Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          OqkvKDn2xXUr7Rf/KPB/QHYNA9B2n66e1q4qN88n8Qo=
Subject key identifier:   E5:57:41:5F:8F:83:89:C0:C2:53:A3:41:16:C6:6E:E2:E6:C0:71:6A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       65F035A552C84F2FA58F951BB34EC40F9A6BA432
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        202.169.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f0:35:a5:52:c8:4f:2f:a5:8f:95:1b:b3:4e:c4:0f:9a:6b:a4:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ca:87:94:18:d7:0f:65:d1:a1:7d:86:13:b0:
                    25:24:90:27:fd:87:60:55:b3:70:0e:0b:3b:e4:e1:
                    72:b1:07:f5:71:24:63:07:0e:fb:8d:41:f6:1e:10:
                    84:75:77:2b:4b:b5:12:c9:f4:d7:0d:cf:df:f8:7e:
                    6e:5b:50:a8:06:1f:26:19:5c:38:58:e7:2b:b9:07:
                    fc:46:b3:68:6a:c5:7e:ce:4b:30:2d:08:61:46:31:
                    71:e7:a2:f9:57:85:c2:31:56:23:e5:22:14:ba:10:
                    43:06:aa:4d:d8:aa:56:c9:41:45:a0:3f:68:3a:4d:
                    41:dd:0a:bb:6e:ae:9a:e6:ff:60:ce:3d:82:fd:08:
                    1e:67:ac:f9:77:2a:7d:80:7d:5e:d2:f6:10:b1:a8:
                    c0:1b:a5:de:29:81:9f:f8:b1:74:89:96:dc:55:8c:
                    14:a0:7d:89:21:87:cf:bf:63:af:0f:4b:c8:68:83:
                    94:1a:ad:b1:f2:27:b5:be:96:5d:4b:21:d8:d4:3c:
                    6f:37:2a:4a:ee:b5:d1:eb:cc:26:a8:ad:b5:57:8f:
                    a1:04:c7:ae:5c:6d:65:1c:5c:6f:5c:12:6c:7b:74:
                    ba:b3:13:5c:a9:e3:c2:56:cc:62:40:89:04:9e:0b:
                    9e:c2:2a:5f:27:f3:5b:7e:9e:f9:09:0e:89:01:4f:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:57:41:5F:8F:83:89:C0:C2:53:A3:41:16:C6:6E:E2:E6:C0:71:6A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:40:e7:89:98:af:63:9c:26:d9:b3:44:4e:51:5d:18:1d:
         7a:a9:8c:a1:31:8d:1c:85:23:e8:76:c1:c9:be:fc:4a:f4:52:
         89:a9:1b:c1:80:34:2d:1c:a3:fa:ce:3f:b6:6e:da:f4:1f:dc:
         22:11:87:9b:d2:53:8c:65:f3:7d:2a:42:f4:f3:26:bb:25:19:
         a0:67:41:2b:cf:18:0e:e3:5d:1d:27:6e:91:58:4a:fb:90:d2:
         8e:38:55:38:80:88:c1:04:1d:40:79:03:0b:5f:9d:fd:42:d8:
         d6:59:b7:90:97:20:aa:fa:b6:77:c4:c8:f0:f4:b2:06:33:f2:
         5c:27:9e:cb:c0:61:2e:fb:27:c5:ac:13:dd:c1:15:21:3d:1e:
         c4:f4:2d:ec:13:b7:c1:01:ff:e6:dc:fb:04:60:c2:5e:9b:b0:
         07:b7:1f:77:7e:1e:e3:ed:c5:4f:c2:c7:64:aa:7a:7a:99:af:
         60:25:b5:39:39:f6:9a:78:f3:6d:cc:1f:ed:0b:8a:0f:e7:a8:
         f1:0e:89:43:fb:2d:bb:88:18:26:9f:3c:b4:2f:00:fb:56:a9:
         5b:8b:f2:5f:ef:b8:12:fb:72:c9:b2:83:1b:bb:0b:e5:1c:1b:
         ca:b5:6c:ba:52:96:31:6f:4f:58:2a:f1:55:45:35:b5:45:e3:
         a0:78:eb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----