Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/1ipAvfXcAvPBPV3xcefHSVkUcEU.roa
File:                     1ipAvfXcAvPBPV3xcefHSVkUcEU.roa (raw, json)
Hash identifier:          el59uJun8iGJOjSOm3UrSSSTBV3Cfz7e8tVHeAx8hP8=
Subject key identifier:   D6:2A:40:BD:F5:DC:02:F3:C1:3D:5D:F1:71:E7:C7:49:59:14:70:45
Certificate issuer:       /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial:       01706CF0
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/1ipAvfXcAvPBPV3xcefHSVkUcEU.roa
Signing time:             Tue 08 Feb 2022 16:25:49 +0000
ROA not before:           Tue 08 Feb 2022 16:25:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42881
IP address blocks:        45.82.168.0/22 maxlen: 22

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24145136 (0x1706cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
        Validity
            Not Before: Feb  8 16:25:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d62a40bdf5dc02f3c13d5df171e7c74959147045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:c1:a1:b6:9c:90:b5:23:f1:b3:e5:0c:6f:
                    de:eb:e5:e3:60:4c:d3:4f:74:97:9f:be:01:57:22:
                    8e:46:5d:6c:d3:f2:e4:53:1f:76:8e:3e:d5:0c:b4:
                    24:c5:15:26:75:de:b6:f0:64:a7:7a:8b:e0:21:35:
                    e4:bc:c2:1b:4e:c5:79:f8:70:12:b2:36:1f:a4:2f:
                    6a:d7:87:a2:09:05:a5:9e:3f:4f:48:57:a8:bf:99:
                    9f:7e:55:3e:f8:ad:0e:66:40:ff:b7:c6:a6:11:86:
                    aa:33:45:8f:94:b7:42:37:68:f1:cf:27:5f:16:00:
                    4c:9b:3a:d1:2a:d6:4d:46:d3:cb:f1:ed:af:20:26:
                    d2:48:f2:16:9f:42:53:48:17:7b:7d:f2:43:42:7b:
                    b4:91:8b:eb:3b:59:4d:87:3a:be:ea:76:94:f9:f4:
                    d4:1d:74:58:5a:ff:51:c3:7e:62:f1:a0:8c:d9:6c:
                    c3:ca:a0:ce:87:f9:0f:a6:ab:99:e8:97:ab:60:37:
                    72:b4:f4:cf:54:99:5b:18:c5:57:aa:a2:bd:d2:5d:
                    44:ca:9a:41:3d:c3:95:20:e6:29:d6:58:52:ee:b6:
                    cd:6b:a4:d8:b3:cf:10:45:f0:99:f7:be:42:fe:7f:
                    9e:14:a2:8b:2b:35:70:52:99:b7:8f:13:d1:49:8a:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2A:40:BD:F5:DC:02:F3:C1:3D:5D:F1:71:E7:C7:49:59:14:70:45
            X509v3 Authority Key Identifier:
                keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/1ipAvfXcAvPBPV3xcefHSVkUcEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:c6:66:99:23:ff:de:ae:2c:33:b7:ef:b5:29:e7:88:fa:
         1d:f2:71:a3:c4:12:ea:cc:01:47:20:9d:55:b0:3a:62:e5:83:
         06:74:dd:87:8d:bd:40:fb:a7:af:23:ce:20:c3:dc:0f:09:7c:
         a6:8b:e6:68:47:82:37:9f:85:7e:f9:c4:0d:f8:2f:5a:96:6c:
         34:0e:b1:c7:fb:62:13:12:77:fd:96:f1:6c:83:7e:fb:5c:c0:
         cb:fe:ab:ac:f7:f9:5a:2c:aa:e0:82:e8:9c:1e:57:e3:93:d6:
         1e:a8:49:ed:17:1e:11:26:6f:17:6f:1c:6f:df:b5:56:b3:82:
         9e:f3:30:d0:53:f5:78:00:1b:c2:f4:05:5d:85:30:ab:b8:bd:
         32:d1:70:30:53:7c:2c:a2:52:22:ea:72:b0:f0:b7:24:05:bd:
         9a:19:5d:fc:55:24:83:a0:57:fb:f3:0e:55:dc:fc:64:50:d0:
         3f:1d:2f:1e:8b:a9:a0:66:a1:b9:36:b3:32:1f:33:4e:d5:9e:
         d3:89:10:13:b4:bf:d5:22:84:18:13:27:78:02:8e:ad:a8:c2:
         14:f1:5b:46:e6:53:75:c3:0f:59:17:22:3a:be:42:3b:ae:b4:
         45:a5:69:96:75:3a:f9:0a:90:45:65:0c:2a:fe:85:58:f5:ad:
         2e:f1:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----