Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa
File:                     f6hUC1SdvEQvD-1dlICMK-jhUMk.roa (raw, json)
Hash identifier:          ehi0yhNtopafLVZDPQKnhjpb1fSXORmWQOJI8GnSkqw=
Subject key identifier:   7F:A8:54:0B:54:9D:BC:44:2F:0F:ED:5D:94:80:8C:2B:E8:E1:50:C9
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       022F14E5
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa
Signing time:             Fri 01 Apr 2022 10:13:31 +0000
ROA not before:           Fri 01 Apr 2022 10:13:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35830
IP address blocks:        83.171.254.0/23 maxlen: 23

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36639973 (0x22f14e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Apr  1 10:13:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fa8540b549dbc442f0fed5d94808c2be8e150c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:b0:56:5f:82:23:92:00:04:1f:72:a0:48:
                    1e:af:75:22:e7:8b:fa:1c:fd:82:b3:13:5b:30:e3:
                    07:c8:4e:55:9d:b5:83:b3:63:ef:f1:df:34:1c:1e:
                    f6:c3:ca:9d:2b:73:c3:27:2c:1a:89:73:a5:30:48:
                    4b:23:b6:c3:c3:98:db:71:53:a8:86:4a:d0:06:6f:
                    d8:63:9c:59:93:80:30:c7:34:3d:49:49:d2:84:c3:
                    5c:1f:2b:cd:de:83:98:1c:a6:b9:24:00:c8:ac:1f:
                    c3:01:a9:8e:61:7c:32:ae:21:e3:77:75:19:68:c8:
                    6a:28:8c:3d:c6:42:0b:df:f8:91:de:35:01:a0:46:
                    f4:ef:aa:88:e7:84:15:b1:d0:8e:f4:a7:1b:56:13:
                    b5:32:25:3e:5e:38:96:0a:66:fa:89:20:63:41:c6:
                    0c:c5:0c:36:09:52:78:aa:4c:ee:6f:3b:5b:40:5a:
                    d3:e5:4e:42:ac:20:55:01:ab:ee:00:f2:13:c7:bd:
                    cf:5a:2e:75:ca:85:62:7f:0a:7b:c9:a0:ea:b9:13:
                    97:78:31:8a:29:e1:54:1d:75:36:e8:9a:1d:f2:40:
                    21:e5:58:9e:1d:65:81:84:89:6a:92:ab:22:5e:5e:
                    6c:aa:1e:c1:1d:b3:a0:6e:89:23:4a:3e:e4:1a:00:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:54:0B:54:9D:BC:44:2F:0F:ED:5D:94:80:8C:2B:E8:E1:50:C9
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/f6hUC1SdvEQvD-1dlICMK-jhUMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.171.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:2f:d4:bf:ef:ad:80:86:2f:a6:2e:99:49:8b:22:f7:34:
         93:d5:97:55:46:fe:54:b2:8d:80:08:bc:e5:76:28:d7:b4:58:
         e9:7e:df:14:90:e4:66:82:31:45:6c:30:2c:be:e1:bb:46:b9:
         68:d4:9e:ee:1a:80:10:89:33:bd:2d:19:94:15:53:bb:b3:fe:
         f1:1b:eb:bb:1e:d7:07:95:3b:f3:e2:34:26:ae:a1:9e:1a:7e:
         06:39:6d:03:10:89:f2:ba:a3:2b:08:a4:e3:4f:ea:12:60:49:
         59:a4:24:d5:2f:72:dd:0b:00:5c:19:b8:9b:12:5c:92:6b:12:
         73:de:f7:65:d9:cb:86:38:d3:70:19:fb:ba:25:9b:8d:92:82:
         6f:41:a6:15:a0:4c:9d:03:f3:d9:28:3c:2a:65:b7:8c:3d:f1:
         26:36:73:38:bf:6b:89:06:9f:ed:3b:37:6a:5f:d5:d2:24:63:
         b6:58:c7:ed:e6:eb:bd:64:50:31:a2:56:ba:73:8e:d8:26:db:
         2c:16:00:57:d0:5a:ac:47:75:cb:bc:3c:d0:d4:a1:7b:d8:f0:
         10:a8:8d:94:e7:60:79:0e:7b:12:60:d0:ec:a0:83:53:22:34:
         d8:a1:94:eb:61:56:85:5b:cb:c7:fd:d4:0e:13:0b:70:23:d4:
         07:49:d5:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAi8U5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
NGRiOTVmOWQxYjVjM2VjOTM0ZmY4NGQ2ZmY3ZjAxMjQyZGE4NDJhMB4XDTIyMDQw
MTEwMTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ZhODU0MGI1NDlk
YmM0NDJmMGZlZDVkOTQ4MDhjMmJlOGUxNTBjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYPsFZfgiOSAAQfcqBIHq91IueL+hz9grMTWzDjB8hOVZ21
g7Nj7/HfNBwe9sPKnStzwycsGolzpTBISyO2w8OY23FTqIZK0AZv2GOcWZOAMMc0
PUlJ0oTDXB8rzd6DmBymuSQAyKwfwwGpjmF8Mq4h43d1GWjIaiiMPcZCC9/4kd41
AaBG9O+qiOeEFbHQjvSnG1YTtTIlPl44lgpm+okgY0HGDMUMNglSeKpM7m87W0Ba
0+VOQqwgVQGr7gDyE8e9z1oudcqFYn8Ke8mg6rkTl3gxiinhVB11NuiaHfJAIeVY
nh1lgYSJapKrIl5ebKoewR2zoG6JI0o+5BoAs6MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR/qFQLVJ28RC8P7V2UgIwr6OFQyTAfBgNVHSMEGDAWgBT025X50bXD7JNP
+E1v9/ASQtqEKjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzlOdVYtZEcxdy15VFRfaE5iX2Z3RWtMYWhDby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNDZkN2FmLTAyZmItNDVmOS1hOTIyLTE0YjM4YjZlMDBhNy8x
L2Y2aFVDMVNkdkVRdkQtMWRsSUNNSy1qaFVNay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NDZkN2FmLTAyZmItNDVmOS1hOTIyLTE0YjM4YjZlMDBhNy8xLzlOdVYtZEcxdy15
VFRfaE5iX2Z3RWtMYWhDby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVOr/jANBgkqhkiG9w0BAQsFAAOC
AQEATWsv1L/vrYCGL6YumUmLIvc0k9WXVUb+VLKNgAi85XYo17RY6X7fFJDkZoIx
RWwwLL7hu0a5aNSe7hqAEIkzvS0ZlBVTu7P+8Rvrux7XB5U78+I0Jq6hnhp+Bjlt
AxCJ8rqjKwik40/qEmBJWaQk1S9y3QsAXBm4mxJckmsSc973ZdnLhjjTcBn7uiWb
jZKCb0GmFaBMnQPz2Sg8KmW3jD3xJjZzOL9riQaf7Ts3al/V0iRjtljH7ebrvWRQ
MaJWunOO2CbbLBYAV9BarEd1y7w80NShe9jwEKiNlOdgeQ57EmDQ7KCDUyI02KGU
62FWhVvLx/3UDhMLcCPUB0nV5g==
-----END CERTIFICATE-----