Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9124b35b1b4b2f2eb41d24011aa4e1bf1bcf8bad.roa
File:                     9124b35b1b4b2f2eb41d24011aa4e1bf1bcf8bad.roa (raw, json)
Hash identifier:          9DU62wemopUz78p4W2NpA9rdebAlwW42z1jkwgun0Pg=
Subject key identifier:   57:37:38:D9:70:13:7A:AD:31:FA:72:47:F0:7A:62:C1:E1:99:F3:89
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1D62A3
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9124b35b1b4b2f2eb41d24011aa4e1bf1bcf8bad.roa
Signing time:             Tue 07 Jun 2022 15:46:19 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6062::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925795 (0x1d62a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=9124b35b1b4b2f2eb41d24011aa4e1bf1bcf8bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:e0:0d:fc:96:6f:49:fb:78:19:c6:9f:57:
                    cd:a1:97:10:ec:ce:1d:c0:75:01:b2:12:d9:d2:3d:
                    b8:dc:eb:e8:1f:80:71:24:28:5a:d2:da:39:cb:f4:
                    c3:6c:0b:c1:51:b7:81:d9:63:8b:12:96:47:9a:c8:
                    79:b9:0f:a8:f2:97:53:4e:b9:72:fc:85:74:ea:cc:
                    f5:09:55:0b:b7:d6:35:71:ef:af:a9:88:79:46:58:
                    59:a2:d6:14:d2:5c:68:a8:94:11:52:da:f0:ed:0a:
                    44:1e:5f:2d:94:35:00:bc:46:4a:fe:5f:72:a3:9b:
                    b0:58:43:88:46:df:77:cd:a3:57:f7:72:47:58:16:
                    b8:d6:a4:94:8e:03:6c:df:60:13:75:8a:c2:86:6d:
                    e1:4e:ab:e1:75:f4:0b:fa:e0:a3:74:2e:af:66:01:
                    88:94:a2:b0:90:4d:6a:4e:e7:3b:8a:ce:6d:ef:49:
                    a5:ed:20:b1:62:c1:6a:13:7d:6a:7e:bd:c9:7c:4d:
                    94:ba:b4:f5:59:f4:3e:ed:3d:96:37:01:5d:09:08:
                    d0:73:e7:25:23:ca:79:18:d7:a8:2a:b5:32:ef:2c:
                    35:47:7f:ba:e6:05:c8:01:bb:8d:e7:48:eb:2b:48:
                    d7:b5:9b:dd:0b:67:2b:e8:cf:ad:eb:9c:d2:b7:e2:
                    91:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:38:D9:70:13:7A:AD:31:FA:72:47:F0:7A:62:C1:E1:99:F3:89
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/9124b35b1b4b2f2eb41d24011aa4e1bf1bcf8bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6062::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:ef:94:79:da:b4:db:90:55:f1:46:7e:cc:5f:a7:98:24:86:
         9e:da:70:7f:18:9c:82:5b:70:37:1f:7f:cf:39:cc:2a:f0:95:
         cd:da:af:aa:d5:c2:15:17:25:dd:a7:68:85:53:34:e1:ea:ff:
         1f:2b:e3:b7:0a:ac:43:d1:86:ee:bd:04:69:fb:64:55:86:d3:
         fb:61:4e:52:9e:ca:b1:56:04:64:ba:7d:77:77:18:5f:df:fb:
         12:2e:bb:5b:86:b9:f1:91:b3:60:b5:d1:c6:fa:0c:00:19:d5:
         91:20:5f:31:14:1f:fc:a5:24:48:aa:06:87:93:32:8c:5a:38:
         c0:c2:f2:b4:33:62:fe:58:79:f2:7b:59:7a:8e:db:5b:1c:cb:
         cd:45:d2:52:2e:d4:6f:70:6e:2d:56:69:d1:a0:ae:8f:f9:9d:
         65:be:52:1f:14:bb:3f:e5:e5:43:7e:34:0d:31:6b:f4:e6:0e:
         7a:13:dc:c5:76:37:a8:ae:f0:4e:34:83:cb:3e:06:0d:44:ae:
         80:11:7c:d1:9d:e3:cb:3e:33:24:f5:b1:4f:65:90:b2:93:10:
         15:dc:89:91:3b:91:67:c7:4c:4c:f7:00:af:54:ac:9c:f6:e2:
         78:40:07:40:40:21:ac:fc:6c:a6:18:ff:da:06:93:6b:3f:2e:
         5b:c9:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----