Error: rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa File: 3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa (raw, json) Hash identifier: tkRLYdWjD7meOaRK671+/zPrYpR+Nyvb9PjhyOo5RxM= Subject key identifier: CD:8F:04:AA:4C:99:15:82:B1:44:27:2B:F6:E0:CB:76:46:B5:F8:71 Certificate issuer: /CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Certificate serial: 19CB013EF47451885C3403C72F1986C039A4F1EF Authority key identifier: 28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa Signing time: Thu 03 Sep 2026 04:00:00 +0000 ROA not before: Thu 03 Sep 2026 03:55:00 +0000 ROA not after: Thu 02 Sep 2027 04:00:00 +0000 asID: 263512 IP address blocks: 191.243.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 29 Oct 2026 05:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:01:3e:f4:74:51:88:5c:34:03:c7:2f:19:86:c0:39:a4:f1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=280DBCE26C80C869FE8BD73477199ADD10E444A2 Validity Not Before: Sep 3 03:55:00 2026 GMT Not After : Sep 2 04:00:00 2027 GMT Subject: CN=CD8F04AA4C991582B144272BF6E0CB7646B5F871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:8d:f5:59:25:83:8b:e7:a0:73:29:16:c5: 7c:de:c0:9c:19:c2:66:67:48:b6:d0:69:b3:1b:ec: cb:b0:68:c5:1c:93:54:bd:b3:4d:cb:28:0d:81:a4: 42:26:af:a2:46:bd:2d:d5:dc:6e:1b:14:22:86:80: 02:4a:e8:89:d6:13:2c:40:45:1c:29:d2:19:7b:8f: 38:ca:f0:e4:16:58:80:47:1d:75:1b:ce:6a:e7:f9: 0b:c5:b8:69:9b:8d:48:7c:f4:a3:14:51:0a:d6:df: 64:ba:f6:33:82:f8:de:13:ac:5c:19:d8:35:93:10: 84:e1:b6:e8:fb:ef:ad:16:ba:75:43:73:a7:92:0c: 58:4b:0f:33:42:c8:d4:cb:fa:40:32:ef:78:62:1a: ce:ef:39:92:79:e0:80:70:6f:b5:57:4f:d3:14:cc: 0d:a2:57:f2:8f:eb:78:b2:26:b3:a2:b2:48:fe:b6: 30:74:6e:a7:f3:6e:fa:ef:83:30:0b:cd:9a:3f:82: 12:ce:d3:41:40:8b:aa:03:b0:e1:73:1c:88:be:16: 18:ed:38:fb:4d:04:16:0e:b4:ff:2e:de:0f:0b:a4: ac:a0:cd:6e:c8:16:06:cc:fe:de:17:e2:ba:fc:46: c9:27:40:52:39:23:b7:e0:16:47:bf:16:53:fc:9f: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8F:04:AA:4C:99:15:82:B1:44:27:2B:F6:E0:CB:76:46:B5:F8:71 X509v3 Authority Key Identifier: keyid:28:0D:BC:E2:6C:80:C8:69:FE:8B:D7:34:77:19:9A:DD:10:E4:44:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/280DBCE26C80C869FE8BD73477199ADD10E444A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/1/3139312e3234332e3230342e302f32322d3232203d3e20323633353132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.243.204.0/22 Signature Algorithm: sha256WithRSAEncryption 44:fa:7a:27:1a:75:66:56:28:8a:3e:a3:da:2e:f0:52:85:47: f2:e7:e3:f1:4e:d3:d5:c4:24:1a:d3:27:1d:33:86:bb:9a:8c: 68:03:e2:68:c1:73:f1:25:5c:f2:84:3e:84:27:2a:cf:ae:af: df:4e:8c:99:72:f9:86:72:5e:71:68:81:86:9f:fc:c9:96:1d: 7a:c0:c5:72:f3:2a:84:fb:39:a9:53:46:08:f7:0d:1a:d1:b2: aa:ab:ca:fc:cf:54:86:d1:0f:10:b4:a1:a3:36:26:12:1f:b7: d5:a1:e7:cb:8c:6e:ec:a5:d5:88:21:d7:f9:6c:0c:17:37:c7: c3:96:7f:5a:17:05:5f:f5:68:e4:2e:35:9e:7c:00:8a:c5:e2: b4:39:63:91:7e:8d:cb:41:b9:e9:8a:02:d8:4b:8d:b9:fe:60: fb:e3:76:f6:9e:9c:df:bf:78:0e:a1:0d:56:9a:e0:7a:16:df: ab:40:a2:e1:90:59:a5:fa:d5:3e:84:19:5f:2f:e2:48:ce:b9: 51:ab:b6:84:2e:ef:e5:d3:f1:63:f2:5f:16:5a:05:f3:4f:26: 8b:95:ea:b5:83:60:41:66:7e:8a:05:89:ba:f1:6d:42:25:23: 1f:cb:68:63:60:f5:5a:d1:82:56:89:8b:34:a9:47:94:0b:dc: 2c:5e:d5:6f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUGcsBPvR0UYhcNAPHLxmGwDmk8e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjgwREJDRTI2QzgwQzg2OUZFOEJENzM0NzcxOTlBREQx MEU0NDRBMjAeFw0yNjA5MDMwMzU1MDBaFw0yNzA5MDIwNDAwMDBaMDMxMTAvBgNV BAMTKENEOEYwNEFBNEM5OTE1ODJCMTQ0MjcyQkY2RTBDQjc2NDZCNUY4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9Y31WSWDi+egcykWxXzewJwZ wmZnSLbQabMb7MuwaMUck1S9s03LKA2BpEImr6JGvS3V3G4bFCKGgAJK6InWEyxA RRwp0hl7jzjK8OQWWIBHHXUbzmrn+QvFuGmbjUh89KMUUQrW32S69jOC+N4TrFwZ 2DWTEIThtuj7760WunVDc6eSDFhLDzNCyNTL+kAy73hiGs7vOZJ54IBwb7VXT9MU zA2iV/KP63iyJrOiskj+tjB0bqfzbvrvgzALzZo/ghLO00FAi6oDsOFzHIi+Fhjt OPtNBBYOtP8u3g8LpKygzW7IFgbM/t4X4rr8RsknQFI5I7fgFke/FlP8nxv/AgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUzY8EqkyZFYKxRCcr9uDLdka1+HEwHwYDVR0j BBgwFoAUKA284myAyGn+i9c0dxma3RDkRKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vOWZxQmRuV1RVVVAxclpweHB2bm1iVHNLQlBFVU5qejFmU013VlU5OGZy TmQvMS8yODBEQkNFMjZDODBDODY5RkU4QkQ3MzQ3NzE5OUFERDEwRTQ0NEEyLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4MERCQ0UyNkM4MEM4NjlG RThCRDczNDc3MTk5QUREMTBFNDQ0QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv LzlmcUJkbldUVVVQMXJacHhwdm5tYlRzS0JQRVVOanoxZlNNd1ZVOThmck5kLzEv MzEzOTMxMmUzMjM0MzMyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy MzYzMzM1MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr/zzDANBgkqhkiG9w0BAQsFAAOCAQEARPp6 Jxp1ZlYoij6j2i7wUoVH8ufj8U7T1cQkGtMnHTOGu5qMaAPiaMFz8SVc8oQ+hCcq z66v306MmXL5hnJecWiBhp/8yZYdesDFcvMqhPs5qVNGCPcNGtGyqqvK/M9UhtEP ELShozYmEh+31aHny4xu7KXViCHX+WwMFzfHw5Z/WhcFX/Vo5C41nnwAisXitDlj kX6Ny0G56YoC2EuNuf5g++N29p6c3794DqENVprgehbfq0Ci4ZBZpfrVPoQZXy/i SM65Uau2hC7v5dPxY/JfFloF808mi5XqtYNgQWZ+igWJuvFtQiUjH8toY2D1WtGC VomLNKlHlAvcLF7Vbw== -----END CERTIFICATE-----Generated at Wed Oct 28 12:52:23 2026 by rpki-client