Autonomous System Provider Authorization

$ rpki-client -vvf rpki.co/repo/Yi/0/AS60614.asa
File:                     AS60614.asa (raw, json)
Hash identifier:          EXDWC1bEGxxr8g+h1hYm1rpMUeKOzfvRb6iH5QnqwWw=
Subject key identifier:   AB:0F:D2:FB:71:5B:3D:02:48:51:38:24:6C:7A:C6:08:52:24:F4:BE
Certificate issuer:       /CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
Certificate serial:       54951FC7C4AE01E71AE36B3780C86F5DC99C6801
Authority key identifier: 7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer
Subject info access:      rsync://rpki.co/repo/Yi/0/AS60614.asa
Signing time:             Wed 06 Dec 2023 17:10:35 +0000
ASPA not before:          Wed 06 Dec 2023 17:05:35 +0000
ASPA not after:           Wed 04 Dec 2024 17:10:35 +0000
Customer ASID:            60614
Providers:                AS: 0

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:95:1f:c7:c4:ae:01:e7:1a:e3:6b:37:80:c8:6f:5d:c9:9c:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db869f3b3c90da3b3457bb3889a4f66b6430d89
        Validity
            Not Before: Dec  6 17:05:35 2023 GMT
            Not After : Dec  4 17:10:35 2024 GMT
        Subject: CN=AB0FD2FB715B3D02485138246C7AC6085224F4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:14:ea:f6:3b:14:b8:69:1b:f3:07:69:bb:c4:
                    34:4d:78:d4:c4:6d:b1:c3:23:d2:f1:bb:11:98:ea:
                    b6:38:08:46:97:30:11:18:ea:60:18:2d:ba:74:b3:
                    df:b5:a9:1e:e9:99:9e:6d:d3:00:bf:97:08:b0:ec:
                    a8:31:0f:77:29:62:a4:4f:7c:ab:a2:d3:3c:3e:2d:
                    ca:00:f3:28:bc:e7:28:66:32:8d:c6:f5:e1:2d:41:
                    61:09:21:67:a7:8f:08:6d:4a:97:9d:d3:36:20:4b:
                    7c:a6:13:54:eb:cd:d4:89:15:7c:fc:6b:dd:62:32:
                    74:91:cc:dc:ef:c9:ce:2e:b3:11:b6:b2:8b:b8:a7:
                    e4:65:47:8f:34:79:da:8b:81:48:15:8d:9e:84:c4:
                    9d:a7:4a:ef:32:83:c2:b2:95:e0:49:35:03:b0:0a:
                    a2:e3:d4:4e:6e:9c:c0:d2:34:c2:04:8d:a5:11:c4:
                    b1:b2:a3:aa:bd:f5:31:3f:e4:7f:8d:a8:61:46:bc:
                    47:36:49:66:1d:5b:5a:08:a6:5b:c4:c6:a8:c7:dc:
                    7f:0f:2e:c9:11:b7:70:70:55:57:57:b3:ee:98:55:
                    f6:03:18:b8:7a:a4:88:20:5c:02:96:ea:fb:e8:27:
                    1e:cb:c8:8e:71:5a:67:be:b7:cd:f5:4a:59:f2:85:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0F:D2:FB:71:5B:3D:02:48:51:38:24:6C:7A:C6:08:52:24:F4:BE
            X509v3 Authority Key Identifier:
                keyid:7D:B8:69:F3:B3:C9:0D:A3:B3:45:7B:B3:88:9A:4F:66:B6:43:0D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Yi/0/7DB869F3B3C90DA3B3457BB3889A4F66B6430D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbhp87PJDaOzRXuziJpPZrZDDYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Yi/0/AS60614.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  60614

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:30:5a:0d:36:cf:6b:31:6b:5e:3f:3f:b1:68:2e:b0:2f:
         f8:fc:81:fe:47:bc:87:05:73:17:04:0a:20:62:39:d4:4f:8c:
         99:80:2f:83:66:4d:3c:91:74:51:ee:06:ac:78:6b:71:c2:ac:
         b4:b6:4b:e7:a4:5f:d6:22:59:b9:a4:9b:97:01:0b:b6:46:92:
         35:92:cb:b4:0e:48:84:da:2a:b7:60:c6:2d:bf:e7:e7:56:f8:
         32:2c:8c:04:11:a6:82:33:16:d4:fc:ce:82:41:6c:6b:1d:d7:
         af:44:96:c6:0a:b7:53:0a:4f:a2:17:90:99:ea:dd:85:0f:a3:
         4e:5b:98:11:fc:97:76:63:6d:74:6e:e6:9f:76:d8:97:67:c5:
         8e:c3:07:ed:8f:e6:a7:0c:7a:96:6b:ae:e3:57:19:57:a5:31:
         89:58:ca:1d:3c:97:23:df:7d:a7:e8:9d:e7:da:3d:49:05:53:
         54:2d:ac:93:8d:e1:b7:fe:d6:0e:21:30:b6:a7:e6:9f:ed:2a:
         84:18:3a:00:fc:0c:f7:20:cb:bc:83:c5:66:bf:5f:cb:c2:68:
         26:d1:04:ba:72:bf:b7:03:0a:9e:d3:b0:a0:ab:11:13:52:3c:
         f9:c4:3b:90:ad:f4:ee:eb:05:f3:f3:0a:1d:77:48:65:69:ab:
         f6:b8:43:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----