Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          1FOaN7L1FD0/s/n99m+XjIF5dRz9sjSsbotJuSOaGKk=
Subject key identifier:   45:3A:CE:EC:FA:5C:1C:1D:21:AA:75:34:90:64:50:AE:37:5B:2E:00
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4CE9AB993A92E8CF65BEA283856414AC9BBF3E8C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:26 +0000
ROA not before:           Wed 29 Sep 2021 23:55:26 +0000
ROA not after:            Fri 30 Sep 2022 00:00:26 +0000
asID:                     17451
IP address blocks:        182.253.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e9:ab:99:3a:92:e8:cf:65:be:a2:83:85:64:14:ac:9b:bf:3e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:26 2021 GMT
            Not After : Sep 30 00:00:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b1:4e:aa:41:1e:71:2e:c3:f2:be:2e:9f:82:
                    28:ad:d2:23:bd:2d:44:ca:0b:c3:f1:cb:93:4d:e0:
                    5c:16:93:e2:2a:b9:f8:a7:31:a3:fe:dc:0a:b0:b3:
                    95:c0:f7:f9:86:e7:3b:dd:83:e1:60:40:16:e2:a0:
                    39:87:68:b9:c6:1e:63:35:fc:36:17:a4:a6:e8:19:
                    da:f8:7a:bd:51:5c:c1:f8:11:f1:cf:06:fc:90:af:
                    cc:61:3f:e5:be:a7:e8:6b:10:63:27:61:d3:ed:f0:
                    1f:72:f6:04:8e:d3:17:17:ac:45:4c:58:64:08:c7:
                    ac:89:a9:f2:a1:49:1b:53:70:c3:4f:d9:4a:1e:c4:
                    c8:38:ff:57:a8:e4:ac:1e:bb:a6:4f:55:e8:ee:22:
                    2f:9f:1b:6a:00:58:13:dd:83:f1:ea:88:d8:06:e0:
                    24:7d:15:6b:1e:0e:9f:77:8e:da:48:60:aa:5c:96:
                    58:a4:7f:88:9b:ce:c7:90:a7:d8:4a:8b:a9:c6:10:
                    d7:18:ea:69:af:62:ea:57:eb:19:0e:b0:bd:6a:de:
                    5a:0e:09:d5:c5:cf:b8:78:6f:49:0a:b2:78:de:2e:
                    e0:b7:e7:9c:31:57:07:f6:b0:6d:f0:b7:1f:52:33:
                    0d:47:a5:56:c0:2b:f9:02:c8:ca:8f:b8:5d:07:75:
                    68:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:CE:EC:FA:5C:1C:1D:21:AA:75:34:90:64:50:AE:37:5B:2E:00
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:bf:5b:7b:93:e1:65:1f:93:95:46:27:c6:d1:05:c8:4a:
         f1:66:43:46:74:8a:a3:7b:83:a7:ff:4b:90:46:19:68:45:02:
         d5:64:bd:6a:18:2f:6d:39:2a:de:ff:cd:4d:f9:db:da:7d:b0:
         96:88:1a:61:51:ca:e1:91:c4:af:b6:79:13:84:6d:af:61:ae:
         03:78:e8:16:d7:a0:df:b9:7d:8c:d5:4b:ec:b2:54:fe:07:fc:
         b9:36:90:55:22:eb:fd:dd:7f:c0:f9:37:72:82:3f:d9:16:17:
         8a:e4:3f:2f:42:fd:c3:1c:3a:da:86:a7:38:55:f9:71:76:99:
         0f:e8:14:40:df:2d:31:08:29:50:6e:bd:c4:1f:60:0c:cc:60:
         d1:92:cf:76:f7:80:49:8e:a8:9c:7a:c5:2c:c6:c4:c4:8d:df:
         9b:80:bc:f7:a7:7c:02:39:61:9e:15:57:45:0e:58:6c:32:32:
         4b:bf:5d:0b:b1:c4:d0:a8:17:07:1b:d6:05:8c:c4:bd:bd:53:
         b7:9d:fc:14:f8:2b:03:cc:e2:f3:ab:8e:b1:4b:d6:dc:e9:18:
         a5:7b:9b:bd:81:2d:40:87:ca:e6:b9:17:12:6a:fd:25:82:0c:
         03:e9:b6:0e:a2:50:6f:26:a2:dd:1a:a8:71:5e:7c:33:cc:d7:
         8b:08:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----