Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS268613.roa
File:                     AS268613.roa (raw, json)
Hash identifier:          UEGmczzdK+K9eVdun0dks8TOHQ1fV7IWCethswFyfzA=
Subject key identifier:   BD:15:52:0E:F8:B0:55:3D:0A:B7:2C:55:8F:C6:CB:D4:BD:56:1E:E9
Certificate issuer:       /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial:       6039BA4A51F319434C47A1672220EB9A1C38285A
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS268613.roa
Signing time:             Tue 23 Jul 2024 12:10:36 +0000
ROA not before:           Tue 23 Jul 2024 12:05:36 +0000
ROA not after:            Tue 22 Jul 2025 12:10:36 +0000
asID:                     268613
IP address blocks:        45.164.4.0/22 maxlen: 24
                          2804:53e0::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:39:ba:4a:51:f3:19:43:4c:47:a1:67:22:20:eb:9a:1c:38:28:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
        Validity
            Not Before: Jul 23 12:05:36 2024 GMT
            Not After : Jul 22 12:10:36 2025 GMT
        Subject: CN=BD15520EF8B0553D0AB72C558FC6CBD4BD561EE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:d9:e9:ec:27:68:95:d7:a5:4d:22:62:24:
                    44:e9:62:2e:21:f9:5d:a2:44:d7:a1:2c:0a:d7:0b:
                    1c:e8:39:42:b3:b9:6c:1a:6e:a4:df:58:bf:a1:16:
                    0c:20:21:82:43:24:d4:91:fc:40:34:b9:8d:f7:67:
                    f5:0f:9c:11:83:5f:8f:9b:9e:9f:b9:32:19:dd:76:
                    4a:1b:d0:25:ca:e3:0d:9b:d7:11:3c:29:51:78:2e:
                    14:77:49:e3:57:41:d0:6c:7a:79:8f:82:89:86:da:
                    79:2b:ce:ff:ec:1d:5f:a8:86:34:fa:14:e4:b6:21:
                    b5:e8:91:9a:de:86:0c:c9:9a:f5:69:37:f6:1e:06:
                    11:1d:5a:13:fa:9b:60:bd:17:41:2f:bc:c2:ec:ad:
                    11:2c:b9:4f:8f:ba:24:8b:6d:c9:c9:c5:3e:d0:49:
                    29:08:8c:82:ef:d8:c4:59:cb:80:f7:47:d0:7f:62:
                    4e:98:59:51:a9:36:ad:9f:40:74:c9:7a:a7:ae:d6:
                    78:b5:5a:57:ee:02:32:26:12:3b:13:1e:86:d2:0a:
                    c3:93:46:40:8a:ce:39:98:07:14:c6:96:a3:dc:26:
                    50:43:71:6e:ee:c6:f0:80:84:33:f0:0e:d3:cf:f5:
                    a7:c7:ba:0a:95:70:7f:b2:27:a2:c8:80:13:e7:70:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:15:52:0E:F8:B0:55:3D:0A:B7:2C:55:8F:C6:CB:D4:BD:56:1E:E9
            X509v3 Authority Key Identifier:
                keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS268613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.4.0/22
                IPv6:
                  2804:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:2a:4b:71:a2:90:f4:32:0c:82:db:06:75:4b:08:57:09:
         38:8e:67:5a:16:0e:ef:d5:e0:f5:bc:54:1b:25:2b:fe:c6:61:
         68:19:97:e7:cf:7b:e3:cc:c0:87:d7:0f:5f:0d:57:a5:01:52:
         ca:38:68:18:f4:e1:88:42:5d:68:e6:0a:f2:31:be:b1:be:f3:
         f2:6e:a0:40:a3:f8:12:29:91:83:93:6f:93:e5:bb:d2:bc:e7:
         a0:7d:03:2d:0a:ec:46:1f:79:45:ae:62:a2:bd:45:29:3a:f8:
         4c:3a:ae:07:79:8e:69:b9:2c:80:58:78:e2:cb:0c:28:ed:fa:
         b7:c0:57:6d:5c:7d:0a:b8:c7:6f:90:37:a7:02:a8:e5:17:a4:
         b4:dc:4f:62:a2:c5:58:8c:d4:88:8e:fc:c6:af:7d:0c:ec:eb:
         6e:4a:40:2b:6a:91:dc:9c:0d:50:bd:08:cf:d7:4d:00:21:7b:
         fc:17:d5:2c:7f:e5:8b:55:05:97:61:ca:b9:bc:ff:4b:2a:03:
         f1:ce:0b:cd:bb:e4:05:7d:5f:fe:4a:d8:0b:e8:c5:41:62:b4:
         ce:8d:06:ea:b0:d9:e9:b4:32:b3:68:d3:ca:8c:39:c9:56:c8:
         c4:db:a7:af:e0:1d:70:90:e1:b6:6a:4c:12:2d:4a:0f:51:f9:
         d8:a7:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----