Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9VLjyEsasJcVxJCwlLCFckvqHTA.roa
File:                     9VLjyEsasJcVxJCwlLCFckvqHTA.roa (raw, json)
Hash identifier:          hfU8LG0i76MiW0cFLNt36ENiu5f9golOwpvyBRO9hfk=
Subject key identifier:   F5:52:E3:C8:4B:1A:B0:97:15:C4:90:B0:94:B0:85:72:4B:EA:1D:30
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       0185143BFD21E3828C32CA0F7EF7A42D7BEC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9VLjyEsasJcVxJCwlLCFckvqHTA.roa
Signing time:             Thu 15 Dec 2022 05:22:33 +0000
ROA not before:           Thu 15 Dec 2022 05:22:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133206
IP address blocks:        194.127.98.0/23 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:3b:fd:21:e3:82:8c:32:ca:0f:7e:f7:a4:2d:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Dec 15 05:22:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f552e3c84b1ab09715c490b094b085724bea1d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:fb:99:92:da:2d:1f:d7:ab:6c:52:b9:0c:
                    9c:1d:56:cd:4f:74:2a:3f:b9:e8:59:83:83:ff:a7:
                    58:30:20:73:26:80:2b:04:68:6e:54:6c:b2:e2:4b:
                    d4:42:84:83:b3:82:d2:aa:d4:5a:1b:27:1c:c0:a1:
                    3c:9d:4c:9e:d3:dd:54:3b:62:c4:f1:f5:ca:1a:2c:
                    39:8d:a6:b4:84:6d:d9:ec:7d:24:54:c0:f3:3f:2e:
                    f2:0f:3e:29:22:af:3e:73:ec:6e:13:01:92:c3:43:
                    24:e1:c2:72:db:45:2b:4b:13:0e:7d:99:46:7b:c0:
                    cf:1a:6b:05:dc:86:3d:6b:ac:44:28:9e:15:0e:90:
                    99:de:7f:f6:6a:25:00:2b:76:99:bf:1c:fa:77:57:
                    10:cc:52:9b:71:b3:ea:e2:c9:9d:73:e9:5c:65:5e:
                    47:57:90:8a:f4:99:74:0b:36:5a:8f:76:09:77:c7:
                    86:06:56:88:b3:fb:e5:63:d8:4c:0f:43:69:cf:4f:
                    60:e9:83:99:59:c4:f8:35:37:5f:41:7d:ca:1f:75:
                    70:5c:48:2a:45:5a:57:ff:80:61:1c:d7:16:47:31:
                    50:a6:5b:04:d0:bb:9c:a4:83:07:f3:c8:d3:f7:c2:
                    88:eb:4e:03:fe:11:6f:49:e4:da:e6:c6:8d:dd:9f:
                    9f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:52:E3:C8:4B:1A:B0:97:15:C4:90:B0:94:B0:85:72:4B:EA:1D:30
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9VLjyEsasJcVxJCwlLCFckvqHTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:a7:68:a0:74:dd:46:42:1d:f8:60:d2:3b:83:90:20:63:
         c9:a1:61:c8:6f:81:fb:db:eb:24:4c:05:6f:b7:a1:c0:75:3a:
         f7:18:c4:ee:09:0c:0c:26:dc:cf:92:e3:b6:57:73:ff:82:0e:
         22:97:69:f8:94:eb:86:d3:8d:c9:7c:df:ef:1a:d2:ce:a1:b5:
         a1:93:3c:d9:97:c3:ac:4e:bd:53:45:57:d0:ea:5b:b0:09:b6:
         95:45:59:35:d4:6d:54:82:5c:1c:ba:30:91:53:a1:c6:a6:07:
         1c:78:31:6e:3d:4d:57:e1:7a:df:85:9d:3f:8e:4a:83:b2:81:
         61:8c:0e:5f:f5:47:85:d1:52:5e:fe:1d:d5:5a:0e:b3:7d:19:
         9b:f0:fd:d9:ff:78:e8:d4:47:41:d7:b9:70:d3:db:75:c2:11:
         c9:79:3f:88:38:bb:6c:37:23:97:bc:84:3d:53:03:17:b3:ed:
         f4:27:5a:dd:91:7a:dd:91:1c:8f:a7:de:cb:6b:24:ea:84:0c:
         90:88:0c:01:a4:34:13:b6:fe:68:11:61:eb:b8:df:6e:ea:63:
         ec:c7:b0:f9:0a:e1:7b:08:6d:14:07:98:bd:5d:c1:34:16:a2:
         61:54:b8:c2:f6:4a:03:a8:2f:87:ee:1e:c7:e2:84:3e:46:5b:
         8d:ba:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----