Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233302e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e3233302e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          iG8L6OltAD/QOK8ButhND5mLN8HNTdu7mbwh770UIR4=
Subject key identifier:   1A:7E:46:BF:71:CA:D3:F0:DD:37:66:34:70:22:9A:B1:BD:DC:33:C9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       29C38F8628CE47FE526E0ECE8C8020112B8F7E54
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233302e302f32332d3233203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:35 +0000
ROA not before:           Wed 29 Sep 2021 23:55:35 +0000
ROA not after:            Fri 30 Sep 2022 00:00:35 +0000
asID:                     17451
IP address blocks:        182.253.230.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c3:8f:86:28:ce:47:fe:52:6e:0e:ce:8c:80:20:11:2b:8f:7e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:35 2021 GMT
            Not After : Sep 30 00:00:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:47:3b:da:3b:2a:30:97:33:89:23:0c:bf:
                    3f:4a:da:de:75:db:62:d7:32:cb:71:1d:fa:7f:81:
                    0e:64:a8:c8:4e:94:a4:e3:3c:b7:b8:98:79:46:f8:
                    a8:8d:73:24:e6:fc:95:5f:6a:14:84:b7:b2:dc:11:
                    99:9e:a3:52:6a:8f:e3:b2:18:90:8e:82:23:46:42:
                    72:f4:8f:13:e8:27:f5:ba:ee:41:ce:62:78:42:46:
                    bd:92:f8:9f:2b:8a:e5:1f:55:de:58:e5:15:d3:4d:
                    ec:d4:f0:25:64:b6:8b:33:33:fa:00:4d:19:0f:34:
                    17:4a:ea:fe:01:f2:97:a8:d2:4d:db:9c:48:66:4a:
                    85:dc:5d:77:68:a6:17:9f:e7:1a:df:7d:6f:fe:ae:
                    54:de:40:ee:e1:48:7c:a6:c5:c3:eb:94:f2:93:65:
                    64:d8:38:6a:bd:66:9f:bf:32:61:3f:82:0c:ed:d1:
                    9d:57:f3:0c:f6:0c:07:ed:e8:1d:18:b9:49:8e:52:
                    30:03:7a:a3:60:b8:e2:9d:fd:a3:f3:44:35:e8:d8:
                    eb:83:9e:ec:fd:e9:9c:f5:94:10:80:9e:a5:d2:a9:
                    59:6a:0a:46:6f:28:22:62:bd:16:18:2a:10:3c:ea:
                    eb:64:d8:2c:c9:ab:df:c4:41:98:5a:28:1c:68:e7:
                    e7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7E:46:BF:71:CA:D3:F0:DD:37:66:34:70:22:9A:B1:BD:DC:33:C9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233302e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:27:6f:b2:8e:0a:83:87:9b:4e:7c:f0:d9:48:21:dc:20:
         0b:26:83:b0:32:10:09:e1:f3:51:f4:12:78:a9:7d:a6:a7:67:
         80:09:dd:61:5f:45:81:55:95:4a:02:67:dd:3b:59:1e:2c:ee:
         5b:d1:5a:13:d5:a0:f6:9a:81:0a:be:b3:9f:7a:b5:6b:a4:34:
         0e:e5:80:d5:6f:6a:19:bc:d9:2e:85:70:61:96:4f:3f:d4:2c:
         3a:0c:83:d9:ff:41:31:10:3a:cb:d4:a2:64:c3:e1:80:e6:06:
         74:41:73:db:5d:b4:d9:06:aa:9c:b2:c4:af:d8:40:4e:1a:83:
         6c:a4:5c:03:16:a4:e3:b3:db:eb:d3:0e:d7:14:8e:f2:83:a2:
         8d:99:06:82:b7:9d:88:60:94:b0:e4:72:7a:ce:2e:d0:03:c0:
         ff:d8:eb:37:48:12:c8:44:08:c9:64:00:bb:9f:3b:27:76:f5:
         42:24:5b:94:61:f2:85:0b:ac:07:13:12:86:6e:21:1e:ec:cd:
         f8:9d:3a:46:58:0b:13:6e:1c:32:6d:45:53:ec:8a:d1:86:f8:
         b8:3a:4d:1e:1a:f2:30:fe:de:99:3c:3a:1d:ec:59:43:60:0d:
         6d:a0:c3:3b:69:48:79:a2:4a:5a:00:ac:49:89:14:f6:eb:ec:
         41:7f:db:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----