Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e32382e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          RLWZmiNXIAHNo+PyIoJDRcxh1hcKa2Z7+LdmLlfRru0=
Subject key identifier:   3B:7B:FC:02:FE:EB:18:08:35:AC:E4:F0:21:1B:BE:5E:F2:FA:06:C0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       48C3C3BB0EA4FFB7FC77CAF51C3A70647EE8ED2A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 24 Dec 2021 09:24:05 +0000
ROA not before:           Fri 24 Dec 2021 09:19:05 +0000
ROA not after:            Sat 24 Dec 2022 09:24:05 +0000
asID:                     38482
IP address blocks:        182.253.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:c3:bb:0e:a4:ff:b7:fc:77:ca:f5:1c:3a:70:64:7e:e8:ed:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 24 09:19:05 2021 GMT
            Not After : Dec 24 09:24:05 2022 GMT
        Subject: CN=3082010A028201010091D36137574ECED529CA73C62D4C1C6853E414ED74DA14498426321E60F9640784C0CB9B26CF70FA4D2F49A531D0E279E774CF8BD8AF3BB20C203CD2E4DE3DC77CE0255CB2E99AD1509EA8FC5D8AFEEF7972145D8F3906F818D38F98D71E1165A86151E82FFB803C13057823EEEA778EC00761F81680DEA9FE74444EF2099EACEEF77D4C11C9357843AC06B2D98CBC7939BF0242A02355948712752002F58A9FE3517DD0BB5E0E74794E773D251665BCDE234E884D935D585B30AE85172CA403976B9D568DD1610B79E52458F5E3A9393790578C046E6095E751707CE7A87DCDCCC715C1E6DCD9AD265AD08317A0E612E3E8D0CF8E4D02D9B9B878981315FC730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:61:37:57:4e:ce:d5:29:ca:73:c6:2d:4c:
                    1c:68:53:e4:14:ed:74:da:14:49:84:26:32:1e:60:
                    f9:64:07:84:c0:cb:9b:26:cf:70:fa:4d:2f:49:a5:
                    31:d0:e2:79:e7:74:cf:8b:d8:af:3b:b2:0c:20:3c:
                    d2:e4:de:3d:c7:7c:e0:25:5c:b2:e9:9a:d1:50:9e:
                    a8:fc:5d:8a:fe:ef:79:72:14:5d:8f:39:06:f8:18:
                    d3:8f:98:d7:1e:11:65:a8:61:51:e8:2f:fb:80:3c:
                    13:05:78:23:ee:ea:77:8e:c0:07:61:f8:16:80:de:
                    a9:fe:74:44:4e:f2:09:9e:ac:ee:f7:7d:4c:11:c9:
                    35:78:43:ac:06:b2:d9:8c:bc:79:39:bf:02:42:a0:
                    23:55:94:87:12:75:20:02:f5:8a:9f:e3:51:7d:d0:
                    bb:5e:0e:74:79:4e:77:3d:25:16:65:bc:de:23:4e:
                    88:4d:93:5d:58:5b:30:ae:85:17:2c:a4:03:97:6b:
                    9d:56:8d:d1:61:0b:79:e5:24:58:f5:e3:a9:39:37:
                    90:57:8c:04:6e:60:95:e7:51:70:7c:e7:a8:7d:cd:
                    cc:c7:15:c1:e6:dc:d9:ad:26:5a:d0:83:17:a0:e6:
                    12:e3:e8:d0:cf:8e:4d:02:d9:b9:b8:78:98:13:15:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:FC:02:FE:EB:18:08:35:AC:E4:F0:21:1B:BE:5E:F2:FA:06:C0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:15:85:34:ce:35:be:01:08:98:4e:48:dd:a4:89:7f:a8:13:
         00:f1:0f:2e:08:c8:f8:53:a5:2c:c3:9a:f1:72:05:1d:9b:e0:
         b0:2b:b5:ad:34:c0:d5:8e:e5:92:bb:cd:80:60:54:6a:1d:3b:
         e6:a4:83:9c:3a:ea:25:c6:0c:fb:63:83:4f:0d:9c:c6:33:f1:
         22:79:f0:df:0e:61:ac:42:20:01:48:04:8d:0a:3f:35:6e:02:
         7f:45:bb:ee:18:2b:8c:de:9c:a7:6f:53:f0:25:1a:fa:ff:78:
         84:f8:72:bd:15:1e:ee:12:07:74:48:69:13:20:fe:84:02:57:
         4f:91:67:8b:e0:2d:c8:74:55:85:19:48:4a:6d:87:c5:fe:0b:
         12:47:c7:e4:4c:c2:e4:8b:a4:90:88:fe:11:2c:24:34:f7:5e:
         d2:51:d3:8f:08:21:da:a7:24:0a:e9:2b:35:1e:45:e3:f5:3d:
         ed:72:90:70:d5:42:3e:b2:af:d3:0e:71:2e:0a:0e:89:a9:bd:
         ce:dc:1f:2a:fd:4b:f2:8c:91:57:34:56:81:39:e8:43:bd:1a:
         0a:92:f2:62:02:8c:f2:84:19:1b:56:76:fb:44:53:68:3f:16:
         a9:8f:9b:ae:db:44:fc:f1:ac:34:7a:a0:3b:89:9f:60:84:56:
         de:49:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----