Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34372e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          1II3/vK+xq7tyAF+zJFsLWbyQjUv+Y/M1WxcGUbUYag=
Subject key identifier:   74:75:6C:0F:AC:FC:11:FC:16:8D:3C:A5:A1:68:F7:A8:28:C1:D3:0C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0724E0D1A02F03BD788E889F1A20F57A24ED0C8D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:35 +0000
ROA not before:           Wed 29 Sep 2021 23:55:35 +0000
ROA not after:            Fri 30 Sep 2022 00:00:35 +0000
asID:                     17451
IP address blocks:        202.169.47.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:24:e0:d1:a0:2f:03:bd:78:8e:88:9f:1a:20:f5:7a:24:ed:0c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:35 2021 GMT
            Not After : Sep 30 00:00:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:ca:13:81:23:d5:f9:b0:e0:1e:2e:38:53:
                    24:42:3d:37:40:b8:9d:b7:b1:3b:ea:de:e7:14:cb:
                    46:d1:a1:63:a4:78:2d:a6:4c:c6:a6:d3:e4:0a:d5:
                    60:fa:ce:12:cb:56:52:28:33:cd:2d:1f:a1:7f:52:
                    22:37:95:84:8b:17:18:fb:1c:18:4d:7e:a8:94:2f:
                    81:5f:38:ae:94:58:91:57:85:d8:50:6c:2c:08:85:
                    dc:cc:91:e7:d7:e8:f1:4b:8a:78:8c:16:16:99:ae:
                    6f:4b:45:42:a1:2b:3d:0c:28:d3:50:b2:15:ef:69:
                    14:71:52:04:1f:c8:f6:51:13:14:1f:b4:fd:89:62:
                    78:9c:00:ec:a4:cc:85:3e:52:42:f3:48:2a:d9:94:
                    5e:e0:42:d6:9b:41:e8:12:3e:93:21:9c:48:05:a7:
                    50:9e:13:ca:f5:2a:be:c4:4a:5e:96:31:f5:33:76:
                    e3:0a:1c:65:94:0c:5f:86:2e:c3:2a:fb:6f:78:4a:
                    ca:9f:4d:b7:73:7b:dd:fc:80:9a:f7:e3:b2:02:5b:
                    60:7f:46:be:e9:01:da:6c:53:ba:33:35:a5:45:54:
                    e7:0c:a3:6e:0a:b5:e5:4d:ba:78:da:a0:02:d9:7f:
                    1d:74:35:29:64:13:eb:85:fb:d0:cb:f5:14:53:c9:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:75:6C:0F:AC:FC:11:FC:16:8D:3C:A5:A1:68:F7:A8:28:C1:D3:0C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:76:05:ce:b1:77:56:92:a3:65:5b:43:8d:b7:d0:69:82:f4:
         da:ba:c9:f6:c2:22:36:1c:d7:a4:c4:3e:a3:a1:30:bc:5f:ea:
         32:9c:5b:75:51:39:d3:4f:d9:58:2d:de:d7:2a:e6:95:d1:e9:
         ce:78:73:aa:5b:bd:30:9c:c8:a9:dc:eb:5f:35:41:9d:c7:e6:
         d0:7f:3b:23:71:81:f0:5a:8e:aa:05:3a:5c:8b:d5:f2:b2:1c:
         9e:e7:22:c1:24:80:f7:f0:3d:48:18:c4:8b:09:13:3c:1d:a6:
         7e:0b:84:c0:e8:6c:b1:75:96:45:b4:eb:49:b6:dd:9c:65:e6:
         3b:a8:c3:a9:e4:6d:1f:85:8e:d9:60:06:fe:e1:e0:ce:c7:1f:
         e2:f9:c4:d5:95:c9:76:19:fd:96:18:5c:27:30:d2:54:3c:95:
         76:6e:80:dc:88:0b:e5:d2:96:90:d2:92:bf:32:b5:cb:00:a9:
         94:3d:b2:01:4e:66:93:27:02:5f:e4:cf:be:a3:ae:37:e6:9c:
         97:b4:32:3e:98:8e:e2:42:6b:f4:2d:cd:1c:7c:be:b1:80:7e:
         5b:bb:94:a6:37:bc:1c:0b:b6:9e:46:d6:77:15:bd:15:67:8c:
         bc:bc:f4:25:09:56:93:75:0f:bb:92:3c:57:6e:7d:15:63:18:
         8b:d2:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----