Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/AS213086.asa
File:                     AS213086.asa (raw, json)
Hash identifier:          yqKfcFk2vU6zPrb8S6VKTzxrrn1oFKDf29x3fA5bQ1k=
Subject key identifier:   8D:E9:56:2D:E8:05:A2:39:40:DF:F3:97:45:CF:20:64:74:25:B6:D1
Certificate issuer:       /CN=a762083dd83bf60996d5f11d4df4eee568746b14
Certificate serial:       116DA47BE8DF0C553E454BD83CCF8F37580424EC
Authority key identifier: A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/AS213086.asa
Signing time:             Tue 23 Jul 2024 19:49:42 +0000
ASPA not before:          Tue 23 Jul 2024 19:44:42 +0000
ASPA not after:           Tue 22 Jul 2025 19:49:42 +0000
Customer ASID:            213086
Providers:                AS: 140731
                          AS: 199762
                          AS: 200160
                          AS: 203913

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6d:a4:7b:e8:df:0c:55:3e:45:4b:d8:3c:cf:8f:37:58:04:24:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a762083dd83bf60996d5f11d4df4eee568746b14
        Validity
            Not Before: Jul 23 19:44:42 2024 GMT
            Not After : Jul 22 19:49:42 2025 GMT
        Subject: CN=8DE9562DE805A23940DFF39745CF20647425B6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:1c:9c:c2:7e:6e:06:8c:f1:ae:21:53:f1:
                    e2:1b:86:99:e0:ed:9b:05:31:cd:7e:24:0f:5e:78:
                    cf:1e:34:48:ed:46:07:be:72:3c:f3:10:e3:f7:08:
                    4b:9e:b5:02:ea:e4:32:d1:2d:3d:59:dd:ef:01:2d:
                    c0:bd:cc:a4:9b:d6:fb:97:7b:05:82:a2:b4:04:d1:
                    46:f0:ea:cb:b4:2a:cf:d3:01:c9:77:06:59:c3:5a:
                    13:ac:07:be:00:ef:02:98:9c:5d:d0:7b:51:76:5e:
                    ed:da:dc:a9:3a:37:a4:9f:8f:9f:7d:85:2f:d4:33:
                    3d:99:94:8b:9c:20:ba:de:69:52:b5:7a:f1:c2:e7:
                    a7:eb:69:a5:7f:5e:0a:0b:32:68:0d:2f:0d:d8:90:
                    15:e3:59:ea:6b:ae:80:a1:e9:31:e6:28:da:44:36:
                    61:0b:0e:d7:83:63:5b:4d:58:d0:ba:b0:a0:e2:4a:
                    2e:04:34:bf:d1:7b:a8:c9:7c:da:f1:e4:1f:8a:f9:
                    e3:26:22:b2:83:e4:b5:6a:d3:18:43:de:d7:09:e4:
                    46:92:9f:56:44:03:c0:8e:f0:81:02:dc:62:da:3d:
                    53:29:86:0d:83:ea:a0:f1:02:3d:fc:a8:ef:97:6f:
                    7b:02:c3:1d:ae:bb:a0:76:57:b2:85:4c:15:36:2b:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E9:56:2D:E8:05:A2:39:40:DF:F3:97:45:CF:20:64:74:25:B6:D1
            X509v3 Authority Key Identifier:
                keyid:A7:62:08:3D:D8:3B:F6:09:96:D5:F1:1D:4D:F4:EE:E5:68:74:6B:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/A762083DD83BF60996D5F11D4DF4EEE568746B14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2IIPdg79gmW1fEdTfTu5Wh0axQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1e0d1e40-c4fc-4974-b15f-32e66dc666c9/2/AS213086.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213086

    Signature Algorithm: sha256WithRSAEncryption
         72:99:c9:e3:15:4c:d3:e7:53:84:e3:e0:b7:33:19:95:0d:e7:
         4e:ab:ff:36:43:49:5b:31:e0:8b:43:d6:f6:62:c6:5c:d8:57:
         20:68:e3:38:d7:8c:ce:e8:2d:a8:92:3e:7b:95:5a:86:26:bf:
         80:32:f0:b1:fa:52:03:85:89:8d:f1:39:81:af:e6:27:61:23:
         43:9d:a6:a9:85:74:1e:d2:1f:81:68:ea:70:5a:35:5b:82:5e:
         20:a0:b2:91:fa:39:95:f2:d2:f4:fe:11:75:ac:8a:30:41:4d:
         49:d2:75:cd:7a:03:2f:27:b8:a5:3e:13:d0:b0:6c:a4:19:27:
         e6:45:3f:46:3a:2a:09:ff:c3:7b:ba:7a:b9:66:27:10:a7:0f:
         d7:01:c9:16:48:e7:af:b1:93:f3:4d:75:8b:aa:fa:b0:1a:53:
         4c:6b:34:95:ff:36:df:5f:60:be:60:90:34:6b:46:62:d5:f5:
         b1:48:b9:3b:8e:20:c5:74:05:77:7b:66:5f:ba:87:2a:95:ce:
         17:2c:49:e7:17:40:ce:c4:28:fa:3a:a1:8c:aa:71:b3:4c:d0:
         80:3e:b5:e0:37:64:aa:46:e7:bb:25:c6:61:b1:6e:58:7f:7d:
         1c:20:d0:6c:e8:16:a0:de:21:82:f5:c8:80:59:70:bc:3b:81:
         0b:9e:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----