Error: rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa
File:                     323830343a6634343a3a2f33322d3438203d3e20323633353734.roa (raw, json)
Hash identifier:          hzElwSEi55rDNrzHB/DwDlMVNh1Rasdln6vsQe7nXMs=
Subject key identifier:   F4:EE:BC:7D:E2:F2:65:07:E8:FD:75:86:38:4C:F6:24:73:DE:1B:3C
Certificate issuer:       /CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
Certificate serial:       6A961F166EECBE4AD76ED00AA65E7935AC5F3E68
Authority key identifier: 72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa
Signing time:             Wed 09 Sep 2026 18:01:52 +0000
ROA not before:           Wed 09 Sep 2026 17:56:52 +0000
ROA not after:            Wed 08 Sep 2027 18:01:52 +0000
asID:                     263574
IP address blocks:        2804:f44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl
                          rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:96:1f:16:6e:ec:be:4a:d7:6e:d0:0a:a6:5e:79:35:ac:5f:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D7F72D16096A110FFAEA11F47C40B7AED4E0BF
        Validity
            Not Before: Sep  9 17:56:52 2026 GMT
            Not After : Sep  8 18:01:52 2027 GMT
        Subject: CN=F4EEBC7DE2F26507E8FD7586384CF62473DE1B3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:a0:64:83:01:25:68:c0:e1:7c:48:95:ff:
                    e1:c3:84:79:df:39:55:3b:cb:9e:3d:27:c4:94:c7:
                    8f:84:9b:33:77:35:f9:3e:f4:54:1d:87:45:eb:dc:
                    ad:3c:df:87:4c:be:47:f6:9d:24:82:e7:68:7b:e8:
                    76:e5:5a:49:a2:3a:9f:b2:65:ef:a2:e6:2d:8b:c2:
                    a7:24:7a:57:fc:21:77:ae:0a:c8:4c:06:75:85:cb:
                    55:42:35:fd:57:c8:39:9b:1a:d8:30:1b:b2:9a:99:
                    3e:3b:b7:14:34:60:ce:40:bd:ac:42:f4:87:4f:93:
                    34:55:23:5f:22:79:b5:81:cf:76:ab:53:cd:c3:ca:
                    8b:7f:ef:e8:62:4c:10:9e:e9:09:e4:2e:ce:24:61:
                    eb:00:54:d6:e4:57:14:ee:52:08:dc:73:03:84:6c:
                    3f:20:e9:3d:cd:21:58:8d:45:6b:0f:98:27:8c:e7:
                    a4:43:ec:4b:d8:cc:82:29:8d:df:23:93:ef:7d:d4:
                    08:20:1c:cf:c4:81:e0:00:b5:0c:ac:03:9a:1f:0d:
                    f0:65:12:44:1a:f6:48:3e:eb:2d:45:2e:09:fa:c2:
                    06:1d:e2:5b:ee:ac:25:c4:87:b1:f7:cd:22:00:a6:
                    98:50:ba:4f:b6:cb:5d:37:67:58:f2:5b:c7:95:12:
                    2f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:BC:7D:E2:F2:65:07:E8:FD:75:86:38:4C:F6:24:73:DE:1B:3C
            X509v3 Authority Key Identifier:
                keyid:72:D7:F7:2D:16:09:6A:11:0F:FA:EA:11:F4:7C:40:B7:AE:D4:E0:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D7F72D16096A110FFAEA11F47C40B7AED4E0BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/0/323830343a6634343a3a2f33322d3438203d3e20323633353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f44::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:a2:e3:1a:e7:da:b4:68:35:12:78:db:20:45:1f:88:de:
         ad:3b:c7:75:30:2f:1a:96:df:b5:b3:6e:3f:f5:27:f2:59:26:
         72:b1:38:61:66:68:0b:52:f4:d2:7e:59:7a:11:b3:57:45:79:
         32:cf:16:03:f5:4e:8e:08:ed:3d:f3:91:11:ff:21:68:d2:a6:
         e7:fb:52:e1:23:97:fd:bf:d7:c2:87:fa:a0:1e:ac:33:64:91:
         52:9c:04:8b:76:20:a9:e3:bb:1e:c1:a9:5b:17:8d:c5:49:6c:
         b9:ef:79:90:1e:04:a2:8c:1f:bd:20:db:de:dc:20:3c:de:0d:
         c7:22:d1:15:a2:40:35:63:12:62:5c:58:e1:7e:32:1f:88:8c:
         15:4b:88:ba:0f:34:45:ed:d5:1a:27:60:b5:1d:1a:83:e2:d9:
         3d:23:05:65:32:e7:9e:f0:14:64:bd:d4:51:eb:37:54:d4:37:
         f3:62:fc:28:82:11:b4:78:9e:59:f1:dd:cb:22:2c:9a:30:b7:
         b1:3f:91:66:a5:1d:7a:19:f0:04:9e:9a:e9:d2:06:19:72:31:
         8a:80:48:1b:da:22:c0:51:23:75:c5:12:bf:9e:6a:87:1b:41:
         7e:08:48:06:ff:5b:eb:be:a2:7c:24:cc:67:07:46:1a:73:57:
         51:45:40:64
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUapYfFm7svkrXbtAKpl55NaxfPmgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEN0Y3MkQxNjA5NkExMTBGRkFFQTExRjQ3QzQwQjdB
RUQ0RTBCRjAeFw0yNjA5MDkxNzU2NTJaFw0yNzA5MDgxODAxNTJaMDMxMTAvBgNV
BAMTKEY0RUVCQzdERTJGMjY1MDdFOEZENzU4NjM4NENGNjI0NzNERTFCM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZKBkgwElaMDhfEiV/+HDhHnf
OVU7y549J8SUx4+EmzN3Nfk+9FQdh0Xr3K0834dMvkf2nSSC52h76HblWkmiOp+y
Ze+i5i2Lwqckelf8IXeuCshMBnWFy1VCNf1XyDmbGtgwG7KamT47txQ0YM5AvaxC
9IdPkzRVI18iebWBz3arU83Dyot/7+hiTBCe6QnkLs4kYesAVNbkVxTuUgjccwOE
bD8g6T3NIViNRWsPmCeM56RD7EvYzIIpjd8jk+991AggHM/EgeAAtQysA5ofDfBl
EkQa9kg+6y1FLgn6wgYd4lvurCXEh7H3zSIApphQuk+2y103Z1jyW8eVEi+NAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU9O68feLyZQfo/XWGOEz2JHPeGzwwHwYDVR0j
BBgwFoAUctf3LRYJahEP+uoR9HxAt67U4L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTNyeDJMSlV2QU1XRXRXblBTU3NGeERuY3pwSHJTcWdjeDU3VnVDTHll
YnIvMC83MkQ3RjcyRDE2MDk2QTExMEZGQUVBMTFGNDdDNDBCN0FFRDRFMEJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzcyRDdGNzJEMTYwOTZBMTEw
RkZBRUExMUY0N0M0MEI3QUVENEUwQkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEzcngyTEpVdkFNV0V0V25QU1NzRnhEbmN6cEhyU3FnY3g1N1Z1Q0x5ZWJyLzAv
MzIzODMwMzQzYTY2MzQzNDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMyMzYzMzM1
MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgED0QwDQYJKoZIhvcNAQELBQADggEBALMGouMa59q0
aDUSeNsgRR+I3q07x3UwLxqW37Wzbj/1J/JZJnKxOGFmaAtS9NJ+WXoRs1dFeTLP
FgP1To4I7T3zkRH/IWjSpuf7UuEjl/2/18KH+qAerDNkkVKcBIt2IKnjux7BqVsX
jcVJbLnveZAeBKKMH70g297cIDzeDcci0RWiQDVjEmJcWOF+Mh+IjBVLiLoPNEXt
1RonYLUdGoPi2T0jBWUy557wFGS91FHrN1TUN/Ni/CiCEbR4nlnx3csiLJowt7E/
kWalHXoZ8ASemunSBhlyMYqASBvaIsBRI3XFEr+eaocbQX4ISAb/W+u+onwkzGcH
RhpzV1FFQGQ=
-----END CERTIFICATE-----
Generated at Tue Oct 13 07:32:33 2026 by rpki-client