Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          DqIqL7p9gy365Rm7QnBhGDnGiFu8+/MM7M8tu/rosLk=
Subject key identifier:   8F:F2:42:13:9D:26:B3:FA:9D:A6:51:8E:0D:24:61:86:8E:C2:77:7D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2F4E489B3AF42A85350179BA42E265F72D828CC6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:38 +0000
ROA not before:           Wed 29 Sep 2021 23:55:38 +0000
ROA not after:            Fri 30 Sep 2022 00:00:38 +0000
asID:                     17451
IP address blocks:        182.253.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4e:48:9b:3a:f4:2a:85:35:01:79:ba:42:e2:65:f7:2d:82:8c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:38 2021 GMT
            Not After : Sep 30 00:00:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:1c:a6:d6:51:ad:eb:0f:e7:3a:17:2a:2b:
                    9f:4c:f4:dc:58:10:82:fd:34:c4:ea:40:43:c7:8a:
                    e4:1b:dd:37:1c:d7:f6:c6:b5:9b:48:e0:e1:4c:3e:
                    a0:99:4a:67:ac:05:81:9f:48:bf:95:c0:56:4a:0f:
                    86:c3:09:a9:ff:8a:23:6b:f6:aa:17:f6:23:8b:0d:
                    6e:2e:7e:c5:55:fe:a5:0b:f1:a6:a7:90:6a:e8:f4:
                    9f:2d:ac:eb:31:bd:4b:af:72:a2:8f:b7:21:50:0a:
                    ba:f2:74:54:ea:78:27:e9:74:20:b0:e4:68:cb:9c:
                    d0:bf:19:50:a6:18:5a:73:67:8b:6d:c5:ff:23:e8:
                    e3:0e:a0:fa:ca:09:b4:73:27:fa:d5:fd:d9:55:71:
                    b4:12:a4:a2:59:12:18:0e:49:69:36:37:d5:9f:19:
                    20:91:6e:0e:18:f4:9d:80:82:06:04:8d:6b:25:9b:
                    3e:2f:d5:d4:37:77:7e:58:3a:0d:2b:67:7c:1f:a0:
                    98:50:fe:03:19:ba:68:ab:e1:84:f7:c7:2e:f3:32:
                    eb:c6:58:fa:d1:83:13:75:4e:22:e0:41:03:7e:b8:
                    fa:e6:a2:68:a1:22:17:69:3a:e6:92:0a:4b:9a:07:
                    c3:11:94:10:c8:8c:3d:f4:20:81:06:d7:ea:ad:02:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F2:42:13:9D:26:B3:FA:9D:A6:51:8E:0D:24:61:86:8E:C2:77:7D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:53:78:1f:f7:d8:42:9c:61:93:37:66:6b:da:20:04:2a:3d:
         18:fb:9b:7e:e5:b7:32:b3:e5:4a:d0:3d:48:0b:32:18:a3:4c:
         a2:46:9f:92:49:b5:ff:67:02:27:52:0b:7a:5a:a0:15:17:36:
         c9:ab:36:21:33:ea:9f:28:30:4b:d3:67:d5:b1:8a:cf:09:e2:
         94:ac:7f:8c:b4:fb:34:0c:f0:64:d0:1a:b4:e9:07:d2:e2:c5:
         d6:95:62:2c:d1:46:91:81:88:53:f5:11:c5:0b:5a:18:66:c2:
         2d:f5:c5:42:5d:87:70:7b:ca:c9:d4:a0:41:88:42:db:98:c5:
         d8:8f:9b:28:17:7b:16:4b:f8:c6:b5:81:a4:b7:f5:76:a9:2c:
         6e:11:66:1a:96:48:cc:f0:d0:37:e6:82:e4:05:78:72:e4:97:
         72:a0:9c:48:71:fe:0b:46:71:ad:09:48:50:e7:9a:4c:55:a9:
         23:ad:0a:55:9f:bc:1c:4e:e9:4a:96:39:06:9b:3f:2b:04:83:
         c5:c0:9c:e5:5a:f8:18:43:3d:14:8c:b6:c0:b6:21:73:c3:d1:
         71:ee:01:32:d8:16:20:7a:aa:e9:e3:80:85:67:b2:1f:96:ff:
         d9:5b:40:0b:b5:1d:31:10:b6:7c:8f:44:e9:46:62:e9:ef:02:
         05:9d:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----