Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/qWLcHoYnyxnaisCIHJUmWd4RG20.roa
File:                     qWLcHoYnyxnaisCIHJUmWd4RG20.roa (raw, json)
Hash identifier:          oXOo2M5aLjUfqAN8P3DKnudRfPV4XW66SfoNQQFKcMM=
Subject key identifier:   A9:62:DC:1E:86:27:CB:19:DA:8A:C0:88:1C:95:26:59:DE:11:1B:6D
Certificate issuer:       /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial:       0181F465F868FDA6615C501FD3D9DEE9B927
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/qWLcHoYnyxnaisCIHJUmWd4RG20.roa
Signing time:             Tue 12 Jul 2022 21:52:12 +0000
ROA not before:           Tue 12 Jul 2022 21:52:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        194.156.94.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:65:f8:68:fd:a6:61:5c:50:1f:d3:d9:de:e9:b9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
        Validity
            Not Before: Jul 12 21:52:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a962dc1e8627cb19da8ac0881c952659de111b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:25:5c:4d:70:c7:1b:5b:d6:27:28:22:f9:
                    35:bc:ad:4b:18:b7:b0:84:95:8c:ed:26:3d:82:12:
                    10:d7:68:22:1a:9c:d8:42:33:57:2a:9f:f0:f1:5a:
                    46:61:6a:2f:d7:fb:c5:7e:ff:62:db:0b:4c:41:a5:
                    a7:c0:5a:43:4d:cb:97:ca:9d:9f:05:da:42:35:29:
                    bd:a7:ec:6b:7f:9d:5d:5b:a8:1c:bc:f6:1a:68:74:
                    e4:39:80:68:6a:a7:ac:85:a5:73:89:1e:0e:5e:c8:
                    c6:7f:1f:7e:af:da:4c:7f:45:72:25:45:0e:61:49:
                    60:40:d7:4b:ce:6d:d6:d3:df:cf:dd:a8:6a:a8:46:
                    76:a0:c9:e3:71:38:a8:b3:95:6f:0b:20:69:20:98:
                    42:90:93:34:09:da:fd:62:5a:0c:b6:87:25:f9:ae:
                    be:82:d0:1c:ab:a8:c0:5e:4a:7b:11:af:15:92:2b:
                    f1:0d:41:6d:0b:ca:55:9e:5f:b8:0c:41:23:20:7d:
                    b8:29:49:80:93:8b:e5:23:31:c7:22:7d:68:72:24:
                    72:8d:23:1f:17:dd:45:06:d2:1a:13:fc:ba:51:3f:
                    9f:b4:fc:52:20:e0:f6:20:91:26:48:5e:83:00:41:
                    11:2a:cd:ad:8f:21:6a:8f:d1:f8:c8:03:22:26:f4:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:62:DC:1E:86:27:CB:19:DA:8A:C0:88:1C:95:26:59:DE:11:1B:6D
            X509v3 Authority Key Identifier:
                keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/qWLcHoYnyxnaisCIHJUmWd4RG20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:e9:f5:ab:a3:89:27:1b:b7:7f:35:86:bb:1c:3b:c8:08:
         c9:a7:45:74:99:ff:4e:eb:49:d5:b5:36:5f:b1:f8:41:4b:61:
         2d:bc:8d:e7:a4:06:1c:dc:da:31:38:43:11:95:6c:f5:bd:9c:
         e4:87:96:cd:c5:47:e6:d9:10:e8:9c:c4:e9:db:d8:89:65:d0:
         ff:e2:dd:b3:6e:ad:b1:4c:46:b0:c2:2e:fd:c7:1c:38:9a:6c:
         dc:6c:40:25:85:ec:3d:9c:11:67:7b:c9:06:e9:66:f8:76:75:
         36:65:fc:31:c8:7e:06:d0:b7:75:e9:1a:b8:95:e2:d0:fe:45:
         cf:6b:53:69:e3:05:d9:f1:57:fd:81:7c:a7:12:c9:7e:29:99:
         1b:0a:a9:59:2c:09:91:f2:24:58:e1:c1:a6:d3:25:3d:ad:13:
         c2:ad:65:b7:2f:51:be:19:a6:04:36:ff:a1:98:af:d3:db:19:
         8e:43:8b:01:f6:1d:17:47:f2:1f:e3:42:88:39:13:55:25:35:
         71:46:a8:fc:fe:43:3b:37:ce:8f:07:15:33:d6:b9:ea:a2:b0:
         93:4b:b2:b4:7f:ac:48:95:77:08:fd:7c:39:5b:95:fd:c8:b1:
         bb:87:d1:51:38:9b:8b:e0:e9:d7:e7:7c:01:3c:48:cc:f2:d2:
         e7:f2:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----