
Error: rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3137372e3138352e34302e302f32312d3234203d3e20323633353734.roa
File: 3137372e3138352e34302e302f32312d3234203d3e20323633353734.roa (raw, json)
Hash identifier: XWRS7hpQF5JLnI/eMk4k2YxyCYzcZ5EB+2O0u2oGohs=
Subject key identifier: 83:EF:FB:6B:DA:EB:55:32:49:B4:71:43:CF:02:BA:D3:4D:81:58:A7
Certificate issuer: /CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
Certificate serial: 68C46D98CF732CB233E75EE98B9C5F4ADECC7392
Authority key identifier: 72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3137372e3138352e34302e302f32312d3234203d3e20323633353734.roa
Signing time: Wed 09 Sep 2026 18:01:01 +0000
ROA not before: Wed 09 Sep 2026 17:56:01 +0000
ROA not after: Wed 08 Sep 2027 18:01:01 +0000
asID: 263574
IP address blocks: 177.185.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl
rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 18 Oct 2026 11:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c4:6d:98:cf:73:2c:b2:33:e7:5e:e9:8b:9c:5f:4a:de:cc:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
Validity
Not Before: Sep 9 17:56:01 2026 GMT
Not After : Sep 8 18:01:01 2027 GMT
Subject: CN=83EFFB6BDAEB553249B47143CF02BAD34D8158A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:09:e7:20:34:84:54:d1:f9:82:6e:51:dc:
da:cf:f3:05:67:c3:7c:47:9c:ba:87:93:19:75:c9:
c5:da:48:5d:f6:ff:4b:c2:20:20:9a:18:a2:5b:ad:
95:77:2d:c6:52:d2:6d:da:21:ac:96:54:aa:c7:85:
3d:67:fc:de:2f:14:0e:ab:f4:40:1e:57:b0:4b:3c:
19:d4:d9:be:9a:05:88:da:04:3e:97:0b:57:8b:e9:
f6:df:06:98:df:2f:44:d8:6b:d6:0a:d6:78:19:84:
e8:56:c6:3c:07:53:21:87:89:56:4f:99:3c:5a:21:
f9:fc:2b:b7:8b:b9:6f:7e:76:1e:35:96:13:b3:14:
a8:d5:ba:12:40:23:50:a9:24:55:78:e5:73:fb:86:
97:ce:05:ac:07:39:38:5d:46:30:93:79:c8:63:e1:
e6:aa:55:19:28:ba:42:78:fb:ca:50:ed:70:d6:7a:
59:c3:24:26:03:7c:83:eb:41:92:58:db:1e:b5:0c:
dd:63:c8:67:20:f7:c0:39:03:95:82:3c:6b:62:8f:
94:a9:70:9a:81:f7:52:1c:c5:f1:9f:06:08:a6:b6:
19:00:87:19:e5:01:43:4d:76:fe:8a:fa:37:a9:38:
11:dd:96:2c:75:ac:14:c2:9d:e5:9d:2a:c1:41:f5:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:FB:6B:DA:EB:55:32:49:B4:71:43:CF:02:BA:D3:4D:81:58:A7
X509v3 Authority Key Identifier:
keyid:72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/3137372e3138352e34302e302f32312d3234203d3e20323633353734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.185.40.0/21
Signature Algorithm: sha256WithRSAEncryption
97:45:63:fc:5c:77:1f:6f:89:77:64:82:37:8f:22:59:5e:72:
b9:63:8b:d1:bc:fa:cd:1a:ef:72:e9:93:19:e8:03:d5:6a:8f:
05:0e:75:af:b2:e7:8e:35:50:16:b1:94:3e:c3:fc:2f:52:2a:
6a:1d:f3:75:b7:44:dd:7c:bb:8c:b7:47:2c:25:ef:4e:b3:f1:
cc:73:87:2c:fd:82:8d:d3:9d:09:cb:64:00:54:a7:86:00:cb:
aa:40:6f:9e:2c:ad:5a:c8:19:bd:df:f1:cb:33:97:a8:b6:5c:
43:ca:11:3c:39:b5:50:1b:e4:cc:33:26:72:6a:16:ec:29:4a:
92:e4:92:1a:78:ec:b6:20:01:2e:a9:be:02:51:3e:17:90:23:
21:33:34:0c:5c:06:f8:cd:82:93:25:2f:91:1c:ba:40:9f:f2:
df:6d:cc:0b:e1:82:9a:79:51:64:95:fd:9e:a9:2e:91:c1:db:
93:2a:f6:cb:1a:79:ed:34:39:bb:fa:d1:83:06:6f:8e:83:b2:
09:0e:ba:ea:b7:85:b3:80:d9:91:c9:d3:ec:85:0a:fb:ce:8b:
cb:ba:74:fd:7a:e2:1b:5a:2c:d1:c0:51:d1:a6:c3:9b:3d:bf:
39:91:83:06:db:3e:6f:60:6b:19:3e:43:08:15:c8:7c:f0:c2:
f4:6c:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:31:27 2026 by rpki-client