Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e5867f7f95f436771465f3ca59ff19f7123d3a16.roa
File:                     e5867f7f95f436771465f3ca59ff19f7123d3a16.roa (raw, json)
Hash identifier:          i4EDrOmxgKD6YemWZNd8/dSo/zIMI003tx9UVqOSNpM=
Subject key identifier:   8C:25:69:AF:09:AB:65:A0:00:57:B5:91:25:F4:D8:01:3A:00:8D:88
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15E98F
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e5867f7f95f436771465f3ca59ff19f7123d3a16.roa
Signing time:             Thu 26 Aug 2021 22:35:09 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60b2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436047 (0x15e98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=e5867f7f95f436771465f3ca59ff19f7123d3a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:38:b8:78:b2:7d:29:1c:5f:c4:e1:0e:ff:8a:
                    e1:70:bf:41:81:1b:7f:59:98:85:b8:58:ae:47:dc:
                    fd:50:14:13:22:ca:28:f5:53:c0:ec:4b:ee:02:3b:
                    27:9a:3d:b3:c7:b6:2b:6d:70:be:6a:33:cb:61:c5:
                    21:f2:87:70:93:0c:32:37:c5:34:87:95:69:29:28:
                    4f:c4:fa:cc:fa:55:e2:c3:ef:c1:dc:05:f1:19:7c:
                    2d:43:85:f7:4e:d6:eb:46:18:cb:cb:cb:80:44:32:
                    0c:a7:1f:4f:33:bc:e5:03:8e:8c:80:20:ed:59:6e:
                    16:2c:e3:44:d6:a1:8b:b5:71:5d:ea:6b:a8:e8:6e:
                    c4:34:62:5c:1f:d3:4f:99:20:73:d4:dd:ec:67:bd:
                    19:a5:b0:bd:9a:48:4e:46:00:b1:49:30:b3:69:09:
                    d6:50:90:85:52:c7:7e:7e:be:51:f3:bb:38:ef:3d:
                    c9:39:b6:76:bd:8f:b3:db:f2:fa:95:00:fd:93:03:
                    b7:c9:65:03:d8:b9:6c:7f:06:70:73:2c:7a:f1:e3:
                    05:fa:ac:89:84:31:14:21:c1:43:3a:85:96:81:c9:
                    a7:e8:65:cb:b2:91:4e:f2:fa:f3:b2:88:05:ff:79:
                    46:45:18:90:57:fc:f6:00:09:b3:6a:df:11:38:55:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:25:69:AF:09:AB:65:A0:00:57:B5:91:25:F4:D8:01:3A:00:8D:88
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e5867f7f95f436771465f3ca59ff19f7123d3a16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60b2::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:76:7a:8b:43:16:a8:eb:46:0b:e6:77:44:01:87:4c:f0:
         56:b6:b3:92:fc:45:8c:d5:b6:49:38:72:ad:f9:7d:49:c5:df:
         cf:cc:58:f9:05:62:7d:8c:4b:b8:82:6c:8b:4c:50:4e:8f:31:
         73:d7:1b:6b:9b:cc:ad:e9:73:46:b4:e5:a6:1a:2a:4d:c2:16:
         ec:b4:38:a8:93:1e:04:ba:fe:37:35:81:15:60:a2:ac:bb:07:
         a1:62:d7:be:69:65:e5:2f:82:63:f3:0c:18:4f:64:e3:3c:d9:
         a0:bf:da:4c:dc:ca:10:1d:c9:51:8c:ea:84:14:fd:dd:41:de:
         bb:7f:10:be:2d:c4:90:0e:e5:d1:36:ce:04:1d:6e:08:aa:ab:
         8f:3d:42:89:c0:db:73:ad:11:46:09:3f:eb:e6:76:b2:c3:8c:
         86:3f:76:bb:e5:c8:b2:01:4b:a9:2f:b6:7c:dd:bc:9a:bc:01:
         06:18:31:a4:de:d8:13:a6:98:37:43:d1:47:36:10:44:4f:76:
         b2:a9:d7:12:c8:4c:ef:4a:b8:c2:f4:fd:9d:80:38:a6:3c:a7:
         55:b6:5a:0c:c2:50:43:eb:36:21:79:de:89:07:a7:94:ea:a1:
         c4:1a:6f:87:18:4d:d1:ac:2f:ea:d1:44:bf:03:65:45:21:c4:
         f6:4e:97:b3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFemPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI2
MDMwMDAwWhcNMjMwODI2MDMwMDAwWjAzMTEwLwYDVQQDEyhlNTg2N2Y3Zjk1ZjQz
Njc3MTQ2NWYzY2E1OWZmMTlmNzEyM2QzYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkzi4eLJ9KRxfxOEO/4rhcL9BgRt/WZiFuFiuR9z9UBQTIsoo
9VPA7EvuAjsnmj2zx7YrbXC+ajPLYcUh8odwkwwyN8U0h5VpKShPxPrM+lXiw+/B
3AXxGXwtQ4X3TtbrRhjLy8uARDIMpx9PM7zlA46MgCDtWW4WLONE1qGLtXFd6muo
6G7ENGJcH9NPmSBz1N3sZ70ZpbC9mkhORgCxSTCzaQnWUJCFUsd+fr5R87s47z3J
ObZ2vY+z2/L6lQD9kwO3yWUD2LlsfwZwcyx68eMF+qyJhDEUIcFDOoWWgcmn6GXL
spFO8vrzsogF/3lGRRiQV/z2AAmzat8ROFVVdQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIwlaa8Jq2WgAFe1kSX02AE6AI2IMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2U1ODY3ZjdmOTVmNDM2NzcxNDY1ZjNjYTU5ZmYxOWY3MTIzZDNhMTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgsjANBgkqhkiG9w0BAQsFAAOCAQEAP9R2eotDFqjr
Rgvmd0QBh0zwVrazkvxFjNW2SThyrfl9ScXfz8xY+QVifYxLuIJsi0xQTo8xc9cb
a5vMrelzRrTlphoqTcIW7LQ4qJMeBLr+NzWBFWCirLsHoWLXvmll5S+CY/MMGE9k
4zzZoL/aTNzKEB3JUYzqhBT93UHeu38Qvi3EkA7l0TbOBB1uCKqrjz1CicDbc60R
Rgk/6+Z2ssOMhj92u+XIsgFLqS+2fN28mrwBBhgxpN7YE6aYN0PRRzYQRE92sqnX
EshM70q4wvT9nYA4pjynVbZaDMJQQ+s2IXneiQenlOqhxBpvhxhN0awv6tFEvwNl
RSHE9k6Xsw==
-----END CERTIFICATE-----