Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Mario/1/AS50580.asa
File:                     AS50580.asa (raw, json)
Hash identifier:          gt8EvSuIJDS4O+EzlxMcRE4//cAgVSZrbhZLwmK7yWI=
Subject key identifier:   52:B5:ED:34:F0:27:AD:6D:0E:5A:49:AB:A7:E7:E0:5A:FA:DA:D0:1C
Certificate issuer:       /CN=93c53a7e38698062994ad6400e1cc25be5e507bf
Certificate serial:       B0A3F80A7BD86F834A2D8BC331FBB5B039A363
Authority key identifier: 93:C5:3A:7E:38:69:80:62:99:4A:D6:40:0E:1C:C2:5B:E5:E5:07:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8U6fjhpgGKZStZADhzCW-XlB78.cer
Subject info access:      rsync://rpki.co/repo/Mario/1/AS50580.asa
Signing time:             Sun 08 Sep 2024 03:19:29 +0000
ASPA not before:          Sun 08 Sep 2024 03:14:29 +0000
ASPA not after:           Sun 07 Sep 2025 03:19:29 +0000
Customer ASID:            50580
Providers:                AS: 43641
                          AS: 51396
                          AS: 212294

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b0:a3:f8:0a:7b:d8:6f:83:4a:2d:8b:c3:31:fb:b5:b0:39:a3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c53a7e38698062994ad6400e1cc25be5e507bf
        Validity
            Not Before: Sep  8 03:14:29 2024 GMT
            Not After : Sep  7 03:19:29 2025 GMT
        Subject: CN=52B5ED34F027AD6D0E5A49ABA7E7E05AFADAD01C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9b:2b:b6:97:97:d7:aa:49:fe:98:30:a8:47:
                    87:24:65:20:c9:a2:82:bd:e3:84:5b:b2:8a:14:d8:
                    bc:d3:76:20:08:9d:c4:08:49:31:69:b7:5d:c7:84:
                    01:96:78:07:16:3c:b9:b4:58:3e:b8:f3:48:bf:5b:
                    cc:ec:cc:fb:60:21:fd:b7:14:e2:ea:4a:45:b1:8f:
                    e5:9b:31:eb:b0:4d:40:e6:ee:94:39:7f:82:66:13:
                    ec:3e:e2:4c:44:8f:15:f3:7e:8c:b6:57:bd:51:b0:
                    43:a1:4c:5f:e7:95:90:ac:47:a3:71:f3:e4:f0:10:
                    e1:30:ed:ef:1c:d8:e2:3b:0f:1d:a1:fe:e9:6e:43:
                    93:d3:50:13:1e:db:72:b7:d4:c4:88:17:14:02:40:
                    3b:ef:91:81:65:fb:89:71:49:79:36:c4:49:1e:92:
                    a5:5f:5f:ce:76:34:3b:b7:12:5f:78:85:7e:b8:68:
                    d5:f2:76:33:f7:1a:85:eb:93:e9:b4:c4:71:13:d2:
                    e8:61:ed:bb:c6:12:9b:43:7e:dd:d0:11:e9:53:66:
                    c7:5e:ec:95:b0:96:6e:02:d0:03:2a:1a:c9:66:e9:
                    3a:a8:8b:9b:b5:78:a0:8e:09:e1:f7:0d:88:c7:ac:
                    d1:99:18:b6:18:16:f9:db:d9:e0:01:5c:cb:fe:1a:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:ED:34:F0:27:AD:6D:0E:5A:49:AB:A7:E7:E0:5A:FA:DA:D0:1C
            X509v3 Authority Key Identifier:
                keyid:93:C5:3A:7E:38:69:80:62:99:4A:D6:40:0E:1C:C2:5B:E5:E5:07:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mario/1/93C53A7E38698062994AD6400E1CC25BE5E507BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8U6fjhpgGKZStZADhzCW-XlB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mario/1/AS50580.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  50580

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:b8:c7:f0:19:84:79:a5:34:b6:0a:54:0c:dd:b8:3a:42:
         dd:0a:5e:a6:68:61:1b:d3:b3:78:70:91:67:11:42:1c:01:be:
         61:05:c5:c0:13:40:a7:6f:da:a9:77:ce:7b:9d:31:7f:c5:33:
         84:87:f5:86:97:bc:a6:8b:99:20:2a:ec:5d:8f:ff:51:00:db:
         3c:58:96:dc:32:cc:b0:67:2a:41:0f:8a:ed:5c:4f:60:14:32:
         a3:82:3e:b4:a7:a7:ba:48:de:c7:93:26:a9:52:ee:84:52:0d:
         8c:f0:9a:9e:fe:17:11:98:9d:6d:53:9f:37:da:47:32:3b:99:
         50:0e:2d:71:d6:9f:3c:3a:10:07:c7:e0:e0:70:4e:6e:36:03:
         7a:59:1a:f4:33:dc:dc:b7:3b:2b:b0:52:b0:d1:3a:39:da:ae:
         31:a7:f8:6f:fe:69:e2:5a:6f:75:d6:21:0b:76:0a:bf:ce:ed:
         6f:76:c3:95:2d:c2:c7:da:40:df:71:6d:c9:38:1d:fd:3e:d2:
         21:cb:02:c3:55:91:73:e8:43:1b:77:ae:16:ff:5e:d8:2a:aa:
         48:81:b1:b4:58:b0:cb:3c:0b:94:b5:47:f3:61:31:c1:0d:4f:
         bb:35:d1:5e:a2:55:22:2f:f3:08:2b:90:ce:15:da:f8:68:66:
         c1:b4:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----