Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bae98f4997d6ba4fb0baa90471385cfe1c716c14.roa
File:                     bae98f4997d6ba4fb0baa90471385cfe1c716c14.roa (raw, json)
Hash identifier:          yLMzD3HubqlOpxSMz8iQfRBUkfDxARlFOoG8fDyTniU=
Subject key identifier:   17:BD:49:60:32:91:79:18:28:77:95:71:EA:5C:21:6C:F3:52:6E:8B
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       1C14E8
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bae98f4997d6ba4fb0baa90471385cfe1c716c14.roa
Signing time:             Mon 18 Apr 2022 19:07:01 +0000
ROA not before:           Mon 18 Apr 2022 03:00:00 +0000
ROA not after:            Thu 18 Apr 2024 03:00:00 +0000
asID:                     278
IP address blocks:        2001:1218:6042::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840360 (0x1c14e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Apr 18 03:00:00 2022 GMT
            Not After : Apr 18 03:00:00 2024 GMT
        Subject: CN=bae98f4997d6ba4fb0baa90471385cfe1c716c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:4d:1b:2e:5d:6d:2a:09:75:70:32:a5:ad:
                    29:61:ef:1a:ab:37:2b:b2:0d:ec:42:fb:2b:ac:a2:
                    ee:19:b2:68:ef:19:07:3b:02:8d:f3:6c:7a:93:50:
                    09:d3:db:0b:2b:85:39:34:dc:71:dc:c9:07:02:98:
                    3c:5b:e5:40:a6:97:ae:ab:0e:f2:1f:1e:d8:8b:07:
                    46:97:aa:11:f6:29:54:92:95:bf:a2:05:e3:07:d4:
                    e9:7c:1f:e5:eb:76:f7:6d:02:3e:28:70:8d:25:30:
                    8e:99:83:01:26:42:db:30:9f:20:a6:ec:27:79:e9:
                    93:86:43:d5:57:5f:88:5a:49:98:1b:ae:7b:0b:ae:
                    96:02:28:e8:ad:2f:2f:b8:b3:f6:b7:98:06:7b:c6:
                    ca:ee:a7:83:42:02:9d:f4:49:39:95:6e:7c:8d:09:
                    2c:46:d5:94:f2:f1:b1:06:33:32:94:fa:de:3d:40:
                    49:5c:55:8a:4e:6c:80:3d:0e:09:11:31:a3:4e:35:
                    dc:eb:8e:e6:2d:c4:dc:75:41:8a:40:73:d5:70:0a:
                    71:33:85:61:b7:30:21:15:2a:59:30:48:ad:9f:97:
                    7c:0c:b9:67:4d:6b:52:3d:58:45:05:20:7a:9c:bc:
                    06:84:29:1d:47:fe:a5:82:68:a1:22:d3:12:e4:12:
                    3a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BD:49:60:32:91:79:18:28:77:95:71:EA:5C:21:6C:F3:52:6E:8B
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/bae98f4997d6ba4fb0baa90471385cfe1c716c14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1218:6042::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:70:b1:2b:7a:36:5b:40:8e:b1:ab:21:e6:0a:92:31:c4:3c:
         7b:28:4b:a5:8d:52:5d:6c:04:b3:83:38:e0:ec:d8:23:ab:c9:
         46:b4:3b:4c:1d:21:75:ee:31:81:8a:2b:2f:25:2e:28:44:8d:
         d4:e0:f2:ca:24:44:6e:0d:33:2f:62:0e:c7:71:43:c2:f1:57:
         3f:08:f0:4f:67:14:92:ab:18:6f:ee:03:73:d9:a7:76:2d:30:
         08:43:4e:37:22:0a:5c:cd:37:a9:70:cb:ed:7a:c5:ea:04:8d:
         89:68:13:87:8e:44:44:aa:96:8e:e6:87:13:8e:6e:0a:68:05:
         41:c4:92:c3:99:b9:ec:23:50:22:af:df:7e:2b:36:ca:a3:42:
         0d:a6:c4:1d:eb:bd:68:dc:ec:aa:20:bf:4e:de:00:33:17:37:
         5f:91:15:74:18:d3:21:29:85:43:df:32:3d:37:fa:4d:d6:1a:
         8d:b4:c8:93:97:7f:dd:2f:cb:75:f9:17:b6:74:51:8d:bc:c5:
         c2:5d:4c:3f:a1:3a:c2:22:73:24:9b:7f:a8:7a:10:cb:19:ba:
         e9:0d:aa:da:7d:2a:c9:1c:d9:c0:9a:12:c5:9f:86:5c:3c:d3:
         5a:73:cb:d9:e4:f2:e6:4c:ce:0c:10:1c:9e:95:ec:5a:78:54:
         ac:0b:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----