Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fade7a5f002beadee1393d683272d760eaddae04.roa
File:                     fade7a5f002beadee1393d683272d760eaddae04.roa (raw, json)
Hash identifier:          GNWmAhuUiVcXBFmg2r5UexaiNEPZIf5N4c0dc7wJnck=
Subject key identifier:   F4:4E:9D:A4:23:DC:BD:1A:F7:B0:61:24:94:B1:57:7B:0C:D6:75:6A
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       160D9A
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fade7a5f002beadee1393d683272d760eaddae04.roa
Signing time:             Thu 26 Aug 2021 23:16:13 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:60bb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1445274 (0x160d9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=fade7a5f002beadee1393d683272d760eaddae04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9e:94:7e:a0:71:7d:d5:93:75:4d:f9:1c:7d:
                    c4:e3:db:ef:ee:b3:58:35:fc:0f:88:37:bd:d1:94:
                    97:63:8c:90:ba:bb:a7:b7:d3:96:0a:6f:1f:40:47:
                    b1:38:67:f6:e4:10:d9:90:8f:49:05:d3:0b:0c:89:
                    7d:bf:fc:ec:3b:76:cd:03:90:92:38:c5:19:08:ee:
                    34:fd:a0:9e:ba:a7:4f:77:8c:02:30:95:df:2a:8a:
                    8c:fa:f7:36:b1:cc:c2:b4:b0:9c:bc:fc:e3:b7:f2:
                    c4:e1:2c:5c:a8:28:8e:2b:42:d8:b2:54:bb:29:e6:
                    12:0e:b5:32:b4:c4:a5:39:eb:39:d7:bb:3e:a0:bf:
                    10:ae:c5:d6:a8:68:d7:e8:11:02:2f:92:c8:71:7c:
                    dd:fa:f3:96:2f:61:1b:bd:61:e4:22:ce:8a:f0:b9:
                    20:b8:24:b6:61:92:e8:75:c5:81:32:84:39:68:31:
                    a5:29:3e:56:0e:d0:19:44:ff:9f:f1:73:86:ff:1a:
                    2b:0e:28:d7:53:f9:89:77:5e:f2:35:4e:e6:34:ad:
                    13:26:e3:e5:60:18:a7:61:50:45:28:dc:e9:21:32:
                    00:c2:8c:27:11:99:c4:04:48:ba:10:69:12:f1:a5:
                    d4:ff:36:8e:9b:3d:b3:17:aa:d7:5f:6f:85:4e:aa:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4E:9D:A4:23:DC:BD:1A:F7:B0:61:24:94:B1:57:7B:0C:D6:75:6A
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fade7a5f002beadee1393d683272d760eaddae04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:60bb::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:91:57:12:56:41:03:dc:49:b7:23:cb:44:c7:ce:f9:6c:
         01:41:29:55:73:b8:5e:5a:47:c0:62:a9:fe:fc:08:47:7f:da:
         43:00:7f:42:72:a0:28:64:c6:91:73:cb:d7:06:ff:c9:da:88:
         cc:8f:68:68:7f:d7:57:3a:43:3e:be:7c:fa:a7:19:05:30:f4:
         56:b1:59:a2:53:91:01:92:46:26:2b:7b:e7:47:48:0e:b8:75:
         80:bf:bc:e3:f9:02:cf:ae:1f:b9:6c:c0:1e:df:09:fc:56:23:
         27:1b:85:10:e1:08:81:30:29:e1:66:21:00:46:85:df:2d:07:
         c0:67:37:63:03:8b:0c:f8:87:15:82:da:4f:b7:9f:d2:3b:64:
         c2:3a:98:64:92:ef:53:d2:3c:9d:b1:49:12:84:c8:17:4c:a7:
         b0:99:71:7f:1f:8c:51:84:aa:14:3f:0f:54:de:32:b8:9a:5d:
         b1:2f:17:06:9c:2f:fb:9c:8b:e0:ca:f4:7e:4a:cd:80:ef:69:
         68:79:e3:41:1b:7a:db:cc:85:d9:d7:21:2c:04:34:3b:a8:91:
         34:c9:b6:c1:a0:00:05:26:24:fd:26:49:a3:d7:80:23:ab:c7:
         52:bf:58:eb:48:82:4b:f2:6b:1b:3c:cd:fc:40:7a:3a:01:ce:
         79:3c:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----