Quite simple in the end. Of course, this also works with other CAs as well.
[code]
openssl ca -config openssl.cnf -in /root/careq.req -extensions v3_ca
[/code]