Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SnTCM+kMeieNV9In+GC2jRwYJI0CLgTSn8fksmNQqfw=
Subject key identifier:   62:9D:ED:F9:4B:2D:3B:BD:1E:FF:EE:21:4B:C3:76:34:6E:79:EC:40
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       21229017E4BE45B5E53605F8541367942268DA36
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:54 +0000
ROA not before:           Wed 29 Sep 2021 23:55:54 +0000
ROA not after:            Fri 30 Sep 2022 00:00:54 +0000
asID:                     17451
IP address blocks:        182.253.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:22:90:17:e4:be:45:b5:e5:36:05:f8:54:13:67:94:22:68:da:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:54 2021 GMT
            Not After : Sep 30 00:00:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:be:7d:ed:18:30:5f:89:ce:77:19:d8:d1:
                    d5:73:58:66:31:24:cc:34:35:c6:be:b5:da:eb:63:
                    f7:1e:0b:da:c2:85:7c:79:a3:2d:2b:0c:fd:bc:30:
                    a5:f4:38:bb:81:9b:62:a2:28:f4:1a:75:90:61:86:
                    2a:68:04:43:b3:b8:90:d4:92:ea:4a:db:81:b8:ab:
                    2b:e4:89:d8:b0:68:12:33:f2:68:08:1b:5c:d2:b4:
                    58:bf:e0:71:40:8a:2d:62:f9:9f:8b:8f:11:00:75:
                    24:7b:2d:46:c2:98:fc:4c:86:61:74:26:d8:b8:87:
                    05:2a:ff:26:9c:6e:3e:b1:c1:92:5f:34:20:d3:3d:
                    7a:41:18:87:b5:3d:6d:e5:c3:85:49:51:19:13:18:
                    f1:9f:64:e3:e0:35:2c:5e:47:ec:4e:64:cf:ad:fe:
                    cf:62:f1:54:7c:ab:f8:85:6f:d2:49:1e:d9:aa:69:
                    73:fd:dd:0c:99:3e:27:0f:35:9c:99:89:52:12:46:
                    05:aa:08:05:75:3d:92:69:12:d2:a8:fa:16:32:d2:
                    57:02:47:07:fc:f1:ce:c5:ac:d6:77:3f:0b:b3:97:
                    10:ac:94:38:65:24:35:5f:9f:da:45:bc:3f:07:3e:
                    31:7a:37:88:1b:61:3e:30:2a:3b:02:fc:b9:de:8d:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9D:ED:F9:4B:2D:3B:BD:1E:FF:EE:21:4B:C3:76:34:6E:79:EC:40
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7b:26:6f:30:4d:af:60:7b:5c:63:3a:eb:d7:e2:8b:5b:e5:
         c9:98:5e:f7:ef:2e:5a:27:f9:6a:33:a5:f9:e9:e1:ab:43:5c:
         ef:a5:b3:60:14:5a:3e:9f:77:d3:b6:b5:a4:8e:17:b0:46:e3:
         a3:c2:12:5d:2d:32:13:0b:d1:11:d1:58:bc:43:8b:3c:19:a4:
         68:62:12:61:a3:77:65:2f:8f:03:9d:fc:13:54:27:c7:93:53:
         e8:31:36:ab:31:ed:e1:f0:a4:1f:69:8b:be:5f:bc:37:3c:92:
         db:16:3a:da:3a:5b:98:a0:fe:97:92:fd:d0:9f:88:a6:bd:c2:
         5f:19:10:4b:ab:6d:16:00:f6:31:0f:cd:b1:b8:dc:0c:8e:5d:
         e7:c2:b7:7d:87:da:eb:f4:4a:77:19:7f:8c:ee:eb:22:fc:7a:
         5d:cf:3c:5c:19:7c:f6:a3:da:84:e1:bd:3f:e5:02:f4:08:34:
         3e:e6:32:69:c2:e7:d7:ac:8e:82:bf:00:5c:1f:6b:e2:a3:8b:
         28:de:9b:01:85:fc:9f:6b:81:ff:cf:85:19:df:f0:54:2f:b6:
         df:ff:fd:57:be:9e:d4:28:54:d8:4e:6d:ca:0a:1c:16:f5:bc:
         46:35:01:dd:cb:a5:09:63:f0:b4:c7:8e:f6:e9:cc:e7:b1:3a:
         44:3f:b5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----