Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/AS13852.asa
File:                     AS13852.asa (raw, json)
Hash identifier:          0kMGq2jANQBO8ytDLtkuzsBRwasLFQXbJoStqg2UGqI=
Subject key identifier:   2B:8D:98:64:82:75:9E:60:F6:E8:06:42:13:77:F5:F9:C6:D3:3E:D2
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       213D663331B98D94D65AEF229B3E76C746C57C60
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/AS13852.asa
Signing time:             Thu 06 Mar 2025 21:23:05 +0000
ASPA not before:          Thu 06 Mar 2025 21:18:05 +0000
ASPA not after:           Thu 05 Mar 2026 21:23:05 +0000
Customer ASID:            13852
Providers:                AS: 6939
                          AS: 11967
                          AS: 20473
                          AS: 34927
                          AS: 52025
                          AS: 209533
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:66:33:31:b9:8d:94:d6:5a:ef:22:9b:3e:76:c7:46:c5:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Mar  6 21:18:05 2025 GMT
            Not After : Mar  5 21:23:05 2026 GMT
        Subject: CN=2B8D986482759E60F6E806421377F5F9C6D33ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:3c:25:ab:a6:cf:6f:d8:31:81:a0:2b:84:
                    32:c7:d3:dc:99:dc:b9:f6:69:00:a2:f0:c5:74:a9:
                    23:97:17:64:5e:88:ea:9e:02:80:3f:e6:02:92:7e:
                    8e:7e:76:2a:9a:e0:10:3e:83:c3:57:43:3c:04:aa:
                    27:a0:6b:11:60:ca:80:ea:42:44:3e:d1:88:d2:8e:
                    1c:7a:eb:b8:1f:1c:4d:0a:6e:27:84:f8:c0:ae:04:
                    17:92:e7:2d:90:20:f2:17:06:23:40:00:61:a1:e1:
                    e6:f0:b7:f9:fc:74:28:5f:ae:51:65:bd:35:de:36:
                    3d:68:17:49:eb:ca:25:82:f5:aa:90:df:5c:12:c9:
                    bf:44:da:bd:2e:cc:33:78:a4:86:b3:36:1b:e4:45:
                    f0:5c:f4:c1:40:7e:e1:fc:8e:d9:7c:17:48:f6:53:
                    00:cd:ec:27:d0:67:28:81:f0:54:8d:9e:24:ad:17:
                    18:ee:31:c2:99:61:a5:66:d2:4f:9e:af:00:73:b8:
                    b0:2a:23:59:4c:7b:ef:cf:5a:d8:ab:fb:03:6a:d5:
                    0a:83:9a:21:31:8c:96:29:02:0e:ce:0a:c9:4f:6a:
                    c6:fa:ab:b5:1d:d6:31:98:48:c7:c8:3e:88:d1:31:
                    b5:7a:aa:c2:1c:ee:5a:03:8e:5c:72:cd:16:5c:bf:
                    ea:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8D:98:64:82:75:9E:60:F6:E8:06:42:13:77:F5:F9:C6:D3:3E:D2
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/AS13852.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13852

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:0a:5c:12:e4:71:d0:57:2f:c4:1a:c0:11:59:73:90:6d:
         5f:90:ba:4c:e4:35:04:93:b4:eb:5b:48:5e:c5:23:27:8a:14:
         b0:bd:97:8a:ba:94:b3:dc:5b:35:14:68:ed:05:c9:f9:fe:2f:
         16:00:14:4e:c7:19:d3:0e:00:13:1a:90:10:74:df:75:97:3b:
         0f:17:e2:45:b6:9d:7d:a5:fb:12:67:fd:1c:a5:80:0f:01:8d:
         0f:f0:cd:b8:bb:9d:94:da:c1:97:e5:cb:fc:5e:aa:ca:9d:02:
         94:79:56:12:6d:79:34:17:ca:c7:8b:4f:46:1b:5e:a2:2e:4f:
         24:ac:b9:60:fb:22:c8:7e:35:e0:64:cb:50:88:78:85:c8:7c:
         b0:14:03:36:d6:5c:1f:18:55:57:71:39:a3:62:e5:d9:74:e2:
         7e:a1:65:52:ce:4c:cb:1b:cf:fb:ff:85:4b:47:1a:01:f8:99:
         70:d4:76:c3:25:5e:b1:c4:7c:7d:cd:31:88:3f:1f:2c:15:d6:
         33:ca:3b:b4:08:14:25:68:36:78:d9:f8:8b:f9:08:99:f4:37:
         72:a0:2f:23:a5:50:94:e1:a1:1f:10:26:c9:6d:be:71:d3:b7:
         27:8e:d0:23:78:af:ae:9c:3d:f7:41:4b:f4:16:03:97:f7:ed:
         e4:fa:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----