Error: rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa File: 3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa (raw, json) Hash identifier: Qd3ujbD8SZAH0+ymWaiexWyAOFxOD/i05ECfJ72w25Y= Subject key identifier: 9F:F2:BC:AF:F1:A5:88:EC:CB:01:05:34:6D:2F:42:DB:BF:D1:56:E3 Certificate issuer: /CN=605F3702CE23BBC04859766117DBC4F04EC8F430 Certificate serial: 092336DCCDF158BD5C6BC7C363CF610F9FA97F32 Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer Subject info access: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa Signing time: Mon 21 Sep 2026 19:48:51 +0000 ROA not before: Mon 21 Sep 2026 19:43:51 +0000 ROA not after: Mon 20 Sep 2027 19:48:51 +0000 asID: 263880 IP address blocks: 177.92.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 15 Oct 2026 17:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:23:36:dc:cd:f1:58:bd:5c:6b:c7:c3:63:cf:61:0f:9f:a9:7f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430 Validity Not Before: Sep 21 19:43:51 2026 GMT Not After : Sep 20 19:48:51 2027 GMT Subject: CN=9FF2BCAFF1A588ECCB0105346D2F42DBBFD156E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:ad:6f:04:1f:50:6e:0b:8c:0b:41:7b:cc: 28:05:d8:6f:72:e4:36:7b:41:d6:cf:23:72:09:0c: 52:33:61:63:d4:ff:8d:fa:6e:29:d7:8b:f6:ad:ce: d0:3c:52:fe:8d:a2:9b:87:75:0b:54:88:27:86:67: 9a:27:ef:39:1b:b6:16:89:ed:23:28:1a:f6:87:1a: db:60:b1:44:fc:c8:fc:23:51:58:6b:e5:64:9c:7d: 91:02:47:72:7d:6c:9d:bf:95:64:aa:23:ef:a2:da: 66:c5:0d:0c:08:8d:f3:20:bf:70:9f:26:58:18:17: d4:14:b3:a2:47:d5:4c:9d:a8:04:a1:1a:e1:91:37: ae:58:6c:ce:39:2a:b3:a4:01:b2:af:a3:2c:b8:e7: cf:22:8f:b2:bb:a9:66:82:47:85:05:54:16:cf:31: 51:e5:57:9d:2e:a0:9f:c0:b1:27:d7:0a:5b:41:6f: 43:56:ce:5e:04:5a:e6:13:1c:7b:0e:37:ec:17:f4: 8b:e4:a3:ce:99:30:e6:f0:ff:10:4d:07:25:9c:22: 0f:4c:a4:74:03:d3:0f:e6:12:65:30:43:c1:a1:20: 6e:ce:f4:c3:e2:1d:fb:55:da:03:40:5d:d0:5b:26: 3a:ce:bb:6f:d2:07:dd:02:1b:a3:bf:94:81:97:25: 27:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F2:BC:AF:F1:A5:88:EC:CB:01:05:34:6D:2F:42:DB:BF:D1:56:E3 X509v3 Authority Key Identifier: keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3137372e39322e3135322e302f32332d3234203d3e20323633383830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.92.152.0/23 Signature Algorithm: sha256WithRSAEncryption 24:de:9a:2d:32:6e:fd:c5:76:8d:7e:95:cc:06:aa:33:cc:a7: f8:69:b2:18:9d:5a:f4:e1:15:07:7c:b4:9a:5d:a8:cd:5d:a5: 9c:43:48:33:a5:96:51:8a:d3:2f:e5:25:38:a9:8b:8d:5b:91: a5:f0:39:ad:8d:42:76:78:9a:3b:9d:69:3d:83:fc:1a:8c:6c: 2f:c1:83:e0:2e:3e:92:1c:55:2f:25:80:f1:e0:f5:f6:a5:44: 59:99:0e:41:cb:97:6f:ce:74:60:00:87:86:12:fd:ea:4d:f7: b4:fc:7b:d0:cf:f8:7b:b4:e0:e4:20:5e:3f:dd:cb:f9:1e:f9: ca:9d:4a:1e:fe:33:86:77:e0:a0:16:67:7d:7a:f6:fe:ed:d1: 97:5d:d4:ec:1a:6b:2c:0b:dc:c6:71:03:a4:30:b2:d6:70:c0: de:40:06:06:4e:ec:5c:99:73:9e:8d:45:ef:99:9d:ad:2f:19: fe:15:3c:58:aa:96:35:47:89:6e:7f:1d:8d:e9:89:88:d0:56: ec:55:5b:7b:97:0f:a8:72:eb:13:8d:8f:9d:3e:79:16:02:04: a7:0a:be:b9:0a:25:b4:08:5f:c8:18:f6:93:2d:9b:8d:f8:fa: b1:9f:f6:df:0d:2e:2d:2c:dd:06:e5:f7:fe:4d:ca:a4:6b:2d: 05:69:a8:0b -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIUCSM23M3xWL1ca8fDY89hD5+pfzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1RjM3MDJDRTIzQkJDMDQ4NTk3NjYxMTdEQkM0RjA0 RUM4RjQzMDAeFw0yNjA5MjExOTQzNTFaFw0yNzA5MjAxOTQ4NTFaMDMxMTAvBgNV BAMTKDlGRjJCQ0FGRjFBNTg4RUNDQjAxMDUzNDZEMkY0MkRCQkZEMTU2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCmK1vBB9QbguMC0F7zCgF2G9y 5DZ7QdbPI3IJDFIzYWPU/436binXi/atztA8Uv6NopuHdQtUiCeGZ5on7zkbthaJ 7SMoGvaHGttgsUT8yPwjUVhr5WScfZECR3J9bJ2/lWSqI++i2mbFDQwIjfMgv3Cf JlgYF9QUs6JH1UydqAShGuGRN65YbM45KrOkAbKvoyy4588ij7K7qWaCR4UFVBbP MVHlV50uoJ/AsSfXCltBb0NWzl4EWuYTHHsON+wX9Ivko86ZMObw/xBNByWcIg9M pHQD0w/mEmUwQ8GhIG7O9MPiHftV2gNAXdBbJjrOu2/SB90CG6O/lIGXJSf9AgMB AAGjggJRMIICTTAdBgNVHQ4EFgQUn/K8r/GliOzLAQU0bS9C27/RVuMwHwYDVR0j BBgwFoAUYF83As4ju8BIWXZhF9vE8E7I9DAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vRDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhK dkovMS82MDVGMzcwMkNFMjNCQkMwNDg1OTc2NjExN0RCQzRGMDRFQzhGNDMwLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNUYzNzAyQ0UyM0JCQzA0 ODU5NzY2MTE3REJDNEYwNEVDOEY0MzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0Q5TERCaUN2OVVoTmRDb0NnYk5OVGRmTll5cG1YNEIzOUJwY2dYUTloSnZKLzEv MzEzNzM3MmUzOTMyMmUzMTM1MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2 MzMzODM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGxXJgwDQYJKoZIhvcNAQELBQADggEBACTemi0y bv3Fdo1+lcwGqjPMp/hpshidWvThFQd8tJpdqM1dpZxDSDOlllGK0y/lJTipi41b kaXwOa2NQnZ4mjudaT2D/BqMbC/Bg+AuPpIcVS8lgPHg9falRFmZDkHLl2/OdGAA h4YS/epN97T8e9DP+Hu04OQgXj/dy/ke+cqdSh7+M4Z34KAWZ3169v7t0Zdd1Owa aywL3MZxA6QwstZwwN5ABgZO7FyZc56NRe+Zna0vGf4VPFiqljVHiW5/HY3piYjQ VuxVW3uXD6hy6xONj50+eRYCBKcKvrkKJbQIX8gY9pMtm434+rGf9t8NLi0s3Qbl 9/5NyqRrLQVpqAs= -----END CERTIFICATE-----Generated at Thu Oct 15 00:51:41 2026 by rpki-client