brp-99-pesign fails for fwupd package.

Error log:
[  351s] + /usr/lib/rpm/brp-suse
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-05-permissions
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-15-strip-debug
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-25-symlink
[  351s] INFO: relinking /usr/libexec/fwupd/efi/fwupdaa64.efi.signed ->
fwupdaa64.efi (was /usr/libexec/fwupd/efi/fwupdaa64.efi)
[  351s] INFO: relinking /usr/sbin/rcfwupd-offline-update -> service (was
/usr/sbin/service)
[  351s] INFO: relinking /usr/sbin/rcfwupd-refresh -> service (was
/usr/sbin/service)
[  351s] INFO: relinking /usr/sbin/rcfwupd -> service (was /usr/sbin/service)
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-40-rootfs
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-45-tcl
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-75-ar
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-99-compress-vmlinux
[  351s] calling /usr/lib/rpm/brp-suse.d/brp-99-pesign
[  351s] Using signing certificate
/home/abuild/rpmbuild/SOURCES/_projectcert.crt
[  351s] Creating /home/abuild/rpmbuild/OTHER/fwupd.cpio.rsasign
[  352s] cms_pe_common.c:generate_digest:276 PE section ".data" has invalid
address
[  352s] /usr/lib/rpm/brp-suse.d/brp-99-pesign: line 118: 25548 Segmentation
fault      pesign --certdir="$nss_db" -i "$f" -E $dest

Latest build log:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:ARM/fwupd/standard/aarch64