Mongosync supports CA file via the connection URI: https://www.mongodb.com/docs/upcoming/reference/connection-string/#mongodb-urioption-urioption.tlsCAFile
for example something like this should work:
mongodb://$USER:$PASS@$HOST:27017/?tls=true&tlsCAFile=tmp/my-ca-bundle.pem