Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vsQpZL6H4ReeZRYqPWNf+LQ4jlDO8XDdGvjr14RoWZM=
Subject key identifier:   A4:40:C5:BB:E0:49:F6:06:3D:4A:F8:A9:B0:55:5D:E3:3D:70:13:21
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5988A48C3CEBBB849BE0FB1ABC48B22969D7ADBA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:08 +0000
ROA not before:           Wed 29 Sep 2021 23:55:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:08 +0000
asID:                     17451
IP address blocks:        182.253.27.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:a4:8c:3c:eb:bb:84:9b:e0:fb:1a:bc:48:b2:29:69:d7:ad:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:08 2021 GMT
            Not After : Sep 30 00:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:65:01:e2:45:02:80:d6:2e:1c:e9:e2:14:
                    23:9c:ed:af:d1:72:fb:2c:60:5d:c1:4f:77:77:00:
                    f3:17:55:38:9b:38:b5:2a:53:e4:47:cf:7e:e7:66:
                    20:7f:2a:f5:e7:48:78:52:01:fc:8d:62:f1:64:06:
                    2d:8b:2a:15:0b:f4:62:b2:a6:fc:50:e1:0a:47:79:
                    d6:94:97:cb:f0:e2:04:6d:3d:ff:94:ae:0e:08:98:
                    75:22:39:56:b4:ac:96:67:94:6f:5b:05:f7:11:e5:
                    9e:54:9c:6e:35:33:39:a9:a3:46:8a:6c:ec:89:81:
                    84:86:32:b6:6e:4b:df:7a:2d:a6:f1:d1:2d:02:b9:
                    2f:0f:c2:97:d1:19:2a:00:b5:07:bf:cb:b0:bc:6c:
                    d6:81:fb:62:a8:53:35:c3:5c:25:6f:5c:36:f0:8b:
                    13:d2:30:be:8b:1f:47:03:8d:1a:7a:43:3c:7d:fa:
                    4d:ea:ab:94:0c:e2:df:c1:2d:8d:3f:9b:ce:2d:e7:
                    15:e0:27:0f:07:c5:48:a7:e5:0b:8c:3d:5b:53:3c:
                    a7:ff:60:94:8d:d4:1e:29:04:17:fc:cc:7b:c9:ed:
                    6e:61:70:eb:67:3f:b1:cb:60:51:77:66:ff:7f:38:
                    d1:69:38:6f:c8:a6:8d:43:e4:e0:c7:72:0d:20:fa:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:C5:BB:E0:49:F6:06:3D:4A:F8:A9:B0:55:5D:E3:3D:70:13:21
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e3:61:c0:db:4b:06:2a:f3:d2:a9:71:b2:4d:f1:44:10:35:
         11:d5:47:7c:99:a6:6e:dc:ae:9a:81:ad:0a:3b:2c:c1:2c:ad:
         40:65:27:60:72:24:3d:96:00:67:24:7f:fd:ee:a2:35:39:5a:
         f5:ca:28:9c:e4:30:cb:17:d4:a3:60:fe:b7:01:34:19:86:8a:
         6d:dc:3d:63:45:d8:4b:51:e1:cb:f9:ff:8e:bc:4a:44:2f:d2:
         71:55:a4:96:5f:27:85:10:eb:20:0a:17:39:25:d2:54:49:1f:
         a7:f9:ac:d3:25:76:a3:4b:9d:e8:c1:1d:a6:d5:93:85:66:2f:
         17:57:bc:f3:25:dd:23:6b:1e:a6:57:26:cf:d5:83:91:8b:7f:
         8d:63:42:44:9c:be:27:76:3b:5a:69:47:60:93:a2:4a:d4:a1:
         9f:a9:73:ff:1d:2a:2c:4a:31:96:f2:63:73:7e:90:0d:07:09:
         43:96:a4:57:50:98:4b:af:91:09:c0:47:52:70:37:36:e8:2f:
         6c:d5:78:52:d4:ce:0f:c9:6b:04:d9:58:2c:27:a6:43:9d:1f:
         17:ea:f7:aa:2b:7f:19:01:bf:59:8f:7a:0d:32:dd:e7:51:21:
         dd:bb:5b:82:c7:5b:29:1a:b1:1d:3f:74:d6:5d:40:01:15:1f:
         8e:22:ac:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----