Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/936E3A4E2EBD11ECA46B8714D8A014CE.roa
File:                     936E3A4E2EBD11ECA46B8714D8A014CE.roa (raw, json)
Hash identifier:          xzQ21QybTPd/4mWeCH0zsiWXNvFTvi/ef1MMeQYOvTU=
Subject key identifier:   E4:8C:27:C3:1B:D4:E8:30:2A:70:D3:2C:48:6B:BF:E2:BC:D8:BB:C2
Certificate issuer:       /CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
Certificate serial:       07
Authority key identifier: 5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/936E3A4E2EBD11ECA46B8714D8A014CE.roa
Signing time:             Sat 16 Oct 2021 20:13:50 +0000
ROA not before:           Sat 16 Oct 2021 20:13:45 +0000
ROA not after:            Sun 16 Oct 2022 20:13:45 +0000
asID:                     21003
IP address blocks:        62.240.32.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FRI/serialNumber=5BC54F284822A717B1AD4C37CF69D096CE7F6773
        Validity
            Not Before: Oct 16 20:13:45 2021 GMT
            Not After : Oct 16 20:13:45 2022 GMT
        Subject: CN=616b327e-240e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:c8:3f:b8:f1:37:6f:6a:84:b7:56:f3:ab:
                    80:f4:c2:90:2d:92:92:da:f5:b0:4e:f0:83:1a:df:
                    50:8a:cd:c9:6c:b6:8e:e9:e1:a5:0b:e0:11:ed:bb:
                    01:13:0d:38:f2:ba:c4:52:d8:37:50:48:fb:88:a5:
                    9d:e5:4c:23:c7:18:23:7f:a2:2c:5d:79:74:3e:21:
                    b4:8e:4f:e2:2d:d7:7d:77:35:f1:4d:0a:89:2c:a6:
                    39:7c:e8:c5:9d:6b:3c:26:c1:54:bd:bc:08:4d:13:
                    3e:25:f2:ec:9e:f6:9f:03:f0:66:b0:14:22:91:51:
                    35:be:5c:b7:fd:a6:f9:b2:d5:6e:33:f9:ee:09:06:
                    64:33:18:44:92:49:01:0e:f3:e8:b6:63:85:b7:49:
                    c6:27:9c:2c:16:43:3a:5c:34:03:98:5f:12:61:f4:
                    f2:3e:28:15:ea:47:a0:80:0b:74:de:82:d4:ab:05:
                    60:e9:39:cf:d2:3b:69:12:b9:bb:b1:0c:d0:03:a5:
                    0d:a8:04:2e:b8:a9:fe:8e:eb:7d:1a:67:90:8e:65:
                    0d:54:08:d6:5b:ce:7a:5e:e5:82:c3:7d:52:5e:1d:
                    ec:25:46:cc:8b:bb:09:87:7e:e5:ef:67:c4:01:e3:
                    0e:97:94:db:a7:4f:4b:ce:43:d2:9b:e5:68:c5:af:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8C:27:C3:1B:D4:E8:30:2A:70:D3:2C:48:6B:BF:E2:BC:D8:BB:C2
            X509v3 Authority Key Identifier:
                keyid:5B:C5:4F:28:48:22:A7:17:B1:AD:4C:37:CF:69:D0:96:CE:7F:67:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/W8VPKEgipxexrUw3z2nQls5_Z3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/W8VPKEgipxexrUw3z2nQls5_Z3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/70CC1DFE2A7511ECAEB63359D8A014CE/936E3A4E2EBD11ECA46B8714D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.240.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:fb:e7:b2:a5:9a:a5:9c:a3:56:f9:13:c3:01:f3:95:9e:
         f1:65:3f:07:0c:e4:20:7a:ab:b5:6d:b4:db:11:af:f4:59:18:
         cb:05:a4:fe:99:d1:fb:8c:a1:36:1f:2a:d9:4b:64:eb:d3:9c:
         d4:49:48:4c:d8:61:79:60:ca:f2:d9:0f:05:f9:aa:93:b2:53:
         55:26:b3:06:ad:f6:df:b6:fe:a5:94:cf:c8:78:a9:5d:14:25:
         37:f6:ee:1d:8c:fa:dc:4b:4f:e1:a2:14:49:09:df:80:f7:1a:
         3d:b0:9b:40:ae:85:f6:9b:96:c2:a5:4a:8f:9d:37:87:f6:7e:
         f5:fb:60:e3:87:79:6c:b9:51:83:e0:69:61:74:18:13:58:7f:
         ca:99:37:68:60:e5:42:1e:28:99:79:95:06:b8:d3:fa:f6:f3:
         93:0d:e2:a0:f6:69:5d:9c:39:b4:59:cd:74:b1:5f:a3:27:52:
         c6:7e:ef:68:be:a7:61:ee:ae:6b:bd:ca:50:7a:15:00:cd:cb:
         0b:73:f2:38:2a:0a:4f:91:c5:f8:6a:19:0a:5b:b7:d6:e1:0e:
         54:c0:f6:dc:60:1b:86:85:b9:b3:16:2b:81:94:c5:13:64:24:
         cd:4f:84:3f:39:97:d5:33:4e:21:41:6e:fd:2a:6e:3f:8f:bb:
         2d:23:42:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----