That’s the purpose of loraserver and lora-app-server, right?
There was a discussion on manually decrypting it here recently: