Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Yi/0/AS212666.asa
File:                     AS212666.asa (raw, json)
Hash identifier:          I6WM8aPUp2AD0zS1wXxIDIVtV/PzsHfK1Dx4r6a9SZ0=
Subject key identifier:   9A:3A:93:D7:95:46:AF:5B:FF:8F:80:41:F7:63:78:84:21:F3:E4:8D
Certificate issuer:       /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial:       6ACCA59F2F9E472C46091A4B2F4502971B918C48
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access:      rsync://rpki.co/repo/Yi/0/AS212666.asa
Signing time:             Wed 19 Apr 2023 15:43:31 +0000
ASPA not before:          Wed 19 Apr 2023 15:38:31 +0000
ASPA not after:           Wed 17 Apr 2024 15:43:31 +0000
Customer ASID:            212666
Provider set:             AS: 0

Validation:               OK
Signature path:           rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl
                          rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 May 2023 06:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:cc:a5:9f:2f:9e:47:2c:46:09:1a:4b:2f:45:02:97:1b:91:8c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
        Validity
            Not Before: Apr 19 15:38:31 2023 GMT
            Not After : Apr 17 15:43:31 2024 GMT
        Subject: CN=9A3A93D79546AF5BFF8F8041F763788421F3E48D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:7c:2b:41:0a:99:13:f2:e8:5a:24:8b:fe:
                    f0:44:d4:f2:84:52:f3:10:87:a3:d2:53:6b:9d:6d:
                    ce:20:a0:1e:5f:3c:67:a1:13:f2:89:38:92:52:cc:
                    05:33:2b:c7:4a:f4:c4:dd:43:d4:19:06:57:4d:e4:
                    85:a9:58:3b:7f:d8:39:be:f9:32:df:2f:3e:99:f4:
                    39:0b:98:1c:ba:5c:2b:c2:3d:5c:ff:da:74:d5:95:
                    6e:55:84:d7:52:a1:b3:0f:00:e5:e9:b9:b4:64:06:
                    ec:b4:4e:17:6d:21:78:3f:a8:52:53:fa:5b:fc:de:
                    19:2a:18:b3:f4:14:a2:fa:be:c0:02:fd:ad:f4:f7:
                    4d:7a:d1:9a:6d:4a:7b:1d:4d:dd:fa:73:39:fe:8c:
                    4f:b2:a8:ff:3a:c6:f1:67:b2:de:99:1d:24:77:88:
                    57:a7:b5:52:83:19:2d:7d:a5:de:6e:08:29:0e:51:
                    ae:3b:5e:32:ca:8a:e1:6a:e7:8e:30:c8:ec:dd:22:
                    5f:bb:47:a4:03:b4:c9:c1:50:cd:65:c7:08:a9:19:
                    d8:55:0d:df:82:41:1b:2c:6e:f0:b4:c5:eb:79:f5:
                    84:60:0a:fe:62:a5:3d:de:2f:a8:3e:3e:ef:50:a6:
                    c8:13:66:6b:9b:c8:6f:ee:54:28:96:0d:fe:87:a6:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:3A:93:D7:95:46:AF:5B:FF:8F:80:41:F7:63:78:84:21:F3:E4:8D
            X509v3 Authority Key Identifier: 
                keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS212666.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  212666

    Signature Algorithm: sha256WithRSAEncryption
         7a:e3:c6:43:7a:c0:fe:58:7e:13:1a:42:9c:35:8f:20:26:89:
         2c:d2:58:42:82:3f:19:35:ed:f7:c7:ad:d5:4f:13:e3:12:ee:
         05:f7:8d:9f:45:df:d3:58:77:4d:8c:9c:10:5c:7e:98:b6:01:
         74:3a:43:b0:da:e1:f1:7a:bb:09:71:f8:4e:08:34:bf:92:12:
         0c:db:f1:15:29:30:b6:d8:82:7c:73:e1:38:e0:f6:4c:bf:72:
         cd:21:6f:f4:cb:57:ab:33:af:b1:f5:32:61:82:5a:82:27:23:
         d5:31:1e:12:44:8e:85:89:68:52:b1:dd:c1:67:cf:bc:07:b9:
         c6:bb:24:a0:e3:fc:03:60:6e:3f:80:4f:ce:c7:38:12:53:d9:
         4f:ab:ae:6b:7c:9f:93:15:d6:b5:27:1f:c5:2d:ef:48:14:bf:
         d5:90:d7:c4:62:80:52:68:a7:02:73:cb:09:d0:5a:bb:40:47:
         30:4c:d6:ba:cb:c7:b9:ba:6e:62:44:76:b6:68:5b:29:2c:da:
         40:dd:26:46:63:ba:99:2f:70:f6:92:65:21:38:c6:48:63:b4:
         0a:cd:ca:01:f5:49:9b:6f:86:2b:19:21:0b:81:f6:86:38:96:
         97:08:62:0f:cb:73:2b:92:ef:77:13:8c:be:0c:70:7f:1e:b8:
         7d:e6:c9:19
-----BEGIN CERTIFICATE-----
MIIEgzCCA2ugAwIBAgIUasylny+eRyxGCRpLL0UClxuRjEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2RiODY5ZjNiM2M5MGRhM2IzNDU3YmIzODg5YTRmNjZi
NjQzMGQ4OTAeFw0yMzA0MTkxNTM4MzFaFw0yNDA0MTcxNTQzMzFaMDMxMTAvBgNV
BAMTKDlBM0E5M0Q3OTU0NkFGNUJGRjhGODA0MUY3NjM3ODg0MjFGM0U0OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHHwrQQqZE/LoWiSL/vBE1PKE
UvMQh6PSU2udbc4goB5fPGehE/KJOJJSzAUzK8dK9MTdQ9QZBldN5IWpWDt/2Dm+
+TLfLz6Z9DkLmBy6XCvCPVz/2nTVlW5VhNdSobMPAOXpubRkBuy0ThdtIXg/qFJT
+lv83hkqGLP0FKL6vsAC/a3090160ZptSnsdTd36czn+jE+yqP86xvFnst6ZHSR3
iFentVKDGS19pd5uCCkOUa47XjLKiuFq544wyOzdIl+7R6QDtMnBUM1lxwipGdhV
Dd+CQRssbvC0xet59YRgCv5ipT3eL6g+Pu9QpsgTZmubyG/uVCiWDf6HpgD7AgMB
AAGjggGNMIIBiTAdBgNVHQ4EFgQUmjqT15VGr1v/j4BB92N4hCHz5I0wHwYDVR0j
BBgwFoAUfbhp87PJDaOzRXuziJpPZrZDDYkwDgYDVR0PAQH/BAQDAgeAMFcGA1Ud
HwRQME4wTKBKoEiGRnJzeW5jOi8vcnBraS5jby9yZXBvL1lpLzAvN0RCODY5RjNC
M0M5MERBM0IzNDU3QkIzODg5QTRGNjZCNjQzMEQ4OS5jcmwwZAYIKwYBBQUHAQEE
WDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2ZiaHA4N1BKRGFPelJYdXppSnBQWnJaRERZay5jZXIwQgYIKwYB
BQUHAQsENjA0MDIGCCsGAQUFBzALhiZyc3luYzovL3Jwa2kuY28vcmVwby9ZaS8w
L0FTMjEyNjY2LmFzYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+ujANBgkqhkiG9w0BAQsFAAOCAQEAeuPGQ3rA/lh+
ExpCnDWPICaJLNJYQoI/GTXt98et1U8T4xLuBfeNn0Xf01h3TYycEFx+mLYBdDpD
sNrh8Xq7CXH4Tgg0v5ISDNvxFSkwttiCfHPhOOD2TL9yzSFv9MtXqzOvsfUyYYJa
gicj1TEeEkSOhYloUrHdwWfPvAe5xrskoOP8A2BuP4BPzsc4ElPZT6uua3yfkxXW
tScfxS3vSBS/1ZDXxGKAUminAnPLCdBau0BHMEzWusvHubpuYkR2tmhbKSzaQN0m
RmO6mS9w9pJlITjGSGO0Cs3KAfVJm2+GKxkhC4H2hjiWlwhiD8tzK5LvdxOMvgxw
fx64febJGQ==
-----END CERTIFICATE-----