Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS266949.roa
File:                     AS266949.roa (raw, json)
Hash identifier:          vVEkM0qFXvgE4jQESEbiF7SGPqwIG23LU+ngM5qEMso=
Subject key identifier:   FC:17:00:1A:F6:2D:0A:F0:B5:EE:0C:F3:58:5A:1D:08:43:A2:E4:04
Certificate issuer:       /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial:       5543CAFA86420975DF80F15EE72F81A625AAD9AE
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS266949.roa
Signing time:             Tue 23 Jul 2024 12:10:31 +0000
ROA not before:           Tue 23 Jul 2024 12:05:31 +0000
ROA not after:            Tue 22 Jul 2025 12:10:31 +0000
asID:                     266949
IP address blocks:        45.225.196.0/22 maxlen: 24
                          2804:45c8::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:43:ca:fa:86:42:09:75:df:80:f1:5e:e7:2f:81:a6:25:aa:d9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
        Validity
            Not Before: Jul 23 12:05:31 2024 GMT
            Not After : Jul 22 12:10:31 2025 GMT
        Subject: CN=FC17001AF62D0AF0B5EE0CF3585A1D0843A2E404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:4f:18:02:31:2e:7c:07:5a:c7:7d:56:53:
                    fa:44:d2:06:68:44:24:7d:66:20:e6:6c:8d:3b:10:
                    7c:5e:55:eb:ca:45:ae:e6:35:96:dd:ef:c4:f0:0b:
                    cb:ee:ab:b9:36:94:4d:fb:e7:cf:4b:e3:d7:46:b9:
                    f8:c9:a2:0b:4f:73:7b:7d:11:52:8f:53:f4:9b:6a:
                    29:50:ae:5a:76:15:d7:72:08:47:43:09:cb:f6:68:
                    87:d0:73:4a:b2:e1:71:55:49:05:0a:93:07:00:16:
                    1a:7d:0f:0e:cb:b6:23:bd:d9:8f:e7:8c:16:f8:92:
                    72:00:15:12:46:88:1c:88:06:50:f5:23:92:9e:83:
                    8a:6e:cb:26:a9:d9:ea:13:b1:b6:e3:24:18:6e:45:
                    96:28:64:75:de:ac:80:32:b1:c3:16:19:c4:58:23:
                    a9:c1:63:34:21:9e:e0:e2:0e:5a:5c:41:8f:03:2c:
                    8a:19:68:b2:3e:07:4a:28:18:4b:67:be:26:f9:01:
                    12:f5:90:73:f2:38:b2:bc:f4:13:4d:c7:b3:f5:2d:
                    a6:c8:44:2a:9c:14:0b:77:c0:d3:a0:44:61:7c:cf:
                    4c:ce:90:ba:b0:a1:99:8e:bf:93:5c:79:7b:a9:98:
                    a4:ea:cf:59:0d:8e:e7:1d:cd:ed:2a:ce:69:c2:6a:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:00:1A:F6:2D:0A:F0:B5:EE:0C:F3:58:5A:1D:08:43:A2:E4:04
            X509v3 Authority Key Identifier:
                keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS266949.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.196.0/22
                IPv6:
                  2804:45c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:c0:70:90:13:58:90:3e:97:63:c3:a8:9e:be:bd:a8:f3:
         93:1d:74:18:d8:9e:da:c1:eb:10:cd:42:dc:c2:ea:bf:17:80:
         75:c0:20:ce:cb:57:e5:07:7d:33:d1:53:e3:2d:01:35:04:4b:
         a6:16:3d:ae:d1:18:bd:f4:0c:a3:dc:86:2b:c2:77:c9:b8:22:
         d6:43:71:11:9c:77:dd:cf:fe:f0:2d:63:96:49:74:e7:de:b1:
         4f:d9:26:5c:6e:76:cb:bf:f9:cb:ad:40:f3:7c:2c:e2:45:23:
         98:c7:ff:76:7e:2d:ff:86:49:44:36:a9:04:4e:3b:a3:e9:92:
         32:b5:5e:47:6b:66:bd:a3:10:81:e7:2e:c6:da:d2:66:c5:5f:
         e2:a1:86:e6:4e:83:f2:e4:cd:37:cf:9f:6f:04:12:60:54:c0:
         5e:24:61:d0:ea:2d:54:3b:4b:31:a3:ce:b5:18:fe:ee:a1:3c:
         f6:8f:40:0e:eb:3b:2e:c4:0a:19:61:c6:bf:db:27:b3:6a:76:
         f5:43:c5:63:d5:e1:ab:98:96:3e:25:42:c3:50:0e:e6:2f:cd:
         70:9d:dc:27:05:aa:a7:b1:d2:db:28:38:5b:ac:3a:ef:ef:11:
         f6:7e:8b:64:18:8b:b5:20:dd:68:41:bd:36:fd:2a:96:0f:62:
         19:35:1d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----