Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/1-lUJFiN0tM7V18mRgz13s0XR7wc.roa
File:                     1-lUJFiN0tM7V18mRgz13s0XR7wc.roa (raw, json)
Hash identifier:          8xnTsvvuecF4u8Uqnan+MsCJx4e+Knf0i4In/d5HnwY=
Subject key identifier:   FA:55:09:16:23:74:B4:CE:D5:D7:C9:91:83:3D:77:B3:45:D1:EF:07
Certificate issuer:       /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial:       054DDFC0
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/1-lUJFiN0tM7V18mRgz13s0XR7wc.roa
Signing time:             Sat 01 Jan 2022 06:53:46 +0000
ROA not before:           Sat 01 Jan 2022 06:53:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        31.177.0.0/21 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88989632 (0x54ddfc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
        Validity
            Not Before: Jan  1 06:53:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa5509162374b4ced5d7c991833d77b345d1ef07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:6e:fa:1a:a8:47:8d:0d:1f:44:c8:06:a4:
                    aa:0d:dd:72:e1:9c:1b:ee:c9:d5:32:58:af:13:c9:
                    ad:b8:8c:30:9c:0f:c2:f5:e2:6d:d8:23:80:a8:e1:
                    43:3c:29:98:e5:5d:f5:36:9d:b1:3c:8f:80:c3:8b:
                    0a:8b:a4:0d:db:5a:2d:31:50:7a:12:e6:68:ae:82:
                    c3:ce:35:37:07:4f:0f:ff:c1:34:d9:db:0c:24:45:
                    25:40:99:28:8a:1f:f4:62:1c:46:d5:18:f7:bd:01:
                    20:f5:b1:49:a3:0b:bb:5a:43:d9:7e:a0:2e:2e:c0:
                    89:23:d4:92:ae:cc:7e:b3:23:b6:36:b2:d7:5c:2e:
                    a5:d1:79:ba:5d:0d:eb:43:39:e9:4c:a3:ff:2b:86:
                    80:f9:03:2a:c8:4a:80:5f:01:68:ac:97:eb:39:72:
                    ab:d7:e4:86:d8:35:3b:d1:18:a0:5a:cf:1f:d9:b9:
                    d5:c4:69:07:00:1a:2c:1f:fe:39:fb:19:24:7b:65:
                    37:7d:88:0e:2e:a6:23:24:d7:75:00:6c:cd:a7:1d:
                    5f:b2:7d:a5:28:84:ed:42:9e:44:44:97:6c:bb:78:
                    d9:f3:4f:fa:e4:e2:66:15:a0:99:c2:8a:63:36:4c:
                    cb:59:e1:88:dd:75:42:b8:82:f7:4e:c3:3f:d7:83:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:55:09:16:23:74:B4:CE:D5:D7:C9:91:83:3D:77:B3:45:D1:EF:07
            X509v3 Authority Key Identifier:
                keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/1-lUJFiN0tM7V18mRgz13s0XR7wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.177.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:0a:dc:4d:c9:cf:75:a3:99:e4:bd:fe:e9:8f:8f:82:81:3f:
         97:e2:8d:81:71:fa:1b:20:81:67:da:a2:80:1d:a7:d1:87:9e:
         22:88:0d:71:0a:4a:46:c9:c0:0b:03:f2:96:50:09:fc:29:c9:
         91:ee:0d:00:94:42:5a:e1:66:d7:c5:68:b7:d1:0f:80:8b:b1:
         5b:ba:d5:33:b9:d2:ae:dc:20:7c:ef:32:59:6d:fe:55:ad:e6:
         35:84:8e:a3:ca:2e:c7:20:8e:e7:6d:65:66:f9:a7:46:e4:0d:
         10:c7:a4:f0:69:01:6f:c9:8d:fc:29:8c:38:06:5b:00:10:d6:
         90:9e:e1:dc:e8:f4:23:49:cb:86:00:53:7a:e7:0f:22:d5:3a:
         83:3a:21:0b:9c:b1:a0:91:40:f9:b5:aa:39:7e:47:d6:18:73:
         72:fc:29:76:ef:5a:32:69:6b:cf:3d:e0:04:21:35:03:57:76:
         9e:c3:fe:e3:9c:b7:d4:ff:ca:5d:ce:93:61:39:64:e6:39:af:
         e3:0f:02:3c:25:ce:81:0b:b6:da:4b:ff:fd:9f:af:4d:0e:0e:
         de:91:18:35:3d:a5:45:68:a9:ce:0c:b4:d0:aa:9d:9c:b9:c8:
         ab:35:12:d4:02:0f:40:b6:59:28:7e:1c:dc:c2:f6:75:be:b7:
         96:cb:85:79
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEBU3fwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDEw
MTA2NTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmE1NTA5MTYyMzc0
YjRjZWQ1ZDdjOTkxODMzZDc3YjM0NWQxZWYwNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANb9bvoaqEeNDR9EyAakqg3dcuGcG+7J1TJYrxPJrbiMMJwP
wvXibdgjgKjhQzwpmOVd9TadsTyPgMOLCoukDdtaLTFQehLmaK6Cw841NwdPD//B
NNnbDCRFJUCZKIof9GIcRtUY970BIPWxSaMLu1pD2X6gLi7AiSPUkq7MfrMjtjay
11wupdF5ul0N60M56Uyj/yuGgPkDKshKgF8BaKyX6zlyq9fkhtg1O9EYoFrPH9m5
1cRpBwAaLB/+OfsZJHtlN32IDi6mIyTXdQBszacdX7J9pSiE7UKeRESXbLt42fNP
+uTiZhWgmcKKYzZMy1nhiN11QriC907DP9eDz0UCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT6VQkWI3S0ztXXyZGDPXezRdHvBzAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
LzEtbFVKRmlOMHRNN1YxOG1SZ3oxM3MwWFI3d2Mucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1
LzdhMzliMS0xZDFjLTQ5MTktYjE5Yy0zZWViZTcxOTY5NzIvMS9aNXAxM3IxbE5a
cEZNWDhnUHhHakllRkxMeXcuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMfsQAwDQYJKoZIhvcNAQELBQAD
ggEBAFcK3E3Jz3WjmeS9/umPj4KBP5fijYFx+hsggWfaooAdp9GHniKIDXEKSkbJ
wAsD8pZQCfwpyZHuDQCUQlrhZtfFaLfRD4CLsVu61TO50q7cIHzvMllt/lWt5jWE
jqPKLscgjudtZWb5p0bkDRDHpPBpAW/JjfwpjDgGWwAQ1pCe4dzo9CNJy4YAU3rn
DyLVOoM6IQucsaCRQPm1qjl+R9YYc3L8KXbvWjJpa8894AQhNQNXdp7D/uOct9T/
yl3Ok2E5ZOY5r+MPAjwlzoELttpL//2fr00ODt6RGDU9pUVoqc4MtNCqnZy5yKs1
EtQCD0C2WSh+HNzC9nW+t5bLhXk=
-----END CERTIFICATE-----