Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203338343832.roa
File:                     3230322e3136392e34332e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          OAstuNhfDP93ZzSVyFYSiBZNlCfX00JOA62oEvj0C0c=
Subject key identifier:   F8:F7:C5:5D:26:DC:7E:E4:CE:25:5B:50:89:3B:70:C0:3E:27:CA:08
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       39BAB369E3EB30EDF7C12E8BFFAAB19AAB497CF0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203338343832.roa
Signing time:             Thu 23 Sep 2021 02:45:48 +0000
ROA not before:           Thu 23 Sep 2021 02:40:48 +0000
ROA not after:            Fri 23 Sep 2022 02:45:48 +0000
asID:                     38482
IP address blocks:        202.169.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ba:b3:69:e3:eb:30:ed:f7:c1:2e:8b:ff:aa:b1:9a:ab:49:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 23 02:40:48 2021 GMT
            Not After : Sep 23 02:45:48 2022 GMT
        Subject: CN=3082010A0282010100CB88A6776CF50A50BDFD9E8F7AAE4DCC8D538E3FBE9485741C9F31B36776830EAC3123049AB568E018DB334314D4F99B2F2C2EB6ECCA9098F7D594E3D99B37D3CF28303D373090023202FDDD073A54B32BD71AAABAB21626516AADEDC767242B083C45CC6C428D2B47C247E1689CC474AE1EB15D83C38EB3B94126CD4330D213659F5D561200E48155077FA29C2929CE062842C1D2D84B7D5816EE772667651A0BDC085FB45AE6F6C365BD5F5EF0EFAAC882782D0349FA9ADE14E6958142977A8EF581290ADD179FDE4B66AE6E4EEC6083A32DF1D73A89101131F4444A21FB846C4113BA293EE8B0E61FA60119B596DC908044EFBDA602973008E2DB2EB25AD90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:a6:77:6c:f5:0a:50:bd:fd:9e:8f:7a:ae:
                    4d:cc:8d:53:8e:3f:be:94:85:74:1c:9f:31:b3:67:
                    76:83:0e:ac:31:23:04:9a:b5:68:e0:18:db:33:43:
                    14:d4:f9:9b:2f:2c:2e:b6:ec:ca:90:98:f7:d5:94:
                    e3:d9:9b:37:d3:cf:28:30:3d:37:30:90:02:32:02:
                    fd:dd:07:3a:54:b3:2b:d7:1a:aa:ba:b2:16:26:51:
                    6a:ad:ed:c7:67:24:2b:08:3c:45:cc:6c:42:8d:2b:
                    47:c2:47:e1:68:9c:c4:74:ae:1e:b1:5d:83:c3:8e:
                    b3:b9:41:26:cd:43:30:d2:13:65:9f:5d:56:12:00:
                    e4:81:55:07:7f:a2:9c:29:29:ce:06:28:42:c1:d2:
                    d8:4b:7d:58:16:ee:77:26:67:65:1a:0b:dc:08:5f:
                    b4:5a:e6:f6:c3:65:bd:5f:5e:f0:ef:aa:c8:82:78:
                    2d:03:49:fa:9a:de:14:e6:95:81:42:97:7a:8e:f5:
                    81:29:0a:dd:17:9f:de:4b:66:ae:6e:4e:ec:60:83:
                    a3:2d:f1:d7:3a:89:10:11:31:f4:44:4a:21:fb:84:
                    6c:41:13:ba:29:3e:e8:b0:e6:1f:a6:01:19:b5:96:
                    dc:90:80:44:ef:bd:a6:02:97:30:08:e2:db:2e:b2:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F7:C5:5D:26:DC:7E:E4:CE:25:5B:50:89:3B:70:C0:3E:27:CA:08
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34332e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:a1:cd:f8:7d:07:ae:18:cb:b8:f5:15:ce:1f:65:42:c7:
         0f:87:60:d0:e7:d0:6d:44:78:a8:c9:95:75:c3:d0:14:50:ff:
         f1:b1:7a:68:31:5d:3b:df:1b:63:a8:28:de:c3:d7:d2:de:2e:
         9e:5e:db:9d:ae:91:a9:bb:be:41:67:4d:46:52:f9:06:60:63:
         c2:5c:a7:2a:a7:76:d7:ec:27:6a:97:54:1d:e0:19:f8:f8:0f:
         e5:1f:8d:a2:ad:77:20:da:41:ef:91:b3:b0:e8:db:cd:da:5c:
         44:3f:42:54:5c:e1:9f:f7:00:2d:6f:fc:3a:a6:c1:8c:5c:23:
         7e:9d:bb:87:7d:16:df:86:9a:00:37:ae:04:df:7e:e4:ab:3b:
         fd:65:fd:b9:9c:46:dd:35:e9:82:40:b0:07:87:a1:e6:69:cc:
         31:08:2b:27:b7:6d:42:a9:8f:e0:59:f8:a3:1b:be:08:a8:4f:
         90:c5:09:40:c7:14:6f:ea:6b:d2:84:7e:0e:2e:f9:c1:81:99:
         d1:2a:b1:6c:0c:a2:e6:2f:f5:83:4e:b9:c5:80:a4:04:e0:2b:
         d9:6d:49:4a:be:42:f8:85:2e:5a:ae:15:a0:47:f0:8d:d9:62:
         30:17:21:e8:32:6e:a1:c9:0c:5b:85:0d:bf:5d:a2:15:63:f4:
         48:dd:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----