Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          4p0JXLytdQtGIG1mSnLIbhIfJtrPTsbB8jbm8xqWrXY=
Subject key identifier:   A8:22:12:69:61:CB:A0:D2:7F:32:3B:90:FD:AA:AC:EF:F2:11:42:DF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2BC45A155584E80D818CD10A5174FD198708BCE7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231312e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:58 +0000
ROA not before:           Tue 14 Sep 2021 05:12:58 +0000
ROA not after:            Wed 14 Sep 2022 05:17:58 +0000
asID:                     17451
IP address blocks:        182.253.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c4:5a:15:55:84:e8:0d:81:8c:d1:0a:51:74:fd:19:87:08:bc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:58 2021 GMT
            Not After : Sep 14 05:17:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:21:97:af:f2:2d:db:48:af:9e:36:8d:64:
                    d8:5f:01:f4:3f:53:92:58:cd:02:2a:2b:af:fd:4b:
                    1d:d6:74:d0:a7:60:0d:79:d5:2a:1b:87:4d:10:4d:
                    80:f8:62:53:09:e7:a7:47:52:2e:d7:a2:20:18:b4:
                    32:96:46:c6:90:b5:7d:7f:43:ec:c6:b7:10:3d:a7:
                    72:29:58:00:78:06:6f:3f:4a:48:cd:a3:5d:42:1a:
                    d3:76:79:16:e8:c9:18:81:5c:0f:24:f3:fb:7d:24:
                    73:3a:b2:73:36:b3:cc:9f:e9:70:48:c2:a3:2f:a5:
                    94:6d:da:a3:2d:fb:8d:43:14:f9:13:30:f5:48:54:
                    10:0e:31:05:0b:e9:79:80:66:e1:ae:a8:3c:7b:94:
                    83:93:2f:34:b2:84:1c:77:f8:0a:5e:00:b4:1d:69:
                    b1:f3:1f:03:22:9c:17:95:85:4a:ad:07:85:d0:fd:
                    71:19:73:9a:a9:f7:48:f1:f9:0e:88:66:d1:5f:6a:
                    bc:35:cb:c7:06:1e:01:01:e4:59:b7:87:fc:d6:8f:
                    7d:0a:94:3b:f8:ad:47:48:bf:dc:78:04:0d:41:c9:
                    7c:c1:48:2e:b9:0e:cf:d9:e1:a5:fb:25:a5:44:bd:
                    8e:cb:fb:e2:57:5f:52:b8:92:1f:f4:10:8d:13:68:
                    cc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:22:12:69:61:CB:A0:D2:7F:32:3B:90:FD:AA:AC:EF:F2:11:42:DF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:2f:a5:9c:bd:b2:03:22:d7:e3:20:50:34:41:1c:d5:57:f0:
         3d:7f:2c:25:c0:4b:2e:7c:a8:2d:45:f1:75:cc:be:2a:da:d0:
         70:05:db:6d:80:56:2f:f1:93:d9:a4:52:23:3d:0d:37:52:46:
         ba:57:2d:77:d9:68:70:9c:65:92:be:1e:ed:a0:af:4e:dc:e3:
         da:26:3a:93:07:11:eb:18:02:01:c4:2e:f2:ca:59:52:fa:ca:
         e4:6a:55:0d:10:37:ef:bd:b7:8a:32:cf:1b:e8:7e:32:81:51:
         06:ad:0f:12:6c:91:b4:8c:1d:29:29:50:f0:6b:1a:7e:ef:c7:
         53:b5:a1:24:af:71:7f:36:86:a6:d0:2c:0f:fd:af:44:15:de:
         e7:b8:ca:ef:df:9f:a8:c7:93:5e:4b:dd:89:11:3f:21:9f:f3:
         d9:68:c2:4b:0d:2f:f8:a7:ea:cd:93:2e:64:cd:ad:c0:d2:1d:
         f6:11:49:93:29:8c:f2:ca:ea:67:bb:99:e5:97:3a:20:93:2f:
         e8:be:50:53:05:a2:48:5a:fb:79:d3:70:b0:87:3b:dc:a6:4e:
         e9:a6:a4:5b:18:24:3b:53:44:c1:b2:16:99:77:86:88:bc:2d:
         ab:ce:03:c1:49:c5:bf:af:33:ba:54:af:ef:68:13:af:7c:ab:
         b9:92:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----