Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/080766112B096ABD4E830FA9891E6D744A394E71.cer
File:                     080766112B096ABD4E830FA9891E6D744A394E71.cer (raw, json)
Hash identifier:          kxI4DqpvneRvnMrP1E3dXEFk2SpWSpexyetFQUuIyhI=
Subject key identifier:   08:07:66:11:2B:09:6A:BD:4E:83:0F:A9:89:1E:6D:74:4A:39:4E:71
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       4BC720D64D837A20D94AC1015DE8BA6188AA1503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Manifest:                 rsync://rpki.co/repo/Cube/4/080766112B096ABD4E830FA9891E6D744A394E71.mft
caRepository:             rsync://rpki.co/repo/Cube/4/
Notify URL:               https://rrdp.rpki.co/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 07:22:53 +0000
Certificate not after:    Wed 23 Apr 2025 07:27:53 +0000
Subordinate resources:    AS: 151062

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c7:20:d6:4d:83:7a:20:d9:4a:c1:01:5d:e8:ba:61:88:aa:15:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Apr 24 07:22:53 2024 GMT
            Not After : Apr 23 07:27:53 2025 GMT
        Subject: CN=080766112B096ABD4E830FA9891E6D744A394E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:f4:a4:b5:05:01:a3:66:6a:cd:96:b4:9d:
                    0d:0e:32:73:a5:93:f3:94:d3:ed:5a:85:3a:ec:f2:
                    c2:53:3c:a6:74:04:a2:ee:1f:e8:cd:f1:31:b9:ee:
                    3b:e7:8b:24:1b:56:ea:cc:df:ea:5a:98:53:35:21:
                    1c:1a:d6:c1:c1:31:c2:af:77:ce:12:95:98:8c:f1:
                    a9:8a:8b:5e:60:2a:16:66:93:b6:2e:45:45:81:49:
                    10:23:31:b4:ca:75:ec:65:e3:66:76:81:db:7c:93:
                    a6:12:29:fc:e5:bc:25:34:50:f5:5a:0e:f7:4f:3e:
                    11:fd:45:4c:e7:a0:92:c6:b8:d6:5c:7b:d2:8a:d3:
                    ec:e0:46:db:12:f5:51:bb:6d:73:82:c8:64:0f:75:
                    fa:32:05:e8:8b:76:d5:70:6c:3d:2c:5d:3d:e1:16:
                    ee:02:87:0c:7a:23:c9:bc:36:3d:d4:b4:9c:3b:a6:
                    07:53:7d:54:7d:0e:94:80:c4:44:78:b3:17:ee:ac:
                    1b:d1:2b:e6:3f:c0:34:e0:3d:18:93:b2:7c:de:72:
                    24:30:1a:60:3f:09:c3:de:79:9a:2b:43:13:18:26:
                    b5:93:35:40:cd:8f:4d:0d:50:6c:fe:e4:31:ea:f6:
                    90:32:ca:13:aa:8f:a2:8c:b0:f6:3f:a1:4d:04:52:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:07:66:11:2B:09:6A:BD:4E:83:0F:A9:89:1E:6D:74:4A:39:4E:71
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/Cube/4/
                RPKI Manifest - URI:rsync://rpki.co/repo/Cube/4/080766112B096ABD4E830FA9891E6D744A394E71.mft
                RPKI Notify - URI:https://rrdp.rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  151062

    Signature Algorithm: sha256WithRSAEncryption
         25:02:a7:10:ec:44:53:7d:b7:f8:f1:44:3a:fc:08:c4:a9:d4:
         e7:57:ec:b7:2f:c4:6a:c3:a0:0a:ce:c4:cc:57:65:19:e9:a7:
         4a:e7:73:7d:82:29:91:76:b2:fa:8d:d9:71:f7:93:62:1c:1c:
         cb:79:8e:e1:ac:09:b2:45:25:96:66:fc:82:e7:a4:21:86:13:
         4c:cc:c2:2c:19:b2:3b:73:0b:8b:33:30:87:55:76:bc:7f:c6:
         52:62:37:67:b7:04:07:4c:fb:4d:de:c2:ad:e1:9e:28:04:ba:
         a2:6c:e9:40:df:7f:ae:fb:5c:82:79:4a:1c:5c:17:11:30:90:
         ad:e6:2a:76:98:4d:4c:81:05:49:57:8a:e8:fd:83:41:d3:69:
         74:89:3e:66:dc:76:09:c3:d3:40:4d:96:5b:6c:ee:02:3f:51:
         28:50:00:24:e4:f7:33:64:b5:d6:b0:1b:c5:26:a5:5c:2b:04:
         e8:c4:f5:b4:5d:a8:91:0b:70:c1:de:0d:cd:09:c5:2b:19:b7:
         84:a2:69:94:cc:8d:a1:e9:68:ce:cb:ef:d5:38:94:3c:2c:77:
         81:06:1d:22:10:12:f2:14:61:1e:4f:5a:40:11:c1:3d:fc:8c:
         0f:99:71:33:c9:43:a4:58:44:97:bd:8f:f0:69:b4:ca:1e:5b:
         29:31:07:00
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUS8cg1k2DeiDZSsEBXei6YYiqFQMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTE1OTAwMDAwMTEwLwYDVQQFEyg1OTUzQUMwQTY0
QkY5NjU2QjQ0MkQzQzMyMzEzNDM1RUNCNDk1RjY4MB4XDTI0MDQyNDA3MjI1M1oX
DTI1MDQyMzA3Mjc1M1owMzExMC8GA1UEAxMoMDgwNzY2MTEyQjA5NkFCRDRFODMw
RkE5ODkxRTZENzQ0QTM5NEU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMZw9KS1BQGjZmrNlrSdDQ4yc6WT85TT7VqFOuzywlM8pnQEou4f6M3xMbnu
O+eLJBtW6szf6lqYUzUhHBrWwcExwq93zhKVmIzxqYqLXmAqFmaTti5FRYFJECMx
tMp17GXjZnaB23yTphIp/OW8JTRQ9VoO908+Ef1FTOegksa41lx70orT7OBG2xL1
Ubttc4LIZA91+jIF6It21XBsPSxdPeEW7gKHDHojybw2PdS0nDumB1N9VH0OlIDE
RHizF+6sG9Er5j/ANOA9GJOyfN5yJDAaYD8Jw955mitDExgmtZM1QM2PTQ1QbP7k
Mer2kDLKE6qPooyw9j+hTQRSC7sCAwEAAaOCAm4wggJqMA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFAgHZhErCWq9ToMPqYkebXRKOU5xMB8GA1UdIwQYMBaAFFlT
rApkv5ZWtELTwyMTQ17LSV9oMA4GA1UdDwEB/wQEAwIBBjCBhQYDVR0fBH4wfDB6
oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4
YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzMvNTk1M0FDMEE2NEJGOTY1NkI0
NDJEM0MzMjMxMzQzNUVDQjQ5NUY2OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsG
AQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VG
NTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvV1ZPc0NtU19sbGEwUXRQREl4TkRY
c3RKWDJnLmNlcjCByAYIKwYBBQUHAQsEgbswgbgwKAYIKwYBBQUHMAWGHHJzeW5j
Oi8vcnBraS5jby9yZXBvL0N1YmUvNC8wVAYIKwYBBQUHMAqGSHJzeW5jOi8vcnBr
aS5jby9yZXBvL0N1YmUvNC8wODA3NjYxMTJCMDk2QUJENEU4MzBGQTk4OTFFNkQ3
NDRBMzk0RTcxLm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6Ly9ycmRwLnJwa2kuY28v
cnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAk4WMA0GCSqGSIb3DQEBCwUAA4IBAQAl
AqcQ7ERTfbf48UQ6/AjEqdTnV+y3L8Rqw6AKzsTMV2UZ6adK53N9gimRdrL6jdlx
95NiHBzLeY7hrAmyRSWWZvyC56QhhhNMzMIsGbI7cwuLMzCHVXa8f8ZSYjdntwQH
TPtN3sKt4Z4oBLqibOlA33+u+1yCeUocXBcRMJCt5ip2mE1MgQVJV4ro/YNB02l0
iT5m3HYJw9NATZZbbO4CP1EoUAAk5PczZLXWsBvFJqVcKwToxPW0XaiRC3DB3g3N
CcUrGbeEommUzI2h6WjOy+/VOJQ8LHeBBh0iEBLyFGEeT1pAEcE9/IwPmXEzyUOk
WESXvY/wabTKHlspMQcA
-----END CERTIFICATE-----