Decoded locally by splitting on . and base64url-decoding. The signature is not verified — decoding only shows what a token claims, never that it is trusted.