Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136342e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e3136342e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          iC9r8xtVx4mVLXWsL/eo6fJpp3kl7NcIiRT/gFj2zos=
Subject key identifier:   3E:A7:DE:A3:62:C9:07:92:5B:AE:3B:6E:4A:60:51:FD:CF:69:C7:BB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1B78291709AA395E71B5C6B36B9834D0881A41E9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136342e302f32332d3233203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:54:23 +0000
ROA not before:           Tue 14 Sep 2021 05:49:23 +0000
ROA not after:            Wed 14 Sep 2022 05:54:23 +0000
asID:                     17451
IP address blocks:        182.253.164.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:78:29:17:09:aa:39:5e:71:b5:c6:b3:6b:98:34:d0:88:1a:41:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:49:23 2021 GMT
            Not After : Sep 14 05:54:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:c6:ef:d1:93:58:e3:11:21:dd:01:f5:56:
                    66:22:3d:b8:b3:a3:a6:c0:8f:72:32:4e:45:99:66:
                    34:8c:a1:1f:f7:9b:e7:c1:31:ba:50:35:35:be:58:
                    d0:bd:e6:d0:34:e2:a0:4d:52:ea:e2:e3:22:3f:ef:
                    97:b2:37:81:4e:6e:43:91:97:fb:8f:6b:d5:21:35:
                    31:b4:80:cd:c7:9d:fb:73:ce:78:29:9f:3a:ab:e9:
                    b2:72:f0:96:a9:10:7b:50:49:ea:d2:b8:a8:1e:43:
                    3f:b4:db:03:e6:64:2b:a1:d5:4d:e7:92:11:48:fe:
                    f3:f5:8a:0e:f4:4d:c1:d9:51:01:f1:93:37:8c:50:
                    12:3f:e5:21:e3:85:08:80:6e:f7:dd:55:73:4f:8b:
                    9e:0b:fd:e6:e7:a3:0a:7d:68:1a:38:43:0d:68:c0:
                    32:67:0e:ce:8c:f1:d4:26:96:fc:a5:6a:9a:cc:80:
                    db:99:a5:73:92:b2:1b:a3:f7:db:ab:47:74:cf:1d:
                    61:d5:ce:e6:d0:df:a6:3b:bb:de:48:0a:c9:5a:6a:
                    ca:d0:be:8e:07:fc:85:26:44:23:10:00:70:55:24:
                    51:3c:bd:43:57:8f:2b:34:28:c7:3d:5b:ed:ed:2e:
                    cf:8c:97:f0:14:8c:d6:fc:bd:52:38:9e:c0:1c:98:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A7:DE:A3:62:C9:07:92:5B:AE:3B:6E:4A:60:51:FD:CF:69:C7:BB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136342e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:2a:24:4b:a0:46:ed:df:79:fc:dd:3f:d4:a0:52:32:c7:b1:
         ff:f1:ea:7f:ca:ae:b9:61:ef:da:4d:de:20:e2:2a:e6:fd:2f:
         eb:1f:bc:2c:fc:16:aa:c3:e6:4a:9c:d0:86:86:c8:f7:ec:4e:
         5e:50:04:48:64:6a:82:fc:4e:1d:da:26:97:ab:18:4f:6b:bc:
         a5:d7:b4:75:53:2b:08:0f:f5:81:b1:09:c9:96:ba:c7:f2:7d:
         1a:e1:9d:b3:4a:9b:c2:21:ca:18:19:ae:ee:a6:5d:ba:23:27:
         f5:18:95:b2:dc:4a:47:df:5c:9d:f0:4d:50:f8:48:c9:e0:e6:
         f7:3c:e0:c3:f9:fc:0e:32:b8:49:68:53:9d:fe:b7:21:a2:90:
         c8:04:72:ff:2b:01:07:ae:18:16:65:b9:96:55:17:d1:54:11:
         ce:a8:4f:dc:75:61:a9:5f:1e:f8:a7:0c:aa:19:7e:f5:52:52:
         b6:15:7f:ec:b3:38:f6:09:20:d4:ee:15:2a:a7:9c:1e:75:cc:
         16:08:e1:dc:04:c1:58:6f:11:8c:7f:8d:83:c6:dc:bd:44:08:
         df:9e:4d:b6:e2:97:b9:0a:94:72:8a:3b:cf:c6:7c:24:f7:cc:
         63:50:8f:34:00:c1:df:9c:ab:d5:e1:99:73:fe:20:71:16:b1:
         ee:df:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----