Error: rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/50347F094780F1306423AAB9B653B66598748D6B.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa
File:                     34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa (raw, json)
Hash identifier:          lUhwgy9Xj0UELEG08mEkwuJjAKPD9k3BjFEZmkgpC54=
Subject key identifier:   CD:A2:7D:70:25:BB:E5:FB:D1:08:45:26:8F:36:0B:D1:82:D8:DB:62
Certificate issuer:       /CN=50347F094780F1306423AAB9B653B66598748D6B
Certificate serial:       0441CF81FE8C46E740B77F6750233294BC44EE33
Authority key identifier: 50:34:7F:09:47:80:F1:30:64:23:AA:B9:B6:53:B6:65:98:74:8D:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50347F094780F1306423AAB9B653B66598748D6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa
Signing time:             Wed 09 Sep 2026 18:41:50 +0000
ROA not before:           Wed 09 Sep 2026 18:36:50 +0000
ROA not after:            Wed 08 Sep 2027 18:41:50 +0000
asID:                     267201
IP address blocks:        45.230.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/50347F094780F1306423AAB9B653B66598748D6B.crl
                          rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/50347F094780F1306423AAB9B653B66598748D6B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50347F094780F1306423AAB9B653B66598748D6B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:41:cf:81:fe:8c:46:e7:40:b7:7f:67:50:23:32:94:bc:44:ee:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50347F094780F1306423AAB9B653B66598748D6B
        Validity
            Not Before: Sep  9 18:36:50 2026 GMT
            Not After : Sep  8 18:41:50 2027 GMT
        Subject: CN=CDA27D7025BBE5FBD10845268F360BD182D8DB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:c0:5f:b7:c5:f7:cd:fb:c2:17:b0:6e:a5:
                    58:e6:e8:d5:4b:7a:31:a2:80:bf:92:54:a6:f5:28:
                    12:05:2e:81:25:e8:d2:d4:89:d7:46:b5:4f:a7:7b:
                    d4:8b:6a:a5:55:3e:64:38:19:36:0f:39:7e:15:cd:
                    07:92:2d:13:1b:3b:ab:25:e9:71:4e:cc:fd:5f:2a:
                    1b:4b:13:30:65:52:58:d8:51:0c:31:fd:91:4e:fb:
                    9c:78:2f:bc:7d:ce:c1:30:49:ac:49:20:ed:ed:3e:
                    71:55:38:d0:5b:d3:b9:7c:37:a4:97:3b:de:25:fc:
                    a8:80:21:79:2d:b1:3f:1d:6a:a8:04:7a:31:07:26:
                    21:f6:08:a1:44:4e:4b:09:ff:cf:34:5c:49:52:63:
                    6f:cd:9a:b8:cc:cc:aa:c1:1f:0d:62:e5:17:31:bd:
                    61:b5:18:e2:7c:4a:df:84:d4:22:23:cf:dc:29:3f:
                    e5:ef:48:5d:b5:30:5f:c6:73:1c:ce:a8:84:9c:1b:
                    3c:68:a6:b2:b5:aa:83:9f:2f:41:8a:b9:5e:0e:f8:
                    d9:50:f1:e3:69:9e:67:4b:21:fc:54:4f:6c:53:52:
                    97:4d:99:ce:6f:05:ac:c5:56:6a:30:c9:2e:76:d6:
                    df:7a:da:d7:6e:55:cc:48:13:0f:60:b5:ca:09:0b:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A2:7D:70:25:BB:E5:FB:D1:08:45:26:8F:36:0B:D1:82:D8:DB:62
            X509v3 Authority Key Identifier:
                keyid:50:34:7F:09:47:80:F1:30:64:23:AA:B9:B6:53:B6:65:98:74:8D:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/50347F094780F1306423AAB9B653B66598748D6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50347F094780F1306423AAB9B653B66598748D6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej1Zzxt4qWJD2J4HaQegVmhtrkQfjPkXRnEXW1xGSC1h/0/34352e3233302e3136342e302f32322d3234203d3e20323637323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:40:a4:08:f7:b6:6f:c4:ee:af:80:01:ff:f3:87:50:f4:83:
         ff:28:69:61:07:30:88:64:ac:9c:ad:fa:27:73:8c:42:2b:c4:
         5e:f6:cc:62:37:0e:cf:07:74:b3:64:02:d2:b2:4d:f8:a4:15:
         8e:05:21:15:77:ef:9d:14:fa:5c:77:26:52:97:fc:7b:94:ba:
         89:61:9d:d9:ff:b8:38:03:0b:04:74:68:60:27:d6:6e:14:7f:
         35:6c:e9:ef:87:ab:e6:f2:c5:8c:f4:fc:f9:46:7d:15:df:6f:
         65:96:12:47:2e:de:5d:e9:e3:3e:b8:6b:fd:4c:85:26:d0:d9:
         88:a4:31:f4:22:6e:60:c5:07:b6:d2:5f:87:87:3e:f1:ca:b9:
         93:75:27:44:b1:a9:91:ad:f6:34:4d:d9:f0:77:4f:1b:d9:ae:
         b7:75:58:88:fa:45:94:2d:b3:92:ee:29:89:16:dc:47:67:d1:
         f0:f7:8d:6f:fc:13:a4:c6:0b:03:f6:0e:36:70:c2:8e:41:a8:
         8d:b7:d8:05:d3:6c:57:26:f6:e4:68:4d:a1:a1:85:2c:43:71:
         42:19:c8:73:e0:73:60:ef:a3:54:42:1c:4a:02:24:d5:19:e2:
         f2:48:6d:9c:6d:66:8b:89:33:52:eb:f8:c4:36:85:5b:ea:75:
         01:cd:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:03:19 2026 by rpki-client