Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/2/AS202400.asa
File:                     AS202400.asa (raw, json)
Hash identifier:          vsgZ/wNnL/V6gxq9/w3z4kd3cjC7gyRmbl1B9akIbJU=
Subject key identifier:   25:08:72:2A:45:EB:7F:E1:9B:FE:5C:74:D5:F8:3E:C3:91:33:8A:AB
Certificate issuer:       /CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
Certificate serial:       3BADF706575B0BB9E0983CB7757D43996E62F393
Authority key identifier: 3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
Subject info access:      rsync://rpki.co/repo/AS202400/2/AS202400.asa
Signing time:             Thu 13 Apr 2023 15:55:14 +0000
ASPA not before:          Thu 13 Apr 2023 15:50:14 +0000
ASPA not after:           Thu 11 Apr 2024 15:55:14 +0000
Customer ASID:            202400
Provider set:             AS: 6939
                          AS: 50058

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl
                          rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ad:f7:06:57:5b:0b:b9:e0:98:3c:b7:75:7d:43:99:6e:62:f3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cddc1e61c39e6e8a41b278056c9542e3c79f7b2
        Validity
            Not Before: Apr 13 15:50:14 2023 GMT
            Not After : Apr 11 15:55:14 2024 GMT
        Subject: CN=2508722A45EB7FE19BFE5C74D5F83EC391338AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:74:22:ce:0c:e6:56:41:2b:ba:58:0e:6d:
                    b8:75:4c:12:3e:6d:be:be:55:b5:c6:21:77:3b:32:
                    1b:79:98:f3:5e:fd:0b:80:27:89:b2:69:a5:24:28:
                    4d:94:a9:82:fe:4d:af:40:bf:08:7b:95:db:92:4d:
                    53:48:44:10:92:a9:ec:03:43:1f:d6:ad:66:8f:b4:
                    6b:14:90:03:ff:90:3c:95:d2:5a:a1:ca:98:9a:70:
                    ca:d4:41:2e:85:41:4d:78:a7:5f:15:eb:b2:e8:e2:
                    31:4f:a3:3d:a0:8f:c0:da:5e:12:89:bd:6b:30:14:
                    7a:56:20:1f:9d:f7:c3:a9:45:5e:a0:bf:29:5b:3f:
                    2b:c3:87:a0:1a:01:7c:23:4e:d5:3e:e5:64:d2:48:
                    4f:f3:60:b2:ea:42:ec:9a:1d:a4:e6:2d:92:a6:cb:
                    68:88:e6:75:19:d0:ac:50:fa:b4:b1:00:5b:6b:68:
                    d8:dc:04:b1:a3:11:05:1e:6d:43:2a:71:85:ef:cd:
                    f3:03:f5:91:45:e5:64:06:8d:e1:5f:3b:b9:d0:a6:
                    2b:b7:6c:bc:28:15:1d:0f:e4:69:c8:36:08:e4:d6:
                    80:84:f1:47:d2:11:11:cc:0e:15:70:99:fd:7c:90:
                    a2:f0:49:cf:bd:ef:f4:99:a9:10:c8:72:5e:a2:1f:
                    dd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                25:08:72:2A:45:EB:7F:E1:9B:FE:5C:74:D5:F8:3E:C3:91:33:8A:AB
            X509v3 Authority Key Identifier: 
                keyid:3C:DD:C1:E6:1C:39:E6:E8:A4:1B:27:80:56:C9:54:2E:3C:79:F7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/2/3CDDC1E61C39E6E8A41B278056C9542E3C79F7B2.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN3B5hw55uikGyeAVslULjx597I.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS202400/2/AS202400.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202400

    Signature Algorithm: sha256WithRSAEncryption
         54:63:c3:25:10:e7:c0:ea:e1:1d:0b:b4:6a:e6:b2:9b:2d:69:
         c6:5d:8e:5b:e7:21:e0:c4:c0:60:e2:80:79:c0:d3:d4:ce:72:
         2e:b2:16:f2:86:b0:0f:d9:6a:2a:ad:71:a3:10:81:7a:0d:e2:
         5f:d6:3b:22:c2:76:e9:31:e0:95:5d:25:63:4c:55:9f:c5:ad:
         84:aa:f6:ec:de:0d:84:5f:f9:bd:a5:24:9d:44:ad:3f:2b:36:
         b9:7f:8d:7f:59:1a:02:02:73:fd:42:25:49:30:7e:4f:67:29:
         08:1f:eb:de:49:4c:f5:93:27:7e:ca:78:47:dc:d5:05:4a:ef:
         98:91:c2:34:6c:dc:ed:be:11:04:51:b3:6c:d0:16:72:e8:ae:
         cc:8b:e5:d4:f8:69:7b:7c:38:2c:fc:89:28:9a:2a:22:0e:14:
         9e:c3:30:89:bf:a9:cb:a5:3c:48:cf:8b:a1:ff:b8:ee:9d:82:
         d6:32:29:c7:ea:ac:a6:22:9d:75:0e:5d:a6:1d:4e:e3:91:74:
         59:80:84:0e:14:c7:4d:cf:46:ce:d0:88:f6:c5:68:b2:5e:8d:
         1a:3a:5b:fd:e1:b0:a1:06:4e:57:c3:94:8b:b0:08:88:fd:62:
         6f:cf:da:1c:52:71:c2:88:89:7e:de:05:32:76:45:ba:7d:47:
         9a:c1:ae:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----