Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/dbac79b02285b47323daeeef5531f937507c97d7.roa
File:                     dbac79b02285b47323daeeef5531f937507c97d7.roa (raw, json)
Hash identifier:          stEgoO+Em5n6WQiRde2oIzpKIbUYaPUMzD8o3EX3x7g=
Subject key identifier:   D3:B8:D5:27:15:E6:61:E4:48:51:04:82:26:91:70:79:5A:2C:78:0E
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14D651
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/dbac79b02285b47323daeeef5531f937507c97d7.roa
Signing time:             Wed 18 Aug 2021 16:39:07 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:602b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365585 (0x14d651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=dbac79b02285b47323daeeef5531f937507c97d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:68:c5:c7:6b:c4:aa:a6:aa:af:24:c6:ff:
                    d0:69:a0:13:71:54:50:48:67:62:1f:1b:37:98:78:
                    97:3d:ec:33:ac:e1:94:b0:05:ac:14:f2:3b:f0:41:
                    5e:d5:c5:9d:ba:24:be:36:57:80:5f:f4:c0:5b:57:
                    e9:a4:a1:3c:81:97:f4:19:f2:4a:71:72:a1:07:11:
                    73:61:9e:63:ca:c5:56:67:d0:ba:14:4c:0e:88:3c:
                    29:ae:8d:75:bc:e2:1b:89:61:65:32:0f:aa:c0:ce:
                    ea:5e:64:e4:f3:60:c6:0e:4e:1d:23:36:19:25:a4:
                    a8:d6:16:31:1b:99:d6:27:c2:b8:a1:87:c5:87:ae:
                    b8:38:dd:c6:89:ed:84:84:57:2b:cf:50:5c:a5:d2:
                    3c:57:e5:c2:06:76:6e:54:97:95:2e:d1:24:59:91:
                    03:81:bd:5a:f1:1f:03:af:99:85:8b:ba:5f:67:a3:
                    6e:8d:e7:16:12:cd:37:e7:10:46:a2:0f:ce:79:52:
                    9b:64:85:b3:ce:83:ea:0a:2b:33:3c:ce:98:3a:da:
                    48:6a:cd:f3:45:b5:a1:6c:dc:b1:86:76:d7:88:f8:
                    67:73:12:8c:50:9e:63:72:80:76:d6:84:6a:c7:db:
                    05:de:15:f8:13:c6:cb:c2:da:fa:23:e5:08:2d:e4:
                    60:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:D5:27:15:E6:61:E4:48:51:04:82:26:91:70:79:5A:2C:78:0E
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/dbac79b02285b47323daeeef5531f937507c97d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:602b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:9a:fe:0a:7c:a8:14:5c:a1:ac:eb:2e:78:9f:66:f4:cc:ee:
         e5:7e:9b:11:74:82:5f:32:00:fd:77:9a:14:e7:1c:4b:97:14:
         3e:f4:dc:45:d9:4d:94:66:9e:6d:8b:0e:15:7a:3b:ff:77:da:
         af:11:0c:fb:d2:c8:21:a5:5e:70:2e:a7:47:91:40:34:d5:a3:
         6e:a0:3f:ff:34:cf:c1:6c:a1:26:bb:9d:fe:da:31:a6:94:6a:
         ca:7f:80:b3:9c:26:bc:db:36:69:8c:58:5b:3e:c0:9d:5a:92:
         08:24:40:0f:97:90:c7:ec:bc:8e:4e:cd:f9:45:71:b6:2c:61:
         fe:50:92:36:32:cf:7d:58:83:39:bd:ce:67:bc:1d:f5:e0:5d:
         38:62:29:8c:70:66:b5:3c:cf:25:51:8e:f7:41:8f:a9:e0:09:
         a7:10:20:61:58:62:9d:bd:d6:54:1d:13:48:f1:ac:dc:a1:cd:
         b0:09:f9:bb:d4:89:73:e4:cf:5b:63:f8:ee:31:f4:2c:8e:97:
         5f:02:4e:1b:36:0e:ca:af:7f:1a:61:1b:bd:ef:84:c8:44:82:
         36:99:1e:f8:eb:29:08:1d:c1:33:76:12:2b:db:ea:55:f0:32:
         38:79:74:54:55:bd:95:01:54:87:e2:45:f9:f1:38:8e:46:09:
         e5:a7:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----