Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          lPhsiX2S0JIVktmpSjf76/afJLTijl2BMiBVO3Us4AE=
Subject key identifier:   72:34:D5:BF:5C:BC:04:F8:E1:5D:AF:9B:B3:D2:1A:22:02:94:8C:39
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3E59647FF0C8733918A90BF155B4BCC522307A31
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:17 +0000
ROA not before:           Wed 29 Sep 2021 23:55:17 +0000
ROA not after:            Fri 30 Sep 2022 00:00:17 +0000
asID:                     17451
IP address blocks:        182.253.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:64:7f:f0:c8:73:39:18:a9:0b:f1:55:b4:bc:c5:22:30:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:17 2021 GMT
            Not After : Sep 30 00:00:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:98:6e:0b:3f:5f:a5:21:46:91:01:e0:ab:
                    4d:ad:ea:8c:59:4b:42:05:0c:04:82:f7:97:e1:38:
                    8e:2d:5f:23:f3:d7:c9:29:cd:2a:16:ed:1b:f1:75:
                    c2:68:ea:63:a7:31:00:fd:4c:9e:9f:2d:a1:4c:91:
                    62:09:23:fa:23:27:82:e0:00:08:7d:c5:96:1d:82:
                    d4:f3:61:43:b6:3a:3b:3c:f0:d9:37:f4:40:11:b0:
                    ee:8c:d5:24:fd:33:cc:13:5a:d7:11:e3:b9:64:da:
                    a5:65:0f:8c:00:f1:c5:29:f9:a6:a3:82:ed:46:7f:
                    b4:79:11:df:f8:cc:62:69:78:e2:82:ca:9f:f8:99:
                    08:d5:39:cc:28:f7:1a:0c:23:6c:d1:30:f7:96:d6:
                    90:82:e2:3b:6d:74:40:f8:7c:ba:be:ba:97:83:d2:
                    2a:13:6c:ae:67:53:b4:4a:8f:f7:6e:e4:b8:c6:38:
                    78:eb:63:58:78:08:cb:1d:5e:56:30:16:37:17:9d:
                    fb:f4:ea:76:d3:9d:57:4a:13:73:34:f0:dd:e0:cc:
                    92:a3:fa:fb:a0:5e:ff:c8:b6:78:e8:6e:5c:27:45:
                    bc:63:b1:70:ee:7f:f3:b4:23:b9:83:2b:3a:7c:2d:
                    22:9b:cc:9f:9b:8b:53:a9:da:07:12:69:17:b7:07:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:34:D5:BF:5C:BC:04:F8:E1:5D:AF:9B:B3:D2:1A:22:02:94:8C:39
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:64:ff:67:e9:7b:be:91:4b:a8:a8:5f:f2:46:a6:2d:06:
         31:fb:fe:0a:bc:9b:7b:e9:0d:ff:c6:99:e4:08:6a:a8:b4:98:
         0e:6f:5a:5e:7e:66:7e:c1:fb:a9:75:52:97:40:c6:12:d4:4e:
         d8:cc:30:fd:85:ae:38:64:c7:1b:d0:d8:d5:54:b6:09:9e:f7:
         44:b5:22:59:32:2f:5b:33:44:16:85:ac:85:6a:4b:e1:b6:68:
         45:f7:e6:fb:0f:c5:44:d6:99:36:2d:40:c1:0e:8e:c5:39:18:
         83:b9:4b:dc:67:26:82:4c:8b:0b:8a:78:8e:1f:b2:0b:9c:f1:
         d1:98:94:2b:76:68:92:f1:4b:d1:8d:0c:b2:6a:84:92:92:b8:
         23:0e:a4:ca:33:d8:18:c0:40:0c:d5:3f:60:37:d8:75:1d:98:
         4b:5a:72:60:a5:31:28:95:7a:5f:aa:34:9b:e5:ee:3c:bc:8f:
         c4:01:39:b8:67:68:12:6e:78:84:25:eb:b8:9d:95:88:61:d0:
         a4:88:65:6e:bd:8b:34:96:16:6d:0b:23:74:55:21:e6:81:3c:
         74:2b:cc:2d:96:d0:8f:ba:db:6c:29:46:65:03:73:f2:ff:3e:
         bd:a0:0f:61:58:4e:e7:7d:c7:de:0f:66:7c:49:1b:d7:66:c8:
         24:4e:85:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----