Error: rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa File: 3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa (raw, json) Hash identifier: MgAyG2HdW+En7WiKeY9+lzuh7ZwZaY72/OezcRL2ApA= Subject key identifier: C8:83:86:A7:FC:E8:3E:99:D3:89:F2:F3:4D:D4:1B:33:F9:60:D3:31 Certificate issuer: /CN=2CEE12D044540710A5876E4246E86C0EF8C37663 Certificate serial: 0935AAFE7A2CE9A47AEBD81471ED4CBA5E9547ED Authority key identifier: 2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer Subject info access: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa Signing time: Wed 26 Aug 2026 12:46:07 +0000 ROA not before: Wed 26 Aug 2026 12:41:07 +0000 ROA not after: Wed 25 Aug 2027 12:46:07 +0000 asID: 265942 IP address blocks: 131.196.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 05 Sep 2026 16:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:35:aa:fe:7a:2c:e9:a4:7a:eb:d8:14:71:ed:4c:ba:5e:95:47:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CEE12D044540710A5876E4246E86C0EF8C37663 Validity Not Before: Aug 26 12:41:07 2026 GMT Not After : Aug 25 12:46:07 2027 GMT Subject: CN=C88386A7FCE83E99D389F2F34DD41B33F960D331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:1c:d3:3c:6f:89:e7:8e:c0:90:e5:a2:6c: 65:09:59:6a:0d:64:db:a4:b4:9f:a7:63:e5:61:db: c5:7e:c0:72:5e:1b:37:46:9f:76:5b:29:6b:dd:9b: 0a:55:73:02:1f:d8:eb:37:b8:18:4d:21:1c:8e:13: 3f:8a:ca:23:bd:ef:7f:d8:e3:94:7a:b5:01:ce:9f: 57:1e:28:a3:9a:36:3a:e7:0c:62:5c:69:8f:00:86: b9:38:43:ec:eb:fc:63:87:d6:23:fd:33:56:8f:9d: 2c:c1:f1:45:3b:1b:fd:7d:ea:2a:20:27:3c:f5:f3: 90:5f:16:05:17:8f:55:7b:a4:78:a4:85:a6:57:e1: 2d:5d:24:94:b7:4b:03:ce:9f:0a:cc:7b:d8:fd:41: 90:61:f6:e6:b8:05:11:8e:82:26:e2:55:b0:97:eb: 65:5e:ce:b7:f3:e5:92:fe:83:6e:e8:a8:e4:86:cf: 70:71:f4:0e:db:08:df:8d:33:3a:2b:dd:bd:fb:ec: ce:10:04:27:c3:cd:ef:b0:a0:41:a1:8e:b3:84:37: db:9f:26:c5:be:d5:e5:33:83:d0:c3:cf:4d:ec:cc: 1c:d1:a9:85:c0:6c:39:26:d1:79:13:a8:d9:a0:7f: ae:98:c8:c8:73:c1:89:fd:8c:ec:6a:ba:bf:32:93: 42:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:86:A7:FC:E8:3E:99:D3:89:F2:F3:4D:D4:1B:33:F9:60:D3:31 X509v3 Authority Key Identifier: keyid:2C:EE:12:D0:44:54:07:10:A5:87:6E:42:46:E8:6C:0E:F8:C3:76:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/2CEE12D044540710A5876E4246E86C0EF8C37663.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CEE12D044540710A5876E4246E86C0EF8C37663.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4azEbcV6gyrXzFvB1P8CYR2WWLa9ndToHwxYV7XsMAP/0/3133312e3139362e3135322e302f32322d3234203d3e20323635393432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.196.152.0/22 Signature Algorithm: sha256WithRSAEncryption 55:2d:af:de:91:93:32:d5:d8:4c:c5:69:c0:d0:ba:38:d1:98: d5:d3:f5:b5:e6:d5:12:e7:1b:ba:aa:42:e4:a3:53:16:f6:2b: 45:64:97:a5:e2:7f:bb:f1:36:f5:c2:2e:31:df:ed:92:dc:a2: 00:c2:ab:f9:6d:f6:fe:11:ba:f9:6b:b2:52:a1:06:85:1a:7b: b8:47:f1:82:66:c7:1d:4a:eb:75:e8:fd:b8:4e:c2:f4:f3:18: d3:6c:7e:db:0c:de:43:1e:5e:58:d5:8d:9f:07:50:7d:7b:35: 4b:5e:e5:44:e4:96:d1:b4:bc:86:a8:2c:3b:2b:e5:fc:30:85: 43:5f:0e:91:6e:36:9e:6e:78:76:af:61:59:50:f7:45:a2:52: 28:1a:02:97:42:84:8c:17:16:fa:cf:1a:6a:dd:0d:b1:c3:81: 50:d9:35:3e:ac:12:af:26:07:8c:6f:c3:d1:a4:db:bd:1b:39: 2d:13:b0:01:78:92:18:09:b6:78:5d:59:a4:28:6a:4c:22:e4: 89:7a:95:11:2c:1d:e7:eb:5b:53:25:a6:fd:4e:cb:cc:fb:1b: 8e:06:95:de:75:6a:51:df:55:cf:a7:84:92:72:e0:9a:1f:63: 98:7c:17:b4:ba:74:bf:45:77:c6:b7:f1:8f:4c:86:86:d5:71: ad:63:b6:45 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUCTWq/nos6aR669gUce1Mul6VR+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNFRTEyRDA0NDU0MDcxMEE1ODc2RTQyNDZFODZDMEVG OEMzNzY2MzAeFw0yNjA4MjYxMjQxMDdaFw0yNzA4MjUxMjQ2MDdaMDMxMTAvBgNV BAMTKEM4ODM4NkE3RkNFODNFOTlEMzg5RjJGMzRERDQxQjMzRjk2MEQzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDthzTPG+J547AkOWibGUJWWoN ZNuktJ+nY+Vh28V+wHJeGzdGn3ZbKWvdmwpVcwIf2Os3uBhNIRyOEz+KyiO973/Y 45R6tQHOn1ceKKOaNjrnDGJcaY8Ahrk4Q+zr/GOH1iP9M1aPnSzB8UU7G/196iog Jzz185BfFgUXj1V7pHikhaZX4S1dJJS3SwPOnwrMe9j9QZBh9ua4BRGOgibiVbCX 62Vezrfz5ZL+g27oqOSGz3Bx9A7bCN+NMzor3b377M4QBCfDze+woEGhjrOEN9uf JsW+1eUzg9DDz03szBzRqYXAbDkm0XkTqNmgf66YyMhzwYn9jOxqur8yk0IVAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUyIOGp/zoPpnTifLzTdQbM/lg0zEwHwYDVR0j BBgwFoAULO4S0ERUBxClh25CRuhsDvjDdmMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQzRhekViY1Y2Z3lyWHpGdkIxUDhDWVIyV1dMYTluZFRvSHd4WVY3WHNN QVAvMC8yQ0VFMTJEMDQ0NTQwNzEwQTU4NzZFNDI0NkU4NkMwRUY4QzM3NjYzLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDRUUxMkQwNDQ1NDA3MTBB NTg3NkU0MjQ2RTg2QzBFRjhDMzc2NjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0M0YXpFYmNWNmd5clh6RnZCMVA4Q1lSMldXTGE5bmRUb0h3eFlWN1hzTUFQLzAv MzEzMzMxMmUzMTM5MzYyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy MzYzNTM5MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoPEmDANBgkqhkiG9w0BAQsFAAOCAQEAVS2v 3pGTMtXYTMVpwNC6ONGY1dP1tebVEucbuqpC5KNTFvYrRWSXpeJ/u/E29cIuMd/t ktyiAMKr+W32/hG6+WuyUqEGhRp7uEfxgmbHHUrrdej9uE7C9PMY02x+2wzeQx5e WNWNnwdQfXs1S17lROSW0bS8hqgsOyvl/DCFQ18OkW42nm54dq9hWVD3RaJSKBoC l0KEjBcW+s8aat0NscOBUNk1PqwSryYHjG/D0aTbvRs5LROwAXiSGAm2eF1ZpChq TCLkiXqVESwd5+tbUyWm/U7LzPsbjgaV3nVqUd9Vz6eEknLgmh9jmHwXtLp0v0V3 xrfxj0yGhtVxrWO2RQ== -----END CERTIFICATE-----Generated at Sat Sep 5 05:17:57 2026 by rpki-client