Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          rgsEGNpLvg1xKX6ye+zANZO8YLO2w4IEqdzOQXowkl4=
Subject key identifier:   CF:9A:1E:3C:03:C0:4C:D4:4B:BB:32:E3:44:04:7B:DC:A4:2F:00:8D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0B9E2884BECFF4D6A0247DADDE66CFBCB47345C5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        182.253.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9e:28:84:be:cf:f4:d6:a0:24:7d:ad:de:66:cf:bc:b4:73:45:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:b2:50:eb:cd:de:2d:49:2a:19:3c:3c:87:
                    3b:17:e3:c6:b9:85:65:7c:a6:76:95:70:e1:11:bf:
                    34:eb:e7:8b:5c:1f:c9:a6:db:b1:6c:a3:54:d7:ef:
                    59:a7:d5:38:6d:a3:7f:3e:a0:89:e9:be:6f:f6:c4:
                    57:ce:51:74:c8:77:d9:3e:2c:18:e9:3a:3d:b3:69:
                    b2:f6:ef:d5:0f:30:db:99:61:89:2f:3c:6a:c4:13:
                    06:6d:4d:92:ed:d7:48:80:4b:9e:ed:57:15:41:e3:
                    79:74:cf:95:c6:80:ff:75:a1:b4:95:a4:7c:1a:52:
                    42:50:11:a6:1a:45:a0:21:6c:7b:a1:3d:a9:dc:c9:
                    a8:f3:eb:a0:9e:1f:06:80:82:67:18:62:fa:1a:67:
                    af:bb:d2:2f:0d:2e:63:b8:dd:40:f3:46:c7:1f:68:
                    5b:c9:59:c4:6c:21:34:78:3e:5b:64:57:ac:88:02:
                    6b:57:ee:9b:d0:9d:39:17:a1:9e:89:70:e5:0f:be:
                    73:28:4a:3b:a2:1e:9f:7c:50:2c:56:4c:f1:30:4c:
                    07:bf:dd:cb:32:55:3d:3d:a1:a9:9a:9b:d4:09:14:
                    55:a9:9a:c5:22:46:9e:35:f6:61:91:48:98:a8:70:
                    e5:0c:ae:f0:55:78:04:15:ff:0a:21:d8:5e:84:6b:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:1E:3C:03:C0:4C:D4:4B:BB:32:E3:44:04:7B:DC:A4:2F:00:8D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:59:e0:79:4a:e1:90:86:bd:45:66:ba:92:46:32:47:b9:e7:
         e9:cf:88:fd:0a:8f:8c:db:9e:fe:72:b6:e7:34:2a:ea:6f:d8:
         e3:58:1a:5c:9d:c5:03:f7:69:1b:bf:cd:7b:44:19:d3:e8:25:
         57:89:12:e3:b3:19:70:3a:b2:8b:b9:fd:e2:4c:34:1f:ea:01:
         27:cd:de:17:b1:be:0b:b3:01:93:87:48:60:3c:ad:a9:9c:2e:
         36:21:cf:29:cb:73:c2:35:2a:98:25:45:d2:9e:31:ae:0c:65:
         cb:e8:c6:32:1e:05:4f:95:86:b3:9e:7f:a3:81:38:c4:8f:02:
         2f:5a:3c:a0:2b:39:8f:90:e7:58:e1:54:7d:6b:c2:13:6a:85:
         2b:a7:ba:0a:13:2f:9b:4f:85:b7:e6:7a:58:a8:db:6c:27:7e:
         ac:11:63:12:c8:bd:12:67:ad:b0:7f:ea:3f:d4:68:c8:52:13:
         f1:d9:4d:89:b8:a5:c3:f1:89:62:f3:b7:c9:7d:f2:b7:fe:f9:
         4d:64:e3:95:ad:0b:94:4e:da:73:54:b9:70:ec:21:2b:34:32:
         04:70:65:e8:77:ff:58:6c:29:8e:d3:63:96:9c:bd:37:95:05:
         a9:71:df:f5:c1:cb:08:ca:c7:75:8b:67:2f:56:43:1b:c2:bf:
         b4:a6:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----