pkg/54048: pkg_admin unable to verify signature

[tiago%seco.ws@localhost]

>Number:         54048
>Category:       pkg
>Synopsis:       pkg_admin unable to verify signature
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Mar 08 19:25:00 +0000 2019
>Originator:     Tiago Seco
>Release:        NetBSD 8.0 (GENERIC)
>Organization:
>Environment:
NetBSD localhost 8.0 NetBSD 8.0 (GENERIC) #0: Tue Jul 17 14:59:51 UTC 2018  mkrepro%mkrepro.NetBSD.org@localhost:/usr/src/sys/arch/amd64/compile/GENERIC amd64
>Description:
pkg_admin fetch-pkg-vulnerabilities -s fails when verifying the signature with the following:

Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
pkg_admin: unable to verify signature: Signature key id 706b677372632d73 not found

--

gpg settings and keys:
localhost# gpg -k
/root/.gnupg/pubring.gpg
------------------------
pub   4096R/9F80359C 2018-04-19 [expires: 2019-05-14]
uid                  pkgsrc Security Team <pkgsrc-security%pkgsrc.org@localhost>
uid                  pkgsrc Security Team <pkgsrc-security%NetBSD.org@localhost>
sub   4096R/FE41A229 2018-04-19 [expires: 2019-05-14]


localhost#  pkg_admin  config-var GPG
/usr/pkg/bin/gpg
>How-To-Repeat:
curl -sS https://pkgsrc.org/pkgsrc-security_pgp_key.asc | gpg --import
pkg_admin fetch-pkg-vulnerabilities -s
>Fix: