Autonomous System Provider Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/AS52939.asa
File:                     AS52939.asa (raw, json)
Hash identifier:          0tufRS4ktl+NxHpvqQ9vKigTQEe5UDlMHD7P+HEqnQ4=
Subject key identifier:   28:EC:67:38:83:E5:B0:57:F6:22:F6:6D:F5:1B:21:C7:DB:09:E4:7B
Certificate issuer:       /CN=D14002DC49BC5684C329D87B69F890F5BAAE71FF
Certificate serial:       5F0F7297A1EB0C14D88666D97411B8DDF45A2C3A
Authority key identifier: D1:40:02:DC:49:BC:56:84:C3:29:D8:7B:69:F8:90:F5:BA:AE:71:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/AS52939.asa
Signing time:             Thu 10 Sep 2026 13:26:33 +0000
ASPA not before:          Thu 10 Sep 2026 13:21:33 +0000
ASPA not after:           Thu 09 Sep 2027 13:26:33 +0000
Customer ASID:            52939
Providers:                AS: 28294
                          AS: 52468
                          AS: 53013
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.crl
                          rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Sep 2026 16:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:72:97:a1:eb:0c:14:d8:86:66:d9:74:11:b8:dd:f4:5a:2c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14002DC49BC5684C329D87B69F890F5BAAE71FF
        Validity
            Not Before: Sep 10 13:21:33 2026 GMT
            Not After : Sep  9 13:26:33 2027 GMT
        Subject: CN=28EC673883E5B057F622F66DF51B21C7DB09E47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e5:6e:8c:b9:ed:8a:c2:66:16:f6:46:ad:a5:
                    56:ba:09:16:e6:7a:56:fa:ed:98:9c:e0:10:10:68:
                    f0:4d:b5:ef:5f:e1:8a:4d:3f:4b:f9:84:e2:d2:aa:
                    b3:f8:9a:89:14:d7:05:97:3b:6f:5a:cc:a8:c5:61:
                    7c:79:ec:c8:42:71:9f:d7:b0:29:8d:9b:a4:3b:97:
                    2b:ce:c4:81:46:68:19:50:2a:6c:f2:2a:d1:e6:76:
                    00:a4:6d:7c:5b:32:1d:54:41:d7:05:61:49:00:34:
                    d5:87:db:15:f8:23:fd:40:75:00:23:1b:42:4f:eb:
                    bf:ff:c8:b2:12:ab:98:d3:ae:85:59:de:1c:7f:4e:
                    08:a0:ea:83:0f:21:65:32:c8:4c:7f:db:f6:a8:1e:
                    2a:c7:7e:be:34:ea:a0:b3:f3:3a:0f:ba:f9:0c:2b:
                    b9:33:5d:e4:63:3a:7f:98:22:4a:7e:73:77:5c:66:
                    68:99:af:7d:d1:ad:34:95:78:4e:d2:77:3d:68:69:
                    1a:fa:8b:0a:07:d2:48:94:ca:bf:36:aa:f8:6b:09:
                    cf:29:d7:63:c3:34:89:af:d5:e0:6a:44:f4:b9:b8:
                    dd:e5:5f:80:23:02:ae:a3:8d:e4:82:bb:fd:1b:33:
                    7c:d3:b9:c4:2e:e9:06:50:4c:c5:76:7d:ce:03:de:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:67:38:83:E5:B0:57:F6:22:F6:6D:F5:1B:21:C7:DB:09:E4:7B
            X509v3 Authority Key Identifier:
                keyid:D1:40:02:DC:49:BC:56:84:C3:29:D8:7B:69:F8:90:F5:BA:AE:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/AS52939.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52939

    Signature Algorithm: sha256WithRSAEncryption
         90:63:fe:eb:bb:88:b5:2b:f2:05:b8:4c:de:5c:7f:eb:41:fe:
         a1:ab:d9:f2:f7:f9:a4:4b:cd:22:8b:db:87:45:2c:a7:28:04:
         a5:10:15:c9:36:e1:39:1c:eb:ce:6d:ab:15:5f:f6:e4:c7:8f:
         6d:c9:56:4a:5d:a6:76:87:7b:ce:0a:31:ad:2d:04:07:0b:6b:
         6c:51:aa:30:17:50:53:22:78:b1:6c:c0:a6:0e:54:1f:13:eb:
         0b:b1:b0:c6:2c:50:fa:e2:a2:90:4b:47:88:6e:2b:02:84:3c:
         94:65:a1:88:ff:91:93:72:4d:b2:50:a0:40:b4:3a:63:02:5f:
         95:47:dd:18:c7:dc:08:05:65:f8:b7:1e:2d:ff:55:58:ea:c1:
         8c:2d:35:76:8f:8b:c9:e2:f0:7f:a6:1d:29:8b:24:fc:44:e8:
         25:7a:e6:34:bf:f7:e5:2a:8f:d8:01:3c:b5:fd:37:cf:d4:a7:
         b1:59:03:fb:dc:f1:23:0c:01:f4:e1:08:50:bc:eb:59:7a:f9:
         05:cf:e5:22:01:46:62:e1:33:0b:2f:47:28:c4:6b:d6:f4:9a:
         c2:58:7c:84:00:24:48:a6:09:40:cb:04:52:0a:5c:af:a4:35:
         e8:a8:32:3a:55:fb:6c:c0:e9:d1:7d:0e:64:1d:f5:2a:ba:e4:
         f5:a2:03:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 08:41:26 2026 by rpki-client