Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS200566/0/AS200566.asa
File:                     AS200566.asa (raw, json)
Hash identifier:          dP58Fq/NDsS0cV47676oxrDZx4KaKGCpd/RQKkEGa8Q=
Subject key identifier:   E5:56:42:4F:E3:93:9D:F1:51:0D:98:37:FD:1D:EC:D5:AB:73:88:68
Certificate issuer:       /CN=1d97a3b10849519cdb51f2e8d7ceeadd77f82798
Certificate serial:       08477CD411A193A73DF4E0276F41AE79490977B9
Authority key identifier: 1D:97:A3:B1:08:49:51:9C:DB:51:F2:E8:D7:CE:EA:DD:77:F8:27:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HZejsQhJUZzbUfLo187q3Xf4J5g.cer
Subject info access:      rsync://rpki.co/repo/AS200566/0/AS200566.asa
Signing time:             Sat 22 Apr 2023 11:23:12 +0000
ASPA not before:          Sat 22 Apr 2023 11:18:12 +0000
ASPA not after:           Sat 20 Apr 2024 11:23:12 +0000
Customer ASID:            200566
Provider set:             AS: 0

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS200566/0/1D97A3B10849519CDB51F2E8D7CEEADD77F82798.crl
                          rsync://rpki.co/repo/AS200566/0/1D97A3B10849519CDB51F2E8D7CEEADD77F82798.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HZejsQhJUZzbUfLo187q3Xf4J5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:47:7c:d4:11:a1:93:a7:3d:f4:e0:27:6f:41:ae:79:49:09:77:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d97a3b10849519cdb51f2e8d7ceeadd77f82798
        Validity
            Not Before: Apr 22 11:18:12 2023 GMT
            Not After : Apr 20 11:23:12 2024 GMT
        Subject: CN=E556424FE3939DF1510D9837FD1DECD5AB738868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:99:d3:a7:7c:df:a0:bd:93:34:bc:0e:21:
                    3b:5b:b4:ad:75:4d:07:d6:4e:ff:93:8e:9e:8e:6d:
                    13:1a:d7:50:fa:78:81:77:fb:19:53:76:5f:18:26:
                    43:b9:3f:c1:cd:a1:87:dc:37:16:7f:f4:a6:15:02:
                    c8:df:19:32:2c:db:f1:49:58:57:66:45:92:c5:6a:
                    72:fc:9b:f9:64:4d:1d:d3:a8:7f:15:5b:c1:25:fd:
                    ca:39:06:10:67:4c:ab:89:6e:55:d0:77:9f:37:4b:
                    39:99:6e:e3:f3:e2:d2:7c:1f:47:47:dd:ef:c6:3c:
                    0e:f3:43:b9:33:37:9e:63:e2:52:b0:27:3e:5b:36:
                    aa:55:38:04:14:2f:c3:cd:93:72:dc:a2:e0:21:40:
                    4f:66:0e:ea:7f:c6:75:71:80:df:63:d0:d4:eb:23:
                    d7:aa:f9:a0:99:ac:97:97:2e:48:24:ee:95:88:48:
                    9a:19:65:bc:dd:b0:df:13:8d:d0:68:ee:72:a9:16:
                    e0:2e:fe:1b:da:cc:01:b9:5f:37:12:3f:7b:b8:8f:
                    ac:00:ad:1d:06:71:33:73:a8:ed:93:61:c5:90:2b:
                    af:9c:eb:63:a1:2c:29:16:4e:0d:89:e6:25:ad:d4:
                    99:34:09:77:8a:00:fc:2c:95:87:fd:4b:a1:88:79:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:56:42:4F:E3:93:9D:F1:51:0D:98:37:FD:1D:EC:D5:AB:73:88:68
            X509v3 Authority Key Identifier: 
                keyid:1D:97:A3:B1:08:49:51:9C:DB:51:F2:E8:D7:CE:EA:DD:77:F8:27:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS200566/0/1D97A3B10849519CDB51F2E8D7CEEADD77F82798.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZejsQhJUZzbUfLo187q3Xf4J5g.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS200566/0/AS200566.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  200566

    Signature Algorithm: sha256WithRSAEncryption
         6f:b1:e2:57:b8:79:f2:c3:4e:57:77:33:50:e2:bf:e4:15:a2:
         ee:e2:e1:b8:c4:3b:14:b2:f4:ba:be:62:fa:80:76:0d:ce:94:
         b9:13:de:da:b5:63:8b:1b:24:66:5d:57:05:07:7b:ed:41:54:
         c2:97:e7:f7:70:35:ff:12:ac:d6:d7:84:72:20:49:d2:b5:04:
         5b:a0:35:7c:0c:ec:86:f8:c6:35:84:ef:7b:94:4a:46:24:eb:
         12:84:b6:fa:75:c3:bb:57:64:1c:1f:83:89:46:0a:4b:79:e6:
         03:9a:61:cb:b5:93:4f:c3:54:85:3a:c7:d1:c8:d6:9a:bc:3d:
         45:88:43:94:e4:a5:9a:7a:f7:36:0f:fc:c0:ec:6a:0b:b0:18:
         77:98:58:80:3e:01:b7:45:21:40:aa:5c:a8:b9:ae:28:80:e8:
         a4:95:d4:aa:d0:8e:bc:15:af:a3:9a:62:12:62:53:fc:0b:ee:
         9a:af:00:d6:b2:b3:e0:2d:c2:bb:2d:47:8e:8f:c5:c2:8a:bd:
         4d:a0:fd:08:5f:82:be:1c:79:ae:1c:f5:69:d8:27:45:80:bc:
         fa:56:39:b7:11:5f:b3:ad:db:2d:13:53:29:ed:1c:8b:6b:de:
         b4:43:bb:be:d3:6a:35:26:af:61:b8:1e:db:b8:28:13:07:6b:
         a4:4c:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----