You don't do DNSSEC validation.

(In any case not for this domainname)