Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa
File:                     YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa (raw, json)
Hash identifier:          Ae/vkOmRRh7QyI2yw6/RIF8/PuMu44WPTC+r+wg7+cU=
Subject key identifier:   60:38:6D:98:F5:9A:10:AE:68:25:27:EF:26:F9:42:97:4C:46:4D:9A
Certificate issuer:       /CN=1da97cae7de6b29e56f0259af53c95926034a502
Certificate serial:       07B4E9A2
Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa
Signing time:             Sat 01 Jan 2022 04:01:46 +0000
ROA not before:           Sat 01 Jan 2022 04:01:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59750
IP address blocks:        194.1.247.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129296802 (0x7b4e9a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502
        Validity
            Not Before: Jan  1 04:01:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=60386d98f59a10ae682527ef26f942974c464d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:b8:f7:d3:af:5f:fc:1c:42:77:37:c5:3d:
                    b0:c4:a6:e1:45:e7:ff:b2:e4:de:fb:15:2a:1b:a4:
                    39:f8:60:c9:32:9e:bc:2b:69:a6:9a:9d:90:3f:65:
                    e9:f1:0a:bb:fb:80:8d:11:82:39:b8:35:f9:e3:29:
                    2c:81:02:43:99:3b:49:b6:ec:52:0f:9d:3b:12:d7:
                    b1:6d:7d:e2:19:34:2c:9b:e6:fb:01:01:c9:de:1e:
                    4d:a4:b4:68:c0:5b:44:70:f2:7a:50:a6:b7:e8:9a:
                    f1:4d:69:42:a2:31:32:d1:30:45:64:92:5a:2b:50:
                    8b:b4:28:f3:02:90:ab:3f:42:81:74:5d:2f:fa:2b:
                    43:84:ba:e7:e5:62:c5:52:48:e5:61:4f:a9:19:0f:
                    15:e3:23:fe:c5:0c:df:63:28:93:aa:8c:1c:2a:fb:
                    3c:47:d7:fd:03:87:72:90:a9:d1:c0:92:51:6e:2e:
                    1c:62:1d:69:82:8e:10:eb:49:42:8f:82:8c:2e:bd:
                    71:18:f9:c3:ff:29:10:b9:2b:4f:b0:f5:7b:ac:c7:
                    a4:c3:b8:92:4d:01:6d:cb:d3:70:89:5b:52:94:ea:
                    08:9b:95:c8:f1:f5:54:db:3e:7d:5e:e5:12:31:6a:
                    f5:6b:94:62:28:6d:aa:6c:54:b5:e2:ac:75:ca:ce:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:6D:98:F5:9A:10:AE:68:25:27:EF:26:F9:42:97:4C:46:4D:9A
            X509v3 Authority Key Identifier:
                keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/YDhtmPWaEK5oJSfvJvlCl0xGTZo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.1.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c3:44:07:f1:b7:cf:a9:cc:1b:60:d4:b5:a1:2d:91:a3:6b:
         90:3e:a6:6d:22:51:b8:fc:df:6f:2f:b7:15:5a:a1:b3:b3:c9:
         02:e8:61:ee:74:56:3b:03:2a:a0:56:21:88:fc:86:63:2c:58:
         50:d9:6d:d8:93:88:97:8a:d7:b5:5f:c1:f3:b2:8b:9f:b4:98:
         51:37:82:bf:a2:7b:d7:30:10:31:38:a6:d9:f8:54:98:c3:7c:
         6c:8b:22:29:96:2f:2b:bd:e7:f1:a4:ae:cb:7d:e9:18:4b:da:
         d5:7b:15:d8:58:7e:d6:f3:1c:8d:64:96:cf:6a:c4:f4:14:57:
         45:33:9d:63:ee:01:84:b1:04:7e:03:05:e8:6c:4b:8e:15:b6:
         53:bb:1c:1e:4e:5b:ba:28:3f:9c:46:87:ab:d4:91:24:66:73:
         ad:2e:f4:fb:d0:61:52:7f:1d:0c:ee:b4:cf:2a:0f:3c:c4:0e:
         4b:6b:a0:07:85:ea:e5:1d:bf:e2:a9:1c:0f:e7:c5:4c:98:10:
         78:5b:87:bb:ce:55:b6:04:ec:5e:21:9f:86:09:16:50:2a:6c:
         d5:80:39:d4:9e:6e:2c:a3:4e:0a:7f:e9:7e:a9:3d:54:a5:5c:
         3b:15:f1:5a:31:4b:cc:8b:42:3f:7b:92:c8:81:21:b6:52:58:
         e3:e9:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----