Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/sKp-OMWUqXDQJ7Lj0Dx-qWaiMGM.roa
File:                     sKp-OMWUqXDQJ7Lj0Dx-qWaiMGM.roa (raw, json)
Hash identifier:          YEzU1AZVV/qizmqo/p6ei7GJuYjnCEvrduXFqJ8WiV4=
Subject key identifier:   B0:AA:7E:38:C5:94:A9:70:D0:27:B2:E3:D0:3C:7E:A9:66:A2:30:63
Certificate issuer:       /CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
Certificate serial:       01856D01C88593DDF2ED059ACB06418D76B2
Authority key identifier: 9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/sKp-OMWUqXDQJ7Lj0Dx-qWaiMGM.roa
Signing time:             Sun 01 Jan 2023 11:05:11 +0000
ROA not before:           Sun 01 Jan 2023 11:05:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        82.145.96.0/19 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:01:c8:85:93:dd:f2:ed:05:9a:cb:06:41:8d:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2cb7f9ca0efd72be258a4a09358806374b4662
        Validity
            Not Before: Jan  1 11:05:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0aa7e38c594a970d027b2e3d03c7ea966a23063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:7c:50:d9:28:ed:95:2e:a8:9c:70:92:ba:
                    5f:40:0b:08:62:98:a4:07:52:9c:8a:45:9f:63:52:
                    c7:0b:ad:53:e1:43:99:fe:ae:85:74:79:d9:a0:d7:
                    0e:3a:a7:f6:fb:33:f5:87:77:55:86:48:1b:0e:a9:
                    8f:25:b6:94:79:b8:94:54:b7:61:b2:30:9f:37:d4:
                    bf:72:35:c2:9d:8e:ff:21:71:ce:bd:4b:0d:77:db:
                    34:d4:44:fe:09:49:a9:b4:67:6f:50:99:b2:4c:60:
                    81:8e:c8:3f:6c:c1:ef:67:da:14:54:56:5b:00:81:
                    2b:fd:08:9d:07:1e:26:c8:10:e2:d9:62:72:e1:2b:
                    19:62:da:1d:df:d6:36:4a:24:1b:14:46:f0:a0:a5:
                    95:81:74:9a:22:34:12:b6:9c:74:8b:4d:4b:8a:17:
                    e0:e1:2d:00:e3:60:3c:c6:96:f1:27:ae:3c:6a:b7:
                    7f:1d:45:63:38:d4:7a:8e:ba:ac:47:b4:c6:a3:81:
                    49:8a:44:12:86:55:f6:93:50:18:f5:dc:c4:1b:15:
                    0d:b1:66:1c:1e:3e:09:37:45:33:77:e9:08:c4:10:
                    7f:6f:ff:3b:3a:d9:92:a5:3e:d9:00:a5:fd:b6:11:
                    e4:55:98:3f:1f:b2:b9:b9:77:88:1a:a3:a9:62:88:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AA:7E:38:C5:94:A9:70:D0:27:B2:E3:D0:3C:7E:A9:66:A2:30:63
            X509v3 Authority Key Identifier:
                keyid:9C:2C:B7:F9:CA:0E:FD:72:BE:25:8A:4A:09:35:88:06:37:4B:46:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCy3-coO_XK-JYpKCTWIBjdLRmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/sKp-OMWUqXDQJ7Lj0Dx-qWaiMGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86a426-56ee-46dd-9425-7f92c34eb07c/1/nCy3-coO_XK-JYpKCTWIBjdLRmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.145.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:3a:f3:e8:63:d4:2c:4e:1d:f5:e0:75:6f:db:08:38:14:4b:
         62:58:3b:2b:a9:ef:1c:c7:90:d6:f4:0d:d9:9e:a7:0e:67:f2:
         1a:a7:8c:fc:c0:8a:7b:dd:ac:0d:61:81:8d:95:3a:2c:ed:1a:
         03:46:bb:9a:3c:53:18:88:f3:77:2f:d8:43:db:d6:8c:a7:a0:
         5b:97:88:4c:9a:a1:42:02:78:76:56:fe:0b:c4:d2:aa:c0:b4:
         8c:b1:5c:6c:f0:4a:b0:6a:69:a0:e9:f5:fa:64:66:c4:15:76:
         59:1a:42:2d:33:35:be:30:fc:6f:61:76:45:1f:ba:f1:71:ea:
         dd:dc:c5:11:ea:eb:5a:59:0b:d0:44:6b:69:ce:52:06:f7:15:
         a3:93:e7:28:0b:bd:60:57:65:a0:cd:da:1a:40:71:1f:cb:c9:
         b1:22:bf:5d:a1:85:6d:22:78:90:8b:0c:ec:05:09:e9:bf:f2:
         71:87:7d:51:b6:81:fe:ca:fe:03:74:a0:ce:68:09:d1:90:9b:
         34:7c:03:38:5d:03:2a:15:a7:ea:46:d2:68:71:86:db:82:15:
         df:65:9b:3f:91:e4:16:d6:b2:df:bc:69:90:93:7a:fe:c5:05:
         5e:60:62:6b:ee:d0:0c:af:b0:fc:12:79:9f:b5:53:fa:75:ed:
         d8:16:39:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAciFk93y7QWaywZBjXayMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMmNiN2Y5Y2EwZWZkNzJiZTI1OGE0YTA5MzU4ODA2Mzc0
YjQ2NjIwHhcNMjMwMTAxMTEwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGFhN2UzOGM1OTRhOTcwZDAyN2IyZTNkMDNjN2VhOTY2YTIzMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp58UNko7ZUuqJxwkrpfQAsIYpik
B1KcikWfY1LHC61T4UOZ/q6FdHnZoNcOOqf2+zP1h3dVhkgbDqmPJbaUebiUVLdh
sjCfN9S/cjXCnY7/IXHOvUsNd9s01ET+CUmptGdvUJmyTGCBjsg/bMHvZ9oUVFZb
AIEr/QidBx4myBDi2WJy4SsZYtod39Y2SiQbFEbwoKWVgXSaIjQStpx0i01Lihfg
4S0A42A8xpbxJ648ard/HUVjONR6jrqsR7TGo4FJikQShlX2k1AY9dzEGxUNsWYc
Hj4JN0Uzd+kIxBB/b/87OtmSpT7ZAKX9thHkVZg/H7K5uXeIGqOpYoiT9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCqfjjFlKlw0Cey49A8fqlmojBjMB8GA1UdIwQY
MBaAFJwst/nKDv1yviWKSgk1iAY3S0ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUt
N2Y5MmMzNGViMDdjLzEvc0twLU9NV1VxWERRSjdMajBEeC1xV2FpTUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NmE0MjYtNTZlZS00NmRkLTk0MjUtN2Y5MmMzNGViMDdj
LzEvbkN5My1jb09fWEstSllwS0NUV0lCamRMUm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUpFgMA0G
CSqGSIb3DQEBCwUAA4IBAQCTOvPoY9QsTh314HVv2wg4FEtiWDsrqe8cx5DW9A3Z
nqcOZ/Iap4z8wIp73awNYYGNlTos7RoDRruaPFMYiPN3L9hD29aMp6Bbl4hMmqFC
Anh2Vv4LxNKqwLSMsVxs8Eqwammg6fX6ZGbEFXZZGkItMzW+MPxvYXZFH7rxcerd
3MUR6utaWQvQRGtpzlIG9xWjk+coC71gV2WgzdoaQHEfy8mxIr9doYVtIniQiwzs
BQnpv/Jxh31RtoH+yv4DdKDOaAnRkJs0fAM4XQMqFafqRtJocYbbghXfZZs/keQW
1rLfvGmQk3r+xQVeYGJr7tAMr7D8EnmftVP6de3YFjmX
-----END CERTIFICATE-----