Error: rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa File: 34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa (raw, json) Hash identifier: MHvxb++mGBTWBQCC9yWWCWNh1Bzqf+LstxrAoEs3xSU= Subject key identifier: 77:E2:90:56:8E:2C:DA:63:6F:49:14:43:43:4B:C3:AB:D9:C2:74:4E Certificate issuer: /CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE Certificate serial: 258BF8CBDF66ECE2611508F902D03661C5E03FEE Authority key identifier: DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer Subject info access: rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa Signing time: Wed 02 Sep 2026 13:21:44 +0000 ROA not before: Wed 02 Sep 2026 13:16:44 +0000 ROA not after: Wed 01 Sep 2027 13:21:44 +0000 asID: 269014 IP address blocks: 45.176.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 22:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8b:f8:cb:df:66:ec:e2:61:15:08:f9:02:d0:36:61:c5:e0:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCE12EC0DA41B59BE75216E28A3D798D4313AFEE Validity Not Before: Sep 2 13:16:44 2026 GMT Not After : Sep 1 13:21:44 2027 GMT Subject: CN=77E290568E2CDA636F491443434BC3ABD9C2744E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:b5:21:a7:01:00:25:0f:60:7d:c5:c0:1d: e1:2b:ff:97:e3:b2:f5:7a:3e:49:b0:53:77:a0:63: 26:8c:68:1c:cc:68:3e:ea:48:24:49:10:d4:88:53: b0:bf:4f:82:ff:cc:ce:ac:11:41:10:8b:21:53:25: f7:33:82:23:a3:53:31:65:fa:9b:2a:62:9a:04:93: ed:cc:83:0f:8a:91:ea:c6:09:b2:fa:63:97:86:da: fa:bd:25:e4:b0:31:e5:3d:44:0c:57:93:20:e2:b4: a4:ee:0a:86:12:83:cf:9d:11:a2:a5:cd:a2:54:8b: 1d:d9:66:f8:ac:c0:d8:63:27:e1:c5:0a:c1:13:5a: 61:88:87:17:25:0e:ed:67:16:fc:8f:37:d6:04:17: a2:7b:e5:7f:97:0e:ff:8c:48:10:c3:24:72:4c:b4: 61:83:58:06:1a:90:e7:45:db:01:1a:11:ee:cd:21: 69:0c:8e:12:84:a8:ea:bc:a0:9a:3f:75:01:61:db: ec:bd:36:23:bf:f3:23:2a:d8:bd:e2:d3:bc:15:b6: 88:58:e9:71:12:f6:a3:9d:b3:91:6a:2e:af:ae:bf: f6:27:05:59:85:4e:15:98:9d:6d:27:25:be:f2:cb: 3f:92:c8:3a:87:9b:b9:c4:1e:05:12:c1:64:11:05: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E2:90:56:8E:2C:DA:63:6F:49:14:43:43:4B:C3:AB:D9:C2:74:4E X509v3 Authority Key Identifier: keyid:DC:E1:2E:C0:DA:41:B5:9B:E7:52:16:E2:8A:3D:79:8D:43:13:AF:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCE12EC0DA41B59BE75216E28A3D798D4313AFEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxTKE6L14FHfSLrnB1kQ2b5jhtcif6PxthNE9ZT4TXWP/0/34352e3137362e3232302e302f32342d3234203d3e20323639303134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.176.220.0/24 Signature Algorithm: sha256WithRSAEncryption 16:83:95:b8:61:65:f5:e5:4e:68:6c:ef:56:58:b6:2d:8b:8f: 80:d8:9e:23:5e:7d:1c:75:2d:b0:eb:f8:a3:52:45:8f:1a:89: 9a:8d:90:fe:91:93:5e:b8:70:e4:4e:7c:f0:14:bc:d0:19:5f: 16:c6:07:66:5e:7a:60:c4:84:8f:b8:e3:8b:17:e4:25:e0:74: a0:8e:d0:ec:7c:6e:83:c0:bc:94:33:0f:bf:d9:4a:89:00:43: 70:5b:33:0c:0c:a0:19:85:f6:46:a5:94:df:7c:fa:a0:eb:82: cb:a4:51:dd:1a:e1:df:60:67:c4:49:2a:96:fa:74:6c:d2:24: 87:ec:37:72:b9:3d:11:73:39:c2:c5:03:93:87:3b:10:55:21: 9e:7d:dd:3d:ad:d5:34:cc:a7:df:08:66:7b:50:80:c0:62:d3: f1:6d:75:b4:1f:a4:bf:44:7f:66:65:1f:c3:86:47:c9:26:fe: 66:65:51:8f:6b:6a:e4:19:80:54:da:d6:b7:ab:02:c6:c0:da: e4:fc:71:a0:73:33:65:f2:b3:91:a2:7e:62:18:9e:d3:d2:43: 88:32:88:97:02:a6:5e:f3:1e:cc:5f:d7:42:0e:1f:27:76:58: 72:ea:29:c3:30:9d:5d:98:3d:a8:d1:da:2a:fc:6b:96:e3:44: 45:f1:99:c8 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUJYv4y99m7OJhFQj5AtA2YcXgP+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENFMTJFQzBEQTQxQjU5QkU3NTIxNkUyOEEzRDc5OEQ0 MzEzQUZFRTAeFw0yNjA5MDIxMzE2NDRaFw0yNzA5MDExMzIxNDRaMDMxMTAvBgNV BAMTKDc3RTI5MDU2OEUyQ0RBNjM2RjQ5MTQ0MzQzNEJDM0FCRDlDMjc0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeu7UhpwEAJQ9gfcXAHeEr/5fj svV6PkmwU3egYyaMaBzMaD7qSCRJENSIU7C/T4L/zM6sEUEQiyFTJfczgiOjUzFl +psqYpoEk+3Mgw+KkerGCbL6Y5eG2vq9JeSwMeU9RAxXkyDitKTuCoYSg8+dEaKl zaJUix3ZZviswNhjJ+HFCsETWmGIhxclDu1nFvyPN9YEF6J75X+XDv+MSBDDJHJM tGGDWAYakOdF2wEaEe7NIWkMjhKEqOq8oJo/dQFh2+y9NiO/8yMq2L3i07wVtohY 6XES9qOds5FqLq+uv/YnBVmFThWYnW0nJb7yyz+SyDqHm7nEHgUSwWQRBZv7AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUd+KQVo4s2mNvSRRDQ0vDq9nCdE4wHwYDVR0j BBgwFoAU3OEuwNpBtZvnUhbiij15jUMTr+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQ3hUS0U2TDE0RkhmU0xybkIxa1EyYjVqaHRjaWY2UHh0aE5FOVpUNFRY V1AvMC9EQ0UxMkVDMERBNDFCNTlCRTc1MjE2RTI4QTNENzk4RDQzMTNBRkVFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDRTEyRUMwREE0MUI1OUJF NzUyMTZFMjhBM0Q3OThENDMxM0FGRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0N4VEtFNkwxNEZIZlNMcm5CMWtRMmI1amh0Y2lmNlB4dGhORTlaVDRUWFdQLzAv MzQzNTJlMzEzNzM2MmUzMjMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2 MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtsNwwDQYJKoZIhvcNAQELBQADggEBABaDlbhh ZfXlTmhs71ZYti2Lj4DYniNefRx1LbDr+KNSRY8aiZqNkP6Rk164cOROfPAUvNAZ XxbGB2ZeemDEhI+444sX5CXgdKCO0Ox8boPAvJQzD7/ZSokAQ3BbMwwMoBmF9kal lN98+qDrgsukUd0a4d9gZ8RJKpb6dGzSJIfsN3K5PRFzOcLFA5OHOxBVIZ593T2t 1TTMp98IZntQgMBi0/FtdbQfpL9Ef2ZlH8OGR8km/mZlUY9rauQZgFTa1rerAsbA 2uT8caBzM2Xys5GifmIYntPSQ4gyiJcCpl7zHsxf10IOHyd2WHLqKcMwnV2YPajR 2ir8a5bjREXxmcg= -----END CERTIFICATE-----Generated at Thu Oct 15 08:19:10 2026 by rpki-client