Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/NsN9ns802FigAhG3m-ayUiygk6c.roa
File:                     NsN9ns802FigAhG3m-ayUiygk6c.roa (raw, json)
Hash identifier:          +9elKu+UIcmVHkQb80W1g4TdqPfEEbCLQsCU4OGO/L0=
Subject key identifier:   36:C3:7D:9E:CF:34:D8:58:A0:02:11:B7:9B:E6:B2:52:2C:A0:93:A7
Certificate issuer:       /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
Certificate serial:       04EA2F70
Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/NsN9ns802FigAhG3m-ayUiygk6c.roa
Signing time:             Thu 26 May 2022 14:08:13 +0000
ROA not before:           Thu 26 May 2022 14:08:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209272
IP address blocks:        81.19.136.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82456432 (0x4ea2f70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b
        Validity
            Not Before: May 26 14:08:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=36c37d9ecf34d858a00211b79be6b2522ca093a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:56:94:a1:b6:0e:01:69:af:1f:1b:f6:b6:
                    9a:94:d8:c1:86:62:77:02:9b:8a:13:5b:3b:7e:15:
                    25:e2:6e:64:62:62:08:87:d7:c2:9b:88:b4:e9:26:
                    f9:84:d8:96:62:74:6b:cb:66:09:a5:d5:e2:69:da:
                    d8:86:b6:9b:7a:4a:0b:6e:b1:34:fd:a4:5f:f4:10:
                    c1:13:8d:46:b4:75:97:41:b2:ec:77:60:76:50:6a:
                    a4:24:58:64:1c:8c:1e:8c:38:8a:5d:26:7c:58:4f:
                    7a:53:f4:42:08:51:bc:77:e2:5f:70:22:f6:1e:ab:
                    94:12:25:29:cd:05:7a:90:0e:67:84:60:1e:b6:19:
                    22:29:93:d8:8f:0b:8f:a6:8d:90:3f:01:e5:87:af:
                    0c:d5:73:88:3a:6c:10:86:17:b6:93:15:83:e8:39:
                    7b:1c:ef:e3:71:6c:69:43:82:ee:03:61:74:e6:fe:
                    b7:90:6c:c5:45:1c:9c:dd:f2:79:ed:02:f8:d4:a3:
                    53:ab:9a:0f:6c:9f:47:2a:50:cc:f3:7c:56:5a:1f:
                    fe:ad:80:53:97:48:e3:1a:d9:58:93:6b:e3:6a:9f:
                    87:6b:c9:86:03:75:d9:0e:e6:d1:18:7f:d7:20:3b:
                    b9:96:a3:c2:25:8d:b9:e9:85:98:54:fa:2a:b7:57:
                    01:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C3:7D:9E:CF:34:D8:58:A0:02:11:B7:9B:E6:B2:52:2C:A0:93:A7
            X509v3 Authority Key Identifier:
                keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/NsN9ns802FigAhG3m-ayUiygk6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:b7:55:a6:b9:29:0e:37:e7:a0:91:aa:9d:dc:1f:ea:40:
         b3:a8:60:c1:7e:1f:c6:39:de:56:d4:e8:8f:b8:e7:fc:68:2a:
         e8:44:16:b9:53:0e:33:b5:28:14:38:f0:8d:8c:f1:b8:ea:97:
         98:74:90:b7:75:27:6c:4e:fd:a9:9f:e9:a6:d9:6e:8e:3b:b4:
         1d:de:dd:37:88:99:f4:44:f8:89:6c:6b:0d:f4:3f:7a:9b:6d:
         25:99:a7:19:22:ae:bd:ee:2c:18:74:b2:07:e1:cf:af:80:41:
         f7:dd:73:06:8a:bb:16:4e:96:19:42:a9:c0:c9:dd:31:9c:4c:
         62:f7:2d:cf:ac:31:83:0f:8a:4e:fe:bb:d4:71:f4:f6:c7:fe:
         d7:4c:6c:da:f0:0f:14:f5:d7:4f:14:dd:c3:fe:b3:d8:c2:94:
         1f:89:10:22:9c:8c:6c:a1:1a:c5:46:b1:3b:a2:24:4d:01:b1:
         f7:2c:65:6f:6e:26:6a:6b:13:62:7d:9d:3c:9c:d5:af:e9:fe:
         95:ca:a5:8b:68:04:30:a9:f4:2b:39:c5:70:7b:49:e0:49:92:
         89:f2:d8:f3:51:2d:63:ba:fa:a5:0c:a3:94:4f:68:e9:35:de:
         55:72:71:18:3c:7c:2d:7f:da:be:c3:36:23:3d:57:dd:5a:d5:
         3c:21:dc:78
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBOovcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NGNlOTY0MGEzZWYyZmVhMTkzNzRhZDhmOTlmNDIzZDdhYTdjNzZiMB4XDTIyMDUy
NjE0MDgxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzZjMzdkOWVjZjM0
ZDg1OGEwMDIxMWI3OWJlNmIyNTIyY2EwOTNhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsaVpShtg4Baa8fG/a2mpTYwYZidwKbihNbO34VJeJuZGJi
CIfXwpuItOkm+YTYlmJ0a8tmCaXV4mna2Ia2m3pKC26xNP2kX/QQwRONRrR1l0Gy
7HdgdlBqpCRYZByMHow4il0mfFhPelP0QghRvHfiX3Ai9h6rlBIlKc0FepAOZ4Rg
HrYZIimT2I8Lj6aNkD8B5YevDNVziDpsEIYXtpMVg+g5exzv43FsaUOC7gNhdOb+
t5BsxUUcnN3yee0C+NSjU6uaD2yfRypQzPN8Vlof/q2AU5dI4xrZWJNr42qfh2vJ
hgN12Q7m0Rh/1yA7uZajwiWNuemFmFT6KrdXAeECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2w32ezzTYWKACEbeb5rJSLKCTpzAfBgNVHSMEGDAWgBSkzpZAo+8v6hk3
Stj5n0I9eqfHazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BNNldRS1B2TC1vWk4wclktWjlDUFhxbngycy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGIvZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8x
L05zTjluczgwMkZpZ0FoRzNtLWF5VWl5Z2s2Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIv
ZjhhNWQxLTI2MGEtNDZhNC1hOGU0LTI4M2ZlNTRhNmYyZi8xL3BNNldRS1B2TC1v
Wk4wclktWjlDUFhxbngycy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFETiDANBgkqhkiG9w0BAQsFAAOC
AQEAFnq3Vaa5KQ4356CRqp3cH+pAs6hgwX4fxjneVtToj7jn/Ggq6EQWuVMOM7Uo
FDjwjYzxuOqXmHSQt3UnbE79qZ/pptlujju0Hd7dN4iZ9ET4iWxrDfQ/epttJZmn
GSKuve4sGHSyB+HPr4BB991zBoq7Fk6WGUKpwMndMZxMYvctz6wxgw+KTv671HH0
9sf+10xs2vAPFPXXTxTdw/6z2MKUH4kQIpyMbKEaxUaxO6IkTQGx9yxlb24mamsT
Yn2dPJzVr+n+lcqli2gEMKn0KznFcHtJ4EmSifLY81EtY7r6pQyjlE9o6TXeVXJx
GDx8LX/avsM2Iz1X3VrVPCHceA==
-----END CERTIFICATE-----