Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa
File:                     AS203619.asa (raw, json)
Hash identifier:          0los1stHaQLxtd9e99kWuGD8kupwtrYh64BUnzKxQNQ=
Subject key identifier:   37:2F:86:6E:36:6A:36:7A:23:4C:49:0C:8A:D2:D2:F2:89:96:E9:D7
Certificate issuer:       /CN=677f663cdaa5996868019b05d109baad3558be3a
Certificate serial:       7562C51081F94BD169A6CFA4ECBEBA244C956F12
Authority key identifier: 67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa
Signing time:             Tue 24 Dec 2024 15:19:00 +0000
ASPA not before:          Tue 24 Dec 2024 15:14:00 +0000
ASPA not after:           Tue 23 Dec 2025 15:19:00 +0000
Customer ASID:            203619
Providers:                AS: 200454

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:62:c5:10:81:f9:4b:d1:69:a6:cf:a4:ec:be:ba:24:4c:95:6f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677f663cdaa5996868019b05d109baad3558be3a
        Validity
            Not Before: Dec 24 15:14:00 2024 GMT
            Not After : Dec 23 15:19:00 2025 GMT
        Subject: CN=372F866E366A367A234C490C8AD2D2F28996E9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:ed:f3:5a:28:aa:b6:30:49:35:31:dc:e2:
                    fd:e1:6b:dd:a9:d9:1b:45:59:ab:24:ac:b1:12:14:
                    a4:1e:c1:12:93:37:28:e3:8f:54:d1:a4:79:89:66:
                    91:2a:b2:76:da:e2:61:f4:93:3d:77:45:7e:65:67:
                    36:97:2b:b4:5a:02:a5:12:4a:7c:40:b7:f9:6b:3f:
                    45:6b:eb:af:41:dd:f8:b8:04:b0:bb:4d:9e:9d:07:
                    8b:4e:63:1e:ab:cf:64:ed:02:01:6f:19:29:80:20:
                    95:08:09:6e:d6:f4:79:63:44:25:95:43:fb:2a:2b:
                    77:7a:c1:21:b3:fb:50:df:3e:7b:db:1e:4c:0d:e0:
                    40:20:56:6d:93:36:d5:1a:49:6e:b7:26:50:1e:f7:
                    06:98:db:a1:f3:30:98:0e:e0:a2:68:6c:3e:36:5a:
                    73:e6:52:dd:c5:5d:33:98:4f:1f:ab:62:ce:b4:fd:
                    2c:17:1f:bd:18:d4:58:bb:f8:d1:6e:0d:65:f6:66:
                    cc:1e:54:de:6a:74:84:36:c8:f5:88:ac:6a:eb:7d:
                    86:b6:1c:cd:a2:e1:d6:ee:e3:92:98:4b:ff:7c:b9:
                    8b:9e:43:b2:98:33:db:d3:4f:97:37:f3:2a:b8:3b:
                    b0:ff:9d:71:0c:07:7e:df:d0:e7:3d:d5:c0:41:97:
                    82:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:86:6E:36:6A:36:7A:23:4C:49:0C:8A:D2:D2:F2:89:96:E9:D7
            X509v3 Authority Key Identifier:
                keyid:67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/AS203619.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  203619

    Signature Algorithm: sha256WithRSAEncryption
         ea:77:7e:9c:bb:0c:2d:96:17:0a:4c:e3:97:c3:af:82:08:bf:
         e9:d4:fe:a0:1b:a6:20:ff:a6:1f:93:83:b5:8a:e7:dd:d5:d4:
         c2:7a:1c:35:24:90:71:53:b3:e4:48:3a:4a:39:05:77:c6:99:
         84:03:85:b3:8a:f4:05:1b:3d:5b:a0:01:9e:09:58:f1:d3:77:
         ac:21:2d:7c:45:61:8d:3e:0d:73:ee:a9:99:23:55:91:50:0d:
         e4:f7:44:0f:be:fc:ac:36:77:de:fc:c2:28:4f:ec:2b:c5:f3:
         cc:db:cd:1d:9b:c5:5a:06:ca:6c:7b:21:7b:13:71:05:ca:c3:
         31:ad:28:bc:47:9f:59:18:f3:8e:e4:39:c3:4f:51:5e:f4:3c:
         10:27:fa:c8:b1:32:fa:c4:db:c0:f0:3b:a5:32:4d:6a:ed:95:
         cc:0a:c7:3d:eb:5c:b4:b1:39:43:63:ef:73:6f:62:e5:88:ea:
         9d:1c:32:c4:da:4c:75:7e:b4:be:b9:8b:dc:fc:dd:ea:9f:a0:
         49:37:43:19:47:7d:b5:fa:5d:f4:a7:60:06:e8:01:d9:0b:9a:
         b0:8a:e8:1d:98:7b:3d:d7:a7:55:a2:21:4e:3f:b8:52:e9:a5:
         d0:6b:08:b9:bf:9d:3f:da:3a:9a:17:60:64:04:bb:c9:55:f0:
         f1:ad:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----