Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          cjUruSPF22fbbIAQ0i48TrdXWjfyKjTnoogbpDwtPAY=
Subject key identifier:   06:8C:AE:CC:4A:B3:2B:00:02:9F:F4:4B:5E:29:0F:72:99:CF:95:75
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       17857FD501968B5FBFA5082812D9A89F91F824E2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:57 +0000
ROA not before:           Wed 29 Sep 2021 23:55:57 +0000
ROA not after:            Fri 30 Sep 2022 00:00:57 +0000
asID:                     17451
IP address blocks:        182.253.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:7f:d5:01:96:8b:5f:bf:a5:08:28:12:d9:a8:9f:91:f8:24:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:57 2021 GMT
            Not After : Sep 30 00:00:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:77:ca:f4:79:3c:4e:f7:b9:c5:fc:1e:d2:
                    03:49:8f:2f:ba:b5:b3:05:c1:3f:80:af:47:be:d7:
                    35:82:ae:d6:3c:ca:a5:55:d1:73:f3:00:fb:98:7a:
                    4c:aa:1a:f0:7a:c6:b1:d2:f9:43:84:67:19:c2:29:
                    22:9c:a6:35:de:bd:14:a3:87:7c:5c:b7:83:5e:22:
                    83:b2:d0:e4:c5:c6:9d:e3:f1:b8:82:85:8b:c7:13:
                    97:53:a8:d7:55:2d:08:c2:73:42:f3:f1:6c:8f:90:
                    07:be:a1:09:66:94:74:48:09:26:a8:5a:ad:ec:1f:
                    9e:ae:e1:fe:98:39:9a:b0:af:a0:6f:bd:82:ae:79:
                    ae:fc:84:5f:eb:ef:9b:32:46:5f:c6:f9:33:99:ab:
                    3b:ab:dd:8a:59:43:bc:85:67:35:34:38:1e:5d:7d:
                    8f:d4:71:3d:c3:e9:fa:9c:f6:db:bf:81:46:94:37:
                    b7:6f:f6:e1:ee:c7:4f:af:f3:3c:78:09:43:c5:95:
                    08:54:c5:9e:08:a3:d9:a0:c1:17:33:73:bb:ab:76:
                    fa:84:1c:ce:7b:49:7f:1e:c4:f8:d4:76:50:24:1f:
                    9b:81:5f:9b:90:a9:c3:0a:7e:93:d9:e3:2c:ba:41:
                    b7:0e:cc:be:ad:e2:df:2f:6c:16:bf:98:e4:31:ca:
                    68:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8C:AE:CC:4A:B3:2B:00:02:9F:F4:4B:5E:29:0F:72:99:CF:95:75
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:74:ea:67:46:30:f7:30:f2:1d:0d:b5:37:e4:c5:94:2b:ea:
         73:1b:e7:75:86:d0:41:6c:ef:41:a9:98:de:24:51:76:2b:b7:
         0f:c8:a6:51:c6:c2:ff:7c:ff:b2:75:14:57:c5:ac:1e:7b:43:
         d5:75:28:75:30:dc:59:e8:2a:3e:e2:2d:87:52:cf:dc:48:fe:
         ab:6b:a2:03:80:e7:a2:dc:c6:0c:2e:79:51:e1:bb:56:e7:d0:
         c2:97:f1:6d:70:65:54:37:9f:a1:da:0b:60:95:a9:0e:22:e6:
         72:ef:57:b4:e3:1b:e1:ae:24:35:c9:40:65:95:b0:aa:e1:cd:
         0c:2b:80:56:0c:5c:78:72:0e:9f:75:16:53:ed:b0:17:2b:e8:
         79:f3:67:ca:9b:ae:7f:d8:58:7e:a5:74:20:df:5b:63:81:ba:
         ff:ae:59:ab:43:01:fe:5d:77:d4:89:16:34:38:32:c6:c9:3c:
         2d:84:7e:26:61:ec:98:7d:c8:89:eb:aa:bd:e0:45:60:3c:a9:
         0c:bc:85:b4:1f:3f:8f:46:ff:55:71:76:19:8d:f1:7b:24:9c:
         fe:c7:a9:45:10:54:37:c6:84:db:75:45:d6:d8:bc:ad:bb:05:
         56:8c:ec:88:ce:33:cc:fc:cb:54:bc:eb:21:a3:a2:8f:b6:6b:
         f9:d1:25:51
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUF4V/1QGWi1+/pQgoEtmon5H4JOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTdaFw0yMjA5MzAwMDAwNTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUEzRTc3Q0FGNDc5M0M0RUY3
QjlDNUZDMUVEMjAzNDk4RjJGQkFCNUIzMDVDMTNGODBBRjQ3QkVENzM1ODJBRUQ2
M0NDQUE1NTVEMTczRjMwMEZCOTg3QTRDQUExQUYwN0FDNkIxRDJGOTQzODQ2NzE5
QzIyOTIyOUNBNjM1REVCRDE0QTM4NzdDNUNCNzgzNUUyMjgzQjJEMEU0QzVDNjlE
RTNGMUI4ODI4NThCQzcxMzk3NTNBOEQ3NTUyRDA4QzI3MzQyRjNGMTZDOEY5MDA3
QkVBMTA5NjY5NDc0NDgwOTI2QTg1QUFERUMxRjlFQUVFMUZFOTgzOTlBQjBBRkEw
NkZCRDgyQUU3OUFFRkM4NDVGRUJFRjlCMzI0NjVGQzZGOTMzOTlBQjNCQUJERDhB
NTk0M0JDODU2NzM1MzQzODFFNUQ3RDhGRDQ3MTNEQzNFOUZBOUNGNkRCQkY4MTQ2
OTQzN0I3NkZGNkUxRUVDNzRGQUZGMzNDNzgwOTQzQzU5NTA4NTRDNTlFMDhBM0Q5
QTBDMTE3MzM3M0JCQUI3NkZBODQxQ0NFN0I0OTdGMUVDNEY4RDQ3NjUwMjQxRjlC
ODE1RjlCOTBBOUMzMEE3RTkzRDlFMzJDQkE0MUI3MEVDQ0JFQURFMkRGMkY2QzE2
QkY5OEU0MzFDQTY4RkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqj53yvR5PE73ucX8HtIDSY8vurWzBcE/gK9Hvtc1gq7WPMqlVdFz
8wD7mHpMqhrwesax0vlDhGcZwikinKY13r0Uo4d8XLeDXiKDstDkxcad4/G4goWL
xxOXU6jXVS0IwnNC8/Fsj5AHvqEJZpR0SAkmqFqt7B+eruH+mDmasK+gb72Crnmu
/IRf6++bMkZfxvkzmas7q92KWUO8hWc1NDgeXX2P1HE9w+n6nPbbv4FGlDe3b/bh
7sdPr/M8eAlDxZUIVMWeCKPZoMEXM3O7q3b6hBzOe0l/HsT41HZQJB+bgV+bkKnD
Cn6T2eMsukG3Dsy+reLfL2wWv5jkMcpo/QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FAaMrsxKsysAAp/0S14pD3KZz5V1MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9bzANBgkqhkiG9w0BAQsFAAOCAQEAVnTqZ0Yw
9zDyHQ21N+TFlCvqcxvndYbQQWzvQamY3iRRdiu3D8imUcbC/3z/snUUV8WsHntD
1XUodTDcWegqPuIth1LP3Ej+q2uiA4DnotzGDC55UeG7VufQwpfxbXBlVDefodoL
YJWpDiLmcu9XtOMb4a4kNclAZZWwquHNDCuAVgxceHIOn3UWU+2wFyvoefNnypuu
f9hYfqV0IN9bY4G6/65Zq0MB/l131IkWNDgyxsk8LYR+JmHsmH3IieuqveBFYDyp
DLyFtB8/j0b/VXF2GY3xeySc/sepRRBUN8aE23VF1ti8rbsFVozsiM4zzPzLVLzr
IaOij7Zr+dElUQ==
-----END CERTIFICATE-----