Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3234203d3e203238333238.roa
File: 3138392e31342e3139322e302f32302d3234203d3e203238333238.roa (raw, json)
Hash identifier: BzxgpOJtu4XrUN8x1Bpi9LP59jjgmmFoY/BGL4qD/3U=
Subject key identifier: 90:42:92:73:3E:A5:93:41:C3:44:D4:1E:67:94:26:C0:21:B2:04:69
Certificate issuer: /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial: 71DC37F823AA6CACDF26BB4F084E7D2443D70284
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access: rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3234203d3e203238333238.roa
Signing time: Mon 30 Jun 2025 14:39:21 +0000
ROA not before: Mon 30 Jun 2025 14:34:21 +0000
ROA not after: Mon 29 Jun 2026 14:39:21 +0000
asID: 28328
IP address blocks: 189.14.192.0/20 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dc:37:f8:23:aa:6c:ac:df:26:bb:4f:08:4e:7d:24:43:d7:02:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Validity
Not Before: Jun 30 14:34:21 2025 GMT
Not After : Jun 29 14:39:21 2026 GMT
Subject: CN=904292733EA59341C344D41E679426C021B20469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:6f:b1:c4:5b:aa:34:dc:fc:4b:b2:b9:df:
db:3b:e5:e5:bc:17:9a:e8:d0:a5:d2:40:e4:d6:0f:
99:50:a0:03:79:51:2f:fd:4f:80:ed:c5:46:92:9e:
4c:e4:04:da:ce:d2:2e:74:d3:ab:9a:3e:c7:28:a2:
2d:9e:6d:d3:7d:6e:ef:bd:2b:b9:40:79:03:54:95:
e7:2d:2e:f6:2c:2c:cc:46:87:34:88:94:8d:4c:8f:
c1:8d:50:45:aa:7c:ff:30:68:43:39:80:33:6d:76:
a9:1a:16:87:d3:01:3d:18:6e:c2:cf:c7:3f:d4:44:
4b:65:92:f9:ff:da:d4:fd:73:ad:8d:d3:ea:55:29:
1d:50:1c:ca:25:1e:42:cf:e4:86:77:07:05:ac:1c:
6c:16:2e:92:81:10:0c:ae:9f:9c:03:44:8d:05:a8:
5d:68:c4:11:72:5e:e1:8c:4f:57:94:ff:8d:d0:62:
52:06:58:0d:66:93:7c:9a:8f:bc:3c:78:ee:9f:cd:
44:54:63:9b:33:ad:1e:2e:03:01:da:41:8a:06:de:
f2:06:cc:9f:35:ca:61:b1:74:8c:f2:76:0e:4d:35:
c5:31:d9:99:be:4f:de:47:d9:e0:c7:7a:08:40:6d:
67:00:2b:2d:df:71:03:4d:54:9c:4b:71:a4:e6:d8:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:92:73:3E:A5:93:41:C3:44:D4:1E:67:94:26:C0:21:B2:04:69
X509v3 Authority Key Identifier:
keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/3138392e31342e3139322e302f32302d3234203d3e203238333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.14.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:1e:f9:0c:67:23:62:81:9d:d5:e0:37:ce:74:b2:ce:ac:dc:
4d:7b:28:ff:da:38:80:8d:3c:43:2e:49:3c:e5:e6:43:b7:39:
2c:c1:18:7a:ef:73:50:1a:fc:13:1c:9c:92:b1:7e:aa:b5:85:
b4:ef:9d:b4:a5:1f:27:5e:b5:02:14:82:79:10:2c:66:ee:15:
6b:da:f1:7b:01:6c:05:9e:e4:43:1e:e7:e7:34:1e:a4:a3:3e:
85:e4:09:70:93:5c:6e:68:0e:8b:0c:3b:c6:88:59:96:c0:7b:
e2:94:ca:20:71:66:dd:67:35:95:85:85:b0:3f:ef:b6:fb:8c:
db:a9:2e:04:26:ec:9d:44:39:e7:f5:78:23:f0:2d:6e:7a:5c:
a7:ca:8e:a1:96:fc:ec:d7:88:95:e4:5b:df:ce:2e:6c:84:00:
c4:7b:7f:92:9d:7a:28:c1:0f:30:81:07:a9:20:c6:fd:3d:cd:
f8:d5:be:e1:33:9b:f0:26:6c:2a:57:df:f3:43:34:d2:11:44:
16:fc:c9:75:33:ca:c4:d9:ea:93:ac:96:29:d9:e7:de:3f:2f:
86:04:d2:e5:be:99:0f:c1:4b:7a:11:e3:ef:ae:f4:e8:30:cc:
96:da:8c:15:66:9b:da:a2:53:61:1f:53:8e:3c:c1:90:5d:06:
99:3b:6a:77
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUcdw3+COqbKzfJrtPCE59JEPXAoQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2
QkY2NTc4NTAeFw0yNTA2MzAxNDM0MjFaFw0yNjA2MjkxNDM5MjFaMDMxMTAvBgNV
BAMTKDkwNDI5MjczM0VBNTkzNDFDMzQ0RDQxRTY3OTQyNkMwMjFCMjA0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfm+xxFuqNNz8S7K539s75eW8
F5ro0KXSQOTWD5lQoAN5US/9T4DtxUaSnkzkBNrO0i5006uaPscooi2ebdN9bu+9
K7lAeQNUlectLvYsLMxGhzSIlI1Mj8GNUEWqfP8waEM5gDNtdqkaFofTAT0YbsLP
xz/UREtlkvn/2tT9c62N0+pVKR1QHMolHkLP5IZ3BwWsHGwWLpKBEAyun5wDRI0F
qF1oxBFyXuGMT1eU/43QYlIGWA1mk3yaj7w8eO6fzURUY5szrR4uAwHaQYoG3vIG
zJ81ymGxdIzydg5NNcUx2Zm+T95H2eDHeghAbWcAKy3fcQNNVJxLcaTm2DpjAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUkEKScz6lk0HDRNQeZ5QmwCGyBGkwHwYDVR0j
BBgwFoAUWy0t8Kkto3M91yJVFaY+PWv2V4UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9YV1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZI
LzAvNUIyRDJERjBBOTJEQTM3MzNERDcyMjU1MTVBNjNFM0Q2QkY2NTc4NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81QjJEMkRGMEE5MkRBMzczM0RE
NzIyNTUxNUE2M0UzRDZCRjY1Nzg1LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Y
V1dWODc4QVhYMjNHOTlwRVhicnJuQUR2VkFheEpNdUttb2lVaERMeHZILzAvMzEz
ODM5MmUzMTM0MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4MzMz
MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEvQ7AMA0GCSqGSIb3DQEBCwUAA4IBAQAaHvkMZyNigZ3V
4DfOdLLOrNxNeyj/2jiAjTxDLkk85eZDtzkswRh673NQGvwTHJySsX6qtYW07520
pR8nXrUCFIJ5ECxm7hVr2vF7AWwFnuRDHufnNB6koz6F5Alwk1xuaA6LDDvGiFmW
wHvilMogcWbdZzWVhYWwP++2+4zbqS4EJuydRDnn9Xgj8C1uelynyo6hlvzs14iV
5Fvfzi5shADEe3+SnXoowQ8wgQepIMb9Pc341b7hM5vwJmwqV9/zQzTSEUQW/Ml1
M8rE2eqTrJYp2efePy+GBNLlvpkPwUt6EePvrvToMMyW2owVZpvaolNhH1OOPMGQ
XQaZO2p3
-----END CERTIFICATE-----
Generated at Fri Jul 4 18:25:14 2025 by rpki-client