Autonomous System Provider Authorization

$ rpki-client -vvvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/AS20207.asa
File:                     AS20207.asa (raw, json)
Hash identifier:          LZ4hwZogOlme9JdudSkgsla0o3AcjJpTR/xyLltv/N4=
Subject key identifier:   D2:7E:26:77:98:F7:FD:91:E5:FE:0F:E4:F1:EC:6F:03:08:A9:85:BB
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       17A2FA966B6A89A96BA4CCCDE8AA2EC68E2E821B
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/AS20207.asa
Signing time:             Wed 21 Oct 2026 20:05:00 +0000
ASPA not before:          Wed 21 Oct 2026 20:00:00 +0000
ASPA not after:           Wed 20 Oct 2027 20:05:00 +0000
Customer ASID:            20207
Providers:                AS: 174
                          AS: 3356
                          AS: 7049
                          AS: 22927
                          AS: 52376
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 22:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a2:fa:96:6b:6a:89:a9:6b:a4:cc:cd:e8:aa:2e:c6:8e:2e:82:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Oct 21 20:00:00 2026 GMT
            Not After : Oct 20 20:05:00 2027 GMT
        Subject: CN=D27E267798F7FD91E5FE0FE4F1EC6F0308A985BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1a:58:04:98:f7:5c:b0:99:3c:b1:da:a7:c5:
                    49:f7:66:eb:88:60:2b:36:cd:6a:8d:6e:4f:2d:27:
                    a4:e3:51:8c:be:4c:45:b0:9b:12:ad:e3:9e:50:17:
                    d7:32:b5:00:a5:20:0f:70:15:a9:88:9d:a8:55:a2:
                    23:9a:fe:04:7d:83:c3:42:48:3a:ef:84:dc:0a:ee:
                    10:78:bf:54:a7:c9:f1:a2:a9:fc:f2:5a:90:ab:6c:
                    37:4e:05:ff:77:49:d7:63:66:fe:7f:d8:a5:1c:42:
                    56:3b:10:5b:6b:f7:9e:1c:40:32:40:4c:c3:4a:70:
                    d8:95:b5:5e:04:6e:32:d0:d3:28:c4:5a:ba:d9:fb:
                    35:c7:3c:6f:1c:c8:46:54:fd:93:a7:6d:be:3d:7d:
                    24:e9:99:65:9b:ac:2b:56:6c:8a:38:db:ff:e4:68:
                    36:1a:55:0e:07:12:47:b9:c7:4c:1d:85:1e:4f:d9:
                    d7:d0:a1:16:6a:0b:93:6d:10:0c:72:fb:79:78:16:
                    62:19:02:cb:b6:6d:66:e4:61:63:5e:b0:d4:e2:eb:
                    95:89:5f:11:07:01:21:39:39:37:a4:a3:6d:ef:c3:
                    84:4f:da:bc:fa:1e:f0:3b:aa:bb:c2:6f:91:ca:ab:
                    5b:e4:91:65:db:22:89:7d:bb:76:e9:7f:61:7b:ff:
                    af:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7E:26:77:98:F7:FD:91:E5:FE:0F:E4:F1:EC:6F:03:08:A9:85:BB
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/AS20207.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20207

    Signature Algorithm: sha256WithRSAEncryption
         b7:1b:c3:2e:21:10:22:9a:a9:1a:2c:e2:e2:e2:eb:89:4d:42:
         b0:2a:4c:2b:2e:c0:e5:99:06:c6:54:a4:00:0f:dd:f8:34:e5:
         09:8c:67:40:0c:de:9c:cc:b1:80:09:46:61:e0:6a:12:a3:3d:
         96:9e:98:5a:77:33:2f:56:6d:b4:73:f3:20:71:22:a9:ae:54:
         89:aa:31:12:d1:58:c1:bf:44:04:2a:25:5f:16:18:48:2e:7b:
         b0:9f:2a:7a:27:6d:a2:70:d1:de:93:65:8b:d6:b3:fb:77:b5:
         05:9f:dc:20:23:fb:10:f3:d8:d8:3f:a9:66:21:69:0e:e1:85:
         e8:22:14:26:44:24:59:e1:85:d7:6b:75:65:53:01:46:57:4c:
         80:c4:6e:d7:87:fc:6c:d8:a5:82:98:56:85:b5:ca:c5:5c:e0:
         a5:c4:93:32:52:19:e1:9e:67:11:56:ab:2a:2d:8d:ec:3d:81:
         bf:a9:88:3c:19:29:5c:b3:7d:93:61:42:9b:6e:45:14:2f:49:
         33:e2:b9:79:29:e0:a9:13:eb:de:39:ce:3f:bd:e7:08:25:da:
         91:80:c5:4f:3d:28:b7:fe:51:6b:25:bc:83:34:0e:ae:66:19:
         43:04:ef:16:a8:9a:61:3c:29:3c:05:ca:c8:ac:6c:99:40:42:
         d8:29:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:46:22 2026 by rpki-client