Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          1x86PCM7FgfGS3Z+6B8mJzY3KtdkEsq7JikevQUyfvE=
Subject key identifier:   2F:A9:B7:96:33:B3:93:95:03:52:A0:94:C3:9C:76:C2:BD:6F:4C:A6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       45B4109732B9A7B980042E3BDD6EAB4AA350B03F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:27 +0000
ROA not before:           Wed 29 Sep 2021 23:55:27 +0000
ROA not after:            Fri 30 Sep 2022 00:00:27 +0000
asID:                     17451
IP address blocks:        182.253.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b4:10:97:32:b9:a7:b9:80:04:2e:3b:dd:6e:ab:4a:a3:50:b0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:27 2021 GMT
            Not After : Sep 30 00:00:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4e:5e:1d:68:75:d8:88:d1:d9:8f:51:d8:9f:
                    dd:ca:2c:39:fd:ef:85:e7:fd:fb:f5:11:55:0d:c7:
                    e4:79:b3:99:7c:ae:31:ff:f3:cc:9c:b4:46:fd:1c:
                    7f:f3:0b:a7:fa:fe:3d:28:d6:7a:a8:21:35:50:1a:
                    9d:cf:fa:d1:1c:d9:8b:2b:f5:74:f4:25:fe:c6:27:
                    f5:d5:54:d7:ae:d6:b5:25:4c:4e:16:e1:33:7e:97:
                    fc:58:20:4b:eb:be:f4:2f:29:40:39:b2:65:1d:49:
                    05:76:87:9e:58:07:cd:d6:9a:5b:a1:39:92:02:8e:
                    05:0b:c0:77:aa:c2:04:61:2f:38:3c:53:36:41:39:
                    ad:ba:30:3f:1e:92:1f:51:94:43:cd:97:18:cc:bb:
                    6f:2e:f3:0c:4c:c8:f5:31:b4:b3:77:32:48:0f:bc:
                    24:b8:2b:48:39:d4:15:63:ff:5a:65:52:ac:21:0a:
                    29:12:dc:e3:ad:37:79:51:bb:ce:f2:2a:f6:db:a2:
                    29:61:91:20:14:6d:a7:59:b5:f6:d9:d8:5e:aa:c8:
                    c0:87:69:d2:a4:03:9d:e7:40:86:88:f8:1f:20:cb:
                    82:86:9d:dc:73:2c:e7:9e:a6:84:22:52:ea:b8:2b:
                    ce:3b:19:7a:ca:29:d8:ec:3b:fb:d3:32:bf:df:92:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A9:B7:96:33:B3:93:95:03:52:A0:94:C3:9C:76:C2:BD:6F:4C:A6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:08:c0:51:ff:c8:af:53:10:3c:43:6c:8b:f3:8d:09:0e:01:
         f8:65:f4:fa:4a:17:60:75:be:38:58:7f:7e:ca:34:de:cd:76:
         de:69:96:2f:82:a1:8f:03:58:89:0e:b6:9e:27:c9:5d:e8:04:
         34:19:3a:27:30:77:12:9b:4a:e1:97:75:9d:7f:2d:53:5a:59:
         9b:c9:11:60:78:6f:7d:2c:c6:d0:03:eb:0b:34:35:6e:16:b4:
         ef:6e:0a:b2:fd:89:6f:a5:39:6a:30:a3:63:3a:25:5b:b3:b7:
         c1:ad:91:f7:ad:72:13:13:f0:87:44:de:5d:d0:87:92:17:5e:
         51:8c:7a:2e:ab:3d:92:25:93:96:8f:d4:db:e5:e5:74:ae:89:
         78:5f:f9:25:a2:ac:4e:88:a2:d0:01:b5:66:c7:b7:bd:49:ee:
         e3:ad:17:8d:59:cc:e1:7c:73:01:2c:9a:82:b1:21:47:eb:83:
         af:79:f1:4e:ca:16:d1:70:4f:1a:b7:83:0e:81:36:34:16:a6:
         28:37:6e:74:88:cd:48:cc:25:d6:59:fe:7e:61:27:8d:d1:56:
         73:05:cf:5e:e8:e8:3b:a0:45:bf:87:42:b8:d7:01:17:9f:b7:
         cd:e5:39:46:30:1d:00:81:4b:9a:b8:8a:cf:7b:ef:4f:6d:54:
         14:39:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----