Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e33312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          yGR3TDEECAXLbN0CAANq/fqdqOuIdAPDIbCCR1TIvQc=
Subject key identifier:   01:6A:8D:49:98:4D:96:9A:45:A8:A9:AF:99:C1:01:D3:20:9E:38:54
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3C53C61CC6E202DB182EF47C906709CCDCA39258
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:19 +0000
ROA not before:           Wed 29 Sep 2021 23:55:19 +0000
ROA not after:            Fri 30 Sep 2022 00:00:19 +0000
asID:                     17451
IP address blocks:        182.253.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:53:c6:1c:c6:e2:02:db:18:2e:f4:7c:90:67:09:cc:dc:a3:92:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:19 2021 GMT
            Not After : Sep 30 00:00:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:bb:a6:ed:c3:bf:01:42:58:b9:b0:fd:0e:
                    00:b8:59:67:a7:f7:be:e7:43:6d:d0:dd:62:0f:8c:
                    61:42:62:e4:c2:15:3e:da:3d:8a:e7:10:d0:c1:7b:
                    87:f1:fe:01:76:cf:18:61:f6:e3:2c:2b:f6:66:d0:
                    eb:5e:78:6b:26:ee:45:ad:27:fd:14:0b:32:22:7f:
                    8f:f8:05:ce:1f:6c:65:b6:72:0e:16:16:02:a5:f5:
                    3b:07:97:9a:12:06:69:8e:a3:b7:d6:31:69:99:49:
                    c2:15:f4:f5:b8:2a:6b:2e:e0:f3:f0:a6:47:57:25:
                    d7:fe:4e:56:2c:50:db:80:1e:71:8c:5e:0b:fc:d1:
                    40:8b:98:f3:e8:ff:b5:16:29:43:32:7c:a6:e9:77:
                    1e:10:73:c2:02:43:ee:85:e9:09:56:61:77:97:ee:
                    f9:79:c5:42:f3:25:a3:57:8e:26:80:93:0b:95:89:
                    7c:a8:1f:84:72:05:e8:a9:28:be:4e:b0:84:f8:30:
                    d1:0e:75:98:bd:2f:29:f7:a9:8e:eb:74:ff:b0:32:
                    ef:b4:bd:76:55:9b:25:a6:96:0b:85:4b:30:21:45:
                    20:73:46:d8:2e:d0:b2:61:fc:78:8f:de:30:c7:8c:
                    07:c9:fb:9d:4f:fb:bf:b5:98:47:0c:7f:7e:75:4b:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6A:8D:49:98:4D:96:9A:45:A8:A9:AF:99:C1:01:D3:20:9E:38:54
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:1b:99:f6:e2:52:60:f1:dd:39:01:92:5a:ff:57:47:7b:
         68:8c:a4:f3:32:bd:0d:dd:ac:3c:48:51:a1:7f:98:fc:d3:a7:
         f8:5d:8c:09:66:07:83:01:0c:88:f6:f2:19:5a:69:61:fb:c7:
         40:53:41:7c:77:18:d7:cf:dd:df:b5:ad:69:ae:18:f0:57:62:
         b0:9c:5b:f5:d2:ad:77:93:e6:fb:20:b5:73:69:b8:13:72:2d:
         94:43:e7:3c:10:85:4e:59:b1:ba:58:f7:a8:53:9a:81:a3:00:
         13:23:b4:38:b9:55:5b:83:38:1f:84:9b:f5:01:50:f0:86:14:
         b6:12:50:c1:df:d8:4d:8d:5f:c5:80:e8:7c:fd:e6:d6:7e:31:
         f4:fe:43:cb:57:2c:c2:21:6a:00:39:74:e1:1b:2d:23:48:6f:
         82:2c:2c:a5:85:2c:63:eb:12:f9:93:82:7a:f2:30:6c:bc:5c:
         a3:3e:23:3c:02:d5:a3:b0:34:3d:fa:47:e8:d0:08:52:c8:9a:
         f2:48:bf:4f:66:f2:da:d6:00:8e:dc:70:69:e1:ac:80:c9:5f:
         10:83:ff:f2:f7:a7:24:af:e2:af:b1:aa:1f:3a:ec:1e:4b:32:
         d8:b9:5e:86:34:dd:e1:4b:16:25:44:42:2f:30:a9:da:a9:03:
         3d:de:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----