Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AS43607.asa
File:                     AS43607.asa (raw, json)
Hash identifier:          sZAu9o3gCJdxhZl/rLbIkl0SqdUp27taq/wDNi4IKdk=
Subject key identifier:   CD:06:4F:74:4F:B9:2A:2A:4C:B1:86:65:C1:AC:08:A2:F0:E6:DF:FE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       6459A0AB285215532C620D8B04334EFC0F70B1D0
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AS43607.asa
Signing time:             Fri 21 Jun 2024 08:14:17 +0000
ASPA not before:          Fri 21 Jun 2024 08:09:17 +0000
ASPA not after:           Fri 20 Jun 2025 08:14:17 +0000
Customer ASID:            43607
Providers:                AS: 16097
                          AS: 215828

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:59:a0:ab:28:52:15:53:2c:62:0d:8b:04:33:4e:fc:0f:70:b1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Jun 21 08:09:17 2024 GMT
            Not After : Jun 20 08:14:17 2025 GMT
        Subject: CN=CD064F744FB92A2A4CB18665C1AC08A2F0E6DFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:0f:0d:a2:65:81:92:34:ed:21:11:a1:ea:
                    1f:c4:81:f1:57:41:9f:7d:d1:04:25:b3:85:eb:3c:
                    5a:4f:ad:a6:48:a4:10:1e:27:5f:a5:ad:9c:65:08:
                    8e:0e:87:8a:8a:70:e3:fa:25:68:a8:8d:e9:76:cd:
                    ab:61:27:d6:99:92:11:e8:17:6b:7b:48:8e:d5:22:
                    8a:c8:6a:89:ac:c1:68:f7:b0:95:4f:f7:0b:10:97:
                    c4:f4:a6:49:62:4a:20:ef:48:de:66:9e:b2:4f:70:
                    13:be:5c:09:22:1a:01:48:71:34:bf:b4:c7:c6:2b:
                    a7:3a:68:36:9f:b3:da:86:92:7d:a1:52:bd:ca:41:
                    1a:7a:11:6a:ea:cb:33:95:bd:0f:1d:6b:c6:04:a1:
                    13:cb:be:1e:b3:cf:76:c9:9a:ef:16:49:70:75:c5:
                    52:cf:a9:2c:f6:ec:6f:3f:f2:00:96:29:ca:00:53:
                    54:1c:3a:a5:f9:3e:5d:cc:a0:7a:cf:c5:8e:2f:eb:
                    89:f4:2d:30:8e:31:8b:35:06:18:f1:52:b6:2c:e2:
                    83:b7:26:6e:55:39:33:23:fa:24:93:d8:44:f3:d3:
                    ce:4a:33:66:6f:93:ea:52:08:4f:7a:cc:d1:92:37:
                    0d:d4:46:5c:5f:cf:88:b7:5f:0d:a3:9c:05:f0:ef:
                    bd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:4F:74:4F:B9:2A:2A:4C:B1:86:65:C1:AC:08:A2:F0:E6:DF:FE
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AS43607.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  43607

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:69:59:27:3c:e1:c2:e3:f6:08:cc:94:0b:27:60:7c:a9:
         08:45:2c:3c:7e:67:5d:d6:08:66:15:2b:06:9c:a7:48:83:60:
         25:23:a3:11:46:4b:0a:4c:3f:f6:7d:5d:93:b0:9e:08:e9:c4:
         69:47:ae:2e:22:70:2e:2d:9d:3a:84:67:8e:48:d8:a8:a4:0c:
         ae:d7:f7:cf:9c:90:46:9f:f9:89:46:19:e2:cb:49:3d:d9:88:
         b5:16:44:f7:8e:95:27:97:f3:9c:7c:9f:64:21:b8:48:f8:ea:
         9b:53:a9:e5:fd:8d:3b:b9:63:e1:9f:2c:df:7e:60:0c:11:26:
         66:b4:be:af:2d:3a:bd:29:82:e3:42:84:58:45:5a:33:2f:9e:
         1a:e0:89:01:8c:00:20:d0:89:b2:90:2b:0d:63:9e:68:c5:a2:
         d7:2c:12:53:e9:4c:d1:e1:96:5b:83:fb:d4:26:1b:4e:8c:e2:
         16:f9:6a:76:a8:8a:68:cb:f6:bf:b0:23:0a:bb:f6:e9:48:a3:
         dd:14:ef:4b:da:a4:a6:e3:ae:ac:e7:8d:68:35:c0:90:3f:1b:
         c3:7b:15:11:50:bd:1d:1a:4d:28:88:b5:9d:71:41:f2:18:f2:
         98:6e:58:e6:86:a1:0b:5c:6e:b1:38:f1:68:15:3d:f1:9e:18:
         6c:98:6e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----