Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34342e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          aMyoKESIUnZXfGQUvD1CJmagjiN06rELCICWkqvJ5FY=
Subject key identifier:   64:AC:76:4A:D8:31:44:5A:85:56:9F:C4:40:3B:ED:68:A0:8D:C2:DF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       430E8C7B4F145D10A9666AA0A92D0A23C5E92110
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:43 +0000
ROA not before:           Wed 29 Sep 2021 23:55:43 +0000
ROA not after:            Fri 30 Sep 2022 00:00:43 +0000
asID:                     17451
IP address blocks:        202.169.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0e:8c:7b:4f:14:5d:10:a9:66:6a:a0:a9:2d:0a:23:c5:e9:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:43 2021 GMT
            Not After : Sep 30 00:00:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:38:9b:f9:a0:9f:59:e0:1f:e7:5d:33:c2:
                    5b:9c:bd:97:32:33:c7:bc:5c:c6:64:cb:6f:42:da:
                    ee:2a:5a:3a:76:ae:c6:94:a4:d2:ca:ec:7a:bd:ff:
                    03:56:55:18:2b:d4:49:55:07:af:5c:f3:31:69:6e:
                    36:dd:6d:73:1a:28:7e:43:2e:09:11:6b:c4:ea:00:
                    80:a7:aa:a5:b7:0d:d6:f8:a5:a9:42:d2:76:47:6e:
                    f0:d8:54:a4:2b:3c:32:3c:c6:c8:eb:72:59:a7:47:
                    86:1b:ec:2b:a7:bb:4f:e9:ea:f2:a7:3d:27:eb:6d:
                    82:bd:ef:b3:0b:33:e0:94:bf:1d:f0:23:41:be:b8:
                    18:0c:99:43:ca:5f:8c:cd:99:49:0d:67:fb:1f:19:
                    2e:f3:ca:63:e7:fb:3e:f4:46:1e:b5:a7:17:55:97:
                    15:08:c3:9f:1f:32:ba:0a:8c:74:79:00:b8:b7:07:
                    db:49:e2:fd:e4:e2:f9:d3:74:7c:a0:37:56:c4:eb:
                    dc:d7:89:92:15:28:12:80:0e:26:40:4d:d0:fa:8e:
                    25:05:71:da:53:54:0c:d5:d9:fe:bf:d8:d1:57:e6:
                    97:1e:66:34:b4:d5:e5:42:31:8f:1b:9a:8e:4d:f7:
                    f9:11:b5:9b:62:73:6a:44:05:bb:35:6d:59:cf:95:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AC:76:4A:D8:31:44:5A:85:56:9F:C4:40:3B:ED:68:A0:8D:C2:DF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:55:a2:94:5a:f5:85:d8:35:3e:a7:77:04:14:85:81:86:7e:
         9f:d6:eb:9b:c2:9b:67:66:04:51:47:4c:12:7d:82:1c:3c:a4:
         59:6a:59:e8:b5:e4:3a:0c:c4:c4:7c:b1:cf:13:1f:e9:14:1f:
         28:1d:61:19:ba:dd:e5:e2:7a:d1:2f:6c:1b:7a:f5:54:ef:77:
         d2:2c:e6:5c:ff:d7:fd:6a:e7:2d:48:90:76:d3:4b:7c:ef:2c:
         42:1a:b8:61:77:a2:7b:13:87:b3:a3:48:06:1f:24:f9:e8:99:
         0e:40:ad:ad:ae:c3:a3:f2:d1:34:de:d6:6a:84:6b:c2:04:86:
         43:c2:2c:97:5b:ae:d5:0a:af:7e:1f:ab:a4:bc:bc:42:c9:20:
         b2:fd:73:7a:e4:2c:a8:7b:55:6c:a9:80:f0:80:fb:8b:d1:a3:
         b1:56:45:ad:30:54:5f:9a:da:3a:e5:da:59:43:c1:84:f5:65:
         c4:89:95:b2:ed:50:95:48:64:4a:02:17:0f:5b:ed:7d:90:86:
         f3:e8:53:ed:65:25:4a:19:d4:20:53:1c:26:c3:37:ba:55:e2:
         dc:14:0b:1c:f6:6e:ce:f2:64:11:4f:3e:e3:a7:85:e8:99:6d:
         c5:e8:4a:5f:3a:1c:39:be:a9:93:27:a9:ab:9a:cf:ad:8b:30:
         ef:12:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----