Autonomous System Provider Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/AS28584.asa
File:                     AS28584.asa (raw, json)
Hash identifier:          ROauKG8jYduSu6awHV1iWu4tMBdg0sToiX7/UvQbFcU=
Subject key identifier:   A9:26:1D:BB:8C:A6:F1:21:E5:23:E0:79:80:AE:F1:77:08:D5:F2:F4
Certificate issuer:       /CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
Certificate serial:       24508B1E611C17C505E8D58BEADC6363865A39C0
Authority key identifier: 6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/AS28584.asa
Signing time:             Mon 12 Feb 2024 20:09:14 +0000
ASPA not before:          Mon 12 Feb 2024 20:04:14 +0000
ASPA not after:           Mon 10 Feb 2025 20:09:14 +0000
Customer ASID:            28584
Providers:                AS: 28605

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:50:8b:1e:61:1c:17:c5:05:e8:d5:8b:ea:dc:63:63:86:5a:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D52CD8BD09198EF226E5087C7F2A88085A91B46
        Validity
            Not Before: Feb 12 20:04:14 2024 GMT
            Not After : Feb 10 20:09:14 2025 GMT
        Subject: CN=A9261DBB8CA6F121E523E07980AEF17708D5F2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:01:9e:80:ef:d9:4a:81:6c:29:4c:94:34:c8:
                    be:57:27:30:71:96:f8:52:0c:2b:54:c1:dd:56:3e:
                    e6:0c:15:28:65:f5:87:c4:10:20:a5:47:f5:5e:8c:
                    58:3a:8f:2e:7f:b5:c0:72:58:be:a8:7d:56:f3:1c:
                    d7:25:69:9c:dd:14:39:b1:65:50:a2:cd:de:df:96:
                    a6:9f:0e:7f:ca:1e:82:4d:c0:28:63:9a:bf:35:b4:
                    69:0c:0a:1e:68:95:c1:5c:68:08:17:f4:fd:28:e4:
                    00:f6:62:62:f9:3f:66:b8:e4:8d:7e:77:67:2b:e4:
                    4c:3a:61:ff:66:ec:fb:b6:cb:6b:ac:44:10:41:1c:
                    a1:64:b4:b4:d5:2b:01:a9:64:7b:29:03:42:e5:23:
                    6e:b5:f1:6a:dc:87:92:fc:35:6f:32:4b:62:de:82:
                    a2:bf:d3:eb:53:00:49:9d:a5:db:9d:b4:09:f3:2a:
                    17:7d:32:c1:e3:f2:10:91:62:bc:50:c1:ad:9e:79:
                    66:e7:38:9e:ce:ff:09:d5:3e:f0:be:af:85:d9:4b:
                    43:97:19:59:d0:fd:03:01:d0:fd:81:e8:58:3a:ec:
                    ec:67:6c:a9:3c:87:58:0d:1c:e5:4a:e9:23:73:6d:
                    cd:5e:41:39:e5:58:50:b5:c7:d4:fa:8f:fb:e6:09:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:26:1D:BB:8C:A6:F1:21:E5:23:E0:79:80:AE:F1:77:08:D5:F2:F4
            X509v3 Authority Key Identifier:
                keyid:6D:52:CD:8B:D0:91:98:EF:22:6E:50:87:C7:F2:A8:80:85:A9:1B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D52CD8BD09198EF226E5087C7F2A88085A91B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/AS28584.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28584

    Signature Algorithm: sha256WithRSAEncryption
         1f:86:1e:6c:f6:2d:fe:82:ed:9e:cf:a6:e5:8b:10:2e:37:10:
         70:05:13:e3:ec:7c:f2:41:a1:56:a1:13:86:ae:07:bd:c9:75:
         24:c0:2f:95:41:c2:e6:a8:d8:00:ee:ca:93:7e:30:49:80:fa:
         b0:97:35:87:53:d8:fc:68:f2:f0:b1:60:95:87:cf:fa:b5:38:
         bc:a9:3c:61:55:ab:87:3f:cb:4f:52:c2:be:bd:fa:37:90:e5:
         18:c6:29:dd:6f:3f:04:ba:c6:01:e5:9e:45:89:e4:61:40:20:
         8e:a4:cc:99:34:a3:1b:8a:75:ea:62:76:12:9b:7a:91:dc:1a:
         cb:01:f4:39:70:61:7e:f4:88:63:9b:c1:ed:60:ff:e4:99:da:
         9d:c6:b6:d7:16:fd:69:38:86:36:5f:2e:be:6c:36:c1:b2:ce:
         f9:a9:39:59:91:98:e6:00:e6:2a:e9:11:c8:1e:29:36:a2:48:
         8a:5f:14:4c:2b:7b:1e:42:dd:db:ae:4b:10:1e:b9:c0:c3:4b:
         85:d9:9d:14:63:04:10:18:e8:28:21:a6:b2:12:6d:4d:3f:4a:
         5f:94:1b:d5:b8:b0:2d:f5:21:f5:09:48:36:82:2b:3f:3e:39:
         ce:fb:f8:46:51:4f:97:96:e6:4d:20:ed:36:89:4f:0c:d9:14:
         f0:d3:74:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org