Based on my own experience with certification (not of a ROS system), i think it would be very cost-prohibitive to certify a ROS 1-based system.
You might have an easier time with a ROS 2-based system. The software development process has been better tracked.