Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e52441bb45157f4e4c2d80cf04713bc4d682ab88.roa
File:                     e52441bb45157f4e4c2d80cf04713bc4d682ab88.roa (raw, json)
Hash identifier:          LGKtDFAQ+oysU2RozrAUp8y8dK46XL3XtU7Jrtcawks=
Subject key identifier:   4B:1E:C9:49:DE:44:4D:1A:AE:17:3B:FD:29:29:4C:83:8D:9C:85:66
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       124404
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e52441bb45157f4e4c2d80cf04713bc4d682ab88.roa
Signing time:             Wed 12 May 2021 03:33:20 +0000
ROA not before:           Wed 12 May 2021 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:601d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197060 (0x124404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: May 12 03:00:00 2021 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=e52441bb45157f4e4c2d80cf04713bc4d682ab88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:80:30:ef:4c:1d:ed:8d:68:72:04:ee:6d:
                    ca:7c:30:cb:8f:ae:a1:c4:40:72:14:9a:0d:c9:b0:
                    0d:57:34:e2:27:f5:06:e2:48:79:08:b9:0e:5e:7c:
                    dd:54:7c:de:63:a2:df:19:b2:97:7b:53:a3:fc:ac:
                    ca:18:15:2d:ca:f4:5f:51:76:50:dc:c9:44:f6:c6:
                    82:6d:dd:a4:15:3c:92:e1:bc:8e:42:22:04:1e:b0:
                    70:ff:3a:ca:65:e0:cc:a8:b9:1e:8c:3e:53:69:da:
                    ea:ff:f2:0c:49:07:f6:c6:ef:31:2e:e7:31:8f:49:
                    1a:d8:ce:54:58:29:c3:39:2a:f4:8f:04:a4:dc:4c:
                    63:70:1b:91:52:4b:fc:06:ea:f9:fe:02:94:93:a1:
                    30:bb:73:81:68:51:83:2e:c4:a6:e4:77:39:22:c9:
                    0f:7d:2f:2d:5b:80:27:5a:89:11:c9:4a:ca:28:dc:
                    24:f1:6e:7a:9a:ed:7a:f0:7e:38:1b:9b:89:b7:57:
                    7f:44:8b:f8:80:9c:54:a9:77:be:a2:ee:cf:99:68:
                    55:96:f4:b8:87:d5:c2:bb:3f:2b:78:91:46:17:82:
                    eb:2b:ee:bb:9f:a6:89:1b:df:ae:8b:6a:eb:62:f3:
                    9a:78:22:5b:3a:33:4d:23:14:68:6e:1c:70:a4:9a:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:C9:49:DE:44:4D:1A:AE:17:3B:FD:29:29:4C:83:8D:9C:85:66
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e52441bb45157f4e4c2d80cf04713bc4d682ab88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:601d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:ed:23:b1:24:d7:ed:62:45:09:09:2e:7a:8d:4c:b8:20:67:
         10:e2:83:ae:36:68:63:3b:1e:f0:0a:f2:ef:1e:52:9b:12:bf:
         cb:f6:55:0c:5a:2a:13:fb:ca:7a:c9:6f:21:fa:0d:9a:7e:70:
         5e:aa:f8:ee:64:f2:de:a4:e1:14:f4:48:43:65:87:23:0a:a4:
         27:cd:b3:57:7b:a5:4b:27:de:df:7e:8f:15:45:71:a2:78:2f:
         1b:cc:5f:7f:21:1d:8b:84:84:ee:b1:99:ea:9b:ec:89:de:a1:
         c1:28:d1:a0:04:16:08:ba:d2:1a:da:e6:ee:98:88:99:d4:b6:
         66:64:72:23:d9:31:da:4e:17:34:63:87:4e:57:74:25:55:37:
         12:9c:4c:68:da:9e:28:fc:4a:46:80:1f:46:32:82:7b:60:90:
         d5:e4:f2:8a:33:41:96:44:0b:93:cf:eb:1b:54:b4:38:e7:41:
         1d:e7:76:e7:ff:8e:63:07:53:2b:ee:40:0b:2e:47:fc:0e:7c:
         f0:00:e0:96:7f:8d:11:a2:be:32:4f:14:6b:a4:51:da:c3:4c:
         13:c7:8d:13:a3:92:10:8b:26:62:37:0d:ef:f3:c0:ac:e1:1e:
         66:9b:3a:85:8e:9a:94:29:9f:d4:0b:68:a9:89:8d:dc:21:9b:
         74:9e:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----