Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa
File:                     sgy09WErQyAvZfvfk8VodaL2-Ic.roa (raw, json)
Hash identifier:          kTv0rBq0bFE36CK0jri2kmu89zDjREwEhRBIrhLOF+4=
Subject key identifier:   B2:0C:B4:F5:61:2B:43:20:2F:65:FB:DF:93:C5:68:75:A2:F6:F8:87
Certificate issuer:       /CN=723cf97094519a75a3238181076057033b11e884
Certificate serial:       0138D244
Authority key identifier: 72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa
Signing time:             Sat 01 Jan 2022 10:57:22 +0000
ROA not before:           Sat 01 Jan 2022 10:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:9480::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20501060 (0x138d244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=723cf97094519a75a3238181076057033b11e884
        Validity
            Not Before: Jan  1 10:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b20cb4f5612b43202f65fbdf93c56875a2f6f887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:91:3a:24:8d:1c:b9:34:a9:72:4a:fd:f9:
                    b7:ce:3a:2a:8b:bb:12:4b:40:c7:50:7f:1e:e5:36:
                    39:f3:da:22:fc:4d:87:ed:1c:38:35:a5:ce:e0:c9:
                    dd:f0:6c:e2:53:2e:31:03:39:9e:eb:75:15:65:ed:
                    fe:90:83:17:36:7d:02:2f:5c:ce:83:1c:71:47:ed:
                    fa:80:04:0e:55:72:d5:ae:1f:ba:64:3f:88:60:5b:
                    0d:7e:27:92:a8:4d:b2:3d:01:29:1c:3e:a3:ab:be:
                    63:c3:dc:b6:ba:ec:0f:3c:08:9f:1c:18:74:86:55:
                    a0:8e:e3:7e:26:ee:6c:90:a3:93:b6:c2:62:3e:c2:
                    91:56:4c:36:00:fe:4b:69:cb:f0:fe:e2:18:04:33:
                    60:2c:cf:de:99:09:f1:14:da:9e:52:b1:96:cf:20:
                    7c:82:27:fe:51:82:84:2d:cd:ae:e9:93:b9:e5:06:
                    db:ef:77:56:a1:91:f9:0d:2a:36:13:12:24:8c:77:
                    77:47:f3:78:47:9d:75:84:f5:ff:a8:64:88:a1:86:
                    aa:f6:fc:71:5f:93:1f:bf:19:15:1e:66:95:47:65:
                    36:4c:dc:6b:02:d1:ab:e3:ad:46:2f:10:27:b2:25:
                    c8:04:fa:c3:06:3b:a4:0b:f8:ea:4f:55:dd:7b:c8:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:B4:F5:61:2B:43:20:2F:65:FB:DF:93:C5:68:75:A2:F6:F8:87
            X509v3 Authority Key Identifier:
                keyid:72:3C:F9:70:94:51:9A:75:A3:23:81:81:07:60:57:03:3B:11:E8:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/sgy09WErQyAvZfvfk8VodaL2-Ic.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/279bbc-5840-4a20-bf7d-1c9a32523244/1/cjz5cJRRmnWjI4GBB2BXAzsR6IQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:9480::/29

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:84:99:2e:79:49:50:fe:2d:03:f7:57:d8:0b:9e:3b:e0:
         e1:4f:76:f7:31:40:ba:65:f1:00:79:4e:13:ab:93:2f:d8:58:
         e9:62:32:5b:b0:72:e9:e9:68:6f:b1:83:95:78:10:b2:60:4c:
         4a:df:6e:ad:b1:37:e3:8e:f0:6c:b3:9c:b6:eb:d1:e5:96:56:
         85:fd:ea:40:7e:b4:0b:00:8b:4a:94:90:0c:c1:f6:a5:71:85:
         d5:5c:d4:67:b5:27:1a:91:62:f2:60:b5:6e:06:f7:c1:62:60:
         26:0c:d8:81:70:e5:5f:5b:08:25:31:47:aa:77:79:e1:f6:bc:
         19:cc:40:cc:1b:8d:79:40:b3:dc:a3:99:3d:27:b2:2a:04:f1:
         9e:3b:70:78:8e:cc:27:1a:0e:27:28:fb:25:b4:f0:0d:e9:b3:
         37:40:86:c7:eb:94:64:c4:d7:a2:6e:67:96:f5:1f:b8:70:1d:
         d7:f8:ee:be:1b:dc:f2:97:4c:93:a4:02:92:0c:6d:a5:79:c8:
         5a:97:90:7c:c0:5f:28:66:26:76:62:9e:dd:38:87:5a:88:19:
         74:3f:99:32:aa:49:3d:06:cc:28:6b:77:09:3f:cc:0d:8c:6d:
         5d:33:8f:ea:83:a2:ee:c0:ba:b4:6c:33:71:db:d8:1e:65:cd:
         07:9d:98:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----