Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vvf8sXXNL9ML4eaRHJ85KgEgtpqXRz2bP/EnWWCNSC4=
Subject key identifier:   5F:B6:25:AE:8C:61:F4:92:91:13:6D:8F:AD:B6:6B:B0:2E:B6:A1:35
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6AC6A217287A8DD5FDC1D326E74F275ACDD36418
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:05 +0000
ROA not before:           Wed 29 Sep 2021 23:55:05 +0000
ROA not after:            Fri 30 Sep 2022 00:00:05 +0000
asID:                     17451
IP address blocks:        182.253.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c6:a2:17:28:7a:8d:d5:fd:c1:d3:26:e7:4f:27:5a:cd:d3:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:05 2021 GMT
            Not After : Sep 30 00:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:3a:04:25:01:ec:66:5a:d2:11:21:aa:3b:
                    db:bb:c7:30:11:11:38:6c:4e:92:38:8f:7f:74:01:
                    ab:7f:ba:cb:3e:b2:86:db:22:07:ea:37:4e:69:40:
                    cb:5c:0f:dd:77:8c:91:06:2c:d5:bc:10:1c:5a:65:
                    b0:5a:2c:e2:28:02:6b:c1:b7:99:e0:74:a3:05:9f:
                    5d:43:71:6b:bf:40:77:7f:88:9a:0d:a5:6c:8c:6c:
                    bd:20:c2:e7:da:d9:2a:ac:bc:36:91:4f:c0:61:c2:
                    01:70:19:0b:66:57:e8:cf:db:8c:d9:89:6e:0f:97:
                    e0:1b:13:7a:b6:ca:26:06:ef:5f:7a:56:d2:e4:df:
                    94:95:8e:0e:12:c2:2b:9f:7d:43:1d:39:f6:86:a9:
                    e1:3c:bd:41:ec:54:a2:de:45:57:9d:95:4e:bf:81:
                    4b:d0:4d:37:0a:fd:41:f0:73:e7:69:c8:81:aa:2d:
                    73:fc:cd:38:5b:14:66:5d:b2:71:fb:76:87:ba:00:
                    c0:8f:38:b7:ab:2c:86:5a:87:f0:1f:93:ac:36:dc:
                    48:19:5d:ce:6a:e7:a9:27:84:dd:22:cb:2b:ba:54:
                    9f:4f:03:16:8c:ab:07:38:97:e3:67:f3:84:8f:05:
                    72:4e:3a:f0:cb:48:a0:a6:a9:f3:93:7d:ff:fa:c7:
                    d7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B6:25:AE:8C:61:F4:92:91:13:6D:8F:AD:B6:6B:B0:2E:B6:A1:35
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:15:24:0a:ca:b9:dc:6e:2d:e4:59:09:33:6c:69:15:84:
         f5:17:8d:cd:89:72:18:f7:a2:c8:a6:1a:53:76:78:55:be:ee:
         a4:fb:06:9f:b1:b2:6a:6f:d5:05:ca:13:53:87:10:72:36:d5:
         b3:c8:03:ac:82:c8:b8:3c:df:5f:e3:84:2e:da:da:5c:f0:e0:
         3a:b6:d2:ed:32:fe:48:91:eb:fb:ab:92:b8:f0:65:f7:2a:0a:
         a3:fb:08:79:97:7f:72:b6:43:e3:de:80:8e:23:8e:dd:79:38:
         60:fa:0b:e4:da:69:6a:78:e4:d9:73:cc:d3:23:4d:f7:f7:72:
         1b:0c:ab:a4:42:81:b9:89:b4:8c:e6:ca:49:9d:aa:cd:9b:f7:
         e0:92:b6:28:5f:06:f3:55:54:78:8c:52:14:b3:f2:4e:9e:be:
         c3:f8:c5:a2:6f:aa:8a:8f:8a:92:0c:f2:bc:fb:22:64:ef:6a:
         a1:19:2d:9f:4b:e0:db:a3:58:24:cc:94:d8:36:4b:7b:ac:82:
         6f:5f:01:18:51:2c:e4:2c:a1:41:ae:d8:b3:93:48:21:9d:1d:
         8a:b6:71:d4:96:58:60:3c:ad:f1:da:f4:46:d5:dc:89:fd:99:
         82:96:f4:aa:40:a9:5f:a7:77:be:de:03:6f:cc:64:f1:4c:4d:
         8c:32:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----