Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          EcFApyXPjlyQffUPWRNh/JW0lKc7p1iphgb3aj9TrrI=
Subject key identifier:   62:E0:8D:69:B9:05:72:D4:59:C1:A1:A5:F4:B1:50:D2:96:C3:56:A5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       165F866555F8732DB0D686799603F497140DB60C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        182.253.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5f:86:65:55:f8:73:2d:b0:d6:86:79:96:03:f4:97:14:0d:b6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8c:18:b9:db:c4:a9:71:45:9e:e3:2e:b5:a7:
                    62:18:b2:e6:20:15:e0:cf:c0:45:17:b7:7c:46:62:
                    43:ff:39:05:c5:ad:ec:cd:94:c8:6f:a6:cc:f3:ca:
                    66:c2:b0:43:ae:b5:7d:31:91:5c:94:1a:0d:d2:21:
                    c8:93:52:b1:7d:df:a6:e8:89:74:5c:24:d3:3e:db:
                    0b:9a:5c:aa:24:56:05:27:7e:f0:bd:95:a5:35:b1:
                    6e:c6:db:e1:6c:d3:29:4a:cb:e6:30:76:2e:27:2a:
                    57:f2:46:44:e8:7f:06:46:27:cc:8b:ca:40:fe:1c:
                    46:ec:c1:06:41:fb:d0:4d:7a:d2:c1:c2:a2:87:df:
                    36:0c:82:cc:af:bf:f3:a7:d6:1f:18:7b:0c:5c:1e:
                    bc:fe:86:a4:d2:39:56:4f:d5:6f:c2:cf:74:06:55:
                    42:dd:ae:8d:ec:78:3d:d8:15:89:9f:33:80:a6:50:
                    ea:a4:ee:82:c1:bc:42:1f:f1:93:ab:aa:70:e6:95:
                    cc:e3:2f:1d:b8:f4:82:b0:d8:c2:e3:03:43:5b:a8:
                    7c:2d:ac:83:d9:07:56:bb:87:67:5b:13:1d:51:90:
                    3d:31:49:24:3e:d4:6b:69:5c:74:04:a4:14:ac:81:
                    de:44:a2:93:ef:5a:aa:bf:0c:45:ce:a8:81:ab:2e:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:8D:69:B9:05:72:D4:59:C1:A1:A5:F4:B1:50:D2:96:C3:56:A5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:24:69:46:1e:9e:4b:f1:f7:86:f9:ff:6a:63:37:fb:a3:d0:
         34:ab:2e:ed:e3:6b:bc:ab:a5:af:e8:98:48:9b:e6:a6:1c:3c:
         2b:15:32:f7:eb:40:d8:96:56:d2:91:f0:ce:61:01:71:ef:d7:
         99:3e:a5:fa:a3:71:bc:f7:66:39:74:d6:cd:b6:fb:85:7f:32:
         1a:90:21:76:f1:c5:64:6e:6e:2a:6a:ae:08:41:34:58:35:82:
         3b:78:36:2d:51:bc:32:fd:b6:9b:ba:63:6e:52:f1:97:b5:4e:
         d8:f2:b9:2f:9d:38:19:f6:f6:24:59:0c:77:a8:14:67:36:c9:
         3c:e4:56:74:2d:93:df:88:5f:22:63:8c:8d:d4:37:cc:cd:5f:
         95:a6:fd:d4:be:04:99:cc:c5:c3:d4:b0:5b:ca:f2:38:7e:28:
         c3:55:4c:e4:42:2a:a3:e7:6c:f5:f7:3f:d8:10:ee:dd:16:54:
         ec:78:c4:72:c5:f9:80:f0:bb:6d:9e:6a:ee:0a:0e:86:98:50:
         0f:fc:a7:74:f9:f8:3b:f8:5f:1f:c9:27:9f:ed:8c:9d:2c:01:
         6e:1f:4a:08:63:33:94:81:d9:eb:90:7d:65:b0:10:35:05:30:
         44:26:13:5f:7e:fd:ce:07:18:b3:cd:ef:47:96:c2:23:31:81:
         5c:64:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----