Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33382e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e33382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          m79rTf+FjPFBgGSPs4nYk2yLbW576VcQwnSfTKnHm2k=
Subject key identifier:   04:2D:F1:9A:17:9F:C1:89:CD:70:8D:22:B1:52:8C:A2:54:7A:F3:67
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       73F2E3ED72484F6A6FB40F159B82FE2FB4E32EEE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:26 +0000
ROA not before:           Wed 29 Sep 2021 23:55:26 +0000
ROA not after:            Fri 30 Sep 2022 00:00:26 +0000
asID:                     17451
IP address blocks:        202.169.38.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:e3:ed:72:48:4f:6a:6f:b4:0f:15:9b:82:fe:2f:b4:e3:2e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:26 2021 GMT
            Not After : Sep 30 00:00:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:29:88:ed:82:90:ed:04:14:91:71:90:2e:
                    70:8b:22:00:58:f9:34:e5:db:09:5a:1e:a0:e5:f2:
                    22:d2:d4:77:9e:dc:15:86:1b:7f:31:20:73:8c:19:
                    ce:46:be:16:e8:5b:ef:8e:73:c0:df:16:68:bf:a2:
                    db:b9:8b:c1:7c:7f:c4:08:2c:50:86:b7:3f:b2:3a:
                    b3:ce:db:01:4b:de:0e:4f:f3:aa:cc:ad:4e:4d:8d:
                    6b:ad:21:02:70:cc:04:82:ec:a5:84:2f:14:04:75:
                    37:77:99:b4:4a:43:c1:08:7a:cc:3e:e8:74:25:c8:
                    42:44:84:29:ce:1d:61:4f:fa:f3:35:f6:9d:5c:6b:
                    a7:76:dc:a2:fd:51:0d:0e:91:4d:6d:29:1a:c5:af:
                    fc:b3:79:78:6f:c6:97:da:44:66:ef:6c:45:f3:c8:
                    17:62:9d:04:a0:8c:e2:a3:36:af:f5:05:2f:ac:3d:
                    94:f6:04:50:a1:f1:7b:a3:e4:b4:79:e8:e7:66:e7:
                    73:95:78:49:f1:a5:c4:8d:05:68:44:c2:ef:7d:d6:
                    22:b8:26:a8:6d:98:3b:19:ed:45:f7:11:61:94:5c:
                    22:36:95:13:2a:35:e8:c8:8f:fd:4b:9e:1a:66:ec:
                    1a:c1:76:8e:a5:b9:8c:69:fd:a4:e5:2c:c5:bd:7a:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2D:F1:9A:17:9F:C1:89:CD:70:8D:22:B1:52:8C:A2:54:7A:F3:67
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:23:fc:e4:3d:c7:9a:11:fd:2c:f4:48:c2:c2:93:5e:f1:
         67:94:01:a5:77:70:55:81:17:90:da:e5:2c:0b:a5:70:a5:cd:
         88:61:41:6b:2c:49:44:a8:b8:44:e6:d1:6c:c3:c5:d1:2e:6d:
         68:16:11:f3:23:e0:74:6d:d1:98:c0:9f:2b:4a:24:2a:1f:c7:
         44:ca:7a:e3:65:de:2d:6e:f2:f6:a8:43:8a:89:f0:a9:ff:8a:
         a6:3f:f2:98:13:b5:62:0b:27:8c:ee:f5:7c:66:f3:fd:a2:e5:
         51:60:dc:e0:83:3f:18:83:8a:30:04:51:df:4c:d0:ae:3d:07:
         08:bc:4f:81:7c:8b:1a:c5:b6:b5:b4:01:8f:ed:e8:27:e9:34:
         a0:5d:50:e5:59:2e:34:42:9b:e9:c1:de:c4:e8:8c:d9:c3:62:
         af:56:fe:5d:12:24:8e:f1:86:92:56:94:5a:f3:71:19:ac:63:
         a5:8f:b5:84:36:da:91:32:7c:cd:ee:65:fd:df:b7:95:b3:9a:
         30:21:f3:27:e8:1e:3f:43:5a:f6:1c:44:d5:52:11:11:24:dc:
         ef:30:43:54:ff:c8:a1:5f:e3:b6:e8:3c:01:e7:c5:ff:94:18:
         b3:1d:78:ef:db:30:ad:fb:32:2d:4c:15:57:ba:3f:82:8f:9f:
         14:08:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----