Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/E186612E578B11ECB9B623E65A40D577.roa
File:                     E186612E578B11ECB9B623E65A40D577.roa (raw, json)
Hash identifier:          wjCGNxa3By8NQncW2owoKWNE/lA7I7aNNJu9E5B2Z50=
Subject key identifier:   06:EB:6E:60:96:FD:19:6C:C1:4E:12:B4:DD:13:30:4C:A6:FC:1C:B1
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0A50
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/E186612E578B11ECB9B623E65A40D577.roa
Signing time:             Tue 07 Dec 2021 18:31:24 +0000
ROA not before:           Tue 07 Dec 2021 18:31:19 +0000
ROA not after:            Sun 07 Dec 2031 18:31:19 +0000
asID:                     33764
IP address blocks:        2001:42d0:7a00::/44 maxlen: 44

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Dec  7 18:31:19 2021 GMT
            Not After : Dec  7 18:31:19 2031 GMT
        Subject: CN=61afa87c-d1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:cc:fc:eb:56:50:fc:4b:a5:6f:e6:9f:28:
                    5b:a1:76:7a:7c:62:89:1d:0d:62:e4:7c:40:fa:35:
                    a1:4b:e6:fc:ee:cc:ce:aa:c1:ba:e9:85:eb:0f:15:
                    40:53:1c:50:6d:6f:09:a8:79:b9:ee:1b:14:4f:7b:
                    67:0a:ed:96:d6:4d:b2:f2:f8:73:52:71:e8:79:ca:
                    59:43:dd:0c:af:a4:4a:84:28:f1:6c:54:d0:91:80:
                    a1:12:b5:99:52:44:6b:b7:a5:63:ea:8a:18:b9:27:
                    14:cf:2b:64:3c:42:d8:8f:1e:1b:9c:1a:e3:12:41:
                    f1:4d:63:f2:28:e1:84:af:71:3d:60:a9:f0:ea:23:
                    d1:33:52:f0:05:88:85:a8:e3:0f:27:a8:67:8a:f2:
                    17:f2:4e:85:b6:e8:7d:72:a5:bf:07:16:ba:a3:51:
                    b1:6c:37:47:c2:30:c5:e8:c1:23:55:e7:6a:ad:d9:
                    ff:cc:37:29:65:e0:fe:55:ce:c0:e3:87:89:a2:c0:
                    e2:9e:dc:19:9a:78:bf:b6:ce:f6:30:18:e5:d6:6a:
                    dc:3b:ec:4e:33:be:ba:22:18:9a:92:4c:b2:aa:0b:
                    94:ff:a0:fe:7f:72:41:1c:38:9a:d4:1f:27:80:12:
                    e6:7b:86:68:67:81:d5:b9:dc:31:1b:8d:79:13:ad:
                    54:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EB:6E:60:96:FD:19:6C:C1:4E:12:B4:DD:13:30:4C:A6:FC:1C:B1
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/E186612E578B11ECB9B623E65A40D577.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:42d0:7a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:09:dd:17:8d:99:36:b2:8d:98:05:52:5a:35:52:e0:99:b2:
         41:76:cf:67:e5:59:ee:97:d3:76:6d:ef:4e:ec:0a:22:36:e3:
         72:9f:9f:9e:1b:35:36:a4:32:64:09:c2:f1:f6:a5:05:45:b3:
         c4:6c:0a:f6:9f:16:b7:c1:7a:e9:13:5a:ff:f7:51:10:a2:d8:
         19:82:b0:83:a7:b0:6d:65:6b:a2:12:ce:91:2f:32:62:04:d2:
         50:2b:d8:ff:1c:c0:89:b0:93:66:0d:d1:c2:dc:19:ed:49:99:
         a8:f0:7f:b4:e7:cf:82:10:4b:3b:5d:4e:0f:68:c6:a3:25:93:
         c0:4c:b5:b1:7c:b5:91:3e:d7:01:c1:82:7f:f7:2e:4f:dd:0a:
         07:4e:26:8b:b7:91:35:aa:04:d3:8c:30:e3:6c:f9:03:13:ca:
         ad:af:21:c5:2e:75:d0:54:5a:e1:4b:43:85:16:2f:08:a9:52:
         66:13:9f:82:ca:97:8b:78:16:b9:9a:a9:d1:a8:1e:69:c1:be:
         69:47:0d:63:53:e4:c1:a5:66:13:03:d7:b0:fc:de:fa:8c:16:
         57:b4:dd:0b:ef:78:49:de:fc:26:5f:96:80:a3:a5:6b:53:2e:
         eb:9e:db:13:43:1f:93:b6:52:2b:35:3c:46:33:9d:27:50:8c:
         34:01:98:d8
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICClAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzREMjJBRjExMC8GA1UEBRMoOEQwMUQ4MDhFODk3NzQ1NDNERTIyRDBEQTg0NDM3
OEVDRUE4QkI5QjAeFw0yMTEyMDcxODMxMTlaFw0zMTEyMDcxODMxMTlaMBgxFjAU
BgNVBAMMDTYxYWZhODdjLWQxYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl2Mz861ZQ/Eulb+afKFuhdnp8YokdDWLkfED6NaFL5vzuzM6qwbrphesP
FUBTHFBtbwmoebnuGxRPe2cK7ZbWTbLy+HNSceh5yllD3QyvpEqEKPFsVNCRgKES
tZlSRGu3pWPqihi5JxTPK2Q8QtiPHhucGuMSQfFNY/Io4YSvcT1gqfDqI9EzUvAF
iIWo4w8nqGeK8hfyToW26H1ypb8HFrqjUbFsN0fCMMXowSNV52qt2f/MNyll4P5V
zsDjh4miwOKe3BmaeL+2zvYwGOXWatw77E4zvroiGJqSTLKqC5T/oP5/ckEcOJrU
HyeAEuZ7hmhngdW53DEbjXkTrVTxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUButu
YJb9GWzBThK03RMwTKb8HLEwHwYDVR0jBBgwFoAUjQHYCOiXdFQ94i0NqEQ3js6o
u5swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4QUVBMjI4L2pRSFlD
T2lYZEZROTRpME5xRVEzanM2b3U1cy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pRSFlDT2lYZEZROTRpME5xRVEzanM2b3U1cy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM0RDIyLzFENUY3QzI2MDQ3MzExRTU4MEMxOEEwNkY4
QUVBMjI4L0UxODY2MTJFNTc4QjExRUNCOUI2MjNFNjVBNDBENTc3LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQgAULQegAwDQYJKoZIhvcN
AQELBQADggEBAG8J3ReNmTayjZgFUlo1UuCZskF2z2flWe6X03Zt707sCiI243Kf
n54bNTakMmQJwvH2pQVFs8RsCvafFrfBeukTWv/3URCi2BmCsIOnsG1la6ISzpEv
MmIE0lAr2P8cwImwk2YN0cLcGe1Jmajwf7Tnz4IQSztdTg9oxqMlk8BMtbF8tZE+
1wHBgn/3Lk/dCgdOJou3kTWqBNOMMONs+QMTyq2vIcUuddBUWuFLQ4UWLwipUmYT
n4LKl4t4FrmaqdGoHmnBvmlHDWNT5MGlZhMD17D83vqMFle03QvveEne/CZfloCj
pWtTLuue2xNDH5O2Uis1PEYznSdQjDQBmNg=
-----END CERTIFICATE-----