Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53190.roa
File:                     AS53190.roa (raw, json)
Hash identifier:          w05slJwbdH4n2I1G7OtNBpTTQ7YscoWwzWR7c3wxZ+M=
Subject key identifier:   EC:70:79:F5:2B:2F:B7:7A:73:0D:82:83:30:95:64:15:9A:F8:CC:B3
Certificate issuer:       /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial:       4AC134C84812FF5C59412573F41655EADD551604
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53190.roa
Signing time:             Tue 23 Jul 2024 12:10:29 +0000
ROA not before:           Tue 23 Jul 2024 12:05:29 +0000
ROA not after:            Tue 22 Jul 2025 12:10:29 +0000
asID:                     53190
IP address blocks:        138.36.48.0/22 maxlen: 24
                          186.232.112.0/21 maxlen: 24
                          2804:21a4::/32 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c1:34:c8:48:12:ff:5c:59:41:25:73:f4:16:55:ea:dd:55:16:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
        Validity
            Not Before: Jul 23 12:05:29 2024 GMT
            Not After : Jul 22 12:10:29 2025 GMT
        Subject: CN=EC7079F52B2FB77A730D8283309564159AF8CCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:58:63:b0:eb:01:f3:bd:4e:b7:62:e6:95:
                    56:64:3f:2b:c6:b8:f6:b1:f1:e3:80:09:99:e6:ad:
                    9d:dc:0c:71:24:48:fc:b7:b8:6d:47:96:20:0e:e1:
                    1c:12:0d:bd:01:8e:89:7e:84:1d:e8:b3:5a:ea:8b:
                    65:a2:d1:ab:71:7f:de:53:cb:33:0e:e2:93:81:09:
                    a2:2b:15:f3:be:ad:e2:62:39:cd:2a:63:a8:e8:b3:
                    96:e6:83:e3:37:2d:6e:b1:a1:58:fe:ca:3b:15:8a:
                    ea:81:2d:17:74:a1:4c:ec:88:42:af:1d:c2:48:60:
                    6f:02:9b:3a:b6:72:17:6d:63:44:ea:05:44:f4:d1:
                    98:10:10:de:1d:8c:a6:2a:e9:39:38:0b:d8:7c:c7:
                    83:e5:00:ee:b8:20:76:29:a8:c6:c8:53:7b:df:26:
                    7f:8a:d2:bd:34:de:17:11:ae:20:03:d9:47:6d:75:
                    93:85:45:d1:88:df:db:38:5d:e1:34:59:9f:f3:e9:
                    73:f7:b5:bc:a7:b6:52:15:5e:b6:16:63:b8:ab:5a:
                    99:ba:99:a8:85:35:81:70:ea:41:3a:34:5b:c9:60:
                    7c:d6:02:01:85:0b:3e:b1:f9:24:f0:cd:1c:7b:a4:
                    19:1c:52:dd:26:f3:e4:db:50:cf:a4:70:0c:8e:37:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:70:79:F5:2B:2F:B7:7A:73:0D:82:83:30:95:64:15:9A:F8:CC:B3
            X509v3 Authority Key Identifier:
                keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53190.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.48.0/22
                  186.232.112.0/21
                IPv6:
                  2804:21a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:c6:27:05:f3:01:8c:df:ff:55:d1:34:86:29:74:40:96:5d:
         f0:22:93:2e:78:45:d9:b1:5d:7f:d6:cb:bc:7f:49:c5:13:74:
         19:e0:bf:46:57:18:c7:c8:b8:b3:8c:69:18:a3:13:a3:7b:06:
         29:6d:b9:7a:b4:87:26:a8:62:0a:1a:a2:a9:c9:fa:76:da:4e:
         8a:41:c2:bd:9e:d0:5f:0a:f4:23:d6:4b:b2:0d:8c:80:99:2a:
         81:16:6e:67:b9:55:8b:1c:e0:7e:14:88:ca:d5:8d:d5:5e:8a:
         01:4c:7e:1b:85:b1:cc:8c:41:95:70:8a:eb:bf:bf:d9:ce:3d:
         71:cd:bf:ac:71:74:0e:e3:e1:9d:06:fc:a4:d2:5a:ee:b0:27:
         7c:da:f3:80:68:07:75:a5:5a:2d:d3:27:c0:f4:27:97:33:85:
         1f:47:a3:f4:6d:88:3f:7c:9e:62:4d:c4:25:fc:e2:9e:2d:79:
         f9:a3:fa:e9:07:66:0e:e9:c6:99:4b:ea:1c:0f:09:08:da:3e:
         db:0f:7a:a6:ca:ea:93:51:47:3f:f3:15:b8:a9:b6:49:f3:d5:
         e1:27:c1:6a:9d:86:5e:15:36:39:a0:07:6f:bc:93:77:8e:6a:
         d7:6c:5f:e1:8d:e1:83:16:04:19:3b:86:13:43:24:60:b7:08:
         57:98:36:b1
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSsE0yEgS/1xZQSVz9BZV6t1VFgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdCODZCNUI2RTA2NzdFRUQ4OUEzNzY3MEUxRDA0Q0U3
NTlFRkIyNjAeFw0yNDA3MjMxMjA1MjlaFw0yNTA3MjIxMjEwMjlaMDMxMTAvBgNV
BAMTKEVDNzA3OUY1MkIyRkI3N0E3MzBEODI4MzMwOTU2NDE1OUFGOENDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkulhjsOsB871Ot2LmlVZkPyvG
uPax8eOACZnmrZ3cDHEkSPy3uG1HliAO4RwSDb0Bjol+hB3os1rqi2Wi0atxf95T
yzMO4pOBCaIrFfO+reJiOc0qY6jos5bmg+M3LW6xoVj+yjsViuqBLRd0oUzsiEKv
HcJIYG8Cmzq2chdtY0TqBUT00ZgQEN4djKYq6Tk4C9h8x4PlAO64IHYpqMbIU3vf
Jn+K0r003hcRriAD2UdtdZOFRdGI39s4XeE0WZ/z6XP3tbyntlIVXrYWY7irWpm6
maiFNYFw6kE6NFvJYHzWAgGFCz6x+STwzRx7pBkcUt0m8+TbUM+kcAyONxiVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU7HB59Ssvt3pzDYKDMJVkFZr4zLMwHwYDVR0j
BBgwFoAU17hrW24Gd+7YmjdnDh0EznWe+yYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0twSjV1UDZxTGsyaUhXOWdXZXBURHhheDZqVnZ0dVFZaEZ1ZHc5cjhU
Y3kvMi9EN0I4NkI1QjZFMDY3N0VFRDg5QTM3NjcwRTFEMDRDRTc1OUVGQjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3Qjg2QjVCNkUwNjc3RUVE
ODlBMzc2NzBFMUQwNENFNzU5RUZCMjYuY2VyMHkGCCsGAQUFBwELBG0wazBpBggr
BgEFBQcwC4ZdcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zS3BK
NXVQNnFMazJpSFc5Z1dlcFREeGF4NmpWdnR1UVloRnVkdzlyOFRjeS8yL0FTNTMx
OTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAKKJDADBAO66HAwDQQCAAIwBwMFACgEIaQwDQYJKoZIhvcN
AQELBQADggEBAI7GJwXzAYzf/1XRNIYpdECWXfAiky54RdmxXX/Wy7x/ScUTdBng
v0ZXGMfIuLOMaRijE6N7BiltuXq0hyaoYgoaoqnJ+nbaTopBwr2e0F8K9CPWS7IN
jICZKoEWbme5VYsc4H4UiMrVjdVeigFMfhuFscyMQZVwiuu/v9nOPXHNv6xxdA7j
4Z0G/KTSWu6wJ3za84BoB3WlWi3TJ8D0J5czhR9Ho/RtiD98nmJNxCX84p4tefmj
+ukHZg7pxplL6hwPCQjaPtsPeqbK6pNRRz/zFbiptknz1eEnwWqdhl4VNjmgB2+8
k3eOatdsX+GN4YMWBBk7hhNDJGC3CFeYNrE=
-----END CERTIFICATE-----