{"tool":"network-report","status":"warn","input":{"query":"AS52542"},"findings":[{"level":"warn","text":"AS52542 (AS52542) announces 4 IPv4 and 5 IPv6 prefixes.","title":"AS52542 (AS52542) announces 4 IPv4 and 5 IPv6 prefixes.","params":{"query":"AS52542","who":"AS52542 (AS52542)","v4":4,"v6":5}},{"level":"warn","text":"9 of 9 announced prefixes have no ROA (RPKI not found): 177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4).","title":"9 of 9 announced prefixes have no ROA (RPKI not found): 177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4).","params":{"count":9,"total":9,"list":"177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4)","asn":52542},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS52542 and a max length equal to the prefix length:","record":"177.152.144.0/21 AS52542 max-length /21\n177.152.144.0/22 AS52542 max-length /22\n177.152.148.0/22 AS52542 max-length /22\n177.152.148.0/23 AS52542 max-length /23\n2804:4c6c:100::/40 AS52542 max-length /40\n2804:4c6c:200::/40 AS52542 max-length /40\n2804:4c6c:300::/48 AS52542 max-length /48\n2804:4c6c:301::/48 AS52542 max-length /48\n2804:4c6c::/32 AS52542 max-length /32"},{"level":"warn","text":"4 of 9 announced prefixes have no IRR route object: 2804:4c6c:100::/40, 2804:4c6c:200::/40, 2804:4c6c:301::/48, 2804:4c6c:300::/48.","title":"4 of 9 announced prefixes have no IRR route object: 2804:4c6c:100::/40, 2804:4c6c:200::/40, 2804:4c6c:301::/48, 2804:4c6c:300::/48.","params":{"count":4,"total":9,"list":"2804:4c6c:100::/40, 2804:4c6c:200::/40, 2804:4c6c:301::/48, 2804:4c6c:300::/48","asn":52542},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS52542 in your RIR’s IRR database (or RADB).","record":"route6: 2804:4c6c:100::/40\norigin: AS52542\n\nroute6: 2804:4c6c:200::/40\norigin: AS52542\n\nroute6: 2804:4c6c:301::/48\norigin: AS52542"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"query":"AS52542","kind":"asn","special":null,"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2013-06-11","status":"allocated","range":"AS52542","opaque_id":"115551","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS52542","who":"AS52542 (AS52542)","v4":4,"v6":5}},"seconds":4.2000000000000002,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":52542,"v4":4,"v6":5}},{"tool":["rpki",{"prefix":"177.152.144.0/21","asn":"52542"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":9,"list":"177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4)","asn":52542},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"177.152.144.0/21 AS52542 max-length /21\n177.152.144.0/22 AS52542 max-length /22\n177.152.148.0/22 AS52542 max-length /22\n177.152.148.0/23 AS52542 max-length /23\n2804:4c6c:100::/40 AS52542 max-length /40\n2804:4c6c:200::/40 AS52542 max-length /40\n2804:4c6c:300::/48 AS52542 max-length /48\n2804:4c6c:301::/48 AS52542 max-length /48\n2804:4c6c::/32 AS52542 max-length /32"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":9,"list":"2804:4c6c:100::/40, 2804:4c6c:200::/40, 2804:4c6c:301::/48, 2804:4c6c:300::/48","asn":52542},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2804:4c6c:100::/40\norigin: AS52542\n\nroute6: 2804:4c6c:200::/40\norigin: AS52542\n\nroute6: 2804:4c6c:301::/48\norigin: AS52542"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":4,"right":1}}],"data":{"asn":52542,"holder":"AS52542 - 3Net Servicos & Internet Ltda.","announced":true,"v4":4,"v6":5,"prefixes":["177.152.144.0/21","177.152.144.0/22","177.152.148.0/22","177.152.148.0/23","2804:4c6c:100::/40","2804:4c6c:200::/40","2804:4c6c:300::/48","2804:4c6c:301::/48","2804:4c6c::/32"],"rpki":{"not-found":9,"valid":0,"invalid":0,"unchecked":0},"rpki_problems":[{"prefix":"177.152.144.0/21","state":"not-found"},{"prefix":"177.152.144.0/22","state":"not-found"},{"prefix":"177.152.148.0/22","state":"not-found"},{"prefix":"177.152.148.0/23","state":"not-found"},{"prefix":"2804:4c6c:100::/40","state":"not-found"},{"prefix":"2804:4c6c:200::/40","state":"not-found"},{"prefix":"2804:4c6c:300::/48","state":"not-found"},{"prefix":"2804:4c6c:301::/48","state":"not-found"},{"prefix":"2804:4c6c::/32","state":"not-found"}],"irr_missing":["2804:4c6c:100::/40","2804:4c6c:200::/40","2804:4c6c:301::/48","2804:4c6c:300::/48"],"irr_missing_count":4,"bogons":[],"upstreams":[{"asn":271253,"power":616,"name":"LINK BRASIL TELECOMUNICACOES"},{"asn":10429,"power":272,"name":"TELEFÔNICA BRASIL AS10429"},{"asn":1031,"power":33,"name":"PEER-1"},{"asn":24961,"power":2,"name":"WIIT Group"}],"left":4,"right":1},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS52542"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":9,"list":"177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4)","asn":52542}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}],"data":{"query":"AS52542","looked_up":"AS52542","kind":"autnum","source":"https://rdap.lacnic.net/rdap/autnum/52542","terms":"https://www.lacnic.net/innovaportal/file/107/1/terminos-condiciones-whois-en.pdf","summary":{"Name":"ASN52542","Handle":"52542","Range":"AS52542","Country":"BR","Registered":"2013-06-11T13:50:05Z","Last changed":"2013-06-11T13:50:05Z","Abuse contact":"andre@3net.com.br"},"entities":[{"roles":["registrant"],"kind":"org","name":"3Net Serviços & Internet Ltda.","email":null},{"roles":["administrative","abuse"],"kind":"individual","name":"3NET PROVEDOR","email":"andre@3net.com.br"}],"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2013-06-11","status":"allocated","range":"AS52542","opaque_id":"115551","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS52542"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":52542,"name":"3Net Telecomunicações Ltda.ME"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":52542,"net":{"id":14824,"name":"3Net Telecomunicações Ltda.ME","aka":"3Net Telecom","website":"http://www.3net.com.br","looking_glass":"https://bgp.he.net/AS52542","route_server":"","irr_as_set":"","info_type":"Cable/DSL/ISP","info_prefixes4":11,"info_prefixes6":0,"info_traffic":"5-10Gbps","info_ratio":"Heavy Outbound","info_scope":"Regional","info_unicast":true,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":0,"policy_url":"https://registro.br/2/whois?qr=52542","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:34:42Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":0,"poc":[{"role":"NOC","email":"andre@3net.com.br"},{"role":"Public Relations","email":"andre@3net.com.br"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"52542"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"177.152.144.0/21","asn":"52542"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":9,"total":9,"list":"177.152.144.0/21, 177.152.144.0/22, 177.152.148.0/22, 177.152.148.0/23, 2804:4c6c:100::/40 (+4)","asn":52542},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"177.152.144.0/21 AS52542 max-length /21\n177.152.144.0/22 AS52542 max-length /22\n177.152.148.0/22 AS52542 max-length /22\n177.152.148.0/23 AS52542 max-length /23\n2804:4c6c:100::/40 AS52542 max-length /40\n2804:4c6c:200::/40 AS52542 max-length /40\n2804:4c6c:300::/48 AS52542 max-length /48\n2804:4c6c:301::/48 AS52542 max-length /48\n2804:4c6c::/32 AS52542 max-length /32","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":4,"total":9,"list":"2804:4c6c:100::/40, 2804:4c6c:200::/40, 2804:4c6c:301::/48, 2804:4c6c:300::/48","asn":52542},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route6: 2804:4c6c:100::/40\norigin: AS52542\n\nroute6: 2804:4c6c:200::/40\norigin: AS52542\n\nroute6: 2804:4c6c:301::/48\norigin: AS52542","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS52542"}