This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e392e302f32342d3234203d3e20323632373733.roa
File:                     3138372e38372e392e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          /j4g9QZ2ZZygVExyjG6gsKMbEeDKTr4ALCKoPMWBPRs=
Subject key identifier:   74:4E:DC:85:90:CF:F2:6A:BA:67:98:4E:34:35:EE:A5:AB:FC:ED:3C
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       63ED54811EC82C4E116D2298BA35CB43A19DC928
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e392e302f32342d3234203d3e20323632373733.roa
Signing time:             Wed 26 Nov 2025 13:31:46 +0000
ROA not before:           Wed 26 Nov 2025 13:26:46 +0000
ROA not after:            Wed 25 Nov 2026 13:31:46 +0000
asID:                     262773
IP address blocks:        187.87.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ed:54:81:1e:c8:2c:4e:11:6d:22:98:ba:35:cb:43:a1:9d:c9:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Nov 26 13:26:46 2025 GMT
            Not After : Nov 25 13:31:46 2026 GMT
        Subject: CN=744EDC8590CFF26ABA67984E3435EEA5ABFCED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:d6:e7:1e:01:18:50:88:8e:2a:26:02:fe:
                    c5:ef:bd:42:bb:5a:e2:ab:1d:d6:8d:ef:a9:7f:65:
                    75:e8:6e:97:d2:01:e0:4d:4c:9f:7d:aa:e2:2c:f1:
                    0b:24:c6:ff:5a:0d:fd:30:03:ea:34:9b:34:7e:87:
                    cf:ea:a0:1f:37:f6:26:80:61:a8:e7:c4:42:77:de:
                    9b:67:13:3b:36:a0:0b:59:fd:e5:83:2c:5b:ce:62:
                    fa:81:85:7d:41:1e:4f:84:87:70:07:9a:35:a8:ce:
                    dd:3c:bd:42:3b:5e:14:9d:bb:29:30:62:2c:68:52:
                    90:f3:2a:2d:6f:e5:a5:72:52:13:de:73:ee:f7:d6:
                    2d:dc:73:ec:c6:9b:51:67:ea:06:89:9e:98:49:f0:
                    7a:99:04:81:99:51:c4:34:32:ad:d7:8c:08:57:98:
                    66:06:c9:d3:ab:78:9d:4e:89:ef:9e:e5:6c:e9:9d:
                    d0:34:5a:e2:1f:a8:a1:6c:7f:ce:22:5c:78:b0:40:
                    d1:08:2b:b9:61:9a:ff:3f:7a:33:bb:3e:b9:6d:ee:
                    ca:c7:e5:a6:0b:8c:ce:8f:17:32:7f:ba:05:2b:b0:
                    d7:d8:c2:45:89:9d:ce:9e:e1:51:20:9e:46:aa:c9:
                    b4:6a:db:3a:60:a8:06:cb:a2:6c:46:c4:bc:7c:59:
                    0e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4E:DC:85:90:CF:F2:6A:BA:67:98:4E:34:35:EE:A5:AB:FC:ED:3C
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3138372e38372e392e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d5:35:e1:e0:91:86:3e:27:76:33:ee:87:d4:e6:2b:f8:ea:
         1f:c7:1f:34:97:e8:14:0c:b4:8c:2b:b9:f0:01:d0:75:de:83:
         8e:69:1b:e2:3e:55:d8:2b:4f:16:2f:0f:a3:a7:44:c7:68:3d:
         db:6b:56:6c:18:7d:77:9a:78:0f:54:c3:7b:2a:40:1e:6e:b4:
         1b:96:bb:54:7b:13:4d:81:04:d9:23:e3:86:55:43:7e:88:1b:
         94:a2:99:70:a4:3e:1f:79:ed:b6:f0:56:74:f1:b5:c6:05:b2:
         5e:10:ab:13:cc:50:83:39:b0:a4:b8:77:16:ee:11:ed:ad:65:
         52:80:63:b3:e1:a3:f1:ca:63:91:5e:02:ce:e6:21:51:61:b6:
         20:32:23:c5:62:70:44:be:47:6d:c7:bf:de:80:49:81:2d:04:
         ef:9e:cb:29:6d:e7:70:db:31:a8:e0:4e:c2:01:88:ed:92:db:
         55:4b:bf:21:58:2e:84:91:38:b2:dd:14:9e:90:cf:35:48:a0:
         20:5d:1d:6b:6f:c9:30:40:62:bf:dd:01:4f:da:77:b9:a7:ff:
         5d:59:ea:b6:3f:4e:52:33:50:25:5e:ca:39:eb:a8:17:30:c0:
         74:e7:a5:73:35:ac:9b:c1:f0:c3:0c:b0:72:9f:fb:20:cc:c1:
         97:62:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----