DNSSEC Analyzer - hquest.pro.br

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-11-21 12:16:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for hquest.pro.br

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (1139 bytes) ;; HEADER SECTION ;; id = 1451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181211000000 20181120000000 20326 . g6/g5cc7sOwpJz8Yk0vWCPhBDeg3CZpygK2n5i/Ut8VcyXcUTlwy/aLQ3GZkg+u9ilpdVirnqALP LcI0q8/UqeQXWcMSXAVp4xbxd9i/dlhbIuZY4H/XjnCPNSw0+ggHdDMLp+2QkEgzPlCpWC9qH64i YijmvLwl0oc8haNlB9Vse13EC1bmU25LmyBJj480/DCMIiXBowxgWSLzW5TtQYf09NBvy1h5MJIf BbEO9JMflGTJByzsN7O5fsSggcfcPXRUrNdBkutO+bNptVA7CY7fcU0wSmUwxyn0Drwp4UdPrSAL zfN+C2XM5hTCPy7UGJceWlQJcdFQQB50jPOZfA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181211000000 20181120000000 20326 . g6/g5cc7sOwpJz8Yk0vWCPhBDeg3CZpygK2n5i/Ut8VcyXcUTlwy/aLQ3GZkg+u9ilpdVirnqALP LcI0q8/UqeQXWcMSXAVp4xbxd9i/dlhbIuZY4H/XjnCPNSw0+ggHdDMLp+2QkEgzPlCpWC9qH64i YijmvLwl0oc8haNlB9Vse13EC1bmU25LmyBJj480/DCMIiXBowxgWSLzW5TtQYf09NBvy1h5MJIf BbEO9JMflGTJByzsN7O5fsSggcfcPXRUrNdBkutO+bNptVA7CY7fcU0wSmUwxyn0Drwp4UdPrSAL zfN+C2XM5hTCPy7UGJceWlQJcdFQQB50jPOZfA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to m.root-servers.net for hquest.pro.br/A
	Received 685 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (685 bytes) ;; HEADER SECTION ;; id = 54794 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS c.dns.br. br. 172800 IN NS a.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS f.dns.br. br. 172800 IN NS b.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20181204050000 20181121040000 2134 . LmSQJWhQxjwqw1oHYx14JJ/gN+8jQ4OiRIcQYBemBPLQ9Eb/CGneQTUbBFsYIMVx36IDmUMm0HrK B8QH40YVQjiYNsd/QYByZKFvl/S9vIlPRPtT3NSzXjj8iInluGmNTS0xf7gAIXQS0mDYwQO92Scf 8MFxhB+GnCikCWgF2WqRX0qLxXPMUoAjUwRpQ9XurWY3GTEd+ScpHnuIUviukFcZY7aYODPiE2H1 WW7S4qfiQNdKSZdzZgOSqmUGRzYpPvz8nOGi/xbdk1SP9iGq8rXjbfc/A+seKxTQxWgDVtamYrWC cP2lR0p4TdphR6p6H3Wu7t8xeGvbbgipHFNJsQ== ) ;; ADDITIONAL SECTION (11 records) a.dns.br. 172800 IN A 200.160.0.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12ff::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:1::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for br/DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for br/DNSKEY: 'IPv6 transport disabled'
	Received 674 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (674 bytes) ;; HEADER SECTION ;; id = 734 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20181204050000 20181121040000 2134 . LmSQJWhQxjwqw1oHYx14JJ/gN+8jQ4OiRIcQYBemBPLQ9Eb/CGneQTUbBFsYIMVx36IDmUMm0HrK B8QH40YVQjiYNsd/QYByZKFvl/S9vIlPRPtT3NSzXjj8iInluGmNTS0xf7gAIXQS0mDYwQO92Scf 8MFxhB+GnCikCWgF2WqRX0qLxXPMUoAjUwRpQ9XurWY3GTEd+ScpHnuIUviukFcZY7aYODPiE2H1 WW7S4qfiQNdKSZdzZgOSqmUGRzYpPvz8nOGi/xbdk1SP9iGq8rXjbfc/A+seKxTQxWgDVtamYrWC cP2lR0p4TdphR6p6H3Wu7t8xeGvbbgipHFNJsQ== ) ;; ADDITIONAL SECTION (11 records) a.dns.br. 172800 IN A 200.160.0.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12ff::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:1::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone br

	Checking DS between . and br
	Query to m.root-servers.net for br/DS
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 24707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DS ;; ANSWER SECTION (2 records) br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20181204050000 20181121040000 2134 . LmSQJWhQxjwqw1oHYx14JJ/gN+8jQ4OiRIcQYBemBPLQ9Eb/CGneQTUbBFsYIMVx36IDmUMm0HrK B8QH40YVQjiYNsd/QYByZKFvl/S9vIlPRPtT3NSzXjj8iInluGmNTS0xf7gAIXQS0mDYwQO92Scf 8MFxhB+GnCikCWgF2WqRX0qLxXPMUoAjUwRpQ9XurWY3GTEd+ScpHnuIUviukFcZY7aYODPiE2H1 WW7S4qfiQNdKSZdzZgOSqmUGRzYpPvz8nOGi/xbdk1SP9iGq8rXjbfc/A+seKxTQxWgDVtamYrWC cP2lR0p4TdphR6p6H3Wu7t8xeGvbbgipHFNJsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for br in the . zone
	DS=2471/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`br. 86400 IN RRSIG ( DS 8 1 86400 20181204050000 20181121040000 2134 . LmSQJWhQxjwqw1oHYx14JJ/gN+8jQ4OiRIcQYBemBPLQ9Eb/CGneQTUbBFsYIMVx36IDmUMm0HrK B8QH40YVQjiYNsd/QYByZKFvl/S9vIlPRPtT3NSzXjj8iInluGmNTS0xf7gAIXQS0mDYwQO92Scf 8MFxhB+GnCikCWgF2WqRX0qLxXPMUoAjUwRpQ9XurWY3GTEd+ScpHnuIUviukFcZY7aYODPiE2H1 WW7S4qfiQNdKSZdzZgOSqmUGRzYpPvz8nOGi/xbdk1SP9iGq8rXjbfc/A+seKxTQxWgDVtamYrWC cP2lR0p4TdphR6p6H3Wu7t8xeGvbbgipHFNJsQ== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=2471/SHA-256 is now in the chain-of-trust
	`br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 )`
	Query to b.dns.br for br/DNSKEY
	Received 289 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (289 bytes) ;; HEADER SECTION ;; id = 17185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (3 records) br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471 br. 21600 IN DNSKEY ( 256 3 13 SjljzbdHpsslxYiXjokx3+n9TFawXICX1xNSdprCmlMPP5wD7PZvvRLDMODcSzFyyaqJWPNqk7qk g4IFIplKDQ== ) ; Key ID = 2950 br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20181209120000 20181118120000 2471 br. a1EIOvtow/ZOPP921dIAlv9nUolBvrTfNiILGv+NybKRN0YseHBSAPweXprr954bwSTufglbnPeG 1ifR9OmgDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for br
	`br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471`
	`br. 21600 IN DNSKEY ( 256 3 13 SjljzbdHpsslxYiXjokx3+n9TFawXICX1xNSdprCmlMPP5wD7PZvvRLDMODcSzFyyaqJWPNqk7qk g4IFIplKDQ== ) ; Key ID = 2950`
	DNSKEY=2471/SEP is now in the chain-of-trust
	DS=2471/SHA-256 verifies DNSKEY=2471/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20181209120000 20181118120000 2471 br. a1EIOvtow/ZOPP921dIAlv9nUolBvrTfNiILGv+NybKRN0YseHBSAPweXprr954bwSTufglbnPeG 1ifR9OmgDg== )`
	RRSIG=2471 and DNSKEY=2471/SEP verifies the DNSKEY RRset
	DNSKEY=2950 is now in the chain-of-trust
	Query to e.dns.br for hquest.pro.br/A
	Received 313 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (313 bytes) ;; HEADER SECTION ;; id = 46528 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20181204100505 20181120090505 31859 pro.br. kG4ymSM3sUjFAvj8jASyj2hBGrip5/T+HHqxVO0opCr9QqpjTwTREn525YQwxlUQi6rZR9M6yG0P Ks0ZBXAOoQ== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.dns.br for pro.br/DNSKEY
	Received 217 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (217 bytes) ;; HEADER SECTION ;; id = 49985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 13 bIDBt4NlAsCEVIRA7HYnmIYbeLQf8A4cVGAW69QPJzKXpfcd8vYYb/OqZZW1DLYROTFNaMNn9P9N aVz7kuE5Kg== ) ; Key ID = 31859 pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20181205121506 20181121111506 31859 pro.br. +Y7oyvwYZCLru0VOtLXErlMHAPjIwYJca3QF40sA0rKTVvosX9pEZp+iybIlxHsAoTuh3YaLiof3 Yr62f99ZIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pro.br
	Attempting to learn nameservers for pro.br
	Query to e.dns.br for pro.br/NS
	Received 237 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (237 bytes) ;; HEADER SECTION ;; id = 35795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN NS ;; ANSWER SECTION (7 records) pro.br. 172800 IN NS a.dns.br. pro.br. 172800 IN NS b.dns.br. pro.br. 172800 IN NS c.dns.br. pro.br. 172800 IN NS d.dns.br. pro.br. 172800 IN NS e.dns.br. pro.br. 172800 IN NS f.dns.br. pro.br. 172800 IN RRSIG ( NS 13 2 172800 20181205121506 20181121111506 31859 pro.br. vYq5Bfeaixacr1MvT69+Y9xmyfkFVYZh+307+R4hrASD2a1Xi66Cv+sdn6Y/JPawhCNhVecmuLba G40RUZFm7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found pro.br nameservers: a.dns.br, b.dns.br, c.dns.br, d.dns.br, e.dns.br, f.dns.br

pro.br

	Checking DS between br and pro.br
	Query to b.dns.br for pro.br/DS
	Received 181 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (181 bytes) ;; HEADER SECTION ;; id = 57574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DS ;; ANSWER SECTION (2 records) pro.br. 21600 IN DS ( 31859 13 2 3f769548b476b592b36e5c1e13d46c6903b1bf0c2475c2428f27fd5bf9636060 ) pro.br. 21600 IN RRSIG ( DS 13 2 21600 20181130120005 20181116110005 2950 br. s/fGk9iDQEK+XJ6QeZ3hFWyooWHRle4d2ZHXo6b6MuWVbn7I0+HK5uJUdU0W3yxV0RJnfMzc1rxg UIbyaKoj/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for pro.br in the br zone
	DS=31859/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`pro.br. 21600 IN RRSIG ( DS 13 2 21600 20181130120005 20181116110005 2950 br. s/fGk9iDQEK+XJ6QeZ3hFWyooWHRle4d2ZHXo6b6MuWVbn7I0+HK5uJUdU0W3yxV0RJnfMzc1rxg UIbyaKoj/Q== )`
	RRSIG=2950 and DNSKEY=2950 verifies the DS RRset
	DS=31859/SHA-256 is now in the chain-of-trust
	`pro.br. 21600 IN DS ( 31859 13 2 3f769548b476b592b36e5c1e13d46c6903b1bf0c2475c2428f27fd5bf9636060 )`
	Query to e.dns.br for pro.br/DNSKEY
	Received 217 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (217 bytes) ;; HEADER SECTION ;; id = 24550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 13 bIDBt4NlAsCEVIRA7HYnmIYbeLQf8A4cVGAW69QPJzKXpfcd8vYYb/OqZZW1DLYROTFNaMNn9P9N aVz7kuE5Kg== ) ; Key ID = 31859 pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20181205121506 20181121111506 31859 pro.br. +Y7oyvwYZCLru0VOtLXErlMHAPjIwYJca3QF40sA0rKTVvosX9pEZp+iybIlxHsAoTuh3YaLiof3 Yr62f99ZIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for pro.br
	`pro.br. 21600 IN DNSKEY ( 257 3 13 bIDBt4NlAsCEVIRA7HYnmIYbeLQf8A4cVGAW69QPJzKXpfcd8vYYb/OqZZW1DLYROTFNaMNn9P9N aVz7kuE5Kg== ) ; Key ID = 31859`
	DNSKEY=31859/SEP is now in the chain-of-trust
	DS=31859/SHA-256 verifies DNSKEY=31859/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20181205121506 20181121111506 31859 pro.br. +Y7oyvwYZCLru0VOtLXErlMHAPjIwYJca3QF40sA0rKTVvosX9pEZp+iybIlxHsAoTuh3YaLiof3 Yr62f99ZIQ== )`
	RRSIG=31859 and DNSKEY=31859/SEP verifies the DNSKEY RRset
	Query to d.dns.br for hquest.pro.br/A
	Received 313 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (313 bytes) ;; HEADER SECTION ;; id = 61453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20181204100505 20181120090505 31859 pro.br. kG4ymSM3sUjFAvj8jASyj2hBGrip5/T+HHqxVO0opCr9QqpjTwTREn525YQwxlUQi6rZR9M6yG0P Ks0ZBXAOoQ== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.dns.br for hquest.pro.br/DNSKEY
	Received 313 bytes from 200.192.233.10
	;; Answer received from 200.192.233.10 (313 bytes) ;; HEADER SECTION ;; id = 47629 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20181204100505 20181120090505 31859 pro.br. kG4ymSM3sUjFAvj8jASyj2hBGrip5/T+HHqxVO0opCr9QqpjTwTREn525YQwxlUQi6rZR9M6yG0P Ks0ZBXAOoQ== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone hquest.pro.br

hquest.pro.br

	Checking DS between pro.br and hquest.pro.br
	Query to d.dns.br for hquest.pro.br/DS
	Received 228 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (228 bytes) ;; HEADER SECTION ;; id = 64157 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DS ;; ANSWER SECTION (3 records) hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20181204100505 20181120090505 31859 pro.br. kG4ymSM3sUjFAvj8jASyj2hBGrip5/T+HHqxVO0opCr9QqpjTwTREn525YQwxlUQi6rZR9M6yG0P Ks0ZBXAOoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for hquest.pro.br in the pro.br zone
	DS=2400/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2400/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20181204100505 20181120090505 31859 pro.br. kG4ymSM3sUjFAvj8jASyj2hBGrip5/T+HHqxVO0opCr9QqpjTwTREn525YQwxlUQi6rZR9M6yG0P Ks0ZBXAOoQ== )`
	RRSIG=31859 and DNSKEY=31859/SEP verifies the DS RRset
	DS=2400/SHA-1 is now in the chain-of-trust
	`hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae`
	`hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 )`
	Query to ns1.he.net for hquest.pro.br/DNSKEY
	Received 1708 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (1708 bytes) ;; HEADER SECTION ;; id = 32225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (4 records) hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAa9DKguxKR76mLHXVOcNikqJ6U4R+2xS27uJalnVAYzca0HOp371fghWabE8RabrxOpmTVQA TZdwE1o5cEdAVSaoH/InUN6IdfjG7J5L0Vpo2TgPkwdxkzmej4JAKn1fHSDQGCfWWIpJ2B5GGrir KWEZ9oJPgIkwVNdrzf0y3DHy/M8EMWkLyRt5SOAh0gtMDoYRmTr/OWJkJwRonP7PFvjFGJYcw9OZ 7O+CCTluNmeHKZxnoH9ou7x6QqOvJh0vvB96RUKfpsrSJ6Ks3fIVwPu/z2U0ekH3EMH8/CRI2SjP m9HOTfUTd/J/L5nFRf0R7hl0d890+Ez2U7qTGmxqU0dxxSUWE/DBmQQ3JVFQKwubCLi+WJkqhL4C 3qQ8a4d0a/ZO/wrOf2XW5rSGAUYdtTlP5AJNFV1Mgdq0sa7UMD5BGQW1tOCIeGBY01ITsam0VDiJ 7nUPFMYo2DZemPBQiHKD6A1SyV1/ScETCMfiWqVQsrSQgn7CQ9GW8ukyqRsLWm94WUm/9limgMOe 4s4RRu1onA77Mt9KApiYMTpKT46REOGv2skgRpARjKX6EmXhewepXJEcM/ELRcK9xoLwfUULoWig R9lYA5fd+S7cNfYj09PQr7ZSTJ20NQXEpWmkHnALy/wbTsT11mE2iaoZCJ8E+TBkp2nWqR+fjAyp h1lz ) ; Key ID = 2400 hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAaBjwY7x7OZb9LCEzlh9BBUPVaa85wz1qWsF49IZ1Hvr15eMP5C18IhccYtxBTAu/M0Rr9kg kNHKVRlLY45SjV+SpBsaS9a6olz9x8BXD44FoxpxuRZhh8dVpfP1ktQk9pRA/XJJ9Le0omxjpwQ2 V+q/+400YzUpoYcovqcKqAPBPd01bfTlLGrADCCd1GST57H9C7kGV7wsGzavdTQkKZYQZe3CShk/ xrlZ6WzKEOyfkhe4XsGfKW/O9HlojsdrMQyoyV9hOVY9eLZQGZ1nX8p1UTtHUpvUBMCAlwU3u4Cu GAYIqMBARgb7jmbp9Qfkt6n5yy931DV9q7OD2focDO0= ) ; Key ID = 10244 hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. Pen0eSsGlQI30XNPaq4XRpJgM8rdiClFdD2FAcPVXXR+2fMl3ljRB1JS/lfB2NFllQNcKGLdga3K uAbhmGY3cpNE6jUxxnR2hthkIyVmUZi+y7/1WGDv0uPRLkyMpOy3PoOiFMGtWkYYHVhHOuXWn9kX cfkds2ZibWTQE50QK/2EnQLqY8/+KHqq7v8VCjzcfZYM4OvlqP/qARBAmXZlPib2ta8B54YavTH1 8UeREjaqYwkS6Obgh/B5L3CudkX1NZB2VRHOuoehRGsbenvrr/pCeJKs36qENKfoobm2UnhGYtcN i32FCZccTL17wxvX+j06LXGrQ+pAzZkKZjwwTA== ) hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20181219141524 20181119141524 2400 hquest.pro.br. ATdAn0am/N5hfYOgdvN2SlFlVBEbSFTTobr9F3MVgia0chkQkpd8xOiSgR9LtAJAaNaxOgi7nkrz kXjY9ge+ejgchs0Y7hkQybISQttUW2Rctkd6W2kvS9t9CgSWMijBhcE+Kewy9aG976cezFnQaljT H6HHYlhQgSyAQc3IHjsADbTwb8MllRhSviHfuJzuFH1r5McKeIozWBbn+Q+vrwveP0M5Buf+ZXiG M1Q3MVcu9MEgrcWSd06e8eHu8GV5vgHT48Ry+TqCU7CL2WaqagbC9gBTXqX+NWicXVbA3wEy57sI TAI+c7JAmizcyRhcYfp8JZmlGti9zxKlCwxzVFB8iVcuj7c5UYW0dthFac2vDnV3xapH5NEIoYHH E4IhZ33q8G/bGPRDUdmYn1FnVuJxinAZFU7FW9bNZ04gqkKdUCur15s66fJBvwwoCFteBDyTgoma 2Uik8lFs/iY3Bd9N6x0ICg3YmVYKgHaS4agQ0y5ye0cmGJxR83VDb5MvVbxw/xAO9Ce80ru0bKOu N2bxJ6esmg1NTEFXuZLtMGNygMuM/w95l0hPs4xRq565bJb40lohEVrGWZv5m6q/478ALg6QefQp lIbzfIAMT72MrhyzaS5SyrRmcG4uGkf79Py0J3KxT/SjKyHcDJeYO755quMIK1KJkTddD1JOX18= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for hquest.pro.br
	hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAa9DKguxKR76mLHXVOcNikqJ6U4R+2xS27uJalnVAYzca0HOp371fghWabE8RabrxOpmTVQA TZdwE1o5cEdAVSaoH/InUN6IdfjG7J5L0Vpo2TgPkwdxkzmej4JAKn1fHSDQGCfWWIpJ2B5GGrir KWEZ9oJPgIkwVNdrzf0y3DHy/M8EMWkLyRt5SOAh0gtMDoYRmTr/OWJkJwRonP7PFvjFGJYcw9OZ 7O+CCTluNmeHKZxnoH9ou7x6QqOvJh0vvB96RUKfpsrSJ6Ks3fIVwPu/z2U0ekH3EMH8/CRI2SjP m9HOTfUTd/J/L5nFRf0R7hl0d890+Ez2U7qTGmxqU0dxxSUWE/DBmQQ3JVFQKwubCLi+WJkqhL4C 3qQ8a4d0a/ZO/wrOf2XW5rSGAUYdtTlP5AJNFV1Mgdq0sa7UMD5BGQW1tOCIeGBY01ITsam0VDiJ 7nUPFMYo2DZemPBQiHKD6A1SyV1/ScETCMfiWqVQsrSQgn7CQ9GW8ukyqRsLWm94WUm/9limgMOe 4s4RRu1onA77Mt9KApiYMTpKT46REOGv2skgRpARjKX6EmXhewepXJEcM/ELRcK9xoLwfUULoWig R9lYA5fd+S7cNfYj09PQr7ZSTJ20NQXEpWmkHnALy/wbTsT11mE2iaoZCJ8E+TBkp2nWqR+fjAyp h1lz ) ; Key ID = 2400
	`hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAaBjwY7x7OZb9LCEzlh9BBUPVaa85wz1qWsF49IZ1Hvr15eMP5C18IhccYtxBTAu/M0Rr9kg kNHKVRlLY45SjV+SpBsaS9a6olz9x8BXD44FoxpxuRZhh8dVpfP1ktQk9pRA/XJJ9Le0omxjpwQ2 V+q/+400YzUpoYcovqcKqAPBPd01bfTlLGrADCCd1GST57H9C7kGV7wsGzavdTQkKZYQZe3CShk/ xrlZ6WzKEOyfkhe4XsGfKW/O9HlojsdrMQyoyV9hOVY9eLZQGZ1nX8p1UTtHUpvUBMCAlwU3u4Cu GAYIqMBARgb7jmbp9Qfkt6n5yy931DV9q7OD2focDO0= ) ; Key ID = 10244`
	DNSKEY=2400/SEP is now in the chain-of-trust
	DS=2400/SHA-1 verifies DNSKEY=2400/SEP
	DS=2400/SHA-256 verifies DNSKEY=2400/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. Pen0eSsGlQI30XNPaq4XRpJgM8rdiClFdD2FAcPVXXR+2fMl3ljRB1JS/lfB2NFllQNcKGLdga3K uAbhmGY3cpNE6jUxxnR2hthkIyVmUZi+y7/1WGDv0uPRLkyMpOy3PoOiFMGtWkYYHVhHOuXWn9kX cfkds2ZibWTQE50QK/2EnQLqY8/+KHqq7v8VCjzcfZYM4OvlqP/qARBAmXZlPib2ta8B54YavTH1 8UeREjaqYwkS6Obgh/B5L3CudkX1NZB2VRHOuoehRGsbenvrr/pCeJKs36qENKfoobm2UnhGYtcN i32FCZccTL17wxvX+j06LXGrQ+pAzZkKZjwwTA== )`
	hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20181219141524 20181119141524 2400 hquest.pro.br. ATdAn0am/N5hfYOgdvN2SlFlVBEbSFTTobr9F3MVgia0chkQkpd8xOiSgR9LtAJAaNaxOgi7nkrz kXjY9ge+ejgchs0Y7hkQybISQttUW2Rctkd6W2kvS9t9CgSWMijBhcE+Kewy9aG976cezFnQaljT H6HHYlhQgSyAQc3IHjsADbTwb8MllRhSviHfuJzuFH1r5McKeIozWBbn+Q+vrwveP0M5Buf+ZXiG M1Q3MVcu9MEgrcWSd06e8eHu8GV5vgHT48Ry+TqCU7CL2WaqagbC9gBTXqX+NWicXVbA3wEy57sI TAI+c7JAmizcyRhcYfp8JZmlGti9zxKlCwxzVFB8iVcuj7c5UYW0dthFac2vDnV3xapH5NEIoYHH E4IhZ33q8G/bGPRDUdmYn1FnVuJxinAZFU7FW9bNZ04gqkKdUCur15s66fJBvwwoCFteBDyTgoma 2Uik8lFs/iY3Bd9N6x0ICg3YmVYKgHaS4agQ0y5ye0cmGJxR83VDb5MvVbxw/xAO9Ce80ru0bKOu N2bxJ6esmg1NTEFXuZLtMGNygMuM/w95l0hPs4xRq565bJb40lohEVrGWZv5m6q/478ALg6QefQp lIbzfIAMT72MrhyzaS5SyrRmcG4uGkf79Py0J3KxT/SjKyHcDJeYO755quMIK1KJkTddD1JOX18= )
	RRSIG=10244 and DNSKEY=10244 verifies the DNSKEY RRset
	RRSIG=2400 and DNSKEY=2400/SEP verifies the DNSKEY RRset
	DNSKEY=10244 is now in the chain-of-trust
	Query to ns1.he.net for hquest.pro.br/A
	Received 359 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (359 bytes) ;; HEADER SECTION ;; id = 45488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. Kvb++aKRvn/1GmqdBOM8Mls6ueeqSb6daQ/rRrcsjsyM5071VDKoEcCS01c1e/L1cw28zLxbAL3l FZ1Xn7Xf1I3lp2qjLF6cBBK/dFLvMmd0srFT1UKzuDL718HZirWBxh2yXi1Y+k8/4D0S3X8Iz7do Lu+5PAmo1cxLvGEeh5ZsryLqKjRyJNQSQ8/C1MxfJsjwC04UnMWSEKtYgFzcWpLiUL7DBWmzwI49 pCEZM06fb5uC7L/lnuAz5kQKhARrflMH9/WC4q8hkKAWNQiu6IRnrlUo17UqzTLx8hIazp14URBy 23i2OS8F87fLzeDpCieh4NOZLGOZB6EfRVVGLg== ) hquest.pro.br. 300 IN A 74.103.45.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	hquest.pro.br is authoritative for hquest.pro.br
	Found RRSIG signed by hquest.pro.br zone
	Query to ns.hquest.pro.br for hquest.pro.br/SOA
	Received 389 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (389 bytes) ;; HEADER SECTION ;; id = 42682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2018111902 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) hquest.pro.br. 300 IN RRSIG ( SOA 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. WC7o8BD39AryWa9GkA9nubJZ9IwQzXDBg8R9HI6h1k8imKLyRxPrgvGWfTwNppHOoEt8/IZJKZt9 33HtgHeXrWwOGYEgetAk1JFBfH8ZypfYptzAW+mwwEvnCADZuC9nWGRCEhPrs5X8l5Z03Cw7j6Sa y2NHd0yTlHbGLyrG3sh3bw1g61gekGcyNrnB4EQyJ2Mw/SuMu9tql0VDQD6tuXGFPGJwSI373ArE 4MlqC8aDZ5zdr+d734HYNzB0j+F420jbRbulZ8ceXvJEyCNKB7T5yA6xVNclw6l1iB1XSE/ntCL2 0ofMdiP5T0hCVkcgpxnzROSTebZGJzKVbEaA1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.he.net for hquest.pro.br/SOA
	Received 389 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (389 bytes) ;; HEADER SECTION ;; id = 50597 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN RRSIG ( SOA 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. WC7o8BD39AryWa9GkA9nubJZ9IwQzXDBg8R9HI6h1k8imKLyRxPrgvGWfTwNppHOoEt8/IZJKZt9 33HtgHeXrWwOGYEgetAk1JFBfH8ZypfYptzAW+mwwEvnCADZuC9nWGRCEhPrs5X8l5Z03Cw7j6Sa y2NHd0yTlHbGLyrG3sh3bw1g61gekGcyNrnB4EQyJ2Mw/SuMu9tql0VDQD6tuXGFPGJwSI373ArE 4MlqC8aDZ5zdr+d734HYNzB0j+F420jbRbulZ8ceXvJEyCNKB7T5yA6xVNclw6l1iB1XSE/ntCL2 0ofMdiP5T0hCVkcgpxnzROSTebZGJzKVbEaA1g== ) hquest.pro.br. 300 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2018111902 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.he.net for hquest.pro.br/A
	Error querying ns1.he.net/2001:470:100:0:0:0:0:2 for hquest.pro.br/A: 'IPv6 transport disabled'
	Received 359 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (359 bytes) ;; HEADER SECTION ;; id = 55126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. Kvb++aKRvn/1GmqdBOM8Mls6ueeqSb6daQ/rRrcsjsyM5071VDKoEcCS01c1e/L1cw28zLxbAL3l FZ1Xn7Xf1I3lp2qjLF6cBBK/dFLvMmd0srFT1UKzuDL718HZirWBxh2yXi1Y+k8/4D0S3X8Iz7do Lu+5PAmo1cxLvGEeh5ZsryLqKjRyJNQSQ8/C1MxfJsjwC04UnMWSEKtYgFzcWpLiUL7DBWmzwI49 pCEZM06fb5uC7L/lnuAz5kQKhARrflMH9/WC4q8hkKAWNQiu6IRnrlUo17UqzTLx8hIazp14URBy 23i2OS8F87fLzeDpCieh4NOZLGOZB6EfRVVGLg== ) hquest.pro.br. 300 IN A 74.103.45.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	hquest.pro.br A RR has value 74.103.45.250
	Found 1 RRSIGs over A RRset
	`hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20181219141524 20181119141524 10244 hquest.pro.br. Kvb++aKRvn/1GmqdBOM8Mls6ueeqSb6daQ/rRrcsjsyM5071VDKoEcCS01c1e/L1cw28zLxbAL3l FZ1Xn7Xf1I3lp2qjLF6cBBK/dFLvMmd0srFT1UKzuDL718HZirWBxh2yXi1Y+k8/4D0S3X8Iz7do Lu+5PAmo1cxLvGEeh5ZsryLqKjRyJNQSQ8/C1MxfJsjwC04UnMWSEKtYgFzcWpLiUL7DBWmzwI49 pCEZM06fb5uC7L/lnuAz5kQKhARrflMH9/WC4q8hkKAWNQiu6IRnrlUo17UqzTLx8hIazp14URBy 23i2OS8F87fLzeDpCieh4NOZLGOZB6EfRVVGLg== )`
	RRSIG=10244 and DNSKEY=10244 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hquest.pro.br at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: