Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/AS212252/0/AS212252.asa
File:                     AS212252.asa (raw, json)
Hash identifier:          Sqo5jyFEWZusm+twsg0VICxmfsm8TfOiBGZ3X++mziY=
Subject key identifier:   63:62:9E:3B:2C:A1:1E:5D:66:48:2F:E2:B9:C6:EB:70:92:8E:10:45
Certificate issuer:       /CN=3ba983eebb46f21543d09a39dfff49e89ee92912
Certificate serial:       1F22813275A81996055BC1051EE42645A1B07FF5
Authority key identifier: 3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer
Subject info access:      rsync://rpki.co/repo/AS212252/0/AS212252.asa
Signing time:             Wed 03 May 2023 01:12:43 +0000
ASPA not before:          Wed 03 May 2023 01:07:43 +0000
ASPA not after:           Wed 01 May 2024 01:12:43 +0000
Customer ASID:            212252
Provider set:             AS: 34927

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.crl
                          rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 01:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:22:81:32:75:a8:19:96:05:5b:c1:05:1e:e4:26:45:a1:b0:7f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba983eebb46f21543d09a39dfff49e89ee92912
        Validity
            Not Before: May  3 01:07:43 2023 GMT
            Not After : May  1 01:12:43 2024 GMT
        Subject: CN=63629E3B2CA11E5D66482FE2B9C6EB70928E1045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:60:f6:8c:5a:84:ec:39:a6:58:80:44:8e:
                    75:b6:e5:f9:9d:35:94:a5:d1:2c:aa:b4:cc:4b:7d:
                    ac:fc:53:2e:c9:bf:21:e8:04:77:08:ff:4b:ab:90:
                    32:ba:5e:96:2f:6c:01:dd:1f:fd:19:5a:87:fd:9a:
                    e9:c4:69:d1:85:fd:69:a6:17:46:55:01:15:8e:4c:
                    bb:05:ff:21:7b:48:d6:2e:ae:81:a0:e2:ed:59:4a:
                    b4:9e:94:e2:a6:29:24:9e:b2:8f:90:06:de:fd:c2:
                    bb:1b:0d:88:b4:44:67:77:4f:80:8e:e7:73:e7:10:
                    8e:2d:f0:89:7b:d4:23:50:61:ae:f8:72:3a:e9:3a:
                    09:4a:8a:a7:50:5d:3e:31:54:6a:b0:bc:1c:3b:be:
                    53:34:4d:e3:6b:60:d0:f0:03:72:bc:09:ec:63:4d:
                    5a:02:c9:f9:01:02:28:9a:67:f0:37:7c:fd:db:06:
                    fd:47:b0:a8:97:05:9a:c6:b7:f4:b3:5a:23:77:dc:
                    43:f5:69:a5:10:78:33:9b:06:83:a8:6b:8c:d0:9f:
                    17:8e:e6:3b:6e:e1:73:4e:63:15:65:7e:11:ee:80:
                    cd:00:62:73:d4:2d:49:49:e3:6a:63:06:8d:10:14:
                    2e:00:83:72:b6:25:5f:8f:cf:f7:93:db:87:c6:ce:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                63:62:9E:3B:2C:A1:1E:5D:66:48:2F:E2:B9:C6:EB:70:92:8E:10:45
            X509v3 Authority Key Identifier: 
                keyid:3B:A9:83:EE:BB:46:F2:15:43:D0:9A:39:DF:FF:49:E8:9E:E9:29:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/AS212252/0/3BA983EEBB46F21543D09A39DFFF49E89EE92912.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6mD7rtG8hVD0Jo53_9J6J7pKRI.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/AS212252/0/AS212252.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212252

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:28:78:d2:5d:f4:9d:c4:76:f3:f6:a2:c4:8b:b6:46:5e:
         c9:fb:32:c7:b7:96:04:75:b4:37:59:75:07:3d:0e:5d:f1:52:
         f4:b1:d5:c5:a6:5d:ae:7d:f2:80:44:af:0e:18:7c:92:12:a6:
         20:27:4d:cc:66:06:d1:58:93:07:ff:8a:0b:fa:80:9e:66:b0:
         89:82:c8:58:76:aa:9c:a5:d9:a5:29:ac:ea:3b:9e:fc:47:5d:
         2a:c5:b4:4c:05:4a:5a:d0:5a:26:49:a3:99:d5:35:54:c8:10:
         78:e2:75:f3:30:25:3a:3b:a9:df:8c:e8:af:d6:9e:54:8f:61:
         69:6d:84:fe:5a:18:30:76:54:c3:20:93:71:e3:5e:f6:9e:a6:
         1f:e9:7f:e3:51:cf:c6:a3:13:18:06:bc:14:3d:e7:d5:ef:cf:
         e1:5f:58:df:6b:73:04:a5:8b:b0:15:92:cb:02:38:df:09:4b:
         a7:ff:ba:7d:2d:96:0c:2a:e7:3e:90:12:e8:46:35:96:78:8d:
         d6:40:d0:ca:2d:ab:a8:f5:f1:fb:0a:e0:01:db:6c:93:55:4c:
         c1:5d:dc:00:4e:a6:00:d8:5c:dc:3f:f2:7a:23:64:6b:98:fc:
         db:3b:04:8e:8c:55:a3:f6:f0:51:63:39:6e:45:f4:20:28:7b:
         80:e1:93:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----