DNSSEC: use RDATA directly from validated RRSIG

- previous code constructed new RRSIG and populated it with extracted
  and processed data taken from the RRSIG which was validated
- new code uses RDATA directly from the RRSIG which is validated

refs #4