DNSSEC Analyzer - hquest.pro.br

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-04-25 18:00:30 UTC, NTP stratum 4

Analyzing DNSSEC problems for hquest.pro.br

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (1139 bytes) ;; HEADER SECTION ;; id = 6323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20180512000000 20180421000000 19036 . e9I0U9vHrWZQN2v3aqxnHdq9BUCO8NG+4kNsaADxOndT9bJpUneAYfDz4EJwJggjPjt6ms3Bh2pG JVOmfnRS5LQWLBKCgi+4p/vXVajWlZmIDvRrDhyYAS9ktrRLqHvXVZhx+udfvXoFuZnWSKVDFMI2 fIL9wniJKCUdQ+nu0a/iEsDBEVmwWw7T428yIQ6+NjvYQ36cf5mbchX58CBM7KfUGnsQLIAP5tnk HM4kdIDbGCr78RCE916blRKETrbqtNi4hHIAscesJfRJsBZ+TlhouyQie/SjGnvRULjADS5lCWKL DBRUIMzOomK4Tekrdrxk1DwcpL68xAHt5D19Iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20180512000000 20180421000000 19036 . e9I0U9vHrWZQN2v3aqxnHdq9BUCO8NG+4kNsaADxOndT9bJpUneAYfDz4EJwJggjPjt6ms3Bh2pG JVOmfnRS5LQWLBKCgi+4p/vXVajWlZmIDvRrDhyYAS9ktrRLqHvXVZhx+udfvXoFuZnWSKVDFMI2 fIL9wniJKCUdQ+nu0a/iEsDBEVmwWw7T428yIQ6+NjvYQ36cf5mbchX58CBM7KfUGnsQLIAP5tnk HM4kdIDbGCr78RCE916blRKETrbqtNi4hHIAscesJfRJsBZ+TlhouyQie/SjGnvRULjADS5lCWKL DBRUIMzOomK4Tekrdrxk1DwcpL68xAHt5D19Iw== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=39570 is now in the chain-of-trust
	Query to g.root-servers.net for hquest.pro.br/A
	Received 657 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (657 bytes) ;; HEADER SECTION ;; id = 20440 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS f.dns.br. br. 172800 IN NS a.dns.br. br. 86400 IN DS ( 45673 5 2 14369ad309cc59fd59c1a422ba93b71f2c522bf3672c2e067b2c53f53ae522df ) br. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . SrA2MSAaY/QysVc9VH5IzgzZu0Stz45aS25WpxASr1LC99B7+4WF30K1kITaaHh69XCe/iQ+EhUn 9QUbc8atUFTQdFGHKXpdlmVdlsko/VYd2YKzu4Rl59sUsDKhF06WIBp5W0Heq9lD+N9+Ux6ap9KL r37G5E/Gh8a/w52mNzQU9hdhryEsd22fKP/P6dHZRGhK4a12UtD9wW65+5tNFO+X064arp1vezr+ NmZndeLYK/E8bXJyKZz1gY3GG1LIesAaGTknX+y5RzDqKgUZhAc23aBkmwdrsKfZ61xomhrpIIby fvOcq/PBF1S4PqsvmHzfBsmB2FtS1jJRWT6EFg== ) ;; ADDITIONAL SECTION (10 records) a.dns.br. 172800 IN A 200.160.0.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12ff::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:1::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for br/DNSKEY
	Received 646 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (646 bytes) ;; HEADER SECTION ;; id = 7663 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 45673 5 2 14369ad309cc59fd59c1a422ba93b71f2c522bf3672c2e067b2c53f53ae522df ) br. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . SrA2MSAaY/QysVc9VH5IzgzZu0Stz45aS25WpxASr1LC99B7+4WF30K1kITaaHh69XCe/iQ+EhUn 9QUbc8atUFTQdFGHKXpdlmVdlsko/VYd2YKzu4Rl59sUsDKhF06WIBp5W0Heq9lD+N9+Ux6ap9KL r37G5E/Gh8a/w52mNzQU9hdhryEsd22fKP/P6dHZRGhK4a12UtD9wW65+5tNFO+X064arp1vezr+ NmZndeLYK/E8bXJyKZz1gY3GG1LIesAaGTknX+y5RzDqKgUZhAc23aBkmwdrsKfZ61xomhrpIIby fvOcq/PBF1S4PqsvmHzfBsmB2FtS1jJRWT6EFg== ) ;; ADDITIONAL SECTION (10 records) a.dns.br. 172800 IN A 200.160.0.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12ff::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:1::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone br

	Checking DS between . and br
	Query to m.root-servers.net for br/DS
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 20999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DS ;; ANSWER SECTION (2 records) br. 86400 IN DS ( 45673 5 2 14369ad309cc59fd59c1a422ba93b71f2c522bf3672c2e067b2c53f53ae522df ) br. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . SrA2MSAaY/QysVc9VH5IzgzZu0Stz45aS25WpxASr1LC99B7+4WF30K1kITaaHh69XCe/iQ+EhUn 9QUbc8atUFTQdFGHKXpdlmVdlsko/VYd2YKzu4Rl59sUsDKhF06WIBp5W0Heq9lD+N9+Ux6ap9KL r37G5E/Gh8a/w52mNzQU9hdhryEsd22fKP/P6dHZRGhK4a12UtD9wW65+5tNFO+X064arp1vezr+ NmZndeLYK/E8bXJyKZz1gY3GG1LIesAaGTknX+y5RzDqKgUZhAc23aBkmwdrsKfZ61xomhrpIIby fvOcq/PBF1S4PqsvmHzfBsmB2FtS1jJRWT6EFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for br in the . zone
	DS=45673/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`br. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . SrA2MSAaY/QysVc9VH5IzgzZu0Stz45aS25WpxASr1LC99B7+4WF30K1kITaaHh69XCe/iQ+EhUn 9QUbc8atUFTQdFGHKXpdlmVdlsko/VYd2YKzu4Rl59sUsDKhF06WIBp5W0Heq9lD+N9+Ux6ap9KL r37G5E/Gh8a/w52mNzQU9hdhryEsd22fKP/P6dHZRGhK4a12UtD9wW65+5tNFO+X064arp1vezr+ NmZndeLYK/E8bXJyKZz1gY3GG1LIesAaGTknX+y5RzDqKgUZhAc23aBkmwdrsKfZ61xomhrpIIby fvOcq/PBF1S4PqsvmHzfBsmB2FtS1jJRWT6EFg== )`
	RRSIG=39570 and DNSKEY=39570 verifies the DS RRset
	DS=45673/SHA-256 is now in the chain-of-trust
	`br. 86400 IN DS ( 45673 5 2 14369ad309cc59fd59c1a422ba93b71f2c522bf3672c2e067b2c53f53ae522df )`
	Query to e.dns.br for br/DNSKEY
	Received 649 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (649 bytes) ;; HEADER SECTION ;; id = 37646 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (3 records) br. 21600 IN DNSKEY ( 257 3 5 AwEAAcI4lmmfVdBv8+FH1l6EZmPokGgih7waDvX+oYjwNJJA+uy827KKDaiXBI3kGidQ3RkaPjYV X1Amkcp6c78n7l9m/PDmpckOJSV7X2/5FmYPa+Rz6hTl3+qQDSlWmCA9M5TZfsArS/OjA5eNoImX Yl/anNEkoePn2OvX66Byx9+f3zroyb8PSAmul5miVUv9ePfDJw7wSXjzg39fd3MTvEXzYPyq8mwW ygh6wh5JfVVczbKmiErtfflproepEvhMZw== ) ; Key ID = 45673 br. 21600 IN DNSKEY ( 256 3 5 AwEAAc5e4zUWfq6cWrRp1pzDmbpEYRPGvpGfO3GM2U/L8MU1nl17RjSLWw2ysJ0Lix/NKsW1Jomr rcpfKkfRNBM6BjXVipbBFz/ur4ENE6PBant/6ANT5lF9YIgBXUXuWVUFAEz+RT47Ux7GbGU9lxjr pM/f0GhQKsEWSmg1UR91GEm7dnuQVmjF7JDijdVnd2mkgTfo5oN4t/LBxdvrXbMd36U= ) ; Key ID = 64998 br. 21600 IN RRSIG ( DNSKEY 5 1 21600 20180511090000 20180420090000 45673 br. YyXtYlAC7TbDWxUN72ttIG1O2k3w2+IoogApeMYuKcY7ueHj9aHgUwYHyfsQZqaVVKD2J8AMETBW 3OcMvUopOFvzVtGsRmNA3lzV68wTwqJ+TwUdG9NCwf8LstUJsv1q5EWjKGt8jhEn19CtTEJkjr0l DNYAB0mCV/7pWIw4NwrKR3E+3hiqBvpKuRfeTU81GUhyIN4GzU/YANwfja+eM24Mo0wYG6Lxsg/N f8TJ6ndFzU7iWuByO33gcjwKfus9 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for br
	`br. 21600 IN DNSKEY ( 257 3 5 AwEAAcI4lmmfVdBv8+FH1l6EZmPokGgih7waDvX+oYjwNJJA+uy827KKDaiXBI3kGidQ3RkaPjYV X1Amkcp6c78n7l9m/PDmpckOJSV7X2/5FmYPa+Rz6hTl3+qQDSlWmCA9M5TZfsArS/OjA5eNoImX Yl/anNEkoePn2OvX66Byx9+f3zroyb8PSAmul5miVUv9ePfDJw7wSXjzg39fd3MTvEXzYPyq8mwW ygh6wh5JfVVczbKmiErtfflproepEvhMZw== ) ; Key ID = 45673`
	`br. 21600 IN DNSKEY ( 256 3 5 AwEAAc5e4zUWfq6cWrRp1pzDmbpEYRPGvpGfO3GM2U/L8MU1nl17RjSLWw2ysJ0Lix/NKsW1Jomr rcpfKkfRNBM6BjXVipbBFz/ur4ENE6PBant/6ANT5lF9YIgBXUXuWVUFAEz+RT47Ux7GbGU9lxjr pM/f0GhQKsEWSmg1UR91GEm7dnuQVmjF7JDijdVnd2mkgTfo5oN4t/LBxdvrXbMd36U= ) ; Key ID = 64998`
	DNSKEY=45673/SEP is now in the chain-of-trust
	DS=45673/SHA-256 verifies DNSKEY=45673/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`br. 21600 IN RRSIG ( DNSKEY 5 1 21600 20180511090000 20180420090000 45673 br. YyXtYlAC7TbDWxUN72ttIG1O2k3w2+IoogApeMYuKcY7ueHj9aHgUwYHyfsQZqaVVKD2J8AMETBW 3OcMvUopOFvzVtGsRmNA3lzV68wTwqJ+TwUdG9NCwf8LstUJsv1q5EWjKGt8jhEn19CtTEJkjr0l DNYAB0mCV/7pWIw4NwrKR3E+3hiqBvpKuRfeTU81GUhyIN4GzU/YANwfja+eM24Mo0wYG6Lxsg/N f8TJ6ndFzU7iWuByO33gcjwKfus9 )`
	RRSIG=45673 and DNSKEY=45673/SEP verifies the DNSKEY RRset
	DNSKEY=64998 is now in the chain-of-trust
	Query to f.dns.br for hquest.pro.br/A
	Received 409 bytes from 200.219.159.10
	;; Answer received from 200.219.159.10 (409 bytes) ;; HEADER SECTION ;; id = 13602 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN DS ( 64050 7 1 060cb6ee7fdc59c8bcc3f35af623fab3ea149143 ) hquest.pro.br. 3600 IN DS ( 64050 7 2 c00e517bd7272c6d603261f2bd466a177916ed5d09b53c789abd459831a41bb3 ) hquest.pro.br. 3600 IN RRSIG ( DS 5 3 3600 20180501100000 20180424100000 35116 pro.br. cR7+XErtQN++nSDlXPxxCkrt7k/H0xB+3TQ8KQQtbNE3nbBy/esFid0DgejItxDn92SlsAErk2lV 2pHYEMmXsXLLuNURXJ+vpY/V/QKGdcnKm2R9U1tsw1Sm7d2xn1eKjcrAbswJAZ5azzsMrDnsg9y0 R3aSX3GTn095jPrJ/TVXTBE2c0e0k6IrxBzBwEKc/ulYupfAvwcK7aFF8+sg0A== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.dns.br for pro.br/DNSKEY
	Received 413 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (413 bytes) ;; HEADER SECTION ;; id = 36389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 5 AwEAAdpyHi0zEAjvpWDK6+k7akiOT3NJtpwAuVYxr46cVwgVj5HmZ+rm9bpKohLJ792BdMi+kl+b KyyQJ1B8xUv1nUDcatI3MKpl6C3B4kBy/r7Z7x49HWeCUDdfsKdM1zuuAA0TSo6QvUguq5BPvjAY 4xlrxyMUVz7sxvyPFrgK54iTIDEknZ6cZa6K7YD0K/fI2FENap9iWAIyY/L02rLUK4U= ) ; Key ID = 35116 pro.br. 21600 IN RRSIG ( DNSKEY 5 2 21600 20180501100000 20180424100000 35116 pro.br. ItFMUbdNY8a92IiCoVOg+N9XMN1X9M/r+MOM4NCXxuDuPpCqdWhaSp3HpOZiwoa/c33RV6ruVQWk hgzRQSYUR5fsCINEbR7xDnYTqN2Dfq3qHW5wpA29PgZOY4p8VpwL+a9ialI637ogbMtpW2eCIVUl FXTbAXKrt6vuODTAhMACG/3JIjcKR+bLINmGQMVvBacX3CvUe3Zx+HS7Z7NtNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pro.br
	Attempting to learn nameservers for pro.br
	Query to f.dns.br for pro.br/NS
	Received 333 bytes from 200.219.159.10
	;; Answer received from 200.219.159.10 (333 bytes) ;; HEADER SECTION ;; id = 36099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN NS ;; ANSWER SECTION (7 records) pro.br. 172800 IN NS b.dns.br. pro.br. 172800 IN NS a.dns.br. pro.br. 172800 IN NS f.dns.br. pro.br. 172800 IN NS d.dns.br. pro.br. 172800 IN NS e.dns.br. pro.br. 172800 IN NS c.dns.br. pro.br. 172800 IN RRSIG ( NS 5 2 172800 20180501100000 20180424100000 35116 pro.br. O9ZfD9IMN7kYkWVV5EQ/VVaXx4hhdtWC6X1v3g9zD/SZjuYZ+z30KdV5EvM0RvWgQCniptCfJ2X+ JvYmP47NNWY1/H3FcIpoKKfkf7geI613MqhoRofy12he7WALSZBalwhp3BEcRW32J5SWCy2nct66 0PYE16z7FRFr2TDy3f6nKrqmTUn0cQGam3bfG/LVoWB/CmU4kY+s4bKOpDwozQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found pro.br nameservers: b.dns.br, a.dns.br, f.dns.br, d.dns.br, e.dns.br, c.dns.br

pro.br

	Checking DS between br and pro.br
	Query to a.dns.br for pro.br/DS
	Received 265 bytes from 200.160.0.10
	;; Answer received from 200.160.0.10 (265 bytes) ;; HEADER SECTION ;; id = 50834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DS ;; ANSWER SECTION (2 records) pro.br. 21600 IN DS 35116 5 1 8769f597e58e71a9e9dd14b79a1b62fa6f490d4b pro.br. 21600 IN RRSIG ( DS 5 2 21600 20180501100000 20180424100000 64998 br. w0VJZ8KDNRNUcXsomGlCFZAx0C/EKjWE33snS43UKuqrTTFHN935SKjb/wiEn7tU8lozsGE6SQk7 TVRSlrItNDDk5H/Q4nc9BUkU9rG+NIxbr3SfBftWpZS7yfpYGTbiwKGbj/4aysoGvzMQ4TycRnVq CmkGwFCKba6xTxYlJOcNrdlUQcH9QH9RabVh/XlmoxFrUuq5hFuLB5eeXGS0Sg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for pro.br in the br zone
	DS=35116/SHA-1 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`pro.br. 21600 IN RRSIG ( DS 5 2 21600 20180501100000 20180424100000 64998 br. w0VJZ8KDNRNUcXsomGlCFZAx0C/EKjWE33snS43UKuqrTTFHN935SKjb/wiEn7tU8lozsGE6SQk7 TVRSlrItNDDk5H/Q4nc9BUkU9rG+NIxbr3SfBftWpZS7yfpYGTbiwKGbj/4aysoGvzMQ4TycRnVq CmkGwFCKba6xTxYlJOcNrdlUQcH9QH9RabVh/XlmoxFrUuq5hFuLB5eeXGS0Sg== )`
	RRSIG=64998 and DNSKEY=64998 verifies the DS RRset
	DS=35116/SHA-1 is now in the chain-of-trust
	`pro.br. 21600 IN DS 35116 5 1 8769f597e58e71a9e9dd14b79a1b62fa6f490d4b`
	Query to a.dns.br for pro.br/DNSKEY
	Received 413 bytes from 200.160.0.10
	;; Answer received from 200.160.0.10 (413 bytes) ;; HEADER SECTION ;; id = 18913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 5 AwEAAdpyHi0zEAjvpWDK6+k7akiOT3NJtpwAuVYxr46cVwgVj5HmZ+rm9bpKohLJ792BdMi+kl+b KyyQJ1B8xUv1nUDcatI3MKpl6C3B4kBy/r7Z7x49HWeCUDdfsKdM1zuuAA0TSo6QvUguq5BPvjAY 4xlrxyMUVz7sxvyPFrgK54iTIDEknZ6cZa6K7YD0K/fI2FENap9iWAIyY/L02rLUK4U= ) ; Key ID = 35116 pro.br. 21600 IN RRSIG ( DNSKEY 5 2 21600 20180501100000 20180424100000 35116 pro.br. ItFMUbdNY8a92IiCoVOg+N9XMN1X9M/r+MOM4NCXxuDuPpCqdWhaSp3HpOZiwoa/c33RV6ruVQWk hgzRQSYUR5fsCINEbR7xDnYTqN2Dfq3qHW5wpA29PgZOY4p8VpwL+a9ialI637ogbMtpW2eCIVUl FXTbAXKrt6vuODTAhMACG/3JIjcKR+bLINmGQMVvBacX3CvUe3Zx+HS7Z7NtNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for pro.br
	`pro.br. 21600 IN DNSKEY ( 257 3 5 AwEAAdpyHi0zEAjvpWDK6+k7akiOT3NJtpwAuVYxr46cVwgVj5HmZ+rm9bpKohLJ792BdMi+kl+b KyyQJ1B8xUv1nUDcatI3MKpl6C3B4kBy/r7Z7x49HWeCUDdfsKdM1zuuAA0TSo6QvUguq5BPvjAY 4xlrxyMUVz7sxvyPFrgK54iTIDEknZ6cZa6K7YD0K/fI2FENap9iWAIyY/L02rLUK4U= ) ; Key ID = 35116`
	DNSKEY=35116/SEP is now in the chain-of-trust
	DS=35116/SHA-1 verifies DNSKEY=35116/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pro.br. 21600 IN RRSIG ( DNSKEY 5 2 21600 20180501100000 20180424100000 35116 pro.br. ItFMUbdNY8a92IiCoVOg+N9XMN1X9M/r+MOM4NCXxuDuPpCqdWhaSp3HpOZiwoa/c33RV6ruVQWk hgzRQSYUR5fsCINEbR7xDnYTqN2Dfq3qHW5wpA29PgZOY4p8VpwL+a9ialI637ogbMtpW2eCIVUl FXTbAXKrt6vuODTAhMACG/3JIjcKR+bLINmGQMVvBacX3CvUe3Zx+HS7Z7NtNA== )`
	RRSIG=35116 and DNSKEY=35116/SEP verifies the DNSKEY RRset
	Query to f.dns.br for hquest.pro.br/A
	Received 409 bytes from 200.219.159.10
	;; Answer received from 200.219.159.10 (409 bytes) ;; HEADER SECTION ;; id = 65504 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN DS ( 64050 7 2 c00e517bd7272c6d603261f2bd466a177916ed5d09b53c789abd459831a41bb3 ) hquest.pro.br. 3600 IN DS ( 64050 7 1 060cb6ee7fdc59c8bcc3f35af623fab3ea149143 ) hquest.pro.br. 3600 IN RRSIG ( DS 5 3 3600 20180501100000 20180424100000 35116 pro.br. cR7+XErtQN++nSDlXPxxCkrt7k/H0xB+3TQ8KQQtbNE3nbBy/esFid0DgejItxDn92SlsAErk2lV 2pHYEMmXsXLLuNURXJ+vpY/V/QKGdcnKm2R9U1tsw1Sm7d2xn1eKjcrAbswJAZ5azzsMrDnsg9y0 R3aSX3GTn095jPrJ/TVXTBE2c0e0k6IrxBzBwEKc/ulYupfAvwcK7aFF8+sg0A== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.br for hquest.pro.br/DNSKEY
	Received 409 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (409 bytes) ;; HEADER SECTION ;; id = 6575 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN DS ( 64050 7 2 c00e517bd7272c6d603261f2bd466a177916ed5d09b53c789abd459831a41bb3 ) hquest.pro.br. 3600 IN DS ( 64050 7 1 060cb6ee7fdc59c8bcc3f35af623fab3ea149143 ) hquest.pro.br. 3600 IN RRSIG ( DS 5 3 3600 20180501100000 20180424100000 35116 pro.br. cR7+XErtQN++nSDlXPxxCkrt7k/H0xB+3TQ8KQQtbNE3nbBy/esFid0DgejItxDn92SlsAErk2lV 2pHYEMmXsXLLuNURXJ+vpY/V/QKGdcnKm2R9U1tsw1Sm7d2xn1eKjcrAbswJAZ5azzsMrDnsg9y0 R3aSX3GTn095jPrJ/TVXTBE2c0e0k6IrxBzBwEKc/ulYupfAvwcK7aFF8+sg0A== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone hquest.pro.br

hquest.pro.br

	Checking DS between pro.br and hquest.pro.br
	Query to d.dns.br for hquest.pro.br/DS
	Received 324 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (324 bytes) ;; HEADER SECTION ;; id = 48620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DS ;; ANSWER SECTION (3 records) hquest.pro.br. 3600 IN DS ( 64050 7 2 c00e517bd7272c6d603261f2bd466a177916ed5d09b53c789abd459831a41bb3 ) hquest.pro.br. 3600 IN DS ( 64050 7 1 060cb6ee7fdc59c8bcc3f35af623fab3ea149143 ) hquest.pro.br. 3600 IN RRSIG ( DS 5 3 3600 20180501100000 20180424100000 35116 pro.br. cR7+XErtQN++nSDlXPxxCkrt7k/H0xB+3TQ8KQQtbNE3nbBy/esFid0DgejItxDn92SlsAErk2lV 2pHYEMmXsXLLuNURXJ+vpY/V/QKGdcnKm2R9U1tsw1Sm7d2xn1eKjcrAbswJAZ5azzsMrDnsg9y0 R3aSX3GTn095jPrJ/TVXTBE2c0e0k6IrxBzBwEKc/ulYupfAvwcK7aFF8+sg0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for hquest.pro.br in the pro.br zone
	DS=64050/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=64050/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`hquest.pro.br. 3600 IN RRSIG ( DS 5 3 3600 20180501100000 20180424100000 35116 pro.br. cR7+XErtQN++nSDlXPxxCkrt7k/H0xB+3TQ8KQQtbNE3nbBy/esFid0DgejItxDn92SlsAErk2lV 2pHYEMmXsXLLuNURXJ+vpY/V/QKGdcnKm2R9U1tsw1Sm7d2xn1eKjcrAbswJAZ5azzsMrDnsg9y0 R3aSX3GTn095jPrJ/TVXTBE2c0e0k6IrxBzBwEKc/ulYupfAvwcK7aFF8+sg0A== )`
	RRSIG=35116 and DNSKEY=35116/SEP verifies the DS RRset
	DS=64050/SHA-256 is now in the chain-of-trust
	`hquest.pro.br. 3600 IN DS ( 64050 7 2 c00e517bd7272c6d603261f2bd466a177916ed5d09b53c789abd459831a41bb3 )`
	`hquest.pro.br. 3600 IN DS ( 64050 7 1 060cb6ee7fdc59c8bcc3f35af623fab3ea149143 )`
	Query to ns.hquest.pro.br for hquest.pro.br/DNSKEY
	Received 1708 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (1708 bytes) ;; HEADER SECTION ;; id = 36943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (4 records) hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAeL15UQifXGZE8ZHHctD3Rz+gwA/E3KVTpcux7J0VtvsrjhZ2RnWWUMjl15R6O3QtBbwrMbY 6+LMEKDweHDhE9e2lMre/LzXbdjQr6JJPmi6UrQAhOOyxaOuqPIrPVQL9V2STLbLqpRCRq3C3NEy P2+5sYtlFJp3YjqvqJGY694eCYhCNL2ITXRyO57CUrI4ayrWrcE/8tSMPvg9AlhUY0is8YFOPJgh AciWm2AV8vdcfrUECbroZ3zZE/lbQcESTxv+GJHqL88SF12QJ4mE8UMXR+Q2Yg4ZxGoJhSvw4XtH vVbdPMFa7KmAbfM2aC5fp1fe158KtM2GYwV5a+EDDY0= ) ; Key ID = 22937 hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAcYfnDyDOwb1JYruMVde9fKNELRzFbQdavW42Xmb1WuIPqcpN3jad+06Pj0dS4b+8OaiaQSA XMbmYqoVrrFMGRzT4BajxY6jDjSHTEVFFrovTytp/tMGQILfVgHzFbbJxmdcWUSoK8I6Wqgdwdb8 5fJbCIPZYwSGiP1amH/U7Pr44WnUrY/mlfuVd1g7fnHyi9y5ecM0TZFENdjT9kGDw1MZVWLY9JCb F92gY5ROR0BL15aG4t03/gFiOBChyqvLIxykbOCwC+qehaB8u4DmOBMjM9W3C3JO1kdDXQt9TpRv uerg0lD0Tdk0I6Pgyc9wzEZz5v9MCiVo5+NnsaSVJTSIHDFASp9neuOmevg0Z83vT+K/aZ/sJ9NV ZRzAnd9mXsFwuzO7rdhNi9T8gtZ836OHQRG2jsSVuniHOtiGFgI6T12qXUtoA6kQC7E87CMNLqNf AdcItXrLfHiZuNpMHHtOhrMJPxZlkhOtrZuZ9OTqdL9lL1FCtG7q+ZW8vqWHqL4LPMw9b09/S3ZZ +9MnM0b7snSxF70c37Oj5+6Uy7+D13Fkuydnq4v8oxIkrJHVnWwgn1cvx4xllXVebzaxcMAt+Vj7 1tNNxbFWi6GvJmmpzncI2+osAj+YIIG3qEGRAHvQV4mXt2mTM1kCdGrt5bEaJXzbLLUn+WuHUfVL 1qpV ) ; Key ID = 64050 hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20180506201232 20180406201232 22937 hquest.pro.br. OxrUt0qORLLyJ/Xo8rVJUG4eTFjAT9Oa1fl4PbTyb2n8G+YKMZIRTUnSkcwe4wFYPSckZt/rtGC1 3LPjRJe+Bp7EtWhop4Ts0aIHVCYGtTeUbuAFXl4loqTy7feP0pXu6Zdzk4m7YftoNKK/qEl3jwLV shyi2quUIIaTZ48jF2UmsZZPAgwLOorilhmwQlRJ3pwXyAj28sQs+/Sv3v8BdVxDYNEbsmWJhppz xoh6ESryyWDa6Hge83efDoetY8KTKDeW/Q4gPrGK8od7Xnld2bwne48mw0CUj26C1mBv3vBMKcdS uKIybGUNbqHTFISKmzwV4VXti2b0X9Hqij9fGQ== ) hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20180506201232 20180406201232 64050 hquest.pro.br. BbKKwarUn82NjS6ldYNvEj8nzg2l8ELwsTf/DLrUwWpvwryDrahcIrpHdvhM/Qv+IlCayQGJ5HUI me4HSV5JqeJUeI/hOs9PRCzWPPZOMWlxxntgfGYTvWFfKM9ykhuwrGYqaysu1M33uLyEAYpTMigu YzYaBVb5FmrQo6xvhC0q4q/YE5+w+SoMQQZw3J7v4pC0JOElCJ/+JjtG+cEQPFFX454e952KO6eg 1By+h1b3IFTjHs4KGYWj1XHdqBDem4qryVTqSSDppFUVxzyBxePcBSGyMN5jcijyyvC8ox6pwiZU 4OAJjyPaVOd4WmY0FczuAmVxpMEm2vBw5yyI6Ima3iGoAxfkwNABuRwL2DZRWbm3drwMzdW0S6WD u1xuwuUxVvlMuT3Y3nGAjCSija2UjGji5HxKiOWjZUBdah8psyTqMithRnYNAYugiqfjprtBkDmu tpsID0hEOicrWquODHdxpRjKZgL2W6kK8pgpZI41kZgzBWzsiAJXT6suoHvRcSiKv+rHQ03PYius cGJWYNmMjUltgiAx1RSYnwVirnzkfyONiI5VSwbGrQ00AyyWsZyn7z0l6eza7fnjyVZ6Vpz4kPpQ X44JC8DeaxeFs8ZDcWonSrcIoahkeJR1jDgKtSFLpHGp8jjJ4DniINvIy1aKWkPIB9EJvmntU68= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for hquest.pro.br
	`hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAeL15UQifXGZE8ZHHctD3Rz+gwA/E3KVTpcux7J0VtvsrjhZ2RnWWUMjl15R6O3QtBbwrMbY 6+LMEKDweHDhE9e2lMre/LzXbdjQr6JJPmi6UrQAhOOyxaOuqPIrPVQL9V2STLbLqpRCRq3C3NEy P2+5sYtlFJp3YjqvqJGY694eCYhCNL2ITXRyO57CUrI4ayrWrcE/8tSMPvg9AlhUY0is8YFOPJgh AciWm2AV8vdcfrUECbroZ3zZE/lbQcESTxv+GJHqL88SF12QJ4mE8UMXR+Q2Yg4ZxGoJhSvw4XtH vVbdPMFa7KmAbfM2aC5fp1fe158KtM2GYwV5a+EDDY0= ) ; Key ID = 22937`
	hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAcYfnDyDOwb1JYruMVde9fKNELRzFbQdavW42Xmb1WuIPqcpN3jad+06Pj0dS4b+8OaiaQSA XMbmYqoVrrFMGRzT4BajxY6jDjSHTEVFFrovTytp/tMGQILfVgHzFbbJxmdcWUSoK8I6Wqgdwdb8 5fJbCIPZYwSGiP1amH/U7Pr44WnUrY/mlfuVd1g7fnHyi9y5ecM0TZFENdjT9kGDw1MZVWLY9JCb F92gY5ROR0BL15aG4t03/gFiOBChyqvLIxykbOCwC+qehaB8u4DmOBMjM9W3C3JO1kdDXQt9TpRv uerg0lD0Tdk0I6Pgyc9wzEZz5v9MCiVo5+NnsaSVJTSIHDFASp9neuOmevg0Z83vT+K/aZ/sJ9NV ZRzAnd9mXsFwuzO7rdhNi9T8gtZ836OHQRG2jsSVuniHOtiGFgI6T12qXUtoA6kQC7E87CMNLqNf AdcItXrLfHiZuNpMHHtOhrMJPxZlkhOtrZuZ9OTqdL9lL1FCtG7q+ZW8vqWHqL4LPMw9b09/S3ZZ +9MnM0b7snSxF70c37Oj5+6Uy7+D13Fkuydnq4v8oxIkrJHVnWwgn1cvx4xllXVebzaxcMAt+Vj7 1tNNxbFWi6GvJmmpzncI2+osAj+YIIG3qEGRAHvQV4mXt2mTM1kCdGrt5bEaJXzbLLUn+WuHUfVL 1qpV ) ; Key ID = 64050
	DNSKEY=64050/SEP is now in the chain-of-trust
	DS=64050/SHA-256 verifies DNSKEY=64050/SEP
	DS=64050/SHA-1 verifies DNSKEY=64050/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20180506201232 20180406201232 22937 hquest.pro.br. OxrUt0qORLLyJ/Xo8rVJUG4eTFjAT9Oa1fl4PbTyb2n8G+YKMZIRTUnSkcwe4wFYPSckZt/rtGC1 3LPjRJe+Bp7EtWhop4Ts0aIHVCYGtTeUbuAFXl4loqTy7feP0pXu6Zdzk4m7YftoNKK/qEl3jwLV shyi2quUIIaTZ48jF2UmsZZPAgwLOorilhmwQlRJ3pwXyAj28sQs+/Sv3v8BdVxDYNEbsmWJhppz xoh6ESryyWDa6Hge83efDoetY8KTKDeW/Q4gPrGK8od7Xnld2bwne48mw0CUj26C1mBv3vBMKcdS uKIybGUNbqHTFISKmzwV4VXti2b0X9Hqij9fGQ== )`
	hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20180506201232 20180406201232 64050 hquest.pro.br. BbKKwarUn82NjS6ldYNvEj8nzg2l8ELwsTf/DLrUwWpvwryDrahcIrpHdvhM/Qv+IlCayQGJ5HUI me4HSV5JqeJUeI/hOs9PRCzWPPZOMWlxxntgfGYTvWFfKM9ykhuwrGYqaysu1M33uLyEAYpTMigu YzYaBVb5FmrQo6xvhC0q4q/YE5+w+SoMQQZw3J7v4pC0JOElCJ/+JjtG+cEQPFFX454e952KO6eg 1By+h1b3IFTjHs4KGYWj1XHdqBDem4qryVTqSSDppFUVxzyBxePcBSGyMN5jcijyyvC8ox6pwiZU 4OAJjyPaVOd4WmY0FczuAmVxpMEm2vBw5yyI6Ima3iGoAxfkwNABuRwL2DZRWbm3drwMzdW0S6WD u1xuwuUxVvlMuT3Y3nGAjCSija2UjGji5HxKiOWjZUBdah8psyTqMithRnYNAYugiqfjprtBkDmu tpsID0hEOicrWquODHdxpRjKZgL2W6kK8pgpZI41kZgzBWzsiAJXT6suoHvRcSiKv+rHQ03PYius cGJWYNmMjUltgiAx1RSYnwVirnzkfyONiI5VSwbGrQ00AyyWsZyn7z0l6eza7fnjyVZ6Vpz4kPpQ X44JC8DeaxeFs8ZDcWonSrcIoahkeJR1jDgKtSFLpHGp8jjJ4DniINvIy1aKWkPIB9EJvmntU68= )
	RRSIG=22937 and DNSKEY=22937 verifies the DNSKEY RRset
	RRSIG=64050 and DNSKEY=64050/SEP verifies the DNSKEY RRset
	DNSKEY=22937 is now in the chain-of-trust
	Query to ns.hquest.pro.br for hquest.pro.br/A
	Received 359 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (359 bytes) ;; HEADER SECTION ;; id = 20415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN A 74.103.45.250 hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20180506201232 20180406201232 22937 hquest.pro.br. maAheuQtMA+eKV8AMlQ0J8OFAUnblPbxG93tjP5sBZDcNL/E4trlyy9zpuqgczwZRr0PlC9NtvJI sC2S8+P1yc0M+nJV2dkjVPlc6S6dO9IraTmDCicKsK5NzwElDwyFQKmfIPBdpJPs+XV4wCXFfvn6 T+a4xs7283/rtfdmUD4RTW84Hbg2glwiAtsRGY7rb2HVzDwueMVBGpUbHj6fXZcABqeT+rY9LyE8 lXRSsDYN3tHltSTKmjGf6haBu2mcKgy8Q5T9DaafK9TPFZ75K7Zyq8To/BHOtY4EGado3ZtJPumY FxCGRBdaP2IhpEeIxgUbs5685taaetK7z2luFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	hquest.pro.br is authoritative for hquest.pro.br
	Found RRSIG signed by hquest.pro.br zone
	Query to ns1.he.net for hquest.pro.br/SOA
	Received 389 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (389 bytes) ;; HEADER SECTION ;; id = 17555 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 86400 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2018040602 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) hquest.pro.br. 86400 IN RRSIG ( SOA 7 3 86400 20180506201232 20180406201232 22937 hquest.pro.br. TV64R63laMcYL/4ebTYHTGJaFeWLRDNre9ZFyg6kJ460Q+P2FOrbhyT/r8z+eQ+LZimg/ye5ohns ZZISgZ+6XmyFGkUwGgF21V7VUAXHRSELA8unlcDCO53l74Fdqj6ude9uUcBgs+d5R0Xxq9KbUy47 4QhtFwiSU2Z1z5fXeZqXJJN6efEbOHNuRx1LJ86OPb1VjQDhM84Bpn4eI9eum/GDJg964thFxz+y ljUba5ndS5TFhH5FDLqiO/27waBL1Tn45fXgIF0Yd2JHJ/jyipvvkxMA3oSLiZSLjYVv/bxNLVvV 56/0RTKxqiD2+85fudb1f99YTgziIa69Ffxf9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns.hquest.pro.br for hquest.pro.br/SOA
	Received 389 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (389 bytes) ;; HEADER SECTION ;; id = 55809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 86400 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2018040602 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) hquest.pro.br. 86400 IN RRSIG ( SOA 7 3 86400 20180506201232 20180406201232 22937 hquest.pro.br. TV64R63laMcYL/4ebTYHTGJaFeWLRDNre9ZFyg6kJ460Q+P2FOrbhyT/r8z+eQ+LZimg/ye5ohns ZZISgZ+6XmyFGkUwGgF21V7VUAXHRSELA8unlcDCO53l74Fdqj6ude9uUcBgs+d5R0Xxq9KbUy47 4QhtFwiSU2Z1z5fXeZqXJJN6efEbOHNuRx1LJ86OPb1VjQDhM84Bpn4eI9eum/GDJg964thFxz+y ljUba5ndS5TFhH5FDLqiO/27waBL1Tn45fXgIF0Yd2JHJ/jyipvvkxMA3oSLiZSLjYVv/bxNLVvV 56/0RTKxqiD2+85fudb1f99YTgziIa69Ffxf9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.hquest.pro.br for hquest.pro.br/A
	Received 359 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (359 bytes) ;; HEADER SECTION ;; id = 20616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN A 74.103.45.250 hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20180506201232 20180406201232 22937 hquest.pro.br. maAheuQtMA+eKV8AMlQ0J8OFAUnblPbxG93tjP5sBZDcNL/E4trlyy9zpuqgczwZRr0PlC9NtvJI sC2S8+P1yc0M+nJV2dkjVPlc6S6dO9IraTmDCicKsK5NzwElDwyFQKmfIPBdpJPs+XV4wCXFfvn6 T+a4xs7283/rtfdmUD4RTW84Hbg2glwiAtsRGY7rb2HVzDwueMVBGpUbHj6fXZcABqeT+rY9LyE8 lXRSsDYN3tHltSTKmjGf6haBu2mcKgy8Q5T9DaafK9TPFZ75K7Zyq8To/BHOtY4EGado3ZtJPumY FxCGRBdaP2IhpEeIxgUbs5685taaetK7z2luFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	hquest.pro.br A RR has value 74.103.45.250
	Found 1 RRSIGs over A RRset
	`hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20180506201232 20180406201232 22937 hquest.pro.br. maAheuQtMA+eKV8AMlQ0J8OFAUnblPbxG93tjP5sBZDcNL/E4trlyy9zpuqgczwZRr0PlC9NtvJI sC2S8+P1yc0M+nJV2dkjVPlc6S6dO9IraTmDCicKsK5NzwElDwyFQKmfIPBdpJPs+XV4wCXFfvn6 T+a4xs7283/rtfdmUD4RTW84Hbg2glwiAtsRGY7rb2HVzDwueMVBGpUbHj6fXZcABqeT+rY9LyE8 lXRSsDYN3tHltSTKmjGf6haBu2mcKgy8Q5T9DaafK9TPFZ75K7Zyq8To/BHOtY4EGado3ZtJPumY FxCGRBdaP2IhpEeIxgUbs5685taaetK7z2luFw== )`
	RRSIG=22937 and DNSKEY=22937 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hquest.pro.br at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: