A signed registry payload: the registry value + a detached base64 signature over its canonical bytes.
base64 ECDSA-P256/SHA-256 signature over canonicalBytes(registry)
Optional
A signed registry payload: the registry value + a detached base64 signature over its canonical bytes.