This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32342d3234203d3e20323632373733.roa
File: 3138372e38372e302e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier: ku8esUIhNKwwMFBdHTGCLVdRqA4ds8lKaeHxCytlyU4=
Subject key identifier: 32:48:25:41:8C:EE:E0:5D:53:57:FD:07:E1:72:5F:61:D3:FB:F8:94
Certificate issuer: /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial: 08F061C3129C8F9E85420FF09833C8F6CBE626F4
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32342d3234203d3e20323632373733.roa
Signing time: Wed 26 Nov 2025 13:31:47 +0000
ROA not before: Wed 26 Nov 2025 13:26:47 +0000
ROA not after: Wed 25 Nov 2026 13:31:47 +0000
asID: 262773
IP address blocks: 187.87.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f0:61:c3:12:9c:8f:9e:85:42:0f:f0:98:33:c8:f6:cb:e6:26:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Validity
Not Before: Nov 26 13:26:47 2025 GMT
Not After : Nov 25 13:31:47 2026 GMT
Subject: CN=324825418CEEE05D5357FD07E1725F61D3FBF894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:09:83:8c:ce:33:8f:fb:06:42:b8:f1:97:
3a:a8:6a:70:73:0b:20:45:68:41:45:7e:88:59:ef:
53:92:7d:77:f0:96:bb:4c:a9:a9:a9:7f:2c:0b:0f:
be:4c:bc:7d:5e:e0:4f:45:0e:b4:c4:a2:49:10:5b:
5e:b9:b1:91:43:9c:f4:c7:0f:ca:3e:4d:de:9e:48:
6a:88:a7:f3:ae:23:9b:82:d0:50:03:67:c6:09:c2:
ac:b9:3c:5c:cd:39:85:b1:f2:23:ab:da:57:e0:60:
2d:43:e9:a0:28:10:d1:fb:74:87:83:7e:15:42:40:
58:c1:d7:1f:58:95:ca:25:a6:eb:f8:cb:cc:dd:4f:
6f:8b:f6:66:c7:9f:21:3b:bf:4b:df:e7:b0:91:f4:
16:f7:48:e7:65:29:bd:ad:a1:52:71:45:5e:80:e7:
28:24:ad:bf:be:a6:24:42:c3:f6:5d:0f:57:9d:a3:
8c:f1:27:3f:7e:d7:48:c2:ec:ec:9f:1b:9c:f5:58:
49:a5:4d:f1:b0:c4:1f:50:e1:0f:2b:d7:f0:17:d3:
b7:92:e9:f4:c9:e9:bc:f7:1d:40:b4:1c:4c:8b:f6:
34:5e:79:1a:67:e7:0b:85:71:c2:5f:d5:f0:f2:20:
60:35:bf:67:cf:77:76:c0:f2:fb:40:48:0a:98:3d:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:48:25:41:8C:EE:E0:5D:53:57:FD:07:E1:72:5F:61:D3:FB:F8:94
X509v3 Authority Key Identifier:
keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e302e302f32342d3234203d3e20323632373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.87.0.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8a:72:8a:41:96:2b:be:5e:0f:20:43:8d:8a:81:33:4c:bf:
0c:5a:d1:76:2b:1d:09:c2:83:99:e0:7d:ae:1e:79:39:bd:ba:
2f:b6:13:4d:9e:a2:bd:c9:c0:28:75:e8:67:be:cd:06:d5:e7:
3e:89:43:33:da:df:32:4d:21:97:22:0d:44:75:2f:4e:ce:d1:
fd:d1:97:6b:cd:41:ac:32:d0:96:3e:0b:f2:05:8b:2d:f7:cf:
a0:54:a3:d3:e3:6a:1c:e7:0c:a6:1b:f8:a0:c5:02:32:ab:e7:
25:a6:5d:12:72:d2:a2:72:0e:51:14:bf:19:09:a3:d2:ab:69:
a0:e9:41:e1:c7:3c:03:9a:7f:73:6b:d1:9f:77:3a:be:f6:64:
c3:f8:d9:14:73:89:e3:c9:f7:ee:ec:6e:3b:db:d9:e5:3c:38:
37:3b:00:c4:cd:3e:ae:be:d8:60:3a:e9:59:8b:bf:ba:ee:a4:
2d:76:b2:91:43:6a:0b:b3:27:a0:95:aa:c8:61:af:e3:e6:53:
01:37:66:11:62:be:0e:f4:be:ec:8d:bc:f7:ec:04:68:3b:15:
70:3b:6c:d3:23:1b:52:9a:86:a3:eb:31:3a:83:c5:04:70:16:
6e:a8:94:28:ec:4b:7c:f8:d1:c6:90:72:d3:29:98:35:b9:7d:
5e:bc:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:09:31 2025 by rpki-client