Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa
File:                     pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa (raw, json)
Hash identifier:          bUiA29TAbBGtRBS6JxnbsraDKrojzBiMghXzF1pFZWE=
Subject key identifier:   A5:B6:4A:13:B9:75:14:52:B7:BD:84:E2:A3:42:15:E1:91:87:8E:6D
Certificate issuer:       /CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
Certificate serial:       013694BB
Authority key identifier: 0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa
Signing time:             Sat 01 Jan 2022 10:59:33 +0000
ROA not before:           Sat 01 Jan 2022 10:59:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:c480::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20354235 (0x13694bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
        Validity
            Not Before: Jan  1 10:59:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5b64a13b9751452b7bd84e2a34215e191878e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:74:ee:5c:34:fa:31:49:2a:93:21:12:f9:
                    16:d8:2f:37:9c:5c:5a:11:80:03:1e:12:60:7f:c1:
                    33:0e:84:7b:38:7b:4c:cc:ab:56:b2:e4:fe:93:96:
                    84:78:e0:a6:56:31:07:3f:88:00:40:b0:c7:f0:e5:
                    88:cb:ed:8f:4c:be:4f:d3:5a:41:13:61:4e:e1:c2:
                    a9:97:ea:d1:52:1b:59:4b:4d:44:0b:72:6d:26:b9:
                    2e:6d:e7:7b:4f:3c:b9:a8:2f:7b:30:21:34:d2:71:
                    84:63:5b:a1:59:96:b0:e5:13:93:40:b4:60:94:cb:
                    f3:83:4b:f0:09:72:11:55:03:d5:65:7a:05:d9:49:
                    ef:fc:81:8e:75:7d:3a:1f:60:53:2c:e3:2c:0d:af:
                    cd:96:4f:87:6e:2d:8e:fe:09:3d:4a:ca:57:43:ab:
                    07:0e:8c:e5:7d:ba:3d:83:2b:46:ae:8e:29:ba:c5:
                    73:cb:f5:6e:f9:88:ec:4f:6f:87:7e:ef:6b:1e:e4:
                    81:17:c1:9e:a4:09:f2:dd:97:c0:10:5e:11:30:83:
                    ee:53:9c:fd:45:1a:8e:a9:63:e3:98:01:00:7b:34:
                    05:80:ed:f1:60:5e:d7:7b:55:78:d6:0d:5b:34:82:
                    9f:4d:73:4d:ef:66:f4:88:6a:de:6f:11:8d:a6:eb:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B6:4A:13:B9:75:14:52:B7:BD:84:E2:A3:42:15:E1:91:87:8E:6D
            X509v3 Authority Key Identifier:
                keyid:0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:c480::/29

    Signature Algorithm: sha256WithRSAEncryption
         a0:38:c3:dc:bf:b2:26:26:41:6a:30:d4:e7:86:d4:4e:4d:59:
         63:1a:78:cd:b6:05:b9:a1:21:14:50:c2:30:f9:49:41:dd:45:
         1d:bd:d4:3d:66:c7:10:c1:5a:3a:51:01:b0:b4:68:a8:f8:c3:
         cb:82:0b:92:92:42:b6:b7:2f:69:6c:db:ae:c8:3b:c7:f4:81:
         ca:16:43:84:1d:ce:29:7e:94:60:25:ea:22:81:50:de:af:87:
         b7:8e:ee:5f:64:ca:ef:d3:99:27:b7:c3:54:69:04:76:fa:9e:
         d9:65:e9:6d:3e:36:24:c4:ab:02:39:28:12:4c:35:1a:58:96:
         59:6a:b2:4b:5a:2f:21:4c:84:93:94:7f:5a:b4:10:19:fe:49:
         06:ee:64:3d:82:e5:21:f6:74:2b:cf:25:1a:ba:7d:90:f9:65:
         da:da:d2:fe:b7:ad:49:0a:9c:30:55:9c:2f:89:0f:67:be:aa:
         da:3e:72:9d:4e:64:9a:bc:54:55:11:81:5e:7d:2d:9b:2c:88:
         a1:36:58:d9:f6:95:22:99:d6:59:1e:c8:7a:7a:81:8b:11:f3:
         97:ca:f4:09:f9:61:de:64:47:e7:57:f2:d0:8b:21:bb:1f:27:
         3c:e7:73:e8:58:3b:9b:2f:6f:69:7f:17:6f:66:33:8d:c0:ad:
         18:5f:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----