Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          3PG+Vs7lbcb9FOfMD34EbjgNJYZWjTcYfwOcB9LVuto=
Subject key identifier:   F7:5E:7E:FA:88:88:A4:ED:B6:35:79:19:FF:FF:3A:EF:A4:B7:D8:8F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       74A1F90C7EBCE9DC897909341A2D81F20CEEB3B7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        182.253.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a1:f9:0c:7e:bc:e9:dc:89:79:09:34:1a:2d:81:f2:0c:ee:b3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:8c:9c:2e:a9:fe:1b:ff:0d:0f:f1:1d:a5:
                    67:c5:b8:b9:10:22:f2:4e:88:f3:bf:d3:ab:63:af:
                    3d:57:9c:d3:92:86:cd:5e:86:71:b4:a6:db:86:85:
                    2b:0a:79:f4:6b:d3:61:84:88:8b:2e:49:cc:a7:b1:
                    04:39:18:66:77:46:bb:2e:fd:bf:d1:96:4c:73:bf:
                    aa:a1:5d:3e:92:b7:1b:82:b7:16:39:32:05:e7:22:
                    57:b0:49:80:df:c9:e0:7c:16:4a:f7:ee:a7:1c:fa:
                    a3:0f:b3:52:05:4a:29:50:72:c3:6a:dc:fe:11:1d:
                    a1:6c:02:c7:79:38:c1:27:4f:d2:0c:4d:d4:4c:7c:
                    8b:2b:16:7d:a4:b9:f7:fe:ab:5b:09:85:51:62:4b:
                    25:78:da:b4:7e:13:6d:9d:69:0c:72:2b:4b:f8:0f:
                    a0:57:ad:7a:b0:84:72:d0:81:6f:81:de:06:09:8b:
                    59:08:fd:a2:2a:98:78:4c:f6:63:20:ce:d0:6a:58:
                    5c:04:6e:0e:eb:82:7a:a2:2e:c9:fb:f0:40:f5:f9:
                    15:85:5c:1b:b1:e8:9b:20:62:89:88:83:c7:de:2e:
                    de:ed:5c:4a:38:9e:9e:66:4c:d1:00:d3:b1:1c:6c:
                    e2:1d:69:c6:40:7d:61:fd:42:b0:8a:c9:73:28:23:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:7E:FA:88:88:A4:ED:B6:35:79:19:FF:FF:3A:EF:A4:B7:D8:8F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:a5:25:96:1a:90:2d:bd:49:9e:16:a3:f5:4b:f6:39:ac:
         a3:9f:14:a4:90:b5:f9:1f:cc:c6:f8:7e:c3:c4:43:22:01:6a:
         01:7a:c2:1f:4a:c7:83:8c:7f:d0:fb:e9:d4:07:a1:cd:8e:81:
         56:64:ea:bb:df:91:d8:77:fa:2d:cc:1c:96:cc:46:b3:bb:da:
         eb:28:95:d1:a9:8c:17:8b:d2:c5:b8:7a:7d:5e:ae:21:a9:b2:
         24:16:19:17:5f:24:61:6d:ec:c1:ce:13:9d:99:88:81:aa:a5:
         3e:f9:61:73:78:a0:62:a3:33:06:34:8d:af:07:b4:02:bd:4f:
         2c:95:21:3b:cc:55:1d:83:b4:d3:de:54:16:64:16:6c:e1:17:
         2b:ce:40:da:42:8c:88:f0:58:e0:82:81:5e:a0:ba:fd:cc:ea:
         91:a1:30:65:09:85:85:35:96:d5:da:55:be:ef:c3:a1:f4:8d:
         dd:56:0b:b9:b0:fa:80:e9:3b:88:1f:ed:ee:5d:56:63:b9:bd:
         60:ec:8e:57:94:24:58:5e:28:db:38:b8:f4:1d:ac:3a:17:a1:
         65:b9:60:e6:a0:cc:8a:df:a3:26:48:d3:f4:6b:b2:78:1b:2a:
         94:d7:6c:f8:96:8e:ed:93:40:20:bc:3c:8c:4e:cd:b2:e6:68:
         9a:93:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----