Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iQ98o0c43jfuF8LmyKOGR9eHmXI.asa
File:                     iQ98o0c43jfuF8LmyKOGR9eHmXI.asa (raw, json)
Hash identifier:          VtpThzWRLq5nqu1ew45NyeRY/vesOFWR7hQB5CKczzQ=
Subject key identifier:   89:0F:7C:A3:47:38:DE:37:EE:17:C2:E6:C8:A3:86:47:D7:87:99:72
Certificate issuer:       /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial:       019F19016995A897AF62905B57A2F41FCC31
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iQ98o0c43jfuF8LmyKOGR9eHmXI.asa
Signing time:             Tue 30 Jun 2026 14:49:10 +0000
ASPA not before:          Tue 30 Jun 2026 14:49:10 +0000
ASPA not after:           Thu 01 Jul 2027 00:00:00 +0000
Customer ASID:            208249
Providers:                AS: 42615
                          AS: 202562
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:01:69:95:a8:97:af:62:90:5b:57:a2:f4:1f:cc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
        Validity
            Not Before: Jun 30 14:49:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=890f7ca34738de37ee17c2e6c8a38647d7879972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:d2:5e:e4:0d:b2:63:d2:f4:3a:9f:f4:5a:
                    72:cd:00:fa:df:17:ca:eb:75:70:7a:e7:34:bc:e2:
                    e4:46:43:98:19:ad:50:c4:b8:94:34:a4:56:ae:fc:
                    71:99:8c:3f:8d:e8:16:18:4b:84:be:42:ca:b9:62:
                    8e:75:7f:e6:30:8a:3d:2e:b0:ca:4a:67:ee:59:3d:
                    93:80:01:cf:f3:fd:60:d9:f5:08:58:6c:06:0b:3e:
                    54:b1:68:92:2a:5e:d6:0d:29:3d:8c:7a:df:49:28:
                    5c:2e:56:a8:3e:06:2a:4b:20:64:8b:45:7b:b0:50:
                    af:2a:c2:42:8e:45:0e:53:ff:3b:0d:71:72:4b:77:
                    d0:cd:b8:3a:4b:5a:38:4d:4c:c6:b8:ec:1f:44:0f:
                    93:b1:9e:f9:23:5f:98:73:bc:3b:ff:bd:ff:9a:bd:
                    5a:e9:2e:47:06:f7:32:76:d0:d4:b2:14:a9:48:ad:
                    b8:65:b3:e1:12:86:65:9f:38:63:0e:41:f6:a9:a3:
                    d2:27:e9:f5:af:61:a1:72:53:7c:ac:1c:b0:12:10:
                    83:59:4c:af:33:0f:43:ad:9f:ee:5e:72:47:a8:1b:
                    b8:f2:bf:6e:b4:2c:2b:00:ff:9f:20:5d:93:d5:52:
                    8d:2a:ae:09:62:d1:81:3e:b4:ea:25:af:1b:4c:32:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0F:7C:A3:47:38:DE:37:EE:17:C2:E6:C8:A3:86:47:D7:87:99:72
            X509v3 Authority Key Identifier:
                keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/iQ98o0c43jfuF8LmyKOGR9eHmXI.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  208249

    Signature Algorithm: sha256WithRSAEncryption
         2e:1d:48:6d:c3:d1:45:1c:ff:21:b9:37:34:c9:0c:46:41:d1:
         e1:52:91:60:e8:e0:50:00:e1:22:4f:7c:d0:de:d7:d8:9b:ae:
         03:46:a0:a7:83:15:4d:92:db:33:88:24:df:f0:e8:0b:73:f8:
         d3:8c:c2:0a:0c:49:e7:a8:41:fc:5c:2a:3c:14:5e:41:17:06:
         2c:81:2a:4c:4d:db:c4:c2:4b:10:19:40:13:8d:ed:bc:99:2b:
         14:9e:e3:78:c2:35:ea:0c:54:9f:bb:51:68:a2:1f:a7:93:b3:
         46:7e:af:14:7f:c0:14:05:de:a4:9b:d0:40:11:3b:e2:5e:e7:
         59:6d:16:4a:30:98:1e:c1:38:5d:d7:05:51:60:85:83:6f:89:
         c0:94:04:35:66:ea:ed:ab:90:99:68:d1:63:46:e1:73:a9:af:
         5f:13:16:b9:f9:c1:a1:45:d2:26:3e:eb:5c:9d:6f:89:3a:a5:
         50:db:f8:7a:4f:40:f7:10:28:62:2e:16:3a:18:3d:d9:9f:08:
         34:0a:80:b4:1a:a3:20:19:b2:c2:be:84:55:84:52:16:be:71:
         e2:81:90:7a:47:20:5f:d6:84:6a:25:13:d9:91:41:9d:b6:3a:
         df:7e:58:55:ba:07:bc:d7:01:fc:a4:36:bf:60:ff:2f:fe:cb:
         fd:b9:7a:3e
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgISAZ8ZAWmVqJevYpBbV6L0H8wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDAyNTIwOGM4NTY4Y2U4ZTU4ZGUxYWU3ZDgzZWY4ZDJi
Mjc0MjQwHhcNMjYwNjMwMTQ0OTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTBmN2NhMzQ3MzhkZTM3ZWUxN2MyZTZjOGEzODY0N2Q3ODc5OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z3SXuQNsmPS9Dqf9FpyzQD63xfK
63Vweuc0vOLkRkOYGa1QxLiUNKRWrvxxmYw/jegWGEuEvkLKuWKOdX/mMIo9LrDK
SmfuWT2TgAHP8/1g2fUIWGwGCz5UsWiSKl7WDSk9jHrfSShcLlaoPgYqSyBki0V7
sFCvKsJCjkUOU/87DXFyS3fQzbg6S1o4TUzGuOwfRA+TsZ75I1+Yc7w7/73/mr1a
6S5HBvcydtDUshSpSK24ZbPhEoZlnzhjDkH2qaPSJ+n1r2GhclN8rBywEhCDWUyv
Mw9DrZ/uXnJHqBu48r9utCwrAP+fIF2T1VKNKq4JYtGBPrTqJa8bTDK1vQIDAQAB
o4ICBjCCAgIwHQYDVR0OBBYEFIkPfKNHON437hfC5sijhkfXh5lyMB8GA1UdIwQY
MBaAFPhAJSCMhWjOjljeGufYPvjSsnQkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FQWxJSXlGYU02T1dONGE1OWctLU5LeWRDUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5
LWVmZWE2NWRjMzAyMC8xL2lROThvMGM0M2pmdUY4TG15S09HUjllSG1YSS5hc2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5LWVmZWE2NWRjMzAy
MC8xLzEtRUFsSUl5RmFNNk9XTjRhNTlnLS1OS3lkQ1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAy15MA0GCSqG
SIb3DQEBCwUAA4IBAQAuHUhtw9FFHP8huTc0yQxGQdHhUpFg6OBQAOEiT3zQ3tfY
m64DRqCngxVNktsziCTf8OgLc/jTjMIKDEnnqEH8XCo8FF5BFwYsgSpMTdvEwksQ
GUATje28mSsUnuN4wjXqDFSfu1Fooh+nk7NGfq8Uf8AUBd6km9BAETviXudZbRZK
MJgewThd1wVRYIWDb4nAlAQ1Zurtq5CZaNFjRuFzqa9fExa5+cGhRdImPutcnW+J
OqVQ2/h6T0D3EChiLhY6GD3Znwg0CoC0GqMgGbLCvoRVhFIWvnHigZB6RyBf1oRq
JRPZkUGdtjrfflhVuge81wH8pDa/YP8v/sv9uXo+
-----END CERTIFICATE-----