Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          FTcFVwdrrwKHzuMdgG4jyg18fHkTzjcQR+rjKvRyNq0=
Subject key identifier:   2F:48:E4:ED:00:26:73:10:79:DA:28:8C:DD:DF:1E:7A:E5:D7:A7:C9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6E7C57C791B4F55F08B2CF910B416600B16458E4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        182.253.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7c:57:c7:91:b4:f5:5f:08:b2:cf:91:0b:41:66:00:b1:64:58:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:f6:dd:c3:31:40:3b:4f:d1:32:4a:35:cb:
                    51:39:be:6d:77:85:95:a2:2d:95:0a:65:eb:2d:46:
                    6e:ca:b9:80:ff:56:91:cd:87:2c:c1:49:50:a7:0d:
                    95:40:1f:9f:5a:7e:e9:a3:f9:5b:b0:91:45:04:0d:
                    2f:a5:65:e8:46:67:52:db:74:8a:b3:a1:40:f4:ef:
                    cc:22:ad:1c:5e:8f:ab:d7:cb:a1:0f:f5:8c:3f:2b:
                    3f:ba:07:3c:ee:39:4b:1b:63:45:eb:07:67:5d:2a:
                    16:3e:4e:bf:87:cd:0e:95:46:6d:a1:b2:bf:65:54:
                    3e:74:47:b6:81:bc:57:83:ff:84:0c:4c:8a:9e:58:
                    57:22:17:8a:ee:54:8a:ad:cc:08:33:aa:eb:81:41:
                    07:70:41:c8:ba:a2:a1:7e:fa:c6:ce:fa:a6:ee:d4:
                    4a:82:b1:23:1d:f2:c3:3d:9e:66:8d:19:21:ab:1a:
                    3a:ac:ee:86:50:56:06:f6:82:42:91:8e:12:4e:87:
                    cb:f1:13:0c:7c:4d:6d:0c:64:c3:de:b6:d5:20:2c:
                    3f:ca:00:b6:ea:e3:05:75:f2:da:6c:fb:ae:17:1c:
                    3e:fb:d3:a9:3a:3c:8b:27:2c:b5:07:da:56:ad:32:
                    ba:c1:20:86:14:89:c6:a5:00:ce:b9:f8:0f:b4:6b:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:48:E4:ED:00:26:73:10:79:DA:28:8C:DD:DF:1E:7A:E5:D7:A7:C9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:50:d7:0e:99:1e:da:1f:7f:98:1d:4b:9f:94:d6:95:e3:
         48:92:de:a4:bf:bb:da:5e:1b:fa:4e:09:0e:29:ef:5c:76:7f:
         19:52:c0:94:2d:a8:af:41:d7:b4:5d:fc:30:40:f6:d5:1f:29:
         ac:c8:e8:06:23:87:4a:90:75:43:88:23:a5:9c:2d:e4:50:ed:
         ea:f6:d4:0d:65:0f:cf:9a:b3:7e:a3:e8:2b:57:bb:90:b0:64:
         17:64:38:1e:a1:64:91:e3:4d:c0:9b:79:c1:f1:da:51:53:e1:
         d2:15:df:2e:27:94:76:1b:03:1c:61:9a:66:c2:f3:18:4c:56:
         b6:26:e8:20:92:fb:fb:2c:3b:bf:bd:47:7c:6a:41:fa:ae:6c:
         cb:56:22:ce:42:f4:47:05:44:69:dc:2c:54:4c:50:5b:1f:02:
         da:6f:e6:a6:57:27:6c:0f:0f:69:a3:ea:c9:c4:ce:eb:52:e5:
         e2:47:cf:77:ee:6a:aa:d1:8d:da:ac:db:06:38:25:71:12:09:
         55:6b:de:41:28:59:27:5b:67:09:26:e0:17:9b:79:f6:0b:d1:
         97:af:f6:61:ff:27:6d:77:f4:dd:b6:04:e9:fc:a0:71:76:e8:
         59:a0:ff:59:43:f8:a3:16:a8:23:05:ec:9d:05:bf:62:44:55:
         72:35:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----