# `BoundedAuthorityProtocol.RoleAttestation.V1.DecodedAttestation`
[🔗](https://github.com/baselabs/bounded_authority_protocol/blob/v1.0.0/lib/bounded_authority_protocol/role_attestation/v1/decoded_attestation.ex#L1)

Closed bounded decode of one role attestation without trust evaluation.

Returned by `BoundedAuthorityProtocol.RoleAttestation.V1.decode_attestation/2` for diagnosis only; it is never a verified value.

## Fields

* `version` - always `1`.
* `attestor_key_id` - the header `kid`.
* `jti` - the attestation identifier.
* `key_id` - the subject key identifier.
* `public_key` - the subject's raw 32-byte Ed25519 public key.
* `role` - `"issuer"` or `"holder"`.
* `nbf` - the start of the window, integer Unix time in seconds.
* `exp` - the exclusive end of the window, integer Unix time in seconds.
* `verification` - always `:not_evaluated`.

# `t`

```elixir
@type t() :: %BoundedAuthorityProtocol.RoleAttestation.V1.DecodedAttestation{
  attestor_key_id: binary(),
  exp: integer(),
  jti: binary(),
  key_id: binary(),
  nbf: integer(),
  public_key: binary(),
  role: binary(),
  verification: :not_evaluated,
  version: 1
}
```

An unverified decoded role attestation.

---

*Consult [api-reference.md](api-reference.md) for complete listing*