{"tool":"network-report","status":"warn","input":{"query":"AS52565"},"findings":[{"level":"warn","text":"AS52565 (AS52565) announces 38 IPv4 and 6 IPv6 prefixes.","title":"AS52565 (AS52565) announces 38 IPv4 and 6 IPv6 prefixes.","params":{"query":"AS52565","who":"AS52565 (AS52565)","v4":38,"v6":6}},{"level":"warn","text":"10 of 44 announced prefixes have no ROA (RPKI not found): 170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5).","title":"10 of 44 announced prefixes have no ROA (RPKI not found): 170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5).","params":{"count":10,"total":44,"list":"170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5)","asn":52565},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS52565 and a max length equal to the prefix length:","record":"170.150.248.0/22 AS52565 max-length /22\n170.150.248.0/23 AS52565 max-length /23\n170.150.248.0/24 AS52565 max-length /24\n170.150.249.0/24 AS52565 max-length /24\n170.150.250.0/23 AS52565 max-length /23\n170.150.250.0/24 AS52565 max-length /24\n170.150.251.0/24 AS52565 max-length /24\n179.191.16.0/20 AS52565 max-length /20\n179.191.16.0/21 AS52565 max-length /21\n179.191.16.0/22 AS52565 max-length /22"},{"level":"warn","text":"34 of 44 announced prefixes have no IRR route object: 170.150.251.0/24, 179.191.20.0/22, 179.191.18.0/24, 179.191.18.0/23, 179.191.22.0/23 (+29).","title":"34 of 44 announced prefixes have no IRR route object: 170.150.251.0/24, 179.191.20.0/22, 179.191.18.0/24, 179.191.18.0/23, 179.191.22.0/23 (+29).","params":{"count":34,"total":44,"list":"170.150.251.0/24, 179.191.20.0/22, 179.191.18.0/24, 179.191.18.0/23, 179.191.22.0/23 (+29)","asn":52565},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS52565 in your RIR’s IRR database (or RADB).","record":"route: 170.150.251.0/24\norigin: AS52565\n\nroute: 179.191.20.0/22\norigin: AS52565\n\nroute: 179.191.18.0/24\norigin: AS52565"},{"level":"warn","text":"No IRR as-set is listed.","title":"No IRR as-set is listed.","params":{},"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."}],"data":{"query":"AS52565","kind":"asn","special":null,"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2013-02-14","status":"allocated","range":"AS52565","opaque_id":"142023","special":null},"verdict":{"level":"warn","title":":who announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"query":"AS52565","who":"AS52565 (AS52565)","v4":38,"v6":6}},"seconds":0,"sections":{"routing":{"status":"warn","findings":[{"level":"pass","title":"AS:asn announces :v4 IPv4 and :v6 IPv6 prefixes.","params":{"asn":52565,"v4":38,"v6":6}},{"tool":["rpki",{"prefix":"170.150.248.0/22","asn":"52565"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":44,"list":"170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5)","asn":52565},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"170.150.248.0/22 AS52565 max-length /22\n170.150.248.0/23 AS52565 max-length /23\n170.150.248.0/24 AS52565 max-length /24\n170.150.249.0/24 AS52565 max-length /24\n170.150.250.0/23 AS52565 max-length /23\n170.150.250.0/24 AS52565 max-length /24\n170.150.251.0/24 AS52565 max-length /24\n179.191.16.0/20 AS52565 max-length /20\n179.191.16.0/21 AS52565 max-length /21\n179.191.16.0/22 AS52565 max-length /22"},{"level":"info","title":"The RPKI state of :count prefixes was not looked up (no ROA of AS:asn covers them; only the first :n are checked).","params":{"count":34,"asn":52565,"n":10}},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":34,"total":44,"list":"170.150.251.0/24, 179.191.20.0/22, 179.191.18.0/24, 179.191.18.0/23, 179.191.22.0/23 (+29)","asn":52565},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 170.150.251.0/24\norigin: AS52565\n\nroute: 179.191.20.0/22\norigin: AS52565\n\nroute: 179.191.18.0/24\norigin: AS52565"},{"level":"info","title":":left upstreams and peers, :right downstream networks seen.","params":{"left":7,"right":0}}],"data":{"asn":52565,"holder":"AS52565 - EDGAR RODRIGUES ROMAO FILHO ME","announced":true,"v4":38,"v6":6,"prefixes":["170.150.248.0/22","170.150.248.0/23","170.150.248.0/24","170.150.249.0/24","170.150.250.0/23","170.150.250.0/24","170.150.251.0/24","179.191.16.0/20","179.191.16.0/21","179.191.16.0/22","179.191.16.0/23","179.191.16.0/24","179.191.17.0/24","179.191.18.0/23","179.191.18.0/24","179.191.19.0/24","179.191.20.0/22","179.191.20.0/23","179.191.20.0/24","179.191.21.0/24","179.191.22.0/23","179.191.22.0/24","179.191.23.0/24","179.191.24.0/21","179.191.24.0/22","179.191.24.0/23","179.191.24.0/24","179.191.25.0/24","179.191.26.0/23","179.191.26.0/24","179.191.27.0/24","179.191.28.0/22","179.191.28.0/23","179.191.28.0/24","179.191.29.0/24","179.191.30.0/23","179.191.30.0/24","179.191.31.0/24","2804:cdc:2000::/42","2804:cdc:8000::/33","2804:cdc:8000::/34","2804:cdc:9000::/42","2804:cdc::/32","2804:cdc::/33"],"rpki":{"not-found":10,"unchecked":34,"valid":0,"invalid":0},"rpki_problems":[{"prefix":"170.150.248.0/22","state":"not-found"},{"prefix":"170.150.248.0/23","state":"not-found"},{"prefix":"170.150.248.0/24","state":"not-found"},{"prefix":"170.150.249.0/24","state":"not-found"},{"prefix":"170.150.250.0/23","state":"not-found"},{"prefix":"170.150.250.0/24","state":"not-found"},{"prefix":"170.150.251.0/24","state":"not-found"},{"prefix":"179.191.16.0/20","state":"not-found"},{"prefix":"179.191.16.0/21","state":"not-found"},{"prefix":"179.191.16.0/22","state":"not-found"}],"irr_missing":["170.150.251.0/24","179.191.20.0/22","179.191.18.0/24","179.191.18.0/23","179.191.22.0/23","179.191.26.0/24","170.150.249.0/24","179.191.26.0/23","170.150.250.0/24","179.191.24.0/24","179.191.29.0/24","179.191.28.0/24","179.191.22.0/24","170.150.250.0/23","179.191.30.0/23","179.191.25.0/24","170.150.248.0/23","179.191.24.0/21","179.191.28.0/22","179.191.21.0/24","2804:cdc:9000::/42","179.191.31.0/24","179.191.30.0/24","179.191.28.0/23","179.191.20.0/24","179.191.16.0/21","2804:cdc:8000::/34","179.191.23.0/24","179.191.27.0/24","179.191.19.0/24"],"irr_missing_count":34,"bogons":[],"upstreams":[{"asn":52965,"power":627,"name":"1 Telecom Servicos de Internet"},{"asn":6939,"power":124,"name":"Hurricane Electric"},{"asn":35280,"power":6,"name":"F5 Inc."},{"asn":137409,"power":5,"name":"Global Secure Layer"},{"asn":6057,"power":2,"name":"ANTEL"},{"asn":39120,"power":1,"name":"Convergenze S.p.A.SB"},{"asn":61626,"power":1,"name":"Anel de Conectividade - Infovia Paraná"}],"left":7,"right":0},"title":"Routing and RPKI","tool":"bgp","tool_input":{"query":"AS52565"},"summary":{"level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":44,"list":"170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5)","asn":52565}}},"registration":{"status":"pass","findings":[{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}],"data":{"query":"AS52565","looked_up":"AS52565","kind":"autnum","source":"https://rdap.lacnic.net/rdap/autnum/52565","terms":"https://www.lacnic.net/innovaportal/file/107/1/terminos-condiciones-whois-en.pdf","summary":{"Name":"ASN52565","Handle":"52565","Range":"AS52565","Country":"BR","Registered":"2013-02-14T16:17:10Z","Last changed":"2013-03-06T14:00:52Z","Abuse contact":"eromao@itafiber.com.br"},"entities":[{"roles":["registrant"],"kind":"org","name":"EDGAR RODRIGUES ROMAO FILHO ME","email":null},{"roles":["administrative","abuse"],"kind":"individual","name":"EDGAR RODRIGUES ROMAO FILHO ME","email":"eromao@itafiber.com.br"}],"allocation":{"rir":"lacnic","registry":"LACNIC","cc":"BR","country":"Brazil","date":"2013-02-14","status":"allocated","range":"AS52565","opaque_id":"142023","special":null}},"title":"Registration","tool":"whois","tool_input":{"query":"AS52565"},"summary":{"level":"pass","title":"Found at :server.","params":{"server":"rdap.lacnic.net"}}},"peering":{"status":"warn","findings":[{"level":"pass","title":"AS:asn is in PeeringDB as :name.","params":{"asn":52565,"name":"EDGAR RODRIGUES ROMAO FILHO"}},{"level":"info","title":"Peering policy: :policy.","params":{"policy":"Open"},"detail":"Peers with anyone at a shared location, usually without a contract."},{"level":"info","title":"No internet exchange ports are listed.","params":[]},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record."},{"level":"info","title":"The record was last updated :date.","params":{"date":"2022-07-27"},"detail":"Peers rely on it for max-prefix limits and contacts; check it is still right."}],"data":{"asn":52565,"net":{"id":16905,"name":"EDGAR RODRIGUES ROMAO FILHO","aka":"","website":"http://www.itambenet.com.br","looking_glass":"","route_server":"","irr_as_set":"","info_type":"","info_prefixes4":0,"info_prefixes6":0,"info_traffic":"","info_ratio":"Not Disclosed","info_scope":"Not Disclosed","info_unicast":false,"info_ipv6":false,"info_never_via_route_servers":false,"ix_count":0,"fac_count":0,"policy_url":"","policy_general":"Open","policy_locations":"Not Required","policy_ratio":false,"policy_contracts":"Not Required","updated":"2022-07-27T05:34:42Z"},"ix_count":0,"capacity":0,"ix":[],"ix_total":0,"fac":[],"fac_total":0,"poc":[{"role":"NOC","email":"eromao@itambenet.com.br"},{"role":"NOC","email":"danilo@itambenet.com.br"}],"missing":[]},"title":"PeeringDB","tool":"peeringdb","tool_input":{"asn":"52565"},"summary":{"level":"warn","title":"No IRR as-set is listed.","params":[]}}},"fixes":[{"tool":["rpki",{"prefix":"170.150.248.0/22","asn":"52565"}],"guide":"create-rpki-roas","level":"warn","title":":count of :total announced prefixes have no ROA (RPKI not found): :list.","params":{"count":10,"total":44,"list":"170.150.248.0/22, 170.150.248.0/23, 170.150.248.0/24, 170.150.249.0/24, 170.150.250.0/23 (+5)","asn":52565},"detail":"Without a ROA, networks cannot tell your routes from a hijack.","fix":"Create a ROA for each at your RIR portal, with origin AS:asn and a max length equal to the prefix length:","record":"170.150.248.0/22 AS52565 max-length /22\n170.150.248.0/23 AS52565 max-length /23\n170.150.248.0/24 AS52565 max-length /24\n170.150.249.0/24 AS52565 max-length /24\n170.150.250.0/23 AS52565 max-length /23\n170.150.250.0/24 AS52565 max-length /24\n170.150.251.0/24 AS52565 max-length /24\n179.191.16.0/20 AS52565 max-length /20\n179.191.16.0/21 AS52565 max-length /21\n179.191.16.0/22 AS52565 max-length /22","section":"routing"},{"level":"warn","title":":count of :total announced prefixes have no IRR route object: :list.","params":{"count":34,"total":44,"list":"170.150.251.0/24, 179.191.20.0/22, 179.191.18.0/24, 179.191.18.0/23, 179.191.22.0/23 (+29)","asn":52565},"detail":"Many networks build their prefix filters from IRR data; without route objects some of them drop the routes.","fix":"Create route (IPv4) and route6 (IPv6) objects with origin AS:asn in your RIR’s IRR database (or RADB).","record":"route: 170.150.251.0/24\norigin: AS52565\n\nroute: 179.191.20.0/22\norigin: AS52565\n\nroute: 179.191.18.0/24\norigin: AS52565","section":"routing"},{"level":"warn","title":"No IRR as-set is listed.","params":[],"detail":"Peers and route servers build prefix filters from the as-set. Without one they fall back to the AS number alone, which breaks as soon as you have customers.","fix":"Create an as-set in your RIR’s IRR database and add it to your PeeringDB record.","section":"peering"}]},"url":"https://thenetworkery.com/tools/network-report?query=AS52565"}