Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e3650786e88b84c4186e3da4c6555ff86eb07ac2.roa
File:                     e3650786e88b84c4186e3da4c6555ff86eb07ac2.roa (raw, json)
Hash identifier:          XOqxgurTibAxMQX9iRI1BT0pofojz1MMR/AR+9xU+Rg=
Subject key identifier:   60:22:6B:02:34:24:48:0A:33:99:F5:40:CB:3E:C9:56:30:C2:74:88
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1549AC
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e3650786e88b84c4186e3da4c6555ff86eb07ac2.roa
Signing time:             Wed 18 Aug 2021 19:56:06 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6047::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395116 (0x1549ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=e3650786e88b84c4186e3da4c6555ff86eb07ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:e1:37:be:86:1f:9c:93:86:50:1e:92:f6:
                    05:21:12:0f:d2:8b:ab:98:c6:a7:fa:24:98:ae:24:
                    b2:c9:9e:7e:ae:0d:0a:6f:ca:ae:5c:be:52:e6:69:
                    30:e0:6c:e4:d2:a8:80:e0:21:de:de:54:a5:2c:48:
                    11:3e:cf:3c:e2:81:3b:42:09:df:28:21:d4:9f:36:
                    cf:d4:98:86:99:36:36:6f:f5:6f:3f:1c:22:2a:9c:
                    b7:9f:bf:af:cc:c5:f0:09:65:7c:e7:a9:a1:ba:d0:
                    44:48:9e:59:56:41:0b:03:fb:83:15:29:85:30:5a:
                    7e:f0:4e:7c:1e:6a:0a:3b:9c:67:9c:7a:30:3a:95:
                    db:dc:41:de:8b:b1:ac:9a:16:e8:af:4e:49:e1:7e:
                    a9:28:4b:cf:19:bf:d1:ab:86:48:25:6e:f2:29:d4:
                    0e:68:53:ea:6d:1f:6f:6c:31:ab:cd:9a:c1:67:eb:
                    c5:a7:e3:4a:2f:ae:9b:b5:ff:74:f4:86:ed:bf:a4:
                    fb:ad:0d:03:1c:fc:2a:80:c3:c0:26:ea:ce:1e:f3:
                    0c:71:ab:4d:74:f5:fe:3e:9e:67:01:59:9b:38:24:
                    94:e2:6a:d2:88:3d:a0:dd:c3:bd:8e:14:f4:e3:7e:
                    ec:7b:7d:56:ff:bc:5d:3d:aa:96:c4:d9:c0:83:dc:
                    cc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:6B:02:34:24:48:0A:33:99:F5:40:CB:3E:C9:56:30:C2:74:88
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e3650786e88b84c4186e3da4c6555ff86eb07ac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6047::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:cd:e9:d0:ff:fa:74:23:06:9f:f5:15:6f:cd:73:84:0b:
         a5:54:ea:1b:0f:72:98:e8:28:16:ec:97:ce:ec:ae:0c:62:03:
         00:66:d9:29:47:d9:4b:86:f5:ff:24:5a:47:55:a9:79:db:02:
         a4:38:f2:d2:82:e0:30:83:15:92:c4:f4:fd:08:66:fe:04:c6:
         68:c2:6a:75:e2:a5:31:5b:11:75:b7:d2:ae:13:76:22:41:62:
         59:c0:e0:79:87:01:6b:b2:08:26:51:11:e4:a4:89:66:54:64:
         f4:c5:b6:45:e2:de:29:91:df:8a:24:c1:86:f0:3d:c6:23:d8:
         78:54:87:64:17:dc:f2:a7:24:35:c4:16:83:bd:0a:d5:21:05:
         fe:2c:c9:7d:fa:db:2a:23:f4:e1:ad:f4:4b:83:40:ad:4a:e3:
         d4:09:30:e8:fe:7e:84:1f:bd:47:90:fe:f6:75:04:a6:cf:ec:
         fe:30:9c:a4:7e:54:19:0c:66:33:69:5e:e2:6b:35:8d:b1:4f:
         73:44:1f:b1:b8:91:48:56:2d:30:da:3e:84:f3:ef:f2:af:cb:
         e6:53:fb:09:69:8a:a9:f3:bc:37:64:45:a7:53:d6:cf:aa:a7:
         9f:29:48:7e:7f:fe:89:ef:56:70:7b:cb:96:ab:db:bf:61:f1:
         a6:ca:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----