Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/3C0rvc432wXxqW3OMJjinOJZFoE.roa
File:                     3C0rvc432wXxqW3OMJjinOJZFoE.roa (raw, json)
Hash identifier:          EWt6E7GIQoSaLRe6ZlJKige0Ux+3gUQnXfLxlL8riTI=
Subject key identifier:   DC:2D:2B:BD:CE:37:DB:05:F1:A9:6D:CE:30:98:E2:9C:E2:59:16:81
Certificate issuer:       /CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
Certificate serial:       01186761
Authority key identifier: 55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/3C0rvc432wXxqW3OMJjinOJZFoE.roa
Signing time:             Sat 01 Jan 2022 06:59:15 +0000
ROA not before:           Sat 01 Jan 2022 06:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        45.82.168.0/22 maxlen: 22

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18376545 (0x1186761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55698a5dfd2bbacaa0c2bb18d5afed1a3b98de95
        Validity
            Not Before: Jan  1 06:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc2d2bbdce37db05f1a96dce3098e29ce2591681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:cc:3e:a6:15:f0:d0:7f:97:bb:5e:c2:0c:
                    33:7c:d6:45:a7:d4:59:e0:fe:44:a3:10:5c:bd:dd:
                    f9:88:9b:a3:ac:34:51:c8:9b:c4:77:d1:09:07:14:
                    0c:0f:e8:11:76:38:31:7f:82:20:ae:4a:43:2c:a5:
                    ec:21:09:79:8c:cc:86:41:2e:61:f3:23:87:af:df:
                    22:db:7c:00:86:4d:cc:6f:e5:55:d8:36:95:2d:a7:
                    d6:8e:07:30:de:d1:0c:fe:7f:44:6b:ef:69:d5:5c:
                    9c:07:5f:74:fe:f2:6d:d4:ed:af:69:1e:ec:7e:b2:
                    ff:cf:d4:44:92:33:d5:a7:06:2b:07:21:99:1c:85:
                    6b:41:8c:b7:ed:9d:b3:91:06:8c:b8:c3:60:67:94:
                    9e:c8:0e:d8:52:a2:c6:3c:5d:e5:33:f3:ab:12:c9:
                    a7:c2:6a:2a:a5:b6:23:8a:52:ed:20:7e:74:96:c4:
                    11:5d:3f:30:a9:50:c4:71:65:82:a0:54:b0:68:3b:
                    fe:11:ca:c4:88:9b:aa:83:db:f0:92:b9:3d:63:df:
                    82:e3:d8:c4:2a:58:0f:54:60:96:c2:f8:7b:77:d2:
                    fb:da:cb:ac:ac:ab:99:f1:1c:69:f5:26:c9:66:32:
                    ef:05:a4:1a:a8:2d:d5:fb:ea:d3:2e:71:6b:1c:38:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:2B:BD:CE:37:DB:05:F1:A9:6D:CE:30:98:E2:9C:E2:59:16:81
            X509v3 Authority Key Identifier:
                keyid:55:69:8A:5D:FD:2B:BA:CA:A0:C2:BB:18:D5:AF:ED:1A:3B:98:DE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWmKXf0rusqgwrsY1a_tGjuY3pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/3C0rvc432wXxqW3OMJjinOJZFoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8035f0-520d-4612-aab7-7dd7e13d165f/1/VWmKXf0rusqgwrsY1a_tGjuY3pU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:39:60:5a:34:04:e6:ab:83:da:a0:3a:bc:24:8c:cf:13:
         12:57:0a:31:ac:37:ef:e0:e5:29:ba:74:78:fd:e6:72:2c:1e:
         ce:6c:9c:f3:e2:fb:87:8d:8d:c7:d2:81:22:91:0a:db:45:58:
         f6:05:b6:e4:11:21:18:22:f7:c9:0b:45:70:b9:a1:e0:d6:b6:
         8f:83:68:22:5c:2b:22:00:44:50:d2:b9:52:22:48:52:ce:d9:
         c3:a1:09:4c:ea:c7:ae:29:77:eb:6e:96:fc:19:eb:fb:78:18:
         59:86:97:c9:2e:79:cc:ac:39:37:a4:75:98:bc:ec:48:39:56:
         5f:9e:d2:a6:48:4b:89:d3:af:09:76:a2:cf:c9:39:79:ca:2c:
         2a:c8:16:bd:49:ab:ac:5e:93:df:f0:c7:a1:b4:3d:c7:41:c4:
         5e:ce:4c:fd:23:ce:33:7e:da:a9:4a:f6:23:5d:c7:dc:6f:59:
         83:b2:c0:8f:6a:64:85:3a:2e:4a:98:40:d2:33:7d:59:e6:ed:
         99:11:e6:f4:4a:7d:38:d2:ff:ca:a9:65:9c:ef:56:68:fe:82:
         a9:03:5e:94:74:c7:5b:ef:80:ec:a1:06:b9:77:2f:31:65:16:
         69:f4:3e:60:12:cf:77:49:7d:6d:4e:7a:04:7a:af:ce:45:f2:
         7d:ae:e4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----