Error: rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35392e302f32342d3234203d3e20323633333437.roa File: 3139312e33372e35392e302f32342d3234203d3e20323633333437.roa (raw, json) Hash identifier: UEeviQRXBXOh7R3ae9/31/MmT23IAXkRn7N7bEEtLzE= Subject key identifier: 2D:8D:76:25:E9:1C:3B:B6:52:E3:B2:24:B8:FE:A7:FE:AC:78:47:D5 Certificate issuer: /CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2 Certificate serial: 67D14D968D9304F1B4FEC42EF56FAEBBC4ABA62D Authority key identifier: 03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer Subject info access: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35392e302f32342d3234203d3e20323633333437.roa Signing time: Fri 11 Sep 2026 21:31:08 +0000 ROA not before: Fri 11 Sep 2026 21:26:08 +0000 ROA not after: Fri 10 Sep 2027 21:31:08 +0000 asID: 263347 IP address blocks: 191.37.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 01 Nov 2026 06:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d1:4d:96:8d:93:04:f1:b4:fe:c4:2e:f5:6f:ae:bb:c4:ab:a6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=030916697CC77A1A876E4865BE02F55A8EFF9BF2 Validity Not Before: Sep 11 21:26:08 2026 GMT Not After : Sep 10 21:31:08 2027 GMT Subject: CN=2D8D7625E91C3BB652E3B224B8FEA7FEAC7847D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ac:46:25:86:bb:18:e9:d5:86:9d:98:30:e4: 66:2a:bb:ae:a9:46:fd:8c:05:d3:3a:64:5c:f6:f2: 95:65:5a:15:ed:4e:26:a6:61:d1:1f:47:78:bd:18: 32:f4:c6:c3:16:1f:b1:41:02:0a:dd:0d:45:11:9d: 37:1c:4d:71:7a:45:e0:1f:15:2d:af:c4:85:0b:b2: 9b:66:3e:74:79:af:4b:9d:5d:3e:cf:37:f1:a4:e8: 22:69:5e:a1:d9:e0:19:3e:73:41:a0:00:16:3f:42: 05:f8:6a:44:ce:7e:d0:2d:ab:a2:f8:ca:34:39:55: 18:08:11:cc:b2:a1:cc:ea:ec:14:28:5a:b3:c3:cf: dc:f1:d1:cb:43:71:eb:6d:43:ae:cc:4d:f0:48:e4: f3:e1:80:63:9b:64:e8:0a:bc:1e:7d:36:0e:aa:f9: f8:66:7e:ae:a4:15:a5:3f:65:6e:af:99:37:d7:1a: 72:9a:47:bb:2d:da:d3:82:47:28:1e:85:e6:42:ad: 4a:29:31:ee:17:df:52:b3:db:9c:12:c7:de:d7:55: 02:c1:83:46:b5:c5:9c:0c:03:7c:d5:8c:5d:82:f9: fb:cd:b9:e9:e3:95:73:89:3c:1c:01:e4:a8:3d:cd: 89:2d:58:56:5f:67:1c:cc:83:6b:36:2c:bb:31:95: 44:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:76:25:E9:1C:3B:B6:52:E3:B2:24:B8:FE:A7:FE:AC:78:47:D5 X509v3 Authority Key Identifier: keyid:03:09:16:69:7C:C7:7A:1A:87:6E:48:65:BE:02:F5:5A:8E:FF:9B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/030916697CC77A1A876E4865BE02F55A8EFF9BF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUyasNneUmSqxDJupdmyswmyKRtCGdKtvkP851HxydC/1/3139312e33372e35392e302f32342d3234203d3e20323633333437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.37.59.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ad:e8:04:1d:8b:08:58:8d:47:07:43:66:f2:18:e8:ec:d2: ab:11:f7:2b:9d:c6:6f:c0:ac:04:e5:b5:ec:b1:99:6a:5c:49: 0c:cb:9f:83:dc:ab:7e:d7:0a:88:5b:79:fa:cb:8f:c9:4e:a0: 0f:f4:0b:62:b8:24:fc:51:82:46:24:f2:1c:a6:0f:6c:7e:e6: de:16:8d:04:1f:f9:c9:26:fd:c2:48:09:15:a6:87:89:0d:91: 3b:0e:04:74:13:9d:02:1b:fd:86:b4:53:01:ee:d8:96:0c:05: e6:c4:2f:37:e3:88:6f:fb:a9:cd:80:77:fd:0a:b6:28:7e:b5: 89:8c:f5:d9:a1:c1:41:a0:4c:3c:9b:ec:f8:1a:5c:2d:37:ac: 00:a0:c5:5f:0f:4c:ae:d4:82:09:9e:76:f9:a8:58:81:55:a0: c7:0b:c4:80:cf:4f:e2:7a:8d:3a:3b:cf:bc:91:73:3e:36:cf: 0c:98:f4:96:49:2e:7a:15:f5:6b:48:8c:03:d0:36:4a:eb:ad: f2:f1:94:73:06:62:29:93:1f:d8:d5:20:b4:6f:6d:22:be:1e: 86:90:5c:6b:5d:af:91:87:26:b1:28:68:98:b2:b7:a1:63:41: 2f:3c:c7:d6:15:b1:5e:48:35:64:bc:d8:9a:78:9d:a8:79:b8: 8e:68:0f:7b -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIUZ9FNlo2TBPG0/sQu9W+uu8Srpi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMwOTE2Njk3Q0M3N0ExQTg3NkU0ODY1QkUwMkY1NUE4 RUZGOUJGMjAeFw0yNjA5MTEyMTI2MDhaFw0yNzA5MTAyMTMxMDhaMDMxMTAvBgNV BAMTKDJEOEQ3NjI1RTkxQzNCQjY1MkUzQjIyNEI4RkVBN0ZFQUM3ODQ3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0rEYlhrsY6dWGnZgw5GYqu66p Rv2MBdM6ZFz28pVlWhXtTiamYdEfR3i9GDL0xsMWH7FBAgrdDUURnTccTXF6ReAf FS2vxIULsptmPnR5r0udXT7PN/Gk6CJpXqHZ4Bk+c0GgABY/QgX4akTOftAtq6L4 yjQ5VRgIEcyyoczq7BQoWrPDz9zx0ctDcettQ67MTfBI5PPhgGObZOgKvB59Ng6q +fhmfq6kFaU/ZW6vmTfXGnKaR7st2tOCRygeheZCrUopMe4X31Kz25wSx97XVQLB g0a1xZwMA3zVjF2C+fvNuenjlXOJPBwB5Kg9zYktWFZfZxzMg2s2LLsxlUQlAgMB AAGjggJPMIICSzAdBgNVHQ4EFgQULY12JekcO7ZS47IkuP6n/qx4R9UwHwYDVR0j BBgwFoAUAwkWaXzHehqHbkhlvgL1Wo7/m/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOGtVeWFzTm5lVW1TcXhESnVwZG15c3dteUtSdENHZEt0dmtQODUxSHh5 ZEMvMS8wMzA5MTY2OTdDQzc3QTFBODc2RTQ4NjVCRTAyRjU1QThFRkY5QkYyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAzMDkxNjY5N0NDNzdBMUE4 NzZFNDg2NUJFMDJGNTVBOEVGRjlCRjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzhrVXlhc05uZVVtU3F4REp1cGRteXN3bXlLUnRDR2RLdHZrUDg1MUh4eWRDLzEv MzEzOTMxMmUzMzM3MmUzNTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz MzMzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQAvyU7MA0GCSqGSIb3DQEBCwUAA4IBAQBFregEHYsI WI1HB0Nm8hjo7NKrEfcrncZvwKwE5bXssZlqXEkMy5+D3Kt+1wqIW3n6y4/JTqAP 9AtiuCT8UYJGJPIcpg9sfubeFo0EH/nJJv3CSAkVpoeJDZE7DgR0E50CG/2GtFMB 7tiWDAXmxC8344hv+6nNgHf9CrYofrWJjPXZocFBoEw8m+z4GlwtN6wAoMVfD0yu 1IIJnnb5qFiBVaDHC8SAz0/ieo06O8+8kXM+Ns8MmPSWSS56FfVrSIwD0DZK663y 8ZRzBmIpkx/Y1SC0b20ivh6GkFxrXa+RhyaxKGiYsrehY0EvPMfWFbFeSDVkvNia eJ2oebiOaA97 -----END CERTIFICATE-----Generated at Sat Oct 31 06:24:53 2026 by rpki-client