Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/4wUSAdrZUrQgXx2El3WnVRw0xKE.roa
File:                     4wUSAdrZUrQgXx2El3WnVRw0xKE.roa (raw, json)
Hash identifier:          xlqXOKvgh0LeBpIma4+f/i+CYglTTUxSfXYWea3ylZ4=
Subject key identifier:   E3:05:12:01:DA:D9:52:B4:20:5F:1D:84:97:75:A7:55:1C:34:C4:A1
Certificate issuer:       /CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
Certificate serial:       D46742
Authority key identifier: 7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/4wUSAdrZUrQgXx2El3WnVRw0xKE.roa
Signing time:             Sat 01 Jan 2022 11:55:16 +0000
ROA not before:           Sat 01 Jan 2022 11:55:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        45.151.188.0/22 maxlen: 22

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13920066 (0xd46742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba9977d0c656ce119e6c8a1db34aa3148afa868
        Validity
            Not Before: Jan  1 11:55:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3051201dad952b4205f1d849775a7551c34c4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:a8:96:ec:b8:0a:47:d4:0c:0d:7f:f5:5b:
                    18:ab:45:ab:01:4d:f0:38:f1:d7:a6:9f:6c:46:e1:
                    c5:79:05:49:52:2d:43:1d:d5:b6:24:b5:ee:e5:d0:
                    ce:4b:53:39:c0:ec:7a:9e:05:09:15:d5:ef:f3:7d:
                    7a:1e:0a:42:37:32:b5:cc:ee:db:6b:30:04:9a:36:
                    95:83:46:f8:3e:c5:58:46:af:f6:34:ba:39:f7:4a:
                    32:65:36:ef:ba:4c:4c:fe:2b:22:84:56:e7:d0:f4:
                    db:33:e7:5d:af:86:33:7f:b4:19:21:50:4f:91:4f:
                    bc:d8:ad:00:23:64:b7:26:6e:b9:01:49:a5:6d:d2:
                    79:d7:00:95:19:7d:9a:ba:6d:31:3a:00:c4:89:1b:
                    79:f0:82:a7:a6:d7:95:e0:43:4f:d8:40:14:03:2d:
                    e9:ac:93:6a:3e:78:12:7c:28:68:05:6d:28:6a:8b:
                    8a:79:86:e4:52:31:23:b8:c4:5f:66:c8:8c:c3:ab:
                    da:2a:65:78:ea:7e:fd:8f:88:74:fd:96:b5:62:0a:
                    e1:c4:18:2b:2b:29:b5:91:fa:cf:52:ee:da:a5:fd:
                    b7:26:08:fd:7e:ca:ed:4c:d7:bd:50:f8:40:74:06:
                    56:74:1e:41:b3:71:9f:ad:19:b0:1b:1e:13:b3:a4:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:05:12:01:DA:D9:52:B4:20:5F:1D:84:97:75:A7:55:1C:34:C4:A1
            X509v3 Authority Key Identifier:
                keyid:7B:A9:97:7D:0C:65:6C:E1:19:E6:C8:A1:DB:34:AA:31:48:AF:A8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6mXfQxlbOEZ5sih2zSqMUivqGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/4wUSAdrZUrQgXx2El3WnVRw0xKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cb3a04-4442-40f9-adcf-c751a612b5c0/1/e6mXfQxlbOEZ5sih2zSqMUivqGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:ca:7b:a8:05:7b:80:72:9b:97:f0:ce:f6:31:59:e7:d1:
         18:c8:55:6c:98:ce:e7:70:ca:23:b1:96:78:a7:5d:be:f3:b8:
         0a:b0:1a:91:9f:50:9f:23:37:1b:8c:53:08:75:36:70:ab:dd:
         e6:f0:27:56:c9:ff:f1:cd:77:ec:b3:bf:89:b7:fb:0e:49:42:
         a3:d2:cc:27:30:0f:b5:79:73:08:79:21:f4:09:bc:0d:cb:10:
         1f:e1:87:de:92:fb:29:5b:97:a8:c9:5c:da:82:ff:28:14:b5:
         da:91:4e:71:01:ea:d0:d7:02:2c:45:3c:4c:7a:f5:2c:10:41:
         27:e3:9d:50:64:d4:8b:6b:bd:b1:c2:cf:e2:17:76:29:ca:38:
         51:e1:bf:b3:73:93:d9:d3:ea:dc:c3:ad:fa:c5:c7:08:cd:da:
         6e:55:0d:0a:cf:82:0b:81:12:e2:d2:e1:a3:7e:23:cb:df:bd:
         25:f4:f5:4c:f2:6c:76:91:10:95:f1:12:86:33:27:06:34:c5:
         c9:c7:52:b6:31:3c:62:e6:78:b3:65:a4:c1:92:b9:e2:bd:80:
         0b:70:e0:e0:cc:11:4e:dc:60:68:dc:74:10:f3:06:76:32:cb:
         43:20:e5:05:a9:47:40:45:4f:9c:ee:66:e4:44:a9:52:a5:4a:
         93:45:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----