Autonomous System Provider Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
File:                     AS215085.asa (raw, json)
Hash identifier:          sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=
Subject key identifier:   80:7A:DF:61:09:05:E9:86:F1:99:C7:F8:99:62:7C:A1:01:A1:DB:D5
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       3DB92BEBE37F958A51CC6B56089EF4A55F1971B9
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa
Signing time:             Fri 14 Feb 2025 19:32:40 +0000
ASPA not before:          Fri 14 Feb 2025 19:27:40 +0000
ASPA not after:           Fri 13 Feb 2026 19:32:40 +0000
Customer ASID:            215085
Providers:                AS: 35133
                          AS: 42093
                          AS: 211588

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b9:2b:eb:e3:7f:95:8a:51:cc:6b:56:08:9e:f4:a5:5f:19:71:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Feb 14 19:27:40 2025 GMT
            Not After : Feb 13 19:32:40 2026 GMT
        Subject: CN=807ADF610905E986F199C7F899627CA101A1DBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bc:6c:15:22:35:f1:ff:1d:f5:43:6f:a7:3b:
                    9a:ea:29:80:6e:0f:50:d8:1d:0e:fb:97:7a:11:81:
                    b6:b2:23:c0:81:4b:e9:98:ff:c1:b4:81:01:a9:7a:
                    9f:05:ca:38:ca:e2:ad:84:83:24:a2:43:f1:9d:9b:
                    bb:c5:97:1b:6a:3d:a9:ac:07:71:d9:f2:6f:af:9c:
                    fc:47:2f:08:be:32:d1:b6:97:9f:3e:ec:db:51:ee:
                    55:de:7d:8a:90:10:91:35:04:44:7f:04:45:2c:10:
                    eb:23:53:66:77:8c:f0:93:41:a3:d8:50:2f:f6:29:
                    22:1e:fa:7b:be:45:9e:97:79:f0:2f:cb:08:35:63:
                    5c:91:aa:35:4c:fe:9f:86:9c:e2:6e:7d:82:b8:06:
                    74:e0:43:d0:eb:1e:83:2d:da:ee:20:6a:3e:38:da:
                    8e:33:32:93:75:6b:52:71:23:27:b2:4c:3c:4f:6c:
                    33:1b:72:ff:aa:09:fa:3b:82:8d:1c:fc:a8:c8:f5:
                    a3:fa:09:42:ec:d3:c6:2c:c5:3c:84:22:24:29:70:
                    20:f7:19:1f:9e:9e:31:ce:4f:3e:70:a3:be:cd:bb:
                    52:02:fd:aa:f7:61:1e:a1:35:23:3d:d6:f7:6d:f3:
                    f8:ac:2b:09:5b:70:1c:dc:6d:e0:00:44:9d:da:c6:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7A:DF:61:09:05:E9:86:F1:99:C7:F8:99:62:7C:A1:01:A1:DB:D5
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/AS215085.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  215085

    Signature Algorithm: sha256WithRSAEncryption
         42:76:b9:b4:34:51:82:94:05:1f:ba:fa:49:b0:36:3f:0c:43:
         d2:26:d6:e1:6a:ad:f4:89:e1:fc:1d:db:ac:79:ac:bb:54:4b:
         c6:2b:5a:a0:b5:6c:50:3d:12:23:b5:b4:29:f8:75:6e:96:9b:
         3c:6b:cf:5f:ca:11:2f:b3:33:08:52:4a:25:0c:f9:4f:e0:a6:
         e6:0b:94:5c:88:cc:b3:09:ee:19:c8:3e:d0:91:cd:c9:c7:6c:
         2f:a5:ca:f0:9a:5e:e3:ca:17:5b:26:c9:4f:17:cd:ef:15:22:
         14:10:35:06:ef:5d:a6:14:44:d4:e1:74:00:57:ac:56:bd:98:
         a5:91:75:81:2c:e8:c6:40:f7:b7:4c:e9:93:05:15:2f:50:e7:
         e5:41:dd:74:da:12:01:4d:2d:a3:10:4c:1a:d9:1d:67:b4:3e:
         e3:1c:f5:33:19:ea:4b:67:2c:bb:ff:0c:7b:4b:b8:19:e5:92:
         7d:54:10:f9:3c:60:09:11:df:10:56:15:70:8a:df:39:29:5c:
         6d:0c:41:dc:4b:5a:18:da:c1:2e:a2:f0:f3:cc:e4:d9:88:2e:
         5c:3c:af:e6:5a:26:a5:fe:09:01:59:e0:c2:1e:2d:75:a6:57:
         36:51:18:17:2d:74:87:92:38:fa:bf:5c:c1:e5:46:87:e6:82:
         d5:ce:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----