OSSL_CMP_ITAV_get0_rootCaKeyUpdate
if (!OSSL_CMP_ITAV_get0_rootCaKeyUpdate(itav, newWithNew,
int OSSL_CMP_ITAV_get0_rootCaKeyUpdate(const OSSL_CMP_ITAV *itav,