Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26506.roa
File:                     AS26506.roa (raw, json)
Hash identifier:          8uUIVl34zUvzgDp45TcWT83pjcinsZIWQpZ628Ejxxg=
Subject key identifier:   C0:09:C7:9C:1F:D9:18:17:B9:04:21:A0:31:16:B0:C6:08:7C:BF:F1
Certificate issuer:       /CN=610FA580591423BC36D2EE3D16B968E308782571
Certificate serial:       74F59F4EB3551B9988A9D8346FB3A6666385ED1D
Authority key identifier: 61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610FA580591423BC36D2EE3D16B968E308782571.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26506.roa
Signing time:             Wed 11 Sep 2024 18:17:00 +0000
ROA not before:           Wed 11 Sep 2024 18:12:00 +0000
ROA not after:            Wed 10 Sep 2025 18:17:00 +0000
asID:                     26506
IP address blocks:        2804:54:0:5::/64 maxlen: 64

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f5:9f:4e:b3:55:1b:99:88:a9:d8:34:6f:b3:a6:66:63:85:ed:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610FA580591423BC36D2EE3D16B968E308782571
        Validity
            Not Before: Sep 11 18:12:00 2024 GMT
            Not After : Sep 10 18:17:00 2025 GMT
        Subject: CN=C009C79C1FD91817B90421A03116B0C6087CBFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:10:4a:42:72:0e:1f:f2:06:a1:0b:36:e0:
                    08:ce:bc:cf:36:8e:db:00:61:07:95:e1:18:79:47:
                    fb:53:88:f1:a7:26:10:71:e3:7b:bc:12:35:36:8a:
                    03:3e:81:6f:3d:8c:18:89:fe:4f:aa:3b:f6:cf:bc:
                    1b:7f:eb:ab:69:6f:39:0e:83:0b:5d:ed:b4:c9:67:
                    4f:4c:3a:d5:ef:20:5f:39:cb:d7:19:2b:6c:cd:d8:
                    d4:e3:c3:8f:64:f4:8f:ef:95:c2:90:81:55:90:64:
                    01:12:3e:08:fa:15:79:2d:82:2e:af:bc:f6:15:35:
                    f2:1c:8c:f8:63:d2:2e:3b:08:33:91:10:dc:38:40:
                    a7:c4:26:80:fb:43:57:4f:6a:3e:8c:f3:a5:aa:a3:
                    f3:27:15:7a:1d:c4:4b:6b:63:c7:d7:92:7c:4d:35:
                    d5:53:78:63:5b:4f:d4:31:e3:2b:0d:ca:06:8c:d1:
                    bc:bb:7f:89:fa:05:0f:e5:1f:3c:a9:b3:43:5f:a3:
                    26:91:24:ae:ae:fd:e1:4e:2f:aa:04:92:cb:79:61:
                    64:7d:26:47:b5:cf:93:c9:35:10:e1:dd:b0:87:07:
                    79:98:bb:65:97:9f:74:b6:d6:3a:5d:12:f5:60:30:
                    2c:30:ee:62:a8:91:c9:10:0a:a4:80:24:ec:91:4e:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:C7:9C:1F:D9:18:17:B9:04:21:A0:31:16:B0:C6:08:7C:BF:F1
            X509v3 Authority Key Identifier:
                keyid:61:0F:A5:80:59:14:23:BC:36:D2:EE:3D:16:B9:68:E3:08:78:25:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/610FA580591423BC36D2EE3D16B968E308782571.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610FA580591423BC36D2EE3D16B968E308782571.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS26506.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54:0:5::/64

    Signature Algorithm: sha256WithRSAEncryption
         90:2f:8e:f5:2e:48:bd:12:7c:a2:a2:df:11:e9:11:d7:a2:d6:
         fb:cd:7c:f6:d3:9e:fe:01:76:b1:70:01:f8:1d:c0:57:e2:ce:
         e3:ca:c7:34:50:f6:64:83:63:d3:11:9f:45:78:fa:d4:ba:24:
         5f:71:e9:dd:48:63:80:44:fc:8e:82:82:0c:88:2d:97:d5:0e:
         43:6e:24:f0:83:ec:1d:a9:ec:f1:fa:a5:4a:94:c8:9e:10:7d:
         90:b6:09:70:ff:ae:fe:0e:c2:b4:67:5b:39:a6:b3:6c:38:00:
         67:29:b9:a4:cb:ed:b1:1a:32:02:4d:ba:68:b0:c7:cf:02:88:
         a1:d2:f4:48:fb:9e:d3:07:09:6f:9f:87:99:17:47:2a:5b:62:
         1b:6e:36:68:00:df:fa:66:d7:eb:5a:1f:0e:81:35:3d:07:37:
         bf:4e:aa:94:ff:b1:a6:e0:21:93:3c:76:ce:44:26:56:20:dd:
         8e:59:7f:ae:00:e2:bf:be:a0:fe:77:9b:9b:2b:43:2f:48:7c:
         43:1c:04:72:b0:38:c0:96:a6:36:84:6e:35:61:8a:27:cf:6e:
         ec:e3:2c:32:25:ac:03:64:af:42:9b:fd:78:b1:73:8a:f0:53:
         dc:ab:f7:60:91:bc:1f:4f:69:64:40:d1:3d:aa:a1:3e:9d:15:
         d0:78:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----