Autonomous System Provider Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/0/AS215978.asa
File:                     AS215978.asa (raw, json)
Hash identifier:          RiYDnxikAsa0aOSTDpGZrLBlQCpZQamFJfWyzJxvwvE=
Subject key identifier:   7B:CD:E5:CD:20:E6:34:A9:2E:67:B7:22:26:93:0A:74:3B:DA:B1:98
Certificate issuer:       /CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
Certificate serial:       21DE953A74A85C84F0BC347A97B48DF89FEF1B73
Authority key identifier: 0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/0/AS215978.asa
Signing time:             Wed 31 Jan 2024 18:48:47 +0000
ASPA not before:          Wed 31 Jan 2024 18:43:47 +0000
ASPA not after:           Wed 29 Jan 2025 18:48:47 +0000
Customer ASID:            215978
Providers:                AS: 6939
                          AS: 52025
                          AS: 52041
                          AS: 60223
                          AS: 207252
                          AS: 210912

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:de:95:3a:74:a8:5c:84:f0:bc:34:7a:97:b4:8d:f8:9f:ef:1b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbb01c958fe5c38b1b640aa5d0467845c451f50
        Validity
            Not Before: Jan 31 18:43:47 2024 GMT
            Not After : Jan 29 18:48:47 2025 GMT
        Subject: CN=7BCDE5CD20E634A92E67B72226930A743BDAB198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:24:bc:07:e7:ef:13:7b:54:77:5b:b4:a4:
                    21:62:c4:93:a2:02:c9:bd:8c:dd:c2:1f:86:c5:f1:
                    c8:2c:6b:8f:71:06:9b:32:c7:1a:40:02:bb:bc:6d:
                    94:11:60:3f:79:ff:c7:4e:37:69:e7:80:1c:29:0e:
                    cf:93:f9:70:04:1c:23:3e:8b:93:07:94:b1:0a:51:
                    a1:c2:de:3e:57:ed:f6:74:a3:88:12:7c:bb:d1:28:
                    ef:8a:d1:5e:78:f5:61:f4:28:46:96:55:91:77:62:
                    9e:9d:f8:90:4a:6f:0c:03:f3:a9:61:a8:59:c9:52:
                    31:ff:e3:fb:a3:c6:f1:5d:d3:56:f4:6e:56:23:3d:
                    98:ea:d6:5e:e3:30:6e:ab:27:07:46:07:da:ec:6e:
                    3f:72:3c:48:f1:61:20:89:f8:6c:ea:f7:78:fe:9f:
                    1d:96:56:12:33:77:41:f3:a8:b3:da:2b:6a:87:0f:
                    33:43:67:ee:66:19:93:0a:25:92:e3:c6:ef:39:1c:
                    cd:18:f8:aa:e1:f2:71:8e:51:ea:23:85:79:63:a6:
                    69:22:f9:46:a8:84:65:c1:7a:a3:b7:21:a6:30:54:
                    0a:a3:f3:1d:75:29:5b:01:f0:98:14:75:76:92:34:
                    f3:5d:1d:9b:14:0d:1d:75:19:b2:e9:20:c1:97:32:
                    a3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:E5:CD:20:E6:34:A9:2E:67:B7:22:26:93:0A:74:3B:DA:B1:98
            X509v3 Authority Key Identifier:
                keyid:0C:BB:01:C9:58:FE:5C:38:B1:B6:40:AA:5D:04:67:84:5C:45:1F:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/0/0CBB01C958FE5C38B1B640AA5D0467845C451F50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLsByVj-XDixtkCqXQRnhFxFH1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/0/AS215978.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215978

    Signature Algorithm: sha256WithRSAEncryption
         1c:e6:41:6c:0d:5e:d2:e2:dc:32:e0:19:f3:50:43:01:0f:b6:
         dd:77:32:a6:cb:59:9c:37:71:40:ab:5b:74:f2:a7:5c:3a:2b:
         65:d9:5a:75:f1:ea:7d:a6:98:b6:e5:5f:7d:76:1e:45:fa:ec:
         4c:f3:ab:0a:a5:50:53:59:8a:00:d0:43:b4:a3:06:d5:13:5a:
         06:60:a5:a6:73:b2:fc:bf:c2:11:3e:c2:be:6d:2b:34:1c:aa:
         a6:23:94:14:6b:d1:14:53:49:f2:06:a7:70:c8:82:21:71:1b:
         c2:08:7d:72:bd:72:39:fd:f5:0f:fd:c9:53:f7:e7:24:72:4c:
         58:e0:db:47:11:9f:36:50:28:d4:ab:ef:7e:8a:d0:a7:21:62:
         87:68:ce:7e:d5:42:44:3c:db:94:e8:97:90:b9:05:e4:30:0d:
         c5:40:09:52:f9:a1:e9:08:58:0e:c2:c6:3c:e0:c0:b5:da:9f:
         da:59:65:66:b0:d6:0b:67:8f:b0:dc:7e:8f:95:cf:66:73:2e:
         66:84:f5:d6:d9:06:41:48:21:49:43:d7:b7:fc:ac:82:f1:3a:
         03:e7:75:e9:ac:f1:8c:4a:95:9a:86:19:cd:cb:f1:2f:31:83:
         30:c1:10:7b:a8:81:30:57:6e:3b:78:c2:98:75:fd:3a:7e:b7:
         e6:a1:3e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----