Autonomous System Provider Authorization

$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/AS219418.asa
File:                     AS219418.asa (raw, json)
Hash identifier:          khaI5BqMbvYDhIIGHO4wtYyJ4IaOIc3pETLpsWiJxV4=
Subject key identifier:   65:BB:CD:15:40:CA:C6:4E:6D:62:1E:0F:C8:69:FC:4E:B1:3C:E9:67
Certificate issuer:       /CN=ceaf2144c75795c223cc17ca305b72d0a4b4e4f2
Certificate serial:       5823AD2C359E0DDBB25A0D5956E02F41C9323D60
Authority key identifier: CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/AS219418.asa
Signing time:             Sun 18 Oct 2026 19:03:05 +0000
ASPA not before:          Sun 18 Oct 2026 18:58:05 +0000
ASPA not after:           Sun 17 Oct 2027 19:03:05 +0000
Customer ASID:            219418
Providers:                AS: 47272
                          AS: 205941
                          AS: 212635
                          AS: 215147
                          AS: 215685
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:23:ad:2c:35:9e:0d:db:b2:5a:0d:59:56:e0:2f:41:c9:32:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceaf2144c75795c223cc17ca305b72d0a4b4e4f2
        Validity
            Not Before: Oct 18 18:58:05 2026 GMT
            Not After : Oct 17 19:03:05 2027 GMT
        Subject: CN=65BBCD1540CAC64E6D621E0FC869FC4EB13CE967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:58:b9:03:2d:71:f8:df:a8:2b:a3:09:0e:
                    4d:dc:b2:90:2a:2f:e3:56:ec:fc:f3:3f:17:e9:31:
                    50:75:09:27:b1:8a:ee:09:ef:84:ab:22:51:91:df:
                    10:0a:54:f9:30:39:df:d6:09:21:36:2c:a3:88:53:
                    3b:99:c9:28:cd:3f:15:1a:ee:38:e1:c7:01:20:32:
                    9d:d1:ef:84:f1:3d:a8:76:c2:90:6c:18:67:2d:77:
                    70:ad:f0:39:03:e2:66:26:21:c3:86:cb:51:0c:93:
                    a2:75:3d:8f:8c:2a:96:c4:41:0c:aa:b3:33:47:51:
                    d6:14:30:08:91:cb:ea:98:f8:f0:2f:a3:c7:48:7d:
                    49:9f:eb:89:29:7b:6c:7b:5a:96:62:46:49:65:7d:
                    36:f5:2a:2a:5d:db:58:61:4b:7f:83:0b:7d:8d:bf:
                    bd:10:75:30:23:e1:c6:ea:c4:81:0a:52:6f:d6:19:
                    65:22:c3:62:87:6e:97:ef:f9:60:b3:33:ef:ae:92:
                    28:b2:5a:78:e8:9c:e1:52:76:7f:09:fb:d8:da:b2:
                    15:05:e4:8d:f4:74:7a:ae:3e:78:71:88:26:2f:d2:
                    59:92:f5:b6:2f:9a:1c:ab:f4:f4:5f:cb:89:c6:a4:
                    03:8f:a3:cc:f1:e6:48:80:ae:20:ea:2a:b6:d3:8b:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:CD:15:40:CA:C6:4E:6D:62:1E:0F:C8:69:FC:4E:B1:3C:E9:67
            X509v3 Authority Key Identifier:
                keyid:CE:AF:21:44:C7:57:95:C2:23:CC:17:CA:30:5B:72:D0:A4:B4:E4:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/CEAF2144C75795C223CC17CA305B72D0A4B4E4F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zq8hRMdXlcIjzBfKMFty0KS05PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef81ebc1-0ae8-49ee-83ac-220d5ccc9a2a/0/AS219418.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  219418

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:c9:4c:a8:89:4a:c2:ae:a7:7f:d7:51:dc:03:7e:44:d9:
         b0:58:b8:c9:22:34:06:59:0a:c7:02:e7:dd:c6:ce:f0:4d:bf:
         fc:37:66:a3:69:b1:dc:28:cd:c5:c9:b9:99:41:55:b2:ed:47:
         8f:df:cc:f7:4f:a9:f1:2f:98:c4:32:99:c3:d2:52:cd:6b:9c:
         7f:80:09:59:65:eb:d2:af:58:f9:99:37:7a:95:a0:6d:ab:85:
         55:0a:5d:80:9d:cf:c7:f9:1b:90:6e:22:6e:c1:95:e7:45:ea:
         55:28:05:28:d9:a6:0e:84:d3:c6:2c:67:b9:c8:14:30:b4:8e:
         2a:94:27:80:70:ac:b4:da:b2:1f:72:20:13:38:c1:2a:05:5f:
         89:da:8f:e5:f6:d7:75:61:0a:a0:e3:f9:35:42:f9:67:fa:5c:
         80:61:04:c2:1f:e8:3c:7f:80:5e:7f:9c:5a:82:92:c4:a8:a7:
         ff:2b:3c:83:c1:4d:ef:b6:0d:ff:87:fe:12:19:1c:ea:5e:c0:
         22:7e:53:df:ae:dd:71:3b:c1:c3:de:b0:b4:16:e6:04:87:63:
         f2:12:ea:16:16:8d:d9:8d:61:9f:ca:84:7c:33:a4:58:d3:5b:
         bc:7e:e5:a8:93:26:af:18:55:b5:3e:44:16:aa:50:14:d8:d2:
         a6:aa:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----