Autonomous System Provider Authorization

$ rpki-client -vvf krill.uta.ng/repo/pongery/1/AS209025.asa
File:                     AS209025.asa (raw, json)
Hash identifier:          p0+s8WwDy2AbUytsg1FbFlBmoVIGUvDH9m/mxr6THx0=
Subject key identifier:   2D:DE:7B:1F:0A:21:36:CD:55:32:3A:E2:68:62:0E:62:8D:C9:26:6E
Certificate issuer:       /CN=bf355f6739969148843881f1ba9462338ec4f865
Certificate serial:       69CFF41020FFA5C275C420643E9AE7583F8B571E
Authority key identifier: BF:35:5F:67:39:96:91:48:84:38:81:F1:BA:94:62:33:8E:C4:F8:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzVfZzmWkUiEOIHxupRiM47E-GU.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/1/AS209025.asa
Signing time:             Thu 15 Aug 2024 12:30:00 +0000
ASPA not before:          Thu 15 Aug 2024 12:25:00 +0000
ASPA not after:           Thu 14 Aug 2025 12:30:00 +0000
Customer ASID:            209025
Providers:                AS: 945
                          AS: 6939
                          AS: 15353
                          AS: 21738
                          AS: 29632
                          AS: 34465
                          AS: 34549
                          AS: 34927
                          AS: 36369
                          AS: 48605
                          AS: 140731
                          AS: 150249
                          AS: 199762
                          AS: 200160
                          AS: 203686
                          AS: 203913
                          AS: 210152
                          AS: 210475
                          AS: 400304
                          AS: 400818

Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/1/BF355F6739969148843881F1BA9462338EC4F865.crl
                          rsync://krill.uta.ng/repo/pongery/1/BF355F6739969148843881F1BA9462338EC4F865.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzVfZzmWkUiEOIHxupRiM47E-GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:f4:10:20:ff:a5:c2:75:c4:20:64:3e:9a:e7:58:3f:8b:57:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf355f6739969148843881f1ba9462338ec4f865
        Validity
            Not Before: Aug 15 12:25:00 2024 GMT
            Not After : Aug 14 12:30:00 2025 GMT
        Subject: CN=2DDE7B1F0A2136CD55323AE268620E628DC9266E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:65:1e:d5:35:31:71:01:c8:6c:b7:6f:67:
                    45:43:d8:78:38:f5:2e:53:c3:87:8a:53:9f:37:97:
                    10:fc:7e:eb:3c:32:f0:8a:ea:11:a3:24:28:ba:4b:
                    f0:5b:d5:08:40:3f:ce:ba:a3:91:29:f8:4d:a3:50:
                    69:c8:b9:e0:8f:37:60:84:d9:4c:24:16:99:bc:1c:
                    8b:ce:1f:48:6d:f8:33:08:1d:a9:a7:ee:c7:84:48:
                    97:38:da:f3:be:26:8c:26:d0:cf:62:d0:c4:a0:15:
                    92:4b:02:46:07:92:f3:b7:89:0d:32:1c:66:b6:7b:
                    2d:3b:95:c5:a0:45:45:cf:57:41:78:92:ea:5a:1e:
                    17:60:19:9f:78:75:76:0e:ba:9c:99:bd:75:5b:9d:
                    f3:3b:40:08:2c:b8:f3:3f:46:eb:84:77:3b:96:4f:
                    9e:75:6d:25:3f:77:57:99:8b:ce:af:55:d5:d1:13:
                    d1:26:c0:b5:a8:f7:21:c3:cf:a6:fc:f7:35:3c:c2:
                    6e:78:bc:03:6f:a6:d4:59:68:d0:39:a9:b7:18:e2:
                    07:87:82:12:c6:7c:b3:b7:50:01:96:97:ad:32:40:
                    a2:64:38:a0:54:5e:3f:c5:7c:3f:c7:13:fc:73:4a:
                    be:cb:bf:f7:51:89:25:e3:d7:db:0f:ec:38:3b:d3:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DE:7B:1F:0A:21:36:CD:55:32:3A:E2:68:62:0E:62:8D:C9:26:6E
            X509v3 Authority Key Identifier:
                keyid:BF:35:5F:67:39:96:91:48:84:38:81:F1:BA:94:62:33:8E:C4:F8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/1/BF355F6739969148843881F1BA9462338EC4F865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzVfZzmWkUiEOIHxupRiM47E-GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/1/AS209025.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209025

    Signature Algorithm: sha256WithRSAEncryption
         82:12:74:05:93:55:1e:41:89:32:c7:f6:29:64:4d:a9:1e:70:
         c8:bb:1e:01:c5:01:53:8a:1b:27:e6:07:a7:43:ea:0d:88:46:
         2a:e3:23:08:ce:38:a6:1a:0a:a0:7f:6b:fb:1d:f4:98:3f:86:
         50:ec:b3:b5:06:cb:2e:7a:ca:fb:ac:ad:c2:a6:a8:62:7c:cd:
         1f:79:4c:e9:f5:ef:48:49:06:f1:eb:2c:0d:4d:20:e0:3a:46:
         eb:76:b1:2d:73:ba:aa:e6:62:96:63:74:67:b7:30:29:ba:5d:
         9e:81:e3:6e:a7:a1:82:71:28:a5:2c:86:e8:26:af:a3:73:f1:
         8b:f7:61:04:97:a0:4d:b0:82:6a:6c:f5:63:ce:47:9e:45:54:
         4d:6c:3b:b5:63:3e:41:1c:49:1d:05:3a:fe:08:63:8a:aa:73:
         52:3a:3b:c1:d6:f2:6d:48:e7:a5:79:43:41:2c:d7:13:f2:bd:
         ed:d2:51:6c:90:d6:26:4a:77:38:b6:cd:b5:4d:fd:5c:8c:15:
         da:54:d6:27:57:c2:ef:7e:1d:2e:4f:74:ef:55:9f:1b:d1:c3:
         99:cc:28:db:4b:ea:b9:3d:08:ad:b7:96:3e:26:0f:e0:2b:43:
         49:00:fb:4c:52:37:f2:f8:37:8a:81:59:65:26:d6:db:de:50:
         f6:48:c5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----