Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ufdbSDZeLBHWsrQ8GPkM/fs+5pKpMCbM7Y9vxwTpiZM=
Subject key identifier:   47:6F:83:C4:2F:03:CA:A1:43:EE:FD:59:C6:E8:13:64:B1:C1:AC:73
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       616F43EE16B74AACB9472EBD4881B2E0471F4393
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        182.253.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6f:43:ee:16:b7:4a:ac:b9:47:2e:bd:48:81:b2:e0:47:1f:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:b4:48:41:69:89:b7:92:5a:d2:aa:78:03:
                    65:c9:eb:d6:d4:ef:63:21:24:0f:fc:08:d2:a1:8d:
                    40:f3:16:8f:28:7a:0f:51:d9:44:8f:9a:e4:36:6e:
                    af:44:bf:74:e2:b4:d4:da:bc:f7:6d:84:a4:b1:55:
                    2b:55:fa:dc:c3:c7:e1:ba:ef:cb:99:5c:71:30:3b:
                    7d:61:7f:36:c8:89:53:7d:d4:3d:95:93:18:90:ce:
                    c8:45:8c:2b:9f:12:f1:85:b1:48:9b:c8:bd:25:74:
                    19:98:53:22:79:96:0b:af:af:9f:be:5c:3e:37:b4:
                    75:e9:53:16:b7:3f:1b:cd:59:3c:cf:8d:4c:6b:0f:
                    01:01:bf:66:39:d7:0c:d9:75:e7:0b:63:7f:cc:9e:
                    5e:a2:10:49:7a:17:d3:34:1c:01:9a:e4:f3:e9:66:
                    c3:a3:33:63:98:59:a2:c4:79:a6:1d:eb:8d:db:cd:
                    64:af:29:c5:28:1b:13:19:f4:14:19:d2:2e:6c:be:
                    9d:22:91:dd:01:e7:6f:30:9c:09:ed:56:40:f0:34:
                    07:0e:f9:2e:d7:43:98:91:7f:cd:bd:66:7b:bc:98:
                    bf:ca:bd:f4:5a:1c:0e:99:cd:4b:dd:65:d0:69:e6:
                    c7:15:f5:3f:e5:5f:22:37:bf:d0:fc:ff:2d:22:62:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6F:83:C4:2F:03:CA:A1:43:EE:FD:59:C6:E8:13:64:B1:C1:AC:73
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:77:6a:e5:dc:74:00:d1:c3:21:42:c1:8e:20:ec:1e:c7:
         c2:34:68:3f:c6:e8:d0:fd:0d:18:ef:93:59:e7:9c:90:41:1b:
         f0:94:a8:bf:4a:57:f9:ea:5c:21:92:29:4c:e3:a6:39:f4:b3:
         22:89:ab:24:45:5d:73:d1:45:45:4e:3b:5a:f8:a8:37:11:19:
         58:42:2c:d6:21:8a:61:4c:9c:29:59:f8:32:2f:db:5a:0f:20:
         ec:8c:93:b5:80:2e:4c:70:94:34:59:57:b3:7e:35:52:43:04:
         95:8d:55:ec:ea:9f:d0:48:a8:30:84:8c:bc:72:ca:00:77:8d:
         4e:7c:dc:2e:e0:35:a9:0a:66:d1:56:66:3a:44:79:21:af:a6:
         df:a5:44:b6:38:b3:85:f5:5c:10:b5:63:c2:af:ba:81:6a:08:
         86:1e:76:18:30:6e:29:8c:f6:cb:1f:95:ce:7d:30:c6:b1:3c:
         6f:e1:28:67:91:fd:e7:53:a4:20:4a:7e:cd:fb:ca:dc:db:df:
         b2:b4:79:00:6b:b8:0c:b3:a3:fa:7a:8d:bc:e5:0b:6d:d3:5b:
         b5:2e:a6:a1:7f:ee:35:2c:57:7d:3d:fe:95:ca:21:ad:83:62:
         c5:e5:7b:05:7d:75:75:26:de:23:3a:ee:c4:87:e4:13:c1:df:
         db:4f:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----