Tunnels: Validate peer RI expiration in TunnelPeerSelector

Previously, the expiration was not validated until BuildRequestor,
where the build would fail.
Old bug, but was exacerbated by recent change to KNDF.validate() to
enforce expiration at startup if the downtime was short.

router/java/src/net/i2p/router/tunnel/pool/TunnelPeerSelector.java

@@ -229,7 +229,10 @@ public abstract class TunnelPeerSelector extends ConnectChecker {
         if (ctx.commSystem().wasUnreachable(h))
             return true;
 
-        RouterInfo info = (RouterInfo) ctx.netDb().lookupLocallyWithoutValidation(h);
+        // Here, we use validation, because BuildRequestor does,
+        // so if we don't skip old routers here, it gets all the way to BuildRequestor
+        // before failing.
+        RouterInfo info = (RouterInfo) ctx.netDb().lookupLocally(h);
         if (info == null)
             return true;