Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Mlgt/0/AS203323.asa
File:                     AS203323.asa (raw, json)
Hash identifier:          GdD8ERSOVNlhhCG2wKOw1DKkX8OOZlYz4HUGvNXFaFA=
Subject key identifier:   BD:06:94:21:32:68:C6:5A:0E:86:CA:7F:30:34:99:3F:F7:AC:CA:8E
Certificate issuer:       /CN=2b9ff00d2bc32dfe3323e9343833022b0bd6670b
Certificate serial:       28AFC4C151C8F374A9C048FD6CE5569E2748DB32
Authority key identifier: 2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer
Subject info access:      rsync://rpki.co/repo/Mlgt/0/AS203323.asa
Signing time:             Tue 18 Apr 2023 17:12:31 +0000
ASPA not before:          Tue 18 Apr 2023 17:07:31 +0000
ASPA not after:           Tue 16 Apr 2024 17:12:31 +0000
Customer ASID:            203323
Provider set:             AS: 34927
                          AS: 204508
                          AS: 207656
                          AS: 212271

Validation:               OK
Signature path:           rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.crl
                          rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:af:c4:c1:51:c8:f3:74:a9:c0:48:fd:6c:e5:56:9e:27:48:db:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b9ff00d2bc32dfe3323e9343833022b0bd6670b
        Validity
            Not Before: Apr 18 17:07:31 2023 GMT
            Not After : Apr 16 17:12:31 2024 GMT
        Subject: CN=BD0694213268C65A0E86CA7F3034993FF7ACCA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d9:21:9c:38:49:ed:42:dd:ff:81:93:d6:23:
                    68:aa:86:bb:02:27:1d:1f:43:5d:22:25:e2:06:82:
                    96:76:8e:19:a3:16:ab:1a:46:7a:20:eb:1f:f3:8e:
                    d4:4c:42:ca:8d:06:cc:8c:f2:ea:3e:e5:41:3d:2d:
                    71:ab:e1:08:d7:ff:24:91:e7:11:5d:55:15:69:5f:
                    a0:f4:ce:1e:fd:91:be:05:f9:cd:2e:a3:8b:4c:43:
                    bc:f3:26:80:84:a5:f6:35:b8:a8:4a:68:8a:3d:7f:
                    f7:32:a6:d1:7e:16:14:3e:75:90:ca:01:d8:85:16:
                    69:5d:c0:8a:74:04:86:1d:72:02:6d:b5:4a:68:c6:
                    30:0d:67:0b:b4:c8:ec:25:8d:8d:ef:64:d3:fd:10:
                    ff:de:03:3e:5d:e4:f1:01:05:45:a3:31:8b:2f:0a:
                    3b:f3:30:15:1b:71:58:c1:77:df:14:f7:32:71:d4:
                    be:db:3e:52:73:ec:be:b1:07:aa:a5:b5:32:5d:5d:
                    ce:1f:85:22:2f:82:9a:9c:9a:50:19:c3:52:78:af:
                    f6:16:b7:b5:a9:dd:53:70:bd:31:9b:7d:d1:8c:d8:
                    1a:92:87:6f:cd:79:d9:72:96:da:02:2c:51:50:09:
                    30:b5:36:8f:b8:c8:6d:c3:71:23:e5:a2:e3:21:e9:
                    8c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BD:06:94:21:32:68:C6:5A:0E:86:CA:7F:30:34:99:3F:F7:AC:CA:8E
            X509v3 Authority Key Identifier: 
                keyid:2B:9F:F0:0D:2B:C3:2D:FE:33:23:E9:34:38:33:02:2B:0B:D6:67:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Mlgt/0/2B9FF00D2BC32DFE3323E9343833022B0BD6670B.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5_wDSvDLf4zI-k0ODMCKwvWZws.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Mlgt/0/AS203323.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203323

    Signature Algorithm: sha256WithRSAEncryption
         22:10:c6:33:a8:60:6c:ba:f6:d9:39:a1:43:16:64:f1:90:6d:
         86:88:47:28:d4:a6:97:db:68:a7:98:98:9f:c0:57:b4:46:8d:
         59:da:59:96:8f:57:fe:e9:6e:b2:54:61:ba:40:e7:81:ed:84:
         35:9d:08:cf:98:4f:b1:a2:06:97:32:21:a7:18:55:e4:f0:07:
         25:7f:7a:d3:d8:60:d0:da:5d:d8:df:47:90:6f:b0:2b:2c:ab:
         45:31:55:a8:d5:8f:e8:3f:ee:41:91:aa:b1:4a:12:89:5a:84:
         b0:70:78:c1:4d:46:16:7a:15:3e:7e:e7:60:74:17:a7:bc:f6:
         57:d9:2d:3c:31:f0:89:ec:cd:3d:87:10:1b:31:fa:db:bc:f7:
         c1:bb:db:fe:7c:dd:24:5f:29:67:90:66:1c:19:8a:cd:f6:96:
         99:f8:8a:b4:61:a9:23:75:35:ae:2b:9b:7a:0d:15:7e:ea:44:
         ef:75:fe:fb:63:0f:d0:e3:99:53:4f:74:84:7d:df:c5:86:76:
         62:0e:8a:99:bf:32:fd:b2:bb:24:85:82:69:ca:5b:36:3c:f1:
         52:db:84:ec:f4:d6:4c:4a:46:72:28:69:85:03:66:01:43:54:
         d3:35:41:d5:c7:55:07:b8:ac:15:b3:31:c4:c9:d4:32:7f:ab:
         75:36:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----