Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea68932e0f6840a01bbe6b79983e2d55b705ac7c.roa
File:                     ea68932e0f6840a01bbe6b79983e2d55b705ac7c.roa (raw, json)
Hash identifier:          3cGmoeDRke8jeF7rmaf0KCQ+5KXQXEk/9lygWPvbRmk=
Subject key identifier:   E7:4C:82:8B:16:F0:2B:24:7C:93:4F:7E:AB:28:52:B6:9D:0A:13:A8
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       14E391
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea68932e0f6840a01bbe6b79983e2d55b705ac7c.roa
Signing time:             Wed 18 Aug 2021 16:52:49 +0000
ROA not before:           Wed 18 Aug 2021 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:602e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368977 (0x14e391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 18 03:00:00 2021 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=ea68932e0f6840a01bbe6b79983e2d55b705ac7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:ec:75:ca:2d:08:42:4d:2b:c7:22:6f:64:
                    0f:bc:4f:c5:45:5b:9f:2b:73:62:d8:16:95:86:40:
                    ac:9b:9f:37:cd:52:c0:40:b9:d9:94:d4:b2:3c:66:
                    13:42:73:27:d9:7c:e1:a8:4b:f5:31:56:0e:16:dc:
                    c6:37:86:c5:35:77:d2:ae:77:c1:ad:d3:06:ce:8d:
                    cf:30:37:73:51:89:99:1d:0c:1d:88:3c:47:82:d1:
                    d0:f7:6a:be:7d:82:cd:ce:ff:f0:cb:75:60:6b:e0:
                    d0:16:61:04:32:93:61:0b:53:a9:7e:72:90:04:9b:
                    c4:e2:99:fb:ba:93:da:c0:23:1d:ea:cc:a9:3f:6b:
                    bb:ca:d5:27:52:7e:8a:fc:96:32:8c:3b:e3:0a:2f:
                    6a:d4:52:0a:ae:9a:f2:23:da:1c:58:19:cb:8a:b7:
                    69:c7:5b:66:a8:be:b2:d9:97:68:22:62:b4:cd:54:
                    95:0a:54:f1:a3:48:3f:63:e4:55:24:16:31:8e:4c:
                    22:33:40:76:4b:78:4d:7f:83:41:2b:c3:dc:87:89:
                    82:2a:1a:53:f9:43:d5:30:c9:36:6d:8e:b2:e8:9d:
                    c8:92:d6:a2:1f:1b:eb:6d:75:0b:f2:0d:15:70:62:
                    02:99:a0:97:8d:c4:b8:49:6d:d8:e8:66:ce:5f:74:
                    17:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4C:82:8B:16:F0:2B:24:7C:93:4F:7E:AB:28:52:B6:9D:0A:13:A8
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/ea68932e0f6840a01bbe6b79983e2d55b705ac7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:602e::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:58:9c:ab:39:44:16:32:27:d6:b0:43:7d:08:1d:17:4c:cb:
         8f:83:05:51:6a:97:c3:cc:48:eb:7a:a7:a8:f6:13:5b:0f:bd:
         94:d9:eb:18:79:3e:7e:2d:da:17:6f:58:70:5d:d2:cb:2f:1c:
         53:94:96:82:0d:84:a3:fc:47:84:45:74:3d:48:18:e1:a4:05:
         da:82:af:62:ac:9f:3c:9e:56:30:78:54:94:a4:6b:9c:4c:68:
         0e:53:bd:9b:d9:12:46:9d:f7:13:84:e8:5d:8f:78:4c:98:5c:
         3d:d5:57:a5:54:30:78:04:7f:9c:f5:2f:39:d8:73:7e:67:f9:
         73:f1:e3:85:78:1f:db:2f:6d:49:7a:66:0c:0b:51:11:66:10:
         7c:07:8b:10:7e:e1:8b:df:7a:80:34:3b:ad:b3:62:a3:45:6d:
         40:ea:e5:83:78:3f:95:c7:09:26:5e:38:86:44:27:f4:2c:ac:
         64:01:13:79:da:43:0a:3c:3a:99:91:dc:51:28:a6:91:65:5e:
         ce:74:26:28:8c:0d:87:22:39:61:f1:0e:e5:cf:59:e9:cd:1c:
         06:70:47:6f:73:0a:3f:35:2b:d4:84:98:43:93:64:98:e2:95:
         fd:0e:03:8c:55:16:bf:c6:11:13:37:67:50:95:96:2a:0a:8c:
         c4:6d:c5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----