Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS49581.roa
File:                     AS49581.roa (raw, json)
Hash identifier:          xzGCrzON3x5CbNysITG1Oj2bnoa4pxSuiR77TMBYxpg=
Subject key identifier:   6B:D6:70:D7:87:DD:0A:EC:A5:73:FF:89:7C:9E:BD:33:4E:5B:84:B3
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       38F458F03DBE9FDF3207794932AD494CD9172C3E
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS49581.roa
Signing time:             Wed 14 Feb 2024 15:58:38 +0000
ROA not before:           Wed 14 Feb 2024 15:53:38 +0000
ROA not after:            Wed 12 Feb 2025 15:58:38 +0000
asID:                     49581
IP address blocks:        2a13:df80:a800::/38 maxlen: 38
                          2a13:df85:b300::/40 maxlen: 40

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f4:58:f0:3d:be:9f:df:32:07:79:49:32:ad:49:4c:d9:17:2c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Feb 14 15:53:38 2024 GMT
            Not After : Feb 12 15:58:38 2025 GMT
        Subject: CN=6BD670D787DD0AECA573FF897C9EBD334E5B84B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2a:18:e5:b1:a4:e9:75:00:dc:55:9a:ec:da:
                    fb:49:e0:3a:87:4b:0c:98:96:a9:da:4f:5d:d9:87:
                    fe:0f:01:91:2b:48:c9:ae:e8:69:04:6b:c0:da:f3:
                    ab:f0:8d:9a:cd:0f:9d:08:33:5f:97:90:01:c4:ae:
                    49:82:2d:8f:60:1e:37:2c:be:85:1e:ed:49:8a:f7:
                    fe:f3:31:de:11:98:04:80:db:06:1c:22:a3:51:68:
                    d0:53:9a:a9:b3:a6:2c:10:f8:8a:c5:0a:b7:3d:c4:
                    0e:43:85:a9:96:14:4b:d4:2b:87:df:3b:d8:a0:6d:
                    65:63:19:49:9d:3c:a6:da:34:14:8a:d1:88:f9:b9:
                    40:0b:3d:30:62:ec:fc:a1:ea:c7:d5:d2:20:95:39:
                    6b:f5:ce:34:00:a3:82:ec:db:ce:d8:16:e9:4e:1d:
                    5e:60:4e:c5:5c:e4:16:b3:9f:36:f9:ce:9e:c2:27:
                    00:3f:a6:ce:89:97:9c:a4:a4:c1:ba:86:de:29:30:
                    df:87:35:c4:0a:5a:10:d8:e9:3a:37:fd:1c:2e:78:
                    30:2d:44:07:fc:a8:bf:30:34:e2:c7:81:79:b0:aa:
                    4e:80:07:f4:3b:f2:6a:62:e5:72:12:8e:63:9d:07:
                    c2:cc:5e:7c:3e:f7:da:f9:f9:86:a1:44:2d:21:f1:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:70:D7:87:DD:0A:EC:A5:73:FF:89:7C:9E:BD:33:4E:5B:84:B3
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS49581.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:a800::/38
                  2a13:df85:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:fa:d8:38:36:a9:24:cf:eb:e5:64:aa:9c:8c:8a:40:76:
         9b:90:ae:58:b3:db:d3:36:48:5e:5a:f7:6b:da:1f:93:8e:93:
         75:4e:d8:aa:49:25:3a:e2:1b:fb:dd:bd:6b:8a:a5:a3:8e:25:
         ea:10:7a:8f:1e:07:b7:14:ba:58:2f:d8:c1:41:0f:12:dc:4f:
         30:8c:9d:58:31:f4:77:49:c9:59:01:03:61:fe:21:0d:52:83:
         47:1b:57:bb:f3:b9:58:de:68:82:5d:9e:94:e3:9f:a3:d8:e2:
         a4:3a:3d:25:bb:c9:96:4d:4b:07:ca:26:46:af:ba:8d:2a:c3:
         57:4a:b3:2e:33:1b:94:f9:78:db:67:32:38:b3:a6:6e:31:de:
         9d:31:44:fc:c0:e4:aa:ab:b6:50:5d:e5:b1:13:ea:5c:b1:32:
         2f:71:3e:1e:f5:7a:0a:2c:39:98:dd:41:e1:29:7e:60:23:ed:
         43:46:a8:b4:fc:11:31:cf:c6:bc:c8:a8:33:1a:c4:b9:cf:8b:
         25:fa:1a:58:cd:ad:48:e6:24:cc:12:fc:cb:3c:7a:73:64:f6:
         2d:19:c6:f6:6a:74:e5:6c:f8:e0:c3:0d:a8:82:98:6d:97:8f:
         96:30:03:c2:6d:12:c2:62:48:6b:81:98:10:42:f1:50:50:57:
         9f:9c:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----