Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa
File: 3138392e31342e3139322e302f31392d3231203d3e203238333238.roa (raw, json)
Hash identifier: qln0IPMHntT/Vb2jKyIU/U46cq3wYLxyvHtXSbLql64=
Subject key identifier: 3C:BC:25:B7:48:CC:63:62:90:18:EC:23:1F:35:0C:E8:0F:40:3C:FC
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 1EDB70E3F3DF1946CFB696B68B3A6B830C09773C
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa
Signing time: Mon 30 Jun 2025 12:39:21 +0000
ROA not before: Mon 30 Jun 2025 12:34:21 +0000
ROA not after: Mon 29 Jun 2026 12:39:21 +0000
asID: 28328
IP address blocks: 189.14.192.0/19 maxlen: 21
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:db:70:e3:f3:df:19:46:cf:b6:96:b6:8b:3a:6b:83:0c:09:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Jun 30 12:34:21 2025 GMT
Not After : Jun 29 12:39:21 2026 GMT
Subject: CN=3CBC25B748CC63629018EC231F350CE80F403CFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:4d:ce:11:91:18:35:a1:c1:f2:b1:4d:0b:
d3:57:1b:76:cf:3c:f6:2d:78:77:03:4a:fb:67:ae:
67:b4:29:eb:04:cd:80:9c:d3:4e:0b:b8:8c:3c:a8:
93:8f:54:09:ff:8d:80:bf:c5:31:e6:e7:b8:17:b1:
5b:14:48:b0:fd:87:70:25:05:27:7e:7c:11:6d:e1:
38:62:fa:97:84:46:50:e6:53:b1:0e:3b:d3:e2:ae:
bd:1a:c5:d9:5e:7b:67:7d:3f:02:52:47:b5:e9:95:
50:9d:3c:97:0a:63:9e:29:08:28:cd:86:c7:1c:c0:
70:52:ef:f0:cc:58:98:59:3a:c0:f6:ea:cc:45:0d:
a2:c0:c2:2c:b5:86:5e:7b:e1:2e:a0:92:5f:c5:dc:
00:2b:93:6c:57:24:29:d8:e5:36:ee:72:f4:5f:a7:
de:76:2d:9c:e6:77:24:9c:33:24:e4:e1:02:14:46:
6a:ff:44:d3:cc:18:8d:13:2c:e7:c1:70:58:02:f6:
2d:8e:62:5c:fc:d4:41:72:16:c7:bb:ed:e9:e8:6f:
38:04:67:40:d0:d6:0e:eb:15:9e:cd:78:c2:ac:8a:
36:f8:b6:a1:4e:ee:54:cc:63:67:43:c2:0e:4c:cd:
4d:ea:a5:bd:88:f9:2b:83:b5:4b:27:2e:a3:21:93:
42:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BC:25:B7:48:CC:63:62:90:18:EC:23:1F:35:0C:E8:0F:40:3C:FC
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f31392d3231203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.192.0/19
Signature Algorithm: sha256WithRSAEncryption
60:2a:fb:79:ae:85:19:81:8b:2e:6a:95:b1:64:98:63:a6:16:
52:76:3e:27:f0:4d:3f:f1:c0:46:ac:25:c2:06:07:c4:8d:55:
3f:5b:7c:ce:01:79:98:d4:1b:e4:bd:8e:0e:87:ab:e2:ac:10:
a4:a5:e2:00:d9:26:9d:ba:d4:04:fb:38:62:c1:66:6f:7b:09:
59:a6:28:aa:f4:20:d2:8f:0f:bf:04:64:b8:66:20:11:53:8e:
73:41:f9:5f:0f:40:7b:90:f5:c4:9e:54:6d:37:5c:95:9d:37:
a1:89:10:a7:94:2b:63:ca:f9:7b:96:63:f8:50:9e:50:01:f6:
2e:17:5a:1f:38:37:55:32:fe:8e:e6:2f:b4:a6:34:d3:5c:09:
20:af:6f:32:c8:38:91:fb:1b:c8:f9:56:f4:d9:39:e4:07:c9:
d7:ac:05:6a:e2:88:de:b9:5c:20:f8:20:60:38:d6:9b:cc:19:
f0:a4:f8:26:20:a0:ef:01:a5:27:d1:d3:fe:b7:fb:a7:a7:af:
5a:37:37:f4:5b:dc:99:8a:8a:dc:38:06:2c:82:cd:48:d2:71:
5a:de:c3:dc:d6:bc:4d:a4:bd:c9:d4:87:7a:76:7a:41:22:e4:
72:03:6f:77:1c:c4:8d:40:1f:6a:1e:98:b8:f0:16:df:68:30:
cc:90:0f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 13:54:58 2025 by rpki-client