Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/95211df0cb125a4386a36d0089d8e80cc4d19db7.roa
File:                     95211df0cb125a4386a36d0089d8e80cc4d19db7.roa (raw, json)
Hash identifier:          /U/DZW5bJmXxoiJQ95ONhYKyuMD6xi9gWaN7iUJ9gpg=
Subject key identifier:   7B:53:2A:51:8B:1A:AF:BB:4E:2A:87:68:6B:A9:4D:8F:74:AC:65:DA
Certificate issuer:       /CN=d50c5ae3ec63b7e74bff21cdf59603cefcd04c73
Certificate serial:       10EC73
Authority key identifier: 49:64:6F:B8:20:CE:AA:3B:B2:04:1E:D8:B0:16:A7:A7:5B:63:9D:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/95211df0cb125a4386a36d0089d8e80cc4d19db7.roa
Signing time:             Thu 08 Sep 2022 16:24:42 +0000
ROA not before:           Thu 08 Sep 2022 16:11:39 +0000
ROA not after:            Sun 08 Sep 2024 16:11:39 +0000
asID:                     52326
IP address blocks:        190.151.138.0/23 maxlen: 24
                          190.151.140.0/22 maxlen: 24
                          190.151.138.0/24 maxlen: 24
                          190.151.139.0/24 maxlen: 24
                          190.151.140.0/24 maxlen: 24
                          190.151.141.0/24 maxlen: 24
                          190.151.143.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109107 (0x10ec73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50c5ae3ec63b7e74bff21cdf59603cefcd04c73
        Validity
            Not Before: Sep  8 16:11:39 2022 GMT
            Not After : Sep  8 16:11:39 2024 GMT
        Subject: CN=95211df0cb125a4386a36d0089d8e80cc4d19db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fd:fb:7b:82:7c:16:f5:6b:c3:83:ba:ed:87:
                    09:91:aa:e5:53:96:eb:95:38:3f:b6:06:33:74:f1:
                    a4:b1:69:91:10:b8:7c:82:08:5d:37:b2:c0:35:c9:
                    72:46:74:2c:74:97:88:63:e7:97:85:4a:95:60:03:
                    0c:a2:31:0a:2b:a8:da:8f:1f:8f:1d:b9:f0:1c:e4:
                    88:e5:f2:87:a5:20:30:af:da:2d:3f:51:ba:52:65:
                    b0:5d:e0:5d:c3:a9:e3:dd:dc:8e:fc:b8:86:10:8e:
                    e2:65:17:56:fe:84:a5:68:63:37:26:c6:10:4b:2b:
                    4c:fb:f1:32:b7:f8:3f:57:7c:8d:7e:81:8b:62:e0:
                    15:31:42:32:e9:91:eb:13:fc:5b:1c:05:a7:b7:93:
                    86:4a:71:32:8b:28:0e:9e:d1:29:5f:2e:3f:13:71:
                    01:27:d8:27:ed:92:67:8a:38:2d:50:33:a5:8d:ea:
                    8b:77:33:9a:10:27:fd:9a:a3:a5:55:d2:e0:69:39:
                    87:f0:91:19:17:79:64:43:2e:8f:53:30:90:c2:de:
                    85:48:9d:26:8b:3d:11:7f:cf:cf:7d:d4:57:20:bf:
                    06:74:56:00:6d:ab:2c:b9:8a:3d:de:80:2d:23:40:
                    56:dc:8d:4c:9a:ea:e3:9f:61:67:29:0b:8c:5a:dd:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:2A:51:8B:1A:AF:BB:4E:2A:87:68:6B:A9:4D:8F:74:AC:65:DA
            X509v3 Authority Key Identifier:
                keyid:49:64:6F:B8:20:CE:AA:3B:B2:04:1E:D8:B0:16:A7:A7:5B:63:9D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/95211df0cb125a4386a36d0089d8e80cc4d19db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50ca7657-eafb-4624-a180-b6f1dd442960/d50c5ae3ec63b7e74bff21cdf59603cefcd04c73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.138.0-190.151.143.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:4f:1f:d9:62:d0:a0:59:b8:12:54:f0:14:94:65:c8:db:
         8d:e4:f1:54:4f:ba:d2:30:35:ad:39:b6:df:75:25:e7:2a:86:
         2e:a5:e7:ee:d9:15:5c:90:65:f2:87:fd:b3:64:b1:de:17:47:
         39:f6:fc:ee:1c:d7:c1:4d:4e:2f:3b:35:4c:af:62:7f:8e:db:
         3d:87:9b:62:06:92:0f:18:15:80:3e:84:26:cc:54:14:ca:41:
         8b:64:01:77:e3:b3:b5:d0:74:41:60:07:81:8b:7d:02:03:d4:
         ae:92:49:27:03:40:47:d5:b9:40:72:ab:d7:17:5d:c4:8a:a0:
         50:2d:8c:64:1d:22:9c:1d:48:c0:17:9e:1c:5c:02:9b:1e:40:
         e5:9e:10:a7:ae:c6:29:c9:5d:43:6d:39:bd:f8:b0:b3:0b:e0:
         24:17:3c:31:75:45:58:62:1c:4b:74:aa:07:b8:c6:ae:6b:09:
         3f:21:fd:ce:6f:b2:d5:d4:6a:71:34:75:03:c9:02:c2:78:07:
         d8:30:e0:e5:d5:cc:13:5e:a6:2e:9e:10:1d:09:ed:e6:68:34:
         05:de:00:f5:c2:ad:d3:e3:74:ba:ec:2d:d2:f0:9c:b0:a5:5f:
         99:46:40:37:24:79:36:2b:d7:d6:f9:ca:65:1e:a7:57:23:37:
         78:b8:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----