Does not take BGPSec[1] into account, just RPKI.

[1]: https://en.wikipedia.org/wiki/BGPsec