Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/LCGe4oL0mnD_5uuzDspHShN-480.roa
File:                     LCGe4oL0mnD_5uuzDspHShN-480.roa (raw, json)
Hash identifier:          8uz2qCddm2Ldd1IMElVy0w05uJBzRWEFNS3N6qvwOwA=
Subject key identifier:   2C:21:9E:E2:82:F4:9A:70:FF:E6:EB:B3:0E:CA:47:4A:13:7E:E3:CD
Certificate issuer:       /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial:       022849
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/LCGe4oL0mnD_5uuzDspHShN-480.roa
Signing time:             Thu 31 Mar 2022 13:12:21 +0000
ROA not before:           Thu 31 Mar 2022 13:12:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49791
IP address blocks:        45.144.48.0/22 maxlen: 22
                          2a05:fc1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141385 (0x22849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
        Validity
            Not Before: Mar 31 13:12:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c219ee282f49a70ffe6ebb30eca474a137ee3cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:a5:0f:4c:b3:03:7e:a4:9b:ff:36:29:8f:
                    67:b8:4d:bd:d1:90:67:51:99:9b:fe:17:f9:35:c6:
                    b8:e3:55:42:ab:76:86:4d:84:92:95:e1:20:25:8b:
                    31:e9:fa:a6:2b:f8:6a:2e:d9:1b:66:d7:0a:67:70:
                    28:4e:ef:96:70:2a:ab:0f:76:4b:59:21:bc:c8:42:
                    dd:96:f5:a4:16:2b:89:cc:b2:5e:cb:5a:71:87:73:
                    64:e8:82:24:4b:62:63:a7:79:a0:f0:78:a3:00:5e:
                    aa:55:f0:55:60:83:4c:8e:e0:a9:45:6c:61:c8:40:
                    4c:d4:7b:2a:55:8c:0e:43:89:af:32:a3:65:d0:4e:
                    55:72:4f:c1:e3:53:d4:d6:9b:87:ec:bc:b4:86:58:
                    e9:32:3b:29:3e:32:16:e6:b8:14:0c:2c:c2:8f:eb:
                    54:63:fe:fa:35:9e:3f:a6:42:67:ad:0c:3d:f4:b1:
                    26:59:17:c7:de:cc:58:78:d4:6b:13:96:f7:3e:81:
                    ae:88:d4:69:02:ca:23:40:8f:63:f6:62:99:17:59:
                    0d:44:88:fe:a9:f0:f1:17:81:07:47:de:84:38:05:
                    16:84:5b:ae:39:33:17:a3:f7:21:d2:ee:35:35:0a:
                    4a:59:b3:b1:29:84:b6:8b:31:e7:c7:51:25:50:02:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:9E:E2:82:F4:9A:70:FF:E6:EB:B3:0E:CA:47:4A:13:7E:E3:CD
            X509v3 Authority Key Identifier:
                keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/LCGe4oL0mnD_5uuzDspHShN-480.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.48.0/22
                IPv6:
                  2a05:fc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:df:8c:2c:a6:02:99:08:28:94:df:53:ea:72:c3:f2:ba:31:
         a3:99:82:97:4f:0b:f7:ee:73:e5:32:8d:38:21:15:79:78:cc:
         52:7a:82:f2:83:66:2e:b2:4f:b0:2c:ab:43:68:60:c1:50:50:
         78:59:3e:17:fa:cd:84:d5:85:90:5c:e1:17:b7:5d:94:9b:c8:
         e4:34:2d:b8:49:75:f4:7b:2d:71:5d:a7:7a:29:30:c7:cf:b5:
         da:06:ec:b2:6d:66:0b:7d:74:41:90:af:3e:66:52:f4:52:6f:
         03:38:e4:61:cf:ed:19:7b:48:92:28:df:78:d2:39:a7:e0:1c:
         88:da:ec:7d:6f:29:51:a9:ad:56:ae:70:1b:5a:fc:a2:bc:a6:
         69:e0:5c:c9:45:27:4b:a9:1f:a4:18:b5:1b:50:6f:1d:b6:04:
         4f:73:70:70:4f:8f:48:59:16:11:86:1b:ad:e7:f0:9d:e0:50:
         24:68:e6:e0:0a:7a:93:a6:6d:7e:ff:59:6b:4c:82:9d:b5:d2:
         db:76:0b:e2:cf:3f:ba:b8:10:b2:79:d7:d5:8c:73:17:68:67:
         c4:15:18:42:3d:ba:18:4b:bb:b4:d1:6b:66:66:cc:17:6c:ea:
         37:9a:df:80:3c:43:3f:03:82:9d:f3:03:fe:80:b2:b7:b9:ed:
         0f:aa:2d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----