Error: rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
File:                     3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa (raw, json)
Hash identifier:          fo+btbQP0AHlG9z439CG7SmB607/83WEaHX8WKheLmk=
Subject key identifier:   70:40:81:25:27:D4:17:55:F3:7C:21:95:09:1C:D3:A2:0E:34:1A:FA
Certificate issuer:       /CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
Certificate serial:       1F1DE33A30DD974ABAA221355601E4B09675AABA
Authority key identifier: EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa
Signing time:             Thu 24 Sep 2026 18:22:37 +0000
ROA not before:           Thu 24 Sep 2026 18:17:37 +0000
ROA not after:            Thu 23 Sep 2027 18:22:37 +0000
asID:                     264920
IP address blocks:        179.48.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl
                          rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1d:e3:3a:30:dd:97:4a:ba:a2:21:35:56:01:e4:b0:96:75:aa:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74
        Validity
            Not Before: Sep 24 18:17:37 2026 GMT
            Not After : Sep 23 18:22:37 2027 GMT
        Subject: CN=7040812527D41755F37C2195091CD3A20E341AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:4a:dd:ee:2a:81:12:a7:dd:e7:7c:72:da:c7:
                    07:7e:94:ac:c1:0e:98:66:f6:9a:bd:b5:fb:95:e8:
                    25:8b:a6:2e:1b:61:b4:8a:8e:46:09:b7:ff:2b:5a:
                    69:09:88:54:f5:23:20:bf:1e:e0:db:3c:75:67:99:
                    3d:14:96:c8:b0:34:6f:f4:7e:e8:a7:df:e5:b2:26:
                    dc:8b:3e:d3:b3:fd:d0:c8:5b:91:94:89:8c:44:69:
                    9f:ff:c2:d3:02:a7:61:31:5f:f0:a3:ce:d6:93:c1:
                    0a:8e:32:49:2a:3b:0e:76:40:4a:7a:27:88:32:2a:
                    c1:56:e4:9a:18:52:4d:91:78:09:43:2f:9b:14:da:
                    2e:f9:3d:47:df:58:70:96:51:02:15:cb:33:72:7b:
                    ee:83:32:f4:cf:b4:55:8e:b7:a6:ea:83:63:4d:e7:
                    94:56:0a:31:ff:5c:66:3a:2f:ae:0e:0b:f3:42:0e:
                    1a:a7:da:08:01:9b:bb:c2:0e:48:d9:12:89:f9:d3:
                    76:c6:50:d9:cd:00:41:17:9c:9f:e0:54:2b:62:a6:
                    81:e9:81:93:ec:2a:f6:68:b4:60:35:f2:ed:f6:d7:
                    e2:10:cd:78:50:fc:3c:22:2c:36:0a:08:68:8f:24:
                    8d:57:f0:df:24:36:96:15:70:af:35:29:15:c1:da:
                    41:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:81:25:27:D4:17:55:F3:7C:21:95:09:1C:D3:A2:0E:34:1A:FA
            X509v3 Authority Key Identifier:
                keyid:EB:09:2E:E4:7B:CD:BF:6C:DB:F6:58:6B:F0:2A:9D:E9:90:D0:6E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB092EE47BCDBF6CDBF6586BF02A9DE990D06E74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/71n4hyruudaEtzgLbheu8dLtwQyPpt4vzs7Ubib11UQC/1/3137392e34382e3133382e302f32342d3234203d3e20323634393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:7c:33:e4:5f:e3:c6:9e:0e:93:9b:2d:e6:e0:10:13:d1:
         8f:bb:8e:2d:f8:21:8d:06:e7:27:7c:0a:df:ad:20:0b:29:6c:
         24:9a:94:58:42:8f:70:9c:c9:10:15:09:cb:95:57:27:0b:4e:
         e2:b7:9f:ba:6d:00:9f:2f:60:f2:96:c4:34:c1:49:72:82:37:
         c8:7b:73:b8:59:7e:a9:6a:cc:af:5c:ad:eb:a7:4d:b5:6e:49:
         a5:a7:9b:61:f7:98:3a:6f:cc:72:ff:16:ec:2d:bb:7c:af:57:
         cc:4d:95:12:72:2d:1d:38:94:de:08:a8:9b:b1:54:66:fe:c4:
         c3:74:4c:35:82:50:79:60:90:9a:9b:0b:78:b4:d9:5f:e5:e2:
         c9:9d:1a:4b:b3:ef:0c:ed:8b:b8:66:93:a9:c4:09:d4:2f:bb:
         b7:d2:dc:24:2e:fe:13:d9:9b:22:8b:58:9b:d4:d9:ec:ec:5a:
         1c:03:cc:08:bc:4d:6b:47:a4:93:1f:4a:96:af:9e:39:d9:52:
         f9:ba:15:ce:64:f3:ab:99:21:e1:c6:d5:bf:6f:5b:f5:83:ea:
         32:92:47:36:56:78:74:41:80:af:1b:b4:ea:c2:57:05:7e:08:
         d8:10:47:f1:12:68:33:23:0c:f6:02:72:41:06:ab:53:c6:58:
         b1:54:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:55:22 2026 by rpki-client