use rpki::data_model::roa::RoaObject;

#[test]
fn verify_roa_cms_signature_with_embedded_ee_cert() {
    let der = std::fs::read("tests/fixtures/repository/rpki.cernet.net/repo/cernet/0/AS4538.roa")
        .expect("read ROA fixture");
    let roa = RoaObject::decode_der(&der).expect("decode roa");
    roa.signed_object
        .verify_signature()
        .expect("ROA CMS signature should verify with embedded EE cert");
}