This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31312e302f32342d3234203d3e20323632373733.roa
File:                     3138372e38372e31312e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          Xcqs9+8xn0DM8+46TONXEC5rFoezXqIFu6TYR1wZK6U=
Subject key identifier:   4F:A6:E7:19:8D:3F:5F:0C:1C:B0:B6:82:C2:F2:6B:42:76:05:C3:34
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       2F60A2967BC7B4BA87171CCD555A23FE2EAEC8A9
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31312e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 26 Nov 2025 13:31:46 +0000
ROA not before:           Wed 26 Nov 2025 13:26:46 +0000
ROA not after:            Wed 25 Nov 2026 13:31:46 +0000
asID:                     262773
IP address blocks:        187.87.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:a2:96:7b:c7:b4:ba:87:17:1c:cd:55:5a:23:fe:2e:ae:c8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Nov 26 13:26:46 2025 GMT
            Not After : Nov 25 13:31:46 2026 GMT
        Subject: CN=4FA6E7198D3F5F0C1CB0B682C2F26B427605C334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:50:29:f3:cb:39:62:73:f1:42:ed:b3:ac:
                    b2:1c:3e:23:81:c5:de:bf:81:a7:52:6a:74:1a:70:
                    26:53:b6:96:38:18:6e:04:42:f0:9a:42:37:d9:70:
                    e7:dd:fd:2f:1b:1b:d4:19:51:a0:58:84:b4:39:4b:
                    a6:e4:c6:83:5d:a8:43:14:81:f2:22:e0:e0:aa:7b:
                    0d:d6:60:f1:7e:ba:f5:35:66:a8:f7:ac:96:34:bd:
                    be:03:83:b9:63:6c:eb:5d:ac:8b:16:be:a5:2b:bc:
                    fe:63:b9:c9:79:45:22:4f:8c:e2:98:5d:3d:88:da:
                    29:4b:2b:63:b7:55:c4:c2:94:1b:d8:7a:5f:af:70:
                    58:22:ab:d7:97:de:39:76:1c:a3:63:d2:9b:52:d3:
                    25:f1:91:9e:0c:cc:df:15:1c:60:bb:37:ab:06:02:
                    88:89:be:02:55:15:61:91:e3:0a:c9:71:e1:1b:79:
                    e0:f3:85:8e:37:1f:b6:5f:15:a1:76:c5:bf:db:9a:
                    2a:e4:59:8f:b6:44:88:b7:53:e0:59:aa:73:46:48:
                    01:9e:ba:8b:25:eb:8a:19:d9:ad:76:17:23:a0:a5:
                    e9:70:18:1d:16:90:0d:d5:b3:77:32:9d:12:22:7b:
                    26:9c:11:7d:bf:cf:8d:13:1c:9d:5e:94:8d:ac:10:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A6:E7:19:8D:3F:5F:0C:1C:B0:B6:82:C2:F2:6B:42:76:05:C3:34
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e31312e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:aa:39:00:a0:ef:4b:24:ea:1f:63:0f:3b:04:b5:9c:7a:
         07:56:05:e1:05:e1:28:29:6c:67:ea:65:5c:04:cc:26:77:7e:
         85:14:23:db:5d:c4:24:b2:aa:70:a3:e7:4e:be:d6:d8:28:e9:
         5a:2f:a0:a1:bb:36:56:3f:57:1e:46:2f:ac:06:73:48:8f:bc:
         b6:62:53:24:fb:36:62:aa:d2:37:4f:84:4f:0a:0d:bc:45:d3:
         44:63:63:c1:5b:30:3d:af:24:af:90:92:56:84:50:41:c0:e1:
         27:a8:25:58:6a:3e:00:03:d5:ff:39:62:8e:42:2e:92:da:6b:
         db:6d:96:a6:af:34:06:f0:cc:74:33:3a:01:2e:3e:0c:a3:33:
         20:59:c4:1d:ce:a7:1b:a9:32:1b:0e:e1:8b:2b:3f:dc:4d:6e:
         4a:c7:0a:2d:87:57:7e:a5:cf:10:04:c6:c2:09:c5:ac:3a:47:
         c2:ec:81:cc:2b:ae:37:f3:ba:14:66:98:ce:95:0d:04:eb:c7:
         0a:41:2c:d0:36:48:46:7d:a3:8f:fd:b3:9b:a4:8a:6c:78:a7:
         a7:86:06:ff:9b:1b:08:9a:b9:82:94:25:06:91:3e:ee:77:70:
         7e:5b:6b:50:a7:69:d5:4e:53:e0:a9:63:d6:4f:1c:82:c0:70:
         60:0e:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----