Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa
File:                     0yQxomjYl-VudRWMs83arBriNB8.roa (raw, json)
Hash identifier:          dLofVELuLLTmTSZ3jDNTZDB5xhGJoMYI4XJhrUSDzc4=
Subject key identifier:   D3:24:31:A2:68:D8:97:E5:6E:75:15:8C:B3:CD:DA:AC:1A:E2:34:1F
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       018240E9D855EDDECAF4A0760D1686D6F558
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa
Signing time:             Wed 27 Jul 2022 18:27:23 +0000
ROA not before:           Wed 27 Jul 2022 18:27:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        109.246.0.0/17 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:40:e9:d8:55:ed:de:ca:f4:a0:76:0d:16:86:d6:f5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jul 27 18:27:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d32431a268d897e56e75158cb3cddaac1ae2341f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:18:f8:3f:eb:a6:6e:49:b2:d8:23:fd:a2:
                    ed:c8:a3:c6:73:e7:b5:af:b4:5b:2e:46:64:3d:7e:
                    61:8c:62:36:7e:aa:1f:df:b2:15:ee:0b:75:bc:1c:
                    07:c1:36:2c:ad:40:19:63:dd:98:4b:86:b4:e5:89:
                    a0:6a:07:fd:1b:0e:9f:31:8a:24:6d:4a:00:0c:49:
                    2f:3b:81:10:02:14:ad:39:ea:25:8c:a1:d9:31:a0:
                    fd:b9:7b:04:6e:d4:f5:c9:26:44:ce:ec:5c:27:65:
                    e3:9d:ea:61:d2:4e:48:2b:cd:69:d4:bb:26:91:f3:
                    0b:b9:62:43:b3:de:1e:e1:6d:75:9b:33:f9:6a:8b:
                    31:72:4c:f1:56:6f:91:93:2e:f9:4d:e5:91:2d:c0:
                    b0:52:d9:92:f1:e6:00:dc:36:fd:39:b2:78:ab:83:
                    f5:fa:a5:64:85:3c:86:12:19:10:99:53:8d:9d:ab:
                    f5:d5:a4:48:51:49:29:ec:6a:d2:ed:06:35:03:4f:
                    ed:cb:5b:63:04:d6:d5:c1:4b:23:97:75:c4:5e:f1:
                    4d:1b:01:d8:43:09:ac:96:d9:1b:44:76:d4:18:65:
                    86:71:a9:71:08:f8:48:4a:4d:16:f1:bb:8d:c9:14:
                    77:4b:ab:a3:3d:2a:2e:b3:fd:b6:0d:68:93:3b:11:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:31:A2:68:D8:97:E5:6E:75:15:8C:B3:CD:DA:AC:1A:E2:34:1F
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/0yQxomjYl-VudRWMs83arBriNB8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.246.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:5e:14:74:72:a1:d7:85:1e:34:4c:55:b8:38:63:fa:33:
         f8:07:20:ab:10:10:1b:2e:c5:02:6a:a1:af:8a:e6:d9:dc:4f:
         09:01:b3:e3:00:59:af:90:eb:99:aa:f2:6b:a6:5e:1b:17:d4:
         2e:83:a6:5a:62:18:7b:51:d0:01:12:a4:8e:a4:e3:ea:3f:0a:
         d6:75:76:3e:2a:a9:6c:ad:27:6e:6d:07:73:a7:cc:5b:1b:07:
         5b:95:12:81:b2:7f:46:bf:ed:c9:8f:fd:32:62:80:83:38:d7:
         cd:7e:8e:b1:2b:4e:b7:ae:15:ad:d7:ef:63:e9:f0:fc:68:14:
         ae:22:47:d8:51:20:10:86:1e:94:e4:fa:be:ec:cc:5a:35:cd:
         50:26:48:08:57:73:cd:65:11:9f:bd:fa:49:9a:f2:a3:4f:1f:
         4d:49:21:c5:65:45:3a:18:a1:fe:11:83:96:23:0b:d7:81:21:
         20:f6:65:c4:5b:d3:59:bc:8f:b7:4c:07:15:90:8e:3c:8a:aa:
         33:d8:a7:d8:98:6b:07:8d:94:d2:88:5e:0c:0c:b1:26:34:41:
         48:84:6d:9c:5e:bf:fb:41:b3:a1:58:c6:5a:08:cd:25:b3:6d:
         62:3d:df:9d:eb:8e:ed:4a:2a:53:05:80:ab:aa:03:89:55:1c:
         c5:95:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org