Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Fbry_ltt14ZFY_6OAuIaoe4mVCs.roa
File:                     Fbry_ltt14ZFY_6OAuIaoe4mVCs.roa (raw, json)
Hash identifier:          LfbmG4WmPc9kD0np6C1ApXaFHtMv6NgR0ZJ1nILR4+0=
Subject key identifier:   15:BA:F2:FE:5B:6D:D7:86:45:63:FE:8E:02:E2:1A:A1:EE:26:54:2B
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       3A70C21C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Fbry_ltt14ZFY_6OAuIaoe4mVCs.roa
Signing time:             Sat 01 Jan 2022 04:51:54 +0000
ROA not before:           Sat 01 Jan 2022 04:51:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42877
IP address blocks:        82.177.242.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980468252 (0x3a70c21c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:51:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15baf2fe5b6dd7864563fe8e02e21aa1ee26542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:86:0f:ea:6f:5b:05:85:87:4a:bd:36:4f:
                    aa:e0:b8:29:94:5c:cc:33:09:90:f6:f1:91:c2:75:
                    de:4d:49:78:26:8f:cf:b0:f8:cc:25:29:32:77:e9:
                    47:ae:40:fd:74:f8:b7:ec:99:55:3f:7e:94:36:6b:
                    80:10:9f:dd:e6:e9:a3:ed:c3:3e:66:95:ee:00:67:
                    75:1f:4d:1e:d6:55:41:20:b8:38:9e:9b:eb:60:3b:
                    ef:f1:e5:08:c9:65:8d:91:1e:65:41:dd:ee:25:8a:
                    1d:69:67:34:36:56:87:e0:5b:34:06:dc:b9:4e:c6:
                    07:eb:86:26:f2:87:c8:7a:31:74:aa:87:81:a9:af:
                    b0:2a:dd:3e:f1:3b:6c:91:ca:70:7e:42:70:ea:67:
                    d4:32:b5:f7:dd:89:67:d3:40:92:37:4a:b8:12:bd:
                    b0:fb:17:4e:0c:d6:26:73:80:63:c3:74:56:57:3b:
                    6e:1c:71:0d:75:28:66:7c:45:64:4f:30:69:8d:38:
                    6e:b9:9c:6a:c4:f9:fc:ee:8e:38:d7:d1:c7:5f:e1:
                    77:96:02:f1:da:68:fe:b5:3a:52:9a:19:78:1e:05:
                    69:6b:6f:85:13:92:58:64:67:2b:2b:c6:93:2a:b8:
                    f5:18:ab:b4:80:6a:fb:44:eb:fd:93:43:e4:c7:4c:
                    a3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BA:F2:FE:5B:6D:D7:86:45:63:FE:8E:02:E2:1A:A1:EE:26:54:2B
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Fbry_ltt14ZFY_6OAuIaoe4mVCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:a0:49:ad:d1:c3:be:08:78:a3:5c:10:b1:55:a4:24:b3:4b:
         bb:e7:ca:ad:ab:d0:2c:c1:e2:76:02:19:59:c6:c3:50:f3:9c:
         fc:57:4c:d2:03:fa:11:26:3d:f9:90:ce:92:ea:c2:4f:f9:db:
         6e:7b:b1:cd:fb:6b:b0:8c:14:80:90:38:e3:3f:45:80:bc:b5:
         e6:07:9c:62:82:d9:1e:0c:51:a3:36:46:4c:37:92:9b:46:a4:
         36:f1:9c:93:fb:09:16:37:06:81:9c:95:29:36:3a:82:0b:96:
         7f:d0:1f:63:c4:5d:03:d8:eb:d3:2f:cb:3d:41:f0:83:7c:2b:
         35:b4:db:93:42:2b:44:28:59:d9:90:56:97:b1:39:5d:2a:dd:
         66:d9:aa:5e:c1:dc:c1:b5:47:d0:c4:1d:fa:9a:0c:9c:c8:8e:
         98:48:ae:cc:d3:28:39:41:de:ad:c2:0f:53:a1:f4:54:a7:97:
         0d:42:80:73:57:87:23:5a:c5:31:a8:b3:f8:fc:e1:14:9b:07:
         2a:7e:08:32:ae:51:68:56:cf:8b:ee:72:5c:2c:12:d9:75:fd:
         d2:c1:d1:90:0e:55:43:25:07:33:1a:9d:0c:46:b0:8b:fc:ae:
         c7:8a:e7:0d:f5:68:1e:fb:6d:5c:fa:6e:4a:75:17:91:2f:79:
         7d:28:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----