Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          R6mRTHHgYHmUmyExFrSYCxondvaLXvVoPA8iu+ugqHY=
Subject key identifier:   48:67:6A:CB:7C:78:EF:55:41:56:E8:AB:F3:1C:5E:41:86:02:4E:5E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       767B8617AF37BC363DF04CAB7A9A22555C308DE4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231302e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:49 +0000
ROA not before:           Tue 14 Sep 2021 05:12:49 +0000
ROA not after:            Wed 14 Sep 2022 05:17:49 +0000
asID:                     17451
IP address blocks:        182.253.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:7b:86:17:af:37:bc:36:3d:f0:4c:ab:7a:9a:22:55:5c:30:8d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:49 2021 GMT
            Not After : Sep 14 05:17:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:e5:67:b0:b3:a1:16:2e:c3:1b:f7:d4:2e:
                    57:d1:0c:55:d0:80:42:06:b0:ce:53:74:33:60:8e:
                    af:c3:db:98:89:06:be:0f:0e:49:6c:33:24:d8:40:
                    b2:e1:f4:93:f1:e1:8f:01:41:41:45:58:70:a3:a3:
                    da:e6:fb:c1:26:c2:23:88:f8:1f:9a:ec:95:f3:78:
                    7b:22:10:62:ad:ce:ce:91:2a:54:98:16:39:78:c5:
                    9b:e1:0e:c7:2e:e5:52:0f:a9:2a:b5:d3:73:38:6d:
                    22:db:5a:c9:4c:b2:1b:d1:ea:c8:24:44:a5:07:4b:
                    2d:58:17:6b:21:de:bf:8b:23:d8:71:e1:13:0b:b6:
                    8c:ba:0a:9b:8a:d1:91:08:c6:96:09:5d:25:8f:cb:
                    9e:ba:99:27:df:83:1b:34:22:43:5c:c2:07:f7:e6:
                    50:02:b5:ac:c4:32:ad:b2:a1:fe:cb:ee:05:87:0e:
                    6d:88:99:bf:1a:fc:bb:87:df:f7:6a:80:f3:ed:63:
                    1a:81:99:83:95:b5:cc:90:90:83:47:92:67:e0:d7:
                    89:48:75:38:7f:07:1a:ed:5b:25:07:52:32:49:15:
                    5e:6d:fd:ee:70:57:c7:32:fb:9e:c7:cc:ce:a5:25:
                    11:56:b5:dd:fe:2f:cd:44:cf:27:a4:70:f5:b5:ca:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:6A:CB:7C:78:EF:55:41:56:E8:AB:F3:1C:5E:41:86:02:4E:5E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:12:2d:f6:c9:72:71:a7:17:8a:28:40:03:b1:7c:38:4d:2e:
         e9:b8:61:00:87:26:d5:31:26:d8:78:d3:77:8d:07:b5:33:e5:
         70:ab:41:ea:2c:5d:72:36:56:07:95:6e:11:82:79:da:30:89:
         80:dc:dc:d2:61:9c:1a:92:be:56:ee:e3:67:83:d0:1f:de:e2:
         e5:68:f7:3f:19:32:80:ea:62:eb:76:81:3d:03:85:21:d4:0d:
         a9:c4:96:89:db:a7:7d:90:8d:54:4c:43:34:33:4b:f5:20:c8:
         f0:b4:6a:26:2d:86:f2:85:8e:36:66:f3:af:14:0e:15:26:b0:
         73:83:ef:54:28:bd:e3:10:87:8d:79:34:c7:8e:92:95:c6:1f:
         8c:37:ab:59:3e:90:7f:7c:57:88:f1:3a:4b:34:cd:37:a9:25:
         5c:f7:2a:48:57:35:ab:13:6c:41:f9:b3:fd:d9:33:d7:2a:f9:
         e8:52:18:13:7b:c8:76:a8:5c:88:fe:fc:4c:b5:aa:fc:34:f0:
         bb:18:be:57:a3:1d:b1:89:fa:f7:17:28:7a:20:8a:82:1e:c5:
         81:75:fa:95:3f:5a:4d:f6:13:75:2e:ee:36:2c:ea:09:ef:e8:
         95:6a:5d:d9:66:7e:87:0f:c7:1a:bb:b3:3c:43:07:2c:12:3d:
         12:4d:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----