A closer look at a BGP anomaly in Venezuela

This report examines multiple BGP route leaks in Venezuela involving CANTV (AS8048), highlighting January 2, 2026 events where routes from AS6762 were improperly redistributed to AS52320 and impacted AS21980’s prefixes. The authors assess the anomalies as likely due to misconfigured export/import policies rather than malicious activity, citing heavy AS-path prepending and a history of similar leaks by AS8048. It clarifies that RPKI Route Origin Validation would not mitigate this path-based issue and recommends broader adoption of ASPA, RFC9234, Peerlock, and Peerlock-lite to prevent and detect future route leaks.