Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/AS209025.asa
File:                     AS209025.asa (raw, json)
Hash identifier:          FliDH+WtqC2XL3MP38ouvYx/WqgkgO0pr3I0LhFlIig=
Subject key identifier:   89:6A:A6:F4:5B:32:A9:95:CA:8D:D6:13:00:F2:4C:43:90:CE:48:2A
Certificate issuer:       /CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
Certificate serial:       189E5385C391279458E2EDC25E40CD51303598AF
Authority key identifier: E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/AS209025.asa
Signing time:             Tue 23 Jul 2024 19:49:42 +0000
ASPA not before:          Tue 23 Jul 2024 19:44:42 +0000
ASPA not after:           Tue 22 Jul 2025 19:49:42 +0000
Customer ASID:            209025
Providers:                AS: 199762
                          AS: 200160
                          AS: 203913
                          AS: 213086

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9e:53:85:c3:91:27:94:58:e2:ed:c2:5e:40:cd:51:30:35:98:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8658a49c9ca09e89eb53a0969f6652fed345d78
        Validity
            Not Before: Jul 23 19:44:42 2024 GMT
            Not After : Jul 22 19:49:42 2025 GMT
        Subject: CN=896AA6F45B32A995CA8DD61300F24C4390CE482A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:98:b1:71:09:3f:e6:fa:5c:df:00:50:3e:db:
                    21:0d:5a:b7:67:2c:c5:96:55:dc:c6:4b:8a:3c:5a:
                    18:5c:81:da:3e:fd:2c:46:47:b3:6d:7d:cf:51:07:
                    12:83:b0:d6:24:93:b8:77:90:f3:c9:7a:cf:c0:50:
                    a3:aa:af:69:0d:9c:7a:07:c4:f8:8f:35:8a:92:12:
                    eb:86:4e:eb:5a:93:79:59:96:d3:47:72:40:1a:f7:
                    6a:8f:d7:e0:20:fe:0b:ed:34:04:7a:ae:f2:2d:d2:
                    49:3a:37:bf:de:87:19:37:77:a0:58:64:a7:ad:af:
                    fc:c9:fc:a8:fd:e8:e5:5c:1d:4c:76:91:fb:41:af:
                    1e:99:3a:cd:04:07:4e:ec:89:86:0a:f6:c3:70:04:
                    77:46:72:a5:b5:ed:1d:0b:bb:e0:11:93:13:bc:df:
                    b7:62:7b:66:84:37:c6:f1:8e:a2:2c:86:fe:ae:e3:
                    bb:9b:52:8d:46:81:8c:26:45:20:f7:3d:fe:b5:f3:
                    04:74:fa:dd:1b:16:f2:a2:c8:a3:b6:2e:d8:af:e0:
                    7f:f1:ef:95:9a:e2:2c:58:c5:28:26:2a:9b:7f:06:
                    ef:89:22:be:fc:7a:be:9d:62:e9:63:e0:ed:29:6d:
                    25:ab:9c:c2:53:82:8a:e7:fb:63:02:a8:0c:3e:6e:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6A:A6:F4:5B:32:A9:95:CA:8D:D6:13:00:F2:4C:43:90:CE:48:2A
            X509v3 Authority Key Identifier:
                keyid:E8:65:8A:49:C9:CA:09:E8:9E:B5:3A:09:69:F6:65:2F:ED:34:5D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/E8658A49C9CA09E89EB53A0969F6652FED345D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6GWKScnKCeietToJafZlL-00XXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/0/AS209025.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  209025

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:d6:26:58:a0:7e:a2:3c:51:7a:23:09:70:87:bd:aa:14:
         cf:62:8f:0b:6a:66:7f:f6:bf:a6:f6:a2:60:94:2b:ad:2b:51:
         40:61:a9:95:29:b3:5e:91:27:d1:51:91:9d:52:b1:ba:3a:a1:
         54:47:6e:5b:0e:56:83:24:fb:18:24:12:23:0c:1e:f7:2f:03:
         3f:6f:ab:4b:5c:82:b7:b6:41:7f:d8:8a:fe:4e:98:f2:cf:19:
         b0:e1:89:60:31:a8:a7:d9:b2:02:9a:ae:a8:2d:5d:26:8c:95:
         0d:22:6d:86:fa:db:81:48:f3:c8:3d:2f:6c:37:be:a9:f0:20:
         21:0d:bb:78:3f:b8:d3:bb:c1:0b:aa:e7:05:cb:0c:d7:ca:0c:
         ff:2e:d9:88:7b:dc:f1:3d:8f:86:cb:5f:e2:dc:e0:37:39:77:
         cf:d1:41:95:22:fe:04:ec:7e:17:94:f8:e4:79:bf:81:84:6e:
         e5:ca:7e:85:3d:a4:18:6c:1e:aa:f1:30:d1:ee:d1:cd:76:a6:
         d3:43:ca:a7:73:02:de:e0:ca:04:7a:c5:d9:c0:d3:39:fa:46:
         42:b7:c4:f7:13:b1:92:e4:53:33:56:03:96:c5:97:db:3a:ef:
         84:c4:bc:55:33:26:0d:09:24:7c:83:c9:3e:e8:63:a4:84:af:
         29:3d:0f:f5
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIUGJ5ThcORJ5RY4u3CXkDNUTA1mK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTg2NThhNDljOWNhMDllODllYjUzYTA5NjlmNjY1MmZl
ZDM0NWQ3ODAeFw0yNDA3MjMxOTQ0NDJaFw0yNTA3MjIxOTQ5NDJaMDMxMTAvBgNV
BAMTKDg5NkFBNkY0NUIzMkE5OTVDQThERDYxMzAwRjI0QzQzOTBDRTQ4MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmLFxCT/m+lzfAFA+2yENWrdn
LMWWVdzGS4o8Whhcgdo+/SxGR7Ntfc9RBxKDsNYkk7h3kPPJes/AUKOqr2kNnHoH
xPiPNYqSEuuGTutak3lZltNHckAa92qP1+Ag/gvtNAR6rvIt0kk6N7/ehxk3d6BY
ZKetr/zJ/Kj96OVcHUx2kftBrx6ZOs0EB07siYYK9sNwBHdGcqW17R0Lu+ARkxO8
37die2aEN8bxjqIshv6u47ubUo1GgYwmRSD3Pf618wR0+t0bFvKiyKO2Ltiv4H/x
75Wa4ixYxSgmKpt/Bu+JIr78er6dYulj4O0pbSWrnMJTgorn+2MCqAw+boxRAgMB
AAGjggIFMIICATAdBgNVHQ4EFgQUiWqm9FsyqZXKjdYTAPJMQ5DOSCowHwYDVR0j
BBgwFoAU6GWKScnKCeietToJafZlL+00XXgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWUwZDFlNDAtYzRmYy00OTc0LWIxNWYtMzJlNjZkYzY2
NmM5LzAvRTg2NThBNDlDOUNBMDlFODlFQjUzQTA5NjlGNjY1MkZFRDM0NUQ3OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZHV0tTY25LQ2VpZXRUb0phZlpsTC0w
MFhYZy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzFlMGQxZTQwLWM0ZmMt
NDk3NC1iMTVmLTMyZTY2ZGM2NjZjOS8wL0FTMjA5MDI1LmFzYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMwgTANBgkq
hkiG9w0BAQsFAAOCAQEANMXWJligfqI8UXojCXCHvaoUz2KPC2pmf/a/pvaiYJQr
rStRQGGplSmzXpEn0VGRnVKxujqhVEduWw5WgyT7GCQSIwwe9y8DP2+rS1yCt7ZB
f9iK/k6Y8s8ZsOGJYDGop9myApquqC1dJoyVDSJthvrbgUjzyD0vbDe+qfAgIQ27
eD+407vBC6rnBcsM18oM/y7ZiHvc8T2Phstf4tzgNzl3z9FBlSL+BOx+F5T45Hm/
gYRu5cp+hT2kGGweqvEw0e7RzXam00PKp3MC3uDKBHrF2cDTOfpGQrfE9xOxkuRT
M1YDlsWX2zrvhMS8VTMmDQkkfIPJPuhjpISvKT0P9Q==
-----END CERTIFICATE-----