DNSSEC Analyzer - hquest.pro.br

Domain Name:

Time: 2020-02-28 06:27:52 UTC, NTP stratum 4

Analyzing DNSSEC problems for hquest.pro.br

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 45175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to k.root-servers.net for hquest.pro.br/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for hquest.pro.br/A: 'IPv6 transport disabled'
	Received 741 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (741 bytes) ;; HEADER SECTION ;; id = 23643 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . v/jc4drMIPp57JePRxaUHN6qMYhxizr0tpyex3vqysQdVTyv6lXvz1Cl8jIwXvp5+R6JWeQhnt45 XBBYudeJKhnxgzGjjnxBBaW+Y6JcRXiJcO3gLCq5hXapLzCAF5TCzAFtnnzi6rpOQBNzmP2Y5o1T t3dIMcpuGj8IEJetN8QSJQUDpqepW1XWErUXINo52UncMghnhhHxuFEQi0mgf3d0mMnapjpSTP61 8MK2oVPPv8KTIgW+MH/eA+ouCApVB4sJgyfgW+JTM6ZBHGi+834aQEIa6ShkgpSJZyJROIEU0+wj b8VanC0iCMztZJ15XM7Wj+rB0hohsF6R81jQYA== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for br/DNSKEY
	Received 730 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (730 bytes) ;; HEADER SECTION ;; id = 28927 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . v/jc4drMIPp57JePRxaUHN6qMYhxizr0tpyex3vqysQdVTyv6lXvz1Cl8jIwXvp5+R6JWeQhnt45 XBBYudeJKhnxgzGjjnxBBaW+Y6JcRXiJcO3gLCq5hXapLzCAF5TCzAFtnnzi6rpOQBNzmP2Y5o1T t3dIMcpuGj8IEJetN8QSJQUDpqepW1XWErUXINo52UncMghnhhHxuFEQi0mgf3d0mMnapjpSTP61 8MK2oVPPv8KTIgW+MH/eA+ouCApVB4sJgyfgW+JTM6ZBHGi+834aQEIa6ShkgpSJZyJROIEU0+wj b8VanC0iCMztZJ15XM7Wj+rB0hohsF6R81jQYA== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone br

	Checking DS between . and br
	Query to e.root-servers.net for br/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for br/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (366 bytes) ;; HEADER SECTION ;; id = 30807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DS ;; ANSWER SECTION (2 records) br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 ) br. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . v/jc4drMIPp57JePRxaUHN6qMYhxizr0tpyex3vqysQdVTyv6lXvz1Cl8jIwXvp5+R6JWeQhnt45 XBBYudeJKhnxgzGjjnxBBaW+Y6JcRXiJcO3gLCq5hXapLzCAF5TCzAFtnnzi6rpOQBNzmP2Y5o1T t3dIMcpuGj8IEJetN8QSJQUDpqepW1XWErUXINo52UncMghnhhHxuFEQi0mgf3d0mMnapjpSTP61 8MK2oVPPv8KTIgW+MH/eA+ouCApVB4sJgyfgW+JTM6ZBHGi+834aQEIa6ShkgpSJZyJROIEU0+wj b8VanC0iCMztZJ15XM7Wj+rB0hohsF6R81jQYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for br in the . zone
	DS=2471/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`br. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . v/jc4drMIPp57JePRxaUHN6qMYhxizr0tpyex3vqysQdVTyv6lXvz1Cl8jIwXvp5+R6JWeQhnt45 XBBYudeJKhnxgzGjjnxBBaW+Y6JcRXiJcO3gLCq5hXapLzCAF5TCzAFtnnzi6rpOQBNzmP2Y5o1T t3dIMcpuGj8IEJetN8QSJQUDpqepW1XWErUXINo52UncMghnhhHxuFEQi0mgf3d0mMnapjpSTP61 8MK2oVPPv8KTIgW+MH/eA+ouCApVB4sJgyfgW+JTM6ZBHGi+834aQEIa6ShkgpSJZyJROIEU0+wj b8VanC0iCMztZJ15XM7Wj+rB0hohsF6R81jQYA== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=2471/SHA-256 is now in the chain-of-trust
	`br. 86400 IN DS ( 2471 13 2 5e4f35998b8f909557fa119c4cbfdca2d660a26f069ef006b403758a07d1a2e4 )`
	Query to c.dns.br for br/DNSKEY
	Received 289 bytes from 200.192.233.10
	;; Answer received from 200.192.233.10 (289 bytes) ;; HEADER SECTION ;; id = 26385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (3 records) br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471 br. 21600 IN DNSKEY ( 256 3 13 DbbhxfnhXBJYuGXp14ZEEvIcRt55wt+BEIARmUAB+QN7kM2uJuBmPeqZQHzNJBvXdQbKg0ZU+ypx 1l0TknBsag== ) ; Key ID = 19027 br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20200308120000 20200216120000 2471 br. gJ6gxeNDFnREtD0UL8GUHvdcS2D0+GcSj48E4TJr+2kaCyg+41wrQGZbwVXJMtNrsUqx/DIQWxDZ BYw6ug8IYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for br
	`br. 21600 IN DNSKEY ( 257 3 13 i9GgZ+/z2Y7VbG3AHrh7KD7FUHGxmCKHfoVGv/zZ3DAcXTVnAywWTopCBxqZas4JkzaPdAGd0rVt RsKGRDhiFg== ) ; Key ID = 2471`
	`br. 21600 IN DNSKEY ( 256 3 13 DbbhxfnhXBJYuGXp14ZEEvIcRt55wt+BEIARmUAB+QN7kM2uJuBmPeqZQHzNJBvXdQbKg0ZU+ypx 1l0TknBsag== ) ; Key ID = 19027`
	DNSKEY=2471/SEP is now in the chain-of-trust
	DS=2471/SHA-256 verifies DNSKEY=2471/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20200308120000 20200216120000 2471 br. gJ6gxeNDFnREtD0UL8GUHvdcS2D0+GcSj48E4TJr+2kaCyg+41wrQGZbwVXJMtNrsUqx/DIQWxDZ BYw6ug8IYg== )`
	RRSIG=2471 and DNSKEY=2471/SEP verifies the DNSKEY RRset
	DNSKEY=19027 is now in the chain-of-trust
	Query to d.dns.br for hquest.pro.br/A
	Received 313 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (313 bytes) ;; HEADER SECTION ;; id = 46331 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20200309002007 20200223232007 57697 pro.br. 6EpXGYmCjM92o+aT8M0vsfgjKN9LLpevBqWyYE1VRQyPrD10nO4Z/yOA+iKf0sgQgmk4oZE7ppE7 rOOE4Cc/Rw== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.dns.br for pro.br/DNSKEY
	Error querying a.dns.br/2001:12f8:6:0:0:0:0:10 for pro.br/DNSKEY: 'IPv6 transport disabled'
	Received 217 bytes from 200.219.148.10
	;; Answer received from 200.219.148.10 (217 bytes) ;; HEADER SECTION ;; id = 108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 13 BiAruAjrX5dzg3YXDv3hrvpFCQ6cSBFEgZ6CCJkWQa5GqKp7rmTMhMZD7jWljVvJlCczvFuGb2OA raVtxwg3lg== ) ; Key ID = 57697 pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20200313062508 20200228052508 57697 pro.br. /aNZl5DkdTuXsMjxUUVA1MtUW6Fmd+MUa57q64Bv8vuQsLFajFy6c+W3JUVXy01/XcG1NqaJIcIS QDAnV+weyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pro.br
	Attempting to learn nameservers for pro.br
	Query to e.dns.br for pro.br/NS
	Received 237 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (237 bytes) ;; HEADER SECTION ;; id = 11531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN NS ;; ANSWER SECTION (7 records) pro.br. 172800 IN NS c.dns.br. pro.br. 172800 IN NS d.dns.br. pro.br. 172800 IN NS f.dns.br. pro.br. 172800 IN NS b.dns.br. pro.br. 172800 IN NS a.dns.br. pro.br. 172800 IN NS e.dns.br. pro.br. 172800 IN RRSIG ( NS 13 2 172800 20200313062508 20200228052508 57697 pro.br. Xy1YWirXb3HoxwuvBkKJiYq26L3E1dV8k45d9OjPWjAIu35a8BdKF3ZdQ8xsElxQzWxz+glQ9fhI pEtunZCJdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found pro.br nameservers: c.dns.br, d.dns.br, f.dns.br, b.dns.br, a.dns.br, e.dns.br

pro.br

	Checking DS between br and pro.br
	Query to e.dns.br for pro.br/DS
	Error querying e.dns.br/2001:12f8:2:0:0:0:0:10 for pro.br/DS: 'IPv6 transport disabled'
	Received 181 bytes from 200.229.248.10
	;; Answer received from 200.229.248.10 (181 bytes) ;; HEADER SECTION ;; id = 62361 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DS ;; ANSWER SECTION (2 records) pro.br. 21600 IN DS ( 57697 13 2 96571f9e6576472d2c1e8fce81c692228f6d10631a755b0f46ca6fe9a85bf18d ) pro.br. 21600 IN RRSIG ( DS 13 2 21600 20200308120507 20200223110507 19027 br. pYcyKS1uVayYh9Ra+oAI8En2R8Jvk/CkH5+op7eUAUWPip7MMNLNGz/biZOlWL0DGIjGak0gn7Y7 1LS3+USgmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for pro.br in the br zone
	DS=57697/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`pro.br. 21600 IN RRSIG ( DS 13 2 21600 20200308120507 20200223110507 19027 br. pYcyKS1uVayYh9Ra+oAI8En2R8Jvk/CkH5+op7eUAUWPip7MMNLNGz/biZOlWL0DGIjGak0gn7Y7 1LS3+USgmQ== )`
	RRSIG=19027 and DNSKEY=19027 verifies the DS RRset
	DS=57697/SHA-256 is now in the chain-of-trust
	`pro.br. 21600 IN DS ( 57697 13 2 96571f9e6576472d2c1e8fce81c692228f6d10631a755b0f46ca6fe9a85bf18d )`
	Query to d.dns.br for pro.br/DNSKEY
	Error querying d.dns.br/2001:12f8:4:0:0:0:0:10 for pro.br/DNSKEY: 'IPv6 transport disabled'
	Received 217 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (217 bytes) ;; HEADER SECTION ;; id = 9087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pro.br. IN DNSKEY ;; ANSWER SECTION (2 records) pro.br. 21600 IN DNSKEY ( 257 3 13 BiAruAjrX5dzg3YXDv3hrvpFCQ6cSBFEgZ6CCJkWQa5GqKp7rmTMhMZD7jWljVvJlCczvFuGb2OA raVtxwg3lg== ) ; Key ID = 57697 pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20200313062508 20200228052508 57697 pro.br. /aNZl5DkdTuXsMjxUUVA1MtUW6Fmd+MUa57q64Bv8vuQsLFajFy6c+W3JUVXy01/XcG1NqaJIcIS QDAnV+weyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for pro.br
	`pro.br. 21600 IN DNSKEY ( 257 3 13 BiAruAjrX5dzg3YXDv3hrvpFCQ6cSBFEgZ6CCJkWQa5GqKp7rmTMhMZD7jWljVvJlCczvFuGb2OA raVtxwg3lg== ) ; Key ID = 57697`
	DNSKEY=57697/SEP is now in the chain-of-trust
	DS=57697/SHA-256 verifies DNSKEY=57697/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pro.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20200313062508 20200228052508 57697 pro.br. /aNZl5DkdTuXsMjxUUVA1MtUW6Fmd+MUa57q64Bv8vuQsLFajFy6c+W3JUVXy01/XcG1NqaJIcIS QDAnV+weyA== )`
	RRSIG=57697 and DNSKEY=57697/SEP verifies the DNSKEY RRset
	Query to b.dns.br for hquest.pro.br/A
	Received 313 bytes from 200.189.41.10
	;; Answer received from 200.189.41.10 (313 bytes) ;; HEADER SECTION ;; id = 30889 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20200309002007 20200223232007 57697 pro.br. 6EpXGYmCjM92o+aT8M0vsfgjKN9LLpevBqWyYE1VRQyPrD10nO4Z/yOA+iKf0sgQgmk4oZE7ppE7 rOOE4Cc/Rw== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.dns.br for hquest.pro.br/DNSKEY
	Error querying d.dns.br/2001:12f8:4:0:0:0:0:10 for hquest.pro.br/DNSKEY: 'IPv6 transport disabled'
	Received 313 bytes from 200.219.154.10
	;; Answer received from 200.219.154.10 (313 bytes) ;; HEADER SECTION ;; id = 15100 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) hquest.pro.br. 3600 IN NS ns.hquest.pro.br. hquest.pro.br. 3600 IN NS ns1.he.net. hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20200309002007 20200223232007 57697 pro.br. 6EpXGYmCjM92o+aT8M0vsfgjKN9LLpevBqWyYE1VRQyPrD10nO4Z/yOA+iKf0sgQgmk4oZE7ppE7 rOOE4Cc/Rw== ) ;; ADDITIONAL SECTION (3 records) ns.hquest.pro.br. 3600 IN A 74.103.45.250 ns.hquest.pro.br. 3600 IN AAAA 2001:470:c2d0:9::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone hquest.pro.br

hquest.pro.br

	Checking DS between pro.br and hquest.pro.br
	Query to f.dns.br for hquest.pro.br/DS
	Received 228 bytes from 200.219.159.10
	;; Answer received from 200.219.159.10 (228 bytes) ;; HEADER SECTION ;; id = 13180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DS ;; ANSWER SECTION (3 records) hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 ) hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20200309002007 20200223232007 57697 pro.br. 6EpXGYmCjM92o+aT8M0vsfgjKN9LLpevBqWyYE1VRQyPrD10nO4Z/yOA+iKf0sgQgmk4oZE7ppE7 rOOE4Cc/Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for hquest.pro.br in the pro.br zone
	DS=2400/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2400/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`hquest.pro.br. 3600 IN RRSIG ( DS 13 3 3600 20200309002007 20200223232007 57697 pro.br. 6EpXGYmCjM92o+aT8M0vsfgjKN9LLpevBqWyYE1VRQyPrD10nO4Z/yOA+iKf0sgQgmk4oZE7ppE7 rOOE4Cc/Rw== )`
	RRSIG=57697 and DNSKEY=57697/SEP verifies the DS RRset
	DS=2400/SHA-1 is now in the chain-of-trust
	`hquest.pro.br. 3600 IN DS 2400 7 1 00bff0951dded766ff7fba6f0eca7f0abf9034ae`
	`hquest.pro.br. 3600 IN DS ( 2400 7 2 b4915ea131adcb0347ea4914fb58ff32c1bf77b94e9515a19f37d07e7b31ad17 )`
	Query to ns1.he.net for hquest.pro.br/DNSKEY
	Error querying ns1.he.net/2001:470:100:0:0:0:0:2 for hquest.pro.br/DNSKEY: 'IPv6 transport disabled'
	Received 1708 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (1708 bytes) ;; HEADER SECTION ;; id = 12679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN DNSKEY ;; ANSWER SECTION (4 records) hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAaBjwY7x7OZb9LCEzlh9BBUPVaa85wz1qWsF49IZ1Hvr15eMP5C18IhccYtxBTAu/M0Rr9kg kNHKVRlLY45SjV+SpBsaS9a6olz9x8BXD44FoxpxuRZhh8dVpfP1ktQk9pRA/XJJ9Le0omxjpwQ2 V+q/+400YzUpoYcovqcKqAPBPd01bfTlLGrADCCd1GST57H9C7kGV7wsGzavdTQkKZYQZe3CShk/ xrlZ6WzKEOyfkhe4XsGfKW/O9HlojsdrMQyoyV9hOVY9eLZQGZ1nX8p1UTtHUpvUBMCAlwU3u4Cu GAYIqMBARgb7jmbp9Qfkt6n5yy931DV9q7OD2focDO0= ) ; Key ID = 10244 hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAa9DKguxKR76mLHXVOcNikqJ6U4R+2xS27uJalnVAYzca0HOp371fghWabE8RabrxOpmTVQA TZdwE1o5cEdAVSaoH/InUN6IdfjG7J5L0Vpo2TgPkwdxkzmej4JAKn1fHSDQGCfWWIpJ2B5GGrir KWEZ9oJPgIkwVNdrzf0y3DHy/M8EMWkLyRt5SOAh0gtMDoYRmTr/OWJkJwRonP7PFvjFGJYcw9OZ 7O+CCTluNmeHKZxnoH9ou7x6QqOvJh0vvB96RUKfpsrSJ6Ks3fIVwPu/z2U0ekH3EMH8/CRI2SjP m9HOTfUTd/J/L5nFRf0R7hl0d890+Ez2U7qTGmxqU0dxxSUWE/DBmQQ3JVFQKwubCLi+WJkqhL4C 3qQ8a4d0a/ZO/wrOf2XW5rSGAUYdtTlP5AJNFV1Mgdq0sa7UMD5BGQW1tOCIeGBY01ITsam0VDiJ 7nUPFMYo2DZemPBQiHKD6A1SyV1/ScETCMfiWqVQsrSQgn7CQ9GW8ukyqRsLWm94WUm/9limgMOe 4s4RRu1onA77Mt9KApiYMTpKT46REOGv2skgRpARjKX6EmXhewepXJEcM/ELRcK9xoLwfUULoWig R9lYA5fd+S7cNfYj09PQr7ZSTJ20NQXEpWmkHnALy/wbTsT11mE2iaoZCJ8E+TBkp2nWqR+fjAyp h1lz ) ; Key ID = 2400 hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20200307124535 20200206124535 2400 hquest.pro.br. MwdQhMpiQLRJfmjAZEcSliDj1E3GLW3otx+0ptmYb8DapyiWVVaH6UgGJonLtSj532y5w0J21xFd KSB43x0vowNWWowg0kfZ77B0sxk2M7XaHHhEFL14vAPA/YynJNzt3xW2aHtWce4Qk1yKy1bJw1Yd T84dwh7duxTp19vdi3it6sgBN5SiJbXGNHTYYumc0pyjjc9XQKf0NyRAaaYAtzBnA8lH5Rq5p5Qb rPpayu9+f+qbPsaoo6gii5qPBD3LmMJCltn1CSVmgX585IUapL4nyVheoq+ui+NT6gg6+aMWtKBT 9hjJgl5NR7EZKWGe3/m5tneBWm9x7em3KutfCWlbSdi2OvWz8Km8VtD1L4yw/SLHtFCZVOD1zEpE cV/ZReuglR9db4an00F3EtkXTW0L72wjx/Ezyr+rFi2JNsPLLsV/LTrcxOSjxkBmZ5uFR2NBFFAZ C9A3gWXgdtHwfRMhrh1kmdjxb8IE2fpe3eafnJ00hpaoddto+nbpQlgkBlQmAJcH3XNrIdVnCY5g Uu0pmPCJyXe7Onlw/IKF853o3KHqcBGeNcYegQHgL/gVyADhEqDuahXV5xEUvDl+r/TCdYmmtZG8 MO6QdIRVenG+fXsFDIpPSf6Tu11LU9apNE2slPZR37EDFS6sANbgHBFZIzReEJ68zAts8/veKyQ= ) hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20200307124535 20200206124535 10244 hquest.pro.br. EPLFRtHmi0+rxnElpNRp8+Lz5zToabo6wcNWSwbIMMOMKeoJyzk1wxMg3y31oIFBFy2JvYuEDrmB 9IaD4ek2MNfxFXkE33BOlO95FHSeI9DugC5ode7/KPMdORz+qfvoQxfaSYhIt/8Fk5wzL5VauN69 plqnuoq471kidbDDWVbr6SQO0aCtxFUDqu+RbDCdJGSfFh0ujaNYTuyS9WSSBcvvAtkaw2L+5kJg TmqKupEegJOde+xomYnQP07iYu60drRHRkXRyol9F2xkBTf3g8R+bigvgieTqszwnVNkE/V0fc4V leAmxeR2ejHsv5sgg7Vj6fv3kUOYU/le3aANJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for hquest.pro.br
	`hquest.pro.br. 300 IN DNSKEY ( 256 3 7 AwEAAaBjwY7x7OZb9LCEzlh9BBUPVaa85wz1qWsF49IZ1Hvr15eMP5C18IhccYtxBTAu/M0Rr9kg kNHKVRlLY45SjV+SpBsaS9a6olz9x8BXD44FoxpxuRZhh8dVpfP1ktQk9pRA/XJJ9Le0omxjpwQ2 V+q/+400YzUpoYcovqcKqAPBPd01bfTlLGrADCCd1GST57H9C7kGV7wsGzavdTQkKZYQZe3CShk/ xrlZ6WzKEOyfkhe4XsGfKW/O9HlojsdrMQyoyV9hOVY9eLZQGZ1nX8p1UTtHUpvUBMCAlwU3u4Cu GAYIqMBARgb7jmbp9Qfkt6n5yy931DV9q7OD2focDO0= ) ; Key ID = 10244`
	hquest.pro.br. 300 IN DNSKEY ( 257 3 7 AwEAAa9DKguxKR76mLHXVOcNikqJ6U4R+2xS27uJalnVAYzca0HOp371fghWabE8RabrxOpmTVQA TZdwE1o5cEdAVSaoH/InUN6IdfjG7J5L0Vpo2TgPkwdxkzmej4JAKn1fHSDQGCfWWIpJ2B5GGrir KWEZ9oJPgIkwVNdrzf0y3DHy/M8EMWkLyRt5SOAh0gtMDoYRmTr/OWJkJwRonP7PFvjFGJYcw9OZ 7O+CCTluNmeHKZxnoH9ou7x6QqOvJh0vvB96RUKfpsrSJ6Ks3fIVwPu/z2U0ekH3EMH8/CRI2SjP m9HOTfUTd/J/L5nFRf0R7hl0d890+Ez2U7qTGmxqU0dxxSUWE/DBmQQ3JVFQKwubCLi+WJkqhL4C 3qQ8a4d0a/ZO/wrOf2XW5rSGAUYdtTlP5AJNFV1Mgdq0sa7UMD5BGQW1tOCIeGBY01ITsam0VDiJ 7nUPFMYo2DZemPBQiHKD6A1SyV1/ScETCMfiWqVQsrSQgn7CQ9GW8ukyqRsLWm94WUm/9limgMOe 4s4RRu1onA77Mt9KApiYMTpKT46REOGv2skgRpARjKX6EmXhewepXJEcM/ELRcK9xoLwfUULoWig R9lYA5fd+S7cNfYj09PQr7ZSTJ20NQXEpWmkHnALy/wbTsT11mE2iaoZCJ8E+TBkp2nWqR+fjAyp h1lz ) ; Key ID = 2400
	DNSKEY=2400/SEP is now in the chain-of-trust
	DS=2400/SHA-1 verifies DNSKEY=2400/SEP
	DS=2400/SHA-256 verifies DNSKEY=2400/SEP
	Found 2 RRSIGs over DNSKEY RRset
	hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20200307124535 20200206124535 2400 hquest.pro.br. MwdQhMpiQLRJfmjAZEcSliDj1E3GLW3otx+0ptmYb8DapyiWVVaH6UgGJonLtSj532y5w0J21xFd KSB43x0vowNWWowg0kfZ77B0sxk2M7XaHHhEFL14vAPA/YynJNzt3xW2aHtWce4Qk1yKy1bJw1Yd T84dwh7duxTp19vdi3it6sgBN5SiJbXGNHTYYumc0pyjjc9XQKf0NyRAaaYAtzBnA8lH5Rq5p5Qb rPpayu9+f+qbPsaoo6gii5qPBD3LmMJCltn1CSVmgX585IUapL4nyVheoq+ui+NT6gg6+aMWtKBT 9hjJgl5NR7EZKWGe3/m5tneBWm9x7em3KutfCWlbSdi2OvWz8Km8VtD1L4yw/SLHtFCZVOD1zEpE cV/ZReuglR9db4an00F3EtkXTW0L72wjx/Ezyr+rFi2JNsPLLsV/LTrcxOSjxkBmZ5uFR2NBFFAZ C9A3gWXgdtHwfRMhrh1kmdjxb8IE2fpe3eafnJ00hpaoddto+nbpQlgkBlQmAJcH3XNrIdVnCY5g Uu0pmPCJyXe7Onlw/IKF853o3KHqcBGeNcYegQHgL/gVyADhEqDuahXV5xEUvDl+r/TCdYmmtZG8 MO6QdIRVenG+fXsFDIpPSf6Tu11LU9apNE2slPZR37EDFS6sANbgHBFZIzReEJ68zAts8/veKyQ= )
	`hquest.pro.br. 300 IN RRSIG ( DNSKEY 7 3 300 20200307124535 20200206124535 10244 hquest.pro.br. EPLFRtHmi0+rxnElpNRp8+Lz5zToabo6wcNWSwbIMMOMKeoJyzk1wxMg3y31oIFBFy2JvYuEDrmB 9IaD4ek2MNfxFXkE33BOlO95FHSeI9DugC5ode7/KPMdORz+qfvoQxfaSYhIt/8Fk5wzL5VauN69 plqnuoq471kidbDDWVbr6SQO0aCtxFUDqu+RbDCdJGSfFh0ujaNYTuyS9WSSBcvvAtkaw2L+5kJg TmqKupEegJOde+xomYnQP07iYu60drRHRkXRyol9F2xkBTf3g8R+bigvgieTqszwnVNkE/V0fc4V leAmxeR2ejHsv5sgg7Vj6fv3kUOYU/le3aANJA== )`
	RRSIG=2400 and DNSKEY=2400/SEP verifies the DNSKEY RRset
	RRSIG=10244 and DNSKEY=10244 verifies the DNSKEY RRset
	DNSKEY=10244 is now in the chain-of-trust
	Query to ns1.he.net for hquest.pro.br/A
	Error querying ns1.he.net/2001:470:100:0:0:0:0:2 for hquest.pro.br/A: 'IPv6 transport disabled'
	Received 359 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (359 bytes) ;; HEADER SECTION ;; id = 53729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20200307124535 20200206124535 10244 hquest.pro.br. Hgs3ANjJ2E1Y5h9sLK7TvRQ7CBLZyUnz2J8z9azAX47sAej7uH+3V2RNFRnoRd2IwHjbDlCRKpyE a3/Oj2Sil81Q2oPGWkDcpJgG2egyoopc/OSdhFm3LFhjBraRGDpMFDAFMrTsTgKiGoRNbwZVgyuj //5B9RF9q9gIvZ2hPlXcBOKe2j2ThHicCIO5Lm9ZYCNjYMtvezk5yvyE0pvAKBodXZ50ICgpG087 vaPLMzrgrUoNgZ/HOHxmwEVj+5cpSbLwD6eaKc49br2ZVZSrICPGkDO2q4O4fhSRQ/Idt5OpUVpe 5YsCRdg7F579SPBP2NVQ2IUA60OoPc+KXx+R+A== ) hquest.pro.br. 300 IN A 74.103.45.250 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	hquest.pro.br is authoritative for hquest.pro.br
	Found RRSIG signed by hquest.pro.br zone
	Query to ns1.he.net for hquest.pro.br/SOA
	Received 389 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (389 bytes) ;; HEADER SECTION ;; id = 34374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN RRSIG ( SOA 7 3 300 20200322064840 20200221054840 10244 hquest.pro.br. h4RDKaiFCdXSvBwd5CMGe/+2HdEkufsIVILZwWUNi5sH8I7ASXH36BqHDG8fnwS7p6IPhYcrguaw JeIpeb7/8nq6t3UVquUWk8j9x+NrnItBqZiHHxuzDVdVAfIgLrZhUrd5K4Ww7JjOlamAMxNXpFDF HNKZMvXrd9zbysjch9MRHWWizQwTPNobLaa9108g6gZN9/lOcsbYFIFoKYN2hStRGXlkBLQ9e/V2 MzGMzFxR5euo5/1jKtnYGydNA8DYrkkJqohHiO0khU66f6j3qSQAGzlS76G7KulvG4sz+I/7tAa/ jF7B+KDFIvJVQPAxEuO0bSQ5+f13gZ4EoHpFBQ== ) hquest.pro.br. 300 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2020020640 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns.hquest.pro.br for hquest.pro.br/SOA
	Error querying ns.hquest.pro.br/2001:470:c2d0:9:0:0:0:200 for hquest.pro.br/SOA: 'IPv6 transport disabled'
	Received 389 bytes from 74.103.45.250
	;; Answer received from 74.103.45.250 (389 bytes) ;; HEADER SECTION ;; id = 6941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN SOA ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN SOA ( ns.hquest.pro.br. hquest.hquest.pro.br. 2020020640 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 300 ;minimum ) hquest.pro.br. 300 IN RRSIG ( SOA 7 3 300 20200322064840 20200221054840 10244 hquest.pro.br. h4RDKaiFCdXSvBwd5CMGe/+2HdEkufsIVILZwWUNi5sH8I7ASXH36BqHDG8fnwS7p6IPhYcrguaw JeIpeb7/8nq6t3UVquUWk8j9x+NrnItBqZiHHxuzDVdVAfIgLrZhUrd5K4Ww7JjOlamAMxNXpFDF HNKZMvXrd9zbysjch9MRHWWizQwTPNobLaa9108g6gZN9/lOcsbYFIFoKYN2hStRGXlkBLQ9e/V2 MzGMzFxR5euo5/1jKtnYGydNA8DYrkkJqohHiO0khU66f6j3qSQAGzlS76G7KulvG4sz+I/7tAa/ jF7B+KDFIvJVQPAxEuO0bSQ5+f13gZ4EoHpFBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.he.net for hquest.pro.br/A
	Error querying ns1.he.net/2001:470:100:0:0:0:0:2 for hquest.pro.br/A: 'IPv6 transport disabled'
	Received 359 bytes from 216.218.130.2
	;; Answer received from 216.218.130.2 (359 bytes) ;; HEADER SECTION ;; id = 10773 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; hquest.pro.br. IN A ;; ANSWER SECTION (2 records) hquest.pro.br. 300 IN A 74.103.45.250 hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20200307124535 20200206124535 10244 hquest.pro.br. Hgs3ANjJ2E1Y5h9sLK7TvRQ7CBLZyUnz2J8z9azAX47sAej7uH+3V2RNFRnoRd2IwHjbDlCRKpyE a3/Oj2Sil81Q2oPGWkDcpJgG2egyoopc/OSdhFm3LFhjBraRGDpMFDAFMrTsTgKiGoRNbwZVgyuj //5B9RF9q9gIvZ2hPlXcBOKe2j2ThHicCIO5Lm9ZYCNjYMtvezk5yvyE0pvAKBodXZ50ICgpG087 vaPLMzrgrUoNgZ/HOHxmwEVj+5cpSbLwD6eaKc49br2ZVZSrICPGkDO2q4O4fhSRQ/Idt5OpUVpe 5YsCRdg7F579SPBP2NVQ2IUA60OoPc+KXx+R+A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	hquest.pro.br A RR has value 74.103.45.250
	Found 1 RRSIGs over A RRset
	`hquest.pro.br. 300 IN RRSIG ( A 7 3 300 20200307124535 20200206124535 10244 hquest.pro.br. Hgs3ANjJ2E1Y5h9sLK7TvRQ7CBLZyUnz2J8z9azAX47sAej7uH+3V2RNFRnoRd2IwHjbDlCRKpyE a3/Oj2Sil81Q2oPGWkDcpJgG2egyoopc/OSdhFm3LFhjBraRGDpMFDAFMrTsTgKiGoRNbwZVgyuj //5B9RF9q9gIvZ2hPlXcBOKe2j2ThHicCIO5Lm9ZYCNjYMtvezk5yvyE0pvAKBodXZ50ICgpG087 vaPLMzrgrUoNgZ/HOHxmwEVj+5cpSbLwD6eaKc49br2ZVZSrICPGkDO2q4O4fhSRQ/Idt5OpUVpe 5YsCRdg7F579SPBP2NVQ2IUA60OoPc+KXx+R+A== )`
	RRSIG=10244 and DNSKEY=10244 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hquest.pro.br at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: