Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa
File:                     ECju2rt090PBE4DG7xcsC7lQGlc.roa (raw, json)
Hash identifier:          eAAgrpySXn5rQ2P6W29ARtiauqyUFS3nIKBrq+HXG4c=
Subject key identifier:   10:28:EE:DA:BB:74:F7:43:C1:13:80:C6:EF:17:2C:0B:B9:50:1A:57
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       03A3A337
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa
Signing time:             Sat 01 Jan 2022 14:07:06 +0000
ROA not before:           Sat 01 Jan 2022 14:07:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59916
IP address blocks:        109.233.207.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61055799 (0x3a3a337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jan  1 14:07:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1028eedabb74f743c11380c6ef172c0bb9501a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:45:41:84:e0:40:d8:e7:9c:b5:71:b8:1b:ab:
                    92:a8:fd:91:4c:1d:ef:70:44:d7:91:9e:39:19:7d:
                    0d:42:ef:05:a5:25:10:2d:b6:d4:af:8d:03:9f:5b:
                    52:9b:25:58:43:07:f8:43:15:6c:53:72:08:0b:2e:
                    ba:43:7f:43:f2:87:c3:30:2b:4e:74:08:2e:24:f1:
                    e2:95:2c:3f:e8:11:5f:e1:bb:8a:6c:2e:b3:3c:58:
                    2f:37:16:e8:42:c5:88:87:94:cb:67:21:b8:53:66:
                    1f:85:55:a7:dd:7b:f2:6b:f2:8f:0e:8d:45:a0:1f:
                    b0:54:e0:2f:1b:1e:ac:23:8b:51:23:c0:df:58:dc:
                    02:8d:3c:de:39:fa:d7:4c:05:1d:06:9c:78:b9:a2:
                    e6:e8:de:11:c4:91:b0:0b:cf:eb:85:3e:f2:0c:e3:
                    4f:2f:aa:8d:b4:04:9e:c1:2b:97:7b:b6:21:83:3b:
                    a6:f6:0c:aa:7c:5c:89:7d:f5:52:91:d3:8d:b8:9f:
                    2f:49:de:6b:cb:d3:f0:5e:cb:ce:ea:37:66:48:f0:
                    e5:e0:e6:90:1c:0b:73:21:c3:2e:3d:cd:8a:22:5a:
                    8b:8b:d6:df:9d:12:2a:4b:d6:0e:95:ba:8e:3b:a8:
                    33:e6:0d:71:f2:b5:8c:0f:77:a6:54:51:da:11:d2:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:28:EE:DA:BB:74:F7:43:C1:13:80:C6:EF:17:2C:0B:B9:50:1A:57
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ECju2rt090PBE4DG7xcsC7lQGlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.233.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:e2:20:a9:ac:2b:31:44:b4:4d:d7:93:27:af:46:c5:87:
         b2:0d:05:b9:ed:2f:13:93:09:1c:3e:f8:ef:76:b4:a9:d5:d2:
         dc:6f:76:87:74:aa:f4:1f:6a:26:bb:f1:fa:65:09:fc:6b:e9:
         3d:b3:df:3c:32:a7:6f:7d:a8:83:c8:3f:ce:41:2f:12:ad:1a:
         cb:ff:9b:68:07:69:f3:74:e4:f6:3b:a6:3b:12:5a:32:68:77:
         a2:a3:66:19:8d:0d:43:6d:18:d8:b8:03:75:d1:5f:c7:04:c9:
         39:e4:e2:46:63:7a:8e:ff:f1:49:52:66:9f:3c:57:ec:b6:de:
         0a:e8:c6:1d:00:ee:eb:e9:07:24:9c:b7:6a:b7:2c:78:fe:19:
         6a:81:45:75:52:bd:1d:98:33:34:f3:66:17:b5:81:cd:fa:d9:
         50:e9:33:50:5f:46:2b:9b:1f:53:6f:76:e0:72:e9:0b:66:3a:
         c6:d4:35:09:16:8a:55:27:e0:1b:7f:76:0e:dc:86:21:ba:4d:
         c4:bb:9c:f1:54:52:a4:99:a4:20:1d:e4:f5:44:02:d2:f3:7a:
         14:0f:fe:bb:c9:28:75:c8:42:de:eb:54:18:de:9d:b0:63:1e:
         07:95:e6:bb:ab:5f:fe:7d:0f:f3:be:23:34:da:61:46:7e:99:
         a6:17:d5:d2
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA6OjNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZGEzOTQxYzI3Y2ZlNWMyMzRjNGJmMjIxZWNiMmE1NzliMmRlYWFiMB4XDTIyMDEw
MTE0MDcwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTAyOGVlZGFiYjc0
Zjc0M2MxMTM4MGM2ZWYxNzJjMGJiOTUwMWE1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN9FQYTgQNjnnLVxuBurkqj9kUwd73BE15GeORl9DULvBaUl
EC221K+NA59bUpslWEMH+EMVbFNyCAsuukN/Q/KHwzArTnQILiTx4pUsP+gRX+G7
imwuszxYLzcW6ELFiIeUy2chuFNmH4VVp9178mvyjw6NRaAfsFTgLxserCOLUSPA
31jcAo083jn610wFHQaceLmi5ujeEcSRsAvP64U+8gzjTy+qjbQEnsErl3u2IYM7
pvYMqnxciX31UpHTjbifL0nea8vT8F7Lzuo3Zkjw5eDmkBwLcyHDLj3NiiJai4vW
350SKkvWDpW6jjuoM+YNcfK1jA93plRR2hHSTwUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQQKO7au3T3Q8ETgMbvFywLuVAaVzAfBgNVHSMEGDAWgBRdo5QcJ8/lwjTE
vyIeyypXmy3qqzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hhT1VIQ2ZQNWNJMHhMOGlIc3NxVjVzdDZxcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvMzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8x
L0VDanUycnQwOTBQQkU0REc3eGNzQzdsUUdsYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
MzBlZDNlLWM0YzQtNGRlOC1iNGYxLWYxMWEzOWYyNmMzYi8xL1hhT1VIQ2ZQNWNJ
MHhMOGlIc3NxVjVzdDZxcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG3pzzANBgkqhkiG9w0BAQsFAAOC
AQEAXuziIKmsKzFEtE3XkyevRsWHsg0Fue0vE5MJHD7473a0qdXS3G92h3Sq9B9q
Jrvx+mUJ/GvpPbPfPDKnb32og8g/zkEvEq0ay/+baAdp83Tk9jumOxJaMmh3oqNm
GY0NQ20Y2LgDddFfxwTJOeTiRmN6jv/xSVJmnzxX7LbeCujGHQDu6+kHJJy3arcs
eP4ZaoFFdVK9HZgzNPNmF7WBzfrZUOkzUF9GK5sfU2924HLpC2Y6xtQ1CRaKVSfg
G392DtyGIbpNxLuc8VRSpJmkIB3k9UQC0vN6FA/+u8kodchC3utUGN6dsGMeB5Xm
u6tf/n0P874jNNphRn6ZphfV0g==
-----END CERTIFICATE-----