Refer to the exhibit. BGPsec is implemented on R1. R2. R3. and R4 BGP peering is established between neighboring autonomous systems. Which statement about implementation is true?

BGPsec adds a BGPsec attribute sequence for cryptographic validation, not an additional AS path value in the traditional sense, though it validates the AS path information.

BGPsec primarily focuses on securing inter-AS (eBGP) communications and does not inherently append a `local-as` community to iBGP updates for security purposes; communities are for policy marking.

BGPsec's purpose is path validation, not appending a `no export` community to BGP updates, which is used for preventing routes from being advertised outside of a specific AS or confederation.

BGPsec works by adding a BGPsec attribute sequence to eBGP updates. This attribute contains cryptographic information, including digital signatures of the AS path, which allows receivers to verify the authenticity and integrity of the BGP route announcement and the AS path attributes.