Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          YwOZ5kFwz+Rqmism5I6fBbORVywC8i+hjVs9zDJThOQ=
Subject key identifier:   67:9E:0B:FB:92:AA:E8:F5:47:A1:00:2A:02:DC:8F:C2:42:55:60:6C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       262C6A1574D71AAE31E5DBC7850B304BC763A87D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:00 +0000
ROA not before:           Wed 29 Sep 2021 23:56:00 +0000
ROA not after:            Fri 30 Sep 2022 00:01:00 +0000
asID:                     17451
IP address blocks:        182.253.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2c:6a:15:74:d7:1a:ae:31:e5:db:c7:85:0b:30:4b:c7:63:a8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:00 2021 GMT
            Not After : Sep 30 00:01:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c3:f3:e1:e3:23:4e:e6:71:c4:53:61:2d:83:
                    8c:0f:1d:b0:f6:e8:1c:2c:bf:43:f2:6d:c6:9c:7d:
                    e0:d0:8c:8b:e2:12:9d:71:9e:ff:98:d9:ea:d2:94:
                    a7:34:1e:3c:0e:c6:fe:fc:d1:f9:f6:dd:2f:d2:81:
                    d8:93:1b:b1:89:c3:5e:71:74:43:5a:1c:92:e5:07:
                    09:12:0c:b2:ba:10:db:7f:5e:da:d3:79:ef:d8:ad:
                    79:ba:d6:1d:6f:f7:2e:9d:c6:92:49:28:95:e7:cc:
                    05:a7:b3:bd:4d:de:cf:5a:f4:de:f1:ac:5c:6b:e0:
                    62:06:97:e0:03:73:64:01:b7:5d:70:f3:b7:d0:89:
                    bf:c3:9d:7c:be:b1:50:2e:e2:51:90:d4:b5:4b:4c:
                    5f:18:34:64:c3:cc:e0:f5:9d:bb:2e:27:48:fc:a2:
                    29:b6:57:37:51:3f:56:7a:98:88:62:0e:78:6c:c6:
                    89:1f:f2:67:b7:02:0d:1b:bf:c4:fd:ad:50:e0:8c:
                    af:81:99:b2:d7:4a:a5:ce:1f:00:17:29:af:4a:24:
                    58:17:17:4d:ec:39:b4:68:8d:90:22:7b:0c:8e:e5:
                    66:50:a3:54:98:a0:0a:f8:fd:ff:91:95:19:7f:02:
                    ad:5e:22:90:b2:1c:fb:98:d0:a4:e9:6f:53:e2:82:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:0B:FB:92:AA:E8:F5:47:A1:00:2A:02:DC:8F:C2:42:55:60:6C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:fe:3c:70:1e:ab:42:3f:1a:db:0f:f8:eb:a1:04:73:1c:
         b1:9c:d3:65:9f:da:77:ef:3b:e2:45:a7:42:38:8b:90:0d:b8:
         eb:de:5a:60:fc:8c:9d:e4:7c:99:b7:04:2c:0e:7e:5b:bd:4e:
         d8:7f:f5:b1:14:7c:2b:9f:7e:5b:f7:90:9c:6e:c5:fc:93:84:
         ba:13:7a:c0:be:e9:54:21:05:00:e1:f6:f8:ac:41:fd:79:22:
         f8:0c:59:e5:55:bb:4a:f7:01:b1:db:a8:81:2c:fa:ad:39:29:
         a6:86:ea:ef:66:33:ee:b1:d3:fb:5b:d3:c1:79:c2:fc:49:d6:
         27:f8:82:05:95:56:7e:4c:74:d3:5a:7e:93:74:36:d1:09:82:
         65:9b:b5:4a:e3:56:3d:70:15:b2:46:eb:13:f6:5b:ad:94:71:
         05:6f:5c:2e:1a:85:d7:84:79:6c:46:53:ce:d5:63:26:69:ea:
         02:86:a6:ac:89:2f:25:80:3d:ac:e0:77:e6:4c:4f:22:fa:a1:
         f9:a6:b2:46:01:8b:87:3b:5f:86:4e:61:26:a9:85:c2:19:a3:
         25:2f:66:52:c5:12:a7:b6:57:40:26:99:b5:35:85:7a:14:a8:
         8b:45:55:75:64:6f:62:2a:8f:8d:90:c0:58:ae:13:dc:1a:03:
         ce:47:fe:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----