Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          mXpF9+mmwfY8X6teoy2Cktl9Mz5KhWhOavAaAP5uYiU=
Subject key identifier:   B3:C0:E0:AA:AC:93:25:58:8D:31:D6:B1:7C:E0:04:9D:6F:B1:7C:FC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       52897C5F9B9B93B92B6A8A77033B50B8C3AED537
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230362e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:31 +0000
ROA not before:           Tue 14 Sep 2021 05:12:31 +0000
ROA not after:            Wed 14 Sep 2022 05:17:31 +0000
asID:                     17451
IP address blocks:        182.253.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:89:7c:5f:9b:9b:93:b9:2b:6a:8a:77:03:3b:50:b8:c3:ae:d5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:31 2021 GMT
            Not After : Sep 14 05:17:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ed:be:a6:68:1c:15:8c:f5:f3:aa:96:40:df:
                    08:1a:20:d4:41:85:08:ec:dd:f4:19:d0:af:66:bc:
                    22:37:e5:01:65:c9:cd:07:15:c4:4c:fa:27:de:20:
                    b1:68:00:dd:b8:17:f2:29:eb:64:78:c2:2f:89:5c:
                    ee:f1:1f:7c:2b:7f:97:86:cb:f9:3d:6d:9a:56:30:
                    bd:0a:22:06:9b:58:e7:1b:b3:57:99:0e:c6:53:ee:
                    1d:7d:5e:12:b2:e9:52:26:22:95:31:6c:52:5e:e4:
                    54:8b:5d:c8:66:2f:7b:45:e9:68:e3:5a:7e:cf:0b:
                    6d:b5:a4:36:9c:43:f8:a1:bd:17:3a:a6:5f:66:04:
                    f5:ab:d5:70:01:c8:85:68:e0:c9:49:f5:8e:53:65:
                    92:bb:9f:86:3f:1e:40:49:cb:0b:52:96:51:b0:58:
                    b4:18:dd:d9:ee:80:21:13:ee:4a:81:8f:7a:6a:15:
                    45:ca:9a:79:f8:36:70:ba:b1:88:43:6e:f9:0c:41:
                    03:f8:16:0f:60:d2:ec:91:35:9d:d1:13:4c:14:b4:
                    c3:f3:88:ec:b6:03:1e:ef:28:cb:4a:25:2a:91:0d:
                    5a:27:72:04:86:d1:d4:21:df:49:ff:ee:60:60:13:
                    16:9e:f2:bc:bd:45:7a:51:40:5f:7e:a9:4f:f2:86:
                    7c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:E0:AA:AC:93:25:58:8D:31:D6:B1:7C:E0:04:9D:6F:B1:7C:FC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e2:df:8d:c0:22:59:25:a5:e1:d0:af:09:1b:df:dd:68:0f:
         f9:f5:25:25:34:dc:0c:43:93:1d:a5:9b:7c:8e:f6:b5:f1:58:
         4d:2f:43:06:cc:43:b2:ba:fd:37:c4:c4:59:07:04:2a:35:b4:
         dc:e5:78:a3:cf:eb:9a:cb:2e:12:6e:61:47:37:9b:18:9e:41:
         54:9e:25:94:ec:8e:fd:e5:bc:e2:27:2a:56:2b:c8:e2:78:bb:
         07:51:85:a6:59:ad:c7:e9:26:b3:7a:08:72:d2:e3:b4:a1:47:
         29:3d:29:be:0c:a6:3f:78:5b:db:38:fa:52:c0:18:c7:34:a2:
         6b:ce:43:9d:99:f3:31:c7:84:a2:4f:8e:2d:b6:b3:18:26:a2:
         d5:55:4e:91:6e:00:cd:6c:aa:16:13:e3:54:d6:5d:62:7a:b8:
         dc:ac:15:be:c0:52:50:65:13:21:45:bb:92:51:92:fd:f9:31:
         d6:6b:28:34:cf:8f:5a:7a:18:c9:5a:98:31:5f:49:51:d3:96:
         e5:67:ca:68:d1:35:c8:16:b2:fe:a4:6e:a5:30:a2:d1:f6:a9:
         5b:81:f8:7d:11:2f:d3:db:7a:06:d4:e9:dc:57:e2:c8:b3:ad:
         26:a5:05:bf:a0:31:87:b6:9b:b3:7b:6a:6d:dc:52:fb:78:1a:
         bc:c4:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----