From olivier.bonaventure@uclouvain.be Mon Jun 1 02:04:15 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 55EBB3A6CAB for ; Mon, 1 Jun 2009 02:04:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.185 X-Spam-Level: X-Spam-Status: No, score=-4.185 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Om9wPPlB9uhE for ; Mon, 1 Jun 2009 02:04:14 -0700 (PDT) Received: from smtp3.sgsi.ucl.ac.be (smtpout.sgsi.ucl.ac.be [130.104.5.77]) by core3.amsl.com (Postfix) with ESMTP id 19D4B3A69C3 for ; Mon, 1 Jun 2009 02:04:13 -0700 (PDT) Received: from mbpobo.local (ip-83-134-201-246.dsl.scarlet.be [83.134.201.246]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: obonaventure@smtp3.sgsi.ucl.ac.be) by smtp3.sgsi.ucl.ac.be (Postfix) with ESMTPSA id 9D7DD1C592D; Mon, 1 Jun 2009 11:04:02 +0200 (CEST) X-DKIM: Sendmail DKIM Filter v2.8.2 smtp3.sgsi.ucl.ac.be 9D7DD1C592D DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1243847042; bh=1mwhLUyeqlz4pZRBZXUjoemDt6EgtalShuEac+VDCFU=; h=Message-ID:Date:From:Reply-To:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=LiRKOjFfI5qfX8CrXio1nZQktRXWenmBfgMflO6wKAUY6ntbdTt53aBg5T2A6DSVH ooe7HVKtptAAYPHwqhXPcLJaltW7IPyMaw/NhGDLVCin489IqwXkrB0Y2IfYzcVK4Z ncfnMnOVzwz8iakfU4kXHKOa2sBNu+gSdevfhtC8= Message-ID: <4A239982.2080907@uclouvain.be> Date: Mon, 01 Jun 2009 11:04:02 +0200 From: Olivier Bonaventure User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: Dino Farinacci References: In-Reply-To: X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.1 X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: 9D7DD1C592D.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: olivier.bonaventure@uclouvain.be X-SGSI-Spam-Status: No Cc: lisp@ietf.org Subject: Re: [lisp] Can I get opinions? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Olivier.Bonaventure@uclouvain.be List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 09:04:15 -0000 Dino, > Since the list has brought up packet formats, I would like to suggest > this packet format change for draft-ietf-lisp-02.txt (about to release > draft-ietf-lisp-01.txt): > > +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > L / | Locator Reach Bits | > I +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > S \ |S|E|rsvd-flags | Nonce | > P +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ > > The E-bit is for the echo-nonce idea that Andrew Partan and Noel Chiappa > came up with. We will document it relatively soon. I'm doing an > implementation of it right now to see how it works. > > What we get from the previous version: > > 1) 32 loc-reach-bits rather than 31. 31 or 32 bits is the same. I'm still in favor of the versioning solution proposed by Luigi. The locator reach bits only cover the case where mapping changes when a RLOC becomes unreachable. The versionning approach is more generic as it is applicable also for other changes in the mapping. > 2) Set aside flag bits for future use. This is important for the evolution of the protocol. > 3) Settling for a 24-bit nonce rather than a 32-bit nonce. But this is > only in the data packet header and not in the nonce that is carried in > UDP port 4342. That nonce remains at 32 bits. We still need to document the exact usage of the 24 bits nonce in data encapsulated packets. Olivier -- http://inl.info.ucl.ac.be , UCLouvain, Belgium From hartmans@mit.edu Mon Jun 1 09:25:31 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1CA0E28C246 for ; Mon, 1 Jun 2009 09:25:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 94o5Jcr+M+hH for ; Mon, 1 Jun 2009 09:25:30 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 300C93A691A for ; Mon, 1 Jun 2009 09:25:30 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 7F219401C; Mon, 1 Jun 2009 12:25:24 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 01 Jun 2009 12:25:24 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [lisp] How blocked on versioning and PMTU are we? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 16:25:31 -0000 There has been a lot of discussion of the LISP header on the list. If I'm reading things correctly, * There appears to be consensus that we're marking part of the control packet header reserved. * Dino has proposed a new header format. A few people have agreed that Dino's format is a step forward. However we have two related open issues: 1) PMTU handling--do we need reassembly/other PMTU information in the header 2) map versioning Question to those who want to see changes related to PMTU or map versioning. Is it OK for Dino to go ahead and make the change he proposed or do we need to block on resolution of these issues? If we do change the header now rather than blocking on these two issues, we cannot later use arguments about how recently we've changed the header or about not wanting to introduce churn as arguments against PMTU or map versioning. As a warning, I do not yet understand the map versioning issue well enough to make a consensus call. One of the things I don't understand about that issue is whether there has been enough discussion that it would be reasonable to make a consensus call. I do think I understand the PMTU issue well enough to believe that it has not been sufficiently discussed in this forum, although I understand that it has been discussed prior to this working group being formed at length. From jmh@joelhalpern.com Mon Jun 1 09:41:59 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 64D323A6ADE for ; Mon, 1 Jun 2009 09:41:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.2 X-Spam-Level: X-Spam-Status: No, score=-3.2 tagged_above=-999 required=5 tests=[AWL=0.400, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vR1HnPItDloo for ; Mon, 1 Jun 2009 09:41:58 -0700 (PDT) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 9D4163A70AA for ; Mon, 1 Jun 2009 09:41:58 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 28E924301C0 for ; Mon, 1 Jun 2009 09:41:59 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.100] (pool-71-161-52-172.clppva.btas.verizon.net [71.161.52.172]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 9F21B430158 for ; Mon, 1 Jun 2009 09:41:58 -0700 (PDT) Message-ID: <4A2404D0.9080406@joelhalpern.com> Date: Mon, 01 Jun 2009 12:41:52 -0400 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: lisp@ietf.org References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [lisp] How blocked on versioning and PMTU are we? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 16:41:59 -0000 Assuming, as you state below, that we agree taht we may change the header yet again, then I think adopting Dino's proposal at least for now is a good idea. We need to get more discussion of at least the versioning (even after reviewing that draft, I am town as to whether it is a good idea or a bad idea.) Yours, Joel Sam Hartman wrote: > > There has been a lot of discussion of the LISP header on the list. > > If I'm reading things correctly, > > * There appears to be consensus that we're marking part of the control > packet header reserved. > > * Dino has proposed a new header format. > > A few people have agreed that Dino's format is a step forward. > However we have two related open issues: > > 1) PMTU handling--do we need reassembly/other PMTU information in the header > > 2) map versioning > > Question to those who want to see changes related to PMTU or map > versioning. Is it OK for Dino to go ahead and make the change he > proposed or do we need to block on resolution of these issues? > > If we do change the header now rather than blocking on these two > issues, we cannot later use arguments about how recently we've changed > the header or about not wanting to introduce churn as arguments > against PMTU or map versioning. > > As a warning, I do not yet understand the map versioning issue well > enough to make a consensus call. One of the things I don't understand > about that issue is whether there has been enough discussion that it > would be reasonable to make a consensus call. > > I do think I understand the PMTU issue well enough to believe that it > has not been sufficiently discussed in this forum, although I > understand that it has been discussed prior to this working group > being formed at length. > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From damien.saucez@uclouvain.be Mon Jun 1 09:56:39 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D529928C0FF for ; Mon, 1 Jun 2009 09:56:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3Cd6q1bju9ie for ; Mon, 1 Jun 2009 09:56:39 -0700 (PDT) Received: from smtp3.sgsi.ucl.ac.be (smtpout.sgsi.ucl.ac.be [130.104.5.77]) by core3.amsl.com (Postfix) with ESMTP id BAD4D28C0EC for ; Mon, 1 Jun 2009 09:56:38 -0700 (PDT) Received: from mimir2.dhcp.info.ucl.ac.be (unknown [88.197.225.165]) (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: dsaucez@smtp3.sgsi.ucl.ac.be) by smtp3.sgsi.ucl.ac.be (Postfix) with ESMTPSA id B55C41C5938; Mon, 1 Jun 2009 18:56:30 +0200 (CEST) Message-ID: <4A240834.7000106@uclouvain.be> Date: Mon, 01 Jun 2009 18:56:20 +0200 From: Damien Saucez User-Agent: Thunderbird 2.0.0.9 (X11/20080213) MIME-Version: 1.0 To: "Joel M. Halpern" References: <4A2404D0.9080406@joelhalpern.com> In-Reply-To: <4A2404D0.9080406@joelhalpern.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.1 X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: B55C41C5938.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: damien.saucez@uclouvain.be X-SGSI-Spam-Status: No Cc: lisp@ietf.org Subject: Re: [lisp] How blocked on versioning and PMTU are we? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 16:56:39 -0000 Maybe we can use Dino's proposal until we have a consensus and let the question about PMTU and versioning open for now. Sam, could you start a new thread to start an "official" discussion on these two topics? Cheers, Damien Saucez P.S.: we also have to discuss security, do we want security for the mapping only or also for the data packets? In the latter case, it means that we would probably change the header. Joel M. Halpern wrote: > Assuming, as you state below, that we agree taht we may change the > header yet again, then I think adopting Dino's proposal at least for > now is a good idea. > We need to get more discussion of at least the versioning (even after > reviewing that draft, I am town as to whether it is a good idea or a > bad idea.) > > Yours, > Joel > > Sam Hartman wrote: >> >> There has been a lot of discussion of the LISP header on the list. >> >> If I'm reading things correctly, >> >> * There appears to be consensus that we're marking part of the control >> packet header reserved. >> >> * Dino has proposed a new header format. >> >> A few people have agreed that Dino's format is a step forward. >> However we have two related open issues: >> >> 1) PMTU handling--do we need reassembly/other PMTU information in the >> header >> >> 2) map versioning >> >> Question to those who want to see changes related to PMTU or map >> versioning. Is it OK for Dino to go ahead and make the change he >> proposed or do we need to block on resolution of these issues? >> >> If we do change the header now rather than blocking on these two >> issues, we cannot later use arguments about how recently we've changed >> the header or about not wanting to introduce churn as arguments >> against PMTU or map versioning. >> >> As a warning, I do not yet understand the map versioning issue well >> enough to make a consensus call. One of the things I don't understand >> about that issue is whether there has been enough discussion that it >> would be reasonable to make a consensus call. >> >> I do think I understand the PMTU issue well enough to believe that it >> has not been sufficiently discussed in this forum, although I >> understand that it has been discussed prior to this working group >> being formed at length. >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >> > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From hartmans@mit.edu Mon Jun 1 10:17:42 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 96E2F3A6872 for ; Mon, 1 Jun 2009 10:17:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D7uqxg5deCXO for ; Mon, 1 Jun 2009 10:17:42 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id EFB883A68AC for ; Mon, 1 Jun 2009 10:17:41 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id A59E9401C; Mon, 1 Jun 2009 13:17:37 -0400 (EDT) To: Damien Saucez References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> From: Sam Hartman Date: Mon, 01 Jun 2009 13:17:37 -0400 In-Reply-To: <4A240834.7000106@uclouvain.be> (Damien Saucez's message of "Mon\, 01 Jun 2009 18\:56\:20 +0200") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] How blocked on versioning and PMTU are we? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 17:17:42 -0000 y Damien> Maybe we can use Dino's proposal until we have a consensus Damien> and let the question about PMTU and versioning open for Damien> now. Damien> Sam, could you start a new thread to start an "official" Damien> discussion on these two topics? I'm actually asking Fred to do that for PMTU. Let me read the map versioning draft and start a thread. From luigi@net.t-labs.tu-berlin.de Tue Jun 2 00:15:31 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 257283A6EEF for ; Tue, 2 Jun 2009 00:15:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iiKZ8z2yYtcW for ; Tue, 2 Jun 2009 00:15:31 -0700 (PDT) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 1634B3A6B5A for ; Tue, 2 Jun 2009 00:14:33 -0700 (PDT) Received: from dyn106.net.t-labs.tu-berlin.de (dyn106.net.t-labs.tu-berlin.de [130.149.220.106]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id C0088701BA8C; Tue, 2 Jun 2009 09:14:31 +0200 (CEST) Message-Id: <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> From: Luigi Iannone To: lisp@ietf.org In-Reply-To: Content-Type: multipart/mixed; boundary=Apple-Mail-21--668301369 Mime-Version: 1.0 (Apple Message framework v935.3) Date: Tue, 2 Jun 2009 09:14:30 +0200 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> X-Mailer: Apple Mail (2.935.3) Cc: Olivier Bonaventure Subject: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2009 07:15:31 -0000 --Apple-Mail-21--668301369 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Hi All, I was replying to the mail of Dino: http://www.ietf.org/mail-archive/web/lisp/current/msg00541.html and I thought that may be is a good start for the discussion on map- versioning. Attached are my comments to Dino's slide (format is pdf, but if you need any other format please ask), hope this will generate discussion. Cheers Luigi --Apple-Mail-21--668301369 Content-Disposition: inline; filename=Map-Versioning.pdf Content-Type: application/pdf; x-mac-hide-extension=yes; x-unix-mode=0644; name="Map-Versioning.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAGdVMtunDAU3fsrzhIWM2Mbh0d3adJKzaqRkLKosiDgDG4H M4NppH5Qf6vf0mvPjDRhQpIWhGSZy7nncfEOt9iB0y24VMjSHIPGHSxWV06gdhBw9VnBI/gy5eGC 8aWShVIxV+67JCqBkClSlSHJ5Ukj6Rt5EpyasVPoHQH67YUIn1/wHHWHjyWUWHK1f7VfygKJWF5k MhcoO6w+UwGj5SOi3zHK7/hUBq0zeCQ+9PEmKBDLIwYR8BiXqNvKrjWMQ6P/WN1g7PGgP8TsTewz rqlCnky4hj7sX7kKXiDLJ2S/IbozY4uuilmBaLt4iiFooQdnemvsGmOr4apOBylmpF20/aaJcY/y Zs4pNu+8yLMgZ0LkdTUHvOfOCxqM59aTmktiRvwbT13bcTDa+Ryc6bYbSgD3bJ713LxQBjIpXmD9 XxnIRJ3TfiMEUqApGIXomI89SBpiLBRHRNIK0u3joq0Qoddte8TstaQOmk+c9XMi0xes7YeYeQqN Hry7dW+dcaO29S8/33Wr6x+rrjJ2pAf9gAcz+hfvmpRp/4Kfe2TWlijstZ2CTo8ldjyWvuqh1tvx Z7XBYPypIvcHh0xyUEOZca9+9aUTuO7pj7/9C67IJEwKZW5kc3RyZWFtCmVuZG9iago1IDAgb2Jq CjQ2NwplbmRvYmoKMiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJj ZXMgNiAwIFIgL0NvbnRlbnRzIDQgMCBSIC9NZWRpYUJveCBbMCAwIDEwMjQgNzY4XQo+PgplbmRv YmoKNiAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFn ZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSCi9DczIgOCAwIFIgPj4gL0ZvbnQgPDwgL0Yx LjAgOSAwIFIgPj4gL1hPYmplY3QgPDwgL0ltMSAxMCAwIFIgPj4gPj4KZW5kb2JqCjEwIDAgb2Jq Cjw8IC9MZW5ndGggMTEgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGgg MzIwIC9IZWlnaHQgMjM4IC9Db2xvclNwYWNlCjEzIDAgUiAvSW50ZXJwb2xhdGUgdHJ1ZSAvSW50 ZW50IC9QZXJjZXB0dWFsIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRENURGVjb2RlCj4+ CnN0cmVhbQr/2P/gABBKRklGAAEBAAABAAEAAP/iETBJQ0NfUFJPRklMRQABAQAAESBhcHBsAgAA AG1udHJSR0IgWFlaIAfZAAUADQAIADQADWFjc3BBUFBMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAD21gABAAAAANMtYXBwbG2BwMt+z50fom3mAhUtQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAADnJYWVoAAAEsAAAAFGdYWVoAAAFAAAAAFGJYWVoAAAFUAAAAFHd0cHQAAAFoAAAAFGNo YWQAAAF8AAAALHJUUkMAAAGoAAAADmdUUkMAAAG4AAAADmJUUkMAAAHIAAAADnZjZ3QAAAHYAAAG Em5kaW4AAAfsAAAGPmRlc2MAAA4sAAAAZGRzY20AAA6QAAACQm1tb2QAABDUAAAAKGNwcnQAABD8 AAAAJFhZWiAAAAAAAABlcQAAOjEAAAmWWFlaIAAAAAAAAGpaAACvcgAAGvlYWVogAAAAAAAAJwsA ABZ3AACullhZWiAAAAAAAADzUgABAAAAARbPc2YzMgAAAAAAAQxCAAAF3v//8yYAAAeSAAD9kf// +6L///2jAAAD3AAAwGxjdXJ2AAAAAAAAAAEBzQAAY3VydgAAAAAAAAABAc0AAGN1cnYAAAAAAAAA AQHNAAB2Y2d0AAAAAAAAAAAAAwEAAAIAAAAhAHIA7AGCAjUDAQP9BSQGagfOCV8LBQzWDsQQwhLc FPIXMxlkG6cd6iArInIkpybhKQ8rOi1HLzYxHTMHNO420jiyOow8WT4hP+ZBnkNSRP1GnUg3ScpL WUzUTlVPwlEyUplT+1VZVrpYDllfWrBb9F00XnJfpmDeYhFjRmRzZZ1mwmfmaQpqKWtGbF5tdm6N b6Bwr3G/ctBz4XTxdgB3DngeeTB6NnsZe+58wn2WfnF/SIAigP2B2oK7g56EgIVphlOHP4gviSGK FosNjAWM/439jv6P/5EBkgOTBpQGlPuV4pbGl6uYkpl3mmKbUZw+nS2eHp8QoASg+KHsouCj1aTH pbqmsKedqI2pfKpsq1esQK0org+u/rAAsQeyC7MOtA21DLYLtwe3/7j0uem63rvQvMG9sL6fv4rA d8FmwlXDRMQ1xSXGGMcNyALI+MnpysDLiMxMzQ7Nz86Qz0/QDtDJ0YTSP9L506/UZtUd1dPWi9dC 1/jYrdli2hjaz9uG3D3c9N2w3mXfDN+Z4CTgreE54cbiVOLj43XkB+SY5SzlwOZT5ubneegM6J/p MunE6lPq4+t07AXsk+0h7a/uO+7F71Lv4PBq8PPxevIC8ozzFvOg9Cj0rvUy9bX2L/ai9w33Zve+ +Av4Rfh++Lj48flk+d761Px9/ov//wAAACQAfAECAZACQAMUA/4FIwZcB7kJOwrSDIsOYxBKEjoU QhZaGH0aoRzHHu4hHiNLJWQnhCmUK3MtJC7IMHEyGjPCNWk3DjiqOkI72j1tPvxAiEINQ4tFBUZ8 R+dJVkq1TBRNbk7DUBZRalKyU/dVPVZ2V69Y41oTW0RcbV2bXsNf5mEGYiRjQ2RfZXhmjmelaLxp z2rha/NtCG4ebzJwSnFccnZzkHShdYh2ZXc8eBd49XnTerF7kXxwfVZ+On8egASA7IHWgsCDq4SW hYKGbodaiEiJN4olixKL/4zrjdWOv4+jkIeRbJJSkzeUH5UKlfOW3pfKmLaZpJqRm3+cbJ1ZnkWf MqAfoQqh9KLgo82ktKWbpoSnaKhaqWaqe6uIrJqtpK6tr72wxbHMss6z0bTWtdi22bfZuNu52LrZ u9684b3mvu+/9cEAwg3DG8QqxS/GHcb5x8/IpMl6ylHLKcwAzNbNrM6Dz1rQL9ED0dfSq9N/1FPV JdX01r/Xjdha2SbZ8Nq424LcSN0H3bbeZN8R38Dgb+Ef4c3ieuMp49fkg+Uu5dbmfeck58nobukR 6bDqUerx647sKuzG7WHt++6R7yjvwvBY8Ozxf/IS8qjzPvPS9GL08fWB9hD2nvck95z4GPig+TH5 1PqR+2f8Y/2E/pv/IP9Y/4//x///AAAAFQBKAJkBAQFxAfUCjgM8BAAE2wXTBtsIAAksCncLxw0l DooP+hFxEuUUWRXLFzgYpBoKG2ccvh4LH1AgmCHfIyckaiWpJuMoGylPKn4rqyzSLfYvFjAyMUsy VjNnNHA1dzZ8N3w4ejl5OnI7aDxlPWQ+Zj9mQF9BWkJSQ0xEQUUzRiFHEEgASO5J2UrDS65MmE2A TmZPT1A4USRSDlL5U+RU0FW+VqRXelhKWRVZ4lqxW4BcT10cXepeul+JYFZhJWH0YsJjkWRgZSxl +WbGZ5FoX2ksafhqw2uNbFZtG23VboZvMG/ZcIJxJnHNcnVzGnO/dGV1CXWvdlV2+neheEl48nmb ekh69XujfFN9Bn26fm1/JH/bgJWBU4IPgsyDioREhQCFvoZ7hzeH84iviW2KKorni6SMYo0ejduO m49akBuQ25Gbkl6TIZPklKiVa5Y0lwKX0ZifmW+aQJsTm+Wct52LnmKfOaARoOqhxaKho4KkZKVF pienCaftqNOpuqqhq4isdK1erkmvN7AjsQ+yALLys+O02bXNtsO3t7i0uau6pbugvJu9mL6Xv5PA jcGKwofDhsSAxXnGdcdwyGbJZsp6y5PMp822zrrPwdDB0cDSydPV1N3V89ca2ErZg9rI3DPdrt9K 4QXi5uT652LqD+0v8Of1kvul//8AAG5kaW4AAAAAAAAGNgAAlUYAAFbPAABSqQAAkU4AACgQAAAV YAAAUA0AAFQ5AALcKAACqPUAAXMzAAMBAAACAAAAGAAyAE0AZgB+AJYArgDGAN0A9AEMASIBOgFQ AWgBfwGXAa4BxgHfAfgCEAIoAkICXAJ2ApACqwLGAuIC/wMbAzgDVQN0A5MDswPTA/MEFQQ3BFoE fQSjBMkE8gUcBUcFcwWfBcwF+QYoBlcGhwa4BukHHAdQB4YHvQf0CCwIZgiiCN4JHAlbCZwJ3woj CmkKsAr5C0MLkgvhDDAMhQzaDTANiQ3kDkEOoA7+D2APxhAtEJQRABFwEeESVBLNE0QTvxQ8FLkV OxW/FkcW0hddF+sYfRkRGakaQxreG30cIRzFHWweEh68H2cgFSDFIXQiJSLiI8YksiWhJooneShn KVcqRCswLCAtCy32LuEvyjCzMZwygzNtNFU1OzYiNwo39DjeOcs6vjvHPNs97j8BQBlBKUI5Q01E X0VyRoVHmEiuScVK3Uv7TRlONU9eUIVRsFLaVBFVSFaFV8RY5ln/WyBcQV1oXpVfwGDwYiZjZGSk ZeVnK2h2acVrFmxvbcVvGnB0cctzJnSAddd3MHiJeeN7cn0jfuKApYJuhDuGFYf1idWLxo24j6+R ppOhlaeXrZmxm7idw5/Dod+kkqdbqhis06+AsjS037eZulS9FL/fwrzFkMh+y3DOe9F11JHXu9rd 3gPhSeSn6IbtlvV1+TT61/vt/Nn9pv6h//8AAAAWADEASwBmAH4AlwCwAMgA4AD4AREBKQFBAVkB cQGKAaMBvQHWAfACCgIkAj4CWQJ0ApACrALJAuYDBAMiA0ADXwN/A54DwAPiBAQEJwRKBG8ElgTA BO8FHwVRBYQFtwXrBiAGVgaMBsQG/Ac2B3EHrgfsCCoIagirCO4JMQl2Cb0KBQpPCpsK6As2C4gL 2wwuDIYM3w05DZYN9Q5VDrgPGg+BD+sQVhDCETQRpxIcEpUTEBOLFAwUixUOFZUWHharFzkXyBhb GPAZiRojGr4bXBv+HKEdRR3pHo4fNx/eIIshNCHfIosjXiQ/JSgmDib0J94oxym0KpwriCx2LWMu US9AMC8xIjIUMwk0ATT3Ne826jfoOOk57jr0PAU9GD4rP0BAWEFrQoFDmkSxRcxG5UgBSR9KP0th TIhNrE7WUARRM1JgU5dU0lYLV01YeFmEWpNbq1y+Xdxe/GAWYTpiYGOOZL1l6mccaFJpimrCbAFt Pm53b7Nw8HIoc2d0oXXZdxJ4S3mFet98Yn33f4+BJ4K/hFiF+YebiTuK4YyOjjyP7ZGgk1eVGZbl mK6afpxVnjKgDqH+pCimX6iSqsWtAa9CsYOz0LYvuJK7Ar15wAfClMU2x97Kks1f0B7S/NXm2MTb rd654cbk3+iP69nunPDn8tT0c/X497T//wAAACUATwB4AKAAxwDsARIBNgFcAYABpQHLAfECGAI/ AmcCjwK5AuQDEAM+A2wDnQPOBAIENwRuBKgE4wUiBWMFpQXoBi0Gcwa7BwUHUgehB/IIRQibCPMJ TQmrCgsKbgrUCzwLrAwbDI8NBg2ADf4OgA8CD4oQFxCiES0RuRJHEtwTcRQLFKUVRRXoFpEXOxfm GJcZSxoBGrobdhw3HPgdux59H0QgCyDWIZ8iayNOJD0lNCYqJyIoHSkcKh0rHiwnLS4uOi9JMFkx cDKIM6Y0wzXkNwo4NDljOps79z1pPuBAZEHlQ3JFAUaWSCxJxktfTPpOj1AoUbxTS1TgVm9X/lmF WxJcoF44X8thY2L/ZKFmQGfjaYprM2zibotwOXHlc5h1RXb1eKh6XXwEfaR/SoDugpKENIXch4OJ JIrGjGuODY+tkUiS4ZR+lh6Xu5lVmvGcjp4rn8KhYaL7pJWmNqfSqWerBayZrjOvy7Fpsvi0lbYs t8S5Xbr0vIu+KL/JwWfDB8Skxk/H+cmey0zNAs6d0BvRntMq1L/WZ9gI2bnba90O3q7gV+Hs423k 5OZT57npFOpQ64Psre3G7tHv1PDG8bXykPNs9Cz06/We9kj28veI+Bz4r/kv+ar6JPqe+wL7ZvvK /C78h/zR/Rv9Zf2v/fr+Tf65/yb/kv//AABkZXNjAAAAAAAAAApDb2xvciBMQ0QAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAbWx1YwAAAAAAAAASAAAADG5iTk8AAAASAAAA6HB0UFQAAAAWAAAA+nN2U0UA AAAQAAABEGZpRkkAAAAQAAABIGRhREsAAAAcAAABMHpoQ04AAAAMAAABTGZyRlIAAAAWAAABWGph SlAAAAAOAAABbmVuVVMAAAASAAABfHBsUEwAAAASAAABjnB0QlIAAAAYAAABoGVzRVMAAAASAAAB uHpoVFcAAAAOAAABynJ1UlUAAAAkAAAB2GtvS1IAAAAMAAAB/GRlREUAAAAQAAACCG5sTkwAAAAW AAACGGl0SVQAAAAUAAACLgBGAGEAcgBnAGUALQBMAEMARABMAEMARAAgAGEAIABDAG8AcgBlAHMA RgDkAHIAZwAtAEwAQwBEAFYA5AByAGkALQBMAEMARABMAEMARAAtAGYAYQByAHYAZQBzAGsA5gBy AG1faYJyACAATABDAEQATABDAEQAIABjAG8AdQBsAGUAdQByMKsw6TD8ACAATABDAEQAQwBvAGwA bwByACAATABDAEQASwBvAGwAbwByACAATABDAEQATABDAEQAIABDAG8AbABvAHIAaQBkAG8ATABD AEQAIABjAG8AbABvAHJfaYJybbJmdphveTpWaAQmBDIENQRCBD0EPgQ5ACAEFgQaAC0ENAQ4BEEE PwQ7BDUEOc7st+wAIABMAEMARABGAGEAcgBiAC0ATABDAEQASwBsAGUAdQByAGUAbgAtAEwAQwBE AEwAQwBEACAAYwBvAGwAbwByAGkAAG1tb2QAAAAAAAAGEAAAnIQAAAAAw5X4gAAAAAAAAAAAAAAA AAAAAAB0ZXh0AAAAAENvcHlyaWdodCBBcHBsZSwgSW5jLiwgMjAwOQD/4QBARXhpZgAATU0AKgAA AAgAAYdpAAQAAAABAAAAGgAAAAAAAqACAAQAAAABAAABQKADAAQAAAABAAAA7gAAAAD/2wBDAAMC AgICAgMCAgIDAwMDBAcEBAQEBAgGBgUHCgkKCgoJCQkLDA8NCwsPDAkJDRIODxAQERERCg0TFBMR FA8RERH/2wBDAQMDAwQEBAgEBAgRCwkLERERERERERERERERERERERERERERERERERERERERERER ERERERERERERERERERERERH/wAARCADuAUADASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAA AAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEI I0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlq c3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL /8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLR ChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn 6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiivIf2ifjXqfwr0rR/DvgjRP7c8eeMbprDw9pxRmj3LgyTzEEYijDKTyOo6KGZenB4Sriq0cP RV5P5Lu230SV230SuJtJXZ69RXy5Z/Dj9rjQNSg1vxv8dI/EOhy6FqQ1m2tbWPT5LKZ7YiMwtEoL ssmGVxsK7DgDcQX/ALO37Tfwv0X4WfDvwZ8RvinbHxhqlikZiu5JZ5QWdvKE8oDLEShTHmsuQVI4 Ir1qmQVHRdXB1FXta/IpO1+bvFPTl102adyPaWScla99/K3+Z9QUVwHxQ+PXwi+DJtI/iT43s9Hn vRugtvKluLh15+fyYVdwmVYbyAuRjOeKg1L9oX4P6X4P8OfEC58aWh8OeKtRj0vTtTVW8jznDkCU kAwgeW4YuF2EHdjBx5sMtxs4RqxoycZOyfK7N9k7Wb0exTnFOzZ6NRXnfwv/AGgvhB8Zr7UtN+G3 jKHV7rSUWS6i+yz27KjEgOolRd65GCVyBlc43LmhpH7Un7PuveM4vh/o/wAVdFu9auJBFBHG7mCe QkBUjudvku7EgBVclicAE1TyrHqc6boT5oK8lyu6W92raLzYvaR3uep0V5NN4xi0P4qeO9c1P4vi 48PeEPDcV5q/hUaSN2lZRpluROo3yFo4pjsXJG4ZH3Kh0L9rX9nzxH4j0TwjpnxGtG1jxDFBJZWz W8wBaZA8cTy7PLSU5A2MwbcQuNxAN/2Ti5Lmo05TSSbajLS65tdF0d77W1TaG5pb6Hr9Fed/Er9o X4MfCC8g034iePrDSr25AZLQJLcThTnDNFCrsinBwzAA4PNdn4e8RaB4t0a28ReF9astW0u9Utb3 lnOs0MoBKna6kg4YEH0IIPIrlqYPEU6UcRUptQltJppP0ezHzK/LfU0aK+TP2wf2iPE/wm+LHwv8 PeGfEM1lYLcjVvE9vHCjieyaeOFA5KkhSBcjgj5ip6qpEP7S37QnirwL+0/8JvAPhjWXt9Me4t5d bhWT9zdR3k/2cJKAeSiI7qD0Lq3OBj3MLwvjcRGjOFrVYzmt9FC976ddLWvujOVaMea/S34n1zRX H/Ev4vfDb4PaTDrXxI8W2eiW1y5jtxIHkmnIIB8uGNWkfG5dxVSFBBOBXNv+0/8AA7/hBtO+JEHj u1n8O6nrMegxXqxSIIrp8nZMrqrQhUBkYuFATnuM+RSy3G1aaq0qMnGTsmouzfZO1r+RblFOzZ6p RXnXgH9of4L/ABQutXsfAnj6x1W50OJri9hWOWN1iU4aRFkRTJGDgF03L8y8/MM834Y/bH/Zx8WX +iaRpvxJtY9R18AWlrc208TK5ZlEcrlPLicspAVmG7K4yGUnX+x8xvKPsJ3ja/uy0um1fTTRN+gv aQ3ue00V5tq+p30vx70LQbH4rpZpD4fn1C88HnTFc30RkMYuvtJGUKuUAQHJ2EjgvnmbT9tT9mi6 TRmf4m2ts2usVtkntZ1MeJWizOdhWAFlJzIV+XDfd5ohlOLqxUsPTlUuk3yxk7XvZPTtFu6urddH Yc0r30Pb6K4j4mfGz4V/B61guviR41sdF+08wQuHluJRnBZIY1aRlB6sFwO5rY8E+PfBvxI0GLxP 4F8SWOt6ZKdguLSUMEfAYo6/eRwGUlGAYZGQK5pYPERorEunL2b0UrPlv2vsVzK/LfU36K+V/jbo XiP4iftV6D8MoPit418KaHP4Ik1O5i8P6w9orSJcypudR8p3AhSSM/KozxW/8NfAvw5+Dusa/wCL NN/aU8V+JLLwvpc91rui33iJNThtIghdpntowXVwIyQcbjggZzivUnk9OOHjUdVucoqSioN7uyTf Rt+Rn7T3mrbH0TRXj2iftc/s9+INe0Hwtp/xEtjq/iOOB7K1a2n+9MAY4pJAhjjlOQNjMDkgdxnz 34k/tyfDvwX8Z/D/AIKtPFOnv4ftLrUtP8ZzS6Vem402eFdsIiIQB8yqykosgIB6cNUYfh3Na1X2 McPPm5XLWMtkm+3W1l3dktRurBK9z6jory7Wv2nvgN4ct7O6174j2FhHqOhQ+JbP7RDMjXNjKxWN 41KZdyVb90AZBtJKAA1ieJfjF4O+IXg3wd4s+Gnxvt9B0/VPGFrpaXY0t5v7TkHmFtOdJFDW5k2h vMZRgKvVXBOEMoxrtKdKUYt25nGVr6u2ieunQbqRXU9sorzv4oftCfBv4M3dnp/xJ8c2ukXl9GZo LUQTXM5jyRvMcKOyoSrAMwAJVgCSDi1qHxx+Eml/Du2+LF/490uLwnerm21EyErO3zfu40A3tKNj gxhS4KMCuVOMVluMcIVVRlyzdovldpPsnbV+SHzxva53VFeT/Bv9pr4YfHfXtf0H4fzanK3h9IpW uLu18iK7jkLAPCC2/aCuDvVD8y4B7esVni8HXwlV0MTBwmrXT0equvwYRkpK8WFFFFcxQUUUUAFF FFABRRRQAV8s/GnxB4e+FX7XXg74sfE+2ltvB9z4Sk0Gx1hrVriCx1MXEsvz7QWjLRNtDAZIY/wq 5X6mqvf6fYapaSWGp2UF3azDbJDPGJI3HXBU8GvRyzGxwtWUqkeaMouLSdnaSto7Oz9U10JnHmVj 57n/AGpfCXxX03x9onw70nWL3w9o3hPUbq48WtA9vZLcJCCIYw6hydrsxY7SCgwCGDV4DJ8LfCPh L/gnHf8AjCy8P2/9uayLDVbq+lhDXDN/aMSJtY8hRGzAAYGHbuzE/oFZWFjpsC22n2UFrCgCrHDG EUADAGB7VWu/Dnh6/wBDk8MXuh6fPo80P2eTT5LZGtmj/uGMjaV9sYr2MHxBRwcoxwtJxpqpTm1z XclC+jdktW77JLTTqRKm5q0n3/G3+R8l+A/Gnw38J/tM/FzxR8bfEmj6Xqv2LTZdEn1SRUV9PNsG Iti332/1e5EyWbOASDXjGiWuieOP2RPgf4EmmS4tr34px6XqqRylWiMktzlGI5VjFcKw74YGv0M1 v4feBPEs+nXXiPwbouqT6OQdPmvbGKaS0III8pmBKcqp4I+6PSi3+HvgO1LNa+C9DhL6n/bR8vT4 l/07aVNzwv8AripIMn3iCeeTXZQ4ow9JRqRpy517P7SsnThKC5dLq/NzeT+8zlRbb87/AInxb+1d ouraB8VPE/h74ZacLORfgmtrFbWUaIPsiaqPtKKuAMC1WYYHOBhecUfEr4ifA/XvDfwN+Evwba2v 4Y/Fmi3139jtz5dnCC48q4kIyJ5GZ22HL/unLYyC32J460i+tLS78c+B/Beh6z44sbE2unNfOLZ5 oi4Z4PtAUsqn5mCn5S+MlQSw8K0fwF8Z/i18SfCXiDx58JNC+Gnhbwnqr67cabb6jBe3WrahsKxz M8KhQq5PX5iSc7gQV7MvzijVw1OVdJKim7+0im5cll7mspdOVq1m5XdrkzptXUevkc54jJHxJ/bH OTlfBFng+n/EmlritY8D+Hfh1+yp8BNb0eyIa78daH4h1S72L5heWOZ2ZmUDgEoi55wqDJwK+8rz TdO1CKeC/sLa5iuoWtp0miV1liYEMjAjlSCcg8HNULnwf4UvNAh8KXXhvTJdGthEIdPa1Q28XlsG j2R4wu0qpXA4IBGMV5dHifk5IuD5U4XV91CkqfbfTmXa9vM0lQve77/ifHXgf4teAfg/qfx81v4k yW0nxGfxdff2dpl/DI95qNsyD7BFCCpZoGPCkZVEZTwrLn2z9ijRf7D/AGZPBNvk/wCk20t7yenm zSSf+zVy3xdT9pPx5N4i8AaP+z/4ThTUIrrSdO8aXeuRSJb2UqspYQhPPWQo2OPlVyDhgOfdPhp4 Ni+Hfw+8O+BYbk3KaDpsNh5xUKZNiBSxA6EkZ/GtM7xdGeASVlUqShJpTjPSEHFfD8K952i3zLZ7 aqEXz+Sv07tfefGvxT8Jt+0B8T/2jb2O7u5f+EK8J22h6RBFDnzHhZb2SPHUt9otXUY6iU1w+l+H /Fvxf/Z0+Kv7S3iHS45PFU1xpsukyw24C28OmGFZLiEkkr+7E+/sShOK/RjTvD+h6Pd39/pOj2dl carMLi+lt4Fja5lAC75CB8zYAG484A9KitfCnhay8PyeE7Pw3pcGiSwvbPpsdnGtq0Tgq0ZiA2FC CQVxgg4rWjxh7GnGlSp6RdO3+GKhzx2XxyhFv5oHQTld9b/jt9yPku38e/D7V/2r9C+JPxV1jStM 0bVPhxZ6l4RudWljht4/NYtKrO+FWfLTDrkqcdCBXi/iTxN4B8Q/Bj4k6rBeWmo6WPjj/bDxqSPM sZi/lyFMblR41lAOATtYdiK/QvUvhl8OtZ8P2HhTWfAug6ho2lBVsbC70+KaC1CjavloykJheBjG Bx0ryr9pf4FL438HwW3w98HaWmrXniLSrrVp4IYYJZ7W3ZlLSMceZ5aOcKSTtBCg8CunKuIMD9Yp RlGUPgjfmXKlCV+11dN3d9Ja630itSm4Sa7P8rHmMHib4X/En9qP4bxfAKOzudM8L+HdRt/EV1pl t5FsLKSEpb25JC79jksEwQu7I5DbfCtB8XfBm9/YbPwv08abdfE3WNSSO306DT2e+muTqAMbBwnX 7P8AKG3cr8mcnbX6TaL4S8M+GbOWz8MeHdL0mObczJZWkcCszYySEA5OBk+wrxz9kX4KyfDb4P8A h608eeBdM0/xnY/a4bmdobea5SNrqWRF8+MtlSpVgAxHT0owvEWEp4Z1FGX7qVHkjzrmlyutO8ny 6xvKzSSsnFX7uVKTfrfp5JfoY9mLofty6Gt+2blfhCnmnnl/7Qfd+ua+cPDHw+0HSv8Agm34t8Z2 GniTWfEV1DPeXBRWkCwapFEqqwGQiojNgk4LueNxr9H2hheRJniRpI8hGKglc9cHtWRH4K8HReG5 fB0XhXSI9BnR45dLWyjFo6uSWBiA24JJJGO9eZg+J3QVNKD92VFuz3VJzdturkn5WLdBPd9/xPk7 w38RPhp8Pf2ivih4z+NOq29jNJoOj3PhqS+gdzc2H2UCRbPIO8mTAZE+84Y4yjEd5+woJNU+Fev+ Oriy+xXHjDxdqWsT2o+7bu0gQoowMAbMdO1a3xP1f4+W3iOTwz4F/Z38MeINLtUjXQPEV9rUIi09 jGFLy2zr5vytnIjPKgckmuu/Zz+FN18Fvg/oPw+1G+S8vrJJJryVDlDNK7SOFOASoZiASMkAZrbM sXRlld9FUn7JWU4y92EGto/BrytqWrbdkrO6jF8+vm9v6+R4B+0F4S+Dni79sXStO+O13ptp4bPw 6WSCbUdVOnQm6W/m2gSiRMtsZ/lz0OccCuo1Dwb+y74b+DXxTn+BFz4OudVi8D6rHczaPq0V7cpC baQ4dlkdgpZV68Egele++NPhr8PviNFaw+PPBeja+tiWNt/aFnHOYN2N2wsCVztXOOu0Z6CqXhf4 NfCfwS143hL4deH9JOo25tbv7LYRoLiI9UkwPmU+h4rD/WCDw1Gm51E6aiuVS/dvld72815bj9k+ ZtW1+8+NNR8D+Hfhl+yB8HPFOn2YZpfGOi+JtVuxGPMzIJGYkgfwhkjB64VRzXt/x5t7X/hqT9nm T7PETcXGvrKdg/eD7JCBu9eD3r3S68F+EL7w3H4NvPDGlzaDEkccemPaIbVFjIaMLHjaApVSuBwV BGMVPf8Ahnw7qup6ZrWpaFp91qGitI2m3c1ujzWZddr+U5GU3KADgjIAz0FRV4hVWr7arFuX7/W/ /P2Liv8AwFt38tgVGysvL8GfOviXwh4Y8R/t7aFBrmh2l7FpPw1XUbKOWMFIZ01GZVkC9MgO2PQn PUCqf7QPw38HfDi1+F2keFdOaysdX+MVlrF3H5rODcSrMWYZztHAAA4AFfS7eHPD7eIF8WNolidb S0+wLqP2dftIt92/yvMxu2bsttzjJJ7mr8sMM4CzRJIFIYBlBwR0P1rnjn1SFWjON+WnFRcb6Oye v432H7JNSXc+BfHUmv2v7W3xN03X/it4d+GSa1aWbQ65qloPtdxp6wInlWE8oEUasQd7KwfzIl2g lG26mrf8Mna/8G/Dfwk8O/GK/wDCttofiaW58PeIdS05pba/vrdEeeZy6CN4v9KK5dogXHy5QBW+ zvFHgnwb43tYbLxn4T0fXre3fzYYtSsYrlI2xjcodSAccZFJq/gfwXr+iDwzrvhLRtR0gMrCxurG KW3BUYUiNlKggcA44r01xPRaoXjKLgor3XBK8I8qlrB8zt0k2knJL4rqXSbbff8AX5ngP7I/xG1P xn4t8feHfEGseGvF974XNra23jXRtPjtRq1tIZZBE4RVU+UxIAX5QXbG7O9vpqsrw34U8M+DtMTR vCfh/T9HsIiSltY2yQRLkljhVAHUk/UmtWvnM0xdLFYuVehDki7WWnRJN2SSV2r2SSV7LRGsIuKs wooorzywooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK5608VXt1451Dwe/hHWoLWxsIb1 NbkjQWNwzsymGNt24yKFyRt4HXGV3dDRVwlFJ8yvdfd5iZm+JPEWi+EPDuqeLPEmoR2GkaJZTajf 3UgJS3giQySSNgE4VVYnAJ4r5u/Y6/aM8ffHPxb8QB46trnTbOaGw8SeFtKvNEn02ex0q5kvII4j 5yKblttlHNJPG0kRkumRH2oFX6H8beCvDHxG8K6j4J8Z6Z/aOiatEIL60M0kSzx7gxRmRlbacAEZ wwyDkEgkngnwtL42t/iM+kR/8JHa6VLokd+rurfY5JY5miZQdrDzIUYFgSvzbSA77oX9f19w3t/X 9dzybWrbxp8ALn4hfGDXviPrPjrR9X+y2fhrwdLbsj219PeyLbWsVwZGXM11qK2/mNGoSJbdWOy3 BrjPib8Z/j34P+Jfw4/4s9Pea7qeieJ0n8L6T4qEmlTi3k0qSO8nvHhjCIkRnVWeDeJJRGBiXdX0 Z428E+FviN4W1DwX410eLVNG1SMJc20jMmSrB0dHUh45EdUdJEKujorKVZQRgeFvgj8NvB+oWmr6 Ro99NqNlDfQR32p6ze6ldOt4bY3HmzXM0jyswsrVQzliixBVKqSC76edv6/4P9MXU8k8PftoR+Mt a8N3vhT4Y3c3gnX7qy0ttevdWit7iK/udEfWxEloqSB44rYQrJK0qYklKosmwms34d/tn+M/Gel6 UmsfARtH8R+L9P0TUfCOjxeJ47r+0I9TTVJY3up/IRbVEg0a6uGwJX8sqAnmnya9Etv2Q/gDZTaT JZeEtUtotDaylsbSHxPqsdpHLZ2sdnBMbcXIieYW0McDSspd4gUdmVmByfip+zXoNz4X0eD4W/Dj w7e6xotnpeiWTax4p1bSDY6fp63P2U217aCS4iuIjcyqJFAd455kdyrYKvffT0/r+kN/3fxONf8A bmu7vxZ4Y8B+G/g1fa74h1OV11iwsNUMz2qJrFzpEktoUt2+0RJJYXc7zT/ZIUiEO6RXmWMez/Dn wD8QPC/jHxV4i8YfEu78R2Gtsf7O050ZItNAv9QmUIMkf8e1zYW5wBk2ZY/f44XwL+xl8KNB+Hmg eD/FVhPqF3pumy6bqEmk6lfaRZ6jDNcz3clrNa206JPZrLdXAjgn81VSRlOd77vfhgcDinsJXZ8q fEL9r/VvhnHr97p/gTVtft/+E11HQn1TWb37HoGhJaW9ov8ApF7b2UhtUlnmCxidWBczs1wiKgHs /wATPilrPgiPwnoegeDY9c8X+Nb46fpmlzamLO1jeO2kup3nuhHIUjSKGQArE7M5jUKAxZc7xd+y 98FPG7Xba94a1NBqMmoPfLp3iLU9OW9F+IBeRzrbXEYmil+ywbonDIdn3eTnrvHnw08HfEnTrHTf FdhduNLuhfafc6fqV1pt5ZTBHj3wXVrJHNESkkiHY43K7KcgkUlpFJ76f8H+vyKlrJtba/8AAPkz 4U/tn+MLGx8GeA7r4Y634t8Y+J7+/wBZ1ayXV2uLvTbO68RX9rFHBshkWZLVIJt7yta28UUEK+aD LGlaWs/E/wCLmleJv2kfil4y07X9N0L4eWM2g6HFpvi6IR2hWxsbtGisTavA11MLwT/aZxN5QKQi MhZGf2S3/ZA/Z8stC0/wxpvgq+sNJ06wk0oWdl4i1O2iu7OSeW4a1vFjuFF5b+bcXDCK48xAJpFC hXYHr9Q+DvgLWdL8d6Frmly6hpvxHvBea/ay3DqkzfYrWy2oUKsi+TZQ9DnduIIzwmtLLzBP3rvY 8UvP217vQvE3itvFHwhu7LwL4U13WPDkniOHWY5ri8u9N0y71SbybIxLmP7PZSKXMoxK6oA2HZJP Av7YHjTx34Z0680/4EyR654l8QxaB4ajOvFdH1Mmymvp5xqD2qFoYIrW4VpYIbiKSQIIZJVYunr9 18B/hJf2s1hqHgy2vLW51y+8Rz29zPNLDNe3trcWd08iM5V1kgu7iMxkGPEhIUEAjBh/ZV+CUOmP pzaHr87CW0mg1C58XaxPqVkbUTC3FrfyXRubZYxc3KhYZEXE8oxiRga6fd/wRS1em2v/AADI+Afj D4q+IP2fbjxc3hy31HxpP4l8QkaNrHiF0ht9uu3qC1N8kMx2QRKI4ysRUiJFARTlfL/CH7ZPxJ0L 4L+DNf8AG/wwh8T+IR8PoPiH4ouNL1xIxDoS28LPqDB7WKMXkzm5ZLKP5R9nkHnAbc/Tvw2+G3gv 4ReDLD4ffD3R20vQNMed7W1a6muSjTTPPITJM7u2ZJZG5Y43YGAAByWtfswfA3xDpPhTQtW8EtLp /gvSE0DSrZdUvY4zpyGAizugkw+2W5NrbkxXPmoxjywOTmdf6/ruPSz/AK/rS5n/AB08XfFHw54v +GNv8L/DkOvy6rq97Deafdax/ZdpKi2E7q084hlbapBYII2JYKcfLkecx/t0LrHinwh4K8G/CHVN b1/V4IJfEGlxXrNdaQ7ajLp1zHEsUEqTi2mtbtpZpWtrcIkJExM6LXvfxD+Fng34pW+l2/i6DVt2 i3hv7C40rXL7Sbm3maKSFmWezmikwY5pEK7sEOciua1b9mL4I6xaadp03g+ezsdN0iLw+tlpmsX2 n2t1p0RYx2l3DbzRx3cC+ZLiO4WRf3soxiR9wrrfv+Fv8xPbQ77w3q9zrVjcXV0umBotQu7Rf7Pv /tkeyG4kiXc+xNsuEHmR4Plyb03Pt3HVqjpOhaJoEVxBoWj2OnRXd1NfXCWlukKzXEzmSWVwoG6R 3ZmZjyzEkkk1epgFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABWFbTeOD 4suobvT9CXwyIgbW4jvJjftJhch4jEIwud4yJCcBTjkgbtFXCaje6Tuvu815iaPHP2mpfizrPhbS /hr8GtOm/tnxlfGzv9WN9Np8OlaZGhlunN7Hbzm3mlVVtomCF1e58xR+5JHz/qnir45+JdD+E3w/ 8VWPjSyudLfwJcalar4MvLldb1C31yNdVe61ARMltHb/AGCO5UkxBkl3kyJNHt+u/H3xE0D4d2Wn TavDf3l7rV+ul6TpmnWzXF3qF0yO4iiQccJHJIzuVjjSN3dlVSwxvhl8bfCfxPku9PtbPU/D+tWK wNcaFr0cVpqcYlsbK9Ja3EjMPLXUYIpM/clDqegLTGS1X9f1qO2qZ84/CLxL8Y/HetXnirxvo3iP UdQ1a28ENqNrqHgu70q20O7XUdQur+ztlljUzR2pEA88tIRvRmkbgVgS/HX9qr4efCqK/wDiRrOu 3V0/w9t/HF94gtvh/JJLY3z2szro5ghjMcOXt90txOu2PZKG8jz7fy/sO3+LPwsvIdMuLT4l+FJ4 tanS10x49ZtmW9md3jSOEh/3js8UqhVyS0bAcqcYPxAX4L+P0tdK8Zto3iG1stVm0y6gOpRG3tpl t5J5obyPzVV08qFi8Lh8jBZNoLDPl5YvXd3/ACuaXUp3t0/Jf5Hnnx6+Knxf8DQ+DpNNa70+J9Jf VdXuNH8H32tpe3kUloGstsMcrW0BjlupSWAkcRKEkTZIToftC6v4/wDDHiSDxV4GstQhe20NNMud Wt9Dn1X+z4bvVLBJp47aJS00kUEc0uzBAwrsrIrCvVrT4m/DbULBtVsPiF4aubJdSGjG5h1a3eIX pxi2Lh8eedy/u87vmHHNaereJvDegXOn2eu+INN0241a4Fnp8V3dxwvdzHpHErEF3P8AdXJq3fnU uzf4pq34/wBPUyteLT62/Czv+B8sp8Zv2hbDR7jUdUi1+TXdF8Hz6hoWiRfD6/ki8Y3KWd5Is92y Qk2Du8dni0Escsb+ZG4YzwhYvDWr/HPxv46+H97H8U/G9zoekfEKbSrq4PhE6Imr2A8OtetNdW81 urCI3bS2yMQEwYipaZBKfqPw1448FeNFnbwd4w0TXRbJDJOdM1CK6ESzRiWJm8tjgPGwdSfvKQRk HNM0vx74F1wxLovjTQtQNxfyaVELXUYZfMu442lkt12scyrGjuyD5gqsSAATR/X9f1bUNT5N8D/E P9r/AOJem6Jo1r4mufDl34kngmvtbvfh7Naf8I/ePp19cXWlrbXW3zYLeeCyRbpt2/7S8e9nQ49y +Lek/Eab4lfCLUPC3jrxDp+lHxHLb67p2n2cL2lzCum38+64Zo2ZEeSGKHltoMqFcSBGropvjn8J rHR77xPrnxB8OaP4ftL23sYta1DWrOGwvHntIbuIwzmXawaKdGXO0sAWUFSrND4e+P3wi8YXd9Z+ DvHej66+k6p/ZOpGyvoWWyl+zyXG5yzjMflxSHem4Eo4GfLfaNpu/T+kVZ2t/Xc8h+DPxe/aI1j4 Q+P/ABz4o8OXuu6/pvhmPXNJ0m48J3eiyRa01rPLcaJHDLiW4igkS2jScBi5ndd7sh2wS658SPif +y58f9B1i41vxNeLpOqaR4evbjwnc6LcatHNoVu5MVlJGsm37ZPdwoMM22JVLSMC7fQVv8TPhxeW L6pafEDw3PZxakNGe4j1WBolvjj/AEUuHwJ/mX9397kcc0zXviN4b8M+L9P8H63M1nJf6DqfiM38 zxx2dta2EllHOZpGYbD/AKfEwONu1JCSuBmk3GXMTutD5m1T42/tI2+veNFittVGmQatc6fchPAV 9nwpZx65b2Nvd2j7G/tN59Nkur8lRLHE8MbMqxEo2lo/xW+NXiT4naF4MtPEfiq30e8u10Zb+X4c 3Vk1zYvodxc/23NNc2/lQy/2j9ntVtyEUGKQsjrMgj+lV8beDHuNDtU8XaK0/ieFrjQ4xfxF9UjV BIz2w3ZmUIyuSmQFYHoa5nWf2gPgjoEmgpqvxW8LQr4m1KbSNMlGqQvFPdQxNLLGZFYqu1UwSxAD vGmd8iKy3Sjb+v6/rYH1Z81fDnx1+014V0/4M+GtS17xRqzX+geG7m9i1bwhPdzarJd3Qg1SG6v0 RVszp9pH9pDTESTPN87SbSh9Y+CmrftOy/Dfwb438a3Xh/xVceKNF03U9asr+KXQLjQC8IedIIIb W5a6lw65jkMP72N9pRZFji9auviR8O7K0vNQvfHvh23tdOvZdNvJ5dUgSO3uoo2llgkYthJUjVnZ DhlVSxAAJrLtfjL8OzHpba94ksfDU2v6vc6Loltrt3DYz6xNDcG3Bs43fM6SMFaIpkuksbAYcUtW rIdurPkCP46ftjzeBHljTVzq9/r89lPri+C786VYbbNJoRawf2X9uFo0khjbzrWaQS2zQiYees8X 0j8H9P8AiC3xQ8fa74g8feLNU8PagbO90jS9W0iOztrZZ7eJsQhoVlQxeWYzEWyC7GQGQlq9Fuvi F4AstVvdCvfHHh+31LTYpJ72zl1OFJ7aNI0ld5Iy25FWOSOQkgAK6seGBqmPil4FfUZbO38S6ZcW 1pa6hc3+oRahbta6f9ie3W4juH8zMbr9pQkEYUK28qdoZ2v0EdZRXK3vxS+HNkLWM+OfD8tzqOnt qunWqarbedf2wiaXzYFLjzEMaOwcfLtUnOATWdoPx0+EPiXxtffDXSPiJoM3izTGWO70UX8Ru45C rM0YQMd7oEfeqFim35sUvIqzO7orH1Hxl4Q0jQrrxRq3irR7LRrKV4LnUbi+ijtYJElMLo8rMFVl lBjIJyHBU88UQ+MfCNz4gfwnb+KdIl1yJDI+mJfRNdqoWNyxhDbwAs0LE46SIf4hkEbFFZKeLfCs l8NMj8TaS14XWMW4vYzKWZplUbc5yWtrlQO5glH8DYraN478J+JYbG98La9p2uafqCzvFf6bfQXF uFhIEh3q5yAzBTt3YJwcUAb9Fef2vx2+F974qsvC9r4s02RNUsoLvTdUS/t20/UHmnmt0t7eYSfv Lgvby/uwOdpxkhgNHwH8Xvhf8UP7Y/4V5490TxD/AGBcm01P7BeJL9lfnG/B4U7W2t91trYJwcO3 X+uwdbf13/I6+ivINC/ac8D+JNe+HXh3SNH1iS5+J2nXmt6N5stjAU06Ax7LqVJLlZNs8c0csUca vN5ZcvHGY5Anbj4pfDJtMs9bX4jeFzp2ohzZ3Y1e38m42TJA/lvv2vtllijOCcPIqnlgCWYHUUUU UgCiiigAooooAKKKKACiiigArDtvBfh608V3XjWC2uV1e9iEE8pvpzGyAKAPJL+WOEXkKD1PUnO5 RVwqThfkbV1Z+a7egmk9zzj4m/DXxb4n8UeGvHngDxjpOgeIPDdrf6fE2saG+rWckF55BlPkpcW7 rOrWsWyQSYCtKpVvMyvlXjb9i2PxhaeJbibx5bP4k8W6g0+q+I7rQIDfXdr/AMI7/Yy20xhaIPGZ QLp0Ty4zvljVE3bxr/taeMvjn4al8G6b8JJNV0rTNTmvDrev6X4fuNbn090WIWyG0gsbx5I38yd2 Xy4d5t1j+025kDHHtPDPxQ1Xxl4H8XW2seNPC9nffEnVZNZ0XTdFsbe2msUtNRMNxf5tXkbzRb2l uZGkwRNHsIl8uURHdtdv8glolfuUdA/YqvIdT1Pxb4k8W+HbjX5tTtdR0ubR9Als7bTgmrWuqTrF FJdS8yPaRxBtw2oiYwNyniPg9+yf4216xC63rbeHrDw1pOm+H9CuG8If2TcXcdro+vae0klt9tmY OJNeMxmZlMjwuqoEKSnE8Maz+178JvgL4G8Dab/wk8+PDfhQzX0XhGVLnw5BLZaos1nFHDp99I8k D2GlRTeZa3Ega7kJECyxmD6F+DKfHnxR4y1LxT4x+I2rQeG9LurG1ttDvvB0WmrqsMmhWE01wC4+ 0QsL6eY7N7iNop4W3EKYRJNcr2tb9SuZ83Ot73/Q8F+MH7HPifwhod94d+D729/ceKNCv/DNhY/8 Il9ps7BLrStE0uSV7k3kQs326SZBOVlISecBJXCrJ7/8Xf2dtf8AiL8TtM8f6P4w0Swgtk0SO4t9 R0J724hXTNXXVQLKdbiMW/2iSOGOfKPuW3hPWMV4343+Onxzv9as/h74Z8Za54f1ltd1mx1LUj4U jeCztJPGdlYadOks9t9nm2aZ9uACMxIVnl+ZNwpaT8XPio2sQS674m1PRn1dtB8N614m0fwvbX2s rDE/iMi4jjjtZUkM08FhH/qJIY1u5ZI0jD71HUhJ87kr6vf5fqbrBYhRsqcrej/roe0/Bn9lTS/g /wCF73wlpWvpDa6h8P8ASvBs82m2n2SX7TavqclxfqdzYkmfUy+OSrISS2ePPbX9g3Vb/wCFjfB7 xR8TtCXQZriO/u7jR/CkkeoXd3DaC1t5GnvL27SKJVWPNvBHFH5aCBBHC0kcnH+If2kPjPdeIdXl 8PfEPWbWzutI1A2UD+Cp2s7REutN/s+4juIbC5lkvLqy/taYgJNHCwVXtcwMJPRfgvf+OfE3xN+G /jLXPjH43uLTVvA9zc6j4f1R9KWFbyQ2skEEyRWMEhkaF57hTtilK2+SsSGSEz7SF78yu7fq1/W4 SweIimpU5JRv0emyd/6sO8c/sceJvFcx1TTvH3hfStXutYXVpbuHw5eIlgTpOlaZLDaQR6gkTW7r pjlre6S4iZJ1jZSImMvc6z+zc2p6nq+pWPi2PS31HxjdeK4zb6cNyCbw9LowhJ3jJR5muQ/cjbtB O8eYeMfHX7V95408S6L4UvPEelyS61FYwx/8IR9o03RLP+3tItba5gumj235uNOm1O7uAsrCBRsP 2ZoC8npPxR0f9oHSfCPgLwb4E+KWpT67feJbm11vxUfDdpcSrpwsNTuIzNCsYt4n8yKyhEwRU84x kxlXMLFRKVNuS7+vT/LuY024ztF7fd1/zPB/jR+x/rvhfSj4c+D8MN0mt+GtR8KWOmjwn9tt7NLr TtG06WVrtr2IWkvl6VuE7iU7ZZuJHCq/0J8fv2f7n413+kavYeJtN0+fRLGS2hg1DSjqFpcyf2to 2pATxiWMvCTovkum4ErOTkbcN4M3xj/as8PeDdW1DV4/H2qT6h4R1iXQLm1+Hkk8/wDbM+keH7vT le3trRzEkV3da3AvmjYPJ2TvI8e49p4M8CfFOw8TaDrVl4p+IOg2MXiXx1cXWh2lhaCwukbxBd3d u1x59pJIEuoyiq4kUmMo0BQu7tdRuF31V/8AgkRV0l00/wCAGo/sY+Kl0LV/Dvhr4g+DrCDxV4Vl 8O6xPdeDZbiSxeW81O8eXSgl9Gtqgk1aQRxt5hjW3gyzla6/wL+zRqvh/U9I1zxDr3haW707xz/w l/2XQ/DjadYQwr4d/sOO0t4XuJjGFVIpt24jK7Qo4I8x8OePfj14Z8JS6TFp/jPStW0Dw1o2maH4 fsfh3LJo32U6ZYvd6lJJHa/Nd20018q2EVxEXFikKwF5A5o6P8Sv2jfEviPwV4Wi8T/FaLTZtZvr HUNQPw8l0zUJbY6tcLZ3l1Lc6KbEx/YEtmdA1i8ZZ2IuGYQq223yr+v6/rqOK93n+Xnt/kdf8Nf2 IbbwjeeD38Wa74V1218JXOmItnbeGPskOoW+nafrFrBPcxvPMHvmm1nz5J+ATbx4UH5q7jxz+zhd a/8AFbwJ468H6x4f8M6V4NtrOxNlDpN088tpb3HnC0VVvEszAdsYQSWsjwOnmROHCGPz7RNH8WeF U+FE3inxP4l13xrJ8XNf07TrnxDDbQ6g+js+qLNGPJghLWkltaw3uCCpkW3ZcIkCJ9Z0JtO66P8A Jf8AB/MTu1r1X5v+vwPkrx7+yv4j+LPxa+KGsi80fw3pmrMY4byfw559/qMsvhqfSleO9Fwu21i+ 3yExeVkvC4DKJGz3HxP/AGTfDniuy02LwEvhjwsdKtY447NvDqz2F1LFf6Jdp58EcsW6IpoMFuyA jKOuCPLCt77RU07wd0/61/RlVHztN9Lfh/wx80aV+xXodt4e8a6dqWsaNPq3ivwxNotjqcOgqg0K 6uJdYlmmsozKWjgB1l0ihEgKRwqhkb7wv/tA/BC+1LQPiF4s8JWb3nijXrfQ08LpY2SLcaVrFndu 1petK24eUk08Ekvy4EMEoO4MRX0RRScU3cak0kv6/rQ8R8Vfs12knwt+H/w78CX2hwn4dajDqdkP Eujf2rZalMtrc27yX1uksJllZ7uS6MgcH7QqyHJzmx8Av2Z/C3wPhum/4l+t6kP7OgsNXm06OO+h t7TRdP0sI0nJ+b7DJJgEAfaGGOpPs1FVffzJ7eR8iar+wPNrOq+Mrm8+K1w1t4vufEl2qtp242B1 CG/hsoUXzArw2v8AbesykfK0klynKiMCrGofsl6n4c+Hd/DqfiWzv5IbDUIp7XQvDd7cnU2uZ9Ik Bu4rrUZ5btQmkmCSISpvtpzBH5YjXd9Z0Untb+t7/mNOzv8A1tb8j47+G/7IWseMbMfFH4mSWWk+ NLzUGv7SM6DHC1n5XiRtVgmEQnkMPnW8FjEYt7SRIpV3Z9wr3jQfgrZ6RovxM0KXVY/I+IuqXl8X tbNYZLOO4tIrcx5JYSMpjdwxAHz428En0yihq8XB7NW+W41Jp8y3vf5nz7a/ArXfiN4Hhj+Iej6X 4W8SX/w6v/Amq3WnwxSzwXMqrbm6tZFJ/cbY2lhVmVwkyq6o25RT8Afsf6PovjW28aePIfBOtYh1 jzdH03wstlpVtJe22i2SGzt5JZjCq22jMj/Mxc3kuCqnafo6iq53/Xm2/wA2ZqKWi/rRL9AoooqS gooooAKKKKACiiigAooooAKKKx7fwh4XtPEl14xttBsotcvYhBc6gsQE8qAKArP1IARcDtiqio68 z9PX71+voJ3OV+KXxktPhfqOi6U3gPxb4putahu7pYPDtrb3EsEFqI2mkaKSaN5MCZcRwrLK3IVG OAbdn8cPg3fRW0sPxU8KKbvQo/FEUU2rwQzf2W6B1vWidg6wFSD5jAKM8muZ+On7N/hn4/ahpEvi vxDrVhZaVpepad5Gl3LQPMbw2p3ucmOVFFsQYJ45oZPM+dCFAPlF1+wvq94/iWK5+KukSW3irRG0 y8Q+FpR9nmbR4NLd7SAXwtLWJltonKxWyzbF8nz/ACgFE9P6/r+vuNb/ANf1/X3++aN8dPgl4j0f VvEXh74xeB9U0rQIVudWvrPxDaT2+nxMXCvPIshWJSY5ACxAOxvQ1Nqfxf8Ahrp/hu68U2/jbw/f 2cETPH9m1mzAuXFidQWKOSSVY97Wg+0Dc6jyT5pIj+evF7v9jEWd5Z6r4J8aaT4eudM1XUdXtrYe HfOsJpZtdttXtRdW6XEXnLb+RLCoDIR5qujRmIBorv8AYc0e7sLi1Pj2SJrv4d3Hg6WKHSkjtBqk ttcWo1mOBZAElS3vLm3WINtELpGGAjXBpbTcpb6nuUPxb+GEmpahoUvxD8MQavo+nyapqmmSaza/ atOto2CyzXEYkJjjRjtZz8oPGatv8R/h5H4L/wCFkSePPDq+EjCLn+3zqkA07yi20P8Aad3l7SxA zuxnivn/AOK/7LlxbW95438H3d7qOvN4in8QyWlro8F297PNqej3kPmxz3tsjxQLo1rGyiWMvErb cSYzr+DPgT8Q9Q+C3gix1/XdO0jxxoHi/UPHbNrGjJqNo15eXWoz7bq0guUUug1EyARXG2OeKNkd wg3F7q/p/wAH7hLs/P8A4H3nsOqfEfw3p8/gkWs/9p2vj3Uf7O0m9sJI5rdv9Aur9ZS4bDRNFZvh l3ZLp2JIrN8afg6mgWXit/iz4NXRNS1D+ybLUjr1qLW5vMsPs8cu/Y83yP8AuwS3ynjg155qP7Ly a18EPhx8FNV8eXCQeA9LfSZtTsLH7PPexHQr7Rg0YMj+RIFvhMGzIN0WMfNlcrQP2X/G3hjxDaeO 9F+Ivg6HxMGvILtT4HcaOtrcWmkWfl2lkt+rW7pDodsoczSr+9mGwKUVGt3fYHsrHoPjf9pP4CfD uG/k8XfF3wlYyaTqlno2owHWLdp7G5un2QpPGH3RZAkkO4DbHDLIcLGxG2nxi+EckksKfFPwg0kF pa38qDXLUmO3umRbaZhv4jlaWIRseHMihSdwz414f/ZH8Q6O+o2d18TdHuNLlfSFsYoPCzW9zFHp +uPrCNcSi8Kz3Ejz3CSSiOMO7rIUJDK6+Jf2NrfxZ4x1LV9a8Y6XdeH7vW21uPSZvDayTStNqek6 heQ3twZ9t1G40dLeMGJPLikUN5wiQUl59vx7fqNW0v3/AA7/AKfieleP/wBoX4VeAPhQfjNceLNK 1fwzNJFBp93puq2bQ6jNJL5KRwXEkyQH592WaRVQI7MyqjEaGl/G/wCE2pWrSS/EfwpaXdvoaeI7 +yk1+yeawsGjjkNxN5crKIAs0RMwYxkOpDEMpMfxF+GNt4o8IWXhjwza6XpQtvFukeJ3AtwkTPba zb6ndMAg/wBbKYpyW/iklLMeSa5bxp+zhp/iq38Z3lrqul22u+JvFWm+KbHUbrRFuRYvZf2Qy20q iVHngkk0WFpFEkW5XC5BQNTdru39a/5a/IXRHV6v8efgb4fSxk1/4z+BdNTVNPj1axa88RWcIurO RXaO4iLSDfCyxSlZFypEbEH5TW74p8feBfA2hJ4o8a+NNB8P6NI6RpqOqajDaWrM/wBwCWRlUluw zz2rwvQP2LfDGmeLdE8a65qmj69qWkm0nJu/DsXlidbzWry7MCmRvJill1w+XFlvJ+yQkvKygiXx /wDslat4x+D/AIJ+Gdl8SrKDUPCngq68D3Gr6n4eN+t1b3enxWNzdRQi5jaC7KRHZJ5kgRZpkZZA 5pdGw62PVvEvjPwJ4d+Iui2HiOys7bU5PC+s6zDr1ysKRafp9rNpwu0e4cho0drm1kIHyEW+WI2L V5Pip8MJJPDkUfxH8Ls/jFGk8OKNYtydZVQpY2Y3/wCkABlJMe7AYetcH8ZP2e7j4wXGh6jfeLbS zvNE0SbTgj6P9otLm4fUdH1BXlhMwLW/maMsclvuzJHcMvmIVyeZ0n9lbxRoc+ryad8UNKRfGOl3 Gm+KpG8MuZ5DPqWqalJJpkgvALL99rFwFEi3WFhgySylmNhLXc7nXP2pf2c/D02kRan8bfBKLrWr 3Gh28ya9avEl3BCZpo5XEm2Movlq24jDzwIfmlQN0F/8Z/g9pcepy6n8V/B1mmi3radqbT67axiy uVjeVoJiXHlyiOKVyjYYLG7YwpI8z+GX7M3iHwVqum6vr3j3QL9tN8UW3iSK20bws2lW0aw+H30J beOM3kwjTyfIkyMgFHAUB18vH8BfsZW3hLxV4a17WPGWmazZeEL+zl0qxHhxYN9taRa2IPtLmdxL eedrrzvdBEDPbqRErOz03bZDXRvt/n/wD3bXviF4C8K+FV8deJ/G+gaR4beOKVdYvtShgsmSXHls J3YIQ+5dpz82RjOawNR/aA+BmlWl7eX/AMYfBcKadpMWvXStrttvhsJfL8q5ZN+4RSGaEI+MMZUA JLDPF/Ev9lvR/EfhQ+H/AIca9L4UnGoW17bSXl9rV7baSIIZ4ol0u3g1K1/s0qJ9o+zNHHsBjaNl IC4/w1/ZN1f4b/ETVvGUfxQTWrbWftEl1/aWjySaizz28cUsaTC6Frb27SRQyFLa0gci3t42kZIg CpbPl+X9f1/k1bS57b4E8d+EPib4R0zx54D8QWWt6DrEPn2d7ZyiSOQZKsMjoysrIynlWVlIBBFb 1c/8PfCjeBPAPhrwO2o/2g3h7R7TSjd+V5X2gwQpF5mzJ27tmduTjOMnrXQU3a+hKvbUKKKKQwoo ooAKKKKACiiigAooooAKKKKACiiigArnbTx/4VvvHN/8N7bUJX8QaZYx6ldW32WYIkEjbUbzSvlk k9g2eDxwcdFRVwcFfnTemlnbXz0d15aeonfoRzzwWsEl1dTRwwwoZJJJGCqigZJJPAAHOa+WPgb+ 3h4Q+K9t8U/F2oW8Nv4S8H6hYDQJdNilvL/UbS8mls7XzLaPdKtzPdW0hjgMaSeXcW+V+YO30J8T fAGmfFT4f6/8N9b1LUbHTPEtjJpt9Lp8iJcG3kG2WNWdHADoWQnbna5wQcEcJ4o/ZU+FXiG+lvtK gv8Awpv0O30WKDw20NhBbm1vo9QsrqONYyouLa5iLxEgpiWRXRw2BH9f1+H4jOS8IftWNPfeOJvF Pg3xetzD44j8K+GPCkeiD+3JCmkWN3cBog+worS3EvntIIvLaMhyHjDYHg39svTNJ8AXfxP+KGtz /wBiWenwazdWNv4ZmW/tbTUfEN5p1hMzibBRIoUV4BCZv3TPudmEZ7q3/ZSsba5fxDD8afiIPF7+ I5fEp8U50n7d5sunw6dJAYfsP2Q27QW0HyGAkNEjBgRR4V/ZA+HfhPSrLS7fxN4rv/sVvoVsJ766 t3lkXSNZm1m2LlYFBLXE7pJgDMYULtYFzUbbsTbtZf1qV7H9tP4S3Hhl9fv9I8XabeWFvqV9rmh3 GkeZqOgWlhPJBdXN+kLyJFGrROVw7NIAdisVdV7n4yfHXwN8D9Es9Z8XNeTyai8gtLKzWPz5UijM s8pMrxxxxRRqXeSR0UfKuS7orfOHx7/ZL1q+n8aaB8HrT4nRX3xUinh13WLXX9HttCWK6vJJngvY 5s3nkwNPdTKtrFvlF1JE8hVyE+gPjZ+zx4M+Od54T1rX7++0vWvBN/JqGi6lZ2tjdPbvIgVwYb23 uIGBKxuGMW9HiRkZSDklaycf6/4A1u0zmU/bL+Fl14v0Lwppeh+MNQi16y0TUY9Yt9HP9nWkGsOI 9Pa5kZ1aJpZWSMIV37nzt2pIyc54M/bcsNR0PU9V8ffBr4g+HZ4fGVx4N0y0TSo7241G7VbyaOBI beaRxMIrTEmR5atIjBzGWdO4sP2XvBloNUuL3xV4q1XUta1Tw/rF/qeo3cEt3PcaPcx3NuS4hACu 8WHUAKFdljEQwBsaZ8BPCOlavZa1b6nrDTWPji98fRrJNEVN7dWdzZyRn93nyBHdyFVzuDKuWIBB mG75/O33q34XCey5N/8AgP8AWxxmn/te/Dy50mXxlJeXrabe6FoOpaZoS6UU1Xz9Sju50ieQzmF2 MNvvYfIkCwTSSStGdyVoP25fg7rEvgmx8FaT4r8V6l46tDqNlp2kaaj3FvaLdtZy3EiySIJESaOX PkGZikTyqGiHmVt/FX9kj4YfF/U9c1rxRc6oL7WrzStQWQR2dzFZ3GnpcxwvHb3NvLDJujvJ0dZ0 lUhgVCsoYVdc/ZO0vxVd+Frnxf8AGDx3ryeFdTtdYhiv4dGczXVvem8jkEg08S2vOyEraPAphiRM feLEfPv+H9f11HL+72/H+v8APyOy+JXxa0X4Z6/at4k163sNGtPC+teKtUjbSprmZ7TTzZiSSOVJ AI9n2tcoYpGk3DaU2HdR8DftCeF/F/wp1z4z6x4a8S+EPDOg20mozz63axM01ilnFeG7g+ySzrND 5UuPkYuHjkjKh0K1sfED4T2XjzWbPxJH4t17w9q+n6LfaFbXmlfZGMcN5cWE8xKXME0bMTpsKDcp XZJKCpJUrjfDT9n/AET4VfDzxH4A8LeMfEETeJr261K41dIdPtrq1ubiNI2ktooLWO1iI8tXAEG3 eWZgxY5O4jlvD/7WPhzxl4a0DxzpGg+INE0LVtXntbVtX0mOR9ctY9JvdR32Tw3JSPi0bLS5ZWie F4kdgyZnwu/bx+EHxY8TaD4X0Twr8QtMm8R3MVpaXes+HHtLMPNYfb7fdOWK/vollEe0kuYWYfu2 jkfY8NfsffD/AMO6NLpTeJvEN69x4mvfFc9yIdNsjJd3Wjy6PIPJs7SGBE+zzM/yRqxm+dmbLA2N L/ZO8D6S9ilpr2srBpf/AAi8lnhohKk2hllikZwgBM8JWGUBVBQELt3cCervtp93V/Lt18gtp56/ 8A5G4/bF8PfEXwLpmqfDS28UeHNXv9R8IX8MHiHQjaSXek6nrdjZyyQiQMkiFJpoTIhIBYPGxVo5 D6J8Pf2nPhd8TviVqPwt8K3N/LqdlZXGpW9xJCgttQtre4S1mntyHLmJZ3EayOiLKQxiMiqWHnHw P/ZAi0r4ZeB2+KvivxbfeLNL8N+F7GS1urqwMWhf2VdW2o/Ybb7NAqPEbq3jR5HM0jxxIBLwGruf hB+y34S+CGuT3vgTxh4lttElvbq/Xw6E0+GxE05Y7pZIbWO6uvLVykf2mebaoXqUUhoWp7PRRRSG FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAViwa9qsvie40GTwVr UNjDGHTW3lszZTnap2Iq3BuA2WI+aFRlG5xtJ2qKuMkr3V7+unno1+N15CaPHv2mviX4x8D+DrDw v8LNMv8AUfH/AI3vf7G0GKwgtZ57MbGkub7yrmWKFxbwo7qJHWNpTBG5CyEjxrwn+2b47ku/A+ja long/UpNb8JeHLm/jk1l7TV31a+kvra7S2tRE6XEdvNYyGYBozEkcjZfon1L468f+CvhpoZ8UePP EVlo2nrKtsk1y+Gllf7kUSDLSSMR8saAsxHANcb4Nvfg/wCN/Gt58QvBni1dXv8Axv4Yhs0NswaF bOwubpXZDszFMJtSkjlR23BkUbFKPnPXVR6/pqPTd/1c+drT/gob4km8J6NLF8MfD2qeItcgjurN tO8TAaNIG05L42st/NFHHa3qrIGkilYJHCryebIypFJtn9uLxYlzqWrJ4I8Iz+FLvUNR07wzrZ8S GO2vRa67pWkfbLiVYpEhtN2r+YXG8lbORsBZFx9G/DHS/AUXw70nwn4OddT0HwuW8PRNdQ5bztOl a0k3hkUNIk1s4LhQCy7l4INdVJpWmTMWm021cmOSIloVJKSEGRenRiqlh3IGc4q6nL7Ryht0/D+v mKH8NRlv1/H/AIH3HzdN8WPiZJ+xb8Rvi54Z17SZPFekJ4vu7O/juvt1nALK/wBQjja2doyJUSO3 UxB02ttQMME1t6Z+0trrfHvT/gfquheFTOdSGhai1tr7/wBpJc/2MdWN3FYNBltP27bbzmlVvOYr t4+b2HUNT8Hrqtn8MdRjtXuNb0m8uoNLe0LwXFlbtbw3Ab5THtBvbdSjEFhJwCFbGr/Zmm/2l/bP 9n239oeR9l+1+UvneVu3eXvxu2buducZ5qIKyS7FSd22tL/5nyt8afiT8fNF8X/EHRtLutKubDRd R8B3XhzT7S+ksJ5nvfEMcDW81wIyVjuFhkilJ3qFYAKQzqXaZ+2x4kufH+gfDvU/hx4e0++kuJYf EN1P4rjgs7NI9fvdEeS3muIovOAewaRY9oldriCJYyGeWP6r+xWYuZLwWkP2iVESSXyxvdULFAW6 kKWYgdixx1NZml/8Ipe3t7a6Va2DXOg37xXAjtwrWt1NGlw+Djh3S5R2Yfe805OSaEu4N3R4t8Tv 2pp/h78bI/hafC+mjTLTTLbUdU1nU9ZjsBAtz9qWEQpKAJ2eW2SFI4md5JHcFY1j3vx2j/tffENf DlvB498I+A/CniW+imv1OqeKntNKtrVNIs9RCSXbQMTdMbt02KhQJa3MgdxCVf6slsrKe5hvJrSG S4t1ZYpWjBeMNjcFbqAcDOOuBTG0vTHzv061bLxyHMKnLRkFG6dVIGD2wMVPLLXX+tf+AF1dWX9a Hjll491v4ffsZQ/Ea11VfE2veGPhlHrK3WoztOdRuodMEyvO+7c/muoZm3ZbeTnJzXnWqftoeLPC nj6H4W+MfAfhe11/Tr3/AIqO6HicW2l2FmZLMtMl1dRxBhDBeo0gYJI7+SI4mE5MP0PqVt4A+HWn +IfE+p28NhaeIdQgn1iVkkmW5uJI7bT4t0Y3YBSG2iwoC4XJHLE750fSTcG6Ol2hna4F2ZPIXeZh GIxJnGd+xQm7rtAHQYraclKo6nR30/rsZxTUVFvXTX+u584fA/8AbH1L4xfFS2+E8nwxfSNQXR4t bvLptQLwiBI2gvfKBjUu1vqitYkd9jSZGNtVP+GjvEvgPxTceG5tNs9Zi1Pxfqf77V9da1nNomqW unJbaZCY3+1TiS5OId0ariMZHnqR9L2GgaDpUrT6XolhZyu0rM9vbJGxMsrTSklQOXld5G/vOxY5 JJqaTTdOmkt5pdPtnktJWnt3aJSYpGDBnQ4+ViHcEjkhj6mpTad/K35a/h+g5K6t53/P/P8AU8a+ GX7Q2qfETw/N4t0nwlY69a3ggurDRvDmt2txrVjbTSXaI2pwTyQx27f6KAQsrkSmeHB+zNI/B+MP 2uviX4U8Px+Kn+E+gXOm658QL3wF4d2eI3WaeW0udTgkluA9ukcTP/ZhEaeZ5eZkLzIu4p9Q2mna fYSXMtjYW9u95L59y0USoZpMBd7kD5mwqjJ5wB6Vl6BL4Q8U+F4L3QrWyutD1YPdon2XZFMZHMjs 0bKPmZ2Zm3DO4knnNLyLPmFv27tSikuLmXwP4Oe0g06d0itvHUM8093BoVvq8uyRIDCbMG5SD7SH K7VeYhVCq2zqfx8+IGj/ABI0q5hh8H6/pVtpSJ4uuNK8VytpmlRnVktBNEn2di91tklZo2MYQW8i tIcJn3RfE3w21DRtR+JZl06Wy8Oy30N3qslod9q+nyXNtcjcV3/unW8jyOCGk25D86+lp4Smtbzw zoiaRJbaPINPvNPtREY7NzFHMIZIl4jJjmikCED5ZUbGGBJJXkpLRL/Jr9RXfK11f+af6Hzp8Y/j /wCNPBXxO8Fakmm2PhLT5PC3iq5u9L8c+IoNKtr5rRtHlilR7Y3SvIBJOihtrIjzyYIQJJLefGf4 oar8QfDFt4Lt20nTtZ+JcehapYeIz/pAt38IJqi24jWLNvtk3Myh2fzoh8+yV0X6XuLO0ujG11aw zGJg8ZkQNsYEEEZ6EEA59hVSO48P61fSxRT6ff3mg3gSVVZJZbC5aAMAw5MUhguFPOCY5gfuvzUW le6JafRnkfjz9om48G/GnSvhhJpnhq3066uNKspr3VfEIs7yafUGvBEtramJvNA+xMAd4Mkj7FA2 Mw+ePA/7XXiz4U/Biz1fXHh8V6tF4ZsdUnfxL4kezWT7J4V0i/uYIZ2jmaa9uJLzeiAfOXmct8hB +w9H8S/Dn4ja9rWmabaxaxeeEbtLK8uptIlNtDcLIsvlwXUkYimkilgQusLuYZY0D7HCiukm0TRb iOKG40iykjgmjuYke3Rljljx5bqCOGXau0jkYGOlRa8bdb3+VtvxuaJ2k79rfO+/6Hzxr37Wt/Y6 reWmkaX4KcT+J5fCGmWOpeKPsmoQ3UN3BaSXV9CIX8i13yybSNzHdYgAm9Hk8pF+1l8TlFt8VZdL 8Kz+B5vhJc+PZNHtNRknmSeDaJFFykDZCySKjkBgiKzBSww31hcaDoV21691othM2pRrDemS2Rjc oudqyZHzqNzYByBk+tS22mabZOZLPT7aByZGLRRKpzI5kc5A/iclj6sSTzTi7b+f5W/B6/8ADCdn ovL87/lp/wAOz4p+Ln7ZPjHUfgJ4xjtrXwh4M8SN4R1y6e5uPHCQz2bRpDFbratBHJ/xMSt5DOLc urxmS0VirXGYvc/i1+0cfhx8StK+Hlnoem3LynQ5dQlv9VFrK0WqaumlxfY4gjGdoj5002SgRViX LGYmP2BdE0ZLW3sk0iyW2tGLQQi3QJESGBKLjCnDMOOzH1qrrb+GE1DR4degsnvL+5kstM8+AO7S mGSV0QkHbmKCVj0BCEegp3Vkv6ZLvrY+U/B/7anxI1DRvDh8aeB/Afh7UfFlloupafd3/iiS002C 1v7fWplkuJTA5RmGhOUjG7H2yNC2Y2L3dS/aL8b/AAr/AGLfhN8Q7a50fWvEmu+EtNvNT1PxHqWf s0f9mi4udQkgDrcXwR9nmRQEy4lLjO3B+nLm08GW9/Bo93baLFe6nbLDBayJEst1BbHeqqh5dIjK WAAIQyZ43c3r3R9I1OK3g1LS7O7itJkuIEngWRYpE5R0BHysvYjkdql67FK63PknxZ+2N428Qab8 Y/D/AIE0fw94e1LwXpPiG20nVNQ1qFrqTU9LCiVY7B08yY+X51yrKjwiNbfexaaSOH6t8K3Ot3vh 3T7zxGtgNSngWS4Fg7tb5PI2FgGIxjqKbE3hTWrzWbCA6Tf3cO3T9YhTy5ZE3RiRYbhRkjMcyuEf qsoOMNzrdOBVEi0UUUhhRRRQAUUUUAFFFFABWLBoOqxeJ7jXpPGuszWM0YRNEeKzFlAcKN6MsAuC 2VJ+aZhl24xtA2qKuM3G9uumyf57eq1E1c8t+LfhLxtd+M/AvxH8GaJpviJ/B8t8JtEvr9rMv9qh WIXVvLsdPtESiWMK4VWjupxvU4DeTXX7NvxYey1zxE11pC6/4mvn1fV9O0zXbqxhkE2q2c89jFeR QpKENjYxQGXaplkaUuqJKQna/tL/ABO1r4W6x4L8Q6S7yxWkesX13ZSXzWtnOkVi+1ruQAhYI5HS R3KtsVWcKdtcV4Q/a313xNr3h3QLrxJ8MtPWSSbz9TlvmFp4uxqs1hHD4eJmBlm220ryAmXZJNax gOJvNWE+WXNs1+XUqUbx5Xs/8zodD+CfxC0D9lxvhVZwW9prMniO41SfT7TxLdusmnT+IHv5rEak 0YnZ3spHtjKygsznLKCXHEat8F/2jh4wstf8K2jaOukSImhxr48vby00m3eDUIJIzBNEBdbZ7q0u 2EijKQfZ0Jjt4RLlaB+1j8X/AIueCR4h+H3iv4YaZcw674TM8doJNYNtba3eQQpZXBWdNs8Jdklf CGT5giQlQx6K2/a/8e+INa8V6H4V8P8Ag+5urPXrbQLCE300r6NNJrr6MF1cJykkoQ3cUahTsV0O dolalSqP92tNbfOy/wA/z763GvCCc5RUtLu99r+v/B177YniX9lf4jeLdG0+Ow0/VPBuqaT4T8QW Njc2PxF1O5mk1u5ttJSzvLm4VYn8kz6fNK6KGDyLDcSR+ZLKqSn9n79obVvFPi/VNe1rXjB4p8Qx XSy2fjiezNrpDa3Z3f2eOGKMOl5FY20ltvS5SKNcCHc1xPIfrbwu3iR/DWkv4yj0+PXzYwnVV04u bRbrYPNEO/5vL37tu7nGM81qVnZvW/5FxrRjtBaeb6O/f5f8HU+V9E/Z18V6F+0v4a8f6Tot7ceD /Dt7cx2v9v8AieXUH0+Cayvf3+nwFFe2Y3F29u8TzTI0BiYorxR+TzH7VnhT4kaTq3iPU7H4iwi5 8VHUovBmgw+MdT06+S/uLHRLG2nt7W2jb7TJBJb38qx/6qNrlJWZN0ssX2fRVR0bb1v/AMOZVJKV uVWt2/4J8gXv7MXxS0O+udS8NPcXcHiHXvEGs+LNOi8YXtgNVt5de+2WFrDKu77N/o00zMsQjRm8 2Nz/AKQ8lT6X+yz8Zj8OfEran8SNRb4lx29laeHtRl8Xaq2mhE0SzsriOQI6uFknF9unVFuGYQz5 EiJt+uKKSVlyrz/ESlZ3/rp/keCeHfg34+j+ArfDHWJ2fUf+Ehtr9LjUNc+3yyWo1GC8lLsltDHA VAnSOCJGjRUiG9iWxwkfwH/aBtdU1O/vLxNY0u81y2utf0mfxleP/wAJVBHPqExeIyRFdPUGfTv9 GjIjkS1kt5G8oK8n1tRTbbaZNlqeE+O/gt4+8TfD3SvDNp428Q2lvLP4et7/AMPW2vnyLG0t7yya +WDVhDDqM7mCC5XzZJg8nmMSFZl2+XeKv2V/jxb+OfF+ofD34g6tbaXcaMNI8IvJ46vrYaZANHFn tnj+zTOZBc+ZKhidFUzee5klhhRfseimm1sO58peCPgb8XNE13Tpdb8OTX/h7S9aurjR9IuPiNfn +zElnsp4bmSTymeZ4o4Z4dhY4Yyr+9ju5ZV6D4S/s5fEX4d+daJ8V/Edg2s6bbXOrX9rqw1IxX8c 92zW9rBfwzQw2giuoo08qONttnFuySxP0bRS3ab6fr37h389T5Isv2aPjRY/8J9ZeHNWsPDcviKT xlOmqw+K9Qm/tBtWu5Z7BTa+UEsvI8wO0kJLI6uYwxuZmr2D4ZfCif4feNPjB4ustHtEuPGniVNV 0wteviaIaXYRESHD+Vm7iuzwrEKwIBG1R6vRTbbjy/1qJJJ3PhKx/ZD/AGhrXwpZeH9O8Rz6fp02 t6lfawg8Yyx69qJlsrKC1u7jUVtWhkuo5IbxDJ5HEEsMoT7VEjJ9J/CD4RP4J8f/ABH8faloOn6f feNNVttQBs9QluVGbC0S4XLqvH2iKUq2xSVx8qjCj1qii4WPjab9lL4k6X8LG8MeBptWsri58Y+J 9RvrC98e6nbtdQz3WpjSLo3cck0mI1uLS5kjBDSNmSTfPHtb234O/BbUfBmt6h468ZeJ9c1jxTeT 6hbNNPrNxNaPZy3ETxbbVnMUJAt1YLGo2maXrvNeuUUXd2/l/X9foNpWS7anxDbfsj/G3w5o9vaw 6xd+JIL6DSrzxNpbeP8AU9K/tW7iXXhNHFdwrvggR7/RmVUVFMenhSrFQG6zwN+zB8YPCvjPTPF9 98R9UfXrnWLO313XrTVnla406HwlBYSS/ZrhXhaWTVbaOZt0bM4SFmJ8sBfrKiiMmo8qCWsuZny/ rXwR/aAT42XnjxvEVt450O3tIrfSNP1jxKdKtriM2EltcQ6lBBp80ciNLNJOghjQM0gMpb7PbouZ oX7MXxx0PwPJpOpfERNY8ULdSxT+I7HX77S9Q1DTR4fvrGztRM0dwbdra8vi8bYlBKG7cPcySBvr OihO17dRNXtfofI3wg/Y9v8AwqPBPiDXvD2j2mv+HdX1O5N8uozT3ZglhxazXRG2Ka78yKB5iihJ HDSHczOW5fRP2N/jVqvgTT/CPxF8W3t/cQXkmqaneHxxfzfbL0aTe2ieQiwxPHb/AGmS1nJklkln JkM3CqjfcNFF9/P/AIYfVPseKfAv4JXnw+8dePPiFrmm2sOp+M5LC6eSK9knbzBY26XYYHC83ETs GAGQegGBXtdFFOUnJ3YkklZBRRRUjCiiigAooooAKKKKACiisO28MTW/iq78Uf8ACUa5Kl1CIv7L knQ2MWAo3Rps3BvlJzu6s3sBcIxd+Z20+/yEyLW/Hfg7QPFnh3wPrmsw2uueLBdDRbSSN83ht4xJ OqNjaGVDu2kgkBiAdrYk8NeIvCXiyG6l8N3VtdroOo3GkThYSjWdzAxjli2sAVI7EDDKyspKsCfP /jX8C4PjP4p8LyavMbbSNHsNRVr20uDBqVheSPZyWlzZvtISWKS28wMeAyJkMCVPzvo37Hv7RsHx kg+JnjjxJ4N8VRReIk1mGGz1ObR0t54poW+2iI2NyVkuUt4DPBDJDzAIvPeGSRTMVd6v+rr/AII3 8LfU+3lsrNGZktIVLkMxEYBJDFgT9GJb6kmn/Z4Ms3kR5dg7HaPmYYwT7jA59hXyb+zz+yr8Y/hf 8V9O1rx54907XfBWh6OsOlWEdzP5ttqNpG+lWM6Rsu0K2kczDfzc3EmFKqjCjrHwT+NFxqfjaV/g 5oGr3PiHxHc3l3rk3jaS2ufEuknVEeDS7yNbdvItEsUjjwrTBkgMZjAupgJckrb6+W3/AA3/AAyZ rCjKadrad2l37tf1vY+sPFXifRPBXhjWPGXia9+x6PoNhPqeoXHlPJ5NvDG0kj7EBZsKrHCgk4wA TWkjrIiyIcqwyD6ivhix/Zo+OEvg3WPD/iT4S+FtS1jUvA1x4U0TW5PFjGXwrEdOubCOygi+zhZo Glle6kk3RkJdhAkhs4UMPxA/ZF+LuqXq6D4P0S6n8Ep4iuNVTSdT8YLazsbjTdLt/tT3LwXxF0lz ZapK0oQyj+0jLFKszOUSnHz+5mn1SpveP/gUf8z7vo618T+OP2T/ABT4g8A6lLp/w2u5vHPiHxVq mq6lPL4vhtrKTT7nU7vULa3ningvre5SIm0DWz2xiDvM6Plnd+/+JnwV+L+u/BDwt4W8C6H4Ttdc t/hvf+CL/S59WuLGx06S9sraHzrZ1iuGk8h7cqiNjckh/eAjJXPeN0tSamHlTfvNW8mn+TZ9M0V8 T+J/2RvjdrWrfE3VNLk8LWo8X6vbXqG91wXd7qNst48s1pLeHSlMdr5P2cRW9xHfxxmDyjugZ0b1 e/8A2c77xf8ADD4O/DXxhp+nxaV4F1iO41rTk1u4vkubGDTr+1hg+0NBC1wHae1EyNHFG8ZmTbsI Rr6XRh1PoGivhLQP2Ov2irODVpPEWuaBres3vw9TwtY6zN4puUeymTRbaBVaAaeZZo/7RtvNO678 nZK83kfaGYt7n+zD8D/iP8JJfEl98SvF9rr+oapFbwxz2xYRzSNPe6leTlCqhC99q17Gqgf6m3gJ 5JAWv9fl/Wg9P6/r+vvt7J4S8U6F458K6N418L3v2zRvEGnwapp1z5Tx+dbzRrJE+xwGXKOpwwBG cEA1rV8SeFP2Pvj14d0+W2tPFGi6brmn+BU8NaN4osfE2oLdwovhy301NNEItwsFompRy6is6M7h 9rCIOzEaifsyfFafxr4b1Gx+Fnw58LeHNCudDk0vTtP8cahcp4cFtq5vdTmtLc6dHE0t7b+VA+DH xG4Zysrg6OKvoybn13pWs6Trtq97oupW19bxXM9m8tvKJFWaCV4ZoyR/GksckbDqrIwPINXK+LPF X7EfiS08Ex+HfhloPg7TJm1fxVeJHDqdzpUdjc317I+jasr28DGa5062YpHCwVVMp2SKY1Y+r+B/ 2YW8Ox654isvGuueDvGmueJdc1C81zw9cW91Jc6fdard3dtbPHf29xAqrHNCSEiVkkEm18SSmSFb +vT+v60G/wCv6/r9T3yqUetaRNrNx4di1S1fVLW2ivZ7JZlM8UErSJHIyZyEZoZlViMExsB9018W eNv2PPjh4k8T+P8AXNMn8KxW3ifXodRkTUdaW8vtXtRPNI9pLdnSR5VsoNnJFb3Ed/HG1oIeYGZW 9Z+DH7Mdn4F+JenfEzXvBXhW31PT/BGmeHIbqC8fUr6G5tTcwGQ3ctvC8paze1iaUqjN5ZXYFUZa Std/1uFt/wCutv8Agn0PWV4l8U6F4P06HVvEd99ktJ9QstLjk8p5N1xd3MVpbphAT8808SZxhd2W IUEj5G8TfsifFTxr441658RR+Hho+uazLc6pqsXim/bUdZsj4m0nUrWKSMW6fZjaabYT2kIjmYK8 hKGPzHcuX9kf4ojxFoC3+j+CNa0rw94usNW8P6hd65dw3PhTTLPxFPfrZ2Notq8Th7A20P8ArIsF FjO5LeFqIpO13YOp9mVw3hb42/DLxp4N1Xx/4b8S/a9B0S0ivr+7NnPH5MMthb6kjbHQOc2l3by4 AJG/aQGDKPOviR8I/iZr37QPhr4maPpPh/V9J0aXTzbXV/4iurK70aJWuUvktbVLWWOQzR3ETu3m xNKIFif5EWsr4V/s5eP/AIffs9fEH4WTajoUuueJNCtdN0uZZ5WtUmh8L6ZpGZm8sME+0WMrfKpP llTgMSoiV/ZSlH4lsu+hVNJ1Ixls7XfzPo20uoL60hvrWTfDcRrLG2CNysMg4PI4NTV8h63+y98a rzxp4r1i21XQZrXVNOlsUvn8RX1vd6tYu+mY0iaNLcpZ2yRWl9EJ4mkcNdmVUV5Jge+1T4EeNdZ+ EsnhTQtab4dLJpN5YDwT4c1K3m0CN5pZ2Ei3rafFfRtiZWAgeFI2RVVSqku5OzdhJaK7/r+v67e/ UV8meJP2QfEGjfF3wbrXwot9NsvAvhS2RtM02bxFNavol7JqN3eXdxBGbO4Z0k+0Qgwxz2olW2WC RjASlczoH7KvxjtdLi0jxT8Nfh7r+jiSK81PQLvx5qD2uvam1o1tNql3cNphkNwGDS4ZJC73IkMi yWsWX/X9f1+tk9z7F8P+JdF8U2lxfaFefaYbS+utNmYxum24t5ngmTDAE7ZI3GRwcZBIIJXSfEmi 65qGtaXpd4Z7rw9erp2pJ5Tr5E7W8NyqZIAb9zcwtlSR8+M5BA+fvCv7MPjPw/8AEu+8f2Xje40K 88QHxOmqajpd8Lm6tYrzVbS801LWK8t5bcLHFDdeYrR7VlvZ2TcZC9Vo/wBnL4jWPxwu/HtpF4dv Tdata6g3ja91qePXmt4dGhsXtWsLe0jtCJp4TJIQ4j2uGEW+GHbMm0lp6/1/XlcaV2/n/X9fgfQu g+L/AA34m8pNF1WKaeXTbXWPsrq0VzHa3PmeRLJA4EkYcwzAB1BzE4xlSBsV8fax+xZey+HtYkt/ D3h648TX/wAOvC/hT+0rPVf7Ou5Luxe4TUG+2PY3OIprY2sJDwyCeOMxSqqHNfQXwE8Daz8NfhB4 Y8EeIbHQLPU9LtCl5DoEfl2Cys7OxhXZGFBLEkLHGm4nYiLtUaWVrom7vY7+iiipGFFFFABRRRQA UUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRXI6j8StI0/VI9KXStUupX1xfD7NbxxlUnNst1uOXB2C JiSQCcqRjpnSnSnUbUFe2om0tWddRXkngr9qD4V/ELxfp3g3wnfXN9dapE80MsZhZEAR5B5iCQyx kpGzfMg2Eosmx5EVmp+098PJrnXtPtbLWrq/8O397aXtnbwwyzLFZtItxckLKQkKmJuHKyHdFhP3 se7ullGOjJwlSaaSfyd0vyYuePc9dorzjwz8d/BvirQ7/wASWNtfx6fYa7b+H/NdrdzLPPcx2qEL HK7IvmSpkSBHCnO3pmtqn7Sfwi0nTtfurnxNGb7w7LqFvcaQNov55bLf5yQQsR5h2x7wQcBXVmKg 5ELLMY5OEabbTs7K9n8vX5Bzxte56hRXn918ffg9ZyYuPH2mLbi0kvWvA5NqIkeBCTOB5eSbq3Kj dlhKjDIYE97FLFPEk8EqSRyKHR0YFWB5BBHUVzVcNWpJSqwcU9rpq41JPZj6KKKxGFFFFABRRUN7 cPaWc91HaTXTwxNIsEO3zJSATtXcQu49BkgZPJHWmld2AmorxHQf2sfBniWe8i0bwf4nnWwsYNSm Jk01JRbzQ280cv2drwT+WUuoTv8AL2gsQTkEV0Hh34/+FPEejeNtah0XWLVPASXDapbzvZtcFoPO EirFHO7K263kA8zyw3BUkZI9Grk+NpX56drW6rra3XrdEe0h3PTqK4GT45/DO30601O+182SXLzJ JFeQPbz2vks6TGeJwHjCOhViRxkH7p3VZ0D4w+AfEOsnw7ba3DBqj6neaTBZzSJ5txLahWmKBWb5 QrI3zYO11OPmGed4HEpOTpuyv0fTf7uvYrmR2tFVZ9QjS0u7izja/ktFbNvbOhkd1GfLG5goc8Ab iByMkDmvN9P/AGkvhde2PhS+m1SSxPi68SytYbsxJJbNJafbImuAHIRXiaAjBYg3MQIGW2qjg69Z N0YOVt7ejf5JicordnqVFcD4u+NngfwfZ6HqdzcXGo2PiKzuL/T7nTQk6zRQweeSihw0m5SNuxW6 5baoLDjNU/a/+Fui2Gp6jquneIraLRpZ7K+L2kWIb23lijuLMt5u0yx+fExYExMGwkjt8tdFHKcd WSdKk3f/ADt+aE6kU7XPcaKajrIiyIcqwDA4xxTq84sKKKKACiiigAooooAKKKKACivK/wDhpb4V /wBu6hoJ1cpJpM1xDfzzSwQxWnkXMNtI02+RWjUSTkjco3LE7LkbN/QeA/i/4B+I1xdaf4a1yF9R sri7gn0+VlW6jFtcNbu7RZJVSwRgDhgk0RYLvArtqZdi6cPaTptJeX5k88b2udpRXGeGvir4f8U6 toujWWnaxb3Gu6Rd61b/AGuzMSpFbzwwSK5J4k3TodoyQOW25UN2dc9WjUpPlqKz/wCC1+aY07hR RRWQwooooAK5a8+GPgjUNUm1i90Z5rm4vF1B915P5fnrH5QkEe/Yp2DacAZGc5ya6mirhVnTu4Nq /YGrnP8AhrwF4R8IXl/qXh7RY7a91URLf3bSPLcXQiBWPzZXLO+1WKrknAwBwAKx7j4JfCi6uL27 n8D6c9xqM0013MVbzJ/NeR5Y3bOWidppi0RPlsZGypya7iitVi8QpOam7u2t302+7oLlRjP4P8NP 4efwq2kQ/wBlOxf7OCwCsZPN3qQdysJPnVgQVYAqQQMcbbfs5/CGC51G4m8KRXQv5C6RzOStmrWs NpKkBGCiyxQKJeS0m5g5ZcKPS6KdLGYilf2dRq+9mwstjiY/gv8AC+K3NpH4QtVixhFEkn7oA2rK IzuzGFNhZ7AuAn2eMLgCuyghitoY7eFdscShEXPQAYAqSis6lerU0qSb9XcEktgooorIYUUUUAFR XNvHd20trNv8uZDG+x2RsEYOGUgg+4II7VLRQBx2i/CL4e+Hbe8sdG0A21jf2wtLmxF5O1pIioka 5ty5j3COKJA+3cERVB2gCtdPB3hpNA1Lwsulp/ZWrveSXtsXciY3ckklxk5yN7yyE4Ixu4wMVtUV vPE15u85t9d3utvuFyrY4N/gZ8KpVAn8JRykwTW0jSXU7tMk0jSTeaxcmRpGdi7OSz7iGJBIrVsP hn4C0rUhrGm+F7K2vVvpdTE0alW+0yIEeTr94qAv046V09FOWLxElaVRv5vrv94WRnat4e0XW9Ou 9K1Kwjkt74DzwhMbsQQVYOpDK6kBlcEMpAIIIBrjNX/Z/wDhPq2mXGmHwrDarPp0mmJLbSOrwRPZ GwJjBJUP9mxFuwTtVQc7RXolFFHF16P8Kbj6NoTinujndX+HvgrXoLO11bw5aXEFhZTabbxFSsaW 0qKkkO0EAxsqKpUgggAYrJPwS+FRLuPBViksnmF5kLpKzyFDLIZAwYyyeXGJJM75AihiwAFdxRRH FV4K0ZtL1Y+VdiOCCG2hjtreNY4olCIijAVQMAAemKkoornGFFFFABRRRQAUUUUAFFFFAHETfBP4 U3TzSXvgbTbsz2wsX+1I0w+zB1dbcByQIFZQViGEXkBQCa0PDHw08DeDNQudV8MeHobC8vTI91Oj uz3LyOHkklLMd8jMF3SNljtUE4UAdPRXRLF4iUXCVRtPpdi5Ve9jC0nwP4W0O5sLzS9JSCbTLaaz tH8x2MMM0iySoMseGdEY+6L/AHRjdoorGc5Td5u4woooqQP/2QplbmRzdHJlYW0KZW5kb2JqCjEx IDAgb2JqCjMxMTUxCmVuZG9iagoxNCAwIG9iago8PCAvTGVuZ3RoIDE1IDAgUiAvTiAxIC9BbHRl cm5hdGUgL0RldmljZUdyYXkgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBhVJPSBRR HP7NNhKEiEGFeIh3CgmVKaysoNp2dVmVbVuV0qIYZ9+6o7Mz05vZNcWTBF2iPHUPomN07NChm5ei wKxL1yCpIAg8dej7zezqKIRveTvf+/39ft97RG2dpu87KUFUc0OVK6Wnbk5Ni4MfKUUd1E5YphX4 6WJxjLHruZK/u9fWZ9LYst7HtXb79j21lWVgIeottrcQ+iGRZgAfmZ8oZYCzwB2Wr9g+ATxYDqwa 8COiAw+auTDT0Zx0pbItkVPmoigqr2I7Sa77+bnGvou1iYP+XI9m1o69s+qq0UzUtPdEobwPrkQZ z19U9mw1FKcN45xIQxop8q7V3ytMxxGRKxBKBlI1ZLmfak6ddeB1GLtdupPj+PYQpT7JYKiJtemy mR2FfQB2KsvsEPAF6PGyYg/ngXth/1tRw5PAJ2E/ZId51q0f9heuU+B7hD014M4UrsXx2oofXi0B Q/dUI2iMc03E09c5c6SI7zHUGZj3RjmmCzF3lqoTN4A7YR9ZqmYKsV37ruol7nsCd9PjO9GbOQtc oBxJcrEV2RTQPAlYFH2LsEkOPD7OHlXgd6iYwBy5idzNKPce1REbZ6NSgVZ6jVfGT+O58cX4ZWwY z4B+rHbXe3z/6eMVdde2Pjz5jXrcOa69nRtVYVZxZQvd/8cyhI/ZJzmmwdOhWVhr2HbkD5rMTLAM KMR/BT6X+pITVdzV7u24RRLMUD4sbCW6S1RuKdTqPYNKrBwr2AB2cJLELFocuFNrujl4d9giem35 TVey64b++vZ6+9ryHm3KqCkoE82zRGaUsVuj5N142/1mkRGfODq+572KWsn+SUUQP4U5WiryFFX0 VlDWxG9nDn4btn5cP6Xn9UH9PAk9rZ/Rr+ijEb4MdEnPwnNRH6NJ8LBpIeISoIqDM9ROVGONA+Ip 8fK0W2SR/Q9AGf1mCmVuZHN0cmVhbQplbmRvYmoKMTUgMCBvYmoKNzA0CmVuZG9iago3IDAgb2Jq ClsgL0lDQ0Jhc2VkIDE0IDAgUiBdCmVuZG9iagoxNiAwIG9iago8PCAvTGVuZ3RoIDE3IDAgUiAv TiAzIC9BbHRlcm5hdGUgL0RldmljZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eAGtWHk8lF/bP/c9G4OxhIQYQhQRspadbGVfK8IwtmGMXbZERBGyFIlSKlnaUSFCJS22kiJrkSRL dvPcw6/f87zv83nf55/nfD5zn++5zvdazrnuOdecAYCT6EKl+sIAAIpfEM1yvw7R3sGRiOsBGMAG mIAiYHNxC6Rqm5ubIpT/o/3uBhBjqkOGYYtyvL41+s1F4cuUUZhHRvcoY+b/aQQa4hAASBrhcJM3 sBYDu25gawYODaIGIRxPBnbzdCEhOBLB0jRrS10EX0cwgbyBqxjYdQM/Z+AQNzJD9wMAWC4/kpcf ALgJBGuQ3APdkGmGXxIp0I2C4LMAwDoUij9in6MTkUu6UWmILscKgsUY+4L0SHMPAEBtNwDM2f+U eSNrqKABwL/4T9l2FgB4QwEo/xfejOX6XkG8bwI9FOTXzUGsOgBg+uj0GQkktgwAVtPp9OXLdPrq FQBQnwCo93ULpoWsc5GFQG0A/Kfxxpr/0kAhyWEkWATQwAQUB+9BQahVjBjWG/ea2ZkFw9pNeMbR wPWJe3qzwhaSQMnWceJOUZpYicSAFPtONZn9skq7tyrgFCeV2lXuqJ3e66AhojmqXaBrqbdqcNFQ 2eiliYNp50EbswYLecvzVss2DrY19gQHZ8fKQ7NHFJ1ozteO9rlyuhmQAt0vejSQR73w3lI+Br5O lBC/M/6F1IqAOtrbwIGgXyEglBAmFC4XoXRsy7HJyIao7OiAGMNY0djV4x/jHp0oiI9N8DpplaiZ JHtKJJk3he005jT9zGrqWho9HcpAZWLPYc8tZw1mN+eU5macD73gmmeRr3FRpkDoEkchunChaOLy lytdxS1Xa65Vlly8fuZG5E3fUrtbWmWS5ezla5XgNu4Oy13CPbb7rA9YHuIe0qtmq8dq+h69ffz0 SWXtpbrk+tCnHg02jXrP9jSJN/O1sD2Hny+8GHtZ35r0yrSN0Pbm9dk3Zm8Jb1+8i2/XbF/sqOj0 6Nra1dGd8l7n/cKHsh7Xj3wf3/Se/LTv0+znyj73ftb+81/EvpQNqA40D1oPDg0FD+OGc0ekR+pH rUZHv4Z/Y/12aUx+7Nm41fjQ96AJzETmD5EfFZPqk00/LX9+mfKemvkVMQ1Pn57hnSmclZwtn5Of u/9b9vflebZ5j/naBZYF/YXohaqFX4ukxb6lzpWotRQ6Hcm/GIiEYOgsrIXiRq1htmEP46qZ1fHt rCkENw5jLjVuHV5Hvij+IsEWoUkRoW0m4qTt8VLndgbKiO16Lhcgz6/QsMdLmaByU01H/eM+isaK VpIOm26KPsYgcv9XI1vj+6bcB/wONprzWnhb3rGat9lnG2JXYT/kuOmQ3mHKkTynRudRF6yrmJsu ydk9zCOVfNXzsdcb7wGfGQqTn5C/PNU44DAtJPBsUFFwUoh76N6wzWFz4R0Rt4+lR1KjbKPVYoRi 0bETx7vj6k+UxmcnxJ30S3RMMjylnCyewpVCP/39TFdqXdqVs4npvhmWmcrnhLPwWTPZfTkvcx+c L76QnheT73vRoUD/knyhcBG+aBZ5G9qK713NuxZf4nnd8YbHzWOlSbculBWXl1U8qWy6/erO67vv 7nXf//Cg52FPVW/1h5qeR32PB56M1v6sm3sKGtgaBZ7taJJt3tq82PLmefGLiJcWrVKvwKvutluv T7xxfCv7DvXufXtpR0ynVZd412x33fszHxx7JHqmPlb1xn0y/Iz7/KCP1M/ZX//Ff0B4oG0wYkhq 6P3wiZFdI92jUV/Fvr745jfGOVY5bjH+63vqxI6J5h8uP5Yn039K/myYsp+a+BUzzTV9fUZjpn3W dfbX3PHfHL8L5sXm8xf4FgoXdy92LqUvk1fcVuPX8uhEuj09jd6ynn8eYAzOQxAUAM3Bqai9aIDu xXRge5kAszQ+lKWFTZyQzL7EGcA1wu3A07pZha+YHy9AFqwVYhE2J+aK9G/bLuYtfkNiSFJAymxH 9M5S6XaZ37K8cvK7TeRtFciK1D2hSpHKkSoRquFqNHXPve77SBoemh5aztqOOpa6pnra+goGIvs5 DIHhpFGPcaNJuWnugdiDHmZm5ioWYpYEy0WrYeu3NrW2xXYR9sYOPA6DjrcPxR42OyJ4ZNypxvnU UVsXcZdZ1wa3dNJRd2n3RY9mcrqns5e014J3o88ZX1uKAKXL76S/nH8PNS5AIqCNFhzIH1gX5B7M HFwRYhOyFFoUZhQ2HZ4XYRgxd+xKpFUUNqommhIjFtMbm3XcKo497tWJ5Hi9BJBQe/JYonLiTFLF KUryjuSvKcWnXc8InelNzUtzPCtwtjc9L8MpUyRz+Nz1LJ9sxRw4513upfP+F7TyNuWN5D+8mFLg ekm1kLNwvKjpctGVuGLSVf1r20uYS35c77hRc7MIecuCypzKjSqUK7fdZr8D7kzfHbrXc7/tQePD h1X3qktrrj4qfJz3JLc2py6z/szT5IbExpPPYpvCm4NbqM89Xni8jGjNfFXS9uB1zZunb5++q29/ 0dHV+blr5j3/B+OeEx+ff1L4XN5vPIAZHB1e+uo6zv5DdurrXMbyVUb+N2ofcg4ArBIAWQYA2L4B wPIGAOkHkVLHAQDPUQDM2QCwVgXwJ0kAX58DUKAC+FM/+IA8OAA8QDTIBuWgGXwGsxArJAqpQeaQ JxQD5UDlUDPUDy3AHLAkrAMfhkPgs3Ap3AwPwnSUAEoFZYMKQmWi7qI6UDNoHrQy2hEdhb6CfoGe xghi9mMCMZcwrzCLWEmsHTYRW4UdwwnizHEncU9ws0zSTB5Ml5n6mAWZDzHnM/fjt+G98JX4RRZd lgyWAVY51gTWj2xybKfYhgnahELCGvtR9mYOGY5znICTyjnAZc3VtklvUx33Xu5qHnWeOt79vO2b j2z+zhe1hXPLDX5d/j6BKEERwaatvkJcQo+FyUQeYpNIkKi46OC2ZrE74kUSydvDJclSdjv0dspJ E2VYZH7vGpB9KXd3d778CQWKos0edSVRZbzyrEqfaqtarXrL3t59k5qQ1hZtKR1V3QN6zvo0g4T9 uYblRk3Gn02WD2w5uMfMyTzBotLyozWnjaFtgt0z+1EH+iHiYe0jnk5ZzvVHp1wl3EikYvcR8k7P EK8mH15ff0qTPz81KKA1UCIoNvh9qFzYqfChY7SobdGDsVfj/OLVT/Ikzp3qSmk+U5VWkX4tsyir JKfs/O28qouNlxqL+oszSg7d5LvVURF7R/Fe/8PzNdZPuOv6Gx43nX0e3Up9fexdcGf6+0cfP/eh BoyGS76d/JE9F7youPR++cdKz+q1taL184MX7AYm6/nPAZXgOfgCFiBOSArShhyQMyUZugI9gbqh KRgPi8EasAMchGT/FvwCHkWhUaIoLZQzKgZVgKpHDaLR6O1oY7Q/Ohtdj/6JEcZYYOIxDzHfsUSs LfY09hl2BaeEC8CV4yaYdjB5M5UyTTLvZg5hfoLH4M3wefhvLEosSSy9rLtYT7L2s6myZbPNEWwI Vez87MfZv3PYcjRwKnKWcAlyZW3i2JTCzcqdwkPgyeIV4i3drLr5Od8hvqktp/i38dcKHBZYEyza qr91TChVWFm4j5gioijSL5qyzUlMU1xSgiAxu71PskXq3o78nUnSITJuuyxkteRkd4vKcyswK0KK 83t+Ko0rf1MZU51Um92L2censVNTS8te20fnuO4Fvdv6rwxGDCEjYWNNExfTpAO3Dnaboy0ULI9a 5Vi327LYHbAPc4h3zDxUerj2yCenlaO8LmquR91SSU/cx8mCnpZeyd4NvhBFwy/U/y51iiYZSEbq Yk8oV5hJeEJEf6Rr1HxM2vHtcXXx9gmLiXmn1JMHTqem7k37kV6YaZe1JXskt/xCdL5NgXwhoWit WPKa8/WMm01lUIXO7RN33z6Qrcp4BD8Jr8c1nGtSaul7mdHm/FaofaVr9MOz3rK+6oHm4f5vad97 JvOnvk53zgbOLczfW8+/ODADYaAQtCC/IrkgJegwFAtdhVqhXzAfrAmT4TS4Gh5GcaA0UL6oi6jX aBj5hvuhr6OHMKIYN8xVzDesDDYQ+wiHwVniinDTTPpMeUwzzAeYS/EseD98J8tellusAqxpbFi2 WLY1Qiw7zJ7MsZnjMqcMZzXXfq5PmwK4Wbiv8ujzfONN36y+eZQvZ4sJP8RfIxAiqCy4sPWRUJSw HpGF2C1ySdRn20GxfeKKEju2i0pulRLcsXWnkPR2mV271GSN5Bx2U+WTFK4pNu4ZVsarKKq6qeWp z+/z0viiRdIe0aXpQwbZhtJGzSbOpksH08wlLR5bmVh/sfW3W3NIOMR1uNBJxbnVxc2VTiry0CIP eSX7KPgO+qVQVQNGAnOD9UPmwq5HHIlERxXHGMdOxmXEKyZ8SjxxSiy5+bRPKltaWbphxsC56Gyh nEfnbS78yk8t2Hmpocjl8nJx1jWlkvYb5FLMrfPlChWtt73uLNzLeiD98Fn1kZrZxym1knUvnpIb cc+Km81aFl8UtJq2wa8vvhV4V9Cxo7Oum/yBqae61+czoa/8i93AxBBleHjU6mv1GPe4+fcTE2U/ miff/eycav51f/rsjO+s9Oz3uYLfhr+n55MWBBcqFmUXby6JLRUsw8seyy9Xdq0krrxbFVh1X61Y XVo7sFZNl6BnMPK/cV9i1A+A1/X39acRTXX11of/vQfFNxi5k603LuTJ6ud60AzpGfgbNcjcGul5 kc9SYIiVPtIjNQvi8PAyMPoLE0kueiYIFkTkchGeukhdA6wINvWgGVgiGNGF7L1djM0RTECwn7uf jRWCEftQJNV3/Y7LwKnUIB0Gnw/Bhe6B+n84VRGe1nZ/6b6kBVvaIFgM4Xzw8Tdh8Bm+Vkjuen/F BjP5+R40ReSIX5jPK8iIET83gncBA+CC3MbIwB3IAFOgC/T+ehIROREZ+yOz7iAQ4Q2v8/6wbNfH Xv9LSwY5lRn2QtZ1fMAoginOXnE0xNb/tO6GWA4GvggvGNDkSuXG5Fb+5jC8+q57/qNl8m+SDWsb EW5wvQAJYf2RM+yvyxneKXc8QnL9w9VsPdESaHn0HrQOeh9aA60KiGheND+QQSuiVdDaaE20OjKn +nri4cTfsWzsj+vf6zT5EzMSud/f0n/zCryQ/zHW7+/ITgMs8n7kxzNQY9ZCLKP/1xbkHobc7QHQ 9aeG07zInkFEbeTfC3dpopGf2y5porycnCr4B4NbeB0KZW5kc3RyZWFtCmVuZG9iagoxNyAwIG9i agozOTA4CmVuZG9iagoxMyAwIG9iagpbIC9JQ0NCYXNlZCAxNiAwIFIgXQplbmRvYmoKMTggMCBv YmoKPDwgL0xlbmd0aCAxOSAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAv RmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBhZRNSBRhGMf/s40EsQbRlwjF0MEkVCYLUgLT9StTtmXV TAlinX13nRxnp5ndLUUihOiYdYwuVkSHiE7hoUOnOkQEmXWJoKNFEAVeIrb/O5O7Y1S+MDO/eZ7/ +3y9wwBVj1KOY0U0YMrOu8nemHZ6dEzb/BpVqEYUXCnDczoSiQGfqZXP9Wv1LRRpWWqUsdb7Nnyr dpkQUDQqd2QDPix5PODjki/knTw1ZyQbE6k02SE3uEPJTvIt8tZsiMdDnBaeAVS1U5MzHJdxIjvI LUUjK2M+IOt22rTJ76U97RlT1LDfyDc5C9q48v1A2x5g04uKbcwDHtwDdtdVbPU1wM4RYPFQxfY9 6c9H2fXKyxxq9sMp0Rhr+lAqfa8DNt8Afl4vlX7cLpV+3mEO1vHUMgpu0deyMOUlENQb7Gb85Br9 i4OefFULsMA5jmwB+q8ANz8C+x8C2x8DiWpgqBWRy2w3uPLiIucCdOacadfMTuS1Zl0/onXwaIXW ZxtNDVrKsjTf5Wmu8IRbFOkmTFkFztlf23iPCnt4kE/2F7kkvO7frMylU12cJZrY1qe06OomN5Dv Z8yePnI9r/cZt2c4YOWAme8bCjhyyrbiPBepidTY4/GTZMZXVCcfk/OQPOcVB2VM334udSJBrqU9 OZnrl5pd3Ns+MzHEM5KsWDMTnfHf/MYtJGXefdTcdSz/m2dtkWcYhQUBEzbvNjQk0YsYGuHARQ4Z ekwqTFqlX9BqwsPkX5UWEuVdFhW9WOGeFX/PeRS4W8Y/hVgccw3lCJr+Tv+iL+sL+l3983xtob7i mXPPmsara18ZV2aW1ci4QY0yvqwpiG+w2g56LWRpneIV9OSV9Y3h6jL2fG3Zo8kc4mp8NdSlCGVq xDjjya5l90WyxTfh51vL9q/pUft89klNJdeyunhmKfp8NlwNa/+zq2DSsqvw5I2QLjxroe5VD6p9 aovaCk09prarbWoX346qA+Udw5yViQus22X1KfZgY5reyklXZovg38Ivhv+lXmEL1zQ0+Q9NuLmM aQnfEdw2cIeU/8NfswMN3gplbmRzdHJlYW0KZW5kb2JqCjE5IDAgb2JqCjc5MgplbmRvYmoKOCAw IG9iagpbIC9JQ0NCYXNlZCAxOCAwIFIgXQplbmRvYmoKMjEgMCBvYmoKPDwgL0xlbmd0aCAyMiAw IFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBlVVNc5swEL3rV7wjzNQOEuCP3tq0 nWlPTYeZHDI9yCDHakAQwHbS/9O/1d/SlcCxQ2wnNeOxDGLf27dvV/e4wj0CunggIkwnM9QK1zC4 uGw40gYcTfpiwxLBeBK4D7TdKpjbyk9ttyiRmIOLCeIJRzgTB0DCAlkSAYGxw9D3FNDeHnH3ehzM kBb4mCDi4yDqHnVLCh7ycTwVM46kwMUX2sBouYT3x0fyC58Tl+uJeJS8w7EiRCCWuxhEgGLcMO+H Kkofc3gbbW4hkZepbMsaukFWGoWFe/j43sdPJN/OwLFj9CcRZuGAfgd9nj7r5Digz4M5prMhf3jX ul2hkI5lNdr44JSLqhtdGpuQKWGUylAu8VvVPqOIXjn6m+egHF/NyZZkwIEHexG7QtwQXlG1j2jy ssXW8hFx/I4YERNS1CgiRbDbJ5qVZUYCH+Czk5YY4ofRSxHSus9btpSrNPS1sKyDfSYKjJNqXSyU LXKzVtm4p9r9fHjGiww+tNbx2vCJGPDy1EOVS22IkTZoVwpZLZctHpIfWDdWAnuvzDP47H+MbJ3A 58EAjargXMC8ysm71VTjO9N5e0tQsiVRinKnFHaLVJl2UIw3Jy34EUeSF6lG3kbqXC5yZZOXyGQr R1mtN1QUa1CDpWxWZFIS/5XGOjUXxDR2ncWe9/T5xurnzIGp7FyY7tV88vTlSppbW6VKk1Sub2pN Lqe+2fZu07ertnllMvRueTHYaDKEYuoSGFTyfALH3ReKofvID28fDSlNvbuRz95QiQPlrBHDeC9d P1PhNT6jGu9UUhXJR//3bcatmgmZv9opm6psvTOkNaPtjEYWCrm+o6FlHQO56Ad1r76PkQhc2D3t k8fed1WnqmrXMme1Jn+H9Kq9RERnZEwnQ2SdcfG1EPhU0oly9Q81aLT+CmVuZHN0cmVhbQplbmRv YmoKMjIgMCBvYmoKNjkyCmVuZG9iagoyMCAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMg MCBSIC9SZXNvdXJjZXMgMjMgMCBSIC9Db250ZW50cyAyMSAwIFIgL01lZGlhQm94ClswIDAgMTAy NCA3NjhdID4+CmVuZG9iagoyMyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdl QiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSCi9DczIgOCAwIFIg Pj4gL0ZvbnQgPDwgL0YxLjAgOSAwIFIgPj4gL1hPYmplY3QgPDwgL0ltMiAyNCAwIFIgPj4gPj4K ZW5kb2JqCjI0IDAgb2JqCjw8IC9MZW5ndGggMjUgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBl IC9JbWFnZSAvV2lkdGggMzIwIC9IZWlnaHQgMjQwIC9Db2xvclNwYWNlCjEzIDAgUiAvSW50ZXJw b2xhdGUgdHJ1ZSAvSW50ZW50IC9QZXJjZXB0dWFsIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRl ciAvRENURGVjb2RlCj4+CnN0cmVhbQr/2P/gABBKRklGAAEBAAABAAEAAP/iETBJQ0NfUFJPRklM RQABAQAAESBhcHBsAgAAAG1udHJSR0IgWFlaIAfZAAUADQAIADQADWFjc3BBUFBMAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAD21gABAAAAANMtYXBwbG2BwMt+z50fom3mAhUtQ2AAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAADnJYWVoAAAEsAAAAFGdYWVoAAAFAAAAAFGJYWVoAAAFUAAAA FHd0cHQAAAFoAAAAFGNoYWQAAAF8AAAALHJUUkMAAAGoAAAADmdUUkMAAAG4AAAADmJUUkMAAAHI AAAADnZjZ3QAAAHYAAAGEm5kaW4AAAfsAAAGPmRlc2MAAA4sAAAAZGRzY20AAA6QAAACQm1tb2QA ABDUAAAAKGNwcnQAABD8AAAAJFhZWiAAAAAAAABlcQAAOjEAAAmWWFlaIAAAAAAAAGpaAACvcgAA GvlYWVogAAAAAAAAJwsAABZ3AACullhZWiAAAAAAAADzUgABAAAAARbPc2YzMgAAAAAAAQxCAAAF 3v//8yYAAAeSAAD9kf//+6L///2jAAAD3AAAwGxjdXJ2AAAAAAAAAAEBzQAAY3VydgAAAAAAAAAB Ac0AAGN1cnYAAAAAAAAAAQHNAAB2Y2d0AAAAAAAAAAAAAwEAAAIAAAAhAHIA7AGCAjUDAQP9BSQG agfOCV8LBQzWDsQQwhLcFPIXMxlkG6cd6iArInIkpybhKQ8rOi1HLzYxHTMHNO420jiyOow8WT4h P+ZBnkNSRP1GnUg3ScpLWUzUTlVPwlEyUplT+1VZVrpYDllfWrBb9F00XnJfpmDeYhFjRmRzZZ1m wmfmaQpqKWtGbF5tdm6Nb6Bwr3G/ctBz4XTxdgB3DngeeTB6NnsZe+58wn2WfnF/SIAigP2B2oK7 g56EgIVphlOHP4gviSGKFosNjAWM/439jv6P/5EBkgOTBpQGlPuV4pbGl6uYkpl3mmKbUZw+nS2e Hp8QoASg+KHsouCj1aTHpbqmsKedqI2pfKpsq1esQK0org+u/rAAsQeyC7MOtA21DLYLtwe3/7j0 uem63rvQvMG9sL6fv4rAd8FmwlXDRMQ1xSXGGMcNyALI+MnpysDLiMxMzQ7Nz86Qz0/QDtDJ0YTS P9L506/UZtUd1dPWi9dC1/jYrdli2hjaz9uG3D3c9N2w3mXfDN+Z4CTgreE54cbiVOLj43XkB+SY 5SzlwOZT5ubneegM6J/pMunE6lPq4+t07AXsk+0h7a/uO+7F71Lv4PBq8PPxevIC8ozzFvOg9Cj0 rvUy9bX2L/ai9w33Zve++Av4Rfh++Lj48flk+d761Px9/ov//wAAACQAfAECAZACQAMUA/4FIwZc B7kJOwrSDIsOYxBKEjoUQhZaGH0aoRzHHu4hHiNLJWQnhCmUK3MtJC7IMHEyGjPCNWk3DjiqOkI7 2j1tPvxAiEINQ4tFBUZ8R+dJVkq1TBRNbk7DUBZRalKyU/dVPVZ2V69Y41oTW0RcbV2bXsNf5mEG YiRjQ2RfZXhmjmelaLxpz2rha/NtCG4ebzJwSnFccnZzkHShdYh2ZXc8eBd49XnTerF7kXxwfVZ+ On8egASA7IHWgsCDq4SWhYKGbodaiEiJN4olixKL/4zrjdWOv4+jkIeRbJJSkzeUH5UKlfOW3pfK mLaZpJqRm3+cbJ1ZnkWfMqAfoQqh9KLgo82ktKWbpoSnaKhaqWaqe6uIrJqtpK6tr72wxbHMss6z 0bTWtdi22bfZuNu52LrZu9684b3mvu+/9cEAwg3DG8QqxS/GHcb5x8/IpMl6ylHLKcwAzNbNrM6D z1rQL9ED0dfSq9N/1FPVJdX01r/Xjdha2SbZ8Nq424LcSN0H3bbeZN8R38Dgb+Ef4c3ieuMp49fk g+Uu5dbmfeck58nobukR6bDqUerx647sKuzG7WHt++6R7yjvwvBY8Ozxf/IS8qjzPvPS9GL08fWB 9hD2nvck95z4GPig+TH51PqR+2f8Y/2E/pv/IP9Y/4//x///AAAAFQBKAJkBAQFxAfUCjgM8BAAE 2wXTBtsIAAksCncLxw0lDooP+hFxEuUUWRXLFzgYpBoKG2ccvh4LH1AgmCHfIyckaiWpJuMoGylP Kn4rqyzSLfYvFjAyMUsyVjNnNHA1dzZ8N3w4ejl5OnI7aDxlPWQ+Zj9mQF9BWkJSQ0xEQUUzRiFH EEgASO5J2UrDS65MmE2ATmZPT1A4USRSDlL5U+RU0FW+VqRXelhKWRVZ4lqxW4BcT10cXepeul+J YFZhJWH0YsJjkWRgZSxl+WbGZ5FoX2ksafhqw2uNbFZtG23VboZvMG/ZcIJxJnHNcnVzGnO/dGV1 CXWvdlV2+neheEl48nmbekh69XujfFN9Bn26fm1/JH/bgJWBU4IPgsyDioREhQCFvoZ7hzeH84iv iW2KKorni6SMYo0ejduOm49akBuQ25Gbkl6TIZPklKiVa5Y0lwKX0ZifmW+aQJsTm+Wct52LnmKf OaARoOqhxaKho4KkZKVFpienCaftqNOpuqqhq4isdK1erkmvN7AjsQ+yALLys+O02bXNtsO3t7i0 uau6pbugvJu9mL6Xv5PAjcGKwofDhsSAxXnGdcdwyGbJZsp6y5PMp822zrrPwdDB0cDSydPV1N3V 89ca2ErZg9rI3DPdrt9K4QXi5uT652LqD+0v8Of1kvul//8AAG5kaW4AAAAAAAAGNgAAlUYAAFbP AABSqQAAkU4AACgQAAAVYAAAUA0AAFQ5AALcKAACqPUAAXMzAAMBAAACAAAAGAAyAE0AZgB+AJYA rgDGAN0A9AEMASIBOgFQAWgBfwGXAa4BxgHfAfgCEAIoAkICXAJ2ApACqwLGAuIC/wMbAzgDVQN0 A5MDswPTA/MEFQQ3BFoEfQSjBMkE8gUcBUcFcwWfBcwF+QYoBlcGhwa4BukHHAdQB4YHvQf0CCwI ZgiiCN4JHAlbCZwJ3wojCmkKsAr5C0MLkgvhDDAMhQzaDTANiQ3kDkEOoA7+D2APxhAtEJQRABFw EeESVBLNE0QTvxQ8FLkVOxW/FkcW0hddF+sYfRkRGakaQxreG30cIRzFHWweEh68H2cgFSDFIXQi JSLiI8YksiWhJooneShnKVcqRCswLCAtCy32LuEvyjCzMZwygzNtNFU1OzYiNwo39DjeOcs6vjvH PNs97j8BQBlBKUI5Q01EX0VyRoVHmEiuScVK3Uv7TRlONU9eUIVRsFLaVBFVSFaFV8RY5ln/WyBc QV1oXpVfwGDwYiZjZGSkZeVnK2h2acVrFmxvbcVvGnB0cctzJnSAddd3MHiJeeN7cn0jfuKApYJu hDuGFYf1idWLxo24j6+RppOhlaeXrZmxm7idw5/Dod+kkqdbqhis06+AsjS037eZulS9FL/fwrzF kMh+y3DOe9F11JHXu9rd3gPhSeSn6IbtlvV1+TT61/vt/Nn9pv6h//8AAAAWADEASwBmAH4AlwCw AMgA4AD4AREBKQFBAVkBcQGKAaMBvQHWAfACCgIkAj4CWQJ0ApACrALJAuYDBAMiA0ADXwN/A54D wAPiBAQEJwRKBG8ElgTABO8FHwVRBYQFtwXrBiAGVgaMBsQG/Ac2B3EHrgfsCCoIagirCO4JMQl2 Cb0KBQpPCpsK6As2C4gL2wwuDIYM3w05DZYN9Q5VDrgPGg+BD+sQVhDCETQRpxIcEpUTEBOLFAwU ixUOFZUWHharFzkXyBhbGPAZiRojGr4bXBv+HKEdRR3pHo4fNx/eIIshNCHfIosjXiQ/JSgmDib0 J94oxym0KpwriCx2LWMuUS9AMC8xIjIUMwk0ATT3Ne826jfoOOk57jr0PAU9GD4rP0BAWEFrQoFD mkSxRcxG5UgBSR9KP0thTIhNrE7WUARRM1JgU5dU0lYLV01YeFmEWpNbq1y+Xdxe/GAWYTpiYGOO ZL1l6mccaFJpimrCbAFtPm53b7Nw8HIoc2d0oXXZdxJ4S3mFet98Yn33f4+BJ4K/hFiF+YebiTuK 4YyOjjyP7ZGgk1eVGZblmK6afpxVnjKgDqH+pCimX6iSqsWtAa9CsYOz0LYvuJK7Ar15wAfClMU2 x97Kks1f0B7S/NXm2MTbrd654cbk3+iP69nunPDn8tT0c/X497T//wAAACUATwB4AKAAxwDsARIB NgFcAYABpQHLAfECGAI/AmcCjwK5AuQDEAM+A2wDnQPOBAIENwRuBKgE4wUiBWMFpQXoBi0Gcwa7 BwUHUgehB/IIRQibCPMJTQmrCgsKbgrUCzwLrAwbDI8NBg2ADf4OgA8CD4oQFxCiES0RuRJHEtwT cRQLFKUVRRXoFpEXOxfmGJcZSxoBGrobdhw3HPgdux59H0QgCyDWIZ8iayNOJD0lNCYqJyIoHSkc Kh0rHiwnLS4uOi9JMFkxcDKIM6Y0wzXkNwo4NDljOps79z1pPuBAZEHlQ3JFAUaWSCxJxktfTPpO j1AoUbxTS1TgVm9X/lmFWxJcoF44X8thY2L/ZKFmQGfjaYprM2zibotwOXHlc5h1RXb1eKh6XXwE faR/SoDugpKENIXch4OJJIrGjGuODY+tkUiS4ZR+lh6Xu5lVmvGcjp4rn8KhYaL7pJWmNqfSqWer BayZrjOvy7Fpsvi0lbYst8S5Xbr0vIu+KL/JwWfDB8Skxk/H+cmey0zNAs6d0BvRntMq1L/WZ9gI 2bnba90O3q7gV+Hs423k5OZT57npFOpQ64Psre3G7tHv1PDG8bXykPNs9Cz06/We9kj28veI+Bz4 r/kv+ar6JPqe+wL7ZvvK/C78h/zR/Rv9Zf2v/fr+Tf65/yb/kv//AABkZXNjAAAAAAAAAApDb2xv ciBMQ0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbWx1YwAAAAAAAAASAAAADG5iTk8AAAASAAAA6HB0 UFQAAAAWAAAA+nN2U0UAAAAQAAABEGZpRkkAAAAQAAABIGRhREsAAAAcAAABMHpoQ04AAAAMAAAB TGZyRlIAAAAWAAABWGphSlAAAAAOAAABbmVuVVMAAAASAAABfHBsUEwAAAASAAABjnB0QlIAAAAY AAABoGVzRVMAAAASAAABuHpoVFcAAAAOAAABynJ1UlUAAAAkAAAB2GtvS1IAAAAMAAAB/GRlREUA AAAQAAACCG5sTkwAAAAWAAACGGl0SVQAAAAUAAACLgBGAGEAcgBnAGUALQBMAEMARABMAEMARAAg AGEAIABDAG8AcgBlAHMARgDkAHIAZwAtAEwAQwBEAFYA5AByAGkALQBMAEMARABMAEMARAAtAGYA YQByAHYAZQBzAGsA5gByAG1faYJyACAATABDAEQATABDAEQAIABjAG8AdQBsAGUAdQByMKsw6TD8 ACAATABDAEQAQwBvAGwAbwByACAATABDAEQASwBvAGwAbwByACAATABDAEQATABDAEQAIABDAG8A bABvAHIAaQBkAG8ATABDAEQAIABjAG8AbABvAHJfaYJybbJmdphveTpWaAQmBDIENQRCBD0EPgQ5 ACAEFgQaAC0ENAQ4BEEEPwQ7BDUEOc7st+wAIABMAEMARABGAGEAcgBiAC0ATABDAEQASwBsAGUA dQByAGUAbgAtAEwAQwBEAEwAQwBEACAAYwBvAGwAbwByAGkAAG1tb2QAAAAAAAAGEAAAnIQAAAAA w5X4gAAAAAAAAAAAAAAAAAAAAAB0ZXh0AAAAAENvcHlyaWdodCBBcHBsZSwgSW5jLiwgMjAwOQD/ 4QBARXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAAqACAAQAAAABAAABQKADAAQAAAAB AAAA8AAAAAD/2wBDAAMCAgICAgMCAgIDAwMDBAcEBAQEBAgGBgUHCgkKCgoJCQkLDA8NCwsPDAkJ DRIODxAQERERCg0TFBMRFA8RERH/2wBDAQMDAwQEBAgEBAgRCwkLERERERERERERERERERERERER ERERERERERERERERERERERERERERERERERERERERERH/wAARCADwAUADASIAAhEBAxEB/8QAHwAA AQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIh MUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpT VFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5 usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAA AAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEI FEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVm Z2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK 0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiivnn9ov4jfEDWPGeh/s3/BjUf7L8TeJbRtR1nXQrM+i6aG2F4wP+ WrkMobcCuBjaZFkTtwGBnjKyowaSs229opatvyS+b2V20TKSirs+g5ZYoInmmkWOONSzuxwqgckk 9hTlZXUOrBlYZBByCK+SvF37Meo/Crwz8SfH9v8AFnxN4lsZ/htrWm3Nnr9011N5zwvL5qy5A2/I BtK5yS27naH/ALP/AO138LdP8GfDb4Z3Np4lkk+w6b4bl11dNJ0mHUTAoW1ecsG8zIC8IQOudoLD 1pcPurh3icum6yi7O0WraXe7+Xn0M/a2dp6H1nRXjPxQ/as+Hfww8T3HgxtF8U+Kda061N9qlp4b 00XbaZDtDB7hmdFQFWB6kgYJxuXOb4y/bI+FXg3w14E8bXUOqz6B46W6khvFt9jWiQR5YSRt8xcy MkYA4OWYMQF3cVLIsyqqEqdGT5/h030cvxSbXdLS5bqRTs2e8UV458Pf2pfh546sfFt9qWl+IPBv /CFQQ3erxeJrJbSWKCVWaNwqu5OQnT7xLKADkZzvD37Yfwy17xDpWi3Hhzxvotj4guorLRdd1XQJ INN1OaUjyVhlyW+cHKllUYySQKTyTMeacfYu8d/mrr1010vpqHtYWvc90orwgfEDwd4Q8dfHTxhp t/4r1XVPCGl2d5rOj3dwv2BfLs2lj+w9dgZQRIWGd4JAI60/BH7bXwq8eeLtD8LaVoPiy3tvENwL Cy1u705Y9Ne78oSG383zMlwT5fCkF8YypDm/7Cxs4upRpuUYxTbta14qffs9O61QvaxW7/pH0HRX iPjb9rn4beEPEuq+FtN0Hxf4vu/D7+XrcvhnRze2+lvySs8pZVBAVtwUtgqwOGVgPVvCHi7w7488 Naf4v8J6kuoaRqkIntLlUdPMQ8Z2uAynIIwQCK5MRl2Lw9KNatTcYy2bXdXXpdaq+61WhSnFuyZs UV8Pfta/GfXPCf7W3wr0vTNdNvpXhw2t1qKxSHahu7hoZ1lA4z9nVcZ6CQkdeX/G/wCLGtWX7dXg RNMk1BtE8JXFh4b1FN+2BLvVFlbIGed0LRE5HW3P90V79DhLE1adKpzJKpTnU225XZR/7ebjr05t n1ynXUb+VvxPt6ivL/i1+0P4G+EOraZ4Y1Kw13xB4k1hDNaaF4fsftl88I3ZmKFlVYwUYZLAna2A QrEcbrH7afwx034ZaR8VotL1s6Te+Jk8Majb3Vt5F3pcvlySO0sfzB9qx5whbO7GcggeRQyTMa8I VKVFtTdl572++zSezatuaOpBaNn0FRXiHg/9rj4d+MIfEqL4c8X6JqXhrQ5vEb6XrWli1ur2yjUl pbcb2VhnAGWUksMcAkc34O/by+Enil9AW80HxTpVrrUsFhLrE2nZ0izv5EDG1e6JBLKTjds24+Y4 XJGi4ezR81qEvdtf5q69brawvawte59J0V5Ne6r4U/4aet9LbW/FK+JLbwO14NNSUHR5rRrtl37M 5+1B1xkjBTbzkceb+Hv+Cg3wk1yz0q+fwp4whtrhoItYvo9PWSw0OWWVo1W5n3rxwHyqnKsMfOGQ KlkWNxEebC03NWi3ptzXt11vZ2fV6b2E6sY/E7H1DRXknxK/aZ8AfDjxOfA0eleJfFviaK3W8udH 8L6Yb+5tIWxteb5lRAdynBbdhkOMOpPXfDD4o+Efi74XXxZ4Nubl7UTNa3EN1bvBPazpjfDKjDh1 JAOMj0J61yVMtxdOgsTUptQdrO3fb5Po+vQvnjflvqdTPPDbQvcXMyRRRqWd3YKqgdSSegqDTdW0 vWbb7Zo+pWt9b7ivm20yypkdRuUkZr42/aM0b4J6/wDti6XafHi8sYPDkPw7jlR7u+e2UXIv59g3 IyknaX+XnIyccV1PwovP2NPBN143+JfwCxd6z4R8OXN3qtvZXF6BNaKvmlUE/wC7bLQL8yZwduSM 8+zPIIxwcK8faSlKKlpT9xczsk58/frbfSxn7X3rafefVdFfOfg79uf4VeMdX8O6ZbeHPFtva+IL u20oaw+nA6Zb6jPGrrZvPuyZAW2HCYyN33PmHJ/Ez9rHxL4X/aB8NaJY/D74mroNl/amn6npS+HY 2bWnj27J7H58zIpAfdlcIwOPnIrClwxmcqzoTp8suWUtdNIpu3rpb7r2Wo3Why81+34n1xRXhni7 9r/4b+CtU0vw9rXhrxmdd1rQbbXbDR7fR/NvZhM7L9m8tX+W4Ty3Z1YhQF4djxWN4g+Nnwu+Lvgb 4deLv7U8c+HrbVPHttptjHaBLa5W/jMoWG9UOwNs235gjMcsnTDAYwyLHNRqVKclCWztfo3p32f3 MbqxV9T6MoryD4l/tOeCfhx4v/4QGDwz4u8YeIIrUXl7YeFtLF9LYRNjYZ8ugQsCCBknBUkAMuW6 n+1Z8JtO+E+ifF+O41a+03xHciw0vT7SxaTUbq73MrW6w5A3q0bgksFOBhjuTdjHJsfKEKkaTam0 lpve7X3pNq+6Tew3Ujdq+x7DRXjXwP8A2g9V+L/irxN4Z1j4U674MbRILa8sjqzETXtvM0oV3j2K Ij+7Hyhn5LDPyHPstc2MwdbCVnQxCtJWe6e6TWqbWz7jjJSV0FFFFcpQUUUUAFFFFABRRRQAV8se PtT1n4A/tMa58ZdZ+HfiDxT4V8YaDbWSX+h6eLu50u5hKoYSu8bI3ADEnAZmUDJVq+p6K9DLscsJ OfPDnhOLjJXaum09GtndJkzjzKx8yXvxS+K3xl+F/wAXZrv4O6j4Z8Jt4Q1G10IagjjWL+5MMy/N bgHarKUwo5B6NIG+ThviT4GuPBX7G/wn1Cw8PS2UvhDWtD8QavZrA/n+Ydyy/JjO8zXGSPUmvtSk ZVdSrqGVhggjIIr0qOfqjOPsaKjCM1LlTeto8tru+rV9e70XQh0r3u9WmvvPiCx8SeG/hVqH7QPg D4jeF/EMXiD4g6vqN3ocun6HNeSazY3sbiGO3lQYYpvbKsyqrOyg7gwGJ4W8PJ8QdK/ZP0fWPD2p Q2mi3+sWOqRS2zIbe6tDGVWTI+Xc9uTg9QCOoNffRVWxuUHByMjpQFUEkKBk5PHU11/602TlCk1N 7vm0v7KVK6VtNJJ2u9Va9tplR5lyt6a/i0/0PhT9pDwp4w1v4r/GLwX4X8NXWqTa94S0PXoLO3jy bu3sruJZIUHdiBIwVQWbydqgkgHY8a/FvTvjX8bvgh4H0nwZ4i0rw7Yaw2qSya3pzWbT3kNv5iRx q3LGE7g7DI3OMEjBb6v+ImneOdT8KXkHw11zTNH8SfIbO81G0NxAoDqzoyjkBlBXIBxnIGQMeVeE /gp8WfEHxW0T4t/HfxpoGo3PhaC4h0PSPD9rNDaWkkyqkkxeQ72ZlBBVsjgY6DHZg86w8sKp4hRj KnGSjrLm5nSjTTslb7MdbrltJu/ukzpvmdup5j8QdB8Y6fpf7V17Y+GdRWXVYbM2kz2jbLu2+yqs xiJHzhU8zJGcH3yKtfEvwnaeBvhT+zXb6XpzQ2+leNdCWeJYNj75InZ3cAD5twJYnqTzX19TWjR1 2OisvBwRkccivKhxHUj7O8NItPfe1NU1+Cv82aOno0vP8Xc+Crfxp4h+BnwG+KHwc134Z+KLjx1e S6s8+rQWkhsr62uEk3ambwjG1I88H5mZUXgltn1T+zFaRWX7PPw6iijCB/DlnMQO5eJWJ/EsTXnf jb4PftU/EnSdR+HXiz4veEIPCOpTst1f6ZpM0Gq3Nruz5BUsYo1YfKcEnHBLgsD9B6Bomn+G9D0/ w9pVvHBZaZbR2lvFGu1URFCqAOwAA4rqz7MMPWwqhBxdSc3OXK5NfCkviStd3tFX5er2SinBqXkv 8z4h1j4b+IfjVbftV+J7jTcak+oLo+kxxWjPNINKZZESIcsWlWCFfl+8zcDtXPp8OvF2pfsheLfj 5r+m3cnjzUfFEHjm3JtJFmtlt5xGp2sSTAkL3Eq5+VUb0Ga/QwKqksFALHJIHWjAIwRxVQ4wrwUY QppRUoStf7MIxi4bbS5I39Bugm7t9/x/yuz450n4i+Gvhp+0j4n+M3xG0LVbfQ/iN4Y0q98MavFp c92I9ttEs1p+7RjHKzqCU6fKpYjcufH38RR6H8C/D4uvCfiG0l8P/Hm3v20y509o9QmgkhluIlEL HmVkYKE3HnHOCDX6SCKMRiIRqEUABccAD2ry74+/CfWfitZeCotCvbG1l8M+M9O8R3JuSw86C380 MilQfn/e5GeODyK3y7iPDe2hGtT5VaCb5tLU4uMbLl0unZ66vVJEzoycd/M8JtPFEnx++NN18T/C /gHxDovhXw34A1DSbq+1mwW0a7ml8wiFFDEsigk5BO07gQuVLeVaD8Sbj4qfspaD+zB4H+GniSfx HqzWttcakdP8rTbaJLxZjcmUFi4/dqp4XJZucgK36Ia9pr6xoWo6Qkoja+tJbYORkKXQrkj2zXH/ AAF+Hd/8J/hF4b+H2q3NvcXmj2piuJbdmMTyF2ZihYA7cscZAOOw6VNDiPDU6HtFS96nKm6ceZ6c qm+Zv7VpPbTddEKdGTmtd07v/wABX5L8DzTVNA8VWv7Umr+ILTQb6ZB8KxaWl8LZmt3u1uZD5Qkx tL8g7c5wQe4rw268EpoP/BMe8Nvo7Wt/fyQaleqbby5pWOpxqGfgFsRhME/wKvYCvvymsiOpRlBV gQQRwc15+E4jqUPZe5fklSlva/suaye+/N8vM1lSvf5/ikv0PkLRvHGr/AX4o/FPVvEHwr8UeItU 8aS2+reF77TLOSeLVIvJCpZvKFIg8kn5i2cLvO37gk7T9gS3A/Zs0fVZBuutV1G/u7qQnJkk+0yJ uJ78IK2viB4L/as13Vdc0Xwd8UfB2k+FtYPl2122lzrqulwlQGWEq2xmHOHY55yNhAx6F8JPhvpX wk+HeifD3Rn8y30i3ERlK4M0hJZ5CPVmLMfc105nmGHnlns04urN02+Vyfuwg463SUd1or6p7LlR EINT8tfvf9M+Z/jvqPwk8G/te2fij9oHTLKbwjf+A1trCfUdEkv7b7Yl4xKKqxSZkCFmJx8okAOA wz29/wDFb4D/ABR+B3xV0P4F3dleTad4N1AT29jos9nsElrMqKA8SbslSAFz0r6Mnt7e5QR3MEcq g52uoYZ/GmQWVlasXtrSGJiMEpGFJH4VxTzmjOlRU6cuekope+uT3Xf4OS92tPi318i3Td277+R8 XeLfCK+G/wBlb9nz+x9Cnij07xf4f1fUokjYvG8iymVmU8gmaYDHq+MV6x8a4LmX9qD9ny4gt5JI oX8QmZ1QlUU2kABY9gSQOe5r35o43QxuishGCpGQfwpSqsQWUEqcjI6Hp/WlLP5yn7ScLv8Afdf+ fsWu32eZvz8txexSVl5fgfOv9mm4/b5a9nsWkig+GKtHK0ZKpIb8gYPTOA+PofSrHx2+H9tp2sfC aLwZ4MZdPtviFHqeoR6bZZihMkcpeeQKMIC5BLHAyfU19BbVLByo3AYBxyB/kClrD+2JqrSqxj8E FG197Jq/4lSp3jKL6/5HwJ8TfC7eFP2gviC/xw8VeP8ASPBPi6WO+trjw9psjW2txCJUWyuLmHdJ tRN8XkkAcb8qCC3Q+K/EfwM1L4OeHvDnjX4F/EvwL4PsdalHhvVdPsitzppiSMi7nKktC8ryygKV lL+WZOTgj7ZIB4IzQQGBVgCDwQe9en/rRzKj7Sm701Fe7PlXux5U0lHSVt3Lm00SS0JdK8m7736d /wBD5m/Yy8XeNfEM3jWwvNb8WeI/A9ldwt4V13xTAU1G6Rg/nKzsSZEVgu1jjvwvKJ9NU1ESNQka hVHQAYAp1eFmeNjjMVLERgoJ20Xkkr7LV2u3ZXbeiLhHljZsKKKK4CwooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKzbPxJ4d1DWdQ8OWGv6dc6tpIja/sIbqN7i0Ei7ozLGDuTcvK7gMjkVp Vj2Pg/wtpniPU/GGn6BY2+t61HFFqF/HCFnuliG2MO3U7RgD2A9BjSn7O0ue97aW73W/la/zsJ36 HH/tC/ELxX8L/hZe+LPA2l6VqOvtqmk6Tp9vqskqWjS32o2tkDK0YLhR9p3ZUE/L0PSuX8J/tHTa OvjzS/2itE0X4eaj8Obewv8AU7+HWxe6ReWd6ZUt57eZ44pQzzW88XkvEH3BAu8yCuq+P/wvu/jF 8OR4EtL42gn1/RNQuZVvZrSQW1pqlpdTiKaH95HKYoJBGylSJCh3L94fKniL/gn18RtB03VPCHwu 8a6Nd6HJ4r0/x3aaxrF1JZ+KLi+haVJrO71OG2kMkYS4luLe8KNNBN8oRsiVM0+n9dP+CHW/9dT6 Vuv2tf2b7Lwbp/xCuvi9oUfhzVL640y31Eu/lC6ghknkgk+XMUojiYhJArMSiqC0iBrvgf8Aae/Z 7+JEWt3Hgj4weGNVh8N6amsavNHfKkdlaMhfzpXbCqigHec/uyCr7TxXlng79mTxVHqfgCXxH4F+ HGiaL4P8f3fjB9LsNSvtauJ2k0y4iS7ub+8hWS8v/t0yTeY6IUWKMh3ZBXmEP7D3xP8AEPwS8G+E L+Dwno+v6L8PLjwrfQXim4sLue11zTdS05LhIfvwzJZXKzsCWU3TkLISQXpf+u2/36Ar6X/rX/LU +rPBP7RPwR+I8eiS+BfiXoutr4ivrnTNN+ySlzPc28JuJocYyrrCPNw2CUIYZBBObfftHfDWzur3 Vv8AhNfDMvhXSPD2qa9qV5FfTS38SWF59knkjtEhbzbdJEnRpVcneiKqOG3Dx7xZ+zD8bfGuifET 4hw634Y8H/FrXvFWkeKPCjafqVxfaXpEunWsdohmle2iaV5oWvIpCYSpSWNSrBMVT8X/ALD+v2+m 654Y+GeraFbaNP8ABBfhfp0uoSSx3T3gu5JnnnEcRQRyiQtI6guZGJCgdVa8t/8Ag+67fjoWrcrb 8v8A0pL8nf5M9v0X9qj9nTxF4b8R+MdH+Mfhi40TwndrY6vf/bQkMErf6sKzYEqyHIjaPcspBCFi CK7XwN8QfBHxM8OxeLPAHinTde0iZ2jW7sZxIiupwyNjlXU8FWww7gV8q/GX4TQfCL4sWXxptPE/ wn8NeG9N1Dw9/YGi+L9dGhac72Gm63YtbpJ5MixNHHqFvLDsR8eS42qFBroP2cPBuvfFT9i/xXpu oarY2Gt/Fefxbcyatp9tPFaM+oXt8kV5bRy7ZfIZHili3YYxlDnnNJNNN9hOLTXme1fDj9oD4K/F /V9T0L4Y/EzQfEt9pC+ZdQ6fdCUiPeU8xD0ki3Ar5iFkzgZ5FcZF+0lpvh74s/Gbw78TtY8PeG/B nwx0/QLuHVbl2hdmv47lpBM7OVY7ooljVFDEsR8xYYw/gR8IPjP4S+Ktj4x8feG/h9omj6f8NtP8 DR23hrWru8JlsrhpI5Ejls4FihZZ5gE3OU2INzZJGB48/Ze+KOp/GXxR8aPD0/gzVrh/HHhzxVoW i67cXC208GnaVcWMsc0iQubaYSXk08MiJMFeGJiuScW4xez/AKvb8tRRlZPmXp+D/wA0ey6v+0h8 C9C+GemfGLUfidoo8G61Mttp2qwymeO8mJdfKiWMM7yAxy7kClk8qTcBsbFfxD+1D+zx4UuPDlr4 h+MXhexk8WWUOpaP5l+uLm1mYLFcEjISF2O1ZH2oSCAcg48j0D9nP4x+CtX8F/FLTdO8B+IvGGla 14r1jVtFv9Vu7TT7aXXLiOYvp94LWV0eFYRES8H71bi4OULYPPfE79mz9pXxZH8SZdN074X3d98U 18Mapf3VxrmoWp0m90kW7PbRKLOU3No0lsXjZmhZTcSllOeS0bq77f8AB/4cn3v6/r8D0/wl+2t8 GfFPxz8ZfA19bg0++8KKoivrl5EhvXjiuZL1SWjVYRbC1bczvtYHKnArr9I/ag/Z617wfqnxA0r4 weGJ/DeiX0Onalqf25Ut7OaZ0jiErNgIrtIuHOEIJOcAkcZ8VP2c/FHxCu/juthrtjpcPxT8DaZ4 b02eOWRZYrq2GpBzcAJ/qWF5Ah2liyCQYGBnn7r9nr4tePLnXvEvxC0r4e6Te6zq/gqFNC0S4uLq yTS9D1P7bM0s8sEZlmlFxdIsfkqipHAhdsswyjKT3X9X/r7zWaj9l/1ZHvPw1+Kfw9+MPhkeMfhn 4rsvEGjG4ktDdWpO1ZYzhkYMAykZBwQMhlIyGBPmusftifBH4e+D/CuufF34h+HdJ1TxRosWvQ2W hyXesB7R1LC5jEVuJ/sxCsRNJDGvysOqmvYNK8M+HvD0WoReHdB07Sxqt3LqN6LO1SAXN1LzJPLs A3yMQCznLHHJNfImpfsq/H2w0T4eWHgG/wDDnh3xT4T8G+GfC8njTT/Gur2skQ047p45dJFsbTUb Yl5tizeWxErBioxi7q9l5f8ABM3da+v/AAD6p+IfxM8AfCfw63iz4keLNO8PaSJktlub2XYJJXzt jjX7zyHBIRQWIBOODXjXw4/bK+HOt+A/GPxb+InjPwz4f8EWPje58N+GNVaVo11O2jhgKPhiWkla Q3JwijCR8qNjMe7+N/gjx/4lvPAXi34ajQrrWfAviRtaGm65ezWlnfxSWF5ZSIZooZnjkC3hdG8t xlcEYPHhHhX9mz9onwj4h0L4rxaX8KtU8W6R4s8W6ydHudTvRZRwa55MglgvhaeZHcwyQGI5gYSQ zSjdGWABHdt9v8v+CvvKbskkt/8Ag/8AAPavGf7W/wCzZ8Pb3TNP8ZfGLw/psutafZavpxeVnjvL O8aZYLmKRFKvCTbylpASsa7WcqroW3L79oD4K6Z8S4fg7f8AxL0KDxlcMkaaQ9yPN8x13pEx+6sr JhljJDlWUhSGBPgOhfsT654e+Gfi3w0l9ol94h1P4HQ/DLStQkmlAgvHfVJrxf8AV/JZtNd2WzAZ gkGNo2DdD4O/ZN+Kfgj4xaz4x/svwL4q0/UviDL4y0+/1rX9QjXRYrqfzbow6LFbfZ5tQVJJ4Yr2 W4LhVh+4ieVVK3Nrt/wf8tSLy5fM9d+OH7Rvh74E/EHwHpXjjXNF0Xwt4ltNVlv7++EhmWW2FqII 7dUOWZ2uWyoRyQuRgAmu28K/GT4VeOJo4PCPxA0PVXl0WLxFGLa8Rt2nySSxLcA55jEkMqMf4GXD YJGeO+Mfgb4q6l8Ufh38T/hho/hHV5PCNpq9ne2PiDV7jTvMW8W1CPDLDa3OGX7O2cqOGwOvHzL8 a/2dfEI0n4M/DC48cW1h8UPiF4l8RWHieXw8rwWc/h/VXutS163iWXczW8HmQpC0nPmNG21WkO1a aIep9oeCPit4B+I9xPbeCteOpm30yw1hpEtJ44ntL1HktZY5XRUkDrE5whJXGGCkgHra5nwz4U1L wxrF7FZ61aR+EY9NsNP0Hw5a6XFbRaP5AlWQpIhy6SK1uojKhYxB8v3zjpqRTCiiigQUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFcxpfw58MaN4pu/GVidZ/tO+Lmcza7fT253kE4tpJmhUDA wFQbRwuBWkFTafO2n0sr6+eqt66+gnfoUfiX8VNJ+Gq6JZy6Hq/iDXPE18dO0TQ9IWA3eoTLE88g Rp5YoUVIYpZGaSVFwmASxVWfD8VPC+n6boNx8Qp4Ph/qniOZ7aw0TxNqlhDfTTK+wRoIbiWKVzlG Aikc4kXOCcDnvjn4F8RePYdH022+FPwt+ImhW7zT3ujeOXkhWO5wqwXFvKLS7QFVa5RlMOSJVIkU Kyv80zfsK/FGzj8M+ZfeD/F1raeFZNBvdA1PWtS0/SrKQald31tGhWK4ur7T4BeRwfZHntlmSwtz KW+VYc15lH1N4P8Aj/8ACHx58RfEvwp8LeO9Gv8AxR4UlEWoafDfwvLkAeYURXLMI2by5OB5cg2t g4ylh8bPCUV348/4TLUtJ8K6b4H8SxeG21HVNUiggunk06xvQ+6TYsZJvvLCZYnyt2fm2rX8C/C/ VfC3xm+InxHu20k2XjCz0iO2W0VknE1tHOk7yqVwN/mRYIdiQmDjaM+RfEP9mf4par491P4ieH7f 4f8AiXz/ABVqerweHPFU10umzQ3WiafpsVxKY4JP9JgexkATynVobqVRJGzZCd0/l+OgKz3PoPXf Fnw1PiKw+HXibxL4ZOu6vEbqw0K/vLf7XeIu7MkVs53yKNrfMqkDafQ1Z8VeO/A/gW0a/wDG/jLQ vD1qkD3TTarqMNpGsSPHG0haRlAQPPChboGlQdWGfBfg7+zr8QvgxrFroFvZ+BvFfh+S00G2uPEe oz3NtrFimm6TBp/lW1oIZEKl4Jp42+0x+U1/P8rnl+o8Tfsw+FPFHxK8I6/r9iniLw5oGi6/aXFv 4i1S71O6W71A6bGkkDTtJsQQWl0h2um0zAqpLuwqxNz0+L4h+AJ/Ff8AwgcPjnw/J4mMAuv7GXU4 TfeUV3CT7Pu8zZt53Yxjms//AIXH8Iv+Ed1Xxf8A8LU8If2FoVwLTVNU/ty1+yWExYKI55t+yN9z Ku1iDlgO9fK2ofsTfFN/FPxBW01/w1c2Him91y40HxBe6rfLdeHoNRsLi2EUOlwxRxS3Ef2hbdbu a6lZLaFEjjjACDW0X9mX4zab44g+IS/Dv4PWKaPqejahpnhSy16+GnyfYtM1DTxuuW079z5Ru4Jo FW3cKyyA4bbLQ7Wuv6/4YfWz/r+v+Bue5aL+0N8PtV+KWq/DGfXtFs5YLDSb7RryTV4Nuui/W4ZF tFJHmFRbg/IW3CRSMd9j4qfF3wx8IY/DN74vurWx07xFrg0V9QvLyO1trHNrc3PmzSSEKExasvUc uteJah+yl4m1nxDf/Ea/0X4e23ip4fA6abHZxyrbaYNG1GK+voLaUwl4YJdgjjCryIo94HRez+NP wL1vxD/wjOteArDTfEeo6J4ztvFFzpfjXxHfvp8qRW95EFg3R3Qt3V7tXXZCBmNSfuLgtqrib0du x3msfGT4daDa6frup+LtCg8M6hpE+tJ4il1qyj09YI5bWJSHaUM6yNdxhZEVowQFZlaSIPV8AfHv 4S/Ef4V23xm0DxzosfhaSzju728udSt0TSi0SStDeOJCkE0YlQSIzZUnBrzz4R/s6+KPBXi3RfFH iW68Pywf2X4pXUtKsjI9raXOsarZagsNqHjXfbxi2lRnYRlmw3ljeVT0r4I+ALv4bfBLwL8MteFh cX3hvwxp+i6g1pl7aeaC1jhlZCyqWRmRiCygkHkDpUop2uZfgb9pb4H+Pfhlo/xb074leHLHw/rH kQ+ZqGsWkLWd3LCswsbgiUpHdqrjdDuLDnqOa0/ix8Um+GtpolrpXhHUfFfiLxPqJ0vRdE0+4t4J bqVYJrmRmknkSOONIreVmcnrtUAsyg/PniD9kX4gS/CH4Z+CtO034d61q/hT4eap4F1JNaknWzgm v7azgOo2jrbu7yRCzdAjLEZI53XzI+c+wfEf4V+NZLX4beIfhreaRf8Aif4a3oaKLxDczW9tq1pJ ZyWdzFJPFHK0MjLIkyyCKTDwhSu12Ib8v6/r9fIS6X8/+B/XkdZ8J/iXZ/Fbwj/wksGiX2iXlrf3 ekappN+8T3Gn3trO9vPC7RO8bYeMlWViGRlYfersq84+Afw48QfDXwLPZ+M7/TL3xTr+s3/iTXpt LSRbIXl5cPO0Vv5nzmKJWSFWbDMsQYhSxUej03a+glfqFFFFIYVC9paSXUV7JaxNcQI0cUxQF0Vt pYK3UA7VyB12j0FTUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFctpXwt +HOh+Krrxzo/grSLPxBetI1zqUNqq3EpkOXLOOTuPJrSCptPnbT6WV7vz1VvXX0E79DG8cePfiJ4 a+IPhPw34d+E9z4i8Oa0W/tjXLfUBG2kASxRAmBkxJlrhH4cHy4p2wTGA3nmm/tB/G+f4w6P8H7/ APZ80Vr24gj1HXbrTPGzXcegWDyFFnuC1hGpdysoihDeZIYnIAVWcfQhzjjrXzv8E/g/+0P8NReD xJ4w8B6vdeJ9bl1nxZrAs79tR1GSQhf3LtMI4VihSKGGMIURIUGOpOfT+vu8v69U3v8A19/9f8P6 HbftH/AC80/W9WtvjV4JksfDckUesXQ1y28mwMkohjMz79qK0p8sMTtLZGcg0th+0Z8BNTk8OQ2X xk8HSS+L5DFoMR1mBZNTYTNb4gQsC585HiGBy6lRk8V4J4B/Ym8beB/C+l+E7jxr4U1m20q78Oq9 3Ppl+dQ1G20vVrG8RZLi4u7gQRJb2s8cdlAiwCSYvlA2F7bx/wDsxeJNb+KkviHwTr/hbRfB3iab RbnxTp02iO96sul6tPqyPYyJKkStcz3MvnNIjEMWlBZ2IB2DuehftB/HHwx+z18LtU+I/iWewZ4N ttpljd6lFYjUb18iK3WWThc4LMwDFI0kfaQhFYN78f7vTvD1hrMuk+F9Sa8XwoxOieJhewsNb1b+ zhJGxgR2gRf3scpRROVdAE8tmqz49+BKah4S1XSfBGsax/aWs+ING1e4fxB4n1PUreFbPU4LyT7P HcyzrbkokoVIlRGPlq2FUFXfEH4F3HjLxdq/i238SRW7as/g4G2ktSREuha3NqjHeG+YzLcGIDaN hQMS27AE9roTXZmNZftE+MtY1TR7Dw58FdW1i2v/ABJrGg3t/bXDm205bDX49KMssnklctbi8vNh II+y+XlvMDj0jx98Wfhh8KobK4+JfxC8PeFo9Sdo7NtX1GK1+0FQC+zew3BQwLEcKCCcCovhT4Eu Ph34av8AQrrUIryS88Sa5rvmRoUAW/1S6vlQg9Si3KoT3Kk15v8AtC/s8eKvi1q1/qnhLxjpWkt4 h8Ean8P9UXVbCW7W1s71kd7m0VJY8Tgx7WVjtceWSR5IV1dpL+un+enzK/r8f6+46Lxj+0f8O/Dv xG8NfCXRfEOh654w13WodMudFt9VjF5YQvby3LXDxAM2FjjVtp25EqHIBGcQ/tj/AAFn8fxeFdM+ KPgu90W30C+1rWNfj8RW5tdKMN5p9pDHMwOwLM+oMFcuBmEgbsnbjaD+zh8SbHxZocuo/EDw5/wi 2leL9T8dPbW2iSrqkl9qFvfQzW/2vzwhhjbUZzHIYvM2LEhx5e5+Jj/Yv+Jmp2HhDRfHHj/wRrul eCdD0nwlZWdv4ams1vtNs9Z0a/eS633E6tI8GkvF5SoI90mdwViFqy0T/rT/AD/PyJXV/wBb/qvu Pdpv2mP2erXQtG8T3fxq8GW2k+IZZ4dLvZ9ZgihvDDJ5UpjZmAKo+FZvugsuT8wy+6/aP+BNl421 P4dXfxU8PRa/omn3OqapbNdjZp8Fvs89rib/AFULIJFJR2V9uWxhSR5f8Zv2PI/H/wASl8f+FLzw raWl7pKaVqfh/WdIubjSp5BfT3/22W1trq3jvJDNcSO8NwHjkfZISGT5snU/2SviNqmtfEt5vEXg Q+HvGmn3sP8Awjz2etNpWq3V3c2873V7ZnUfLtrhVgkQT2flu0ly87cqIitLff8A8AfX7v8Agns/ hv4+/DT4g/DbxJ8Tvhp4r0vXdI8Ni8iubqed7C1Se2i811lmmQeXHtKMZdpTYwcbl6t0n9oX4R3n i7T/AIZal8QfDVn49u1iSTw4mqJNcxzPax3exeAXUxSqyyYCuAdvIYDnfDvwL8aS/s1eJ/gf49+I 8mp6r4p0vV9NOqubm+GmR3yzKkKSXUzXFykAm2q00u91QAlRgDCu/wBliePxPeeMNJ1TSU1e7+IX h/xXJdvbFJZrDTdMtbA2sjDJJGy9ljH3QbjHGWarSjdX8v8Ag/1+PUluT2Xf/gf1569j0rxz8efh B8NvFmg+A/Gnj3TdO8SeJrm2tNL0gF5rydricW8LGGNWZInmPliVwse4EFhg4wvAX7Svw48SeEPB eu+MfEvh/wAIav46eSLSNFv9YiE91Is7QBYd+xpCWCDhfvSKvJIzhfED4GfErxP8fNB+KPhXxpon hzTLJ7BdSntE1KPUr60tpZJGsJ4kuxZXUUhmlCySw74BI5QMxDL58n7FXjKy0fQPB9j4/wDDc2iX fhfR/C/i65u9CkfUXi06/udQEthJ52yN55Lp0fzVbaVSUFmXac9dH/X9f1Y0srM9p+GP7Snwd+L/ AIz8UeAfAfi611HWfClwYbqFJEPnxiK3dp4drEtEr3KwliFIkjcYwAza3xZ+OPwk+Beix+IPiz48 0zw5aTrI1uty7PPc+WA0nkwIGllKggkIrEAjPWsI+FviF8PW+LvjLwdpFh4i1vxlrttqmgaa1wII 0ZdM07TwbqRyoVFktZJnCbm8pfkDSEJWB+018DPiD8Y5fD9x8PfFmi+FtS0qO6tY9ec6pDqmlrce WJJrSSzvIFlGIkJtp1aKRkjLHCbWfYSO41T4+/BLRPEOoeEtV+K/ha21zSrKTUbzTX1SL7VDBHAb iRmi3bvlhHmkYyE+bG3mqnwd/aE+F3xz8AXHxJ8Ca8suj2Ms8V6ZyiyWjRElvNCswAKgOME5VgeD kDzj4ffspax4B+Nt98S08TaBrGn3XiHVfEVu+qabd3Oo6cdRZ2ntrPdd/ZbXLN81zHAJZIwsTghQ x9B+H/w01D4b/BfUvAV7eRatcebrd2rwQsBKt5eXd1Gmw5O4LcKhHcg44xSm7R5lvb8Qirys+/4D LD9qf9mvU/Dc3jCy+PHgN9Ft54bae9bXrZIoJZUeSKOQs42O6xSlVbBPluMZUgXIvjz8Njbaj4ou vG/hS28F2Ohadrg8Qya9AsRS7nuoE8xDjykLWwVHZv3js8YAaI5+cPgj+yn8RfEHhb4MePviZrmg G68N2PhC4XQzoE9m9jaaTp+qCCKYTTSl75Z9XBZ9sSobbKqrcD1f4l/sunxB4gm8Y/D/AFvR9Bvr A+HrvRdJm0jOlrc6Td6ncqLiON1LxytqjfdCtFJCkoLsAoqVlt3+5d/MS1+773+n9M7a7/aT/Z8s bfRLq7+NngmOLxIiy6Ox1y2P9oI0ph3QgP8AOokVkYjIUqwbGDXMeIv2v/g14E1vw/4Y+IXivSNI 1XxJrGoabbJBqUVzDbw2099ElzcS5UIrtYNGygM0c8gib7rOMn4UfssyeEPGc3i7x9e+HPFEmo+H bzTtQjGk7Imur3W7zWLkRRSNJtthJdIiqWYnyULcgV0Gh/AXUPDUHw3sbLxFb3sPgvx3rXi67llg aFp49Qg1pRFGoL/MkmrRjJIDLEzcEhaNNH/W4dT0PR/iJ4C8QLoLaH4y0a/Hiizl1DRfs97G51G3 j2GSWAA/vETzY9xGdu9c4zXn3jn46eK/AnxZ8LeB9S+Fm/w54s1yPw9Y6wuuwm+uLhrWW5aeHT1R i1pF5WyWR5Y3U7mETIFZuN/Zl+CqeF/i38WPiYbbXLHRX1+80HwZpGqRNFHplmZhc6nNaJu2rBd6 k0zrhRmO2hIJUgDq7D4GeNtI+P2v/Gyw8beErseIHtbVo9W8K3V3qmnaZFFEr6fZXo1FI7eF5Ulu DttjmWdmcSbVwlvG/wDX6g+qR5X8Mf2+2+Inw68XfEVvBng+GPwz4EvvGsek2PjC6ur+4+zRhzAw k0yGEAE+XJJFLMYXZFZMvx61+zp+0A3x3i8QSvF4LgOiPbKItA8SXepylZkd1kljuNPs2jidQpik USJKPM2sNnPJaZ+zj8UNYnsU+IniH4ZS2XhHwjqnhHwxY6T4OkSwkW9WCLz7yykuDH5Kw2yRGyjP ltuc+YBsRPQfhT8P/iHpXi3xH8TvixrugXfiXxHp1ho32LQLWaKwsbSylvJIgrzMZJZHe+mdmIUD KoFOwu7drgeoUUUUgCiiigAooooAKKKKACiiigAqtFqWnT3cthDf28lzCMyQrKpkT/eXOR1FWa5/ T/h94C0jxBceLdK8EaBZa5dGRp9Tt9Nhju5TIcuXmVQ7biATk8nrWkFTs+du/Sy6+eonfocv8Vfi f4i8Ka74b+H3w88JW3iPxn4rS7ubO3vr2SysLO0tRH9ou7q4SKVkjV7i2jVVRmd50AwNzLwOiftJ eMH+IOj/AA38aeF/Dug6rZ+K7nw94mktdTlvbNIU0BtXiuLad44CoIaJWEkfy7ZBzlXrvPiX8LPE /ibxn4Z+Jnw88e2/hfxR4as73Ss6how1TT9QsbtoHlhuIBLBLkSWlvIjxTxlShDb1YrXAT/sfWOu WFonjL4h6hq+qajd6xqHi7U1tBBLrM+o6U+lkwrvZLSOG3MaRIBIFWFQSzF3bF3s7b/8H/L+ti0l zK70Og+GP7Sfh/4w/F7UvBfgEm98N6b4VtddbU7jTbyzknluLiaOPyRPHGJbdo4S6yoGR93ysQDX UD4+/CQeKPEHhGXxcsF34Vhmn1m6nsrmLTbIQxRzTq+oNGLXzI45oneMSl0DZYDBxz3wi+DHxD8E eOL/AMc/EH4q6Z4turnwxp3haFbLwz/ZOIbKS4kSaXFzMrzObqUtsWNOm1FAxXHeL/2a/iXr3hDx v8LNL8e6La+CfFkmtanDby2BfUINSv76W9V5Z8bJbVJZWbyfKVyDsaZlHNScUvv/ADHTpyqS0stu qS28zvbb9qL4KXfhN/Gdt4k1SSwXV00JYB4b1P8AtCW8e2S7WKKx+z/aZCbaRZwUjK+Vl87QSOc8 Dftb/DXxF8Utc+GWseLdLtr+51yzs/CdulrcJNe2lxothqUclwWBWF5HubpY/M8reISiqzo9czD+ zb8bovifF8Y/+FjeDB4lTXhq7xjQrhtPaO40mz02/QQtOZFcjTbN4JFlDJmdXLpKUroNL/Z38Sp/ amp+IdZs7/xDrfinRPFl/rEEwtp7i40uzsLdInCW20xTNYyswAURi8kCKcfMlOPW+66Pbr939dzT 6rUtvHZ/aj206/166G8v7Xn7ORtNZ1GX4n2dvYaCYjeX1zZ3UNo0cl6LBZ4J3iEdxbi6YRNPCzxI TlnUc0Rfta/Ae6j0RtP8V6lfT+IGm+y2dr4d1KW7hSG8NlLLdW62/mWkS3CvH5k6xoSjbSdpryTw f+xHrngbw8PBmha74aGiQXOgTJNJYs+saium39jehNS1Bw73AjWxa2t1iW3hijnYmJ9qKve/Ez9n bXPiD8TfDHxDtI/COiv4eu4boTQWR/teMwXEl0q2uoxpG8Ud080kV1FKlxG0ZJRUkd3Y543W/wBz /wAhPDVLPby96Pb1/rY2/jR+0Z4b+BnxC8HaP471Sy03w14i0jV7ue5a2nuLs3NrLp6Qx28UIZ5N y3c7Mqxu2I92VVHJ1ta/aX+B2ha1pWgXfj23uLvWoLS5szp1pcX8LR3efsheaCN44vPwfJDsplx8 m6tPxX8KNN8XfFHwl8StRu4i3hLSNX022tWtFdjJf/ZFMySk/uykdrKmApLC4PzKAQ3ifhn9jDxV 4Ot/DOiaD8ZNO/sTSdQ8LaxqcN34SE13eXmi2lnZboLgXS/Z4p4LGIFGSZo2Z2V8MVNb/h/wf6+R h/X+R6vqH7TXwQ0zTLHVrnxuHh1XTNL1fTo7fTbu4nvoNSMwsRbwxxNJNLL9muGEKK0oWF2KBVJG pdfHb4S2Xwqj+N9143so/A8iROdZKSeVGJJ1twJF274ysrCNw6gxsGDhdrY8Kn/4J/eFIvB2o+Ht K8Yk3svjg+LNPfUdPluLG2slgntLfRZLeK5hkl0+G0up4ljWeMEyNkeWzQt6d4m/Z8k8Z/s/w/Av xN4k0qWH7XYyzy2fh2G00/7NbajDeCyhsEfbHbCKEWqKzuwjwXaVtxYshp667EV1+2R+zdY+D7Tx 1efEcQ6Xe3VxaRI+k3wvN8EC3EzNZ+T9oSOOB45mlaMIscsblgsiE7Vh+0r8FtU+KsnwU03xi9z4 whuEtJLOLTLxoUle0e9jRroRfZwz28U0qAyfOIpNuSjAef8Ajb9kvXNe8T+LvFXhX4rR6JdeMpdX tr1brQBfJHp+p6fpNpcwxgzpidX0aGaOY5RfMZGhkAydvS/2WtL0jULWW28SpLYW3jo+LzZXOnCZ Zrc6A2hmxkLSfMDExfzCPRdn8VJXb1Vv69P6/MdktP6/r5f5dz8VfjZ8PPgpp0Os/EW91ix0+WGe 4a7s/D+o6jBBHCqtI88lrBKsCgMCDIVyAxGdrYzLT9pL4NXviXTfCMPiq5XVNWgjmgSXRr6KONpL Nr9IZ5mhEcFybVGn+zyskwTBKcjPNfFn9mybxboGgeDfhdqXgzwT4XsNaXXda0Kfwk17Za7PHsaB LiOC7tcxLIiSOhLea0UQY7FZH5TTP2N9V0r4jaz8QbT4h6Ct34mvTqeq3UnhNrrUoJpbcR3UGm3N zeSx2NnO4ZnjWFpijtH5/wAsTxy3Kzsv6/r8vPSkl1f9f1+fkdjpf7Z37NmteH7rxPpvxEkm0+2e zjRv7D1FZL1rtp1txZxGASXe42l1/qFkx9nlLYCNjute+MHw58N/Dm0+LOp+JEPhXUIbSeyvrS2m uzdrdtGtt5MMKPLK0jTRhVRSx3DiuCu/2cdQsfBXwq03wX4003S/Fnwns7az0/W73QTd294sWmz6 ewmtVuIm2lLmWRAJv3bnqwLBrviD9nyO7+A3hz4E6Hqfh+503QLOz0+UeLPDaa3ZalDBFsxcWolg IcuEmDRyRlHRcfLlTUnq+VCXS5g2H7W3g2Txp4nvNb1S30P4eeHfBdp4il1LV9Nu9Pvorp9U1LT5 oZYJwsgIksERIvKEjSPgbtyirXiL9sb4VaTe+BE0a38S67ZeNtVuNO+1WPhfV5fsQhhv2kBSO0dm uFnsDC9qds0au0rKEjJPOaV+xtqOl6FBbSfF+91DWrDQfDunWOp6hpz3Aju9H1e61WCaRHuC8tuZ LhIRAZAyxQgecWIde58L/AG40OPwdd6l4wjvtW0DxvqXjrVbmHTTBDqV1e2mpWzxRRGVzbxp/aKl ctKdtuAxZnMgt8pHvC/F79orw18FfiN4S8N+Nnmt9D8R6DrWpPdWulXuoXKT2Mmn7VEVrHIwi8q6 uZHdlwohBLKM53m+P3whNrf31t4zgvbbTr7StNmnsbae6jefUxAbBYniRhMJhdW5VoyygSAsQM4z fiv8LfiH4s8Z+HvHnwz+JmleENV0TRNW0GSTUPDbauJIr+SxkMkai6gEcsb6fGVLiRDuO5CBg+bW v7Gup+GrrStF8C/FWKy8GWuoeEtRvtM1TQftuoXEmgC0SERXkdxCkQlisLZX3QSYYOy4DbBm9tN/ +D/kUtz0v4D/AB/8NfHvSda1HQdG1zTZND1i90yaPUdHvrRHSG8ubaKRJLiCJXZ1tvMeJdzwM/ly YYc8x/w1n8PdU+Kun+D/AA14isJvDlpoet634i1y8tLq2tLaLT5LaIyW15IiW88QeaYSPG0ir5fU d/Rvhb8Oz8NdI1rSjrP9pf2v4m1bxF5n2fyfK+3Xkt15ONzbtnnbN3G7bnAzivB7n9ijxLq/hqP4 feIvjXDe+E9F8E6n4G8NW8fhhYb6ytLmazkhe6uPtJjunhGn2sfEMIlVG3Dc7MW9Nu342/z/AKQb t+v4X/y+7zZ3t7+2h+zZYaNpuuXPxDlEOr3VxY2Vumh6i97LcQCBpIfsi25nEgS7t5AhQM0cgdQU ywzPFH7V2meA9W8PTeJNAvtS8OePNfSDwpqmgaVf6kLjSG0gXi3h+ywzCSVrpJolgXZIYSJdpWNy W+H/ANlW9X4l2Hxc8efEC01/xEl1rV/fG10EWVuZ7+x07To2tEM8rW4htNMSP5nlaQzSncoO2ul0 j4AnSvAfwU8Ef8Jb5v8Awp6bT5ftX2Db/av2XS7jT8bPMPk7vtHmdZMbNvOdwa3V/L/g/wBefzCW 2m+v/AO/1nxz4V8P+IdL8K6xqy2+q61a3d7Y25ikYyw2ojNw+4KVUIJos7iM7wBk1wem/tVfArWN X03R9N8ZTTHU7CLUhenSb2OwtIJLB9SjN3ePEILVzaI0/lzOkmzBKjNT/GP4ReKPH2u+G/GHgTx5 Y+F9f8PWuo6b5uo6IdVtLmzvo41mjaFbi3ZXD29vIjiTgxkFWDEV47pv7Bny2mma58R9NXTY/Bsn gvULnQPDR0rV9YtX0gaZsv7oXUkN1HHgTxLLbs8bxxASFUbeu/8AXf8A4H4j7f12/wCCe/fDH40/ DX4xQ303w+8QyX7aYIHuoLnT7mxuI4508yCXybiOOQwyoCY5QpRwrbWO047evIv2evgfrfwS0u/0 vUvFWg6pFeCFimj+HDpnn3C7vNvbyWW5uri7vJtyB5ZJtuIUCop3FvXab8iUFFFFIYUUUUAFFFFA BRRRQAUUUUAfNv7THxHk+EPxP0D4mxaSdUfw58MvF97HaeZ5aSyfbfDqJ5kh4jiDOpeQ/cQO2Dtx WVpf7Q3xm1fxZF8EE1L4b2vjuHxDqOm3fiP7Hcy6JJb2emWF/IIbM3aTNc7tUghMf2g4WC4mPCeW PpTVfDPhvXZjca34f03UJTY3GmF7q0jlY2twYzPBlgf3Uhhi3p91/LTcDtGObu/gb8FNQ8HWPw8v /g/4IufCumXJvLLQpvD9o+n2sx35kitzH5aOfNlywUH943945TuwVl/XkeKaX+0T8WfGXjzTdJ8J ah8Prfw9feJ5vASXT2dzfy3Oop4eudW/tGNkuokFn5scEaQYZ5YyXE0fmJjifCPxu/aG8K+HdI8J 6t8Q/hxeeIPFXibxn9j1rxFpt5bWGnWujahfi5WVjfl5txEPkIpjFvbQyFzN5WT9SS/BP4Mz+K4v Hc/wj8FyeJYGhaLWX0C0N8hhCLCVnMfmAoI4wuD8oRcYwKteIPhT8LvFugjwr4q+G3hXWdEW/l1U abqGj29xai7keSSS48p0KeazzTOz43FpXJJLHJK72/rbX89PkOOm54Z8G/j/APHf47eJrLVvCnhb wXpHgu2t9Bv9XgvpLm41Iw6lpEF+6QSqyRhoHmVdzRkSh/uxlCX0vi/8b/ib4S+OXhjwbokugab4 GvdS0jSb/WZtNOqO+pXVyQ+nTGG7WTT3e3MBhlktpY3e4QM8Y5r36z0XRtOvr7U9P0mytbzVHSS+ uIYESW6ZEEaNKwGXKoqqC2cKoA4FYt38L/hpf+NLb4k33w78M3Hi6zTy7bX5dIt31GFdrLtS5KeY o2uy4DdGI7mn1Xa/9f1/wwuh8eab+1V8Z/DfhDw/r3h7w/4VTwlaeDfDnjbxFc6tc6je3MY1fWbq 2kt4pZblnX90jSrI7SJB9nZCrI6eX2fiv9q/4j+HvhZ4n+OSXHgL+wZZb3TvDHhya1vDq0MsWtW2 jpeXbxSuZ4FeYyzQQ26SR+ZDCHZ23H6Wk+Hfw/m0+70mbwN4eexv9Mi0W7tm0yAxXFjF5hitZE24 aBPOm2xkFV818Abjmivwd+Eaanr+tJ8LPCC6h4rt5LTXrsaHaibVoZP9ZHdPs3To2BuVywPendX2 G395y3wN8e/EPxr8PtYvfivpuj6Z4j0u+ntZ7KwMcc0EJijmgN3apdXQtLhopUcwm4lIR43JXfsX 5x/Z5/aN8e6V4M+E/hTSY/Bf/CJ6BpfgfwXqWm3M0p8Q39zqWjW9wLq1CuESGJZ4W2NG5kS1vmDp 5Qr7J8J+A/A3gPQj4X8DeDNC8O6MXeQ6dpOnQ2lqWf7zeVGqrk9zjnvVK0+FHwtsNe0fxTYfDXwr ba14d09NJ0fUYdGtkutOs1VkW3t5Qm6KEK7qI0IUB2GME0tOa/p/XzF9lrrr/XyPLfg38avif4z8 Daf8Tdf0bQPENr4x0+HXfD/hfwj5aatptjM8hj+2TXl4kVwwjNusjRrCEmMiBXUBhz3iL9oD486P rHxN8aQ+CvCo+HvwqeWTVtNunlXX5kTw1FqzJ5qSvbI6XU8EBZRMrpMxAXyd83vXhn4b/DvwVqur 674N8BeHNB1LxBN9o1e80zS4LWfUJNzNvuJI1DStukkbLknLse5rXtNG0iwuNQurHSrO2n1acXWo SRQKj3coijhEkpAy7iKKKPc2TtjReigADqfJXgn9pn9onxNp/h3wzfaV8PLDxV471mxg8PXt5b3F tFDpslleXtxfTaULuW5aJl064itTJNavO5JeOAQtv2/hD+0r8UPjLJ4VbTb34feHra08O6Brniuf UIbiZdRl1O8ntha6cVuEFu6/Y5gGkNxumnii2/Izv7NB+z18ArXw7d+D7b4HfD+HQdQuUvLvS4/D NktpcTICEkkhEexnUEgMQSM8VaT4IfBaO40O7j+EPgpZ/DErT6JKNAtA+lyNKZ2e2Pl5hYysZCUw S5LdTmnfsB80fsofFf4xaLpvhrwt4l8NaTqvh3XNH8S6voFjpOW1uU2GrWkDGaaeeO2PmnUJnWMB diRJl2ZiqzfFT4yfFT4ffFT4ifFjRrbw14a0nw18K9E13W/DvjNg2oXnk6lrojtrWW0umggkmUOo lJnw8lqvlkllX6t0/wAE+DNJk0qbSvCOi2UmhW0tnpTW9hFGbCGUoZY4CqjykcxRllXAby1znaKz vEHwl+Ffi3xRp3jjxV8M/Cms+I9IEQ0/WNQ0a2ub2z8qQyx+TO6F49kjM67SNrMSME5qYR5YqLd7 L+mOTvJvpc+cvi14v+L19/wm0vw08WaT4XXR/jL4Y0C6a8tdQvJrpbhfDXl4230aQxbruVJ4I1VJ 4iV/dyPJK/a/tD2TeIPEfwX+GvxK1IN4U8U65c2niNrO5n0y21O9i06eW1tWKTb1ikmR5VhMjbmg jUl+Q3ts/hHwpc/a/tPhjSZft+oQavd77KNvtF5B5PkXMmV+aaP7Nb7JDll8iLBGxcJ4r8IeE/He h3Hhjxx4X0jxDo12UNxp2q2UV3bSlGDqXikVlbDKrDI4IB6ihLSz1C/VHl37I2ppqfwdc6brL6vo Fj4o8Qab4cvn1F78zaXb6rdw2uLh3dpEWONY0Ys26ONDk5r2iqmlaVpehaZaaJoem2unadp8CWtp aWkKwwW8SKFSONFAVUVQAFAAAAAq3VN3JSCiiikMKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigArkdH8U+Ob7xlfaFqvwvvNM0ODzPsuuvqtpKlztIC/uEYyJvySMg4C/NtJxXXUVrTqRipK UU7rrfTzVmtfW68hNHzP+0XpPxGuv2hfhl4h+E14X8T+F/B3ibWbbR5b37Naa9Gt5oMUthcPghVk jmkMbkbUnSCRsrGQfBLL9snxNH8SfGkHwN0Bm1D4h+MpZ4rXxJpDCaxuNO8PaRFd2M1vLeWUcNys 2VkeW5SNFs59vmsY1b9CJNI0mbVrfXpdLtH1O0t5bOC9aBTPFDK0byRpJjcqO0MLMoOGMSE52jGR r/w5+Hviu1urHxT4D8O6zbX12moXUOoaXBcJPcJGIkmdXUhpFjVUDnJCqFBwMVjFWTXf/Mb3T/rY +OPHn/BQTxt8Or65t9R8NeEdbtNKs5NV1DVNFuZZtNe2bw/a3Fn9nud+JBdazPPaRShcNHbuNm9W cfRXxV+InxE8C+Efh5o1vf8AhCx8aeN9cs/Dc+q6nDN/Y9hcG0nuriVbcTLJIGFnNFDF56kyTQgu ec+iT+CPBd1K0114Q0SaRkso2eTT4mYrZymezBJXpBKzSRD/AJZuxZcE5q3rWg6N4js/7O17TYNQ sy257W4XfDLwRiSM/LIvzZ2sCMgHGVBFNrWy6/h/W/cIrWzelvx/r+mfMuu/tOePbXxZDouheKvh ze6d4e1Dwjpmt3wsZnHiCTWtSW0kfTdt7i2jhi82QFzdbmR1OBGWbi/ib8Z/iH8TfgFc+NLbxD8P 7oa5rGkan4a8Fwo1vrNsIfFGnQwLe3Ju5VLDKR3AW3TyJpPLyxXn6mPwQ+EzW9rbS+A9LlWx0q20 S2aWMySQ2du26KJXYlgA2CTnLYG4nAxZtPhH8MtPvrrUdP8ABGk2k9/qI1a8aCARi6uQqqHlVcCT BRHCsCokRJAPMVWERck7tf19xvKNCzSk/uX/AMl/X5fKXj79rv8AaJ8IatH8JbHw94J1T4hRa3rG mtfW+nyppt4tlpmmX6qkFzqEAt9w1ZA80t2VVLSRlSR5UiHe6X8dfj5rlz488ZaJJ8Ib7wP4Ajia cpqU8Z1Xf4bt9U8yDU3kFtFbi6urdVmkQq9vK7N5RhBm94134aeBvFGjT+H/ABN4fi1fTrqAQT29 /JJcLLgACRt7EmYAACU/vBgYbirVp4G8Kafd6jfWGjRW02sXo1HUDE7oLqYW0VrmRQcMvkwQpsI2 ny1JGRmi8mttQ5aF/idten/2x5L+yx8VPH3xC8K+L9Z+LOtaaur6DrIsb+xg0uCwg0dhZW1w8Syx X15HPFidZBN5xPzsGC42L8/237avxv0TQdSu/FSeHn8XarrXhzQrLQLbR4ri00Q38d/P58c9tqUs epJOtp5MTNd2gEi7pRbxnc3294V8G+FfA2iJ4b8H+H7HR9LieSRLS0hEcSs7F3O0epYmsvTvhF8J 9I8O6h4Q0n4YeErLQdXk83UNLt9Fto7S8fj5pYVQJIflXlgeg9Kpu7u/Ixslotdz5M139sn45wan 4d8DaPH8LR4oj8Ny+IvE13NcJJo9so1GW1KS3Q1FIrIW0cGbvbLfSJLMiQxzqjyV7D+098fvGHwt m8B+HfhjpdjqOs+O7q6SzubmyF7blILfzdiK15Zxb33q4aW6iQRxTMN7hI39Vu/hT8LtQsdH0y/+ G3ha5s/DrFtHt5tHt3i04kgk26lMRHKqfkx0HpWn4n8I+E/G2lnQ/GfhjSdf01pFlNnqllFdQF1+ 63lyKVyM8HHFJrSyBPU+PJv2q/2i9a8aaXo/gvU/g3c6E2oeHPDura3ALvVbWPVNTtmMwtmhuIxJ HDPGQAWzIJ4E3RnzHWPQv2y/i9q+oeHtRub74e2NtJpPhRtU8Py2Fy2o6lqGoazdaVfRaaxul2eU 1rI6h0mxiNWwCzj7AbwF4GdY0bwXoRWGa1uIwdOhwklrj7K4+XhocDyz1TA24rltH+Anw70X4rah 8WLXw3o41C40y00+xiGlwL/ZrxXGoXE09u4Xckk76lIZCuNxTJJLGhafff5dgeu2mn49zwW2+Jn7 Rvwnu/i18QPFvi3wv4z8J+CPHlpD4msLbw/f211aaW+kaTLcXOnM1/cLFHbpc/aHt2jcOY7lxIpl VV9O8P8AxdufF37K3iD44fFGz1Dw9oOpaLqviC1i0Z2tdUt9BxNJZyLIk7bb17QRS7kdNskgACFa 7n4ofCPQfiZ4B8UeADcS6DbeNHjGvXelxpFc30X7mOdJHx8zS20Ati5ywjwB91QOxvdN07UdOn0j ULC2urC6ha2ntZoleGWJl2sjIRhlKkggjBBxT15OXqDavf8Ar+v+AfnlF8CdD+I3gGx0rw/49+EX h3RNV+JOnahbeDdU8UN4isNHiXR7uB7dgkyrc6rNJJJcyQrII3aJ2Mk2HeR9v8LPB/xe8B+A4dR8 U/Anw14Y+H0XjfSYJ9Q0RZtL1S2i1WzH9q2OntdRxpFm1czy+c6I8zbARKjx/d1/8MvhvquiXXhr VPh94avNIvhGt1p9xpMEltOI23Rh4ihVtrElcg4JyKj1z4VfC/xPpek6H4l+G/hbVtN0EKulWd9o 9vPBYBVCqII3QrFhVUDaBgKB2qr9P66f5Eu73f8AWv8AmeO3HxY8a+Hv2Rvhv41+G3hPwrpXiTxD o2gR6foFw0NvaWqzQwyTwWdvPdWqzPFbrOYrc3ERIi+98pB8S8D/AB/8XQXj/Fe08UaR4i1zxh4L 8GaPBr+qaM2m2Fmb3X/EEKzX1qk58sQp+7dEm2vMqqkm2QOPuHxT4P8ACXjnSH8P+NvC2keINLkd ZHsdVsYru3Zl6ExyKykjscVWn+HvgG60qfQrnwP4fl0260+HSZ7OTTIWgls4S5ht2jK7WhQySFYy Nq72wBk0uZ3b7v8ADqvmDV0l/V+58yf8LK+O/wASLz4K+IvDfxM8GadZ6l4/13wzeGx0C8nstWks LfX4vtPy6kgktJY7GORLclvLm2SedIIwh679qH9oXx18LLrWtH8AXHhPTrvw34B1Px9d3PiS0muo 75bZljisreOK4tyJJJGw0pdgm6MCNzJ8vvEHhTwva22jWdt4b0uG38OENo0UdnGqaaRC8ANuoGIs QyyRDZj5HZejEVU8V/D3wB48Nk3jnwP4f8RHTmZ7M6tpkN39mZgAxj8xW2EhQCRjOB6Uv6/D/PX8 Cv6/r8j5W8VftbfGnwZrPi3xhfaF4Rv/AAFoniDxHoGmWMNrcR6jfnS9EvNT81rvz2jjVpLNoNvk Ekb3HAUN2v7PHiDxH4l/aH+J154q+IHgXxfe2/gvwnGl94PtZLezjjkm1uYRuj3VyTJ+83ht4DRy RNtXPPvdn4L8HacljHp/hPRrVNLu2v7FYbCJBa3DRPC00QC/JIYpZIyy4JSRlzhiKg8J/D3wB4CF yvgbwP4f8Oi82/aRpOmQ2nnbSxXf5aruwZHIz03t6mkk7JX2S/LX73qLv6v89PuR8V+Lv2mPF174 p8J/FrWr3wlqOneGtE8beMdP8IafFNb6rp02m20ltHb6jOZ5VMrRzzCQC3i8lw6jzNuT2Vp+0V+0 PrevaJ8MdA1/4U6j4lv/ABtDoE/iTT9LvZ9CNq2gvqlwIohdl3uIWQqB5yiRWhLCLedv1Fa/D7wF Y6/eeKrLwRoFvreoNvvNSi02FLq4baUzJKF3udrMvJPDEdDRoPw98A+FrLT9M8MeB/D+kWekTyXW n29hpkNvFZzSK6SSRKigRuyySKzLgkOwPBNOPw2Y5ayuj5U1vV/incfCz4TfHPwF480vwzqvxi8T eF9e8T21xpc95bm7vtOsLFIbdUu4GFmvlKzwSNI7s5IlTbtb374k/FK9+Hfjf4aaDqV1o1to/iu/ vrPV9RvSYVhMGnz3KeUxkCoWeH+Ld8qsOvzDt4vCXhWDR9M8PQeGdJj0rRTAdNsUsoxb2Rgx5Hkx gbY/L2rs2gbcDGMUzxV4L8HeOtOj0fxv4T0bxDYRTrcx2uq2EV3CkqghXCSKwDAMwBxkZPrQvha6 3v8AKyVvwf3g90/K34vX8V9x8X6T+2p8X7u58JeLfElloVl4Zl8J2/iCax0K0t9QuNfvf+EbfWLq xz9vM+nOM/uo5LZtwiVjORKqN7D+yT8dPiN8ZrK+vviPf+B1F1pdhq+h2ujJ9lvZreZZPNuXtWvb mQWhbylhllFvK+Jd9vEQoPrujfCX4V+HdbtvE3h/4Z+FNM1iys49OttQs9GtobmC2jjWJIUlVAyx rGqoEB2hVCgYGKveF/AfgfwOLweCvBmheHxqEomvBpenQ2n2hxn5pPLUb25PJyeTTXmJ+X9f1/W1 jdooopAFFFFABRRRQAVyOg+M/EWrfETxR4NvvAOo6dpOgw2kljr8smbfVGmQs6xrtGDGflOC3IOd vG7rqK1pzhFSUo3bVlvo7p3030TWumvewmjzP9orx/4o+HXwsu9U8CQWEvirV9R0/wAOaB9vZltY 77ULyGyhlm2qxMcbTiRhj5hGV4zmvn345/B/WvgX8NLbx/pXxG+J3xN8SweIfCiTaLrXiVprfVr1 fEVpOJIIZAUtJZWP2dVj2wrHtGwnczfVnxB+H3g74qeD9S8A+PtEj1bQdWRUu7R5Hj3bXWRGV0ZX R1dEdWUhlZQQQQDXFaF+y78F/D6Xb23h/U7y91HWtN8Q3+panr+oX9/e3mnOslk891PO8siRMilY mYxjn5eTnBqXTuvu/q/4ditOv9f1oefj9qn4kS+JIfhLF8HtEHxPu/E95oMWmjxRNJo8VvbaXZal Ley3wsd4RU1K0i8vyNzSPgHHI8tf9v8A+MOv6Xa6/wCB/gf4ektk+Gd18SdXh1HXp0Gm21nfXkE8 fnLb/vZJY7QCJPLQh3YsSsZr6M8Y/sufCzxt4hvvGGof2/YeIrrWf7cg1nSdZnsL2xnaxt9PlFvN CytHHLbWkKSLyGxnqFK1PC/7IvwX8H+Gda8JaJpmqLYa74au/CFx9o1OW4kXTbm6vLp4VeQsSVk1 C4Cu259u0Fmxk2mktd/+B/n/AF0S33/rX/I5NP2vdX1XUU1rwz8NtPufAn/CeWHw9/ti+1+W01C5 v7ieC3le2sfsbpLFDJO6szXCFvIlKjAGef1L9oD4qaZrmieFfgp8N7HWbrxZqPjue9fxN4mvZodM bRtWS0FyZisjR20h8xVtY02o00KIyqjM3P8A/DJuv6p8Z/Dkek/B628GeEvCnjW18Wz69/wn95qE OsPZxlIpo9FCpbw305S286dhlVE2GkZyW+n9I+Dnw/0HXrXxFpGjyW9zaQa1bov2mSSNhq17Ff3x YOTkvcQq45woLKoC4AU77wen/AX6/wBdQVr6/wBf0j5/u/25tevfh3q3xP8ACPwg0+80Xwl4R0bx N4mbVPE0tk8M+pWcd7HYWOyxmF1MsU0GWcwKWmjHGTt9b/aE+KvxA+GA+Htt8N/Bmk+J9U8Z+Mof DT2Opai1hEsL2V7cNKLhUk8vYbVXP7uQlFdVUsykfPPxR/Y31LX9Qs/hR4C+Dsen+FxZeH9GuvG9 x8QruNbux037Pta80SFFiu7uOKKWGFpMgExuWQKFX339o/4R6t8YJfhlpdk+pwafonjZdY1e70zW JdMu7W1XTNRg8yKeJ0lDebcQLiM5IY5G3dVJK6YpN2dux5hF+2B8Y/FV/F4J+GnwB0TWPGdvZ+JJ dXs5vF7RWlnNo9/9haOGU2Ya4MzmLy8rDgyjcVVWcdFqHxz1nw14j8U2/hv4Y6nqfjXV/HGkeB7T Sr7xdcNpzXUmiW+pyzHckkdjBBbyXJk+zROZmtwxBaQbfSPAP7Pvw0+GWtaXr3g/T7+3utK0u+0q N7nUZrt5kvbxL25lmkmZ5JZnnTeXZifmI6YAZ47/AGd/hZ8Q7HWbbWtJv7W71vXLfxNJqenapc2t 9bapb2sVpDeW0yOGglSCGOMeXtBAbIO9sqLsrP8ArX/L+uoSTb0/rT/M8otv2tPiZ4k1Hwv4H8Ef BjRb3xrrWp+J9E1W3vPFMkGm6Pc6LPDE8n2j7GZLiGQTxsu2JWy6qQPmZeW8f/G74yX3wx+O3iHw V4FXwn408H+FLC58QDV/F95PFpjyaDJfzf2fCsMkCXVs80SYQIlwV3SOm1a+g/CH7P8A8OvA174T 1HQINTFx4OtdUt7KW61CW5luH1KaKe8nuZJCzzTSSwhy7N1d+ORi3r3wQ+HWv2HxHs59JntpPitY HTvFFzBdyeZdR/Y/sSlAxZImWDCjYoGRkgnmqfJb5fiCvfX+keR+K/2u9T+BaQ2n7SHhrw/o0174 Nv8AxPpOoaFrhubLV7qzkYyabB58ULi4MElpImV2uZJAPuDd3vxG+N2vfDL4ReF/GWu+A4j408VX mj6Ha+F21URxjV7+SOP7M14I2ASNnkJl2HKxEgcgVm/HH4L33xZ8bfBvQp/D1hceBvBPiJ/F2rzz 3ZWZLiztmi0+3jjwTIHluTI+4hdtqVYneAfQ/id8MvCvxc8IXHgzxfFefZJJ4by3ubC8ktLyxuoJ FlgubeeMh4po5ER1YHqMEEEgzLuu/wCF/wDLT8QhslLt+P8AWvzPDp/2rvidJeaP4E0n4H6XP8Qb 3xve+B7/AE+fxWYtLtpLfT11H7ZHeC1aSW3a1lik2mBJASybSwG7vfFHxt8S/Df9n/TfjD8UPAaa Jqscukxa/o634mXTRdX1vazyCZFIYRJO82MchNpI5YW/Bv7NPwu8CDwnJoNnqRvPCWq3uux6hd38 lzealqF5byW9zdX08mXuJpElbLMeNqBcKqqOx+I3gLw98U/AXiD4ceLIZZNH8S6dNpl4ImCyLHKh UsjEEB1zuU4OCAcUo3W+v/Df5lSs9tD5l0n/AIKF6Rq1trGtW3wwvn0PQn8T3t3erflZJNJ0q1sb m1vIYnhUub0arYCNGKqolLb2AGW2X7Vfif4kfB3xl4o8VfCWa20Oz1DQtP0vUvDHi3VLWDVpL/Uk tJEtdRFnbSN9mcxF5bbzYZg+1JCpNeu6R+yP8AdE1XxNqll4Dt9vi3wra+DNRtnkYx/2ZBAtuIYz nem6GO3RyG5FrCeGXcUsv2T/AIQxreDXv+Eu8UPdmJVk8R+MNV1N7aKK7t7yOKBprhjGgntLZztw X8pQ5ccVUGk1zbf8P+ehLvbT+v61OT1X9rDxPZeI9OntfhPZt4L1X4kr8MbLVLnxE0ep3l6tw9tc XEFglrIht4pYLrl7iN2S3d9oBUHyb9kz47fFjR/Afgz4aD4WaWLXxXqXivT/AAjrup+JmDX93aS3 l2DcWqW7tDalxJAGEjyYgZxHtZN3YWv7PHirXf2ldG8Yv8Gbfwn4Z8MeMb/xVLqj/EO81G31aSW3 vIllttG2fZ7W4lmuILiV8KR5bAM5Zt3ueifAH4Y+GbfwLZ+HdFm0+3+HWpXmq6Gi3Ukpjlu4bqG4 Ejyl3dX+2zOQW+8EOcLioton1/4b9b/gVdXs9v8Ah/8AgfifPGg/tH/tK+Bfg14i8beLvhvovi65 Tx7q/h2yk0a+1PUBpSx6nqUc8+oLBp7SrY2ot4o42ijeSRNm5Y2bA+hv2efHPiT4lfB/w/448Waz 4Q1bUdW+0ym+8JPK2lXEIuZUheHzWaRSYlj3o53LJvUhSNoo69+zn4M1nwXc+CrLxJ408PR3HiG/ 8TrqPh7xHc6ZfxXl7cT3E5WWFlyha5lUIwZQpHG4Bq7D4dfDzwr8KvB1h4E8F2U9rpGnGV4lnu5b mV5JZXmlkkllZnd3llkdmYkkuarQlJ9fP8zpKKKKQwooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACue07x3omqeIrjwvbWPiFLy1Z1eW58Oahb2h2HB2XckCwOPQq53dVyK6Girg4JPnTfbW 336O/wCHqJ36Hnut+K9csvj/AODPBEOoCPRdX8IeINTurUxofOubW70WOB95G4bUvLkbQQD5mSCV UjwLV/2xPHXgHTrhLzwTB4n1HXfHfijRtBm1TWINA0mG10y6e2it5L94WQXM0qeVCrLh2Lb5VC5P 0X8SPg/4D+K/9jTeMNPv/t3h26kvNJ1LS9Wu9L1CxkkiaGTyrq1limVXjdldA+1hjcDtXHLar+yr 8GNW8P6X4RbStfsvD2l2J03+xtP8U6pZ2F7AXeR1vLeK4VLtpHkkaR5g7yl2MjNk1EdJXf8AWqf3 6f1cb1Vl6/g192t/kjH+GX7VelfFT4xa78LvDfgTV5bHQ7m/sbjXYZ4Z4beezmMDi7SMkWolkWTy Fd/OlWMyGJIyjtX8V3vxr+MPxH8Z+Cfhd8S7n4Y6H8P1t9Nm1qLRbDU5tV1e4tY7vy/LuN4W1ggu bNmwiPK9wVWRREd3aaL+z18L/D/jaHx7pdlr0d/bald6zbWj+JtSk0y2vboTi4uItPac2sckn2q5 yViHMzkYLE1X8Y/syfBHx94vuPG/izwWb3Ub97OXUoV1O8hsNVe0bdbPfWUcq2120fAVp45CFVV+ 6qgENlzbjk9XbY8g0z9rC8+Hnh3XLbUvB3inx3eaFrXi/wAQeIbizmgVdC8P2fiHUrWOV3nkQSMs duyQ26EuyWsuMbADv/Fn4/8AjDUvAvxgn8AeA9Yj8M+E/D3iCwTxxb6jDBJbavY2czS+VaybZGhj mQwCdC5NxGw8vy1849v4g/ZW+B3ie5t7rVvCd0Xhm1CWYW+r3tul9Hf3rX91b3ixyqt1bSXLvJ5E weIbiAoUkGXV/wBmP4Ra3qXiC+vdP8QJbeKYb6LVtItvFGp22k3JvYJILqQ2EdwtuJZUmkLOIwxk Yy58z56NGrPz/wCB+H4gnaV/68/x/Aq/s3/H3T/2hfD+reKPC9pDP4Z0q7TSbLWvta+dqtzHGDcu bQLutowzJs8xt8gYtsRSjP5NcfHT4y/Dvx3ruq/Giw8a6aiDX5/Dvh2x0LTpfDutw2Vvc3Nrbwal E012t9LbWzXBM/koxSVFhUqA30xovgPwp4e8Ua94y0XShaat4nS1XVpUlfbdG2Ro4naPOzzAjBC4 AZlSNWJEaBeK8D/syfCP4e6rpWq6BYeIJ/8AhH4Wt9Ds9W8UanqdjpEbRGAi0tbm4kig/dM0QKKC sbMgIViCSbbbQoJJJM8zm/4KB/CJP7YntNN1S/tdFe/up3tdrPJptnppupr2MNtRk+1g6cBvAM4P zAK2K8n7eOk2fwqtfiLq/wANbuwn1XxEPDmlRzaxbnTb9/szXTzwX4G2eFFjkh328c3mXCiKDz9y se90L9jL9nHw5ZSadpfw8SO1m8FS/D6SL7fc7X0iWd7iaI4kH7x5ZGczf63OMMKsyfsmfByfNzcj xrcamLmC6i1mfx5rkmqW7Qx3UUQhvWuzPEgjv7xfLRwjCd9wJOac7X9z8fX/ACCOy5jkV/bF1CLx baaPqvwD8Y6boxt/Dc+q6neXNpBNoh1uU29ul3ZySJKGS4xG4jEhUCRmwUCt1Px0/aWs/gvqT6VZ /DvxB4vn0vQbjxd4i/sua1gXR9FgbbLdO1xLGJZCRJsgjJd/Kk+7gbsHwv8Asd+A9C+K2p+LLm2v pvDkVtpM2jac3ibVJS+oW17fX01zqEby7Lxzc3UU6POZmEgdvlPX0T4kfAT4X/FjWLHXfG2h3Vze WVpJpzta6pdWaX1lI6PJaXiQSIt3bM0akwzB0+98uHYMlv8AN/d0/r8Qf6L7+pzngr9oPWPHnxV1 HwNovwe8Sp4a0fVNR0G98XTyQizF/abGKRxAmQxMrFTK+weYAiiT52Tiv2jPiR8ZvAPjebWbi48W +F/hTo2lW97L4j8LeH9P1rbOZZPtb6pFO7XEdnBEsT/6NAXIeRzKAmyvf/C3g3w94Li1OHw7YtbJ q+qXOs3gMryeZdXD75X+YnGW/hGAOwFea+Mf2Ufhj448Wa14s1nVPGKf8JJdW95rOj23iW7i0bUp YYo4QbnTg/2eYNFBbxuroyusKhgctultpR6uyv621+V9vkaQjGcmm1FdL32vpsnrY8A+LX7XfxV0 r4ofF34Z+Abyylub2Oy8LfDGZVt3jGuI2nR6gTuUtI8Z123kKsHRV0+U7eJAcnx7+2T4ok1jQtR8 PfFe90HxJ4g+G3hjxT4R8BweGo9UtPE2q332+SexlZYDcRh1jsolkW4hWMuXIfDCvpjTv2Vvhdpv ifRPGkY1OXXfDuu6j4j06+lkhLw3uohxfSECMKwm3rlWBCeVH5Qj21m2H7GnwXsPBOpfDprXVL3w 7q+iW/h69stQuI7tZLO3e6kt0VpY2aIxS308kbRlGjbywhVY0VZ5pWWnX/Pz7v7krm7oUm3+9X/k 3/yPl97Y7Tf2k9S1z9pS7+AOlfD6GK20dV/tTVNS1yOzvCGtWuPPsrBo913aq5t4GlSQFZJvubF3 n3KvIvCP7MXgLwf420vx/B4k8d6xqmjGZrFdf8V32rW9u00JimeOK5kdY3cMzFkCnLFQQhKV67Vp 6a7nPUgouykn6X/VL/IKKKKZAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFc7d/EXwHYRwTaj4w0izjurm6s4XubtIVkltnaOdAWIBKOjhvTaa uFOc/gTfp/XkxXOiorm9G+I/gPxHrCaDoHi3TNRvpLT7fHHa3CyiSHeULo65VsMCCASV4yBkZz7X 40fCe8srbUIviDoawXkrQwtLdrEXZRGxO18HbtmgbcRtKzxMDiRCdVg8Q3b2bv6P+uj+4OZWvc7S isHw1468J+L9Fi8ReHtZjudOnkWKKdkeJZGfbs2hwpIbepUgYYMCM5q+dd0b+yo9cGqWrafKqtHd JKGicMQFIYcEEkYx61nOlUhJxlFprTbr2GnfYv0VXTUdPk1CXSUvrdr6CFLiW2EqmVI3LKjsmchW McgBIwSjAdDVioaa3AKKKKQBRRRQAUUVW1HUbDSLC41TVLyG0s7SNpp55nCpGijJZieAAKaTbsgL NFcVJ8Z/hhDcSQXHjC0gSNok+1TJJHaO8iqyIlyyiJ2IkT5VYn5hxV7TviZ4D1XS9T12x8T2b6bo 0jRXt4xKQRlWKsRIwCsoZWXcpK5VhnINbywmIiuaVNpej67feJSTdkzp6Kyl8VeHJYdHuYNbs54P EEgi0uaCUSx3jGF5x5brlSDFE7g5wQODyKk0PxFoniSzXUNC1KG8gZUYNGegdFkXIPIyrqcH1FZy pVIq8ov7v67ME09jRoqC+vrTTLKfUdQuEgtrWNpppXOFRFGSxPoACap6Z4l0HWbPTtQ0nVra7tdX i8+xmhfclwm3dlSOCMc1KhJrmS0C5p0Vz/iL4geCPCV3FYeJvFOm6bdTQvcRw3E6q7xoruxC9T8s chHrsbGdpxj/APC8Pg/8wf4k+H02RCZvMvkTauAzZyRgorI8inmNXVnChgTtDCYia5oU216MLo7i iiiucYUUUUAFFFFABRRRQAUUUUAFFc7bfETwJe6wug2Pi7Srq/JmQwwXSyFWilihkRipIV1kniQq SGy2McHGpo+uaVr9nJqGj3qXNvFdXFm8iggCWCZ4JV5A+7JG6+ny8ZHNazo1ILmnFpen9dn9wrov UVz2nfEPwLrF9p2m6V4u0m8udXtvtlhHBdo5uofnw8eD8ykRSlSPvCKQjIRiOhqZ0503aaafmCae wUUUVAwooooAK8nv/wBny1v/ALTbN8TvF8WmT3+pajHpoh0qS3hkvzcG4C+ZZM7Kftc+A7NwwByA K9Yorpw+LrUL+ydr+Sf5p9395Linuef/AA0+CPgr4XE3OjQveX+x4Uvru3tklhidg7RQrDFGkMRY A+XGqpkZxkknkfDX7JfgDwnpkWk6P4j8SxWzLJBfqslpH/aVs4t1aCfy7dfkZbSEM0eyRwG3u241 7dRW6zXGqUpqo7y387Xt913YXJG3LbQ4DSvgt4U8OfDew+GvhCa58O22nG1lh1HTIbaO8a4gMZFx JmJopJX8pd7NGdwLZHPHBp+xx8Of7RuL5tX1iFDcaa9vFb/ZgY4rGJUiRpHhaRnJXLTbhKB8qOil w3vdFOlm+NpOUoVGnJ3fm7p6/cv6bD2cdNNv6/U+f2/Yo+EsmgxaHLf60xgEKxXfl2CyKsdzc3O0 oLYQujNdurRtGyFUiG3KA17/APjmlorLF5hisXZ4mblZt6+dr/khxio7BRRRXGUFFFFABWd4i0Ye ItB1HQW1C6sF1G2ktWubUR+dEHUqWTzFdN2DxuUj2rRopxk4tSW6A8s0/wDZ68LWWqahrNxrmpXt 5qb6bLc3Etlpsc8kllLbSxsZorVJGDNaR7kLFBltip8u3Zsvg74U0rwrrfhjRDPpj+INQn1S91O1 it1vHuJbhrgOzGMq5Rm2rvVvkVVOe/dUV2TzHFTSjKemmmltNFptpZExgou6Pn7Uv2KvhlrF8t7q XiPxNcB7671O6hc2Jjurq7iWK7lbNtlGlSNM+UUEZUNCImGa6Twp+zH8PfB/j63+JGm32szaxai2 SJriSBlVILKayCDEQYK6TB3Ab5nhiPAXafXaK6KmeZjODpzrPlacbeT1a+ZKowWy/pHNax4FtdS0 HVNDsPEXiHSH1W7F899a6nJJcQSiRJMRGfzFSMlApiC+UVZl24YivPdb/Zf8J31lq9vpOvatYHUL SxtbNN6eXpf2RFWKS2MapKJVKrIrNI22RVONoKH2eiuehmGKo/wptdfno/0X9NlOEXuea+L/AIC+ EvF91ocsup6rptr4bsRZaXY2X2b7NaFRiKaJJYX8uaMhCrIVyECsHQsh43W/2Mvhl4htbm11XxD4 pnF3LPdSGS4tXBuLhIku59jQFC83kQucqVjdA8KxN81e+UVtQznH0UlSqtW2/P8Ar7tgcIvoNVdi hQSdoxk9adRRXmFBRRRQAUUUUAFFFFABRRRQB4Zffsf/AA21V9SfVNc8RT/2rBc21ykT2lpG6TvE 7kpBbxq0hMK5mYGV8/vHfamzY+Ev7NPgf4N+KNT8XeG9W1i71DV7eSC6+2raeX88xmZoligjEILY Hlx7YsKvyZANet0V6lTOsfUpSoTqtwe66Eezjfmtr/TPO/C/wX0/wx4i0XxN/wAJp4i1S50TTH0q GPUFsXjeN5ZZGfCWymNyZEVjCY9628IcNs59Eoorhr4ipXlz1Hd+iX5FJWCiiisRn//ZCmVuZHN0 cmVhbQplbmRvYmoKMjUgMCBvYmoKMzI1MTgKZW5kb2JqCjI4IDAgb2JqCjw8IC9MZW5ndGggMjkg MCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Aa1W23KbMBB911fsI8zUGAmJSx+b pDPp9CGZ8TQPTR8oxrYaGwjgtPmg/la+pSsh8AXHgbZxJiYgdM7unj3aR7iFR3DxQ13GIfBDKFO4 gwymFxWFpAIKVdJbsADX8V39A1ItZUQvpa8tVyic+eBFIEIGAd3HYQpHcXA1VrszkfgS1bcnVL8d iACSDXyYAaeOy5tHzSWLwKOOCFhIYbaB6UdcgC/PFmD9tsnsB1zNdKiv7IexK/iJygEHJHq4x1ew 7mS9gk1skwisYvJkA8WLtKxknsls+d6GbzD79AbKKdah17Amh4jIGkayDsKONdGRI+ur68vJTWnI vvwCKjyH+g51p4y/syHCGACfcvz+0vzbhAR+2D7+nCdxnZc2CXDRpErrQaEyZhLKADenbMcNKMGq IDesEH5oi1OUMi9l/QzdnZ+Gt1yuamDiPC5phHGEK/ZxlRoQl2lcdg6X6OIOwjWCPMINd7hdLTyN 653DbUQ1CPdkvAz76lBHGC/XuF25T+V5fLw9KWPXBFxL+R+VjHJhftSF0aXvYhVny3QOBcoZ29TK Ua9gPck5KhZMTWEuqyTPsjSpIc7mIHToAiWuupMM9gDFIQo6DsZIzM6V6sw39uqlR/mT4I7PhDje drw/ecivV2bT6k0px7T6sL7aGaQXUScMKIWOBmbfpMiPztlWq9ndXpy5jhdxsdur821UbtsqrQVB Z0FkgNsetqSHXtfLWWdBRDvhqdYY0ZKNFZBDXI6V7+EOswJipYOs4KQFcbGPayx3gBWMiLct54HV 83Af11iu6cO2nqfyPN6CWOAIc8ioK8yzEK4TeIz/lQPtosAJQOx1WOdAegRItug/aDztoZqh0+gb RWdMcbKCe2udLup7G56bQyzfQpaie8WQrPPkYVLpQaI94dIC6sbPjFW9MUjsSUyRDY4jxt5J1mmc TbaF9sGlZpjDovkukcZLFq/VPKNiKQocYWAtH9BZI1QdxN+Nu5oT2MbJyAXLOW8VrQ57dfFd8Z/q 4uPU13bTYV3aUHqjGdQrWQH+zvMsxQOiLVxSr3Xwz5DlYI80FMy6f6qxZVan5UbOZVynUNX41yb9 1L06c9+kZZIW9RZLU6rpl3uNKj2m5lYaBqrlptcbDy5zHGdv/wCeTKMnCmVuZHN0cmVhbQplbmRv YmoKMjkgMCBvYmoKODYyCmVuZG9iagoyNyAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMg MCBSIC9SZXNvdXJjZXMgMzAgMCBSIC9Db250ZW50cyAyOCAwIFIgL01lZGlhQm94ClswIDAgMTAy NCA3NjhdID4+CmVuZG9iagozMCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdl QiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSCi9DczIgOCAwIFIg Pj4gL0ZvbnQgPDwgL0YxLjAgOSAwIFIgL0YyLjAgMzEgMCBSID4+IC9YT2JqZWN0IDw8IC9JbTMg MzIgMCBSCj4+ID4+CmVuZG9iagozMiAwIG9iago8PCAvTGVuZ3RoIDMzIDAgUiAvVHlwZSAvWE9i amVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDMyMCAvSGVpZ2h0IDIzOCAvQ29sb3JTcGFjZQox MyAwIFIgL0ludGVycG9sYXRlIHRydWUgL0ludGVudCAvUGVyY2VwdHVhbCAvQml0c1BlckNvbXBv bmVudCA4IC9GaWx0ZXIgL0RDVERlY29kZQo+PgpzdHJlYW0K/9j/4AAQSkZJRgABAQAAAQABAAD/ 4hEwSUNDX1BST0ZJTEUAAQEAABEgYXBwbAIAAABtbnRyUkdCIFhZWiAH2QAFAA0ACAA0AA1hY3Nw QVBQTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tYAAQAAAADTLWFwcGxtgcDLfs+dH6Jt5gIV LUNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5yWFlaAAABLAAAABRnWFlaAAABQAAA ABRiWFlaAAABVAAAABR3dHB0AAABaAAAABRjaGFkAAABfAAAACxyVFJDAAABqAAAAA5nVFJDAAAB uAAAAA5iVFJDAAAByAAAAA52Y2d0AAAB2AAABhJuZGluAAAH7AAABj5kZXNjAAAOLAAAAGRkc2Nt AAAOkAAAAkJtbW9kAAAQ1AAAAChjcHJ0AAAQ/AAAACRYWVogAAAAAAAAZXEAADoxAAAJllhZWiAA AAAAAABqWgAAr3IAABr5WFlaIAAAAAAAACcLAAAWdwAArpZYWVogAAAAAAAA81IAAQAAAAEWz3Nm MzIAAAAAAAEMQgAABd7///MmAAAHkgAA/ZH///ui///9owAAA9wAAMBsY3VydgAAAAAAAAABAc0A AGN1cnYAAAAAAAAAAQHNAABjdXJ2AAAAAAAAAAEBzQAAdmNndAAAAAAAAAAAAAMBAAACAAAAIQBy AOwBggI1AwED/QUkBmoHzglfCwUM1g7EEMIS3BTyFzMZZBunHeogKyJyJKcm4SkPKzotRy82MR0z BzTuNtI4sjqMPFk+IT/mQZ5DUkT9Rp1IN0nKS1lM1E5VT8JRMlKZU/tVWVa6WA5ZX1qwW/RdNF5y X6Zg3mIRY0Zkc2WdZsJn5mkKailrRmxebXZujW+gcK9xv3LQc+F08XYAdw54HnkwejZ7GXvufMJ9 ln5xf0iAIoD9gdqCu4OehICFaYZThz+IL4khihaLDYwFjP+N/Y7+j/+RAZIDkwaUBpT7leKWxper mJKZd5pim1GcPp0tnh6fEKAEoPih7KLgo9Wkx6W6prCnnaiNqXyqbKtXrECtKK4Prv6wALEHsguz DrQNtQy2C7cHt/+49Lnput670LzBvbC+n7+KwHfBZsJVw0TENcUlxhjHDcgCyPjJ6crAy4jMTM0O zc/OkM9P0A7QydGE0j/S+dOv1GbVHdXT1ovXQtf42K3ZYtoY2s/bhtw93PTdsN5l3wzfmeAk4K3h OeHG4lTi4+N15AfkmOUs5cDmU+bm53noDOif6TLpxOpT6uPrdOwF7JPtIe2v7jvuxe9S7+DwavDz 8XryAvKM8xbzoPQo9K71MvW19i/2ovcN92b3vvgL+EX4fvi4+PH5ZPne+tT8ff6L//8AAAAkAHwB AgGQAkADFAP+BSMGXAe5CTsK0gyLDmMQShI6FEIWWhh9GqEcxx7uIR4jSyVkJ4QplCtzLSQuyDBx MhozwjVpNw44qjpCO9o9bT78QIhCDUOLRQVGfEfnSVZKtUwUTW5Ow1AWUWpSslP3VT1WdlevWONa E1tEXG1dm17DX+ZhBmIkY0NkX2V4Zo5npWi8ac9q4WvzbQhuHm8ycEpxXHJ2c5B0oXWIdmV3PHgX ePV503qxe5F8cH1Wfjp/HoAEgOyB1oLAg6uEloWChm6HWohIiTeKJYsSi/+M643Vjr+Po5CHkWyS UpM3lB+VCpXzlt6Xypi2maSakZt/nGydWZ5FnzKgH6EKofSi4KPNpLSlm6aEp2ioWqlmqnuriKya raSura+9sMWxzLLOs9G01rXYttm32bjbudi62bvevOG95r7vv/XBAMINwxvEKsUvxh3G+cfPyKTJ espRyynMAMzWzazOg89a0C/RA9HX0qvTf9RT1SXV9Na/143YWtkm2fDauNuC3EjdB9223mTfEd/A 4G/hH+HN4nrjKePX5IPlLuXW5n3nJOfJ6G7pEemw6lHq8euO7Crsxu1h7fvuke8o78LwWPDs8X/y EvKo8z7z0vRi9PH1gfYQ9p73JPec+Bj4oPkx+dT6kftn/GP9hP6b/yD/WP+P/8f//wAAABUASgCZ AQEBcQH1Ao4DPAQABNsF0wbbCAAJLAp3C8cNJQ6KD/oRcRLlFFkVyxc4GKQaChtnHL4eCx9QIJgh 3yMnJGolqSbjKBspTyp+K6ss0i32LxYwMjFLMlYzZzRwNXc2fDd8OHo5eTpyO2g8ZT1kPmY/ZkBf QVpCUkNMREFFM0YhRxBIAEjuSdlKw0uuTJhNgE5mT09QOFEkUg5S+VPkVNBVvlakV3pYSlkVWeJa sVuAXE9dHF3qXrpfiWBWYSVh9GLCY5FkYGUsZflmxmeRaF9pLGn4asNrjWxWbRtt1W6GbzBv2XCC cSZxzXJ1cxpzv3RldQl1r3ZVdvp3oXhJePJ5m3pIevV7o3xTfQZ9un5tfyR/24CVgVOCD4LMg4qE RIUAhb6Ge4c3h/OIr4ltiiqK54ukjGKNHo3bjpuPWpAbkNuRm5JekyGT5JSolWuWNJcCl9GYn5lv mkCbE5vlnLedi55inzmgEaDqocWioaOCpGSlRaYnpwmn7ajTqbqqoauIrHStXq5JrzewI7EPsgCy 8rPjtNm1zbbDt7e4tLmruqW7oLybvZi+l7+TwI3BisKHw4bEgMV5xnXHcMhmyWbKesuTzKfNts66 z8HQwdHA0snT1dTd1fPXGthK2YPayNwz3a7fSuEF4ubk+udi6g/tL/Dn9ZL7pf//AABuZGluAAAA AAAABjYAAJVGAABWzwAAUqkAAJFOAAAoEAAAFWAAAFANAABUOQAC3CgAAqj1AAFzMwADAQAAAgAA ABgAMgBNAGYAfgCWAK4AxgDdAPQBDAEiAToBUAFoAX8BlwGuAcYB3wH4AhACKAJCAlwCdgKQAqsC xgLiAv8DGwM4A1UDdAOTA7MD0wPzBBUENwRaBH0EowTJBPIFHAVHBXMFnwXMBfkGKAZXBocGuAbp BxwHUAeGB70H9AgsCGYIogjeCRwJWwmcCd8KIwppCrAK+QtDC5IL4QwwDIUM2g0wDYkN5A5BDqAO /g9gD8YQLRCUEQARcBHhElQSzRNEE78UPBS5FTsVvxZHFtIXXRfrGH0ZERmpGkMa3ht9HCEcxR1s HhIevB9nIBUgxSF0IiUi4iPGJLIloSaKJ3koZylXKkQrMCwgLQst9i7hL8owszGcMoMzbTRVNTs2 IjcKN/Q43jnLOr47xzzbPe4/AUAZQSlCOUNNRF9FckaFR5hIrknFSt1L+00ZTjVPXlCFUbBS2lQR VUhWhVfEWOZZ/1sgXEFdaF6VX8Bg8GImY2RkpGXlZytodmnFaxZsb23FbxpwdHHLcyZ0gHXXdzB4 iXnje3J9I37igKWCboQ7hhWH9YnVi8aNuI+vkaaToZWnl62ZsZu4ncOfw6HfpJKnW6oYrNOvgLI0 tN+3mbpUvRS/38K8xZDIfstwznvRddSR17va3d4D4Unkp+iG7Zb1dfk0+tf77fzZ/ab+of//AAAA FgAxAEsAZgB+AJcAsADIAOAA+AERASkBQQFZAXEBigGjAb0B1gHwAgoCJAI+AlkCdAKQAqwCyQLm AwQDIgNAA18DfwOeA8AD4gQEBCcESgRvBJYEwATvBR8FUQWEBbcF6wYgBlYGjAbEBvwHNgdxB64H 7AgqCGoIqwjuCTEJdgm9CgUKTwqbCugLNguIC9sMLgyGDN8NOQ2WDfUOVQ64DxoPgQ/rEFYQwhE0 EacSHBKVExATixQMFIsVDhWVFh4Wqxc5F8gYWxjwGYkaIxq+G1wb/hyhHUUd6R6OHzcf3iCLITQh 3yKLI14kPyUoJg4m9CfeKMcptCqcK4gsdi1jLlEvQDAvMSIyFDMJNAE09zXvNuo36DjpOe469DwF PRg+Kz9AQFhBa0KBQ5pEsUXMRuVIAUkfSj9LYUyITaxO1lAEUTNSYFOXVNJWC1dNWHhZhFqTW6tc vl3cXvxgFmE6YmBjjmS9ZepnHGhSaYpqwmwBbT5ud2+zcPByKHNndKF12XcSeEt5hXrffGJ993+P gSeCv4RYhfmHm4k7iuGMjo48j+2RoJNXlRmW5Ziumn6cVZ4yoA6h/qQopl+okqrFrQGvQrGDs9C2 L7iSuwK9ecAHwpTFNsfeypLNX9Ae0vzV5tjE263eueHG5N/oj+vZ7pzw5/LU9HP1+Pe0//8AAAAl AE8AeACgAMcA7AESATYBXAGAAaUBywHxAhgCPwJnAo8CuQLkAxADPgNsA50DzgQCBDcEbgSoBOMF IgVjBaUF6AYtBnMGuwcFB1IHoQfyCEUImwjzCU0JqwoLCm4K1As8C6wMGwyPDQYNgA3+DoAPAg+K EBcQohEtEbkSRxLcE3EUCxSlFUUV6BaRFzsX5hiXGUsaARq6G3YcNxz4HbsefR9EIAsg1iGfImsj TiQ9JTQmKiciKB0pHCodKx4sJy0uLjovSTBZMXAyiDOmNMM15DcKODQ5YzqbO/c9aT7gQGRB5UNy RQFGlkgsScZLX0z6To9QKFG8U0tU4FZvV/5ZhVsSXKBeOF/LYWNi/2ShZkBn42mKazNs4m6LcDlx 5XOYdUV29Xioel18BH2kf0qA7oKShDSF3IeDiSSKxoxrjg2PrZFIkuGUfpYel7uZVZrxnI6eK5/C oWGi+6SVpjan0qlnqwWsma4zr8uxabL4tJW2LLfEuV269LyLvii/ycFnwwfEpMZPx/nJnstMzQLO ndAb0Z7TKtS/1mfYCNm522vdDt6u4Ffh7ONt5OTmU+e56RTqUOuD7K3txu7R79TwxvG18pDzbPQs 9Ov1nvZI9vL3iPgc+K/5L/mq+iT6nvsC+2b7yvwu/If80f0b/WX9r/36/k3+uf8m/5L//wAAZGVz YwAAAAAAAAAKQ29sb3IgTENEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1sdWMAAAAAAAAAEgAAAAxu Yk5PAAAAEgAAAOhwdFBUAAAAFgAAAPpzdlNFAAAAEAAAARBmaUZJAAAAEAAAASBkYURLAAAAHAAA ATB6aENOAAAADAAAAUxmckZSAAAAFgAAAVhqYUpQAAAADgAAAW5lblVTAAAAEgAAAXxwbFBMAAAA EgAAAY5wdEJSAAAAGAAAAaBlc0VTAAAAEgAAAbh6aFRXAAAADgAAAcpydVJVAAAAJAAAAdhrb0tS AAAADAAAAfxkZURFAAAAEAAAAghubE5MAAAAFgAAAhhpdElUAAAAFAAAAi4ARgBhAHIAZwBlAC0A TABDAEQATABDAEQAIABhACAAQwBvAHIAZQBzAEYA5AByAGcALQBMAEMARABWAOQAcgBpAC0ATABD AEQATABDAEQALQBmAGEAcgB2AGUAcwBrAOYAcgBtX2mCcgAgAEwAQwBEAEwAQwBEACAAYwBvAHUA bABlAHUAcjCrMOkw/AAgAEwAQwBEAEMAbwBsAG8AcgAgAEwAQwBEAEsAbwBsAG8AcgAgAEwAQwBE AEwAQwBEACAAQwBvAGwAbwByAGkAZABvAEwAQwBEACAAYwBvAGwAbwByX2mCcm2yZnaYb3k6VmgE JgQyBDUEQgQ9BD4EOQAgBBYEGgAtBDQEOARBBD8EOwQ1BDnO7LfsACAATABDAEQARgBhAHIAYgAt AEwAQwBEAEsAbABlAHUAcgBlAG4ALQBMAEMARABMAEMARAAgAGMAbwBsAG8AcgBpAABtbW9kAAAA AAAABhAAAJyEAAAAAMOV+IAAAAAAAAAAAAAAAAAAAAAAdGV4dAAAAABDb3B5cmlnaHQgQXBwbGUs IEluYy4sIDIwMDkA/+EAQEV4aWYAAE1NACoAAAAIAAGHaQAEAAAAAQAAABoAAAAAAAKgAgAEAAAA AQAAAUCgAwAEAAAAAQAAAO4AAAAA/9sAQwADAgICAgIDAgICAwMDAwQHBAQEBAQIBgYFBwoJCgoK CQkJCwwPDQsLDwwJCQ0SDg8QEBEREQoNExQTERQPERER/9sAQwEDAwMEBAQIBAQIEQsJCxERERER ERERERERERERERERERERERERERERERERERERERERERERERERERERERERERER/8AAEQgA7gFAAwEi AAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQE AAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2 Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Sl pqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8B AAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUh MQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJ SlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2 t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A/VOi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoorwj9p74neMNGPhr4N/Cm4EHjj4hXD21teB lH9mWcYBnuTk5DbThO5w5U7lAPXgcHPF140KbSve7eySV235JJt+gpSUVdnuxIAySBVPR9Z0fxDp lvrWgatZ6np92nmW93ZzrNDMucZR1JVhkHkGvnbwd+xV4c8AfEDwp8UtK8ca1d6zopvJtbl1OVrp tXknheMuXLDyyDI+eG3AjOCMnyH9lz9rnwD8JvgJoPhbWfCvjLU4tDeZtZ1XTNLWWw0z7ReSmNZZ WdfmIkjOAD98AEsCo9yPD0MVQnVyqo6zi4Jrl5bc3tO7f8sbPrzWsnoYuq4tc6tv+h96UV5D8Sv2 kfDngfxZa/Drw34W13xv4vu7QXx0rQ4kf7LASoV7iVmCxBg3yjk/dyFDoTzOvftmeCNL+Efhf40W fhvVToOv+J4/D14t+Ps8+np++8242osomCCBiFQ/NnG5WBA86jkWY1YwnTpNqbSW13e7Wl762dns 7aXNHUinZs+hKK8A+FP7XGkfEHxTq2geKfAeq+B7W30J/FWmX2r3CBbzSkkKNcSrgeQeN23LjAc7 sAblj/bM+H5tLXxDceA/iBa+Er3UF0+DxRPoqLpzl2wkv+t87ym4w3lZ5Axniqnw/mUajpOk7q2z T32Sadm3rotdHpoJVoNXue/UV4Pq/jP4baZ8dvHXiGx03xBc+NvBPgXzr0NciPTrizGblYk+ZsSF mUltmB1GTuzxvhD9vbRfGGpeGGs/hR4hj8PavfWmi6rrplU22m6lcrlIEBUeeisQHfMZA5CHKhtK fD2OrQ9rh6bcUk23ZWurq13rdbdXslcJVYxdpP8ArT/M+qqK8i8U/tK+GNC8d6h8OfDvgnxn401r R4Um1RPDmnRzxWJcbljlkkljHmFfmCru6EdQQOw+FfxP8LfGLwNp3xA8HSXLaZqSttS5i8uaJ1Yq 6OuSNysCDglTjIJGDXBWy7FUaKxFWDUXbX1V15q6TavutUVzxvy31OtpMgYyetfDX/BQv4ja14f+ IHw4s/D4uZD4MI8Z38KSYix9qhht3b3DpIgP/Tb3NV/2wfitcD9on4YzaPeKuj/D37Hr+rX1tIW+ zi8uokZJccDMMcZAPJWZuxr6HBcI18TTw1RTsq0aktvh5Nk9deZuNv8AEtzKeIUXJfy2/E+7qK8v +L37QXhP4S6jpHhdtL1bxL4s1/c2meH9FhWa7kQBv30mSBHDlSC5OeGIDBHK8Drn7a3hXRvhjqXx Fk8A+I4ptC8Tx+FdX0q8EcMtpcY3TNvUurKgDgDgswAIQMGrxsPkeYYiEKlGk2ptJbK93Zbva+l9 r6XNHOKdv67/AJH0dRXivw0/aq8H/Efxta+AZvBPjXwpqup2cl/pi+I9LS0W/jjwWEWJGJYDc2MY wpOe1ee+Df8AgoL4L13wxaeKvEnwq8c6PpguFttV1a2she6VprNKEUvcgozDDIWxHuBYKAxIztHh zNJOSjRbceXt9q/LbXW/K1pfVW3Jdan3PqyivIdfvvhrrH7S/hLRr2LXX8ZaR4ZutY02eC4K6d9k mkELiRQ/zOdjY+XGOSSQm3xvTv8AgoppWp+G7XxNZ/BvXrmz09g/iya3u1eDQ4nufJi2yNGouJXB V9mIwN4G44Yq8Nw9jsXGMsJTctI3vZWcnJRteWqfLo9Nfdte13KrGLfN/Wlz7Corynx3+0b4P8Ge MLL4faZ4e8S+MPEl5Z/2g+neHLJLh7WA/cknaSSNEDZ4G4nlcgbl3b3wm+Lvhn4xaHf6z4dstV0+ bSNSm0jU9O1W1+z3djdREb4pFDMucFT8rEc4OCCBw1MtxdOgsTODUHbXyeztvZ20ezK543tc6DxF 4y8IeEIDc+LPFWj6LCE80yajfRWyhdyruy7AY3Oi59WA7iqnhb4kfDvxzPPbeCvHvhzxBNaqHnj0 vVILtolJwCwjZioJ7mvk/wDakvPgfZ/tZ+D7n45/Zf7BtfB0ks4uIZpkdzcTCEGOIMzc+bwRj8cV 1nw58YfsWtrGt+O/gRoelXHijwl4evdUMVlpt3p4aBE+dd0sSxhm+Vc4LAM2MjdXuPh+KwEMSoVZ Ocea6h+7TbaScr+Wr0tdaGbq/vHBW0t+Sf6n1PRXyr4Q/b10bxhqXhdrP4UeIY/D2sX1pouq66ZV NtpupXC5SBAVHnorEB3zGQOQhyobn/jX+0J8afD37QngnSdE+EviuK20681m1t9Kj1MJb+LohCgj lUKpUbMeZ8wcoHGMEkVjS4UzJ4j6tVioS5ZS1lFfCm7b76W8k1J2jqDrw5eZf1c+yqK8G8WftceH fA+s6F4O8R/DjxkfFuv+HoNdt9EsLNLmYPJI8bW2d4O9PKldmIC7Iyc5wtcvrHxv+GPxl+HXhTVv iR4R8U6JdRfEu18OJYWN0PO07WImdo2kkDR7oQud+FJBY4UlQw5qXD+OajUqU2oPqrPe+qV1daPX bzuN1orS+p9Q0V498Rv2j9M8GeM5fhz4V8CeIvHHiSztUvdRtdFSIx6fEwyvnyOwCyMvzqmMlSDw CM0pf2ufhp/wpvSvjPZ6V4ku7HXNUGiadpMFgr6jcXpd1EIjVym4iNmzvIIwBliFOEclx8oQqRpN qbSW3W7Wm6TSbTdk0r7FOpFOzZ7dRXjfwU+NPxI+IvijV/DvxC+CWpeAzaWEGoWUk92bqO5RyQw8 0Rou4fKdo5HIIGK9krkxeEq4Wq6Na11bZqS1V94tp/JjjJSV0FFFFcxQUUUUAFFFFABRRRQAV84/ HrR/HPgH42eE/wBo7wr4JvvGmmabpMnh3XNJ06LzL62geUutzbJyZGzIQwA6JgkBi6fR1Fd2X414 St7TlUk04tPqmrNXWq8mtmTOPMrM8M+GnxY+NfxT8WXeozfCKXwj8PYbKRIjriOmtXtx82CsQYLE gwAVYEnIKsQTt8X0T4PeKrX/AIJzav4N/wCEPu7LxPeQyaldWP2QrdzGO/WcB0xuMnkxKMEbhgLj jFfbdFelSz50Jp4alGEVOnNJX3p81rttt35rt+StZaE+zu7yd9/xsfHGheO9d+D3xq8WfFDxR8GP H2q6X8RtB0K60uTRNG+1y2zw2SxywTqWXypA+4bSc/L0wQa8+0rwZ4k8Qfs4eAfhlrHwx8RQN4Z+ L1vHq1heafKx/s+U3EpnfC48jbchC+duRnOGFfoRRXXDifktKFFKS5NeZ/8ALuDhHTyi3fu9dDP2 GnLfQ+O/2nPhd448X/HG4svCWjXLw+IvhVd6DZTxgrF9phuXuPIeQ4RN4McYLMB+854FcT8UviTr PjPwv8HfhVc/BDxP4O0zSfGGiWGsPrFkLS1M4DRrbWi5JmiIE7b8LgRpkfOK+4vF+meINZ8M6jpf hTxMfD2r3EJSz1QWkd19lk7P5UnyuO2D69q8U0T9nT4pa3468O+LPjh8c38bWPhO4a/0zSoNDg06 D7URtWWUR8SFRkrkZU9CAWDduV57QVCDxfKvYp8q9/mb5Wk1ZcnZe9JWav5NVKTu+Xr/AMC5zfiP wL41X4t/tF6vbeFNQe18ReAYbfRrqOAuLuYWTxeVDgEs+9SCo5GFyPmXPMeKfA2t+E/2I/h03hfw jqNxqnhzUdI8QXekrbyNcyT+dumQxgFlPmSnIxxzxX2dRXlQ4jrRdLmgmoODtd68kORJ+q69Luxf sFr53/E+OtO8UfEv9nfX/ixoNl8HfEfiLV/G3iK88TeGtasbUSaSI7kZRbu4LL5PlFTuU8nH8KlX Ppv7DmkS6N+zB4MgnXa9xHc3n1WW4ldT/wB8stV/iD8Dv2hfHd3r2jyftMi18Ha9LNFJpMfhW0Wa GylY5tluQd5xGxTzDyepHJFey+CfCWl+A/COj+C9ED/YNFs47K33nLFEUKMnueK6c3zLD1cB7KEo yqTlGUnHn+xFxV+dJfa2imr311SUwhJTv0V+3Wx8w658Ita+L/xz/aAOvaTdPG3hO18N+GJdQiYW gaW2WbMbEYIS5RJcrnazZ615v8M/gN8QvFP7KfxY1rx5o2uReMfENpbw2lvdW7i9lg0pIjbxeQV3 h2MBjAI3MNp5yCf0BoqaXFmLpUlSpxSSdK3l7NR2/wATjGT80U6Kbu/P8T4st/Gni3wp8XPBH7R3 iv4Y+M9d0nxF8MoNKnGhaU11JYaiJlkkjeIsDGpxlS2N3mcZ2sR574l1PWbf4G/Gy81jwH4i0GbU /iDZeM9Lj1awMMstveXUTRheqmRQhV1VjtL7TzkV+iteffHb4Wy/GT4dXXgSLVo9ONzeWl0Z5IjI u2GeOUrgEHkIRnPGa6sDxLQ+sUva0VGKlTu03pGE1JaeSun33JlRfK7Po/yseJaL4h8WftCftB/D nxXpnwr8V+EPD3w0tb6e8uvEtibKS6mu4lhEMMQ3ZCiMNu3dyCF+Xf4P8NvHHirxl+x/afs6eC/g /wCLtT1fXriW3i1uTTtuirGb1pnk+055ZdpTGBhh1JAU/pHEnlxJHnOxQv5V51+z18Jbj4H/AAq0 v4a3Otx6u2mTXDi8SAwiUSzPKPkLNtI346npSw/EeHp4Z2oq9OVN043lZcvtZOTfW0p7Nq6dlog9 lLmun3/T/I4Gw8DeJ9K/a88M+IJNHvpdEtPhcNGbUzGWhFzHdsxjZxwH2srY7gkjODjxnwn8JfEV r/wTp8T+GYPB2o2Pie+llvr+wns5IruRoL5H+aJhu3eTAuBjkAV92UV59HiSvSUEor3ZUpddfZOT Sfrza+iKVCK9P8z480XxD47+C3xT8U/Eu8+DXi3xTD8TdB0WXRho1r5i2lzb2axPbXrNg2w3sBvK thRkAkMq9j+wdHq178J9e8Y+IVj/ALW8UeLdR1O9eMgq8pcK5GMjG9X6eldT8Sfhh+0Z4m8Sand+ Bf2kY/DGgX6KkGl/8IvazyWY8tVfbckiQlmDOG4K7sDoDXb/AAh+GGifBz4faV8PPD0081npiN+9 mbLyu7F3c+5ZieOOeABxXXmOZ4aplvJFxdWfs0+Xnuowi0lLmSSa91e7dNpu+xMKbUl2XoeD/G3W NN+F37WHh74t+PPDGp3ng+48EvoX9oWumNex2t4t1JMPMCglcqwAOCSW4GAxHQv8cvAfxw+H3xH8 L/C3w54hbUo/CV+beSTQ5IEuneGRFiiOMtJu2fJgE7htzhsfRDKGBVgCD1BpqRRR/wCrjVM/3Riv Oea4edOk6lFurTSSfNpaLurx5Xr0fvfI05Gm7PRnxr4m8C614U/Yl+HJ8MeEtRn1Pw5qWkeILzSl t5GuXn8/dMhjwWU+ZKcjHHPFen/GzR9Z1D9or4Aa7p+kXtxYafd60Ly7it2aG28y1iCCVwNqbirA ZIzg4zivfqKbz6pKbqSgnJutrd/8vY8r/wDAbtrvfUn2Kta/RL7nc8Cv9E1Vv25tO199Iuzpf/Ct DaC9Nu32fzxqEj+X5mNu/aQ23OcHNR/tL+ALq7i+GKeCfBzzR2/xP0/WtUXTbPiNP3zTXMoQYAJO Wc9WYZOW5+gaKxhnFSFelXjH+HFRt0dk1d/eU6aaa7nwh8bfhldaF8f/ABj4i+JvhD4oeJfAfjA2 t1Ba+CYPOivmiijQwagFdHAjZQ0Y3Y7r1YDo/Fmt+Ftd+EGl+HvG37G3jS3+HK6xO+mWejDGo2QS L9zdS2kRQxtI0twCGcquDuLFl3fZlFel/rROUKKqU7umkk1OcfhjyppRaSlZK8tb22toS6Orae58 wfsXzeL47zxtpkVh48tPhxbS2Y8JW/jRAt/a4ixPEvJIhB8sIASgAGPm8yvp+iivEzPHfXcVLEuK je2i8kld927Xb6ttlwhyx5QooorgLCiiigAooooAKKKKACiiigAorwX4h/tH+LvBfijxxp+m/DGz 1XQ/Ammzalf6g2oalDJIIrGO9kRWXTJLNZNkqhUe8V267QCM9nZfGOO08Q6lo/jjw6fDem2TmKPx BNqVu2mSSqkBaB5GZJI5t0r7QYzGypnzN5MSi1V1tr+Ds/xHJNOz8vxV1+B6PRXl2v8A7S/we8LS 6hB4g1vWbKXS7C91W8R/DOqFobK0lSK4uiBbn/R1aRf3o+RhuZWZUYjOg/aU8M6t4tk0Tw/YyTaR b2mk3Eur39vfWaTPqWqNp1otshtGEyO0U7iXcqN+5KFo3kmhdndK25Kaex7FRXHfDH4teB/jFoSe KPh9qM+o6NMgkt717SW3Scb5I22pKqv8rxSIcqMMpHUHEV54+1q38QnSY/CJFlDqDWdzfz3TKkaA WhVwI4pBuc3Z2ozLxESSvIUiubY5cZjaOEipYhtJtLZvV+idvV6LqdtRXHx+P5G025vJNDkWaz16 30OaPzSqjzpYUWUF0ViAtwjY24Y/dLIRIZ9H8eWmu6Euvafp90sMl9FaxLcxvbs8ckiIko3qMqyy B1K7gcgZzkBPRXZlDNcHOapxn7zTklrqk2m9ujT8zqaK5W98dR6fqt/Z3Wmn7LaRuIpY5w81xMgi JjWHGcsZ41TklmOMDKF8y/8Ail/ZFpqdzqmiJGLGZbaB4rzdBcygSecnnMiqpj8pyevVF4lJiVpN 7EVs5wVG/tZ2te+j6Xv08nbu9Fdne0VyHjL4m6D4E1nS9O8QCZLbVLd5EnggmuJPN+12NpFGsMSO 7b5dQiG4cLjJ+XLLix/tGfBaTwTd/EY+OraPw3aWVzf/ANoS208cdxFbiUz/AGcMga4ePyJQ8cQd 1K4Kglcpa7Hps9Jorys/tO/BhdX1LQH8Q6qmp6NM1vqFk/hvU1ntZBGs22SM2+5S0L+emR88Mcsq 7o4pGWPXv2kPA/h3x34b8JahDqcVj4i/tC2TVJNLvljhvLbUbHTkhK/ZyPKknvtouGZYhsT5mWZG o7rsNJu1up6xRXk93+0h8P7S9ubWTU7YwN4k07w3pl9GZ57PUprv7IFWO4hhePzQ10yiLcSfKLMU Qs6amhfHj4f+INQ0jRbW4voNV1nSrfWodPu7UwTLbTXC2yuQ+A2JW2tsLbcpnHmxb5jJS28/wdn+ I5Rcd/6urnolFeSeJv2htB8CeJdch8e2MGjeE9ItJrhde+2+e5aCSyjuPOtEj8yKJW1GACUFxhJW kES+U0vJX/7WOozeLvD/AIO8K/DeK9u/Ht3qdj4Mk1TVptMW5l0rP9pDUke0aWw2bHEIVLhpSvzr ADmmpJuy9QcJJX/r+tD6Ior5+8P/ALU+peMvDNt4o8J/DbzYPEV1HB4Whu9SmEt0i3bWty9+tvaz mx2GKZ0A84SKqgtG5ZE7j4kfHXwt8K/HPhzwl4shuI7bxFo2rarFdW1vcXcweway3RJawRSSSbo7 uWUsPuLbNkENlbcGld+a+7ciMlJ2j6/JnpNFcDqPxz+HGlX8GmX+oavHc3VxPawIPD+oN5skN9Dp 8m0iAggXNxDGGztYSB1JT5q57w9+1Z8HfElhp9xp974he91HT49RTTIfDOo3d4qtb2dyU2W8EgeR YtSs3ZULYWUNyoJCcWld7Amnoj1+ivL/ABh+0z8D/Al7b2fiXx9YW6zvGn2pA0tqheRoQDMoKFhK qoyqS0ZkiLhRIpPU+EviFofjRrr+ybTVoFtZoYc6hps1kz+bax3SkJMqupCSgMjKrqwIZRwSm+gz p6KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigDlvEnwr+F/jJb9PF/w38La4uq7Pt41LR7 e5F3s2bPN8xDv2+VFjdnHlpj7ow7w78Mvhp4Pv01Xwn8PvDGiXsFn9gS507Sbe2lS22xL5IdEBEe 22txtztxBGMfIuOnrhPE3gO91ca/BY2ekImvXlncXLykj7SkCoTHcIExKsnkpAwJ5ikbJOxUOdST irwV3r/XzZ14OjSrVOWtU5Fprv1SfVbJt93a3UuaR8KfhZoseoDTfAPhmI6894+oyJpVsragbwo1 0ZiEHm+d5MXmbs7xEm7O0YbD8H/hFFo154ag+GPhJdIvIYrW701dHtvskscc8t1Gjw7NhCz3M8wB HDzO/Via5SH4M6n5OjwztoTjS9RmvInmt2ma0STUYNR2WuQvlBTG1uoH8KQScGPyj1HhHwzrPhrx F4kunsLIWnivVG1qZ7acgWbrZ2VsI8FAZGdreSQvhcZOcnGco1qrkrw/H1/r5ndicBgqVOUqOI5m r2VrX95Jdesby8rWe6Oj0vw74f0O4vLvRdC07T59RkWW8ktbVInuXVQqtIVALkKAoJzgACof+EQ8 J/axf/8ACL6T9pFy14JvsUXmCZipaXdtzvJRCW6kovPAr578O/s2/F+8uLbW/Fnxl12F7Z/Dl7p+ knWr2/trKSzvpbnUIpxNIy3X2gNEVkfLROiohEUSKdSy/Zy+I2pTaVe+LPi7rjNo99o2oW9lba5f zWkrW15NNfJcLK589Z1eN0LcwOkaxlY4VVuqScXZP+ux4UqNKsk6sU/VJ22/r5Ht0fgvwdFbJZxe E9GS3jl85IlsIgiv8vzBduA3yJz1+UegpsngzwXPBLYTeFNEkhlJeWFrGIqxbZyy7cHPkx8nr5a/ 3RjyTw/8DvGvh/xjo+laX8QfFEfgrQraHUfs1/r19em61BbuYhfPa6+0vCLZ3WSCZjAXFoyo3lzI /odn4av9D+Iuq+KdJ8M6R5PidrO21O7huPKuNlvBc4uJV8vEr7mt4AN2fLwxbEYShP8Ar5/0/uMH gsM0l7KOuj0W1v6VjoIfDHhq2uzf2/h7TIrpkSMzpaRrIVTbsG4DOF2Jgdti46CmR6N4U0m4uBDp Wk2c+vSlLjbBHG9/JtdyH4Blbb5rHOTjefWvAtP/AGff2hLKyutPv/2j9U1SNNV0+90xzLcW0ttH aK8YWaRXZrhJVjs2nhYgTN9qIeJpldObv/2a/jh4h8TeE9GvPiPqdhovgjRhGdUgvpLZdQv/AOxz YxS2sMM+63Mc8l1K7bYzItwUJkAXy4UpPS1v+Bb8+nobrCYZPm5VptZd73e3yfr2Po3UfhX8Nta0 Sfw34g8DaLrWl3MtzNNaatZpfRyG4uheTAiYPlWuFSXb0DRoQBsXDrX4ZfDKwh1u2svh94Xt4vE9 v9j1uOLSbdF1SHEg8u5AT98mJphtfI/eP/eOcvwb8MP+EK1i6v8ATNc1CWzvrjU7y5tdQ1XUdQzP dTQSKY/OuWjijQQyDyxEeZSY2iBlE3kPgr9kNfB/ibwz4ksBollqGj3MFxcahYy3FvyhXzwlhCIr IrPEkduF8lBbpEXTdJJlKjq0313/AK8jTo0umx7R4j+DHwe8Yand634t+FHg3W9R1CD7Nd3eo6Fa 3M1xF8n7uR3Qsy/u4/lJI+Rf7oqbT/hH8KdJvpNU0r4Y+E7K8mma4kuLfRbaOV5GnjuWcsqAljPB DMT1MkSP95QR1lFC00QdbnM3nwx+G2oeJZfGd/8AD3w1c+IJ1gSXVptJt3vHWGWKaENMU3kRywQS ICfleGNhgqCFi+Gfw4g1uPxLD8P/AA3Hq8VtHZR6gulQC5SCORJY4hLs3BFkijdVzgMikDKg10tF KyA8V179jn4A+JPHuq/FDUvD/iSPxTrUyz3up2XjXXLOWRl2BMCG8RVVRHGFVQFUIoAG0Vzdx/wT 0/ZLu7O/067+H+uzWmqQWtrfQSeN9eaO6htVVLWOVTe4dIVjRY1bIQIoXAAr6OopgeF6X+xV+z/o eqajrmi6b430/UtYuEutRvLX4j+JIp7yZN+ySaRb8NI6+ZJhmJI3tjqa9I1f4TfDLxJo9hoPizwJ oniOy020NlbLrtmmpusRMbMGkuA7uWaCF3ZiS7RqzEsAa6yihabAcW3wU+DT62niVvhJ4MbV475t TTUDoNqblbpplnacS+XuEpmRJS+dxdVbOQDWho/w1+HPh3V18QeH/AHhvTNUS1islvbPSoIbgQRR iKOISKobYkaqirnCqoAAAxXSUUAct4j+Ffww8Y6qde8XfDjwvreptaCwN7qWj29zObcMzCHzHQt5 YZ3bbnGWY45NauieFvDPhqwt9K8OeHNL0qyswgt7ays44IoQkQhQIiABdsarGMDhVCjgYrUooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAryfX/il4k0bxf4ysrKXQ9QsPDmjtLbaW8Zt r+61J0t2treOQzP5qyNMEJ8mPDzwIhlbft9Yrnrnx/4Tsdcv/Dupam9jeaZYPqlw15azW8H2WMIZ JUndBFIqeZHvKM2wuA2CawxCvFWny6/o/T1+R62UTUas28P7Zcuq7Lmjd6JtaaXVmr79H5lqPxh8 U23hK8v7HxD4WvLq0u5kstSt9OmnttcVbbzIore3S4LxvJOJ7ZWMkgZ7R1VS0iqvYr8QvN+Id1pU Ov6EPDunaY817JLtSWK4VyG2zefhkUK4cGEKpB/eFg6Jcm+LfgW20IeIrm+1GG1W4a2mjk0a9W6t nVPMYz2xi86FRHtkLyIqhHRs7XUnbm17RZPESeD7lZ2v5LT+0o1ksZvIeNJFXKzlPKLqxQ7A28ZD Yxg1hBe8n7RPbT5Pze/zvY9PGT9xr6i4O09Wv8N3bkXw7u1lHm0UVoeQar+0prS/FTxZ8IvCvwx/ t7WtBmNtZ+VrSRJNKNPs71RdlosWgl+27ISTJ5gtLpgB5W1pY/2hvENz4u8U/D3RPhtd61r+hNcL aZnWwtrh1eEwLK7eZ5MUiXUaxzHd5z2eo7Y0FuBJ6hHq3gLQr3Xpo9W0Kwu1nS811vtEMciy/Z41 WS55BDeRDEAX/gjXsBVr/hK/DiW95dXOsW1pHp4d7s3bfZzAiPJGZHEm0rGWhk2uflYKWUkc122e uvVf8N89T5bS/wAv6Z4JfftLfEzwp4q8SWfib4Y2Oq+H9Ma2j0+60m8kh1Caa9v9TsrCGS1mUoDL c2Vrab1mKhrmOdtkTyLbekeLPiZqegeI/htpZOl2cXi3xJeaRqUN2solWCGwv5lkgMnlEfv7a2Us 0bKwnAXO9HOzY/Ej4Z+JtcvfCkfiPTJdY0ZzcXOm3f7m5tzHLKglMUoVgu63kdXAwUCyKSjoxva7 4p8FpLo/hrXLy1uR4yuZ9IsLcwG4hvZFt555Ym2qyBfJt5yd5CnbtyWYKdKrV20reQqaeibuec/F L9pS0+G3idvDlt4H1PxGU0Y6zv0yUPJMpWSaKGBNv72WW2sNZlQAgZ08ISDcRmuPl/bEez0jQdX1 fwhFaJ4l8i0tmt7+K8sorpr5LJlhvomZLxna4hmjiVI2MFvdu5Ux+WPo241fSrOdLW71O0gmkGUj kmVWb5kXgE5PzSxL9ZEH8Qzz+qav8Oddit73VpdM1G2tRb6hZ3E0Qmt5GLmWFoJCCksge2EihCzq 0aNgHaTm/hav8+w1fmX5dzza0+N/xUu/iL4U8Ir8M9Et7LVNNubrWhcazctfadLFdabHtEUFpLGW EGqQSFd+zcZAZUjh86Xnfi38dfitoXjLx3oPw78V/CyztfCtjZKZPGkU+nw2V5PNp5/fXKXZaaAW 91KzOIIlWSe1jR5mE6p7ZN8VPhtb63pnhu58daHDqmtQvPYWkt7GktwqzJAdqk8t5six7fvFsqAS rAc78Qv2j/hD8Kr3VNP8e6/qemSaRZJqFy//AAj2ozxNC09tb5hligZJ2El7aKyRF3TzlLBQc06l rrpt/XzCF+Xv5nU/DbXda8UfDrwt4m8SadLp+r6votnfX9pNZvaPbzywo8kbQOzNEVZmBRmYqRgk kZro6o6HrNh4j0TT/EOlmc2WqWsV5bG4tpbeUxyKHXfFKqyRthhlHVWU8EAgir1N7iWwUUUUhhRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABXE698J9C8Sa1rO tatqmpSNremjR54F8hY0smZDPACIt7LKI9rF2dow8hhaIuxPbV5h4iPxwt9d8VX2lQaU+nzaPLbe GUgvDJ5V4fLWCS5haBcEyPKzuJWRY40AQEMz4V+SyU4trX8n/wAN6nsZNHEOtL6tWjSlbeTSv7y0 TfXq7dE15O9cfB2xvdLutO1Dxp4kuJdTkZ9UvAbOGfUVePyZElMVuqhXhWCImNUYLbxMhVwztoz/ AA78zxLJ4vi8U6kuqmwl06GZ7azY28ckwkJRhCHyoCoqMzRfIrtG77mbjdUj+K58N6jaaTYeKElW ad9GRbqzN7Fm02wG7lklaN0F0s0hCsxw9sGUx+alb8tz8UV+Kq6xLYWw8BwaTcWqwQ3btdvdeZER M9v5HJJVkQCQqEDuzAsErmi6al8Dvdd/v17db7HrYmnjHTfNiqbXLN2TirKy91W2clZKMdNLK9jm Iv2YfCeq/F3xT8VvG8/9u/2vqX2nTdIuLeB7G1hfTtOtJ1kRot0ryPpsDne7Kogi2BCZfM0rf9mb 4Zp471jx9fw3ep3GtTvcy2F8IJbKOSQ2nnMsflZbzP7O0/IkZwv2VDHsLSF+TufH/wC034n+NXjT wN4B0/whZeEdAvl0yLXNT0SW7Nncf2fpt6BKqalC9x5n2y5TCxxCLy4yXkLFavyaz+1pefELxD4c 0rQfCuj+GF87+xtc1TTmv8HzbR43kSHUInkV0lv4/LCRGI2kbl3EoSvQUVd+q/S36f0j5G/R9maP jD9l/wABeLjem8mu3Gp3Gnm7WcpIogtr6/u5oo8KGUXMeqX9nN8xDW1w8eMF9/X+MfhoPE9/4X1i x8Varpl54P1K51nTk/d3VvNdTW1xbZuVlUyvEqXc4CRyxcNgMNq7fJte8RftaeEvE2valCnhvUfD 91Na2OgaVPo8stwLi7vdQt43a4husmOHdptzcExgLaeYECyRO8novjSX4kJ4i+HuraPb6z/ZVhrt 8/iq3tFtRHJp/wBhvUhd4zI80hFwbN0SEsxBYsm4BV1q8zcuaV/O/l39DOly2XKradv09TN+JH7M /gH4savc6v401HW7o32inQLuCOaGOKa2aK6jlHEW5DI1xbzOUZcy6bYsMeSQ3HeJf2PdL1H/AIRh NF8a6tbXOlX63Gp6s8VjFPfQf2jbajNC9vb2scO6aa0jLSxiFw6K7GUNNHN0/wAVfGv7RWk61d2X wk+G+ma3af2I91ZzX48sSX7JJLFA7G4jCpizmhdiBtk1GxIyiTkeXeK/jb+054Nh8AaB4z0LwbZ+ JPGV1Dp95b20kavdN/aEFvKmm2jaiJxttrxrg3JMojW0Blhi83EWM/hd18u5pTaUk1p5nu2k/BLw dofiLStf0iXUbKPQ7CfTNN060mS2tLW3lbTWMaLEisEB0mDC7tpEsysGVgq5+s/Aez1TxV4q8Z2f xD8Tabqfin7F+9itdJujpn2U27Qi0a6spmRA0EkgjcvGsl3cSqqyOHXndDP7VsHjPwhb+ItX8M3G hW2l3EfiX7B4bKC6uvtFiYmheXUWeMeRNcrk7sG1nYo5lhSOr4+sPjnqPj3xJLpD+LdM8M2ptFs2 tDYXkWpR+dpcsnkIl1bXFttWPUoTu3u/2mWTzCsVvDVzb5kn2Wvl8v61JppcunmezeE/C+i+CPCu jeC/Ddq1tpGgafBpdhA0jSGKCGNY41LsSzYVVGSSTjJNa1c78OG8WP8ADzwu/jywhsfEzaNaHWbW GZpY4LzyU89FdpJCyrJvAYyOSBku33j0VSUgooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKK8w8f/AB98P+AdVlsJPDGv6zZ6fqWn6VrWqaalu9ro9xez QRQRThplmeQi6hk8uGOVgkkZYL5ibnn9pL4JmztNSh8cw3FlfyW0Vrd21ncz28xnhnuEKypGUKrD a3MsjZxCkLtKUAzTSb0QPRXex6ZRXnMX7RPwTnubW1g+IulyG8M3lSIXMIWO1N6XeULsSN7VWuI3 YhZohvjLrzUvh745+APEOj6RrMdxqdmmu6je6ZYwXelXMc7SWt6bKUyxbN0AEoGfNCFQ3zhSGAm6 Hyvc9BorzrSf2hfg9raWUmmeMklj1FrZbZ2srlFkNzNHDbfM0YA85pUaPP8ArI90q7o1ZxkWn7U/ wcv7Xw7f2evTzWvijzZbCaO2d18hI7mRZpduTF5n2O5WKKTbNI0MirGTFIEJPl+IIrm+HU9coryg ftT/AAIc2aQ+OGnk1L7MtjFDpV7LJdvcQQXMccKLCWll8i6gmaNAXjjfe6qoJHW6/wDEGw0GLw3c HRNXu4vE17BZW3lxRwSwtNt2mWCd45htUs7qqM6LHIzKAhwqklTjzT0RphqE8RUVKiryfmu1+vkj qqK4W9+Luh6dqWrWN5o2rpBpmnahqcd4I4WivY7FokulhAk37kkmSP8AeKgYhipKgMZb74nw6Xol lq2o+EdbguLrUxpUmmmWyN1byncQSBcbJcqA4WFpJCGHyZDBc/rFPv8A1/X4a7Hf/Y2O918nxbar X8emz/lfuuz0O1orifF3xb8M+EPFOh+D7uDULrUdbuzaL9ntj5Fu3kTTL5s7bYlZvI2rGX8xjIpC 7csMjR/2k/gx4hge60TxdNfW6K0gmh0m9aORA2yN0fycOk7hkt3Ulbp0kSAysjgbHmWZ6bRXmlz+ 0h8FrVUlk8aq0Mtxa2yXEVhdSwM9xayXiASrGUwtrE9xIc4hiAklKKysZNM/aG+EevWs934a8Tza 6sD3aMmkaXd3rt9mgS4kdViiYtGYpoGjkHyTfaIBGzmaMMPRcz2JTTbS6Ho9FcBqPx2+GOjeEtO8 ba1rtzp+l6npE2vRG50y6WaOyhga4kmlh8vzIlEanl1XcxVFyzqpk8LfGz4e+ONag0Hwhqlzqd1J 532jbYzxLZPFxJFcGRF8udCUDwNiVBLGzIqupLaa39ATT29Tu6K8y8L/AB30nxb4Wt/EeneB/Ftt dX2pLpdho9/Zw2t9eSG3F1uQSSiMR+SJJN7yKCImC5JUNtaN8UNN8Q3WgDRtB1e507xDpttqkWp7 YEgt47iOSSFZVaUS7mERGERgCy5IBJHPHE0pWcXv+v8AX5dz2K+RZhQc1Wp8vLe92tLfPrZpfzNN K7TS7OiuE8NfGHw94g0LW/EN7o2vaDbaE2ZotUsClxcREHZNBDGXkljkIZYyqkyMpVQzDFVdX/aD +EmgiE614nnsvPnhtVE+lXiFZJLeW52uDF8hjggmlm3Y+zohM3litaU1VSdPW5wYzC1sJVdHEx5Z Lf56/qei0V5fp/7TXwL1KK3uIfiDaxQXMk0az3VrcW0SGK0+2uZHljVY1+zhpAzlVYRyAElGAqal +1L8INF1i70PW7zxLp11a2lhdIl14U1SOS6N40oght4jb+bNP+4mLRIhdRFNkfuJvLqHvrmhqjnk uV8stGet0UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBxur/AAe+GuveIn8V6t4V t59TkurW/eXzZVRrq2khkguTGGCeeptrdfN27zHDHGzGNQoxNP8A2bfgxpOnPoum+EprfTGsDpq6 emrXotIoDbzWxWODzvLjJiuLgFkUMWmkckuxY+km4txOLYzx+cV3CPcNxHrjripKak07p/09xSSk rS2/y2+48f8ACv7Kfwa8LR3oh8P3Fy2o+bHdB7+4WKa3ktoLUWzxrIFkt0itoViik3rCVzEEwMdH a/BHwBY2ugabZWuqRWPh29udStoP7YvGM1zPci6lluZWlMlxum3SMsrOrMxLA4GO9ppkQOIy6h2B YLnkgYycfiPzFKXvK0hrTVHCah8C/hXq2nyaRqfhb7Vp0vh7/hFnsZb65a2NhsaPZ5Jk2eZ5bsnn 484KxXfg4qt4k/Z4+Dfi67W91/wTDcSgXOdt3cRI5uDdF3dEkVXcG/vTG7AtEbmUxlCxNejUmR6i h+87sI+6rR0RwsHwR+G1tpc+j2+j30dreatFrl6q6ze7r+7jgjtw90/nbrgNHDGHSUukhXc6sxLH oZfBvhqS40i5j0xbZ9BiNvpy2kj26W8RMZMQSMqpj/cxfIQV+QcVs5paU0p/HqXSqTpS56bae11p o1Z/em16HKL8LvAwa6abRWuWvbX7FcNdXk9wZYSqK6MZHbIlEUXm/wDPby1Mu8qMSW/w48J2kcEd tb6jGLclkK6tdg7i0js5Pm5Z3aZ2dzlnO3cW2Jt6bIzjPNAZWUOrAqRkEHis1QpLaK+463mmOa5X Wlb/ABP079tDk9Y+FXgTX/Flp421bRpZ9VsXWWFvt1wlv5qqyLK1sriF5QjsgkZC4XC7sAAYFv8A s4/B+1eSaDw5frc3CgXV5/buoG6u2Vi8UlxOZ/MnlhZmaCSRme3JzC0Zr0ouoYIWG4gkDPJAxn+Y /OnVpZHFdnCXHwN+Fdzodv4ak8JRLpdpaTWMNrFdTxokM1s1pIoCuOsDsgPVQxKkE5o8O/BH4beE biwn8M6PfaammGYWltb6zerawxyqqmBbfzvK+zqFBjg2+VCcmNEJJPd00ugcRl1DsCwXPJAxk4/E fmKpybSi3otiFFJtpavc4Lxl8Cfhf4/0Sy8OeJ9CvJtMsdObSUtrbWL2zSW0ZAhhmEEyeem0YxJu wGfH32za8M/Br4b+DvE154v8M+HTp+p6hcXd7dvFe3HlT3F1L5txO8JkMZmdtoMhXfsjjjBCRoq9 pS0OTas35/MdkchD8J/BEGnf2VDZaisG8yZGs3vm7yIgH8zzd+9VgjRWzlEDIpVXZTPD8M/BNvdW l7baMYZrCBra0aK6mQW0ZEoVYwHwgRZ5kj248pZXWPYrEV0+RnGRkc4oLKM5YDHXmsVQpJ3UVf0R 6Es1x8k1KvNp3+0+u/Xr1Ocb4eeEn0nU9FksLh7bV3Elyz39w0yspBj8mYv5kHlsA0XlMnlMA0e0 81hXHwF+Ft7a31lqGg3t7DqNuba4W71m+nyptJrJypeYlHeC4mEjrhpGfzHLSAOO/LqM5YcHB57/ AOSKXIzjIz1xWkEofBocdapOs+as3J+eu3qebJ+zl8GIoLa1g8FrBBbab/Y/kw391HHNZ/Z4bZYZ 1WQCdFit4QokDbGQOuHyxtan8CfhlrNk1hq2k6neRTW1tZXRn17UHkvYIGumjiupDPuuI8311vSU usnm4cMFUD0CiqjJxVouyM5JSfNLVhRRRSGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QB8ufHL9mHxP8S9W+Jj23gX4b6/b+N9LEOnXmvzRRz6ddCzjtI5Co0qeYmHEs0brdL8zBBGmWkPX /DX4OeLfCXjm71S18I+C/A+j3FkFd/CeqTM8z+RaRR2z2TWcNsY4Bbukc7b5QgCosKSSR17pXm3i b4qQ6HdeK9OTxH4ZS70i4sbWGOaYeZYfaI/Mea7j81S0ccSzXJAMeYYJPmUKzjKdWNGN5ba/jq/y O7B4Cvjqjp0Fdqz/ABUE9P8AEr3OCuvhD+0Hrur6zqcfxYu/C8P2XWF0NLbV5r8xX0ktqbC8uIpI UjaJY4p0e0+aNA25Wd5WdMjTf2cfieJJvFGt6rpmp+JIdN8PWlj/AGtr9xqax/2fr9xqc8T3L2kb MrwixjSYwtKrwksSy+bJ2Vt8bdZvLXwzJFq3hhZr7UpbC4TyJpDqypexQrLZhZf3IktZVvl3mUCG WNstGGmrsvAfxHtPF+teLtOGqaNcR6Nro0zTTY3Ac3MX2G1uSSdxDOHnmU7cABMYypJzhjacpRS3 6fd/Wj/XXuxXDuOwlKdWrH3Y3vv0modV1k1a2+vVNLN+Cnw8+IXgKxv4/iT8RpfGmqXHlRHVXNxF 9pWPftf7I0rwWpCukRWFd0nkedLJI8pWNurfCybWPFMHiC50rSQ1rrj6nbSC8l3W4Isx5ojEYDyt 9kbKk7V8zOWxXm+g/tnaf41ML+EfAmoXVjHc+G1vtVtrq0vrSOPV7+WzQwtHMouAkkEkEjxM/lTF htkEMgrR0z9rKHxdBplz4L8Fz3ljdX2hw3mqQ6jY3tnaRaleyWkbB4bjbPtlha3kMLyeVMW4kWJ8 9d3Tevb/AIJ8rj8soZjTjDEK8U07WW6tbddLrbbfdHdWHw61nTdFuNLsdO0G1F54gtdbeG2kaKC3 EElq2yNVhAO8WznoNpcAlzlza07wr400/wANjRZ49H1GaK+ivVluLtkErxzQyl222/DSMs0hzvKM Vwz5yuJY/HTUpvE2heCLzwBejWNXhF/JPbSSzadDZrctazSi4EIZ5I5TbKYtgOLuJyRGs0kW/oPx GttR+LHi34fXHifwrMNEh037NY2t4DqUE9xFczPFdRlzhjHbiWMBVJj3NyBkLe6fT/hjip5Hhqdp UnJXi4q1rWd5PS1ureq66dBk/gPWrzXdQ1nGlWE2pw+TcXVu0jXhjkFussQl2qQEWGTy2/vOh2rs O+m/woluovEodNP02XV7nzom08IkU6xmYwLPH5IwVMiyFgWdnH3giqg890/9trwRduLS/wDCGuaL fDWbLQ3h1lotPj+0Tw3MjIs87JFvSSwvbcKzL5kkShSRKjHnNS/bosor3wFpGheE59X1PxBaHVdW ske2juo7MaF/apYQ/amNux82EIJC+8Wt4qg7YnkUKmnu+v3W/Lc0nw5g6kpSqRbd3fXrJSv96bWl r7O56t8TPCPxc8XQ2useEpdK0XVLOC9082zaxLD9qtn1OwkAF3HbO9uZ7KznVnRC8L3ACMxQSjEt Phj+0APh58QvDepfE6OfxXrGlXNtoXiiDUpoRNdPDOkEslj5Bj04Q77Zf9FZzKYmlYB2Kn0fw14y 1bVdUk03VtHtLXMuoeTLbTzzq0VtNFGrM3kLGjMJc7C+75fkEgDmP5+8BftL/EvxZ4k8IEeOPhLq mga9qhtFt9Kj8zW9ViZ48G2s01KX7O0MUsdzOHMxS1ZZnWNy9vGoNX0+1Z/1939M9hvT/CbXij4I ftGQeJPEEvgv4u3194fu7Z49LtNU8UXNpLGj7CLZ3jtJZFMMpmnS8STznjYWsiMoS4ityfBj456x 8QdH8e6h4tstKutIv75i9t4gurz7VZ3OqaRceR5b2sccMYsrC4tvKQFS/lSszO8jj6Koqk9/P+tO wr6prp/Wp88+NvgR8UPEXjW+utN8SaemhX3iXRPEFzPd6nO0t1FZ3OmvLbmxWAQRSbbFnju0fzQw jTCAtINDwf8ABX4l+F/EPhu0h8Yzf8Izofh+2s5Fu/FGq3zyXcd/FcSbYN0W4PEJY/NmnmwBCiwL Es0c/u1FZwgoWcfP8XcqU3L4vL8FY+N/iP4R+Oa/F3xn4l+HPwH17R72+R7Ww8eaQvh+41K9VpNO fdIk+q27NDENNMcccuVkS4UPGghdLjy2++Dnx7v9Z0rxPqX7Hmua9caQLmXVNO1/xD4e1CPxubtF 2W+tXMl+Xli011T7I8iXDOsEeVtmG4fo1RVRik7r+un9dQc21b+v61Z8F+GfAX7TsGraNoCfAPxj puj3HxC0rXNX1C78V6MFmgtTocR1G7SC+d553j0u9aS2w6B70SB5ZIUJ+k/iH4Q+OHjXTNJ1Pwf4 g0/wXq1zb2f9pwC8Mxs38m78wJKsJ88QXE9nOqYjS5+yNFIUjmfPsNFOfvzU5bryXa36ii7RcFs/ 6/Q8K1P4dfHG+1+Jf7Tt/wCxLnXr2bUNnjvUreY2c0sCpLEsdoCjrafaYUtUlSKNykwleYiWPD+G /wCz78afD+j2/gnxN8XtTt/DlvoVtpXm6VrtzLf7/sEMUrQyzxZgMd2t5LG+52kS9VSIls4EH0jR TbfLydP6/r8NiUknzdTwv4wfC345eLPERvPAHxEm02xj0ZLZTN4gnszLMbrfPEsFtbBYmlti0QvG ed4CEaGBHDSPv/Bv4TeI/AFxrur+I/Et9qWpa/qNpf3T3Ot3eoBvL0u2tpMB/KiR2uUnkzHCqMhj GxNsaxeq0Unrby/r9R9/67f5BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABXyvqHiy70T406l4ivf2 gPhdp9mt3Bpmp6bP41hhvnhtr27lXeGgxA8aXBgNthg4MhaVJAslfVFcRqHwO+Cmr39zquq/B/wR e3t7M9xc3Nx4ftJJZpHJZnd2jJZiSSSTkkkmvWyrGYfDuosRFtSVtEn18/6vrukROLdrHhvwy8Y+ HvDPhqz8JeLf2kvhhcWuj22jW+my6b42jiRY7VIFmRocKedkwDeaRIChaOMgmuw+F3x+8D6TbaT4 O+Ivxp8I6v4l1ViIbzTtbjvbGeREiV1WdYY1hdnJcQyFiPNCozLtRO6/4Z9+Av8A0RHwD/4TVl/8 brlfFH7H37P/AIt8RaRrmoeANOtLXRlk8vSdMt47GxuJHKkyTpCqmRhsUAFtpGQwYcD2J5hk2JlN YlTSlrdKF7paW9Xa+yfkZezqJ8yPaa55/H/hCLXNR8O3GtR297pVq97d+fG8USQoEaRhMyiNtgli L7WJQSpuxuGdjTtO0/SLC20rSbG3srKziWC2treJY4oY1GFREUAKoAAAAwAK5DWvhNpOv32sT6j4 i1xrLWbSaxl01ZoRaxQzmH7SsY8reDKIArEsxUSSGMxls18ZXdRfwdfX+v8AP9V7GXQwU5yWOk4x tpbvdeTvp009ejtS/FXwRb6EniK71G9trRrg2rpcaVdw3Nu6rvbz7dohLCqpiQvIiqIyHJCEMbf/ AAk/gy48aroHmxS6/ZwPAsv2N2WHzFjme2Fzt8tZWRIpjBv8wxqkhTaA1YFz8HLO80u+0+78b+JJ J9XkdtVvlFlHcagrxCCRJNlsqKGhjt4yY1RgLeMqVbez2/8AhVtrD4kvPFFn4m1VLq8um1AwyJbv BHeGEWv2pB5QbzVtVFuoLGLADNG77nbFSxDavFW0/wCD19LfqejVoZLGEnCpJySlb/Fpy7wXu/Fd 6N6O0dUdZZJpun2iabYtDFBp8awCJX4hVVG1T6fLjr2xUkN5BPG8ql0VHdG81GjI2sVJwwBxlTg9 CMEEgg14hH+yp4U1/wCM3i/4sfEQQa9Dq+pCbStFuLe2nsEt207S7aY3Eb2+95Wm02NgGkdFEMJQ IzSA6sf7LPwvk+IGsfEHV47zWZdamkuJ9L1KK1nsFkkayaRhGYdzZOmWRAkdwhhygUsxbru76/13 PnvQ9B0q78I3vifUrywkjGvCzhtr5JQ8VwttHPdLCTE+CIzILso4GJACwLLtNQ+LPE3gzQ5tCu/E cTXEsupLDpksGmTXzW1w4aDziYo3+zoFmaN532RoJdruofB878ZfsseBPFTXsjSTtJq1zY/bnutk m21hvb+5uIosKrD7TDqt/ZSHdj7POVA4IfsfGvwo0/xveeGrq98T61aJ4Z1X+14baNbS4guphIJE 85LmCUZjYZjdNkkfVHU4Iqain+7ehEXJr31rY53Qf2qfgr4nl8Mw6HrHiK5fxjcy22ij/hD9ZT7V 5f2XfN81qNlsPt1r/pD7Yf3n3/lbb6Pb+HtEtNevPEkVr/xM76NIZZ5JXdhGvREDEiNTjJVAoYjJ yea8w079mbw9p7aO3/Cba9KNHnjaMDS9Eg328ZsWSzHk6ehhtwdOgO2Dyi38TNsi8uPxh+y74R+J uueCvGfxL8QazqXifwjBZGW80yb+zrbUrq2LMs8luu7b8011tUP8i3UqgnOazvJLTc1UYv4n/X4H r6XtvJdSWil98caSFjGwjIYsoAfG0tlGyoJI4yBuGc618Y+F7vRrDxAmuWsWn6naC/tZrh/I3w+W JS5D7SoCHccgFR1xXzzf/sTaNpvhTT/CXhnxdreqQslnpF9c65Np3mJpcNvqFu6BV01hNI8Wp3Eb EmKVlbC3EYBD+q6R8APAPh/w3beGdAW80uG2SYi4sfJt7h55bRrWW5LpGP37q3mNIACZAG9QafSx PdP+u5teM/i14G8AXbWXiq+1G2kFlJfK0OjXt1HIqAs0cbwxOr3G1XcW6kzMiOyoVViNnwn4p0nx r4dsfFWhLfjT9Rj823+36bc2E5XJGWguEjlTOMjcoyCCMggnjPGfwP07xr4yuvGd341121ludEbQ vsK2elXdpDEzM7PEt3ZzMjs/ku4DbJDbQb0YRgV1HgDwRpnw78LweFtKvLy8RLi6vri7vGQz3d1c 3ElzczyeWqRhpJppZCsaIi78IqqAoelv68/+B/Wy6/1/X9ff0VFFFIYUVx3xc8aXPw/8BX3ia0ud OtJUuLSzW91MMbOw+0XMVubq4CspaGETGZ13xhljIMkYO9fB779q3x/4Qh8QW7+CrbxjBZpDquj6 5cSv4bsLmwuHmtoBPNOkkcUkl5bTCJyViktiku8MY1nOjfb/AIH+YdbH1TRXh3/C6PjDrHwq8Z+P vDPwd0sX2j2ci+H7C816YSapfwTT293bSR/ZFeIpNARD1Fx5keWg3EpyN1+1Z8StC8SW+na78ItJ +wNepaajKniG4FxbSJqUel3SWVuLAverHJNZzo7fZ/MTUYFABVyqk+RNy0Q4rmso6tn0/RXhGk/t H+I9V+Gei+M28CeG7PVfFPiN9A0K2n8ZRtpU4CyyRzS6hHbuVMiwSIsUUM7+e0cTBSZGj83vv27P GdzpkuqeD/gJBqse+4ubcXXiWa18+zGlT6nbkFbCQNdutjqVtLAm+OC5sniaZicikm2kluJNNN30 R9f0V8uj9teSe3k1TS/AWj6ppokuNQt5rTxOQ99pEUTzGa2821jilvFijZpbcS+VASqSXKyMEq/q /wC0v8TfDkl1f+Jvht4Z/sG30W21mHU/DXiWfWIr0kX13NDBJLZW0Tf6BplxIHZkAea1X5lm3olq rrXoD0dnufSdFfO3w3/at1nxVq2r2/jb4aW3hvStC0XVtUu9TtNZm1CO4bT5LZma0Bs4vPtZbS/s rmOclC/nFFjOxnHG6d+3D49bxFYeEPEXwK0jSNY1TU7aws4n8ZSSQyZ1ubRLqPzPsA3XUNxEsvlR h0e382XzV8sK47q+j08mNLbXfzPruivm3xL+1H4vl+FnhL4qeBvAGnyHxRcvfaT4d1rV3stR13TF sHkAtwLeTbdyXTQLDCFk82No2LR+Ywi6Dwb+0J4y+IHgHVvF/hn4XacNQbxFDonhvSr7xOsT6hG4 hd5bxkt5GsZoY5J3mtiksiG1kHzZUkejs/62/wAxLVXX9b/5HuVFfJN/+3H4t0rUbyx1D4DxKLPU RZZt/FSXMs4gmjh1JY4o7Zm+0wGXz0t3CPJawzzyG3CKj9nYftMeLNf1JJPCvw70nWtF+xPqX2+w 1+W4S6tbWWWDVHtljs2eea3njhSKJFIulu4nV4+VBL3b36f18/kC1tbqfQdFfL/hL9qrx58RfFHg 7wNZeBvDvh2/8SajHcS3UfihdWQ6Yj3cpltlitgs3mR6ZdQyFmjW2e6tRukkZ4o/qCqlFx3EpJ7B RRRUjCiiigAooooAKKKKACvL/Fd58WbPxT4gk8KteXGnNoF0mmxXlrAbaLVmFotntaNfNeBma4Ll j+7KSlyEMRHqFcPqXxk8DaVrfiTRLrUSZPCeky6vqkkbJIIY4kWSVBGrGQuiSROfk24lUAltwGFd RaScuX09H+h7GSqv7aUqFBVrLVOPNo2lf1vZJrv1V0+a1m6+K/8Awj+qQaRJ4ikuEmuW0eSO1s1v HH2PFuLoyr5Ww3azfcAYA23mYjMpPTSax4pHxAW7VdUj8LQWFxDcwy2KbXuA8PlTQsoMrA5nj2EA kruAKMjGve/F60sdH1HUZvB+vm70WWZNV01Ta+fZJFbx3LyMxnETr5U0BHlu5zMox8r7NRPiX4Um +I5+FtvfCbW4tOfUrhUZdluA0YWNjnPmssokCAEhAGbaHTdzr2al71R3vHTb0Xz6o9SusZKnphIa Rm7pJ+7aN5u3a6cZaL3tL3PLbr4jftEeIPi3408C+AtH8KpoOiX50q31jUdLuJV0+caZpt7H9p2X aG4EzX1woESx+ULZdxYyrV9/Ev7T134z8SeGtK8K6Bp+kxm5TRNa1a1a5jDb7Z4JJVhuIzJE4nvI vLUI8X9nh3dvtMYHT+IP2hvhD4W1rXvDuueKJ7fU/DYY39sulXkrnbbw3LiHZEftBSG5tmcQ7ynn xBsM6grfftBfCnSptds9V8Rtb3vhxLiXULOO1lup1WF1V9iQLIZXCy20hiTdKiXdsXRPPjDd199e q/r5/r6HyfVej/r+v8zzXxB4u/av8HeKde1JbXQda8PXEtpY6Fpdxo7rcrcXl7qNtCTdQTEPHC39 mTTsYgVs2dgPNhdp/S/FWofEGDV/AmrWj39nplrrt8PFcEdtb+VJpq2N8IpXG6VwPtC2LKI5A5Dn eo+ZUxF/as+ENt4q1vwh4ivNZ8PXegwz3Fzc6ppE8dhJHEL92eK8VWgceVpl3MMPnbG648yKaOPu Na+IOmaLq/hDSJtL1SQ+MtVn0e0mEAiW3mis7q7JmWQrIFZLKYKVVskr0B3VrU5rv3bP+v8Ah/8A hiadrKzuvzOB+KXxB+PeieJpNL+FvwvtvEFh/Y7XcFxdI0QlvGWSaK3LmVAi7LG6hdmA2S6hpxwV 87Hn3iX43ftFeDbPwhp/jHQPDEWseJ7iDTphZ7kW6lbUre0YWFrLMlyhaC9NyZZTIsQs9rIDOCPc /F/xk+GXgLVP7G8YeLbXSrsWUuosk6SYS2jltYpJmYKVVFe9tgWJAAdm+7G5XnrD9pz4N6tpun6v pXikXNprEMcumuIJFe5ZpzblDCR50JScwwu0yRqklxChbc4WspL3X2Kj8S7mDp17+1Mvjrwjb6rd +HW0OLTLhfEkVp4cdhNci6sNhhnkv024t7m4AbB5tLh/KkMkUMTfHi/Hi58aeJ5vDHivXfDnh6yW 1jsXbQrPWY7lmk0+SaWCCMRzpGkcd5DtaSWR3u53ARbeAP0dj+0l8NNU8UeGPCemJ4nvrnxbp8up adc2nhjUZ7MxR3ENuWedISiKWnjbzCfLEbJIzqk0LSVPiF+0bpfw88R614Zn+GXjrxBdaLp9vqT/ APCOWVrqTzRzXFvbxqsEVwZ42Z7iQqJY4/MWyu2TeITmp/Em9Nv6+YoJ8mmv9fod58O7jxbd/D/w zdePtPSw8TzaPaSa1apIjrb3phQzxhkZlYLJvGVYg44JHNdDWP4O8T6d438I6J4z0gOLDX9Ot9Ut Q5UsIpo1kTJUspOGH3SR6Ejmtih76gtgooopDOV+KOo+LtL8B6rP4CS3PiSZI7PSmubaS4hjuZpE hjklRPmMatIGY9AqkkgA1523x98TaP8ADjxP8QvFvgNtMtPDd4kUskltqqKtsCGuLiSM2PnERQky MYUmh35iExEbzD26snxD4S8KeLo7KHxX4Z0nWo9MvY9Rsl1GyjuRbXMYISeMODslXc2HGGG44PNL UDwvwR8cPjr8SkTS7n4P3fw41ZPEVlpky6zZXl5E0MZupb2RJlhSFoHSyaOGXeG3TxlkQSQPNL4j +PPxe8MfEzxB4YtPg5qmvaCs/wBp03VPst7bwwWv2aSH53jtZd23ULR/MxmUW97BNFFMqtX0LRTD 0PHPEvxm+I2k2ludC+C+t6wYtHm8Q3F48UltFeWkCwPJDZ2wWS5GoSC4CR2lzHbkuko3kR5bjrH9 p/4rXenWt5cfs+65ZSskH26Cex1UyWjS3EcLMAtiUljgNxAzGNyZUju3jGyBTL9KUUra3HdWseBf DX4nfEbST4ki8R/CbWR4d0020uj2ujac0X9mWMcUtpJHHbzQ28ksYn024nSOMTTmK9tSseJFjjwP CvxU/aF1bwto1vdaHdwa9pA0y21LU7vw7fR2GvxyGJ726itmtIp4pYxZ6nGI/kHzwuI3Fzb7fpyi nr11/ryt+gadNP687nzZP8e/jzL8LtF+IEfwcntdV1XxDdWw8O/2dqM1wlnDZXBRZHS3dkM19BGi XDxRxm3mjkZY2JCu1T4++O/E/h7V7Sb9nrUr2xubC+kfSNS03Ut+oW6WsE5smQ2Rj8+WG5ZCHPl/ aIZbYNJjzj9I0UnG7Xbr934fl5b3L6f1/X6/geS/AHXPih4nsb3VviKb3TzY2lroZ0a905IJ4b62 a4NzdtMsaJN58c1oD5O63V4HELSIfMf1qiiqlK7uSlZWKd7pGlalc6feajptrdXGlXBvLCWaFXe1 mMUkJkiJGUcxTTR7hg7ZHXoxBuUUUhhRRRQAUUUUAFFFFABWH4m8YaR4T+xDU1uHa+mESLBHvKLk BpH5G2Ndy5PqygAkgHcrw7x78BPib4/v7n+1fjzHNo/9ovqGn6VfeB9Iv4rA5bywjTRMSyI5QOfm Izk8mu7AUMPVq2xNVQiu/M7+nLGX429SZNpaK5u6X8eLbXLzULHSvCOoPLY63p+mnzpEiC212lk6 XUueUyt422IBnJiw3lknZ6pXzVYfsk+MdLksptM+M+j2cmmXb39k0Hwz0CM21w4QPNGRANkjCKIF hgny1yflGMjxv8DP2tL/AOIvha/8LftDXTw2cUzajrlzYW1pHFGXjCwfYoBsumx5rqJFCjkF1OM+ 3UyzK69RQw2KhBWbbaqdF5wtq1011sk7a5KdRO7Xbt/mfVlZ2reH9I1xSmqWYmVk8phvZd8ZdHaN tpG5GMahkOVZcqwKkg2rGK7gsbeG/u1urmOJVmnWPyxK4ADMEyduTk4ycZryXW/hV4ufx54y8WeF F0bSZ/E+kT6emr+erX6TSRWMMUqlbVZIkgFvPIIxO4kcoSVyvlfIYibgvdjzdP6/4P8AwD28pw8K 1aXPX9i4q6k+90rXumtG3dXem1rtdvP8L/A13py6Ve6Ibu0WQymO5uppvMZlkRy5ZyX3pLJG4bIe M7GyoCjVuPDWl3BEjfalnWOaFblbqTz0jmkWSRFkLblBKIBgjaFAXaAMeS3nwj8Yz+Dbrw7Y+HPC enxXF3Jc2GkW+qzpYaE7weUstqyWqF3jlj+1KDHH+9upCGVokkbeTwF4gtfine/EaHwzofmTBk+0 i6ilvLiMQpCkWWtEeBCQJWPny48sqqt5mF5oTaklGlZO2u3R+XRpdu/ketisLGUJOpjublU3ZtPX TT43rK7TautNHJO5s6T8GvAuk/EHWvieLCa78Ra1fi/+1XMxcWTfY7WzdLZeBGjx2UBfqXZFLEiO MJesPhb8P9L8U3njWw8L2kOt38hlnvF3bmdvKDsBnCs4t7cOVALi3gDbhFHt8qXQv2l/Fvxu8aQx fEK88KfDax1BbSwa3gs2v5g2naZKHtFuNOkQxLP9tRpGll3NNIoWMwgnSh8B/tH3PxC1wT/FKy0X wLdSTy6cmkRWj38BeSzkX5J9PZAwMeoB2aSXeLtMKjRh677a/wBff8j5X/L+kdxrfwb+Hev+d9u8 Pxr9pu9OvLjynZRO9hfvqNsGGcbVupZZCBjdvYNlTitLWfh/4X1kaczWLWU+j3Nxf6bNYuYDZ3U8 csclwiL8hlK3E/Lq2fNfIO5s+Q6/8Pv2h9G1fWNZ8JfEmWJdYns7Ox060t7WS1sxNqGpfa7topbc KGhtr21ugQ+6aey8tyyMqt2HxF8IeOtV8S/DfxRounWOop4K1++1jUYZNXkhnngksL20jjt4zF5U kx+1qwMrxBPLKh8SMw0qrdc1/wDhvvIpS20tobviP4M/DHxfqp1vxT4RtNWvHs00+SS8eSUSwJBf W4jkUttdfK1S/Q7gd3nknJVSuB4q/Zs+GHi1NGjvrPUITo15DeLKl40txd+XdwXgiuJ5t8ssTTWs LMhfDFVP3o42Sl8VfD37S2t6hfN8J/HOg+H7SbQ5ILRb1ElaDUXjmdZW3Wsm6OOWCzjxn5o728Yg PBAG8x8X6d+11o7eDdEm13TdZv8AxDcLp+viyszPHLANQgaV5LkaWsENutlLegRSNDJ8yrHLcyxk y5T0i3a/l3NIK8ktvPsfRb/DvwTLrUXiGfw5aTX9urpFJKC6xh2tHbajEqDv0+zcEDKtArDBJJqX /wAKfA+oX+t6pJp15bXniKWO41K4sdUu7SSaWNII0kDQyqUkCWsCb02ttj2k4JB4zRvht8Y9N8Ve Fru9+Kd7qWi6BpVxYXkM08ELanI02myRzTRQ2kce5Uh1BPl24BiAwJZq4v4qfs++NfiP8QfGGta3 4Q8Ja14f1K20+1023m8SS2z30EFzp100GoQS6bdJtE1rdFDHIUCSsqxRyXM9wanpLV32/r5EQ+HR W8j6K0jSNK0DSbLQdC02107TdNt47Szs7WFYobaGNQqRxooAVFUBQoAAAAFW65n4ZeHdV8H/AA28 J+Eten0+bU9E0Oy069k061jtrR5ooEjcwwxoiRxllJVFRVVcAKoGB01JlIKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoork9X+J/hLRDfi9m1BzpmswaDci10y5umS 7mhhnjXbEjHaUuIfmxt3OFznitKVGpVfLTi2/LXy/NibS3OsorzTwz+0Z8IfGeraTpHhbxQ+ovrd 3cWFjPHZTrBLPDGZHQSMgB+RWIYZU7SM5wCiftF/CuXV9U8PWurahearpGonS57Cy0q5u7kyqbgN tjhR2Kj7Hc5OOBGD0kjL9TyvHJuLoyTSu/deiva+3dNC5o9z0yiuB8G/HL4a+PoNbu/DOvi6t/D9 0tpeyiM4R2kaJcAZPLI2MgEjDYwwJXUvjx8HdHt9Vm1T4j6BaS6L9o+2Wtxfxw3MfkTNBJ+5chyP NQopAwzEBScjMPL8WqjpOlLmW6s767BGUZK8Xc72iuBvvj78EdN1YaHqPxY8KW15ifekuqwosLQM iyxyuW2xyKZV/duQ5+YgEI2O4tLu1v7WG+sbmK5trmNZYZonDpIjDKsrDgggggjgg1nVw1aklKrB xT2umr+g009iaiiisBhRRRQAUUVDd3MdnazXkqSukEbSssUTSuQBkhUUFmPHAAJJ4AoSvogJqK8i 0v8Aao+D+tNfHTNT1SePTtOXV7grpU5mW0ZI5BP9m2/aPJ2TRt5vl+XhvvdK2tO+PPw41Wy8W39n qd15fgize+1uOS0dJ7WNUd2DwsBIj4jf5HVWO04Bwa755VjofHRktuj62t+a+8nnj3PQ6K4d/jd8 J4dJ/tq+8eaTp9ujrHOuoziymtS0rQgTwzbJIT5iOpEirgqc9Km0H4v/AA58R6q2gWPiuwj1X+0b zSo7C5mWG4nuLSR451iRiDJt2FjtzhWVjgMKyeBxSTk6crLfR6W1f3IOZdzsqKhvbpLGznvZY5pE t4mlZIYmlkYKCSFRQWZuOFAJJ4FcJp/x7+FOpweHJ7fxbaxnxVenT9Ohuj9mnMog+0APFJtdAY2h KlgM/aIMf61MxSwteqnKlByS3sr9G/yTfyG2lueg0VxHi74z/DnwRpOl+INd19m0rWVkeyv7G0mv baUJGZDiSFXUkoGZVB3MFcqCEcrzt5+1H8G9N0zU9Z1LXNQtLLRpXtNQnn0i6VLa6SZIZLZm8vHn q8iZQZ+U7hlQSN6WWY2qlKnRk03ZWi9Xe1l5309ROcVo2es0VHBNHcwx3ELFo5VDqSCMgjI4PIqS uEoKKKKACiiigAooooAKKKKACivN4f2h/hFcanqGlx+KiG0m8m0++nks547e3nhuILeRGldAvyyX MQLAlQDuJC4J2/BPxY+HPxEYxeD/ABjpOpXGLiRbaC8jed4Ybh7Zp1jDFjCZEIWQDawKkHkV11Mv xdODqVKUkl1aYlJPqdbRXG6R8XPA+t6vomhWV7fJe+I7Sa902K50y5tzNHCzLJnzI12spU7kbDLl NwG9N3ZVjVo1KTtVi0/NW62/NNAmnsFFFFZDCiiigArhdY+C3gPXNfvfEl6viCO81G8g1C5Sz8Ta laW8lxDHHHHKYIZ0i3hYIRnbz5a56V3VFbUcRWotyoycW9NG1p8vQTSe5yHg/wCFHgfwJqF3rHh/ Tbw6hfhVuL2/1O61C4kVRhQZbiSR8AcAZ4FY13+zx8Jby51S9l8P3yXOs3cl5eTQ63fRSO0jTNIi sswKQu1zOWhXEbGQkqeK9IorVY/FqbqKrK7td8zu7bX16dA5Va1jnofh/wCEbfwneeB7fSBDot+b kzW0U0keDcSvLKUdWDxnfK7KVIKcbduBjhLn9lj4N31/cX+o6JqVy01tJaru1q9R4hKc3DiRJQ5k nJPmyMS8gZgzFWIr1yinSzDF0W3Sqyi3q7Nq77+vmLkj2PMLv9mr4K3+nahpN74Oeez1QSrcwyan dspWRrRmVMy/u1B06y2qmAggUKFBIPo+n2NvpdhbaZZiQQWkKQReZK0r7VAUbnYlmOAMliSepJNW KKzrYvEVoqFao5JbJtu33jUUndIKKKK5xhRRRQAVDeWsV9aT2U7TLHcRtE7QzPDIAwwSroQyNzwy kEHkEGpqKabTugPO/D3wB+F/hfTNT0TRtK1RNM1jTW0m+sp9ev7mCa3aJIduyWZgCIo0iVhhlRQq kDiunu/BHhi+8Oaz4Su9N8zSfEC3aajb+dIPOFzv88bwwZd3mP8AdIxnjGBW7RXRUxuJqS56lSTd 73bbd+/qJRS0SPMpf2cfhPNdPqEmma2b2aEQzXa+JdSW4mAlaYM8guAzOGZgHJ3BTszsG2tLQvgf 8LvDWqpreheF1tL2O7ub5JFu52CS3EqSzMqs5A3PEnAGABgAAkHu6KuWY4yS5ZVZNf4n6dxcsexi yeDPC5ttYtbbRLax/t8s+pTaeDZ3Fy5GPMaaLbJ5gHSQMGBwQQRXn+q/sufB/UbCW1g0W9s5/wCy ZdItp01O5kFsklh/ZxkSJ5GiMv2ZUjLshLeWhbJUEetUUqGPxVBt0ako33s3r699NBuKe6OJ134M /DfxHaaNYan4fcWugadNpFhBaX1xaRR2cyRpLAyQyIrxMsMQKOGGFHFZR/Zy+ERt5rZdA1GNbnc0 zR69qCSSytKJXuGcThmuGdV3Tk+a6jazFflr0uinHMcZCKjGrJJf3n3v37u/qLkj2K+n2FnpVhba Xp1usFpZwpbwRL92NFAVVHsAAKsUUVyNtu7KCiiikAUUUUAFFFFABRRRQB5vf/s7fCLV7vUb/W/D V1qtxq0H2W7k1HV726LweaswhHmTNtiEiBljXCrlgAAzA2/AfwM+GPwz1+/8UeDNAubLVdViaLUL qXVLu5e83SmUvN50r+ZJvZj5jZfBIzg4rvaK7ZZljJU3RlWk4vdczs/VXt0J5I3vbU4/Q/hP4J8O 3uk6hp1tqjTaHFJFY/a9bvrtIvMaVmcpNM6tL+/mUSMC4VygYLgV2FFFc9WtVqy5qsnJ+bv5/mNJ LYKKKKyGf//ZCmVuZHN0cmVhbQplbmRvYmoKMzMgMCBvYmoKMjg3MDEKZW5kb2JqCjM2IDAgb2Jq Cjw8IC9MZW5ndGggMzcgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZ1VS27b MBDd8xRvKQG1LFKybG+bJkAKFGgaA1kkXTAy5ajRzyLTIAfqtXqWDim5/iZ2Yi1MWPTM4/sMl7jC EiE9PBQxxskErcINKgzPNEeqwaHTvQ0ZwiAJ3Qe53SqY28pf2267xGIKLhKMEo5oIjYaCdvIggip GdssvaSC9ucBd38fhROkJT7PEPMgjLtX3TKJEfFgNBYTjlmJ4QVtYLTM4P3xMfuF85k76yv16PCu D33zcAqCuSpCCGYZu4V3k5sHlNLHFF4z+O2D00K1Oq+rvFrgrKjTx4F2r5/7l6pBrlHVBj5+YvaV QDBLxWkgRvE2CBCISqm5mkNWtgPzXsq67Xv5GIgQXkAACNe64VunPsQi5x2NbIuAD7HIwzWNnRZH afzUw5dIH2S1UMgrmAe15p2IZI7It861oyaPDjDpBGS9gFam/xKdWFmEYwoBT9CVZ8OLKKAcOcvp vMwLSdK8x3giSQI+JldRwR32iTeY2jFx/e0H7nNzss6M0rLBRyxiSkksetQUlDXq6+OoWRe/zYKT UZDEpPQ+yx75dE68vk7CfjmbPp6IA86nFKnlkyxwr1L5pBWedwLJtgO5CuG7hXUQpuG+BKms8Lcw qoUEqUvubKzGLncGdYZMPvqgMecpbM0HbW3ss34EnOgvN4f4ZJ8J3dR15jPbZo5SaS0XSq/9wEmc blhZq9jw1FXhxtIL6sbQuDrCyGFRRLwOc+dyMiXFppVGoSDnGOlq33nrmYS5MjIv3PEtkHkrM5qF HyFifCDC1l22bNP6nfZaVT2KRb4SoII0pJY2uDyfXRw5Ot0uO3mxKkThrh+9UilDU//OJ95X9t69 StnqKv2u2lQ1xnq3zWn8RzSo7SOiCZIEgo/trTa8LGN8qckdV/8A9TjE9wplbmRzdHJlYW0KZW5k b2JqCjM3IDAgb2JqCjY3NwplbmRvYmoKMzUgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAz IDAgUiAvUmVzb3VyY2VzIDM4IDAgUiAvQ29udGVudHMgMzYgMCBSIC9NZWRpYUJveApbMCAwIDEw MjQgNzY4XSA+PgplbmRvYmoKMzggMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IC9JbWFn ZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUgovQ3MyIDggMCBS ID4+IC9Gb250IDw8IC9GMS4wIDkgMCBSIC9GMy4wIDM5IDAgUiA+PiAvWE9iamVjdCA8PCAvSW00 IDQwIDAgUgo+PiA+PgplbmRvYmoKNDAgMCBvYmoKPDwgL0xlbmd0aCA0MSAwIFIgL1R5cGUgL1hP YmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAzMjAgL0hlaWdodCAyMzggL0NvbG9yU3BhY2UK MTMgMCBSIC9JbnRlcnBvbGF0ZSB0cnVlIC9JbnRlbnQgL1BlcmNlcHR1YWwgL0JpdHNQZXJDb21w b25lbnQgOCAvRmlsdGVyIC9EQ1REZWNvZGUKPj4Kc3RyZWFtCv/Y/+AAEEpGSUYAAQEAAAEAAQAA /+IRMElDQ19QUk9GSUxFAAEBAAARIGFwcGwCAAAAbW50clJHQiBYWVogB9kABQANAAgANAANYWNz cEFQUEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbWAAEAAAAA0y1hcHBsbYHAy37PnR+ibeYC FS1DYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOclhZWgAAASwAAAAUZ1hZWgAAAUAA AAAUYlhZWgAAAVQAAAAUd3RwdAAAAWgAAAAUY2hhZAAAAXwAAAAsclRSQwAAAagAAAAOZ1RSQwAA AbgAAAAOYlRSQwAAAcgAAAAOdmNndAAAAdgAAAYSbmRpbgAAB+wAAAY+ZGVzYwAADiwAAABkZHNj bQAADpAAAAJCbW1vZAAAENQAAAAoY3BydAAAEPwAAAAkWFlaIAAAAAAAAGVxAAA6MQAACZZYWVog AAAAAAAAaloAAK9yAAAa+VhZWiAAAAAAAAAnCwAAFncAAK6WWFlaIAAAAAAAAPNSAAEAAAABFs9z ZjMyAAAAAAABDEIAAAXe///zJgAAB5IAAP2R///7ov///aMAAAPcAADAbGN1cnYAAAAAAAAAAQHN AABjdXJ2AAAAAAAAAAEBzQAAY3VydgAAAAAAAAABAc0AAHZjZ3QAAAAAAAAAAAADAQAAAgAAACEA cgDsAYICNQMBA/0FJAZqB84JXwsFDNYOxBDCEtwU8hczGWQbpx3qICsiciSnJuEpDys6LUcvNjEd Mwc07jbSOLI6jDxZPiE/5kGeQ1JE/UadSDdJyktZTNROVU/CUTJSmVP7VVlWulgOWV9asFv0XTRe cl+mYN5iEWNGZHNlnWbCZ+ZpCmopa0ZsXm12bo1voHCvcb9y0HPhdPF2AHcOeB55MHo2exl77nzC fZZ+cX9IgCKA/YHagruDnoSAhWmGU4c/iC+JIYoWiw2MBYz/jf2O/o//kQGSA5MGlAaU+5XilsaX q5iSmXeaYptRnD6dLZ4enxCgBKD4oeyi4KPVpMeluqawp52ojal8qmyrV6xArSiuD67+sACxB7IL sw60DbUMtgu3B7f/uPS56breu9C8wb2wvp+/isB3wWbCVcNExDXFJcYYxw3IAsj4yenKwMuIzEzN Ds3PzpDPT9AO0MnRhNI/0vnTr9Rm1R3V09aL10LX+Nit2WLaGNrP24bcPdz03bDeZd8M35ngJOCt 4TnhxuJU4uPjdeQH5JjlLOXA5lPm5ud56Azon+ky6cTqU+rj63TsBeyT7SHtr+477sXvUu/g8Grw 8/F68gLyjPMW86D0KPSu9TL1tfYv9qL3Dfdm9774C/hF+H74uPjx+WT53vrU/H3+i///AAAAJAB8 AQIBkAJAAxQD/gUjBlwHuQk7CtIMiw5jEEoSOhRCFloYfRqhHMce7iEeI0slZCeEKZQrcy0kLsgw cTIaM8I1aTcOOKo6QjvaPW0+/ECIQg1Di0UFRnxH50lWSrVMFE1uTsNQFlFqUrJT91U9VnZXr1jj WhNbRFxtXZtew1/mYQZiJGNDZF9leGaOZ6VovGnPauFr820Ibh5vMnBKcVxydnOQdKF1iHZldzx4 F3j1edN6sXuRfHB9Vn46fx6ABIDsgdaCwIOrhJaFgoZuh1qISIk3iiWLEov/jOuN1Y6/j6OQh5Fs klKTN5QflQqV85bel8qYtpmkmpGbf5xsnVmeRZ8yoB+hCqH0ouCjzaS0pZumhKdoqFqpZqp7q4is mq2krq2vvbDFscyyzrPRtNa12LbZt9m427nYutm73rzhvea+77/1wQDCDcMbxCrFL8YdxvnHz8ik yXrKUcspzADM1s2szoPPWtAv0QPR19Kr03/UU9Ul1fTWv9eN2FrZJtnw2rjbgtxI3Qfdtt5k3xHf wOBv4R/hzeJ64ynj1+SD5S7l1uZ95yTnyehu6RHpsOpR6vHrjuwq7MbtYe377pHvKO/C8Fjw7PF/ 8hLyqPM+89L0YvTx9YH2EPae9yT3nPgY+KD5MfnU+pH7Z/xj/YT+m/8g/1j/j//H//8AAAAVAEoA mQEBAXEB9QKOAzwEAATbBdMG2wgACSwKdwvHDSUOig/6EXES5RRZFcsXOBikGgobZxy+HgsfUCCY Id8jJyRqJakm4ygbKU8qfiurLNIt9i8WMDIxSzJWM2c0cDV3Nnw3fDh6OXk6cjtoPGU9ZD5mP2ZA X0FaQlJDTERBRTNGIUcQSABI7knZSsNLrkyYTYBOZk9PUDhRJFIOUvlT5FTQVb5WpFd6WEpZFVni WrFbgFxPXRxd6l66X4lgVmElYfRiwmORZGBlLGX5ZsZnkWhfaSxp+GrDa41sVm0bbdVuhm8wb9lw gnEmcc1ydXMac790ZXUJda92VXb6d6F4SXjyeZt6SHr1e6N8U30Gfbp+bX8kf9uAlYFTgg+CzIOK hESFAIW+hnuHN4fziK+JbYoqiueLpIxijR6N246bj1qQG5DbkZuSXpMhk+SUqJVrljSXApfRmJ+Z b5pAmxOb5Zy3nYueYp85oBGg6qHFoqGjgqRkpUWmJ6cJp+2o06m6qqGriKx0rV6uSa83sCOxD7IA svKz47TZtc22w7e3uLS5q7qlu6C8m72Yvpe/k8CNwYrCh8OGxIDFecZ1x3DIZslmynrLk8ynzbbO us/B0MHRwNLJ09XU3dXz1xrYStmD2sjcM92u30rhBeLm5PrnYuoP7S/w5/WS+6X//wAAbmRpbgAA AAAAAAY2AACVRgAAVs8AAFKpAACRTgAAKBAAABVgAABQDQAAVDkAAtwoAAKo9QABczMAAwEAAAIA AAAYADIATQBmAH4AlgCuAMYA3QD0AQwBIgE6AVABaAF/AZcBrgHGAd8B+AIQAigCQgJcAnYCkAKr AsYC4gL/AxsDOANVA3QDkwOzA9MD8wQVBDcEWgR9BKMEyQTyBRwFRwVzBZ8FzAX5BigGVwaHBrgG 6QccB1AHhge9B/QILAhmCKII3gkcCVsJnAnfCiMKaQqwCvkLQwuSC+EMMAyFDNoNMA2JDeQOQQ6g Dv4PYA/GEC0QlBEAEXAR4RJUEs0TRBO/FDwUuRU7Fb8WRxbSF10X6xh9GREZqRpDGt4bfRwhHMUd bB4SHrwfZyAVIMUhdCIlIuIjxiSyJaEmiid5KGcpVypEKzAsIC0LLfYu4S/KMLMxnDKDM200VTU7 NiI3Cjf0ON45yzq+O8c82z3uPwFAGUEpQjlDTURfRXJGhUeYSK5JxUrdS/tNGU41T15QhVGwUtpU EVVIVoVXxFjmWf9bIFxBXWhelV/AYPBiJmNkZKRl5WcraHZpxWsWbG9txW8acHRxy3MmdIB113cw eIl543tyfSN+4oClgm6EO4YVh/WJ1YvGjbiPr5Gmk6GVp5etmbGbuJ3Dn8Oh36SSp1uqGKzTr4Cy NLTft5m6VL0Uv9/CvMWQyH7LcM570XXUkde72t3eA+FJ5Kfohu2W9XX5NPrX++382f2m/qH//wAA ABYAMQBLAGYAfgCXALAAyADgAPgBEQEpAUEBWQFxAYoBowG9AdYB8AIKAiQCPgJZAnQCkAKsAskC 5gMEAyIDQANfA38DngPAA+IEBAQnBEoEbwSWBMAE7wUfBVEFhAW3BesGIAZWBowGxAb8BzYHcQeu B+wIKghqCKsI7gkxCXYJvQoFCk8KmwroCzYLiAvbDC4MhgzfDTkNlg31DlUOuA8aD4EP6xBWEMIR NBGnEhwSlRMQE4sUDBSLFQ4VlRYeFqsXORfIGFsY8BmJGiMavhtcG/4coR1FHekejh83H94giyE0 Id8iiyNeJD8lKCYOJvQn3ijHKbQqnCuILHYtYy5RL0AwLzEiMhQzCTQBNPc17zbqN+g46TnuOvQ8 BT0YPis/QEBYQWtCgUOaRLFFzEblSAFJH0o/S2FMiE2sTtZQBFEzUmBTl1TSVgtXTVh4WYRak1ur XL5d3F78YBZhOmJgY45kvWXqZxxoUmmKasJsAW0+bndvs3DwcihzZ3Shddl3EnhLeYV633xiffd/ j4Engr+EWIX5h5uJO4rhjI6OPI/tkaCTV5UZluWYrpp+nFWeMqAOof6kKKZfqJKqxa0Br0Kxg7PQ ti+4krsCvXnAB8KUxTbH3sqSzV/QHtL81ebYxNut3rnhxuTf6I/r2e6c8Ofy1PRz9fj3tP//AAAA JQBPAHgAoADHAOwBEgE2AVwBgAGlAcsB8QIYAj8CZwKPArkC5AMQAz4DbAOdA84EAgQ3BG4EqATj BSIFYwWlBegGLQZzBrsHBQdSB6EH8ghFCJsI8wlNCasKCwpuCtQLPAusDBsMjw0GDYAN/g6ADwIP ihAXEKIRLRG5EkcS3BNxFAsUpRVFFegWkRc7F+YYlxlLGgEauht2HDcc+B27Hn0fRCALINYhnyJr I04kPSU0JionIigdKRwqHSseLCctLi46L0kwWTFwMogzpjTDNeQ3Cjg0OWM6mzv3PWk+4EBkQeVD ckUBRpZILEnGS19M+k6PUChRvFNLVOBWb1f+WYVbElygXjhfy2FjYv9koWZAZ+NpimszbOJui3A5 ceVzmHVFdvV4qHpdfAR9pH9KgO6CkoQ0hdyHg4kkisaMa44Nj62RSJLhlH6WHpe7mVWa8ZyOniuf wqFhovuklaY2p9KpZ6sFrJmuM6/LsWmy+LSVtiy3xLlduvS8i74ov8nBZ8MHxKTGT8f5yZ7LTM0C zp3QG9Ge0yrUv9Zn2AjZudtr3Q7eruBX4ezjbeTk5lPnuekU6lDrg+yt7cbu0e/U8MbxtfKQ82z0 LPTr9Z72SPby94j4HPiv+S/5qvok+p77Avtm+8r8LvyH/NH9G/1l/a/9+v5N/rn/Jv+S//8AAGRl c2MAAAAAAAAACkNvbG9yIExDRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtbHVjAAAAAAAAABIAAAAM bmJOTwAAABIAAADocHRQVAAAABYAAAD6c3ZTRQAAABAAAAEQZmlGSQAAABAAAAEgZGFESwAAABwA AAEwemhDTgAAAAwAAAFMZnJGUgAAABYAAAFYamFKUAAAAA4AAAFuZW5VUwAAABIAAAF8cGxQTAAA ABIAAAGOcHRCUgAAABgAAAGgZXNFUwAAABIAAAG4emhUVwAAAA4AAAHKcnVSVQAAACQAAAHYa29L UgAAAAwAAAH8ZGVERQAAABAAAAIIbmxOTAAAABYAAAIYaXRJVAAAABQAAAIuAEYAYQByAGcAZQAt AEwAQwBEAEwAQwBEACAAYQAgAEMAbwByAGUAcwBGAOQAcgBnAC0ATABDAEQAVgDkAHIAaQAtAEwA QwBEAEwAQwBEAC0AZgBhAHIAdgBlAHMAawDmAHIAbV9pgnIAIABMAEMARABMAEMARAAgAGMAbwB1 AGwAZQB1AHIwqzDpMPwAIABMAEMARABDAG8AbABvAHIAIABMAEMARABLAG8AbABvAHIAIABMAEMA RABMAEMARAAgAEMAbwBsAG8AcgBpAGQAbwBMAEMARAAgAGMAbwBsAG8Acl9pgnJtsmZ2mG95OlZo BCYEMgQ1BEIEPQQ+BDkAIAQWBBoALQQ0BDgEQQQ/BDsENQQ5zuy37AAgAEwAQwBEAEYAYQByAGIA LQBMAEMARABLAGwAZQB1AHIAZQBuAC0ATABDAEQATABDAEQAIABjAG8AbABvAHIAaQAAbW1vZAAA AAAAAAYQAACchAAAAADDlfiAAAAAAAAAAAAAAAAAAAAAAHRleHQAAAAAQ29weXJpZ2h0IEFwcGxl LCBJbmMuLCAyMDA5AP/hAEBFeGlmAABNTQAqAAAACAABh2kABAAAAAEAAAAaAAAAAAACoAIABAAA AAEAAAFAoAMABAAAAAEAAADuAAAAAP/bAEMAAwICAgICAwICAgMDAwMEBwQEBAQECAYGBQcKCQoK CgkJCQsMDw0LCw8MCQkNEg4PEBAREREKDRMUExEUDxEREf/bAEMBAwMDBAQECAQECBELCQsRERER EREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREf/AABEIAO4BQAMB IgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUE BAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1 Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOk paanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAf AQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQF ITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdI SUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1 tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP1T ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACuV0f4meENd8f+IPhlpt/LJr3hi3trnUoTA6pGs67kAcjD HbtJx03jvuA6qvnH4Txb/wBtH46XHP7vTtCj/wC+rRD/AOy16OBwlOtRxFSpe9OHMvXnhHXytJ/O xnOTja3Vn0dRXkP7R/xf8R/C/QvD+keAdO0/UPGHjLWYtF0eG+L+RFuBMk8ip8zIg2ggEYMgPIBU 8d8PfjL8UvAXj/xB8Mv2jtS0C9l07wifG0Gr6PA6CO0jdknilTADFSjFSoHCHOdwC7UMlxNbC/Wo W6tRv70kmk2l2Tfe+9k7DdRKXKz6Por5k+FWvfta/ExNJ+M8fiHwxpvhfW79JovBd3YZKaSzD96t 4o8w3JTLKCfLJIJ2g+WMXxH8cfjz8QYfiL47+E+qaD4b8CfDRL9UuLux+23OvT2iF3AywWOFgp2s vzDIznJC9K4drOs6Kqw93STu7Rk3ZRfu6u+nuqS3d7Jsn2qtzWPqjVtb0bQbeO71zVrLToJZ47aO W7nWJHlkYKiAsQCzMQAOpJwKu18PftVXPxa+IP7Nnh74wXHjXTdP8P3mlaNf6j4dh0hH23skqEzx XDszhd0qgITjamMkkk+leN/iB8d/g94V8L/DseJ9J8ffEnx9rElpomo3OlixtrO1REaWSaKE4cxh gRjHD5IbZtfX/VyUqFOVOtF1JSnFx95W5EnJtuNvdTvLXa1r62XtlzWtpZP8z6Xor5c0z41/G3wP F8T/AId/Fi40G98XeF/BFz4y0DVdMtyLe5hRJBiaM4AZZVQYCjIDdeCaPw68eftjeLV+GvxK1S30 A+F/EV5bW1/oun2Ss/2GSJi1/PMzExnjeqIQBuRSCcqc5cOV4xlUnVgorZuWkrx5ly6dV3tZ6Owe 2W1nc+sa434k/GL4Y/CGwh1H4j+M9P0SO4z5EcxZ55wMbjHCgaRwMjJVTjIz1rnPCv7U3wB8b+Jr Lwd4V+JNjqGsai7R2ttHbzr5rBSxAZowvRT1PPbrXlXjz4c/GDwb+0dr3xs8PfBzRfilp+tWltb6 bDPrMVneaH5UCxuIzOpRVkJlJCBs7uSuSGjA5P8A7S6OYp0/dckpNU3LVJJSn7seru7rRqzY5VNL w1PobwF8R/A3xQ0MeJPAHiex1vTt/lNNbPkxvgHY6nDI2GU7WAOCOOa6Svl60/ap8LeHfhJ8Q/F1 p8KpPCXjjwncxQax4Xmt1VnvrlhFbSmRAnnRtwS2FcrG2Bgozc/8Hvj/APGTxH8ZNC8Ir448PfEb Sb9ZD4nfRNDkhs/DzeWWjWG9B2z5bjJ3ZVSOCSV3qcM4pqtWjHkhC/xO70ipfFFcuzVm3FSulG7d he2irX3Z9ZtrmiprSeG21iyGrSWxvUsDcJ9paAMEMojzuKBiFLYxkgZq9Xw58SvBHx7T9r7whaRf Guyg1jWtM1I6HqqeG7cjT7RTJIbZoiSsmFO0OxLcg9ea+1tJTUrTR7SPXb2G6v4bdFu7iKLyklkC jc6pk7QTk4ycZxXFmmV08HSoVKdZT9pHmslLTVrrFaaW73T0tZuoTblKLW3+Sf6nK/E/41/C34M2 VpffEvxjaaKl85S2jaOSaabHUrFErOVGRltuBkZIyM3vhx8TPBXxa8Mp4w8Aaz/aekyTyW6z+RJC d6NhgUkVWHY8gcEV8/8A7KnhWD40anqn7WPxDtEv9Y8Q3lxa+HrW4k86PRdPidolhiBVVD8OC4Hz Ak8F5N218Udf1H4Man4Y+Bf7NHhbw9pfiTx7e32p5u0f7HYIq75JSi9CzHCDBRRGV242gd9bJ8Mq ry2k5PEx+KTaVNcqbmtr+5b4ru9nZLS8KpJrn+z+P9M+j6K+QNf+Pvxu8OfDP41eD/E+p6MnxA+G MVhPb65pcH7i5t7sxurGGRSokVGYHjGXAAypZudtvjb+2frfjjw1osMXhXQW+J2n3FxoOm39sGOj wQAP50jAbnnaME7G3LlhlI8Mqunwni5xlJ1IJK+rluuSNS60u1yS5ttLNOzsm3Xile39Xt+Z9w0V 8Z63+0Z8arL9lr4geIrvV9PtPHvw68Wnwxe6pZ20ckVz5dzCjSrE6bF3eaU+70XI2k4HU6P8Z/j3 8LfiT4X0b9om68GT6D46s9RuoJNFSaNtHazh89txcfPGUZRg5bJzuG0h85cL4uMJy54Nxc0ld3ly RU5OOmq5WmtU/K9k37ZXWm/+dj6jor4u134//tP3fwtu/wBpXSn8NaD4WF1BHo/he70155r6CW5E CyXE5dGU/OrAx4VlIxjv6R47+IPxg+JXxhufgv8ABLxJZ+EI/Cmnwaj4n1+50+O+dJrhN8FpHDIN pUoQxcfTK7cPE+G8RB+/Ugkubmd21Bw5eZSsnd3nFe7zXbstbgq0Xt/w9+33Hveta5ovhvS7jXPE Wr2Wl6daKGuLy9uEggiBIALu5CqMkDk9SKzvHPjvwp8NvCl9448a6sNO0TThGbm68mSYIHdY0+WN WY5Z1HAPWvmb9qHwz+0Rqn7NF7eeMfHPhyzl0rTph4m03StM8631cLcI0MsU0mJISEVSwAA3F+20 CbUPFfxq+Cf7IWqfEbV/H+leKrr+zNJn0NLjQ47dbKCeS3iaGRUbEoEcvBPOQck5xW2G4fp1aVGp GtGUp1fZ8qclfWK0lyNK973d1a27vEUqrT20tc+qrC/tNUsbfU9PnWa1u4lnhkXo6MAVI+oIqxXz 38WPir8WL34l+HvgR8DoNE07XL3Qh4h1XVdUiMkFjaeYIlWFAfmfcrZDKRhlx1JXhfEn7TPxT0r9 m3x54g1a40rTviD8PPFMfhq8udPjWW1v2S5gDSRpKp2iSN5FPGflLAJnanPQ4dxVeNOVNxvUcUk3 qlOXLGT02b+fW1mN1UtH0/RXPr6ivlz4XfEn9orR/jP4R8M/GrV9GurP4j6Ld6lb6RY2SQ/2DLD+ 8EYkALSgoVB3M3zMcEhdz+gftYfETxB8PPhBdf8ACGs6eJfE19b+G9FkQ4MVzcsV3hsgqwRZCrc4 cKcYzWNTJK0cZSwcZxk6lrSTvHdxbu0tE07vbS6urMpVFZt6W/yv+Qvjb9r39nT4eeILrwr4o+Jd pFqti/l3Nva2dzeeS4JVkd4Y3RXUghkJ3LjBArsPCfxW8M+MvHPi/wCH2kxXyap4Ke0XUGmiVYpR cxGWNomDEsMAg5CnI6EYNcb8Pv2W/hX4T+EMXwq1fwzZarbXcUT6vNNFskvrhWV/MZgxYfOoIG44 AC/dGK8EgvPjl/w1j8ZfC3wFttBtJ70aQ1/q2tLI8NlHDaIqIiqD87l35YEbY274r1KGWZVjI16e DlJOnFvmm0ov36cVKyV43Tn7r5n8Nm3oZuc0k5dX+jPt+ivk7Tf2sviB4h+CXw1vfDHhzSbv4l/E q+udLsYJhKthCLWVkuLpwuTtVRG2wMD+8JG4JtLLP4wfHzwvqnxi+H/jDxTo2sX3gfwLP4itNatt KS1mgu2tvNiURbmjkRTn7y8lecg4rl/1Yxqc4zcYyi2rN6tRnyOSsmrKWmrV9bJ2ZXto2ufWlFfE fg746ftPw6P8LPi5441/Sl8MeMPEGneFW0EaXGst4kySK2oPNtVkkZomkCJiPDJgY3CvRbj4t/HH 4oar471X4V6n4X8LeDfAV1d6eNQ1aykvZ9VurUZlPyuEjtjzh13Nhc99qmI4ZxNCdp1IcqveSbsm pcvL8N27/wAqa89HZRrKWyPpeivjXWv2xfGuu+Bfh7b6feeF/Amv+K9Ln1zXtY1Ys9rpVjDM0KyW 0LnM0kxRjHHljxtw24SLrfDz9pL4zz/BP4lePtQ8Nr4sj8KDPhfXI9JlsU16Mkq1w9rkOIowVlJX buTcvysjEVU4UzCnT56nKnzctm+rlyb25d+nNe3vW5dQjXjJpLr/AMOfWlFfHX7O3jf4ufFr4j+H vGcX7S/hrxZplol2PEfhSys209rSJkxE0UTxLJOiytGfNcKVxtDNuYV9i15ua5XPLqyw9SSlK13Z SVndqzUlF30vtZpppsqnUU1dBXzHrvw3/ae8IfHvx98SPhBZ/D6807xvFp2X8QT3W6AW1uItuyLa QxYMc5YY29DkD6corPAZhUwbnyRUlNcrUldNXUvzimVKKkfMviD4EftC+OfB+la74x+I3hmX4k+F /EC6/wCHbmLTvLsrNdu17J2VQzwuQjbyrP8ALg5HNaXg/wCAXxB8ZeJPF/j79onWNGk1nxL4bk8H W9n4aEkdtYadIreZ5bygszszs2X3bTnBIIVfoiiuyXEGMdN048sezUUnFNptRstFdX+/u7z7KOlz 5s8A/D39r/wPB4b+G8PjT4fHwZ4anhgTV4rCc6peWMLfLBJE2Yk3IBGWX5lGCHZgWbGu/wBnz9oP w3Z+Ofhb8Odf8CJ8O/HmoXtzJcahb3J1LTIbxds0MUasI2CgkKSxJ5PBOB9WUVa4ixSqSqKEE5av 3FZyTupeqe3Raq1heyVrXf3nzl4n+A3xM8W/seWvwH1O88PReKbS1s7D7RFNKbJorW5jZGDFN+4w xLnKgbyRwDkdb8dfhB4s8dL4O8afDrW9P0zxv4Bvje6U2pI72V0kiqk9vNs+ZVdVX5lBOAQMbty+ wUVgs7xSqKoraSnK1tL1ElNNdmla3a4/ZxtbysfNWjfs/wDxY8SWHxO8ZfFfXPD1x488ceF7nwtp kWnmZdN0u3eJ1REZgX2NIwdiVZhg4zk59m+D/hTU/Avwr8JeC9aaBr/Q9GttPuWgctGZI41RipIB K5HGQOOwrr6Kyxma4jFQ9nVty3TSSslZcqS7JL/Pccaai7oriwsRL54soBJu3b/LG7PXOcda+f5v Cf7ZfgXVtXsfh/4z8CeL9AvtRnv7GXxf9t+32KSsW+z7oW2tGmSFJJ4HARcIPoiissHjpYbmShGS lupJNabea+THKNz5kg/Y7vPE3w58d6X8TviBNqfjX4iva3Wp65BbhY7eW2KtAiQ5CmNCCmBtLKTg r8u2XwN8Mf2qtLTRfB93r3wy8HeGNFu4Liafwlpkq3WoxxvvaF0kAjjWU5ZtijkkAbSVP0tRXfLi HGzhKFXlkm7q8YtRdlH3Vay91JJWsklZIj2Udzybxx8KfEPiT9oD4cfFSxudOj0nwjaajBexuWFz I1xFsTaMYKjJzkgj0OePWCAwKsAQeCDS0V5dfFVK0KcJ7QXKvS7l+cmaW1b7/wDDHypY/s3/ALR/ w7sr34bfBj416Xo/gC9upJ7RrywMup6RHIzmSKFsEMMvnfuVsjI2HJOz4m/Zo+IPh+08AeK/hT8Q F1Lx14B+1Qi88XSSXEerW9yS0sU8iAvhSz7McgMRkEAj6Sor1pcSY6U1Uly31v7kffunF8+l5XTa d+7e+pHso7HyvefsufE3xX8NPirceM/FWjP8R/igbY3Elorx6baR2roYLdPlLlNkezeQWwwzuILN 3Pjr4ZeMtW+MnwP8a6TpkElj4Nj1ODXJVmRPIE9pHFHtUnLDcrj5c4yK9vorOWfYuU+aVtppK1kl OmqbStbRQSUV0sHso2t/W9z4k/aR+FXiD4a/BX9oPUrmSybQfGHiDTdd0wRSs0yyyXcBuPMUqAvz kYwTkeld/ofwC+MXxO8aaF4v/aL8T+G7nTPDOl3NhpOmeHoJES4+1Q+VNNO8o3bmTaCo+XIUrtww f3r4geAPCnxR8JX3gbxvppv9G1Ly/tFuJ5ISxR1kQh0ZWGHRTwecYORkV0EcaxRpEn3UUKPoK7Jc S1/qSpQS9reV5WV+Vwpw917ptRak+t9+0+yXPzf1e7Z8c6z+zh+1ZqXwkb9ng+NPAEnhDTlC6frB guk1K5SGXzraOVeUiG9Y1JQMVCjl+S3dav8ACf8AaF8IfEHU/i18HdU8FTar4102xg8UaP4iW4Nr DdW0KxpJaSw4cpjcNrEdSfmyBH9HUVlPiXGTupRhZ811yq0nJxbbXm4xfSzStYFQgtjyDXPh18Vf F37OWufDjxp4n0fWfGes6XcWr6g1t9mtfMkJKqVjXgICEDBcnYGIyTVT4j/AzXfHv7L8HwMg1iys tUXStMsXu5FZoVa2eB3OByQRCwH1Fe1UVw082xNOcZ07Jxn7RWSSUtOm1tNti3BNWfoeC/FL4P8A xZh+JujfG34Ia14cTxJbaGfDmqab4hSU2N3a7zIrq0Q8wSK5z1GQq8jDK/Iz/sm+M7v4MXPhzVfF NlqnjTW/GMHjPW7qYeVazXHmAzRoFThdm4KMAFgPuA4X6ooropcQY2lTp04NLktZ2V2ottJvdpXe np2Vl7KN2+9/xVvyPJviD8K/EXiD43fC34m6DNYRWPhBdSttXjllZZpYriFUiEShSp2sGLZKnBGM 9Bs/HH4QaX8bvAFz4Lv9UuNKuknjv9M1O2yZbC7iJMcyjI3YyykZBKscFThh6BRXFHMsTGVGcJWl SVovt7zl89ZPfpoVyp3v1/ysfNmlfBn9qbxhrekH4xfHe0ttD0O5huTZ+FIGtJdUeLJDTzBUIBba WQDYewUgMPQvhz8JNT8G/F34m/ErUNUtriPxzcWDWsEKkGCO2gMfz5/iLM3TIwFPcgeo0VviM5xN aMoe7GMlytRjGKtzKWyS15op336bEqnFHyNo37JnxT8JeBPBq+FfFegp4x+GPiPUb/w690JG0++s LtlMkVyAu9HYL1XO3LKDyHW7B8Bv2ivEfifx74v8eax4HS68f+B73wrNZ6V9oit7OYx7LaTc6s8i 8vvYncN5AUgAD6sortlxPjpNynyuTvq4q+sudpPtze96t9NBexjsj588WfALxjrHwV+EfgbTrvS0 1j4d6xouqXe+VxDMLONo5VjbaSSd5K7gM45Irz34zfCr4rfCT4b/ABVg8LfEfwzpvw28QnUNevPt tq41O2edTvsLdtwiKTNthUsNw83gbuT9i14refsbfs43/i+fxvefDi3m1K6vGvp1ku53t5JWYsxM Bcx4JJO3bjnpW+V5/wCzqXxkvdT5rKEZXblzfakuXXZ2drvRrQUqenu7+p5Rbfs2+I/GPw5+DvxM 8HW/hh/FfhnwjaadNpHiywefT7uPyxIu7b88UscjOwZeSSASACG7qDwP+2TfafqOv3HxV8F6Drnl xRaboOm6UZNHUJIrOZJJVaYNINykjO0E4GSpT6FjjSKNYo1CogCqB0AHQU6uWrxFiallOMZJN25o qTScubl1W1/nbS9tBxpJHzX8Ovgl8aL/AOO9h8bPi63gbR7jSNNlsIrXwfFNGuomQMu67aUFnCgj AJxlUIxtIb6UoorzsfmFXGTjOqkuVKKSVkkr6L72VGCje3UKKKK4SwooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACiiuI8Y/CPwx438eeDfiJq93qsWpeB5bmXTo7W68qGQzoqMJVxlgNgOFK55DblO2tqEa cp2qy5VZ6pX1s7K11u7K/S99bCd7aHb18uj9sH4l+NItV8YfAT9l/WfiJ8O9Hup7Q+Jk8R2mnvqp gdlnk0y0kVmu4lKkK+5PMYMqZZSK+iPGuh6h4n8G694b0nWptHvtW0y5sbbUYBmSzlkiZFmX/aQs GHuK+Rfh98cPin8Mf2b/AA/8DPDv7MXxLi+LfhrRLbwhZ2j+H3fQ2vI7dYl1BtUQ/ZDaFwJGbzQ2 SV/265m5Xdu33/1+polGyu9/w/r9D6a8BfGz4Z/EXwxoXijQ/Fmmwrr+m6dqkNhdXsCXsCX6F7VJ og5KSPskVVydzRSBS2010eueLvCnhi60yy8SeJ9J0m41u6FjpkN9exwPfXBGRFCrsDJIQCdq5PHS vzS8f/A/wD8Nta8T/BjVf2fNc+KXjYfA3QfDehahofhltTtdN1V11K1e5eRvlsvMmjglWd8Mqwyk MMFWk+KvwC+Imq/FfVrf9pzQvGHifw9ceBdAsrLU/Cfw8XxVqd09pYtHe2VtftFKNMlkvpZ7jzDE GlDDE0W0Ztaptd2vxfr2/Hr1z7J9l99l/n+H3fpLr3jfwX4WTzfE/i/RNIT7TDZ7r/UIrcefMcQx Zdh87kEKvVuwNTz+KfDFt4itvCFz4j0uLXr22e8ttLe8jW7mhQ4aVISd7ICQCwGAepr490P9lfwB +0F8bPjF4h+OXwU1O2tda8PeGLXRn1iI/aNPBsi1zHbXILIZ45I4o5JInYgqV3Ydg3lur/Dl5vGf gu91j4BeOb/4rad+0KviDxX4sk8JXk6XGjrezpazQamY3j+wJBJpwFvG4CfZnYxqFLlpJzUX1/4b /gjt7vN/W1/+AfZ/w9/al+BvxW8V+IfA/wAPviN4d1nW9BuBBFbW2s2cp1VfssVyZrPy5WMsK+d5 TPgbZIpVI+XJ7Lw/41jn8G+G/EfjiGw8Kahr9vahtOuNVgnWG8mQN9ljuFIjncMSqlMh8ZXg18t+ Df2ftF8J/Ej9qG98FfAXQ9Bnjs7WLwJqVt4citEYzaCkc8VhIkQwnnhhJ5RwXkcH5s15L4n+Gpsv BHhm1+L/AOzd468fTTfs96L4Y8HWlp4Zm1KLQ9ZEUiX0M0XP2C8LPYuLh1QqlvIofcmwqp7s+RK+ if3pv+vMKfvQ5m7atfikff8A4p+J/wANfA32z/hNviH4Z8P/ANn28N5d/wBq6tb2n2eGaRooZJPM ddqPJHIiscBmRgMkEVpap4p8MaJqWmaNrXiPS7DUNblaHTLS6vI4pr51XcywoxDSMByQoJA5r4Y8 efsi698StX1S5+J/hWbxR4r8Nfs2WHhjS7q9tmurG48RuNSWWZJmG17qN1jZSDuX7SHwCUYeGzfD XxHefs/eJbX4v/s6/EDxf8X72LwhcaDqv/CGXuomHRLW00yaW0t7pomjtJoxFqMc8eY5JJJsMJSf lu0Ofkb/AKu0CUnDn/rZP9T9JPh18UdT8ZfFT4r/AA/vdNtYLb4f6rp1jZ3ERbfcJc6bbXbGQEkb leZ1BGBt28ZBJwvFn7Tnhfwp+1H4H/Zan0a7m1vxpoV3raXwkCxWyxCVok24O8utreEnK7PKQYbz Plm+DvhzWdL+Mvx38Qajpd7a2eu+KNLk0+ae3eOO7ij0LTo2kiZgA6iQSRkjIDRsucggfKn7THgD 9oO58efFT9p/4ceG9Tv/ABR8OvFfhuw8CaeuhTTXd5YQWMsd8sCou+e2ll1yZ2KcYtXy3yYCnZSV ttPy/wA3/SFC7i/6/rRf07H1V+zv+0foP7Qs/wARYdG0yGy/4QDxne+FMx363Qv4oNvl3ilVUIkp Mm1ctxHncc4HpXhnxf4S8a2MuqeDfFGka9ZQXElnLc6ZexXUUcyHDxs8bEB1PBUnI71+dPiX9mr4 kfA7wJ8TvgB8H/Ausatc+L/hR4a1K7v9NhkisdQvtPvjbazaq4ZC0t1azNIYhIrurMo5YGrWh/Cu TTfgz8XtI+GXwu+LM2t+NdI0ufxZd2Pw9tfBVpJp8d+v2nS9I0yRY2e6/s+4v1Lfv97IB5zPIilW 8/62vpfT77fmX/r+v6/T7M8ffH3wzpnwwPxL+GOueH/GtnH4l0jQJX0zUorqDdd6nZ2cyCSJiolR LosFJ4bbnivTbHVdL1QXDabqVrdi0ne1uDBMsnkyp9+N8E7XXup5HevjL4g+BPhj8VPgh42+HvwL /Z08X/D6LWNc8H6ff6ha+B38OTahCNWtXeS3R40mY2cXnM80kQSPqGdQxHA/GD9nPWvhz4k+InhP 4X/Ce+h+E+qan8Pr7XdC8O6TcTHV9Et572HU4IFiQvLc7ktJJgjea8eWZjvOU2kvO9vy/AcIuUnd 2Vr/APAXd+R94W3xN+G97pml63Z/EHw1Pp2uX/8AZWl3cWrQNDfXfz/6PA4fbJL+6k+RSW+RuPlN ZV38UIdY0fwp4k+EtrpPxA0fxJrkemy6jpXiC0FtbWv70T3ccm4rceU0JUxRkuTux9xq+BNf+Avh b4u+NNR8EeHP2ePFfhf4eav8bPDetyR/8IRdaLaXOjRaHeW02IRHFJBEbq3uFdmWPYL6Nzgy8+s+ Bfgvrng/xhb+HdJ+HFxpvh/Sf2lLrX7G2sNKaGxtNLbwxL5U8aqoRLcTyCPcMIJTs+98taKMbx13 /wCB/mRzStLy/wCD/kfWF18WvhZY+Nk+Gl58SPDEPi6SJpxoT6tANQ8tYjMXNvu8wKI1Z8kY2gno KY3xh+EiafNqz/FLwitlb2tlfTXLa3bCKOC84tJWffgJP/yyY8Sfwk18GfBHwHq2lfGGdPBXwX8a a54c8R6dr+u6ldeP/huuia94YvpIZgiHWtinU5Ll7y4h2bpWSORSrFVbEPw0/YR+Gk0/ww8OeKvh xsv/ABf8A9UXU/7XsWe8sNd3aYDNJ5o/dzwjUJYogwDRCJVGCgxyupJNXXS+nz+XTf0OhQi1e9te vy+fU/SiivNP2ZpNbk/Zy+Fp8Sw38Wrr4N0lNQS/jdLkXC2kSyeargMH3hs55zXpdbtWdkYp3Vwo oopDCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK4jxh4t+JOieIbXTvCvwkl8SaXL Ej3GpLrltaeS5dgyiKT5m2qFYnIB3YGSDWtGjKtLkg1fzaivvbSE3ZXNPTvAWjaX8Qte+JVvPdnV PEWlafo91E7qYFispLySJkXbuDk38oYliCFTAGCW09T8ReH9FmtLbWNd0+wlv7mOztY7m6SJp55N xSKMMQWdvLfCjJOxsDg145+134l8Sad4J8KeBPDXieXwvJ8S/GWn+DLzxDBdrbXGlWlwJZZ3t5Gj cLcyR27W0JIBEtzGQwYA14n47+G37MPw28W/DjRf2fNL8NWGq2nxX8P6Z4ms9CvftEsLWVhq0kCX UQkbbPt+0bnYeY5JMhYrkZwg20ktL2/FXf4jbWt30v8An/kfcFUtU1rR9DhhuNb1az0+K5uYbKGS 6nSJZJ5XEcUSliAXd2VFUcszAAEmvkbw3+1v8W9O8Jw/FDx5a+B9T0bxD8KNa+KWl6DoUNzHe6Yl m9mbe1ubt5nWbzI70K8ogiCyxSAKVWn/AB4uvjn4O+Emh6h8VfEnhjx/ryfEDwhqdho3hXRW06ZZ v7Wjka0jee6kWVGaNY4ZWEJIRy+cnbDdvw/F2Glf8fyufYdFeKfso/E3xT8U/hPdfEb4geI9Pk1S +1i9+2aNBaNaf8IkYWETaVcCRUlaeAxs0jyqpZpGK/u/LJ8B0bw2fgr8RfDHxd+JPhT4a/FCy+In xCgtvDXxJstdl/4SRRqrOlkVimRopLWOORYhFaThFgXzFiOxyW3ZpP8Ary/rTzC2ja/r+vvPumiv z58Lf8FEPif40uPD/hvR/D3hfTtW8Q6fpvhu2utUt5fJbxcNR0uDVbdYY7gSPbwWurxThcqwMEo3 sFOO58J/tZ/G7WPGOs+O9X8P6Npvwh0TVNc026k1LSTp88zWb3UNnb2N3LfE3l9PLBHvjS1ESAvG JDKpWnJpat9/w/4detwSb/r+v+BY+zaK/PTVv2vP2srf9n/xJ8YtUbwXoNrf+D7fXPCsl9ov9m3l 3fGe2NwllayX1xJd2UVu8p+0SRQF2kidUMbbq+ofgf8AFH4ia/8AE74l/B34m33hHVdX8AppF4uq eG7aazhkj1CCWQQTWss07RTRtbuc+ad8c0LbUJOS2tgUW4862/4b/NHtVFFFAgooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoornNf+Ingrwv4l0Dwf4g8RWtj rHih5Y9JtZdwN00YBYA42g/MoG4jcSAMnirp0p1JctOLb1emuiV39y1fkJtJXZ0dFYPj3xD/AMIj 4F8R+KzLFF/Yuk3Wo+ZKpKJ5UTSZYDkgbea+L/gf+1N488IX3gO9+L3x60r4j6B4v+Gs/j7xX5ej 2dvfeBFt7W1uN8q2IBlgla5eEI8PmF41KsfmU5KScnDsr/n/AJFOLUVPo3b8v8z7X8V+EfCnjvQL rwp438NaV4g0W+2i607VLOO6tptrB13xSAq211VhkcFQRyBWXonwn+F3hnS9I0Tw38OvDWk6doN+ dV0uzsNLgt4LO7MckZniRFCrKUllUuBkh255riNM/a7/AGeNV8MeKfGsPxCFvoHg2xg1PVNSvtLv bS3NrPJNFBNbPLCou0lltpo4zb+Z5jqFXcWUHA8e/tjfDix+Avjn4v8Aw2udU1y48KxXtiltL4X1 YG31OKya6ijvYDAk1vAR5e6aQRxAOMyLmqT6ol22Z6P4W+BHwW8ES6/N4Q+FPhTSG8VI0etfZNJg jGoIwIaOYBcMh3NlD8p3Hjk1W8Jfs7/AjwHbS2ng74QeEdIin1C31WQWukwqWubdi9vLnbndEzMY +f3e47duTXJv+2R8CdM8EeHPG3ijX9Z0aLxS0kWmWVz4X1YX160VutxNJb2n2bz5rdI2VjcLGYgC MuCcVveIf2mPg14c0Lwf4huPEl9qNv4+tDqHhyHR9EvtTu9QtliSZ5ktraGSYRpHIjOWQbcgHBOK bjy+6+gKXNqup6BpPhzQNCn1O50XRrKwl1q8Oo6i9vAsZu7kxpEZpMD5nKRRqWPJCKO1cN4P/Zq/ Z8+H3ihfGvgf4K+C9C1yLd5F9YaLBDLbblZG8kqo8ncrsrbNu4MQc5rD8afth/s5/D6y0G/8V/EM 20fiTQU8UWKQaPf3Uy6Y+wJd3EUMDvbQkyKoedYwWDDqjAbXhrxnr+q/tC+NvBcmprP4e0nwh4f1 WwgWKPak91c6uk0gkA3NvS0txgsVHl5UDcxM3tZf1/Wg2+5tWfwc+Fenalpes2PgHRYL/RdVvtbs LlLVRLb3l7v+1TK3XdL5jbux+X+6uKtr8BPghY+On+J9l8IvB8Hi6SZ7ltbj0W3W9Mz53y+aE3eY 25tz53HJyTmvIv2l/wBp3xH8HP2gPgP8L/D1naX2nePNalt/EqbC9xbW0klvZWr558uM3N4G3EfM 0AQEZYGH4A/tRap8SPjx+0L4V8W31npXhD4cXlquhS3ka2xFvCbu11C4aZsB4FubKQ7zwmSCeOHF 328/wt/XyBq2j/q/9fibPxZ/Yt+EHiT4SeOfA/wl+HXgfwJr/i/Sjpg1ew0KGAohljlMbGJQwiZo lyq8ZAOCQK9i8B/Db4e/C7RpPD3w28EaF4W0ya4a7ltNHsIrSKSZgqmRljUBnKoi7jzhVHQAVxvw /wD2o/gh8TtQbTPCniy8E39hHxOjaroWo6TFNpYZUN5FLeQRJLAC6ZkRmX5gc4rz34lftceEPE3w C+JPi34H+Jtattf0LwVd+J9Hvr7wve2cUsKo3lXVub22WG4iLjAK7we4xUuyvLy/K/8AwSrtpQe1 /wAXb/gH0xRXkfgv9rH9nr4gL4kk8L/E/T7mHwlYPquq3U0E9rbLZpJLE91DNNGkdxbh4JVMsLSJ lR83zLnKH7aP7PknhbUfGUPijVE0rSE0i5vZr/QL/SxFaandra2t4Dewwh7YuWYyoWASNzzgA0Rd HuNFeHW37Tnw3+J3ge/1j4VfEuHR7yz1zRtHNxrXhi+do5L+4tvsgaxfyJjFdx3CCKbKoBMJN2Eb Dde/bH+D+j/E3T/hVpkHijxHqNx4kj8JajqOi6HNcaVo2pSBSkF3ekLEHJbBWNpGQqwcLtOHyu/L 1/4b/ML3V0e50V8w6D/wUl/ZH15rS1Tx3q9vqV9dTWdvpv8AwjOpXVzLLHL5exBbQSq7sNjhFYuE kQsqk4H0L4M8Y+GviF4S0fx14O1VNS0PX7KLUNPu0R0E0Mihkba4DKcEZVgGByCAQRSWquimmnZ7 mzRRRQIKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKy9S8LeGdZ1XTtd1fw7pl 9qWjs7adeXNpHJPZlwAxhkYFoyQBnaRnArUoqozlF3i7MGr6M4r43eDdX+I3wY8ffD3w/cW1vqni jwvqWjWMty7JDHPcWskUbSMqswUM4JIBIGcA9K8g1X9ly08M/saeJ/gv8OfA3hPTfGWu+AxouoS6 PaQ2Ueraktn5XmSzBEMm6QuQ8gB+ck4ya+lKKlu8HDo/+D/mC0kp9v8Agf5Hi37RvwX1Hxx4Et5v hfofh+LxZoWr6FrFlDdgWlvqUWlXwuorCeaONmEOGuPLXBVHlz8oZjXmmm/AD4seJPAH7S/jvxh4 c0zRPiD8d9AfS7Tw3Zawt7bWEdvpMllaJJdGKMGZ5JZS7DKBTHjGGr6tvb2z02zuNR1G7htbS1ia eeeeQJHFGoJZ3Y8KoAJJPAArlvAHxh+E/wAVzfr8MfiX4X8WHSmVb4aLq0F4bbfu2FxGx2htj7Se G2tjODRF25rdd/w/yQ76JHhGu/Cv9oX4e+Ifhh8Uvhz4b8NeN/EXh/4dHwDrulahrbabDFM7Wcv2 23k8lg6CS2cOmEYps2jJO3lPhz+zT8av2V5fh/4i+F3hLw58TLzS/AK+CdZ0+8146RJZXD6hJqM1 1aXDQOr2zSzyI0ZjWTbDbn5iGA+utb8W+H/DuqaBousX/wBnvPFF++maVH5Tv9ouEtp7pkyoIXEN rO+WIHyYzkgF3hbxZ4b8b6LF4j8Ja1a6tpc000Ed3avvjd4ZXhlAPfbJG6n3U1cqjbb7tv8AP/Nk xXLFRWySX3bfkfJ/xU+C/wC1HqGq+O7jwz4Y8B65c/G/4f6d4R8TXc2uz2tt4ZvYYLuG4mt42gZ7 i0YXjMi5Em4ZZQOvrXwQ+B2r/CL4i+JJ0u0uvDH/AAhfhXwroU0koa6ddLjvo5DOoVQGP2iJsjg7 j0xivSLz4k+ANOvvEGnal4y0eyn8KWtve64Lq7SFdNhn8wwyTuxCoriKQgk/wmukrJJWstr3+ev+ bNHKXX+tv8kfIvx+/Zf+JHxl8a/GPxfAbPSdUk8G6Jo3w11azvQlylzZ3smqyeaSP3JN5HapuH/L MAg5BxyrfsP+MfDuheC/BfhSCxM+r/BzxB8NvG/iE35dLa6vGjvY7iNHAknR7+S9yAqkJMScYAr6 rHxw+EreHtC8WJ490p9H8Ta8PDGj3iSFo7/UTcSWwt4iB87GWGVcjj5Cc7Rmu5pr4bbrX8b/AOf5 dCXvfZ6fh/w35nxB4I/ZZ+NreDfFvgjVfAHgPw9qXijwXqPhPxF451PxXqHibXdfllsfs9u9vJJD F9isxKBK8PzLtVVSJSN47zxL4T/ah+MnwN8efB3xP8Kfh74At7zwrceHdJNl4mmvI7q62pHHLGiW qi3s9nmYRt0oIUEAZNfUdee/Fj9oD4OfAx9GT4tePLDw1/b7yppzXaSFZjEEMh3KpChfMTJYgfMO ab1TT66f194o6NNdD55/aW/Y18WfFDxlqMnw2h8OaVoVz8K7fwdY2l0nlWNtcWGtWeoWts8MYyLa SKOaI7FIRUxjkA1PGnwY/aH+OeveIdR+Jfwc8J6DoXjWDwnZ6no8XioapIINI183M6TsbeFCs1re XLgJv4t1U/M+0fY+j6xpHiHSrPXtA1Sz1PTNRgS6s72znWaC5idQySRyKSroykEMCQQQRVyi2qb6 bfj/AJjk+ZW7/wDA/wAj5P1/9l74h618eviZ47tb2wh0fxT4u+H/AIpsZJ7kruTRZf8ATYCqqzbt kKMmQFZpFG4YYjP8OfAj4xaf+1Evjvw/8MtG+H2lHxPea34k8R6L45vZbHxbZSRzxxQy6EUESXZ8 23eSZiAJIZZFLFkFfYFFJK0ubr/w3+SHOTkrM+N/gz+y/wDEj4Y6h+z5cX3h/Snu/BuueMLjxfe2 E8ITy9SW5aCfnY8rMUsk4VmUYBAVOPZ/2R/hp4t+Dn7P/hv4Y+N/LOp+Hp9RtFMcqyI1r9vuWtSp XjBt2gODyM4IBBFepa3r2h+GdNl1rxJrNjpWnwMiS3d9cJBChdwiBnchQWdlUZPJYAcmr9CTStfQ HK+61Ciue8feP/CPwv8ACl7438c6uNN0bTzGs84glnbdJIsUaJFErSSO7uiKiKzMzAAEmsrx38bv g38Lr2z034lfFXwl4VvNQTzLW31nWbezklTJG8LI6nZkEbugIxmmSdtRWLL4z8Kw+L7TwBJrtoPE V9psur2+nb8zPaRSRxvNjsoeaNcnqScZ2tjhtc/aj+APhz4c6X8XNW+JumR+Dtb1OTR9P1iNJZre 5ukadWRCiMSAbWf5sbSIyQcEElwsep0Vj+EfGHhTx94csvF/gjxHpuvaJqKF7TUNOuUnt5gGKttd SQSGVlI6hlIOCCKo3XxI8G2PxDsfhVe6s9v4m1TS5dYsbSW0mSO7t4nWOUxTlPJeRCyFolcyKrKx UKQxdnewX6nTUUUUgCiiigAooooAKKKKACiiigAooooAKKKKACiiigAri/Ftt8ZZtdgk8Ca34MtN GEcYni1fS7q4umfe3mFXjuI1VdmzaCpO7dk4xXaUVrRrOlLmST9UmvuYmrqx43+1xp3wm1/4Gax4 U+Nvim/8NeEtfu7KxutXtbcyLZS/aYpIHnYxSxxQGWONXeZRFhtrsA2a+Y9Y/aO+LVjoXjvwv4c+ N9l4/wDAmhLoC6h8XPD2i21ufDi3WoRQX8C+T5ltdvDZN9p8yFP3HmHeMquP0AorJb6lN6I+JvhZ 4mbW/Fvwu03TviRrnxA8K6Z8ZtZsvCfifWJftE+p2MXhS/MxF1sUXUcd7LfQJMMhlhAVmCg1xGg/ F/U/Fnw5+Etj+0T+0T4q+G/h3UfBGq+KbvxNYasdGu9Y1VbwxR2guDFljbQOzrbrkzl4iVkEfzfo hRQtE15/pb/gi/r8f6R+f37Qo1/4u/DX9qjTtX+JPi6Tw94L0PRtX8Pwxu9iLhf7DNzILhBGgdJ3 m3SQ4UB40OxCBn6v8X3Tfs6fs5eK9c0zWta8RS+CPDmp6xb3XiLUZL+8upI45rhVmnc7nG7CDPRQ oHAr1HrwaOvBoqe9JuOl1/THF2ST1sfkIfhD8Wfh34M1r4F2l5rdhH+zdZp8cIb+9tVksLjUF0/T Zre2hYsGMf2mPxHnA25XGSQ2PcvF37RGrav8Y9L8UL+0DeaJfxfGDRPDWk+DLfU4YrS68K3UNs32 57TYWuFuftW/7TISkYZVjZGUZ/QnrwaMDGMcCnzXab6f167WW+xKVlZf1df5tv1Pzc/Yw+LXxM1n xB4EsfDPxv8AEnxP8U6nY+JYvG/hvxHqrTWGjRWksyaXM06xPJZtLIlujOwnd1uHYKQigeo/tBa5 +1DF8Zvg/rPhf4Y+Abnx7p2k+L7rT9Ej8UXN1ZXUQg0xAftMlpakTEyyARsFTABMoz8v038FvhLo HwN+G+mfDHwxqGoXum6XPdzxT37I07G4uprlwxRVXAedgMAcAZyeT3FKOi97V/1/XX1NKjTm3FaX Py5vPiD4n8JfCv4a/DHwX42ufAOm67rfir/hKLm/vG8B6Z4U14sl/BpsrhLh7a1iW6mMdtDJm4Pl kSBA4HX/AB9+Pdunw5lutd/ag8WaVp+mfB2HVvBmp6fbXfhyXxx4j33lnJdBgiSsqyRWMotlOwpe CY7olD1+i9cb8XvhboPxo+H2pfDbxPfajaaXqsls9zJp8iJMyw3EU+zLo67HMQRwVOUZgME5Ald6 v+v6+ZGlj5D8T/HnWvD3xAvvhVqPxYuIfGVx+0LpNpBobasUvH0J7SxlWOOLduWzkJw2BsZpJAcl jnzr4I/tG+On8OeLPHfxG/aXi8NeL9f8HarZp4a1K8udal0DXY5jGNR1CzhszHodrA4SNIXR/MWY GVmdQp/TIgN1APOeaWklpb+tkv0G3/X3v9T8rvGnhqP4k/sWfHa71H4y+OvEtx4FvbRJLyD4kS+J /D+rTQ21pcFoLhreDejNP+8gKlYpYkZMfdr0r9qPWrv4c/EXw/4Aj/aG8aXOg+H9J0vTT4Y0v4hX Wl+NL281DUnjN/bg2j/2wyxtEFhaYKggcFVLgn9B6Kd5c176aaA9YKPa/wCJ4Z+0HZ22p/Fn9nrT 9bsrS50X/hPLq7dLqJXQXsOianJZsNwwHWRWdD1DohHIBHhvxr8YeFfhb8RPiv8AGH4LftDx6D8S 7n7NFq/w+1vwwl7N4jvLOGO3sbe0gZIb4282ViE1u8kW6d3DDa2Prn4mfC7wV8XfDI8K+OdMlurS G8g1K0ntrqW1u7G7gcPDc21xEyyQzIwyHRgcEg5VmB1pvCXhS4nNzceGdJlmYktI9lGzHLtJySuf vuz/AO8xPUmp95bf1saQ9m/jbXor/qj85/2gvF3xc0z44ax+1TofgLW7XxH4Lg0j4WWek6c63QF5 qeiXt4UuNpCusWpato8e4EBtvy7iyir3gjwX8QPgjo3hj9mz4eXOj+MPE/wq+NDvoUesSS6dbXVt deE9Q1JBJIiyENvmvQMcbo1DFQSw/QdfBfg5Qqr4T0YBTGwAsIuDGrKhHy9VVmA9AxA60L4L8HIM L4T0ZRtdOLCL7rp5bD7vQp8h9V46U+eom2lb5vTVPS6fn95TpYZrlcm/+3VrpbW0v6/A/O+Lxtr+ nfDDX/C+ufFDR/g98S/EnxKfxT8QdAuZp/BVvbxfYo45LW11WOO9VEuJba3nW7RwbrdMFZWZ1r1n U73WD8FP2TfEmmz+NG8SXXxB0WWL/hKLr7frKw3dvefb4Lm4MUbSKlnLdDzCiFkhjYjPB+tX8EeC 5FZJPCGiMrrtYNp8RDDCjB+XkYVf++R6Csq5+E3gO9+Iel/FG80Zp9e0K0ntNKaS4kNtYeezNcTQ 227ykuJd7K84XzGQlS20kEi3dXWiaf3fLqTONJK8JNvXdW39JM7CiiimZBRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFcv4t+JXhDwRDc z+Ib29RbR7WOZbTTLq8dWuXaOAbII3Y73QoMD7xUHBZc6U6VSrJQpxbb6JXA6iiuGb42fDVddt/D ja5dfbbu9fT4D/ZV55EkySxwOBP5XlbRNPFCW3bfMcJndlal1j4x/D3QtU1TQ9S1i6XUdImgt5rS LS7uaaaWZA6JbIkTG5bYwZlhEhReX2itvqOKbS9lLXXZ7Xtfbu0vXQnnj3O0orgNB+O/wu8TaBrf irQ/ENzc6P4esX1LUL/+yrxIEgVGdmR2iAlwqMdse5uOlas/xU+G1nqGs6Tf+OtEsr3w8gl1O3u7 1IJLWMiMiRlcg+X++jG8fLubbndkUSwOKjJwlTkmuln5eXmvvXcfMu51VFcja/F34XXcNlMnxA0G L7fbNdwR3F9HBKY1gS5ctG5DIVhkjlYMAVRgSAK6i0u7W/tYb6xuYrm2uY1lhmicOkiMMqysOCCC CCOCDWVShVp/xIteqsCknsTUUUVkMKKKKACiiobu6jsrWa8mWVo4I2lcQwvLIQBk7UQFmPHCqCSe ACaEr6ICaivMLf8AaS+Et3osviO01DxFPpcFr9umu4vCWrvHFBtDiRiLb5V2EPk/wEN90g1s2fxk +H99Z67qEWoalFbeGbA6lqstzol9braxLH5jZMkK5kVQd0QzIpVlKgggdsstxkPioyX/AG6/Ly81 96JU4vZnbUVx7/F/4YQ6MviC68daPa2J8vfJdXKwNAXleBRMj4aI+bHLGQ4Uq8bq2CjAT6N8UPAG vaqdD03xRZnUTfXemx2s5aCW4uLV3S4SFZApl8sxtuKbgBg5wQTm8HiEnJ05WW+j0tq7/IfMu51N FV9QvYdNsLnUbhJ3itYXnkW3t5J5SqgkhI4wzu2BwqgsTwAScVx2kfG/4V65a+H7qw8Y2qjxReGw 0qK5iltp55vK84KYZVWSPdGUdS6qGE0JUnzo90U8NWqRc6cG0t2k30v+Sb9EDaW53NFct4s+J3gn wPBZXfiXV5Le11CGa4guorKe4gKRR+Y5aWJGRMryoYgueE3HiuTvv2o/gZplneX9/wCNJYINPWQ3 bPpF8DA8cqRSQuvk5E6NLGXgI81Fbeyhfmrajl2MrJSo0pST2tFu/Tou4nOKdm9T1WikVldQ6MGV hkEdCKWuMoKKKKACiiigAooooAKKKKACiuIg+NXwznktFPiQwR37Xf2W5ubK4gtp0tY1lnmSeSNY 2gVHDCYN5TDO1mwcbXh7xz4P8W20114Y8SafqqW8azSi0nErpG+7Y5VcttcIxQ4w4GVyOa6KmExF OPNODS80+9vz09RKSbsmbtFctoXxP8CeJtU0nRND8QxXV/regp4nsbcRSK8mnOyKs5DKNgLSKAGw x+bA+VsdTWdSjUpPlqRafmrAmnsFFFFZjCiiigAri/FHwk8KeMNVudV1ifWA12tqJYbXVJ7aJmtp fOhk2xsvzq4BBzxtGO+e0orWlWqUpc9KTT7rQTV9GeeaF8Avhf4f8dN8S4NClvPEphaBNQ1C7lu5 IkZtx2eYxCtkkb8b8Mw3YYgxa1+z58MNd8a3nxHudLv7fxPeOkh1Sz1S5tp4isPkAxmNwF/dZQ8d Gb1r0iiuhZljFPn9rK9uW/M/h/l328thckdrHGaH8H/h34c8Fah8PNJ8ORQ6BqltNZXVqHbMkEqs rx+YDv27XYD5sjPBFclJ+zD4Au/FF14h1O71i8WaytYY0fUrlZ1uYbm6uDdPOJAzuTdBVBwEWPaP lbaPYKKIZljIOTjVknLfV6vTX1033BxT3R5bb/s0fCK30PUvDQ0K7k0zVneW5t5dRncF3ZmZlJfK ksxY4PUD6V6F4f0PTPDGhad4b0W3Fvp+lWsdlaxA58uKNQiLn2AArQorKtjMRWVq1RyV76tvXa+v XzCMYxVoqwUUUVzlBRRRQAUyWNZonhYuA6lSUYqwz6Ecg+4p9FAHmuj/ALPfw20KyvNJsLPUP7N1 DRW0C5tJr6SUPatH5W0SuTKpEYCDa4CqBgDrXT3Xw/8ACd5o/iDQrnS1a08UJcRaoAxV50nUrIvm LhgCGbGDxnjFdHRXTUxuJqS5p1G36vfv66LXyEopaJHlk37Nvwzur2fVbxNcn1K7RFu746zcLPcs js6O5VgN6l2AKgYXCjCgAaOgfAX4X+GNZg8QaFoElrfWtzc3cMgu5WCSXEyTTEBmIAZokGOgAwOt ehUVpLMcZJcsqsrer7W/LT00EoRWtjFl8H6B9k1e306yGkya4We9utMP2W4kkIx5vmR4bzB/e6/W vNNc/ZT+Fup6S9nY299Z3kWlS6dY3T3ks4tJH09dOFwImbaZRBHEM8ZMSt94bq9lopYfMMXh3zUa ji32e/r3XkwlCMt0cNrXwV+HWvWWh6bf6NMlt4c02fR9Njtb2e2ENrNEkUkY8t14KRqueoxwQa5q +/ZT+Cmp291bah4ev7hL6ee7uhLq104muJ2Rpp3UyFTK/lRhnIzhR0r16iqp5njadlTrSVu0n3v3 7tv1YckexHbwR2sEVtCCI4UEagsWOAMDk8mpKKK4SgooooAKKKKACiiigAooooA8rH7M/wAIzIlz PpGp3Fyk89ytzNrF283mzQpA7mQybi3lxINxOcjdncS1bfgj4L/D/wCHd9q2p+E9MubS71yCG3v5 2vZpJJliTZGS7MWDBe4IOST1JJ7miuyeY4ycXCdWTT0s5O1r3tv319dSeSPY4zw18Hfhv4R1fTfE Hh/wraWmqaVpQ0WC+UEztahYUVJZOspVLeFFZyzKqkA/Mc9nRRWFWvVqvmqycn5u/wCY1FLZBRRR WQz/2QplbmRzdHJlYW0KZW5kb2JqCjQxIDAgb2JqCjIxNzk4CmVuZG9iago0NCAwIG9iago8PCAv TGVuZ3RoIDQ1IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAF1UbtOwzAU3f0V Z0yGJr6Ok7grLwkGRCVLDIihSl0wIknzAL6I/+Q6UaWoKPZyZR+flzvs0EHyJqk0ysKgd3hGg/R6 IFQDCEP1D3CETAo5LfgAVWKC0ho8qGi1BakCeUHIjFoIqSAUTEgWE0vqjgnD8Yam57k0qGpcWWhK pJ6v5pHJM0ryUhmCrZHeMUDweET0G8N+4NZOWVf4OPykE0rQYJdnDjbAHC8iemxHNM4d3AE/fnxH vY+xRXTafMcgHlw/+LbxzVsS4xX2YU1QrAcw2UWAWXwZ4PK7xPm7nlxfudP4tf9E77ntTM2FKi1R KHZYhubS+zrHTctN7P4Aq6dyxAplbmRzdHJlYW0KZW5kb2JqCjQ1IDAgb2JqCjI1OQplbmRvYmoK NDMgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDQ2IDAgUiAv Q29udGVudHMgNDQgMCBSIC9NZWRpYUJveApbMCAwIDEwMjQgNzY4XSA+PgplbmRvYmoKNDYgMCBv YmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0Nv bG9yU3BhY2UgPDwgL0NzMSA3IDAgUgovQ3MyIDggMCBSID4+IC9Gb250IDw8IC9GMS4wIDkgMCBS ID4+IC9YT2JqZWN0IDw8IC9JbTUgNDcgMCBSID4+ID4+CmVuZG9iago0NyAwIG9iago8PCAvTGVu Z3RoIDQ4IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDMyMCAvSGVp Z2h0IDI0MCAvQ29sb3JTcGFjZQoxMyAwIFIgL0ludGVycG9sYXRlIHRydWUgL0ludGVudCAvUGVy Y2VwdHVhbCAvQml0c1BlckNvbXBvbmVudCA4IC9GaWx0ZXIgL0RDVERlY29kZQo+PgpzdHJlYW0K /9j/4AAQSkZJRgABAQAAAQABAAD/4hEwSUNDX1BST0ZJTEUAAQEAABEgYXBwbAIAAABtbnRyUkdC IFhZWiAH2QAFAA0ACAA0AA1hY3NwQVBQTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9tYAAQAA AADTLWFwcGxtgcDLfs+dH6Jt5gIVLUNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5y WFlaAAABLAAAABRnWFlaAAABQAAAABRiWFlaAAABVAAAABR3dHB0AAABaAAAABRjaGFkAAABfAAA ACxyVFJDAAABqAAAAA5nVFJDAAABuAAAAA5iVFJDAAAByAAAAA52Y2d0AAAB2AAABhJuZGluAAAH 7AAABj5kZXNjAAAOLAAAAGRkc2NtAAAOkAAAAkJtbW9kAAAQ1AAAAChjcHJ0AAAQ/AAAACRYWVog AAAAAAAAZXEAADoxAAAJllhZWiAAAAAAAABqWgAAr3IAABr5WFlaIAAAAAAAACcLAAAWdwAArpZY WVogAAAAAAAA81IAAQAAAAEWz3NmMzIAAAAAAAEMQgAABd7///MmAAAHkgAA/ZH///ui///9owAA A9wAAMBsY3VydgAAAAAAAAABAc0AAGN1cnYAAAAAAAAAAQHNAABjdXJ2AAAAAAAAAAEBzQAAdmNn dAAAAAAAAAAAAAMBAAACAAAAIQByAOwBggI1AwED/QUkBmoHzglfCwUM1g7EEMIS3BTyFzMZZBun HeogKyJyJKcm4SkPKzotRy82MR0zBzTuNtI4sjqMPFk+IT/mQZ5DUkT9Rp1IN0nKS1lM1E5VT8JR MlKZU/tVWVa6WA5ZX1qwW/RdNF5yX6Zg3mIRY0Zkc2WdZsJn5mkKailrRmxebXZujW+gcK9xv3LQ c+F08XYAdw54HnkwejZ7GXvufMJ9ln5xf0iAIoD9gdqCu4OehICFaYZThz+IL4khihaLDYwFjP+N /Y7+j/+RAZIDkwaUBpT7leKWxpermJKZd5pim1GcPp0tnh6fEKAEoPih7KLgo9Wkx6W6prCnnaiN qXyqbKtXrECtKK4Prv6wALEHsguzDrQNtQy2C7cHt/+49Lnput670LzBvbC+n7+KwHfBZsJVw0TE NcUlxhjHDcgCyPjJ6crAy4jMTM0Ozc/OkM9P0A7QydGE0j/S+dOv1GbVHdXT1ovXQtf42K3ZYtoY 2s/bhtw93PTdsN5l3wzfmeAk4K3hOeHG4lTi4+N15AfkmOUs5cDmU+bm53noDOif6TLpxOpT6uPr dOwF7JPtIe2v7jvuxe9S7+DwavDz8XryAvKM8xbzoPQo9K71MvW19i/2ovcN92b3vvgL+EX4fvi4 +PH5ZPne+tT8ff6L//8AAAAkAHwBAgGQAkADFAP+BSMGXAe5CTsK0gyLDmMQShI6FEIWWhh9GqEc xx7uIR4jSyVkJ4QplCtzLSQuyDBxMhozwjVpNw44qjpCO9o9bT78QIhCDUOLRQVGfEfnSVZKtUwU TW5Ow1AWUWpSslP3VT1WdlevWONaE1tEXG1dm17DX+ZhBmIkY0NkX2V4Zo5npWi8ac9q4WvzbQhu Hm8ycEpxXHJ2c5B0oXWIdmV3PHgXePV503qxe5F8cH1Wfjp/HoAEgOyB1oLAg6uEloWChm6HWohI iTeKJYsSi/+M643Vjr+Po5CHkWySUpM3lB+VCpXzlt6Xypi2maSakZt/nGydWZ5FnzKgH6EKofSi 4KPNpLSlm6aEp2ioWqlmqnuriKyaraSura+9sMWxzLLOs9G01rXYttm32bjbudi62bvevOG95r7v v/XBAMINwxvEKsUvxh3G+cfPyKTJespRyynMAMzWzazOg89a0C/RA9HX0qvTf9RT1SXV9Na/143Y Wtkm2fDauNuC3EjdB9223mTfEd/A4G/hH+HN4nrjKePX5IPlLuXW5n3nJOfJ6G7pEemw6lHq8euO 7Crsxu1h7fvuke8o78LwWPDs8X/yEvKo8z7z0vRi9PH1gfYQ9p73JPec+Bj4oPkx+dT6kftn/GP9 hP6b/yD/WP+P/8f//wAAABUASgCZAQEBcQH1Ao4DPAQABNsF0wbbCAAJLAp3C8cNJQ6KD/oRcRLl FFkVyxc4GKQaChtnHL4eCx9QIJgh3yMnJGolqSbjKBspTyp+K6ss0i32LxYwMjFLMlYzZzRwNXc2 fDd8OHo5eTpyO2g8ZT1kPmY/ZkBfQVpCUkNMREFFM0YhRxBIAEjuSdlKw0uuTJhNgE5mT09QOFEk Ug5S+VPkVNBVvlakV3pYSlkVWeJasVuAXE9dHF3qXrpfiWBWYSVh9GLCY5FkYGUsZflmxmeRaF9p LGn4asNrjWxWbRtt1W6GbzBv2XCCcSZxzXJ1cxpzv3RldQl1r3ZVdvp3oXhJePJ5m3pIevV7o3xT fQZ9un5tfyR/24CVgVOCD4LMg4qERIUAhb6Ge4c3h/OIr4ltiiqK54ukjGKNHo3bjpuPWpAbkNuR m5JekyGT5JSolWuWNJcCl9GYn5lvmkCbE5vlnLedi55inzmgEaDqocWioaOCpGSlRaYnpwmn7ajT qbqqoauIrHStXq5JrzewI7EPsgCy8rPjtNm1zbbDt7e4tLmruqW7oLybvZi+l7+TwI3BisKHw4bE gMV5xnXHcMhmyWbKesuTzKfNts66z8HQwdHA0snT1dTd1fPXGthK2YPayNwz3a7fSuEF4ubk+udi 6g/tL/Dn9ZL7pf//AABuZGluAAAAAAAABjYAAJVGAABWzwAAUqkAAJFOAAAoEAAAFWAAAFANAABU OQAC3CgAAqj1AAFzMwADAQAAAgAAABgAMgBNAGYAfgCWAK4AxgDdAPQBDAEiAToBUAFoAX8BlwGu AcYB3wH4AhACKAJCAlwCdgKQAqsCxgLiAv8DGwM4A1UDdAOTA7MD0wPzBBUENwRaBH0EowTJBPIF HAVHBXMFnwXMBfkGKAZXBocGuAbpBxwHUAeGB70H9AgsCGYIogjeCRwJWwmcCd8KIwppCrAK+QtD C5IL4QwwDIUM2g0wDYkN5A5BDqAO/g9gD8YQLRCUEQARcBHhElQSzRNEE78UPBS5FTsVvxZHFtIX XRfrGH0ZERmpGkMa3ht9HCEcxR1sHhIevB9nIBUgxSF0IiUi4iPGJLIloSaKJ3koZylXKkQrMCwg LQst9i7hL8owszGcMoMzbTRVNTs2IjcKN/Q43jnLOr47xzzbPe4/AUAZQSlCOUNNRF9FckaFR5hI rknFSt1L+00ZTjVPXlCFUbBS2lQRVUhWhVfEWOZZ/1sgXEFdaF6VX8Bg8GImY2RkpGXlZytodmnF axZsb23FbxpwdHHLcyZ0gHXXdzB4iXnje3J9I37igKWCboQ7hhWH9YnVi8aNuI+vkaaToZWnl62Z sZu4ncOfw6HfpJKnW6oYrNOvgLI0tN+3mbpUvRS/38K8xZDIfstwznvRddSR17va3d4D4Unkp+iG 7Zb1dfk0+tf77fzZ/ab+of//AAAAFgAxAEsAZgB+AJcAsADIAOAA+AERASkBQQFZAXEBigGjAb0B 1gHwAgoCJAI+AlkCdAKQAqwCyQLmAwQDIgNAA18DfwOeA8AD4gQEBCcESgRvBJYEwATvBR8FUQWE BbcF6wYgBlYGjAbEBvwHNgdxB64H7AgqCGoIqwjuCTEJdgm9CgUKTwqbCugLNguIC9sMLgyGDN8N OQ2WDfUOVQ64DxoPgQ/rEFYQwhE0EacSHBKVExATixQMFIsVDhWVFh4Wqxc5F8gYWxjwGYkaIxq+ G1wb/hyhHUUd6R6OHzcf3iCLITQh3yKLI14kPyUoJg4m9CfeKMcptCqcK4gsdi1jLlEvQDAvMSIy FDMJNAE09zXvNuo36DjpOe469DwFPRg+Kz9AQFhBa0KBQ5pEsUXMRuVIAUkfSj9LYUyITaxO1lAE UTNSYFOXVNJWC1dNWHhZhFqTW6tcvl3cXvxgFmE6YmBjjmS9ZepnHGhSaYpqwmwBbT5ud2+zcPBy KHNndKF12XcSeEt5hXrffGJ993+PgSeCv4RYhfmHm4k7iuGMjo48j+2RoJNXlRmW5Ziumn6cVZ4y oA6h/qQopl+okqrFrQGvQrGDs9C2L7iSuwK9ecAHwpTFNsfeypLNX9Ae0vzV5tjE263eueHG5N/o j+vZ7pzw5/LU9HP1+Pe0//8AAAAlAE8AeACgAMcA7AESATYBXAGAAaUBywHxAhgCPwJnAo8CuQLk AxADPgNsA50DzgQCBDcEbgSoBOMFIgVjBaUF6AYtBnMGuwcFB1IHoQfyCEUImwjzCU0JqwoLCm4K 1As8C6wMGwyPDQYNgA3+DoAPAg+KEBcQohEtEbkSRxLcE3EUCxSlFUUV6BaRFzsX5hiXGUsaARq6 G3YcNxz4HbsefR9EIAsg1iGfImsjTiQ9JTQmKiciKB0pHCodKx4sJy0uLjovSTBZMXAyiDOmNMM1 5DcKODQ5YzqbO/c9aT7gQGRB5UNyRQFGlkgsScZLX0z6To9QKFG8U0tU4FZvV/5ZhVsSXKBeOF/L YWNi/2ShZkBn42mKazNs4m6LcDlx5XOYdUV29Xioel18BH2kf0qA7oKShDSF3IeDiSSKxoxrjg2P rZFIkuGUfpYel7uZVZrxnI6eK5/CoWGi+6SVpjan0qlnqwWsma4zr8uxabL4tJW2LLfEuV269LyL vii/ycFnwwfEpMZPx/nJnstMzQLOndAb0Z7TKtS/1mfYCNm522vdDt6u4Ffh7ONt5OTmU+e56RTq UOuD7K3txu7R79TwxvG18pDzbPQs9Ov1nvZI9vL3iPgc+K/5L/mq+iT6nvsC+2b7yvwu/If80f0b /WX9r/36/k3+uf8m/5L//wAAZGVzYwAAAAAAAAAKQ29sb3IgTENEAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAG1sdWMAAAAAAAAAEgAAAAxuYk5PAAAAEgAAAOhwdFBUAAAAFgAAAPpzdlNFAAAAEAAAARBm aUZJAAAAEAAAASBkYURLAAAAHAAAATB6aENOAAAADAAAAUxmckZSAAAAFgAAAVhqYUpQAAAADgAA AW5lblVTAAAAEgAAAXxwbFBMAAAAEgAAAY5wdEJSAAAAGAAAAaBlc0VTAAAAEgAAAbh6aFRXAAAA DgAAAcpydVJVAAAAJAAAAdhrb0tSAAAADAAAAfxkZURFAAAAEAAAAghubE5MAAAAFgAAAhhpdElU AAAAFAAAAi4ARgBhAHIAZwBlAC0ATABDAEQATABDAEQAIABhACAAQwBvAHIAZQBzAEYA5AByAGcA LQBMAEMARABWAOQAcgBpAC0ATABDAEQATABDAEQALQBmAGEAcgB2AGUAcwBrAOYAcgBtX2mCcgAg AEwAQwBEAEwAQwBEACAAYwBvAHUAbABlAHUAcjCrMOkw/AAgAEwAQwBEAEMAbwBsAG8AcgAgAEwA QwBEAEsAbwBsAG8AcgAgAEwAQwBEAEwAQwBEACAAQwBvAGwAbwByAGkAZABvAEwAQwBEACAAYwBv AGwAbwByX2mCcm2yZnaYb3k6VmgEJgQyBDUEQgQ9BD4EOQAgBBYEGgAtBDQEOARBBD8EOwQ1BDnO 7LfsACAATABDAEQARgBhAHIAYgAtAEwAQwBEAEsAbABlAHUAcgBlAG4ALQBMAEMARABMAEMARAAg AGMAbwBsAG8AcgBpAABtbW9kAAAAAAAABhAAAJyEAAAAAMOV+IAAAAAAAAAAAAAAAAAAAAAAdGV4 dAAAAABDb3B5cmlnaHQgQXBwbGUsIEluYy4sIDIwMDkA/+EAQEV4aWYAAE1NACoAAAAIAAGHaQAE AAAAAQAAABoAAAAAAAKgAgAEAAAAAQAAAUCgAwAEAAAAAQAAAPAAAAAA/9sAQwADAgICAgIDAgIC AwMDAwQHBAQEBAQIBgYFBwoJCgoKCQkJCwwPDQsLDwwJCQ0SDg8QEBEREQoNExQTERQPERER/9sA QwEDAwMEBAQIBAQIEQsJCxERERERERERERERERERERERERERERERERERERERERERERERERERERER ERERERERERER/8AAEQgA8AFAAwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYH CAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHw JDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6 g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk 5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIB AgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEX GBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKT lJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX2 9/j5+v/aAAwDAQACEQMRAD8A/VOiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKK+YfHvjr4nfHr4tap8EPgx4om8KeG/CTKvi3xTalftL3B5FpakHcpUgh3GCGV gcABZe/L8BLFzl7yjCKvKT2itumrbbSSWrbJlLlVz6eor4l+LPgT4o/Cn4ZWPh/x58T9R8VpqfxW 0qTRb68vZprkWuCVjlL/AHSGi3bVygYbhyePo34o/tIfBv4NaraaD8QfF4sdSvIPtUdpDZz3Mohy QZGESNtX5W+9jO1sZwa7a+SVP3f1Jus5uVuWL2jbW2/XXTSwue3xaafq1+n4nptFcRrHxq+GOh/D JPjDfeK7b/hE5rdLmG/jVn84OcKqoBvLljtKY3KQQwG048v8RftAeAfjP8CfitZeHF1jTNZ0vwbq U19o+s2D2l5bxvazBHKnKsrbcgozYBXOCQK5sNlGLre97OSgpKLdnaLbS19Lq/ZtJ2ugdSK67n0P RXzv8M/jp4I+G3wi+CPg/X7i9vte8WaJplnY6fp8QnnjiMKKbiVdw2QJjluThW2q21sfRFY43A1c LPlqJ2bdna10m1dfNDjJSCiviPwv8V/Fn7QWr6xq2vftRWHwhisdalsNJ8KRm1tr+MxkBWuRM6yS s2SGQZTcpAwcqv05pHjCHwBN4M+GnxL8d/234v8AE4uo7G9Gm/Z11BrdfMkJWIGOIhHTjIB7ZNd2 YZFWwbVOcuapq3FKV0kuZu7iotJbtNpb6rUiNVN+R6BRXnF5+0P8IbLwx4u8YTeKwdL8DakdI1yV bSdmtrkSLFsCbNzgu6qGUFSc84BNQfEf9o/4U/C2/sdG8SavezarqNqL+DTtO06e7uPs5JHmsqKd icH7xBODgHBrihleNnNU40ZNu+nK+iTfTomm+yafUvnj3PTqK88P7QPwdHwxT4yN44tV8ISOY01B oZlLOHMewQlPNL7lPy7M4GcY5rM8EftOfCLx8dXt9H1i/tr/AEPTpNXvdP1DTLi1uUtE6zKjqN68 j7pJ5GQMin/ZeO5JVPYytF2fuvRrdPTRrS/a6vuCnFtJPc9WorwTwj+3J+zd4wn0mwt/G0+nahq8 kcCWd/ptwhglkICRyyqjQqST18wqMHLDFe91GNy7F4KShi6UoN7cyav6X3+QRnGXwu4UUUVxlBRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFfGPwz+NXhX9lbVfiP4B +M9jr8HiO/8AFN3r+mzQac0//CRwXBHlPAykp5jFcEMygFgpbcrhfs6o5YIJ9vnQxybTldyg4PtX qZdj6VCFShiafPTna6UuV3i7qztLTe6tr5NXInFvZnx38dfH/ir4ofC34Y+IfFPw3vPBr3nxZ0qC 0sb25E001t5cxWV1CKY2J3AxkEjb1OeC7+JHw8/Z/wD2pPi74p+NqTWbeJrLTbjw3df2ZJcfbYI7 fZLFEyodrbkjQ7iqkpyRgGvsWWGKZDFNEkiHGVZQRxyOKjurGxvggvbOC4Ebb0EsYfafUZ6GvSpZ /QVN4adC1JqUWoyadnOM1ZyUrWcUne91fYh029W9dP1/zPz/ANK8Oa/8Ovgf8Adb+K2ialb+A/D3 ia91bxJbCBpGsGmkZtPnljQF1RGkkLDqDIEKlmVa938X/tCfCX4y/CL4s6Z8NL281X+yvA2oyTah /ZU9vbANbzL5IeVFO8YDFcAEMCCcNt+jWijaMwtGpjK7ShHBHpj0qKz07T9Pi8nT7G3to/7kMSov 5AU8TxBRxU1iK9F+0jJyVpWj703N3jytt6tX5lpa601UaTjonofAXwl8Hah+zK/wy/aD8QXE/ifw v410ez0zXrq5tfNuPDrzKhtXibl1gRNkRA4+TpuaJF+8fFGr3mg+GNX17TdGuNYu9OsJ7u30+2P7 28kSNmWFOD8zkBRweSODWgbeAw/ZjBGYcbfL2jbj0x0xUlceb5y8yrRxFeHvq93feN7xVklay926 3VtE1d1Tp8ismfGfij9oD9hL4kaRcat8RPBlrP4svrXyr7ST4auDq/2gDabdblIlHm7hsVvNXtyv bzvWrD4j/B/9mv4O/FzxHpepSa/4E8SXKafYXmS9tp93HJ5cc56jDRQqAcFRIEwCAo/QWTSdKluf tkumWj3H/PVoVL/99YzU1za2t5Cbe8top4iVYpIgZcqQwOD3BAI9CBXqUOJaGHUadCjJ0+a7jKpz acsouMfdXKnGTT3b0101h0W9ZPX0/M/M3SfhP4q8DeONH/Zlv5ppR8S7jw74j1SKedZYZbaBLqS+ jZwOpnjGzjkRrk85Pb/F4HwF+0347k+IPxY1f4XeGfFcNhLbarpmlTT3er28NvFH5NvdRRubcxMu GwAWDYbIK198vZWUl1FeyWkLXECskUxjBeNWxuCt1AO1cgdcD0p1xa212nl3VvFMgOdsiBhn6Gt5 8Z1Ktb2tale8OWVmruV4vnXNGST9yC1jLa6d7NH1dJWT/r+mz8//AIkXfh+4+CvgrUfgNo2uaN8P fA/jRpZ9V1PR5bpSWiYprCwtmSSCN3mIL7RuKqVP3R2vwI8T/AzUvHMq6F4x8Y/Frxr4l026s9Z8 S3OnXMVnpVt5Zk8krIsYggd1YRoisFJIJAC19mpDFFGIYokSMDAVVAAH0qs+mWqWtxDZWlvA00bJ lIwucg9cCuStxLCrhZYd05Jvms+dXfM7+++Tmk766Sim7XWhcKVpxlfa3Q/NnRfiZ8OvGH7HOk/s 6eDrGTUviZrd9FbxWFrprhoXW988zyTsoQL5KEFlYkbssAu4j9K7FZ0srdLkkzLEokycndgZ5+te Zfs1/C3VfhN8HPDngjxRHYyaxpSSiaW3bzEBeV3wrlQSMP6CvVKy4lzShisTOlhY2gqlSV3Lm5nN q7WitG0VZata3bIw9NxinLeyCiiivmToCiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoo ooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiuc8f+N7D4d+F7 nxVqOlatqcNs6KbTSrX7TdSbmAJSIEFgilpGx91EduimgDo6K8o1n9p/4PaPqlpoH9u391qmqWEu oaVbw6PeeXqMccMk7eTcGIQMfLidv9YAFwxIBBrH1P8AbI+BOi+Kdd8J6trmqwXGgXsmnT3EejXN zbzXES5mSJoUct5RysjYCo42kgkAl1y83S1/kle/3a+hShJtRSd3/nb81b1Pb6K888T/AB2+H/hK XwuNXub9YPFupPpNlOtm/wC7uFWUhJY2xKpLQtGAEY7yAQOSKln+0b8LL6fxLHbanqcieE5IoNRK aLetL50kvlLHFAIvNmJZosGNHVvNXaTzg6287fPt+DJWquvX5f00enUVwEnx1+GUVpoM769MLjxR JcQ6Pp/2GcX149u5jnUWxTzUMTDEodV8r/lps5rW8GfEXQ/HF7rNhpdtqNvPoc8MFwl5aPCSZLeK cbSwwSFmUEZyOCRhkLK+iffb5bh1a6rc6miiimAUUUUAFFFFABRRXk/ij9pj4Y+EPEmpeF9V1Caa 90yNZpY7GJrlghM0YLFRsBaeBrZYwxkMx2lB1pXV0u/66L8Q6N9j1iivBJP2yfhrJ4P/AOE60nSd c1TS7m6tNO0yK0thJe393M9yskKW4O5fK+xzli2AVjd1zHskfd+Hn7Ufwt+KGoTWHhCfUbsQqh89 bcOjO2flCIzSgKVfc5QIu0EsA8ZcbSV2/wCrX/LX0THyyu1bb/O356Hr1FfPq/tqfCu38MyaprSX enatDO+nPps6PCZL5JZIZIYvOWOV1SRItzGJSouYdyK7Mi9zB8fvAlz8T7b4QxLqLeIrqIXCL5AW DyzbNcBvMZhn5VK7AC5OTt2KzqNpfn+Nvz0BJvVf11/I9Jorx6X9pXw5qGiWninwR4c1PxRoV/qc GmW2qWckMVvM8l3FalkMjqzr5kpRSoYF43DmJQJD6+jpIiyRsGVhuUg5BHrTeknF7r9SU01zLbX8 Nx1FFFAwoqO5uIbS3lu7mRY4oUMkjswVVUDJJJ4AxXkVz+1f8HtI8F/8Jz4svNf8OWMM72t9DqHh +9NxpsqgkpdpDHJ5Lbdp+Yj76d2AKur2Gk3sew0V494v/ar+E/gTXtO8O+J5tZt7rULW51BvK0yW cWdtDPJAJbgIC8YkkjZI0Kl3b5Au7KjSl/aN+GT/AA41b4o6TdapqWjaPbz3Uyx6bNbXDpD52/ZH ciLPNvMo6AlCM8GnL3d/P8LJ/i194KLa5ktNPxu199n9zPT6K8u/4aS+E83iXwt4UsdavLm98XxC 601v7MuooZLcqzCXzpI1jIJCDaG34lRtu07qt237Qvwkn0LWPE914nl0vSdCW3e9u9X02605FSd2 jgkUXEaM8cjoyJIoKOw2qzNkUk1+X47ff0Dldr+v4aP7mejUVw+nfF7wzqXi3SvB8VjrcF1rNtc3 VpLc6ZNDGywC3LbtygpkXSY3hcMCpwxUN3FPuu2guifcKKKKACmpJHKpaN1cAlcqcjIOCPqCCPwr zr9oLT/CWpfDC6h8caxqGlaPHqemSzXdheXFrNEy39uYyskEkci/PsGVYEdQCQBXz3qvwt8S+Pb/ AMW+K/hX+0740srp9Xm0lZoZNVjttFurufS0RRpr3CW8xiibUHLlQCb6N+WiVhnKrCDtN2/y6/d1 9TSNKUlzL+npZfP9D7Lor5jfx94F+E3we8PeCtZ/a1u7HULCBdUPieZP7VvtTtJmkeJpDdi5LhxK rB1wCsDmNUijdEtfCnVfFnxl0+TUfBn7UPjF47a2t5rtZ/Deho9rNKH3W0gFuf30ZjIfGUBOFZiG 2+jQwtKrB1HXjGzs0+e67fDFrX1MZSaaTW+q80fSVFeEeKfhR+0Cl/o2qaX+1Frw03TZprnVI28O ae9w8YhcKII4bcCVsnHlyKwywdRvjUHctfht8V761hvrL9qbxFcW9xGssM0Wg6I6SIwyrKwtcEEE EEda6JZdQUVNYqDv5VNPL+H8xc7/AJX+H+Z6R4mudas/DerXnhyx+26tBYzSWFttRvOnCMY0w8kS nLBRhpIxzy6j5h4p4evv2sdTynifw7otlMNOkaJZ7a1ubEXcuowlHl8u7WVjb2wlKxJtUqqs08ss myHqP+FWfGD/AKOd8T/+E9ov/wAi0f8ACrPjB/0c74n/APCe0X/5FrN4Gh0xMPuqf/K/uGpv+X8v 8zzPWviJ+15p3xOj8MRfBHT7nw2NOu5v7Yt9Dt5/tVzG8SqU/wCJwohWR5BKqTbXLfISEjlu47Xh nVP2k7/WW8GfGT4VaFPoniTxHqGmwyWVoLkQaU0fnSSXFzFMqxxyCaWGJ2iSXNoiyI7XJmi9C/4V Z8YP+jnfE/8A4T2i/wDyLR/wqz4wf9HO+J//AAntF/8AkWn9Sw+t8RTabXSp0vp8Gzvr6IXNJJJX TXXTy19V+rOc1d/2stb+E95Fb6T4S8O+N7ZL2JILSFNQsL2L7EzW3lCaZPJk89o48yb0VkfKSRlW Nnx54K+OMtpAfA/i240y4HhHUri9ttJsdLSyuvECvDJbELeRTypHPJNeFgZWVRHH86tlpNr/AIVZ 8YP+jnfE/wD4T2i//ItH/CrPjB/0c74n/wDCe0X/AORaFgqKVvrMPuqf/K/6uxuXvc3L/X3l74f2 nxIGgw6b4gs2g1DQvEl7bf2hrlrYySanpfnymGe3FjIqRM8LQrl442BR90XIJr3cvxttr+yvNMtI prSKPxA17b3EFrJJMftcY0sRhZohu8jcwy6hlUrKUkZXSH/hVnxg/wCjnfE//hPaL/8AItH/AAqz 4wf9HO+J/wDwntF/+Raitl9Co7/WoL0VRdv+nfl+Z2YHHvCu/sYz/wAaT+zKPdfzX/xKL6Gz8N9Y +MGsX2of8LJ8LaZoNtaFordLZlmN4xlfbJHIs7ERrGqDDxo7M+cIF2nva8p/4VZ8YP8Ao53xP/4T 2i//ACLR/wAKs+MH/Rzvif8A8J7Rf/kWlDL6MVZ4qD9VU/8AlZONxn1mu60aKpp/ZjpFel5N+erf 3WR6tRXkd58N/ixYWs17d/tQ+J0hgQyO3/CO6McADPQWmT9BzWJZfC34+6f4o1GTVv2otdbTNTni i0tbfw7p0kqssJaQzbrYxxDKNjaFB4ydzAHeGXUJJv6zDTyqa7f9O/mcnO+z/D/M93oryn/hVnxg /wCjnfE//hPaL/8AItH/AAqz4wf9HO+J/wDwntF/+Raz+o0P+gmH3VP/AJWHM+z/AA/zNzS4vi/L rmgXWs3Wgw6d5Mg122toHYmULII/s7tJlU3MuSwYuEU7YiWWuS0W6/a1Tw7qcfiK2+G766Bt0qa0 srtbV3DyLm4jN0zJGVELhkd2AeTK5jUSaP8Awqz4wf8ARzvif/wntF/+RaP+FWfGD/o53xP/AOE9 ov8A8i0fUaGn+0w6dKn/AMgHM9dHr6d79/6Rylz4q/a4h+E3hXxnFoXgz/hI7i2Fzr+iPol68qmS 3DRQwIl1mOQXGIZC7OqrIZSUETI3SeNrD9oO+1/xPJ4BsvBeiWx0trTStWmZ59QvpRaXTQGRSnlx JDdyxgKfMDBpH4yY2n/4VZ8YP+jnfE//AIT2i/8AyLR/wqz4wf8ARzvif/wntF/+RaqGDw8Zc31i D9VUfW//AD7+XoEpSkrWa9P+H/pnQWug/EHVYHj8TeJLSzuLDVzNp11pNnErS2ZhUASrcLMBKrST IXTaGCg4QOUFW6g+MOkeHdfsvDcuna/r6TRS6LdeI7hLayljIiEiStaQb0IxOw/dNksg3YJ25P8A wqz4wf8ARzvif/wntF/+Raq3vw5+Ltq1vbH9qHxOk17I0FuT4a0Z1DiN3+YC1HGI27j0zzULLqLs lioaeVTt/wBe/n66j9o078v5f5/0j0PWIfFi2t8fDl9bC7kmWS3N/biaGNBGAUVI3jY5ZScs+QZC ckAKOU0p/j1L4SnGuR+GLfxBdSqsP2QPJFZozIWZizDeUVpFUAclEJ3Bjjg/hb4G+Nur+CtFl1r9 qbWjq1zpsOpTwW2iaXL5UU5doiTLbtIchSMsTlkbHArrv+FWfGD/AKOd8T/+E9ov/wAi08Rk9GnU lTeLjo3/AM/P/lfzR6GHzWVOkoewhLVO7im9Ol77Pqnv83fvvDX/AAlf2a7Hi59Ma4F9OLU6fE6R /Zd58ndvdiZPL2lz8oDFgAQAzc98XtT+L2k+GrW8+C3hzRNc1sX6C4s9XmMML2uxy4WQOuxywjUN h9oYnY2MVhf8Ks+MH/Rzvif/AMJ7Rf8A5FrgPCPhP43+I/iLqbwftQeJF0ebwvpOq2ySeHNMWfFz JebVZDEYkZfIcsyxhn8xFY4hXOtHKaUqc5LFQtFb2qdXb/n35/0jirYh1KnO4Wu9lZL032N298X/ ALXlz4FvLvS/hX4XsvFNto+lGG1vLlJ7e81Cd7f7dt2Xa+XDaobsbWcmUiMo5wVbnPHPjv8Aay8N Xttonhr4NabqQieCCXVLbQLeazmQPbRbreL+2Y5Qd8k0qpMIlRXw0m2B55fRf+FWfGD/AKOd8T/+ E9ov/wAi0f8ACrPjB/0c74n/APCe0X/5FqfqlDl5frENmtqnXr/D6eZmpNNPle9+n3bmKfFHxp0z 43aX4G1/4d6bc+BNfMn2XV7LSpLk2nkRSTeVdzLKI4U37fKkeMZIWMI7SNLFg/D2y/a7sdMsrPxB 4U+H3ht7zVbu7vItDD3MEaXNpqFwJH86YMJVvns0kCF1bcdhVAxruP8AhVnxg/6Od8T/APhPaL/8 i0f8Ks+MH/Rzvif/AMJ7Rf8A5FqPqNBy5niYfdU/+V/h83shqclBwSevp9++4lz4K+JGuW+k+JR4 q1bwnrdz4ejOrWGjW+kvbx6guH2K1zbTvgvNcjIkK4AOcnLdD4Zt/Et5ZLp1/oElhDYahLYX8uuW 1lJNrVtGmI7qH7HL5aByVOJI0b5XBijyprn/APhVnxg/6Od8T/8AhPaL/wDItH/CrPjB/wBHO+J/ /Ce0X/5Fqng6D/5iYfdU/wDlZCum2k/w/wAx+hH44XFxDLqNpHbWUnhy8YLfS2jXsGqtMphSXyFM TxLHhUdCu7a5kUEoAT6/+0B5GnWMHg7R1vbq/jhvL7bHJaWdv5SeZL5f2xZJP3jFlAwcJIhHypNM z/hVnxg/6Od8T/8AhPaL/wDItH/CrPjB/wBHO+J//Ce0X/5FrljlNFRUfrkdP+vmv/lP+r+lvfef Jzc3g6Xpy6Lf+90v1vslte/aeANR8Y6t4VtdQ8faBFomtSy3HnWMciSCKMTSCHLJJIpYxCNmw5AL EdsV0VfOX7PfwZ/aC8CePfE3iHx98X7m88MX2r309poUqR3D3SvNMUuHYAJabt4l8uDAJcBgu3bX 0bV47BUsHUVClXVZJL3lft1ulr3tp+S8mtX9vVnWUFDmbfKtld7K7bstldt23bEZVdSrqGB4IIyD S0UVxmYUwRRCVpxGokdQjPj5iBkgE+g3H8z60+igArIuPCmizz/aEiurRi7yuLG9ntEkdyCzusTq rscD5mBPvS6j4t8K6RqlroereJtJstSviotbO4vY4559zbV2RsQzZb5RgHJ4rWrVe0p2krq/yuLR mP8A8Itpn/P1q/8A4OLv/wCO0f8ACLaZ/wA/Wr/+Di7/APjtbFFHt6v8z+8LIx/+EW0z/n61f/wc Xf8A8dpH8M6TGjSSXmrKqjLMdZuwAPU/va2aoa7pEOv6Ne6JcXV1bRX0DW7zWspimQMMExuOUYdm HIPIIIBpOvV/mf3hZGbqdrqWnwLP4b1kvcRI0cGnXs4lhvJPlkKmRsyrIY0dVYOVTeXaOTbircWk X90ZZdY1e5cTqo+y2r+RDAQzHKOgEpYhlViz4OwEKmSK43TvgH4F0Oz0+y8OPqekrpmsHXYGtbsh vtH2CSwXJIP7tIJAqRjCIsUUagRII6b4W+Cn/CMW2p2knxT+IGtR6lc3F2v9q69LMbVpmRvLiYbW EKBNqIWO1Wbkk5FOtLk039Nfv/phbU7L/hFtM/5+tX/8HF3/APHaP+EW0z/n61f/AMHF3/8AHa0b K2FlZW9mJpJhBEsXmSY3vtAGWwAMnGTgAe1T0nWqX+J/eCXkY/8Awi2mf8/Wr/8Ag4u//jtH/CLa Z/z9av8A+Di7/wDjtbFFHt6v8z+8LIybTwxo9pOLny7m5kWRZYze3k10IXAZQ0YldhG2HYZXBIOD Wjc2tteQtbXlvFPC+N0ciBlODkZB46gGpaydP8XeFNX1a50HSvE+k3up2W/7TZW97HJPBtYK2+NW LLhiFORwTii9Wfv6u3XsGiI4/CWlRIEW61kgf3tavGP5mXNO/wCEW0z/AJ+tX/8ABxd//Ha2KKPb 1f5n94WRj/8ACLaZ/wA/Wr/+Di7/APjtUNRtPEVlfWVt4c1KSSzupFs7wXLrM2nqqySmdGc73dsL FtYuAXicKFjkWTp6878XfBPRvFOk61ptn4t8VeGZ9a1pdefUPD2o/YLq3uBbx2zeW6Lgq0cfIcPl nLdQu2oV5Xbm7+uuv9f1YGux1z+GrKY+ZcXurSSEDc41O4j3H12o6qM+igD0Apv/AAi2mf8AP1q/ /g4u/wD47WNYfDeO18V6f4rvPGPim9k0ux+x29lJq86WbMd4aWaBGCTyESMAZA23CkAFQR2NSq1S y95/ft5BZXMf/hFtM/5+tX/8HF3/APHan0/QNM0yZrq3jnknO4Ca6uZbmRFbbuVHkZiqnYhKqQCV BxnmtGik61Rqzk/vCyOF8A6Fpd/8PvB2oXb3UMyeH7KAPb301tvUxRkBxG6h8H7u7O3c23G5s7F/ 4Yu1a1XQ9avLVGuF+3efeT3DS2+DuSMvIfLcnZ84+YLuxgkEYvhTw3Y+KvhF4M0zUZJkigstG1JT Ft3eZatb3MY+ZSMF4VB4zgnBBwRVg+DMcNl4tsv+FkeOmHiq+nvklOuz+ZpZkYSBLRs/uo0fJVFw u07GDKMV0YmvUjiJJPTmf5voJJcp1kvhLSponhe71oK6lSU1u9VgD6MJQQfcc1g6Mix/GjxSiKFV fCuhgADAA+1avwKh0f4SjR5tIuf+Fh+MbufS7WC0lludRDPfrFN5qtcnYN7HLIegKO/GW3CDRtf0 KT4++LNGj1qwbUB4Y0ZTaC5QzArcao7DZndkLLGx44Einowzph5VKlKtdt2j/wC3QE9Gv67notFF FeeWFFFFABRRRQAUUUUAFFFFABRRRQAUVwnjz40eCPhv4g0Hw54oOrxTeILxbOC5h0m5ls4GaKeQ Ga4VPLQAW0hYbiyL+8dViDyL4bd6v+zVoHiLxHrNn8TvE3hbU7Gy1TWdYj+x6tbfZFvxbXlxcyLI geJh9ihyisiLLIkbRh5Vid2tq9v+Db/P7g8kfQfin4Z+D/GXinwp4y1/TFuNT8GXU13pcjYKo0sR jcMpBBGRG4PVXiQgjBB6rrXhWqf8Kk0Dw1b+B9S8U+PLprHUNH1J554NZ1W7mmtpYr+Pc7xys2fJ QzAf6pZED+XujrH8FfF34C/BvQ7q8ufjd4u13SdTEuqWT62up6o0FqsttEUgcxM7QxyXttBk7n81 5I2ZnjZItJVZ1IQhKV1G6S6JXbdvne67tita79Px2/A+jaKw/Bnjbwv8QvD8XirwdqyalpU1xcWs dwkboGkgmkgmXDgH5ZYpF6dV4yOa3KxTTV0Nq2jCiiimAUUUUAFFFFABXnnxM+Mtl8L57gan4K8R 6na2mh3XiG4vNPax8qK1tSguSRNcxuWjEsTEBTkSDbuIYL6HWdq3h3w/r6Sx67oWnaik9nPp0q3d qkwe2n2+dCwYHMUnlpvQ/K2xcg4FVDl5vf2FK9vdK2neKbW+sNPvLnTdRsJdQuHtBbSwebJDKhcM srQmSNQDG3zb9nQbskV5L4W8d/APw78YvFl+1zbeH/GPiSwm1TWJdU1K0RTY6cfIW4QiZlEDqk0m 5M4+zzCby5Iig7PxXb+KvAyX998JPhnoOpG8t73V72yikj06XUdVL2ojZpsFd0kf2je7qzHy0+YY wc/RYdX0fTfsmn/ADRdNt7u1E99b2V3bJGZrh7dZ02iJfMHlmV3YgFjahQrbkNCxMqanGDaUlZpX 1SalZ232T82tNSlTva/9bom1T9of4ZaU8VrJda7NfSraSnT4vD1+byOK5YKkjwGEOihsxtkAiVTB jz8RGWP9oX4QzzajDaeKpbv+ydRj0m8ktdLvJ44rqS7js44vMSIqzNPMqDBOdshHyxSFeX8JfCzw U/iqHWNe+B8Ph6+04Q6HouoxXc13c+THbi5A86P/AFECSSXMSlmALRJggyRpXaaf8DvhRpciS2Hg uziZLq0vuHkIee1jMdvI4LYdkUkAtn1OSAaybn2XTr9/T7jflw1nacuv2V8vtff+R3VFFFWc4UUU UAFFFFAHMfC//kmfhL/sBWX/AKIStzVtTtdF0251W98zybWMyMsUbSSPjoqIoLO5OAqgEsSAASaw /hf/AMkz8Jf9gKy/9EJW9qWm6drWnXWj6xp9tfWF9C9tdWtzEssM8TqVdHRgQysCQQQQQSDW+L/j 1PV/mKOyPL7/APae+Fnh7QYdc8Zya74eebVpNDFjcaNcXlybxJjD5KCzWdJS0gKKYmcMyugO+N1X P8MeKP2eb34veKfHnhXV47/xjJoFsmq/Y9PmlkFmkrCKVNkRaQz7oNu0t50UVs8YKFWbu2+EHwld 9Gkf4XeEWbw7KJ9HY6JbE6dIJDKHt/k/dN5hL5TB3EnrzXmx8AweHPHV9ofh39lnwxP4X1Kylgv/ ABCdRtxd3QknheS3khaIu0DbmkKmQhjCwKDK7saVatShJRl8UbO3XVOz8rq9vL7rkoylouv4f5/1 69noH7QHwm8WTPD4V8Sz60FZQsmnaVeXMUqtJHEskUiRFJIi0vEqEpiK4bdtt5jHB4X/AGkPgt40 1rSvDvhfxqmoahrQhaxhjsLoeaJYruZCWMYCgx2Fy/zEYCpnHmxb8r4LeDLvXvA2m6h8Zvgb4Q8N +Lbazi0+5t7WztLiIoPKuW8p0BxH9qaSQx8BJVbaZAqzydh4f+Dnwi8JapHrnhX4V+D9G1GEkx3m n6Ha206EqUJDogYfKzL16MR0NE7cz5dr/h8uv4ErbXe34/5HYUUUUgCiiigAooooAKKKKACiiigD A1H4f+A9Y8Rx+MdW8E6Be6/DZtp0eq3GmwyXiWx3EwiZlLiM+Y+Uzt+duOTXLyfs5fAh7nSLiL4T eGbVNDS7is7W0sEtrTZdQvBcLJbRhYpleOWVSJEYDzHxgsSfR6Kbbas9gsctH8LfhtFHqUI8BaA0 WsWcenX0T6fE8c9pHC1ulsylSPIWJ5EEWNgEsnHztmlf/A74K6osa6n8IPBN2sMnmxifw/aSBH2w puGYzg7ba3XPXEEY6IuO2opLTYHruZfhjwr4Y8E6HbeGPBvhzS9B0ez3/ZtP0yzjtbaHe7O2yKMB Vy7MxwOSxPU1qUUUAFFFFABRRRQAUUUUAQ3lnaajaT6fqFrDdWt1G0M8EyB45UYYZWU8FSCQQeCD Xz94h+Cfwe+C134G8deHNI8I+D7/AMP3cNnJrQ8LROv2aOyvhcGZ4nieFGjllkeYsUQxq8gKKxH0 PVDWdA0LxHaCw8Q6LYapbK28Q3lsk8YbaVztYEZ2swz6MR3qXBOSl1RSm0nHozw+z8a/BPXdb8Oa vovxtTVns/HY1S3XUGe/zdX1tf6fFYWrkD7OvzTMirnaqZI2Shj5pcJp01pD4b8WftHX19o/iPV7 7QoUvm1u2vblbVJrC5EarcJtkS6Eu8Sq8Dbnkz5aQQ2/ter+HLTwf4vs9N8G/s0eGLvRbSyhmg1i 1Fpavbzgu3lJAsBYKhsrD5ww+eWAhdsMjx4Uum/FO40fxHff8M9eAm1LTfENpceGbYXETx3Vpdy2 76tI0jwI0UzGfUXLlAzsxyjfeku324O0ls/Pp0bta1/mtxqdvdqK8WtvL79733/I4vUPBV74gsNR 0nw/+0b4mXVtP0a7NtjXdWe4sbmMWMUW9ImQXIKjIEkbSF7veBcFww6uTSNM+KHxPuvEPwr+P+u2 8V7p73LWdkl9daT9ojWNI7qGZZkti677RjB88U0bFnjcSiRbkGk6jd/GDTtXf9lrSraXUrSfSNR8 SPqcKpHYMts7rNEkJM77rO3iVXBCmAbJBG29vYNA8F+DvCYkHhbwno2jCWWSeQafYRW++STZ5jHY oyzeVHuPU+Wuc7RU8kbWlrpH8r/PW2+q1T1CU20nFJfFtf8Amtt00v2vo9U7mT8MvA+q+AdI1LSt W8Y6j4ka71e61C3utQmuJZ4YJGzHAzTTS58tQEBTy0IGfLDFmbr6KKptt3ZmklogooopDCiimTTQ 28L3FxKkUUSl3d2CqqgZJJPQAUAc38L/APkmfhL/ALAVl/6ISunrkfhJfWV/8MfCr2N5BcLHotnE 5ikDhWEEeVOOhHpXXV0YxNYion3f5ijsgooornGFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRXnvxH+BPwz+Kurxa1438H6Fq9 zBo15o0cl/pcFzIkdwYzuVnUlSmx9uOnmv0yczNtK8VdlRSbtJ2PQqgvbOz1Kzn07UbSG6tbqJoZ 4Jow8csbDDKynhlIJBB4INec+DPgyngvw3B4TtPETabomjeJrnxBo9n4bs20pIbeW5mufsM6JI6z Qhp3Uqqxqyqg2gjJ8etb34SXktpNp/xc1fSdUs7DxN4gsBHpGo6eTZ61dHUPNuYIWjl8tNrRqHMU sjhXjKSmKSqk+W8o9BRV9/63PoT4YfDXwv8ACLwTp/gHwdBNFpenGQxefJ5krs8jSMztgbjlj+GB 2rqq+dbPToPBNt8QNV8T/tB6z4g+26clrpeY9TMeki5JEQ2W1wTPcsbizz5AhmRWiKCIToTb8O/A rxvdWGtWupfFfxLc+H/Ekxk09Tq+r22paJbbYZYJInuJpJfPEkKK8c3ZmIKEyxTVVxE61WVWq25S k7vdvV6v13+ZcaN17rWiT7dFp8vx6XPf6K8T8OfAvxzb2HhCLxR8XfE19qXh66hvb7UYddvozqQi uJZhbXFusiwyqwm2vJsXcIkXywmEX2ypVmrkzg4ys/8AMKKKKCQooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigDA8Sr43aTHhK80iBfsc7f6 fYyT5uBt8oZWePCHLZGCeOorDsvFfxEt9H043ngKbWNTl8RyaVqP2NorCKzsftEypf7Z5W8xBCsL lI2d2MnyjIKr3dFSo2le476Wseb3Pi/4w6drGi6cvwzs9Ws7261htT1FNRFmNPtoLoCwCw4mM8s9 u2770a74zu8veEXiri6+J8V3riW37MHha1vdN1DSNHsNQhu4LuPV9Ga9t0utoMcLQGG1eR1idmRX QhfNCfPznxE+BPjrTYtQntP2rbzwTZ6rqurX0caQXxijW8vba7UZOogq8YhltyyGOLZdt5UUErF3 0tT0vwH4y8NWkVl+0Lfh9OvBrmna3BrF1JDMkTxzXsRT7UUugH0+8OGDC1DOkQQwHETk4Qly+87a LRba27a7u+y7aFwSnUXNorpd0k3v302SW/mdP4jhk8PeDdO1DSf2d/CV7rI8iWLRfPSGOBbeRIoG E4s2VPJgCNllRY9qojEDcI4PiT8VNE1vw9pum/BGeXQNbiuL7V7m78RyteaBdGWWSaGWNoZBLukk ijhWGRkbJ8seRGJK8mvvhdcWnxe1jXPBn7Tl3NrGreHTY+GvC+panqMaqu8CM310t291cRo11PtM iqyG/UwPG4Rl6+TQJPi7b6t4V8IftOSn/hI9Nht1i8i8W+FlYObS9mtyt3CB5t0FBuY4xkSSKTKG haHarSabjTlpo9v5tevbbz313CjWpuMXUg29evbS2i+fW1reR6HD49+Mc1vqEh+Fmkvc6fHBdRw2 euTSwXsTrc+ZEs8tpEUuUaGMeX5bDMqBmTczJd0Tx38VdS/siHU/gydLnuzbNqLS67HJBYpIZPMV XSItLLEIjuARY2MsO2Vg0hi76xs4tOsrfT7d53itolhRp53nkKqAAXkcl3bA5ZiWJ5JJOanptpu9 vz/zfr6szaW0W/na/wCS/LZLzbKKKKkAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAzdb8N+HvEtutp4i0Ow1SBSGWO8tkmUEMrA4 YEcMiMPdVPUCsax+E3wt0zSE8P6b8N/C9ppcYkCWMGkW8duokWZJAIwgUBlurkNxyLiXP32z1dFA 02tjnv8AhXngL+2Z/EX/AAheh/2rdDbNffYIvtEg/d8GTbuI/dRcZ/5Zr6CrOjeDvCXh2VbjQPDG labKlv8AZVktLOOJhF5jy+XlQDs3yyPt6bpGPVjnYopuTe7/AKRKSWwUUUUhhRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRWBrfjrwt4efU4tW1J430azt7++SO2llaGCeSWOJ8IpJBaCUcZxsJOBg1c Kc5u0E2/L7vzdhNpbm/RXEP8avhimoW+mf8ACUxvPdX6aZH5dtO8f2h22CNpFQqpEn7tiSAkhCMQ 5C1NqPxe+Hela1q3h7UPEPk6jogj+1wG0nJLP5G1IiExM/8ApdqCkRdgbiIEAuoO/wBRxV7ezlf0 fp+bX3hzLe52NFcdpnxc+H+snV207WppYdCsl1DULk6fcpbwxGJZv9c0YjZxG6sUVi655UEEVsW3 jLwpd3up6dB4hsDdaMyrfxNMFa33RRzAsDj5fLljbd0w3XIOIlha8HaUGuuz20/zX3ruCknqmbNF c3pvxG8CatY6JqNn4q04w+I4Un0sSzCKS6V4ftC7Y3w4PlfPggEDqBXQwzRXESXFvKksUqh0dGDK ykZBBHUGoqUqlN2qRa9VYE09h9FFFZjCiiigAoopCcDPpQAtFedTftA/C2B5lfVdXKW1sby5lTw5 qTw2sIaRS80ggKRDMMv3yv3DWtoPxW8EeJtQ1bTNIvtQafQ4vO1Az6ReW8duNiSbTJLEqb9kiNsB LbWBxiuueAxUIuUqUkl5P/LzQlJN2TOvork4/it8OJvD8PimLxlpjaXNcQWonE33JZpRDGjr95G8 wlSGA27W3Y2ti/pnjjwprF++l2GtwNdxyyw+S4aNneOWWGQIGA37XhkB256A9GUnOWFrxTcoNJab PcFJPZm7RTZHEaNIwYhQWO1Sx/ADk/QVzWm/ErwTq1rpd3Z64uzWrqSysVmglhklljV2dSjqGUAR tywA+7z8y5iFKpNNwi2l5er/ACT+5jOnornPFvxE8FeBIbW68XeIrbTLe7kMSTzbvKUhlQmRwCsa h3RNzlV3Oq5ywBwX+Pnwoit1uZvE8sKOgIEum3aPvMphWDaYg32gurAQY80gFghUZrWngsTUip06 cmn1SbE5Jbs9BoqK1ure9toryznjmgnRZYpY2DK6sMhgR1BBBzUtczVtGNO+oUUUUAFFFFABRRRQ AUUUUAFFcrbfFHwHeatHolp4hjnu5WuERY4ZWRjBLDDMRIF2YWS4iQnOMlv7j7dPw54t8N+LrN9Q 8OaxBfW8c89uzxkjDQzSQScHBKiSGVQ33W25UkYNbTw9aEeecGl3s/P/ACf3MV1exr0VyWj/ABW8 A6/rumeGtG18Xeo6xpCa9ZxR2sxElk5YJMX2bUBKMAGIORjHIrramrRqUny1YuL81YE09gooorMY UUUUAFcb4l+F+keJ9avtbuda1i0fU9Og0u8gtJ0SKeGFrhk3ZQtkfa5h97HzA4yqkdlRWlKtOm24 O1/+HE0nueaaT+zv8LtM8bSfEOfQxqevSTG4FzfrHLtk8x5RIBsAMqtI+2U5kVSEVggCh2q/s/8A w61Xx9d/FFrW8tvFNy8cqalbT7JYHRIEBXghhttoxtcOnL4UeY+70miun+0sZzc/tZXty7v4e3pp tsHKjidB+DXw88O6frmnWegpMniO3Fpqk1yxlubqEW8duUknP71wUjySzElnds5auHn/AGTfh9qH jg+NtZv9S1G4T7BdQPcOGuFv7QzCK6eX+PbHJEgiK+WRCpcSdvbqKqlmmNpuThVaclZ69NP8l9wu SNrW0PHNM/ZO+Duk6Mvh6202/OnJb/ZVha6OQht723b5wA5JXUro5LEgsmCAiqPUPDPh3TfCeg2P hvR4hFZafEIYECIgVR2CoqqB7KAB2FadFZ4nH4nE/wC8VHLrq769wjCMdkFFFFchQUUUUAFFFFAH mkX7P/gcazPrl3JeXs91pc+kTG6jtndoZmnZ9s3k+dESbqbPlugO4ZBwK6Gy+GXg+xv/ABLq0WmK b/xYAmpXhwtw0YtobYRrKoDqmyBWxnhizDGeOqorqnjsTL4pva3yun+aX3ISik7r1PH5/wBlz4b3 eojWr271u51R76x1K4vZLiIvc3FijR2bugjEY8pHZQFVVYH5w5ANWNG/Zg+Enh+70W90fSb23k8O 28Vrpv8Apjv5Ecd6l6oBbJJ82MAknJRmXOGNesUVu83x7VnWlb1fRWX3LRdlotCPZQ2sZmoeH7DU LXVLbfdWr6vbm3uLi0uZIJ1BQoGjkUho3AJwy4IPPWvMtb/Zk8D6tbwy/bL6XUbPRrzS7ae+Kzwt JcwLDLcTxKI/MdgiblVkU4OApOa9gorDD43EUHejNr/hrflp6F2R59qvwM8Ba54a0Dwnq9teXOm+ HbKSwgha5bbKkkQhlaXOd0jJvUycSASy4Yb2zl6r+zX8NtdheDW/7X1FJrkX80d5fGeGa7EzSi4k hcGJ3G5kwyFPLwm3aAB6rRVwzLGQty1ZK2u73vf89RckexR0PRrHw7omn+H9MEos9MtYrO3EsrSu I41CLudiWY4AySST1NXqKK45Scm5Sd2ykraIKKKKQBRRRQAUUUUAFFFFAHjtx+yf8HL3UNR1S/0q /uLnVrSWxvZDetGbiKRlZ/MKbd8h2DdM2ZXyS7scEdF4B+B3gP4b+ItU8V+G7W4Gqa1JPNf3Ezqz TSTyJJK/CjbuMcfyLhBt4UEsT6BRXfUzTG1IOnUqycXpa7tbsRyRvexxWj/CTwro2r6HrUMl9Nce HrNbKx86YEKqrMiM5CguypczINxIAcnG75q7WiiuSrWqVXzVHdlJBRRRWYz/2QplbmRzdHJlYW0K ZW5kb2JqCjQ4IDAgb2JqCjE5MDg0CmVuZG9iago1MSAwIG9iago8PCAvTGVuZ3RoIDUyIDAgUiAv RmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGlVstymzAU3fMVZwkzdYIEfk13fc2408zk wUwWdRcKloMSW2AQ8eSD+p+9EiaJbUja1N5gkHTPPefcgze4wAYhfVnIY4xHE5QS19A4/VwxpBUY qvRowRLhySh0Hyi7lHtuKetbbqvEfArGMBwxxNPxizrc1rEYQlerPdlTtIm52wPaQruH4QTpGp8S xOwkjJtHzSU9jdjJcMwnDMkap99oAW1OlvB/B15yh6+Ja7XnPOrdlh9YDmLw0cEZP+FfK5NhLQJv Cr8YPARgdCHLSuVa6VvMkssKqdBIc23KAHSQn6+gNAQqtVYrQTcHfAgfAX4h+U6APMvKXwEaxseA tiJARBgeYTIJ7YDV6xtZIl/ijB46oJdyU8vK2DUEmUA9Yis0/c6fcXQS4zVE7xMz4cc4qC9HRSpV y4rtNIR/0nTqvU59l5QsmjotD6q9Q0oWdVCXEGEkGO4Dj3zjS1lUMKVI7y1120ylGWlmJDJB9y25 O+627+GMjTpIIyM5fQrrnbm/UvdkGQvFOsaWvDq7JDtVch5A6AUqaRoogbczT6dou+nYF41NwwMe yc62vucXRWvVolSCOm4VdL5usfyYXZ1D6nSHuapXwpDtd/K6yfJ6jdwlL4/HPfIiuXvDLvu98biD XCuvznUqrZyWzIKk3Ult0OHXBbZ2usX/Cc3HHTzP/QexUguSsZV8PzugKtSVXGDpBjgvHeDD8X1J dX9mdFEd8YZq7ygUiep/CsWIP1PtuWQlGz0B3TOONXVL86ZW7eUCHwfz4Cn+Oh28i52jVkYxonFf KLzSynGMsZBeFRTy+4RQLzNjxdC5Qa3TfF2QyW9WsrFGRsFPSeI/2NZyvXLT+0hX8o1IOJ5IWz8O +YEgVD+vTWVo2G2JNBP6llLH5egHqkbZAOUA3tUU54LsZEyT9VnurPNWOPUgiQ5M6/lNGWtKsl1r kt6/CeeyTGVharFCaV/YESW//fI4BJ3Nh6GV4HS2HuFLTpJf/AGeVf5DCmVuZHN0cmVhbQplbmRv YmoKNTIgMCBvYmoKNzUzCmVuZG9iago1MCAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMg MCBSIC9SZXNvdXJjZXMgNTMgMCBSIC9Db250ZW50cyA1MSAwIFIgL01lZGlhQm94ClswIDAgMTAy NCA3NjhdID4+CmVuZG9iago1MyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdl QiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSCi9DczIgOCAwIFIg Pj4gL0ZvbnQgPDwgL0YxLjAgOSAwIFIgPj4gL1hPYmplY3QgPDwgL0ltNiA1NCAwIFIgPj4gPj4K ZW5kb2JqCjU0IDAgb2JqCjw8IC9MZW5ndGggNTUgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBl IC9JbWFnZSAvV2lkdGggMzIwIC9IZWlnaHQgMjQwIC9Db2xvclNwYWNlCjEzIDAgUiAvSW50ZXJw b2xhdGUgdHJ1ZSAvSW50ZW50IC9QZXJjZXB0dWFsIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRl ciAvRENURGVjb2RlCj4+CnN0cmVhbQr/2P/gABBKRklGAAEBAAABAAEAAP/iETBJQ0NfUFJPRklM RQABAQAAESBhcHBsAgAAAG1udHJSR0IgWFlaIAfZAAUADQAIADQADWFjc3BBUFBMAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAD21gABAAAAANMtYXBwbG2BwMt+z50fom3mAhUtQ2AAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAADnJYWVoAAAEsAAAAFGdYWVoAAAFAAAAAFGJYWVoAAAFUAAAA FHd0cHQAAAFoAAAAFGNoYWQAAAF8AAAALHJUUkMAAAGoAAAADmdUUkMAAAG4AAAADmJUUkMAAAHI AAAADnZjZ3QAAAHYAAAGEm5kaW4AAAfsAAAGPmRlc2MAAA4sAAAAZGRzY20AAA6QAAACQm1tb2QA ABDUAAAAKGNwcnQAABD8AAAAJFhZWiAAAAAAAABlcQAAOjEAAAmWWFlaIAAAAAAAAGpaAACvcgAA GvlYWVogAAAAAAAAJwsAABZ3AACullhZWiAAAAAAAADzUgABAAAAARbPc2YzMgAAAAAAAQxCAAAF 3v//8yYAAAeSAAD9kf//+6L///2jAAAD3AAAwGxjdXJ2AAAAAAAAAAEBzQAAY3VydgAAAAAAAAAB Ac0AAGN1cnYAAAAAAAAAAQHNAAB2Y2d0AAAAAAAAAAAAAwEAAAIAAAAhAHIA7AGCAjUDAQP9BSQG agfOCV8LBQzWDsQQwhLcFPIXMxlkG6cd6iArInIkpybhKQ8rOi1HLzYxHTMHNO420jiyOow8WT4h P+ZBnkNSRP1GnUg3ScpLWUzUTlVPwlEyUplT+1VZVrpYDllfWrBb9F00XnJfpmDeYhFjRmRzZZ1m wmfmaQpqKWtGbF5tdm6Nb6Bwr3G/ctBz4XTxdgB3DngeeTB6NnsZe+58wn2WfnF/SIAigP2B2oK7 g56EgIVphlOHP4gviSGKFosNjAWM/439jv6P/5EBkgOTBpQGlPuV4pbGl6uYkpl3mmKbUZw+nS2e Hp8QoASg+KHsouCj1aTHpbqmsKedqI2pfKpsq1esQK0org+u/rAAsQeyC7MOtA21DLYLtwe3/7j0 uem63rvQvMG9sL6fv4rAd8FmwlXDRMQ1xSXGGMcNyALI+MnpysDLiMxMzQ7Nz86Qz0/QDtDJ0YTS P9L506/UZtUd1dPWi9dC1/jYrdli2hjaz9uG3D3c9N2w3mXfDN+Z4CTgreE54cbiVOLj43XkB+SY 5SzlwOZT5ubneegM6J/pMunE6lPq4+t07AXsk+0h7a/uO+7F71Lv4PBq8PPxevIC8ozzFvOg9Cj0 rvUy9bX2L/ai9w33Zve++Av4Rfh++Lj48flk+d761Px9/ov//wAAACQAfAECAZACQAMUA/4FIwZc B7kJOwrSDIsOYxBKEjoUQhZaGH0aoRzHHu4hHiNLJWQnhCmUK3MtJC7IMHEyGjPCNWk3DjiqOkI7 2j1tPvxAiEINQ4tFBUZ8R+dJVkq1TBRNbk7DUBZRalKyU/dVPVZ2V69Y41oTW0RcbV2bXsNf5mEG YiRjQ2RfZXhmjmelaLxpz2rha/NtCG4ebzJwSnFccnZzkHShdYh2ZXc8eBd49XnTerF7kXxwfVZ+ On8egASA7IHWgsCDq4SWhYKGbodaiEiJN4olixKL/4zrjdWOv4+jkIeRbJJSkzeUH5UKlfOW3pfK mLaZpJqRm3+cbJ1ZnkWfMqAfoQqh9KLgo82ktKWbpoSnaKhaqWaqe6uIrJqtpK6tr72wxbHMss6z 0bTWtdi22bfZuNu52LrZu9684b3mvu+/9cEAwg3DG8QqxS/GHcb5x8/IpMl6ylHLKcwAzNbNrM6D z1rQL9ED0dfSq9N/1FPVJdX01r/Xjdha2SbZ8Nq424LcSN0H3bbeZN8R38Dgb+Ef4c3ieuMp49fk g+Uu5dbmfeck58nobukR6bDqUerx647sKuzG7WHt++6R7yjvwvBY8Ozxf/IS8qjzPvPS9GL08fWB 9hD2nvck95z4GPig+TH51PqR+2f8Y/2E/pv/IP9Y/4//x///AAAAFQBKAJkBAQFxAfUCjgM8BAAE 2wXTBtsIAAksCncLxw0lDooP+hFxEuUUWRXLFzgYpBoKG2ccvh4LH1AgmCHfIyckaiWpJuMoGylP Kn4rqyzSLfYvFjAyMUsyVjNnNHA1dzZ8N3w4ejl5OnI7aDxlPWQ+Zj9mQF9BWkJSQ0xEQUUzRiFH EEgASO5J2UrDS65MmE2ATmZPT1A4USRSDlL5U+RU0FW+VqRXelhKWRVZ4lqxW4BcT10cXepeul+J YFZhJWH0YsJjkWRgZSxl+WbGZ5FoX2ksafhqw2uNbFZtG23VboZvMG/ZcIJxJnHNcnVzGnO/dGV1 CXWvdlV2+neheEl48nmbekh69XujfFN9Bn26fm1/JH/bgJWBU4IPgsyDioREhQCFvoZ7hzeH84iv iW2KKorni6SMYo0ejduOm49akBuQ25Gbkl6TIZPklKiVa5Y0lwKX0ZifmW+aQJsTm+Wct52LnmKf OaARoOqhxaKho4KkZKVFpienCaftqNOpuqqhq4isdK1erkmvN7AjsQ+yALLys+O02bXNtsO3t7i0 uau6pbugvJu9mL6Xv5PAjcGKwofDhsSAxXnGdcdwyGbJZsp6y5PMp822zrrPwdDB0cDSydPV1N3V 89ca2ErZg9rI3DPdrt9K4QXi5uT652LqD+0v8Of1kvul//8AAG5kaW4AAAAAAAAGNgAAlUYAAFbP AABSqQAAkU4AACgQAAAVYAAAUA0AAFQ5AALcKAACqPUAAXMzAAMBAAACAAAAGAAyAE0AZgB+AJYA rgDGAN0A9AEMASIBOgFQAWgBfwGXAa4BxgHfAfgCEAIoAkICXAJ2ApACqwLGAuIC/wMbAzgDVQN0 A5MDswPTA/MEFQQ3BFoEfQSjBMkE8gUcBUcFcwWfBcwF+QYoBlcGhwa4BukHHAdQB4YHvQf0CCwI ZgiiCN4JHAlbCZwJ3wojCmkKsAr5C0MLkgvhDDAMhQzaDTANiQ3kDkEOoA7+D2APxhAtEJQRABFw EeESVBLNE0QTvxQ8FLkVOxW/FkcW0hddF+sYfRkRGakaQxreG30cIRzFHWweEh68H2cgFSDFIXQi JSLiI8YksiWhJooneShnKVcqRCswLCAtCy32LuEvyjCzMZwygzNtNFU1OzYiNwo39DjeOcs6vjvH PNs97j8BQBlBKUI5Q01EX0VyRoVHmEiuScVK3Uv7TRlONU9eUIVRsFLaVBFVSFaFV8RY5ln/WyBc QV1oXpVfwGDwYiZjZGSkZeVnK2h2acVrFmxvbcVvGnB0cctzJnSAddd3MHiJeeN7cn0jfuKApYJu hDuGFYf1idWLxo24j6+RppOhlaeXrZmxm7idw5/Dod+kkqdbqhis06+AsjS037eZulS9FL/fwrzF kMh+y3DOe9F11JHXu9rd3gPhSeSn6IbtlvV1+TT61/vt/Nn9pv6h//8AAAAWADEASwBmAH4AlwCw AMgA4AD4AREBKQFBAVkBcQGKAaMBvQHWAfACCgIkAj4CWQJ0ApACrALJAuYDBAMiA0ADXwN/A54D wAPiBAQEJwRKBG8ElgTABO8FHwVRBYQFtwXrBiAGVgaMBsQG/Ac2B3EHrgfsCCoIagirCO4JMQl2 Cb0KBQpPCpsK6As2C4gL2wwuDIYM3w05DZYN9Q5VDrgPGg+BD+sQVhDCETQRpxIcEpUTEBOLFAwU ixUOFZUWHharFzkXyBhbGPAZiRojGr4bXBv+HKEdRR3pHo4fNx/eIIshNCHfIosjXiQ/JSgmDib0 J94oxym0KpwriCx2LWMuUS9AMC8xIjIUMwk0ATT3Ne826jfoOOk57jr0PAU9GD4rP0BAWEFrQoFD mkSxRcxG5UgBSR9KP0thTIhNrE7WUARRM1JgU5dU0lYLV01YeFmEWpNbq1y+Xdxe/GAWYTpiYGOO ZL1l6mccaFJpimrCbAFtPm53b7Nw8HIoc2d0oXXZdxJ4S3mFet98Yn33f4+BJ4K/hFiF+YebiTuK 4YyOjjyP7ZGgk1eVGZblmK6afpxVnjKgDqH+pCimX6iSqsWtAa9CsYOz0LYvuJK7Ar15wAfClMU2 x97Kks1f0B7S/NXm2MTbrd654cbk3+iP69nunPDn8tT0c/X497T//wAAACUATwB4AKAAxwDsARIB NgFcAYABpQHLAfECGAI/AmcCjwK5AuQDEAM+A2wDnQPOBAIENwRuBKgE4wUiBWMFpQXoBi0Gcwa7 BwUHUgehB/IIRQibCPMJTQmrCgsKbgrUCzwLrAwbDI8NBg2ADf4OgA8CD4oQFxCiES0RuRJHEtwT cRQLFKUVRRXoFpEXOxfmGJcZSxoBGrobdhw3HPgdux59H0QgCyDWIZ8iayNOJD0lNCYqJyIoHSkc Kh0rHiwnLS4uOi9JMFkxcDKIM6Y0wzXkNwo4NDljOps79z1pPuBAZEHlQ3JFAUaWSCxJxktfTPpO j1AoUbxTS1TgVm9X/lmFWxJcoF44X8thY2L/ZKFmQGfjaYprM2zibotwOXHlc5h1RXb1eKh6XXwE faR/SoDugpKENIXch4OJJIrGjGuODY+tkUiS4ZR+lh6Xu5lVmvGcjp4rn8KhYaL7pJWmNqfSqWer BayZrjOvy7Fpsvi0lbYst8S5Xbr0vIu+KL/JwWfDB8Skxk/H+cmey0zNAs6d0BvRntMq1L/WZ9gI 2bnba90O3q7gV+Hs423k5OZT57npFOpQ64Psre3G7tHv1PDG8bXykPNs9Cz06/We9kj28veI+Bz4 r/kv+ar6JPqe+wL7ZvvK/C78h/zR/Rv9Zf2v/fr+Tf65/yb/kv//AABkZXNjAAAAAAAAAApDb2xv ciBMQ0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbWx1YwAAAAAAAAASAAAADG5iTk8AAAASAAAA6HB0 UFQAAAAWAAAA+nN2U0UAAAAQAAABEGZpRkkAAAAQAAABIGRhREsAAAAcAAABMHpoQ04AAAAMAAAB TGZyRlIAAAAWAAABWGphSlAAAAAOAAABbmVuVVMAAAASAAABfHBsUEwAAAASAAABjnB0QlIAAAAY AAABoGVzRVMAAAASAAABuHpoVFcAAAAOAAABynJ1UlUAAAAkAAAB2GtvS1IAAAAMAAAB/GRlREUA AAAQAAACCG5sTkwAAAAWAAACGGl0SVQAAAAUAAACLgBGAGEAcgBnAGUALQBMAEMARABMAEMARAAg AGEAIABDAG8AcgBlAHMARgDkAHIAZwAtAEwAQwBEAFYA5AByAGkALQBMAEMARABMAEMARAAtAGYA YQByAHYAZQBzAGsA5gByAG1faYJyACAATABDAEQATABDAEQAIABjAG8AdQBsAGUAdQByMKsw6TD8 ACAATABDAEQAQwBvAGwAbwByACAATABDAEQASwBvAGwAbwByACAATABDAEQATABDAEQAIABDAG8A bABvAHIAaQBkAG8ATABDAEQAIABjAG8AbABvAHJfaYJybbJmdphveTpWaAQmBDIENQRCBD0EPgQ5 ACAEFgQaAC0ENAQ4BEEEPwQ7BDUEOc7st+wAIABMAEMARABGAGEAcgBiAC0ATABDAEQASwBsAGUA dQByAGUAbgAtAEwAQwBEAEwAQwBEACAAYwBvAGwAbwByAGkAAG1tb2QAAAAAAAAGEAAAnIQAAAAA w5X4gAAAAAAAAAAAAAAAAAAAAAB0ZXh0AAAAAENvcHlyaWdodCBBcHBsZSwgSW5jLiwgMjAwOQD/ 4QBARXhpZgAATU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAAqACAAQAAAABAAABQKADAAQAAAAB AAAA8AAAAAD/2wBDAAMCAgICAgMCAgIDAwMDBAcEBAQEBAgGBgUHCgkKCgoJCQkLDA8NCwsPDAkJ DRIODxAQERERCg0TFBMRFA8RERH/2wBDAQMDAwQEBAgEBAgRCwkLERERERERERERERERERERERER ERERERERERERERERERERERERERERERERERERERERERH/wAARCADwAUADASIAAhEBAxEB/8QAHwAA AQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIh MUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpT VFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5 usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAA AAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEI FEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVm Z2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK 0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD9U6KKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoooo AKKKKACiiigAooooAKKK8J/aw+NHiX4TaF4Y0rwpdW+j3vjHWF0g+I9QtxJY6LGR80shYhPM53Ir /IRHIW4WuvAYKrjcRHC0fil3+9/cu132VxSkopyfQ92or58+CfhvxtN4jh8SaZ+2BbfEjRo5GOta ZDbWVzE8jRsFEc0Ts1uAzKwRcA7cHI4rpPGH7W37PvgTxdP4H8TfEKG31a0lEN2kdncTxWrnGFkl jjZFOTgjPynO7GDXXUyeu8Q8Pg06zSu+WM7r1Tin+FtVrfQhVFy80tF8j1+ivnz40zs37UX7O72t x8kjeISSjcOps4fTqDXX/DbXfDMWqfE7xRH8X9R17S9O12eHUYNVBhtvDkltEDPDG7qo8pcliw+T AHJYO7KplcoYaniFK/NHmtZ7+0lTtdX/AJb3du2+4p3bXn+lz1SivG/hv+1l8Hfij4pg8H+H7/V7 W/1BpTpB1HS5reLVo4w5eW2cjBUBGOH2N225BAw9B+NHgH4beEfFvjy++JPijx3o83ja5sHK6ZNN Jo87YLWqKQD9njAGGHyfNhclgKbyTHRk6VSlJT0suV63bS6WWqe/VNbph7SNrpn0BRXzL+x5+1M3 xk8P6b4R8ZPqd140jtbm8vL/APssQ2U6LOyqqumF3hGjyNoHB5JzXr/x18bS/Dj4N+MvGtteC1u9 L0e4kspigYLdMhSDIPX960YpYvJsXhcf/ZtZfvOblXZ3dk11s+mg4TjOPMju6K+Ivhf+0L4ntv2D vGfivxBrWt3fifw3Jd+HxqFzdub4XFw6LDL5rkvuiN2h5OQIsDoK9l/ZC+I2o+Iv2b9L8S/ETxN5 t/obXtrrGoalc4eEQSyHdcSueCsWwszHpyT1NdmYcN4nB0qtabTUKnstOrte68rW+9EQrxla3VHv FFePeCf2tPgT8QvFVn4P8M+LriW/1R2j01p9LuoIL5kUs4ilkjCkrtIwxXJwBnIrnbD9vL9mW7yl 744utNmFzJbmK50q6YgJIyCQtGjqqNtDDcQwDDcq8gcqyDNXJwWGndWbXLK9nezta/Rr1TRftYWv c+g6KjgnhuYY7m2mSWKVQ8ciMGV1IyCCOCCO9fKvxu0zxb8QP2t/Dfwr074qeN/Cmj3fgp9SlXw5 q8lniZbi4AkdRlWyFVTkZ4HNY5bgFjKsoSnyKMXJuzekVd6IJz5Vc+rqK+dvgp43+Jvg74x6p+zZ 8VPFNt4wltNCTX9E8QpEIrqS2EgiMN0gJ/eZOQSSxAJZm3rjevv2yf2edO8QzeH7nxw+22uvsE+p Jp1y+nxXG7b5bXIQp77gSmOd2K3q5HjFWdLDxdVWUk4JtOL2e11fs0nfQSqRteWh7XRXm/xU/aB+ G/whu7HRfEd9e32v6rGZtP0PSLN7zULpN23csacKuQ2C5UNscLkqQMnQP2pvhN4j0vwnqlje6lGv jLXJvD+nQT2TJMtxFkMZVz8qZ8vkZx5yZAw23nhlOOnRVeNKTg9nZ66N6fc9fJ9hupFOzZ69RXI/ 8LS8ID4mXXwmku5Y9etNDXxBJvjxB9mMpiJ8zOAykAkHHDAgnnHCaP8Atifs/wCveJrTwxp3jKd5 NQvF06xvW0u6Wyu7lmCCOOcx7ScnGSQvoTxSpZXjqqbpUZSSSeib0ez06Oz+59hucVuz2mivGfiz +1j8KfhHr03hDUP7b8QeI7WEXN1pGgWBuri1h2GTzJSSsaAKAxBfcFZWIwQa8y+P/wC2rpfh34Xa XrHw5GsWOveIdNsNe0ya60lZbYW73O2WCV8siybY5VIGcZG1skEdmD4czPFSpKnSaVRpJtWWvXvb re22xMqsI3u9j6zorxzSf2sPg9efDO4+K+t6nqHh3RbXUP7LddVsJI7iS4KhlWKJQzSblJIK54Vi cbWxP8F/2l/Bnxv13WPDmgeHPE+i3uj2sN68euWKWzTwyk7XjVZHJXhTk4yHUjPbmnk2PhTqVp0p KMHaTtonov1V7bXV9x+0jprueuUV4Z+1j4+8S+HvCmgfD3wFq02m+KfiLrUWgWd5b58+xt25uLmP HOUUquQVZfN3KQVBrF+MXiW4/Y+/Zx0XR/hzAtxLFeQaDa3+rO80VkZvMd7qfaMsAVbgAKGdcKQN h3w2TVcRTo8j9+tK0Y+S0cm+ivolq3Z7WV1Kok3fZK59G0V82fCHQPHer+KLfxBo/wC2rp/jzyZV m13SLW1sLm2ljzjaghkb7N25QDnvXH/tffHrxd8Ofj38LfD3h/XL/S9I05ota8ReTIRb3FnPdLbE XC427FEcoBbo0oIwwU10UOHqmIxywOHqKUuVtu01aybs1KMXrolZPdehLrJQc2tF6H2HRXxx+0H8 evF/hr9sH4Z+DPDXiG5j8P6fNZ2ut2trK/lSz6hK8fl3KhtjkQrHJGGGV3FhW78ZdG8WfEb9rfSf hdYfFjxx4R0mTwF/axXw7q8loPtC3cyB3QfK2VwDwD8q88VcOHKijSqV6ijGdN1L2bsk9rd2rP5j dVXaXS34n1VRXzn8GviP4/8AA/xT179nn4yeL7HxJJomhL4h0zxPhIJHslZUZbxQxCSLkNuY5IBZ mbcpqxbftw/BzVfFekeHPDmneK9YsdZ1a30SHX7fSjHpa3MxwqNLMyNkHJICE4ViMgc81Th/He1l ChH2kUlLmjflcWrp62tfs7PR6aD9rG15aH0JRXzXqC3P7P37T2jHTdWvW8F/Gm5uVv8ATriVpIdP 1pQrLPESCV8/cqFAeTkk7UjVPpSuPHYL6uqc4S5oVI8ydrdWmmu6kmt9dHsyoyu2uwUUUVwFBRRR QAV4n8dPjh8M/AHiOx8AfG3whI/g3xBp5nOtXmnm9003KyHFrJEEc78IHzg4yvHVl9sqK5tra8ha 3u7eKeJxhkkQMp+oNdeCrUaVZTrwco+UuVp9GnZ2aeuqa8hSTasmfD2lS/CDxn+0Z8PtZ/Y/0OSz fSZnPi3VNMsZrLSzYt/y7yROih5Ww+CoHUE7tmYuY0r4hfDn4c/BL4q/BL4h6TqFz8Xte1TUrKfT m0qa4m1a9uTttbqFipQJ88UincGOzeisWQv+gtnp2n6dH5Wn2NvbJjG2GJUH5AUk+mabc3KXtzp9 tLcRDakrxKzqOuAxGQK+mXFFJuNOpSlKEeW16nv3hJyXNPl1jeT91JWSVndXeHsXunr6Hy1baJrG jfF79mPwf4gG/U/DXhPUftcmS4MgtLeFsN35TqR39+OA1HRte1T4C/tO2Gj6bqF1PJ8Ub2aaC0Rv PktVvLZ5tgHJHlK5PYqDX3U0MTyJK8SM8edjFQSueuD2pQiqzMFALdSByfrXLR4lnTcJezTcXF76 Nxqyq9tm5W303K9iruz/AKsl+lzw74a/tM/s7+LNW8NfDL4Zaq+p3Dw+Xa29nos8MOnxxxkhpC8a LGvCxjbn5nUYAOaofsU2ZtPhl4h86wntriXxlqzXBmjKmVxNsLc9cbQh90I6ivdrXR9JsZpLix0u 0t5ZmLySRQKjOx6kkDkn1q0qquSqgbjk4HU159fMMP7Gph8LTlGM3FvmlzO8ebtGK15u3Trcfs22 nJ7f5WPnv9gsKv7NWhRJykV/qCKcEZH2uX1+tVf26pL/AFT4aeF/hzZ3PkRePPGWm6FetsDHyGZp cj0IkiiOR2BHevou2tLWzRo7S2igV3aRljQKCzHJY47k8k96S4s7S7MRu7WGYwSebF5iBtj4I3Ln ocEjI9TWizi2byzXk1c3NK+zbbWtuj126D9n+75LnwD4k+F+uj9sZvgZZWE8XgrXPEFj8RZQI/Oy YbeQSyHP3YpLhpYyDwDsx0Ga3xHsta0X4dftRfBrSrN5JNL8VWvi/wAq1jLFrC7mhnYBACQsUccT s3QKCTgA1+hTQxNIszRIZEBCuVGVz1we1RJp9hHfSapHY263k0awyXAjUSuiklVLYyVBZiB0GT61 7NPjGop0pTpX9nGn13lCcZc703lGPK/v3I9hvZ7/APB/zufFmvfGr4IeKvjr+z1/wrLXIbjRvDd1 eabci306a3hsnvLaKG0iO6NVBZo2AUdAhyABXD6L8Wvgx4N+E/xr+D95p4uPGOu+Ida0zRtJtNIk nmuWmcw2zB9mzKOQRlt4EfygttB/QYaJowVkGkWQV3EjD7OmGYHIJ465AOfWvM/gH8KNV+HOneLI PFEFjLca14u1HW7ZomEoWGaTMfJUEHaASO1XQz7ALD2dOVqfLyp1FeTVSU7t8nRyd1ba2qepLpz0 169vJox/CPwj+Jtz8MvA2kP8YvEfhCbSvDNjp19p+nW1jMpmjjAZ/Nkid89F4bHyjA614z8ZfhR4 z8eftWaD4J8O/F7X/DmuWXwvjdfENqxjuLkx30ysJhC0XDhsttKjcAcYGK+16Y0UTOsrRqXTO1iO Vz1we1ePg+IcThq88RFLmalb3Y6OXV6Pm9JXNJUU0kfEXwI8Ma/8HvFfir4U+PfBs9p8WvF+kX0n h/xyLyW9ttbZUdiPPcEwOrGNjkDdhd4VvLEnlHw01n4VW3gbTvCHx++J3iO3Hh0vEnws03Qbq0aa 6RyRHdYTFzLJIqSr5jqqPIQdoLKP02KqxBZQSpyMjoagl0+wnmFxNY28koGN7RKW/PFerHi7mlUq VaT5p8rbjKzUopq8XKM3FNO1o2cdeWSi+Uh0NEk9r/j+Z8b6L8UfAXwo/aQ8YfFP4z6Xq3hbT/Gv h7Sbnwndalpk0rxwpbRi4tSIg5jlWQLuQ9485+ZC3m3gue08K/Bv4CfHPXFkt9D0bx1qc+tTJC8p gS6mdRMwRSxVRbgcDklQOSBX6B+LNN1DV/DOq6do8ltFqVxZTR2M1ym6KKcowjdhg8BiCcDoK474 A/Da++GHwY8N/DrxEtlPeaZaNDeeR88Ejs7McbgMg7u4H0q6XEWGjhva+zaneEXHm3hGnUp+77vu 6SV23K8tbLYJUW3Z6p3+T0/pHyfr3jXQvj/8bfi1f/BbVH1xr74Q3Om2rJazRPPJ50YkiRJEVizK +0cclhg9xyvw98ZfBtdG8MXPxY+Jnirxnr3hc2o0P4baFol1ax2F3CQEjMe1VnuIjvBleQllDL8+ FB/RS20XR7O6N9Z6VZwXLRCEzRQKrlASQu4DO0EkgdOT61KdPsDcfazY25nznzDEu/8APGahcV0I 0/YQoyUEopWnHm0VneXs72fXl5HvrqDotu7ev/DefkfA/wAZPiN8KPDHxF8dfFL4b/Hjxb4A+JcU jxXnh2/0V7iz1Ke3h8mJdnlNHtkAOx5GYKZN4CjFetftOaxqXiL9gu/8Qa3ocekalf6Vo93eWEcD QrbTveWhkQRt8ygMWG08joea+mrnRtHvblL280qznuIxhJZYFZ1HsxGRU89ra3UDWtzbRTQMAGjk QMhHuDxXLLiKj7TCVY0W5UJRldyTbUbWimoRajppzOTXTzfsn713ufOX7WV78H5/BfgjQPi/4t8T eEoZr0arpOv6PbvILO8t4cIJGVHZSROSoUAkxk7l2mqv7HXxO13xxq3jXw3ceNG8e+HvDBsrXQPF 02jtY3F5E0RMlvJuUFzEQnLfOS5ckh1x9K3NjZXlsbK7s4J7cjaYpIwyEem08UWdhY6fEILCzgto hgBIYwij8BXEs2pf2W8BKm3Lo24tR95O8VycybS5X79mne17Wp03zqVz58/aPlGi/Hn9n3xbfxuu l22vahpEs235EuLyCOOBSegyyN+Cn0rtfjf8XvCXw0uvD2g/EXwfe6l4U8WvPYX2orYNe2lpIBH5 UU8Ko5fzi7BQATlDgMM7ej+LXwp8K/GbwTd+BvF0Mv2adlnt7mAhZ7OdPuTRMQdrrk/UFgcgkU7w d4FvLDwnpuj/ABH1Ow8Z61ZIsc+sXOmRxPdbGfymZPmAZVkYZyeWY9WOT65hZYbDyqrmlSUouN3F tNylGSkk0nGUndNdI6NXtcY++7uyfW19fS6Pj3xo/wAD/G3xB+Gtz+x/4Uli8W2XiOK6vtX0PSLj T7K105NwnWcusaNu3AY2tuVXQkbwju8feAL747+Mv2n9dnstUWXQNLtdG0NZIi777MLcyQxIedss lqjDHUXG4Ak19qQ+BvBNtj7P4P0OLClBs0+FcKVKkcL0KkqR6HFPbwX4OYsW8J6Md4QNmwi+YIoV Afl/hUBR6AYFd0OLK1JxdCm7xSUXKfNJfvI1Hd8quvd5UrKyb3uzT6thr6zdn/dX/wAl8/wPz+sv Bfjfxz+zD8Sv2ifEtjd/8Jxfa9Z6vYSK214YdNkSEER9UMaG5HPJCD8e3+Jnh3X/ANof9pTwve/D j4j6z4Iu9Y+Edtrlnqdg8scnlveSMIpfLdGCMJBnDcEKcHGK+yz4N8IGPyj4V0coWkbb9hixmRQs hxt6sqgN6gAHpTP+EH8FEbT4Q0QjZ5XOnxfd3Btv3em4A49QDVvjCv7SVWnRSleXLrdRjKMIqNnF pqKgrdN9NSVhcNZXnLz91d7/AM3mfFnwlstJ+AZ8c/Dv9oP4T6/d+JvEOkX00niTSBc6sfE9rhxN HHJ96KUq27LFBjmTyjt3xfB3xnp/gP4m+Bfh/wDAf4sa78SPA3iG4Zr3Qda0SWN9LtQfKF3FdSQo PLRww2oFXcjLjc2R9uHwj4TaUzN4Y0kyGUzlzZRbvMJyXzt+8TznrUEfgLwLFkxeC9CTcNp26dCM jO7H3emefrzU1OKfbe1lXoXlUWq57wvZpPllCTjbdcs1a1k7WSPq2Hskpv8A8BX/AMl+e/5+Jfta XI1PxV8EfA1hFJJq1/4+ttYhVR0t7NGM5J7YEyH6A+lfRdeS+HfgKtv8ZdV+NXjbxXN4m1ht9roM UtqsMOi2RJKwxqCdzjcwMvBYHoMtu9aryMxr0XRoYahLmUIu7s1eUnd2vrZKy82m9miIp8zkwooo ryiwooooAKKKyRrOoHxWfD3/AAjWofYRp4vf7Y3RfZfN8wp9nxv8zzMDfnZs2/xZ4qowcr26Bc1q K4T49+JPEfg74F/EXxf4PmMOvaH4T1TUtLkEKzFLqG0lkiIjYEPh1U7SCD0INebfFj9oXxX4J8cT J4C8NSeN9JtvC2n6o9pYJNLEGvr2SOG6eW0t7q5MIhtLtsQ28xO0HaF3OsX1S/rr/kO2jf8AX9an 0JRXy9ZfttxSPrN9cfDiS50Hwz4bTVdX1fTdRkltzenS4NT+z2k0lvHbXETRXCori4WbKs7W6QDz 66Hw18b/AIhaB4T+NHjT4qaBpay/D3xTHbHS9K1X7TbWGnDSdJupmW7a2gaUL9qubgmSIMCxjztV SKs+oj6Aor420P8Abc8VfGOTwJqvwV8ASXFpqni/+x5bW41OKEX6va+JNsNy7wlrQRppem6jIUDy iO5CIkpG2batf27xrOh674t8N/CHUrrQfD3gk+Kby7ur2W223J0SLWo7QSfZmt2VobiKMlJ2uA+9 vsxhXzirA1Z2Pq+ivErP9orW4fhn4m8XeJvhbc6f4n8O6/Y+GD4ZttXhuXl1C/Fh9jgN0yxxoS2q WqStykbCXa0qqrvYl+PHiZfgZe/FO0+GE2peINP1u78Pz+HtLurm+X7Ra6tJpc8qSwWj3Eluhhlu CyWrSeUhPlZGKHpqCVz2Wivldv2lvitq/h5fGXw88NeFdYgudf8ADOkXEeqeI5YLGL+1LTS5k+xS RacZXjdtTCmSblQgdUbd5K+g/A/9om4+NXirxHptr4CutJ8Pac8yaLrNxcSKdX8i6ltrjbDLDHwj JE++B7iMLOiyPFKGiDSbV/60Sf6oP6++/wDkez0V8jW/7eGtT6eJP+FIzi/1ltNPhe1h1O7vDqMd 22s/vZ0tbCaeFQmg3UieVDcF1mgLiIGQx9Jc/tm/2drviODVPhJrEGi+DdAk1PxBepeK8tndx6TH qz2iNsFlOfKlWIeXdtMZAzeQLdTc0lrsD0dj6Vor5TP7TPxl8I674p0/xr8O9HmuIfGUWiKLfVru bRdCg/svSZ1EuoQ6Y0m6WXUSyvcQQwqRKrzoFj8z2bxB8UtetPirH8NvDPg221KHTdKtdc8R6nea t9kFha3VxPBbi2iEUhuZi1pdMyExKqxrh2ZwtD0Dc9Gor5E1b9vTW7LwpdeINP8Agcb66i0U+Lor RfE8SoNDOnnUUuJZRCdlx5KSI8Cq4SUwgSPHKJV2j+2L4w0/V7HRvEXwXsbCa0nmh8TFPFXmDTvL 1iLSx9lDWiG7ZhdW1woIhyjsud/lrI7Pm5Ov+Sv+TD7PN0/pH1DRXzP4d/a+8TeL5tM0vw98HIhq vjKLSNQ8GQX/AIjWGK+0/UYtWuIri/kjt5PsbC20S7m8uNbk/vIEJDM4jm1f48fF/TvHXibwx4l8 JeHdK0jStQ8IRWdzo3iB7m/26xrMViolSax8ooUE5facrs2I7F/NhFFtNg9GkfSVFfK+nftqeKfE aeHrbwp8Czeal40utNn8PWl14migEmlahb6xPb3t26wSCBwmh3EksCCYpHIhVpJQYR9DfDrxlafE b4feGPiFYWklrbeJ9GtNZhglYM8SXEKSqrEcEgOASPSkD0OiooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAoorGHhHQh4wPjwW8/wDbTaaNIMv2ubyjbiQyhfJ3eVu3knft34ON2OKq Ki78zt8uv3r79fQTv0NaaWKCJ5riRI4o1LO7kBVUDJJJ6CvCPCXh39kLx14Zn8O+Ffgj4b1Dwvca vBc+Svw0lTSr26kSRIb2FnsxBcRmMOBeRl4gjj94Fdd3sviuy1XUvC+sadoS6U2pXVhPDZjVbdp7 IzNGwT7RErKzw7iN6hgSuQCM5r558E/s0eMYPEGlXPiOy0PRfB1je26SeBofFOpeJNLFpHpmr2Un ktewRLEJTqVqjWyQrEEstxZ2k2rF9fu/Mq119/5aHq2kfC39n3xXcL480b4Z+AdTuZ7SXRxq8Oh2 ckr2yI1nJbed5e4xCNXgKZ27QUxjitfw/wDCz4TeFfDeqfD7wr8OfCWj6BqqyPqmh6fpFtb2d2sy eU5nt0QI4kSPyzuU7lTacgYr5Z8afsJapc+GfCGgeCtA8BWtpoOq6/qN1pKyHTbKSa8voJrG8Lw2 byvNbwWsUJELWkxUmOO6ij3B/U/gL8DPG3wt8WfFnxLqWm+F7VPHV0NRso7LUBc3Mt209/NM9zeL p9rOIibqERxyNdNAFkCylSqgu2rvcLLZHsln4P8AA0F897p/hbQo72DUzqjzQ2MIlS+a2+zm4LBc ic2ziHf94xNsztOK888NeBP2ZfGOopqOifBrwjcXYttU8Mi9PgyIBLbT5W0i6s2uDBsSIYeBIWYC SFX2K0aPt+ddE/YS+I2n/D1PBRi8EQ26XGqR6datqJk/sSS7s9Ot7fWxc2+mWovtVs2tLx4mlgik IvebpWQu/p2ufsy/EC98P3djBqfh67aTVNdvX025up47TUbW+8VJrRsrhxCxEVxaIbWf93IBvZdk yEhh6NJf1p/SF0f9dT2XxTD8Jhb6/wCHfGnhzSG0/XbnT/7aTUtF3WOq3F5JHY2qyyPH5NzMzQW8 O3LugWAMFVo84ni/wb+zd4W8L+F/hV4w+Hnge28M67rq6boPh+fw7byac+ovHPcAJbiIxRuVjuG3 kKCSRnc4B8w8SfsiW3jaynj13wB8OLO1nuPB8lt4fih+1abpcOl6rLc30FvvtkG2W1ubiBcRRiQS ujqiMa3/ANqL9nzx18aI/Dn/AAgHiTSNAl8G2k+qaAbtXMdtr0N3p02nz+WqMPKSK2v4GPULdkBH BOKklF99hJto9B+Gg+CPxA8DWmvfDHQ/Dd74Vmv1Nq1ppKQ2zXGmyi0ikRDGvMD2MaROB8q28ZjO 1UNbWgfC/wCGfhXxLqfjPwv8O/DGj+INbLtqerWGkW9veXxd97maZEDybnAY7icnk818lax+w/4/ 8N22leDvhva+CNX8F+EdQW68H2PiPVruGfRyLnTdQkuNyWkyvcTXMGowlgEMUE6bGbfLEei/Zp/Z s8beHYtb8RxajL8LYtXLWyjw7HE2p6uItQ1GVbnUUv7Jo45DHdRIqojsEiXEoQrEor2V3/X/AAf6 2drklbT+v6/rpf0/Rbj9lX4uanqXwwi8C+F9Vl0pptOfTNX8HGC2uV067mglW0NzbrFdxW1zJMjG AyJE83JUyjd2lv8AA34KWesw+IrT4P8AgiDVbaxGlw30fh+0W4jtBD9nECyCPcIhD+62A7dny4xx Xznrv7GnxVurXxbLpnxSt5bjxVL4shtre+uJzB4ch1W/vLtJNO8tFXzJVkt4rlZo5WXzJWhlCp5M /JzfslfETwNa+C71/APgvVdM0jxXoZtdLsb25vJ/C4fxBY3N7f2arZQ28slwDMZzHb2EdrbxKIwy iXzFFNu3f/g/18xPbmvr/wAN/Xy9L/Vdl+zn+z3pq6cmnfAj4d2q6PetqWnCHwvYoLO6by908OIv 3cp8iHLrhj5Sc/KMXvH/AIY+DZuYfiX8TPC3hK4vPBtrLq1trer6dbzXGkwwYlknimdS8QQgOWUj BweuK+Ttc/Yr+M/ibwzpPhfXX8Fz6V4a8P8Ahnwommx67J5fiO00m31mBpbt59KmS0ZzqkEyxrDc lHgJSVJFjmTZm/Yq8W67qvxDuPEvh7wA9t4y+H03hvEt6dRZ9TW2sIrOWOS5043dpbwtYl9rXV2P M8uVUV1OZu97bFKK5lFvf/M+ldP+DHwU0fw9N4U0b4WeDNN0XVBcpJYWWi2tvb3H2mHyrj5EQAmS FAj8ZZFAOQK5W98BfBLxX+0Smo3/AIVs9W8XeF9IXUszeH45rXT5pp4/KuftTREJfEWqhQH8wRxA 4C7SeL8I/srf8Id+0bpXxN8NeB/AeheG9GsFs7f7GIpJ1X7JLGyWlqbBG08ma4mZmhvDFIhffbmW YypL40/ZJ8PeLtW+ImpJ4I8HQXPjTxV4fv5b57ZUubrTLW70u71CCWVI/MHnNZTkJna8mxmK53C7 JSvHz/yIT5laXl/menN+zn+z0bPUrB/gR8O/smsTpdalCfC9j5d5KhcpJMvlYkZTJIQzZI3tjqa6 SH4feAbZBFb+CNAiRY7GIKmmQqAljJ5tkuAvS3k+eEf8sm5Taea+VfiD+wxqd7qPiyw+Gdt4U0nS NT0fU7TQrq6vbv7VpcV1ol7pw0WOLy5Fi0z7ZetqRaOQASfILc7EkHoHwR/ZYtvgl8VZ/FHhLSfD +k+H3g1uzaOzlma8u4rmbSprLz2df3hhNtqS/M52/aNw3NNKaasm4p6A27X6nsOi/Cr4X+G7+XVf Dvw38LaVez6i2sS3Nlo9vBLJetHLE1yzogJmMc86GQncVmkGcOwMqa14J8F2Nz4X0uKCzh8J6JFe /wBjaTYPJJaWAEqQiC0gQuy4tpUSOJCSY9qqTgH5jk/ZX+KZ1bxlcS+D/hffR+IrlLi+u59YvFuP FSR64NQWDUx9hbyopLVntnXfcoojjjVDCxRen8T/ALImieJF8X6zp3w0+GvhnXPEnwxHhCybTrNW Ol37W13at5NyttG4txBPDbiRUV2iiVfLRUClQSfLfT9N/wCv8iZyavZX/pf8E+maa7rGpd2CqoyS TgAV8e/FL9irxz4yvPFU+meLdMn0iTXluvDvh65lWOA6dcSzX+p29zNPZ3cSGfUrlJ8G1nXZplmg 2n5ouy+L37Ovivx3+zh4Q+EmjeHPCY1Hw1LbG2sLnWZG0uxjgtpoYELXen3w1BYleJCLi3USlTL+ 5cIqp6K/9f1/XmV1t/X9f15Hu0njXw3BqsGi3d9La3l5qh0a0S5tZoReXQs2vSkDOoWZRAkjl4yy AxSJu3oyjad0jRpJGCqoyzE4AHqa+dJf2TNJ1HxT4Q17xF4a8DauPDfjh/EDNNpS/u9P/sN7GO3t 43R/LCXSWcqxb9ii2jfcXjUV4qP2DvijY/D7W/Csdh4H17XdR1K1v59f1fXQz61c28F3HHe3to2i y2rHfdPI0E8V3LK05aS9Z7eJyPbQI6vU+9lYMAykEEZBHelqjoenf2Romn6TstU+xWsVvttYfJhG xQuI48nYnHC5OBgZNXqb30EttQooopDCiiigAooooAKKKKACiiigAooooAKKKKACsmXWNUj8QQ6O nhTUpLKRCzass1sLaI4J2shlExOQBxGRlh2yRrVmv4l8ORa5H4Yl1/TU1iaPzo9Pa6jFy6cncIs7 ivytzjHB9K0ppu9o30ffTz07fcDPNf2nfHOr+A/hzbXug/Evwv4F1DUNYtrOLVfEd/Hp9oyjdNLC LuW3uYbeR4oZVV5YJVz8oXeyEfLPiX9or9pPxbc2GjfC+/1QW+v+EIfCdhdXUFrPM/im6vJZWvY5 4beGOe3j0qxu7yGVI4o5InicorSqo+yfjF8R9R+FvhS18Tad4Rl8Rvc61p2i/ZIb2O2cSXt1FZws GkG0jzriEHJGAxOeMV5/4w/aL8f+DIfGEup/Ayf/AIo3wuviu7A8RQYa3dLspHkIcyhrGRHCb9pZ CpkDA1k1dWvbX+vw+7cadvetojyr4UftKfEDxz8VdM8T+HrTxhfeDfGI1K70+w1OKwSx1WCK2Elr baRNuVo9SzG8jxXc0MZgWd1VyokWv4t/at8ceCvE3xr0iaGF57L7ZqFroEutQnxD4aih8H2upCdo IxcQLZ/aYXh80F4/tN2OX+63ufhT9qH4fa3ejw3riXmm+J4/EU3ha40uxgk1hEvIvsm9/Ps0kRbY f2hZ5ml8oRtOElEcgZF2Nb/aP+C/hzxRrvgvWvGqW2teGwv9o2hsLpijtHayRwoyxlZZ5BfWojhj LSStJsjVmVlDirRUX0Vv+CEn7zl5mB4Z+IPxBhuvj7e+J7+z1Cw8Ca41voVtaW3lTQwLoen33ll8 HeS10Wyysd7P/BsRcj4Q/H3xH4++PXif4US3nhiXSPCeltlra+iv9TuZla2Tzp3tpDHatve6jktp 4IJAyRvEZUMoh3NP/a1+DOpa9qWjQ33iBINO8P6b4j/tKTw5fraXMN+8kdtFC3k7nuHdFjWELvkl k8mMPNHNHHqeJf2gPCWk+GPAnjjQ2j1fw746uJhb6h5j26wW8ekX+p+cyNGXzt08xmNgrKZCTyhQ r4W5Selv89f6/wCGLXVorX/hjyr4BftO/ELx7qPg6y8Q+GdN/sDxENL0mDUDeM2otfXHheDXpDMq xpEQoLplAu8zAhY/JIkqaF+2F468cfEXUfhv4Q8G+FodSTxdJ4ZtYb7XEluoY4W1Bbi5ubaFjLDs jsop1SZYDMXeKPcFFyfWPDv7VHwJ8TeMD8PdL8fW03iWK+l0q6sUtbkra3cU0sEsMkxiEaMJYSg3 MNxkt8Z+0Q+ZP8Mf2h/BvxR8UyeCdH0vX4NWtvC+m+KriSbSLpLAwXok8tIrt41SRh5Z54D/ADbN xinWKmr6rZf5/wBIm915s8T8Mft32/ifw9oXia4u/hx4bi8QR2ZlsNc8Ui3vfD0c1vBP9t1GMoAl rJvnSEkxiRjY/Pi8Jt8iz/b68SX2h6jrNt4c+H5lTwzpviCHTpfGENpc2C3UOiSlrx7rybdI/wDi cTCIvNEZ2tPLXBdmT3bwr+1X8HPFGkafq7apq+ijVvEd54YsbXWdEu7O5nuLW6FpJJ5Tx7kt/NeF DM4VI5J44ZTHMTENzVviL8I/hn4r1jSNX1oaXqepwN4n1iV4LmS2t4o7Yx/aLm4CtDaqYdOkCCRo /M+zSbQxVqXVt/1t/wAEHra39f1ofP8AoH7Z0/jbSYfCdxqOhW3iPUYtMb/iXTPBdi3vNL0W7W6S 0aR5Y0efVJ4UJLKvkgFmYNmfw9+1l4/+Kt1pUXgO88D6ZJFqOgS6tax3b6pPYxapNfQrp94oEfk3 kP2SJpkyGR5WQcRh5vY4v2qvgVcapaaHa+Mbu41O902TVYrGDQtRkuRCkl1C4eJYCyTCayuYDCwE vnKsWzzJI0bN8Jfth/AfxVY+HLqbxLqGgT+JfD8fieC313R7ux+y2LQ3U3m3E7x+REgSxuzvMmxh DuRnV0ZhaSUnsrfg7v71oU7OLS3d/wAV/TPJ/DP7dmpeJvB974lvtL8AeEmXW00nb4h8WxRjSWe2 1CdU1FYhI1tIzWMcAWbyXMsso8vEUf2nf8E/HLTvBtr+zxqHxX+LWnaNpfij4SXd7f3ev6vFbR6n qYHh8xO0kzDzJ9s94QMliJJDzzXtXhD4weFvHks1z4VNze6Vb6ab+W5NpcRXEbrPPA8DWjxrMsqv bTAoVDgrjbkjPn+mftm/CbVNf8K6c0euaZp/iy41DTbO71bRL6yl+3Wt7ZWaxeQ8G7yne9GZyVjj ZCjlX3KhFpLXW/6XX9ehN9bL+tv8/wATy3UvjdPaaD47uPC37Znhe6uLXxrbaPaTa/rui2dpp9qI PPaNb2LT50glmMV0ge4hlQiFo0VJP3g2v2c/Fnxb+MPjKy8fWeua7BoWgal/ZPiFda1aNxqNu2iW k8QgtIbZLeQvd3aXK3ka2xaBVGwrLtT3HTvj78JdW0Txd4isPFok07wNayX+tzGxuU8m1RZWNzEr Rg3Fuwt59k0IkjkMLhGYqRWfof7TnwN8SWV/qOieOkuYNLTT5Lthp92piW/uXtbJirRAlZpI2KED BjKS/wCrkR2G9F5W/K1/nv6jWl79f87/APA9DwW7/a08ffCPS9bTxZ4YsNWsLnxF4nbQ9Wn10Bkt 7TxPHp7/AGwzrFDbxxjUI44g06p/o0avJEsu6KR/2+LlZ3sjpfw/W/S3soPsR8Xb3M81hZXc98Hj hYHSbf7ZJvuUDq0VlczBsIEb0rXf21/gfBotzqng3XpfFE1lfadDPb2mnXyl7a51KxsZJ7ci3b7S Y11G2nEcIdpUmtyvy3Ebnpb39qn4CafBFc3fj5Fik0y51ZnXTbx1git4bmaeOYrEfJuUSxvC1tJt nBtZh5eY2AaXLG0kF+eXNHb/AIP9I8C8JftyazD4g0XwvfWnhfWbbWZtXvY9eTxBDHa38S6zq1lb x6fGzGa4ULp9u2YUnG25QyGCNfNb6s+HOqePNZ8PDU/iDo+h6be3LpNbQaRfS3UQgeKN8NJJFGS6 u0qZCgMEVsLuKLlS/HX4XReBLX4kHxFO2h6hevpti0emXb3d7crJJEYoLNYjcTPmKRgqRsWRDIMo N1ZFv+1J8Bry61GysfH8N3NpdubmZbawuphL+8t4vLgKxEXE5e8s1EMW+VvtdvhSJoy0wVlZa6Ic 2r321f8AX5nqtFeOw/tSfDXS/hTa/GD4gXVz4Z0PUdX1PTrHfY3d1NcR2k94Fm8mODzk321jJdMr Rjy13BidhYx+L/2ufgr4R+2p/aWu67NpusWGiXceg+Hr7UPLmvLtrONg8cRSRBNFcRkxsxMlvLCo aZREblFxlyy3/pExfMuaOqPZqK4zw18Yvhr4v1LxJpWgeKYZ5vCSiTV3lhlgggjLzx+Ys0irHLEJ LW5jMkbMivBIpIZCBw2oftT+CdRl8BRfDSJvFR8beJE0WT/Rr+3bTLcR+ZLdTRraSSJhXtiglWJH W6ikMqQt5tQmmVZntlFfPvx8/bN8Bfs+694k8O+JvDus39z4c8IW3jB2sxHsnhn1JNNEKktkSLLN Cx4xscHrgHs9c/aW+Cfh3VdT0XVPGmLzSbj7HOlvpt3cCW43pG1vbtFEy3E6ySxRNFCXdJJY0ZQ7 qpfbzF5np9Fea+P/AIzW/hzwj4W8WeCNJtPF0XjG5SPSRHqkdnDcxNZXF8JUndSmGitm27tqkupZ 0XLDM8P/ALVnwP1zTdJ1C58YJo/9q6Guv41GJkhtoTbvctFLdputROsEckxiWZmMSGVd0WJCrjse u0V5v4e/aK+Dnie0uL7T/F5tobNPMu21PTrvTjaDz763bzxcxRmIrJpd+rBwpTyCWwGUtlL+1f8A A2e3tZbHxFrWoT3UkkR0+w8K6tdahasjRKftVnFbNPbAmeDYZkQSCVCm4MCX1sLzPXaK8j+H/wC1 L8JfiRF4fXQZvEsV74jQSW9hd+GNRjnt0LbFlucQlIIXcOiTSMsUjxyKjs0bhfXKdnuHWwUUUUgC iiigAooooAKqtpmmvfJqb6fbNeRjalwYlMqjBGA2MjgkfiaskgAknAHU0ZzyKabWwHjX7U+p/DPT vAujf8LW+K7eBNGfxLpzx3Ud1bQSXF2kwe1w8wIAhuRb3jEDAW0O8GLzFPI3Piv4NfEvwH8Rx4w+ NPhizTT9Lk+HvjOfULy1gbTjFe3tk011GbgpD9pfzGhWXBIZfvZKV7l488F2nj3RLXQ768mto7XW dL1pXiALF7G/t71EOf4Wa2VT3wxxzXlHjP8AY+8A+MUtYZPEviGwittZvddeG2kgEd3cXV1e3MiX CmPEkBGp3sLRnh4pdrluSVyRatLv57Wt+OxSrTjpFK3ou9+qOZ8J/s/fs/a7qnhDUvht8SNCn8O2 fim58Y+GtE0aezurOMQtCLmLTXy8lrCt6scswtGjjJmeF02SlT0Xiy3/AGddW8M+MtYufjzpWjWn ibxBpfje61u38Raao026tbbR/sk0Lyq8IjMcGly4lWRX+1qeVmQVf+C37PFj8L/iZ4w8bmKPy7i0 0/Q9DCCKNfs0NjZx3N15EKRwW8txJbW8UkcMUce3TrchRkiua0X9h3wP4f1ez1vTPF2qx3Wi2ttB ozmztHNq0F+l0jyhoys5ENppVmpYBkh06LayvhlUVol/wfu/pWKnUcmm7aeSWnyW/R799djifFml fsUaH8NPFmg+K/2g9O1+ys/Bejx30U2u6VfXi6dp91LqWnTR2/leXOWfU4VRXjkinUwRlH3tv7D4 gT/svWPw7+FfhTxz8bIn0PWLy+Twzqsuu2ZXVWuNMv7OdzJtEQt1i1GRUWFUiid7aNFRNsR39B/Z C8F+HvCGoeD7bxTrNxHqUT2kt3cJbmdoDocGiLGdkaqdsFrDJnaMyb+Arba9b8R+DdP8Sy+Hpbu4 mjPhzVE1W32bfnkSKWIK2R0xM3TB4FKV23Fq60/4P3L7yY6Lmvrr+Wn4njVj8K/2eNY0nW9f0n4q x3el+GNfuNW1+8ttdspILC6h1xPEEsV5IEKxLDOjIVcqyQSOCdxEg2PhRq37OGieJ9Gh+H3xn8Oa 1qviLwjpnhvRrGPxHZXUmoWGkSagI5rdIzvlYNPeLI67l/cHAXY+TQf2XNB0L4SeKfhG3jXXNQs/ EfhFPA0F7dRWwm0/S4bWa2tokEUaK7otxK5kcFnZzkhQqrH8Tf2SvAPxO8T6p4mu9d1nRn1nQ30C 7g06KyKRwv8AbFmkt/Pt5Ps88yahdRyTR4kZXwrIS5em2tFt/X+bJtfV7/1/wDkE0T9k3xHdeDb3 Sf2i9HkF34k1n+zI7LxZpjp4gn1DV4NWu9OxtJmQXf2PCQlZQhjRmYStvveKrH4GfETTNQ+J3iH4 5XHg3RPFWjwRa9pS+JdGWzMv2LzYJppwJwtxFBe206mG48ltttIRIpBfdm/ZY0vUPHmkfE7xV8TP EWr61o0NpAi3FpposFjtJmmt2S0+zGJJo2knCz4MqC5mEbx5TZkSfsPfCObQrfS9P17xPbfZfDmi 6BZXkGoIskQ02aymS6G1An2icaVpcc0gUFo7KIJ5ZyaejVmCbTv6f1/wTd8C/AD4W3Vhb+M/CPj3 Wddj1l9L1T+27fUrW4TUntNUvtW88PFF5ZFxcandiURhY/LZViWLaDWtbfs0/D6Dwlq/guS91q40 7W/Aem/Du58y5jEgsLFbxYZEZYxtuD9vmLP93KphVwd3c+A/CFt4C8I6d4Psr1rm20yNooGNna2q xx7mZI0htoookjRSI1CoDtRdxZtzHfpSs9Ftr+Nv8kCb3e/9f5s4X4cfCPRvhtc3uo2ev65rGoan CEvrzVJomkuZPtN1cvMyxRxors95ICEVUCRxKqqF5xbn9nDwFdxRx3N5rEhhXVfIczRbonv9Uh1W R1/d/eS5t4THnICoAwc816pRQtI8q2/4f/Ng/i5uv/Df5I8X8Jfso/DrwT8N/Gnwk0HVdcg8K+M9 NuNIewj+xwrptvNFLCwtzFboXl2S7fPufPmfy498j7ag179krwJrfjzW/H9v4s8WaTdeJtS03Utb s7G4tRa3508xNZxMJLd3jjjkjeQeU8bM08gZmURqntwIJIBBI6+1LSsh3Z4XrP7IngXVLo6jaeMf F2kX0bwyWdzp89mpsmiOgtGYke2aPAfw1YNtZGUmS4GMOoTGk/YT+EQl12ex17xTYzeLdGv9I8SX EMtk1zrD3qz/AGm6luZLZpo5JJLlpmjgeK2LpHmEquw/RtFXKcpO8mTFKK5Y6I4/4k/DWy+JFlpM cniLWfD+o6BqJ1TS9V0hrf7TaTtbz2rlVuIpoWDQXVxGQ8bYEm5cMqsPO9P/AGQvAGk6PoNhpviz xdb6h4ctbmGy1lbm1+3Gae5066a6kY2+ySYSaVbAbkKFDIjIykBfdKKkZwHhv4N6N4e0nwfpk3iX X9Ym8Gavd63b32ozQNc3txcxXkcpuTHEisMX8xGxUOVQknBDcvpv7LXhKwvdQup/G3i+/hvLvRJ7 a0up7QxafDpGqPqljawstsshhSaWVD5rySGN9u/Kqy+z0xZonkeJJUZ48b1DAlc9MjtmqlNyd5f1 1FGKirRPIfBH7LPwy8C6L418J2T6le+GfHcd1BqGiTm3hto4rrzBOoe3iimlLLIIxJcSTSoiIqOo yDueA/gjoPgS4t9TTxHr+uaut7PqF9qurTQPc6jPJbwWoecRRRxjZb2ttEojRBiIFgzFmb0MyRiQ QmRRIylgueSBjJx6cj8xTqnpYq7vc8h8VfstfCjxr47k+Inieyvb7VpdQnvH8ySPY0U2lppr2h+T d9mKRpPs3bhOocNgba4y7/Y3TS4dHi8E/GXx5ZDSrrfbrdXdhL9j8++gv766iZrJ3kupp4GkPnGS MGeRUWNCqr9I0UR92XMt7p/cKXvLlfa33nkOp/smfs/6zoWgeG9V+Gui3mn6D9mVo7qxhuH1JLex lsYFvZZEaS48uKYsrM25XjjYNleecb9if4WHV9V1aPxF4uRtbs/seoZvoJLi5CR+VbNJfPC14/kR pbLGjTmMm0hkkSSXfI/0DRQkF2fM/hX9izSJ9Nni+KPjjX9ckv7jWYdXs4Z7VbTW7W61DWriB7kr axyR3Ag1y5Dm2aBN7EAFUWt/wx+x74I8N614T1hvG3ijUY/Bl19s0qxmttItre3kwf8AUi1sYXtU PG+O2aFJ8HzllDuG94yDnB6daWhKzuvUG76Hjtn+y/4IsvHfgnx6uv67Lc+AoJYdLtZI7AoTJ9qD u8/2b7SuReOGSOaONxHFvRtpz7FRRQtFYbd3dhRRRQIKKKKACsYad4n/AOExOr/8JNCfDp0wWw0b 7APMF35pb7R9p352lDs8vZjI3buoOzRVxm43t102T/Pb1Womrnmn7Tek6rr/AOzb8V9C0LTLvUdS 1HwPrNpZ2dpC009zM9lMqRxxqCzuzEKFAJJIAr5O1CH9qL4R2V54L8GeGbr4bWmpeJmur1/BPhaf WtD0G0ezZLc6XBHZ3bTpLNBNNcRfZrQrLtDG3FwtxP8AXP7RniPW/B37PnxP8XeGtQex1fQ/Bur6 lp90gBaC4is5pI5ACCCVZVPII4r5W8F/to+OvCltq3hhvDvifxjrlx4jnsdB0Tx1cWOg+IrS2g0y O6ddSFvD5MCySCV4JZ1iVoBJI7ny1EkLq/63Q+39dGdZ/wAJB+1tdeLtD8SN4m8Z6fo13qF/qd14 afwjp+bawtdb0mBbOeRIZneWayvNTkVoZhuFvCUJ8qZ5cuE/tQ/E7wXqNr4r8T/EHRL638SeDrud bLwza2TaffnXHGq2Vl5lpIbrTrW3+wzJdEzJIY2Z55ITNENrVv2r9e8cJrPhDQ7fw5Cl79sbRdZ8 OeKzeXRjt9R02CJ5oVhVYY549RiZJVmdWXDcLIMeufB745678VPFniHwjdfDybQrnwVGbLxJLcXM pjh1Uzyqltas0CC4ia3iS787KERXlp8hMjiM05UvL+n/AF6EqVpu/f8AXb+uhw3wZ8VftDy/tAeJ /DvxRvfEkvh+ze80/TLEeHVFg1tG6fZNTk1IWcEIlkhjG+3gubstLesfKtFt2jTB+HngP9ny6+OP xxs/Gvwh8OJF4p1EanDd614PWKzvbCFLK3uw880IjbOq2dxNsY5kZVuFDKyStjaF+36nxF8PRQ6V 4D1LSbnVdBs9ahu7PVYjJDFNdadp0hTzbZwHj1G7vrXDx4cabK4+8oq/rHxW/aRk+Jo0e207QtSn 0z41L4b03S4tflsLWaxfwhcX0kV1MtoS0MbSpdjdHKzSqUAAjjehvmatbVfebwUYJuom1e29npv0 f5HkHjL9mPTLHwd4V0r4Vfs9/CjWdTsh4p03U4dcjt7J7mQzsullpYtkpuJIBI9uxkhAJUiaLKtX tX7Nnjj4o6p8UvD3hjW/GXjXXvC7eAbe5tf7W01bN7ee3ttMhmGpb7RmlvZLiW5kLRahKEIkjaP5 fMPbeN/jP8SNa+APw1+MHwu0rRtOm8a3nhW5urbVb1j9ng1S8sY/IVhA4fP2rymfahVSXUbgFrzJ P2u/Gfwg07xcfHfgZdT0e31vxVcaDq83iGaae7W18S2unCOW3S1keC2ibVo0UoZpBHZSbYcGNTKU 1o3tf52t5+ZcqlJpKzu9tVpe/wDdXVfdob2pXv7T2naNqHjbVfiV4yt9I1Hxzq+jXen6d4Gtb2/8 P6LFqlwlne2NvHbPPdO8NvDFueO4Xy75LjYRAzScdZT/ALUzaPqXxh0vxB8R7rxVJ8GdOuG0C+8P 29rZnXYxdRXEf2drAOZUlL3SxxkyOxC4eFoYq9nv/wBoLxqfgPb/ABJ07wNoMPjCXxVY+Fn8OTeI 4rq3guJ9ah04Rz3lssgikMcyysux2hZtrKxQg+daH+3T4m8Qa1eeFtJ+EWnz6rocMtlqwuvEg0+J tV8u7Frb2rTQAXCXN1ax20QRmm3ySlolWDMrclHVvv8Al/TMormTSV9v/Sv6R1/w98SfHbXvgxqk XiTR7zxGBZanFc6rrVpPo+rXJMTvFHbad/Z0DTqhdLcSyRWTytE7rBtKNJ5b4p039q/w5qOp6P8A CvWdT8J6fplpdarc3Fl4Ktbs6wbTSPCsEMPmSQkvMzvqgRiXd1tnhHEKmL139nX9rOH9ovxh4h8P 6B4Em07TvDhme41Ca/DmSBxatp1xHHsG6K7jkvnRgSFFnznzBt8/uP2rfF2q/FHwzqeiaP4ee21T QLu30vw+fGTxOZrrXdL06GXWIvsuLKaHE67AJ3ErXFuvzqS9KXK3H+bT0cW19/Qz5G7VF9n9bP8A S5T17Qf2gPFfgj4mz6jqvjWx8R+HfCWrWOj65p/hqwt9Z142+ra5Fb24l+xcrPb2+mS7LdY8mWOS Mp5mW7v9sDQfildfDDwj4e+Hf9v+Ita0HUh4muLwWKyy38uj2Vxf2qTrBGkQe41C3sF2KiKxdwir gAcrd/tafEuyuNK+J76L4Qu/AuqeCZtWi06x8RCX/TVvbezDPem2VEjWe6iSVydkUQlkIZkCsXX7 XPjPSvEWr+ItR0Two1noGk3kep+HovFxNxLPZa3dabKdOU2gN1cTeVF5cT+V88kEWQZtyw5/DBLW 7/C7/QvkdpVXtZfil+jPK7O//az+FHgvxhpulaP440LVvE9xqfxFa80Twidbdda1HTLWe10RAYbh I7cagNTWaUxkRpBbq00RuFY+yfBf4n/Hzxr8Q/Fdzo99q/ifR7S98S2n2HxJo39g6Rp8lvrUVvps NtfJYGWdzaLfmX/X7HhjSTynJL52s/tyeLJNA1TV/Dfw18NKDFDf6abzxWr3MenvNq0UlzcWKxCW SaAaPJJJZ27SSfvCm4GKRl6H9m39qG0+JXiseCbTwX4Y0fSpFn8zWbDUTaRaprZigvblLSxnhilm WYXF3diRDIRCiSTbXnKJa1V+n9L/AIHQmcZRdpfP8zyq58BftCeG/wBo7xZ8ZfDnwZ02O8l1jVZL PVNPWWW61S6Ph21gtNOvXZrbdoz3aJIJ8S7bm3BZbYFpBR1n4zftXaF8IbnVNW8U/EiC6S01K8TX I/h6izRat5NpHpukMlxpkDNaNI15PNePYQxgtFAlwWVmf1OP9r34o2fjH+ztY+D/AIdTwzL4wvfD ttqo8USJdz2tv4ittCkuktBauuUkv7csjzIT5Mx+UNHnBvv21tV8VaZo9vc/DH4drp3iGz0jXF/4 SLxmYrCOwvrHWr+EXkxsmW3uY10RGZdkqhpgobC+aRSXKm1pZL7tP0YTUrtX1V/x/wCHRmfEj40f tax39x4e8C6F4zV9N1TXrfW75vBlzHHa2X/CQKunXFnP/Ztyl2w04Iirbw3RKTPLIjNEzL0HgXxV +0V42+KnhnwxrHi74mWWif2D9kvtQXwVHoYF0ljMp1OYXenTwP58rQyxwrdRyQu0cc1j8kxWxJ+2 Rr/iDR/FqP4Nh0OAaDd3mlC015E8SWTrptleK11YTWjx24X7ei+cxmRZPLVomDjM/wDw2R440fxN FoHif4eeF4LbxD4l17QfC+oy+JXs7eRNL1n+z5Jr93t3W1VkcbdpkMk0aoApuEVCTWkHv/nf+vkF 29V0/Qwvg9cftB+GL/8AZ88E6z4m+I97pVz4K0qXxDZXHh8RNZXZtriSZb+8fS2hKJ5cNv5LXVtd JtDsbiSQZ2vjn8Vf2i9E1nxp4R+HWneMW1aLXLu50Cez8Fy3tl/ZQ8KF4cXf2Z7dmGsgnYzmZmUR 4MbKp6fxJ+1drulfBL4dfFHRfhhFqusfErWE0jS9Hi1k+SxeG7nikW68jBSWO0BRnSJB5ymVokV3 XE8OftUfFjxj4iOkaP8ADjwgmnapqVt4e0rUovFf2tP7Sm8MJr7oXhgkjlgiCyReehxL5sRVMI26 rS5ZX6X7dv0Ercys97fn8xdM8NfH+48feAh4k+KPxIuofD3jrUNK1CSPSdMt7TU9OSwurqG6uvLs gvlysYbQsjKgJUKFnHmjR/ZP8N+Oj4Q1yPxTpGq+DdUv/DHhqxE8WjQ6e1vcroVqsz21u8PkIYZn dBH5RjR4ShTClKy/hN+0J+0L4r8AeF4rD4X+HfGPiNfhfoPjXVbhvEp02TUJ9SW9WGOKL7GYkZvs BkkJZVQy7EVwA1evfAb41WXx98JXXxD8PeHb3TvDM18bXRLm+JS4v4444xO8kBUGAx3X2q2KktuN szg7XUmHZpR6r+r/ADuUpWcmuv8AX6HzPovhD9orwf4Q8G+ONN8SfEDVda8GeGvEl7eR6holtcah qMY1DT/I0lFNqp8ueOzlmHy/aTkCORFIC2bj4yftQeFZ/iL498XXuuW2neC9TuNXPh+88OJDps2l 22oPEbS31GS0g824ubKZXgWCS8zPaoXmhE32dvtmqmqaRpWt2q2OtaZaX9ss8NysN1CsqCWKRZYp ArAjckkaOp6qyKwwQDTcr2Xa/wCLv+BPLG787fgeFeOfEHx18G/BbwVd+JdT1n+3r+88zx1qfhTR be/vtHje2urjytPt2iliZEuxaWSyyxyhYGMkrZDTp5X8DfiB+1X8SvG2gW3jrxV4r0PQte8LWEqT 6T4Ut5bV2n0K1uHvxeS2JtoHW+N0gQz3DMzxp9jjjQzn618Z/D7wF8RtNi0f4heCNA8UWFvN9oit dZ02G9hjk2sm9UlVgG2u65Azh2HQmt2ONIkWKJFREAVVUYCgdABS6tjWlj5j8PTfGHwD+x78J7eb W/Ha67Lp+hw+KdTTw6uq+INFtpIUa4WKwW3ZpZY32W+XgnkRWaSVZWjcnC+L+lfHD43fsYeB/Ase na0nj7xrBZR65e3umPYzaZfWVrNqJmniWNRAj3unQ2+SqoftK7fvJn67op3fzvcVtfI+ANK1r9p7 wBpHiXUY9J8f6TP8VNcHxBuNQ0rwrJq9/of26w1BbTSDE9tMA8B0rSredmhYRC4VSY/MSRfR/gj8 S/2kfFXjOd2uPEGvqNNuXvdJ8UeHv+Ed0jT5T/Zz2qpfpYmV7rbNfiSICXYY9jrEyB5Priq9np9h pyypp9jb2qzzPcSiGJUEkjnLu2ByzHkk8k9aUUot6aW+7+l/XUc25JK+t7t9xNMfUpdOtZNYtra2 v3hRrqG2naaGOXaN6pIyIXUHIDFFJGCVHSrNFFABRRRQAUUUUAFFFYQ8EeFh44b4k/2Sn/CSNpQ0 M33mPu+xiUzeUE3bAPMJbONx4GcACrgoO/O2tNLK+v3qy89fQTv0IviN4o8P+B/h74o8aeLbV7nQ 9A0a71TU4UhWZpbaGF5JVCMQHJRWG0kA5wa5z/hO/hD4+ufDFi8Om67Z+MvD8/ivS7y4s0ktZbKz e1/eM0gyrA6lEygjIzJ90g50vjV4J1D4l/Bzx58ONJu7e1vvFfhnUdEtp7nd5UUtzbSQoz7QTtBc E4BOAcA14v8AFb9jP/hOfFV9q+h+MrSHw5dj7efB+saSt9pRv21XTNSuTt3qVt7s6YFmh5XzJpJg C0kivFxnsXhnR/hh4Y1i/wBF0/VNGn1vxBdnW5oZ57drycTyTTxEKAGaIGGcxZBwIHwTsYifwNoX gjwRa6xLouvx3b+I/El5qN/e3V7HJJPfTSEGHcMD90iR28aY3LHbxqclST89n9hJEjivrXxbpWn6 7aWGk2Ol6ppmjC1k0RYNT1G+u00/LubeFl1FI4ogxCi0iDFwOE8T/sP3vi9fB0upXPw4sB4Rtruw TS9M8M3lrpt4ktvpsEc9wkd8ksroNMQGIyBXhaOBnKxF5Rb22tp8gtpfvr8z3Xxp4n8DfDLWPDlm ngr7brPjjVE0G0g0u1tI5pNq3F4zyvLJEohi/wBJlPzFt8hCK0kgDdVbt4QS4uL21bR1nku47i4m jMQdrh4ViR3YcmRotiAnkptA4wK5Hx18HfDnjf4neBfiHqvhTwzqF14RkuJPtl/Yxy3kW6MiEQOy MV2yHf8AeXaQCMmvCvEf7A2hX/wf8I/D7w3H4K0zVdN8JN4W128uPDxuILySW1eFtSjjWSP/AE2G S4vJYpHyT9rnBKmTerei/rv/AEwSufTVtceAJrK18N2c/h97PT5ore2sImgMdvJbylYkSIcK0ctu QoABR4TjBTjnPHfxD+FfgrX9P8J+IdKu9Q1nVbC8uodP0nwzd6vcCzMkQupJEtYZTHE8kkQbdgSN 03FTjxPUv2F9DHxCt/iJo1p4WOtf2tqPiO61e60/N9JqD63pWo2J37WbbFBYXMDEOuftDELiWSu+ /aG/Z81f43XAS1uPBFk0enC20rXdQ8OSXOueGrvezm9067SeNll/1JQAx+XJCshMgPl0layv8wT3 NDVPjv8AATwnqmsfDOWSzguPB2veH9CutJisFSO2vNUljbT/ACkICEAsJiV5QRM3VaTwD8XPgx4y +Ik3hjS/CVzo/iHTr3WLLS7zUfD/ANmi1F7S8lg1A2N2FKSEXAlLoGEhyzlCMtXlXi/9hzVvFXif xV8RpPiGE8U68NbvkYwjyDqRW8tvD91I20sPsFleyw4UfMwRudnzdp8N/wBk+f4e/F5Pi4PiXqWr vNf+Ibu40TU0kutPsxqd/NeB9MRpQLGceZHFLIA6zqr/ACIzlqF3f9f1+Qn/AF/X9bHs2k6f4F8L zyaboVjoOkTWWm28UlvaRQ27QWUIdYFKqAVhQeYqD7q/MBjmqbaN8LtVvtQ0xtJ8LXl5q0Anv7cw W8kt3FJyHlXBMit5QILZB8v/AGePGfHP7K2seL38XQ3F74D1CDxBrsfiJLjWfDUt3fXLJe6bdfYL qY3GDZFNLht2VUw0Ygyn+jnzuM8C/sf3eifFtZCNAs4PD2naZfJrcPhYxT/aGudXmls9In87/Q7N PtEEJg/ekW6RxE4YOCT0T6v+n9w1u1/X9M+mPDVv4B1XRNPXTfDWm6fHqultdppdxYR29wltdESz JLbkZXe7ZkUjBfO7JrL8Mj4PXV1rB8PeHPD1qng69SGe9jsLeKCCb7LDIGjkUYG2GSJSwxjbt/hr 58tv+Cf4tr3xC/8AwnumXH9veE18Mw6hNpFx9q0wDw+mitJbxpdrDuPliYNIrlFeWFNvmNLXt3wU +C3/AArTRfFum63D4Tli8XasupTaZoOhf2dpdqgsLSx8lLdpJMqy2Yc5IGZSMHGSSvfQcbW1L3h2 w+AfxT8P6T450Tw94P1zTvFsQ1Wxu5dKgL3vmrHMXKyIH8whImYMA4KLuAK8QeOvit8Ivhf4t1OT xFBbweILXwZqPi++ubeyVrn+ytPaES7nHzNzMNic58t+m2vHtN/Yr1Cyl+FCSa34Rkg8CaF4Y028 lm0Fpr21uNGu/tjzaXP5ii3N6+IrglCWjjTOSMDovjT+yPJ8Zvixp/xKv/HCabHYXuio9omnmRrr SrM6g15pzv5i4ju2v1Eh5G23QFWwCH2E+p6nDq3we1fw3pfxIu18MxaXcaNLrlpqWoQwQ+VYTeVe zTFpADHGWignkJwN0SO3KAiHWfhJ8K9fu9J8Snw3pKjRNXk14/YrO38u9uPs13bE3ACHzcC9uHHI Ikwc9Qfk/wAffsW/ETw78HvE4TxBpHie48PeGdQt9Et7TRriXVprSDw3qOiWWmQyeYcoYrsXRRU5 upZ8KfN3j3/4ZfszWHgrR9Wtb/V7ewn1LWpdYt7HwZHdeHtHsd1nZ2ixLYxXLJKgWySQiUspkllI UBiDMrq7j8g3spB8BPiH8FviHa+JviB4XtdU0688Ri08Q6qnifSxY3Is7uBYrSRWdQslpKloTGyv IpZZF3BlZV6z4jeFvA+t6dDocnjO08G3jpc3iXVjBpRuZLd28+6AW9t54/Kd0SaVgmS0SsW4zXzs f+CeV7Y+GtH8N2fxov8AWrTS7vRr94/ENrPdzu1ha3lsLW3uxcrLa2X+mvNBGgZ7WXc8cm5gVh8S /sU+KJL2DwTpmteGo9C8Safc2l7qNh4anim0hYvCc3h61hV5byV5LVPtEs6Qu+4PLN+8O5mOrhG/ LF6Lb0EpdWtX+bPqXSPCnw/0DwRpHwum+w6ho2kWttocFpqsqXTS+TEnlpL5mfMl2qjnI3End3rJ 1/4ifAfwpdXJ1vxN4Rtr3RNY0+3u4keGW50+/vgLC0MsaZeF5Efyg7BcRB8kRqxHhGo/sX+P/Enx Iuvir4m+Ifhm51S41k6zFpr6RePpltcoNPe3uBGl3FK7JJp8YeEyiKfyrZnA8hUq94I/YpufDHhr WfDV9qfhKWwvfE3hzW7GxttHmaGzTTtVF/dbZrmae423O+5227SvHA08pUt58pMNbWGup9JR6f4R 8NJbJZQaToj3VvBo1m8McNuzRxCQwW8XGCqB5SkYBC7nwOTWP4L07wB8IvBXhn4b6b4gs7Ww0S2i 8P6f9uvYlnuJILdnKsflDzmKGSZ8AEhZHIwCRzPxV+DWo+O/H/hjx1YN4Tu/7E0+60qSx8TaK+o2 8ST3FncNcQIsqATA2KIM/wB9WDL5ZWT5z1j9jDxN4c1jwXZpZ+A/E/2zxPZ2lzLfeCpL2xnhsdI8 SOmp65F9o/0i8mn1GNXmLovniJwcyCNU76ee41azv0PtCPxLpRuNRguZXs1025jtJJrtDDFI7xpI vlO2A4xIoyM/MCvUVDqfi/R9L1/SPDUsjzX+sXLW8ccO1jBtgln3y85VCsLKDg5ZlGOpHyxqf/BP 5rnwvpPhX/hZcWp6dYNFHeWGoaZPHBfxL4f03RP3j291HMj7dNaXdHIjNHdTW5ISR3b0v4Z/s669 4I+IUHjfWNe8G6jLFeatqE97Y+FXs9TvJdQaN5EkuWupP3URiSONSGPkx28ZI8jfIdfIT2v1PUdK +JngHW9d8QeGdL8W6dPqnhaRY9YthMFa0LIrjcTgEAOuSCQDlSQwIDPiP8SvCXwp8Knxp4zvza6S t9ZWDzqNwR7q5ito2PP3A8ylj2UMecV5J8RP2V4vFPiTxP4u0SXwwt1rmt6ZrTadqujefYah9lhe N7fUERlM0TuyXCjPyT28MhD7Npf4/wD2U08d/APwH+z7feKoTo3hjTBpWpXBsSovUTRrvT4ZEg3k KY7ie3ukQsQrW6YbKhqL67af1f8AUbWmjPTvBXxe8B+Px4rk8O6yjQ+C/Ec/hXVp58RRx30KxNLG rE8hTOi5/vAjtXT2WsaTqU09vp+qWd1LbO0cyQzq7RMpKsrAHggggg9CCK+QNS/YK8QXelXPhkeP dDv9L1OwN5qy6vpMlyt94jvLK6stT1swrKmy4Ie0lh/eNtIuEGwyCUa/wO/Zc1SHx34l8d+MIrLw 6z32r6eyaBp9xpGo3/2iWwkaX+0Y51la1D2TmFAqnbLgt8pDC1uuy/yQ5Wsmur+7f/I9lP7RHw/g +Kt18JNRt9esNRt9Si0WLU7jS5RpVzfyWcd6tol2uUWYwSowWTZuPyrubArvW8S+HUkjifX9NV5Z HhRTdRgs6EB1AzyyllyOoyM9a+dPE37FB1r4kz/EfTPjD4msXOvQapDpV3cXGoaeIo9HtdLErRST gnU4/s7zQ35YujupdJdgryzUf2Dta03TPDPwwik8H6pbajHqEV/rV14QnvY7eVtLFkbuSOS8McTl Y7T7PDCIo4Ps7KN+/cDo+4uq7H2T4X+Ifh7xXd+KLOxeW3fwhqr6TqLXOxF8xYYpjIuGP7vbMBub byj8YGT09fI3i39kuK4+KnhhYLnVL3/hI9dvdR8YaqtlGIL3QIUsZF0q+kYN5rS3dpYbVyu6FtQ4 w0gb65qmlZWfRX9baib1dtv6/r0+4KKKKkAooooAKxRqXic+M20c+GIR4dGmC5Gs/wBoL5huzKVN sLbbnaIwH8zdjJC4PJG1Td6b/L3jcBnbnnHrVwkle6v9+nno1+OnkDOd+JXjS0+G/wAOfFXxEv4G ntfC2iXmtTxL950t4XmZR7kIRXwr8Kv2jfj78PNQgvfjNf6hrVv4A8Naz4C1O3upDaQaj4ptZpdQ SeedlOIv7JtLeX7SVcBJ5XwTuB+6/iR4w0X4efDzxR4/8SWdxd6T4Z0W81i/t7eNJJZoLeF5ZERX ZVZiqMAGYAkjJA5qbxJ4i8EeG59IXxfruh6XNqupJY6SNSuoYGu72RWRIrfzCC8zKXUKuWIJAGM1 nZ9P6/q/5D/r+vu/M+TdC/be8XXnxA0zwpPq/wAIdUsZNTsdGkl0vXJGutVuJ9afTpBp8QaQMY4Z La5ZWYkL1wsu6Gr+1d8XvidZ6n4c8QaZ4F+NHg680vwt4l1G30/R7/T5pY7mG40JLfUb21tLq6gu rGP7VPHIjRzyIskjiEAeaPolvE/wC8N+L/FvxAn+JXhPT77w7YWOi+JfN121ig0ZBLL9mF0hcC3k dpmQF9pcKqjO0V0OkfEfSfETeM/+Ee0fUNUufBF8NMmit/I3X8r6faagotWaQIwaO9gUF2Qbw2cK AxSu4q+/9W+9DdubTb/hr/ifLqft76tBrvia1n0/wPcWGiWRtLOQ69DaPf3+bPbdIjTPMdMaK4uL 43KwNGllFHN5sju8UWz4a/bUv7sW+maxqfga41LUda0vSdGezuGiTXkm8XX+h3M9lG0ztIqWtnFc gIz7TMCxKYr0T/hqXRj8MdJ+NFv8FfiLN4e1pIWS4W001Z44ZvI+zSPG14GMcpugFKbtpSTzPLwC crwH8Yfhx4f1p/hnffCLxz4btIPEzJJqWu2NnPZ2ur6pdG/jhaSC4meIyTXSeXIUEW944xJvKqW2 m1bf/hwUHZ6aL8Nv6/E8WP8AwUN8X6h8IJ/H9ovwp0jUrm5hvLazu/FVldXWn6Y9pNO882nreRzz +XJHDDtRo7mTfKRaKYljm+l/g/4i+KOufEn4uab4z8QaJe6H4c8Ux6botraac8M9tC+l6ddqrSmQ h1/0pidyljIzkMqbI16S6+I/w/tPH178Odals9O1Gyh0vUIpb9oIYLue/lvYreKAs257ndp0527c 4K7S3O1F+NXwSi0M+LF+LXgdNHuNV/sc6mNetBbSaht/49vO8zabjao/d534XpgU766EvbU+aNS/ br1eD4Wp46stc+Est/q2mTa/bWZ8QEtocK2s91Fp1+m8F9QkESRKqmIFxdEKRa4l9J+CH7Q3j34n fEOHR9c8O+HbXwxrMfieTQr3T7p5prqPR9UtLHzmOdmyT7aVAAzm1Mmds6xxepL8TPg2DrsafEHw YD4c8y/1xRq1r/xLfLleKSa6+f8AdbJYZUZnxh4mBIKkCj4n+NnwR+H/AIG0b4l+IPiB4Y07wrq1 1babpWsC9h+yXDXUiqgilB2lDgyMwO1Y4nkYhI2YHmD10PmmX9sPxj8N9J8YWs9x4N8X/wBmXepv BJb6673OgyHxJDpkEWrmQ7Iw63/mxKXgASxljyFBmT0zxT+0r4m0X9mPSPjBa/8ACAt4i1a7SwWP /hJ9PfTg4nkWbypXvIbee4SKGV2tku8B45I1mkEfmN6nF8Z/ghPFdSw/FfwNJGmlNrtyy67aFRp6 yeS1253/APHuHBjMp+QMNuc8VS8Z/Gz4O+F/C0+oX3i3w9qqDw1P4qsNHstQtJrrVtOgha4M1nC0 gEyFIyVcHZwDuA5pNcsLPp19Bx1eh80Sft4eOHt/E6afp/gGeTwz8PW8QpcTaj9mOrX/APwjsesr LaWMs63jW7GXZ5PlZWKKWRrhXXyq7zQPi7+0Nr/xT8L+F9U1DwTo0Nh4tu/C/iaxtLG4uVvXTTU1 PdBM8isgWCZI1JUZkQyEbHES/RKa94Tvo9Wu11fSpl0bNrqz+fG32E+Uk7R3Bz+7PlSxyFXx8kit 0YGuA1/9on4RaH4r8BeGNO1nS9bvviVK0+jXGm6pp3kyxL5cRuRJLcR+cp8xEVYfNlfDbEYI22t3 Zf1qv+ChJ6XOH8fftT6l4T/aHHweXTfD9ppVlaRTX9zq2qw2d1c+fbXEkJs0klR5t00UcCrDHOWb zvMNuEjM3l/iH4sfHiPwnqctl4htp9PsvAnw71zSNNgnnhv5b3UNUkheOTUiWdvONq0UjujBkaP5 AfN8z7BvvGngSwnvm1LxZoNtNoolF8Z7+FGsgkMVxL5uWzHthmglbdjCSRsflYE8povx1+G2vWGo arpl9bvqOm6za+H9U0xru0TULKWbUWsLY3EbTDYkku+SLJ3SIcxq7MELg7Rfy/X+vkD+Nfl32/r5 ngtn+2h8QIPiN4W+F3iLw54JsNVl1CW01+5n1mOytpFTXbvSibP7VNExZY7MT7FE8sjXNuixqrNK npfgP41fFi6+CWu/Hjx94L8PvpMXg1PFWi6X4furiW8uGSC4mmt5DIgG5ljtym1TtMzod/liSTrP EP7QHwW8PajZWtz438PXQ/t+40DUbq21O0eHQbuGxvb2X7e5kH2bEVhOp3fMGKggDcR1Xifx38P/ AIeeGk8TeMfGGgeG9ATZFHf6jfw2lp8w+RVkdlTkD5QDz2qW/dt17+o3bnutux8pf8NkfF+4WWXR tP8AhbrVl4Z07X9Z8RavpOqXN3pt/aaZbaJdFtMnXAZs6vLavvyqyQNJkbDA3d/tkfGH4veD9Ih8 Dfs+aHf6l4yfSrzxRqNxZQWk50zTbNcruS4mjBNxctDBhRJJ5Iu2jRpI1FejXXxy+B2j+I9M+Hvi Dxd4a0XWdc1CfRdJ0q7v7MS37B2jYRxpI2EeWNogH2s0q+WV34U9ZY/EHwXrWna7qfhjxLpevr4a nns9Uj0q9huXtbmFd0ltJtbEcy8ZRypGRnFJySXMtt/6/UFFt8r32PHfhl8WPh/8RvF/xV8BX3xc tnk8UeIIF8M2EPiQ2uotp03hrSbgvp6rIs0a5e5mDQ42sZHBB3GtD4Ex6r4e8BeK/G+s+J/GHie6 0vXPE1ktjeak96ZILLVr2K2WJGyfN8iCGPqNxySMkmuo8PfGH4DXvhCf4yxeMPB+jabP9nt9W1S9 1Cztmsrho42S0vZt+2OdVkiUxO2QWUdxXW6d4+8C6x4q1LwLpHjTQr3xJo0azalo9tqMMl7ZIwUq 00CsXjBDqQWAyGHqKck7tR03/r5Ci1Zcx86+Df2m/jH8UNJbTfhto3ww1jxBcXc8Vtf22vXF1oqB NPtL4Q+bEhaWZWuhbvjYBlZeOYK7P41ftF3Pwq8f6f4IxoMc2sf2DHpceoTmOe/kvdbh0+6WBdw8 wwW8vnEKCVJUt8vXvh8YfglZ6RquuD4p+B4NL8PiCTVbwa5aLb6f9qw0Bnk37YvO3qULEb9wIzmt LVPGHw1+0WtrrXinwz55lVraO6vrfeXEtsilAzZ3ebd2SjHO+4gHWRMuLvLmS0/4H9MVnblb1/4J 8seG/wBs74oXPhzw9L47svhn4PvvFui6Fr1jq2r6nNb6TYW+o22sTqLhmbLSONFyqh02fbQpaQ2+ Z+T+HH7cPjvSvAdvpFzZeG9Rm8I/C2z1i4uNc8RxrqmsX48Mwav5ixtL9om3tLsZVhYbY55WuAyi Fvt5tc8FLeT6c+saILqC6h0qeA3EXmJcGMTw27LnIk8uQSKh52uGAwc1zifGb4D6jptjqsfxW8A3 NhrPmWVjcrrtm8N7tkihkiiffiTEk8EbKpOGmjUjLAFRWo5djxrxb8YPjL8KPFtz4y+JOn6Pc6R4 c0W0vfFtnoM99cW9lpc19dRG+t4fLLPNAqxyy5TmC3nI2kooq33x1+PdzqXhiz0Hwh4f0fxd4tuN MsbzS9euLyS10qKXTta1Rl8uMqftUcdtbxvjAlkRk/dqEkX1zxh4i+BHxesNT+GupfE3wzem11i2 ttW0+z1u1aYXFpKb1rK4TcxG5bC482FgGMUc+doDMOo0f4nfDDxP4nk8GeH/AIg+GNW8Q2lkmqya XZarb3F5DbOsZSdoUYusbLcREOQARKpBIYZTu4cieq6/e/69PuErS5+//APEfgb+15J8bPiB4f8A D2mWXhqGz17R7/U30yHVDPq+mx2rWqrcXSABUiuHuv3KY+eIJMHYOY043xd+2h8UvAp1m88QeCPD LaZc6pr+meHLmK6eMqum+IrPRhPemWRYkDm/GFMkSb7YF5YkuM2/sVvN8JPDPxNh8X2Xi7UPE+u3 GrSeBoLWDV4ru38NyXKrdTWpgRlEAb7FAxDh5FCIF2oSD1fhL4q/DT4g+OPEvgXwfqena3e+ErK3 l1S6sZre5toWu57uJrUvG7FZ1fT5DLGwXG+I8kkLTV7SX9bfo/xC6Ta/rr/XyPn+5/aO+NUMNr8S 7fV/AWp+HIfhXrnjC70LRz9uWW+00wpLFHfwyujMJ3KEIXRcSJmRgs1UP+G4vGOp6ZFd2WheDPDE GpX9tZW2s+L9RlsNN077Smsahbi8fnEjaZYaXIY8qyyapHnG3YfsZrW2cANbxEBDEAUHCHGV+hwO PYVH/ZunYmH2C2xcyLNMPKX966hVVm45YBEAJ5ARfQUl5+f5/oD30/rT/PU+TtQ/aB+N3jvwL4n8 Z2ngy18O+HtNm0iyt7C2vJU8SJqVyNGuVtyJDHByNQmgKMybmQBiFYivdP2ffiTrfxZ+FmneN/E+ nWOl6zdXV7BqGk2omB0iaG6liNlMZlV2uIdgilfaqPIjPGPLZK9DWGFC5SJFMjb3IUDc2AMn1OAP yFOAA6ADPNNsVuvUWiiikMKKKKACsr/hFvDo8UHxr/Y1p/bxsBpf9o+WPP8AsvmeZ5O7rs3ndj1r VoqozlG/K7X0CxynxZ8Cn4ofCvxl8NF1QaafFvh++0L7aYPO+zfabd4fM8vcu/bv3bdy5xjI615P 4y/Z0+J/xK1nR9b8f/FTwbeTWccun3aWXgaaJTYvdWF0RaebqUxtbsSWAP2nMgG6MiMNCrH0344a T4v1/wCCvj/Qvh89yvinUvC+pWmiNbXQtphevayLAUmLKI28wphyyhTg5GM18yap8BPj54JuYNN8 M658WvF/h2W9vv8AhIN3xJlGqahZpqmmzWMdlNcXaC2k+zPfpIyNA0iQSqZEaSImV8S/ry/X7r9g e1/67/p99j0I/svfEC20bQdG034meC9nhDxFJr2hz3/gae4mk8yHUopf7RYakn2q4ZtTebz08jEy u5Q+YQvTfBv4UJ8BfC198N9O+JOiXPibxDa21xpBvNOES79P0TS9JaUWS3IeaJWsYpnVJE2i4WPe MCRvli/8N/tEWnhbX5NV1T4jaBqvg/wTK2vazefESS4s9P2aJqMUitbR3jefdSTNZ3aT7SUG1vMj eLY/bxfCP9qLVPC+pW2gXnxC8PadrelapFZWmpeP2v8AVdMkm/4RyOKRro3MgMubTXLiLbI6xicr mPzfKBGV+aC/rez/AD/4bUFFe7N9f+Bf9P8Ahz3Twf8AAjxNpH7OA/Z98U+PdK1P7Fokfh/S9X07 QZbD7PbRQRxQtJC93N5kytGXLLJGrZACrjJw/EH7Iula98Y7v41P461MapJ4u07xTa6ZcRG60mMW 1la2TJJZSSGJpzHbyvFdosU0MkqnLrHsbwfxa3xW+HHxB8JfDHVPG/iK+vZvF9l/wium23xIY6nb 6ZL4puJZ7m/tWuftWpW8mlm2gTzVuVgW0vGcRBSz+4fsr/DT4jaL8PfF/hv4u2PjCyl1W/8As9te 6x4ruLnW7y2NpCrTyzwahcpbyiVpkVraSDiNHEURxkXdDu7tGN4s/Z9+Hn7Tvj28+P3gf4sSJdDT E8JWGqaVbGVLe3VdRgv/ALPKziN3lj1LEVzGuYXt1ZWkR5Yn5mP9gHXF03Q7aX4o+GZZdEjubUwN 4Y1QWOowXEFtBML2Ma158xMdlbQrH54tlgRoPs5jOBH4d+Bfx08G+CvgT4V8OQeNYY9C8N6ZDq8d t45ljt9E1ZJtOa6kvY3uT9ttBBDdRRWsXmQJ86CMLMskXovwr+Dnxc8CfAHWWtfiB4un+LHiHwcI f+Kp8SyaxaabraxXLRzReaZkjHm3EaOE3RsltF8pYOz01yp2/q36dV/nce+/T9V/wyZwukfsfeLv Ev8AwlN9ret+G9H+265rk9jBN4ZuY7qaa51myvv7Rubuy1O3mkdjpNrJB5T27RBkDF/KVR7q3we1 C7+D3hb4Y614zbUtQ8PXWh3tzrU9kS9/Lp17a3bO0ZkJDSm2K7mkdgZNzGQg7vkXWvCP7Q6+OYPA fhzRfi9pF1rln4j1Dwfb6x8TTLLpDJbeF7aHUNRnj1Gb7TawXr6hMbXM+4XJCwEMyjpfBXw/+Onx DvtUk07VPiJY+FbjxvNbarqDfEKcPqtvB4gvRI1gqXJksLeO0jEDrGYWl3rtQmISNEY6xp97K/4a g5tylV66v9dD2jXP2VtJuLSHU/Dl54as/Fll42vfGttq2peGFvYpJLmcymC5hWeKSZV2WhVhMh8y xtZOPKVRyXh79jTxX4c+HGs/C22+Kfhm40nxD4PTwtfXtz4LkfU42i0ZtJgkt5/t4WKJFPnGEo5L y3IEiCf5PPfjD8Pv2gPAOk+OZLPxT8Rp9F0bQjBp/ieXx0R9vs47PToLa0S2WVWj1N7uO6mkvTGh O5h5jrP5Ufovwv8AgP8AFPVPEen6z8Q/GHxP8O6Tobf2hoOlDx9PdSRn+2JrtLbUnWaUXp+zJDA/ mtMghuHjV3ZEkQSfKlbT/JW/JW/pNjfK3JPX/g3/AD/rc6fQv2dPDd/8BfEXwt8IfEU6n4P8W6if Efh28lUanHHBcSxXxhuZjIW1S0muPOeQyOHmt7lojIeJTc+F/wAErzw34r8G+PG8S+HvEENpo3ih r3UdPsfsiXdxrWrWWqRvaxB5QtunlXIGZnb50OXLuw8o+Hnwq/aQn8WeAtL+K8fxDurODTrSw1zW LTx81vYxWI8NLBPBNDBepNNfHWPPlN0sTvh4mWfCBUz/AAD8Af2gvBF58B9KW58bQ+GfC3hXQINX 0zS/GDKllqsLudSW+aW8KTWTJJEqwRQXQIthHE1nHlpT7X4CvaP4nY/FL9kzwl8Xf2gH8Uf8LPls tR0e90nxLqHh5dP8xJLOaOWyvIpWEih47+LS7SI7g3lf2aSoPmmty0/Y+sdNurW70vxlDau+q2+t aqU0dd2oXMXiWHXg7MJQV5Sa2Gd2FkRhxGEah8ePhx8XtT+JuseMfBegeINT0G90rQLLUbLw94mT RNS1WO1HiRngguhPC8Pl3OoaVM7eZGHjWRQZPmia98O/A3x70/xtNN8QbvWNR1+HTLGOz8WDXpH8 NoE02ziuom0aK6g864kvl1CYO9uAEmQiUFFhWot/df8AFP8Az9PmTJfj+jX9f8AseEf2V7vS7D4f +HvGXibwp4g0P4a63bavpMUfhA291eNBZajbpJfTPdzLPdedfreGdY4/30UjhA0u5IvHP7LHiTxL 8Cfh18GPD3xMsNIuvh/pNvYW/iGTR71rsXENgbFbq2W21G28pvLknzFKbiJxLtdHUHdz/wARfgf8 ftcX4qeM/DXxE8V2vi97y1i8J20HiW5t9GvbAaTZQ3iR6etyI4JJJzqBjYvDKk6ROJo1zI3H2Hw1 /am04eDQ+nfE+90/Rr/TZrCOXx/B9sttmti71V9YX7btuYp7Ii1tIDcagI4oiJGR5Gajf3R3suY9 yl+FeieGdX8EWmpeOora7bx/rmv2KfYtkuozX1pq0ptI23nY0UVxJL5nO4Wn3V3fLznwX/Z/uf2d Phpq/g3XPifot3HqthYeG9N1Y6PdQ3Ecu1rO3EzXN/cmXLzQrHBEYIIzuEcaeYccRY/AL4q+O9C8 CaX48tPHuk65o/iZNT8W683xAnJv7ldG1SCW70sQXbNY2ct3dQqIoVtmMUhVoY1Suv8AG3gD43+K P2dfDWi+K7W+1/WoIPC11q2haVeLYaz9ptbqwnvyuq/bY4zL+5uSro0XONsmcMa5YzSjN6aL5a/l 95Kk4XlBa6v5nGeKv2MPDg05vh/4M+LXhLw49v4Tj0SfT73w4l20KXlg2kSagkS3kLR3EyRCOKUk gN9pQ+b5pC+w/Bj4FeIfhb418V+KtT8cafqNl4kke4i0jTtNvLS1tZ5Z5J55wtzf3SpJK0g3i3W3 jcruZGbBXyU/AD4y+NPA+ueHfiPL4puLZ9P0i90DTv8AhObsTWk8et6zc/Zri5iuFeWaCwudLhlm ZpFkkt0dWmeFHHX/ALUPw0+JviPQPA/g74UWPi/UbLTi8F2kfimW1tJUVYYoxqlz9utr+ZdhlfzY 5Z2DIWkguGZQIT95tdf13/ruFtLPocZqn7Bllo/hbw7Bo3xXtNGbwpp2lLc3lxpt1DDeTWSa59pu p2tdQtpkNwdfnkbbOu0xcs6uyizF+x54S8MfEub4oeK/jTY2Vrpr6FqGo6Lb2EOm6bZ2tjDZBEiR pm+yxT3+i2FxnkbLPyBnLSVzl9+z/wDH/wAaeFvjjoHxBTxvqd34h0/WX0EDx3NaaVcXJlujpsVp bJeyMI3jnCTCb7JAFit0NtMQ8w9A8Sfs9eMtJ+Jfi3xb8M77xTbNfaB4O0qwvrvxpqFx5i2mrXT6 lGyz3LksLLyMM68tPMVO+a4LJaRUl/XyNH78+WT/AMtTpPjR+yhoXxj8X6x4su/Ft7pg1rwdeeGb iyjtkkiF1JbXtpbagDlW8yG31bVIihJWQXEZJUwjOd8Nv2RrHwzrel614/1bw14s/s2x1eza3Ph6 423T3/8AZa+fNJe315K8qR6WYctIR5UqRqI0iCt474+0D4sfBuyXxl8QvHmt23hvxHrl9N4ksL74 pjSZboC91OWystNu7i7jSzzFLYSkW8kJa3sbhXy5ET/U/wCzrJ4kn/Z/+Glx4ym1OXX5/COlzao2 qNI159pa1iaUTmT5zIHLBi/zZB3c5ohJuHNtf7/67eQp6St2/wAl/XqeG2f7E3jfTfD1vpek/GXQ bK407UnutMiXwtfT6dYW8umX+nzQRQT6tJMildRaVFS4WCJo/khAd93efAv9mrXvg744vfFFz4+0 u/0260xrAaVpujXdlE0pNsFuXE1/cxJL5dqqN9mit1lLbpA7Km33mirUmhPVWZ80eB/2NZfCmtWt 9ffES1uLLTDY29jBp2hGwmNra/2wytcTfaXEt48mtPK9yqRhmhz5YMjGu2+A/wAD/Evwm1DUdR8S +MPDutNceH9G8N2cWieFjokUFtpouhG0ifap1eRhdYJURqojUKoGAPYaKlaKwmru4UUUUDCiiigA ooooAKKKKACsIeKwfHLeB/8AhG9dBGkjVv7X+xf8Sw5lMX2cT5/4+ON/l4+4Qc1u0VcJRV+ZX0/p iZw/x08Zav8ADr4I/EL4g+H1t21Twx4V1PWbEXCF4jPb2ssse9QQSu5BkZGR3FeMn9sVtJ8S6T4V 8SeHs+JNOs7nS/FnhbT1U6jFrrXujWtglo08scZs7n+03kimkZVaNkLNG0UqL9E+K/C+heN/C+se C/FFgL7RtfsJ9L1G1Mjx+fbzRtHKm5CGXcjMMqQRngg1g+Mfg38L/H+rHX/F3gvTtQ1X+zv7JGoF THdLbC4iulRZkIddlxBFNGwIaN13IVJJObvbT+v61/PoUrHLa/8AtFaVpHw30D4h2HgLxNqsviDX l8NRaFbrbDUIb/z5bZ4X3TCDKTwPGziXyxgvv2DdXD2H7dXgXUvBbeMLf4X+PvNTRrjxS2ktHpov BokNlZ3r6iT9s8nyTHqFqqp5nnGRyvljY5X0Txg/wJ+Cng3whpXim1sfD/h3RtRjh8PRR207x2tx Db3E28eUrFQsEN1I8j/KFWRnbkmsuL9mD9mzxR4e0xrPwRYahpL+HbXQrG6tNUuWW40iOARwwCdJ cy27RbNwLMsuyJn3mNCtW0b/AK/rfuTfZeX9foXfht+0Dp/xC8aXngiXwN4g0SeO412PTr+8ktJL PVY9I1JdNu5ITFM0qbZZIflmijJ3nbvC7jwniD9u34X6DYLOvhHxfqN/9tj0eTTLK3tWuU1QvqEc umgNcKHvI20yUGFCzOZ7byxJ56Z9F+EnwD8F/CjUtf8AE9lZ2194m8RatquoXesvCyz+ReajcXy2 y7nfYieeiHZtEhhV2UHAXV1P4JfCzVYr+O48H2sLalrZ8SXE1pLLaznUWgW2a5SWJldJGhXy2KEb lZg2d7Zl30sUra3PPNV/a2tdOj8UXNv8CPipf2nhOONb24ttMs2U3Lpp8httv2nfG8cepxSSNKqI qwXBDN5TYgtP2roHn0xB4M1PWtR8Q6bpU2laB4flsLuSWe6h1W6cx6i97HazxfZtMeQcRgBRh5Wm EcXpKfBH4WweFbzwTYeEodP0W9ure9e20+4mtPLmt44IoHheJ1eEolrbqvllcCMepzzfj74Mfs5+ H/hlqMvjXwPpln4R8LaIkt08Uc4a0sbC3uANphPnHZBPdoQuWdJpEO4OVJZvRbiVupyL/ti+Hdb/ ALctvDPhjXrW0i0kXWi+JLqxhubG8uZNNsdQiiW1W5iuGYRajAWVvJQ7SolBPy3bL9rvR7jxE/ha X4U+M/7Qvdd1Lw/4cjgNhJ/wkM+n301pdtbbrlfLSNYHmZrjyfkSXbuKjf32t/C34K6dHa3+u+Gd B0+3TU42tvOYW8Au7iGLTYkVdwTc6C3gRAMFhHtG7BrlPiB8AvBHxN8N2sfgzTPC1ld6bqepiK61 zRby/ihe4vjPf+VFHd2jpK93CriUSEAK6qCkhq5Wumtuvr/ViYqVmpPUvXP7R+jP8O/APxB8P/D7 xdrrfEi8Sx0bR7NLJL4O1rc3ZaUy3KQhFis5mLLK2eNu7IrktG/bc8Ba/da1a6V8OfiBN/YZgs7h /wCz7VVXVJru0sY9Kkzcf6Petc3iRBJ/KUiKWQN5IWV/SvDvw18E/DvwF8O/C+oebfQ/DhLGw0S8 kRhItz9mbTElKRALueO6lQ8bF80tgbQRm+KP2ff2e7ybWfFvi/wB4faOV5tVv574kW1rOVVpr1EZ vLt7giNWa5QJL8u4v3pe7rcrsc/of7WPhTVjNBd+DvEWn3lrqem6RcW0gt5WiuLzXNQ0QDdHKylY 59LnkdgSPLZCu5iVHMaJ+274XXwF/wAJx4g8D+LJNE0zTtKOqeJktNPsdNN9faZZX8MIjk1B3tt4 1C2j3TP5MbyqrXBUGSuy8HfsnfB3w5pnhlL3QBqepeF5EuLPURdXMLO8d7PfQtIizESbJ7md18zf /rZOzsDt+EPh58DPEvgLxB4b8LeFtOu/Cus382larZPDKIZLjTQmksgSTBXyf7MihVkwM26uhJIc 0+XkaXxX/C3+f9MmLbab2POPH37VWp3nwd1zxB8PPhr44s/EI8NXeq/6bZ2EEmgI01za2l5cxXFw BJFLJazzR+Us2+GEsV+ZFf6TryvU/wBlz4CazaxWmrfDmyuxG0zySzXFw0920skcshupTJvuSZII H/fM+GhjIwUUj1SoW2pT30Cis3VfEOj6LfaPp2p3gguNevW07Tk2M3nzrBNcFMgEL+6t5my2B8mM 5IB0qV0x2YUUUUxBRUF5fWWnQfatQvILWHekfmTSBF3OwRRk8ZLMqgdyQO9R6lq2l6Nbpd6xqVrY wSXENqklzMsatNNKkMUYLEAu8kkcar1ZnVRkkCgC3RRWRrfizQPDt3aWOr3rwz30c81vGkEkpdYU 3yH5FOMKQeeucDJ4oSuDdtzXooqK7uoLK1mvbqTy4beNpZHwTtVRknj2FAJXJaKz/D+u6V4p0HTf E+g3f2rTNXtIr+yn2MnmwyoHRtrAMMqwOCARnkCtCm007PcSaaugooopDCiiigAooooAKKKKACii igAooooAKxZfCtrN4ph8WHV9aWeCEwi0TUplsWGGGWtt3llvmzuIzkDnitqirhOUL8rtfQDyj9oP 4P8Aif4xab4UsPCfxAvvBV5oOtz6odZ0/Yby3D6VqNkDCHjdS2+9TcPkbZvKOjhGrwUfsTfEW11m 9vLbWvCktrL4b0/w3FA13epCulW1vYxXGhxKVe4js7p7As00t1deUlzNst2mkkuZPtGioY02tj5J 8Rfsk/EHxLrM15DdeFPDNjJoEum2tvol9eRHS4HsLuzGjW22NFWwE1xBfecqoxntYh9nwkRi4fxZ /wAE573V/DOueENBj8JaXpOqXmo3sVpb3d3bosgXxRHpbP5ceT5Ues6RG4ORssWj+dERX+7qKadm 2uv/AAf8/vJS1TfT9D5A0/8AYy8Y+HviroHiTQtS8Pf8Id4ZvS/h/QjdTQJoCSXT3lzPb4gaRppn uZ4mSOa3Ro4IRMblGMKcwv7BHi3RPhZF8OND034e6nZPpH2eTT9UnuktLfVZdM0y0l1ePbAwe7ST T7kozRqxW+k+eMb45PuaiqVRpW9Pw0/rqJwTvc+P7v8AYs1fxVqfiGf4g+HPh/rK6nrXhu/+2Xks 9/PqP9n61cXd5dXKz258ua5sLk2nlK8kapCkIYQbVji+J/7G3xL8bjxDaWfiPw28eq6X4itdOu7u 6ulm0iXUZ9dlZYY1jZNlyurWCXLcHbp6gLKRE0X2LRULS1uhUvevzHhdj+zveeH/AAFqXw58L3en 2WixePdE8T6HbvNNIttZWd5pd5PE5YFvOkms7xy2W3vP5jtud8c58Nv2WtV0z4A/Ef4Q/ETSfCWo S+NLu5ubeMlL+Nne1gWOW8uTZ273M4uYmm8+WOSf/VlpZXXefpeim3ePI9v+G/yBaPmPnn4f/sy3 nw/+N0PjnQ4fDmmeHbO1MVmunLJBdW9sbO3t/wCyEt1UQpYC5juNRypybif/AFandI/Jaj+yH4ss tQk1XQl8M6rDrOv+IdZ8WaNquqXsNp4lhu9Z+2adZzuscmy3ggmuWaIRtEZmcGN1uZ3P1nRTlJyf NLf/AIf/ADJjFJcq2PiK4/YR+JM/gjS9CuPiBplzLpGjaXarpzODaXk3lWUesQyvcWtwhguJNJsL pGe3lPmvdCRGEuR6n8VP2dPGXjn4S+Bvh9ol7oljL4b01tNMc2pXzQaTMbT7Pb6lay8y3V3Ykb4f OKeY5MheGVY3T6KoqbdC+Z3TPkCH9i+80fxNfeJLvULC30vV7+/1bxNcaO9wNXujLD4piWW3KRbj cLHr1ksfUoLUqu7am7r/AA/8FPiVrX7NNpo3i64sdV+IHi2/sfFXjW11iV7Wz1acy27z6bcGFZdl uttDHZYVHRkgUOjq7q30hRQ9b+f9f5fcDd7P+v63+8+K9Q/YX+IC+EtStNJ8d6X/AMJTq91plpqO uSzzmS90a10Kxs57ArLHOirdXdiBKHSZWhdGlW4aFIT6B4v/AGbPF+vfs7+FvhHZ2vhaRtBvJ5br QL/U759GvLdobyKCCSZUEjJbyXNtcoqwxxiSyjWKO2VYvJ+lKKbd/wCv6/zEtP6+X6eh8lan+x14 h8W6lpugfEe08G+MPDPhqx1v+y9Q1p5Lu/vL3UtUsNQaae3ktzHEY1trmHcsshdZACFDMoZqf7D+ j+JvGHifVvEvgH4dXGk3ut6Nd6TBcWkN5JFZ2d9bM8QY2UckEZsbb7MLZpbmLDlENvEXR/riild2 sn0t/X3jvd3fr+Nz49vP2MvFfiT4t2ms+MLPwdeeEG8U3mua3MupXjalrlru1H7BaXEPkiJoIIL+ Kz8l5JENvblBhJXipfhj+yF8T/DF1pV34t1Lwfea5ZeG/wCx77xdb3FxJq+pl5NNk+zzB4ADbwLZ T28bbyzRyKxWN2kLfYNFKS5laX9f1/WgXs7ry/D+v6Z+fPxf/ZZ8cfDTwVqdn4Us4vFFz4p8OQ6Y +hR6dqWoQ6nryDVyl9cvDayRJ5LX1gtubzZAgtYwzxfZYZF+nfiT8Gdf8VfEbw54wg0jwv4ittH0 n+zbRvEF1Ok+gTGUPPeWYSKQTTzosUTF2jMYgG1mWWVG9pooavq/60t/X/ABO239f1/W58WL+xD4 38IaJpegeBx4M1ew0pU1C3tdYvry1ij1oWmlQnVgI4Zc3QfTborJxIP7SmYOpBWTkfjJ+zF49+Hn g6bSPCtr/wAJVP4l8HWuiHRI7XV7yK98Rxx6gDqk0sMEkMTRNc2CWpvGjhjWCPMkAs4GX9AaKqbc 5Ob3f+dyYJRjyrY8G+BfwC8WfCz4r/EHx1res2GqxeMLueZtQe6kl1C6i+1SzWcMi+VGqLaxTywB pHu5HUxhJLeKJLeveaKKQwooooAKKKKACiiigAooooAKKKxdc8a+EPDNvLd+IvE+maXBBcx2cst5 dJCiTSAMiEsQAzAggd81UISm+WCu/IDaorlV+Kfw4k1228NQeN9Gn1O6uJrSO2gu0lYTRMqSRttJ COruibWIO5gvXin6l8Tfh/o11qNlrHi/TLGfSniju47mcRMjSgmMANjduw2NueVYdVIG31WvdLke uuz2vb89PUXMu509FcxpPxN8Aa7p2pazo/izT7vTdIha5u76OXNskShi0gm+46AI2WUkDBya3YdU 025+1fZ9Qt5fsMhiufLlVvJcAMVfB+U4IODzgis50akG1OLVu6/rugTuWqKpWes6VqENjcWeoQSJ qUH2q0w4BniwrblB5Iwyk+m4etXahxadmCaeqCiiikMKKKKACiimu6Ro0kjBVUFmYnAA9aAHUVxM vxr+FMKfaH8c6YbTyBcteq5azjjLMoL3AHlIco4wzA/KeK0dG+JPgTxDPfwaH4psL46XF513JBJu ijTark+YPlOFdCQCSoZc4yK6JYTERXNKm0vRiUk9EzpaKxbXxp4Sv9Dt/E2n+JNOvNJu547WC9tr hZoZJXmECqHUkEmVgns3Bxg1Y0rxHoetyTw6VqkFzJaySRTIjfNGySyQsCDzxJDKuehKHFZyo1Ip uUWrOz02fb1BNM0qKRmCgsxAAGST2rG0rxp4T1ywsdV0bxBZXtnqVw1paTwSh0mlXfuQEcZHlv8A lUqEpK6Wn9f5MZtUVieI/G/g7wfLZw+K/FOl6Q+oMUtRe3aQ+aQVU43EcBpI1z03SIOrKDhr8b/h E0dvKfiLoSLdR+ZD5l2qGT940YUA4O8ukiqn3mKMADtONoYTETjzwg2u6TE5Jbs7eiobO8tNRtIN Q0+6hurW6jWaCeFw8cqMMqysOCpBBBHBBqasGmnZjCiiikAUUUUAFFFFABRRRQAUVzp+I3gH+0m0 ZfGeiyX0d2LCS2jvo3kiuCWAidQSVclGAU4OVI7Gty2vLS9EjWlxHMIZGhk2Nna68FT7itJ0pw+O LQromorD0bxx4P8AEIsm0LxNpt+NSFybL7PcK/2lbeTyp2jwfmVHIVmGQCy8/MM7lKdOcHyzVn5/ d+YJ32CiiioGFFFFABXnPjD4Nf8ACXane3y/EjxVo9tf31lqctjYJpzQi5tHheGRTPayyDDW8TFd 20lTkYJFejUVvh8RUoT9pSdn6J+fW4mk1ZnlfhP9nPwL4X8Xw+N5ri81jU7VriS2+3W1kkUMszRM 86xwW8Sm4/dYM5BlcMQ7PtTY/V/2f/Dup+NL/wCIVn4n13Sdfu7qK8gvLGOxBtJEgkt8qHtmEuY5 pVzOJSnmN5ZTNeo0V0PNMW587nrbl6bXva21u667PQXJHsebeF/2e/hj4N8Aa78OfDmiCz0/xFaT 2OoXUaxrezQyCUKjzhdz+WszrGX3FRjk8k8lqv7JfhbXtZ1TVNb8Wavdtqmmw2c88lnp8lzPOt7N dvNKz2zIwLSxqIgixARglCyRNH7tRVwzjHQnKoqj5pO7b1d9O/ovuQOEXujwa3/Yz+FMelaxpNxf 63cDV/tRFyfskNzaG5ULKYZYrdGBIAHzFgRlW3KSD7N4Z0G18K+G9K8MWMryW2kWUNjCzxxxkpGg RcrGqIvCjhFVR2AHFadFZYrMcVily4ibkr317ihTjBWigoooriLCiiigApsis8bIsjRlgQHXGV9x kEZ+op1FAHkC/s0eFZfPbVfE2sanNc+HbjwzLdXVlpf2r7NMJlJSdLRXRgs7ABSEOAWVjuJ66y+F XhKwuvFuo29rt1DxnldRvxFELoR/Z47cRpKE3bFEe4K24BnY98V2NFdtTMcVUVpT026LS6fTzS+4 Sik7r1PBNc/Y78EeI7ufUdY8a+KLm9vbqzvr+aSLTJFvJ7QSJbSSQvZmL5I5ZI9qoEcMS6u3zVoa V+yV8L9G1bw9rFld62ZvC6KmmCWeGXycagl/nc0RbduVod27PlSOudzb69rorpee5i4qHtXZena3 4LRLotFoZ+xp66bmDqHg+yvYPECW+r65Y3HiO1NtNc2+qzl7T92Y1ktUdmjt3AbdmNFywDMGIrzL WP2V/B2rCCWfX9XupbXRrvS0hvTC9tcSXKbZricRpHKzuQhYRyxgbfkCEk17XRXNQzHFUNaU2v8A hrflp6GnKr3PK9e/Z48J+JvCvhrwdrOu65Npnh+CSKeBpIJU1ZpNplmuxLE+6dmEjecmyVWmlKup bNYviP8AZP8ABvi60e18TeM/FWpmW6i1Gd7k2Die8idzHcSR/ZfLYrHK8HllfJMRAaMsAw9uorWn m+Np25KjVm303bu+nV7/AC7IXIrW6GZ4Z0Cz8KeG9K8L6dLcSWmj2MNhA9xJ5krRxIEUu38TYUZP c1p0UV58pOUnKTu2NKysgoooqRhRRRQAUUUUAFFFFAHjerfsteAtc1m/1rUta1zzNQ1qHXXitBZ2 SLNHM0w5t7eNnJLFTJIzzFf+Wmeau/DX9nHwb8LvFUPi/QtX1ae9i0iTRfLniso4TC9y90SEgt4x Gd8hGI9iEBSylhur1eivSnm+NnTdGVR8r6adrEKnFdDy7Sf2evCGl+MdD8etrGsXut6FNeTJdXIt S85uZbqZwxWBSih7644i8sMGUSbwibfUaKK5cRiq2IkpVpXa0/Fv82ylFLYKKKK5xn//2QplbmRz dHJlYW0KZW5kb2JqCjU1IDAgb2JqCjM5NjQ0CmVuZG9iagozIDAgb2JqCjw8IC9UeXBlIC9QYWdl cyAvTWVkaWFCb3ggWzAgMCAxMDI0IDc2OF0gL0NvdW50IDYgL0tpZHMgWyAyIDAgUiAyMCAwIFIg MjcgMCBSCjM1IDAgUiA0MyAwIFIgNTAgMCBSIF0gPj4KZW5kb2JqCjU3IDAgb2JqCjw8IC9UeXBl IC9DYXRhbG9nIC9QYWdlcyAzIDAgUiA+PgplbmRvYmoKNTYgMCBvYmoKWyA1MCAwIFIgL1hZWiAw IDc2OCAwIF0KZW5kb2JqCjEyIDAgb2JqClsgMiAwIFIgL1hZWiAwIDc2OCAwIF0KZW5kb2JqCjI2 IDAgb2JqClsgMjAgMCBSIC9YWVogMCA3NjggMCBdCmVuZG9iago0MiAwIG9iagpbIDM1IDAgUiAv WFlaIDAgNzY4IDAgXQplbmRvYmoKMzQgMCBvYmoKWyAyNyAwIFIgL1hZWiAwIDc2OCAwIF0KZW5k b2JqCjQ5IDAgb2JqClsgNDMgMCBSIC9YWVogMCA3NjggMCBdCmVuZG9iago1OCAwIG9iago8PCAv TGVuZ3RoIDU5IDAgUiAvTGVuZ3RoMSA1MjI4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp4Ab1YfXBU13U/9739eKvdfe/t98dD2rd6K4HYFStWgASo1oJ2BVjECJDJro3QLvqwpIAlI7Ch DZY0qiyzghrVlQzETcB1seOk+MlhksUGGU9DOp0pE8900syknU6nSZz8YSWedNwPO6Ce+3a1gOOm 6bTTpz33nnPu1zm/c+599wkIAFhgDFiIdx/ODkMMFlDzN0ip7qePytZx+QAACSH9cd/wE4cvmrr+ CoDJAxhvP3HoRB/c/ulFgLLnAQyR/t5sz7/86NZmAPEqjt/QjwrLB9ZtKH+Icqj/8NHj5W8yLwPY RJTlQ0PdWeOYHsfa6lC2H84eH2bruD9EOUHbn8we7lXnfBmUe1BeNTw0chTOkkdQPo1ybPhI7/CW vtw/oHwTbfoG6gj+0ccCBtiJ9V4IFjWa+jcK5jMaVpN1oC/pDWDUHwMfQKEs6UsMe462Aiz9rKTS mLs1D8r/G4nDwZT+358b9634FhxGaew+DcBcUXod6zeRaFwADsBlrf6fF9txSD/S7yE9DA9hLr4B s3AEXoC/gKeYUxj9v0ULVgPEGxs2rF9XH1tbF11TGwmvrlm1sroqpFQG5UBF+QrJ7/N63C6nw24T Bd5qMZeZOKNBr2MZAhGieltS8z5jWAoGg+naoux/UFbZKvFXQRXsD3SSHuw0v+Izcvln5IqS/IgK TrVVaUnQieeh9QMVHCpxqkBXIY4v4EpFS5I9g0pyQPW19GQyOCKhiLLa+lG0aIpm8Ly5rEVp6S2r jcB8mRlZM3LYd3ietD5ENIZpTW6aZ4Cz1kZUe1hlqpKUBtX4dAYZJYGuY4vjXkt+6ebp+5sAhxU6 AXbTOKIaWlSjtq48oMazKkzL85GbudN5EQ5mwpYepSe7P6WyWQR1HtiqZH8HSrgyUqZfVnW4rlZI qJGT/XIOZdotg6WSwFGfq0e1qSU1FbwpqXask6otrG7Dkdt+/ycSm0t6B2Qq5nJTsnpxd+r+1iDt k06nvbUROZdUcKFEbSQ5uBWR9kZrIxQCsgxNT2aQ2jKYpXYmB+XcdK9m62nNNq1rsh8Dk/3veuVy yR4l2ZPtocvg7C1qvEOroOMxCoecROgS6aKq2AFbdFpLJpFGrKlhbXtSLdiaVLIJzEGapyVNpqhB RXK5UaZ27lDjGVXullXYk1JwcCMtehsh191I8xinIbWRtvZ7o1R9lajIuY9BJRll8UNq8T1Ntqgx VIkfA21sVVozuVyrIrfmMrlsfmnsoCKLSm6+rS03nMzgqu0plaD+7WlJbT2dVsVMP9mE2NMMaN2T apaCNvSjILYvi4AphYmFKYzuIAr421GsMBbQkQrKLSo8mkpLCGSK8h3IF2qaSJi4jRjjImwUo17q LC5E+SIbDNLsnM7H4SDGXR3bnSrIMhyU3oJ4NIzxyNCWm8strkdpy9hyS2l4RsHgXNVeKi6Vqy79 BNHtSPZvUon7tzT3FtpVR0uKlRia8MgxEku5sjDu9CbVE0Z+VTiHYXlfUcWwqk/dlJrSsmjDE4BG b6/StvuxlJzMlbKgoCl4moe5SFseTO2peUL+KJ0nS5P5BJRfAxOwXQdq8/BSRJaTAwmMNwrnIqhY HUTufERuLURJScs5ObejJye3yv3ZHgyFVmNC9ebSUYzI3hTuOBoXNZ6WSmxvOr0J57lA58Eh2D2X xhkGizNgramid7DTVyJtmK7V7SncrmMJjGsijRHDvLiJCXQTMzqdxl4vlyxFi08OeIs2/yna/PJq bP9qYZa9OAdOkc7l6JwoMdUYxlxOyqEnmkYJ5gkUFXnQ+uBOz5N4e4o2xZUgzaOkElSCaEc6gXN/ DXFe3iV5uPgbkELiPkgvlQzFka+geZc0SP/s/wjSV38XSP/8d4L0csnSByB9DW2+TCF9/fMhVX4L oCWE45+D8FgB4bHPQfjr9yGML3vANzPeKfHahjdRIzRgHoffBh3qzofzoBPfRrVe41kRHmxgcBDt xIh1a4O2oK0KC4K6T8b08CmtARncsH1Lv2An9FMQgKvxVSd8pMwXFZvFLnHUqo/DLrEdMjAkDsOo aPR5vTdMnNNk4iC/9E/fsnkbCJ4y37I5tTq+XSpvIES0EZvNa/JxugrHDO9gZyp0XhPn00nuk7K5 zhw3t5sz5iPmMbNqft9sMpvxhnxSkAJSVDoh6SRpWCRitLM+2rlYH6Wl3bMRmhebaY1iLBoOh6f4 NeGT4nehs3NtHekkxmql0uByunV4sTEolSsb3PUxvANVh6rXrwvVx9gJaXhy+Lk42dD9z9df+0b5 u6cenmy5+9ddxPLtUX37uw8f7Yr2/8f1A3M/6rk9md27/sjdd/a/8veIO2xHXGbYq2DFe+xIvG0K ztgZn9FtHnCwrI4XgJAFRnAyjKBjeZaxe2bBYnDYZi0iAYHXuZmnnWeZS4zKvMe8zxjPMoRhnBM1 JmJ6xy/epd4d6fTUU9ds9YvNntiUfk2YR6/Epu+iZ5pjrNKwEh2qXi9CMMY60E0G3UTn2JnxKzbd idFn58kOsvL413eu8N/+uyd2Nc+x537dP6gf/8FLxEA67uxjHMzdTy8NnTlJ8wiiGOxpfTmYQYDd 8QaL1brAC06eF0w3AixheavdIgiGGyBYrKAz8T6+hm/ku/gh/jh/js/zP+TLzvKE18yOLkJzU3MT hoeajVavrXOs21AfK0Sg2sMqjr/cXFOzmdJXxq+M6/KrN29ejfK//bofvwuIZssr+OXAwpZ4REOS RSRZwgCLpgBrYnxMlGlkupgh5lnmHJNnfsiUxRHD6FMaak3RptLKBFcjr9y6ckt/7JNpnJPmdC1+ l5xiL0MV/GP8Tz4GogeDxeDVK/oqva88Ws4EK/GLiAHlHghen2/BLzn9fgkUZSFU5QyFqohesHil SqMScMwajYFZ3GJVgpXnfX5/SLFbBQtr5ysRpC38R7x+AsHxSV49r2/0b/EzfqUK/CRoEEK+UDTU HNoVGgqNhl4IvRsyhT5aSTqj6IdGRYeaxCb8IaqLTeKiDbO96N/UGq+WFygWGCMnNvFNTYTmyFOY /Qi7pwC9EYHAxFcqeabEGihHDngvXXwr8Lp68BlDx5V9+m5f08OjbMeVPcbDydvsnisT7LmLV77/ /edOVNfe+SazPyBNueqetd/JM63hytx7zjt5LWb43ci8ipjaYCCeMAqEMFZeB4KwINqcomgTRDtH VZy+bFYvgk3YZewyvmB806iLGonR6BBsGFbRJ9bg4bJL1IvX7OIHnZ6YrR5DSrNp0RP7ctTbvBxX 4tlIPTR6HiLooAuTnyeaL38g6fZkttYoDevq248w26+Ms+fe1B3byd8K1L9mv/MJmorx9yz9mJnD vRuAC/EBvcVlmTOxNMKcyclxJjORSJhsJjqdzWkL2dbZdHjIshU2UXRoR1WFYxYPrtkK0ceZvDqz FMB8fQGW6LHrnjAbJuhxtUPClzweWeelJYkTJCKZJTGqObMYxc3dSUO4fHDZN9rqbbTo7KRnF93m WvioV3hyVeC2xn2+fHCtYdbTvcTMfe3p9dtrf7n30pfPX6745tC6lrUf7vzqRI7t+PaJjav8my8+ lzxx4cTrpzZFgslXx7Y8M0P91qi6UtzUJTR9TKTCt/H3dtzA/QCg1YiM9jZh8OZT+J+ANsbYSr/L uauf/uvdg9wUB0TGAfceDjXAvgF97HuwnYxDlJL+Q6hlxmEn8wPwYNc6uE5CZJBcYBLMBdaNGjo/ B7vx7FmH2DEgIo5vYBb1GG/jzi9Yay9aYQAc8Uh7YscXtoW3DRw6tDf75EjtjqPZQwPdOBKW/h2p D/rumXQfR93cAAn8z8YuaIdHYR8AXk7w1TcXjtfL3yPiO13XR6+zu7AYu372uq7r2tC10Wts5jtE +A65tbA2cH7GGYjPOl0b3r1xPHBmIc/+PB4JTCw8Fli40RB4caYhMIP1SaT3b5CK4+7yZ9wrnnZL x9z+o27fiHvYnecg7i0/NOT2rDg05JEODfm+9KRb+tKTo0f8g07auFTeN+B0regbcEl9A77efqfU 2z/5lP98yyfBl5BeRJpBOoM0jXQKaQppEmkCaRxpFOkkUuz8fi7wUicXmEV6EfkZpDNf5ALTSKeQ plJcYBJpAmkc5VGkk0jdWS5wECnW+TgX2I+U2scFvoiUfZQLZJBij2OxD0lqcHk3uFzrXfZ1LqHe ZYm5TGtdhjoXG3XBGlekVlgd5lfVCNUr+VCVUKnwclCoCPDSinKr1+e3utweq93htAqizWKx8hZT mdkSVwxGzsLq9BY8di3N0Mwy0mYuIGziAuxGLgCNXKC9nqj2Nmjr2Ko6CNZ7t6r14TYEb48aC7ep pvbHC1d31KrM83hz7VB1z+cZrOwtjz2eyhMfvdlPah/D8zqSJ2OTZ85IJS6dDperPXh7VYfL02qM MmfL04DXifAILf6rh4S1PiRcqMPIFB9NvywU63utqFC9dJ2thaZ5E/WiZ8/Wo/eGjBwdGTk2Av8J fpm2ggplbmRzdHJlYW0KZW5kb2JqCjU5IDAgb2JqCjMzNjUKZW5kb2JqCjYwIDAgb2JqCjw8IC9U eXBlIC9Gb250RGVzY3JpcHRvciAvQXNjZW50IDkwOSAvQ2FwSGVpZ2h0IDY4NyAvRGVzY2VudCAt MjMwIC9GbGFncyA5NgovRm9udEJCb3ggWy01MDUgLTIzMCAxMDY2IDkwOV0gL0ZvbnROYW1lIC9O UERJTUcrR2lsbFNhbnMtSXRhbGljIC9JdGFsaWNBbmdsZQotOCAvU3RlbVYgOTMgL01heFdpZHRo IDEwODggL1N0ZW1IIDg1IC9YSGVpZ2h0IDQ1NiAvRm9udEZpbGUyIDU4IDAgUiA+PgplbmRvYmoK NjEgMCBvYmoKWyA0NTggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA0NjkgMCAwIDAgMCAwIDAg MCAxODggMCAwIDE4OCA3NDAgMCAwIDAgMAozMTMgMzU0IF0KZW5kb2JqCjM5IDAgb2JqCjw8IC9U eXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL05QRElNRytHaWxsU2Fucy1J dGFsaWMgL0ZvbnREZXNjcmlwdG9yCjYwIDAgUiAvV2lkdGhzIDYxIDAgUiAvRmlyc3RDaGFyIDgz IC9MYXN0Q2hhciAxMTUgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nCj4+CmVuZG9iago2MiAw IG9iago8PCAvTGVuZ3RoIDYzIDAgUiAvTGVuZ3RoMSAyNDMyIC9GaWx0ZXIgL0ZsYXRlRGVjb2Rl ID4+CnN0cmVhbQp4Aa1WfUxTVxQ/5320tNIKiBQoH308ikDbFcRB3Bx0taCIYQwc9uEyPgQEBSkf MmAQiB+Z1uhYzJwzuBjjTGbc8tRmqUu2aHAsizLjssQsi9ElbmaJkGncsugoO68FppGof+yS+3HO PefwO797e88DBIBwGAIWHBtbaz2gg0rSXKaetLG7y/T2mr6btL4DgKWNnk2tdzPqMwGYFQBc66aW 3sZEc8oJANUp2t/d1FBbf7frGxdA2DLyyW0ihY5TXSK5heTUptauHt12OEfyMMnhLW0ba6EDbpE8 QnJYa22Ph3HwqbQ8TrJpa21rw9XdX3MkXyQ5zdPW2TW9E7aTTHgg3dPR4PnUPqIC0ESTvIU60p/S wkEFUTTnAjejYUhSQRjooRjWw2uB5ED29CQA+4AL5zfzA8whHEUZP8d6fBOrsBzLsBTXogudWICv 4MuYhzloRwtm4BI0YzImohENGIURqMdw1GIYMvAA/oa/4D7cgz9gkjj7HW7Dr/AL3IDr8DP8BNfg KlyBcRiFC/Al+OEL8MEZkOEUnIDjMAIH4H3YB3thDzRCXVic6iA/yI1yI9wOrp6zc8mckYvjotgA G8dyzH3mEPMes4fJxmv4LeE+icfxGB7Fj/EgHsC9+C7uwAF8B9uxFZsoqzqsocwqZzJbg6sptwJc HsxrNislHz3lwkAgmMs9ykFBfxUuEVofHIOjcJhQ7oU6oFvgW6jXhS/waTVhapWP51gGZbCeRtbs NBWZmmrrZdYcnCvcol2cMtrFCcmw3LDCJMMbbpnNNAqSjCsjHlPYrJFRhuU2K2lt1gs2q1zYLaOY L0OEjD/KIDpJcsrF3TJjojAr82WMuFhEC9FFoWiWsYb0orNCNjeIPSH/Wa9ZF3i6i6mwyWWzWmyU CW92Fkw8G3Iw5YKpZxs+QYtEnNisBUqfslnn3VbYeGJjjs5HyZzXboJon5Ie59gP0dYSP2jK3KcR 90t+nN7ld0HiOdAAW/2WzQ+LrSZTYTNRWkNCjJUUmQKtDAREOdNytyiZvCZvcb13BhkXOmjaaPBK djqBCnczjevcguyQjHPLBkl6ieLEKnHIhcy9EkXYTFdFiUBzUGWfIqM4a4lJZtPK3K+75SGXUXa4 JKMgmArl82Vu+byLLo9EVvFzSAnxQHPsDGYjYY7PpP2EUJQKikEhJK9XiUkSkybI571eo5cyCWpE wY8wo/BD0IY1F/rRUeZWthyiYKTUC0VBFAiH5KLYidaSCnchIREUJElPUAquRyhNngNKtiaClxyk VPifKE15HkrF56I0dQ7pY5SaCXOqQmna/JSKTyF0jmHHPAwPhRgemofhJY8wTM83MJBDL/Y4Pfgs qMHg0KiRA57VcGAfj7g+TqN9PDsrJ1KINAuRQg57+J/fmMNTjSp6zIb4oL9repIb5AchFsxgd5gB E1JwEdoXJ+hSknjNAkatX6Rn4pJxIfZDnK4/WaNl1JmWbLBnWrIwWs+IKS/gi8vymTxez6hzc5Ym Ib8sTUxRLY6OyVmaj9xgyf6xns8eDJR+MDaEleU9LZa03L7xvsChLaurpU0ljvIleKPm7P6yjx4O b5u4/d2G9qLO/le1nu8Hazb0Oss8+RLl6Jy+ww3wAxADqSGM8QLGJ0WFh6vRLmh0jJpTc4whiRAa tDz2J+lI9R9GLarNuXmqWaAEkQlC1OMsxoHdD08ETk52mPP6LvetGR7r3vnDnqLAh/WljgrzllUr y0XWfSQwFri5zXPplNZzZUfNmeGyqpHRgvK2AimjekP+umBFpTp7pP0WVC9c8Scaw5TTgbHir2xz cw5lMUgnhfSqhGqysgZ1XSAZQDv4sCmQoc2b2wn608BSsc/hLoCLupNkE30fXAxasVBD3JRSPWeC 1T1duQ5cKw1KdKRqH/ovKqBvgcq1Va4qybKquaWlonZrp83Z1lJPVso3ALXpRqqv8zWWlHGQQD9m C72RFp+jMpvP8lntnEXvS+d0et4H6Z8M8b7Bvn6u19fZy3V0+viOdg/n86zfylX61vPQDz6qiVqN j2pimOpsMWTBPj87vSsxBroz42MLLKEWWsTHwr+uL2YPCmVuZHN0cmVhbQplbmRvYmoKNjMgMCBv YmoKMTU2MQplbmRvYmoKNjQgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Bc2NlbnQg OTIzIC9DYXBIZWlnaHQgNjgyIC9EZXNjZW50IC0yMzUgL0ZsYWdzIDMyCi9Gb250QkJveCBbLTU3 NCAtMjM1IDEyNzcgOTIzXSAvRm9udE5hbWUgL1ZMWkRaWStHaWxsU2Fucy1Cb2xkIC9JdGFsaWNB bmdsZQowIC9TdGVtViAyMDQgL01heFdpZHRoIDEzMTIgL1N0ZW1IIDE2NCAvWEhlaWdodCA1MDIg L0ZvbnRGaWxlMiA2MiAwIFIgPj4KZW5kb2JqCjY1IDAgb2JqClsgNTk0IDAgMCA1OTQgXQplbmRv YmoKMzEgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAv VkxaRFpZK0dpbGxTYW5zLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjY0IDAgUiAvV2lkdGhzIDY1IDAg UiAvRmlyc3RDaGFyIDU0IC9MYXN0Q2hhciA1NyAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcK Pj4KZW5kb2JqCjY2IDAgb2JqCjw8IC9MZW5ndGggNjcgMCBSIC9MZW5ndGgxIDE0MDIwIC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab17e3xU1bX/3vs85j1z5pnHJJkZhhBgAgkZwhAI ZAwkvBQihJAAAwFChAAShIBB0xBDjAQsRExEy0Vq1VKlMiANARGhYH1QSqvlR18/tbdqa69Raqlt kZn8vvtMQGzt7f3jfn6T7Dn77LPP2WuvtfZa37X2GUIJIUayhQgkvGzNkvrk1mfiaPkxIdS2bOMG b3b0ts9Qfw/lw9r6u9Zcu39WJiHC64RoM+5a3Vg7c+gzKwgx/IGQzKErli+p+YvhbCshoxQ8Y8wK NBgWSz/B+VScD16xZsO9f3jbOQjnq3F+dfXaZUt0ghX351Xj/P41S+6tF17Q/h7nv8G59+4la5ZX 6Fdtxfl1nPvq167fII/WRAgJenG+t/6e5fVJM9P+C+cnQZOMNoo//jGiys//zSfRmRAmECJKskar 0xuMJjOxEMWq3mojdofTRUgSIckpqcRN0tIziMd787G+Qf7BmUOyhg4bHsgeMTInd1RecHT+mNDY gnE3u/zbyvh/2+NfdCj8F+23NksNxEFI4vvW9kRd2MOvEtL/8ZffvBYfxr//dz5aPIaX/++fixjx dZTegXLiX1BwCu3HUZ4me1DW/4teX998lVy9eeEJ8gRZiL8m/N1Obmd17HnSyq4Jk8lO0kOew5W9 5Aye/xFZz+rJCVpBR5K38beD96eM7CcryAZ2kOzjR7KZXSb15FXyPHmKLWUzmZl009/RI7izW7ib bWNHWSUzMT3uipLhhITHFYwNjckfHcwblZszckR2YPiwoVlDMgf7B/m8noz0NHdqSnKSy+mw26yK xWwyGvQ6rUaWRIFRkk2jyZMqD6doAm6fz1c1YuA89avnUSFT+cwXJbavdHJ/tdPhtH84T/+H84yb 5zOjxBEt9U+azB98mJR+GCX2KHVECR+F2u/ASAOUlNTU+UtWRlMm1VRX447JfsUbLb2SM0CKSvBh g36Sf9Jy/YhsclhvQNWAGvrWH6alE6laYaUl4w4zojWNyI7aAlGWWcJLXTS8vRoV/2RMHVfsX17p 7T+949ZLBLclOhF0U2s0Kk+KatRxvSuj4SVRst17OPt0x45ehSytDhhr/DVLFlZGhSVg6mEiZJas KMcZRkapXuGNihhX/XKjxVuywtuBc96tGt/+ybjra9vRrJtU2e477Y7acCyJWgPRKbhzyub33UJH SfJKLz/t6Gj3RvffWXnrVR/vU1VVlTwi29tR4sdAk0dkl9QVg9PJOZzdYib+p9X4S2pWLvFGtyyt A2/wv2QHZ7yvQ4mWfg42Uc46Xmqq6zi9degr4uDt2L5cnc8OlX7OUVqyAsJb8u96dXSU8EGX1HBS 8ORJ0XC5eiDl8znLvCVg7+SqgaaBDrgiqleqJ1dBHny0GbMrJ+FqiX/JZOgp1+WbLdUDLWgouXHR y+mcFg1XR73LvFEyu9KPm8fyr+VjSceysVzX8Rg6IntG2Zd3RaVMxe/t+AuJ0mp/38ec4i9blgy0 yJnKXwi/WOovre7oKPV7SzuqO5b09m9Z6vcq/o7DM2Z01JdUY9SyyihF+4nt7mjpjqqoUr2CjoN8 uJaUzq4scvusmEfitOzGKYHaQfmg5pgOuID/aQMHyIKUV/q8k6JkbmWVG4ys5PVy1BNHrmxQ7rHQ gwG2cR4t55PFQLw+UPX5uAZv7w2TpSOyfdEtd1Ymzr1kqfsICecEII9qfuX0jSvOufzKlhtXbt5e 7YdwjqrO2RnVDrn5b1Fc9pIV46LU9d9cXp64HrVPqhTcjC8K1Jhb4DV9ANagMJoUQH1ooANi+ak/ qgSiUuVpd2GVV7HCSnDpzfHPuHN+pbek46YWJFoGZspVTvmp/w0KywO7pERpoUoTVY0S+DUtKiSN xcURvaQ7e0Yv0ZVVHqb0m1W9tL+tdzJJP050RFi8CJcfy/Z6S1ZOhmrgZE82Gob7UHs821uaEKi/ ytvh7ZhW0+Et9a5YUgOpqUfo3vKOqhwIb04lFjAXYTRc5b5ZXV5VNQ7PeYI/B7ege0cVnlA38AQc 1aacGDp9K3sGNHtIWSVW/5bJUIHJVRAuVOg0dO00lL+qCr323qQUFDetTB6g+T9A897huL4v8ZQ5 eAYeUdXRwZ+JMzYEEu/ocHdgJmqL39dLyUBDL1H7wCj00nBZJb8U9vu4ypX4fX4f6KiajGc/CZHc WFC9ZP8/sZRMvoWl375JKO58CuR9W2Xpd/6XWPr0/4Slz/yPWPrsTUq/wtLvguZnOUsPfD1L/f8N Q29yOPw1HN6S4PCWr+Hw927hMDAK/DwhGgJQLOAQghoHThARbY8HeomonECzpNYFhXz1AsNNvBNT ckf5rD5rJr4o2q5tkcgX/EhQwdJujQdYk9ROFOIK67VuImoolZrMObG8nEJSVDQqlwZlPXUq1J81 kmYNyR9tY8Z1TesKaNa6jHVrxsx7QWo/Ef9b/PknY+/E78986IXt7/zhY3oMFOLZKXi2Dc928Gfr ROLW8WcrXz7b7h+TSvNH62lWMCmDcqSjMdNt9Q/cPaaoqa7eU4/nz8raFA+co1Y6pfsFWkozOzPb Xtjxzsf/+bMViFAwxsx+My2nWmImGWEzIbqoaKNUFkXjITmnryDHVpBDivqCOaNyk/In0hDoHxPM wzhyzYjBQt20vAkzt3yWGZg3w1MzZtbq8rUH1GfOpjVsMssCc01HhU7EGTk5JKdvVK7d5/TNpp/F zSzrLB+7tv8KnU/eJQZi6SFR2S4c0uX0kaLYqNyQOoZ/EB/v3eDUKaODpaXvlgbzJk/OC5aqY0j9 n7As6SGMMTpso0wQfkkoUD1llBLBTnr7r/QwhTLEODnBYE5w7FhSFCwKtksjA+1N5zAbGqQSfWRX fK1NeuJaLR5JGCnq/0w4C34bSDK5PRwaS/OVca4SabpGCtBMZbhLsHfKdlMnEV1N1UK9sEuICj8V rgjyTwWMSQVBaVqro7qcCPi17p4IZtJX1EcjEehAHgAo8w9iVsWWhIPTYQvm2fJHM6Y9/cUXr5// PH5Bv75964YND7ZI7fE18TfjP4zfQx+kxXQi3Xkq/sFnf4t/SFM/+zP1gk5K94HYWkQ3AkkOmwQb EVjzLoHmgoScdXxYVeusfrrv9delhmvb+T0EXBNOYG4ppC08ZrpS69isaTA1JkskJeVHsuiQIXLB YjHKKWS3YCuzVNg22vh55102ahNJiiyIFN4znG5SQpTqmmTnVOdip+B0WkTRa8m1hC1lFtGSEwnm WIMqAwLWpCApivTl5USK+vLy0GotaDePDEB/wX4ayYQu5IfG2IDeh/gHyZr8hF6ZqYY+yxzXd5S/ +tGUB9eWf+e273z/WN/47qNnzpiXXaXlL8zduHPZ/Hjb1ZPlr/z9MubV2n9FqJG2kSzyWNhwn/tb blajX+Vm+t7+X4QrTMkh91CTGV9Wa2j+4FWDt9ueMYs2W1anheKTYvSm5abtTBPS0jI6U+xhXZmu WifodJpOI93oohstVKdLsxGSJrZaLL5Wl0tJu5LG0vgsIeI+a0FOkM82AkGr00TdigUT6StIwYKh ERIIBCIRGsxLTPLGHGVNBjRA9g/Kynep12AZcihdZ2zd1rZ6TdvmXWferVg0+/bhV088+ei+ruX3 BTOmNdqEEavvimyY/MqENw/VdY72RrZOP/bpHb9adu+yORP9PguDjBmP14VXIWM9MZGqcJ7TtJvs NQnTjfONm42C0WT6kZ449Hqil3S7mclENDYjEU16o5ZqmyVRlCR9DlZKjtJXqBRaIbxgESZTGCss 4KtGVOVGIhTzsQadfqvf6svPtFJ2efbevWdjh9ms+MtS+/Urz8WD9EJFOe2Kr1L1rhZrqgW6mkLu Dd/pzDCZQuZC6NBcA03qlGUjsYRNjpDFYu002oXdRBjmKHCEDcJcHXU06RjL1U3TLYdIhGaFeEku CZMyxIcyYIfFolgYVziublwiSp8qCIiiKSc5wOUAi6PKgJsdK9RLdDrEL5kOrdNcZKvj052u81SO x37y3P7Hdn3j+RPbNwWkhiPxJ9lfX3n1r7N/snT3qrVdarqAkYXQNb6G7MRHtv4gw6EoIam3/+MX E8fz4RmoOCRPp0ZDUzobTdRkb2KUdVOwVtY5pRJprjQ3uU7ZKGmr0qjkcDUpaU162Kgy/XJ9vX6X XmzWU73eq+QqTOFTWocSVPoUrB91bhGsJz6vPIS7JEADARpKwoIZsMiwK/mjU6kgOx0JteLrijU4 Gve/XbD27mf+8/Poq39u+q/HtdtWVTe1rRm7QGo0P37X1WcK/vjcoavU+d4Begf1xwbljNu454Fl y5sGwboUY76nMF8HeD+C7AgvLUkv8cxNn+tZlrbMuz5tvVertdmqMldmNmYKmZ2WDJqRIVQEagMb A0Kg02RvTKbJnRqhXXhMEARRa3M7m2R5UFO1Oteo/qd6iWC+7qYtWMZ6MrRprUIx7T5IdF0fN2R8 iQXzuBGBCYmoCyuClVWIyUfsA35Iw32Rf9Dg/NGhkTRTNSWJ6dsTdiVxsvTzI4f+9MIPr58+FY// qOoO1tJUveT+1oULtli3rVnV3nH3ynYh/vQHv3v2pc31v/r+f/7+uUvrp+6sXLBxw4J5998Xu+So bty8ZMnmenWNLYLPWio8Bx+RRNLCFlvUqHDXZSkWDjmLdTnvx95Xzf5XXZj9Fnd2OTh1anDU1NJJ 6nFK6e+mBvNKS/OCU9lrqE2Zghpfy7Xwy2sxjgXpt0DY5YoqitEoR6nNfijFZBJggw+lCDnBhIvm XhPsKoLGJ93iozVw2bcOfZGtmpZXWLalPjB4KEYfBceq13PPfffstQf8mcMqhL99SQJowEeqkJqA nPTkG+Epf9fRFOKiBdoVWlHU6nSCXpJlODxBaGHUwYC1dLLcoiEOjYZIu8N6vUZHicgEWWOjAjuF VXvKq9EYYDJTU2IFBfgnyUWFhYVFhUEIN7VvwDm3j0zmPrpdKUQ5V4glzD1okPoFn+CnBsoqH2br LpyIvRC9IDT99mdS07VWui++lJXRa3EAPShTTf8VaSb01kWWhIu/66QHLFSoFKix02SydPZixelF 2kmIs/MYXKZdspXYqjQrNZtsktFIqJeGaRmtp/upTG1NVHMsSfk8T7UwsPPcn/UVLVYPkcWqa3fK vkGDWb5CfHmSE0uOOB0kmCfN/E38vT/GT5yiL9Ki31DTX/54JX6Wjv1znE7+zb0n6fTTdBTdv/7y jvjP3v8w/gvwei9h0n7YSTNJJyPC6cpuKlh3E5sueXpyhVwrw1MnN8m9Hmsz+UGG8nmfEu/jbodL PGT1eUWb08E0MtCf3w7DnAeoBp+TNZLtpZdpOr393Oqa2vZZW09or1HS/ezakY/uGdv5AJPWPx8/ em5HP1lSE/Q4xTNf/GlY0cjuD377zfzJyP5SZPYY/EkDdL00HNDs9oh0lkgt4iGRiaKBW2vtboNN Ao7K1Zfpo3pBL2ib9YYfGMGwWKFqmjl4LOI2K7LungEAaOXWGOUJITkWZYWxc2zZ9Uvc4la8GJ95 RJXfXvixNoyrI6GwT7O7XqSiqOPj6WySpEA+uxCxihSjUd0P9DdGw1iJoW4dyL+XfRR7l/li7wIK HYlvPhJrwBCYG8agNRhDINnhNCIINtZcJtDTHMntEvYD2Z0WJEFAqjBHdekgX8VV9qDVv/cmrFJ5 RITLeI5EUsMmtlsCGhOAx6QfyJBSUKUJwDeozvh11nD9rNTwxW09CRq6sb4O4l4j2RqeNcxIidHY IokOyWiQRAPqssYBDylrmsVmDTNqRMEgL5bWSgyeGqwgBkGSjUYNEZsJy2VhVs2amcSYQdOs+4EJ o+dx15hnhckMBvlKKyrkgii0JRVE2rUJJIZj8gAkg2vH3KzUT/EdpOJnJ96Iz86Mz3z9JP0ZR5Fi Uex9lvbFGakh9kPMez9of0GV0diwRyeIYotW59BqdVjuNqLVCIKumfUYtGKzzCUUy+OFYLXjv30A g/PxBga7curg9fknnxLwRIwU/OICuHQOTGLIIiNekzZBB+1kXHiIebdeT4nNhOVha5KlcqFCWios l+6R2qWopAVjzFggDgxWyCfPtQ9zhkJAANwGm2mAWrFCVNi1k770+iebf/6jRy9e/PXmrdKmX/Rs Pjk39pT4anzG+lWXMTbmKEI1YYGHkLXhyfUa6rJY3jXrHWaz3qJ3CWYz0Xp2p6SAoHQQVKZdLlVr Ba3eZRFyzdRs9jcRKQdOv0kCAkjNAGVZNygDdUnBPHUJcwILFC4WbgDNA/h4gGBgRcR1HkSPQ3KE kewG9RMR9Y2EiVr0879vvmfSlg3Tsqd/MkHQZU2cNPGuOUtHFxbevmddUWmz1PDWi5uPZGfveXlT Yc1CyRiqXVNROyK2XzwfnzJ65aTiVdngMSXl8PMrYC995OPwyMuUPuaje4Ds6mC2x9p+YWMsIw/I 5sdWmCQf8zU7rA6Hw5qsaHUhDeKs8FBUjgHodLFnEG9pWTK7lz3ERC3zadKzHCHHJofA0N+oQwBx 1KyEdADnV8IhvbFTI2LRKKFUjfu77mNuwa240zuT7T7mFR1WywFdr+51YD9v81AndfpTLc1ipZ+S xZGcvnPKO5G+c4AEBVicBZDyz8dGLgSK+i6NvcCRX8FijsMLFsFCL44EAlzfzE1Qp8XckQQob4Xt jlDgbjWeTeJ2m8MmDwVGBJy4Aczp1T07Gz84duiRx15Y+o2Fdz1OyW+PXnzuqUuLmtj0hfO+d/cz P1n6u84FU4ruLpy/5+MDbzXHL6yctQUsBU/90J0j0FsNSQ+bJZuggfliTGyWJA0wNrIDiHMLEaip 4BQm2y/ujKe8EfdJm458MV58VX0G6b+m6p9M1oSLNjE6RN4oM+Q0WItMELERrH+pRRQcCN0o4bsa 9TKVBXsjpZtESpgWIc7LkiC/7BVFzQ2v2xcpKACYTC4KRvhaLPyq0+X4PuFs4XBF82uxIyNiz75B n8aybJPuux5IzA10actVu/XLcEujQBewVYwVidjNMZIWyhyUMoMgCi1Gg8MIW6bX6VtECVRKslan bdHIAAjyJiOt19Ubmc4oCnqE75JsQ67GoNfDdmhlDW4SMVPBYMwFwtBpjEZRoV6aS4F8FNEr5oow OTmaIg3TwNGkoCTnQB9SEGUiCCsoGFAN1FSMoRQipsF01WUWiXx10jcARwJ3cHSJoJ0DDh2MYVCH mubh12LnA/FQPBiIXXiDttDWUxQO6lqbWP/FLvBlgnD2+gTOG0ZCWEvTgdt8JECi4cYZqQtSV6Xe l7o9VbJ7/B6WbSm03G5ZaPlx+m/S5fOG84O+MHwxSLQYLINg1YVdKTQlJc2/p86x2cGuOKjDkWYy DJJkUSgevkdXbLIndacpDkPxoDYqSSN20lfop1Tw0Hd51kNJSclqnaUsVpqVJxVRBdI8Fr+HA2cl 9gGSUX1FQKdJQdWfRQCt78+JJFuDiJYw5XV8zhFqdQTzQk6giEFZWAY8+1KEJYJIiYfnSRlMsAJi qJianfX6SifOGNbg3NBavaVp/UfPdj1c91rX/Ixc04ubI3dMGzePDYs35oxaOzR94fzm6nnbhpaN evaJ15pmpsyZE0+h1pzMGWMLgHQ5zxrBs17okwl5lwnhIculBqlNEpg5qVtUCLF2613THVUO5mhV NFRzxsQsbabjKdySKrF1CRhUFOMxEY3A0YJQgCEC6rPs1puBUGPPxgcPvRP/6ztVr47riSxtfHzn emRQYr+tiP/t4jvxvw9JZw1xc9rB9m0HsXZngp4gZOgi648TI7IeZocrRDMczhAJ8y+eCBlntoZo OMkdAlYxhU3WkMmkc3YJdkuXTmkn7SYeYIeRdSAnk0tsc211cqO8TZZsrfJLwJN9EeWTQN79OckJ DAcxBXjhn1G5mU6wniBRiETbTcsUzBOC21p/Ee+/9uMp6+Z0bLxv3/OdKy8fDVJy+ZeIoTJ/WPn9 Bx9+FrycD3r2gZc8PskPe0uVCmWVeJ8omgyWpG7BZunWgaUGYxs7w2lJBi2xGE9UAqZZg0HOQ7hl Hw8lMX5SCk1YRmQXg+z3x+L3/fjP/T9auHruvIe+XTp80WburSn7JeLnrFgSmxI48tg37xjpVWVa jri/Ezx0wHvWhA1KhsUSksNOZ0jm3BtlsYZk5EX3WGDanfqUro3WB63IjoldjQgJXXOFOjNztToc 8sl0ZzFtNb+UBnG/r8SBvlUUngiEuRLzYB9Mg1n3gcYB5eV2nWfYnJm+kdBlWeiMNWq+03J0T/kz a/ecXPfJqWO/ijXRi5oNS5c20ZNb99YfGZv7jUs73qKafnK5Ys3GjVwv4dWhnIvgF51kYXisjqUw ZrMp9i4TsWg0ui6RmqzEZg7DNZrDekPIbNZY22z1mkOaVzSCxqFxENtpG7MlcHBEAa2QsAIThJWI tQdApjoAKO0tTiidJnIr/vzul7cWzMweumrO00/3bBX2hN75le2Ics8joadjRnb1adCHtzfiAWER 3mbIJKNIIWXhkRudz7hZqafWs6pQsA+120Pw09aQbajVHlKstjy22dxgZR7reLuYOtiUzQVhtNlC 2V0bjdRoFEI8ZzbGZg+FulLdcveQMK4N6RIUBH26oGeOZ/74HePgeHS6kNU+XhjnsfhMg4dJUk6r Tjeut//n4QkYa1wrSXIl7Uran/RKkpSUlG5p3eXbD9DgIw/kP5LP8ltnpe9MfzL9ULqYnj5hWGsu 8jmMvDRh50QaUa6q2Q1E+9yGc3ZF+gJqpg1WHEbLmlQQ4OslAFUNwKjxq0EOZrn5wsqBAeNZAZ/T nwEThbwI9+gDafGEMVND49AQqvr6RFZO4HWfmqCbffkEve/EmOGzW3bfdcfy7y3JKv7o7Kv/9fuF syadpxXTV9TOvOOuFY0LGyhpbDvA5u9+/puh+eOmbp/usoz1DnNlDs8qrmnd+x9bXxozflz2VOt8 urKmdEpk8ZSp1dd/PXPCN6fcFr5T1akmCK4V69NOCsJ+Kztg7jUzcze2JGTRJQ6BV1P0dpu+TXfC aWVt9uMqlEWwB+hcFClCjovbuYSVwyyB1BPZU6u/qeee7y18ZErPsjsL68I9MG3PbV/41P7YVVaw /L6JU2NruJ1F6ENvl9ywDRaSF/bJzR4oucVmtAjNOp25lSCl5rW8Z7likZCW49m1RBIG1gHMxrC3 ZDEEYPd3R4TDI4aHw7k9PZJ74ojs8G2B4bfFm66vwFj9n8cDtFgdy0GKwoOt3UpiOMVttCgK1NIx MKhDcXgdAoGzu5nzyUmBeOG3+bDK+/80sEOTBfx7aUR4wshA8W3ZPb3tRdMld1H2yInhbE7AFx98 uqzNdfc08JuRFjV+4PGZjtwTLkKWQpTEswCkiNI4lDorEYfEBImwv0nYXZEAnCxAVgg4bYzwIFMw SJK2TXdc/1cDB588ruJ+lW8qIEfKYQWPq1JyFkcK1WiqXULugkMJLd9n4PjBTzm32OVfxjfRX16N B0/19Ah74hPAoEvCfjU9DzG0QTbjoRcCGRROQk6fsFYiKIJXeA87DBIRwgK2UW5k93kU2gauq8l9 KCRisSPCQZJBHgrPD1mwG+K0Oxn2fIQkC002V5rZdDNNYQbbJjPdpKNmxI6iJr1Y7nYUZ2GPBJkl S0pbMjdkybBYbZTX6GmDSd+mNdAsAzUc99zlTUw+EoHXvRqIFVwN8IB4cQSQApn+SATgiiOnCEfW QNg8rruhmkgXc/SA4rqhscL6Y7NrCxZP6OnZ3nao+pEnH/x+z6LKdWxvrIaRxxtHF8dqhD2N2589 cO6N2G+Zb/1miBI8UtcOfIoNez4e2m2xmLplwSUMQcSt2Cxaq03Xpj3hIEqb9bhdhQfX1XVTFAHc hv5STsaXq0YDEmlo87cqHr2jp2J5y/wTwp6G9qpvHYh9xowPN7bE1sKyMnJ7/xXRJzwx4E8H15KV MjN2EcXWJbvyLeOcJZbpzrmW+U7Z2SqcTLG06lSfejM9w9F0Hk8JqS6dJN1ieljBW9QV//D/XIz/ kaa82XrgYPuDzx8Rnoj/6cJr8b9Tw+tvUtPTB9u2fvd7W1sP8vlj/cLeg0rQ4lJxktggtomCWa90 a+3Ebeqmlun2KjuztypIypwhZkMbOQ60cStOQnYVFEXsCIcR6oCqLB4OJ2DSSNpAi/5CrfH+1ypX tbSUL9zynTva4gFpzdVfX4x/nhV3iGdjbwaO7JjfUZSgZyro2a7S4yYjw26jmNSN/bFuoghukwiE Ueqo4KhNx713X+QmzlBJ8IH7CZwzGLoyaMBcwygXURaklT2bZp/rJ1RPW9dvnDUuecb3HvQMnWwW 9lzbTT/wUu35y/GYi4Wdme65TQ+/qE2C/YR+PAzbOgL6wa2be7hATTbgRThqxWKZJ2PzVrYSU5v5 uMJZgiW8GN6E703l8P2yCHWGuJZqVMDDVWOyfuvWu+qrF99Z2XJM2PO2cmnF/vkH1sc9mDDGQszM zmIsP/l12NmQ0pbO0lJTzxp0DoNB57Ngz0ndLksxKiGXkuIbogzzjaFjlAJfqTLD/iTVK739n4dd ZnSjGw20ETFOWqpBVMRun93O/XKxzRGyhxEs2+3ObkXROACf0nToYrLYqT2cnIyrcM/2sM+HLppW kvFYxncyfpohFiELj7/kVhMe8yKGV49+f8gE9MFz6wkrC3+5jjtUjkVwAYkzOFJsNwR4vIxtuoHd nlA+B1V8++prYuVE6n1I+R3fDhXMzq+MrnnmgfZvPnVX/m3jp9/24eHts7cUnxszaWzW0Py8pdtn 1z14+9GlIzK944ZlPrBvXSfCY4R74OEBsQL4amLYS6lD6mIWBIBdJnvAMt4yw4J1rdcnManN7nTa +c6UKjbgAk41gB8iaA6kRuVaqZNnFdXgBUqFvGc+UksV1B//v61L16y8v2lO6qCk/YJMy049HZ+w r/i58dNcoaomCkmqdgV4vwVitZNRyLxSq05MEYeJgs5it8E122FQ7CechjYt98bIvHK83FdUFCnk vtiXz6MlAE5r0Mr3XUI4svPjuqbP2z2jZ86KBxb0NBSVzuv6PrPE/ty5vpk9wt0j5i5jzEaMKZN1 4WKkR2wh/sbB2UT0zAP7s4nAnof0ItIqdvglSbRIAsJiuZrvXpbJ1TLDvm0YqiHmBL4Mggt41MvT fUWFgE3/EOxSDpYR29KgnR19NV43IV792t+EPdcrhQOxNxMykc6ALiP5KLy7lj7O2GjdaOMaEalQ G+JuOE3jTSoNRsMAlXpkuM7q9MCGeh7jn03E+PU8xqc8wtfAw8qYggHhvSUR1+MWWashanRv4fhT JMi7V9P36BVklLFxUCZWi++JV0SJ8PzvWs2nmn7gajXax8bYQLi/DlhxHYJ9Hu+r32q4r24qFKqZ zn+Y/j/H+uqO5kCs7wZXxPjZeF1B/NP41fHx2rN/+mP7R5w7rCXWDA69xUbG3lLlhy+RgE8G8kR4 Ifb3MGuNDoKiBr2B6AUACYALgcpIiRoMeqSBqCyfTeyNIOGhP6sTwSzAPQ0Mk15n4VCDwNuHhTK8 WQB/TwU9dlhkTDgJSAOLlgMOnkAF4vjHrI1GW6gF+FAKtedufp/T3kAfACA8h8GufxRvo90fxd+N f/oBbY03fUCtgCHj4yPo9HgPfZu+Gj/H5Q+bzteChmwI34Y8DbI2CDSwSXkWGE0QCHJNGsyEp6kl USMCOrmhzJJFhIhJNVKSSEWUwewK6CZInPiB5Ax2jfmmsioaSEtNwQAi4ZjY7sEcVIpVaqGbF2IN 52lBfO9FaOe13ewJ9nbs76CP73FPUOkLhdNlTpckgxSZdUk2uYtamAzlEaAoEodo4BzG4sv1xu4S z7hRGAvqCwg2JCJ+f/1X9HfxUcKemO059gmkijHW0JNshdAL2Vp7IAQFqTY8CBvi2NW/sfHII4o1 XSvqHu1auaKLnVjZ9Wjdyi4k9LmfdoPGTYgbk1BbEM512yQb8C5JtshCF3auHV0mam1LVVJ152Ts jzHR3ZaqE9tkTWqqRsFyT0SMfBuev2KAeFHpo3BXajabx4w8gaO+43EzVgyqEaQryc+jXatD4on1 +Rcu9Gzb9uZLjwMZumcWnafrDx4UntgbYyy+N+PdK3u3TZsYf1uxXVfffYHcuezPf/C5YbGl8C/U reUzIT+a9vKIG0eO6LXlfIMNSJr35x8cNZXxoXjX/egXDfGj2p03rySuEzJBiyZWALZ0473wbpJC z5CZOM7GsZYVIW1JSBGW/j4cS1FaUbg7r0VZiFKMfovoJVIrVQDlPkdqQMFetD8hnCF7sUW5V/iY PCEXkW6U/aKD7BQvkf3wy+U4+lGIFvcJdSSEexqFFjITfeYLl0g57rWhHauYNGGMBnqm/3O0t6De JgdII28X68jtODagTBUC5GHBgfueS9yDZ8kAWfx+gjoRKkgSu0TW4Bzyx7sKuWQR2YW3yn5CPqYu Wke30itsIzsNuLpPHCouFPeJ16RyaZ/0K9ko58oz5YPye5oMzSNYB4u0z+nG6t7Sp+rv1Z80ZBju Nk41Pmg8aSKmctM9pg/NXnOt+QXz55Zsy08Um3K7sseabd1j/YMt1TbO9qgqgQlkDiKJySCO4c20 HLyHT9hBbQbauOR4ZoMfEXQCK5HK22bMm1oZmLJy9eo5S+5Wfwqg7v3CP9cSVT3Uvrd+8WSngPWB 9zfwfKRB4Dsd8OMu6Hwy3vVwYxczgwzGvkkWGUqGkWzQkIssRZDkkzEkRArIOFBXgreSppCpZBqZ Tmbg1wN3kJlkFjICd5LZoL+czCUVZB6pJFXIai3ALwkipJ2cxnuTeC2vOxA+Wn2x/iKrvlB/gSmf 0ic/obmfHPqEkT6a+3uqvE+rz9OdZ2jumbIz9WcE5TStPl1/muW8VPTSrJcEclw5zizHPMfYn1r9 niutDs8Hrbme36Kcba3x7O7M83R1F3qe7D7U/Uq30N6a52lD+ahllOdQU4bnjeYaz2sop142ed5t yfO0oN7UnOdpbU7z1DdTpTnafLpZKGumGfe60je50ja63A2u1A2ulPWuelevloST01evdSWlrV6b 5F69NmXV3S73qrub70mtc/CL/em1Kx3OtNqVTnftypTlKxzu5Sva1qU+Puma7zGU3SidKA+jbEfZ htKO0obSitKC0ozShJL3+EKt57GI1tOFshv1TpSH52k921G2obRXaj1tKK0oLThvRmlCWbZE61mK khdZoPUsRKms0HrmoSyZq/VUo+QtwFcFijvkTB7jdOY7baOdlqDTmOfUjXLKuU4hx0lGOrNHWIYH zEOHWYZkmQdnWgb5zV6fJcNjdqelm/DDIpPTlWSy2R0mi2I14gdIRv47pHAGfpBkFEQJW/HM6B6v 9VjGaT1CgdZDxmo9ZUEatc0gM8qLo3aK45ziaDAwA3ybHc0LzIjKZQsSLyijNcoewvu55VHxoV6G g23S/AWVvTSFv7/cpv6C4DjepNvS9rB74FhVFUiP1uD93Gh9elU0j1d2pVfxV7j+2w8NqF3wMk6i KyoDn6+79cur6BRN5sMUJ7of1vEJ1Mwubtiw/sYTcLxRX4/PBvzxTwMKIf8P4tFFeAplbmRzdHJl YW0KZW5kb2JqCjY3IDAgb2JqCjEwMTY5CmVuZG9iago2OCAwIG9iago8PCAvVHlwZSAvRm9udERl c2NyaXB0b3IgL0FzY2VudCA5MTggL0NhcEhlaWdodCA2ODcgL0Rlc2NlbnQgLTIzMCAvRmxhZ3Mg MzIKL0ZvbnRCQm94IFstNTY4IC0yMzEgMTA3MCA5MjZdIC9Gb250TmFtZSAvWEFLV0hYK0dpbGxT YW5zIC9JdGFsaWNBbmdsZSAwIC9TdGVtVgo5OCAvTWF4V2lkdGggMTA4OCAvU3RlbUggOTAgL1hI ZWlnaHQgNDUwIC9Gb250RmlsZTIgNjYgMCBSID4+CmVuZG9iago2OSAwIG9iagpbIDI3OCAwIDAg MCAwIDAgMCAwIDMyMyAzMjMgMCAwIDIxOSAzMjMgMjE5IDI4MSA1MDAgNTAwIDUwMCA1MDAgNTAw IDUwMCA1MDAKMCA1MDAgMCAyMTkgMjI5IDAgMCAwIDAgMCA2NjcgMCA3MDggNzUwIDUwMCA0Njkg MCAwIDI1MCAwIDAgNDkwIDc4MSA3ODEgMAo1MTAgMCA2MDQgNDU4IDYwNCAwIDYwNCAxMDQyIDAg MCAwIDAgMCAwIDAgMCAwIDQyNyA1MDAgNDM4IDUxMCA0NzkgMjUwIDQyNwo1MDAgMjE5IDIxOSA0 NzkgMjE5IDc3MSA1MDAgNTUyIDUwMCA1MDAgMzk2IDM4NSAzMzMgNTAwIDQzOCA3MTkgNTAwIDQz OCA0MTcKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgMCAwIDAgMzU0IDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1MDAgXQplbmRvYmoKOSAwIG9iago8 PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9YQUtXSFgrR2lsbFNh bnMgL0ZvbnREZXNjcmlwdG9yCjY4IDAgUiAvV2lkdGhzIDY5IDAgUiAvRmlyc3RDaGFyIDMyIC9M YXN0Q2hhciAyMjIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nCj4+CmVuZG9iagoxIDAgb2Jq Cjw8IC9DcmVhdG9yIChBcHBsZSBLZXlub3RlIDUuMC4xKSAvUHJvZHVjZXIgKE1hYyBPUyBYIDEw LjUuNyBRdWFydHogUERGQ29udGV4dCkKL0NyZWF0aW9uRGF0ZSAoRDoyMDA5MDYwMTE3MTUyNVow MCcwMCcpIC9Nb2REYXRlIChEOjIwMDkwNjAxMTcxNTI1WjAwJzAwJykKPj4KZW5kb2JqCnhyZWYK MCA3MAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAyMDM4MjUgMDAwMDAgbiAKMDAwMDAwMDU4MiAw MDAwMCBuIAowMDAwMTg2MDgzIDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwMDU2 MyAwMDAwMCBuIAowMDAwMDAwNjg3IDAwMDAwIG4gCjAwMDAwMzMwNTMgMDAwMDAgbiAKMDAwMDAz ODA3MyAwMDAwMCBuIAowMDAwMjAzNjUyIDAwMDAwIG4gCjAwMDAwMDA4NDcgMDAwMDAgbiAKMDAw MDAzMjIwMyAwMDAwMCBuIAowMDAwMTg2MjkyIDAwMDAwIG4gCjAwMDAwMzcxMjEgMDAwMDAgbiAK MDAwMDAzMjIyNSAwMDAwMCBuIAowMDAwMDMzMDMzIDAwMDAwIG4gCjAwMDAwMzMwODkgMDAwMDAg biAKMDAwMDAzNzEwMCAwMDAwMCBuIAowMDAwMDM3MTU4IDAwMDAwIG4gCjAwMDAwMzgwNTMgMDAw MDAgbiAKMDAwMDAzODg5NyAwMDAwMCBuIAowMDAwMDM4MTA5IDAwMDAwIG4gCjAwMDAwMzg4Nzcg MDAwMDAgbiAKMDAwMDAzOTAwNSAwMDAwMCBuIAowMDAwMDM5MTY2IDAwMDAwIG4gCjAwMDAwNzE4 ODkgMDAwMDAgbiAKMDAwMDE4NjMzMSAwMDAwMCBuIAowMDAwMDcyODY5IDAwMDAwIG4gCjAwMDAw NzE5MTEgMDAwMDAgbiAKMDAwMDA3Mjg0OSAwMDAwMCBuIAowMDAwMDcyOTc3IDAwMDAwIG4gCjAw MDAxOTI0MzUgMDAwMDAgbiAKMDAwMDA3MzE1MSAwMDAwMCBuIAowMDAwMTAyMDU3IDAwMDAwIG4g CjAwMDAxODY0MTEgMDAwMDAgbiAKMDAwMDEwMjg1MiAwMDAwMCBuIAowMDAwMTAyMDc5IDAwMDAw IG4gCjAwMDAxMDI4MzIgMDAwMDAgbiAKMDAwMDEwMjk2MCAwMDAwMCBuIAowMDAwMTkwMzA5IDAw MDAwIG4gCjAwMDAxMDMxMzQgMDAwMDAgbiAKMDAwMDEyNTEzNyAwMDAwMCBuIAowMDAwMTg2Mzcx IDAwMDAwIG4gCjAwMDAxMjU1MTQgMDAwMDAgbiAKMDAwMDEyNTE1OSAwMDAwMCBuIAowMDAwMTI1 NDk0IDAwMDAwIG4gCjAwMDAxMjU2MjIgMDAwMDAgbiAKMDAwMDEyNTc4MyAwMDAwMCBuIAowMDAw MTQ1MDcyIDAwMDAwIG4gCjAwMDAxODY0NTEgMDAwMDAgbiAKMDAwMDE0NTk0MyAwMDAwMCBuIAow MDAwMTQ1MDk0IDAwMDAwIG4gCjAwMDAxNDU5MjMgMDAwMDAgbiAKMDAwMDE0NjA1MSAwMDAwMCBu IAowMDAwMTQ2MjEyIDAwMDAwIG4gCjAwMDAxODYwNjEgMDAwMDAgbiAKMDAwMDE4NjI1MiAwMDAw MCBuIAowMDAwMTg2MjAyIDAwMDAwIG4gCjAwMDAxODY0OTEgMDAwMDAgbiAKMDAwMDE4OTk0NiAw MDAwMCBuIAowMDAwMTg5OTY3IDAwMDAwIG4gCjAwMDAxOTAyMDkgMDAwMDAgbiAKMDAwMDE5MDQ5 MCAwMDAwMCBuIAowMDAwMTkyMTQxIDAwMDAwIG4gCjAwMDAxOTIxNjIgMDAwMDAgbiAKMDAwMDE5 MjQwMyAwMDAwMCBuIAowMDAwMTkyNjEzIDAwMDAwIG4gCjAwMDAyMDI4NzMgMDAwMDAgbiAKMDAw MDIwMjg5NSAwMDAwMCBuIAowMDAwMjAzMTI5IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgNzAg L1Jvb3QgNTcgMCBSIC9JbmZvIDEgMCBSIC9JRCBbIDxkNTRiZjgzMGRmNzZjNWNlN2JiNmZiNWI1 ZGQ0MmFkNT4KPGQ1NGJmODMwZGY3NmM1Y2U3YmI2ZmI1YjVkZDQyYWQ1PiBdID4+CnN0YXJ0eHJl ZgoyMDM5OTgKJSVFT0YK --Apple-Mail-21--668301369 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit --Apple-Mail-21--668301369-- From hartmans@mit.edu Tue Jun 2 07:40:08 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 124DB3A6EC9 for ; Tue, 2 Jun 2009 07:40:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m0MVDUlYJL3Z for ; Tue, 2 Jun 2009 07:40:07 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 5929F3A6A87 for ; Tue, 2 Jun 2009 07:40:07 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id BDFBD401C; Tue, 2 Jun 2009 10:40:01 -0400 (EDT) To: Luigi Iannone References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> From: Sam Hartman Date: Tue, 02 Jun 2009 10:40:01 -0400 In-Reply-To: <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> (Luigi Iannone's message of "Tue\, 2 Jun 2009 09\:14\:30 +0200") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Olivier Bonaventure , lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2009 14:40:08 -0000 Your slides jump right into describing the solution with map versioning, which really isn't such a great place to start a discussion of it. That discussion should start with the problem. If I understand the mail between you and Dino correctly, there are two concerns you have. 1) An attacker can manipulate the reachability bits and either create a DOS or cause traffic to take a path that gives the attacker some advantage. 2) Certain update situations could get the ITR and ETR out of sync about what the reachability bits map to and this could cause a problem for traffic. Is that the problem you're trying to solve? Dino's answer seems to be that: 1) If you care about these attacks you can verify the reachability bits. Presumably we (the WG) will need to consider what mandatory guidance to give on this issue if we don't adopt map versioning. 2) There exist algorithms for adding/removing a locator in which the changes to the reachability bits are non-ambiguous. Presumably if we don't adopt map versioning we'll need to make sure that the spec mandates such an update procedure. Have I got things right as far as I've gone? From dino@cisco.com Tue Jun 2 10:31:11 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6F9653A6FEF for ; Tue, 2 Jun 2009 10:31:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FVdNPkEEqWt2 for ; Tue, 2 Jun 2009 10:31:10 -0700 (PDT) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 593383A6FC3 for ; Tue, 2 Jun 2009 10:31:10 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,292,1241395200"; d="scan'208";a="166555217" Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-3.cisco.com with ESMTP; 02 Jun 2009 17:31:07 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n52HV7P6024674; Tue, 2 Jun 2009 10:31:07 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n52HV7g6019643; Tue, 2 Jun 2009 17:31:07 GMT Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 2 Jun 2009 10:31:07 -0700 Received: from [192.168.1.2] ([10.21.82.243]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Jun 2009 10:31:07 -0700 Message-Id: <7442BA71-4AB7-46CC-9260-BDBF12854787@cisco.com> From: Dino Farinacci To: Sam Hartman In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Tue, 2 Jun 2009 10:31:06 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 02 Jun 2009 17:31:07.0363 (UTC) FILETIME=[E9852330:01C9E3A7] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3099; t=1243963867; x=1244827867; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=Cx8/I90f1RfxVKvnYH0j0fdd6s8o0xJZFRCt0MevMEo=; b=UaRRVI745VoavoDgcDt8wI34er8SZlTuP6BovFjSkXTKvXUhZtsuw1Jl6Y JO2oRJsIaTeXKBsFXYwEipvGICOzj2lQuen30BuzBJAi6aezMqy1PUY3ADsK BxIyy4zUOA; Authentication-Results: sj-dkim-2; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; ); Cc: Olivier Bonaventure , lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2009 17:31:11 -0000 Sam, let me phrase what we have been discussing another way. We have the following subject matters: (1) How to update ITRs which have old map-caches when a database mapping for a LISP site changes. (2) Should we put an 8-bit flags field in the data encapsulation header. (3) Are there anymore MTU issues. (4) Can the loc-reach-bits in the data encapsulation header can compromised. I believe the status for each is: (1) You can use SMRs for map-cache updates according to the existing spec or you can use draft-iannone-lisp-mapping-versioning-00.txt, referred to as "map-versioning". The later requires header format changes and Luigi gave 3 options in his IETF presentation. (2) We have *some* consensus gain on this. However, the E-bit for doing nonce-echoing has not been fully flushed out. So we should wait for changes IMO. (3) I looked through all of Fred Templin's emails and his suggested text and made clarifying changes to draft-ietf-lisp-01.txt. So I think this issue is closed. We have 2 mechanisms to deal with MTU issues with encapsulation. One is stateless and the other is stateful which was offered by Luigi and team. They are simple mechanisms that use existing standards (Fragmentation and PMTU Discovery). (4) We have documented in the latest spec (went in many revisions ago) that the loc-reach-bits are a hint and used for a certain class of failures (close to the destination LISP site) and that the loc-reach- bits need verification by round-trip exchange between the receiver (that wants to take action on the loc-reach-bit change) and the sender of the loc-reach-bits. Dino On Jun 2, 2009, at 7:40 AM, Sam Hartman wrote: > Your slides jump right into describing the solution with map > versioning, which really isn't such a great place to start a > discussion of it. > > That discussion should start with the problem. > > If I understand the mail between you and Dino correctly, there are two > concerns you have. > > 1) An attacker can manipulate the reachability bits and either create > a DOS or cause traffic to take a path that gives the attacker some > advantage. > > 2) Certain update situations could get the ITR and ETR out of sync > about what the reachability bits map to and this could cause a problem > for traffic. > > Is that the problem you're trying to solve? > > Dino's answer seems to be that: > > 1) If you care about these attacks you can verify the reachability > bits. Presumably we (the WG) will need to consider what mandatory > guidance to give on this issue if we don't adopt map versioning. > > 2) There exist algorithms for adding/removing a locator in which the > changes to the reachability bits are non-ambiguous. Presumably if we > don't adopt map versioning we'll need to make sure that the spec > mandates such an update procedure. > > Have I got things right as far as I've gone? > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From olivier.bonaventure@uclouvain.be Tue Jun 2 12:58:45 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 118323A7014 for ; Tue, 2 Jun 2009 12:58:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.392 X-Spam-Level: X-Spam-Status: No, score=-5.392 tagged_above=-999 required=5 tests=[AWL=1.207, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3XfJMC2QFq3h for ; Tue, 2 Jun 2009 12:58:44 -0700 (PDT) Received: from smtp2.sgsi.ucl.ac.be (smtpout.sgsi.ucl.ac.be [130.104.5.77]) by core3.amsl.com (Postfix) with ESMTP id E10383A67ED for ; Tue, 2 Jun 2009 12:58:43 -0700 (PDT) Received: from mbpobo.local (ip-83-134-194-13.dsl.scarlet.be [83.134.194.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: obonaventure@smtp2.sgsi.ucl.ac.be) by smtp2.sgsi.ucl.ac.be (Postfix) with ESMTPSA id 016B2EB495; Tue, 2 Jun 2009 21:58:40 +0200 (CEST) X-DKIM: Sendmail DKIM Filter v2.8.2 smtp2.sgsi.ucl.ac.be 016B2EB495 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1243972721; bh=X/RGKUFf42p6DYN1T2d0Z8AlFPwwX0Ba4Ck5FKWmN8I=; h=Message-ID:Date:From:Reply-To:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=oUcgU6tn9z/q3T7/O9OGY2CBvJ8S2Ec+I9KSqKmhZnUHhlli19izr/LPnusPODT/O 8lEDHzKcAiAp7esvRQ6n4IVWOsaEs34cDOJAmGjQgSObOQyaGlU7XjLOKh2dYiLYqj mhdgGOSpSnfI7CktMzbKESbzV9o+Ke4tnzh8dTOw= Message-ID: <4A25846F.4030408@uclouvain.be> Date: Tue, 02 Jun 2009 21:58:39 +0200 From: Olivier Bonaventure User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: Sam Hartman References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> In-Reply-To: X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.1 X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: 016B2EB495.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: olivier.bonaventure@uclouvain.be X-SGSI-Spam-Status: No Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Olivier.Bonaventure@uclouvain.be List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2009 19:58:45 -0000 Sam, > Your slides jump right into describing the solution with map > versioning, which really isn't such a great place to start a > discussion of it. > > That discussion should start with the problem. I think that the problem can be described as follows : How does an ETR responsible for an EID prefix informs an ITR about a change in the mapping for this prefix ? There are two different answers to this question. The first answer, based on the current draft and Dino's presentation can be summarised as follows : - the most important change is a change in the reachability of one ETRs that can be used to reach the prefix. The loc reach bits placed inside the header of all encapsulated data packets can be used to inform the ITR of any change in reachability of one of these ETRs - the other changes (weigths, preference, ...) can be handled by first decreasing the ttl of the mapping, ... see Dino's slides for more information about this procedure. The second answer, described in LISP Mapping Versioning, can be summarised as follows : - all changes (reachability, weight, preference, addition/removal of one ETR) are equally important - each mapping has a version number and any change in the mapping causes a change of version number. The ITR places in the header of data encapsulated packets the version number of its mapping and the version number of the mapping of the destination prefix that it knows. By looking at the version number found in the received data encapsulated packets, it can check whether the mapping has changed and send a Map-Request if a change has been detected to retrieve the new mapping Olivier -- http://inl.info.ucl.ac.be , UCLouvain, Belgium From Fred.L.Templin@boeing.com Tue Jun 2 13:29:30 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B5FD03A68AB for ; Tue, 2 Jun 2009 13:29:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.526 X-Spam-Level: X-Spam-Status: No, score=-3.526 tagged_above=-999 required=5 tests=[AWL=3.074, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OzoAxiEh65Og for ; Tue, 2 Jun 2009 13:29:30 -0700 (PDT) Received: from blv-smtpout-01.boeing.com (blv-smtpout-01.boeing.com [130.76.32.69]) by core3.amsl.com (Postfix) with ESMTP id ED9D63A687A for ; Tue, 2 Jun 2009 13:29:29 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by blv-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n52KTQIi015839 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Tue, 2 Jun 2009 13:29:26 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n52KTPSU007491 for ; Tue, 2 Jun 2009 15:29:25 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n52KTFIM007092 for ; Tue, 2 Jun 2009 15:29:25 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 2 Jun 2009 13:29:23 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Tue, 2 Jun 2009 13:29:22 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <4A25846F.4030408@uclouvain.be> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Path MTU concerns and proposed resolutions Thread-Index: AcnjvJQTl5FUv7gOQbydo+y2Ug6DHgAADE7g References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> From: "Templin, Fred L" To: X-OriginalArrivalTime: 02 Jun 2009 20:29:23.0659 (UTC) FILETIME=[D10261B0:01C9E3C0] Subject: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2009 20:29:30 -0000 Folks, I'd like to try to summarize the MTU concerns as follows: 1. Insertion of an outer IP header at the ITR reduces the effective MTU on the path to the ETR. 2. The IPv4 IP_ID field is only 16bits (too small to safely support sustained fragmentation at high data rates). 3. Fragmentation in routers performed in slow path 4. Overhead for reassembly in ETRs is too onerous in some scenarios 5. Outer ICMP messages from routers on the path to the ETR may be lost and/or not contain enough information for translation into inner ICMP messages to send back to the original source 6. Outer ICMP messages from routers on the path may be insufficiently provisioned to allow for authentication 7. since the ITR is an in-the-network tunnel, hitting an MTU restriction in the path to the ETR results in a flood of ICMP Packet Too Big (PTB) messages coming from the network and bombarding the ITR About proposed resolutions, the key idea is for the ITR to only accept PTB feedback coming from ETRs and not accept it from "anonymous" middleboxes. This feedback will get through in instances where "vanilla" ICMP feedback might not, since the feedback is sent in the control plane which may not necessarily share the same channel as the data plane. Comments? Fred fred.l.templin@boeing.com From hartmans@mit.edu Wed Jun 3 08:29:56 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6D9D93A6884 for ; Wed, 3 Jun 2009 08:29:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6MgHf8A3VcWG for ; Wed, 3 Jun 2009 08:29:55 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id A7BE53A6B97 for ; Wed, 3 Jun 2009 08:29:55 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 7BDE74141; Wed, 3 Jun 2009 11:29:51 -0400 (EDT) To: "Templin\, Fred L" References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> From: Sam Hartman Date: Wed, 03 Jun 2009 11:29:51 -0400 In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> (Fred L. Templin's message of "Tue\, 2 Jun 2009 13\:29\:22 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 15:29:56 -0000 >>>>> "Templin," == Templin, Fred L writes: Templin,> Comments? Fred, thanks for your message. I think that you've written down some of the generic concerns with PMTU issues you might run into when you introduce a tunnel into the network. Now, you need to focus these concerns on LISP. First, Dino claims he made changes in 01 that attempt to solve your PMTU issues. I'd appreciate it if you could review lisp-01's discussions of MTU and then focus the discussion as it applies to LISP. In particular, the draft presents arguments about why LISP packets are unlikely to run into situations where the MTU is reduced. How does that argument affect your concerns? Also, the draft presents both a stateful and stateless mechanism for handling PMTU concerns. To what extent do the issues that you bring up apply in each of these cases? --Sam From dino@cisco.com Wed Jun 3 08:44:36 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CAF9C3A68FD for ; Wed, 3 Jun 2009 08:44:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j0vr94h1dYXh for ; Wed, 3 Jun 2009 08:44:35 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id B78AA3A6805 for ; Wed, 3 Jun 2009 08:44:35 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,299,1241395200"; d="scan'208";a="316155953" Received: from sj-dkim-3.cisco.com ([171.71.179.195]) by sj-iport-6.cisco.com with ESMTP; 03 Jun 2009 15:44:25 +0000 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-3.cisco.com (8.12.11/8.12.11) with ESMTP id n53FiPBD021504; Wed, 3 Jun 2009 08:44:25 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id n53FiPFJ015837; Wed, 3 Jun 2009 15:44:25 GMT Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Jun 2009 08:44:25 -0700 Received: from [192.168.1.2] ([10.21.114.188]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 08:44:24 -0700 Message-Id: <8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> From: Dino Farinacci To: "Templin, Fred L" In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Wed, 3 Jun 2009 08:44:24 -0700 References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 03 Jun 2009 15:44:24.0956 (UTC) FILETIME=[2BCD1BC0:01C9E462] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=3090; t=1244043865; x=1244907865; c=relaxed/simple; s=sjdkim3002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Path=20MTU=20concerns=20and=20 proposed=20resolutions |Sender:=20; bh=dNVfg3mI4rHk+jpZoMVHIGCmTQ9/d+qdmge6tTojIF0=; b=UV4taS7tvX7PCoYndPmJc/gkAx+NZ4i4Vf5c5PkNF5gJkQyK/u0JH7h8YA NWrl8adVtSxNjeKSkIcUoEfMixXANi8oG+x/slYQdJJ8482EIoO8RaYFMU4Q c/asNam8rE; Authentication-Results: sj-dkim-3; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim3002 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 15:44:36 -0000 Let me add to Sam's reply. > I'd like to try to summarize the MTU concerns as follows: > > 1. Insertion of an outer IP header at the ITR reduces the > effective MTU on the path to the ETR. Correct. The case for all tunneling protocols. > 2. The IPv4 IP_ID field is only 16bits (too small to safely > support sustained fragmentation at high data rates). You can use different source RLOCs if this would ever be a problem. > 3. Fragmentation in routers performed in slow path Not true. > 4. Overhead for reassembly in ETRs is too onerous in some > scenarios Nothing in the LISP spec says the ETR reassembles fragments. > 5. Outer ICMP messages from routers on the path to the ETR may > be lost and/or not contain enough information for translation > into inner ICMP messages to send back to the original source See the spec how we solved this for IPv4 traceroute. The same problem exists there. Using the UDP source port you can find the originating source, if you wanted to propagate the ICMP Too Big message back to the source *at the time the ICMP Too Big was received by the ITR*. The stateful solution in the LISP spec says, you cache the effective MTU in the map-cache entry and the next packet sent by the source to this ITR will result in a ICMP Too Big message sent to the source. A much better solution IMO. > 6. Outer ICMP messages from routers on the path may be > insufficiently provisioned to allow for authentication This comment needs to be stated more specifically. Please restate. Any datagram protocol will have a difficult time being authenticated. You need lots of state and several packet exchanges. The Internet has survived quite well without it. > 7. since the ITR is an in-the-network tunnel, hitting an MTU > restriction in the path to the ETR results in a flood of > ICMP Packet Too Big (PTB) messages coming from the network > and bombarding the ITR ICMP Too Big messages could bombard any system today (without LISP). It does not happen for these reasons: (1) ICMP Too Big messages are rate-limited by all popular router implementations. (2) ICMP Too Big messages are turned off in core routers. (3) ICMP Too Big messages are filtered at site boundaries so an ITR may never see one. > About proposed resolutions, the key idea is for the ITR to > only accept PTB feedback coming from ETRs and not accept it > from "anonymous" middleboxes. This feedback will get through > in instances where "vanilla" ICMP feedback might not, since > the feedback is sent in the control plane which may not > necessarily share the same channel as the data plane. > > Comments? How could you expect an xTR at Google/Yahoo/MSN to support such control load? We have shown that locator reachability can't scale with probing. The same situation arises here too. Dino > > > Fred > fred.l.templin@boeing.com > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From lear@cisco.com Wed Jun 3 08:51:40 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0CEB33A7009 for ; Wed, 3 Jun 2009 08:51:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.932 X-Spam-Level: X-Spam-Status: No, score=-9.932 tagged_above=-999 required=5 tests=[AWL=0.667, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GZPGmHb15uOU for ; Wed, 3 Jun 2009 08:51:38 -0700 (PDT) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 5CA123A6847 for ; Wed, 3 Jun 2009 08:51:38 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,299,1241395200"; d="scan'208";a="41961507" Received: from ams-dkim-1.cisco.com ([144.254.224.138]) by ams-iport-1.cisco.com with ESMTP; 03 Jun 2009 15:51:39 +0000 Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n53FpccT004693; Wed, 3 Jun 2009 17:51:38 +0200 Received: from adsl-247-4-fixip.tiscali.ch (ams3-vpn-dhcp7409.cisco.com [10.61.92.240]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n53FpcYb021765; Wed, 3 Jun 2009 15:51:38 GMT Message-ID: <4A269C0A.4010802@cisco.com> Date: Wed, 03 Jun 2009 17:51:38 +0200 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090602 Shredder/3.0b3pre MIME-Version: 1.0 To: Dino Farinacci References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> <8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> In-Reply-To: <8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=332; t=1244044298; x=1244908298; c=relaxed/simple; s=amsdkim1002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=lear@cisco.com; z=From:=20Eliot=20Lear=20 |Subject:=20Re=3A=20[lisp]=20Path=20MTU=20concerns=20and=20 proposed=20resolutions |Sender:=20; bh=wapoNlJEcxbNnkyPOP5d8iP+0OsvTVxfklrkawvsz80=; b=bfxRk0ZkyNArI/h3uagFj1hJ8QQdx9dvQa0+MML+mBDz43/bUsmqsX8UuJ QQYMF4vdbkUvk6Fr3yPW8Yj81FcFAAjGbCeBC2rc4ZGqvHCFao0i0jTaIx3i +23wet2HH0; Authentication-Results: ams-dkim-1; header.From=lear@cisco.com; dkim=pass ( sig from cisco.com/amsdkim1002 verified; ); Cc: "Templin, Fred L" , lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 15:51:40 -0000 On 6/3/09 5:44 PM, Dino Farinacci wrote: >> 3. Fragmentation in routers performed in slow path > > Not true. I'd like to go further and say that it shouldn't matter whether it (for many values of "it") is done in the slow path or fast path TODAY. It CAN be done in the fast path if it is important to do there. Eliot From dino@cisco.com Wed Jun 3 09:09:03 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1D4773A69A2 for ; Wed, 3 Jun 2009 09:09:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oQc2Myp+n+Is for ; Wed, 3 Jun 2009 09:09:02 -0700 (PDT) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 054083A6841 for ; Wed, 3 Jun 2009 09:08:44 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,299,1241395200"; d="scan'208";a="78925519" Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-5.cisco.com with ESMTP; 03 Jun 2009 16:08:44 +0000 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n53G8hqM011116; Wed, 3 Jun 2009 09:08:43 -0700 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id n53G8hn5015836; Wed, 3 Jun 2009 16:08:43 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Jun 2009 09:08:43 -0700 Received: from [192.168.1.2] ([10.21.114.188]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 09:08:43 -0700 Message-Id: From: Dino Farinacci To: Olivier.Bonaventure@uclouvain.be In-Reply-To: <4A25846F.4030408@uclouvain.be> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Wed, 3 Jun 2009 09:08:42 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 03 Jun 2009 16:08:43.0193 (UTC) FILETIME=[90FA6A90:01C9E465] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1052; t=1244045323; x=1244909323; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=acMFhKRX/4bDLa+K3UBm9tBbuQ+M3PMnV0nJXuoA/8s=; b=Jfx1KQxEM0jCWDWscFXPabYrfJCQL1jnIo/isyQZ5W77VfPZ77ffNkh3OG Ak0RqsgBDDYbO50+rhvZ4Qw1ZQaYzo6ABPHC4ktKZvRpvWyLe4We74NNrWWp lwHs+3Y+Yz; Authentication-Results: sj-dkim-2; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 16:09:03 -0000 > - each mapping has a version number and any change in the mapping > causes > a change of version number. The ITR places in the header of data > encapsulated packets the version number of its mapping and the version > number of the mapping of the destination prefix that it knows. By > looking at the version number found in the received data encapsulated > packets, it can check whether the mapping has changed and send a > Map-Request if a change has been detected to retrieve the new mapping I plan to reply to Luigi's email but have a quick reply for this point. If the version numbers are used to simply identify a change and prompt a Map-Request, then why can't a single bit convey the same thing? The fact that version numbers exist would convey that multiple mapping versions are allowed to exist. I am pretty sure that is not a good idea and creates other complexities. With a single bit, you indicate that the latest state is what is important to cache rather than dealing with intermediate states. Dino From jmh@joelhalpern.com Wed Jun 3 09:24:43 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 58CA93A695B for ; Wed, 3 Jun 2009 09:24:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.499 X-Spam-Level: X-Spam-Status: No, score=-3.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id URTmoIUrsJY7 for ; Wed, 3 Jun 2009 09:24:42 -0700 (PDT) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 919AC3A6841 for ; Wed, 3 Jun 2009 09:24:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 3ED7F4300C8 for ; Wed, 3 Jun 2009 09:24:43 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.100] (pool-71-161-52-172.clppva.btas.verizon.net [71.161.52.172]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 9C3E343014F for ; Wed, 3 Jun 2009 09:24:42 -0700 (PDT) Message-ID: <4A26A3C3.8090308@joelhalpern.com> Date: Wed, 03 Jun 2009 12:24:35 -0400 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: lisp@ietf.org References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 16:24:43 -0000 With one bit of state, in the event of even a single packet loss there is ambiguity about what the bit means. (If the sender sets the bit on only one packet, and that packet gets lost, the bit has gotten lost. Conversely, if the sender sets the bit on a sequence of packets, then the receiver has to figure out whether the successive indications are for the same change or different changes. One could, of course, treat the single bit as a two-state wrapping counter. That would address the problem above. However, if there are two successive changes, that would look like no change at all. This is the question the versioning document seems to be looking at in trying to decide how big the sequence number needs to be. But I find the reasoning misleading. Either there is active communication, or there isn't. If there isn't, then timeouts on the mapping itself will prompt new queries. And, the rate that matters is how often changes take place. As long as the product of the rate-of-change and the supported idle-time for simplified detection, is less than the wrap, then we are fine. SO I suspect that if we want to go with a sequence number type behavior, we probably need more than 1 bit, but fewer than 16 (I end up at 8 myself.) However, I think the question of how many bits to use is secondary to the question of which conceptual mechanism we want to have. (Side note: A flapping xTR should be rapidly taken out of service. O&M problem, not a base protocol issue.) Yours, Joel Dino Farinacci wrote: >> - each mapping has a version number and any change in the mapping causes >> a change of version number. The ITR places in the header of data >> encapsulated packets the version number of its mapping and the version >> number of the mapping of the destination prefix that it knows. By >> looking at the version number found in the received data encapsulated >> packets, it can check whether the mapping has changed and send a >> Map-Request if a change has been detected to retrieve the new mapping > > I plan to reply to Luigi's email but have a quick reply for this point. > > If the version numbers are used to simply identify a change and prompt a > Map-Request, then why can't a single bit convey the same thing? > > The fact that version numbers exist would convey that multiple mapping > versions are allowed to exist. I am pretty sure that is not a good idea > and creates other complexities. With a single bit, you indicate that the > latest state is what is important to cache rather than dealing with > intermediate states. > > Dino > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From dino@cisco.com Wed Jun 3 09:44:12 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60B8928C107 for ; Wed, 3 Jun 2009 09:44:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d90S9lqjrBsB for ; Wed, 3 Jun 2009 09:44:11 -0700 (PDT) Received: from sj-iport-5.cisco.com (sj-iport-5.cisco.com [171.68.10.87]) by core3.amsl.com (Postfix) with ESMTP id 613593A6F26 for ; Wed, 3 Jun 2009 09:44:11 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,299,1241395200"; d="scan'208";a="78940175" Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-5.cisco.com with ESMTP; 03 Jun 2009 16:44:14 +0000 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n53GiD16028483; Wed, 3 Jun 2009 09:44:13 -0700 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id n53GiDEX029492; Wed, 3 Jun 2009 16:44:13 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 3 Jun 2009 09:44:13 -0700 Received: from [192.168.1.2] ([10.21.114.188]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 09:44:12 -0700 Message-Id: <134F397D-60D8-4AB3-9EFF-15B54A46C84B@cisco.com> From: Dino Farinacci To: "Joel M. Halpern" In-Reply-To: <4A26A3C3.8090308@joelhalpern.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Wed, 3 Jun 2009 09:44:12 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 03 Jun 2009 16:44:12.0770 (UTC) FILETIME=[864E1420:01C9E46A] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=4461; t=1244047453; x=1244911453; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=NMSuWoA5dpHopdC3M6gYl0S9XMt6b+Tku55VBtQuldY=; b=igi0+x5PvSxk5YzxI8RwmSqK+oxAbdY6ysMvzIVmqHSBce8e5wVGlENvbC bbmahU1gRG2Q7A24W4SrnOuN7jfPb2t0kP1Rq/rhHDxV++GO8SOfqRO7dhNt ZdR+guMIqg; Authentication-Results: sj-dkim-2; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 16:44:12 -0000 > With one bit of state, in the event of even a single packet loss > there is ambiguity about what the bit means. (If the sender sets > the bit on only one packet, and that packet gets lost, the bit has > gotten I said 1 bit. And didn't not mean that 1 packet is sent. The bit can stay set in a small packet train of packets. It works like this: (1) Site A has a mapping database change. (2) Site A is currently talking to Site B. (3) Site A wants to update B's map-cache for itself. (4) Site A sets the SMR bit in a sequence of packets to Site B. For other map-cache entries where the LRU is small, it *does not set the SMR-bit* for those sites. (5) The packet with the SMR-bit set has nonce value . (6) Site B sees the SMR-bit when decapsulating data and tells control plane to send a Map-Request with the same nonce value . (7) Site A returns a Map-Reply with nonce value . (8) Site B is updated. A 3 packet exchange where the first packet traversal piggybacks on data. The Site A ITR can control the number of places it receives Map- Requests by deciding which map-cache entries to SMR. > lost. Conversely, if the sender sets the bit on a sequence of > packets, then the receiver has to figure out whether the successive > indications are for the same change or different changes. Understand. But a new nonce value from Site A can tell Site B to rerequest. That is only going to happen if the changes are on the order of milliseconds. That is, within the trip-delay of the 3 packet exchange. > One could, of course, treat the single bit as a two-state wrapping > counter. That would address the problem above. However, if there > are two successive changes, that would look like no change at all. Interesting. So you say the bit is a counter with 2 values. > This is the question the versioning document seems to be looking at > in trying to decide how big the sequence number needs to be. But I > find the reasoning misleading. Either there is active > communication, or there isn't. If there isn't, then timeouts on the > mapping itself will prompt new Assuming time-outs are short. The default we have in the implementation right now is 24 hours. > queries. And, the rate that matters is how often changes take > place. As long as the product of the rate-of-change and the > supported idle-time for simplified detection, is less than the wrap, > then we are fine. SO I suspect that if we want to go with a sequence > number type behavior, we probably need more than 1 bit, but fewer > than 16 (I end up at 8 myself.) Good assertion and conclusion Joel. Agree. > However, I think the question of how many bits to use is secondary > to the question of which conceptual mechanism we want to have. Right. > (Side note: A flapping xTR should be rapidly taken out of service. > O&M problem, not a base protocol issue.) Right, agree. Dino > > > Yours, > Joel > > Dino Farinacci wrote: >>> - each mapping has a version number and any change in the mapping >>> causes >>> a change of version number. The ITR places in the header of data >>> encapsulated packets the version number of its mapping and the >>> version >>> number of the mapping of the destination prefix that it knows. By >>> looking at the version number found in the received data >>> encapsulated >>> packets, it can check whether the mapping has changed and send a >>> Map-Request if a change has been detected to retrieve the new >>> mapping >> I plan to reply to Luigi's email but have a quick reply for this >> point. >> If the version numbers are used to simply identify a change and >> prompt a Map-Request, then why can't a single bit convey the same >> thing? >> The fact that version numbers exist would convey that multiple >> mapping versions are allowed to exist. I am pretty sure that is not >> a good idea and creates other complexities. With a single bit, you >> indicate that the latest state is what is important to cache rather >> than dealing with intermediate states. >> Dino >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From Fred.L.Templin@boeing.com Wed Jun 3 11:02:01 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ECB103A6F9D for ; Wed, 3 Jun 2009 11:02:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.364 X-Spam-Level: X-Spam-Status: No, score=-5.364 tagged_above=-999 required=5 tests=[AWL=1.235, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Or09DQgtqLJL for ; Wed, 3 Jun 2009 11:02:00 -0700 (PDT) Received: from blv-smtpout-01.boeing.com (blv-smtpout-01.boeing.com [130.76.32.69]) by core3.amsl.com (Postfix) with ESMTP id B3C6F3A694D for ; Wed, 3 Jun 2009 11:02:00 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by blv-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53I1p0u023763 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 3 Jun 2009 11:01:51 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53I1oNp010915; Wed, 3 Jun 2009 13:01:50 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53I1l0t010806; Wed, 3 Jun 2009 13:01:50 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 11:01:49 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 11:00:54 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603CFF6@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions Thread-Index: AcnkYi57iBot/hvWRlOScVq7q7PxzQACFXKg References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> <8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> From: "Templin, Fred L" To: "Dino Farinacci" X-OriginalArrivalTime: 03 Jun 2009 18:01:49.0237 (UTC) FILETIME=[5DC68E50:01C9E475] Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 18:02:02 -0000 Dino, I will take up Sam's suggestion to comment to the new LISP text in a different message, but will address your comments below first: > -----Original Message----- > From: Dino Farinacci [mailto:dino@cisco.com] > Sent: Wednesday, June 03, 2009 8:44 AM > To: Templin, Fred L > Cc: lisp@ietf.org > Subject: Re: [lisp] Path MTU concerns and proposed resolutions >=20 > Let me add to Sam's reply. >=20 > > I'd like to try to summarize the MTU concerns as follows: > > > > 1. Insertion of an outer IP header at the ITR reduces the > > effective MTU on the path to the ETR. >=20 > Correct. The case for all tunneling protocols. Right. =20 > > 2. The IPv4 IP_ID field is only 16bits (too small to safely > > support sustained fragmentation at high data rates). >=20 > You can use different source RLOCs if this would ever be a problem. The idea I am suggesting is to allow a little bit of fragmentation initially, but tune it out as quickly as possible. That way, there is no concern for undetected reassembly errors (RFC4963) nor burning additional RLOCs. > > 3. Fragmentation in routers performed in slow path >=20 > Not true. That's good to know, but its not really relevant to the LISP discussion - it was merely intended as a general comment that I will omit from future discussions. > > 4. Overhead for reassembly in ETRs is too onerous in some > > scenarios >=20 > Nothing in the LISP spec says the ETR reassembles fragments. I'm now coming to know that you are looking for LISP xTRs in a variety of deployment scenarios and not just in the case of global Internet DFZ routers. Whether an ETR would be asked to reassemble or not has a great deal to do with the specific deployment scenario. That is why I have specified SEAL-lite, which asks only that the ETR report fragmentation and not that it perform reassembly.=20 =20 > > 5. Outer ICMP messages from routers on the path to the ETR may > > be lost and/or not contain enough information for translation > > into inner ICMP messages to send back to the original source >=20 > See the spec how we solved this for IPv4 traceroute. The same problem > exists there. Using the UDP source port you can find the originating > source, if you wanted to propagate the ICMP Too Big message back to > the source *at the time the ICMP Too Big was received by the ITR*. The Presumably, traceroutes will not be flowing at line rate and off-path attackers would have little to gain by trying to disrupt a traceroute nor would they have a way of guessing that a traceroute is in progress. So, the spec's suggestion of having the ITR cache traceroute headers is plausible *for that particular application only*. For line rate data plane transmissions, however, having the ITR cache the headers of all of the packets would be intractable in terms of storage and processing overhead. The ITR would also have only the 16 bits of the UDP source port such that a relatively low data rate stream of spoofed ICMPs from an off-path attacker could guess correctly and expose a DOS vector. Finally, how could the ITR know when it is OK to discard the cached headers? This is not a problem for SEAL, as there is no header caching required.=20 > stateful solution in the LISP spec says, you cache the effective MTU > in the map-cache entry and the next packet sent by the source to this > ITR will result in a ICMP Too Big message sent to the source. A much > better solution IMO. There is nothing novel nor surprising about asking the ITR to cache per-ETR MTUs and drop packets that are too big instead of allowing them into the tunnel - that's just the way path MTU discovery is intended to work. I have been saying this for years, and many others have been saying it for many years before that. This is also how SEAL works, and also how tunneling standards like RFC4213 work. > > 6. Outer ICMP messages from routers on the path may be > > insufficiently provisioned to allow for authentication >=20 > This comment needs to be stated more specifically. Please restate. Any > datagram protocol will have a difficult time being authenticated. You > need lots of state and several packet exchanges. The Internet has > survived quite well without it. Authentication is a loaded word and was not intended in the sense of, e.g. setting up security associations, inserting an AH header, etc. What I was meaning to say was (sic) "outer ICMP messages from routers on the path may be insufficiently provisioned to provide an adequate nonce". > > 7. since the ITR is an in-the-network tunnel, hitting an MTU > > restriction in the path to the ETR results in a flood of > > ICMP Packet Too Big (PTB) messages coming from the network > > and bombarding the ITR >=20 > ICMP Too Big messages could bombard any system today (without LISP). > It does not happen for these reasons: >=20 > (1) ICMP Too Big messages are rate-limited by all popular router > implementations. That may well be true, but it could lead to some hosts not receiving timely MTU feedback. Having an xTR in front of the hosts could lend to more timely MTU feedback.=20 > (2) ICMP Too Big messages are turned off in core routers. Then how is the ITR going to discover larger MTUs if large packets are dropped silently by routers in the path from the ITR to the ETR? Also, I don't find it acceptable for the ITR to set a too-small upper bound on the tunnel MTU if there are paths to some ETRs that could have accepted a larger MTU. Using SEAL, the ITR can set a large upper bound tunnel MTU and allow the correct MTU for each ITR->ETR path to be discovered. > (3) ICMP Too Big messages are filtered at site boundaries so an ITR > may never see one. That is one good reason why the MTU feedback should be conveyed in tunnel protocol-specific error messages and not ICMPs.=20 > > About proposed resolutions, the key idea is for the ITR to > > only accept PTB feedback coming from ETRs and not accept it > > from "anonymous" middleboxes. This feedback will get through > > in instances where "vanilla" ICMP feedback might not, since > > the feedback is sent in the control plane which may not > > necessarily share the same channel as the data plane. > > > > Comments? >=20 > How could you expect an xTR at Google/Yahoo/MSN to support such > control load? We have shown that locator reachability can't scale with > probing. The same situation arises here too. I didn't get that - what control load are you referring to? Fred fred.l.templin@boeing.com > Dino >=20 > > > > > > Fred > > fred.l.templin@boeing.com > > _______________________________________________ > > lisp mailing list > > lisp@ietf.org > > https://www.ietf.org/mailman/listinfo/lisp From Fred.L.Templin@boeing.com Wed Jun 3 11:11:24 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD8473A6945 for ; Wed, 3 Jun 2009 11:11:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.611 X-Spam-Level: X-Spam-Status: No, score=-5.611 tagged_above=-999 required=5 tests=[AWL=0.988, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gVMs36-J7baE for ; Wed, 3 Jun 2009 11:11:24 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id EB43F3A69A4 for ; Wed, 3 Jun 2009 11:11:23 -0700 (PDT) Received: from blv-av-01.boeing.com (blv-av-01.boeing.com [130.247.48.231]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53IBDJ4028338 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 3 Jun 2009 11:11:13 -0700 (PDT) Received: from blv-av-01.boeing.com (localhost [127.0.0.1]) by blv-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53IBDsN002624; Wed, 3 Jun 2009 11:11:13 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by blv-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53IBCeN002577; Wed, 3 Jun 2009 11:11:13 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 11:11:07 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 11:10:20 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D010@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <4A269C0A.4010802@cisco.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions Thread-Index: AcnkYzKJkReleN3qQvaI756f06Fb2wAErMkw References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com><8D5D98CC-45A0-4B43-84B1-DFF6D234C4DB@cisco.com> <4A269C0A.4010802@cisco.com> From: "Templin, Fred L" To: "Eliot Lear" , "Dino Farinacci" X-OriginalArrivalTime: 03 Jun 2009 18:11:07.0654 (UTC) FILETIME=[AA9E3A60:01C9E476] Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 18:11:24 -0000 Eliot, > -----Original Message----- > From: Eliot Lear [mailto:lear@cisco.com] > Sent: Wednesday, June 03, 2009 8:52 AM > To: Dino Farinacci > Cc: Templin, Fred L; lisp@ietf.org > Subject: Re: [lisp] Path MTU concerns and proposed resolutions >=20 > On 6/3/09 5:44 PM, Dino Farinacci wrote: > >> 3. Fragmentation in routers performed in slow path > > > > Not true. >=20 > I'd like to go further and say that it shouldn't matter whether it (for > many values of "it") is done in the slow path or fast path TODAY. It > CAN be done in the fast path if it is important to do there. That is fine, and fast path would certainly be nice in any case. I won't mention this from now on. Fred fred.l.templin@boeing.com >=20 > Eliot > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From olivier.bonaventure@uclouvain.be Wed Jun 3 11:55:38 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6B9AF3A6986 for ; Wed, 3 Jun 2009 11:55:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.995 X-Spam-Level: X-Spam-Status: No, score=-5.995 tagged_above=-999 required=5 tests=[AWL=0.603, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WZT9nY6Bq8tr for ; Wed, 3 Jun 2009 11:55:37 -0700 (PDT) Received: from smtp1.sgsi.ucl.ac.be (smtpout.sgsi.ucl.ac.be [130.104.5.77]) by core3.amsl.com (Postfix) with ESMTP id 238143A6778 for ; Wed, 3 Jun 2009 11:55:36 -0700 (PDT) Received: from mbpobo.local (ip-83-134-212-193.dsl.scarlet.be [83.134.212.193]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: obonaventure@smtp1.sgsi.ucl.ac.be) by smtp1.sgsi.ucl.ac.be (Postfix) with ESMTPSA id 909A2E8A99; Wed, 3 Jun 2009 20:55:37 +0200 (CEST) X-DKIM: Sendmail DKIM Filter v2.8.2 smtp1.sgsi.ucl.ac.be 909A2E8A99 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=uclouvain.be; s=selucl; t=1244055337; bh=i4nmdswwELsn2N0rOL9RMYod91Bv0txdSWCYBJ97Ckc=; h=Message-ID:Date:From:Reply-To:MIME-Version:To:CC:Subject: References:In-Reply-To:Content-Type:Content-Transfer-Encoding; b=o6bNPc/ux45Ar9+rD3MQ25eMzXNoYqXNUJm6K0dCb3LqaM9d+lq7sm7ZdLrfY91XI nByszdEIhgTbaqtlHGhQrAAjaHGE7QJ+MBocvWIDx+jZGik4uinfLBwU0cU5I+NDay vzCmrkZfzXXCuGXv9OzFhVbh9/BRRwqoeTk2orVg= Message-ID: <4A26C724.6050203@uclouvain.be> Date: Wed, 03 Jun 2009 20:55:32 +0200 From: Olivier Bonaventure User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) MIME-Version: 1.0 To: "Joel M. Halpern" References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> In-Reply-To: <4A26A3C3.8090308@joelhalpern.com> X-Enigmail-Version: 0.95.7 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: clamav-milter 0.95.1 X-Virus-Status: Clean X-Sgsi-Spamcheck: SASL authenticated, X-SGSI-MailScanner-ID: 909A2E8A99.00000 X-SGSI-MailScanner: Found to be clean X-SGSI-From: olivier.bonaventure@uclouvain.be X-SGSI-Spam-Status: No Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Olivier.Bonaventure@uclouvain.be List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 18:55:38 -0000 Joel, > With one bit of state, in the event of even a single packet loss there > is ambiguity about what the bit means. (If the sender sets the bit on > only one packet, and that packet gets lost, the bit has gotten lost. > Conversely, if the sender sets the bit on a sequence of packets, then > the receiver has to figure out whether the successive indications are > for the same change or different changes. I agree > One could, of course, treat the single bit as a two-state wrapping > counter. That would address the problem above. However, if there are > two successive changes, that would look like no change at all. This is > the question the versioning document seems to be looking at in trying to > decide how big the sequence number needs to be. But I find the > reasoning misleading. Either there is active communication, or there > isn't. If there isn't, then timeouts on the mapping itself will prompt > new queries. And, the rate that matters is how often changes take > place. As long as the product of the rate-of-change and the supported > idle-time for simplified detection, is less than the wrap, then we are > fine. SO I suspect that if we want to go with a sequence number type > behavior, we probably need more than 1 bit, but fewer than 16 (I end up > at 8 myself.) 8 bits could be sufficient, but as you explained above I don't think that one bit would be enough. > However, I think the question of how many bits to use is secondary to > the question of which conceptual mechanism we want to have. Completely agree > (Side note: A flapping xTR should be rapidly taken out of service. O&M > problem, not a base protocol issue.) In an ideal network yes, but in practice in some parts of the network a flapping link is better than no link at all. Measurements show that flapping links are unfortunately frequent in IP networks, see e.g. : http://www.ieee-infocom.org/2004/Papers/48_1.PDF http://inl.info.ucl.ac.be/publications/achieving-sub-50-milliseconds-recover Olivier -- http://inl.info.ucl.ac.be , UCLouvain, Belgium From Fred.L.Templin@boeing.com Wed Jun 3 13:54:34 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7EB243A6B17 for ; Wed, 3 Jun 2009 13:54:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.776 X-Spam-Level: X-Spam-Status: No, score=-5.776 tagged_above=-999 required=5 tests=[AWL=0.823, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ozn8zNY+E1JL for ; Wed, 3 Jun 2009 13:54:33 -0700 (PDT) Received: from blv-smtpout-01.boeing.com (blv-smtpout-01.boeing.com [130.76.32.69]) by core3.amsl.com (Postfix) with ESMTP id 1A9E828C1D3 for ; Wed, 3 Jun 2009 13:54:09 -0700 (PDT) Received: from slb-av-01.boeing.com (slb-av-01.boeing.com [129.172.13.4]) by blv-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53Ks2KM006576 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 3 Jun 2009 13:54:05 -0700 (PDT) Received: from slb-av-01.boeing.com (localhost [127.0.0.1]) by slb-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53Ks2NM012024 for ; Wed, 3 Jun 2009 13:54:02 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by slb-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53Krxaj011905 for ; Wed, 3 Jun 2009 13:54:02 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 13:53:57 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 13:53:56 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <4A26C724.6050203@uclouvain.be> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: SEAL-lite Thread-Index: AcnkfOgIcTGASSHmTAqbn/s4xW2rRgADwiFg References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be><4A26A3C3.8090308@joelhalpern.com> <4A26C724.6050203@uclouvain.be> From: "Templin, Fred L" To: X-OriginalArrivalTime: 03 Jun 2009 20:53:57.0592 (UTC) FILETIME=[69F47580:01C9E48D] Subject: [lisp] SEAL-lite X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 20:54:34 -0000 I thought I should mention that there is now a new version of SEAL called "SEAL-lite". It differs from classical SEAL in that the ETR never has to reassemble and the ITR never has to fragment. SEAL-lite is distinguished from classical SEAL by a version number in the SEAL header. Both SEAL-lite and classical SEAL are specified in the same document. The document can be found here: http://osprey67.com/seal/draft-templin-seal-24.txt Fred fred.l.templin@boeing.com From hartmans@mit.edu Wed Jun 3 14:32:18 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B4F7D3A6F1B for ; Wed, 3 Jun 2009 14:32:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.575 X-Spam-Level: X-Spam-Status: No, score=-2.575 tagged_above=-999 required=5 tests=[AWL=-0.310, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q8FImDMO34A7 for ; Wed, 3 Jun 2009 14:32:18 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id F25953A693E for ; Wed, 3 Jun 2009 14:32:17 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 5BBC24141; Wed, 3 Jun 2009 17:32:15 -0400 (EDT) To: "Templin\, Fred L" References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> <4A26C724.6050203@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> From: Sam Hartman Date: Wed, 03 Jun 2009 17:32:15 -0400 In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> (Fred L. Templin's message of "Wed\, 3 Jun 2009 13\:53\:56 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] SEAL-lite X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 21:32:18 -0000 >>>>> "Fred" == Templin, Fred L writes: Fred> I thought I should mention that there is now a new version Fred> of SEAL called "SEAL-lite". It differs from classical SEAL Fred> in that the ETR never has to reassemble and the ITR never Fred> has to fragment. Fred, discussions of SEAL are off-topic for the LISP list. We're designing the LISP protocol here. I appreciate that you believe that LISP has MTU handling issues that SEAL does not. You are welcome to contribute to the LISP effort. The best way to do that is to respond to my open message to you, showing how the generic MTU handling concerns apply to LISP. If we get consensus on that, working on a solution would be great. If elements of the solution you propose are drawn from SEAL, that would be fine. Obviously, if we adopt any such elements into LISP, we would acknowledge both your contributions and the SEAL spec. Meanwhile, please keep a tighter focus on how what you contribute relates to LISP. Sam Hartman for the LISP chairs From Fred.L.Templin@boeing.com Wed Jun 3 14:38:28 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0ADDE28C192 for ; Wed, 3 Jun 2009 14:38:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.893 X-Spam-Level: X-Spam-Status: No, score=-5.893 tagged_above=-999 required=5 tests=[AWL=0.706, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sS1l2qbAsfn8 for ; Wed, 3 Jun 2009 14:38:27 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id 3978C3A693E for ; Wed, 3 Jun 2009 14:38:27 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53LcPQm026840 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 3 Jun 2009 14:38:26 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53LcPV3015574; Wed, 3 Jun 2009 16:38:25 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53LcNG7015510; Wed, 3 Jun 2009 16:38:25 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 14:38:19 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 14:37:59 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D1E2@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] SEAL-lite Thread-Index: AcnkksqQZr36yoLDSIew8GhiSFmRaQAALXSQ References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be><4A26A3C3.8090308@joelhalpern.com> <4A26C724.6050203@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: "Sam Hartman" X-OriginalArrivalTime: 03 Jun 2009 21:38:19.0956 (UTC) FILETIME=[9CD8F740:01C9E493] Cc: lisp@ietf.org Subject: Re: [lisp] SEAL-lite X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 21:38:28 -0000 Acknowledged. Fred > -----Original Message----- > From: Sam Hartman [mailto:hartmans-ietf@mit.edu] > Sent: Wednesday, June 03, 2009 2:32 PM > To: Templin, Fred L > Cc: lisp@ietf.org > Subject: Re: [lisp] SEAL-lite >=20 > >>>>> "Fred" =3D=3D Templin, Fred L = writes: >=20 > Fred> I thought I should mention that there is now a new version > Fred> of SEAL called "SEAL-lite". It differs from classical SEAL > Fred> in that the ETR never has to reassemble and the ITR never > Fred> has to fragment. >=20 > Fred, discussions of SEAL are off-topic for the LISP list. We're > designing the LISP protocol here. >=20 > I appreciate that you believe that LISP has MTU handling issues that > SEAL does not. >=20 > You are welcome to contribute to the LISP effort. The best way to do > that is to respond to my open message to you, showing how the generic > MTU handling concerns apply to LISP. If we get consensus on that, > working on a solution would be great. >=20 > If elements of the solution you propose are drawn from SEAL, that > would be fine. Obviously, if we adopt any such elements into LISP, we > would acknowledge both your contributions and the SEAL spec. >=20 > Meanwhile, please keep a tighter focus on how what you contribute > relates to LISP. >=20 > Sam Hartman > for the LISP chairs From Fred.L.Templin@boeing.com Wed Jun 3 15:39:33 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 32AE828C1C2 for ; Wed, 3 Jun 2009 15:39:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.982 X-Spam-Level: X-Spam-Status: No, score=-5.982 tagged_above=-999 required=5 tests=[AWL=0.618, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oKGvJ2GNAQbN for ; Wed, 3 Jun 2009 15:39:32 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id BAC143A6FB0 for ; Wed, 3 Jun 2009 15:38:49 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53McW3K022794 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 3 Jun 2009 15:38:35 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53McW3j019252; Wed, 3 Jun 2009 17:38:32 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53McW6B019247; Wed, 3 Jun 2009 17:38:32 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 15:38:32 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 15:38:16 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions Thread-Index: AcnkYC25fT80v3aXToaV96HRwLlF1AANQStQ References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: "Sam Hartman" X-OriginalArrivalTime: 03 Jun 2009 22:38:32.0650 (UTC) FILETIME=[062E52A0:01C9E49C] Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 22:39:33 -0000 Hi Sam, Getting back on track now, I took a look at [LISP], Section 5.4 and am now coming to a useful conclusion. If we can somehow enlist *only* the ETR in reporting packet size overflows (i.e., and not accept any ICMPs from intermediate routers) then there need not be a stateful mechanism since a stateless mechanism would suffice. Let's say that the ETR can be on the lookout for any packets that arrive in fragments rather than whole packets. As long as the ETR is diligent in reporting enough of the packet fragment back to the ITR, the ITR would have enough information to statelessly translate it into an ICMP PTB to return to the original source. So, [LISP] section 5.4.2 can be omitted, and Section 5.4.1 can be rewritten to allow for L to be as large as the MTU of the interface over which the ITR->ETR tunnel is configured. Section 5.4.1 would also specify that the ETR must report fragmentation, and that the ITR must translate the fragmentation reports into ICMP PTB messages to return to the original source. Below is a proposed rewrite of [LISP], Section 5.4.1; please send comments. Fred fred.l.templin@boeing.com --- begin --- 5.4.1. A Stateless Solution to MTU Handling An ITR stateless solution to handle MTU issues is described as follows: 1. Define an architectural constant S for the maximum size of a packet, in bytes, an ITR would receive from a source inside of its site. 2. Define L to be the maximum size, in bytes, a packet of size S would be after the ITR prepends the LISP header, UDP header, and outer network layer header of size H. 3. Calculate: S + H =3D L. When an ITR receives a packet from a site-facing interface and adds H bytes worth of encapsulation to yield a packet size of L bytes, it resolves the MTU issue by first splitting the original packet into fragments, where the first fragment is (1500 - H) bytes and the other fragments are no larger than the first fragment. A LISP header is then prepended to each fragment. This will ensure that the new, encapsulated packets are no larger than 1500, which is highly unlikely to be above the effective tunnel MTU. When an ETR receives encapsulated inner IP fragments, it treats them as individually encapsulated packets. It strips the LISP headers then forwards each fragment to the destination host of the destination site. The fragments are reassembled at the destination host into the single IP datagram that was originated by the source host. This behavior is performed by the ITR when the source host originates a packet with the DF field of the IP header is set to 0. When the DF field of the IP header is set to 1, or the packet is an IPv6 packet originated by the source host, the ITR will drop the packet when the size is greater than L, and sends an ICMP Too Big message to the source with a value of S, where S is (L - H). When the outer header encapsulation uses an IPv4 header the ITR sets the DF bit to 0. After sending the packet, the ITR may receive a Fragmentation Report that contains enough of the first fragment of a LISP packet that experienced outer IPv4 fragmentation such that the LISP nonce is available and the text of the first-fragment can be used for translation into an ICMP Packet Too Big (PTB) message. The ITR then generates the ICMP PTB message and returns it to the original source. When an ETR receives a LISP packet that arrives as multiple outer IPv4 fragments, it discards the non-first-fragments and uses the first-fragment to generate a Fragmentation Report that it returns to the ITR. The ETR must include in the Fragmentation Report enough of the first-fragment such that the ITR can verify the nonce and translate the report into an ICMP PTB. This specification recommends that L be defined as the MTU of the interface over which the ITR->ETR tunnel is configured. --- end --- > -----Original Message----- > From: Sam Hartman [mailto:hartmans-ietf@mit.edu] > Sent: Wednesday, June 03, 2009 8:30 AM > To: Templin, Fred L > Cc: lisp@ietf.org > Subject: Re: [lisp] Path MTU concerns and proposed resolutions >=20 > >>>>> "Templin," =3D=3D Templin, Fred L writes: >=20 > Templin,> Comments? >=20 > Fred, thanks for your message. I think that you've written down some > of the generic concerns with PMTU issues you might run into when you > introduce a tunnel into the network. Now, you need to focus these > concerns on LISP. First, Dino claims he made changes in 01 that > attempt to solve your PMTU issues. > I'd appreciate it if you could review lisp-01's discussions of MTU and then focus the discussion as > it applies to LISP. >=20 > In particular, the draft presents arguments about why LISP packets are > unlikely to run into situations where the MTU is reduced. > How does that argument affect your concerns? >=20 > Also, the draft presents both a stateful and stateless mechanism for > handling PMTU concerns. To what extent do the issues that you bring up apply in each of these cases? >=20 > --Sam > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From Fred.L.Templin@boeing.com Wed Jun 3 15:46:46 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8CDAE3A6B76 for ; Wed, 3 Jun 2009 15:46:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.05 X-Spam-Level: X-Spam-Status: No, score=-6.05 tagged_above=-999 required=5 tests=[AWL=0.549, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ithYID9bULNV for ; Wed, 3 Jun 2009 15:46:45 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id C428C3A67AD for ; Wed, 3 Jun 2009 15:46:45 -0700 (PDT) Received: from slb-av-01.boeing.com (slb-av-01.boeing.com [129.172.13.4]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n53Mkl34025377 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 3 Jun 2009 15:46:47 -0700 (PDT) Received: from slb-av-01.boeing.com (localhost [127.0.0.1]) by slb-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n53MklTq005495 for ; Wed, 3 Jun 2009 15:46:47 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by slb-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n53Mkdk3005322 for ; Wed, 3 Jun 2009 15:46:47 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 15:46:42 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 15:46:16 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D26D@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] SEAL-lite Thread-Index: AcnkfOgIcTGASSHmTAqbn/s4xW2rRgADwiFgAARCTNA= References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be><4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de><4A25846F.4030408@uclouvain.be><4A26A3C3.8090308@joelhalpern.com><4A26C724.6050203@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A10603D172@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: X-OriginalArrivalTime: 03 Jun 2009 22:46:42.0878 (UTC) FILETIME=[2A612DE0:01C9E49D] Subject: Re: [lisp] SEAL-lite X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 22:46:46 -0000 > http://osprey67.com/seal/draft-templin-seal-24.txt FYI, just so that no one is surprised I took the link down until we can get discussion back on track. Thanks - Fred fred.l.templin@boeing.com From Fred.L.Templin@boeing.com Wed Jun 3 17:22:20 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 20FB13A692F for ; Wed, 3 Jun 2009 17:22:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.105 X-Spam-Level: X-Spam-Status: No, score=-6.105 tagged_above=-999 required=5 tests=[AWL=0.494, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OoU+bTklTaKl for ; Wed, 3 Jun 2009 17:22:19 -0700 (PDT) Received: from blv-smtpout-01.boeing.com (blv-smtpout-01.boeing.com [130.76.32.69]) by core3.amsl.com (Postfix) with ESMTP id 2C3873A68B3 for ; Wed, 3 Jun 2009 17:22:19 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by blv-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n540MK33024386 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Wed, 3 Jun 2009 17:22:20 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n540MJ41003428; Wed, 3 Jun 2009 19:22:19 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n540MGrE003380; Wed, 3 Jun 2009 19:22:19 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 3 Jun 2009 17:22:16 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Wed, 3 Jun 2009 17:22:08 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions Thread-Index: AcnkYC25fT80v3aXToaV96HRwLlF1AANQStQAAPy+vA= References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be><4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de><4A25846F.4030408@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: "Sam Hartman" X-OriginalArrivalTime: 04 Jun 2009 00:22:16.0613 (UTC) FILETIME=[83F3B550:01C9E4AA] Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2009 00:22:20 -0000 Sam, Beg pardon, but the initial cut at this was not well aligned with recursive tunneling. Here is another cut that takes recursion into account: Fred fred.l.templin@boeing.com --- begin --- 5.4.1. A Stateless Solution to MTU Handling An ITR stateless solution to handle MTU issues is described as follows: 1. Define an architectural constant S for the maximum size of a packet, in bytes, an ITR would receive from a source inside of its site. 2. Define L to be the maximum size, in bytes, a packet of size S would be after the ITR prepends the LISP header, UDP header, and outer network layer header of size H. 3. Calculate: S + H =3D L. When an ITR receives a packet from a site-facing interface and adds H bytes worth of encapsulation to yield a packet size of L bytes, it resolves the MTU issue by first splitting the original packet into fragments, where the first fragment is 1280 bytes and the other fragments are no larger than the first fragment. A LISP header is then prepended to each fragment. This will ensure that the new, encapsulated packets are no larger than (1280 + H), which is highly unlikely to be above the effective tunnel MTU. When an ETR receives encapsulated inner IP fragments, it treats them as individually encapsulated packets. It strips the LISP headers then forwards each fragment to the destination host of the destination site. The fragments are reassembled at the destination host into the single IP datagram that was originated by the source host. This behavior is performed by the ITR when the source host originates a packet with the DF field of the IP header set to 0. (If the source host included an inner LISP header in the packet, this behavior is only performed if the Report Fragmentation (RF) field of the inner LISP header is set to 0.) When the DF field of the IP header is set to 1, the RF field of the inner LISP header (if present) is set to 1, or the packet is an IPv6 packet originated by the source host, the ITR will drop the packet when the size is greater than L, and send an ICMP Packet Too Big (PTB) message to the source with a value of S, where S is (L - H). If the original source was itself a LISP ITR, ITR instead sends a LISP Fragmentation Report message (see below). When the outer LISP encapsulation uses an IPv4 header the ITR sets the DF bit to 0 and sets the RF bit in the outer LISP header to the same value that was set in the inner LISP header (if present). If no inner LISP header is present, the ITR instead sets the RF bit in the outer LISP header to 1 if the DF bit of the inner IP packet is set to 1, or if the inner packet is an IPv6 packet. After sending the packet, the ITR may receive a LISP Fragmentation Report message that contains enough of the first fragment of a LISP packet that experienced outer IPv4 fragmentation such that the LISP nonce is available and the text of the first-fragment can be used for translation into an ICMP PTB message. If the original source was itself a LISP ITR, ITR instead translates the Fragmentation Report into a Fragmentation Report that the source ITR can interpret. When an ETR receives a LISP packet that arrives as multiple outer IPv4 fragments, it discards the non-first-fragments. If the RF bit is set in the outer LISP header, the ETR then uses the first fragment to generate a Fragmentation Report that it returns to the ITR. The ETR must include in the Fragmentation Report enough of the first-fragment such that the ITR can verify the nonce and translate the report into a PTB to send to the original source. This specification recommends that L be defined as the MTU of the interface over which the ITR->ETR tunnel is configured. --- end --- From luigi@net.t-labs.tu-berlin.de Thu Jun 4 00:58:28 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3660E3A6D0F for ; Thu, 4 Jun 2009 00:58:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lrBCcek2z9sF for ; Thu, 4 Jun 2009 00:58:27 -0700 (PDT) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id DEC583A6C42 for ; Thu, 4 Jun 2009 00:58:26 -0700 (PDT) Received: from [10.201.213.167] (tmo-105-214.customers.d1-online.com [80.187.105.214]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 5365B701BAB5; Thu, 4 Jun 2009 09:58:26 +0200 (CEST) Message-Id: <83590D4C-94FC-4DEC-B549-5A64133D8904@net.t-labs.tu-berlin.de> From: Luigi Iannone To: Dino Farinacci In-Reply-To: <134F397D-60D8-4AB3-9EFF-15B54A46C84B@cisco.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Thu, 4 Jun 2009 09:58:24 +0200 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> <134F397D-60D8-4AB3-9EFF-15B54A46C84B@cisco.com> X-Mailer: Apple Mail (2.935.3) Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2009 07:58:28 -0000 On Jun 3, 2009, at 18:44 , Dino Farinacci wrote: >> With one bit of state, in the event of even a single packet loss >> there is ambiguity about what the bit means. (If the sender sets >> the bit on only one packet, and that packet gets lost, the bit has >> gotten > > I said 1 bit. And didn't not mean that 1 packet is sent. The bit can > stay set in a small packet train of packets. It works like this: > > (1) Site A has a mapping database change. > (2) Site A is currently talking to Site B. > (3) Site A wants to update B's map-cache for itself. > (4) Site A sets the SMR bit in a sequence of packets to Site B. As far as I understand, at this point you need to keep track of the fact that B has asked for new mapping in order to reset the SMR bit. With versioning you do not need this. You just put a new version number, B will understand that has to send a map-request and no further actions are needed from A. Let me add something. What happens in the presence of Map-resolver that cache the entries? (as proposed in the lisp-ms-01 draft) If you include the version number in the Map-Request, when the Map- resolver receive the packet it will easily understand that it needs as well to refresh its cache because a new mapping is available, thus it will forward the packet to the xTR. How to do the same with the SMR bit? I do not think that keeping trace of all the Map-resolvers that cached the mapping is a feasible way. > For other map-cache entries where the LRU is small, it *does not set > the SMR-bit* for those sites. > (5) The packet with the SMR-bit set has nonce value . > (6) Site B sees the SMR-bit when decapsulating data and tells > control plane to send a Map-Request with the same nonce value > . > (7) Site A returns a Map-Reply with nonce value . > (8) Site B is updated. > > A 3 packet exchange where the first packet traversal piggybacks on > data. The Site A ITR can control the number of places it receives > Map-Requests by deciding which map-cache entries to SMR. If you really want you can do the same with versioning. > > >> lost. Conversely, if the sender sets the bit on a sequence of >> packets, then the receiver has to figure out whether the successive >> indications are for the same change or different changes. > > Understand. But a new nonce value from Site A can tell Site B to > rerequest. What if we call this new nonce a version number? ;-) > That is only going to happen if the changes are on the order of > milliseconds. That is, within the trip-delay of the 3 packet exchange. > >> One could, of course, treat the single bit as a two-state wrapping >> counter. That would address the problem above. However, if there >> are two successive changes, that would look like no change at all. > > Interesting. So you say the bit is a counter with 2 values. > >> This is the question the versioning document seems to be looking at >> in trying to decide how big the sequence number needs to be. But I >> find the reasoning misleading. Either there is active >> communication, or there isn't. If there isn't, then timeouts on >> the mapping itself will prompt new > > Assuming time-outs are short. > > The default we have in the implementation right now is 24 hours. Just for clarity. With versioning there is no change in the timeouts. > > >> queries. And, the rate that matters is how often changes take >> place. As long as the product of the rate-of-change and the >> supported idle-time for simplified detection, is less than the >> wrap, then we are fine. This is exactly what we were trying to argue in the draft. >> SO I suspect that if we want to go with a sequence number type >> behavior, we probably need more than 1 bit, but fewer than 16 (I >> end up at 8 myself.) > > Good assertion and conclusion Joel. Agree. > >> However, I think the question of how many bits to use is secondary >> to the question of which conceptual mechanism we want to have. > > Right. Agree Luigi > > >> (Side note: A flapping xTR should be rapidly taken out of service. >> O&M problem, not a base protocol issue.) > > Right, agree. > > Dino > >> >> >> Yours, >> Joel >> >> Dino Farinacci wrote: >>>> - each mapping has a version number and any change in the mapping >>>> causes >>>> a change of version number. The ITR places in the header of data >>>> encapsulated packets the version number of its mapping and the >>>> version >>>> number of the mapping of the destination prefix that it knows. By >>>> looking at the version number found in the received data >>>> encapsulated >>>> packets, it can check whether the mapping has changed and send a >>>> Map-Request if a change has been detected to retrieve the new >>>> mapping >>> I plan to reply to Luigi's email but have a quick reply for this >>> point. >>> If the version numbers are used to simply identify a change and >>> prompt a Map-Request, then why can't a single bit convey the same >>> thing? >>> The fact that version numbers exist would convey that multiple >>> mapping versions are allowed to exist. I am pretty sure that is >>> not a good idea and creates other complexities. With a single bit, >>> you indicate that the latest state is what is important to cache >>> rather than dealing with intermediate states. >>> Dino >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From luigi@net.t-labs.tu-berlin.de Thu Jun 4 01:08:19 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7B2EF3A6AB1 for ; Thu, 4 Jun 2009 01:08:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DE0ikULvLf-z for ; Thu, 4 Jun 2009 01:08:18 -0700 (PDT) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 686DB3A6879 for ; Thu, 4 Jun 2009 01:08:18 -0700 (PDT) Received: from [10.201.213.167] (tmo-105-214.customers.d1-online.com [80.187.105.214]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 4572E701BAB5; Thu, 4 Jun 2009 10:08:19 +0200 (CEST) Message-Id: <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> From: Luigi Iannone To: Dino Farinacci In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Thu, 4 Jun 2009 10:08:17 +0200 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> X-Mailer: Apple Mail (2.935.3) Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2009 08:08:19 -0000 On Jun 3, 2009, at 18:08 , Dino Farinacci wrote: >> - each mapping has a version number and any change in the mapping >> causes >> a change of version number. The ITR places in the header of data >> encapsulated packets the version number of its mapping and the >> version >> number of the mapping of the destination prefix that it knows. By >> looking at the version number found in the received data encapsulated >> packets, it can check whether the mapping has changed and send a >> Map-Request if a change has been detected to retrieve the new mapping > > I plan to reply to Luigi's email but have a quick reply for this > point. > > If the version numbers are used to simply identify a change and > prompt a Map-Request, then why can't a single bit convey the same > thing? Because a single bit doesn't tell you if the change is new compared to the actual mapping you have or is a duplicate of you last update. Assume you receive a packet from X with the SMR bit set, you send a Map-Request, then you receive another packet from X with the SMR bit set, is this another change? or just the same like the first packet? You can answer that you have rate limitation and you will ignore SMR bit from X for a certain time. Unless this time is very large (which is not a good in the case your Map-request is lost) you have no guarantee of not receiving a packet with the SMR bit set actually referring to the same mapping. With versioning this ambiguity does not exist anymore. Luigi > > > The fact that version numbers exist would convey that multiple > mapping versions are allowed to exist. I am pretty sure that is not > a good idea and creates other complexities. With a single bit, you > indicate that the latest state is what is important to cache rather > than dealing with intermediate states. > > Dino > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From Fred.L.Templin@boeing.com Thu Jun 4 10:20:42 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CC8493A6A7A for ; Thu, 4 Jun 2009 10:20:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.138 X-Spam-Level: X-Spam-Status: No, score=-6.138 tagged_above=-999 required=5 tests=[AWL=0.461, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4Pr+SsdxlwSB for ; Thu, 4 Jun 2009 10:20:40 -0700 (PDT) Received: from stl-smtpout-01.boeing.com (stl-smtpout-01.boeing.com [130.76.96.56]) by core3.amsl.com (Postfix) with ESMTP id 802553A6B23 for ; Thu, 4 Jun 2009 10:20:40 -0700 (PDT) Received: from blv-av-01.boeing.com (blv-av-01.boeing.com [130.247.48.231]) by stl-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n54HKfqI003764 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 4 Jun 2009 12:20:42 -0500 (CDT) Received: from blv-av-01.boeing.com (localhost [127.0.0.1]) by blv-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n54HKfJ3003984; Thu, 4 Jun 2009 10:20:41 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by blv-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n54HKfDc003981; Thu, 4 Jun 2009 10:20:41 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 4 Jun 2009 10:20:40 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Thu, 4 Jun 2009 10:19:40 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions Thread-Index: AcnkYC25fT80v3aXToaV96HRwLlF1AANQStQAAPy+vAAHXdosA== References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be><4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de><4A25846F.4030408@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com><39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: "Sam Hartman" X-OriginalArrivalTime: 04 Jun 2009 17:20:40.0070 (UTC) FILETIME=[C8735260:01C9E538] Cc: lisp@ietf.org Subject: Re: [lisp] Path MTU concerns and proposed resolutions X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Jun 2009 17:20:42 -0000 Here again is another update - this I think being close to the final. This version is more adept at handling recursion, and also accounts for pesky routers that cause the first fragment to be the smallest when doing IPv4 fragmentation (albeit with some state required). Fred fred.l.templin@boeing.com --- begin --- 5.4.1. MTU Handling An ITR solution to handle MTU issues is described as follows: 1. Define M to be the minimum of the MTU of the underlying interface over which the ITR->ETR tunnel is configured and the path MTU across the tunnel (if known). 2. Define an architectural constant S for the maximum size of a packet, in bytes, an ITR would receive from a source inside of its site and admit into the tunnel without first performing fragmentation (if the packet is allowed to be fragmented). 3. Define L to be the maximum size, in bytes, a packet of size S would be after the ITR prepends the LISP header, UDP header, and outer network layer header of size H. 4. Calculate: S + H =3D L. This specification recommends that L be defined as 1500. When an ITR receives a packet from a site-facing interface and adds H bytes worth of encapsulation to yield a packet size that is larger than L bytes, it resolves the MTU issue by first splitting the original packet into fragments. The first fragment must be the minimum of 1280 and (M - H) bytes, and the other fragments must be no larger than the first fragment. A LISP header is then prepended to each fragment. This will ensure that the new, encapsulated packets are unlikely to be above the effective tunnel MTU. When an ETR receives encapsulated IP fragments, it treats them as individually encapsulated packets. It strips the LISP headers then forwards each fragment to the destination host of the destination site. The fragments are reassembled at the destination host into the single IP datagram that was originated by the source host. This behavior is performed by the ITR when the source host originates a non-LISP packet with the DF field of the IP header set to 0, or a LISP packet with the RF field of the LISP header set to 0. For all other packets, the ITR will encapsulate the packet and admit it into the tunnel if it is no larger than (M - H) bytes. Otherwise, it will drop the packet and return a Too Big message (i.e., an ICMP Packet Too Big message for non-LISP packets or a LISP Fragmentation Report for LISP packets). The message must contain as much of the invoking packet as possible without the entire message exceeding the minimum MTU (i.e., 576 bytes for IPv4 and 1280 bytes for IPv6). When the LISP encapsulation uses an IPv4 header the ITR sets the DF bit to 0. If the original packet was itself a LISP packet, the ITR sets the RF bit in the encapsulating LISP header to the same value that was set in the original LISP header. If the DF bit of the IP packet is set to 1, or if the packet is an IPv6 packet, the ITR sets the RF bit in the encapsulating LISP header to 1. In all other cases, the ITR sets the RF bit to 0. After sending the packet, the ITR may receive a LISP Fragmentation Report message. If the message contains enough of the packet-in-error and a reasonable MTU value (i.e., one no smaller than 576 bytes for IPv4 or 1280 bytes for IPv6), the ITR translates it into a Too Big message and returns it to the original source. Otherwise, the ITR uses a plateau table (e.g., as described in RFC1191) to cache a value for M which it iteratively decreases based on subsequent Too Bigs until no further Fragmentation Reports are received. When an ETR receives a fragmented LISP packet (i.e., one where the encapsulated packet experiences fragmentation on the path from the ITR), it either reassembles or discards the packet according to its configuration. If the RF bit is set to 1 in the outer LISP header, the ETR also generates a Fragmentation Report message that it returns to the ITR. The message must contain as much of the first-fragment as possible without the entire message exceeding the minimum MTU (i.e., 576 bytes for IPv4 and 1280 bytes for IPv6). --- end --- From menth@informatik.uni-wuerzburg.de Fri Jun 5 03:29:23 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE61D3A6846 for ; Fri, 5 Jun 2009 03:29:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.951 X-Spam-Level: X-Spam-Status: No, score=0.951 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HELO_EQ_DE=0.35, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H+XYV1QFyZY2 for ; Fri, 5 Jun 2009 03:29:22 -0700 (PDT) Received: from mailrelay.rz.uni-wuerzburg.de (mailrelay.rz.uni-wuerzburg.de [132.187.3.28]) by core3.amsl.com (Postfix) with ESMTP id 8D1983A6829 for ; Fri, 5 Jun 2009 03:29:22 -0700 (PDT) Received: from virusscan.mail (localhost [127.0.0.1]) by mailrelay.mail (Postfix) with ESMTP id 145FAA07F8 for ; Fri, 5 Jun 2009 12:29:19 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by virusscan.mail (Postfix) with ESMTP id 05C7CA07F2 for ; Fri, 5 Jun 2009 12:29:19 +0200 (CEST) Received: from [132.187.12.151] (win3151.informatik.uni-wuerzburg.de [132.187.12.151]) by mailmaster.uni-wuerzburg.de (Postfix) with ESMTP id E577B19908D for ; Fri, 5 Jun 2009 12:29:18 +0200 (CEST) Message-ID: <4A28F37D.50407@informatik.uni-wuerzburg.de> Date: Fri, 05 Jun 2009 12:29:17 +0200 From: Michael Menth Organization: University of Wuerzburg User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: lisp@ietf.org References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be><4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de><4A25846F.4030408@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com><39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at uni-wuerzburg.de Subject: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: menth@informatik.uni-wuerzburg.de List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 10:29:23 -0000 Hi, I have a question regarding LISP+ALT. What information do ETRs respond to a map request? * only one RLOC for the requested EID (the RLOC of the ETR that received the request)? * all RLOCs for the requested EID? If it's the latter, how does the ETR know about the other RLOCs? By configuration through the network administrator of the user organization? If so, does that imply that the ETR is under control of the user organization and part of its network? Regards, Michael -- Dr. Michael Menth, Assistant Professor University of Wuerzburg, Institute of Computer Science Am Hubland, D-97074 Wuerzburg, Germany, room B206 phone: (+49)-931/31-86644 (new), fax: (+49)-931/8888-6632 mailto:menth@informatik.uni-wuerzburg.de http://www3.informatik.uni-wuerzburg.de/research/ngn From dmm@1-4-5.net Fri Jun 5 05:53:49 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A34513A69DC for ; Fri, 5 Jun 2009 05:53:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i-ijokDDfAMf for ; Fri, 5 Jun 2009 05:53:49 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id 084ED3A69D7 for ; Fri, 5 Jun 2009 05:53:49 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n55Crpwh027860; Fri, 5 Jun 2009 05:53:51 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n55CrpoS027859; Fri, 5 Jun 2009 05:53:51 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Fri, 5 Jun 2009 05:53:51 -0700 From: David Meyer To: Michael Menth Message-ID: <20090605125351.GA27776@1-4-5.net> References: <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> <4A28F37D.50407@informatik.uni-wuerzburg.de> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="ZGiS0Q5IWpPtfppv" Content-Disposition: inline In-Reply-To: <4A28F37D.50407@informatik.uni-wuerzburg.de> X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 12:53:49 -0000 --ZGiS0Q5IWpPtfppv Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 05, 2009 at 12:29:17PM +0200, Michael Menth wrote: > Hi, > > I have a question regarding LISP+ALT. What information do ETRs respond = =20 > to a map request? > * only one RLOC for the requested EID (the RLOC of the ETR that received = =20 > the request)? > * all RLOCs for the requested EID? Typically, the Map-Reply will contain all of the RLOCs for the site.=20 > If it's the latter, how does the ETR know about the other RLOCs? > By configuration through the network administrator of the user organizati= on? > If so, does that imply that the ETR is under control of the user =20 > organization and part of its network? Yes, in the case where LISP is fielded in the site's CPE. One could also imagine a managed service where the SP provides and manages the site's CPE(s).=20 In any event, deploying LISP in CPE-type boxes is expected to be a comon scenaro for LISP. Dave --ZGiS0Q5IWpPtfppv Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkopFV8ACgkQORgD1qCZ2KflpQCfYDdw5hkKu8Lv9Lhbf7gbTjR1 PnMAn3TqhwVijC8tGTFnh1Cf2OypUeSG =DJQr -----END PGP SIGNATURE----- --ZGiS0Q5IWpPtfppv-- From menth@informatik.uni-wuerzburg.de Fri Jun 5 06:47:50 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 674BC3A6C58 for ; Fri, 5 Jun 2009 06:47:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.581 X-Spam-Level: X-Spam-Status: No, score=0.581 tagged_above=-999 required=5 tests=[AWL=0.370, BAYES_20=-0.74, HELO_EQ_DE=0.35, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 184aExxsGX92 for ; Fri, 5 Jun 2009 06:47:49 -0700 (PDT) Received: from mailrelay.rz.uni-wuerzburg.de (mailrelay.rz.uni-wuerzburg.de [132.187.3.28]) by core3.amsl.com (Postfix) with ESMTP id 2E4913A6B69 for ; Fri, 5 Jun 2009 06:47:48 -0700 (PDT) Received: from virusscan.mail (localhost [127.0.0.1]) by mailrelay.mail (Postfix) with ESMTP id 5CE94A0742; Fri, 5 Jun 2009 15:47:49 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by virusscan.mail (Postfix) with ESMTP id 5007CA073D; Fri, 5 Jun 2009 15:47:49 +0200 (CEST) Received: from europa.informatik.uni-wuerzburg.de (wicx01.informatik.uni-wuerzburg.de [132.187.11.1]) by mailmaster.uni-wuerzburg.de (Postfix) with ESMTP id 2E71AA0737; Fri, 5 Jun 2009 15:47:49 +0200 (CEST) Received: from nero.informatik.uni-wuerzburg.de (win3005.informatik.uni-wuerzburg.de [132.187.12.5]) by europa.informatik.uni-wuerzburg.de (8.11.3/8.11.2/SuSE Linux 8.11.1-0.5) with ESMTP id n55Dlnc12189; Fri, 5 Jun 2009 15:47:49 +0200 Received: from [132.187.12.151] (win3151.informatik.uni-wuerzburg.de [132.187.12.151]) by nero.informatik.uni-wuerzburg.de (Postfix) with ESMTP id EAE14C8376; Fri, 5 Jun 2009 15:47:48 +0200 (CEST) Message-ID: <4A292204.9000300@informatik.uni-wuerzburg.de> Date: Fri, 05 Jun 2009 15:47:48 +0200 From: Michael Menth Organization: University of Wuerzburg User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: David Meyer References: <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> <4A28F37D.50407@informatik.uni-wuerzburg.de> <20090605125351.GA27776@1-4-5.net> In-Reply-To: <20090605125351.GA27776@1-4-5.net> Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at uni-wuerzburg.de Cc: lisp@ietf.org Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: menth@informatik.uni-wuerzburg.de List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 13:47:50 -0000 Hi Dave, is it important that the ETRs are the leaves of the ALT and respond to map requests? Or could also a different entitiy of the user organization do the same work provided it is reachable via an RLOC and has the knowledge about all the RLOCs for this edge network? I'd like to understand the motivation for the design with the ETRs as leave nodes. Is ease of deployment (Every LISP edge network has an ETR which has an RLOC, so let the ETR answer the requests!) the only reason? Or is there also another reason that I do not see? Regards, Michael David Meyer schrieb: > On Fri, Jun 05, 2009 at 12:29:17PM +0200, Michael Menth wrote: > >> Hi, >> >> I have a question regarding LISP+ALT. What information do ETRs respond >> to a map request? >> * only one RLOC for the requested EID (the RLOC of the ETR that received >> the request)? >> * all RLOCs for the requested EID? >> > > Typically, the Map-Reply will contain all of the RLOCs > for the site. > > >> If it's the latter, how does the ETR know about the other RLOCs? >> By configuration through the network administrator of the user organization? >> If so, does that imply that the ETR is under control of the user >> organization and part of its network? >> > > Yes, in the case where LISP is fielded in the site's > CPE. One could also imagine a managed service > where the SP provides and manages the site's CPE(s). > > In any event, deploying LISP in CPE-type boxes is > expected to be a comon scenaro for LISP. > > Dave > > -- Dr. Michael Menth, Assistant Professor University of Wuerzburg, Institute of Computer Science Am Hubland, D-97074 Wuerzburg, Germany, room B206 phone: (+49)-931/31-86644 (new), fax: (+49)-931/8888-6632 mailto:menth@informatik.uni-wuerzburg.de http://www3.informatik.uni-wuerzburg.de/research/ngn From dmm@1-4-5.net Fri Jun 5 07:15:28 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 663BD3A6997 for ; Fri, 5 Jun 2009 07:15:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id soWdbQj6+GCp for ; Fri, 5 Jun 2009 07:15:27 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id 9E7543A6932 for ; Fri, 5 Jun 2009 07:15:27 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n55EFU2N029008; Fri, 5 Jun 2009 07:15:30 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n55EFUqh029007; Fri, 5 Jun 2009 07:15:30 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Fri, 5 Jun 2009 07:15:30 -0700 From: David Meyer To: Michael Menth Message-ID: <20090605141530.GA28848@1-4-5.net> References: <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> <4A28F37D.50407@informatik.uni-wuerzburg.de> <20090605125351.GA27776@1-4-5.net> <4A292204.9000300@informatik.uni-wuerzburg.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: <4A292204.9000300@informatik.uni-wuerzburg.de> X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 14:15:28 -0000 Hey Michael, > is it important that the ETRs are the leaves of the ALT and respond to = =20 > map requests? Or could also a different entitiy of the user organization = =20 > do the same work provided it is reachable via an RLOC and has the =20 > knowledge about all the RLOCs for this edge network? As long as there is a way for the Map-Request to find its way to whomever is authoritative for the mapping data, that entity *could* respond to the map-request. Note however that the ETR still needs to have a way of knowing that it should decap packets for the destined to EID space behind it, so you'd need to be able to provide that information to the ETRs in any event. > I'd like to understand the motivation for the design with the ETRs as =20 > leave nodes. Is ease of deployment (Every LISP edge network has an ETR = =20 > which has an RLOC, so let the ETR answer the requests!) the only reason? = =20 > Or is there also another reason that I do not see? There are a few reasons, including: (i). The site is authoritative for its ingress policy We want the site to be authoritative for its ingress policy. The natural place to do=20 this is at the site's ETRs. (ii). ETRs need to understand what their EID space is anyway Since the ETRs need to be configured to understand what their EID space is anyway (so they can decap packets and send them on to their destinations), they know the EID-to-RLOC mapping and so are the natural place to send Map-Requests.=20 (iii). No caching in the ALT/simplicity We didn't see (haven't yet seen) the need to do caching in the ALT, so the original ALT design had the xTRs participating in the ALT directly (i.e., BGP peering with the ALT somewhere), so having ETRs respond to map-requests was the most straightforward approach. =09 Hope this helps. Dave From jnc@mercury.lcs.mit.edu Fri Jun 5 07:32:24 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 00D253A6A8B for ; Fri, 5 Jun 2009 07:32:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9VrLKqHaHbrP for ; Fri, 5 Jun 2009 07:32:23 -0700 (PDT) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by core3.amsl.com (Postfix) with ESMTP id 49F643A6C28 for ; Fri, 5 Jun 2009 07:32:23 -0700 (PDT) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 4874D6BE5A1; Fri, 5 Jun 2009 10:32:25 -0400 (EDT) To: lisp@ietf.org Message-Id: <20090605143225.4874D6BE5A1@mercury.lcs.mit.edu> Date: Fri, 5 Jun 2009 10:32:25 -0400 (EDT) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 14:32:24 -0000 > From: David Meyer >> does that imply that the ETR is under control of the user organization >> and part of its network? > Yes, in the case where LISP is fielded in the site's CPE. One could > also imagine a managed service where the SP provides and manages the > site's CPE(s). > In any event, deploying LISP in CPE-type boxes is expected to be a > comon scenaro for LISP. It's probably worth pointing out that i) LISP will of course work with a number of different scenarios, ii) the 'typical' scenario would probably change over time (as it did with, say, Web servers), and iii) different organizations will prefer different scenarios, depending on their own particular circumstances. The one thing we need to be careful of is to make sure that the architecture doesn't 'lock in' customers to any particular provider. That was a concern with CONS, but as far as I know, nothing in the current proposed deployment has that characteritic. However, we do need to keep it in mind with anything that is changed/added. Noel From dmm@1-4-5.net Fri Jun 5 07:58:02 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B6AC728C0E9 for ; Fri, 5 Jun 2009 07:58:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tfr3WgLY78B0 for ; Fri, 5 Jun 2009 07:58:02 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id 00D1728C0DB for ; Fri, 5 Jun 2009 07:58:01 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n55Ew5Dc029846; Fri, 5 Jun 2009 07:58:05 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n55Ew5YE029845; Fri, 5 Jun 2009 07:58:05 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Fri, 5 Jun 2009 07:58:05 -0700 From: David Meyer To: Noel Chiappa Message-ID: <20090605145805.GA29749@1-4-5.net> References: <20090605143225.4874D6BE5A1@mercury.lcs.mit.edu> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="6c2NcOVqGQ03X4Wi" Content-Disposition: inline In-Reply-To: <20090605143225.4874D6BE5A1@mercury.lcs.mit.edu> X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 14:58:02 -0000 --6c2NcOVqGQ03X4Wi Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Jun 05, 2009 at 10:32:25AM -0400, Noel Chiappa wrote: > > From: David Meyer >=20 > >> does that imply that the ETR is under control of the user organiza= tion > >> and part of its network? >=20 > > Yes, in the case where LISP is fielded in the site's CPE. One could > > also imagine a managed service where the SP provides and manages the > > site's CPE(s). > > In any event, deploying LISP in CPE-type boxes is expected to be a > > comon scenaro for LISP. >=20 > It's probably worth pointing out that i) LISP will of course work with a > number of different scenarios, ii) the 'typical' scenario would probably > change over time (as it did with, say, Web servers), and iii) different > organizations will prefer different scenarios, depending on their own > particular circumstances. Sure, well taken. > The one thing we need to be careful of is to make sure that the architect= ure > doesn't 'lock in' customers to any particular provider. That was a concern > with CONS, but as far as I know, nothing in the current proposed deployme= nt > has that characteritic. However, we do need to keep it in mind with anyth= ing > that is changed/added. I'll just note that it is a design goal of LISP to solve the provider lock-in that arises from PA numbering of a site. Separating site numbering from core numbering to large extent accomplishes that goal. Of course, you would have to renumber your xTRs when changing providers (you'd likely change RLOCs), but that is anticipated to be a small overhead in comparison to renumbering an entire site.=20 Dave --6c2NcOVqGQ03X4Wi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkopMnwACgkQORgD1qCZ2KcU8QCfaSp8T3BwW8jh94NCj84uyJFc GMUAn1IkOsL2HdXWXtCEJUfyaKmSBydv =KDSQ -----END PGP SIGNATURE----- --6c2NcOVqGQ03X4Wi-- From Fred.L.Templin@boeing.com Fri Jun 5 08:58:27 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 604C33A6C86 for ; Fri, 5 Jun 2009 08:58:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.871 X-Spam-Level: X-Spam-Status: No, score=-5.871 tagged_above=-999 required=5 tests=[AWL=0.128, BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LNGUvIzwI8Cy for ; Fri, 5 Jun 2009 08:58:26 -0700 (PDT) Received: from stl-smtpout-01.boeing.com (stl-smtpout-01.boeing.com [130.76.96.56]) by core3.amsl.com (Postfix) with ESMTP id 76E8C3A6C54 for ; Fri, 5 Jun 2009 08:58:26 -0700 (PDT) Received: from blv-av-01.boeing.com (blv-av-01.boeing.com [130.247.48.231]) by stl-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n55FvqM2029214 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Fri, 5 Jun 2009 10:57:57 -0500 (CDT) Received: from blv-av-01.boeing.com (localhost [127.0.0.1]) by blv-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n55Fvq4q015374; Fri, 5 Jun 2009 08:57:52 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by blv-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n55FvpCW015266; Fri, 5 Jun 2009 08:57:52 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 5 Jun 2009 08:57:48 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Fri, 5 Jun 2009 08:57:46 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10603DAEE@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <20090605145805.GA29749@1-4-5.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Question regarding LISP+ALT Thread-Index: Acnl7gpr7b+UsJntSXKflHzmtmIyHAAB9+fQ References: <20090605143225.4874D6BE5A1@mercury.lcs.mit.edu> <20090605145805.GA29749@1-4-5.net> From: "Templin, Fred L" To: "David Meyer" , "Noel Chiappa" X-OriginalArrivalTime: 05 Jun 2009 15:57:48.0026 (UTC) FILETIME=[5F4B5DA0:01C9E5F6] Cc: lisp@ietf.org Subject: Re: [lisp] Question regarding LISP+ALT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Jun 2009 15:58:27 -0000 > -----Original Message----- > From: David Meyer [mailto:dmm@1-4-5.net] > Sent: Friday, June 05, 2009 7:58 AM > To: Noel Chiappa > Cc: lisp@ietf.org > Subject: Re: [lisp] Question regarding LISP+ALT >=20 > On Fri, Jun 05, 2009 at 10:32:25AM -0400, Noel Chiappa wrote: > > > From: David Meyer > > > > >> does that imply that the ETR is under control of the user organization > > >> and part of its network? > > > > > Yes, in the case where LISP is fielded in the site's CPE. One could > > > also imagine a managed service where the SP provides and manages the > > > site's CPE(s). > > > In any event, deploying LISP in CPE-type boxes is expected to be a > > > comon scenaro for LISP. > > > > It's probably worth pointing out that i) LISP will of course work with a > > number of different scenarios, ii) the 'typical' scenario would probably > > change over time (as it did with, say, Web servers), and iii) different > > organizations will prefer different scenarios, depending on their own > > particular circumstances. >=20 > Sure, well taken. >=20 > > The one thing we need to be careful of is to make sure that the architecture > > doesn't 'lock in' customers to any particular provider. That was a concern > > with CONS, but as far as I know, nothing in the current proposed deployment > > has that characteritic. However, we do need to keep it in mind with anything > > that is changed/added. >=20 > I'll just note that it is a design goal of LISP to > solve the provider lock-in that arises from PA numbering > of a site. Separating site numbering from core numbering > to large extent accomplishes that goal. Of course, you > would have to renumber your xTRs when changing providers > (you'd likely change RLOCs), but that is anticipated to > be a small overhead in comparison to renumbering an > entire site. There is a bit more to PI than just changing the RLOCs, and we have already tackled that in VET and RANGER. That said, I would go a bit further and say that xTR RLOC changes would be completely invisible to the site a very nice architectural feature. Fred fred.l.templin@boeing.com >=20 > Dave From damian.lezama@hotmail.com Sat Jun 6 21:33:50 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3DB1C3A699E for ; Sat, 6 Jun 2009 21:33:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N1BYnF4UKEj8 for ; Sat, 6 Jun 2009 21:33:46 -0700 (PDT) Received: from col0-omc4-s1.col0.hotmail.com (col0-omc4-s1.col0.hotmail.com [65.55.34.203]) by core3.amsl.com (Postfix) with ESMTP id E549C3A677D for ; Sat, 6 Jun 2009 21:33:46 -0700 (PDT) Received: from COL110-DS12 ([65.55.34.200]) by col0-omc4-s1.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 6 Jun 2009 21:33:51 -0700 X-Originating-IP: [24.87.27.71] X-Originating-Email: [damian.lezama@hotmail.com] Message-ID: From: "Damian Lezama" To: Date: Sat, 6 Jun 2009 21:33:34 -0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_000D_01C9E6EE.726534D0" X-Mailer: Microsoft Office Outlook 12.0 Thread-Index: AcnnKR5pryFED9UeQFikzspWkolq0Q== Content-Language: en-us X-OriginalArrivalTime: 07 Jun 2009 04:33:51.0302 (UTC) FILETIME=[2853B660:01C9E729] Subject: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jun 2009 04:33:50 -0000 ------=_NextPart_000_000D_01C9E6EE.726534D0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, I'm trying to understand how the reachability bits can be controlled in an scenario where the xTR's reside inside different ISPs for a multihomed site. As an example if I have a site and 2 providers (A and B) and a host in my site with EID E sends traffic that goes through A, the ITR at A should include information about the reachability to E through provider B, how can it possibly have that information? I see three possible deployment scenarios explained in the draft, and there are also combinations. When xTRs are deployed into the customer site I assume that the site will need mechanisms to keep its xTRs consistent, but when multiple providers enter the scene I don't get how this could work. Thanks, Damian ------=_NextPart_000_000D_01C9E6EE.726534D0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

I’m trying to understand how the reachability = bits can be controlled in an scenario where the xTR’s reside inside = different ISPs for a multihomed site. As an example if I have a site and 2 providers (A = and B) and a host in my site with EID E sends traffic that goes through A, the = ITR at A should include information about the reachability to E through = provider B, how can it possibly have that information?

 

I see three possible deployment scenarios explained = in the draft, and there are also combinations. When xTRs are deployed into the = customer site I assume that the site will need mechanisms to keep its xTRs = consistent, but when multiple providers enter the scene I don’t get how this could = work.

 

Thanks,

Damian

 

------=_NextPart_000_000D_01C9E6EE.726534D0-- From dino@cisco.com Sun Jun 7 14:24:00 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 58BAE28C116 for ; Sun, 7 Jun 2009 14:24:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZMFvIoi3qXHt for ; Sun, 7 Jun 2009 14:23:59 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id 57FE728C115 for ; Sun, 7 Jun 2009 14:23:59 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,320,1241395200"; d="scan'208";a="318584955" Received: from sj-dkim-3.cisco.com ([171.71.179.195]) by sj-iport-6.cisco.com with ESMTP; 07 Jun 2009 21:24:04 +0000 Received: from sj-core-5.cisco.com (sj-core-5.cisco.com [171.71.177.238]) by sj-dkim-3.cisco.com (8.12.11/8.12.11) with ESMTP id n57LO4Rk001516; Sun, 7 Jun 2009 14:24:04 -0700 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-5.cisco.com (8.13.8/8.13.8) with ESMTP id n57LO48k014509; Sun, 7 Jun 2009 21:24:04 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Jun 2009 14:24:04 -0700 Received: from [192.168.1.2] ([10.21.74.104]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Jun 2009 14:24:03 -0700 Message-Id: From: Dino Farinacci To: Damian Lezama In-Reply-To: Content-Type: text/plain; charset=WINDOWS-1252; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sun, 7 Jun 2009 14:24:02 -0700 References: X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 07 Jun 2009 21:24:03.0974 (UTC) FILETIME=[484B7A60:01C9E7B6] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=1679; t=1244409844; x=1245273844; c=relaxed/simple; s=sjdkim3002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Reachability=20bits=20and=20PE =20deployment |Sender:=20; bh=CR6okHZABDiivTGEIvtLE62Cli8oiBwxp1dSew4S6M0=; b=iTNNUGR9TQta/gsP4G0UII6OhJceDyrTq458gENjgCHn0zZr9sBCopMYMx DwtOMzqg2EgT/oHPC+MoZX+Wg5+1Vj8W3HHh6mmqOgmqoyu6nqIzVTlsRESw wk3saGpV8l; Authentication-Results: sj-dkim-3; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim3002 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jun 2009 21:24:00 -0000 > I=92m trying to understand how the reachability bits can be controlled = =20 > in an scenario where the xTR=92s reside inside different ISPs for a =20= > multihomed site. As an example if I have a site and 2 providers (A They cannot be controlled. The xTRs need to be in the same =20 administrative domain. As we have said before, the sweet-spot for deploying LISP routers is =20 where they will be least disruptive to the existing network. That is =20 in the CPE router. If you feel LISP functionality can or you want it to be in PE/P =20 routers within an ISP, then you have to use other reachability =20 mechanism. One that is obvious is using BGP. > and B) and a host in my site with EID E sends traffic that goes =20 > through A, the ITR at A should include information about the =20 > reachability to E through provider B, how can it possibly have that =20= > information? You should not use the loc-reach-bits for this application. > I see three possible deployment scenarios explained in the draft, =20 > and there are also combinations. When xTRs are deployed into the =20 > customer site I assume that the site will need mechanisms to keep =20 > its xTRs consistent, but when multiple providers enter the scene I =20 > don=92t get how this could work. Yes, by configuration the xTRs at a site are kept consistent. And you =20= use route-change notifications from the IGP protocol you run at the =20 site to tell xTRs which other xTRs have gone down. Dino > > Thanks, > Damian > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From jmh@joelhalpern.com Sun Jun 7 14:40:33 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C4C353A6B06 for ; Sun, 7 Jun 2009 14:40:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.691 X-Spam-Level: X-Spam-Status: No, score=-3.691 tagged_above=-999 required=5 tests=[AWL=-0.092, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dKdQXkkGjpdE for ; Sun, 7 Jun 2009 14:40:33 -0700 (PDT) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id F0A7B3A6AFB for ; Sun, 7 Jun 2009 14:40:32 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id 01C054303F5; Sun, 7 Jun 2009 14:40:38 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.100] (pool-71-161-52-172.clppva.btas.verizon.net [71.161.52.172]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id 552474303CF; Sun, 7 Jun 2009 14:40:37 -0700 (PDT) Message-ID: <4A2C33D1.2000908@joelhalpern.com> Date: Sun, 07 Jun 2009 17:40:33 -0400 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: Damian Lezama References: In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jun 2009 21:40:33 -0000 If PE deployments catch on, and if the PEs are using IGPs to talk to the site, then one can imagine flooding extra (opaque) information through the IGP to provide xTR synchrony. Alternatively, there are multiple mechanisms involving the xTRs peering over the Internet cloud and exchanging liveness information. It probably would help us to decide either that we are going to focus on the CE deployment, or that we are explicitly going to address more deployment scenarios. Given many of the goals, taking CE deployment as our first goal would seem quite sensible. Yours, Joel Dino Farinacci wrote: >> I’m trying to understand how the reachability bits can be controlled >> in an scenario where the xTR’s reside inside different ISPs for a >> multihomed site. As an example if I have a site and 2 providers (A > > They cannot be controlled. The xTRs need to be in the same > administrative domain. > > As we have said before, the sweet-spot for deploying LISP routers is > where they will be least disruptive to the existing network. That is in > the CPE router. > > If you feel LISP functionality can or you want it to be in PE/P routers > within an ISP, then you have to use other reachability mechanism. One > that is obvious is using BGP. > >> and B) and a host in my site with EID E sends traffic that goes >> through A, the ITR at A should include information about the >> reachability to E through provider B, how can it possibly have that >> information? > > You should not use the loc-reach-bits for this application. > >> I see three possible deployment scenarios explained in the draft, and >> there are also combinations. When xTRs are deployed into the customer >> site I assume that the site will need mechanisms to keep its xTRs >> consistent, but when multiple providers enter the scene I don’t get >> how this could work. > > Yes, by configuration the xTRs at a site are kept consistent. And you > use route-change notifications from the IGP protocol you run at the site > to tell xTRs which other xTRs have gone down. > > Dino > >> >> Thanks, >> Damian >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From dino@cisco.com Sun Jun 7 15:03:13 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DF0DF3A6AF9 for ; Sun, 7 Jun 2009 15:03:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bgPeXTnT5JDi for ; Sun, 7 Jun 2009 15:03:13 -0700 (PDT) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id 08FDE3A68AF for ; Sun, 7 Jun 2009 15:03:13 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,320,1241395200"; d="scan'208";a="173403812" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-2.cisco.com with ESMTP; 07 Jun 2009 22:03:17 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n57M3HVr023933; Sun, 7 Jun 2009 15:03:17 -0700 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n57M3HCR008248; Sun, 7 Jun 2009 22:03:17 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Jun 2009 15:03:17 -0700 Received: from [192.168.1.2] ([10.21.74.104]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sun, 7 Jun 2009 15:03:17 -0700 Message-Id: From: Dino Farinacci To: "Joel M. Halpern" In-Reply-To: <4A2C33D1.2000908@joelhalpern.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sun, 7 Jun 2009 15:03:16 -0700 References: <4A2C33D1.2000908@joelhalpern.com> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 07 Jun 2009 22:03:17.0395 (UTC) FILETIME=[C30B0630:01C9E7BB] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=295; t=1244412197; x=1245276197; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Reachability=20bits=20and=20PE =20deployment |Sender:=20; bh=pXR9sTgNooi4MSctt1ilLy+AznoNQbHWXX8hKYFzHWg=; b=HiMlCDRM9XGYxBuog3c+SQBweBD3Mb9+LYPo1k2t6A0MEWBXeERYwz7aJx FOwHDS2BA/J1QflKfCHUrSk5guLWggSpcynj037bkQfVwIX5hf2pOyvafcWh VwBFcEd/IanlCNIrz4ECD8gc+DHsvJ07Sk0xpKsBUVKOEFEUqB8tM=; Authentication-Results: sj-dkim-1; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Jun 2009 22:03:14 -0000 > It probably would help us to decide either that we are going to > focus on the CE deployment, or that we are explicitly going to > address more deployment scenarios. Given many of the goals, taking > CE deployment as our first goal would seem quite sensible. 100% agree. Dino From dmm@1-4-5.net Mon Jun 8 07:47:35 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CC333A6D3A for ; Mon, 8 Jun 2009 07:47:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.374 X-Spam-Level: X-Spam-Status: No, score=-2.374 tagged_above=-999 required=5 tests=[AWL=0.225, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kimF8nRhom8Q for ; Mon, 8 Jun 2009 07:47:34 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id B431E3A682B for ; Mon, 8 Jun 2009 07:47:34 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n58ElcI2031339; Mon, 8 Jun 2009 07:47:38 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n58Elct1031338; Mon, 8 Jun 2009 07:47:38 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Mon, 8 Jun 2009 07:47:38 -0700 From: David Meyer To: "Joel M. Halpern" Message-ID: <20090608144738.GA31312@1-4-5.net> References: <4A2C33D1.2000908@joelhalpern.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="X1bOJ3K7DJ5YkBrT" Content-Disposition: inline In-Reply-To: <4A2C33D1.2000908@joelhalpern.com> X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 14:47:35 -0000 --X1bOJ3K7DJ5YkBrT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable > It probably would help us to decide either that we are going to focus on = =20 > the CE deployment, or that we are explicitly going to address more =20 > deployment scenarios. Given many of the goals, taking CE deployment as = =20 > our first goal would seem quite sensible. Agreed Joel. Dave --X1bOJ3K7DJ5YkBrT Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkotJIoACgkQORgD1qCZ2Kex7gCgjpxzDoyHl2Qe1MsqcD4oZos3 YeQAoIwCCPyQMlyfvIGK1hzTcVSZzAg2 =Yglo -----END PGP SIGNATURE----- --X1bOJ3K7DJ5YkBrT-- From Fred.L.Templin@boeing.com Mon Jun 8 07:56:21 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6CC9E3A6BD7 for ; Mon, 8 Jun 2009 07:56:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.121 X-Spam-Level: X-Spam-Status: No, score=-6.121 tagged_above=-999 required=5 tests=[AWL=0.478, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oD+pve6axv19 for ; Mon, 8 Jun 2009 07:56:20 -0700 (PDT) Received: from stl-smtpout-01.boeing.com (stl-smtpout-01.boeing.com [130.76.96.56]) by core3.amsl.com (Postfix) with ESMTP id B7D353A6ABA for ; Mon, 8 Jun 2009 07:56:20 -0700 (PDT) Received: from slb-av-01.boeing.com (slb-av-01.boeing.com [129.172.13.4]) by stl-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n58EuF5j012894 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 8 Jun 2009 09:56:15 -0500 (CDT) Received: from slb-av-01.boeing.com (localhost [127.0.0.1]) by slb-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n58Eu0We027707; Mon, 8 Jun 2009 07:56:14 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by slb-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n58Es64t024300; Mon, 8 Jun 2009 07:54:07 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Jun 2009 07:54:06 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Mon, 8 Jun 2009 07:54:04 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A10607A501@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <4A2C33D1.2000908@joelhalpern.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Reachability bits and PE deployment Thread-Index: AcnnuJtHajUoD5ZLQ1y4WJ+41j1o2QAj7/4g References: <4A2C33D1.2000908@joelhalpern.com> From: "Templin, Fred L" To: "Joel M. Halpern" , "Damian Lezama" X-OriginalArrivalTime: 08 Jun 2009 14:54:06.0450 (UTC) FILETIME=[F8B26520:01C9E848] Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 14:56:21 -0000 > It probably would help us to decide either that we are going to focus on > the CE deployment, or that we are explicitly going to address more > deployment scenarios. Given many of the goals, taking CE deployment as > our first goal would seem quite sensible. Hey - RANGER/VET/SEAL already have the CPE deployment scenario well-covered. Those documents already define mechanisms well suited to the CPE scenario (e.g., default router discovery, secure redirection, address autoconfiguration, etc.) so what would be the point of trying to push LISP into that space? Fred fred.l.templin@boeing.com From hartmans@mit.edu Mon Jun 8 11:22:12 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F149F3A6DD9 for ; Mon, 8 Jun 2009 11:22:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.462 X-Spam-Level: X-Spam-Status: No, score=-2.462 tagged_above=-999 required=5 tests=[AWL=-0.197, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NYTwhHCXiIJc for ; Mon, 8 Jun 2009 11:22:12 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 0D4893A67F8 for ; Mon, 8 Jun 2009 11:22:11 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 7C97F4141; Mon, 8 Jun 2009 14:22:08 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 08 Jun 2009 14:22:08 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 18:22:13 -0000 The chairs are seeking comments on the following issue tracking procedure that we'd like to use with the LISP working group. While this is a management issue and so we may not need to get a consensus on it, we definitely do want to seek input. We plan to use the tools.ietf.org issue tracker to track open issues with the LISP specifications to make sure that they are addressed. However, discussion will take place on the mailing list. The issue tracker represents summaries of the issues and their resolution; new content needs to appear on the list. The issue tracker will be managed by document editors, the WG secretary and the WG chairs. These people will be responsible for creating, updating and resolving issues based on the WG discussion. Especially for creating issues, we hope that the document editors will take the initiative. Creating an Issue Whenever a WG participant flags a problem they believe needs to be address or an enhancement they would like to see made in on of our documents in a message, the document editors should open a new issue and reply to the message including the issue number in the subject. WG participants should try to include only one issue per message when opening a message. However when opening issues in the tracker, it may be necessary to split a message into multiple issues. It may be tricky to figure out where the boundary between issues is. It's probably reasonable to include several editorial recommendations in an issue. It may be reasonable to include several text changes to different sections that together effect one consistent technical change as a single issue. However it is desirable to separate technical issues where the WG may have different opinions. It is better to err on the side of separating rather than combining issues. Commenting on Issues It is important that whenever possible a reply to an issue include the issue number in the subject and only address one issue per message. WG participants are strongly encouraged to wait for an issue to be opened and assigned a number before replying to a message opening an issue. Closing Issues If the document editor replies to an issue, and the person opening the issue agrees then the issue can be closed. There need not be text changes; some times discussion reveals that the text is clear or that the desired change is not a good idea. If someone objects to the issue being closed within a reasonable time then it will be reopened. If agreement is not reached between the document editor and person opening the issue or if objections are raised by others, then the WG chairs will judge the consensus of the working group. From jmh@joelhalpern.com Mon Jun 8 11:32:29 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 039233A6A00 for ; Mon, 8 Jun 2009 11:32:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.678 X-Spam-Level: X-Spam-Status: No, score=-3.678 tagged_above=-999 required=5 tests=[AWL=-0.079, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mw8-ELUcy1vC for ; Mon, 8 Jun 2009 11:32:28 -0700 (PDT) Received: from hermes.mail.tigertech.net (hermes.mail.tigertech.net [64.62.209.72]) by core3.amsl.com (Postfix) with ESMTP id 255563A69DD for ; Mon, 8 Jun 2009 11:32:28 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hermes.tigertech.net (Postfix) with ESMTP id C17444304A8; Mon, 8 Jun 2009 11:32:33 -0700 (PDT) X-Virus-Scanned: Debian amavisd-new at hermes.tigertech.net Received: from [10.10.10.100] (pool-71-161-52-172.clppva.btas.verizon.net [71.161.52.172]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by hermes.tigertech.net (Postfix) with ESMTP id B58194304A4; Mon, 8 Jun 2009 11:32:32 -0700 (PDT) Message-ID: <4A2D593C.3010203@joelhalpern.com> Date: Mon, 08 Jun 2009 14:32:28 -0400 From: "Joel M. Halpern" User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: Sam Hartman References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 18:32:29 -0000 Using an issue tracker seems to be a good practice. I have two concerns: 1) In some WGs that use the issue tracker, there is a tendency for the folks who use it day-to-day to assume that everyone knows the issues by number. So there is often less context in the email messages about the issue than there would be without the tracker. This strikes me as a bad idea. 2) If at all possible, we should figure out how to cope well without requiring the issue number in the subject line. Aside from sheer clutter (I want descriptive subjects, even if we have issue numbers), I have found it hard sometimes, as a participant in WGs using the tracker, to know what number I am supposed to put on something. The tools should enable us, not put us in a straight-jacket. Topics drift for good reason, and multiple issues are often related. Yours, Joel Sam Hartman wrote: > > The chairs are seeking comments on the following issue tracking > procedure that we'd like to use with the LISP working group. While > this is a management issue and so we may not need to get a consensus > on it, we definitely do want to seek input. > > We plan to use the tools.ietf.org issue tracker to track open issues > with the LISP specifications to make sure that they are addressed. > However, discussion will take place on the mailing list. The issue > tracker represents summaries of the issues and their resolution; new > content needs to appear on the list. > > The issue tracker will be managed by document editors, the WG > secretary and the WG chairs. These people will be responsible for > creating, updating and resolving issues based on the WG discussion. > Especially for creating issues, we hope that the document editors will > take the initiative. > > Creating an Issue > > Whenever a WG participant flags a problem they believe needs to be > address or an enhancement they would like to see made in on of our > documents in a message, the document editors should open a new issue > and reply to the message including the issue number in the subject. > > > WG participants should try to include only one issue per message when > opening a message. However when opening issues in the tracker, it may > be necessary to split a message into multiple issues. It may be > tricky to figure out where the boundary between issues is. It's > probably reasonable to include several editorial recommendations in an > issue. It may be reasonable to include several text changes to > different sections that together effect one consistent technical > change as a single issue. However it is desirable to separate > technical issues where the WG may have different opinions. It is > better to err on the side of separating rather than combining issues. > > Commenting on Issues > > It is important that whenever possible a reply to an issue include the > issue number in the subject and only address one issue per message. > WG participants are strongly encouraged to wait for an issue to be > opened and assigned a number before replying to a message opening an > issue. > > Closing Issues > > If the document editor replies to an issue, and the person opening the > issue agrees then the issue can be closed. There need not be text > changes; some times discussion reveals that the text is clear or that > the desired change is not a good idea. If someone objects to the > issue being closed within a reasonable time then it will be reopened. > > If agreement is not reached between the document editor and person > opening the issue or if objections are raised by others, then the WG > chairs will judge the consensus of the working group. > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From hartmans@mit.edu Mon Jun 8 11:48:31 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 313163A6E07 for ; Mon, 8 Jun 2009 11:48:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.446 X-Spam-Level: X-Spam-Status: No, score=-2.446 tagged_above=-999 required=5 tests=[AWL=-0.181, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x5ZiSbRcN5PV for ; Mon, 8 Jun 2009 11:48:30 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 799D93A6B5F for ; Mon, 8 Jun 2009 11:48:30 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 03D254141; Mon, 8 Jun 2009 14:48:26 -0400 (EDT) To: Sam Hartman References: From: Sam Hartman Date: Mon, 08 Jun 2009 14:48:25 -0400 In-Reply-To: (Sam Hartman's message of "Mon\, 08 Jun 2009 14\:22\:08 -0400") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 18:48:31 -0000 I forgot to cover a couple of things: Content of Issues The issue tracker should contain a description of the issue, a summary of the discussion and the resolution of the issue. If specific text changes are made in response to an issue they need to be included. Quoting messages to the list to provide the description of the issue and the summary of discussion is encouraged. However it is not important to quote all traffic on the list unless doing so adds clarity. Changes Summaries When Document editors post new versions of their drafts, they should briefly describe the changes in the draft and their motivation. An example might be something like "Changed LISP header (issue 32)". Editorial changes do not need to be explicitly called out. Not all changes need to be linked back to the issue tracker, although more explanation for the change is needed if an issue is not referenced so the WG can tell why the change was made and the level of discussion/consensus. --Sam From dino@cisco.com Mon Jun 8 12:13:33 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60F203A687C for ; Mon, 8 Jun 2009 12:13:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lIwzSVkKOCXf for ; Mon, 8 Jun 2009 12:13:32 -0700 (PDT) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 93A9B3A68D2 for ; Mon, 8 Jun 2009 12:13:32 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,326,1241395200"; d="scan'208";a="168045996" Received: from sj-dkim-4.cisco.com ([171.71.179.196]) by sj-iport-3.cisco.com with ESMTP; 08 Jun 2009 19:13:38 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id n58JDcnb026646; Mon, 8 Jun 2009 12:13:38 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n58JDc8R020530; Mon, 8 Jun 2009 19:13:38 GMT Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Jun 2009 12:13:37 -0700 Received: from [192.168.1.2] ([10.21.74.104]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 8 Jun 2009 12:13:37 -0700 Message-Id: <993CC1D9-6A13-4032-9276-C7DE9C22E907@cisco.com> From: Dino Farinacci To: "Templin, Fred L" In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10607A501@XCH-NW-7V2.nw.nos.boeing.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Mon, 8 Jun 2009 12:13:37 -0700 References: <4A2C33D1.2000908@joelhalpern.com> <39C363776A4E8C4A94691D2BD9D1C9A10607A501@XCH-NW-7V2.nw.nos.boeing.com> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 08 Jun 2009 19:13:37.0695 (UTC) FILETIME=[39E1D2F0:01C9E86D] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=935; t=1244488418; x=1245352418; c=relaxed/simple; s=sjdkim4002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Reachability=20bits=20and=20PE =20deployment |Sender:=20; bh=ROxQ+oge6Vm7BEkePpzM8/lgPhb7t1Hb170rcwDa87k=; b=WJrl6yPAwY/nARz3MyYrpBcCUMT3TDqJ8f32GZeyhq1FcYdeo3Of2fQOnM b2qO9JT3HmM1y/b/8oK3FENB0dsqwS49vSddC/3aaWYxn0hD0SKJTVDEZv2d uGV5L3Ofvf; Authentication-Results: sj-dkim-4; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim4002 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Reachability bits and PE deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 19:13:33 -0000 LISP has always been in the CPE space. There seem to be others pushing it in the PE space. Dino On Jun 8, 2009, at 7:54 AM, Templin, Fred L wrote: >> It probably would help us to decide either that we are going to focus > on >> the CE deployment, or that we are explicitly going to address more >> deployment scenarios. Given many of the goals, taking CE deployment > as >> our first goal would seem quite sensible. > > Hey - RANGER/VET/SEAL already have the CPE deployment scenario > well-covered. Those documents already define mechanisms well > suited to the CPE scenario (e.g., default router discovery, > secure redirection, address autoconfiguration, etc.) so what > would be the point of trying to push LISP into that space? > > Fred > fred.l.templin@boeing.com > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From dmm@1-4-5.net Mon Jun 8 13:25:08 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B27CB3A6AC6 for ; Mon, 8 Jun 2009 13:25:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.419 X-Spam-Level: X-Spam-Status: No, score=-2.419 tagged_above=-999 required=5 tests=[AWL=0.180, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tAmEYD-cpRgM for ; Mon, 8 Jun 2009 13:25:06 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id 235B13A6864 for ; Mon, 8 Jun 2009 13:25:06 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n58KPBEZ006955; Mon, 8 Jun 2009 13:25:11 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n58KPBp6006954; Mon, 8 Jun 2009 13:25:11 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Mon, 8 Jun 2009 13:25:11 -0700 From: David Meyer To: Sam Hartman Message-ID: <20090608202511.GA6791@1-4-5.net> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="PNTmBPCT7hxwcZjr" Content-Disposition: inline In-Reply-To: X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Jun 2009 20:25:08 -0000 --PNTmBPCT7hxwcZjr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jun 08, 2009 at 02:22:08PM -0400, Sam Hartman wrote: >=20 >=20 > The chairs are seeking comments on the following issue tracking > procedure that we'd like to use with the LISP working group. While > this is a management issue and so we may not need to get a consensus > on it, we definitely do want to seek input. >=20 > We plan to use the tools.ietf.org issue tracker to track open issues > with the LISP specifications to make sure that they are addressed. > However, discussion will take place on the mailing list. The issue > tracker represents summaries of the issues and their resolution; new > content needs to appear on the list. >=20 > The issue tracker will be managed by document editors, the WG > secretary and the WG chairs. These people will be responsible for > creating, updating and resolving issues based on the WG discussion. > Especially for creating issues, we hope that the document editors will > take the initiative. >=20 > Creating an Issue >=20 > Whenever a WG participant flags a problem they believe needs to be > address or an enhancement they would like to see made in on of our > documents in a message, the document editors should open a new issue > and reply to the message including the issue number in the subject. >=20 >=20 > WG participants should try to include only one issue per message when > opening a message. However when opening issues in the tracker, it may > be necessary to split a message into multiple issues. It may be > tricky to figure out where the boundary between issues is. It's > probably reasonable to include several editorial recommendations in an > issue. It may be reasonable to include several text changes to > different sections that together effect one consistent technical > change as a single issue. However it is desirable to separate > technical issues where the WG may have different opinions. It is > better to err on the side of separating rather than combining issues. >=20 > Commenting on Issues >=20 > It is important that whenever possible a reply to an issue include the > issue number in the subject and only address one issue per message. > WG participants are strongly encouraged to wait for an issue to be > opened and assigned a number before replying to a message opening an > issue. >=20 > Closing Issues >=20 > If the document editor replies to an issue, and the person opening the > issue agrees then the issue can be closed. There need not be text > changes; some times discussion reveals that the text is clear or that > the desired change is not a good idea. If someone objects to the > issue being closed within a reasonable time then it will be reopened. >=20 > If agreement is not reached between the document editor and person > opening the issue or if objections are raised by others, then the WG > chairs will judge the consensus of the working group. >=20 Seems reasonable. Two issues:=20 (i). Referring to an issue: Content v. Issue Number Frequently there is a non-empty intersection of people who don't read the tracker and but who do read the mailing list.=20 Sometimes this creates problems if folks refer to an issue by number rather than "content" of the issue. That can likely be handled by convention, or at worst, by reference (to the tracker), but I have seen this issue cause confusion. (ii). Creating an issue: DoS attacks This hasn't happened here (obviously) but I have seen it happen. Do you have an idea of how you're going to handle this (other than wait and see what happens)?=20 The concern here is malicious use of the tracker to impede otherwise legitimate progress that the WG may be making. =20 =09 Dave --PNTmBPCT7hxwcZjr Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkotc6cACgkQORgD1qCZ2KeakgCfYOM9RKLPk0u0cTZq3hNFmDne iksAnjTuvUBmC8AvVvScp5iet/JLYqLo =OpK9 -----END PGP SIGNATURE----- --PNTmBPCT7hxwcZjr-- From hartmans@mit.edu Tue Jun 9 06:07:49 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 092A928C19F for ; Tue, 9 Jun 2009 06:07:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.432 X-Spam-Level: X-Spam-Status: No, score=-2.432 tagged_above=-999 required=5 tests=[AWL=-0.167, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QyCLATIHWzyS for ; Tue, 9 Jun 2009 06:07:48 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 12F3A3A6A16 for ; Tue, 9 Jun 2009 06:07:48 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 9B6FA4159; Tue, 9 Jun 2009 09:07:43 -0400 (EDT) To: David Meyer References: <20090608202511.GA6791@1-4-5.net> From: Sam Hartman Date: Tue, 09 Jun 2009 09:07:43 -0400 In-Reply-To: <20090608202511.GA6791@1-4-5.net> (David Meyer's message of "Mon\, 8 Jun 2009 13\:25\:11 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2009 13:07:49 -0000 >>>>> "David" == David Meyer writes: David> (i). Referring to an issue: Content v. Issue Number David> Frequently there is a non-empty intersection David> of people who don't read the tracker and but who do read David> the mailing list. David> Sometimes this creates problems if folks refer David> to an issue by number rather than "content" of the David> issue. That can likely be handled by convention, or at David> worst, by reference (to the tracker), but I have seen this David> issue cause confusion. Yes. I'm thinking of something like Subject [#39] LISP is red not green. Or in running text "The WG discussed red vs green (#39); the consensus of the room was that it didn't matter but that for interoperability, we needed to pick. Green was chosen." David> (ii). Creating an issue: DoS attacks David> This hasn't happened here (obviously) but I David> have seen it happen. Do you have an idea of how you're David> going to handle this (other than wait and see what David> happens)? David> The concern here is malicious use of the David> tracker to impede otherwise legitimate progress that the WG David> may be making. Perhaps my imagination is limited but I cannot think of any new cases where an issue tracker makes things worse. This seems to boil down to how to handle disruptive individuals who are trying to block the WG process. The issue tracker helps us keep track of things. The obligation to respond to issues that are raised exists independent of the issue tracker, as do the tools for dealing with disruptions. The mechanism Eliot suggests doesn't appeal to my style as a chair, although if things got bad enough I'd adopt something similar. I'm certainly committed to making forward progress while the rough consensus of the WG is to do so. From hartmans@mit.edu Tue Jun 9 06:33:16 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 30AEB3A6E25 for ; Tue, 9 Jun 2009 06:33:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.42 X-Spam-Level: X-Spam-Status: No, score=-2.42 tagged_above=-999 required=5 tests=[AWL=-0.155, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H6kIWrV5Yag3 for ; Tue, 9 Jun 2009 06:33:15 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 7F5073A659B for ; Tue, 9 Jun 2009 06:33:15 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 674364141; Tue, 9 Jun 2009 09:33:10 -0400 (EDT) To: lisp@ietf.org Cc: References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> From: Sam Hartman Date: Tue, 09 Jun 2009 09:33:10 -0400 In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> (Fred L. Templin's message of "Thu\, 4 Jun 2009 10\:19\:40 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: Re: [lisp] Path MTU concerns and proposed resolutions [respond by June 13] X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2009 13:33:16 -0000 Fred has made a proposal for changes to the LISP MTU handling procedure. Presumably if the WG were to adopt these changes we'd need to define an RF header bit and a fragmentation report message. So far, no one besides Fred has indicated support for the proposal. In order for the proposal to be adopted we'll need to reach a rough consensus of the WG. The chairs request that anyone wishing to express support for this proposal do so by June 12, 2009. From dmm@1-4-5.net Tue Jun 9 07:15:45 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 265F13A6BC2 for ; Tue, 9 Jun 2009 07:15:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SyuvT2resT0c for ; Tue, 9 Jun 2009 07:15:44 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id 3DCE83A687D for ; Tue, 9 Jun 2009 07:15:44 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n59EFou0022489; Tue, 9 Jun 2009 07:15:50 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n59EFngd022488; Tue, 9 Jun 2009 07:15:49 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Tue, 9 Jun 2009 07:15:49 -0700 From: David Meyer To: Sam Hartman Message-ID: <20090609141549.GA22303@1-4-5.net> References: <20090608202511.GA6791@1-4-5.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="fUYQa+Pmc3FrFX/N" Content-Disposition: inline In-Reply-To: X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2009 14:15:45 -0000 --fUYQa+Pmc3FrFX/N Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment Content-Transfer-Encoding: quoted-printable On Tue, Jun 09, 2009 at 09:07:43AM -0400, Sam Hartman wrote: > >>>>> "David" =3D=3D David Meyer writes: >=20 >=20 > David> (i). Referring to an issue: Content v. Issue Number >=20 > David> Frequently there is a non-empty intersection > David> of people who don't read the tracker and but who do read > David> the mailing list. >=20 > David> Sometimes this creates problems if folks refer > David> to an issue by number rather than "content" of the > David> issue. That can likely be handled by convention, or at > David> worst, by reference (to the tracker), but I have seen this > David> issue cause confusion. >=20 > Yes. > I'm thinking of something like > Subject [#39] LISP is red not green. >=20 > Or in running text "The WG discussed red vs green (#39); the consensus > of the room was that it didn't matter but that for interoperability, > we needed to pick. Green was chosen." That approach has worked in the past (and is the solution I've used in my WGs). > David> (ii). Creating an issue: DoS attacks >=20 > David> This hasn't happened here (obviously) but I > David> have seen it happen. Do you have an idea of how you're > David> going to handle this (other than wait and see what > David> happens)? >=20 > David> The concern here is malicious use of the > David> tracker to impede otherwise legitimate progress that the WG > David> may be making. >=20 >=20 > Perhaps my imagination is limited but I cannot think of any new cases > where an issue tracker makes things worse. This seems to boil down to > how to handle disruptive individuals who are trying to block the WG > process. The issue tracker helps us keep track of things. The > obligation to respond to issues that are raised exists independent of > the issue tracker, as do the tools for dealing with disruptions. Fair enough. The point here is that the tracker provides a mechanism/focal point for people who are so inclined to organize their DoS attacks. In any event, I just wanted to raise the issue because I've seen it happen. =20 > The mechanism Eliot suggests doesn't appeal to my style as a chair, > although if things got bad enough I'd adopt something similar. I'm > certainly committed to making forward progress while the rough > consensus of the WG is to do so. Ok. Let's see how it goes. Perhaps my concern is misplaced (which would be a happy outcome).=20 Dave --fUYQa+Pmc3FrFX/N Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkoubpUACgkQORgD1qCZ2Kd/bwCfR0+eyP2d69AaRverCUfsD8EF rsQAn1dGubaZz54eoaRE/CUyOqAixs/B =E+Mm -----END PGP SIGNATURE----- --fUYQa+Pmc3FrFX/N-- From lear@cisco.com Tue Jun 9 07:41:47 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4C8823A6C43 for ; Tue, 9 Jun 2009 07:41:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.349 X-Spam-Level: X-Spam-Status: No, score=-10.349 tagged_above=-999 required=5 tests=[AWL=0.250, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K-z8zC-A-GMU for ; Tue, 9 Jun 2009 07:41:46 -0700 (PDT) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by core3.amsl.com (Postfix) with ESMTP id 039F23A6842 for ; Tue, 9 Jun 2009 07:41:45 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.41,332,1241395200"; d="scan'208";a="42417794" Received: from ams-dkim-2.cisco.com ([144.254.224.139]) by ams-iport-1.cisco.com with ESMTP; 09 Jun 2009 14:41:40 +0000 Received: from ams-core-1.cisco.com (ams-core-1.cisco.com [144.254.224.150]) by ams-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n59Efeg9019691; Tue, 9 Jun 2009 16:41:40 +0200 Received: from 205-234-wf.tnc2009.rediris.es (dhcp-10-61-109-231.cisco.com [10.61.109.231]) by ams-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n59EfdB4009082; Tue, 9 Jun 2009 14:41:39 GMT Message-ID: <4A2E74A3.8000800@cisco.com> Date: Tue, 09 Jun 2009 16:41:39 +0200 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1pre) Gecko/20090602 Shredder/3.0b3pre MIME-Version: 1.0 To: Sam Hartman References: <20090608202511.GA6791@1-4-5.net> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=946; t=1244558500; x=1245422500; c=relaxed/simple; s=amsdkim2001; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=lear@cisco.com; z=From:=20Eliot=20Lear=20 |Subject:=20Re=3A=20[lisp]=20Issue=20Tracking=20Procedure |Sender:=20; bh=q4uW0wIq04bbTTpRkM/Y6GOOPVTrQhkkjNQY382O9nA=; b=Nz0ri8W4yK0Vq+jQAnmxDIZ2gqVH9aALeLMJTz0lSDTZft4sqYeKGGw/0R cfH4lXAendiaxQI/IvD1hR0uchKymQzB3cchpNmXKo2cev9lOgGt8fhxO77Q U9mc/i76Lz; Authentication-Results: ams-dkim-2; header.From=lear@cisco.com; dkim=pass ( sig from cisco.com/amsdkim2001 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Issue Tracking Procedure X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jun 2009 14:41:47 -0000 Sam, On 6/9/09 3:07 PM, Sam Hartman wrote: > The mechanism Eliot suggests doesn't appeal to my style as a chair, > although if things got bad enough I'd adopt something similar. I'm > certainly committed to making forward progress while the rough > consensus of the WG is to do so. > First, you may not had noticed that I had only addressed my message was to the chairs, precisely because I agree with what you say above. What I wrote to the chairs was that if you got into a situation where there were some particularly driven individuals on particular points, there are mechanisms available to chairs to assist in those situations. One of them is to require a certain number of people to open an issue. However, you only do that when you need to, and you only do it at a late stage in the process, and not an early stage. And of course, whether you do it at all is at the discretion of the chairs. Eliot From menth@informatik.uni-wuerzburg.de Thu Jun 11 17:06:28 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DEE2C3A6D24 for ; Thu, 11 Jun 2009 17:06:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.649 X-Spam-Level: X-Spam-Status: No, score=-1.649 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EPDmDZKuiMXh for ; Thu, 11 Jun 2009 17:06:28 -0700 (PDT) Received: from mailrelay.rz.uni-wuerzburg.de (mailrelay.rz.uni-wuerzburg.de [132.187.3.28]) by core3.amsl.com (Postfix) with ESMTP id C4F6E3A6C49 for ; Thu, 11 Jun 2009 17:06:27 -0700 (PDT) Received: from virusscan.mail (localhost [127.0.0.1]) by mailrelay.mail (Postfix) with ESMTP id 19F62A0781 for ; Fri, 12 Jun 2009 02:06:30 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by virusscan.mail (Postfix) with ESMTP id 0EA69A0780 for ; Fri, 12 Jun 2009 02:06:30 +0200 (CEST) Received: from [192.168.1.2] (e181179093.adsl.alicedsl.de [85.181.179.93]) by mailmaster.uni-wuerzburg.de (Postfix) with ESMTP id D704319906F for ; Fri, 12 Jun 2009 02:06:29 +0200 (CEST) Message-ID: <4A319C04.2000304@informatik.uni-wuerzburg.de> Date: Fri, 12 Jun 2009 02:06:28 +0200 From: Michael Menth Organization: University of Wuerzburg User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: lisp@ietf.org Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at uni-wuerzburg.de Subject: [lisp] rDNS with new "RLOC RR" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: menth@informatik.uni-wuerzburg.de List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2009 00:06:28 -0000 Hi all, reverse DNS with a new RLOC resource record could be used to implement a service providing EID-to-RLOC mappings. Instead, LISP has defined multiple mapping systems. I guess there were reasons for that. Why is rDNS with "RLOC RR" a bad idea? I have found the following presentation looking at similar ideas: http://www.dinof.net/~dino/ietf/lisp2.ppt Scheme 1 of the presentation is essentially what I have described above (apparently an obvious solution ...). Is there an outdated draft related to this document? Page 19 of the document says that the drawback of Scheme 1 is the fact that packets are dropped until the ITR receives the mapping. But that also holds for the current deployment of LISP+ALT. So what are other drawbacks of the DNS-based mapping system that prevented it from being used as the preferred option? Regards, Michael -- Dr. Michael Menth, Assistant Professor University of Wuerzburg, Institute of Computer Science Am Hubland, D-97074 Wuerzburg, Germany, room B206 phone: (+49)-931/31-86644 (new), fax: (+49)-931/8888-6632 mailto:menth@informatik.uni-wuerzburg.de http://www3.informatik.uni-wuerzburg.de/research/ngn From vaf@cisco.com Thu Jun 11 23:07:32 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A2AC03A6AAA for ; Thu, 11 Jun 2009 23:07:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vUiS4+hpadwU for ; Thu, 11 Jun 2009 23:07:31 -0700 (PDT) Received: from sj-iport-3.cisco.com (sj-iport-3.cisco.com [171.71.176.72]) by core3.amsl.com (Postfix) with ESMTP id 804A53A63CB for ; Thu, 11 Jun 2009 23:07:31 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.42,207,1243814400"; d="scan'208";a="169486166" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-3.cisco.com with ESMTP; 12 Jun 2009 06:07:39 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n5C67dOi011941; Thu, 11 Jun 2009 23:07:39 -0700 Received: from vaf-lnx1.cisco.com (vaf-lnx1.cisco.com [171.71.118.48]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n5C67dMw024016; Fri, 12 Jun 2009 06:07:39 GMT Received: from vaf-lnx1.cisco.com (vaf-lnx1.cisco.com [127.0.0.1]) by vaf-lnx1.cisco.com (8.14.3/8.14.3/Debian-4) with ESMTP id n5C642kc005007; Thu, 11 Jun 2009 23:04:02 -0700 Received: (from vaf@localhost) by vaf-lnx1.cisco.com (8.14.3/8.14.3/Submit) id n5C6429U005004; Thu, 11 Jun 2009 23:04:02 -0700 X-Authentication-Warning: vaf-lnx1.cisco.com: vaf set sender to vaf@cisco.com using -f Date: Thu, 11 Jun 2009 23:04:02 -0700 From: Vince Fuller To: Michael Menth Message-ID: <20090612060402.GA3808@vaf-lnx1> References: <4A319C04.2000304@informatik.uni-wuerzburg.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <4A319C04.2000304@informatik.uni-wuerzburg.de> User-Agent: Mutt/1.5.18 (2008-05-17) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2850; t=1244786859; x=1245650859; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=vaf@cisco.com; z=From:=20Vince=20Fuller=20 |Subject:=20Re=3A=20[lisp]=20rDNS=20with=20new=20=22RLOC=20 RR=22 |Sender:=20; bh=9J5Rjo8bzrGUTt+vIT1kgoV3tDE0g1xrOjlFfHoJiCg=; b=SWRn+GOU+urGPCqunIEVxccdC4shJgMJyD8hZuLmrQyXhGWxL0fPKMiFQB WXXSRTVhnMk2FwOTukg5wk9hX9bXTsfolfZmINBSFLyNJYEBeQyFcni1eGka Faa3Gv76mx1Q/RB2pgysh7QNWbN2xu/eZsT5mY/kMK+sKbWJcXySE=; Authentication-Results: sj-dkim-1; header.From=vaf@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] rDNS with new "RLOC RR" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2009 06:07:32 -0000 > reverse DNS with a new RLOC resource record could be used to implement a > service providing EID-to-RLOC mappings. Instead, LISP has defined > multiple mapping systems. I guess there were reasons for that. Why is > rDNS with "RLOC RR" a bad idea? > > I have found the following presentation looking at similar ideas: > http://www.dinof.net/~dino/ietf/lisp2.ppt > Scheme 1 of the presentation is essentially what I have described above > (apparently an obvious solution ...). Is there an outdated draft related > to this document? > > Page 19 of the document says that the drawback of Scheme 1 is the fact > that packets are dropped until the ITR receives the mapping. But that > also holds for the current deployment of LISP+ALT. So what are other > drawbacks of the DNS-based mapping system that prevented it from being > used as the preferred option? The LISP authors considered a DNS-based approach early on in the design of mapping systems. We even had a name for it: LISP variant 2. During informal discussions with members of the Internet operations community, we received a lot of push-back against that idea. If I recall correctly, two of the key concerns were: 1) adding EID-to-RLOC data to the DNS could potentially interfere with its normal role in name-to-address translation (as if the DNS isn't already being used as a kitchen sink for ENUM and other things...) 2) creation of a circular dependency where the addresses of DNS servers might need to be looked up in an EID-to-RLOC mapping database that, in turn, needed to use those DNS servers to resolve them. There are and were fairly obvious ways to avoid both of these problems: - for #1, use only the DNS protocols with a completely separate infrastructure of servers and resolvers for LISP and perhaps even a separate UDP port number - for #2, number the DNS infrastructure used for LISP out of RLOC space, which by definition does not need any EID-to-RLOC lookups I think, though, that the real issue was a more vague and perhaps emotional concern that the DNS infrastructure is already too fragile. If someone wants to write an Internet Draft that specifies how the DNS could be used to manage an EID-to-RLOC database, I suspect that my fellow LISP authors would be very interested in the result. Similarly, if someone wants to design and specify a DHT-based mapping database (which would be catagorized as LISP variant 3), we'd be interested in that, too. Note, though, that by "specify", I mean that there should be sufficient detail that an implementor could build to it. That means figuring out the nasty details that tend to turn something simple, elegant, and obvious into a far more complicated implementation. --Vince From tme@americafree.tv Fri Jun 12 07:07:23 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7F8BD3A6765 for ; Fri, 12 Jun 2009 07:07:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.422 X-Spam-Level: X-Spam-Status: No, score=-2.422 tagged_above=-999 required=5 tests=[AWL=-0.423, BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kury1t5qAu+m for ; Fri, 12 Jun 2009 07:07:18 -0700 (PDT) Received: from mail.americafree.tv (rossini.americafree.tv [63.105.122.34]) by core3.amsl.com (Postfix) with ESMTP id D20263A67E7 for ; Fri, 12 Jun 2009 07:07:17 -0700 (PDT) Received: from [IPv6:::1] (rossini.americafree.tv [63.105.122.34]) by mail.americafree.tv (Postfix) with ESMTP id 79C834007FBE; Fri, 12 Jun 2009 10:07:25 -0400 (EDT) Message-Id: <503D0119-D51D-4150-A554-B9B8A728D28E@americafree.tv> From: Marshall Eubanks To: Vince Fuller In-Reply-To: <20090612060402.GA3808@vaf-lnx1> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Fri, 12 Jun 2009 10:07:25 -0400 References: <4A319C04.2000304@informatik.uni-wuerzburg.de> <20090612060402.GA3808@vaf-lnx1> X-Mailer: Apple Mail (2.935.3) Cc: lisp@ietf.org Subject: Re: [lisp] rDNS with new "RLOC RR" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2009 14:07:23 -0000 On Jun 12, 2009, at 2:04 AM, Vince Fuller wrote: >> reverse DNS with a new RLOC resource record could be used to >> implement a >> service providing EID-to-RLOC mappings. Instead, LISP has defined >> multiple mapping systems. I guess there were reasons for that. Why is >> rDNS with "RLOC RR" a bad idea? >> >> I have found the following presentation looking at similar ideas: >> http://www.dinof.net/~dino/ietf/lisp2.ppt >> Scheme 1 of the presentation is essentially what I have described >> above >> (apparently an obvious solution ...). Is there an outdated draft >> related >> to this document? >> >> Page 19 of the document says that the drawback of Scheme 1 is the >> fact >> that packets are dropped until the ITR receives the mapping. But that >> also holds for the current deployment of LISP+ALT. So what are other >> drawbacks of the DNS-based mapping system that prevented it from >> being >> used as the preferred option? > > The LISP authors considered a DNS-based approach early on in the > design of > mapping systems. We even had a name for it: LISP variant 2. > > During informal discussions with members of the Internet operations > community, we received a lot of push-back against that idea. If I > recall > correctly, two of the key concerns were: > > 1) adding EID-to-RLOC data to the DNS could potentially interfere > with > its normal role in name-to-address translation (as if the DNS > isn't > already being used as a kitchen sink for ENUM and other > things...) > > 2) creation of a circular dependency where the addresses of DNS > servers > might need to be looked up in an EID-to-RLOC mapping database > that, in > turn, needed to use those DNS servers to resolve them. > > There are and were fairly obvious ways to avoid both of these > problems: > > - for #1, use only the DNS protocols with a completely separate > infrastructure of servers and resolvers for LISP and perhaps > even a > separate UDP port number > > - for #2, number the DNS infrastructure used for LISP out of RLOC > space, > which by definition does not need any EID-to-RLOC lookups > > I think, though, that the real issue was a more vague and perhaps > emotional > concern that the DNS infrastructure is already too fragile. > Speaking as a small company person, I suspect that DNS is not the right instrument for this. Just from my experience (so, anecdotal, not synoptic) : - I would just observe that most of the small multi-homed companies I have dealt with use a hosting company for their DNS. If that DNS was doing routing as well, that would probably have to change. That would mean you would have to train / hire someone to do DNS. Companies only have so much bandwidth to think about these sorts of things, and would not appreciate being forced to change the way they did their name service. - In my experience small companies are more tolerant of short DNS outages than short routing outages. (Existing flows are not interrupted by the first, but are by the second.) - In my experience it is common for them not to use DNS at all for mission critical interactions. (This is of course connected with the previous point.) - In my experience DNS TTLs are typically set fairly long, except for planned changes. This means that DNS changes typically take the form - lower the ttl - wait for old ttls to time out - make the change - test - raise the ttl It would scare me if routing was required to undergo the same multi- day cycle to make changes. (Would you buy a router that promised multi-day BGP convergence times ?) - DNS is subject to DOS and DDOS type attacks. These can really hammer a DNS server. I don't think that it would be a good idea if routing was subject to the same types of attacks. Now, I am sure that most of the above could be engineered around, but I do think that such considerations mean that there would be push back from small companies (a logical constituency for LISP IMO) if DNS was part of the soup. Regards Marshall > If someone wants to write an Internet Draft that specifies how the > DNS could > be used to manage an EID-to-RLOC database, I suspect that my fellow > LISP > authors would be very interested in the result. Similarly, if > someone wants > to design and specify a DHT-based mapping database (which would be > catagorized > as LISP variant 3), we'd be interested in that, too. > > Note, though, that by "specify", I mean that there should be > sufficient > detail that an implementor could build to it. That means figuring > out the > nasty details that tend to turn something simple, elegant, and obvious > into a far more complicated implementation. > > --Vince > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From cdl@asgaard.org Fri Jun 12 07:54:58 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AC8CE3A687D for ; Fri, 12 Jun 2009 07:54:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RmrIYGQl8aOX for ; Fri, 12 Jun 2009 07:54:57 -0700 (PDT) Received: from asgaard.org (ratatosk.asgaard.org [204.29.150.73]) by core3.amsl.com (Postfix) with ESMTP id F37A33A6819 for ; Fri, 12 Jun 2009 07:54:56 -0700 (PDT) Received: from fenrir.asgaard.org (fenrir.asgaard.org [204.29.152.154]) by asgaard.org (Postfix) with ESMTP id 6D0A95FC640; Fri, 12 Jun 2009 14:55:03 +0000 (UTC) Message-Id: From: Christopher LILJENSTOLPE To: Marshall Eubanks In-Reply-To: <503D0119-D51D-4150-A554-B9B8A728D28E@americafree.tv> Content-Type: text/plain; charset=UTF-8; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Apple Message framework v935.3) Date: Fri, 12 Jun 2009 07:55:01 -0700 References: <4A319C04.2000304@informatik.uni-wuerzburg.de> <20090612060402.GA3808@vaf-lnx1> <503D0119-D51D-4150-A554-B9B8A728D28E@americafree.tv> X-Pgp-Agent: GPGMail 1.2.0 (v56) X-Mailer: Apple Mail (2.935.3) X-Mailman-Approved-At: Fri, 12 Jun 2009 08:39:28 -0700 Cc: lisp@ietf.org Subject: Re: [lisp] rDNS with new "RLOC RR" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2009 14:54:58 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Greetings Marshall, On 12/06/2009, at 7:07 AM, Marshall Eubanks wrote: > > On Jun 12, 2009, at 2:04 AM, Vince Fuller wrote: > >>> reverse DNS with a new RLOC resource record could be used to =20 >>> implement a >>> service providing EID-to-RLOC mappings. Instead, LISP has defined >>> multiple mapping systems. I guess there were reasons for that. Why =20= >>> is >>> rDNS with "RLOC RR" a bad idea? >>> >>> I have found the following presentation looking at similar ideas: >>> http://www.dinof.net/~dino/ietf/lisp2.ppt >>> Scheme 1 of the presentation is essentially what I have described =20= >>> above >>> (apparently an obvious solution ...). Is there an outdated draft =20 >>> related >>> to this document? >>> >>> Page 19 of the document says that the drawback of Scheme 1 is the =20= >>> fact >>> that packets are dropped until the ITR receives the mapping. But =20 >>> that >>> also holds for the current deployment of LISP+ALT. So what are other >>> drawbacks of the DNS-based mapping system that prevented it from =20 >>> being >>> used as the preferred option? >> >> The LISP authors considered a DNS-based approach early on in the =20 >> design of >> mapping systems. We even had a name for it: LISP variant 2. >> >> [clip] >> There are and were fairly obvious ways to avoid both of these =20 >> problems: >> >> - for #1, use only the DNS protocols with a completely separate >> infrastructure of servers and resolvers for LISP and perhaps =20 >> even a >> separate UDP port number >> >> - for #2, number the DNS infrastructure used for LISP out of RLOC =20= >> space, >> which by definition does not need any EID-to-RLOC lookups >> >> I think, though, that the real issue was a more vague and perhaps =20 >> emotional >> concern that the DNS infrastructure is already too fragile. >> > > Speaking as a small company person, I suspect that DNS is not the =20 > right instrument for this. > Just from my experience (so, anecdotal, not synoptic) : > > - I would just observe that most of the small multi-homed companies =20= > I have dealt with use a hosting company > for their DNS. If that DNS was doing routing as well, that would =20 > probably have to change. That would mean you > would have to train / hire someone to do DNS. > > Companies only have so much bandwidth to think about these sorts of =20= > things, and would not appreciate being forced to change the way they =20= > did their name service. > > - In my experience small companies are more tolerant of short DNS =20 > outages than short > routing outages. (Existing flows are not interrupted by the first, =20 > but are by the second.) > - In my experience it is common for them not to use DNS at all for =20 > mission critical interactions. (This is of course connected with the =20= > previous point.) > - In my experience DNS TTLs are typically set fairly long, except =20 > for planned changes. This means that DNS changes typically take the =20= > form > > - lower the ttl > - wait for old ttls to time out > - make the change > - test > - raise the ttl > > It would scare me if routing was required to undergo the same multi-=20= > day cycle to make changes. (Would > you buy a router that promised multi-day BGP convergence times ?) > > - DNS is subject to DOS and DDOS type attacks. These can really =20 > hammer a DNS server. I don't think that > it would be a good idea if routing was subject to the same types of =20= > attacks. > > Now, I am sure that most of the above could be engineered around, =20 > but I do think that such considerations mean that there would be =20 > push back from small companies (a logical constituency for LISP IMO) =20= > if DNS was part of the soup. > > Regards > Marshall > >> [clip] >> --Vince > Remember that using DNS the protocol does not mean using the existing =20= DNS infrastructure. The protocol is interesting, however, I agree =20 that the existing implementation can be a bit fragile (but that =20 actually makes it more interesting, because, given it's fragile =20 nature, it still works surprisingly well in the macro sense). If =20 someone were to pursue variant 2, I would suspect that you would want =20= a different infrastructure to support it. Chris - --- =E6=9D=8E=E6=9F=AF=E7=9D=BF Check my PGP key here: https://www.asgaard.org/~cdl/cdl.asc -----BEGIN PGP SIGNATURE----- iQEcBAEBAgAGBQJKMmxGAAoJEGmx2Mt/+Iw/AAwH/ilJmIAzHIxSVJ0UC3SNbvsG 3OEiCkIxeRHHcsd4fnBH1nGGhKMUv3/9MhKKMAE6e3VFnE5lQUhQjT64fy3oYloj aEXNeM9E2q/4Ln3nZnDlLF1xWZnWwTtv4XMcwkJIHTALATdIwWRH8RQ8Sn3M1DQZ tiHJk5/GG0l93ybhf9H/TdPD4xmKjGpg4y4MpzbCHrEApzT96X68zPbgKs2wAKlx HIPSOrZNoqs6WpM19kDKGrZF2Q5rEi/xe6qXV5lCM2XcXzuuJ1iU0YFMVDkwIlnA VfDVSko2OhXtKGrtaS19da1RzvncckeP2AVMQrUFqHQVIRofzPGSG4oATyclJtA=3D =3Dll4c -----END PGP SIGNATURE----- From Fred.L.Templin@boeing.com Fri Jun 12 15:38:03 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 82E9D3A680C for ; Fri, 12 Jun 2009 15:38:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.086 X-Spam-Level: X-Spam-Status: No, score=-6.086 tagged_above=-999 required=5 tests=[AWL=0.513, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k3NDqh9LdJgY for ; Fri, 12 Jun 2009 15:38:02 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id 7B9663A63EC for ; Fri, 12 Jun 2009 15:38:02 -0700 (PDT) Received: from stl-av-01.boeing.com (stl-av-01.boeing.com [192.76.190.6]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n5CMc98U004998 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 12 Jun 2009 15:38:10 -0700 (PDT) Received: from stl-av-01.boeing.com (localhost [127.0.0.1]) by stl-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n5CMc9nv016138; Fri, 12 Jun 2009 17:38:09 -0500 (CDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by stl-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n5CMc7jw016112; Fri, 12 Jun 2009 17:38:09 -0500 (CDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Fri, 12 Jun 2009 15:38:08 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Date: Fri, 12 Jun 2009 15:38:06 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A1060B5087@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Path MTU concerns and proposed resolutions [respond byJune 13] Thread-Index: AcnpBt7iTBlPcB4tQ5iFAVz1MOym1gCpnbgQ References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be><39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com><39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com><39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com><39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> From: "Templin, Fred L" To: "Sam Hartman" , X-OriginalArrivalTime: 12 Jun 2009 22:38:08.0259 (UTC) FILETIME=[755C4D30:01C9EBAE] Subject: Re: [lisp] Path MTU concerns and proposed resolutions [respond byJune 13] X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Jun 2009 22:38:03 -0000 Hi Sam, I have come up with some slight adjustments wrt the LISP path MTU procedures that I posted on 6/4/09. In particular, I am no longer asking for a Report Fragmentation (RF) bit, as each and every LISP packet will be used as an implicit probe and the ETR will generate a Fragmentation Report if any fragmentation occurred. Instead, I am asking for a 'D' bit in the LISP header which is copied from the DF bit in the inner IP packet. I am also backing off on the claim that the ITR need not maintain path MTU state in the general case. This needs a bit more investigation, but it seems the most robust approach might be to have the ITR cache the path MTU and drop too-big packets instead of admitting them into the tunnel. Fred fred.l.templin@boeing.com > -----Original Message----- > From: Sam Hartman [mailto:hartmans-ietf@mit.edu] > Sent: Tuesday, June 09, 2009 6:33 AM > To: lisp@ietf.org > Subject: Re: [lisp] Path MTU concerns and proposed resolutions [respond byJune 13] >=20 > Fred has made a proposal for changes to the LISP MTU handling > procedure. Presumably if the WG were to adopt these changes we'd need > to define an RF header bit and a fragmentation report message. >=20 > So far, no one besides Fred has indicated support for the proposal. > In order for the proposal to be adopted we'll need to reach a rough > consensus of the WG. The chairs request that anyone wishing to > express support for this proposal do so by June 12, 2009. > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From dino@cisco.com Sat Jun 13 11:00:04 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0CFB13A686D for ; Sat, 13 Jun 2009 11:00:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.545 X-Spam-Level: X-Spam-Status: No, score=-6.545 tagged_above=-999 required=5 tests=[AWL=0.054, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DUD+iyfwnjQG for ; Sat, 13 Jun 2009 11:00:02 -0700 (PDT) Received: from sj-iport-2.cisco.com (sj-iport-2.cisco.com [171.71.176.71]) by core3.amsl.com (Postfix) with ESMTP id A0E5D3A6C27 for ; Sat, 13 Jun 2009 11:00:02 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.42,215,1243814400"; d="scan'208";a="175986448" Received: from sj-dkim-1.cisco.com ([171.71.179.21]) by sj-iport-2.cisco.com with ESMTP; 13 Jun 2009 18:00:11 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-1.cisco.com (8.12.11/8.12.11) with ESMTP id n5DI0BHq026696; Sat, 13 Jun 2009 11:00:11 -0700 Received: from xbh-sjc-211.amer.cisco.com (xbh-sjc-211.cisco.com [171.70.151.144]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n5DI0B6J013778; Sat, 13 Jun 2009 18:00:11 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 13 Jun 2009 11:00:11 -0700 Received: from [192.168.0.147] ([10.21.89.17]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 13 Jun 2009 11:00:10 -0700 Message-Id: <0E950197-BF17-4353-8552-8EDE6C6C6893@cisco.com> From: Dino Farinacci To: Luigi Iannone In-Reply-To: <83590D4C-94FC-4DEC-B549-5A64133D8904@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sat, 13 Jun 2009 11:00:10 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> <134F397D-60D8-4AB3-9EFF-15B54A46C84B@cisco.com> <83590D4C-94FC-4DEC-B549-5A64133D8904@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 13 Jun 2009 18:00:10.0526 (UTC) FILETIME=[CB11F3E0:01C9EC50] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=8524; t=1244916011; x=1245780011; c=relaxed/simple; s=sjdkim1004; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=gks7tu7QxCJaviKA9/twGElB1O/JJyGkjWwbSa5gwNY=; b=Efpf5cfnopfA0bSChm/ugfg+zBXyAH4Al8KENDpAco3Ln75NU9QUkJSMdE 6x+HZygZImN52vISxbIucbbedzNCOv7IlwRHGJnUL73MU+PKhKHtfy2x0ZzL 5fVbF8rGZO6SRke2OIWXtIv9srrpzbl356yMku0nXaLF3U9QlC0Uk=; Authentication-Results: sj-dkim-1; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim1004 verified; ); Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jun 2009 18:00:04 -0000 Sorry for the long delay. See my responses inline. > On Jun 3, 2009, at 18:44 , Dino Farinacci wrote: > >>> With one bit of state, in the event of even a single packet loss >>> there is ambiguity about what the bit means. (If the sender sets >>> the bit on only one packet, and that packet gets lost, the bit has >>> gotten >> >> I said 1 bit. And didn't not mean that 1 packet is sent. The bit >> can stay set in a small packet train of packets. It works like this: >> >> (1) Site A has a mapping database change. >> (2) Site A is currently talking to Site B. >> (3) Site A wants to update B's map-cache for itself. >> (4) Site A sets the SMR bit in a sequence of packets to Site B. > > As far as I understand, at this point you need to keep track of the > fact that B has asked for new mapping in order to reset the SMR bit. You know that when B sends a Map-Request with the nonce from the data packet with the SMR-bit. That was our intent. > With versioning you do not need this. You just put a new version > number, B will understand that has to send a map-request and no > further actions are needed from A. Understand. But I don't want to carry version numbers is each and every packet. Since mappings down change at data packet delivery granularity, you don't need that information in the data packet. I was thinking of overloading the nonce field as you suggested in your presentation. But if we are going to use the nonces for inline data- path liveness, then we can't update a mapping while in nonce echoing mode. But let me think about it. > Let me add something. What happens in the presence of Map-resolver > that cache the entries? (as proposed in the lisp-ms-01 draft) It was suggested. We don't cache in the map-resolver in the code. If you cache anywhere on the ALT you have a even harder problem updating mappings. We already have challenges just updating the ITRs, let alone everywhere else. So I say, let's leave that alone for now and focus on updating the ITRs. > If you include the version number in the Map-Request, when the Map- > resolver receive the packet it will easily understand that it needs > as well to refresh its cache because a new mapping is available, > thus it will forward the packet to the xTR. I'm thinking that the version number and a nonce serve the same purpose. The only difference the version number can show sequence of updates. I'm not sure that is needed but all the ITRs care about is the latest version. And a changing nonce can tell you that. Because when it stops changing, the ETR has conveyed the latest information. Think about that for a bit. > How to do the same with the SMR bit? The SMR-bit says use the nonce as a version number. We don't say that explicitly in the spec, but that's how it is used. > I do not think that keeping trace of all the Map-resolvers that > cached the mapping is a feasible way. Oh agree with you there. >> For other map-cache entries where the LRU is small, it *does not >> set the SMR-bit* for those sites. >> (5) The packet with the SMR-bit set has nonce value . >> (6) Site B sees the SMR-bit when decapsulating data and tells >> control plane to send a Map-Request with the same nonce value >> . >> (7) Site A returns a Map-Reply with nonce value . >> (8) Site B is updated. >> >> A 3 packet exchange where the first packet traversal piggybacks on >> data. The Site A ITR can control the number of places it receives >> Map-Requests by deciding which map-cache entries to SMR. > > If you really want you can do the same with versioning. > >> >> >>> lost. Conversely, if the sender sets the bit on a sequence of >>> packets, then the receiver has to figure out whether the >>> successive indications are for the same change or different changes. >> >> Understand. But a new nonce value from Site A can tell Site B to >> rerequest. > > What if we call this new nonce a version number? ;-) Ha ha, we think alike. ;-) But as you can see from above the nonce is already a version number. ;-) >> That is only going to happen if the changes are on the order of >> milliseconds. That is, within the trip-delay of the 3 packet >> exchange. >> >>> One could, of course, treat the single bit as a two-state wrapping >>> counter. That would address the problem above. However, if there >>> are two successive changes, that would look like no change at all. >> >> Interesting. So you say the bit is a counter with 2 values. >> >>> This is the question the versioning document seems to be looking >>> at in trying to decide how big the sequence number needs to be. >>> But I find the reasoning misleading. Either there is active >>> communication, or there isn't. If there isn't, then timeouts on >>> the mapping itself will prompt new >> >> Assuming time-outs are short. >> >> The default we have in the implementation right now is 24 hours. > > Just for clarity. With versioning there is no change in the timeouts. Same with the SMR mechanism. If you use SMRs you don't need clock- sweep. Clock-sweep is there as an operational technique and SMRs/map- versioning are protocol techniques. We wanted to crawl before we walk and hence the reason for specing clock-seep. Plus, it works well for DNS updates when your expectations are that the updates will occur tomorrow and not today. >>> queries. And, the rate that matters is how often changes take >>> place. As long as the product of the rate-of-change and the >>> supported idle-time for simplified detection, is less than the >>> wrap, then we are fine. > > This is exactly what we were trying to argue in the draft. We think the rate of updates is going to be small. If in fact, the rate of change would be really high as in a mobile-node moving. Like maybe when 2 mobile-nodes are moving around quickly and talking to each other, when they move, they could clear their cache. That would cause things to get fixed (i.e. each would get the new locators). So in the stationary cases, we think the rate wouldn't be nearly as high. Dino >>> SO I suspect that if we want to go with a sequence number type >>> behavior, we probably need more than 1 bit, but fewer than 16 (I >>> end up at 8 myself.) >> >> Good assertion and conclusion Joel. Agree. >> >>> However, I think the question of how many bits to use is secondary >>> to the question of which conceptual mechanism we want to have. >> >> Right. > > Agree > > Luigi > > >> >> >>> (Side note: A flapping xTR should be rapidly taken out of >>> service. O&M problem, not a base protocol issue.) >> >> Right, agree. >> >> Dino >> >>> >>> >>> Yours, >>> Joel >>> >>> Dino Farinacci wrote: >>>>> - each mapping has a version number and any change in the >>>>> mapping causes >>>>> a change of version number. The ITR places in the header of data >>>>> encapsulated packets the version number of its mapping and the >>>>> version >>>>> number of the mapping of the destination prefix that it knows. By >>>>> looking at the version number found in the received data >>>>> encapsulated >>>>> packets, it can check whether the mapping has changed and send a >>>>> Map-Request if a change has been detected to retrieve the new >>>>> mapping >>>> I plan to reply to Luigi's email but have a quick reply for this >>>> point. >>>> If the version numbers are used to simply identify a change and >>>> prompt a Map-Request, then why can't a single bit convey the same >>>> thing? >>>> The fact that version numbers exist would convey that multiple >>>> mapping versions are allowed to exist. I am pretty sure that is >>>> not a good idea and creates other complexities. With a single >>>> bit, you indicate that the latest state is what is important to >>>> cache rather than dealing with intermediate states. >>>> Dino >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > From dino@cisco.com Sat Jun 13 11:10:21 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 228213A68A7 for ; Sat, 13 Jun 2009 11:10:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.551 X-Spam-Level: X-Spam-Status: No, score=-6.551 tagged_above=-999 required=5 tests=[AWL=0.048, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6zT16PkfaFhq for ; Sat, 13 Jun 2009 11:10:14 -0700 (PDT) Received: from sj-iport-6.cisco.com (sj-iport-6.cisco.com [171.71.176.117]) by core3.amsl.com (Postfix) with ESMTP id E2FFF3A68B9 for ; Sat, 13 Jun 2009 11:10:14 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.42,215,1243814400"; d="scan'208";a="323095659" Received: from sj-dkim-4.cisco.com ([171.71.179.196]) by sj-iport-6.cisco.com with ESMTP; 13 Jun 2009 18:10:23 +0000 Received: from sj-core-2.cisco.com (sj-core-2.cisco.com [171.71.177.254]) by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id n5DIANVX000488; Sat, 13 Jun 2009 11:10:23 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-2.cisco.com (8.13.8/8.13.8) with ESMTP id n5DIANx7000789; Sat, 13 Jun 2009 18:10:23 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 13 Jun 2009 11:10:23 -0700 Received: from [192.168.0.147] ([10.21.89.17]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Sat, 13 Jun 2009 11:10:23 -0700 Message-Id: <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> From: Dino Farinacci To: Luigi Iannone In-Reply-To: <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sat, 13 Jun 2009 11:10:22 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 13 Jun 2009 18:10:23.0327 (UTC) FILETIME=[3853F6F0:01C9EC52] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2523; t=1244916623; x=1245780623; c=relaxed/simple; s=sjdkim4002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=eo0HpXEXxu3qJy1ewllisBMxz29F2lg5LLDNi9e0+fM=; b=eT829trmzsZ5+KRZYyqz1YFiYQBJcVV/hteOkEeChu016yRsGHZHZ2Y1fT ssgpuCAsyTo9aUsoqhQikzCteffF8esxpXagfrlKxtKzKubAT3BlTS6Ej2OH 1xPD3xqnNI; Authentication-Results: sj-dkim-4; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim4002 verified; ); Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jun 2009 18:10:21 -0000 > Because a single bit doesn't tell you if the change is new compared > to the actual mapping you have or is a duplicate of you last update. A single bit tells you the same thing as comparing version numbers. Plus the ITR doesn't have to store yet another piece of state to know what the last version number was the ETR told it. The nonce will already be stored in the ITR so you can leverage that. > Assume you receive a packet from X with the SMR bit set, you send a > Map-Request, then you receive another packet from X with the SMR bit > set, is this another change? or just the same like the first packet? It is another change if the nonce is different. > You can answer that you have rate limitation and you will ignore SMR > bit from X for a certain time. Unless this time is very large (which > is not a good in the case your Map-request is lost) you have no > guarantee of not receiving a packet with the SMR bit set actually > referring to the same mapping. > > With versioning this ambiguity does not exist anymore. There is a 3-way handshake. Here is the scenario again. I am an ETR, you are in ITR. I want to update you. This is how it goes: (1) I set SMR-bit with nonce value 17. (2) You decap data-packet and send me a Map-Request with nonce 17. (3) I send a Map-Reply with nonce 17. If the Map-Request is not answered, you retransmit at the rate-limit interval. That covers the case when either the Map-Request or Map- Reply gets lost. If during this time, I had *another* mapping change. I would send you data packets with nonce value 12 (notice a different value so it doesn't matter if the value is larger or smaller than the previous nonce) and the SMR-bit set. You can send me a Map-Request now with nonce value 12 and when I reply you know which one it is for (12 and not 17). If I get a Map-Request for 17 and know that I want to update you with 12, I still send you a Map-Reply with nonce value 12. You get it and see that you have been requesting 17 but the reply has 12 in it. At this point you could be confused (not Luigi, he is never confused, but the ITR is confused), but since the lastest SMR packet had 12, you *know* the Map-Reply for 12 is the latest. If packets are sent out of sequence, the Map-Reply is always dominate in all this. The last Map-Reply you get is always the latest. Now we can keep the header at 8 bytes and still have versioning. What do you think? Dino From hartmans@mit.edu Mon Jun 15 07:03:20 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD0343A6CE5 for ; Mon, 15 Jun 2009 07:03:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.379 X-Spam-Level: X-Spam-Status: No, score=-2.379 tagged_above=-999 required=5 tests=[AWL=-0.114, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s3rE8air84aR for ; Mon, 15 Jun 2009 07:03:20 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 0E8CA3A6CCC for ; Mon, 15 Jun 2009 07:03:19 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 2AB844142; Mon, 15 Jun 2009 10:03:05 -0400 (EDT) To: Dino Farinacci References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> From: Sam Hartman Date: Mon, 15 Jun 2009 10:03:05 -0400 In-Reply-To: <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> (Dino Farinacci's message of "Sat\, 13 Jun 2009 11\:10\:22 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jun 2009 14:03:20 -0000 >>>>> "Dino" == Dino Farinacci writes: >> Assume you receive a packet from X with the SMR bit set, you >> send a Map-Request, then you receive another packet from X with >> the SMR bit set, is this another change? or just the same like >> the first packet? Dino> It is another change if the nonce is different. Speaking as an individual, not the chair, can we get the spec to say this clearly? From dino@cisco.com Mon Jun 15 08:13:14 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B53F528C145 for ; Mon, 15 Jun 2009 08:13:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.556 X-Spam-Level: X-Spam-Status: No, score=-6.556 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ad7IqnEFd5z1 for ; Mon, 15 Jun 2009 08:13:13 -0700 (PDT) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id C4DBA3A6CF6 for ; Mon, 15 Jun 2009 08:13:13 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.42,222,1243814400"; d="scan'208";a="200170832" Received: from sj-dkim-4.cisco.com ([171.71.179.196]) by sj-iport-1.cisco.com with ESMTP; 15 Jun 2009 15:13:22 +0000 Received: from sj-core-1.cisco.com (sj-core-1.cisco.com [171.71.177.237]) by sj-dkim-4.cisco.com (8.12.11/8.12.11) with ESMTP id n5FFDMgX021702; Mon, 15 Jun 2009 08:13:22 -0700 Received: from xbh-sjc-231.amer.cisco.com (xbh-sjc-231.cisco.com [128.107.191.100]) by sj-core-1.cisco.com (8.13.8/8.13.8) with ESMTP id n5FFDMpJ016122; Mon, 15 Jun 2009 15:13:22 GMT Received: from xfe-sjc-212.amer.cisco.com ([171.70.151.187]) by xbh-sjc-231.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 15 Jun 2009 08:13:22 -0700 Received: from [192.168.1.2] ([10.21.150.134]) by xfe-sjc-212.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 15 Jun 2009 08:13:22 -0700 Message-Id: From: Dino Farinacci To: Sam Hartman In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Mon, 15 Jun 2009 08:13:21 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 15 Jun 2009 15:13:22.0070 (UTC) FILETIME=[D2644360:01C9EDCB] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=124; t=1245078802; x=1245942802; c=relaxed/simple; s=sjdkim4002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=os7Uh2HK4FKglr+8/4kephTzGss5txEQV29Khn13LYU=; b=UhV42mZVUayWtUnoLsNYLybUz9qq2BJzjV+i2I5eiJ8KEQkplvK5Cf5/fG CQ3v+nhlFr66pxFhU5Q+hO1OlIL7o9OQ/sqQVzXhLzuhcW9si1la34eIwBp8 GO4WVs9HQj; Authentication-Results: sj-dkim-4; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim4002 verified; ); Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jun 2009 15:13:14 -0000 > Speaking as an individual, not the chair, can we get the spec to say > this clearly? Yes, but end of week. Dino From bortzmeyer@nic.fr Tue Jun 16 02:02:18 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DFEB73A6D4F for ; Tue, 16 Jun 2009 02:02:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.199 X-Spam-Level: X-Spam-Status: No, score=-6.199 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8dpZNrCJnvT for ; Tue, 16 Jun 2009 02:02:15 -0700 (PDT) Received: from mx2.nic.fr (mx2.nic.fr [192.134.4.11]) by core3.amsl.com (Postfix) with ESMTP id DB1A03A6D54 for ; Tue, 16 Jun 2009 02:02:14 -0700 (PDT) Received: from mx2.nic.fr (localhost [127.0.0.1]) by mx2.nic.fr (Postfix) with SMTP id 672FC1C00E4 for ; Tue, 16 Jun 2009 10:56:36 +0200 (CEST) Received: from relay2.nic.fr (relay2.nic.fr [192.134.4.163]) by mx2.nic.fr (Postfix) with ESMTP id 632A01C002B for ; Tue, 16 Jun 2009 10:56:36 +0200 (CEST) Received: from bortzmeyer.nic.fr (batilda.nic.fr [192.134.4.69]) by relay2.nic.fr (Postfix) with ESMTP id 575387B0036 for ; Tue, 16 Jun 2009 10:56:36 +0200 (CEST) Date: Tue, 16 Jun 2009 10:56:36 +0200 From: Stephane Bortzmeyer To: lisp@ietf.org Message-ID: <20090616085636.GA21847@nic.fr> References: <20090507184501.714233A70CC@core3.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20090507184501.714233A70CC@core3.amsl.com> X-Operating-System: Debian GNU/Linux 5.0.1 X-Kernel: Linux 2.6.26-2-686 i686 Organization: NIC France X-URL: http://www.nic.fr/ User-Agent: Mutt/1.5.18 (2008-05-17) Subject: Re: [lisp] I-D Action:draft-farinacci-lisp-lig-01.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2009 09:02:19 -0000 On Thu, May 07, 2009 at 11:45:01AM -0700, Internet-Drafts@ietf.org wrote a message of 49 lines which said: > Title : LISP Internet Groper (LIG) > The public domain implementation of lig is available at > sourceforge.net. Where on Sourceforge? Querying 'lig' on the site yields three non-related projects. Querying 'lisp' is not realistic :-) From dmm@1-4-5.net Tue Jun 16 06:54:12 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B0D0F3A6966 for ; Tue, 16 Jun 2009 06:54:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.47 X-Spam-Level: X-Spam-Status: No, score=-2.47 tagged_above=-999 required=5 tests=[AWL=0.129, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vZDUkREbJ5sq for ; Tue, 16 Jun 2009 06:54:11 -0700 (PDT) Received: from m106.maoz.com (m106.maoz.com [205.167.76.9]) by core3.amsl.com (Postfix) with ESMTP id D01AB3A68A0 for ; Tue, 16 Jun 2009 06:54:11 -0700 (PDT) Received: from m106.maoz.com (localhost [127.0.0.1]) by m106.maoz.com (8.14.3/8.14.3/Debian-4) with ESMTP id n5GDrPgW027603; Tue, 16 Jun 2009 06:53:25 -0700 Received: (from dmm@localhost) by m106.maoz.com (8.14.3/8.14.3/Submit) id n5GDrPhL027602; Tue, 16 Jun 2009 06:53:25 -0700 X-Authentication-Warning: m106.maoz.com: dmm set sender to dmm@1-4-5.net using -f Date: Tue, 16 Jun 2009 06:53:25 -0700 From: David Meyer To: Stephane Bortzmeyer Message-ID: <20090616135325.GA27580@1-4-5.net> References: <20090507184501.714233A70CC@core3.amsl.com> <20090616085636.GA21847@nic.fr> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="0F1p//8PRICkK4MW" Content-Disposition: inline In-Reply-To: <20090616085636.GA21847@nic.fr> X-public-key: http://www.1-4-5.net/~dmm/public-key.asc X-gpg-fingerprint: 2409 8B50 B389 A307 BA5C 2A16 3918 03D6 A099 D8A7 X-philosophy: "I just had to let it go. John Lennon" User-Agent: Mutt/1.5.18 (2008-05-17) Cc: lisp@ietf.org Subject: Re: [lisp] I-D Action:draft-farinacci-lisp-lig-01.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Jun 2009 13:54:12 -0000 --0F1p//8PRICkK4MW Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jun 16, 2009 at 10:56:36AM +0200, Stephane Bortzmeyer wrote: > On Thu, May 07, 2009 at 11:45:01AM -0700, > Internet-Drafts@ietf.org wrote=20 > a message of 49 lines which said: >=20 > > Title : LISP Internet Groper (LIG) >=20 > > The public domain implementation of lig is available at > > sourceforge.net. >=20 > Where on Sourceforge? Querying 'lig' on the site yields three > non-related projects. Querying 'lisp' is not realistic :-) My bad. I haven't gotten it done yet. I can provide my code to you if you want it...Let me know. Dave --0F1p//8PRICkK4MW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAko3o9UACgkQORgD1qCZ2Ke/bwCfeQ2TX5Y2HnnOsWTfRYMESnkZ 4BIAn3yfq/NbGcpr2+s7TmoGXjuO31/f =eUSq -----END PGP SIGNATURE----- --0F1p//8PRICkK4MW-- From christian.vogt@ericsson.com Wed Jun 17 14:15:08 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2F7B63A68BB for ; Wed, 17 Jun 2009 14:15:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.421 X-Spam-Level: X-Spam-Status: No, score=-6.421 tagged_above=-999 required=5 tests=[AWL=0.178, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id APJTuom18dp0 for ; Wed, 17 Jun 2009 14:15:07 -0700 (PDT) Received: from imr1.ericy.com (imr1.ericy.com [198.24.6.9]) by core3.amsl.com (Postfix) with ESMTP id 49FD43A6808 for ; Wed, 17 Jun 2009 14:15:07 -0700 (PDT) Received: from eusrcmw751.eamcs.ericsson.se (eusrcmw751.exu.ericsson.se [138.85.77.51]) by imr1.ericy.com (8.13.1/8.13.1) with ESMTP id n5HLFD3w030469; Wed, 17 Jun 2009 16:15:17 -0500 Received: from eusrcmw750.eamcs.ericsson.se ([138.85.77.50]) by eusrcmw751.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 17 Jun 2009 16:15:03 -0500 Received: from [155.53.234.47] ([155.53.234.47]) by eusrcmw750.eamcs.ericsson.se with Microsoft SMTPSVC(6.0.3790.1830); Wed, 17 Jun 2009 16:15:03 -0500 Message-Id: From: Christian Vogt To: Marshall Eubanks In-Reply-To: <503D0119-D51D-4150-A554-B9B8A728D28E@americafree.tv> Content-Type: multipart/signed; boundary=Apple-Mail-1-678132608; micalg=sha1; protocol="application/pkcs7-signature" Mime-Version: 1.0 (Apple Message framework v935.3) Date: Wed, 17 Jun 2009 14:15:02 -0700 References: <4A319C04.2000304@informatik.uni-wuerzburg.de> <20090612060402.GA3808@vaf-lnx1> <503D0119-D51D-4150-A554-B9B8A728D28E@americafree.tv> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 17 Jun 2009 21:15:03.0606 (UTC) FILETIME=[AE575D60:01C9EF90] Cc: lisp@ietf.org Subject: Re: [lisp] rDNS with new "RLOC RR" X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Jun 2009 21:15:08 -0000 --Apple-Mail-1-678132608 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Marshall - New dependencies for routing, training of administrative personnel, security -- all these are indeed important issues to take into account when designing a mapping system. Nonetheless, I don't see why a DNS-based mapping system would be more susceptible to those issues than any other type of mapping system -- in particular if a separate DNS infrastructure with low TTLs was used. - Christian On Jun 12, 2009, Marshall Eubanks wrote: > Speaking as a small company person, I suspect that DNS is not the > right > instrument for this. Just from my experience (so, anecdotal, not > synoptic) : > > - I would just observe that most of the small multi-homed companies I > have dealt with use a hosting company for their DNS. If that DNS was > doing routing as well, that would probably have to change. That > would mean you would have to train / hire someone to do DNS. > > Companies only have so much bandwidth to think about these sorts of > things, and would not appreciate being forced to change the way they > did their name service. > > - In my experience small companies are more tolerant of short DNS > outages than short routing outages. (Existing flows are not > interrupted by the first, but are by the second.) - In my experience > it is common for them not to use DNS at all for mission critical > interactions. (This is of course connected with the previous point.) > - In my experience DNS TTLs are typically set fairly long, except > for planned changes. This means that DNS changes typically take the > form > > - lower the ttl > - wait for old ttls to time out > - make the change > - test > - raise the ttl > > It would scare me if routing was required to undergo the same > multi-day cycle to make changes. (Would you buy a router that > promised > multi-day BGP convergence times ?) > > - DNS is subject to DOS and DDOS type attacks. These can really > hammer a > DNS server. I don't think that it would be a good idea if routing > was subject to the same types of attacks. > > Now, I am sure that most of the above could be engineered around, > but I > do think that such considerations mean that there would be push back > from small companies (a logical constituency for LISP IMO) if DNS was > part of the soup. > > Regards Marshall --Apple-Mail-1-678132608 Content-Disposition: attachment; filename=smime.p7s Content-Type: application/pkcs7-signature; name=smime.p7s Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIM8DCCBDIw ggMaoAMCAQICEAfnb+QKJYbrlz+OaXsA6lEwDQYJKoZIhvcNAQEFBQAwOTERMA8GA1UECgwIRXJp Y3Nzb24xJDAiBgNVBAMMG0VyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EwMTAeFw0wNzA5MTMxMTI5 MTRaFw0xMDA5MTMxMTI5MTBaMGoxETAPBgNVBAoMCEVyaWNzc29uMRcwFQYDVQQDDA5DaHJpc3Rp YW4gVm9ndDEQMA4GA1UEBRMHZWNocnZvZzEqMCgGCSqGSIb3DQEJARYbY2hyaXN0aWFuLnZvZ3RA ZXJpY3Nzb24uY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCVGNN5yyhnvz5VWwGDcmey bI9H/DGF0LQmxS+L3gJ9gJIAQ2NPhF16dsWnlpCwS+VsKwMRfh3BsYGY88Hlx/Yvo6NfqE6evobv prxbgKiFP7j1c7Ntke/6SRamUVPFnWrFuaOuXTwU7GUAd/uOoCRNs/nq1hdQRC684gX/kAfBYwID AQABo4IBhzCCAYMwgcAGA1UdHwSBuDCBtTCBsqCBr6CBrIY3aHR0cDovL2NybC50cnVzdC50ZWxp YS5jb20vRXJpY3Nzb25OTEluZGl2aWR1YWxDQTAxLmNybIZxbGRhcDovL2xkYXAudHJ1c3QudGVs aWEuY29tL2NuPUVyaWNzc29uJTIwTkwlMjBJbmRpdmlkdWFsJTIwQ0EwMSxvPUVyaWNzc29uP2Nl cnRpZmljYXRlcmV2b2NhdGlvbmxpc3Q7YmluYXJ5P2Jhc2UwJgYDVR0RBB8wHYEbY2hyaXN0aWFu LnZvZ3RAZXJpY3Nzb24uY29tMEYGA1UdIAQ/MD0wOwYGKoVwawEBMDEwLwYIKwYBBQUHAgEWI2h0 dHA6Ly93d3cuZXJpY3Nzb24uY29tL2xlZ2FsLnNodG1sMB0GA1UdDgQWBBQ2hgtYCoOVEiitjMNu mLE8wGuILzAfBgNVHSMEGDAWgBSWJ8O43qVfXUQ+OVLlRbF2X2MwmzAOBgNVHQ8BAf8EBAMCBaAw DQYJKoZIhvcNAQEFBQADggEBAKYJznyxAs6fzHgXDHa00mqyU/+ykFi9HvBv9MSmD2M1X+bifCd6 /jVVrGZWfMfPSV/AbqQjXVQfyHU1R0EqtgEFLyfNVmEGI9lXkkQb5cXNwaJYVj/+ozy+oSu1ZzZA j0GM6NVvhCwGapHoNDPDWe25UdvmOFxxVo6UMq3TWPcSUMq4s3vHLe5n7tgNCdcVUMeqTrAe9cKw TGy7+eJK48rbBcBtKxq2sTY/4H5H6prEKaVlwGW96PydY0IVu4QGVhUT/ONCVByl5xLImDa0tEaX npUj0Y0ys4DneQ3Bxf6DEMuB5+BiSkBk8FmEaSaj2xA/ShtYuaKIO6e9JjpvGb0wggRFMIIDLaAD AgECAhATyer/3iatqdykyiOBg0fjMA0GCSqGSIb3DQEBBQUAMEQxGjAYBgNVBAoMEVRlbGlhU29u ZXJhIEdyb3VwMSYwJAYDVQQDDB1UZWxpYVNvbmVyYSBQdWJsaWMgUm9vdCBDQSB2MTAeFw0wNjEw MDYxMDAwNTNaFw0xNjEwMDIwNTA0MTdaMDkxETAPBgNVBAoMCEVyaWNzc29uMSQwIgYDVQQDDBtF cmljc3NvbiBOTCBJbmRpdmlkdWFsIENBMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2EHfkNR7rh8Q8jRhZRD8wsbjzxTuVtscq/p6glZzSeEGBXtRwAqmr6jS8FBiKiBMh79ay537m /SwXO3UKUR45f3YIIp9DjThSd+p2xhG3x4yyc9gczlr8JfOEnPhcdPSKw1P0mUlhUn4ak7t009/Y e/W6x3UZHTwVIAWILIhSq4hyNE4z+RvOtvB9uwQ86lKcxi0mFoLev7acLjh+ZXHzXx1jHAmF0ZaG 79CpbvJcRuWplqgJ6qx+hAjsmCU0Wx07GkyGTh8vUMP9Hlz7oyk+7VOccUiNknXHias1GwM9qBUU Oj8e/xsnaTP0ZfqmKBj3Grh1C9WknlSWagxanCBdAgMBAAGjggE8MIIBODASBgNVHRMBAf8ECDAG AQH/AgEAMEYGA1UdIAQ/MD0wOwYHKoVwIwIBATAwMC4GCCsGAQUFBwIBFiJodHRwczovL3JlcG9z aXRvcnkudHJ1c3QudGVsaWEuY29tMIGJBgNVHR8EgYEwfzB9oHugeYZ3bGRhcDovL2xkYXAudHJ1 c3QudGVsaWEuY29tL2NuPVRlbGlhU29uZXJhJTIwUHVibGljJTIwUm9vdCUyMENBJTIwdjEsbz1U ZWxpYVNvbmVyYSUyMEdyb3VwP2F1dGhvcml0eXJldm9jYXRpb25saXN0P2Jhc2UwDgYDVR0PAQH/ BAQDAgEGMB0GA1UdDgQWBBSWJ8O43qVfXUQ+OVLlRbF2X2MwmzAfBgNVHSMEGDAWgBRF2/CPuBpi oagjG2OIOKPb4Bpi8TANBgkqhkiG9w0BAQUFAAOCAQEAdgBKKkM/jN0WvWpZKZ/2J8IVyL+rT44V L0rjbNNDYXdE/V4ZSFN2uuQmgf1Ckqp2shNLe0NEKt6/sfxit4p/5opPIvzytv6vB7rc2BUs8+ja c7aaNiRuwBCjiT1Wnnm454OOZurzQu0SH81PbBtiwUf4XsEvLOnRRZ+9MO/ecVMCQVmeuzsyCl6y FVbx0zmKW1gPjBEigF8BYZ1Tjazk1pVcKzFIuB24j1qTpPsUG4HoQhIu5rt3F7GlNV6t5DF7ojbg u1SqKG/JhTvaPUU/nZYqw9rkV8Dabwrt27reisobtPp78tolxio3ZcZVk7HQ8rpV2M/jmAjGfZRV kczCDzCCBG0wggNVoAMCAQICEQCcsIwEmsuXInhjYrYbhlo9MA0GCSqGSIb3DQEBBQUAMDoxGTAX BgNVBAoTEFJTQSBTZWN1cml0eSBJbmMxHTAbBgNVBAsTFFJTQSBTZWN1cml0eSAyMDQ4IFYzMB4X DTA2MTAzMTIwNDIyN1oXDTE2MTEwMTE1NDIyNVowRDEaMBgGA1UECgwRVGVsaWFTb25lcmEgR3Jv dXAxJjAkBgNVBAMMHVRlbGlhU29uZXJhIFB1YmxpYyBSb290IENBIHYxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAyk8QA2qQgKt5qZV+EeIDbflmXuUChp2lREEsmO5SAiheQ7lXVjzC xw484cOSMw3fOtGWcf9Fa4Rgdw5j+EgyFgiqNj8b2OTXJHQVj1qf09rmkHTgMIKh6TdKXtV+/43p efVrFmFyhoP/NVrYe92Sv4HhOxs/T749S1OjeGISzIKKMSpwkvmYweYnFgIPkHdUKUIReOh9Ym6e i7AVg6eejD6YPBeV+suzBlXCmC3Zyzj7POLsUVvarNZAaKc0AY+rOUslYfAPo+ZYgwY4IV2KcP/q WhhHahz3khWMWSniWrZoxCi2JcXGVkSn+N+ir0APYwYTBJsrTDWxonEdZkR+rQIDAQABo4IBYjCC AV4wHwYDVR0jBBgwFoAUB8NRMKSq6UWuNST6/yQsM9CxnYwwHQYDVR0OBBYEFEXb8I+4GmKhqCMb Y4g4o9vgGmLxMBIGA1UdEwEB/wQIMAYBAf8CAQQwgYUGA1UdIAR+MHwwPQYJKoZIhvcNBQYBMDAw LgYIKwYBBQUHAgEWImh0dHBzOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYS5jb20wOwYHKoVwIwIB ATAwMC4GCCsGAQUFBwIBFiJodHRwczovL3JlcG9zaXRvcnkudHJ1c3QudGVsaWEuY29tMHAGA1Ud HwRpMGcwZaBjoGGGX2h0dHA6Ly93d3cucnNhc2VjdXJpdHkuY29tL3Byb2R1Y3RzL2tlb24vcmVw b3NpdG9yeS9jZXJ0aWZpY2F0ZV9zdGF0dXMvUlNBX1NlY3VyaXR5XzIwNDhfdjMuQ1JMMA4GA1Ud DwEB/wQEAwIBBjANBgkqhkiG9w0BAQUFAAOCAQEABF6aLNgpyJu//O9srUqxB1mYL4TlBJFJtuT1 n/15FpKONU2i/byEtUugHVgoTalpp2Ikuxn2iIgzPbNQ+iu4YnVgQzpuOmzXTN2cITMgwn5AyUoH idMPu2Jo7wobu4Fqg2QrG7WeYANYsQk3Q57mQeuyRkjxluq+93KK2gz/HYjqYkKLjLzOmyrkzwR/ 9aaC3HLFMbCoK0NtyQvS1gkW/HGB5GY1xR9SuOE7CJeS53tqE9CSN6cHQNr+ozuKfzix57T/p6Y8 D23nTD1GZA2ApHdy0sY/HNyU8bQPEpTwrSBxNYYeucYoYNSUSJYkqYa6q/ZG38B3XlcT3TiORrQ2 DzGCAhIwggIOAgEBME0wOTERMA8GA1UECgwIRXJpY3Nzb24xJDAiBgNVBAMMG0VyaWNzc29uIE5M IEluZGl2aWR1YWwgQ0EwMQIQB+dv5AolhuuXP45pewDqUTAJBgUrDgMCGgUAoIIBGzAYBgkqhkiG 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wOTA2MTcyMTE1MDVaMCMGCSqGSIb3 DQEJBDEWBBRtzz1qiuFB1wCuU8zn9p2HgykUPDBcBgkrBgEEAYI3EAQxTzBNMDkxETAPBgNVBAoM CEVyaWNzc29uMSQwIgYDVQQDDBtFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBMDECEAfnb+QKJYbr lz+OaXsA6lEwXgYLKoZIhvcNAQkQAgsxT6BNMDkxETAPBgNVBAoMCEVyaWNzc29uMSQwIgYDVQQD DBtFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBMDECEAfnb+QKJYbrlz+OaXsA6lEwDQYJKoZIhvcN AQEBBQAEgYBLDpPKFCgv/Xgyad3YmgF+5Tda0BmgDANpCdREAVx+b9FE1gdiojLobAtR/Q/70miN k62UgpYgF6IJGQ7zoU3fLdUSEltg7icYWb8KlrNrFl9A5mWsAVwxlSBprA4iPvV9+G4ZnwL3UfTD s6qfA15c5d+ga/iwg0WviKNMyrOB7AAAAAAAAA== --Apple-Mail-1-678132608-- From luigi@net.t-labs.tu-berlin.de Sat Jun 20 07:36:44 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BDD2A3A6D24 for ; Sat, 20 Jun 2009 07:36:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nBhpfw3fW76k for ; Sat, 20 Jun 2009 07:36:43 -0700 (PDT) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 84E163A6B5D for ; Sat, 20 Jun 2009 07:36:42 -0700 (PDT) Received: from dyn106.net.t-labs.tu-berlin.de (dyn106.net.t-labs.tu-berlin.de [130.149.220.106]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 47618700DBB2; Sat, 20 Jun 2009 16:36:53 +0200 (CEST) Message-Id: From: Luigi Iannone To: Dino Farinacci In-Reply-To: <0E950197-BF17-4353-8552-8EDE6C6C6893@cisco.com> Content-Type: multipart/alternative; boundary=Apple-Mail-44-913439794 Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sat, 20 Jun 2009 16:36:51 +0200 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <4A26A3C3.8090308@joelhalpern.com> <134F397D-60D8-4AB3-9EFF-15B54A46C84B@cisco.com> <83590D4C-94FC-4DEC-B549-5A64133D8904@net.t-labs.tu-berlin.de> <0E950197-BF17-4353-8552-8EDE6C6C6893@cisco.com> X-Mailer: Apple Mail (2.935.3) Cc: lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jun 2009 14:36:44 -0000 --Apple-Mail-44-913439794 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Hi All, my comments are inline. On Jun 13, 2009, at 20:00 , Dino Farinacci wrote: > Sorry for the long delay. See my responses inline. > >> On Jun 3, 2009, at 18:44 , Dino Farinacci wrote: >> >>>> With one bit of state, in the event of even a single packet loss >>>> there is ambiguity about what the bit means. (If the sender sets >>>> the bit on only one packet, and that packet gets lost, the bit >>>> has gotten >>> >>> I said 1 bit. And didn't not mean that 1 packet is sent. The bit >>> can stay set in a small packet train of packets. It works like >>> this: >>> >>> (1) Site A has a mapping database change. >>> (2) Site A is currently talking to Site B. >>> (3) Site A wants to update B's map-cache for itself. >>> (4) Site A sets the SMR bit in a sequence of packets to Site B. >> >> As far as I understand, at this point you need to keep track of the >> fact that B has asked for new mapping in order to reset the SMR bit. > > You know that when B sends a Map-Request with the nonce from the > data packet with the SMR-bit. That was our intent. > How things will go if the Map-Reply to B get dropped somewhere? Compared to versioning, with your solution you have one additional interaction between the control plane and the data plane. SMR bit is something that you set in the data plane in order to be part of the LISP header. Then, the control plane waits for the Map- Request from B, once it got that it has to reset the SMR bit in the data plane. Isn't it the case? With versioning you just update the data plane in order to put the new version in the LISP header and that's all. >> With versioning you do not need this. You just put a new version >> number, B will understand that has to send a map-request and no >> further actions are needed from A. > > Understand. But I don't want to carry version numbers is each and > every packet. Since mappings down change at data packet delivery > granularity, you don't need that information in the data packet. > > I was thinking of overloading the nonce field as you suggested in > your presentation. But if we are going to use the nonces for inline > data-path liveness, then we can't update a mapping while in nonce > echoing mode. But let me think about it. May be I was not clear, sorry. Our intention is not to enlarge the LISP header but rather to overload part of it. Actually, we were thinking about the reach-bits, not the nonce. Let me try to explain why by describing how we implemented it in OpenLISP: Assuming I am an OpenLISP ETR, my data plane receives a LISP packet that has to be decapsulated and carries a set a reach-bits that do not match what I have in the cache. For security reasons, in OpenLISP, the data plane reach-bits are not updated, but through the mapping sockets the control plane is informed that for a specific mapping a new set of reach-bits have been received (the mapping and the new reach-bits are sent along with the message). Now, as you suggested in previous discussions, the OpenLISP control plane sends a Map-Request in order to verify the information received from the data plane. Hopefully, the OpenLISP ETR will receive a Map-Reply containing reach- bits, and you can have three cases: a) Reach-bits from the Map-Reply match reach-bits received in the LISP packet (this is the good case). b) Reach-bits from the Map-Reply are unchanged from what was in the cache but do not match the reach-bits received in the LISP packet. (you cannot exclude this case). c) Reach-bits from the Map-Reply are different from the reach-bits that I have in the cache and are different from the reach-bits received in the LISP packet (again you cannot exclude this case). In all of the three cases: a), b) and c) OpenLISP trusts the Mapping system because of some form of authentication used (e.g. like for the actual implementation of the mapping server), thus the cache is updated with the reach-bits of the Map-Reply (this looks like the most reasonable thing to do). In all of the three cases OpenLISP does not care of which specific bit has changed, which means that reach-bits have a loose meaning. When an ETR receives a no matching reach-bit set it does not matter which bit has actually changed, the ETR queries the mapping system and trust what it gets. Following this reasoning, instead of using reach-bits, you put version number which just tells the ETR "look, something has changed you need to query the mapping system". Whether the versioning has changed from 3456 to 3457, or from 69 to 70, it does not matter for the ETR. It just needs to query the mapping system. Having that said, in the draft it is explained the benefits introduced by putting in the LISP header two version numbers, the one of the mapping used to select the source RLOC and the one of the mapping used to select the destination RLOC. Sorry, I know this is quite a long explanation, but I hope that it helps in clarifying the discussion. > >> Let me add something. What happens in the presence of Map-resolver >> that cache the entries? (as proposed in the lisp-ms-01 draft) > > It was suggested. We don't cache in the map-resolver in the code. If > you cache anywhere on the ALT you have a even harder problem > updating mappings. We already have challenges just updating the > ITRs, let alone everywhere else. So I say, let's leave that alone > for now and focus on updating the ITRs. Right. But with versioning caching is possible (but only if the version number is included in the Map-Request). Further, as I explained in the presentation in the last IETF, versioning helps in case of asymmetric traffic flows, where traffic from A to B uses a pair of xTRs that are totally different from the xTRs used for the traffic from B to A. [snip] > >>> That is only going to happen if the changes are on the order of >>> milliseconds. That is, within the trip-delay of the 3 packet >>> exchange. >>> >>>> One could, of course, treat the single bit as a two-state >>>> wrapping counter. That would address the problem above. >>>> However, if there are two successive changes, that would look >>>> like no change at all. >>> >>> Interesting. So you say the bit is a counter with 2 values. >>> >>>> This is the question the versioning document seems to be looking >>>> at in trying to decide how big the sequence number needs to be. >>>> But I find the reasoning misleading. Either there is active >>>> communication, or there isn't. If there isn't, then timeouts on >>>> the mapping itself will prompt new >>> >>> Assuming time-outs are short. >>> >>> The default we have in the implementation right now is 24 hours. >> >> Just for clarity. With versioning there is no change in the timeouts. > > Same with the SMR mechanism. If you use SMRs you don't need clock- > sweep. Clock-sweep is there as an operational technique and SMRs/map- > versioning are protocol techniques. > You still need clock-sweep for reach-bit when you want to compact them. Right? Anyway, I have nothing against the clock-sweep. It can be still useful. [snip] Luigi --Apple-Mail-44-913439794 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi All,

my = comments are inline.


On Jun = 13, 2009, at 20:00 , Dino Farinacci wrote:

Sorry = for the long delay. See my responses inline.

On Jun 3, 2009, at 18:44 , Dino Farinacci = wrote:

With one bit of state, in the = event of even a single packet loss there is ambiguity about what the bit = means.  (If the sender sets the bit on only one packet, and that = packet gets lost, the bit has = gotten

I said 1 bit. And didn't not = mean that 1 packet is sent. The bit can stay set in a small packet train = of  packets. It works like = this:

(1) Site A has a mapping = database change.
(2) Site A is currently talking = to Site B.
(3) Site A wants to update B's = map-cache for itself.
(4) Site A sets the SMR bit in a = sequence of packets to Site B.

As far as I = understand, at this point you need to keep track of the fact that B has = asked for new mapping in order to reset the SMR = bit.

You know that when B sends a Map-Request with = the nonce from the data packet with the SMR-bit. That was our = intent.


How things will go = if the Map-Reply to B get dropped = somewhere?

Compared to versioning, with your = solution you have one additional interaction between the control plane = and the data plane.

SMR bit is something that = you set in the data plane in order to be part of the LISP header. Then, = the control plane waits for the Map-Request from B, once it got that it = has to reset the SMR bit in the data plane. Isn't it the = case?

With versioning you just update the data = plane in order to put the new version in the LISP header and that's = all. 


With versioning you do not = need this. You just put a new version number, B will understand that has = to send a map-request and no further actions are needed from = A.

Understand. But I don't want to carry version = numbers is each and every packet. Since mappings down change at data = packet delivery granularity, you don't need that information in the data = packet.

I was thinking of overloading the nonce field as you = suggested in your presentation. But if we are going to use the nonces = for inline data-path liveness, then we can't update a mapping while in = nonce echoing mode. But let me think about = it.

May be I was not clear, = sorry. Our intention is not to enlarge the LISP header but rather to = overload part of it. Actually, we were thinking about the reach-bits, = not the nonce.

Let me try to explain why by = describing how we implemented it in = OpenLISP:

Assuming I am an OpenLISP ETR, my = data plane receives a LISP packet that has to be decapsulated and = carries a set a reach-bits that do not match what I have in the = cache. 

For security reasons, in OpenLISP, = the data plane reach-bits are not updated, but through the mapping = sockets the control plane is informed that for a specific mapping a new = set of reach-bits have been received (the mapping and the new reach-bits = are sent along with the message).

Now, as you = suggested in previous discussions, the OpenLISP control plane sends a = Map-Request in order to verify the information received from the data = plane.

Hopefully, the OpenLISP ETR will receive = a Map-Reply containing reach-bits, and you can have three = cases:

a) Reach-bits from the Map-Reply match = reach-bits received in the LISP packet (this is the good = case).
b) Reach-bits from the Map-Reply are unchanged from = what was in the cache but do not match the reach-bits received in the = LISP packet. (you cannot exclude this case).
c) Reach-bits = from the Map-Reply are different from the reach-bits that I have in the = cache and are different from the reach-bits received in the LISP packet = (again you cannot exclude this case).

In all of = the three cases: a), b) and c) OpenLISP trusts the Mapping system = because of some form of authentication used (e.g. like for the actual = implementation of the mapping server), thus the cache is updated with = the reach-bits of the Map-Reply (this looks like the most reasonable = thing to do). 

In all of the three cases = OpenLISP does not care of which specific bit has changed, which means = that reach-bits have a loose meaning. When an ETR receives a no matching = reach-bit set it does not matter which bit has actually changed, the ETR = queries the mapping system and trust what it = gets.

Following this reasoning, instead of = using reach-bits, you put version number which just tells the ETR "look, = something has changed you need to query the mapping system". Whether the = versioning has changed from 3456 to 3457, or from 69 to 70, it does not = matter for the ETR. It just needs to query the mapping = system.

Having that said, in the draft it is = explained the benefits introduced by putting in the LISP header two = version numbers, the one of the mapping used to select the source RLOC = and the one of the mapping used to select the destination = RLOC.


Sorry, I know this is = quite a long explanation, but I hope that it helps in clarifying the = discussion. 




Let me add something. = What happens in the presence of Map-resolver that cache the entries? (as = proposed in the lisp-ms-01 draft)

It was suggested. = We don't cache in the map-resolver in the code. If you cache anywhere on = the ALT you have a even harder problem updating mappings. We already = have challenges just updating the ITRs, let alone everywhere else. So I = say, let's leave that alone for now and focus on updating the = ITRs.

Right. 
But= with versioning caching is possible (but only if the version number is = included in the Map-Request). 
Further, as I explained in = the presentation in the last IETF, versioning helps in case of = asymmetric traffic flows, where traffic from A to B uses a pair of xTRs = that are totally different from the xTRs used for the traffic from B to = A.


[snip]

That is only going to happen if the changes are on the = order of milliseconds. That is, within the trip-delay of the 3 packet = exchange.

One = could, of course, treat the single bit as a two-state wrapping counter. =  That would address the problem above.  However, if there are = two successive changes, that would look like no change at = all.

Interesting. So you say the bit = is a counter with 2 values.

This = is the question the versioning document seems to be looking at in trying = to decide how big the sequence number needs to be.  But I find the = reasoning misleading.  Either there is active communication, or = there isn't.  If there isn't, then timeouts on the mapping itself = will prompt new

Assuming time-outs are = short.

The default we have in the = implementation right now is 24 = hours.

Just for = clarity. With versioning there is no change in the = timeouts.

Same with the SMR mechanism. If you use = SMRs you don't need clock-sweep. Clock-sweep is there as an operational = technique and SMRs/map-versioning are protocol = techniques.


You still need = clock-sweep for reach-bit when you want to compact them. = Right?

Anyway, I have nothing against the = clock-sweep. It can be still = useful.

[snip]


Luigi
= --Apple-Mail-44-913439794-- From luigi@net.t-labs.tu-berlin.de Sat Jun 20 08:03:17 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B8C3C3A6C73 for ; Sat, 20 Jun 2009 08:03:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CuPCkg7SfGSp for ; Sat, 20 Jun 2009 08:03:16 -0700 (PDT) Received: from mail.net.t-labs.tu-berlin.de (mail.net.t-labs.tu-berlin.de [130.149.220.252]) by core3.amsl.com (Postfix) with ESMTP id 1E0DD3A6B53 for ; Sat, 20 Jun 2009 08:03:16 -0700 (PDT) Received: from dyn106.net.t-labs.tu-berlin.de (dyn106.net.t-labs.tu-berlin.de [130.149.220.106]) by mail.net.t-labs.tu-berlin.de (Postfix) with ESMTP id 86FEA700DBB2; Sat, 20 Jun 2009 17:03:29 +0200 (CEST) Message-Id: <4C623B66-475D-453B-A1F4-F9AA508CDD24@net.t-labs.tu-berlin.de> From: Luigi Iannone To: Dino Farinacci In-Reply-To: <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> Content-Type: multipart/alternative; boundary=Apple-Mail-45-915036727 Mime-Version: 1.0 (Apple Message framework v935.3) Date: Sat, 20 Jun 2009 17:03:28 +0200 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> X-Mailer: Apple Mail (2.935.3) Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Jun 2009 15:03:17 -0000 --Apple-Mail-45-915036727 Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit On Jun 13, 2009, at 20:10 , Dino Farinacci wrote: >> Because a single bit doesn't tell you if the change is new compared >> to the actual mapping you have or is a duplicate of you last update. > > A single bit tells you the same thing as comparing version numbers. Disagree. A version number can give you the information of when you are up to date. One single bit cannot convey the same amount of information unless you consider it as a 1-bit counter as suggested by Joel (even if then you can have wrap-around issues). But this is not the case for the SMR bit. > Plus the ITR doesn't have to store yet another piece of state to > know what the last version number was the ETR told it. > > The nonce will already be stored in the ITR so you can leverage that. > As I explained in a previous mail, our idea is to overload some part of the LISP header, not to extend it to more than 8 bytes, thus we are not adding any state here. >> Assume you receive a packet from X with the SMR bit set, you send a >> Map-Request, then you receive another packet from X with the SMR >> bit set, is this another change? or just the same like the first >> packet? > > It is another change if the nonce is different. > >> You can answer that you have rate limitation and you will ignore >> SMR bit from X for a certain time. Unless this time is very large >> (which is not a good in the case your Map-request is lost) you have >> no guarantee of not receiving a packet with the SMR bit set >> actually referring to the same mapping. >> >> With versioning this ambiguity does not exist anymore. > > There is a 3-way handshake. Here is the scenario again. I am an ETR, > you are in ITR. I want to update you. This is how it goes: > > (1) I set SMR-bit with nonce value 17. > (2) You decap data-packet and send me a Map-Request with nonce 17. Since I am decapsulating I assume I am the ETR and you the ITR ;-) > (3) I send a Map-Reply with nonce 17. > > If the Map-Request is not answered, you retransmit at the rate-limit > interval. That covers the case when either the Map-Request or Map- > Reply gets lost. > Correct me if I am wrong: when you (ITR) receive my (ETR) Map-Request, you reset the SMR-bit, while I will keep sending (rate-limited) Map- Request until I receive a Map-Reply. Is that right? > If during this time, I had *another* mapping change. I would send > you data packets with nonce value 12 (notice a different value so it > doesn't matter if the value is larger or smaller than the previous > nonce) and the SMR-bit set. You can send me a Map-Request now with > nonce value 12 and when I reply you know which one it is for (12 and > not 17). > > If I get a Map-Request for 17 and know that I want to update you > with 12, I still send you a Map-Reply with nonce value 12. You get > it and see that you have been requesting 17 but the reply has 12 in > it. > > At this point you could be confused (not Luigi, he is never > confused, but the ITR is confused), but since the lastest SMR packet > had 12, you *know* the Map-Reply for 12 is the latest. > > If packets are sent out of sequence, the Map-Reply is always > dominate in all this. The last Map-Reply you get is always the latest. > What will the ETR (Luigi, which sometimes gets confused ;-)) do if it receives a packet with a different nonce but no SMR bit set? > Now we can keep the header at 8 bytes and still have versioning. > What do you think? > Yes, but let me push things a bit .. ;-) What about splitting the nonce_version number in two parts as suggested in our draft? This is very helpful in case of unidirectional traffic. Cheers Luigi > Dino > > --Apple-Mail-45-915036727 Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable
On Jun 13, 2009, = at 20:10 , Dino Farinacci wrote:

Because a single bit = doesn't tell you if the change is new compared to the actual mapping you = have or is a duplicate of you last update.

A single = bit tells you the same thing as comparing version = numbers.

Disagree. A version = number can give you the information of when you are up to date. One = single bit cannot convey the same amount of information unless you = consider it as a 1-bit counter as suggested by Joel (even if then you = can have wrap-around issues). 
But this is not the case = for the SMR bit.

Plus the ITR = doesn't have to store yet another piece of state to know what the last = version number was the ETR told it.

The nonce will already be = stored in the ITR so you can leverage = that.


As I explained in a = previous mail, our idea is to overload some part of the LISP header, not = to extend it to more than 8 bytes, thus we are not adding any state = here.



Assume you receive a packet = from X with the SMR bit set, you send a Map-Request, then you receive = another packet from X with the SMR bit set, is this another change? or = just the same like the first packet?

It is another = change if the nonce is different.

You = can answer that you have rate limitation and you will ignore SMR bit = from X for a certain time. Unless this time is very large (which is not = a good in the case your Map-request is lost) you have no guarantee of = not receiving a packet with the SMR bit set actually referring to the = same mapping.

With versioning = this ambiguity does not exist anymore.

There is a = 3-way handshake. Here is the scenario again. I am an ETR, you are in = ITR. I want to update you. This is how it goes:

(1) I set SMR-bit with nonce value 17.
(2) You = decap data-packet and send me a Map-Request with nonce = 17.

Since I am decapsulating I = assume I am the ETR and you  the ITR ;-)

(3) I send a Map-Reply with nonce 17.

If the = Map-Request is not answered, you retransmit at the rate-limit interval. = That covers the case when either the Map-Request or Map-Reply gets = lost.


Correct me if I am = wrong: when you (ITR) receive my (ETR) Map-Request, you reset the = SMR-bit, while I will keep sending (rate-limited) Map-Request until I = receive a Map-Reply. Is that right?


If during this time, I had *another* mapping change. = I would send you data packets with nonce value 12 (notice a different = value so it doesn't matter if the value is larger or smaller than the = previous nonce) and the SMR-bit set. You can send me a Map-Request now = with nonce value 12 and when I reply you know which one it is for (12 = and not 17).

If I get a Map-Request for 17 and know that I want = to update you with 12, I still send you a Map-Reply with nonce value 12. = You get it and see that you have been requesting 17 but the reply has 12 = in it.

At this point you could be confused (not Luigi, he is = never confused, but the ITR is confused), but since the lastest SMR = packet had 12, you *know* the Map-Reply for 12 is the latest.

If = packets are sent out of sequence, the Map-Reply is always dominate in = all this. The last Map-Reply you get is always the = latest.


What will the ETR = (Luigi, which sometimes gets confused ;-)) do if it receives a packet = with a different nonce but no SMR bit = set?


Now we can = keep the header at 8 bytes and still have versioning. What do you = think?


Yes, but let me = push things a bit .. ;-)
What about splitting the = nonce_version number in two parts as suggested in our draft? This is = very helpful in case of unidirectional = traffic. 

Cheers

Lu= igi




Dino



= --Apple-Mail-45-915036727-- From hartmans@mit.edu Mon Jun 22 04:17:20 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 515913A6A77 for ; Mon, 22 Jun 2009 04:17:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.163 X-Spam-Level: X-Spam-Status: No, score=-1.163 tagged_above=-999 required=5 tests=[AWL=-1.312, BAYES_40=-0.185, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAndf85WwwdJ for ; Mon, 22 Jun 2009 04:17:19 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id A36F73A6B05 for ; Mon, 22 Jun 2009 04:17:19 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id AB2B04142; Mon, 22 Jun 2009 07:17:27 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 22 Jun 2009 07:17:27 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: terry.manderson@icann.org Subject: [lisp] Announcing WG secretary X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 11:17:20 -0000 Darrel and I are pleased to announce that Terry Manderson has joined the LISP team as the WG secretary. We're really greatful for his help. Terry has been involved in a number of WGs within the routing and other areas of the IETF. He's interested in LISP and is running one of the LISP beta routers. We're looking forward to working with Terry and ask you to join us in welcoming him. From hartmans@mit.edu Mon Jun 22 04:22:20 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AA30128C1B4 for ; Mon, 22 Jun 2009 04:22:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[AWL=-0.507, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, SARE_MLH_Stock1=0.87] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7-A7l0pl1VB7 for ; Mon, 22 Jun 2009 04:22:19 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id C7D7D3A6DCE for ; Mon, 22 Jun 2009 04:22:19 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id D808E415C; Mon, 22 Jun 2009 07:22:28 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 22 Jun 2009 07:22:28 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [lisp] Call for Stockholm Agenda Items--respond by July 3 2009 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 11:22:20 -0000 We'd like to make an open call for agenda items for discussion at the Stockholm IETF. If you'd like to discuss something please let us know. If you are bringing up a new proposal then we'll make sure that it is within the charter and are likely to ask you to submit an internet draft describing your proposal prior to the -00 cutoff. From hartmans@mit.edu Mon Jun 22 04:26:13 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 87D7D3A6B3E for ; Mon, 22 Jun 2009 04:26:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.026 X-Spam-Level: X-Spam-Status: No, score=-1.026 tagged_above=-999 required=5 tests=[AWL=-1.361, BAYES_50=0.001, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L2XNWO42roWT for ; Mon, 22 Jun 2009 04:26:12 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 81EF33A6DD8 for ; Mon, 22 Jun 2009 04:26:12 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EF3DB415C; Mon, 22 Jun 2009 07:26:21 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 22 Jun 2009 07:26:21 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [lisp] Adopting issue tracking policy X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 11:26:13 -0000 None of the comments Darrel and I recieved either on list or off seem like they require changes to the issue tracking proposal I sent out, so we're going to go with that for now. We did receive concerns about how much work it would be to keep the issue number in the message subjects. That's something we're going to evaluate after we get some practice going forward. I'll post the text I sent on the WIKI for easy finding, and Terry, Darrel and I will work on setting up the tracker. Then we'll let everyone know that we should start with the tracker. --Sam From Fred.L.Templin@boeing.com Mon Jun 22 10:57:06 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 03F7828C24C for ; Mon, 22 Jun 2009 10:57:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.111 X-Spam-Level: X-Spam-Status: No, score=-6.111 tagged_above=-999 required=5 tests=[AWL=0.487, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nr5-Vv34jLba for ; Mon, 22 Jun 2009 10:56:59 -0700 (PDT) Received: from slb-smtpout-01.boeing.com (slb-smtpout-01.boeing.com [130.76.64.48]) by core3.amsl.com (Postfix) with ESMTP id 74C3528C20D for ; Mon, 22 Jun 2009 10:56:58 -0700 (PDT) Received: from slb-av-01.boeing.com (slb-av-01.boeing.com [129.172.13.4]) by slb-smtpout-01.ns.cs.boeing.com (8.14.0/8.14.0/8.14.0/SMTPOUT) with ESMTP id n5MHultc003739 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 22 Jun 2009 10:56:48 -0700 (PDT) Received: from slb-av-01.boeing.com (localhost [127.0.0.1]) by slb-av-01.boeing.com (8.14.0/8.14.0/DOWNSTREAM_RELAY) with ESMTP id n5MHulr9001419; Mon, 22 Jun 2009 10:56:47 -0700 (PDT) Received: from XCH-NWBH-11.nw.nos.boeing.com (xch-nwbh-11.nw.nos.boeing.com [130.247.55.84]) by slb-av-01.boeing.com (8.14.0/8.14.0/UPSTREAM_RELAY) with ESMTP id n5MHuf7G001177; Mon, 22 Jun 2009 10:56:47 -0700 (PDT) Received: from XCH-NW-7V2.nw.nos.boeing.com ([130.247.54.35]) by XCH-NWBH-11.nw.nos.boeing.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 22 Jun 2009 10:56:47 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C9F362.CEFE963F" Date: Mon, 22 Jun 2009 10:56:46 -0700 Message-ID: <39C363776A4E8C4A94691D2BD9D1C9A106135B84@XCH-NW-7V2.nw.nos.boeing.com> In-Reply-To: <4C623B66-475D-453B-A1F4-F9AA508CDD24@net.t-labs.tu-berlin.de> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [lisp] Map-Versioning Thread-Index: AcnxuEkC+0uCs9TnS02ZoP4CSoaeSABqjsgA References: <4A2404D0.9080406@joelhalpern.com><4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be><13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de><7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> <4C623B66-475D-453B-A1F4-F9AA508CDD24@net.t-labs.tu-berlin.de> From: "Templin, Fred L" To: "Luigi Iannone" , "Dino Farinacci" X-OriginalArrivalTime: 22 Jun 2009 17:56:47.0435 (UTC) FILETIME=[CFBC79B0:01C9F362] Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 17:57:06 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01C9F362.CEFE963F Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable Luigi, =20 Speaking purely hypothetically (because I'm not yet convinced versioning is needed), how many bits do you think you would need for this? Would somewhere around 4 be sufficient? =20 Thanks - Fred fred.l.templin@boeing.com =20 ________________________________ From: Luigi Iannone [mailto:luigi@net.t-labs.tu-berlin.de]=20 Sent: Saturday, June 20, 2009 8:03 AM To: Dino Farinacci Cc: Olivier.Bonaventure@uclouvain.be; lisp@ietf.org Subject: Re: [lisp] Map-Versioning =20 =20 On Jun 13, 2009, at 20:10 , Dino Farinacci wrote: Because a single bit doesn't tell you if the change is new compared to the actual mapping you have or is a duplicate of you last update. A single bit tells you the same thing as comparing version numbers. =20 Disagree. A version number can give you the information of when you are up to date. One single bit cannot convey the same amount of information unless you consider it as a 1-bit counter as suggested by Joel (even if then you can have wrap-around issues).=20 But this is not the case for the SMR bit. Plus the ITR doesn't have to store yet another piece of state to know what the last version number was the ETR told it. The nonce will already be stored in the ITR so you can leverage that. =20 As I explained in a previous mail, our idea is to overload some part of the LISP header, not to extend it to more than 8 bytes, thus we are not adding any state here. =20 =20 Assume you receive a packet from X with the SMR bit set, you send a Map-Request, then you receive another packet from X with the SMR bit set, is this another change? or just the same like the first packet? It is another change if the nonce is different. You can answer that you have rate limitation and you will ignore SMR bit from X for a certain time. Unless this time is very large (which is not a good in the case your Map-request is lost) you have no guarantee of not receiving a packet with the SMR bit set actually referring to the same mapping. =20 With versioning this ambiguity does not exist anymore. There is a 3-way handshake. Here is the scenario again. I am an ETR, you are in ITR. I want to update you. This is how it goes: (1) I set SMR-bit with nonce value 17. (2) You decap data-packet and send me a Map-Request with nonce 17. =20 Since I am decapsulating I assume I am the ETR and you the ITR ;-) (3) I send a Map-Reply with nonce 17. If the Map-Request is not answered, you retransmit at the rate-limit interval. That covers the case when either the Map-Request or Map-Reply gets lost. =20 Correct me if I am wrong: when you (ITR) receive my (ETR) Map-Request, you reset the SMR-bit, while I will keep sending (rate-limited) Map-Request until I receive a Map-Reply. Is that right? =20 If during this time, I had *another* mapping change. I would send you data packets with nonce value 12 (notice a different value so it doesn't matter if the value is larger or smaller than the previous nonce) and the SMR-bit set. You can send me a Map-Request now with nonce value 12 and when I reply you know which one it is for (12 and not 17). If I get a Map-Request for 17 and know that I want to update you with 12, I still send you a Map-Reply with nonce value 12. You get it and see that you have been requesting 17 but the reply has 12 in it. At this point you could be confused (not Luigi, he is never confused, but the ITR is confused), but since the lastest SMR packet had 12, you *know* the Map-Reply for 12 is the latest. If packets are sent out of sequence, the Map-Reply is always dominate in all this. The last Map-Reply you get is always the latest. =20 What will the ETR (Luigi, which sometimes gets confused ;-)) do if it receives a packet with a different nonce but no SMR bit set? =20 Now we can keep the header at 8 bytes and still have versioning. What do you think? =20 Yes, but let me push things a bit .. ;-) What about splitting the nonce_version number in two parts as suggested in our draft? This is very helpful in case of unidirectional traffic.=20 =20 Cheers =20 Luigi =20 =20 =20 Dino =20 ------_=_NextPart_001_01C9F362.CEFE963F Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable

Luigi,

 

Speaking purely hypothetically = (because I’m not yet convinced versioning

is needed), how many bits do you = think you would need for this? Would

somewhere around 4 be = sufficient?

 

Thanks – = Fred

fred.l.templin@boeing.com

 

From: Luigi = Iannone [mailto:luigi@net.t-labs.tu-berlin.de]
Sent: Saturday, June 20, = 2009 8:03 AM
To: Dino Farinacci
Cc: Olivier.Bonaventure@uclouvain.be; lisp@ietf.org
Subject: Re: [lisp] = Map-Versioning

 

 

On Jun 13, 2009, at 20:10 , Dino Farinacci = wrote:



Because a single bit doesn't tell you if the change is new = compared to the actual mapping you have or is a duplicate of you last = update.


A single bit tells you the same thing as comparing version = numbers.

 

Disagree. A version number can give you the information of when = you are up to date. One single bit cannot convey the same amount of information = unless you consider it as a 1-bit counter as suggested by Joel (even if then = you can have wrap-around issues). 

But this is not the case for the SMR bit.



Plus the ITR = doesn't have to store yet another piece of state to know what the last version number = was the ETR told it.

The nonce will already be stored in the ITR so you can leverage = that.

 

As I explained in a previous mail, our idea is to overload some = part of the LISP header, not to extend it to more than 8 bytes, thus we are not = adding any state here.

 

 



Assume you receive a packet from X with the SMR bit set, you = send a Map-Request, then you receive another packet from X with the SMR bit = set, is this another change? or just the same like the first = packet?


It is another change if the nonce is different.


You can answer that you have rate limitation and you will ignore = SMR bit from X for a certain time. Unless this time is very large (which is = not a good in the case your Map-request is lost) you have no guarantee of not receiving a packet with the SMR bit set actually referring to the same = mapping.

 

With versioning this ambiguity does not exist = anymore.


There is a 3-way handshake. Here is the scenario again. I am an ETR, you = are in ITR. I want to update you. This is how it goes:

(1) I set SMR-bit with nonce value 17.
(2) You decap data-packet and send me a Map-Request with nonce = 17.

 

Since I am decapsulating I assume I am the ETR and you  the = ITR ;-)



(3) I send a = Map-Reply with nonce 17.

If the Map-Request is not answered, you retransmit at the rate-limit = interval. That covers the case when either the Map-Request or Map-Reply gets = lost.

 

Correct me if I am wrong: when you (ITR) receive my (ETR) = Map-Request, you reset the SMR-bit, while I will keep sending (rate-limited) = Map-Request until I receive a Map-Reply. Is that right?

 



If during this = time, I had *another* mapping change. I would send you data packets with nonce = value 12 (notice a different value so it doesn't matter if the value is larger or smaller than the previous nonce) and the SMR-bit set. You can send me a = Map-Request now with nonce value 12 and when I reply you know which one it is for = (12 and not 17).

If I get a Map-Request for 17 and know that I want to update you with = 12, I still send you a Map-Reply with nonce value 12. You get it and see that = you have been requesting 17 but the reply has 12 in it.

At this point you could be confused (not Luigi, he is never confused, = but the ITR is confused), but since the lastest SMR packet had 12, you *know* = the Map-Reply for 12 is the latest.

If packets are sent out of sequence, the Map-Reply is always dominate in = all this. The last Map-Reply you get is always the latest.

 

What will the ETR (Luigi, which sometimes gets confused ;-)) do = if it receives a packet with a different nonce but no SMR bit = set?

 



Now we can = keep the header at 8 bytes and still have versioning. What do you = think?

 

Yes, but let me push things a bit .. ;-)

What about splitting the nonce_version number in two parts as = suggested in our draft? This is very helpful in case of unidirectional = traffic. 

 

Cheers

 

Luigi

 

 

 



Dino

 

------_=_NextPart_001_01C9F362.CEFE963F-- From hartmans@mit.edu Mon Jun 22 11:35:02 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2D7893A6D25 for ; Mon, 22 Jun 2009 11:35:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.297 X-Spam-Level: X-Spam-Status: No, score=-2.297 tagged_above=-999 required=5 tests=[AWL=-0.032, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 368udF51rTF3 for ; Mon, 22 Jun 2009 11:35:01 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 734173A6CD6 for ; Mon, 22 Jun 2009 11:35:01 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EB7B34142; Mon, 22 Jun 2009 14:35:13 -0400 (EDT) To: "Templin\, Fred L" References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <39C363776A4E8C4A94691D2BD9D1C9A105FF997C@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D265@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D2D8@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A10603D5B2@XCH-NW-7V2.nw.nos.boeing.com> <39C363776A4E8C4A94691D2BD9D1C9A1060B5087@XCH-NW-7V2.nw.nos.boeing.com> From: Sam Hartman Date: Mon, 22 Jun 2009 14:35:13 -0400 In-Reply-To: <39C363776A4E8C4A94691D2BD9D1C9A1060B5087@XCH-NW-7V2.nw.nos.boeing.com> (Fred L. Templin's message of "Fri\, 12 Jun 2009 15\:38\:06 -0700") Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: lisp@ietf.org Subject: Re: [lisp] [#1] Path MTU concerns and proposed resolutions [respond byJune 13] X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 18:35:02 -0000 The chairs requested indications of support by June 12. Besides Fred's initial indication of support, no one else came forward supporting this issue. As such, the chairs do not see the necessary support to adopt these changes and this issue is closed. From dino@cisco.com Mon Jun 22 12:00:30 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 004F23A6C1F for ; Mon, 22 Jun 2009 12:00:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.559 X-Spam-Level: X-Spam-Status: No, score=-6.559 tagged_above=-999 required=5 tests=[AWL=0.040, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Kpoo+Xi6VNEs for ; Mon, 22 Jun 2009 12:00:28 -0700 (PDT) Received: from sj-iport-1.cisco.com (sj-iport-1.cisco.com [171.71.176.70]) by core3.amsl.com (Postfix) with ESMTP id 076433A697E for ; Mon, 22 Jun 2009 12:00:16 -0700 (PDT) X-IronPort-AV: E=Sophos;i="4.42,270,1243814400"; d="scan'208";a="203942693" Received: from sj-dkim-2.cisco.com ([171.71.179.186]) by sj-iport-1.cisco.com with ESMTP; 22 Jun 2009 19:00:31 +0000 Received: from sj-core-4.cisco.com (sj-core-4.cisco.com [171.68.223.138]) by sj-dkim-2.cisco.com (8.12.11/8.12.11) with ESMTP id n5MJ0VcD018607; Mon, 22 Jun 2009 12:00:31 -0700 Received: from xbh-sjc-221.amer.cisco.com (xbh-sjc-221.cisco.com [128.107.191.63]) by sj-core-4.cisco.com (8.13.8/8.14.3) with ESMTP id n5MJ0VWG008471; Mon, 22 Jun 2009 19:00:31 GMT Received: from xfe-sjc-211.amer.cisco.com ([171.70.151.174]) by xbh-sjc-221.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 22 Jun 2009 12:00:31 -0700 Received: from [192.168.1.2] ([10.21.146.45]) by xfe-sjc-211.amer.cisco.com with Microsoft SMTPSVC(6.0.3790.3959); Mon, 22 Jun 2009 12:00:30 -0700 Message-Id: <3CA40DE0-7E64-44FB-865E-B6A595AA4183@cisco.com> From: Dino Farinacci To: Luigi Iannone In-Reply-To: <4C623B66-475D-453B-A1F4-F9AA508CDD24@net.t-labs.tu-berlin.de> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v935.3) Date: Mon, 22 Jun 2009 12:00:30 -0700 References: <4A2404D0.9080406@joelhalpern.com> <4A240834.7000106@uclouvain.be> <4A87C591-F5C3-4180-8FBB-D71E65F00145@net.t-labs.tu-berlin.de> <4A25846F.4030408@uclouvain.be> <13672A25-0BF0-4FC1-B301-D3B1B91A6BD1@net.t-labs.tu-berlin.de> <7CDAF1C4-35F9-46EC-B035-B870D0A076C6@cisco.com> <4C623B66-475D-453B-A1F4-F9AA508CDD24@net.t-labs.tu-berlin.de> X-Mailer: Apple Mail (2.935.3) X-OriginalArrivalTime: 22 Jun 2009 19:00:31.0177 (UTC) FILETIME=[B6DD3390:01C9F36B] DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; l=2357; t=1245697231; x=1246561231; c=relaxed/simple; s=sjdkim2002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=dino@cisco.com; z=From:=20Dino=20Farinacci=20 |Subject:=20Re=3A=20[lisp]=20Map-Versioning |Sender:=20; bh=c27Gwr0bZc9Bec0ufktz6upGUnVbwTfrQNuRrBdaIAM=; b=WnIesmqp+ne52zHq7SZ9FSUmbkEP7tZ26qGqNfMsvnpNzCevV6/NEe+ogf 4w5GJatvrocFG0AreuvA2zsOEa7VGj6pac+cqmgcIP04UPg4QvQzfPQEcTE0 wlznql8lnw; Authentication-Results: sj-dkim-2; header.From=dino@cisco.com; dkim=pass ( sig from cisco.com/sjdkim2002 verified; ); Cc: Olivier.Bonaventure@uclouvain.be, lisp@ietf.org Subject: Re: [lisp] Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 19:00:30 -0000 > Yes, but let me push things a bit .. ;-) > What about splitting the nonce_version number in two parts as > suggested in our draft? This is very helpful in case of > unidirectional traffic. Let's focus on this part for now. Which I think is an important issue. Let's frame the situation up as we have site A sending packets to site B. The traffic is unidirectional to home in on your point. Let's call the ITRs at site A ITR "a" and ITR "a'" and "b" and "b'" are the ETRs at site B. Even if a or a' send to b or b', those LISP routers at site B don't have any map-cache state for site A. When site B wants to update it's mapping database entries, neither b or b' will SMR because it thinks it's not talking to anyone. Plus, it has no offered data to send them, so it can't send an SMR-bit. You like the idea of putting two version numbers in so Site A can tell Site B what version of B's mappings it is using. Tell me if I am ac curatively describing your position? ... (pause and think before continuing below) If the LISP routers at site B see that anyone is out of date, they would need to send something to the ITRs of site A. Well we don't want the LISP routers of site B to send a Map-Reply because that could be unsolicited. We would want the ITRs to send a Map-Request over the mapping database infrastructure to get updated. But we want them to do it at the rate that site B can handle the Map-Request load. So one solution is for the site B LISP routers to send a Map-Request to site A with the SMR-bit set. Which in turn has the site A LISP routers send a Map-Request. This would fall into the current design. ... (pause and think before continuing below) But while we have been experimenting with RLOC reachability liveness, you might think of an option where site A LISP routers might be sending Map-Requests to site B routers to make sure the locators the site A routers are using are up and operational. Well depending on how often this is done, the keepalive replies which are in the form of Map- Replies would have more up to date mapping data. All I'm trying to say here is that maybe using the basic Map-Request and Map-Reply machinery we can solve liveness and fast mapping updates at the same time. Just thinking out loud, Dino From hartmans@mit.edu Mon Jun 22 13:11:13 2009 Return-Path: X-Original-To: lisp@core3.amsl.com Delivered-To: lisp@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B69C03A6B6A for ; Mon, 22 Jun 2009 13:11:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.861 X-Spam-Level: X-Spam-Status: No, score=-1.861 tagged_above=-999 required=5 tests=[AWL=-0.466, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, SARE_MLH_Stock1=0.87] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RDnlpTQeszFU for ; Mon, 22 Jun 2009 13:11:13 -0700 (PDT) Received: from carter-zimmerman.suchdamage.org (carter-zimmerman.suchdamage.org [69.25.196.178]) by core3.amsl.com (Postfix) with ESMTP id 0559B3A6B5A for ; Mon, 22 Jun 2009 13:11:12 -0700 (PDT) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id C536C4142; Mon, 22 Jun 2009 16:11:25 -0400 (EDT) To: lisp@ietf.org From: Sam Hartman Date: Mon, 22 Jun 2009 16:11:25 -0400 Message-ID: User-Agent: Gnus/5.11 (Gnus v5.11) Emacs/22.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [lisp] Security work for Stockholm X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Jun 2009 20:11:13 -0000 After the SF IETF meeting, a group of people got together to discuss security of LISP and to begin work hopefully leading towards progress on those deliverables. How is that going? Is there any interest in discussion in Stockholm?