Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34352e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tH2VTliTSJO0iNC/YtDZkHtkJbXO3QbxiKNDg07v4Bc=
Subject key identifier:   72:FD:1C:EC:B8:C9:C7:DC:EB:8A:A0:88:B1:2D:E6:0E:EC:BE:63:04
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1300302CCCD33739511232894BB3865BED9EB4D6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:11 +0000
ROA not before:           Wed 29 Sep 2021 23:55:11 +0000
ROA not after:            Fri 30 Sep 2022 00:00:11 +0000
asID:                     17451
IP address blocks:        202.169.45.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:00:30:2c:cc:d3:37:39:51:12:32:89:4b:b3:86:5b:ed:9e:b4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:11 2021 GMT
            Not After : Sep 30 00:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:5f:5c:d6:42:b7:b6:f2:7c:9e:12:d3:f9:
                    53:9e:68:2a:7a:2e:28:b3:f0:6c:37:6f:b7:8b:d3:
                    fa:f8:22:28:02:b1:70:ee:7e:8c:5a:52:4a:70:8f:
                    be:30:57:e2:37:8d:d1:f3:62:61:da:2a:89:ff:9d:
                    0e:78:eb:bc:4a:fa:3d:6c:39:ef:ae:b4:f6:cc:43:
                    1c:34:d2:bb:ba:3a:73:2a:23:65:11:4e:ab:90:46:
                    7f:00:91:d7:0d:3f:5f:f5:41:89:89:8e:3e:f5:49:
                    eb:4a:cd:be:f2:e4:d1:04:ba:e4:2f:f4:c3:d7:60:
                    52:8b:f8:9c:37:f9:19:6b:f1:7d:db:c8:15:92:ff:
                    38:6a:45:7e:7d:48:ab:f1:1a:9a:32:4f:96:66:96:
                    86:d7:06:92:4b:49:52:46:1b:ac:2c:de:ae:45:02:
                    c8:b8:32:1c:ec:45:cd:5a:ab:62:27:5c:bb:0d:2b:
                    3f:14:86:29:6e:36:bc:5b:31:eb:31:97:c5:d8:14:
                    f0:f5:7d:0d:bc:91:b7:e7:04:54:80:d5:c5:e2:61:
                    28:08:5a:72:ad:a6:9f:c7:35:fb:30:82:2d:89:c6:
                    bd:74:ca:9e:65:fe:86:b8:4e:cf:86:28:52:49:67:
                    72:28:20:04:ed:f3:21:20:ef:52:15:97:8d:2a:a0:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:1C:EC:B8:C9:C7:DC:EB:8A:A0:88:B1:2D:E6:0E:EC:BE:63:04
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:0d:b6:f0:5c:f9:47:13:48:43:71:32:9d:42:53:61:ee:
         cc:93:ce:8d:87:f7:ac:3f:2a:6c:6c:d4:e1:c5:76:77:8d:81:
         2f:04:57:76:94:95:e7:3d:8e:35:c9:7f:5f:5b:a7:57:44:3c:
         fb:f6:93:af:81:1f:49:4c:bb:ed:91:bd:9f:a7:af:7a:eb:e6:
         05:6e:8a:b4:81:92:2b:c4:e2:76:4c:8a:32:f5:e8:83:fb:41:
         34:2b:71:7b:61:61:26:f5:e8:7f:b0:01:06:42:46:6f:94:14:
         11:07:fa:41:3f:db:61:ad:b3:1f:23:7a:1c:76:02:17:d4:14:
         8a:2e:b4:6e:3e:ed:f0:fe:73:b2:33:f9:9f:e2:8d:aa:00:77:
         62:74:fa:12:0c:7f:d0:53:d9:41:73:85:ba:c8:cf:63:b0:43:
         e4:b2:6a:ea:30:05:91:57:5b:16:8e:48:fe:4b:f1:29:86:2f:
         46:e7:97:eb:e7:cc:13:d5:27:e8:c3:fa:d6:41:76:34:0c:fb:
         82:1b:0d:e2:ef:c5:62:d7:fb:1d:a6:59:22:39:55:5e:08:de:
         39:7f:78:53:83:ca:01:7b:c2:bb:66:d7:2f:53:22:b3:cf:5c:
         9f:34:24:8f:d8:91:75:0e:87:7e:32:f3:f1:45:eb:d1:ce:a6:
         e3:10:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----