Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/em4JBVGlkIBeO1HHWdGjW_oLQOo.roa
File:                     em4JBVGlkIBeO1HHWdGjW_oLQOo.roa (raw, json)
Hash identifier:          340kE+HVZ4JQ45NvQynmBm2635J7OVD6I98afRwjo38=
Subject key identifier:   7A:6E:09:05:51:A5:90:80:5E:3B:51:C7:59:D1:A3:5B:FA:0B:40:EA
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       03BFB9A0
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/em4JBVGlkIBeO1HHWdGjW_oLQOo.roa
Signing time:             Sat 01 Jan 2022 03:01:28 +0000
ROA not before:           Sat 01 Jan 2022 03:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210896
IP address blocks:        185.239.24.0/24 maxlen: 24
                          2a0c:d540:1111::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62896544 (0x3bfb9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 03:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7a6e090551a590805e3b51c759d1a35bfa0b40ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:e5:db:cf:83:c1:8b:b3:76:3a:a7:8f:ab:
                    26:38:de:19:94:8d:9f:25:fc:ef:04:56:84:bd:cc:
                    29:c8:0e:17:dc:9d:c0:dc:5a:7f:fa:26:e6:4f:6f:
                    b5:6a:51:91:02:e4:92:d7:f5:fb:2f:8c:a9:ec:d3:
                    55:04:d9:b2:8f:50:d0:08:90:88:7a:3a:9c:de:1d:
                    b5:28:55:7b:72:4c:8c:93:4c:5c:63:fb:4f:98:c0:
                    f8:5f:be:4a:80:53:96:c9:b0:a3:d6:6c:fa:1f:03:
                    43:51:f4:23:5c:78:4d:1a:83:6b:c2:19:a9:de:b0:
                    07:e3:98:b1:9e:aa:53:27:00:34:ea:95:4e:00:fa:
                    57:77:72:46:e0:3e:01:12:2f:36:79:95:e5:c4:8c:
                    6e:5f:68:ec:df:d3:1b:06:75:00:2d:92:cc:78:a4:
                    4f:0a:d9:4d:a2:ff:3d:9b:a0:ca:68:ef:6e:84:ca:
                    55:e9:f9:fc:cc:ed:b9:b5:6a:7d:17:0b:9e:a0:55:
                    80:8a:ac:5c:a0:f1:99:a2:11:34:6b:85:09:1b:e9:
                    c5:bd:81:0e:4c:06:cf:35:94:e4:e2:16:7e:8d:c0:
                    0d:5a:17:01:fd:52:c7:9e:ce:53:9e:37:4f:cb:90:
                    c0:e7:9e:70:33:1f:b2:86:45:51:71:c2:ea:18:3f:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6E:09:05:51:A5:90:80:5E:3B:51:C7:59:D1:A3:5B:FA:0B:40:EA
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/em4JBVGlkIBeO1HHWdGjW_oLQOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.24.0/24
                IPv6:
                  2a0c:d540:1111::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:9c:38:33:f2:19:dc:7e:0c:d3:3a:81:a9:70:b8:c6:cc:
         8d:4f:35:5c:eb:5e:ec:7c:7e:ed:aa:da:b8:7b:8d:18:08:26:
         d2:07:75:7e:4f:9c:ca:d9:09:f1:3a:45:54:1f:08:b8:b3:4f:
         8b:ea:9e:7c:4a:1d:a4:3c:be:aa:e3:4d:e6:13:d7:a1:5a:2b:
         e6:1d:01:22:4b:6d:ab:49:5a:ed:97:9f:a3:5f:66:45:36:3b:
         0a:dd:db:27:fb:7d:29:50:f9:55:81:59:ae:de:16:bd:67:71:
         d0:34:a2:ca:4b:b3:5a:f6:d9:a9:f5:a5:25:85:f9:65:81:ff:
         b7:98:96:55:5a:35:6a:55:32:55:3a:6a:61:59:47:79:c2:bd:
         ce:bc:db:fd:f7:e6:ef:5e:33:ea:db:12:81:c1:ab:3d:e3:c8:
         49:67:17:1f:f0:f4:a3:e0:4b:59:43:48:dc:3a:c7:fd:4f:d1:
         a9:10:7a:15:57:b0:d7:38:37:b3:02:6d:b7:3f:65:11:57:01:
         c6:61:f7:cc:e1:51:71:e5:ca:6f:1a:ca:d9:7c:d8:18:63:ea:
         b0:2b:70:d3:0a:34:04:98:ad:f2:c9:c7:1a:5b:43:a9:69:31:
         26:e2:ac:99:3e:ae:22:d6:d4:20:89:b3:23:11:37:00:ae:9a:
         d5:88:79:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----