Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS213525.asa
File:                     AS213525.asa (raw, json)
Hash identifier:          seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=
Subject key identifier:   50:5E:78:8B:2C:69:45:D5:7F:F9:66:0F:43:A6:34:C4:10:7B:B9:43
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       2503A574211C013931704DF05BBE2D8CF9E82873
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS213525.asa
Signing time:             Fri 24 Jan 2025 12:37:51 +0000
ASPA not before:          Fri 24 Jan 2025 12:32:51 +0000
ASPA not after:           Fri 23 Jan 2026 12:37:51 +0000
Customer ASID:            213525
Providers:                AS: 8560
                          AS: 207841
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:03:a5:74:21:1c:01:39:31:70:4d:f0:5b:be:2d:8c:f9:e8:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Jan 24 12:32:51 2025 GMT
            Not After : Jan 23 12:37:51 2026 GMT
        Subject: CN=505E788B2C6945D57FF9660F43A634C4107BB943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:a4:e9:a6:40:85:86:e3:1e:59:33:86:7e:
                    f7:c1:4a:48:a9:f3:ab:d4:c8:67:7f:42:c8:92:c1:
                    e7:bd:32:92:3c:3c:a0:fb:08:70:a1:83:93:da:bd:
                    4e:d9:1d:14:43:33:98:7f:8d:a6:cc:29:36:26:0c:
                    56:44:9d:af:22:4a:99:9f:a8:bb:ba:86:44:b7:58:
                    52:70:d9:54:48:ab:22:99:b4:f9:1d:21:2d:1c:ed:
                    1c:ce:c5:81:27:a9:c9:d8:1e:e0:b0:42:bd:27:23:
                    dc:23:41:94:d7:1f:53:03:03:a9:9d:4b:d7:a4:d1:
                    27:5f:60:0f:79:03:73:8d:56:00:66:de:c4:65:2c:
                    dd:3d:2b:f1:c9:96:e9:f0:d0:85:c9:d4:1a:5b:e7:
                    cd:b7:0a:47:68:54:73:21:31:5e:92:aa:fe:98:28:
                    ff:75:cc:57:0d:2b:d3:9f:cf:24:1e:37:92:c3:71:
                    72:e7:a2:b0:2f:e2:46:b5:df:0e:58:0b:2d:2e:41:
                    24:19:c1:e8:b3:f2:22:ef:78:b3:7f:d3:5e:45:e0:
                    f4:99:33:a0:2f:31:e0:bd:01:03:c6:d1:d3:52:ae:
                    6a:90:c7:24:9a:ab:a1:0b:69:b1:b0:79:aa:3d:07:
                    0f:11:c5:eb:d8:2b:46:ab:bd:66:d1:d3:d2:2c:c6:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:78:8B:2C:69:45:D5:7F:F9:66:0F:43:A6:34:C4:10:7B:B9:43
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/AS213525.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  213525

    Signature Algorithm: sha256WithRSAEncryption
         70:79:1e:27:74:32:00:62:aa:3b:3f:54:8d:64:b0:c7:ed:69:
         a5:5c:5c:44:df:ce:bd:c2:22:66:bb:80:2e:10:5c:39:db:cd:
         33:3c:2f:64:98:ec:1c:cf:8b:7d:c0:2b:c7:97:55:59:bb:2b:
         6b:00:91:f2:f8:78:b4:84:c7:8a:f1:24:b0:1c:11:b9:d5:41:
         ec:ab:3f:51:0d:8a:cb:88:3b:74:a6:ac:43:ef:ed:8f:dc:21:
         cb:d9:7c:f7:7f:43:ba:0e:b6:b4:15:c7:06:1e:b3:e7:84:9b:
         63:0d:2d:4a:3e:bb:40:32:1d:0c:c2:92:16:c3:3b:0d:23:9a:
         fb:d3:55:45:a9:73:9a:6a:5f:f6:57:4f:b6:74:06:7c:65:df:
         7e:21:9a:40:e4:8e:f4:34:89:03:ef:d9:d1:d6:4d:4c:33:b9:
         72:35:15:d6:43:e5:4b:f1:48:39:d7:23:30:5a:52:2a:ee:a2:
         35:52:e2:d6:f5:e8:bb:2a:9d:4f:09:03:1e:b5:69:01:8f:06:
         bd:dc:95:d8:ca:48:2a:ee:79:5a:47:c5:26:b9:a1:78:a6:9c:
         c0:7c:d0:31:16:d0:06:ba:c4:1f:50:b8:e3:b0:29:19:6e:85:
         c0:59:48:9e:37:0d:eb:70:6a:66:a3:f1:26:09:da:db:f7:68:
         0a:d9:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:46 2025 by rpki-client