Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          2Ln+riDr57Yk9jvPYUG4Z096HuLfvFn0nyP8boVKeLA=
Subject key identifier:   8B:BD:73:2A:DA:75:F9:E5:16:20:7B:36:CC:5C:FC:C6:90:8D:14:F7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2862B1B96A7DACA7BB70CC454FC047E52CD69379
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:20 +0000
ROA not before:           Wed 29 Sep 2021 23:56:20 +0000
ROA not after:            Fri 30 Sep 2022 00:01:20 +0000
asID:                     17451
IP address blocks:        182.253.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:62:b1:b9:6a:7d:ac:a7:bb:70:cc:45:4f:c0:47:e5:2c:d6:93:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:20 2021 GMT
            Not After : Sep 30 00:01:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:4f:19:8d:5a:53:a9:21:20:40:e3:87:e6:
                    f8:0f:cd:9f:e9:e8:14:7c:38:61:0b:6d:0a:7d:bb:
                    c3:1a:a7:2e:33:7a:a6:3e:11:05:06:c7:6f:a8:8d:
                    45:78:45:a2:6f:fa:0b:f8:97:d0:68:33:4d:c2:30:
                    39:1c:26:91:d4:a4:d2:1d:92:d7:25:c2:72:9b:a2:
                    a9:a6:34:6c:0e:91:aa:66:d6:57:d8:30:ed:33:79:
                    72:58:22:94:60:3c:b8:b3:8b:d2:1f:da:03:45:99:
                    6b:d0:68:4b:d3:c2:e0:4f:d8:c2:48:2c:af:04:b2:
                    3d:7b:7e:93:34:c7:67:1e:65:a9:1d:b6:9e:c0:fa:
                    ed:6f:e0:eb:b3:4f:ec:b8:5c:e8:d6:cd:de:be:1e:
                    46:72:dc:e1:08:1e:6d:e2:9b:fe:79:d6:38:1a:93:
                    c1:2a:e7:23:d9:28:66:5f:73:f7:67:07:2b:46:ac:
                    99:3a:50:88:57:96:73:58:50:81:9b:39:6b:7e:f7:
                    09:38:95:d0:a3:50:06:57:41:b5:37:e4:f1:fc:f2:
                    ca:fc:15:53:29:7e:ab:81:3b:79:b3:cf:16:d4:81:
                    c8:bd:d6:32:9e:71:7a:a4:02:36:2b:de:90:bb:43:
                    ef:42:95:c4:9f:26:b8:e6:e1:29:08:f0:a9:26:96:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BD:73:2A:DA:75:F9:E5:16:20:7B:36:CC:5C:FC:C6:90:8D:14:F7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:56:a6:82:4b:2d:46:0b:c5:48:58:22:2c:06:a4:07:31:d8:
         f5:8a:09:49:2b:1a:07:7d:cf:da:46:5e:80:9b:26:09:3d:ea:
         e6:1a:d2:cc:d4:39:49:c8:b7:71:51:4f:36:e3:77:71:5e:37:
         a2:38:ad:ad:93:29:35:e1:79:67:64:62:8c:e3:b9:01:78:6f:
         b3:c5:12:e7:1d:3d:93:aa:8e:c0:2e:c7:71:9f:0a:bc:13:52:
         87:d1:01:f3:e3:05:bd:97:d5:83:31:54:54:cf:dd:af:5f:7c:
         13:dc:fd:6e:cd:55:59:01:07:b1:05:b3:49:aa:0d:63:fe:f5:
         31:d4:e2:b7:d8:80:85:a0:8e:eb:35:03:da:b0:70:95:d5:ee:
         73:85:79:14:90:28:f2:48:fc:bf:5d:3d:fa:36:9f:c4:10:0e:
         ec:d7:ca:8d:0a:75:a9:e4:ee:e3:86:4c:a3:99:b5:77:92:cd:
         69:a9:9e:fc:7a:86:50:04:2c:9a:6f:4a:e3:9a:aa:6f:7d:d5:
         6a:64:e3:df:ee:41:b8:9d:a3:3d:a3:38:3e:de:7d:91:d9:a3:
         20:dd:e5:b8:0e:6b:8c:9b:ec:5f:f1:75:01:94:e5:c7:81:73:
         7e:97:5e:aa:4a:71:12:2b:88:cd:63:94:cf:d3:91:f1:7c:9e:
         7c:45:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----