
Error: rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa
File: 3139312e33372e35322e302f32342d3234203d3e20323633333437.roa (raw, json)
Hash identifier: al7CR3Oov5VQD2lpRfFiCc++5Qryp8Sw0h0+PGxac4k=
Subject key identifier: 3C:A8:75:7C:DA:C8:94:C9:7A:59:71:79:18:2D:5E:9F:07:74:8E:0B
Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Certificate serial: 0DB1610BD17341393707FEB675EA0E0C5EA92967
Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa
Signing time: Fri 11 Sep 2026 21:31:06 +0000
ROA not before: Fri 11 Sep 2026 21:26:06 +0000
ROA not after: Fri 10 Sep 2027 21:31:06 +0000
asID: 263347
IP address blocks: 191.37.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Nov 2026 06:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b1:61:0b:d1:73:41:39:37:07:fe:b6:75:ea:0e:0c:5e:a9:29:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2
Validity
Not Before: Sep 11 21:26:06 2026 GMT
Not After : Sep 10 21:31:06 2027 GMT
Subject: CN=3CA8757CDAC894C97A597179182D5E9F07748E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:44:03:6c:60:d3:69:88:00:d8:50:1b:cf:
75:04:63:a0:7e:30:2a:84:84:00:d5:6b:b3:66:db:
fc:16:ea:3c:f6:26:93:47:50:71:2c:98:34:7f:81:
5d:f6:dc:4d:42:f7:ab:77:67:cd:53:25:28:aa:68:
82:c5:0f:c0:67:15:52:94:f9:f2:9d:f1:f7:52:f1:
ed:84:4c:1e:db:cf:e7:e9:1c:5e:2c:26:4f:6b:39:
d0:c6:4b:01:63:76:f6:1c:48:bf:a1:67:34:c9:c9:
9f:13:cc:9a:33:bb:d5:35:01:0f:e9:25:47:e6:c0:
3d:d0:bc:8f:52:8e:94:c8:ee:91:d9:e9:99:2d:c8:
4e:99:0e:50:d2:24:ff:8e:cd:61:fc:ac:fb:c1:43:
cc:7d:80:c6:0f:38:2a:70:39:c3:53:d3:93:86:b5:
88:b6:21:90:cb:39:d4:62:69:b3:e9:c2:c3:61:3f:
d0:2c:5d:cd:65:ef:be:f4:47:95:0c:00:fb:fd:06:
24:d1:64:53:2d:e6:67:82:db:b9:b7:eb:6a:12:84:
29:3c:1c:93:e8:21:6c:7d:c8:05:8d:2a:48:81:87:
db:bd:5f:7b:b5:1f:bd:81:69:0d:d0:e6:3a:8f:1f:
a8:c3:ba:44:82:7f:ae:a6:d6:df:4d:fe:76:27:dd:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A8:75:7C:DA:C8:94:C9:7A:59:71:79:18:2D:5E:9F:07:74:8E:0B
X509v3 Authority Key Identifier:
keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35322e302f32342d3234203d3e20323633333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.37.52.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d9:89:62:ff:cb:d4:a1:76:06:f2:24:d6:cf:f0:1c:5c:dd:
86:79:b2:9f:34:95:75:37:87:02:e9:da:4f:5b:15:12:c2:1e:
d4:1f:aa:a4:6f:5b:81:8a:d1:1b:0d:14:6b:97:62:fc:23:23:
09:c9:21:2a:56:69:08:31:db:92:6c:f7:f5:19:b8:95:35:c5:
57:e9:0f:82:1d:5d:7d:7d:20:2f:bd:9c:b8:61:02:cb:bb:a7:
36:92:d3:c1:d3:a1:ba:a2:96:21:63:af:36:e6:c3:1c:33:62:
19:fb:6d:34:80:4e:04:c0:f8:bd:1f:2b:2d:c0:af:07:d4:c9:
ea:2a:cb:5e:f7:27:bd:d1:4b:c7:c8:00:70:4c:ba:a8:97:29:
26:27:be:60:ee:8f:fe:f2:44:5a:19:cb:af:d4:7f:6a:c5:fe:
84:9b:08:79:21:cb:82:3e:92:94:e5:27:72:37:85:11:42:16:
7b:12:ea:65:72:aa:5e:dd:42:3f:51:89:84:c9:37:96:bb:53:
da:a8:5a:fe:96:91:3c:3f:45:94:ee:64:26:6d:3d:7b:ec:05:
fe:d2:b8:03:16:b6:5e:bb:56:aa:d2:a1:59:e4:95:0e:0e:02:
fe:29:b6:cf:0c:84:4b:52:82:ff:e8:b7:6d:34:4a:d7:ce:8a:
78:64:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 06:25:22 2026 by rpki-client