OSSL_CMP_ITAV_get0_rootCaCert
if (!OSSL_CMP_ITAV_get0_rootCaCert(req, &rootcacert))
int OSSL_CMP_ITAV_get0_rootCaCert(const OSSL_CMP_ITAV *itav, X509 **out);