Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ch3g2VRmnlJqRpTRMkuqAADVM/9vquWUtpSkH+uPh2E=
Subject key identifier:   9B:65:10:A7:7E:31:D9:4B:49:F9:1F:CF:8E:0E:EF:7E:4C:11:95:33
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7DC929C955CE90F6AED164AEA26AAB55FE94CEE4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:04 +0000
ROA not before:           Wed 29 Sep 2021 23:55:04 +0000
ROA not after:            Fri 30 Sep 2022 00:00:04 +0000
asID:                     17451
IP address blocks:        182.253.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c9:29:c9:55:ce:90:f6:ae:d1:64:ae:a2:6a:ab:55:fe:94:ce:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:04 2021 GMT
            Not After : Sep 30 00:00:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:08:eb:ac:8d:a9:8c:c9:d3:cf:5d:15:a6:5a:
                    30:0d:07:d8:5c:00:c3:81:1f:28:50:fa:9e:91:55:
                    f4:9d:6a:73:62:d3:c5:56:4f:86:aa:42:e4:96:dc:
                    39:df:54:70:03:40:2b:fa:33:65:9b:e0:b4:f0:a7:
                    2f:be:45:e5:1c:90:61:8e:ba:44:a7:93:21:c3:da:
                    f1:82:6f:36:d9:a6:1a:2e:de:32:15:6b:fa:34:56:
                    27:e8:09:5e:55:b1:23:2b:c1:ae:ef:da:1f:70:8e:
                    4b:1f:59:b4:65:86:86:85:62:78:e9:de:6e:8f:0b:
                    1a:27:b8:97:b3:3b:55:67:c0:8b:26:bb:b4:51:46:
                    63:11:b9:2b:bf:f2:e1:4d:3a:a3:73:45:f0:b5:d4:
                    11:50:fe:a0:ff:e2:e6:a5:b3:1c:1f:7e:fc:f4:65:
                    08:9a:93:b1:29:15:27:c7:46:5f:fa:b4:3d:5e:75:
                    b5:b5:e3:19:b6:7f:64:23:49:9e:18:75:08:70:e0:
                    28:5c:e7:6d:64:de:1b:89:6b:88:15:1c:c2:76:08:
                    05:ef:da:1e:f0:30:cf:6b:02:91:a7:e6:59:69:f8:
                    aa:7b:9e:83:3b:cb:90:4c:37:70:fc:a6:e4:89:d0:
                    26:88:a2:fc:54:3f:a0:53:63:fd:61:f6:c5:65:9a:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:65:10:A7:7E:31:D9:4B:49:F9:1F:CF:8E:0E:EF:7E:4C:11:95:33
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:76:c1:7a:30:5d:24:cb:ce:13:25:13:f9:ee:5f:97:06:
         1e:d3:29:31:6c:f6:49:a3:d6:34:fd:35:8e:20:fc:44:55:da:
         df:89:a0:0c:2d:f0:6c:40:af:4b:4e:76:10:40:ea:85:08:1e:
         82:0f:b0:b3:2d:10:c0:7b:03:d6:67:09:94:b4:8f:9c:e4:39:
         af:89:7f:f7:af:cd:51:e2:5d:77:ba:ac:82:6c:d3:ba:06:31:
         a3:05:fe:66:2b:98:e1:d2:9d:7f:9d:c0:d2:ca:97:e6:a8:93:
         ce:5b:c3:86:8a:fa:d0:e8:cd:7b:87:35:3d:a7:11:f4:f4:be:
         ba:dc:74:66:e4:c2:a1:2a:97:e7:5d:c5:6c:c5:9d:76:5a:d7:
         6e:bd:f0:1e:4a:71:67:a5:db:d5:d7:8d:2b:2c:9d:37:04:87:
         01:d8:cd:b9:57:64:df:5e:94:f0:63:27:3c:37:0c:6a:ec:b3:
         d3:eb:cb:56:21:12:48:71:b0:8b:44:aa:b3:76:68:99:42:29:
         3b:ac:da:28:47:ef:17:40:8f:32:35:ab:87:84:6b:92:e2:cf:
         e6:da:cf:d5:3d:1c:69:dc:e0:33:cd:ee:8f:d8:34:cf:14:49:
         70:50:b5:64:8f:f7:d5:d1:91:f9:fa:27:85:05:17:35:96:7c:
         6b:73:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----