Autonomous System Provider Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa
File:                     FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa (raw, json)
Hash identifier:          wsCvp2J+eZeizU8nrXHkLPhcjyqZ5euDlwLssA/nlwg=
Subject key identifier:   16:34:9F:E6:15:F5:1A:61:A1:28:CB:BD:00:6E:D6:54:89:7C:9B:53
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       A1C7752FF8B1D2E01D
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa
Signing time:             Fri 16 Dec 2022 12:30:02 +0000
ASPA not before:          Fri 16 Dec 2022 12:29:57 +0000
ASPA not after:           Sat 16 Dec 2023 12:29:57 +0000
Customer AS:              15562
Provider Set:             AS: 2914
                          AS: 8283
                          AS: 51088
                          AS: 206238

Validation:               OK
Signature path:           rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
                          rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Mar 2023 17:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a1:c7:75:2f:f8:b1:d2:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Dec 16 12:29:57 2022 GMT
            Not After : Dec 16 12:29:57 2023 GMT
        Subject: CN=1671193591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:c7:74:d9:08:85:b6:0c:8a:cf:71:35:fc:
                    2f:45:87:77:9e:ab:e5:51:0b:b3:7b:17:ee:5f:f1:
                    c2:2c:62:0e:0c:d7:db:4e:a5:9a:0d:e5:1c:44:4c:
                    92:c3:ef:1c:04:fd:e0:bb:52:f0:3a:30:52:39:d8:
                    c3:3c:5b:bd:71:e0:b5:fc:40:c7:35:72:e1:2c:6f:
                    82:b8:e1:ff:39:e3:c5:17:1c:33:74:16:f8:c8:d2:
                    82:16:fa:0a:77:e1:7d:24:fe:7b:e7:90:83:93:c4:
                    2e:b1:b2:6d:5a:14:4d:2f:69:4a:1d:07:af:3c:04:
                    29:4a:a4:e4:48:5d:52:74:5c:b3:c8:18:84:24:4d:
                    b5:09:f3:87:06:e0:f2:b0:b0:23:db:57:3c:f6:02:
                    6c:b7:e9:4d:9f:63:fd:8c:1c:1a:32:a6:22:6d:3d:
                    aa:6d:7f:42:86:1d:ec:ba:c8:d9:93:63:3f:7a:d8:
                    88:23:1c:91:28:15:8b:65:3f:15:f3:92:85:82:17:
                    5f:fb:e9:83:73:4f:7d:64:ff:89:42:75:67:ab:c4:
                    b3:66:09:1e:92:7e:69:be:c3:d6:7d:fe:5e:07:96:
                    6f:51:ef:12:9f:75:f0:7c:34:86:e1:68:10:3f:b4:
                    34:09:7d:65:e1:7f:a0:d1:fc:7b:74:45:fb:96:66:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Subject Key Identifier: 
                16:34:9F:E6:15:F5:1A:61:A1:28:CB:BD:00:6E:D6:54:89:7C:9B:53
            X509v3 Authority Key Identifier: 
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15562

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Subject Information Access: 
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/FjSf5hX1GmGhKMu9AG7WVIl8m1M.asa

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:54:d3:36:1a:b4:1c:4c:14:1e:6d:d8:b6:88:a8:02:f7:
         65:e5:18:5f:40:95:97:17:e1:90:90:04:be:e0:7d:02:df:18:
         49:ba:70:84:fb:df:f4:28:e4:f3:ec:67:a9:25:75:0a:cf:ac:
         44:46:79:39:ed:48:47:15:2d:c7:85:3e:28:66:e7:86:80:01:
         b9:90:d1:84:37:69:93:1d:c2:fb:1b:b0:b1:4c:58:18:5b:36:
         21:b0:1f:a1:dd:c7:25:fa:de:af:78:0e:27:7c:23:11:34:1f:
         03:a3:24:67:e0:d3:6b:8d:c4:ef:43:b1:e1:92:44:63:73:73:
         d8:99:98:b0:c5:22:7d:b0:3f:57:26:4c:aa:a7:b5:fc:63:36:
         a7:3d:4f:7c:c5:59:94:ff:9b:50:66:5c:ac:a5:c2:90:88:c7:
         11:db:61:86:8e:06:74:22:c6:d2:49:f0:76:65:ba:56:ab:dd:
         fc:05:42:e5:43:b8:cc:50:e9:68:35:8d:6d:e4:e9:40:66:d3:
         a6:30:9f:20:f7:37:37:24:fb:87:08:70:64:67:6d:06:03:28:
         11:ff:9f:70:32:0c:65:ab:50:d9:cb:4a:01:50:cd:55:7f:12:
         ef:2b:3f:60:57:28:77:8b:50:23:30:d3:fb:41:ed:fe:af:8f:
         ef:4b:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----