Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Zp9FPNDMleydR7DTlfIYBFjEPJxlsN/0lD2bUYZlxt4=
Subject key identifier:   77:0D:BE:B7:7D:38:57:00:B6:62:15:C1:B6:9C:1D:E8:7A:62:E5:05
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3F394338EDCEDCF7A25A669EFA385C9625DA2BC0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:05 +0000
ROA not before:           Wed 29 Sep 2021 23:56:05 +0000
ROA not after:            Fri 30 Sep 2022 00:01:05 +0000
asID:                     17451
IP address blocks:        182.253.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:39:43:38:ed:ce:dc:f7:a2:5a:66:9e:fa:38:5c:96:25:da:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:05 2021 GMT
            Not After : Sep 30 00:01:05 2022 GMT
        Subject: CN=3082010A0282010100BFDA285FC583BB205DCED5B46E4ED5E0097B67DAF420521F013F240084785D5F5D1CA5352A91C5B971D6B9145563E53846F287A23099948C9AE4A223171E986F65336A65FEF3382CAE677AA231A3FD2EDCF906352C3021D0F865040AD24437129B16A8747491218F11DCA4525204DE7E9B8E738C527B34CD3FE68D4FABF38DC70571A6B8F00866CFE0DC11B9F298115B23B3FD982E577497311074001227FEB96E0C363F4F096FB71968A1A7E48B3BBFB92BF027853315EA1F277664B574723544F80EDB3D7CF2D16129DA6D4D249E643541019398C312FEE3796CEA8D2DDD49EDCCEF5B18C08FA1B1346B344576F60A4A5EE3B5FCC75415CA170CB9833014690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:28:5f:c5:83:bb:20:5d:ce:d5:b4:6e:4e:
                    d5:e0:09:7b:67:da:f4:20:52:1f:01:3f:24:00:84:
                    78:5d:5f:5d:1c:a5:35:2a:91:c5:b9:71:d6:b9:14:
                    55:63:e5:38:46:f2:87:a2:30:99:94:8c:9a:e4:a2:
                    23:17:1e:98:6f:65:33:6a:65:fe:f3:38:2c:ae:67:
                    7a:a2:31:a3:fd:2e:dc:f9:06:35:2c:30:21:d0:f8:
                    65:04:0a:d2:44:37:12:9b:16:a8:74:74:91:21:8f:
                    11:dc:a4:52:52:04:de:7e:9b:8e:73:8c:52:7b:34:
                    cd:3f:e6:8d:4f:ab:f3:8d:c7:05:71:a6:b8:f0:08:
                    66:cf:e0:dc:11:b9:f2:98:11:5b:23:b3:fd:98:2e:
                    57:74:97:31:10:74:00:12:27:fe:b9:6e:0c:36:3f:
                    4f:09:6f:b7:19:68:a1:a7:e4:8b:3b:bf:b9:2b:f0:
                    27:85:33:15:ea:1f:27:76:64:b5:74:72:35:44:f8:
                    0e:db:3d:7c:f2:d1:61:29:da:6d:4d:24:9e:64:35:
                    41:01:93:98:c3:12:fe:e3:79:6c:ea:8d:2d:dd:49:
                    ed:cc:ef:5b:18:c0:8f:a1:b1:34:6b:34:45:76:f6:
                    0a:4a:5e:e3:b5:fc:c7:54:15:ca:17:0c:b9:83:30:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0D:BE:B7:7D:38:57:00:B6:62:15:C1:B6:9C:1D:E8:7A:62:E5:05
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:50:f2:d8:c8:30:e3:ad:82:9d:19:26:c2:3c:78:0e:b2:da:
         4b:5f:e5:96:f1:f8:a8:22:01:87:7c:21:3f:65:b2:19:3e:a2:
         b8:8e:4a:46:41:69:42:4e:08:61:3e:9e:17:10:b3:b5:7e:5d:
         06:9c:02:df:8a:7c:ec:ce:4c:dc:62:d3:55:36:16:03:0a:74:
         25:46:16:f5:b6:12:f6:a4:6a:e7:37:34:d6:91:ba:91:c8:7f:
         66:5d:aa:da:66:a5:7a:2f:8e:7a:9a:ac:f7:f9:ed:5f:65:b4:
         05:ff:cd:b0:04:77:7d:4c:c4:fb:5d:c4:a7:ff:5f:22:cb:c4:
         fa:53:8f:93:41:64:fc:7e:02:f4:34:bc:e8:bf:8b:54:ad:62:
         c8:00:0f:c3:a4:6e:4d:5c:a9:8c:e5:75:16:91:d1:82:db:2b:
         97:f5:c3:33:8a:4e:3a:1d:c9:cc:c9:e1:39:f9:b4:cd:e5:51:
         d3:08:01:ef:30:69:c1:00:63:2b:59:c8:7e:85:d6:ed:b0:5a:
         9c:6b:13:d3:30:85:e3:43:8c:06:76:0b:9f:93:8e:c3:0d:70:
         bf:86:dc:d6:52:ca:fe:98:89:17:f3:fe:1e:2d:1b:af:7a:c3:
         d3:b9:98:21:f6:09:d0:43:f4:77:99:37:47:2b:3c:33:27:d4:
         3d:d6:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----