missing root certificate, SMIME spanish government

[Uwe Brauer]

Hi 

I am not sure that my email arrived via gmane.

I received an smime signed email from a colleague. It contains a public
key from 
https://www.sede.fnmt.gob.es/descargas/certificados-raiz-de-la-fnmt

Basically the Spanish government.

I installed all its root certificates in 

 /usr/share/ca-certificates/Spain

And run 

sudo dpkg-reconfigure ca-certificates

However when I run 
gpgsm --encrypt -r 0xC575B0D4 test.txt  

I obtain 

pgsm: issuer certificate {B1D44FC42379FA440509C6EB39CFE835B0B82064} not found using authorityKeyIdentifier
gpgsm: looking up issuer from the Dirmngr cache
gpgsm: DBG: chan_5 -> LOOKUP --cache-only #/CN=AC%20FNMT%20Usuarios,OU=Ceres,O=FNMT-RCM,C=ES
gpgsm: DBG: chan_5 <- ERR 167772187 Not found <Dirmngr>
gpgsm: number of matching certificates: 0
gpgsm: dirmngr cache-only key lookup failed: Not found
gpgsm: looking up issuer at external location
gpgsm: DBG: chan_5 -> LOOKUP /CN=AC%20FNMT%20Usuarios,OU=Ceres,O=FNMT-RCM,C=ES
gpgsm: DBG: chan_5 <- ERR 167772187 Not found <Dirmngr>
gpgsm: number of issuers matching: 0
gpgsm: external key lookup failed: Not found
gpgsm: issuer certificate not found
gpgsm: issuer certificate: #/CN=AC FNMT Usuarios,OU=Ceres,O=FNMT-RCM,C=ES
gpgsm: validation model used: shell
gpgsm: can't encrypt to '0xC575B0D4': Missing issuer certificate
secmem usage: 0/16384 bytes in 0 blocks

BTW encryption with that public key works in Thunderbird, and I looked
up its root certificate, I can't see anything I don't have


I start to be desperate, what do I miss?

Thanks 

Uwe Brauer 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5025 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20190531/a536a6e8/attachment.bin>