Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          btW46yDHDugZLQIOoiEQ0NtEyv30HIN9r1kxiicKMoI=
Subject key identifier:   A7:CD:14:B4:40:49:86:AA:C1:6E:40:2E:2A:0E:46:4B:61:48:DF:F7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       328D05F1384F4A03B81CC7225E32892F1D52C210
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        182.253.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8d:05:f1:38:4f:4a:03:b8:1c:c7:22:5e:32:89:2f:1d:52:c2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:1a:61:f4:7e:4b:63:ab:04:f4:e3:60:6c:
                    bb:81:2a:3a:19:c3:a6:e1:01:9a:fd:44:ca:84:7b:
                    a7:ee:49:be:f8:9b:9e:3d:b4:84:6a:b3:dc:cc:3e:
                    05:88:9f:70:de:62:83:0f:f7:42:d9:79:e4:55:20:
                    b9:4d:e2:ac:dd:96:20:df:96:72:8c:9e:b9:5a:da:
                    ad:92:70:4c:1c:15:8b:35:71:0a:a3:20:36:9a:1b:
                    42:09:38:45:7d:ac:fa:61:2b:7f:d8:75:15:38:8e:
                    71:fb:d3:b6:3b:a5:95:c2:8e:f7:3c:b0:a3:6c:c6:
                    cc:ff:cc:e2:74:fc:1c:7c:4d:14:26:d2:26:42:e0:
                    93:f6:65:e5:33:a8:23:da:ca:82:63:d7:ce:15:f3:
                    96:50:c8:3b:17:4f:9c:87:2a:ba:04:99:70:39:48:
                    23:24:22:41:03:d8:c9:b0:1c:ec:35:1c:b1:9f:b1:
                    25:65:67:3e:da:26:5f:d2:3e:56:d1:be:16:2f:d3:
                    71:cf:18:95:12:96:7d:30:0b:08:29:de:b6:c4:6c:
                    95:33:ae:7b:dd:92:e5:e1:8d:30:5a:45:b9:fb:6d:
                    88:b4:74:c8:73:6c:ed:22:92:df:2c:0b:7e:fa:93:
                    87:0d:62:21:6c:fe:ea:bd:71:c8:ac:f7:bc:ed:1c:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:14:B4:40:49:86:AA:C1:6E:40:2E:2A:0E:46:4B:61:48:DF:F7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:32:6d:c1:2c:4a:67:56:06:d2:79:79:fc:92:7c:0b:c1:99:
         d3:ef:ea:66:c7:c9:42:ed:4c:39:0a:42:d9:11:b6:e7:3a:c6:
         13:65:12:db:d9:ee:c8:b3:97:fb:d7:be:77:28:d3:95:2d:c9:
         b6:53:a2:cf:24:19:46:10:6d:41:61:46:b7:f4:95:49:b1:d0:
         28:12:2e:c0:0a:f3:1b:71:02:ea:0c:19:70:ff:93:6d:3b:4e:
         de:56:32:4b:1a:de:f6:f4:cf:27:29:70:e5:1e:bb:23:41:06:
         c1:6d:43:b9:80:a9:e7:87:11:48:c8:8e:3f:6d:b7:d3:e4:a1:
         dc:c1:b5:85:b6:f8:48:a5:72:df:f1:b7:64:d1:49:55:d6:42:
         5c:c6:f9:a3:67:2c:e9:49:79:53:4e:66:94:8f:32:11:14:b2:
         2f:b6:bc:1b:76:c4:6c:41:3d:7c:9f:75:6c:d1:6b:c6:a8:8b:
         bd:74:66:78:b6:87:b1:7b:f2:6f:84:59:b7:22:c7:7b:5e:88:
         1d:0c:d6:0c:6d:47:ab:23:d8:7e:ef:86:6b:9b:8a:3a:e7:ea:
         9d:17:62:b5:b1:1c:0c:0d:97:d0:85:bc:26:3b:14:91:a9:7f:
         5d:5e:d9:2f:01:02:ee:5c:e0:fc:56:0b:f8:88:7a:73:bf:da:
         12:06:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----