Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/CZnMuYSiteNrepp9T9oljSN1RrY.roa
File:                     CZnMuYSiteNrepp9T9oljSN1RrY.roa (raw, json)
Hash identifier:          0Z5lWK4GTCZYD+86RTuXPK71DU35RS3rIMk3C1R81jo=
Subject key identifier:   09:99:CC:B9:84:A2:B5:E3:6B:7A:9A:7D:4F:DA:25:8D:23:75:46:B6
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       29FAECA7
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/CZnMuYSiteNrepp9T9oljSN1RrY.roa
Signing time:             Sat 01 Jan 2022 13:54:31 +0000
ROA not before:           Sat 01 Jan 2022 13:54:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212414
IP address blocks:        93.179.64.0/23 maxlen: 23
                          2a02:d0c2:2::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704310439 (0x29faeca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jan  1 13:54:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0999ccb984a2b5e36b7a9a7d4fda258d237546b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:61:9d:1b:8c:05:a0:76:cb:c1:c0:db:cc:
                    07:49:ac:61:fa:ed:84:43:fd:37:4c:a4:59:fb:f1:
                    2a:a9:51:e8:bf:f6:b0:58:24:49:6a:60:cc:31:22:
                    03:85:d9:65:2e:b1:ff:7a:49:26:36:88:94:f7:80:
                    8c:fd:f8:26:6b:88:85:69:77:f7:79:67:ed:c0:85:
                    dc:2b:9d:72:d0:5a:60:f4:56:c2:a3:b7:88:56:c1:
                    a4:5e:22:3a:8f:77:21:b5:60:e7:7f:cd:34:d8:80:
                    c7:ef:7c:06:72:2e:59:28:d9:e8:b9:74:8a:6b:b2:
                    be:22:57:f5:c2:dc:d2:3c:dc:c3:e6:a6:6b:98:61:
                    75:5c:57:01:ea:0b:fe:2d:aa:fc:74:5d:a7:33:c9:
                    0b:22:c3:ad:fd:ce:85:07:17:38:b6:9f:d2:41:fa:
                    87:aa:1d:43:3d:3d:a1:c5:26:41:7c:eb:62:39:cd:
                    79:ad:54:51:d7:3f:6a:37:72:86:cf:df:bb:43:74:
                    1f:40:b9:65:08:7b:81:75:35:f4:0f:22:cc:78:a5:
                    7b:f5:ef:32:12:b3:bb:f1:8f:d7:30:a5:be:ad:cb:
                    6e:61:91:07:8d:99:e3:4c:2f:31:61:a4:d1:86:fe:
                    99:12:70:c5:a6:14:fb:ce:73:30:99:63:e3:55:87:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:99:CC:B9:84:A2:B5:E3:6B:7A:9A:7D:4F:DA:25:8D:23:75:46:B6
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/CZnMuYSiteNrepp9T9oljSN1RrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.64.0/23
                IPv6:
                  2a02:d0c2:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:20:ef:95:be:a7:56:79:55:c2:e2:81:34:dc:06:e0:ef:6a:
         bf:76:71:69:21:d8:a0:cb:35:0e:3b:d3:a2:2d:04:f4:f5:59:
         25:79:92:df:b9:8b:6f:84:de:7b:fd:17:0b:c2:c6:3f:35:ac:
         04:2b:2b:d2:8d:47:fc:1b:00:b5:a7:dd:fc:a7:d2:2f:0e:8b:
         85:f3:45:52:17:db:88:0b:66:08:d1:7b:fa:2f:64:d2:56:51:
         cb:b0:f2:f7:90:91:b6:13:a5:67:69:64:93:e1:21:c6:c0:5e:
         9f:a8:b4:70:fd:83:4d:6e:ca:0d:df:55:1e:2b:0c:7f:f2:2e:
         df:c3:dd:2e:df:c9:cf:b8:47:77:3e:7d:e7:f3:b9:f4:75:17:
         ac:e5:8f:5e:b6:2d:94:0c:46:bc:e4:97:6f:2f:1d:b7:b2:ee:
         3b:e8:33:8f:48:17:39:6f:1a:ea:19:f1:42:20:79:ba:fd:f9:
         d2:69:63:d4:a5:34:14:8b:b4:98:0a:7d:bb:af:3f:6a:b4:bc:
         1e:89:80:74:41:f9:82:8d:c3:9f:12:2e:4a:40:dc:55:67:92:
         9f:3a:d5:cc:c8:ed:a0:de:92:1c:87:57:0f:0c:84:f0:20:3c:
         fe:d0:45:ef:b1:eb:a5:7d:21:d0:69:46:c8:11:ec:dc:54:90:
         9b:5a:97:b4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEKfrspzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MDQ1ZGFjYzgzNzc5OGMzZTZjZjMxZjRkMjc5NDZhMzNiMGRlNjYxMB4XDTIyMDEw
MTEzNTQzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDk5OWNjYjk4NGEy
YjVlMzZiN2E5YTdkNGZkYTI1OGQyMzc1NDZiNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM7qYZ0bjAWgdsvBwNvMB0msYfrthEP9N0ykWfvxKqlR6L/2
sFgkSWpgzDEiA4XZZS6x/3pJJjaIlPeAjP34JmuIhWl393ln7cCF3CudctBaYPRW
wqO3iFbBpF4iOo93IbVg53/NNNiAx+98BnIuWSjZ6Ll0imuyviJX9cLc0jzcw+am
a5hhdVxXAeoL/i2q/HRdpzPJCyLDrf3OhQcXOLaf0kH6h6odQz09ocUmQXzrYjnN
ea1UUdc/ajdyhs/fu0N0H0C5ZQh7gXU19A8izHile/XvMhKzu/GP1zClvq3LbmGR
B42Z40wvMWGk0Yb+mRJwxaYU+85zMJlj41WH+KkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQJmcy5hKK142t6mn1P2iWNI3VGtjAfBgNVHSMEGDAWgBQQRdrMg3eYw+bP
MfTSeUajOw3mYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0VFWGF6SU4zbU1QbXp6SDAwbmxHb3pzTjVtRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8x
L0Nabk11WVNpdGVOcmVwcDlUOW9salNOMVJyWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MjY2Y2FmLTNiNDMtNDllMC1iNmUxLTljMTc0ZTUzZTRmZS8xL0VFWGF6SU4zbU1Q
bXp6SDAwbmxHb3pzTjVtRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAV2zQDAPBAIAAjAJAwcAKgLQwgAC
MA0GCSqGSIb3DQEBCwUAA4IBAQACIO+VvqdWeVXC4oE03Abg72q/dnFpIdigyzUO
O9OiLQT09VkleZLfuYtvhN57/RcLwsY/NawEKyvSjUf8GwC1p938p9IvDouF80VS
F9uIC2YI0Xv6L2TSVlHLsPL3kJG2E6VnaWST4SHGwF6fqLRw/YNNbsoN31UeKwx/
8i7fw90u38nPuEd3Pn3n87n0dRes5Y9eti2UDEa85JdvLx23su476DOPSBc5bxrq
GfFCIHm6/fnSaWPUpTQUi7SYCn27rz9qtLweiYB0QfmCjcOfEi5KQNxVZ5KfOtXM
yO2g3pIch1cPDITwIDz+0EXvseulfSHQaUbIEezcVJCbWpe0
-----END CERTIFICATE-----