Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fda7a4e6ec889ecc16b0acb7e41ac7f9cdc7c2dd.roa
File:                     fda7a4e6ec889ecc16b0acb7e41ac7f9cdc7c2dd.roa (raw, json)
Hash identifier:          aPchsmzzLsecBvsalnfZhiPSSrMEpGwsBSX6Aj+nsN4=
Subject key identifier:   10:55:44:E9:9E:A1:49:AC:E0:A1:4F:55:C2:EC:A1:81:22:2F:89:AF
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       15B6B5
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fda7a4e6ec889ecc16b0acb7e41ac7f9cdc7c2dd.roa
Signing time:             Tue 24 Aug 2021 22:34:39 +0000
ROA not before:           Tue 24 Aug 2021 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6058::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423029 (0x15b6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Aug 24 03:00:00 2021 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=fda7a4e6ec889ecc16b0acb7e41ac7f9cdc7c2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:f2:6c:53:07:3b:99:3b:94:02:63:2e:7b:
                    10:f2:fe:17:f1:74:5b:0d:55:e1:58:5d:6a:ca:e4:
                    43:f4:85:08:64:11:ba:94:cd:b3:66:63:00:2d:7f:
                    8e:5d:05:25:21:64:b5:5b:2a:19:60:89:8c:26:df:
                    c7:22:eb:25:43:1e:2e:4f:6c:b4:e3:f5:51:da:31:
                    d5:52:46:f8:b8:44:fc:69:51:82:b8:6e:97:3e:0d:
                    b0:a6:d3:be:49:3a:a6:9c:98:da:fa:c3:03:0c:9a:
                    97:74:19:0a:61:71:3e:71:2e:13:3d:23:3a:5f:40:
                    33:c2:e1:01:8c:f2:3b:d2:3f:13:ab:04:c0:50:bd:
                    8c:2c:6c:8b:11:d2:c2:1f:6d:e6:08:a9:a6:15:ca:
                    39:a4:70:4f:b2:9b:db:1b:07:d6:47:6b:a3:b7:25:
                    46:c7:8e:30:8f:22:3a:80:30:bd:97:42:c1:de:3c:
                    07:90:75:9b:ec:25:c3:b1:a3:6a:d0:0d:1c:16:14:
                    d7:d8:66:a2:5f:9e:ea:17:b2:c2:31:58:3c:12:e6:
                    58:0e:89:82:a9:aa:5d:44:74:22:62:16:de:b9:b1:
                    44:79:8a:98:23:06:f1:ba:86:ec:e5:5a:89:87:e2:
                    54:00:fc:61:88:a0:07:a7:29:99:67:3a:57:c4:42:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:55:44:E9:9E:A1:49:AC:E0:A1:4F:55:C2:EC:A1:81:22:2F:89:AF
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/fda7a4e6ec889ecc16b0acb7e41ac7f9cdc7c2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6058::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:69:eb:81:a6:08:25:2d:5e:1e:e8:3a:1f:5e:49:5b:8b:a6:
         c0:d6:dd:f5:26:ce:97:e7:f0:62:4b:e3:14:72:2f:15:45:1a:
         db:49:8d:d4:6f:97:47:39:c4:0a:7c:fe:fe:64:57:a6:4e:73:
         55:b5:7e:c6:4b:94:61:ab:b5:5e:15:db:92:b9:ae:67:c8:66:
         b9:06:cd:7d:87:93:3d:e7:c3:fd:f6:2e:ff:45:57:ed:87:00:
         c0:7c:da:9e:92:11:2a:69:07:ab:46:4d:bc:de:b4:28:85:61:
         1a:d1:97:46:c2:8d:44:d8:c8:d3:d7:38:70:44:7b:dd:9a:bb:
         42:cd:f5:b4:e0:89:66:7f:39:30:d8:ff:57:41:c9:d0:6e:28:
         79:c9:74:e9:6a:60:f9:dd:c9:65:13:20:d1:94:66:7a:36:21:
         8e:6e:e3:ee:a8:a1:3f:dd:11:51:10:99:ab:93:c6:e5:37:f7:
         2e:25:e3:17:7c:74:63:91:4a:8c:b7:4e:7f:b6:6e:fc:de:85:
         4c:b0:59:69:bb:a2:fe:e0:f9:63:ab:1c:f7:9e:6a:ee:73:c4:
         b2:05:ca:cd:d2:ed:be:f1:53:10:0a:ab:cd:82:00:52:74:06:
         cc:3e:98:e4:bb:de:2d:6b:8e:85:63:71:24:d5:72:28:35:e9:
         43:a3:0b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----