Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/A2quUGLvEUmRd5Og8Mf6LqJBzzs.roa
File:                     A2quUGLvEUmRd5Og8Mf6LqJBzzs.roa (raw, json)
Hash identifier:          Cs93xU04phvy2GOGZ7Nmcx/wsEiyfyGJwK7Ton9Gw5Q=
Subject key identifier:   03:6A:AE:50:62:EF:11:49:91:77:93:A0:F0:C7:FA:2E:A2:41:CF:3B
Certificate issuer:       /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial:       08341EE5
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/A2quUGLvEUmRd5Og8Mf6LqJBzzs.roa
Signing time:             Mon 18 Apr 2022 09:54:46 +0000
ROA not before:           Mon 18 Apr 2022 09:54:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        193.200.12.0/23 maxlen: 24
                          2a0d:c3c6::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137633509 (0x8341ee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
        Validity
            Not Before: Apr 18 09:54:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=036aae5062ef1149917793a0f0c7fa2ea241cf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:1c:0d:f1:13:dd:92:25:6c:63:58:bb:46:
                    6f:52:53:77:31:38:91:22:0c:26:29:1d:d3:29:95:
                    8d:86:15:f9:fd:a4:93:7e:d2:a4:0d:83:1b:79:b0:
                    96:3a:96:d2:b0:ec:49:97:39:6c:e8:14:2d:d4:de:
                    5d:f5:b0:f7:cf:13:a5:77:b1:7e:f1:3e:e9:d7:7f:
                    30:e9:d5:55:0e:2f:03:58:b8:e0:77:b3:7d:ab:21:
                    24:3f:ca:5e:95:94:76:fd:2a:e2:25:7a:c2:6e:17:
                    77:19:92:29:cd:9b:c7:a0:da:43:f7:97:78:51:7b:
                    0d:a8:59:4e:c2:5d:cd:d7:8b:66:6f:e7:c2:a9:21:
                    14:2b:11:6b:1e:39:1d:d5:02:ab:de:80:26:fa:b1:
                    e2:1b:a5:a1:6f:fe:45:81:06:7d:0c:f4:13:91:48:
                    49:29:b9:ea:06:68:fd:d4:cc:c3:a4:4e:a2:10:79:
                    0a:1a:ab:e9:63:64:e4:6f:f2:cd:66:5e:82:38:01:
                    e7:85:1a:02:21:a0:f0:95:ca:11:2b:c1:de:14:39:
                    31:19:93:4b:7c:7e:28:11:bd:1d:3e:e1:6e:42:dd:
                    8f:ca:7a:51:c0:40:91:28:08:58:10:bf:d9:a5:6a:
                    f9:a3:0e:ad:e7:bb:41:02:e8:77:49:91:41:1d:b7:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6A:AE:50:62:EF:11:49:91:77:93:A0:F0:C7:FA:2E:A2:41:CF:3B
            X509v3 Authority Key Identifier:
                keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/A2quUGLvEUmRd5Og8Mf6LqJBzzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.12.0/23
                IPv6:
                  2a0d:c3c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:85:13:ef:b0:2e:0e:83:88:9c:2c:63:61:c9:dd:d9:f5:
         3c:fa:04:13:db:41:75:75:d5:4e:0a:f7:43:0e:a8:d6:66:fc:
         30:af:42:d0:72:03:b0:36:c4:30:ee:47:06:36:4e:3e:cf:a6:
         09:bf:a6:e5:08:1e:a9:1a:77:0d:52:2d:c9:7b:f7:4b:88:53:
         51:5e:7b:4f:a6:20:03:92:fa:83:5a:bc:e8:68:49:f4:f6:78:
         e0:2c:52:75:8a:4e:29:d2:93:f1:46:58:20:a9:d0:92:b9:ae:
         65:08:02:36:b7:f7:17:9c:fb:1a:c0:e4:68:1b:19:2c:19:9c:
         e4:8f:81:a8:32:94:a4:ea:c9:45:6e:1e:f3:b7:a6:38:59:57:
         bc:62:f8:0a:2f:72:dc:43:8d:57:e1:c0:39:6c:ad:7f:b2:ee:
         6a:40:48:50:a2:b6:b5:ab:57:ba:1e:d1:24:1c:60:96:b9:99:
         21:3f:6e:bf:6d:96:45:03:83:43:bf:d1:f7:8b:39:e7:d2:70:
         2a:f3:be:e7:37:89:4f:78:c5:03:d8:9c:f9:4d:e5:3c:c6:4d:
         dc:68:f7:f9:25:a9:78:76:d1:de:60:45:9d:ea:58:ec:95:cb:
         97:d7:85:a7:1c:30:83:f6:e4:37:ba:16:80:78:50:39:89:fe:
         d7:48:b0:7b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECDQe5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZGEyNWFhZmUzYTk4NzBlOTUyNGFmYTAyNjU5ODdlZDVhNWE0ZGEzMB4XDTIyMDQx
ODA5NTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDM2YWFlNTA2MmVm
MTE0OTkxNzc5M2EwZjBjN2ZhMmVhMjQxY2YzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7qHA3xE92SJWxjWLtGb1JTdzE4kSIMJikd0ymVjYYV+f2k
k37SpA2DG3mwljqW0rDsSZc5bOgULdTeXfWw988TpXexfvE+6dd/MOnVVQ4vA1i4
4HezfashJD/KXpWUdv0q4iV6wm4XdxmSKc2bx6DaQ/eXeFF7DahZTsJdzdeLZm/n
wqkhFCsRax45HdUCq96AJvqx4huloW/+RYEGfQz0E5FISSm56gZo/dTMw6ROohB5
Chqr6WNk5G/yzWZegjgB54UaAiGg8JXKESvB3hQ5MRmTS3x+KBG9HT7hbkLdj8p6
UcBAkSgIWBC/2aVq+aMOree7QQLod0mRQR23qDMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQDaq5QYu8RSZF3k6Dwx/ouokHPOzAfBgNVHSMEGDAWgBStolqv46mHDpUk
r6AmWYftWlpNozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JhSmFyLU9waHc2VkpLLWdKbG1IN1ZwYVRhTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvODEwZDI0LWFjYmUtNGNiMi05YWM1LTlkNTg3NWQ4NjM3My8x
L0EycXVVR0x2RVVtUmQ1T2c4TWY2THFKQnp6cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
ODEwZDI0LWFjYmUtNGNiMi05YWM1LTlkNTg3NWQ4NjM3My8xL3JhSmFyLU9waHc2
VkpLLWdKbG1IN1ZwYVRhTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAcHIDDANBAIAAjAHAwUAKg3DxjAN
BgkqhkiG9w0BAQsFAAOCAQEAczuFE++wLg6DiJwsY2HJ3dn1PPoEE9tBdXXVTgr3
Qw6o1mb8MK9C0HIDsDbEMO5HBjZOPs+mCb+m5QgeqRp3DVItyXv3S4hTUV57T6Yg
A5L6g1q86GhJ9PZ44CxSdYpOKdKT8UZYIKnQkrmuZQgCNrf3F5z7GsDkaBsZLBmc
5I+BqDKUpOrJRW4e87emOFlXvGL4Ci9y3EONV+HAOWytf7LuakBIUKK2tatXuh7R
JBxglrmZIT9uv22WRQODQ7/R94s559JwKvO+5zeJT3jFA9ic+U3lPMZN3Gj3+SWp
eHbR3mBFnepY7JXLl9eFpxwwg/bkN7oWgHhQOYn+10iwew==
-----END CERTIFICATE-----