Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa
File:                     AS396064.asa (raw, json)
Hash identifier:          joSjuSKQaj12n3swx0eOmnKBVqL2nj2ygqpqZJFSCqE=
Subject key identifier:   0A:5A:4E:35:CC:5D:14:41:41:5A:55:76:04:E7:13:BF:83:70:A2:F0
Certificate issuer:       /CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
Certificate serial:       5EC0729BA33CA24AE20933B855416E0DFA573E16
Authority key identifier: 1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa
Signing time:             Mon 24 Mar 2025 08:20:21 +0000
ASPA not before:          Mon 24 Mar 2025 08:15:21 +0000
ASPA not after:           Mon 23 Mar 2026 08:20:21 +0000
Customer ASID:            396064
Providers:                AS: 924
                          AS: 8283
                          AS: 34465
                          AS: 34872
                          AS: 34927
                          AS: 47272
                          AS: 50263
                          AS: 58057
                          AS: 61049
                          AS: 208210
                          AS: 215664
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c0:72:9b:a3:3c:a2:4a:e2:09:33:b8:55:41:6e:0d:fa:57:3e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd
        Validity
            Not Before: Mar 24 08:15:21 2025 GMT
            Not After : Mar 23 08:20:21 2026 GMT
        Subject: CN=0A5A4E35CC5D1441415A557604E713BF8370A2F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:aa:dd:4f:16:c8:18:fc:2c:5d:2d:c5:0b:
                    4a:8f:eb:28:4e:49:99:5a:10:f9:da:7d:1c:db:f1:
                    1c:85:bd:b6:51:09:bf:ce:96:52:59:6f:b6:51:58:
                    7f:7e:1d:55:de:b0:0a:dc:a8:ce:37:37:05:17:e5:
                    34:94:66:6d:e4:22:08:d3:8e:0c:b3:56:08:b2:f1:
                    40:49:74:08:de:fe:41:87:11:2f:ab:ac:6d:10:6c:
                    10:9f:67:eb:f6:d0:d3:ca:af:7f:72:f1:78:b5:63:
                    49:fb:16:5c:20:39:06:bf:1a:fa:1d:20:39:08:19:
                    93:37:53:09:6e:7b:c5:96:46:a7:6d:33:7b:f6:5a:
                    76:d8:cc:bb:92:f5:cf:94:a7:c9:88:e0:d5:39:6c:
                    c0:2e:79:9c:25:c7:57:7d:15:60:55:c6:43:d9:63:
                    61:97:e1:94:84:89:1c:94:2f:5d:eb:4a:55:52:71:
                    4f:0c:bd:dc:46:f7:67:17:64:f1:1f:f6:74:c6:4d:
                    47:45:f7:f2:36:19:6d:c9:6a:cf:d5:3c:6a:3e:1d:
                    ed:a3:f4:d8:cb:ed:80:d2:40:2f:44:4c:f3:82:86:
                    8c:54:ff:59:83:29:d8:b1:73:5d:3b:9b:9c:7b:b8:
                    a3:ab:00:34:5b:d4:08:ce:f6:cc:ea:b6:fe:81:86:
                    d8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5A:4E:35:CC:5D:14:41:41:5A:55:76:04:E7:13:BF:83:70:A2:F0
            X509v3 Authority Key Identifier:
                keyid:1F:7F:72:49:A6:81:F8:CD:41:27:0B:50:D8:D7:E7:81:58:81:DA:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/1F7F7249A681F8CD41270B50D8D7E7815881DA36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/383bd50b-b192-44bd-9349-351225a13a33/23fb3d29e7f67c634df3b7f4a960082e4429f166b65301a9dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/1/AS396064.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396064

    Signature Algorithm: sha256WithRSAEncryption
         24:11:be:d1:fb:59:5e:04:bc:74:1e:08:34:48:bb:9f:d6:23:
         f6:62:45:a8:d0:5f:74:e3:28:c2:16:87:db:9d:6d:e4:a8:ab:
         b8:a9:54:aa:bb:e6:a7:fd:cb:6c:3f:91:68:5f:0a:0b:c2:60:
         7b:37:4e:00:a0:9d:39:c7:84:5e:1e:be:b2:d4:1e:69:9d:c6:
         1e:75:f1:0e:22:35:6a:cf:12:53:c3:6d:87:e8:7d:04:da:18:
         cb:12:5c:7a:0c:bf:dc:da:25:54:93:13:d5:62:34:7a:3d:24:
         a7:1f:27:c3:75:cd:70:23:de:91:13:d9:ba:64:d1:1f:c8:7a:
         34:99:70:b8:d2:73:38:68:79:0e:dc:22:c0:84:77:83:50:b0:
         77:bd:aa:b7:e2:76:25:36:fc:0d:b4:23:46:cb:95:66:3a:a7:
         8d:70:b8:39:7b:55:3f:dd:1e:21:53:dd:58:0e:7d:6a:fa:17:
         e9:b8:55:66:0e:b4:b8:35:d0:31:a9:8c:44:38:dc:68:8e:78:
         e1:b3:4d:ad:ea:14:b3:25:09:b2:16:cc:9f:be:e6:18:8e:fa:
         9f:19:44:f9:3c:8b:fd:aa:5f:de:26:dc:9d:25:ce:0a:7e:ee:
         a9:cc:04:c6:52:1e:29:7e:87:96:f9:a9:8c:7c:ca:49:a5:b4:
         15:e7:5e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----