Route Origin Authorization

$ rpki-client -vvf rpki.multacom.com/repo/MCOMCA/0/3137332e38322e32372e302f32342d3234203d3e20333935363831.roa
File:                     3137332e38322e32372e302f32342d3234203d3e20333935363831.roa (raw, json)
Hash identifier:          VkZ9H/OW6qm2Ms7Eh6bGhRFWICdjaItXwmAqLkiE2Uw=
Subject key identifier:   27:B9:38:84:CC:5F:8D:07:FA:C2:9E:0B:5D:42:A9:D2:A9:46:B0:50
Certificate issuer:       /CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
Certificate serial:       3E16C7210933729234B40FDEEF5DE35E8CB5CA
Authority key identifier: DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer
Subject info access:      rsync://rpki.multacom.com/repo/MCOMCA/0/3137332e38322e32372e302f32342d3234203d3e20333935363831.roa
Signing time:             Wed 24 May 2023 19:00:00 +0000
ROA not before:           Wed 24 May 2023 18:55:00 +0000
ROA not after:            Fri 24 May 2024 19:00:00 +0000
asID:                     395681
IP address blocks:        173.82.27.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:16:c7:21:09:33:72:92:34:b4:0f:de:ef:5d:e3:5e:8c:b5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1
        Validity
            Not Before: May 24 18:55:00 2023 GMT
            Not After : May 24 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ec:c2:77:87:f1:b7:5d:ee:41:19:40:dd:9e:
                    e3:e1:61:06:c0:dd:c2:91:ef:13:ce:ae:67:ba:de:
                    ae:80:13:a0:89:4e:26:02:7e:dc:77:8f:20:20:dc:
                    48:73:35:2c:65:a6:79:14:46:4a:44:64:fd:f8:f2:
                    76:99:28:2a:87:63:a9:5b:e6:da:df:a0:5c:ec:27:
                    af:8d:0b:92:a0:2e:d8:25:e2:e8:04:75:90:5e:f3:
                    6a:d4:f8:f7:24:6d:ce:c9:6b:b9:33:19:14:35:46:
                    f1:79:56:4c:f4:df:20:41:b0:5e:68:17:6e:14:df:
                    f4:3a:60:82:96:a6:a5:bb:c8:52:79:0f:c4:e6:14:
                    a4:a4:95:44:c2:32:5e:48:54:f9:15:d3:93:f1:db:
                    80:42:19:8d:42:74:9e:fe:8c:02:75:fe:c0:65:bb:
                    ac:77:d3:b7:eb:f7:b4:ab:01:c3:69:b8:13:ce:39:
                    1e:63:47:d4:56:cf:d1:87:8f:58:53:2b:b3:c0:1a:
                    3e:b9:52:68:07:7f:3c:36:82:f4:7e:c4:90:f2:f6:
                    98:44:ed:40:fd:90:ca:f3:14:d5:c9:f3:55:9c:4f:
                    0c:1c:a3:4e:81:38:18:2e:21:f1:94:6d:58:73:d5:
                    57:37:82:d0:37:64:1d:dc:56:fe:d6:44:b1:cf:fd:
                    bb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:38:84:CC:5F:8D:07:FA:C2:9E:0B:5D:42:A9:D2:A9:46:B0:50
            X509v3 Authority Key Identifier:
                keyid:DC:62:76:88:30:B1:B1:20:17:16:51:8D:5E:6A:65:25:B0:23:59:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.multacom.com/repo/MCOMCA/0/DC62768830B1B1201716518D5E6A6525B023593A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4dc07ba6-d360-4ca5-a860-62e4e5476f84/8901940597c48f785a91d7212b9ca71b1f1f20ade68568e5b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.multacom.com/repo/MCOMCA/0/3137332e38322e32372e302f32342d3234203d3e20333935363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:5a:64:64:69:16:d0:01:50:08:6f:d2:8f:f9:6e:cb:e2:a3:
         04:fe:76:fd:4d:2a:b6:6d:92:1e:82:a0:08:5f:fe:ac:91:b3:
         e9:cb:6c:7d:b5:ae:ef:ee:00:18:f8:da:7e:3a:7d:35:bc:aa:
         ae:5a:28:b1:85:08:ba:cb:27:6f:c7:18:2f:15:60:ca:93:d1:
         54:e1:9b:5f:c4:b1:04:3d:6e:04:e4:32:d9:4a:ab:7f:5f:18:
         f8:1c:74:cd:4e:c9:b6:4d:fa:02:19:32:a8:31:85:df:02:2f:
         46:e4:91:b9:15:b2:41:5d:31:0e:96:af:77:f8:5e:63:fd:62:
         f9:95:2e:89:a9:91:d0:f3:1f:f6:0c:82:9c:ee:74:50:6b:e6:
         d3:5c:bc:28:d0:c8:12:f0:37:2f:55:2d:95:1b:32:87:74:d1:
         f1:93:58:07:72:d7:80:17:f8:ba:79:56:12:77:3c:a7:53:d6:
         06:f7:e7:02:50:f7:d6:20:e8:0b:a7:dc:03:27:f4:af:f1:44:
         cc:2f:59:a6:20:88:21:59:3f:08:30:95:da:2d:cc:9c:d1:11:
         8b:ad:54:d9:a8:e7:dc:99:66:50:81:6d:e9:17:77:0f:7e:4c:
         06:1f:7b:9d:bd:bc:18:a3:5e:33:4d:fa:67:4f:97:79:34:bf:
         19:6a:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----