Error: rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa File: 323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa (raw, json) Hash identifier: Up49QadphzI+/2W/2K3sviBsajQ23whLmQKvEcAREtQ= Subject key identifier: 8D:3A:3E:90:E2:48:67:01:6D:6E:D2:5B:23:20:88:6E:BF:40:0A:B3 Certificate issuer: /CN=79798C354EE82F89133F9F2BDCA4F8220483498E Certificate serial: 43A2E2F311A9E152390F36777F7EBFFBEC5A1E5B Authority key identifier: 79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer Subject info access: rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa Signing time: Wed 09 Sep 2026 19:17:03 +0000 ROA not before: Wed 09 Sep 2026 19:12:03 +0000 ROA not after: Wed 08 Sep 2027 19:17:03 +0000 asID: 273316 IP address blocks: 2804:8cd4:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 21 Oct 2026 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a2:e2:f3:11:a9:e1:52:39:0f:36:77:7f:7e:bf:fb:ec:5a:1e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79798C354EE82F89133F9F2BDCA4F8220483498E Validity Not Before: Sep 9 19:12:03 2026 GMT Not After : Sep 8 19:17:03 2027 GMT Subject: CN=8D3A3E90E24867016D6ED25B2320886EBF400AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:6e:ce:5b:48:a8:77:17:5e:fe:0b:10:cb: 2f:2c:3b:4d:2e:4b:85:34:0c:66:24:e6:32:c7:c5: ab:37:2f:36:e6:fb:45:84:a5:a4:92:da:6c:64:06: 58:55:c2:d5:e1:8e:6b:1b:6f:0b:06:b3:a6:42:09: 8c:9c:0a:9a:99:41:28:2b:8a:72:66:18:7d:36:56: 5a:e6:1d:1b:d4:46:76:a8:e0:0c:f7:97:f9:b2:be: d5:21:cb:89:e6:3f:2d:c3:d7:86:36:6c:aa:68:f3: 5e:e9:f5:79:2c:0e:6a:aa:51:6a:4a:8c:9a:e5:a4: c5:63:dd:83:18:35:ce:df:2d:ec:02:86:1d:af:94: b4:8f:ce:54:8a:3d:15:62:a9:82:f2:d8:ec:bf:86: d6:f2:d6:e5:56:ee:80:ac:2b:f9:c8:31:a8:cb:22: 01:19:be:70:bd:5f:27:cd:d5:5c:fd:a5:c6:76:4d: 51:25:61:36:99:5a:ab:68:e5:a5:62:2a:97:8a:f9: 55:90:f5:5b:34:ab:69:84:07:bd:de:89:cb:19:88: cc:29:82:4e:fd:a7:51:ef:f3:f1:65:aa:52:37:5d: 6c:04:88:27:53:8b:28:d2:a6:71:a7:3c:81:c4:35: 0d:53:a6:9f:32:da:e8:c2:5d:09:4a:62:12:80:4e: 56:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:3E:90:E2:48:67:01:6D:6E:D2:5B:23:20:88:6E:BF:40:0A:B3 X509v3 Authority Key Identifier: keyid:79:79:8C:35:4E:E8:2F:89:13:3F:9F:2B:DC:A4:F8:22:04:83:49:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/79798C354EE82F89133F9F2BDCA4F8220483498E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79798C354EE82F89133F9F2BDCA4F8220483498E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrAMf3G1ovpTQh5zePCdLFpqVtuLpZAwhFSGJnAx4ib8/1/323830343a386364343a383030303a3a2f33332d3333203d3e20323733333136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2804:8cd4:8000::/33 Signature Algorithm: sha256WithRSAEncryption 3b:3f:a0:ae:f2:30:08:a8:95:72:6e:bc:e2:87:4e:89:0a:6d: 90:1a:fd:ea:a1:26:6b:03:23:68:06:a5:f8:0c:ee:ed:69:25: 30:f0:12:d7:3b:34:96:e2:1c:0e:18:5a:90:3e:d1:d7:30:c4: b1:aa:a5:e2:7b:14:9a:b2:91:0b:65:50:f0:c3:63:d5:24:42: e6:1b:b2:97:bf:e1:fb:10:74:66:c5:bd:ff:80:4a:a4:e3:91: 2b:fb:5f:2d:2d:79:2a:92:c6:8a:9b:ba:2a:1e:83:3e:da:95: 6a:01:84:62:56:74:26:44:2e:98:57:c3:e4:ab:84:a3:7f:c7: 67:04:af:5b:c3:d7:26:08:11:e2:00:f4:bd:58:a6:26:5c:2c: ef:83:91:b1:8f:5b:86:19:ff:41:11:73:a5:53:f8:48:0a:8c: f6:94:d4:b0:62:ef:fa:69:be:78:bb:31:7a:de:17:54:da:46: b4:98:20:38:bf:c2:c3:71:d5:a3:b7:53:78:83:b2:2d:2a:24: 90:f9:b5:2d:46:8b:f7:c0:33:d7:a4:b1:9f:07:4a:98:63:5a: 15:5c:6b:17:c0:8d:34:07:8a:a8:e7:7f:2a:88:04:b5:8e:df: 2a:ea:39:a4:13:14:c5:71:68:a6:2d:3b:30:ba:61:ee:45:12: 5e:b2:c7:6e -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIUQ6Li8xGp4VI5DzZ3f36/++xaHlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk3OThDMzU0RUU4MkY4OTEzM0Y5RjJCRENBNEY4MjIw NDgzNDk4RTAeFw0yNjA5MDkxOTEyMDNaFw0yNzA5MDgxOTE3MDNaMDMxMTAvBgNV BAMTKDhEM0EzRTkwRTI0ODY3MDE2RDZFRDI1QjIzMjA4ODZFQkY0MDBBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEd27OW0iodxde/gsQyy8sO00u S4U0DGYk5jLHxas3Lzbm+0WEpaSS2mxkBlhVwtXhjmsbbwsGs6ZCCYycCpqZQSgr inJmGH02VlrmHRvURnao4Az3l/myvtUhy4nmPy3D14Y2bKpo817p9XksDmqqUWpK jJrlpMVj3YMYNc7fLewChh2vlLSPzlSKPRViqYLy2Oy/htby1uVW7oCsK/nIMajL IgEZvnC9XyfN1Vz9pcZ2TVElYTaZWqto5aViKpeK+VWQ9Vs0q2mEB73eicsZiMwp gk79p1Hv8/FlqlI3XWwEiCdTiyjSpnGnPIHENQ1Tpp8y2ujCXQlKYhKATlYdAgMB AAGjggJbMIICVzAdBgNVHQ4EFgQUjTo+kOJIZwFtbtJbIyCIbr9ACrMwHwYDVR0j BBgwFoAUeXmMNU7oL4kTP58r3KT4IgSDSY4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vSHJBTWYzRzFvdnBUUWg1emVQQ2RMRnBxVnR1THBaQXdoRlNHSm5BeDRp YjgvMS83OTc5OEMzNTRFRTgyRjg5MTMzRjlGMkJEQ0E0RjgyMjA0ODM0OThFLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc5Nzk4QzM1NEVFODJGODkx MzNGOUYyQkRDQTRGODIyMDQ4MzQ5OEUuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0hyQU1mM0cxb3ZwVFFoNXplUENkTEZwcVZ0dUxwWkF3aEZTR0puQXg0aWI4LzEv MzIzODMwMzQzYTM4NjM2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk M2UyMDMyMzczMzMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygEjNSAMA0GCSqGSIb3DQEBCwUA A4IBAQA7P6Cu8jAIqJVybrzih06JCm2QGv3qoSZrAyNoBqX4DO7taSUw8BLXOzSW 4hwOGFqQPtHXMMSxqqXiexSaspELZVDww2PVJELmG7KXv+H7EHRmxb3/gEqk45Er +18tLXkqksaKm7oqHoM+2pVqAYRiVnQmRC6YV8Pkq4Sjf8dnBK9bw9cmCBHiAPS9 WKYmXCzvg5Gxj1uGGf9BEXOlU/hICoz2lNSwYu/6ab54uzF63hdU2ka0mCA4v8LD cdWjt1N4g7ItKiSQ+bUtRov3wDPXpLGfB0qYY1oVXGsXwI00B4qo538qiAS1jt8q 6jmkExTFcWimLTswumHuRRJessdu -----END CERTIFICATE-----Generated at Tue Oct 20 08:32:12 2026 by rpki-client