Error: rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa File: 323830343a343837383a3a2f33322d3438203d3e20323637313233.roa (raw, json) Hash identifier: IQA0zS6K8lm8MzKNMV65c3IAeY4+abhWcoa62Rve0I0= Subject key identifier: 1D:80:7E:51:F2:8B:EA:29:87:1D:DC:83:AF:C3:73:38:D8:03:96:77 Certificate issuer: /CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7 Certificate serial: 0DB255F1BED40C8AF5D9FFC33FF0FEE8FDEE785E Authority key identifier: DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer Subject info access: rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa Signing time: Wed 02 Sep 2026 21:00:00 +0000 ROA not before: Wed 02 Sep 2026 20:55:00 +0000 ROA not after: Wed 01 Sep 2027 21:00:00 +0000 asID: 267123 IP address blocks: 2804:4878::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 20 Oct 2026 06:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b2:55:f1:be:d4:0c:8a:f5:d9:ff:c3:3f:f0:fe:e8:fd:ee:78:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7 Validity Not Before: Sep 2 20:55:00 2026 GMT Not After : Sep 1 21:00:00 2027 GMT Subject: CN=1D807E51F28BEA29871DDC83AFC37338D8039677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:37:7a:f8:3d:b0:ef:98:67:b7:0e:23:58:16: 2a:c0:e8:5b:c3:f5:c6:5f:56:bd:e2:cb:32:86:cc: f9:b0:be:b5:59:dc:e7:9e:2b:fa:93:1f:0d:6e:d8: 31:d0:0b:2e:9b:c4:85:75:23:d7:19:46:64:c6:0f: 0b:67:01:47:dc:d1:df:b0:ec:95:c1:db:a6:15:de: 29:91:bd:91:82:60:d3:8b:1e:99:76:f2:e8:6f:a1: 99:14:60:5f:80:e4:3f:e7:65:39:7b:38:55:1e:84: ff:9b:85:d8:a9:90:98:46:d6:34:38:71:2e:d6:d7: 2f:b3:a7:31:aa:27:7e:13:e1:98:7a:15:c6:6f:5f: 80:d1:fa:9d:9b:43:9d:c8:59:f5:a3:b5:f5:ca:70: d2:82:de:ff:af:b0:35:e3:7f:22:83:15:c1:ee:db: 16:70:80:9b:96:fa:c4:34:5d:77:63:e6:de:9d:39: 73:b5:0b:53:5a:97:c9:23:da:71:ad:0d:f1:56:46: 07:bb:e3:6d:54:4b:c9:6d:59:73:cb:8b:f9:67:df: fd:7a:f9:15:25:e3:0e:97:67:0a:0c:38:e1:2a:ac: 0a:76:cf:b9:9f:69:6c:68:fd:27:33:e3:aa:bd:4d: e4:7b:98:08:5f:ba:03:a7:8b:19:16:5d:5b:f2:5f: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:80:7E:51:F2:8B:EA:29:87:1D:DC:83:AF:C3:73:38:D8:03:96:77 X509v3 Authority Key Identifier: keyid:DF:9D:1F:F1:4B:D6:D4:20:9A:F1:97:A1:E8:76:8E:8A:7A:93:C5:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF9D1FF14BD6D4209AF197A1E8768E8A7A93C5E7.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAEUeipQkfxgc8pKAertUGLmME45KRbtuBAY46Xy8z3e/0/323830343a343837383a3a2f33322d3438203d3e20323637313233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:4878::/32 Signature Algorithm: sha256WithRSAEncryption 68:13:cc:1f:ce:83:6c:58:71:28:e5:9e:af:d3:a7:e1:2b:2d: c8:99:f7:0f:05:7a:34:f6:46:02:c0:0a:52:a7:ee:57:3b:78: f1:78:ef:73:ef:58:a4:30:11:69:a9:50:13:f9:7b:6a:bb:6f: 84:da:6c:57:37:0a:46:4b:06:54:27:12:82:d7:68:5e:50:fd: 91:a8:7f:3a:61:98:f8:0a:25:d4:ea:c6:4f:12:b0:c8:3b:2f: 4d:be:c1:87:15:ea:fb:6e:9e:eb:0f:d3:e2:eb:03:ef:e8:38: d1:a6:69:4f:21:2a:e3:d8:49:da:6d:69:b4:05:3a:b7:05:fe: 1c:e2:49:f8:4a:55:ab:7f:1c:9c:ef:68:aa:bc:6e:38:68:c3: 65:55:24:80:03:fa:7c:9e:01:8b:49:f7:b9:ba:c2:70:b7:90: e2:17:06:58:91:2e:71:4e:d7:29:44:0f:f5:76:9a:92:f9:eb: f6:91:3b:8d:bd:8e:dd:4f:40:ce:2b:1f:b1:fe:c4:ea:60:1f: 9a:0c:38:1c:fa:a5:1e:97:50:41:88:11:1f:6c:b3:e0:c3:38: d8:38:79:3e:1b:6d:9c:0f:9c:43:2a:89:02:ae:f7:97:2b:70: 53:90:2a:31:88:9f:49:97:11:d4:f1:13:14:f7:9f:86:25:72: f1:dd:f0:e7 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgIUDbJV8b7UDIr12f/DP/D+6P3ueF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY5RDFGRjE0QkQ2RDQyMDlBRjE5N0ExRTg3NjhFOEE3 QTkzQzVFNzAeFw0yNjA5MDIyMDU1MDBaFw0yNzA5MDEyMTAwMDBaMDMxMTAvBgNV BAMTKDFEODA3RTUxRjI4QkVBMjk4NzFEREM4M0FGQzM3MzM4RDgwMzk2NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFN3r4PbDvmGe3DiNYFirA6FvD 9cZfVr3iyzKGzPmwvrVZ3OeeK/qTHw1u2DHQCy6bxIV1I9cZRmTGDwtnAUfc0d+w 7JXB26YV3imRvZGCYNOLHpl28uhvoZkUYF+A5D/nZTl7OFUehP+bhdipkJhG1jQ4 cS7W1y+zpzGqJ34T4Zh6FcZvX4DR+p2bQ53IWfWjtfXKcNKC3v+vsDXjfyKDFcHu 2xZwgJuW+sQ0XXdj5t6dOXO1C1Nal8kj2nGtDfFWRge7421US8ltWXPLi/ln3/16 +RUl4w6XZwoMOOEqrAp2z7mfaWxo/Scz46q9TeR7mAhfugOnixkWXVvyX4T7AgMB AAGjggJQMIICTDAdBgNVHQ4EFgQUHYB+UfKL6imHHdyDr8NzONgDlncwHwYDVR0j BBgwFoAU350f8UvW1CCa8Zeh6HaOinqTxecwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRUFFVWVpcFFrZnhnYzhwS0FlcnRVR0xtTUU0NUtSYnR1QkFZNDZYeTh6 M2UvMC9ERjlEMUZGMTRCRDZENDIwOUFGMTk3QTFFODc2OEU4QTdBOTNDNUU3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGOUQxRkYxNEJENkQ0MjA5 QUYxOTdBMUU4NzY4RThBN0E5M0M1RTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0VBRVVlaXBRa2Z4Z2M4cEtBZXJ0VUdMbU1FNDVLUmJ0dUJBWTQ2WHk4ejNlLzAv MzIzODMwMzQzYTM0MzgzNzM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM3 MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH AQH/BBEwDzANBAIAAjAHAwUAKARIeDANBgkqhkiG9w0BAQsFAAOCAQEAaBPMH86D bFhxKOWer9On4SstyJn3DwV6NPZGAsAKUqfuVzt48Xjvc+9YpDARaalQE/l7artv hNpsVzcKRksGVCcSgtdoXlD9kah/OmGY+Aol1OrGTxKwyDsvTb7BhxXq+26e6w/T 4usD7+g40aZpTyEq49hJ2m1ptAU6twX+HOJJ+EpVq38cnO9oqrxuOGjDZVUkgAP6 fJ4Bi0n3ubrCcLeQ4hcGWJEucU7XKUQP9Xaakvnr9pE7jb2O3U9Azisfsf7E6mAf mgw4HPqlHpdQQYgRH2yz4MM42Dh5PhttnA+cQyqJAq73lytwU5AqMYifSZcR1PET FPefhiVy8d3w5w== -----END CERTIFICATE-----Generated at Mon Oct 19 20:40:18 2026 by rpki-client