Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763353a3a2f33322d3332203d3e203439353831.roa
File:                     326131343a3763353a3a2f33322d3332203d3e203439353831.roa (raw, json)
Hash identifier:          ZilNXNK0u/abFt5iDgcblDva77QGMjQiqvfWLmscqVc=
Subject key identifier:   1B:56:2E:D8:10:15:CC:D5:FE:01:D8:C0:7E:C2:A9:91:CF:0A:FE:5D
Certificate issuer:       /CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
Certificate serial:       7759D588468470335AD13EE20E519A7823F6B84F
Authority key identifier: DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763353a3a2f33322d3332203d3e203439353831.roa
Signing time:             Tue 28 May 2024 17:42:45 +0000
ROA not before:           Tue 28 May 2024 17:37:45 +0000
ROA not after:            Tue 27 May 2025 17:42:45 +0000
asID:                     49581
IP address blocks:        2a14:7c5::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:59:d5:88:46:84:70:33:5a:d1:3e:e2:0e:51:9a:78:23:f6:b8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCBE045BEA897D29CB12799DC38EF74D039B28EE
        Validity
            Not Before: May 28 17:37:45 2024 GMT
            Not After : May 27 17:42:45 2025 GMT
        Subject: CN=1B562ED81015CCD5FE01D8C07EC2A991CF0AFE5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b0:2c:84:aa:ed:68:64:70:c7:21:0e:27:72:
                    ed:8a:bc:ae:47:21:bc:5f:b4:6d:f1:9d:41:9a:a9:
                    77:b1:b8:fa:a7:e4:ba:d4:45:1b:e7:b9:42:2e:97:
                    d0:14:ff:c2:b6:5e:75:ad:3f:cd:6f:fb:25:0f:15:
                    18:75:6e:bf:e6:5b:be:d5:88:97:17:96:0e:d1:b9:
                    07:69:3e:1a:16:b2:f3:63:a1:76:43:d7:1d:86:81:
                    b7:cf:8a:35:87:a5:83:4c:c0:68:46:87:be:c2:3a:
                    3c:5b:5b:4f:cb:6e:d5:ff:43:1d:51:64:3b:25:ed:
                    8c:00:38:3a:21:0f:cc:bd:5c:0c:f8:2a:b6:4b:55:
                    f5:e3:fc:cf:44:32:38:81:1f:59:2b:9f:cb:44:23:
                    a1:0e:9b:28:86:5f:25:3a:82:f6:d2:64:5e:b2:4b:
                    05:e0:47:47:4e:d1:b3:07:fc:1d:45:bb:3f:67:e2:
                    40:5b:94:ef:74:6e:9c:0d:6b:45:80:ca:6a:95:0a:
                    8e:d1:ae:08:9e:c9:d5:dc:df:0c:bc:d5:4b:58:e4:
                    be:86:51:ef:de:43:c3:83:19:96:a4:4c:3a:c4:59:
                    55:c0:9d:1f:35:38:1e:0a:4b:ab:f2:e3:f6:19:52:
                    f9:01:41:f4:f4:21:f9:e5:0e:bf:2e:0b:66:da:6a:
                    db:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:2E:D8:10:15:CC:D5:FE:01:D8:C0:7E:C2:A9:91:CF:0A:FE:5D
            X509v3 Authority Key Identifier:
                keyid:DC:BE:04:5B:EA:89:7D:29:CB:12:79:9D:C3:8E:F7:4D:03:9B:28:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/DCBE045BEA897D29CB12799DC38EF74D039B28EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-proxiflare/1/326131343a3763353a3a2f33322d3332203d3e203439353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:d9:9d:f2:20:25:9b:4e:fd:ff:f7:b9:ad:36:75:9f:43:
         a1:58:a1:61:1b:5c:1a:c9:15:68:13:fe:59:04:b0:39:a7:a6:
         da:25:fb:e0:c1:c7:08:20:21:82:82:17:53:d1:b8:8d:b7:cd:
         f2:b1:7b:c2:d1:95:78:aa:2f:34:7d:88:1f:ec:01:41:27:33:
         bb:d2:e7:2f:4e:19:43:9d:ca:ba:f0:b6:62:d8:64:61:03:e2:
         82:0a:3b:b5:60:82:f5:77:ff:fc:67:37:22:3a:eb:b4:62:f4:
         21:ed:41:b4:3e:9d:5b:3a:86:f9:83:0a:05:c3:b1:a2:7d:df:
         29:66:35:60:a2:ac:2a:55:b2:68:a6:a2:f3:e2:79:f3:ee:a9:
         da:d8:41:d2:48:f6:ba:56:62:ee:6c:3b:bc:0a:a9:61:ab:11:
         d9:99:93:3d:13:3f:35:ce:c0:8b:b5:ef:b8:84:98:05:2f:c4:
         a5:a5:b4:f7:d2:e7:83:d6:da:c5:84:2a:94:98:a2:f0:2e:db:
         ce:c7:9c:2d:6f:9c:13:4c:03:db:e5:10:b9:84:58:c7:2d:c9:
         69:0f:52:f3:66:af:b6:0e:68:82:c8:3f:c1:e1:15:41:ac:2b:
         e5:24:ea:09:57:39:a4:3d:89:29:52:35:ce:f1:96:a9:f3:94:
         05:be:c3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----