Embeds region certificates from AWS (run go generate ./... to refresh them) - AFAIU they can only be downloaded as part of documentation.
Can be used to validate EC2 instance identity documents using the rsa/base64-encoded signature.
Special thanks to @vstakhov for sponsoring this work.