Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fCJS4C-W4p62He8-v7giIkBCIDk.roa
File:                     fCJS4C-W4p62He8-v7giIkBCIDk.roa (raw, json)
Hash identifier:          RkoAh3Y2n6xJEA1zTJLoloZzk70ugHcicsl8HKkKDwM=
Subject key identifier:   7C:22:52:E0:2F:96:E2:9E:B6:1D:EF:3E:BF:B8:22:22:40:42:20:39
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD542FC494C96625EE3123A49A81491
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fCJS4C-W4p62He8-v7giIkBCIDk.roa
Signing time:             Mon 02 Jan 2023 00:15:25 +0000
ROA not before:           Mon 02 Jan 2023 00:15:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61954
IP address blocks:        89.35.118.0/23 maxlen: 23

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:42:fc:49:4c:96:62:5e:e3:12:3a:49:a8:14:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c2252e02f96e29eb61def3ebfb8222240422039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:88:c9:e7:fc:3b:1c:49:0d:84:de:ab:ee:
                    f0:c4:b5:33:88:b4:ae:c1:3e:f4:89:0a:59:a4:94:
                    80:41:9e:da:eb:3d:6f:b3:98:ea:c4:be:9b:62:9d:
                    93:bc:f8:c1:e9:5d:7d:1f:fd:9f:da:da:60:fb:da:
                    fc:53:9e:31:36:3a:f8:83:c1:d7:0d:e3:37:b1:ef:
                    d5:c1:e3:33:19:25:c0:a7:37:1a:32:a3:d2:b8:ba:
                    95:a3:51:b9:b8:96:91:77:5d:57:a2:86:29:bd:3a:
                    7d:72:89:cd:b6:73:b0:f9:33:79:ff:c8:f2:a5:ea:
                    96:91:70:e1:8c:a6:82:00:21:04:1d:de:72:1e:42:
                    f9:a8:06:5c:01:d7:58:42:15:a6:91:7f:6c:0e:5e:
                    ce:e2:67:26:44:53:19:4c:c9:34:e8:67:d2:8b:75:
                    04:64:75:e5:c2:c4:15:cd:da:14:f4:4e:fa:f5:53:
                    6f:4d:72:6b:72:cc:2b:d3:4b:6b:93:05:26:f7:44:
                    dc:5e:b6:e1:24:cd:43:cc:88:03:27:d8:f2:db:1c:
                    e7:ee:57:a5:63:7d:82:a4:e8:5d:45:49:73:4d:bb:
                    05:a1:19:84:e4:5d:62:d5:bb:48:58:ea:ac:0c:fa:
                    8a:0e:5d:37:0f:6d:c3:a0:14:bb:b8:e1:58:f2:3f:
                    5e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:52:E0:2F:96:E2:9E:B6:1D:EF:3E:BF:B8:22:22:40:42:20:39
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/fCJS4C-W4p62He8-v7giIkBCIDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:a1:d2:19:cd:91:c4:27:00:3e:61:21:23:d4:b5:82:e6:
         2b:f2:34:89:81:4c:03:da:af:60:dd:25:a7:8a:54:4e:0e:ef:
         09:10:06:5a:8d:f5:0b:91:f3:21:9f:03:f1:1a:fb:b4:ce:2b:
         af:c5:22:59:42:e8:3f:ea:2c:2e:f1:c5:bd:56:e1:11:bb:1f:
         c5:3c:9b:9a:a5:c0:88:fd:d2:5f:a9:c5:e6:6d:57:3e:21:6d:
         d9:98:50:47:5f:8c:d2:41:e2:41:b6:c9:2c:f5:77:ac:ac:71:
         c7:3d:c5:76:0a:37:57:c8:6c:18:24:f4:dd:8b:c6:73:6c:5b:
         c1:0d:e7:5f:c1:62:6a:b2:b0:b2:60:3e:e3:3c:dc:60:c9:86:
         ce:a0:bc:07:53:44:7d:2c:b8:20:85:c8:d8:e0:59:f6:10:83:
         6f:4a:e7:09:53:a3:b5:0d:d9:bf:03:6d:ad:dd:d0:1a:5c:19:
         5b:b2:96:14:9a:55:f5:86:95:38:83:15:14:82:ec:6f:8a:ed:
         66:8e:82:2c:bd:c0:bf:cb:4e:b4:06:23:3f:66:a9:45:e9:69:
         59:4d:f5:e7:6c:a6:41:e9:b6:8c:0b:ce:a8:78:a6:56:5f:72:
         3d:e4:da:39:f0:bb:c1:71:71:4c:9f:4a:de:e0:b1:63:1a:0d:
         3f:8a:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----