core: For a failed verification return the sig's fingerprint.