Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ElaQ5NFl4ycwfZZUxUELq8a3nFjtbKR1nLwU4giUjyA=
Subject key identifier:   A0:AD:FA:7F:8B:DB:40:9D:6D:B7:C3:C0:1B:68:34:E4:52:D1:2C:8E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0ACF312368B4B0DD17D9AF2DF55BDF84B76B5FFA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:37 +0000
ROA not before:           Wed 29 Sep 2021 23:55:37 +0000
ROA not after:            Fri 30 Sep 2022 00:00:37 +0000
asID:                     17451
IP address blocks:        182.253.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cf:31:23:68:b4:b0:dd:17:d9:af:2d:f5:5b:df:84:b7:6b:5f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:37 2021 GMT
            Not After : Sep 30 00:00:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:b3:f2:f4:d7:70:90:27:15:50:5c:d4:91:
                    67:1e:a4:ea:17:7d:88:62:12:60:64:a6:6a:ee:8b:
                    3c:e6:24:9d:f4:a7:95:1b:53:0b:59:29:d2:c5:e9:
                    b3:c0:6f:f5:7a:25:1f:70:f8:16:03:e5:2a:8d:14:
                    9d:83:e9:08:59:9f:ce:39:92:a1:43:ef:82:87:64:
                    5b:91:75:c3:3d:f8:c5:ba:3a:ef:84:29:62:d8:02:
                    a8:f2:41:01:62:0f:59:d3:fe:0c:e6:92:93:b4:11:
                    6d:33:5e:a2:a2:72:9b:8e:bb:47:1b:32:3c:80:3f:
                    bc:73:ae:f9:60:91:8c:db:fe:d2:cf:84:ae:8c:ea:
                    14:b1:85:fc:9d:ac:3d:b9:13:80:8c:89:56:61:30:
                    f4:48:2b:dd:f3:ae:58:83:98:47:0e:9c:a9:1e:42:
                    07:d6:21:30:ef:e5:f7:6a:01:44:fc:fa:bc:2d:61:
                    f6:3c:ed:f9:dd:72:1d:49:61:d7:3d:0f:98:23:d2:
                    29:3d:da:f9:8a:6c:36:e7:03:49:7f:94:61:af:5c:
                    2a:1b:03:f9:be:1e:13:5a:86:4e:dd:bd:b5:d2:71:
                    7b:36:be:47:36:ba:29:ae:37:3c:5e:e2:2f:de:38:
                    c2:d9:dd:3b:0d:1b:c9:12:53:98:a8:e0:dc:6f:10:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AD:FA:7F:8B:DB:40:9D:6D:B7:C3:C0:1B:68:34:E4:52:D1:2C:8E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:20:d5:e9:29:9a:63:3c:35:61:f9:96:d3:ce:7e:6b:bc:9e:
         d6:72:33:ca:63:53:a7:09:43:53:91:8d:b6:90:1d:da:8b:f5:
         48:ed:4d:cd:4d:67:44:f8:f3:36:ed:d6:c7:51:54:de:05:ff:
         38:21:1f:4c:cf:0a:b4:3e:b1:22:5a:79:11:6d:e7:db:e2:3e:
         bc:33:10:59:39:ec:f2:f7:5b:66:b5:43:22:95:d7:f1:61:17:
         85:ef:85:16:81:01:c0:cc:a5:c1:53:d5:13:d9:55:ce:e7:5d:
         6a:c3:02:d6:cb:1b:e1:82:ee:39:84:bd:f5:e8:a5:2b:6c:75:
         0e:84:e5:ef:26:30:f9:73:9e:76:d1:88:3e:a4:c7:6a:c9:a2:
         8e:e2:87:77:05:f6:62:e6:0a:bb:a7:ae:98:1d:b4:31:a3:bd:
         cc:7f:e2:7f:11:ce:a1:3a:22:06:f3:7f:ed:33:25:b4:61:3f:
         33:71:74:f5:c9:a5:7b:af:57:8b:32:35:ff:a9:b1:e2:24:b8:
         5b:e7:0d:91:94:bd:88:92:59:15:ce:ae:96:67:63:a3:38:18:
         7d:e9:62:47:9d:c4:41:a2:08:37:04:0a:20:08:1b:8f:98:2c:
         66:1f:1f:23:8a:84:9d:6d:1f:e4:c4:c2:c4:0f:65:70:6d:99:
         20:a9:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----