Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/3/AS202996.asa
File:                     AS202996.asa (raw, json)
Hash identifier:          vYSDNFtYNfrFGSN8p+c8KuzRKpOM/H5p/8zwu2M2wxQ=
Subject key identifier:   07:25:19:83:63:FC:EE:0B:7A:7B:F8:10:40:85:10:A5:E5:49:35:98
Certificate issuer:       /CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
Certificate serial:       69BD39A6B3F83EFA2607D2ADE51FD516886859FE
Authority key identifier: 9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
Subject info access:      rsync://rpki.co/repo/AS202400/3/AS202996.asa
Signing time:             Fri 14 Apr 2023 09:12:49 +0000
ASPA not before:          Fri 14 Apr 2023 09:07:49 +0000
ASPA not after:           Fri 12 Apr 2024 09:12:49 +0000
Customer ASID:            202996
Provider set:             AS: 202400

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl
                          rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 May 2023 22:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bd:39:a6:b3:f8:3e:fa:26:07:d2:ad:e5:1f:d5:16:88:68:59:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
        Validity
            Not Before: Apr 14 09:07:49 2023 GMT
            Not After : Apr 12 09:12:49 2024 GMT
        Subject: CN=0725198363FCEE0B7A7BF810408510A5E5493598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:71:95:88:2c:f6:e6:f6:1e:50:05:6c:d5:
                    33:94:6c:84:80:d7:29:c5:50:a9:f3:2a:5a:98:20:
                    17:fc:a4:b3:d0:8e:48:cd:79:a9:0b:33:29:ac:f5:
                    09:41:aa:ed:41:fd:ed:6d:67:58:fb:d1:4b:34:bc:
                    3e:8b:e2:0e:fa:9c:cf:c4:a1:d2:ac:60:0a:b0:43:
                    0f:7a:4e:ce:e8:b8:f0:de:97:5d:0f:92:d3:76:fb:
                    9d:5e:7b:75:9e:97:97:2f:46:78:93:8b:ba:c4:d8:
                    74:e0:40:bc:ba:27:10:bd:66:fd:ac:d1:7a:ea:a8:
                    8f:59:6d:ce:b9:f4:74:1f:4a:f7:aa:9d:90:d2:ee:
                    c2:52:05:65:cd:4d:0e:45:72:21:ba:45:c0:f0:c6:
                    d9:71:09:9b:00:fe:5f:e9:b2:c1:dc:bb:5d:29:a3:
                    52:f7:ca:13:15:43:fc:4c:1c:a2:ad:73:a9:41:57:
                    2f:c2:f2:16:f9:f1:a1:08:cf:8b:81:f3:04:a3:57:
                    ea:93:7e:76:92:b8:a3:cf:c5:a0:e7:68:55:91:cd:
                    9f:8f:da:58:e3:28:15:6c:26:e9:24:99:3b:31:09:
                    7b:c4:55:df:d6:2c:d6:95:31:a6:46:33:36:85:51:
                    b1:f0:69:67:d5:5c:8d:4d:8e:d1:2c:f2:a2:a1:07:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:25:19:83:63:FC:EE:0B:7A:7B:F8:10:40:85:10:A5:E5:49:35:98
            X509v3 Authority Key Identifier: 
                keyid:9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS202400/3/AS202996.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  202996

    Signature Algorithm: sha256WithRSAEncryption
         68:a2:99:ab:94:d2:7e:28:b1:35:42:66:4f:17:3b:f5:ed:01:
         53:81:6e:13:66:3a:2e:2b:5a:c4:99:36:9f:db:21:a7:67:b5:
         be:41:8a:c9:17:18:63:b7:ad:93:e1:bb:c3:a8:c4:19:51:f0:
         fa:b5:f3:6d:63:90:04:25:14:d1:57:c5:97:74:a9:74:2c:07:
         6f:d1:12:0e:24:cc:ad:9c:2a:98:b2:50:65:c2:17:14:59:2b:
         87:14:7f:52:41:08:ff:cf:02:85:f7:91:dd:00:bb:51:75:78:
         ce:06:77:0a:b2:f0:33:e0:b9:c5:98:60:e0:05:ae:dc:76:89:
         fe:e7:6b:2f:b4:36:e0:f7:85:15:ca:15:33:ac:70:3e:84:ca:
         d6:1b:c2:66:67:61:09:d3:6a:9f:74:01:d1:13:7f:f8:92:70:
         e2:0c:d4:06:20:ba:37:fa:7b:ba:de:b1:00:01:df:8c:ed:fa:
         6d:e7:9f:2f:95:64:20:6e:45:74:b2:ed:3a:9c:1e:4b:9f:bc:
         35:0c:96:4b:57:bf:8c:07:6b:e0:e7:d8:ce:dd:ff:9e:df:f2:
         cb:5b:17:97:54:15:e3:c9:4e:17:8a:7a:54:a6:b5:eb:ca:7d:
         5a:75:42:76:28:60:b3:af:c0:83:23:02:45:2a:40:ed:5b:48:
         73:e2:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----