Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/x-X1s5BS1yaQTym1U2U0S2s5xhA.roa
File:                     x-X1s5BS1yaQTym1U2U0S2s5xhA.roa (raw, json)
Hash identifier:          J/tfu0ld6ezXTu+z9GMIQ7eRrGt5Op2p5O5kOgr0bew=
Subject key identifier:   C7:E5:F5:B3:90:52:D7:26:90:4F:29:B5:53:65:34:4B:6B:39:C6:10
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       0460320F
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/x-X1s5BS1yaQTym1U2U0S2s5xhA.roa
Signing time:             Sat 01 Jan 2022 02:01:24 +0000
ROA not before:           Sat 01 Jan 2022 02:01:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211612
IP address blocks:        188.72.9.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73413135 (0x460320f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Jan  1 02:01:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7e5f5b39052d726904f29b55365344b6b39c610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:80:42:f9:e4:3e:f8:5f:40:4b:b0:f3:7a:a7:
                    12:d5:ce:6c:0f:06:46:79:fa:e3:40:ad:33:9b:7b:
                    1f:f2:df:92:44:9c:88:8b:6a:a2:41:92:25:30:68:
                    4d:ee:a3:d0:51:67:88:c6:1d:52:09:dd:ae:c0:2c:
                    0b:3d:ed:46:ad:67:15:1c:4c:d2:92:ce:5d:28:44:
                    80:d5:a1:4b:65:79:a4:0c:e7:1f:25:e8:37:c4:f0:
                    61:ab:8a:83:c7:09:ab:b1:29:05:cd:bb:4d:c5:63:
                    c2:fc:07:0e:13:5b:d9:76:3c:47:47:84:39:80:5b:
                    b6:00:54:d9:7c:dd:66:96:dc:bf:fa:d5:e0:b6:1e:
                    b0:08:95:bf:ce:80:59:2b:ca:d2:a2:dd:33:16:d6:
                    1e:45:2e:e5:e5:bd:0d:74:d7:e3:1a:dc:10:2d:01:
                    3b:d5:45:e6:95:9a:18:22:6f:a9:87:5d:15:9c:d2:
                    51:dd:bc:07:6b:c4:67:48:fe:26:f6:3f:14:4e:e3:
                    04:38:28:11:1e:3b:4b:17:59:a1:ca:5e:2c:c2:be:
                    70:e8:3f:dc:98:25:ba:89:e9:2b:b1:08:56:69:73:
                    72:10:af:60:bb:3c:38:24:84:7b:ed:ed:9f:c8:a6:
                    df:c0:84:f0:b5:b7:bb:e4:ad:9c:4f:4e:31:5c:f9:
                    8d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E5:F5:B3:90:52:D7:26:90:4F:29:B5:53:65:34:4B:6B:39:C6:10
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/x-X1s5BS1yaQTym1U2U0S2s5xhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.72.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3d:ad:da:2f:7e:18:43:ad:3d:d7:67:19:45:9d:de:95:36:
         c7:6b:75:59:73:c4:28:53:d7:d3:f3:11:d0:70:99:b8:75:55:
         ab:47:78:f8:af:e1:8a:48:88:08:ab:9e:f7:b3:1c:4c:c0:4a:
         43:71:e7:5e:8c:c8:16:bd:f0:23:45:a2:02:d8:4c:a5:9c:fd:
         3b:e7:3b:cf:ae:1a:c2:21:18:a6:f4:4d:86:bf:9e:23:fb:b1:
         c1:44:27:a4:be:aa:2e:9c:db:db:db:9f:6c:09:23:88:cc:e7:
         75:d4:ff:25:6e:77:a1:13:35:dd:3e:78:79:3e:7d:8b:e8:6f:
         04:c5:8e:85:bd:e3:2b:4a:4a:93:01:cd:d6:b3:36:b0:01:19:
         ec:94:c6:58:84:0f:f3:f1:15:ae:ef:37:e6:91:f3:50:1e:a5:
         6f:aa:27:f1:d3:ad:4e:0c:35:97:eb:21:f9:78:94:4a:d6:00:
         33:d5:79:ea:04:e6:2b:d3:ea:cd:55:d3:89:0c:cc:52:79:7a:
         5e:6f:5a:05:ec:63:f5:c6:db:b8:93:e0:62:fb:5a:a6:6d:a2:
         89:83:1f:6e:4b:67:46:4a:6d:2a:bd:c1:48:85:a3:76:a6:4e:
         db:51:62:3a:71:dd:2d:9e:5a:3a:93:e0:03:1f:3c:24:98:3b:
         58:57:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----