DNSSEC Debugger - tse.jus.br

Domain Name:

Time: 2024-05-18 17:03:21 UTC

Analyzing DNSSEC problems for tse.jus.br

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 35500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for tse.jus.br/A
	Received 738 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 738 octets ;; HEADER SECTION ;; id = 62264 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 38298 13 2 9f2d4993f47b0f2751de0007d70a2754ee532fe373761154d9ea7a8cb9d8ea18 ) br. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . gQjaVJlOnu5o3PfMvRIlYgdfL1+0Zeg2tu74gi1sJumsgekkIUPbEZotrSkYtbAAtF0qvchjU9dg U/k5LKo52bj141Ott/wz5T8Y62qyq1bISXuC8f0dBeYPYR4/TnZPvGAUK6WSqHKXehTxB06FUN/H NtMe/mkIyyBVEC6JQ7alb0G7bBNohnsppdmqrKC/5Rfx1Y/LtdYrZvVob2c87pjxyiH1VppiBMcj amT7P6QX85qOvAsyncwPWmlkV2d1eRfEaTuCI6lG+T7/HuVptxzMa6/9gfpBqlvcm7GQ8r6Z0liF NU2JU9uub+/Tuctkxfj/7z43zesWWhnd+dXBlg== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 b.dns.br. 172800 IN A 200.189.41.10 c.dns.br. 172800 IN A 200.192.233.10 d.dns.br. 172800 IN A 200.219.154.10 e.dns.br. 172800 IN A 200.229.248.10 f.dns.br. 172800 IN A 200.219.159.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for br/DNSKEY
	Received 730 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 730 octets ;; HEADER SECTION ;; id = 46102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) br. 172800 IN NS a.dns.br. br. 172800 IN NS b.dns.br. br. 172800 IN NS c.dns.br. br. 172800 IN NS d.dns.br. br. 172800 IN NS e.dns.br. br. 172800 IN NS f.dns.br. br. 86400 IN DS ( 38298 13 2 9f2d4993f47b0f2751de0007d70a2754ee532fe373761154d9ea7a8cb9d8ea18 ) br. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . gQjaVJlOnu5o3PfMvRIlYgdfL1+0Zeg2tu74gi1sJumsgekkIUPbEZotrSkYtbAAtF0qvchjU9dg U/k5LKo52bj141Ott/wz5T8Y62qyq1bISXuC8f0dBeYPYR4/TnZPvGAUK6WSqHKXehTxB06FUN/H NtMe/mkIyyBVEC6JQ7alb0G7bBNohnsppdmqrKC/5Rfx1Y/LtdYrZvVob2c87pjxyiH1VppiBMcj amT7P6QX85qOvAsyncwPWmlkV2d1eRfEaTuCI6lG+T7/HuVptxzMa6/9gfpBqlvcm7GQ8r6Z0liF NU2JU9uub+/Tuctkxfj/7z43zesWWhnd+dXBlg== ) ;; ADDITIONAL SECTION (13 records) a.dns.br. 172800 IN A 200.219.148.10 a.dns.br. 172800 IN AAAA 2001:12f8:6::10 b.dns.br. 172800 IN A 200.189.41.10 b.dns.br. 172800 IN AAAA 2001:12f8:8::10 c.dns.br. 172800 IN A 200.192.233.10 c.dns.br. 172800 IN AAAA 2001:12f8:a::10 d.dns.br. 172800 IN A 200.219.154.10 d.dns.br. 172800 IN AAAA 2001:12f8:4::10 e.dns.br. 172800 IN A 200.229.248.10 e.dns.br. 172800 IN AAAA 2001:12f8:2::10 f.dns.br. 172800 IN A 200.219.159.10 f.dns.br. 172800 IN AAAA 2001:12f8:c::10 ;; { "EDNS-VERSION": 0 }
	Found child zone br

	Checking DS between . and br
	Query to j.root-servers.net for br/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 40135 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; br. IN DS ;; ANSWER SECTION (2 records) br. 86400 IN DS ( 38298 13 2 9f2d4993f47b0f2751de0007d70a2754ee532fe373761154d9ea7a8cb9d8ea18 ) br. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . gQjaVJlOnu5o3PfMvRIlYgdfL1+0Zeg2tu74gi1sJumsgekkIUPbEZotrSkYtbAAtF0qvchjU9dg U/k5LKo52bj141Ott/wz5T8Y62qyq1bISXuC8f0dBeYPYR4/TnZPvGAUK6WSqHKXehTxB06FUN/H NtMe/mkIyyBVEC6JQ7alb0G7bBNohnsppdmqrKC/5Rfx1Y/LtdYrZvVob2c87pjxyiH1VppiBMcj amT7P6QX85qOvAsyncwPWmlkV2d1eRfEaTuCI6lG+T7/HuVptxzMa6/9gfpBqlvcm7GQ8r6Z0liF NU2JU9uub+/Tuctkxfj/7z43zesWWhnd+dXBlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for br in the . zone
	DS=38298/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`br. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . gQjaVJlOnu5o3PfMvRIlYgdfL1+0Zeg2tu74gi1sJumsgekkIUPbEZotrSkYtbAAtF0qvchjU9dg U/k5LKo52bj141Ott/wz5T8Y62qyq1bISXuC8f0dBeYPYR4/TnZPvGAUK6WSqHKXehTxB06FUN/H NtMe/mkIyyBVEC6JQ7alb0G7bBNohnsppdmqrKC/5Rfx1Y/LtdYrZvVob2c87pjxyiH1VppiBMcj amT7P6QX85qOvAsyncwPWmlkV2d1eRfEaTuCI6lG+T7/HuVptxzMa6/9gfpBqlvcm7GQ8r6Z0liF NU2JU9uub+/Tuctkxfj/7z43zesWWhnd+dXBlg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=38298/SHA-256 is now in the chain-of-trust
	`br. 86400 IN DS ( 38298 13 2 9f2d4993f47b0f2751de0007d70a2754ee532fe373761154d9ea7a8cb9d8ea18 )`
	Query to d.dns.br for br/DNSKEY
	Received 289 bytes from 200.219.154.10
	;; Response received from [200.219.154.10] 289 octets ;; HEADER SECTION ;; id = 2094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; br. IN DNSKEY ;; ANSWER SECTION (3 records) br. 21600 IN DNSKEY ( 257 3 13 VWbLmSaCrrQ0Z4ohG46qa5DCVTx/z6fFU560Rv8JRTKH/CzNGFpqE7F5KCxT9hnduoDJEi0Z5kgH 66j1ePF9pQ== ) ; Key ID = 38298 br. 21600 IN DNSKEY ( 256 3 13 rkwnkBv/lnZEMb1ClLhBaqKkBvmiCvv2L591UkwfzZu/gZDD5Ko1ISuVR0U9sAl1c/RtCFLbBE8P C5iEGM5xYw== ) ; Key ID = 63547 br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20240526120000 20240505120000 38298 br. QqAjvil+voxAHzYovbfy/hJscRyYEzcSky6QIGz6NaXWPJbfpnDZ5DFXJT4r5CWHfJZqxPWY+PCo 6jgJYJHPdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for br
	`br. 21600 IN DNSKEY ( 257 3 13 VWbLmSaCrrQ0Z4ohG46qa5DCVTx/z6fFU560Rv8JRTKH/CzNGFpqE7F5KCxT9hnduoDJEi0Z5kgH 66j1ePF9pQ== ) ; Key ID = 38298`
	`br. 21600 IN DNSKEY ( 256 3 13 rkwnkBv/lnZEMb1ClLhBaqKkBvmiCvv2L591UkwfzZu/gZDD5Ko1ISuVR0U9sAl1c/RtCFLbBE8P C5iEGM5xYw== ) ; Key ID = 63547`
	DNSKEY=38298/SEP is now in the chain-of-trust
	DS=38298/SHA-256 verifies DNSKEY=38298/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`br. 21600 IN RRSIG ( DNSKEY 13 1 21600 20240526120000 20240505120000 38298 br. QqAjvil+voxAHzYovbfy/hJscRyYEzcSky6QIGz6NaXWPJbfpnDZ5DFXJT4r5CWHfJZqxPWY+PCo 6jgJYJHPdQ== )`
	RRSIG=38298 and DNSKEY=38298/SEP verifies the DNSKEY RRset
	DNSKEY=63547 is now in the chain-of-trust
	Query to c.dns.br for tse.jus.br/A
	Received 329 bytes from 200.192.233.10
	;; Response received from [200.192.233.10] 329 octets ;; HEADER SECTION ;; id = 58441 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tse.jus.br. 3600 IN NS ns-1088.awsdns-08.org. tse.jus.br. 3600 IN NS ns-850.awsdns-42.net. tse.jus.br. 3600 IN NS ns-1839.awsdns-37.co.uk. tse.jus.br. 3600 IN NS ns-454.awsdns-56.com. tse.jus.br. 3600 IN DS ( 63597 13 2 003364004df47fcdf76590e419e958960ec9b8ca40ed766f91a5f4de5ea01545 ) tse.jus.br. 3600 IN RRSIG ( DS 13 3 3600 20240528120111 20240514110111 35149 jus.br. 6B8QLMFRTadi5i995x+FseELC00j0CHk5NQ20T62/UZOBafciCbFBN6LAW8yIbmex1e+70p0OOjM VGJ9a/VjxA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.dns.br for jus.br/DNSKEY
	Received 217 bytes from 200.219.159.10
	;; Response received from [200.219.159.10] 217 octets ;; HEADER SECTION ;; id = 46975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jus.br. IN DNSKEY ;; ANSWER SECTION (2 records) jus.br. 21600 IN DNSKEY ( 257 3 13 JceM8hKiVEv8NeFh66mtaiZTrQQFgC3MciUiiIH1hU7PIPHX6L03v5GIsxKrVeAkyJdvAGvQhEOw pXS0DkJFgg== ) ; Key ID = 35149 jus.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20240601170008 20240518160008 35149 jus.br. dKAHEWF2qqQ41WTCTQB9fbhSX3TFciP22LFmej+y95XjrfkaPqRL3Qxe36ni6FSI114Jbebe+X8G dMGmciDciA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone jus.br
	Attempting to learn nameservers for jus.br
	Query to b.dns.br for jus.br/NS
	Received 239 bytes from 200.189.41.10
	;; Response received from [200.189.41.10] 239 octets ;; HEADER SECTION ;; id = 26264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jus.br. IN NS ;; ANSWER SECTION (7 records) jus.br. 172800 IN NS e.dns.br. jus.br. 172800 IN NS f.dns.br. jus.br. 172800 IN NS a.dns.br. jus.br. 172800 IN NS c.dns.br. jus.br. 172800 IN NS d.dns.br. jus.br. 172800 IN NS b.dns.br. jus.br. 172800 IN RRSIG ( NS 13 2 172800 20240601170008 20240518160008 35149 jus.br. B2hR+D6OpdZeTNz6RxkQ1u1msY4xm7hQ1Pq9eKmJEM+GWcq8hzT1wYOhAxYO7L7VV4JpqpLzaHwo IeJXEJMBkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found jus.br nameservers: e.dns.br, f.dns.br, a.dns.br, c.dns.br, d.dns.br, b.dns.br

jus.br

	Checking DS between br and jus.br
	Query to d.dns.br for jus.br/DS
	Received 181 bytes from 200.219.154.10
	;; Response received from [200.219.154.10] 181 octets ;; HEADER SECTION ;; id = 46429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jus.br. IN DS ;; ANSWER SECTION (2 records) jus.br. 21600 IN DS ( 35149 13 2 da0f7e1ebdf326ff65df3fee4f3a1951a964bef84ca846265ac94f922f08c5c2 ) jus.br. 21600 IN RRSIG ( DS 13 2 21600 20240531121010 20240517111010 63547 br. iGVnVw/847tkgxaSCJb0u+WamW4k10T+G+mJcVCvAb5KShsKdpe0YvKMCmFzO5u5+i9sKVelZx16 m7rsdGWt0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jus.br in the br zone
	DS=35149/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`jus.br. 21600 IN RRSIG ( DS 13 2 21600 20240531121010 20240517111010 63547 br. iGVnVw/847tkgxaSCJb0u+WamW4k10T+G+mJcVCvAb5KShsKdpe0YvKMCmFzO5u5+i9sKVelZx16 m7rsdGWt0g== )`
	RRSIG=63547 and DNSKEY=63547 verifies the DS RRset
	DS=35149/SHA-256 is now in the chain-of-trust
	`jus.br. 21600 IN DS ( 35149 13 2 da0f7e1ebdf326ff65df3fee4f3a1951a964bef84ca846265ac94f922f08c5c2 )`
	Query to b.dns.br for jus.br/DNSKEY
	Received 217 bytes from 200.189.41.10
	;; Response received from [200.189.41.10] 217 octets ;; HEADER SECTION ;; id = 38874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jus.br. IN DNSKEY ;; ANSWER SECTION (2 records) jus.br. 21600 IN DNSKEY ( 257 3 13 JceM8hKiVEv8NeFh66mtaiZTrQQFgC3MciUiiIH1hU7PIPHX6L03v5GIsxKrVeAkyJdvAGvQhEOw pXS0DkJFgg== ) ; Key ID = 35149 jus.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20240601170008 20240518160008 35149 jus.br. dKAHEWF2qqQ41WTCTQB9fbhSX3TFciP22LFmej+y95XjrfkaPqRL3Qxe36ni6FSI114Jbebe+X8G dMGmciDciA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for jus.br
	`jus.br. 21600 IN DNSKEY ( 257 3 13 JceM8hKiVEv8NeFh66mtaiZTrQQFgC3MciUiiIH1hU7PIPHX6L03v5GIsxKrVeAkyJdvAGvQhEOw pXS0DkJFgg== ) ; Key ID = 35149`
	DNSKEY=35149/SEP is now in the chain-of-trust
	DS=35149/SHA-256 verifies DNSKEY=35149/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`jus.br. 21600 IN RRSIG ( DNSKEY 13 2 21600 20240601170008 20240518160008 35149 jus.br. dKAHEWF2qqQ41WTCTQB9fbhSX3TFciP22LFmej+y95XjrfkaPqRL3Qxe36ni6FSI114Jbebe+X8G dMGmciDciA== )`
	RRSIG=35149 and DNSKEY=35149/SEP verifies the DNSKEY RRset
	Query to e.dns.br for tse.jus.br/A
	Received 329 bytes from 200.229.248.10
	;; Response received from [200.229.248.10] 329 octets ;; HEADER SECTION ;; id = 12298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tse.jus.br. 3600 IN NS ns-454.awsdns-56.com. tse.jus.br. 3600 IN NS ns-1839.awsdns-37.co.uk. tse.jus.br. 3600 IN NS ns-1088.awsdns-08.org. tse.jus.br. 3600 IN NS ns-850.awsdns-42.net. tse.jus.br. 3600 IN DS ( 63597 13 2 003364004df47fcdf76590e419e958960ec9b8ca40ed766f91a5f4de5ea01545 ) tse.jus.br. 3600 IN RRSIG ( DS 13 3 3600 20240528120111 20240514110111 35149 jus.br. 6B8QLMFRTadi5i995x+FseELC00j0CHk5NQ20T62/UZOBafciCbFBN6LAW8yIbmex1e+70p0OOjM VGJ9a/VjxA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.dns.br for tse.jus.br/DNSKEY
	Received 329 bytes from 200.189.41.10
	;; Response received from [200.189.41.10] 329 octets ;; HEADER SECTION ;; id = 23216 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tse.jus.br. 3600 IN NS ns-1088.awsdns-08.org. tse.jus.br. 3600 IN NS ns-1839.awsdns-37.co.uk. tse.jus.br. 3600 IN NS ns-454.awsdns-56.com. tse.jus.br. 3600 IN NS ns-850.awsdns-42.net. tse.jus.br. 3600 IN DS ( 63597 13 2 003364004df47fcdf76590e419e958960ec9b8ca40ed766f91a5f4de5ea01545 ) tse.jus.br. 3600 IN RRSIG ( DS 13 3 3600 20240528120111 20240514110111 35149 jus.br. 6B8QLMFRTadi5i995x+FseELC00j0CHk5NQ20T62/UZOBafciCbFBN6LAW8yIbmex1e+70p0OOjM VGJ9a/VjxA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone tse.jus.br

tse.jus.br

	Checking DS between jus.br and tse.jus.br
	Query to c.dns.br for tse.jus.br/DS
	Received 189 bytes from 200.192.233.10
	;; Response received from [200.192.233.10] 189 octets ;; HEADER SECTION ;; id = 59936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN DS ;; ANSWER SECTION (2 records) tse.jus.br. 3600 IN DS ( 63597 13 2 003364004df47fcdf76590e419e958960ec9b8ca40ed766f91a5f4de5ea01545 ) tse.jus.br. 3600 IN RRSIG ( DS 13 3 3600 20240528120111 20240514110111 35149 jus.br. 6B8QLMFRTadi5i995x+FseELC00j0CHk5NQ20T62/UZOBafciCbFBN6LAW8yIbmex1e+70p0OOjM VGJ9a/VjxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for tse.jus.br in the jus.br zone
	DS=63597/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`tse.jus.br. 3600 IN RRSIG ( DS 13 3 3600 20240528120111 20240514110111 35149 jus.br. 6B8QLMFRTadi5i995x+FseELC00j0CHk5NQ20T62/UZOBafciCbFBN6LAW8yIbmex1e+70p0OOjM VGJ9a/VjxA== )`
	RRSIG=35149 and DNSKEY=35149/SEP verifies the DS RRset
	DS=63597/SHA-256 is now in the chain-of-trust
	`tse.jus.br. 3600 IN DS ( 63597 13 2 003364004df47fcdf76590e419e958960ec9b8ca40ed766f91a5f4de5ea01545 )`
	Query to ns-454.awsdns-56.com for tse.jus.br/DNSKEY
	Received 385 bytes from 205.251.193.198
	;; Response received from [205.251.193.198] 385 octets ;; HEADER SECTION ;; id = 62250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN DNSKEY ;; ANSWER SECTION (4 records) tse.jus.br. 3600 IN DNSKEY ( 256 3 13 WKxp36ETMf00VprnyPGaTt336+PxHl+EChtEqC0pNo6GSsX1O/05w6/QQy5qRmmruggEkrMbnSft 3/FIunCNug== ) ; Key ID = 22597 tse.jus.br. 3600 IN DNSKEY ( 256 3 13 mbGaOELjjogzSSamTtZZduW15EGbHwKlyRF8mzfOgJmM6bGSSC4mxSqcq5BA5Vfugfwj6bkXS5ov vLZaj+6Pgg== ) ; Key ID = 15872 tse.jus.br. 3600 IN DNSKEY ( 257 3 13 DBqF9Q1qP3TAWRCoDRpz2afMEY7hoDBLS84F2UshpNlbgcOMII0swvoIY9aSx9uABt9Eqzfq7dkm 78ocdGKnUQ== ) ; Key ID = 63597 tse.jus.br. 3600 IN RRSIG ( DNSKEY 13 3 3600 20240519020000 20240518150000 63597 tse.jus.br. aXVuIeXuwJIfm5TUn/OuEy0I9L1+Splb3GNOeDOVNe51Yv6Ioc/HcWhHSXy2zRzbzNxfLllF/b20 VP9Vy57N5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for tse.jus.br
	`tse.jus.br. 3600 IN DNSKEY ( 256 3 13 WKxp36ETMf00VprnyPGaTt336+PxHl+EChtEqC0pNo6GSsX1O/05w6/QQy5qRmmruggEkrMbnSft 3/FIunCNug== ) ; Key ID = 22597`
	`tse.jus.br. 3600 IN DNSKEY ( 256 3 13 mbGaOELjjogzSSamTtZZduW15EGbHwKlyRF8mzfOgJmM6bGSSC4mxSqcq5BA5Vfugfwj6bkXS5ov vLZaj+6Pgg== ) ; Key ID = 15872`
	`tse.jus.br. 3600 IN DNSKEY ( 257 3 13 DBqF9Q1qP3TAWRCoDRpz2afMEY7hoDBLS84F2UshpNlbgcOMII0swvoIY9aSx9uABt9Eqzfq7dkm 78ocdGKnUQ== ) ; Key ID = 63597`
	DNSKEY=63597/SEP is now in the chain-of-trust
	DS=63597/SHA-256 verifies DNSKEY=63597/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`tse.jus.br. 3600 IN RRSIG ( DNSKEY 13 3 3600 20240519020000 20240518150000 63597 tse.jus.br. aXVuIeXuwJIfm5TUn/OuEy0I9L1+Splb3GNOeDOVNe51Yv6Ioc/HcWhHSXy2zRzbzNxfLllF/b20 VP9Vy57N5Q== )`
	RRSIG=63597 and DNSKEY=63597/SEP verifies the DNSKEY RRset
	DNSKEY=22597 is now in the chain-of-trust
	DNSKEY=15872 is now in the chain-of-trust
	Query to ns-454.awsdns-56.com for tse.jus.br/A
	Received 177 bytes from 205.251.193.198
	;; Response received from [205.251.193.198] 177 octets ;; HEADER SECTION ;; id = 14377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. d18Mn4ZKKru99BXOFWhf9bwmL2wD9OQwbPt5Slr7xqaTd3RyAFv1jQlpzoviKwrvDbGFi/GyGCUR 3i4TmlWzrA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-454.awsdns-56.com is authoritative for tse.jus.br
	Found RRSIG signed by tse.jus.br zone
	Query to ns-850.awsdns-42.net for tse.jus.br/SOA
	Received 230 bytes from 205.251.195.82
	;; Response received from [205.251.195.82] 230 octets ;; HEADER SECTION ;; id = 55726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN SOA ;; ANSWER SECTION (2 records) tse.jus.br. 300 IN SOA ( ns-1088.awsdns-08.org. awsdns-hostmaster.amazon.com. 2024012603 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tse.jus.br. 300 IN RRSIG ( SOA 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. Ew7Jm2StDR0sZ5FeTPIaaH5mR0sURIU5YL5/L8JZs+RdODWdhOF+vuGDCKLiDGdrGteZ7+WFZoOu xEq1LrXSMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1088.awsdns-08.org for tse.jus.br/SOA
	Received 230 bytes from 205.251.196.64
	;; Response received from [205.251.196.64] 230 octets ;; HEADER SECTION ;; id = 6392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN SOA ;; ANSWER SECTION (2 records) tse.jus.br. 300 IN SOA ( ns-1088.awsdns-08.org. awsdns-hostmaster.amazon.com. 2024012603 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tse.jus.br. 300 IN RRSIG ( SOA 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. bNXyHV8MutcGqOe4sO8XOqgM9frYlUMoBCQqTbkzEapArAbwd175HV8zRwc3I6oUuzMkMf5kOjei OjTJkfK+yg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-1839.awsdns-37.co.uk for tse.jus.br/SOA
	Received 230 bytes from 205.251.199.47
	;; Response received from [205.251.199.47] 230 octets ;; HEADER SECTION ;; id = 63975 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN SOA ;; ANSWER SECTION (2 records) tse.jus.br. 300 IN SOA ( ns-1088.awsdns-08.org. awsdns-hostmaster.amazon.com. 2024012603 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) tse.jus.br. 300 IN RRSIG ( SOA 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. dQ696VYXvzVBA1nlnBwJTPeTQi4PnX/0PC8iEFz5EzEodfFusOKWJyxF6BnAvWghR4p2Ar3CaDKq 5m0tkiXVGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-454.awsdns-56.com for tse.jus.br/A
	Received 177 bytes from 205.251.193.198
	;; Response received from [205.251.193.198] 177 octets ;; HEADER SECTION ;; id = 62714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. XfdGWtfjh45seMWq/np/0bgkPJNpF/Kf+HiCTYXVVP5aBfbMrhHQ9u+5YHWD14ys+bZ2FNmpRAsE bkvxSU0ZMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tse.jus.br A RR has value 8.242.50.20
	tse.jus.br A RR has value 187.32.204.20
	Found 1 RRSIGs over A RRset
	`tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. XfdGWtfjh45seMWq/np/0bgkPJNpF/Kf+HiCTYXVVP5aBfbMrhHQ9u+5YHWD14ys+bZ2FNmpRAsE bkvxSU0ZMQ== )`
	RRSIG=15872 and DNSKEY=15872 verifies the A RRset

tse.jus.br

	Query to ns-1088.awsdns-08.org for tse.jus.br/A
	Received 177 bytes from 205.251.196.64
	;; Response received from [205.251.196.64] 177 octets ;; HEADER SECTION ;; id = 12290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. kk3JLEiz8GYZjTxGOwhL1kYcP0d3zJdPuUC2leEkj2HskZ5YHVRwVk2+hxHWu7mdwrqvFMpyX5xB EZU4BythLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1088.awsdns-08.org is authoritative for tse.jus.br
	Found RRSIG signed by tse.jus.br zone
	Query to ns-1088.awsdns-08.org for tse.jus.br/A
	Received 177 bytes from 205.251.196.64
	;; Response received from [205.251.196.64] 177 octets ;; HEADER SECTION ;; id = 45094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. tw8pr1QlpYcbEwD3LZmAM3ktBHZx6SsazSLWjWM8btZQxzgpGESe/essFTnFyfuXmC980oY6rHyo 3R6MFHPQyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tse.jus.br A RR has value 187.32.204.20
	tse.jus.br A RR has value 8.242.50.20
	Found 1 RRSIGs over A RRset
	`tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. tw8pr1QlpYcbEwD3LZmAM3ktBHZx6SsazSLWjWM8btZQxzgpGESe/essFTnFyfuXmC980oY6rHyo 3R6MFHPQyA== )`
	RRSIG=15872 and DNSKEY=15872 verifies the A RRset

tse.jus.br

	Query to ns-1839.awsdns-37.co.uk for tse.jus.br/A
	Received 177 bytes from 205.251.199.47
	;; Response received from [205.251.199.47] 177 octets ;; HEADER SECTION ;; id = 8027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. 5VS3KBbjYmUvT0MJEKqb6Rde+GdSMKQ7SHKlLzwVPFNTwfM6BHRZ403W7WOSQJgbQA/6hKvRIHtP Hfx00M1N/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-1839.awsdns-37.co.uk is authoritative for tse.jus.br
	Found RRSIG signed by tse.jus.br zone
	Query to ns-1839.awsdns-37.co.uk for tse.jus.br/A
	Received 177 bytes from 205.251.199.47
	;; Response received from [205.251.199.47] 177 octets ;; HEADER SECTION ;; id = 11951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. Ml68W5EOr7S8CflZTJesc6BBKrWfI2L8C/VSyQdOXAb8HZhXGNyq7MBzRChhWfINtheQcludzJ84 i/cGeT6HsQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tse.jus.br A RR has value 8.242.50.20
	tse.jus.br A RR has value 187.32.204.20
	Found 1 RRSIGs over A RRset
	`tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. Ml68W5EOr7S8CflZTJesc6BBKrWfI2L8C/VSyQdOXAb8HZhXGNyq7MBzRChhWfINtheQcludzJ84 i/cGeT6HsQ== )`
	RRSIG=15872 and DNSKEY=15872 verifies the A RRset

tse.jus.br

	Query to ns-850.awsdns-42.net for tse.jus.br/A
	Received 177 bytes from 205.251.195.82
	;; Response received from [205.251.195.82] 177 octets ;; HEADER SECTION ;; id = 29978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. YYbPQdwjz3gpeocTpmSqKhPoEzPxXB8vHPYEsfm5ml3fBUuWAy+P18Ey5zePzujacxVEmfqIVcf4 a4gd7PeUfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-850.awsdns-42.net is authoritative for tse.jus.br
	Found RRSIG signed by tse.jus.br zone
	Query to ns-850.awsdns-42.net for tse.jus.br/A
	Received 177 bytes from 205.251.195.82
	;; Response received from [205.251.195.82] 177 octets ;; HEADER SECTION ;; id = 3345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; tse.jus.br. IN A ;; ANSWER SECTION (3 records) tse.jus.br. 300 IN A 187.32.204.20 tse.jus.br. 300 IN A 8.242.50.20 tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. gu/eBssbzVys+SghyxxGdEd9q+ec3g6DZNz+IpbxrO1aQlQfg35lC5W6eAnk6HeR/yhlOMvzsbjk 8hsYVHF6CA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	tse.jus.br A RR has value 187.32.204.20
	tse.jus.br A RR has value 8.242.50.20
	Found 1 RRSIGs over A RRset
	`tse.jus.br. 300 IN RRSIG ( A 13 3 300 20240518180822 20240518160322 15872 tse.jus.br. gu/eBssbzVys+SghyxxGdEd9q+ec3g6DZNz+IpbxrO1aQlQfg35lC5W6eAnk6HeR/yhlOMvzsbjk 8hsYVHF6CA== )`
	RRSIG=15872 and DNSKEY=15872 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test tse.jus.br at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: