Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e77f8a1ffd663db4fa9c78c011d28a34145cb942.roa
File:                     e77f8a1ffd663db4fa9c78c011d28a34145cb942.roa (raw, json)
Hash identifier:          tGRqaacOtLW9e/lz7t6CoNmQ2wQtbYVQhXsevTbVCwY=
Subject key identifier:   09:2C:7F:A7:07:EB:D7:52:89:68:F8:4B:5A:88:B9:6E:05:52:56:DA
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       162076
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e77f8a1ffd663db4fa9c78c011d28a34145cb942.roa
Signing time:             Thu 26 Aug 2021 23:30:14 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:606c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450102 (0x162076)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=e77f8a1ffd663db4fa9c78c011d28a34145cb942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:0e:a5:b8:0a:ec:10:39:6f:dc:9e:a7:5c:
                    dd:45:26:e7:88:24:f9:21:50:71:54:4c:b5:60:0e:
                    2b:7a:51:ad:49:3b:fb:6c:a7:c7:52:36:b5:10:47:
                    e4:1e:11:98:3e:c3:1a:2f:de:eb:62:5f:a1:a7:f6:
                    25:24:70:70:59:09:20:5f:40:f2:aa:74:27:e0:90:
                    48:3d:12:94:ba:82:56:8c:a6:fa:d0:4d:5a:13:ff:
                    5f:6c:b0:14:4f:c6:7e:d5:b0:2b:ca:52:6d:22:d6:
                    2a:9b:a5:a8:63:95:c7:e3:96:5f:b0:a3:a4:b0:74:
                    80:37:e5:f5:ea:0b:0d:5d:31:a3:0a:1e:f2:b6:f6:
                    e6:b5:1b:5d:81:cd:fc:e2:f5:9c:3e:8d:f1:44:e0:
                    06:3c:1f:a5:39:1e:03:84:67:b0:82:ed:96:b2:f2:
                    5c:94:52:4c:51:17:4f:c2:86:0a:2a:fa:83:e4:8b:
                    b3:e9:a4:9b:e3:7e:1f:95:c0:a9:54:fd:e1:2c:9e:
                    72:9e:9e:8f:3a:c3:3d:4f:ba:6d:75:15:b3:5e:28:
                    cd:a9:59:19:66:3d:e8:c3:0b:41:21:11:38:e4:b2:
                    c8:45:79:18:f8:8d:5e:63:dc:96:07:86:f6:8b:45:
                    9c:3d:f0:cb:b6:98:55:64:2c:a4:8f:e1:41:1c:43:
                    a7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:7F:A7:07:EB:D7:52:89:68:F8:4B:5A:88:B9:6E:05:52:56:DA
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/e77f8a1ffd663db4fa9c78c011d28a34145cb942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:606c::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:4a:46:aa:42:1b:1f:d6:c6:5c:08:08:40:96:92:a5:b3:
         80:68:81:bc:7b:32:2d:93:00:14:32:6e:e4:02:4d:a6:86:02:
         ee:49:c3:6e:87:6e:75:6f:e6:1e:88:a8:5f:d5:5d:d5:92:4e:
         e4:d1:d0:62:9b:c5:e7:ed:5b:55:f5:88:38:25:20:30:17:21:
         b2:bc:9d:d2:1c:31:15:f6:d4:17:f8:60:2d:02:bf:f8:d5:e8:
         22:fd:dc:fe:de:c0:08:30:e6:98:ee:56:a7:56:43:d1:c1:e5:
         5c:57:74:35:7a:ea:d2:5d:2a:31:20:bc:41:b7:51:f2:9e:33:
         90:d1:97:fe:0a:c1:89:88:49:f3:69:08:6f:11:0a:d8:3e:b0:
         66:cf:08:44:24:20:83:04:58:07:9e:06:d9:42:54:b3:18:74:
         b9:8e:e1:a3:09:99:b5:c4:47:fb:93:40:5a:23:46:d3:03:4c:
         41:bf:56:a4:02:78:e0:cc:83:0a:d3:28:d0:9e:fd:8c:55:6c:
         62:f4:e5:75:42:c6:4e:99:95:16:14:e7:ed:16:2b:0d:8e:5b:
         31:01:ac:a1:3d:ce:ea:34:47:a9:56:86:f2:3b:c0:04:94:63:
         3a:84:10:87:70:59:cb:60:fe:a0:24:63:79:50:98:c5:06:91:
         89:52:54:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDFiB2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwODI2
MDMwMDAwWhcNMjMwODI2MDMwMDAwWjAzMTEwLwYDVQQDEyhlNzdmOGExZmZkNjYz
ZGI0ZmE5Yzc4YzAxMWQyOGEzNDE0NWNiOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkuQOpbgK7BA5b9yep1zdRSbniCT5IVBxVEy1YA4relGtSTv7
bKfHUja1EEfkHhGYPsMaL97rYl+hp/YlJHBwWQkgX0DyqnQn4JBIPRKUuoJWjKb6
0E1aE/9fbLAUT8Z+1bArylJtItYqm6WoY5XH45ZfsKOksHSAN+X16gsNXTGjCh7y
tvbmtRtdgc384vWcPo3xROAGPB+lOR4DhGewgu2WsvJclFJMURdPwoYKKvqD5Iuz
6aSb434flcCpVP3hLJ5ynp6POsM9T7ptdRWzXijNqVkZZj3owwtBIRE45LLIRXkY
+I1eY9yWB4b2i0WcPfDLtphVZCykj+FBHEOnfQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFAksf6cH69dSiWj4S1qIuW4FUlbaMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2U3N2Y4YTFmZmQ2NjNkYjRmYTljNzhjMDExZDI4YTM0MTQ1Y2I5NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABEhhgbDANBgkqhkiG9w0BAQsFAAOCAQEAhaZKRqpCGx/W
xlwICECWkqWzgGiBvHsyLZMAFDJu5AJNpoYC7knDbodudW/mHoioX9Vd1ZJO5NHQ
YpvF5+1bVfWIOCUgMBchsryd0hwxFfbUF/hgLQK/+NXoIv3c/t7ACDDmmO5Wp1ZD
0cHlXFd0NXrq0l0qMSC8QbdR8p4zkNGX/grBiYhJ82kIbxEK2D6wZs8IRCQggwRY
B54G2UJUsxh0uY7howmZtcRH+5NAWiNG0wNMQb9WpAJ44MyDCtMo0J79jFVsYvTl
dULGTpmVFhTn7RYrDY5bMQGsoT3O6jRHqVaG8jvABJRjOoQQh3BZy2D+oCRjeVCY
xQaRiVJUEA==
-----END CERTIFICATE-----