in iimg/iimg.go [86:105]
func VerifyImage(img image.Image) error {
	if len(img.Tlvs) == 0 || img.Tlvs[0].Header.Type != image.IMAGE_TLV_SHA256 {
		return errors.Errorf("First TLV must be SHA256")
	}
	if err := DetectInvalidSigTlvs(img); err != nil {
		return err
	}
	if dups := GetDupSigs(img); len(dups) > 0 {
		s := "Duplicate signatures detected:"
		for _, d := range dups {
			s += fmt.Sprintf("\n    %s", d)
		}
		return errors.New(s)
	}
	return nil
}