Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216474.roa
File:                     AS216474.roa (raw, json)
Hash identifier:          4+RUwPDrk9XPpLBGqyui2FcmbAoqT8b9UVzhaw+func=
Subject key identifier:   48:8C:4A:FF:0F:D6:18:13:17:3D:EB:76:A6:80:DD:54:40:EE:11:B8
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       599D2CB7D81B09618EE68D87633B5D21BFFEA131
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216474.roa
Signing time:             Wed 20 Dec 2023 16:21:42 +0000
ROA not before:           Wed 20 Dec 2023 16:16:42 +0000
ROA not after:            Wed 18 Dec 2024 16:21:42 +0000
asID:                     216474
IP address blocks:        2a13:df80:13fa::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:2c:b7:d8:1b:09:61:8e:e6:8d:87:63:3b:5d:21:bf:fe:a1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Dec 20 16:16:42 2023 GMT
            Not After : Dec 18 16:21:42 2024 GMT
        Subject: CN=488C4AFF0FD61813173DEB76A680DD5440EE11B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:24:b9:7d:25:85:58:70:14:e1:c6:1d:72:29:
                    ca:57:48:b5:ce:83:93:06:b2:8b:6d:96:12:e4:47:
                    9b:38:8c:b3:f5:6d:79:f6:6c:41:f4:c3:e8:4e:31:
                    eb:2d:3e:58:ce:f1:86:01:66:ca:07:ac:d2:41:5a:
                    05:2d:71:ee:52:fe:47:e5:fb:bf:2f:02:06:9f:b6:
                    86:0e:c8:23:b4:92:2f:b4:46:df:99:98:4a:5b:0d:
                    72:aa:28:d4:51:6e:1f:9a:5d:0d:f8:f5:47:8a:ec:
                    27:b0:01:52:ed:89:a8:90:8a:3b:4d:50:cb:92:35:
                    ba:f0:c9:e4:52:32:59:22:10:f4:73:84:8d:c2:c9:
                    8b:e7:ee:30:ac:37:33:1d:54:00:82:56:1e:55:95:
                    73:52:65:0b:79:d5:38:1e:56:2a:36:9a:00:1d:a0:
                    dd:1c:11:84:68:2e:8b:f6:5a:e6:27:6c:70:81:78:
                    13:e9:a3:49:cb:60:b2:2d:89:ea:89:f0:e9:51:5e:
                    e8:e2:93:23:38:70:e5:97:1a:1a:ae:7b:32:6e:f7:
                    cf:8f:b7:a7:6e:37:2f:a8:31:6d:b5:16:6d:10:09:
                    c7:a9:1f:0f:6f:09:de:2e:4e:ee:11:4c:8e:0c:a2:
                    81:8c:20:06:8b:52:5e:3c:94:51:19:86:93:4b:ca:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8C:4A:FF:0F:D6:18:13:17:3D:EB:76:A6:80:DD:54:40:EE:11:B8
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/AS216474.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:13fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:4f:a6:2b:f1:a8:b9:06:f5:6f:8b:cd:e1:68:b9:40:6f:
         94:ce:b1:ec:fb:9e:fd:70:10:f9:bd:02:3f:69:e9:81:46:0d:
         2d:e9:db:51:23:e3:0c:cc:ca:fd:ab:2e:46:99:71:9d:7e:61:
         e2:b5:9c:d0:7e:05:3d:87:a7:ac:ac:20:81:00:11:42:ed:f0:
         9b:47:ae:33:38:91:97:72:64:a3:c8:fe:e2:0c:59:36:ed:b3:
         cb:35:45:6a:7c:de:f0:57:17:0f:26:24:6a:cc:2d:6c:99:50:
         e4:80:d0:1b:c4:17:0e:50:80:eb:b9:ac:7f:fc:ff:36:16:ed:
         b3:32:a3:25:de:7b:8a:2a:75:23:5f:2a:60:23:8d:72:bd:ed:
         c3:9d:4e:aa:02:ed:38:72:67:d7:d6:24:b9:a6:9b:96:ef:8c:
         e6:02:29:98:9a:51:b9:e9:d1:2b:24:44:e9:12:a6:5e:68:e9:
         eb:55:f1:3c:93:2a:38:6b:41:28:3e:a4:16:2a:0a:50:c4:d1:
         ab:b5:ee:d8:d1:78:ff:42:c5:d5:a6:ca:cc:bf:c8:cb:29:e7:
         6f:fd:90:8c:cf:35:ed:da:fe:9e:2c:19:3f:37:80:6a:52:bb:
         48:2e:e1:3c:05:9e:82:a5:f4:8c:9c:a5:1e:79:d6:99:ed:0b:
         a9:7b:37:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----