Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/8p9K2M19j3Sr-EznGes3wGox_iY.roa
File:                     8p9K2M19j3Sr-EznGes3wGox_iY.roa (raw, json)
Hash identifier:          IV/bu1C55OHmzgYrL/rhRVCqSd5ZLNsNLSKKmy5h1KE=
Subject key identifier:   F2:9F:4A:D8:CD:7D:8F:74:AB:F8:4C:E7:19:EB:37:C0:6A:31:FE:26
Certificate issuer:       /CN=b6307b828ffc8515634ce97ae504f5a529cd2701
Certificate serial:       E58744
Authority key identifier: B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/8p9K2M19j3Sr-EznGes3wGox_iY.roa
Signing time:             Sat 01 Jan 2022 03:57:13 +0000
ROA not before:           Sat 01 Jan 2022 03:57:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        2a11:2a47::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15042372 (0xe58744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6307b828ffc8515634ce97ae504f5a529cd2701
        Validity
            Not Before: Jan  1 03:57:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f29f4ad8cd7d8f74abf84ce719eb37c06a31fe26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bd:0c:b9:c7:24:5c:3f:aa:44:50:27:e0:93:
                    38:e1:2b:d8:54:3f:bf:bd:8f:18:8c:a2:b8:72:3c:
                    d5:7e:9e:6a:d2:20:31:8b:6b:87:26:80:9e:5d:64:
                    57:c9:ef:39:79:30:04:02:2f:0d:1f:f4:09:66:40:
                    1c:45:d0:3b:71:0e:7f:e0:1e:1a:e6:77:16:ce:59:
                    86:83:93:62:c8:d2:c0:88:da:bd:84:f1:21:3a:47:
                    b4:f0:ba:6c:23:c5:2f:56:e9:90:98:a4:77:47:34:
                    10:94:e0:73:00:6b:a8:42:00:3e:2e:da:85:8b:e1:
                    36:c1:48:59:b2:f8:9c:5d:07:15:61:52:e1:a3:f0:
                    a8:8e:84:09:4a:9c:69:39:ee:55:c6:8c:dc:88:44:
                    d7:c8:23:2a:09:a3:cc:b4:dc:b7:0d:de:5d:68:50:
                    e4:c9:fd:a3:49:fe:35:90:1d:b6:da:89:f6:fb:e9:
                    ab:1c:5c:83:db:a5:7f:45:6e:36:99:62:20:c3:5c:
                    65:d4:f8:60:49:72:af:56:f0:a7:f2:34:ae:1a:31:
                    cf:4e:6d:c2:95:aa:e0:5c:02:26:b6:eb:69:3b:67:
                    bd:0e:90:fd:58:5a:ed:e3:e6:8e:8b:f5:57:5e:13:
                    29:b5:ce:ed:65:bc:46:40:5f:f8:74:41:fc:ce:7b:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9F:4A:D8:CD:7D:8F:74:AB:F8:4C:E7:19:EB:37:C0:6A:31:FE:26
            X509v3 Authority Key Identifier:
                keyid:B6:30:7B:82:8F:FC:85:15:63:4C:E9:7A:E5:04:F5:A5:29:CD:27:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjB7go_8hRVjTOl65QT1pSnNJwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/8p9K2M19j3Sr-EznGes3wGox_iY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/00fe6e-1476-4288-8d15-9d4ae9d00c2e/1/tjB7go_8hRVjTOl65QT1pSnNJwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:2a47::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:bc:1a:77:45:4f:00:a7:c6:0c:cc:58:cb:4c:be:52:97:d5:
         9d:b2:50:e1:e3:36:66:66:48:e3:f3:97:b4:ee:3c:d9:62:fb:
         be:4e:ef:2e:b4:94:c8:3a:76:97:03:d9:95:2b:68:fe:55:04:
         75:7d:b1:a1:ba:f0:29:7c:fb:98:64:a5:d4:3f:e0:91:fe:b4:
         08:74:fd:4c:08:9b:1b:08:d6:72:8e:64:03:5d:78:b3:4b:48:
         38:f3:49:18:9a:da:53:f2:6c:43:64:b0:6b:2c:4c:bc:0a:70:
         8b:d3:a4:50:af:44:ef:9c:8e:ff:62:1d:3f:1b:a7:21:92:97:
         fd:d4:fa:6a:9b:dd:67:4c:ae:26:1c:f1:3a:22:8f:bf:a7:80:
         a9:e0:9e:ec:79:42:2f:62:35:d6:da:f2:3d:7f:f4:36:4e:56:
         94:3d:b6:b9:7e:5f:83:5c:0d:7f:2d:f0:c2:ca:ec:71:f3:e6:
         bd:19:3a:6b:88:93:7e:73:cb:ba:79:12:5a:b0:ca:27:09:e5:
         f0:2e:5a:ad:76:aa:72:f3:3d:a7:01:60:6c:3b:e3:1e:fc:f2:
         e4:21:e5:3a:90:dd:4e:f7:03:81:3a:9c:07:f4:e1:01:d5:d4:
         ca:b3:8d:a9:94:7e:6e:8d:4f:b9:0f:e9:7f:5d:6c:5f:5c:52:
         f3:af:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----