbnreWC6/ND03SMcXsLSX/9kP6wqfOojv+4Ok0N96JBtsh
ndQYDnPPjQAA7YlQjY+pLFHMwE54QJpZDyE9T3/ksph+2z0jSGo+fVJEtqUnDhzH
bHDDEA9fPz34gT4gTjTSiJ8UspsFE9LRM43CKKa3E3te96Jl/rxzKTyvJqCJDMV/
E79+9O9yGQ27VXzbT8Y5s5915Z6R4iy06s8+VWDDQ4oNfFRSBBLsEWjql64b1D22
BJUNqvFYt0ul7VldePZ9HRzljEoqL+QkLj3QLQlIal9PXWD3OyT2vztpPMGwGwYH
0HyX48CIlXrpsnq5hXjoduLHO9RJgeoK/MvdTwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFP12WcxLVfRNkl9tU2pfmPPj1nCzMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2Q2YzQ0ZDM1Y2YxMzlmYjk0MDYyMWU5OTM0MTlhZDM0N2M1M2YwMDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgJDANBgkqhkiG9w0BAQsFAAOCAQEAh7o3Fgir48BD
vdp8FmKXZhv2jbGARxiubJep5X93CkJZvBzGqTQjimLLXXqAB3L3KBFWo1ehIW8R
CEVIZjJbpGxCK+G6+vPxhZCRlkxXxw1W3RP/lx7mIP0tttU9ZwGwOcyNZ5IOgI7J
VUwMdxGz2j2KPK2XX+vDJZNhSGWEjPvxEaYSq8SLGiQYbMmXHDJxvUiz2bIsxLKG
C1kX7AUaSU+ULfZpxZep1cxX9zCWNfl0fDhnXcaGgslDZmhYhJYQWDEUDp0f0J1g
uZsqD0AmfIkcM1ClRnvf228ClmfT94KvI8FtwmflYifPmU4aWDKqJB8yVBMDXNS4
rTVHxkvu/g==
-----END CERTIFICATE-----