Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/BGnT-o6FlPYYOlGbdKzXKWlteOM.roa
File:                     BGnT-o6FlPYYOlGbdKzXKWlteOM.roa (raw, json)
Hash identifier:          6IS+3TqyqKp5zeuc2QbJBk00tifdyz0DWTbL5LLi0rQ=
Subject key identifier:   04:69:D3:FA:8E:85:94:F6:18:3A:51:9B:74:AC:D7:29:69:6D:78:E3
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       ACD260
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/BGnT-o6FlPYYOlGbdKzXKWlteOM.roa
Signing time:             Fri 06 May 2022 06:11:00 +0000
ROA not before:           Fri 06 May 2022 06:11:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        160.19.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11326048 (0xacd260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: May  6 06:11:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0469d3fa8e8594f6183a519b74acd729696d78e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1d:14:8a:fb:ae:92:1e:ec:e7:27:25:2c:a3:
                    57:a1:23:40:43:0d:96:23:4b:c2:cd:75:5b:9a:c2:
                    40:a9:05:55:0a:a3:ef:cc:83:71:43:c5:37:ef:4b:
                    1b:fc:f4:1a:0a:97:7f:06:bd:e0:8a:3f:25:2a:04:
                    fa:d6:8d:47:e7:ae:fc:d0:a1:8e:f5:dd:25:dc:7c:
                    ac:fc:20:8c:44:e9:68:92:af:cc:9c:ff:28:1a:82:
                    80:b6:fd:db:c5:91:4a:72:c8:b8:6b:e7:92:3c:b6:
                    6c:ca:38:26:60:20:ff:c6:d7:85:df:ad:ae:5a:7f:
                    f5:71:b7:2d:d0:f0:4e:07:ad:cf:7b:3f:58:92:54:
                    d7:a8:45:98:2a:64:46:86:11:24:39:1f:dc:04:01:
                    71:d9:09:6a:cb:1e:90:e6:63:6d:0e:d3:75:33:9e:
                    f2:a4:67:e1:9f:b2:89:c5:92:68:3b:a2:3a:8f:a3:
                    51:9d:42:74:a6:5a:4c:c5:d1:62:a1:c6:8e:ce:69:
                    64:84:12:24:99:42:47:23:9e:5c:e8:8c:80:b9:da:
                    ec:4b:e7:8c:93:07:e8:92:75:c9:15:eb:dd:3d:0a:
                    ca:ea:f5:21:85:45:46:16:ba:c2:95:9f:8d:7a:ac:
                    6e:58:2f:5f:99:47:57:bd:95:6f:54:33:88:e9:69:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:69:D3:FA:8E:85:94:F6:18:3A:51:9B:74:AC:D7:29:69:6D:78:E3
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/BGnT-o6FlPYYOlGbdKzXKWlteOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:96:c3:b2:a2:e3:32:37:57:ff:e9:0c:f0:74:d8:58:1b:
         c7:34:8b:17:6c:d3:5b:26:8b:c5:ab:33:88:dd:84:e2:d6:b9:
         31:8d:0f:dc:5a:78:b3:8a:15:ca:ea:3d:94:31:65:74:f5:72:
         e8:dd:e1:0a:e3:ab:9b:d8:6c:c0:9d:53:99:26:0b:a5:bf:cb:
         70:f3:6d:f5:4e:72:09:8c:d9:b6:ca:38:87:25:ed:16:8e:f2:
         4a:fd:75:4d:52:c4:06:58:e2:6b:5d:bd:06:06:e6:3b:22:a4:
         42:23:cd:89:3d:ff:15:5f:ea:a1:1f:a2:a0:94:46:f8:d8:7c:
         60:e7:39:62:77:c3:23:c7:eb:8b:4f:a7:ee:6b:bc:6a:9b:92:
         29:81:98:12:ae:16:1a:a6:0f:7b:24:1e:e7:c4:a2:b4:6c:19:
         ad:c2:f4:1d:6d:95:97:0a:d3:c1:c2:58:76:b9:56:6d:0f:54:
         d0:58:ea:1b:d5:ff:b6:a7:a4:27:0e:ab:3f:36:ff:1e:bc:d5:
         ea:0f:0a:a1:0d:e2:46:b5:08:44:76:67:c1:6d:75:42:ab:31:
         5c:da:ac:a8:29:8d:f7:7e:3b:ec:57:b7:42:0e:ef:8f:7c:34:
         52:e6:d0:ea:ed:0d:6b:42:21:f6:ab:7a:b5:25:1c:ca:a6:12:
         cb:05:07:96
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAKzSYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YjE0NWE4YmRmMmJjYTE1MGYyNWVkNTRhMjc3YjhmNjUzZWZkYjNlMB4XDTIyMDUw
NjA2MTEwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDQ2OWQzZmE4ZTg1
OTRmNjE4M2E1MTliNzRhY2Q3Mjk2OTZkNzhlMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMdFIr7rpIe7OcnJSyjV6EjQEMNliNLws11W5rCQKkFVQqj
78yDcUPFN+9LG/z0GgqXfwa94Io/JSoE+taNR+eu/NChjvXdJdx8rPwgjETpaJKv
zJz/KBqCgLb928WRSnLIuGvnkjy2bMo4JmAg/8bXhd+trlp/9XG3LdDwTgetz3s/
WJJU16hFmCpkRoYRJDkf3AQBcdkJassekOZjbQ7TdTOe8qRn4Z+yicWSaDuiOo+j
UZ1CdKZaTMXRYqHGjs5pZIQSJJlCRyOeXOiMgLna7EvnjJMH6JJ1yRXr3T0Kyur1
IYVFRha6wpWfjXqsblgvX5lHV72Vb1QziOlpQucCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQEadP6joWU9hg6UZt0rNcpaW144zAfBgNVHSMEGDAWgBQrFFqL3yvKFQ8l
7VSid7j2U+/bPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0t4UmFpOThyeWhVUEplMVVvbmU0OWxQdjJ6NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjEvMGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8x
L0JHblQtbzZGbFBZWU9sR2JkS3pYS1dsdGVPTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEv
MGQ4YzhmLWZmMmMtNGRhOC1iNDQzLTMwNDBiZWQzY2NjZC8xL0t4UmFpOThyeWhV
UEplMVVvbmU0OWxQdjJ6NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaATXjANBgkqhkiG9w0BAQsFAAOC
AQEACx2Ww7Ki4zI3V//pDPB02FgbxzSLF2zTWyaLxasziN2E4ta5MY0P3Fp4s4oV
yuo9lDFldPVy6N3hCuOrm9hswJ1TmSYLpb/LcPNt9U5yCYzZtso4hyXtFo7ySv11
TVLEBljia129BgbmOyKkQiPNiT3/FV/qoR+ioJRG+Nh8YOc5YnfDI8fri0+n7mu8
apuSKYGYEq4WGqYPeyQe58SitGwZrcL0HW2VlwrTwcJYdrlWbQ9U0FjqG9X/tqek
Jw6rPzb/HrzV6g8KoQ3iRrUIRHZnwW11QqsxXNqsqCmN93477Fe3Qg7vj3w0UubQ
6u0Na0Ih9qt6tSUcyqYSywUHlg==
-----END CERTIFICATE-----