{"tool":"network-report","status":"warn","input":{"query":"AS28177"},"findings":[{"level":"warn","text":"AS28177 (AS28177) announces 28 IPv4 and 14 IPv6 prefixes.","title":"AS28177 (AS28177) announces 28 IPv4 and 14 IPv6 prefixes.","params":{"query":"AS28177","who":"AS28177 (AS28177)","v4":28,"v6":14}},{"level":"warn","text":"10 of 42 announced prefixes have no ROA (RPKI not found): 189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5).","title":"10 of 42 announced prefixes have no ROA (RPKI not found): 189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5).","params":{"count":10,"total":42,"list":"189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5)","asn":28177},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS28177 and a max length equal to the prefix length:","record":"189.85.64.0/22 AS28177 max-length /22\n189.85.64.0/23 AS28177 max-length /23\n189.85.64.0/24 AS28177 max-length /24\n189.85.65.0/24 AS28177 max-length /24\n189.85.66.0/23 AS28177 max-length /23\n189.85.66.0/24 AS28177 max-length /24\n189.85.67.0/24 AS28177 max-length /24\n189.85.68.0/22 AS28177 max-length /22\n189.85.68.0/23 AS28177 max-length /23\n189.85.68.0/24 AS28177 max-length /24"},{"level":"warn","text":"41 of 42 announced prefixes have no IRR route object: 2804:2214:800b::/48, 189.85.72.0/22, 189.85.64.0/23, 2804:2214:8000::/33, 2804:2214:c004::/48 (+36).","title":"41 of 42 announced prefixes have no IRR route object: 2804:2214:800b::/48, 189.85.72.0/22, 189.85.64.0/23, 2804:2214:8000::/33, 2804:2214:c004::/48 (+36).","params":{"count":41,"total":42,"list":"2804:2214:800b::/48, 189.85.72.0/22, 189.85.64.0/23, 2804:2214:8000::/33, 2804:2214:c004::/48 (+36)","asn":28177},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS28177 in your RIR’s IRR database (or RADB).","record":"route6: 2804:2214:800b::/48\norigin: AS28177\n\nroute: 189.85.72.0/22\norigin: AS28177\n\nroute: 189.85.64.0/23\norigin: AS28177"},{"level":"warn","text":"PeeringDB did not answer: HTTP 404","title":"PeeringDB did not answer: HTTP 404","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"query":"AS28177","kind":"asn","special":null,"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2008-01-04","status":"allocated","range":"AS28177","opaque_id":"105999","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS28177","who":"AS28177 (AS28177)","v4":28,"v6":14}},"seconds":2.3999999999999999,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":28177,"v4":28,"v6":14}},{"tool":["rpki",{"prefix":"189.85.64.0/22","asn":"28177"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":42,"list":"189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5)","asn":28177},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"189.85.64.0/22 AS28177 max-length /22\n189.85.64.0/23 AS28177 max-length /23\n189.85.64.0/24 AS28177 max-length /24\n189.85.65.0/24 AS28177 max-length /24\n189.85.66.0/23 AS28177 max-length /23\n189.85.66.0/24 AS28177 max-length /24\n189.85.67.0/24 AS28177 max-length /24\n189.85.68.0/22 AS28177 max-length /22\n189.85.68.0/23 AS28177 max-length /23\n189.85.68.0/24 AS28177 max-length /24"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":32,"asn":28177,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":41,"total":42,"list":"2804:2214:800b::/48, 189.85.72.0/22, 189.85.64.0/23, 2804:2214:8000::/33, 2804:2214:c004::/48 (+36)","asn":28177},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2804:2214:800b::/48\norigin: AS28177\n\nroute: 189.85.72.0/22\norigin: AS28177\n\nroute: 189.85.64.0/23\norigin: AS28177"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":4,"right":0}}],"data":{"asn":28177,"holder":"AS28177 - NETWORKBRASIL Ltda.","announced":true,"v4":28,"v6":14,"prefixes":["189.85.64.0/22","189.85.64.0/23","189.85.64.0/24","189.85.65.0/24","189.85.66.0/23","189.85.66.0/24","189.85.67.0/24","189.85.68.0/22","189.85.68.0/23","189.85.68.0/24","189.85.69.0/24","189.85.70.0/23","189.85.70.0/24","189.85.71.0/24","189.85.72.0/22","189.85.72.0/23","189.85.72.0/24","189.85.73.0/24","189.85.74.0/23","189.85.74.0/24","189.85.75.0/24","189.85.76.0/22","189.85.76.0/23","189.85.76.0/24","189.85.77.0/24","189.85.78.0/23","189.85.78.0/24","189.85.79.0/24","2804:2214:800b::/48","2804:2214:4000::/34","2804:2214:8000::/33","2804:2214:8000::/34","2804:2214:8002::/48","2804:2214:8005::/48","2804:2214:8006::/48","2804:2214:8007::/48","2804:2214::/32","2804:2214::/33","2804:2214::/34","2804:2214:c000::/34","2804:2214:c004::/48","2804:2214:c005::/48"],"rpki":{"not-found":10,"unchecked":32,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"189.85.64.0/22","state":"not-found"},{"prefix":"189.85.64.0/23","state":"not-found"},{"prefix":"189.85.64.0/24","state":"not-found"},{"prefix":"189.85.65.0/24","state":"not-found"},{"prefix":"189.85.66.0/23","state":"not-found"},{"prefix":"189.85.66.0/24","state":"not-found"},{"prefix":"189.85.67.0/24","state":"not-found"},{"prefix":"189.85.68.0/22","state":"not-found"},{"prefix":"189.85.68.0/23","state":"not-found"},{"prefix":"189.85.68.0/24","state":"not-found"}],"irr_missing":["2804:2214:800b::/48","189.85.72.0/22","189.85.64.0/23","2804:2214:8000::/33","2804:2214:c004::/48","189.85.66.0/23","189.85.78.0/24","189.85.73.0/24","189.85.71.0/24","189.85.68.0/22","189.85.72.0/24","2804:2214:4000::/34","189.85.64.0/24","189.85.69.0/24","189.85.72.0/23","189.85.77.0/24","189.85.74.0/24","189.85.66.0/24","189.85.65.0/24","189.85.74.0/23","2804:2214::/33","2804:2214:8007::/48","2804:2214:8002::/48","2804:2214:8000::/34","189.85.78.0/23","2804:2214:c005::/48","2804:2214:c000::/34","189.85.79.0/24","189.85.75.0/24","2804:2214:8005::/48"],"irr_missing_count":41,"bogons":[],"upstreams":[{"asn":28343,"power":376,"name":"Unifique Telecomunicações"},{"asn":16735,"power":366,"name":"Algar"},{"asn":10429,"power":362,"name":"TELEFÔNICA BRASIL AS10429"},{"asn":18881,"power":1,"name":"TELEFÔNICA BRASIL AS18881"}],"left":4,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS28177"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":42,"list":"189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5)","asn":28177}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}],"data":{"query":"AS28177","looked_up":"AS28177","kind":"autnum","source":"https://rdap.lacnic.net/rdap/autnum/28177","terms":"https://www.lacnic.net/innovaportal/file/107/1/terminos-condiciones-whois-en.pdf","summary":{"Name":"ASN28177","Handle":"28177","Range":"AS28177","Country":"BR","Registered":"2008-01-04T12:47:57Z","Last changed":"2024-12-02T14:52:42Z","Abuse contact":"noc@idc.net.br"},"entities":[{"roles":["registrant"],"kind":"org","name":"NETWORKBRASIL Ltda.","email":null},{"roles":["administrative","abuse"],"kind":"individual","name":"DECIO MONTAGNA","email":"noc@idc.net.br"}],"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2008-01-04","status":"allocated","range":"AS28177","opaque_id":"105999","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS28177"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}},"peering":{"status":"warn","findings":[{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute."}],"data":{"asn":28177,"error":"HTTP 404","ix":[],"fac":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"28177"},"summary":{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"}}}},"fixes":[{"tool":["rpki",{"prefix":"189.85.64.0/22","asn":"28177"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":42,"list":"189.85.64.0/22, 189.85.64.0/23, 189.85.64.0/24, 189.85.65.0/24, 189.85.66.0/23 (+5)","asn":28177},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"189.85.64.0/22 AS28177 max-length /22\n189.85.64.0/23 AS28177 max-length /23\n189.85.64.0/24 AS28177 max-length /24\n189.85.65.0/24 AS28177 max-length /24\n189.85.66.0/23 AS28177 max-length /23\n189.85.66.0/24 AS28177 max-length /24\n189.85.67.0/24 AS28177 max-length /24\n189.85.68.0/22 AS28177 max-length /22\n189.85.68.0/23 AS28177 max-length /23\n189.85.68.0/24 AS28177 max-length /24","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":41,"total":42,"list":"2804:2214:800b::/48, 189.85.72.0/22, 189.85.64.0/23, 2804:2214:8000::/33, 2804:2214:c004::/48 (+36)","asn":28177},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2804:2214:800b::/48\norigin: AS28177\n\nroute: 189.85.72.0/22\norigin: AS28177\n\nroute: 189.85.64.0/23\norigin: AS28177","section":"routing"},{"level":"warn","title":"PeeringDB did not answer: :error","params":{"error":"HTTP 404"},"fix":"Try again in a minute.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS28177"}