From ljakab@ac.upc.edu Wed Jan 2 01:13:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F3E021F9099 for ; Wed, 2 Jan 2013 01:13:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mEyoL0Iyus3Y for ; Wed, 2 Jan 2013 01:13:35 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id 9B1B021F8D4C for ; Wed, 2 Jan 2013 01:13:27 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r029DPGM006815; Wed, 2 Jan 2013 10:13:25 +0100 Received: from [192.168.1.6] (unknown [89.123.124.214]) by gw.ac.upc.edu (Postfix) with ESMTP id DC6F46B01C5; Wed, 2 Jan 2013 10:13:23 +0100 (CET) Message-ID: <50E3FA26.3010605@ac.upc.edu> Date: Wed, 02 Jan 2013 11:13:10 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: Paul Vinciguerra References: <6E5736BD68F770449C74FBAD975F807C929624CE@NYDC-EXCH01.vinci-consulting-corp.local> In-Reply-To: <6E5736BD68F770449C74FBAD975F807C929624CE@NYDC-EXCH01.vinci-consulting-corp.local> OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: "lisp@ietf.org" Subject: Re: [lisp] Comments regarding PETR's in the deployment document. X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jan 2013 09:13:36 -0000 Hi Paul, I missed this email when it was sent, I was traveling at the time. I just reviewed mailing list traffic now, and saw this was unanswered. Please see inline below: On 10/28/12 16:35, Paul Vinciguerra wrote: > > As I read section 4.2, I’d like to point out two issues that could > simplify/optimize deployment : > > P-ETRs can be deployed by ISPs wishing to offer value-added services > > to their customers. As is the case with P-ITRs, P-ETRs too may > > introduce path stretch. Because of this the ISP needs to consider > > the tradeoff of using several devices, close to the customers, to > > minimize it, or few devices, farther away from the customers, > > minimizing cost instead. > > We see this in practice as well. Much more of the traffic path winds > up on the EID side. (All the non-LISP prefixes are EID’s to a PeTR, > yes?) This minimizes the amount of time that packets are encapsulated > between RLOCS. I see a need for traffic engineering where PeTR’s could > advertise prefixes into the mapping system (with some kind of > no-export tag into the DDT). Our specific use would be to egress > traffic at our peering points where we directly connect to the endpoint. > This is a very interesting optimization, which may reduce path strech even with a relatively low number of deployed PxTRs. How about configuring source based replies in the DDT, instead of the "no-export"? This could be an easier way to accomplish the same goal, and we can keep P-ETRs simple, without the need to send Map-Registers. The ETRs of the site would register the P-ETR RLOCs for queries coming from P-ITRs from peers. I like the source based approach better, because there are other use cases already for LISP, when a source based reply may be necessary. > If the encapsulated path were longer, the intermediary providers would > also see empirical evidence of LISP running on their networks, as the > packets would be UDP/4342. Once the packet passes through the PeTR, > it’s just a regular packet again. This process should happen as close > to the endpoints as possible. This suggests that as a best practice, > anycast addresses should not be used for PeTR addresses, because > anycast addresses minimize the encapsulated path. > I will incorporate this suggestion into the document, thanks! > As a security measure, access to P-ETRs should be limited to > legitimate users by enforcing ACLs. > > > In practice, this is hard to do. It is hard to do with outer header source addresses if you support DHCP based RLOCs. > Likewise, ACL’s on the inner header source addresses help against theft of service, but packets with IP options set can move the fixed offset of the inner header source address and make using ACL’s a challenge. > With ACL’s, limiting legitimate users would imply matching the proper pairing of both inner and outer header source addresses at a minimum. An alternative approach would be valuable as suggested in the interworking document. > > A Proxy-ETR should verify the (inner) source EID of the packet at > time of decapsulation in order to verify that this is from a > configured LISP site. This is to prevent spoofed inner sources from > being encapsulated through the Proxy-ETR. Ok, in that case we will remove this recommendation. -Lori > > Paul From vimoreno@cisco.com Wed Jan 2 08:00:42 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3589621F84D1; Wed, 2 Jan 2013 08:00:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lu-DycTX6Bkk; Wed, 2 Jan 2013 08:00:41 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id 7B8DB21F84BC; Wed, 2 Jan 2013 08:00:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=485; q=dns/txt; s=iport; t=1357142441; x=1358352041; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=tQTyZbrFLtT+XUV7mIfblmMfr1HNIB1r3v1hmdFRdSU=; b=GXWU3HoI37NT+jVXMMggyX8i2fHLEZVlZbBLT11kKoux7xlXRsIVhPXm gNTTahPadfRUwDLYQVo4TmRc9kKtTCDjHZD9GcFreShxNiu+oIEQ9cYiN T9DS7+9ons6NYmXdhPqyuTHvr6Lu5/3wtQDMId6EseHJtE/fd6dsCWJBK k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ar9EAGNZ5FCtJV2Y/2dsb2JhbABFgX+DdLdZFnOCIAEEAQEBNzQLEgEIIhQxBgslAgQBDQUIh3kDDwywFA2IPASLbYRMYQOUNo0NhRGCdIIm X-IronPort-AV: E=Sophos;i="4.84,396,1355097600"; d="scan'208";a="158089160" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-7.cisco.com with ESMTP; 02 Jan 2013 16:00:41 +0000 Received: from xhc-rcd-x02.cisco.com (xhc-rcd-x02.cisco.com [173.37.183.76]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id r02G0f9E016731 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 2 Jan 2013 16:00:41 GMT Received: from xmb-aln-x08.cisco.com ([169.254.3.169]) by xhc-rcd-x02.cisco.com ([173.37.183.76]) with mapi id 14.02.0318.004; Wed, 2 Jan 2013 10:00:40 -0600 From: "Victor Moreno (vimoreno)" To: Damien Saucez , "draft-xu-softwire-ip-in-udp@tools.ietf.org" Thread-Topic: [lisp] draft-xu-softwire-ip-in-udp Thread-Index: AQHN5s6dTLNNLMdjT0iPGhFDawhxR5g2FXgA Date: Wed, 2 Jan 2013 16:00:40 +0000 Message-ID: In-Reply-To: <0A534525-59E1-418E-826B-177655767B17@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.5.121010 x-originating-ip: [10.19.19.183] Content-Type: text/plain; charset="us-ascii" Content-ID: <698E0A90853A4C40BE2E2C418968E79D@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "Softwires@ietf.org" , LISP mailing list list Subject: Re: [lisp] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Jan 2013 16:00:42 -0000 LISP follows the procedures and principles described in this draft inherently. These may actually be described in one of the LISP drafts already actually. -v On 12/30/12 12:45 PM, "Damien Saucez" wrote: >Hello, > >Interesting document, have you ever though of LISP to do that? > >Regards, > >Damien Saucez >_______________________________________________ >lisp mailing list >lisp@ietf.org >https://www.ietf.org/mailman/listinfo/lisp From internet-drafts@ietf.org Thu Jan 3 16:14:47 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 72E9821F8DD0; Thu, 3 Jan 2013 16:14:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.235 X-Spam-Level: X-Spam-Status: No, score=-102.235 tagged_above=-999 required=5 tests=[AWL=0.364, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zr6eYfckp6iW; Thu, 3 Jan 2013 16:14:47 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BEBB21F8DDA; Thu, 3 Jan 2013 16:14:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20130104001447.16693.17687.idtracker@ietfa.amsl.com> Date: Thu, 03 Jan 2013 16:14:47 -0800 Cc: lisp@ietf.org Subject: [lisp] I-D Action: draft-ietf-lisp-mib-08.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jan 2013 00:14:47 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Locator/ID Separation Protocol Working Gr= oup of the IETF. Title : LISP MIB Author(s) : Gregg Schudel Amit Jain Victor Moreno Filename : draft-ietf-lisp-mib-08.txt Pages : 66 Date : 2013-01-03 Abstract: This document defines managed objects for the Locator/ID Separation Protocol (LISP). These objects provide information useful for monitoring LISP devices, including basic configuration information, LISP status, and operational statistics. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lisp-mib There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-lisp-mib-08 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lisp-mib-08 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From rbonica@juniper.net Fri Jan 4 08:49:29 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF95A21F88A5 for ; Fri, 4 Jan 2013 08:49:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.053 X-Spam-Level: X-Spam-Status: No, score=-102.053 tagged_above=-999 required=5 tests=[AWL=1.414, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4SKemn0zwqg9 for ; Fri, 4 Jan 2013 08:49:29 -0800 (PST) Received: from exprod7og111.obsmtp.com (exprod7og111.obsmtp.com [64.18.2.175]) by ietfa.amsl.com (Postfix) with ESMTP id BAE1C21F88A1 for ; Fri, 4 Jan 2013 08:49:28 -0800 (PST) Received: from P-EMHUB01-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob111.postini.com ([64.18.6.12]) with SMTP ID DSNKUOcIGLPeeKz3STgDPL+DKcg8WsLc9Af0@postini.com; Fri, 04 Jan 2013 08:49:28 PST Received: from P-CLDFE01-HQ.jnpr.net (172.24.192.59) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server (TLS) id 8.3.213.0; Fri, 4 Jan 2013 08:47:24 -0800 Received: from o365mail.juniper.net (207.17.137.149) by o365mail.juniper.net (172.24.192.59) with Microsoft SMTP Server id 14.1.355.2; Fri, 4 Jan 2013 08:47:24 -0800 Received: from db3outboundpool.messaging.microsoft.com (213.199.154.143) by o365mail.juniper.net (207.17.137.149) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 4 Jan 2013 08:49:41 -0800 Received: from mail82-db3-R.bigfish.com (10.3.81.234) by DB3EHSOBE008.bigfish.com (10.3.84.28) with Microsoft SMTP Server id 14.1.225.23; Fri, 4 Jan 2013 16:47:22 +0000 Received: from mail82-db3 (localhost [127.0.0.1]) by mail82-db3-R.bigfish.com (Postfix) with ESMTP id E15634201EF for ; Fri, 4 Jan 2013 16:47:21 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT003.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: 0 X-BigFish: PS0(zzzz1de0h1202h1e76h1d1ah1d2ahzz18602eh8275dhz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h1155h) Received: from mail82-db3 (localhost.localdomain [127.0.0.1]) by mail82-db3 (MessageSwitch) id 1357318039888064_32028; Fri, 4 Jan 2013 16:47:19 +0000 (UTC) Received: from DB3EHSMHS007.bigfish.com (unknown [10.3.81.242]) by mail82-db3.bigfish.com (Postfix) with ESMTP id CCF69C0057 for ; Fri, 4 Jan 2013 16:47:19 +0000 (UTC) Received: from BY2PRD0512HT003.namprd05.prod.outlook.com (157.56.238.5) by DB3EHSMHS007.bigfish.com (10.3.87.107) with Microsoft SMTP Server (TLS) id 14.1.225.23; Fri, 4 Jan 2013 16:47:18 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.92]) by BY2PRD0512HT003.namprd05.prod.outlook.com ([10.255.243.36]) with mapi id 14.16.0245.002; Fri, 4 Jan 2013 16:47:17 +0000 From: Ronald Bonica To: "lisp@ietf.org" Thread-Topic: draft-ietf-lisp-architecture-00: Architectural Aspects Thread-Index: Ac3qmyb0qAeEAznURqS5YwfP28HwjQ== Date: Fri, 4 Jan 2013 16:47:16 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E05A9F@BY2PRD0512MB653.namprd05.prod.outlook.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Subject: [lisp] draft-ietf-lisp-architecture-00: Architectural Aspects X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Jan 2013 16:49:30 -0000 Hi Noel, I have been dedicating a little time each day to a close reading of draft-i= etf-lisp-architecture and will generate a few comments each day as the work= progresses. The following are comments on Section 4 (Architectural Aspects= ). Section 4.1: Critical State =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D This section would be more concrete if you identified the state that you co= nsidered to be critical. We can probably agree that mapping information, as= it is maintained within the mapping system, is critical. However, reading = this section, I can't tell whether you consider the map-cache, as it is mai= ntain in an xTR, also to be critical. Could you clarify this in the text? Also, if you consider the xTR map-cache to contain critical state, you shou= ld probably note that staleness, as well as loss of this state can cause lo= ss of connectivity. A New Section Between 4.1 and 4.2: xTR State =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D You might want to add a section stating that LISP distinguishes itself from= other routing architectures because: - it maintains a cached-subset of mapping information on the xTR - the xTR pulls mapping information from the mapping system to itself (as o= pposed to letting the mapping system push it) With this architecture comes benefits and costs. One benefit is memory savi= ngs on the xTR. (There may be other benefits). The cost is that the protoco= l needs to address the problem of cache freshness without compromising perf= ormance or security.=20 Section 4.3: Piggybacking of Control on User Data =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D - Would it be fair to say that a major motivation for piggybacking control = information on user data is to address the problem of xTR cache freshness? = That having this information reduces the need to expire map-cache entries m= ore quickly than might otherwise be necessary? - Would it be fair to say that the piggybacking of control information on u= ser data reduces the amount of ETR probing that is required to maintain cac= he freshness, but does not totally eliminate it.=20 - Would it be fair to say that piggybacking of control information on user = data introduces a class of security issues, many of which are addressed in = draft-ietf-lisp-threats? - If any of the above statements are true, it might be helpful to add them = to Section 4.3. -------------------------- Ron Bonica vcard: www.bonica.org/ron/ronbonica.vcf From sander@steffann.nl Sun Jan 6 09:41:33 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FEC121F84D8 for ; Sun, 6 Jan 2013 09:41:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ewvcR7-Wuhku for ; Sun, 6 Jan 2013 09:41:32 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 8358421F84D1 for ; Sun, 6 Jan 2013 09:41:21 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id 0EAE12017 for ; Sun, 6 Jan 2013 18:41:20 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s5df2YxxBAz7 for ; Sun, 6 Jan 2013 18:41:10 +0100 (CET) Received: from [IPv6:2a00:8640:1::8cb0:2b5f:1761:2035] (unknown [IPv6:2a00:8640:1:0:8cb0:2b5f:1761:2035]) by mail.sintact.nl (Postfix) with ESMTP id 0D9852006 for ; Sun, 6 Jan 2013 18:41:09 +0100 (CET) From: Sander Steffann Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> Date: Sun, 6 Jan 2013 18:41:09 +0100 To: "lisp@ietf.org list" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Jan 2013 17:41:33 -0000 Hi, I was reading http://tools.ietf.org/html/draft-ietf-lisp-24 when I = noticed the following text in section 6.1.4, 'Map-Reply Message Format': Locator: an IPv4 or IPv6 address (as encoded by the 'Loc-AFI' field) assigned to an ETR. Note that the destination RLOC address MAY be an anycast address. A source RLOC can be an anycast address as well. The source or destination RLOC MUST NOT be the broadcast address (255.255.255.255 or any subnet broadcast address known to the router), and MUST NOT be a link-local multicast address. The source RLOC MUST NOT be a multicast address. The destination RLOC SHOULD be a multicast address if it is being mapped from a multicast destination EID. It talks about source and destination RLOCs, which seems weird in the = context of a map-reply message. My feeling is that this text belongs in = a more generic section, or am I missing something here? I thought that = locators in map-replies are always meant to be used as destination = RLOCs. Thanks, Sander From sander@steffann.nl Sun Jan 6 10:59:06 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0090E21F84F6 for ; Sun, 6 Jan 2013 10:59:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.552 X-Spam-Level: X-Spam-Status: No, score=-1.552 tagged_above=-999 required=5 tests=[AWL=-1.048, BAYES_00=-2.599, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ulhAraHGjFJJ for ; Sun, 6 Jan 2013 10:59:05 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id E584C21F867E for ; Sun, 6 Jan 2013 10:59:04 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id D0B0E2018 for ; Sun, 6 Jan 2013 19:59:01 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lUU31X+mJbcc for ; Sun, 6 Jan 2013 19:59:01 +0100 (CET) Received: from macpro.10ww.steffann.nl (macpro.10ww.steffann.nl [37.77.56.75]) by mail.sintact.nl (Postfix) with ESMTP id 5886F2006 for ; Sun, 6 Jan 2013 19:58:54 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> Date: Sun, 6 Jan 2013 19:58:54 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> To: "lisp@ietf.org list" X-Mailer: Apple Mail (2.1499) Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Jan 2013 18:59:06 -0000 Another question: > Locator: [...] The destination RLOC > SHOULD be a multicast address if it is being mapped from a > multicast destination EID. How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? - Sander From ggx@gigix.net Mon Jan 7 03:17:37 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC3E321F871C for ; Mon, 7 Jan 2013 03:17:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.751 X-Spam-Level: X-Spam-Status: No, score=-0.751 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_DYNAMIC_DHCP=1.398, HELO_EQ_FR=0.35, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rseJ11xHqjEM for ; Mon, 7 Jan 2013 03:17:37 -0800 (PST) Received: from mail-wg0-x229.google.com (mail-wg0-x229.google.com [IPv6:2a00:1450:400c:c00::229]) by ietfa.amsl.com (Postfix) with ESMTP id 33C3E21F84D0 for ; Mon, 7 Jan 2013 03:17:37 -0800 (PST) Received: by mail-wg0-f41.google.com with SMTP id ds1so2133324wgb.2 for ; Mon, 07 Jan 2013 03:17:36 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=5DIaWAmI0DjEI5uNZyrvX7wl2c1dJkZqi2MbqHdDRQQ=; b=gB3yuU5+emqq3yFLyR8JlyU90EgYQhn3zXVrSPJKtssHY4bhvxFPkNNq4KJbSV1sbr j2RxIHV3aHDQ6e/otnC3EPEXoPFFlD/igM71x0RM6LkARXQVDcQykTHSSLgkd5msOmAS bnQpGfGfuf2aAdaL60AQ1wR1PpWOSPkb4TMAlCs6KZzmzM47XbgfSEomJdSbiiBuLQps izTLI7x/5oziEkpw1ezEPXKHilHrjaTkWrcTAMA/rQGRb0GESInjrlYftcf0zNowfw5U DAN8wIw/trCcMe/tsbH6amyyssansL0URlMdXX+tJ2OzD00kOnxH4tMOhw1WIn7OYfMp 9fyg== X-Received: by 10.194.71.244 with SMTP id y20mr86372375wju.19.1357557456143; Mon, 07 Jan 2013 03:17:36 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id p2sm13022187wic.7.2013.01.07.03.17.34 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 03:17:35 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> Date: Mon, 7 Jan 2013 12:17:50 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <0AAF303D-8E8C-4AEE-9AA7-D239FCB212C2@gigix.net> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> To: Sander Steffann X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQmzAC9pqz2drGkcqTW7b9FbJQkdKmyhl79BptNcgA5xyS1muWQPOQ+UBAvo7gWjr7JT0Olb Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 11:17:38 -0000 On 6 Jan. 2013, at 19:58 , Sander Steffann wrote: > Another question: >=20 >> Locator: [...] The destination RLOC >> SHOULD be a multicast address if it is being mapped from a >> multicast destination EID. >=20 > How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? Why not? Luigi > - Sander >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From sander@steffann.nl Mon Jan 7 03:56:01 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA1A921F86F7 for ; Mon, 7 Jan 2013 03:56:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.028 X-Spam-Level: X-Spam-Status: No, score=-1.028 tagged_above=-999 required=5 tests=[AWL=-0.524, BAYES_00=-2.599, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NBDz113Bh7Tc for ; Mon, 7 Jan 2013 03:56:01 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 4B1DD21F86AC for ; Mon, 7 Jan 2013 03:56:01 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id 4EFEB2007; Mon, 7 Jan 2013 12:56:00 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FwPcJm0780KX; Mon, 7 Jan 2013 12:55:54 +0100 (CET) Received: from macpro.10ww.steffann.nl (macpro.10ww.steffann.nl [37.77.56.75]) by mail.sintact.nl (Postfix) with ESMTP id 02EE42006; Mon, 7 Jan 2013 12:55:53 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: <0AAF303D-8E8C-4AEE-9AA7-D239FCB212C2@gigix.net> Date: Mon, 7 Jan 2013 12:55:53 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> <0AAF303D-8E8C-4AEE-9AA7-D239FCB212C2@gigix.net> To: Luigi Iannone X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 11:56:02 -0000 Op 7 jan. 2013, om 12:17 heeft Luigi Iannone het = volgende geschreven: > On 6 Jan. 2013, at 19:58 , Sander Steffann wrote: >=20 >> Another question: >>=20 >>> Locator: [...] The destination RLOC >>> SHOULD be a multicast address if it is being mapped from a >>> multicast destination EID. >>=20 >> How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? >=20 > Why not? It seems I need to re-read the lisp-multicast draft. I can't seem to = understand how the mapping system works in relation to multicast = traffic... Is there a introduction or presentation somewhere that = explain it step-by-step? Thanks, Sander From iesg-secretary@ietf.org Mon Jan 7 07:13:28 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A4B0921F85F7; Mon, 7 Jan 2013 07:13:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.188 X-Spam-Level: X-Spam-Status: No, score=-102.188 tagged_above=-999 required=5 tests=[AWL=0.411, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VRD6wVL4jLX1; Mon, 7 Jan 2013 07:13:28 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83B7421F859D; Mon, 7 Jan 2013 07:13:26 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20130107151326.12626.71169.idtracker@ietfa.amsl.com> Date: Mon, 07 Jan 2013 07:13:26 -0800 Cc: lisp@ietf.org Subject: [lisp] Last Call: (LISP MIB) to Experimental RFC X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list Reply-To: ietf@ietf.org List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 15:13:28 -0000 The IESG has received a request from the Locator/ID Separation Protocol WG (lisp) to consider the following document: - 'LISP MIB' as Experimental RFC The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2013-01-21. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document defines managed objects for the Locator/ID Separation Protocol (LISP). These objects provide information useful for monitoring LISP devices, including basic configuration information, LISP status, and operational statistics. The file can be obtained via http://datatracker.ietf.org/doc/draft-ietf-lisp-mib/ IESG discussion can be tracked via http://datatracker.ietf.org/doc/draft-ietf-lisp-mib/ballot/ No IPR declarations have been submitted directly on this I-D. From farinacci@gmail.com Mon Jan 7 11:53:59 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A46D921F88DD for ; Mon, 7 Jan 2013 11:53:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.184 X-Spam-Level: X-Spam-Status: No, score=-1.184 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_COMMENT_SAVED_URL=0.114, HTML_MESSAGE=0.001, MANGLED_LIPS=2.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nSvDDQ4+XlUH for ; Mon, 7 Jan 2013 11:53:54 -0800 (PST) Received: from mail-pb0-f53.google.com (mail-pb0-f53.google.com [209.85.160.53]) by ietfa.amsl.com (Postfix) with ESMTP id BB58E21F8A90 for ; Mon, 7 Jan 2013 11:53:54 -0800 (PST) Received: by mail-pb0-f53.google.com with SMTP id jt11so10779761pbb.12 for ; Mon, 07 Jan 2013 11:53:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:content-type:subject:message-id:date:to :mime-version:x-mailer; bh=zTk1vhACE94RJOsUyARth2C4QSuhpvJSGL0N+BXSptU=; b=0lNC5e8xwiFfkp6Uzh4TxlHEmgSfee5ZtTTlSlQyUIvWl9YZRsJqpBEtqILr4cI98/ mY3h1ME0nzgJPZDlnM+rXdvVoBUWzP1f4yJ//It9EYalJTAQBqZnatN/mUFC/bN7CRIy 78Iq4OJjq24nXb9dVxwChfPdtyeBFVp6ccLQTJwwMuVcYSb3VauT9FlEM+cOEXcChKdG 7KJmgy7omlefkrzKz6w/P6Zj/2fOJ1030PsFNjGOL92kkVCaeFYBxE9fMLvySgzicZrJ LM5UsnfGfNeU0yksdM2pWmZfSHm0v/12vIslMR+Y1GaIsx6Fyd26jkO316IPTJKcZ27y EZRQ== X-Received: by 10.68.251.136 with SMTP id zk8mr187636497pbc.82.1357588434506; Mon, 07 Jan 2013 11:53:54 -0800 (PST) Received: from [10.169.113.83] (71-6-80-11.static-ip.telepacific.net. [71.6.80.11]) by mx.google.com with ESMTPS id ql9sm334565pbc.61.2013.01.07.11.53.52 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 11:53:53 -0800 (PST) From: Dino Farinacci Content-Type: multipart/mixed; boundary="Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE" Message-Id: <5DA4239D-3245-4234-A9D4-6B71C7DD1797@gmail.com> Date: Mon, 7 Jan 2013 11:53:53 -0800 To: "lisp@ietf.org list" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [lisp] Simple change to draft-ietf-lisp-lcaf X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 19:53:59 -0000 --Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Thanks Sander for your comment. B.1. Changes to draft-ietf-lisp-01.txt o Submitted January 2013. o Change longitude and latitude range from 0-90 to 0-180 in section 4.4. Dino --Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE Content-Disposition: attachment; filename=draft-ietf-lisp-lcaf-01.txt Content-Type: text/plain; name="draft-ietf-lisp-lcaf-01.txt" Content-Transfer-Encoding: quoted-printable Network Working Group D. Farinacci Internet-Draft D. Meyer Intended status: Experimental cisco Systems Expires: July 11, 2013 J. Snijders InTouch N.V. January 7, 2013 LISP Canonical Address Format (LCAF) draft-ietf-lisp-lcaf-01 Abstract This draft defines a canonical address format encoding used in LISP control messages and in the encoding of lookup keys for the LISP Mapping Database System. Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on July 11, 2013. Copyright Notice Copyright (c) 2013 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of Farinacci, et al. Expires July 11, 2013 [Page 1] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Definition of Terms . . . . . . . . . . . . . . . . . . . . . 4 3. LISP Canonical Address Format Encodings . . . . . . . . . . . 5 4. LISP Canonical Address Applications . . . . . . . . . . . . . 7 4.1. Segmentation using LISP . . . . . . . . . . . . . . . . . 7 4.2. Carrying AS Numbers in the Mapping Database . . . . . . . 8 4.3. Convey Application Specific Data . . . . . . . . . . . . . 9 4.4. Assigning Geo Coordinates to Locator Addresses . . . . . . 10 4.5. Generic Database Mapping Lookups . . . . . . . . . . . . . 11 4.6. NAT Traversal Scenarios . . . . . . . . . . . . . . . . . 13 4.7. PETR Admission Control Functionality . . . . . . . . . . . 14 4.8. Multicast Group Membership Information . . . . . . . . . . 16 4.9. Traffic Engineering using Re-encapsulating Tunnels . . . . 17 4.10. Storing Security Data in the Mapping Database . . . . . . 19 4.11. Source/Destination 2-Tuple Lookups . . . . . . . . . . . . 20 4.12. Applications for AFI List Type . . . . . . . . . . . . . . 21 4.12.1. Binding IPv4 and IPv6 Addresses . . . . . . . . . . . 21 4.12.2. Layer-2 VPNs . . . . . . . . . . . . . . . . . . . . 22 4.12.3. ASCII Names in the Mapping Database . . . . . . . . . 22 4.12.4. Using Recursive LISP Canonical Address Encodings . . 23 4.12.5. Compatibility Mode Use Case . . . . . . . . . . . . . 24 5. Security Considerations . . . . . . . . . . . . . . . . . . . 25 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 26 7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 27 7.1. Normative References . . . . . . . . . . . . . . . . . . . 27 7.2. Informative References . . . . . . . . . . . . . . . . . . 27 Appendix A. Acknowledgments . . . . . . . . . . . . . . . . . . . 28 Appendix B. Document Change Log . . . . . . . . . . . . . . . . . 29 B.1. Changes to draft-ietf-lisp-01.txt . . . . . . . . . . . . 29 B.2. Changes to draft-ietf-lisp-00.txt . . . . . . . . . . . . 29 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 30 Farinacci, et al. Expires July 11, 2013 [Page 2] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 1. Introduction The LISP architecture and protocols [LISP] introduces two new numbering spaces, Endpoint Identifiers (EIDs) and Routing Locators (RLOCs) which are intended to replace most use of IP addresses on the Internet. To provide flexibility for current and future applications, these values can be encoded in LISP control messages using a general syntax that includes Address Family Identifier (AFI), length, and value fields. Currently defined AFIs include IPv4 and IPv6 addresses, which are formatted according to code-points assigned in [AFI] as follows: IPv4 Encoded Address: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ IPv6 Encoded Address: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 2 | IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ This document describes the currently-defined AFIs the LISP protocol uses along with their encodings and introduces the LISP Canonical Address Format (LCAF) that can be used to define the LISP-specific encodings for arbitrary AFI values. Farinacci, et al. Expires July 11, 2013 [Page 3] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 2. Definition of Terms Address Family Identifier (AFI): a term used to describe an address encoding in a packet. An address family currently defined for IPv4 or IPv6 addresses. See [AFI] and [RFC1700] for details. The reserved AFI value of 0 is used in this specification to indicate an unspecified encoded address where the the length of the address is 0 bytes following the 16-bit AFI value of 0. Unspecified Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 0 | = | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Endpoint ID (EID): a 32-bit (for IPv4) or 128-bit (for IPv6) value used in the source and destination address fields of the first (most inner) LISP header of a packet. The host obtains a destination EID the same way it obtains a destination address today, for example through a DNS lookup or SIP exchange. The source EID is obtained via existing mechanisms used to set a host's "local" IP address. An EID is allocated to a host from an EID-prefix block associated with the site where the host is located. An EID can be used by a host to refer to other hosts. Routing Locator (RLOC): the IPv4 or IPv6 address of an egress tunnel router (ETR). It is the output of a EID-to-RLOC mapping lookup. An EID maps to one or more RLOCs. Typically, RLOCs are numbered from topologically aggregatable blocks that are assigned to a site at each point to which it attaches to the global Internet; where the topology is defined by the connectivity of provider networks, RLOCs can be thought of as PA addresses. Multiple RLOCs can be assigned to the same ETR device or to multiple ETR devices at a site. Farinacci, et al. Expires July 11, 2013 [Page 4] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 3. LISP Canonical Address Format Encodings IANA has assigned AFI value 16387 (0x4003) to the LISP architecture and protocols. This specification defines the encoding format of the LISP Canonical Address (LCA). The first 4 bytes of an LISP Canonical Address are followed by a variable length of fields: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Rsvd2 | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Rsvd1: this 8-bit field is reserved for future use and MUST be transmitted as 0 and ignored on receipt. Flags: this 8-bit field is for future definition and use. For now, set to zero on transmission and ignored on receipt. Type: this 8-bit field is specific to the LISP Canonical Address formatted encodings, values are: Type 0: Null Body Type Type 1: AFI List Type Type 2: Instance ID Type Type 3: AS Number Type Type 4: Application Data Type Type 5: Geo Coordinates Type Type 6: Opaque Key Type Type 7: NAT-Traversal Type Type 8: Nonce Locator Type Type 9: Multicast Info Type Farinacci, et al. Expires July 11, 2013 [Page 5] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Type 10: Explicit Locator Path Type Type 11: Security Key Type Type 12: Source/Dest Key Type Rsvd2: this 8-bit field is reserved for future use and MUST be transmitted as 0 and ignored on receipt. Length: this 16-bit field is in units of bytes and covers all of the LISP Canonical Address payload, starting and including the byte after the Length field. So any LCAF encoded address will have a minimum length of 8 bytes when the Length field is 0. The 8 bytes include the AFI, Flags, Type, Reserved, and Length fields. When the AFI is not next to encoded address in a control message, then the encoded address will have a minimum length of 6 bytes when the Length field is 0. The 6 bytes include the Flags, Type, Reserved, and Length fields. Farinacci, et al. Expires July 11, 2013 [Page 6] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4. LISP Canonical Address Applications 4.1. Segmentation using LISP When multiple organizations inside of a LISP site are using private addresses [RFC1918] as EID-prefixes, their address spaces must remain segregated due to possible address duplication. An Instance ID in the address encoding can aid in making the entire AFI based address unique. Another use for the Instance ID LISP Canonical Address Format is when creating multiple segmented VPNs inside of a LISP site where keeping EID-prefix based subnets is desirable. Instance ID LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 2 | IID mask-len | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Instance ID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ IID mask-len: if the AFI is set to 0, then this format is not encoding an extended EID-prefix but rather an instance-ID range where the 'IID mask-len' indicates the number of high-order bits used in the Instance ID field for the range. Length value n: length in bytes of the AFI address that follows the Instance ID field including the AFI field itself. Instance ID: the low-order 24-bits that can go into a LISP data header when the I-bit is set. See [LISP] for details. AFI =3D x: x can be any AFI value from [AFI]. This LISP Canonical Address Type can be used to encode either EID or RLOC addresses. Farinacci, et al. Expires July 11, 2013 [Page 7] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.2. Carrying AS Numbers in the Mapping Database When an AS number is stored in the LISP Mapping Database System for either policy or documentation reasons, it can be encoded in a LISP Canonical Address. AS Number LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 3 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AS Number | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the AS Number field including the AFI field itself. AS Number: the 32-bit AS number of the autonomous system that has been assigned either the EID or RLOC that follows. AFI =3D x: x can be any AFI value from [AFI]. The AS Number Canonical Address Type can be used to encode either EID or RLOC addresses. The former is used to describe the LISP-ALT AS number the EID-prefix for the site is being carried for. The latter is used to describe the AS that is carrying RLOC based prefixes in the underlying routing system. Farinacci, et al. Expires July 11, 2013 [Page 8] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.3. Convey Application Specific Data When a locator-set needs to be conveyed based on the type of application or the Per-Hop Behavior (PHB) of a packet, the Application Data Type can be used. Application Data LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 4 | Rsvd2 | 8 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IP TOS, IPv6 TC, or Flow Label | Protocol | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Local Port | Remote Port | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the 8-byte Application Data fields including the AFI field itself. IP TOS, IPv6 TC, or Flow Label: this field stores the 8-bit IPv4 TOS field used in an IPv4 header, the 8-bit IPv6 Traffic Class or Flow Label used in an IPv6 header. Local Port/Remote Port: these fields are from the TCP, UDP, or SCTP transport header. AFI =3D x: x can be any AFI value from [AFI]. The Application Data Canonical Address Type is used for an EID encoding when an ITR wants a locator-set for a specific application. When used for an RLOC encoding, the ETR is supplying a locator-set for each specific application is has been configured to advertise. Farinacci, et al. Expires July 11, 2013 [Page 9] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.4. Assigning Geo Coordinates to Locator Addresses If an ETR desires to send a Map-Reply describing the Geo Coordinates for each locator in its locator-set, it can use the Geo Coordinate Type to convey physical location information. Geo Coordinate LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 5 | Rsvd2 | 12 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |N| Latitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |E| Longitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Altitude | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the 8-byte Longitude and Latitude fields including the AFI field itself. N: When set to 1 means North, otherwise South. Latitude Degrees: Valid values range from 0 to 180. degrees above or below the equator (northern or southern hemisphere, respectively). Latitude Minutes: Valid values range from 0 to 59. Latitude Seconds: Valid values range from 0 to 59. E: When set to 1 means East, otherwise West. Longitude Degrees: Value values are from 0 to 180 degrees right or left of the Prime Meridian. Longitude Minutes: Valid values range from 0 to 59. Longitude Seconds: Valid values range from 0 to 59. Farinacci, et al. Expires July 11, 2013 [Page 10] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Altitude: Height relative to sea level in meters. This is a signed integer meaning that the altitude could be below sea level. A value of 0x7fffffff indicates no Altitude value is encoded. AFI =3D x: x can be any AFI value from [AFI]. The Geo Coordinates Canonical Address Type can be used to encode either EID or RLOC addresses. When used for EID encodings, you can determine the physical location of an EID along with the topological location by observing the locator-set. 4.5. Generic Database Mapping Lookups When the LISP Mapping Database system holds information accessed by a generic formatted key (where the key is not the usual IPv4 or IPv6 address), an opaque key may be desirable. Farinacci, et al. Expires July 11, 2013 [Page 11] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Opaque Key LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 6 | Rsvd2 | n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Field Num | Key Wildcard Fields | Key . . . | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | . . . Key | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the type's payload. The value n is the number of bytes that follow this Length field. Key Field Num: the number of fields (minus 1) the key can be broken up into. The width of the fields are fixed length. So for a key size of 8 bytes, with a Key Field Num of 4 allows 4 fields of 2 bytes in length. Valid values for this field range from 0 to 15 supporting a maximum of 16 field separations. Key Wildcard Fields: describes which fields in the key are not used as part of the key lookup. This wildcard encoding is a bitfield. Each bit is a don't-care bit for a corresponding field in the key. Bit 0 (the low-order bit) in this bitfield corresponds the first field, right-justified in the key, bit 1 the second field, and so on. When a bit is set in the bitfield it is a don't-care bit and should not be considered as part of the database lookup. When the entire 16-bits is set to 0, then all bits of the key are used for the database lookup. Key: the variable length key used to do a LISP Database Mapping lookup. The length of the key is the value n (shown above) minus 3. Farinacci, et al. Expires July 11, 2013 [Page 12] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.6. NAT Traversal Scenarios When a LISP system is conveying global address and mapped port information when traversing through a NAT device, the NAT-Traversal LCAF Type is used. See [LISP-NATT] for details. NAT-Traversal Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 7 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | MS UDP Port Number | ETR UDP Port Number | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Global ETR RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | MS RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Private ETR RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | RTR RLOC Address 1 ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | RTR RLOC Address k ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI addresses that follows the UDP Port Number field including the AFI fields themselves. MS UDP Port Number: this is the UDP port number of the Map-Server and is set to 4342. ETR UDP Port Number: this is the port number returned to a LISP system which was copied from the source port from a packet that has flowed through a NAT device. AFI =3D x: x can be any AFI value from [AFI]. Global ETR RLOC Address: this is an address known to be globally unique built by NAT-traversal functionality in a LISP router. MS RLOC Address: this is the address of the Map-Server used in the destination RLOC of a packet that has flowed through a NAT device. Farinacci, et al. Expires July 11, 2013 [Page 13] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Private ETR RLOC Address: this is an address known to be a private address inserted in this LCAF format by a LISP router that resides on the private side of a NAT device. RTR RLOC Address: this is an encapsulation address used by an ITR or PITR which resides behind a NAT device. This address is known to have state in a NAT device so packets can flow from it to the LISP ETR behind the NAT. There can be one or more NTR addresses supplied in these set of fields. The number of NTRs encoded is determined by the LCAF length field. When there are no NTRs supplied, the NTR fields can be omitted and reflected by the LCAF length field or an AFI of 0 can be used to indicate zero NTRs encoded. 4.7. PETR Admission Control Functionality When a public PETR device wants to verify who is encapsulating to it, it can check for a specific nonce value in the LISP encapsulated packet. To convey the nonce to admitted ITRs or PITRs, this LCAF format is used in a Map-Register or Map-Reply locator-record. Farinacci, et al. Expires July 11, 2013 [Page 14] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Nonce Locator Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 8 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Nonce | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the Nonce field including the AFI field itself. Reserved: must be set to zero and ignore on receipt. Nonce: this is a nonce value returned by an ETR in a Map-Reply locator-record to be used by an ITR or PITR when encapsulating to the locator address encoded in the AFI field of this LCAF type. AFI =3D x: x can be any AFI value from [AFI]. Farinacci, et al. Expires July 11, 2013 [Page 15] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.8. Multicast Group Membership Information Multicast group information can be published in the mapping database so a lookup on an EID based group address can return a replication list of group addresses or a unicast addresses for single replication or multiple head-end replications. This LCAF encoding can be used to send broadcast packets to all members of a subnet when each EIDs are away from their home subnet location. Multicast Info Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 9 | Rsvd2 |R|L|J| 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Source MaskLen| Group MaskLen | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Source/Subnet Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Group Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. Reserved: must be set to zero and ignore on receipt. R-bit: this is the RP-bit that represents PIM (S,G,RP-bit) multicast state. This bit can be set for Joins (when the J-bit is set) or for Leaves (when the L-bit is set). See [LISP-MRSIG] for more usage details. L-bit: this is the Leave-Request bit and is used when this LCAF type is present in the destination EID-prefix field of a Map-Request. See [LISP-MRSIG] for details. J-bit: this is the Join-Request bit and is used when this LCAF type is present in the destination EID-prefix field of a Map-Request. See [LISP-MRSIG] for details. The J-bit MUST not be set when the L-bit is also set in the same LCAF block. A receiver should not take any specific Join or Leave action when both bits are set. Source MaskLen: the mask length of the source prefix that follows. Farinacci, et al. Expires July 11, 2013 [Page 16] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Group MaskLen: the mask length of the group prefix that follows. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. 4.9. Traffic Engineering using Re-encapsulating Tunnels For a given EID lookup into the mapping database, this LCAF format can be returned to provide a list of locators in an explicit re- encapsulation path. See [LISP-TE] for details. Farinacci, et al. Expires July 11, 2013 [Page 17] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Explicit Locator Path (ELP) Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 10 | Rsvd2 | n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Rsvd3 |L|P|S| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reencap Hop 1 ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Rsvd3 |L|P|S| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reencap Hop k ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. Lookup bit (L): this is the Lookup bit used to indicate to the user of the ELP to not use this address for encapsulation but to look it up in the mapping database system to obtain an encapsulating RLOC address. RLOC-Probe bit (P): this is the RLOC-probe bit which means the Reencap Hop allows RLOC-probe messages to be sent to it. When the R-bit is set to 0, RLOC-probes must not be sent. When a Reencap Hop is an anycast address then multiple physical Reencap Hops are using the same RLOC address. In this case, RLOC-probes are not needed because when the closest RLOC address is not reachable another RLOC address can reachable. Strict bit (S): this the strict bit which means the associated Rencap Hop is required to be used. If this bit is 0, the reencapsulator can skip this Reencap Hop and go to the next one in the list. Farinacci, et al. Expires July 11, 2013 [Page 18] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.10. Storing Security Data in the Mapping Database When a locator in a locator-set has a security key associated with it, this LCAF format will be used to encode key material. See [LISP-DDT] for details. Security Key Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 11 | Rsvd2 | 6 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Count | Rsvd3 | Key Algorithm | Rsvd4 |R| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Length | Key Material ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... Key Material | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Locator Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that start with the Key Material field. Key Count: the Key Count field declares the number of Key sections included in this LCAF. Key Algorithm: the Algorithm field identifies the key's cryptographic algorithm and specifies the format of the Public Key field. R bit: this is the revoke bit and, if set, it specifies that this Key is being Revoked. Key Length: this field determines the length in bytes of the Key Material field. Key Material: the Key Material field stores the key material. The format of the key material stored depends on the Key Algorithm field. AFI =3D x: x can be any AFI value from [AFI].This is the locator address that owns the encoded security key. Farinacci, et al. Expires July 11, 2013 [Page 19] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.11. Source/Destination 2-Tuple Lookups When both a source and destination address of a flow needs consideration for different locator-sets, this 2-tuple key is used in EID fields in LISP control messages. When the Source/Dest key is registered to the mapping database, it can be encoded as a source- prefix and destination-prefix. When the Source/Dest is used as a key for a mapping database lookup the source and destination come from a data packet. Source/Dest Key Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 12 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Source-ML | Dest-ML | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Source-Prefix ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Destination-Prefix ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. Reserved: must be set to zero and ignore on receipt. Source-ML: the mask length of the source prefix that follows. Dest-ML: the mask length of the destination prefix that follows. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. Refer to [LISP-TE] for usage details. Farinacci, et al. Expires July 11, 2013 [Page 20] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12. Applications for AFI List Type 4.12.1. Binding IPv4 and IPv6 Addresses When header translation between IPv4 and IPv6 is desirable a LISP Canonical Address can use the AFI List Type to carry multiple AFIs in one LCA AFI. Bounded Address LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + 4 + 2 + 16 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | AFI =3D 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 24 when IPv4 and IPv6 AFI encoded addresses are used. This type of address format can be included in a Map-Request when the address is being used as an EID, but the Mapping Database System lookup destination can use only the IPv4 address. This is so a Mapping Database Service Transport System, such as LISP-ALT [ALT], can use the Map-Request destination address to route the control message to the desired LISP site. Farinacci, et al. Expires July 11, 2013 [Page 21] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12.2. Layer-2 VPNs When MAC addresses are stored in the LISP Mapping Database System, the AFI List Type can be used to carry AFI 6. MAC Address LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + 6 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 6 | Layer-2 MAC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... Layer-2 MAC Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 8 when MAC address AFI encoded addresses are used. This address format can be used to connect layer-2 domains together using LISP over an IPv4 or IPv6 core network to create a layer-2 VPN. In this use-case, a MAC address is being used as an EID, and the locator-set that this EID maps to can be an IPv4 or IPv6 RLOCs, or even another MAC address being used as an RLOC. 4.12.3. ASCII Names in the Mapping Database If DNS names or URIs are stored in the LISP Mapping Database System, the AFI List Type can be used to carry an ASCII string where it is delimited by length 'n' of the LCAF Length encoding. ASCII LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 17 | DNS Name or URI ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Farinacci, et al. Expires July 11, 2013 [Page 22] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Length value n: length in bytes AFI=3D17 field and the = null-terminated ASCII string (the last byte of 0 is included). 4.12.4. Using Recursive LISP Canonical Address Encodings When any combination of above is desirable, the AFI List Type value can be used to carry within the LCA AFI another LCA AFI. Recursive LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 4 + 8 + 2 + 4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 4 | Rsvd2 | 12 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IP TOS, IPv6 QQS or Flow Label | Protocol | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Local Port | Remote Port | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 18 when an AFI=3D1 IPv4 address = is included. This format could be used by a Mapping Database Transport System, such as LISP-ALT [ALT], where the AFI=3D1 IPv4 address is used as an EID and placed in the Map-Request destination address by the sending LISP system. The ALT system can deliver the Map-Request to the LISP destination site independent of the Application Data Type AFI payload values. When this AFI is processed by the destination LISP site, it can return different locator-sets based on the type of application or level of service that is being requested. Farinacci, et al. Expires July 11, 2013 [Page 23] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12.5. Compatibility Mode Use Case A LISP system should use the AFI List Type format when sending to LISP systems that do not support a particular LCAF Type used to encode locators. This allows the receiving system to be able to parse a locator address for encapsulation purposes. The list of AFIs in an AFI List LCAF Type has no semantic ordering and a receiver should parse each AFI element no matter what the ordering. Compatibility Mode Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 22 + 6 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 5 | Rsvd2 | 12 + 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |N| Latitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |E| Longitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Altitude | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 0 | AFI =3D 1 = | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ If a system does not recognized the Geo Coordinate LCAF Type that is accompanying a locator address, an encoder can include the Geo Coordinate LCAF Type embedded in a AFI List LCAF Type where the AFI in the Geo Coordinate LCAF is set to 0 and the AFI encoded next in the list is encoded with a valid AFI value to identify the locator address. A LISP system is required to support the AFI List LCAF Type to use this procedure. It would skip over 10 bytes of the Geo Coordinate LCAF Type to get to the locator address encoding (an IPv4 locator address). A LISP system that does support the Geo Coordinate LCAF Type can support parsing the locator address within the Geo Coordinate LCAF encoding or in the locator encoding that follows in the AFI List LCAF. Farinacci, et al. Expires July 11, 2013 [Page 24] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 5. Security Considerations There are no security considerations for this specification. The security considerations are documented for the protocols that use LISP Canonical Addressing. Refer to the those relevant specifications. Farinacci, et al. Expires July 11, 2013 [Page 25] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 6. IANA Considerations The Address Family AFI definitions from [AFI] only allocate code- points for the AFI value itself. The length of the address or entity that follows is not defined and is implied based on conventional experience. Where the LISP protocol uses LISP Canonical Addresses specifically, the address length definitions will be in this specification and take precedent over any other specification. An IANA Registry for LCAF Type values will be created. The values that are considered for use by the main LISP specification [LISP] will be in the IANA Registry. Other Type values used for experimentation will be defined and described in this document. Farinacci, et al. Expires July 11, 2013 [Page 26] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 7. References 7.1. Normative References [RFC1700] Reynolds, J. and J. Postel, "Assigned Numbers", RFC 1700, October 1994. [RFC1918] Rekhter, Y., Moskowitz, R., Karrenberg, D., Groot, G., and E. Lear, "Address Allocation for Private Internets", BCP 5, RFC 1918, February 1996. 7.2. Informative References [AFI] IANA, "Address Family Identifier (AFIs)", ADDRESS FAMILY NUMBERS http://www.iana.org/numbers.html, Febuary 2007. [ALT] Fuller, V., Farinacci, D., Meyer, D., and D. Lewis, "LISP Alternative Topology (LISP+ALT)", draft-ietf-lisp-alt-06.txt (work in progress), March 2011. [LISP] Farinacci, D., Fuller, V., Meyer, D., and D. Lewis, "Locator/ID Separation Protocol (LISP)", draft-ietf-lisp-12.txt (work in progress), April 2011. [LISP-DDT] Fuller, V., Lewis, D., and V. Ermagan, "LISP Delegated Database Tree", draft-fuller-lisp-ddt-01.txt (work in progress). [LISP-MRSIG] Farinacci, D. and M. Napierala, "LISP Control-Plane Multicast Signaling", draft-farinacci-lisp-mr-signaling-00.txt (work in progress). [LISP-NATT] Ermagan, V., Farinacci, D., Lewis, D., Skriver, J., Maino, F., and C. White, "NAT traversal for LISP", draft-ermagan-lisp-nat-traversal-00.txt (work in progress). [LISP-TE] Farinacci, D., Lahiri, P., and M. Kowal, "LISP Traffic Engineering Use-Cases", draft-farinacci-lisp-te-01.txt (work in progress). Farinacci, et al. Expires July 11, 2013 [Page 27] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Appendix A. Acknowledgments The authors would like to thank Vince Fuller, Gregg Schudel, Jesper Skriver, Luigi Iannone, and Isidor Kouvelas for their technical and editorial commentary. The authors would like to thank Victor Moreno for discussions that lead to the definition of the Multicast Info LCAF type. The authors would like to thank Parantap Lahiri and Michael Kowal for discussions that lead to the definition of the Explicit Locator Path (ELP) LCAF type. The authors would like to thank Fabio Maino and Vina Ermagan for discussions that lead to the definition of the Security Key LCAF type. Thanks also goes to Terry Manderson for assistance obtaining a LISP AFI value from IANA. Farinacci, et al. Expires July 11, 2013 [Page 28] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Appendix B. Document Change Log B.1. Changes to draft-ietf-lisp-01.txt o Submitted January 2013. o Change longitude and latitude range from 0-90 to 0-180 in section 4.4. B.2. Changes to draft-ietf-lisp-00.txt o Posted first working group draft August 2012. o This draft was renamed from draft-farinacci-lisp-lcaf-10.txt. Farinacci, et al. Expires July 11, 2013 [Page 29] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Authors' Addresses Dino Farinacci cisco Systems Tasman Drive San Jose, CA 95134 USA Email: farinacci@gmail.com Dave Meyer cisco Systems 170 Tasman Drive San Jose, CA USA Email: dmm@cisco.com Job Snijders InTouch N.V. Middenweg 76 1097 BS Amsterdam The Netherlands Email: job@instituut.net Farinacci, et al. Expires July 11, 2013 [Page 30] =0C --Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE Content-Disposition: attachment; filename=rfcdiff-lisp-lcaf-00-to-01.html Content-Type: text/html; name="rfcdiff-lisp-lcaf-00-to-01.html" Content-Transfer-Encoding: 7bit wdiff draft-ietf-lisp-lcaf-00.txt draft-ietf-lisp-lcaf-01.txt 
Network Working Group                                       D. Farinacci
Internet-Draft                                                  D. Meyer
Intended status: Experimental                              cisco Systems
Expires: March 3, July 11, 2013                                       J. Snijders
                                                            InTouch N.V.
                                                         August 30, 2012
                                                         January 7, 2013

                  LISP Canonical Address Format (LCAF)
                        draft-ietf-lisp-lcaf-00
                        draft-ietf-lisp-lcaf-01

Abstract

   This draft defines a canonical address format encoding used in LISP
   control messages and in the encoding of lookup keys for the LISP
   Mapping Database System.

Status of this Memo

   This Internet-Draft is submitted to IETF in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF). (IETF), its areas, and its working groups.  Note that
   other groups may also distribute working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.
   Drafts.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   The list of current Internet-Drafts can be accessed at
   http://www.ietf.org/ietf/1id-abstracts.txt.

   The list of Internet-Draft Shadow Directories can be accessed at
   http://www.ietf.org/shadow.html.

   This Internet-Draft will expire on March 3, July 11, 2013.

Copyright Notice

   Copyright (c) 2012 2013 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  3
   2.  Definition of Terms  . . . . . . . . . . . . . . . . . . . . .  4
   3.  LISP Canonical Address Format Encodings  . . . . . . . . . . .  5
   4.  LISP Canonical Address Applications  . . . . . . . . . . . . .  7
     4.1.  Segmentation using LISP  . . . . . . . . . . . . . . . . .  7
     4.2.  Carrying AS Numbers in the Mapping Database  . . . . . . .  8
     4.3.  Convey Application Specific Data . . . . . . . . . . . . .  9
     4.4.  Assigning Geo Coordinates to Locator Addresses . . . . . . 10
     4.5.  Generic Database Mapping Lookups . . . . . . . . . . . . . 11
     4.6.  NAT Traversal Scenarios  . . . . . . . . . . . . . . . . . 13
     4.7.  PETR Admission Control Functionality . . . . . . . . . . . 14
     4.8.  Multicast Group Membership Information . . . . . . . . . . 16
     4.9.  Traffic Engineering using Re-encapsulating Tunnels . . . . 17
     4.10. Storing Security Data in the Mapping Database  . . . . . . 19
     4.11. Source/Destination 2-Tuple Lookups . . . . . . . . . . . . 20
     4.12. Applications for AFI List Type . . . . . . . . . . . . . . 21
       4.12.1.  Binding IPv4 and IPv6 Addresses . . . . . . . . . . . 21
       4.12.2.  Layer-2 VPNs  . . . . . . . . . . . . . . . . . . . . 22
       4.12.3.  ASCII Names in the Mapping Database . . . . . . . . . 22
       4.12.4.  Using Recursive LISP Canonical Address Encodings  . . 23
       4.12.5.  Compatibility Mode Use Case . . . . . . . . . . . . . 24
   5.  Security Considerations  . . . . . . . . . . . . . . . . . . . 25
   6.  IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 26
   7.  References . . . . . . . . . . . . . . . . . . . . . . . . . . 27
     7.1.  Normative References . . . . . . . . . . . . . . . . . . . 27
     7.2.  Informative References . . . . . . . . . . . . . . . . . . 27
   Appendix A.  Acknowledgments . . . . . . . . . . . . . . . . . . . 28
   Appendix B.  Document Change Log . . . . . . . . . . . . . . . . . 29
     B.1.  Changes to draft-ietf-lisp-01.txt  . . . . . . . . . . . . 29
     B.2.  Changes to draft-ietf-lisp-00.txt  . . . . . . . . . . . . 29
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 30

1.  Introduction

   The LISP architecture and protocols [LISP] introduces two new
   numbering spaces, Endpoint Identifiers (EIDs) and Routing Locators
   (RLOCs) which are intended to replace most use of IP addresses on the
   Internet.  To provide flexibility for current and future
   applications, these values can be encoded in LISP control messages
   using a general syntax that includes Address Family Identifier (AFI),
   length, and value fields.

   Currently defined AFIs include IPv4 and IPv6 addresses, which are
   formatted according to code-points assigned in [AFI] as follows:

   IPv4 Encoded Address:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   IPv6 Encoded Address:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 2            |       IPv6 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv6 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   This document describes the currently-defined AFIs the LISP protocol
   uses along with their encodings and introduces the LISP Canonical
   Address Format (LCAF) that can be used to define the LISP-specific
   encodings for arbitrary AFI values.

2.  Definition of Terms

   Address Family Identifier (AFI):  a term used to describe an address
      encoding in a packet.  An address family currently defined for
      IPv4 or IPv6 addresses.  See [AFI] and [RFC1700] for details.  The
      reserved AFI value of 0 is used in this specification to indicate
      an unspecified encoded address where the the length of the address
      is 0 bytes following the 16-bit AFI value of 0.

   Unspecified Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 0            |    <nothing follows AFI=0>    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Endpoint ID (EID):   a 32-bit (for IPv4) or 128-bit (for IPv6) value
      used in the source and destination address fields of the first
      (most inner) LISP header of a packet.  The host obtains a
      destination EID the same way it obtains a destination address
      today, for example through a DNS lookup or SIP exchange.  The
      source EID is obtained via existing mechanisms used to set a
      host's "local" IP address.  An EID is allocated to a host from an
      EID-prefix block associated with the site where the host is
      located.  An EID can be used by a host to refer to other hosts.

   Routing Locator (RLOC):   the IPv4 or IPv6 address of an egress
      tunnel router (ETR).  It is the output of a EID-to-RLOC mapping
      lookup.  An EID maps to one or more RLOCs.  Typically, RLOCs are
      numbered from topologically aggregatable blocks that are assigned
      to a site at each point to which it attaches to the global
      Internet; where the topology is defined by the connectivity of
      provider networks, RLOCs can be thought of as PA addresses.
      Multiple RLOCs can be assigned to the same ETR device or to
      multiple ETR devices at a site.

3.  LISP Canonical Address Format Encodings

   IANA has assigned AFI value 16387 (0x4003) to the LISP architecture
   and protocols.  This specification defines the encoding format of the
   LISP Canonical Address (LCA).

   The first 4 bytes of an LISP Canonical Address are followed by a
   variable length of fields:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |    Type       |     Rsvd2     |            Length             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Rsvd1:  this 8-bit field is reserved for future use and MUST be
      transmitted as 0 and ignored on receipt.

   Flags:  this 8-bit field is for future definition and use.  For now,
      set to zero on transmission and ignored on receipt.

   Type:  this 8-bit field is specific to the LISP Canonical Address
      formatted encodings, values are:

     Type 0:  Null Body Type

     Type 1:  AFI List Type

     Type 2:  Instance ID Type

     Type 3:  AS Number Type

     Type 4:  Application Data Type

     Type 5:  Geo Coordinates Type

     Type 6:  Opaque Key Type

     Type 7:  NAT-Traversal Type

     Type 8:  Nonce Locator Type

     Type 9:  Multicast Info Type
     Type 10:  Explicit Locator Path Type

     Type 11:  Security Key Type

     Type 12:  Source/Dest Key Type

   Rsvd2:  this 8-bit field is reserved for future use and MUST be
      transmitted as 0 and ignored on receipt.

   Length:  this 16-bit field is in units of bytes and covers all of the
      LISP Canonical Address payload, starting and including the byte
      after the Length field.  So any LCAF encoded address will have a
      minimum length of 8 bytes when the Length field is 0.  The 8 bytes
      include the AFI, Flags, Type, Reserved, and Length fields.  When
      the AFI is not next to encoded address in a control message, then
      the encoded address will have a minimum length of 6 bytes when the
      Length field is 0.  The 6 bytes include the Flags, Type, Reserved,
      and Length fields.

4.  LISP Canonical Address Applications

4.1.  Segmentation using LISP

   When multiple organizations inside of a LISP site are using private
   addresses [RFC1918] as EID-prefixes, their address spaces must remain
   segregated due to possible address duplication.  An Instance ID in
   the address encoding can aid in making the entire AFI based address
   unique.

   Another use for the Instance ID LISP Canonical Address Format is when
   creating multiple segmented VPNs inside of a LISP site where keeping
   EID-prefix based subnets is desirable.

   Instance ID LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 2    | IID mask-len  |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Instance ID                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   IID mask-len:  if the AFI is set to 0, then this format is not
      encoding an extended EID-prefix but rather an instance-ID range
      where the 'IID mask-len' indicates the number of high-order bits
      used in the Instance ID field for the range.

   Length value n:  length in bytes of the AFI address that follows the
      Instance ID field including the AFI field itself.

   Instance ID:  the low-order 24-bits that can go into a LISP data
      header when the I-bit is set.  See [LISP] for details.

   AFI = x:  x can be any AFI value from [AFI].

   This LISP Canonical Address Type can be used to encode either EID or
   RLOC addresses.

4.2.  Carrying AS Numbers in the Mapping Database

   When an AS number is stored in the LISP Mapping Database System for
   either policy or documentation reasons, it can be encoded in a LISP
   Canonical Address.

   AS Number LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 3    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                           AS Number                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      AS Number field including the AFI field itself.

   AS Number:  the 32-bit AS number of the autonomous system that has
      been assigned either the EID or RLOC that follows.

   AFI = x:  x can be any AFI value from [AFI].

   The AS Number Canonical Address Type can be used to encode either EID
   or RLOC addresses.  The former is used to describe the LISP-ALT AS
   number the EID-prefix for the site is being carried for.  The latter
   is used to describe the AS that is carrying RLOC based prefixes in
   the underlying routing system.

4.3.  Convey Application Specific Data

   When a locator-set needs to be conveyed based on the type of
   application or the Per-Hop Behavior (PHB) of a packet, the
   Application Data Type can be used.

   Application Data LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 4    |     Rsvd2     |             8 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |       IP TOS, IPv6 TC, or Flow Label          |    Protocol   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Local Port          |         Remote Port           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      8-byte Application Data fields including the AFI field itself.

   IP TOS, IPv6 TC, or Flow Label:  this field stores the 8-bit IPv4 TOS
      field used in an IPv4 header, the 8-bit IPv6 Traffic Class or Flow
      Label used in an IPv6 header.

   Local Port/Remote Port:  these fields are from the TCP, UDP, or SCTP
      transport header.

   AFI = x:  x can be any AFI value from [AFI].

   The Application Data Canonical Address Type is used for an EID
   encoding when an ITR wants a locator-set for a specific application.
   When used for an RLOC encoding, the ETR is supplying a locator-set
   for each specific application is has been configured to advertise.

4.4.  Assigning Geo Coordinates to Locator Addresses

   If an ETR desires to send a Map-Reply describing the Geo Coordinates
   for each locator in its locator-set, it can use the Geo Coordinate
   Type to convey physical location information.

   Geo Coordinate LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 5    |     Rsvd2     |            12 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |N|     Latitude Degrees        |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |E|     Longitude Degrees       |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                            Altitude                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      8-byte Longitude and Latitude fields including the AFI field
      itself.

   N: When set to 1 means North, otherwise South.

   Latitude Degrees:  Valid values range from 0 to 90. 180. degrees above or
      below the equator (northern or southern hemisphere, respectively).

   Latitude Minutes:  Valid values range from 0 to 59.

   Latitude Seconds:  Valid values range from 0 to 59.

   E: When set to 1 means East, otherwise West.

   Longitude Degrees:  Value values are from 0 to 90 180 degrees right or
      left of the Prime Meridian.

   Longitude Minutes:  Valid values range from 0 to 59.

   Longitude Seconds:  Valid values range from 0 to 59.

   Altitude:  Height relative to sea level in meters.  This is a signed
      integer meaning that the altitude could be below sea level.  A
      value of 0x7fffffff indicates no Altitude value is encoded.

   AFI = x:  x can be any AFI value from [AFI].

   The Geo Coordinates Canonical Address Type can be used to encode
   either EID or RLOC addresses.  When used for EID encodings, you can
   determine the physical location of an EID along with the topological
   location by observing the locator-set.

4.5.  Generic Database Mapping Lookups

   When the LISP Mapping Database system holds information accessed by a
   generic formatted key (where the key is not the usual IPv4 or IPv6
   address), an opaque key may be desirable.

   Opaque Key LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 6    |     Rsvd2     |               n               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    | Key Field Num |      Key Wildcard Fields      |   Key . . .   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                       . . . Key                               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the type's payload.  The value n
      is the number of bytes that follow this Length field.

   Key Field Num:  the number of fields (minus 1) the key can be broken
      up into.  The width of the fields are fixed length.  So for a key
      size of 8 bytes, with a Key Field Num of 4 allows 4 fields of 2
      bytes in length.  Valid values for this field range from 0 to 15
      supporting a maximum of 16 field separations.

   Key Wildcard Fields:  describes which fields in the key are not used
      as part of the key lookup.  This wildcard encoding is a bitfield.
      Each bit is a don't-care bit for a corresponding field in the key.
      Bit 0 (the low-order bit) in this bitfield corresponds the first
      field, right-justified in the key, bit 1 the second field, and so
      on.  When a bit is set in the bitfield it is a don't-care bit and
      should not be considered as part of the database lookup.  When the
      entire 16-bits is set to 0, then all bits of the key are used for
      the database lookup.

   Key:  the variable length key used to do a LISP Database Mapping
      lookup.  The length of the key is the value n (shown above) minus
      3.

4.6.  NAT Traversal Scenarios

   When a LISP system is conveying global address and mapped port
   information when traversing through a NAT device, the NAT-Traversal
   LCAF Type is used.  See [LISP-NATT] for details.

   NAT-Traversal Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 7    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |       MS UDP Port Number      |      ETR UDP Port Number      |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |  Global ETR RLOC Address  ... |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       MS RLOC Address  ...    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          | Private ETR RLOC Address  ... |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |      RTR RLOC Address 1 ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |      RTR RLOC Address k ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI addresses that follows
      the UDP Port Number field including the AFI fields themselves.

   MS UDP Port Number:  this is the UDP port number of the Map-Server
      and is set to 4342.

   ETR UDP Port Number:  this is the port number returned to a LISP
      system which was copied from the source port from a packet that
      has flowed through a NAT device.

   AFI = x:  x can be any AFI value from [AFI].

   Global ETR RLOC Address:  this is an address known to be globally
      unique built by NAT-traversal functionality in a LISP router.

   MS RLOC Address:  this is the address of the Map-Server used in the
      destination RLOC of a packet that has flowed through a NAT device.

   Private ETR RLOC Address:  this is an address known to be a private
      address inserted in this LCAF format by a LISP router that resides
      on the private side of a NAT device.

   RTR RLOC Address:  this is an encapsulation address used by an ITR or
      PITR which resides behind a NAT device.  This address is known to
      have state in a NAT device so packets can flow from it to the LISP
      ETR behind the NAT.  There can be one or more NTR addresses
      supplied in these set of fields.  The number of NTRs encoded is
      determined by the LCAF length field.  When there are no NTRs
      supplied, the NTR fields can be omitted and reflected by the LCAF
      length field or an AFI of 0 can be used to indicate zero NTRs
      encoded.

4.7.  PETR Admission Control Functionality

   When a public PETR device wants to verify who is encapsulating to it,
   it can check for a specific nonce value in the LISP encapsulated
   packet.  To convey the nonce to admitted ITRs or PITRs, this LCAF
   format is used in a Map-Register or Map-Reply locator-record.

   Nonce Locator Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 8    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Reserved    |                  Nonce                        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      Nonce field including the AFI field itself.

   Reserved:  must be set to zero and ignore on receipt.

   Nonce:  this is a nonce value returned by an ETR in a Map-Reply
      locator-record to be used by an ITR or PITR when encapsulating to
      the locator address encoded in the AFI field of this LCAF type.

   AFI = x:  x can be any AFI value from [AFI].

4.8.  Multicast Group Membership Information

   Multicast group information can be published in the mapping database
   so a lookup on an EID based group address can return a replication
   list of group addresses or a unicast addresses for single replication
   or multiple head-end replications.  This LCAF encoding can be used to
   send broadcast packets to all members of a subnet when each EIDs are
   away from their home subnet location.

   Multicast Info Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 9    |  Rsvd2  |R|L|J|             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            Reserved           | Source MaskLen| Group MaskLen |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |   Source/Subnet Address  ...  |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       Group Address  ...      |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   Reserved:  must be set to zero and ignore on receipt.

   R-bit:  this is the RP-bit that represents PIM (S,G,RP-bit) multicast
      state.  This bit can be set for Joins (when the J-bit is set) or
      for Leaves (when the L-bit is set).  See [LISP-MRSIG] for more
      usage details.

   L-bit:  this is the Leave-Request bit and is used when this LCAF type
      is present in the destination EID-prefix field of a Map-Request.
      See [LISP-MRSIG] for details.

   J-bit:  this is the Join-Request bit and is used when this LCAF type
      is present in the destination EID-prefix field of a Map-Request.
      See [LISP-MRSIG] for details.  The J-bit MUST not be set when the
      L-bit is also set in the same LCAF block.  A receiver should not
      take any specific Join or Leave action when both bits are set.

   Source MaskLen:  the mask length of the source prefix that follows.

   Group MaskLen:  the mask length of the group prefix that follows.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

4.9.  Traffic Engineering using Re-encapsulating Tunnels

   For a given EID lookup into the mapping database, this LCAF format
   can be returned to provide a list of locators in an explicit re-
   encapsulation path.  See [LISP-TE] for details.

   Explicit Locator Path (ELP) Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 10   |     Rsvd2     |               n               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |           Rsvd3         |L|P|S|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Reencap Hop 1  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |           Rsvd3         |L|P|S|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Reencap Hop k  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

   Lookup bit (L):  this is the Lookup bit used to indicate to the user
      of the ELP to not use this address for encapsulation but to look
      it up in the mapping database system to obtain an encapsulating
      RLOC address.

   RLOC-Probe bit (P):  this is the RLOC-probe bit which means the
      Reencap Hop allows RLOC-probe messages to be sent to it.  When the
      R-bit is set to 0, RLOC-probes must not be sent.  When a Reencap
      Hop is an anycast address then multiple physical Reencap Hops are
      using the same RLOC address.  In this case, RLOC-probes are not
      needed because when the closest RLOC address is not reachable
      another RLOC address can reachable.

   Strict bit (S):  this the strict bit which means the associated
      Rencap Hop is required to be used.  If this bit is 0, the
      reencapsulator can skip this Reencap Hop and go to the next one in
      the list.

4.10.  Storing Security Data in the Mapping Database

   When a locator in a locator-set has a security key associated with
   it, this LCAF format will be used to encode key material.  See
   [LISP-DDT] for details.

   Security Key Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 11   |      Rsvd2    |             6 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Key Count   |      Rsvd3    | Key Algorithm |   Rsvd4     |R|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Key Length          |       Key Material ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                        ... Key Material                       |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       Locator Address ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that start with the Key
      Material field.

   Key Count:  the Key Count field declares the number of Key sections
      included in this LCAF.

   Key Algorithm:  the Algorithm field identifies the key's
      cryptographic algorithm and specifies the format of the Public Key
      field.

   R bit:  this is the revoke bit and, if set, it specifies that this
      Key is being Revoked.

   Key Length:  this field determines the length in bytes of the Key
      Material field.

   Key Material:  the Key Material field stores the key material.  The
      format of the key material stored depends on the Key Algorithm
      field.

   AFI = x:  x can be any AFI value from [AFI].This is the locator
      address that owns the encoded security key.

4.11.  Source/Destination 2-Tuple Lookups

   When both a source and destination address of a flow needs
   consideration for different locator-sets, this 2-tuple key is used in
   EID fields in LISP control messages.  When the Source/Dest key is
   registered to the mapping database, it can be encoded as a source-
   prefix and destination-prefix.  When the Source/Dest is used as a key
   for a mapping database lookup the source and destination come from a
   data packet.

   Source/Dest Key Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 12   |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            Reserved           |   Source-ML   |    Dest-ML    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Source-Prefix ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |     Destination-Prefix ...    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   Reserved:  must be set to zero and ignore on receipt.

   Source-ML:  the mask length of the source prefix that follows.

   Dest-ML:  the mask length of the destination prefix that follows.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

   Refer to [LISP-TE] for usage details.

4.12.  Applications for AFI List Type

4.12.1.  Binding IPv4 and IPv6 Addresses

   When header translation between IPv4 and IPv6 is desirable a LISP
   Canonical Address can use the AFI List Type to carry multiple AFIs in
   one LCA AFI.

   Bounded Address LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |         2 + 4 + 2 + 16        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |            AFI = 2            |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                          IPv6 Address ...                     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address                         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 24 when IPv4 and IPv6 AFI
      encoded addresses are used.

   This type of address format can be included in a Map-Request when the
   address is being used as an EID, but the Mapping Database System
   lookup destination can use only the IPv4 address.  This is so a
   Mapping Database Service Transport System, such as LISP-ALT [ALT],
   can use the Map-Request destination address to route the control
   message to the desired LISP site.

4.12.2.  Layer-2 VPNs

   When MAC addresses are stored in the LISP Mapping Database System,
   the AFI List Type can be used to carry AFI 6.

   MAC Address LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |             2 + 6             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |             AFI = 6           |    Layer-2 MAC Address  ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                    ... Layer-2 MAC Address                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 8 when MAC address AFI encoded
      addresses are used.

   This address format can be used to connect layer-2 domains together
   using LISP over an IPv4 or IPv6 core network to create a layer-2 VPN.
   In this use-case, a MAC address is being used as an EID, and the
   locator-set that this EID maps to can be an IPv4 or IPv6 RLOCs, or
   even another MAC address being used as an RLOC.

4.12.3.  ASCII Names in the Mapping Database

   If DNS names or URIs are stored in the LISP Mapping Database System,
   the AFI List Type can be used to carry an ASCII string where it is
   delimited by length 'n' of the LCAF Length encoding.

   ASCII LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |             2 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |             AFI = 17          |      DNS Name or URI  ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes AFI=17 field and the null-terminated
      ASCII string (the last byte of 0 is included).

4.12.4.  Using Recursive LISP Canonical Address Encodings

   When any combination of above is desirable, the AFI List Type value
   can be used to carry within the LCA AFI another LCA AFI.

   Recursive LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |         4 + 8 + 2 + 4         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 4    |     Rsvd2     |              12               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   IP TOS, IPv6 QQS or Flow Label              |    Protocol   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Local Port          |         Remote Port           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 18 when an AFI=1 IPv4 address is
      included.

   This format could be used by a Mapping Database Transport System,
   such as LISP-ALT [ALT], where the AFI=1 IPv4 address is used as an
   EID and placed in the Map-Request destination address by the sending
   LISP system.  The ALT system can deliver the Map-Request to the LISP
   destination site independent of the Application Data Type AFI payload
   values.  When this AFI is processed by the destination LISP site, it
   can return different locator-sets based on the type of application or
   level of service that is being requested.

4.12.5.  Compatibility Mode Use Case

   A LISP system should use the AFI List Type format when sending to
   LISP systems that do not support a particular LCAF Type used to
   encode locators.  This allows the receiving system to be able to
   parse a locator address for encapsulation purposes.  The list of AFIs
   in an AFI List LCAF Type has no semantic ordering and a receiver
   should parse each AFI element no matter what the ordering.

   Compatibility Mode Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |            22 + 6             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 5    |     Rsvd2     |            12 + 2             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |N|     Latitude Degrees        |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |E|     Longitude Degrees       |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                            Altitude                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = 0          |           AFI = 1             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                          IPv4 Address                         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   If a system does not recognized the Geo Coordinate LCAF Type that is
   accompanying a locator address, an encoder can include the Geo
   Coordinate LCAF Type embedded in a AFI List LCAF Type where the AFI
   in the Geo Coordinate LCAF is set to 0 and the AFI encoded next in
   the list is encoded with a valid AFI value to identify the locator
   address.

   A LISP system is required to support the AFI List LCAF Type to use
   this procedure.  It would skip over 10 bytes of the Geo Coordinate
   LCAF Type to get to the locator address encoding (an IPv4 locator
   address).  A LISP system that does support the Geo Coordinate LCAF
   Type can support parsing the locator address within the Geo
   Coordinate LCAF encoding or in the locator encoding that follows in
   the AFI List LCAF.

5.  Security Considerations

   There are no security considerations for this specification.  The
   security considerations are documented for the protocols that use
   LISP Canonical Addressing.  Refer to the those relevant
   specifications.

6.  IANA Considerations

   The Address Family AFI definitions from [AFI] only allocate code-
   points for the AFI value itself.  The length of the address or entity
   that follows is not defined and is implied based on conventional
   experience.  Where the LISP protocol uses LISP Canonical Addresses
   specifically, the address length definitions will be in this
   specification and take precedent over any other specification.

   An IANA Registry for LCAF Type values will be created.  The values
   that are considered for use by the main LISP specification [LISP]
   will be in the IANA Registry.  Other Type values used for
   experimentation will be defined and described in this document.

7.  References

7.1.  Normative References

   [RFC1700]  Reynolds, J. and J. Postel, "Assigned Numbers", RFC 1700,
              October 1994.

   [RFC1918]  Rekhter, Y., Moskowitz, R., Karrenberg, D., Groot, G., and
              E. Lear, "Address Allocation for Private Internets",
              BCP 5, RFC 1918, February 1996.

7.2.  Informative References

   [AFI]      IANA, "Address Family Identifier (AFIs)", ADDRESS FAMILY
              NUMBERS http://www.iana.org/numbers.html, Febuary 2007.

   [ALT]      Fuller, V., Farinacci, D., Meyer, D., and D. Lewis, "LISP
              Alternative Topology (LISP+ALT)",
              draft-ietf-lisp-alt-06.txt (work in progress), March 2011.

   [LISP]     Farinacci, D., Fuller, V., Meyer, D., and D. Lewis,
              "Locator/ID Separation Protocol (LISP)",
              draft-ietf-lisp-12.txt (work in progress), April 2011.

   [LISP-DDT]
              Fuller, V., Lewis, D., and V. Ermagan, "LISP Delegated
              Database Tree", draft-fuller-lisp-ddt-01.txt (work in
              progress).

   [LISP-MRSIG]
              Farinacci, D. and M. Napierala, "LISP Control-Plane
              Multicast Signaling",
              draft-farinacci-lisp-mr-signaling-00.txt (work in
              progress).

   [LISP-NATT]
              Ermagan, V., Farinacci, D., Lewis, D., Skriver, J., Maino,
              F., and C. White, "NAT traversal for LISP",
              draft-ermagan-lisp-nat-traversal-00.txt (work in
              progress).

   [LISP-TE]  Farinacci, D., Lahiri, P., and M. Kowal, "LISP Traffic
              Engineering Use-Cases", draft-farinacci-lisp-te-01.txt
              (work in progress).

Appendix A.  Acknowledgments

   The authors would like to thank Vince Fuller, Gregg Schudel, Jesper
   Skriver, Luigi Iannone, and Isidor Kouvelas for their technical and
   editorial commentary.

   The authors would like to thank Victor Moreno for discussions that
   lead to the definition of the Multicast Info LCAF type.

   The authors would like to thank Parantap Lahiri and Michael Kowal for
   discussions that lead to the definition of the Explicit Locator Path
   (ELP) LCAF type.

   The authors would like to thank Fabio Maino and Vina Ermagan for
   discussions that lead to the definition of the Security Key LCAF
   type.

   Thanks also goes to Terry Manderson for assistance obtaining a LISP
   AFI value from IANA.

Appendix B.  Document Change Log

B.1.  Changes to draft-ietf-lisp-01.txt

   o  Submitted January 2013.

   o  Change longitude and latitude range from 0-90 to 0-180 in section
      4.4.

B.2.  Changes to draft-ietf-lisp-00.txt

   o  Posted first working group draft August 2012.

   o  This draft was renamed from draft-farinacci-lisp-lcaf-10.txt.

Authors' Addresses

   Dino Farinacci
   cisco Systems
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dino@cisco.com farinacci@gmail.com

   Dave Meyer
   cisco Systems
   170 Tasman Drive
   San Jose, CA
   USA

   Email: dmm@cisco.com

   Job Snijders
   InTouch N.V.
   Middenweg 76
   1097 BS Amsterdam
   The Netherlands

   Email: job@instituut.net
--Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_09457C0C-DED5-4201-AE76-4124FD12C5BE-- From farinacci@gmail.com Mon Jan 7 15:49:00 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB5EB1F0CB3 for ; Mon, 7 Jan 2013 15:49:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.184 X-Spam-Level: X-Spam-Status: No, score=-1.184 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_COMMENT_SAVED_URL=0.114, HTML_MESSAGE=0.001, MANGLED_LIPS=2.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SY9EEdqL81XZ for ; Mon, 7 Jan 2013 15:48:55 -0800 (PST) Received: from mail-pa0-f45.google.com (mail-pa0-f45.google.com [209.85.220.45]) by ietfa.amsl.com (Postfix) with ESMTP id 794501F0C5F for ; Mon, 7 Jan 2013 15:48:54 -0800 (PST) Received: by mail-pa0-f45.google.com with SMTP id bg2so11002773pad.4 for ; Mon, 07 Jan 2013 15:48:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:content-type:subject:message-id:date:to :mime-version:x-mailer; bh=MTyV9hStxnSbqr3Q8TXcsX2ctm+bm716g4fY/eDeazw=; b=MKfShdnq0ILLSFFDq1539jO98BPPZvTaSVWGAY3wNNSawTM/wcPSO6nRLi/5tNkwSc KW19FCF+QghitMVBxP4wmjjvEtQ4OmFRSd5rxxcjAGVvAzUBhdbgvgLg3mC6CATPcQDb mM/KjUgol+rvlxZN7TqqTcrWv2y3OOxef59rtqItweWTK4CZxzWrvRV1Hg9tTRUHS1GH fM/x2DtmrosLs7rj+L2XVfgwEnKXYZENqUvpKfskeZse8J2qdDyFtX60jN40Vyq643ao IViwIOVW27u6hS6JXHkzvByMIO/bF7pVv90gsHOR0/LP/Juau/9RalP35j/jX3ijSJJw 7fsw== X-Received: by 10.68.197.9 with SMTP id iq9mr189367533pbc.130.1357602534156; Mon, 07 Jan 2013 15:48:54 -0800 (PST) Received: from [192.168.1.7] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id pu5sm38420899pbb.73.2013.01.07.15.48.51 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 15:48:52 -0800 (PST) From: Dino Farinacci Content-Type: multipart/mixed; boundary="Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D" Message-Id: Date: Mon, 7 Jan 2013 15:48:51 -0800 To: "lisp@ietf.org list" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [lisp] Update to draft-ietf-lisp-lcaf-01 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 23:49:00 -0000 --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii After additional exchanges with Sander privately, here are more trivial = changes. Dino --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Disposition: inline; filename=PastedGraphic-43.png Content-Type: image/png; name="PastedGraphic-43.png" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAlkAAAB7CAYAAABHA5VTAAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2d lndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji 1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE 9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX 5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjASh XJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHim Z+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW 5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TM zAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRo dV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9k ciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQ OBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhH wsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQ DqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJ NhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/B c/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7Y QbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxF QtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6f J18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIl pSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyT jLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uu q43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoL tQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+ 41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIud Ft0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtO u8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrP C16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARG BFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJF REPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH 4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN 8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqw K10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTk muRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99u it7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/nd zPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqv akfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/ Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4 H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9 jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3R B6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0 RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/syOll+AABAAElEQVR4 AexdBWBUxxY9cSEhQIgTIASCJLi7u2txrdBCCxSKlFJKS6Et7u7u7u6QECyEAEEiEHcluv/eCW+7 CQkkbSjld4bf7O4bPzNv5sy5972vpaIAGSQCEgGJgERAIiARkAhIBPIVAe18LU0WJhGQCEgEJAIS AYmAREAiIBCQJEtOBImAREAiIBGQCEgEJALvAQFJst4DqLJIiYBEQCIgEZAISAQkApJkyTkgEZAI SAQkAhIBiYBE4D0gIEnWewBVFikRkAhIBCQCEgGJgERAkiw5ByQCEgGJgERAIiARkAi8BwQkyXoP oMoiJQISAYmAREAiIBGQCEiSJeeAREAiIBGQCEgEJAISgfeAgO57KPONIhMTE2FkZPTG9Q91ITk5 GY8fP4a5uTlsbGw+VDP+L+pNSk3C80gfJKclo6ixOWwL2uZ7v4JigxASH4rChoVgX8g+X8vf92A/ DHQN0M6pbb6Wq1lYYGwgQuPDUMSoMIqZFdOMyvF7SlqKwDUxNRFFjcxhZ2b3Rlp+j/Buzz0wMzRD q9It34j/Jy7EJsVCV1sXRnrZ399pqjRwmkI0djJIBCQCEoH/GgJa2b3xPSYmBmfOnEF6ejqYkOjp 6cHR0RFVq1bNNT6vXr3CmjVrsGfPHlhbW2PLli3Q0tLKdf78SBgQEIBjx47B398f5cuXh5mZGZo0 aYKIiAj0798fxYoVw8aNG/Ojqn9lGefOnUPZsmVha5v/xEfp8MGHh9B5R1+ANvyeFTphZ6+tStTf /kxXpWP6+RmY7bYMscmxsDQuCreh51G8UHHw5r3o+hLUsKuOBsXr/6W6VFChxIKysDexxZVh5/NU Rmp6qqi/rn0d1LGvnW1ebuOPZ37CQvc1iEuJhZ2pNbX/ImxM303sL/hcRJOtnYDkVHSv0AG7em2D Fv3TDEzErOeXRlWLCjg98Jhm1Hv/zuMx+fSP2PngAHR1dDC86hCMbzgO+jr6om4mxr9dnoWTz86i mKktDvXbCwMdg1y361XqKyy8tliQxyo2lXOdT0nI+eddXYBO5TrC2bKCcll+SgQkAhKBfxSBbM2F TJA2b96MwYMH48SJE9i2bZsgJdOnT8914/iUbWlpiVatWuHZs2e0B/+z/+89bm5u6NSpE9zd3VGg QAHMmjULPXv2RGBgoCAdw4cPF2Qr1x36CBPOmTMHt2/ffq8tb16qGU703QurglYIjg/J17qC44Ix 9fIMNLStgbufXcHR3rthaWIp6khIScCYUxOw9e72v1wnk5bV7ZdgZotf8lxGXHIcvj35Lbbf35lj 3hfRLzDj8m9oWaIBtf8qDvbciSLGRXJMrxlR1aYKDnTbBGMjU4QmhGlGqb/r6ehhU8flmNZ0ivra P/XlFyK/iy7NRxvHpqhmVRFTTkzGypur1dUHxAXicbg3Il5F4164F9LS09RxufkSnhCOCce/A5P4 vxKY5H1/YiLOPj/3V7LLPBIBiYBEIF8QyNZcyORozJgxCA0Nxfr160VFBw8exKhRo/D1118LRehd tbN5kEnN5cuXcfjw4Xclz9f4hATagKn9AwYMEG3mwrt37y5IV2pqqqiL1bmoqChMmzYNR48eRcOG DcV3JmQcwsLC8Mcff8DDwwOs7HXo0AHffvstDAwMEBISgkmTJqFEiRKCPHL++vXr45dffhGEjvOz Crhr1y4cOXJEkLrKlStj3759+PTTTwXxZBPqihUrcPr0aaSkpKB69eoYO3asMGFy/qCgIMyYMQM+ Pj5CSdTW1hakt3379hz91sBK3cWLFwWhZDWL6+L2NGrUSKiKnDkuLg5LliwR6Tiudu3a+Oabb1Ck SO5IQFRSFNa6r4fry5uoU6wWCugZQEdbR92uaWd/wc2AW+ju3BUlC5XA7CvzSI2Kw++tfqX0tXHN /zpmX56HBxEPRb5WJZvjp2ZTUNCgoCjDjcpd5bYGIHNZsioFJx6fRBun1jDUNQRvwEceHaV0WngU 4Y0DXgdFGY0dGsFU31Tdhrd9YQI38dRkMmXFwYWUDm6TosJwvpikGKxwW4X9jw8LU2h7x9b4pu5I MvkVQRiZ/g4+ojmtpQuv8EeifjaZcf0m+iaiWu6faD8pXklpSTj5+BTalW2bazWHcWAVxvp0kTcU LK7gZcxL0f7ElFeoYl0JdexqZ8L/btA9zLjwO+6HP4BVAUvoUlu/rPEZulboghPeJ7H0xgo0cKiH Z5HPcdn/GhrZ18eEBuOESig68JY/3P9ZN5ehXpkmWN91DVg1KhlcAYtuLsdn1YcJ82s1m6o42v8g Bu4dghO+599S2ptRTJAOMLmi6XQ3xAMHHhwUZTYp1ViM/8OwR5h67mckpyRjaLVBCE0Mw35K42he CrNb/w6R/1FGfveXt0R+Qz1DNHFoLMp5s0Z5RSIgEZAIvB8EslWyuCre+KOjo3Hr1i1cu3YNZ8+e Ra1atWBqmrtNTGkul/NPByZGwcHB6N27t7rqUqVKCdOlvX2GT4+urq5QeZhUMNFiErlhwwZ1eiZW bF784YcfBNlh06dCFhkDNsP9+uuvIs3PP/8syNTatWvV+RcuXIiZM2eicePGQtEbN24cXr58CRcX F0F4JkyYIOpkdZDTMqkaNmwYWEXkwG3iNnAcp2XTJ/uR5SbwuB0/flyQQVaymOjxbyZfHHhMvvji C5w/fx6TJ08WdXl6egpSyoTsXYFVpN47+2PskTF4GvUc067MxrOXXsI3R8kblxKPw4+P4qvj4zHw 4GeIJFLmEfYYniEPRJLTT88gLDEcn1cbipYlm2HexdlYdZNI1evg+sINu3ijJQH09IsbWOi2HJf9 rojYWwG3MejQl4KAnX12El12dEfHPf3wiMrPbWBTXgyZvPY8PobVHpsEkVLyMmkYtG8YJl6ciXpE Xurb1cG0q3PRb/cgpKSngAngsEMjqP5knPQ+KurvsLc/nkQ8VYrAVSIuu6n/HI75X6H2r8B16kde AtfFZtjsAitD0UQE9zw6go33t4l2Kek4X799g7H76QlMa/wDOpRpi/uhD8HqEgfu38EnxzH+6Di4 B96Bc9HyWOq6BB22d0NkYqRSTI6fvtF+QEI0apPCyIGJb+NidfGYCC8rfJohhUhmXgObSkccGSXG fu+DXQLfbgcGw5+UQQ5sJuV5t//WbrgTkT/77BwOee5HVGKUIKTHiUSOPjZO5N9wd73I/8mBoYJ8 5bUtMr1EQCIgEfg7CGSrZHGBTELYtLZo0SKhhNy5cwfNmjUT3xW15+9U/D7zsgrF7c/qbM/ESAlJ SUmCNLIyx2Ho0KGCUCrxrOaxUzybTVlFMjY2xoMHD4QixuWWK1cO9erVw+jRo0UWVqhu3rwpvjNR Yl+v5cuXo06dOuIa52E/N/aPYnVqx44dGDlyJPz8aMOiwEoSq28PHz5ElSpVBJllssh5ChcuLFSy 3PrEOTg4iLq7dOkiyFTbtpmdunksb9y4gQsXLsDOLsOhmtvLBPDq1ato3ry5aFNOf849O48T949g RKNvsLj9AniHP4HTshqZTEKzWv+GA0+OwD82FLu6b0ZtUrtC2XmdnL85DKk6CBYFLOAX5Zfhq6ev h/shnuoqR9T+UvjSNN3QDNPrjRMqkqJSsSJxY9g51F7XBL3KdsEvzX6CvrYe7M0yCDT7cq0iP6jw uHC1H6AwXxe0xMDK/YViZUt+Qns+2YEu23rgNqklmoEJ3v77u9G+fGfUtK3OgplQVI57HAYrRC0c m+Pq0DOot64x+jv3wZQmkzPq13DKH1tvDFwsnNFmcxvMajQZX5CKpKhc7M/FprWoBCIFr/0UuX02 ZjYYULlfJrKq2S7N7+yXdpDMtK02tYcPkx6NwL5m/C+dTHU7qB/1i9fF3FYz0NKxhUjVuXwn1C1e E08ifXFq4BGYGZjBsZADZpyZjvPPL4Djl7ouR8yrGLWKxu2zL1QM/av0yyCkxP0MXvtfcaGG9PAA 6OEH7tvfDVz/qYFH0XJDC3xVcyRG1f0ahuTPpYxvRSsXXB92EZ8dGI4Ft1aTgqeFrX22ok/FjENV 38q9YUcPYLTd1AYTG0zEkGqDYUREsFjBYn+3aTK/REAiIBHIEwI5kixWO5iUrFu3ThTI5iUmWQcO HEDfvuTo/Drw4ssmODa//ZXApqq0tLS/nD+7OtnRPj4+Xpj8ChbMMD9ll87EJMO0w3FMZBRTIvdp xIgRiI2NBftucRlMODVVOf6uSTY5P/eDA8fxd1bClMCKGfeVQ3h4uCBuL168ECZZro9JIatKCumZ MmUKVq1aJfBm8ycrWUOGDMF3332nFPnOT24Dk8msgUkoq3GapkEmgfybFcB3BaGIUFfqvnb4LmNe GrYmRd/IlkyKSgPbaoJgcSSTKg5s7mu/rSvukfIxsvJgFBQmvsxO3ZyuKDm6A9owMzLLZAZkXyTH wqWI/OjAnMx3TuZlOLk68Ea/5OYKeNJTj6ANWIR0FWqSg3hvl16ZzILsl8VEh58wVEIY+0ARifCN 9ccer/1g0lacNuiRTUbBxsQaf9avLdqYtX6lnKIFMjDhJ+sUgsVxrMQsImf+x2TyU7cvTYX65ODN 7WPTIwc9Io7UOEqirSY7IiLLn6zt19fWx6bOazGHTLRXA93oCcQdZL/WwpgG32JO6z8EAUtNS6Wn FgsJgsXFiacXqc+sUrJKNs91MXyIFDPBFIHa18SuBvpW7kMO/LZ0CtPC8yjf15HAQ/K/MiVsCuhn mNuVCJ3Xbc/J6Z2JN5tp+QlJJbAy5liExpeCtYnVG+PL1xmj7hW6Yv2tNQD1o7J1Zb4sgpGuERwK O4gxtCtol21+Ja38lAhIBCQC7xOBHEmWDj0xxJu/EpQNW5NoMJFh5/inT58KxadChTef4uFyeBNg NShrYOI2cOBA+Pr6iqcPWR3Kj1CxYkWhNLEZj9UkQ0NDREZGCvWIneFZTeJ2ZQ3KNTaZXbp0CZs2 bRK+VmxmY/80JZ7zaX5XylH6yASGlanx48cL4sT9ZP+qMmUyyEDJkiVRtGhRtGvXDp07dxbZmQyx WVZfP+PpLE7fsmVL4QfGCdhsyKoamx0V9UOpN6dPJr6MLQdW1/hhAFarKlWqJHyy2PzJfnMcWDFj IlmzZk3x+21/XCydScbQxgoy7/HmdvOlOwLCn8KKSBETKPZbuhV0G1Hk7xSUECzUEXN6vQM/5cWE gR2i7/ndRAeXLpjefBruBXtgxtU/EBgXJMxNTEjYZ+qK31XaKNPxIMRLmAo5f2HDDCVM+H9RWTde uuGizyVhqmMT3Yzmvwjn+HMDT9CDeclqksBzmf1yFLLD6hv7NQXGByM6OQGnn5wh9cMOLlbOqMxP sxUgYqdrgh9JpTIj/6jbZFY76n1c7VOl1H/tpauon/t044UrOdFPB5Mrfm0Dt4d3+vvBnqIvXDar Rvy6g0uDz2Qy8XH7+LryKgSP4PsCg9jkeOFzxOohvx6jbFEnMTSPw7wREBsgnOKjyUR36slp8dQi 18EkbvqlmWjp0ByLOywQ2NRa2wzHn53GH2Qm1SFyykTRy/eueHqTnex/vzoPMCuM+vb1RNwNegpS mCtfTwTRPn0jkZfb0bRUS+zwOoAhZJpjouT6/DKG1fqcfPMySBb7bXlHPBH4xpBfHY9ROYuymZ6s vBngjvbbe6KIgSnODDiW6fUf7EPG4SKZiC/6XhIYMiaskDIpYz+83oeG4/tGP4DHoNWmTljXaRm1 q4kgYPrUPw5nyPG9Ejnm3w2+h4ehj/BHq5lvEEGRUP6RCEgEJALvAwFaPN8IZMJSNW3aVEVkQdWm TRsVKVgq2phV9NoDFfkJqdMT8VCR2qUicqEiB3f1df5Caolq0KBBKnLoFuUQYVCRo3emNORAriLi IfITwcgU93d/eHt7qxo0aKAi05uqa9euKnI8V/Xp00dFZEvF9bZo0UJVqFAhFb3iQUUqkapGjRoq UsBU5CiuIsVJRU7oquLFi6vI0VzFbef09BoLkZ4c5sU1zk9O7yI/+auprKysVOS7JprOab766isV OZuL+j/77DNVjx491N0iHzAVkUFVr169VOSUL9pHBFBFvlkiDZn4VKQsqch5X0WqmqpatWoqUrbU +XPzZf/+/SonJyfRB87P4/j8+XORde/evaL+Tz75REXKpMrZ2VlFqmVuihX4/HT2ZxWm6KowzVhl 8LuVyn5eGRW+h4rMYKqIxAiV1VwH8Rs/EMug6xWWVFFFvYoS5ZPfj6re6sYqjjP+zVpFr1HIyD9F W3X44RGR5tfzM1WYRHkn039cxo/aqo23N6nbx2M08vCojDo4DdVRb00TVUhciDpNTl9ImVJ13NL1 z/Zx+VRGmUUuquhX0SLbTo9dKtPfbFWYSn2cXlDEt97YXt0HUntUXxz8KlP9jde1UBHJFPmnnJ6a uf1T9VRcZm4CvXtM5by0aub2ERYtNrZVEYES+Lfc2C5zPPWf8yQkJ6g4P48J41Z6kbPKZWk1FX4x Uy28vlhUT0qfwF/7V3OVxZwSKvykpyo+z0lF7wzLTfNEmlsvb6vs5pbOGBuqu9ry2iqfCB91/pkX f6c4bZojr8dvsrbqmyNj1PH8hXyvRN3aM4uqfCL/zMtx3Id+uwf+iSGNT7vNnVTkT6a6F+Shws9G KoyHat2tDSpyrldhHFRaM81VvpG+nF3k77a9V6b8ZBpWxSfHi3j5RyIgEZAI/BMIZPueLDZPeXl5 CcVEUa7YtMZKU1YFh/2LWNHi91ApSg6TQX6/FjtTswmO83A5RELAKo5moE0fXF/W/Jpp/up3LtfV 1VWY2tj0yU/wcWBVh32f2HzHqhab9bi/BDiIWMHCwkK0m9UsVqHYF4qVp/v374t3a/FLTLlvb8uv tJkVQO4/K2qnTp0SzvdKHDvCs2M6Y1S6dGmwEqhgyO1jRY2fZGQHeMaHVai8BiKbQmnkNhOREr5l ShlsguT6uR+sbvHTknkJrCzQxopyluXInGdCykqgeMKLn4x7FPoYiSnkRK9FWg7hakpqRekijmoV jggXrvldF9VVITVMX1dfODaXKVpaqCGsiPm+9tfi/KzecX4uRwnsvH4n8C6CY4NhU9BGKGWaTwgq 6bL79I/2Fy8I5faxyTC7NvJTaqxCRSdFw6GIg1BEFFMel8lmSa6fiJ1QYZytKmSY+CiOlRw/qoPb zWWzglfa3FGtpGXXJs1r7EQvfKIoPwcuw5xe/1CCntTkwL5sYYSRZvtZcStFT9gRrREqGqtt/lH+ YnydrZ3pKUpSIF+Hmqvq05OcptjbaweCSDW0oldj5PWFodzvq37XhKm1Xom6atMjV8Hj50PmRO4/ /2OTK5sZreldYUpgvzFWKdlfqtRr86ASx5/8gltWEMPjw8VLaCtYlhdKGl9nJY+VtlJkFmRn+5C4 UBjoGaCsuZP6KUt28OfxYWd+foktK6HcFhkkAhIBicA/hUC2JOufqvz/vR52MGcyxkSNzX0TJ04U T/D9v/db9u/fiwAT0wknv8eca2QeJJNa59JthQktJ7+yf29PZMskAhIBicC/H4EcfbL+/U3/97eQ HdvZj4pVMH6dQ8eOHf/9jZYt/L9HgNWc9o7toCJrHitMrAzJIBGQCEgEJAL5j4BUsvIfU1miREAi IBGQCEgEJAISAXo+XgaJgERAIiARkAhIBCQCEoF8R0CSrHyHVBYoEZAISAQkAhIBiYBEgF6FKEGQ CEgEJAISAYmAREAiIBHIfwQkycp/TGWJEgGJgERAIiARkAhIBKSSJeeAREAiIBGQCEgEJAISgfeB gFSy3geqskyJgERAIiARkAhIBP7zCEiS9Z+fAhIAiYBEQCIgEZAISATeBwKSZL0PVGWZEgGJgERA IiARkAj85xGQJOs/PwUkABIBiYBEQCIgEZAIvA8EJMl6H6jKMiUCEgGJgERAIiAR+M8jIEnWf34K SAAkAhIBiYBEQCIgEXgfCEiS9T5QlWVKBCQCEgGJgERAIvCfR0CSrP/8FJAASAQkAhIBiYBEQCLw PhCQJOt9oCrLlAhIBCQCEgGJgETgP4+AJFn/+SkgAZAISAQkAhIBiYBE4H0gIEnW+0BVlikRkAhI BCQCEgGJwH8eAUmy/vNTQAIgEZAISAQkAhIBicD7QED3fRT6sZcZkxSDWwG3UUC/AKrbVoO21l/n opvubkFsUiy+qjX8g8ASmxyL2wF3kJSaBNuCtnC2rPBB2vExVpqclgz/KH/oauuiROES2XbhRfQL 6GjpwKagTbbxPJciEyNRvFBxaNE/zZCuSsfLmJdIT0/PsXzN9PK7REAiIBGQCHxcCGipKHxcTc5d a1VQ4dDDwzj6+DiS05PhZF4GRnpG+Lr2iHeSpn1e+9FtSy+UtHTEzU8vw9zYPHeVZpOq3tomiHoV jftfumeql2H/6dzPcLFyRk/nHm/k5A34p7M/o5J1RfRw7v5GfG4vHHl0FB22UfkpSWhdri2ODzic 26xggrbbcy9iXsVAR1tHkIG6xeugpl2NXJfxsSY8+eQUxp6ciPsR3oBKC73Ld8KKjktQ0KCg6FJE YgS+PjIaW70OAFpaGOLSE/PazoaZgZmIZ/L13clJOOZzDvYmVrg69DxMDUzVcHD5o46Pw+NYIllp aZS/Bxa3XwBjPWN1GvlFIiARkAhIBD5uBP66RJNP/U5NT0VKeko+lfZnMXOvzkfnTZ1x6cVV+MW8 wKSjE/DH9QVITE0UiZiE8T8lMKlRQpsyrdG6bCtEJcdDR0dHuZztJ7efA39qlqckXthmDtZ2Wp6J YHFcGv37xXURdnruUZJm+kxTcfxC7HqwN9P1rD8Efmk549fMsSk8vnJDGZsKiE2Jz5r9rb/D4sMw 8+psjD45Dl/vHUGkYCyOe5/IlOdV6iuhkmW6SD80sUjJpn0Z6GePv1IWp8mpfE6jOWb8XRkLjuO8 WeM128Rp3hZmXPoDMSlxWNd+Mbo6tcZ2183YcHuTOssv52dgq/smfFfrK4yqPgzrbqzG7xdnqeMT aJ4VMjRDsQKW8I0PAo+nZvCJ9kVD+3o40G0D+hGBW3d9Nc48PauZRH6XCEgEJAISgY8cgQ9mLgyO C8Yfl+dgz6ODSEh7habF6uP7RhNQ2brS34aUN9vFN1cChsbY3XMbyluUw8Lri3H62VkY6BjgZoA7 vj48BsUL22Ndl1VYe2s91rtvRtcKHTG5ySQY6RqhaIGiiEqNx6STP+BOiAcqW7rg23qjhSL22YHh 8I32hwmZE91D7qJDqdY48uwkKRa22NFjszDLhSeEY9iBL8gcFIgKFmXpv/JqFSQkLgSb722FisiH V/gj0TY2Sfao0A3WptZgbDge1I8HYQ8z4rUpvnxGPAPE5f9+eTb2PTqEGGpnS/tGmNp0CsqYlxb4 BcQEYO7VBbj28gZq2FRDEpm+dPJo9nQo7AD3z64KNWvozsFY1WkZBlcdKMo//vgEfjo/HQ9jnpOQ o40WNH6L2s0T7XcPuIVvjn4LBzKxmRHR2EJEsZZVZaym/Gw2O/v0HOE6Bc425bGi01LMukTz4MF+ DKraH9/UGSnKP/zoCKYRkfGO9RXmuBbFG2BR23mwNLEUBGr4oRFw9XenPP1gRUTmVyJFTGw2dV0j zLNTzvxM6ps2hlYbBMsCFvjt0mxR7veNxqNTuY7i+9v+zGzxC6xJgWIM7M2KYd+dXQiJDxFZIl9F Yv6ddahXujH+aD1TXDvrewEr7m3CRCqf1S5WTpd1XIwvD43EhodvEunPq38K/o/D43BvbNHeiIKG GSqZuCj/SAQkAhIBicBHj8AHUbLikuPQZ89AzL08Cy1LNsFQl77Y/eQEWmzqBO/wJ38bVCYsJQoW A+Li0W57V4w7PgEOhUpifdfVwr/GRM8EfvEB2P/8DBJTEmFpbAH3gJu4HuCqrlsHBE1UBA49PQF7 UzusuLUWLTa3BxMkNjue8jxK5rQ4kX4pKVJ1bWri8vPzOECkh4Oejh7KFy0LfyJZO54eFfWICPrD KsbPRJBA/jqeIfcx6tyPmHRhOrwjMvruE+WLaSI+FveJ4Il4IjRPIp+KIljdGbhvKJYQORxR43P8 UG8cTvteQvttXRGdFC3MfF13foI5V/4QfTtFJiu/wMei70obcvtpqm+KQq9NYGZEHtg/iYN35BM4 EgFZ3noOJtX6BrvvbscytxUijn3ZQhLDsMVtI268vIl2pZrhlNdRLCCiy8HMyAzeMX44Qe1ilYvN sbf8buBO4F0Rz3+eRDxFWSKMK9rMxbgaX2Hn7a1YeXO1iGffplKFHHAn1BNjTv+IHy9Ohwv5mhXQ NQarb0WMi8A3LgA3fC8LNYl/33hxHU9j/UWcupK3fKlrX0cQLFa/NtwhBYsEzValW4ocL6JfAq8i UNHSWV1CHduaiCDiHU2mYc2gqa5pXufv8aQsttjYFmOPjsVX9b9G45KNsiaRvyUCEgGJgETgI0bg g5Cs24F3cO7hSXxe+0us6rwcv7Wagc0dFiMs1JcUjbebx3KDNZOsVR2XoV+tgWSqCcWcc3+g08aO GLr/czDBK0fKUtcy7Wnf1BJ+Rj3JH8bS3I5o1Z9wCPOOsTFO9D2Anb22Ymm7+fB/6Y1Dj49gYJX+ AHENVjvalGwOR4sKmN36NxQoaI2g2CDRRFYzZrb8FZ3KtoY2+fRoOj2zT5PHF9dgQEpJJ6eOCB/9 BC++8ULDEg1E3lp2NXH/82vQJQWmS9nO6vgGxeuL+LtB93CUFMBKFk7CDMUO2s5FneDtcx8cd83v Oly9L2NcwwnY12cXLg46BcPCVpnMaW/DMZ7MpAe8SGFMSRDJFLc9TfNb69KtUJbqPP7kJDzDHhCr 1MOzyOcifTkil12cOhBG2qQsrcXW7huhW8gCj9m/iQI/TNCyVEOhrDGJGVClH1CwUCaTKptsWZU7 RuZJr/CHVL4unkVllM9lTGj4HUoWsYdNAXOc7HsI23tuxs0vrqIzmd4Yv4U0Hjyctqa2KGxYWLRl Zdv5UDDkMt4VuL+TTk7GJrf1mNj4e/X4CBzI0snzTAns/A7ys9PESInL6VNfW5/GtyMalGpMiuQR obDmlFZelwhIBCQCEoGPD4E/d4l/sO0JybR5k4uKTQFrda1WRDj44St2sv67IepVFJa7rcTUJlMQ NeYZdg7YhSLmxXHg3h5ShjxF8cKXifxkDPQMyMyUQP5XicK5W6mbN1AjMt/Y0RN5HMoUITMctY9J lCAd9F1fR19sqgb0qZAodhDPGpjMsfqlBE5byIhJhZYwXxYxKiLMaup4up4Rr51tvCA/5ELGilYA KWWsrNS2rYGp7aahnHlZhBKxBMU7FSkjimTTpwX1RWmjUk9On15kouyyq6cwY3Ea4TNH5SkhODZY qHq/3liMCkXLo7ZdLVJ6dMls+OfTc4KkGhkLUx3nK6jzZ//5d1p6GpJVqTDUNcwYc3r6UVHJ2NTZ ZFNb/O62VDwNKcqn8cja/mRSwapaucChiAMXCQNdA/HJfzqUbQ+bIqUw6+pcMqvOIlzKoa1TG3X8 u77w/Bh7fDx+v7YAczrOw4wW0wXenM/WlJ4kNDAh0pihPPI1Ninrm1q9YfLjPnHLuZ9ZA6udI2t/ JcysgeHPsM9zf9YkQtHzifR547q8IBGQCEgEJAL/fgQybD//cDv5ibmiViUwy3WZ8MEqZFgIE89M Idaih9ZlWv3t1gSTSW/ujfm45H+VnM5XoFGJhnAgk18EPY5fQK+AKJ83ytSYUGy8uxmBRFSSo4PJ tPdSEBQmSs/JZJcYEYQZF39He6e25PPzuzAZ1S9eD3eCyKxFJJFVIyZcLxNChYqjS0TgYfhjYQJ7 EOqFByEP4BX2CHFkFmIfKzZZNi3VRBAnJmgm5B92mXymtt/bQfX54ILPJSxqP18oOEr8JTJzbfeg eNpoOX5Zx0UCs+KkYoUmRKCVYwvx+oCbL91x4OEhQQSq2FQBTIwIg4Vk0isF96Bb8A/xhiHV50v9 KlGoxFsxTk5NJk/+ZCy6vgQDKvfDhnubRXrlKUtfMvX5h3qjGalNPV26i9ddsP/YU1Ky+Kk7VnUe Ur/5iUY2ARYjn6aIpCjhx8YEil8lYUcKU7CnLzbe2ZyRPz4RT6KeCXObPz2oEBz6HK3Ltxd+am5k cgQRsieRz0T5/JTeSe9TCCQybULq1tZ722BjYoNGDqyOZZBcE30TjK09EuOOjaW2q7C22/psiU52 QLAyyARr8aUFaFq+FSxIUey0rZsYv4Xkd8a/B5TvgU1krmUTZlJaEq4/u4jP6gwn82QhUSQ/Xchj wvMhnhTBXfd3k4JXHRUsywtFkZ8cZTMmq277Hx4U88mKSJpmcH3phtobWkOXCOx9esq1rLmTZrT8 LhGQCEgEJAL/cgQ+2CscLvhcxFeHR5FjN5maiNSYkklndrNp+LzGp38bMn/yjamyugEi2HSnRwoC +xGlpWNq/TH4sckPwszjSQSo+eaOCI7wgbNtZbyijfIpqQkHybzGju8tN7WDI5mrkunJR/+oF1SG Hn5tPEmYqZqtb42LT6+gffnWKGFWHEtdV2AaOZ1v89qF5+S0/vzL2+S0PR0rXJcLMxdlpvqTYUs+ TG5DLwqSwZ3kJyDHnpkKJJN6R6pGBzJhribzqVD1KH7O1XkYJ+JjRXxHMsGtpicV2fn7+osb+Jyc vz2CifARYUNaqiAkKzsuRWGjwljlvgZfnphI1cbBysyGnnKzJr8zdyxpt+Cd7+xiItRlZy+4+V3J KJsIVJ9K/cBlM3lhJa3/nsHY95CUF/rtXLgkjHWM4RZ8Gyf67BevKqi3sQ35nCViSLWBsCf/uJ8v zKCydLG58yr0q9yXfKRc0XJrV8TSGFUtVhNBiaEIjA3BaTLPNihRHz139sGhR/S6CVKMXAg3Qx1D 3KS+nuizD9VsqqLyqjoIINIsLLypqahGZVwYfFq0T5lA/ACB9aIKKE5Knudw90xxSprsPlmtrLyq HkJiA4V6CZoboAc4R5DfFL9mgYNflB/67B6Iq36XxO+mpVpgc7d16rFddGOJcP5nXy7RyNR0mtvD hKM/q2Tcv/0PyCFeV48IbSo9dNEda7usVJM0zsUkviEpekZEjm8MOYuShLMMEgGJgERAIvDxIPDB SBZDxK9TeBbxXLwCoBSZfBQV4O/Cx+rSvWAPmBIBeBkbIJSl0kUcxZNtmmWzkzTHO5JZiX1p2BeJ VQoObHIzoQ2eN0QmX2w2tGEzEQU2R75KfgUjAyOhnMQlxQln7vikePHkG5vn2CQqTJ9kQWMzF7dJ X1cfbBrUNKsxoQmmp9YsjIsKxUdUoPHnbfGsoDB+3B5uX3EifJqBnfRZFSpJyhW/f4nTcf2aZjXN 9Jrf+YEAfuqNMbIzsxMqima72YTIRJX7xr5TbBaLIGWN+87X+OlHfsmmiaGJiItKjBLFs3rDKh0H JjMhhDPn5768Snkl8nNZ7BDP5bPZtrS5Y6byOZ7LT0lNoVdYkXMU/c9Q3zDD90qUzO5RKiLwXnBZ UQuzmv2McfW+fR2Tuw9RPrVBee2DFvnVcV+YZCqB23wvyEPMAX7fmdIvjmdTbmRCZAZJ4wvURlND U3V+Nqfyi075QQ8LEwtUJLOnosJxciXwPGRllcdNBomAREAiIBH4uBD4oCTr44JKtvZjQYDJy4D9 Q3Ep6A7SI8JQxbEWjpFCxq/HkEEiIBGQCEgEJAL/FAJkR5NBIvD/hQA/ZFDduioczRyEAlbAoIB4 wOH/q5eyNxIBiYBEQCLwb0dAKln/9hGS7ZMISAQkAhIBiYBE4KNE4IO8wuGjREo2WiIgEZAISAQk AhIBiUAeEJAkKw9gyaQSAYmAREAiIBGQCEgEcouAJFm5RUqmkwhIBCQCEgGJgERAIpAHBCTJygNY MqlEQCIgEZAISAQkAhKB3CIgSVZukZLpJAISAYmAREAiIBGQCOQBAUmy8gCWTCoRkAhIBCQCEgGJ gEQgtwhIkpVbpGQ6iYBEQCIgEZAISAQkAnlAQJKsPIAlk0oEJAISAYmAREAiIBHILQKSZOUWKZlO IiARkAhIBCQCEgGJQB4QkCQrD2DJpBIBiYBEQCIgEZAISARyi4AkWblFSqaTCEgEJAISAYmAREAi kAcEJMnKA1gyqURAIiARkAhIBCQCEoHcIiBJVm6RkukkAhIBiYBEQCIgEZAI5AEBSbLyAJZMKhGQ CEgEJAISAYmARCC3CEiSlVukZDqJgERAIiARkAhIBCQCeUBAkqw8gCWTSgQkAhIBiYBEQCIgEcgt ApJk5RYpmU4iIBGQCEgEJAISAYlAHhDQ+YlCHtJ/lElVUEGL/ikh+lU09j84AM+QByhVxAF6OnpK 1EfzGZcchwNeB3HF7yrC4sPgaF4qUx//qY5MO/cLLvpcQmOHRu+lyuDYYOx7sB+uL92QkJKAEoWK v5d6PtZCE1MTcfbpOZx5dhZhCWFwoPmsrfXvODslpSXhTuBdhCdGoKixeZ7bFZMUg9uBdxBLc92i QNE3hoj7fjvgDqLofubytbT+vMffSPwBLiSkJuBWwG1wP4pS+zXXoNw0JyUtBU8iniIwNhBWJpZv ZAmND8XNAHdx/3P5Oto6mdLEp8QLfGKTY6l+wkdjDcyUMIcffL99cegrvEp5BRcr5xxSfbyXY5Ni 8dnB4dCmf+Usyn6QjvDa/TjcG4WMCkFXWzfPbeA54B3+5C/nz3OFMkOeEfh3rMZ5bnbuMhx4eBC9 dvRFwzXNMOLwNxi4dwh8In3EwtVn/xD0PjAUAbSAfYzhWeRzDDs2Cl/s/Qzjz05GUmrSB+nG8Wen cdb3wht18wbRb/dArLu94Y24vFy4/uIGBh4egc/3fIqZl/7IS9b/+7RMMjpt7Y42Wzriu/M/YcTx MWLD/Td0/Gn4U9Rf0xQ1V9RCpSWV0WVbjzy1jQ8PLstqoO76lqiwrBoG7xsGJm1KeBDihVqrGqD2 yjpwWVwRvXb2JbIVpUS/8zOCiF+HLV1w9tm5d6b9KwnuBXug+oq6qLOyLpwXu6DvroGCbOW2rGv+ 11GN+lZuSUUMPzwSaelpmbLu8dyLskuqo8nWLqi5tjGarGuJZxHP1GmYnFZZXht1VtVFhcXOGLRn KPhglpeQnJaMTY8O4E7Q3bxk+1ek9YvyQ6uN7QUJzalBTCI3PdwHj+D7OSV5r9dVKhW+PPI1qi6o gQ13NuW5rnRVOr6gtZHzb767Nc/5ZYZ/BoEPTrIiEyPF4puanpqvPZ5/fSG6bO6Kq4FuMDcugqUe m7Hp2no8DHuEqjZVMLrWVwARAV68+DTBN1zWkJiSKE6RfJLUXOA5HZ8SeZPjwPn5d9bAeULiQkS6 NFUanchjwTeGZoh8ldF/js9LqGjpgidf3kal4jWQmpYzdryZhCeEv1Evt/dV6itRZU7953huP38y Ttx+XhiUwP1f1n4hlrRboFxSf6aqUrH14R5c9r2ivqZ84TK4LAVzHns+7fOinjU0K9UUL0d5obSd M1KymSPcP25/VlyzlpP1N9cVnRQNZd5x/TwWmoE3pcCYQATFBlHdKeooVkY5jseX+8KnSQVLdSL6 wvgwfpyO6+E8nFczKO3Pel0zTU7fH4Y+wmnvYxhbdzRCxjzFA5oPlgUyFA/uH/dJ2Zyz6x9jxnOD 26AZuN1M2rlPCiaMcXZ91MynfOe5/N2pSXB/cRNru67Fby1/w+H7+/Hb5VlKkrd+cttHHhuDWKr/ 5rDzWNDqD2y4uRZb7m4T+bhPo46Pxf3gB9jcfROmNZ2GPbd3YNH1JW8tVzOS1ewj9w/gQaiX5uVM 33nMuN+8RuUl8AFj5NHRtNY8wbaeW/FDwx+w3X0zlruuzHUxZoZmGFJ5AMqYOyGG7zuNecPzaMTJ cShoYIxnX7rjUK8duPb0IuZey7gPGb8vj3yDJ0Q0dvTajokNJmKT23qscl+T6/o5ISsrF/sexIha X2bKx/OG71/Gh++L0LhQ9X2UKeE7fvD9x2srk2Oeg5r3GGflecT4Z52fSrFcP997PEeV9VWJC4oP xqn7R8WhWrmW9dNY3xhXBhzDsGpDskaJ34wj15+VvHP/xb1F7eM03P+8rt9cwaFHh3HwOZF8Y0Ow qpbXwJaMIz4XM/LTeMjw70Tgg5EsJjtdt/VEkfmlYTG/lDj1nnxyKl9Q4hPdmDNTUMG2Eu5+fh0H +uzB2U/2AibGYuFgc0pBfVOAbpahB7+AxdwSqLqsNlxfuKnr3+25B06LKsGWTqG2dBKss6qR+sTD JoCKS2ugxcZ24oRuMac4Ki+rJUxaSgGnnpxGzZX1YUVlV15eC+22dKbyqqgXOt9IX6Gy2S9yhsVC J6G2XfW/pmR/5yebRizJhGCib6Kx/P6ZjU+fbTd1hPm80ig6rxQar2uBS76XRQJWhyosqYbWmzuQ EtINFnPsUXVFHWHaUUo48uioOIlz+6vRibzN5o6i/RvvbhZJXkS/QO3VDdF2czdMPDU50ymZ5euR h0fRKpmKs36XMPzgCHxNm45/lL/Ie/jREZSdXwWf7OonCMj4k5PgtKAKfr/05ybM7ee2lV1aRZzW XhIZ0NUwhzwKeyziizF+C5zQbH1ruAfcUpr/1k9eJHvs6I3SCyqDzZ2/np8Jq/lOKDLXEQcfHhJ5 V9xcBYcFNPZLXGCzqIIon8eMw5mnZ1F+cVW0JyWkLeFiObuYUFW4TUrg+VNpaU0x/jVX1UerTe1R jvLs89wvkrCput2mTrClsnn8W25oh3tBHkr2d36uubUOA0idYAvQ/seH0YEOFKeenhYmM97kO2zp ijLUvxkXfsOPZ34S88BinhNOemfcY5f9rog5UZTuPfN5jmizqYOon4lvw3XNUXdNY1QnFYbnJ/fR guZQI5pDOW14mg0OiA7APlIIulTojCFVB2FCw+/gUrwaNnvuVhNrzfRZvzOZuxNyH/Vtq6E6/de/ cl/e8XGS+sfBL9oPp58ex+Aq/dCP4n5o8j0c7Spg7b3NuSKCrBKNP/k9lQlsvLdVzM+J9FtzMz3h fRL1VjcRaxOvUd229xJmnaxtze7308hnuETm2y+qDUbvip/gx6Y/wN66DNbd2/QGkcguP1+rYFEe 39YbjRIF7d84QOho6cCM7nsTPWMUNipMplIypZKlUKxplPdxmDduPL+EkdWHopdLT0xtOgWWlg5Y d3dTrsnARd9LKL24MnrtGoA5V+dnaibfG2UWVhb3L6uVPP95fWOykZvAB5PZV+fCeUkNuKysA+fl NWC1oBzOPTuvzs4KI+Nvs7iCiOu/exACYgLU8XwP1l3dGJa0PpnPLyPWT16PmYyefnIGP5/7FdAH Frstx/ADI8R9rhyKuRBenx1pff+EFMaFNxary1W+7KK5WnNFPZr3DjQHnDBwzxC8jH4poucRmXVa WAV9CBteA7n/PD80549STk6fTNImnfsRU2p/A6uCFqLdOaXN7joT1Mnnp2FqndGwNC2a6fCbXXp5 7cMh8EFIFi/UPXf3FZvDb3TKWtN2IV7GBaH1tl6ZNvq/Csvd4HtAdAx6lu9KKpa5KKZpqSa4OPgE atrVEL+Ff0JiKsxpkVrY8g9aQB/h9yuzRRz/0dPWw6BKfXC61y5s77Cc2nULi28sFfF2prZwLOyA qw/P06aRiF8b/4inYQ+x4NoiEc8myQ57+sOfVIwNHVeiQ+k2OOl1BKlIQy27mkL1+mTPAFwlP6Nt FH+0x1Ykkt9D623dMy0korB3/dFQlpSkrLx03tELx2mhnNf0JyxvNRseRABabe+B5xHPaeEujpJm 9rjodUYs4NMaTsZj2uCXuC4TRfAi3WFPP4TTaX9Tp9VoXrIxTnsdg7a2FqrZVBVp2IdgRI0viOQZ 4VrwrUwnWT5ZXvW/AdAp1ycuECd8zuI8tSWKFgYO5SzKoYChEW6FeAilpVGJBgiO8cdzwo0DL6bt tnXDITJFDqnYl/BKQGJ4kNqnh8vvuvMTPKJ27umyDoe7b8ZLOhF33NEzVySASXYfl14IS4nF9It/ 4OCTo5hYcwQ6lGgMY9q4OBjrGuHrGp/ifJ99hN/vuPzkHNbf2SjiShdxJMXIHGceHIepgSkm158A D393rHZfK+LZD6nnnkFivDd2Xo1aNtVxzuskjPQN4Ey+LXw67rC9O/xiXmB/1w042HUjvGlj5j7x 4pubUMjADEUMC4ukxnpGsKSNVmk7++b0pc09JCkcP174Fed8L2JyrZFoW7wBTAxNhFmp6dauuEtz fkWrOTRHpuEEEfCOO3ogPikeVSwr4rbvDbR0aAZD8lc8F+CGcTW/gpv/FVzxvfrO5r2Ipc0oJRVO 5mXUaSuT8hoc64/45DcVX3Wi11+MqD91bGvgiPdpzKUN/tvj3wHJGeoJJ/FhspuiQnnzciIHj2eF omXhE+WTKxIXEBuA6y9virx3I57guM8ZXHpxTfge8UUm621oLgUlhGBt20WY2WAC9pHq0GNXH7AC 9q7A9z8NPsrTPOfAPp8VSJF6GPVcXYeIyMWf7BQSxmdDp1XwpTWzMB0M6q5phOZObQQp4yKfkysB 0jOIGv821DWk+kvDg67nVo0sVcgB31T/DC9orfYMy6z28RqarqXC3ns7UZvG6bNqQ4VqdPJp7g7J QdTu705NhBXdQ1cGncSqdovQ1r4BWL3jwAeQlnQAL2pUBCd67sDqNnOw5dEhfEr+U0p8i+094U/3 /ErKu4Dm7206tLsG3xHKkh+tJa5s4qQDyM1QTzG+N2it5cOHEnhujqw2DC/iQ/Aw/M/DEcczSeu1 s5/o4/oOS2lt+BKbbq/HoP2fikNhnWK1kZCehF33tqEZrRmDKvXHwTt7cf75BaX4d36y6lrEoDBG 1P6SVOPUPPsFL7i6CBZG5hhe63Mkkpr2MfoVvxOk/5MEdJb75wNvQvef38K3zb4Tp1xugQVtEp3W dQT7UVWxqfy3GsVmPpZ3CugXyFROQ9rMlSDMXnpa+IVISGXrSpjjukhs1Ep8sULFcJAW1hmX/4A+ O8Zr6SKQFgcOVqZWaEwb1ulHxzC79W+oZFURy++sFZsmx9986Y7ksGDM7DoPA6sOwEC6ts/7MKyN LYWpkpWkG6TwlLOqhEOPj4hTiBYRmLjwQNwKvA3bgrZczF8O7M/i9/Ixfm0/E6PrfiPKMdQzxOCt A0V939QZiXr2dXCRTotzW8+CU9EymOu+HL60OHG49uI6EBmFqb1+Q39SC/i/nY8OolyR0qho5SLS sIL2RY3PhNP7Kb+L4pryh4nk+SEnYb2oLAaX64FVnZcLgsSbIYcytOBXtamE6wE3xQmuZekWNFgm ahJ1hiT0wMBnmN1lLsbWGyOIR2FSWxRz4c0X7vAih+cqxWphn9cBsZjq6epRHk/cD/FEoxINlabk +NmnUm98d3YKTGmcj/c7KBQBzcQlCpfACdo0LvhdJnJJ7abxCSDCyKFk4ZJElmvgVtBtLGo7D9am 1vjVdQGNfwZ+F2lsERePGV2nok/F3uhNhG6tFylbFs4oW9QJhx4ehk/wQ1QvWRd7yamfNwMDXX14 B94X5mzG712hu3M3oWQ2WnsOo2qNyGTyYJwHVx2I0WdI4TEthiP99pNpqaC6yEU3liA1MhTzP1mH odUGi+u8+U46PAFuRD5alWqBNbdXY3z9sbhDBxYmnJ8T4ZxNfczNaZ2VFg7p6bTTvw5ppB6SzCac s/n+HED+keywrjirq9JVREDLY07rP8QBZyFtrH1IvRhLKmdpc0dSarRgY2ItShPjQd/SmUm8DqIu 6rcyx5Tr2X12r9CNyiyNKqTUzGw4EV/XGQFdur+Vtuz13EfjF4MlPbagY7kOoohAOrgsvDRP3NvN HZtlV6z6mrr/3OfXIZXdAQgXJsCM4SDyMYtPTlDXyf2vXawGpjf/WX1NyZv1k9Uaftgkjg4fPcu0 I2XvBZk9HxNZeIQGGg7wrNhy4LWO8WFs+F9uQjGzYvi+8USs99hCOWiCaoQattVpLSglrixqPx+s aq+6vhwvYohc5yKYGJiginVV3CIi32ZrZ9S0qkoPzjRUO5+zmpweH048mlwOPLaLEo30DHDM97xY C9jMhpgIzOu0RNxfnKAurWdMcvhwzHPage7RZquaYlmrWaQm9hIWDE3Hf76/JzWegBX31lPvMvdP 1EnEZWWHJaJcLv9RhDd2eWwDm+jrF68HR1o3YozNMKfNH3TYe4wNrmtz7d/rH+2PH6/OwYQaw4V1 IYbM8+efX6SDeyl0LJsx37jOnAIr6lOvz8XkmiNxyeeyMKufJRWQiXH7su1yyiavfyAEPgjJUm5+ ZTHivovFkYiRID9/E4xSvACQVHzZ/yq+w1h1aawgMNlggiAWan09FHp9etKnm1OHFiEO7EfTjhx1 k8nmv4o2UTNSDU4y8dAIog8GeihsUEhc5fzKIs0nTV7LXpIiw4FPvzFJCbA0+nPRYxJYlE4iNekk yJtFveJ1kVx9mFC6RKZc/mEMtWnz4tOqEhT/DWUz4uuUShBPBV8Vb4AGhnR6zNh8DXX01f3nTZXX HUWeZ7+dKFrQNTc1pS7+5H4rKopyXTwpQ33koDw1wxu5up0U9yo9GUZU10tenGnDUU5j/DQTh0KG GdgyWTYioqv7evMWfaD8/MSZOFVTy3iRTaudpiaBooB3/OFFvAypUmxy0Qxs7my8pRMRFFvMaTFT LMKnn50hDDPIA6flNmiRisUbhgjkv6Js8Ma6GWqYsukExwVDRT5Oiioh5g6136aAFWrSxspl1S1W R+BbjhSZ3AYDHQORlOdediGZfJf4xK5JsDidMgc054ey0fw5xtpi3LitPC7Kdd7E3hWKk0rKc+te 6H2RlMtwDXSnJ0MdxMGHfarYZ4/9WZR7hkkAp1N+87je/coVEfEROOtzHoPpIYpmDk1EeaVIRQbd e+50IOHACgWrouVJLco6D0WCbP4wqeJ7kEmP0idlforxoTzKeHJ2pV0KDtkUqb7kKNYfbfFkIV9k E6w7kf8q1D6e79xv9ifK2n8xLpn3e7on+f7OGAulgoiECEw4/yO6lumAnb22Cp+kIrPthVmvQfH6 KE2HITaFKuZz9p+6FfoA1WluGehmzBmlrNx8Zn1qkfMwabYmJYqDuG+p3ZrzSUTk8MdEzwSLaV29 8cKVXCxukop6EbtvbydzXADmtp2VYR6lsSlVqCSq21QTBzG+PwqQD5UpuXkoPqia+wcTPzaxKmOm rD96dF8q48t+htn1X1mflOYqY6yUxdfF/UFtUu4dniPWdP9yEPcf9V+zPSIihz98uChA47DaYzNW emxC+qsIHCAzfhU6dGuSLPblvPjsEkoUKZFJFWaLgImOIVbe24jl9zbQQhqF/ZS/Gvkaa5Is7u8F Im/8xDEfbGX4MAjQrfjPh+p21eBUvCJmkXmNH00uQrLwlAvTyWfKVH1y/DutYpNWZ5fuOHBvD0aa jkIjUp2u0w294PY6rCTlprtzV1wiAoakZHr0/ZxQzrzJxBFKk9+DfEF4IQyJfUFyP/n7FLDA3aB7 SE+MoU3jgTC1sKmMFQ4kpeAkmbRYCXtKJojIpDjwU0X1S9RDdce6mHtlFp5EPsXzaF9EhPtB9/Xp j9WgGnQauhbkgV7Or+BAiwk7iJ8kPw5WYdjX6l1h1/3dQlb3oBNWXNorTD49RZjh+pJywgutpU1J TLr4uzBn6ROBGn92GvQKW6AtmRX4tQhXyC8FrxLEo/9MSpkI3KPFnB2Bmzs2g7NDVUynMblPfX5E JpXkqGDo2vw5Xdhni1WPG7R5htCrA344M1XcyAMr9xcLGRNNUyJHe8gxu9T5X8VJ8BZJ+Id776HX ZpRCyUIlEHp3G6ZSu7gOJCTDjUyyTOwaliTF0bQg+RxMF4sm+6rFRwTCU/8RxFNl9jVRxsaFNu67 6F6+i1A4+CR4wf8SWju2ROHXZrScMGSn7bzfBgAAJkxJREFU/7W31gsy7U5KzU9nf6ZXYDiSia23 2HRDyISA+CjY0gJf2LiwOC0iOVkQBcaJN/UbrMIlRoun0wSJSYzCreC7Yn50dGqP4sWcMJ6cv2+Q n98dIgCIi1MvwnwStrcqQ2XcQedy5O9EKu45OoVffXkDHUiZyEqKsusHY7LCdRXJOSps99xFKmwA zaUeAlt2ol3pvhqJtHhfD7wp+lfWwgmfkKLGG0er0i2hbWaOMad+EOZaJgETL86EjXUpQfK/J39G NvfxayE4Pc97bzLNgtSYC2T27enSQ+CUXbv4mpWJFYZWGoC11D7GNiQhFM9eeuGXNr9CEEPiqvt7 786UnQ8GCtHjCN4g2LTIT8mNPDEBLZ3aoSf1j4NdQTv0KN8du+9tx3QybT6P8kFg8DNM7LKIVGc6 XeUimLGyR35eK2+tRcyrGEHYgmjczww8hh60dvx2fQG+oqc1f6EDRjBdX+C6HOXsK6ndDd5WRQma 253KdcHmO5vgbFkBXqEPERXmjy8a/yDIGh8ejvQ7kKmIrP3n8b3scwUPIh4jjBzdf6Mna1uXbiWU cF0dXRQxtsCll65g3zF+zQMS4sn8lrFu8Gtp2pAiss59PcoSseOn5+Lo/vmixa9qEpKp8iw/2AGd n1bjVwt407yKJ6WFx5HXua4Vugjy5snrTkqS+C6eziOh7jw5YQ+pMki8riJLkZl+srN7WzLHfl11 KGa1molBwZ5ot74tzRO67yh0onviB+rvDVpfmpRsJK4dfXxczCOee53Kd8QUsjCMPDGeHl6JEQe3 bR47EEamzavDzovDgTA90rlyPqm23I9r/jfIWSNdqLpMlDbe2YwndJgKiA+FGynS3D/2/2PlkteB DbQ+fE5P7k2o961Qqnbe3Y5GpZsLtY3H5kGULwrQXOO9gf0bqWicfn4Wn1TsqT4cioZn88fF0lk8 qPKUfIfZ/P7FyW/RiwjzoGoDM6Ve7rYSo/d9g+K2NIbD3dTrAltOQr99Jsad940vT3yL3mU7YmCV /pnys/vH2ANjUNKuHO4NdxUENVMC+eMfQeCDvCeLSUxzOpU+o0m+lJwxD9BGXMLEBus6LUPj1zfV 3+k9n7yaOjRGGPnurCKJd/fD/bgecg/DnHviq1rDhaw735X8q7QNaeIai43mPPmk8M1XmRbF5qWa 4lVyIvaTerHp/i7E0UmB7fB3ye+qcbG60CPTzjy6eTm/mUEB4cx6gUx0fLqpSr4ndexroyNtCgVJ 5WIzA5sWQ5IixYmP/Rd4I+BT+XOSmeffWo1tD/bAjchdHyIMnegmz81G8eO5aXSK2QY2M7ICd87v OrUzkjaibkKZYT+qR7S4LiN8Dz05AZfCpbGpywqxkHjSprnk1ho6eRoSISkonNYv05NgKaQw1CaC yipCJyIKJnRqDCJS0aJkE/gkBpKzrSk5Gw8QQ8OOq3PJB4l9E1idOk8kNoAcktnXiQkWn26tjYri DJGHo89oIyBTWt/y3dCubFux0RYrWIzafAV7iKyVJmnf1LQwnpLZoVWpJuBTaWXL8jhNm/xGckDV Ilyr29eAJ70WoDad1rh9zR2awpNI6gLqx3avvbhPYzPQ+RO0cWqtVs5ymkOsaH5zYhwSiCzFk5p2 hha6GNpMe9Hmyu1mhSw4MQz7n54Wzto6VL8LbTC3yTelQ+nWwu9r1a2NRDQMhW9WIJkRbwZ7IZHK akQn7qq2VdHFqYMg67xBtyHz2/2YZ7Ajc1cf8pXip5paUPtvk+/PQmr/Dq99eEhEdmjFfmhBC3l2 ykHWvmy6u4XyrocxmSwe01Nk12jDbUrkugwpV+zzMvLEWBpPLUTTBsn9S6TNiEkYl82O0o1pPvPT f8vJGfsYHTQak6K6qcsa2JnZYfql32ljTad0hejEbYzb5NdSg3B/QPM1jghqf/JVFOpF1ka9/s2q Tx0y5T4mP7OV5Md2kzaiL2p9KhzAc5rbmgSL76MfyVl/+NEx2EWvEBhYoQeWdlioNv9z+fXpPvQk 89gqmt+3aT6PIpPfdw3GvrVdms1lBVJPWx97ySTM5ukoIqbDaG43KFEfxYjE1bSuQia5y6Q0bMMp Ulra0Xit7byS4oppFpPtdyam9e3rCnK6mvp/l/yFxtUfTT5To3Kcm5r950JXuBFBvToP9PwzESMt nHp2GWXpPuG1he+36qR6sKP4AvdVdH+dQQe6r2a3+k0cqrj+Bvb1yNTrgTWEjwcRtUkNx+GbuiNz rF+zI6zojTs5kZ4OPkz3sj7dJxn3iBapjz3I1MoPrhwlvyVdqqc8KSTs/vCM1rmYlBixbmT3Ti/N 8vnpyDX0apezlG/F7bXY63WIDrr04EvLGeLQzfnr0z1+gu6/pXc20BpxCFH0hOfX9JQjPxluTSS+ Ps3Xa0R2VtP47Ht8DPrUlp8aTUYFWr858EGYfZV2PTlO5O+CcDX4nNZeXju4/jEnx2On93EUoLWK zXV8jxjRvcGHHkdSt8uS6necnOPX3N+BCy+vE6nvjOXtFwsf390P9tJhg9Z7OhhUIvXsPM0Pf1o/ YlNj0IXIjuIHrNlnze88f1k9W39rA368+Bv0aT95EulDvrK2mSwZ0XSIO0V+kA1Jpe9B67qiuCn5 +aD4E/mU6tIYPYnwIT9bmrfUPyXwU7FnXlxFY5qLbCLPzbqi5JWf+YeAFhELEkE/XGDTHCsD7Nfy PiYBm7pC6LSiKGZKT1mq58WcNwtelPjkzIFP2jyJObADOcNjXdBanLJ58WG5mRfEHPO/jud8Mckx oo4w8i+oRs6pje1q4TD5x2gG3vBZeShqUjRPJw02uWR95JlvQuVG5Dr4dBwSGyLawH5k3E8lZNd+ 7hff8PzJ7ecnWLiMYCqj/Op66OnYWpgnuAzGjsvQDDx+ijSvXGeVJIpUHl70sppy+GkfXkh47Nl8 wn3SlPM5PpywU+aGIvdrbkj8RBMrUxYmFrRgFlCqfecnzznFfMeJs2LH11hVYxMAY8eB5XvFRKe8 voFJA7eHf/O8UeIZH3ZiZ/zYUbvaqnr4jE75K+kgoRl4/jNGrF5mxUczXdbvWfHXrJvTKuOr5Muu f1wGz3Huo6WppegHp1ew4XuD5wGPC/eTy2STUNYxVurI7tOXTvycPq9+hmxCjqR5U7ywPT0196c/ WdY62MmcSQfPkb8SeIziSIHmjVFz7nFZbNIMjgkW9wQr2nkNYuxp82NSzepeXkLW8eW8PAaa9zDf H76RfkTmDcE+RlkDjx3jw+b23Kjjmvn5fuT/NAPPB54rXC7Pdw6MGbeV5wy3LScSrVkOp1dcN4Jp /rO5jcm95trF6fn+ZNWd5x/fg1nLVuK5PB7/rPm5DH5Iht0PeHw187+tf5yPQzIdmrh+vi81iZNm /3nuKWtxbvufUXpG/xg3JWQdX77OawPXoTnuSnru/9/Jr5QjP98vAh+cZL3f7n240vl1FK3pFQTE HOlujaMV0hRHem5DO6e2H65ReaiZnbM77fiE2Af54JBPhzaZ4E7Rk5bNHJvmoZT/btItZG7pv+9T GncyX5E5yog22XN9D5Bzc63/Liiy5xIBiYBE4D+GgCRZ72nAWaplWZ1VNFZx6pFkqzzS/Z6qzNdi +aR5+PFR8bJKdgxnM4rmI/n5Wtn/YWGsEDF+/NAD+1w1KtlQPJX4f9hV2SWJgERAIiARyAEBSbJy AEZelghIBCQCEgGJgERAIvB3EPjTSefvlCLzSgQkAhIBiYBEQCIgEZAIZEJAkqxMcMgfEgGJgERA IiARkAhIBPIHAUmy8gdHWYpEQCIgEZAISAQkAhKBTAhIkpUJDvlDIiARkAhIBCQCEgGJQP4gIElW /uAoS5EISAQkAhIBiYBEQCKQCQFJsjLBIX9IBCQCEgGJgERAIiARyB8EJMnKHxxlKRIBiYBEQCIg EZAISAQyISBJViY45A+JgERAIiARkAhIBCQC+YOAJFn5g6MsRSIgEZAISAQkAhIBiUAmBCTJygSH /CERkAhIBCQCEgGJgEQgfxCQJCt/cJSlSAQkAhIBiYBEQCIgEciEgCRZmeCQPyQCEgGJgERAIiAR kAjkDwKSZOUPjrIUiYBEQCIgEZAISAQkApkQkCQrExzyh0RAIiARkAhIBCQCEoH8QUCSrPzBUZYi EZAISAQkAhIBiYBEIBMCkmRlgkP+kAhIBCQCEgGJgERAIpA/CEiSlT84ylIkAv+XCKiQ8e//snPU qXRVuujh/2v/ZL8kAhKBD4uAzk8UPmwTPmztATEBWOq6HKefnEFwfDBcrJwzNUgzPiQhBM6WmeMz Jc7mx4voF6L8M0/OIjQxlPJXyCbV+7sU9SoKezz3YpfnbjwMe4QKluWhr6P//ir8F5X8KvUVtLS0 oK314c4SvIm/SnsFPW09pKnS3mgLt5HT6GjrIDU99Y34t8HpE+mDk09O4VHYY5gZmsHUwPSN5Dz+ PPeM9AxFmjcSvOUCt2fQ3qHwCPZAE4fGb0n574xKTE2EjpaOmAPZtTApNQm9dvVFcFww6hSrnV2S 934tKDYIF30uibEpoF8gz/UFxgbiss8VFKLx/yv581yhzCARkAjkCQHdPKX+iBKvu70Buz32QltH mxawgvi95QzYFbR7owf+MS8wz3UZgiOeo2rx2ujp0iPTRucb46eOr16iLno4d88U/0aBWS74Rvth PpG44MjnqOXQQOTXglaWVO/nZ0p6Cnru7IvTT0+jHJErJhstHVugjHnp91Phv6jUhJQEdNjSFT0q dMVXtYbnW8viU+Ix5tg4BEUHo1hhO8xrOxtp6Wn4+shohMaGwcG8JGa3/h2M/axLc3DQ+whiKU8l C2ckpSVhY7e1KGxYGLw5Tjs3HWd9L0JfVw/WxlaobltVzNPcNPaA10H03P8pkTNtvKK6CukWwJ5u G9DMsWmm7NMvzMSck3+gX/1B2Nxtfaa4d/3g+fI44imMdI3elfRfFx8aH4q2WztjasPv0bFch2zb xwT8UcQTlDN3yjb+n7g45sR32H5tMya3nYLpLX7Oc5Wjj4/DzutbMaXdVPzc/Kc855cZJAISgfeL wAclWclpyfCJ9EWqKpUIkC3MDMzyrbcqlQruoR4IDn8OpAGOhUthWrOpmcrnk3oJs+LwGuGOLtt6 IiY59o14B7OSIr7T1u6IT00gevQnQeL8z4g8cT+Km9mjoEHBN/JzvVx+u61dhFKhmT9T4iw/ol9F IyIxAubG5qJc/yh/UX/pIo7Q1c4YNt7In0f4iA29eCF7mOpnVjJY4TjtcwafVhuKpR0XCTVFsxrO /4zIJfcja35WQCITI9X1+0X5IZFUF66fVRcOKWmUn/ovcCxUHCb6JuI6/w6KC4KhjqE4XXMac6Mi sDa1FvHKH1ZxnpMaw0qOvVkxRCVGwZbmgdI/xpXjs5av5H/bJ/ftnO95lDUvk2MyJkz+US9EPPff WM84x7RKBI+fDxHnU/ePokeN3khPTxftD6T+Hrt/CD2q9xaK1cB9Q7Hn7g60r9AZ1ajfqz22Aomx SGi/mFSHQhiy/zOceHQEExpNEsriL+emIS41XqnmrZ+siP1wfhoKkDrl9YUrYpPj4LSkEn69/Dua OjZRz9GbAe5Yd387ilgXF2P11kKzRPKYsMKzqO1c0V7NaB53Hl9WTlgV9YnyhXUBKxQtUFQz2Tu/ 85wKTQgT84YJnZWJZaZ7KDElUZTNBTkULglDXcNMZcbS/epH9wWrVbx+8Hy1p/uQyVNsUizcfa7h WUW6/7MJjGFYfBhWd1wKG5PM81JJzvdAQEwgdHV0UbJQCbUCzGQ5ODYYZka0XqkAv2h/FDOzE+RZ yZubz+PeJ3Dc5wL0LaxI7UzKTZZMaY4+PoaTvpegV9RCrEGZIuUPiYBE4F+BwAcjWddf3MDoY9/h RsANWqjSaZMvhRlNp6Jf5b75AszQaoNx+PFRRBd1EgvYFs+dGN9wHG1MGZI81//diUm4HHwHLkUc 4BsThLK0kCuB48edmIgrwXdRsUgpPCezYgUiGErwCL6PkaReXAy+TSQuCSVMi2F+q9/RpXxnkeSq /zV8d3ISrgbfQyXK502KWeU8nJgH7RuGA49PYWDF7rCkzWf29cVAcjyWdV6B4TU/x+3AO/j66Bhc Cbkn6i9Z0B6LWs9Gh7LtRf3rb2/ElLO/AKnJ2PLoAC77XcPI2sMxotaXIv5WwG2MPDoa14iIgsiM Y8ESWEj525VtK+L77hmIY08uYEjlXsKUMZ/UPiQnYDUpMcOqDQFv4COPjMGNME9Rf2kio4vazEGb Mq1x2fcKWm3viTKF7IQK4u57DYVo8zvSewfq2dcV5bu+dMMIwu/my+tg3mpf2BGBtKndG3oR5S3K wfWFG7VvDNzCH4j2OdH8WNxmLlqWbiHyv+0PYzP+1PfkcJOKXd6H4LPZV2zQc2h8StFYcuANahyl 8Qql9lP95Ys6Y07LmWjr1OZtRQsiNrXxZJzyOY1xdcfQGIwWJOTbuqNw7OlxzG75Gy48v4g9t3Zg WN3PsZrGi0MLh2YYcmwUDHQNBJk84XMWRYiYDq42COWKlhVmalZVcxOY6JUm8v445iUC44OQQOMC Ig0l6cCgkHgmERNOTcZgl09wN8RDENXclK2k8Qx5gPobWxNZSUQ7h4Y40GePmvweenQY3fd9imoW ZWhzT8H9F7dQ3MIJR/ruhUsuzOl8AJp3bQF+ujSLSJUxHbLSEBz1Eovbz1fPzzNPz+Kb42PxIMZX zOFqli5Y0n6B2qx3hO7t0SfG40mYF0iuRkmaPwlk/vMecQduL25i6nma+3QWWOi2DMe9TwqSP7/t HDUR5DQNt3ZEamoaepdthy3dN2RSqDfdIXXp/M9EwomkEQGsbVsbi9rNRU27GthwexO+OD4e9Wwq kQtAOLwD76OcbSUc6bNPPb8UHHP6ZAI5/sxkTKz9NTYTEWZSm5fABwTO/32dUVh/b7PAMC/5ZVqJ gETgn0Hggzir8Am5x+7+cAt9gM1d1uF4vyMwJxNK/z3DwOQkP4I/nS73PT+FUbVG4Ouaw/E08AFc /d1E0ewH0X13P1wOuo0FzX5Gfbs6iI0KEIssn4I5vhv5ajDBWtD8Z9S1rYW4qMCMRZg25JikGHyy ZwCC4kNwtf8R3CRi4FioJLruHkDKnA9C4kLQdVc/XCcitrD5L6hlUx2JkUEiP7sR5yaMbzAW1iZF sZHMnu6Bt7G6wyJ8RQsyb8h8wu5J7Y8itevGgONwG3oBxU3s0JHq9CVlkEM5i7JoWqIBbUDaRCId 0aF0GzhbZPiDhSeEU//7Ip5I242BJ+A25AIpEZZoT9dYMeMwqcF42pAKY537WtynDXd1h8X4svZI OJEyxApbt119wD4trpTfdch5WBiZoy1h9pI2ft5om9vXxgOfO6hqVQkru65GVKw/1rivE2WzKacn jf/NUC+s77oeJ/ofh4t5OaRGhoI3Hy6/yy5SiWjjcRt4SpRvpl8QbXb3EWY2Uchb/jDGrLawzJBK prwEKpNVMSU8DH1Efe1H4xiH/Z/sxr6eu8T3dnv64Wn4UyVZjp+sLkLXBFf8ruLg0xNY77mdMCKy RkoYqxvXXhBxpNC5bEfxyabLhjQWR3tuh5G+0f/auQ7orIo0egUCASImgUBCQgIphNB7CyW0UKQI roBHxSCr6ypFURfdFQSlSFGkqxxsSO+dUFMACSVoaCEVwoYEAgEkRAiCe79JXgQkBTGynvPNOfx/ +N+bmffuzHtz5353Bnal7NDBoy3S05LgN6ch/OcFII71BtUfYM6XD1HvRDGR65Z/8reEJSWJ6jOz 2yeowutoOLMBWn3mj4YuDfBhp3HmuHwsObwUJxnqHtNulFHbLPUx94QC/qjq4IEvu82AJ1U4Ue5u JwHiX2pG72JkYgQ6e3bE1B7TkHQ2BouiFhdQavbhTCrCb4aNhR2VuPX9l2NT/5V8TgejZgU/c0Ii lc9Oy/qisp0LIoN2IPz5YNM+8sxK3jiGMLvz+fvpxnWs7LeC5GYNHKiCnyMhkv4j7f/zzZ+NynSD OGbSm3X9Vpb53bpAeT7m8/6caCUQJer25zKM6tAATnIqUH0NfmYj5vf6wryrerPPy7MTyJB7DYcq 2BMfimdq9cW4wAmIPh1lJnVW+QV9z+KkRZTeYS2GIIuqq6XeFpTPOj5z72ziZ4chzV81+W1y1G3r uH4rAorA/wcCD0XJiko9jOSUOLwbOCpXuZJBoNPnHbHxxKZcteNBINoct4Vs6BJmH/jMzLbBieKi I0vQzjPAqDBnzsTj/W5jMbT5YFPNtpMhZjATJWD/mQNISUnA2MfHYyiJhaRtDD1lcaCT4zLLP04F zN2xOsaHTTQv6DMZKcC1K2YAkEHxXGoiJvSYiCHNXjXHt5zceV8hG1F8nEhybG1KYi1VBAnFiYIk KfRkGOJ5DVWp+HwQOt6Un5J5luGoy8bc7sEBUgZC+wB7zD+2EE/69sKI1m+ZvPLxQ2oUTqZFw5M+ rQ9CsvOfpSkfDNeJOb4KQ2dCChxLl+NAU5sqxnKj4Fj1b43bhtPnY1GSJv73Q8aZ+s/9dB7ITDcm 7Pae7cyAudk2GO+1fZehFDe8vmMkSSmvkUlUtKTUGAxv+xaer/+c+a2lewssrbkcfhVrGCNwSnoC B5EyGBMy1pSfdv0Cbl2lakAPjcujLiZPXh9COJb3XQSnqdXwTI0+mNV9+h2nhiftAi5dxOh+U9DL r6c5dp6KxItLBmF74k54lfe64/y7/+NsVwnlSZSWHFuBzh4BRildenwlXMs4GeXODPDMJAOnkJPO 87sjmvdTluGuFm5NjC9rLsNUK7xWYemxlZxY7MaemFBsIGHbPmCT6WNdF/Qk2T9HRpVTO/tvLWIj vipRwxYfWYp4TgZe5iRCSNw30Wuw6vgavNT47wzrUiXZMQp+jj5YzvITLp9CElWyiVSO3vB/vVAD uoSen6zVB3MOzDVq2e0YSEjXm4pgBBWyMe1HmTC0eItSOXkqTBJyMYB98uv9X6DBvDZoQHLl79Yc bvZuJrsoob/8eAFn7c9RjR1t8LhyM5MhumQTptuZGML2S8fIpz5E75pPmDzS5vLMO5R2QEevDiZs WGO6L97gxGRY8yG/uSwJ2fav0w+Tv5v6m2ProjdQtc3CxA5jc5VTIdETd07AweRIBPp0MvaA05lp GElVU8KW/9n+DtIy+AwVIskkYkT4BPT37oqFJKYp7Hs7GDYU4mUpzfkVc54h1rd3f4hnfXpgQdQi 5k/HNmJShd7PP9J/mN816DFFQBEoHAIPhWTZFLcxIZqLVGSsJC8ejqZcBVXa+umBvr89vAgelXyN X6OMTQm4O1fHqthN+IQz4RKPZN+2pQwY5YO+sNzZfo7YJGqCJBkoZUZcPCefWZ3Hc6oxPPNKk3+Y c0QBE39JE7fGCEkINb9Zg62ER27klG+Fc8wJBXxIvS4c0C2vk3W6tTrQ277ar/VzKLrAl7XUbyVR PCTJtd2erOuXkNPt1y+z9MZujXJPlTCOh53bb7xKMshLW1WnQpabP6f+hjRvSzLKQEnb3Pa0IXbi nZFk8vOSLl+/bP4vH3KPnb06mQG7ZDGufiSp8HX0xquNX84ui+dcvHYR9Z3r5ebJ7w/TtsRdFCAr icIooVfb4rx+JtPncg5afxem/8m1OpCE7Du1hyHDYci4fhUvLA9Ck2r+5t7qOtcx1x8cv9WEH//V cjhmcADdenwjB+73jWo1cM1L+KrXXLzpPxxRXL3X4dse2EOiLwO1kJi6DI+5lE3Lbbub9H6Jv0z6 qJD493ZPRhOS5Dk9GUZmCp7qydDYbAxk+FF8Yt5UVoX0fLx3Ok6RnOCXEpBFGHf3hZzbz/dL+pHV 53JPJLb2xKAUsTRtzbYtrBpTjOqqkEFRhE6k0Td4KgQzw6fRhB6LLc9t4MTC1vSvBhXr4mmGO6V8 Ot+IcwbJjXuut1A8fFYSv19Hz/a51yDhUmYzWMk58ixdIEmvQHX47mdQ7s/qm3JuafF+Ma8oxlZK Z9+TVMomu+88wuOVStlTKC6WrXDzmPxdmCQqa0NaB6IYqv4h7QiucHJyJIshU/q8bk+iyglJdrWr fIfXTvI3Ku+L70lyD9EucJXP/eEbt4yCfnt+Id8rj64y/UkmPpoUAUXgz0fgoZCsxq6N0NynDWZ9 N9O8FB0ZKhwTMQ1lHJ3Rh6vBHjRNCp+CMG7J0JRqzDx6YiSs1XtJPyQlRGA4fWD/bj0C7q7VMWbX JPPylZe7KCtJdg7YEb8TLao0R+XKXvSMZB8/TnXn9NlYnH6UM86EnRDVpWv1HvTgbEND5/rw4qw+ nLPvPfQRNarM8I97S7g4e2IkZ6tiwD7KsFjKuQScpdIUkhha4HJ4eTlO3vURjrJekNAErRxEr0c1 MyCLOVuIRgefLpy9hqE+w3EeDu5Uf3ZhLxW4RpUbUYFyNGrXx3ummRn514cXIJ5KSlCDAebehAgF eHfCloQQ1KtYx5jOJX9EykGjgInBeELoRJriE3CSxCSIoRMfEh5RQeSYtF9rr/a8/xCumqsNV5p+ Q7kMfV9qpFHAZPDbFE8l8eoVbh2xAlXK0dTOMGIYBzrxcomvpZV3O8zbPxdCqHwqeGMLsdyWHIGE lw+iWZWmaO7ZBuvjd6AOV+U5l3OmzykcB6ge+ldpeYc5Oq++YmdrB/syjph3dJkZVKMvxCD28kkT 2u3i3dm0/wiqJGKQFlIy/ruP4enmZwb+vMq0fhei41ymIuKKn0Ab99a4JGSR/FGW0Ut6vHo3NKve GtP2TDXt39S1iVGXRJXq7BNolNCIhHB0XtgT4wPeM8/AeQ7ilUlaJdwo5Yt/KK8kBLIRQ7+y9H/a 3hm4duOaWeDRum5/QxbEkB4StBXJl5NNCGtk+DhDiPrX6XsHmcirfCEksq2JtFVo6kH6lq5hwIqB ZvsR8TUeTj3CVZG7cInbk8j2IIbQXPsJotYep0Iqnrr8koSp2y/qjfYMw7/b9h34e7REZ66ylHol tasaAB/X2lhM35UnJxLlqKhuY19IZPizq28X4tsVHq6+eHvnaE4s0qn4VqCKtxanMpJx/J+Rpn+U t3UEGJqdTC9jDFXXQ/RGXrmRgX2Dwk24diqfDfFVRp6PpuWqhOnjDfgsS/jtaeI4iff/7IbBJq8o sHP3f46WPgGm74qlIZzYZLLuTTGbs835WcDq2PV4oUEQn0eP/G6fBv9K2P/ibsRciEVwzBYMDR2F xk5+uaqqlXkpt10JWjAABACnh8YYRViOiZJ74MU9RjUOpt9sWMgoNKlUEz39ssPTVv7FDBkPWjQQ eKwskplfyLsmRUAR+HMReCj7ZMmsuKt3YLYnJnYj9qZEog19S1898WmhlYq8YJJZ77dRCxnC+dnM fruwHlHMVkevRcXHXDiTB56lub4bB9pYzqLXc3B/jPsLdaNhPIPkoDZfVkKi2nm0pqmWxxkas7fN OZ55CfUq1TZEKpBelEyaT5efWItgSv1Xsi5jcOOXEEjyUo4+j7burRDH8jewfEcOnF05MEj59aly GKUjrxvg70KyZuybDRuUoNfJniv4ZIXdDfSq0cOQHFECRfXJoDdM6t/C+jMZshhKU3snhkpEUdhN 0rfs+Gq4MAQjvqRErgBrzsHejy9zyd/VKxBX6OnKzh+Ga1T4hjV9BR2oBojvZXrELJQqVgoVeC9S vwykUr8oFyY/8fuRg8zymHWsP4xENhOvM7QqM2ZZESihG0cSETe+2CXvKRqbBccWrs1QixhL/T9y sF3HENkOXmtJKl2TuPBBCK4oXdI+l6msLeP9baVHJot7TQ1n6Kdt1Ta/Ko75YCh9rIas7ORAup/h URsSl9d4f23YrtI+Uv5ZrhxbTQP8ISpJ3aiqzOv5GTxoRi8oiRKSTILhSzVBtvyoULY84nnPzYhv Kw9/o/o8Tg9cOvFdyxVkq2mIv8n2k8G7h293EzbedpqrykgwF0WvxgZi1axiPXzKsKaQ2YKSKC/S v2Rl7heHF2M3yan4vz7pMsXcm5U/4r/7MJrh5LJUh4vfEpXlFxNKu1vJsc63vuUZmhf5JUJIpCox /OZE0n6SKwH56HBLjD44Ri+l+JacuO2Ep2NV83ylsq3sSO7asX1kpW1+SUhiSPx2nKbC9g1N3+to EWjm2hQfcesLCcWWKVkGgl8K61zG/hWStBs2VMpGUBFsyEmMKIld2P/PcbHK2rhg7OIiFWeGaqd0 HJ+7D50QTTcqQJH0Mx5iqK88w4NvtnjNTBCEzM058Dn2clLkQoLmRD9XIrG0LVHSbPdQkf7ETiT5 p9LisCpuE7exiEN/eq/msH1kAiOLNr5nuU6lncy+c0lUCC9RZROVS9Q5uYfCJCFIkxiudGGZmVnX YE8yKRM0K4niHpV+DO1I5PvW+Vuugmcd30yCN3nvNOYvj0wuUHDge8ZaWCLnyHvgBy4c6cA2eYpb zxRWabTK129FQBF4cAQeYSiLwvfDS6Iyidpzd0jsz7qiDC5/z6/ugo6LdJ/BGbJ4PO41eBWU/0Hv U0JHQspkM8p71V9Q+VZ+uf7fkx40v4TzRImR679Xkv4hHqPfe31SpqzEslaV3l2HYCe4FSZMeHfe wvxf6r7KcKIjVbXbBzlZPCFEIP1qugnh3e/2B1bdsg2BhKlk8P8rJWlT2X9LQsASmhMv1b2SnCd9 LK/tXaT9JKx/9/YpVllCqKSMvNrfOi+vb3l+ZVIhkwtNioAioAjcLwIPnWTd7wXr+YqAIqAIKAKK gCKgCPwVEJAYgiZFQBFQBBQBRUARUAQUgT8YASVZfzCgWpwioAgoAoqAIqAIKAKCgJIs7QeKgCKg CCgCioAioAgUAQJKsooAVC1SEVAEFAFFQBFQBBQBJVnaBxQBRUARUAQUAUVAESgCBJRkFQGoWqQi oAgoAoqAIqAIKAJKsrQPKAKKgCKgCCgCioAiUAQIKMkqAlC1SEVAEVAEFAFFQBFQBJRkaR9QBBQB RUARUAQUAUWgCBBQklUEoGqRioAioAgoAoqAIqAIKMnSPqAIKAKKgCKgCCgCikARIKAkqwhA1SIV AUVAEVAEFAFFQBFQkqV9QBFQBBQBRUARUAQUgSJA4H/dP8ViFIENjAAAAABJRU5ErkJggg== --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Disposition: attachment; filename=draft-ietf-lisp-lcaf-01.txt Content-Type: text/plain; name="draft-ietf-lisp-lcaf-01.txt" Content-Transfer-Encoding: quoted-printable Network Working Group D. Farinacci Internet-Draft D. Meyer Intended status: Experimental cisco Systems Expires: July 11, 2013 J. Snijders InTouch N.V. January 7, 2013 LISP Canonical Address Format (LCAF) draft-ietf-lisp-lcaf-01 Abstract This draft defines a canonical address format encoding used in LISP control messages and in the encoding of lookup keys for the LISP Mapping Database System. Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on July 11, 2013. Copyright Notice Copyright (c) 2013 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Farinacci, et al. Expires July 11, 2013 [Page 1] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Definition of Terms . . . . . . . . . . . . . . . . . . . . . 4 3. LISP Canonical Address Format Encodings . . . . . . . . . . . 5 4. LISP Canonical Address Applications . . . . . . . . . . . . . 7 4.1. Segmentation using LISP . . . . . . . . . . . . . . . . . 7 4.2. Carrying AS Numbers in the Mapping Database . . . . . . . 8 4.3. Convey Application Specific Data . . . . . . . . . . . . . 9 4.4. Assigning Geo Coordinates to Locator Addresses . . . . . . 10 4.5. Generic Database Mapping Lookups . . . . . . . . . . . . . 11 4.6. NAT Traversal Scenarios . . . . . . . . . . . . . . . . . 13 4.7. PETR Admission Control Functionality . . . . . . . . . . . 14 4.8. Multicast Group Membership Information . . . . . . . . . . 16 4.9. Traffic Engineering using Re-encapsulating Tunnels . . . . 17 4.10. Storing Security Data in the Mapping Database . . . . . . 19 4.11. Source/Destination 2-Tuple Lookups . . . . . . . . . . . . 20 4.12. Applications for AFI List Type . . . . . . . . . . . . . . 21 4.12.1. Binding IPv4 and IPv6 Addresses . . . . . . . . . . . 21 4.12.2. Layer-2 VPNs . . . . . . . . . . . . . . . . . . . . 22 4.12.3. ASCII Names in the Mapping Database . . . . . . . . . 22 4.12.4. Using Recursive LISP Canonical Address Encodings . . 23 4.12.5. Compatibility Mode Use Case . . . . . . . . . . . . . 24 5. Security Considerations . . . . . . . . . . . . . . . . . . . 25 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 26 7. References . . . . . . . . . . . . . . . . . . . . . . . . . . 27 7.1. Normative References . . . . . . . . . . . . . . . . . . . 27 7.2. Informative References . . . . . . . . . . . . . . . . . . 27 Appendix A. Acknowledgments . . . . . . . . . . . . . . . . . . . 29 Appendix B. Document Change Log . . . . . . . . . . . . . . . . . 30 B.1. Changes to draft-ietf-lisp-01.txt . . . . . . . . . . . . 30 B.2. Changes to draft-ietf-lisp-00.txt . . . . . . . . . . . . 30 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 31 Farinacci, et al. Expires July 11, 2013 [Page 2] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 1. Introduction The LISP architecture and protocols [LISP] introduces two new numbering spaces, Endpoint Identifiers (EIDs) and Routing Locators (RLOCs) which are intended to replace most use of IP addresses on the Internet. To provide flexibility for current and future applications, these values can be encoded in LISP control messages using a general syntax that includes Address Family Identifier (AFI), length, and value fields. Currently defined AFIs include IPv4 and IPv6 addresses, which are formatted according to code-points assigned in [AFI] as follows: IPv4 Encoded Address: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ IPv6 Encoded Address: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 2 | IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ This document describes the currently-defined AFIs the LISP protocol uses along with their encodings and introduces the LISP Canonical Address Format (LCAF) that can be used to define the LISP-specific encodings for arbitrary AFI values. Farinacci, et al. Expires July 11, 2013 [Page 3] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 2. Definition of Terms Address Family Identifier (AFI): a term used to describe an address encoding in a packet. An address family currently defined for IPv4 or IPv6 addresses. See [AFI] and [RFC1700] for details. The reserved AFI value of 0 is used in this specification to indicate an unspecified encoded address where the the length of the address is 0 bytes following the 16-bit AFI value of 0. Unspecified Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 0 | = | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Endpoint ID (EID): a 32-bit (for IPv4) or 128-bit (for IPv6) value used in the source and destination address fields of the first (most inner) LISP header of a packet. The host obtains a destination EID the same way it obtains a destination address today, for example through a DNS lookup or SIP exchange. The source EID is obtained via existing mechanisms used to set a host's "local" IP address. An EID is allocated to a host from an EID-prefix block associated with the site where the host is located. An EID can be used by a host to refer to other hosts. Routing Locator (RLOC): the IPv4 or IPv6 address of an egress tunnel router (ETR). It is the output of a EID-to-RLOC mapping lookup. An EID maps to one or more RLOCs. Typically, RLOCs are numbered from topologically aggregatable blocks that are assigned to a site at each point to which it attaches to the global Internet; where the topology is defined by the connectivity of provider networks, RLOCs can be thought of as PA addresses. Multiple RLOCs can be assigned to the same ETR device or to multiple ETR devices at a site. Farinacci, et al. Expires July 11, 2013 [Page 4] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 3. LISP Canonical Address Format Encodings IANA has assigned AFI value 16387 (0x4003) to the LISP architecture and protocols. This specification defines the encoding format of the LISP Canonical Address (LCA). The first 4 bytes of an LISP Canonical Address are followed by a variable length of fields: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type | Rsvd2 | Length | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Rsvd1: this 8-bit field is reserved for future use and MUST be transmitted as 0 and ignored on receipt. Flags: this 8-bit field is for future definition and use. For now, set to zero on transmission and ignored on receipt. Type: this 8-bit field is specific to the LISP Canonical Address formatted encodings, values are: Type 0: Null Body Type Type 1: AFI List Type Type 2: Instance ID Type Type 3: AS Number Type Type 4: Application Data Type Type 5: Geo Coordinates Type Type 6: Opaque Key Type Type 7: NAT-Traversal Type Type 8: Nonce Locator Type Type 9: Multicast Info Type Farinacci, et al. Expires July 11, 2013 [Page 5] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Type 10: Explicit Locator Path Type Type 11: Security Key Type Type 12: Source/Dest Key Type Rsvd2: this 8-bit field is reserved for future use and MUST be transmitted as 0 and ignored on receipt. Length: this 16-bit field is in units of bytes and covers all of the LISP Canonical Address payload, starting and including the byte after the Length field. So any LCAF encoded address will have a minimum length of 8 bytes when the Length field is 0. The 8 bytes include the AFI, Flags, Type, Reserved, and Length fields. When the AFI is not next to encoded address in a control message, then the encoded address will have a minimum length of 6 bytes when the Length field is 0. The 6 bytes include the Flags, Type, Reserved, and Length fields. Farinacci, et al. Expires July 11, 2013 [Page 6] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4. LISP Canonical Address Applications 4.1. Segmentation using LISP When multiple organizations inside of a LISP site are using private addresses [RFC1918] as EID-prefixes, their address spaces must remain segregated due to possible address duplication. An Instance ID in the address encoding can aid in making the entire AFI based address unique. Another use for the Instance ID LISP Canonical Address Format is when creating multiple segmented VPNs inside of a LISP site where keeping EID-prefix based subnets is desirable. Instance ID LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 2 | IID mask-len | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Instance ID | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ IID mask-len: if the AFI is set to 0, then this format is not encoding an extended EID-prefix but rather an instance-ID range where the 'IID mask-len' indicates the number of high-order bits used in the Instance ID field for the range. Length value n: length in bytes of the AFI address that follows the Instance ID field including the AFI field itself. Instance ID: the low-order 24-bits that can go into a LISP data header when the I-bit is set. See [LISP] for details. AFI =3D x: x can be any AFI value from [AFI]. This LISP Canonical Address Type can be used to encode either EID or RLOC addresses. Farinacci, et al. Expires July 11, 2013 [Page 7] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.2. Carrying AS Numbers in the Mapping Database When an AS number is stored in the LISP Mapping Database System for either policy or documentation reasons, it can be encoded in a LISP Canonical Address. AS Number LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 3 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AS Number | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the AS Number field including the AFI field itself. AS Number: the 32-bit AS number of the autonomous system that has been assigned either the EID or RLOC that follows. AFI =3D x: x can be any AFI value from [AFI]. The AS Number Canonical Address Type can be used to encode either EID or RLOC addresses. The former is used to describe the LISP-ALT AS number the EID-prefix for the site is being carried for. The latter is used to describe the AS that is carrying RLOC based prefixes in the underlying routing system. Farinacci, et al. Expires July 11, 2013 [Page 8] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.3. Convey Application Specific Data When a locator-set needs to be conveyed based on the type of application or the Per-Hop Behavior (PHB) of a packet, the Application Data Type can be used. Application Data LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 4 | Rsvd2 | 8 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IP TOS, IPv6 TC, or Flow Label | Protocol | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Local Port | Remote Port | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the 8-byte Application Data fields including the AFI field itself. IP TOS, IPv6 TC, or Flow Label: this field stores the 8-bit IPv4 TOS field used in an IPv4 header, the 8-bit IPv6 Traffic Class or Flow Label used in an IPv6 header. Local Port/Remote Port: these fields are from the TCP, UDP, or SCTP transport header. AFI =3D x: x can be any AFI value from [AFI]. The Application Data Canonical Address Type is used for an EID encoding when an ITR wants a locator-set for a specific application. When used for an RLOC encoding, the ETR is supplying a locator-set for each specific application is has been configured to advertise. Farinacci, et al. Expires July 11, 2013 [Page 9] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.4. Assigning Geo Coordinates to Locator Addresses If an ETR desires to send a Map-Reply describing the Geo Coordinates for each locator in its locator-set, it can use the Geo Coordinate Type to convey physical location information. Coordinates are specified using the WGS-84 (World Geodetic System) reference coordinate system [WGS-84]. Geo Coordinate LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 5 | Rsvd2 | 12 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |N| Latitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |E| Longitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Altitude | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the 8-byte Longitude and Latitude fields including the AFI field itself. N: When set to 1 means North, otherwise South. Latitude Degrees: Valid values range from 0 to 90 degrees above or below the equator (northern or southern hemisphere, respectively). Latitude Minutes: Valid values range from 0 to 59. Latitude Seconds: Valid values range from 0 to 59. E: When set to 1 means East, otherwise West. Longitude Degrees: Value values are from 0 to 180 degrees right or left of the Prime Meridian. Farinacci, et al. Expires July 11, 2013 [Page 10] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Longitude Minutes: Valid values range from 0 to 59. Longitude Seconds: Valid values range from 0 to 59. Altitude: Height relative to sea level in meters. This is a signed integer meaning that the altitude could be below sea level. A value of 0x7fffffff indicates no Altitude value is encoded. AFI =3D x: x can be any AFI value from [AFI]. The Geo Coordinates Canonical Address Type can be used to encode either EID or RLOC addresses. When used for EID encodings, you can determine the physical location of an EID along with the topological location by observing the locator-set. 4.5. Generic Database Mapping Lookups When the LISP Mapping Database system holds information accessed by a generic formatted key (where the key is not the usual IPv4 or IPv6 address), an opaque key may be desirable. Farinacci, et al. Expires July 11, 2013 [Page 11] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Opaque Key LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 6 | Rsvd2 | n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Field Num | Key Wildcard Fields | Key . . . | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | . . . Key | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the type's payload. The value n is the number of bytes that follow this Length field. Key Field Num: the number of fields (minus 1) the key can be broken up into. The width of the fields are fixed length. So for a key size of 8 bytes, with a Key Field Num of 4 allows 4 fields of 2 bytes in length. Valid values for this field range from 0 to 15 supporting a maximum of 16 field separations. Key Wildcard Fields: describes which fields in the key are not used as part of the key lookup. This wildcard encoding is a bitfield. Each bit is a don't-care bit for a corresponding field in the key. Bit 0 (the low-order bit) in this bitfield corresponds the first field, right-justified in the key, bit 1 the second field, and so on. When a bit is set in the bitfield it is a don't-care bit and should not be considered as part of the database lookup. When the entire 16-bits is set to 0, then all bits of the key are used for the database lookup. Key: the variable length key used to do a LISP Database Mapping lookup. The length of the key is the value n (shown above) minus 3. Farinacci, et al. Expires July 11, 2013 [Page 12] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.6. NAT Traversal Scenarios When a LISP system is conveying global address and mapped port information when traversing through a NAT device, the NAT-Traversal LCAF Type is used. See [LISP-NATT] for details. NAT-Traversal Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 7 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | MS UDP Port Number | ETR UDP Port Number | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Global ETR RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | MS RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Private ETR RLOC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | RTR RLOC Address 1 ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | RTR RLOC Address k ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI addresses that follows the UDP Port Number field including the AFI fields themselves. MS UDP Port Number: this is the UDP port number of the Map-Server and is set to 4342. ETR UDP Port Number: this is the port number returned to a LISP system which was copied from the source port from a packet that has flowed through a NAT device. AFI =3D x: x can be any AFI value from [AFI]. Global ETR RLOC Address: this is an address known to be globally unique built by NAT-traversal functionality in a LISP router. MS RLOC Address: this is the address of the Map-Server used in the destination RLOC of a packet that has flowed through a NAT device. Farinacci, et al. Expires July 11, 2013 [Page 13] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Private ETR RLOC Address: this is an address known to be a private address inserted in this LCAF format by a LISP router that resides on the private side of a NAT device. RTR RLOC Address: this is an encapsulation address used by an ITR or PITR which resides behind a NAT device. This address is known to have state in a NAT device so packets can flow from it to the LISP ETR behind the NAT. There can be one or more NTR addresses supplied in these set of fields. The number of NTRs encoded is determined by the LCAF length field. When there are no NTRs supplied, the NTR fields can be omitted and reflected by the LCAF length field or an AFI of 0 can be used to indicate zero NTRs encoded. 4.7. PETR Admission Control Functionality When a public PETR device wants to verify who is encapsulating to it, it can check for a specific nonce value in the LISP encapsulated packet. To convey the nonce to admitted ITRs or PITRs, this LCAF format is used in a Map-Register or Map-Reply locator-record. Farinacci, et al. Expires July 11, 2013 [Page 14] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Nonce Locator Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 8 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Nonce | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of the AFI address that follows the Nonce field including the AFI field itself. Reserved: must be set to zero and ignore on receipt. Nonce: this is a nonce value returned by an ETR in a Map-Reply locator-record to be used by an ITR or PITR when encapsulating to the locator address encoded in the AFI field of this LCAF type. AFI =3D x: x can be any AFI value from [AFI]. Farinacci, et al. Expires July 11, 2013 [Page 15] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.8. Multicast Group Membership Information Multicast group information can be published in the mapping database so a lookup on an EID based group address can return a replication list of group addresses or a unicast addresses for single replication or multiple head-end replications. This LCAF encoding can be used to send broadcast packets to all members of a subnet when each EIDs are away from their home subnet location. Multicast Info Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 9 | Rsvd2 |R|L|J| 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Source MaskLen| Group MaskLen | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Source/Subnet Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Group Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. Reserved: must be set to zero and ignore on receipt. R-bit: this is the RP-bit that represents PIM (S,G,RP-bit) multicast state. This bit can be set for Joins (when the J-bit is set) or for Leaves (when the L-bit is set). See [LISP-MRSIG] for more usage details. L-bit: this is the Leave-Request bit and is used when this LCAF type is present in the destination EID-prefix field of a Map-Request. See [LISP-MRSIG] for details. J-bit: this is the Join-Request bit and is used when this LCAF type is present in the destination EID-prefix field of a Map-Request. See [LISP-MRSIG] for details. The J-bit MUST not be set when the L-bit is also set in the same LCAF block. A receiver should not take any specific Join or Leave action when both bits are set. Source MaskLen: the mask length of the source prefix that follows. Farinacci, et al. Expires July 11, 2013 [Page 16] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Group MaskLen: the mask length of the group prefix that follows. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. 4.9. Traffic Engineering using Re-encapsulating Tunnels For a given EID lookup into the mapping database, this LCAF format can be returned to provide a list of locators in an explicit re- encapsulation path. See [LISP-TE] for details. Farinacci, et al. Expires July 11, 2013 [Page 17] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Explicit Locator Path (ELP) Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 10 | Rsvd2 | n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Rsvd3 |L|P|S| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reencap Hop 1 ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Rsvd3 |L|P|S| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reencap Hop k ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. Lookup bit (L): this is the Lookup bit used to indicate to the user of the ELP to not use this address for encapsulation but to look it up in the mapping database system to obtain an encapsulating RLOC address. RLOC-Probe bit (P): this is the RLOC-probe bit which means the Reencap Hop allows RLOC-probe messages to be sent to it. When the R-bit is set to 0, RLOC-probes must not be sent. When a Reencap Hop is an anycast address then multiple physical Reencap Hops are using the same RLOC address. In this case, RLOC-probes are not needed because when the closest RLOC address is not reachable another RLOC address can reachable. Strict bit (S): this the strict bit which means the associated Rencap Hop is required to be used. If this bit is 0, the reencapsulator can skip this Reencap Hop and go to the next one in the list. Farinacci, et al. Expires July 11, 2013 [Page 18] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.10. Storing Security Data in the Mapping Database When a locator in a locator-set has a security key associated with it, this LCAF format will be used to encode key material. See [LISP-DDT] for details. Security Key Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 11 | Rsvd2 | 6 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Count | Rsvd3 | Key Algorithm | Rsvd4 |R| +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key Length | Key Material ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... Key Material | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Locator Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that start with the Key Material field. Key Count: the Key Count field declares the number of Key sections included in this LCAF. Key Algorithm: the Algorithm field identifies the key's cryptographic algorithm and specifies the format of the Public Key field. R bit: this is the revoke bit and, if set, it specifies that this Key is being Revoked. Key Length: this field determines the length in bytes of the Key Material field. Key Material: the Key Material field stores the key material. The format of the key material stored depends on the Key Algorithm field. AFI =3D x: x can be any AFI value from [AFI].This is the locator address that owns the encoded security key. Farinacci, et al. Expires July 11, 2013 [Page 19] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.11. Source/Destination 2-Tuple Lookups When both a source and destination address of a flow needs consideration for different locator-sets, this 2-tuple key is used in EID fields in LISP control messages. When the Source/Dest key is registered to the mapping database, it can be encoded as a source- prefix and destination-prefix. When the Source/Dest is used as a key for a mapping database lookup the source and destination come from a data packet. Source/Dest Key Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 12 | Rsvd2 | 4 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Reserved | Source-ML | Dest-ML | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Source-Prefix ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D x | Destination-Prefix ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length value n: length in bytes of fields that follow. Reserved: must be set to zero and ignore on receipt. Source-ML: the mask length of the source prefix that follows. Dest-ML: the mask length of the destination prefix that follows. AFI =3D x: x can be any AFI value from [AFI]. When a specific AFI = has its own encoding of a multicast address, this field must be either a group address or a broadcast address. Refer to [LISP-TE] for usage details. Farinacci, et al. Expires July 11, 2013 [Page 20] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12. Applications for AFI List Type 4.12.1. Binding IPv4 and IPv6 Addresses When header translation between IPv4 and IPv6 is desirable a LISP Canonical Address can use the AFI List Type to carry multiple AFIs in one LCA AFI. Bounded Address LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + 4 + 2 + 16 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | AFI =3D 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv6 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 24 when IPv4 and IPv6 AFI encoded addresses are used. This type of address format can be included in a Map-Request when the address is being used as an EID, but the Mapping Database System lookup destination can use only the IPv4 address. This is so a Mapping Database Service Transport System, such as LISP-ALT [ALT], can use the Map-Request destination address to route the control message to the desired LISP site. Farinacci, et al. Expires July 11, 2013 [Page 21] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12.2. Layer-2 VPNs When MAC addresses are stored in the LISP Mapping Database System, the AFI List Type can be used to carry AFI 6. MAC Address LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + 6 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 6 | Layer-2 MAC Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... Layer-2 MAC Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 8 when MAC address AFI encoded addresses are used. This address format can be used to connect layer-2 domains together using LISP over an IPv4 or IPv6 core network to create a layer-2 VPN. In this use-case, a MAC address is being used as an EID, and the locator-set that this EID maps to can be an IPv4 or IPv6 RLOCs, or even another MAC address being used as an RLOC. 4.12.3. ASCII Names in the Mapping Database If DNS names or URIs are stored in the LISP Mapping Database System, the AFI List Type can be used to carry an ASCII string where it is delimited by length 'n' of the LCAF Length encoding. ASCII LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 2 + n | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 17 | DNS Name or URI ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Farinacci, et al. Expires July 11, 2013 [Page 22] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Length value n: length in bytes AFI=3D17 field and the = null-terminated ASCII string (the last byte of 0 is included). 4.12.4. Using Recursive LISP Canonical Address Encodings When any combination of above is desirable, the AFI List Type value can be used to carry within the LCA AFI another LCA AFI. Recursive LISP Canonical Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 4 + 8 + 2 + 4 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 4 | Rsvd2 | 12 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IP TOS, IPv6 QQS or Flow Label | Protocol | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Local Port | Remote Port | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 1 | IPv4 Address ... | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ... IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ Length: length in bytes is fixed at 18 when an AFI=3D1 IPv4 address = is included. This format could be used by a Mapping Database Transport System, such as LISP-ALT [ALT], where the AFI=3D1 IPv4 address is used as an EID and placed in the Map-Request destination address by the sending LISP system. The ALT system can deliver the Map-Request to the LISP destination site independent of the Application Data Type AFI payload values. When this AFI is processed by the destination LISP site, it can return different locator-sets based on the type of application or level of service that is being requested. Farinacci, et al. Expires July 11, 2013 [Page 23] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 4.12.5. Compatibility Mode Use Case A LISP system should use the AFI List Type format when sending to LISP systems that do not support a particular LCAF Type used to encode locators. This allows the receiving system to be able to parse a locator address for encapsulation purposes. The list of AFIs in an AFI List LCAF Type has no semantic ordering and a receiver should parse each AFI element no matter what the ordering. Compatibility Mode Address Format: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 1 | Rsvd2 | 22 + 6 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 16387 | Rsvd1 | Flags | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Type =3D 5 | Rsvd2 | 12 + 2 | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |N| Latitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |E| Longitude Degrees | Minutes | Seconds | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Altitude | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | AFI =3D 0 | AFI =3D 1 = | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | IPv4 Address | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ If a system does not recognized the Geo Coordinate LCAF Type that is accompanying a locator address, an encoder can include the Geo Coordinate LCAF Type embedded in a AFI List LCAF Type where the AFI in the Geo Coordinate LCAF is set to 0 and the AFI encoded next in the list is encoded with a valid AFI value to identify the locator address. A LISP system is required to support the AFI List LCAF Type to use this procedure. It would skip over 10 bytes of the Geo Coordinate LCAF Type to get to the locator address encoding (an IPv4 locator address). A LISP system that does support the Geo Coordinate LCAF Type can support parsing the locator address within the Geo Coordinate LCAF encoding or in the locator encoding that follows in the AFI List LCAF. Farinacci, et al. Expires July 11, 2013 [Page 24] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 5. Security Considerations There are no security considerations for this specification. The security considerations are documented for the protocols that use LISP Canonical Addressing. Refer to the those relevant specifications. Farinacci, et al. Expires July 11, 2013 [Page 25] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 6. IANA Considerations The Address Family AFI definitions from [AFI] only allocate code- points for the AFI value itself. The length of the address or entity that follows is not defined and is implied based on conventional experience. Where the LISP protocol uses LISP Canonical Addresses specifically, the address length definitions will be in this specification and take precedent over any other specification. An IANA Registry for LCAF Type values will be created. The values that are considered for use by the main LISP specification [LISP] will be in the IANA Registry. Other Type values used for experimentation will be defined and described in this document. Farinacci, et al. Expires July 11, 2013 [Page 26] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 7. References 7.1. Normative References [RFC1700] Reynolds, J. and J. Postel, "Assigned Numbers", RFC 1700, October 1994. [RFC1918] Rekhter, Y., Moskowitz, R., Karrenberg, D., Groot, G., and E. Lear, "Address Allocation for Private Internets", BCP 5, RFC 1918, February 1996. 7.2. Informative References [AFI] IANA, "Address Family Identifier (AFIs)", ADDRESS FAMILY NUMBERS http://www.iana.org/numbers.html, Febuary 2007. [ALT] Fuller, V., Farinacci, D., Meyer, D., and D. Lewis, "LISP Alternative Topology (LISP+ALT)", draft-ietf-lisp-alt-06.txt (work in progress), March 2011. [LISP] Farinacci, D., Fuller, V., Meyer, D., and D. Lewis, "Locator/ID Separation Protocol (LISP)", draft-ietf-lisp-12.txt (work in progress), April 2011. [LISP-DDT] Fuller, V., Lewis, D., and V. Ermagan, "LISP Delegated Database Tree", draft-fuller-lisp-ddt-01.txt (work in progress). [LISP-MRSIG] Farinacci, D. and M. Napierala, "LISP Control-Plane Multicast Signaling", draft-farinacci-lisp-mr-signaling-00.txt (work in progress). [LISP-NATT] Ermagan, V., Farinacci, D., Lewis, D., Skriver, J., Maino, F., and C. White, "NAT traversal for LISP", draft-ermagan-lisp-nat-traversal-00.txt (work in progress). [LISP-TE] Farinacci, D., Lahiri, P., and M. Kowal, "LISP Traffic Engineering Use-Cases", draft-farinacci-lisp-te-01.txt (work in progress). [WGS-84] Geodesy and Geophysics Department, DoD., "World Geodetic System 1984", NIMA TR8350.2, January 2000, . Farinacci, et al. Expires July 11, 2013 [Page 28] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Appendix A. Acknowledgments The authors would like to thank Vince Fuller, Gregg Schudel, Jesper Skriver, Luigi Iannone, Isidor Kouvelas, and Sander Steffann for their technical and editorial commentary. The authors would like to thank Victor Moreno for discussions that lead to the definition of the Multicast Info LCAF type. The authors would like to thank Parantap Lahiri and Michael Kowal for discussions that lead to the definition of the Explicit Locator Path (ELP) LCAF type. The authors would like to thank Fabio Maino and Vina Ermagan for discussions that lead to the definition of the Security Key LCAF type. Thanks also goes to Terry Manderson for assistance obtaining a LISP AFI value from IANA. Farinacci, et al. Expires July 11, 2013 [Page 29] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Appendix B. Document Change Log B.1. Changes to draft-ietf-lisp-01.txt o Submitted January 2013. o Change longitude range from 0-90 to 0-180 in section 4.4. o Added reference to WGS-84 in section 4.4. B.2. Changes to draft-ietf-lisp-00.txt o Posted first working group draft August 2012. o This draft was renamed from draft-farinacci-lisp-lcaf-10.txt. Farinacci, et al. Expires July 11, 2013 [Page 30] =0C Internet-Draft LISP Canonical Address Format (LCAF) January 2013 Authors' Addresses Dino Farinacci cisco Systems Tasman Drive San Jose, CA 95134 USA Email: farinacci@gmail.com Dave Meyer cisco Systems 170 Tasman Drive San Jose, CA USA Email: dmm@cisco.com Job Snijders InTouch N.V. Middenweg 76 1097 BS Amsterdam The Netherlands Email: job@instituut.net Farinacci, et al. Expires July 11, 2013 [Page 31] =0C --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Disposition: attachment; filename=rfcdiff-lisp-lcaf-00-to-01.html Content-Type: text/html; name="rfcdiff-lisp-lcaf-00-to-01.html" Content-Transfer-Encoding: 7bit wdiff draft-ietf-lisp-lcaf-00.txt draft-ietf-lisp-lcaf-01.txt 
Network Working Group                                       D. Farinacci
Internet-Draft                                                  D. Meyer
Intended status: Experimental                              cisco Systems
Expires: March 3, July 11, 2013                                       J. Snijders
                                                            InTouch N.V.
                                                         August 30, 2012
                                                         January 7, 2013

                  LISP Canonical Address Format (LCAF)
                        draft-ietf-lisp-lcaf-00
                        draft-ietf-lisp-lcaf-01

Abstract

   This draft defines a canonical address format encoding used in LISP
   control messages and in the encoding of lookup keys for the LISP
   Mapping Database System.

Status of this Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on March 3, July 11, 2013.

Copyright Notice

   Copyright (c) 2012 2013 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  3
   2.  Definition of Terms  . . . . . . . . . . . . . . . . . . . . .  4
   3.  LISP Canonical Address Format Encodings  . . . . . . . . . . .  5
   4.  LISP Canonical Address Applications  . . . . . . . . . . . . .  7
     4.1.  Segmentation using LISP  . . . . . . . . . . . . . . . . .  7
     4.2.  Carrying AS Numbers in the Mapping Database  . . . . . . .  8
     4.3.  Convey Application Specific Data . . . . . . . . . . . . .  9
     4.4.  Assigning Geo Coordinates to Locator Addresses . . . . . . 10
     4.5.  Generic Database Mapping Lookups . . . . . . . . . . . . . 11
     4.6.  NAT Traversal Scenarios  . . . . . . . . . . . . . . . . . 13
     4.7.  PETR Admission Control Functionality . . . . . . . . . . . 14
     4.8.  Multicast Group Membership Information . . . . . . . . . . 16
     4.9.  Traffic Engineering using Re-encapsulating Tunnels . . . . 17
     4.10. Storing Security Data in the Mapping Database  . . . . . . 19
     4.11. Source/Destination 2-Tuple Lookups . . . . . . . . . . . . 20
     4.12. Applications for AFI List Type . . . . . . . . . . . . . . 21
       4.12.1.  Binding IPv4 and IPv6 Addresses . . . . . . . . . . . 21
       4.12.2.  Layer-2 VPNs  . . . . . . . . . . . . . . . . . . . . 22
       4.12.3.  ASCII Names in the Mapping Database . . . . . . . . . 22
       4.12.4.  Using Recursive LISP Canonical Address Encodings  . . 23
       4.12.5.  Compatibility Mode Use Case . . . . . . . . . . . . . 24
   5.  Security Considerations  . . . . . . . . . . . . . . . . . . . 25
   6.  IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 26
   7.  References . . . . . . . . . . . . . . . . . . . . . . . . . . 27
     7.1.  Normative References . . . . . . . . . . . . . . . . . . . 27
     7.2.  Informative References . . . . . . . . . . . . . . . . . . 27
   Appendix A.  Acknowledgments . . . . . . . . . . . . . . . . . . . 28 29
   Appendix B.  Document Change Log . . . . . . . . . . . . . . . . . 29 30
     B.1.  Changes to draft-ietf-lisp-01.txt  . . . . . . . . . . . . 30
     B.2.  Changes to draft-ietf-lisp-00.txt  . . . . . . . . . . . . 29 30
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 30 31

1.  Introduction

   The LISP architecture and protocols [LISP] introduces two new
   numbering spaces, Endpoint Identifiers (EIDs) and Routing Locators
   (RLOCs) which are intended to replace most use of IP addresses on the
   Internet.  To provide flexibility for current and future
   applications, these values can be encoded in LISP control messages
   using a general syntax that includes Address Family Identifier (AFI),
   length, and value fields.

   Currently defined AFIs include IPv4 and IPv6 addresses, which are
   formatted according to code-points assigned in [AFI] as follows:

   IPv4 Encoded Address:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   IPv6 Encoded Address:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 2            |       IPv6 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv6 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   This document describes the currently-defined AFIs the LISP protocol
   uses along with their encodings and introduces the LISP Canonical
   Address Format (LCAF) that can be used to define the LISP-specific
   encodings for arbitrary AFI values.

2.  Definition of Terms

   Address Family Identifier (AFI):  a term used to describe an address
      encoding in a packet.  An address family currently defined for
      IPv4 or IPv6 addresses.  See [AFI] and [RFC1700] for details.  The
      reserved AFI value of 0 is used in this specification to indicate
      an unspecified encoded address where the the length of the address
      is 0 bytes following the 16-bit AFI value of 0.

   Unspecified Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 0            |    <nothing follows AFI=0>    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Endpoint ID (EID):   a 32-bit (for IPv4) or 128-bit (for IPv6) value
      used in the source and destination address fields of the first
      (most inner) LISP header of a packet.  The host obtains a
      destination EID the same way it obtains a destination address
      today, for example through a DNS lookup or SIP exchange.  The
      source EID is obtained via existing mechanisms used to set a
      host's "local" IP address.  An EID is allocated to a host from an
      EID-prefix block associated with the site where the host is
      located.  An EID can be used by a host to refer to other hosts.

   Routing Locator (RLOC):   the IPv4 or IPv6 address of an egress
      tunnel router (ETR).  It is the output of a EID-to-RLOC mapping
      lookup.  An EID maps to one or more RLOCs.  Typically, RLOCs are
      numbered from topologically aggregatable blocks that are assigned
      to a site at each point to which it attaches to the global
      Internet; where the topology is defined by the connectivity of
      provider networks, RLOCs can be thought of as PA addresses.
      Multiple RLOCs can be assigned to the same ETR device or to
      multiple ETR devices at a site.

3.  LISP Canonical Address Format Encodings

   IANA has assigned AFI value 16387 (0x4003) to the LISP architecture
   and protocols.  This specification defines the encoding format of the
   LISP Canonical Address (LCA).

   The first 4 bytes of an LISP Canonical Address are followed by a
   variable length of fields:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |    Type       |     Rsvd2     |            Length             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Rsvd1:  this 8-bit field is reserved for future use and MUST be
      transmitted as 0 and ignored on receipt.

   Flags:  this 8-bit field is for future definition and use.  For now,
      set to zero on transmission and ignored on receipt.

   Type:  this 8-bit field is specific to the LISP Canonical Address
      formatted encodings, values are:

     Type 0:  Null Body Type

     Type 1:  AFI List Type

     Type 2:  Instance ID Type

     Type 3:  AS Number Type

     Type 4:  Application Data Type

     Type 5:  Geo Coordinates Type

     Type 6:  Opaque Key Type

     Type 7:  NAT-Traversal Type

     Type 8:  Nonce Locator Type

     Type 9:  Multicast Info Type
     Type 10:  Explicit Locator Path Type

     Type 11:  Security Key Type

     Type 12:  Source/Dest Key Type

   Rsvd2:  this 8-bit field is reserved for future use and MUST be
      transmitted as 0 and ignored on receipt.

   Length:  this 16-bit field is in units of bytes and covers all of the
      LISP Canonical Address payload, starting and including the byte
      after the Length field.  So any LCAF encoded address will have a
      minimum length of 8 bytes when the Length field is 0.  The 8 bytes
      include the AFI, Flags, Type, Reserved, and Length fields.  When
      the AFI is not next to encoded address in a control message, then
      the encoded address will have a minimum length of 6 bytes when the
      Length field is 0.  The 6 bytes include the Flags, Type, Reserved,
      and Length fields.

4.  LISP Canonical Address Applications

4.1.  Segmentation using LISP

   When multiple organizations inside of a LISP site are using private
   addresses [RFC1918] as EID-prefixes, their address spaces must remain
   segregated due to possible address duplication.  An Instance ID in
   the address encoding can aid in making the entire AFI based address
   unique.

   Another use for the Instance ID LISP Canonical Address Format is when
   creating multiple segmented VPNs inside of a LISP site where keeping
   EID-prefix based subnets is desirable.

   Instance ID LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 2    | IID mask-len  |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Instance ID                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   IID mask-len:  if the AFI is set to 0, then this format is not
      encoding an extended EID-prefix but rather an instance-ID range
      where the 'IID mask-len' indicates the number of high-order bits
      used in the Instance ID field for the range.

   Length value n:  length in bytes of the AFI address that follows the
      Instance ID field including the AFI field itself.

   Instance ID:  the low-order 24-bits that can go into a LISP data
      header when the I-bit is set.  See [LISP] for details.

   AFI = x:  x can be any AFI value from [AFI].

   This LISP Canonical Address Type can be used to encode either EID or
   RLOC addresses.

4.2.  Carrying AS Numbers in the Mapping Database

   When an AS number is stored in the LISP Mapping Database System for
   either policy or documentation reasons, it can be encoded in a LISP
   Canonical Address.

   AS Number LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 3    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                           AS Number                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      AS Number field including the AFI field itself.

   AS Number:  the 32-bit AS number of the autonomous system that has
      been assigned either the EID or RLOC that follows.

   AFI = x:  x can be any AFI value from [AFI].

   The AS Number Canonical Address Type can be used to encode either EID
   or RLOC addresses.  The former is used to describe the LISP-ALT AS
   number the EID-prefix for the site is being carried for.  The latter
   is used to describe the AS that is carrying RLOC based prefixes in
   the underlying routing system.

4.3.  Convey Application Specific Data

   When a locator-set needs to be conveyed based on the type of
   application or the Per-Hop Behavior (PHB) of a packet, the
   Application Data Type can be used.

   Application Data LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 4    |     Rsvd2     |             8 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |       IP TOS, IPv6 TC, or Flow Label          |    Protocol   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Local Port          |         Remote Port           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      8-byte Application Data fields including the AFI field itself.

   IP TOS, IPv6 TC, or Flow Label:  this field stores the 8-bit IPv4 TOS
      field used in an IPv4 header, the 8-bit IPv6 Traffic Class or Flow
      Label used in an IPv6 header.

   Local Port/Remote Port:  these fields are from the TCP, UDP, or SCTP
      transport header.

   AFI = x:  x can be any AFI value from [AFI].

   The Application Data Canonical Address Type is used for an EID
   encoding when an ITR wants a locator-set for a specific application.
   When used for an RLOC encoding, the ETR is supplying a locator-set
   for each specific application is has been configured to advertise.

4.4.  Assigning Geo Coordinates to Locator Addresses

   If an ETR desires to send a Map-Reply describing the Geo Coordinates
   for each locator in its locator-set, it can use the Geo Coordinate
   Type to convey physical location information.

   Coordinates are specified using the WGS-84 (World Geodetic System)
   reference coordinate system [WGS-84].

   Geo Coordinate LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 5    |     Rsvd2     |            12 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |N|     Latitude Degrees        |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |E|     Longitude Degrees       |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                            Altitude                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      8-byte Longitude and Latitude fields including the AFI field
      itself.

   N: When set to 1 means North, otherwise South.

   Latitude Degrees:  Valid values range from 0 to 90. 90 degrees above or
      below the equator (northern or southern hemisphere, respectively).

   Latitude Minutes:  Valid values range from 0 to 59.

   Latitude Seconds:  Valid values range from 0 to 59.

   E: When set to 1 means East, otherwise West.

   Longitude Degrees:  Value values are from 0 to 90 180 degrees right or
      left of the Prime Meridian.

   Longitude Minutes:  Valid values range from 0 to 59.

   Longitude Seconds:  Valid values range from 0 to 59.

   Altitude:  Height relative to sea level in meters.  This is a signed
      integer meaning that the altitude could be below sea level.  A
      value of 0x7fffffff indicates no Altitude value is encoded.

   AFI = x:  x can be any AFI value from [AFI].

   The Geo Coordinates Canonical Address Type can be used to encode
   either EID or RLOC addresses.  When used for EID encodings, you can
   determine the physical location of an EID along with the topological
   location by observing the locator-set.

4.5.  Generic Database Mapping Lookups

   When the LISP Mapping Database system holds information accessed by a
   generic formatted key (where the key is not the usual IPv4 or IPv6
   address), an opaque key may be desirable.

   Opaque Key LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 6    |     Rsvd2     |               n               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    | Key Field Num |      Key Wildcard Fields      |   Key . . .   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                       . . . Key                               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the type's payload.  The value n
      is the number of bytes that follow this Length field.

   Key Field Num:  the number of fields (minus 1) the key can be broken
      up into.  The width of the fields are fixed length.  So for a key
      size of 8 bytes, with a Key Field Num of 4 allows 4 fields of 2
      bytes in length.  Valid values for this field range from 0 to 15
      supporting a maximum of 16 field separations.

   Key Wildcard Fields:  describes which fields in the key are not used
      as part of the key lookup.  This wildcard encoding is a bitfield.
      Each bit is a don't-care bit for a corresponding field in the key.
      Bit 0 (the low-order bit) in this bitfield corresponds the first
      field, right-justified in the key, bit 1 the second field, and so
      on.  When a bit is set in the bitfield it is a don't-care bit and
      should not be considered as part of the database lookup.  When the
      entire 16-bits is set to 0, then all bits of the key are used for
      the database lookup.

   Key:  the variable length key used to do a LISP Database Mapping
      lookup.  The length of the key is the value n (shown above) minus
      3.

4.6.  NAT Traversal Scenarios

   When a LISP system is conveying global address and mapped port
   information when traversing through a NAT device, the NAT-Traversal
   LCAF Type is used.  See [LISP-NATT] for details.

   NAT-Traversal Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 7    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |       MS UDP Port Number      |      ETR UDP Port Number      |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |  Global ETR RLOC Address  ... |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       MS RLOC Address  ...    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          | Private ETR RLOC Address  ... |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |      RTR RLOC Address 1 ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |      RTR RLOC Address k ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI addresses that follows
      the UDP Port Number field including the AFI fields themselves.

   MS UDP Port Number:  this is the UDP port number of the Map-Server
      and is set to 4342.

   ETR UDP Port Number:  this is the port number returned to a LISP
      system which was copied from the source port from a packet that
      has flowed through a NAT device.

   AFI = x:  x can be any AFI value from [AFI].

   Global ETR RLOC Address:  this is an address known to be globally
      unique built by NAT-traversal functionality in a LISP router.

   MS RLOC Address:  this is the address of the Map-Server used in the
      destination RLOC of a packet that has flowed through a NAT device.

   Private ETR RLOC Address:  this is an address known to be a private
      address inserted in this LCAF format by a LISP router that resides
      on the private side of a NAT device.

   RTR RLOC Address:  this is an encapsulation address used by an ITR or
      PITR which resides behind a NAT device.  This address is known to
      have state in a NAT device so packets can flow from it to the LISP
      ETR behind the NAT.  There can be one or more NTR addresses
      supplied in these set of fields.  The number of NTRs encoded is
      determined by the LCAF length field.  When there are no NTRs
      supplied, the NTR fields can be omitted and reflected by the LCAF
      length field or an AFI of 0 can be used to indicate zero NTRs
      encoded.

4.7.  PETR Admission Control Functionality

   When a public PETR device wants to verify who is encapsulating to it,
   it can check for a specific nonce value in the LISP encapsulated
   packet.  To convey the nonce to admitted ITRs or PITRs, this LCAF
   format is used in a Map-Register or Map-Reply locator-record.

   Nonce Locator Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 8    |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Reserved    |                  Nonce                        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Address  ...          |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of the AFI address that follows the
      Nonce field including the AFI field itself.

   Reserved:  must be set to zero and ignore on receipt.

   Nonce:  this is a nonce value returned by an ETR in a Map-Reply
      locator-record to be used by an ITR or PITR when encapsulating to
      the locator address encoded in the AFI field of this LCAF type.

   AFI = x:  x can be any AFI value from [AFI].

4.8.  Multicast Group Membership Information

   Multicast group information can be published in the mapping database
   so a lookup on an EID based group address can return a replication
   list of group addresses or a unicast addresses for single replication
   or multiple head-end replications.  This LCAF encoding can be used to
   send broadcast packets to all members of a subnet when each EIDs are
   away from their home subnet location.

   Multicast Info Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 9    |  Rsvd2  |R|L|J|             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            Reserved           | Source MaskLen| Group MaskLen |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |   Source/Subnet Address  ...  |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       Group Address  ...      |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   Reserved:  must be set to zero and ignore on receipt.

   R-bit:  this is the RP-bit that represents PIM (S,G,RP-bit) multicast
      state.  This bit can be set for Joins (when the J-bit is set) or
      for Leaves (when the L-bit is set).  See [LISP-MRSIG] for more
      usage details.

   L-bit:  this is the Leave-Request bit and is used when this LCAF type
      is present in the destination EID-prefix field of a Map-Request.
      See [LISP-MRSIG] for details.

   J-bit:  this is the Join-Request bit and is used when this LCAF type
      is present in the destination EID-prefix field of a Map-Request.
      See [LISP-MRSIG] for details.  The J-bit MUST not be set when the
      L-bit is also set in the same LCAF block.  A receiver should not
      take any specific Join or Leave action when both bits are set.

   Source MaskLen:  the mask length of the source prefix that follows.

   Group MaskLen:  the mask length of the group prefix that follows.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

4.9.  Traffic Engineering using Re-encapsulating Tunnels

   For a given EID lookup into the mapping database, this LCAF format
   can be returned to provide a list of locators in an explicit re-
   encapsulation path.  See [LISP-TE] for details.

   Explicit Locator Path (ELP) Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 10   |     Rsvd2     |               n               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |           Rsvd3         |L|P|S|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Reencap Hop 1  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |           Rsvd3         |L|P|S|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                         Reencap Hop k  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

   Lookup bit (L):  this is the Lookup bit used to indicate to the user
      of the ELP to not use this address for encapsulation but to look
      it up in the mapping database system to obtain an encapsulating
      RLOC address.

   RLOC-Probe bit (P):  this is the RLOC-probe bit which means the
      Reencap Hop allows RLOC-probe messages to be sent to it.  When the
      R-bit is set to 0, RLOC-probes must not be sent.  When a Reencap
      Hop is an anycast address then multiple physical Reencap Hops are
      using the same RLOC address.  In this case, RLOC-probes are not
      needed because when the closest RLOC address is not reachable
      another RLOC address can reachable.

   Strict bit (S):  this the strict bit which means the associated
      Rencap Hop is required to be used.  If this bit is 0, the
      reencapsulator can skip this Reencap Hop and go to the next one in
      the list.

4.10.  Storing Security Data in the Mapping Database

   When a locator in a locator-set has a security key associated with
   it, this LCAF format will be used to encode key material.  See
   [LISP-DDT] for details.

   Security Key Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 11   |      Rsvd2    |             6 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Key Count   |      Rsvd3    | Key Algorithm |   Rsvd4     |R|
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Key Length          |       Key Material ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                        ... Key Material                       |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |       Locator Address ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that start with the Key
      Material field.

   Key Count:  the Key Count field declares the number of Key sections
      included in this LCAF.

   Key Algorithm:  the Algorithm field identifies the key's
      cryptographic algorithm and specifies the format of the Public Key
      field.

   R bit:  this is the revoke bit and, if set, it specifies that this
      Key is being Revoked.

   Key Length:  this field determines the length in bytes of the Key
      Material field.

   Key Material:  the Key Material field stores the key material.  The
      format of the key material stored depends on the Key Algorithm
      field.

   AFI = x:  x can be any AFI value from [AFI].This is the locator
      address that owns the encoded security key.

4.11.  Source/Destination 2-Tuple Lookups

   When both a source and destination address of a flow needs
   consideration for different locator-sets, this 2-tuple key is used in
   EID fields in LISP control messages.  When the Source/Dest key is
   registered to the mapping database, it can be encoded as a source-
   prefix and destination-prefix.  When the Source/Dest is used as a key
   for a mapping database lookup the source and destination come from a
   data packet.

   Source/Dest Key Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 12   |     Rsvd2     |             4 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            Reserved           |   Source-ML   |    Dest-ML    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |         Source-Prefix ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = x          |     Destination-Prefix ...    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes of fields that follow.

   Reserved:  must be set to zero and ignore on receipt.

   Source-ML:  the mask length of the source prefix that follows.

   Dest-ML:  the mask length of the destination prefix that follows.

   AFI = x:  x can be any AFI value from [AFI].  When a specific AFI has
      its own encoding of a multicast address, this field must be either
      a group address or a broadcast address.

   Refer to [LISP-TE] for usage details.

4.12.  Applications for AFI List Type

4.12.1.  Binding IPv4 and IPv6 Addresses

   When header translation between IPv4 and IPv6 is desirable a LISP
   Canonical Address can use the AFI List Type to carry multiple AFIs in
   one LCA AFI.

   Bounded Address LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |         2 + 4 + 2 + 16        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |            AFI = 2            |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                          IPv6 Address ...                     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address  ...                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                     ...  IPv6 Address                         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 24 when IPv4 and IPv6 AFI
      encoded addresses are used.

   This type of address format can be included in a Map-Request when the
   address is being used as an EID, but the Mapping Database System
   lookup destination can use only the IPv4 address.  This is so a
   Mapping Database Service Transport System, such as LISP-ALT [ALT],
   can use the Map-Request destination address to route the control
   message to the desired LISP site.

4.12.2.  Layer-2 VPNs

   When MAC addresses are stored in the LISP Mapping Database System,
   the AFI List Type can be used to carry AFI 6.

   MAC Address LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |             2 + 6             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |             AFI = 6           |    Layer-2 MAC Address  ...   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                    ... Layer-2 MAC Address                    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 8 when MAC address AFI encoded
      addresses are used.

   This address format can be used to connect layer-2 domains together
   using LISP over an IPv4 or IPv6 core network to create a layer-2 VPN.
   In this use-case, a MAC address is being used as an EID, and the
   locator-set that this EID maps to can be an IPv4 or IPv6 RLOCs, or
   even another MAC address being used as an RLOC.

4.12.3.  ASCII Names in the Mapping Database

   If DNS names or URIs are stored in the LISP Mapping Database System,
   the AFI List Type can be used to carry an ASCII string where it is
   delimited by length 'n' of the LCAF Length encoding.

   ASCII LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |             2 + n             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |             AFI = 17          |      DNS Name or URI  ...     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length value n:  length in bytes AFI=17 field and the null-terminated
      ASCII string (the last byte of 0 is included).

4.12.4.  Using Recursive LISP Canonical Address Encodings

   When any combination of above is desirable, the AFI List Type value
   can be used to carry within the LCA AFI another LCA AFI.

   Recursive LISP Canonical Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |         4 + 8 + 2 + 4         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 4    |     Rsvd2     |              12               |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   IP TOS, IPv6 QQS or Flow Label              |    Protocol   |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           Local Port          |         Remote Port           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |            AFI = 1            |       IPv4 Address ...        |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |     ...  IPv4 Address         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   Length:  length in bytes is fixed at 18 when an AFI=1 IPv4 address is
      included.

   This format could be used by a Mapping Database Transport System,
   such as LISP-ALT [ALT], where the AFI=1 IPv4 address is used as an
   EID and placed in the Map-Request destination address by the sending
   LISP system.  The ALT system can deliver the Map-Request to the LISP
   destination site independent of the Application Data Type AFI payload
   values.  When this AFI is processed by the destination LISP site, it
   can return different locator-sets based on the type of application or
   level of service that is being requested.

4.12.5.  Compatibility Mode Use Case

   A LISP system should use the AFI List Type format when sending to
   LISP systems that do not support a particular LCAF Type used to
   encode locators.  This allows the receiving system to be able to
   parse a locator address for encapsulation purposes.  The list of AFIs
   in an AFI List LCAF Type has no semantic ordering and a receiver
   should parse each AFI element no matter what the ordering.

   Compatibility Mode Address Format:

     0                   1                   2                   3
     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 1    |     Rsvd2     |            22 + 6             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |           AFI = 16387         |     Rsvd1     |     Flags     |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |   Type = 5    |     Rsvd2     |            12 + 2             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |N|     Latitude Degrees        |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |E|     Longitude Degrees       |    Minutes    |    Seconds    |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                            Altitude                           |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |              AFI = 0          |           AFI = 1             |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    |                          IPv4 Address                         |
    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

   If a system does not recognized the Geo Coordinate LCAF Type that is
   accompanying a locator address, an encoder can include the Geo
   Coordinate LCAF Type embedded in a AFI List LCAF Type where the AFI
   in the Geo Coordinate LCAF is set to 0 and the AFI encoded next in
   the list is encoded with a valid AFI value to identify the locator
   address.

   A LISP system is required to support the AFI List LCAF Type to use
   this procedure.  It would skip over 10 bytes of the Geo Coordinate
   LCAF Type to get to the locator address encoding (an IPv4 locator
   address).  A LISP system that does support the Geo Coordinate LCAF
   Type can support parsing the locator address within the Geo
   Coordinate LCAF encoding or in the locator encoding that follows in
   the AFI List LCAF.

5.  Security Considerations

   There are no security considerations for this specification.  The
   security considerations are documented for the protocols that use
   LISP Canonical Addressing.  Refer to the those relevant
   specifications.

6.  IANA Considerations

   The Address Family AFI definitions from [AFI] only allocate code-
   points for the AFI value itself.  The length of the address or entity
   that follows is not defined and is implied based on conventional
   experience.  Where the LISP protocol uses LISP Canonical Addresses
   specifically, the address length definitions will be in this
   specification and take precedent over any other specification.

   An IANA Registry for LCAF Type values will be created.  The values
   that are considered for use by the main LISP specification [LISP]
   will be in the IANA Registry.  Other Type values used for
   experimentation will be defined and described in this document.

7.  References

7.1.  Normative References

   [RFC1700]  Reynolds, J. and J. Postel, "Assigned Numbers", RFC 1700,
              October 1994.

   [RFC1918]  Rekhter, Y., Moskowitz, R., Karrenberg, D., Groot, G., and
              E. Lear, "Address Allocation for Private Internets",
              BCP 5, RFC 1918, February 1996.

7.2.  Informative References

   [AFI]      IANA, "Address Family Identifier (AFIs)", ADDRESS FAMILY
              NUMBERS http://www.iana.org/numbers.html, Febuary 2007.

   [ALT]      Fuller, V., Farinacci, D., Meyer, D., and D. Lewis, "LISP
              Alternative Topology (LISP+ALT)",
              draft-ietf-lisp-alt-06.txt (work in progress), March 2011.

   [LISP]     Farinacci, D., Fuller, V., Meyer, D., and D. Lewis,
              "Locator/ID Separation Protocol (LISP)",
              draft-ietf-lisp-12.txt (work in progress), April 2011.

   [LISP-DDT]
              Fuller, V., Lewis, D., and V. Ermagan, "LISP Delegated
              Database Tree", draft-fuller-lisp-ddt-01.txt (work in
              progress).

   [LISP-MRSIG]
              Farinacci, D. and M. Napierala, "LISP Control-Plane
              Multicast Signaling",
              draft-farinacci-lisp-mr-signaling-00.txt (work in
              progress).

   [LISP-NATT]
              Ermagan, V., Farinacci, D., Lewis, D., Skriver, J., Maino,
              F., and C. White, "NAT traversal for LISP",
              draft-ermagan-lisp-nat-traversal-00.txt (work in
              progress).

   [LISP-TE]  Farinacci, D., Lahiri, P., and M. Kowal, "LISP Traffic
              Engineering Use-Cases", draft-farinacci-lisp-te-01.txt
              (work in progress).

   [WGS-84]   Geodesy and Geophysics Department, DoD., "World Geodetic
              System 1984", NIMA TR8350.2, January 2000, <http://
              earth-info.nga.mil/GandG/publications/tr8350.2/
              wgs84fin.pdf>.

Appendix A.  Acknowledgments

   The authors would like to thank Vince Fuller, Gregg Schudel, Jesper
   Skriver, Luigi Iannone, and Isidor Kouvelas Kouvelas, and Sander Steffann for
   their technical and editorial commentary.

   The authors would like to thank Victor Moreno for discussions that
   lead to the definition of the Multicast Info LCAF type.

   The authors would like to thank Parantap Lahiri and Michael Kowal for
   discussions that lead to the definition of the Explicit Locator Path
   (ELP) LCAF type.

   The authors would like to thank Fabio Maino and Vina Ermagan for
   discussions that lead to the definition of the Security Key LCAF
   type.

   Thanks also goes to Terry Manderson for assistance obtaining a LISP
   AFI value from IANA.

Appendix B.  Document Change Log

B.1.  Changes to draft-ietf-lisp-01.txt

   o  Submitted January 2013.

   o  Change longitude range from 0-90 to 0-180 in section 4.4.

   o  Added reference to WGS-84 in section 4.4.

B.2.  Changes to draft-ietf-lisp-00.txt

   o  Posted first working group draft August 2012.

   o  This draft was renamed from draft-farinacci-lisp-lcaf-10.txt.

Authors' Addresses

   Dino Farinacci
   cisco Systems
   Tasman Drive
   San Jose, CA  95134
   USA

   Email: dino@cisco.com farinacci@gmail.com

   Dave Meyer
   cisco Systems
   170 Tasman Drive
   San Jose, CA
   USA

   Email: dmm@cisco.com

   Job Snijders
   InTouch N.V.
   Middenweg 76
   1097 BS Amsterdam
   The Netherlands

   Email: job@instituut.net
--Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_FE521B56-5072-43EE-8518-F718DB8F7B2D-- From internet-drafts@ietf.org Mon Jan 7 15:49:52 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B9B1421F88B2; Mon, 7 Jan 2013 15:49:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.578 X-Spam-Level: X-Spam-Status: No, score=-102.578 tagged_above=-999 required=5 tests=[AWL=0.021, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G2eiZv5bJrMe; Mon, 7 Jan 2013 15:49:52 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59DB021F8838; Mon, 7 Jan 2013 15:49:52 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20130107234952.12891.74808.idtracker@ietfa.amsl.com> Date: Mon, 07 Jan 2013 15:49:52 -0800 Cc: lisp@ietf.org Subject: [lisp] I-D Action: draft-ietf-lisp-lcaf-01.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 23:49:52 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Locator/ID Separation Protocol Working Gr= oup of the IETF. Title : LISP Canonical Address Format (LCAF) Author(s) : Dino Farinacci Dave Meyer Job Snijders Filename : draft-ietf-lisp-lcaf-01.txt Pages : 31 Date : 2013-01-07 Abstract: This draft defines a canonical address format encoding used in LISP control messages and in the encoding of lookup keys for the LISP Mapping Database System. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lisp-lcaf There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-lisp-lcaf-01 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lisp-lcaf-01 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From farinacci@gmail.com Mon Jan 7 18:59:39 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5BE921F84D1 for ; Mon, 7 Jan 2013 18:59:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.392 X-Spam-Level: X-Spam-Status: No, score=-2.392 tagged_above=-999 required=5 tests=[AWL=1.208, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nvwvfJ1tmjAe for ; Mon, 7 Jan 2013 18:59:38 -0800 (PST) Received: from mail-pa0-f54.google.com (mail-pa0-f54.google.com [209.85.220.54]) by ietfa.amsl.com (Postfix) with ESMTP id A3E5721F869C for ; Mon, 7 Jan 2013 18:59:38 -0800 (PST) Received: by mail-pa0-f54.google.com with SMTP id bi5so28443pad.41 for ; Mon, 07 Jan 2013 18:59:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=CC5CYBh0pQv1vggYmkJbaWcW2vbSram20SaamuIGtWA=; b=lWkyiD2kttErV+K6DWIZgUdMDssuBCNUZ13WvVIRk4RN6DU8dNA6WEknOJNYk+Yf8c aKTx/WHsf0ftbc0/HrQVvyZWX2tOlLEU29VAc3YsBXuMNcLU3f+WdOS5N4XGZ4YuY8CQ 5kslkw7bNysaezJm3JzfJJgO9YykAndyBsM0TscnsTeC7bgLPPec4GoOZhSOngvSc+vK OG6vUaGVw3SSj/LxdGddb6AQr55eAaweViSeYxq4Vi1hZOB5hwZKKtdcc/05VTu53DAr Ifz3BjW7s7/NU76B78zwdN5P80bDAASIcPk5qHSMlfLBcTsHGymScwbJ0IoUTPVt/B2l q4ww== X-Received: by 10.68.253.161 with SMTP id ab1mr173646633pbd.97.1357613976391; Mon, 07 Jan 2013 18:59:36 -0800 (PST) Received: from [192.168.1.7] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id j9sm39821465paw.2.2013.01.07.18.59.34 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 18:59:35 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> Date: Mon, 7 Jan 2013 18:59:34 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <0FBDC3CA-366B-4408-BB72-75DF4F0A8B41@gmail.com> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> To: Sander Steffann X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 02:59:39 -0000 > Hi, >=20 > I was reading http://tools.ietf.org/html/draft-ietf-lisp-24 when I = noticed the following text in section 6.1.4, 'Map-Reply Message Format': >=20 > Locator: an IPv4 or IPv6 address (as encoded by the 'Loc-AFI' = field) > assigned to an ETR. Note that the destination RLOC address MAY = be > an anycast address. A source RLOC can be an anycast address as > well. The source or destination RLOC MUST NOT be the broadcast > address (255.255.255.255 or any subnet broadcast address known to > the router), and MUST NOT be a link-local multicast address. The > source RLOC MUST NOT be a multicast address. The destination = RLOC > SHOULD be a multicast address if it is being mapped from a > multicast destination EID. >=20 > It talks about source and destination RLOCs, which seems weird in the = context of a map-reply message. My feeling is that this text belongs in = a more generic section, or am I missing something here? I thought that = locators in map-replies are always meant to be used as destination = RLOCs. Destination RLOCs are in the locator-set of an EID-record of the = Map-Reply payload. You want the source and destination addresses to be = RLOCs so the Map-Reply can be routed directly back to the requestor, by = the core routers. Dino >=20 > Thanks, > Sander >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From farinacci@gmail.com Mon Jan 7 19:00:49 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E3A921F869F for ; Mon, 7 Jan 2013 19:00:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.995 X-Spam-Level: X-Spam-Status: No, score=-2.995 tagged_above=-999 required=5 tests=[AWL=0.604, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lZ2RKUVVL1Tq for ; Mon, 7 Jan 2013 19:00:47 -0800 (PST) Received: from mail-pb0-f48.google.com (mail-pb0-f48.google.com [209.85.160.48]) by ietfa.amsl.com (Postfix) with ESMTP id 1150521F84D1 for ; Mon, 7 Jan 2013 19:00:45 -0800 (PST) Received: by mail-pb0-f48.google.com with SMTP id rq13so11129018pbb.7 for ; Mon, 07 Jan 2013 19:00:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=eebX7smrRFyaC33rJuouw6Eu8sk63vjc+2sbS9gxn8c=; b=HVbqa7E5UziH44bYryWQRMRp2o5RZoUne30jGLqZDnAf7ALYB4Y4kHwpCVubWyGFC+ j6eT2TH5bL2QEWgfHokitfxhA7pzD0y9EHaQBORAIaQlqAspSSTgW0QrLuTEQWC2Din/ le2Y2D8xqxpx3DBVl0qLaOq2cUkAoITwxIFC8VaV4W7CrQ+aXJqN4VER6NPHajUwbgZh 6+NrX7CGWdaSrqInwU9de4Jwdb7nV9WvhNIO6earwcZUdjjbHxXYpmWYAsW8G7PBZqRM pT7QICzUL0v2Dc+A4Ptic8sdcNVNrCkoMT09hDRddEQ00rdHt3ggMYSbyMOfI7tqU9bJ lX5w== X-Received: by 10.68.202.65 with SMTP id kg1mr14316762pbc.28.1357614044826; Mon, 07 Jan 2013 19:00:44 -0800 (PST) Received: from [192.168.1.7] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id o5sm39810215paz.32.2013.01.07.19.00.42 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 19:00:42 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> Date: Mon, 7 Jan 2013 19:00:42 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> To: Sander Steffann X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 03:00:49 -0000 > Another question: >=20 >> Locator: [...] The destination RLOC >> SHOULD be a multicast address if it is being mapped from a >> multicast destination EID. >=20 > How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? > - Sander Yes, when you are encapsulating a multicast packet from a source address = that is an EID into an encapsulated packet that the core delivers as a = multicast packet. We call the inner group address the "user's group = address" and the other group address the "delivery group address". Dino >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From farinacci@gmail.com Mon Jan 7 19:01:48 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D89B021F8477 for ; Mon, 7 Jan 2013 19:01:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.197 X-Spam-Level: X-Spam-Status: No, score=-3.197 tagged_above=-999 required=5 tests=[AWL=0.403, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yc-excbW6FqA for ; Mon, 7 Jan 2013 19:01:48 -0800 (PST) Received: from mail-da0-f43.google.com (mail-da0-f43.google.com [209.85.210.43]) by ietfa.amsl.com (Postfix) with ESMTP id 47E1721F8475 for ; Mon, 7 Jan 2013 19:01:48 -0800 (PST) Received: by mail-da0-f43.google.com with SMTP id u36so9033409dak.16 for ; Mon, 07 Jan 2013 19:01:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=gz0xuyDr3ssC5PniSLuXAuuPf7FpPP69/5kTl5yu/pg=; b=x7QNp5lphaWFcXp3nLiIg7C21ZP2oHz+TD7h/c3LJxmc2ZkNV7muAQT2lezlDSo5dN WM3KEjs2VeV8bLSUJNoUkIq1iCUacFptjjqEcbqoTrpnrtMzLyBQMhp0xJxzB5k5KsdE K8LxHLhB2jIsG6h666AcWIRBR6WZ6i02OBaINTRAAUfmGRg2OcHkCPQD+kPfmzhKxSun DnXdiF1PmBpED5Q9rzBCRAKj/D+x6QCjg97c4RFo1a04URhen8qbexvBBUjHk1YuGW+E 0V0r7ZR/R0VDd4fBuBFCn/7rFS8SAQRu5teAl2zpCfD2ZiWllrqOEdu1Ed/OHOxbw4fX QD5A== X-Received: by 10.69.1.9 with SMTP id bc9mr192744223pbd.61.1357614107809; Mon, 07 Jan 2013 19:01:47 -0800 (PST) Received: from [192.168.1.7] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id uk9sm38706188pbc.63.2013.01.07.19.01.46 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 07 Jan 2013 19:01:47 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: Date: Mon, 7 Jan 2013 19:01:46 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <465A88CD-4BB0-45D7-87C5-F716D8C8E157@gmail.com> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> <0AAF303D-8E8C-4AEE-9AA7-D239FCB212C2@gigix.net> To: Sander Steffann X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 03:01:49 -0000 > Op 7 jan. 2013, om 12:17 heeft Luigi Iannone het = volgende geschreven: >=20 >> On 6 Jan. 2013, at 19:58 , Sander Steffann = wrote: >>=20 >>> Another question: >>>=20 >>>> Locator: [...] The destination RLOC >>>> SHOULD be a multicast address if it is being mapped from a >>>> multicast destination EID. >>>=20 >>> How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? >>=20 >> Why not? >=20 > It seems I need to re-read the lisp-multicast draft. I can't seem to = understand how the mapping system works in relation to multicast = traffic... Is there a introduction or presentation somewhere that = explain it step-by-step? You should also read the lisp-lcaf draft as well as the = lisp-mr-signaling draft. There are many ways to do encapsulation of = multicast packets. Dino >=20 > Thanks, > Sander >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From terry.manderson@icann.org Mon Jan 7 21:10:27 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E32D21F867D for ; Mon, 7 Jan 2013 21:10:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QPRAEFcM10To for ; Mon, 7 Jan 2013 21:10:27 -0800 (PST) Received: from EXPFE100-2.exc.icann.org (expfe100-2.exc.icann.org [64.78.22.237]) by ietfa.amsl.com (Postfix) with ESMTP id BEF1E21F8678 for ; Mon, 7 Jan 2013 21:10:26 -0800 (PST) Received: from EXVPMBX100-1.exc.icann.org ([64.78.22.232]) by EXPFE100-2.exc.icann.org ([64.78.22.237]) with mapi; Mon, 7 Jan 2013 21:10:26 -0800 From: Terry Manderson To: Terry Manderson , LISP mailing list list Date: Mon, 7 Jan 2013 21:10:23 -0800 Thread-Topic: [lisp] WG Last Call for draft-ietf-lisp-threats & draft-ietf-lisp-deployment Thread-Index: Ac3YyO8YCbzPMsZbxUGVBVt0oNe7UQUlYcmT Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="B_3440502623_11971753" MIME-Version: 1.0 Subject: Re: [lisp] WG Last Call for draft-ietf-lisp-threats & draft-ietf-lisp-deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 05:10:27 -0000 --B_3440502623_11971753 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit Hi Folks. Just a reminder that this WGLC will end in 6 days. If you haven't already, please read and post your review comments on draft-ietf-lisp-threats and draft-ietf-lisp-deployment Cheers Terry On 13/12/12 10:29 AM, "Terry Manderson" wrote: > All, > > In the WG Last Calls for draft-ietf-lisp-threats and > draft-ietf-lisp-deployment I have not seen sufficient review to be able to > consider that adequate review has been performed. > > Please LISP WG, review these documents. > > I am extending the last call until the 14th January 2013 (holiday season). > > Cheers > Terry --B_3440502623_11971753 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIQAQYJKoZIhvcNAQcCoIIP8jCCD+4CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC Dc0wggcDMIIF66ADAgECAhAPz2lJUZsAlD35l4oJxf0FMA0GCSqGSIb3DQEBBQUAMGIxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMTAeFw0xMjAzMjcwMDAw MDBaFw0xNTAzMjcxMjAwMDBaMIGsMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTEXMBUGA1UEBxMOTWFyaW5hIGRlbCBSZXkxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0 aW9uIGZvciBBc3NpZ25lZCBOYW1lcyBhbmQgTnVtYmVyczEXMBUGA1UECxMORE5TIE9wZXJh dGlvbnMxGDAWBgNVBAMTD1RlcnJ5IE1hbmRlcnNvbjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKRhZ4W3U6MnfS2woYEFCIyN+g1MNILokbUKk+PTl5mmK3QtWQxTSOu2sdzN xHMy6p2RoT9BMGOamttFq2WswSru6/7JT1TflytGaPHfK5kMP/pI47hmcwUEm9Z169I5ar7z BTiEAQA06cGKtgJ8XiiLFUIHLVuRq3WGxjnFTHlAHXY6mdgDT/ntAnoEvvPVm4XqUnjJiZTS ojzyr1q2RqFvyXs2blOARumDqvLI33yLGcUuaEL+A+hgodzM/fL4kdoy964mXvmEerpm4d4f Y/JfbRUWxc0Eomu9nwGFNk6ijO41qk+OIboct2qeA+5PPclXJNNHYVfzT2dyWfGgxaMCAwEA AaOCA2gwggNkMB8GA1UdIwQYMBaAFBUAEisTmLKZB+0e36K+Vw0rZwLNMB0GA1UdDgQWBBSz wvR2YXpP9XjS9cknMX5g3LM2jTAkBgNVHREEHTAbgRl0ZXJyeS5tYW5kZXJzb25AaWNhbm4u b3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwfQYD VR0fBHYwdDA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJl ZElEQ0EtMS5jcmwwOKA2oDSGMmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFz c3VyZWRJRENBLTEuY3JsMIIBxQYDVR0gBIIBvDCCAbgwggG0BgpghkgBhv1sBAECMIIBpDA6 BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5 Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABp AHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABh AGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABD AFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdAB5 ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkAYQBi AGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjB3BggrBgEFBQcBAQRr MGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1 aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEQ0EtMS5jcnQw DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAYpwxK/KvdhbyQqrKp2ylMQpNzqVH ofo4hPILTnp/o+UyYVn6daWSilaV+XNBzE5Rm/f7ms2iA1zBzOvGv55pLH0n6lgIRTeuAGzf KIsPCwPvYQkkMAPXHzh9A44m19hvigTgOPNyjzcOTiHqwwCJSDTEZx17CEkrzQPq1vfG1Lvk +AWjEtxCsGmsuCHHaZjwQ8SsGI7W5cA1Y4RTcQf6S9eIpSsOwXIYdDgWq9Uhi/amW7ryW06Y GH7BHaitqgmm32MZuid3UzJUU6+Ljx7uGA9Fe6k1uPEHhaXTAoobPSpPdOgGmnxUCRQu2OI7 +I8vHiSe7DC/LmxEDC5kB+lUTjCCBsIwggWqoAMCAQICEAoE3yF0XU0rjOozcgUAUOkwDQYJ KoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBS b290IENBMB4XDTA2MTExMDAwMDAwMFoXDTIxMTExMDAwMDAwMFowYjELMAkGA1UEBhMCVVMx FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8G A1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA6IItmfnKwkKVpYBzQHDSnlZUXKnE0kEGj8kz/E1FkVyBn+0snPgWWd+etSQV wpi5tHdJ3InECtqvy15r7a2wcTHrzzpADEZNk+yLejYIA6sMNP4YSYL+x8cxSIB8HqIPkg5Q ycaH6zY/2DDD/6b3+6LNb3Mj/qxWBZDwMiEWicZwiPkFl32jx0PdAug7Pe2xQaPtP77blUjE 7h6z8rwMK5nQxl0SQoHhg26Ccz8mSxSQrllmCsSNvtLOBq6thG9IhJtPQLnxTPKvmPv2zkBd XPao8S+v7Iki8msYZbHBc63X8djPHgp0XEK4aH631XcKJ1Z8D2KkPzIUYJX9BwSiCQIDAQAB o4IDbzCCA2swDgYDVR0PAQH/BAQDAgGGMDsGA1UdJQQ0MDIGCCsGAQUFBwMBBggrBgEFBQcD AgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDCDCCAcYGA1UdIASCAb0wggG5MIIBtQYL YIZIAYb9bAEDAAQwggGkMDoGCCsGAQUFBwIBFi5odHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9z c2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIBZAYIKwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUA cwBlACAAbwBmACAAdABoAGkAcwAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMA dABpAHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQA aQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkA aQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAgAGwA aQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8A cgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMA ZQAuMA8GA1UdEwEB/wQFMAMBAf8wfQYIKwYBBQUHAQEEcTBvMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wRwYIKwYBBQUHMAKGO2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NBQ2VydHMvRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqg OKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0Eu Y3JsMDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS b290Q0EuY3JsMB0GA1UdDgQWBBQVABIrE5iymQftHt+ivlcNK2cCzTAfBgNVHSMEGDAWgBRF 66Kv9JLLgjEtUYunpyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAhGFOQR64dgQqtbbvj/JV hbldVv4KmObkvWWKfUAp0/yxXUX9OrgqWzNLJFzNubTkc61hXXatdDOKZtUjr0wfcm5F2XVA u6I7z41JL8BBsOIpo1E4Q1CZFKwzBjViiX13qVIH5WwgV7aBum+8s8KU7XYCgNl8zoWoHOzH Q0pLsVfPcs7f9SU8yyJP/Z9S0TfLCLs4PuDVPm95Ca1bfDGzdzXD5GP5aAqYB+dGOHeE0j6X vAqgqKwlT0RukeHSWq9r7zAcjaNEQrMQiyP61+Y1dDesz+urWB/JiCP/NtQH6jRqR+qdlWye KU9T7eMrlSBOKs+WYHr4LIDwlVLOKZaBYjGCAfwwggH4AgEBMHYwYjELMAkGA1UEBhMCVVMx FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8G A1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xAhAPz2lJUZsAlD35l4oJxf0FMAkGBSsO AwIaBQCgXTAjBgkqhkiG9w0BCQQxFgQUi7W12fE37R3XbREtfSRSP5JguA0wGAYJKoZIhvcN AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMwMTA4MDUxMDIzWjANBgkqhkiG 9w0BAQEFAASCAQA76nOaHDq7H+o6dVI3YAJGmrIaCekxPB6Ne2U8IaOE1fPVRgv8cUksKTMK 3KQZj0H5H0K1aRCwWdd4Zmrs5MrCWVJ65VPaJgbjc3mgB+dTTLoDw1+cpdAeWn/TTrjBmUEf p1mFHPrYhHutr7yC+9EFYwsYBgoGqTgOF414SyDslblKEmVAA054ksJ9A6ggDq8+I6kziK2E 4dcpqst+Ykoav2GSIUqqWByp8aN3F+2fvHFRCIdmVQXjQBUibaeQNPtmGaeSKQ0VCA0nAvov P6vK3SwWN9qt5y8+6UTQ28kzrTSQO50DitQgyHld9mPxz1luL/Ak7E6qKJaifelXM73I --B_3440502623_11971753-- From terry.manderson@icann.org Mon Jan 7 22:03:48 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E970821F8481 for ; Mon, 7 Jan 2013 22:03:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.599 X-Spam-Level: X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W1W+VC87n3+1 for ; Mon, 7 Jan 2013 22:03:48 -0800 (PST) Received: from EXPFE100-2.exc.icann.org (expfe100-2.exc.icann.org [64.78.22.237]) by ietfa.amsl.com (Postfix) with ESMTP id ECA4F21F84F2 for ; Mon, 7 Jan 2013 22:03:47 -0800 (PST) Received: from EXVPMBX100-1.exc.icann.org ([64.78.22.232]) by EXPFE100-2.exc.icann.org ([64.78.22.237]) with mapi; Mon, 7 Jan 2013 22:03:47 -0800 From: Terry Manderson To: LISP mailing list list Date: Mon, 7 Jan 2013 22:03:45 -0800 Thread-Topic: draft-ietf-lisp-eid-block-03.txt back in workgroup Thread-Index: Ac3tZerGdrUHG1XHjkudHkIuk8cOVA== Message-ID: Accept-Language: en-US Content-Language: en X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="B_3440505825_12123306" MIME-Version: 1.0 Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , Robert Elz , "George, Wes" , SM , "cb.list6@gmail.com" , Brian E Carpenter , "Bert Wijnen \(IETF\)" Subject: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 06:03:49 -0000 --B_3440505825_12123306 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit Workgroup and others, Donning the brightly coloured LISP Chair hat. The document draft-ietf-lisp-eid-block-03.txt was handed back to the Workgroup and the document editors following the IETF last call. The LC prompted interesting feedback and highlighted some issues. The Responsible AD and the LISP chairs have discussed the future of this document. We believe that the future of this document could be best served by splitting it in two (one that allocates/justifies the prefix, and one that describes the LISP specific allocation mechanism) and also altering text to address the concerns raised during the IETF LC. However, before the WG starts to rework the document, I would first like to canvass the LISP WG as to your opinions. 1) Should we, as a WG, continue to work on this item? Is it necessary/useful for LISP? 2) If so, what direction should the WG take this document so that the LISP experiment is best served? I'd also like to call on those folks (as Brian did) who offered review of this document (CC'd here) during the IETF last call to participate on the LISP mailing list as to its future. Cheers Terry --B_3440505825_12123306 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIQAQYJKoZIhvcNAQcCoIIP8jCCD+4CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC Dc0wggcDMIIF66ADAgECAhAPz2lJUZsAlD35l4oJxf0FMA0GCSqGSIb3DQEBBQUAMGIxCzAJ BgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2Vy dC5jb20xITAfBgNVBAMTGERpZ2lDZXJ0IEFzc3VyZWQgSUQgQ0EtMTAeFw0xMjAzMjcwMDAw MDBaFw0xNTAzMjcxMjAwMDBaMIGsMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p YTEXMBUGA1UEBxMOTWFyaW5hIGRlbCBSZXkxPDA6BgNVBAoTM0ludGVybmV0IENvcnBvcmF0 aW9uIGZvciBBc3NpZ25lZCBOYW1lcyBhbmQgTnVtYmVyczEXMBUGA1UECxMORE5TIE9wZXJh dGlvbnMxGDAWBgNVBAMTD1RlcnJ5IE1hbmRlcnNvbjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKRhZ4W3U6MnfS2woYEFCIyN+g1MNILokbUKk+PTl5mmK3QtWQxTSOu2sdzN xHMy6p2RoT9BMGOamttFq2WswSru6/7JT1TflytGaPHfK5kMP/pI47hmcwUEm9Z169I5ar7z BTiEAQA06cGKtgJ8XiiLFUIHLVuRq3WGxjnFTHlAHXY6mdgDT/ntAnoEvvPVm4XqUnjJiZTS ojzyr1q2RqFvyXs2blOARumDqvLI33yLGcUuaEL+A+hgodzM/fL4kdoy964mXvmEerpm4d4f Y/JfbRUWxc0Eomu9nwGFNk6ijO41qk+OIboct2qeA+5PPclXJNNHYVfzT2dyWfGgxaMCAwEA AaOCA2gwggNkMB8GA1UdIwQYMBaAFBUAEisTmLKZB+0e36K+Vw0rZwLNMB0GA1UdDgQWBBSz wvR2YXpP9XjS9cknMX5g3LM2jTAkBgNVHREEHTAbgRl0ZXJyeS5tYW5kZXJzb25AaWNhbm4u b3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwfQYD VR0fBHYwdDA4oDagNIYyaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJl ZElEQ0EtMS5jcmwwOKA2oDSGMmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFz c3VyZWRJRENBLTEuY3JsMIIBxQYDVR0gBIIBvDCCAbgwggG0BgpghkgBhv1sBAECMIIBpDA6 BggrBgEFBQcCARYuaHR0cDovL3d3dy5kaWdpY2VydC5jb20vc3NsLWNwcy1yZXBvc2l0b3J5 Lmh0bTCCAWQGCCsGAQUFBwICMIIBVh6CAVIAQQBuAHkAIAB1AHMAZQAgAG8AZgAgAHQAaABp AHMAIABDAGUAcgB0AGkAZgBpAGMAYQB0AGUAIABjAG8AbgBzAHQAaQB0AHUAdABlAHMAIABh AGMAYwBlAHAAdABhAG4AYwBlACAAbwBmACAAdABoAGUAIABEAGkAZwBpAEMAZQByAHQAIABD AFAALwBDAFAAUwAgAGEAbgBkACAAdABoAGUAIABSAGUAbAB5AGkAbgBnACAAUABhAHIAdAB5 ACAAQQBnAHIAZQBlAG0AZQBuAHQAIAB3AGgAaQBjAGgAIABsAGkAbQBpAHQAIABsAGkAYQBi AGkAbABpAHQAeQAgAGEAbgBkACAAYQByAGUAIABpAG4AYwBvAHIAcABvAHIAYQB0AGUAZAAg AGgAZQByAGUAaQBuACAAYgB5ACAAcgBlAGYAZQByAGUAbgBjAGUALjB3BggrBgEFBQcBAQRr MGkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBBBggrBgEFBQcwAoY1 aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0QXNzdXJlZElEQ0EtMS5jcnQw DAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOCAQEAYpwxK/KvdhbyQqrKp2ylMQpNzqVH ofo4hPILTnp/o+UyYVn6daWSilaV+XNBzE5Rm/f7ms2iA1zBzOvGv55pLH0n6lgIRTeuAGzf KIsPCwPvYQkkMAPXHzh9A44m19hvigTgOPNyjzcOTiHqwwCJSDTEZx17CEkrzQPq1vfG1Lvk +AWjEtxCsGmsuCHHaZjwQ8SsGI7W5cA1Y4RTcQf6S9eIpSsOwXIYdDgWq9Uhi/amW7ryW06Y GH7BHaitqgmm32MZuid3UzJUU6+Ljx7uGA9Fe6k1uPEHhaXTAoobPSpPdOgGmnxUCRQu2OI7 +I8vHiSe7DC/LmxEDC5kB+lUTjCCBsIwggWqoAMCAQICEAoE3yF0XU0rjOozcgUAUOkwDQYJ KoZIhvcNAQEFBQAwZTELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEkMCIGA1UEAxMbRGlnaUNlcnQgQXNzdXJlZCBJRCBS b290IENBMB4XDTA2MTExMDAwMDAwMFoXDTIxMTExMDAwMDAwMFowYjELMAkGA1UEBhMCVVMx FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8G A1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEA6IItmfnKwkKVpYBzQHDSnlZUXKnE0kEGj8kz/E1FkVyBn+0snPgWWd+etSQV wpi5tHdJ3InECtqvy15r7a2wcTHrzzpADEZNk+yLejYIA6sMNP4YSYL+x8cxSIB8HqIPkg5Q ycaH6zY/2DDD/6b3+6LNb3Mj/qxWBZDwMiEWicZwiPkFl32jx0PdAug7Pe2xQaPtP77blUjE 7h6z8rwMK5nQxl0SQoHhg26Ccz8mSxSQrllmCsSNvtLOBq6thG9IhJtPQLnxTPKvmPv2zkBd XPao8S+v7Iki8msYZbHBc63X8djPHgp0XEK4aH631XcKJ1Z8D2KkPzIUYJX9BwSiCQIDAQAB o4IDbzCCA2swDgYDVR0PAQH/BAQDAgGGMDsGA1UdJQQ0MDIGCCsGAQUFBwMBBggrBgEFBQcD AgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDCDCCAcYGA1UdIASCAb0wggG5MIIBtQYL YIZIAYb9bAEDAAQwggGkMDoGCCsGAQUFBwIBFi5odHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9z c2wtY3BzLXJlcG9zaXRvcnkuaHRtMIIBZAYIKwYBBQUHAgIwggFWHoIBUgBBAG4AeQAgAHUA cwBlACAAbwBmACAAdABoAGkAcwAgAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAgAGMAbwBuAHMA dABpAHQAdQB0AGUAcwAgAGEAYwBjAGUAcAB0AGEAbgBjAGUAIABvAGYAIAB0AGgAZQAgAEQA aQBnAGkAQwBlAHIAdAAgAEMAUAAvAEMAUABTACAAYQBuAGQAIAB0AGgAZQAgAFIAZQBsAHkA aQBuAGcAIABQAGEAcgB0AHkAIABBAGcAcgBlAGUAbQBlAG4AdAAgAHcAaABpAGMAaAAgAGwA aQBtAGkAdAAgAGwAaQBhAGIAaQBsAGkAdAB5ACAAYQBuAGQAIABhAHIAZQAgAGkAbgBjAG8A cgBwAG8AcgBhAHQAZQBkACAAaABlAHIAZQBpAG4AIABiAHkAIAByAGUAZgBlAHIAZQBuAGMA ZQAuMA8GA1UdEwEB/wQFMAMBAf8wfQYIKwYBBQUHAQEEcTBvMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wRwYIKwYBBQUHMAKGO2h0dHA6Ly93d3cuZGlnaWNlcnQu Y29tL0NBQ2VydHMvRGlnaUNlcnRBc3N1cmVkSURSb290Q0EuY3J0MIGBBgNVHR8EejB4MDqg OKA2hjRodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURSb290Q0Eu Y3JsMDqgOKA2hjRodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRBc3N1cmVkSURS b290Q0EuY3JsMB0GA1UdDgQWBBQVABIrE5iymQftHt+ivlcNK2cCzTAfBgNVHSMEGDAWgBRF 66Kv9JLLgjEtUYunpyGd823IDzANBgkqhkiG9w0BAQUFAAOCAQEAhGFOQR64dgQqtbbvj/JV hbldVv4KmObkvWWKfUAp0/yxXUX9OrgqWzNLJFzNubTkc61hXXatdDOKZtUjr0wfcm5F2XVA u6I7z41JL8BBsOIpo1E4Q1CZFKwzBjViiX13qVIH5WwgV7aBum+8s8KU7XYCgNl8zoWoHOzH Q0pLsVfPcs7f9SU8yyJP/Z9S0TfLCLs4PuDVPm95Ca1bfDGzdzXD5GP5aAqYB+dGOHeE0j6X vAqgqKwlT0RukeHSWq9r7zAcjaNEQrMQiyP61+Y1dDesz+urWB/JiCP/NtQH6jRqR+qdlWye KU9T7eMrlSBOKs+WYHr4LIDwlVLOKZaBYjGCAfwwggH4AgEBMHYwYjELMAkGA1UEBhMCVVMx FTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8G A1UEAxMYRGlnaUNlcnQgQXNzdXJlZCBJRCBDQS0xAhAPz2lJUZsAlD35l4oJxf0FMAkGBSsO AwIaBQCgXTAjBgkqhkiG9w0BCQQxFgQUwZqGIz7SYt1MfcFbdJh0BoB5jUQwGAYJKoZIhvcN AQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMwMTA4MDYwMzQ1WjANBgkqhkiG 9w0BAQEFAASCAQBR3KLSWQm3IUYnixBlJS203nZ52HlgZe3MQC/n9FkX+8Hlmb6Zfk+5mr61 Lhcn8gWr/mfQ5cbMXeKQsC6i0A5VaayOhwlEu3sIVVuVPxZzfnyTzlnS4wpSjX8eijHTrAmo neugn8mM6hUFj4ijFccU2aRqu8h5NmP/KWY+Ks/fNGelz+pwDb3iygNS78dHAUPKXtYsWVIV Erd4nm0EhmW6vCB9WOVUzRA7QxpPHmvnoX8C14Oiq8qdY+7SSSgqnPgpf+3dR1c/X0w6INxA DgUDEXK6kEZmJFsEC4K+Cod8j56wWi/C7S6AF+aPc+ryD0RUS+B2bqkHYzTDH5eAGtyU --B_3440505825_12123306-- From sander@steffann.nl Tue Jan 8 00:12:30 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFD0621F84C6 for ; Tue, 8 Jan 2013 00:12:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.985 X-Spam-Level: * X-Spam-Status: No, score=1.985 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_XBL=3.033, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zCayoBShPZZA for ; Tue, 8 Jan 2013 00:12:20 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 0674B21F882D for ; Tue, 8 Jan 2013 00:12:19 -0800 (PST) Received: from [10.87.63.4] (unknown [80.187.201.33]) by mail.sintact.nl (Postfix) with ESMTP id 86955201A; Tue, 8 Jan 2013 09:12:13 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: <465A88CD-4BB0-45D7-87C5-F716D8C8E157@gmail.com> Date: Tue, 8 Jan 2013 09:12:28 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <152D7F8E-FDFB-4851-B6BE-7D3EE2F9F33C@steffann.nl> <0AAF303D-8E8C-4AEE-9AA7-D239FCB212C2@gigix.net> <465A88CD-4BB0-45D7-87C5-F716D8C8E157@gmail.com> To: Dino Farinacci X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 08:12:31 -0000 >>>> Another question: >>>>=20 >>>>> Locator: [...] The destination RLOC >>>>> SHOULD be a multicast address if it is being mapped from a >>>>> multicast destination EID. >>>>=20 >>>> How should I see this? Does it even make sense to have a multicast = address as (destination) RLOC? >>>=20 >>> Why not? >>=20 >> It seems I need to re-read the lisp-multicast draft. I can't seem to = understand how the mapping system works in relation to multicast = traffic... Is there a introduction or presentation somewhere that = explain it step-by-step? >=20 > You should also read the lisp-lcaf draft as well as the = lisp-mr-signaling draft. There are many ways to do encapsulation of = multicast packets. Thanks, will do! Sander From sander@steffann.nl Tue Jan 8 00:15:43 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B08B21F8830 for ; Tue, 8 Jan 2013 00:15:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.985 X-Spam-Level: * X-Spam-Status: No, score=1.985 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_XBL=3.033, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vrWcZQ2FYUag for ; Tue, 8 Jan 2013 00:15:42 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 96DD221F84C6 for ; Tue, 8 Jan 2013 00:15:42 -0800 (PST) Received: from [10.87.63.4] (unknown [80.187.201.33]) by mail.sintact.nl (Postfix) with ESMTP id 4DF5F2004; Tue, 8 Jan 2013 09:15:39 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: <0FBDC3CA-366B-4408-BB72-75DF4F0A8B41@gmail.com> Date: Tue, 8 Jan 2013 09:15:51 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <7FDDB7AC-7C5C-41A3-A73F-54C8543666AD@steffann.nl> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <0FBDC3CA-366B-4408-BB72-75DF4F0A8B41@gmail.com> To: Dino Farinacci X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 08:15:43 -0000 Hi, >> I was reading http://tools.ietf.org/html/draft-ietf-lisp-24 when I = noticed the following text in section 6.1.4, 'Map-Reply Message Format': >>=20 >> Locator: an IPv4 or IPv6 address (as encoded by the 'Loc-AFI' = field) >> assigned to an ETR. Note that the destination RLOC address MAY = be >> an anycast address. A source RLOC can be an anycast address as >> well. The source or destination RLOC MUST NOT be the broadcast >> address (255.255.255.255 or any subnet broadcast address known to >> the router), and MUST NOT be a link-local multicast address. The >> source RLOC MUST NOT be a multicast address. The destination = RLOC >> SHOULD be a multicast address if it is being mapped from a >> multicast destination EID. >>=20 >> It talks about source and destination RLOCs, which seems weird in the = context of a map-reply message. My feeling is that this text belongs in = a more generic section, or am I missing something here? I thought that = locators in map-replies are always meant to be used as destination = RLOCs. >=20 > Destination RLOCs are in the locator-set of an EID-record of the = Map-Reply payload. You want the source and destination addresses to be = RLOCs so the Map-Reply can be routed directly back to the requestor, by = the core routers. So (part of) this text is describing the RLOCs of the packet, not the = RLOC in the content of the Locator field then? It now looks like the = text is describing the content of the Locator field only. Thanks, Sander From sander@steffann.nl Tue Jan 8 00:23:41 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17F0421F8833 for ; Tue, 8 Jan 2013 00:23:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.985 X-Spam-Level: * X-Spam-Status: No, score=1.985 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, RCVD_IN_XBL=3.033, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CZM2yc9UzYT4 for ; Tue, 8 Jan 2013 00:23:39 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 15C7A21F8886 for ; Tue, 8 Jan 2013 00:23:39 -0800 (PST) Received: from [10.87.63.4] (unknown [80.187.201.33]) by mail.sintact.nl (Postfix) with ESMTP id 382952004; Tue, 8 Jan 2013 09:23:23 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: Date: Tue, 8 Jan 2013 09:23:33 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Terry Manderson X-Mailer: Apple Mail (2.1499) Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , Wes George , Robert Elz , Brian E Carpenter , SM , cb.list6@gmail.com, "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 08:23:41 -0000 Hi, > Donning the brightly coloured LISP Chair hat. >=20 > The document draft-ietf-lisp-eid-block-03.txt was handed back to the > Workgroup and the document editors following the IETF last call. The = LC > prompted interesting feedback and highlighted some issues. >=20 > The Responsible AD and the LISP chairs have discussed the future of = this > document. We believe that the future of this document could be best = served > by splitting it in two (one that allocates/justifies the prefix, and = one > that describes the LISP specific allocation mechanism) and also = altering > text to address the concerns raised during the IETF LC. >=20 > However, before the WG starts to rework the document, I would first = like to > canvass the LISP WG as to your opinions. >=20 > 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful > for LISP?=20 Yes, I think it can be very useful for LISP. > 2) If so, what direction should the WG take this document so that the = LISP > experiment is best served? What I was missing from the text was: - justification for the size of the prefix - allocation mechanism (AFAICT unaggregated /48 per end-site was = intended) - description on how to use this prefix - short-term routing strategy / impact on routing table - long-term routing strategy / impact on routing table - migration path between them I think that allocating a prefix without describing how it is going to = be used is a bad idea for something as important as LISP. I'm not sure = if that should be documented in one, two or more documents... > I'd also like to call on those folks (as Brian did) who offered review = of > this document (CC'd here) during the IETF last call to participate on = the > LISP mailing list as to its future. Of course! :-) Sander From ggx@gigix.net Tue Jan 8 02:22:59 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F24121F85B0 for ; Tue, 8 Jan 2013 02:22:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[AWL=1.249, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pldPV5APCctx for ; Tue, 8 Jan 2013 02:22:58 -0800 (PST) Received: from mail-we0-f176.google.com (mail-we0-f176.google.com [74.125.82.176]) by ietfa.amsl.com (Postfix) with ESMTP id 90B9421F84D9 for ; Tue, 8 Jan 2013 02:22:58 -0800 (PST) Received: by mail-we0-f176.google.com with SMTP id r5so184483wey.7 for ; Tue, 08 Jan 2013 02:22:57 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=12Q9VWHYG2XiZ9xX5ofBj1wB44dVEre1AjAA1CM1Nfs=; b=aGCpez7ZtK+GXMT8ocT53XoH3cy6p2wuF17wJpiv+jlBJzvACpRqOd36sPbz6KCCtR xUgnO8fepeepT9I3XZxd9XpxNywQHLDv5Lf7Us35jondgT/tQeQOfpP54CrjqxteM4qo wUWVsUKdM3fqw4C2dc1emS20A7TYV4ntMgmy/82RYGDw8PDOEDxHDWq1L1ioJ/jrAmhw xl/N7GdbDW5kxZdgktwsLYVfR3AMS7HUqmC3pULzPf/ZR6+YgNJYm0GT2suOukHs+C1g QlPf+1b22yQannjpz+UwnnGlb0PpL5MrwmJlCImw1S/cbucYuUkMMVk5HPxJc5FBYh7C Q4cg== X-Received: by 10.180.86.36 with SMTP id m4mr13869417wiz.5.1357640577520; Tue, 08 Jan 2013 02:22:57 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id hg17sm15933592wib.1.2013.01.08.02.22.55 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 08 Jan 2013 02:22:56 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: Date: Tue, 8 Jan 2013 11:22:55 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <94E13C8A-190A-44EB-81DF-D267CBD38250@gigix.net> References: To: Terry Manderson X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQkw/lWbPzBWCRksPOZL3j9T/S11xHNNZYCdavroHCjWZ+wB1F2WgvlB2HASIZ7IfumLK21r Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "Bert Wijnen \(IETF\)" , "cb.list6@gmail.com" , Brian E Carpenter Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 10:22:59 -0000 On 8 Jan. 2013, at 07:03 , Terry Manderson = wrote: > Workgroup and others, >=20 > Donning the brightly coloured LISP Chair hat. >=20 > The document draft-ietf-lisp-eid-block-03.txt was handed back to the > Workgroup and the document editors following the IETF last call. The = LC > prompted interesting feedback and highlighted some issues. >=20 > The Responsible AD and the LISP chairs have discussed the future of = this > document. We believe that the future of this document could be best = served > by splitting it in two (one that allocates/justifies the prefix, and = one > that describes the LISP specific allocation mechanism) and also = altering > text to address the concerns raised during the IETF LC. May I dare to ask why?=20 Doesn't make more sense to have everything in one single document?=20 Is not that I am against, is just that I want to understand what is the = specific gain the WG will have by splitting the document. >=20 > However, before the WG starts to rework the document, I would first = like to > canvass the LISP WG as to your opinions. >=20 > 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful > for LISP?=20 I still think that having a reserved prefix can be useful. >=20 > 2) If so, what direction should the WG take this document so that the = LISP > experiment is best served? If the WG provide consensus on working on the document the main task IMO = is to document the allocation mechanism. Luigi >=20 > I'd also like to call on those folks (as Brian did) who offered review = of > this document (CC'd here) during the IETF last call to participate on = the > LISP mailing list as to its future. >=20 > Cheers > Terry >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From ggx@gigix.net Tue Jan 8 02:29:37 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC8D121F8B45 for ; Tue, 8 Jan 2013 02:29:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.625 X-Spam-Level: X-Spam-Status: No, score=-2.625 tagged_above=-999 required=5 tests=[AWL=0.625, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 71rXyrE0N14Y for ; Tue, 8 Jan 2013 02:29:35 -0800 (PST) Received: from mail-wg0-f48.google.com (mail-wg0-f48.google.com [74.125.82.48]) by ietfa.amsl.com (Postfix) with ESMTP id 8604C21F8B3F for ; Tue, 8 Jan 2013 02:29:35 -0800 (PST) Received: by mail-wg0-f48.google.com with SMTP id dt10so181765wgb.15 for ; Tue, 08 Jan 2013 02:29:34 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=z0Xj/GKxE1nwT+x6zAGBNRsRERbIDHokOakvN1GU2bU=; b=aag8ppIKueettkl5aQ+IPMgpLXRZRGGcMaW7BB6RjrYOO/w4qkA/iI5sd/kChLpifh Cf6SiZKoB24ExI8+fshvPrhM/vaYomKTxXhmDCFf1UTRYb3+ENbPwwb8Je5mssc0IPtZ ubfNAjC2u03nXEuzrL2rtq6W7aB84kX2WFAGTGHkQKV68R2/0ddWyHg4XXzNmB3Z9jf4 vk9XzQOuVxtIDRnpdbUsGVNDMTyqCT2ZyxbgQgENaqL8rkOuNqHiwRr4JrDUrpiQovv9 h3FOA/lkkATOq3Hh+MRw+USzPcvWdEaz2wb815Em9yBGoUDOXLS87Hj4tr1EmONPQoNB eAmw== X-Received: by 10.180.93.40 with SMTP id cr8mr14123984wib.15.1357640974373; Tue, 08 Jan 2013 02:29:34 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id s10sm17808386wiw.4.2013.01.08.02.29.32 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Jan 2013 02:29:33 -0800 (PST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: Date: Tue, 8 Jan 2013 11:29:32 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <4EA2D005-C115-4D1C-8AB1-718BBA6D7422@gigix.net> References: To: Sander Steffann X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQncNT30A/YzM/0svsQLlw0xeWRKHnDKntoNdGj/Cp0FSauNd7wFuGSt6n++M4GiM/ziSyz/ Cc: =?windows-1252?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , Robert Elz , Wes George , "Bert Wijnen \(IETF\)" , cb.list6@gmail.com, Brian E Carpenter Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 10:29:37 -0000 On 8 Jan. 2013, at 09:23 , Sander Steffann wrote: > Hi, >=20 >> Donning the brightly coloured LISP Chair hat. >>=20 >> The document draft-ietf-lisp-eid-block-03.txt was handed back to the >> Workgroup and the document editors following the IETF last call. The = LC >> prompted interesting feedback and highlighted some issues. >>=20 >> The Responsible AD and the LISP chairs have discussed the future of = this >> document. We believe that the future of this document could be best = served >> by splitting it in two (one that allocates/justifies the prefix, and = one >> that describes the LISP specific allocation mechanism) and also = altering >> text to address the concerns raised during the IETF LC. >>=20 >> However, before the WG starts to rework the document, I would first = like to >> canvass the LISP WG as to your opinions. >>=20 >> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >> for LISP?=20 >=20 > Yes, I think it can be very useful for LISP. >=20 +1 >> 2) If so, what direction should the WG take this document so that the = LISP >> experiment is best served? >=20 > What I was missing from the text was: > - justification for the size of the prefix > - allocation mechanism Agreed. > (AFAICT unaggregated /48 per end-site was intended) Not that I remember... > - description on how to use this prefix Can be improved=85 I agree. > - short-term routing strategy / impact on routing table > - long-term routing strategy / impact on routing table I think that "routing strategy" is something falling in the "how to use = the prefix". Impact on the routing table =85 depends on "how to use the prefix" ;-) > - migration path between them >=20 Good point. > I think that allocating a prefix without describing how it is going to = be used is a bad idea for something as important as LISP. I'm not sure = if that should be documented in one, two or more documents=85 >=20 I still prefer having a single document to read. ciao Luigi >> I'd also like to call on those folks (as Brian did) who offered = review of >> this document (CC'd here) during the IETF last call to participate on = the >> LISP mailing list as to its future. >=20 > Of course! :-) > Sander >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From sm@resistor.net Tue Jan 8 02:55:18 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB2CF21F8EBA for ; Tue, 8 Jan 2013 02:55:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.562 X-Spam-Level: X-Spam-Status: No, score=-102.562 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rn2UJnMScVbl for ; Tue, 8 Jan 2013 02:55:18 -0800 (PST) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B67921F8EB8 for ; Tue, 8 Jan 2013 02:55:18 -0800 (PST) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id r08AnvUC027924; Tue, 8 Jan 2013 02:50:01 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1357642210; bh=Q8xdQIbNAaTjzYjJod+vH1BmhhYCbKWt2baNiTJMNb8=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=hPCHbjhGb2ZHcMY9Uebpr66+SAgTEvp63THFM8LqRBWJj6jJdG/3CYx318Qmb/Zmh rEHiPYgnv92IYvM1Uz4ndUD6qpOGVn732Bi2slTBdd1FeAj1tZVPx6QDJbGyN9O+s6 dI05tjozdxka+DSBl001CNIoe8IU2jH/R3O54Rbg= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1357642210; i=@resistor.net; bh=Q8xdQIbNAaTjzYjJod+vH1BmhhYCbKWt2baNiTJMNb8=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=WWRTbl5KcQccIggr8prIBBibtKw8Ldlc1EpfcXne3r+RXNDJhMxxdTZJMmBBnjzAL hVh0fQ42vQuhkfxiSjF542cNiJO6x2QAiHxNX35pJ4rFpBhlq7uGkItiaHgFxpgFlz SUPc4b6Ll6CLxwSk+vYyaou9AdeU5RXnXSTgkdrY= Message-Id: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Tue, 08 Jan 2013 02:34:57 -0800 To: Terry Manderson From: SM In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: Roger =?iso-8859-1?Q?J=F8rgensen?= , George Michaelson , Robert Elz , "George, Wes" , LISP mailing list list , cb.list6@gmail.com, Brian E Carpenter , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 10:55:18 -0000 Hi Terry, At 22:03 07-01-2013, Terry Manderson wrote: >However, before the WG starts to rework the document, I would first like to >canvass the LISP WG as to your opinions. > >1) Should we, as a WG, continue to work on this item? Is it necessary/useful >for LISP? The work item seems useful. >2) If so, what direction should the WG take this document so that the LISP >experiment is best served? The problem is justifying the IP address space allocation and explaining how it will be managed. My guess is that the working group took an ORCHID approach (copy and paste :-)). I suggest dropping the idea of calling it a very large-scale experiment. The unstated problem is about politics. I suggest taking a look at draft-lear-lisp-nerd-09. It contains a good discussion of operational models and the trade-offs. Regards, -sm From brian.e.carpenter@gmail.com Tue Jan 8 05:30:15 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DFD421F88F1 for ; Tue, 8 Jan 2013 05:30:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dlKcDO9tBQ-g for ; Tue, 8 Jan 2013 05:30:12 -0800 (PST) Received: from mail-wg0-f49.google.com (mail-wg0-f49.google.com [74.125.82.49]) by ietfa.amsl.com (Postfix) with ESMTP id 0C12F21F88E6 for ; Tue, 8 Jan 2013 05:30:11 -0800 (PST) Received: by mail-wg0-f49.google.com with SMTP id 15so316011wgd.4 for ; Tue, 08 Jan 2013 05:30:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=RmH68DpfVARkHLTghQStXKuOr0Ear9WpeWwdUk60Q78=; b=z0dDprSaUH802TOMB6PVIEgCm+EN2HhqUAlsz1IlxE0ABi15wvWPwvsdKyweYtRR1e GxdRFb/KI1p0qvAAh6lsc/OApQGjkeHDMhyvnf6t46TnlbnfP6qZ9FleP4N2pO+2hKNN 17iDM8sC3K9sXsGO0BQ6b3HK1KxsMP824+3uHKIuV4/SIFkObfFwB+iRBGy4bVI42nh8 6SaX+X9Bk8rHaTrl2IGqFmLVizjJDfjFmj7topWRY8pAAI5lp0VcEJz1UCbd5DqVPQMS Ffh4LeVlPqXwOBADpPUPXag31dQZxiDrHWH/wSquVTCZ0GtvY0rPIL625pBj4+mpwiyZ TNow== X-Received: by 10.194.79.34 with SMTP id g2mr102006179wjx.17.1357651811194; Tue, 08 Jan 2013 05:30:11 -0800 (PST) Received: from [128.232.110.102] (c102.al.cl.cam.ac.uk. [128.232.110.102]) by mx.google.com with ESMTPS id eo10sm18443857wib.9.2013.01.08.05.30.09 (version=SSLv3 cipher=OTHER); Tue, 08 Jan 2013 05:30:10 -0800 (PST) Message-ID: <50EC1F66.50907@gmail.com> Date: Tue, 08 Jan 2013 13:30:14 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Luigi Iannone References: <4EA2D005-C115-4D1C-8AB1-718BBA6D7422@gigix.net> In-Reply-To: <4EA2D005-C115-4D1C-8AB1-718BBA6D7422@gigix.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: =?UTF-8?B?Um9nZXIgSsO4cmdlbnNlbg==?= , George Michaelson , LISP mailing list list , Wes George , Robert Elz , cb.list6@gmail.com, "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 13:30:15 -0000 On 08/01/2013 10:29, Luigi Iannone wrote: > On 8 Jan. 2013, at 09:23 , Sander Steffann wrote: >> - description on how to use this prefix >=20 > Can be improved=E2=80=A6 I agree. >=20 >> - short-term routing strategy / impact on routing table >> - long-term routing strategy / impact on routing table >=20 > I think that "routing strategy" is something falling in the "how to use= the prefix". Maybe, but it is a major sub-section. This is the area that got me worrie= d enough to comment on the draft - especially, why non-participants in the LISP experiment would propagate the prefix. At least, before arguments su= ch as "This is the only way to reach Facebook" can be used. > Impact on the routing table =E2=80=A6 depends on "how to use the prefix= " ;-) >=20 >> - migration path between them >> >=20 > Good point. Essential point, I'd say: how does this prefix behave around the tipping point between "a few sites use LISP" and "most sites use LISP"? Brian From gih@apnic.net Tue Jan 8 11:21:11 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B156E11E80CC for ; Tue, 8 Jan 2013 11:21:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0WxG7JkBO0dX for ; Tue, 8 Jan 2013 11:21:11 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by ietfa.amsl.com (Postfix) with ESMTP id E90C911E80BF for ; Tue, 8 Jan 2013 11:21:10 -0800 (PST) Received: from 2001-44b8-1121-1a00-84d4-29cd-232e-fbff.static.ipv6.internode.on.net (2001-44b8-1121-1a00-84d4-29cd-232e-fbff.static.ipv6.internode.on.net [IPv6:2001:44b8:1121:1a00:84d4:29cd:232e:fbff]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 9A610B6764; Wed, 9 Jan 2013 05:21:06 +1000 (EST) Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> Date: Wed, 9 Jan 2013 06:21:04 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> To: SM X-Mailer: Apple Mail (2.1499) Cc: =?iso-8859-1?Q?Roger__J=F8rgensen?= , George Michaelson , Robert Elz , "George, Wes" , LISP mailing list list , "Bert Wijnen \(IETF\)" , cb.list6@gmail.com Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 19:21:11 -0000 On 08/01/2013, at 9:34 PM, SM wrote: > Hi Terry, > At 22:03 07-01-2013, Terry Manderson wrote: >> However, before the WG starts to rework the document, I would first = like to >> canvass the LISP WG as to your opinions. >>=20 >> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >> for LISP? >=20 > The work item seems useful. >=20 >> 2) If so, what direction should the WG take this document so that the = LISP >> experiment is best served? >=20 > The problem is justifying the IP address space allocation and = explaining how it will be managed. >=20 > My guess is that the working group took an ORCHID approach (copy and = paste :-)). I suggest dropping the idea of calling it a very = large-scale experiment. The unstated problem is about politics. I = suggest taking a look at draft-lear-lisp-nerd-09. It contains a good = discussion of operational models and the trade-offs. >=20 I was on the IAB at the time that ORCHID was being considered - the = issue there was to find a balance between enough bits for acceptable = crypto and basic conservatism in the absolute size of the request - at = the time a /28 appeared to be a suitable compromise considering that = this was an experiment. Given that this is an experiment and that the transition from experiment = to widespread deployment may well entail renumbering (as was the case = with the 6bone) then one approach may well be to use a modest prefix = that has a limited capacity that would force renumbering in the shift = from experiment to widespread adoption, if such occurs in the future. Geoff From farinacci@gmail.com Tue Jan 8 14:06:50 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDA4D21F853C for ; Tue, 8 Jan 2013 14:06:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ueLCfBbnpyb for ; Tue, 8 Jan 2013 14:06:50 -0800 (PST) Received: from mail-pb0-f45.google.com (mail-pb0-f45.google.com [209.85.160.45]) by ietfa.amsl.com (Postfix) with ESMTP id 9201421F84B6 for ; Tue, 8 Jan 2013 14:06:30 -0800 (PST) Received: by mail-pb0-f45.google.com with SMTP id mc8so509422pbc.18 for ; Tue, 08 Jan 2013 14:06:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=iB7jKhEcvISs9oATA8ER289LRX/6WNGAFQOhZa/vbEg=; b=EceRbsN8tD08oW4Nnn/OfQGNRZD6l/DJOPWEYaa4Nav1eN1oBIzJqPn2jAXxGr08n+ YWcWDbxQMI9HmlRR4NiMMff1akjbMV3BhxmAYOiOdw/rlei5XhmHqjyRfKqmOLgtZ4xM oPCt36mMucnkkMbpvpFnfaekQOt/Pph9gWwL4PUe+cyAyWUUYeyFcqHbVIZVGHlEhZyf Cu+Fb5qa6/X9TRyQDaLpo0lZ6JvNkZGml7vZk0feiFWFyOleUj9GxbeUrsUlDOyEmgHr 2bQHw6vIFqfjSbxa3lNWs4VbH+SFTB79GgMGjUJWX8p+VkshVG0EO2cPnU9jO1WkA8UG INuA== X-Received: by 10.66.79.66 with SMTP id h2mr183551290pax.31.1357682790182; Tue, 08 Jan 2013 14:06:30 -0800 (PST) Received: from [192.168.5.198] (ip-64-134-230-8.public.wayport.net. [64.134.230.8]) by mx.google.com with ESMTPS id is6sm40286793pbc.55.2013.01.08.14.06.24 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Jan 2013 14:06:29 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <7FDDB7AC-7C5C-41A3-A73F-54C8543666AD@steffann.nl> Date: Tue, 8 Jan 2013 14:06:13 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <89B1717C-C059-4851-8D1D-25F2C6E96035@gmail.com> References: <0C84E053-2067-4203-9762-D40A6DACE51B@steffann.nl> <0FBDC3CA-366B-4408-BB72-75DF4F0A8B41@gmail.com> <7FDDB7AC-7C5C-41A3-A73F-54C8543666AD@steffann.nl> To: Sander Steffann X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org list" Subject: Re: [lisp] Description of locator in map-reply section X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Jan 2013 22:06:51 -0000 > Hi, >=20 >>> I was reading http://tools.ietf.org/html/draft-ietf-lisp-24 when I = noticed the following text in section 6.1.4, 'Map-Reply Message Format': >>>=20 >>> Locator: an IPv4 or IPv6 address (as encoded by the 'Loc-AFI' = field) >>> assigned to an ETR. Note that the destination RLOC address MAY = be >>> an anycast address. A source RLOC can be an anycast address as >>> well. The source or destination RLOC MUST NOT be the broadcast >>> address (255.255.255.255 or any subnet broadcast address known to >>> the router), and MUST NOT be a link-local multicast address. The >>> source RLOC MUST NOT be a multicast address. The destination = RLOC >>> SHOULD be a multicast address if it is being mapped from a >>> multicast destination EID. >>>=20 >>> It talks about source and destination RLOCs, which seems weird in = the context of a map-reply message. My feeling is that this text belongs = in a more generic section, or am I missing something here? I thought = that locators in map-replies are always meant to be used as destination = RLOCs. >>=20 >> Destination RLOCs are in the locator-set of an EID-record of the = Map-Reply payload. You want the source and destination addresses to be = RLOCs so the Map-Reply can be routed directly back to the requestor, by = the core routers. >=20 >=20 > So (part of) this text is describing the RLOCs of the packet, not the = RLOC in the content of the Locator field then? It now looks like the = text is describing the content of the Locator field only. >=20 > Thanks, > Sander It is describing both. The "Loc-AFI" field is the locator-set encoding = in the EID-record that I described above. Dino From agmalis@gmail.com Mon Jan 7 08:10:17 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43A1B21F8933; Mon, 7 Jan 2013 08:10:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5a-kxxq4t-+D; Mon, 7 Jan 2013 08:10:16 -0800 (PST) Received: from mail-qc0-f180.google.com (mail-qc0-f180.google.com [209.85.216.180]) by ietfa.amsl.com (Postfix) with ESMTP id D9A3F21F8948; Mon, 7 Jan 2013 08:10:03 -0800 (PST) Received: by mail-qc0-f180.google.com with SMTP id v28so12728669qcm.11 for ; Mon, 07 Jan 2013 08:10:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=+or99Gpu8hveajeTJfRMl8slHA5XhWXPvewZr5VGoXM=; b=eMB254dLijA2+Mrq+nqX0zEP4kiV3fwr4pJgc5U2ZzvKKOB4sYGAKF68IaFyB30Agn cScSLRujE+87sT4iIBRU1HCKOCyQwVcVQJQMoY3v0UsQCCe6+HM5jqCFmQrrhgwEGaMV NVLxHpJmcNgq2V3RResiQjABY+U3QklguY6ECYhBy3W483YZe4NWQhL03afzyqOfP4iz Z28t7zJ3+KujNtgMJuC56YxlfDeWz36ZfAd33JJBAZdmy6UABFrGsTE3a2MpwyLSJ6uD v27j9EBGwnoz23LfpTs39W2Xhz6VOwmKS9X2DS1BirW+XyJLLjN7KZlllioBxvbk1j7+ MuPw== Received: by 10.224.72.197 with SMTP id n5mr44463821qaj.38.1357575003368; Mon, 07 Jan 2013 08:10:03 -0800 (PST) MIME-Version: 1.0 Received: by 10.229.78.72 with HTTP; Mon, 7 Jan 2013 08:09:43 -0800 (PST) In-Reply-To: <0A534525-59E1-418E-826B-177655767B17@gmail.com> References: <0A534525-59E1-418E-826B-177655767B17@gmail.com> From: "Andrew G. Malis" Date: Mon, 7 Jan 2013 11:09:43 -0500 Message-ID: To: Damien Saucez Content-Type: multipart/alternative; boundary=20cf3071d1dad4ee9104d2b50f93 X-Mailman-Approved-At: Tue, 08 Jan 2013 15:28:01 -0800 Cc: Softwires@ietf.org, LISP mailing list list , draft-xu-softwire-ip-in-udp@tools.ietf.org Subject: Re: [lisp] [Softwires] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Jan 2013 16:10:17 -0000 --20cf3071d1dad4ee9104d2b50f93 Content-Type: text/plain; charset=ISO-8859-1 For the benefit of those of you that don't follow the MPLS WG list, this draft is closely related to http://tools.ietf.org/html/draft-xu-mpls-in-udp-06 , which is the subject of a lively discussion there. Cheers, Andy On Sun, Dec 30, 2012 at 3:45 PM, Damien Saucez wrote: > Hello, > > Interesting document, have you ever though of LISP to do that? > > Regards, > > Damien Saucez > _______________________________________________ > Softwires mailing list > Softwires@ietf.org > https://www.ietf.org/mailman/listinfo/softwires > --20cf3071d1dad4ee9104d2b50f93 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
For the benefit of those of you that don't follow= the MPLS WG list, this draft is closely related to http://tools.ietf.org/html/draft-xu= -mpls-in-udp-06 , which is the subject of a lively discussion there.
Cheers,
Andy


On Sun, Dec 30, 2012 at 3:45 PM, Damien Saucez <damien.saucez@gmail.com> wrote:
Hello,

Interesting document, have you ever though of LISP to do that?

Regards,

Damien Saucez
_______________________________________________
Softwires mailing list
Softwires@ietf.org
https://www.ietf.org/mailman/listinfo/softwires

--20cf3071d1dad4ee9104d2b50f93-- From jmh@joelhalpern.com Tue Jan 8 16:22:20 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEC3021F84F2 for ; Tue, 8 Jan 2013 16:22:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XWCqIDP166jl for ; Tue, 8 Jan 2013 16:22:19 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 95D9521F84B2 for ; Tue, 8 Jan 2013 16:22:18 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 8AFEEA5C47 for ; Tue, 8 Jan 2013 16:22:17 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 72B921C0676; Tue, 8 Jan 2013 16:22:17 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.155.107.75] (unknown [129.192.170.160]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 25F371C05FB; Tue, 8 Jan 2013 16:22:17 -0800 (PST) Message-ID: <50ECB839.4080701@joelhalpern.com> Date: Tue, 08 Jan 2013 19:22:17 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Luigi Iannone References: <94E13C8A-190A-44EB-81DF-D267CBD38250@gigix.net> In-Reply-To: <94E13C8A-190A-44EB-81DF-D267CBD38250@gigix.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: =?ISO-8859-1?Q?Roger_J?= =?ISO-8859-1?Q?=F8rgensen?= , George Michaelson , LISP mailing list list , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 00:22:21 -0000 Commenting just on this one piece, the reason for suggesting separating the two pieces has two components, as I understand the situation. 1) There is a belief that it would be helpful to get the prefix soon. 2) working out, ad then clearly documen, the plan for LISP EID assignment / delegation still needs significant work, and is not likely to complete quickly. If these two observations are both accurate, then separating the problems seems the only path that meets the goals. If we do not need to get the prefix allocated quickly, then I would tend to strongly favor working out the rest of the system, delegation, allocation, and usage so that we know how all the parts work. Yours, Joel On 1/8/2013 5:22 AM, Luigi Iannone wrote: >> The Responsible AD and the LISP chairs have discussed the future of this >> >document. We believe that the future of this document could be best served >> >by splitting it in two (one that allocates/justifies the prefix, and one >> >that describes the LISP specific allocation mechanism) and also altering >> >text to address the concerns raised during the IETF LC. > May I dare to ask why? From farinacci@gmail.com Tue Jan 8 16:43:54 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 278A811E809A for ; Tue, 8 Jan 2013 16:43:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.392 X-Spam-Level: X-Spam-Status: No, score=-2.392 tagged_above=-999 required=5 tests=[AWL=1.208, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6WsbC072LqTo for ; Tue, 8 Jan 2013 16:43:53 -0800 (PST) Received: from mail-pa0-f51.google.com (mail-pa0-f51.google.com [209.85.220.51]) by ietfa.amsl.com (Postfix) with ESMTP id 0A1361F0CFB for ; Tue, 8 Jan 2013 16:43:51 -0800 (PST) Received: by mail-pa0-f51.google.com with SMTP id fb11so658524pad.38 for ; Tue, 08 Jan 2013 16:43:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=nFIdgz5tED5OFn6HDruOLoy+qRvXxV1okNbCglH9kGE=; b=JKVmVwUzQTEOoLKUwfvJKXgrWk/R+ZfRAxRnjVBV3E9Viunwoys9iqXAmbwxrhDDm4 vJvzXLv9o49GRPjCYrej0az6alH0Ypw+ZOzBi1V9KFIvGgDZR9G6Y8c3AvqMgFUJE0FC HCaXc2ehYM8cReWkrK18G/JzM9reeqkkFuUXoaLopf4KUweid+PF+TS6VhySWDEcGXY4 dEyxfU7k9jlK97ZVmbzVAcxbrEtqM7rrVP7o9B6OP6QyQKQP1gAWA3Znc8bmyQSH2d+W lVTF7RJRX2j5E/S09Yumi602+OsvgXz/ztwKYiPWKXurmYvybNesRFL7ddCR7LPIczjx 5HAQ== X-Received: by 10.66.74.40 with SMTP id q8mr184336787pav.29.1357692224993; Tue, 08 Jan 2013 16:43:44 -0800 (PST) Received: from [10.169.113.83] (71-6-80-11.static-ip.telepacific.net. [71.6.80.11]) by mx.google.com with ESMTPS id c2sm41640514pay.34.2013.01.08.16.43.41 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Jan 2013 16:43:44 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: Date: Tue, 8 Jan 2013 16:43:41 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <58F6B9DD-3069-4045-87CC-03F034459749@gmail.com> References: To: Terry Manderson X-Mailer: Apple Mail (2.1499) Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , Wes George , David Farmer , Robert Elz , "Bert Wijnen \(IETF\)" , cb.list6@gmail.com Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 00:43:54 -0000 I recently visited University of Minnesota where I met David (copied on = this email). He said, from an RIR perspective, he would help us revise = this draft. Luigi meet David. David meet Luigi. David can comment but he felt we = could get a coarse prefix if we just justified how it would be used and = would help us write text. Dino On Jan 7, 2013, at 10:03 PM, Terry Manderson = wrote: > Workgroup and others, >=20 > Donning the brightly coloured LISP Chair hat. >=20 > The document draft-ietf-lisp-eid-block-03.txt was handed back to the > Workgroup and the document editors following the IETF last call. The = LC > prompted interesting feedback and highlighted some issues. >=20 > The Responsible AD and the LISP chairs have discussed the future of = this > document. We believe that the future of this document could be best = served > by splitting it in two (one that allocates/justifies the prefix, and = one > that describes the LISP specific allocation mechanism) and also = altering > text to address the concerns raised during the IETF LC. >=20 > However, before the WG starts to rework the document, I would first = like to > canvass the LISP WG as to your opinions. >=20 > 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful > for LISP?=20 >=20 > 2) If so, what direction should the WG take this document so that the = LISP > experiment is best served? >=20 > I'd also like to call on those folks (as Brian did) who offered review = of > this document (CC'd here) during the IETF last call to participate on = the > LISP mailing list as to its future. >=20 > Cheers > Terry >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From ggm@algebras.org Tue Jan 8 17:16:53 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9905D21F8449 for ; Tue, 8 Jan 2013 17:16:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xyO-NcMHxH5g for ; Tue, 8 Jan 2013 17:16:53 -0800 (PST) Received: from mail-pb0-f51.google.com (mail-pb0-f51.google.com [209.85.160.51]) by ietfa.amsl.com (Postfix) with ESMTP id E17B621F8439 for ; Tue, 8 Jan 2013 17:16:52 -0800 (PST) Received: by mail-pb0-f51.google.com with SMTP id ro12so587989pbb.38 for ; Tue, 08 Jan 2013 17:16:52 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=7hBlNBhyZm9WcN9rTpCgeiHybToGAx1cuSXoRJmz2bM=; b=Mb/T8X1YuDch8/55kRVRdG022yd/aNpyvrfvZRJVotNbX3m24P9mO2HtrI+B/UmXXr Te8MiNSzI7oHHXyBzTCwepgJ1Vp4H1eBwgg8qmeVa5+YmctyTiNK2w5R1gFPUM6Cug+l 1ktRpzN4xyylaccXoFDFCfNE1pYIFlZzmeKWJTcte8Z0XUycBC2s2LH75AZCb7LYMnin zr5e5/7x7fr+KH1qyiZvQ2F3gxonFpMWS5x9ueOKdiCz/xd3dzSJHxeeNO6syDG+qMNg ujiAZXUUNvkH79xDPkpY9bGF6sm1jn+g/gIXtV/JO4TgJeur7Zyv9GpgpBlDaFJYVu5s p8fA== X-Received: by 10.68.238.106 with SMTP id vj10mr207842359pbc.40.1357694212591; Tue, 08 Jan 2013 17:16:52 -0800 (PST) Received: from ?IPv6:2001:dc0:a000:4:51d4:95c4:51d5:a942? ([2001:dc0:a000:4:51d4:95c4:51d5:a942]) by mx.google.com with ESMTPS id mt15sm40546177pbc.49.2013.01.08.17.16.48 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Jan 2013 17:16:51 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: George Michaelson In-Reply-To: Date: Wed, 9 Jan 2013 11:16:45 +1000 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: Terry Manderson X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQkUtkRxB5jKZbWZVkZuhWi0q6jCQ0tobmS2IfpMttZBr0OWfnPICr7ywmsmgMyesoTmjYJX Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "Bert Wijnen \(IETF\)" , "cb.list6@gmail.com" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 01:16:53 -0000 On 08/01/2013, at 4:03 PM, Terry Manderson = wrote: > Workgroup and others, >=20 > Donning the brightly coloured LISP Chair hat. >=20 > The document draft-ietf-lisp-eid-block-03.txt was handed back to the > Workgroup and the document editors following the IETF last call. The = LC > prompted interesting feedback and highlighted some issues. >=20 > The Responsible AD and the LISP chairs have discussed the future of = this > document. We believe that the future of this document could be best = served > by splitting it in two (one that allocates/justifies the prefix, and = one > that describes the LISP specific allocation mechanism) and also = altering > text to address the concerns raised during the IETF LC. >=20 > However, before the WG starts to rework the document, I would first = like to > canvass the LISP WG as to your opinions. >=20 > 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful > for LISP? EID might not be addresses in LISP terms, but you are using IPv6 = addresses, which come with expectations over the management and = behaviour. I think that its appropriate for LISP to identify address management = requirements and expectations. I think it goes to question 2) are these EID intended to be individually routed in = global-unicast BGP view, or only visible as an aggregated prefix? how many EID do people need? do EID have to aggregate, is there = any benefit in EID being more than just unique (ie, unique and growable, = or unique and large/medium/small) for instance. >=20 > 2) If so, what direction should the WG take this document so that the = LISP > experiment is best served? If you are explicitly addressing this as an EXPERIMENT then you should = objectively address the experimental allocation criteria, which are that = you justify why it cannot fit inside a /32, and recognise that its a = time limited allocation, subject to some kind of renewal. How many participants in the EXPERIMENT are you trying to cope = with? How large an EID does each participant need? whats the scaling? If you are attempting to address larger deployment scaling which go = beyond the experiment life, the issues around what KIND of allocation = policy applies need to be explored: what objective criteria are expected to be applied, to allocate = EID to entities?=20 is the sole property uniqueness? >=20 > I'd also like to call on those folks (as Brian did) who offered review = of > this document (CC'd here) during the IETF last call to participate on = the > LISP mailing list as to its future. Noted. -G >=20 > Cheers > Terry >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From steenjj@gmail.com Tue Jan 8 21:20:33 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C662311E8099; Tue, 8 Jan 2013 21:20:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QBKgKkheln6v; Tue, 8 Jan 2013 21:20:32 -0800 (PST) Received: from mail-la0-f53.google.com (mail-la0-f53.google.com [209.85.215.53]) by ietfa.amsl.com (Postfix) with ESMTP id B5CDA21F845A; Tue, 8 Jan 2013 21:20:30 -0800 (PST) Received: by mail-la0-f53.google.com with SMTP id fn20so1403028lab.12 for ; Tue, 08 Jan 2013 21:20:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=7k3YBIww1ZkPu7/g8MPV2D/f7eJakRklwbX73wLkFcU=; b=gx+iissOMROYcJh00itm0n3gnZnrDh1F7T92TqRAQI3gcpBBEfUHRvc2ayQnwatXWP 46075fOxiU42VWgcUqP8jjacAC2iokUKTP37J1eB/jIdseVUN9ZesDQb92ZH764GkP0O VKtChye6WP5REH8VWZiuuBOn+V4dP3ntxWesjOhrUbyWOKvtADKb8C5mznAXE2ng4xYX yqBl0/p1HxBoFEemi03i0K9jv3jSgZcvdr20WwDmYSgJ2sQ8op1fXvZPCkUG1BNguf5M 3RLZ5RH9/QAXO0iRshM5RnLieqS+ZKS6WaGGmPArLq6xdIwrCV/WbScdJFGLd1YLxMNd k1+g== MIME-Version: 1.0 Received: by 10.112.98.232 with SMTP id el8mr15134062lbb.121.1357708825558; Tue, 08 Jan 2013 21:20:25 -0800 (PST) Received: by 10.152.36.33 with HTTP; Tue, 8 Jan 2013 21:20:25 -0800 (PST) In-Reply-To: References: <0A534525-59E1-418E-826B-177655767B17@gmail.com> Date: Wed, 9 Jan 2013 00:20:25 -0500 Message-ID: From: Jon Steen To: "Andrew G. Malis" Content-Type: multipart/alternative; boundary=f46d0401f8e1417ee504d2d438b8 Cc: Softwires@ietf.org, LISP mailing list list , draft-xu-softwire-ip-in-udp@tools.ietf.org Subject: Re: [lisp] [Softwires] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 05:20:33 -0000 --f46d0401f8e1417ee504d2d438b8 Content-Type: text/plain; charset=ISO-8859-1 Andy, I would have to agree with Damien in some sense, what other currently available standards are available to fulfill this need without adding the extra overhead. Overhead only adds to the proceessing time it takes to relay the data. Jon Steen On Mon, Jan 7, 2013 at 11:09 AM, Andrew G. Malis wrote: > For the benefit of those of you that don't follow the MPLS WG list, this > draft is closely related to > http://tools.ietf.org/html/draft-xu-mpls-in-udp-06 , which is the subject > of a lively discussion there. > > Cheers, > Andy > > > On Sun, Dec 30, 2012 at 3:45 PM, Damien Saucez wrote: > >> Hello, >> >> Interesting document, have you ever though of LISP to do that? >> >> Regards, >> >> Damien Saucez >> _______________________________________________ >> Softwires mailing list >> Softwires@ietf.org >> https://www.ietf.org/mailman/listinfo/softwires >> > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > > --f46d0401f8e1417ee504d2d438b8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Andy,
=A0
I would have to agree with Damien in som= e sense, what other currently available standards are available to fulfill = this need without adding the extra overhead.=A0 Overhead only adds to the p= roceessing time it takes to relay the data.
=A0
Jon Steen


=A0
On Mon, Jan 7, 2013 at 11:09 AM, Andrew G. Malis = <agmalis@gmail.co= m> wrote:
For the benefit of those of you that= don't follow the MPLS WG list, this draft is closely related to = http://tools.ietf.org/html/draft-xu-mpls-in-udp-06 , which is the subje= ct of a lively discussion there.

Cheers,
Andy


On Sun, Dec 30, 2012 at 3:45 PM, Da= mien Saucez <damien.saucez@gmail.com> wrote:
Hello,

Interesting document, have you ever though of LISP to do that?

Regards,

Damien Saucez
_______________________________________________
Softwires mailing list
Softwires@ietf.org<= /a>
https://www.ietf.org/mailman/listinfo/softwires


_______________________________________________
lisp mailing list
lisp@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/lisp


--f46d0401f8e1417ee504d2d438b8-- From ggx@gigix.net Wed Jan 9 03:57:35 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E09E21F8849 for ; Wed, 9 Jan 2013 03:57:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.937 X-Spam-Level: X-Spam-Status: No, score=-2.937 tagged_above=-999 required=5 tests=[AWL=0.312, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eJOTtzKs6U0u for ; Wed, 9 Jan 2013 03:57:34 -0800 (PST) Received: from mail-we0-f176.google.com (mail-we0-f176.google.com [74.125.82.176]) by ietfa.amsl.com (Postfix) with ESMTP id 62CCA21F857A for ; Wed, 9 Jan 2013 03:57:33 -0800 (PST) Received: by mail-we0-f176.google.com with SMTP id r5so984674wey.7 for ; Wed, 09 Jan 2013 03:57:32 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=g5Phug+oA50Xl1iBkjQqKa2KJxXN/rK5iOowsT71/1g=; b=d5w+pz7YGb0xJ1W4Dj5N1QBLlQCdE5nUkFRXXgAxqzbZbaELIdG5JIVXWJF7mWzaaj BfGsEFk9QDQSsSJEDxBzQNGjActxfHPqfPiNHVom8ASpbbMeuymEHtS9zqYPGECno7+/ ZRVlN58l5DmnuQcuaCf+L8nKdhVwcVtZ2Y8N8e4haItq69sR8ddIRo6+CwZ/OnOM2UmX jsvMI6oLSrYQQzTWnkF2y5VBhj7DYPFZUA8w1Ek8GLgYjB8wRXijVefWZkVP3O32jA1A SFffEjATJDC+EdRgnwoyuW4aoWWMLZH5WMFI6+J/4tP2VPfiYzzYot5BmJ5YFY8dweZF Zh9w== X-Received: by 10.195.13.67 with SMTP id ew3mr20442336wjd.59.1357732652496; Wed, 09 Jan 2013 03:57:32 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id ex6sm3944234wid.3.2013.01.09.03.57.30 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 09 Jan 2013 03:57:31 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <50ECB839.4080701@joelhalpern.com> Date: Wed, 9 Jan 2013 12:57:33 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <94E13C8A-190A-44EB-81DF-D267CBD38250@gigix.net> <50ECB839.4080701@joelhalpern.com> To: Joel M. Halpern X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQkV5a8g6h3A/nZxw47Omkio+CJ9xcTgcFYJq9ptix4iqT3nCvLiD2Vr5NuOnV4Sggcyeyll Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 11:57:35 -0000 On 9 Jan. 2013, at 01:22 , Joel M. Halpern wrote: > Commenting just on this one piece, the reason for suggesting = separating the two pieces has two components, as I understand the = situation. > 1) There is a belief that it would be helpful to get the prefix soon. > 2) working out, ad then clearly documen, the plan for LISP EID = assignment / delegation still needs significant work, and is not likely = to complete quickly. Hi Joel, don't we risk to have the first document blocked until the second is = finished? Most concerns during LC were about "why to allocate a prefix if we do = not know how to use it?".=20 =46rom my understanding even having the prefix today it will not be = possible to use it until document 2 is out as well.=20 What am I missing? Luigi >=20 > If these two observations are both accurate, then separating the = problems seems the only path that meets the goals. If we do not need to = get the prefix allocated quickly, then I would tend to strongly favor = working out the rest of the system, delegation, allocation, and usage so = that we know how all the parts work. >=20 > Yours, > Joel >=20 > On 1/8/2013 5:22 AM, Luigi Iannone wrote: >>> The Responsible AD and the LISP chairs have discussed the future of = this >>> >document. We believe that the future of this document could be best = served >>> >by splitting it in two (one that allocates/justifies the prefix, = and one >>> >that describes the LISP specific allocation mechanism) and also = altering >>> >text to address the concerns raised during the IETF LC. >> May I dare to ask why? From ggx@gigix.net Wed Jan 9 04:02:02 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 082DD21F859A for ; Wed, 9 Jan 2013 04:02:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kPTnaOlCedf2 for ; Wed, 9 Jan 2013 04:02:01 -0800 (PST) Received: from mail-we0-f175.google.com (mail-we0-f175.google.com [74.125.82.175]) by ietfa.amsl.com (Postfix) with ESMTP id 1E1F421F8589 for ; Wed, 9 Jan 2013 04:02:00 -0800 (PST) Received: by mail-we0-f175.google.com with SMTP id z53so1033005wey.34 for ; Wed, 09 Jan 2013 04:02:00 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=O4ZkZH0DR7jpqCXxyXez0ZOXV4MlGpv7IIQtK4J9yFE=; b=fcdXSFzLWqyLZVcK8jLF0vjuKC+hXxVIXWe58/gnFGDNrQWsfuRHPsfbBTtGCthS++ vTgej9dMYPKbEp+Cpg3LGvhYm9/ncufy3NV0O9iPq2irfP2lmMH7Z4E4ntqnvpdjgjjn aVzhkVOh6qehE+OlVuFaBrcIURqDpERXs+EVMNxQwK8EZY3Rq/yP+XCYOBiT6nhj3vKM ujuDc0E2zRTr17QJySzNtyAczQBYsgOIrG6JVuaoc4vN//+Xr7cjR734V6TaKR21lx3s U4StxM3WGrplKWrJqdnWE5j7xLwHnulwMGFegEn2QU8JmXb8kqx2VkDoDtx10/2BXPmj OSXQ== X-Received: by 10.180.93.41 with SMTP id cr9mr2367251wib.19.1357732920167; Wed, 09 Jan 2013 04:02:00 -0800 (PST) Received: from ?IPv6:2001:660:330f:a4:889c:80e2:1642:15d2? ([2001:660:330f:a4:889c:80e2:1642:15d2]) by mx.google.com with ESMTPS id hg17sm3612109wib.1.2013.01.09.04.01.58 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 09 Jan 2013 04:01:59 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: Date: Wed, 9 Jan 2013 13:02:01 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> To: Geoff Huston X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQlrCNh9jbpa9prsPx+Ymj7uOUy0ctN83XaSeKxjhCHKO0cKuowhaEa0meNq5Vw8L2W3PWWI Cc: =?iso-8859-1?Q?Roger__J=F8rgensen?= , George Michaelson , Robert Elz , "George, Wes" , cb.list6@gmail.com, "Bert Wijnen \(IETF\)" , LISP mailing list list Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 12:02:02 -0000 Hi Geoff, On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >=20 > On 08/01/2013, at 9:34 PM, SM wrote: >=20 >> Hi Terry, >> At 22:03 07-01-2013, Terry Manderson wrote: >>> However, before the WG starts to rework the document, I would first = like to >>> canvass the LISP WG as to your opinions. >>>=20 >>> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >>> for LISP? >>=20 >> The work item seems useful. >>=20 >>> 2) If so, what direction should the WG take this document so that = the LISP >>> experiment is best served? >>=20 >> The problem is justifying the IP address space allocation and = explaining how it will be managed. >>=20 >> My guess is that the working group took an ORCHID approach (copy and = paste :-)). I suggest dropping the idea of calling it a very = large-scale experiment. The unstated problem is about politics. I = suggest taking a look at draft-lear-lisp-nerd-09. It contains a good = discussion of operational models and the trade-offs. >>=20 >=20 > I was on the IAB at the time that ORCHID was being considered - the = issue there was to find a balance between enough bits for acceptable = crypto and basic conservatism in the absolute size of the request - at = the time a /28 appeared to be a suitable compromise considering that = this was an experiment. >=20 > Given that this is an experiment and that the transition from = experiment to widespread deployment may well entail renumbering (as was = the case with the 6bone) then one approach may well be to use a modest = prefix that has a limited capacity that would force renumbering in the = shift from experiment to widespread adoption, if such occurs in the = future. >=20 I may be mistake but I do not see the renumbering need in the LISP case. The prefix request was written in such a way to reduce renumbering, = rather making the prefix "bigger" so to accommodate the growth. This = would also be an easy change, rather then adding different prefix blocks = just change the length of the existing prefix. I think this is something to keep in the future document(s). Luigi > Geoff >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From ggx@gigix.net Wed Jan 9 04:04:18 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB0A121F872D for ; Wed, 9 Jan 2013 04:04:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.999 X-Spam-Level: X-Spam-Status: No, score=-2.999 tagged_above=-999 required=5 tests=[AWL=0.250, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A+gvOnFtSq-C for ; Wed, 9 Jan 2013 04:04:17 -0800 (PST) Received: from mail-we0-f174.google.com (mail-we0-f174.google.com [74.125.82.174]) by ietfa.amsl.com (Postfix) with ESMTP id 6ED7A21F8700 for ; Wed, 9 Jan 2013 04:04:17 -0800 (PST) Received: by mail-we0-f174.google.com with SMTP id x10so996310wey.33 for ; Wed, 09 Jan 2013 04:04:16 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=GNLF3UI06ddN4HZ5IiacQylEz8vXmPp1OCWsBYrboRY=; b=R9ATH3PiZPkQBkVP4XFPqtk+394uhhdeGReBXS4x+Qfnk+QlGIVOtEyHGV6J12dVaE FHCFTW0w7nB2wabotDTTJdGiopdUClDQBkWruVGOEOtKVPx/4+3q3yeFdL7qenk5Tn3p QqB6NNCHF3Kwc9qLKDI0X6MXDyxTApakbdgJkaO+h+wlayx2QXEloF5QaagtkeHihZ4I LMjUpAXpAUSjQ1tFARJvgCw3ETGEa7xK8e8vrgf6GIQa+KvjAENNlGKgL3MBo1TooOPw O8dRg7hXS2quNiVxWj4WA2jcy0WOPs1RmE3LREC9nMcXVTJ+FueI8R5ZolEawwn4tlNn 3x2g== X-Received: by 10.180.8.130 with SMTP id r2mr2873381wia.28.1357733056639; Wed, 09 Jan 2013 04:04:16 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id e6sm3976259wiz.1.2013.01.09.04.04.15 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 09 Jan 2013 04:04:15 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> Date: Wed, 9 Jan 2013 13:04:18 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <351F6FEC-3D21-43BE-8D82-C8F3FC19C6C6@gigix.net> References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> To: SM X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQknJWBZd9pmX9a6bWtnB4J1W4PlG28ENafU9JPvPoLpNXUFA0jO5+SXU87i/ru4AardbvuZ Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "Bert Wijnen \(IETF\)" , cb.list6@gmail.com Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 12:04:18 -0000 Hi, On 8 Jan. 2013, at 11:34 , SM wrote: > Hi Terry, > At 22:03 07-01-2013, Terry Manderson wrote: >> However, before the WG starts to rework the document, I would first = like to >> canvass the LISP WG as to your opinions. >>=20 >> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >> for LISP? >=20 > The work item seems useful. >=20 >> 2) If so, what direction should the WG take this document so that the = LISP >> experiment is best served? >=20 > The problem is justifying the IP address space allocation and = explaining how it will be managed. >=20 > My guess is that the working group took an ORCHID approach (copy and = paste :-)). Not really, truth is that it was suggested to look at ORCHID, hence we = tried to provide the same elements (or equivalent) that the ORCHID = document provided. > I suggest dropping the idea of calling it a very large-scale = experiment. The unstated problem is about politics. I suggest taking a = look at draft-lear-lisp-nerd-09. It contains a good discussion of = operational models and the trade-offs. >=20 Thanks a lot, will do. ciao Luigi > Regards, > -sm=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From brian.e.carpenter@gmail.com Wed Jan 9 06:00:00 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7920621F85F7 for ; Wed, 9 Jan 2013 06:00:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.565 X-Spam-Level: X-Spam-Status: No, score=-101.565 tagged_above=-999 required=5 tests=[AWL=0.126, BAYES_00=-2.599, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LNEvQP1h7CU2 for ; Wed, 9 Jan 2013 06:00:00 -0800 (PST) Received: from mail-ee0-f43.google.com (mail-ee0-f43.google.com [74.125.83.43]) by ietfa.amsl.com (Postfix) with ESMTP id B7CF721F85BF for ; Wed, 9 Jan 2013 05:59:59 -0800 (PST) Received: by mail-ee0-f43.google.com with SMTP id c50so195279eek.2 for ; Wed, 09 Jan 2013 05:59:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:organization:user-agent :mime-version:to:cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=wLOq0+i+sF/BsG+4j1+ZR5hSE+w3mbarmiNSNPGKFkg=; b=kj4smsVmdB/IxTb7q5ShUUsekQ6NtKWsddvYv08b8nNmIYqKrih3IFsTipC0hXJ+Ar yRhbtIMFFFFUf09X/DI5Tc3SkxTWKSKsyFg30bdRLU+WkGBdFotiUnWanXDnAz6xGY+Y W5KEs79TN/dfdA4nCHryJePRXGoWvM8uNPihH6u/ej41/s8Q+5sDWqXYc/VEPYxDRz7C XnXT3/4wu/G4O7lay8iW3cLipz/hCWxkuSQE7a0p5aDbsLUzg9a/hc/DDw79ho/QYaw+ AfAW3VN3jbkCsppZK/5R2FtaoXkzsEFnPcYRdUc/OkNM1H8XLaYEs4X+PiWKOGPcqLha 1kjg== X-Received: by 10.14.203.2 with SMTP id e2mr181919403eeo.20.1357739998886; Wed, 09 Jan 2013 05:59:58 -0800 (PST) Received: from [192.168.1.65] (host-2-102-216-201.as13285.net. [2.102.216.201]) by mx.google.com with ESMTPS id b49sm141826996eem.16.2013.01.09.05.59.57 (version=SSLv3 cipher=OTHER); Wed, 09 Jan 2013 05:59:58 -0800 (PST) Message-ID: <50ED77E5.2020400@gmail.com> Date: Wed, 09 Jan 2013 14:00:05 +0000 From: Brian E Carpenter Organization: University of Auckland User-Agent: Thunderbird 2.0.0.6 (Windows/20070728) MIME-Version: 1.0 To: Luigi Iannone References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <351F6FEC-3D21-43BE-8D82-C8F3FC19C6C6@gigix.net> In-Reply-To: <351F6FEC-3D21-43BE-8D82-C8F3FC19C6C6@gigix.net> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: =?UTF-8?B?Um9nZXIgSsO4cmdlbnNlbg==?= , George Michaelson , Robert Elz , "George, Wes" , LISP mailing list list , cb.list6@gmail.com, "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 14:00:00 -0000 Hi, On 09/01/2013 12:04, Luigi Iannone wrote: > Hi, > > On 8 Jan. 2013, at 11:34 , SM wrote: ... >> I suggest dropping the idea of calling it a very large-scale experiment. The unstated problem is about politics. I suggest taking a look at draft-lear-lisp-nerd-09. It contains a good discussion of operational models and the trade-offs. However, it isn't (even) a LISP WG Experimental document. I think the interesting operational questions are those raised or implied by http://tools.ietf.org/html/draft-ietf-lisp-interworking-06#section-5 > Thanks a lot, will do. What I would like to see discussed in -eid-block is how the use of the proposed prefix interacts with the scaling properties and routing policies associated with Proxy ITRs. The above citation includes: 1. The Proxy-ITR's aggregate routes might be selectively announced, giving a coarse way to control the quantity of traffic attracted by that Proxy-ITR. For example, some of the routes being announced might be tagged with a BGP community and their scope of announcement limited by the routing policy of the provider. 2. The same address might be announced by multiple Proxy-ITRs in order to share the traffic using IP Anycast. The asymmetric nature of traffic flows through the Proxy-ITR means that operationally, deploying a set of Proxy-ITRs would be very similar to existing Anycasted services like DNS caches. Will having a reserved EID prefix change these "might bes"? Will it change the incentives for BGP ASes to do the right thing? As was said earlier, we have *bad* experience on this point with 2002::/16, where the evidence is that operators simply didn't do what the deployment model called for. Just to be clear, here is the paragraph from RFC 3056 that operators failed on: 3. A relay router MUST advertise a route to 2002::/16 into the native IPv6 exterior routing domain. It is a matter of routing policy how far this routing advertisement of 2002::/16 is propagated in the native IPv6 routing system. Since there will in general be multiple relay routers advertising it, network operators will require to filter it in a managed way. Incorrect policy in this area will lead to potential unreachability or to perverse traffic patterns. You could pretty much use that paragraph for LISP ITRs. Why will it work any better than it did for 6to4? To be clear - we aren't talking about operators of ITRs. We're talking about BGP speakers many hops away from the ITRs. Brian From jmh.direct@joelhalpern.com Wed Jan 9 06:55:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C450821F85D2 for ; Wed, 9 Jan 2013 06:55:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YMkeGRG5zCM0 for ; Wed, 9 Jan 2013 06:55:36 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 4F30021F85CB for ; Wed, 9 Jan 2013 06:55:36 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 810FD558A70 for ; Wed, 9 Jan 2013 06:55:30 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 62FA51C5B63; Wed, 9 Jan 2013 06:55:30 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [172.17.141.180] (207.47.24.2.static.nextweb.net [207.47.24.2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 102CF1C07B6; Wed, 9 Jan 2013 06:55:30 -0800 (PST) Message-ID: <50ED84E1.8070804@joelhalpern.com> Date: Wed, 09 Jan 2013 09:55:29 -0500 From: Joel Halpern Direct User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Luigi Iannone References: <94E13C8A-190A-44EB-81DF-D267CBD38250@gigix.net> <50ECB839.4080701@joelhalpern.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: =?ISO-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 14:55:36 -0000 As I understood it, if we say explicitly that allocation and policy will be dealt with in a separate document, folks thought that would fly. It might not. But if it won't, then there is no way we can do this quickly. Which brings us back to Terry's key question to the WG: Is this something iportant for us o produce now. If so, why? Yours, Joel On 1/9/2013 6:57 AM, Luigi Iannone wrote: > > On 9 Jan. 2013, at 01:22 , Joel M. Halpern wrote: > >> Commenting just on this one piece, the reason for suggesting separating the two pieces has two components, as I understand the situation. >> 1) There is a belief that it would be helpful to get the prefix soon. >> 2) working out, ad then clearly documen, the plan for LISP EID assignment / delegation still needs significant work, and is not likely to complete quickly. > > Hi Joel, > > don't we risk to have the first document blocked until the second is finished? > > Most concerns during LC were about "why to allocate a prefix if we do not know how to use it?". > > From my understanding even having the prefix today it will not be possible to use it until document 2 is out as well. > > What am I missing? > > Luigi > >> >> If these two observations are both accurate, then separating the problems seems the only path that meets the goals. If we do not need to get the prefix allocated quickly, then I would tend to strongly favor working out the rest of the system, delegation, allocation, and usage so that we know how all the parts work. >> >> Yours, >> Joel >> >> On 1/8/2013 5:22 AM, Luigi Iannone wrote: >>>> The Responsible AD and the LISP chairs have discussed the future of this >>>>> document. We believe that the future of this document could be best served >>>>> by splitting it in two (one that allocates/justifies the prefix, and one >>>>> that describes the LISP specific allocation mechanism) and also altering >>>>> text to address the concerns raised during the IETF LC. >>> May I dare to ask why? > From jnc@mercury.lcs.mit.edu Wed Jan 9 07:00:38 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C91F821F8630 for ; Wed, 9 Jan 2013 07:00:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rbVgj4Lwobnj for ; Wed, 9 Jan 2013 07:00:38 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by ietfa.amsl.com (Postfix) with ESMTP id 57E2D21F862E for ; Wed, 9 Jan 2013 07:00:38 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 25AD418C077; Wed, 9 Jan 2013 10:00:37 -0500 (EST) To: lisp@ietf.org Message-Id: <20130109150037.25AD418C077@mercury.lcs.mit.edu> Date: Wed, 9 Jan 2013 10:00:37 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] LISP security philosophy X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 15:00:38 -0000 > From: jnc@mercury.lcs.mit.edu (Noel Chiappa) > Hi, all, here's the note on a security 'philosophy' for LISP. > ... > for the WG to consider, to see if everyone is OK with these general > guidelines for security for LISP. So, I received an interesting/useful private comment from one person, but that was all. I take it then that everyone's happy with this? Original message here: http://www.ietf.org/mail-archive/web/lisp/current/msg03939.html if anyone wants to review it. Noel From rbonica@juniper.net Wed Jan 9 08:24:53 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DC3821F84BB for ; Wed, 9 Jan 2013 08:24:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.9 X-Spam-Level: X-Spam-Status: No, score=-102.9 tagged_above=-999 required=5 tests=[AWL=0.567, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0+i2Y6Zj3lb for ; Wed, 9 Jan 2013 08:24:51 -0800 (PST) Received: from exprod7og123.obsmtp.com (exprod7og123.obsmtp.com [64.18.2.24]) by ietfa.amsl.com (Postfix) with ESMTP id 120F421F8698 for ; Wed, 9 Jan 2013 08:24:50 -0800 (PST) Received: from P-EMHUB03-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob123.postini.com ([64.18.6.12]) with SMTP ID DSNKUO2Z0rNvOVhNjmMq90UAhVje9dO+C9YR@postini.com; Wed, 09 Jan 2013 08:24:51 PST Received: from P-CLDFE01-HQ.jnpr.net (172.24.192.59) by P-EMHUB03-HQ.jnpr.net (172.24.192.37) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 9 Jan 2013 08:22:18 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.59) with Microsoft SMTP Server id 14.1.355.2; Wed, 9 Jan 2013 08:22:17 -0800 Received: from ch1outboundpool.messaging.microsoft.com (216.32.181.183) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 9 Jan 2013 08:30:29 -0800 Received: from mail154-ch1-R.bigfish.com (10.43.68.230) by CH1EHSOBE013.bigfish.com (10.43.70.63) with Microsoft SMTP Server id 14.1.225.23; Wed, 9 Jan 2013 16:22:16 +0000 Received: from mail154-ch1 (localhost [127.0.0.1]) by mail154-ch1-R.bigfish.com (Postfix) with ESMTP id E3ADF4022B for ; Wed, 9 Jan 2013 16:22:16 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT003.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: 0 X-BigFish: PS0(zzzz1ee6h1de0h1202h1e76h1d1ah1d2ahzz8275dh18602ehz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h1155h) Received: from mail154-ch1 (localhost.localdomain [127.0.0.1]) by mail154-ch1 (MessageSwitch) id 1357748535271228_23537; Wed, 9 Jan 2013 16:22:15 +0000 (UTC) Received: from CH1EHSMHS040.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.242]) by mail154-ch1.bigfish.com (Postfix) with ESMTP id 3F2D8400061 for ; Wed, 9 Jan 2013 16:22:15 +0000 (UTC) Received: from BY2PRD0512HT003.namprd05.prod.outlook.com (157.56.238.5) by CH1EHSMHS040.bigfish.com (10.43.69.249) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 9 Jan 2013 16:22:13 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.240]) by BY2PRD0512HT003.namprd05.prod.outlook.com ([10.255.243.36]) with mapi id 14.16.0245.002; Wed, 9 Jan 2013 16:22:09 +0000 From: Ronald Bonica To: "lisp@ietf.org" Thread-Topic: draft-ietf-lisp-architecture: Demand Loading of Mappings Thread-Index: Ac3uhXh1DoKOOWwqR9CJ7CkipUCZCQ== Date: Wed, 9 Jan 2013 16:22:09 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 16:24:53 -0000 Hi Noel, In Section 6.1, you say: "Push as a mechanism is also fundamentally less desirable than pull, since = the control plane overhead consumed to load and maintain information about = unused destinations is entirely wasted. The only potential downside to the= pull option is the delay required for the demand-loading of information." Another downside of the pull option is that the XTR must ensure the freshne= ss of information that it pulls to itself. In order to ensure freshness, th= e XTR relies on LISP-specific protocol machinery (e.g., control information= piggybacked on user data). With that additional machinery comes additional= operational complexity and security considerations. -------------------------- Ron Bonica vcard: www.bonica.org/ron/ronbonica.vcf From rbonica@juniper.net Wed Jan 9 08:37:24 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAC9A21F8812 for ; Wed, 9 Jan 2013 08:37:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.947 X-Spam-Level: X-Spam-Status: No, score=-102.947 tagged_above=-999 required=5 tests=[AWL=0.520, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MW1TUulgdncI for ; Wed, 9 Jan 2013 08:37:12 -0800 (PST) Received: from exprod7og112.obsmtp.com (exprod7og112.obsmtp.com [64.18.2.177]) by ietfa.amsl.com (Postfix) with ESMTP id 37B2D21F880E for ; Wed, 9 Jan 2013 08:37:12 -0800 (PST) Received: from P-EMHUB03-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob112.postini.com ([64.18.6.12]) with SMTP ID DSNKUO2csmmzHhfZGY1jz6UN8lp4XVgzA8QV@postini.com; Wed, 09 Jan 2013 08:37:12 PST Received: from P-CLDFE02-HQ.jnpr.net (172.24.192.60) by P-EMHUB03-HQ.jnpr.net (172.24.192.37) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 9 Jan 2013 08:34:56 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.60) with Microsoft SMTP Server id 14.1.355.2; Wed, 9 Jan 2013 08:34:56 -0800 Received: from TX2EHSOBE001.bigfish.com (65.55.88.15) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 9 Jan 2013 08:43:07 -0800 Received: from mail120-tx2-R.bigfish.com (10.9.14.251) by TX2EHSOBE001.bigfish.com (10.9.40.21) with Microsoft SMTP Server id 14.1.225.23; Wed, 9 Jan 2013 16:34:55 +0000 Received: from mail120-tx2 (localhost [127.0.0.1]) by mail120-tx2-R.bigfish.com (Postfix) with ESMTP id 59DEA1A0218 for ; Wed, 9 Jan 2013 16:34:55 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT004.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: -24 X-BigFish: PS-24(zz9371I1521I542I1432Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz8275dh1033IL18602ehz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h1155h) Received: from mail120-tx2 (localhost.localdomain [127.0.0.1]) by mail120-tx2 (MessageSwitch) id 1357749292986824_28159; Wed, 9 Jan 2013 16:34:52 +0000 (UTC) Received: from TX2EHSMHS041.bigfish.com (unknown [10.9.14.251]) by mail120-tx2.bigfish.com (Postfix) with ESMTP id E19671C00EE for ; Wed, 9 Jan 2013 16:34:52 +0000 (UTC) Received: from BY2PRD0512HT004.namprd05.prod.outlook.com (157.56.238.5) by TX2EHSMHS041.bigfish.com (10.9.99.141) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 9 Jan 2013 16:34:50 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.240]) by BY2PRD0512HT004.namprd05.prod.outlook.com ([10.255.243.37]) with mapi id 14.16.0245.002; Wed, 9 Jan 2013 16:34:45 +0000 From: Ronald Bonica To: "lisp@ietf.org" Thread-Topic: draft-ietf-lisp-architecture: Demand Loading of Mappings Thread-Index: Ac3uhXh1DoKOOWwqR9CJ7CkipUCZCQAALHNQ Date: Wed, 9 Jan 2013 16:34:44 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> References: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 16:37:26 -0000 Noel, Having thought about my previous comment for another moment, what we really= have before us is an architectural trade-off.=20 In the push paradigm, "control plane overhead consumed to load and maintain= information about unused destinations is entirely wasted".=20 In the pull paradigm, "the XTR must ensure the freshness of information tha= t it pulls to itself. In order to ensure freshness, the XTR relies on LISP-= specific protocol machinery (e.g., control information piggybacked on user = data). With that additional machinery comes additional operational complexi= ty and security considerations." I wonder if this text could be crafted to reflect that architectural trade-= off? Ron > -----Original Message----- > From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf Of > Ronald Bonica > Sent: Wednesday, January 09, 2013 11:22 AM > To: lisp@ietf.org > Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of > Mappings >=20 > Hi Noel, >=20 > In Section 6.1, you say: >=20 > "Push as a mechanism is also fundamentally less desirable than pull, > since the control plane overhead consumed to load and maintain > information about unused destinations is entirely wasted. The only > potential downside to the pull option is the delay required for the > demand-loading of information." >=20 > Another downside of the pull option is that the XTR must ensure the > freshness of information that it pulls to itself. In order to ensure > freshness, the XTR relies on LISP-specific protocol machinery (e.g., > control information piggybacked on user data). With that additional > machinery comes additional operational complexity and security > considerations. >=20 >=20 > -------------------------- > Ron Bonica > vcard: www.bonica.org/ron/ronbonica.vcf >=20 >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From lear@cisco.com Wed Jan 9 08:40:41 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 344EB21F8833 for ; Wed, 9 Jan 2013 08:40:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rgyoNNEkmhc3 for ; Wed, 9 Jan 2013 08:40:40 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id 37F2421F8831 for ; Wed, 9 Jan 2013 08:40:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2482; q=dns/txt; s=iport; t=1357749640; x=1358959240; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=Fjqo+gMDlHQFcq/CuGKECcrAz0HdoPK3P0QWelAX9NM=; b=g0i7umm72LiPJQ64OWHqRQPHJ4QCK/9wa2SInm5FxQDd26TUfwagVZkC eI0OQ2tU96mXrFMqhbGTjBrhzYl/NBGuFryMnTjhYRlWfOiGtMr31yliA 3OID4uu8jx7mMr/PDj7S/54m/+rYlxHCN05qm/O6H7UAMu9djkvWbOLZv w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AiAIAAqd7VCQ/khM/2dsb2JhbABEg0eCcrchFnOCHgEBAQQBAQEgJiUKAQwECw4DAQMBAQECAgUWCAMCAgkDAgECARUfAwYIBg0BBQIBAQWIEAymPo9VgSKOZYETA5JZgzOQSYJ1 X-IronPort-AV: E=Sophos;i="4.84,438,1355097600"; d="scan'208";a="10982788" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-4.cisco.com with ESMTP; 09 Jan 2013 16:40:39 +0000 Received: from dhcp-10-55-94-70.cisco.com (dhcp-10-55-94-70.cisco.com [10.55.94.70]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id r09GebwT005528 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Jan 2013 16:40:38 GMT Message-ID: <50ED9D85.6050304@cisco.com> Date: Wed, 09 Jan 2013 17:40:37 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ronald Bonica References: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "lisp@ietf.org" Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 16:40:41 -0000 Ron, Before we circle in for a landing, I would suggest that we separate forms of state between operational and provisioned, and then what it means to maintain both in the context of "push" v. "pull" (terms I heartily dislike). Eliot On 1/9/13 5:34 PM, Ronald Bonica wrote: > Noel, > > Having thought about my previous comment for another moment, what we really have before us is an architectural trade-off. > > In the push paradigm, "control plane overhead consumed to load and maintain information about unused destinations is entirely wasted". > > In the pull paradigm, "the XTR must ensure the freshness of information that it pulls to itself. In order to ensure freshness, the XTR relies on LISP-specific protocol machinery (e.g., control information piggybacked on user data). With that additional machinery comes additional operational complexity and security considerations." > > I wonder if this text could be crafted to reflect that architectural trade-off? > > Ron > >> -----Original Message----- >> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf Of >> Ronald Bonica >> Sent: Wednesday, January 09, 2013 11:22 AM >> To: lisp@ietf.org >> Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of >> Mappings >> >> Hi Noel, >> >> In Section 6.1, you say: >> >> "Push as a mechanism is also fundamentally less desirable than pull, >> since the control plane overhead consumed to load and maintain >> information about unused destinations is entirely wasted. The only >> potential downside to the pull option is the delay required for the >> demand-loading of information." >> >> Another downside of the pull option is that the XTR must ensure the >> freshness of information that it pulls to itself. In order to ensure >> freshness, the XTR relies on LISP-specific protocol machinery (e.g., >> control information piggybacked on user data). With that additional >> machinery comes additional operational complexity and security >> considerations. >> >> >> -------------------------- >> Ron Bonica >> vcard: www.bonica.org/ron/ronbonica.vcf >> >> >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > > From rbonica@juniper.net Wed Jan 9 09:02:02 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8441721F844C for ; Wed, 9 Jan 2013 09:02:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.987 X-Spam-Level: X-Spam-Status: No, score=-102.987 tagged_above=-999 required=5 tests=[AWL=0.480, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a15Lw+NIPS6P for ; Wed, 9 Jan 2013 09:02:01 -0800 (PST) Received: from exprod7og122.obsmtp.com (exprod7og122.obsmtp.com [64.18.2.22]) by ietfa.amsl.com (Postfix) with ESMTP id 5072421F844A for ; Wed, 9 Jan 2013 09:02:01 -0800 (PST) Received: from P-EMHUB02-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob122.postini.com ([64.18.6.12]) with SMTP ID DSNKUO2iiJ1Xg26x6gbBqMQflKo9yUvetzKa@postini.com; Wed, 09 Jan 2013 09:02:01 PST Received: from P-CLDFE02-HQ.jnpr.net (172.24.192.60) by P-EMHUB02-HQ.jnpr.net (172.24.192.36) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 9 Jan 2013 08:57:53 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.60) with Microsoft SMTP Server id 14.1.355.2; Wed, 9 Jan 2013 08:57:52 -0800 Received: from co1outboundpool.messaging.microsoft.com (216.32.180.189) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 9 Jan 2013 09:06:04 -0800 Received: from mail7-co1-R.bigfish.com (10.243.78.212) by CO1EHSOBE007.bigfish.com (10.243.66.70) with Microsoft SMTP Server id 14.1.225.23; Wed, 9 Jan 2013 16:57:52 +0000 Received: from mail7-co1 (localhost [127.0.0.1]) by mail7-co1-R.bigfish.com (Postfix) with ESMTP id A6EBA80126 for ; Wed, 9 Jan 2013 16:57:52 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT002.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: -26 X-BigFish: PS-26(zzbb2dI98dI9371I1521I542I1432Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz8275dh1033IL18602ehz2dh2a8h668h839h93fhd25hf0ah1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h1155h) Received: from mail7-co1 (localhost.localdomain [127.0.0.1]) by mail7-co1 (MessageSwitch) id 1357750670775381_20619; Wed, 9 Jan 2013 16:57:50 +0000 (UTC) Received: from CO1EHSMHS003.bigfish.com (unknown [10.243.78.220]) by mail7-co1.bigfish.com (Postfix) with ESMTP id BB5EA18009F; Wed, 9 Jan 2013 16:57:50 +0000 (UTC) Received: from BY2PRD0512HT002.namprd05.prod.outlook.com (157.56.238.5) by CO1EHSMHS003.bigfish.com (10.243.66.13) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 9 Jan 2013 16:57:48 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.240]) by BY2PRD0512HT002.namprd05.prod.outlook.com ([10.255.243.35]) with mapi id 14.16.0245.002; Wed, 9 Jan 2013 16:57:43 +0000 From: Ronald Bonica To: Eliot Lear Thread-Topic: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings Thread-Index: AQHN7ogWuynbZtl2X0yTvzaTltFcP5hBNVvw Date: Wed, 9 Jan 2013 16:57:42 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E2B1EC@BY2PRD0512MB653.namprd05.prod.outlook.com> References: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> <50ED9D85.6050304@cisco.com> In-Reply-To: <50ED9D85.6050304@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%CISCO.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Cc: "lisp@ietf.org" Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 17:02:02 -0000 RWxpb3QsDQoNCkluIFNlY3Rpb24gNi4xLCBOb2VsIG5ldmVyIHVzZXMgdGhlIHdvcmQgInN0YXRl Ii4gSGUgdXNlcyB0aGUgbW9yZSBzcGVjaWZpYyB0ZXJtLCAibWFwcGluZ3MiLiBBcmUgeW91IHN1 Z2dlc3RpbmcgdGhhdCBoZSBzaG91bGQgYWRkIHNvbWUgY29udGV4dCBhcm91bmQgdGhhdCB3b3Jk Pw0KDQogICAgICAgICAgICAgICAgICAgICAgICAgIFJvbg0KDQoNCj4gLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCj4gRnJvbTogRWxpb3QgTGVhciBbbWFpbHRvOmxlYXJAY2lzY28uY29tXQ0K PiBTZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMDksIDIwMTMgMTE6NDEgQU0NCj4gVG86IFJvbmFs ZCBCb25pY2ENCj4gQ2M6IGxpc3BAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtsaXNwXSBkcmFm dC1pZXRmLWxpc3AtYXJjaGl0ZWN0dXJlOiBEZW1hbmQgTG9hZGluZyBvZg0KPiBNYXBwaW5ncw0K PiANCj4gUm9uLA0KPiANCj4gQmVmb3JlIHdlIGNpcmNsZSBpbiBmb3IgYSBsYW5kaW5nLCBJIHdv dWxkIHN1Z2dlc3QgdGhhdCB3ZSBzZXBhcmF0ZQ0KPiBmb3JtcyBvZiBzdGF0ZSBiZXR3ZWVuIG9w ZXJhdGlvbmFsIGFuZCBwcm92aXNpb25lZCwgYW5kIHRoZW4gd2hhdCBpdA0KPiBtZWFucyB0byBt YWludGFpbiBib3RoIGluIHRoZSBjb250ZXh0IG9mICJwdXNoIiB2LiAicHVsbCIgKHRlcm1zIEkN Cj4gaGVhcnRpbHkgZGlzbGlrZSkuDQo+IA0KPiBFbGlvdA0KPiANCj4gT24gMS85LzEzIDU6MzQg UE0sIFJvbmFsZCBCb25pY2Egd3JvdGU6DQo+ID4gTm9lbCwNCj4gPg0KPiA+IEhhdmluZyB0aG91 Z2h0IGFib3V0IG15IHByZXZpb3VzIGNvbW1lbnQgZm9yIGFub3RoZXIgbW9tZW50LCB3aGF0IHdl DQo+IHJlYWxseSBoYXZlIGJlZm9yZSB1cyBpcyBhbiBhcmNoaXRlY3R1cmFsIHRyYWRlLW9mZi4N Cj4gPg0KPiA+IEluIHRoZSBwdXNoIHBhcmFkaWdtLCAiY29udHJvbCBwbGFuZSBvdmVyaGVhZCBj b25zdW1lZCB0byBsb2FkIGFuZA0KPiBtYWludGFpbiBpbmZvcm1hdGlvbiBhYm91dCB1bnVzZWQg ZGVzdGluYXRpb25zIGlzIGVudGlyZWx5IHdhc3RlZCIuDQo+ID4NCj4gPiBJbiB0aGUgcHVsbCBw YXJhZGlnbSwgInRoZSBYVFIgbXVzdCBlbnN1cmUgdGhlIGZyZXNobmVzcyBvZg0KPiBpbmZvcm1h dGlvbiB0aGF0IGl0IHB1bGxzIHRvIGl0c2VsZi4gSW4gb3JkZXIgdG8gZW5zdXJlIGZyZXNobmVz cywgdGhlDQo+IFhUUiByZWxpZXMgb24gTElTUC1zcGVjaWZpYyBwcm90b2NvbCBtYWNoaW5lcnkg KGUuZy4sIGNvbnRyb2wNCj4gaW5mb3JtYXRpb24gcGlnZ3liYWNrZWQgb24gdXNlciBkYXRhKS4g V2l0aCB0aGF0IGFkZGl0aW9uYWwgbWFjaGluZXJ5DQo+IGNvbWVzIGFkZGl0aW9uYWwgb3BlcmF0 aW9uYWwgY29tcGxleGl0eSBhbmQgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMuIg0KPiA+DQo+ID4g SSB3b25kZXIgaWYgdGhpcyB0ZXh0IGNvdWxkIGJlIGNyYWZ0ZWQgdG8gcmVmbGVjdCB0aGF0IGFy Y2hpdGVjdHVyYWwNCj4gdHJhZGUtb2ZmPw0KPiA+DQo+ID4gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgUm9uDQo+ID4NCj4gPj4gLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS0NCj4gPj4gRnJvbTogbGlzcC1ib3VuY2VzQGlldGYub3JnIFttYWlsdG86bGlz cC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYNCj4gPj4gT2YgUm9uYWxkIEJvbmljYQ0KPiA+ PiBTZW50OiBXZWRuZXNkYXksIEphbnVhcnkgMDksIDIwMTMgMTE6MjIgQU0NCj4gPj4gVG86IGxp c3BAaWV0Zi5vcmcNCj4gPj4gU3ViamVjdDogW2xpc3BdIGRyYWZ0LWlldGYtbGlzcC1hcmNoaXRl Y3R1cmU6IERlbWFuZCBMb2FkaW5nIG9mDQo+ID4+IE1hcHBpbmdzDQo+ID4+DQo+ID4+IEhpIE5v ZWwsDQo+ID4+DQo+ID4+IEluIFNlY3Rpb24gNi4xLCB5b3Ugc2F5Og0KPiA+Pg0KPiA+PiAiUHVz aCBhcyBhIG1lY2hhbmlzbSBpcyBhbHNvIGZ1bmRhbWVudGFsbHkgbGVzcyBkZXNpcmFibGUgdGhh biBwdWxsLA0KPiA+PiBzaW5jZSB0aGUgY29udHJvbCBwbGFuZSBvdmVyaGVhZCBjb25zdW1lZCB0 byBsb2FkIGFuZCBtYWludGFpbg0KPiA+PiBpbmZvcm1hdGlvbiBhYm91dCB1bnVzZWQgZGVzdGlu YXRpb25zIGlzIGVudGlyZWx5IHdhc3RlZC4gIFRoZSBvbmx5DQo+ID4+IHBvdGVudGlhbCBkb3du c2lkZSB0byB0aGUgcHVsbCBvcHRpb24gaXMgdGhlIGRlbGF5IHJlcXVpcmVkIGZvciB0aGUNCj4g Pj4gZGVtYW5kLWxvYWRpbmcgb2YgaW5mb3JtYXRpb24uIg0KPiA+Pg0KPiA+PiBBbm90aGVyIGRv d25zaWRlIG9mIHRoZSBwdWxsIG9wdGlvbiBpcyB0aGF0IHRoZSBYVFIgbXVzdCBlbnN1cmUgdGhl DQo+ID4+IGZyZXNobmVzcyBvZiBpbmZvcm1hdGlvbiB0aGF0IGl0IHB1bGxzIHRvIGl0c2VsZi4g SW4gb3JkZXIgdG8gZW5zdXJlDQo+ID4+IGZyZXNobmVzcywgdGhlIFhUUiByZWxpZXMgb24gTElT UC1zcGVjaWZpYyBwcm90b2NvbCBtYWNoaW5lcnkgKGUuZy4sDQo+ID4+IGNvbnRyb2wgaW5mb3Jt YXRpb24gcGlnZ3liYWNrZWQgb24gdXNlciBkYXRhKS4gV2l0aCB0aGF0IGFkZGl0aW9uYWwNCj4g Pj4gbWFjaGluZXJ5IGNvbWVzIGFkZGl0aW9uYWwgb3BlcmF0aW9uYWwgY29tcGxleGl0eSBhbmQg c2VjdXJpdHkNCj4gPj4gY29uc2lkZXJhdGlvbnMuDQo+ID4+DQo+ID4+DQo+ID4+IC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4+IFJvbiBCb25pY2ENCj4gPj4gdmNhcmQ6ICAgICAgIHd3 dy5ib25pY2Eub3JnL3Jvbi9yb25ib25pY2EudmNmDQo+ID4+DQo+ID4+DQo+ID4+DQo+ID4+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4+IGxpc3Ag bWFpbGluZyBsaXN0DQo+ID4+IGxpc3BAaWV0Zi5vcmcNCj4gPj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9saXNwDQo+ID4NCj4gPiBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IGxpc3AgbWFpbGluZyBsaXN0DQo+ID4gbGlz cEBpZXRmLm9yZw0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vbGlz cA0KPiA+DQo+ID4NCj4gDQoNCg== From lear@cisco.com Wed Jan 9 09:03:17 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B19021F85FC for ; Wed, 9 Jan 2013 09:03:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bRECsj9P+3kh for ; Wed, 9 Jan 2013 09:03:10 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 30C2121F858E for ; Wed, 9 Jan 2013 09:03:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3232; q=dns/txt; s=iport; t=1357750990; x=1358960590; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=yBvsoNXa0XcQ54x+JRHVTsXpuGurcj+WHt22AAZjcEE=; b=NpiRAZrNp83fREO5hWgS/VPC73FTaidxznJUk4tfwMLmkZAjaAr1bo9Z FV6Bu9wzObWDURwkr/3M9IkNqeRC2xNRV7351XSrZyXZaMWeQ6r9nRPAV 74V0ljo+d491ElcB+aC9iDqNf7Ixf1jpjRPNaGRmAdTeJQ642DLMOikYp c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AiAIAOmh7VCQ/khN/2dsb2JhbABEg0eCcrchFnOCHgEBAQQBAQEgJiUKAQwECw4DAQMBAQECAgUWCAMCAgkDAgECARUfAwYIBg0BBQIBAQWIEAymRo9PgSKOZYETA5JZgzOQSYJ1 X-IronPort-AV: E=Sophos;i="4.84,439,1355097600"; d="scan'208";a="79634384" Received: from ams-core-4.cisco.com ([144.254.72.77]) by ams-iport-2.cisco.com with ESMTP; 09 Jan 2013 17:03:08 +0000 Received: from dhcp-10-55-94-70.cisco.com (dhcp-10-55-94-70.cisco.com [10.55.94.70]) by ams-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r09H38Jn014046 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 9 Jan 2013 17:03:08 GMT Message-ID: <50EDA2CC.3070407@cisco.com> Date: Wed, 09 Jan 2013 18:03:08 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: Ronald Bonica References: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> <50ED9D85.6050304@cisco.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E2B1EC@BY2PRD0512MB653.namprd05.prod.outlook.com> In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E2B1EC@BY2PRD0512MB653.namprd05.prod.outlook.com> X-Enigmail-Version: 1.4.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "lisp@ietf.org" Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 17:03:17 -0000 Ron, This is what I did with NERD, and aligns very much with your description. Eliot On 1/9/13 5:57 PM, Ronald Bonica wrote: > Eliot, > > In Section 6.1, Noel never uses the word "state". He uses the more specific term, "mappings". Are you suggesting that he should add some context around that word? > > Ron > > >> -----Original Message----- >> From: Eliot Lear [mailto:lear@cisco.com] >> Sent: Wednesday, January 09, 2013 11:41 AM >> To: Ronald Bonica >> Cc: lisp@ietf.org >> Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of >> Mappings >> >> Ron, >> >> Before we circle in for a landing, I would suggest that we separate >> forms of state between operational and provisioned, and then what it >> means to maintain both in the context of "push" v. "pull" (terms I >> heartily dislike). >> >> Eliot >> >> On 1/9/13 5:34 PM, Ronald Bonica wrote: >>> Noel, >>> >>> Having thought about my previous comment for another moment, what we >> really have before us is an architectural trade-off. >>> In the push paradigm, "control plane overhead consumed to load and >> maintain information about unused destinations is entirely wasted". >>> In the pull paradigm, "the XTR must ensure the freshness of >> information that it pulls to itself. In order to ensure freshness, the >> XTR relies on LISP-specific protocol machinery (e.g., control >> information piggybacked on user data). With that additional machinery >> comes additional operational complexity and security considerations." >>> I wonder if this text could be crafted to reflect that architectural >> trade-off? >>> Ron >>> >>>> -----Original Message----- >>>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf >>>> Of Ronald Bonica >>>> Sent: Wednesday, January 09, 2013 11:22 AM >>>> To: lisp@ietf.org >>>> Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of >>>> Mappings >>>> >>>> Hi Noel, >>>> >>>> In Section 6.1, you say: >>>> >>>> "Push as a mechanism is also fundamentally less desirable than pull, >>>> since the control plane overhead consumed to load and maintain >>>> information about unused destinations is entirely wasted. The only >>>> potential downside to the pull option is the delay required for the >>>> demand-loading of information." >>>> >>>> Another downside of the pull option is that the XTR must ensure the >>>> freshness of information that it pulls to itself. In order to ensure >>>> freshness, the XTR relies on LISP-specific protocol machinery (e.g., >>>> control information piggybacked on user data). With that additional >>>> machinery comes additional operational complexity and security >>>> considerations. >>>> >>>> >>>> -------------------------- >>>> Ron Bonica >>>> vcard: www.bonica.org/ron/ronbonica.vcf >>>> >>>> >>>> >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>> >>> From heinerhummel@aol.com Wed Jan 9 09:38:55 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42CEF21F84F3 for ; Wed, 9 Jan 2013 09:38:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dCnhOvE-0gyN for ; Wed, 9 Jan 2013 09:38:54 -0800 (PST) Received: from imr-db02.mx.aol.com (imr-db02.mx.aol.com [205.188.91.96]) by ietfa.amsl.com (Postfix) with ESMTP id 094E321F84E4 for ; Wed, 9 Jan 2013 09:38:54 -0800 (PST) Received: from mtaomg-db03.r1000.mx.aol.com (mtaomg-db03.r1000.mx.aol.com [172.29.51.201]) by imr-db02.mx.aol.com (Outbound Mail Relay) with ESMTP id 922E01C0001DD; Wed, 9 Jan 2013 12:38:53 -0500 (EST) Received: from core-dqb004c.r1000.mail.aol.com (core-dqb004.r1000.mail.aol.com [172.29.212.205]) by mtaomg-db03.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 5D03FE000081; Wed, 9 Jan 2013 12:38:53 -0500 (EST) References: <2CF4CB03E2AA464BA0982EC92A02CE2501E2A0C4@BY2PRD0512MB653.namprd05.prod.outlook.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> To: rbonica@juniper.net, lisp@ietf.org In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E2B141@BY2PRD0512MB653.namprd05.prod.outlook.com> X-MB-Message-Source: WebUI MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFBCA7539B2E34_3F0_A952F_webmail-m165.sysops.aol.com" X-Mailer: Webmail 37276-STANDARD Received: from 178.26.192.122 by webmail-m165.sysops.aol.com (64.12.78.180) with HTTP (WebMailUI); Wed, 09 Jan 2013 12:38:53 -0500 Message-Id: <8CFBCA7538F474F-3F0-30968@webmail-m165.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Wed, 9 Jan 2013 12:38:53 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1357753133; bh=Hpqc5uv//CzdMCeO0e1l8FSVLGAxoUfcPCv2PZOjF/s=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=B6eySvN57b8KCSCKpetWDlUjQm2VIuz7ALSivpj0GxGLzHVIVgE+t/mANuYUxmBrJ pMrR4I6lIGIzcRsbROzENXghUXR/MIEWb1aqEQmaJ/xAjq9u17zgYdWAEhugXWbmk9 xdKlVoewahEDRaSoWNFaU+vx16YpbMmmquugSQ14= X-AOL-SCOLL-SCORE: 0:2:457745600:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d33c950edab2d3880 Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 17:38:55 -0000 This is a multi-part message in MIME format. ----------MB_8CFBCA7539B2E34_3F0_A952F_webmail-m165.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Pull (LISP) versus Push (legacy IP). This discussion confirms that LISP is not and has never been a loc-id-spli= t protocol. Instead it is only a PULL variant of the existing state-of-art = protocol. Such behavior is called camouflage, right ? Heiner -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Ronald Bonica An: lisp Verschickt: Mi, 9 Jan 2013 5:37 pm Betreff: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mapping= s Noel, Having thought about my previous comment for another moment, what we really= have=20 before us is an architectural trade-off.=20 In the push paradigm, "control plane overhead consumed to load and maintain= =20 information about unused destinations is entirely wasted".=20 In the pull paradigm, "the XTR must ensure the freshness of information tha= t it=20 pulls to itself. In order to ensure freshness, the XTR relies on LISP-speci= fic=20 protocol machinery (e.g., control information piggybacked on user data). Wi= th=20 that additional machinery comes additional operational complexity and secur= ity=20 considerations." I wonder if this text could be crafted to reflect that architectural trade-= off? Ron > -----Original Message----- > From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf Of > Ronald Bonica > Sent: Wednesday, January 09, 2013 11:22 AM > To: lisp@ietf.org > Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of > Mappings >=20 > Hi Noel, >=20 > In Section 6.1, you say: >=20 > "Push as a mechanism is also fundamentally less desirable than pull, > since the control plane overhead consumed to load and maintain > information about unused destinations is entirely wasted. The only > potential downside to the pull option is the delay required for the > demand-loading of information." >=20 > Another downside of the pull option is that the XTR must ensure the > freshness of information that it pulls to itself. In order to ensure > freshness, the XTR relies on LISP-specific protocol machinery (e.g., > control information piggybacked on user data). With that additional > machinery comes additional operational complexity and security > considerations. >=20 >=20 > -------------------------- > Ron Bonica > vcard: www.bonica.org/ron/ronbonica.vcf >=20 >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 ----------MB_8CFBCA7539B2E34_3F0_A952F_webmail-m165.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8" Pull (LISP) versus Push (legacy IP).
This discussion confirms t= hat LISP is not  and has never been a loc-id-split protocol. Instead it is on= ly a PULL variant of the existing state-of-art protocol.
Such behavior is called ca= mouflage, right ?

Heiner



Noel,

Having thought about my previous comment for another moment, what we really=
 have=20
before us is an architectural trade-off.=20

In the push paradigm, "control plane overhead consumed to load and maintain=
=20
information about unused destinations is entirely wasted".=20

In the pull paradigm, "the XTR must ensure the freshness of information tha=
t it=20
pulls to itself. In order to ensure freshness, the XTR relies on LISP-speci=
fic=20
protocol machinery (e.g., control information piggybacked on user data). Wi=
th=20
that additional machinery comes additional operational complexity and secur=
ity=20
considerations."

I wonder if this text could be crafted to reflect that architectural trade-=
off?

                                                Ron

> -----Original Message-----
> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org<=
/a>] On Behalf Of
> Ronald Bonica
> Sent: Wednesday, January 09, 2013 11:22 AM
> To: lisp@ietf.org
> Subject: [lisp] draft-ietf-lisp-architecture: Demand Loading of
> Mappings
>=20
> Hi Noel,
>=20
> In Section 6.1, you say:
>=20
> "Push as a mechanism is also fundamentally less desirable than pull,
> since the control plane overhead consumed to load and maintain
> information about unused destinations is entirely wasted.  The only
> potential downside to the pull option is the delay required for the
> demand-loading of information."
>=20
> Another downside of the pull option is that the XTR must ensure the
> freshness of information that it pulls to itself. In order to ensure
> freshness, the XTR relies on LISP-specific protocol machinery (e.g.,
> control information piggybacked on user data). With that additional
> machinery comes additional operational complexity and security
> considerations.
>=20
>=20
> --------------------------
> Ron Bonica
> vcard:       www.bonica.org/ron/ronbonica.vcf
>=20
>=20
>=20
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp


_______________________________________________
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
----------MB_8CFBCA7539B2E34_3F0_A952F_webmail-m165.sysops.aol.com-- From agmalis@gmail.com Wed Jan 9 05:50:14 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B58521F86CB; Wed, 9 Jan 2013 05:50:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.043 X-Spam-Level: X-Spam-Status: No, score=-3.043 tagged_above=-999 required=5 tests=[AWL=0.555, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1nvwJUWDzAMH; Wed, 9 Jan 2013 05:50:12 -0800 (PST) Received: from mail-qa0-f52.google.com (mail-qa0-f52.google.com [209.85.216.52]) by ietfa.amsl.com (Postfix) with ESMTP id 6FB0F21F86C3; Wed, 9 Jan 2013 05:50:12 -0800 (PST) Received: by mail-qa0-f52.google.com with SMTP id d13so660823qak.18 for ; Wed, 09 Jan 2013 05:50:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=8YOIAGhsmR2ImyfDvchq20ZEGXne6neK7SGtnRM0oGs=; b=jXI3Ic06nIAAbmBarTadYMtuLPeBipKA1LxYDbZteZjPu5NKQ9ZLH3v8JwIoZX7z8c A88TY9up7r3fJpzkeO1KmMxSQD+uZ+qRdgUFHlR5MooLObkloPYpcTapvq0f6b5jmOvG p2HHI9axxjK+eQyC6heqcf52VVoFvSXytPOAkAozIA3ChHZ9hSqXS4AVwImp9lINcilZ xFdWxbEwOWfFrNyl8TV9S6jcBFnczbNW+VP08dNYNvoShaZQXotbQlyAGfGrzLIPFSl6 KNs0As+6aLujjk4tKP3LjGYlTWpHCdia5HG1b9uFz2V4XZMuFgTmtDxkOlLwI/y6u7D/ dumQ== Received: by 10.49.118.162 with SMTP id kn2mr59135121qeb.65.1357739411948; Wed, 09 Jan 2013 05:50:11 -0800 (PST) MIME-Version: 1.0 Received: by 10.229.78.72 with HTTP; Wed, 9 Jan 2013 05:49:51 -0800 (PST) In-Reply-To: References: <0A534525-59E1-418E-826B-177655767B17@gmail.com> From: "Andrew G. Malis" Date: Wed, 9 Jan 2013 08:49:51 -0500 Message-ID: To: Jon Steen Content-Type: multipart/alternative; boundary=047d7b6d98c658c5ae04d2db5797 X-Mailman-Approved-At: Wed, 09 Jan 2013 09:39:40 -0800 Cc: Softwires@ietf.org, LISP mailing list list , draft-xu-softwire-ip-in-udp@tools.ietf.org Subject: Re: [lisp] [Softwires] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 13:50:14 -0000 --047d7b6d98c658c5ae04d2db5797 Content-Type: text/plain; charset=ISO-8859-1 Jon, My intent wasn't to show support for the draft, just to point out the relationship to the MPLS draft for those of you on the softwires list that may not have been following it. It's really up to the softwires WG to determine if it supports taking on this draft as a work item. Also, a comment to the draft-xu authors is that both of the draft-xu's should probably cross-reference each other (they don't currently). Cheers, Andy On Wed, Jan 9, 2013 at 12:20 AM, Jon Steen wrote: > Andy, > > I would have to agree with Damien in some sense, what other currently > available standards are available to fulfill this need without adding the > extra overhead. Overhead only adds to the proceessing time it takes to > relay the data. > > Jon Steen > > > > On Mon, Jan 7, 2013 at 11:09 AM, Andrew G. Malis wrote: > >> For the benefit of those of you that don't follow the MPLS WG list, this >> draft is closely related to >> http://tools.ietf.org/html/draft-xu-mpls-in-udp-06 , which is the >> subject of a lively discussion there. >> >> Cheers, >> Andy >> >> >> On Sun, Dec 30, 2012 at 3:45 PM, Damien Saucez wrote: >> >>> Hello, >>> >>> Interesting document, have you ever though of LISP to do that? >>> >>> Regards, >>> >>> Damien Saucez >>> _______________________________________________ >>> Softwires mailing list >>> Softwires@ietf.org >>> https://www.ietf.org/mailman/listinfo/softwires >>> >> >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >> >> > --047d7b6d98c658c5ae04d2db5797 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
Jon,

My intent wasn't to show suppor= t for the draft, just to point out the relationship to the MPLS draft for t= hose of you on the softwires list that may not have been following it. It&#= 39;s really up to the softwires WG to determine if it supports taking on th= is draft as a work item.

Also, a comment to the draft-xu authors is that both of the draft-xu= 9;s should probably cross-reference each other (they don't currently).<= br>
Cheers,
Andy


On Wed, Jan 9, 2013 at 12:20 AM, Jon Steen <steenjj@gmail.com> wrote:
Andy,
=A0
I would have to agree with Damien in som= e sense, what other currently available standards are available to fulfill = this need without adding the extra overhead.=A0 Overhead only adds to the p= roceessing time it takes to relay the data.
=A0
Jon Steen


=A0
On Mon, Jan 7, 2013 at 11:09 AM, Andrew G. M= alis <agmalis@gmail.com> wrote:
F= or the benefit of those of you that don't follow the MPLS WG list, this= draft is closely related to http://tools.ietf.org/html/draft-xu-mpls= -in-udp-06 , which is the subject of a lively discussion there.

Cheers,
Andy


On Sun, Dec 30, 2012 at 3:45 PM, Damien Saucez <= span dir=3D"ltr"><damien.saucez@gmail.com> wrote:
Hello,

Interesting document, have you ever though of LISP to do that?

Regards,

Damien Saucez
_______________________________________________
Softwires mailing list
Softwires@ietf.org<= /a>
https://www.ietf.org/mailman/listinfo/softwires


_______________________________________________
lisp mailing list
lisp@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/lisp



--047d7b6d98c658c5ae04d2db5797-- From jnc@mercury.lcs.mit.edu Wed Jan 9 11:05:49 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49B3521F85BC for ; Wed, 9 Jan 2013 11:05:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_44=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n6WWT0lTvObe for ; Wed, 9 Jan 2013 11:05:48 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by ietfa.amsl.com (Postfix) with ESMTP id AF87121F8589 for ; Wed, 9 Jan 2013 11:05:48 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 73F1418C0D0; Wed, 9 Jan 2013 14:05:47 -0500 (EST) To: lisp@ietf.org Message-Id: <20130109190547.73F1418C0D0@mercury.lcs.mit.edu> Date: Wed, 9 Jan 2013 14:05:47 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 19:05:49 -0000 > From: heinerhummel@aol.com > Pull (LISP) versus Push (legacy IP). This discussion confirms that LISP > is not and has never been a loc-id-split protocol. So... LISP+NERD _would_ be a "loc-id-split protocol"? {Sorry, all, couldn't resist... :-} Noel From gih@apnic.net Wed Jan 9 12:57:08 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 89AF821F863A for ; Wed, 9 Jan 2013 12:57:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NeE6tyunnD5C for ; Wed, 9 Jan 2013 12:57:07 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by ietfa.amsl.com (Postfix) with ESMTP id 28CB621F862E for ; Wed, 9 Jan 2013 12:57:07 -0800 (PST) Received: from 2001-44b8-1121-1a00-a81d-208d-a8ba-234b.static.ipv6.internode.on.net (2001-44b8-1121-1a00-a81d-208d-a8ba-234b.static.ipv6.internode.on.net [IPv6:2001:44b8:1121:1a00:a81d:208d:a8ba:234b]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id EB156B68C0; Thu, 10 Jan 2013 06:57:04 +1000 (EST) Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Content-Type: text/plain; charset=us-ascii From: Geoff Huston In-Reply-To: <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> Date: Thu, 10 Jan 2013 07:57:01 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> To: Luigi Iannone X-Mailer: Apple Mail (2.1499) Cc: LISP mailing list list Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 20:57:08 -0000 On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: > Hi Geoff, >=20 > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >=20 >>=20 >> On 08/01/2013, at 9:34 PM, SM wrote: >>=20 >>> Hi Terry, >>> At 22:03 07-01-2013, Terry Manderson wrote: >>>> However, before the WG starts to rework the document, I would first = like to >>>> canvass the LISP WG as to your opinions. >>>>=20 >>>> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >>>> for LISP? >>>=20 >>> The work item seems useful. >>>=20 >>>> 2) If so, what direction should the WG take this document so that = the LISP >>>> experiment is best served? >>>=20 >>> The problem is justifying the IP address space allocation and = explaining how it will be managed. >>>=20 >>> My guess is that the working group took an ORCHID approach (copy and = paste :-)). I suggest dropping the idea of calling it a very = large-scale experiment. The unstated problem is about politics. I = suggest taking a look at draft-lear-lisp-nerd-09. It contains a good = discussion of operational models and the trade-offs. >>>=20 >>=20 >> I was on the IAB at the time that ORCHID was being considered - the = issue there was to find a balance between enough bits for acceptable = crypto and basic conservatism in the absolute size of the request - at = the time a /28 appeared to be a suitable compromise considering that = this was an experiment. >>=20 >> Given that this is an experiment and that the transition from = experiment to widespread deployment may well entail renumbering (as was = the case with the 6bone) then one approach may well be to use a modest = prefix that has a limited capacity that would force renumbering in the = shift from experiment to widespread adoption, if such occurs in the = future. >>=20 >=20 > I may be mistake but I do not see the renumbering need in the LISP = case. It all depends on the philosophy behind experimental allocations. If we = were to assume that each and every single experiment in IPv6, including = all forms of cryptographically generated addresses, all forms of = transitional mechanisms, all forms of address plans and all forms of = routing experiments were each to request an experimental allocation that = was "once and forever" and assumed at the outset that the experiment = would result in comprehensive deployment over a network many many times = larger than today's then I hope you can appreciate that we'd not have = enough space to accommodate each and every experiment's requirements in = the IPv6 space. So the conventional philosophy behind experimental allocations is to use = enough space to allow the experiment to operate and to gain experience = with the technology. If this proves to be useful and taken up by the = industry (and of course this process involves is by no means an assured = outcome - quite the opposite in fact) then its again conventional to = look at how to support the technology within the existing token = distribution framework, or whether its appropriate to make changes to = the token distribution framework. Now obviously some proponents of every = experiment see universal adoption of their particular technology as a = given, including some LISP proponents no doubt. So of course we see many = (most?) experiment proponents proudly proclaim that they are uniquely = different and obviously their particular experiment will naturally = result in universal deployment, so why not assume that happy outcome at = the outset of the experiment and allocate resources at a scale = commensurate with their no doubt certain universal deployment in the = not-so-distant future? But wishing it, no matter how enthusiastic you = may be personally, does not make it so. A prudent approach in a space = that has seen, and is likely to see, many experiments proposed, is = generally to provision resources to conduct the experiment at the scale = of the experiment and if the experiment leads to someplace positive then = look at what is required if the technology is to head to larger levels = of deployment. =20 > The prefix request was written in such a way to reduce renumbering, = rather making the prefix "bigger" so to accommodate the growth. This = would also be an easy change, rather then adding different prefix blocks = just change the length of the existing prefix. I am continually confused by the assumptions behind this assertion, and = I've heard this assumption a number of times in the course of the = consideration of this draft. If LISP is so fragile that it requires a = very particular deployed address structure in order to operate, then = frankly we could do precisely the same in BGP and achieve better results = because of avoidance of tunnelling. I find it somewhat strange to see = this adamant view that LISP absolutely requires a uniquely structured = address plan in order to achieve any useful outcome in terms of scalable = routing, at a cost of increased latency and exposure to vagaries of = tunnel behaviour, while at the same time ignoring the simple observation = that if one were to do the same surgery on the address plan in BGP the = outcomes would likely to be just as good if not better, without the = negative factors of map-resolution-related latency and tunnelling. >=20 > I think this is something to keep in the future document(s). And I strongly disagree with your opinion. If we did this for every = experiment that we encounter that proposes some unique address plan that = is intended to improve security, routing scaleability, = auto-configuration, pre-provisioning, network virtualization, software = programability, etc etc, then once more we are going to find ourselves = contemplating address exhaustion in IPv6 far sooner than anyone would've = rationally anticipated. Geoff From rogerj@gmail.com Wed Jan 9 13:02:25 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 664EE1F0CF6 for ; Wed, 9 Jan 2013 13:02:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YntOHso8oPAP for ; Wed, 9 Jan 2013 13:02:24 -0800 (PST) Received: from mail-wg0-f47.google.com (mail-wg0-f47.google.com [74.125.82.47]) by ietfa.amsl.com (Postfix) with ESMTP id 92E6A1F0C6A for ; Wed, 9 Jan 2013 13:02:22 -0800 (PST) Received: by mail-wg0-f47.google.com with SMTP id dq11so1273525wgb.14 for ; Wed, 09 Jan 2013 13:02:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; bh=+9yy+I2LrzKi5M8D2mhJMvwQq+iP77ngcUkPdXlJbGQ=; b=XAlF9Ms6aZIF7B5NqRSiRovBoTmEqRGbG4Zcz2GyCHGFwMkbzoeoEGwSGPViq/64hM bBpZhBOIuGOaEEyoR983qrF0jjkMVPMPfAwO+wfWYDSjZGSOLXRK+IWlc5k2J3St1F2D B1O4yCQ9wDYY+nTUMkQKjiLFVt1BxOIovsdTNF2jUWE12QlqA11g9w4RoB6XQ5enZwfp cQctQF7HOPfTvppLLAcW8Xzza26/lFFvp6ppIYn9R5koT7aWqWHjrqxtcNw4beUUXpX0 Fk2fbo6t/B3m4m+RzQH2QIJD7F3zcaJntTsXdtq5C5EmWhfyFZcvFfABM2tNFqedy58i yHsA== MIME-Version: 1.0 X-Received: by 10.180.86.36 with SMTP id m4mr5551424wiz.5.1357765341635; Wed, 09 Jan 2013 13:02:21 -0800 (PST) Received: by 10.217.44.74 with HTTP; Wed, 9 Jan 2013 13:02:21 -0800 (PST) In-Reply-To: References: Date: Wed, 9 Jan 2013 22:02:21 +0100 Message-ID: From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Terry Manderson , LISP mailing list list Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: George Michaelson , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 21:02:25 -0000 I'll remove myself from the cc since I'm on lisp@ :-) I have tried to write down one way to get this done in a way that handle most aspect. First a summary since this is a very long email. The size of the address blocks are a suggestion from my side. * we reserve a /12 * LISP EID block are marked as EXPERIMENTAL with a time limit, let's say 7year, until 10.October 2020 (not random picked, but 10.10.2020 seems nice). * set aside one /16 for each RIR * out of this /16 _only_ upto /26 split into /32 (64 for each RIR region) can be can be handed out and announced into the global routing table. If someone need something more than /32 they should really come up with a very good reasons now or just ask for regular RIR space * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL was a success or a failure. ** If failure the entire address block are taken back before 31.Nov 2020, filtering etc like 6bone. ** If a success, we remove the 64 /32 (/26) limit and each RIR can hand out LISP EID space from the above /12 in their region, much like regular space. * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity keep track of the above /32 and a LISP-EID-wg decide and make up the procedures for how this should be used. now some more text why I've come up with this suggestion: On Tue, Jan 8, 2013 at 7:03 AM, Terry Manderson wrote: > The Responsible AD and the LISP chairs have discussed the future of this > document. We believe that the future of this document could be best serve= d > by splitting it in two (one that allocates/justifies the prefix, and one > that describes the LISP specific allocation mechanism) and also altering > text to address the concerns raised during the IETF LC. Keep it as one document for the moment... > However, before the WG starts to rework the document, I would first like = to > canvass the LISP WG as to your opinions. > > 1) Should we, as a WG, continue to work on this item? Is it necessary/use= ful > for LISP? yes it is useful... > 2) If so, what direction should the WG take this document so that the LIS= P > experiment is best served? > > I'd also like to call on those folks (as Brian did) who offered review of > this document (CC'd here) during the IETF last call to participate on the > LISP mailing list as to its future. The key word here is EXPERIMENT as I see it _now_. I found this post a while back http://www.ietf.org/mail-archive/web/lisp/current/msg04000.html From: Luigi Iannone To: Roger J=F8rgensen Cc: ietf at ietf.org, lisp at ietf.org Date: Thu, 15 Nov 2012 14:22:50 +0100 > I have to ask, who can request an netblock from this address space and > from where? Who: whoever is willing to deploy LISP. Where: your RIR? > I might be blind but I couldn't find it mentioned anywhere. > The purpose of the document is not to create a new way to distribute prefixes with its own policies, rather to use the existing "process" but just creating a code point specific for LISP. The problem here isn't so much WHO, it's more WHERE to get it. If we involve the RIR we end up in a complicated process. Complication don't always go well with EXPERIMENTAL processes. The other important thing that hasn't been mention that much is HOW it should be routed in the global routing table. This partly involve WHO but more about this later. First WHERE. When I read section "3. Rationale and Intent" in the draft I understand that the purpose is to reserve a large block so you can easier handle LISP EID space different than "regular" IP space on the configuration level. The EID Block will be used only at configuration level, it is recommended not to hard-code in any way the IPv6 EID Block in the router hardware. " Combine this with the keyword "experimental" I would say this give us a situation very alike to 6bone for those that remember that. Easy addresses to get but you _knew_ you might had to change your prefix and configuration at some point in the future. It's an EXPERIMENT. First of all, let's change the "recommanded not to" into "MUST NOT be hard-coded" or similar. Vendors are free to provide examples but it must be possible to change it. Then we add another section into the draft that mention this is a _time limited_ experiment, let's say around 7 years or so Reason for this follow 1.) 1/2 to 3 years to get LISP support from more vendors 2.) 1/2 to 2 years to plan, design and implement a setup using LISP EID spa= ce 3.) 1-3 years to get more deployment of it so we can learn and see how it works out 4.) we'll first see the real result of this in 2-5years time... I know it's not possible for me to get a larger none-test LISP deployment in place before in 1-2years time. With the above mention update we now have a clearly defined experiment with a time frame. This make it easier to solve the WHERE. If we could get one RIR or some other entity to take on the job free of charge to keep track of this LISP space, they should * provide whois service and documentation on who has valid LISP EID space * provide a framework for asking for LISP EID space * handle registry service for this space according to some guidelines given by LISP-EID wg (1*) This entity should probably not decide who can get, and who can not get LISP EID space, that's upto LISP-EID wg (1*). I would suggest RIPE or someone else with enough manpower and active people involved in LISP work. The last problem with WHERE is the management body (1*), LISP-EID-wg. I would suggest this work sort of similiar to how 6bone worked. I say LISP-EID-wg and not LISP wg since the latter are more involved in the development of it. Many of the same people but different focus. Their lifetime are anyway given by above time frame. This bring us onto WHO and more important HOW - Someone will have to announce something in the global routing table. We can think back to how well 2002::/16 worked as other also has mention. I think the lesson learned from 2002::/16 was that we can not have one huge net block many ASN's are announcing. I suggest we split the reserved /12 into some smaller blocks, set aside a given size for each RIR region (one /26) and for each RIR region the above LISP-EID-wg can give out /32 space until it's empty. I would say the experiment are a success IF most regions run out of space within the first 5 year really. At that time we just decleare it a success, remove the EXPERIMENTAL including the artificial /26 limit and let each RIR handle LISP-EID space almost as regular space... :-) About WHO, anyone being a LIR can ask for a LISP-EID space directly. The reason are that the net-block has to be announced into the global routing table. Everyone else will have to ask one of the few having space for a connection... I realize this open up a monopolistic situation really... anyhow, if we run out of space in the EXPERIMENTAL pool isn't that a success when more than 64 ASN in one or more region are using LISP EID space ?:-) About HOW. ASN holders can request it through above mention system, LISP-EID-wg will have to decide what is the best for the overall EXPERIMENT, that mean quite alot of ISPs might get a no on their request. That should be well understood. This is not regular IPv6 address space. This space is also limited and it will be reachable in the global routing table. The overall impact on the rest of Internet are marginal. Another question, should we consider, or have an opinion regarding how it's exchanged between participants? Again, since this is a EXPERIMENT, I would suggest we kindly ask each and every /32 holder of the LISP-EID space to peer wherever possible with everyone without any discussion at every peering/connection point they are at. LISP-EID-wg are free to request this kind of things to make the experiment a success. ... not sure how well that are going down the throat of ISPs out there but isn't this an EXPERIMENT on the LISP protocol? I do support the idea behind the original LISP-EID-block request, but as the LastCall showed, there where to many unknown to let it move forward in that state. now I will sit back and let my suggestion be torn to pieces and see what we can end up with in the end :-) --=20 Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From jmh@joelhalpern.com Wed Jan 9 13:37:16 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 983EF21F84FB for ; Wed, 9 Jan 2013 13:37:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.115 X-Spam-Level: X-Spam-Status: No, score=-102.115 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Guxxb4TXtMbH for ; Wed, 9 Jan 2013 13:37:12 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id EADF021F846E for ; Wed, 9 Jan 2013 13:37:11 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 7C2E3A39C0 for ; Wed, 9 Jan 2013 13:37:11 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id E80861C0B58; Wed, 9 Jan 2013 13:37:10 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.155.107.75] (unknown [129.192.170.160]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 5276B1C07B6; Wed, 9 Jan 2013 13:37:10 -0800 (PST) Message-ID: <50EDE306.6000808@joelhalpern.com> Date: Wed, 09 Jan 2013 16:37:10 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: =?ISO-8859-1?Q?Roger_J=F8rgensen?= References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 21:37:16 -0000 And this gets to the reason why specifying the allocation policy will take a lot longer. From what I understand of LISP, and speaking only as an individual participant, it is not at all obvious tome that the RIRs have an inherent role in LISP EID allocation. LISP EIDs are not regional in any meaningful sense. Note: Assuming we do create some mechanism for allocation, with multiple players, and assuming the thier members wanted them to, there is no reason that the RIRs could not choose to have a role. I have no desire or ability to prevent them. I just seen no reason to wire it in. Yours, Joel On 1/9/2013 4:02 PM, Roger Jørgensen wrote: > I'll remove myself from the cc since I'm on lisp@ :-) > > > I have tried to write down one way to get this done in a way that > handle most aspect. First a summary since this is a very long email. > The size of the address blocks are a suggestion from my side. > > > * we reserve a /12 > * LISP EID block are marked as EXPERIMENTAL with a time limit, let's > say 7year, until 10.October 2020 (not random picked, but 10.10.2020 > seems nice). > * set aside one /16 for each RIR > * out of this /16 _only_ upto /26 split into /32 (64 for each RIR > region) can be can be handed out and announced into the global routing > table. If someone need something more than /32 they should really come > up with a very good reasons now or just ask for regular RIR space > * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL > was a success or a failure. > ** If failure the entire address block are taken back before 31.Nov > 2020, filtering etc like 6bone. > ** If a success, we remove the 64 /32 (/26) limit and each RIR can > hand out LISP EID space from the above /12 in their region, much like > regular space. > * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity > keep track of the above /32 and a LISP-EID-wg decide and make up the > procedures for how this should be used. > > > > now some more text why I've come up with this suggestion: > > On Tue, Jan 8, 2013 at 7:03 AM, Terry Manderson > wrote: > >> The Responsible AD and the LISP chairs have discussed the future of this >> document. We believe that the future of this document could be best served >> by splitting it in two (one that allocates/justifies the prefix, and one >> that describes the LISP specific allocation mechanism) and also altering >> text to address the concerns raised during the IETF LC. > > Keep it as one document for the moment... > > >> However, before the WG starts to rework the document, I would first like to >> canvass the LISP WG as to your opinions. >> >> 1) Should we, as a WG, continue to work on this item? Is it necessary/useful >> for LISP? > > yes it is useful... > > >> 2) If so, what direction should the WG take this document so that the LISP >> experiment is best served? >> >> I'd also like to call on those folks (as Brian did) who offered review of >> this document (CC'd here) during the IETF last call to participate on the >> LISP mailing list as to its future. > > The key word here is EXPERIMENT as I see it _now_. > I found this post a while back > http://www.ietf.org/mail-archive/web/lisp/current/msg04000.html > > > > From: Luigi Iannone > To: Roger Jørgensen > Cc: ietf at ietf.org, lisp at ietf.org > Date: Thu, 15 Nov 2012 14:22:50 +0100 > >> I have to ask, who can request an netblock from this address space and >> from where? > > Who: whoever is willing to deploy LISP. > > Where: your RIR? > > >> I might be blind but I couldn't find it mentioned anywhere. >> > > The purpose of the document is not to create a new way to distribute > prefixes with its own policies, rather to use the existing "process" > but just creating a code point specific for LISP. > > > > > > > > The problem here isn't so much WHO, it's more WHERE to get it. If we > involve the RIR we end up in a complicated process. > Complication don't always go well with EXPERIMENTAL processes. > The other important thing that hasn't been mention that much is HOW it > should be routed in the global routing table. This partly involve WHO > but more about this later. First WHERE. > > > > > > > When I read section "3. Rationale and Intent" in the draft I > understand that the purpose is to reserve a large block so you can > easier handle LISP EID space different than "regular" IP space on the > configuration level. > > The EID Block will be used only at configuration level, it is > recommended not to hard-code in any way the IPv6 EID Block in the > router hardware. " > > > > Combine this with the keyword "experimental" I would say this give us > a situation very alike to 6bone for those that remember that. Easy > addresses to get but you _knew_ you might had to change your prefix > and configuration at some point in the future. It's an EXPERIMENT. > > First of all, let's change the "recommanded not to" into "MUST NOT be > hard-coded" or similar. Vendors are free to provide examples but it > must be possible to change it. > > > > Then we add another section into the draft that mention this is a > _time limited_ experiment, let's say around 7 years or so > Reason for this follow > 1.) 1/2 to 3 years to get LISP support from more vendors > 2.) 1/2 to 2 years to plan, design and implement a setup using LISP EID space > 3.) 1-3 years to get more deployment of it so we can learn and see how > it works out > 4.) we'll first see the real result of this in 2-5years time... > > I know it's not possible for me to get a larger none-test LISP > deployment in place before in 1-2years time. > > > > > > With the above mention update we now have a clearly defined experiment > with a time frame. > This make it easier to solve the WHERE. > > If we could get one RIR or some other entity to take on the job free > of charge to keep track of this LISP space, they should > * provide whois service and documentation on who has valid LISP EID space > * provide a framework for asking for LISP EID space > * handle registry service for this space according to some guidelines > given by LISP-EID wg (1*) > > This entity should probably not decide who can get, and who can not > get LISP EID space, that's upto LISP-EID wg (1*). > I would suggest RIPE or someone else with enough manpower and active > people involved in LISP work. > > The last problem with WHERE is the management body (1*), LISP-EID-wg. > I would suggest this work sort of similiar to how 6bone worked. I say > LISP-EID-wg and not LISP wg since the latter are more involved in the > development of it. Many of the same people but different focus. Their > lifetime are anyway given by above time frame. > > > > > > > > > This bring us onto WHO and more important HOW - > > Someone will have to announce something in the global routing table. > We can think back to how well 2002::/16 worked as other also has > mention. I think the lesson learned from 2002::/16 was that we can not > have one huge net block many ASN's are announcing. > I suggest we split the reserved /12 into some smaller blocks, set > aside a given size for each RIR region (one /26) and for each RIR > region the above LISP-EID-wg can give out /32 space until it's empty. > I would say the experiment are a success IF most regions run out of > space within the first 5 year really. At that time we just decleare it > a success, remove the EXPERIMENTAL including the artificial /26 limit > and let each RIR handle LISP-EID space almost as regular space... :-) > > > About WHO, anyone being a LIR can ask for a LISP-EID space directly. > The reason are that the net-block has to be announced into the global > routing table. Everyone else will have to ask one of the few having > space for a connection... > I realize this open up a monopolistic situation really... anyhow, if > we run out of space in the EXPERIMENTAL pool isn't that a success when > more than 64 ASN in one or more region are using LISP EID space ?:-) > > > > About HOW. ASN holders can request it through above mention system, > LISP-EID-wg will have to decide what is the best for the overall > EXPERIMENT, that mean quite alot of ISPs might get a no on their > request. That should be well understood. This is not regular IPv6 > address space. > This space is also limited and it will be reachable in the global > routing table. The overall impact on the rest of Internet are > marginal. > Another question, should we consider, or have an opinion regarding how > it's exchanged between participants? > > Again, since this is a EXPERIMENT, I would suggest we kindly ask each > and every /32 holder of the LISP-EID space to peer wherever possible > with everyone without any discussion at every peering/connection point > they are at. LISP-EID-wg are free to request this kind of things to > make the experiment a success. > ... not sure how well that are going down the throat of ISPs out there > but isn't this an EXPERIMENT on the LISP protocol? > > > > > > > I do support the idea behind the original LISP-EID-block request, but > as the LastCall showed, there where to many unknown to let it move > forward in that state. > > > now I will sit back and let my suggestion be torn to pieces and see > what we can end up with in the end :-) > From heinerhummel@aol.com Wed Jan 9 14:39:00 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B2C021F8799 for ; Wed, 9 Jan 2013 14:39:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.298 X-Spam-Level: X-Spam-Status: No, score=-3.298 tagged_above=-999 required=5 tests=[AWL=0.700, BAYES_00=-2.599, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_CHICKENPOX_44=0.6] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nXvpsYlYHfds for ; Wed, 9 Jan 2013 14:38:59 -0800 (PST) Received: from imr-mb01.mx.aol.com (imr-mb01.mx.aol.com [64.12.207.164]) by ietfa.amsl.com (Postfix) with ESMTP id 90D2D21F8497 for ; Wed, 9 Jan 2013 14:38:58 -0800 (PST) Received: from mtaomg-mb05.r1000.mx.aol.com (mtaomg-mb05.r1000.mx.aol.com [172.29.41.76]) by imr-mb01.mx.aol.com (Outbound Mail Relay) with ESMTP id BEF8D1C00023F; Wed, 9 Jan 2013 17:38:57 -0500 (EST) Received: from core-dqb004c.r1000.mail.aol.com (core-dqb004.r1000.mail.aol.com [172.29.212.205]) by mtaomg-mb05.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id EA75DE00008E; Wed, 9 Jan 2013 17:38:56 -0500 (EST) References: <20130109190547.73F1418C0D0@mercury.lcs.mit.edu> To: jnc@mercury.lcs.mit.edu, lisp@ietf.org In-Reply-To: <20130109190547.73F1418C0D0@mercury.lcs.mit.edu> X-MB-Message-Source: WebUI MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFBCD13DF2BAC9_C24_B0958_webmail-m154.sysops.aol.com" X-Mailer: Webmail 37276-STANDARD Received: from 178.26.192.122 by webmail-m154.sysops.aol.com (64.12.101.131) with HTTP (WebMailUI); Wed, 09 Jan 2013 17:38:55 -0500 Message-Id: <8CFBCD13DD1677B-C24-331AB@webmail-m154.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Wed, 9 Jan 2013 17:38:56 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1357771137; bh=9iEf2JsI+s2iNe4PZmvQg0wzKqqkweG5EIOiT7yk9Oo=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=qZR9m4PMufkXVXtW4u4W+pRcfLZaGi+NaCcePZzQY++cbFf4XVN7dcDTy/UZefrRq RJpYqynsnIHLax052b2cGsOlczmPRCYELfXAU8M8YC4HSeZrUM/MrKyRR/qv8ZQSrR arky8hKAxccuLRcD7DuRMX7t4He9JYEa1P7JVA3k= X-AOL-SCOLL-SCORE: 0:2:423777888:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d294c50edf1807854 Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 22:39:00 -0000 This is a multi-part message in MIME format. ----------MB_8CFBCD13DF2BAC9_C24_B0958_webmail-m154.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" We all know a well running loc-id-split solution which is the yellow postal= service: It forwards the letter to the indicated address and deliberately= risks an eventually negative "return to sender, identifier unknown, no su= ch number, no such phone..." i.e. does not waste its capacities with billio= ns of UPDATEs to ensure that any ingress office would know that the potenti= al receiving person really lives at the indicated address. Note, it is not = already the egress post office per se, no, it is its mail man standing in f= ront of the addressed door who recognizes that the letter can or cannot be = delivered. This means: "loc-id-split" handled in such a way works for a net= work which is 100,000 or may be 1 million times larger than the internet.= =20 My TARA (Topology Aggregating Routing Architecture) precisely works that wa= y. It does not waste the routers' capacities with thousands of reachability= updates per second. No PUSH and no PULL !!!=20 The sender sends the packet, bestowed with destination-identifier (ipv4 add= r) and destination-(TARA-)Locator as learned from DNS, which is forwarded t= o that TARA-site as indicated by this destination-TARA-Locator. There, 3 th= ings may happen: 1) packet can be delivered, 2) a well-scoped broadcast sea= rch can be started to look for the roaming destination user all over the lo= cal geographical surrounding, 3) or alternatively a negative response. Running out of IPv4 Unicast addresses, it is however necessary that any (ro= aming) user owns an IPv4-address which is unique per its "home-geopatch" an= d that it will be its IPv4-address plus its home-geopatch (2 octets) when r= oaming. I hope this also explains why LISP (in spite of its name) is not a loc-id-s= plit solution. Heiner =20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Noel Chiappa An: lisp Cc: jnc Verschickt: Mi, 9 Jan 2013 8:05 pm Betreff: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mapping= s > From: heinerhummel@aol.com > Pull (LISP) versus Push (legacy IP). This discussion confirms that LI= SP > is not and has never been a loc-id-split protocol. So... LISP+NERD _would_ be a "loc-id-split protocol"? {Sorry, all, couldn't resist... :-} =09Noel _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 ----------MB_8CFBCD13DF2BAC9_C24_B0958_webmail-m154.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8" We all know a well running loc-id-split solution which is = the yellow postal service:  It forwards the letter to the indicated ad= dress and deliberately risks an eventually negative  "return to sender= , identifier unknown, no such number, no such phone..." i.e. does not waste= its capacities with billions of UPDATEs to ensure that any ingress office = would know that the potential receiving person really lives at the indicate= d address. Note, it is not already the egress post office per se, no, it is= its mail man standing in front of the addressed door who recognizes that t= he letter can or cannot be delivered. This means: "loc-id-split" handled in= such a way works for a network which is 100,000 or may be 1 million times = larger than the internet. 

My TARA (Topology Aggregat= ing Routing Architecture) precisely works that way. It does not waste the r= outers' capacities with thousands of reachability updates per second. No PU= SH and no PULL !!! 

The sender sends the packe= t, bestowed with destination-identifier (ipv4 addr) and destination-(TARA-)= Locator as learned from DNS, which is forwarded to that TARA-site as indica= ted by this destination-TARA-Locator. There, 3 things may happen: 1) packet= can be delivered, 2) a well-scoped broadcast search can be started to look= for the roaming destination user all over the local geographical surroundi= ng, 3) or alternatively a negative response.

Running out of IPv4 Unicas= t addresses, it is however necessary that any (roaming) user owns an IPv4-a= ddress which is unique per its "home-geopatch" and that it will be its IPv4= -address plus its home-geopatch (2 octets) when roaming.

I hope this also explains = why LISP (in spite of its name) is not a loc-id-split solution.

Heiner

 



 







    > From: heinerhummel@aol.com

    > Pull (LISP) versus Push (legacy IP). This discussion confirms that=
 LISP
    > is not and has never been a loc-id-split protocol.

So... LISP+NERD _would_ be a "loc-id-split protocol"?

{Sorry, all, couldn't resist... :-}

=09Noel
_______________________________________________
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
----------MB_8CFBCD13DF2BAC9_C24_B0958_webmail-m154.sysops.aol.com-- From gih@apnic.net Wed Jan 9 14:49:07 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C81A821F85D0 for ; Wed, 9 Jan 2013 14:49:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SrV6KBhHigqo for ; Wed, 9 Jan 2013 14:49:06 -0800 (PST) Received: from asmtp.apnic.net (asmtp.apnic.net [IPv6:2001:dc0:2001:11::199]) by ietfa.amsl.com (Postfix) with ESMTP id B376B21F85C2 for ; Wed, 9 Jan 2013 14:49:05 -0800 (PST) Received: from 2001-44b8-1121-1a00-a81d-208d-a8ba-234b.static.ipv6.internode.on.net (2001-44b8-1121-1a00-a81d-208d-a8ba-234b.static.ipv6.internode.on.net [IPv6:2001:44b8:1121:1a00:a81d:208d:a8ba:234b]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by asmtp.apnic.net (Postfix) with ESMTP id 26083B68FE; Thu, 10 Jan 2013 08:49:03 +1000 (EST) Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Content-Type: text/plain; charset=iso-8859-1 From: Geoff Huston In-Reply-To: <50EDE306.6000808@joelhalpern.com> Date: Thu, 10 Jan 2013 09:49:02 +1100 Content-Transfer-Encoding: quoted-printable Message-Id: References: <50EDE306.6000808@joelhalpern.com> To: Joel M. Halpern X-Mailer: Apple Mail (2.1499) Cc: LISP mailing list list Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 22:49:07 -0000 On the other hand Joel it could be said that you are reading a lot into = white spaces without clear rationale. The regionality in the RIR = structure has nothing to do with the regionality or, more relevantly, = the lack thereof, in routing BGP, LISP or HELLO for that matter. So, for = me, your comment does not appear to make much sense in this context. Mine, Geoff On 10/01/2013, at 8:37 AM, Joel M. Halpern wrote: > And this gets to the reason why specifying the allocation policy will = take a lot longer. > =46rom what I understand of LISP, and speaking only as an individual = participant, it is not at all obvious tome that the RIRs have an = inherent role in LISP EID allocation. LISP EIDs are not regional in any = meaningful sense. >=20 > Note: Assuming we do create some mechanism for allocation, with = multiple players, and assuming the thier members wanted them to, there = is no reason that the RIRs could not choose to have a role. I have no = desire or ability to prevent them. I just seen no reason to wire it in. >=20 > Yours, > Joel >=20 > On 1/9/2013 4:02 PM, Roger J=F8rgensen wrote: >> I'll remove myself from the cc since I'm on lisp@ :-) >>=20 >>=20 >> I have tried to write down one way to get this done in a way that >> handle most aspect. First a summary since this is a very long email. >> The size of the address blocks are a suggestion from my side. >>=20 >>=20 >> * we reserve a /12 >> * LISP EID block are marked as EXPERIMENTAL with a time limit, let's >> say 7year, until 10.October 2020 (not random picked, but 10.10.2020 >> seems nice). >> * set aside one /16 for each RIR >> * out of this /16 _only_ upto /26 split into /32 (64 for each RIR >> region) can be can be handed out and announced into the global = routing >> table. If someone need something more than /32 they should really = come >> up with a very good reasons now or just ask for regular RIR space >> * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL >> was a success or a failure. >> ** If failure the entire address block are taken back before 31.Nov >> 2020, filtering etc like 6bone. >> ** If a success, we remove the 64 /32 (/26) limit and each RIR can >> hand out LISP EID space from the above /12 in their region, much like >> regular space. >> * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity >> keep track of the above /32 and a LISP-EID-wg decide and make up the >> procedures for how this should be used. >>=20 >>=20 >>=20 >> now some more text why I've come up with this suggestion: >>=20 >> On Tue, Jan 8, 2013 at 7:03 AM, Terry Manderson >> wrote: >> >>> The Responsible AD and the LISP chairs have discussed the future of = this >>> document. We believe that the future of this document could be best = served >>> by splitting it in two (one that allocates/justifies the prefix, and = one >>> that describes the LISP specific allocation mechanism) and also = altering >>> text to address the concerns raised during the IETF LC. >>=20 >> Keep it as one document for the moment... >>=20 >>=20 >>> However, before the WG starts to rework the document, I would first = like to >>> canvass the LISP WG as to your opinions. >>>=20 >>> 1) Should we, as a WG, continue to work on this item? Is it = necessary/useful >>> for LISP? >>=20 >> yes it is useful... >>=20 >>=20 >>> 2) If so, what direction should the WG take this document so that = the LISP >>> experiment is best served? >>>=20 >>> I'd also like to call on those folks (as Brian did) who offered = review of >>> this document (CC'd here) during the IETF last call to participate = on the >>> LISP mailing list as to its future. >>=20 >> The key word here is EXPERIMENT as I see it _now_. >> I found this post a while back >> http://www.ietf.org/mail-archive/web/lisp/current/msg04000.html >>=20 >>=20 >> >> From: Luigi Iannone >> To: Roger J=F8rgensen >> Cc: ietf at ietf.org, lisp at ietf.org >> Date: Thu, 15 Nov 2012 14:22:50 +0100 >> >>> I have to ask, who can request an netblock from this address space = and >>> from where? >>=20 >> Who: whoever is willing to deploy LISP. >>=20 >> Where: your RIR? >>=20 >>=20 >>> I might be blind but I couldn't find it mentioned anywhere. >>>=20 >>=20 >> The purpose of the document is not to create a new way to distribute >> prefixes with its own policies, rather to use the existing "process" >> but just creating a code point specific for LISP. >>=20 >> >>=20 >>=20 >>=20 >>=20 >>=20 >> The problem here isn't so much WHO, it's more WHERE to get it. If we >> involve the RIR we end up in a complicated process. >> Complication don't always go well with EXPERIMENTAL processes. >> The other important thing that hasn't been mention that much is HOW = it >> should be routed in the global routing table. This partly involve WHO >> but more about this later. First WHERE. >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >> When I read section "3. Rationale and Intent" in the draft I >> understand that the purpose is to reserve a large block so you can >> easier handle LISP EID space different than "regular" IP space on the >> configuration level. >>=20 >> The EID Block will be used only at configuration level, it is >> recommended not to hard-code in any way the IPv6 EID Block in = the >> router hardware. " >>=20 >>=20 >>=20 >> Combine this with the keyword "experimental" I would say this give us >> a situation very alike to 6bone for those that remember that. Easy >> addresses to get but you _knew_ you might had to change your prefix >> and configuration at some point in the future. It's an EXPERIMENT. >>=20 >> First of all, let's change the "recommanded not to" into "MUST NOT be >> hard-coded" or similar. Vendors are free to provide examples but it >> must be possible to change it. >>=20 >>=20 >>=20 >> Then we add another section into the draft that mention this is a >> _time limited_ experiment, let's say around 7 years or so >> Reason for this follow >> 1.) 1/2 to 3 years to get LISP support from more vendors >> 2.) 1/2 to 2 years to plan, design and implement a setup using LISP = EID space >> 3.) 1-3 years to get more deployment of it so we can learn and see = how >> it works out >> 4.) we'll first see the real result of this in 2-5years time... >>=20 >> I know it's not possible for me to get a larger none-test LISP >> deployment in place before in 1-2years time. >>=20 >>=20 >>=20 >>=20 >>=20 >> With the above mention update we now have a clearly defined = experiment >> with a time frame. >> This make it easier to solve the WHERE. >>=20 >> If we could get one RIR or some other entity to take on the job free >> of charge to keep track of this LISP space, they should >> * provide whois service and documentation on who has valid LISP EID = space >> * provide a framework for asking for LISP EID space >> * handle registry service for this space according to some guidelines >> given by LISP-EID wg (1*) >>=20 >> This entity should probably not decide who can get, and who can not >> get LISP EID space, that's upto LISP-EID wg (1*). >> I would suggest RIPE or someone else with enough manpower and active >> people involved in LISP work. >>=20 >> The last problem with WHERE is the management body (1*), LISP-EID-wg. >> I would suggest this work sort of similiar to how 6bone worked. I say >> LISP-EID-wg and not LISP wg since the latter are more involved in the >> development of it. Many of the same people but different focus. Their >> lifetime are anyway given by above time frame. >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >> This bring us onto WHO and more important HOW - >>=20 >> Someone will have to announce something in the global routing table. >> We can think back to how well 2002::/16 worked as other also has >> mention. I think the lesson learned from 2002::/16 was that we can = not >> have one huge net block many ASN's are announcing. >> I suggest we split the reserved /12 into some smaller blocks, set >> aside a given size for each RIR region (one /26) and for each RIR >> region the above LISP-EID-wg can give out /32 space until it's empty. >> I would say the experiment are a success IF most regions run out of >> space within the first 5 year really. At that time we just decleare = it >> a success, remove the EXPERIMENTAL including the artificial /26 limit >> and let each RIR handle LISP-EID space almost as regular space... = :-) >>=20 >>=20 >> About WHO, anyone being a LIR can ask for a LISP-EID space directly. >> The reason are that the net-block has to be announced into the global >> routing table. Everyone else will have to ask one of the few having >> space for a connection... >> I realize this open up a monopolistic situation really... anyhow, if >> we run out of space in the EXPERIMENTAL pool isn't that a success = when >> more than 64 ASN in one or more region are using LISP EID space ?:-) >>=20 >>=20 >>=20 >> About HOW. ASN holders can request it through above mention system, >> LISP-EID-wg will have to decide what is the best for the overall >> EXPERIMENT, that mean quite alot of ISPs might get a no on their >> request. That should be well understood. This is not regular IPv6 >> address space. >> This space is also limited and it will be reachable in the global >> routing table. The overall impact on the rest of Internet are >> marginal. >> Another question, should we consider, or have an opinion regarding = how >> it's exchanged between participants? >>=20 >> Again, since this is a EXPERIMENT, I would suggest we kindly ask each >> and every /32 holder of the LISP-EID space to peer wherever possible >> with everyone without any discussion at every peering/connection = point >> they are at. LISP-EID-wg are free to request this kind of things to >> make the experiment a success. >> ... not sure how well that are going down the throat of ISPs out = there >> but isn't this an EXPERIMENT on the LISP protocol? >>=20 >>=20 >>=20 >>=20 >>=20 >>=20 >> I do support the idea behind the original LISP-EID-block request, but >> as the LastCall showed, there where to many unknown to let it move >> forward in that state. >>=20 >>=20 >> now I will sit back and let my suggestion be torn to pieces and see >> what we can end up with in the end :-) >>=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp -- Geoff Huston Chief Scientist, APNIC +61 7 3858 3100 gih@apnic.net From heinerhummel@aol.com Wed Jan 9 14:57:16 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC19421F8517 for ; Wed, 9 Jan 2013 14:57:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.648 X-Spam-Level: X-Spam-Status: No, score=-3.648 tagged_above=-999 required=5 tests=[AWL=0.350, BAYES_00=-2.599, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_CHICKENPOX_44=0.6] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZGwW0FZo8FXu for ; Wed, 9 Jan 2013 14:57:15 -0800 (PST) Received: from imr-db03.mx.aol.com (imr-db03.mx.aol.com [205.188.91.97]) by ietfa.amsl.com (Postfix) with ESMTP id 4364221F8505 for ; Wed, 9 Jan 2013 14:57:15 -0800 (PST) Received: from mtaomg-ma01.r1000.mx.aol.com (mtaomg-ma01.r1000.mx.aol.com [172.29.41.8]) by imr-db03.mx.aol.com (Outbound Mail Relay) with ESMTP id 460E138000081; Wed, 9 Jan 2013 17:57:14 -0500 (EST) Received: from core-dqb004c.r1000.mail.aol.com (core-dqb004.r1000.mail.aol.com [172.29.212.205]) by mtaomg-ma01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 07E07E000087; Wed, 9 Jan 2013 17:57:14 -0500 (EST) References: <20130109190547.73F1418C0D0@mercury.lcs.mit.edu> <8CFBCD13DD1677B-C24-331AB@webmail-m154.sysops.aol.com> To: heinerhummel@aol.com, jnc@mercury.lcs.mit.edu, lisp@ietf.org In-Reply-To: <8CFBCD13DD1677B-C24-331AB@webmail-m154.sysops.aol.com> X-MB-Message-Source: WebUI MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFBCD3CC017C6E_C24_B1076_webmail-m154.sysops.aol.com" X-Mailer: Webmail 37276-STANDARD Received: from 178.26.192.122 by webmail-m154.sysops.aol.com (64.12.101.131) with HTTP (WebMailUI); Wed, 09 Jan 2013 17:57:12 -0500 Message-Id: <8CFBCD3CBF33428-C24-333FE@webmail-m154.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Wed, 9 Jan 2013 17:57:13 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1357772234; bh=vVeQk2w5xGFBF5IptgEgRwa+JONfJsfOs9iCrWAthYE=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=GDaZSuseG6yUBAnwPHfpU953x6YqDChNY+8iC9M6u8z1YI98TdT4TMKMRm9A7sCgQ Ke0zlToUImaMFBl7SDvqqufhWFSbnkG0wMEbpuJO/CSXyE+CWPpcK2HfsT6lNOajEG dPf9c0TMDQqKO2GnC8T4MxmW1qr20968YzNkNra4= X-AOL-SCOLL-SCORE: 0:2:430963136:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d290850edf5ca15e2 Subject: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mappings (resent) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Jan 2013 22:57:16 -0000 This is a multi-part message in MIME format. ----------MB_8CFBCD3CC017C6E_C24_B1076_webmail-m154.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" sorrry, two words (=3D identified by) were missing -----Urspr=C3=BCngliche Mitteilung-----=20 Von: heinerhummel An: jnc ; lisp Verschickt: Mi, 9 Jan 2013 11:39 pm Betreff: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mapping= s We all know a well running loc-id-split solution which is the yellow postal= service: It forwards the letter to the indicated address and deliberately= risks an eventually negative "return to sender, identifier unknown, no su= ch number, no such phone..." i.e. does not waste its capacities with billio= ns of UPDATEs to ensure that any ingress office would know that the potenti= al receiving person really lives at the indicated address. Note, it is not = already the egress post office per se, no, it is its mail man standing in f= ront of the addressed door who recognizes that the letter can or cannot be = delivered. This means: "loc-id-split" handled in such a way works for a net= work which is 100,000 or may be 1 million times larger than the internet.= =20 My TARA (Topology Aggregating Routing Architecture) precisely works that wa= y. It does not waste the routers' capacities with thousands of reachability= updates per second. No PUSH and no PULL !!!=20 The sender sends the packet, bestowed with destination-identifier (ipv4 add= r) and destination-(TARA-)Locator as learned from DNS, which is forwarded t= o that TARA-site as indicated by this destination-TARA-Locator. There, 3 th= ings may happen: 1) packet can be delivered, 2) a well-scoped broadcast sea= rch can be started to look for the roaming destination user all over the lo= cal geographical surrounding, 3) or alternatively a negative response. Running out of IPv4 Unicast addresses, it is however necessary that any (ro= aming) user owns an IPv4-address which is unique per its "home-geopatch" an= d that it will be identified by its IPv4-address plus its home-geopatch (2 = octets) when roaming. I hope this also explains why LISP (in spite of its name) is not a loc-id-s= plit solution. Heiner =20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Noel Chiappa An: lisp Cc: jnc Verschickt: Mi, 9 Jan 2013 8:05 pm Betreff: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mapping= s > From: heinerhummel@aol.com > Pull (LISP) versus Push (legacy IP). This discussion confirms that LI= SP > is not and has never been a loc-id-split protocol. So... LISP+NERD _would_ be a "loc-id-split protocol"? {Sorry, all, couldn't resist... :-} =09Noel _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 =20 _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 ----------MB_8CFBCD3CC017C6E_C24_B1076_webmail-m154.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8" sorrry,
two words (=3D identified = by) were missing


We all know a well running loc-id-split solution which is = the yellow postal service:  It forwards the letter to the indicated ad= dress and deliberately risks an eventually negative  "return to sender= , identifier unknown, no such number, no such phone..." i.e. does not waste= its capacities with billions of UPDATEs to ensure that any ingress office = would know that the potential receiving person really lives at the indicate= d address. Note, it is not already the egress post office per se, no, it is= its mail man standing in front of the addressed door who recognizes that t= he letter can or cannot be delivered. This means: "loc-id-split" handled in= such a way works for a network which is 100,000 or may be 1 million times = larger than the internet. 

My TARA (Topology Aggregat= ing Routing Architecture) precisely works that way. It does not waste the r= outers' capacities with thousands of reachability updates per second. No PU= SH and no PULL !!! 

The sender sends the packe= t, bestowed with destination-identifier (ipv4 addr) and destination-(TARA-)= Locator as learned from DNS, which is forwarded to that TARA-site as indica= ted by this destination-TARA-Locator. There, 3 things may happen: 1) packet= can be delivered, 2) a well-scoped broadcast search can be started to look= for the roaming destination user all over the local geographical surroundi= ng, 3) or alternatively a negative response.

Running out of IPv4 Unicas= t addresses, it is however necessary that any (roaming) user owns an IPv4-a= ddress which is unique per its "home-geopatch" and that it will be identifi= ed by its IPv4-address plus its home-geopatch (2 octets) when roaming.

I hope this also explains = why LISP (in spite of its name) is not a loc-id-split solution.

Heiner

 







jnc@mercur= y.lcs.mit.edu>
An: lisp <lisp@ietf.org>
Cc: jnc <jnc@mercury.lcs.mit.= edu>
Verschickt: Mi, 9 Jan 2013 8:05 pm
Betreff: Re: [lisp] draft-ietf-lisp-architecture: Demand Loading of Mapping= s

    > From: heinerhummel@aol.com

    > Pull (LISP) versus Push (legacy IP). This discussion confirms that=
 LISP
    > is not and has never been a loc-id-split protocol.

So... LISP+NERD _would_ be a "loc-id-split protocol"?

{Sorry, all, couldn't resist... :-}

=09Noel
_______________________________________________
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
=20 
________________________________________=
_______
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
----------MB_8CFBCD3CC017C6E_C24_B1076_webmail-m154.sysops.aol.com-- From sm@resistor.net Thu Jan 10 00:17:26 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D73A21F872C for ; Thu, 10 Jan 2013 00:17:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.58 X-Spam-Level: X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5qDtiQeQAK4T for ; Thu, 10 Jan 2013 00:17:25 -0800 (PST) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id C991F21F8439 for ; Thu, 10 Jan 2013 00:17:24 -0800 (PST) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id r0A8HE0w020995; Thu, 10 Jan 2013 00:17:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1357805840; bh=d/NBzcvu2aIxs25JdPCbqZS8c6aOpAgXGvvajXCXMkU=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=Xb7JkkTfkzWkSay6dQqFEwpT3rASIkoDDMCm03L6tWXUn0er0L5unEJwgN+X3Y64q AtYoQux3FSQJIGqYjkWnzXpmv41EvblCASFmRzQqZwwAnf1Ew5RX+/wr+qBa92+H7A Mr8EbaKNRQisIOwuzIDCj38C42w8Zs7SS0ZZ0oVc= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1357805840; i=@resistor.net; bh=d/NBzcvu2aIxs25JdPCbqZS8c6aOpAgXGvvajXCXMkU=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=Q1gaTQOy2YyMKQWvpc12qr6sNmGpRlIHakYAcmrzyc6oLeArQ7CXk3gjCx6JqlLMI 5uM6O0uL2rSEkjDKq8WzzS4XVcpjPkyDstPocSJygmN21Yp2mBdJgPjdmlK/gvKPGT Tmba58cbo80rvVGn4BlXHk0Pz77WfJB+uv2aW2js= Message-Id: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Thu, 10 Jan 2013 00:17:13 -0800 To: lisp@ietf.org From: SM In-Reply-To: References: Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable Cc: Roger =?iso-8859-1?Q?J=F8rgensen?= Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 08:17:26 -0000 At 13:02 09-01-2013, Roger J=F8rgensen wrote: >I have tried to write down one way to get this done in a way that >handle most aspect. First a summary since this is a very long email. >The size of the address blocks are a suggestion from my side. I'll make the counter-arguments. >* we reserve a /12 >* LISP EID block are marked as EXPERIMENTAL with a time limit, let's >say 7year, until 10.October 2020 (not random picked, but 10.10.2020 >seems nice). >* set aside one /16 for each RIR >* out of this /16 _only_ upto /26 split into /32 (64 for each RIR >region) can be can be handed out and announced into the global routing >table. If someone need something more than /32 they should really come >up with a very good reasons now or just ask for regular RIR space >* before 1.January 2019 IETF will have to decide if the EXPERIMENTAL >was a success or a failure. >** If failure the entire address block are taken back before 31.Nov >2020, filtering etc like 6bone. >** If a success, we remove the 64 /32 (/26) limit and each RIR can >hand out LISP EID space from the above /12 in their region, much like >regular space. >* in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity >keep track of the above /32 and a LISP-EID-wg decide and make up the >procedures for how this should be used. This would be a long-lived experiment. It rarely=20 works well in practice as the people who set it=20 up might not be there to clean up the mess. It's=20 not a huge problem to ask for some IP address=20 space to reserved. I am ignoring a few details=20 which might point to that being a problem. The "if someone needs more space" makes it a IP=20 address allocation problem. Someone will have to=20 deal with that request. The IETF does not do=20 that. I pointed to "operational models" in an=20 unrelated draft so that people can have at least=20 a little information about the options and decide=20 which option they prefer. I prefer to avoid a=20 6to4 scenario as making anything historic is a=20 recipe for debate. I don't like legacy space=20 because I am creating a problem for someone else to sort out. At 13:37 09-01-2013, Joel M. Halpern wrote: >And this gets to the reason why specifying the=20 >allocation policy will take a lot longer. Not really. It's only agreement that takes longer. > From what I understand of LISP, and speaking=20 > only as an individual participant, it is not at=20 > all obvious tome that the RIRs have an inherent=20 > role in LISP EID allocation. LISP EIDs are not=20 > regional in any meaningful sense. The reality is that RIRs are currently managing=20 IPv6 address allocations. It does not bother me=20 if IETF participants decide to give some other=20 entity the responsibility to do the work as long=20 as there is a clear explanation. It is a lot of work to do an analysis of the=20 various alternatives and figure out the better=20 alternative. The proposal made by Roger=20 J=F8rgensen is a step forward. Geoff Huston=20 explained some stuff. I think that his comments=20 may have been misunderstood. Brian Carpenter=20 pointed to some interesting operational questions=20 that have been raised or implied. I may be=20 missing them as I don't have a clear sense of how=20 the working group wants LISP to work. At 04:04 09-01-2013, Luigi Iannone wrote: >Not really, truth is that it was suggested to=20 >look at ORCHID, hence we tried to provide the=20 >same elements (or equivalent) that the ORCHID document provided. Although there may be some elements in common the=20 problem is different. The considerations were=20 different and the environment was different when ORCHID was approved as a= RFC. Regards, -sm =20 From jnc@mercury.lcs.mit.edu Thu Jan 10 06:37:32 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 977FE21F86AC for ; Thu, 10 Jan 2013 06:37:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.449 X-Spam-Level: X-Spam-Status: No, score=-6.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iAjrGJNVgWIK for ; Thu, 10 Jan 2013 06:37:32 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by ietfa.amsl.com (Postfix) with ESMTP id 9365021F86A6 for ; Thu, 10 Jan 2013 06:37:31 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id 99A6A18C0D1; Thu, 10 Jan 2013 09:37:30 -0500 (EST) To: lisp@ietf.org Message-Id: <20130110143730.99A6A18C0D1@mercury.lcs.mit.edu> Date: Thu, 10 Jan 2013 09:37:30 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 14:37:32 -0000 > From: Geoff Huston > If we were to assume that each and every single experiment in IPv6 > ... were each to request an experimental allocation that was "once and > forever" and assumed at the outset that the experiment would result in > comprehensive deployment over a network many many times larger than > today's then I hope you can appreciate that we'd not have enough space > to accommodate each and every experiment's requirements in the IPv6 > space. Understood. But do you see a place to draw a useful distinction between 'reserved' and 'allocted'? E.g. if you _reserve_ a /12 for a particular thing, but only _allocate_ a /24, then if the thing doesn't take off, you don't have to rescind an allocation - all that happens is that the reservation for the rest of the /12 is allowed to lapse. > So of course we see many (most?) experiment proponents proudly proclaim > that they are uniquely different and obviously their particular > experiment will naturally result in universal deployment, so why not > assume that happy outcome at the outset of the experiment and allocate > resources at a scale commensurate Sorry, but I don't think that's what's happening here (at least, not in a simple form). The thing that's different here is that (in my limited understanding of how this space is to be used) the _code_ is different depending on whether the destination is in this space or not. So there are major, real costs to be paid in changing the block of space used, later on. Its those costs we are interested in avoiding, _not_ just 'let's not have to come back and allocate more space later'. (And the reservation/allocation distinction above is my attempt for all sides have their cake here, and eat it too.) > If LISP is so fragile that it requires a very particular deployed > address structure in order to operate, then frankly we could do > precisely the same in BGP and achieve better results because of > avoidance of tunnelling. I find it somewhat strange to see this adamant > view that LISP absolutely requires a uniquely structured address plan > in order to achieve any useful outcome in terms of scalable routing Again, I think you've got it wrong. LISP does't _require_ this block to operate, as shown by the operation of IPv4 LISP, which works fine (and is hoped to have a positive impact on the routing) without any such reserved block. I gather (again, not too familiar, so take this with a grain of salt) that having a specific EID block allows us to do some additional useful things which we can't otherwise do. > ignoring the simple observation that if one were to do the same surgery > on the address plan in BGP the outcomes would likely to be just as > good if not better Again, no. For example, there's no way to do good support for widespread (i.e. small entity) multi-homing support with a single-level namespace and BGP, no matter what address plan one adopts. Noel From ggx@gigix.net Thu Jan 10 07:06:06 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A6D521F8833 for ; Thu, 10 Jan 2013 07:06:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.07 X-Spam-Level: X-Spam-Status: No, score=-3.07 tagged_above=-999 required=5 tests=[AWL=0.179, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2+sEMsFwBevx for ; Thu, 10 Jan 2013 07:06:05 -0800 (PST) Received: from mail-wg0-f44.google.com (mail-wg0-f44.google.com [74.125.82.44]) by ietfa.amsl.com (Postfix) with ESMTP id AE6DE21F8812 for ; Thu, 10 Jan 2013 07:06:04 -0800 (PST) Received: by mail-wg0-f44.google.com with SMTP id dr12so298373wgb.23 for ; Thu, 10 Jan 2013 07:06:03 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=Tukrj02NVuMUVlv5+anGPq6e26UFPeoyVpH1qSMUxVU=; b=Sf7x8TrFHy9Ci3XVJXl7vkqcdor2eCpVSmDn8pShD6EPRH7PH0uxQzp7672AcSgmsA poQ6prOWZtigM2semUlA9fEdaIN+4AnSLfTVGkkFeTGMrPvZX4TJGcpYoEtKo6L1iHSn LwUgROsrRmxs/2igf10fwh/bvaPMOAFxXiNwZUztEgtj2QQ1lQzQEWyQMe9sdnQug7Q0 TbQT/f8K8jI89p7b7HtzCdXPaJI10I2/ajysGz1OyXp75W15jFj/xdj9OIFiIC08LCOK rGrYRuBSAUNcyaErRD9j8JU2Lghp6Row+MxbQmkURXDzUCeDCMz4k5WMbtsQWSc6gO1B AaKQ== X-Received: by 10.180.85.165 with SMTP id i5mr9820813wiz.11.1357830363283; Thu, 10 Jan 2013 07:06:03 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id u6sm2725407wif.2.2013.01.10.07.06.01 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 10 Jan 2013 07:06:02 -0800 (PST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> Date: Thu, 10 Jan 2013 16:06:00 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <98888C7C-EE7C-4AE0-8344-1F560F70B0CA@gigix.net> References: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> To: SM X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQlGBwVeY0jSVe/vojH3MvJHU072CkPKtnzEcXig8V7fR7pQZYpHvnFBE8VKXqk+0XPtGujG Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 15:06:06 -0000 [snip] > At 04:04 09-01-2013, Luigi Iannone wrote: >> Not really, truth is that it was suggested to look at ORCHID, hence = we tried to provide the same elements (or equivalent) that the ORCHID = document provided. >=20 > Although there may be some elements in common the problem is = different. The considerations were different and the environment was = different when ORCHID was approved as a RFC. >=20 That's why I put "(or equivalent)" ;-) As a general comment I would say that whether choosing ORCHID as example = was a good or bad idea does not really matter now.=20 Gather ideas and comments to go forward is the important point (and this = thread is a of great help ;-)). ciao Luigi > Regards, > -sm =20 From ggx@gigix.net Thu Jan 10 07:29:57 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA24C21F862D for ; Thu, 10 Jan 2013 07:29:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.093 X-Spam-Level: X-Spam-Status: No, score=-3.093 tagged_above=-999 required=5 tests=[AWL=0.156, BAYES_00=-2.599, HELO_EQ_FR=0.35, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hxYXa9LDSzhr for ; Thu, 10 Jan 2013 07:29:56 -0800 (PST) Received: from mail-wg0-f47.google.com (mail-wg0-f47.google.com [74.125.82.47]) by ietfa.amsl.com (Postfix) with ESMTP id D556821F8583 for ; Thu, 10 Jan 2013 07:29:55 -0800 (PST) Received: by mail-wg0-f47.google.com with SMTP id dq11so313110wgb.2 for ; Thu, 10 Jan 2013 07:29:54 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer :x-gm-message-state; bh=93gGOBKg8F0AOUONNGpbi+q8NkfgMwOvpM4JHvLL51o=; b=mZFlIgxsZJkQjgZD1Yw8bBIqr6WJk4V+4q3tscRvZXMUtoEddg4orRKapicOHexuQJ W6Fjt3ipwhklJo8NP53Zre0ZhesBMyeQy+xnjTkPZ1yaCTl8+y2o8f/V3zIqCR4qyXRK Lru3T5yXzFpAqRF2pwW0UnOTv4CX4/j22dopbPFs4V2zUESHqqlqhOAUwvl3/4fU/3y1 /dQdzCg+60vkQzmk4x4n0PhHGk21p+DejPFR+nZ/EVjPOOd32zujCj8f/V0+T4XflvHq VE3lLl0li0+nIr84M61TrxJgmMExEpaoblfuYWp++5gc7slmGOiOP6E9bfd0kCUjRIHJ WoUg== X-Received: by 10.194.108.101 with SMTP id hj5mr17728341wjb.6.1357831794349; Thu, 10 Jan 2013 07:29:54 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id dm3sm8805272wib.9.2013.01.10.07.29.52 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 10 Jan 2013 07:29:53 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> Date: Thu, 10 Jan 2013 16:29:51 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <040A16BA-A131-4310-BBB1-BB4B4698C601@gigix.net> References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> To: Geoff Huston X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQl20k0V0uSZl2QVlr5Z9pNYV0CAPMfD6RA837ixZXLuk/YCNKKiY39LX2HUH+7joRak6djm Cc: LISP mailing list list Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 15:29:58 -0000 Hi Geoff, thanks for your feedback, few comments inline. On 9 Jan. 2013, at 21:57 , Geoff Huston wrote: [snip] > It all depends on the philosophy behind experimental allocations. If = we were to assume that each and every single experiment in IPv6, = including all forms of cryptographically generated addresses, all forms = of transitional mechanisms, all forms of address plans and all forms of = routing experiments were each to request an experimental allocation that = was "once and forever" and assumed at the outset that the experiment = would result in comprehensive deployment over a network many many times = larger than today's then I hope you can appreciate that we'd not have = enough space to accommodate each and every experiment's requirements in = the IPv6 space. >=20 Very true and I understands the concerns.=20 But - here you have made the assumption that all "experiments" are equal.=20 - we are not asking to blindly handout prefixes (otherwise we wouldn't = have this discussion in first place) > So the conventional philosophy behind experimental allocations is to = use enough space to allow the experiment to operate and to gain = experience with the technology. If this proves to be useful and taken up = by the industry (and of course this process involves is by no means an = assured outcome - quite the opposite in fact) then its again = conventional to look at how to support the technology within the = existing token distribution framework, or whether its appropriate to = make changes to the token distribution framework. Agreed. > Now obviously some proponents of every experiment see universal = adoption of their particular technology as a given, including some LISP = proponents no doubt. So of course we see many (most?) experiment = proponents proudly proclaim that they are uniquely different and = obviously their particular experiment will naturally result in universal = deployment, so why not assume that happy outcome at the outset of the = experiment and allocate resources at a scale commensurate with their no = doubt certain universal deployment in the not-so-distant future? I am now curious: how many people promoting an experiment in which they = do not believe and do not see wide deployment did you encounter? What I want to say is that is natural that people pushing for new = technology tend to aim high (human nature?). > But wishing it, no matter how enthusiastic you may be personally, does = not make it so. A prudent approach in a space that has seen, and is = likely to see, many experiments proposed, is generally to provision = resources to conduct the experiment at the scale of the experiment and = if the experiment leads to someplace positive then look at what is = required if the technology is to head to larger levels of deployment. >=20 Agreed. >=20 >> The prefix request was written in such a way to reduce renumbering, = rather making the prefix "bigger" so to accommodate the growth. This = would also be an easy change, rather then adding different prefix blocks = just change the length of the existing prefix. >=20 > I am continually confused by the assumptions behind this assertion, = and I've heard this assumption a number of times in the course of the = consideration of this draft. If LISP is so fragile that it requires a = very particular deployed address structure in order to operate, then = frankly we could do precisely the same in BGP and achieve better results = because of avoidance of tunnelling. I find it somewhat strange to see = this adamant view that LISP absolutely requires a uniquely structured = address plan in order to achieve any useful outcome in terms of scalable = routing, at a cost of increased latency and exposure to vagaries of = tunnel behaviour, while at the same time ignoring the simple observation = that if one were to do the same surgery on the address plan in BGP the = outcomes would likely to be just as good if not better, without the = negative factors of map-resolution-related latency and tunnelling. May be (or most probably) I am missing something, but if this was true = this discussion would not take place. BGP would evolve with the growth of the Internet and RFCs 4984 and 6115 = wouldn't exist. >=20 >>=20 >> I think this is something to keep in the future document(s). >=20 > And I strongly disagree with your opinion. If we did this for every = experiment that we encounter that proposes some unique address plan that = is intended to improve security, routing scaleability, = auto-configuration, pre-provisioning, network virtualization, software = programability, etc etc, then once more we are going to find ourselves = contemplating address exhaustion in IPv6 far sooner than anyone would've = rationally anticipated. >=20 Yes, as other suggested we can reserve the prefix for a certain number = of years and then ask the IETF again what to do.=20 ciao Luigi > Geoff >=20 From darlewis@cisco.com Thu Jan 10 09:40:23 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDEBC21F8A4E for ; Thu, 10 Jan 2013 09:40:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.999 X-Spam-Level: X-Spam-Status: No, score=-9.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_23=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eH01FqyW7nh3 for ; Thu, 10 Jan 2013 09:40:22 -0800 (PST) Received: from ams-iport-4.cisco.com (ams-iport-4.cisco.com [144.254.224.147]) by ietfa.amsl.com (Postfix) with ESMTP id EF14A21F8A4B for ; Thu, 10 Jan 2013 09:40:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=20141; q=dns/txt; s=iport; t=1357839621; x=1359049221; h=from:content-transfer-encoding:subject:date:message-id: cc:to:mime-version; bh=5uYSmW5wDh8uex9zSJhvaKjOaFuQqCl895NqDazED6Y=; b=S8eucf0TGJlGfc36GpvaTR++PajfsGwdHwt6htLB4EVOb3PGUCkk9yNH 2Rram+Mkv93nMb2jatWbKnkpFhVah+Y+I/+M3eez+3uch9OZIBON1YSys 7+wBepf/G0ySl1k1NLRkJjHXPr7UCRFulcU9Y2eYIL9x6YgQQHdY2mk3D E=; X-IronPort-AV: E=Sophos;i="4.84,446,1355097600"; d="scan'208";a="11011448" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-4.cisco.com with ESMTP; 10 Jan 2013 17:40:19 +0000 Received: from [10.154.212.12] ([10.154.212.12]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id r0AHeHip005064; Thu, 10 Jan 2013 17:40:18 GMT From: Darrel Lewis Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Date: Thu, 10 Jan 2013 09:40:17 -0800 Message-Id: <4CDB7210-94FB-4DE8-A33E-D760543675B8@cisco.com> To: draft-ietf-lisp-threats@tools.ietf.org Mime-Version: 1.0 (Apple Message framework v1283) X-Mailer: Apple Mail (2.1283) Cc: "lisp@ietf.org list list" Subject: [lisp] LISP Threats Document Review X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 17:40:24 -0000 Authors, Overall this is a really meticulous document- it's clear that the = authors have spent a lot of time thinking about security threats as they = relate to the LISP protocol. Most of my comments below are about = wording and organization, there is only a few technical = questions/comments. =20 Comments to section 1: Introduction: Might want to add a note that the security evaluation is only from the = perspective of use of LISP on the public Internet for the use of multi-homing = (which is inferred=20 by the fact that the LISP specifications are only for that use case). =20= =20 I believe this document would also benefit from some overall statement = regarding the paramaters and posture of the analysis. I.E. what standard are we = evaluating the protocol against? I think this intent is already in the document - = that=20 this document is supposed to see how the LISP protocol might change the = posture of networks that deploy it, vs networks that do not deploy LISP. In addition, section 8 doesn't seem to fit into the flow of the = document. It might=20 to fit better within the xTR threats section=85 having an outline that = covers xTR (control/data), Interworking Components, Mapping System components in = succession. =20 Finally, this document could use a summary - either in each of the = major subsections (control and data plane) or at the end, summarizing the threats and = determining if there are any unmitigated vulnerabilities. The recommendation = section is a good section, but doesn't align exactly with the flow of the draft. So I = found it hard to find if there are any serious un-mitigated threats in the protocol = or implementation. =20 Comments to section 3: On Path Attackers =20 "We do not consider that LISP has to cope with such kind of attackers." = Seems wordy and may hide some meaning. I think you mean that the authors agree = with the LISP protocol's design decision to not consider this type of threat. Maybe = a clear=20 statement like: "As with IP, LISP relies on higher layer cryptography = to secure=20 packet payloads from on path attacks". =20 The second paragraph of this describes in detail something you are not = going to consider (a subset of on-path attackers using time-shifted replay attacks) = something that=20 while interesting I'm not sure is important given that you've already = decided not to consider on-path attacks in the first paragraph. I would consider = deleting - maybe adding a parenthetical reference (including time-shifted replay = attacks) in the first paragraph of section 3. =20 Comments to 4: Off Path Attackers Reference environment =20 Is there a reason why LR1 and LR2 connect to ISP-1 and ISP-2, while = LR3 and LR4=20 connect only to 'Internet'? I don't think it matters but I am just = curious if you did it for a reason. =20 Comments to 5.x) =20 =20 A general comment about section 5 - many of these data plane = black-holing issues are no different than IP - if I corrupt the IP data-plane = (BGP) then I can black-hole traffic. I think its important to note that (like = you did in section 4) where LISP is different or introduces new potential = vulnerabilities. I think the difference from IP+BGP is mainly in its ability to = encapsulate and redirect things to arbitrary destinations. A short statement about = this would=20 help put this section in context. Further down in the section: =20 "A key component of the overall LISP architecture is the EID-to-RLOC Cache. The EID-to-RLOC Cache is the data structure that stores the bindings between EID and RLOC (namely the "mappings") to be used later on." =20 Is a little unclear to me. It might be clearer to say in the second = sentance: =20 " The EID-to-RLOC Cache (also called the Map-Cache) is the data = structure that stores a copy of of the mapping retrieved from a remote ETR's mapping = database via the LISP control plane."=20 =20 So the above may not be great wording either, but the point I am = trying to make=20 is that the map-cache is a copy of the ETR's map-database, which is = generally=20 stored until replaced by a new mapping, or the mapping's TTL expires. =20 In general this document uses the word 'can' to describe a possible = attack=20 scenario. I would think it would be better to say 'could', which is = a minor nit but one that kept coming to mind as I read the document. =20 Comments to section 5.2) =20 This section, located in the data plane, has many repetitive = references to=20 using the control plane to insert information into the map-cache data = structure. When ever I see a list of 8 paragraphs all with similar wording at = the end, (similarly to abive, again, again, etc) :-) I suggest revising these = paragraphs structure. =20 In this specific case. I think its appropriate to say that the ITR = implementation can only, in general, trust what it learns from the control plane. = Compromising=20 the control plane therefor will compromise the integrity and = correctness of any=20 copies made of this control plane's data (the map-cache). You could = then=20 serially list the Bad Things (TM) that could happen once the Control = Plane=20 is compromised. Some further comments on the individual attacks you mention: =20 (Reachability poisoning:) .... "If reachability information is not = verified through the control-plane this attack can be simply achieved by sending a spoofed packet with swapped or all locator status bits reset." =20 "simply achieved" I think is a qualitative analysis that should = not be here - I would reword to say "this attack could be achieved" . =20 Instance ID poisoning: The LISP protocol allows using a 24-bit identifier to select the forwarding table to use on the decapsulating ETR to forward the decapsulated packet. By spoofing this attribute the attacker is able to redirect or blackhole inbound traffic.=20 I think you mean, above, that by spoofing the IID value the attacker might be able to cause traffic to be either be dropped or = decapsulated and then placed into the incorrect VRF at the destination ETR... is = that=20 correct? =20 "If the above listed attacks succeed, the attacker has the means of controlling the traffic." =20 This seems an over-broad summary of the above. I suggest something = like: =20 =20 "If the ITR's map-cache is compromised (likely via compromising the = LISP=20 control plane) it is possible that traffic may be redirected = (encapsulated=20 to the wrong destination) a or dropped by the ITR." =20 It might also be good to make a recommendation that if data plane = redirection is of a critical concern, then deploying some sort of IPSEC or TLS = based security on a layer above LISP (just like you would on top of IP) is a good = idea. =20 Comments on section 5.4.1: =20 "Rate limitation, as described in [I-D.ietf-lisp], does not allow sending high number of such a request, resulting in the attacker saturating the rate with these spoofed packets." =20 The above assumes the implementation of the rate-limiter is primitive = enough to classify map-requests generated by these types of failures to be = classified. and limited, in the same bucket as map-requests generated by = (legitimate)=20 data packets. It might be better to make a recommendation - that = indeed implementations should consider the instigation of the map-request - = a data-packet=20 (and even from which source EID), SMR, reverse cache check failure, = and selectively limit each accordingly. Section 11 has a nice description of this = - and seems to be in contradiction to the claims in the above sections. =20 Comments on section 5.4.2: =20 Maybe it should be noted that Map-Versioning is an optional part of = the LISP protocol and not all implementations support it. "If map-versioning has been = implemented by=20 an xTR..") =20 My comments to section 5.4.1 regarding rate-limiting apply here too, = I think. =20 Comments on section 5.4.4:=20 =20 I think the title should read "instance id' instead of "id instance' =20 Comments on Section 6.1: =20 "The first possible exploitation is the P bit. The P bit is used = to probe the reachability of remote ETRs in the control plane." =20 =20 Usually map-requests with the probe bit sent are sent from the the = ITR's RLOC to=20 the ETR's RLOC. Since sending them via the control plane might not = guarantee that they arrive on the appropriate ETR. =20 " Furthermore, appending Map-Records to Map-Request messages = represents a major security risk since an off-path attacker could generate a (spoofed or not) Map-Request message and include in the Map-Reply portion of the message mapping for EID prefixes that it does not serve." =20 While some sites have chosen to accept those security risks and use = gleaning, I agree that (like your earlier reference to trusting LSBs), gleaning = is=20 best used in more trusted environments, rather than the public = Internet. In=20 addition, I think this paragraph should reference section 6.3. =20 Comments on Section 6.2: =20 "Negative Map-Reply messages are used to support PTR and interconnect the LISP Internet with the legacy Internet." =20 I think you mean to say that Negative map-reply messages are used to = indicate non-lisp prefixes. ITRs can, if needed, be configured to send all = traffic destined for=20 non-lisp prefixes to a Proxy-ETR. =20 "Note, however, that the nonce only confirms that the Map-Reply was sent by the ETR that received the Map-Request. It does not validate the content of the Map-Reply message." =20 While the above seems correct, I had to read the text three times to = make sure (was it originally written by Dino? :-)). It might be clearer = to say=20 "the nonce only confirms that the map-reply received was sent in = response to a map-request sent', it does not validate the contents of that = map-reply. =20 "In addition, an attacker can perform EID-to-RLOC Cache overflow attack by de-aggregating (i.e., splitting an EID prefix into artificially smaller EID prefixes) either positive or negative mappings." =20 I'm not sure I follow the above, in a couple of different ways. = First, it seems you are suggesting that a malicious ETR might fragment its=20= eid-to-rloc database and then instigate traffic to its site, therefor = creating alot of state on the corresponding ITR's map-cache. But this doesn't = follow=20 the theme of the rest of the section which talks about off-path = attackers sending map-replies. Second, you mention that this type of thing=20 could occur with negative mappings. I can only imagine this = happening with negative mappings in the case where an ETR, in conjunction with a = mapping service provider's Map-Server, allowed for such de-aggregation into = the=20 control plane (DDT or ALT), or if a map-resolver was compromised and = crafting specifically bogus information. Neither of these scenarios seems in = scope with the rest of the section. I would recommend removing this = paragraph. =20 Comments on section 6.3: =20 I suggest either an intro or summary (or both) to this very detailed = section=20 that sums up what you want to say, which I think is: =20 "Appending Map-Data into Map-Requests, and then having an ETR glean = that information on receipt of said map-request, bypasses all security protections of = the LISP control plane. It is slightly less evil if used with verification. = Therefor we=20 recommend you do not do it unless you have a damn good reason to do = so, or are in=20 a trusted (read, not the public internet) environment. =20 =20 Comments on section 7: =20 Unfortunately the Reference topology from section 4 doesn't include = interworking components. Some of this might be easier if it did, but I don't = think its a=20 critical issue. =20 "To limit such an issue it is recommended to use the current practice = based on firewalls and ACLs on the machine running the Proxy-ITR service." =20 This seems a little unclear to me, I suggest something like: =20 "To limit Proxy-ITRs being used as relays for attacks, Proxy-ITR = operators are encouraged to implement best practices for data plane access control = on the=20 proxy-ITR and the boarder of the network, that is the edge of the = scope of the Proxy-ITR's announcement of the EID-Prefix." =20 Note that Access Control Lists placed in front of Proxy-ETRs could be = populated with=20 the RLOC's of ITRs that are allowed to use said Proxy-ETR, which will = greatly limit the possibility of traffic being injected by 3rd parties. =20 Comments on Section 8: =20 One general comment, this section has many long paragraphs, and might = benefit=20 from some additional hierarchy. =20 "In this section, we discuss the threats that could be caused by malicious xTRs." =20 This section seems to be somewhat contradicting section 5.1, which = implies=20 that compromised xTRs are out of scope. If I understand your intent, I think you mean to say that you want to analyze how the LISP = architecture=20 handles parts of it being compromised. I think there is a=20 disconnect in the flow of the document - to this point it has been a=20= thorough analysis of the protocol, and now it becomes a review of the = LISP=20 architecture's operational security posture. Now I definitely think = a=20 discussion like this belongs in this document, but I think further=20 introductory text could frame this either in the introduction or via=20= organizing the outline differently. In fact, I would consider=20 changing the wording of the introduction - instead of having two main = parts,=20 the control and data plane, this document has two main parts - a = protocol=20 security analysis and a system security analysis. =20 Ok, some specific comments about this section's text follows: =20 "Malicious xTRs are probably the most serious threat to the LISP control plane from a security viewpoint." =20 I might suggest a bit more detail here maybe something talking about why its so important, and why any shared control plane is easiest to attack from within the system (exactly like BGP). =20 "The impact of a compromised lisp control plane can be severe, and the most effective way to attack any multi-organizational control=20 plane is from within the system itself" =20 Later in section 8: =20 "The current LISP specification briefly discusses the overclaiming problem [I-D.ietf-lisp], but does not propose any specific solution to solve the problem. Nevertheless, [I-D.ietf-lisp-sec] proposes a solution to protect LISP against overclaiming attacks under the assumption that the mapping system can be trusted." =20 Not sure if the above commentary adds anything to the document. The = over claiming threat was discussed in Stockholm and Hiroshima, and determined to be = important enough that a detailed proposal was developed as a separate draft. = In my=20 opinion it solves the problem it was designed for elegantly and = comprehensively. (also, what cryptographic solution to security doesn't have a trust = anchor?) Later in section 8: =20 "An important point to note about this flooding attack is that it reveals a limitation of the LISP architecture. A LISP ITR relies on the received mapping and possible reachability information to select the RLOC of the ETR that it uses to reach a given EID or block of EIDs. However, if the ITR made a mistake, e.g., due to misconfiguration, wrong implementation, or other types of errors and has chosen a RLOC that does not serve the destination EID, there is no easy way for the LISP ETR to inform the ITR of its mistake. A possible solution is to enforce an ETR to perform a reachability test with the selected ITR as soon as there is LISP encapsulated traffic between the two." =20 As you say, an ITR can make a reachability test (probe) to an ETR as = soon as it receives a map-reply (in fact our implementation does this). = Also an ETR that receives traffic by mistake by sending a Solicit = Map-Request back to the sending ITR. So i strongly disagree with the wording = above. =20 =20 Comments on section 9: =20 Unfortunately, experience with BGP on the global Internet has shown that BGP is subject to various types of misconfiguration problems and security attacks. The SIDR working group is developing a more secure inter-domain routing architecture to solve this problem ([RFC6480]). And yet, in-spite of this, BGP manages to do quite well on the global internet for tens of thousands of organizations and hundreds of=20 thousands of routes. SIDR comes at a complexity and operational cost which, in the case of ALT, might be low enough to see deployment. In short, there is no free lunch. The ALT would be at least as secure as the current global BGP infrastructure - and isn't that the bar we are trying to meet to see LISP be deployable? =09 Comments on Section 10.1. Map Server: =09 =09 "Similarly to the previous case, a malicious ETR can register an invalid EID-prefix to attract Map-Requests or to redirect them to a target to mount a DoS attack. To avoid this kind of attack, the Map Server must check that the prefixes registered by an ETR belong to that ETR. One method could be to manually configure EID-prefix ranges that can be announced by ETRs." =20 In every MS implementation I'm aware of, the MS strictly checks the=20= EID prefix being registered against a static configuration. We=20 use operational techniques to validate the ownership of the prefix by the operator of the ETR. =20 =09 Comments on section 10.2. Map Resolver: =09 While it is allowed within the architecture to have a caching = Map-Resolver to my knowledge one has not been implemented. The reason is that, aside from security, cache coherency in an environment that can = support fast moves (like LISP-MN) is very hard. So some mention of this might be good - its not like we have a mixture of caching and non = caching resolvers deployed... =09 =09 Comments on section 11 =09 This is a really nice set of recommendations, however, it might be = nice=20 to cross reference the recommendations with the sections (gleaning, = etc). that they apply to. For example, the rate limiting section applies = to 5.4.1 etc. =09 I think this would go along way to my comment in the beginning that = in=20 this document its hard to get a concise list of threats and = recommendations for their mitigation, and any outstanding threats that need further = work. =09 "In order to mitigate flooding attacks it would be worth consider developing secure mechanisms to allow an ETR to indicate to an ITR that it does not serve a particular EID or block of EIDs." =20 We have this, its called an SMR :-) =09 =09 -Darrel =20 =20 =20 =20 =20 =20 =20 =20 =20 =20= From vermagan@cisco.com Thu Jan 10 14:50:54 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D10D421F877B for ; Thu, 10 Jan 2013 14:50:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 797Ok5FvCntV for ; Thu, 10 Jan 2013 14:50:52 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id A9CA821F8589 for ; Thu, 10 Jan 2013 14:50:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6885; q=dns/txt; s=iport; t=1357858251; x=1359067851; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=umefGuV7djJqbTLMl0mHpo4t6csKx21e/7XtomkalWE=; b=bVdqinyciR+9g/7LOumPsqRj/C0GNwqmIxgL1jhNHPQ3Xc4zIM11V9RU 244dsUrgh6OSNNqX7RJ1Q2OZ6ngu0e7fN1oZUJH/QZICLY3NsnqFN0JBp qCAo1bcb+wRQbCAkCB+fW3eiCsEueTfEzFRYlAZL+yFy6+jfefzuA55s2 w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAKxE71CtJV2Z/2dsb2JhbABEvXUWc4IgAQQ6PxIBCBIQFEIXDgIEDg0Th360ZIxyg0xhA5JXk3yCdYFnPQ X-IronPort-AV: E=Sophos;i="4.84,447,1355097600"; d="scan'208";a="161157901" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-7.cisco.com with ESMTP; 10 Jan 2013 22:50:51 +0000 Received: from xhc-rcd-x15.cisco.com (xhc-rcd-x15.cisco.com [173.37.183.89]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r0AMopeq025453 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 10 Jan 2013 22:50:51 GMT Received: from xmb-aln-x07.cisco.com ([169.254.2.12]) by xhc-rcd-x15.cisco.com ([173.37.183.89]) with mapi id 14.02.0318.004; Thu, 10 Jan 2013 16:50:50 -0600 From: "Vina Ermagan (vermagan)" To: "draft-ietf-lisp-threats@tools.ietf.org" Thread-Topic: [lisp] LISP Threats Document Review Thread-Index: AQHN2NCo/+7NoTChl0qjTzxxCnJm85gWynWAgACJagCAATPcAIAAWvmAgAQy9oCAAIR4AIAlnJIA Date: Thu, 10 Jan 2013 22:50:50 +0000 Message-ID: <69FEC2DE9674CF43AD8395215E83B37A01643993@xmb-aln-x07.cisco.com> In-Reply-To: <50CF4840.8060303@joelhalpern.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.4.120824 x-originating-ip: [10.154.215.210] Content-Type: text/plain; charset="us-ascii" Content-ID: <5F0487E0E7591E409B8C511E4EA120BE@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "lisp@ietf.org" Subject: Re: [lisp] LISP Threats Document Review X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Jan 2013 22:50:54 -0000 Hi All, Some general comments, followed by a few more detailed/minor suggestions. Thanks to the authors for a very thorough analysis. Best, Vina =20 General Comments: - Abstract: Draft reads: "This document analyzes the threats against the security of the Locator/Identifier Separation Protocol (LISP) and proposes a set of recommendations to mitigate some of the identified security risks." Suggestion: This leaves the reader unclear about what the security state would be after following the recommendations by this draft. Adding a sentence such as the following is helpful: "By following the recommendations of this draft a LISP deployment can achieve a security level that is comparable to the existing Internet architecture." - 6.Control Plane Threats Section 6 talks about control plane threats. A reference to LISP-SEC in this section seems appropriate. The first 5-6 sections of the threat analysis draft were originally written before the LISP-SEC draft was introduced and adopted by the WG (and hence they were very much impact-full). It would be very helpful if the current version however points out the security properties LISP-SEC brings to LISP, for instance adding a sentence to 6.2 to this effect: "By enabling LISP-SEC Map-Reply based threats are alleviated.". - 5.2.1. EID-to-RLOC Cache Poisoning The draft is pointing out that the list of cache poisoning examples here are mostly enabled by (1) gleaning and (2) attacking the control plane. >From attacks listed in the control plane in section 6, (a) Map-Reply based attacks as well as (b) adding Map-Reply data to a Map-Request can lead to these cache poisoning attacks. From these, Map-Reply based attacks are alleviated by adopting LISP-SEC. It may be very helpful to bring this information out by adding a summary at the end of this subsection noting that:=20 "By disabling gleaning and piggybacked Map-Replies, and enabling LISP-SEC, most (if not all) of the cache poisoning threats are mitigated." - 11. Suggested Recommendations Many of the recommendations here are regarding removing risky optimizations such as gleaning, piggybacked Map-Replies, etc. Depending on the security requirements of a specific LISP deployment, these risks may be acceptable. To clarify this, it may be helpful to add a paragraph in the beginning of this section to the following effect: "Different deployments of LISP may have different security requirements. The recommendations in this section mitigate the threats enumerated in this document." =20 - 11. Suggested Recommendations - Last paragraph, page 27: Page 27 reads: "In [I-D.ietf-lisp], there is no mechanism that allows an xTR to verify the validity of the content a Map-Reply message that it receives. Besides the attacks discussed earlier in the document, a time-shifted attack where an attacker is able to modify the content of a Map-Reply message but then needs to move off-path could also create redirection attacks. The nonce only allows an xTR to verify that a Map-Reply responds to a previously sent Map-Request message. In order to allow verifying the validity and integrity of bindings between EID-Prefixes and their RLOCS solutions proposed in [I-D.saucez-lisp-mapping-security] and [I-D.ietf-lisp-sec] should be deployed. Having such kind of mechanisms would allow ITRs to ignore non-verified mappings, thus increasing security." I think the last sentence can be much stronger. Having LISP-SEC and lisp-mapping-security in place would alleviate all the threats raised in this paragraph. Detailed/minor comments: 1. Introduction Draft reads:=20 "The document is composed of two main parts: the first discussing the LISP data plane; while the second discussing the LISP control-plane." Suggestion: A third, and important, part is the Recommendations part. 5.2.2. EID-to-RLOC Cache Overflow It may be very helpful if a summary paragraph is added pointing out that "Disabling gleaning and enabling LISP-SEC would protect against the threats enumerated in this section." 5.3 Last paragraph of this section is more of a suggestion/recommendation. Same for last paragraphs of section 7. I think it would be helpful in general if the recommendation information through-out the draft is called out , perhaps by adding a Mitigations/Recommendations label to the beginning of such paragraphs. 8. Threats with Malicious xTRs Draft reads: "The current LISP specification briefly discusses the overclaiming problem [I-D.ietf-lisp], but does not propose any specific solution to solve the problem. Nevertheless, [I-D.ietf-lisp-sec] proposes a solution to protect LISP against overclaiming attacks under the assumption that the mapping system can be trusted." The last sentence seems a little vague. I suggest changing it to something like this: " By enabling [I-D.ietf-lisp-sec] overclaiming attacks are mitigated under the assumption that the mapping system can be trusted." 10.1 Map-Server Page 24 reads:=20 "Similarly to the previous case, a malicious ETR can register an invalid EID-prefix to attract Map-Requests or to redirect them to a target to mount a DoS attack. To avoid this kind of attack, the Map Server must check that the prefixes registered by an ETR belong to that ETR. One method could be to manually configure EID-prefix ranges that can be announced by ETRs." This is already done today and is explained in the Mapping System draft, right? Perhaps this paragraph can be removed. 10.2 Map-Resolver Page 25 reads: "A possible way to limit the above-described attacks is to introduce strong identification in the Map-Request/Map-Reply by using the Encapsulated Control Message with authentication enabled." Are you referring to LISP-SEC here? Calling it out may be helpful. 11. Suggested Recommendations Title of this section seems repetitive. "Security Recommendations" or just "Recommendations" may be better alternatives. 11. Page 27 reads:=20 "=10=10In order to allow verifying the validity and integrity of bindings between EID-Prefixes and their RLOCS solutions proposed in [I-D.saucez-lisp-mapping-security] and [I-D.ietf-lisp-sec] should be deployed. Having such kind of mechanisms would allow ITRs to ignore non-verified mappings, thus increasing security." A minor technical question: is it ok to use "should" in "In order to allow verifying the validity and integrity of bindings between EID-Prefixes and their RLOCS solutions proposed in [I-D.saucez-lisp-mapping-security] and [I-D.ietf-lisp-sec] should be deployed. ", considering that [I-D.saucez-lisp-mapping-security] is an independent draft? Perhaps should is too strong, "could" may be a better choice here? From rogerj@gmail.com Thu Jan 10 21:35:10 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 935E621F88EA for ; Thu, 10 Jan 2013 21:35:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.3 X-Spam-Level: X-Spam-Status: No, score=-2.3 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AAwe3uFaADBz for ; Thu, 10 Jan 2013 21:35:06 -0800 (PST) Received: from mail-wi0-x22a.google.com (mail-wi0-x22a.google.com [IPv6:2a00:1450:400c:c05::22a]) by ietfa.amsl.com (Postfix) with ESMTP id C182521F879D for ; Thu, 10 Jan 2013 21:35:05 -0800 (PST) Received: by mail-wi0-f170.google.com with SMTP id hq7so1753751wib.1 for ; Thu, 10 Jan 2013 21:35:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type; bh=JxdmFIJxarV4w5gp9K7dxjJUhL5wKCFEzf116StLQOk=; b=bPtmqqg5syuNtcvJ1ubzrc4q08QZYbc8ZW1Wa10wk6yhjaM3lqe1TCobYN2NDKuPPf FBchVU83TC5BU3o3gNr7fxBSfJcEFTa8vV2a3PUrBbiyEkJS6FGD3FrOigaEXWWzdJ5Z 4J4wnnZBsj2vgO3zLVR/jATAc9aySqRls5IDkzF7NW6dlCa9gyZmaV3U/2YDou5i0Jwu 7KQoUJHQr7lsVWVgpfOZ/isKwmSFjH8DbGuZlLrHb0gmP+iJcaKWvQuHSobPevmB56Qk G7J7BA4vECgViHKGU6ijXQcB7Gf4rMRHXgd2BikjbivyfpQcV6t44PG0kOt6u+RE4CIM kFeg== MIME-Version: 1.0 X-Received: by 10.180.82.69 with SMTP id g5mr13415847wiy.21.1357882504704; Thu, 10 Jan 2013 21:35:04 -0800 (PST) Received: by 10.217.44.74 with HTTP; Thu, 10 Jan 2013 21:35:04 -0800 (PST) In-Reply-To: <20130110143730.99A6A18C0D1@mercury.lcs.mit.edu> References: <20130110143730.99A6A18C0D1@mercury.lcs.mit.edu> Date: Fri, 11 Jan 2013 06:35:04 +0100 Message-ID: From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Noel Chiappa Content-Type: text/plain; charset=ISO-8859-1 Cc: lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 05:35:11 -0000 On Thu, Jan 10, 2013 at 3:37 PM, Noel Chiappa wrote: > > From: Geoff Huston > > So of course we see many (most?) experiment proponents proudly proclaim > > that they are uniquely different and obviously their particular > > experiment will naturally result in universal deployment, so why not > > assume that happy outcome at the outset of the experiment and allocate > > resources at a scale commensurate > > Sorry, but I don't think that's what's happening here (at least, not in a > simple form). > > The thing that's different here is that (in my limited understanding of how > this space is to be used) the _code_ is different depending on whether the > destination is in this space or not. So there are major, real costs to be > paid in changing the block of space used, later on. Its those costs we are > interested in avoiding, _not_ just 'let's not have to come back and allocate > more space later'. > > (And the reservation/allocation distinction above is my attempt for all sides > have their cake here, and eat it too.) In section "3. Rationale and Intent" in the draft there is this part: The EID Block will be used only at configuration level, it is recommended not to hard-code in any way the IPv6 EID Block in the router hardware. " I understood it that it will never be put directly into code, just in the configuration. That's why I suggested to change this from "recommanded not to hard-code in any way" to "MUST NOT be hard-coded in any way" Still your argument are valid, it's hard to change it later on but it's doable. -- Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From rogerj@gmail.com Thu Jan 10 21:46:47 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1530E21F8518 for ; Thu, 10 Jan 2013 21:46:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8U5FD18FUVF for ; Thu, 10 Jan 2013 21:46:45 -0800 (PST) Received: from mail-wg0-f52.google.com (mail-wg0-f52.google.com [74.125.82.52]) by ietfa.amsl.com (Postfix) with ESMTP id A7D7021F853C for ; Thu, 10 Jan 2013 21:46:42 -0800 (PST) Received: by mail-wg0-f52.google.com with SMTP id 12so658054wgh.7 for ; Thu, 10 Jan 2013 21:46:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=iEHxQ8U9OSPPEnqOHgZF1/UTEpUEYWoU+yNUhYd0EDk=; b=C3GGjuCDJN86vtrX8lQ07ZdidME70mqSwWufrKKT8zn8tvAnShaapJ9pPjrO66ITei hKXZOIYJTIUHEow6jK0G+TfUFV44yB2khgg8ogAHfSk4jPl0PP0V+nDsf6VcSHiqGDpv 5LSiAXPQsNRPrX0juktXOxUA5FqNaqSkjuhtRighZ1V1q2PT/X9nZMEG/MrDYyhskisc nnYhPEnRzoF0r3JSqaeJSigiz+EnN/dL2mziTQ6ihkEFaNLy5SsPwYvL1IpufeBD79Xw rG7hDSgKFf5NHFVvmzDcGhpAZyzmhlzoKyUmzQro6jUJAqs76M3nlqHlaqNdGld/oOAP 5ONw== MIME-Version: 1.0 Received: by 10.180.101.99 with SMTP id ff3mr13439197wib.21.1357883201420; Thu, 10 Jan 2013 21:46:41 -0800 (PST) Received: by 10.217.44.74 with HTTP; Thu, 10 Jan 2013 21:46:41 -0800 (PST) In-Reply-To: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> References: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> Date: Fri, 11 Jan 2013 06:46:41 +0100 Message-ID: From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: SM Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 05:46:47 -0000 On Thu, Jan 10, 2013 at 9:17 AM, SM wrote: > At 13:02 09-01-2013, Roger J=F8rgensen wrote: >> >> I have tried to write down one way to get this done in a way that >> handle most aspect. First a summary since this is a very long email. >> The size of the address blocks are a suggestion from my side. > > > I'll make the counter-arguments. excellent!:-) >> * we reserve a /12 >> * LISP EID block are marked as EXPERIMENTAL with a time limit, let's >> say 7year, until 10.October 2020 (not random picked, but 10.10.2020 >> seems nice). >> * set aside one /16 for each RIR >> * out of this /16 _only_ upto /26 split into /32 (64 for each RIR >> region) can be can be handed out and announced into the global routing >> table. If someone need something more than /32 they should really come >> up with a very good reasons now or just ask for regular RIR space >> * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL >> was a success or a failure. >> ** If failure the entire address block are taken back before 31.Nov >> 2020, filtering etc like 6bone. >> ** If a success, we remove the 64 /32 (/26) limit and each RIR can >> hand out LISP EID space from the above /12 in their region, much like >> regular space. >> * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity >> keep track of the above /32 and a LISP-EID-wg decide and make up the >> procedures for how this should be used. > > > This would be a long-lived experiment. It rarely works well in practice = as > the people who set it up might not be there to clean up the mess. It's n= ot > a huge problem to ask for some IP address space to reserved. I am ignori= ng > a few details which might point to that being a problem. I agree, in practice this happen too often, which is why I suggest this feature should be labeled EXPERIMENTAL but stable, or something similiar and explain why. That can also hurt deployment so we have to be very very clear on what we mean with EXPERIMENTAL here. > The "if someone needs more space" makes it a IP address allocation proble= m. > Someone will have to deal with that request. The IETF does not do that. = I > pointed to "operational models" in an unrelated draft so that people can > have at least a little information about the options and decide which opt= ion > they prefer. I prefer to avoid a 6to4 scenario as making anything histor= ic > is a recipe for debate. I don't like legacy space because I am creating = a > problem for someone else to sort out. In the beggining only a limited piece of that reserved /12 will be used, if we divide it into regions or not that's no big deal, point being it's limited affect on the _global_ routing table since those /32 will have to be announced there. I mention RIR regions to get some geographical diversity in the experiment, not being EU/US region alone. And about handing out those /32, there will be a set of guidelines telling the RIR/entinty managing this in practice on how they should deal with it, in all practical matter the LISP-EID-wg will have to decide on which ISP should be let into the experiment now in the begging to make sure we actual get an experiment. Also - only a limited part of the /12 will be used, if that space are empty within lets say 5 years I will claim this being a success and at which point LISP-EID-wg/LISP-wg need to a discussion and decide, should the restriction being removed or should we call this experiment a failure. In the end it's IETF that will have to "approve" it. > At 13:37 09-01-2013, Joel M. Halpern wrote: > >> From what I understand of LISP, and speaking only as an individual >> participant, it is not at all obvious tome that the RIRs have an inheren= t >> role in LISP EID allocation. LISP EIDs are not regional in any meaningf= ul >> sense. > > > The reality is that RIRs are currently managing IPv6 address allocations. > It does not bother me if IETF participants decide to give some other enti= ty > the responsibility to do the work as long as there is a clear explanation= . I think we should use the RIRs as long as it's possible, but of course, this space LISP work in general do question how the future should be. BUT that's an ENTIRELY different discussion. Right now we're using the tools and functions available out there and it would be stupid to not relay on and reuse the experience and knowledge sitting within the RIR community. > It is a lot of work to do an analysis of the various alternatives and fig= ure > out the better alternative. The proposal made by Roger J=F8rgensen is a = step > forward. Geoff Huston explained some stuff. I think that his comments m= ay > have been misunderstood. Brian Carpenter pointed to some interesting > operational questions that have been raised or implied. I may be missing > them as I don't have a clear sense of how the working group wants LISP to > work. That's a excellent point, how do we want LISP to work... I think I understand it but I have no problem to see that it's unclear. I guess that's a direct request to this WG, make sure that part is communicated better. However, it's still in the early phase of the protocol so understandable that it's unclear to. --=20 Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From sm@resistor.net Fri Jan 11 01:59:10 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DE2521F886F for ; Fri, 11 Jan 2013 01:59:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.437 X-Spam-Level: X-Spam-Status: No, score=-102.437 tagged_above=-999 required=5 tests=[AWL=-0.138, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G0MGL86eaVBc for ; Fri, 11 Jan 2013 01:59:09 -0800 (PST) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id E1F1821F885E for ; Fri, 11 Jan 2013 01:59:06 -0800 (PST) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) (authenticated bits=0) by mx.elandsys.com (8.14.5/8.14.5) with ESMTP id r0B9wsue011168; Fri, 11 Jan 2013 01:59:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1357898342; bh=SMbH8A5LslWHksQ6RmC6uOqn2EAB/aP4hHA7fYamhU0=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=YuPMq3eF6ThS5+u/5++XlnM9sQei7rSVnFBdDlMuC//RUwMEipGVlH7UUo4wOUCne qXu+F5XOQP/HOj7bow2kEg/rjwuLUAeXv4IcNohWndkTlYjzrOUNmfFdv1XZ2neRIC PZ+pMour5FqdwKuRKaKPX63TH2020DysFjcE/Brk= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1357898342; i=@resistor.net; bh=SMbH8A5LslWHksQ6RmC6uOqn2EAB/aP4hHA7fYamhU0=; h=Date:To:From:Subject:Cc:In-Reply-To:References; b=RxTFKc0hsOMyqFathLQM2Xa0nhwoXRIpdtLmBYqB86UYxiJOkOc3MyZfD6AK3GKQk m7Ai90icsDSGKAYdaOGuWWulVQh4htVy0mMdaxb/93I8iC4Xv2JfrZZtNTcYrauJt4 d6QjngNStHUEF07fKzOdtW7yeymaUWqFJ6xYuq08= Message-Id: <6.2.5.6.2.20130110235150.0b09f598@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Fri, 11 Jan 2013 01:58:40 -0800 To: Roger =?iso-8859-1?Q?J=F8rgensen?= From: SM In-Reply-To: References: <6.2.5.6.2.20130109220041.0b312f40@resistor.net> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable Cc: lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 09:59:10 -0000 Hi Roger, At 21:46 10-01-2013, Roger J=F8rgensen wrote: >I agree, in practice this happen too often, which is why I suggest >this feature should be labeled EXPERIMENTAL but stable, or something >similiar and explain why. >That can also hurt deployment so we have to be very very clear on what >we mean with EXPERIMENTAL here. There was an provider in the Far East leaking out=20 IPv4 shared address space and there was a=20 provider in the Far West who did not follow the=20 guidance in the specification. My guess is that=20 the label will be ignored. In the IETF even if=20 you are very very clear on what you mean someone=20 will find a way around that. :-) >In the beggining only a limited piece of that reserved /12 will be >used, if we divide it into regions or not that's no big deal, point >being it's limited affect on the _global_ routing table since those >/32 will have to be announced there. I mention RIR regions to get some >geographical diversity in the experiment, not being EU/US region >alone. > >And about handing out those /32, there will be a set of guidelines >telling the RIR/entinty managing this in practice on how they should >deal with it, in all practical matter the LISP-EID-wg will have to >decide on which ISP should be let into the experiment now in the >begging to make sure we actual get an experiment. As a side note, I asked for somebody to point me=20 to the IANA policy mentioned in the draft (or=20 during previous discussions). Nobody did=20 that. A long time ago this would be a matter of=20 "please reserve a /12" without any hassle. Let's=20 say LISP is successful. There will be a time=20 when that /12 is not enough. Then what? I don't think that it is a good idea for the IETF=20 to get into RIR policy in a draft. The only=20 reason to call all this an experiment (even=20 though it is actually an experiment) is to get=20 the IPv6 address space for free. I don't think=20 that there would be many hurdles in getting that=20 if someone puts effort into it. A simple path is to say so and ask nicely.= :-) Regards, -sm P.S. The LISP WG did ask nicely. Maybe there=20 wasn't a thorough discussion of the issues.=20 From wesley.george@twcable.com Fri Jan 11 09:02:12 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 177B921F86EA for ; Fri, 11 Jan 2013 09:02:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.313 X-Spam-Level: X-Spam-Status: No, score=-0.313 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, HELO_EQ_MODEMCABLE=0.768, HOST_EQ_MODEMCABLE=1.368, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sWHJ47KzQZ6U for ; Fri, 11 Jan 2013 09:02:10 -0800 (PST) Received: from cdpipgw02.twcable.com (cdpipgw02.twcable.com [165.237.59.23]) by ietfa.amsl.com (Postfix) with ESMTP id 7924C21F86D2 for ; Fri, 11 Jan 2013 09:02:10 -0800 (PST) X-SENDER-IP: 10.136.163.15 X-SENDER-REPUTATION: None X-IronPort-AV: E=Sophos;i="4.84,453,1355115600"; d="scan'208";a="10287260" Received: from unknown (HELO PRVPEXHUB06.corp.twcable.com) ([10.136.163.15]) by cdpipgw02.twcable.com with ESMTP/TLS/RC4-MD5; 11 Jan 2013 12:01:47 -0500 Received: from PRVPEXVS15.corp.twcable.com ([10.136.163.78]) by PRVPEXHUB06.corp.twcable.com ([10.136.163.15]) with mapi; Fri, 11 Jan 2013 12:01:49 -0500 From: "George, Wes" To: =?iso-8859-1?Q?Roger_J=F8rgensen?= , Terry Manderson , LISP mailing list list Date: Fri, 11 Jan 2013 12:01:47 -0500 Thread-Topic: draft-ietf-lisp-eid-block-03.txt back in workgroup Thread-Index: Ac3urJ/t94Uvoyf9RZ6n962O60u2mgBbkdDA Message-ID: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: George Michaelson , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 17:02:12 -0000 > From: Roger J=F8rgensen [mailto:rogerj@gmail.com]> > > * we reserve a /12 > * LISP EID block are marked as EXPERIMENTAL with a time limit, let's say > 7year, until 10.October 2020 (not random picked, but 10.10.2020 seems > nice). > * set aside one /16 for each RIR > * out of this /16 _only_ upto /26 split into /32 (64 for each RIR > region) can be can be handed out and announced into the global routing > table. If someone need something more than /32 they should really come > up with a very good reasons now or just ask for regular RIR space > * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL was > a success or a failure. > ** If failure the entire address block are taken back before 31.Nov > 2020, filtering etc like 6bone. > ** If a success, we remove the 64 /32 (/26) limit and each RIR can hand > out LISP EID space from the above /12 in their region, much like regular > space. > * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity > keep track of the above /32 and a LISP-EID-wg decide and make up the > procedures for how this should be used. [WEG] This would address my concerns with the requested reservation and all= ocation. The one thing I might add is support for a smaller initial reserva= tion and subtending allocation(s) that were reserved and allocated in such = a way that they could be grown by simply changing the bitmask if that ends = up being necessary. I would think that the size of block(s) needed would be= something that could be much more effectively evaluated as the experiment = moves forward and we have a better sense for how the space gets used, and a= t the conclusion of the experiment, if there is success, there will be a cl= ear justification for whatever block is deemed necessary. Thanks Wes George This E-mail and any of its attachments may contain Time Warner Cable propri= etary information, which is privileged, confidential, or subject to copyrig= ht belonging to Time Warner Cable. This E-mail is intended solely for the u= se of the individual or entity to which it is addressed. If you are not the= intended recipient of this E-mail, you are hereby notified that any dissem= ination, distribution, copying, or action taken in relation to the contents= of and attachments to this E-mail is strictly prohibited and may be unlawf= ul. If you have received this E-mail in error, please notify the sender imm= ediately and permanently delete the original and any copy of this E-mail an= d any printout. From heinerhummel@aol.com Fri Jan 11 15:00:18 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 410A721F899F for ; Fri, 11 Jan 2013 15:00:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.065 X-Spam-Level: X-Spam-Status: No, score=-3.065 tagged_above=-999 required=5 tests=[AWL=-0.467, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mJujKtUNLl2S for ; Fri, 11 Jan 2013 15:00:09 -0800 (PST) Received: from imr-ma03.mx.aol.com (imr-ma03.mx.aol.com [64.12.206.41]) by ietfa.amsl.com (Postfix) with ESMTP id 26ABD21F8855 for ; Fri, 11 Jan 2013 15:00:09 -0800 (PST) Received: from mtaomg-db03.r1000.mx.aol.com (mtaomg-db03.r1000.mx.aol.com [172.29.51.201]) by imr-ma03.mx.aol.com (Outbound Mail Relay) with ESMTP id 7A2021C000056; Fri, 11 Jan 2013 18:00:08 -0500 (EST) Received: from core-dqe004c.r1000.mail.aol.com (core-dqe004.r1000.mail.aol.com [172.29.162.77]) by mtaomg-db03.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 41C03E000086; Fri, 11 Jan 2013 18:00:08 -0500 (EST) References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> To: gih@apnic.net, ggx@gigix.net In-Reply-To: <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> X-MB-Message-Source: WebUI Received: from 178.26.192.122 by webmail-d093.sysops.aol.com (205.188.255.4) with HTTP (WebMailUI); Fri, 11 Jan 2013 18:00:07 -0500 MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFBE6688EA22FA_166C_31BF0_webmail-d093.sysops.aol.com" X-Mailer: AOL Webmail 37288-STANDARD Message-Id: <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Fri, 11 Jan 2013 18:00:08 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1357945208; bh=V0LacCqtcUeW097zCvwYfkhZEqDw1ihSgWlXwVY05d0=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=WKAHVueBKMzImUHX3XIessVO6WfkioDNbzbWccy6j3TC3C3z3HHfJC/YiVWu0Y8fn iQLumeZ+LeqCzwQvlaTf0eAEFkF7KmtagtpgzHkdBqtZzUT2vlAjxjTys57mDxSlZt IhrhP91GkLKB1xDzfeaLX8IVqPpUHcN5DingfTkM= X-AOL-SCOLL-SCORE: 0:2:370703200:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d33c950f09978304e Cc: lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Jan 2013 23:00:22 -0000 This is a multi-part message in MIME format. ----------MB_8CFBE6688EA22FA_166C_31BF0_webmail-d093.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Well spoken. Heiner=20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Geoff Huston An: Luigi Iannone Cc: LISP mailing list list Verschickt: Mi, 9 Jan 2013 9:57 pm Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: > Hi Geoff, >=20 > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >=20 >>=20 >> On 08/01/2013, at 9:34 PM, SM wrote: >>=20 >>> Hi Terry, >>> At 22:03 07-01-2013, Terry Manderson wrote: >>>> However, before the WG starts to rework the document, I would first li= ke to >>>> canvass the LISP WG as to your opinions. >>>>=20 >>>> 1) Should we, as a WG, continue to work on this item? Is it=20 necessary/useful >>>> for LISP? >>>=20 >>> The work item seems useful. >>>=20 >>>> 2) If so, what direction should the WG take this document so that the = LISP >>>> experiment is best served? >>>=20 >>> The problem is justifying the IP address space allocation and explainin= g how=20 it will be managed. >>>=20 >>> My guess is that the working group took an ORCHID approach (copy and pa= ste=20 :-)). I suggest dropping the idea of calling it a very large-scale experim= ent. =20 The unstated problem is about politics. I suggest taking a look at=20 draft-lear-lisp-nerd-09. It contains a good discussion of operational mode= ls=20 and the trade-offs. >>>=20 >>=20 >> I was on the IAB at the time that ORCHID was being considered - the issu= e=20 there was to find a balance between enough bits for acceptable crypto and b= asic=20 conservatism in the absolute size of the request - at the time a /28 appear= ed to=20 be a suitable compromise considering that this was an experiment. >>=20 >> Given that this is an experiment and that the transition from experiment= to=20 widespread deployment may well entail renumbering (as was the case with the= =20 6bone) then one approach may well be to use a modest prefix that has a limi= ted=20 capacity that would force renumbering in the shift from experiment to wides= pread=20 adoption, if such occurs in the future. >>=20 >=20 > I may be mistake but I do not see the renumbering need in the LISP case. It all depends on the philosophy behind experimental allocations. If we wer= e to=20 assume that each and every single experiment in IPv6, including all forms o= f=20 cryptographically generated addresses, all forms of transitional mechanisms= , all=20 forms of address plans and all forms of routing experiments were each to re= quest=20 an experimental allocation that was "once and forever" and assumed at the o= utset=20 that the experiment would result in comprehensive deployment over a network= many=20 many times larger than today's then I hope you can appreciate that we'd not= have=20 enough space to accommodate each and every experiment's requirements in the= IPv6=20 space. So the conventional philosophy behind experimental allocations is to use en= ough=20 space to allow the experiment to operate and to gain experience with the=20 technology. If this proves to be useful and taken up by the industry (and o= f=20 course this process involves is by no means an assured outcome - quite the= =20 opposite in fact) then its again conventional to look at how to support the= =20 technology within the existing token distribution framework, or whether its= =20 appropriate to make changes to the token distribution framework. Now obviou= sly=20 some proponents of every experiment see universal adoption of their particu= lar=20 technology as a given, including some LISP proponents no doubt. So of cours= e we=20 see many (most?) experiment proponents proudly proclaim that they are uniqu= ely=20 different and obviously their particular experiment will naturally result i= n=20 universal deployment, so why not assume that happy outcome at the outset of= the=20 experiment and allocate resources at a scale commensurate w ith their no doubt certain universal deployment in the not-so-distant futu= re?=20 But wishing it, no matter how enthusiastic you may be personally, does not = make=20 it so. A prudent approach in a space that has seen, and is likely to see, m= any=20 experiments proposed, is generally to provision resources to conduct the=20 experiment at the scale of the experiment and if the experiment leads to=20 someplace positive then look at what is required if the technology is to he= ad to=20 larger levels of deployment. =20 > The prefix request was written in such a way to reduce renumbering, rathe= r=20 making the prefix "bigger" so to accommodate the growth. This would also be= an=20 easy change, rather then adding different prefix blocks just change the len= gth=20 of the existing prefix. I am continually confused by the assumptions behind this assertion, and I'v= e=20 heard this assumption a number of times in the course of the consideration = of=20 this draft. If LISP is so fragile that it requires a very particular deploy= ed=20 address structure in order to operate, then frankly we could do precisely t= he=20 same in BGP and achieve better results because of avoidance of tunnelling. = I=20 find it somewhat strange to see this adamant view that LISP absolutely requ= ires=20 a uniquely structured address plan in order to achieve any useful outcome i= n=20 terms of scalable routing, at a cost of increased latency and exposure to= =20 vagaries of tunnel behaviour, while at the same time ignoring the simple=20 observation that if one were to do the same surgery on the address plan in = BGP=20 the outcomes would likely to be just as good if not better, without the neg= ative=20 factors of map-resolution-related latency and tunnelling. >=20 > I think this is something to keep in the future document(s). And I strongly disagree with your opinion. If we did this for every experim= ent=20 that we encounter that proposes some unique address plan that is intended t= o=20 improve security, routing scaleability, auto-configuration, pre-provisionin= g,=20 network virtualization, software programability, etc etc, then once more we= are=20 going to find ourselves contemplating address exhaustion in IPv6 far sooner= than=20 anyone would've rationally anticipated. Geoff _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 ----------MB_8CFBE6688EA22FA_166C_31BF0_webmail-d093.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8" Well spoken.

Heiner 



On 09/01/2013, at 11:02 PM, Luigi Iannone <ggx@gigix.net> wrote:

> Hi Geoff,
>=20
> On 8 Jan. 2013, at 20:21 , Geoff Huston <gih@apnic.net> wrote:
>=20
>>=20
>> On 08/01/2013, at 9:34 PM, SM <sm@resistor.net> wrote:
>>=20
>>> Hi Terry,
>>> At 22:03 07-01-2013, Terry Manderson wrote:
>>>> However, before the WG starts to rework the document, I wo=
uld first like to
>>>> canvass the LISP WG as to your opinions.
>>>>=20
>>>> 1) Should we, as a WG, continue to work on this item? Is i=
t=20
necessary/useful
>>>> for LISP?
>>>=20
>>> The work item seems useful.
>>>=20
>>>> 2) If so, what direction should the WG take this document =
so that the LISP
>>>> experiment is best served?
>>>=20
>>> The problem is justifying the IP address space allocation and =
explaining how=20
it will be managed.
>>>=20
>>> My guess is that the working group took an ORCHID approach (co=
py and paste=20
:-)).  I suggest dropping the idea of calling it a very large-scale experim=
ent. =20
The unstated problem is about politics.  I suggest taking a look at=20
draft-lear-lisp-nerd-09.  It contains a good discussion of operational mode=
ls=20
and the trade-offs.
>>>=20
>>=20
>> I was on the IAB at the time that ORCHID was being considered - th=
e issue=20
there was to find a balance between enough bits for acceptable crypto and b=
asic=20
conservatism in the absolute size of the request - at the time a /28 appear=
ed to=20
be a suitable compromise considering that this was an experiment.
>>=20
>> Given that this is an experiment and that the transition from expe=
riment to=20
widespread deployment may well entail renumbering (as was the case with the=
=20
6bone) then one approach may well be to use a modest prefix that has a limi=
ted=20
capacity that would force renumbering in the shift from experiment to wides=
pread=20
adoption, if such occurs in the future.
>>=20
>=20
> I may be mistake but I do not see the renumbering need in the LISP cas=
e.


It all depends on the philosophy behind experimental allocations. If we wer=
e to=20
assume that each and every single experiment in IPv6, including all forms o=
f=20
cryptographically generated addresses, all forms of transitional mechanisms=
, all=20
forms of address plans and all forms of routing experiments were each to re=
quest=20
an experimental allocation that was "once and forever" and assumed at the o=
utset=20
that the experiment would result in comprehensive deployment over a network=
 many=20
many times larger than today's then I hope you can appreciate that we'd not=
 have=20
enough space to accommodate each and every experiment's requirements in the=
 IPv6=20
space.

So the conventional philosophy behind experimental allocations is to use en=
ough=20
space to allow the experiment to operate and to gain experience with the=20
technology. If this proves to be useful and taken up by the industry (and o=
f=20
course this process involves is by no means an assured outcome - quite the=
=20
opposite in fact) then its again conventional to look at how to support the=
=20
technology within the existing token distribution framework, or whether its=
=20
appropriate to make changes to the token distribution framework. Now obviou=
sly=20
some proponents of every experiment see universal adoption of their particu=
lar=20
technology as a given, including some LISP proponents no doubt. So of cours=
e we=20
see many (most?) experiment proponents proudly proclaim that they are uniqu=
ely=20
different and obviously their particular experiment will naturally result i=
n=20
universal deployment, so why not assume that happy outcome at the outset of=
 the=20
experiment and allocate resources at a scale commensurate w
 ith their no doubt certain universal deployment in the not-so-distant futu=
re?=20
But wishing it, no matter how enthusiastic you may be personally, does not =
make=20
it so. A prudent approach in a space that has seen, and is likely to see, m=
any=20
experiments proposed, is generally to provision resources to conduct the=20
experiment at the scale of the experiment and if the experiment leads to=20
someplace positive then look at what is required if the technology is to he=
ad to=20
larger levels of deployment.
=20

> The prefix request was written in such a way to reduce renumbering, ra=
ther=20
making the prefix "bigger" so to accommodate the growth. This would also be=
 an=20
easy change, rather then adding different prefix blocks just change the len=
gth=20
of the existing prefix.

I am continually confused by the assumptions behind this assertion, and I'v=
e=20
heard this assumption a number of times in the course of the consideration =
of=20
this draft. If LISP is so fragile that it requires a very particular deploy=
ed=20
address structure in order to operate, then frankly we could do precisely t=
he=20
same in BGP and achieve better results because of avoidance of tunnelling. =
I=20
find it somewhat strange to see this adamant view that LISP absolutely requ=
ires=20
a uniquely structured address plan in order to achieve any useful outcome i=
n=20
terms of scalable routing, at a cost of increased latency and exposure to=
=20
vagaries of tunnel behaviour, while at the same time ignoring the simple=20
observation that if one were to do the same surgery on the address plan in =
BGP=20
the outcomes would likely to be just as good if not better, without the neg=
ative=20
factors of map-resolution-related latency and tunnelling.

>=20
> I think this is something to keep in the future document(s).

And I strongly disagree with your opinion. If we did this for every experim=
ent=20
that we encounter that proposes some unique address plan that is intended t=
o=20
improve security, routing scaleability, auto-configuration, pre-provisionin=
g,=20
network virtualization, software programability, etc etc, then once more we=
 are=20
going to find ourselves contemplating address exhaustion in IPv6 far sooner=
 than=20
anyone would've rationally anticipated.

Geoff

_______________________________________________
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
----------MB_8CFBE6688EA22FA_166C_31BF0_webmail-d093.sysops.aol.com-- From jmh@joelhalpern.com Fri Jan 11 21:42:59 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B41121F85D2 for ; Fri, 11 Jan 2013 21:42:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iL95JrFjGZVx for ; Fri, 11 Jan 2013 21:42:58 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id B3CBB21F84BB for ; Fri, 11 Jan 2013 21:42:57 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id F1F9EA3ABF for ; Fri, 11 Jan 2013 21:42:55 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id AAC2F1C0749; Fri, 11 Jan 2013 21:42:54 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.10.10.104] (pool-70-106-135-81.clppva.east.verizon.net [70.106.135.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 305011C0563; Fri, 11 Jan 2013 21:42:53 -0800 (PST) Message-ID: <50F0F7DA.5030205@joelhalpern.com> Date: Sat, 12 Jan 2013 00:42:50 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: "George, Wes" References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> In-Reply-To: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: =?ISO-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 05:42:59 -0000 I would note in passing that A) There is no particular reason that EID registration / allocation needs to be done by the RIRs A') There is no reason to prohibit the RIRs from providing this function, in competition with others, if they are interested B) There is no particular indication that the RIRs are interested in running such a function, and I would hate to see us mandate that they help with an experiment unless they are interested in it. Yours, Joel On 1/11/2013 12:01 PM, George, Wes wrote: >> From: Roger Jørgensen [mailto:rogerj@gmail.com]> >> >> * we reserve a /12 >> * LISP EID block are marked as EXPERIMENTAL with a time limit, let's say >> 7year, until 10.October 2020 (not random picked, but 10.10.2020 seems >> nice). >> * set aside one /16 for each RIR >> * out of this /16 _only_ upto /26 split into /32 (64 for each RIR >> region) can be can be handed out and announced into the global routing >> table. If someone need something more than /32 they should really come >> up with a very good reasons now or just ask for regular RIR space >> * before 1.January 2019 IETF will have to decide if the EXPERIMENTAL was >> a success or a failure. >> ** If failure the entire address block are taken back before 31.Nov >> 2020, filtering etc like 6bone. >> ** If a success, we remove the 64 /32 (/26) limit and each RIR can hand >> out LISP EID space from the above /12 in their region, much like regular >> space. >> * in the EXPERIMENTAL phase (until 31.November 2020) one RIR/entity >> keep track of the above /32 and a LISP-EID-wg decide and make up the >> procedures for how this should be used. > > [WEG] This would address my concerns with the requested reservation and allocation. The one thing I might add is support for a smaller initial reservation and subtending allocation(s) that were reserved and allocated in such a way that they could be grown by simply changing the bitmask if that ends up being necessary. I would think that the size of block(s) needed would be something that could be much more effectively evaluated as the experiment moves forward and we have a better sense for how the space gets used, and at the conclusion of the experiment, if there is success, there will be a clear justification for whatever block is deemed necessary. > > Thanks > Wes George > > This E-mail and any of its attachments may contain Time Warner Cable proprietary information, which is privileged, confidential, or subject to copyright belonging to Time Warner Cable. This E-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient of this E-mail, you are hereby notified that any dissemination, distribution, copying, or action taken in relation to the contents of and attachments to this E-mail is strictly prohibited and may be unlawful. If you have received this E-mail in error, please notify the sender immediately and permanently delete the original and any copy of this E-mail and any printout. > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From heinerhummel@aol.com Sat Jan 12 03:01:42 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4D4A721F8545 for ; Sat, 12 Jan 2013 03:01:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.948 X-Spam-Level: X-Spam-Status: No, score=-2.948 tagged_above=-999 required=5 tests=[AWL=-0.350, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UY54lWX7rJUP for ; Sat, 12 Jan 2013 03:01:40 -0800 (PST) Received: from imr-da02.mx.aol.com (imr-da02.mx.aol.com [205.188.105.144]) by ietfa.amsl.com (Postfix) with ESMTP id 836BF21F8528 for ; Sat, 12 Jan 2013 03:01:40 -0800 (PST) Received: from mtaomg-ma05.r1000.mx.aol.com (mtaomg-ma05.r1000.mx.aol.com [172.29.41.12]) by imr-da02.mx.aol.com (Outbound Mail Relay) with ESMTP id D0E821C000098; Sat, 12 Jan 2013 06:01:39 -0500 (EST) Received: from core-dqe004c.r1000.mail.aol.com (core-dqe004.r1000.mail.aol.com [172.29.162.77]) by mtaomg-ma05.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 88304E000085; Sat, 12 Jan 2013 06:01:39 -0500 (EST) References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> To: gih@apnic.net, ggx@gigix.net In-Reply-To: <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> X-MB-Message-Source: WebUI Received: from 178.26.192.122 by webmail-m172.sysops.aol.com (64.12.183.157) with HTTP (WebMailUI); Sat, 12 Jan 2013 06:01:39 -0500 MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFBECB54C9DC9D_1330_3B7CB_webmail-m172.sysops.aol.com" X-Mailer: AOL Webmail 37288-STANDARD Message-Id: <8CFBECB54BB9457-1330-109E6@webmail-m172.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Sat, 12 Jan 2013 06:01:39 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1357988499; bh=nR5zloAeGeGl6fdn9Yz2cmzR49cu08BdYSLq79ezTfg=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=xpdvAzvexzTGuwqdRwrwZh6Xc5mbOiZ2Wf1SdwS5rD9RDKkID0CZqTAxS933r70J7 AIhbYohlP6C3VK6Ef9JJS7yhJTnwTkhlWY+iFJkwz6sufJ+BWKcWw2RL1fdRzFN8nA /kbVeK0u1JUCR9LLhC+xJXZhNeSFnwTfbhJsbBns= X-AOL-SCOLL-SCORE: 0:2:349516832:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d290c50f14293438b Cc: lisp@ietf.org Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 11:01:42 -0000 This is a multi-part message in MIME format. ----------MB_8CFBECB54C9DC9D_1330_3B7CB_webmail-m172.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Well spoken. Again, after the short late-night email, because: 1) There is a long list of deficiencies which LISP maintains and which are = due to clinging to=20 paradigms like prefix building, DiffServ bottom line "no interest in kno= wing the traffic outside/beyond the packets' incoming waiting queues",etc.e= tc. (I don't want to repeat it here) 2) LISP specifics: a) Its structures are fixed though not even an idea is cast how to form= and handle Multicast- and Anycast-Locators. Anycast services (nearest hospital, nearest rescuer, nearest parkin= g lot, nearest gas station, etc.) aren't considered at all. Most of the anycast services have to be scoped (it makes no sense to= disseminate "I am an empty parking lot in Munich." all over Germany/world) and I doubt that LISP-PULL fits in. Also: By dealing only with unica= st, LISP does not provide and bits to differentiate between unicast, multic= ast,... =20 b) GRE-tunnel nesting is a great bail out. A new concept however shoul= d try to avoid it as much as possible .LISP however prefers=20 LISP-header nesting rather than enlisting transits inside of ONE e= xtended LISP-header. 3) LISP-DDT specific: It will kill IPv4 and I honestly think about writing to the IESG and ex= plain to the IESG why, and why this is not just a bug that can be repaired= whithin=20 LISP-DDT. Here only this: At first I thought LISP-DDT is doomed to fail= , but being the coffin nail for IPv4 is the alternate and even worse conseq= uence. Heiner=20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Geoff Huston An: Luigi Iannone Cc: LISP mailing list list Verschickt: Mi, 9 Jan 2013 9:57 pm Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: > Hi Geoff, >=20 > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >=20 >>=20 >> On 08/01/2013, at 9:34 PM, SM wrote: >>=20 >>> Hi Terry, >>> At 22:03 07-01-2013, Terry Manderson wrote: >>>> However, before the WG starts to rework the document, I would first li= ke to >>>> canvass the LISP WG as to your opinions. >>>>=20 >>>> 1) Should we, as a WG, continue to work on this item? Is it=20 necessary/useful >>>> for LISP? >>>=20 >>> The work item seems useful. >>>=20 >>>> 2) If so, what direction should the WG take this document so that the = LISP >>>> experiment is best served? >>>=20 >>> The problem is justifying the IP address space allocation and explainin= g how=20 it will be managed. >>>=20 >>> My guess is that the working group took an ORCHID approach (copy and pa= ste=20 :-)). I suggest dropping the idea of calling it a very large-scale experim= ent. =20 The unstated problem is about politics. I suggest taking a look at=20 draft-lear-lisp-nerd-09. It contains a good discussion of operational mode= ls=20 and the trade-offs. >>>=20 >>=20 >> I was on the IAB at the time that ORCHID was being considered - the issu= e=20 there was to find a balance between enough bits for acceptable crypto and b= asic=20 conservatism in the absolute size of the request - at the time a /28 appear= ed to=20 be a suitable compromise considering that this was an experiment. >>=20 >> Given that this is an experiment and that the transition from experiment= to=20 widespread deployment may well entail renumbering (as was the case with the= =20 6bone) then one approach may well be to use a modest prefix that has a limi= ted=20 capacity that would force renumbering in the shift from experiment to wides= pread=20 adoption, if such occurs in the future. >>=20 >=20 > I may be mistake but I do not see the renumbering need in the LISP case. It all depends on the philosophy behind experimental allocations. If we wer= e to=20 assume that each and every single experiment in IPv6, including all forms o= f=20 cryptographically generated addresses, all forms of transitional mechanisms= , all=20 forms of address plans and all forms of routing experiments were each to re= quest=20 an experimental allocation that was "once and forever" and assumed at the o= utset=20 that the experiment would result in comprehensive deployment over a network= many=20 many times larger than today's then I hope you can appreciate that we'd not= have=20 enough space to accommodate each and every experiment's requirements in the= IPv6=20 space. So the conventional philosophy behind experimental allocations is to use en= ough=20 space to allow the experiment to operate and to gain experience with the=20 technology. If this proves to be useful and taken up by the industry (and o= f=20 course this process involves is by no means an assured outcome - quite the= =20 opposite in fact) then its again conventional to look at how to support the= =20 technology within the existing token distribution framework, or whether its= =20 appropriate to make changes to the token distribution framework. Now obviou= sly=20 some proponents of every experiment see universal adoption of their particu= lar=20 technology as a given, including some LISP proponents no doubt. So of cours= e we=20 see many (most?) experiment proponents proudly proclaim that they are uniqu= ely=20 different and obviously their particular experiment will naturally result i= n=20 universal deployment, so why not assume that happy outcome at the outset of= the=20 experiment and allocate resources at a scale commensurate w ith their no doubt certain universal deployment in the not-so-distant futu= re?=20 But wishing it, no matter how enthusiastic you may be personally, does not = make=20 it so. A prudent approach in a space that has seen, and is likely to see, m= any=20 experiments proposed, is generally to provision resources to conduct the=20 experiment at the scale of the experiment and if the experiment leads to=20 someplace positive then look at what is required if the technology is to he= ad to=20 larger levels of deployment. =20 > The prefix request was written in such a way to reduce renumbering, rathe= r=20 making the prefix "bigger" so to accommodate the growth. This would also be= an=20 easy change, rather then adding different prefix blocks just change the len= gth=20 of the existing prefix. I am continually confused by the assumptions behind this assertion, and I'v= e=20 heard this assumption a number of times in the course of the consideration = of=20 this draft. If LISP is so fragile that it requires a very particular deploy= ed=20 address structure in order to operate, then frankly we could do precisely t= he=20 same in BGP and achieve better results because of avoidance of tunnelling. = I=20 find it somewhat strange to see this adamant view that LISP absolutely requ= ires=20 a uniquely structured address plan in order to achieve any useful outcome i= n=20 terms of scalable routing, at a cost of increased latency and exposure to= =20 vagaries of tunnel behaviour, while at the same time ignoring the simple=20 observation that if one were to do the same surgery on the address plan in = BGP=20 the outcomes would likely to be just as good if not better, without the neg= ative=20 factors of map-resolution-related latency and tunnelling. >=20 > I think this is something to keep in the future document(s). And I strongly disagree with your opinion. If we did this for every experim= ent=20 that we encounter that proposes some unique address plan that is intended t= o=20 improve security, routing scaleability, auto-configuration, pre-provisionin= g,=20 network virtualization, software programability, etc etc, then once more we= are=20 going to find ourselves contemplating address exhaustion in IPv6 far sooner= than=20 anyone would've rationally anticipated. Geoff _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 =20 _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 ----------MB_8CFBECB54C9DC9D_1330_3B7CB_webmail-m172.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8"

Well spoken. Again, after the short late-night email, beca= use:

1) There is a long list of= deficiencies which LISP maintains and which are due to clinging to 
   paradigms lik= e prefix building, DiffServ bottom line "no interest in knowing the traffic= outside/beyond the packets' incoming waiting queues",etc.etc.
   (I don't want= to repeat it here)

2) LISP specifics:<= /div>
    a) Its struc= tures are fixed though not even an idea is cast how to form and handle Mult= icast- and Anycast-Locators.
       = ; Anycast services (nearest hospital, nearest rescuer, nearest parking lot,= nearest gas station, etc.) aren't considered at all.
       = ;Most of the anycast services have to be scoped (it makes no sense to disse= minate "I am an empty parking lot in Munich." all over Germany/world)
       = ;and I doubt that LISP-PULL fits in. Also: By dealing only with unicast, LI= SP does not provide and bits to differentiate between unicast, multicast,..= .
     
     b) GRE= -tunnel nesting is a great bail out. A new concept however should try to av= oid it as much as possible .LISP however prefers 
       = ;  LISP-header nesting rather than enlisting transits inside of ONE ex= tended LISP-header.


3) LISP-DDT specific:
    It will kill= IPv4 and I honestly think about writing to the IESG and explain to the IES= G why, and why this is not just a  bug that can be repaired whithin&nb= sp;
    LISP-DDT. He= re only this: At first I thought LISP-DDT is doomed to fail, but being the = coffin nail for IPv4 is the alternate and even worse consequence.


Heiner 


gih@apnic.net>= ;
An: Luigi Iannone <ggx@gigix.net>= ;
Cc: LISP mailing list list <lisp@ietf.o= rg>
Verschickt: Mi, 9 Jan 2013 9:57 pm
Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup


On 09/01/2013, at 11:02 PM, Luigi Iannone <ggx@gigix.net> wrote:

> Hi Geoff,
>=20
> On 8 Jan. 2013, at 20:21 , Geoff Huston <gih@apnic.net> wrote:
>=20
>>=20
>> On 08/01/2013, at 9:34 PM, SM <sm@resistor.net> wrote:
>>=20
>>> Hi Terry,
>>> At 22:03 07-01-2013, Terry Manderson wrote:
>>>> However, before the WG starts to rework the document, I wo=
uld first like to
>>>> canvass the LISP WG as to your opinions.
>>>>=20
>>>> 1) Should we, as a WG, continue to work on this item? Is i=
t=20
necessary/useful
>>>> for LISP?
>>>=20
>>> The work item seems useful.
>>>=20
>>>> 2) If so, what direction should the WG take this document =
so that the LISP
>>>> experiment is best served?
>>>=20
>>> The problem is justifying the IP address space allocation and =
explaining how=20
it will be managed.
>>>=20
>>> My guess is that the working group took an ORCHID approach (co=
py and paste=20
:-)).  I suggest dropping the idea of calling it a very large-scale experim=
ent. =20
The unstated problem is about politics.  I suggest taking a look at=20
draft-lear-lisp-nerd-09.  It contains a good discussion of operational mode=
ls=20
and the trade-offs.
>>>=20
>>=20
>> I was on the IAB at the time that ORCHID was being considered - th=
e issue=20
there was to find a balance between enough bits for acceptable crypto and b=
asic=20
conservatism in the absolute size of the request - at the time a /28 appear=
ed to=20
be a suitable compromise considering that this was an experiment.
>>=20
>> Given that this is an experiment and that the transition from expe=
riment to=20
widespread deployment may well entail renumbering (as was the case with the=
=20
6bone) then one approach may well be to use a modest prefix that has a limi=
ted=20
capacity that would force renumbering in the shift from experiment to wides=
pread=20
adoption, if such occurs in the future.
>>=20
>=20
> I may be mistake but I do not see the renumbering need in the LISP cas=
e.


It all depends on the philosophy behind experimental allocations. If we wer=
e to=20
assume that each and every single experiment in IPv6, including all forms o=
f=20
cryptographically generated addresses, all forms of transitional mechanisms=
, all=20
forms of address plans and all forms of routing experiments were each to re=
quest=20
an experimental allocation that was "once and forever" and assumed at the o=
utset=20
that the experiment would result in comprehensive deployment over a network=
 many=20
many times larger than today's then I hope you can appreciate that we'd not=
 have=20
enough space to accommodate each and every experiment's requirements in the=
 IPv6=20
space.

So the conventional philosophy behind experimental allocations is to use en=
ough=20
space to allow the experiment to operate and to gain experience with the=20
technology. If this proves to be useful and taken up by the industry (and o=
f=20
course this process involves is by no means an assured outcome - quite the=
=20
opposite in fact) then its again conventional to look at how to support the=
=20
technology within the existing token distribution framework, or whether its=
=20
appropriate to make changes to the token distribution framework. Now obviou=
sly=20
some proponents of every experiment see universal adoption of their particu=
lar=20
technology as a given, including some LISP proponents no doubt. So of cours=
e we=20
see many (most?) experiment proponents proudly proclaim that they are uniqu=
ely=20
different and obviously their particular experiment will naturally result i=
n=20
universal deployment, so why not assume that happy outcome at the outset of=
 the=20
experiment and allocate resources at a scale commensurate w
 ith their no doubt certain universal deployment in the not-so-distant futu=
re?=20
But wishing it, no matter how enthusiastic you may be personally, does not =
make=20
it so. A prudent approach in a space that has seen, and is likely to see, m=
any=20
experiments proposed, is generally to provision resources to conduct the=20
experiment at the scale of the experiment and if the experiment leads to=20
someplace positive then look at what is required if the technology is to he=
ad to=20
larger levels of deployment.
=20

> The prefix request was written in such a way to reduce renumbering, ra=
ther=20
making the prefix "bigger" so to accommodate the growth. This would also be=
 an=20
easy change, rather then adding different prefix blocks just change the len=
gth=20
of the existing prefix.

I am continually confused by the assumptions behind this assertion, and I'v=
e=20
heard this assumption a number of times in the course of the consideration =
of=20
this draft. If LISP is so fragile that it requires a very particular deploy=
ed=20
address structure in order to operate, then frankly we could do precisely t=
he=20
same in BGP and achieve better results because of avoidance of tunnelling. =
I=20
find it somewhat strange to see this adamant view that LISP absolutely requ=
ires=20
a uniquely structured address plan in order to achieve any useful outcome i=
n=20
terms of scalable routing, at a cost of increased latency and exposure to=
=20
vagaries of tunnel behaviour, while at the same time ignoring the simple=20
observation that if one were to do the same surgery on the address plan in =
BGP=20
the outcomes would likely to be just as good if not better, without the neg=
ative=20
factors of map-resolution-related latency and tunnelling.

>=20
> I think this is something to keep in the future document(s).

And I strongly disagree with your opinion. If we did this for every experim=
ent=20
that we encounter that proposes some unique address plan that is intended t=
o=20
improve security, routing scaleability, auto-configuration, pre-provisionin=
g,=20
network virtualization, software programability, etc etc, then once more we=
 are=20
going to find ourselves contemplating address exhaustion in IPv6 far sooner=
 than=20
anyone would've rationally anticipated.

Geoff

_______________________________________________
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
=20 




________________________________________=
_______
lisp mailing list
lisp@ietf.org
ht=
tps://www.ietf.org/mailman/listinfo/lisp
----------MB_8CFBECB54C9DC9D_1330_3B7CB_webmail-m172.sysops.aol.com-- From sander@steffann.nl Sat Jan 12 06:07:22 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E6EA21F8505 for ; Sat, 12 Jan 2013 06:07:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nL2rPhPGY5qm for ; Sat, 12 Jan 2013 06:07:22 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id CE1B721F873D for ; Sat, 12 Jan 2013 06:07:21 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id 4536A2008; Sat, 12 Jan 2013 15:07:20 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5k3kfThIKkVN; Sat, 12 Jan 2013 15:07:19 +0100 (CET) Received: from [IPv6:2a00:8640:1::2027:b672:93d8:5e4] (unknown [IPv6:2a00:8640:1:0:2027:b672:93d8:5e4]) by mail.sintact.nl (Postfix) with ESMTP id 03FB62002; Sat, 12 Jan 2013 15:07:18 +0100 (CET) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: <50F0F7DA.5030205@joelhalpern.com> Date: Sat, 12 Jan 2013 15:07:18 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> To: Joel M. Halpern X-Mailer: Apple Mail (2.1499) Cc: =?iso-8859-1?Q?Roger_J=F8rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 14:07:22 -0000 Hi, > I would note in passing that > A) There is no particular reason that EID registration / allocation = needs to be done by the RIRs > A') There is no reason to prohibit the RIRs from providing this = function, in competition with others, if they are interested > B) There is no particular indication that the RIRs are interested in = running such a function, and I would hate to see us mandate that they = help with an experiment unless they are interested in it. I think it would be appropriate to ask the Address Policy working groups = of the different RIRs. I think it's a good idea to approach the chairs = of those working groups once there is a bit more clarity on the way the = addresses are supposed to be used. PS: There is more to it than just handing out the addresses: reverse DNS = and RPKI might be appropriate for this address space. The RIRs do have = the infrastructure in place to support them. There are other ways to = delegate reverse DNS, and maybe we choose not to support RPKI for this = address space, but we should keep those things in mind... Cheers, Sander From jmh@joelhalpern.com Sat Jan 12 07:59:42 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F99221F84E6 for ; Sat, 12 Jan 2013 07:59:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BtbyHqCGhq5G for ; Sat, 12 Jan 2013 07:59:41 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 90C9521F86FD for ; Sat, 12 Jan 2013 07:59:41 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 4E18BA63B7 for ; Sat, 12 Jan 2013 07:59:40 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id AB3901C049E; Sat, 12 Jan 2013 07:59:38 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.10.10.104] (pool-70-106-135-81.clppva.east.verizon.net [70.106.135.81]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id 401701C0449; Sat, 12 Jan 2013 07:59:37 -0800 (PST) Message-ID: <50F18867.7080707@joelhalpern.com> Date: Sat, 12 Jan 2013 10:59:35 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Sander Steffann References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> In-Reply-To: <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: =?ISO-8859-1?Q?Roger_J=F8?= =?ISO-8859-1?Q?rgensen?= , George Michaelson , LISP mailing list list , "George, Wes" , Robert Elz , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 15:59:42 -0000 Yes, Reverse DNS is appropriate for these Identifiers. That is not normally an RIR issue, as I understand it. Assuming that hte working group does indeed move to LISP DDT, as it has indicated, there is no intention to use RPKI within this space. The question of how proxy advertisements, which go into the normal system, will interact with RPKI, and SIDR in general, is indeed an important and complicated question which needs further investigation. The correct answer to securing conventional advertisements by proxies is not obvious to me. The current proposals on the table would allow a large number of different players to originate proxy advertisements for large blocks of EIDs. that's fine if the question is "are you willing to deliver the traffic for these?" It is rather harder if the question is "Are you authorized to deliver traffic for these?" as there is not yet an authorization model for proxies. Which brings us back to the point that if we need to resolve these sorts of questions before doing the allocation then we are not going to do the allocation quickly. Yours, Joel On 1/12/2013 9:07 AM, Sander Steffann wrote: > Hi, > >> I would note in passing that >> A) There is no particular reason that EID registration / allocation needs to be done by the RIRs >> A') There is no reason to prohibit the RIRs from providing this function, in competition with others, if they are interested >> B) There is no particular indication that the RIRs are interested in running such a function, and I would hate to see us mandate that they help with an experiment unless they are interested in it. > > I think it would be appropriate to ask the Address Policy working groups of the different RIRs. I think it's a good idea to approach the chairs of those working groups once there is a bit more clarity on the way the addresses are supposed to be used. > > PS: There is more to it than just handing out the addresses: reverse DNS and RPKI might be appropriate for this address space. The RIRs do have the infrastructure in place to support them. There are other ways to delegate reverse DNS, and maybe we choose not to support RPKI for this address space, but we should keep those things in mind... > > Cheers, > Sander > From farinacci@gmail.com Sat Jan 12 13:11:22 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECDFF21F888A for ; Sat, 12 Jan 2013 13:11:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.202 X-Spam-Level: X-Spam-Status: No, score=-2.202 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NINRRVsTP5to for ; Sat, 12 Jan 2013 13:11:18 -0800 (PST) Received: from mail-pb0-f46.google.com (mail-pb0-f46.google.com [209.85.160.46]) by ietfa.amsl.com (Postfix) with ESMTP id A846A21F8828 for ; Sat, 12 Jan 2013 13:11:15 -0800 (PST) Received: by mail-pb0-f46.google.com with SMTP id wy7so1516843pbc.5 for ; Sat, 12 Jan 2013 13:11:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to; bh=8wXsS3sY4aNQQwR2ge7CzjrI4SgLb301JIwAya88o4A=; b=PyrIyCtNSJHOQ4CvgrKBmztou4zjXr6vLAcVMZesLdxjNyqV8SVHcn+GXMQDDvG/5X WPvc+IKAI6HUtvlo7mmL8TR6qfKq9JJqswZuONYyw0wDS9ZdivLYwqciOg70/rD691Ta U+tlj6UOENHZ3AzVBVoOGQWFFgYJw6NEfgxQQ5E0Emm5KAbV94O3w6lVmK96sSfsTPFm 1PyPMjwF+aRMDuHWBPPWyGZBtPnim/wYkKM2UxtUXTlqBfLr3iOot+rLLWwJJVfl7a7J vVmtwAFChlXJQtQjUuJB7FzcxI4o1HOu4FdP1QDNuLF/8HlcwfFSagW6SzPTeEUTkmkj 8KXw== X-Received: by 10.66.82.200 with SMTP id k8mr218795379pay.56.1358025075255; Sat, 12 Jan 2013 13:11:15 -0800 (PST) Received: from [10.38.245.34] (mobile-198-228-220-249.mycingular.net. [198.228.220.249]) by mx.google.com with ESMTPS id qt3sm5149886pbb.32.2013.01.12.13.11.12 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sat, 12 Jan 2013 13:11:14 -0800 (PST) References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> <8CFBECB54BB9457-1330-109E6@webmail-m172.sysops.aol.com> Mime-Version: 1.0 (1.0) In-Reply-To: <8CFBECB54BB9457-1330-109E6@webmail-m172.sysops.aol.com> Content-Type: multipart/alternative; boundary=Apple-Mail-9539B38E-5564-47BE-BE20-B4CF2E006BEF Content-Transfer-Encoding: 7bit Message-Id: X-Mailer: iPhone Mail (10A551) From: Dino Farinacci Date: Sat, 12 Jan 2013 13:11:10 -0800 To: "heinerhummel@aol.com" Cc: "lisp@ietf.org" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 21:11:23 -0000 --Apple-Mail-9539B38E-5564-47BE-BE20-B4CF2E006BEF Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > Well spoken. Again, after the short late-night email, because: Since you were subjective on your comments I will be direct and to the point= in my responses. But only direct to your comments that are clear.=20 > 1) There is a long list of deficiencies which LISP maintains and which are= due to clinging to=20 > paradigms like prefix building, DiffServ Do you mean map-cache caching. I don't know what you mean by prefix building= . EID-prefixes are assigned to LISP sites just like prefixes are assigned to= day. There is no operational difference.=20 > bottom line "no interest in knowing the traffic outside/beyond the packets= ' incoming waiting queues",etc.etc. > (I don't want to repeat it here) Diffswev code points are copied to the outer header. And we have seen cases w= here carrier-in-carrier scenarios, it is a feature to hide such code points.= =20 > 2) LISP specifics: > a) Its structures are fixed though not even an idea is cast how to for= m and handle Multicast- and Anycast-Locators. Not true. Both EID and Locator address formats are flexibly encoded. We have= seen use-cases where EIDs could be used as Fedex tracking numbers or VIN nu= mbers (Vehicle ID Numbers). And we have seen Locators encoded as multi-tuple= addresses that include Geo-Coordinates.=20 > Anycast services (nearest hospital, nearest rescuer, nearest parki= ng lot, nearest gas station, etc.) aren't considered at all. An EID can be used as an anycast address where the database lookup can decid= e which locators to return. And Locators can be anycast addresses as well to= encapsulate packets to the closest locator. Nothing needs to be designed in= the protocol to make this happen.=20 =20 > Most of the anycast services have to be scoped (it makes no sense t= o disseminate "I am an empty parking lot in Munich." all over Germany/world)= Since LISP uses a pull database, there is no dissemination in the mapping sy= stem.=20 Anyone that wants to talk to the EID will need to cache the locators but onl= y in those locations.=20 > and I doubt that LISP-PULL fits in. Also: By dealing only with unic= ast, LISP does not provide and bits to differentiate between unicast, multic= ast,... Because the existing semantics are used. Class D encodings for IPv4 and firs= t-byte 0xFF for IPv6.=20 > b) GRE-tunnel nesting is a great bail out. A new concept however sh= ould try to avoid it as much as possible .LISP however prefers=20 > LISP-header nesting rather than enlisting transits inside of ONE e= xtended LISP-header. LISP does re-encapsulating tunnels as well. See definition of RTRs in the TE= and NAT-traversal Internet Drafts.=20 > 3) LISP-DDT specific: > It will kill IPv4 and I honestly think about writing to the IESG and e= xplain to the IESG why, and why this is not just a bug that can be repaired= whithin=20 This makes no sense. Why would it kill IPv4 and not IPv6? DDT uses the iterative lookup model that DNS uses. Those properties are well= known and we have a lot of experience with them.=20 > LISP-DDT. Here only this: At first I thought LISP-DDT is doomed to fai= l, but being the coffin nail for IPv4 is the alternate and even worse conseq= uence. Can you back the claim up with some data and technical commentary.=20 If you do, I would be glad to continue this thread.=20 Dino >=20 >=20 > Heiner=20 >=20 >=20 > -----Urspr=C3=BCngliche Mitteilung-----=20 > Von: Geoff Huston > An: Luigi Iannone > Cc: LISP mailing list list > Verschickt: Mi, 9 Jan 2013 9:57 pm > Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup >=20 >=20 > On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: >=20 > > Hi Geoff, > >=20 > > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: > >=20 > >>=20 > >> On 08/01/2013, at 9:34 PM, SM wrote: > >>=20 > >>> Hi Terry, > >>> At 22:03 07-01-2013, Terry Manderson wrote: > >>>> However, before the WG starts to rework the document, I would first l= ike to > >>>> canvass the LISP WG as to your opinions. > >>>>=20 > >>>> 1) Should we, as a WG, continue to work on this item? Is it=20 > necessary/useful > >>>> for LISP? > >>>=20 > >>> The work item seems useful. > >>>=20 > >>>> 2) If so, what direction should the WG take this document so that the= LISP > >>>> experiment is best served? > >>>=20 > >>> The problem is justifying the IP address space allocation and explaini= ng how=20 > it will be managed. > >>>=20 > >>> My guess is that the working group took an ORCHID approach (copy and p= aste=20 > :-)). I suggest dropping the idea of calling it a very large-scale experi= ment. =20 > The unstated problem is about politics. I suggest taking a look at=20 > draft-lear-lisp-nerd-09. It contains a good discussion of operational mod= els=20 > and the trade-offs. > >>>=20 > >>=20 > >> I was on the IAB at the time that ORCHID was being considered - the iss= ue=20 > there was to find a balance between enough bits for acceptable crypto and b= asic=20 > conservatism in the absolute size of the request - at the time a /28 appea= red to=20 > be a suitable compromise considering that this was an experiment. > >>=20 > >> Given that this is an experiment and that the transition from experimen= t to=20 > widespread deployment may well entail renumbering (as was the case with th= e=20 > 6bone) then one approach may well be to use a modest prefix that has a lim= ited=20 > capacity that would force renumbering in the shift from experiment to wide= spread=20 > adoption, if such occurs in the future. > >>=20 > >=20 > > I may be mistake but I do not see the renumbering need in the LISP case.= >=20 >=20 > It all depends on the philosophy behind experimental allocations. If we we= re to=20 > assume that each and every single experiment in IPv6, including all forms o= f=20 > cryptographically generated addresses, all forms of transitional mechanism= s, all=20 > forms of address plans and all forms of routing experiments were each to r= equest=20 > an experimental allocation that was "once and forever" and assumed at the o= utset=20 > that the experiment would result in comprehensive deployment over a networ= k many=20 > many times larger than today's then I hope you can appreciate that we'd no= t have=20 > enough space to accommodate each and every experiment's requirements in th= e IPv6=20 > space. >=20 > So the conventional philosophy behind experimental allocations is to use e= nough=20 > space to allow the experiment to operate and to gain experience with the=20= > technology. If this proves to be useful and taken up by the industry (and o= f=20 > course this process involves is by no means an assured outcome - quite the= =20 > opposite in fact) then its again conventional to look at how to support th= e=20 > technology within the existing token distribution framework, or whether it= s=20 > appropriate to make changes to the token distribution framework. Now obvio= usly=20 > some proponents of every experiment see universal adoption of their partic= ular=20 > technology as a given, including some LISP proponents no doubt. So of cour= se we=20 > see many (most?) experiment proponents proudly proclaim that they are uniq= uely=20 > different and obviously their particular experiment will naturally result i= n=20 > universal deployment, so why not assume that happy outcome at the outset o= f the=20 > experiment and allocate resources at a scale commensurate w > ith their no doubt certain universal deployment in the not-so-distant fut= ure?=20 > But wishing it, no matter how enthusiastic you may be personally, does not= make=20 > it so. A prudent approach in a space that has seen, and is likely to see, m= any=20 > experiments proposed, is generally to provision resources to conduct the=20= > experiment at the scale of the experiment and if the experiment leads to=20= > someplace positive then look at what is required if the technology is to h= ead to=20 > larger levels of deployment. > =20 >=20 > > The prefix request was written in such a way to reduce renumbering, rath= er=20 > making the prefix "bigger" so to accommodate the growth. This would also b= e an=20 > easy change, rather then adding different prefix blocks just change the le= ngth=20 > of the existing prefix. >=20 > I am continually confused by the assumptions behind this assertion, and I'= ve=20 > heard this assumption a number of times in the course of the consideration= of=20 > this draft. If LISP is so fragile that it requires a very particular deplo= yed=20 > address structure in order to operate, then frankly we could do precisely t= he=20 > same in BGP and achieve better results because of avoidance of tunnelling.= I=20 > find it somewhat strange to see this adamant view that LISP absolutely req= uires=20 > a uniquely structured address plan in order to achieve any useful outcome i= n=20 > terms of scalable routing, at a cost of increased latency and exposure to=20= > vagaries of tunnel behaviour, while at the same time ignoring the simple=20= > observation that if one were to do the same surgery on the address plan in= BGP=20 > the outcomes would likely to be just as good if not better, without the ne= gative=20 > factors of map-resolution-related latency and tunnelling. >=20 > >=20 > > I think this is something to keep in the future document(s). >=20 > And I strongly disagree with your opinion. If we did this for every experi= ment=20 > that we encounter that proposes some unique address plan that is intended t= o=20 > improve security, routing scaleability, auto-configuration, pre-provisioni= ng,=20 > network virtualization, software programability, etc etc, then once more w= e are=20 > going to find ourselves contemplating address exhaustion in IPv6 far soone= r than=20 > anyone would've rationally anticipated. >=20 > Geoff >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp >=20 >=20 >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail-9539B38E-5564-47BE-BE20-B4CF2E006BEF Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Well spoken. Again, after the s= hort late-night email, because:

Since you were subject= ive on your comments I will be direct and to the point in my responses. But o= nly direct to your comments that are clear. 

1) There is a long list of defici= encies which LISP maintains and which are due to clinging to 
   paradigms like= prefix building, DiffServ

Do you mean map-cache caching. I don't know what you mean b= y prefix building. EID-prefixes are assigned to LISP sites just like prefixe= s are assigned today. There is no operational difference. 
=
<= font color=3D"black" size=3D"2" face=3D"arial">
bottom line "no interest in knowing the traffic outside/= beyond the packets' incoming waiting queues",etc.etc.
   (I don't want t= o repeat it here)
Diffswev code points are copied to the outer header. And we have see= n cases where carrier-in-carrier scenarios, it is a feature to hide such cod= e points. 

2) LISP specifics:
    a) Its struct= ures are fixed though not even an idea is cast how to form and handle Multic= ast- and Anycast-Locators.

Not true. Both EID and Locator address formats are flexibly= encoded. We have seen use-cases where EIDs could be used as Fedex tracking n= umbers or VIN numbers (Vehicle ID Numbers). And we have seen Locators encode= d as multi-tuple addresses that include Geo-Coordinates. 
<= div style=3D"color: black; ">
       = Anycast services (nearest hospital, nearest rescuer, nearest parking lot, n= earest gas station, etc.) aren't considered at all.

An EID can be used as an anycast a= ddress where the database lookup can decide which locators to return. And Lo= cators can be anycast ad= dresses as well to encapsulate packets to the closest locator. Nothing needs= to be designed in the protocol to make this happen. 
=  
       = Most of the anycast services have to be scoped (it makes no sense to dissemi= nate "I am an empty parking lot in Munich." all over Germany/world)

Since LISP uses a p= ull database, there is no dissemination in the mapping system. 

Anyone that wants to talk to the EID will need to cache th= e locators but only in those locations. 

       = and I doubt that LISP-PULL fits in. Also: By dealing only with unicast, LISP= does not provide and bits to differentiate between unicast, multicast,...

Because the= existing semantics are used. Class D encodings for IPv4 and first-byte 0xFF= for IPv6. 

=
     =   b) GRE-tunnel nesting is a great bail out. A new concept however shou= ld try to avoid it as much as possible .LISP however prefers 
       =  LISP-header nesting rather than enlisting transits inside of ONE exte= nded LISP-header.
LISP does re-encapsulating tunnels as well. See definition of RTRs i= n the TE and NAT-traversal Internet Drafts. 

3) LISP-DDT specific:
    It will kill I= Pv4 and I honestly think about writing to the IESG and explain to the IESG w= hy, and why this is not just a  bug that can be repaired whithin <= /font>

This makes= no sense. Why would it kill IPv4 and not IPv6?

DDT= uses the iterative lookup model that DNS uses. Those properties are well kn= own and we have a lot of experience with them. 

    LISP-DDT. Her= e only this: At first I thought LISP-DDT is doomed to fail, but being the co= ffin nail for IPv4 is the alternate and even worse consequence.
=

Can you back the claim= up with some data and technical commentary. 

= If you do, I would be glad to continue this thread. 

Dino



Heiner 


-----Urspr=C3=BCngliche Mitteilung-----
Von: Geoff Huston <gih@apnic.net>=
An: Luigi Iannone <ggx@gigix.net>=
Cc: LISP mailing list list <lisp@ietf.or= g>
Verschickt: Mi, 9 Jan 2013 9:57 pm
Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup


On 09/01/2013, at 11:02 PM, Luigi Iannone <ggx@gigix.net> wrote:

> Hi Geoff,
>=20
> On 8 Jan. 2013, at 20:21 , Geoff Huston <gih@apnic.net> wrote:
>=20
>>=20
>> On 08/01/2013, at 9:34 PM, SM <sm@resistor.net> wrote:
>>=20
>>> Hi Terry,
>>> At 22:03 07-01-2013, Terry Manderson wrote:
>>>> However, before the WG starts to rework the document, I wou=
ld first like to
>>>> canvass the LISP WG as to your opinions.
>>>>=20
>>>> 1) Should we, as a WG, continue to work on this item? Is it=
=20
necessary/useful
>>>> for LISP?
>>>=20
>>> The work item seems useful.
>>>=20
>>>> 2) If so, what direction should the WG take this document s=
o that the LISP
>>>> experiment is best served?
>>>=20
>>> The problem is justifying the IP address space allocation and e=
xplaining how=20
it will be managed.
>>>=20
>>> My guess is that the working group took an ORCHID approach (cop=
y and paste=20
:-)).  I suggest dropping the idea of calling it a very large-scale experime=
nt. =20
The unstated problem is about politics.  I suggest taking a look at=20
draft-lear-lisp-nerd-09.  It contains a good discussion of operational model=
s=20
and the trade-offs.
>>>=20
>>=20
>> I was on the IAB at the time that ORCHID was being considered - the=
 issue=20
there was to find a balance between enough bits for acceptable crypto and ba=
sic=20
conservatism in the absolute size of the request - at the time a /28 appeare=
d to=20
be a suitable compromise considering that this was an experiment.
>>=20
>> Given that this is an experiment and that the transition from exper=
iment to=20
widespread deployment may well entail renumbering (as was the case with the=20=

6bone) then one approach may well be to use a modest prefix that has a limit=
ed=20
capacity that would force renumbering in the shift from experiment to widesp=
read=20
adoption, if such occurs in the future.
>>=20
>=20
> I may be mistake but I do not see the renumbering need in the LISP case=
.


It all depends on the philosophy behind experimental allocations. If we were=
 to=20
assume that each and every single experiment in IPv6, including all forms of=
=20
cryptographically generated addresses, all forms of transitional mechanisms,=
 all=20
forms of address plans and all forms of routing experiments were each to req=
uest=20
an experimental allocation that was "once and forever" and assumed at the ou=
tset=20
that the experiment would result in comprehensive deployment over a network m=
any=20
many times larger than today's then I hope you can appreciate that we'd not h=
ave=20
enough space to accommodate each and every experiment's requirements in the I=
Pv6=20
space.

So the conventional philosophy behind experimental allocations is to use eno=
ugh=20
space to allow the experiment to operate and to gain experience with the=20
technology. If this proves to be useful and taken up by the industry (and of=
=20
course this process involves is by no means an assured outcome - quite the=20=

opposite in fact) then its again conventional to look at how to support the=20=

technology within the existing token distribution framework, or whether its=20=

appropriate to make changes to the token distribution framework. Now obvious=
ly=20
some proponents of every experiment see universal adoption of their particul=
ar=20
technology as a given, including some LISP proponents no doubt. So of course=
 we=20
see many (most?) experiment proponents proudly proclaim that they are unique=
ly=20
different and obviously their particular experiment will naturally result in=
=20
universal deployment, so why not assume that happy outcome at the outset of t=
he=20
experiment and allocate resources at a scale commensurate w
 ith their no doubt certain universal deployment in the not-so-distant futur=
e?=20
But wishing it, no matter how enthusiastic you may be personally, does not m=
ake=20
it so. A prudent approach in a space that has seen, and is likely to see, ma=
ny=20
experiments proposed, is generally to provision resources to conduct the=20
experiment at the scale of the experiment and if the experiment leads to=20
someplace positive then look at what is required if the technology is to hea=
d to=20
larger levels of deployment.
=20

> The prefix request was written in such a way to reduce renumbering, rat=
her=20
making the prefix "bigger" so to accommodate the growth. This would also be a=
n=20
easy change, rather then adding different prefix blocks just change the leng=
th=20
of the existing prefix.

I am continually confused by the assumptions behind this assertion, and I've=
=20
heard this assumption a number of times in the course of the consideration o=
f=20
this draft. If LISP is so fragile that it requires a very particular deploye=
d=20
address structure in order to operate, then frankly we could do precisely th=
e=20
same in BGP and achieve better results because of avoidance of tunnelling. I=
=20
find it somewhat strange to see this adamant view that LISP absolutely requi=
res=20
a uniquely structured address plan in order to achieve any useful outcome in=
=20
terms of scalable routing, at a cost of increased latency and exposure to=20=

vagaries of tunnel behaviour, while at the same time ignoring the simple=20
observation that if one were to do the same surgery on the address plan in B=
GP=20
the outcomes would likely to be just as good if not better, without the nega=
tive=20
factors of map-resolution-related latency and tunnelling.

>=20
> I think this is something to keep in the future document(s).

And I strongly disagree with your opinion. If we did this for every experime=
nt=20
that we encounter that proposes some unique address plan that is intended to=
=20
improve security, routing scaleability, auto-configuration, pre-provisioning=
,=20
network virtualization, software programability, etc etc, then once more we a=
re=20
going to find ourselves contemplating address exhaustion in IPv6 far sooner t=
han=20
anyone would've rationally anticipated.

Geoff

_______________________________________________
lisp mailing list
lisp@ietf.org
htt=
ps://www.ietf.org/mailman/listinfo/lisp
=20 




_________________________________________=
______
lisp mailing list
lisp@ietf.org
htt=
ps://www.ietf.org/mailman/listinfo/lisp
___________________= ____________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailma= n/listinfo/lisp
= --Apple-Mail-9539B38E-5564-47BE-BE20-B4CF2E006BEF-- From rogerj@gmail.com Sat Jan 12 14:17:41 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55AAF21F88ED for ; Sat, 12 Jan 2013 14:17:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tsYHUczJ7va4 for ; Sat, 12 Jan 2013 14:17:40 -0800 (PST) Received: from mail-wg0-f49.google.com (mail-wg0-f49.google.com [74.125.82.49]) by ietfa.amsl.com (Postfix) with ESMTP id BAC4421F88E6 for ; Sat, 12 Jan 2013 14:17:39 -0800 (PST) Received: by mail-wg0-f49.google.com with SMTP id 15so1366040wgd.4 for ; Sat, 12 Jan 2013 14:17:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:cc:content-type:content-transfer-encoding; bh=A+ppozYjNB9m0RtznC0foaZCCoWCwfMJUovs+hjdxaU=; b=d+CfLRWBkm3SlWxNxrLWoIPYy1PpxwcwhU1FrfEeLnR3YB7mHse2J+VncAf/GOaJxV Q9uoOs5c3WxJCacK3487XrLCYc02b0V2gS75LrVNzvbkQYDpuACuDaQqwYoXHC3qV1z9 X5P52ApqEfelSpjzFtWeZBGla6okl8YjHYPFbRmcedRfqDWfcdMNfVH9aA8LA1Mq34RZ jvyEbM8AQ1C+3nfLbr+neOdnRmcVxZ/1AlrxVQvowdctsYf6rwvpZM/GbiJ6wtUPcwKU KYJ1vvY/kj+Eyj8956TsGvEnN3d/xCkdJ1ZVZ+ZWyr2OBCHJKciLodkzdcq4Un/XA3SD MOAA== MIME-Version: 1.0 X-Received: by 10.180.84.193 with SMTP id b1mr5473175wiz.26.1358029058753; Sat, 12 Jan 2013 14:17:38 -0800 (PST) Received: by 10.217.44.74 with HTTP; Sat, 12 Jan 2013 14:17:38 -0800 (PST) In-Reply-To: <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> Date: Sat, 12 Jan 2013 23:17:38 +0100 Message-ID: From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Sander Steffann Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: George Michaelson , LISP mailing list list , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 22:17:41 -0000 There might be one missunderstanding of my original post: > * set aside one /16 for each RIR > * out of this /16 _only_ upto /26 split into /32 (64 for each RIR > region) can be can be handed out and announced into the global routing > table. If someone need something more than /32 they should really come > up with a very good reasons now or just ask for regular RIR space I did not suggest that each and every RIR got another special space they had to administrate in co-ordination with LISP-EIG-wg. It was more a way to make sure we get a world-wide experiment so not a few EU and US ISPs claim all the space. If you want to get space from the APNIC range you have to be a LIR at APNIC, same for all the others. Of course this open up a question on how to check this but we get ASN, LIR/MNT names ++++, it's doable. The next thing I suggested was that _one_ RIR _or_ entity took on the job of administrating ths address space. That include handing out /32 from all of the above mention ranges, but also keep track of reverse DNS etc. It was not a question of tasking all RIR, or even one RIR with this job, but ask if any of the RIR would volunteer for the job. The reason for asking a RIR is that they already have the infrastructure in place... and for those that read ALL of the text in my original post, I suggested we asked RIPE :) --- Roger J --- On Sat, Jan 12, 2013 at 3:07 PM, Sander Steffann wrote= : > Hi, > >> I would note in passing that >> A) There is no particular reason that EID registration / allocation need= s to be done by the RIRs >> A') There is no reason to prohibit the RIRs from providing this function= , in competition with others, if they are interested >> B) There is no particular indication that the RIRs are interested in run= ning such a function, and I would hate to see us mandate that they help wit= h an experiment unless they are interested in it. > > I think it would be appropriate to ask the Address Policy working groups = of the different RIRs. I think it's a good idea to approach the chairs of t= hose working groups once there is a bit more clarity on the way the address= es are supposed to be used. > > PS: There is more to it than just handing out the addresses: reverse DNS = and RPKI might be appropriate for this address space. The RIRs do have the = infrastructure in place to support them. There are other ways to delegate r= everse DNS, and maybe we choose not to support RPKI for this address space,= but we should keep those things in mind... > > Cheers, > Sander > --=20 Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From sander@steffann.nl Sat Jan 12 14:38:03 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42C0E21F8923 for ; Sat, 12 Jan 2013 14:38:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.449 X-Spam-Level: X-Spam-Status: No, score=-2.449 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OmWxTd1-hr6T for ; Sat, 12 Jan 2013 14:38:02 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id B1C5E21F88ED for ; Sat, 12 Jan 2013 14:38:02 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id AC8352008; Sat, 12 Jan 2013 23:38:01 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eF7Q4WTRQddF; Sat, 12 Jan 2013 23:37:57 +0100 (CET) Received: from [IPv6:2a00:8640:1::d18c:a8f4:b860:2995] (unknown [IPv6:2a00:8640:1:0:d18c:a8f4:b860:2995]) by mail.sintact.nl (Postfix) with ESMTP id BEE9F2002; Sat, 12 Jan 2013 23:37:56 +0100 (CET) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: Date: Sat, 12 Jan 2013 23:37:55 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <2E541884-BB27-4925-A448-74C8525B313E@steffann.nl> References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> To: =?iso-8859-1?Q?Roger_J=F8rgensen?= X-Mailer: Apple Mail (2.1499) Cc: George Michaelson , LISP mailing list list , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Jan 2013 22:38:03 -0000 Hi Roger, > The next thing I suggested was that _one_ RIR _or_ entity took on the > job of administrating ths address space. That include handing out /32 > from all of the above mention ranges, but also keep track of reverse > DNS etc. > It was not a question of tasking all RIR, or even one RIR with this > job, but ask if any of the RIR would volunteer for the job. >=20 > The reason for asking a RIR is that they already have the > infrastructure in place... and for those that read ALL of the text in > my original post, I suggested we asked RIPE :) Request noted :-) If this WG chooses to ask RIPE: The RIPE NCC will need a RIPE policy to = use when allocating/assigning address space. Once we have a clear = document that describes the basics we can work on that in the RIPE = Address Policy WG. Thanks, Sander From rogerj@gmail.com Sun Jan 13 06:51:59 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6899921F86D5 for ; Sun, 13 Jan 2013 06:51:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.8 X-Spam-Level: X-Spam-Status: No, score=-2.8 tagged_above=-999 required=5 tests=[AWL=0.500, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U3wHu38tTLmo for ; Sun, 13 Jan 2013 06:51:57 -0800 (PST) Received: from mail-wi0-f176.google.com (mail-wi0-f176.google.com [209.85.212.176]) by ietfa.amsl.com (Postfix) with ESMTP id 7584721F86E8 for ; Sun, 13 Jan 2013 06:51:57 -0800 (PST) Received: by mail-wi0-f176.google.com with SMTP id hm6so754267wib.15 for ; Sun, 13 Jan 2013 06:51:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=UpUlpSetMTPqzm1HTxIleh4XYU+ofbzEOo/gUcB3xwQ=; b=HaOuJbfky+df3juQWG3zL5iKU9bHyosFxNBFejfdsssLQ1bzoUPaojx2706DIj9tdr cmnhz9685gGfyMhA0h6nFOsBbhMWOiS4Qw0ku00JRUx7JoZMn7oUnzca+y7r6NQTwFS1 drKMoIZWyielgOk6ib5+W8B5J3e0cUnYxIhUOyQfflSOKt0XQua+kUZIurhn4OVfkI9Y 0OVF9U9z3oWTcYel1MJO57y9ydkM6vI2BjYERluu98mNNxds1AbQwDLBpF4HIGrBlcvs mQUqns9XJqTdskLWh66VKpDSBKAOCmTIWl6wyfC8CbV2MDFjrx8kjVx/S3HgQqj8Z5VY s1ew== MIME-Version: 1.0 Received: by 10.194.85.234 with SMTP id k10mr129965822wjz.53.1358088716542; Sun, 13 Jan 2013 06:51:56 -0800 (PST) Received: by 10.217.44.74 with HTTP; Sun, 13 Jan 2013 06:51:56 -0800 (PST) In-Reply-To: <50F2C48C.9010408@gmail.com> References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> <50F2C48C.9010408@gmail.com> Date: Sun, 13 Jan 2013 15:51:56 +0100 Message-ID: From: =?ISO-8859-1?Q?Roger_J=F8rgensen?= To: Arturo Servin , Brian E Carpenter , Robert Elz , Geoff Huston , Sander Steffann , "George, Wes" , SM , "cb.list6@gmail.com" , Paul Vinciguerra , Arturo Servin , George Michaelson , "Bert Wijnen (IETF)" , lisp@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jan 2013 14:51:59 -0000 On Sun, Jan 13, 2013 at 3:28 PM, Arturo Servin wrote: > Roger, > > Perhaps I am being naive, but why not just give the space to IANA and > then they assign to RIRs? No other reason than to keep it simple, try to avoid involving the RIR policy part to get the experiment going. That's also why there would be a wg @IETF that will hand out space, not the different RIRs. They're only involvment would only be if one of them took on the task of keeping track of the space. That's also why Sander Steffann's earlier mail included one piece that wasn't what I suggested: >> The reason for asking a RIR is that they already have the >> infrastructure in place... and for those that read ALL of the text in >> my original post, I suggested we asked RIPE :) > > Request noted :-) > > If this WG chooses to ask RIPE: The RIPE NCC will need a RIPE policy to use when allocating/assigning address space. Once we have a clear document that describes the basics we can work on that in the RIPE Address Policy WG. RIPE policy would not be the one describing or deciding on how the space should be given out, that would be upto LISP-EIB-wg@IETF/or something else. RIPE's job in my above suggestion would be to keep track of the space, providing RDNS and simliar.. ... but what do all the other here think? Haven't had to many critical questions regarding the idea, or other comment for that sake. -- Roger Jorgensen | ROJO9-RIPE rogerj@gmail.com | - IPv6 is The Key! http://www.jorgensen.no | roger@jorgensen.no From sander@steffann.nl Sun Jan 13 07:32:39 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1DA921F86A9 for ; Sun, 13 Jan 2013 07:32:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.374 X-Spam-Level: X-Spam-Status: No, score=-2.374 tagged_above=-999 required=5 tests=[AWL=-0.075, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SnWti-MEPrAL for ; Sun, 13 Jan 2013 07:32:38 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id 309CE21F86A5 for ; Sun, 13 Jan 2013 07:32:37 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id A5D132008; Sun, 13 Jan 2013 16:32:36 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r18dvom8Y2kY; Sun, 13 Jan 2013 16:32:28 +0100 (CET) Received: from [IPv6:2a00:8640:1::cc4d:dafe:d9d8:e5d7] (unknown [IPv6:2a00:8640:1:0:cc4d:dafe:d9d8:e5d7]) by mail.sintact.nl (Postfix) with ESMTP id BBDEA2002; Sun, 13 Jan 2013 16:32:24 +0100 (CET) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: Date: Sun, 13 Jan 2013 16:32:23 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <09FB8DAC-396F-4AF3-AAAD-2B27DFB0339F@steffann.nl> References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> <50F2C48C.9010408@gmail.com> To: =?iso-8859-1?Q?Roger_J=F8rgensen?= X-Mailer: Apple Mail (2.1499) Cc: lisp@ietf.org, George Michaelson , Robert Elz , "George, Wes" , Arturo Servin , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jan 2013 15:32:40 -0000 Hi Roger, > That's also why Sander Steffann's earlier mail included one piece that > wasn't what I suggested: >=20 > >>> The reason for asking a RIR is that they already have the >>> infrastructure in place... and for those that read ALL of the text = in >>> my original post, I suggested we asked RIPE :) >>=20 >> Request noted :-) >>=20 >> If this WG chooses to ask RIPE: The RIPE NCC will need a RIPE policy = to use when allocating/assigning address space. Once we have a clear = document that describes the basics we can work on that in the RIPE = Address Policy WG. >=20 > RIPE policy would not be the one describing or deciding on how the > space should be given out, that would be upto LISP-EIB-wg@IETF/or > something else. RIPE's job in my above suggestion would be to keep > track of the space, providing RDNS and simliar.. In that case the question should go directly to the RIPE NCC and not to = the RIPE community. If this is not going to be defined in RIPE policy = then the RIPE NCC members and the RIPE NCC Executive Board have to = decide if they want the RIPE NCC to do the job. After all: the members = provide the funding for the RIPE NCC. Cheers, Sander From arturo.servin@gmail.com Sun Jan 13 06:28:34 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBB6C21F85D7 for ; Sun, 13 Jan 2013 06:28:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id efv+SwRqtVP0 for ; Sun, 13 Jan 2013 06:28:33 -0800 (PST) Received: from mail-gh0-f169.google.com (mail-gh0-f169.google.com [209.85.160.169]) by ietfa.amsl.com (Postfix) with ESMTP id 8541921F85D0 for ; Sun, 13 Jan 2013 06:28:32 -0800 (PST) Received: by mail-gh0-f169.google.com with SMTP id r11so141093ghr.0 for ; Sun, 13 Jan 2013 06:28:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=GcR9MhTN2o0ZrP1OtTwGdiEJji8gjYGPVc4jj4rSwEA=; b=t6rF77DRr/1PCCcwibDLXSbZimuuefJvZFJ/SABq+q6AdfacvysVXbz/Gtb0dqmfqh ZVG5tUW/PEOyvyUO9STxzG44h8kgkJKBkiXgmfAQo/8+B/axwPvfGEbdG8nZg94dG4Ex wA5DnaaIoG790v1GCM3tZc5LS141nR0xnaYVMsB25gJx1uxwI/9vPSg7lVqTDSYgxP1v RbMx/yqEEFEWspu1Q8lLPpyuJcOjX0fbktS8X1eVHL5IqsGhKMg727oqyJr1gfv/tMaE qWPLKZUf2AR+KlLPmPzSUiCeiOkap5oEG7BwBJFT0jAFoYFzg3T/8ocMFsYxfHR0JfXR atdQ== X-Received: by 10.236.175.104 with SMTP id y68mr91796229yhl.21.1358087312131; Sun, 13 Jan 2013 06:28:32 -0800 (PST) Received: from [192.168.1.133] (r186-48-236-167.dialup.adsl.anteldata.net.uy. [186.48.236.167]) by mx.google.com with ESMTPS id z1sm8918623anj.2.2013.01.13.06.28.30 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 13 Jan 2013 06:28:31 -0800 (PST) Message-ID: <50F2C48C.9010408@gmail.com> Date: Sun, 13 Jan 2013 12:28:28 -0200 From: Arturo Servin User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: lisp@ietf.org, rogerj@gmail.com References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Mailman-Approved-At: Sun, 13 Jan 2013 10:09:22 -0800 Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jan 2013 14:28:34 -0000 Roger, Perhaps I am being naive, but why not just give the space to IANA and then they assign to RIRs? Regards, as On 12/01/2013 20:17, Roger Jørgensen wrote: > There might be one missunderstanding of my original post: > > >> * set aside one /16 for each RIR >> * out of this /16 _only_ upto /26 split into /32 (64 for each RIR >> region) can be can be handed out and announced into the global routing >> table. If someone need something more than /32 they should really come >> up with a very good reasons now or just ask for regular RIR space > > I did not suggest that each and every RIR got another special space > they had to administrate in co-ordination with LISP-EIG-wg. > It was more a way to make sure we get a world-wide experiment so not a > few EU and US ISPs claim all the space. If you want to get space from > the APNIC range you have to be a LIR at APNIC, same for all the > others. Of course this open up a question on how to check this but we > get ASN, LIR/MNT names ++++, it's doable. > > > The next thing I suggested was that _one_ RIR _or_ entity took on the > job of administrating ths address space. That include handing out /32 > from all of the above mention ranges, but also keep track of reverse > DNS etc. > It was not a question of tasking all RIR, or even one RIR with this > job, but ask if any of the RIR would volunteer for the job. > > The reason for asking a RIR is that they already have the > infrastructure in place... and for those that read ALL of the text in > my original post, I suggested we asked RIPE :) > > > > --- Roger J --- > > On Sat, Jan 12, 2013 at 3:07 PM, Sander Steffann wrote: >> Hi, >> >>> I would note in passing that >>> A) There is no particular reason that EID registration / allocation needs to be done by the RIRs >>> A') There is no reason to prohibit the RIRs from providing this function, in competition with others, if they are interested >>> B) There is no particular indication that the RIRs are interested in running such a function, and I would hate to see us mandate that they help with an experiment unless they are interested in it. >> >> I think it would be appropriate to ask the Address Policy working groups of the different RIRs. I think it's a good idea to approach the chairs of those working groups once there is a bit more clarity on the way the addresses are supposed to be used. >> >> PS: There is more to it than just handing out the addresses: reverse DNS and RPKI might be appropriate for this address space. The RIRs do have the infrastructure in place to support them. There are other ways to delegate reverse DNS, and maybe we choose not to support RPKI for this address space, but we should keep those things in mind... >> >> Cheers, >> Sander >> > > > From arturo.servin@gmail.com Sun Jan 13 07:03:26 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5AD5B21F868E for ; Sun, 13 Jan 2013 07:03:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.449 X-Spam-Level: X-Spam-Status: No, score=-3.449 tagged_above=-999 required=5 tests=[AWL=-0.150, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y9WqmhvmyCHn for ; Sun, 13 Jan 2013 07:03:25 -0800 (PST) Received: from mail-yh0-f45.google.com (mail-yh0-f45.google.com [209.85.213.45]) by ietfa.amsl.com (Postfix) with ESMTP id 83B0221F857C for ; Sun, 13 Jan 2013 07:03:25 -0800 (PST) Received: by mail-yh0-f45.google.com with SMTP id f64so567666yha.18 for ; Sun, 13 Jan 2013 07:03:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:message-id:date:from:user-agent:mime-version:to:cc :subject:references:in-reply-to:content-type :content-transfer-encoding; bh=tpA+djdWFhl5fY6HfAZl6lflBl3KUPRetQK54YfviBo=; b=NF/yVsCCJyldzyag80N/AUrkagOowraqXYhmtOdY4lhHPiZfri359LEFN06w/1BVpp uBNS6YIxfDwVPaLYBo9LNrFNzPVvctoZN7ycxt3QBr4jAykKeAjB+sCsok+ntCzAhcxn gwuWD1jKYnWe+It6jo3oCrt1cSQY3Uq+nBZZw9F4aGVPLB0heF7piUkPD7W91LTekpDi 50nzFrn/pctTrZxeNvb9l7ly/Sg8zZT62jlk29bqLf6g/0+Zq/wfhSNfRvnMN7cbA+q1 fyBNe3q3+AGIy8Kvc1e58CvYzmqpJL+J8OxIgWiVoWySgWlc6LapIm1yPcNSCIbm5Z43 Sm/A== X-Received: by 10.236.93.44 with SMTP id k32mr89911955yhf.69.1358089405076; Sun, 13 Jan 2013 07:03:25 -0800 (PST) Received: from [192.168.1.133] (r186-48-236-167.dialup.adsl.anteldata.net.uy. [186.48.236.167]) by mx.google.com with ESMTPS id x9sm10226326yhl.17.2013.01.13.07.03.19 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 13 Jan 2013 07:03:24 -0800 (PST) Message-ID: <50F2CCB5.9020001@gmail.com> Date: Sun, 13 Jan 2013 13:03:17 -0200 From: Arturo Servin User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: =?ISO-8859-1?Q?Roger_J=F8rgensen?= References: <2671C6CDFBB59E47B64C10B3E0BD5923033AD6B883@PRVPEXVS15.corp.twcable.com> <50F0F7DA.5030205@joelhalpern.com> <442D63F5-E86F-43C8-A13A-BD620FE9DA08@steffann.nl> <50F2C48C.9010408@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit X-Mailman-Approved-At: Sun, 13 Jan 2013 10:09:26 -0800 Cc: lisp@ietf.org, George Michaelson , Robert Elz , "George, Wes" , "cb.list6@gmail.com" , "Bert Wijnen \(IETF\)" Subject: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Jan 2013 15:03:26 -0000 Roger, On 13/01/2013 12:51, Roger Jørgensen wrote: > On Sun, Jan 13, 2013 at 3:28 PM, Arturo Servin wrote: >> Roger, >> >> Perhaps I am being naive, but why not just give the space to IANA and >> then they assign to RIRs? > > No other reason than to keep it simple, try to avoid involving the RIR > policy part to get the experiment going. That's also why there would > be a wg @IETF that will hand out space, not the different RIRs. > They're only involvment would only be if one of them took on the task > of keeping track of the space. > > I am not sure that any of the scenarios (to one RIR vs IANA) could be said simpler than the other. It just looks to me "more correct" to follow the chain that we followed with IPv4, v6 and ASNs: IETF -> IANA -> RIRs. About the mechanisms, IANA also has them (rDNS, recording space, etc.) > > > That's also why Sander Steffann's earlier mail included one piece that > wasn't what I suggested: > > >>> The reason for asking a RIR is that they already have the >>> infrastructure in place... and for those that read ALL of the text in >>> my original post, I suggested we asked RIPE :) >> >> Request noted :-) >> >> If this WG chooses to ask RIPE: The RIPE NCC will need a RIPE policy to use when allocating/assigning address space. Once we have a clear document that describes the basics we can work on that in the RIPE Address Policy WG. > > > RIPE policy would not be the one describing or deciding on how the > space should be given out, that would be upto LISP-EIB-wg@IETF/or > something else. RIPE's job in my above suggestion would be to keep > track of the space, providing RDNS and simliar.. > > > > ... but what do all the other here think? Haven't had to many critical > questions regarding the idea, or other comment for that sake. > > > > Regards, /as From damien.saucez@gmail.com Tue Jan 15 06:34:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60D1321F86D4 for ; Tue, 15 Jan 2013 06:34:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.048 X-Spam-Level: X-Spam-Status: No, score=-4.048 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001, J_CHICKENPOX_42=0.6, J_CHICKENPOX_43=0.6, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F+1dikeJL01V for ; Tue, 15 Jan 2013 06:34:30 -0800 (PST) Received: from mail-bk0-f49.google.com (mail-bk0-f49.google.com [209.85.214.49]) by ietfa.amsl.com (Postfix) with ESMTP id 6D7A521F869F for ; Tue, 15 Jan 2013 06:34:29 -0800 (PST) Received: by mail-bk0-f49.google.com with SMTP id jm19so105967bkc.36 for ; Tue, 15 Jan 2013 06:34:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:subject:mime-version:content-type:from:in-reply-to :resent-from:date:cc:resent-date:message-id:references:resent-to:to :x-mailer; bh=Iq/dxDuADjXQl4i5Zd8gfs93QLtdf22d6y+mGeZY4dg=; b=XSl0yTTbN4l2qF2nAWl+B7F3u/qMoRL5MiubRVC0tn76p3S8IXFaU7EVVFyqQKsfiA sNv+9uJwUDRgBAKlPwT1z/MmAvpyH/YOlKGOO5FKD9CYStasAkiYpeUaH79MPlTm3wrG 9XBH9yvCqtgXSItDHiya/2kR+qXP39Of5spAePB/1BFXGKkyJ+BztxsdTmYLq+7yjHk+ zl2Yobwg2/n1FO94rEo3RH1r13Hrrp+X2Wlj/zoOhc/QBwovDYlIrezsQHZP+X6sv0oc hJAfpjQ6JgTuLXzVIBrWMJV6Qt53+gky+Za7MjZP+Ytcc+QPT3imF5L/NArmWxnnl79a PjCA== X-Received: by 10.204.147.18 with SMTP id j18mr40085033bkv.79.1358260468301; Tue, 15 Jan 2013 06:34:28 -0800 (PST) Received: from faucon.inria.fr (faucon.inria.fr. [138.96.201.73]) by mx.google.com with ESMTPS id e22sm12962453bke.14.2013.01.15.06.34.26 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 15 Jan 2013 06:34:27 -0800 (PST) Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) Content-Type: multipart/alternative; boundary="Apple-Mail=_3181291A-C58C-4A6A-BAA0-7876B2265084" From: Damien Saucez In-Reply-To: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> Resent-From: Damien Saucez Date: Mon, 14 Jan 2013 23:15:07 +0100 Resent-Date: Tue, 15 Jan 2013 15:34:25 +0100 Message-Id: References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> Resent-To: LISP mailing list list To: Darrel Lewis X-Mailer: Apple Mail (2.1499) Resent-Message-Id: <20130115143429.6D7A521F869F@ietfa.amsl.com> Cc: "lisp-interest\(mailer list\)" , LISP Beta Subject: Re: [lisp] WG Last Call for draft-ietf-lisp-deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jan 2013 14:34:36 -0000 --Apple-Mail=_3181291A-C58C-4A6A-BAA0-7876B2265084 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 Hello, Comments inline >> From: Terry Manderson >> Subject: [lisp] WG Last Call for draft-ietf-lisp-deployment >> Date: November 21, 2012 8:23:54 PM PST >> To: LISP mailing list list >>=20 >> All, >>=20 >> During the WG meeting at IETF 85 the authors of >> draft-ietf-lisp-deployment-05 requested a work group last call. >>=20 >> Here starts a 14 day last call for this document, the last call will = end on >> Thursday the 6th December, 2012. >>=20 >> You will find its text here: >> http://tools.ietf.org/html/draft-ietf-lisp-deployment-05 >>=20 >> Please review this WG item and provide any last comments. >>=20 >> Cheers >> Terry >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >=20 >=20 >=20 > Network Working Group L. = Jakab > Internet-Draft A. = Cabellos-Aparicio > Intended status: Informational F. = Coras > Expires: April 23, 2013 J. = Domingo-Pascual > Technical University = of > = Catalonia > D. = Lewis > Cisco = Systems > October 20, = 2012 >=20 >=20 > LISP Network Element Deployment Considerations > draft-ietf-lisp-deployment-05.txt >=20 > Abstract >=20 > This document discusses the different scenarios for the deployment = of > the new network elements introduced by the Locator/Identifier > Separation Protocol (LISP). >=20 [snip] > 1. Introduction >=20 > The Locator/Identifier Separation Protocol (LISP) addresses the > scaling issues of the global Internet routing system by separating > the current addressing scheme into Endpoint IDentifiers (EIDs) and > Routing LOCators (RLOCs). The main protocol specification > [I-D.ietf-lisp] describes how the separation is achieved, which new > network elements are introduced, and details the packet formats for > the data and control planes. >=20 > LISP assumes that such separation is between the edge and core. > While the boundary between both is not strictly defined, one widely > accepted definition places it at the border routers of stub > autonomous systems, which may carry a partial or complete default- > free zone (DFZ) routing table. The initial design of LISP took = this > location as a baseline for protocol development. However, the > applications of LISP go beyond of just decreasing the size of the = DFZ > routing table, and include improved multihoming and ingress traffic > engineering (TE) support for edge networks, and even individual > hosts. Throughout the draft we will use the term LISP site to = refer > to these networks/hosts behind a LISP Tunnel Router. We formally > define it as: >=20 > LISP site: A single host or a set of network elements in an edge > network under the administrative control of a single = organization, > delimited from other networks by LISP Tunnel Router(s). >=20 > Since LISP is a protocol which can be used for different purposes, = it > is important to identify possible deployment scenarios and the > additional requirements they may impose on the protocol = specification > and other protocols. Additionally, this document is intended as a > guide for the operational community for LISP deployments in their > networks. It is expected to evolve as LISP deployment progresses, > and the described scenarios are better understood or new scenarios > are discovered. >=20 maybe describe rapidly what an network element is. > Each subsection considers an element type, discussing the impact of > deployment scenarios on the protocol specification. For definition > of terms, please refer to the appropriate documents (as cited in = the > respective sections). > 2. Tunnel Routers >=20 > LISP is a map-and-encap protocol, with the main goal of improving > global routing scalability. To achieve its goal, it introduces > several new network elements, each performing specific functions > necessary to separate the edge from the core.=20 wouldn't this clearer in Sec. 1? It is important for the general = understanding. > The device that is the >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 3] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > gateway between the edge and the core is called Tunnel Router = (xTR), > performing one or both of two separate functions: >=20 > 1. Encapsulating packets originating from an end host to be > transported over intermediary (transit) networks towards the > other end-point of the communication >=20 > 2. Decapsulating packets entering from intermediary (transit) > networks, originated at a remote end host. >=20 > The first function is performed by an Ingress Tunnel Router (ITR), > the second by an Egress Tunnel Router (ETR). >=20 > Section 8 of the main LISP specification [I-D.ietf-lisp] has a = short > discussion of where Tunnel Routers can be deployed and some of the > associated advantages and disadvantages. This section adds more > detail to the scenarios presented there, and provides additional > scenarios as well. >=20 > 2.1. Customer Edge >=20 > LISP was designed with deployment at the core-edge boundary in = mind, > which can be approximated as the set of DFZ routers belonging to = non- > transit ASes. For the purposes of this document, we will consider > this boundary to be consisting of the routers connecting LISP sites > to their upstreams. As such, this is the most common expected > scenario for xTRs, and this document considers it the reference > location, comparing the other scenarios to this one. >=20 > ISP1 ISP2 > | | > | | > +----+ +----+ > +--|xTR1|--|xTR2|--+ > | +----+ +----+ | > | | > | LISP site | > +------------------+ >=20 > Figure 1: xTRs at the customer edge >=20 > =46rom the LISP site perspective the main advantage of this type of > deployment (compared to the one described in the next section) is > having direct control over its ingress traffic engineering. This > makes it is=20 remove is? > easy to set up and maintain active/active, active/backup, > or more complex TE policies, without involving third parties. >=20 > Being under the same administrative control, reachability = information >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 4] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > of all ETRs is easier to synchronize, because the necessary control > traffic can be allowed between the locators of the ETRs. A correct > synchronous global view of the reachability status is thus = available, > and the Loc-Status-Bits can be set correctly in the LISP data = header > of outgoing packets. >=20 > By placing the tunnel router at the edge of the site, existing > internal network configuration does not need to be modified. > Firewall rules, router configurations and address assignments = inside > the LISP site remain unchanged. This helps with incremental > deployment and allows a quick upgrade path to LISP. For larger = sites > with many external connections, distributed in geographically = diverse > PoPs, and complex internal topology, it may however make more sense > to both encapsulate and decapsulate as soon as possible, to benefit > from the information in the IGP to choose the best path (see > Section 2.3 for a discussion of this scenario). >=20 > Another thing to consider when placing tunnel routers are MTU = issues. > Since encapsulating packets increases overhead, the MTU of the end- > to-end path may decrease, when encapsulated packets need to travel > over segments having close to minimum MTU. Some transit networks = are > known to provide larger MTU than the typical value of 1500 bytes of > popular access technologies used at end hosts (e.g., IEEE 802.3 and > 802.11). However, placing the LISP router connecting to such a > network at the customer edge could possibly bring up MTU issues, > depending on the link type to the provider as opposed to the > following scenario. counter measures for that (e.g., any special setup that can be done to = minimise the risk a client is not working properly because of MTU) > 2.2. Provider Edge >=20 > The other location at the core-edge boundary for deploying LISP > routers is at the Internet service provider edge. The main = incentive > for this case is that the customer does not have to upgrade the CE > router(s), or change the configuration of any equipment. > Encapsulation/decapsulation happens in the provider's network, = which > may be able to serve several customers with a single device. For > large ISPs with many residential/business customers asking for LISP > this can lead to important savings, since there is no need to = upgrade > the software (or hardware, if it's the case) at each client's > location. Instead, they can upgrade the software (or hardware) on = a > few PE routers serving the customers. This scenario is depicted in > Figure 2. >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 5] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > +----------+ +------------------+ > | ISP1 | | ISP2 | > | | | | > | +----+ | | +----+ +----+ | > +--|xTR1|--+ +--|xTR2|--|xTR3|--+ > +----+ +----+ +----+ > | | | > | | | > +--<[LISP site]>---+-------+ >=20 > Figure 2: xTR at the PE >=20 > While this approach can make transition easy for customers and may = be > cheaper for providers, the LISP site looses one of the main = benefits > of LISP: ingress traffic engineering. Since the provider controls > the ETRs, additional complexity would be needed to allow customers = to > modify their mapping entries. or the client can have some form of access to the configuration (a bit = like tagging route with special communities in BGP to tell the ISP to which of its operator not = advertise the route) > The problem is aggravated when the LISP site is multihomed. = Consider > the scenario in Figure 2: whenever a change to TE policies is > required, the customer contacts both ISP1 and ISP2 to make the > necessary changes on the routers (if they provide this = possibility). ok, cf supra > It is however unlikely, that both ISPs will apply changes > simultaneously, which may lead to inconsistent state for the = mappings > of the LISP site. Since the different upstream ISPs are usually > competing business entities, the ETRs may even be configured to > compete, either to attract all the traffic or to get no traffic. = The > former will happen if the customer pays per volume, the latter if = the > connectivity has a fixed price. A solution could be to have the > mappings in the Map-Server(s), and have their operator give control > over the entries to customer, much like in the Domain Name System = at > the time of this writing. >=20 > Additionally, since xTR1, xTR2, and xTR3 are in different > administrative domains, locator reachability information is = unlikely > to be exchanged among them, making it difficult to set Loc-Status- > Bits correctly on encapsulated packets. >=20 IMHO this document should suggest not to use LSB in the Internet case = deployment > Compared to the customer edge scenario, deploying LISP at the > provider edge might have the advantage of diminishing potential MTU > issues, because the tunnel router is closer to the core, where = links > typically have higher MTUs than edge network links. >=20 > 2.3. Split ITR/ETR >=20 > In a simple LISP deployment, xTRs are located at the border of the > LISP site (see Section 2.1). In this scenario packets are routed > inside the domain according to the EID. However, more complex >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 6] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > networks may want to route packets according to the destination = RLOC. > This would enable them to choose the best egress point. >=20 > The LISP specification separates the ITR and ETR functionality and > considers that both entities can be deployed in separated network > equipment. ITRs can be deployed closer to the host (i.e., access > routers). This way packets are encapsulated as soon as possible, = and > packets exit the network through the best egress point in terms of > BGP policy. In turn, ETRs can be deployed at the border routers of > the network, and packets are decapsulated as soon as possible. = Once > decapsulated, packets are routed based on destination EID, = according > to internal routing policy. >=20 > In the following figure we can see an example. The Source (S) > transmits packets using its EID and in this particular case packets > are encapsulated at ITR_1. The encapsulated packets are routed > inside the domain according to the destination RLOC, and can egress > the network through the best point (i.e., closer to the RLOC's AS). > On the other hand, inbound packets are received by ETR_1 which > decapsulates them. Then packets are routed towards S according to > the EID, again following the best path. >=20 > +---------------------------------------+ > | | > | +-------+ +-------+ +-------+ > | | ITR_1 |---------+ | ETR_1 |-RLOC_A--| ISP_A | > | +-------+ | +-------+ +-------+ > | +-+ | | | > | |S| | IGP | | > | +-+ | | | > | +-------+ | +-------+ +-------+ > | | ITR_2 |---------+ | ETR_2 |-RLOC_B--| ISP_B | > | +-------+ +-------+ +-------+ > | | > +---------------------------------------+ >=20 > Figure 3: Split ITR/ETR Scenario >=20 > This scenario has a set of implications: >=20 > o The site must carry at least partial BGP routes in order to = choose > the best egress point, increasing the complexity of the network. > However, this is usually already the case for LISP sites that > would benefit from this scenario. >=20 > o If the site is multihomed to different ISPs and any of the > upstream ISPs is doing uRPF filtering, this scenario may become > impractical. ITRs need to determine the exit ETR, for setting = the >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 7] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > correct source RLOC in the encapsulation header. This adds > complexity and reliability concerns. >=20 > o In LISP, ITRs set the reachability bits when encapsulating data > packets. Hence, ITRs need a mechanism to be aware of the = liveness > of all ETRs serving their site. >=20 > o MTU within the site network must be large enough to accommodate > encapsulated packets. >=20 > o In this scenario, each ITR is serving fewer hosts than in the = case > when it is deployed at the border of the network. It has been > shown that cache hit ratio grows logarithmically with the amount > of users [cache]. Taking this into account, when ITRs are > deployed closer to the host the effectiveness of the mapping = cache > may be lower (i.e., the miss ratio is higher). Another > consequence of this is that the site may transmit a higher = amount > of Map-Requests, increasing the load on the distributed mapping > database. >=20 one possible solution is to aggregate Map-Requests with a hierarchy = (=E0-la DDT). > 2.4. Inter-Service Provider Traffic Engineering >=20 > With LISP, two LISP sites can route packets among them and control > their ingress TE policies. Typically, LISP is seen as applicable = to > stub networks, however the LISP protocol can also be applied to > transit networks recursively. >=20 > Consider the scenario depicted in Figure 4. Packets originating = from > the LISP site Stub1, client of ISP_A, with destination Stub4, = client > of ISP_B, are LISP encapsulated at their entry point into the = ISP_A's > network. The external IP header now has as the source RLOC an IP > from ISP_A's address space and destination RLOC from ISP_B's = address > space. One or more ASes separate ISP_A from ISP_B. With a single > level of LISP encapsulation, Stub4 has control over its ingress > traffic. However, at the time of this writing, ISP_B has only BGP > tools (such as prefix deaggregation) to control on which of his own > upstream or peering links should packets enter. This is either not > feasible (if fine-grained per-customer control is required, the = very > specific prefixes may not be propagated) or increases DFZ table = size. >=20 > _.--. > Stub1 ... +-------+ ,-'' `--. +-------+ ... = Stub3 > \ | R_A1|----,' `. ---|R_B1 | / > --| R_A2|---( Transit ) | |-- > Stub2 .../ | R_A3|-----. ,' ---|R_B2 | \... = Stub4 > +-------+ `--. _.-' +-------+ > ... ISP_A `--'' ISP_B ... >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 8] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > Figure 4: Inter-Service provider TE scenario >=20 > A solution for this is to apply LISP recursively. ISP_A and ISP_B > may reach a bilateral agreement to deploy their own private mapping > system. ISP_A then encapsulates packets destined for the prefixes = of > ISP_B, which are listed in the shared mapping system. Note that in > this case the packet is double-encapsulated (using R_A1, R_A2 or = R_A3 > as source and R_B1 or R_B2 as destination in the example above). > ISP_B's ETR removes the outer, second layer of LISP encapsulation > from the incoming packet, and routes it towards the original RLOC, > the ETR of Stub4, which does the final decapsulation. >=20 if there is bilateral agreement, could we imagine single encapsulation = and use instance-id to differentiate with the "source" able to install mappings at the = second tier? > If ISP_A and ISP_B agree to share a private distributed mapping > database, both can control their ingress TE without the need of > deaggregating prefixes. In this scenario the private database > contains RLOC-to-RLOC bindings. The convergence time on the TE > policies updates is expected to be fast, since ISPs only have to > update/query a mapping to/from the database. but convergence is O(TTL) or then specify to use SMR or Versioning > This deployment scenario includes two important caveats. First, it > is intended to be deployed between only two ISPs (ISP_A and ISP_B = in > Figure 4). If more than two ISPs use this approach, then the xTRs > deployed at the participating ISPs must either query multiple = mapping > systems, or the ISPs must agree on a common shared mapping system. > Second, the scenario is only recommended for ISPs providing > connectivity to LISP sites, such that source RLOCs of packets to be > reencapsulated belong to said ISP. Otherwise the participating = ISPs > must register prefixes they do not own in the above mentioned = private > mapping system. Failure to follow these recommendations may lead = to > operational and security issues when deploying this scenario. >=20 > Besides these recommendations, the main disadvantages of this > deployment case are: >=20 > o Extra LISP header is needed. This increases the packet size and > requires that the MTU between both ISPs accommodates double- > encapsulated packets. >=20 > o The ISP ITR must encapsulate packets and therefore must know the > RLOC-to-RLOC binding. These bindings are stored in a mapping > database and may be cached in the ITR's mapping cache. Cache > misses lead to an additional lookup latency, unless a push based > mapping system is used for the private mapping system. >=20 > o The operational overhead of maintaining the shared mapping > database. >=20 >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 9] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > o If an IPv6 address block is reserved for EID use, as specified = in > [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first > level) can avoid LISP processing altogether for non-LISP > destinations. The ISP tunnel routers however will not be able = to > take advantage of this optimization, all RLOC-to-RLOC mappings > need a lookup in the private database (or map-cache, once = results > are cached). >=20 > 2.5. Tunnel Routers Behind NAT >=20 > NAT in this section refers to IPv4 network address and port > translation. >=20 > 2.5.1. ITR >=20 > Packets encapsulated by an ITR are just UDP packets from a NAT > device's point of view, and they are handled like any UDP packet, > there are no additional requirements for LISP data packets. >=20 > Map-Requests sent by an ITR, which create the state in the NAT = table, > have a different 5-tuple in the IP header than the Map-Reply > generated by the authoritative ETR. Since the source address of = this > packet is different from the destination address of the request > packet, no state will be matched in the NAT table and the packet = will > be dropped. To avoid this, the NAT device has to do the following: >=20 > o Send all UDP packets with source port 4342, regardless of the > destination port, to the RLOC of the ITR. The most simple way = to > achieve this is configuring 1:1 NAT mode from the external RLOC = of > the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer > broadband routers). >=20 > o Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in > the payload. >=20 > This setup supports a single ITR behind the NAT device. >=20 > 2.5.2. ETR >=20 > An ETR placed behind NAT is reachable from the outside by the > Internet-facing locator of the NAT device. It needs to know this > locator (and configure a loopback interface with it), so that it = can > use it in Map-Reply and Map-Register messages. Thus support for > dynamic locators for the mapping database is needed in LISP > equipment. >=20 > Again, only one ETR behind the NAT device is supported. >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 10] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > An implication of the issues described above is that LISP sites = with > xTRs can not be behind carrier based NATs, since two different = sites > would collide on the port forwarding. >=20 > 2.6. Summary and Feature Matrix >=20 > Feature CE PE Split Rec. > -------------------------------------------------------- > Control of ingress TE x - x x > No modifications to existing > int. network infrastructure x x - - > Loc-Status-Bits sync x - x x > MTU/PMTUD issues minimized - x - x >=20 Does Rec. mean recursive? if so, make it explicit > 3. Map-Resolvers and Map-Servers >=20 > 3.1. Map-Servers >=20 s/Map-Server/Map Server/ga > The Map-Server learns EID-to-RLOC mapping entries from an > authoritative source and publishes them in the distributed mapping > database. These entries are learned through authenticated Map- > Register messages sent by authoritative ETRs. Also, upon reception > of a Map-Request, the Map-Server verifies that the destination EID > matches an EID-prefix for which it is authoritative for, and then = re- > encapsulates and forwards it to a matching ETR. Map-Server > functionality is described in detail in [I-D.ietf-lisp-ms]. >=20 > The Map-Server is provided by a Mapping Service Provider (MSP). A > MSP can be any of the following: >=20 > o EID registrar. Since the IPv4 address space is nearing > exhaustion, IPv4 EIDs will come from already allocated Provider > Independent (PI) space. The registrars in this case remain the > current five Regional Internet Registries (RIRs). In the case = of > IPv6, the possibility of reserving a /16 block as EID space is > currently under consideration [I-D.ietf-lisp-eid-block]. If > granted by IANA, the community will have to determine the body > responsible for allocations from this block, and the associated > policies. Existing allocation policies apply to EIDs outside = this > block. >=20 > o Third parties. Participating in the LISP mapping system is > similar to participating in global routing or DNS: as long as > there is at least another already participating entity willing = to > forward the newcomer's traffic, there is no barrier to entry. > Still, just like routing and DNS, LISP mappings have the issue = of > trust, with efforts underway to make the published information >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 11] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > verifiable. When these mechanisms will be deployed in the LISP > mapping system, the burden of providing and verifying trust = should > be kept away from MSPs, which will simply host the secured > mappings. This will keep the low barrier of entry to become an > MSP for third parties. >=20 > In all cases, the MSP configures its Map-Server(s) to publish the > prefixes of its clients in the distributed mapping database and = start > encapsulating and forwarding Map-Requests to the ETRs of the AS. > These ETRs register their prefix(es) with the Map-Server(s) through > periodic authenticated Map-Register messages. In this context, for > some LISP end sites, there is a need for mechanisms to: >=20 how periodic (suggestion of good timers)? > o Automatically distribute EID prefix(es) shared keys between the > ETRs and the EID-registrar Map-Server. >=20 > o Dynamically obtain the address of the Map-Server in the ETR of = the > AS. >=20 > The Map-Server plays a key role in the reachability of the EID- > prefixes it is serving. On the one hand it is publishing these > prefixes into the distributed mapping database and on the other = hand > it is encapsulating and forwarding Map-Requests to the = authoritative > ETRs of these prefixes. ITRs encapsulating towards EIDs under the > responsibility of a failed Map-Server will be unable to look up any > of their covering prefixes. The only exception are the ITRs that > already contain the mappings in their local cache. In this case = ITRs > can reach ETRs until the entry expires (typically 24 hours).=20 where does the "typically 24h" come from? > For > this reason, redundant Map-Server deployments are desirable. A set > of Map-Servers providing high-availability service to the same set = of > prefixes is called a redundancy group. ETRs are configured to send > Map-Register messages to all Map-Servers in the redundancy group. = To > achieve fail-over (or load-balancing, if desired), > known mapping > system specific best practices should be used. >=20 what is meant by this very sentence? > Additionally, if a Map-Server has no reachability for any ETR = serving > a given EID block, it should not originate that block into the > mapping system. why? > 3.2. Map-Resolvers >=20 s/Map-Resolver/Map Resolver/ga > A Map-Resolver a is a network infrastructure component which = accepts > LISP encapsulated Map-Requests, typically from an ITR, and finds = the > appropriate EID-to-RLOC mapping by either consulting its local = cache > or by consulting the distributed mapping database. Map-Resolver > functionality is described in detail in [I-D.ietf-lisp-ms]. >=20 > Anyone with access to the distributed mapping database can set up a >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 12] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > Map-Resolver and provide EID-to-RLOC mapping lookup service. > Database access setup is mapping system specific. >=20 > For performance reasons, it is recommended that LISP sites use Map- > Resolvers that are topologically close to their ITRs. ISPs > supporting LISP will provide this service to their customers, > possibly restricting access to their user base. LISP sites not in > this position can use open access Map-Resolvers, if available. > However, regardless of the availability of open access resolvers, = the > MSP providing the Map-Server(s) for a LISP site should also make > available Map-Resolver(s) for the use of that site. >=20 > In medium to large-size ASes, ITRs must be configured with the RLOC > of a Map-Resolver, operation which can be done manually. However, = in > Small Office Home Office (SOHO) scenarios a mechanism for > autoconfiguration should be provided. >=20 > One solution to avoid manual configuration in LISP sites of any = size > is the use of anycast RLOCs for Map-Resolvers similar to the DNS = root > server infrastructure. Since LISP uses UDP encapsulation, the use = of > anycast would not affect reliability. maybe change the term reliability because anycast actually improves = reliability, isnt'it? > LISP routers are then shipped > with a preconfigured list of well know Map-Resolver RLOCs, which = can > be edited by the network administrator, if needed. >=20 > The use of anycast also helps improving mapping lookup performance. > Large MSPs can increase the number and geographical diversity of > their Map-Resolver infrastructure, using a single anycasted RLOC. > Once LISP deployment is advanced enough, very large content = providers > may also be interested running this kind of setup, to ensure = minimal > connection setup latency for those connecting to their network from > LISP sites. >=20 > While Map-Servers and Map-Resolvers implement different > functionalities within the LISP mapping system, they can coexist on > the same device. For example, MSPs offering both services, can > deploy a single Map-Resolver/Map-Server in each PoP where they have = a > presence. >=20 >=20 > 4. Proxy Tunnel Routers >=20 > 4.1. P-ITR >=20 > Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP > transition mechanism, allowing non-LISP sites to reach LISP sites. > They announce via BGP certain EID prefixes (aggregated, whenever > possible) to attract traffic from non-LISP sites towards EIDs in = the > covered range. They do the mapping system lookup, and encapsulate >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 13] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > received packets towards the appropriate ETR. Note that for the > reverse path LISP sites can reach non-LISP sites simply by not > encapsulating traffic. See [I-D.ietf-lisp-interworking] for a > detailed description of P-ITR functionality. >=20 > The success of new protocols depends greatly on their ability to > maintain backwards compatibility and inter-operate with the > protocol(s) they intend to enhance or replace, and on the = incentives > to deploy the necessary new software or equipment. A LISP site = needs > an interworking mechanism to be reachable from non-LISP sites. A > P-ITR can fulfill this role, enabling early adopters to see the > benefits of LISP, similar to tunnel brokers helping the transition > from IPv4 to IPv6. A site benefits from new LISP functionality > (proportionally with existing global LISP deployment) when going > LISP, so it has the incentives to deploy the necessary tunnel > routers. In order to be reachable from non-LISP sites it has two > options: keep announcing its prefix(es) with BGP, or have a P-ITR > announce prefix(es) covering them. >=20 > If the goal of reducing the DFZ routing table size is to be = reached, > the second option is preferred. Moreover, the second option allows > LISP-based ingress traffic engineering from all sites. However, = the > placement of P-ITRs significantly influences performance and > deployment incentives. Section 5 is dedicated to the migration to = a > LISP-enabled Internet, and includes deployment scenarios for = P-ITRs. >=20 > 4.2. P-ETR >=20 > In contrast to P-ITRs, P-ETRs are not required for the correct > functioning of all LISP sites. There are two cases, where they can > be of great help: >=20 > o LISP sites with unicast reverse path forwarding (uRPF) > restrictions, and >=20 > o Communication between sites using different address family = RLOCs. >=20 > In the first case, uRPF filtering is applied at their upstream PE > router. When forwarding traffic to non-LISP sites, an ITR does not > encapsulate packets, leaving the original IP headers intact. As a > result, packets will have EIDs in their source address. Since we = are > discussing the transition period, we can assume that a prefix > covering the EIDs belonging to the LISP site is advertised to the > global routing tables by a P-ITR, and the PE router has a route > towards it. However, the next hop will not be on the interface > towards the CE router, so non-encapsulated packets will fail uRPF > checks. >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 14] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > To avoid this filtering, the affected ITR encapsulates packets > towards the locator of the P-ETR for non-LISP destinations. Now = the > source address of the packets, as seen by the PE router is the = ITR's > locator, which will not fail the uRPF check. The P-ETR then > decapsulates and forwards the packets. >=20 > The second use case is IPv4-to-IPv6 transition. Service providers > using older access network hardware, which only supports IPv4 can > still offer IPv6 to their clients, by providing a CPE device = running > LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP > sites, with IPv6-only locators. Packets originating from the = client > LISP site for these destinations would be encapsulated towards the > P-ETR's IPv4 locator. The P-ETR is in a native IPv6 network, > decapsulating and forwarding packets. For non-LISP destination, = the > packet travels natively from the P-ETR. For LISP destinations with > IPv6-only locators, the packet will go through a P-ITR, in order to > reach its destination. >=20 > For more details on P-ETRs see the [I-D.ietf-lisp-interworking] > draft. >=20 > P-ETRs can be deployed by ISPs wishing to offer value-added = services > to their customers. As is the case with P-ITRs, P-ETRs too may > introduce path stretch. Because of this the ISP needs to consider > the tradeoff of using several devices, close to the customers, to > minimize it, or few devices, farther away from the customers, > minimizing cost instead. >=20 > Since the deployment incentives for P-ITRs and P-ETRs are = different, > it is likely they will be deployed in separate devices, except for > the CDN case, which may deploy both in a single device. >=20 > In all cases, the existence of a P-ETR involves another step in the > configuration of a LISP router. CPE routers, which are typically > configured by DHCP, stand to benefit most from P-ETRs. > Autoconfiguration of the P-ETR locator could be achieved by a DHCP > option, or adding a P-ETR field to either Map-Notifys or = Map-Replies. >=20 > As a security measure, access to P-ETRs should be limited to > legitimate users by enforcing ACLs. >=20 >=20 > 5. Migration to LISP >=20 > This section discusses a deployment architecture to support the > migration to a LISP-enabled Internet. The loosely defined terms of > "early transition phase", "late transition phase", and "LISP = Internet > phase" refer to time periods when LISP sites are a minority, a >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 15] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > majority, or represent all edge networks respectively. >=20 > 5.1. LISP+BGP >=20 > For sites wishing to go LISP with their PI prefix the least > disruptive way is to upgrade their border routers to support LISP, > register the prefix into the LISP mapping system, but keep = announcing > it with BGP as well. This way LISP sites will reach them over = LISP, > while legacy sites will be unaffected by the change. The main > disadvantage of this approach is that no decrease in the DFZ = routing > table size is achieved. Still, just increasing the number of LISP > sites is an important gain, as an increasing LISP/non-LISP site = ratio > will slowly decrease the need for BGP-based traffic engineering = that > leads to prefix deaggregation. That, in turn, may lead to a = decrease > in the DFZ size in the late transition phase. and potentially the churn (except maybe because of PITR) > This scenario is not limited to sites that already have their > prefixes announced with BGP. Newly allocated EID blocks could = follow > this strategy as well during the early LISP deployment phase, > depending on the cost/benefit analysis of the individual networks. > Since this leads to an increase in the DFZ size, the following > architecture should be preferred for new allocations. >=20 > 5.2. Mapping Service Provider (MSP) P-ITR Service >=20 > In addition to publishing their clients' registered prefixes in the > mapping system, MSPs with enough transit capacity can offer them > P-ITR service as a separate service. This service is especially > useful for new PI allocations, to sites without existing BGP > infrastructure, that wish to avoid BGP altogether. The MSP = announces > the prefix into the DFZ, and the client benefits from ingress = traffic > engineering without prefix deaggregation. The downside of this > scenario is adding path stretch. >=20 > Routing all non-LISP ingress traffic through a third party which is > not one of its ISPs is only feasible for sites with modest amounts = of > traffic (like those using the IPv6 tunnel broker services today), > especially in the first stage of the transition to LISP, with a > significant number of legacy sites. When the LISP/non-LISP site > ratio becomes high enough, this approach can prove increasingly > attractive. >=20 > Compared to LISP+BGP, this approach avoids DFZ bloat caused by = prefix > deaggregation for traffic engineering purposes, resulting in slower > routing table increase in the case of new allocations and potential > decrease for existing ones. Moreover, MSPs serving different = clients > with adjacent aggregable prefixes may lead to additional decrease, > but quantifying this decrease is subject to future research study. >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 16] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > 5.3. Proxy-ITR Route Distribution (PITR-RD) >=20 > Instead of a LISP site, or the MSP, announcing their EIDs with BGP = to > the DFZ, this function can be outsourced to a third party, a P-ITR > Service Provider (PSP). This will result in a decrease of the > operational complexity both at the site and at the MSP. >=20 > The PSP manages a set of distributed P-ITR(s) that will advertise = the > corresponding EID prefixes through BGP to the DFZ. These P-ITR(s) > will then encapsulate the traffic they receive for those EIDs = towards > the RLOCs of the LISP site, ensuring their reachability from = non-LISP > sites. >=20 > While it is possible for a PSP to manually configure each client's > EID routes to be announced, this approach offers little flexibility > and is not scalable. This section presents a scalable architecture > that offers automatic distribution of EID routes to LISP sites and > service providers. >=20 > The architecture requires no modification to existing LISP network > elements, but it introduces a new (conceptual) network element, the > EID Route Server, defined as a router that either propagates routes > learned from other EID Route Servers, or it originates EID Routes. > The EID-Routes that it originates are those that it is = authoritative > for. It propagates these routes to Proxy-ITRs within the AS of the > EID Route Server. It is worth to note that a BGP capable router = can > be also considered as an EID Route Server. >=20 > Further, an EID-Route is defined as a prefix originated via the = Route > Server of the mapping service provider, which should be aggregated = if > the MSP has multiple customers inside a single netblock.=20 define netblock > This prefix > is propagated to other P-ITRs both within the MSP and to other = P-ITR > operators it peers with. EID Route Servers are operated either by > the LISP site, MSPs or PSPs, and they may be collocated with a Map- > Server or P-ITR, but are a functionally discrete entity. They > distribute EID-Routes, using BGP, to other domains, according to > policies set by participants. >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 17] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > MSP (AS64500) > RS ---> P-ITR > | / > | _.--./ > ,-'' /`--. > LISP site ---,' | v `. > ( | DFZ )----- Mapping system > non-LISP site ----. | ^ ,' > `--. / _.-' > | `--'' > v / > P-ITR > PSP (AS64501) >=20 > Figure 5: The P-ITR Route Distribution architecture >=20 > The architecture described above decouples EID origination from = route > propagation, with the following benefits: >=20 > o Can accurately represent business relationships between P-ITR > operators >=20 > o More mapping system agnostic >=20 > o Minor changes to P-ITR implementation, no changes to other > components >=20 > In the example in the figure we have a MSP providing services to = the > LISP site. The LISP site does not run BGP, and gets an EID > allocation directly from a RIR, or from the MSP, who may be a LIR. > Existing PI allocations can be migrated as well. The MSP ensures = the > presence of the prefix in the mapping system, and runs an EID Route > Server to distribute it to P-ITR service providers. Since the LISP > site does not run BGP, the prefix will be originated with the AS > number of the MSP. >=20 > In the simple case depicted in Figure 5 the EID-Route of LISP Site > will be originated by the Route Server, and announced to the DFZ by > the PSP's P-ITRs with AS path 64501 64500. =46rom that point on, = the > usual BGP dynamics apply. This way, routes announced by P-ITR are > still originated by the authoritative Route Server. Note that the > peering relationships between MSP/PSPs and those in the underlying > forwarding plane may not be congruent, making the AS path to a = P-ITR > shorter than it is in reality. >=20 > The non-LISP site will select the best path towards the EID-prefix, > according to its local BGP policies. Since AS-path length is = usually > an important metric for selecting paths, a careful placement of = P-ITR >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 18] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > could significantly reduce path-stretch between LISP and non-LISP > sites. >=20 > The architecture allows for flexible policies between MSP/PSPs. > Consider the EID Route Server networks as control plane overlays, > facilitating the implementation of policies necessary to reflect = the > business relationships between participants. The results are then > injected to the common underlying forwarding plane. For example, > some MSP/PSPs may agree to exchange EID-Prefixes and only announce > them to each of their forwarding plane customers. Global > reachability of an EID-prefix depends on the MSP the LISP site buys > service from, and is also subject to agreement between the = mentioned > parties. >=20 > In terms of impact on the DFZ, this architecture results in a = slower > routing table increase for new allocations, since traffic = engineering > will be done at the LISP level. For existing allocations migrating > to LISP, the DFZ may decrease since MSPs may be able to aggregate = the > prefixes announced. >=20 > Compared to LISP+BGP, this approach avoids DFZ bloat caused by = prefix > deaggregation for traffic engineering purposes, resulting in slower > routing table increase in the case of new allocations and potential > decrease for existing ones. Moreover, MSPs serving different = clients > with adjacent aggregable prefixes may lead to additional decrease, > but quantifying this decrease is subject to future research study. >=20 > The flexibility and scalability of this architecture does not come > without a cost however: A PSP operator has to establish either > transit or peering relationships to improve their connectivity. What's happening when sites have to change their EID? for example after = a network merge. > 5.4. Migration Summary >=20 > The following table presents the expected effects of the different > transition scenarios during a certain phase on the DFZ routing = table > size: >=20 > Phase | LISP+BGP | MSP P-ITR | PITR-RD > = -----------------+--------------+-----------------+---------------- > Early transition | no change | slower increase | slower = increase > Late transition | may decrease | slower increase | slower = increase > LISP Internet | considerable decrease >=20 The "considerable decrease" depends on where LISP is deployed, if it is = very close to the hosts, maybe it would not be so considerable. > It is expected that PITR-RD will co-exist with LISP+BGP during the > migration, with the latter being more popular in the early = transition > phase. As the transition progresses and the MSP P-ITR and PITR-RD > ecosystem gets more ubiquitous, LISP+BGP should become less > attractive, slowing down the increase of the number of routes in = the >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 19] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > DFZ. >=20 >=20 > 6. Step-by-Step Example BGP to LISP Migration Procedure >=20 > 6.1. Customer Pre-Install and Pre-Turn-up Checklist >=20 > 1. Determine how many current physical service provider = connections > the customer has and their existing bandwidth and traffic > engineering requirements. >=20 > This information will determine the number of routing locators, > and the priorities and weights that should be configured on the > xTRs. >=20 > 2. Make sure customer router has LISP capabilities. >=20 > * Obtain output of 'show version' from the CE router. >=20 too Cisco ;-) uname -a is another way :-D > This information can be used to determine if the platform is > appropriate to support LISP, in order to determine if a > software and/or hardware upgrade is required. >=20 > * Have customer upgrade (if necessary, software and/or = hardware) > to be LISP capable. >=20 > 3. Obtain current running configuration of CE router. A suggested > LISP router configuration example can be customized to the > customer's existing environment. >=20 > 4. Verify MTU Handling >=20 > * Request increase in MTU to (1556)=20 why parenthesis? > on service provider > connections. Prior to MTU change verify that 1500 byte = packet > from P-xTR to RLOC with do not fragment (DF-bit) bit set. >=20 > * Ensure they are not filtering ICMP unreachable or time- > exceeded on their firewall or router. >=20 > LISP, like any tunneling protocol, will increase the size of > packets when the LISP header is appended. If increasing the = MTU > of the access links is not possible, care must be taken that = ICMP > is not being filtered in order to allow for Path MTU Discovery = to > take place. >=20 > 5. Validate member prefix allocation. >=20 > This step is to check if the prefix used by the customer is a >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 20] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > direct (Provider Independent), or if it is a prefix assigned by = a > physical service provider (Provider Allocated). I always thought PA meant "Provider Aggregatable".=20 > If the prefixes > are assigned by other service provivers then a Letter of > Agreement is required to announce prefixes through the Proxy > Service Provider. >=20 > 6. Verify the member RLOCs and their reachability. >=20 > This step ensures that the RLOCs configured on the CE router = are > in fact reachable and working. >=20 > 7. Prepare for cut-over. >=20 > * If possible, have a host outside of all security and = filtering > policies connected to the console port of the edge router or > switch. >=20 > * Make sure customer has access to the router in order to > configure it. >=20 > 6.2. Customer Activating LISP Service >=20 > 1. Customer configures LISP on CE router(s) from service provider > recommended configuration. >=20 > The LISP configuration consists of the EID prefix, the = locators, > and the weights and priorities of the mapping between the two > values. In addition, the xTR must be configured with Map- > Resolver(s), Map-Server(s) and the shared key for registering = to > Map-Server(s). If required, Proxy-ETR(s) may be configured as > well. >=20 > In addition to the LISP configuration, the following: >=20 > * Ensure default route(s) to next-hop external neighbors are > included and RLOCs are present in configuration. >=20 > * If two or more routers are used, ensure all RLOCs are = included > in the LISP configuration on all routers. >=20 > * It will be necessary to redistribute default route via IGP > between the external routers. >=20 > 2. When transition is ready perform a soft shutdown on existing = eBGP > peer session(s) >=20 > * =46rom CE router, use LIG to ensure registration is = successful. >=20 >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 21] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 >=20 > * To verify LISP connectivity, ping LISP connected sites. See > http://www.lisp4.net/ and/or http://www.lisp6.net/ for > potential candidates. >=20 > * To verify connectivity to non-LISP sites, try accessing a landmark (e.g., a=20 > major > Internet sites via a web browser. ). > 6.3. Cut-Over Provider Preparation and Changes >=20 > 1. Verify site configuration and then active registration on Map- > Server(s) >=20 > * Authentication key >=20 > * EID prefix >=20 > 2. Add EID space to map-cache on proxies >=20 > 3. Add networks to BGP advertisement on proxies >=20 > * Modify route-maps/policies on P-xTRs >=20 > * Modify route policies on core routers (if non-connected > member) >=20 > * Modify ingress policers on core routers >=20 > * Ensure route announcement in looking glass servers, = RouteViews >=20 > 4. Perform traffic verification test >=20 > * Ensure MTU handling is as expected (PMTUD working) >=20 > * Ensure proxy-ITR map-cache population >=20 > * Ensure access from traceroute/ping servers around Internet >=20 > * Use a looking glass, to check for external visibility of > registration via several Map-Resolvers (e.g., > http://lispmon.net/). >=20 >=20 > 7. Security Considerations >=20 > Security implications of LISP deployments are to be discussed in > separate documents. [I-D.saucez-lisp-security] draft-ietf-lisp-threats-03 > gives an overview of > LISP threat models, while securing mapping lookups is discussed in > [I-D.ietf-lisp-sec]. >=20 >=20 >=20 > Jakab, et al. Expires April 23, 2013 [Page = 22] > =0C > Internet-Draft LISP Deployment October = 2012 >=20 [snip] Damien Saucez= --Apple-Mail=_3181291A-C58C-4A6A-BAA0-7876B2265084 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=iso-8859-1
From: Terry Manderson <terry.manderson@icann.org>= ;
Subject: [lisp] WG Last Call for = draft-ietf-lisp-deployment
Date: November 21, 2012 8:23:54 PM = PST
To: LISP mailing list list <lisp@ietf.org>

All,

Dur= ing the WG meeting at IETF 85 the authors = of
draft-ietf-lisp-deployment-05 requested a work group last = call.

Here starts a 14 day last call for this document, the last = call will end on
Thursday the 6th December, 2012.

You will = find its text here:
http://t= ools.ietf.org/html/draft-ietf-lisp-deployment-05

Please = review this WG item and provide any last = comments.

Cheers
Terry
______________________________________= _________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp




Network Working Group                                           L. Jakab
Internet-Draft                                      A. Cabellos-Aparicio
Intended status: Informational                                  F. Coras
Expires: April 23, 2013                               J. Domingo-Pascual
                                                 Technical University of
                                                               Catalonia
                                                                D. Lewis
                                                           Cisco Systems
                                                        October 20, 2012


             LISP Network Element Deployment Considerations
                   draft-ietf-lisp-deployment-05.txt

Abstract

   This document discusses the different scenarios for the deployment of
   the new network elements introduced by the Locator/Identifier
   Separation Protocol (LISP).
[snip]
1.  =
Introduction

   The Locator/Identifier Separation Protocol (LISP) addresses the
   scaling issues of the global Internet routing system by separating
   the current addressing scheme into Endpoint IDentifiers (EIDs) and
   Routing LOCators (RLOCs).  The main protocol specification
   [I-D.ietf-lisp] describes how the separation is achieved, which new
   network elements are introduced, and details the packet formats for
   the data and control planes.

   LISP assumes that such separation is between the edge and core.
   While the boundary between both is not strictly defined, one widely
   accepted definition places it at the border routers of stub
   autonomous systems, which may carry a partial or complete default-
   free zone (DFZ) routing table.  The initial design of LISP took this
   location as a baseline for protocol development.  However, the
   applications of LISP go beyond of just decreasing the size of the DFZ
   routing table, and include improved multihoming and ingress traffic
   engineering (TE) support for edge networks, and even individual
   hosts.  Throughout the draft we will use the term LISP site to refer
   to these networks/hosts behind a LISP Tunnel Router.  We formally
   define it as:

   LISP site:  A single host or a set of network elements in an edge
      network under the administrative control of a single organization,
      delimited from other networks by LISP Tunnel Router(s).


   Since LISP is a protocol which =
can be used for different purposes, it
   is important to identify possible deployment scenarios and the
   additional requirements they may impose on the protocol specification
   and other protocols.  Additionally, this document is intended as a
   guide for the operational community for LISP deployments in their
   networks.  It is expected to evolve as LISP deployment progresses,
   and the described scenarios are better understood or new scenarios
   are discovered.
maybe describe rapidly what an network element = is.
   Each subsection considers an element type, =
discussing the impact of
   deployment scenarios on the protocol specification.  For definition
   of terms, please refer to the appropriate documents (as cited in the
   respective sections).
2.  Tunnel =
Routers

   LISP is a map-and-encap protocol, with the main goal of improving
   global routing scalability.  To achieve its goal, it introduces
   several new network elements, each performing specific functions
   necessary to separate the edge from the core. =

wouldn't this clearer in Sec. 1? = It is important for the general understanding.

 The device that is the



Jakab, et al.            Expires April 23, 2013                 [Page 3]
=0C
Internet-Draft               LISP Deployment                October 2012


   gateway between the edge and the core is called Tunnel Router (xTR),
   performing one or both of two separate functions:

   1.  Encapsulating packets originating from an end host to be
       transported over intermediary (transit) networks towards the
       other end-point of the communication

   2.  Decapsulating packets entering from intermediary (transit)
       networks, originated at a remote end host.

   The first function is performed by an Ingress Tunnel Router (ITR),
   the second by an Egress Tunnel Router (ETR).

   Section 8 of the main LISP specification [I-D.ietf-lisp] has a short
   discussion of where Tunnel Routers can be deployed and some of the
   associated advantages and disadvantages.  This section adds more
   detail to the scenarios presented there, and provides additional
   scenarios as well.

2.1.  Customer Edge

   LISP was designed with deployment at the core-edge boundary in mind,
   which can be approximated as the set of DFZ routers belonging to non-
   transit ASes.  For the purposes of this document, we will consider
   this boundary to be consisting of the routers connecting LISP sites
   to their upstreams.  As such, this is the most common expected
   scenario for xTRs, and this document considers it the reference
   location, comparing the other scenarios to this one.

                                ISP1    ISP2
                                 |        |
                                 |        |
                               +----+  +----+
                            +--|xTR1|--|xTR2|--+
                            |  +----+  +----+  |
                            |                  |
                            |     LISP site    |
                            +------------------+

                    Figure 1: xTRs at the customer edge

   =46rom the LISP site perspective the main advantage of this type of
   deployment (compared to the one described in the next section) is
   having direct control over its ingress traffic engineering.  This
   makes it is
remove is?

easy to set up and maintain active/active, active/backup,
   or more complex TE policies, without involving third parties.

   Being under the same administrative control, reachability information



Jakab, et al.            Expires April 23, 2013                 [Page 4]
=0C
Internet-Draft               LISP Deployment                October 2012


   of all ETRs is easier to synchronize, because the necessary control
   traffic can be allowed between the locators of the ETRs.  A correct
   synchronous global view of the reachability status is thus available,
   and the Loc-Status-Bits can be set correctly in the LISP data header
   of outgoing packets.

   By placing the tunnel router at the edge of the site, existing
   internal network configuration does not need to be modified.
   Firewall rules, router configurations and address assignments inside
   the LISP site remain unchanged.  This helps with incremental
   deployment and allows a quick upgrade path to LISP.  For larger sites
   with many external connections, distributed in geographically diverse
   PoPs, and complex internal topology, it may however make more sense
   to both encapsulate and decapsulate as soon as possible, to benefit
   from the information in the IGP to choose the best path (see
   Section 2.3 for a discussion of this scenario).

   Another thing to consider when placing tunnel routers are MTU issues.
   Since encapsulating packets increases overhead, the MTU of the end-
   to-end path may decrease, when encapsulated packets need to travel
   over segments having close to minimum MTU.  Some transit networks are
   known to provide larger MTU than the typical value of 1500 bytes of
   popular access technologies used at end hosts (e.g., IEEE 802.3 and
   802.11).  However, placing the LISP router connecting to such a
   network at the customer edge could possibly bring up MTU issues,
   depending on the link type to the provider as opposed to the
   following scenario.

counter measures for that (e.g., =  any special setup that can be done to minimise the = risk
a client is not working properly because of = MTU)
2.2.  Provider Edge

   The other location at the core-edge boundary for deploying LISP
   routers is at the Internet service provider edge.  The main incentive
   for this case is that the customer does not have to upgrade the CE
   router(s), or change the configuration of any equipment.
   Encapsulation/decapsulation happens in the provider's network, which
   may be able to serve several customers with a single device.  For
   large ISPs with many residential/business customers asking for LISP
   this can lead to important savings, since there is no need to upgrade
   the software (or hardware, if it's the case) at each client's
   location.  Instead, they can upgrade the software (or hardware) on a
   few PE routers serving the customers.  This scenario is depicted in
   Figure 2.









Jakab, et al.            Expires April 23, 2013                 [Page 5]
=0C
Internet-Draft               LISP Deployment                October 2012


                  +----------+        +------------------+
                  |   ISP1   |        |       ISP2       |
                  |          |        |                  |
                  |  +----+  |        |  +----+  +----+  |
                  +--|xTR1|--+        +--|xTR2|--|xTR3|--+
                     +----+              +----+  +----+
                        |                  |       |
                        |                  |       |
                        +--<[LISP site]>---+-------+

                          Figure 2: xTR at the PE

   While this approach can make transition easy for customers and may be
   cheaper for providers, the LISP site looses one of the main benefits
   of LISP: ingress traffic engineering.  Since the provider controls
   the ETRs, additional complexity would be needed to allow customers to
   modify their mapping entries.

or the client can have some form of = access to the configuration (a bit like tagging route = with
special communities in BGP to tell the ISP to which of = its operator not advertise the route)
   The problem =
is aggravated when the LISP site is multihomed.  Consider
   the scenario in Figure 2: whenever a change to TE policies is
   required, the customer contacts both ISP1 and ISP2 to make the
   necessary changes on the routers (if they provide this possibility).

ok, cf supra
   It is however unlikely, that both ISPs will apply changes
   simultaneously, which may lead to inconsistent state for the mappings
   of the LISP site.  Since the different upstream ISPs are usually
   competing business entities, the ETRs may even be configured to
   compete, either to attract all the traffic or to get no traffic.  The
   former will happen if the customer pays per volume, the latter if the
   connectivity has a fixed price.  A solution could be to have the
   mappings in the Map-Server(s), and have their operator give control
   over the entries to customer, much like in the Domain Name System at
   the time of this writing.

   Additionally, since xTR1, xTR2, and xTR3 are in different
   administrative domains, locator reachability information is unlikely
   to be exchanged among them, making it difficult to set Loc-Status-
   Bits correctly on encapsulated packets.
IMHO this document should suggest not to use LSB = in the Internet case deployment

   Compared to =
the customer edge scenario, deploying LISP at the
   provider edge might have the advantage of diminishing potential MTU
   issues, because the tunnel router is closer to the core, where links
   typically have higher MTUs than edge network links.

2.3.  Split ITR/ETR

   In a simple LISP deployment, xTRs are located at the border of the
   LISP site (see Section 2.1).  In this scenario packets are routed
   inside the domain according to the EID.  However, more complex



Jakab, et al.            Expires April 23, 2013                 [Page 6]
=0C
Internet-Draft               LISP Deployment                October 2012


   networks may want to route packets according to the destination RLOC.
   This would enable them to choose the best egress point.

   The LISP specification separates the ITR and ETR functionality and
   considers that both entities can be deployed in separated network
   equipment.  ITRs can be deployed closer to the host (i.e., access
   routers).  This way packets are encapsulated as soon as possible, and
   packets exit the network through the best egress point in terms of
   BGP policy.  In turn, ETRs can be deployed at the border routers of
   the network, and packets are decapsulated as soon as possible.  Once
   decapsulated, packets are routed based on destination EID, according
   to internal routing policy.

   In the following figure we can see an example.  The Source (S)
   transmits packets using its EID and in this particular case packets
   are encapsulated at ITR_1.  The encapsulated packets are routed
   inside the domain according to the destination RLOC, and can egress
   the network through the best point (i.e., closer to the RLOC's AS).
   On the other hand, inbound packets are received by ETR_1 which
   decapsulates them.  Then packets are routed towards S according to
   the EID, again following the best path.

      +---------------------------------------+
      |                                       |
      |       +-------+                   +-------+         +-------+
      |       | ITR_1 |---------+         | ETR_1 |-RLOC_A--| ISP_A |
      |       +-------+         |         +-------+         +-------+
      |  +-+        |           |             |
      |  |S|        |    IGP    |             |
      |  +-+        |           |             |
      |       +-------+         |         +-------+         +-------+
      |       | ITR_2 |---------+         | ETR_2 |-RLOC_B--| ISP_B |
      |       +-------+                   +-------+         +-------+
      |                                       |
      +---------------------------------------+

                     Figure 3: Split ITR/ETR Scenario

   This scenario has a set of implications:

   o  The site must carry at least partial BGP routes in order to choose
      the best egress point, increasing the complexity of the network.
      However, this is usually already the case for LISP sites that
      would benefit from this scenario.

   o  If the site is multihomed to different ISPs and any of the
      upstream ISPs is doing uRPF filtering, this scenario may become
      impractical.  ITRs need to determine the exit ETR, for setting the



Jakab, et al.            Expires April 23, 2013                 [Page 7]
=0C
Internet-Draft               LISP Deployment                October 2012


      correct source RLOC in the encapsulation header.  This adds
      complexity and reliability concerns.

   o  In LISP, ITRs set the reachability bits when encapsulating data
      packets.  Hence, ITRs need a mechanism to be aware of the liveness
      of all ETRs serving their site.

   o  MTU within the site network must be large enough to accommodate
      encapsulated packets.

   o  In this scenario, each ITR is serving fewer hosts than in the case
      when it is deployed at the border of the network.  It has been
      shown that cache hit ratio grows logarithmically with the amount
      of users [cache].  Taking this into account, when ITRs are
      deployed closer to the host the effectiveness of the mapping cache
      may be lower (i.e., the miss ratio is higher).  Another
      consequence of this is that the site may transmit a higher amount
      of Map-Requests, increasing the load on the distributed mapping
      database.
one possible solution is to aggregate = Map-Requests with a hierarchy (=E0-la DDT).

2.4.  Inter-Service Provider Traffic Engineering

   With LISP, two LISP sites can route packets among them and control
   their ingress TE policies.  Typically, LISP is seen as applicable to
   stub networks, however the LISP protocol can also be applied to
   transit networks recursively.

   Consider the scenario depicted in Figure 4.  Packets originating from
   the LISP site Stub1, client of ISP_A, with destination Stub4, client
   of ISP_B, are LISP encapsulated at their entry point into the ISP_A's
   network.  The external IP header now has as the source RLOC an IP
   from ISP_A's address space and destination RLOC from ISP_B's address
   space.  One or more ASes separate ISP_A from ISP_B. With a single
   level of LISP encapsulation, Stub4 has control over its ingress
   traffic.  However, at the time of this writing, ISP_B has only BGP
   tools (such as prefix deaggregation) to control on which of his own
   upstream or peering links should packets enter.  This is either not
   feasible (if fine-grained per-customer control is required, the very
   specific prefixes may not be propagated) or increases DFZ table size.

                                  _.--.
    Stub1 ...   +-------+      ,-''     `--.      +-------+   ... Stub3
             \  |   R_A1|----,'             `. ---|R_B1   |  /
              --|   R_A2|---(     Transit     )   |       |--
    Stub2 .../  |   R_A3|-----.             ,' ---|R_B2   |  \... Stub4
                +-------+      `--.     _.-'      +-------+
          ...     ISP_A            `--''            ISP_B     ...




Jakab, et al.            Expires April 23, 2013                 [Page 8]
=0C
Internet-Draft               LISP Deployment                October 2012


               Figure 4: Inter-Service provider TE scenario

   A solution for this is to apply LISP recursively.  ISP_A and ISP_B
   may reach a bilateral agreement to deploy their own private mapping
   system.  ISP_A then encapsulates packets destined for the prefixes of
   ISP_B, which are listed in the shared mapping system.  Note that in
   this case the packet is double-encapsulated (using R_A1, R_A2 or R_A3
   as source and R_B1 or R_B2 as destination in the example above).
   ISP_B's ETR removes the outer, second layer of LISP encapsulation
   from the incoming packet, and routes it towards the original RLOC,
   the ETR of Stub4, which does the final decapsulation.

if there is bilateral agreement, = could we imagine single encapsulation and use instance-id
to = differentiate with the "source" able to install mappings at the second = tier?

   If ISP_A and ISP_B agree to =
share a private distributed mapping
   database, both can control their ingress TE without the need of
   deaggregating prefixes.  In this scenario the private database
   contains RLOC-to-RLOC bindings.  The convergence time on the TE
   policies updates is expected to be fast, since ISPs only have to
   update/query a mapping to/from the database.
but convergence is O(TTL) or then specify to use = SMR or Versioning
   This deployment scenario =
includes two important caveats.  First, it
   is intended to be deployed between only two ISPs (ISP_A and ISP_B in
   Figure 4).  If more than two ISPs use this approach, then the xTRs
   deployed at the participating ISPs must either query multiple mapping
   systems, or the ISPs must agree on a common shared mapping system.
   Second, the scenario is only recommended for ISPs providing
   connectivity to LISP sites, such that source RLOCs of packets to be
   reencapsulated belong to said ISP.  Otherwise the participating ISPs
   must register prefixes they do not own in the above mentioned private
   mapping system.  Failure to follow these recommendations may lead to
   operational and security issues when deploying this scenario.

   Besides these recommendations, the main disadvantages of this
   deployment case are:

   o  Extra LISP header is needed.  This increases the packet size and
      requires that the MTU between both ISPs accommodates double-
      encapsulated packets.

   o  The ISP ITR must encapsulate packets and therefore must know the
      RLOC-to-RLOC binding.  These bindings are stored in a mapping
      database and may be cached in the ITR's mapping cache.  Cache
      misses lead to an additional lookup latency, unless a push based
      mapping system is used for the private mapping system.

   o  The operational overhead of maintaining the shared mapping
      database.





Jakab, et al.            Expires April 23, 2013                 [Page 9]
=0C
Internet-Draft               LISP Deployment                October 2012


   o  If an IPv6 address block is reserved for EID use, as specified in
      [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first
      level) can avoid LISP processing altogether for non-LISP
      destinations.  The ISP tunnel routers however will not be able to
      take advantage of this optimization, all RLOC-to-RLOC mappings
      need a lookup in the private database (or map-cache, once results
      are cached).

2.5.  Tunnel Routers Behind NAT

   NAT in this section refers to IPv4 network address and port
   translation.

2.5.1.  ITR

   Packets encapsulated by an ITR are just UDP packets from a NAT
   device's point of view, and they are handled like any UDP packet,
   there are no additional requirements for LISP data packets.

   Map-Requests sent by an ITR, which create the state in the NAT table,
   have a different 5-tuple in the IP header than the Map-Reply
   generated by the authoritative ETR.  Since the source address of this
   packet is different from the destination address of the request
   packet, no state will be matched in the NAT table and the packet will
   be dropped.  To avoid this, the NAT device has to do the following:

   o  Send all UDP packets with source port 4342, regardless of the
      destination port, to the RLOC of the ITR.  The most simple way to
      achieve this is configuring 1:1 NAT mode from the external RLOC of
      the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer
      broadband routers).

   o  Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in
      the payload.

   This setup supports a single ITR behind the NAT device.

2.5.2.  ETR

   An ETR placed behind NAT is reachable from the outside by the
   Internet-facing locator of the NAT device.  It needs to know this
   locator (and configure a loopback interface with it), so that it can
   use it in Map-Reply and Map-Register messages.  Thus support for
   dynamic locators for the mapping database is needed in LISP
   equipment.

   Again, only one ETR behind the NAT device is supported.




Jakab, et al.            Expires April 23, 2013                [Page 10]
=0C
Internet-Draft               LISP Deployment                October 2012


   An implication of the issues described above is that LISP sites with
   xTRs can not be behind carrier based NATs, since two different sites
   would collide on the port forwarding.

2.6.  Summary and Feature Matrix

          Feature                         CE    PE    Split   Rec.
          --------------------------------------------------------
          Control of ingress TE            x     -      x      x
          No modifications to existing
             int. network infrastructure   x     x      -      -
          Loc-Status-Bits sync             x     -      x      x
          MTU/PMTUD issues minimized       -     x      -      x
Does Rec. mean recursive? if so, make it = explicit

3.  Map-Resolvers and Map-Servers

3.1.  Map-Servers
s/Map-Server/Map Server/ga

   The Map-Server learns EID-to-RLOC mapping entries from an
   authoritative source and publishes them in the distributed mapping
   database.  These entries are learned through authenticated Map-
   Register messages sent by authoritative ETRs.  Also, upon reception
   of a Map-Request, the Map-Server verifies that the destination EID
   matches an EID-prefix for which it is authoritative for, and then re-
   encapsulates and forwards it to a matching ETR.  Map-Server
   functionality is described in detail in [I-D.ietf-lisp-ms].

   The Map-Server is provided by a Mapping Service Provider (MSP).  A
   MSP can be any of the following:

   o  EID registrar.  Since the IPv4 address space is nearing
      exhaustion, IPv4 EIDs will come from already allocated Provider
      Independent (PI) space.  The registrars in this case remain the
      current five Regional Internet Registries (RIRs).  In the case of
      IPv6, the possibility of reserving a /16 block as EID space is
      currently under consideration [I-D.ietf-lisp-eid-block].  If
      granted by IANA, the community will have to determine the body
      responsible for allocations from this block, and the associated
      policies.  Existing allocation policies apply to EIDs outside this
      block.

   o  Third parties.  Participating in the LISP mapping system is
      similar to participating in global routing or DNS: as long as
      there is at least another already participating entity willing to
      forward the newcomer's traffic, there is no barrier to entry.
      Still, just like routing and DNS, LISP mappings have the issue of
      trust, with efforts underway to make the published information



Jakab, et al.            Expires April 23, 2013                [Page 11]
=0C
Internet-Draft               LISP Deployment                October 2012


      verifiable.  When these mechanisms will be deployed in the LISP
      mapping system, the burden of providing and verifying trust should
      be kept away from MSPs, which will simply host the secured
      mappings.  This will keep the low barrier of entry to become an
      MSP for third parties.

   In all cases, the MSP configures its Map-Server(s) to publish the
   prefixes of its clients in the distributed mapping database and start
   encapsulating and forwarding Map-Requests to the ETRs of the AS.
   These ETRs register their prefix(es) with the Map-Server(s) through
   periodic authenticated Map-Register messages.  In this context, for
   some LISP end sites, there is a need for mechanisms to:
how periodic (suggestion of good = timers)?
   o  Automatically distribute EID =
prefix(es) shared keys between the
      ETRs and the EID-registrar Map-Server.

   o  Dynamically obtain the address of the Map-Server in the ETR of the
      AS.

   The Map-Server plays a key role in the reachability of the EID-
   prefixes it is serving.  On the one hand it is publishing these
   prefixes into the distributed mapping database and on the other hand
   it is encapsulating and forwarding Map-Requests to the authoritative
   ETRs of these prefixes.  ITRs encapsulating towards EIDs under the
   responsibility of a failed Map-Server will be unable to look up any
   of their covering prefixes.  The only exception are the ITRs that
   already contain the mappings in their local cache.  In this case ITRs
   can reach ETRs until the entry expires (typically 24 hours). =

where does the "typically 24h" come = from?
 For
   this reason, redundant Map-Server deployments are desirable.  A set
   of Map-Servers providing high-availability service to the same set of
   prefixes is called a redundancy group.  ETRs are configured to send
   Map-Register messages to all Map-Servers in the redundancy group.  To
   achieve fail-over (or load-balancing, if =
desired),

 known mapping
   system specific best practices should be used.

what is meant by this very = sentence?

   Additionally, if a Map-Server =
has no reachability for any ETR serving
   a given EID block, it should not originate that block into the
   mapping system.
why?

3.2.  =
Map-Resolvers
s/Map-Resolver/Map = Resolver/ga

   A Map-Resolver a is a network =
infrastructure component which accepts
   LISP encapsulated Map-Requests, typically from an ITR, and finds the
   appropriate EID-to-RLOC mapping by either consulting its local cache
   or by consulting the distributed mapping database.  Map-Resolver
   functionality is described in detail in [I-D.ietf-lisp-ms].

   Anyone with access to the distributed mapping database can set up a



Jakab, et al.            Expires April 23, 2013                [Page 12]
=0C
Internet-Draft               LISP Deployment                October 2012


   Map-Resolver and provide EID-to-RLOC mapping lookup service.
   Database access setup is mapping system specific.

   For performance reasons, it is recommended that LISP sites use Map-
   Resolvers that are topologically close to their ITRs.  ISPs
   supporting LISP will provide this service to their customers,
   possibly restricting access to their user base.  LISP sites not in
   this position can use open access Map-Resolvers, if available.
   However, regardless of the availability of open access resolvers, the
   MSP providing the Map-Server(s) for a LISP site should also make
   available Map-Resolver(s) for the use of that site.

   In medium to large-size ASes, ITRs must be configured with the RLOC
   of a Map-Resolver, operation which can be done manually.  However, in
   Small Office Home Office (SOHO) scenarios a mechanism for
   autoconfiguration should be provided.

   One solution to avoid manual configuration in LISP sites of any size
   is the use of anycast RLOCs for Map-Resolvers similar to the DNS root
   server infrastructure.  Since LISP uses UDP encapsulation, the use of
   anycast would not affect =
reliability.

maybe change the term = reliability because anycast actually improves reliability, = isnt'it?
  LISP routers are then shipped
   with a preconfigured list of well know Map-Resolver RLOCs, which can
   be edited by the network administrator, if needed.

   The use of anycast also helps improving mapping lookup performance.
   Large MSPs can increase the number and geographical diversity of
   their Map-Resolver infrastructure, using a single anycasted RLOC.
   Once LISP deployment is advanced enough, very large content providers
   may also be interested running this kind of setup, to ensure minimal
   connection setup latency for those connecting to their network from
   LISP sites.

   While Map-Servers and Map-Resolvers implement different
   functionalities within the LISP mapping system, they can coexist on
   the same device.  For example, MSPs offering both services, can
   deploy a single Map-Resolver/Map-Server in each PoP where they have a
   presence.


4.  Proxy Tunnel Routers

4.1.  P-ITR

   Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP
   transition mechanism, allowing non-LISP sites to reach LISP sites.
   They announce via BGP certain EID prefixes (aggregated, whenever
   possible) to attract traffic from non-LISP sites towards EIDs in the
   covered range.  They do the mapping system lookup, and encapsulate



Jakab, et al.            Expires April 23, 2013                [Page 13]
=0C
Internet-Draft               LISP Deployment                October 2012


   received packets towards the appropriate ETR.  Note that for the
   reverse path LISP sites can reach non-LISP sites simply by not
   encapsulating traffic.  See [I-D.ietf-lisp-interworking] for a
   detailed description of P-ITR functionality.

   The success of new protocols depends greatly on their ability to
   maintain backwards compatibility and inter-operate with the
   protocol(s) they intend to enhance or replace, and on the incentives
   to deploy the necessary new software or equipment.  A LISP site needs
   an interworking mechanism to be reachable from non-LISP sites.  A
   P-ITR can fulfill this role, enabling early adopters to see the
   benefits of LISP, similar to tunnel brokers helping the transition
   from IPv4 to IPv6.  A site benefits from new LISP functionality
   (proportionally with existing global LISP deployment) when going
   LISP, so it has the incentives to deploy the necessary tunnel
   routers.  In order to be reachable from non-LISP sites it has two
   options: keep announcing its prefix(es) with BGP, or have a P-ITR
   announce prefix(es) covering them.

   If the goal of reducing the DFZ routing table size is to be reached,
   the second option is preferred.  Moreover, the second option allows
   LISP-based ingress traffic engineering from all sites.  However, the
   placement of P-ITRs significantly influences performance and
   deployment incentives.  Section 5 is dedicated to the migration to a
   LISP-enabled Internet, and includes deployment scenarios for P-ITRs.

4.2.  P-ETR

   In contrast to P-ITRs, P-ETRs are not required for the correct
   functioning of all LISP sites.  There are two cases, where they can
   be of great help:

   o  LISP sites with unicast reverse path forwarding (uRPF)
      restrictions, and

   o  Communication between sites using different address family RLOCs.

   In the first case, uRPF filtering is applied at their upstream PE
   router.  When forwarding traffic to non-LISP sites, an ITR does not
   encapsulate packets, leaving the original IP headers intact.  As a
   result, packets will have EIDs in their source address.  Since we are
   discussing the transition period, we can assume that a prefix
   covering the EIDs belonging to the LISP site is advertised to the
   global routing tables by a P-ITR, and the PE router has a route
   towards it.  However, the next hop will not be on the interface
   towards the CE router, so non-encapsulated packets will fail uRPF
   checks.




Jakab, et al.            Expires April 23, 2013                [Page 14]
=0C
Internet-Draft               LISP Deployment                October 2012


   To avoid this filtering, the affected ITR encapsulates packets
   towards the locator of the P-ETR for non-LISP destinations.  Now the
   source address of the packets, as seen by the PE router is the ITR's
   locator, which will not fail the uRPF check.  The P-ETR then
   decapsulates and forwards the packets.

   The second use case is IPv4-to-IPv6 transition.  Service providers
   using older access network hardware, which only supports IPv4 can
   still offer IPv6 to their clients, by providing a CPE device running
   LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP
   sites, with IPv6-only locators.  Packets originating from the client
   LISP site for these destinations would be encapsulated towards the
   P-ETR's IPv4 locator.  The P-ETR is in a native IPv6 network,
   decapsulating and forwarding packets.  For non-LISP destination, the
   packet travels natively from the P-ETR.  For LISP destinations with
   IPv6-only locators, the packet will go through a P-ITR, in order to
   reach its destination.

   For more details on P-ETRs see the [I-D.ietf-lisp-interworking]
   draft.

   P-ETRs can be deployed by ISPs wishing to offer value-added services
   to their customers.  As is the case with P-ITRs, P-ETRs too may
   introduce path stretch.  Because of this the ISP needs to consider
   the tradeoff of using several devices, close to the customers, to
   minimize it, or few devices, farther away from the customers,
   minimizing cost instead.

   Since the deployment incentives for P-ITRs and P-ETRs are different,
   it is likely they will be deployed in separate devices, except for
   the CDN case, which may deploy both in a single device.

   In all cases, the existence of a P-ETR involves another step in the
   configuration of a LISP router.  CPE routers, which are typically
   configured by DHCP, stand to benefit most from P-ETRs.
   Autoconfiguration of the P-ETR locator could be achieved by a DHCP
   option, or adding a P-ETR field to either Map-Notifys or Map-Replies.

   As a security measure, access to P-ETRs should be limited to
   legitimate users by enforcing ACLs.


5.  Migration to LISP

   This section discusses a deployment architecture to support the
   migration to a LISP-enabled Internet.  The loosely defined terms of
   "early transition phase", "late transition phase", and "LISP Internet
   phase" refer to time periods when LISP sites are a minority, a



Jakab, et al.            Expires April 23, 2013                [Page 15]
=0C
Internet-Draft               LISP Deployment                October 2012


   majority, or represent all edge networks respectively.

5.1.  LISP+BGP

   For sites wishing to go LISP with their PI prefix the least
   disruptive way is to upgrade their border routers to support LISP,
   register the prefix into the LISP mapping system, but keep announcing
   it with BGP as well.  This way LISP sites will reach them over LISP,
   while legacy sites will be unaffected by the change.  The main
   disadvantage of this approach is that no decrease in the DFZ routing
   table size is achieved.  Still, just increasing the number of LISP
   sites is an important gain, as an increasing LISP/non-LISP site ratio
   will slowly decrease the need for BGP-based traffic engineering that
   leads to prefix deaggregation.  That, in turn, may lead to a decrease
   in the DFZ size in the late transition phase.

and potentially the churn (except = maybe because of PITR)
   This =
scenario is not limited to sites that already have their
   prefixes announced with BGP.  Newly allocated EID blocks could follow
   this strategy as well during the early LISP deployment phase,
   depending on the cost/benefit analysis of the individual networks.
   Since this leads to an increase in the DFZ size, the following
   architecture should be preferred for new allocations.

5.2.  Mapping Service Provider (MSP) P-ITR Service

   In addition to publishing their clients' registered prefixes in the
   mapping system, MSPs with enough transit capacity can offer them
   P-ITR service as a separate service.  This service is especially
   useful for new PI allocations, to sites without existing BGP
   infrastructure, that wish to avoid BGP altogether.  The MSP announces
   the prefix into the DFZ, and the client benefits from ingress traffic
   engineering without prefix deaggregation.  The downside of this
   scenario is adding path stretch.

   Routing all non-LISP ingress traffic through a third party which is
   not one of its ISPs is only feasible for sites with modest amounts of
   traffic (like those using the IPv6 tunnel broker services today),
   especially in the first stage of the transition to LISP, with a
   significant number of legacy sites.  When the LISP/non-LISP site
   ratio becomes high enough, this approach can prove increasingly
   attractive.

   Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix
   deaggregation for traffic engineering purposes, resulting in slower
   routing table increase in the case of new allocations and potential
   decrease for existing ones.  Moreover, MSPs serving different clients
   with adjacent aggregable prefixes may lead to additional decrease,
   but quantifying this decrease is subject to future research study.



Jakab, et al.            Expires April 23, 2013                [Page 16]
=0C
Internet-Draft               LISP Deployment                October 2012


5.3.  Proxy-ITR Route Distribution (PITR-RD)

   Instead of a LISP site, or the MSP, announcing their EIDs with BGP to
   the DFZ, this function can be outsourced to a third party, a P-ITR
   Service Provider (PSP).  This will result in a decrease of the
   operational complexity both at the site and at the MSP.

   The PSP manages a set of distributed P-ITR(s) that will advertise the
   corresponding EID prefixes through BGP to the DFZ.  These P-ITR(s)
   will then encapsulate the traffic they receive for those EIDs towards
   the RLOCs of the LISP site, ensuring their reachability from non-LISP
   sites.

   While it is possible for a PSP to manually configure each client's
   EID routes to be announced, this approach offers little flexibility
   and is not scalable.  This section presents a scalable architecture
   that offers automatic distribution of EID routes to LISP sites and
   service providers.

   The architecture requires no modification to existing LISP network
   elements, but it introduces a new (conceptual) network element, the
   EID Route Server, defined as a router that either propagates routes
   learned from other EID Route Servers, or it originates EID Routes.
   The EID-Routes that it originates are those that it is authoritative
   for.  It propagates these routes to Proxy-ITRs within the AS of the
   EID Route Server.  It is worth to note that a BGP capable router can
   be also considered as an EID Route Server.

   Further, an EID-Route is defined as a prefix originated via the Route
   Server of the mapping service provider, which should be aggregated if
   the MSP has multiple customers inside a single netblock. =
define netblock
 This prefix
   is propagated to other P-ITRs both within the MSP and to other P-ITR
   operators it peers with.  EID Route Servers are operated either by
   the LISP site, MSPs or PSPs, and they may be collocated with a Map-
   Server or P-ITR, but are a functionally discrete entity.  They
   distribute EID-Routes, using BGP, to other domains, according to
   policies set by participants.














Jakab, et al.            Expires April 23, 2013                [Page 17]
=0C
Internet-Draft               LISP Deployment                October 2012


                              MSP (AS64500)
                              RS ---> P-ITR
                               |        /
                               |  _.--./
                              ,-''    /`--.
             LISP site   ---,' |     v     `.
                           (   |   DFZ       )----- Mapping system
         non-LISP site   ----. |    ^      ,'
                              `--. /   _.-'
                               |  `--''
                               v /
                             P-ITR
                             PSP (AS64501)

            Figure 5: The P-ITR Route Distribution architecture

   The architecture described above decouples EID origination from route
   propagation, with the following benefits:

   o  Can accurately represent business relationships between P-ITR
      operators

   o  More mapping system agnostic

   o  Minor changes to P-ITR implementation, no changes to other
      components

   In the example in the figure we have a MSP providing services to the
   LISP site.  The LISP site does not run BGP, and gets an EID
   allocation directly from a RIR, or from the MSP, who may be a LIR.
   Existing PI allocations can be migrated as well.  The MSP ensures the
   presence of the prefix in the mapping system, and runs an EID Route
   Server to distribute it to P-ITR service providers.  Since the LISP
   site does not run BGP, the prefix will be originated with the AS
   number of the MSP.

   In the simple case depicted in Figure 5 the EID-Route of LISP Site
   will be originated by the Route Server, and announced to the DFZ by
   the PSP's P-ITRs with AS path 64501 64500.  =46rom that point on, the
   usual BGP dynamics apply.  This way, routes announced by P-ITR are
   still originated by the authoritative Route Server.  Note that the
   peering relationships between MSP/PSPs and those in the underlying
   forwarding plane may not be congruent, making the AS path to a P-ITR
   shorter than it is in reality.

   The non-LISP site will select the best path towards the EID-prefix,
   according to its local BGP policies.  Since AS-path length is usually
   an important metric for selecting paths, a careful placement of P-ITR



Jakab, et al.            Expires April 23, 2013                [Page 18]
=0C
Internet-Draft               LISP Deployment                October 2012


   could significantly reduce path-stretch between LISP and non-LISP
   sites.

   The architecture allows for flexible policies between MSP/PSPs.
   Consider the EID Route Server networks as control plane overlays,
   facilitating the implementation of policies necessary to reflect the
   business relationships between participants.  The results are then
   injected to the common underlying forwarding plane.  For example,
   some MSP/PSPs may agree to exchange EID-Prefixes and only announce
   them to each of their forwarding plane customers.  Global
   reachability of an EID-prefix depends on the MSP the LISP site buys
   service from, and is also subject to agreement between the mentioned
   parties.

   In terms of impact on the DFZ, this architecture results in a slower
   routing table increase for new allocations, since traffic engineering
   will be done at the LISP level.  For existing allocations migrating
   to LISP, the DFZ may decrease since MSPs may be able to aggregate the
   prefixes announced.

   Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix
   deaggregation for traffic engineering purposes, resulting in slower
   routing table increase in the case of new allocations and potential
   decrease for existing ones.  Moreover, MSPs serving different clients
   with adjacent aggregable prefixes may lead to additional decrease,
   but quantifying this decrease is subject to future research study.

   The flexibility and scalability of this architecture does not come
   without a cost however: A PSP operator has to establish either
   transit or peering relationships to improve their connectivity.
What's happening when sites have to change their = EID? for example after a network merge.

5.4.  Migration Summary

   The following table presents the expected effects of the different
   transition scenarios during a certain phase on the DFZ routing table
   size:

    Phase            | LISP+BGP     | MSP P-ITR       | PITR-RD
    -----------------+--------------+-----------------+----------------
    Early transition | no change    | slower increase | slower increase
    Late transition  | may decrease | slower increase | slower increase
    LISP Internet    |             considerable decrease
The "considerable decrease" depends on where = LISP is deployed, if it is very close to the
hosts, maybe it = would not be so considerable.

   It is =
expected that PITR-RD will co-exist with LISP+BGP during the
   migration, with the latter being more popular in the early transition
   phase.  As the transition progresses and the MSP P-ITR and PITR-RD
   ecosystem gets more ubiquitous, LISP+BGP should become less
   attractive, slowing down the increase of the number of routes in the



Jakab, et al.            Expires April 23, 2013                [Page 19]
=0C
Internet-Draft               LISP Deployment                October 2012


   DFZ.


6.  Step-by-Step Example BGP to LISP Migration Procedure

6.1.  Customer Pre-Install and Pre-Turn-up Checklist

   1.  Determine how many current physical service provider connections
       the customer has and their existing bandwidth and traffic
       engineering requirements.

       This information will determine the number of routing locators,
       and the priorities and weights that should be configured on the
       xTRs.

   2.  Make sure customer router has LISP capabilities.

       *  Obtain output of 'show version' from the CE router.
too Cisco ;-)
uname -a is another way = :-D
          This information can be used to =
determine if the platform is
          appropriate to support LISP, in order to determine if a
          software and/or hardware upgrade is required.

       *  Have customer upgrade (if necessary, software and/or hardware)
          to be LISP capable.

   3.  Obtain current running configuration of CE router.  A suggested
       LISP router configuration example can be customized to the
       customer's existing environment.

   4.  Verify MTU Handling

       *  Request increase in MTU to (1556) =

why = parenthesis?

on service provider
          connections.  Prior to MTU change verify that 1500 byte packet
          from P-xTR to RLOC with do not fragment (DF-bit) bit set.

       *  Ensure they are not filtering ICMP unreachable or time-
          exceeded on their firewall or router.

       LISP, like any tunneling protocol, will increase the size of
       packets when the LISP header is appended.  If increasing the MTU
       of the access links is not possible, care must be taken that ICMP
       is not being filtered in order to allow for Path MTU Discovery to
       take place.

   5.  Validate member prefix allocation.

       This step is to check if the prefix used by the customer is a



Jakab, et al.            Expires April 23, 2013                [Page 20]
=0C
Internet-Draft               LISP Deployment                October 2012


       direct (Provider Independent), or if it is a prefix assigned by a
       physical service provider (Provider =
Allocated).

I always thought PA meant = "Provider Aggregatable". 
  If the prefixes
       are assigned by other service provivers then a Letter of
       Agreement is required to announce prefixes through the Proxy
       Service Provider.

   6.  Verify the member RLOCs and their reachability.

       This step ensures that the RLOCs configured on the CE router are
       in fact reachable and working.

   7.  Prepare for cut-over.

       *  If possible, have a host outside of all security and filtering
          policies connected to the console port of the edge router or
          switch.

       *  Make sure customer has access to the router in order to
          configure it.

6.2.  Customer Activating LISP Service

   1.  Customer configures LISP on CE router(s) from service provider
       recommended configuration.

       The LISP configuration consists of the EID prefix, the locators,
       and the weights and priorities of the mapping between the two
       values.  In addition, the xTR must be configured with Map-
       Resolver(s), Map-Server(s) and the shared key for registering to
       Map-Server(s).  If required, Proxy-ETR(s) may be configured as
       well.

       In addition to the LISP configuration, the following:

       *  Ensure default route(s) to next-hop external neighbors are
          included and RLOCs are present in configuration.

       *  If two or more routers are used, ensure all RLOCs are included
          in the LISP configuration on all routers.

       *  It will be necessary to redistribute default route via IGP
          between the external routers.

   2.  When transition is ready perform a soft shutdown on existing eBGP
       peer session(s)

       *  =46rom CE router, use LIG to ensure registration is =
successful.




Jakab, et al.            Expires April 23, 2013                [Page 21]
=0C
Internet-Draft               LISP Deployment                October 2012


       *  To verify LISP connectivity, ping LISP connected sites.  See
          http://www.lisp4.net/ =
and/or http://www.lisp6.net/ for
          potential candidates.

       *  To verify connectivity to non-LISP sites, try =
accessing
a landmark (e.g., a 
 major
          Internet sites via a web browser.
).
6.3.  Cut-Over =
Provider Preparation and Changes

   1.  Verify site configuration and then active registration on Map-
       Server(s)

       *  Authentication key

       *  EID prefix

   2.  Add EID space to map-cache on proxies

   3.  Add networks to BGP advertisement on proxies

       *  Modify route-maps/policies on P-xTRs

       *  Modify route policies on core routers (if non-connected
          member)

       *  Modify ingress policers on core routers

       *  Ensure route announcement in looking glass servers, RouteViews

   4.  Perform traffic verification test

       *  Ensure MTU handling is as expected (PMTUD working)

       *  Ensure proxy-ITR map-cache population

       *  Ensure access from traceroute/ping servers around Internet

       *  Use a looking glass, to check for external visibility of
          registration via several Map-Resolvers (e.g.,
          http://lispmon.net/).


7.  Security Considerations

   Security implications of LISP deployments are to be discussed in
   separate documents.  =
[I-D.saucez-lisp-security]
draft-ietf-lisp-threats-03
 gives an overview of
   LISP threat models, while securing mapping lookups is discussed in
   [I-D.ietf-lisp-sec].



Jakab, et al.            Expires April 23, 2013                [Page 22]
=0C
Internet-Draft               LISP Deployment                October 2012
[snip]

Damien = Saucez
= --Apple-Mail=_3181291A-C58C-4A6A-BAA0-7876B2265084-- From heinerhummel@aol.com Wed Jan 16 12:21:05 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D867011E80A2 for ; Wed, 16 Jan 2013 12:21:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.278 X-Spam-Level: X-Spam-Status: No, score=-2.278 tagged_above=-999 required=5 tests=[AWL=-0.880, BAYES_50=0.001, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_CHICKENPOX_23=0.6] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s1cchrCqgMj6 for ; Wed, 16 Jan 2013 12:21:02 -0800 (PST) Received: from imr-da04.mx.aol.com (imr-da04.mx.aol.com [205.188.105.146]) by ietfa.amsl.com (Postfix) with ESMTP id 19D1421F8936 for ; Wed, 16 Jan 2013 12:21:01 -0800 (PST) Received: from mtaomg-da06.r1000.mx.aol.com (mtaomg-da06.r1000.mx.aol.com [172.29.51.142]) by imr-da04.mx.aol.com (Outbound Mail Relay) with ESMTP id 7698A1C00020F for ; Wed, 16 Jan 2013 15:21:00 -0500 (EST) Received: from core-dqe004a.r1000.mail.aol.com (core-dqe004.r1000.mail.aol.com [172.29.162.77]) by mtaomg-da06.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 2A719E00008A for ; Wed, 16 Jan 2013 15:21:00 -0500 (EST) References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> <8CFBECB54BB9457-1330-109E6@webmail-m172.sysops.aol.com> <8CFBF859AE6BE4E-1B10-166FB@webmail-d050.sysops.aol.com> <8CFC1F77A353DF3-B38-37444@webmail-m157.sysops.aol.com> <8CFC22CFBD9CD50-17D8-3A9EA@webmail-m089.sysops.aol.com> To: lisp@ietf.org In-Reply-To: <8CFC22CFBD9CD50-17D8-3A9EA@webmail-m089.sysops.aol.com> X-MB-Message-Source: WebUI MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFC23E21AD1420_894_BF703_webmail-m146.sysops.aol.com" X-Mailer: Webmail 37288-STANDARD Received: from 178.26.192.122 by webmail-m146.sysops.aol.com (149.174.9.8) with HTTP (WebMailUI); Wed, 16 Jan 2013 15:20:59 -0500 Message-Id: <8CFC23E2159C3DD-894-3A7D9@webmail-m146.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Wed, 16 Jan 2013 15:21:00 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1358367660; bh=KHfINx+pF2ZLTvGZJcnHKpyrQxoc+RdJ+qXwoVay+Q4=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=hpVGs9Gte+PhRnf/XgavW6BRB2LqewCwigSXTY498lx0Vqz7Ejqo+pr6xRrspjbU0 WJ22sIlPGt7Dg6oPCZlE20VTyy3EMiqcZHBQ3KOVjKEv9gLxm/FoAZG9pRD4ZxsH4Y R5d4/wK1cK6TC3qavEs6wSL7W8/KTHb84Q8InW2Q= X-AOL-SCOLL-SCORE: 0:2:451693568:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d338e50f70bac1ef1 Subject: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2013 20:21:05 -0000 This is a multi-part message in MIME format. ----------MB_8CFC23E21AD1420_894_BF703_webmail-m146.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Dino, As you can see, I have chosen a peaceful and neutral subject line. See belo= w my comments. Heiner -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Dino Farinacci An: heinerhummel Cc: gih ; ggx ; lisp Verschickt: Sa, 12 Jan 2013 10:11 pm Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup Well spoken. Again, after the short late-night email, because: Since you were subjective on your comments I will be direct and to the poin= t in my responses. But only direct to your comments that are clear.=20 1) There is a long list of deficiencies which LISP maintains and which are = due to clinging to=20 paradigms like prefix building, DiffServ=20 Do you mean map-cache caching. I don't know what you mean by prefix buildin= g. EID-prefixes are assigned to LISP sites just like prefixes are assigned = today. There is no operational difference.=20 HH: I mean using prefixes AT ALL !!!: I know this is state of art in cla= ssical internet routing. LISP-TARA (yes, TARA is a loc-id-split solution) w= ould reduce it be the same degree by which TARA routers were deployed. Afte= r all, you can't use prefixes for multicast or anycast either. As far as I = know IPv4- FIBs don't have any entries for multicast or anycast. Do you know whether IPv6 has a multicast-FIB and/or an anycast-FIB ? My gue= ss is NO. Instead I believe that this is another IETF-law that there is onl= y 1 FIB :-( =20 bottom line "no interest in knowing the traffic outside/beyond the packets'= incoming waiting queues",etc.etc. (I don't want to repeat it here) Diffswev code points are copied to the outer header. And we have seen cases= where carrier-in-carrier scenarios, it is a feature to hide such code poin= ts.=20 HH: I am accusing the DiffServ philosophy, which was once a counter movemen= t to IntServ where available bandwidth capacities played a major role. The DiffServ philosophy prevented that ideas were cast to make routers aw= are of the traffic in the near surrounding and to deal with it - even witho= ut connections a la SVC or LSP..=20 2) LISP specifics: a) Its structures are fixed though not even an idea is cast how to form= and handle Multicast- and Anycast-Locators. Not true. Both EID and Locator address formats are flexibly encoded. We hav= e seen use-cases where EIDs could be used as Fedex tracking numbers or VIN = numbers (Vehicle ID Numbers). And we have seen Locators encoded as multi-tu= ple addresses that include Geo-Coordinates.=20 Anycast services (nearest hospital, nearest rescuer, nearest parkin= g lot, nearest gas station, etc.) aren't considered at all. An EID can be used as an anycast address where the database lookup can deci= de which locators to return. And Locators can be anycast addresses as well = to encapsulate packets to the closest locator. Nothing needs to be designed= in the protocol to make this happen.=20 Most of the anycast services have to be scoped (it makes no sense to= disseminate "I am an empty parking lot in Munich." all over Germany/world) Since LISP uses a pull database, there is no dissemination in the mapping s= ystem.=20 HH:=20 Does your database ask back "where are you, user, so that I can send you th= e right locator "? By your description that database is an anycast server .=20 Do you envision that the users are mobile and will repeat their query every= now and then ? Don't you be afraid of bottle necks ? Note, one aspect of the scalability was the update churn. Your PULL solutio= n will create query churns to few (how few?) such databases. This will ham= per the general operability of the internet itself. An anycast service typically needs a scope (see mentioned examples above).= The areas your databases are responsible for won't comply with the area a= ny particular anycast service is limited to. In short: it doesn't fit at al= l! =20 Anyone that wants to talk to the EID will need to cache the locators but on= ly in those locations.=20 and I doubt that LISP-PULL fits in. Also: By dealing only with unica= st, LISP does not provide and bits to differentiate between unicast, multic= ast,... Because the existing semantics are used. Class D encodings for IPv4 and fir= st-byte 0xFF for IPv6.=20 HH:Why so shy? You have a brand new (LISP) header and can do what you want = and should be interested in fast forwarding. There is unicast, multicast, a= nycast, mp2mp, mp2p and broadcast to be differentiated. That could be done = better than by address range differentiation b) GRE-tunnel nesting is a great bail out. A new concept however sho= uld try to avoid it as much as possible .LISP however prefers=20 LISP-header nesting rather than enlisting transits inside of ONE e= xtended LISP-header. LISP does re-encapsulating tunnels as well. See definition of RTRs in the T= E and NAT-traversal Internet Drafts.=20 HH: Sure, but there are cases (detours) where employing a list of transit n= odes is simpler than multiple pairs of ITR and ETR . 3) LISP-DDT specific: It will kill IPv4 and I honestly think about writing to the IESG and ex= plain to the IESG why, and why this is not just a bug that can be repaired= whithin=20 This makes no sense. Why would it kill IPv4 and not IPv6? DDT uses the iterative lookup model that DNS uses. Those properties are wel= l known and we have a lot of experience with them.=20 LISP-DDT. Here only this: At first I thought LISP-DDT is doomed to fail= , but being the coffin nail for IPv4 is the alternate and even worse conseq= uence. Can you back the claim up with some data and technical commentary.=20 If you do, I would be glad to continue this thread.=20 Dino HH: Dino, your original LISP envisioned several versions: LISP2.0 using DNS and= others, one of which then became the preferred one. Many years have passed and we now encounter not only the scalability proble= m but also the ipv4 unicast address depletion problem. The honorable intention of LISP was to support IPv4 rather than to pull ove= r to IPv6. I am sure you agree. (IPv6 has so much address space, enough to address fractions of any square = inch of the globe, i.e. could esily encompass any locator info. But, I thi= nk, neglecting ipv4 would be irresponsible. I am sure you agree again.)=20 LOC-ID-SPLIT not only meant "routing based on the locator to the egress-si= te" but also to identify any host by the info-doublet {ID=3Dipv4 address ; LOC=3D locato= r} in a globally unique way, in case the iPv4 address by itself cannot be g= lobally unique anymore due to the ipv4 unicast address depletion problem. Put in different words: the ipv4 address of any host must (only) be unique = per that site which is indicated by the respective locator. (1)Provided that this is still a basic assumption of the LISP-group I concl= ude: LISP-DDT will fail for sure. (2)Provided that LISP expects that there cannot be any further hosts with I= Pv4 addresses after all ipv4 unicast addresses are used up I conclude: LISP= -DDT kills IPv4. Why: It is a MUST to get the info-doublet {ID=3Dipv4 address ; LOC=3D locator} b= y one single query !!! Period.!!! Analogous example: Imagine, you have to write a letter to Mr. Li (there are about 20 million p= eople with this name), you only write this name on the envelope and ask the= officer at your (ingress) post office to add the address of Mr. Li all by = himself/herself (because he/she might have a database with all addresses = of all persons in the world - btw which of course is not true). Facit: Tha= t cannot work !!! Hence: The FQDN must be converted to {ID=3Dipv4 address ; LOC=3D locator} by one s= ingle query, i.e. must be done by the host itself, i.e. the host must prepe= nd the LISP header ! Eventually the ingress router might intercept the DNS-= query and act as a proxy, but even if so, the query must be sent to the DNS= and to no other database ! Sorry Dino, your defending DDT (how much better it is compared to LISP2.0 = (DNS) couldn't convince me at all. Heiner =20 =20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Geoff Huston An: Luigi Iannone Cc: LISP mailing list list Verschickt: Mi, 9 Jan 2013 9:57 pm Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: > Hi Geoff, >=20 > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >=20 >>=20 >> On 08/01/2013, at 9:34 PM, SM wrote: >>=20 >>> Hi Terry, >>> At 22:03 07-01-2013, Terry Manderson wrote: >>>> However, before the WG starts to rework the document, I would first li= ke to >>>> canvass the LISP WG as to your opinions. >>>>=20 >>>> 1) Should we, as a WG, continue to work on this item? Is it=20 necessary/useful >>>> for LISP? >>>=20 >>> The work item seems useful. >>>=20 >>>> 2) If so, what direction should the WG take this document so that the = LISP >>>> experiment is best served? >>>=20 >>> The problem is justifying the IP address space allocation and explainin= g how=20 it will be managed. >>>=20 >>> My guess is that the working group took an ORCHID approach (copy and pa= ste=20 :-)). I suggest dropping the idea of calling it a very large-scale experim= ent. =20 The unstated problem is about politics. I suggest taking a look at=20 draft-lear-lisp-nerd-09. It contains a good discussion of operational mode= ls=20 and the trade-offs. >>>=20 >>=20 >> I was on the IAB at the time that ORCHID was being considered - the issu= e=20 there was to find a balance between enough bits for acceptable crypto and b= asic=20 conservatism in the absolute size of the request - at the time a /28 appear= ed to=20 be a suitable compromise considering that this was an experiment. >>=20 >> Given that this is an experiment and that the transition from experiment= to=20 widespread deployment may well entail renumbering (as was the case with the= =20 6bone) then one approach may well be to use a modest prefix that has a limi= ted=20 capacity that would force renumbering in the shift from experiment to wides= pread=20 adoption, if such occurs in the future. >>=20 >=20 > I may be mistake but I do not see the renumbering need in the LISP case. It all depends on the philosophy behind experimental allocations. If we wer= e to=20 assume that each and every single experiment in IPv6, including all forms o= f=20 cryptographically generated addresses, all forms of transitional mechanisms= , all=20 forms of address plans and all forms of routing experiments were each to re= quest=20 an experimental allocation that was "once and forever" and assumed at the o= utset=20 that the experiment would result in comprehensive deployment over a network= many=20 many times larger than today's then I hope you can appreciate that we'd not= have=20 enough space to accommodate each and every experiment's requirements in the= IPv6=20 space. So the conventional philosophy behind experimental allocations is to use en= ough=20 space to allow the experiment to operate and to gain experience with the=20 technology. If this proves to be useful and taken up by the industry (and o= f=20 course this process involves is by no means an assured outcome - quite the= =20 opposite in fact) then its again conventional to look at how to support the= =20 technology within the existing token distribution framework, or whether its= =20 appropriate to make changes to the token distribution framework. Now obviou= sly=20 some proponents of every experiment see universal adoption of their particu= lar=20 technology as a given, including some LISP proponents no doubt. So of cours= e we=20 see many (most?) experiment proponents proudly proclaim that they are uniqu= ely=20 different and obviously their particular experiment will naturally result i= n=20 universal deployment, so why not assume that happy outcome at the outset of= the=20 experiment and allocate resources at a scale commensurate w ith their no doubt certain universal deployment in the not-so-distant futu= re?=20 But wishing it, no matter how enthusiastic you may be personally, does not = make=20 it so. A prudent approach in a space that has seen, and is likely to see, m= any=20 experiments proposed, is generally to provision resources to conduct the=20 experiment at the scale of the experiment and if the experiment leads to=20 someplace positive then look at what is required if the technology is to he= ad to=20 larger levels of deployment. =20 > The prefix request was written in such a way to reduce renumbering, rathe= r=20 making the prefix "bigger" so to accommodate the growth. This would also be= an=20 easy change, rather then adding different prefix blocks just change the len= gth=20 of the existing prefix. I am continually confused by the assumptions behind this assertion, and I'v= e=20 heard this assumption a number of times in the course of the consideration = of=20 this draft. If LISP is so fragile that it requires a very particular deploy= ed=20 address structure in order to operate, then frankly we could do precisely t= he=20 same in BGP and achieve better results because of avoidance of tunnelling. = I=20 find it somewhat strange to see this adamant view that LISP absolutely requ= ires=20 a uniquely structured address plan in order to achieve any useful outcome i= n=20 terms of scalable routing, at a cost of increased latency and exposure to= =20 vagaries of tunnel behaviour, while at the same time ignoring the simple=20 observation that if one were to do the same surgery on the address plan in = BGP=20 the outcomes would likely to be just as good if not better, without the neg= ative=20 factors of map-resolution-related latency and tunnelling. >=20 > I think this is something to keep in the future document(s). And I strongly disagree with your opinion. If we did this for every experim= ent=20 that we encounter that proposes some unique address plan that is intended t= o=20 improve security, routing scaleability, auto-configuration, pre-provisionin= g,=20 network virtualization, software programability, etc etc, then once more we= are=20 going to find ourselves contemplating address exhaustion in IPv6 far sooner= than=20 anyone would've rationally anticipated. Geoff _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 =20 _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp =20 =20 =20 =20 ----------MB_8CFC23E21AD1420_894_BF703_webmail-m146.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8"

Dino,
As you can see, I have chosen a peaceful and neutral s= ubject line. See below my comments.
Heiner

-----Urspr=C3=BCngl= iche Mitteilung-----
Von: Dino Farinacci <farinacci@gmail.com>
An: heinerhummel <heinerhummel@aol.com>
Cc: gih <gih= @apnic.net>; ggx <ggx@gigix.net<= /a>>; lisp <lisp@ietf.org>
Verschickt: Sa, 12 Jan 2013 10:11 pm
Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03= .txt back in workgroup

Well spoken.= Again, after the short late-night email, because:

Since you were subjective on your comments I wil= l be direct and to the point in my responses. But only direct to your comme= nts that are clear. 

1) There is a long list of deficiencies which LISP maintains and which= are due to clinging to 
   paradigms lik= e prefix building, DiffServ

Do you mean map-cache caching. I don't know what you mean by prefix buildin= g. EID-prefixes are assigned to LISP sites just like prefixes are assigned = today. There is no operational difference. 

HH: I mean using prefixes AT ALL   !!= !:  I know this is state of art in classical internet routing. LISP-TA= RA (yes, TARA is a loc-id-split solution) would reduce it be the same degre= e by which TARA routers were deployed. After all, you can't use prefixes fo= r multicast or anycast either. As far as I know IPv4- FIBs don't have any e= ntries for multicast or anycast.
Do you know whether IPv6 has a multicast-F= IB and/or an anycast-FIB ? My guess is NO. Instead I believe that this is a= nother IETF-law that there is only 1 FIB :-(
 
bottom line "no interest i= n knowing the traffic outside/beyond the packets' incoming waiting queues",= etc.etc.
   (I don't want= to repeat it here)

Diffswev code points are copied= to the outer header. And we have seen cases where carrier-in-carrier scena= rios, it is a feature to hide such code points. 

HH: I am accusing the DiffServ philosophy,= which was once a counter movement to IntServ where available bandwidth cap= acities played a major role.
The DiffServ philosophy prevented that ide= as were cast  to make routers  aware of the traffic in the near s= urrounding and to deal with it - even without connections a la SVC or LSP..=  



2) LISP specifics:
    a) Its structures are fixed though not even a= n idea is cast how to form and handle Multicast- and Anycast-Locators.

Not true. Both EID and Locator address formats are flexibly enco= ded. We have seen use-cases where EIDs could be used as Fedex tracking numb= ers or VIN numbers (Vehicle ID Numbers). And we have seen Locators encoded = as multi-tuple addresses that include Geo-Coordinates. 

       = ; Anycast services (nearest hospital, nearest rescuer, nearest parking lot,= nearest gas station, etc.) aren't considered at all.

An EID can be used as an anycast address where the database lookup can deci= de which locators to return. And Locators can be anycast addresses as well to encapsulate packe= ts to the closest locator. Nothing needs to be designed in the protocol to = make this happen. 


       = ;Most of the anycast services have to be scoped (it makes no sense to disse= minate "I am an empty parking lot in Munich." all over Germany/world)

Since LISP uses a pull database, there is no dissemination in the mapping s= ystem. 

HH: 
Does your da= tabase ask back "where are you, user, so that I can send you the right loca= tor "?
By your desc= ription that database is an anycast server . 
Do you envis= ion that the users are mobile and will repeat their query every now and the= n ? Don't you be afraid of  bottle necks ?
Note, one as= pect of the scalability was the update churn. Your PULL solution will creat= e  query churns to few (how few?) such databases. This will hamper the= general
operability = of the internet itself.
An anycast s= ervice typically needs  a scope (see mentioned examples above). The ar= eas your databases are responsible for won't  comply with the area any= particular anycast service is limited to. In short: it doesn't fit at all!=

 

Anyone that = wants to talk to the EID will need to cache the locators but only in those = locations. 

       = ;and I doubt that LISP-PULL fits in. Also: By dealing only with unicast, LI= SP does not provide and bits to differentiate between unicast, multicast,..= .

Because the existing semantics are used. Class D encodings for IPv4 and fir= st-byte 0xFF for IPv6. 
HH:Why so shy? You have a brand new (LISP)= header and can do what you want and should be interested in fast forwardin= g. There is unicast, multicast, anycast, mp2mp, mp2p and broadcast to be di= fferentiated. That could be done better than by address range differentiati= on

       b) GRE-tunnel nesting is a great bail out. A new concept however sh= ould try to avoid it as much as possible .LISP however prefers 
       = ;  LISP-header nesting rather than enlisting transits inside of ONE ex= tended LISP-header.

LISP does re-encapsulating tunnels as well. See definition of RTRs in the T= E and NAT-traversal Internet Drafts. 
HH: Sure, but there are cases (detours) wh= ere employing a list of transit nodes is simpler than multiple pairs of &nb= sp;ITR and ETR .

3) LISP-DDT specific:
    It will kill= IPv4 and I honestly think about writing to the IESG and explain to the IES= G why, and why this is not just a  bug that can be repaired whithin&nb= sp;

This makes no sense. Why would it kill IPv4 and not IPv6?

DDT uses the= iterative lookup model that DNS uses. Those properties are well known and = we have a lot of experience with them. 

    LISP-DDT. He= re only this: At first I thought LISP-DDT is doomed to fail, but being the = coffin nail for IPv4 is the alternate and even worse consequence.

Can you back the claim up with some data and technical commentary. 



If you do, I= would be glad to continue this thread. 

Dino

HH:
Dino, your original LISP envisioned several versions: LISP2.0 using DNS an= d others, one of  which then became the preferred one.
Many years have passed and we now encounter not only the scalability p= roblem but also the ipv4 unicast address depletion problem.

The honorable intention of LISP was to support IPv4 rather than to pul= l over to IPv6. I am sure you agree.
(IPv6 has so much address space, enough to address fractions of any sq= uare inch of the globe, i.e. could esily encompass any locator info.  = But, I think, neglecting ipv4 would be irresponsible. I am sure you agree a= gain.) 

LOC-ID-SPLIT not only meant  "routing based on the locator to the= egress-site" but also
to identify any host by the info-doublet {ID=3Dipv4 address ; LOC=3D l= ocator} in a globally unique way, in case the iPv4 address by itself cannot= be globally unique  anymore due to the ipv4 unicast address depletion= problem.
Put in different words: the ipv4 address of any host must (only) be un= ique per that site which is indicated by the respective  locator.

(1)Provided that this is still a basic assumption of the LISP-group I = conclude: LISP-DDT will fail for sure.
(2)Provided that LISP expects that there cannot be any further hosts w= ith IPv4 addresses after all ipv4 unicast addresses are used up I conclude:= LISP-DDT kills IPv4.

Why:
It is a MUST to get the info-doublet {ID=3Dipv4 address ; LOC=3D = locator} by one single query !!! Period.!!!
Analogous example:
Imagine, you have to write a letter to Mr. Li (there are about 20 mill= ion people with this name), you only write this name on the envelope and as= k the officer at your (ingress) post office to add the address of Mr. Li al= l by himself/herself (because  he/she might have a database  with= all addresses of all persons in the world  - btw which of course is n= ot true). Facit: That cannot work !!!

Hence:
The FQDN must be converted to {ID=3Dipv4 address ; LOC=3D locator= } by one single query, i.e. must be done by the host itself, i.e. the host = must prepend the LISP header ! Eventually the ingress router might intercep= t the DNS-query and act as a proxy, but even if so, the query must be sent = to the DNS and to no other database !

Sorry Dino,  your defending DDT (how much better it is compared t= o LISP2.0 (DNS) couldn't convince me at all.

Heiner








 
 





On 09/01/2013, at 11:02 PM, Luigi Iannone <ggx@gigix.net> wrot=
e:

> Hi Geoff,
>=20
> On 8 Jan. 2013, at 20:21 , Geoff Huston <gih@apnic.net> w=
rote:
>=20
>>=20
>> On 08/01/2013, at 9:34 PM, SM <sm@resistor.net> wrote=
:
>>=20
>>> Hi Terry,
>>> At 22:03 07-01-2013, Terry Manderson wrote:
>>>> However, before the WG starts to rework the document, I wo=
uld first like to
>>>> canvass the LISP WG as to your opinions.
>>>>=20
>>>> 1) Should we, as a WG, continue to work on this item? Is i=
t=20
necessary/useful
>>>> for LISP?
>>>=20
>>> The work item seems useful.
>>>=20
>>>> 2) If so, what direction should the WG take this document =
so that the LISP
>>>> experiment is best served?
>>>=20
>>> The problem is justifying the IP address space allocation and =
explaining how=20
it will be managed.
>>>=20
>>> My guess is that the working group took an ORCHID approach (co=
py and paste=20
:-)).  I suggest dropping the idea of calling it a very large-scale experim=
ent. =20
The unstated problem is about politics.  I suggest taking a look at=20
draft-lear-lisp-nerd-09.  It contains a good discussion of operational mode=
ls=20
and the trade-offs.
>>>=20
>>=20
>> I was on the IAB at the time that ORCHID was being considered - th=
e issue=20
there was to find a balance between enough bits for acceptable crypto and b=
asic=20
conservatism in the absolute size of the request - at the time a /28 appear=
ed to=20
be a suitable compromise considering that this was an experiment.
>>=20
>> Given that this is an experiment and that the transition from expe=
riment to=20
widespread deployment may well entail renumbering (as was the case with the=
=20
6bone) then one approach may well be to use a modest prefix that has a limi=
ted=20
capacity that would force renumbering in the shift from experiment to wides=
pread=20
adoption, if such occurs in the future.
>>=20
>=20
> I may be mistake but I do not see the renumbering need in the LISP cas=
e.


It all depends on the philosophy behind experimental allocations. If we wer=
e to=20
assume that each and every single experiment in IPv6, including all forms o=
f=20
cryptographically generated addresses, all forms of transitional mechanisms=
, all=20
forms of address plans and all forms of routing experiments were each to re=
quest=20
an experimental allocation that was "once and forever" and assumed at the o=
utset=20
that the experiment would result in comprehensive deployment over a network=
 many=20
many times larger than today's then I hope you can appreciate that we'd not=
 have=20
enough space to accommodate each and every experiment's requirements in the=
 IPv6=20
space.

So the conventional philosophy behind experimental allocations is to use en=
ough=20
space to allow the experiment to operate and to gain experience with the=20
technology. If this proves to be useful and taken up by the industry (and o=
f=20
course this process involves is by no means an assured outcome - quite the=
=20
opposite in fact) then its again conventional to look at how to support the=
=20
technology within the existing token distribution framework, or whether its=
=20
appropriate to make changes to the token distribution framework. Now obviou=
sly=20
some proponents of every experiment see universal adoption of their particu=
lar=20
technology as a given, including some LISP proponents no doubt. So of cours=
e we=20
see many (most?) experiment proponents proudly proclaim that they are uniqu=
ely=20
different and obviously their particular experiment will naturally result i=
n=20
universal deployment, so why not assume that happy outcome at the outset of=
 the=20
experiment and allocate resources at a scale commensurate w
 ith their no doubt certain universal deployment in the not-so-distant futu=
re?=20
But wishing it, no matter how enthusiastic you may be personally, does not =
make=20
it so. A prudent approach in a space that has seen, and is likely to see, m=
any=20
experiments proposed, is generally to provision resources to conduct the=20
experiment at the scale of the experiment and if the experiment leads to=20
someplace positive then look at what is required if the technology is to he=
ad to=20
larger levels of deployment.
=20

> The prefix request was written in such a way to reduce renumbering, ra=
ther=20
making the prefix "bigger" so to accommodate the growth. This would also be=
 an=20
easy change, rather then adding different prefix blocks just change the len=
gth=20
of the existing prefix.

I am continually confused by the assumptions behind this assertion, and I'v=
e=20
heard this assumption a number of times in the course of the consideration =
of=20
this draft. If LISP is so fragile that it requires a very particular deploy=
ed=20
address structure in order to operate, then frankly we could do precisely t=
he=20
same in BGP and achieve better results because of avoidance of tunnelling. =
I=20
find it somewhat strange to see this adamant view that LISP absolutely requ=
ires=20
a uniquely structured address plan in order to achieve any useful outcome i=
n=20
terms of scalable routing, at a cost of increased latency and exposure to=
=20
vagaries of tunnel behaviour, while at the same time ignoring the simple=20
observation that if one were to do the same surgery on the address plan in =
BGP=20
the outcomes would likely to be just as good if not better, without the neg=
ative=20
factors of map-resolution-related latency and tunnelling.

>=20
> I think this is something to keep in the future document(s).

And I strongly disagree with your opinion. If we did this for every experim=
ent=20
that we encounter that proposes some unique address plan that is intended t=
o=20
improve security, routing scaleability, auto-configuration, pre-provisionin=
g,=20
network virtualization, software programability, etc etc, then once more we=
 are=20
going to find ourselves contemplating address exhaustion in IPv6 far sooner=
 than=20
anyone would've rationally anticipated.

Geoff

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20




=20 
________________________________________=
_______
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20
_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20
=20
=20
----------MB_8CFC23E21AD1420_894_BF703_webmail-m146.sysops.aol.com-- From farinacci@gmail.com Wed Jan 16 21:31:58 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC93311E80CC for ; Wed, 16 Jan 2013 21:31:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.299 X-Spam-Level: X-Spam-Status: No, score=-3.299 tagged_above=-999 required=5 tests=[AWL=0.303, BAYES_00=-2.599, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_CHICKENPOX_23=0.6, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kYHFRlExwNI5 for ; Wed, 16 Jan 2013 21:31:56 -0800 (PST) Received: from mail-pb0-f52.google.com (mail-pb0-f52.google.com [209.85.160.52]) by ietfa.amsl.com (Postfix) with ESMTP id 43FC711E809B for ; Wed, 16 Jan 2013 21:31:55 -0800 (PST) Received: by mail-pb0-f52.google.com with SMTP id ro2so1172022pbb.25 for ; Wed, 16 Jan 2013 21:31:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to; bh=H4qRJvMiCFqpVznI3W/Oy85k2PbvQq0MsVrdVLEorU0=; b=KlRB6VZf+J6jNRNMkXbdXM6926O3sKYPp0vZH3i+wEovEvOWjzVHRkbTm2X+Gc0CwP QHxscyUrcqGE61zTNdMHN5tvInf99TbYFM7KrXcBqIi9aShWy429K8PybS+SEb42r2Px nN9lWgTrsJM2MykKXi6914dmNDx/ULJjgM3ARlAz797x7X7F4qeIFqUox7+lbviWzpDX tbJ2Ho6bqX79Xl8MRZd4UBpVm6IAGB0FwdRCGFcWrpCwTjAgA8zb25O3i0uIgXYHjZvb cyRxKHKKiTZ60XnehmJmqi8Kc1XlmGSxGSds++vZjz1lbC7OlGr26ZFsxDSYNcnwaORf JAeg== X-Received: by 10.68.252.4 with SMTP id zo4mr10056029pbc.126.1358400714831; Wed, 16 Jan 2013 21:31:54 -0800 (PST) Received: from [192.168.1.10] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id ux4sm387352pbc.25.2013.01.16.21.31.52 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 16 Jan 2013 21:31:53 -0800 (PST) References: <6.2.5.6.2.20130108003052.0bbe0540@resistor.net> <23FD04E4-9770-4A49-8E22-F130B1FE269B@gigix.net> <522431CF-7701-47B1-8A8F-4916ABE7ACDA@apnic.net> <8CFBE6688E7C19B-166C-DA92@webmail-d093.sysops.aol.com> <8CFBECB54BB9457-1330-109E6@webmail-m172.sysops.aol.com> <8CFBF859AE6BE4E-1B10-166FB@webmail-d050.sysops.aol.com> <8CFC1F77A353DF3-B38-37444@webmail-m157.sysops.aol.com> <8CFC22CFBD9CD50-17D8-3A9EA@webmail-m089.sysops.aol.com> <8CFC23E2159C3DD-894-3A7D9@webmail-m146.sysops.aol.com> Mime-Version: 1.0 (1.0) In-Reply-To: <8CFC23E2159C3DD-894-3A7D9@webmail-m146.sysops.aol.com> Content-Type: multipart/alternative; boundary=Apple-Mail-8304CFB0-73DA-4DCD-8DC3-DA9920F06E77 Content-Transfer-Encoding: 7bit Message-Id: <9FBE18CF-69CB-4ECE-B073-30AAAD1BC690@gmail.com> X-Mailer: iPhone Mail (10A551) From: Dino Farinacci Date: Wed, 16 Jan 2013 21:31:51 -0800 To: "heinerhummel@aol.com" Cc: "lisp@ietf.org" Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2013 05:31:59 -0000 --Apple-Mail-8304CFB0-73DA-4DCD-8DC3-DA9920F06E77 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable > Dino, > As you can see, I have chosen a peaceful and neutral subject line. See bel= ow my comments. > Heiner I thank you for the peace.=20 >=20 > -----Urspr=C3=BCngliche Mitteilung-----=20 > Von: Dino Farinacci > An: heinerhummel > Cc: gih ; ggx ; lisp > Verschickt: Sa, 12 Jan 2013 10:11 pm > Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup >=20 >> Well spoken. Again, after the short late-night email, because: >=20 > Since you were subjective on your comments I will be direct and to the poi= nt in my responses. But only direct to your comments that are clear.=20 >=20 >> 1) There is a long list of deficiencies which LISP maintains and which ar= e due to clinging to=20 >> paradigms like prefix building, DiffServ >=20 > Do you mean map-cache caching. I don't know what you mean by prefix buildi= ng. EID-prefixes are assigned to LISP sites just like prefixes are assigned t= oday. There is no operational difference.=20 >=20 > HH: I mean using prefixes AT ALL !!!: I know this is state of art in cl= assical internet routing. LISP-TARA (yes, TARA is a loc-id-split solution) w= ould reduce it be the same degree by which TARA routers were LISP didn't have the goal to disrupt the current Internet. We wanted LISP si= tes to talk to non-LISP sites. We wanted the architecture to be incrementall= y deployable.=20 > deployed. After all, you can't use prefixes for multicast or anycast eithe= r. As far as I know IPv4- FIBs don't have any entries for multicast or anyca= st. > Do you know whether IPv6 has a multicast-FIB and/or an anycast-FIB ? My gu= ess is NO. Instead I believe that this is another IETF-law that there is onl= y 1 FIB :-( IPv4 and IPv6 address usage is really identical. The real only difference is= one is 4 times larger.=20 > =20 >> bottom line "no interest in knowing the traffic outside/beyond the packet= s' incoming waiting queues",etc.etc. >> (I don't want to repeat it here) >=20 > Diffswev code points are copied to the outer header. And we have seen case= s where carrier-in-carrier scenarios, it is a feature to hide such code poin= ts.=20 >=20 > HH: I am accusing the DiffServ philosophy, which was once a counter moveme= nt to IntServ where available bandwidth capacities played a major role. > The DiffServ philosophy prevented that ideas were cast to make routers a= ware of the traffic in the near surrounding and to deal with it - even witho= ut connections a la SVC or LSP..=20 But you seem to conflate the two and hence my response.=20 >=20 >=20 >=20 >> 2) LISP specifics: >> a) Its structures are fixed though not even an idea is cast how to fo= rm and handle Multicast- and Anycast-Locators. >=20 > Not true. Both EID and Locator address formats are flexibly encoded. We ha= ve seen use-cases where EIDs could be used as Fedex tracking numbers or VIN n= umbers (Vehicle ID Numbers). And we have seen Locators encoded as multi-tupl= e addresses that include Geo-Coordinates.=20 >=20 >> Anycast services (nearest hospital, nearest rescuer, nearest park= ing lot, nearest gas station, etc.) aren't considered at all. >=20 > An EID can be used as an anycast address where the database lookup can dec= ide which locators to return. And Locators can be anycast addresses as well t= o encapsulate packets to the closest locator. Nothing needs to be designed i= n the protocol to make this happen.=20 >=20 >=20 >> Most of the anycast services have to be scoped (it makes no sense t= o disseminate "I am an empty parking lot in Munich." all over Germany/world)= >=20 > Since LISP uses a pull database, there is no dissemination in the mapping s= ystem.=20 >=20 > HH:=20 > Does your database ask back "where are you, user, so that I can send you t= he right locator "? Yes it does. That is what Map-Notify messages do.=20 > By your description that database is an anycast server .=20 How is accessed can be with unique unicast locators or anycast locators assi= gned to the Map-Resolvers.=20 > Do you envision that the users are mobile and will repeat their query ever= y now and then ? Don't you be afraid of bottle necks ? They can but it is not required. When MNs get new locators they register the= m to the mapping database.=20 ITRs are notified by the moving MN so they are informed to do a new lookup t= o get a newer set of locators.=20 > Note, one aspect of the scalability was the update churn. Your PULL soluti= on will create query churns to few (how few?) such databases. This will ham= per the general It is a single update to the mapping system (in practice it is two Map-Serve= rs) and updates to xTRs that are the top talking EIDs.=20 > operability of the internet itself. > An anycast service typically needs a scope (see mentioned examples above)= . The This is not an anycast service. You just think it is. The architecture DOES N= OT require the Map-Resolvers to have the SAME assigned address.=20 > areas your databases are responsible for won't comply with the area any p= articular anycast service is limited to. In short: it doesn't fit at all! >=20 > =20 >=20 > Anyone that wants to talk to the EID will need to cache the locators but o= nly in those locations.=20 >=20 >> and I doubt that LISP-PULL fits in. Also: By dealing only with uni= cast, LISP does not provide and bits to differentiate between unicast, multi= cast,... >=20 > Because the existing semantics are used. Class D encodings for IPv4 and fi= rst-byte 0xFF for IPv6.=20 > HH:Why so shy? You have a brand new (LISP) header and can do what you want= and should be interested in fast forwarding. There is unicast, multicast, a= nycast, mp2mp, mp2p and broadcast to be differentiated. That could be done b= etter than by address range differentiation >=20 >> b) GRE-tunnel nesting is a great bail out. A new concept however s= hould try to avoid it as much as possible .LISP however prefers=20 >> LISP-header nesting rather than enlisting transits inside of ONE= extended LISP-header. >=20 > LISP does re-encapsulating tunnels as well. See definition of RTRs in the T= E and NAT-traversal Internet Drafts.=20 > HH: Sure, but there are cases (detours) where employing a list of transit n= odes is simpler than multiple pairs of ITR and ETR . >=20 >> 3) LISP-DDT specific: >> It will kill IPv4 and I honestly think about writing to the IESG and e= xplain to the IESG why, and why this is not just a bug that can be repaired= whithin=20 >=20 > This makes no sense. Why would it kill IPv4 and not IPv6? >=20 > DDT uses the iterative lookup model that DNS uses. Those properties are we= ll known and we have a lot of experience with them.=20 >=20 >> LISP-DDT. Here only this: At first I thought LISP-DDT is doomed to fa= il, but being the coffin nail for IPv4 is the alternate and even worse conse= quence. >=20 > Can you back the claim up with some data and technical commentary.=20 >=20 >=20 >=20 > If you do, I would be glad to continue this thread.=20 >=20 > Dino >=20 > HH: > Dino, your original LISP envisioned several versions: LISP2.0 using DNS an= d others, That was when LISP was in research mode in the RRG. Once we went into the IE= TF we made some decisions on how to make the mapping database system modular= .=20 This effort has been going for 6 years. So if one is in and out you may not s= ee the final design.=20 > one of which then became the preferred one. > Many years have passed and we now encounter not only the scalability probl= em but also the ipv4 unicast address depletion problem. >=20 > The honorable intention of LISP was to support IPv4 rather than to pull ov= er to IPv6. I am sure you agree. The intention was to support any type of EIDs. And if you look at the effort= in the nvo3 working group shows that MAC addresses could be used as EIDs where a layer-2 LISP is created (also known as VXLAN).=20 > (IPv6 has so much address space, enough to address fractions of any square= inch of the globe, i.e. could esily encompass any locator info. But, I thi= nk, neglecting ipv4 would be irresponsible. I am sure you agree again.)=20 We want to solve multi homing, VPNs, and mobility problems for all address families.=20 >=20 > LOC-ID-SPLIT not only meant "routing based on the locator to the egress-s= ite" but also > to identify any host by the info-doublet {ID=3Dipv4 address ; LOC=3D locat= or} in a globally unique way, in case the iPv4 address by itself cannot be g= lobally unique anymore due to the ipv4 unicast address depletion problem. True - but Darrel and I can share our home's 192.168.1.0/24 space. So arguab= ly we have a feature. If you solve the shortest path mobility problem you ge= t VPN support for free.=20 > Put in different words: the ipv4 address of any host must (only) be unique= per that site which is indicated by the respective locator. Yes - that is right. But the Internet system requires that not LISP.=20 >=20 > (1)Provided that this is still a basic assumption of the LISP-group I conc= lude: LISP-DDT will fail for sure. I don't follow.=20 > (2)Provided that LISP expects that there cannot be any further hosts with I= Pv4 addresses after all ipv4 unicast addresses are used up I conclude: LISP-= DDT kills IPv4. You are thinking that DDT Is so proactive to kill an address family. I Wish we could have technology that could kill thinks but I'm afraid it Isn't that simple.=20 >=20 > Why: > It is a MUST to get the info-doublet {ID=3Dipv4 address ; LOC=3D locator} b= y one single query !!! Period.!!! Read the specs. That is not true.=20 > Analogous example: > Imagine, you have to write a letter to Mr. Li (there are about 20 million p= eople with this name), you only write this name on the envelope and ask the o= fficer at your (ingress) post office to add the address of Mr. Li all by him= self/herself (because he/she might have a database with all addresses of a= ll persons in the world - btw which of course is not true). Facit: That can= not work !!! Address have to be unique within a VPN or an Internet. LISP did not put in t= his rule or restriction from your point of view.=20 >=20 > Hence: > The FQDN must be converted to {ID=3Dipv4 address ; LOC=3D locator} by one s= ingle query, i.e. must be done by the host itself, i.e. the host must prepen= d the LISP header ! Eventually the ingress router might intercept the DNS-qu= ery and act as a proxy, but even if so, the query must be sent to the DNS an= d to no other database ! Dude - DNS can deal with this today when NATs are in use. You make it sound l= ike LISP introduces this problem.=20 >=20 > Sorry Dino, your defending DDT (how much better it is compared to LISP2.0= (DNS) couldn't convince me at all. Just sit back and watch Heiner. We never said DDT is DNS. We have said it us= es the iterative lookup model like DNS. And the nodes are configured like a D= NS hierarchy. So people can understand how the mapping database can be manag= ed by multiple organizations and possibly the same TYPE if tools that are us= ed for the DNS system.=20 Dino >=20 > Heiner >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 > =20 > =20 >=20 >>=20 >>=20 >>=20 >> -----Urspr=C3=BCngliche Mitteilung-----=20 >> Von: Geoff Huston >> An: Luigi Iannone >> Cc: LISP mailing list list >> Verschickt: Mi, 9 Jan 2013 9:57 pm >> Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup >>=20 >>=20 >> On 09/01/2013, at 11:02 PM, Luigi Iannone wrote: >>=20 >> > Hi Geoff, >> >=20 >> > On 8 Jan. 2013, at 20:21 , Geoff Huston wrote: >> >=20 >> >>=20 >> >> On 08/01/2013, at 9:34 PM, SM wrote: >> >>=20 >> >>> Hi Terry, >> >>> At 22:03 07-01-2013, Terry Manderson wrote: >> >>>> However, before the WG starts to rework the document, I would first l= ike to >> >>>> canvass the LISP WG as to your opinions. >> >>>>=20 >> >>>> 1) Should we, as a WG, continue to work on this item? Is it=20 >> necessary/useful >> >>>> for LISP? >> >>>=20 >> >>> The work item seems useful. >> >>>=20 >> >>>> 2) If so, what direction should the WG take this document so that th= e LISP >> >>>> experiment is best served? >> >>>=20 >> >>> The problem is justifying the IP address space allocation and explain= ing how=20 >> it will be managed. >> >>>=20 >> >>> My guess is that the working group took an ORCHID approach (copy and p= aste=20 >> :-)). I suggest dropping the idea of calling it a very large-scale exper= iment. =20 >> The unstated problem is about politics. I suggest taking a look at=20 >> draft-lear-lisp-nerd-09. It contains a good discussion of operational mo= dels=20 >> and the trade-offs. >> >>>=20 >> >>=20 >> >> I was on the IAB at the time that ORCHID was being considered - the is= sue=20 >> there was to find a balance between enough bits for acceptable crypto and= basic=20 >> conservatism in the absolute size of the request - at the time a /28 appe= ared to=20 >> be a suitable compromise considering that this was an experiment. >> >>=20 >> >> Given that this is an experiment and that the transition from experime= nt to=20 >> widespread deployment may well entail renumbering (as was the case with t= he=20 >> 6bone) then one approach may well be to use a modest prefix that has a li= mited=20 >> capacity that would force renumbering in the shift from experiment to wid= espread=20 >> adoption, if such occurs in the future. >> >>=20 >> >=20 >> > I may be mistake but I do not see the renumbering need in the LISP case= . >>=20 >>=20 >> It all depends on the philosophy behind experimental allocations. If we w= ere to=20 >> assume that each and every single experiment in IPv6, including all forms= of=20 >> cryptographically generated addresses, all forms of transitional mechanis= ms, all=20 >> forms of address plans and all forms of routing experiments were each to r= equest=20 >> an experimental allocation that was "once and forever" and assumed at the= outset=20 >> that the experiment would result in comprehensive deployment over a netwo= rk many=20 >> many times larger than today's then I hope you can appreciate that we'd n= ot have=20 >> enough space to accommodate each and every experiment's requirements in t= he IPv6=20 >> space. >>=20 >> So the conventional philosophy behind experimental allocations is to use e= nough=20 >> space to allow the experiment to operate and to gain experience with the=20= >> technology. If this proves to be useful and taken up by the industry (and= of=20 >> course this process involves is by no means an assured outcome - quite th= e=20 >> opposite in fact) then its again conventional to look at how to support t= he=20 >> technology within the existing token distribution framework, or whether i= ts=20 >> appropriate to make changes to the token distribution framework. Now obvi= ously=20 >> some proponents of every experiment see universal adoption of their parti= cular=20 >> technology as a given, including some LISP proponents no doubt. So of cou= rse we=20 >> see many (most?) experiment proponents proudly proclaim that they are uni= quely=20 >> different and obviously their particular experiment will naturally result= in=20 >> universal deployment, so why not assume that happy outcome at the outset o= f the=20 >> experiment and allocate resources at a scale commensurate w >> ith their no doubt certain universal deployment in the not-so-distant fu= ture?=20 >> But wishing it, no matter how enthusiastic you may be personally, does no= t make=20 >> it so. A prudent approach in a space that has seen, and is likely to see,= many=20 >> experiments proposed, is generally to provision resources to conduct the=20= >> experiment at the scale of the experiment and if the experiment leads to=20= >> someplace positive then look at what is required if the technology is to h= ead to=20 >> larger levels of deployment. >> =20 >>=20 >> > The prefix request was written in such a way to reduce renumbering, rat= her=20 >> making the prefix "bigger" so to accommodate the growth. This would also b= e an=20 >> easy change, rather then adding different prefix blocks just change the l= ength=20 >> of the existing prefix. >>=20 >> I am continually confused by the assumptions behind this assertion, and I= 've=20 >> heard this assumption a number of times in the course of the consideratio= n of=20 >> this draft. If LISP is so fragile that it requires a very particular depl= oyed=20 >> address structure in order to operate, then frankly we could do precisely= the=20 >> same in BGP and achieve better results because of avoidance of tunnelling= . I=20 >> find it somewhat strange to see this adamant view that LISP absolutely re= quires=20 >> a uniquely structured address plan in order to achieve any useful outcome= in=20 >> terms of scalable routing, at a cost of increased latency and exposure to= =20 >> vagaries of tunnel behaviour, while at the same time ignoring the simple=20= >> observation that if one were to do the same surgery on the address plan i= n BGP=20 >> the outcomes would likely to be just as good if not better, without the n= egative=20 >> factors of map-resolution-related latency and tunnelling. >>=20 >> >=20 >> > I think this is something to keep in the future document(s). >>=20 >> And I strongly disagree with your opinion. If we did this for every exper= iment=20 >> that we encounter that proposes some unique address plan that is intended= to=20 >> improve security, routing scaleability, auto-configuration, pre-provision= ing,=20 >> network virtualization, software programability, etc etc, then once more w= e are=20 >> going to find ourselves contemplating address exhaustion in IPv6 far soon= er than=20 >> anyone would've rationally anticipated. >>=20 >> Geoff >>=20 >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail-8304CFB0-73DA-4DCD-8DC3-DA9920F06E77 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Dino,
As you can see, I have chosen a peaceful and neutral sub= ject line. See below my comments.
Heiner
<= /div>

I thank you for t= he peace. 


-----Urspr=C3=BCnglic= he Mitteilung-----
Von: Dino Farinacci <farinacci@gmail.com>
An: heinerhummel <heinerhummel@aol.com>
Cc: gih <gih@a= pnic.net>; ggx <ggx@gigix.net= >; lisp <lisp@ietf.org>=
Verschickt: Sa, 12 Jan 2013 10:11 pm
Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.t= xt back in workgroup

Well spoken. Ag= ain, after the short late-night email, because:

Since you were subjective on your comments I will b= e direct and to the point in my responses. But only direct to your comments t= hat are clear. 

1) There is a long list of deficiencies which LISP maintains and which a= re due to clinging to 
   paradigms like= prefix building, DiffServ

Do you mean map-cache caching. I don't know what you mean by prefix building= . EID-prefixes are assigned to LISP sites just like prefixes are assigned to= day. There is no operational difference. 

HH: I mean using prefixes AT ALL   !!!: &= nbsp;I know this is state of art in classical internet routing. LISP-TARA (y= es, TARA is a loc-id-split solution) would reduce it be the same degree by w= hich TARA routers were

LISP d= idn't have the goal to disrupt the current Internet. We wanted LISP sites to= talk to non-LISP sites. We wanted the architecture to be incrementally depl= oyable. 

deployed. Afte= r all, you can't use prefixes for multicast or anycast either. As far as I k= now IPv4- FIBs don't have any entries for multicast or anycast.
=
Do you know whether IPv6 has a multicast-FIB a= nd/or an anycast-FIB ? My guess is NO. Instead I believe that this is anothe= r IETF-law that there is only 1 FIB :-(
=
IPv4 and IPv6 address usage is really identical. The real only dif= ference is one is 4 times larger. 

 
bottom line "no interest in= knowing the traffic outside/beyond the packets' incoming waiting queues",et= c.etc.
   (I don't want t= o repeat it here)

Diffswev code points are copied t= o the outer header. And we have seen cases where carrier-in-carrier scenario= s, it is a feature to hide such code points. 

HH: I am accusing the DiffServ philosophy, whi= ch was once a counter movement to IntServ where available bandwidth capaciti= es played a major role.
The DiffServ philosophy prevented that ideas w= ere cast  to make routers  aware of the traffic in the near surrou= nding and to deal with it - even without connections a la SVC or LSP.. =

But you seem to conflate t= he two and hence my response. 




2) LISP specifics:
    a) Its structures are fixed though not even an i= dea is cast how to form and handle Multicast- and Anycast-Locators.

Not true. Both EID and Locator address formats are flexibly encode= d. We have seen use-cases where EIDs could be used as Fedex tracking numbers= or VIN numbers (Vehicle ID Numbers). And we have seen Locators encoded as m= ulti-tuple addresses that include Geo-Coordinates. 

       = Anycast services (nearest hospital, nearest rescuer, nearest parking lot, n= earest gas station, etc.) aren't considered at all.

An EID can be used as an anycast address where the database lookup can decid= e which locators to return. And Locators can be anycast addresses as well to encapsulate packets to= the closest locator. Nothing needs to be designed in the protocol to make t= his happen. 


       = Most of the anycast services have to be scoped (it makes no sense to dissemi= nate "I am an empty parking lot in Munich." all over Germany/world)

Since LISP uses a pull database, there is no dissemination in the mapping sy= stem. 

HH: 
Does your dat= abase ask back "where are you, user, so that I can send you the right locato= r "?

Yes it does. That is what Map-No= tify messages do. 

By your descr= iption that database is an anycast server . 

How is accessed can be with unique unicast locators or anycast l= ocators assigned to the Map-Resolvers. 

<= div id=3D"AOLMsgPart_1_a6db64f0-4819-4377-ae9b-d13613b7b975">
Do you envisi= on that the users are mobile and will repeat their query every now and then ?= Don't you be afraid of  bottle necks ?
<= /div>
They can but it is not required. When MNs get new locators they regi= ster them to the mapping database. 

ITRs are n= otified by the moving MN so they are informed to do a new lookup to get a ne= wer set of locators. 

Note, one asp= ect of the scalability was the update churn. Your PULL solution will create &= nbsp;query churns to few (how few?) such databases. This will hamper the gen= eral

It is a single update to the map= ping system (in practice it is two Map-Servers) and updates to xTRs that are= the top talking EIDs. 

<= div id=3D"AOLMsgPart_1_a6db64f0-4819-4377-ae9b-d13613b7b975">
operability o= f the internet itself.
An anycast se= rvice typically needs  a scope (see mentioned examples above). The

This is not an anycast service. You just= think it is. The architecture DOES NOT require the Map-Resolvers to have th= e SAME assigned address. 

<= div id=3D"AOLMsgPart_1_a6db64f0-4819-4377-ae9b-d13613b7b975">
areas your databases are res= ponsible for won't  comply with the area any particular anycast service= is limited to. In short: it doesn't fit at all!

 
=
Anyone that w= ants to talk to the EID will need to cache the locators but only in those lo= cations. 

       = and I doubt that LISP-PULL fits in. Also: By dealing only with unicast, LISP= does not provide and bits to differentiate between unicast, multicast,...

Because the existing semantics are used. Class D encodings for IPv4 and firs= t-byte 0xFF for IPv6. 
HH:Why so shy? You have a brand new (LISP) hea= der and can do what you want and should be interested in fast forwarding. Th= ere is unicast, multicast, anycast, mp2mp, mp2p and broadcast to be differen= tiated. That could be done better than by address range differentiation

     =   b) GRE-tunnel nesting is a great bail out. A new concept however shou= ld try to avoid it as much as possible .LISP however prefers 
       =  LISP-header nesting rather than enlisting transits inside of ONE exte= nded LISP-header.

LISP does re-encapsulating tunnels as well. See definition of RTRs in the TE= and NAT-traversal Internet Drafts. 
HH: Sure, but there are cases (detours) where e= mploying a list of transit nodes is simpler than multiple pairs of  ITR= and ETR .

3) LISP-DDT specific:
    It will kill I= Pv4 and I honestly think about writing to the IESG and explain to the IESG w= hy, and why this is not just a  bug that can be repaired whithin <= /font>

This makes no sense. Why would it kill IPv4 and not IPv6?

DDT uses the i= terative lookup model that DNS uses. Those properties are well known and we h= ave a lot of experience with them. 

    LISP-DDT. Her= e only this: At first I thought LISP-DDT is doomed to fail, but being the co= ffin nail for IPv4 is the alternate and even worse consequence.
=

Can you back the claim up with some data and technical commentary. 



If you do, I w= ould be glad to continue this thread. 

Dino

= HH:
= Dino, your original LISP envisioned several versions: LISP2.0 using DNS and o= thers,
=

That was when LI= SP was in research mode in the RRG. Once we went into the IETF we made some d= ecisions on how to make the mapping database system modular. 

This effort has been going for 6 years. So if one is in and o= ut you may not see the final design. 

one of  which then became the= preferred one.
Many years have passed and we now encounter not only the scalability pr= oblem but also the ipv4 unicast address depletion problem.

The honorable intention of LISP was to support IPv4 rather than to pull= over to IPv6. I am sure you agree.

<= /div>The intention was to support any type of EIDs. And if you look at the e= ffort in the nvo3 working group shows that MAC addresses could be used as
EIDs where a layer-2 LISP is created (also known as VXLAN). 

<= div style=3D"color: black;">
(IPv6 has so much address space, enough to address fractions of any squ= are inch of the globe, i.e. could esily encompass any locator info.  Bu= t, I think, neglecting ipv4 would be irresponsible. I am sure you agree agai= n.) 

We want to solve mult= i homing, VPNs, and mobility problems for all address
families.&nb= sp;


LOC-ID-SPLIT not only meant  "routing based on the locator to the e= gress-site" but also
to identify any host by the info-doublet {ID=3Dipv4 address ; LOC=3D lo= cator} in a globally unique way, in case the iPv4 address by itself cannot b= e globally unique  anymore due to the ipv4 unicast address depletion pr= oblem.

True - but Darrel and I c= an share our home's 192.168.1.0/24 space. So arguably we have a feature. If y= ou solve the shortest path mobility problem you get VPN support for free.&nb= sp;

Put in different words: the ipv4 address of any host must (only) be uni= que per that site which is indicated by the respective  locator.
<= /div>

Yes - that is right. But the Internet= system requires that not LISP. 


(1)Provided that this is still a basic assumption of the LISP-group I c= onclude: LISP-DDT will fail for sure.
I don't follow. 

(2)Provided that LISP expects that there cannot be any further hosts wi= th IPv4 addresses after all ipv4 unicast addresses are used up I conclude: L= ISP-DDT kills IPv4.
<= /div>

You are thi= nking that DDT Is so proactive to kill an address family. I
Wish w= e could have technology that could kill thinks but I'm afraid it
I= sn't that simple. 

<= font color=3D"black" size=3D"2" face=3D"arial">
<= div style=3D"font-family: arial, helvetica; color: black;">

Why:
It is a MUST to get the info-doublet {ID=3Dipv4 address ; LOC=3D l= ocator} by one single query !!! Period.!!!

Read the specs. That is not true. 

Analogous example:
Imagine, you have to write a letter to Mr. Li (there are about 20 milli= on people with this name), you only write this name on the envelope and ask t= he officer at your (ingress) post office to add the address of Mr. Li all by= himself/herself (because  he/she might have a database  with all a= ddresses of all persons in the world  - btw which of course is not true= ). Facit: That cannot work !!!

= Address have to be unique within a VPN or an Internet. LISP did not put in t= his rule or restriction from your point of view. 

<= div style=3D"font-family: helvetica, arial;">

Hence:
The FQDN must be converted to {ID=3Dipv4 address ; LOC=3D locator}= by one single query, i.e. must be done by the host itself, i.e. the host mu= st prepend the LISP header ! Eventually the ingress router might intercept t= he DNS-query and act as a proxy, but even if so, the query must be sent to t= he DNS and to no other database !
=

Dude - DNS can deal with this today when NATs are in use. You make it sou= nd like LISP introduces this problem. 

<= div style=3D"font-family: helvetica, arial;">

Sorry Dino,  your defending DDT (how much better it is compared to= LISP2.0 (DNS) couldn't convince me at all.

Just sit back and watch Heiner. We never said DDT is DNS. We ha= ve said it uses the iterative lookup model like DNS. And the nodes are confi= gured like a DNS hierarchy. So people can understand how the mapping databas= e can be managed by multiple organizations and possibly the same TYPE if too= ls that are used for the DNS system. 

Dino

<= div style=3D"color: black;">

Heiner








 
=  
=



-----Urspr=C3=BCngliche Mitteilung-----
Von: Geoff Huston <gih@apnic.net>
An: Luigi Iannone <ggx@gigix.net>
Cc: LISP mailing list list <lisp@ietf.org>
Verschickt: Mi, 9 Jan 2013 9:57 pm
Betreff: Re: [lisp] draft-ietf-lisp-eid-block-03.txt back in workgroup


On 09/01/2013, at 11:02 PM, Luigi Iannone <ggx@gigix.net> wrote=
:

> Hi Geoff,
>=20
> On 8 Jan. 2013, at 20:21 , Geoff Huston <gih@apnic.net> wr=
ote:
>=20
>>=20
>> On 08/01/2013, at 9:34 PM, SM <sm@resistor.net> wrote:=

>>=20
>>> Hi Terry,
>>> At 22:03 07-01-2013, Terry Manderson wrote:
>>>> However, before the WG starts to rework the document, I wou=
ld first like to
>>>> canvass the LISP WG as to your opinions.
>>>>=20
>>>> 1) Should we, as a WG, continue to work on this item? Is it=
=20
necessary/useful
>>>> for LISP?
>>>=20
>>> The work item seems useful.
>>>=20
>>>> 2) If so, what direction should the WG take this document s=
o that the LISP
>>>> experiment is best served?
>>>=20
>>> The problem is justifying the IP address space allocation and e=
xplaining how=20
it will be managed.
>>>=20
>>> My guess is that the working group took an ORCHID approach (cop=
y and paste=20
:-)).  I suggest dropping the idea of calling it a very large-scale experime=
nt. =20
The unstated problem is about politics.  I suggest taking a look at=20
draft-lear-lisp-nerd-09.  It contains a good discussion of operational model=
s=20
and the trade-offs.
>>>=20
>>=20
>> I was on the IAB at the time that ORCHID was being considered - the=
 issue=20
there was to find a balance between enough bits for acceptable crypto and ba=
sic=20
conservatism in the absolute size of the request - at the time a /28 appeare=
d to=20
be a suitable compromise considering that this was an experiment.
>>=20
>> Given that this is an experiment and that the transition from exper=
iment to=20
widespread deployment may well entail renumbering (as was the case with the=20=

6bone) then one approach may well be to use a modest prefix that has a limit=
ed=20
capacity that would force renumbering in the shift from experiment to widesp=
read=20
adoption, if such occurs in the future.
>>=20
>=20
> I may be mistake but I do not see the renumbering need in the LISP case=
.


It all depends on the philosophy behind experimental allocations. If we were=
 to=20
assume that each and every single experiment in IPv6, including all forms of=
=20
cryptographically generated addresses, all forms of transitional mechanisms,=
 all=20
forms of address plans and all forms of routing experiments were each to req=
uest=20
an experimental allocation that was "once and forever" and assumed at the ou=
tset=20
that the experiment would result in comprehensive deployment over a network m=
any=20
many times larger than today's then I hope you can appreciate that we'd not h=
ave=20
enough space to accommodate each and every experiment's requirements in the I=
Pv6=20
space.

So the conventional philosophy behind experimental allocations is to use eno=
ugh=20
space to allow the experiment to operate and to gain experience with the=20
technology. If this proves to be useful and taken up by the industry (and of=
=20
course this process involves is by no means an assured outcome - quite the=20=

opposite in fact) then its again conventional to look at how to support the=20=

technology within the existing token distribution framework, or whether its=20=

appropriate to make changes to the token distribution framework. Now obvious=
ly=20
some proponents of every experiment see universal adoption of their particul=
ar=20
technology as a given, including some LISP proponents no doubt. So of course=
 we=20
see many (most?) experiment proponents proudly proclaim that they are unique=
ly=20
different and obviously their particular experiment will naturally result in=
=20
universal deployment, so why not assume that happy outcome at the outset of t=
he=20
experiment and allocate resources at a scale commensurate w
 ith their no doubt certain universal deployment in the not-so-distant futur=
e?=20
But wishing it, no matter how enthusiastic you may be personally, does not m=
ake=20
it so. A prudent approach in a space that has seen, and is likely to see, ma=
ny=20
experiments proposed, is generally to provision resources to conduct the=20
experiment at the scale of the experiment and if the experiment leads to=20
someplace positive then look at what is required if the technology is to hea=
d to=20
larger levels of deployment.
=20

> The prefix request was written in such a way to reduce renumbering, rat=
her=20
making the prefix "bigger" so to accommodate the growth. This would also be a=
n=20
easy change, rather then adding different prefix blocks just change the leng=
th=20
of the existing prefix.

I am continually confused by the assumptions behind this assertion, and I've=
=20
heard this assumption a number of times in the course of the consideration o=
f=20
this draft. If LISP is so fragile that it requires a very particular deploye=
d=20
address structure in order to operate, then frankly we could do precisely th=
e=20
same in BGP and achieve better results because of avoidance of tunnelling. I=
=20
find it somewhat strange to see this adamant view that LISP absolutely requi=
res=20
a uniquely structured address plan in order to achieve any useful outcome in=
=20
terms of scalable routing, at a cost of increased latency and exposure to=20=

vagaries of tunnel behaviour, while at the same time ignoring the simple=20
observation that if one were to do the same surgery on the address plan in B=
GP=20
the outcomes would likely to be just as good if not better, without the nega=
tive=20
factors of map-resolution-related latency and tunnelling.

>=20
> I think this is something to keep in the future document(s).

And I strongly disagree with your opinion. If we did this for every experime=
nt=20
that we encounter that proposes some unique address plan that is intended to=
=20
improve security, routing scaleability, auto-configuration, pre-provisioning=
,=20
network virtualization, software programability, etc etc, then once more we a=
re=20
going to find ourselves contemplating address exhaustion in IPv6 far sooner t=
han=20
anyone would've rationally anticipated.

Geoff

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20




=20 
_________________________________________=
______
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20
_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp
=20
=20
=20
___________________= ____________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/mailma= n/listinfo/lisp
= --Apple-Mail-8304CFB0-73DA-4DCD-8DC3-DA9920F06E77-- From heinerhummel@aol.com Thu Jan 17 13:00:23 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48FCA21F87FB for ; Thu, 17 Jan 2013 13:00:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.524 X-Spam-Level: X-Spam-Status: No, score=-1.524 tagged_above=-999 required=5 tests=[AWL=-1.340, BAYES_40=-0.185, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a2JoFt2Rdnmj for ; Thu, 17 Jan 2013 13:00:22 -0800 (PST) Received: from imr-mb02.mx.aol.com (imr-mb02.mx.aol.com [64.12.207.163]) by ietfa.amsl.com (Postfix) with ESMTP id 79F9E21F86B1 for ; Thu, 17 Jan 2013 13:00:22 -0800 (PST) Received: from mtaomg-da01.r1000.mx.aol.com (mtaomg-da01.r1000.mx.aol.com [172.29.51.137]) by imr-mb02.mx.aol.com (Outbound Mail Relay) with ESMTP id BA4E538000261; Thu, 17 Jan 2013 16:00:21 -0500 (EST) Received: from core-dqa001c.r1000.mail.aol.com (core-dqa001.r1000.mail.aol.com [172.29.211.193]) by mtaomg-da01.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 9245CE000086; Thu, 17 Jan 2013 16:00:21 -0500 (EST) To: farinacci@gmail.com X-MB-Message-Source: WebUI Received: from 178.26.192.122 by webmail-m070.sysops.aol.com (64.12.224.41) with HTTP (WebMailUI); Thu, 17 Jan 2013 16:00:21 -0500 MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFC30CCBF7182A_1808_E8C24_webmail-m070.sysops.aol.com" X-Mailer: Webmail 37288-STANDARD Message-Id: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Thu, 17 Jan 2013 16:00:21 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1358456421; bh=WIRcVPqhAV0CBCRKkpFdarFBPLNAh+vKy6sBi+AHpcE=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=H8aggbn+UfpPAeFPHfRj6yL96Hr5SYA9JDP5iSfkd2yrpzU4wDUidV9B1RVo96VI3 oRieXHvH6fFefQ6PkNayZ69YWS480teRBBnBqOjdxV/RJzbk6a4PCT/nZu5IaOG4Ej s3+H44q9xGXKA50IRYMyC8UXfin3Upmnao5f4Fis= X-AOL-SCOLL-SCORE: 0:2:314129536:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d338950f866657b92 Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jan 2013 21:00:23 -0000 This is a multi-part message in MIME format. ----------MB_8CFC30CCBF7182A_1808_E8C24_webmail-m070.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" Hi Dino, Fine, LISP wants to serve multiple types of EIDs (IPv4, IPv6, Mac, E164 (to= o?) . So I take for granted that LISP (still) wants to serve IPv4-addressed EIDs= also when globally uniqueness of IPv4 addresses cannot be maintained anym= ore due to the IPv4 unicast address depletion issue. Scenario which I think MUST run as follows : Source host A wants to send an email to destination host B. At first it must send out a DNS-query indicating the FQDN for B. DNS MUST s= end back the info-doublet=20 {non-globally unique IPv4 address of B; locator of B}. Thereafter, host A M= UST send IP packets with prepended LISP Headers to the ingress router !!! If it only sends the packet with its IP header containing the destination h= ost's non-globally unique IPv4 address, the ingress router won't be able to= get to know the proper locator of B !!!!!!!!=20 As far as I know, LISP tries to avoid bothering the hosts. But you cannot s= tick to this objective with ipv4 host addresses loosing their globally uniq= ueness. Not long ago, I think it was on the rrg-list, voices were raised "why not i= nvolving hosts". But no one mentioned this argument of absolute necessity. Returning the info-doublet {non-globally unique IPv4 address of B; locator = of B} in one single stroke can only by done based on FQDN as the key which = makes me conclude can only be done by DNS and not by DDT or any other datab= ase. There will be a second issue: How to handle non-globally unique IPv4. IMO it is an overdoing if IPv4-addresses have only to be unique at their (= single) specific site which is indicated by the locator.=20 According to my TARA concept, the EID's IPv4 addresses have to be unique pe= r geopatch (whereby the geopatch# is 2 out of 5 octets of the locator). There is more to say on this topic. But we first of all need a mutual agree= ment on the first topic above. Heiner =20 =20 =20 =20 ----------MB_8CFC30CCBF7182A_1808_E8C24_webmail-m070.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii"
Hi Dino,
Fine, LISP wants to serve multiple types of EIDs (IPv4, IPv6, Mac, E16= 4 (too?) .

So I take for granted that LISP (still) wants to serve  IPv4-addr= essed EIDs also when globally uniqueness of IPv4 addresses cannot be  = maintained anymore due to the IPv4 unicast address depletion issue.


Scenario which I think MUST run as follows :
Source host A wants to send an email to destination host B.
At first it must send out a DNS-query indicating the FQDN for B. DNS M= UST send back the info-doublet 
{non-globally unique IPv4 address of B; locator of B}. Thereafter, hos= t A MUST send IP packets with prepended LISP Headers to the ingress router = !!!
If it only sends the packet with its IP header containing the destinat= ion host's non-globally unique IPv4 address, the ingress router won't be ab= le to get to know the proper locator of B !!!!!!!! 

As far as I know, LISP tries to avoid bothering the hosts. But you can= not stick to this objective with ipv4 host addresses loosing their globally= uniqueness.

Not long ago, I think it was on the rrg-list, voices were raised "why = not involving hosts". But no one mentioned this
argument of absolute necessity.

Returning the info-doublet {non-globally unique IPv4 address of B= ; locator of B} in one single stroke can only by done based on FQDN as the = key which makes me conclude can only be done by DNS and not by DDT or any o= ther database.

There will be a second issue: How to handle non-globally unique IPv4.<= /div>
IMO it is an overdoing if IPv4-addresses have only to be unique  = at their (single) specific site which is indicated by the locator. 
According to my TARA concept, the EID's IPv4 addresses have to be uniq= ue per geopatch (whereby the geopatch# is 2 out of 5 octets of the locator)= .
There is more to say on this topic. But we first of all need a mutual = agreement on the first topic above.

Heiner










 

  
----------MB_8CFC30CCBF7182A_1808_E8C24_webmail-m070.sysops.aol.com-- From farinacci@gmail.com Fri Jan 18 08:30:56 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0972621F8862 for ; Fri, 18 Jan 2013 08:30:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YRfe1iqu8UIz for ; Fri, 18 Jan 2013 08:30:55 -0800 (PST) Received: from mail-da0-f50.google.com (mail-da0-f50.google.com [209.85.210.50]) by ietfa.amsl.com (Postfix) with ESMTP id 3736321F87EE for ; Fri, 18 Jan 2013 08:30:55 -0800 (PST) Received: by mail-da0-f50.google.com with SMTP id h15so1702591dan.23 for ; Fri, 18 Jan 2013 08:30:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:message-id:references:to:x-mailer; bh=G6kaPo9UGwA9rCqRPkXzQ6rA+GipfDne4hGERRbYBM4=; b=dhe27FR0EMwzLhIk5nltHM2W9r+u1nTTPsx/e8+6gqfky9Yz8joXxAbWzohZkv8Vbp Skni77OnhMPNQiNRAF1wQIhJHYlUwjINBjBdueraHW8QWChcusKaJwIALeyGz6OYHwop gLoORFaGf+DKkma8krHWV9/W7+VeQYyGbn5TqMrZR7FW0HNL/bDPeTIr/MGii7xHx9ip A6Af15GHwfanA7FOGba3Rb7mtUu5XWUpKCISOUqci/HxphBCYpW33omPN+VCL62cUB7j K7BvhBuTy5UfHqlr4ivTkX0VjKl5jaQ98U+RrkekolZ5nD1gbNi3gXmeIunYkjyb9Di+ pW+w== X-Received: by 10.68.220.6 with SMTP id ps6mr6790989pbc.80.1358526654944; Fri, 18 Jan 2013 08:30:54 -0800 (PST) Received: from [192.168.1.7] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id o6sm3691618paw.37.2013.01.18.08.30.49 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 18 Jan 2013 08:30:51 -0800 (PST) Content-Type: multipart/alternative; boundary="Apple-Mail=_E84FBDE5-1621-476E-80EB-D1E591D13081" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> Date: Thu, 17 Jan 2013 13:40:14 -0800 Message-Id: <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> References: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> To: heinerhummel@aol.com X-Mailer: Apple Mail (2.1499) Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2013 16:30:56 -0000 --Apple-Mail=_E84FBDE5-1621-476E-80EB-D1E591D13081 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii > Hi Dino, >=20 > Fine, LISP wants to serve multiple types of EIDs (IPv4, IPv6, Mac, = E164 (too?) . Right. > So I take for granted that LISP (still) wants to serve IPv4-addressed = EIDs also when globally uniqueness of IPv4 addresses cannot be = maintained anymore due to the IPv4 unicast address depletion issue. Right. > Scenario which I think MUST run as follows : > Source host A wants to send an email to destination host B. > At first it must send out a DNS-query indicating the FQDN for B. DNS = MUST send back the info-doublet=20 > {non-globally unique IPv4 address of B; locator of B}. Thereafter, = host A MUST send IP packets with prepended LISP Headers to the ingress = router !!! It must not do anything of the sort. We do not want to change DNS. We do = not require any new support from DNS. You may be trying to solve some other problem and think LISP can either = solve it, or if you think LISP cannot solve it, you think LISP is broken = in this context. ;-) > If it only sends the packet with its IP header containing the = destination host's non-globally unique IPv4 address, the ingress router = won't be able to get to know the proper locator of B !!!!!!!!=20 Outbound packets from a network that is privately address must be sent = to a publicly addressed system. Like your house that uses private = addresses and wants to send to www.yahoo.com. Of course, a NAT is at = your house that will translate the source of these outbound packets to a = global address so www.yahoo.com can return packets to you. If LISP is running at your house, the private address is the EID, and = the NAT translated it to a PUBLIC EID, then the packet gets encapsulated = by a LISP box with PUBLIC locators. > As far as I know, LISP tries to avoid bothering the hosts. But you = cannot stick to this objective with ipv4 host addresses loosing their = globally uniqueness. I'll just say many of us are running LISP behind NAT boxes at our homes. = ;-) > Not long ago, I think it was on the rrg-list, voices were raised "why = not involving hosts". But no one mentioned this > argument of absolute necessity. We want LISP to be deployed as soon as possible. Keeping hosts out of = the change-set of devices will allow it to happen sooner. We are on our = 6.25 year anniversary from when LISP started in RRG. > Returning the info-doublet {non-globally unique IPv4 address of B; = locator of B} in one single stroke can only by done based on FQDN as the = key which makes me conclude can only be done by DNS and not by DDT or = any other database. DNS maps from name to EID, DDT helps Map-Resolvers get Map-Requests to = Map-Servers so an EID can be resolved to a locator. See the two slides = enclosed. The first slide shows the API between ITRs and MRs and ETRs = and MSes. And the second slides shows you how all MRs get connected to = all MSes. > There will be a second issue: How to handle non-globally unique IPv4. > IMO it is an overdoing if IPv4-addresses have only to be unique at = their (single) specific site which is indicated by the locator.=20 Heiner, let me put it another way. We purposely don't put any machinery = in to help or hurt the private versus public issue. We just try to get = LISP to work in the existing IPv4 world. And hopefully, if IPv6 = designers don't repeat the mistakes of IPv4, we will only have IPv6 = global addresses (and no NATs).=20 And if the IPv6 designers choose to not repeat the mistakes, you can = sleep soundly at night. ;-) Otherwise, LISP will work with IPv6 NATs = like it does with IPv4 NATs. > According to my TARA concept, the EID's IPv4 addresses have to be = unique per geopatch (whereby the geopatch# is 2 out of 5 octets of the = locator). > There is more to say on this topic. But we first of all need a mutual = agreement on the first topic above. And what if you want to talk outside of that boundary? What we suggest = to network administrators is that two LISP VPNs can use the same = 10.0.0.0/8 space (and the mapping system distinguish these EIDs by = instance-IDs and the use of global locators). They can talk with unique = addresses WITHIN the VPN and they can even talk cross VPNs AS LONG AS = THE ADDRESSES don't clash. When they do, a NAT IS REQUIRED.=20 No magic here. > Heiner Dino > =20 --Apple-Mail=_E84FBDE5-1621-476E-80EB-D1E591D13081 Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_CE32775D-C7EB-4DEF-BD17-04C0E6C29D98" --Apple-Mail=_CE32775D-C7EB-4DEF-BD17-04C0E6C29D98 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Hi = Dino,

Fine, LISP wants to serve multiple types of EIDs (IPv4, = IPv6, Mac, E164 (too?) = .

Right.

So I take for granted that LISP (still) wants to serve =  IPv4-addressed EIDs also when globally uniqueness of IPv4 = addresses cannot be  maintained anymore due to the IPv4 = unicast address depletion = issue.

Right.

Scenario which I think MUST run as follows :
Source = host A wants to send an email to destination host B.
At first it must = send out a DNS-query indicating the FQDN for B. DNS MUST send back the = info-doublet 
{non-globally unique IPv4 address of B; locator of = B}. Thereafter, host A MUST send IP packets with prepended LISP Headers = to the ingress router !!!

It must not do = anything of the sort. We do not want to change DNS. We do not require = any new support from DNS.

You may be trying to = solve some other problem and think LISP can either solve it, or if you = think LISP cannot solve it, you think LISP is broken in this context. =  ;-)

If it only sends the = packet with its IP header containing the destination host's non-globally = unique IPv4 address, the ingress router won't be able to get to know the = proper locator of B = !!!!!!!! 

Outbound packets from a = network that is privately address must be sent to a publicly addressed = system. Like your house that uses private addresses and wants to send to = www.yahoo.com. Of course, a NAT is = at your house that will translate the source of these outbound packets = to a global address so www.yahoo.com = can return packets to you.

If LISP is running = at your house, the private address is the EID, and the NAT translated it = to a PUBLIC EID, then the packet gets encapsulated by a LISP box with = PUBLIC locators.

As far as I = know, LISP tries to avoid bothering the hosts. But you cannot stick to = this objective with ipv4 host addresses loosing their globally = uniqueness.

I'll just say many of us are = running LISP behind NAT boxes at our homes. =  ;-)

Not long ago, I think = it was on the rrg-list, voices were raised "why not involving hosts". = But no one mentioned this
argument of absolute = necessity.

We want LISP to be deployed as = soon as possible. Keeping hosts out of the change-set of devices will = allow it to happen sooner. We are on our 6.25 year anniversary from when = LISP started in RRG.

Returning = the info-doublet {non-globally unique IPv4 address of B; locator of B} = in one single stroke can only by done based on FQDN as the key which = makes me conclude can only be done by DNS and not by DDT or any = other database.

DNS maps from name to = EID, DDT helps Map-Resolvers get Map-Requests to Map-Servers so an EID = can be resolved to a locator. See the two slides enclosed. The first = slide shows the API between ITRs and MRs and ETRs and MSes. And the = second slides shows you how all MRs get connected to all = MSes.

There will be a second = issue: How to handle non-globally unique IPv4.
IMO it is an overdoing = if IPv4-addresses have only to be unique  at their (single) = specific site which is indicated by the = locator. 

Heiner, let me put it = another way. We purposely don't put any machinery in to help or hurt the = private versus public issue. We just try to get LISP to work in the = existing IPv4 world. And hopefully, if IPv6 designers don't repeat the = mistakes of IPv4, we will only have IPv6 global addresses (and no = NATs). 

And if the IPv6 designers choose = to not repeat the mistakes, you can sleep soundly at night. ;-) = Otherwise, LISP will work with IPv6 NATs like it does with IPv4 = NATs.

According to my TARA = concept, the EID's IPv4 addresses have to be unique per geopatch = (whereby the geopatch# is 2 out of 5 octets of the locator).
There is = more to say on this topic. But we first of all need a mutual agreement = on the first topic above.

And what if you = want to talk outside of that boundary? What we suggest to network = administrators is that two LISP VPNs can use the same 10.0.0.0/8 space = (and the mapping system distinguish these EIDs by instance-IDs and the = use of global locators). They can talk with unique addresses WITHIN the = VPN and they can even talk cross VPNs AS LONG AS THE ADDRESSES don't = clash. When they do, a NAT IS = REQUIRED. 

No magic = here.

Heiner

Dino

<= br>

  
= --Apple-Mail=_CE32775D-C7EB-4DEF-BD17-04C0E6C29D98 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-25.png Content-Type: image/png; name="PastedGraphic-25.png" Content-Id: iVBORw0KGgoAAAANSUhEUgAAAm8AAAHZCAYAAADQTdx9AAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2d lndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji 1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE 9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX 5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjASh XJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHim Z+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW 5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TM zAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRo dV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9k ciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQ OBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhH wsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQ DqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJ NhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/B c/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7Y QbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxF QtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6f J18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIl pSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyT jLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uu q43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoL tQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+ 41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIud Ft0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtO u8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrP C16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARG BFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJF REPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH 4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN 8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqw K10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTk muRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99u it7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/nd zPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqv akfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/ Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4 H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9 jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3R B6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0 RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/syOll+AABAAElEQVR4 AexdB3wUxf7/XSoJCQlJ6DUh9A6KimChKArYu2Ivf/XZUN9Tn8/ey3v2XrAh2KWJXRFBwYI06b0n lJCQkDr/+e3eb3d2b25v9+5SDmbzuczMr893ZndnZ3dnfQDA+E9tCgGFgEJAIaAQUAgoBBQCMYBA XAzEqEJUCCgEFAIKAYWAQkAhoBDwI6AGb6orKAQUAgoBhYBCQCGgEIghBNTgLYYaS4WqEFAIKAQU AgoBhYBCQA3eVB9QCCgEFAIKAYWAQkAhEEMIqMFbDDWWClUhoBBQCCgEFAIKAYWAGrypPqAQUAgo BBQCCgGFgEIghhBQg7cYaiwVqkJAIaAQUAgoBBQCCgE1eFN9QCGgEFAIKAQUAgoBhUAMIaAGbzHU WCpUhYBCQCGgEFAIKAQUAmrwpvqAQkAhoBBQCCgEFAIKgRhCQA3eYqixVKgKAYWAQkAhoBBQCCgE 1OBN9QGFgEJAIaAQUAgoBBQCMYSAGrzFUGOpUBUCCgGFgEJAIaAQUAiowZvqAwoBhYBCQCGgEFAI KARiCAE1eIuhxlKhKgQUAgoBhYBCQCGgEFCDN9UHFAIKAYWAQkAhoBBQCMQQAmrwFkONpUJVCCgE FAIKAYWAQkAhoAZvqg8oBBQCCgGFgEJAIaAQiCEE1OAthhpLhaoQUAgoBBQCCgGFgEJADd5UH1AI KAQUAgoBhYBCQCEQQwiowVsMNZYKVSGgEFAIKAQUAgoBhYAavKk+oBBQCCgEFAIKAYWAQiCGEFCD txhqLBWqQkAhoBBQCCgEFAIKATV4U31AIaAQUAgoBBQCCgGFQAwhoAZvMdRYKlSFgEJAIaAQUAgo BBQCavCm+oBCQCGgEFAIKAQUAgqBGEJADd5iqLFUqAoBhYBCQCGgEFAIKATU4E31AYWAQkAhoBBQ CCgEFAIxhIAavMVQY6lQFQIKAYWAQkAhoBBQCKjBm+oDCgGFgEJAIaAQUAgoBGIIATV4i6HGUqEq BBQCCgGFgEJAIaAQUIM31QcUAgoBhYBCQCGgEFAIxBACavAWQ42lQlUIKAQUAgoBhYBCQCGgBm+q DygEFAIKAYWAQkAhoBCIIQTU4C2GGkuFqhBQCCgEFAIKAYWAQkAN3lQfUAgoBBQCCgGFgEJAIRBD CKjBWww1lgpVIaAQUAgoBBQCCgGFgBq8qT6gEFAIKAQUAgoBhYBCIIYQUIO3GGosFapCQCGgEFAI KAQUAgoBNXhTfUAhoBBQCCgEFAIKAYVADCGgBm8x1FgqVIWAQkAhoBBQCCgEFAJq8Kb6gEJAIaAQ UAgoBBQCCoEYQkAN3mKosVSoCgGFgEJAIaAQUAgoBNTgTfUBhYBCQCGgEFAIKAQUAjGEgBq8xVBj qVAVAgoBhYBCQCGgEFAIqMGb6gMKAYWAQkAhoBBQCCgEYggBNXiLocZSoSoEFAIKAYWAQkAhoBBI UBAoBOoCgdYd86Frfifo0rkrdO6SD+mpjSAujkH5/v2wed1SWLhkNaxbswKWrNhQF+HEhI+Uxi2h d998yGndEnp16QltWjWH1EZJwFg1lO4tgXXLFsOydRtg3drVsGz1+piokwpSIaAQUAgoBCJHQA3e IsewTiykd+gFj9x/J2QnMvAlJMCqn6bDvc9MgIra8u7LhP889jD0bt8UapgPygqWw6133AuFxdWu PfqS0uD4k06Diy8aB4MP6QvtWjZz1N2zcwss/P1XeP+tl2HSpC9hT42juMHMP2Qo3HPrDRBfU2nQ 3GTi4+OhsmI/7C7YDgsX/gUrVq6GRYv+gp1FpW7Ua0UmKT0Thhw3Fs474zQ4ol9/6JTfDpITnCfI d+3YCov/+g0+nvQOTP5kOmzfU3/x1wooyqgcgcRUuOm+x+GIvGyAuARYOP1leHDC18Dk0hFTjz7t Qrjm3JOgpsr7fla+fx8UbN0Mf/z5J6xZswYWLFgIpRXujiU9hp8Fd111JrCaGmAlW+GB28fD0gKX B4eIa60MKAQaLgK4r6tfA8egVf/j2I4KZmy/f/QCS6rNmOPasVl/7zL8la2fzzrmJLnuJ+16Hssm T5/Dqg0L3jLzZ05mA3t2cOVv8GkXeTMeTLq6gq1esYS99dx97JD8dq58R2/fiWdHn3Y5++GPZcGi c0VftWAWu/yUI+s4dnX8iF4/8IBlciabumCb0S++e/k6fpnlQd+j7GX3Pm34iiRTub+ELf3rN/a/ +/7B8ptlhuyrx13zkOmuZB07plN8SJ16aQ+PeKoYa6+vHgzYqpk33sqxsLGaan6LkUeaqEdbXuHt 6td7HfktzfJyQ21/eQW/XWcUHTPDTr8UXnv5WcjNTg2QK9i6EdauXAPbdu/WZvRyWrWG3NxO0KZ5 lkX2kOPPgq969YHxZ58Lb/28wMKzF2qqqwAjTbYzvJbjEiGvcw/td/qZF8BD94yHh1/8TDvCeDXl RT4pvRlc//ALcP//nQGN4gM1C7ZthOUrVkHhrj2c6YOUxunQtkMetG/bmt9+tta6U9+h8OpH38CQ R++GG+98DPa4bLNAr4oSCwhUCvtoRWVVrYZc5XHGLVgwCcmNoXufgdrvvLPGwc23XAfvTpsXTJzP 9Jn1wvrWqD4dFCvFOHgQUIO3g6et66SmXY46A96b8DK0TDO7VnXZbvj0w/dh4rtvw4LlG2Hzxi1Q 4T8AxyUlQ+tWbfmAqTucc9n/wTmnjoam/vFIVptu8MonH8HW40bCV3+tdR3/qqXzYf5fq8Dn4/MQ wTbOS0xMhpZt2/LBYx60apbFh0Xm1rh5Ljz4/GRo1vwGuOW+l6C6lk4Y6Tlt4Pl3PoJxow43nfPc /r0FMOXzD2DSRI7Z0k2wnmMmnrQys1tC8+bZ0PXQIXDBWWfD6OOOhcb+gT3EN4KL7ngUsvjzcafc 8oBFz+LkgC/EwfnXPwb/OHewdqGw4bdpcPGND0K5uuMWhZavgflzvodV6wv4fuZgzhcHjZIbQZvc XMht3xFymqZbhJt3HQRvfjADmlxxPrzw3pcWniooBBQCzgjgaUn9GjgGLfsOZxv3mncP5kx8upZv m7ZlXy/YajjcveJn1iHb+bZpYuM27PN5Gw0dzGxcNo+dc0Q/l/3LxwYddxr7cbl5KwhtLPnqdZae yN9uCNJGh598PtuPgv7tmXsvDyprt8EHj6xtx07s8GNGsacmfMZ2ldpu9FYXs8tG9XRtz27fqRyX 3oK98+3vFLaRzpn5LhvYu7MHn3HsMI7bF3Ptt1yr2H3/OMmDnQPtOJDI7p8838B1/ez3WWr8AVRH ftv0k1/XG/Wb+dzVtXrb9KL/PGH4YqyKXXTqYNd9KzktneXmd2UjTj6XvTPtJ1ZeI5ji2fKdK9kR XbKk9kZceZ8hXLFzOTsqT902dTquKN4BtI8HOedhGzs/Cc0l1KYQcIvA8HP/AWMPbWuIF66cDyeO PRUmzXW+7Wko8H1u3lefwAmnngW/b9prkHuMPBcuHNXHKIfKJPAZNbdbTUU5bFq3Gn75YSbcePEp MOrkM+GPjbtN9bg0uPGW8ZAW7zS9YIp7yV1+05NwwbABgkoNTHvpdhhz6jj4fdFKgR4qWwO/ctxO Pu5oeHvaj4JwPNx27xMwvEtrgXZwZSsrzFd6avu24sGFLEASn1Fzu5WXFMPaVcvhm8/fh3FjRsAZ l46HLcXmYxlJWflw63Xj3JpTcgqBgx4BNXg76LtAtABIhnPPP0m49VgJz9x9Gyxaudmzg9Kls+Cf d/wPzJfRUuCi8y+FlDrorfO+/gTGXfwPKCwz34TrNfRkGNktugOgZn2PhbtvPceCzY/vPwIXXvsI 7CrDCQjvW0Xxdrj6wivhm7+3G8qJWZ3hvjtuhKQ6wM5wqjIKAUcEymHqhP/BVf98AiqFrn7cKZdC r0z+GpbaFAIKgZAIqEN6SIiUgBsEElr3gYFd8wzRgr9nw4Rps42y18x3k1+G2cu2GWo9hgyBNpIX IAyBKGaWfjcJXnr/Z9NiUjYcPuowsxxxzgdXjv8XtE4z305Y+9tMGHf9fbA7wuexSnevgFtuvhtK hfdZDjvtLDisvfVZo4iroAwoBCJEYNprT8G0uRsMK43bdILeh3czyiqjEFAIBEdADd6CY6M4HhBo 1rYZ5GSat1GW/TKf3xYxb1l5MKWLVmyF6bMXGmqNm7WDbmkZRrl2MzUwY8p7UC7MCnRv10OYVYzM e2aPoXDVqcMNI6xyD9z1z2thY6F5G8lghpH5a+ZE+HjeWkMzPr0djBh1pFFWGYVAg0CgqhCmzZxu huJrDL35i0JqUwgoBEIjYL4SGFpWSSgEgiKQwF85E58Kq6riC2oGlXbHWL9ikymYlAV5eXxwaI5J TF4t5Lbt3KHNXiX77+LkZDbWVmmJYDhqRHnmaZdBu3Rz11v6wwfwwY9rDH7EGVYMn33wGYw78ia/ qTgYOnAwj38mCBNyId0kp6ZD3379ICcrAxL5gsbaxmpgf1kpbNqwGpYsXxfShleB9p17Qrf8DpCS pL86iwuzlu7bC2uXL4LVm3d5NFfJl5kwpzJrqiugyrwb7tGWKZ6akQP9+/WFrMw0iIMa+POXWbBh e5EpECSXmpENfXr3guzMJpAQr183M8SzdB+sX7Mclq/x/ohBEFcxQ1631bzFj0G3ykqppdiToWuv HtCWLxSemoJfd8GjFYPq6mrYV7yHP4+3CtZttsYSjUC69h4Iee1bQVKCvv/UcH8le3fBiiULYPPO 6C2mnd0iF3r17ARNGqfwuul9q7qqAvYUFsAfC/6C0nIve340aq5s1DYC5hmktj0p+wc0AsUl+6EM 12DwP5jWoh0/SPJjSIl57vRc/7++fgfuvncjsOoaiPdVw7wNwosEnq15U/Dx07K4ZbZoDMn8eE9L nIg8T/m4TDjtzGGCShV8PHEyVESAk2DMyP7y87ewafdVkNOIB82Xa2jbows05gPRPS5Gn936Hw4X XnoFjBkxFDp36gSNEq1YoJM9O7fBkgXz4eP334X3P50G23aFPhEltTsUXn/mfmiW4oMaPtv433/f CN8s3KrF3POwo+Hm8eNh1LCjoFVOplEPPcNgx6a18Psvc2DCiy/CB9/NsfHNYu5hx8NT946HJD4o 4i80Qn5P8zZcq97DYMqM6cA4HrjF8xP4e88+BG9Nm2Ua4LlTL7wdrr7gWO3iY9Pi7+HqWx/hz18y aN2xD1x87T/gvFNGQNdOuZDgv1r5v5MPhZen/GaxIRb6HH4MXHzZFTDqmMOhE18yI0ny8svOHZth 0R+/wKR33oYPp8yEXSUuGkp0Eqt5fD9W2Jq1je7grU1eLxh30WVw8ugR0CU/F7IyGgve/FlWBds2 c/wX8Ec9Xn0WPpryq6sv17QYcDK88uA1kMy7U/nudXDH+JtgyRbcD3xw5KiT4eYbb4SjjjgUspvY 1rusqeIvSa2Cud9/B6+8/BJ8M39RYEyuKHEwaNiJcPnlV8DwIw/jS7G0sFxAo4nqijJYuWIZfPfl FHjt9Qnw59/rXFlWQrGBAE6QqF8Dx6DBLxWS2Yv9utZcy6SiaD07vEvo1dOj0ffsS4W88NC1Effn /KGnst3CFy2+e+UBfDU7YrtNuh3HNhSZy5GUFixhfVumRmw3AMe4ZJbXuRvr3r07696jB8vPa8/4 Bbmjn7j0HHbTXa+xncXiwivGKg1BMyv/+JGdN6SHo22ML7XnGFZQaZq5/Tz+JYj4dHbtv59lu8uq TIZTrqacTXz4dtY0SFsMOPkqJ+0A3ru3XRkQ982PfGLI7V4zm/GXPVjXkZeypRuKDLqZKWOXjRkQ YAPrm5TVlt3z34msyG3d/EYX/fQFGzugvdSmpZ3reamQK84ZFjrGIO1E9Rh55T0mlDz3/NVnBdgM a6kQ/uHkS2++j63ZtsdiP2ShZj+bMfl51jInPSAOipnSjieMZ+aKJyVs7KHtmC+jDXvw+Q9Ymclw dFlRtoc9cfU4xt+PD+mP/GKa2KIze/K1KazU5W6DQRTv2sQevPJsxq+dPPkS/ap8w8FOzbzx3qi2 KCCwZyl8/9sSGNRRX2w2sUl7uPvO2+CsS24DD59DjUIg0TGR27o3pOt37jSDe8r28xtkkW99euZB yyb6zA9aWzH7W1i2PfSslWfPNeWwZuUy12qp2W3gubc/hEtOPMKqU1MBK5f9DUuXr4ZKPvuUntES evTpBu1a8O9p+rf8/kfB2199A+2vvxIeeW0akQNSnEHVPgiAR52a/QAZreC+N++G/4wbachWlu2F pYv/hlUbNvEJw0bQgS+g3Lkrvx2U4r9/7UuCc297CNL57NUZ/3xI+7KGocwze8vKoISfmtKsEzqi iCVfLazeTwzxSwIlJXuhTfdj4MM3n4XubWwzKJqCD6ol92KbtO0Kb078EE4b2pvMamlNZRks+3sp LF+1DvgdYcjkuPfo3c0y29hryCj48Nvv4IYrLoWXP7LOClqMxXzBB71ze1pqUVgahec++ZdSbnv8 eXh4/BUW2zWV+2HD+vWwcc1a2FG8j99eTIA27XKhU5d8c3bMlwwnnHUNfJaeBKNOvwL2lFlMWAu8 3TFafNKXFRdBeqf+8OajD8BFx5ptXlpUCIsX/Q0bt++AhMR0vhh5HuTn50GKfzY7sVEG3Pz865DM Z/+uf+l9bWRgdRJYyu58CLz5/iQYO7CThVm6txCWLl0K6zcXQHxCEuR36QlduuTxmV5dLK1pG7jj 5XegQ14aXHnH61AajQOaJQJVqGsE1Cjc41UPb6A6x6zBz7xxTHocdwErEmZW8Grvx8kvsJ4dW9Yq XtGfeUthz3+yAMP3b1XsrstHRKUO541/i4xq6fN3XREVuxH1ybQW7MXpv1jiqizdw9554TF2dP/e LCdTnIWIZ63b57ITT72UTf/xV4sOK9/Nbh0X/LuqKd1OZJtKdJWaynK2ceMGQ3//3u3shcfvZH16 dGbpyeZi0Klpmaxzt17sXw++xBdQFqcZKtm9V54QgJ0vJZ316NuP9euHv4Hshal/GD7W/vo5O3wA 8fqxAQMGsPbNAheGveGByYbOugXfshcn/WyUMbN8wWz2wlOPsgvOOJUN6N+HZaaZ8WI7+HLy2OTZ Syw6ZXt2sFeeuIcd0bs7y0wXZ1qTWLvcTuy0865l389bZNGpKt7KZ/V6B9TRaOsYn3mLS+3Avl9U YNS5pmInO3lIXkB9vc68jbzkXiYehqqKd7KJj9/HhvTszlry9hZn0JN5f8nlM9RX3PQQW8fX6DG3 avbYVWMCYjGw5+3cceQNjDSqyorZxq3bDfWdW9ew+26/hnXNz2VJ8eYC4+mZzVjP/oPYE69+wvaL s3PlO9l5w0MvBp7Upg+b8ftaww9mCjatYPf88xrWrXMuS0kyfWVktmD9Dh3M/vfq+2yvZVXkSvbK bedbcBDrpfJ1f34PE/OYCdRxRwqz8jFjMxYGb+BLYne/Yt5yoiNMwZaV7JF7bmWH9eteK3hHe/B2 7Hk3sxJhnFC6YwnrHJVbm3Fs/IQfCRaeVrLbzj2sVjDxsj9cdvdEISbGSgqWsovHhI4rLimVXfbw W5avW5TvXMGGd2klrZM4eBMdFi6dy04Z0kWqI9bj+HOuZUXl5i3nguWzWPtU59X2//3WbMPViu/e YnwyNaQfcfBWuncn28enHHHbt3MTu+nC01l2eqKDjTj2rxe+NHxiZvf6X9ipRzsMwvwxJaVms1te /Ix/u8Dcijf9xvq3DvL4QYwP3v7vvteE246Mrf3tM5aWGNg+XgZvqdk92R/rig0AK0p2sIvGHOXQ Xqa/LqMuZVtLzGHf1oUzWStJPNQnxcGb4ZBnVn33ETuie4sQPuPY5bc/afnSxOKv3mB8QZ+ger7E VPbE5LmiK7b8m8nssG7NgupQrINOv5atLiw1dUsL2ekD80Pqkb5Kg7dLPWLTIINSncq2E8fE4I3H nJTalr099S/zICHk9hfvYnN//Jo9dt/NbMwJI1mP/A5RaefoDd6S2Igzr2brdpcLUdewN+64OEpX qXHsqc+Fz2GV72Bn9Ayc+anLg0F216PZemG6tJyf7C45IfQMgBljMrv22Y8EvBj7/lX584Gywdu+ ghXspN5uZ2bj2X/e/cn0xZ9PunaU06fXEtld75izZiu/f8fV57HEwRs5KyvazM45vn/I/tpu0Oms UHhkcF/hOnbyYBfPr9H+HpfB7pn4LbnV0g8fuE7uN1YHb3GZ7MJbH2HF5jiJsep97JYgn9vyMngb feUDAnaV7OX/nC/HjvC2pXe8NM3UL93ORg9sF1RfNnjb8vcPrH+L5KA65n7Dz7uJWez9OWsMfzV7 N7MRPYLvC/1OuoYJwy+27uePWa9U66yvxb6tbj3HXMN2CLPXv0x8wvOzdk72Fa9ux1LmwzccebUp BCJFoKJ0E1x+9gi469m3gI+BLOaS05rC4UeNgFv/8wRMnfEV/Dz3F5g/9yeY8NLTcNbpJ8EA/kZk NLaa6irXZpIyMqF3v0PgxHMugYlTv4OpE1+ADsIq7/O+eBVu+9+EqDzvpgXF34CkjVVWQOEulw9n kVKU07PPuxraN6FHX2vgpYfHw5tfLPHgpRxe+ddVMGXBRkNnyJnj4Khc+xujBlvIVMHzD98KUxZt E2hO2Wr4fOLbUEbP6vDnk1p0j06fcfIKrALuu/kKmPTln45iwN9QvuLyqyGbvs7GKuGB26+Bz+ds CKEnsGuK4LHrL4HZqwsN4ujLroQ+zWXP2xki9ZKRPS8YLJD0Zi1g4KDBcMaV4+HLWT/DW4/9C9Ko 23Glyc/+G575NPhbxMHsWunJcNTQow1S6ZZl8OKLHxhlN5nJH0wxnwVLyYDMtu3cqOkyVXvh3/+8 Ef7c7vK5vcpd8D5f0oeOCL70TMjqYH5eUHTs48/LXXf1NUDv4laVbIMbbhgPi0vdv5W8ZNoL8N83 vzDMHjLmbDisR0ujrDKxhYCw+8RW4CrahotARWkB3M9PQFM/+QDG33ADjB5xDGSlJQUEnJnTEg7B 3+FD4KKrrod9e3bCkkULYNrUz+HLmdNg3qK1ATpuCGPPuQY6HXIK+Pjac9KN0xOSkiC1USpkNMuB ti1aQZM0OiyaGr99MwnOuvgm2OH00LIpHjoXF88fTE8T5GpAW25KoNRlNr5pF7hg3AmGy70bF8B/ +UPTXrfK0p3wwotvw5iX/60tsJKQ0R7OOH0M/PDEu46mdq37A555Y6qjjJ25fN5fsGlXJXTO0d8m yWvSzC4S9fL2JT/AK+/MCGm3UesBcOYp5mLI25fNglfeC61nN1xauAFeeXsKDLn3Uo2V0rInjB05 FBa+96VdtB7LPrjpjkfgzMv28v0sSBj89eZEvp81TmkMWS2aQxu+n6U20tvN1KiGT994DC795zOu lucw9SQ5Ptjqxl/+oG3r6gWwpNDb+mYlq9fBXj4eSsW3EDxuy3/9AiZNd/sdZ93479/8Cnv5tWaG diZuBF0a8/eoJVvLviPglGHmyx0/vvsKTP1tvUTSmfT2i8/BDRefAC1T4/mL3m3h7DFHw6ylk52V FLdBIqAGbw2yWQ6EoBgs+GEGXMh/uV16wIjjx8DIkcfAoQMPgY6t5SfcxpnZMGjocO13x53/hukf vAP3PPIULF692RMg7fP7AP7C3XZuWsXXE3sSHnnmDSiM8npbzEfTRvyFS/62WhmLwqqxYVa039DB MCC3iaH902efwsad4cXz8yefwJoHxkN+M30QPHzkSEj537sgfCLW8EOZRd98AVv2mHgQ3Smt2rcC Nu7azQdvzTWxZD44qO1t5qRPYaeLyZQhJx4HXZqZZ/0Zb0+CcNdhnfnORNh264XQUpue8sHYE4bB wxO/5GvX1XZt3dqPg179j4BebsUlcuuX/QkvPHkvPPXm58J3jCWCbknVpfDp60/CYr4mI65tuGre FE+LUmtu+OxXozDPij9/8qk5K+wy5rKihbCdH2MytNn+OL6mon1wqxsaffppkOXv6jVlO+DF198I 627Alr9/ga9/XQ3jju2iGT5y+ChIeoyvM+kyXiXWcBAIs5s2nAqoSBo+AmtXLIVX8ffsY9CybQdo 17EjDOMHjUMG9Ia+ffvzFchb80V4rfVo1KQFnH75LXDsiWPhvvGXwDOT5xq3F6yS0SkV7y6AhX8t gG9nvA/vTJwGq/jr9rWxlQtjozh+oE71+d/jrw1nIWx2yT8U6A4fsHL45vsvwjohoJuSXX/BzL/W wj9G9NC8tunRG5qlJsOG4uCjnl+XrfDsj0EVVNWYIPIX9kLUMkJ2zT749refXBjxQZ9u/c2lnauK 4cs5P7jQk4sUbv4Vflq+Fc4c2E4TyB14KDTly0vsjPZqznL3tUStgV3btsDvv82HLz6bwBd3/o4v 7lwSPV8VJTDh2UcisBcHJ48b7Z8F82pmP8xavs6rEu//FVAtjMil36WJz4Qhhxxi2N6ycgHM+sP7 rJtmoLoI/vxzvjF4a9euE3Tk1xsr+Mo9aostBNTgLbbaK+aj3bZpPeBv/uwftbrktGzLB3Tt4NhR o/mK/ifCMUf1hyRhIJfVuis89e4U8O0fDU99Ps9V/f9eMAd++nUxv/gWDIma/IRfUbEfiov2wMZ1 a2DJH3/xGaDdsG7deqj0NhEkWg2d54OOgsJ9phyfHeDLMdXTFgctOnczfFfu3Qpzf1lulD1n+KJl f/2+AsA/eEvPaQWHtmsEG5YGG7xVQeE28zk59/6sn2FzrxeeZGXRdlizeFVoZV8itORr0tHGX1SA hQs8POtGiv6UVZTD4sXrjMFbdsv20LtlIvywIRieNgO1XqyB2XzmdCn/pFfQxxN4n9hfXgZFu3fC upXL+Xpny2AHz6/duKXWo3PjANd4a9W6JWRn80/vde0FY046BYYNOSzgKwVubEF5CezcFc4FX5Bj lOA0Nacp9OyqD+KRvGrBLCiI4Di1fOMOw3pm67bQulMm/1zXHoOmMrGBgBq8xUY7HbBRFm7bxE/i m2Dxb3Ph2YcegsHHHAs33HwrnHni0eZBNCEH7nn2Ffh+wVD4a31xSCy+/vwNuOGe10PK1YcA/2iT 4dbHF+jM65oBsG6nQauzjC8B8tvnGO6KCrbA8uJIbp7wT1jxGQEG/FlDtJqQwp8nxFuowb/56bN9 GskIpgFlqvggau/euNARJSTzxwHM55UKN6+HNfvdvzgT6KAStqxewslDNVZ8ciqkN+VTJF4Hb/Ep cO51N8PA1k2AL3gS6MZO4RcUVaWF8OyTT8A2x9W1a+DV5x+Etz+ba7fQ4Mq53ftAt055kNerL/Tv 1hnat2sD2VmZ0II/g9c0qymk0geMI4mc92WfC3jDcdE4NRNyMnjb+7eeQ86AmV8O5ftZ6IEf6Zgp g6btuhrFuJQmkJaJjyCowZsBSoxk1OAtRhrqoAizphTmfDcd5vzwNXx81zPwxp1XQWP/XcWMdn3h thsuggvGPwfVIcBITDIPdCFE65hdA8sX89mYUwfpfn2p0Jp/iB2+XFPHcfBHgviHOdu1Mp9327+H f/Sdv/0ayVZaWajd2tYHb6mQ3Sqfm9sWicl61y0pLoQt/IP2obbERvHQspn5MkopzsJUmQP1UPoy fkkFbxPaktMhoznOvgQfDJOoJU1KgXGXXg8n9JY/Z2qRpULlNvhp8v9g5t9Oe5oPkhvpzzeSWkNK 43LawElnnwdXnnEaDOjbE1o05SuoudgYf1Pdx18sCv4WhgsjURZJSW7PvzDiPxBy283y+sHx5iRv ZN54/0hKc4dNZI6UdrQRUIO3aCOq7EWOAP8k0wf3XAstmqTDUzedZzxHNIq/2t78vldh656GcuvI e1W3r1rIBzhnGNfMPdp34/WbKszHebcZlgafYYkXHjQM5xre7jeBv11o2uG3hIM8fG3Xa8jl6qoK 4Kv+uQoxIep4mids4AOK+Hj5w+yOwfHxY43kE2COOhWVUOWuyo5m6ovZb9i58NRTD8LRvXODh8D4 Ld39ZVC8dy/s2lkAq1evgoXzf4K5C3fDq5PehOYN6PqvsroQyvETbIlmf6jBb6tFuvHXhPFzxzXC M3eRmlT6dYeAGrzVHdbKkycEquGF++6CC047HgZ1yNY0Mzt0g75Ns/jgbasnSw1JeMnG5VDEj8OZ /uPwIUceDun8y+dFUX8QPR7ue/0jOGlgrnZwjmd74e7/Oxk+m6/fHmH8ZLBlG78F3cePDh94MO0Z wfDP2kw8ofBvq+4t3N6QoA8zFnc3p6r4myjbC/jzjB31W9E+YSAXpmOw4FlRBqW7zbXfXNvkF0Jr V66CrXztV7cnaVayhT8T6tpDgxI84uzb4LMJD/HBl3kZwadAYcnvs2H2nD9g4eIlsGbdJtiyFetY AWWlpVDMv0u6a4/+OEZ2+5H8+2aibv1XLzE+B5KFgdv0Z8bDba9+HYXA+OCNv/2+dm3dz/xHIfiD 3oQavB30XSAKAGR3hwmvP8eXSUjmA4AE2DjvU7jipkehOMKLw+o9q/lr7cv44M2/dlZSY+icmwwz 10Yh5noysf73xbCOD5r6tdFvVbTpdwQM6tgEvl4R3WdOUlv3h/NPHQt5Tf2jxJL1sHWrcBuMj9Eq +IfiaWvSog004bebi/iH3cPdmrXqbc68VfMXQnY1jAfTw62PFz2cnKsUZjCatunIF6GNh/IKAXMv BvmcSOtW3UyNylLYVxTGA/GVJXD7ZafAo5kprgZv2ssHNVVQsMPb+mhmoPWXa9FlELz91N3CwI3B 7C8/gseffBpm/TwH9pSGvjBJSmx4p8TS/ath974qyNIXg4PSffxj94sX1x/QynODQKDh9dQGAYsK whMCJQx69D4MDs1rrKkVZ++H9Lue4G9zhnviMr0vXynOsvEr4gZ0O8OM0n2uZu9S+P63ZXzwdqim FJ/aEk45ZRR8/dgk90ZcSOL6TR1p4MblF/74Dfy5pcTUZFWwYgUfXJ2gT72lNW0NA5slwcaicAdv cZA3sL9hv2JfESzfEHn7GwYbeqaqHNas5TONh3XUIs1q3gF6ZiXArG1hYhDXCPJ668uuoMHiol2w Zps52NacuPxXUrILSoSmd6kWY2LxMO76OyG/pXmA+Oy1B+Hsq/4Dnia1Xd4ir0tw9paW8Ld0S6FT RhPNbcd+R/H0nboMQflqgAi4eI2qAUatQmpYCFQU85ODeXZIbdMZ2rXQb3VGGmgKXytM3OJCXzyL 4g0y/8Xn4npqPjj1rIugWXIUd0VfFlxy6SXGs4L8qSf+1YoP+UlMBK+GLzlgrp3nS+ELJB83OGy8 4jPyYPSh5kzRzg3LYckufhvxYNn4J7SWLTQ/n5WQ2Rr6HNkv7NqnNu8Ow3p3MPS3r1oAq3Hpf7VJ EUhMbwajhh9h8Hav/QP+deP93gZuXJslN4L4KO6KRkARZCp27oHlK81Z7E75vaFTerhB+iC7RTvo 0iUfOnfGN29b8ZczIghOqdYbAuH2gHoLWDlugAiwbbBovfkVhPjU1jBu7LFRCDQZhg7obNqpLIMt 62L/BPbTFx/AQmEWrNXA4XDTeaPMekaYO/rCa+CMo/MMK/u2LoaJn35vlCnzx59/wE5joi0exo49 BZLDPJD3PWoU9Omgzwyg/d+//wlKy8ObKaL4Yi2dPWce7KOJNv7d1bNPOlEYQHurzeDRp0In4WsN s6b/GOnLq94CiDHp1LRkaN1Mn/nH0Bf/Mh1W7PN+rOg6uD9khfFeSK3CVb0H/ljwm+Eii389ZsSw gUbZSyYutRk8NWkmzJkzl//mwLcfvwGdzJekvZhSsvWMgBq81XMDHBjuq+H776yDgzOv+Ad0yUiK qHoZPY6AIX07GTZKCzbCgsK9RjlWM/u3LYH/vf6hEH4i3Pjg0zCib65ACy+b034g/PeBf0KiMAj7 6KVnYMmOwBPZtkU/wjT+TCFtPY46DU7s1Z6KHlI+ULnsUjCeEedfF/iYf2rr4Bq6AayZOw1+WGJe xAwaezEc6X/ZxgOYAHxF/QsuPgf8TysCKyuAj776SluGxZOdg0g4Ib45pAjPqxWs/9t77eNT4eJT Tgp7wO3doXuNLybPgL3GhUEKXHXJxebXUdybgbz+I+Hko3rwhYlzICcnBwr491836u9qeLCiRBsC Ai4HbyiGP+GMUKfRy/zLaF6DioYNrz7rWr6266j3idkzPoU1u+noAtC86xB4+N5bjBOQ91rHw9U3 /ws6ZpqXwX/9/B1s2om3Z7FO4mYvizy3ea84kbyYuvUF8OGTj8Pc1bsMhRS+Jtrr706AvrlZBk2v p1g3xJr8CWL+bGpOO3jpvddhQFtz3aYdy36EO5+bGCiMlJpi/kH5543vP8al5sBdD90JWR5388Hn XQf/GGs+77Z69gz4dBaePD0akkcZM9SaigJ47rW3jEFrUtP2cP89N0GqxxqMvfZ2OO9I86Llz+mT 4LsFmzxaaajizn3Ye9T6/lFRuR1KhEWR23Xzr6XoweBRF90G54y23uoWHzTwYCoKolac1iz9Ar6e t86w2//EC+CKM47xlxGD0PuaLykd/nn7zWDcca3eB8+9+V4Y3zW1xmYEVesZt37pGCmmsuCIL8PO rS+ZXa+08Hxh9GqLQQRwGQF374Ph/Af+avMwFAeFK+bCf1+3DhJOu/5u+N9dVwBfCcPjlgTnXv1v uOsi4VZiVRG88NpLnj/87NFxnYmXFf0NN994G5QIS9a173UUfPLxR3Bkr1x/HO7nrlp27AeTPpkK pw/pa9SB8Rmw2/95C2zaZdwbNXiUmf/5O/DhT+bnn/qNuRxefvzfrgcceYPPgdeefgBSqY35t0Cf evy/UKSFLjsokuc6SsVlH3zVtboXYI2+mvAcfLNom1G5oy++DZ6642owL0EMljTT54Sr4fkHbzZn TvlCvY8+8RwI3USqd7AT9xXvh3UbzYuh3seeCqP6uF+Y+PCTroeJT9xuzh5rgPp4uQH0YR5LTdke eP6lN/iiJ/4tsQk8+tKrcPZxvZHLfyGO774kuOH+p+Gy0eZF1qJv34Xp3y4miyqNMQT4IRc7Z6if WCsnWSc5GU9Gk9knOZFHNExFupc82fCiU1uyFIuYki+kYd7cUtKzoHe3btCjRw/h15Pn7b9enIY/ kW7q9OrVi68Mb87U2P2YHjFHMVBcVEYe/1zOY/fC98uEtb34AeO6e1+GLz95GUYc3sfQRulgW7su /eCJ1z+ACc/dC8Ki4vDdm0/BB18v52o0SqAYgllCOsmIcdrpJCOzQzxZ6lU+0Mbcaa/Dxfe9ZDkx 5/U/Fr787gd47K6boFcH/jCxMY+D/vAAjQdqc1CXntUCLr3hDvhx9o8wdqg5cOMLV8DLt1wPb0zF Z2UCfRu08iK4+183w9Z9dCnggzNuvh8+e+t/0C+3DdcNsqVkwNjLxsNM/imy7jnmSyVfv/0IvD4D v0FL7STqYxyyTYxP5It0J13Ukcnyz3zvN28XN22bD2mysESX0rzMN/kjBb1cU7wV7rj9DthjuI2H Kx58BiY/dw90a51DwgGpLz0HzrnxHpgx+Wlol0Y3TAEmPXMHfPzrigB5OYHipNhkqahJ/FA0ke+U l9kjeeJhat9EHuXtMlRGPjUi2YqDGv5Jr/c++5yEoFFGB3jmtYkwqEdLgybL5PY6FB59bhLM/Ohp aNPUvvhCEnRtnGlTCxUfipNMqJRkbS60ItWNZHzww6QX4eUZfxjCqdn5MOGDL+CW/zsfMlKDP6LS vktveIav+fj4P82XmCp2r4dbbntQW3PSfbxUHwwBj0X4I5qYIp82kR6NvBu7JIMpxSnSKA6RRzQx JR2iURlTolHqxCMZTMWN6EijWIgmS626vLfaDYoC9nwoWQwAN3Ksl8z/yOeLXvqvZpjxWnYweVPT zNljMMt0kWSYNZUsObmcacciXCcFwk10JmLC+RS0X6TX8WfCD0PG8E+50IFM1HWfx7ZY8s1rcOJZ twizJXo7BbOCOoEYx0FFwWq49rKLYMqnkyG/Of9mp7b54JiTr4Qhx58D83/5BX748kv4dckKKCra y1c4LwcWnwDpTTKgbdsOcMLYk2HokMHQKlscTAIs+3UmXM6XHqmwwETthUQLQ8CKZPyh+OXM/kd0 WSriL+PLaHZ/MhmRVgMfP3IDxDdOhgl3XAL0saHGzdrDrff+F668ejzM/vkHmD5jKqzeUAhFe/cB vjDaqHFjyMpsCceMGg2jRg6FbnntRKNQU74XnvzX9XDn029xeqh6+GDV3Ckw7pIbYDIfIGc3xpOA D0ZeeCP8OOoM+PbrGTD10y9h467d2irvqfxTOl16DIGzzj8ZBvfvbpxGMYCfp74OF9z4GASf50Mp c6N2sPYnaktZ3MQzbZg5EXuSq4a928yLiezcQfDMA3fDm1//BJUsHrJyOkBm5QaY8OlX/LufpqXA HO5jNGAmQZk/Pebfp78JV17XCl5/9n5tAWb+oVc49dq74ehTxsHXM6fDtGlf84Wmi/k6ewwapzeB 3gOGwRnnjIFBPfMtrme88yRceedrks/BoR+MI3Df1zlibBaT/kKwOujx60IkI+rb7Yplr7qiXcyL trAs84903MiXqFMDn7z8BHx/5ulwbJ8WmlTnQ0fA97PnwaeTP4KpM7+HHUX8kQtfPDROawyduvaE EcfxBcAHHQLNM+jG9n6Y/MYr0Gv0ZdCzhf7yw9jLLoMfdtVAfu+BsGPOVzCZ29Nxl8VH7SHGpYUS 5B/asMvqZfFwz/zfAGYVhXDnVedC/idT4PhDu2o2G2W0gcdffBeuuPp6mDblE/jhl4Wwt3gfX28z HjKyW8DxJ50Op44eCa2z6XjM1fhdjIduuBi++nMjL1DMmjmX/zBuqr9Mn3hYF3v9XLoIKebGrhgn GRRjon1apJGcmIq+xLqJMph34omydjkxThmedl0jXlx8IVo/LXpuDz/Ra7eJNP3n88XxRayR7yRv 1w9dNu06y7qVC6yDs93w5U1s5JgAa9lvJNtUzIe7tbCt+/kd1iyR2gLryPNx7djXC7Ya3opWzGEd spM1nt52gVhQm3YeNIxNnb/K0JVlqqsq2f6yUlZWzj8+FHSrYt9++CzLbZXp7yuyfgXs8JMvYPsF Gy88/A+/vBgj6up1dG5/kpP5Eu1FI0++EtnYK+9km3Y6NXAN46vBs1L+q6yuEWprzW5d+Ru76NRj jbq675PAhpx4NluysdBqkEo11ayyspJKtrScff7G/SwnPVHSTtSvgKV0H802lZBqJfvX+Udr8tb+ RPIy/Pk5KSWdfbVsCxlhHzx4k9+n2B6EK7CBo65nZQFw1TAibZwziaXGk089veGByYb9rX9/y9JT sF5o07Rr4ko0TCkGnTbq3KvY2h17DVuWTDXiWWUhGYXqEvbuU7eytCS0Z41NL/t9JmexT+dtMNRm PncN44d+IQ6KR0wpXlEOafQjWSqb8hf950nDF2NV7IpzhgvxoZxdV4ydeGIq+hDpmCcesJFX3W/4 rdi5gh2Vl+Tn23WAtR90Ovtz8x5DXszUcMz5VyakW3HBRnbv5aNZUlI6e3/WOqnMExef6q8v+gXW ceQNrIwkywrZ2MPzBb49NlkZWGa7LmzpTvPodf+5J2o26Bhl3Td0v1ntOrNJ3/5GngNSPLZW8brK tn0Fm9m/Lxzuop/I4iWa2SfMNieeHqPZT0V6XefFOKkvIo3ikNGIJ0tFe3Y+8uhn54llksGU6Jin WIgmS0lO1zWGeTjSF0f73FgYG5rDnzhS1c3g1TX9TMOmPPmXpaa8HqM9TtLB2SD8UdkuJ9qx50nH Tscy8SKx52xDxMbERIylij/jZr4OIHIiz1dz29h79LYz7dHMCFKq+aKu/PytMQNn3XQdnR4HK+d9 B6cNOwJu+M8TsHJjgc60/Y/jM274YetGSfLp/sW/z4GrLzodxp59Hazduodr6/2KcBTN1dRYP2Hk EwIkeb0uOrbIxp/JM/M8Z/giH6Ic0UKlpOMsR74qYeorD8Cg4SfCk+98BtukC+Xy529SUiCF/xK0 z1hZLRdsXg3PP3onDB4yHN7SlgXh3xnl3y91v8XB7BmT4ajBw+Hhlz6ALYW2V9C4rYQE+20lBsvn z4Yrx50JZ17+HygsxluvejuZfnXMsYzf+8afvvHZW97vAjeSDzyGoCzWifH2NjaywUmEudnWPvj9 q7fh9Y++M8T1jNlfqmtor9L3QY0v9h+LJrWXiCvRhJi0PuSDme+/DIMHHwdPvz0VCuxtymfME/gX GKxbFSz6+Rs497ST4KIbH4cSbaqZ8BBTvy/+fc5KRvHz+uu7p9VkQIniNetAx2Vxf7fSdFmCWjfJ 7Rg4Id+sP+nqfUGPm9pGDIfk9FRvP+ITD8sV1WYdnb/gFgcb5n0MJxxzArw2ZRbYV6rBuxQYh7iV 7tkOn771FIwadhjc/dp0/smsYnjmyUdhd6nxdJkhXsM/Wi9uTLxvpcGh92dZXUW9gDwOpWjjbYob HaPE45QuEge7Nq7kSzEdD/83/lFYtEpcxNwvwY+t8fY7MlWl8PWUd2H08cPgwbe/5fPIgk9dTfsv iz2QhiDq7SqoClni2cAWJMQs2cc0ko3smDbEOPWYrH0teJxkyxqTaM/0oufEc7jJE+3oeZlcoN1A PbRJcphqJRzhmTuOsT8iMYqbFQTdsOhLxif3MjknmmhLlCN7xBd5MppdHsuiDvFlqd0elYPZIH4w +3FJqZDfKReSJN9MlOnaaVSW+a8o3Q2r1m7WbsmZdUmA3M78GaFGCVqdq/aXwMo160D4opIpKs3p B6Hslu1h5ImjYfjRx0CfXj0gr2M7SE9LhcQE/CQyx5OfESrKy6FodwGsXLES/l6yEL6aMQ2+nTUP ikrxBhx2VL2zohuqh4hTCr/1lNehvSG1a8cW2LJDf3iZ5FFX1BFtYZ42uwzSnWyQnj0lHZk9uyyW UZ75D9xt87rBKaefBcOOGgx9eveGls2zICWZBrkMqvmHxktLimHj+jWwcNFC+Gn6F/DF7J9g/RYa KJsnKbf+zZj0dmvToTMM47dljx58COTnd+YxNNVOCKyyHDasXw+rli+GL6ZPh59mzYVdZfiAFx4I nbe45MbQJT8XErTmZLB1/WrYVbJfU3Ibp4+fvTt06gJpyforAHt4W28uMB9UpwjIno+fphJTM+CM S66Dy84cA3m5rYBx/Hbv3AKLFi6BWTPfgwkfz+Z9Hw+qeh/Jat4W2rTQn3XCfr981TrbvkFe3KSI Zxy079QVjht9Ehw5qK+GZ3N+Gyuej2SrK0phLd+vVi1fCFM/n8rX3poHxZW6TkjrPOA2HfOhKb/t jrEXF26G9dt2B/TzUHZQlzYDNwktI6cFtGtJLwEw2LR+Hezht+jsG9kjW8h3oon6pEPyyEtqkgOd 2+nPrrHqcli7aiWU0iOaorKR5/jFpUCvo4fDuWNHQd8eXaFDh7aQmsw/38c//bWXf4h+DT/WzJ03 G6ZM+xJWrsXbh7hhH9aOStB16Cg4b8zx0J73+xr+9YyF83+GSZM/he1FZn2T0rKgc8fW+nGH212/ dhUUl1VJ66qZt/3DOvoSEiGvU2doxI+HuG1fvxYKbJgSFoSNbkbfT9Nz2sLwEcPgOP7Lz+0IrVu3 4scKvm/wY0lpSRGsWbMali/6A6ZMmQY//7ZYepGu29P/y3zJaKRDPCxb4yOJ0Gk0bKAXsuMUB8mg fDTk0A5tZFu0SzSSEVNRTqRjXqZnl+cDUX3wZlcOVRYNyRzZ9b3K2/Xt5WjYk9mQ0ey+7WXScYOD XddeJltIt9jjDPyrvU0/eJg+uTcxGC0gPijwGAANSFAtJS0TmudkQ0qjZIjHD6Ejkfuoqqzk3+sr 5t/e3GZ59sjtzJHoA03qm70+RDd3WrOuOo3KVG0qm5pyXZEfcd7Wzs1btoWMJmlgfnORf2Ccj6D3 7y+DXYU7oKikVHCp11kgWPuQyHDK22KI5xcOmRmN+Ues+YC7uhJ27txl6YmydiIMRTc4kLL2YGG2 SxQMkbe3t5N/bEOS98WlQnP+LCbj+JWU7IZSbdCJ+xmvlyUw/cRIYcjsE89VasMzMTkNmqSnaHjW 8MHwzj04s0xbcEwoRrFfUt0MbaEuohzxxVRuT5eQ6dp9ceS4sH5EEOXd2nUvZ20P8UKB/JItjB5p 1lh9kJmVxfchHNRUQ1nxXj7IKtcrqv03L3a0IjcW7FhLfUH3Z49Lx4NiEhwEzwb40tvfXp9gBiz1 5M/zZTZtqh8r+OCtgn+neE+xOINu7VvkQ4yXaMH8EV3UIZqbVLRPNmQ0mS23cqQrk3dLIxvBUrJD dQglR3xR3qsNURftqcGbH1UChgDVwfEzQySkQzZCiDuyyRYKebUn0yWazBbxxIBEOeKLNFHWa95y oJEqWw8uUhGXRKfYZTykYT2Jh25k9SY5l2FEJKYPni2jigB7dDJBhhg7CcrqQLxQqWkv8CSFtx+c NlPXlAqhYgpGIUf+yadettYjFHYUBtmgciSpLA7e0/BAHNKsvU6o4JYmMx6uLumJNsXwiR8tmugH 82Qf8+TDmYb7kHU/Etse7dg30R7xyBeWZXyZHNG8pqJ90a/djiin19FaT/5GW9ALbtIV7RPN7sde FnXsPKeyaJ9syGgyG27lSFcm75ZGNoKlZIfqEEqO+KK8VxuiLtqzP8RCPlSqEIg6AqEOmFF36MEg 7hi0Mzmp2XcgJ9lIefoJXX5SdxNrpP5JvyG3G8XoLg2cmXSnF20paxx12aeiXZPYsOducBwbdXGK Eo8VWFcnGcU7UBAIe+btQAHATT3EE6XaMdwgFrkMYq6wjhzHhmSB9qOG0q4UD2LUUGJqSO1VG7Eo zJ1RJXzqsj+ST4ysLv0SEvXtn+KItdR6CRhr0at4D0gEcGeuj4PIAQmmqpRCQCGgEFAIHHAI8HNk PD9V4tnSoW6cHSAgvpfuX0SQLPg4D1UsJ+FQNkhZTG12TVaIeE1B55wRk2BPRhOtUExi/YlPPBFP g2YIBUBJHE+pqziFenkyXsvCAZgI/mS4CmwI0BXq6MQTbUjydPWn7wb438muxACSQsUeRM0tWduf aEcVfVG9RZrMqCYn1EsmU5s0r/7d1otiJnmx7YhXWymHM2CHpnYQeUQT4yC+yKM6EI1kNDdaQbSg ddOw/ZMlwwfP0HlARguQ5wS3cTrpEi+clOKkOILZsOOKckQTdWR2SE7KQ2UOmshziol4mppWcG5D MbZYyYt1pJhFfIjmNnWDv7jPk3/RJ9FkPkU5Gd+JZtjlGdp3ZPIkJ/NFPLEOMhs2Gn/mDSff8EFe zYKNTUWMyj5JZ669Y+fxxQxI0ZY62bCJakW7PMmEipfkQqVUL9GejCbaoZhkdZTxiEY2RF9ECyel OGVxEC9avsKJz0nHjokoK6uPyLfrinV04ok2nPIy7Ox2g+mHij2YnjNdG1jysLRn4Iw1ocgXxYs2 iCazR3IiXjK52qKF459wd6qXGK9XeVE33DzVS9QX43WKiXRDybuxEY5/UQd9iH2DYhNpdnksh4pd 1KG8U31Ixm0aKk6yQz7F+hCNZDAV60N0kpPxZP5lNLJFPNGXSCM5mS/iNfQ02vVxg7+IF/mX0WTY iXIyvhNN5ksm7yRHPLFvymxYaYSKleq5hE7NDU822iwBxmRsloKfKqORghOPZOo6FWMS8/Y4nHh2 2UjLdekr0lgj1fdSV2ufjNRzfepjrbULNqfrq/oMsFZ8i20t5oM5E2XEfDD5aNKxr4n9jfxTir7E vN038TANZiuUDdEm2UOa3Z4oF25etE95SkPZdCsXyk5d8cV4xXxt+69LX7Vdl0jsiziIebtNGU9G s+th2a2cTJdobm24lSO7wVN+21T7pE1wiSCcwNk1/pZLwOxcEOWDmswPpjR1qk0HR2n8fFBjaq88 riemj3T4YwF+Jr+6ov2Gf9cSN7MPy/qukE54egAAQABJREFUzIbf1AGXHEx9UmxX7BAR7n8+/1W7 1t2or4XfQahPYo+MPDYcuPlH/JJjTVR9hV9lq6aBZxTqb7WsSlFDoJp6Fe+lqp2iBqtHQ1FZKsQ8 QXr0rsQVArWCQPC1jUR3qt+KaKj8wYaA6v8HW4ur+h5ICLieeTOv0uxXl3QlK5u9aDhQUfw4/RKN GULTnlnHwIMhYYNe7biZenhrI3CmSOSHn6c4nf2Hb9+9JtUxOvi79xurkoRXqL7jXD9q/2j1e2dv 0eBSvVU/iQaaB5IN/m0RXh2mHcEjnpU8kIBpYHWhYw7uwQ25nWIlzsDm1Y+RUZl5CzSuKCYC2IHV phAIBwHVd8JBTekoBBQC9YmAOm7VPvo+L19YqO0GwauqCJ8/kSKGdr1sMnkxLuK7wcPd7Ts9OrJH 9kWfXuK3y5JdOx3Lbn25lRN9yHScYhF1D4S8rP5O9SJ5kgnVd0g+VD8RMScd0wflIkvJbqhYUC6U DEYixhxZZPWn7baudRWh2zaqi3hkschoFAvxsEx9g2hif5LRyIZKax8BHf/w7mzVZduRr3AQIV2x 35Ed4lEZU1EO+WJZlPOS188NrmfegjcIGqJbHV4CEGV1fdotRU5kee9x0e1L0a8Zl2kvurchzRM1 TeXiwCo45mJ0znknG2ZdnX25lTMjEXEiqllHohy4qaz+TrU15U2p6LSJ2f7efZixOOVMu+Z+IpMn Oed64cHN2Y7MdsOimbf3onWwjrx+tA/jsTo6J5DwYiJsUJvaWUYTrZuxo0Ycv3GKdaAXknRJGU20 ofK1j4DZTt581WXbib68RYk9LrDfiTao/iKN+jjSkB/N/c/14E0M6ODIq2duqJ29D1Rj/wRMdVdp tBBQfSJaSB5sduzHH/OC5GBDQtVXIWAi4PqFBVNFz/lfQNcK4ujSLmeWRSlR25TQc27lRD3ScbIr ytdHnmJE3+HGSbMXeNVKL0DIaG7rFyomnc+gKsCg6T+AxQnhxGT35X3wbM5aeteV1YJokdl1h7Fz nyBs8Motkg218fqPFqWMLk6yyMSeHlnsMuvuaeZVc23W2awhYqyX9NskhDl6p5kvk4b7MunKEBNp 7utcf5KyuujRmO0gHsPMSAkTk2LKibrEdz4OkRT2eurzJk2uS7Gbcs77pigXPE/+xfYPLm31KIvI STcSntc4I/HlVlcWE9Kw/cQ+Qe1JNL1M6Lnbh2S+ZHHK5GQ0mW60aGHPvOmdkMJwBwxJqzSaCKgZ jWiiqWwpBBQCDRMBmnGjk3PDjDI6Uanza3RwPJCteBi81e+zEgdyI7ivG17FYzvU9UZXL279RhIn +QrnwU7SdRunWzmyG05Mbn3UpVwk9aH+F4tYYL3rK27CXGxnGU3kH4h5xJ/6kKx+bjAJZSNcuzK9 aNHc1CtaviKxQ3HW134ii10WE9FQXsyTvoxGPKfUrR7JiTjJaE6+IuPx26ZJ/mkz2eyZHow+HYh8 vB4Qg7U7p+Dt9GBl0adMl/giT0az2ycZpIu6drlQZdGOkyz5kMnLeG5p5JPksUw+RBrJEQ/Ldr7I I/lQKdlwq0vyaJd0QtFCxSDaciNLMuSX4kC6jEbylJIMlklXRiN5MRXliE42sEx8Gc1JnniYiroi 3Z5340vUcWPXy+1wmX/RX7A86QXjO9FldSB7xKOyaId4Ii1UnuyEoxvKthc+xYE6TrGIcmSf5J14 JCumXuWD6ZL/QL748LfpzcyJGnpeZkuUkumSjshzoon27PlQNkie7FMZU7e6og7ZIV0qi/ZEmqhL eSddksE0lB1RFvNkV6R7tSHqUj6UXeKTLyqjPtHIlpeU7MhsEC+YPZkOyZKuKCOj2eX1stNIjDRU qhBQCCgEFAIKAYWAQkAh0EAQkMy80civgURYz2FwgICJA+N6jqdu3VPFG3qfCDdO0kNUG3od67bl lbcDDQHq62Y/x2MbbvV3fAuMSY8o+v/lx3En/8TDWEzMgkfmVT64pdjlEAZu8ApVS7KFcqHtWduX dEPrhYqiYfDl9fHwzFvDqIaKQiGgEFAIKAQiR6D+Bm2Rx64sKAQOdgTU4M3fA+ryKrQufR3sHVzV XyGgEFAIHOgI0DkF66kG5Qd6a+v1421OLyzUXYWZfzbTR7OBUXLt1q5bOQqL5LHsNmbScStPvlRa ewg4tYkTr/Yi8m45VuL0XrO604gmhtG0VXcIxKYnr1iTPNa2Po7DOKByM5Cq7zjD6Q0Uc33gGk68 1BYUd331iXBiD6YT/sybeDs5yoOwYMG6pvPYKDxj5yGCayNhCNaFD4ew1NWXAzixyPL3Y6MP8zoY bdzQ9rk6wFfbvfz7mIhJHbi2uvC3CxGDNoU/Vk0uqBBZqd2U+o0UN7dxklw91YXqUJt4kg8pTrXb RMp6rCNQx/tHgjHK8TsWOy2Nqi2jVZscFqnD0+o9pKe1hex9Vtr5UdmfJx8ojjFgmeyKMWk2+T/i YZn4Bg31yYffv1EmA5gKsRFfIGkxaOJky6aj8fg/0qUyphQLqWKZ5IiHchoNhRAL22bIEbCcTziJ GBONsEQzRDNsoA9/MAaPguMskqMYLTYEOaTbN5ku0YTQDR/2ZZ5QlvxSbKIPsqXFb6sDyhGfbGg0 iRzZZH6HWkJESoUOQPZkWIs0UpWlsvrI5Ow0sTuINjQ6r5uFRu3jNnYyjno2nJBlsMmuEBz5FVw5 t51gg3QN7MiZEAe6sstRGVMjNiEmskdyAsvIkgwSMI9LUQQu9ioEa3jSNPg/vhh2HHnn+v6OTT4p JfuYitbInBgHyuAm6uoUvZ7kTdyHiE+pYQ+FbQoWu/5gLDQyIqQ+f8NS3xdYRpbcaASJPPUNdEkY GHEaVsx60/6LLPKLPlBX8+V3SDyUM+qqFXiRHPEywwCEsl8kICEsLP79Upp/ssHtWXxzGfJHumRL UxcaLICPNv12SYdsoa5B89dZo/nlDTnOw96rLeRrs4XytJFvLFP8aJZME418opyhI8RpKqCEvhmx EIGnZEfGE8S8ZyUdinwFM4b1oPppMnYMORFtaPUV6+r3JerSlxvAJ3ylQ2hjisHvwoCL6JhSvBZs qF6ioMQusckGlc3BG1HqOSXQqIPVczi16p7qKm3tWvV8kBs3gG/YOOA+oIUq7AwxEnoDApYfUlm1 drLTg8IjZhwkJiZCo8ZpkJzSCBKTkyGOlxPi+Weq/GevmupqqKqqgqryCqgo3w9lpaVQub+MD9rw AE5He94wzNRpQJWO/VC0zq8jLXT/uq8XNjGdlT16t+jVayU8Bm4X92MQS1WwYG+vj1BGOcuASuA1 9GwCXUFqxyxjGOoP299a/uOZpS5iQ4bZt3V7oiFO0UbDPEWys11R0UESWfZ6cVJ0ttBRmn6Cy2J4 0s5mrxaX81FjyBTQhX8jMR1JJNqNkaSeOnIFu5oZLAsKRlaUs5o3S4YwJ4nyYt6U9ueIyZUpGyBj ElCEcBIX+7RKoBD/2XGk+EQ/Yt40YuaIL9M1pTzl0BT+aLKHTKMRLWzMBNtE4WAySKe4bTKGOvEN gk2QiiRH5VCpvQLB9O10iiPU/qy1KX6Ply8pHpcMTZq3gMycHMhs1hyatuS/5s2hcXoTPmhLgiT+ S+aDt4QEPnhLML8xSoO38gocvJVDJU9xALensBD27NgBe7ZthyKe312wAyrKSrkvvGTmAftCDObE utvrZ8PNUl3Os3dVTRxd8j+tnxsKuiHRFcnqHKf/FBQZk8iSiISlk0hAYoNYAbrIMOWxrtjMGtVP 1o9pVjnTn6krmAnwohm0U1EVzTps6NuCv1/e8GpkHIxElRU8YB0nckZyZoBmTpdBCYNmZEhfr7fV pqhgygXkyDUyJHYD5DmB/FjFyZCVatcnXfRF/cfQkJhAeUub2g0aZWHGzaDpGcMnFtGH4VDnh+pX fqnAhOJFjt0mJyHbmHnTKqvdRxQC9RuQVVD/omYct4tXtdbNMr0nMKmilGqK/gobNL8p0aeFx690 Gb+SFu956mHiwVN0hgdiviI8J+FXIXz4YWJ/fbSrZc2PUFetzC2QDFoTzPnZZqIJ4lW8acMSp1/S mHLV4kCiGacob8j59cSEPniLwdEXLnx8CleLj8cr2hH1tLx2DwHrYsZJMmJdiWZgxAkyuwYkAk6k K8qTnA9nJrTNHy/m/bokT7IaS5TX9Pg/fx00rEmXeMgmA/5U+3y7//4Pimt15xnyZ/QdLq+bE/ow nnxxpsZ/Ltbc+H1qefKFctpm9iuDJciL9ad6U7zaAFOrG3cW5PKPbJLvQDGsmD7/brYx9RPe/wMV /HHrCdmn/mfaMMyKe5WBIemJxoRqG2SqKyKt913/VxpIuIZbwipQ41Af95n7iRmArsS4jk/AX+vH 6EhrtHhIz8qGZu3aQutOnaBtpzxokpUFWfzXJC0NGiUlQiofrGHaKDFJG7DFcd/oX7eO//UhP+M2 a/ivuqYGKioroayC//hArowP5Er374ddu3ZD0e49sGPzJti8ciXsWL8eCrdsgZrqSq3+vjj+SDH1 Z/GWC/+gtnZsMitm4EUZwlePSacSRCSjpbzyTDtuC1TRl98QYoT6enfw+/dfuWvYkyNxXxNM6r44 7nQ14edR+4qxMcOG1rS6qj8mUY5c6jBgHzbbnOS0ZvXXQW8hLmfpG2jFTrMFh0VtH5HLoXm0QnVB cSQYbeAPlGLS+P5/hg4J+3U1tkjz5zVT/r7rN6s7J6P+47SoSn4tNK0P8RgJV01fPybRPqzbR1xN F5ZHBSgArAR3Qn5QXquXn2/QSR75KGTbSI54VEYxUkUe8W3qepEERaa/PzGtv+raZFs/Fuixk12j TUQbFrvU//0aGk+nUXRkXzRhyfvbkPDHSmmx8P2D4hDlyZ6WcgE8rtARR5TTjmWcQPLIk9nDOrp6 YUE0ZDjyA4r11ozjPwtAhmT0MtwHNqBxoHdtGQ8KzpusjgZNOwBTTQMHQWg5+lXHgaeGrC3w0HWx KbgqGnUNIY1y0rBC6BlsgtEguMkE1lmMgWIXaW6smjK48+tYawc+vgdR2ZSpx5y/Gzj3MY4RyuH5 CTP+E3M0oiZ8o2FLs4Fx8spodqXGA9tb980HVVrb6CcppDGGM2wAaZnZ0KZLV8jr1Qta53WEFi1a QNMm6ZDZuDFkNE6FJD6zlsRn1uLjOUAIDyrxDqOlmHfYNNxTU7iEfrjF/bKS31at4LdVS8r2w559 +/ivFAoKCmD75s2wZvES2LDsbyjctJm7qOB6/BrZ0nh6/Sw0fyBu4pGFKj2xYcTcr3y/wGf4vDnF gRvassQtC8ZPE4/T8hgclCNgUZ3lg9LghrUmsrRTcFknDuGjoRtug0ocUL20ThuFOMkFtavYRqGw MOrotX7cMIVO/sgWxeMlxTbGELz0S7n9YMccuXQAFeuFsfBgxPpQHUleK3MZvGD0DB33Qfpoj/tL 8WqD4vCU0tWAcdBGbW2YqV8ZeDJmEcbBlD4bZ16NkwBvEP9JGWcWsOL64E/3acTExQ1dy1WreZIg i4GpPmujd0j8L6+P3rB48sHBp1wm0LZOEeOknq+fRrzZCbBv1BV7RYS2LMbN2Shj5sHC91oQd6zg cZo44eAruJw77/qsrS7r30U4TMaOycTrHvsuFEn99Z6k+8XZSpxlIl96GXlGf9UEUQcHIuaFhRkn 9WGzPiY2et/V7IlX8rbqmH3NrJc5NowG1lol9H/UJ7UYKHaBj1nunA+feCYRWublQrdDBvJBW09o 3bYtNMtoAjn8l9aoESTz59g0ZDiGaE5+MYQGvW+4P+OGKeZwMIczcrtKSqCwaC9s5bdVN6xaDcvn /wbrli6F8tJiLhWvydMxiY5/xsCLGzLaDa162Cd1GxgRbeLsJPYOf98Q2pb6EPnX66TvN9oMjdb3 sHYu9iXZbBiFIqYBcnhMRB96YBSTqWIewwkvceYNj+n6rDEeI2xxWnzpfYnqivbJF9bVOJViKPaN Zk/tdF6mYw5hh/Zp/xLbxCvN4srYJ1y2hV8ZY8I+b41DA0yToH2YYrf4lBSMPsR55kw94m5tO9Of TkdTJtayY5S3eqE92nRfVv/Es6b6ZAjFYeERvpzIavQOoO+H2J/wWOOvh1kdoz76bLGt31mMhy7I 6mChkXljvKTvE3RWCO1BSTggwFsVW9vDwdbBmGIFRYB6cTABfccLxvVG5zMTfnN0gPamX9fSOIig 3RkPkMKRRgvFrI9jZIYa2hMHTwbDrx5NrB0jsjBxpi0uLhHad+sOvYccCZ16dIe2rVpCy6aZ2ixb UkKCfsLiWjX8dmdtbTQQpBSvpHHA2CQlBdrz5+uKW7eGHZ1yoffA/rBuzVpY8ss8WDH/dygt3slD 8g/iLMEhnnaMLQKOBX1woNcXBzR4evV6YsG6UJ/XWpcX0BbRHAMIk6nHGn69w3Nr7bu1VT8asIkx uqWJOtHIG37FAW00DEtskC9xACIRa5Akir1BBmcLig+6aebN2qHxQEInLelo1TBk1+Oa2h6JJxDZ Vbk5krWeHALtGC4sGdmOLtMlOTqA44mf5IhHZYxZd2K9XWbyLSEEFFBZHw1rLD5CZv6rNecDA8WB WjJfIl+zLPwT5Z3kSEWUJ5o/bq0oGxgF00EFxFWmQzxMcXM7AJDVgfw78dAH8UlepGEeN/3KC3Ne +zPqmJvMF3GJR2UxdYotlFwoXeJTe+C+J/Z70T7mSR7jDSaHMmSPZER5sV3RJm6y+pMvke9Ek9nA /VM/nrTr0gX6DT8WuvCZtg580NY6q6k2aMIRBp4saD/WwqnHfzibgQO6isoq2LG3CDbuKIQ1a9bA wlk/wdJ586GCz8T5fEk8QsLCXm+ii7g5VYjaCGWw3UR9pNntI4021KW2JppdH+lONkgvWEr20IY9 VpmOTN4eo11P1EGe6If6q1gHkhcvdnSaMdvCcTTPU6JuMN9IJzmyL9LselgW5YhPNqhsl7PzTRsM 9EcJdArVW7RDedKx2yK+NRWflzMxscpYS2QfqTIfYvuEalu0IbMn0lAGNydfIh4k5y4OczAqu/gS /YoxkQ8tsCj90+N1GLyJwTj5FAMV5bwGHcyOaFMWUzA9u39Rjngize4nnLJXuySPvmSxiHyKx60c yVMq00OezIeTDsljBwp3h5PZJ7vEw1QWM8mJPCeaaM9NXrTrJE8+UYZ0nGgkg/KiHJbFTSYnowXT IbpXH6Qn+iKamJJdmRzxRHlRjvihaKTP5XFAxk/CGTnN4ZDjjoPehx8KeW3bQNucbO3FA7xQpNkv 0mpIKQ3i8LbqjqIiWMdvpy5f8jfM//JrWLNokRaqfjEhw4ZqQjwqh0pFfO2yMlv6voyxmljKbMh0 yb4oL5MjvoxHNsSU5JFm15HxZDSZPdEW6Yg0UQfzJIN5r3Lh6KIf3ERfoh2da+UjTZQRdUmeUlGO aE7yJMM9avdZdVnnC2DSEX2RDxmN5EOlMl2RRvrki8piKso7yQXq6BeQqFPXgzeK2Rov3WcRIzXy uDPjZu7QBssxo6sF1w3XrqPTCJn+qvK6RmLIHNX7tOlpxC4Sew1Z183ArWHF3xD7XcNCqGFFgwfL uLh46HH4EXD4CcdD1875kNuyBaTzW5N4TKrN26LRQgLjrOa/eH6Aac3feG3WpAm0zs6Gtrkd4c/Z c2DeF19CyZ5dIWaDoxVNMDuxty8Hq0nkdHMgS7Zi7RhOs2LiTBnVJbIU+4k+6xOZnVjWpoFU/deB n89SozC8IBMNp2JyaO1xUhmlZbETX8aTe6hfKsUri6K+6kAxReKfbGC9IrFDuJA9t7ZIPph/4ru1 R3E09NRtvZzkiCerqwwvXR4HbmkZWTD45DEw4MgjoFuHdtAiI4MPcnzaa/Yya7FAwxrHxcVBcVkZ rN66DRYvXgo/ffo5f6lhCe/Z/OKPriK1yhB2wXFyvz/IbMlo9YEixSH6ltVZ5MvyZMerLunps0vY PuaAzbRl0rCZSMfkc21/UCLNHifJIN1Jzq7npUw+ZPaJF6l/siPz4RQr6Yn+ZTTRBvFFXzIa6Tjx SEZMSR5pog9RBvNu5ex6tVHWLggT74meaaeKR89L5JZkccpo5MmJRzINPa3vOkTLf7TsYHuFY8tJ x4nX0PuHU3xu6+VWjnzJ5fGlhJa5+TDq4nEweOiR0CevI2TxNdpwbSTx8ElWYi3F2Th8E7ZFZgZk ZvM16HJz+bNx1bCdrxOHg9bAh6blOOn1duLJkJHJy2gy3dqmYRx4MwhneCJp6fDrQ7Pz+gwT2jFt 4biafpzh30w+UUQdkybLyXRlcuHSQtkPxXfjNxIbMl0ZjeKQ8WQ0J3niBUud7Ik6buVEnejmA26b WhZYDIgv2JSpebtQD0+Uoyl5kSarBMkRT5S381CG+CJPRhPtUYVEHeLbU7RF8iKPdGW+ZDTSJR6V MSVbIo3yMnni4RWiqasfUPB5FXzwljaTr1NEe8QLRSNbslRmQyYnw5DkyAaWKRaiURl5MhsyOZS1 byQn0kXbIj1Ynvp3MD1ZfGRL5p94MnuiPPGJRmXSp1TGJxrJyHRFGRk/VL3JtlP9RR76s/uhGLDv 4lIoAPn9BsCIc86Cvt27QofmzfgJky+xXYtvjlIt6jLVF+kE6NCsmXYbOI0PTjNysuDnT6fyrzns 53VG7EXsMDrCSozUjqfIE/N2W8gTaTLbor4979avXU9WFuOQ8WU0e7wYTzh20LaoR3ZFGvlHHtLF gaWIg66DM6jmshpkj+REu3Ye+iEa5u0b2RDpMnmZHOmI/omGqd2Okw2UD2YHeU6bqEc+Q/mSHYdE O3Z/Mh75ssvay2IsbnXIhqhLNEpltoLLW2d5SVeUjzfWFiAP2pVF8IZBI6IBVEOaHSxRjngiDfXs G8kRnRqMyk6pXRdl7TTRv50nsy3Ki3yZrhuaF3voL5i8HgsO2ALrqPPkbUK8YHqyOog69jzJO8dp 1woskx3iUDmUXa9yZD+c1K0vmW3SlfGC0VBHPEH4bSApwBziZCfKaG59iXJ2uyLPa55iEtuVaGgL 12Gsgu5HDIbj+MCtf9fOfPmPpvx9BfMtYa8eG7o8NicOSpvygdvALvmQwj/V1Si1MXw3aTL/5FaZ fwBnr0U028RvW+tXXuyKfdMeX7AyHc9R134OCabjRLfHK/YrJ71QPLLrZI9kHGxpmCLfSVbGk9Ec /Djad9ITeeJ+KNJrO+9U12jH5OSL6in2a6/+RV2yJ6Zu/Jvy+uy7k465MJShJYqHCsdQCppBANxs buXc2AolE4kvURfz0TgIhYpXxsfPfekt5b6NKF5ZHUSazF+s0uq7XqH8I99DH9IWHvYgb2k2j74s V+JedS2OhULw3opvsvU4YiiccP5ZMKBrF8jhX0c40GbbBCAsWXzxIjUpCfryBYcT+Dp1+MzVN+/y AVw5DuDEI7JFzV+IQttEvKC1PS6nmELVh2w52UBebW3B+6jco1OcqOHGXigb5DnacmS3vlNZvWT9 RCZX37HXjn86v6N1swdR/THllwU+X7rJ00iR/0PY0Sj+ZE0QuYeGZYGOr+JUZ71ESLdNtYNxQ0ae bu9iJ/QSJ+9R2uvqXIu/hUhbveNOgYRIG0w/CRFn7bD9bSfpmzjjlt9/AIy95Hw4tGd3yOYzUQfL wE3EGteFq+JLiixevwG+mfEVfP/+R1DNy6EHcLqVg7t/iUhGkvcfm7STl3mMCWVRP4rpJ1X9LU/U QCN0seXeVihfdcOnYzR68xY7PtOp99n6qn/wY03dYOfNi7zvhLbB32BPvie0mDcJ8XQs5r1ZiR1p OmjWe8R4YpScHOs9roAAcKfGDXuHlx7CZf11bDCYa/Vw9y8WYw6sGa6rhlQ8Kelt525w4W87W3vr Lyd0grGXXgCDeveEnPSDZ8bNji3CGs9n3bL5ciKNsptCaXklbFqxwn8iDL2fHBj9y45KXZfp2MT9 asdSd/79e4JfWLBhzJvoAzt31hqClFgH77GbxwSy491G+CjIjzXh26tdzeB9x9lvAl8H3FmCH6QR fnSgp6HkdXMoz1/qN7quHqBV17xC0XXwv0zO5Mpy/CTCdzK87UJ1kdsl32JMRJPZ1Wloi+zqJyzU wROXqUu+9dittigWjUcCwssGVmnEmK7UEAvThy5HfilFqlgfukKiHcZu3VqW+zLtWaXNEsYVqBta jyyY6xARxW1q3i72jyA0RQNWATuZRR1PL3Ha8RetWu0EthXKWmXo82kUr8gn/UBcrX2CIiB5sy8G 6RPkjHcJ6hWiLtHQrknXfZovwOCntfBrKfwhWX5bLyE50R8GX8u9ohqqKit5c+DLBvpLB/oilnwh S0s/obYzPdawSr4cSFMYcd4ZMIB/5grXQDsYZ9yoTTHFFxkS4+OhZ4f2sG/sKNjFlxNZ/vtvHHv+ cXvjeGDtV9TE1L/0PqFbJR3qV+IATzZjbZcXY8O87itwvyD7onwwWVFG18M+oUuTf+rXyDdpuib5 Qg3qTaIv4ot+xDxiIKu7LqMfQ3WcsJ5WrEU7Yl6Pwzx26zyMym/P33ZibFQvkUY2xfqI7YnnndDy uhWpnG7YL6C3o0yO4qZ4MEVVainCXeRT3hy4ifVHrjx2tKrfJjT7lT0mESsrNuTVnvIX+Oh7vnaW v0w2RbbdL/JITuQRTdSV5Wu0/mvasMuINpFHdnW6jraVpltAWsDbpnbjCDgOwnAT2z1QTk4xDhaS AQsFRZr2ihDdOTUb3FkuGly3vggp7JR+Hf+ivdGIIrgNp10qUMuILZBlxs154bWLbtT0IR4ECUf7 wU4SiIUkDlAsjLAK8tjcmtL3C2fEsZ5OdUQboTfvcYp2/f65I1/APijK6e2sDcD4IC0lJRWy+IK4 Gfxtz6Ytm0PTZtmQ1jQDkvj3O+P5LWvtBIi147f1KssroIR/PWB3wU7Yzb8gsJt/Cmr3th1QVlLM T5IVXEqXFy94sNa4AO8RJ50IhwzoB234FxMO9oEbYoIbDuBSk5Ohd6c82H3GSVCwaTPs2r5NOwBr /Y0ej9COLbRf8bbkxxizr+i2Qv33Iq/3Vdp3Q1l2z7efuN1rmic7tzqh9jcveLj1KcrJ7Is02bFW P4WbuJO8TFb0Fe28Hkdoq3TODz5ANm1gXcx6YOvoR1SqI0qafBqDmFiYluw54dxrs2GXFMvkF31G o7+jjVB9TvRvzVs1KTaS4YM3dydEveHwKkIHlwy4T+kkJgJPNLIi8ohWVynFIomBBl785EcdyQpr sBhRKhhezrjbGyrQg0zfoQ6BBrS66PWQ1Fki74XkHL8epylDJyAvHsKRtbca4eXdlr5zI27ONsw6 evcRvoa9ns6WavyDgbQmGdA6Pw/a9+gCrXM7QlO+dEUW/+A7DiRS+AP1yUmJgB9+T8DBW5z+KaXq 6hqorK6C/RWVUFZRwdMK2LV7D+zeuQu2rt8I65csg02rVkPxrt28v1Xy733qs3Y469Z1wCFw+LFD oRMfJOJbpWozEcCXGLLT06Afn5HcNPYEmPnWe/wrDQmQktZYG0AnJPKZOK0N+KU1x7+K419eth/K 9pX639DFWVBcFw8HzvL+oPdNxN3t/k9ygTpiP6djpFmbUDm6Y4BywY6XwWyIdXOh679Lo51RXYgH 80p08m41ZV4UeceCLJupvJ30gXo07FvbP9R+GMePeDSwMWMMJyf2GXf6FFtg/3On717KxDwSXxwn rb+FM4CjfS14zHy/1l9YMIGk7igqUdeU8VAO+VhJcSdEOm66rtjJ6LaZzjf//z97bwK321WVee47 J/fm5t7M80wmIAOEhCQMgiBKiYqz9bMs7bLtaquUtmgtqhyhFazWsqudRa0WB8oulSqcyglFRkEQ CBAgAyQhQAYykuQmd67nv9Z+ztnnvOd9v++7Qwj47Xvfs/dew7PWXns85x0+JHnYOT/19sdS1N3c xDHKWNL0Nu8PD71vjZ4Pb1jQH53PZL7rtLT/kGfGs+c5DtmNLKo5+VovKPf0ebrIcFdBwm8WiqzN 2kc2eT0a2njRDsqeG7BzL24zAqnf+9v3f+IbxDptjN1TlmntW36KZnnylt/Sx2XwsF2fFqnaay6y 1Y/EXr7FNm4f/76PLTetaW4vP8+W/bPGNJ6lprnWba0lbZ++KMDGftIZZ5YLrry8nHfpU8qpp51S jt++PX4Ud+vmI+Owxtt4JNsZvOcURj0Ciw5yehK3Z295+LHHyn0PPVTuefBz5Y5Pf6Z8XIe4G//+ feWOWz6pJ0u7yuatx5Rvefm/Ki94zjU6pGz9gvhTVxm1x+9KaPnTWu/40IfLLTffEoe2jfo5kfX6 gd8NOrytZWPQPw7QvHW9W69dj+0sD9xzb7lPTz7vv+Pucu8dd+hJ6GfF0xNQHoXoqap7azheut49 xA20lRY/x3s/6jFpuda8ddq1Kvmsaz0KtVYmsXKlgw76eM1JnJVdWx/tm22B5PWfGGdCymUo832y lHFTP6/mtTTLzfKGnGEtEYY01+AN0ZLjvdt7I9Rh3yVqXtt+aOnDcr9vmG7LrTdD3jB27VnDOh4R 6Jk2xHBtnFvaXiR/ijpFM9osb5ZiWedjCdfNJ2+9Ml/jf+2a41SD4IHXC/ZifamFzDI8d1iv28tZ t6cMnenpSM4fFMhN4af36E5Pzyn7YM1LttHqmdbqmN/zZg9PPa8fTHmIWbyYWMYDdGiLWsYJuZUe HtA2viPW+tm2cVy2H9B7DE/EXFAX6Yx5rrf2bWOKZnnylt/Sh2X6xAfpjFvLX2RrKXx0DyT+S9mf 4pu2lE+WW5zvq3P9ZB3aLnv+s8oFlz21nH7qKeUU/a7aMTzZ0dM1Wse3xtjwHaXFqD2XAyGeku/e s6c8sOPRcuf995Xb77ir3PTBj5T3v/mt5Uz9HMg3f+e3liefccbqwa0P3UyJGH5ah7Gde3brx3w3 6y8z6MmnDtPQnWIk6kndLsV6p57A7di5s+zYtbM8oidx90j3gXvvL7ffeHO5/aM3lTtv/WR5dMfD dI5WDq8vIK20l219qdx+tvjeZIe0WSTzvb+kBNRof2XnHIe3aD0zVmIc2NVtQdt4Lc03Oaw5mcLX WiYbHkDsL5xWg3qbzGtpU/ZbvstTclM0y7d5yrWHNyjpjTFaecrDvhpzXfee4bpR+7j2nJ4HzXbb mCyiGaeVN63msAwxYJnY6k7RrLSIZ5lxPtZxvZWbtq/D2/Yq7YFE8MfJgC1IL5MD0vdzPT1L1m3p 0zjz5b3ITPnW4vYIaWHK9qz8kGLfrOt6j02pP2QO+SnlWFKzz6ax4Sf2lGbqc225U77Uw7bupPuB Z7k8WLGYTfeK5XprvZ+ONTyXfbCf0jNG669p5L2OS7OSXsxb+TbC1mxxZ1FarsvEejoGQ1uW7/1d Cp/+RAbf3MdjP5fCsHzfflPwp48ANVLitTI9NQQmLsM+5Gnb1u3Hlqe94LnlsmddVc4+4/Ryuj5v tk1/7J0NnQNbHNomkA6EhMdr9A1KEn/Pk4PIJ27/tP4c1K7y7MsvLcfr75V+IfyB+WjA5+nig1qc 19T54/63WzE6JESODAfnnXp9Tm+l3qunoHfrres7P/WZcsP7Plg+8YEPlXvuvCNU84lKouYIM+Li HI2l5S3Rer2I1tr0zpI0I6T2EMM8JKfne7/+zo9ga3uqbJvwbLGlDeeaJZBupahnmpXI9QouGsln BTMlCnGxrnh6Aps/oTS0n7KNnAiuwZv2qcVAGqmMXR7i2AvYVw4suS2J4X0FLCO2HpqO/fEaa3lk 7OfYd3hOrbxpS+X2pdUd0lwDqX8gY1/xG12kxjSR4iYaHjL4Tllf/KoUZTVN228Ob23DrfREyaeC MN+32cbPlz08HPsLugfoFO3wWF/OFF2e5cdvTByuPjtcuP3BFguemMuL6pTUSvxciaz95OkErwsu v6xc/ZIvLxddfEE596STyvYtW+SOlmWesh3mxCGE1+d27Cg36UP4J+pve55x4omrh7fDFPdY8mvM eYL6mN5Wve/hh8sd991XPvXpO8qNH/hw+fBb31Xu+vTt4cHwSdzSTq1sHC6NNyVx6Gw8HmvZ42Fj Nkp9jJZj3/sQWlPr1hSGafN0Zn2aT1nK/pQmOvjat3RWyrhwvOfOSh08BR9I7YGK+pR909q4mYaO /TQt5Ra1Ei2nenizMuTWkMU+37n9a32DNjX4FnfxgbVkpYMX35zso9sA3Z1mmQPJV+rTIhtTvk3R FmEcHG+5A3alVg4Xru9Gl15UlufxSvxciSyHN94m3agvHVz1FS8oV7/oS8pF+hmKU489Vp+Z0ieF HodD2zgCtottyqvp8YmAD8886XxQB+hP6Snorbd/qnzwHe8pH3jz28pDD96vLcjrytI+rWwcLo03 JbEyG0iTpsaU12Svxyl5aK+OHX4cqJ38UtxUC+b5mjFy+yw1zz5yvNCa2ocSx2+VgubPulHOtJL2 IUtyi8CnvBIM9JdKxkXuUGO3tsftMW/KvmmtP6ah5/iblnJcHS2jT+X1M29TrJXSeOCbA8afMRoi tA3wIE/n01nThlpzayz6czeeKVtTNKO3PAfSvAPJW7zltKuVX9p+Plp397a69nUpjPGgsd7y86EP 1luEa55lyRf52bbLMVyK1mKPy62tKV8s38qZ5ry139JcHv7yznSMLLuSfMrfRTHpsTm4bdVvqT3v W766XPmsZ5aL9Tbp0XqLdPVnOfoY/WMs+dB8/yOPlFv05YYbbripvOtP/rLc8P73x8axpmysYWnH vMfcVMSWKzel29Kmxrr5i+yjhw8kr43tXJ7CNV7LSxpz16l/G3ZWrt+AkTaeNQ9XPhXrKVpr377j I3Eh7c5syeu4Xa2tKWXHEJsZxz6GbZ9YN31Dct5BMXnWbe2PfTPmgeQtrm21OI5hS1uufetO4Rpv JfYn/jC9YVae992zct1VjQOPAIPBA2i5k/HArT2xNf3jsdxEeLIcbo/ZKBz/w21rCr/t/+Hdtr6D WI494aTyom//pnLlVU8rF5x6avwA7OrBbSqO/7hofuLKF1S2nXt2OUlvYZ+o3/N791+fWd71Z39V dunLDsv6GdAnTNiYg2x+pOE8SNrKrqu72criNSXdfpbyUPTJlI1/zDQ9eTvBI35BHJaYDDNPwVpI 3wWR84LX8jFrHuUlbCGyosTmRmrszvibEjPX5crNKH6xESZiONVEdzX9qaei8588LRNvysYMrT2k HYpDlMdiHS8xBvZUq1MHJcm73XOfBM84PSLYJuRDM/59cHvxd/7TcvWVTy/nnXJyfN7sUH4ZYdSI 1eoXcAT4s1x8oeRj+izie975nvI3v/vG8tAD9+kAdyjm1FKBOfTjfymLQ/7n2/7Qmy/Ump9WHvjB lzXX6x9rrRfWRRE5mL3kYHQX+WTeMscVewxphfuH/rbplleG4uAAlZT+Oj5s9Zwo2XhHJih+Wbdt SCdYCy3P8mOZBXXsz/hg+RoYV8nnyrZCK5AbqT2hqgtjs4Snne5EDJdQNXt6Ii/As83l9lE3zjwR bflAc3xr/As/vKBAt50DGKdzXWptHjxuvlV6bHnxv/in5VlXX1mepJ8BWU2rEVgUAQ71m/T7cSfq N/6O1o8zbznlhPKZm24rOx75nJZLHeCWPR8XWZnHa8Z/FJv6lIplDplPrb0F82+RXXzxa8pn0yyz lO/LlTPuEyBnrZ9e7xvnptrV0ZBz/Ns+afRnisiNkvFG5NnqhO6s0PL6dUpvcKaq7bJv5E5t2bRl 5MMP6cxVaAwtSwZ5Xjg8pbtoA5ySnzJq/JYHrdX3QLBMyxvr49NYHr1Wxzjkrazb400evvWct/Lw 29TyLA/f5Zbf6lFuecjzgtbSVe2wKDuNZaBP2WzlzJ+H0fLbsuXJWzzT58m28shYzhiuG2debvkx 3/pjfmuLaQLfsi1GK+f+b2lj3Fa3LVvOuq63Mm255fd+cfe7ceOR5fnf8jXl6quv0BO3k+R6K9ti rJZXI9BHgLdSeQJ30emnxdvra1X+01/7L/qduM92fxmjl55XYiyOx9sUbZ5+S+/HdVLHuJYdy5ne ylumpVmO3HTLtTyX4SHHeu+5bl6bL8I4GDnbbzGmypZzPiXT0tz2lkZ5UTvG2C3GIr3WxliOup/0 Uja/xW71x2Xvw5a3/lhuqj7e/43RytqnKV4r15YtO+XLmEbd8mCYP0Ur7d82bQVa4y3ImF7rk6om 2gHrUh/TzCNfxJsjZ1PBHuuP6xLq5F1AZpFca9flRbot3gSuIQZ5i9cylqPf6lq+0rq/CNFitmXr mmZ91Wc2fXgN3ypdQM0n73/RpxPrClMLX8Xt3OkK0rJN4wNkvnNonryUp1IrC38Kr6VJJFRsn4rL 6JNaeZWDrcuScU/tvIJr32iDMU1rZV02z7I9/aoXv6Bc+9xrygWn5BM3S1piNV+NwLwI+G31J+lt 9nLVFWWn/mLD//j139XfqX1Yo3Le/GIMepRRHqcp2lim1rs1ZzyuK3+N7MTcau2NN94Wu5Uz3bSp +rw2SjbU3BbnFWMMaehxHu2z8FK2xsojm2N2V2/l2nInMFGwT2aht0jX/FbP5QV6FrEZ8gHNfbkA o9XtyvZnjNcJzC3kL4Fid7wvVce6MYnMSvxC342rfe1q682A5krTng6jpQ12uyEjsZdLaz1ZThkH 7eRy5FuZKZ9a/grKU48wl1Q/UPvWa/MljUlgJXEC+2Bia3/so+tT+ZTMSgf3FO4UjbsxXnUCTInM pU35OVdYDMdvJXFv8JjoA1XbJz/QtDwM/ZXRcp7+WsKzX/y8cqG+VcqP43brzoGaXtX7RxkBDnF8 TvLaa68sz37pV9QfWh4M7AOMy/LG8nzw8Twa1+drHhqO/7712G7bLpcPjcWVo9BPY/9WiuI2zMs9 Flr+2EbLc3ks84VWd7sPt99Lx6v5zNsiZwxEvsh5+PNSizFPBvpy5RZhLMWzDdtzPs9/y5O7/S3N 9sa0sTxy1rcOufV8+HG9lXF5zKOOHi9jW2beYQc+ybqWNz25PW4rZ55z81r78OZhwkO25bdl+KQp WksHwy/LwneC1ibLjHPLtHTTxnmLaflWZorW8ueVred8LAed5P6lbNnk8TM9/CTIi7/jm8rVl11S tm3erINbK4/OalqNwPIjwO/CHXvUUWXdtq3lnrvvLXfd/kmNOm6ihmNv+YjLkRxj5/jOb49TZs6T ejnG/vRTwV4mdYZ6LUZf7iX7knGSsuTnukIMHZJ129zrX0osfWUeG29p6V6itemyuS2eeW1uOefw llpPrN/quDyVj+WnZObR0D00KZHGbbNvbd7aa+lteUrGYxZeK+vylA48J+9zrmfeog45UZsCnxA7 JKRDYcsYbb5S51pdl5fCWK7cIhwwxgNokfzB8LwYTNl0W8idLNfqTclZfql8Csc6U7hTNMsfTD6F 29JcPhgbj4cufpby9Bc+p1x+yZPL8Uev/qH3xyPqX+w2OPzzd1QvPuuM8uyv/rKy/YSTtUKN31p6 PKKQ43tpS4divq4Uw/Lj3Gvc0l4PN/QpeWNP8UyzDPnBJOO0GNBoz1Sy/MHaHWMfCtwWw+WxnZXU jUG+0mTdlerNl1/i8DZf8eA4bkibHxzi8rRtL6UZjn4tT7+VMhb5VFoOfSkM4y5XzvLzcuOM+fN8 beXm6U7JLIU3byFosVbeN9N9uRy/h3YPTW3K7hTt4K3x7dKT9VcTrnzeNeWsk05cfeJ28CFdRagR 4EsM2/UU9xL9ObVnfNlzKnXe/F00vqd4U7R5oZ9++jBPOunGJ19pOhCdldpYrrzbsUiev2edr/4w uEj+UPDGMVqOn4fCrjHG9k0/tPn0vrJSG0aZN3dWhgeKZsSigNtgC2z5Nh/zx3VkW6xW12XrWI58 zEPGtKm81XXZuK180vigYn6svuW1Zeu2ecvPMp+fHX4+vZVZrNu3Bzn0xn6bDo9k/pSNMQ1Zp5Zn LHhtmbrx29y6Ld+0Vn+Khk5Ld9m+ue4c+Ux9/7S+9NzeV8uPKdCNSz5OLa7lpmRannVMWyo33jw5 86dy65hH3ck8vYmjP0x9+fOvLRedc3Y5Uj/3sPp2qWO0mh+KCHCAO+O448rTn/WMctKZZ+iIwG8r eh7YQj8eh3Nuij6lM6a5bjtTONDy4+a9P8i3yXotzWV442R70Kd0zR/bGeOkb0O/xjpT+PNoY/xx PX+mI9/SbTFaf1v7bbmVH+O6jkybrGN8eKa1cgdaNu6Un7Yz9mnKVis7rzyl19OmPJnmzvMVadum 3CK2Oq2cZVp5yr32Ek/eWoOpeODXQ4l14F4cck01y9Nm2EG25HaTP1GSfZryx7wpfxfxprDm0Q4V zjz8JxLdbV3Kp+XKDXH4Md6TtaFedtXl5eRjtn9e/lbp0KPV2hdbBLgZ2Lh+fTlfT3effM0Vsd59 4bVxufPLcuROprm+3Nx6LdZydQ+VnH0wnutt7oMCNJct3+atTkv/fJYPv0/+m8BYWpzsyyIpy7R5 K9/SXW75fVk/YIUAyfn4JKjurD8iFxKayJks3/CXxUN7FqOCdraGNnpbfFN8Npm46CyKjD+vkXjT 0sbCiu22NFuvtMgs59wyTS5Wj5Jya7p4NXKdTWgpt3/Q6PR6QGrVZ8r2CevpQdefvUOdrVZ9sVyr bBut9qLy8uRn+we9+bpT8t0TUblrzf16UjVOXV9orLtlGWO0TFHJc6EnzfHJArY6tpj1GbwZ+8gZ i/IYb2258JmXl/POPH31T18RntV0WCLA07cTt20rT7nikvKev3hLefiBBzQSmUcej4zRdpzOcwP5 1OnmZtST1q9rxu1xvA72MvAs5xya/Whp0Ent3EdO873Oabg9tjGY8y7P4q3pG4F6TZZ3HYzU7aAa uz0NudQZ4hqv9d3Y5rneYvQ0lxLfvli3b5fXxm49tOJMbh3nrYBpzvsYDtvV8609G6fp9vRxsiZY epF1++osPnxaHU8oa/NtE6Spdvc+o+CYjfqC/h3hhfWxL71YYyskMd/1fzYkSM2ll6M08qCRWy0+ DhGgC/x6HMytmviiigCfcTlq2/bYUE/QxsoGu5pWI3A4IsDTN/4Cw9n68sLp55+jfcp/Mu5wWFvF PPQR8D5Dvpq+GCLQ/4UF9+n+5jxXbwnaO4M4bFhWERhuF5XR8HvdljgROh+lnYMsFU7I/ptpodXA JIoI1umNzRjYbxlxeAw6P41543rVHDY8ia2oN9Jqa0o8zm2dI61yR4xCcAwQFS4DQioM2t/ghWjT r1WVkHRShuspjYmO2TjWaQ5po3Z3bra4Az8bdYpNP3UqrfnOrAvKzV+AG30ecshb17bFmOonizVz ojdho8KwnOHIbaPlWaUZfz1eVcYV47hgLOgdjWbvK6dfeG455+wzyhHaWPft85NlA6zmqxE4tBE4 QX8+68yLzysffc913ZxJCx6YqnXjvLE9QYu1vRvvVaCDsQIYJjpvcF0csAaVlGjnUKeTayLS3R5j 1ZD3U/jWFysvyJv53UsZoxqwHQTashWCxkV6k75XwSlex4rnS0acyKvhufY7oFld67T2p2hVs396 1UBZvglAtx52vCn5htboEuFUq8oTGPkZ9xyiE2xFu46JzpHGVnThWKvuq2E8BLr+CtJIvD2HdK5X tcbSqDgCqdzu8NbrW3CW0iOODlQ9oytZ22gdQwXzWlovV0uaAFjZt1+/4dNMhildd9k0crUSsIk9 jdF605anpXt/e1lLtjzTeqm+tIjXS9E6EKs0WWsgOCbMIpoDngcu5UzdktVBzsqgN4trhDYf2krO kEZtMdZQ3hg9dVrb/Glu7yNyfvVUSlNt7NGM34a+5/alHtMa5rmetlKupfWafWkp3TX6AynnXXJh OfnYY3ul1dJqBA5TBHj6dvTmI8vp555VNmzcWPbs2t1OiM6qx7XHL4xp2iy11ekAl1lYpGtLA6h6 o9meP3oMNHj1lIHugsryNHrsefKmT/m+iNe6ZrmWNi5PybS05dq3zpT82CZ1y7c8607xpmitLt2F jDHgLakzAKCS2qk31J46Cvf7ZStrD6Z2ld4GJSQsTX0lqXkcM09tHjT0fNGoYcN63jzUpek0Sw2L g9vy8NIHZA9VmsJqfXF5wh5+N4fOocSUnmltPtQa1JYp5sE40J2pLBcs5YZ9PQO2BAGMlSb7t1K9 Vl4Y0SctrS0fiF/o59g/uJi0fiyvzNw4cutR5ZwLzi3bjjxy9RumywvbqtTBRECHnfXr1pbjjz+u bDlmm0bg4XzSe6Dz8WAaeDC6U2uUaW2+lI0p2SnaUjgtH/2VpqVsmj/GNd35mD+vPpanfihT4vdn hDG+7XMIaw9ijQ/e0yf3deuPcRv9ZRWNMxaexV2fjwmnHJawbkk4PO1fw1fDSUmbaZsbs4bfmRFW tD2N9R/2TIREqbzmlqcLlzBmUiPnw0giICmLVSfaIiC70+HEHRbP8dBCoFpr3g7rZGcKvSVY3VPA htz9NINhJ2yskc2ITWz2eWbu9Frcxr750b6wpwuxwI7b0MiXrj19G/MxbT4pBYLBm34MIbrzfxf/ tSELfG1WWsI+Aa53rUlMqX1azLvDdu2zVtex228/O1vg4d3QFu2PydZ1KGMjaYPHz6EJa3wv0sQh kNLG0ArKlR5t8/jDMn9eqm0BotXPxlb4CEz8hAJ5M9Zq9AIlVHWZaCtapDXdhtij2r0Q6HR3leNP PamcfPKJ8UWF1c+7RXRWL4cxAozh9fqTa0dv3VK2HH10eeCuuyfmXDO7mqnjNbp1Lw5/TIcY083b TxLK9ZIJI5BmrqHfwFKtCeqIE7gx6bo9wtKDvJEb0BdVqk+22K9topg40LcfMOtqO2pXK577ZgJ1 a3MI1JhMGPFbfjOsNB12c+2xL/xlCpJiP+lzMCdil2sjXO8lIVkxDJXY1VZCqWPhWiKJ7RdferxG psYpkVLH46kuh0aPvItD2Kk4VTCyjpSF3r6st2cdo7qfmj0XnFihGzcztoxde6p9YGb/QCH3mNwH 2Sua1FWMkTwwx1jd26aN+sKiHRsDLVR6vJiDhneVtK7Gezv0AMkYZ5DcHrcPJdNa901r5Vr+SspL YZifk3fUnpUYkuxafcMS3932FaovSxx/+xgvS2WhUKBlJy2UOyRMhRdTMdeG86aZjIstue1IZW8N KYt60H2d3yFaJGkf9pfjdHg7Tj8PErrjRcJiq/lqBA5hBFhHjti0qWzafIRQ+3Haj9/pddMzITXy 2tFi4s130thee1tJ81racte4RfZb3GXhqUm5uubNZevPvLJtTLVrnk7QY51tJfp+gGpcyoENe7Sm wXs8k31KT4f+Hio/uv5cBFhN48+sFyBsqNr5oIDKrNy0Abdxmnvoqett0Gt/BqD2dD1p5sk0jXug Wa9ziRbGoBoFpZ54Z+RDfGpErY1vza1lQju1ZdPavOmQJIczvQQdJVLC0EI/+UKkKvfSXck+u80d Y1SwXEvu4tn47sHVylE2/hQO/GGfOC7NU6bGBvKZ3IeWp/19OWV6jN63nmYk31GEJxWjxUr/ha2+ rt3dqc7K9X7knUfG33KOBQDQqJuHfbqr/Wq35TqDgwLtne3fHm8gHBV+8Nap9cU059MYfXxn+fg+ bKuxBnmIJI5j2aO2khvKCaedXLbylmlLXi2vRuAwR2C9fvNto74gE/Ox2mrnisd+S7NsjuXhiI61 Z0jKMR3zhT8En2vAFK5t5LJk9ArWrHdTT+q9jkza9wIe7au4Ld4oxj7ggTXlp2mplni979XfBnNg vtKHGBZm9rPnTmE0K0NdVxLD9lmvVa5i8MY+Rd0LkU2GvQZ75J8xkJjxqvqBSt+eXsq0tv2mVTOZ zfgUgMEbylfspu8Qwsd+re/tB0Ci9MVaamMcY2Yk4XYP7Q+FUi/tjSO4SG+IkrX65K0fcN2vh7TR a7pgFCQ/b3QAAEAASURBVIMGs+2q3q0+QI3oRNENh9U2cEJ0RCIQ4+CP66jYp57XtqW1PzJwANXe Rq/c02xr3FnQx7TU73Wn8HqaS1Py5rX5lNwsbbl9GMg1zNPtaG27PGvPnNm8yrorZwUmKFP40OaB 9PLt+JgAniD1uj1zitZzx6WBV64MHEni2jXry3EnHV826ymIx9MYa7W+GoHDEQHG28rH3MrmQU7P legslvUa1vo9tQE7XsP1axZ7MCWl1OLmfuTJa0TnLdY8GR9sUnaIPcKpjrSonUTjZL+dt5IqywXa io0pOxmHRX7Y2nTuFrZW+/16SG0RWrstvS+jy8sW4IzxxnVkMg3711TyKbxKG7ASuwnxZPxa5Cy3 PiVgG//5fmU/tXg6vLVgLYuyeQOvq1BLm6c3ps+v22kGUDRGQewnl/1Af9ZuG8DegnVm5XuZtmT5 lpbl9G3MX4zr9gzREqNvV4uvlnUzDLnF+FO4Qx372+KYNtSerrV6llieX8N49TgzMaHjBm22nXFu v1ssPyHraWOtrFt3mjsc48tpn/Fau1M02+t5M+23yCC3PETbMM11ffZo44ay/bhjyjp9Bmk1rUbg 8YzA7t27y26+aarkud6vXQfricc6OP14n4/ayrdSc+hLrjlL2QR3gUxsRgv4rYuD8iLcqbaYtjxb U2uPae476i6Tm9+tkeHi2J79oDFZtt5+/VLE8lOLYy3bMs91jzvk4JlPvZeh1ifLzONb0nKut/Jj HjI9LbreajVvYzpidbq5BXIqAKu1N6uRlLQ5//A28MSAKNlZ06qBRj47z3LzOtD8IY47fnjAsSy2 XJ6HaxnLOefOQtrhZ3+XYV9t1x8mrK3KjEe0TfsqcSAyr+LJEG/VGsMujZTy7tDxQEhfABlMopFC VJEzYKs7pPG2gdu6rAECVPMBzd6yDwt9/PvYWWrKJ/P6PPoY0XAb3GbBiBHtem2L5BzCrs1z/bQd x8F18jCoTLwK2I+Nht+qRBks41WMqI9pVmzloVnH/NncTwhysJpf8aWOu4yJjUccUY488oiyLgkW XM1XI3BYI7BXvyX4yI7Hyo5HdsiO5mydQ8M1YDnr1jw3c6z383xWbmCrmcPd2j2goQ9mzr1AXwQ+ Z47GOkx7Y76B5i9n9f6N19eBn71YV+r49hcXJ9bcXBPwnDU3hBDUi5TtyvKBXTs/pN6We7S0lbHr qVnyfjCmg5VreivHF1FmfHb7BxBtu9xWBHr6oE+q7uw6bvlpjIHJwVpuQNphqbat3v/MtB1kLQfN e5gx+rxb63tSyA+qcyv+8NdcgcPDIOhtJxweK0NUAtUHKw8yDvtQ8vNTm46JD1yfH59WrT4xI6Bb j7Jeb5fG5460srTLxhPT41WvvhgiwHrJ4e1zD32uPPLA51Sbt4J+ka9banYecua1//Pd2/0TtM+3 J4+3/X6PPxDLX1grafNtUw/E2oD2gNV8iDtDgqxPl0sFaVauP8n69AqG7Tvvj3c9paW1uFWiPqbN FvQn3jihd3c0TQetWTfhfIMbMcC1htZtlS3NHhqb3OUqFyJub6ubLkzf8SBnnJSbvcKfj9v3U8VR jNj8sw9m/ejwEbDpvsM6doebtzoNfVTs7qoAM2C1G/Edx26on31X2xd+TPmcNP/uVDzR68ZTi4ct fCDXK8ZEYveTvvKstlT7LBf5lG8WGOGafID5+rVr4i3TRRYPEHpVbTUC0xHQ/Hts165y1x2fLY88 +Ii+wc72wbgmeW5TbsZ6t4ZWfrceoNLozKwxDQaQ42Td0EO2wRrLTtRzXbHvrcD0jBq4h6nYE3q7 eQtlPPtC3bRqY2o9sUgYsW7rE+UwqnyM2fjbxaRihErDD0jvFVRGvPBtbL+5ORQr11bcsB+2RV7L 3X5pGWxRbmQg2T6sLlmu1a1M1AO7weme5CHv9lQ/Qs20ijGIX40FY5I06OQkBc1wVaxyRtmEvwNb jc8jzWG1+uu+hOmzSzt3RG4Ob0OIqC10dkJ+2SSAHZH5St2BZiA6qAyVHXw1vNPtJKb02gZO8I3X Yay80Psxgb8suNZHFA4Mp/fDGGNcO9PQm6K5M/mKYwRoBV6EH7jLaOukfdtYhv5Mg0aESfyRzIqq +HYI/MLmovityKdV4dUILB0BfgHg/kceKbfdeGvZt3ePDm9TN78jnG7+TIz5jjfSWVit86fTPdST wHj213WcqrTOduPoFC3Y1l+g28AsLhqrlTJN+J0P3v/Ma+Vdhme+22renLzDn+AbaoJ16EkYcxun 0N2eFTi1sG0rwJlyJ+JsnyYFksjB1J8THPgzravDGye9CWYo+9Ta8t0Q560zlmt5prVyLrdy0EZ1 VEek7gmJG2moJk8ZFNN2xqGv96IGt4+uI2FaL52lVqbltfiUx3Lj+ljX9UV2p3itrdaGZU0jF03B WBOneuuZP2V/3P/GTNl4gjc5fhrMrmh7tkPeMRtia4O3utt6K9/6ljIr/xRAi9e4MFOckvO8gWe+ fXUdINNmQCvBslNy5lnU9TVlz969Zc+evfHM1ZGYZ2GVvhqBQxEBfgj6js/eU27/2C0VzuNxHjp8 y9TxPdiUzGv1p+ZBy6c8pQfNM6HFgM7LtNTt9wSxOh7lRSl1e4kWt6dO+2d+6uTaOcZDpqXhM/WW hsxUamUch5Y2bP8Qs8q14p2JnpglrsbqhFSA3ssmZ1yHuhSNyExL9YdTcNxGyvbHuW04R8Zly7Q0 yosSuujZJmXjLdJreHEws23nI4z2aVuj2tkazJ148jYCGCi1zvKIEVlo85z3I1nkjGuaSINkGTcE pnUsKJ4faXYkyzg3o82NDc32TauDg0AMsO2H24yeacY2huvOkROvC26L3fx1iq59Y1xwpuxaDh62 Saa5Tu5yCDQy1I1rnvLujrnVNa7zlocudceER+nItXbHZdfH8QfLNMpO9pN4WRdeW7bsIvoimbZt lpuHb77bOZZzG6Db95ZmedPGeNSR4WW/oNVyjCVjQHfKzxPt0rf9+NYfbz3xVLVFsORqvhqBQxUB nrp97rHHysdvurXcceunNeb8O2/j8Y1Fj1uPb2ieI5THqZXzeomMcTwHx3ptHdlqY/Ar+WO7xmrk Y/bkDIpDFXOvm1BdofEHXV7zkm32upT6dz+MD0ZwGiDjjumIGG+RDHLmk7vsddV15Jxaudn+nF1d pjDAGtONi9/23bGxbdNd9xuzYzp848Nz2fRWfmwDGader/+dv1bXfNNcR99l58Z0PqVTef4rDREH y9lPYm6asV1HH5peA5Y+9wwrkznUWkVVYQ0OOq0s8geYukmCvTBSc+Ot1M5YnrpptkF91D6bG+TW GxAXVqY/RzGFM0Vrocf8tl7LETtPtJbf4gzLPJFc2de3rW/83rYpEd8Ip+NrnQPNe+QDRZivtxzs dmwskO/G7gKZcGSZeJ3TS+Gl4O5Hd5Yd+tbfXh3e4udC5t61dcCrhdUIHHgENN4/dc895UN/9/6y 67FH9Zapf4n+wCGnNT3+R/Mm5ltLm9ZOqjGcQ3V5pRiL7LQ840/R5tjs1pBWZ1F5bGNcX6A7ePKz QG6SZTtz2jGpc7BE2wRnkV14yPJaJCf2KPUW+lIvMkXruYe2NGVrRGOsjNrXHN58EOA0OFJsNwb/ PcruMNfIUsRIQNWgxqCZaCqyEWvrU5Ft46PS9YVPqBCdTEPIgqbxoXyc4BRvmmTqZAmLVgk4UXga NaBRre+rD07NvoMxLgDZhsQdgYgHxfcTacSxTj3rhyudv1kL6A4S+aoTtPFnToyLbqeUKqpmNzYY YQK5lmZM6HPaGtBt+wGibvshoDq4lmvwGBOkENNlsIi18sYxzUo1BgGi8kA/iM3FPrVt9N09uC2W 7aHeyhuu4XdzAv8rfWacoOd4SkxfMti/D9kGx9AdzT7ht+VMY0RCWxNP3e6565749t8a/eI9Nw6r aTUChyMC3Bw8+OiO8tGP3Vxu/IePaLo189HTZP/s+pnj1+PSuccynnpuTnnteYOe5GJ8Wxea8Wo+ 2Gc8p523+MZoaZSzTfG3hQPSDRvJdZDV924fbOUSq6WMcRNGGBTcFBSMH2uJK9hCaMp385CFj1z1 TaUOMPy0sTYPoYkLMpYznmmIU14iWaSzjXd9Y/s9cYRjsx1Z9ts1ftDXndCcAvYcO4tU2mTf2WnL LsqNmw7HeSHi4v6Hb7x2z3E/GVtyiEUb0VEa+FYxBjR6O5RSfsmrDWAERYJIcZzMh47BKZlp4hjp AOsMi9HQkK8sOv2ja0HjV7xccL3mylaWjDPMh560vKXQLbuU3BS/1aVMqgMjK/VaeRYZ8MYVCzkf 8el3v4i/yhxY+lTLjIluIFLuJZYuST5sSBI4yitOobhirVRodXF8nvOtnE3ZV/OUR7GpWzQZqsHD yj792bg8TB+5ZUs57UlnK4RryvW33FruvO/+snb1x3ojTquXQx+Bzz36aLnhk7eXd//FO8rDDz6g EenNSbY8/yZvHtpx7fKB+JdzYFqz4tp++DNhC7p9nQZaAXWRPyuAWanouFmDtrY+VcFos4wMWG2l OlDFc8lRpcOFP2A29aq7ZDa0x17of5OqiMfeMNQbyM5bciU03G/QAqcZr5A6GrzxKwSWccEJ66Y4 7YrUkSnY2Y6YMs0Vibj59hjueK1OW04BPXmDuFSqMgaPQdGCNQ662EFyanfwZpidVF9Yjj+9dJZG OlR9aLTPaud+/UbRMI30gmmafB0MYmvWA+tymmI8nswM5G3DmEvlrbJ1p2jmLYVX+SEODgVeLSYy ta0UO5bkiEsXV5jjlDKhEk+aqKvWHdjcD6JHQtLlSopsgjbZJ63OuDyBMWmr0UOla29Db4rpscd1 w4iiAAJjCDKsVZmQH3JatHjWpkPbpiO3lDMuPKece+n55fTzzijbjtlWtm7erG/96UsLjOuF/dEi rpZXI7D8CPAlhY/celu57VOfKZ/++O2zit2cblkez0wCp7YMn3pLm5JraWP5KV3LH0y+XFzLTbV1 yr7lW96YVuMyM5erXLBVpkq5k6v8wT5TaV2Mq581m4295S1Abprz1vfDVI7xZB9sQ/bDHe3havNc bxDrVO0/0h2xj52hDygHb7z2y06Ysq2J+pSt0Kmy81s21Kx21qxdd3Za61s9FFxube6GDjzWmjRX VjLhGLJukIrxzVLqeuGnZWIjVz1bgNIwhVw9KPCUkDRPNrmjKzbRmaMU9lGxDz6UcOipTo5VK3lk qMpP2ZLCWm/OKvM4PTAEPM9GFztt/SFWjTa+UOx/7RpcZEjKCVUcuqiaDk9pUSzm8VKzuTZxCqps YGahPjLy2m3o/BrROozlYNqlRhYbGAF/n15dQqax1dGXW1ikjz3skhT8KOpZ2/49ZZMOaBc+46nl kmufVs485/Ry0rHHluOO3hp/kH79unVlfX3ixia7mlYjcKgjwNPzh/VFhRtv/3T5mN42ffsb/7rc 8tGbNV3XaYpoTHvcMVW6IUiBF0ReZFU25pB4Ua+8lDj4q20YKeCrDftp3qIcHFK0Jy5Zn7pGe7Se TXzsZkYc2InDCXFM98Bh/s+xOW4fBozJx43CFxGwYXrfKekOdJi24Xpy82peS1uqbBzHjHrbVsfU OEvYiJggu4Sc4TKXUcegbXfYlmP2jULEMpweQsyr2X/7w7pLucMcKXbxCIERs6mOcRtWVwxf8VkU w6m/+bBMJzNTCGDxOxGCUzEW6Q2A9DCxOtjBDPi14kZEdSQZPHAyXkP16hDEENAgRj10VIg8mLpM 4cITfcSCOpsaW0u1Hzxs638mbKgSdNP63G52sCKgmp8RqDjL8rHHxLiWhSTM6FaCDVdrKYw98Vsd 5HCuk4eJh0qd01ld8tphVP0lFQ5CoLPVtMe0zu/KCzrtIhED/Gv0gr6cC7qoGmusY7oWAORIzmPB yx9SPvepF5SrvuI55YInn1/OPPGEcsK2beWIDRsEm6OCfPXQluFbvR6eCDDGjtKfYnv6+eeVE/S0 99gTjilv/cO/Lde95e9jHA4+/4YLrBvdYGZQe2DDJFFnTuk1uKGuc8JzM2TnXEK0kQ+sObIrJWO/ wxv5HtVKQ2ZechtaP+fJih6zOXQqtn2Y0jG2eeGrDMWhz5+rMrPJq+9kM563fo7xgTBtSs60DrQr ZFfX/o8/4yco1qtGAvRB6g5toqITLeqcRrPGqI1/55/4lCcNiB44k8yBD1EJM3HJ8RCWtZsGCYzl 4lQMWwi1VpfySMayk7lk6/cC1s/Xk1DgImxjmceDy0X2Brx6fLCPEVxVkHEZJ20i6GOvE7Dvr3qQ CwjjCyAE+OX5fHAUkBnttAfswLfGzjz6Ip1GPXD9gXWwqi8pUsG7u4JWMctd2xo/HJKMjTEaXQuI lXdvxKDhU0QN8MipZyE+tzJjFJ5S53sD1smK7wlS2ev0uba93ZM69JHRa5yg8xm4BrYT6XhTzAas jhlTYiyqv9PnDq0rIJeIKin+GaeO3RciLlTR0MvjhnI3/isbMSfAUXFuOnm0VYx0QASN23rD1tOq QrW3T0+ZN27aWJ7xomvL1S+8plxw1hnl9OOPLxv0lI2Fjz9PtJpWI/B4RoADHOmsE04oW484smzZ srls2X5U+bs/fUvZp98ajANcN/49GTzQq6eQ46WLf6rI8wK6E2XTTRvnlh/IVaJ583Rael1LWtKg zLoyb7q165jbM/bdvni9BNy0gSFXKrNbi2oDyYKVhTjUtOsx6iGKw0r2rbVVfaiIQz+Q6xgqL4pL i4mtNtX1FS/2tngq8614p24NbLCiTdpDQkr2GXPWyUcQcBqFptj5Dm0kFjZDVpfwQd55H4AJzVih 60po5sUk8hgPJqhOET1SWzbN9BCoMi6Ts+6zvwQk55psew9ahd2nGAudNfxUSGi1cFkGU4JrFens CMvZK9cbVQyQLNK2xuJdJ0IwsVUa0+E55ebLbw7Rsa1232hk4VQnWqFOw0Q76rrtjPMpfqXFQE95 BiXfAImnIYqFF70QwRQFkvMuFn0khq0K4VCZvgRosLC7F1wGgpsVHNHcL2IMDi/hDjp6Nb50troB 01GagoygH4eOKATOsB8acYqI5YVCyHd2K8SAn1JxBxbPomLQsjTsU5MCLOZS19xov9gQVI67PbXL i0Bid4YaU6JVvGHsqgPxPjKg2O6spU64Ac18dFSu9vcGPXXCMkUGyqCfAkTjZm85Sm+JPu+bvrw8 49qnlyefdWbZxufaaMPqoY3ArqbPYwQYg8dsPapcccH58Xd112/cUN72399U9rNB5BBO77w7d3MD MhW9ciqk3OBqAPK5QqGRT2SqnOdt6EAzzgB8Dr2VreWOFBO1gkz5gyB0Vl7l8iOlxqc95PQiixvc lFVNCSIpNbOcVdZR1tbgxFuiWjOm1mjJRQgk2O0dKPEKeNsgDzTlpLo+ZiXWSL5VjPfetyprIjPm mMWel79RACfWX+XxU+Kt6a7diUNbY8+MhvSY9ji/oS/6wGxToRjCDa0VDtvVgRCRnzQ09jfRwy6M 2neqG6lVlUCI5hHTEhDhKDHuiXHXTxUb/I4WglyqXSyI77Y7D8MhVS8Y8VNLenpt+ztvrSBwYgso mmPAEKmets5UfmzcIdNYdhGZRqeXlUL6lQ5Irqs28pWp8Zw+MTDo8BhoYDepdoEoQ3onYrJ96xjL L3h9GmoIuPrSQbtDO1+6KRZt6fXTKf76gbuo5zUlt9VtAFc6wzbLOnLEz/KUZxKHiBER+aobfcQo 9/v7iFYc7rYj9oLgYJXJi02ttpl9qTlmu0Vijo+DMRKOyg6HGJSrj62JLAdyxkRFbMzAd7rI1lTb 5arzQAuxlOXMRepbTBmeXimSTOHFDQa2bE959i8ICBuFdX1f2bp9W3nRP3tJufpZV5QLTju9bNqw fvXQRqhW0xMmAnw5ZssRm8rl551b1vwT3TDu2lPe8UdvrvOsTgCGdYz5JdxmPuhf99uT3TxBz5NJ Jc9N8ZnPvJXGD4nsox6iku2nUtqGbj3KC1K7zsSsxA8nivbLtDYP0Ua+8dti5sZ9bsvvGJZUDi38 ViH/q2kcCjLB7tf6njrYMyL+Dgga0ylwsEX79KIeqirHmhYnnGndjtrBN/t2x3QBIey4PpvbjbAP G5/I9Iq2RSFrwWgvVTa9Ryl1B/0PsA5rsHJYQEifYgyC571aAv4BX8htijOR1Dp+gIFbxyLCYR98 iulL1oI0vFQ+rtDY+FJllCuhkQ4s5LGp/+vWrN3+SogchhCPpDImqXe0bHF1LMXSSZUrYIBbDpG2 jEzzAj9S2Op5TMqWhw6+xWENBTCUGM6DxlCHoUQeT2aQnXqFFILJBxv59gUPnPXKIwZcIKjOSx/X TRsimUZ7B/FSZY0eqefmToW69CpUJ5vAQV0nmbghqHaAN360NwhBhBGawSfW6AQrB1NW0ia+0U5E wp/At8Qwdz9mXAKwFwBDtfAdDGpUOOBRVXI8U0aEENMlcjLiVxehwFBF/g3bh14FhB1V1WmnbGGD BB0s+i7sQUzptCM6/8zDRmfH8CGTfc2GgF3LBS42awrdFsOMzkI20zHARPiohYEy+oEGZrXFwW2z 3or68m//6vLs51xVnnzGGWW93vvvDredjdXCagQ+/xFg6PI2/nHbji6bjttaHnzwoXLnbbdr79NM jDE94WMd63CYrzEHoDmpzL94Iq081kHxvM5386bKhb74HcIAC1Cwmldg1rlneohJJsC46EWGDV7m G4u6U8VAJtXjam7mkmEdQKZ7smQ9cq8rlRb+hn2DGqaXBS/WhQZnZp3AoNbIWKta3xs78Aa+SSXl I3L1EsSQi9aBm1EJGmtj+Fxzr3lxsIHWSVNANn2KZlc+Mjzxow18/AZMNLE3EVHEMwVe2gA7D/js IYwYi2CzvoIkRINClyXaPNw7Up62dKlipAaQw/3EcQzoKmu7nB/Q62LS8jsDFNr9T0hhPv0LrIGs mPq/3k5mZyKRb0m6jTHAZDAeqSrA0NGJDxKq7g7HAGHzRya7BkZPgZt65HHC1yPk+NHSBhNeN6Cj Ui80WCnbk3bGcvDoBLBjwtd83PDubkN8Eu2xDvXgU1DqBmfU8pfs+7fggji8yD6xASPiFw5Ty04g emGvtrlTzoZ1VXyOwahcUTJaYoIG3W+jIasXNjj0keItxnhClYScGHokjt10J2MpWfwJKWEQN9hr JadPslQOiwVUJdHH8Qw6ouIxRpysPVhY8FNy4Wf4bOnFuX0kj9hM6OKhx/I+Dsxqf+hV2Tg6yTyf zWumXhyS9kjWfe0nY7YZnlW/KbuFNSI1jkKsMQgZyUefCAQcLU2KZ3v/LCLySvi5Tj+y+5yve0G5 9tnPKBedflroDuKWoqvX1Qg8YSLAWnKkvjxz6Xnnlke+9oXl/rvuLbd97OM6M6zv5qH3iM5pJgOJ +REzI+eH94pcHT0xQhBRLRlWDG1p5qro9Yo1JTAQrokSWs6j0PAtl7kkg8e8zXW/Xec7jKFS1MI3 KXntgdjqdiqSCR9HbTEfG6TY5EcyrE3xtFE5cec3HSdtJESNb/q0V2u3fRy3g7fBI7LEz5sHPugV srJ3KFL4K1ukWD8rrtuAlSDV9oXgxIX4ef1NhTxv8I172sIDFVLgStZtg7ZGMrFnih7nl1GMkSG5 H2OvrDLdvjbSwZrlW1sBVINI5r0COjohS6Wm8Efl7Gf20fx8M+ygje3WgK1bt+7YVwIezga0wiP0 PMFGAYzeoIAwThhDhiDVzR1DvOwcTpkWGFHHlqyrrMd+4sueXrmlMqkzkdNR0VmSxUewYvAiojKv sKXcCwCs1gc/Wjcu8p1/yOoFD7kMcpUkYC1utYUdJ0TyUbhQAK3tCL4DHuIWpKJXhXB8UDWRMvOI SazoRFtYnHwnmrKYyqdP9MFafVEiDyeJbxlQ1+kgQ4z3yWg0SXo464mQNVFgihcxpt36FzqSpskx SJu22/dgYggefgsG3/HEC1HEDH44kH1GrI3hMZJ9KI/kL+3Kp5B1TAU8F1qKbzkOMR3tFTY42KVN bp/9yzGOPuOOGKcf3hiokxy7qCET8ukDfA53sRCkFUhKqeVJnlDYynFFT2IfqbQDumrxf1+54kuv Ll/20heWS846KxZm+ySh1bQagSdsBBjPR27cWLYcpc9lbt5YbvnQTWXPzl0xd1k7vGYwK1mH8vZF Whr+ufbXdWKihWCTYo/RuhR7huo8tYuJpEnGnGImMafXaCHWSqd/zNlc33IeIqBU1wdkSfYp9p+g 5AWfWTvqDA0968QXLbT+pL3I6iVdwufwGxvVjmmB29hxETusG9iMNVH1WCNU1+actkxTjtwgsR5B gO5XFYjff4Tb6CDL0yBsGIuDG3Ggvk7/OGdF34EjfPaFgQ3ViLSAYx2urY61MtovHv2LZ7mH4ANg SrLBmhp7AxiSi36UD4iwv0eSzDjhH2z87Q5XoqUONjTG6J8OI2NrHBDBwB6JNlLOMSCu9KJVojs2 XRwkFzcjlYccMeSgCAZeh6xonY54PjiDTT+jQ9sj1pQrjrKOhp8ceOF18ZB+l6oNfEArXlay451w U4CHnHXsXKsDv62HOjaUWh+C4AsMXhILG9iprxARLzqZSsWi2DSJaganpRo3uHkJ/5o6xeg05fnb Z1FoUeL3tNDjYEXnROC0SFCOtirvyqHed5Dp2R4x4QNUJy13DMjwItFhLlPncbJtUF8qMdVaPOTT 337Sug5u2FIeNISJ2TITOr0t+d/gBE9thMaBiTskXr38Mo00YujG4tbQKEZsG1pEUrJOUzEBi5b2 UsQ6o8DkiVITi7ArHd+xoocJtwcf0rcGsRqwrP0h56bntHPPKs/+yueWJ595pp4CavFp7LWyq+XV CDwRI8BcOHn79vL0pz2lXP78q2L8xmamcR8Hr+o0Hw3QyqbXaG3RxPDcZC5ppYs5hVrOJY4AMJhB ZJpjWg9ZPj3fYv7VNdLrQM6j1EnFtM7almtIUOOCHSQtzdOq7qlQtYsg/JzrrGlQXO/XW68F5MZL ybyGLfGCT651Jr7HUIXCf9GR88btyM3giOAYcCCzTfsQTnKQbRWbMrgZYx9oUjJwWP+ECT7J66Sx 089cK0Ng4oJ+yvfM6BfWuDnrnNtPblvOQ6c2Buz0PbGDjJN6JUbmtsyhPw5PJjS548ATL3RJXLE7 Hbz8PHO7VqdWqHb9Fli0Q7Fk30PGjxwcOWi27/4GhXlF6toevmR/2NZ6BinA8joCGk/RVFyrIOjN JAVIObHWP4Zj1FWOhmEEWriFKaKHwXpqjJouInfOhmUci0JIoM/TDBJOx8RUOWziF0l+hgRyYca2 +kFOGwhYfRCYk0JgHBy6FDNFhGhvpUY15fIporDVBmKTX6QSpspY3CtCbPDSIUbIZawoiyg5IqJb wdrm9DPaxF1Bldmzj3O8MJHHZ9W4hK+pkgRd93JXKQCk8r39Pp5VLQcAlS7Jl5oCX3Z810ocY2DB j0eH9Kd6IVSQS3+y37GFBu1hknfOoa1EHX71PUMgcraLPLjYAR9x0aoxkVI3o1vJ+Kp+3i8dfGIx xYbHAzFj/OVgz/Fn34HHDCnbmH3nbofu8YoO8YxFCkZNMbZF526fjSKbnDcPsQAED0tqM9aqQfzK KZexCobGAeOI3otxjlHV+bHljUdsLNe+5LnlEv2G1tYjj+gmbHVjNVuNwBdEBBj355x0UrlSh7eb 3v/Rcvdtd8V6zlqaOwHzWPNcY5+p3K0hqvPEjCdlpFhfND1YEXhikyXWSCnJBvMyZlisC0hRY66x VmMLE8wvZhu5EFSP1QMMEVh1wUY2BCIXCnMS3apHKcr4BgudJIpefRE9ZLjiGxiDFF4EJf0cMIXH Gqc1RM6gywHMeNjg4yvxzpFxg58YSMY+JB5WeXlNj/VGst6nWPuIXLS5YiEPfra5xlwxin0AvIhX xg/tiCF9KBzaoudzoZvngAyMn45KKOTQI/kpbGJk3+A15xMQs69DVHV0ojVVW9V6NtCfk1GbuHlW W+p4yv0wGpjtAabGMd8qBQt+xgkfnLKcPkLL+GUbw4UQdNsDIijEEz9IMWZVXyv8aJ9oMbrCB2yK rjgTJ/oluexdfb+DxGfj9bXtfHs8Wp74wDA2qMU+JQJ1ziXdZ95ESSE5FZ2qgNGRe/Tnd2hUbFJh JPkeqBlsoHFML6xhio1PGbpgQIuh3DkCBZ1gYT5SOBgbd4bWdjxI2NBJYaYqOZDGiA/OCm+tBiCN zKbnoCOYPMKPjgoQ0LLtiZv4yEUniLiO05nAiQeHtexktQl9Y4gfhwnk8D9bK+19hc9UBbb8oX3o rF+nX2lhgsTiIOkwoRzzumQHiRiJAZV+hT61OqD5GjWfp+IA7lhZlnjXcAV+0IEEimDVCUCMsAAD shNx7TCRFdP2GYjuE+KBGrK1l6Nue+k5AokcvtNQGQ58yrxIiont4hfjLg+P4mGnOohNDqMsSR5X KgTFWImdj+XrXENAKW3Bd3usAzcnIeM3J9l+LRo8KfViif9ra5+mP9mweKtX+tVFShnX2rTcNHJe 7BXmBU+7uFx2xVPLqfqrCfkWB9ZX02oEvrAiwBzg7dOL9BT50udcUd50+5/FHM6JoMHP5MslMObw ujpBvJbHwUZzjWmSvJxrrCasqaymOX81z/Q/56dktSbl/Ktzbh3rCeZyTWANJ8XqKXwSByTjrmPR VYpVSwa8BgZu1WUNInXrRFbjCiS6mZQHoSqImD5XNpLVB04tHMpiXQt1eNE0XRIvrrrEGicmbUbf T/3jgYsai7U8pEgiQHJdjjVWzIgHLggrkaudigcr13EVEJYQqBwustvUF4pnlMUnstkuLOeeRynW PvaISPkDSVnONTvempV+9nIYibYh08Yp2rhXewAnWiXWyW4Pk/YeObaefsfRSPiMT0KuJGRoiIZD jhUxoORDgGhi6tDjhhE/xlKAmMiZIeOBYN7I5w1Aj1X3BSxo70I+zkpUVXa7weaVT6OJKT5JmpjG eYE41PiJRwv7xPjPMRAn3uqj5GmAnJViV5aj/UEEoCoiuTg9Ko+BWHNshi5yesmf4EcIVMHRlE8B NsGoq6pCEikrBR0AfFdOY1MXIyGSF/T8CkbLtEgOFWpg4AcDkQBHEn58iFG2or1BBDdjwSEiDob4 EnGqAwD/ZDNP0qEUF+JEkOkkJllMNJXTbg4wBDtPw35iBUBc4Ga8mKB+wcJsjEtUODzoRQtjMItJ G9tXTG3R3WdgRJKcE1DRv3g1wkAmYk+uF4vsIIkIPwY9zjWpo491JNPJMw54NXrEisSVttt+EJtL tgl+Em0dee7MPFGoR/uUh606nmZw8Z//etkHm8MGGMGMOOFfNQxuYIaExlN6An7aQC5f0VIZYKxt 3rqlXPGCZ5bzTj0l5FLLFlfz1Qh8YUWAMX3K9mPKpVc+tZxw6onxDkVMTiaPxn+Mb8nEvIEWdNrY z5egUa0vNJmL/VySmtYE1mSrJ4+nEP1aETyUnUQISF3I8SefSlU/DIZ3nCQaXYr4EHuG/O+ThSot 2sYamSna2Qnn2tw5LXq2q4YBXP0HsW0rlECX/TyohkA9HIhT18fYw8RizYu9FSSVY51NlcDHjBoo G3pJN/yh7bX9jkkcMESmLXVVA12vTN26hl/CYZ2Od4yiAZKpa6wKoeBr6PUw4b9tI9ieOUJRF9rt PZCuwV4Lgd1+bU4tdDxu0Gn3LfqFPTrW4mrEMU//Et062X4JSifkpM8NgH0Kf2r/YZNXbXZFzwzd 1i/LGJP+CvsDrWEl/DaOWPXPY8lgoCmvkUEwnsgEq98Mw7mKCSuSdPbrkR/JAyaAaqPCKeHxKDZ0 FNywUwFyo1VFMjTC9b31g/ieCMC5gQzrdBWdBEI9fdAJWEwCy0Mz69BGZPoOyQGD3DrZCt/DNynx 3wG1vxrNeWcoplLcOeGUhOPRt3tENMcpjw5ISw7jejHZMiZMJLHigneIJTZFDij4WtlRXw8Fgn64 MfwVLvFxjNChPeB48tkXMBOs2ogsBw36IPE/kvQTXyRM0kaYgMp+POJHlmaFUsUk8MyYECOXQlS5 JD0erxNL7nwDXHSeQpKoR14v8sOJye3JErEHL4IDTvVfwjSfhKa/YBADwliYUzkWKcPjGlgcimt7 6KN4q5mfQEAX2QCVnIzEI3vTxOLxZiyKIUT/KDLxOBwhp+z/s57ypHLRxeeVY7Zskcnadous5qsR +AKLAPNpo741fc6Zp5dzLnlS+eyn7q7jPyejpzUTKG68NCXYeJlWPHGIuUKF+RLz0HOGea0EjVIl Z7XOG9Yb6DHfUp61oi4DUmUvy6dHHVSFyzrz3NKiiMfbuSTWzthphBfrRRiSv6HPiokPMh5tyCck qZkrKnte7EWxDoBY12ca4DVPawk3fbkegQWvaTdtEy3WI3gk9lvipRTrIp+XjXCYj30R6tPFaI91 UQpMCiTpRAeJmJCKxigekuJJVshGho581JOxTknKsa8JL7qyYvX7Ru6xsSbjJutebReQsU+FIvoV yz4jl6tx50K2n7igTTiykD5A4LyheENW+9bhat0bVaLV9aoSdsM2LtUbfnFpAn6FLB0ZKQAljo/s 5cghU2OW7Iqf7ci9QAwJZ1+rKP3Yq0NbwLDpRJmJfUR8bMjp8CkZCR5P9PAFdggBrDLOI5J3OJRi C65AUU2dLOY1Or8WwQmjeENwyUFWiuBlERleXbCTnFfp0LDkJV7iJGbAS7KlqVIRUqavt8Cpk992 UbjxBz3ySNVPlTu/Ki7ovmMJfdF76dSeuaIbr4o/1V4a41e1Ba49MiaTAPtr6iPlKEvefjomIS86 g475nH2hAtj6H4tRbXe0Bxkmkg8RIZe4ga1BGxitAYLRNp7+j1dtr9iRKlbaTl7cgch+qFfMaEvX B1Y2RPrCDQU4+BR+UW+S6c6DhYz9pjxUSe2gp5zj4byBTzgtksHrMFsJ8Osr+mrKmH4jS591u+Sa S/X3Sk9M+RZitbwagS/QCLBGnKQvL1xw+YVlk8Y4UyFSV2AqcsDhIMU80f96o5dzFILndh+EmM+q el6TxzxWFotkrFusJqlvzVxTRMMmXNZO6bbrYUzjuFQtYLyuYafqxFtmHXAW0o9qMzL5Ho6BkSDI xLs3VbczFW2Q0jhBJ2GXF3iCslv5TpEdlBz4oSNJyUcyRrMnIxcv+5eScY14wG9gG3YtVma1VRUr rGzbZqtom87V+PCRemOrKUa7Ae3a0gWsARY/dMBh/Oh/vTRCTTH4kqh9mb6iV+NlG5UfaGArIcur 8xF65cE3vRvHHa8aRUgpMLBDDGDFq2K5Dn+Ez/EzYxYjOIaVx68+eJUD2n3KGYv3m2PTj5MxfE6f Moin1bmmOeEJ7LhrQoZi3A2pwsYfdRmPT/hTSyFk/DaTcfEjTYRWOJ5PqqRfGw9+JukHVOLZPwIV T8hEphyAIVgboXLQBRJ3fZyoEWPwc/JFzAEJQ7SWgReMcD9FdA3TSTdmqHSn9LS1VjHdG5/9C25e 8C0boKz6FLdPlOksXvJEuhED3MNgYKuSgUoI+UbfhQbuCAdMvkETCTs1FvHEqA908itWVnRt26XP 5+WAAQMJXTBU45bCKMiHerAM+cBEMBxSXlO1FVnYqXTK9IEPkThhvyI+0TqjJA/ZEJONFktVeSMa I1kpxmMWuXZ9RdDCvVYfTdVjfCqOASGKfGERj8f7oSQg4krCTyDkjzII+l/9xTbOCYgvvJxy2inl SRedU7brT1/FYhzyq5cv5gh4vOU8+uJsKW3brM++nXnWaeWYU44vd956Bx+qzsbGFNDcYC4wL5g2 QavrKrSYy6xb4iFXp1be+CNsGnOp1kHvihSymgcaAPQS2c8Ogs8aw3zVfHS/RB0mCQcCCn0KdT0I kFonCzZtUYFyKlFI/6MejKTpmk/XWLPQEUisb6wtVSQajyCsussqFsFGqBOUDPq84p0BdISJYF3y VFLq29o1Sxix99Z3y1Dp11yV4WPHvsAPhzLr+iXo9Wla6KCS7e3imp5LEt/CUua1CEQvi9hYToLo aWyAnfFDSyniwhkg2x2QtmGcdpzEmEr/Qj8VVNQ+KT/5mFPsP2GvPlGsT0zDR4Uy/KMt4SYX4iu6 VPENE/FkGYGImQhRbPpQnEjVN84dUcTneInrdiBYzSRMOI0A7361BvPghrA7odMEJLyIQviVpepc VFTGKLsdToTzVV7lYAWZC6kOEvwxk3JlR6PYDGlc4CGWB7YQBwI6FQJPrsQYXqcDx549e6KDgy4e Ezo6KKQkp5z+2KeIG7+yxMtDZ9ZZYCQJLvIo6hUbLzarXetGjowSTw/Z7HPDT1rI00Z62iTw1Qbu 0uKPvEuHvsEvb/CzcRAv5CoOroBrTMNLZpCY7BGvXjAXOw08Ghny6OSAywN2xqOfaBhDPxfkiF+o 1ljRHlJn2s6I5niliZShjF3L13jEYg+5bUPVz4OSxxXxoteqW9GD++KzMCKVPcZNpyEJVGMm2psZ JFLg6EOzwRNm9H1wFB/ihi+DNtS2QebJXLUV/db1cerwZvaZF59TTj/5pBgb7XisJvpMNjbqh1Dj d4Fkd/fu3dk+9d96/eks0n7dEMQ477UOYUlzRnY0Csue3XvC9qEBF642+S40AcqbDvvL7l27hnNl jkH6hN7e190kTQuuX78hbij27hbuErLTCAdH5ctTG9avLbv0+2eMKPxZqwPNnl27DwqYtYEh+ER6 y51hz2+TnXDCseW4U08od97yaU0Ixikbr9YJWlznBs5Tz3dAKDA/EKjJ84uq6CErGfD3xtyscp6L yFPm1a09RLwm0VhDiFe+VQW9A06hDKjIWJtN3fpLG3hF0jrHhK83sl6DzK2eV79EDT3wbYP1SyNZ LygRD9YYCTK3aYu/gFeVxSNJOmByncVlf3TJMQIRc5GDX1/794Ab7+NgRQIoIwhgpm7PCVqlM2GJ r3WqbK8FhGp6eb02JOOV2IdHxiQXXthSea36NtpcccNWlQGTf9B4uBRfJFGY9mhcxd4VfY5vfYr9 E1/DZ9HB4kXRbaAqsPgCQvBVb+VDv+p5v0iAQFGHSVx7T5jRzTnqFTu+iACW41Ztx5cxRKYN3ZlE 8cErtFNejRMt7n0YWzEkNI9kiJWScRGfeYMeDosAYDavYtVM5FEpmh/UVJBWNBoAEPQiU+OoRoPM R0vEYOMsCTXZ379XB66oCD8GcZ+HWGCEBFUl8CUTNoFVWUGOb7hiADsK3n5N+DwRV3+Ew1MUDkpM 5uQlHtfeQsWXPNgxaGoZ7Ex9G/AnmlTtRmxVDrctHw0HLxeUwABTfvR2K7SybJMiCAgv4oS88RDF nrI4wVOnBj9kghPUdERFbIFFUravmrat6ItYkDJe4PHErmr0um4DWGFLMiyQTDAWiaClme7ayZqi tjT+du2UbrpYsVVfw2iWX237QwZZbKnvQUMRzDgIy0y0K2xgk1YQE+SoK6FbE6HhJ3CYJMw7JmTE WpjYivGErCqeiFSRS4HEzUUGAyglbYMOLec95bxy/NFHLzyk7NfiuvehO8sb/tsfl0d37inrTjy3 vPQrv6xs2bSu3Pfx68qfv+mdWrj2lxPOvbi88IXPL+v2MW8OYVK/7nvs/vLGX/udcv/6U8o3fuvX lq2b3B8HY0dx3bezvP0Nv1M+ftcjXfzXrNtQjj/t7HLt856rJ5Ibhhv0yNw+PTHY8cCDiuq6skV/ KJ0+mkrrdY/ynjf/cfnIjZ8pV73468tFZxyzEHcK42BobEY77ruj/OEf/F55z3UfKY/qDuKkM84r z37hV5VnXf3k2Kg8/FZkR/2+4+EHym4NuCOP2lo2ak4cEM6KjC5PmHm5TZ/j5EsL3EDHNGMf0njK taXiSC4OLMxb1vk6P5LL3KNNblXtYGXtzQ7UPOxILnY55cLphoNsxmeDWcdkD/vxw7dhRFKiIRyH HWRiv6n+BUrlg6mFNW5sKaMq+bixxAeJdUYxTj2SGUmM2xN2eVUjFmwOxAFZcoC7F36tjz0bNmtS NqMaIAMoDhSOVRBTBxYiTsSffRAQwJTgx7oWt01UIIoabSR2IZA0FbOhyqu+ZWGF3+jyqimxISVm fERJvJDgEvKo4o/aT1tinKQO/RIhavol3tmJDggA7d08TlG52og+hB/OQ9aBMfCTErYdY+OygIRp 4lgTMZBbGa8ITJjpUUSDrJTv3uFpEhznLhQdqCQUO24iiUk+qEm9vLmRfg37WrWLBz7RLNHyOwj1 4wayhL5+F5Q7mbrJBmA+KcKpcCYCkW7lwUAGAK2+xiAM53SRbJ4ke2/ZbDk4RcstV0MUnaXAxUnS kbA95XI11DhY6UzeTZ4YKIo2oYq3sfAUefB5CZOnY1JT0mYu8xHQ2IUhiSHmPvkGnSDxgVV+SJKO CG9RxgD+SD7aGQOfyStbeuVBLn9KBUuafdEhuY2G8XAHmHBMOnRYdJ7K0f7gccmBE5jyJQ5PQUZO /vF2pCDjrhPfgBdW5NEZQOCnSPDaAYsD0JwQUqIdJFi8wrdQVv/SeOEHPQKR8nDiQCR2py+hNfqz OHHnF5jZxvQBBPH1ImZdbGsboGMrf+uJsYCg2k+uRNvzIImmWOIwHkJSQn4qiEzGI3/oNvtIXac+ C7vS6SYIQNLls3cErHt6ge/6AGom+R2LlPRi/OZYQSRahP9K+ZV/jSVVGev4F/1LnDCSt2QIRluO OenYcurpJ5cj9EStIgXO+ALOY4/cW373119bduwS9+gLyrXPeW65+PSt5YNv+6vyW7/+u6Fy0fNe Ul7woi+T23vK2g0b9ZRHi5l827Nnt145r/nzW3wQlhkTT/J0g7SLp3g0URtELCJaA9DXQyI9Fdql Ppbvux8t73zDfy0f2Xp5eck3v7QcvXl9fLOZeK3VEyT09uiJVtgJb/QoX4dTvvm3V/YZy6wH+FLD FfFes/fR8ubf+5Xy9ptp2DD95TVfUX74J19VjjuCMbG2bNioJ1X0EU8Y8Zk+e+iu8pPf/h3lkydc WX7pl15dtm3gjnQsu0d+7C/v/ps/LX/0539fTrniReVpF54qX/QEc9fO5hCnOam+6OImG/nTRriq u1u1J+eFbv70tMyHB8YbB/H0bY+eiurJZNdItUm6+x+9v/ziD/1A+et/+FhZs3lrOUZd/pH3v6+8 +U//tLzsNT9XvupFVzKhNYbrzabUIq4Kfcas8U3jifbvUVA3rnms/NJr/k15y/UPlJ/8/15fLjxx c9mtAbie/lPs+RA5T2kZh3Iknp7S//v1FhDtpG/os3XR3/Rh3+ZhbxxATTHYsnFT2X78dj1llC1i wqSRH3iTY555kcVYA6sI83EPm0yIV4GohGJeILOKBC7QGu+ixQEwNoBkI5WfU9N6ETq6yA/WhZDF m0pn/c8NNwgdNhg5cPE9vQ8Sl7o2UoyPtcTTrLTRDXbaDTY2tTLkqkVZfRH+5/rTyUdDAEw/+H1P fjQ+f0NM9tlfkNH/vLlEFg9IufawLnJTl2tXcnJciq/xEOuVfM+HFSjLH5pmHNlmzjL9JRZpr2kS DCzl0Sb8RNm5y8BBI1XZWktaMsRLuYwFEthGJ9vnlbhTqiD4FjZlI/tTCrLD+Ilne0FHK/s1XFHs mKv5Ex9ESdxggKV1ar14HOb0xZZIotEcEj4FT/hxEKwMjwn8jz0q5PGFAyOatEA6CuRa2Y/DWMzJ BN4LPw7z8qfa5Ut8nEP2adB631pbDzbYxrSywM73XijX3sMAlgkKncdndGBlw9NoiMOsjcDRUBMD d2MiiBAYyul8Bl6agF5xsBE44omZA0oleYe9CDFq6i2w8smP9MMBrhVHNjxAYcUZTbQYhEgFXwXZ ChoxiyrgbLaVICrtj6DhmxbCrCOmQY6v+k/8GUCxSdXOiDsxMeNgIR6CeJcLP/VMEU/7DVjIVqZs hx1sa3PoNgo2Q9kBC38jKQuboq3VWxO0gcEUoSXWlPEZTGFFXnVpHyniLX4m0YytASeFrh44wg95 ZPSyKLjEVMRYGMCKAzX+Er+YEIqpfMA3muB+Tr0cM3EXjrKwuJeivbbBWI2DkNoUeMp98NqvDRq8 iHXoZ/9QjM1LBvlHisfytIuXEnRZCT8hdX1f+bQNh2k/MQw/oOkVMREGG0EeuFVRgbGe1mBKNkKT GHt27SnHnHxsvK3EH/Z2/0pyOmkebD5yU9F7bmXH+jvKxz95Z3nKKUeU2z5xY9kojV1Hrotv+GFR oS4f/8C7ynXX31TWH7G5POkpl5cnnX9OKY89WD523U1lw9HHl837Hi7Xvfe6csTpF5Rrnvl0bbKl 3Hn7TeWOzz6iz+GdXG7/4HvL7Q/uLk+96lnl/LNPKvuOOLp8w/f/+7Jj3TFl2xHrykOfvaPcdvtd 5Xj9IOttH3l/6J1/+ZXl4ovP1hwlkrvLB978N+UTn767nHXx08pxR5Xy4EN7yzkXX1i2bGDzqkkx 2rhJ7VJs/tef+JlyzQUnlztueE/51Z/75fLRv/uL8vt/8hXle//5l5bP3XFbeevb31Xue/jRcqKe WD35ssv07dx15babP17uve++cv/aO8otn7itXHLR2WXXA58pb5Hs/SH7JMleWk459og4oKgTy54d 95a3vfH3y+337SmXPfu5+lbk8WWfHl2tW7O33PCed5Xrb7y1bNpydDn/qZeXc885PcbgbsXuvW96 W7nt7vvL5u0nlsuvurqcduK2GDM7H7pHvr2j3PfAw+XUsy8ql1xxadmsNuaBSRZ153zvp24ob9PB 7djzn1V+8v/58XLq1lL+6HU/W/7z6/6w/NFf/U257Lxjyn133102n3BaOecM/WTM3t3ltuuvLw/u 3F/OvujJZdumfeX6d72jfPSGW3SoO6o89ZnPLOefd0a551O3lzvvvKc8dM/95dabby5nHHtJ2bR/ Z3nfO/+q3HL7veXoY88sl13z9HLiti1l12MPlZuvv7ms2bK9lIfvLtd/5OPlzCc/TTE7vVz3zjeX Wz/7ufKUp19TLjjrZK31rJwHl+jj9bpZOGqbOl/9zFxWMLqxzryJiV3nlvapemNa5zALhBL7SOwZ RFs63dgRmXqsHciKwbqs4RfrNmqxyIQCx6QYZmEz1nXq4GGfcpwWVGC9ws9KDx9DQpcU7XSCTDtI rG88/XFdpMSvmz7KiNaMQmsfCHSDpqLXxHzHIFZ0+cSRxHtl6vvnoXK/lgsY0bof67Hi0e0XwowD G+3Sf0KGrfjcs9qLGnPXqS+Z0uRuo7CQq83KHAJ4jp/Vqk7GGw2lJmNN5WNLTrST7Ys4xI4GXsXA b1LesKdG4EIPXu89e1DGIPdwpCNWgCdMj6vWwIuneOpOxgwu+bfcPCbCN/VFyEmeuIYvoZtjh/Hs vQJDhBYZMGkT5uNZgGxGX4sW55WKhVybYi+NaLOHSlbKhARdbsk19ghUdjyKDGI2JYAk000KHU5j cMcdN3GCqf8eMHkyzM2UQNMxISAkTwxyWYrJnBt6BpxrNgZ+xdUdJIFDBxzuQKgT2Pi5iTiCEgSx JePNcH0KSIWfAEkX+IsGuEsKPOFE54gfHaAJSHBIdGQMihpJDmpxcIpJJIHg6+5YPuEzLd3PExv5 EIMAQ+ACpgsydFDe8XHoS376LFuKdT4iVluEhm0OOhEP6eEVT6bYGDi05ETPARGYEojDru5CbTPe ssSObEc/RNvg0tfCwwbA8tk2iR9c7DLo6Akm0F69TUUXECdsh1/SzQVG8WIM4QMaXZ/oDlADjbjl 4VFINCpk0qdoB3ZwU//wCR94eyJxsq+www0BUrQlJg0tpT/kWIwXuMCrhn9+qplf+Zd/kqct/D4P MryyjxWNiKngwBQdxBDRhW5NHcaEyqLFQVMi+BoHYdkDsZpXSUk0EuMclgQRAABAAElEQVQhD8vq O52wjjv5uHKM3upbbuIHJ/fooLPx/ofLh95/S/mKS7aXj77340Wnn7LmsZ0RPB62veX1P1X+0y++ oeyoH6XaeORR5aXf84PlW553TnnNK/5N0Ueuys61j5VdD9P7a8tlz/mO8ur/+K/L2/749eV1v/3n 5YijN5SH7t8Rbh257Zzyslf+dHn+044ob/zZnyk3bbu8PP15zykf+8s3lB//xdeXozZtLQ89fF+M ow2bt5Xv/tGfLy/98ovLG37mR8sv/86bgl709u6RvG227qzyH//Lr5cnnchfkIgI1aarrBCde/75 5ZzzTi7nXXxx2fnZ28uP/+zvlpt0CL372ceX//D931Ouu/mBlFcfnX7pNeVHfuRl5bWv/InySR7a 3fHh8tM/+drymh/+xvJLr/yBkezV5ad+7qd1R83xYX/55R/+3rLzUcVLafPr/qC84id/qjz3ylPL G37hR8qvvu5NZRdhUdp41Pbyba/4v8o3v+CS8p8Ut7991wezPeIdddxF5d/9ws+XS4++r7zqFT9Y 3vdh9UOkteVpX/p15d+/6hVl64YcJ5BzxJXy6KMPlI9+6INly9MvLS/5tn9VLrrmJTpMHVvu++jf lh/6sV8sRz31n5TX/sqPl/X33Vxe/b3fXe7acFb5hdf/Wnnbb76mvPY3/6rsytW+rNu8vXzvj/xo +cSbXlfed8OdTITy2tf8WDntl36hvOtnf6L817e9N93R9bhLnl1e/VP/oRx9/4fKD77s5WUXM0CH w907NSeF85QnHV+u/+DNsS4dddy55d///C+Wq84/vuzWk8mDTcywIzdrfKrAeZC5RzSYEcyF2AxZ f/SPubVHT41ZC0isIfCjLlI8TWHiOVEEA0zmHyiq5xyrQtKLpxrwtFvG23WBkX6EVF2LvKYlTWsH hVgjtBYRC2Gz/kcThBftEJ82kvaqkYEBDb9lgidfrEvRDiQxG5GWjOh5UKgI4oWsAgW648CDgVhw 0NRTmdwLJIFQJDbyCG7KhbIYcgAMfsopzIoU66Fq9Af7BaFIWv0ZE/kEM9bfeoBn/cQj/IiYSAeP 8ZXED88HPrGnTZKOfhabdZE9lukeYUdP/uUSnnsLuryILX1HTBBAl0SEeeAEPfeNpDIeWBPBIzHH GEO+gcY99qNYkaVLc+IhAjiSjziqjF0g8JMn1RILzL3yIWOjuoSiTdWWKnoiJmy+6CEHYmXBZ27a hRF6Ma4kJ2tECqvx5I3gyyLtoY7sHr0DEn2ldTLOIJzD1LZ4y1RxiPFDWHJQCkz7XeCDI9/yUJNg MWAwSKP1orU0DgMxqHBYhnGNnFe6RFhwkzwDFBuj5OkKAukJCQ48OswxCaV6yfVdHPERyDYTQmGL FoOisYNaWFbDcC0PYJKlF5MpgVwkIAEbSQV8oA083g9bqhNc5Pg7k/iyLiY/jsBjIqUdBlEMBBRF B4ABEW9vqkYbbQousmDaViqlD8QkBi0G9Kr9j5rMgs8k4+BGzGpdPBYu8OIAQ+PNF4/DYA0TMDGY GFAxqCQavsscg4Z/2BE54kvOrINGO52IPfFNWXiUxZXD+McEYlLHJq0yvKRjFx+UiB+5rEkkxwW+ U1FChxjG+AI/6IyX6rNk0EcuFhIV4EGTC3nB92iNbNC+XA+iTyQRcvFXLyQfGJLnHzbjn9rM4VGw 6ZfKa3UwztHeEePQi9+0kYQ8/kYdB6FEXnlq1zEnHqtv5G3qfEFvUdqrCX7K+U8uTznnmPLJG99T 7rj91nKLDm3PeN5VZaNs0dK9envu7X/y1rJWh65X/OxvlB/+vm8pex59uLxbT4Z26D383friziOP PVqe89JvLz/w8u8pp25bV6572+vKm95zY7xdsFub+pYTTin/x6teXb7qWZeVRx+8pfz263+zPKQD 0r6dj5UdO3fSTC0WWuT0FtuaU48vP/aLry3f8CWXld07Hiz/8PfvLXfc+HflN3/3TZo4x5Vv+7ev Kd/5rV9ddu7ZqbdnucWZn/bKN16PPba3nPGk86MfH9VbsTe84+3lY5/ZVa556XeVX/mtXyvPOHN9 +dR1f1duvGdt+dev/HflhI0a+ydfUr7/h7673K3DHrLXfu3/JtlfLVecgey7y0c+cXdsPkRp+2kX lH/76leXF156oT6HdkP5rd/7g/LA/feUd/7Fe8qmEy8uP/ba3y4v/xdfrsPtA+Xd735/ufVD7y5v 0cHt+Kd+SfnZ//8N5X/5tpfq6eND5eMf+lj5H6//jTi4Xfp131V+4Td+tVx54Wnl/X/z38rfvPWj epuVt8NlUYv5MaecV67QU8lHP3V9+X9/8PvKd33D15T/82WvKu//4EfLSaeeVJ5y9QvL2cduKvdf /5byybsfKnff+Pflkw/tLBde89xyfLm//PHv/GXZveHU8qO//NvlVT/43eXM47eU933gw+Wrv/P7 ymXn60nahiPLv/zhV5VH3v1n5fd1cDv7sqvLz/zmb5dv/Mpryr0fent543//Cz3VWFcefUxvi+47 tnzHy19dvv4rn1n27nigfPjT+8vLX/1/l2svOKM8fO8nygf+/mPqu+aNmPldtkxOXedDmhGQ84tq rCtan2LzY73THIkVgrkSczCUunETe0mScl3QmsecJ+X04qaTFCtDlKCzqXOw8E1DvgVZ13zRc77n msfahlzsVyoz/1mHEh9orQzCjDUwLOTF6xSWpR5rC2sKcsFTjg+0MXzWWsHKwj8SNvPz2eJLjnkG K/K4su4LnRf4HG5Yb6THfhL7kPTwm8ctrO+xHMkeBwHWIuIX6z7tqe3ARsgijx8skpJjlYt/1ef4 7bR0Jh3TFd3ci6IYNnhXgxbxRM83u9EbbdujAbQffa7RpADBBJjsycSJd1jiXRbVY7xUHm2JA6Vw Y58QHZTukKUqGLTH+0PEXqC5X/V44TGdVm1HQfqcVbyGM7LQ5xXxYV8lSYaXOLHX0nf6Lzle2Mo+ VzX6GxVwo41VPeIkGn3qsQcOYWL/9n5LgKLfpOcYYWh9BppBpANZ3TTRjoNcDBgal46qoIR3ebAh kDzcCYOwVA/vlcchRXl0UYdTZUCR8RTH2TqBlcedcgxQANPZsB/ynDwzMPnhTiQIHxD4Scm4LAiq xYxBILnIJSfrnc8SQL49VIYqzZVN7nJoa7QvBp4qKEQCXHX8jh4UEVk1LU7SKlMlxV0alYhJLjp5 4IQonIqJN0DmRQNVj4DoTD7zgkz4okKc2JHleK6DZj3tSE06osekVB6TRW2Pp0YxO9Q3MhBPuCJ2 klH/RzzE36AXkycWFE6l4UrmGan0LXBFBou2ApWHmZws7WfZ4NEfrBMgqao2UYAhfeWdDyJnDDVI 9+fn2Bj8uE5KeyxZuejGxAQLJfC6XIuAsJFnstL/zFf3ZXwOjkUteCxn4QpAIQtMfF6s2k1+rQhT /2MTCgXIEsBWFFThM5SUuTujbduO3VY26bNS4CwrEZOjTyznXbS9vPGdnyoffPc/6DNbm8rl2nT/ 4S/TxzVHbC///Id+rJz85+8oH3v7n5Sb3/euwNe5L+4Ui55sbD7v6vKd//vLylnHrC333XVD+c+v 5y22e8ppjFelL/mWHyjf8M1fWj572Snlre/9znLnZ+8tD2nT94E2hGqzr3nxvywvfNELywkPXV/+ 4C3XlZ377it33HxTeVg3pE978deUb/tnX1/WPnSVDmB/Ud5+y/JayrjYvTOfsu3TZ8ue+qJvKC/b t/5/svceYH5V1f73mpSZyUwmvYf0QAKkQEJC771LbwoiRazYRQUFFUSxIIKi9yogiAoqKEgH6UhN SIEQCJACqaTXmWTm//181zm/Ge+9vs99fP0/r75PdjK/c87ea6+21157nX322Sdm6zHgbTfcGK8v UCTZrlqyV8WI8dtHHz0GWKnHusOHD436ASfGx5tr4435yw0727A1sWmjFGBNVMX7PvKFOEaBy85D u8RTH/hEzJ/7bmzs2CPO/+rX4qGHno8pD/whZj37ksVs2qS+rplL7umWzHgivvb5hTFhpzFx5JkX xKEHjonrL7lGcLLXpQviiUc2xIom7LA5Zr86PbYcMV7nrPHTjECXgXHJT38e9//hdzF16vSYM2OG HmE+7b9nXpwT37/mkth9j4kx+09PxvSXZ0anWTNMf6/999Xj8nZR31135IsXxA++9JkYt8ukmHzw KXHw+w6PEf06R89uvcTCYj0eHxWvPXabqCu1NMXTDz0cy5YsN54p02bF8Xv19QxG7chJccwpx8ei fmvj939+NiYdfFgcedKJUbfw6Xh69nzbODL9MxItvmljY+F76XP4bdlZYQr0VZMyuRwj8F8UM/iX T0AAwif4U4IqZSafejxVwA/gDzOByD3YfRZ/zRoj+3rBMJblWuEMDIpK5g88+HZotpdTABNvPFqf AEJH+MybcNl/yIGUfRxfQl18H32F5EDCMutaclcxLrRJdg8U6YRHlvyzTlQ/gzOTdV0RTPw68hiA OsBzk2gfKPzU4Ty5FyGVEa6hHlMWLTxcE+scEahgQOGG8VmZjCvgLVRq3AjnvJQfXsjJG2pOhEt5 9qWUgRr8xR99GnTwnBV1UZShR+uLOipnHMj2SliugbWsOjNdwZkDGCDDuDgkVcqQ11WFn0SAC5h5 hg+SbTFDV9YrMsNWogJva9vSzlnF1QogUFsmF6EzAYmw1QWNgg7yWI8q1LSN+II78Qq8+SMAlUzg E9Plt2azPGnY3uBJVUtWOKLzvNWykgXBqFomXVYStGyAEJYylKhcLuyFehWermhsCHLniUod/VKB KUjhRGXlbIdbAEGhVTKnelyWDW7BrHly+SsjWJ9aICtblgqL1GbAZOraxoFMIkHKwEmBmCdJkYFm plB4RSOne7nOvMp6COHw1wDoDZSZKeoARxZdQ/jMns2rWEuRAUxaNR0seW/RYkQbtlTWpBHWb2Wp adEZtUu0KZf4KqbvcV7ImAEODkcyIwN0lZ+UC2MSzzkFXQYramr1LhZD0naYuRdJCiFU3Xl0XrYX 93DoxO1lhribSadpR1zSRX5B4bzoNoDaqeJoQYHQTjoWgtkVKL9c+2g+6fmkUniEAmXxhxuwe8e2 9M/k0Lrgc8ZYucgm4bawL0iFHEFbiZcgUDA0oxMMCtDtqQydmyfBQLbyZlNhkzADNuwb3bS1D2U4 D7Q6812WrUVw9BN00kEvdTR0bSjsDsj/XdocHWPbYcOi/e9/Hb+7a1G0Gzg2+vXqg3rFr2xdC/h/ 9t1vxLMzNZjvNDmGjBwVs7VNA00EL7R5Q0NXrclq7+C/R5cebQgjaUSvHt00y7ZJkzldo4t0uDqz 28C1nrIw3i8qSC8k+mrzBriJqO1Up2vZUYfq6FRfm7p1yf/8014vPrDwn4Fp+guvWqb+/fvHtMdv j2t+8NNor7Vmk3edFP20Dm3VnIXCLd1qpi6pMbC1xPMP/jZ+dPWNUS3YXXabFAOGD4zX3lyajpe2 kha6da6PLXp2XKO3M7VUMNbqBnTD8rlx3be/HtPfXBk7TNozthk9Ot5YsNSPF3tvt1t88QufjYcf fyxmvjwlHrlrdjxy9x9jxYZL9GKA1usJ54bGtbFg/sYYNGonvUE8MYaO7C29MECqVIPGe29Ni8ee ejkGjtknvvrBC2Lt8vf04fZH4ruXXhFzXnxY680+F3sffGDcrODtpcf/FNWLp0fHHiNj4rjh0U5v 3H700m9o9uy+mPri1HjqoXuE9Z6Y9c6KuPyr56pNs4F4kaMcSKr0VvLiBfOjXffhcejRo6K2/2gF 7wSwSrIBtmFxAKTLeq1hhNfq6kpnMNg/46dJPK1bvdZBEPZpn6P+i86yz8vjiH34pj39w7X+uY8p M8cbfHQGXA4DpFikLv26YeyTlUlJoRPQgCsvyZdnwlfi62Q45YRF8pA3xq31xSfjoepYr7AkO6/o WHgh6fXX6tskQOzmVMm+gWwLphMctgBaA01qAJDjVOGMMw86AJsxh1byzfKtPKYjUeS6ecQfoxf1 NtscPKQvLcYAVXFAoKNvxMUTmAhs089zcy/fr7yKTzRrYERIIdR/+LHP1mkm1addxEvqRZXgmWS5 GQ9dURnkU1s4RRf+S13ahwoMnbkadSp4qKZ8owUbZdIl5dAWwx5zXDFpEZsgC41sfVNW1Mlquqbx Spwgp9wZkkbnGROARKDwSvCnNmQsJr6Fd+ub8arAX8Y11LEsnKgMrsxrMbalTpUnOtDCQQMDmo7g hS/zo6NKcqZO9un60IMBypQEJ5tGmFaFwqT/bI0IB0bVEZwHM1+RUXQCKPOXo6kLmPJzA4GDfP35 bkqXDkgKHDYg6GE5KkvGUmjgTdM9RYWCS4PLDm2a5o2BXH90EtWh0ZKlVuWBGLo4EqZ3WXDYtpEo p6yD8nONVDJIR6AxCJaoZxl0XemgqCbVkxWQtw2fZUMQUOBwyrtI3v5DVswmX3XO6vCAjClWIZcM 0fkYknAD79kcwZaJ4Mt0ywyOQsKi+PYapNJxZBtU88hBxWlIyW+2CTrQNUnockZP1zBTtAG04aU1 pfCYoO2I6oLlGn5crwQmCzxZJXN9LpmEExuwHZTwxTGNHMQA60+n2Bc84xDMH8W6Nv+yNY4+B8bK hHgiNA/KB76V5+wodhSQcX14NeK8VjazwrZLypETXYDrvyVrtyIvd3/orb0eqVX77cn/VuH/MWOL FmQNGbVjdK5erQX6b2l92Ijo1lBtR4xzWbFgTkxR4NZ3x73iWz/+WbzvwEltnB58d4zFM6fGo8/O iMVvz4qHHn1U9Kqid/fOVh/EH/njPfHueyvj6QfvinfXN2tdXl3UVrduVQBMmdI2yivZsXTeRQvu FYLFC0/+OR5+Zko8ft+d8dSMFd7jrBXyv5/Nmz1Ta/mej9//5/fjpj88LLY6xi577BGvPv+cZvSq tP7s23HxxZ+Jfp2oS99OfePjWqo2x4a1q2Lq8y9qzVq7eP9FV8XFX/509FXMaFMB1vDNcf+f7o2F K5bHk/ffp5myiL56cWTtvNdihgK3obsdLb39JA6ZtL0Z7KDH2rMf/2Pc9+TzMWKPo+K62/4UH//g kcKplxtenRktHSAQsetBx8bFV14ee+46Nrp27RoD+gyWDymGVwXqq999NX569ffi0ksuiyemzJb/ 7BB1+vIAA0y7jtriQ+wNGrtrjBnYK6b95ZGYNmNRTDzg8BjYu1ssfv2F+OVNdyl4HRtX/uLX8fXL PhuajIsZz0yPVeu0gg01yLY3bmiM2u5oPqL3mL3jc1deGScequ1WFIwPHTlAbzXnUxIDtPnJfmEU bXL/35+i7vV6wWalbInuid+zry3bwkfasU3fUT+DH2sOuQSTfTh9Aq7d/JIPi/5JP1CcOqvS77kq cDD2FC3i/ps3eiknrJS4cBP+I8sFBDaFfwGoACj1liTwAUnLGHFPksv1gQeoGBM8hgg2fa2KxFez fLsDUNMzBvsX35zj3YwPny9dKeEfW3EnvDKk3+ShhPcNs7Lwv/gp8HlM5lywkirpikaJG7nwh/Dn cU4wHkshAy7TQJyiHNycq8w4dJ56U4Z1he6KysoyrIATJq9BKQaFXu0P89YZdcrkiklTp9DG3+F3 WXtWptSpAKRP42Assdz0NBNJuiYIiCzCPBYYLDc8pZ6dW8hDDrjQWTl2mJ7KyyMUnIo6yI1OPL6o wDIrjxiilJFA0/mqQ9sgfkXPBc/luCjApIWyyyRePfNmJiQMj5cElYEQCDSaAV/e5SXhQmlIQ2PA lBhlKtvMICiRKseiMRiAAXfUkBaGRBLEuVkGaWhTByWajDKpVvJQ0DIf5rWgUaEnfBZUlYQ7UYHL w7yNv7wDMWVwFIlGqtI+Cbpp1In+hJMZKgy/XDMhdYsXZRZ/DhjNKzwrH4L8kcqjo2XylQeI/pp1 h1XKihGlQcNRAjnaNw7pkaP5VANzLhjuZHFI3AEgJx2SbTp0ZQMrp1/RpV9GgajO3QoFe1mVwJCu Q7H4QNG6lsjaSgBk2ak87a8y9JGzgBim5BCI8Qou2xIYOoZKlOVX3N3etC0GqvwCD2xQZL0rz53J eFTRZdI1NGhb4Sxlhyf0B/7sbEIiGPCSLEOBl2u/6VzotcRT6bgIJFjk9YkuaV+3K/hoO9fNX/Og GSJfoVO1PXdn7jegMFNZXHZMYOkLXguitxE5p2qJl7O/m6SvTRtatOB9fXTbRo8HNUvynh7p9Rs8 Pmo7LLBOGvVosL577+hTVx0L9Eju4gvOiHdefz0axfqaVSu0t5i2EIFm46K4+lNnxY/1gb9GPebr q8eoB+2xQzw86/cm/+qjv4wzn/qNZ2dolaOOPiZ61LaLDQoUmjvmmrcWbTFB4vFLpR10vXHdhhg8 /oA4YrfxcedfX44rzz/dcNDtwFtO/zXJ1jZrgNfrnnG9ArNK0o3G3qecH0fuPy7unNJX2S1x+4++ Fg9cvyXeYsNXpZWrV0t/emQoe9r85l/jM1+4PA4cPkAl0wX71bjvJ5vj7QrsKtHJmaepf/6P+MCD N6V8evx63FFHxMBtGqOH/Onbz90XXzxnTsyd9bp1ukJBXnX9djH7qcfjuScej8fuHhONS94UjXYx asLkOGSbHeP5J16KWy//XNz5g7pYv14venQbHN889FTdJaetoqvB4/aNw8f8Pu6dMSsuO/uUqKur TVjh2f/ss7yGrWOHupi834SY9qsHorFdTUzee08FwU3RoDZdMW9aPKu3Tac8d29UN68PJjd32HWH 6N45g8doWhtfPffs+PLlF8V2Dzwdz/3+2jjlkV/EJr94UhUfuWIfzUprexNxvok3VpRyH021odYi 0oabN2d+63YvBvuHf9RrY8269fHewqV+HFne8NP37Gj0U5kxwTSkL/puFRtNlqZCHr5AKX0YXVx5 +m8YHfHLDPgVv0FBUd99mMrgUR+n79lH0HXBK3r4cvvQwndw3Zro01TVj2nkDXTFhzlfs3gKFrzF jCoCb/4kv65EmjoQ1LXoJwv4goJOIV/eBEonQBZ5iJnyy7enc3IfNn4hok45M6lT06WqYxfx6yAD HEoeG9Bd6SN1yqbRyas5td5yFOCalMKA2y8GwryT+CzO20k2zlNulRe8G69FpE4xtlGmSyZDTMfl FJOfuDOAId4o7IMKBU5o5Eyo6kgW6Hq8kv/Fz9pGpFfERL+Ymsdsz1gmnlK3tJl9c6E3giyvNzNP 2T7gMcMVXnQJLwUMkzFWKeOZ+GwTRxoOHnKMSdqWEXrqifhE69hymxAFwiJdcWk62Gcm8MjVKamQ /6rMEx/Qta+p7n1pwjNYKksADLI5AwVKovM0bXhHcGggCAoxUR2pSz53B+5UwCSk6/jS1ygB0vyp hhXCWQZ8yGRFI6Q0ZHoFTGn4lUdxoku582lQiOhInvN1tBLJV7LRF+XtvHM8dBN54shrInvLjZEr GS+QBV5n6seyUqh8owGVr6VY8V9ewoMbATjOUb5xFXWVZxzg1ACGk0jQv6VJHnxyBA8n5kHHsuHd hkarPB3pLqRsK5/oJ/NYl5jGkTqkRikjEBkIwXuyBw3wp/7bGKhgPRumo5lTZeqI1YRXdjoFAzjf +C1I0oEulbIDpv5pA9dAPnBhW2RRWXw406foU9UxbAHafqhYJPNW4C+r+1LlHTUzAU5TUiaoS5ux zkwQHhV4qdz6Qgc6L52IyYBQyfqBF13bcSqPOpSyZ9m4PXfWthADcmCgwt9J5kNa48WK7XeaEDvv NC56dGqOHoNHxX5HHBz9u3fR2841sfOkvbVNxU4xapu+sVmPKms7dYtjPnBujBsyIPr076MtQHrF X+6+O7pvv3ucccpRUa+3KUcrqPjw5z8RI/o3xJSnH44pL78Rx33kM7HtwO7Rf8jIOOzkj8Txx++j CD73AxswfkJM3GkHvbDQGO0besR4bVkxuK+2zJDSmtvXxYTJ+2lbkiExauKE6NazVwwfOyEOO+a4 aF44Jea+Vx1HnHxc9Ojs/cCz7aRtgofeQ0bHqB13jFE77Bijd9k1Tjn3Y3HS8YdKNxFDhm8XtXpx oWOn+hg+cd84+ehDo1u//tG3b68YKfj+fXvqMWmvGDJiTJxwkjYQViDYobY+thXsScD2FazkHzFo m2jo1T/ed8oJ0VnbrgwasZ3e+Px4HH7IhOiktYTDNQPXXF2rzW57x0kfOje2U51evbrEzgceG/vs PkaOWfu5qT/2GrRtHH7yOXHs0ftHvyGjYqcJO6r9q6J7774xavyk+OhFX46dRmm7DQJbJzndms4x 8aADY2CPLlHb0BA9++it2h3GxNFnfyxOP/FQvXAiWPHco8OauOuuR6N24M5x/gWn67GugoL6njFJ j4CrWacku+nao2/sfsQJce45p0UXPY7uoy90tOtYF4NHjIzdNAN46IG7ayZPgXx97xg+amycdOEX 4/D9J+pR8UYNTh1ix10mxvgx22o7Eu3hp4BxvNbQDRs0UC+grI/29X10rW1QBnSz7/47Jvm/yqYf zZ47L55VMLlW26i4L6o97ZcwGAY2eoP6B2X4EvcrGzwDlfpjW0q68Ppm5dH/6aH4BY72VfgB4aWM UuMscJf9GHQO9oBTGfh978U19AFQYryhDLyl7xFK/rsePHufQYCVSb3SD1AGUmYauWFOHABm8jX8 F/R5+lLOuuU4lzSgZdnQEygLnsGSkwVAJN2KDjJLuEtJDJK6yFPLhT9yOwgePvRTtLek5hzhy6Rr 0P6NDvGB+rP+AC7oUsXjkv2i6hhH4iefQJb2cYGys41UXWXwYZ5UB38KH24jlVmX8JEI/eSPNuYS 0tRrW5/8RIFcSRPbSZlLZhOZ6wqeJJDkGVq6tsxkVhJ2Uvj/otzX4pEjGPkSDXzCj+USJjBwnRQT L/yUPJoq8AUp2zfXqpeTFpS18pGjiGg5aBXuhs7bZ56BQJyzZCgJKgy6nhaFBf5DuUyqw5oLBEgO KIOYUIqAn7+jRMrLRB2BkeOZmDJfRxoNeoY2GphHOcoVXQuS6H3XAynfmaisZMtRuPD47gNYd0hh 0DHlaENQp5bGuJFBV/QYJabMfedVwFSUSaFAiNYTny5EDwaoA+8ObsyQ9Am6JGK5MUhfSye8Xpx3 FACBQoDGpWvx4s6qrOwY+WjPSMAnkOwEGIdg/UA+28p4LBNlUgGwVDBPUFKCjlLpEGCLZNPhXLCg hAYM02bkZYdqp01BU1by6ZfUhK7R6IcA3m2gPKqWRmx4gBKt64CXhN5avFlhXjO/aH0WwH5hQXCt NkktY+ckceloHko9k69/2f6thL2AWW3gmxrJmLpHH8Kna9oW+3UABn+qanl05wYf8Ixd2+FAXDS4 ySlpWW/U0b8yr7qmWo/2PhSH7rmrF9Kapuv+nR/Zfm2tZllkJxu1Hq1DbSe/SNLEgCzDqq2tUbDQ FI1a4O/PTbnv8mhE+DQIspZyxVsvxPtPPDO6jTk0rv/p96KuSrNo4rNZ9RS3xs1XfzVuuPne+PgP fxunHLCD3ixtklyK23SkNas7ddJskujrDdcqPX6tUSDBrNkmBV986qlGMnGDsHjGY/HpT14UzV2G x2kfOi2qlk6L66+9NZp67RI/v/Xa6N+QN2MpqV6IkVze0qcUXfrMjYXZ7BZda4mvHCKLyVmjxOym 98bT265sMNxejzaxRV7bZ3sLHmnTpix9wN5LWGZeqzVQZlCllnDz8hku5JOaxH87piwKh8imxbTY po0btS6ko7ZcgC8FWcLLHTcbGIOjnTb2ZTsG1jNSh5dC/qfZK/yX30AVnGceBEv7NCkwZVZq7ovP xl1/uDXuVrCz35kXxUUXnhrNzEoqVYlvHrnTVvRgbraoh42ymS9LIOClUfBe76PrZqbM4VWt4jd9 dY6dtIi/jXqJAF5pM94abpQs7bV+r1qPx2lTz6ia8j/2Qx9fL5z3PvJk/O6aW4VTGwXDoFL66cRr L+GGoL+h+/JGR7AJXqnnGhikn1ZwUyvlqU66aZ0LTzm7ZycFXvsRo/WPN9k2vYTHf6RfEyrl419J dH1wmx+1jfu5M/Fx+Aig8qYNlkg8+kx4tYUcZo5RhRAAqFJRjSvLZ50UcpS0AGqtVfjbrGHajDew afziwfYMDtWq8KZry6Ncy6ij/TmYExRB3E8KkU0UnPgi80WBaHFdtpnzhautznRpuVNpwq96jGWl bs2HbB8CPle5fasr5o9VCL1CcODsd3WUwRo/4xY40WM5fluj1EEmylUGrpIO+NKuxBZA0FY5MPho 4Ajusrp+0SM0SZxK/hKXm9+8cHOgYvOLfrIadUt4+ENvxmtkVEjdUiHHNwoKnsGlBC0Sl+7bquMS +GqTbI8qsd4kpDxVAUB9MUlDllN2lJUBTKngNB5kVQX9MYBBCsdZueNAYqG1QgvibeslcRSpM8gL jwd7YKkrAzNX/Gh6lpgKx2daBb84az+eo47ypCLO7LRBSmPxAoDRqbzQk+mloYqM67kawDoBi03F 8G4IeBHqlDNhLTt86H8agbnNxiXfSTqBZ2gYFuMWIs45ijHLX+iKa9ekuOABNHSgDCJkPMCUOqMQ kRFMTqOEA3camMqgBR0w2zJSj1QFDvql4wKXoOwUM4BJGPMug2/XxtjREMMDibdgs6IuQECHtZyU ih4/uqbNKS6DpcwuiFKi/4jj/i6+fefEtc8lk47oL1uHAv2pAqTY18d2CgKnROb2k9ys+ytfREje lKdB0TjQf5GwIgZo2swyojOd++lHQa+EdbvqArsAp+96BUMQbV5UzzqnjH2a5NnoIxvXE3jR8f4X STa5UY9My7RZ233kQ8DM2cDjuiJt0aBZzvmUR756oQggumrGif7CIF+tx6bNLYmFwKC+ppMGbwVg 2i6EwXyLgrKyPgpubEOfR4EbHEggmnSkxfAb2ItEjdZ9yPZxzGF7xO23PxTXXHKR27FHv6Fx8kcu iH7dOuoJaVvOFTxJlmJLulKEvznSd3nrE/03+hm+Aso2EFskSyuf6B1YBTL/A+wGyfX3Ei8xtMUj DK2gCpS4sg1KbsU/ldRM8FOUbd6SwValsM0JPqpJgTfMYRLNwlnSY9Z36oN/cuDWc/jYOO64gxVI ik5Rv0WysM2L+6BqbdILCWUioNtYtAV5PA6lPcwrgWIBiB7b2kmlzSgXQ1s0m7qheHRaVPmHD9jE 0lWr4o0Zb+hx+0bPatPvneio0gEDbxmwUWY7Uhl9ojIeKJ8+lH6aDo5G6J34Edmd9MgVqdJ7i35s Kq6igJ6+SV1oC5+DPJ22k35cG/+H36fYfkIUBOfBnTrg1DVuQGcVir45KgITaHg8ELyzjKwkSUVw 8N8U1S5gEg/8KDj3I13OlRwIwof+7OuoAg/FhIJxgA++5ZMzGBD/4pHxC3D0Zl06Txmq62st2fBY pfr2XaLBNZXMv0Cdrwzunz1pYpnEj4GSDfMIHXQrGnhkWHRdaMrHcdPtJL9cyk2WZQZGqQxYyC8D JdNRGfJLOeIr24ZLj3tUFDw42cXAeSLucuHlhcFy0oBZrAysE55xR8Vij7YHof7Q5d8kEKhUCHlJ oBy/eSnQNADXn9fcwRt40BG0wScgnlgiJzbu8acg5YmQCjnZuozIj3YFm7rTifBptDc+UDumIhdd kySrxMoE3oaGHRIlgpQCFYy4VQRkJsD2XxMSFcl3N6pngxIROxF3OtEsYGhw7hgc0ZPXWj2BYAxu hMeGBh/6X+oYhVjQUgIVMIVYCFCgw6BkUq7UiicVmfgy0CwCRPgQrBu9lJsjycadTKWBSz6K+FEd z76V166gC65hiHKdVHStzpZOSGU0hvmzsEUFHRK5TopkA9E5YG107XYhE8PlbltEoeOZTKOEP2m9 bHTyjCSZSwOHV/0Jh3EbPIMWoD0rKLxuR9XV2X/huZRMwG2jGzyYaNNOoK7QtbxcpW1Q4mSZxYLw u81gkQQ89SU3tuU1EUV+6XTgSX0leRQ8QTZsyghl+JoRATf5wlHhp+CjDFrp4O7oxl38AIMcSqUD wWbtHumUysfKnEQDcA9IysgbjCwy/UIu8yMcR517fJz4vkP9CaG0qYT9v/artli5dKkeqdZEDy1i b9Nq1tumtatj5Zp1WjfXMzrXdrQs/wgvOHu65XsL34kVetOQt0176I3Ybt0bHBD+Izj//14H81z9 3jLrq0GPRXt0r7et/7vKTf998uXp8dsf/ioW62sg7dusrar0N5wCfUb9qBwr6LP2LwhO/+VHuMr+ kYOX6uk/eErfDmTpTyo3/yi16KHGpf7to/szOPTnZKIFKH0Yv0RB0sbvZKEG7qKvl4GL/WpBB9+E HE6gRjbgjY/ADq+h8gJthQ3pATmQBx+bKY/2VeAQjPniRhNYwdn7gB6xCh6Td+oCb1Lmw2eCg7ai QeOADuNfjsFFHdFBx+Dn6ZEDNwU5TsozV6qeMoAH9M6FYut5gccArpU3rL5RNsOqIxhVAIX5MRbk AJ+Zl69WIWyDJ2UrvFarcC4T0zhe8+Wfgga4K0OS0cAlpFtvEHLshm6iAqxiWwKGLjw4kBRvHp+g 9V/gbAvw5aRjKUeRY8LIh9xKxgsftCmF+s+Y8TdjtwEJ/oROdZE+KZc6yqq6NQdCmQ4olMkp1zrh NWUiSUfZICgYsMAFkyiBRxTNbvwk4s4myiy8586vnIlwuKRgw1wJX9LRiRA2WxYk4RqWsoEZkKkP Tj1Q8dH1la//jsDNlhouZ0HyTsDy4CDEQwoPNBWED8VZM4Vi3AmknjLAogx9IBO8qRoaKZM7rDI8 26XX7akGv5XOVejUb1mBKznN6qal0wJh4qIu7StYHaFZ3iG4c8CLK4DLAD664+vMKivkobitQzH/ UiKSZJI8ZUcWbBJOCbObQgOjdYP43EFRIRMZbkddU8ttKBux8cGn+MCR8t1Ys1yha1TKgsGU0wCC NQ54Ec7EjR1RP6/5fIp1Qz3B2GnRcXE0yrLuBO+7Meqp3bGZ7Iytus07pqRdmV10UIZMSlQFD6dl exIdig425qbD1nESvoYvVys6I+yRoTpK5QwDEJ4pFvCq91bpEWij3hzVoyxD/V/+kZ569B9gvsoA s6SII6np3DX6d9E2IdIZ1/9oYpDarC1wuvffJroPUCsLF/iYydua/mcNoO4uBLhaN2enTqDxb5oY Ixbqk2WvvvxaLF2w2H0P+bIr0B/UV2TxvrnRVb5IJDvxNJYybC9ACTa7j/sgOHxNPyw6aaWvulDl 6lcVOtRVHftNVbBNqw9Ahr7qIA//T4Km/lHFwUibuomTgEa+zJ1chXYArkgNz0ixI3/SK9jWZfpL 8vFVjDVqVzFoHsWD/ZWEyA3gNXDT98CoPGRLvwEd5ZlX+hIzWsKpPweE0rePyvKjQJV61gifKUTp L5UHMQibLjegtEHiIRMVZnCMftKfIkCZZyZgrnKScqReaa0Cl8lAG8DMaxssOQ88AEBTp0ZbXGem 2kn5xB2pLGE3kH7030EOJ2oPj/WCFWRRRuCZ/Nj3iIBlpbzQfTm2QD1n94rKsCRFqBkM63FDF8x+ 5pieuimES5oF3rRFpBFMcaPgOiBDNopK++ESeVxU1NGh4peBB5YEz7r2+A2uBM+j29NPb8hlgKNh xXAFSrkOGoyJHzGTB3cAEOiPx0FlSoNByeqoKjbhAg4aNlEz4R9VLxFKSUKC7sopyWwoMNO5BC9F 4iCo47Vl0FAZddx6ooOoDODoIOk5h9oqgYLgZaDmD2gVWFcSwWtGwG2WZNQKOhu1SSlA/MPIqzUz QSevcvCjwUqv6fsjwAIjv6ZTvrKPfZmoTiq8kCf+3bAYhQDojMZFBdG2SxEeaNmZUK5r64THQonM 4vKzgTfIwOsK4EdPOkooFjm3fdMv8ZWwwElzmsu1nkWDekwTV3Aoq5IoVyptA505OFIl2rxoReOw fMADhLyql+2KSgiMlK9yt5tOnbiGNsllWeCgX1kVZ6QyziGUtpRtSDWhlv6wYZLqoxPQ6C9ZKWhI R77rZzBIsVyjcqF62Jj5hifkkxzgtX0LIR2dKX7+Fd4l6SVrBT4RBk8hD32GQGalNlBdq/VUvbt2 sf4L4P+rBz9S/DsUGAAwrX9OUrv885D9c1j6F8eCLf7T1P//kaz4lo16jMyLCjOf0efEZPrl4Mjj PXdC8tQfbG/0TXdO9V8dgaff638mMnROP2MMcqDAOcsfgBAgfqQcK1yRAvDSZXVuf0cdPZok2U+p XjPBEP3aQSNESv9CRSDhA2T8ZfJ4UZQlEPXsgQSWHs6+AHDD6WhfjXyCFUzpOxJj+jHG279N4g8Z kM/ywoOufQ6dTOW4mTNv5AGjA3xT39eMczyVESv6YzzOJE6lUxJeLvOpowSwZdfRWUaaF66j8V54 4BHa+DTDu47OXUfgkhntwIp5NE9kl0xQwGXhHxmTVeZSYMBT4rYejbJVh9RVlsnpxHVL3Fzb5gRD GzEzyiMBnZuC8VOTPxC16to6Vy5FXr+sOilEwqEfbIGEqgCEzXKcAlcZVFKaY5VgFZN4zHFLZOCI fjzewwY4K+2mDHSdZECT1z4BD1u0KVAVzg68JWEBXZg6oyLNWw7WFGHQPFP2eh0jT6FhuG3KwMg1 Cga46wGhCPrOUkjKKgXD4ASPFZYWVKCUgFK8t6eQsMkPnbZS7PO8uwGH/oTLilE94NlWwjOHqoOi qYDx4Ugq6w9E27MpOiJ3k/jspTfDdtl5pPCp0ekE+j7hM8+9Eto5wXnt6rrE3vuOiS41zJIxwDfH y9pH6129YWV6hUw0MnyUgzj8+ZxyrATdKPlXPxgQ/JNf0T91pPPs2FmvS69eMWnCKLUJnST/sjOD pDmWzF8Qs2YviHV6TM3CZlDy44N+SyOjA+ESk+7fGUaykviSNDqHf1KpR7DylqzzCgol/8iCTkk4 bikz5SNDaFIX5NP+gkTWogyy2F3KrU6iCthK44aNaiOCWa3Z0vYLGUiKH5yycLjTJIs6l6MRxvJu zrJq0Xbr3S2AwPCLHJyJpv4xALFWIWVQvtuAWb1Ky7iN6JzIBYYK87oCqTjyCWvuwLxSHxNfoe0u hvbp45KtP1s18O+uAfrM3CVLYurTL2sfwXe91s19VoLlUf3CXYPBrjhX36U/2ONwoqvST5QBRSVI oW+p/zjeUnX3qwIffseb2GbElv5EIKUPof/leJF+xP6GDMH7HMbwOfgZ14MZDfO6ZpKAxLiROLhS 37eP4GZXT10E27pVEHDQaZUFXiGRx9aL1ptVUGbgAs+JC1+R/CmrCLCgXOhTNCo3sYypZg6/KYhC r+gLGvmWJzKWeGDGiPQEhhN4IulY4MlrsihDFmQSHfvuBEUp5XiTMot+MUvo8UtkWFOb4woYCx3T /q3KdGCVchUBnMo9NuNTlaBtrRU654DeKSUf2j6jXjFGeoJG+ebbcYB04WsoMb5SJc9BZApCA110 Zn8PfeWJK1VJ3vwEiLrIANn8EYrkhjHVtuFy7In8lIEnk5VzTgSD7XPzwm9pQ2o+YwWn+QQXqcCJ jLZLXWsUA0iK1YUHx0Jp5CGMK5WVdUTvoHNj6sTKk2IYQGkoEmz+DWEyRcfDu5WG5GKvoihKQKY/ 9VxouAF0SWDpQT1r6FeqTjJFwxUXKsF4825G3EvhOejDlwrNdTZQKhtjF6E2RgIMyudNux122S9u ++0l1otrb1gYR+57Rjw+a6k3QRu8/di46fafRj9ttp4crI1z9j41bl2+RsFS3i0iJfxCT2hTPKAL lm2Y0geXyRPwktfNR9XE4BcW1Gi0B3KxU/qQcTvr+4zfj8onzgEFEXUEs3H9hpj10jPxlc9dFo/N eC93Ulc5YKXBe7EsypEO3F7SiNscFCDTf9sGaEU/O2LCwnUGSZi+KxTOTvmFoYIAW0hHCF1dKLme cJsZ0S/5Ke0nC5I2lpFmX1SWDvY5+qjYZVT/2LJxTdxx232xaM2GtBHRTVio4ABJ6YQd/FoaipJm OuFWJw0sdZDddJFDdls6IAJlt03RLg5GVSPtiNp645HtH6zTpJ13ZXRUleqtvlWL34ulS5fH5qHc VGAbW9NWDfz7aoB+tXT1qpg2UxseP/aibB9Pon7jPlD2RvURn2bvopMVUG0ET4dADyxn7bhRo1oO iKBMP0pPI4GDfSWZcS/7EbCMZWWiH5drk0v/U9Y3LLhMWnQdAKoCdD0IaaBUoJADfYmRY4HfY5no F8ckKzygbMMD8KVfpap9Kz4EMXTEp+BLLLvy0t+Lc+FIX5RjSProwt+oDP5ZAkRdfCoooZvcofNs B8OZfeEREOMi8pFf+ja4IqUH1TnI9N/jvE546YvrbBPhUP3W1qUdwJVtAqocqwhPBKd6HEFpIJPS BXU8oUNxYnNgovy8QiMpD8O0zxTdMN3gBMFKMhFdIZviAGTUVbaN5EK/AnG7GD/BlfLJhOEycam8 tE/GQ6iWkuqs4JNxEZnKEnRJynZPfB4XCtypD2GFL+FgPWi5QwRxEDoCW37FCKzYhcYN5YOHGxra wG1Njip4TtkCCimEUxjzYUKFxJkhBlOJeVkxDtVzKgTgvBQqn6qKMp1a5TYaMUOHStw6yNr59mM7 /ZUGZcEhRuJg4cBTXjA46xoDBRdTo0ppfBiSgiAWzOr2ouwYZRe3ooXH9V1L8KVgOrJFgRDqTxCF TFV1A2K/nQbGY68uEQ9VMXzk+OinTUxJ4kIpo2d04g4h/LycwedomD2sZh8Y/QMrlN0phBvT4HyL 1s5Rj42Cqwm/yyTR0vjzxN9hA4eNMc2jBC0YQaH6NFHn2Hnvg+MX13eI/Y+6MOatbRZe9Cfaeitt c/HJLe5uvWmjkOQi1tQvz+8b2S5ClzU1HcvuItyYGBKns6Gz5apCHBT5aksaLNH42jcGlClvs96e o+2500AnaNDrXmSd5Z1ui/TG7Ce0q0Wb7R/ccZXBt12POOuc+NQxY1VTHwp/5KlYsIrgDb4gKh2a D+lQvMGPBwPK6QnwrjZmLaf1rUu3oupQSjmtwv+8OwYea9APDHEsEpCeNda1dSKSfguXPgofyrct 6JxydL1+7bpYoNmJteN2jG71WqCujrs1bdXAv6MG8HXrtARg+py34rl7n9J6zpVaqpH7+WUwkX2G IZz+xI8HeZ0xuNJP3W+KMnyLodQn8IPtGLHKPqfTfDNTwIZPWPdHypxZ5gkL/Vkdm3spOiJVWkt1 RTBS4DbZAoDxiSdEvGAEf/n4zAR9TX8uMeVMYPqp9Dn48oQt5fxbXrMqQ005IaEcM4cvkXJQTGUM ZibLQQJDp31ZAayDZyVNCz3mOEQpiWumMUCcfMk/CbfXZIk2Yzz/GEME4EkFV9QP9NKPlznksYuD 6pe8ia7l09E6NR61pC4Y792ugt+Cv9U19R1XmLY9vvIK/pitAy/kwGtfLxwV/mhEYBMPIwFwpVzk A2v5dJ7+t9XOKGcArTIv8CvYQv5yfGD8KdVre8QqaSQlxiS0iZwO3ESb5GAWXpSwiYQTdpSgRFgC LX594MztpDrKqqy5BliJnkB+xi8+LXOlHo2xtKnkYLgwC6KTCwIEBhsMqDRKecejrCLBgDFbg0R9 UrkTe9swWCOemS1mzxIjv/mP6lKFYCApeEmHMdmIi8bj2XSup5MgtJlwpzHp3A1GzWQF8VKYNAJs ATU70VhEqZKUmK4ZJ0BN/beSAUOk1IKr+Duf5tGXlU7oq4LomN0mRtXNL0SLXvGfuA8foFYCh4Ur DEo02UGqR+9esd2oIfqmYk2sW74sXp01P5atWOe1aARJbNFQpUetzU3aM2tz+xirj2337dE55s2Z o+8y6huOejvQHUEkKp1TeuJfGl/qAhaWzJoWP/qP22O9Pi3EnUx/bdJ5zlnHalPXDtFv5321f9eo +NbvZ2hPJ775GjF8h+1j7IgBWrO3Ll6fPTvenLccrOoA6EqPJTWz102P9SZOHB21ek1k5ouvxPyV m6KLZEFFm9jmoaWj9o/Sp37IkMzsQ2YnLcvorIALlTBD2KigFIMmaKvTBq677jxaO/d3iPcW6SPr r7wdq9Y0ep8pyyiHyf5dO03eOQb376nHo+LvjTnxxpxF0STjrVab1uhLApu03YKTtovooD2rangs 7AQzbizbjxmiCIOXXiqdx42fDtSdiLq0I8JI/tYEPkwl8WaJfvXfnbRo9+zaAqSubM9mWJxTs50C ZR69O5BTA8yf9VYs2WdldFfwtjVt1cC/owbwQe8uey/eWrwonnngmXhrxhw9JsvhxL2mHKgkXGW2 WoNQBj/ZRdxX5Du8JsmDEh2LgROnzakw4bvx17p2N9SBgdrP/JyvOk66wGEyAQCM6tK3GZhNX/0/ 6zNMQoNK6tlU17n7Jj7A9ZXhgUPXHiMShnP3+5KfBLc/RhbecGw762dHkWT4TVzIJp/E2Gb60E6H ItoISXbehvqxJ3JILk9uoAh0Ak/8SYgcR/0qX94EywnztR1/BUC6c7l07CVLgq8EwJApZGQ2jpSz bImaa2TNGSONw4VfBNIbzRblwIkp/SGP6ugf8ohkXsGyighqCcwchAoJG18z82TfKRjjNx+JAXyM k5mfEyKGdTMWcgmmquDLcOgEmUg6T6lob+EvZHQc4eKk7fb02CBoR3CCdkX96LS93qSkDtKR7SNt aKGUoQQOvhcrKlyRpV/lyfZSb6qlcu9qYH4Fl4h8LNcgcuE2kV74l5hAJp2KJjOy4E1ReGyqIArh SHwGCZyeidOZO4CNHmYN4p88rfK6I6ZtOxZFnqkQX9TDWBCq7Jh8QJogytPQRiZK9ByjRkixqrpt 70h4A1XxDQjFsmAtOHUSFhVVGEIfNB5JwsNX+Zy5hEPoxG8LF1okEW3qFEYALU9jQqNIfAibtYFj Ru8QA7XL/bx2fWLXMcNcinq4ecikTtbcMT786U/EZz5+QgzQTu2sN2NT1SUL5sWvr/1pXPXzu2Nt l23jtjt+HDsPaYh3Z02P+es6xgH7TtQGqB1i/ar34vZf/CQuuer2WL0xg+kSezokVm+pYbMFXbRm 6Ztxw/U3xKLN9fILmjGTLrsN2zbOO3ScytvFNsP6RcvmKdF90Mi48Gufi3OO3Su6+qPhW/QJpffi z7f9Jr546Q2xan1uJDrhqBPjR9/8uAK8PrKFlnj3zdnxl6mL4+B9x+vRwsa44twz49qpdfHHu6+L HfrXx9JZT8UJZ3w55i5rioETJsUff3VV9K6rikdvvSHO+/z1sUUveux/ymlxqTaoHTu8vzquNvnd tD7mvDJV3338btz16GvK2xLDtp8Q3/reF+IAfQKoVi9cYBBr16yOp++9J7702e/F7HX1elT84zhg l21TJR17xHV33xwP//KG+NjFN8RmbUaKvNgHLUuHxXLyLg/7SJukMrosU0WX2BC6pTYDRJlkG5iW cwq92ymqXJvht0mCwGvRkYFTPbdZYWeJoCXembMg5r2zKIb31S75LmuDYuvpVg38O2hA5s2ebi88 +ZIfl9KdGKwKTy0J8IV0GuWpMLuJgDwu4NgRUuOD/a3g3MFUrtQ66HHhLB0JwrQswXdkymTwdE/N Oh65TI8KlBUJwsAW/ZaySn8HRNXLAZ1ggdoZeFBYYFJd/vHfOcKZ/VbjTDH/kauwIJP8AOlBGd9R 8OOZGxFAki3abxGlQI8BJH2Ur5RRykYhCb1KsxWfJBrIKrgyuLH+BMNYxCswyYXKTR35i5Yp2gOs bhPaRi9SsaEzkyk1nWo1cQB+e0HXbysT9RK3fsWub4pFIydFRJxCWNNJhd+C1/St6C4x4GNLcNtI ofjynJggz1XTbQBJ8asxybGG8HgDb/TAQIzuTYtgR5epxtSR7IuYYLOeOgmp6VoAtGBZwSstF7yh 19x0OfVeBtsExa5SYEBSkvPhrQjKbS+r3wAAQABJREFU4cXSOchT3INS4I0mFj3K89TKMo7UG8hU ExjxrF/DES+i0+RDsihDk9PZwNmSqkT0KamtNLChkAIrBgQTGZiZRlEGTJkSPhknD4aznMCpNHLy wWfjE2OMYa4DfuqYbTGvuhYSeAGVj7IIsA2ncq95AKiSEBocyJYGkPjQOyZLNN3a2OUjSDOhUoy1 EggKx5KFc6PLNiNi4I7bRq+B3WJ97eAYNbyfGFgX85dsiqH9e5gyjxn3OOHk+P43z6tMaTbpLayO mmUbOGJUfO4H34qlc2bH1S9VRU+9cNCrV3302mvfIMQqU+fufeLsz34tGsT3eRffos/nEJAgSRoG EpHaarxdCwv36/WJIO2GL8h2XXtH395dDYfE776xOJobesZ3fnZ1nLLv6Eq+elc0dOsTp57/Sb14 0RIf+Pi1sc2uh8ev//PS2KahMikbA0ZsH2foL9OW6FQjN9quo/hHhtqo7t/Xj0CjZZP2nauJXn17 RC+x3b9PdwWNTbHbCWfHb376pagrglzasGNNXYzeeY+44abvxcnHnhVPzK+OH9zwvThgR+lVMqxa uTKq6xqic0O3OOTk06N+8+o47hO/jN6i1bU+dYJD6tm7T/TpLTo4f9Uj0TWtH9uEztSTMePS/uwA 0JOhizrcCVJfTsCDR4GrQOi7amsdW1YTIAM1c3bAZwY1jGnpx1yozDYMD9xBtovVS1fGG6/MiTHb DtdnrrqLZLZpgWDrYasG/uU1QA/r2a1rrNUa3ya99c7XPPDlLIJnpsuBm/x19jH6TM7L+2a+Il2R J/jKXosqc+91cKYBFDctPPmYjo4nXCpzHy7Oy37vBUKM2Awm9E76qhN1dOKBXbh0zhOeHBvoywAl bGsQ4Io5/OnUdXQsu2pl3Cr9BIO2UKSPkVz6n34m88CW/kUnmqLLmz+FWRJwi8aNcmaMGSomD3Bn +Cx8Rns96eErISkziJNXHwWbNCGQ+oeWBZacruN2KOQTv4iLOggAmJjYYdddYvKOw7V8pipeeviJ ePEt7dFXBoqlbir6Azf1xaBaumNdjZ7I1OrpR1UsW7xS399Nxlmq4pfEsjXNBxzQzozoktLKBEtp M8zMkRjXy3PKSei/8LjmHSHS3jQuwqNkyZjFDGdrYh/mk3Jskpt30SbQU+KLJY61Cv/sTNU0HQIn GqCoz1N29EsA3lLYZupfHBbtYT6kN6QDRxnH2ByFt1xe5B0t4F9t7xdKQF3oDRrcRGzRrFXaj/hA DvKFiE9rZmLmzVoQfRXQaVAWR99Z6BEPTPiTMzqjWk7xEfkhlso9aMI/ylNwRZ4IoZgyyu3AI0wZ LLpgp34QcbAKJTiY86M02VToybjhQ3/cSRjaCMjLcgRCcQQ2qWdj9DmDue3NNbOz53N3pFAJdOVQ MDK6RUJDxWYlmNb0xty3o0/1NjGq36CYOLBntK8dFNt01SzZAj1yXFpVCd6kdX1D8agicNsY133l 63HdHX+ND3/xa3HhWfsKYU1sP2FobHnhLdFOXqHy0uMP6OWHR2PC/u+LM4+fLGkijjn7/XH9DffE CwvX6yPkHe0M841F8c7dA0BF6j929/jF734u34XE7aLv4GGx7dD8sPe85x6PWx58JfY9/PQ4vgjc 5r38bFz0pauisc+4uPKKT8fIAQ1xxGmnx25X/zEO+ugHKoHb2y/9Na79xZ9i2KS94rwzj9BjSwgq /JXe+VcGHRzLYJfWKPy0HpU2RZW+tfjpT37QgVtz45q48crvx88fnBZnfeJzce5Ju0ennsPiw6cf Fcvvmh+7OXCLePPJR+KkD345qgaOj1tu/VaM6Nc1xu01Ofr1+Hl8St+//Mw3vh6nI0vjirjswsvi vhdmaXZP27SoLcuExZBoTzoD/Nqu4U9/pIROG6I1bGvWYZYbSFAExJhMWcv75KlDGbTAQgcFB7aE vdLRso11hyQY1lTiqJXptnz9xVnx9uSx0adrGWQnta2/WzXw76AB+ntnfTqtzzZ9/M1eehP9yT4B n6qBOG2eXiPvqjz8r7dWKgT0IMXNEm5LyY83dWTQoy8yicDATjHDTHpMrlQmH8TTnOzDyuKaALKA ytEqabPlk9emCgl4anRDXEM0UNDZ2LjRa2k7kCc+CRw6eosRfBl4wUNKajk7U1IWDONQETSWvDPY G0L4Sn/DGr6cjUr/iWBVHetjn70m6SauTjQ1jye60OfbpwzsLfrixluvzYrHn5ymJ128wYkvK3Uh doWf2Uiv9UIkUeUd2NQMvi71yvgImxlAACc9a5lKowLvQ089NS4753Dnffvs8+O51xbom8J89i6T fbv0YFzWm6jIj61v3xBX/eLaOG7XIdF+/WJ9hu/ceHjmCn3FJQOpFjVeBsPggWsYLIM6Xes/AV4z a3mIFzTR0dS4xctxGEsz0c55xq2AeZAw6JFHwGAFre3Fp8CQK4ELfQDia8Zc2td40h/r0ny07kZJ Xf2hMOFAXNuxY4Vcz0l+SQ/mGJexqwwes75vYITBdAtWsEFuQmxO4DWD2AcJOWFY3IPMPBQiKB8b yxsilalCxi0C8wfKwQDD1BNzAOfaNnU4oIlWaRSVeaqbgUgJZqgDQSJVFOoIUcdyvxWUaSW5RusP earhjmVj0zUDHN8MbNFsSfn4VtpTJf6URJbBEz7Y7wTcxi8eCggBCSsXyjO/lOj/Zq0FsARcauR1 2KdzAlBH2fBMXTAYgU50tfj1+bG2wyIFb0Niwn5jYm3zZD8qfv3VN2JpU6+InYHD/trHfb+8MVZO HRYDtukSb6xqjn0P2C+2H0EglSlfI4dCpvULX42PffRidZilUX/HCzF8x1ti71F9orrHAH0ku2dM /NAn48S9R+edmapwR/TCPXfGb59dinhOtd17xZ777lVctTk0r4sff/PqmLOyKY7bf4/K4+23Xp0W 2kk1ajaviOdnz1fwtoPeDOgZBx21b0weN9wItqxfFF+84Cvxuxffjppb7o+GISPizP1GuQzdYWYV KaS3ogDF5bl++bxPj5GjYtxIZtO0Vm75wnj13RUxfEj/mDb95Vh1zK7RXS997LzLmNjmuVZ5Bk3Y PW685ftx/4NPx52/uTUWvjo7Zs56O5auaIzl786MtxetMT4+mPTSk1Pi5bffi7oa3YeIDUyFFvQN gPjCSmlL7BM7ydYt2lmdjjYj4T9sR7Ip/vnJQSFXxSErv7ybqtyZCobZBN9FgUi02ml2zQ5d8G1T B+nNb2nJfhe9uSBenfZaDB3QL/p32zr71lZPW8//9TVAj6/V9117aJadWbctvqHEJ2dwQXnRfQph sg/iN0iewVB/ZKxwJ1WeXYc6sEMP90ODul8THNF/OBqvTqFBQEivZqsm6rP2iH7spDGsRTe+ex6y Rwzq1aDgSOt0NYv1/GNPxsy3l/nxYOOW9nHAMcfFztv1jq4NnaJTl7p49YEH4paHplkuAkxS8sYQ yNOjHPsYK5CDgJGBOzlnLBG86sBF+bkkjzYEHOSrAK4ZUxurO8W5X7gojpu8jUr+59S8eVM8/Nuf x8c+95NYqqU00HKgoIAiORFOB7Kpe7DAAwEEfo9vAfOCGuM2M3jcVBPIGUjlBHFwy3Gj4DzJQV35 bx4lNtR3Mh4mOzZu4LN2eiFO7nbje3prfmNLdO+uG9CO60RH38dt3By19Qr8FCgRGHaoqY06vtwi gptUd2Nji5fEwHd9506qW6/vHLePBfPe01rnyTFxdL94+IFHY847qxwEEoSXUuHH01vLlytOAAd6 RZvow3YhObAB5yoPP2xfLP1IMOsEubnkx+1HRSsk4xlijwy+VR86KmfMw67KGwzVLpIVqfNsdwYg +GJyixt536yAXhyR5zipqImewW0Z1Da0GRx6LBE9rmHNsYjMMOMiVTbzXKtSzp4lo6gDFKTWAUwE uFBCRhZlmpDq+gUDl+jHIKoPUTUewRtZMEysx5FCcOT3JpM5/fofKucOwmDGqRwRyoEYPpUp9OYQ BkgCZmbDA7MEpm7RDuYxG57Gxgj0zw3qivpJXsBkDDoxb5JL/8VTpi1blsWUt+fF4bsPie1H76HH dsNcMGPOrFjcd58CSvD6+OHMaW/HueecEntP2jHOO1sbsf63lEFEmb3szTdi+eLl0UW73DeueTee nDrHwRuzdH36VsfgnXaKSZMUXLVNc6fH7U8vqfC3bvmSePHlV+RUpCk9ztxxnGZ01CmiXX2c9ckP xK1PXRw9dWdXpn1PPS/2PbW8Ko/tot+IIdFQPKZdveCtmLlsWTR06azvRW6IR56aVQne0BYGXuoH Rfu8VHyBErvq3lVT6toLj9Sp33Zx1fVXF6WtB17ueG3GK/HYi3PjiIlDNBVfF2N329N/fFBy3uuz 4oqvXhUvTn9Tj2c7es1c1tZgobVxBFK0u9uRdqbtuKYDCBDeMoDDwcueKFTu5tImBETHSrnoelmf jk12Mx/70xkuzrNwLs92TEcnGMqwP8oE6w6n83z5xzlJW/TRC3eZM56cGiO2HxE9Ozc4iMz+oUpb 01YN/BtogJvnLl0atLxBL2Wt2iwbVm+hwxT9i1N6EK6afsHApirpgxW4tOgNQPoNeQxY5ZjAMhAG DPdVBWuEKO5PQsJgmL0RXOl36DdlMAgZEnTZ/62qrmt84YrL46Dte2aBfu+44uI46/LfyY9otl59 74KLPx9H7tha/ue1r8ct972oR1S5dMR0RDtnFXOwVVfXNWvLNFuGAIVcyLhZYx8jGkEDZfghyy/a 5Ke3UE0Fhps1nbZm7cYKb4ybDhh01NSbv17EUpSDz/hofP7VN+NTP/hzdJKPZqzZLPxdOtdLnzz+ bIw1a9Zrp4Rq/Ul2lbFhdrua+thz791j5KDeesS9MP76wswYtN320btbfaxbtjAefWpmPPHH38Vn X3teS1la4rFX3vRuC016KWybHcbFJz52ehyw+3g9Fm0Xm9avimcffzxu/PHtMWXR+jjlg4fFmGHF k4MO9XHaOWfH4Icei9senhJNWvu9z5FHxnnnnBg7jRwgXhrjtenT49e33B5/enia2n5LfODSr8ZF Zx4cVZtXxT2PzY7Dj9wvutY0xfuPnRGz561QAKJHxtaMlKtkHeqH9qDl+SMv21pnLlMG5VRRW3Bk PCDUyydsOVlkfy87Y8gCG5VtvjSskzbhl13l5FRaHK0IPaB9kyLkjm1s78pUYclvOS5gQRQ73+MN BNU2ZOqaBI281oWybC8qZ4yFc6hiYq5CX9A/itI6qSMERHY0eg48Qm42IYYdiXXZEzBOOni9DzzI 0MhOYip11QIOLC7Mavy2DpQAcl0qDFhnmdECkfIolwBwr3IU3rEA5M6GStKH60ALhXIkUJNEvi47 IHUzSi/kREmQLPIhzyCdmZwoSfBnnng14rS9Y8fd94ntalhz1RyvPTcluh67HxBKcjIdu8blP74s Tjgw15W98+aseOThZ6K584D4wGmH2ulYAGQoCHiDYVkXQTDrORr0NmUmfYh645aY++bcWLh9j7x7 UAEd9Z1FK3Rn0HoPsOSV5+KC0z8XS7fUafFpU4w54NC441ff0Vud7WLUpJ2jj9bpNTdZSmFojpce ezTmrWz069+b9Kp/k6bEq/Sx8udnLYidDkuTaK8gifVZOBJmUxvqKqYiHOAq8aGe1DHt0KNbTehG LRPKFBhtQ1rx7tvx5LPTo4oPoWs7kI0bN6m4KtYteiPWvDM3PvHBj8dzCnyPOHBSjB4+OLqASB9X HzxqTPz4Py+PufueFo/MXpnIil+3tXC4s0AHmv5hWJCDlL4a5SiKew/rz+vVJJfXfGArWYmKcqgM HJypPdUm4C3t0zdvsilVUSn2WNBVfWbbnARPRyxuW1TXDCV/CWHb5PHIwjnztbHzy9G/d8/YbsCA fLRTwGw9bNXAv7IGyoCpvk6zVZ3rYp02J3c3Kvp6+mEkoKcUY4vOfE2fwzfTf4q+lv657IuJpKRR 5SU39CP1RRV5PAF1kVy3OKe7uZ/SD4EnA9/aJo07aNfo8v0/xTr5vb76pu9oPSVpm9p31Jv+8hvQ 2dKoR3k61tfX6XY68axfu1ZrkrQOTS+YqdPajzH77i8aiFa9/FZHzfBt0mbiGzZt1oto+WUe5GlN eQ5/rf5nY1z9jW/Fg8/N0azVRn0Noj4+9JkL4/2HTnC1g487JHr+5P5YqUepXfXk5MMfOzNOPnz3 6FrXMdaufC/+cv/D8Ysb74g3F6/1C2Bdemwb1/zsG3HEfjvK1+OfmuONV2dG54HbRb8uNTHjid/H rod8PkZM3Cs+e8HRevzdITrNf1d79i2IIbvtF3f8+rsxqn9b3QyKUTuMiSP2nxQnnf+DuOhbX4vx fQq/V9s1zvrIBbHzoJb41X1T47RPfj6uufzMqCuKEWDktiPjyGMOjEsu/Hx856cPRV1D5+jKl2ai S5x6/CBAlNirQW1Gc+cPJ04yGWehRpoVvXmWTBepTfn8wg/bkjTwMPY4FuCGgGtwMDSUSeU8TSEm Aa/bCBjhhvV81MkZhRToqDICeb8UqSsSMYVBsG2CdR+TNjQdG+VJwuscOMYYxosyxoEH8whUWQ/8 yjROZDYGxWIJLOZcicWcrcEMSCp3TipPwRgQxbyMloADpOqJIqhjUiuYIV9Z1NO/cioQHBlUSYeF EgkMGVAdONKpqadrcKpmwVsxUKqMzmleBGal6UjixQMCjlZFioWSL5X7HKJmDT5SyWSZJ8PqPKNL 4+SH2ZYFs6bGakV1XfrpMalSy6Yl8cyMxXHk8TCrpMcGDdsMjXGjB/ty+azn4tjDz4sXtQ3HOZf9 IM5yLqQzGECvpD6jx8YuY4fE7598K4btsFscsks+mozmtTF/cVPcd/HX4pYrCOjQBY1cFRv0BuaI vfYvMKhIzYcxNTXJoKSDl19+K+YtWR89Bne2nW5RUDh//jLIKVXFlL/cFR/95p3RvlNdHHb80bHj 4J7K3RQvPj4zTv0wd4G10TBw29hj0rZx610v65Hp8Djh8Imu7R+1N22GHZBqunSJLrr71jtLMW7C hOhUqAT9LluyKlav3xw95Ri2rF0Ul372KzF1rr4wMGZsnHDUPsGk3LuzX4ldjjwzPvnBvb3lyB0/ +mbc+siCOOjwA+MTn/5w7DS8d7Rr0BcvhneJhwneCvx0pha2WpGD5XEId1fYs7iTnsya7Sdny6R5 7JbGFgK2kuGo3VPcgdCrOwjFlKi+15cIX5n8kovrqhwbpEA/fOKM9Td0UPoEMxC2RcqFD1aABSf9 33VhVLAzHn0pBgwbqC1lOkcf6TH5o+LWtFUD/9oaoH930rq3GvX9ojeksWPwDJRYvnwPAyA3xG2D LPpDjh3ZJ+kb7GvmiQDVKycC8HnMqoFPrk19iL6b/ctH4akk0XG561NPXEEoe2oFbNDIcTF2m/p4 fM7KaBgxLgZ0zf0SgIWPngP7elulJs1mDRm/U3xAa3L32W28nrhom6L1a3XD9Vz8/rY741E9Kajt 0j0++NEPxpC+XbQUYnosah4c5591ePTtVhdzX381fn79TXHXI9O1hi0DuORGRJS4KeYMnjPJd0+b GQ88NEOPGttrq6T1sXhT3zj+kAmhl/e1FqyzNmXXmtk+o+M/bv1eHLbL0KIehyExducJcdhBE+Lk 074Ys5c1xxVXfy2OPZD9MDPx7c+R2ly+TOxBCgebWmpjwIBc2rPdsM4aR1rizHPOKAK3xrj9xl/F X56fGyefc3bsN2FI9Bo1Kc46dPu46w93RsOx+8fw/t2Fsinu+eO98dA902K4gsFvfTUDty2bVsft v7krWroPlb/fU49tu8RXLv50PHTfs7Fy7aaSFbVtY/zlrnvjJS1Fmv3WMj9hKQtL7eA8OfcLhh57 8NnSn37wu2pxn9PoLJHqoFjANwnSr9cf43zVxhr1hSftCA3IugocelpYnDNMgDFnzIBSPdm7IPWX ycEUBfBQaUPqMQ4REBZBnPirPJ4t6psvUfMXgLBt8WtEkCgSlAr0zskJNHKA1/hUftbIOGGCE5X4 n450MNbpgMVKUg/yB2AZwJVNwGWiRT2EyNd3oUGZSpXHDAjRJUpUNRURnCWnCOogjUv9UYsNdsl3 h+d5PbhQEIVGC5bETcdmkIQPQKBHNGvnkNQodJ7XMIg2FEEEfNvAjcWHbmjXyJ8O4uXNBe/G24s3 xLgBOa20XI875y9aZIdTARVKN7YyOvXqr8DuyDig29D49IVHV0Dgi+WDZarpPiiu++VP4sC7n4yJ mjHbrn9+M2HhlCkxRW/9bFZHWrkqjZy2wezYPw3GrYYSkfL5+LkfCWpWx1ZYlLVXYPncww/Fmk8f GQ0KLM764qXRofd2saS5Z3z84ycXwdbaOPne92n6+uWYPGxfzY51jR9e/4M4+JjH9eh299hNaxEq CdorlsSKNev0SmmnqO+/Q/z4p9+Kl99tiuPfd0hFB1UdqmPVW6/qcejrMezA7aPXdrvFzb+5Nm79 47NxxMknxx7jhxjlw//xo7hxZm3sudfuvh43ole063JbLFPQx6a8mTZozdtm69uzY2TWdIvzv/zh qP/tA/HAo1O0+LdYjos9OKktVZ82xtTcd9VHWBBc2iE2484sIOymdAzlQFEGYcZhk5PlqA1pC+ep FTxraruDCB3XzZN2JTjanDsO6EODvYncpdRea/Sh+hfuezq69+wWk3fYXnvk1SR8IcHWw1YN/Ktq AP/KrFJ1sdQiv9Pchlv6gQy9veydroPtk3z/RL9RX2FQy0FRBQzOgNC/fMKAwLX6FOOMOxD+Wee+ K9KYojNj1Y8wpt9TwOh+phu0JvmCTZp5J23RjNUW7T/FeuIx47fV4vonY6cJwwOPvll7RlbpkWP5 PKNJ173G7xW/ue2aGP03s08RY7WU5cQTDo4TjvhQTF3bKT72pU/HMK9KYdl76xOKocOGxL777RFf /cSFcfWvn/cb+d4MHj6VzLfWlTXp6UeZOmkms3u3huhULV/WQ2/aH7enb3ApX7RgTsxvbBdf+vIn KoHbnFdejLsenB4HHXt0jBmqGfxdDoyLzzksvvanhXHSYbkYu2ndsrjmiu/E/dNXxGe+/IU4bLfc aqlOwWC9fCH+rEy8IKK9AKJ3Q0OZpYmKzbF84dy4+ns/jll7j4112mj89Zmz48Y/3Br1XX8anz5t H8FuiJ//5CfxhwdnxCe/88PoncNk3HP9T+KTl/4ymut6aiun6+IDh4yN2v4j40BtBzXn3danKE/c cVOccs73Y52+E16jmc8O7EkqQ8mZSewobQFOecqBeaRVMW+mM9kZ8U/OYjmw4UKy4dOB1JF/Os+A ydrPGEGnRATGSXxi/MpUBnELm9oD7QkoHDdX4NUZXBQnws01ticr0kV5bbuFP2XAR0Ix6hjcvPst 6uIakKo0WdMv6xmfePIG8+K49SmoMpOYhNOsCucMcCZnKvoRDIGOtwoRIWCykxkgFUhHRUAVuoyj YP0mEJ0VIURYqJzA4TxZDSWJD+TKN08Q0XWlQp4CRyfOxkj9GY/ALWyJX4jMMx4DYkZW0PS1cuAJ vqGBMxEUb/uU3bC2U01smP9mvD5vsYK3oSqNeGO2OtLixqhTZ3Nq3zk2vfN2PPD0jBhz0mQFb4Pi su9d4SIeZZZp4h67RO9fzfXdKHksEu02YGR86PyRJUg0rl4cV1z1H/GOvorQUUZMeFHqBf+1Re8a t9fjxHKLV9ZAeBaMoBDdr12ldWrIKiPuOjSO2Wt8fPu2B+Oq626Piz95UlR30hT3xz7icv80b9Ts 3lXxqF7MmHLNtXHEHtvF5O36R12PgXHy+09LOPRXdKAq0d68cXHcevv9sedXzlB5VYzf84AYr7O8 g8gQlr3aqhrXxw8vuzImDr8qxg7rEztM3ie+qb8yzZ/xbHzv2l/HM+t7xINnHx4Hj98meg8dE5d/ d0wJ4uMTf7wj7n1lkV+6ePethcrbSX/t4/DTPqA3gSMeePA5BZzcQadN0Kb8oQ4GBwdQaFLO3M2s H47YBI880C+X2EoCFHiUTx5vTXmQkQ0bVnaSOMUF/UXq8WNWcOEAvR4mO6jhhUMYYU9JtPT8h05Y pQBuntay/PWBp72WZaeRI70QHBvemrZq4F9ZA9hzjTbJrvYyEroNNi4T1w0TfYab83S59Cx3Nl0X ftbXyqW/kQxIn8s+SH8q+4230RAI/YpxhKAP31+OD/DBIA2mcnaEGTwhiCZ9jHrxIgUJ4/rFhrVr YvnKzTF4SB/tJTkqrrn9hRi3XfrdxW8tiG7Dh0a9bgBJjZur4owPnlEJ3GY9/3jc8cCMmHzQIQo8 1Ed7DYuj9h0X0+6cGRvW6+bas48dYtPqZfHUM1Nj0OidY9shWkdX3SU++6UL4/6/nBtvrtJNfTVC wJr8hFjctGJDrF6h9V1OtfG1K6+Mz31dX8ORX6jhbd5ezGrJpS96O3505a3Rud/AOOLgyc7buGxu fOmCi+Leae/Gndor8w+/uTx61LSLyYccEAeseit65IRivPjA7fGNH96pdWjam29Fx5j08HV6EqJH wZ31xERKKzfpNVLprH3V5liwpHxSUx0nf/g8/61Z8V7Mf/vN+M1Nv467739J4M2xfM0aV+OHwLNj x7oY0LdbJW/fU8+Jaad8SD6ySo9Jy0ewHWKEHlW/VbnJ1g4Dz0+NTQq6O3v/UVpUqpMOfJNtWxKf NCmYsRnsSKfl1jOM39ic/aYqY0cuNyyVyMQ+yJXvBl5NjdUoVsN5V+yNirCm/4bDDknlTGkiVp4A PM4UcM5Xpm9ING7nJBB1wVTaKzcsia/08Tm2CKLAJ2DJBX5u/NOO2/JEdV6001r/7EwsIMTwHRxo /VM+VrKV6VwITF8/kjTXAJEBQY5IL4ICKgcuM1jgzk6tUFJEvYbKCszgi7s1qc2M+i1WdTrLBl46 pC7YNDCn0ZUnNDzWzGCrbLBUIgT8WQvVNVvC7MbSRb5WTlMVyoBrsV0GgJVGEGwHPeKb9/qU+OF1 N2nqNeLVF6dpQN0cN/3shlj84gjz9+Jj90WzNjR89M4/xfqZLwjR+nh9yYK4/+KvRvPKj8The44W 3OZ4c9pLccvNj8W4A/eO7npG2LR8XnTujANCbxHzXnwqfvXQy3Hg4ftrsWaHeHfenPjPH/4s7nnm DXX0asvvoIC24Z9uLwgWls59M3547c1RK/0tf/vVWN9SjUkavmrTIn0W62fxwuDeum4f6/U6eoP0 +KPLLo+ZU6bGWacfoT3GBqtzVMU7r2lx7g23xG/ufiZaauti2Zsz46xTPxIXfuaC2H/37aNjS1O8 9Iw+QdW4TXzqnAPNM8rl+62/vfqH0WHt8jj60MlaAFsb8954PX5396Ox7ZiJ+rpD+5jz0rPRQXsA vT3t+TjxfefGhz58ehyizYh76Y2uxvWr46n7HoqrFbi9sXSNgrJVcf4ZF8TZ554WRx64q7YFITRt iWUL58Z9d98bP/vF3bFaE456cSlu0UsPnWNp7L3zcIVvW+Kvz87U+hDdqao9UauDItsUdpE2Tcu3 KKAtZ3ttn9KdMiCjASftwjcuygCOWxf+A0JHT+SoQBn645fUIqcDUDv6iZLcsv6JblHX8HIWJHDh fOhnekHOHRzoWXp5oZPWykB33PBhGgt4YyvruOLWn60a+FfTgMyTLUE6qFOyVNR9RXmMO0VH1En2 DRcyWNJXMH5A+KO4HJXJZmxwJ6EmGVwzDulUNTwL4r6W/hAY91Ow0a/UZ1yrgGedtPunanfUW5tv vzs/Bil423F3bT3U5/4Yut0wEMfzT78Yuw7YxsEbwWF7vSXZbtOamDFdwdmqZXHFly6N5xZsiQ8P 2t7BG3X69dQMke7wy8F9y8ZV8WXtmfnze6dG/+12j9//6RpvYt518PA44MhD4qvHnxhDu2svTlXq qC/JVOtt//POuFCBYvoNCRD9Bg4E9X9LK+a/rv3X3okuPUb7JTAAOmopyY9uvTmq+Hyh/Fw3BW6k 7vqSzZB+86UXMEa8/fJrGkN1s6+/pe+9FW9pSU1PPTYu/VmLbjQrSe2juYr4j29/O3p2aokTDttN a3K7urhB6wN30N/Xd54UYwd/Iz540Q1lU6lcQZ+oNetFhdoimKdStV54a6/YghvdjWtWxfKljT5f K5oZSBm1jUbDmrCoHdV2NgG1A0dmK/mXeYLHcJwYDwsxBGfpZQO4TaZg8J/KdoBFfZbVEFgxPgDM GJwzeuCWJfkP7500udE3AaYjnVloVHi9fYzysDfYIX4wj+aLmwufgMllRlChl2XlDGA5OwhMUocs WIs/6ICn+Gec6mR6wpnClsGE74TcljDIlKq4MHdwr1MHV0IDsyKQj6Bc5AEOmjkmZjkljkCprjoO kqQk4GgM07MymeFA4RmAmHeqMPiChECQBvHqieSFbMoMY4S6VkbWhRYQmahrHMpMdZMvGFDRaAaj EWVHWp/wzhuvxJc/r7sL8dxRj//qdUfwxB9uj4d+ra8tyMo6yEDrZeV33nhz/E6dj7bqxOeiYm1c ftEl8aMu+m6lAq0Na9fr0V+VHkc+mTMzkqND/7F+tAzJdlrbduP3r45rr7vZb/RsXL8+NugWqY59 yywLPGFpAhZv8Mcblovfej0u+fLlGZC076hNemvVFppCFhzfKv3tz34RN+u1bRqFWbo6zc5Vi59H /nBHPPbne/SWUp30psnu1WtjnfbW4S4PftvJqSyb92Z86cKLolvXBmt8ybIVcdynvgm7TtaR7oD1 /lHccO1P4rc3Je/r163Tp77kSm9/0B20HQ5DfLEi5j29vXr5l7TvnV4rr9HXKjbr0e/qlXrsqkcV neR8YHztwnnx3Uu/FT/7Xhc9juEBRos2AN0Qq7Q2olqBbI3uZniKumXlwvj+Zd+J6yUTwbp390Zf SukQ1J5Fp3ImP6pH5/QsGZhl16XN09uRyUZg45GFAC/9cLPhnb4FgK3m3RRlqlB20KJdvGWIgkAG Ezt0IfELKZAXjWxE7LA4BU6X8AYvUx/8q+ttlrMbO2yo1tjUV+gJamvaqoF/OQ3QD3ImAaMukjuT zjF5JQbMluI5UJ4rU2WeVdBY4z4AoPLaDqZkMStBnrHr5ghPnX1JsNChj5WdqOxYdF4gVQx8mTp2 2BxPvjA9dtl1cvQfOir233lobDekt4isiZdemx07effUiIZ+/aO+uiV+ePm3Y+aMo+Kko/aPq3/1 6+ilzcDx+WXCF7HOeIP2kVOYEsvnvhYPPvqKPvGnG1k9zrz3kZdjhzP2kAJqYlTfkbHbrhM041XW 5tgzunXXKjbYLdJLDzwcT8+apyvNanbvHccde5BudjvFoEkHx2dOPziuvH+hb7oBZ9a+c/cu9h1s trv43YXarqNZL38tiSZH04l04LZDUWToIwpallEf3RtSBshys/qOtk0pH/j27t9bN9wNMUFrr19+ 6tFY+uoLeht2ffTfdnTss89uMXHsthq7IvY+5KDod8lN2lu01G9dDNKs25Yta2LRe+VMYkvc/PWv xKU3POq9APvrqcL40dtoj72qePovr8So4/dNBvkVmjJwcbtKfocFsi/4LNscOCjSxEmaDNkAOJxo cdqeeEJABkSbwi87wlbJYgKKHSiMV5W9TAt/ThWwCWfbRL3Sl2fMkuWc5ziCHcKT4MBR0DU+xhd4 UXKMU8ZUouOnN8AqUR9+uMxxrJCLMQKZFFjTF3iqwzikx6ZkqlMQ9pJUOTsj4ARuwgSMEJNyOg9G oeT/ogTxVIr5oMwVFO0WwRjXCGTcRotABVLV9qmE4g7CuJiWAK1SZcA0uIRDGTIAdACMnYBOKS4b o5VhBFY+Pc319cN1cZlZuqAhVd9JhR0UwDV00aaPxYwM8LW1WpxbK/oCKtu2VgGEZ0hcOTHwevj6 9RuA0suSeqzA3ZkCFGpW0YmkC+sPCMnLZ7FW6NugzU3w2t57lmXjJ+/6Fb8Ii6Ms7gwE11kzNb67 wMoV1Fom0ZbKdfejoEkOiDxwUR+afP4EPtZq3YJ5EL4aLY6lEnSg0V48txP8Or1VRarS9iNsvJjJ GnPcQnBfp88mtGhNgF6Mlax6W0moWiQruN3WtLvai72g6vQGK29gbVwvTOKJjSCBM99CW6Vvs9aq 3TdpoW6j9jOyvgTqt7VMXjhhQsEoPtR2YZbRk/7ApX/ZeQSmPFTj9sFmMHz0qExsgpRqNXHVTJxC k0mgdDb6hNuDXIPCM4VcKgMBskhywkPShr+2NzusaygXZIs185PfQhRvYgg+X7r/6diwbkOs339D 7DB8aAzs0cNylY9oTWjrz1YN/ItogK7CwMeRvkD/cwcgwyfKUVfJAQ+jz3L6AX3AkwcGpQ/ohH6q I7Mt9AeOntAu+xpU3CXxZ6Kr/ub+R0envkMA0TASuFF9wbtEfm3ptKmxYEVTbNezd+x98HExUE9B mvQ4cClfFVAwROJTiBs3tcSh7z9XN9bn6fWtTCuXLY7pb6yO7fWlHQKYDnrEuklbfaxcrTVrA+sV ODXqm8/cIBIcNMaK1WUQ00H+bFlMZ1/H7tWxUVEU33re3LQq1srnpw9IGn++5Vdx2a8ekZ/WC2Aa e15b+Z347ieOc+HInYbGprtf0Vrjpuivm9XV77ymwPKCeG2VnsbI30/Slh59u3bWF1z0+b2Ng+LT H9c4oJoTDzkxTjvoibh7ypI445Pnx3BtME/SdsDatUHr/Sozf4LX12u21HSJT136jTiA7VUaV8U3 PvX5uOqSu+PRY98XN/300uhVi6J5qiUl4Oyc2sWwnUbHHnO0l+cLb+j1Bd2Xq0GO+j/svXeAHsWV 9nsURjmjCIgcTM6YHE2OMphkwGCTDRiDDSbaXhuDcSSDwGQwWUiYbLLA5CyCAElIKOcszYxG9/k9 p+udgfX33bu7d9f7h+oN3V11Up06VXW6qrr62KPi5ZGTY6xebXjhb86N7TceqD5+aVxwxFHx7OeT jQ41ns4tg7KQxKLSHrCdWnEqzoWcxWu+ugZB8aWcGWPzdYrpNhc7YGmRm3+dlz7HHQr42I8isccl 6EN2l7bJEfrAVHFVe29/Rv2wW3zFAeLAiewyTR17znqRjp46ykpnnkHUOf21uxmOFZHMi5xN0aXt h4b7OJAtr8qvSYLifZsBQpGgSkOm8PBcQIoqSrNw+iudGZ1Yaxk9lREHyZW0pmC0nk4DOau6XuO6 Yy3ElMbWERYQJwENK2SFJ0MUZOaqrSoWayAQtaQ7hQxKAwzBu0ILvshoBxJ6VZzjySd0hcN10icS mSunU5qsLY5XSpYOBkDhCpc44VoHosPDH24s9I9szYYC/eRjPYg+O2ezsSWvlmHYlI2SPYwq/kiR O3uLgy4wxiJ7cgWCII1WpY1TZ1kkGzAlT8jISBBplkHnYFNmNi7FO6LCgaYdQutGgGYFLvnkx4aP WREE6iDO1kfiyh6UgF7BBR3Za+UNXXhWyElTl4qS+tC+TvxfgyEq5cAWSOZOXlqp2ZshkiSkRTsr huTWh/ad9+FlyMpYJKjpCbqSTX/iBV4NXEzJizD0TTvRsdI7cNCy/evouuQ4A9fgTVM4KYaOsFE9 852YKKQcQlTCiBffijnTZsXMXbeMNVZbOVZffoC2A+hUVCCgZWGZBv43aSD7D9cJmm7sXAdsmppM d0LnSDrxXtqidp4bKaq6uz8qBMHAiQsd9n5js9iCTyWAhdsXw0NPuHwrGlnrBUi91Y3Q3KkzgBSj NjFl6qR488MJsdb2K8egQ3fRUpWI8Vrr+9EXi7y+2HBqQ9to1OvIo/ez87Nkwcz4k5bDXHX3C7Hq 7t+NJ28522D9Bq5gh6+SPHr1XT5W1QLc0Z/PjDZ6s8yG665tOG6s3xszIi7Y/77oypsLpBffjGmE fY5mPjY6VIvhqtBOTlsXjbi361inLUgWaZq3OIAaNevXP2ZMmxMffjox1u2zcvRYca04/uRD45o7 noxNvjUofnHekXrNYV1Meu/52PPAX8STr4+P/bdYITr1WTGuvPuO+MXcxdFXD0aVwKhd716tYlF2 txmtAlmifUMf0yzALuvsowHF7nHh1dfFqb+aI8eui2aXMrevPPlcTFb7O3HinIpcq/jBuT+LXXfb KvY+8KJ48IXd49Ad1tX08cZx8wO36uED3sWZuJ+++rjS343eu2xTa2dXXBWnLtttyphtV1jK4t5K 8tH8lvI1Q/wE+xzE61wAhiVRbDi3069zzILxJY6lb0t7MagTcoRXALIu7xwgAPepXIu++ynRtMAp DFfqg3DGsP9mWuYtQPpt2vciF2LyNgnyAXwZaHK9sA+mjMr+S99CVqCaHgHnSUmqscxtW3MLgUSS JJ0cFMg7v9Jxy+oGIvBkzidmkpUPXARSBnDoxZxMlVBwyK87cCncW3EA5J4sOSylMCrymbOkUvA5 osCifDpJzgtOgStOAlSJ44EAK0e0PdfNkXyIt2EqOM+rqxzspKDAkleJ6cKort0gqUCaRU0HD3jS MjdKrUQzrpWhhsx89SDE3Elx/qk/0j5mbWP65Ekxs0kvA5aleV0fhIVL/ooi4ZYyZBlBh3yap2kL lIbQUpE3fe1wKJF8tjRuJ4uey0lp3HGIOvA+o5GFpv6cH/FiCvO1obfF9z5/Ru/hmxdvvDnJU5/A kSVybf66QNesN7AVOLFytLEP6Mqg7XxhEAoc3JiTSBQ0SNCxVCjy68YOXoZL3CxXdEPQv76JTQzA efBm0eIPDfLNHnms80AvrF1IPYJfIUDOQTSsv+QP6wzAETLeORNc6kH/le4tmWRHj86UzsmLsRWH /IkFqYq6DpT9uBHa+45O5/C9tCt5fWz5jbX/3dYlFmHZ3zIN/As14HdzasSJuuU+RTbtgH3Lpt1e E8EdFKFUHZ2STp0jSoeqfUw4b7NgeLUXgsslPAJSstdWVYSyaatugtS3EExXgNQ13g9U31A9zakp Q72WOd555z1t2bly9Fou13JNGvVJTKmf4w1zAaBfY91zFz+EINerfl68/OoH0dhrpThFG9NWzwG4 Spth9dex72rx6z+fE5ff9FSsssNeccAOazilce7UGPfZ2KhnqQiOaJGdM2WpUTfyJQxcvrNH9cgD r+iapCcyy5RmnZaOtJ43Na6/+kZtKfVv0U3LZw45+dQY9IMTNC1ZzccuXRS333xnjJ48IX72s4uj 31XnxzfXkZOpNzn0Xa5jzJkxNRpbd9F+nHrQDv2rm2mjvOZYnGY55PwxY3PXFb+P5bQs7vua2uyr qV2ehqftnjt9kt56c09cevm92mqqY/xD24M8v9/mscU3VrA+FvOe1vkz9CDFj2LSBefEkftsG726 d3SeGhbNi+GPDY3zfnFdfDlf6/7GvBtXXn2be4uPpV9mZ9AHgZthdMAPGyo34+6T6KsKYOU2AAcq 1oOzxeKVglN8BlKxF4L7oBb24v5W8W6r3YelHaYDZxS3y6bBgJT7S9m4OiT7IZXcpq1zHDdk8rX4 Qtd9T9XPIiyyYKH4Ws6v5SMm+wXjigTr1qkllk2RvlZ/05ZK5w7FmUpEmFpoGOjD18xFgA4P4yaO DBevFEYe3RAdhKRDs/BVZTZj4unYFBCm8OA8O/SkK0TsBArmo2Qp6GvKYBqUhEpBXElI01e+LC/4 ZRo2YRPGdLFa44u2PPxSeDC0c6nUhKuUZmOp9CI88kP+imGQhxKsekSDln6WEZkqmFatFsWbb7yb epIbzaibirCgSxfCEX1Ykr2Uo5bsSEVb/MxDpVdEEK75QAJ+FV9k5Rq8lAmdkgdFkFY56zgrcMQZ y3hNb0q+yV+OiYfHfG5cRj9drAYFlpMMaewwT9poAL6Fty3W+YOL4CRD6jLLA9uBL403I3EmrWvK pDhwtiuzhI/krCoKvGyblktkLCQsgDFZyUFIfaXYWY5UQmR0cOMA1STkkVbUQe8kWqlLFFfxMJpy Y2WqsZcuXfKA6FxQ5DT1ZBjkETcWwurIVLnTMXrKRHFMRbHx6VKtW1x3lZWVMyX5TlQn/z8E86vk hRz00fuy8L9QAzLUtGAVURqtLfN/StJ/Zyst7IRZkCWaNXF9xXIln2+wVPdoSvLGTHVZF4ju/qZF /c86Jw7Uq6pvoF3CHuFLf6OBDSVTAZvtM8+yfro+ul7qmqhKjtSZqRBpfHycl175IJactp+dTaI/ fu1jLRGZFrMWNsSKXbQUpKNepaV1XmPH64nLtXpGux4D49ZHH4yG1p2iV7VeDLye/frqnc2swzVT omLTXb8dt+rXMjxx+93x6kfT9QAaa3v56s954ciy3+aFcF21lxxtnW8s1S4snjheK4uZ4oxYfd2N Y8dNV4qnHn4gvndixE9//IPYfJ0VvR6YN9FM1sNu1/3p8rjmr69FF735Yu4nb8RxR54cgwbtEb26 aMeEOdPjKb0p51fX/Dm2lfNG+fDM4sTR78YVOFHS4cg33vSWKUvmzorfae32HVcMiM02W0ey62G7 BXPjvfc+jlHjZvgBCN6cM23su3HUgcdEvwE9tL1FfcyetSDmyKlrnDYlfq7NeG+8bKXYaGM9gKX1 yuM+HRnvfjROy4baaO1gO7328LX42TnDPeLGxsgd5US6n8d2XPqpK9Yp04ZTzqU0qQcel9PRjpTs hDde0P/QfvLPpxYnmmmbisWelHeUTzGUdpsYR5OihOIXGE8ptkUQkUOHHAiABmnQRbq0cV35A67h oakP8iGTTkWDP30RiKBzeVS1/ooo8NMfIFkf8XGcjm3dWVZud2a8QgCo+sCET3aemT3LSYdn4WDT HOwMEq+QmClkGdlDQ86sUs2jouGhUhLBE//qNGnAkCQdHCoajqjiWmas4JInZEyqUo4aCOKQBVzj KBWY5t31nZR8BAO8mYtITd6SWhUYl86r5GajVfMVNHEE8JwueIzOe7JB1/nQgRYKUAR1XMGUMSjC xohOcGj4VPqFdstgvQqOsrIOhVIomT/Ayjo0iiNNVMtzIQogsXiMnA93RR211syNMCRwMpBXP8ob s7PDpzOOZENCON3kBAhPvh5qhmqVZWhAgX/kgF++eqZKgFgLmGzcwZAMlV2AA/2v5DmJWldFLy3t gWTbXNEVFDnnqD/Offcumdx9kh13MCQiEpCcVnwli+XXAyolWB7BJl1kzMCR1/coAc053nQqCNc1 wSzUukP2gZqnO/b/U5lXJP9Dh6IPbB6Z/dM58ZwvC/96DWADOC20VdQZZhE4xw7+/7SF/7ecFlsp NsKRm+LWWsPawHszWQmvYNuuTN927xjqM0H/6uR8k0y7QAx1V+dc2eZ04k5asI5tQZB6Sigdn5Fk q4BULG27yVfthxKIZ4aC9b8ZeFVf+xjz2psxQetuB3pvtiXxzugJ0dhKTpPbsSZND3aPno1z4/Lf XR7rrXBubLLm8tG1e89YPG963HnrvdFvvS1jzV7tYmm3gbFa344xjqnNdXvHAo1Kvf3eF7HRNptE Bzlgi+QADbvn3rj4kjujSWuoyYHrlxo+l6EE5EGsd194Pq5pnOFlNO8M/1Q6yjXDPJU6ZdTr8ePT fq69OLXEpn5hjNNWJ53lHL348LB49ennYj2tv1t5YK9oEK933x4R46bOU9nIOdKWIjfc8sdYtYc2 Fp47Tds1/Toeem1SfOeYk2Oz6pVW06dOjLGzW+nBsbfjgnNftYraSD9s8UQL0FplM2XClzFs7Fhd qF2QRnGk6lTuXpokGG7kG+sXxVg9CSuzzDJQ3nmDDG/DmDLhi3hk3Cjj4qSQJ5EQrKampZNuXRnH zFJ0mbdseihAJaGrWvtO25SMdMNQSl5wCtiQ4ZSefba6S7VpJp8gShet0tcaH97JQ4mWn2vKCVz6 mlp8xQ7HzTDSiWUTbOHn+BZy2a4VSd6xXWb4DCta5Nd5VjrH4sxBo4SWdAusB7pEpy1OhDshFFKF 0jA4pspQ3vk4H6kMBNSXxiQrlpjbKUgipTIWWjZaFK/AuQURPqEI6DyLBteM4nno0ZqDlRwS4tCl AAWS58J3ZkggDYI6wh/eDOsbnt7Y31S4AQVHoJAsZ8FDOp3n/W4WTO3OT4VZ5DVyoQlTf5VOoyRZ 9W/9LGGBqtIwaN7DanwYKBRdkIcGhpwVj6PExsC1uw3nFWeTE5D4Qj3PHUGao+Crj+B8aaUmPIZT 8MkgcqBl60f4fhegAaQzSFMOgitlSCRqJNAIl3jwCTh6zpaOVKzi4Lk8ZSd2fCRCaVhh5fwXoiJD ufH2DiU4Dbrkx84cevW1D46HRms9UOGbEHmlQCjK+IV+0TEwxS6AYsQrdcxV0QN5qGxGMlgOqCIX tm6uSJR8ONbyL8ae6gWPSi95UbmBdcClteVXOvW5YumYAbMMOhLQLXLMnDotJk2cFF30YEzRd0L8 1/6RmXpbp8aXO39+dCRt1TATXH//ayyWYf8XNFActgY57WwYy0u+WR/LQnd3Aq5o/wUG/wFU24ra gtziQu8WVufeTk+lyyD9YNaiBYtsu/mWkcrcW8hnW5KBuyrI7lzdXYGyrUzbV7rieKLO7YXw80Yx 6yXTYCYguV3fBIuz1fzGFBMk1TkDBvw67fX00pOPRtuZI2NJw8L44NOpsWjW7Pi38y+JlXpqXdn8 2fHcu6Oi1aK2cfFPztUDV40xc9r0mKn3iS5+fXgctN9RsfVWG2objtCbaz6MT0dP8Wud6iR0k7bU mlnfPo6qdNlKi/t/fcapMbXryjGwt544HTMhxn45XY4OT/wnUGlnuKKz5sG4Vx59QltOPWw46iFP 46Nb2sv6+fPivjseAFoZlrNHH6I+mwfhmhrmx7tvvBVvvKKRT3govr3KhVmUOTNnx9S5rWKnjQYK VxvB3313XLKgXs4SWzARGuO+e4fFDLW1HbUtEX2T9UoSNwjWYz64V6dRN+SmnaJPkGqr9hZgAm1J 1TKqzbPDo7bLcTit6s8qcj5S3gTS3aa54BVREkjMYrRMtLbwx6SQ0QMTtOXKs7sEwRLHdLrxBAPd 9E0yrnYuGi4DAZpFBesr6Ft+bpAqXnK40A04mGCxPejjJFsuyVLaZtMWTT7lRoQjzMhv6XNNjyzD SInYMmcEwyi+wJDgOsF0rT4lvtWAFTZ3Xcq6oWghwYTgilExJZ7MeqjQZwbJzBJPun4EK0LAZkRc de40hMQ4oCtDIIDrDOrcuBylRG8BAQy0FefhaZ14exJypPiiDC655ug7Ol0SHK1/jx5ChAgf8sSF 0SKuRk+wacKSSLpHPvPVsaWO7DQIttAhzT02vBR4Q8CAtdaMTfVy3vGjP9Ow8QTN/6fRWmfSB0It Wdo2Nt5y/VhhuS4x5uMR8eFoLXoVnA2AWzaRTdJZeKWM4GHbF52cViOvEiGV3mwIjhSu5ElZZQhV OUMj6aOINDRg1FyLf8Ijqz9VvjiHh+9WkQ1MlSuBLFGViTO4ItK5Ai7pWQZD6w9ABfSdCIpShQAX OOtbdmDdGhjaScdGDV/lD74E6ooyV0jVYIttWafACaFRD43Q8BXoAgMdXohNQHXFLtC1ZUNU4adz m7bhdZMlCzoSOFgu9EcBKgYnmRfT00hq4YKIE1chgME5SDqstslasdXWm+n1Y3pgoQYD5f9CEGns h0a1Q7tOWkStHd21dUwnNew8UY0Tx5PDORLxX+CzDPU/pQHaR9pe3qSyaOFC72i/aP4ibdkwS08q svUQI3CM2v6nyP+HkWhPafvqtK1PV23w3UkL6jt17aRNWTvHu5+NjgcG36etgCbLqaMWZWfpOqI6 iF2ry1JdS/vP+iwRXEmxc8QhPc0+F5brwvGqIsKHP7ZPPfRRdcPJ9A1SQqmz1glx1BMAfGzSk571 uWm56LTHOZJtL9K7Q2mb2WWhPW9WENpiHh5DGuXVS1lEA34NuvmWtr18xGuqVTY8nMbDcQtad48r bpFaj98AAEAASURBVLshjv7WGrFkzpdx6L6Hx99HzPUaL2DRG+047ZX7OBgo0J6UPCK/05DZjYWO 3PxVsOSfJI/UGwR6xFQkKrg8pD7YOqTXgLXi5xefHrvtsInWV+dG7vXa1WCSplfvvv2u+NMNjzkf RQ6oFfYm/rU/7wdntsiT/FFxy+B2XUmeHSnEAC1wOnc7VpNZ8ro8k17NycrLxAMHB0lH20LpGyQD eitts48SyB8E07f0k8BlOSgaekrHnoCxPDotspMf2JfRMl9XebH9ym5s5lWcaQkDvnwJZXCj5JU0 01ea4clzle9iFy3ToVHyijBFRtuNTId64RWCdOJULhcIzC1D5cSRiypO3PgaDmI1A7RiwKaSwVYo GJ+YOAipZAJiLgTFIbRxFIeRA+PKmppzGryBIciGDWPayAtdPsIDhoIqDoQR9Ie8hneEoCpZgC/n VqwpSCZVTOL52QEhQ7Cv8kU8wQ1SCmcZSjxp5K8goIZTzjs3Ttxz4xj10mOx7+HnxYwGPPB0Qp3n xobosbpevn7TVbG67thu+/VP4kd/etrrDKzjio95QFwyZigGIyb6urOlwaylV1IgD/nG6K3Egl01 GoWa0jx9CzFlOvMhGlxWAb0RfKwSXLbEKammByFXqjK0RyPRlOKLvo0nHPLIaELCpMzej62SN8sb rsDmMLgNXtdJwxlE4pTcl4WLZKoykqkmo7/MCXdVRqpiiv2RD/ByFE71g7yiOwfp35lVFPqgIde1 nc+KDtEE8EjjyOiB12qoM2jVrT7abrooWq+ku9lOYAqukrMIhNqn1r0XT3Yc6RHbWrLiiySlaL5+ DW9Cic+rQlnxZEG/Lg3dYqX5a8b687RpaeOKsbR71vs68uM7269TKJSWHf+7NIAN4tzjuM2ZOUf7 Zn0ZHy56I75oGhnzWs2xHbncVTSldP6/2gFwBQdroOVsGb56lfbiTk620m5R++i7aPn4xtxNY83F 60VjT43waIf9em2LRH2lwcBGTYPLyvZbtkd06tmJ0jmoRghGhi8ctYngKL1WF0SItqElPm2cQGqd MujA8w/n5O3/vBbRDtq/qD2yAazAP9On7V0vhUUGlU5cgagoub1sp5EpgqnyJ5lIL/0Kb5kgtOnW K7r36C5dLNBULdtMpYNtvsLLtrySV9emIY5uMxFBGaPTh4VnjIBARmeYc3RG4DyPVbaVN/rSzBsp jKDPnPxJnHH8GdGnX79YbbX+0U6e8dRJGg2cMCNmz1mgmzQelAMpZajUA3VI1EJpa+0n1IASJvET lHIAVu4qKqoJY3r0LQgLfkUDeqXNcz6V7gGFNA0r3DaEPJVIPoipbZILk8s2q9Ao5eK+TiDE+yOh 2OGBdpw4a1NH5IJP4aUo2ZxoFnnQP+mw09EOYcXbtEGAjz5AUXY8KUt/ZvvVNfIDC5Eil5HAq2QA xgF2+lg3Sss+WzSqeE1BGozxwKwwFSKAfAiuiDCU8I5D6VwrlFEoDJRKV6lCSIIBmsISXpledpxQ LYiOVoI7YktkmlaEzngCFlx277Z8pmkK/CkqeYBExUYWx1ejSsid0MitxsIyc5a4ViLnFV0cMfAJ ps05wArFSCiw5Ks40SvnVDbukq0r4CEkpJSQK72NoHrlympbbhWbr7t8PKanNdvqCc5iCIsk92Y7 7ijHLV+1hQNFI1XKQsWW8og0LgDrDexkEK9gnmKYxZMnbOAIfT5kh47a5cE1+qgagpQwMwu8aSG1 onAp7FBxp1H4KA6O1p1OfXRqxd8Gq3TpAFrQ4I4YGTDkovsKxTBOJG8wreAqNorUlzR9wC0OP0Xm cjNG4sHReSB/Gt2CnDdW1GXmy8A1GbLBI8UAyd+8hK4ydWMrmVMsSYAs+vPUgUi5kahoI1+xI0Ul nHTRRsKT/0xXo6zF3dF7UbQ/eF606qeypH1Hzlo+8oxLzpqW1sf8YDuZzONXU4HKeM4yFIivx5f0 rx5nxvT4YunnMXbB57HntMNj+VYrVutSNDKHHuXALQv/cxqgXtOmMUKyYO68+HLa6Hhswd0xvm6M q6ws6mvCfL288xp7I5RUn9GY5fer8cWGAP5nZlPFkzQpJsTIJR/EjtP2jo2bdtDWFdO1b+NCtfPU +WwjuUFx+88RTuDLlopM5Ug98g0nhAusRRAE18IxquIIpf2APul83J6AL1jTqnEhTj/VP24YMeUa TcuiOLUhZp19a9JyTDpQwja1cgWsiIgshEVefULdksXx+jNPRPvJ/WLO7Bnx2YR5fudkaT883Ws5 ELFZB2ZTxZMP9y/q8+DlJSIWOOWzswBreFa8sRGfV2UKDNQJ2JC+cgS5MW2KKZO+jInjv7QzQL/g 6WQ5qrCHBm01rb11ScP6tWAY0XYf76w36wDZCS4r8kefr4+lqdlbQmV2BW9+uiKPFX5i6UppdlI5 8pFdFecx+3Hhm6UFSZvA9pznxLE/YMrNclr3KEU8i66rS7fbTeogoeG+WzDWhVhYG5WdmC+dkb7F lmr9EeJYrqosC3GzrOgBonjyxdfw1ZG40p+QRl/SrDXKUjuAVA4hcIxQe5NeMkRHRgApCxGl5Z2D O3AL1iwExoMgDDEL27iZeQS0DkTMIrkAKK+8SlgQMPBS6AhcQjOEcCxbc0zKRr6lhKogjAd9vEiY K7TAqK7gTjKAQOS5nUkuqriiNOD4kV7ijFPyypGvFFlkMgfoSK4M5ajp00V68bFepH7w/tvEo6/+ VbexnYxHx966XY/4zqCdNZS/QB2n4o2cOeC1ZfUqtO69ukUdHSnrGebMVUGyXoIqIodAd+m8BL5r 146Slcq7JOaq4V+qBwz8zlPlg7UzXfVuuTq9Eguker3JYc7Cek2baaPciuNiTdN06dZNcar0CvVa iDpLd2gJ4yiXGXsYdtUbJOrkuPK6mtmShzUYHdQwMKWTKpL9sI+dYLvpRcvtkF15nT2bkQNNS8gB hS251MG6KGVd7KTIlerUVVVxkKSkmUZVBolHmYgDjZSI61ShRYUC1zaF/XJOegbwadC567JduAgU Zxj9tYAFtzSqYAPaIrnioXgAnZKd8lKtqWn7rQXRqrcEYyNi8xBchYzMDoWYEijTmqBfS/f2Mi2S U/ctI0D+vwTdKLQR0y/afBpvLXw+esw9UNNi2im9g14P9H9BW5b036QBGQQPJrDGbZ4eVnl50eMx ts2oaN/E6I6M4v9oL5XB1Ozj69egJr6atOYg+KxWRILcnNh81XzGAoMGfYYvfSK6zuwbMybNtry+ oTEJ6pBOlA93wkKlnuBQ0KkCQt+RbKhxOhU86VwQwyc7LiWSrk/L4HZZlRJ6Wb+aoVPShKeeu+Ov KrnlEiGcPJbgmGUhrSO4hBKVV8Rnitv5UlEN11rtWn3cce01cYfajEb9WMPGqwObaSVhtzmFuLJv B0JQpgkHx0nebLCy/VC8b+JLPopA5i2tWFAdpT/673TCJL8aMeimEwgvjYV5RE8IFay1KiEzTy0I 65T8ttT5V2EyrcDgUBf96KTWJma5WFDT4loSuk2xXcDSSkptZ5k2l0HLsvFNNPBqp5DF+UR2Ssrf PJqeTpOWUhk5IpI4lU2Nh4kX/kBknrJMcsQMkJYheelf/C2DmVW4WRCmAw6XpT4UWYgv5zV8wRG4 rgVwEVgheaq+IIy+tRsd0lSnPPJG4RdvlREaAsaQrgGEyLgcLRlBpimzwqEzTcMhHTAqJZ5tVhoy 0FoKLB4lwldyWWA6SmhQGKCT5ozJgBEceKekCEA4Djh74UpH3ApbmavORIxRu6y4GDV8DJh8JSO0 KayiSJRh+RRflFbSuHuykbZIQxaMMfVA1osUSnBhiCk80IHugBZO+izentUhdtx7r1jl8iExdo5e PiyHpklbQay82UZaWLpyvPHcw7HeLgcIPWXAcWvVvU+cfvIxccwRe2nfHT3hpD2LnhhyX/z60lti 4uzFot8UA1ZbK356/o9inx03ll7kdM2fHkP/endcdvWQmLmAJ8FaxaDvHxM/OvHQWKVvV+tr5Nuv xB9/Pzgef2WkF8EuXdomDjz2e3HK8QfHGgN4GbIeAx8/Su9ZvSFue2C4npbSNICmd+uWGxA/POUH cdQhu8RyXfQk0/w5MfRuvVh+bJf4/n4rx2mn/SbG6d15yNW6Z78444fH6l2pe0TPTnqoQM7pI/fe Hb/+3V0xRRtGskM5WnPZo0+VOw0NxoqhujwUjyzlgCMNAlio2U/DquwAqcxP58JVeaRdU4ET3iec c1MieFcaaOk2RiwzzgumIZY4tsMk4TifKlnkHeBBMBzWCKoTM546lHeOOG/i27c+2iyvo3ZWNw8z VsVs0SlAr9AvrF2BFZ91UicVHpZCsH3rWFXfKhawStAqptAr7NLmVZ/UFIxp+jhmah+prou6yYGT k1k9vGAGy/7+xzTAbAbO28T54+Lzpk803VU5bpKglOd/xl7SEmSpxSRkgLS0Ntoqd4U+cc22kjaG wWJO2PqCVgtixIK3omFyd91PNnqNJBjZH6T9Uofd4cABRHBdaTkm26w3Jgp1wYur0mp1WUlc+89I 1bXqHTbsdle0TVdJbqdFh3qgmqc/cajgIAM5fvxzzc9OBbNACqW6uH1JxqZhOoYAJilkslokbogV 2ifTin4FrIP7EWULNOovszUOkBEqS0HSoU1ZnSahi4PHtInLrKKPzloG05cy0D/5Qi/um8QHOyEv JeSIoKEcS14STxDCy+ukX3RQw1d04e2jyNZ0kZy/ck2fmm1fhVfJnwVS8VI+TR/aktX9utpgyizz 1Sw7GbN8xiGHBDSanyI/yOgAI8KvQQbswrapeOerBV/3FdAABiKYjVRJm0uZec9BHSFZ7KwcvYk0 QLU0ZKRWVTZZq2yVjIaEFtSSXtGhaUIqkzJdF7YWxZOnAkvm9XL67CwLgsVwgVbMhOCMCKAotKJi JhArnW6+zL4yHBwjs9cfRPmZeR6tYPdQmQCPEkomMDRCUTzn8HIBimBxviBjA0CJ+tFgZGUQgs65 5ikmCgPaRQHlnEK1KZBXhEYkBcshoSkM4swXWmREONxzcJ6FBWIJijUtwTC+iYEtnRN/e/Dp2OHf To29vrl2XPX4h36qqF6kd9pz7+jRNCmG6QX1G+1xgOCT5pK6nvGLP1waJ++7cTx13z3x3FujY+A6 G8TRx5wY6646QI99/yKmNPWMi/742zhw055x4+Db4vMJc2Kjb+4Qx55xdvTSI1E/OO/W2GLQ0XHF pT+Kj195Nn4z+KXo0H35OOyo78SNN60RB+11TAz/bHoccMIP4/pLTor3hj8Tf7jt1Whs0yn2+86g uPiqi2PW5O/FvS+O1mtjesQFf7gkTthro3jl6cfiRr27r2O/leLIo06JIzrpqcXGCRqlk0OG891F LzDWRo/f3+0b8biedHrhvXGx6robxlEnnhrrSPZDj/ttzJE1ugxUgG50rTMXYVGky9UjqmgFVVZl kwCVzqtD+lGUikpTjhL7qGUcGpVO9Uk7S74uJMpVxJr0Wi6PuOncD2qIBji2ATE2W+wLGipcr9vR NTZR7IJUiwIT4SAvNLDTRhw3XbfuJoecZ+h1SahE1xnYzaFFdXAkufpn4evxNbwK/P9E37oUweb0 VjF/qd5zq4002f6h1LN/xnNZ3H+fBrAlHjxi+43piybpKfV6bdlAKWWBNpfXV+2hVu6VaF+3C6IT 5ut4urZdJ+X8/ypMsRVoNPNvpbW7k2PJ9EbZip52ZFWmG08Y5ZS73y/sNj7rAGy4UfdibsVTNwiu XRUu+SertNlIQTT8uUlDTuJ8g6f66X24gKtwSjsBFHCEcnNlJ1JwRUYf1a6DSih1OK/IZ8pGh+7B BcMmL6iTDg3qNiNc2rbBgkLH8giGaS4aHM8yIBF5cV9gju5GifZIkrOXwpg3+VWBOe/SFZ822gWf NM4rYpBMHQGv4PwIjy7LkLAtOqpgnVc1jMhiWslWSOhdfVUFn/mAjspTDmpLXZmXsZvL0XIjA4QU avnQObbnzdELEYlb+BQ8ri2E8NE7gybQKulKVBAMeeLIlfNRlYtoQ4KHUGCjEkg/ALgqT3kkQj9X CFECh49hhAeyzh3PUR9ms1I+4SkAw6eM/hYHsUrVIeWzsNV5wS96LXQKX2NQdvAvoTqlXLyWTtee TVP5etqUkTKLIiSfK8Gh4g8xjBRrKw6VM1cBUWmcUYQUrIWBohiBmwpGH8UAMs2VDaBEq5jqQJR7 3awcpiHc4nwhC8q0mIKFUans1hOyVuvfKr2lLl1YFX0KhSyV9VzwtBwQrDKuAyis5XAegQVOcZZF R4IdDxJahMw74MRr3ZsWh77zj1fi42knxX7f3i1ufvQDib0k2vVaPg4atG18+OLf4v1Rk9UEEpjm XBLb7rlvnLTvJnHXpb+MH1/611jMHZq4/+PzqXHrL4+Nw3a+L679uG1ss+mq8cT9V8QPz/xzdNaT YK1vHKLFxLfLMdsplv/j3bHeDttH+8ap8aPTLorXPp6mzf0inn13dDx8x7/FvjuuGS+MWhjfPfpg ber4Whxz9FkxaoZGh7Tp471//yCGPzU4tt/2G3HbU5/E1rvuHMfKcXvuzqvj+z+9Xu9j1dC87rof e/q9uP+ui6OXpmbJ7eL6hthu7/3kuK0XN//y/DjnT9rgUppk5dvrY2fG4PMOi0N2HhbXPPGBnD2N yIHlr0pUNobO01aUWykbfbsRAwZ70sd2alhsqQKq4SldI4XA6k+xBGFBDGo0xJzpFBsi1o2WGFMT iDVsQVUsMlkIQ4sEcCAqgOtz80I6LolLWd1/Cdx3eGQEXDpkTvNPsBUxoghOy9P8z/S0J+hX8NWh ZLNGpXbSkkaL8xr96kTw6KtB5cm03Vd11wJv2el/uwboCHCeqVueCbHxlwIt5VWuK3Fq5VnEy/Sv 2EsLlK/YS2V7wNbsqpDR0fG0/U5XBPAy7wY9xblo9txcomAa1BIJoq9ZcVS8bcnp3FRRD7O/IJ70 5AlvOt0KWQRq4ioKoq6TiuQSlUCHUGaNnFfRY3S+4Fp1gjEJHWvxINJPQFcfnB3zJl7B7b1koWkh uP8TDGuP2LScm8P6ejp08IXLQEPFhOt2nbpGv35do3Wj9kAbP1N0MpeG1R/Z9Ogpfa+Ylwe06FcI htZpqqPcLKrZEF/kRB7rA9kFl+dGtRxkzf2Sxco8VoQNr1TjmI+VKbSv6cB6TBWbJ3yTF/yUQGaE U3gX/bl/rhq9XLYjOOeFEkrZoQMxj0LqvOVgC3Iajlk79IuORI96AS/42D9wvtNmSjxC8bAAsrnM 4AM9cIQrpcAs8yEgx5GPCs55MkaFr3Nv/1QllDyCx6fQLSNwplezPxG2jepY0S/8jNeCGeWVtIrC xdgqbonLjGKVrkNrK82abC4EC4bCwIN/VUmyxqA4MibiFLqk8kvtgeeKAtF5oeHXb5kGxAQLGh8V hs9RKHFCNjnF+y6JI0wSoblwNS9omZjClSDIlpVVgChUlYvsWEk6QR7yyMcMGAkTKPHm67yowsPH cSm7X7ZcCeU7L3InGN81Iq9/5CRpmR9x5J3YKn9prsTr6Z8vP42hGq3afOddYoPVesVC7buz7pbf jM1W7haPDnkqZjV6pxpREU3la9cDdtd75kbGbUOfiy69+0f/vn1jgF7p8vLf/h4jpy2O7fbYKlpN nxOzZjfopcQ7x0mH7RQD+vWMjnUNcclZ58YPfnJNzJyvzSInaKfwtn3iR8cfGlttsGos17d7fPDS M3HIISfFvc9/EV30tNQ9V18ZJ597eczQvkX9+/aJlVdbM7bcbH3Pq9d176Ul861ijS220ALd6XH5 1UNj3hKtsevUIbp36RIjXnladD7SyFxOPbTWo/e7HbBH1E8eEbc9PDy69e4Xffv1jgF9usYLw56M L2Y3xdY7bxKttK9dTY/SW61Bsk1gV9hZ6rIyrixXRVFUNHo0OGwmqYEz03JChZIPK+jCdlJVNMqI azUM5WEGWwJ0REHQsheGxcQfe9LPjazSMTyXL/H62OEzhsEdV+wYOjZUjqJVpvltd6JVm+6BJj/k b/nD3P7JL/XQIq3CKfGpl6/Rakm3OkcOfuYt/uiRKkJdoSOiE7FeLP+yv/8xDVTlkuWgElCZUDZf L6+v2IrS/5mtEFfswunAmZ4SqjSxsy0Szwhf0s2jbzYUbxkMCJ9Mo040spXJfK3TdX0ovJQObdVJ Au2ln0RlaYISVPUUlEa9qjoinWYtIqOuOPqj3nPun/4gJ1yxFarqOx+3tdDLIM4JJ1jqsic9wKva 4sKvBm1aiQOu5SAv/gmKI3SAkwDst7fungfEkIf/EkPuvDjW7qeXx9P2KD0rUFJepF2ATrzw/Hjq yb/GNZcdr6QG65jUvGeregUYKnCwUyYetTbHkRIelaityrYk9ee+yU0t9RRHhEw2B9dr4RFNv8c6 5HqN5NoxpPwohBYoru+6UWjQshii0zHCWaKNIEJ/+kF3sdZuN8g5Yj0z58xWOBhQYMhdnduhVVvi a4GBTxlQhtYAcPpi66VsnJZqEbEkXWT1ur3Khtx2Q6sFX2i4vRYeZeK+A/GRqVxLX8RjevlWEAHU sqATI0pHOrosEEHReS4iVTAf2TbBafCozr2NjDovlZb9EQGIbNI0K2hXuOBI0yLCT+fkB1L8ANYR +hzh5qVh0hdlKEcun5YsOybDyMoWIMjcaTCpyNehImYhiIAoONU5WsmMVoIAUqVLZMvDn0fdqrTU vwpWGSqFUQT3sTBzxpIXcKbrY4qMwh0PXQrB/LKwanQVZ3lNJg0S4wHWBiT5GzXq5Q5bsQTkzqBj JQtx5CE3LlS886jEkq5ry9BCb230aOGTDz4aZx7y89h/5/XjhY+fjz0O3DtazRgVQ1/8MNqtu12N D4XTS69qadtjlbj9ob9q1IrmKEOTpgMH9G4fC7ouF60mj4zL/nRj/Obc78cVt98U82ZOi7dfezUe e+TpuHvo8KhXbXj2oTvikZ3XjkEn5HvwRn82Ml549vm4774n4r1RvLZFMM++Eod89zsx7OJfxcB+ vfSouzZu1IML7TRcztO0rCFcaZUB0ThDz5vNm593itQ0KrbK4IP3xkbssoEF5G6rZxc9idV7jbjn kXukkjRyEpnK7N+9LiZ37RmdFO3GT/CUSdlGhLLi4xEtkFC72FA+We4Z6fKnYaYcsAPK3+BoKuWi nKDlUix2yNE004aa7Qg8yYK80n8NF3RSRB9YT6PrOmUBJ0PNxgRTaBpGyaiKYBFEzx2Lrot51DRE RgkG1PFr18UK1GQbTIA+FvxCr0qsHdxw66rU1X8KD3LhV8NcdvIv0UAph6qYv15e5bpWXv8he8HG CXQbafMt81hsxXFKTptzF1OzV/qaer1OakmjNnVWH8FKgMoUTddTm2o3PGpBveFjGUUQWOXPKIrj zGmkKxJYE6M+C87tKEdiEVyViRs7O5cFRqmufwBBmCB6XLYMKUOJqfgWmiKOLMjsGRnhu76InklK ho5desaG660tAmvHvnsOjfdvej7qqq1CkBknrMfyK8bu39o6OmtvRj/spbbTfYuwLCN5F48GHVl+ weuwlA1U4kCfslCOMW8vWKrZjHo9Idaxox4gAoggQBwnlMGypwatm+atDLyXFBVSuqxDrG9YGt11 s7/i8nqNl6Z0JoyfEpMnz/KrrUo7sEQOm+Z1o5deej+wb4+YNWlGTNATxKG3UnTr0DbmzZ3vvLPR fAdthXLgkXvGlpuuFd3qlsQn738YQ4c9G6PHz9YegMqjeNuZs94kJm1zlS/0zo8sZlkjfubHo2/O llPJoUJzGjpL/dFAEZ+0gIIgeklezTZgXsKzSnVM3kmzWIVtC7mkf9spwvJTwCcoI7r2SyontZRj gXN5GgM5VFPIo/jVQjmFD5HkmRPidSywdqiraB1qdGoyCh83xfkEQDw8S+eOs0JgupGAEO5gZEiS qsaMigMEnUcZeUBFdHgYbioJ8FS4+3Zl3KNX9t5FTp9aUAbSkCqqkhBlpTOZGS3DoOS57HFiVaSo 5iXGdriI8h2eaLhAdNeS+VOKvsjXVPWcyEEaRuQKi20gt+JM2pVZOKAqjSOiQ8MF4GxUsBgIaVAQ nB0PXZSyIr693t/2/puvxhtjZ8de++8R1z32ZRyw00bx+tM3x2fjZsV66wtIAfKu0Kq888aNiRsG 36vNIHl9S6bzIMNiVaaJ2vR3aYe6GHrDdfHmM0/FbrttF+ussUpstcPW8Zsr9ol99rw3jjv9TzFl 9Mg47rBjYpudt4utNlkn1t9gvfjOcVqnJmftjJPOjAdemxbX3XJt7LPFwPj70EfisQdGxczpU2LE pKa4/Mp/01OlNC7cefJUa+fKqHVueaQ/HdtorVvqFz1omF/TlnP1LtTBf3kgFrVpn7Jbj3kXOP6z T2OpHld3xZXCfJdHBREf9AhRP+IvjRZnybmHmb/EAy+2KEanFB96EzHdyFAuiiQO+1XAZsApFcIY ppVlBkxOwbJ+RxemK1p4XpS/DrBUQqZzaqOwGFwZyPbhc+LhafGcV0jRMSytvULLRld1ikrU1wFd EP7ZtZOq9ArGVMibkWpL6mroVXTygWYBrJ2Qz5SlllSQlh3/NRpQQZQOsAnDcfjP2Mu/L1Go4KrY QHTwZjaM4shCgJZbIBtXuyi2wDXzp63P0KiHKiJ4Ol5AiKe6kG151RBSf/SFnt+cYJq6dpzszUii 7wpfmaRtGIGULnyP3jBKAX394UgympQNMu2S2nmllM4bqIqsj66LCJBQnJiRHQc9pOW+BTnVbnhT epLFjnwUuZSoSMmjuElfTAtec88Lt7598L5x450vxWwcMLcRqn9abrLm5tvGOv07afeAxdG523LR U/SnS0jYsJaxo947OnCl/sGbob4cNzkmT5Pzo+UjtC8Nekl9zxVXj28fuEusv9bAWKo1qCPeeT8e f/zZmKBXY7VV39WgV3ltt8eusfuOm0TfXh1j4riJ8eLTT8eLb45SG6NlKHrzw9L2HeN7J50YZxy3 X/TiYTHJq5eTxv3X3hi/uvIBrW8lSw2aFVk5zvv1j+PgvbbWUhk54+ru337+Me0r2Cv2W79nHHnQ CfH+1CXRXXCXD/5d7LXN6vH5iA/0Zom62Pfbg+Low/eK733v3Hhfy2Hq6pQB2m/PatD+ViWsaARw 2+t2LXXr9ltJtM+c1/RtYRFYOO4Tmo+UAZ/cbF4AKissFn+B8mN0rgmjxUQEx8Mk5gOdGg8EUtDB LaZgbSdEY3c6MAfmSznZyOU+RBHFyaOsyJPxIOUIpeNhVdcSTfBa+iB8sQa88muAUHBeOGTf6Sho YigkV0d4ks+kIz0pjyxtySVWMM5vWphRwdZPRpnOE6JA0AdlKBn4CsEotCqOlFIxE5oCUqVjyBIC 5OIrgQh+KQR0yGwJDBOnUppxs/IVLMHzERLxmUkyLHouDB2JF0EbSdWZw9JrFsSPrSXMgzjwkKHQ lA7SuycfaWg2GNFLWUEyceMI2qKjjqIT50d3YA0auRry0Ctx2UlbxnEnzok1+kTcpAcZFrNZLDQU wMHWpk3TfmDf6BLDhg6LD8cv1AiZZNSdWNte/eOkHxwUbcZ9HD3X/EacdfKgeOqWm+L6q27ynV47 3TWdfO6Fcf4p+8dWv78z2hy+R2zRZUZc8ud74plHn9LrUOpilbU3jXuHXBXfO3Dn+HTBiNh9i1Xj pl+eEz/98yPKv2RRRe609jd195hrx5o0GvnliC+izWEbxiYr9YqR48d5qxAa17ba9mT7rXQ3ynSj dMfdl2Uf2DqGPPBQfD6lXjuba58aLYRv32dg/PAHg7TL98hYrDy2E6x15PLhPHWJH2GdoUPSKA/K V/rJ+Cxrw1lpVhxntfB1GyQBWlQGZGQRLhZk55AW26HCUpLXWDhOMlVpwLcMyEU5N0ennOU60wXg bAGYsGTTp9iWcoUMjYrUItRMKAToFBxAgE5uAtlGb+SAqN54WbtDxPGkE5GFqu1qiZcUyM+iJYt0 89JKrwHSjus1XiU9WeTVsv//DRrwbEqLcmLNGG2v1/yqiJvLsBhUy3Kv7IVOTYvdcXha2gv2hMO+ uHFxdKjrFt079Io+HXpHOzGdumhyzFo0M2brfZod9KqoQhWd0C5iv3asiKgSaVYRVSQdLHYle+k3 MkX/1HvZoXEr0SFj2iJE60sdzU4zGVAz3QbAuyIEvPNh3gnnDp9Y8S6YVcthxGxPjCZsEDOV0ULq IXjZdScNeBLoNIFpI+foHbWFG2+wdWyndvPBf4zRUpW84WtY2i723GvbWDBxbHw6cYna987R3rNX rBFsip0OPDDOP/f4WEsvckdNjfNnxc3XDI4/XT9MdXNJ9Fx1o7j9zj/GpgO76CXwI6JN5+XisCMP iyMG/S2OPuGXMXZm2zjmnHPiNz/aP2aO/0IPqM2KnfbYM045+bD45Y/PjOsefFf6XxL7nXhSXHb2 EfH8/ffFXY8+H3Mb28ago46Jo84+Kz764JO48bG3NZLWIy6+5rI4aPvV46G77oxhj78c7XquEiec 9L04fp3+MX/8R8HL8uqb6uKEC86OvbYeEJf8+Icx+ME3NRUbsf7Oe8Yt110Ul5x/ZAw6/o/SZW5W LJRaAeHLuLuVTlv2vai06LUGLDT8A1ovyhSfwk5Y6SOyMKFOcgbsS8RsFxUPTMI3/lWTbjuQrWEX 8AXFgaOuCV+FSdvEj2ilukBa4dcSrvRLtrKKJvaIzRpHzDJasQwmwNwMK2BguTFRtH0P8XE9Idl5 quRyfFqkHTlRRTX0AEWupOvcJZLyKkHEVBB2WojQFR++TFdRgYHwNaMenJIGQzJNBIE4Kor+yXTF JuOzdAViTgljUomf9HDgUhmu9NATHQlgWsUw4Gn5itGYpWKwItLAo0PUCQqTNHZOW8t5Kw6aohzs BCKTxXAGhMYRrFQ4x1LRLV2Fy0iS43UUhgNG2U7zC8OfeDSmnbh7nHz8YTHz49fiuXfGaXqSapLI wLfWHdxzD/09Tj/grLjorEPirF/dHdPnydtu30lPbB4XP//JYXHF6e/GGzNaxeEaQVu/+/x444dX xjTB8MAAe7gR2CNusy23iRP3W13vwHszHnpptIbcG2LuQr0vkREgZyfz06A7RZwv1il26jwgTjv+ yBjQSQ7nYjkIkufNV5/TE3AHxylnHx8vnnBJTJw8J9rIUdzjyO/G/luvEktmf64cSJ8ain9m6NN6 q8QP48Izvx1nX/JAzJqvvGsR7/dPOzHOO3VQ/OHUt+MJ6dEjZZRYpSSqrW8MZEu+u5I8GCqqoTzc 6CuCKKNQFpSxypRi5Y/ywhfzZUW4ImEkZHRZu5ehfCtgeMBKBOAAX6eJBjSpA7ZBXTC10RwqRNhT R7hEbuBkYyxWhl8NQyDYkTQSJ+/w29iyT3/dSc2Ka546J16fO1tbQ5AhJFFAcAICKCxWq7nT2sfH 9zfeTWn1Mey1P8T9X7wtW1sS6w7cO87c6vtyALHECr/C42pRw1y92HpUfD75/Xj2s6djvO7q29vu TLqm57xa9v8v1wBlrwrhTkyGwNPeP9nt97GWXmO2eNGE+N2T58Wnml7jbRj/3F6WxkK9VPnQTc+J /dfcTLY4L25+8Vfx7JRR0UE3aDiASzSGtM8G2s5ni6Nis5W+EV3adbSpLaqfG5+NfTPuefX6uG3E Y1EvHm1d0dAKziNGjJ3qQMVTGlZXk8Pn1OusOwY0LBD6qD5gcE6v8Miu00yGOgN9YCps4KlPish2 Q/W0SnNfkwRMO+ESz22xSBkWtqotbvvVMdPW+ElWg4puxRu9wxtoAnCuv4pqq5GSfzzyZHRd4fg4 +js7xaP/+It0xhsVmqJr3+XjWztuFu8+eUdM6r1tfKOvbrDkTNUvWhJb7D4oBl9zYUwf8VKcd9kQ OcitYu9DD4/TLrhQ2yjNi4uu/Ft897BBctzaxTlHHhl3DB8tHbTVVOWpceXF341B2z8UNw6fHCcc u3988tidccRpV+mJ36XRo8/qcev918eZPz0xHnj4lBgfPWPfPXaM6Z+8FCef+uuYKJilDdpM+KOx scO3HozNv9Evbhi2OFb95rfiwO3XjIev/UOcdNEtylhdLKl/KV54fWTcP/SqWKd79+jSq1P0brd8 HLLvVvHCnZfHJTf8XdPEnbSfXat4aeh9ceVO28evD9slNl19cLw6RraID6BAeVDGthPrlLiMR09K qcEkPEjlpxPpmX5aktvBgRblTiG6rCselJB9k8rpplxtNyRAhiOBE9lPMtG/hEE201Wbzce0MQDq HO24FlJDq/BLm0FI4dueBEimHAG6ZLXNigT9AzrghyDAY0CIoUv4+Vj5L64PSgYe3u5ncOyEi60j Ofwh5QEnpak+opS8g8ssAOasZMZ0RaCrceeYFxYI5wQbdwWEjs4tBEpBCI6KxLvM8+aMQiZ5V1wF 7w9TmhBCiVUo++B4oarlFQA5FwagLLhgmBPv1pkhhfQCphOD60gnSnxRdJGTkSVCUaLP+TOspoOF 50IABqbIa6IAAFiJrDiXuxVvQC0faB91ncVbrOs06jXmvXdj+LtfxoFbDowX/v5MjJ6uPc9U6Ew1 6v3HeppJ68W03uz15x+Jax/aPk459iexxsbbxZMvfBRrbbZl7L7devHak/fH4L+9FVMWt43L73wx zv7uMTFswNrx6LPvx6obbBIH7rFFvPP8w/GWhuU/v/rmOHjb38XgO2+M3bTObcK81rH/d/aJVTsv jKseGx4jRk6PVz+ZHCdefGkM2GBYjNWY+q7f2jlW7tkuFmi9xXa77hPHHqwHJ/72Ulx65V3x258e EU8/tnoM+duLsdwaG8QgPTgxa9osdS4Yul5F06FdvPz3oXHjo9todPH8+MZmO8VTL42M9fSGiV22 XideeviuuPGRt/TmCRrRNHKMy2VTlWmzTansUFwV0mZ0oahSUYD1taKN57KpEOSgluA+RhcsFvW+ UyARKvwsSCqMggw75dF5xd83ALZtTSm1kMnohadIZu1JWZjS5ZPTpCkn9sKbFajQW67zrdhj4Apw jNmTX4hXn705ltapA3VM81/SpLPpHUfveGbsudryTpw05am487PX1QU3Rp8eK8e+m+7p+Ho95day U6LD8n5hFeFxE96IC4ecGY988Y5GBnIUz3ZcZb+Z87Kzf50GZDmV+dKgt9GDQDtuuHds2CPfxPLx 58Pit+/+XR3pV0fGkDftZUl0ard6fH+X02Oz3vlC8lc+uTOe1INT7TXF1SCrOXefwXHGdvs7i+Mn fhwvj/9Ejlr7WGOF9WL9NXbyb4vnfxM/fuy32lMaS87go82ZpSfZyaimKlEwFVCB9miWUlxPSVdb R52hkiUsF0KCnuuLqx8AGZdnrrNMjyWuYM0nmbkdtwFDo0LUgfaolTq9mkxMUekiRzTFUMTg7joM vK5MSzSQlyla56PqlFlLxPX0MZ/EQ0++HmfsfUBs9Pt7461JmkzVTes3ttw+1u3dOv7y5JuxwRE7 JA110G269o5Tzjohlk58W9OMP4n3xi5U59sUf3vq1Vh651/i+JOPilvvejzadVQPoL5osZ5kZQRt gTZTH/LXv8TyfRr0to05ep+sNgHWnO1s3XzztpbFukkf8+k78Yuf/ya+tX7v6KCZkvbzFsVNv/9t /LV+UtR36xmr9Oweq686MDb75pbRDTVLx+R60603ijaNs+KeIU/G0rYdNCMj3Wgpy1TRG/L467Hu YevbcejVs3/07dIqvuyySpx3wY/9/uOuXTro2CpW3mD1iM59o8/yA6Lps9FqWzUC6bZRHChP+PmE C8qFqU39V36PZz3QKGn6ycuw/oUlu5LDTPutI2XEn2+mAYUHREhQWYHOlDVlk7YAEK0eB1JztiUh damQcnJSOfGiZVs17ZQfGn6jh8Dob7IPABcKBNG2cMRVjp7qqm/YlVHqLfnnY1oCT68JXhWipLSM urSDSB5k50U+O8DihDV6YEPnyNK2mQAZ/GooBJGPYBWiCH5iBK4zVGRQfKFnFK7lZdMC1RRKpiu8 zE+VFWcwhSJdXyUnYY7KSvItwiCQgOADlGGQixiQOQOFofAWldfyWR4qsZlUgKJFBYWm6VQEFOUn rCrayZE0OCiIRA2+iqyh65op32cefDCmPd8UsxZikBjA/Lj68uti4nZrx2O3v5DrHVTBZ4z9Iq64 9vZ46+XP5NjoZcmNc+OSn5wbn759UOy/x9axzwG7xJxpk7Rn2yXxl1sfiVkNbTTdsSSuuOCXMeXz Q+OAvbeKQQftoXfaTYyrfvfHuPG2YTGnvlXMfu8fWptwVhx3yqDYctutY7Ml9fGhnjb91T1D4gk9 KMEO+z8+4cw44YSjYls9UbpeLI4P/vFEnH/Lg9Fv813iO7tuoqdKO9qpvPfqq2Pq2DFxxEG7xi57 7hrzpk2JS849P9quuUec850VNduqBbDKY6v6WfHLM86Jj9/8duy329ax7/67xOypE+OPv/513HTH YxrG1/QDjrqUZb27MmNhWXYoOPXokq/FptKNlsoHTh+CpzmL8h2DKJKlOufEyVWdL/RtLwWvYl8a oBxpQxqFAsOFaJRgJ09prg/VjUqpB76zr931CJEsu0InjYbGHCGF1k7rHxjLD78zpspem6dPkwv0 luhVPCsN3C62G5iOGyls7ZGOqESqRgM/fE8vyr7v/FjYposbL5i21TqZvh1XjQ1W3SIO3+bE2GyF zePyg/8c467eOz7US7qZfrPMRf3Jdtn/v1gDOBl5T6qCkV0s1ibdEem87bPh/nH9e3+PxW7fbKE1 aSnLBk2Rb7LmPrHBcum4aQ2JR4GwFxa577zZT+I0OW4NC8bHH4f8LG4a8VTM1zSpblW1tVE32ePR 8bsDL4z9d/xpvD/mH3HF+8+qDdDUmPBtWNiy2NL+lTrgzgVbot1XJ8i1zF0U9afgUbpKStdbYDOp RovkpAMCdcYEdNBRv2xvoSjHyo5CwpTOTkDiR8OdjPImDyb5K80+l8SkABUw7TN8Cl0JX9oQjg1T J8UCofRqvSTuuufROP3QX6nd3TzeuuFZ6a197Ln3drF42qh46aW3Y5X9ZulmvUt00n6b/QYMjG02 6hfP/vmGmDSvXaw8sJccMT0U1qoh3tHC/8N22C02WGeFeP7xZ2L6d3ePP9//1zj4qWfi5dc+jJEf fRQ3/u7KmK3X1XTs1j2efvqtOObb34+/b7qd1sINj08+/yJeff6VuGjohOjUtYtpfvjuJ3HoScfG pdfsFn26dfBasAbdiLeWM9RvYH/fwC7Xo0PUz9IL8qbO9obpqAKl1Wkw5JMxE2Vv61lBbTp2sypX 22Tj6Lr6GnqgT+/d1ezNIm0VM2vUB3HL28/GF5Pn6rkHOvcSpE/3syplbMANJtrO69z/tMBWRVCl Wf+0kdK3B36awWpn6VeIVsUSJ4nyh4PNpUVfTsmWJliiKGBz2FFlI1VZc1BVquJtGQADjmQcRJ+L TCu+j3NlQXRW1cXiE8DPvD1GgbzizYCF6FBnChePDgtYOXbZeJQNfpIzZRVuCp/5E10/bWplVb1R ZigB0+lBWBFBORYQ3xii+kNBpHEOY6XT+cI4aSquKlBfm5QEdua5GwJeZPRzKUCIn3OcvaMFJkoZ lSsEpAIZyhEbkZTCEAUDSaWUimeeGIFJOhNAW06OlltHKNuBMH9oaRLKw5nICJ65pOIRscKBAOdF B4BW5aqo5MuI4MO33hFDFNNRI3AsqGyju5OPnnsiLnry0WivOy1G2SA0Zczo+PXP/6Q1ZO20RkzT qIpr1bgg7hp8Yzx4++26W67Tmje963JBgypbOzWkYqgtSFrHwrjjuuvjgVtv07SsGpgGYBb7Rcvs SQSdz0a8Gj/94WvRtbNu2yT3Aj3iv0TTHu21VgP5J37+aVz004uis+6omCCYN09NVGvd0Y+4LR69 8w49WVYfG2y/S/zqzO9o77aL4tCD7o0e3TrpDQvzY7E2/R361Nkx5dO3YvaMOdIfr9wS30Wz446r B8d9N92uaWGt15OjgVx1yh+jixmynKmo6JKyIKBLBM8rGlS6lBIUD7CDTigfvomkWPD4YZ9gJR1K q1wB68aeMte5R6lU5oZ3lOzJlawF3UR2XTAhUYYOopDkAD0Fs/WZryrOVTwgZLuoQHmbOW9xDBi4 Tezcf+24feyHGk3xigaBJWXWsi3S2pPd1jkwesg0Zs+ZHt21GNrMoWXZknejXms2c970WNCWDV5K WBoT502I1yY8FX/7+KW4/5SHYv1+m8bea20Zb731THTmbQqJXhCWHf/FGqiaSZVtVTA6YG9Nuvma rwWja6+1d2zW49J4dsZkrWFMY2q2Fw3gLO0aB264rybnm2LOvLnRrUvXtDu1z43aOuigjQapli6N mx+/MC579S61F9qXTPWQVraxcXYMffUyPeW4elw36Ng4ZMvD44YRz+t1d1UdkiyMUnjkBA9TPIyp dGg06VfqXe5QD55+bqd1tGEKRvXF9VY3cq46oulrsCHr+ikY2X/2P+JkHPCqEQvRTQ2hIIvimDLt Bj33NQmkNHigS3ZSgEXyJi5HfkS3IpX9DlAKyL5UW2XodOAqPWLUo8PjxY+nx4GH7R9X3vJszO+5 fOy646bx7jM3xOdar9xaGejYqUv00JP3izU6xRO5ux13erxyzKmV7MigfEhzC/R+2A49e8cHDz8a hx2xML535L7aqmmDOHXHXaKTZmtGvf9m/OyMX8WLmvr85Rlnxci3D4s9dt1a064Hx1F6/WDUz4vb rroufvOne2Jhh25x8fVXxiE7rqxRuwdj+CvvxehRn8ens1rHDXfdop0EVNcV5s6vj3ZdukdXvXqx SUtgWrVTeaAE6aND1f6owER6invWZ24ZHGcPZtpUU8TYkB6+6LfG2rHVuv1i2nTtQKA2PtFdcDpX zqQz9EseadvTZqqCABjVlrIVHAT4uG20bkinfJRmWli4qDGqpQ/oBNpvz7xBUrYHaVBctsSpr6vZ AYXrLzYkakz/Z1TyAFlf4hKHC1kGti8ZMiixZajgM5ZBGnjr7UbYWJXmeVOtVWYq3CNs2K+YMOjA 6B+58RYoEtx8oS9k8ul8VNdJTzf4XNcUbLn8B+caouROwVWrq1QTs0yCKyMeEtkAPP6McOmZUpCQ aqZrfkr3kHRVAV04hkwezohQfAdWxbc8mJ5o+uPGowVyOaUBIRu6Bh4ltKRXk0np8HMoB2iDgyJV EkSjEq6RX5lO8IqHGWWU4z38Kn1gVB30mDeFWPSE7bRt114OWHKFLgxYd9e5SyfzyJYr89dRDh4w i/V0F3J00LSkMRXnYVx46HF1nkJdpAcaCB30bkqXA42h1FAnh4pnjpIG07JyGgWXeperpc67jZg0 iAd64qEHI9K8y7mo69Am5s9aGKtutFVcevVl0f33N8cHo6ZojceKcdBxx8Z2q3SNK68dElMWSpYO xRFrrbznAw/1GpFj+ruDHFjyknpFAH+df+RGNxnIKfrHfuS44aDJYshLrVxEKDVIWtoxR+uEE0WD BwVK31CFvnQmIxVSAdSRNNFETj+AQ7kXeMB0bpvRkYXLBMjAj7cS8Ng+EeZT/iq5U8/GIBsefTM9 oBv1Dsu3n4q9djg49t5kv7h71Dvinw2syQhNTaXu4FeJ/TfWO3DnjYvH3x0Th26/vWXy0Dyka7Ii NwursxEjiXxxI1HXtltMmvZmPPjOW7H+rjtF1+4reJTEeq3hG2PZ379aA7Idt+sYAWWD3aigGhZM juEajdlry91jj3V2iueeu132otE4wdTsRU8SLtd5I6VvEtOmfBSvTmiMfTbZyHbAqEU71feuHTUi p3Vwr3z2SjS16axpmKreig7W0llPLr7wntZm7Xts9Ou9pp6a1BY/jN6Ii9ejatsfVZbUkmSlLqhi ZHsJDSq6giFIrH4eKebSfMAxGKiSh5qquopBgg6cDsRxRv2DZan5nHnUQpEVu2y2GK4EtiIOnmm6 NUBMbghFEqpKc3sknnCHpqI41EKmk13RIUl1vX7W5LhX65J3+dmg2ElP6o/oslWsu1zrOO+RV/Qw luSHLhTowDW6Tf7+MeTBuOfF98RPDw9pjfFC3RSz7ccSPSA2etSEWG+j9aLt3AlxzmnnRye9P5q+ Y6d9D4yLzj0pfvXzo+OA4/4ca6+3cgy79Za4ffAt0Unt6QqrrhE//NlZccxZp8dr/3g1Xpq0XOy9 41rx+NUXx8m/uFvLirjpb4iuK6+lLZzaxiz1E4y0j3z/C3UUugFYb814VrMzTZqPbaUb1oa6rrHd luuok2obHdQfTfx0XHwwZl7sdsS+sfx9z8SYqdrEXYW3qHXHOOW8c+O4nXUjsPt3Y/Icrcmm2NCt +seWjpp1Jhy0hw5ZB0gBsC+rHXPZD088A8efQGz7We5Vv40+RV/Gzl+2ocTZ16A9hmdFQ4pPKI5V 2eMguT/hmlRhUED6IRM+SzIWDeXB06Wky2YMR5xpgce0NvCyMPJrgMqu7OpCX7+qA7HPYJuAXrLx wweAYSrAEqADTV1muy5ZKlm52VjqPIAvPSZTEPPXDJhKhrcBdWfHUeI64PkSiONJJt91FU2IVPF+ k27CWQb9UaXwMKlM4KfgCJlw6Kt2rouimIQzkNKFb5lJN0PTpSBM0XRFqFIqstLhgpfBgAJOvthE YgpFH1FUILeWpuJBIQMpgxGeDcutK/DczZEvnjqChwrUmQBfGKyVMJMKz5FU7uTkfxsWcnGlNNPm UjlSFAsXcRC8CaBLPHEhBQAGAg/g4GcHRPEpgRygKq8cyTfxhbYpOR5eSVdn/tAAsq7my4/fjqOO PT8+X9grLrnyMj01+5e48+bfxL4b9IhrL7ggrrrnZa93I0vJS5VOF+gs9abcKo3RWPNIwQD3LwVF I8CRyBF5lG6VkkLDAH1lFBvQ0elAqzLVbEU2gfF7uF4IOM408jxOjl4ZVeO8SZ0Rj10vkdPL62yY JqVhYQoSu0IK/HR+WXLFgVSCYur1cMi2220R++33LeM1anQxA7pT0B+4HC0nR66x2WJeuoV6ZcTf YtT8hthBU6dray+pBhoG4CrmjdogdMPVdo5NtRfTe1pA/sEMbbxcBd+7GFY0/12cIuBDZ+b5N/hr 8bkaHIIbzsyc+Vk2pyz7+5dqoBSlbUWSYPO2F01ptm6Mp958OGao/9t/0+/EChqFX1LKsLIXv+Vk vQO0rrVdvPTmA/HFvIWZHdGjjJs0fdboqc2OMVAL3utlX9CgbvGDn1ZJxty5r8Upg4+Os4f8Tutf Vfssg9Itl+oCNZy6qLNsUbJuWXzZWYNGZ7JOKtWERVcVIa2vqt/CdW0RfNZnpboTg4noCj7bpKyP GeuWRemAKF7w8Cxqc7T+aAGgxdFtsNsLBheURf6qkO2zXFYRSC4c86zGu9JP8uCtOXUxfNjjMXZu W214vk8cvLeeMp3yWQx/k2UvdTkyIs60ZXPmTdTDZHq4oPuSGDbkiXjk0ZfjmWdfj2effiW6rb9t /OH3P4u1+nSIvb9/Ygx76NrYdu3uGs2aFVMnToqbbrhXa5KnRd/+A2Lg8mvEYK2Bu+LcQ/Wk6pyY ozdcvDV8eFx581PKSftYsZdG45sWa/9MTa5376ndAtrrRrwu+qy4Upxz0dmxds+20bZzl+jWXU+z vvxUvDF+fpxyzo9iN72lhyePm7S84ohjT4jDdl1XTp9utjVNu2DKuLj2urtjuTW3iTtuuTSOOnin 2G2vXeN3elL1uD3Wj2HX3havjZylh59Qnn4qIBwaz8She5elxFM8OqXtcx/GDbDiKB2XTyrWJeLy dLlTzkmThOrKNkx0EqWcsArKU2cqJ+NU6Xa05Gxhc2mDOINZzmA7088UAABAAElEQVTSFCI2/aft Uud2zARPPCHloyzhwQyfghNFAdtDViPDm5OsF6AnCTjlGbLaP3I/TXrmykfTUB+lD0LmzKVumKDP DxquJ9oD1k4YFb4irBMDcbTSAbeQXFNZSwCnYowmOJeRguMU4ZBNUOkEszMutIlENh2dDkbiWpPw JEOKNjXBYAx0vuDp0jJZbBRXPqKXCoKogEqADzDSrjv4vLJs/CEzzmdxwEBzHDQgJfk5+s/K5dQJ KgQSSKcAoI9h4LhV8mpluuftLafMyw1YVbCFJnpVur7CUw6gzU+NJdcUFomZjlZJxpshntyTLDjB Ih7gGSm6NTickdSOIJQMEHSMobPqjlpnToV/FVLP2tZD2318PPxJrXd7OVZedYXo36dHNCycF599 Ni6majFtW925oQ7LrKMpSFwfJRQmWUkrvpQVeUsm6C4vyEfGYR8kZ46Fq+tsbxXvSDqK7Cw4Sl0e baxTo9NWT07xTsFWalBweHFW7DSKeJ3uKNtqlJMfDn3NDpFADg7OXAPOnDLeqCN6K3waNSWNHXLj yJ0TsJ999kUMHXpj7LXXTvFHrWkZ+ckY7XmU+zY5j9ZFlSkJ7k5DfFCxs68Gc+bs12PYB+/Gmd/c NPZZYxPtB6jNP7UvYAlLonPsuv6hHj197J2HY07/4zMJAv5hH6ama51XDmjFlYI2/OL6+dGlx1ax 1/oahRHi1KlfSCPSfSnkpLrs/3+LBmTXWf1Vtmn0umdpF+P0oMqzo8bFQatvG9uvsEbcMWpkdK6m uuhoWrfpHayJi6ULYtiIZ2L9bffOHNlWNHq3eFq8Pvrl2HdNPT2+z29jypx58cjoN2OuptzZK6xO P9cLrZt7/uP7RFEj6uXBCNlXubnChhAwbxjFgkv9GIlm6n+HHb4ZIz8dFdOmTnMbjmzZQCFOtgZY JmIR0oRVv2WvpX7QBNYAKjtOODBUv93oCES6Mi1gFEfdA5cmzm0iSNCVvQPiemgSyd3toxJoyV2X ONdoiTFEg7ayUctYtDexR7F5n+m0MR/HQ0+9Hqcc+N1Yb1G7ePPha+OLmQ3SX8QMTVU3LV1eA19t Y/q4sdqK47U47eDD46yX34vr73/dN2irbL1TnHf692LAoo9iwuTp8dxTL8aPv7dLXPz7n8fyg++P 8RrN2naXfWPPTfrE87fdHh+O/iyefXV0HHb0D+I3s5riiZdHRPf+a8QJpxwejXPHxzujxsRkbSt1 36Ovx/FHnhKPb7St9oerj3U2XDfq5kyNER9/GZvte3TcpH7hkOP/EP92wW/jussv1HYid8Q7b46I Om1Dtd4a/eODdz6NdTfsj3bk/LWJJ++5LU6T5372GYfGpX/aSm2jEljSc+Wf47dX3u8nVdEneqVM 0JXbe12jSwYAFF3Tq0du1T67nJWOPYHqvhYSFIlp0fdTlk51vKPlRFEujqf8XdYqL53TlJWyTJ8E eZJegiY1xSjoXMbBiJaJi6YklRNrLgBIAImSBmS6mBH+CME+Bf23zrE3Pq01Ql2cP10CpThmsCoY 4LEtDbBIZcZlSJE45OUpcCyMhPQX8CmSTg49Jh3d84uiEjBy+FiICpA45wS8r4Xs9ImsYVXCZRyC OE3JqfxmhWUacATFA+oaxjUFksGOETo1QCWbU5NnikmGhWMDQFxi01CgwkgKmYNEeuCQQxacK6bj uK7gC+OKpYuxog0taCAOjWjmSXHwo1R0xHFzci0H8E3Z3BgAp2t/EFOBQkEa/nH6kn7SKc5Gk4RM DtASqMB1ZtrIZAMS7ybNsSOXg2hlpQFW0OTRIWlnGSTfKsG8TQ8GCpwnv5QZGdlNfIkcmE8++iw+ GpF7jLFQta3u7pCJVtJ4ENBlraxFi7v2zAmJKZeB80L/QrA1p6w4SbztolFTCjQM6Ke9noZi6rW9 5Oipp6j69+8T/fr3jj69e0Xv3r2jR0/tV6VNMHt076r1Jh0Nx9Ov3CXjUOG41WSC7/81oG85hXLg GEGgQ2KkjannRZrqYJ0KO5DPnj3Po3b77797bL315nHTTffEXXc9pNeWzVV5ZJk251v6keMmsiig aFoN4fx4+u0h8aNvbq6p00Piejlvi1SmvqXQliBdu2h0b8MtYtGMEfHIJ6/HDsufnJJTnKrr6Bz1 OSyt01YQXdTJd84yIUkArTVCvsWqB8Qp+14Ym/TpHuNHPxnDPnwl2muK1vIU/IrMssO/WAMqD9sK 7ZXOaV5cRKoHSxZOjsfeeSIOWvO42H/D/eL+zy4RbN7QLWmqj359t4ud11w9pox9Ml784uPYdHs1 9Qquz9ogumPbprj175fFNmtsGXustm5cffoTcaK2lnjx0+HxvraeeePLN2LqAo3sNGp/ST2JyDYh 5i8B1LJQzS2b2zfo6ocJ8nQgC9o32HCdOOvM4x33g+PP1gMSWvIhG8wbcEFKEEYfkIfburyxIxoq iqMdEzyfFJpI2bDaGrdxyKFrkrnx1cEBOZAmr2mLWqRwThuEPvUpHfBXkJFHcLSdlo2mCBLCg1+j nOG5ct76r9TPDmud2qah9z4WJ377m9GzfUM8IkeunhszLXNYoO052urVgr31ysJ246bE9b+/KjZY +9L46W8vj28f80FMmbs0Ntp0g2g9Z1z87NTLYvy8tjHxuSfjxz/tGxf+7Oj4/VXf9DuuW4nHE7fp LTp/Gqqn1BfHxT/9ZXS65Cdx1KmnxxEnaZmLHLEpoz6Kc0//c7z+qUbApMPfnXNBjHx9n9h2y3U1 /b0k7hl8Qwx78MmY3bFf7PutzWPyp+9qDXZnvVP76Tj80Imx9247xjpr9o05H34UV/z8uVi42s5x 24YHam+6BSqLttqOpj6G3HJDPPe3+2PFFftFez2wMWnitJg8Zbb8CS3R4EbZH7SfpYAeUTkKLKVA mRM8aKTTlgNChqoAbQaUhT7pBOrCZIkUkJwd89FpoQ1d+wHECCadoKQBMrZHn45t5TllmvIAn6Ny wBMHs2bKtjkqgOEtiO0Q/8I2y0wX6cIxVmbc8kDL/b9pCsK8JIuOdi5dsTLe+Iq3fM4G9OT4VZ+U n3EdTVGThDzu6CFKp2LZBC4j54WrjVo/ASMbO8Lqkx6tzqRlJelHJ5XC0wHnlRNEsBJMl84EtcIB D7QqBBQGOGkSgnh+1qNgk6elrfH3bspqLKDm0S6n6AI+koFC8iiQ4hWVvOHhn+K0LsgBlvqQvyzA VGxzQ1LJKLkoVgKNqVBMl38bDfhE4xTqw7qCguHN/ipoI1YtQ3H4ynSu311mHaQMLmDpHHrFcOCB IM55MrQgwHDpAla5yFz9A9y6JL3SfTFe0hw8hG3KggJOuC4H8kGuxZ87Amdcd2O6tWQna5cTaeYs fDeM3Gc1G5zpp2CChBb6yc6I/HHBmg9GsjyVI1qdOnaMzh076eXOvWONNVeO1VdbOVZZecVYYcX+ ctJ6RY8e3eWMZYe0cOGimDVLHc2cuTFzxuyYNXN2jBkzLuZqNGHBQjlYep0XMDwdtVidCO/wwylk 6iinUaVJ8iZBGKFDJkbr6ngoRDx47QzOIk4jawlxCrt07iSHqnN0k6O4XO+eOu/kbPbp0yvOOOMH 7sBuuOGvzpuI65h0M+NV5uXNVsWhB03axBsjH48R08+P9dfZMzbq1S+Gz5hhG15U3xQ7rrlnrK4t 2Z9/7qH4eM7M2LlY4v/D3nvAbXqV5b5rMsmUZJJMMpk0QiohFEMLGxE2SAJIlQ0iCoIobtTthg1S ZNPEoFGxnbOxomxUEBCRXoMUCQkdQkJCeiHJZCZTksxkJtPSzvW/7nU97/reDLqPnt/5nX1gfd/7 rLXuft+rPOvpHvgM2kpctD3p5J9pH3vN460zcPTvu3xFW7Vilc5UtHbJxR9sr3jXS9vVemqMl4jS H2LLxPPvKHAJmvHnHey/Q873K2sNFw0MCv3nkwM9IEvViP983gfauh//hfaIBz+znXjmn7fL9PoI 2nbXbYvaEx749Hawhsc7v/Heds3OHb5Zfoql5C3Wgn3X9ovai97yjPaLj31Ze+7Df7w94D6n+gfd tls3te9c+fX2+YvObB/8xj+0K7dv0yJO905ZSM0jmjE1v8pG5lnB2ZEdedSh7T+/4Dntp3/6xzU2 VrS//dv3tqc85bS2v8rLdODFOOKSIgdRPustXvoJ84gPiDXncKDkgzYO3PRjvO7YvrPdumO7D5h4 2Io643rLFj0wpYMpbleoca1cB1jwSajGsQ7WZNve6uM1B9Zc6nnHvjAPyXqIRF/zk1zSPMABY+2Y 1QQ0BT8dyG3V/LJdB3LU+YTgVed9pb3v0+e1k/fb2M4590qdqVrSbt91Z7v2sovbp8+8s63XvcK8 5mXr2svbf33ei9pTn35qO0Wv2NhvyV3tbW/+XPv0xz7Xzr9qnR4O0UGUTPnEe97evvTZj7RjdXVj qS6BXnfdxrZhw2bdZ8fB6z5ti17p8lJ96vAPjr1HO+Lg/fWaphvb9fp+9S26NM7BtdYReshga3vn X72j/cM7dC+zXNul70jzkNuiuza1P79I99QKdvS9H9T+8q/f0C5411vbr55+Rlu2336aI29tS1ce 0f76Fae3XRuub9dctl5txUNxvEVEX/zRAelFmmPpB+x/WUzvrfYjdpk/2BcTX/070a6UfWYOSQqc zzDp6oDPaJmw9rHsc2pxXm3i/bHwtFHtn7FcSTDakysM0Nf9Y12h9kH8uS2ti+YF0udJLfxYY7gu uXViQ7zaB7J7Q0PNW8gDIF1dQvUbKODHDGnBf6R539dtUB28JIkTOtUJkH70dxL7fvdGVR0CycTm brn5YEEG8llN6IgJgNc7Gt41EAG4E5sFYWVwnbarOgL4SxCrgWaNVo6JlhmExZNtLEPRX7IIetfp wPWASm+RVx4HsYvkxRG26q8EK1gMLvgir0gtBzgpA3bqFIJlATPuWAIz0/xGorKqJu6OQkV1ASVx 5ocHsan0C0aHoWcsSBJWZs6glltxDjJxtXQtprGhnqwVxCJLc3Q6PgKBqzaQeEi6rpm8GdzxFfFk 4gL6rgd+4ErEzkfOlN3haMcimOyAsNNHf3ViwHVWjZ08Z8b21yPuxx57VHvQA3+o3f9+J7YTTzyu HXnk4W1f3bPB2a716zdqElvXzjvvorZ27Q1t3Tq+07dJ94XcrB2NXm+gy5d8KJuzZLfrhg9P3ujv 9yf4fkcWlAwwmgJTKXhgysg+uOyLAkfsKn70VRZ29DcyDSH6thoBP7H/CU98dHvMY364XXXVtbp8 +k/tk/qUzXevvtbjZNYA6NOPQFgdExL1nvQU0i1bL20f+ebZ7QE/9oT2jAc8vp396be3RXrn2+K9 9m9POuXpYt/VPv6Nj2nLWc5Z0jyEWZYLFLtYeHaFgNxWPMCCy6RbdtzSrtyilyxLEn3b4SjUv3uL nivXrnMfudc9jvQC+d8t9PtRAF1FbVvjSQGg//WkFm433PiN9ml9quj5p/xQe8KJD2sXffOzvl1g 2ZIjdPZWi/fbNrUzLzhLAubefN/lagnVtm+7pP3hB3+l/e2nf7s96JiHtQcc8+D2yHs9up187H3a Dz/gSf79zH/8ufayd/xy+/y1F2sBpweQZIPnQQaIEmOJe0SPOfae7U//+Dfbgx/cv/Mn3FOf+vj2 uMc/2veU5uy1F1caN8w5/nknJhkaV+wI6T88uciYrafz9e5ILUqYJ5bqSXX2P2Ni8XarzoLv0G/r 1m26FeAm/W5sN2jOYI5Yd8NGfYZqne8P2605goM4Fnp8u5JbJ2osyw8JHfcDHMDVPFB+cpl0500b 2/Of8iw/9b9YD32ZYPct7fQXv1QLYh4IY2Gsnw7yzn7/+9vZH+A2CT0wJlla6rXtW25o73qrFlU6 KCRuu1lU+en7ekAJn/nM1NabNrdv33SzxbMP2YvFbp87eFqfhcc1V1zdvus1Kn6oR+jqAvOyT6ho z77X3nqIBaeUluvBMRI4niznyf8b9UopnRBsP/cbv96WH31i+9oFV+t9pCvbjz3tqe3Uh9yzveN3 f6tdduPteq+cFn2W65Z3H8Mw/6mDEj/ixKKtDgKrXWc8Vm0ZmONlD6LMIwiBYB7Sln5FgndKKkdW ztaaXkq9NFJ+N3oxYxNiIsr39zIBCuaTPRCQTFM6MilXP+j4onK/o4/acG1rv9eRytxf6MvYU5Z5 f2OKrssHBXjaDauTVVS7v8rol16LscA0afwjzthUtuo9b6xc1S0gEphOMQ0OwXkRIDcX0nE4skoQ 3UGsr7gwcNrxU5E0kbsxigdn64lLCNmJAzGlHVHnlhG10qZJYqhJpmDHSQdIfBWDsqEcEz1wRCt3 h1fRMe+mjjIcTCNFRAwmnyjTPQUWHjA4H2mqrJq34J3c6+SXZVQnRrsFiECYLsASBREWeVSde5ae 2sK+aKDFJ+LBjfSxj9xxVY4Ay1GeFT74aSBbvshEBI/9j+HGVcX03WBOa1dHhS02l040AqojHxWI dV89lB1QVMLuiiJtoI8l6/1SfMT4oINW6luuesz8YQ9uD3zQ/dq97nWsFmrLfQaNe2S++MVv6F6Z q/UE1rVerO3QGTR4majRwaVa2pj7c6Si+qw6O+25j17+m7Ny0NaRUfzAbpVlnu2noOTHuqFVXy8c /VfypIS3pxODirf88c7GVH59y/3vd+/2a7/2O+2ss77UbtJRKYOYn+MsaVKHApXUj8S2iLPFmQMQ Q1K+9K4d7TPn/2N7xeOe0B734Ke1w//53W3jbTvaEYedqqcGT2o3XvuF9ulrLtZtyYyVYnNOmZ9k MkVfeP4728+849Vtxz55z5t0ol++PPCEp7Xffa6+6vCQn2uvvPQL7TWfe6fOCmiSV0o7ufJv2OAn kyt+80HuNRs3tmOOOLyP8n+DwB+wqFHUsG5fbdJniIvG2+Lbb24f/uaH28+e8gA9uPDk9j/P/awe KtjV7nPMk9qP3POQdvm339W+csMa9ZcDZ5Hs/YTJ+Xb6t3qMHg5vW25d0z574VXtzG+/Vx8d30+v FDqqnXryU9pLnvzKduJRD2l/+tw/bM/8P57RrtLLY3kHoc8ySBYzNSYyX6y/YZPOOr+xPeEJP9qe 9awn6wDs+PaFL3y1vf7X/6DmNc2j9DEOtDyexO3LToLVzlTjw4MFc7Vr1ATJYsY1j3UWdDxZrzN4 +qZznfleoSemdauEDv5WrjygHbRypW7sP6SddJ8TdAvDKb61gjPmJM7Ubdp0s+aT9e26a9f6XrxL LrmyrdVDAbdyNk9n57kXiw/C136hTlRgEjtT+jW7im238LF2cMJgsP79wBNtojhkvqwdMDMgqfg5 E7h4ec0N0O27H2fbaBSoJLUfKPIUJvOx+YQvGtQxLxX93sx9Os0GLHjnfb8lZifwlgSbk2Kr+ybv 2LG5vf5Fr2zrXvXL7Sd/4lntyT8p+dK75YZr2h/++hva296pgwGd6WPe8mRLO3utwDyLxegt77CT s0JVm9lDv8AmrnBw9hPThXXY7tLTysQxEarFEAfKs+SFoaoOhSkrJjQEOPoJumNXcZb+skW268QJ 505KM/oIhLT2uNGHqZNzAZ9U+shp8zrQoC/S5vjTm8C0rFnww1eoJMpjwhhrMX3JLD3QwWHLDUoE ZKoFlzVYubce3/XVIejh8z4Jel0l4siG5KDGYur8ZLTvu8I4AEpxmDyJcuAFwwNNC4KXo8VMgGuV ziJENPoHXztRaJBZtJM8VQlMNU6Xbt3QVooMX45DpsDsRAg6DQUlQV+os/jtV1QbxGawgRh0+NRP kWhY6c/Wg01wZNIRra8jM/itSpcb3UnUGNFlkeYtOxHvhWxXlBggzu4LXjdFZpEAHC5+DK6K/QxG nMFVSpnYeeIcfJ6nwcbpjBn0iq22ve2wQ15JtBerrE4oST/x9+UMXQbZd99l7fhjj9UNzA9vj3zk f2j309k1JtVrr72+fevcC9v73/+JdtFFV7S1N+glmDqC3qlLQMjLgwXYwMS4XJdTSz4HEwzg2MIg xQ7iFw/IqWMrg7JsVyZoJfcd0wChtyCi2sALOXQIVT4jQXKoa5FHol3f9rZ/0HvzbvX7+jhDkAmt 7Kj+Zxm0t3gdL/UBX9+wFG2keLHebH/pd89q51y7vj3+uNPaafe4d/uryy5sP3n/p7XVOhp/77nv b9drEasomN6s+ILRCMB/pTt1m8Otu7a2W/UEB2cBSGT0oTO/+VZdin5I+5OfemF71Ek/2g76/Dvb rWo/hXEmE4b/hWTRcqwOEvSaGZ313KxL1+v14s91upTDKxC2aIe5SpeWaasfpP+bEaA5HbZqV5p4 SmprHio49+KPtgtvfGW73w89o/2Hg/+wffSG9e1JD32Gvp3Q2oe//oG2mYPviUkFxqoWCJr62/56 wOhOfYljpz6GztmuvRYt08EItzDsbjdvvaK98/O/27723Yvbe176znbcMY9sj773Ke3i886py2+y iya1SXRlxphkX3PN2vbnf/a37e///kPttNMe6aewjz/uaJ0x13cyuYtftJ72yEXvMaw+RN/krDhz LWOSp8FrHPant+nb0InnlkW6xxS8eAgPMvj5xa2qc+mQe1x5YGJvnWVaqcXdEUesbkfpTP5RRx2h F13fo52id6j9p6f/mN+9uVMHhDfo7NxVV13TLrjgYp/dv/rq63Qbhm670BcOuMTLmcA6QGVuI6Ju mAKp5vnUIDngs/11BlGVPSRoKsFX+y/qVXZpRmLCzOfEr6uWTuyoqwLgR34zuXW6oD43eB5TKO2D 2mPbzWva77zmN9pf/F69iBdbeE/kVr13crEemOI2HvZVvjzJQSNaECm6uiWp2gs4vKTySQXFiYVH UvCiLNtlPu1ZfpRcT9NdhvmkCz5EO8ZdGDbYjBCNPGC0s87Jl9JXDJ57zVO2Vluyf1BYNS7YT6AH +cDK5qJNn4Q9ttgObZjl419RFw2wosUHMPQf7bPVf5m4pcnWjJviSVywhbFVy0rOykWPz6VmYYHF mYjTGRCq+GLJ3dTMjCrVOEICjgLbKrdKWdWjuCh7J1KFwVcLyR4EM0ux9VYwaQxS6a0pyXocOuAF ww77NNFie+wpnfClI3OZt3buJTv2o6sal5Jw+iGXZF7J5D9xwIeyl0UqtoCHngbTYkZlZLCA3Xs6 mwNVh5uj6BMnfEEE+iwfmi4z/iLBSbTIZwtJ+UHs0h5FV/aa0LJ4UiwTU2Sht/hm+sCVzopnKevt hdbuMnbyBm4WZyzSnviEH20/+qMPb8fpEy03b97SvvKVb7U3venT7VvnXehJc7sue5L8hKZkoHe5 3m9kLfajbBhjAv3MDyZ9GawYQcMvOOIBqlIvKANPc6nk9hAzxbhvcu9IoNOAtmuRa35o68lUct7H RB+a2sYSiE2HIRtDyFm4EcvZvCYYFuiFmDuv18tRP94ef+wv6FLpU9p7rljfnvYwPSl4+03tY9/8 uPh1CQy+3uTOVEditSEF9Tf9uNBiOCj06U9fz2mXrj3XLxo9cMUhut9tabtV84jMdILGl60Uy+To iByI8PF24qwAbtd1oi1auG7RTm6T7gXafPPmtu6q69vaS69p+x18YDvqiMPaKp0V+UH6t0RAraHg +6CRRuht5LZXH9pLDyhs3nJx+8T557STT9Plyfs9sp2z+bz2pAc+ot12yxXtMxedrTbUGZbav9sA NZvuKdvdjjnxOe0dL3iNXs79gfbct79GTz7SV9TKUz/Qe96WrGgXX/V5XXq9qP3Kf3xoO2zfw9pi LndqvuDVGthBv+DH+GNM1WXOpT7L9b73fbx9+tPneB7gXi3wDAG70jucz1S5byIHSTV2uQHeCWKK MPpXVc5gkUCzvDCvKh5/IqVv1sNFOpDRQ0XXXbumfVkw7o3i8idz03IdUB6ue2qPP+GYdi/97nvf E9vzn/+s9tKXHuizcN/VAu68877TvvTlb7TvXHSZ7qe9xfMaZ/3wE3MwwD4RWBVytt62AesJ32tu YJqqeWqEQZa69znQm7dHRbLAmw5ayagF3Wy/EHz0mDN6MU8TGiLKrB5nfTFjLy1auNxciNKxRGfO 6XzYgJyKq3jojLYDulrogCvbsQ4x7FuLx+sJSWFxT4LOtC5XnSBiU+yfaGxot1lthy2REx/FhFin 8q3bbF9tuXEsIst/YKWrZGAnftCetEvJK59KLlu44HdZispHLU41uLAXP6d1FPSdBt9UmcYVc6of pBAoNMktHD2lRlUOYvCaS7K0c5WhB+cRUAuR4ijXmJhpgE5sdm26QTCXggiTKAe66pCDz46Lciks eBYd7OTTkSsu6QTIoRw5NG7Vo6cCLZgZu94eePO6QfCpOg2rXXjRWTKwsuzCztIHfXUkcEnuDlKB DwQ/yTa5WcUFXn9ip+Af9JyGdycXMPNR6ahZ0jJw1Nyit346BDLLFg9mUeSUfNlPZ6tOVIPIUiUG WSprcq+YI4O2zOBBrkmUE39Ta8MCM7jiKapJpGmqkyO7hPhSutoAHbwrCtn3PPrI9qQnntqe/OTT dDn0mHb9mhva5z73xXbGb/9xu/TSK/1gAXzco4G/S5drAnHQ8GGWyj50ccSXIw7aj9iVf+glakn4 nB84/iqW+FGxGfMOst2Uc9CCDvsmoN6nY/GWh4P6R1Lplr5pUNekDHH6OLabTztHJh6PP5nPt07r VL5FWyZttlRH0mef/7G2UW+1f8TJT2qPuHBje7iebLvyor9vX123ri3RjebeGXc272zZOdugmSwO yBkO3TSiYCRPL/KFDj0DoZeAHiJ/9dJktZt9kF9r9ZDEsg0b2nZNFitWrNAZjLp3jp3S7VJ8GzeQ 636ZHVq0bdVZte06Q7pVl4pvXLuh3bRmgy653Nh2aDHOPYfL9Z6qKy7/bjv60MPawVrA5eAjpv8g /5cj4Bajr4jMP7p9Eh1JDbxMd0B+8qsfab966uPb4095WvunW05o91+1vH39n9/XLtJiep+9l7Zd w+INHp763q53Ch6hj6gfueRx7ei9T2+X6j6wJb2zpK+gVdS6+lILJc6B+ape7MAEaBgT7oiMvSpx pmq5Lj8yJ/Bj58M4wBGyGqPixUnzF6w6smAdbLxoPNZU4baVGndFg0AWFMF7nsMceIiRct+DrcFG H5aF1s1ZlK36isyWW77bLtKlU15wzllzHkg6Qgcc99VB58knn9R+5BGntGc/52leCF4quq9+9Vvt n8/6crtCn6TiMixzA2f5nDQnYi/u+KsSqteSA3tAKBcytpLzI83mZ9EpsTWda7UhZsC4GoawjKfM Z1BVXIvOXOIpvlpoOR7M88zf9AXNT5oSrM/0PZYs3CzLQDFgPrbCZ2p49aUATTS+lQhxoK2PctcX avxXklSHoSrIIiUOLEirn+AbshDqBSALK/3RRe+UjUIWq7bMXUits3gdrrWLH2KQCvabdWa42IoV usjA1/KX9YLjLlRU2A6sxEG4OoKFG/ZSH9cVoKHlzwYrx0bbAEw/fKIIb+SS8/UFUp3loxS7sJWY 0PYl3982ZUHiNQZoCYAM2WNKUIHF+OCp2xYZE0NiVGgJb8UqnakbhZP64eREizyCIgXgAp/Xbbjt JCBKyTS5jPYahQ6leb8KRgMQsFpMVnmm15NDb9zRPzfGJNceWoF30KWtBppowqeCabA9vo3+ma2M kg92znTQ4lNSeKrjsirPjIp4JtyZ/GkgKKKTHRKEjLKjpGJa2VQ4oFVHfnVUYUzc3bDe227TB7B1 v9ojHvGQ9mw9ZfZw3WvCPSRnfvLzXrBdfPHlfvKTyxhM4rUgkBiJmj+tHr/A4UfsLTsrBsD4EQ8G UNLEK0D40g9oHQbTSANf4St24Gb48nNPsoFJknSov9BZnCpnbLHDq1gil34nzWofdh6OGxuhzAFa yTtAdZy9dCbshhvObv900aXtuQ94aHvTM1a1A/RdnXd8/SNtve75W8Gn1BBbJnsutS6BZpcEVO5t OeuLaEHPorZtu57QU9iW6rIb96HqTd2SpwlIsbz88ivaTXqD+srV17flWnBxczQu3q7vKnKj+W7d F7RLT/rt0tmMHbr3Z5ue8t3Bp9ZkG5et6kZzvUhWNznfpk+hXfa177SjjjmyPeykk+xvd7eM+cH2 X4lAHc3Tf2qBJPIEkFzttrcW85df/bH25Wt+vT3q+Ce1N+3/sLZYlz3f/80z27Y79ISxz5D1zoI2 8Wl2aJtv+mq7ZOO29qDV926/curz20s/9Oa2S68E2cdzTPXlXbfd2u5x2KPbY+9/kvh2tGtvuEI7 avqfe7/1MyMxpmncjB24MQ+bA8uYpavlQJrx43EqBuZSZKQPw+cFALLNw847cyx0tXPPHMx8l4Ot Wph0ezDQxmAPlqkqI2ou1UiVv9i/lx4YgmyHFrFXamF26WVXtQ988My2337L2+GHrmoP0KtPHvaw B7WnP+OJ7Zf/y/PaGh2QfvFL39B3Rs9p3z7/Yj1stFV9X6/U0IKVdrEebeI/deucH5CdBpugDb3L HQbvCB9pHb8BDy0J+rJiVu8lAuFitYOJtQEm/V4YwW+Sah9jqp5t7MHV6SybYmm7Jb/eREAbjlbA rbra2nTMd+Kp/RM6axEEVcmZtRd9g36bVO3HNBj5FTs4mOfVtSSj9uvwpFx+ZeHLLUfGsrGt2efM 73tHe8zRAzT6tycah9MxKp9v53JpCXAfHmXJysJpiyw8wc/SUbcNRR94P/Ji9/GWpAp1eMe4wzQa V7hSMFsclNJSbGndiC4Q8X3AerAWSQVNC5XSWw2E/JzdgWyUWQ7UKjS64cXyhXbSoOjsWOdVNrk3 JaeTCIJPBJp4TFJNmc3COAyypQx95tPk4oYTwPqNoFuJJoKUj34BZsfvNDNo6uCGI6f/fKRR1F2O bMGcPjjp2nTG6oiZwKuTJybFXj7Er8SQU8jqO0S1jl5te/nDRMnTYwccuF974hMf05733J9oJ+gs 29e+dl573et/v33lS+e2G/W0FBMEizaOaMvs4o9+RdoTd3R2d+xPYPQZUgZUOnRkjDGkHDg8U11+ JPL2VpvqX9XO8R2qJOwlIY+fJwwBfQRP+4CfYg1NgYiXS9gCkXagxIH9k5sXtH9sesIMdorE+7Zb 2ie+8v727Ae9rp10/Elt95Yr2sfOP6st003GqKNd0OWkAvcOLbwGK4xAnGGZxlCnx4Rtt/Cqg9YO XH5g0/vY2zrx7yMbCfMGvXD55it1xoYXLnNzNUetsp2FWd04W2ckqWdCxCjaxt/sk+IcVarQ1l5+ Tbv4/EvaoQcd1E44/PAFi3Xb/4PN947A0KzuW7RzTx779BkN0F3b1+qS+j+1xzzzee2Eo1a0m6// YvvCZedpca7p3f1DdGGlrmn/li2Xtrd+6t3tz56nt+k//Yy2z/LV7U8+8/a2Rt/Ercs/+7QHHf8T 7TXPPaPd64Dl7YoL3tvOuuICvd9L/VgyOFZkikSaWrzavNvmOQzb6WwYzj8dV/2BDA4XKNmeGmiM T8aOx6nGDmfMxrFt2ozJrsuZYcVr/j5wPfYtUTI1ZjjQzVgeZWFO8WkhJ1mLFDe+N82Zmzv0ShAW atwD99GPfsZPxfNw1aMe9cPtMY95ePvpn3qqH9T4jBZxH//4Z73o27lzZx304C9/ngekRImtzyTJ b3Ka0HjipIRdSfF9xIOjPg8Dbk7sp22ke4o9Me4x6VSQSzfalSadgiAbENJmpkgeE9MAgEJ1fDCH mDzuOzz6YqdpkaFEjOtAtuyan89NNGw876rOvl6eyReQZUtJpFq+0HdJ0ECGfvgiI/Et+6DFBlyL b7W4olp6kFZyIiu+jPXQRA9135fJIoDUdbC/I/kgpaMAZdFMq0Bc9pl02tAm+Bcde9f9XnIAlnjs BiiHgDExT76JrhytsEWQ3+skWuj5xcEpKN1Q5MSB8CLJoRPNPJ9EGZZFmm3s7oCrJJ0qeLJQCRn8 irYaBdqyrVayRZNGLZq6LDnzFfvQG5uoR251JDqsvMmkoJkJSYZR6HZYlzDo9ylvnebkL/LRO0t0 trLfTnWEfbGTM7mLOLumCYb2Ac/RKA1PypmyLJaBJd51SrboaI/Cobcu17KzTnsiT12G4OGOfeKJ T96z9sxnPrE997n6ULqe8vrYxz7bXv3a322XXXa1Jrzb/aBBPeWVCdjMU/zsD+L0l2QfYlCAymm7 +URMSdVmaesa4Gkj8JTdbtLj+x4iTJ2OI7ncswBttS8yKv6Qxibn2Cpg/cGRVLZ4vhwaDR7+buPs oPoGZeyhmVhwwbV0Ke+H0xkP4QwQ6RL1sy9e+Il29dbXtnvtv6h9+4JPtYtv3KiY6kEFmli/vXWW hLREZ8/S7NrlGMYij1PpXA7hXYMLks4w3LHjmrZJlzuPWnV8O+24k3Vfzzm6vKY+iGyvHrEFO7kp XPf16RIodRJ9nT6clz57wu4Tpzp+7Tik0+3DeBDu0i+f31bphvED9R6pVfv/4OEFB/Jf3VS83Yh0 DKraESxbqu+RLtV9Wyq73QVfqr78qa99sL3u6c9rB6kZz/nqh9p3dTZ0yRIebFHb6ZL9EvqOkiZ8 t/My3az+wc+9rh2/amX7b0/8qfbMJ7+m/fhpL25rNqxpW3X2aeXKQ9sxhx5hnssu+1x7ydtf19Zp wb+UPa90+vN7MYu+wU4qXU1VKnV2zCI0bGQkeNj7IpTxUWPODB5rqQNxH2KHT1/kYIG+pz8WHfCS TOOSxi9n6ayg5GVuiUzTy3iPZcm0OciBTe/8pFjyxC88V6SKivFWT9/v0DvzeF3Rued+p/3lX+pB juOOao977KN0i8ip7XnPe4bmP52x+8CZ7cwzP+/XlXBWj3vsPKzQKSXosP09x75pf4K/mBMalaEN TeChH+XFXztmKbUZ/QcCLzDPSfiscU8spNJ2QlMnBjSepdu2ChZd4EXhn7Bu58zDFb95WjMUv3Rn gYUNkRkdRVn8lCMvfsPDnE1cgfHzHKQAM9eUHLwpXnwFlhx44jHCAq+86IkHKbZF31gf8cD5hc7r ANVJwEjBY3MWysDdJhkjji18xRt9zK88jczCFx8WH7L62NMZGAgzkXmKsYraSiiNVHhKcah7N9UD LwfEINZqIHhIOFESeh1DUYGTELHHUaoFScHB1VE+ef1MpE3q5pcsy+80CdhISzlwn1FAvemLihir qsRGtrJDcnmGh4aBQuPUKXoGI4OhaNnaDnxHEpOOhaqG/9ZXNDRCEnJJuf4euoLFjrLGOCHQY10S bRsgVrobr3RChz5woUk+g9VCsuol28TacAPwvsuW6zt+T22/93uv1mXSU9oH9Z2+N5z+R3q/2afa TbrHiVd4cPkgemY24Vw5ONoWOhllNcGZ0j7JX+ESp/K1x7fzxL7Rv9DDazh9mLKIiWANrDIp8sNf TYLekhwZcJLYAos/lql6dBZB0dBPZIAGpwad3i3VDtrR9jp4t2CSL9TOHXrp5ZVntbMv/kq7eZe+ kOGxpsXzzo3tmvVr2qXf/Vp73xf1ktTNN/kFwnZAvHfp0zTXrTuvnfOdc9qazZu8U+YLEDfefE37 woWfbxetv04q6ixJ8ZS5vG/wDn2M/IaNay376k3XtKu1w5b1Hnt3XqMPlOupV9qQ+/UYhyTsSkCI X/lMLGZxgo64JF4uC7Zj6/a2U/fBLdXn1FbrFTFLJPsHac8RYMHDu8h4enn9jWv0Lr4L3M2qFVq7 VWfGzrvoM+1Ll5/btvGtUcVfS3Sdfbu+Xat7FS+44uz2ni9/oG3QpXEv3FlUKd2ud5Fdce3X2pcv +ZLe7K/3+7GI09v6z/72J9qXL71EZ9H3agesWNkOPuiQtmrlwXqj/p3tgu+c1d7ywd9qZ/zjGe3y LXpzP/fjsPCi8bW5c6sOOTas0I5UN/D7zLLanvlSKrVl474A9XQWTWMhfSS58R5PtWOFUWSeM5Hj uZZ5i77o/gVFybcpFoASwbpt4JE/puqPBffixLKKJrTkiPB46Myuow56wViocHmU+YJXj3zlK+e2 D33oU3690UE6qH2uFnHPfvZ/0lOtR+oLBHyFYJN3ziw4mA/ZF8BreSqTMncEnjo4YJVjA/uLmW+T 3YkNFtpWdMHVaSWCM/aAiCMLU9ewAzKlulWp6NGD7NgRPaYTfLSdcmwc4RhQseNBltqvWBG6uozw AR99p5w6tGOKvsgoHDYQx1qEAwtf6PGFHwul4MEBC60Rcxv7QHyVoBtpU95TnthFXPwJ3DwYbdHa INuVWf8IL/kdoqXv1FpNNp944qMlMytWBXCIk+WK2C3gwEgoe5yuL8YkRwHlXIeOQ8CnJHwZqHlA gmjUMZh1FFBGcOkSG9QklktpugxERQkd8/qpBxcbRthkHzss3BE9K1poJ3oLKPl22TKxq2zjRk0a AV5uK6mjieoExBPBtk3kltv1oA8Rxs3ZiSzgOSJInbzSTH/Jt/kSWR3dN8malg4pm/oRLryj3NRn ckt6bYlBjmIqNrz4FqNPe+wj2q++9IV6ee5h7d3v+lB7t14HsEYvzOU+JyaDveg8+q934VGoCXjW v3TUJZuwhZQYjHlweIxfJCbaTHgGzG3CD3gsz5EN/QQfIVaMfOBSi3C1HgLMljaIDLcFFQZxbw7H j/biSEg5f4aJJrFlquVeMl6ZwiP4dxy3qS2+1y0aiaVnh741KhN8Bm6fPkFYp3Ts1D1HutVMH3xe 5i8woBYufrv1zcmdapeluiGds2/Yfade+bC9f5tyuR7zLw2WNsUSG0klm9dN6KsReoO6o617pG4/ +xA9FKGvV+gpND6Lk4kGnootJVFrULit6G89HoieYgBN78+mVxue8PCT28Mf9yPtwfe6l15JUTs/ cD9IswjwvrBt27a1Tes3tPMu+3L71LXvFLICzHjYuWu7Prykh010xnbBWVXFesdu4US6XO/t40sh cNHa/HbpM1e71A+XCsfXPNJmyNyl14Us1mtC9l+uhbt2fmZQn+Zt+3zrdKleRsvYSDNLnPqGONct b3ddeJguEe7nOcALfOtzR4BsGgcsDNDlPhHDlGe80s9qP1A7WGyGrMZR7Z9cF7SGaFF4ukORkt+z pdxybMJsHIJ3f1W+oF92AeA85rud7Ahlic/y+SgLfgIDvX72R3nZh/Q6uOVg59DDVrfHPe4/tp96 1lPb8ccf3c7+wtfa2/76Pe1b37rQdOzz4jc5PN0MyxvtNIM2ZZ8swG2nhQsQ7Jhsqd2a7Ayf7kXV Yr10sE8lhsxMFVH8wh/mQmHKNu17SR7/GrvVNiUvemIndJTn4d4ndns9t4ouNOEhJ83Dx3rK6JjX E5wskJSKo79mNGdP7L/beqMHPr6ELv0RuKOCbsI1l9A/2gUfsPxGHLKDR0x0qqC4lxwfHHUd1t3P HAKyHZKvxqCVdJDt4C4MSud1p0Kw25Gc9rYaZ9WwFHsAwNpYnEzfAKgUQ0GhmDrvjpk5ycLHpJ22 KGcdG57SxQIgZwQspwfLuruQSd98wIXvaiSsZBbLwiOD+ETu0+eiLTfJ0/nZl5fdi7yaL8mxo+iK 3l5LEY20pzQuavaEL38myyeSsr3g6CudoBc2AHCn0X8BZnEqPFMWqch5Y/huv0D3Fa/4ZS/ePvKh f2oveckbfFMvA4EntCyjy3cZPxEns8gzUZB7v9Fprci6uu5yJuA95nezF3/m+DzhdO74XXFhoiz/ PEjd/jLS/2z0U8oApsxRai7z2CX7U22KrJzCLof7AJRAD8b0tPQRy5cA+Z+JYNneXDaltaTb82XF guJS4ZZXVTw20wcJgJbo7NgSLdA4UW0fkakJen+93oHExAldJs3crM3LVUnLka1cQ6kvjksOsUwb Yi7lxBC+Go9isi8L8YyssS0S8/Bf+bUL2zK9noEzEA88/nj5p/uK5voCOn6QZhHwu9DUkqzr9d+W 7dP7i/quG7g27jrgOJB0oolUSD9Yupfe4aYpjn6V/gwdB1zLFy8XXK992cnrIoD2pDZepj4GrHq0 4OBpe3K3ncYUiuba3v3GUHCQqn+KEFKXKfHf+1H1FcZm9beIr+FqBYgRlnLGl5ZX6s82qfMhL2O8 ZBYv5dSzT7EsoYGTzIczVe2aJs9NE7+owO+zgSozZyzzlwj28ldf/u6dH9BViTPbjzz8Ie0FP/9T 7R3v+B/tq3pF0l+99V1+YpW5MC8SR9KklFK3x7p6WeAMuQW0wNGdOFK3vJEPOx0GNiyOZzyQ1VxV 7VP7RNGJwZEVQcUXscixIJRM8by7ndWGJg19jyl8owzL6bD4Ef89v3q/ClXx0XaAQhO4sFDoRztD W/TgSeyr4IkOzzsQKlXG/Fl9Z/Rnga0I7Txm1AZ8aEY+8MHF1tRHXnCTrawx9Df6Hdnw1FpDNLbD izccninCOaR1qHPuFXLHxlcCY474UU53kDPjZciCsyXiS2dAvo3uO1Jke5+C6poJjK9AVccbAzC9 Awhz7PzMB2upNnFQylr00cEXGK66jUKKykEWzTCGbUb0VA6fePgb2LgSQecneWskxqimf/vgorHW aZj1m826sCWddFamU5adiFWxM0i0xS20ZcKjXQTUHWfbUrIQULgS5jLvmBDN7TqLw8spf+7nn9Ve 8uIXtGuvW9te8IJXtK98+TwNBE3q/a3lyDA3C5QqKdefB1mO8oIRpY2Ha6YbvaSyeWaLxQlV+IVt FB5yFlDjDclYNPpv4X2TwTvxy1bbZP3oxpaKpdsm7Sk94ak2w173aHPA6YWS6IDXWZE6mi967JRk yVuks27TnFTu5m6BHsxuhjI/Fq/cSsiTul1ZBWaRNlsMVUz7XQgJ7rSYyyKuN5n118E2Z0gUT4/D kkG/WeCz/CMWxNgxKbKi6XEiMlwqi3zkcUnw0rO/JdmcZbmrPeC443QZXgvQKRhx7gc5cfWZLDeg WqTHOPGcr6d//Iv9xTKqw929vwgSHSjRv8+k96YY+wtdw4tA2r/WW1Y/Pz5AadKxhIwB9xutMNF1 V39Xjq+wSGHUk9O3JgDFYrAskEULEQl5gug//XRiFon7YncuNuIB3KaPGPH73jrBvb9T7gc+JNh2 WxI8XbqNEE7w2RjRE8Dq93svXqYntG9vn/3MOe3ss7/WHvrQB7YXvvDZ7W/+5o/aZ/Tuuz//i3e0 iy++wosKDmbCP7NPOmSz9Uph+YWfs7Eo8xYkjzEgsi9zEZXIzD4wJwqQaflmkTNqKuaACmXNA9DQ D++iHUHgvFJsc2Vu4zm204jSPGV/EUYvMqax332Vsk4kNs0L0TPyp52ZR6bXZNhPWIufLX0UfoN6 G0c3a5M7csUE3aFVTopeyhkrlizayABHeawDI438BZltbVOnmaB9Pp/63aAHPwgLoScmtAf7Er8q BGExgLNM9foGOg7ErFoL39ttohVWnQ7cZMKCQowEaPk9sCGKXvgdGOR4rJdAQmobVK3FTC0ii89N 451AOdx5YKD3OjEhWYrXVCzWrMszDgEuynp6LzydVbjYB8RldjKWjz021H4ZrziUPMnxXhq9xnS4 dImF9751EcrhKSoo0xEo3yE6rt9jYeJbpNi5kAdNaVxP+PKTQTFOCKUHvvLT/kjweBZTSPu3U2/G P0Gn+0//jZfrO4X3b3/2Z29v7373h/T6jx3Taz5y+RppnhTwTX57QFkQiGq30i0/8Ne4mR0L4ygG BHb3EhtxKk4V74gOXfqVJ64EygOhJqaJ3mLVVy2rKxiQ6f+AotfxFmn1mRlP8NEthpJEjv1KeAo+ bQCi0Iq5aHjfmlNsrtrk+7S3jtpBLqT4QepXNya+kBvJhmFCmkPkTNzUuaDp3VuWWjoTHGn0P3Gq lpQN+NLpyD0Zs2hDoRiBhYfvM3IJ+eKzvukdG19kOPm4Y9tBep9czTlo+z5Pihdx50wB79XzmKIZ slj/9/QX2pfwVrM60ENxD32FPlYU7i+jbtpdNqWfW6zsTk6bw119gDNkTIsF61SmrQ27x+qoTKtR 47msOlgdoxRjsag8O/aW3N4PMaH6G2QQqc68JARwLyxU9jyFSuGdek6W/hxDwltzm2R5soWuZLMM nI1zCZAtuVVkqQ5O0Mt9cd/4xvm6T/ih7cUv/vn2nr//s/aP//jx9pd/9S4/2FBfZomdZQN6y14s lM3dB9dQDrTnGOPLasAKgxHFI4NmMSke7GUsTqSicXviEzt9pUm2yuY3dICLlvYnxbbwQF/woimJ Bk0baPzwExOikmWQsy8V6E72lcQS27qfJVY6ZX/5VPotwDKQ1XuTUPAynrqVbidiyvjy/hWBsCjF 5qqVPZQXaih47AntmAcX+zAdNV4Ed1/A8fP6Kf2wTJ/8Qk71tTLQdqhIf0bW4lWrjjkdxVHgDioq GGthNgscdVyBlh/pbjtVw4yaNjMnIjMogoq8EmZDkV22hsh4O+/9N4OwUHau8xa+cGU7xDSdkgWW H9El4KQXupJVcstvfOs0ypk7qxNJrurZsQFFVhYhJcHSU6ychlrAN1sAmqDHk0aZbBQ9zlKf5APz f8UytiLDfD1GZVeHTQpKiS1GhuUr75MR7cTR4lOe8tj25je/0Q8ovPQlv9E+/snPSZxO02rnW30A Zf3X/aeK7SUK4VaKkv6T/9DA1nGTn52UzANXAxMcMYfWg888dHhgADW4PSn3epcx4ytm05pc8vRH f+O/+qQ1mhM6xBrSC/Rt0xe4PO00C+g6FbSWW0jvrKwfzTKco/p2wK16R8fOWnRV1ynplEnkKRvQ N4HP56EJfKoLQLDmU+iSx2fR3XWbKusO1H1Pek2IDhy4hyjzAbEjlT8q9LmAWPpnPDFMDHrkxEbf rbEtGJOudho3XneD32K/e/k+/uD4gfvqcmAaAEXfx+kO3R95rT5zddFVl7YNOy+rdpxrr6mPBD4f r8DHPDQdtmCedV8BMZdG/qGvuJNuW9IWbz7AD7fMdobi19h068MrHnUj9wuzq43Tp9BE2V0IuiLw WIHJfQ1Y78c1ZsWPDMAIUHLdvFWf5sqqlpyhXPTIAdjlVcVni80v4Z4v0NVx6McUqraAfMBb2kAb HDlPq5Ku0reaP/7xz/he4ec85+l++OsmfZXkcj2lz1kV4lh8Ne9HZg+B5190QzPNxUXkgEQnFcok x41xVxWPRyO0sRzo9KsxXmXgC+Ktummn9irZCPWcjUDkTKnoy4aSTRna7DuNE4v2GuItRvcV+yeY nOaNCsZ1/diE38ULU8UhsqAVtmwH56eji87+Ww5zEnagY1I9WZ4C7lSMS1/K5CWrdNmvbh+8RSec YItFC5X7ku2WTiADvdBOFf8qRwY1/KmxOrapTqodcsixp4+C2GFKMv9mY1upHKBcHXhWH/nB14Ku Alj1or0bn5CzHXN5gLPQOahlBBJnDUatOzvqnWDGl27w9AuCQ5mGJwEu+hJUZSaL8i2D3zsd0VdM Zo1C3atfOnImGejoCNInb1GzIFmHGGkg5FbjlD0QItM7OJWJiRuyi0Eep9ZFVbaoBKrsRAbMouqd Cv5aBBosfBJSqwN4wNkoaOozT0wcL/vVX2yve91/a+9970fba17zpnb99TfM7muTGPSajY1+rmvr v0IUHj2itV/qeZQFGlJ4CkQ83G8kw0eQltVxakTHAy0dnjg7ZhZefphDdcdCDeIJCKD4/DfSDjqK pCMtJPHtlZ4lxqbXBntkuuXHP98jKVD6EbTYQZ+5a/HutmiVFnDEIvFIeY+5hBuuzR7xXU5wVgYM Pn7zfHPyQk++TU+Yblzpt/Lz+aH0bcKUnSxkbgPB3KjkJBORB5zJsU84BKnTpg03r9vUtmza3HYt 0f0o+gDzAfvt6ydRM04t9/toQ3/hie5LrruuXaDPMV117sVt+97r26K9tei/W/sqMIEtyBVk17VZ AB/poQHZc9NRHuuhB0aZDbl+d0ff3QAAQABJREFUPlOgwvr92+Jb9+8fcmfRoTmqkzHW+Pc8B4wq Y0U+FkpznGAwODO+5ji6UgFL2AzP+IdHGzF7bBcAoOsuZANt1w0I/fzSv9IPyy7mXIhmLIWPkOKH hOQdv3LUx9e6N9roSRf4hA55vD/uDs0DF1x4SfvkJ/+5rVp1UHv5y3+p3f/+927f/vYl7cYbb6rP BMKoVFdGaiELP9EC5XIF0PsL6nD413nLT8EJObzQiMCLJ2R0WfWAWW8rlDJfQ+vYIRFctQ2+WAew LLoQaiiUlQxSMd3M8jzHFy31MVmuYFlQ2XbTSzIOKMFRtqsk3z2liIcrZyAxd2pbAfjDbmT7ASvi kD/Rjwf/mINNdQlbVCqXjZGB9ErWQ0uIxvstySzrEifqBakrHOKQsfCZsstW1iHorvK0H8ROgGLC J9tjbmjBafG2evVxp8OAkwBxlFOZloW8niCuBqw8QcIccKmHBhiayRP8yYhCVlCjAGqUx+gOj6Hk Y4q9gMcOjsIirWCZxzbIR3LLL19LXvmeMiaUTvTxm6XAa6cWWejrdDQQ/NZR8PC4URznkhue4G23 9UVe5fA5LDKjh8cGoRJeYpbYO95qRzp4dczoKtrqGF0+Amhr5bxi4qCDDmx/8Aevb0960mPaa1/7 e/rY+nt85ihHgihFWt0saScNKX/Blo4qFS0M9s+chUFGEiYo+jKjOqe5BJN082EbZdLIV/Xqo5Ff cex8bmgE1dnO0Ix9MzDyCC8ZabeSZV2iMR1ylSijHd+rfTq8T5IRmH7iOiS6xnnnLvm7/zZ9olR7 QHaCOOifCJiE7lYXYIKFlnzP9NgEfV3m+l50oxyVndQKa3XWjZ2xzrD6NSGOjfTEf4pTsDqb0T0+ HVQHDkIoVXyrTDsb1+lYEG7T62U2Xbuu7ZDhO3Qv1NJ9lrQVy5e7X+LK90PKDmnD5s3t/Kuuahfq PWKXfOGbetnuTZqhb2+LVurbvwv6hqLyPdrfnfJ79hf48lObqDz2F8qzfjOjKzi0amf4Yd2hr3Nc d4jOLCxTf+FpZXd+t3e1ucg8XugbZlFe8y79gFRb4cBLtvtH3w+l35D7554nwqH/uQZv+idYhCX1 4gIQlZGkI6VF8L6TFGzSCdi/8gNm6+iwBcK6YPyejQERKkWGK8JzJm7HrTvbWWd9xQ8wPOUpp7Wf /dlntg16rcgl+oQg/DVf1T4UPW6rbqPlKGJlS+koGLpiP4qZ4xX3vl/AkPxBb/4iq/aiD3ixhAza K61UfcU22ZDOK7mz/Q8SQ1f7VUShj4QdNHrsAzaWUyeHEJvhRh3zbHiNpgKWwDpnU3UvKg2suvsv orod8Bgmess1XL2v2wYliTpKyflBm30IfXWh7T6iGeyR16Iv68TfbQtP7LaLpiLeUBdHYgoodlEO P5YtXqX3vFEQtMJhgwl0hI1G4nQRlKASZn6LCE9BUISzpdAqoDLShiqgCQZAT2JQINx5levU6Ux2 oYum6DpOCIJUsNLnhd2g09bTEXpCVrkEBnsLV9f9qRehNICeJZHHL26FM50EQYcf9gt7eiNbtgdD xbB4ZwJTsu9WJRlo63piG/ZCw0CotkBX+U/O2R14vAAXXfQIZHoGpDu3aRa1XbpMerS+RfqWt/xe O/zw1e1FL3p9+/znv+w3hO+lCSYTEUKRYR0U7GnZEpuAOuEMQNE5buTdFlhtP/1C5arDFfrqB+ZD hihCP+tLxpoFTuKQHQO0bk900pbSw702cMQGyvYG5ejl37qoI6/qoPlhhWkMkCyPxIJVny0baTHT 2wCYCu4S/tOgeh3HnTrD1fbf0Rbtw9PWlj7pqA4MTJJ6Bv/3TMVehoqIaoE6gskXo5Lm6P3qH2Cb 9LqHdYf6rBuvCPHEg8HguikUE0PHnLjar+qLhLDCCCWsKK4tQTUOWdC5z9JPF7fd+tzWxquvb7ds 3tpu1Wchdusp9OV8OHypnnT8/3Eidpyt2bJ9u862rWkXXHJFu0CLtiu+eoE+Q7ar7aWzke1WvYR5 b52t3VfvBiSWvS0rzgK5/xDQjujZFLZqiuoDY7kTACowo4KKRgZt1PEGDWU/zrpblwC/u7ot3n1g W7yPFnGe/Bhf8IUTQ9IvQOg3mOh5URT2Qxu4PJYoM7dBLEO88ABLVX81ThFUMqElAa9QFK37pQDk 9e4vyiYtmZBJTMkrOCEsS8i7DqOKMfTImejQqz9iMNs3ll5YJ5vxCZ3QihtfOTDmt2bNWp+FO1gH 0K/67//VZ+O+ee4Fuq1gV7/cSrvPdKA7dgPHLizyto8r+1+GGi615S+F0GJ7MRvEvGa5lueN508Y oZtkSgLYIqONxMdc25MvVfZy7HQuOtNi15Dwp5tkaKGB6g8U5FJW+zxIRlvSJ6CtfYqFDBv4J72S 47puC7l7m8GEMhL9BlpiVDwpm0RA903atccm+6fin0nyGU/Fx+MEYVov2CdUub2Ek1BhrKv8I/QQ 4Be8lUe24Sfd9zGSLSIbqUD4PqJq1DIWkSRyhBGsGjBASbkJlHJ4LBNAT1MnUV1mSIrkyaAJLr12 bo4e03TfolXblZjT6cjg89vz4yABmujSuDwEUE+vlF5FUJ2VRs3NpSixLN/IWUoX2CSheZrPwUaP ElkFmrIq+qcz46O0Q6FFld01/bQAEi0SFsRK9uS9YQjOGTTigOjQIgNcOo4Fs4EInaaf4Ys/scAm vftJZ9zufe/j21v+/LfbzfqI9Utfenq7bs26towPxsOP9QwIiUQPP+KBhtIzsyf42Edetk2kU9+A nUQ/4H9BQpcUGpf+wYJUKbJDHx3oIdGWCKQ9gWCrwu56YboyfDGlcOQCdxGqVYKCGGDHyGvZYkJ3 9M/sqhhZIGIQrgSeT6XQrnfdyfvebmt3Ltne7lp9s+6B0/1ve/MFg6Ld4xYD5vF7gu2RWUDR9hBq khiS4Hft0lmTm/drizat1HuD9BoPnUVhUmKHh8pZvy4/irv7iWDskH/V1lQkU0czjpvaDyFpj4pk yXFMGBRmKDHcE7ji4P3bPR9wUjv2h05oRx95eDt69Wq9f4wvBczGXjH977t1P1XMtu3Q90I3bmzX rlvfvvudK9u1513qM5EsaBkD3FB+2227Nf/tancdvLm1g3XGdqle9PyvJZrhf7W/dFpaYuwbvWVm MJpSBx6LtunLHhsObHvt7ve68S5APWaPGM950lvjAQNqLC7YX4gwc+g0bhh8E1/ZzvgjeYftCcjV WT/DHvGht/oei6PO5R0GvMLyM00VF/TTPujL0rI7eHLSZKNroSydBpUFQ7HmzALgVskpO1TWv8fG 3Jhh38T7NE899RHt9NNf5ocYXvlrZ7Srr7rOt63UPoq5V39qnO6W1cTG2B7dycsXR8rWjswzHsm1 qTVKPYOyeOEPs3usu8KpXv6Jhv0E8Rdt1gPwjPvP2JO87EqtYl161G/q2nxXV/MLFeTX/tPG3g0/ 7VuJU6dlP5lErKxjDKBo8ZSE7STQngMR0lPZO6MF7P2hGgS2UWT0QGM+zYXAWDf4izWS7/0LTBLJ 2wm4nE5l1p7la2SVfiRWrBbd576n+koYjVRnKAqZLbaXUQuNjgLoZg6XgWm8kWZUjNFEtoxCQg1C afI/duzNBCZn4JucB9/ro2wkIMMW9mBYRSEK2/XZmcgUpnyDmjL2s8jjhb3jVGa0N2W7gs3CoDf0 DIt56vYyZOq0Jdo+EGNSyWZnlCkyGLwg9QbsIQcbXXavyycuZXN1yAUxxoiebAs+q+64qbBj1y7d Z3Fi+8u3vMk30b785W9sN93ENy25ZIa8ig05kbjbhNtlR+doR3dCAooodnaW75lhIWcFbakVlx3E gze40x8Ss1EfZccHfTipxKSPfiYh6xeMOIIu+dWG0CYhe9YSQHFeEDV6/DQU25Sil7zq3rrMZvSb xVvBWMDxu0P97HY9VMrOGIvUFxA7+FD0mIDdQiovTdUeJi1Tql01edrHbh/8JItFhuAlIbI4eOGt +Wpz3SrBWQC+Z8pk7WhJQU1gJSWyHQuUd3tsm6vdOouvss8Ew6400hEz6qjKYo9+mn5+0OGr2lEP OLEdda+j21GHHdruccgqf17LfMTPEv/32ThcHPioDTjTdv2mG9ua9evbGn1L9rrzL2+b1220T+5L OCcG5hJ/mYO+cpsW/3vRVzhbO5s3emNVI8PW42oBqnunjzAOhDxf0YrEvvd1N5Mg6PPOo9pFrIZ1 o8wDYK879VUFLdYW6/NafMsWPbQbevlLoh2nxVwHuv9hh/2j70GvPmC94cRmEVhewRwTFetAFo3i 66osEzn6MW8jk2rndGZ5gRhXBOGteMKHbcRW+N4Gts8QcABnqar9gLbbDCs7aMumon+fWIDNVawX Xn/k/EcuOU/6H3/8Pdvv//7r2xFHHNpe/eo36csNX9dT/sS92yA6n81BZHd2is3kvASjRbTmK/Xa VpoO/lWFMil2ez+Hjchb6LZJJ1tUi/3s1yp+igll4WIfTJMtxGpBMqXwoucBA9JcnyjgIEMA6xVP DjBDM59DVzQVP+rWJVXZT1tWZCqvMJYtwY0yRh346P4+xX6GhddxIZaARUNeNuAwFRBJVEQjuuIt GyYshkOBnPtq8RbEKCcGhTB5HAlP8jLm7oGMEaEjv0sD2NGTITQyerM4EMBlP+kG3BNOgs0kUY4j Z0yxl3w+JQiTLfK4JpYhED1YoUVGfJ34BKOcevCjvoJVg83oKi6hB07yLkhFmrN2mOWvd2KKDX/Q epKTqeEnn3W6mmyia7RlhIWHnJuiT7rPCe1/vvX32yW6VPOKV56hz/Fs982a3i1gngYPixYWNJmc M7FhL7aR7Itt7WVDy1bjVI/dHbUwhgzS3mT2N5VOHBnkXriJHs20XzdhsoF3UckUS8BGUk1CMxi8 dWaPQv8pi57YSj1l/E9ZpC5TL3if7EEoBZ6y7e59uKzARvFId/V59QLJsm/SaauxS4XE3/GWb16Q dh3wIJs/eCe/EWAhCIC4bCrJFWEDhUKefTAPZdq1ZFp254XG9rLDB4YK6U5KGZtI1tXRC+0Ejw2l xXIF8RgvVtuMvDv1PVUWlCuPOKQdcd9j2z1OOLodfuiqdsTBq9qqA/bXvXHcZyVpim1YDfj/0KbC 6m27TZ9G23TL1rb2ppvaDes3tbVXr2nrLrq63bx2o8+wsUh2e0Gu7kGbOsSq4yMxqvFHXR4L7rbv E0dpYVvxXNAmkCOs0DSBkoEU6gyAkOioBZXBs437Wh0M+cBTsqrv6Os4pqoXmachaHN+7q/SmX6R vhDBVefQsPpy9QzZZft6j0UO/U+J8cJBM4mFGsn9V3D8i07LGWDQBU+ZlPhQnuzDDh+qlv34Wvd8 VeCQW7bBVXxuI9eknzlJMfQI6vYU3WyOGPXGpuQWow1n4Pbdd7nuPX6xn/w//Y3/Z/vA+z85e3BM vtGWxANdsT+yK67d5h6HyHZUhQpN8RLwog8dVfqZ4yunfVCtvhadUMObNqbvlP6KoWPVaUa7Ck6U JQEd+KJUMVA/R7AQtPLoG9Akc8CuGNP9YbFdQ8yhLZklf091YKTYV7Xaxi5qKRMLaD1fdeLwzvxf KG+EW5Y28yd+IqOLnOQD5xf9wSfn0MlpGgSqRRhH4iSY54WEZsRLj9M8bUFnW8i4GTFHXLPwCq69 LWMAWcF7wmBgdfnYOgYQydgIPCkOx84xHxdu4a083LN8lBkoshOT4isP0FF6wM8aHbuDw+7Y5piP s4GEQcckzWSeszXRSx7fS0a1i7hGEpctGyN6Ct/t2ikec8w92l/oUukVV1zTXvGK39L727Rw0/1t kDvGZbDLe+nldLbJdlZHAh35iQOTfjpqdi7goCPFZ5eRhWnOagIovwvOAKdOCtx68FOdI97WRGAy 9ydZJ33CatKZ+KyoaCxPGzWBQ8YEkr4QP+ALr1mjrIsA59SDpfNVIqv2xiHj5YZ3vvRxYqCdAEZT zpNRiOEWhW5IWzzJ64rAwGfpZJKtPy9GkaM//kmLdfYsNgPKDhh9JG/hl1LD8BFZxnDfFXAg6Oz+ mVMw7IRPf4xNiJAfOuR54pSS6XK3aIBDEzr49I8bswQPcq1kIY/vtxTHTWs2eIGz5ttXtNXH3qMd fu+j2yGrD26HHXxQW63vSK7Ux+730TyFDOyIzzMl/++WsIP44NdtGmtb9F3XDVu2tA1atG3acFNb d8W1ur9vrS6PbvErU5gH+Y4siT5DX+HsA++4cnLAtOvkafMevDv14AvjirDhc8W22s9yuD2EcSBE tUOJqq1bwcXEyrTS6zNz1jGj6a3W2zHtScNBUwmfrcctLA4MUyIG7PQ72LDQGmcf4DXxZHM5VsvC zB8wO64i5g85VjOYar2qEwn7prLHHuLFF7uQtaeErTUfFBb52OaDGviRqz9S6e96wPUzRrZadfad meu9MBfPaIN9AIYwpcynyN1HByacgXvDG/6orV27vv3Ob7+qHbD/Cn2l4f0+A1eOV1ihR5b7jco1 BxNzSbbtfQ5SrG2PgPiRWERvbHPcMAjDemxDSyxIZbv6uWRSq7N+EJOUEzfPbQWZZKladgovWaNc c9P3TdxxXV+XYnr7R79x/7YqxzV+JI8fqSNj3sfUI3/MsS1nM+Nn8LEbW8YU+L8Ey9wMDfTYEFtj T8mZwb+XvEX3u99pdc+bKDBmdDbGOGC9k0ijZTnMac0uPcqpxqCOmhpqqrPDGBvYPOJTp0Ovtajx IhO1BJNkp8sMCPQrOgbMvF4z/Asb/M1RXOnSEPbOrHTBuieZwKpRh0aQTQ4PrPolfpFR8mvgJKbg 7p4QUA6OuqNvhEUHsMhHXmiCJ+eI7sADD9CTpH/g6+6/+Ev/vW3ZcoufLgwPdJajuDBISbakm8SC MhOF467NOEGaAR7JSeePzMkmBp7kUe/rgT3KiKzkyCGZj3bvCfiIAxydoSGHL/0b33ovM0noDWdS wjb1t8iNnNQnX7pNiQVwaDKWOC9EnbmUFD7KwFmo99ACmnijp2hmvopCVLKt+286bDDJSGdxs41I mGqYbie/rXgWUylXO8zq8SW2ROdMqEqS4UWHJ9Pi7SYuIBsryOEv/WbEUa6j6LLT/qsdiCdp6X7L 2oG6pLr62CPbIfc8vB108Ep9SP2AdrBe9LtSP87IccsFlpSeys38//AG29BjG5XzUl3uI9287dZ2 07at7cbNt7TNeofXxjXr26ar1+np0Q16EGFn+c0cA78EOM7Esc+/8dnCJdcHAqoQM/57E5U34seK tI15h76RMVjE3daOn+exPxJuuGhYWNY8BV/1nKrjdcmKXNvWDWMRxG0B1Y74iK9F7zUF8zgi3GdU VDVptAkYvuE/9JRJ0yIXuZJl3cbUJjEAngMOMMBJ4UndwD1sYkvm3fRBSK2ja0YqLsz8YMwTr0qx h1p0Oo7yZ7Q9uNDTdtxa8Tw9hfra17yo/emf/K2/zFDv2yz52Mhvnjf1+BDdqUcH8PAbRl1/M19m +NDN5917RE2yXOmBiS2GDTSjLeCo82MOSt8Jj3PGDL7SDwafwY39krrpJGf0E/iYwMGXfcKecegs TPxANik5rxcBNPaP4li4HfnHcqiAxe7A5usjn75tWh0a4pRhwKF5Ya5D6J46Gl+LpjgDXXgh32Pq AQEXfZRZUVcQakeCHFKciI7kYENjwj3UgYc+NMkjl3rkBBaewMn5AZ+niTxJqQHZGzi88/IzITiW QjJgZql8hmbsENE9yprxzOwfYbETOTyefsYZv9YOOGBFe/7zX9Y2a+fCvRRJkZ/BwRhZkGQikxJ0 7HiZRH0vmnxF/ugrfL3pptiD5y87o/p80szveRnxP3bFlnk9gSe3z9Y/cwDYFHNw/HUDwSVRgsu5 fKyzoAsnSmjDSxm7ke2YqEyibp0e2NW6WRiFt2y6+wEHR+rIqjOvspOdnAwKH/LRiaH44eSslwUo 16qvBs9NsVBMi1JV4ntikzo8oz48MDcCLAQKJZXraxEAS176BvVRxlhn5zCPA488PXBaqUTWXKQY QH/7zt1tw5VrfPZq6X7L28rDdC/ckYe0Vfc4tK1YuX9beeD+bf9999NDDvrQul78u5+eWOUj7Vyq mHzs4uX8glEX8JjbhB63wIk99zHdpt923Tu6TfewbdWi7BblHAxt3aKFm84Ybrnhxrb5hk1t5/Yd 7a7b1Uckh4cR8KP6WfpF9TPg8zGhTjyJPdRuO2p0Sa2INPLE40Npm4fc8lOY3ucnmfRzy+uyer8H T7tPdJLqN98L5suU3pPPaNK3Ew9yy4huL85q/g5NdLiBCWrXCR4cf04VmKlfGk/b21f5L5uIR5LP lEnfTH71QepjWlAXyho7zdjn4YmskWdhfEoyMtwmVLFbqXgqVrO6Ud5McjBPPGMsJ5xQwLlku0hn 1d/x9vf56shvn/EqHyD8lb7KsGRJ/6b0THTX3e1HuP7nfRjIJxx6Ywf+wJPogctJkVEWcuCpVNSx HzqXJymdbMgmmrl2ikwv4DS+opM8CzrHXXYlhQadSYElDy655c3JDy85dLFlalzBPe92wsjOSaUO nmxOHauIUOjJRzugG3HUg6c8tc2cf/48VpDJIxwBlCPYFjg+fRCp8aDJL3SpI28elnoMhCap7rmR sUxG8vZ7NRIyph2h7LmbnRIYWGSPegOLncElTwNR5wfdfArtCPcUKlpyGTjx7klO7PPkg5CuIjtW X/4TOPGJTdHHICNI1tWBox7o4Q0fl0tf/rIXtofrQ8m/8AuvbNfrCbdl+qj8nnyrnjaLv32t8Vnf 7Owxn2zBZ9pRNLgxHrUlTpMeQqM/EmGlHdPOyIA+iztsDz85P+QkdhYytzG97cBg2cVEj736C39i Cgwb/D4hFcCzwGGSAGFZDoZouv6om/wRAHmxC3zq8EyyBjnQlGxKVY68wH0GWnLdD2ROEjaTfBmN RY7cnHhk84LY4JtsSOKJtnxHMf0CXOIPLT/cd9DISOhgkzTYAyg6oPFCE9j8glPs/m5kH9uciUmC T3e7WAdl+9h1GqeDhOhQwQsgeHfrc2036DLk+qvWtL11ELLvgSvafqsObCv0W6n74/ZbqTNxeuXI /nr5777LlrUlOivHmTl+++hAZh89nMF3KLOwiw5iSHxYoHE27TZ+eqXOLt23xqt1OLu2XU+KbpP+ XVq83apXnNyy8ea29cZb2nY99HPrzbe023bt9kKLy7/u4/vo0uiCuKl/6a9ghXDsBQA+xTHtJxLg WVQ5do5RH0u97XrjCT2bI6GtmPag9wFq/eCqwSGb+g/zkMchcvWXlL5N7j6EC/FLeS0uZ2PAsmG3 /VZQfUxFz10xSXrcd9VvkEFK3RXosqhHDwIhEzztlhx+40H3+Dme4geevhl+5IfOsLGuMnbYlsS4 44H53mzZgCmhUeAsD5nECDiJesqelwbfTQAN/rtSHlDn01nvf98n/K3p09/4cl1S3dne/va6hIrM /CI7diQGiIOGBC54A7ShLUnQmwp7NU65jD7anHLozaQNPsYGy+n+UrY/g/+GdZspwxt5sRE4ab5O f0HUdO/noAf6yImPqYNLCiwxoB76eX3hCZx8nh/Y6D/1yAu/F6KxtedkucI3yg9v5Ma+yEoO3XTm LQIAppw8sDHQdDDgWZVHKDlwlMJPOYl6YJEJbjQwHYYenM4XPmgpk4JjkTR+QDnyQ5e6meY2obG8 biewwEcbwzr6Ayy09oE6dktW4MnDP+bB2SMGLXHTzoTJEjejK/JSR1ddbKs4QJ8UmtTRwWB/4hNP bf/5hc9pr3ntm9p553+nLfkeCzdkJ0UvdeS4jq5u2wRLzPCByUp/5UPZBR0/Ujo6ZSDjEXVocmRN HXpS7NqTf9CN8PQ4zkh4RyBAZEUOMmlybPWBgBd5EBYi92R2sxfIRxY/y0BC39lMsN6X0MV9bdyj JLIpJT74STn1icCC0VFnT/g4tg2TSuJqtGDoY5E3+h4bTMe6tdsCDzsadiwsnNDNggnbmWBdZ5HE n1WUHivrvtoJh0g4/SM7/C7LE+s1uvjtmxRil23DXoQ63hZjOeYTGDnxwbq1IY7A03eCR07ujbtT i6qtGze3rRtulmjFXe9I20d9fN8D9mvLVuzb9lmxvC3TIm6Z82VtHy3q8rk309u+0kjIyjceFNAn 43S7Ae9d26nF2s5t2/1eOvJd21TXPW2cDeTx/5of8Vvx1Bk2H6OMsUBwhcXxtq+i7hGp2JUJ0xaa JMeyCyBe4TOeNuKfXDaTKE/8wHvKk4pCGp94Bu9c5JxVT4qc0E515gvJmdcLHzShp+4ydti8stH9 p9sWmfgxzQGqsIi0r8D15zjQifkXL78c8KEHeOinerfFcVM58Cos3NpOkViGUAvnjIU+1XwnlRpD JNvm0sK5DpDldlzq6dOpi0hC+ri3b+rLsoUF3D/8w0fbMvXbV7/6RTrDu6196EOfMjwikZ+YU56v j3TBTXpVSMxpExYWd2JLTyN9dEztFSLlo17AI034oCH5QIT5p9sNjPL8nJ8YmR8a9bnQhNdz7WBv ZMEz6k09MHJS5pjAY6OR2kQP9eDCS33Eh2aiU6+wfHhRp19MBT76By8p9lSttpGXfFq8hSgI6pTj THLg5e7MCWAk4N4RKiAEWMyGF653eoFiWA2OWQeBLvpH3SlH2MjBYCQQCUBoRnsDcz4wO5CJopDh iQ3Uk7C5XiFSAkIDPnTGSF5wo92hgT7+Ux5T6RdEggbVUzuEr+hEpBCnM9xdTtnBjufYY++pj8y/ TB9D/kj78Ic/rdeB1GPnxC5HMSM/5djrIycNsNTn6eIr+Dqz0v2fhc4ssRkfSKlHLnIiywTajLDQ jfyhW5A7LPILYA9iJtY9yS9edBd5zFbVMhABbj7FHsvEJdPNCOmP6ZOL9WoF+vq0o2Itp4azf26D aC2fowtoSazYWEZ82oNR8c+2iRH6eVgkGod0/5eWafIedMDvAwUHovyMfZbtYS49/PUdGHhsiG7j hHfbWVX5SzGLP/PIXv5J8GKjY4jswV/K/MAJVTyq+0hWPOjj5ZC7dLmSxZX7gUDWz43l0GpxxeKN B3V8KZMFrPpmxPGONRZkd2hRyPd+kYGt+AWOQ4rY4TNr4p9f7MzHgzZPckxkR/oR8KlNVLa/MaYz +f6tjhvjS7l3wU7Z+TstZ1xxzGdrBYMeS2y3bBiT9XYa4GN9uo9LPHCBQw65pczJylhFjnWK2IsC LcZI5oNHcBZfU+ommWeMWeSL3ryKOTSkbkGV6YedBgA0bgvBaMMytmQEN90b13VDY5nwwI/uwKyl NvFRZEoQFzxb84GJnfGhw6YYdIawWy76fOCjhbT669Kli9rf/d3726qDVvpdcGvX3tC+/vVvewGH HI+HKFYOLHq97yoH3M8zN03k0jXZrnJkwY8t5Pxib+SCi6zoC26SPdgCbU74hC5yQ4+cMSXG8/Jj S+iRE1mBhQZ5KUfvqIPyyBv+yBx5RroRHnnwJn6TTiHrIDxUM3sS32BSjw3xPzKjc9H97//Yu4IM MzkEE9FcMIFHcHI6XU6z0wnmJxMxeCdAszBFWj6EgrvfMKiUkDfK35MNk07ZkQRd/IiToRvlUuag zanrTLA6dMpGO6CZX7yhBx38ohNm6uFNHtgkfCiEBpCnVfGTMm8FHz3k+Y02mafrtgBt4P3jN/9m O/yI1brP7Vfbdr3Nvr6TWnZCF/nkpEmPzgI6zbVNAe++TVzTvlBMsuKTci8GwPlXvo42wEMaYZRp g8Tcuqr7ELTSU7vUqT8lRpFloaVUxWoz9xnclnzoo9O02kQf9RGHfkQZ5pLq3mkgrF7K63Egmx0D dk7dzsgiT4rPqTuXgiz4YlvwsYXR4z4jRGSAIwGv0dXHpmrp66EJjxm0iZ49yQ+NxEhgl5+YAWQh N/QV6IkJfxkfkW9c551sEV1sNh21oU/Cgxr7VGE2KJvQiq3mInbuxSK/SlY9VYsDHTGsGQzqKMqO Ivp7f8QmfqT4Q9kwwZn/6uBVvL0/2Vaz9LNHOKDOEzz8Jb/OttRluMJDM9K5jPf41eMCe2JmOQMc HHaeqCd0ufx7tZ5yxRTbBNIV7KGiDf/wAyeTTwv0Qxaci8ITV+AktX3iA10WRLGV0EHLz7K1qHR/ BNKFhN+LOROiUn9i5pfxOJMpG/ib63eYM6UuZ6qrgMxpf7UQMdkC2Pp6H7aN+DXYkTK0PoOrPLYB G+cs6qTRB/hJiXNyA+fgyGK+5yDrd9/06vbQU05uz/+5l7Xrrlvn+5nDi0zKqY+yKIMf9RI/bPdV L8UFvqTQpZ48OsjxB9sCCw15cJRHm2JbdLkfdL3wkLLIc6VvYk9kAY7e4JJHdnTN00Vu6FJPHjnk 2ATdfHvOyw7vKHP0LfDIhn4sBx+5kUc+wihLbq2qRyLKCOQHPin1UVkCHZ7k4Q9vjKKrpjzhVEAP P+SN8oGNdXigiV4GIQmayKXR4Us9/NQ9jrtvTILQhd+FvqEfwRdewKENXfDYEjsDW0DDRNEbP/h5 uYFLoVlrW1KQHd0jH9jUJ/4Og573uT3jGU9sj3jkKe23znhz26an4HLPU+SVhj1sZQDxGuXvgcog aCKvYlyDP21Ee0xJcqmX3NHLmb7RF+QhOwN5xPWmn2LvM0cWWe1WOkozMlyXabQtCVjgkRse+9F1 z+PgNSwyDVC/1M4osjkLg2xpqzjK2PRV7I6eyCIfkyfUzhNb9sjTZY24yAEGLwl7qKdN7DuXLveQ oLO8NE+PV0jtSaeBzjHUWGJwTbwhFiw2WGaHz5fNJxkeuxw0dN0Zo4kBO2mPYvBddnAWLTg8nFHL wzUqGMVZH/p/bLQfgnFGyvQqa8/oHRln48qWasfYG18cvz30H4cKG9Cpf2x1zBHd+0tkYT/J5hFH tQfyoY+NRYGokue4dD5HQvTQIlvMjkl4Sv6itnr1QXq9ykqDo1vSnNCHfkVlgU771/uH4w11mHpe +ksOumxDr1ZW9ky+aNHqNiHOSsAdz+6PYZOSwuM3f6TEfpIn2OSPZBneaekDSZRDByz8hs3IQj7l Ex0yoeu0sQPCil8fA70OnDTqhG7kAz/GK+XoBB/6wKKLB5l+8zf/R9uw8cbGQwxcSg0NfHtKwaOH MilzgQDWZZzg4EMXG8zQN4FFjg9YBnnAQxM+YP/SD33zv/DuKR9lgac+5olV6JA9b5MZOm/okoMj PvwiKzKiK/x7yiOHfNRLXw4ufODzCwxdd+PtPkIDbvGhhx5/ehgCJEcYApIifFQ8ln0KXsQ2Lkw9 h7doBdBApUwyjFw/Jq7IC36iET2w0R5PssjRkd88PXxJwc1swMKuu8y4m6/wILpOfdXkVvIIcvHO y48ecuaiTBiuSxY7Dpd7LCZ+rBHOZ5Ioqk4s6ij+7g0I3wJdGKREbPjFT47QjjzysPaHf/j69vfv /nB7n2545b4J0tiW1BPXyAVGOfXkIxwYO7cx1VmiWijkkkx0kUeP5WhDiOdTdCUHnzIDKQu0inHt sMAjP4m6/ruChVoiq3ZsohEbvMWzUA7yIjt8oROTdUhT6RlkwOeEXVYvWlq271Aiw7lgajmZUfYH N9kkTl9i7XqCH2OJrtBbDCYRA+CDXOiAJ19gj6iNm2wWlUyKPqSlbAHDBnj0WwaudBuAk3xkzxhQ eTpLgkz+xI8/ljNzwLTm7TQuD/ZDAI91oiO4iXPWruixUSXExei23t5+mYewOz5NehGhFHrKaYfQ 1jxYNpXOoqeV6Qw9HNYfXRLo+BBwYPxoN2RanljLtTIA/XVbSunnDJf1EydiDHG3FRvXXb+prVu3 qdtdqMhwPhCHN2fNpjo6bYRyhKpZ6zJw1cFlzEdc9X2IsX+wiVh3IuKHr6mHlzo8C/gixxK7TGD6 c/9RbpuwRQtyvyal86CDBK3HU5eddgtu1Dfqd5v0xgM+8pXgHnCP8SH4Rg62xidsSdk8spAQDaw+ eOhzuu3r9MC365aA8877TvvFX3qOHjxbqq8wfMMHJl1dxW3UMZTtYyesspRy5hL5nQ506MY8ZfAZ szYa280NphK07sODD6EN9SgP2sQ1cPLxh+SRBpz70NA20AAP3YgPjjwpdNQpk0adgXk9gJ/YBI0p TexSPR08QYNdkE/j02zlW+RH58hAWwMnJd7Vl/W8wWGHnXA6yDgQwghIPTlwymM9tPN5aKI09dFY TwIKGDRJoaNOOb8R78kLvPgqlIUN7SgjspNDSTk+Uw8fZZL5p5dhYoNg+vOEK14WEuFB1qgP2sjw Tkv+AQpN+EzTB64ZTCM6j6MSEhvDExmJYfhsoPnFJ36ejnvVq/6LPnJ8cHv96/VeN063y87EIPLg T5l81DfJ1sCOj6ENzvU+Yc3joAlf9IZvPg8d+m0DEeM/wRRDOrI7r+E10Nhp4H/4dH7JvNW3StMo J/3F9nY9sSc+JAc+8sbO7KTRi7LQc4aLvoHYvqkdKgs0+oHpwc2l7qttw61eL/MsbNoxIwNZ9o+D l1I2kw1vh7FmqEuGaot+gBQ70ia2XfSoNUztiUboSfHNlWxEEH7b0uksW/yJU/FmYSYiKSlvOr/d QHPp8UiRT25T09oZ42vsyTb5z4+EPtsJWYeT2yZIOl15ZIBhTKL0o4ILxB98GFjmTD74QEpjhxS/ XNHGOolX9Cg3LLJCg9eWW/jIKdpIK39Ss0y3H6yxq8e2Ezne6HSbzXSDhn8/PaDBJVPY8WCMV3fT kkabJYWATCk44GlzyhMc/RO1CrKFxDY88VcG2BYx97m7fIMu8szbZbgs2iS3qyrQkohL+mmMcLsy J+uPg2YfHPWxR5xMJzMmfYga6wgODCnYOtjgfqh6YkGdi+ITjXTFTkSRgpvPg6uFsEn7OFdrxeau f+TlDPJ6fanjpps2t5e/4hfbdy66rF115bXTATW0oS+psy3wtIdp0EP/7vpiU2Skj0VC4G5LxcmL dGT2WI38iUNiFV7nA/0oe+SHjhQbzOe2ncFCP/oUvuDm8+BjX+rQAYusBXwKkU/CCBhfbRf2YGb/ 0e9sp4CRmzryojMxyX4NXNLIZx09DoWnvbBFimMsQpLCHMbUozB04HNqMTByG0uHUIJmzClHnukW GGZSb4KD3z8PEJiLJvGiFtrCdPxc8EKHD6PNiQE6IqdMoomUcggpIE9qkeDJzwBtpomBcoyk3Hkk aCa/88Nrvaaj4n/LBkeCH5qk2Bh7DR/wu/Ux64c85Ifa0572+PbmN7+tbdFnebg5e2ZHJFU+Lxuo O2AnC19y42WTFylUmPiUBY+8mbXl36hjCA3cThNech1HTbLIi0x4Sm6XjM4sRqSNP9NC160PfpLR daVObl2CI5v6zPLRg2KkvZN4BQgUbAFH5ngfzRQT959uXwT03DYMfiKvZM50YWMdBCxkhu57JpQT B8uuS4ChjZ9TzIvUaMeYxacSXcq0+EplLgVGXKAjlb75/jrjhyw0ptdOCP5JFvbS2MgaczMu5JUg Xw7eUxyso/NbWDbi8cIQ+ciUW/a5x7K0Y2QxlF3UZ3aBiQ/o9lmqIp/8QJw50KEEXdlpRKfumB5f KKeFCDzEXP/+IU39HbztFS42IMVp1mXMs2L/5e1pT39UW33oQSUL32krj62ST38dm3bUH7H4QUIv Yx47ZIhhjqFKziUfcxGI2wUzmfk851LtMUECMi2/xFV9wuNzR5QY1/EhP/COU8eTgcMGUmw3TPXo C595RTrqoew/8v7DdmSYT16m3JVUhJCDTvGMeOqk2ODK3Cb6HP8uBxLb222YY/Hl0o985DON3+tf 95J2yCEHK87ld2hHOwJD5jR3A+z2xdfYG3rqjlMAPUeTw0yB2xloyy4rpNTj9zwuNMFjR2jcV7o8 YPmZpz/ckvXKaNtYHnlSHuMBjJQ89kNDeV4WbTPFDV7sgtZSEgv3gA6pLPIDnK9HJvDYEJrg4J1s Qq9+i1evPu50E3aAmUU4BbRrNHFf3FGOY5T98w7Gzem6POveJDga9BpTPVydpoSPAQUS+ZEdmFTp dHjJoNNI8+QsNLE5AQhfnB7xwKI3+FFfSa+GKF0Yrzr/8nXBDgBFSuyjiUBxYV3VweE7NXhzOn96 6SBydexm/0xIvfyJzdg2n2L/iCsf9mpvPP3lulSyof3Jn/yN3w8EL346SRR01M1Lnb+uwzgRojFw x6jDkAENP5+B6nyTfOFjN7TR45hBmx9tqHL9HCDFpwZDdMNfOgofHcGXTPzCl3ERAX23sQ/Gma5M rtzXsLAfsE/aKx9H7vzwkcJfFW2x32Zx3A2++9DpHQMmU59JKtsiCz/GGFkAMjDAshIXDCqYfQWn PxYCsYdJBZhTMvlMLFlY+G/wAbqyQ8T6R9Z0fGKAZPM38FiXg4Nus1ldNiPt1EadHxq3oRixtGJV 8nkCy7IHWlyY5EFvQDRVHh1Ci1a/HqPJOAEtVwSJj89u0BzdHiRFT0ntdREs4En8lfOXFPmRMeXQ 46RSxijlcnHg36uMITbowyfLpN1EP9XRShvb0bLRdCXQ8P+LsfcAuO2qqv1Xbm5JubnpvRMgBUgI RUCR+hRQBBEMUhRQEERFUISniKAPC2IDxYI8FP8qij6jKAgaUBFBOgklgfTkpickublpt77xG2PO vff3Jfj+63z77FXmHHPMueZee599yqfLGUysKPy244033jq+rk3QfrvaP4wtfqw9WPEmnOYOQGJZ cV+BuGjYjUQDH3GXeQp/7cGxE7NO25i4437Z7rGWdj/xFjbkabcdmy5BGPSxMOnil40LXxjEcYpl 9y/2yzmaMDRuTmUM/+CBLIUxMCnuwxe38rSUo8dYksBs+zL1C8dfItNaYbmKC+PBjp2prYpjXb6d e+754znPeZp+oHrT+I+Pfcov1JGNTWqVzxAkpsUU7JZpTh2n9g3dpQx1xtBtGXK3/W35pdyKwHi2 kBKuHmD4+Bavac4q9o3Bnk1PBCSa1FeV5tR+Wadkmuuyj6HGZk+UvU4Vdvs5+eZpgEviZnliWDh4 REqstoGdLivsIbwobc/6AZqwGtMyso8tcU1getBETd4sJmjG/Zs2BLuMLnX5lhS6s75UJde4vVeH +9y2nZi4N0xP5kIeHZv2PM449LP1VWq3Iz9zwFKP9YRglz7a8yTMcuggk43WyjLxVvJRgp8DPB2E WWMK5yybxc42bTufHwtfaxknzjZmfMxo+ia88h88vqTwqEc9ZDzs4WeMP/jDP9NvVOkffGscWfuJ Pf10BYta2zc/AbeMfXC7rXHMaG7LTuMxGkxXLOy2ZCnGWXATiPv7yeNExzKRJ1TYUmeL+aBa7Wtj Iz/VJUm9/QKDB7rdxzjt4LWN6DEGHsUXPuiv2ppHL1g56a6gG30OMGElbsotFs0VWFkAmoGVsIvS qs7O6+lQR6SxWl59jlspy0P5GDn28G5YdJ3t6ljxAqIw8QmZLuinRG+y3Rz+m31r2j6Y2nouGJug W5C9TWee7J7TYWX8VojDty5emtty7cA2D2XwHLfiDE7zad3ZdwdQ2LFdxBIb9PUwdp10aRsLLjXf HieA+FRr5NIOIaHAr/u7Z+Y1885YSdTEmG/h9Di6/ETIVZtv0E+d5J+4m4MEfOFWc9y+wpPitqrN B5zeJn6ylYhGx4rq8fqAEWPpxagG+geQIxP8ydaKNbNj3JLACL/uAocXxBKnlqK/83Xip0F0sT99 wUV15odiLNfyhGxzWnS7anxioHghMx2LpWMswXaM2C9fxC05ic0K+B4zhobMTk+0zb/2aLFZblGn vU7vqFx//Y3jN3/rj8Zznvu08dCHna6PzGxfYccNwMXNVsQdxMZTxSL9hI+MeQ20P5kb96kfHyHU PhuneE+YAkssiPpSf87lxmu7mbEFrgaWeMiFaebLMeI8VscVfngcf9gWxf+1xv6nczmKDbCW5zek /FuN2hMt+yy5Nfph7yWn5TzRbzmUVaBA32p5BohtxyfSke26Bj2+OrcnvMS/gllaPcj8+qvDRQiS HPQUZFYb9giX0Nr8kPHlCdD9XDSwsCEmHDDYjK2EYY9jvedHAvVnWfcV/tA/Sxe6uVggNWNRtWz1 OXDF112y0T7mw2XYTbJCDN2Mx0/7Cg/xXFHMDX7ZnMzYEQbMmkMzpbdHO0kaD7f9D8uJnY8vopNY tEzvsdfl3urr9EvuL3rRWfoA66fH5z77Rf2T47XCbg1QOUQWHRoCp/1mP3FngWce8ZEHe+yXfMeL m0vUe9wyhevkA4N2xdYt6XjuYYTNko+cxmjrzoQ3bFZpPj13dO+hfHBs4deC7H3XS+MO6uxX80S4 uerXdNXQNuVY+SpiyPBZB0rLJ17MG/GMfQvUkylLN3L2ZhqO/alZMrHXX9c3N2wKyC+M7Ft7lxwF oflQb05eqATgeUavzOs3gVQPJrh8ttLY9oBMBUSYnvPC9pylLhWPe/6QVenYYFst9wHcedwXratS zlzxlRLdtkEcYLK44MYTJxk2UvLhYOLQPdS1lqjNyceYnpvgIpXPFREX0JNzWrHdj0mbLaJYAovi HXGhXgaNgZ+0PRBMKwiD2HrIFbWNk+MsMnpW3nqTYVh5biyHBHEItrnOrsceIovSMaSLu8kPffgp 44wz75+89cTCR3iKCT9qDp8u6e9W9tDm2J2K7cdfxsgbNnSzJSviJ3r82zdnoOolU/vp3AEfxd/2 kVK7zwltd+k2st6W5EuP6BN07pqzZuzevbNnWFZznlnhNAaw711xoKnN815+MU5sdUiYG+1Sm3hX yliOuUI2csHtL6uh6FgxWDnqeVO/s5FYFMkpRkZa+cT5w8eD5pnjYMNe68Y/feBfteZ/Vv9F54f8 r7M6HzI3cgrSdTy4DobaXZDzW65wIM75Kzao91ymngU6/hhDUOCxTTYZqH5sx14fCwyx5qoNDZaC eju0bxLBE6wurhXn6TyArgZslyrBh0PJoRs+1FIas9cQmHRfOCYPsdf9aBqHirB7jfHniYdukMgs 4z1vvWfceSle7tPeuIaBfIqxibGwO04EZTfnJBX7V/jRUJ6lMj+3ED1tjLqJSZl9lzbUfZ58UTOR iURJQ6wWawkIEMyMYSe2SlcDxqhx/8xBG7XrhFtFNtp2HFYfupNs2shNpY1OHTOPcAoxIVcQGQdT E1O8bLcwJ7vglRnkOYGynxIRBC+G6kNWY96oqziBJQNILhQWnC0xP7XPc09q2/QlBV55nXnmaePd f/o3dhvO5LOL6jy4CId+zx97X2SZIzyzSap4wSp8vJd8Hzz0ssF8yct1Oim2VwiBcSwZ6pM7vAxC 5+piH3Ki6Hi2LftgeTMolgEINs7LdtmdoGlzXAibEp+xgXwT72r0GyO+ZbGjzzrWA2lVccwL0RwK u+xin9xnT+kLJ0Rb3JFjnYsEUq61Ds3wr7ljtACID7FlHBzfaYu257xPBPwnCMv5BOIps1TzKZVp 1/boYM3tfKDt+EwE6GG8OKs+cWIhE6/mp4rLLIkw+HN+wt+fKxQe3yiMrdKT4rSWAGaftePh+ILs aBq37aHtYXMOlsfgxoBj6dmowXTRb/4t06q0+euTIGbhIIWWn+MRfOexfHNsbLcP2tgwH1AY42GZ 7Mus0IPPW3Bbttw+btd/gIB1X4TNOtGgLSA3wrXq6vN6rJH0JGqt74sRAcPVRXuvjZO0eHGBqPmN DLzkT7lkHMnWTEz7gOW5bfW+DBmv/WTM/MuH4IWTf5C4/WgnBGKdMkT3PA+M6Tzkb/cVUfwrH0Ht uzd0mRf52z7Lln3kgjUUwlUN363juKqt70a2rmNUvkwxbY7GBRvcAFMHA/7hxZq+c7z97e8ep556 v/Ht3/4YvePCDYlFDuFr2Yh+/U9lYXLuIXaec+wt/VrwiMV0wH0RVneCaxulk86yCybjPMQrGxIy LiCwfA4qjtZdPC1xjUEsKh4Wk94UR3UQly70T7GrzuS7GhjGvrmH46Rd+Ig0hudSCr3ORNcClsm4 2irGnKfA42Cp4roEaM1xNwfig4d4ULGpfgvzBC/16R/u3bNANM4EHEH7oSb9lCkYBXyP8VWwOLvL L2mCvcSg3rgY6rptyJzSXwIIaVvOClwwrD2LBwIWIWBqE8g9fFdNkyL7ffHY3CXlA4qDkpdb3d9m JlNg628aV/LNdaRXlfIh1DJ70909iYuNT0BLX7LwgNU8eo8rsw3X1G77bRkR/gH3c579NH2F/Pzx hc/rX2BN/3Q+yWZZCfqEjaUJNzGH71QcVqwtO2HH3Q0d6CVoHfjQXoiCbY6C0JKooQyyX7Y5YOnz RRnv7kycgMOaPY6Mh0luKsyHd2pUob85qO6TFu0FJpIdOzgSC150YN/xYGFBaFFa3jlmuzArfgts cqxLdISvLvwzWWkhDm/O6+yRI2t9wa5B68GBQZWOY59kop8xz2PJTbLolB59FHIPMS/mIZ4B6uIG Nojhor2M9OLafjg28SS6ky8Ax6aP00BirOQYAz+cgzcJeczBQGLhC5ilEpycYTxf7pCsEa0TWz6+ OUESRz2aAXL0zTxWjq2wE2vhhQ+4x2fTVpW4FwuOjY0s3I6A42hVjc8omXO3JxuS8gVPG4r0nMO0 8UBinsxqqdu+Csf+kcsa/+r5V3gKOMlTWH/pzzw2BseXSmGQk3PB98i3Xuy0PL5GwUzhBBPt3C9g 9ssLOOPAUv1gUbgY5w6eSbinnsA2GO2qs3JwN94YDAuDrQpsuNDPcUir7sCq1lwRtV7h2wSi2FAJ Rzvhdj9hU6OFozr5KFtdrA03dfldFPybfJC/MhQLRlFbmsBIhoeRkNE8Wa2xkUHQhQaS4RHEPK9b u258Rd845csLL33p88ZHP/rJcad+kL3XjT7/gMTxDZ+VOSErZWvihk01kPWpm3YV66Ng7mbvkT63 MA4gEnORXfGf+jzvfgVt2URmGrVa88SOFZuPRrHa9pxBjNUNIsdR4z3v5gOiObtCg4qewU4d2lOp PuerBohXOMh234hivkwE29G0TesGjGrb7z0zzho7tSNkHu7jHAAt2eUYcVGHWdZevjNp2RDwAh9R O1XiAZJctEtAO7/CsV4COY9kwWhsE4KE/nDWG3BEnQkFe1FodY9vb1bcGg9CXUcO9/y2CHgOssa9 kPNWLYNJQqpMAmO+O8btfYZ5zAbtO7LYQJ4k8WfFWGCxzcOrHbXIqZua8bAXjvGtuRKH3brNmts+ yFeBK5svV7hrB8ds4AQre7DNqcbB5vMt9znpeP0g78PGe97z99Nn3UDHZs8rsm7TH6ZQ1jInTrpF O91KtqlVdk1VWLWnAp5hyl94ZrNQnvDLE83QNJEem77tVnodJ2PIQH+7V5rqykadyXKsmBtdfPtV G/1VGIVX+zjpIlI45u4mc8vrGHHDDxXrpTrZJb+cx5O+BI2Xfo9Zu56gQOwjFFmnhQ9d43pBIGfL rnnKenmX4wQzhWVkGuQeG3Wki1PjWK6fyCVtmOG4s47Uwo2x4GRfvhMKoCcbodh2bLbwrUew24C5 BKAxHYKW15xp0tLCdPWzg16W8/Jpyp1wjKh0nU9gVHTbhwkN/fINVID95IpjgKbXIe3zsQXwomPX aRU5z+2kOh9D8d1qoiQB5wgvGtXHhQR4vD1KTNRVBsVEY+rTqPvMpWxZjGPbcWRcPUAzUBymvf1m QOZ0Qjnq2EPHA08/abozg93Oy2JQ7W5JsewCnbzXRY9fMGdgmkMJctJyqhKYDg4cDCJMeDO3JI9l Q9i+OEE01LkuHa/OiEg8dlxRB33B9TN16REv2i4e7wY2Gc0LcV9YOYE1vpDDhtd/d3Pcg1cP5Lho MmU90a7xWPFA4MDmz/mpCpHT3S8BlLnCVix8cRpVycgWmLo7SsEyNYdS/oHkjfzGvlvamU7W5yD0 qCMAAEAASURBVO4yvWhLNOvgn/zJe/WjzAeN7/jOJwx+dcAY2NM4YbcFweY6IzkodEP64kMyiQm9 FAmjL96ssY6d8YRV9OwPZCRbbkoFHcks5tpQtmRg1cjxxWfIjAuOisnCFu7uSJ+qbY89Zdl2/tFf di0QIfsxtamIH/j3FIUXdrN5fhDngq39IccVDx/nRlG9cj96GAi21yHypHMFfugi4TqypjP3EUjH D73wQcbnC+3Rg1eVBGKGoJZHS7D3e+1yQJDu9tfk1e5JgrAJ1biFltFpMxoI+U6W1rNGsO0gxEM+ QYlcXI8sth0DPXUd9r7gkuN9AeCLNZwWnk9lIuCkZk5ms8LQQVKBxqbvXEjCNiSnniRxHcAMtM/I uFSfRqTPb6yxd3RqmANBo7UFlSH4Bc/xcQ+9KZmRbgUP21y8PfnJj9W3y74+PvnJL/izbpYqLMeD hFsUuKVQS5x7eB6TJvHtgdp7SjtoMWQZqm7iK7ZpxfFqB8AyhWUd88w8V/esX5hLnZZh3/NDHZu+ kANvMYeRS95Oi1CYomQ9mGcekb63knHmJzpkodlHD5xqe3wB0bjMHyL2peLnunIy/WRXjbumusZY WI0h4Syu1vJY9JlhcjQMVGmQZjSxQd5SVgwJqlmYkyPNFyWLCbsXDvq6sLCA0JzRI77zehDJYpWF SF3mwKLkLRbMCv4eZJ+N44RIO+7oYsM9btARPCuWPWHQDDIx1cNJG300YiY25jWmxqVseed+ZArM BswIA3K85WI5nBxV85lIFBmwsFHSHi4OCwM97HxBVAo8LFIA7qHLbQuN/fbbRz8ZwX9TEANiy2My FnUkGYc3D2zZ/5bluHGvBf3kiJOjiru5wIfNNtxVGBJxnMGf9amZ5iouxrBbZdNkEPbfShYLXeMZ s3jApXQnr9z2TCHukPBiMUWDxS/HsxrMtXEqbhLMyTkaK91p2SIqEfzNXescS9GKmRyzwpU4/yGh cxEZ6njfx5cjIcOm3yDszY3RZZlZrdN/Fbn0sivH2Wd/aDzvuc8Y+23ar7CJpR6eV3DgV+jCBMH8 ChhZYuiiPmLido2jn+MlawVtuBmzZBJHIcGZh/aWm+kaE/FFV2zybJvh5gteK9NdBiyicQcdjKAw alPO1YUs/aWDQD+qVyMp4d2NjPZYy6JLwUSZT5s+bebUd07d1vXE9CDWWr3ML3UytMvyLttkT6Dw 8rqKnzbKeixQNv/htca8iNOhkqCQqAQnCesBEoEEiIq6At7B9ZgFc9vPxssa3TgTDkwQW4Lfticc 7Nr07KBhDZKQMBmZxJYVouHoJ3Cyx4TFJR1gGjR1OhY+TcD0cpDXK1BFCHzfJZJKJgzGuUBstZmz 4EWXmIVG+O3hD8UjncUBnAgwie0LlqXHIPTMm0qKJ15xj/UA7NJisN+mjeMpT3n8eP/7P6LPu9zm z24YwEZa23DmRoDso/aguRiOOK+Mdc9Jo5hp81Vn0XSMV8gkyJVPyDEHsy/I0tc+eqioBJVGL7aN jLiR3EGNmLCYVMekSgz9WMTA9u17xtCBEbLqnootYKdssZ+jQswyZ6B0mY4jdaBP6ZMiE+2cEAh2 rIXrPDwQDnlbASFrg5BN9l3aHHtxziGoMbXbpgBLq7Cj6WdOtpXAloe/Y2INYNLmVSYoXmRsOznX NjouXFUSF58AjVEXbs1TY60DgfKCqnn4wtvzA1f1OR/72MscWaYmJycNa/tpGZaSziBYwoVGTkzg a3PACFbnVfVLPtgLhuYTvwM6PzNlfefBx4c6+q5PqVVcKxCG7UW7lWc8c7fv4lNR6hjTtg/innxK HH0nmPkSEYdQx8qFX71ifOw/zs1FhOF7Isg/jnjNK3HowAnbEsTXHLHG7zG5EYI1lHdAigtK7p/z Z6nSOe3UnuYudtsvwJ1f2mM19gGtNdu94YFOz6Ol1Y4PhQlYAIzJPHutbFzmnS8z6OFjPeRdn06Y heAX1e0MtBz36GIF1z3nYKr4BgbIfCGPuVAfkV7JGXbESntypfjbB9XR6WL9ZUchknC5kIl+ywPq TFec+YLaX//N+8fhhx8yHv+4R43t+vUBWNquMG1XODUlNaaPjhQD/KJYzj5Z223nKIlmHK92lg29 9Hus9QyFMFmn401VG4wWUq6B1I+8EI8A8+25QE11fIA4OTWX9KM/l5KVwSnWkwVhqu51lusRcHse MQAMPNnV+kGTLcd5ZGxPnYkT0rN9w5BrFoUsLzX1ILZRVx9+AAAyaxHy2dQImn1V1MWj/cduv2Am Ph7oAyOJKm1sAoZREcHE5CROI6JkBZjGfNWNpEoZZBDDXdqe7QibZE/yYy6y4YBtw2if2SrkQGnQ qN4jy0NcvYjSqQ1uKuCSeI1vZ4KScVzozah1AiqYJJDDjwVbst/SJtkoCXBsxV/Z84j6eIBlN3JS 9Ns06och4/6sBhw7HihQtEOGie8Di+5mg8B2/RTAmQ8+Tf9N4YBxzjkfzf9pREgYU/I2nuSdQ/Dx FgbMJVg8rFr1qe0EJ0gWm/YeN070SjnjbsxPnT9zT/lV3LIASVVtzMGTrUvnheWq07G2fUyqgjuU ouP5Ep7nXqB+dIwtVoIoMC5Zz23l9RIrZBh3r20UonHbZvadb8VF8L3oyLxFmjto8b3Qapx+QtNb 3uYPP/cJZcprhFWWmK5PAakx2lG2PFmaYxgkXQyKXL6NCBeJlpQXLlr68zFWGD5BUud4520rnKvS J3CrSab597j3Jd/rD9NtaPq9YTKPPsbQ61zw8WID4lUPpD3vSp6ORx8/2RO3GLItP9HRE6vllOO6 mm0fCYrb4ta+wmuaB09y1ohI59k6FRrqRsEuhR222DJk3pm/6tOOYo1SQx4sbB988KZx0v2OkR55 p+uU9h0ddUDLG3UEwNC+4z6tO+VzbEUWeU6+zvtKfmO4XmRk1/PDgWsbyqU6gWHL8oB2oc8DGWuz 5mO//ISQdVufvc81wqGu4WBTqZK544WN5kF8iE+XaQ0yx/LPTAKA5C79R4oVHzxnvOzapu1KvmFN IseFBOc1vMeFmWPB2R2+ECJvfP7gKIx98H08Mj6VTJ5lVmBKB17Sddzk69q1a8Zll145Pvzhj43n Pvfp/iHfTJniUX6YLnpw9SP2m4Mv8GXbNzm0l5iLZVun+jJS47V+0mofknfSpKLSNtxYPGEjvPgI TMA71gwwh+lWAOSQxzTQso0N/rQ+GbECZnATiKFFHEGfSlcl3/5imG5zoFft5FELS5a+eigBULGM 2Dju5KTHucBHFgGKZeOH11Idt15rzTdW0ZtLfMdvrv1MisEG9UGIgoLkA0VC/hFBI8yGSTwbhF6T sUywqOYAysTVkGU9uSaoXu1DOInLgeMD0JxlfHKwEmDpPKCSy2JOgwNCOsnYySeSpw/I9rP3aFEc JHPBMH4qkNqSiFrMWaC02Z6lkYtMklM6TuDwlKRKngVm2eDqOSa8yCKF/2CBvWKT/hzb2F6Og4Pu t33bt47zz79oXHzJlWPt9J8yMn/tJ3sfsPLJvtmmANomXKnryX7IF9roJQYeREChSELP3Ny98qnE 0Y1/np1Jpvtsg16ZR9avvmy6YtIahFLjPU89p50vcG7M5sUB16X1sMdmWezIP8eRJxX/u5L6trA7 +gnb6Cl+FLjaDmpRdT9P9GM72FgWN4QIMSf+soUsDA2hvkmeOXKvxpgHS/merGRiH12642EIWB/N ws+8hU9il3rbWWs/wQEl+d2LNvCU5lGNyvHYow8/ffFvJwpfuWWJkLOqmaqz8cIhQ7nfzDGGQI4D 0jPzaaTJpwKzqI2gYj2NWF1PFaK21TrxExOLGDK44Jl5ZTw53jYmDCpQaruqLO049IwvSs9Hd3X8 vS99o0h5Kdvj1hNH3y1vkNrzhZvDDjto3P/k4+2XXdF8Jv9Es3j2C0bUsNU/9WGY9qe40Nf6WZbC Cz0NeCxrSRw1ZxnqF6FOpwLec00+1+S4ot8FKI4hHstu5/eyoxWQ5yKyjju6F9PoWAnIn03WnnMI sj5eCYoDQzwW2GDUmu4TIsedcoO8s6+MqxALXkxkPqqt/sbqNcE6wPc2yYCQF/rqCo5zUHbs7+xT Y1pOQJyDfQPB68B0n2YlF/nECmPDsv3e9/7juN/9ThxnnHHa2L5jx9TvO+oa93ldeJ7jCiJ2ez6I IT7R13v4uEgfOUICjr89WzGduRMAAg5mwjGtzYtjD/newO4YmR8QKo6p9mSK8egEU7YdOjXMJ8Pu R8QYVBqnOKZrpV36jNl+oCTixtXQFAN3p9+8CjvKElSbfvSmaxh81MNtGeHiOHWU2eSM//S0KLap uWFPYa44vsDmsRZxB9yVCMwTYB3ltiZxp74VpIWez942KZMUyJ56r91kddGFDO/pd/EJFWLMYJXV +N3PfuLiBreeXbE+9ihLrIzOAcODJX7XE6Ikq0T05yfjeyH3C22ujnMAJNxz4pEl6ZNFgeGXeeAX 7QUvB1uBwmPyNLaQACETQS+IFDiy5VVY2oK33myjZUGlBIeFe//99xuPfORDxp/+6f/xD3Ku3Yu7 aCsLOLZB967CIvl1SzuLOgtLsGEZLpFDF59IuqloiMUOF9bsEheq9qH5Ca308J8LLMY5gP25yZYn Gbk418uI/oZlbCAQH+GILsUXbFqUXYe/bDu+6nCsGBCF7rNetWeMYBkD3JYv6hOOnGod4/U4i33p eLzCsrzoIYa+M1Om4O1UwdfyBfuOiyd7wYMBykRT/isUWXg5sWghUNwo8IJOyzZ3bGCPObIkQtqY x93MP+YkYL/gwziC2jzXijml8SZZje/UZzjxz+N+xgbKginfzDXJ7/4eCy/JRtxj1gEOwvrjGHGu UYeanyaYRWUlbwaMDxvFx3OA7sIW6LR9jLo6D9on9VmGfdJ60mccP3tvSeEzHx0n+ijIsE6ythhS Zjz/GbRMFnBbKzlJ6q+xvKerfQCIC4glRh1XF124Wf/b8iollOwhgF6smDP99FQ22KfdvHTXn/Et W3r4hGQdZ9gkXtOaRwzIx54vyVMPr1g1B6UQOk5VjXfMzQJ5C5XhiUf0k5dhPFFDXlxW5JrjGqzu j3PxBf/YvFZNQF0p/Do2EIWbH+WT9Vsc8/ihOe0bAQw559RP6bxf0ccYbnFIla10yFLcTTMQc1xQ k8ASi/qyTGPIihfztm7tHuP8r1w0vva1S8dTn/rE8elP6210K0lX9vntMN7i9Tqs/iluDNeD3PRa Le7O446H5JHhz3rGU425ppNxzXl4kXNy27HBpvjpixqNhwYYpWVZlgwjV54bU33sfeGiUerYcJF9 UNy7iJVzMxLA3TOGpY5IXzynXpzwFzw/BEG+c66SL+SxeXNMCIe++NGcYthyZZue9ptZEqyL+9QO nmwKK7HDnkTA58F6Bp8EyH3KaY9OYOQW4pSePAdKck2SfkRwjOJ+T5AaBBMj4NYYdXSW/Yx1u2Xp 60Wi1C0DvosglzhLPcaNp0Ag01vbyHjhw0ePjGmPP06GOajtm/U0ZruVlCvGmuhkP36TEOanJiKu A0bg9LcCrzBmGQsWP2KZ9r0979Crqgc96JSxcePG8YlPfNafeQC7yxKz4zj1kXQO7ZwY4Q33jk98 72S7By7698qPKOF4a3Se+Ci3b/AhtzznchJe2aIz5dUiPp3klkMME5Ne6dc8TZaLQ8t1/zIePR9w oSDbhXpznPrs3WwvrqpdD+SMucBp3cmvzgOUVdD1X/nj7pmG8xTMJW/bk7/LAl/LcCxqjBdUnLyc 55io+Dge2C17ngtyRzIdB3BtA5nlA5zalra7Dub/qyDRuWos4XfMOt7NbYl1b32Md7/vbMIVztra hnPHPmSOl7mEfsaFMx8+WdsKW6rGQ47S+G7U09RXsrQpXAjtSdx7rtRtH4unZWptmOpUVLC3nI/0 Zo6POPLgcdxxh/sEyW97wbHzw3Nuf+FALOBcvOGiE+R/V3ou8AEOjdt1IQhvXifSpq9w2SlUbQW9 e8g0gRaqNrbxGZu9eajlsnDZFph2rPeZnslum7jXPXilPvFeCNLn42KZFKhYJ3FBvHX38J3sRUzQ Z+Nhpcguf6OQfnztPDUe8pUv94x7csK4YKqgy2efkaV/m/7Lwj/8wznjsY995DjiiEN1Q4W79rIN ZvtScVLvCtvME32N1XamfeXwxFfiPdZc4dR15yFvFxZmXzSaunRz8yAY6E2l5gacxprGquL8k+99 XCHXXJZ7xOFL37JYvsbcv/DF8vgqHR79qwaqurT/zg9dT3TBhnXRItblh1Gwb8iABFnPstM50LzB m45RxDMtwVMzF2/BQVY92nwB5padRcfbIjBeTKQHSb8K8RhyJMnKYDO+DH7X2afOSYatbcdpuSNA OkWJAN7Lhv0piIwrCI1rbK5G/UrDMH5yYCXXeFJwfHkFjV/E1x1ltzWNG+/cNemXAHdDeJXB1XQ+ dEsikbT1eTIDA9qIK/fgmZv2gtHVtgTlfx9s9DFBjotqsT/GN+vfYV122RVj8+Zr9JmH+a7bjAWP 2d/EXK8EuLLnlSwb9YlYyauNHiWxlITmSevTVHq8O7rtu1B8VjKkc+LyXDTv4Ea+8wBD+JcD3eJJ POM0VtvqNhhtt8fcp/nsshxv+e4jX7tQT7/6uPukrcfpJ6bJkWAz114WyadFTiELP7a2g43GcJ8g MiYZ7oJwDDQR9vZdO9HI3Ys5nuj11iqr24EQB/shZE7Wnu/wyrhwXCnbCwITXvV1O3kl7jk0w1MY RqpQIkOZclB1x0NOkT/x1yJ+Igc5Vrq0ntuyj21K73vufczKVNYOi6ghu9NxzDz2HORuGPPZ89Kv puHuNQ0sjdtc5W65b9sdA+SbS3hBjnwpXZrEQG3CTp3QoINv5le8J0yNkU/mVviStKz9LSKxLTAB HnPMYeM+9z1a0mDryfvmRgcXQPRWDNTFGt1fPmCEsvQFW+ScN5A5BmhU8XrkPJKMZKe7UGXfXBsT 9WldpRGQ9nnCrIHuZ44otPkYg3+oHQfrGMNZ88Q5dXPHi4sEr46r8qGx2lZyE73Ml+PjdafISbB9 aB32yxjZqPqWawHjoqf5Dbf2pTEyLnJiuUvvZFGWMh5XbrDvONlH/4J/5s9jVmz+My9fyMBBGHxx 4T/+41Pm8s3f/FD9dJT+ZRb+Ypa5w3XsqLBrf+njgQ88KB1nj5WOB/TEMeu3qZ1n8YkxcmLGBwe+ jBAf5bQ2SjCzd4fPd/Vik2PHtyuLn/TR8zrr6wVh2h9hzaYnXFcWT/ExmOB6JvC3fOoXtwsVV+fY iCcTrAIP5xXHu7nMPngt0znMeQWx4ta66IOJXftTHMBbxpqcJ2bkWOfZctw/0tvkDSoAt205jtFe xsYALScljMSRLDwYWsqD25NlG8Ju8rQn76RFUvMr1yGJXoIFB/O4h24QjFIB6R6pSCcteWWsxnDw CwsJ+pel5XpsWqDuRbZ9I0o8OJGw2BEHos+rnpZpGyv9795737dsY/CzIL1ArNX/tnv4Nz1Y3zD7 1LjzzrvH3nvvZZD4R1XxrANlNXr7yL7r2OqSi8a0Gad0mLrdssu9xzqcYDOoUPhVhOA4YTYnzPW3 vfy5Sh284RAZ6mzxp3JTcPRhhy3y8xxO3KDePOCwqiwxVg252b4qhPcswmV+c6EeHnyGaPlChVxI Dsx8AULG/aSHsO1H5Xm/WEG31i3JKHfLkV4Alj7fmx+OujjmNwWxT09i5b1GohfXJg7Lt1SZHBXH XvK+o8WipdyOb8IjvsSicqx5oTfNAxgVTMRXF+TQI5aNs4wji6rN9IRAi63BtNca6o6iHNvq78Wf UTjEI1optq3ejquBwQNcws2tY9x9Hm5jgoJa6EmJWLsDCA3wnEH7WabVh4HId1/732325uI1JTi0 d+hD9WCe+4ULtc86UyaWqtYOQmIMHeRk1fGY1u7Sap5LEPp8sd0yBdIxWc45IksM133NMHN3bi8M LOWnbgiaK3MWXcKNLNlHVCnOTQ2s4ICexvKCwGL38mQJ4YFNcBOfKf5Mix7L0jx9/JKT4tJ2zUvH NRprKi8Ya36t6z18Jdd9baOxup19MKgz77ljN//cCF40Tu+R5YL3mmuuH5/5zHnjiU/8lvH37/ug 5DSA4YVb6PSGnjkgR9GeNuPtRwYWz8Ji/e64NYeW7z0a7V/L9H6B5qpfUHFxhV1I17oaecjlOgNh YuK9ZBqv7XignuDBvCEeDQ2IO/UOh/uxp7LEot7tHmsbPvTUydrFKk3pNR8d26RP9lvHQnpajjeJ pR1jFh90WKPaX7BsDYWlEi61Q20I4ZZb7unnX3NUOookV4sJAITZUjjACHquyOlvHEFUBKUn3Z1a mNoeus2NvtX9PdZYLZ82AeMAS+BaH5m2QZ2y1KeN7Er+9K6Ua9sTVtyWMiGWTckHJxejre9XkvWl gsYgfn6Uj8iysLO49AVs8+82do8//uhx1FGHj099+gu+64aMVT0HCWwWqCw0q/1c7aMThGkQSE58 wTOmU0cj6sJOc1/OZfDR1zhb5YIPSB87Ae9b/M4HgYOh1BCunlTQ6xM4Y93XMYgdWKbYb06EbBBc lIlDxYZxHxg6GDRVaoXn0ifrKG/EzEhLe133LOvo5aaZiIsvJ1RhcZCJPwexcTQ86dCPrzx8O83w rrf/9kWY1gdLmydEVNp/tJb11W3rqBOOycdaYAhZbc0tUoAzIF4Vp55X2l6YGPYVJW0a8k9bz0/r ITXVJeZYVEw85ikGwYCOBXabc+ui5y+PSMmyEQfCPpi/Y8+AJGxLHdr35w9jpcaREQ/iOnFmvlCs Ynma+Kz+5sKw5WZRa9DXcSIWWWs8hEtQcZSqZ7ZFjD0uCf7MA6lSKjuhBhfhkAcq+HDaA08Yhx1+ gC7i9PPau3ZY32MSNG/iqQdv1Zqf9ubfNiXsHKznrDVlFCCVxII+dOf1mrFlDCf/y/YyJshKPbZV xWYKe8hkwxax7nibqwXxg1LykuGEzjjbPeWRlYZzmZjl+A2HxBGJYCTnsb3ES1zmCwTkKdOJWLGg LPnSnuKguqMmfpTZl+jQN/GiobIaC9WsJdgKz5bjZgAlF+2u2sYcC/yMrx/5yMfH6fpYzRGHHyb+ 9M3z2D6DsNq+OrQmtZ32I5wSy5XzhX7jUe+1ezo3mm9w2pbPCZJdFjA45n0doTnsF/YdQxC8Lvqo mtdXMBq38ZoP+4lf62lfGbWCN7pt695wGGPuepM0Gn4g3znQ/s9yjJJn4Gd+OAdZnaFVpfmu6naT /ARDOZzEbaG+BcpC1AUiTar72FtXYr5tKDDe5vO5l+MRliWDLiR9MSC5ZZnt50RAO5O3cmKWOsab OmKHZmP1ngD0DBFecP+7sgwYGLTvfRJmFOTgY1vqbm5cNM4LyBzj4JJo4Rub6NGeDwDC5039q/J7 ii0HximnnDTuvvtu/zijT3QoqYDrxZ54F5YH6gkeq0t8kbhs6lsIxSecZlkPCjLxob99n2WY42xY SUw4kehGr+wGX/368CpjfaCaKGSrmE8tlN0XeTisLPEnNvMiYTVvTBe2YpJ4Z166v/cgw8kLnQ/y 2Vdk2PC5/XYf8ai3lzi4KL1vHXfqiTZ+sI+72vtCEX7FcaHfegUbvcJB3jjVbtzmJk8YMYTzq0In rZlDRsUh9u+Nb88nb71kSpTzdRGGOvZar/eGVShoOxa8bUONvuJlPfWCSTgoyNuPulhJp5/zJLm2 AZYsW9n/jBx+SNGvLf6vzJflvPhEAD8JJ2bhhyal880+BHDqbw7ukNVdWv86ru6DiDlEovts0wnY /TCSF7wK8PpYPpQ6//3EaydtRIR71NGHjv0P2E/2kstxuvEko6r5SUGfXnA9o+RL3uqSqkv8ADgn k8mv4p9zTPI1McoLgWjrGfzVBNwNwNK2m/VEzPFzPk7brveF57ri4g/ZIwveAmYpO3VXHrd/OSbw T39cxErQrkuO/6xCTNuvxKDiIMmpv8Cxx1x1oU1pOdtSm17fNaIumZZTcyqtsxyf6+QDupBDJXZS wwcN2s8Jbq4gqo2P0Hxe/yYR/x760DP8/05noXvn1Tz57N6BBx049tt7vX0z1zqXQChy4ZT6bv9X H2wtjxnGaFO67vE9145NB24aG9Yr/kUqOBXL8hk/uz8gRlIfmOWoavBDjo16x9Y69TT3lZ5kpTDJ w2uWqfjUOk1/XwtQ722eh/gJ5A593rC/ULa0T53xpu0Xq+po3ks/24+OXeNg1xC8KFsqzAJelbtZ 4DHcpEHAmQ6iCTjZgC7HzTT17vPg4slkygHqLQcexI27cLBV6Q8XLixjs/VbZolNX7d7vJOw7bRM XpUtDrjAz2qras21u8GDE/3LEl/owc+VySbhbyA/xwDNYHSM14zTTz9Nn3fbPG668ebcpZhihb9o fOMSv5FbCibushRbnoOVdkH0IihbYHQBx1vrlv+Nz6IH89XxQr/9Yt/F9bnZ3Sv2bZPOGWOOGfyQ YaxP1JNcDgCNzT40Thsxd79ivef8sH6aYwn3SVnW3eOxCq20J37N2TxqAZ44iaf1BOE+6RG3b1Q6 XJ5LZMvX1fKZL+ISXyd7dexM7bK/5DBjgV+taV7SYflpSD5M+T8JZrT9KjvOn3ZCEs0DYWL2jXxf 5h0WbIXjTv41xop9JID9xsVAxMdo07qCQvtjPzU8x7lyXoHhmMe+5fFPc9sc3NlP0jdO2XGOaYwb HelXo2Rgwpx1Pxc8vGX67x/5/Lj04qvrBSmRWl2U9zzEI0cd44BGrnl5j9yqPF2NRhu8jntzbl6r 5Xu8+1fY89yLinNE8ZJtf+Pc/SGIrfaKF8I5pir/Sq4xW7dt9dwYvxxu2ZaZ9ovACVYFq7VW1LHR suDhf8fA0sWlXzgb4hvINA77ZXzg1rj0m79sMSfddt8qv9FbFjDoaz3a1117w/iy/ufpox/9cP+E VMdhuV9iUN/Nr0VsPHi86R2/M17x9DPHTn0pzudEIgPXiYeiVRz23nigvjh3n7HvhvluGZy7tL3G 373psPFr7/iN8V0PP0k/JMxPmaQgx3XFsjRO2+qxbrPH19brmz8t13tklgU95nRZGrP7PFp+9Nhy LroebPxdO0465X7jhKP3n2LTMo2ZPciJp3b3WsBsXXOFrzYXmbI3CFCJa7xvz8lOm17x+F1QDfDK j819CNa8cOtT91TUBlgYqvbF1PJK1eP+IPri7pev5JmoeZIhBp8ukPWrTr9qnz8TM8nI5jyeZLIO Pi0mq+twnPyqhRYsx0DyqOQtlyUHsfGrUuKSADbeUrftwp1x2n23D7sdw351x+eR2LzI+CQu++iy wc1v90qxCniU9p0PpT7wgSePL3/pa/p2EW+dhJvFPH8IN05iYwASFqGWcWzDmXniDmrPaT43kgWr fQajueQCPgePsT0Yjh2b5pu9sPF11bS3DOrY6fgZbvKLhSlzRT9l9lmY4MI/Q5bl7mRznWxUTCYO hWkshYv8yP8pDBA/Npo7IkEGBxn/xwxZaw4da/9Gknzw3EvVBWrFrC8wzIfx3kqUnacHLhrzsCr+ 0VP3lX2OT89lKSLLok9Te+cVsQREBZ7+KYNq276EewGjzaOP2/nio+0By7HOqVQP4bB1cdv255gw HBk00NMdTXFaFhAiIzLiMBWqbGXCNvGrbLKf80T9zCtHjwG5Elr4UvEg9q1DukQ265xfcKkjD7AQ EAEfH4mNOuyF84H1SwUevaHS/JDptakoxx9rgV7x8Pope+RuH3sGig/MA3f1Djpo03js48/U51rX 50Ql82bg+eB/aIKY0vYYD0t4MX+yqbvq8amElzyQJ78lzIPSvtHunO0YetxckUOPLTp4T3FeLebV b5epn7te/SUVmCeXWRg4z2hn81jlJCbecE+nnZpwMYNvSk304EaZZN3Kk/vwrfLIviIJaWtI13kU XyffF/EAqfutrzH2LuCojhf99ib9PT5xk9wyhow3lrF9rsQP/I5syzQWuM2Dehcfo9LDH9525N8l PuhBJ499N+4tGzCbyxKbHye+++5t/tF3/fPVsc8++471ujPmxVrzyt2k7dt2jm262Nq+g/+bmjzZ sW3bOPKBjxnvfPvrx/2P2KBzETd1En3WX94Z2qb/9LBjRz4OBX8+H7xxv/3G3nut1UeYdkzjfmtX 89d+sXaxHm3X+Q2M/tZse0C+7dotPvo/ruDzMYJp/YKDpqP1wSAmje1jWDmKDKXj77p93e7/UEG+ wqMvWsGjcFELp+2y67d3Fds799g4XvXzbxyvfPYjx13yu23Bm4/V8IP6ZIo58tl18fG5Xn3QWHJQ cyqdK8HL3K6l4aKAIsBvOPkkIahOkohEzn2qZmpkzM4XhgJJyav7JGPa90y+ya4EfJBLlb5Obuy0 fTAojOczbOGaXrSr7YMuveAs9anHZh1khRfpBM11XJEshR06JIhjU98Q8mA9GVNybSscV3IPhrjr QXK2j7FRyaMFGtPEmv10iM10y2J22DvooAPGkUceOr74pa9OCeBRY5D0YGfB6xg1TylMJ/K8sich 4i/7xCsxRLeL/VWD5KO+jHPX8WEXq6jKGs0JWMHDs2Vc5xxr3Ymf5NpW22mbBjFOeM3xDL6MTbqM NQ5+TPWSoe0XIMRDfRT3SZaDytzrKo9R57bFhKuLJ16kdjG+Zo8D2TFQjLqv/bNszNhO5kfyesRW DbagXIp/qnjhBXGOTVFuCpJhcG4Si0bk5Ji1eymQuUaj48jvfzkG+MFJTktMf3jW34BuRMEw2rK2 K2PG0d7xJBBgO5bUiKt4UHOcGA9Hx6jeerSkjjtk9F1D+2Q8KWKvi+PWfKykJw/jg3IQ2cKZdEp/ 4t0qxom/vrCzAv4V1wAXWzxQ8SC7nGTo6jjSN+lSX+ivqFtu9sl+mgs24K9Nx/JOTR4/AQE+X+pi bm3DuJItSnCg2MYM6z4iLTWVijkn+dUysrXsix8Rot7a8/ylxzxBJnhA1BpgBXW07h785wU9woBR taISGerzBFjd+YMG5xiwnZfh0vgTXoG1/7EFHwOj7mO+5wlfwSfHE/sgLv1Oz/zccmAg17GgnuM/ a6NtzmqSy5cJkG+d3i/Eioc9IDwuSz6tw56y2k77zpfAvnDuV8bLXva8ceKJx4wvnvc1fRM1a3Pr cqdtt97GPOHkE8Z9jzt0fP2qzeOC67goSTzA5gJr/V6bxsn3PWEcc+T+4+vXXzcu0O/Ibb1j51i3 1z7jYL2Fv+ee6/SfPg4Z+1+7Y9yti5pdmsMjjj5u3Pd+R48NY7t+d+6Ssfmam338EyMuZnbpAuiw o48aZ5x+/7H79i3j/C9fPG7YcsdYqxsTlO26+Nt00MHj5JOPHwftu35svviycdHl1w/dqhCO3qLU +BHHnjBOO/mYsev228ZXL7h4XHvzHeKyVvg7NL7HOOa4E8YpJx89dmy9dXzxixeOG7fePdbrLWXO 6xReGLAmEWcubrnAOujIw8epJ584Nq7dOb765a+NK67WO1sbNujY23McIF9vvWXruM+pp46Tjj1o XLv5cvl29dim31I8YP/9x14b1o4d+24aRxx64LhNvuyzadPYvf2useGAw8apJx6gH9O/WGeUNWPL rXckF0WDudh3/01jb/G65ZZbx45Q87z2xeLKOdZ/05gmEPIqvBKiptC6zfhqJV4h9nGZkwF6nOhy Ze0rWgJDPIQLxhKn8TDpg7TkMOjPQVQ7mFmEkY0T3KnC1nR5o8BrIRNjH7zlh6MCoHjUITBdcPSd BnSaHzLmZT/UP61pMgxy3DGe/VLw3cew78olmegTkBaHjp/a7pKgkoQlSwJ+wC0LCCAp010JXxzF K+K9LPDkSv7Y447UgbhuXHb5lUrWHJAd2/gmLZljUcLONAciidwe0qFvdo5qjRFHYmfTcA5r+0c9 A5GP6WBJnnmoLskRu9KXjvEXC++Eo3wzJwWe/VLH3B0305jGzKnsmQ55ueSlOvZxAQodg+hpTDyc b6wCzAy+Q1VNjaKliraKv/vAEy656Is+5R7Ytouuin32Xk+l64ufsoEMBaq5y0duJ9ax69HkkITI mj4htH/mJjEWHZ9rAXORH8Sy4+XujGHDLpUo85Th8lEN3xW1Ls5k7jJnOrn5xQs82ZQ7lpMUcbMz Yq8xnwRlq78ZR5wozdVzmy5j2EPpuR+r4MNMMn3SZk9BZrLnHuKIt+Ebf3gmakAEa8JEB2iJzzHC Gp0ZoyIKlqGb/vYPdWu2z7xgRIbeaQ5ouMuVdBtE7WA7R7BHexamw7rp41v8Y6zXyWCnXt3fevPW 8cmPf9lx9QWwuU2Gprilx+ABA1PF/EyjYll2O+6OsZTzzkN0OGbgTxyz5IIe7KW/pDkjFPu7aNNX KeC5I7j2uo9X0fGxJASQ2cCqKXeHj59lfC0nFPX17PvHx5uExrHDCxYfO1M+gL2KHFiecI21fokw T+RSxwhYiuNfuei24rS69HqTfNUomATRL2i1p217frIvc2474oGsOOFr8wC7T+qr7S4xOC9svvLq cfPNt44HnHaKvp18ge20js9Te+8/XvWzPzXO+h8PGrfpwmH93vuOqy67cOy/cc24UrZ368Lt0OPO HL/4q68aDzpu/3HrbXeOjQfsP647/9Pj1T/962OPkx43/tdrnjb23Gvv8TNv/qXx3t98y3jb2V8Y 3/fDPzJ+/Ae/bWy/c6t+I3rd2G/DrvHut/7u+MO/+thYJ1923L1zPO7Z3ze+/+dPGXvo7t36fTaO HbdcM3799W8ZH/j8pY7NQ5/0neMNr/6BsWnNjnHndt2wOHCf8a/v/avxpre+d2zZuWZ853OfP17z I88cO2Vjj7V7jXXbbh2/+8u/Mv7q3/Qt7LX7jRf8+MvGDz/n0ePOrVuFv+/Ycs2F4+d/5jfH5y66 fqxfx3WD5pLzAFmnP+6iPf6ZzxqvfcVzxl477zLvdTtuG7//5t8Y7/nQeePQkx84fv93fmZcf9m1 45RTTxx333W3Phu4aXzmfX81XvMbHxw//fOvGKefsN/YfdRZ422HHzt+/NXvGK9605vG6QffPTYe e98xrv3S+O13f3K8+tVnjV/8sVePc754rS4k18juuvETv/AL40HrLx0/+PLfGjv2XE96uDDX9yjk 9orOylwfpFxoVHuWIe1RibMcXHvKMAu5TwweY5yE58CZNUmoTrw5uVhgJSRxH4TYg7FZc2CmH4HW zYVXjxF4DixOfpIVVA622DUUGPAQGLLtUvDCE+ksAhJmFapuTuzLt8+W3GYfxMUn/zoY7bMulvxW W3DBh6Na3nISDO/2kcjCwa9IEG7eIjPJqDJPpC7ejjly3H77Hb5SX6tXU/c6XwudHo+vzaf5w9Ek GYhN+1LB8BzIx+KZWMI541ww+KLBOsEyXvmBD104Scx+pNfjYC3kWp5FapduMS/5M9Ztzb5aM/fW A9NT7wtDcmTGsIznd9Z1XMRtz928KiPHM+a5AQlfimN/2QK70wV3GYYJuU/e4adjVY6BmwsRwFAo G64XgHbJh5pTB4cx9fq4xCu14LiYM45Bv6hxX+YFVTjbN/nQL4icv8TMHJlHCaqJ11AhpbmwTKf0 rKt+boJ5EExGw9936ys29Dv/NTrlBZjaeGvPXITRD3ULiFb8pSZFy3WehW/yP8ebtSAc7mpil7E8 WJiDt4wRHnGM4SDsiL/UbJ/uXMyr7c5gI5VCrbfum/c91+6ZlKpivMo1xcm2PS+S1lhz9F4qmUJ5 Iqd4q/TUB5xg2LW6u4EC+vgLn9Y1ZwWZvFsRI2tKkgtqElNx6TtbnouaE7PCcPkef9RgXmUn/ZVL MV7IOBCuwaMbtKwJ/BIiFzvoY56TpdVVR6Iv3NDdLfL2HXvTVma089yWberI9HFGbpuHuMDdCMTY evE7X0QKF+LWscsLjGABE1x8UC2E6JwKmF7HIjz1U8EPSus5JsKkm7UC+JJwpcQt37rE3PISnNYL owYXbONKqD9vV8PzzvbGuOnrX/d/WzjzzAfqSwzkD1zCYJvuMn3HD7xwfP9THjDe+ZY3j+/57peM F/zwm8ZtG44ZRx2wwb/KsH3n+vFDr37ZOP3wneMnXvqT42lPe/F42avfOjad+i3j+55w5rjsU/88 fumt/zh23n3L+LXX/9x45we/MO7z0G8ZP/uKp41z/vJd41nPfPF4xjN/dPzNf10znv+CZ49j99GF mzjs2mPv8ZBHPHj8w7veIZmXjOe/6HXjglv3Hq/75VeOEw7ec6w99Ojx2p/9sXHXVz86fuDZPzye /t0vHr/0ux8aT3reM8fpJx809jr0qPHilz13nP++94xnPeMHx/c+9yfHx68Z41U//fJx6Nrt4zHP fPZ45Q8+ZvzF775tfI/Gn/fCnxlX7zh8vOkNLxmH7qVzLYejZoIXBsz3Dr31esIDHj1+8bU/OC7+ 178dz3nWS8d3f++Pj7M/c/34yTf+1Dj9+P1195uPAx42Tj9un/GLr3jNeOrTfni88bfPHo965vPG E884cPzG//qt8eUrto5zz/k/4yde93vjht176z8g7T+OO/n+49/+/E/GS1/5lnHOJ84d12/bOJ72 5Ifpvs8OxXj7OOrkk8fjH3n/8V//8vFxiy5SV/63IXimZM6p61j2JDLJmsxpq4OLdg725Tj1HICG ILHL+cDPzxxME2YlSx98JJ8T0EmdRJo1VZN8LgipzjjIgLncr74YYKFAhuuwyb41Fu3CWOJkEpGZ 5fA/i0T6ZnkOa/U5VlIof+ZxxU5AXrSQg49ksiCyQClhiF0dxkyGi6D8iqrkJ/5gwUX73k466fhx 3XU36vbrbVNfQObnlgWfOuZ6YYcPHUv/er49puGMlk3bd2ewMAPmogSTbrh6FbTs/CFSbsHz/v+8 +KyCWKB1tWLTTe3br+V+MZxxOws/TnbRMT9iULRpN+fJd2KF7j3K3Bc9STH/RY86J6bMuS0agfnM aWAG9AnMNojt3D/X7ukzGMbxvK1KHymuvrAkNp1v+GM7stV9tmX/Z6tzDfnMYecwenO8VbdNycnn xDCcWyb4sYdtjy6dVR+yXbpufS4SNeDjRJoes6gi4IvUOX/Qj39+jh36hJ27f1KscGLO86Rx/ifj 8sSHn+jgi3XxF/BS7n56GM9Ga2WxLrErbY8uprN16adOIR8Qz9ykz5+Zkt4Xz7t4XHnFdbFX+WUM KXS+0SYt+rgCs6CputDOPKkZE9WvxrJtXPH3vEaXZ9ZZ7uQ058YCF/pdKj0nOYbQwTeOrMxpmSzh xrRs5dmEJy10KZ5hYSE/6XRd/jtHIeM5bIR5H87iIl8sK917K56PZVAkhGhv1tGBzwVqeCwm2LIz v84f64gXkv3/QDuGHlvxJP3y2XeN74XmFIMOeOkv49J+nv+VC8d973u836lpPd4uXXvA4eO7nvzo 8fl/+Ovxjvf8+7hDn2m75EufHr/8lj8edwmPqO+5bv246vwvjbe96a3jP8+93HeCN192+bjihq1j n43r9bmwO8c112/Vcblz3HjdDeN23VHbrYvC973nL8fvvfPvx5a75fHOO8YXvqS3C/V25l57CVWc 99Rbo1865+zx9j/50Nh6185x+Ve/ON78lneOPY6873jsmfcb63dtG5/7tw+MN775T8elN92uO2Vj XHjB+eM2fdxu3Yb1/jzeProIu0tvja7TLxncdOXF480//+vjHX/+gbFj0xHjWd/zxPHlj/zD+KO/ +PAQpXHVRV8Zv/HWd49DTnvweNCpR/ozcpl+zaK48w9KnvLsp4xx3VfGm3/zL8f1W+4ad9183fiD 33nHuGzHIeNJ33R/HWCK2R47x1/+4bvGv3z24rF72x3jnH/513HpzTvHA47eOK67/uvjThm7c8ut 47qbtmSu9RGHSz7zkfGWt//NuHDzlrH12svHB/79vPHwx33bOP6gvcbdulh72BOeODbdddX45/86 X35tmDKBueLuKHmS3Jtz328sqykjvOVJ0pOgrJxzMvZkg5jUo8JBnGT217grgRIMJMm2Sm4f2Wlj KfaEXyaSoxzUbZN9SILUgnZksgNeW3E1nKTnr9br4si89e0PEiXOx4YOXfflzkLpgmWH0EsfPFOQ p5YAUtOxL0xfugMvHXVIni78wXMvflze+1VU3c1Z8reOlKVE6CnTIuX4VwzKNjiOkWSRO+64o8dV V12rD4Tu0IeYNeF6+xbu7WsQ65l+zXGKGmDoUXQmnxmf9JtUabFzzIinv2jhHilwolLhg9Aq5JFj 506+MJDYSMl24I5LvlgOFfmzZ70tB89O1Mh4HlEgjrGkOrbUqb89ZZ+R/LwJwPrTZvpwUFCsp474 Bj5zpVet/HxJY6qGLKYo/tIGFd+BoqKiu3JzwT6+dWEesURcFV35jS8uiDZ/x0VtXJD8snBnyhpM TNuVoMUQpR8b5lF+7Nnz3ljJE0Txcc4Z9evCRxGLScdDLd4+N7TGwWZ+rCw87XPnBJXGR5g6H7GA TxYXxnPSQxaaGpV9RMBPBXnV7HvJYKuKj8Fu8Nk76rKVftnRg3Sa/SIG4ETJ41FCUokQXY/7mLJ5 QI3hC1Qk9yyG8KJYFmz5VHPcx6bEVch5vJeCcxHEFNZPuyTza1h/hDW7GL6WJG9RR9+5IQwJsq4c dMimceABm8Yll1w9rrnqJh/vjifHnTjlyxmSh6fiBL7XNQG7Ltvhk7mBu/UdeGQpyd1cgABArnhn ZepB4VU+nwlTR80FWBnlIxmc/OBghZLJx2/4MHl4y0djo0d+0VQsmGOOE17M6UH++0U7/CWELrbZ t03bBUB9+qSO5OQHsKXjdVDnHLocBFVodWw959LNcOyuxoYbyl67kKVZOYEemejCWM1/y/ujBxxb lRtmIo5Y9AsszwFfMEmeGAmY5uTgxDf1RgfbPuaQ0+a4mYh9A7tXd/PSU3KLC+514ysXXDie//3f Mw4/4uBx1eZr/aIF3gcctM84+rD142//8ys6BvTpUk79epv++su/6gsSv+jedcc4+2/+djz1Gd81 fv+s7x9HH3GIPm994Nh/08Zxqb68wPHYF7tr9Pbo2rX6bNr5nxp/f8ja8fLXv27c74QjxyGHHKS3 Fw8Y26+9SFGBrY6MPbaPT3/svLFTa/96dW3YsG5ce81l49Ibdoz7HHHg2HLdeeNP/79zxrOf+4Pj lScfN4447CB93uzAsXHd3Vp2dbG2+arxF3/1kfFj3/cD4++e9l3j3M9/ZXzqP/9znH32P49bNp44 Nm3caxx96sPGH/7x/bXOM/9asdbtPdav2WccesDR48Wvetb4plMPJ1Ka0G3jnb/17nHQfnuPdQce MX7ht35ZsqyT+pKGPst2pD5vd/Txh489vnDH2HXX1vGlK2/wOO8wrNfdTL+glF/9YpBzP+9K4iuX P1d+7av6MsOasUGY23W37V/f/y/jJd/z2vGtZ54wLvzY9eM7vv2bxpc//sFxweZb9PbzhhzfTgw9 aa7zApq4seW48MWbWlWSrCweFsOqynRQqt4JNh/IFvGTTwKK0FJ+HjUTwpTk0546BwknbhLTb2s5 EXgbdtZsm/T0Ad2jTIhRVEEu+HHSemXQCS+vsLean72sA8cLiWTu8RZbG6x9OMWm7ULEC1v4FJxj nXESnMUyCx1SkQlnkaLLxRc3izacKSwC6LC4EWt+nPfDH/64cd2nf0jsWCDbBAp2atcYMWAo/cQk 9Y5Ny5OECOZuIDJSmvRU0Rg4y2IZ8BhrBfsD/9qkwFixoGHs8Cg7AlBvoGu3tLOs2wx4ZadzcZZp 2+Eb/0GfgemDH/4sv5VpbIBYPKdG9Hi2j5qT5cmdz2EiTmDd71jwBFAVxrUtOfQQcWk+2IxZKU/2 kQSALsZTj/82K7vqNwmEOlfDwfKVj469ZZfkDO2nxAT9lX200Gj7Dn2JmPsitu4uANsWn8x9FGyD Ezg82hAy5r8wbHuySV5W3Ym22pbGeKudk0T4tbD2KhwvbQceNnnv7k9yVozDnjPHWjTE2EPTU+eR ZOcLdhqTxKKiThnHfuab/dAHvw8Yx+pkccXl104n5b6zCs40zzTKfK8vxMNzoX4Wferxlf7Z7yYB /8So1mDjRQ8ZX8AgI93ZrgbA1YmlCXQ8OZsXhE9mbZNx34UucqTfyhd6tiZYHTPY8wUnQvNxbaNB Rzl+yVjbti7BtN9wm0tkWINRzRi+ry7kFuN58YUweNpbtDGjN9ktPL+g98V+csrdVo98OGORWOZ8 QOsbF5R7zoLhiLu6YC9/y8IKKPhxl48X+fh0vF7wX3H51b4Dp8/6T3GDzxwzIWFE8nxsaP2mQ8Yv /Oabxzcfs3ac/ffnjI//243juhvuHM9/6Yt9Fw7DfTELhx36VucTznre+JXXPndc+pmPj3/+wDnj tltvGRsOO2O89Jkn+6UjXAir/98v3JkvHa46LP0iAbtHn/bI8Y4/eN1Y8/XLx/s+8DHdybp13LVm w3jVK59vn3TPb7z39353nPvvHx6nP+B+48yHPWS85NWvHt/1pEeMn3zz39ifyz5/7nj/5y7VBSWX Ojmvv+9sXTR+7arxqPvcNq6/Pi8keCP3Ln1Ldp1idfO1V4z3f+DfdPGlb0MTTcX/n//pHN2RPFdf pDhIPHfqmORFCzGHO0IrS0ZMwQPkc9/ZX6tv8F7+5fPGp86/aTzpyd8y/uumi8fD7rOv7vZ9bGzT sZP/kUQc+LiBNBdrXda04OrbpnJIgfSrNgeQV/EoYDNJ04neexYJ/Zk4Bwt/9AnGW0Y0GejXQzuN 5YAwMsJcl8qmL5R0uBqDsHAihABRKT10KH2wpDU/R5eLzkp0CNKqi8D2x2uN1YLtqk8QwYIVpe14 L1EKlKd+8YUbQ33VPU0ieNoSL+oSYqc9PPMTE7TRrgVW80ABHz3bsgGSIxud1pFT+23cR6989tP/ M73Kc2X/wJPsGmGBMXFHr7BDJrxDnhHJkohw1Jv6YCVfVBcmByZ5EobhCEIu8vEnnJ1DQks+1eEs fd/J4davMLCBfN91k7ZxOSC8WMMG501Ouuz1h9Dkk5oApa3+FpEMHGDaF5s5eYU/alJC2XiOTzXt b2EiU8eLVUwQFXTtgxrc0ZGQ+asfDs0vkZIs2FUcX9kVM1FHQpzQxiYy5pUDNnMR/6xODIXviUGU Ks+26V38tbDaEt6Tz1xSZCvY4Dmanlzj4QNI2GbVRFyTD7Z9EIRR2Kvf7k+jOXbpzM89gKM5Bgeb VexfFNXD8RkO5JjvjmrMi6DauxVPRJm7LHTqVJnR4MYBLUIaChLjZmn7VvCshDOxdPEEIQtabPoY Fd/kAXKZkyioVYuHx9XJnry1O2XfscM+f23KsoYzR/dj1nGJHbWMN+ljW2sDP/+z7a7t45KLrh6X XnLNtH4hbyPla+62xRfHtIzYP3VPuYV/0swahU1iWFitA4xilvytcQsZyNKODbo1t4TVaujJBjHJ 3ReJe8BW3ej4BT/WAXUc4YC8dtHgpNj1OReQ97HnCuNkKTZ5oc+cZB6TE+LjeU3+WKV4d84UjPWs 2xehpBe+kKAmxLzAlTjS0cdB+tylXuLtBLBTjGFBxyEv4tCSn2B4NnzHTb32GT9ykgLdxXaXTCUj EU+XBIhn56bNqc0YM2ezhcfx3nG5+eYt/tLC8ccfo/95+umyvefYcsud41rd6Xr0tz5gvOtDn9YX 4dboiwTbxoknnTLuc5De1tTbqIcfc5/x6AcdNn71FT81/uxDX9KFk47jQ08YL3yNfnpEF2rY4Y4p geNbqTt2rR2Pe8Ijx81f/dh4yY+8adyq9yP5LbfveMWZujjiG6S6W7eOOVo/HvLYB481f/cpnzO2 6UsLJx5x/LjPIRvGh6+7dZzyzd8+Dt/jpvHCH/uf43NX3iF7tEkrAABAAElEQVRed41THvnEsXFv jpG7x2HHnzbe8ovPH7/zpreMd/z+J/R27F+Mh33bM/TZvReM4w/9p3HrrXeOfffcOv78z/56rF2/ j3TuGvd9+OPGa17yhPGVz312vOddf5x1MkHzT5w85g79i0m9k/Hv7/u7sfkOXbzt3j72PuKE8YbX vWRsveQr47Kba67sb6bLN7Ko+tjKLJKTO5WDPubVxcx7zpSH3KzafffN433v/9h404u+ZfzwRn1R 5OLzx3/pLel1eou6CxfdLFvORXdmnqmSA+qPMQ5qEoyv2OYCI/1MfpfuTx8XfbzVWos4mShL3HHo hYO976qRVD5RaOaQq60P6sanbR519CapcXre4LAsRsMR+aGdoblIgPaSe3QIJjLsMwnup68KGOit 5EZbQewTomQdFiLrItsGJlbZPF5+YtSPBbZ9ZdwYjZPFCsj4yTiLI78po2iYMrEc48AD9ZVk3V69 Vj/C6HVD/ttnZIQ5+W5fQYSXmLASpSIZLXoc6DavN8eYSw1nEfYyI0nJKFbkCXezbKx8tFpRtz3Z Zc6R40QErhNVJmJdz8yNMIlnqXqP3ZwYmLvwwk9L+RUqc5y3+zzPjKgSO/IXjiCJA3Lcvib50Z/n EvtwSl5yUGQe4If/vPGQuW5+cLQMHYYLP88PcfbJcb7Yc+4sbHY78wE2jobH5EeCI9OqMI81J3Ou 4xm+M2ZG9qP1NeDSPOOvZIXnWOKXkwMx9J0k2rdh9ao7eLKOT3U85YsIwQqG4qtjfDpRg+ccFZbh 4EqgVhas2rQ9wIvYaAaOk+KCHLZZEFn7UJptqSlb8U+DkueYwD04ryw978I0qJ8kbCYWtc+yRczh Pn8ZBB+Vx8qT2JqRkzvqD1MpBTftyHUcY4RnyeAbMWX6IyDOyVkQqB988Kbx5Kc8cmzaf6P92uXf C4gf6KKMHTz126Xq4s7FWnOlP/MaLswZW9nXnHheHD9yyUS8Jyc51hgnBtwRmtRQr+J4FQcJyw+k ZENr+7LEfvdkDJ+zoZc6ErnwqjsMNqBOqbBKIMfcp97ziBY97PzsuZo+20i/AOzT5AQcaKC3uNAz vnx2umacc2AutMQty8FCF5MIg9ebql3KXtFSr3hoDhwmdVpD+FotNKQ5SMcUl4aUiFOyuURQcMJ3 7NoeHY4PvOgEsHaqguOmKrdtud2fjz7hhGO8NhpL6+T2r98w/vkjnxhnfOdZ41Uv+o5xhN7aPO0R jx6v/5kf0s97CF5r+ba77xh3yO/TH3667twdPk5+8EPHL7zpp8cZR+gnQo46YhywcYPgdo21+hza IUccpjY/d7F1HHjsiePBZ95/HH30sePpL3zR+LkfetLYd5+99SsJh48NOpdyoXfaY58+XvPSp41D 999vnPqwR443/MLLxh43XDg++tmLxpbbbx9r9zloPPwhp4xjjj5sPPbJTxq/8kuvGHuv22ccdfgR +hmQu8fBJ50xfvanXjge+sDjx+FHHTMeesbpOrVvG7dff+U4+4P/Ph76pLPGz/34WeNY8Tr9mx8z fvlXfnI8+MSDxpab7/TbmpyreHtzrd7OXL929/jg371/rD/hzPFLb/zx8cD7HzVOOvWU8drXv3Y8 7TEPGlsUQwWvzm+aV9YHxd95qv6cW5Oz+x54wDjskAN0UUvecr5hQmrdVd862fzcR/9tXLvHYePb HnXa+MS//Mu4eos+T6c5mT4SweRpXrOOu2Jb2GMd89umfZAw+RxM5AAJRz+KfRKhzTYtOhCqgpwV p3aPgBMsehqz65MU6hRwUFDBbhb1tF1HxKP1hKw6Ws48VggshVNPkKPTo/Cy3+pou8ux4C7979F5 bxk3IzePgJlYLtyzqy1j+2r0PnLocKGD/0oCEkUPDpQD9HkYTnC33bbVixc4PU9adhwT+jpYPTbj zoPGZ5EhlBU7FmZsUVhEGihVFvfwIWjo5G1Ki/vJcixSKuEvjMAtxtMRTpY0h3DVmE8+JH8woBZc QxgX7MRdBxJ1ZDLsOinK7w3Bf+Ihg/azcMFEBqks+niH/ykOiRQ6HhIyNnr3ViZO0um4i53JM59m CF4DaO8Thi5AuAhVxCdYZDpfp87/R6XzsG1zEieW5mXmMwCyEw93q+3jmgvSHH90TzLmTPzQI+aC zpl/ig/5ad7qmd+elLz96hlyVBeeghOOUMzFCjq2LjxsQgQ5bXr45ObjCpnglbTtp9fC0sk+Z1JG umRWwePBX/uq6opi+0hZRkMskiyXFROEqWOr4wOe70Q3T8cqXvmYkX5eNHCC1Ye6P3fhuOOOu4Sz wrTiRM7FtnOFQFQsyBgK8x3bHrKGglQ+qU/j8HEo8mQ7nquyh40uUxyQVeHZYrbL/Cd22ODhGLdk j7UjhQFCd3W9dcGLbxiid2VBzzATwCLW3ByY+ivXVgMIzjmtvc9h2GCzJQIjs8RLxd/2o+0ru4ow AZBQ5nYVuJrBsQhSc8Cshy544TxRTa+eI4+5Pg6KiXTgY2XtdUzxRnphWob4U+lEMGbkiSe+sm3e fI0/J02eOFYK5lrdAXvfu/5wHH3gXuMZL375ePoL9GO36j/v058cn7vzNOXktnHdFRePt/7RB8cr nvuc8binP0tYY1x2wXn60P3nx7c+9dnjRRdcMv7ic+eOi25+9ni9vrH6iHe/fbztXX82Tj/pp8Zv vP3NuqOlmzx3bx0ffv8/jm96/OPHT73m5eOVP/9H+nLD5nH2py4YZz7lrPHt3/t8/Y7chrH1usv1 bdC3jctv3TGu//Dfj7991Cnjxa97w3iRfjeOdeVTH/vPccfWh4wf/Z8/Oi75sZ8bb3j9b4836Nuh 73z3o/QFBEV9553jf//6O8ZXLr917LzuL8fvH3XgeN4LXjye+rwXjjX6DbWvX37heN2bfntcfdsO 3eXqmwH5Et2e+tmtyz/zCV2Y/ul45cufMf74Mf9DFvXbt3fePH7ljb86PnbB9eNIfUbuumtv1I/z 6p0ix1m6umN43TXX+ksXa3RH7bPnfXG86KlnjT+772njR1/99nHjjTeNXbfot+f8+epMzhq9JXvz lZfqIvVr48THHjc+9B9f0t1IfrQ689bzi7SPW3dokLVcdY6DPR7xiKfnY0lhYuUkthYCHxAkUw5U K1jOmQQuMEKhpicnT7JqTlLpKrmyZimRjBUZtFYWgCDGwUeS0+ZKFg7hQduv+JzNaM86MkSHhR2E tOq5Fq4lX4NyR4kFFB9jx3tOpD6ZqE8PXzmbT9p9UQXPfK6I1EIysQqN1BO/cIPt9NaLudfBXO/n +qAqxuhRpj7HYA//CvbjHveI8bP6GvUPvfindfftevkgJ/yqEHndqdPnfXK1/41iLWD5gwnHSvHE Dgem51EYbddfTtCY6VQMrAN/z0PxtD/xD13zF6fgJDZEr3GTiCVXfubEj6OZL+alL0LQtT2MV2zU 4dyKabDjF/2TPDUoNnfFmnbuHPQFCALIgc2YGshVTrvdmNgsXtx5k2DMkQE2FO45ERhAmLngxXDS FD1wouoPxSuWuYmBjjBowGOyK2GgNUkdw+hbSGJg4kPHmP70eaB4E4cVIWTQF43aaQBMFn3ymlkj r5HnAsKDEg/PNIOVWPlk51zCLmTDwTyNXXOkUfoouaiQHXinS/awLAF4CMdxNm7wSgxtbZKMaLpt M0iJhSXsQ+Ynfvbxgp1cHAqkjqHEMvOg183mEjl4I584gZwie7Y7NxnLxToseWVOPMFsnTX6Bt26 ccaZ99WPi16uH/683WsDb3n3/KJp3/DT84tu1akKLhfZOkFXfOZYsHbm5B3Omg9KmY/cKlywhdm+ 2n596g6MvkAEZuYoecBW9AkHefVFL2u/xeoCqeMFDheweTGgCHkRmmMQ7mlTjynyouIpUylqSzcv lOFX3aIGZK8jzbW1mp/bjrFqmkvnHcGqY4Nx69rViqX6Og6NK298/GjEs41enyPUJWhygJxmQFtC lzq6dRGuERfWJOeg9Fq8zz8tc+97G/PQXXqb8XnPffo466ynju97zisUD73dqYdj5PjoM9THHj2O OWr/ccPV14zLNt+gtxr1wXndftyhj9Ls1HbEsUeN4446aNz29ZvGxfrXbLvWbRjHHnnIuOmGG8Zt d24bhx177Dju0I3j8ouuGDcol9fp9+Lud/8Txr5rd43LL7liXHPTVv1o7xFjw+5t4+obbhW+7vzp Ldq9Nu4/7nffY8da/a7aRRdfOW7R10n5+AD/8cE/Hny/48Zhm/YZ122+cly++eax94EHj8P2Xz+u vfpGfbNzu37E9xDpH60vrm0fV1xy5bhObxHzG6a8lbtd58HDjz5ynHjsEeOuLTePi8Xjtjt1l5AL NyWS587HLfnFVOS/IOwvGycJc63u7l0kzBu/vlV3y/Tba5qbdboI5LNn/uiPZ0T/FEvHMT84vEN3 E9fqR4tP1W/Abb/15nHhpdeONRrbU1/c4TfklBiOO///9O6de49f+99vG6fsvmC84OW/Oe7aY13l iVJhmbzKSXKL46Nf+7GO6CPupAPCnUH4pIOObpxR95xMLLDcqhcIA9aTUMlhDwM5+KgHwxeDSj9S UNep1ru3JwePg6Zwkvm0AcJenMCguwokVMqY+yKXg5W6NH3C4/al+C24e8yuRA5c7hb4gFGDNgeK VcCxrBj0AoTzLpL1SoXfOmhtL9zniYhkL7a5OC69Qlnu0Iv96pWptsadN/41xx133Gl780g4soB5 slkUXW+/KmGBFLhfmZERHRMWFV20ZLGJ3fAgEP5zZ7Cro0gpajUWv8Mpg/hBQS8F6WAyJg23I0dH xvrkg46mThuxpYUttKxM1X1w9QXYJEF/JKsiaPglHnz+0P9Q3PqYzRiynePWm55KcGqvrPhY8drs S52KSGTMVvxzAm+cHJSMsYasHo0/5KPknF/IBy/Hab6xVj3eoUOxDphqxxdHXB1J1IjVnBFcMSMN iHETN+fF2mDgxRMYsSNJ9Go+0j+PgRkOKCMXGsHHa9nFPgN6cjpKrE3bJ9pWjX77hEr6y17hpz92 +xigz3yLZy+G9FMah0o+yyd5liy140NOrhYW0c7npW/miiMsuu2A1zV4Ky/Ux4srIQM71ukDzHyg Gr21fvulOMZNNWZ/WYvIMeJGtNBhy8zmwifrHhisW9gjBjA2Ke2Dp+7S7bEeTz96/IRCDtkmgz3k SzfAxkH+HkWQfQcXzvyZigVn+dYFjpiGcyR9TGlgjnEwgWi/qRNX//C41m+oZL50nEs3McHewnqZ j+2OI5ONzMxNDRdzwqLAyZv/f8Vem898Fzp9TGsuypjJeILg0s/VNlbM+ezKarF7tInF5quu07/I 2kcfudlPd4P0nw44XvmTTbarr7xybL78Mr9Vys2AnTu215jeVtR7dDdcpW8+X3mF+vhIil6M6OLq ssuvMc5afdzqBo1dezmxVj7rgmXntrvGl8/9sqPJNcN6/dbHjXzMR7awvV3nL74UcPcdW3TH+Txx 5iM3a33hhgN76iKJWFx2wYXjYs0pd664O3b3llvGFVuCwbFzhy7KPvOpG4G13bXr9bkxTRA+8WPA N+pi9PrNV+swyvGVf/m1yATpQZLzCusEF4633ybMT95gDGKxQW8JcxzCh3+zleO+coY+XYQSS/Js l/w+9zNfouELPf+jehnAZ66fmOmTT3/AeNgjHz2ecMaR4/df99axVa+GN+hqrLIgOCIkaOthF5rw o4/CJ/Lq4CSmIdcHf0S4YJOMNP2hRNU7uXrS+2INeYD9WRHq2iCLo74dbhyWaK+GxkSKky2PfMhU hooHiUrZqV9SToFrOFaHdmh6B5Jb8CrwjNPUlTj4HQSHUHJ89MCFRS6VClYg8AcbTBywJZS2uPAI y2AjgA4Txd72UOdIpRADjRlIsQeUVmKMDYT9Vy6ogRW6qaooJ8Z++pr2nXfepc8j6N/lcELQmDFA Y07BBZg2SeeaYpAzke3OdhCMbeQciSirpcLqXbbni3w6tEkV+6xljPHgLhJcWgeI1OEhBcjaCu1g 0LNiReTEg6y2zkdo5NUOtjLmoLgq/vgJnNpkjCl43tSPDJ0qcY2DSa+glBNZxLDWF4YIJ4bsfVBL yXKMyIYXb4NiMLKxR70M4ZsKXPN5whwHu/ShYPvtUdUktjwXeO40xk2g+RU2nOjkSUw1hhzjNPBJ DCsHEIMHsmDwrEboKA7SoQ5/Nnbai6V1lsc3Y8TVi47qtPMUfLAzF/RTxzLgFvSY8SLouWx8xCxd C237Y95lB1bhb3TX4xc2sKJxKmm6rae5QwNhUj5K2fHV3jw0CB7qnjfHgU78Y+7Zg1CxBlpl8sEN OmDCpGTM7qobzKJmHfT4WZITTzxy3HDDlnH71jvHf370PNsgz2XRcp1DXhPtA5yYB9kxWQyruI+d rLufozf5hefhoR6nJD3EC3/mYwnveSHpNYsBA2kvsfRFfpn/Don0LM56pqrvjlrJ3eZEE6kcQ6ln lGcTdjN46jEk9sQSXbfjX8fc60H3t4GoqKVKgWETAMdGHDlPOR7IqkwxNvn/S9t7AG52lXX+Z3pN J4QAklASEkJooQWkCgiugIIrgq7ssirryoooLLo2bChdaVIWBVFcdg1NQHpCCUkM6SE9kN4nk8n0 md/M/L+f7/c89973nRlgXf7n93vvPec5z/N9yin33PLeNzQmCSKU21FFK/2q7e2ZPlH1iSvN76Q2 qhjTv33MosJ0YQ2MOnHsFzPA4+N5Raw+XiIrP+t62+BbjxFanBwnnA0GtIpVOkvsX7duvRYmy/TS 2LXqe+ukjxf2Jibw8ewXr11yUqD8jXnPLyFxDF2m1470kuS1gKDPipcPi7b0M3EID7+X6vdrsTJN Ak15VIjo/t71cDULvkGeKaq7x09l8SafxCe4MFP2/K3F1XLZBig0+6SteRRr+q3WhEOa9gu6i8eu 5QSqNoKG78v7z4jlG9URD77YZFyOhT3mXkd0gwXgK3tdo+2WMe6O2u/csaQ9+wUvaj9x8jHt6x/7 h/aJr16i5+2WqwangjEe57p98oN40AfQS9/lWde9kgesnKAb5/aIuo8CsEdni/jqbzN61UMpic6W FOVxTBTh8Ge12rkzuwx38SrXGwtH/cctq1pomI2JKzI8K+LFAUWnDDgub1tTmaI6O9wxEzzx9Hof +CyPRp1JyJ4RN7ZhoyNhIWjEQoH0CdowfEQXhnnYi2uY9LEhGLibS+bhiX5ZJQHOZAQh3BgXZPSF FzM7vPl4xw5X3fjZHGQzeLosON2XmiiyMDZKMFEWdvNSM2OnqG6LrtQdSzSM4C/vb0KKAwUUbAUy uUxykYKWGrOY3zmwiAkUbiXYHjZQWBIqwWMbKNA+9D9olKHIQ4H4SqfefUanJ5QiuJ5ve7lN3eHF HzMlZ2GkARFebHXfj6jl2UzjECITVWKOIbEl8SKG0zTaLqpsk3XKyPiuM/Ipm66K9FnwzNR51ee5 CgIr5ImSjDXFnYlHdZ4m7O90cCNB2xAxfagSv8edaciqLRlDPbj+4g+x6HOBJ2TYBv3lO8YIGXuF TtuD4Vigw3ZRD584On5KfWvZ+LVXPbCkrpd6L4bBM3bHxDZ1EE1VWGMBN4fKU8yZfIWoYw+BVRkE eImY+5N20+Q6xcf+zdlfbYJHVGFPrsbrSpsORsefoNsq51/dNuk5N64wJKFRCXstk/gyuyVx9SGT eNmGkXV1zyNGrLYXvQLxFXTwHHOMTbtQ5kDpvuKFG+MYSQHaF/hofOFkJIqZE6pgBQ+roITLiyEV 6eWd6Brn0aXGyAIwNviEwfHFLrg6lt0dfc6YStl6w2ZYRAb7QoFgXbZcfRGrc+cldpqheLWHTwFS TmBg0397PfrcvpA70bsqmC+yRWLuMqp2i3SgyIlsxoR1FTZsSkVz/D0woYUOzcng2NeNCBEFbqdh ISqWsgNn0k7EfbFP9hd0a+8gnpfubZQ2QFnXU20NqQO5jwzl6KdveB4Qz6ivHAIrvZDKRAdbNHdz dcluUN99kU/oUo3kSNprEOfuD7TeV+HjxEL/+DueeOv4Kfl8gZI5suMaS3n+u3/4m/khOotliJWw feiQjE8SrAwbektYN/j4kzY1hjfwkWAiL4+8aLEBHYErkK29741vav9T4dq2bav4lsmmxKUWimOf RxdxZUzJBuESKfyZrEdVR3Wf7QiAGwfPGeUY4U5d3QlQ+LMYIl7TTl5uuFHMGmcsNGwQIrDCVza8 ZrbudCwaTBOLbMdokk0cMJQxmUaJzUOHNA+dGxkr6hjYgj5vydkOdpDKd2pJZRdStkFY5ddgS5c1 gKW0iUAnlX4aIvrpHGWDdfYFR6zonVuNNOjouEyAa9asUcNv961TLkc7RraLpsI+7B5U9TKDAP3x iZjYD1kYi+Jf5OkgAJBSSxGrSH7Ympo+T5fNsCLP9Ic8bcIgC0bh9SJoHkkTuvEjZ6O77sEGidpm 4aavqkbwkvC8lvYxExvRgh0PyYvZEyA2kSycGAsId6bWwEG80Vn6oHVY0zOBIidJ/8NrLpXRF34P djFQFR/gSV7bFLRlfoq+IlGnmOpZKGzPRAQKUtZq26wTwxhPY8OYz5zUhanTYIVGEaVp3YGNMQec NohZl/NM3NgxwCjPVcU8awl/fgJO9fCYL3YGK7YjDUZiRYkUPnIDF/LSx8wz2MJcZGzxizH2IS5i j7mx4Pk+abDJesQMhHalnz7Mg7F1EAOOcZTxQ0lJPKi1FPuKK3njLWqHH3Gwv5TAKxG+8qVv6cSL Ew00SVY7+xCQQXcsEQtcMKnG3deU2EjEfDBVdc2B5o/iQS5Y8WoY+9gtG4buggrk2FqfMm4gbIx+ 6mbbrNuh6hKBB5zCGGc9bI0N4ek2V8H7HrQgdHNikwNjMzqGdcZ/B6ZsUDVTnQ+e0kfMEPPGopJh tCsPnb5FxjzwVTIv4wJ+1Q6x6Nni0z5ujXMfBBYgxuyi+O42En+vGRB60w9lrKIfLdL8GYz0uWo7 GBPvxJRYz8Y/UD7O6Gr7Vp3sc8vvYP0A+ngyj92ySXpif2Sq3RIRtBOI7EtnOLN1rSuUK1bs8cJD 9tv/VBgFZWSUPK5VYA6hTdBdawkEkTWmNsHBbyGrfW0nKsVjvg5adESxYkzgBRO/GTfEh0Ov5cEV u20yJjHXs3c+osUM5MY08WkkKhednl9VsgguW7ceHtNFl53C5bi9d7t3aeywKvlN+8jGuiiCvXrP GxqjyLkObjOFirJ8FTw8kjG/X9jovKQZmUS3G0cUcpapIPkKGlLIJ1gOrEUs2A2EIA5ZawfNz+gL nYwb194Q4MnkKTvTEMVrJNGksy4DuyrYRAvnayEz+t9xu1LbQUvqzDQNJnnK+NH/8FX/QcdW7POA 5WxaTd7tZQef5ah3R81ZgjsOGzExmdcl09gvIV8NcXUUKTb8osJ23Wdf0NWYZbo0XTww+GAjTfhV gwHNXLkhycv4Q9z6ih4qKfF31hts9mKOppB9IIZXPpCPU0hGSPy+gq1ysLA/Ml50IIJ+1yMybVfg Ygfm1IkBe6RK3m3BVSKrx4rernBZvs4rC4NL53oAtiZBq+0nHemCUEDxwCVvv+E3HjapzjGgloRP aGbwsVRFV/zk7CgHZfgqYtqr3eEolc6rP2FXYktksCH6ZGHorOZIXR5Mkm1EZ+/juarhKjp37Jn0 f6y1LCKGzJUUjwNhx1YWZuGjj0aH+o2qiY9+qVlbeYCPTCjizYd6kYd4YQeUTMbGtk7o1BBbUYkp zUsMRQDT/V+8WARTQcZmiErEwnjC6QF1EROFZxvDObftRhg8VdEb/fEFAPp390+2Zr6RkPRiTz6p 74aIKGzgqfReo0vOoWqZTrAe/4QT2sUXXN2u1Yt3d+obeDBVP8kZOhEWpiGyp0B4SODYLtuGn8EO GY+RVJIdNiG3Tdw+jB3G8RK3KUjwCtnKkOEfufhkedVxVd/f1u7tbCOsxtZYLv0FqLQ1PlSqq43D wbgq+t681j1W0K7oxxbakpgnEXvy6j1cqSeJ14/hmJ45nXLmtfTTXmVM97UuiG4fFFGoDz0bfPj5 aTIOrKAvVp+HiGYi7hgxN/T+D1xqmXtBIY7YJzn6NXxQiaFws3gjiNxS1B/6e6orL7wjDDvqA25G q2jCwy7qIhqbC8PWWBa+JMbVVr0njRN+XjPl1PvJYLt4cqKtWoOzw24UZWxiaWgVf3SAQA19uuv0 eKaY+cRcwspvVOtVQ7ojkjZKzDI3CsPji7gLi/A5ZpRJRKv0k0u9M4pXqfZIcJGoy07M1was+Eqe 9u1l8fJcm9sBWPjRi6zsqedGOauOn9aI9siAioPIOqElx7giWq/HHrgwCgsZlPnfBZAs4itsqZKO xDpxRw5e3TZFsohAZUKWPI6KyXVUKIUPmkuSjLWUxb7PVLz7rJwQwSY5gNqXbgY/tFpolV3mdYMp xENHDwZ1HHjo47xFOuWO3232uEzVTL0nPgLo4I4yto9in6AJaNnKfrSLQDCA6Xnw6IOYJkHGMxOo QyV/cwVFUZSPfn7ZWmMw9tPRjatOMz1QsgjbJcfWr18v33fqQ8fDZwE4xX5oyFebUuU2lD6Sb5Ep SOa2vHIxznxmmmxG/OC4Ch3K+DZif36jRGb5JzLWCJeVaZ9+Rhl7x0R+cAoA6aG27AwnHlT/KcqI rbawIfYy1SAovm7LGRuswrGE0WdF2lf/qni6buochJ4cTczrfsyyYb84ykdVehKBSa5iZxZuWnyq 7Amb/sYhA/NhU/eAL2UmE/JUopM6Z72hbiRQARZ82buuTwxFQ77Xmne6sV5hRlw2uhvVZELbxbZg Je5+9AHVmMK4IO8is0f8dHnwQf1Vf0xexmFsE7MStHR0WU7NyNwAL3OFaSjTJzKz3kiS+dgcZtYG WT72T3qmupB2E2jvBRzyxGwCO+WnW3HAJhYoOeTQtW3TRl3x0EtKv3bqeTp47rC9qjUPi7uszTGK jwT17yxxmFFkKTZ7JUlGSLuueibn6lm07ifcg6jz2RhRFfqPSWqH2Ixx/Dk5OD1ftFT0mEYGfwzm up4DJ4526uzOc7iCk4sH4KS/JybIVt+TnJ1mLlVt7xOgAU9bzOuf0+R6t79lwEYGYTLozdyN39gx ddVziQxwHfL6pD8FA3Yv4hVAxrfrxUPGXQmGnhgVJH5yjASOx4Ov/iBpotqiZIovVWxzXEE2NPb0 2e3bt7dNmzbpxJ93+CtOncFumgeBCGEXBlLnOUl7jl2jXPjiO/jwk8CNHP7V2LAfjA387590LAla NvEjThwPpdS6jVjYlgMfKjFKh6xjao+O64a2NLw31ssdAWIbG7A7ccDPCPadbe+00q8icpGxK8LK grdssgQLPv0N48UO0vYswAksV/vAiVLTdaI12gBdJyAdFJ1J7JOHpitvKoipqsuIUUDO6lIKAcUg Mxps4hGQwHQVKEWej/E8ANwbRGNhgzYchBbNcRQ7IlMHtbLDjog1V/LgE44CgFYfELtNZb8DDJrp 0dbNk01qdNvHjkkflG5fMUmWFByzx8HeMNjnOinkEiixyYG3yxAq7O0h0zumB2RneqW+3Ww5tGVw dDbq7Yz26nAGoyz6gvRt2bxJXz1ekG59BVm3YRKfRLbEeqmfDxHvxNZnI1LjM0JBDvGjbWQwnSnG 4wAokutNBe+YVENRMhW/sa6b3wm2CQsk4Am26yXMPhiKDx+G20gu51mgnHNKwLFHJ76ABVNXwA47 rIg6Zgqq8+cCzDbfG8vHrtRmG9DQsyiwHlUShw6gfXyZ7oGfGhRfoSkJhEnD/TpGdDJtIqzelzOe Y1/FhZjAg03Vn2kPLy49iScIRCVO0TeLl7xbUPoYK3xJA+HoqIWPJ5NYpDCmzmcb3dbSS4ytZ/Ah vK7HDMnaFfhU5QMveBT6jhYhJZ7Zq8rUWrSZp/MjR9nxlCjS7qIGSWwgus2ppPtaggJ0ANRD9bHb 4ALqNOEpCsEDQTvzTfu3/Yp02Mou2idydYV7ld5b9eSnPFLfhLtMP0+k1yls3KL4p192VX6Gjakn MR3ngPQJxqJNtzfI4Auf4YqWagZPeh9aPLSf+EUzlpn64rnaxnjp47GnkFLCVF8pSRRQ7vjhJr+I gmLPFWKvExzHd7AIEfxN3B0elarPEUW3sysSRzTTF+miVoFJspeUxRpxtmooonUMc3CSM8Ynse42 C4/kcRY4a7e0TLQJ1pOCcX2mhF4boT18jCHKgHS78KLwzYSmYKbPiV/YuSKIRhIYHFMRxFnyre3Q XO/Fl9qQMtvqM+NVMdH1bHT6m5hIwInXsXE+5V5h3p07d+jnoPgGpbRK38KCviGpFF+7VZJ1LFIz U2eSreo5ifCzUtEhuxW6HN/pUwClLRI/ZJgD2RML+cxxuCurY2f5Ck8lx8NS4ONc2tT9gqJYWVXQ ZyiYhawymU+Iougi+fjiydMlsUtIWa60VrsKvZvFXKYLIzIzJ4bwIkdCT/jKJpFEdlC8WAc6mMjo w84Q+K28ktcRao+az/Ah835iZ5liNn/6H/548eYOGS7i3W2IcRjtlSodVoY5CBjR+clVqkFJuQbt RC9UBQNhHY65tKB8xSINhEcGdwyqc1bjU5M8HqqgRKzygtjIesIB20l7FFAUY3QZxbT4gg3KefT1 OrGXTnwiBkO9AuSOv0tXvPTMyi7d/tjVtHgyhnSgygMSA4SNCcp5YeZBDz2p/EspkuTR7T4gEjy2 RThlL++/ue7Ga/UMw7a2VT+Su2tPHl0EwcmZND7ywaDDRMeMfSLRQZfs0UOTenDaP8arr+Ys8eOQ 2IFPWkQh2uM0bWfo8KR7oCv2Y8e+BiL1JNoiTYN/kYMOFu+5yqsUpLfHrxaUnu7EgzmuZNjKfhK3 KogR/0MStiKhovYyEvxiIDvjCzWuRxrHqh2MahT6tQccNsgBBucUE0lS+rnqUhy2xCm2x4rSRyxI Az/qeyFjhUJJkoVBnnn+03ggGQQ/mcrCDz7xNbtJ1HdxyVf/trg2dTZoKPHZD26VigAWvld/RIYU H7BNApT1yXhGPm3TLXS9BwVMmhWNJQmkyfOuMv7KfmjhgX/s03lMAClsiqzj1X00xmAz/tfcI5Ge ggvGmIb2kAWl17flpGeaKk7mn0AwFx1y6Jp294bNfh71G1+7yFfe/B7GOQz3HfRovmA76kv74FsO 6VPNtEOiOcyxQ7WdFw59dNIG7iOUaZ+0v0V6PMcYeg0xohlDcg6suAyPnaJpjBqrx9g0NvYjbaKs ZADRf9dd8e1k0ZGxBdlHiQihW7jPp/CmXWElDuy14R81iHSxGteFH/3wYZsF++MdXabUceVOJC5Y cBXI4N5GBh3p2xwHoOljWspg163pSIhFQowj6za6aEq7du3IsYXbLvosaF63TmzR2MDMnPB1pLIR 4Zn4lKZue4ah5R0T8VLDq6Wuv/b6to1n33T7dPdCAM0DppIsTXw0DiuxoCDBF97uC/aZwDgWg/Ty qg/mWU4SF3newJixb4NTMU0o6Plw9CSgNE/0u/3Sbc2Ttouf9dyeY6u2YK7BjmpfI9ow6mIzNEsD b0WxzcdEC+cYMuAwH/VQ2Bbl2WfeDxrbwRcWIJLJCVQX7NX2U7LpkwBl3sNe9BEF6viLh1C6vdR6 XGNPxnA/6sNChEj7OntB0OgGDl9oAEU5inuNMzHccuZR3RCIGFvPFCAFhhgAtenRF8ByxIhs6Iz9 IFKDcrAPeT9vEMwc9CXkzp5glaHgRi8WdP+6EyOdOsxSvWB26WxsQQu3Bd0G2bFqY9tx4vq26zAt 3hbrTBQfzIeRP3jqY+MHEuCwTPc6ZfeH9ZLE3W3HT97ZdrEiqER2n+qLZ1y6ucUh79JS7a4VbdmV B7Xldx/QFq3SJV6u6LhzBdCdH+Aen1LntpdNw7cvxeOmxAxliFvaSDgq85cYFQJ7eEa5TIrwKzKS 96AU164+mWILuODH1WzBGezs8MSLP2Kczl9nWGGYtrMg4UpFz9FtuOVNUK0Fn/hjkDrFDrAzqcdn cMSaQQ6f+yt72YLd4EzbjTKD05jjBpuy6Ow0zMN/7Yo3MY4dpZe9DYDRSTKKMSntQU59oWZmiiTb 0X3ShNgfmxLZEZTsAGj2nFn2CT/imOckqC6XciocvZgXLvvBawh8kiSdicuop/rR2Nri6ZDoILGD xkmU64hRNwRc8nUyUT5X/WwfiO+hCRUwcEqRiknYmQMsV6dIsK1du6o96cmPaF/76vlt/Z0b/SFG BYFOoCg7qYDF/Hkvetk12gkni4PSEzxTB6CpiVFgFdrEdEpEiZR86al6ykv0TgZfqbWd4bcKZSv+ 8YG6xMqIMAkomF2XWMhZrTLGCSX5KIZjaBsXxMPwSnVhpoZtdKA/NhDfik1xwVN84LB29MFevMwJ xh6M63Z2bPzMCRNoNc7Jo29qFyWD2J/6Elco1PA3poQoMaN/8ejLLh1HdunnnBZWbG271yx4bnec rUrSjLuaJ6I+gOSn4F0NspkDRTC/NnFeV9oW2tevOE2/eKAfYT/ozrmYdwDvkEE3BfLs40tsK8Uw KE+sye3UcWTrKp32L9dPZekCAK8V4bIVWHOJtjE8ch0bEF/kUE3aL0I1/ilN8wXrPXiKVfpu5KAH DxMYq+PapnMovBlTdQWZ4xgJPcZTflioCa/01x476XuEGE/EgLRjC09S4mM+7Oyec4dDnGYxq7LY k37bRbWLNGXiInu4E6p1yKIffdILpAGl+pC08EGYjjUFqfxoUNgp16Q4XxeOvhU+B+GcWUQH/HzA rn3JlD7KFQJnJnYW7/y+8CIZvwp/BrfrL/sJLmfIQ5BVTyo8GnPnzu16qaAe/DzizrblKbe23Qdw O5T4mfX/l01vmRkVdWsmD1r+P6pFgQ56izcvaavOuGdbfe0923J9IWIpb5RW2yzTw/4kYsjBnD2p 4uJCL1eefcWRPFOm4+RCBgw41S4mG5tcUuHzzEc6cAYU5u5xB4483OBUO1a5u0VRqjmTThZfJeFC 6ZjaQcVUlh9Mn6dxo9yJAagsgyq4UKmTxaJl0hjtpBadFRvyAPR1le+QRxZhcLoey5nVuOikblyI Ee8MbuT9sRlMaM4oPshkrDkHm3m1lR3w1cd2qXYal3la6li0ghPe4i//Cm/aNoUTGeRYUGtCkv38 kVzu9sDPByxS5UtXlV25nw08pJKZshXulDbN7w8fOvPZSr3A82C9+PS2W9db7IADVuvZoi3SNUWJ bijIFWZ0yzbPaxKojjAr6tK87VWexUrsEBj9wvfZ2BlQG8KCncFgXM62J3xTPdWu0/aBB3i1oDJq JzDJgUudUq5nJI+ukg+Ffpdc5+h2pT/CP6UnH5mxbiyPfsevLtzjodgzDqSPW/rwztjST/zTHqW3 I0zGI3r5IF/xgWs23wNBBXcFcFL/PPbCbeedO7a3bQevb9setq4tHKn+op+q+qGlMn2AJEN/DYEF 3r8tFeCcPK7qDury21e0FRcd1lbccqi+pLPSCzi/gJqFiXRXexFz+hJpPDYolj7N3tuyirX5u+2O Z2et+mrL1NE+fXGWyW8GeJBXh2Uerb49w2SFwZjSp75M6eXflEYeV5nf8lhQYuir98pyEsg84kU3 i7JJ28gyjaPE2s/L9b7LXJ+j8rwmlQlCpcFJEQoYWjlQe+r4TPnpK4Mtc+1NszGs6wBU2KV3733w oasbZDuAj9yj/lKI3Fj/vXIlWz4VLw3LT4os6Kxlx4rNbevJt7Y9OlNatHOMU/EyQJ26TsXZqU6g Uppsf0D+qQu5rSkMdYop3ag/IN5ggfnVbit2t80n66e27l7RFm84VJ0qb9JmIe9BIYFpG+3d1hmc FcPqQxVL+gLDc2pvDbYRt4yPddCr80JxWbSahEa58Ne26NFFX53Y7kl4tp/uS67sHOzunQh/OPsh +QFY0Uera4ICnwmL/h3dyCUW+XYT8pRVO/TP6FR56Faxs/whgkllXWEwZsHpelll9xMx+GP6LBY0 q5f+2MYkFYzo4yA74gc7+oOHkblKQV3R4nPswyYw+cTX+CuCEzK1wIUtE9hQa8zYAh84Y5rvX1UT X2gHKBWTitvoD/J1ACnZeR34B17mqOTh9UKZOuXvoR+gPvERD2ynfukcfSFhZ9uwQb83LGxqpd3Q iU8W7YlD/JnmsZU2qzRbV9Tsy87s41vFY8qZ+oo9Oqmt9h79KpnvpRMe+6V4EDd4iUs1S/nKQg06 TT9eSSAW4UWu9ERv9Z1ekhzxFZv1hTpu8Ym60ktNxWMWNzLBseOdoB3yLmFkyGwLx7U6aOZKbueU Q7G9L8RGsSE3ynf8biR9wVcI9Uwb44M7N1uPuKNtfop+ZmqNDti8iN52lDETewf0f0NmOBkI3rho 25+e/dFL9/7tWqQfdt9x321t+xE3tbXf1LHxO/dqi1ZylYh3qI5y1YeGWJVKuKaN2lVWm1LHZ1qe LrjAnZY5e5jqLQ+m++BNKcmPdsi4Ob3FPfKEUnZV/b72joJ9jB+ORXVAVXIFEJwZbJsQT+jLJK7y LoXRE2xvZCqnwvszqMDZ8ymZKT+Geu4WJlNSXro7GoZeGpY0xTFhuukrT/B8ew1n9V+dYMpKvmyb 0svpKa10Fg08UnDdZsZi8UKiY/Cc28IDN7bdh+g0oz8zULE3Exu3EAKhOAZkaxXnxqNaTigNDxi7 RLln9rer+tJT5eIv+v+tfh6CXbmrbX+w3sR9xgFt2W69TZA5RXiocDP0QO63zbtvZQr7iusQkF45 jX/hTfmrL/nnuhTUYcHW5WuHLGnaB4s2HArp38NElj5SPEgPCwjpYaJ1SHscwQ1Fde6zQIGnvp8u 4zL2YcqIZRbbxqb0DYTKSKbsLB5weqj3IceY27se2YpZ+TrERB5IxAlfZhdJsQ27lQuPlYvTgYhc ttEdvlRGrnihgTGOc+QKp/yDNp+qDt9ItfAbfBKteMywj035W3MD5ZK3bJ9L9mXjPuAGu9NC3TC5 eO/73MOv67nmuzfrt4XvbHd+5W79RM4CT4dqnIRPkRogywYTej0vPfcb6lV2364ggaH81NeSn9LA gk6coJMvPuqKhroxHq5RHfvIE4vgThZiHQ966sIf3uQLk5Jv7Wtv/e4W/RoKitDv22eWlq/q7eLB hEEOECWLau/HErhcsY+Uk4MMvPK3QjfaClKctAnWl7GdeUR+CcJzs+ZlpoZBN77rj5e+5plNFmug gUe89WPl/ZhQ8cGOUXeMBr9uy5UtRIWrbgsrt7Qtj9MFgJU6ueMCwKg8wkM5xbF+vtwZq1/H5e+P 12PT0b4//37tmepXhFTkS4VbH3N7W7ZubVu2lV8O4Pip14MobhUj9tV2masyfwzmK57w7ytNZYtn Pv7wmE/ap/xTPGRtg5Vyki1eq0Q2Y4l2rwUvvCUD5r5S2TGv09g8JzqIYZcQOMFmRwMTSlgm2MbB Fiqh934GXT+lp98w61dWMKaU2qlexmAWLpWKp/ZFn993W2RPD4YYkk/DlY7alzy4lRwMPHLCgcLA DzTE5nkfoFM/5YG2v1S+sI/++UYHq199O2yb4iG9Ue+AgotvpCIP9aYObIPc4GYJ7Iev3B98mdMj wyz5Q9GvBdzCwdvarqV8g3W1Y8EE68l0Es9u6swut3AT82kbhinxJEL4UXEun9hXfgZUhZmzKSp7 HyCLTNXXQAa7sKbPTxUNuZIpO7HLl6/VesTR9TV5SIcXOwh225WxjpKnBYzBhrz7kXMuR994EDVx v5ugDdjSOZ+CH2VTv6BTTt+yRc4DgX++EiKwgsyeiYuJDLvnNaU8+hNZdESPoiWZwoM7J2WzOPBk kQdv/MkufYG2K9urfhYhMYW2V9tNjJ7HqD5RWLRu5kEcxeHsqh550t429D4RR9rBB69t3B699ppb PH9u3aJfOumyHivKY+c0JYZj+5RtnAjwGAT1deZddWVL2VV76OSxs+I41ZV8fImTe9cWJe2VNika ++hKgMjz4YrY90uR61yII+txFZp/TUZG+xt+dbNVfPLETWJ7Vc/VhR9E377tib3UOUa9LazDvkBP v6cPMFfbvw6GDG0AD3uJVI3y/AZn3gtWvta+uCi7D3W5+hWcPbq3yAWA7ffZ0HYfqEdu+gUA2yXh 6V0GY82F25jwuePiQzROzAuhtt9HfmQL4w9Hvx670kWAHUdtaCsuPtBfgvPVN+I8BtLxSRndxKvm ocwJZVvJlO/QyRe9+GpeqDJ7ePgUf+WpG2hasCWejENwqU0iP/BNsMb6cZynv8QubJmWgxEs8tTl 5DRIWaYmDoUNDzj0jfJjan+/8ja7wi1GlETROBAKuECKt8pVP+7lPfC+fCMjfKqToMah2eCW3Axe DyYBTgOHMOVxMNxI6MpQ2J9t1kvn77johLdS2cW+8mAGVw28VGcSauTF/WnumqILARmSvA1kitw0 cHn+ilvJ54W+1ZEi6m2XTweDEkINtJL/YegHg7ME375hhzbt5w9EWFExq3aoDktbVN0QC4EUrfZV V/JTTPKVaqKkPOWtMjRjyk5jViDEQHkqU2VsJLnsXHytPlYPsFJVCzf2dfWPmFiv6hnweYiU/sJZ +uhr5csH29n1sZvaNiHvM1s6p5XB9wAbyIU56dKDnrIZLHnvCaSunCUCVEwCSKkDRQa50IoeynQ7 +j9SaaPEexr7qS58Ie0Pt2JpH6bOjUoG+SnvFBcVzA6zHo4A9OHCL7n058Xt0Y89vq27/a72natv aldecX2f6Lm1rPj3eLLzArn3L5ALj3zZpYxFKDM1VkyKf8qLfMnVnvpK1Jd+86oCPyFnUU6fHD02 u+szbjiI7OJ1RPtIwUC2bICJ8shv/ZCVytbKs8c3rjKSPPdxgOSEkOdW/QdiX7hSxnil+BC9Jgyb 0ZciTfWONDDS7+oxB8an1Nv8kvFY701YyNUe8CReo89lH3WkwnFBG+rdTvjkviGFovGWAPb0j90H 6NueyFYYe/tU0SEGsAjdMOJEKrm6yjvHhprwdbmqz+0TAFI/Tx/Kvf7fqr/pIsAufNTVy6mmGl/T GJatFXP4K7bYU6a4IVR2bCexrz5ex6h9tceAR/xLYcfCR1FV6n2118/LuB+rbh4fOrTSD375UhgG 7/iVn+6DOaXkmAt9HqO4lvoWnaJDJ9jLKXHNg6YcR6fA1SjziswpbB8qHRQ52QM15Z1iYUfhVcAw GPpUBloFyXkaAT86LzT4p37R+X0ZVFjmg0lpyjPVgzwxYrqnE1FH2XFTnmTfnNt32VWTzf75iyk4 VRr3Ra/uvG998/ijfHLz9WNZ8cInf8TLZKNJffEy6VMcKu3apWf/dPZImrZHxRDacv2AW53RF50o RiYaK85V71gz0fe4FvZ8OYMVrOCBCQ9twqTmCa2bW7LRG2LhQnP/6f7CC4dbWpnpopiFd26L1mBi EoBX+oiHnllZrB92zkIo9oBvHjGVHbWnjjS1ZSyDOiZCXziz/JmIqmngqQQfn9I3i4heOEOFhw+0 yIx2zWCoPnZELnX96oXQGLPT8Vi2ZD8uIMom6OBNz0BLZsqDnlk7qg3GuCIHDwnZmjfI8yn5sKTh zE/MImZZNtDzaW31mlV6p+J2X127+67NbYtesQA/dhefbYVGBbLCMK1jgVll8sih1icCFkGi0wGe JPN2+yFXfAsvWJFhVLmf9hNkeFiskOK3Levl0km7JT5g1bwriS5jdvsLHjyVCjN7tNeVi8iycPJi Sf0CMKzEPf8cVweBhrnQS/esDvTxmbZjF6am21P7sSaYyDn1SY7XVyyxEaqxTRhkdNmAf8Q4V9Vg c03fU6rx7ZowkO2y6TcmaJNz4K5fZf/+JpXIqV0WE/eqrj2ukqaTz77KZpKt83wdp2DK/R4m3Ekq vmIsepXncefL30c/vzcdXQEmbvNtVGX21Z+BLXpXYRj3+35iBb3GAX2m+njRSm66L3ywC39eL/zg keZ5Sq76KLoKE/7Kl1xhzNP3pRNeUtWVLvbT2/PhGm3b7xcWinFfewwCOIlBNQLuix8a3D6oku+y 4BRW0cw7YFMaEzxTvgpMcbib2Jg8EJ6Gja3VKIwWP2MmLGkv0b1wZ7Ax3u5mUmLg+blin8IB0WPR dw6IkYve9dTZ7375LDQOsLni1HdX4atT6enFveg/uP74RRsJS/fo60ppR/ZEf/QxJ7QTj7s3PbbH bWKHBHfv2Ni+9vVz2+ZtDKzU1UJuiFUB9v1evk3qq4+MpNKHnfGdb/KA7auGZpyNyfxgG7HGHP3B k7NsNlrHBsmvGVC5NKMXu7hiceyJj2pHrtnRTj/7Ep1w8nDuaFcgjDAoQpYF8E4tgFdokQtPD9MQ r/gSEfjh4SBb8Rz8rjP2MqxrqXqKlS/ZztLpdcA1J9zdnrRtZBPbdMzUx+bQyUfOGQpDKvnplZ9p e1KP1NT8sncA6ZmiT/2Y0qZ07CnUadtbHzpjtOM5zdPOnFxyy2716pXtqU97VDvzmxe322/f0K64 4jpbkquoxJXiaDk45VthmsMsIx+04iVPCn94Kt9PecPQt+CXjqrIVWK1l8Q9x/b+S/3UjvDvu42m uMjgW7UZdfg50qkr/4PKNnZVOXpKf9WN80DxBUto1gm/1VlfdKRcvsSOURo9iVvR4OddkSUHnbFD orf5ZEFi06vorsNppYoF3NOU6pFn6tv8wqFixXzq2aRDsXO237Wx6VPzh3zP1DGjfKxyxyvysJ+n lwPzuN3XYZG4P77SVwqqPK+n8Kf0aQNYnrbLoqdih9paEKXtC6i3tzDcHv0EAP55PmikKWb6WxmT +n1tC2sqW1hgVD71o21FN4M2xVtl9lNa4Ze+qX1Fm5eNTI3FnJBOcZfWaxAgloIpyHy+Ak2XLP5S XuV5GQz1etaxJAAJavjJjwclZKFPsaZ56qeJPlhnjkO/EnFYrHXmGlxo9xfxtK++VfjTYE91IJNm 05ZJoO/qtmWNg3EgxL8Ro5cDUmA4GpZOL/1MMNM0W1JN8Q9x7Nx1djQnX/EuuWG/D/08V6xXPUVH HzjWL172xO6Fv/pL7QWPPVqvQ9jcFU93iv3G69sF517U7t681ZMotYl12rU6brXJVJr89GA7rav4 TGnkCw8Dd2On2miIYfnYhaZtXXnaIROszg7xvcvU5I7ffh5Oi/Zpn4Ftt15s/OLf/LX24HXntbPP vrDJY7gLomulf4cG1oIWfEcd97B2wlEr22lf1U8m7egNau7k41POVsvvsrfKipTiO46dqqfxKibE EnrGAzZQh4tYMs2PNo84Fds6y8yBL/ojj8nTmNiFyabsiN6pDl4AE2Faa2ozMiU3gbLNRcdG8pWm 5fKt6kqG8pRvSi/ee97rkHboIQe2K6+8wb8D+c3T1Y83bPFiDtlxXqnYgRnp6C2kce/Fgnyc2kst /LQPmFUHjY9PFmCirRwfR4ii66kqfeYPQdvEjqIlyziVSkdqOq4AxyhSEz4wyzbfZcBH0bIGGg8k Bc/VD/Dx1fZgt2RoImhZPI0xwCeVog8+4LufhQkFefoOmMMCzPGuOiBMMI8BtUnXQK5fcnOFwPTP i6Dz7sjYXHZGb2wsG+rqIfrn9VQ8idO+Ej5Jg8WQpswxyh/IzNd9UVnYovQUn6q0Vz1gTpXp/HFc NfPynb3oJWarqJvn/z7l/cl3/XxLl8TYTq7w6B+iD3ambRNfi3hDmU/61Gx8iw5j8dUYolxpyle8 VTfqD4VyYRUP+yl9akvl2ZP2JYtNRYePT80fNS9P5cnDX4lynvsMTtGRpS4/j1VU7QsckAIrwNBq MOZedtGKZwLl7P7oVFKHrXVgK1n0/iAJ+Vq4kZ+X25duQmO/FAA/yyRd8bMOlP3B4T4g3SkwBkP1 yUBVZ5KJntSo6+Z6oKooIC3UhAAAQABJREFUJKgZuJT7qnK+vuTMrE1NXlWufa3JBn29IlpU+CHq H2JodzOAUOdYKlbEbOmyZW3bTZe3V732re3ObfJPNMJTbcELf+7csMMLt2qD6lfBJ45xgnLir/ZT Z8+tSSrHjlwYSJhfE171ECb2GgipV7S6nTwQnZjLPh1AfLscJqVg5kWZhe8rGARV8m5CdvjWlVFP U5YvsPIsDQcndI1JtuvPb0yXrdiHv8ASqB0Le9ojfvQn2mv+/RHt7DMv0BXKXfrmUA+IPKuDFL8y Ed9GZEBsnpTv0sui5RjfOjJDYks27UGu4muqZMpXyrN8obAdcUKjjM/p+yNtKg91Wh+uKVZscjw5 oOpgPzQiecUF+dI9a2fQhrjT2ZSmvCVbPNTvCwOZorOnvGzZUsecN9Dzk1aHHnZgW3x1FlXr7rjb E2jpK9lZ/HQQsKb49qnrwC7q9hUjaNRnoREM+pqss12Dzu43uqepdLIngVOs1Zco54PPkaaPsnjw 6zC6wIhV/NM40ob088S/UNhHPPEMvdeqAn2DD16yiwCtG8JoYQyV/cHz93Y7jXl+1IGu8qFkwB91 pI3hKX8k3fNGl9v4MdpVsrW3ga6Hp8amRWY2I/8MeSzIL/PYYNmgGh8OyOBTvwLXDxHDXFMAdcwo PeVvHWOGu1ngKakXeZ/2EH6nm6jN3nrCvzc9Ev9W/VY81S01+FBtF38YEzVvVPuU/bR52qhsp01o i4oBdHDgq/FfNOjzfFNa5dlPx+S8TOGxn6bSB3/lwSIVxhQX+pSveKFXmtKSx4dx4Va4xb9U4VRe k4Q7V4JBJVQA+KMNKu+SBjxlRLqYM8aK/f0gDM/YgjEI9KRpHRqrXGdqiUXsoy46U06+Ahc849so oUmty92e0ln70kUZvuiilIFa9caATMLn5IyvMDjV0K4BVV2uyl1EuxhT9SM9QMVfA6b4C3/kT65w qn6UT32VR7kfQL9MiV/ERPz+CKG3YzXnHi0c1t1xR7tlo67UeYLKAciTsNg5+PByxhV60/bGuze3 NQce1A46cLXAd7X16/SC4+28EDk6WFTt0O+zwnPwgWsk2/TTX5vbbXds0Iselzlq2LKwc2dbvGJV O/zQA9syLXZ2LezUG+zvatt27m7LdQAmiitXrtJby7e1zVsW2mGHH9rW6tbXbtm6QXybti34QE1/ J7Y79bLMww6/R1u9YpnWEgvt7rvW6/cnd8hmvSJFjq5etUqyC227DupD3xZ9lV5gvFtvK+cKmhd8 vVc4NoJekMyyVavbEYcf5kUZGOvks94k0ZbLORYI/gK95FfrR6L1cvX+bIPekyRfDj3skLZGOljM btmkt/TfvVULZv3sDFYrpquXLfZPLh146CFt7col7Y51+uaaxyRmZ4LDv/mBX305B0qaNnFIX9dB 3O2WcVi8wePN+1kgiuV7pvlxUzizQtFlh1yRflmys7zYqejLOA4wdVtQOU2GkcPXmujnJ0gw7cOc HuJF/wPj8U84od16y/p26SXXtBtuuN2fsmGprqyii5QY93FhSjblI+1PnnFnCbUf9vJHH3de+0qj XOYx6KUjB1ONbD3UFO2qRNbtG4xpvCqPDUIRa2aFOoBkcRi5QS8HR7EVL5Kkod6xUxkosWIT3jme 3Y/Si0yurhrCG+qIr9Voj20RIz766zZi1bx9xUfskas+CzBlEjzBTJuULakddVFmLHEVAw/IazfG FWoUwjpgkoc+9RcaacpPecqTWMQ4nzDK3pqr8dX9QcHEduIAZTgx785xB4E0zOHdZ41u02tTsQjO lL8EOn/tOrmcr7u3P2z9ugTiAKO2PmVztZsjYT8zfolb+TvGE4PL6HHhVu0y5UubpL8kT4yz+Ek5 FpRMHn9gAVn4WFr9bbafj7anPyBTc03JF+48L+Uah1VXMlVmXz7VHltKrvjLD8p6xFodq2zvAAAR r5qu6XhhGbuOYAWcQQc7t5U4KYv7NdgiVQrhm6apYeU4e2JZDqQPMzhDi4agFG54RmR3lk7EgsKG o/CgTVOVC7Mmk9EOUBMHLXWdqQ4/Tq/hIaakoleHrCiWD+oenS9yxT/Wu3oY+KN86IW7f7ngF98o X3buQ79IPlBiv2IEdvoBvMhFhnxws6iGXgdTFnM7tu9oJz7pGe03Xv6M9rnPfqs956ee3e53r4Mk 09p3vn1+++u3vb+dddU6LaYWaVGzpz36mT/ZXvGfntce9CP3sJ5N629pn/nYJ9vf/eMX2+bdeoBY P6p8fz1b9vL/+pL2mIccpb5GX9zTLjn3X9u73va37ds3bdAXBpa2l77mVe2ed1zRLrhjWXvJi368 HX7wSl1ebu3Ki85vH/qfH25fOe86/WKELF+2sv38f35Z+7mfeko7eFV+j+/6Ky9rH3r/h9sXz7xC i8aD22+//rVt/QVfbW9572faklX6AoZcp9//0v94TWuXf7O982+/pCfa9RMwSjV5slA75hGPbv/l v7y4nXT8UQwQ2bm7XfytM9s73/rBdtnt29or//i323NOOqYtWbu8/eW73tBO/eePtb9632fb0rVr 24t+8aXtRc9/arun7CbGt1//3fbRD320nfL5c/RWgT3tuMc9sf23lzypffkrl7cXveS57d4HbGm/ 9JLXtCvWb+Eyeu/fkhQvB+Va1FS/rn6OzSwU3J4MCmTRmAFCtVLwpjLUz/KEky1883Ujbdp3IoN2 +Iun8qXPc4qY6ks08LsFvBBICRtJJVt5E7UpLDWQONNKaw5Y1R74wPu0yy69Vv10p/fbtnKlWP2i 2zOPQzn9e9QHLfhFg6IkXZ4DiJVy9k/YdYIMS+lhX3nodUCg3Tw/qn6a4J1PRUNPbKyZO/aVjsiN 8szrWDhSYtcU37bZodhp52YlOnvaI7aMbco0O8YtPAiUzRGW3eqrQ1sVog+8RHJWzvGcxKGwal+Y 6C42vizAnMEf/uJ1LVymescYdhRA4Jd86S3+Ka142BefI8sYkwvMlSxokHF/Jvj+JPp7zeHdZVj2 lYrufiYGZplpqvJQ3/GqPPAOenqm44zHtoFzJvP99BP3in/aJb7Pxi5xdUyIi/9GNRx9Zk8s0nLV H4ILv1pVytCZNJ2HGNNFRx9l+IuGXV3KxJSrDaNrbPuSqoUfZfr3iBefim9+P9o8rcEA9QD7MDF2 yjKXB2f4wsJeoMKo25k4B7DBq3FF9EDonk9VQscZTz7ISTH4yM+noo36I0uZP1JUkK/AkqdhweST rmQ+NtLjSdAWzgYzJmSSI1/6Rz3kuu3a2w5h8sVL4+MNghqUnMA5xczQO2m6Gwdm97/zTyfzWZwA 1wAcsbp8j8uA+8PUL99qEY4aOiYxIJ452Jc1ugKlq1oH6gF9sTiOaTP9SsMW/eCybvmtPOCg9qAH HNde8YoHtS9/4hPtvd/4djvgPg9qL3v5S9rv/u6i9su//qZ2813b28Of+rz2F3/4snbHRWe1P/+b v22bdi9rz/ip57eX/Mqv6rfyNre//MevtgOPOqb9wZ+8ut1nz+3t3W95V7vx9o3tyAce317+8p9p r3nlpvaK331f26TwHHbPI9ozn/bI9mPbN7aPfeSj7azLbmlHSPYXX/rC9od/du+25RW/175xxfr2 1J94fvu1//Ds9tXPfrJ9+tQL2qoD79le/Is/1373da9st/zH17aL1y1uR97/6Lbqpgs92eIbabF+ KuxeP3K/tmrzdxSnDDjortXX4g886iHtj/701e2wbTe1d7zpHe2mdRvbfY99aHv5r7ygvVpf5Pj1 P/pg+/pnv9gOXba2Pf2RB7SPn/JpPR94qb7osKz9rPx95Yue3M74wr+0d37l3NZWrGnPfuFPt1f+ wWva0t2vbx/67NkirW4nPvyk9vCHndQuPff09tEv/mtbpyuKHBxshw+CzvZy0V3rthxryfXx6WrG 0lgblyNvzkndyDXmEiOY0memWOEaxzb9ifE93r6axclc060rIJkSHdgUY6pdRukxVydgUFZp8c0P hm/atNUYB+gq8BKduu7Rl0dvu/UuR6++nON5SzKZG0an0VWmlJbSn7qRl/qhpCOm/el9qOackoV3 Kl90+DyPdaWFMc9b5ZIr+6cL96rDqvIBWsliA2nkSznb3gdwaOwOruouGTNXcsflQbAqCuz3ARCU jjW2K4T92QZ9vq5iY6C+yYEff1kcqu3AHOpmdZVc/AE/bQa9dI06RiT4siBgLiiU7BlZWbj60Bzd FgVcPNjVZepQkopZHEoV1ZFvbx4o8/Xfr7w37pwTXc3efN9Hv3zjIgART3uFf2w7Tk4ynsa4iqfU E9fB68iOlQ6d5LMHM3pKR+iUiic10y2KYhu41XY1drCJlLZ31v2oaHWFPP0FPmpYE0wXjpGPdG3T t9Bd6xbkSPFj3JcNg2RXVnx6Y5mU5eg7CJcQD6+TL8ewUNzo1YecLZbBWUgRKCoZKCxMzIZMP+Mp I9iXjgSnWiyG2ziRjK69sfoiIrpAwPkMDhZwVaaGFtMdqZ6oky3YMTiSqgQBeuyPxkHQ/BLT3pZY iA7lEvYV64AbviILeWID2Y4zx9+ZUDTHP9R8b/qc3Igy5gLw/fVbwht4x8+4kFfb6jbkqiOPbW9+ 51v6ZNFxUaKj4bv/8M/bv1xw4+DP1075cHvdW09pupmo26PntO3LD2t/+mtPavc7dG27edsB7WW/ 8jNt5w0Xtd/5nbe0q9frCogCe/q5l7cD3/vW9u9e8Iz2oU98td3/ISe2Yw5f1d726re3vzvtsrZc t7O2feWstuiwB7RXPuOYdtABy9vGu/QMG68w0erzg2/+y/aeT5zVlui2667TzmwXXH17e8+bf629 4HlPaae/8ePt/g8/sbUtN7Z3vuPD7erbtqrP7m5Xr9va3vVnv9oe+ZAj2vmnrdOje/rhaPdd+df7 AH2R9zVxa3SX8gwdu63Nws5d7WEnPqwdfciy9oZX/lX7X9+4WrdzdWXxtG+1Zfc8pr38iQ9qB6xe 2r72hVPbEcc8vj3toXvaJz/+2Xb7hu3t3sc/ur30BU9uF572yfY7f/yBtk3vSdLAaaefd0V70zv/ ov3Cf3x++8xp58kmTXrSdfHXPtte9Yfvbxu37/Ft3twSIuT09Qp9tX/K48E1BzS6Zw5qalMKyAo7 4wLZjH30MdbhCWLGEnh+NsuiquvByAlVOGvxLwjBc9ZLriex5GomeNBKJlcMh8lNtzeJf8mO/oEZ mdgcXGz11Q0xcvCC57gTjtat9iXtX8+6pG3etK2d/vWLhJdbp0BM5YNStKnB1EQfuZIBv+JuDsrS zV8miWAUf/FMMapu3p8qT3mja9Yu5Od50c8VJ8+/2tucCV/pDDatnEN9YaUe3+CwuE/sGAO0NZDT eSFc2RY2smUvNP91wPxayRjPLjmJ62yMp/jla/Rwchk96lG2C2upq4MpWvhwNRdZa+2qc8AuP+NX uEf96AYvesf2jCuKm7Doy7bHgQnCLmIKU7+y2A9VwJlB00tPlQl2WqIzabf3iXzERr4OM+xm8WIN lcEvtlF+ln+e/n+t34ERptWBTYZ2qiusNeYJT3S7vQgk/YSPJBw6xa7sN6+IPvWLmHEdctGrjeCr do3srN9uJ199Eb1XjbYJsif0x+5q+1SgD37WI1P7s1gHMMZN6yKJT9TR31jA8loaop1+RxX17Kmj 5c2unFce1KFT42+fV97smJhJXjj1YIYSo/3+EfzGC6cEvGd9UCDPAofF4S4b6Fo7jYGjbOjmH/Bw Jwk+PnXlB2dgS7BHngpUsI3W5chLKN3BtMIDhzOnBAieMaXx0TPxzUcbCRHvCClTlpZs4czTq/7/ ll5y87jz5f3xFb3230N/94mfOMH/tBH8aS8OeMRr5+YN7atf/lrbokWGwjMk6m/fxAJMnd1x2dm+ 9Jkz267FK9vKZbpKp8Xd7Tdc3XbsfrKuZu5uRxz74Hbi/Q9sX3z/F9p3tHBbzbNe+tu16c729te/ uT34nsvaziWr2nUXndNe9RtXtcsvv60ddb97a1G0oh125H3bSccdqVugO3TLVM+pLdJ+ydK27eYr 2md1kF6p25C8b2jRyj3tu+d9s33z8he1kx56XDtk1Z627hotLp9zfHvVK/5D+/t/+nK79rZ17Zpz Tm+/8svfbTs23CF8PZ+nhP/uB9rz5wGUmjS7J5bwLdVrP64+719l56XtsivubEcddW8trFa0w+99 v/bIY45obdlGP7O2XLQVPEMm2ZV6/m3x3TvbcQ85th28bFd73ylfaNs0LFfpVi4Ktt1xc/vcv5zZ HvPyJ7UH3+PAxvd7ic9pn/5827ywRPHSLV/FPwM+bfS9xlbGUPoN7YZPIFZKe+NPTZi0Yv2Ja9LW jksXtRyGdLxhaBTw3B5+c0sP9nISSRr1TydL8fZOFj/DVzpKpupY6/Fc4qNPPr5dcP7Vesby7nb5 Zdd5EeNgSVf1Y0zmUwf5wpqaW/Fkv79UPK4vUOnh4Bxd8Qf8feEUbV5/0cGtOmhT+tQm2qTqMIOF m2Un8RttUFzhsY3sVahExf6S6nrraWzszYT+0sG+8vOcxUf/q9DO9LsZG/CjbGJMJj9iFHp8olR1 7N2LJUIefSMWnElRV/YS76qp/WgnFKDwzXjeERVl9B89qlJ9YjC2C7I2AXlMcQJgmqpinl48+6vf H31/OIU3X78/nOLfX33oPtxP+xMtMBdQ2hpStYn3nZYA8awt4wWe6C2MmochF632ZSF7MKFXW4UH pTRTjaPM8eMLhYMZ3lxNK/kp9nThBlrpxydeIVX+IVN15ddwYtrr4h/xiKOJy7iEBgNfONkGy4u3 6WCHgYq6kkaZejODrg+dsyYE6knUm6e3Pwu+Ss6rHucY6JZVNcFPY3VZsI0TIz3cPBGBVEEOKnzQ wCQZR+XQqzzWmd28XQeSEg/dCF337ACzT7Ir+OCKV/G0ZjZ89pGKHAtgC4XYTdP+6FOe2fys/Gzd WPp/0e++A4CvdNA2kzhZvWg6I1jYcHP7yIc+0m7dlAGGi3u43yofly5b7gf1Y+1C0xdPh8mWPrBT 30Zd6GcsBx24Us/UaXF1yXf1MyrL1C84YdA6Rwu9a/Wc2pW6Xb1aC5ztd9zWljzsxPYnb35ZO/bo I9sKXXnjBGLPYi3utl7f21KdW7fC1l1/Y9u6cYs6+ip3dnrtnt0727U33NmeeOzKtkZXv77+uVPa p46/Z/vxZz+3PeHfPb/dedtN7eLzL2yf+sTn2unXbtXLWdcSArdctb9b0jQZqD2Dc3rsYmCtu+2W dtzDH9Ze/ysva8ccdS9/QYIvVugSYNu5sd+eIzB82LkTLtZicaVs3NSuvGGzvtSQqYlm4CrkTTdf o5j9WDvkQH35Q4ILC1vbjTfy4+eySLNkDniFRZshyYcURTU20ufTrmHphjD+zK46/QW381E2VuCo JzEeCrf6csWqxo5jJr5h0olQxpJQ3TaytzCDq7IMZalceLW3Ym+wLRNrydzrXoe1Aw9a067Srx/s 0BdKbr7xDl3p5Ru5usi6eZsxa74b7UsLJi4jemEO/nnwYxc+4zv6M4cVzyBDHQXVw9sLyshf4mwi DNMUutV08r75gB31lj+FO90bBnv5qwa0rGqIuZS5B/dOXLjIcYs5D/YbwFDVxjYfQ/PvuukGXe4x 1DsQ2AxH4pILAhxXSqrHyUUJ9ZQ2pwwvRhI/bbXhoknkqQeowMIjguvTTon7yFO88JAfdSYGdbUj deEBsfNjBL50GEXSeU4wqCm7c/UVqZE2aB4mF9dqM9RAEE7KRR1iP/BVjdknm/3Ri6V8Lb75cvj+ n/U7RqWz9um3lIhpxY897UTcsihP/EOnrtqjy2Xim7Ra8BP38gtea3Jl9I119SqTMqKiEKSRj3Yp O8Ef+8JIjwzb6p+le0RFdio/XdihA7/Lz9IxtT86hNFNA8tX3mCmYPXa14QQgWztPEo6Lx1zhr8b XjKFWd+wYqLlz1exvKBUaXL2VHIxg8BoEakCe4k5pWFj63jAogpbYIpNtrXb59qeZ1EKXx1yhWQp w3f/rQ8hJWJCLGbecqw5xNoQ6pGMVov0Tad0u8GkYdQFiaA7gxuqc8eKqfx8Pr7VNxuni+NwdkVd zP5j5US/q4qtm6cozyiyHfAU36TWcRHde8T0rNsKLapW6Ni41O3I1ZNJMk/wY09k8b/iTyRRBRdX ShQkl3zVTvlVaw9q99Li7i79JNHjf+YX2h+94nntqnPPau95+6fb+g0b240339aOe9rPtt/+2aOs 2F1FEMv1jVNe4eGv4Qvcpohj9Wpd1duzWT4sbpvX3dLe8Ad/3E45/sHtwUffpx1z3HHt6c98WvvR Jz2hveGP/lRX7tZZLt2CSKW3LFq0vB2yZqXe59b7ZlwUur4pqiuJT/+Fl7bXvfwn2mVnn9H++u3/ rFembNTi67b2sGe9pP3G83T1bR8p8QFvaVtTtwjRyCQlW9euXONFnL6I6rRrYXu7k2/rqn46Vo3j vkZ/I5ZJI73GdgeqwIiVgzV8HiOig0vylbryUfWVDTJb9Rrr7HF2Hl9UnuThlAa3N5b52KUMfDWO sLlsZWGRmMsmS3VeMLpv3FY44oiD290bN/vbtytXLtPvja6yITu1sL/88us1X+V3KNE/TUDwKTun deRLB3likbmDUhJ2TpMnX9np3+3U2QcLGP37An3MpzSbCiN+UyePOyw0PtW+ZU944Qsjc1Plaw9S yRYg9iTRBtx6722JrYxf5mfxgOFP12+ZrosdMGju0tZTtyLhLdn4DGVMHUYBje3wxi90Igtv6nIB AW3phyMK7QFPZNhjdywDI5i2I1CqL94pCnnos/LMy5ViU/TXgRU9wJoqvTkOJnZeEDhANqhgvEdP ko8A7h/uHP3K6MDc2Yq74jjIx1mxh0OaLSpPBoh9ZcqiEWdfXKL9EPX7XF6KYzLAZUV0V5+OTYqr YwTPbHtN6UgiV0iDP4Gk1jjQU8fCL9wZwyO2NYmPam3FT6tG3jpUMcVnLE7LhRtaWTSOI0yCh/qS Yz+Vq3p45/1OOXGzjdJfsnD7PW+zAJD3TmWgTZQBwyIOVCV/W2gIaYyepSdojA2JK1iZyhkq08lx 6tw8Hbx9BSH00bHigV7Olo+ygvZxKr7qVpT50MjoJiHHN0vyw9EOJ0RfHqoJsYfA/NNNVyP+xW2F rgLpVLbtbHqYXxVLF63QJ52l5InLNNVLgKGx9Nu5W7KSWakXTUx5Sw93dHfrqtamHZvbdj1htnKJ vmmpAxz0YGRf5ZT6AUYFrOEFlhUffMe2HoroLGPp7srzTNggokkV2pi6QxO/pnbznNa62+/2810P eewjWvvKlW2PXonB3LxFD+H/ez3A/1+edaQe9n9dO/kpj2t3XX52e81r36CrfRzUml5u29qjf+Yg 6ZdOAbvtdMXlsGOPbUff89B23vUbtcDUO7x05WvFgUe2xz/kyHbzty/Ty4N3tRf9t1e0B+y8tr31 PZ9oV1x0SVv66S+0f/zo59tff+BP2zOfdFL7/OmfkW+0k7xxp9VOOCvvcXS77yFr2+Vzky4mLNXz dU9++snt9ou/2X7rtW9sd+oVINi5Y9eS9sSXHBI7x+AkJ7u5tXvH3Rvkw5r2mEffr531iQv1mhW9 TESvVVnYs7Sd8MhHtcU71rfr1m1vK4+WQfz3AyDxrn5MRcW3mqH6NOXQwj/bTqlDln5fdbWfNdkB GUhgIjfV44VMPwjmDFMMilf+pMvSbGNv2VpjztWAhgV3rYRxuVyvnuG1MJt1JY3XeJz48Ae0S759 ra+sXXfdbe26626XLX2ZyEI40oasTcWrbIZOfupv8UxlKn5FY89ibZfaKXEAo2vEfqd4O4/XK70L KwcGhan3K/jxl89UtmKErdP81HZAqUOu6D2UvRNAzyLFz9xobpnqQJ7FNRjIxwOjyjkdDCXK/E8q L134HhvwrUNguQq7H+mubGoPMU0a+/fQOVQRU1Sn/MBqu7tO6K4Yag3XXRjkTey8TM32UYEgAunH 4Cju9K9uFHEqpbagByRxR5/Gt+MIeuw3C4JU26ToMMdQ3q15Y0e326JUD7rmA79UX3haKj3bd+mn 3ATKCJimOuGvdqu6RZyE6+7FLt2Z2K4vXA3HhhK3PcRYJ0H4rY/brzudqBca5nWBQS7+Z8ENTgGL VzGsMntqOBGgz08TdeGFOsoXT9VXebo3ruVDxX5bOaN7tCvtRt8vPbWP/NTmNMZsfWgZezSeT8DR qHzJxl7G9uh/6S1f2JNSZu/isIE+PPNW1KkQtAJ1nrL+5nnm+WgGrp6MScFXUZKKCvM4GGCXcb2l wXddGgv5GJ/6qS1xHDoDYvwgU41fkxu0HFBsvQ98lpdRNCVm8bXxqV+jrugIm5iUsNv7PtGOAyIV 1fUYQLu04Fpz4GPa237qzfoG4mXtVZ/8rXbFti3tN5/91+159z9eMSnu+M7LXrHDZ/ClSOU9225s //X//FLbtfaR7Y3P/ZN2AJOLDhyqiTHe8u6yre2WTTe27958YfvnC/+pnb/uGt3C1GIPJ2P+qHHA LwgxYI5mZ/h5uXAtzCJKnDuvKg44YG3bsTw2DGe3MGgSuPP29QCZGdKw2IDWMRbp+bT137myfUNf bni2bl8+94wL2j+ffpXiu0Sv23hke/HzH9tuPe/L7SYt8PgCynK9O+2gtavbbRs3Kr+2PfYpT27/ 4ZkntIWt1+hVIrruRydT/BavPLz96ite1P7gjR9uN9y2sa3W++Ne/J9f3B5wyPL2vtO+2e7Ss2KH HnlU+8knPa6d+68Xti+cc61u4y5qq/XeNBYGO3YuaOLc3K664a72rJMe3h501GfbZdfc2VYedFD7 uf/4wnaPVUvaJTKo/xBWBUSxUnvrCwXLV6/RO+3WaPG2ye97O/nkZ7Sfe9qD284NV/j9cBbQ5EAY duvddWrsduk532oX3vSz7Xm/+PPtrAtvbudqEcLVzcc97cfbv3/m8e3CL/xTu3bdpnaCX+6jKgWV mLKvvurQ8y0jpdCdHTb1/EjV0z7pAliSPBjTZD0TIrr4QK9U+dqDlUlSuepjspXe4LFJF5B89YmC glb8DK2aQGmTBX15ZEGvlDlKt6Lvc997tG+cen5b0Otovn7aBX5fX766j4ZKo31FYT/aGNtK35QO H/Rh8TLj84jLbCJG9wNr7o6Qr7sGaeVZvYU/6PSY67YLHjofz18i54Cq2Kiucw22FQa8w4Ki60eP 0ITlnW0ySTbXQSWzD3F3jXnhZzxnnEredb3NNTYxCDnrHuRirxefiOrDvMiXesgPV2GUr5QTYgid KJ2+4ioBSY3zVPe65vNpmw15ULotGQGBLTuxYdCj3CDniiyUzaEy/Q4s42lPO9NXsanuOMWv2F1t gDxp7Dsps8WvzJSSQScBVyevuBcnOndr+bVs2UHt6Q94pp6D1WJGtO+ViPNVt/5r+/aG29tzjnlh O1BfkprH3Zc8Y/Suu69sX7r+rPagI360PUInprWon+Xf0zZtXd+uvfu77daNN7Vbt21oq/TMMcc3 Lio4dRvrWOjFooxweDsYceJTsZ/RQSiFwetc3N8db0dcNL0zVHMhV+Cjhm1iP8Wodqh96oov43mW RlOkvmyizKfiQPWUJ/QszmohCCbxDh93QzIWeOygP0mk9UVwsRtMjQ6klOcEaTx5Kl1wVJ69+xRE +qC2fPb6hQWqK5UwgnYOA6qy7wuYYvFnEpnlNMZEpuRo7GGi60bOYIlW5cJP2VvrBLvwipf9NBVP MOQHc9Ck33U1Fik9hWnfVeMuU4ySHX45gZYj9bo6e2FBSAOuXHpQe/SxJ7XDNy7XFTgOYHv0MtpD 2r3ucU+az6J0y5Ur9CJbvYS27dZD/Xpgv+o0c7QFveiWH0BftfLg9thjH6Wrb3pJ7t13aJjXVCVu TeArl6xtJ616vDBf2F72lJe3t/3za9tffuvjekA+L561sq6TwUfqYcgkITjO2+IrXYVuRofpnU++ 8msAq+77UL2b7K8sGxRDaaPSwob2ml/+PU102LaiLXNcMilSv1hXTFYt1bNu3Nrcs6V98J0fbMf8 2Svbb7/h9e0ZZ57bNu5Y0R73hEe23Xde0/7iA6e0jbpfeNq/fLE967W/0P7q3X/ezrv4mnbY/e7X HnL/I9qtt97SDtarO/77r/98++N3/C8f4DauW9fu8/Cntw+874R29oXfbfd50LHtePGe/tmPtY+f dmlbpZ+U+uQHP9J+9LhXtz9425+3Z59xftu4sLw9RjqXbLxR71Q7U/7ubl/8+GfaM//oV9rb3/36 dtY5V7V7C+dBR64Wr14GrBf7VpC4fbxKV92a3kX3pc98vj3t1S9p73zX69v5l17XDr/f0e34o+4h O29u9/2R+7fffuXPt9/XonLLxnVt8QGPbb//e69ul15wTnv/332mvenNH2x/8bpfbn/5N29qZ551 cVu0+pD2uMc8pN1y+TntHR/8lK7ZLvFV4FX6woPmByf6aPXXUNRSjjt7KKn3+PM4FqX3U7cFk+Tc +AnO3tsaBzkRSn26Pr2FOaJ6Ajrn5d2jRKSCvLYR9kKkrjCVbRwsd2nBxq8fPPmpD28XqR1v0jNs N9xwW7vtljstLy1tpxbaRt5bYXhEL0wTJnqn9NIPz/7iMeWHD/1iNj7qaxxN+aZ5ZEjz9noRK2Hz Eh7AemzsluOamM3jla2A+lul7I2ReUbnd5zPWCuyJW9ctwWqEAh+2iRlxnyl8I+mje2OvOYI5g1i IQHHpeNZH9CqGNB6ZmqP8bxaqsrC0b4rj22xqGjD3lq7xcTAAel72zL6PvpE3wefD3MVhipRZj/Y rZLznUDd4A2c9IGRlm8JUh75fZwzkxmpTBrGDLzpQyxq16w8ov3+i9/XjlmLXd8/XX7ZP7QXnvK2 9vqXvr/dR1P9D5q+c8X/bp9+11faMx/9S+0Pnvoz31tMJ+VXX39+++gZ727vOYe3B2gB0eNQ78yz y6Dglz7VPpDGPHRVu9GpUZ5FG21QNO159MV4pgUr7TqLi/yITWnvRL37ZxpqbwZRgpF22Bce895u OTqtK9wCpMyH+YQ2X+yr/2pXxQ43UJ8FWxaT5uWEW5XY55MwMU1jAw8pw6P3KZF85a2EYJgKkbcg hjALEHCCjBMoi0A/uHdelJiOkWPA5BLo1Aw6pvWu0KbOrmb5wAqH1DqVnVPbUzNiFE+cJ6johqvb UQSDd+ACgasrQ94skzogypb4NsAOXF7Ewqf46Rijh6h3SmaRljNL2lv/6efbWxWTmvC53P3UE1/T PvLS32vfuuDD7cUf/o22U994tNt6FmqZVucb9J6wE4+IzPVXfKq94H++tN26SO+rska1i/gOWX5k e8ARD24v+tFXthc+/PHtd376Te3ya77V/uWOG9tKVqykimWPw/T2rH3ivogSW8YgvvMhHlxR/dxH /rFdpm8+8swVWLX4tpAFt+vdY/olhUsvaG99i87Y1um3ISXHonWJXqR721V6/cWb3teuu3OLfph9 WbvlO+e3//4br2vPfNYT2yMf9sB20Oqd7RP/8OH25S98vV1xw3r9SsKKdu7n/7m9et1teofbY9v9 7n1Iu/WKi9op73tP+7Ye8H/Oc3+sHbywTi9c3eUvPay77Pz2p3/75fbkZz25nXDMfdu6ay9pb/6H D7Yvfe08fctVZ3E6m731qovba171x+1ZP/HE9ojjjmoH7dzWPvX3/9BOPfX0dsV1d/r5uItO/1J7 9Wvvbj/+tMe1o+9zaLvhkm+197/pVL2e5Efaik23tiW6hafGbZ/8wAfbmk236dcfVrezP/2J9t9l 59Of+pj2I3oe6+ZLz2v/+92nt0tv2dZ+8rnPaGu23+64nXXqv7QP3Wt5e/CRB7ZNd2/SLdcV7bpz vtZ+8xU3th+TvofqRcSLd9zVPvD2d7Yvn3qm3oenW7Z6LvCGSy5ub3jjJl1d3WmcnAmqEZyqn1Y5 VNot7ZcFdMrwZMIIF20cub4bymM9uRpHGe/F645QjJN9xk5NRv3LLeoHJG+l0v1KEzX9g28gP/jB P9IOvcdB7awzvu3yxRd+p23U74su06J/h36mgg+4zEBl8+hTlE/L5OdT0Uq+6ikzB1E/xeiooiVO +B1U7FCC3kH6zGjbCn/Up/mJQeWEDuS6xEAOslnwE7oHYqSmmJXnfXlLly7Tt5sZ4xLQv3Vq7tmy dYt+JURXhDXWuEKJTHwrPPZWIjp1KgExw0c9mKFTP8an+6GjC3MGp378dqjf4Wcg8Vo6OsiSU6SH 40l8FF/HtQBM5mQfvaPOTqtQcWTjGCgDiKZth0VlXhfEMZRfVCFVzAorZYCwSPLEQH/cBfFVlH3a wHEmsSImyFTMfPVR8pyckodOl6/5ND5CFAZEZcFICh3bHE3dSfngV97SLr7rDr9cfOATGym7pe3O O6/WowO3tzee8uv+BZbA7Wk7dy1tP/W4/9aedPTR7Qvf/Ov2heu/rZPv3HDjAZzbbztHKPw8XGLz rXM/0D565bmaW3Qy6qRnjxevbUcedFx7zHGan+93Uvsf93t/u9eqNe33Tv1A27N0hW3wwkL8gxvk VagYl6XwEV22dbUcH+wXG8XU/UINuYfnVlTyiZwCyGJobCvVqAz+mHq7d1K1c52YzfJOpAaM4Dv2 E4xZuR74Ll46al+8tk08PFKBD3QC+oHp0hf+KMkVWcVA9SXPHp7ip5yrvqP+pRCZrHCQVBOXC33D SrEaxyTrjDEYxiKFVfP0UnLJl3JZUaRu+FCcycSp0YmZykmhFnnlZNk/YXG28MqOKT9XqlgZ+xuw XbDqi599YReWe5p8drSRI0/qPlbRbdarwqCt5fboVwU4bxnTTt0+26lnHEhMejsoL9LPQZmyQ9fZ aFkVOh4HbXh2LN45ufe90G7ceVW75oqL29eu/Za+Mfn59pwHPaA956FPa5/60gf1qo5+l5yZhDRp E5dlm1up33pzAZ7edHmX2KJ2welntPM8sMBgDgIvTI6R8Ffq6lDbfE37+Hev1HNK+nUC4fjWg/Yb br2pfepT1+tXDHi+TffutaBbf9t1+vbqte3/iMbg3slPUmmS4ZYZ2PwA+/lnnN4uPPtML1r4JYNd 6u18WeLv3v/3Nl+rMvetxXpQ7YbLL2zvveJKLQ4lr7OeHT54Ke/JQd9m1e3e22+6un3ovVe1j0gH fXin2mSxDm7Ltbgj8YzHRWed0S49+2xfbdwlnbsZYbuvUdPrOUautknu7C+dpscaU16qdjn39G+0 8848Q3aq72jVjgz97G/e+yHbh7/6emv7m7e/z/bzGp3lesZNEWu3XXd1+/DfXunnuYglceAVJCxc iMP6G69vn7rmGscUfI08mVCTgTgkQ9+ogwl+VFLVTEJO/07IRbYTZjirUADyR/7Keeuu2trvGwe7 6F/8dTulk8mNL6s87uSHtAv1Wo879JNo/NzXJj3T5rlIfenWm9YrL6lSj2bJ0lbTsVl6p/Eom9hT T6K+5jnypFrUFN50fim87Mf44EmVQKYvkxYqqC5NNqqHw2wShC0S8kUTbGFNJMZsGMeycUKkvZfo hc4v/81XtJOOObz3FTFIwS716Tt1MnGZnuv87GdObdfescVjqmI1BfQ8342ruExjFl6s7Fbjj8YB XYGFjuODWtEZJsVHzqlojk+PnmjkGH/2X2X2Y2y67GQ3tR1I26gMRzCe2cUmgrxHX+ZYvOqA9pu/ /1vt7jM+3d77Kb0XUt+EJyFTn2pfK5Vyupo6l774tNy35hXevZJ1Og4Ze5QrZu6rqhtwkc6qRXvy +tjJ+Dnf8D7WVjAWNrfPnf2h9rGbrmmr+6ILuPnEYmuV6v/+zPf6EZPU63bnjqXtAff/aS/ezrjk U+0d3/qc7hL0GIhpyRK+4a94WV9rl17x+faur/4f9REetQmZ/TLhr/i83sn5zL9qf/isn22/8KRf ax/T1bez9WUhfvIvTmlXSQ1ImybGIaZ/uLUNnD6iOsccjLShQqm5V+8g0DEGngqF93SMSaq41z5t EKxiiw2Zs8hXmmkfE8FOfckUL/u9+Wdp0/rSw3GBNGp1MTTZwnxDRLi7xd8+utogkNetwSU8yQ63 TWuygrMUk8egen6NfNHSw+HFMHVUVSBnBwzfeTuGSZbOZuAtGYAkgrwxVC475tprgjJr60xFL0wn 6bKfKui2oRYynb90Ygv5+szaIDq9qiKN7aQqp6QtPBM+6ITF2BS6nMDJDVfAqNcnDTry1XMjUEie D2RHqQd3KX9L17bNW29sn7zgLC/eVq7RT07hp/5nUpXLOYCwRXTb0/2nmgnJHU0T4zIN/nRJIF3p Nitsv2IAsg6uK1eGM1Nz/OUq7kp9kWBqEL/duVgLtKRFWpywlBkT7cAisNISLdT6dURdzQuursd4 0cMVQV5XwoO47pmaCNBX7V9tSrRkohMLed69lr4HKXHlPW08h0Faoskx7NoSKv2JS5P8aCsnMch4 QavALdXrT0h0lyW6MkpCP627hNNuQYNRaYkWafCVrV749gmAduDK5Sp9qI+t2JlxRznjmAUdB9PS Veiz+4yN0EpfbLN79s5eAuTEZNzbsx/R8DdtK07rxxb8KfvGxSWvf+FFxlyNOP6hR/ngeP65V/oZ w+uuubVt109VcYKw/s5NEt+o/pAx6s7mvtjN6Lvyf5a6/1LxJ0YaEv2EtXxGsvLw8plPVe/RKTcH HlyO22lN2wthTK52m4imAu0+yqcdiS5aoc9KjzjksKNkmTeWaqFxwkkPa4fp+c9P6XlAxhiv3jng oAPa/R/4oPbi//SY9uPPfEL709e9pZ1z9XodnOnJe2sQ6oA71Tijb6KbS10MD9uNz2AC63zFz1Tx 0X/ip520BbHBnF0U2YQ+8mPMY5Gqe33iEDfAScwcO2PoJHLNqnbCo45v11z51QpsqUaN+6Llql+L xqt9Dj/28e3Pfvv57W/f/m69KPvGHq/0GY+bmOJ5EcDoDLH6FSV0ZB+/q0tBnp3POyPMuF3HEgGs WLpKz7Gt8eKMaqcBaCKnitVL835KoaukK4e7dTzovi0DZ/lqncSP8xVYW+VvpaW6knagXlu0bJke 35lLuxbubu//8p+155z47PZ4vWPzXve4f1u464K2XF+WGFNvM+9kgwOA752DfY8XNha55EeKrjvK xxqrMIIRtznZybxTbY189ZMKTWHWfso75c88GLuLt7CqXPxFB4tU+6IX31QXdcVnob4pnuG43/Hg L7ziQcSL7En8cjTpYOymigYAjU7yFchp57QLOrCXcQkEQOmDxuidB72VZoxSvc+8FBDO2pDhM4uZ gZlDhwaYJg1jSxF80Vs9PlpSPzaqyzK4zghse9dTvPW8GnX+CJs6f0RD/2LRuMqofyefKSXrbSen Y8JUjNRSiZnuiOF0XKCVIFnzTQii5Z5Ap7ETE75M5WDrhrcDeH7OSRo4UPVFSAxDPFhDu6icr7tX bLu4Y5w4Egdx2X9qq0+QZ8FAvZ9VkAyDTwSq4o/KlFiUxuZeR8ExNuteG+uUbNo4NsOE/agAzHrl 4q033NwO23E3FCpMd0abspX+i2w3rWMUF3vsk76OsdtnliIjE4VqwuAzhah3DMKYQ8kLPinIlYCx HsYx7vQrKPCxn034VL5TU/ElD71SN2mID1UVq5EP/opdydaeWCRfC3f7ocFQC7HoGsdkvqwRX1ir ERdf/uebJQIBjufVkF/Q1Z+D9f61R550bDvr9G+3jZu3ttt1hY1vi/oqhfrld6+60c9sYgfTxdBH VCY2ZXnaLbZWHpkhpsj3MhM8Y0YUzyv0W/imcsXLnuT5RTwMR1LFkXzxVL5wKGOhF+yCwXb+JBGa cswrGTndFhrNLLHXY0Uk9EOmmhx/5Rtxhlxl7Mnco3grhiyK7/zOxe0D7/m7tnMxV7uFIB5OdB77 rOe23/2tF7ff0jOXv/rqd7RNuptT3XqBq/z9liJLOk44OJlKvGIPt9V2auHNFTYoXKmkfe2CjCVO jCuwFrygswPGWSpeYsK5md+7R7srMgu6qoyfXMVeIiz4IGAz5ys884hd+OYrfLzke7gVmX7F63OW c3U9kXF/4gRhh744JFannWLyL6WAHZKuaO/oVwsVBynjanj66x7/espuvR3gQQ+4f1u1YnHb4qvf 6t24pKtB21Vm/icO/GoHV8XpPjLTCz+08OUgfjeX45mv0He9bjOYx8bsNeOO9uXPSTv0os79bWTr 9Z1voJeH83QxgFvHAWxwmuOzosyPVNP/SNjD1bC79SWsmzfoy2hHHuE26YaZJ5uOG4Pd79OnhcR4 lDO4DnKOterfIpcV7tsqMGrzKJj6lm1VGZpqPL6EDwxfBHBcvBeq9maPMa6rMUzdfPpetMJFJhgc 36Szj4GiFyY8pKlc4dc+vLJdQLk7whiWw/m3T/AM/KrDX8eHvGJIW1Dea/FWgg4iBZIUDWAqYmQd bGb4zIpRNfUhvHcCy8Zjgq2q4KhpFBwwKwAEaqrbcqovDNBVnEkEmM4xTaMcNV2/WOCqOvipMzEF trYll8K7IuxjQhn0zunqTmGXfTFK3xCakh8Udb4BDx6zdaFeMa1XJ+YdTwt6NchoMOx639jCNn0z 8tHtpx95suVvvvlKdYBMjOboOPbVHNmkSyg/oyeFilFiOwrRPjU4oMI3a094B54Z7M4v2hw5Qn07 38eqEl2oi051ZjXI3/35GyC0hSV8G2rvBG8NMmTTv/bmA4O/6odwWF/vbD7YWgwbxvYvW5EFIxOP vIOnO1k8EAxn1hr40TPyVJk9PPR9K8Yi2zcAF1l7j1GPHdV6thwjTF+OGxlHHPTTv201ljvFx/BM 7YF3kWZWxrnjpwMYMeCLLBwAt2zTD4aqLR7xqGP1U1Rb28UXfbdt1e/dfvfqm3Rg1EFV/LffdpcP JEt1QEarD9zC8PAgLrIAO/zRBnurD2GL26IHomyrdmCPXdCZ+CqVzLx81ZuewMzgF27xsYe3cEKX F12V21yO4EXJUgf/xByLUT/ixGtgih7s/W+NX4qR0xU3vkCjllAJPFTuaV/95Cn6LeCj2itfeHI7 +WGfaJ89W1eTNPsv6BnQR538hPbkJ/5/rL0HwGZXVe6/p/dJJpM66Q0iSQhFWiIQlBYIAqJYQUCu clGKV7iIKFfBKzZUxAv45yoKonAR0auEYiRAIKEEAqmE9DKZSWaSaZk+k7nP71lr7XPed75J4G/2 973v2XvttZ5Vdjn71PdRbZnOTm9Zv7b9+6c/167R09W0DdK7dWZm2coj27PPe2o79djD1bR72g3f ubp99sKvtk1bdbZU+rk8O2/xsvbk885pjz39JGHPals33dM+/7mL25XX3tH2cdZaB5NPP++J7fYr vtU2zFnZflS8R65Y0rbft7F99QuXtK9ceaPmf/qDFlBafJ10xlnt2T/yhHaI3qu4Z+d97bJLLmlf +Pp1WjjpcrkOEs54zGN0f++CduF/XKZ7WWlvjWfd2nD8mWe2hx06t31OPydXyTFVv+U3lxfoN5ef 9lzdv6V7XblF4r5717XPXXhxu+b6NVowzNJP553Vnn7uGcZ74lOe2uYuP7J98Qvf0CJubzvuYT/Q niGbjly5TItP9e3LLmuf/9KVbTvtrfFw0qPOavrBmHblDZvb817ww23e1jXtb/7uM22P9plcxu1J tno/6UXc0HeoZ78y7FtijmLxTGsyPkhud23dpxQx33/cy7QaSf3PdrlAccDNfbTnBladgJPYwgeN ZEMYoeorer/kIcuPaA87TO+r1KtF9u7eqWr1cvaF2QfDnpQrTHCcBr4sJn3wv+S5xWZ23r4T2sUq I+KATDjpIX1lPzWFKpuwqzBr/shq02v/VXxjPypf/MET6xH6Gql40FF6omb4Lh4o47XRmE6d+2jG 0WVsJ4OyUkhZCdmJxVuBwRd5RD0FxWrZkzyTtoJHlXtIBMf8onOdmn2MMWAh40KsGEuHqlTHzo3O OTRAX2VCR858YGATnTd4PSlL3n1fHRFcy1pEjPq3nQhlKt3IkGqAWA8i8MqgMJlhMvgWpiCYH1X7 JbCi1ELWgipPJGDCDZOtE79teHDCwqgse8yfZXbXNY4cxsSapSPDwxYfrSPRYZHiCGjyfvgxP9Re +axfb2cffURbe9tF7f98+3O+hJjjNRcUAk4s61eR+N3P4ZAIVEW8QNXlOn32zhBLkUdxJjZDqngX pZfliPPCi9bUIJNCBmS1DbF0OQKvfOghY9kMCvl0w7K0Je3u/iFe6qofsCVF3+EYbvCx1wmPP/5R wSRSdsMDPjtnaN0OYNGlum6PjrxJ+GW1ygQFIv1KWwUWGnmRLKt9kLfxxFrGSTzjVPaENDVGsVzx +eWtrrE3ESOU9BRGl81FhorRseALWzDQKBKnnh0nd1oTm0NWLG879MK9bdt26OfKDmmPOOOEdvFF en2HzsDckos1Jk3OuNxy0xrJhNOOYd7DUzZ4i3rMJEboQ6E+xDEahJgorwQ/yTFXnokx8iabL7yH KWwvXcExfBcWfQJ7Z0rFQ93QBtP5MDMMpp3DRjcRPiE7LU903RmjDqc9DmouQqESfofrPeP+iGdl Mf5iG3+WkULkFusx94s/eXH7xRed3R5z2ints1+5WQc4y9uLf+W/tP/6Y+e0DWvvbGv1ANHjz35i O++8p7R3vv1P279/4yajHHrqo9vv/s6v6OfZ5rUbbrxN95Ed1J7xrKe183/k8e0tv/nudrt+QmX+ soPbG97639uPPPaEdvstt7V7t+xqxz3pie35z31a+8Pf/oN2wVduaEsPOqT95H95eVuge02Xrjqu 7dPrJ9boZYjHHP+E9rwXPqv9ywfe3979oc/7tT2PPPeZ7Xff/Io2d8eGduOtd7WVR57Znn3+M9qj P/TX7c8+cGHbrit9T3iGXqPzxBXtqxdd1tZrEsZPzrqd/qQnt1c94/h22cXf0su0I2bE3U/+H3pE +/W3vrE99ZHHttt07+iG+/a0xz3pSe1Hn3tu+/23Yuf17QT9jvJ5T3u08Ga3x53zQ+2wQxa3L2qh +sTnnN9+43U/1xboNUI33by6LTrksHbec5/Zfvizn2y/+84Pt/X6WcAz0P3cM5Wf1447fGG7/ltf ax/9+8+2zdhBu0SzRGeUzXH2KfuMeGhHz9P0ByfeVrCgrZh3sC6bclvHQCfHe9r26l7pbXt3uEI9 x9tofymj/U2JL+TB9xwokuv6Doz47WxbNJ65nbcSmIy/Q5Y/rP3y+b/fTl+5UPfmfqVdc/t1epOA 7pkb7ctKvydXADABpdr2fqmiE3W2V9+wKDj1EEONG+xjn09diakARTIa76qPA2RlRIcvDsipiQRt nIwlhWz5WN6B6dabjkzZQR7eetq0IMf18EwnZEjwkUeND34zb3lolPEqnWRulYD9AyFkiZMYRIDN i7dSgBKSZGILgLhobF/OVM8qY1HWg4QSPvDyB75EUU1n9H7WmAkc8D1oPfiiF4cfIpB+l4VnHgoA EwjRKpX9/ZQiLGa1dLFNbKmvCc+BS1b8TGn7NAhJJ3+ulrT+a3FZVtdTZHQ2kmNEtg9E5Skja1rw iRJ0Z4YCcYStBnj5rIPSdvTJ57WPv+XyCWgmm4V64nFx3i92/XX/1l73wVe1a7du1Q2namoAlWox OKU0YwuH+JKXHVntzLhcXJe14TpQqo5GPf0F+eo3PbxUKpahJi65QXBYsi2YYKi3DHn9Mc9Ee4cv thUg48GjJCG3lb4Lb2yTec2nrwDvPtYpbFdjnzOhKwaOdMgfH3FaDxgwlV1kUk5Z+lj1T2WTN3yh CHLp4CCGVPy1NR1d7rBDLEtL8Vk4v5gESdxWF0/9RQU+FH8sdmoUhO6ynRJ8YtcBme7dkzfjnEQA AEAASURBVM/09xU647BIZ3buXHOPJtrZ7VGPPVWXPO9sN+lz771b2uW6h40nRhmL9+jSaMwbag3h cA+ktWS8wqL6ZlGM0vAPvY6raL7XQ5L8VSofhjK5Adj1BimO2JZcbSfjQYw5yJw5ITPmn8aostsl +1UH62V5IbsYEzV/xplM6LLfLtA/MlGWLHPJRN8U2Tzg0h/1IY3lvIMmBvqfpfG/bcPtbfXmve1E vTZHu+n26Kc9s71aC7eLPvp3WhBdoFf07G2HHHtS+83feWP71Te8rF3zyre31bsWtde9/pXtlEWb 21tf90fty9etVTvObee86Cfb7/zS89rPvfDs9rb3faqd81MvbT/ygye3D/7JH7a/veBb0nl/W3Hs Ke33//i32o+f//h24df1jkMZwqXEU3/gtPZ56/xk26pntJYecXR7zZte357/0pe1b1z2nfaZqza3 Zz/vuW3O5pvaL77mHe3Ou/S+xPlL23/9rV9vL/jZn2wXflZn6W7a5rO4vP/PY9zeZx+Tbg5eiCuf Srt37WlPO//57amPOqH91R+8o334M99WzO9vh514WvtD2fmi5z6uXXT5ze1LH/8/7ebv3tP+9s9e 1v6/P/nj9m8XXdcOPf709vrXvKRtueWb7XW//Zft1nVbdKl3fnv6T/9se9PPP7e95Prr2jtZeOqg ZfHSQ9rcO69or3nrX7Xrbl2vMRA9OOyUPe4L2qpdYsjTamVntJebjZ3E/JXtrS/9x/YmLh+XI6Mt 7X799Z9sr/jYb+K8xkpwha7A6uyoqU8Sva/KPgLprNN/tr198aMEFas3qrjP9qBlh7UnPOzp7bQj j2ob1l3Zfudjb2w36+n+BeoLw36QsZr6R5iMC/5IsY0x4Lmcvmu6Tg6ozWregrf2O4wXzB4nU3JM GFn56gfI1VhEdqY03iepE4QNYOhDQp7xiXzZVOXCPxB26bPdqb9khjo1her40EV9VUWm1jrH51mR 1X9YFPGAn3gzVfQzbxhbYOW4oyFGygAQBvumzMSOptDTMsuXgCSRsWzWT+QxMHUz0DDMcG6AEBjr T4iJDYFxMlRMfNYJthJ+dZ9Mya+y0QqTFqc+zN+rBdZ9sq2AsjANwXpaNS3PIImF3kSUR8mDNQNQ iz1bqa8019zs7LzDUymOL5zxYMe3Pbv1uogNd6iz1c5X9crzg+1HHHJcW84TnnqX2pY9WJm7Pysa TJrQL3HrT6eHeEUHo3PV0YBYHVO2leCfKc5FL76Zt7WzSgMrrjBnn5DGCdGyb5IaLNFbQ4JBXrwT AFMFbHfSZrLFkpz1cXlCHNilxvTviCLDCNTWMUhs8okqSqAWtrdZSb9nxx2/ScrYisVPwngHhHo+ wYP0CFnFNK80l6i6H7jqI+pM8HBGj/7T/RVnjOWIU8RKMtgkOxYt0utMTju2Xf+d29sWXQJduXK5 Pge1NVq8sUj72qXX6vLRXt/bxAMHnIXjKVgs9K8PjOMvA9AdKTJDhBRPeOHRX//twRF3eOxaUcPe Hu/qf0g7nik4hCkJw6ZiMO4f5L2ogm0wtgv1SR/c9KXTOteQKWy26Ku5ynaD33EAC99pK8Z+me4J fYAMumXht9ioNrKm2/5CYR7Zo18luV/3wupsyaKD23Oe//S26ebL9Csj/9ju2T3HTz7fce0V7Z3v /Xj74B/8QnvUmavanm0nt7MfcVj75/f8Sfv8Fbe3hYsXKj572hf/+Z/b/33kKW3lIcv8ANPiPdva JZ//9/aPn/yadEin+s7a29e062+9tz3uqCO9AMAyFgX33XF1+18f/Le2eZcu7ury6sY1t7T3vOdD 7bHvfXM793Gnt4uuuVS/Zzy/zbl/U1uittyjJ7Z37bin/d0HPtr23X2WLlHWzBu++lu+Eife+kc/ r1Rt7LIWsAt3b20XX/jp9olPX6Yn/qMvrdF9sjfqhdyP0H1cLFT4XVyfXZYQ9/jtUv/+wWc8pR2p Vxj9z7/8cLt+jV5Sqxju27OrXfAP/9h+6EmPb097zrntf3/04ugz+3bqKfa/ad+49s62RONnOtE2 nrWx07ZG28PnBUinK6Oxu1AHS/t0xO42hWmUWEjP1ZPzOF1nb6n2Qp8MdOsgL7r3SamHeqESr4rT Ix/1gsbngEnvIH3Pv7ylfUivY1q+cKkxaY2S70amHmz2GBgbr3ai6IW1bYtZoBZJ6Eamxg7ljk8h k+uzsctFaIxf0lg+RfbDhadw0FEy5GusIlt12FgynidSvuybSZ66qi872PZ5g3YRjvloJJwZxyuF CgM55krdahJP2IUEBst5CdMg3MsADlfqS9BhEbDYRKQ+NPm6t0g2QtuxdjuUQaaGQRZ4ESAQvDM0 jxBVjz1uYuVrZV+B8RY71UjWl8GJLiFRy6ctqhs3Arq5nu9H28EoPfYDvzWsZBD2gc0dGF5wEU2V +1oMnugjKNRnSHWmzH7hU/Epa06VMbFiGlQIA4ZlxAep0IFiIHJFbu1NF7af+Yufa+tmL4mJIEVp jxOPPKe946Xvaeec/PT2mz/yivbyj72j7dNTRpUGvFJYlNTlhURxywZV5+0HnVhtUYTypbZYHjyB XfE0vxyoRbp5xFJtTL0liDV5ttEAFi29pruNzNTr0BN/yMqKkSx9nT5Dm6OEWHpiE6NpQokJJeJC 25OCP3qX7wURmSY1PqzqR7QN4wWa+yVk9y8iQV+Grr6onM/tiOD+I4HYggdXJPygH0Grs41URxzh GXhTRJuweyiL0tmwjXp5IyL3/rDIAZ8bvn2v2vYdxj/r0ae0Hdt2tmuuudWY1HH3N0f5N96wpt2s y5+Vtm3XfS/CQE8sMpRxu4TiGAs5lmVzXOrIOBWI5UXjz4GNOFFNXH3jMnBSQpuAVp7WThDZionn bswAQD6SvCgEK+nVHx3fnEdqMoUGbmAqYshgiBP9WrAAKfFACj7BbUzlQpbamDsjJw787DhRttli 6HSwFGfMjlcDiA94GCXPeSZwQrtIMstz2qDEfPBan9rN2NI7Twv3RdrRb7tvW1u0ZH5bdeRB+o25 Je2Vr/tFqeRMS/gyd9FK+TC7HXnIoe3kVVrQ7N3WvvXt69psXh8hXJ66nq33Ur77t/+n7ZynxcWF H/94++rnV7bHn3de+4GTj27Lly1vq3iR9sP0k3TX3mjrLKtfCLnx8m+0DbpJjIciGPc8Gb5xza3t u3dub8frrOAcHZhefNGX2lN+5fntXe99h15YfUW7+upr2ze/eXV7159/2wvAuZpDhig4OtbBAUeN t3iKzz3EdfPnz24XfOQf2iWHH9HOft757bQTV7Vly5frsu1x7bRTDtO9eFcNQJaILx2atOOPPLRt W39nu/b6u3VPoRZkspv7C+/fuqldde31+iWUY9uRS3UJU223e/MGXTq+y4suhWsqZT/Kjlj9aOgW EqALiA38tvOe9sb/dV771J136AXssUgzYALT/twAokcnyPAfyf2T9jRc0sK9mMPCML6ZkyqWX/z8 u9qHrv2qFga16FSNOuOiBSva+U94ZXua7vl71flvb1+88cr27U336knTim/gdf1CxBjGDt1Xr7VQ HxvOasNXLxeI/X2YWN/uuzLeY0qylMcJH6BwFQSs4hvzHChfY60wbTP4qWMmrOItzFp7TNOpp268 5ggeW2kVtAm00mM/gjjM15Sd2IbvY130j7xsivMBCKPfT6XJ3WI0jiengCoAOg2NGkMFWSRTiegs jswLSCbKfCp4RU/ldhjHScXbeR4gYz3Uj3QVe69LQrG4I0XUXDPBV0yqgR6T84ioYI0vYZSu2o44 PfESq55wj2CPFhU2nPKYDx4+06loAmXQ7lG8eC7Mifgqf8Utn2p/+qn/3Z74qre1R598dlulo8Q7 1J7xSwfiLIyOPdZTemkrWNlZRbsiltkuSabqB2JMGlEGO9q96vfn3x9jrLf42U4PGqN3+2KwI1s7 4tqWLDYUnhcbGYuilY0TW+E7AoRGfxEN8kNya0AY4YWUhTxWuMzIzgVd2Mj8GgseyRUoWfRZZ8ha 0agerciTyu7CLFnji6fqKQPBzpJF5XEnHKH3f21umzdva6tWrdTZtePaF794hc9y3H3XBm25hDFb Z9J2t8t0kzg4lCNhX2a1MbYI3aahynKOg/srzIOgc5YLATyKk4Sqgc4ErWx4OgIdZX1WURzdhgxW 2VL0ioNF04TigVb1tX1ApSP9Q1a2srOlXZjDMFyfVNXZOr4o1g+PRIKOH6qQPGEq3uk4QK869x/x swN+oMSN/IsOObEds3x2u/CW9TqbhH7OmB7cTjrheL1TsdpWdN0cf9nXv9lu00MlC07V717u2tm2 bdoxan/ZpgDt0s+TaVrxU8Onn/OU9sbXvrQdvXyOLqnf3TZt2tRuuEb3Ps5a2I7S05iVCMvWzXqg xY4WVS4LcYdevsx4XaDXC33unz7aNq69tZ33rCe3M/VTeWc/7Vz9ovPO9qlPfKL9xQc+qbN2gywy WukmYVYsclDEJxuSluCn6x719Ge0N/zKS9pRy1rYuXGT3oEnO2cvait5alQSLN0rvmAYRvRd+gWV bTtp56Ft5mgvukm3pXDjB68s4naBrVu36J636LugTaa0i76tz1QYxCq6iD6YtUtxoMVDI3Pdrwot ccUb9lW56tmiQxZUaLRl/nFIUjFV9K9iuf32L7ePfE3vedN7JyvR1nvVVz729QvbB//bp9q5J5zV XnTaE9rlX/qEfou63miQ3Ak0K1+DVBjlJ3GtfXzVTW9rzp6m9zaxjlDUx1A1koTgK97aTmNRrrlh uu6BZIr3gXjcH4sxtzXXIHcgWVqw2qF4Rq5OIbIgdq3EtC3/6egVQDuoclyKCGho/q0uwcFLD7Sy qO5BoS4WdzxmnJ1LMuo+xsMa9Rv2YGQtV46jw7rTWfLYyGTFYorOPQ4E+TjKD5y4pCVcDTREe1Ie /ezAGCT9qEN0rPC+RRlEXDZP5D3JGks1NjxRObwg1fxXdS6jzUJm8RcGwVN+kx8tkM0+JYKcj5jG dCDE7DYwg9H1Ruy5+hHzq5teyq9fJ1ih9/pogOlGVJ+yg6XbF3bX2Sna2LoxWQlc4oO5EevYUuf2 IKNU+drSRm4nKt1eYTQY44Fr7elP7axoE+tD7wgbqPHCrducJpfu6T4BXsRHjPxjm3FBlC4bEX0B Cv0VHlKf9FxAPJBcFIttED5nKUomPYXFfuA/ibMA8GCNw6u8ZdJ/8hEb6Las62dMcL4QY6kbdEnY /gVNP/1pnbymgIUWZ9S4jMlYOPVhx/hp0KuvvsU72xNPOsr3H23Zsk0vxt3ctupeNU/ssnXNnffY ZtuNnWSwE7v40ECZqPMTYNrWMKCKLmY/iI/7uQUdQfcz8fgsHD4pH9+xEwEHEV0dc4rYRLt4pxZU f0d7KStltAe8nquMOthqizHBUvFVcxwy+BRxhSPssANAp3XY6SSWOhPth65Ubwnp99nWPBtQ7GzB r7ltTHdezkZIE0dotikE0y4KsiSNqDZAL3/EITjgCn3OmKqF1q5Z7dxnP0Uvgt7brr7hVi2q1Gs1 T9xx+SXtV9/xkTZb7260Tu3c5yxc0o4/emVbfdtt7YwTntTm6EW3hx6zsu3VT7zxRDFp195Z7anP fUE7/ci97cP/dGl7yStf2lbsXN3+++ve1666+W73pc07Z7U3/t4Z+kWUkMEu1g5Hnay+KEe4okM/ vV/3cy2av6gdd+SStvEaFkLz2sNPf1i7+zuXt9/TE6Y8PbvquGPbeS98QfvxF/9Mu0lnuj50wVWO NXEgdtF2jJJ57fAVK3QCQjFUXN31pIe+Nu+gle1lv/jz+jWUm9qvvvl97brb1M9F37RzbnvLH53V jjgIO2WlA6hsT/xSwd62dOnB7XDxbNiotmQ9KsV7tTg95dhj5cM2vUZDdMliBcvp0l0w2Bh2IivG aHQVUDhK+BPN2Ym2rBrf1GTotCkBMCFNk3u5MmM7NO50xm2JFm7z9K636bRl67Xt89+9pJ17wo/r t1BP1XJ1nAovabkPKd+6maqucVcSbIfxl3kR3R+BM6PasxqG8hjQxRjDsNc+3X1D7vWYUzlK3jcI y02RdOvMdql8jTVYoBVenNQxtdOKp2RqGweZYXY1e8fJ5rdb9jVsKqzoHuFfslIV/cuLGIxiIkVY 6N1IgpQSpay2pquOHbUXNt2xcJBJxQNIk1m/oRbLJWM1WJDYZEk4W/hsKRfNCy7xCD10Zr0FoatM YlsLCHbVlKsOfdhUOwHeot95kdcn7hMKmcBi9wxO6rBNslV7GT7dGzos+9iksDfTcJb98GSi0k4j K9/Y4VDuQiO+xAPTn3EvEz+hDKwUNl9MWDt38gsMrS1auqLNW7BU8OIpnBn02wbVB6ZQxV5Wu33H MUwTJ+I6pkmSHTqDaJx6G4hoWbb56XwjvUUrPQx68jUgqn6mbenCL9svptIZsY6jW0JKu2Krd67R yBOQXX/GoLDpj8gwSRcNQXS6XPxicB9O1Gwt8+nLiX5grNjPJWfW2WDyMRbIgQ8/Oz8g+LAgW6F7 kLgX7eAVS9s5Tz7TP4lEm/Kqju06i8b7rLgx+EtfvNK/ZjBXl7F26gzKxg16Ma5QjJfY6PAn8SNu obvXwZP1Ay0I+Mm4nxxPImYaY4MRi0DlhIksW1KNf/ihgVm6XG8uqjLuWWZTNGyY6fLMiHWiX3kB iD4wFMCIsmxhzHqQpC3BQtM4DqpEAsX+lH62pAP1XcYnf3Qmz5Wl24ss9TH7rOqR78ZMPdYnfF4w u1OvauGXOVi471Ce14E8+fxnt5c+//FtzVVfbV+98va2V5e7v3P1be1hT32yFmh6Ylj3K9IvtunS +ZN/7CfaX77vd9uTTjuiXfeNa9rWfXPbM55+tn5eT7haaO3aubMtXnGYFkI/2578iKM5BdAOXbmk fefLX25f00+Z8ZoPdB993Cl6bcgq28IZOhL2Ha9XGD3xEavadtnAAwfbpfOx557bjtfveH79ihs0 aR3UXvf232pv+7WfaHP37VL/3Nm+e9WV7cMfukBPj0rXQQepPfa0jVz+Fe/Bi3XWTv7ukq/LVx3V fvDRD2/79OCAY51xRPfChfN0j97CdvUXv9C+cdWt8nefdO/SZdOT9dqQI9JOLnmprfgoERPdcNa+ ceV1be6yI9ozztVvLsteriwxbladfFo7Rw9q3HzVVW3ddj0kEWLDmMj2AgtTvA9LHvcTz8lqd/Wr +LgrwT4k9SmecqTv9Tmc/Y4/Yqt53dsRXex0KX/YCIfuGTjFB8GV+sqtedBXPOTjTM9t6+J3hZcs O1T+aLKasEnyJWNMfI4xOe7/2DHRdyVWfJhAnn6OsbJAMRWG/1QQLrTCU6bnCwN+O5p14zFH3gfJ 2tZBJ4glK2gnyiWHKUDW2MuAFae3wRtOk69P4dY27m0e9EEn9TlSeVMSI+rQGDErHLZzM8YREPU8 GhbhUo5woMWGBvPTa67QFwCkNAICQfFElIIo4h4bOq6NKJmQ7LLoJPDF28+uFZ+2FrWuwRnkSOM6 W1sjyRV86aO9NTa4gRESVslTVMF1+Fl0dx4FBT/GUP1Mn+1R/dgOoMU9S4PcZ8wMrq8crLM4MqzA UifgfrSVpmILbYGIk+luWhc5M61ZDMNcLv3q+m3Ltq3tPt3oO0v3lbBA9elzeJ3sxaR+0fvRu6qt Sl/eUVYcxUMMDpQ84KhETn9glE3kScgPGMIy3NCWDkIxh8h+34i4LTLeYEzEUvXVl7qw9YY6XCBG deQEr22Cju3axoI7DYEGpj0qRPwgr6Nv9+0I7uAbVQGGbcZE3jLIJc2rR8qhCxE+OXf5rFkg63yE 2vLgFcv8VCc/yH7yKavaIVqsfVOXNUlHHHmId5wbN2xpW3Q5lCc/2TmyIFu9el3iYkB4Ew8qMFGG UcQjTI5y+YJl4WvZHP0SnUMuSnxXQr7GGTF2nKlUPrClh4CjwGTodGnNASIi6yp9lf4hfiEzfIOl Ep9M7gMKZOmlCrxUZy7scH0oyNoEimDYXnBpRxJNRha5AmOxxx8k/+QeSopH2L5/OP22HNVdJ+0d dlJX9oFXOzGAbWvA6jtS8bqkWK7Uk5OveOXP6KylLgFq3C/Ub1Aef8rJ7XH6zeBNq29s7/zTf2gb dKP+glm62f5fLmhPP/u17X+8/Y3tr/76E+3a2za1xz7lye2lP/2MdvM3tcC5em3bsPee9q8XXt1+ 6tkvar8huY/+q372bekR7adf9uJ24rLt7Y8/+u+6RLqz3bH63nb2c57XXnzThnb5jXe1k08/s/3k i85vJ66Y1zZuWdFOO/7wdvNmtaouyc5acHB74++8oa18/0fb169d0x6vS6I//3PntzXXXdb+Q0+l 7tza2qVf/nZ7hV7D8YZXb27/9NnL2pwlK9uLX/4zbdG+He2GO/W7wrp374rLr27tJ85pv/JrL2/v /9sL2v2LD20v+YWfaQ/TKzo2rclGUgzp/zxotFUvh75t9cb2+Oe/sP3E7VvbFTpD+LAzz2ovftFz 27HL57b1Sw5ppx5zqH7b+G5JcSF3fjv1uOPb6Wfsbjd9+aL22W89pb3ol35Ji8sV7dOXXNUOPe7U 9vOv/Kl2+P33tHd/5NNtpzqGf9lC+iTsjlJns6tv0LhxL56qWfiYkW8EInk/0Cf95NNlS+akmrNy QKgcPYC+UYsRelDHG3UQz23ot66o8Le/Uj+dW2X2be7nZRNSIvATgqSFOgsZ9lCq8UzOYMaIbJZh yzTu95Aou29XH0+fqq77akJAO6sxV7u0ki8Z4uImgJCp9JY+e6w4T1oYvozxPCOJuWhlXuFRpo+R rHe0dohyGqBNDfnCooa82wSblUem70sp00/QzyYB2M51A0GAyUjmc35gpCISO2PfNNx36JJK0N6x MELswNIH7YCc82JMNRXwhLQ8L0e0Pu0I6xIrZeOAwaJSA5AbhEnjxZUJ+ho6G77oT3aMEwEBz0cH quIgwZ3NxOD0DaSqs3zq4lS/ozIJB5NT6Qmvg8Y3OyCOWCbMQAZDB2MdI9+UPMJHbuDJCg/2MZOV iC1opR8fdmzd3O7jZal6/9IRetv6tyVbsauzCJJ2snvK1U4T3W4LtYnjQHvK5OoPHLmwwycuQY+F EG0io/1hgW9+FZlUHAvh9E6J5h73aGfjWldWAD6VwESDt2m4pcWKPHTrHcuBWb6I7rEwhpaMocRn bPF4QSOiy6JXRZ29gRRJQDyAoULcMSPWrMSOOgBREJyXcTCYxwepQCtWFRee7uQ3X7ds1jkGXZd4 5KNObht1b9qtN69tSw5e1M569Mnt0kuu9nvUNm3aqrMsOr3Kjl/6v6EdH7qZSHgtAq/qCNwwFp9C fZSjvcILTI7YRZnviCMxkc0WhBq9rPoQSNWVy28xBxYYGQvzSL/riiYs5Ktt0Oe5QUTwXZc0sM0N xCiFjUGwLTPUOQZ16gc/plLFPshTMUpf8HvwbwAo3x074oTVOqPj8VF+eqBoAZGTOnaSkB0wpVd/ +82NkqWfGJqN20FtUCBggKVF0d13rNb70A5tz3rO00UhCVE2bL1vQ/vY3/5du+AzF7db79qig4C4 4HWTfj7vrb/7/vbLr3xhe+2bf82L5ft1Zuzar3+uves9H2mbdMZuvn47+YN//r42a+dL2nPOfU47 +1k/itHtvg3r2vve+e722ctva/Pk79+8+z3toNf+QnvVr71WNuq3m3fsaN/+4kXt4ksWthedd3Z7 9S+c1379zz7phxQu//S/t/XLVrVXvPbV7Zd4GEa2f/dbX25/9ucfbndt3aefg9rXPv7+D7YV81/W nvm8F7anPf/HfKZru176+/53vU+v87i1LdJTr7d+80vtvX93YnvpC85pf/oXP+SzZHdcd3X7yP+9 pZ113HzH936dOVt759p2zya98W3b5vaBd7+3Hfyal7dffuPrFB/u29vRvnnRf7SLL13WXvjMJ7RX v/zZ7b+9/UN6gOK77bIb724veMUr2w8/++b2lte/rf3p7/1Z2/6qn23P/Kmfauf/nPeCbd0dN7V3 vO1v26V6tciCBXMVl3t1L50eZKDNlGhTUhzo0x7RlPGO0Gg85mvmR/Ppy3O/SxS4iLxQT90ubQu1 IK9mh+7EmNbf/To7uEtPguaU6OHqetiSFRGw2ZfWQZX7EUKFBzP7Cm2wudvlcTirrb1nnWH5ya4F ktstFzzvpbxEIk11ZKrpuoy1oc8XM+rVp8VQdcybtlE07ztkV4z1iCeS6Iq4UtC8l9gdK1lDDolK MZb9pgbHr+ixRV7/qS+2QQvvpvHqLQHRsmBg64BZdpdv5kCBkusU7JjtIg6uoI3wx3UgwzHMQcj5 aVN2egDDzE23dbRgkFJAwfpGSovBzlZw1eAodENgnF0pzolt8NikLkOD4TdaqPfEysQ7CgYg40DA R6rtuM4V+opYpe0JZinJTvCnfsuVzpwpQxqw+NDBIgVj7ELd903GF4VC2ua0xbr/c+GChRq8jB54 SjawoNVvX/JSRgRhYVz1caDybF3C4LnRRfPFIyyiV8Hp+nmEYdcd7S69ubzpHUrPOu2J7TOaZOJG DTCRGaUqZhynq+HEQ+JbbcuOn04bImqzkoVZhrMbGrsIeTqVTMQ/+59lkzMxq32CH11WYZvGO0Dq C7N00Qa4514GtjHxY1gwFX7JlD286gK5em1A1bM1zJig/BiHPAcb7gN0AqWybckyvW5BN6jdp8s+ S5bqtxfPOLFdc9UtKm9vq44+rB111Ip2ySXXYLQud+7QQm2P71Oj/mJd7uRdWTw5y2+AcpZ6ji59 jpPtUIxiJKnZZUecZbMVE7bTRkPcws7Cgh714VvFLlHMFhKTciU/3mILBxnMLeSJn/tQMvXY5Wqo EOl3B0phX3EO8XXsRw3ksnQ6oDOATePAEr6S8b8z0Myr0rjfqWh02sta9BU2UOGCy1hatjH+44C0 S6udFCP6CjhpP3w9zzwt9snWFi9PIe7a0f7wzb9t/dhgRmWYPyjwcMEsPSXKfZDYQOLXBa7WGaXX Xf61dsLxevJy0by2+Z717Radedqr8c2Da9wXd/+Oe9v7/+Rd7V8+clRbpb65b7fOYOk1IPdu3KYd CK+qmNXuuPbq9qbX/2Y78aRj2lL9UsO6NXe2O9du1BiY1z5/wWfaTs1Fe3gyXvxb79KC5/ff7zOC Rxy6rG3ZsL7drKczdyuo/OYq9u3dtq699w/f2f7p76XzsIPaLl1JuG31XW2Dzij76WfZz11z//w3 f92+/OkL2jGrDhXPlnbLzXe0bTqeAYdfYpitg9jffu2bPJ8uWLKk3Xb1le1Nv/o/9FTrUW2Jzt7d fedqvUdO7yPUK0z+498uaLvv26xXLC1o2zeubW9789vbibr3b7sWZHfsmN32bl3d/vwdf9w+uupI vY5Jv7CgU4S33bZGB8l7bdM+6fvyP32sXfoJTlQodm5DtXOE2zHvX9BoHG2jVd1qUW269hoat23R Ye23XvH37fWaA2oug6m4gWE8rV/79fbaD7y2rVPv0FXsYbzrqi/zGMkHXKU3AaxbtDlq5+DJeVs2 sAC1jCq8vxJt55bVTeFtq1ae1I7TPuh6/fRYuBmA6jJOnm/Ul2vMBFXuZjCqT0MvWvF4HSKbDCXw hAw9ZiqKhYMivsLp2MlW9MKvLXO7F7LE+QAJrJnkSwd15GO/uL8vwFIXB84zY41VH0jf2IbSrRtg tBOTtEyghTwpqZfQp0QJ7+vo2UrS0QJjXVNg5Yh8iUYzrgxnKz46gs8SVVCZqJTQw8LDIURYSbtM b9nJYoZ1JIbrC2M0MsyrSnjLJoPkV2CgM/VqghJj1kYjjODyKMnK9TNUjhCmhLTMqlU/t6eS4lKb 6GUbCwT9yPi2zd9pb/nrX24Ldt3V7tLZMA8T+2Ixd465muS+c/O/tjf89Zq2ft11bZ9uGiXuxCTQ dc+BeG5ffVl77V+9uu3edHO7T7cfO2Z5qDboV2dqm9q7PvKadqHesXTP+tt15KZJOONdZ48sa7sj HukFFP95aztpH3FnnjjG4hM5Yl2+RwzVU80Lnd5Fv3DfcN+hA0uT6hy/UN3bC9uS5MvNPiuTfY6w 0t+iJZRBLzQUeYsdzmazJpbrGUBhC8XhLGHIYh/1TJBQwGFiM1yNBxH5kWfo3vmqkkFJqr4FDr/Z yb1n996zxb8scPQxh7XDjzy4XfGtm0Buj3zkSe1eveTzGj08wJjbpfuDUOrLm7eva3evuVexoQ33 tRuuXx026WwaNu3SE3lD0tFmLtx6jO2r2ivtQoY69GJj+InNkYcenwE1crRZ+GV5cEWIyTx8ho8I x04KVyJ+IJLgCt0uuk1oX7ph7djgMhq6ECTWIRhC+mYn0ttY5Ql++0TPFY42zC/2034BQf8UJp0t /l0Od1CIjSFPvvRgd+W9g6OS5FjagijnN0i2W9uSC3SV6b+Ssxb557GDT4wppxgfUR9jh54XqgZd xsVwpY6tHPME7cADl67OStxyf5bIfD2Q0GUSg3jP1j2Q+3T26UY9BOD5Qf2Mnb1OJgcYRkDT/n/9 3WvaXWtWm+7fAtVCEC/A5YW1euGfcG5wv+WFzKap7q671sln/SzVwXovmNIsjQ+67epbb2133KL2 UZ6xV8cg+Mkib7Zk1t1xZ1tzu373VvbAs0C/uxoRIAb8vupsjaW727q1dznujD1OLMbONGMoA6s9 eY/b3t3b2vX2V7OT9MwhNpqr164RhnSwaOLgaPvGe9tV9+pl1Crzm6rEihZbv3atF334Dj3OZGY/ czvTetSSoLOFoqSg+yCm05RxVdTTB0i7du9oN91xbZu3YrF+vUIPjGSbRe3+37u38c41YfgSDuDg 0Yd1RvbeW/Xk8OFt0/ZtvcelUm8Y0+vX3yGem9t6LYBlse3E19xlWOFsXQpYt+ny9uUbvttOWrK0 nXHMw9t3rr9C7+qb575tpv4V/lCkPcefzpIZ92vlx3NFWE/7xTgMngGzMDzmHELV6d96ptjG+BPz l7Dj0u9YB3YETulgS98jlY2FaaWuJ+Z8BtnirbnYlVlveYKLDe7cGkcodrsxM9gp+1Ny463jct6z XmJXMY5VKE94sQhyELLD9Hu2wEtaGYa5KOL0tIT2U1Y48PuDcbXDq55qq2yGcoHhdxxFLEyDhaIn eG25zFqYFcgqM/AqQRunwAga74ghMXnDF7YGzTHMOMCzW4+J79LR7TY9Br7u1KvbnmVbZUsZWNvS leUq6ghxux63J3aL9BRP2RsNhQH6qG6vXn65U3poi4U87VPyHZ4YCks8TDJgpbC2pEEAkZ2aAHYJ c64umy5kcq1YZBt2/i6mmCrAc7bOb4fc+AgdQa/UpYAFmgz1Uk9mWDQQJ8U+fpjZpIGe7U8bod8L HOtCAfGNM0ClHj52Lj4LRpupHTgvIy+z80abDJcgDGrwCglxoxuN27naMtyNRVnQxKjEmCl56DG4 wg5sYrLG9j26nFN9CZ8X6TdjWDxxH9nyQ5a0ZcsW616y9bjWHv2YU9vGjVva9d9d3ZYftLg98UmP aF//2nV+EODwww/2AwQ36lcIaIPFi/TMnw6aOINGW+/R2OFVDZ40a+yJzhiIWLFwmxgs4Yi+8bHi WRMMlRWP2sJDHv6xvyUT9+3F2BvLxCI3ZImNAWghgJw00chW0kBzcfIL/Rl04l+LN2ScL/cY14lV 42QaFxhDibF8Rwg5J5njBVIWOk9Wg1fxgIQrMfYn/U9290/yZU/R2dp++V82BnY6OmbMfPERs8qP 2cY6DlQ/oUP9heh7UdwjEHMjuL6kJWcnFqCpsA4+sxhxnzCdiE4QkpU4VR+gXnxqv1goSleKjO3n tzkXHHRo+4sPvavd/S8faL+hX2WYpUUTC4Jqi/LLMaBfSDcWVL9h4E5b4/3RNNFWju1LsyU97gu1 aI95SfcH5xxX3LEtmRg7VRc42l9ikwuDEZTH2MRnn+YM5rnd+imrHdu3t42Lb2tbTrq1nwDAz8mk cTWyp/pFxXTsB3LQffKiVwyI+AUWNpkHgeSLCGOheBh7slHWEim4eh8t/SzCabMY8zpgULvCyRhy Stx9uiF7wfqD26F3nt4Wa6E3R/sQ3g9YOMm93yZiF223P28oCZ5BHb6jH5tst3wgxcJuaBfmBPp8 UdiCRX8d5guLTnxVv6wxW2WYhnmZfkK7R38YbyfARoUaf7Y2Y5/h07gd5lTvH3OOHYnzxHYoNVFO lENjpmpoaNSPE0b6fjXvfMPwCgSGxPveCJICy4SlxibQ1KGbRGeBRqqdedwHE3xVRz28JUc57HeF bat9AHUk6rFxIqXegUYMKOkrWaM4xKbrhBH74evKSshSHWPIsNDS6zpKL3svp+QnL5KOVdtivzdH dGMnX5+9ZI/O2y3Oe1aYzCLltvBVhDJfv3vKxwnequ9yI/0wKU5mgVVFT8bOlSeBATYcca1fnMRX ghVrrISHtupJPnjgq5MGuvCVq47ZB4GqLT8SLQzwvbxDFzqktyYs6vRvU4KfcjQQCxOtjSxD3jns kAD3l/FOMyatpbqEuVj3nN17D09e6oevzzypbdZ9Zbfftq4tV93jn3Ra+8alWpBtvK8dtHxJO2LV IXqtxr32a63Olu3QpSnOnu3QE2yXXHyVFvt6j5bK9+ietfXrNqv/o1L3I6o+bGAxq8mQcRFGexFH 24dfQSQ2+IZMTQrlKOOEVLGY5kPfZCpNMdlVHXbXOBnLWLcjJ06wqq1Fc4JEVvTqplmsavtMHb0C cdrdeWNgT7QdAoN1QEap1FLLPBL0bG/Tom95jpEe+tkYs2IMPgYM9pETpzb0ddTRZ0svtKgfxV0E 6itGbHu526u5TqKFAwY2wBs7vcm6sQ7ylUpH4VSZemjWq3x4W1Lhj/3HH2xVlT3pXxllbKw6ZTz3 mgcs8HsBQveZPK6GuxkL74kUC0QSNGIANwdEGmfb72vv/6P3tj133eyzcn4vnvXAQWxCGFyy1oF3 vJeFKj5KoVeZLJs4w5d6SKdiEobRR5wTyFDPgsSDU9jBCTj2I1PKwyZ6SKVA8LeYmUNSSAzRB6J1 VOK0os5v8GPrtKP/cA0of6Wt3rEEfv0YPaXyZNAdPPXter6KobZpl34zomOUDNvuruqZGgNHvnSm 0OzL+aLF+NP7Rf2LD1kHb2S7/riHG6I8lQ2czS2/rVS0kqmYU1/5GHuToG6xJCFOisUzdmkOyDGG 9cZSfSGwjZZHKpLcdQBYr9g262ec1hxjhqyDdYhKIPANctCdI6tM+VJbc6bR4Pijsv9yvoJnsDhK jAl+v7ZS2QBuXMFL42Gga8Ygsl+WqTGMcf0Sqoy0YQIp59Utza8Kn52h0G/mE80usoJ0ECiL4n/l kAELIfa0Sp5MskFM4Ase7HU29RlJZ4xUhwx6rAv+TGBXmqmuGqxWwxWkkgGx45LB0ApMaStg+6f6 rjIzVT+AZq4qSmC6XGxJH/kSNUkvsf+UfoHINyDcwVCgDhTeBz3aLzT79TJkZbrbTlmO3TCxYgrO Cr26gjNWW+/TW/xdD4Og6Q/alunkIvZRXzH0IOVajvjJM1BZcNDnPGhlI3pp/wV6KfEu3bDP4/VL dX8ZPy9z77pNPlN6+uknevG1Wpcnl69Y0h77uIe3y756bdu0YWs77NCD2lF6n9VXL/2OZHUVKI+W mde369LmFZff5FcvoPcOyXPWrSaMO/1uNPntGV5nandweZN+GjbpdhjZJ/uV4jvixYGPadmmjkN0 f/MRi4gj8SSf/GIkRxeMeGrrdjfVmFFGLmQg1uLBDA/yFbo1LrNxfLknmku6AzPO6ChYIx0+Tsg4 dM0i2g77I8VgApw708GUUBZzkKLnia3gMzAWRxb0nA+8AI5eStTLT3wgH76gReWyvWwGKuHch0X3 ETqmSMU4fhXTig2I1IclOffIZmwYJ/OUPjsf4NDBGuON5ciP9VcZ/vIRWqIZB6NRZXWOuynuq3VW GfNinGJ72AoGCexABGOIuSv9RVuSYSFS/PLDtGgDMIEJvpTcu7tdetEXJKb75DSWWewUfu1zsBTd 7kNqlAkMdAHF1tjwzpTM5bkAAcfXnRibaOGQ8wJBQNga5/y1lcHVJqlN/Nk+cnB6/0I3t68YzFyW KeLi3hQUEWKsJoMLGIctfMLmDGIvgx0p6qfL5Yt5zJI4JUeglAY5F6Vuik/6Q5O+Z8JJsaizx6LA mPYVXDDYDWqy1gsnmsDtrFiwD+fETlzZgCtirEwkeEs4UTz/qJb2qXl3PAYQ9Fgh1hTsYxjm8R0M fFt/KWA+iD6f8ulDjLtxnwGrGxW6REENVPuXZUbBMO8MMqp2ch8jpyrPRwIB3WeStbV/qozxkT7I L1LZ2nsbBADj9Co7xxAw9wxf4Zh0S8YfK4q8GyjxZhCdQYZJYH8HkS166RnTxtjFB60sLycPAD0W 3y8/xnMekLGJKGFsjj/QSjmIHqASKjox5VP0KhdG8dV2mg4mabr+gHzo/v+hP7T4u2JX8a+dqsse khijlJviI1ic5VqkS4Rn6YnJR+opSc5MwQYGbcMbz9XA/qiYKTosC7A5un8FetxDxqn3WLgddsTB 7Tj9jI7bV1j8OPpROgt2v/CWLV/cnvRDZ+gVCXFp8vDDDvYrNazHGlCkvi45ntS87trbfYZsnu6l ufOO9e2yr+UTm6q/QZdA167d4D7IgwHr9cb53TpLN/YxOgWLhXglQbSNdMgtUsRLGhkPENLP6Jsa 4No5eidCndI4DpTRZVkLJ2jSmXwGCtxDYuJAtlLZPKZVXW2rLnhDdyAM3zGZDLgl6y0+SmepZVuY GBp1B5AtIMvHPAKpy1f9FK0wS+eBZCwupnGsC3Isa3l9ld5qjyqXvpKd3h6ovuSn+SlPt9VMPNO0 A+E9EJ262EUEGi2Bf+xISZYdtRPl6dh0PjUodfp2TAe9g8z+snoggdswdEc9/OE3eq3eX/T1ob9X O0AbeKx1LJRVYW+MRfIWSWzrm5IZ1OIFf6Q8m5+YtUE+GYo0uR3psW4ZzLY+k8wqMWd74cb2wT9x b5aUdF7yfESY+EzTp8vJb2eoe3Dd8Hzf+gVrOTbIU3aKHkg4a/FsBtU5xrXNtipayMZ39A8B/CfS TPNAwIFLuw3gYUPQS3e0KzzRxtU56NMP2E8ksd94L2XaBi5b5m9iN4pc5U3nvXviIJxxBE2U2VmE 8WG0bJlhIRf9jg4qY1RvDO1MnKTE94NZTjVW2teJYkla8kd9yKLLem1X2EE9Hzjy7DxehSrQ2FFp Gz6Y7K8IBKz55I5xVE4zlTNuQnWZQij/wUWb8agkTPr0s5AEwfSwKQr6LuCuL2sqntP04q/W7+VC LIHUU+oeQv2G1BedeyZYaHz8ShXiosMNWqZMwVLixMtfeWnsKaeu8j1gV15xs86+Lde7lnb47Bv3 ha06amW7Sb+TyVmyU/TOsgV6iebVeuqSRdrjnvDwdvONa/U01916AegyL/6+oicwefnn0iULhblE Z7/WW/+WLdu9MGRBtnXrznaVdO3SSzvBuV08fKrtWKz5jIPq9urM2lqdPfMN2rzuw4vguIeISGer y7sYExp1SdUZAzqR2idOaOM9MYgdB5LeIQaL6hQvyfrMW7Zp9C0t3iSKWon25L7u4AeR7PiMgcuj sVaC6Bh3mdAR7VE8MdaqNLmFP8YaFtH+UfYavRsog7En7SU28s5AHg8WJRZAKKaRU39ijIZQ+QeP /cIh2y5KxUe8RvVPGQhULMTXZ90DBmlWHsmnknDK54BRC+pMCzRUIAaPbVPe8v4WLTFnVwBV5tU6 2DxegPdq86veeBkn0QZs3E+6dAz54KAcs1bwVH08fBA4Na9hadWTrzYUBNbJUOIz+BB9JW1xn4WP MwEOl29zAYcxbFx8tWOyLR1kQ904hd6QocrtKEZixL3S45QwwbPf2Tt2TOCEBDiDT6WTOEXsrQd+ SNbnKgtDqlSL0CoTgTxxq3EauHTPGNdcxRQNXChljOrJ4k7UJBoOUWGFg9ZApRz+FEwdoKa09xU+ m4vOAGn7eMKktARQr0uWXu5tUYFNRWWJYyPuCBKZTJ2/CKmo9kFT5LLtP60/Au39iBdKmq+Isa4c K9Fnctao9pQj7ovqpH3uFD/+0V6uq0EqGu5Xv1BxlI/+yNjCxQqrpxHkAhCRidTjm9Sa332rF3bI ztIXtlAeQWAPRvGR4uLB+sAuSwaZ0mmYqfmP6Z3+Ryo9/cyjaNT7smkcTRNtiAiUUFhXSsxQX2ko p74tg3NZ52lJEJRjhzLlaGHMsCVYaA+sSf0ElAmI2tJFKS6bTc0eomN3mhkRkNCAjWTwxJYJRbnp Ti2SgwcWf2zBqYiCkTLeOatcltSOCzlSWR0LHxOCniPPHQZy3qtV5cKpHcsw0WR8Hkr9ssX+yeRx u5NPbd6Zhc/4xaDkO0Os2ZLXEXC2jd/PpG04W7VRlyUf/vBj2w03rPYLZDmbtlRnyeooZJt+CJ23 t9MXGSTXX7far86Ab4teSfDVL8fCjSe7br31LrcJskT1+uvvsE2cgmdBdpfOltVPRHEG2YNOnKSx T5RZ4EUD0/6TvNRHXTiIj3ha7emigkK72n8TDvw15nE/KiQHFt1CRpVvCE7VgosFSN2HEVaUFsYL Ng6TS/W+4th/O44BciTbg3K8Eal4Cjd4BjrlSh2jCKNtwAdm52MM8RFfnemnrnSGODGVL2KyPcqE pSNwZZFh/qEOPMqhh8VKLGYpzzQPlT7jToMLDNvov6U4fEEHNpSeMLCwbCzVSuVvlOK7+FwnnbSt x0+Adlb7McKAv2TZRl+FIRan+5lvs2yo5ZyDKUihxzxqmxHReq0rYhmMgR56y2/iE7EnRvt0Zpp5 qWwsBbjFp2IHvRbDwTPzd9nBmODFt57jYQVM9gbmYLl1d6i0V/1nWDcOPnS29Hu6nexDsJuDCJFs k+YT79DjkMu0wkuRKk5s3Zc0r4f5MUZ9IiJ7bunAN1LuEvrBT1CHPlX7ggAcVA33pk3iDA1QVhZi yD7U+uMsy2BX5Sb6x7hTJEMcnA22TbYNtkfdeDwg2vuDMsQu6gPU7VaDOEjf07fnDHGOdZX9tS2g STuLOvN2jGc5dwp8iLHFFi8rCgN29HtcgabFW0wKfUHBzi4djYUcKAJNOyowRIjYuyNTicJsjOJG uUnCrIkUfY608cI8iQIQFCtiUKpsYW3RpVpWnj5YEd3BSyeHt5cbomNVKZwHP+TwwfBosVp8icVr Ba5kKHOrFQ/TYkWaF0d0LgBlkP0WbbEMRW0wJnuZ1QdmgFYEOnuiarJjdh8l269yWPzQ6sdGzOWD Vnxgi86IObGK9qGGnUjZISn3Bx4AuPrKW/SKks3t2BMO168ALG8nnnRk++pXrvGlVN7TxM8xffOy 69HmyXzt2nutM45YZzV+HB18Flc8dblH71JCv9sA/cp7QpdxXoAJieT2kkxfiIkPGj649XAMO02D Lkz5ABWPRbZ/zpgGmckWv81havBRF7GAWP2fvBfYFijdAuZfUG5P9MCHHGCK9GzN5o4t9rCQG+nE QvgCEv7JFBjQjNgrg45f0EnIglX5ASv6fNkT/IzbSnAWt2tViDaI+ISnxT3wQrE+7FceXypZUkEp SvlIPfbgbwys4KC+bCiMOuPiOgtkjfLlf8S1JBMLJGXDtpKJLeFCJhaGYUdglVbkwpYx3XlgbUfp E2/aBQXtPmBWwRw5vm2HKFFPPyFSGDi0AdrNR/8AUwX4A9WZqBcO72lLteqPUcd3WG0tYeeoD7s+ DOkC4YvskR3EBR+R5uMDS5WpQzF/6Kr5FG2k/WIEkYUxaWybZUFmDLtWcwZjX5j+yr4LC4LVrx0r 9CTJmZCPbwAs1InVJl2RaspXaI6+RBwvuec67tUTTvmjXOBB46NSzYfwUC6tjou5RdG/douZ1M/G DSSq46pt3wcncxdJvd3eRGK+JvUxkWW8iDQgmC+te8j1Y68CgVZrdswiXxa4PTEi40m83YMoc+BF nb6ZC8v+iDs0i2XTRZvAE/XRdpydAqP0gUaiawQvW1JxuMIUEKZTtXnRwQnbZC9tnSKBH1xle8lO t5flxIrfFk8Tqu9RU3GyvlRO3pdNiUQcBYQb3YUKahK8kQYUVucKY4JhcooJPmoce7D0R+RKNu2w 6UN+FDTrGkILD5fGaDgmNHSTx3Y6uZ4ZNAyOmcelsIMstcjQwbGrzpTBP6mFsniMw1BUXsKwEVTA 3dlzwJU/5X8fQGlPlad1FL3ka9CjfZyqvmglV9uqf8j021d8jiNr9DhE4X2Z4YAQo+g7ij/xUi12 7NCZtJv0aozbbrurHX74Cp+FO2TlQbEoE587rYSrnaIMtGKrNpZmn9HkzK5fPWAZtwRMTtFuVRq2 QZeAEosLGpKS6eQx0glqTgQiRt9AB2SVAyIJWUhZ7Aa1+jYixU7GeesquRjgIc63oqSqmmTLDohl B5MPfYLBGx6o1naiLVLFr8pJHRVTvyixMLZrGfewCebCoR3QX0nFiXIPSnY2+MXh9qTxu6UpF9r5 1rg36ygOqLGMNskPn5NtEJr0OAawihaLUB5USTboEkHKkzV48EHXllzYGOWQCv7UVBqjKher1oVx 2ChaxEFyEpqIT/JYh/WFvaWntugKfYpvErHOqQyBwxONtukD8Yzx3Zl04Mgchi3R/wIFznGiFHMd 9tbcMsSCWkk6kJOSYxTytYAf7yM6DzboD+3ME47NAeAG3WFxtaEjkzKOO0FWsn9qXNo8ZBULm0x9 YPCAQaRoc/j6okwV5Xc9rxdSIVGSlIpu+cRU2Gxa1UWAsUXkJLpPw2a9ymCgGQhtxISHIaoPRxXR EkgHxs5RQTDIkob5wcX9vjpfyZdTk3Aj/GAYYh+QD7l+w8oIB5F+yJ90EyeCoOS5GbtVjnlU8Uq7 mfdNE1/xD1usV68zNkjVP1IdJKkoeYoVHmT80I6JVi0c7EExOLGuyOq+GffLThxlQLBXwh/rdb/A lrSVTbiPPkukbelDxsbsWd3VUAaczqdtXjbN4BUcdamsC2YGY6YdmWatICNSvNM81I35KJMGe3Mi CHLUKbCxA1KAGCTiZsLGX386LyjUP1AaacqAwR2Dkg4W8mFjdjjxmVVVHlSpoi5vls7+M1TZin2A Jz+T3URKU2pCqLriqwFa5QpSDbiHUr/7RhlchsywJS5D+4U/psk3TmJyJM5+UG+GaXeuvkcv6tyo m5X1Qsx+RDWAIlf9LXYUYCRmtjHxrr5UemmLerCmaPSzOMsLP/nsCwFnpV2fGMD1pUdqzBqDaKZJ E7lsKtsiDdXkgzOZsz2q7rr24xgTsl+JVHGYrKWkGPFnTPgGDuvKYskXbcxX+ZlssmdyjpiCUbEe tEzl7HoYUbo6Bxj6AyuCqrLzUR74DRK8TO0SQI7kfpA6AiYA4HEu2MxbX1EjBDEkl/IhVzwPti39 ZbvVZOBsn/K2QbDR96xsArZiCbFiTjCwZGw2OJU6HwQXNLep77odoJk1+C03IRDtVrFGE9XuC8qU zrKbnRWqq42noNA2kfa3fKI6CsILPnwsjQNf6A5/itr9xy0ZFHbk+Mv5HbTiC3vFOzK4zkztrxFM eCsqyj+UadR2hpVNttP0Ga0ZaSf46uNmw0j1pRliNhKIhc/3wJfTZhct3NqHVLlOXEzTu+BU5nvl 6/ode/oZvYItTZy+OlYoGOLkM9wuFo1tyI+aO3HAykWWKhV5YwV89SPwh1S6YfW4SFvgoM60gf2A ucKZib/qYlt+WIO+6B94pJS6yy/36xGdLJzQ41jSUkEefWvxJiaM56/Q4BWtr4KhJy0mYZojg4CC kZ0OROIJ0Dtx9IUR0VxlSpcTAd3+iFHtEkeX5L2iGW5Cx4WNAABAAElEQVQLr511daYJRNmBKXjj ewLAtaWi4YIrw192zqzfoRnTupTXvRv4oH8n+4McSJaxsVaUt6a5LjnYmM+Z/KojwYgaogaE0xzY Qerxj2L/Lu7iL3n7Y67gGHwdJKj+fvRjkdzsFmITsejx8MQPl+IIo1P4QTzccbXTMQ4o+uct5GR4 v5kX28nne7kSIUPR+xK+lJ+lhgFePseNrwjTRwokbC27oPvku2zw4g8lAsMGsDgaRhg9WAwMY8Fr V20pkwrPimQA9kRdyLnDms+IyoEZaW92Ev9er4g+yhM2qeN2buylIurDR9mhGdEiOJ9GDWOndGEX fAP20I/LGsAjuU5gQFJbHGFTLLyLl7EGKnHiEjOJ4+jwE2qk0BfxhMZEPrbHixEwskHtzijOoASa MMTDjgbNHuvC2seEHaocByyINgyiz7zb/eAjO0c4yBBS24JNqR9t0IyZwHVjMwLIUxs5cwdWl4cG U/jMlmT/oqJIIQeSZIezQMjJy9SNbMXL7aKKwqcObfBCC7tlmwrc1gG9dswhBL/w3aHIRQpdIAy6 oiWFYRzVpR/FQxfGp+yWru87W82XHJCR9BpaLHS8yg/olrViYeu//K+zZlEVNvWzfILEjLqyCg7C 4BI11dr3CMhU/Bng9hj+wMGqkqn7xeIYFYtDNxy9r8ko6xIR+2xLqBVX0JxJ2aCVDEj0/4oZJxlk I5hgcZ+itnGnDqC2zNv66uMsgz7YGNhVLn7scwq4IvdtkYuttoVTfbwE/rP6HVv8zz+3nfPShPO0 Xxodm2rDtEAsPGQCp7kzfrQFFM9/xFOOgKduGOgqx1wr2T5vDi88R2eMT8m6n0guGsI9xD0ZHj5p ypxakYrfsqrxbQ9ZHxaNxp/pFeFishfRC7NNma+wv/o8nHXSIOwQQWKeB+GTHLaChH1x5g0pUJTC OEI7pHKyO66quNeFBqC7l5vASFL/EeQB4wFzNIIYcII39zNd22o7xwr7AaXN60Gu4ILDBFkdYywa tmFfWAwv4PYrsj4LY7rLIW0fJQNfyAiCBu3gXQJEpajo1UEUdX+KuafJyT9sphh6sTIPpX4wFRPF khuF40WaYQntQPM+WOosKeC4ieg5Hlqm6LSKikhFZVvybi/KIvgeCBbWWdvr3ObaBdZALfADbbMN PZmKx5OUBoXnE7CVKVsKonRhpetgcyXfkaNYfOGDxoVmGHpzzNQWmPiyLxYfNBYNOR/EKDimgc+4 CEN7O+Q8YNyuX3Dk+dR4nlCchcHycS1yIV+yE3xUkgaTo3yA78EmTToHkAk7A6B89RSVPlijZLEH CPumLQu3pITw9/ANVtlkdulgR1BxzBY+IFLIgqJ2yVBMM0/g98pJ5kCoyoh5lbwdMxC4VMaGD3Eg oFR5Aet+FggVQ/hiqg/6g327a3kHBTT+YUQkMCtG1m/d2omK30kb84Rl+8sXG1sbH2IH+kZ32DBu L+JELDS2mH+Npa+0dYBNZQcCL7rY7KMdS+ncdN+rLBnTHKRRLMb1hfsAW9iZe2w8jedEeQQELRp1 oENzKpkqxzanBaHMXF/zRlXvz/fQ6leE5BLtxfpg1B7OUju2M+p7zOVSlxEb9Mm68h2MkiUbfFyJ msQvfrN0GaRtBXLFUm2SdsJQ+msNV6xs3ZSD9Liq5+nH7OsC2hp73XSm/LR6CUxwi1hrIy/eitkT YxpuY4UaonIsEaJB8EYNElabi1MZKWpvkOv1GIA81kjGUIkXk4HqFZU6egM2bBn4ofnsmI1H5Qg/ A4dOusl0CptLfQJIP7wc9cYO0pCeiDywujOgpc1i9Gq8/MaH9GPITOvvDFNmFd90/YHoU+L7+Vk4 JV/8Ra9ybYtvuj7otHcsnxXn7qT6QR4O0G7D2Qs3awF7O550+9AtVYqfLyuDIe643yDyCNcwiv5T QqrQZBYTATKjtlZ+ogzIKFV/Ctzwj/aKJsY//aUtFqv27TwRi4C0xT6jhPHGyMl8UBlgcJJ8hGhM fAld0e9dxBTbAC/JsY2c/aK289umiEk/oILXs0piq2h1qbOPw5E/hh999ViHe7gWzgmD2LIAKMzy a2gZIhjJPPCqWHMG8hDQ0WnB2OMebZEguanFdfSz0GCMigGLBvlt28EDBKOC1SjVR+EJO9Tu2NH5 kQuxEFB7wasC80mkAgxGr1UsxmQccSn7jVtAYLgicAoFp8OWoAy3PJTpSQdHAQvbMz9yzlzMw6zn 0YVPbNEZ2fDAlUWqivQtZbzpctGPDNbxJCcmD38rifh44abO6VhZLedjw6CIcepl/1CAYGbe7SPc 0B+2VyxjLg97I47CQkf548zgr8eDhOFNL0cayYYwdRHTmEPQR5t2qTQgxpxsgx/xTFTjTdgHMWtz bpQBrvcW36JkafTaTu3IKz4BK9BKfbAHbVRTHDNuB76ytihZTr8G4Wm+rHnI9AeeH3Jh36k4sB5F q+cB2xM20H8cGxUnzVS8RCNm0Kv/wRsHJdQHBsBk4Qs89EuOaur4I6/6QST7AKw9Zdzg67TI2W4J o3NsJxJwoINEOX5GLHpJHVyV3tAw9KEIeVAHrVEGEb9tP/ihwjp85i0oFUAM83AUOThttACYLOOo QVnKJPH4J7AUYBuPSLdjcIfGq1QB74PSr2vI2tLJiJIMemx8RK5ProVV27LL5YqSCqD453Ji5RGN l3Teo0Qd5o5EgidOE6lG8gIhwJz9maUfJ+alRjRej0v3rTtuuSEQWeyb4isCVpKKPl2O2vBmzHcg +oHki7/0VHnMr5aSf/ppZndSOGgvd1jYHCj1j9pxFoS39CEmJnmSvdvIVselApWiMY3jGJph8Czg kpjY41L1nVIbkzX2QRlzBseYPNFH4JbQdCRCiu/CVG6CKZ4+pk94UZMC4TOYEwhCkXDKe0N98vRJ C13JA6YnOXhMM1cHLf+T3VClMqBjzPT4VyU6er7gRMh2KpsCo5scjLAhX2JsE8z8hTGqZ/iypsRO JLGbWNhuZJ2JWqPvb9ykvsTuopQ9R0RF4AvJttAPw9rSUJZgTdlguxCXTER5sj/Y54ARUy5e4AVg pBuImVKYEABexIsJ0fs9twgCIDFBiwkcWiBRRj+pcNzX06/gmvm7sCwLhv4LF0TOXw/oiWE7UrlJ wRNnDMooQ9neim+YKF6xIEFMY0YNXGjUjW0KGfGWjH1SHESIS5nI1DkG5Q2Sm6l5h1D6qgt0sfqp V22nU9mEJ0Q87MdazIMaqfwyRfaA2mNnO0KmxmvJwV84YW7vXdbRx7RKLEZmcT3bHSm4u5MF2LdV P9gYVQeiF990fZULuPiqPF0/TT8Q/zR9KDsCProQNv1Ln2pz/O2xVjVS4/6NNcgHXa2nWMWtGuKj wRl/9JtBncvRLo528KQb7mLlUm5jaYWeUcJOYcbwnqixOlNUH5YxlrIvSWXpwCR8o4w96IHmlJDo iNsHVCem6L3gRtqngVB59luOlWSijwV2Lt5SQpuY/EKwOmOvFQhGAAqH60WIy1+dq2fMhwfwRlR7 HRlrUXVpm6gcFdyo4qqEI2FnUR54W5c9HWpNCjYJEUUQ3RHowpRDg6oODA+XEefNntfm71zadi/c LLhiJCoENspEZjIFveIZ/oZE8BX/JN4kxph/mu+h079PM9Xc3Yv0GPICn4l0p6mASE35ML0Qwrrg dVj3Nx2MDHzF39t03W1cFTNIj/HRQ+ePFO05Sau65BA/0IPMQHeOBXzZYTsn5Wcq0YZcwmFbsjPx TdCq2ZKI7EwpblQfumF3dSZmKa+4jyUeJJQzIR2QZl+9r8HeB7QmMYhNWuPYq5BBsq2i1dyxv9ID 6wjNjENiPrMdriOuU/XuH9gyWGgbyx0vUvAOOTENMR0sRCPyxhrI319ONjB2Juwvo75HpHCtovH9 CSNV/euB1MlEJX1NxfGBZHqdZCJWYVvEdAY7aQ99Jq6qdJCZM9Pt4uYStNskQjKzYKfKNvE9WAyw loOP2Il34QfI0KYsGiSjj2/z2C924S+2zr1//mj/gdS08RWvoke55l9G0GSa5p+sfXD8B8P7PvWz H9nLPoSDecm6rctNLcRE72MA1bB4dJXd5U/IsCh3W1MN3lQKiqLCOmPiSGGK8UGK0b/SoCne6GP0 H+bcqCzfJtY3qmPNwSJz0qcpwAco1oINXe5GM6yf5tZEyCoQpn4TqcrcIGeDJzpKGE8HdcTZZLDs kDDyxdHUZIplDSGpBK7tERF6rYPqKIfo+DKlLS8pbBzvrAZ65ErD0LjGpYgcfxV1kdBvTr7yyC1w KMpP0W2n6ojFXBpk7ry2bMcRbeviu9u+OZxNKokejR4t9JGE5G2UghLfRZmsL8iq3R/ZcCM9US7+ QT4o37N+2PfObsu2r2rz5s3XAOPsGy1diGxLS+is74prTGAR5xicIUszVv+I+1bUvhytJEA0yyQ+ mIERTON816vZNY6qo48VXtX7LINwhBSDiUN1z8ii+B46OIXhDi0M7AyTDWEbRv7jBwk9deN12cmZ XHvgvhSM5XfcbD8AIxP9T7rFVE8omzbdF6XM8WE8WjN9k9ion+rPdbYKvuQoQ5POZnrs0C9m+WES V5rTuMrhX93Y7Qq31WD/0Cdc6y9PWKmXDRiOZbdFFOhqeNel4aD28Q8SPPZPFkrWvzQA7wgbtgMl xi2YFeMxn/XCoNQv36s4cQkvdZcNIa+4hpjtiPlPNSjyhh5WacgVBeEQV1v3eGQt5QSvOHS5UaZ2 eLD2A9LsK900+GdQD7n8mR5H0S+Q08IyrSwQQyV4xRX8mqc7TTwxDmO/gT5k+e1e3EMH9lNwn5AT xN8PmWQw4Y/5hozwxGvbVJxMcE4njAx6P6mlYrXTHO/8rcHYFQNiYgJG6b9iRGsy3zuJxXZQD7cb IGjUZ1F11E4n+SsG4kUcsGOuXia+cPfyNnfHMp0E4DeXy0pMCIyhNxWmhJWqNOSCzliO+uIouskj 26bpUV/fD4l+xXLWntlt0c5DdaVK+xDNMfqhQzpILtqUZWFjU4ma/sKsCJKMoV/FUjj6Ezz0l6IJ 1Yt+/HZ8BcbDhrPRne1WMcG3atfyM2gsCMUlmVIf/TpiSH/trzORAO0XctiSecaf5OOALGjmCUYL uX/gkJI3ImBPzAOAJphyw5wbfnkMMIYQTjZs5letfObNHRMN3QU4h4Si6YTMgZLZ+RJLxx5BPJCs vCobbY11S1fZULJVDpsDfKjDsur++9tZsp1f3HBB7zQgs0w2Jk4NPL1gdsmeQ9vBm49rGw+62Y0x 3LcSunDdKWNU5QpZVXsRA2M3MeVDevTdGZI2radYp+mT5QfUTwdWhzho8/Ft6f2Htbn6qarZmmQ8 4Ra8thW73pNHdWRr4BS5YtrlsoI4+z5HmcgA4SCCVDYmmzfTssGXnVvBCx3SnfmqZ8tlcXpUoFfk qZlMxjCf8JK7+sLAqZoDQwxsoxz8gR1tMaqaMQtvqdhPvyGYaJSxIeE72f3jRt1opyAGsEm1DRlA S6Or+1fxdYIy+9k0rhzlS3Z/u0ZMD5I1hmz+3iKXYMyO/Dso0L4v6W4RsSPO4UfGJ2M4Riw/0TOm B9DQX4xghima5Tg7ERIV3wG3m+TYT9Mtl4qRpb4wBsmZc4UV/INdcFcd+Zk8g/6gKX0CCzsxk8Wh bZ4Qnok2tiEcNI7kwk8ADuCr+gA63HMyNhPqDlCYZE3jxTsdz/3LAE5Kl4phDEY9O/k5uvVm4bwl bYXm2nvmXNf2zt2pxQv6sDv4PG74UtltUfBpVu3kazHTrU35Mien1aENE6f0FN9gbzJ0fdPl4Dyw flmk/+WbYj8yR6+Hqvveqk9Nb+1rGlB1XT1RUcwccznpelWypY2Je8nEPqRHIhGHTcgWcvUj9xLj DJwPniudxDHy6A1syu6jI5jih2O6/4Qfafc4GCN5srEGCX3Ef24ERcosy5HXkEphGTW4nUEcWNOg Clxu2VSnHBmlsONBD3o4Ew4nuwTFJR500uFJgz0udVqsjl0cfQlfpZIxgnUWy6AfSqqQPmkUM4Mu xgGXOThalh1azGDfPP248iE7T2rzNixqmxbf1u7X4BuOCQp/hm0F0MbMUP8gJIcQ2x6E74DVD6B/ 7t5FbenWY9pBe49uCxYs1G+Tzo9T/wpM3fgdC7k4Wqm4Alkx456E6pjVptjSee2AKdHPbA/tAG0y Ic9ZoO4sPOIvVtelCO0EvfRArrzeQo1YtGU0qG2k3v6kTe6TFrQacsrQJyOLKWSz6J1Q1ngDnvWo RJ6Y+X4IHzVRjn4EHr7ZXvDIq8BOzdilB0aY9GVeV1JOcgBJFsmyTViWA4uRLFnw0OE/pOE1sPo1 BfTwiZEfIQrdpRJ5Jzq/RUM+iMM31Ip7WKTvZHVd6i2JasNxnaOA0YlFzvaHSabz1WXLSNPoicQA jsAY89lNsAN01IbsbyRHlb4iJBkl0dy/gcw0+Fh2WCuMTjVeyt3AVCX16J5ItEzML1RiA7f0sHWS TLSpa7sO6pBz02T7lF0+C6D66FsFBOaQN3Z+1QFatHM6kYYiUX3CETEB8MQvPrCpw162mUwCkrNu VJJy0+1BxjT8oUBMSMPWJdFhM775BVXKJJAtZj9pEfOaP9GSN/wUf8UteRLS8uirVHbCX/mqq21g hR6M91BhTLHjyLLtEW3OnLlt37x9bemew1u7Z1a7b/EdbdeC+9QH97Y9ejEmWIsWzNccPNf3x/E7 zZxVIpWNpTdG7UBPC6q6j79+prTXTMUx6SVfeqpcYkWvrfXjnxg4gzh318K2ZJt+z/r+o9qCRQt0 gK4TANQTez7EEF7la24AG9o4htFU8OM348K93Tz0imgLtEYErD+EfBJCgqqzZGwF5d6Eook0edZs 3L6ho3RNCVbf8byZ/Va4lpfqsrH3z+TPjm4LYuZWdhwI+xrWx5wEko2XaPbwxPKZN3x219C2Ghn1 8FDnwLlg66w4BCKLqrHTRWU7pgtqlIaSeSrwSWZTn5HQDNkhuJOT0DTroK83rHRGhyle+eGdbZQd LAeAuYfTnFqe6FrZvPla2KjR5u89sS2574i2e9Y21e1xcAtp/+2gP4ahOJix3ND4GvW9TtUc+5OK Zh535ohr1JY3AQc/9OgPtIs6dzb6YAFcwUfsZ8+a2xa0JW3ubC3aFs7R2cV5ioMc5TIg9cmNfndo l0dfAi5bRtQDZnunTSlsANc3G4OFvcRbCNgf0zB5EUpR6sSmmPhnVhcxKyFhmC1Oh3MJoyf6txJx 41S1cbPSMcQK0SfGGVxpewKnBBvqMBeN8Y3tlKK/Q44608lCGn0omx8sF8IGy1PngCiTuOz1GQOp zfYiBgoTqAguxXdgF6EmGbWESXz1fucdbxfv9ftlBtGoks5+7w+6e729MQ8k/HigNqz+Yn+FE3YV RkV4gKeGD9ilkgXNNL0juEJfjmdJBIYgOgb5IZX0zPXUDkgq6DqLF1WqKA8GrMpFT69mHdoXpOwD xcpWZFtRAlnXLzdO0ceiM+XRRx+fTrYbXfQDK1RBi5KyCJLJU4LFyjYuESlj/LpkpBr9R9+kTogm yQ7PjWULCHZXLgctKCKmj6YXkS32uhrMSb+qXPsL/EC+xCX2faXC87yFrg4kzMzbahVm6aV8s3Vf 0VzdfrNgkea8XUe0BVsOblvXb2rzl8xqJ5xwdPuBR5zalixZoheb392uueb6tu7ue9oefvfZFmYf SWsrHmODa1oxLfXHjj8KMX6wjbjAFTElV2Mt5gOh96rghydSYMWBRcRYd4S3BbOXtvlztR9ZNM8+ evGmfQkwfNIcQxT0mBbYfEMtjoFauYh1lWJb85X7E/JjcfVX/vC52qukZ9ZftTNvS4b7NVkbCLaP nR4TjRd+2hF9sQidxCqMCSq8JERsr7JyzHar3MeRWPzzWA5EeDwR3LGTNgC43pqhJHQNCsUijCFq IWdzJr6qo3diGh3DyLaH02IY8xZeN0O6GIRjWzvmKDNh58g+WIwpBj/Foi3ecAkxdoTyJd2Bz6eA xaGcoqedpX4ofd++pZadaQc0RGIwpnaU/QZXK4wYws+HUlDYiQaKy7KL1OOgfE0W+T5Y19cNlMNj 1oVGG5qlY9D54v42tsQynjStHW/EVnpGctUPHFd/YUjg8l32TRA7HVtq8ih/csegIjsLBiJdcgTZ 46EqJ7eHqBXHorMd9AeVMh/jCTdaeSwx8KHfjOlw9L+0F7thTYyKA6wMNic2qqevcG9EyO+vM7m7 SAAHBN+2WUT0GUsTQWAFje/xYFbjua/gJTIC8NZ6RKA01gnLkLJmgi9o+EZI+BjAmZFkdYwiJQZF xpGFEr5Y2AZM+ZLQwjJr6Ui5aM+ow4yJlHYFT/hZPONt5avNit+aSx9REiO8fHqbUlZF0Fyhr8lU eCVLbbnt44TpOI3EkYmknJWMfE29hW/MxJqJ5nnrgXR1X0OjNU3EuWwZtqFHnDnZOBIaoB575eTA PpkbnJukqwSu503x9Fg7BP4y/+AKisIGj9ERWsVhRBJ4LUUGKnzjKzVh+oM5MMhXbqyP/UbEXLWO rfe2scBVGb+i50TTztYZtX27dbDPUklz7THHHt0e8+hntUc/5nRd9ZjfvqMF29cv+3a75RadkdvV 2pJZh7Y2P4Lob+sIS/rcJxe6F26XNIXOpABaTls3HzYpz5yCbTUeQIzDWdV3HYXKNmrhK72OsMDB IgZzuNVGn7k6uzh7tn5RR3nz2w5n+1fFkAgNxkc16jkD3edikQd+FdKsoiFVlpIfJ7A4AKfdx/xj nspX/Tgm7Acdv2IabVU1ET9XSSE4bneUTyTqglB9InpFMeFFyEKxPeLnjR78VvE49adN64wbO01F zJHzCtLcIYSyLq5MOJgUyuLl3ksWEd7ZSCFHmRWQwUh1pvJAMiBM6wK7GmPMiznU9RsGVa4ORx0p Omjk5xRI1ISNki/M2nrhZp7wJ878hHDd00ZIuTTom8Q5M6U89y/s41fr7T9fEwq7nePOwEKJZJ+T vd62HNGI74iAYi4erPIiLlWAYFVUMFi1k8Q+ipGGXFFqWw+lwFFtGs0hBAdTVBHqvgbkKk6BEQMe mjFGLhff2N+Spy7oIdD7mhj8W7EGpy78CPTws2QLf5YHIpxDW9ZCKfSlb9nW6EXWUdGWFDGb9K27 AguvrlfyC0EdKR5SEEYukuA1pjJjXJkUOyTVE0O0EnO336gOoemdELSy1bECWBOPb+zGbunmRdZx OTgUG1dspDhLODxMQYwdM4kWH5Bgu64mBJUjUVtJlkun7bAXwqKqWLX1QULGM6ObwsFEH/ekkzjl m5k0UH2CRV/Ex3ZFANyu+IpZEf+ALXs8dtALLoIWDp1hb/DH3EBefPqGlx0TbchRcdTQTqITE+oM G/a4LcEmqR57sItJx/zqhwighw/Vjre2TugTEe3U8cFW0G03ZWUYz+Vb2C8OMWMrN2pbLr8xh4/1 k7diEPWH/WpT4hM7q9oJxo4anv1T6IDuM92SBTLViUYh9Lm72KagMR+OISfGIyySRbzmYR5g8AGH MLzP0bwVvgVexY52wD9kbYvk3EYJ6BhJsO/QRiDU1aIitI8qMUnYjrW2dlLV5OKLDFQRU8wxs+Nh K7L2IfWUzYHFokhog3gA5vceXf7cs2d3W6hbb8585Gnth3/47HbGmQ9vGzZsal/4/CXt0ku/2das 0cNwwp43b4Gu8iyYkMdI+57U6kP2p/pzdAjxwWTPtE1ntKlFGy6BFaMAThE42JL9+7QTr7kkVXW9 IE6guhBUfOeKBgs5LlPFeFLb+SAukOifNidpjl8C0j+cVOe5Fquq/8tWaxH2/epQeFRzuNucuCux HwCT8ZNopk9/VbuB42T5XiqqbZ2BmiLYV23CPiZjyv6JGGTcHQ+ViDVYk3YN6NG22YfERRvWg1Ve 84QC9+/4YXqBPZQJUwhqGRwGTZp7IH3lWAXWfGnwhIxoIBo1eulE9YyFxHHDkv8e09gWfBnKNJxA 5rKTGRoA2LBOT1PNqCaInpRSTNOBOjuUqOO7dBlLncE/gxMV7tiOs/i8U5YoE+SkFarMBBaDVl/D YBUzk7x9EC4u1ALI7oQpBTGxHWKIUmHIdsskV8WI08rjnfcESPGOiP+PtfeA2+uqznyXrC7bsmVZ si333nHDNi7YBlOGQAIkQEyAQBIgQEhyJ6TczJ1MMiRkIKFkkiGJgVBCCjZggunFwdi44Ip775Is W7Jk9S7N83/WXuec99Unh7m/2d/3nrP36mvtcvbZp2GL/SXTBFoX8jlQFo+NFm3bA658HwN18KFR xTyQQcR9lvkcdF07hnZgw5i4rmgfNKpat/3pUD9FRgOd6qjqftz+8nFEkBRWVRnvAOTg5srtQ9mx jcvpyn3wxMrKQMcykoHeB45GX3VGv2fULDbTQcNIOpbg4dU0KWgMOWFRHE3weFzGyVPvjjqh6+pz gC7/y24Z5THMJE1pxaNaITj4zPsc7ce2QWyapLd99FYrMIU3ZUcrtLCNEQk5pAPb262C2mjZiJyh rh1oTZAbZKRc5dpEAMz/SSK2VTeEDX243dsn/93pGmInwjPkItyJHbZzgjaFuMRJj2VjhNqZTn+c sKXVZ+shCf//sU3f+uNBtStEVQwynysn23Q/2/z5e8cLzjw1XvayF8Z++86P++57KP7xc5fFLTff HitXrvaK1a4zdx1dUR+zzfEsH4ilEsV+RTE9HzbJRu721E9sxSgiJli1gt+WFTxh8FUb+nOXuohq 8pBwTyhSjG0AjHxizBP2VfFdzB20TmCX6fANQrlqsIgMs61q3dqT2O2MjlpvZpq26qd0GcimBSol dtAuswO9WdL/jmiQKXrbW/BGXjiDpRedQ0ngaTvAhvYUHL6CT8mZe+++z2gtrRdbDdHGSDj7vqEQ wBQHXfYnaFAzTH0jL/X9ACOFNdlrgRxyYl06mFtwzMpJfgGvZ/JD+UJUp6cBtSBNYJRlsCkfqiKB ZWycY9NS6q2ndYqv9hBhJT/sZoWERNlPPrqcMK/KqExV5bl3759t9WROcuhAdUZifnHA12JVqzfu lNbWNsITY2sTPfp9iRQ18Lrjt94Pi/AcoPaat1dM2rQ+Vjy7roUs7UVQWYgZQPNbnTArAZRc29Xs zfsBZGvDJWFuDVLWbnjTRExA60sTsAnndlY0lFOc2x4xr2Q7hO8hyV94ELzWxhJsOvUwmLC0gSu7 kuxEEBMr6qspHcruYAJydu2XV5tAUrVCO0WPzFuWbNqyZcsAr/asyydTdBKQwcBmMSomzqFLxVyx cDZdsA2aHPtoKPKhXcSHRFzzX4xNkGDoxz2TAXb8k8crN2p7k9vK46CFDPqEWCBHBnZKkFfhcKHF bbRPiLj0iw3c5s2bHH9iyusTsB9d4BCd1ijT2hL1iZmdXHRiQJfE1xhNq7xPWMRE7KA0WpMb500s GHjBrLfpylhLngzCGvTCgxTylcB5ZV6CE1+Y3PdtQgQ1FtkWWhoJOPaRa4IBgTKd8s1OQE4YIAJf 3VC+dLg+KCQaRssBbhb5ZlGQwGc9+MYqB2z5h47SiR1ASXXwcxkQyKaj4gXMWiXTOkWC/FSsArJS XKcDNMm2IQ+AAkLZKBuRVtgu4ZMFBHzpQ9ceAXY0jbLRgKrEeNnFAWb0waef9bRy+tS4ECe8x1wM zP8S6T3WOebyYbMeNpiqS6HHHntEvOTCc+LMM0/xwwfXXHNj/K+//kw8/PDjsUVXbqZqfJgxY4b5 OBHmykKlqgv3q2ZbB8tGZFLG2mGiKTg2BmbMaKtQObayDzu9UtZYSwIP6UmV+553HItopE7wpeKB +oybAF6NxX4JS62NTTv0VrJtKCmg9rlqiXw40WchZnFMC+o4pHa3LyibHKuwqco1A/1aKPBFo/04 X9nlPaQNwGiBbET1PCPUTWzGVtQuO35NSNWmx8rG6mM4eoir5EPayW80wKhHIVKm4YKqrqc4POZK ahPDoMqp87cKSlKoDlvDGofD26UWpCqP0xpeDA50UhadQfYefWk4ONsr0mIlpFSyB1lqV4k2zMMF YuwdbrwmaJtOV9MDuOS64UhoHZjAlW7yJGiHk5JOnrHp1FBe4Ss0VFfitcUGK2iVqIIHxKYHkSUL p1zxguErcsHRubHXNrmj5eonYnN1LuPHpBEYPxhpMDQg5GxR/o2/9Rsx4+EfxocuvkLL+1NtGqQk 82jf+kQFIWmagR1N2QWf5JIqBuSlEVcsw5dQDBPc9daEQbizZGbJ9V67Utzo0WUQuvFRA1B6jt6U T7nPwwgtJuVfirKURInNg2t7+qup8q4kTpo0Lc596dmx16ypHu8YCO//yU/i/kWrXF+bJe6wk0+J Ew6Zm+8mkl2LHn4wbrvzMU/yvLqHns5GqW59wJagiIz2npxQlH8MfAbjr/Jpj00zLfF2PehyxvPP Pyv232P6YDwGqyRb1q9eGQ89/EQ8sfApvf9Ok84mAtn8SI4japTPS2fo1h820SiVqfti8AM6t0vR 8OTclGkz47wXnRN7KkYrFj8e1936gNooh1NkshU9bbj5wsTBMoADU8pyQQ1qG+kWGAxjAJ55Qood sIrfEwQPGsliWuErOfatmPpU0L9VkwVn/5tvyqMpJziKQ8M5FMUkluQTT+OXk34XmmVbOQaCVEoh ou16m0Dg+9QoMSXtayjaAn/UiccEiSDvYQFSGYbUfApaGcl1nAYCbSPymspcdZZUnYT4UlazBZvw G/8H1pcXoi2h6VIh4HPbaPiOjIwEwVW8RTswh2yX0Iz9+Y/nSvYpSUpOGpj4tFt52mobPAxDv37k h6lxGY68Dg99S8C2qE45OZq715w44/knxctefl4cdPABuoftifj8574cN974k1i+fKX7CU+UTtOJ CxLgpd0y7jPG1AlFWVF9AFWlu3DAOh8pKFH7yLWthgDLH0X3iQYBTur7LMe+7DsmSbRjSmzGdRW6 24uGNsikpWw1Dt6OqGXsd9I7BipDZN9kQ41xwJCHhK5HlDztu4Q8/gYw21u0HWFmCsdYgW8ktl3c HAckJgy8U9NTRcvBdidipEyTV1AFw7Ihoa7HU44fGbOKm8WoPcCIHODc8lHjcieDRoMCV9u4YlOJ vcFtSOXBVV78zdU+CBhd+E7baAbDJvBHjdwmeVMBxQE7KifM00WH8TrnucYPdELnChXvMFlmg/U2 NkvgF45VFA5TVHDmdbVU73xjYKSjwo6+ybyUEOHmoxPno99YuYtWVnxmAR4+HcTg2aYzLw5UWKX7 PP0oOYN6b7owQ5OxRzwcBLdIGTeFsqqT9HRZ1Z+W6D0I8JSS8Oi2n7IfUazCbZVOPy0jxik6oDeP ZVOuAmHX5s3Qal2QFy3q1yXbkLGgOSY+F907GjKS7UZIgFxMLcCwF6gh4NMBx8Q8ZVCymn+4ybaw I9Iykdc1HCt2zLN+EUyUGAZ6/vROOP9rg41Q2q6kNkAxrHZibnS1ZL92mRmvectFccy8XQscP/jy LnHvJ78fk6apgjUhevWbL4qXHLdPh7/261+OW295SI1K9SB9LRTGYwOwHEoppfXYi2ZDYCDT2lFS qTxIwPhtVyN7+RteF+ccOmeAHc1u2bg2fvDVr8TF//R9tTG1c/j4k0KvpqZWQ0c4hYfGBw7ZBE8m 9viVvk2Ztnu84VffHIfMnhpP3XVt3HL7fbFeL/a0WHyBWjs1U/Mg1O0ZoGdEJtnJpnQ2XvEUxFYg AxU+YDtjXQjrTpigGSSzdLD0hYhYTgkf0HdZ8SCpayKeiOX4BE2xlra+LD75Sblg0P80KT0SpYWm fteEjOBAWG0XWX39/MeS/UJnGeO+KXKPZWpvyBvpryXK8SrrZYf0G+RN6rat2iSVaFQnrdeVlB33 ENu3HmUbAE+Ag6rAeU+v6NAJUD/fw9wE5uqV2mFXYXC3ZJ1sYERGbwTjKMeBKeq/hx92cHAv29ln n6b71qbG9bqP7R8+c2ncf//DsXnjJq+yTdNJcRNjWbXheNDHty1MlJ5U2+GLh31XB+Txhf9GP6Qb 5sv+chVyH//ZSyfjHqqBY1OeEKigdtm3YJVbKnmdX7YhbZkwnuITtiOvyWrJ8758h1b5vO8xW61R bbyDFlkkfEi5zGNaKmSVx/agoe3I5G+VHQsfNzMesBrGXnQV5oJ1AAhbKrnQVCJXvAWruu/g+AwP ehovMjjhmKIjeDrbEHljdHOiJMBb0pt7XcMQX04HOgI8swDTNMbOaKEICkZOlgGGM4FRrdhwBgPh gcPa8Q0sQJPxkmG89qTt2zVR4YCNfpxNoOVCVzwmHttYToM1k13Clm0a8Obtt3dsWbsuZs2dF0cd sSBWL3sm7rnrgVgfM3Tj6WGx//zZseTxx+Lu+xfrIwWKiSY+k/QprUOPPCQOOVjv89m8MR544OFY uOQZVQaTqWmx7357xLKlK2LewQfGkYcdEJvXrBTNI/HUirUaBHSQL78cC3UeIqNGtEUB3P+Qg+PI ww+Iqds2xAP3PxKPL1oek/Tkq5iMXyD84YcuiFmK68JHHo8HHlui++9y4N6ydUvM2H2POOaYw2Lf ubvHsicXx733PhZrN+q+EA6MkrF505bYe8GBcerJR8aWdc/G/bo346kV6zRJwy7ZoLo74IhD44hD FujR9w1x1533xqKnV2uw4qWMqgKi1+wnu7M0rD9ozOdM366YpNgq6pA89dslwdRmugSO+GflyxO1 EZUdu2YPHY42wlkmsizT9OjMlINVy1td0u3iHt3rT1QevPJt8spL31YqaZAOP/SQ2HVGxFq1i+mz D4yj9xudOPmEQHwc2zkQsMxPG5L5gk325Hh4WQT6LdgsHhxgMs81yDqBUPUITMdv1SCfKfvSveRv 1YGmUp18oMyviRFiyvRd46VveGMseWJxfOGKu2MaJyrETHo2yzf6NmVOHDzJkHyGO6+SN5xU2y6H Xf3SJy/YRH/Hfj1xpxfviEa26bdVJxr+0oVi4AMFAuTANsHxBg276OBIqomNJwSuE1mPs5WoV3xu 9ctDHiS2aW/a7zFHbK4tIfsVYDthHmSQTCs7sCUlNXkyiRbWP+Aj3SLxwD5sm8XV7PRYhV2isYa2 gYWVIOqr14Q82QdEwqlfD+YYLhn0keaicogkWkoI0E8jjvf2YUgITaOFtHUcy+bsnrryOG6UZLZ4 OrYSzKogmvC3Jr5+2ED0wEqV8/Dql3EUXieDttGbpK8HFbAZMDZVW6P9M5l3bBCoxD1X6KW9+KEI +Jo/GJBUjQ5ZHR8YWS5at4dBPeUtMdIuWuT6PmCUKe3iG49V4Y1+q/opfWnOXnvGqaedEBe+5Nw4 4ohDYvHip+OyL38rrtHEbZmOFcSJE1wuoZKotsmSXbFQxnD7ShYf0C8P6qDN2O88fM0xe4EPA1l1 sK+JmHUUXnuzNn0o9arjAO+YgKh2Sp7kkGCz8k2/4YON4yucaWQv2iDdNuibZseOinmzCXjFnDaV TVt7CUBuxoZ+kfU5agZ0YOgjzTwR0E6RiS9kq42azjKzDbistt7VBwAn1YH4socVTHLkG3LtrwSz 99hXnQVS8bm/Kotlls3YB0KJ+Q+JMY96ddyFAmqMYMNEJH05vcH9wAKKy2jgKbopg3tMCCAPrjLE B51RHemQ+ZoR5FuiUp4zpdWWMTwLMY9bxCh3ko8aUDD249oKhxQHvonr/S9ZaSnbrfoO3a/+9m/G Ebtvj+l7zok1z66OufvOiwduuD6WT9s3zjxufjyzcoNuQJ0TX/3MP8SnL7s2Js+cE7/6nl+LV7zw 6Fj29LKYPH23mKOFmM/99d/Fv/37nTH70KPij/70nbH4sUVx1JEHx5pVa2L23Lmxy9qn4+8+8rdx 5R1P6kkjTZSGSSMXl7Fe9aY3xltee06sfWZ5xAy9qVvvC/rCpz8bl377FjXgafGyi94Qv/YL58W6 Fctj8/Ypsc+83eP7l14SF19yZWxWh5l/2NHxO+/79Thi7pR4WhOyfTUxXXjXzfHBj3wmnli+2fdg nHT6+fHh818b2zes1URvTkzd+HR8+E//Jm58ZHlM1tnka9/25rjoVWfF6qXybeZuMWP76vjEx/4+ rrj1MT+BOwz8eMzzDCsbbLnnuhhrZ1UTtfdAyoAguqo7cMM6LnjBRmlLUrXtbPe0Mzo8g4WPDtl1 KDmlWdLpgaBgJYvODyxt0naMO+n30dn4nrvvGquWrop9D98/9t5Dgzh8fr8L2rOveFCYPDUOPuzA OOTAfTXhmxyrnnkmHnl0sZ5CW+EJ+uTJ02IfTf6m6mCwZtXK2Dhpahx33BGx58wpmqg/Fvc9tFAT O13uZFCQUx4U5ITNZ3Y4jPOW9fEvH7047li2TvdninbqjLjwNT8XL33+EbJocpx77unxtSvvjE2K +2Z5tuDQQ+P4Yw+L2VN3iaWa9N//oE42lulkQycOu+j9Tgv2nRtTJWfds7Jr8nTZJdrpk+Nx2XX/ wwt1AqEvdwwHOBxXHHZXv9p7t9kOwvo1q2LZijWOCIevffbXu7DkzJZtm2OJTn6GA7DjLX+8Ktn8 cl+uBoD8QSrXq50UKsscGLJeq/dnrRTVT7evsQTeOmb1sF4GMH5oLHs86RbAByoZm27s6Exy8TCQ DjgcSJDh7ehmR85R/Hip7ECYV+lEMIRlW4eracNW/dkP8kzmrLT5Jh/g38F/4E25svYXtopJnqgI 0WRBahkixi5fqYAPeOGUqVUX6IcJOhkyBHV+2f4WaftKvYxQ9gUma6Rtm7d6le1Q9dMLzn9BnK1+ MlMvpb3pxtvj0ku+Hvfe82Bs2LjRJxusvmV8RvWjJGPrjPxK/M5091ZMnOvqqaEr5o6/lLEfdr2i Z4LR3489sWygRd8qxYQ9bAI+1VN6RIRryrIjHTS2Tfa5/iFRu87WL14R2BfCNM6OTw1WcRvGupOL EI/wfVt8Tts7PUjFBvhLw8DewSSOxQCPIGVQJyMzliRcb3HCOzvwpXWwDobWgpGHxrboBNszPgEB QFQhs9hmROJSSDGCryDR1IHTMJzXBCENncgLlFu6+C0kC52uqvCUjw7rgYqBKiUnz/i2CfbZCTjJ NP9YuKyq+Vv+1B76Sh5AVPTBQitl8+dPj7/5i7+O7193fzz/Ff8p/stvXRSrn7g//vj3/jjuWrg2 Xv/u34zXv+KC+OrXr4n9zzw/Xn3hcXHxhz4S37zqnpg0a8941395X/zcq14cV/zwNj4hGlM1wTvl 6M3xkQ9+JK697bGYd9Dh8Zvve0+8+71viXt/96Px9HrOKOWGbMDmLVpqOebsF8U7LnpRfOdzn9Ak 8fqYtPte8ab3/Hq85d1viVtvviee3u2IeOebXhI3XPrZ+Pg/XRXrtk2Jn33TW+Mdr31ZXH7FdfHo ck1E3/vOOGDSU/Hffu8Tcc+i1XHMC86NP/7Dt8Wvvu7B+JOPf0dnEDpgHjgv/umvLo4v/uD22H2f g+NP/vx34+d//kVx45/9czzv/FfG215zdlz2ib+Pf/n6TTFZNvzqb7873vPbb437fvtD8eSqLf0j /BVM4k19qOz6Ie9Q51lzdyZpGEQJhz3PDJVx/SJHP4reQJCohBMpbsDO4WIgLg/wwlYLg1Kt0W2k Wy0oI5n4gEUAhkJMWfvUQFmp+WUbRDdsP6C36kVNfA93+ux94vgFu8dDT66Jww86JGZKPjcqexVW eeSw6j1j5p7x9vf+Wlx49vExDXhL61Yujx9cfnl89tJ/j+17HBp//KHfi/00AXzykUdj47TZccj+ e5ly2+YNce13vxV//7mvx6oN8tWLsQOj5Uq5aAYNOE888kDc9uBKXc6ZHBs3boiVU2bHeacdEdPF tutuszRZV7+bNDNe+8Y3xBteeXbM1gs4K614amH806f+Mb519T2x+15Hxvs/9Lsxf7cpsfjhR2LT jDlxyII9m13r4+pvfSM+8flvxxrZlQ/yEEnFQTE69LQXxB/81ht94/zjt14Vv/P+z8RGtffdDzg+ /vzD/zn23nVKLH/8zvjN3/2fsVbvvqpUL8GkHr0axIEdsZzVa19jgQdFgVxf1Kez1Gfa0ABUo5Mn CK3kMQRxyBMve/j6ugYhmOUy3TSBAE2YaH3GjPAUYoRlNFDB0Ws+xlB+yLA42nxZp3pFl/617iN8 joulLu2CyWq8oW25qE21/7LfK8applGlJtvHyZLGXYTB74l3ix/TmJyctsmzJJM6a8SAxaXHSPGa qsUKGPhcXSkt8kvCWQFzuMyYm4oC9BiEVbWCBa0VDuiHWfBZbwl1bJ2VlW2WbXst1eKNdbxkI/2V Veo999wjTj3nhHjJS18YRx11qE4olsXll38vrr/2Zr1Yd5l5uAIxbZrueU1VjnlGULFFiZJ9JkOd A5R9jpXtlFbBIB22XcgbO1knfCLVHgIgTCVo/xUzaDqfBU851gCz6KiZXC2Dtgs+Z4Ct7ClYybSA xg85NCqaxvTK4xd+pIkdTfYVmITQr4uT8o6BeLAQNrauN1vcBDmPkj75wS3HjBjbOCOdBS6QvUSn kiBpdJGaQLi2R2dpMz1OeIKGyc3ORoO+Lv6Wrg00zltTlptsdm7D4NXPzQuwJcvDWrVLxwbVwtEX vfIsYLZLgBihH4mtfwUTF2WvtjWcdl0qXtOgUJj6YcQwkMVkXSKyzNJb+hpRJxe4BxA54HzaWvih zJKLAQ5FoyeQicOylgQbBr2TB63+fBeY7Cc/TWf+d994bXz3R/fobGpS3HnHQ7F87ba4+vKvxK2P PKOj9Ma499bbY6tuxJ6563StSC2JL3zyH+N7V92llavdY/dZk2PJUyt8TxP86NIVp7jy374cV9z0 oOFPPnxf/MNnvxJT9z8yTjpkvlc1fS+ZKpDbzZiSvPBlZ8fye26Oz33p6tig6tvw7LK45HP/HN// 0X2a22o1Z9OquPyLl8UnL70qNmvCOWePmbHimWWxST7QKBccfVScdsScuPQzl8Rtj62QDZPirmt+ GP/w+W/Gkyt0SU92sYry8M0/jsu+d7Puj5ocyxY9GlfdvjD23XsvHbinxYU/c24svPWa+PK3NHHT E1Ja4osv/OvlsWH3A+OMw2V3OzutMLPvOgqxZaDUvtWQ832z7bmgMJVp1Yipi9YOWKHqBglRCeX6 bt0khbR2a3bpLL2li6EK+TAWrHR2APGByzbcqCwQxkrisqEqm7jgERtXLYuFy7WKtMv0OPS4Q2TD ZO1Z1QoN9E/qPq/SvD026dLhC1/92njFuTlx27x+rdrMM1otjZi1x17xSt1H94Ij53r1tG5i3+/Q Qzxx28zNiUq7aOXs3Fe+Nt7+2vN0qX6TDjZcZteqmfasknOfYw7oJtdmkt7mPjv22nvP2GuvPWL+ /vvHyScd69UzKJ7U5Z9Va7fE+a95fbz9ded74rZ9y8Z4ZvkqC5izzwHx7t9+Rzz/yD1js+yv1YMF hx3qiVtv18w4/+deF7/y6rO0aqE1vEEMJ6u93Xf7PbFkdV7KXXDUsXHIHrvGJjl+9PGHx1xN3Ej3 3XZ3rNPMzRMcQ+Rvaw/IA041sE351F3+Vb2yrwTN0A7DG+FIOxKCE7mkhyqlpO6eUhTdeFZ6qnaT C4rkrn3XBiFQ6sfLHNDLxtrnQbBsYS9vJQR8NT36CG/yL57aCyAN9BXZTIcZT+D1D4asKZpcTwQS kkgp9ZURZMDWeC1SjAKNJOMF9Z8Pgk0MVOKFHa6yNfcJ8wTcBNje6Ko+VCSG/k4yqLLR+X5T+tFR /iOKHwfHylu8ZDeDfHmMJ0a5JHboIQfG29/+xvjYx/5bvOvdb45nn10V/+ODfxu//wd/Hpdd9q14 WldYmLBN9xd4RiNQx04UgSms9VMf8o/+WXaIxClpMy4dTMDRODUqxzHbIPYXjft7KyOjdNByU39e zdAsMfuOaMSd6rSjX9VJhXndfiTHlYGezPtkQ7BOL3ghqe6CIbfGiFTQtqjj11IWoR4AwY3Tobwl 57TpdDWfBySYY/22gYJ/KQDfLKPJG44z+GpS+pYy9Wuk3hWs9gnUttNDR+05PH5gAm3ZZD0SGVk7 gnmQaGUVCSu2cqWkkwfDeALmSznQIRDOlnfG+cz54NqA0Jq+lZOrFQY0OJY2pG5WOooWXZYpGgdA s14G5p2l4isKhVukDVrAYkamOotGIPtUvtluaISGkwBzwz4z7mWLF8Y2nVERVD77sV33ei3Uits0 3Z/ml8aqEriEoXEzHr3vtjjg4BfF//tnfxjz5+0Zu+uS2W6z9MkTTbzwYatkbtu8Ju68/Ql1+Glu UNN0mfTppUtj5Vp9906rG69861vjpc87oLmwPa744ldiwV6z4v57H4wVm3XQnSXbNWFbt+SJ+Nhf /L1sZZllbdx4+z7x6+/77Viw39zYc/ZuMUt6p2x+SmeOEfP32lv55XHb48/EdPlCmq6D5/cvuVSD mOpCg49erRiLlyyOdbq7V1Mz36uBZI1famjTY85uU2Pu/ifE+//ij4zDQF1EiN3EO2/fPRTPJxy/ DGLGP+OLtlYryCLI+ie1XRZqSx0p0XYdBPEQe8Dca+UOZZsEUDx9v6Yo0UVyFasNMag0kOjQr3oS IDuHSfuN4LRBkmmG7R1d8CGjCaRpSFCmBmsl7zZtWh13P7wmDjl39zjioINjzqx74thDdQ/ktk1q Iw/GCfNVv0qI4IWcJ550tO9127D66fjIn/1NXHfv0njbb7433vDyk0Sh1V/iu6QONzBuiW9+8dL4 3rUPxvNf/DPxxp99vtpSxJkvPS8O/PZN8ew2PXxCu0QD/2qfazbmJEncLP/GL//eb8cvbKL2pUHv mJq/9x5GrVm6KL58+ZUxde7B8dqfOcuwjSufir/50N/Gdfc/Ez/35rfEm199ZkzZbV687EUviHsu e8QHQhNu3xRf+8KlccUNj8QLXvLK+MWfOdV1cNZLz49//dr1sbJiJmImtKuXLYqrb300LjrviJiy 615x6qkHxa3ful+TtxOzbWxdFzdoZWOL7iNl3S9rOOOWdaKY6CBD3fCj3wL3i3itKyuKKnK7UzBy XFOphDW5A9OMy0uBCUVm6suy9YjP8bXwJp12A4lk567XQ7tyargs9L7Agw5StUXnAanBGZXqPfAb UKsjFRmaCJpLDqXGUzAooEEXBzOvkiTQW/c7wWHzwa755DYvqOVpY1ubHjPazlRWsaLd+WAlMFMU VU+XYHWvHMjIbMYAUqvWBjuQPFBh/aktEVkDKT77aubZ2uZW7OgkrOJtGo0X3EPKvWx77jk7Tjn5 +LjwwnPj6GMO1/j8THzzmz+Ia3Uv25IlepmuGFhlm6FLpnUPlye6KEJu6fJxJle1sGmY8Mn6TeOW NESnv3Z4BDxaYEWoDUbbdU91KsZDIjuaSnv5XHXkOq46sE2jfNQSCXrI0GfZ2rP6mbDefp9gmg6+ xEPDgQQZ/bG9j1MKFJH50JZpRCcylNzXtc9L7AaVia0wWuS4S+g7C5sc7HR7FM5jgn3pDRivL2wZ pozKwAche1j6nb4KrliVPHSZLo2SAPXD1gaQz/GcJYrs8/Bx728mLOAZxCrvsC8lZayDJUWUCwdT q8Ls4E2KeXByAvFDkMcY8ZS8sXbtMyoOyiwV+s6kMQL4bA8ymmCWZNMm+NKgoY1dwFjOgk+/sqns 6HwW1rwi2rRhM5aYnkBv1z04K3Qg9PvaBjK2aAXiZ976tnjHz50W13zn+/HFKx6P1boH6MATL4hX nqR7fkSrw4yUTo4ZmrBZvxoQsWA1jtU27HjqsUfjzl3WOk8ol65aJyQrdnSWtN03106dFgccsHds XL4s9jnpgvjv7/uFePDWH8c3vqKDpF78OHXeQfHuN71QsUwv8W2q8hwYuBmTSdmuc/eOubrctUj3 FGEP1+9pPHD4AAJQnjwSgwAAQABJREFUiQMPN54/rsnpV753h+/LK3omCY/ev9BP4UKXf8mHDoR1 8lTsDhbyFX8q9nCwepDHHybD+Kp46w+ZPsMTqOpdjC1GKIDO5GzVJjNO5C0fvH6VasCrcu1LF/Kq LZhLwinbDjRZmTfZ1qSPVY9Kk/TU78KHH43t5x4VB+gBkwOed3TsN2dWbF2/LO57eFmcfEFR0ia2 xmUXfyJuPXg/fTJn7zj6jLPjjJfvFSecfFgjkh4GvmrUgj551y3xj//07VithbeHn7wkTn7+Mbo8 u5vmZLPjzHPPjvNedWHMlDlYiFWbpffP3/9Jr8Cl0Emx1z77Rl50TUhtH73jlrj93sUx+9TzYr5e K0LaqsuqB594UmjurrpnVU91J3/5JuOs6Y9QFU4Lb78pPveF78ZanWQ8KrtOkV1H7zMrZu6xdyyY PT2WrxZhFya1qa2b4uYf3xyv1+RNj2fECccdE3te/WScfEJObpc/8WDc8uAzehgXZxgLlFQPPlBm JYy2gdYm0OEzW+xqtmXdmb0BBWH01mAKDScqXErs2qdVqd0059hJtX1l/GS84aEmOgo8hiFDRNCR 2Fm9ALQtZGFHEiBbB3b6p2Qg37TmbBvrTHlIKALTwisy60U+QCX0l5yuD5uQDQldtkIVK3sExja3 b/SZQptGXlwWiq1K6HRZmxrLEyU4JAglIU8/7PFTq2Un7OAaGaTZ3zIOtoXBY0BjUsoQK1U9JV/x J65glKB3e1GGY4ntRLTKyOABoW1aoeZhscMOPTDO071s55xzmlamZ8Wtt94df/Hhi+Ouu/RU9LoN ut9U34PWvWzdpS/xe5IvQyUSI2yz2yl6m5OA+ZpM1pF41O4Yg10/GTDRqj5FlxvxWhQHdsGwNzWo MEjIQLbaob/IgT36c/2IrNpEyRxwdjSWLWOw1eq9zZglfdqAK3lzPu1RlB7cRWGj0xfg2AmKfENh SK8av1QJ+F9wx7O1rWxRWFL293KG9erxXDGrsIDzJExySlv2jZJjkd0GmhxHlFGQbavsJA4+4RB4 qK9jHPBhZRdjyag6qtsbkl9QySTfySMeKtMGDWsGu++6UYjWstvJjyRThnaHLyx0QhtBZ1Ara2fG IRxYJfj5gfeNtK0iCj/clwyRp+FCYthEKV3o6YY0nc2N2c5JEnJrQOlqccj4HHlsQy6d3Cs6kpVn SHpqaOBTd7bS6BG5y+SZcebpx8QdP/xGfOBjl+om8ymxSe/0eOuLXqPPhKzuLivuMmVmnH7uifG1 Wx7RPXC76H6jLXHaMcfF3Bkb4/EV6+OGG/49btHBqiYYmsbECUtWx4XHnhgLdvt2LNkgy/Qy2H1O eF58+IO/EZd84P2x/ZTnxcbH7og/e//H45lNuslbl6jOe/VhOrBmg35q2dOxedrcOOfYA+M+0U3V zeQb9YqGt773vXHu7KXxW3/48RYqGj6DiD5SnyOLPGNpf2MsWb4hTpg5OW656kehO6U04G2O/Y4/ Nd73jlfGVx97KB5RLGrQqBBTF64QN07hBeBg1YpF5j20wIvHdW/ACFlHSx35IioyzZQdabhikm2N WOJT0slMdU7igihb0vixjw7YtzfzI7sdgapzMtAmZ6NF6CAxsXl08aJYo8nVzLkHxAtPODJ2U12s WrgwFq1Zy1w8k9i26unL3fbaN17/xtfEAfvMVTsbCGrZtL2Hr9RHqzU/jGn63M6mjavi7seWevLG NxPnzt0tDtxvvicjHceWqXqvVPpmmE5AfvS9H8SilRsdgn0OOiTOOkPfWBTN8ee/JC749lVxt15r wEkFadb8g2XfwVkYbGfNmuGBrtxZqcu9HHX4VuPmjSvjbq30MnnbRStnu6ntbF8Jcx+rKdN0qf6O O+KxFa+Jw+ZMj0OOOSKOOWlpHLTXTGv5yU236jaFzfJTLzJtMUcXbcOTJGTx734IIi2perKQ2gjl +nVdJR3tkQGUBHisGhOxky0HYMJTK79FZnHNDhvX5Wl/rb00Yg4SHBBLb99GgfVxKtn9PsepjlGI rg8M4uuJIfI7G3oJzjXfMQx+VlJIaGb1Ehs81jUYuJ2n9I/Yl+3E2yIllgM6kjnAlq3U5GhCRlYE NAy5edjqqUp2D9kxhw38d0lyGNUdD/mEDG7z2KyJ25w5s+O0U06IF7/4nDhS97Jx/9o3v3llXHf9 zXpYaKlFsMo2XX2tu2erCcY3WexSO+ZmvuF7EzI2gMdlGIYchPUMLtPm1WqVF2oMB59QnX6XtcGa im8fh17/RPFDNm2x+EqW9whUJ7GvbBxblWtSKebiE9T9CarR1Ou3BBQO/WnEO/Wzw6fkiXwofWlh s3ego8Pbh9F4Fo7g+eqajMOncT2dn9Wu7ccESspejnVCZ6zS9k4XmaajX63ssVC7vRJTVKRj+Z63 oXF5hpDCahm48DhQefaVL3jNUhkEaWp2RTzgCyewk/lxpvnhmaboarLVwaERB7bY7kI0OfTq7NTS YYXI1MGp9JqbAUP8NHA3vqaUUURZNzThsakS/I3VcC7T+TFxabMdDNjApJ8/EgEGxnN5Tz+zNs46 /oQ487TbY7kWzJ7/ohfHmy88OjYuejAOOXTfeEQDF/f0PP/lr453LV0f3732/tj3qGPiPW9/ZTxw /Q/i3seWaVWOy6lpH/K5Wfbq71wZr/zjX4nf+o1fjM9edpUehJgbb/q1X9INVA/Gj+5cGMcftSJ2 2//YeOHZz4s7Fq6Jo593Urz1ra+OqTPW6dUiB8fVep/W9bctite841di6abPxU8efSZOPvuCeNXz D4qvfuKrsXxj+sDqH5rxFn/52DCwSbrf6YqvXxEv/cM3xfv+H93r9o3rYuoe8+Mt7/yVOGLm0li6 Uq8TURwZmKhzeJHgCDmmWV+WKmTFTmQZ/+ZvmyMB9kExDz4qIMOJvbjRZeliFCitbRSiHdYp+e3t RU+uX5Gxz2q3hRghYMsjcJCQba1Uivjg5YDGgYlEGU+rHQKbrFXKpXpSdOmz6+OwuXvGiy/UZUbB Fz70RKxdvdGWQyfumLrrPvFr7/6lOHj+LE2IN8aNP7ourr7uzlhw7Clx0c+d06iYE5V9WjrXQwZu 29iildJ95uqRZpKeYl306JNxw633xK6eeOGnJvO6P3E9r/pIKgV3U1z91a/HlY9oGq6Z5DY9Ifrr f/AH8eqzD9MKycw46KgFcev9eo8hHVNyFt97R3xbD9xMnjHd7XGLnrrDnLXLFscmxbZM4x2IPjuX XVP0nrh95s6yxm3bN8f6DURpNGHbuhVPxzU33h+HvezEmLXXQXHRK7aFHrbVR7zXxI+vu0POTjOf JyCSS0JOviIijyCuAxkBNkmoJwhFqR/0/o6ugG4b2jP99iUM0dl+b5AtasEsOYX1TQMswoRHJ4k2 C4ySbTQ+cUZQVsqd+KFXGQryrHOXLOiytTV+ymVz6YZIVNlXxKtM13SFsXwLBydNnCk0W5OPaYxy GMGv7dCTK0oCAm8muNYyGJ0tSZecFiM93XFDfMXuWEGmVHn3XRXUagSV7TmrEz7ttf8Q60cbz9Ue iowrNMjG1+WUUcJE+ym0qdRfK67WKTT1zcmS38umcfF8rbK94KxTY9bMGXHzTbfHB3VrwF13Pxgb 12/w1z+4NYbkKwLirTgTTkwkNrQjQuVJbhdnsxle1voYJ5t2YSyCodkJZdIIpwxxMa3yeUxr5FJY x0MzwIcRPp4JZ0HeksskfNlcoH6cwogmAy9UrLaGNOxw3aDCdD2eb6BiNeOzVxRV8sohMZc9WbcC KhEd5NlWlfGhs1UZ17uUF95Mps/cyJaJvwG5dbSQoT/rIR5K7CxX+5wA40+zv9EmnaFdn8Ert23s 4a/kKc+/V/aQ72PcMH5IcwB9XGBRAX4xsB3EI9uL5YqcvorgakMmBoI6jIEGAUJAyupqt/JWxuE4 yOFZARU5bPyIGCZ4i38IR5vPaGkNSsioSZzz8Anug4+1qmADBXOWiswGziTJldIIyh6RuVFaUtMD bDzRuNKKHjO0ufNBRBmBnk43t8WShYtitV6r4UuJRHrLplj8+GIdiHTztWRjxMa1a/xW+q16j9ol n/tS7P/ei+L3/9v7tDKyJVY9/WR8UY+Qn3/h2XHR614ef/XFm3XP26r43rdvj5Nf/qq48Be0wrBt Szx0y4/i4k9eFuu3T/alzYEVeupvSjx483Xx0f+1e7z5DS+J9592NsbG8iWPx19+7J9j6bqtccu3 Lo8fHjE3fln3SXHE3bh2lV62+rU4+vSz4q2/8uq4/48+Hp/82MUx6TfepKdU3xlvkQDs/d6X/jW+ wGVQ6Vi2eEnMWLbadUVcqMNnnlwUi7at06WyqXHvtVfFxy7ePd6o15H82QsvsIk81PDnf/XPsXDl Jr8w2IZRH4qN48xlGVEKkvGlLQzaB/VJHLNFWKQIoVZqbYL2VFnyJEiqXXQdpcGzFWn4gK/R1z55 m3wKLdmOou21FbrrBwY0ug6pjK1KJxOsFbBNXCJdtCIOm7cg9pib95M9pHcCrt06o9OwXctnu+27 X+yjB0xIC3XZ+wMf+LtYsX1WvOv0C1PWBNuDTn5enHbcAXHtPU/GieeeF6cdureptm1aF7f95Lb4 2g9vkI6+3zlg02borJLBKtMUXbqnXnn1yEZ9/uHJx/XEnCZvJD6Ds3bZ8line+Jm6hHZGfrdcPXV 8mdlHHvmWfGal57uhxseW7dczXeN6xe+g08+KU456sq44f6n4uTzzoqTD8r32m1a+2ws5qEDTQz7 iqUeZaNWdW+5/pa46KUnxtRZu8WJem8W6emH7o07Hl3hl5tWv/cBchh/8RN26rdqNdHpZ9U79ZMt J7cUaFXFi76JUie32Drd4tR/yYfX44HwjGuOt4E7Sm2imj2JLznY0yCSnbnyvTDeQ4gPIiKbNLR3 sLkHx3vu2APHrMSa1XQc2GGBv2QlbZY7BmdSn+lKWIOzA+5kgaUjQU1LZ2caBFR/jNHo1x+TsxSt ekUex4FJPFlLXrKawT4+INp8qcOTnmZX4ptPgtVL0/eas0eusumTVYcdflAs0cfgv3759+PHP+Ze tmWO11StOM/QSYonRU1lF59OPiZhUMaOfZnnCgGgVCEh36rMdJTNIaa+/lImKuDL6rLUJIdDCPrA 8GAPjJ+fzk+mjn6YKXtF6oRPeaJN7LO/ALNdbUvdoKuxWI91ia6nTI5evms1lbAds6noAPsnWQWD fJinPExIJnUT0kF40iIh5WBeQRGk+ZMy8YM4pRSaFgbYWo7t/GOQZJqe/Fgq24aogkFa+TqxH2O3 AtPYDdnTBHne47YuDmJLTIq52VRFn04gJJ1LpeSTKdnAlzEwkvfAlIVeeEltNCgvPt+wKj7XknbA czafspmt04DQKDZPHm0rfRZnAE6QHH6jsspQUSl1p2/Oi45BwTwQmdhA5RuXDWh55IpmypRt8amP /g0F39wPdtOyx+NP/+gj9odLY7x096Hbb4j/escNwk6JLY/cEX/yhw/ooYH5eh/Lxli8aKkOgFvi W9+8IrZtXB9b9jpcB6OI677zDb3W4UtxsO5Z26zJH/ecbdUBP79ziSZct4POcwJ47Xe+Gbdec43f K7eLnnJdKNkbtZrCJaoNq56Jv/7gX8X8ffbWAwRa9dFNtc/qnREzL/9B6DVgsXoN37RcHB/9wEdj nmjm7DYtntH74pYu171xeqUFr5a79O8uts5pepCBeuFJ26su+XxczWrc5BmaVG6LK7/2lbjhyn/X e73mxPZNG2LRk3qiVQf+KXqtBPH1gCuz3RfYM1mwHxookINLKrvzeSDODgWvz9yqPux1xoDByu2m DwdC9FP8NbiwtOp2qazLWssYxq5EjrA3+YWjvt322x40Ou2TYpFtKpmGcGzg39bIPfKVeBXGA/c+ Fq84eUGC9GLlR+56OCbtfWKR+MC1WffSqBqd5h99fLxDr3+Zsc8hccFZx3Z0fhHtwIFps/eN3/mT 34//dP+iOPzYY2JXxZ90ly71LOGlyqpTmd8lbO76boMOxNnsSarvSlx+XbXkkfjRbY/Gq19wWOx1 8PHxpx/8L3Hng0vihFNOinl78EhLxLce+YkuPfVuz5izIH7v/b8f9zzwZBxx/LExq8m887qb4mmt zk6bna8QgRfz+LYpD+w8cfdd8eDTa+PYfbSCSHuRvTff9JNYrRdIT9OlVeqBKPtklPpwGVCONfiX IwHnDeQrZc416RhIgvY0QO9E1oeJ8a/40AZpXkpMcGlImo5UNG5vtOuhgIFs29dwbvaltcHAk0oP Ra4WlA6w0BQdZ/SVuDfUtw8UoDlU1iILNQlOmaUne1+PK7MQ5Ymy9uZtMq2i2UzeNrU9vvPnuuno ywPgSQ9fOgaOkyyKnbXuw9UX8xIr7VJ4yUef9QxsKDuRabyokcmKHats0zQ+8mqP8897QZxxxslq T1P9XrZLLvmaXlL+UGzcsFH9RSfNGmTdjayjybJPxEDHKcU5j1QosEmodCqfmQTZk4F9EJTdSV3b jBVDmM5xnbyIRs6+JKx0uOSJbo/HDHwl2QYxtmICB1vHz4RJgU0+/uKX5WqMtu9pV9ZIo21Sq5ZK bMqkTaWVE/opEYQD2lTfLNSOXPGAz0lP4svvRp0qm7PVM1KmSiLi9UsEjnGOeYflOh5Za8h2P9EJ c80tPHm1cSU+o+hSBbbzLm1NnFVpI/pG51gonzHVMQjdOFEOtL2Pc/BZUMrMw6T6NOMSLLKVRZhh Qg2e6FDdB7PyVt6oy6DCdWUqWUArbtEtox1IaXDQCKB+mIIDKGY5knKtGoOvFTk7SRCVCDIDVx7M LcHw2nS2NPp6X5ENa0Q+W5Ct2OmJBLmmHxwGYZP1QqNC2cM+A5+6ra/5WnTIYvkbOhnM1mmyBgDu BXvi0ccllPvkdvEj5GtWrlUAtsSsvXfRBE0vUtUAslErMw8+yEfgmYRM6e6DoiE6YWBL5LgktVmf L3rsUa10qLdzOZPv41HFTJL4Jt1Ti56MJTKGy7hTZ0zT6s+60F1NskM61LgZBp956ilN7mS2eKbp 5luS68p2yCf578jhmuTgm22SPzwOv0WvsnjkodWym0vIent4e/0XNHQc+yMmbHYslaGq3IXIA9cP Y3wJweXkc52j0zZAJQbZ5Q4pLuwyTqg606QO8QtqcNWmnBdv1XHF1fUpWlJdQoAXPblr+1re12VJ ePEBkmoDWJOJPW1AHUv1SpqhA8YUrdw+8dgjKuUTm9u1SnX3Er2UeT+9C8pUeuJXk6x1Sx/XU6P3 xEV6P+CM2XPjla95lbHP6Cscc+excjU5Tjv95Pj27bfZBpAb1q6PqbvpfYGn9l9sWHT/7fGZL/17 bNZN1TxEMpKIp4xnou6kh13ySTHFhxjpHri1q1d0LGeedWZ8+Wu3xmWf/lws2OMdcfqxB8S8Aw6O F+mXaVv8+Dvfii9886aYumc/ycSuabvPlV1zO1lP3HNrfO6yH6rf89AO98PlQxBM2lSxgunVN2tW xLVX3x3Hvu50B3nbxmd1gL3LL362J2wU/6xD1bbK2UfdqqyrctQT+EwUWruEWb4aUvhWqdQrrYi9 25dUgDJtmyi53o1HDHLyj7wZJcFiEKVkOP5BWwcThKrfedxQvpt4JEvPh+LCp1H23WNXk40ubKVv WIcauuXKitz39lRsUMCb3UnwogM7+SMhC1+QV/3GGMCNxnzCd/3PnBKlP3i1HaSUi6yy13ExhSGY IFlJl1TJ7npAnm2sHo6KolUeuQOFyNqig/M2jY/7zNtb3xh9XlzworPjwAP3iyeeWByXfemb8eOb boulS5dbLi/SnTZ4YhT7ufrEmOq2hi6VPalADwqUiAX+1iVDbPIxR+QVJ9M1U9NmfOHEIxOi677i oU/lTo1NQ1w3vpaUIsYm5Ye6rQV/mr7aFQv0+EXZdQoBsFb2CaPyvuUoUaZV1mFgnHVtW4DoNOYw 2R62NdsOnv4Eo1L5kCWVW99IWsU0peKMU/qV+bpc7zq3QFnA8Zd60Q8Z/mu8HPHcLkFLBLh8HK+V mS/pz1ESD9M/EuK4REkaxp/xymWPW2JoekyojduqgB1vQyDJ+lt9uO4bM/qzjcuKIoQaopawry7Z +rIpDHZaBBz860WMEGJgh0NhJwjpmXpYMxoe9FlvKmbrnDbItUwiMyITIrCZSm5Bxm2BChi/nMVm YJDNZCkbR8pqqtwACZJ5ReOkCqhku7BRMrukrBs3QlqCbkhTfIVnD57P+ZT9wHxmQ0PS57KeeHSh L7vS+Pk26U+TSmftqWUszXJvH5O2YXIHI07uIIlhQjauteTanwraUNAgT1uZUjEcwCfKIrcm4ZYt opxc0fZUGMQWfp9xEDmcEz5Jev9cOxpw1JKS10HIesoDD1IGqWftgKmSegTkjfdZRmxjKoB0AaoY VSeqcrYB1e22tfG5j39KXwyYEVs3rIkNOko+dtdP4kMf1mVnBXzj6uWxYtP22PDAffHhj37KdfDU E49qwrc1vvTJT+ky4TlxyrH763L2Zt/Ef/1PFsYR+lIBXy7YtPJpf+GiGR2P3HxtfOmaB+L0M07U yqo+cP/oQ3HF96+Np/X4KZdBsanss+P4osvkX/nMP8Z1e+rSpU4k7tE9l6x8UZU8OHDHj38YH1nx qIM+SfdvTtO7/J59apG+sPHReP5Zp8XppxyjFdsZ+oD9irj+qh/H1Tfd7U917VYhlKKHfnx1/NuN j8bpz9fDD7Jr4cP3xxVXXB/LtPI7TX1iq+5j+8zffNKrw+ufXaovOGRLnKQvPtx2t77osP30mCZ5 T95/d9yzcKX6s9oztjv+WQdZLTXE0w/SANea625YX+AyFiN0Dkq2RWJlNpRUGmQ1COSgmmqKwvuu iQygyLLJysBSBydBDc+TR5eMT90DAcrCX/YaM5Ei041QdUKo+64dN2jfHtI5l9PQjs+KKdmo3uFs Ty3myAY1jJGKKQ9/e0SvE6E7T0M6dDFGpM60YdzMcUk8fMC9wbNmzYzjjzk6XvSis+KUU47XJG5b XH/9rfGZT1+iE+VHY5Pe3baLrixwz1unc1AB1iZljC/lRdGx7yPS6qfFAfs4VjDWkfpJeUpxXUhP xy8w8gy3psSULgsZ2OWyNrYBZRPgsHjUwuLace/YNmtsAzJJ7FS5VmHA6Kbsy+NK0tIQ7Auk5sfn Jg/YWEofJnRBlOJFPxMy8kqmT0y3xU9OHpjsJBWU5NL2ATBtI178+7g5gW0CoSfnE4mnPJKaInSX e10cIU31CBphcwEWwUFV1bm+mq/Icz1IhuWPSahYAJ70C697l14fwrQzLfLlLSEo+exAWhKDMBpj lrZ7+QyIOqkaKpVIl+b9OO5wgpu/zQ7KUBsuQznA2miOGMpbEqIHXvUz/tSNLgcJm5pAW4PDwtUZ CsJwHFidoWKblHaVZn50o1iyRvwSaFhhPEXmyQQTH+GGCbrOlmaTefGDhG/Q6I/unGCVTAtNO2iV YJ+R2Su4M7FEOZ44u0G24K1K8sZ+KUCHvUdHKpQdAqqIZLIjqeRA21Szsx+WkQOReTvGZreAiBuJ g8q9juRtVB03GfMZgt6meISil2t7ion9BOReAehQSEcsy+aSI4OqM2wfNhRbAV0JbPWlYvmEJIdB +5SqptQyRYMutzEyMm6TnvLl2EW9s7LEaijfizVWN/AD26aVAV6ii3CvkOpAwr1vm3WJx5eWpY1b C3i1Agcl3wAsvbPmHR1/9T/fF/vqo+73XPWd+K//4x9ji14OjXFMEKZ4xU0HPStrfglXqxrcKMwB jtd88Mf3TD0JbyOgv18qGzzA6UA0Vatzbhqyk88CcUJiTpWxiwkfk8AZc4+Lv/6fvxPz9ITEXVd8 I/7oL/8ltmji57YoXaxGczBzLxIv3zYl7pxE8LAEL3zed9994/xXvTJe8+KTFc/t8W+f+Hh85vJb 9FQ0K4U4gT/6udGrDEw/tl0yDjru9UporWyYXjD09i3CpBZrR5sg163iWWf01C96qq1YtBuXgQ0r vHhIHHjQ65MJr84LJgHNpKYq+7DrWUjwJOswcVLjNmNzWt0kAFS7ti/ClW3VNlNSbt1bk9wAJAxj YvmCISV1qwA9GuUDsVAVwsUmHdGu+pfhCDHKlggHf8rzJEZl+5dkpmXDWDEGMg6dIOr+6/ILsNuU cLQlJonb1J6pnQUL5scLXnBanH/BmTFv/tx46MHH4sorr4ubb7kzli9/1n5wxcN2tDZUzcVxNAK1 +sNv/jBQ8IyX4NjUxm3zqAS9dlB3Y0PiYCUGukQHgeiyLPo2rg/9L5yajvCiYceqmPIcrtgbBpNS tUkfTxNkeMlxQRvWBuD1e8YK2PaItGw12xzV0alfh88cMvmRUlZOrqvc4TQH4HjpOnJwkZXjUSta BpcuScnX/EEVOmrcVt7vWcWaZhC6S1eOA1lP5Rt1kX6kTCtpG+oAvO13kKVOcovSYcVPdDSoaTFr KKjkibZiYXoRlQ788Nyh0XoByJdqU5jrzL5gbUof9smUJFS93y2NMyl0vmzq2XNT0J8dcoCSGfzg p4bHkuGCdRO+AU2aQh3UQCYDJYsK8EGIyYfKyKVjZ1WnDm8bDpXgxlNXeULUBK1gGexmb2O1HgbT gSwmnZiMWR0v9I21dMLTDVIlttlXEyhoieMOqdG1vmY0tqS+pLe9kmv+Md0wYJ+2bLp6GJKV7VCQ p3mWG8nVu1RwZBWf8xLo2DQG0zU7S5dRaQzcsGUiiINkkkbXoyQ9EdprsOVI0NiG9AMxzhIbUmlz 7LqSUZ0fNRjAgq6Mc+ZN2fQl1863zfSeQADDENxkOM4JFF1aVwMT0Z+qy8qZaoDSO/306CTsNbTw 8Mv06e2SYVM6SRMZXtPh1AZ3JOyiRyrdR7QahzYmPKQpksElH83+PMlz/8VMx801mpOHJt9M2sCD BAYykvfKomMXTf4m66cnCLKeIBA//XQy3+zS3n1H4JxkphS0ZRlztKqhS8fb5Qv28okt9rxF3idC kmG7ZafPrnXv5pzDzoi/+LN3RF5MjVi/9NG44to7tUKi+/bwyWbQuklsiXSWs66zHoze6QZ68Um/ o4N+02o7xk4xdU0sLPGSlqYoPo0O2fphdLZXyWm4ncnLezR7PdV+gViUNmUpdtJCLAu5mtU08ZBP mJIi66lsKB3VVoaMppdQj9+dcEE1xtF3O1CLELI8SUWIZ3nSIpgP4jjAcaAZ7NiMKhuW3LagTbqy dkBCwDV205Y28wk1vYj8hONOjBe/+Ow4/oSjY9269XHtNTfFj350Qzyi7+lyojJFty/wUE7ppp9Q X5hmXYi3vemZI9VwRrGR3oxg0hguHswpucCGqayHw7oUuYx3z5Myh1yqX9vCsc1qR5GSUfqQy6Xh 4QrVGLGLZXHZA7BkEIA8hgvruhuVUMe1srt44act0HbN746A7W38KqViGNHbxFebz1dh9TrNJpkc c2HMq15kZafj0sewbKk6gLfyw7lM76v8bq13aFNpB5ZmjxqfdVdUO+49hxIRMao4sfeVNgxS8iKX xdJ/BnVo4aVvzCrADUSMmTulgxr7fV1fwjvjGCXF4DMlTnWg5fxG2XIaQ0aDkQ5D101jEcPs25WA vqYUXl5JQMUwBKUKcVJOHivDcRqB9uKEbCQNV1kUssS1EdK2CcSkruw0jY+uSEp/WSskGdIaLWE1 QLRgU3fKz8NPWuKYKJh5VpiwjgGhA5MsEz2IhlQ47PIZHbTK20vZkC40eeC6lAKrDijRYGjg5m0y IU9K7dEx8NF+wYcdRSeF2NQ1uFLd5IHrjjzK9im1sK0YV52g1aGG2ALIVBRkrarasTQRisBXogMk W9Zr6jFWsqizsrU4sp4Rk4IcW9Eip0sjOhKa+CTCzB1JaCe9EOJM7LokAamz0TRfbXfRgWoOZVZb rfz5BEYox64aWid4PIMebAGujQL47DK9sHaDngzWZ6ryBbH4Sz+VRbKZGKUJOemy7uROOaIpvLVB oJQwagsbKaumJLO5IKiAoq121THZuC22a5Le47Z0xWqhWo8BJwGocJvNrm65IulwrE6uXesPn8Ya ffbt3z7/xVj07OacSIoMMYwb2Oi4aU9yHzSwOWFNYCpmZEXAP3SWACzHtUQUL/hMbmcjPKLRv+0Y Gy8st7UVVOTQhUzqowns7EqA206ppc7Q5f6ofMHLViS5zizd9VtS81iZDMY2O9Dd9V3DBvEQc+nA PnxFAmPGsGX4wN3kQUesvYaCseZg37L2NdubschECQWM9B4uNMn7NDlpaAduF1qhtQ1Dmcor+Vil SRffGOVhqkMOOSjOPfeMOOvs02K2JnB33/VAXPx3n4/b9Km1lav0DkUdZ/he7xStHNu3trWsMlv2 uR6kk76dTbPZB0YwIqINwckdkGa8JxZcuaoEg1LymUncamcaqwn4sN3anEabsVT/EEutyDg8qLbM Ybxgyrqkj3qCIGFpHfRwNnwpASs5prFMk2iTiRV/SJv5yhSmerEldjRZh6nblK1fOi/ewpdA9GZb wM5MNYZAa3ohCgZFeoF+YfEXoH2zNEqdwSXTIEKtduI6MAJJQwrYsr7dPC0bGqgYs3r51X5dBzuK sRz4TEdGKWMom0VvWVJt/yi7s5Yu6qji0nhzB6NSKrRuF/EJhAXGpNf9/K9LRwYHfEOl0G6dum+c JciXTWEYJr2QBFmTvGLgJp/lmuTIlqEuqiUTRqZDHUxW1VcEhoGBHhv08ZJkHWy7m97FaztFh0Uk rEmLegYqigAPU7mMPer7I5WSQSNCSn75ijOSmxMKLsdhqyvMg5s6YiM3D2wqc5DCvoli2F/SG9eN dv0N5GZdoLPqZ8d4VkxKf7/HMJyXzGYjZyq+tIaNYMZiY/oGTN3YKEKc1P+2FpOhnb6WPR7ktqIk jlQkEZXaocH6uZQ9XvfQodvxk1zU+zUIJUB718GAplC9zSmXlS9qi4O4D0jwUi/N3tJR/OwrwhPh qhag40BDDCu4Q7mASSXLhYqJ49sCX7AuTtiqwUV27777TLfPdRvWx7oNumRkZWnB0LaqfyTSdCDz YCjPs0e0CdZYHblaMzo6oKAXKxNqZc02pHhgtQG76CCqD9krv0GrH+v1EulJWr0bTcjCCpLk4a/l c/l1Zuy3396+hPrMU0/H8lXrdalVUbLu3GU2B16kZF1lG656s+iRjepUOsZcVBwqXsgZYXDBcVSu LsdIguLHD81Ze7S9jKQgrW/sKAkXUz8H8tYy1DVSRhdDMVZkJpLx3DBJtY7hmCdLFWvHadiumqDx mklw2uStY6KNeIdtCon5vkRwTQq6aVmKR96VgFbhrDejliFGllAUhrYJBi8o2ttwbATO7TjctzZ3 bx7OOTEu0L1shx12oB84uPqqG/yKj0WLn/RBe7Ke/EfJUKvEOiHLY1wBtPcNP7KFBYSalEmAMGMy BvXVqj/jK16f1MjXlM99dM11YoAkfMK/tjew5MHngGSrGqWBl7hiT/J7cldjrWMIbpAc85SYMdfK NwYpWQ7VNrADn4f6B5Iy2+zs4QhIyYycpIo1cvEYX4dJhxavyue42HCd3JInG+0nu96mkoMHY56q TGyKou1pgNSzfrnAIXiTO6QsvJD6y3ry+DqIjRU2+cOYlZwdYaojhYRw81oan/wUsfa9vekz/Iwh lTKamNt76pi1suNqct1vXkzPta/ZIoxmFrEblFx2ajsMsTNtXoU+UPB0pihDlyA1NufHN8gZJmTk EmRCwY7zj/NAORFdShjbNnWdjEFA7VMrF35c95i0n644NG5Mf8V5KIjJVX0qCu8xyZ1GsSpzhyKH vKN56glIDih0aMr2TftR30AkJFm8tbi0Ubxejmo0EtTIR1VOVIK2iSt/kWLYqBETcXcwTy5UKhlV Rx3BWAY8Ohw/7U1f9YucMfoqogdzS0/BSx+dzPYLQf/IM2BqKBO8Xvq2LkH1n7qVteBGOL7rbGy2 6R6IZ1f4EwUaEXXoocenuI6zs8kWgy4rOhLDajUnPRvFjbNYps8cocOvUZnc17NCdiHLB0S1izzw tIGxFz+aczw0iOmVM48+/LjjS5y4mdxJ/lfMe79GRVAa8YF4DlLyY0+2+URRbrm2Lz1Au9oEN3CV bInfMQpwZhrVBawO3uTTFkNb2yNvwe6PvRZs2lGWqf/DjfmslxiOk6dj0IBklHYeMtNqA0mLWdlB 2Zw2sfKCqOO3UgoA5ABbCFJboj0kZdkHAtIaO7CGyRoHQL7eceyxR/hzVafq3X9ckr/5pjviy1/6 RtynV3ys0yt2Jusr3Tx0I6T92MHVptn22CZcLqpW0wXPSBSH9kWXIMjsuop45hK2m7/v70Y9xybp RYCQzhayo/pGRQxwplMcbcSwXf+U7QWbUU7QB2JH9WUJVRx/SUP7gAxZyZuqxRJ6kotFWLiuDB4u fDC5y0M9KUM0wqfOYk76Du9i1mePaTkxZqtLH1CZrT7jBVXpL150YTy2jNtTNBPtkdPV70QEFmvp I9ghz7iH4GwDbEJOmZSnSYiykDxTU96czSnl7ZTAjrEp1QEbDfe5INRDtGCeeSaynYW15T4rpYPX oIwAC+n0exHJSkRXK1mNz1XSTAPEj9Q5XKIkM48x6Bqm0VLee6fOLqVV3fLEDBxM7Y9sgavT0c3Q e7n47hk+q4EVIHWIrOzRM5NyF5wP2AhXvhpVDV4GNxVVabvtsXusW7tOZ5e5KlixQ1ba2NvURacJ 5KbPCg9VnjLtIQZgQks5SbZNCO24Ct/vkYGEOmvpfLAxKdB6ROOzRe1B7dLaXPll+1vcvFBjVmok ZZSVOSWQLPnfyWgytXPske8zGerNMrtzGbkETLyWK0pPelT3zfmkT3Dlqc8ObyUZu2HbaOBcoVIB cdiamdYGDdMZufb2zHvyWIxNbDM+6CR1cW1l6yRAKteZNFR9/NJW214Vyhm6dTc7EIw8w1JLFtIO ICTsnKwNNnnbBu60DAJbk/1b8rCBye3oU87YhjRrsF74c1JrMCXzUsJCHrYg0SPRgFyeHPdqTAkz RW7wNf1N/oSm1T1Z2obbOOTVB3wrZ7TXCCWfZYGJWnt1e6E9EIHCyV6JyXv+JFdx8RceUNZWEuyf ZNqKJo9AIBsYybmKoe0gDkLkJneN2mDzqFW1ZlVtElkkYmdWyZInhuUWzxDb9JsING0IYeCyLrEp e7RgYqr4wM/lQa+sQ88fDUQIcJX85QoVtlX/LoTlIhtefsnISlfGG0xK4lNcPMjCK432338fvY/t lHjheWfGfD188OgjC+PSL3xdDx/cHkv1bko4eCfb9Bn5fWjLxk/JpT9NmKo+hKw+5FjijzizmRNL yi1VvTa/gKa1ZESnQpURn3e2FlFhREP9Sy7RBlpjmIAqZSLHz3iE6d/14z155FAf1FbmzUHBXMWt oohFar1Zw+QFK5lmqdZCIWkzB7uFNjg7lZu/oMCy2tzHOv3DT/QOU/Z5mGyRUdlPespsV2kD+Uq1 Qm31GK80qfWdig0a85hvbNJgGX0YenVSFj/svPmFsoqEYbPvkYNFbbDmNHBTY1ardpBtBTFlX8YT hRWvCpvjIEbDWxui39hO9BUhzEq2IbMeXtNywVuASz4kXKF7zpW3EeXm0KbFGpxE9ADwEySTFZPw XsUrvyegH66uFTp1VWl0Xw5BU7FIu5Ou8MWVdGMGiJcq+j9JvU1uGl3Fl4zCdxUgRAtdkXQaWWXg wDGeSgZwVrd+/Z1viq9//fv6OPL9utm7r7ohnWkdi1F5RYMNeSBk0gI1SVY244adJnH/d7YWX0qe Q2Se3UGNJTnkNNPoHfpngKU113A0KgyX8LVzrUOnj45Dczy1JL15GjyX2nsJFbtOFDr0SwprHKKI ZtrQBZhBtPXARsk9GZu1srAL7/pT/XekA0mEiydPwfGkJvfweBIu3rJpov2wzWOLBwztKxVPeZj7 JrOADDKNZyhvRAaGNbHjMevpyEFEnZTwwuZ+yGt7PeCqfXJgoK6lJznZ9n6UlLSvh7uZtbaWcR0M sJLk1U8kNfvZoaGXIFzjZz+Eo9MQqrO5kxMqqBqldw0JAwk5TWbeDjAu1SSiaQeI5CoV3sNex5+S 1ci8c3REtLP6Mg9qbRr9qPrJjrYM5VqvDmj2W6RjnpmUSU/GOuNTNTaUM56vesdeLovy5PIcffng eSceExfoadGjjz481qxZF9ddd0tcc80Nnrxt1dPZXEofjn8pl/hWLmtiGIeK10S2Fw5u8r6vsoS5 TofxmUhC6v2ptpJb0sbtQ3fdAgLN0C5kdybtRBF4H181NhJ/4luprEbmRPqLbrgv/u4SdjdhEZXk 0H4mOm4NZVS+98WeGZx9riyTSKBqSJ5EIVu/RuidbTdsx9ZlSBPV8SX3TrcpvqLRkw3bpYftMhFS 8vx2ZOsEDPVXvvpGRzTIFM0A5PgOaqpDdbQyPt/zNnIwqEE7La5tzthHB+ASVI0QfwyTpTvgpAw6 AsbZFalrWlJSQ2c2OszOTmTCwYbAegbdYOjp9FdADesP7j0+CXw9mWgy4tAgK7IYV3nJLx+AdfmB LWRNbrE9TekjdjU8QsgfcqpTlC6zo7sl+OGtxNNSxx13dJxx5ql+se+99z1kVNkEfeVBVBkZ+bQY HQFbjGxdO1cNANmOpp4dHdJnBWJS1nVhdAqwrqqDxmYxHBSdzMPqRPqMEGxJ2mySyAU2npJyFGOp zQE/bSMm/K04j8twLKygl4PujJE0gEMe+5bIdXFr8MKO+Nj0FswH2xLCkVUJ0bQr05hethaDvOYw eNSpp8XRB82NR+65M+6498m8H0Tt0e3eFGLQJ6TOv+D02GvWpLjr5pviwSfXeuXFm7JRe+y27Yq/ Vds34pt/Nqo2zQ5i4bjKSahksMMB3CTAnVF5AIOalF1YPC4nzIixTZ2Y1EHJvM0+jyl4TLmllEt7 xqIebr6RMgYS66KRJcpmW0lhGSJsS99sq03NekoM2OSrMtzALJvYFsCTSmSlfR7kVec8u2B6KU+d jRe+ApScJtdmFw66lgqE7mqPGQdbIarUXbc6wNbRoUM/bCHB14VH5d7/tNdliEs02cZgf1R2ssyS CmRcbsqjNTgn0s7mgWzLSgpnt2pcY8LGJ6iOOvJQP3xw+uknxUyV77jjnvjb//XZuOOu+2L16rU+ eZ3KU9B6xU53MmLbm4IWOMauahO17/Rm0HHScTE7Ng9sbLWd9osgUcTUTtl6j2ulT5Aaz2tMrHLV C/rraGT7AAxS2Vl1RxnbKg3xBWNfcOfd8JVTB6IfeHVZ1ueJeusXSC13ta+2MZSDLCfh3a5h8TES aEaDXPEAIW/bW/8ouqKpuMA3TKUfmGWQUX/yp/uIbxHUpDHNl3hFU/mSD9t4Snm9vc41ecWHzaQq j8twWSR9PaodVJyFzPrqAWUufNYv+aVjeDyoMJbekQnwUAiCmo0lk72T4F6+KSEFbye7jSgDRYFl 7lz1KMrcd/wSqJiWbR1R4dkTLhoXiTzL437UuTXXvIzLmQMdLBsFtJXvAwmUuu5XIZoIQcU9xmti YzKHbuZutkL7GoBp7JWg+Y+TPZK+nhLdpKGsJEh4Neai6znHciVU+xe/+BwNEpPi1NNO1NvCT47r 9PkjPu8yUSq5aOtf95LeVOyHNH3cFOdWsKXod51mXdACKibFP9Sf3gGBntVE3WQMh+SA6/E0eGo4 ceYoXym0RLtFT3aSBmxCkrxvH8VTdtW+GzRFYH3aV0zgKZug48AFHzB3ulQCWUfnAmXoZF8O9iml dCYxxid1ikF7s1eTrJf/4uvj/CP3jsdvXRB/+IFPxybiZUJRqZK26T1x+x19arzrPW+OGZJzybOP xr0LV+tD7bniKukYYRs6PakOo9zH0pMGLFthLLucSQ8sr0fZliGssSC6pYR4W/LS0SLIvSqRgx0k +Ae/ZTQeiLoBrtEYRl6tx8bCZ6YWbZU9TR3IgMdEho0i0Isk7GC8KWyf60IyaguU+s/2V/WHIjhl kOTVZAeoAO2XGqr/5+tRTKBNr9UuGSxY05MyUqdRxC7FpQAXes4ENvtTiONc8In2tsAym5zu4NxT D1XuqK2nq1yO2NiKI7JH+4n4OJlkwsZYtt++8/US55Pi3Beeofez7aPP/C2Jr3/te3GjPof2tL4v Sn3xTja+UlKpxoLOPscDbPlCLDtssY3Ua3+4rZrsLSU2Q34kudUNRIKvcWVE1gR6k3uEWRomTsid OGpJP7TLcdhBH4FvkQBH2+lUketLclLF8kLZJqvkEpF6OI5BZmfHfuRk9MbkV30gp8nGFDQijaR7 trxHJwkJ1tv2th/5ndlgqQ386oCC5QS65NS+9MJFW/KkuukykzZFQ9knYwN8TcJ72so5tMlbxsmc cpPje9lQMvLyrltXR1hxgHHUG+kRAJ7ydWgnVlDuJm+lrDevzxXjBCp6op3kirdDE8TmpQ/hiqxX bIiwErErntoDJ88PO/lVoE3T5EE3TEP+Dt5kdOX/S5myp8Rh44T6RbAzePEO91t1w+4BB+wXZ+tx eBJ6fvGNr44777o31q/fkA2yMZRO5JM3PXll+O3QQKAZi13xeo8A8JDpjwluCXlOH6woZedlUPER D+RZUttb9HPHqewxK9zMuCXa75qSbeP4onuufdme9mRskOkzPhgniMtzyStcyaXD7Txhsy6N8Wi+ 0gHHHh9HLZgTty1arbokZlnHm/QJs+edcZonblqr5oS0i1zJ5oZurMdcPk/WJcnANwYR4lSJ7zY2 bxuoPcUnAVDxMuDqm8XDngMuctDDQM5TulQDqZcufTwRmERul9R9nqiw2twYzCS9OCRaYsbXE8aa YTogLxAHjl+tJljxBBtkZR2krSkzYWh3hATEn6qrCcQYBH3xJ43kKMMKIjFyxBwPoBOn6oPUjcMi stpPxNHbn9g6yZuIdgjLAwQ+4+sQs2PeXogGXWVfwYZ1uSPnENLagkBdHF1P1QZHJaGHCRv+7Lnn 7Dj++KP98MGxxx4ZGzSG3fDjW+Mf/uFf42E9rMKXD4gXkzYHfKj2ufL49H/EQF1k+xvGYiIVWS9t zEGL2nJ5WuEuWUP+ig00oxFJqh14TJj1UrxDecN82TRRn7CYXMKeUO9Qzni+5BJNbKY9MXJPtGhT vPjhcWMiJy0DizIRN+TtLKEfeST2O8RonFH0Qx7QlMeTYcjl1/DZb5KydEI3Ef+E8gRspo6gvXBB 3CZCjlDuvDAMZdk0Li9P42mQ1Rw1OA+JfhpHyoRS4mGytA9m99BB48FvxDEC2qQIXqiyA57K1750 UhGdqk5EQoa2d3wS7obW7PDBRjBuXh3qGbFRuOdKQ76iK1jZUOVxfJU5g+9sbPpYTuVAc8H5L/D3 +Li8sHbN2ti4cbMvMXznO1d64mteCSors9/m8MKEoJPbaIqO2JGIln/ERr9KjoEwu+heK78hXOSF Rmb5lvIHbUhnVr60gfgmzjT2kVmIEMgqRRPtdSBCFzT5NGvmfYACWrYP7BiKKZ9d10ME8gY8HFDw Azqbi1Jo+GtnVT5DavYa2+hhSB6z9HEGqDRS56oUwMjlvjU6+IZVq2LybnvEueccHz/5l2v0gdO8 34mJ3Yzd58WLXnBMPPvs8thNNPa3yeVy0y5TpseCA+fFDN37uEVPaS558qnYuJWJkIj0v1VfQpg5 ew9913FPtW19kmvd2nhyyVKtOurSk5oGX1XZIj/223+/2FXfvt2mLyQsX7o0Vqze6JfrEiNa0Bat AE7ffXbsM3dPHVD1pYfNm+Kpp5bG+o168ame7JMIV8wm6Zszb27Mmb2rYNv1vrdletWHXrw7Z7a+ w7s+NujD8tDyJvzJU2X7/vNierP9ycVP6f4/2Y5hg/Eip6bIr4MsIwsKSW4Z2lFuRoyNXSbTxhPP 1mYapVFVP+oh+qNOqPPsN+Lq69PUogGv+W+1ELigLos6TA9IzmSwPHRUIktzy7sNsv/vOGHr6eFL HlZpm1DBsi8mrqzJZtzTmBdLm7jqHxkDsHlIHdUGHLmj0CpZr/AZvaQrudzewL1jPC06c+YM3b92 cJxzzulx2mnPc/muu++PT1z8T7o8em+sWqXvI6vd8sLp7mqClND/kF1pmC8Ye9eb9nWiMm5v0dhO 2ks5AKKlPLlIhMeEQawgIZ6dXBWqlRR/0gguPzL2Q0w7cRgFdfKy/qRbOip+RdrhBCj96ae8wSY7 o3HDcaLHJF3RJoAtceTXp+pfPvY1MPrSfvbZ78rXKpeErqz24eOoCIExlvrY4b45qpMID8PfyWhC sZsf8EojvsAvPKno0F1yqbvhpMx00JJR6qWmraWnZFIuGPTAC0d5PHUPfCJ4MHZAhx3Vn3ubkJ/1 1I9lvVTfXtL8k2IMMHJoU1G3yVsaaWB5WRTaT8Q4QHfO/Ud0Q56d5ScK1EQw+IFPpHMi+iGs8lT6 RPw7s20I35nuokEuNKUL+DD/H+mtamDgu/ueB+NLX/5WvOPtb9QlhOnxl3/5d/rA8gK/od6dppRq 3+lVc5V3A8zOswwARdvbiO3wlyXPwe8GJrpS50uAVYCPOI/GYufSGkYyGQCq8Y/QE9dWd729IxQj sS5MT5u2Ua5f0fy0+77+kDHOlbCqC2OxF33EU+on6fLnmsUPx32b58Xp55wZc7/641ip750ia4sm QkefcEIcstfU+MF3r40XvvylXS0wcdvjoCPi1972+jj9pMNjsgerbXH7ddfEpz7zlVj0zDoJ3xZH nXamaH4+jjhgL616SOHWDXHjVVfFpz9/eSxfo++ezto9LvrlX4pXXHCK5owacGXP0088HJf+8xfj ihsf9MQMXceecXb88pt/No44cG9N3Pj0VsSDd/wkPn3xv8b9T63RAVc3WU+eFi959c/G6195Tsyf s6v0bY2VyxbF175xQ5yrt95f/81L44vfvUu022POoUfH29/2ujjthENlJq++2Rq3XvMj2/7USr3y gQmcU8aQNlhthzDzI676nyDuyTnRlslyC/0Imnjn6gWS/6OU7Sap0r5RjolgRdHz0uawn4aAfgwb aSuAWio8xWpzQ5gnGgb8NPaX1J3vq4+UfUPKEZwIqjykwR4mbDx1vGD/fX2Lx9nnnh777jMvFi58 0g9c3Xzz7bFkydP2hxU2fz6O+hlPuNSHTVESQP+q/RF4svWxL7sm8sEiMoCtDkaVVj04mqKbUMaA pXTZMCwb2DsgG9Qz0CTqeXvK54Rht1fSB7Fv+tIlW+16KT+qzfQa+hw8xHQiGuO0GcotH5EwbqfL lseUZCdB6FU7N5RR+aEtBRuyDWGVT69FpeD3k6Qh18T54i+dVZ6YehQ6TovHxNLHK49ZST9ONywP 81CXHeSHuM4/EIPkBxYo12xwSIgABA4FJe0obEjTGdAEedB0XWojGPiiL9qS77Jn69Ii2mw4aJzY McsRruNvdBz0pQQ2p9I3Ubl42Y/TFf1wP05T/NCAI+2sARXeRGMbwlU2YDt5LifTGG77yV2+7LDy 2dWx37HztQIyORYvXuIBEr5KQ1sydhlr8H00HFqHx3GSgHxrPR01fyUPypRTMUZKaixdvVzOuErP YBBDgIiGcioOKWNA2ysmmF690yzNdoFiUIC3hdlw8iW7Z+/txj7TiNeWm5i6Bt7L7nkzBx+6vfN2 dFP+4xyySD3MUNtVvrawiUrEmsTYlu3r44Zrrotz3vXaOO3I+fHdO5+KaSzDaFXt9HPPjg1LHoxb H3o6XszSGZz6oPy0uQfEf/7d98Qxe26Kf/7438f9i5+N/Q47Ot78y6+NP9hjevx///1TsWHGgnjn u98as9c/Fn/xgc/GirVb47hTz4i3vO4/xeZVz8Rffup7cfarXhU//9LT4tuXfTGuvsqRssMAAEAA SURBVOHBmLnHvPiFX3pdvOc3fyWe+J0PaGK2OvY67H/T9iZg211lfe/KTEhCJhISSELmiZABwmyp elEqYtXWggqihTq0cK469Nij9tL21Oucantsa1utXu3RAmIrUD0VZVZGGUJIQhICIQmZRzIPZE7O /fvf67/2vfe7n/f7PqDrfZ+91rqH/z2stfdez97Ps5/T28/+3BvbEzd+uf2bf/mOdsc9D7Znnnha e9Pf/9vtjT9yR/tn/+aP2sOP7dle/MrvaW/5kVe2qy85r/36b32i3ffIbu2cl768veGNf1dz4tL9 94l5/Fjb9+nHtn/8829ux+97f3v7f/idduWt97SjTj69vf71f6v9k/id1l/5v9/WHorMZLQKOTb0 STA5mzjkesp3jIFkik4XzTEWjLSFxBzo+hofzYM+3JOJDoadbFLlUMc2/+WD6fB4U7FWNOIh6PmA 77loTNqwIToYQtPccmypE/RycrBz4Bqb449zY5p9SjsZUNWxvORCKHM+yeHPLLRkaUxYT/B4j1i2 tUPjCu2Zzz1Nt0VPii8h8GWD8z57QfvdT32+XXPN9e2Rhx+JXzzYU288Z77hv51MJ2I7UWb+Qe72 ETWOZdyfCUllGkv0Un6yAc1F1FnA5sxrXUMJ4czXnOee7JDTLTGmRB4N0g/GR9kvtokHjLzdH4eP LQvdzN2IZOh2PetnUHZLdkgjbyrng5siUz7pg4WYNJRz5xk5qDlc6UW6MDyCO9PPvrSk5osQQh/+ S222sU29ESauFVnFE1rLtwPOI/sH51W8E479n1navgMWOPYncxOzoZyv1hAsD69imM45WWO9pryg jStvPfPBzoQiZ8CFzmp3LutBY1B9Sde0Sb0GD1VOe/EmsdQxdvLnNOl13dklR+nnBr1lAbPiLfnL vgd8Dcuy8HgxMbaTQx6+41K/0zSJO45luD3F55vuvPOueLL+/rrt8NBDD6MmHE3SjpeYkSMWHpkq ybGhy4jUWy7Qa3ZsE/rOlmEm9zypDZyyc9Fc2t5oI7A2yWLG+BG28kh/tYgeYx1/8rP4s5T3eAgJ XAuMhgk7rrGnxA57okjRru65517ty1+4tN389b/TXvJt57aPXPyncTB5ou132PHt5c9/drvwPW9t t98ftwG6ucfilyxe9IpXtDOO2qf9h1/5jfa+z31Vj0y4MBb3t8WvSv2f/9v3tZee8b72iXsOb0cf unf78Dv+sn34o59vT913n/bFL321Pe2oZ7ezjzmq7bf/3u1ZJ53Qnrjv+vbOd76/3Xpf3NJ84jJh /MrP/GA76egD2xevv6edfOrJ7aA9Hmq/8R9/v3308tta/Dxpu+Cir7SDjjm9vebMY9pT43dZ4+EO 7Xu//9vbHVdfHFeE/0u76V6+LdbapRd/pT2x51Paa15xRt4+i9uiL37lK9qpz9it/dtf+vftgxdd p9umF114Wfvaw7u1X/nJV7WXnv7h9sGLb45nd81vKOS49fnrBbWT6GHfMEZ1XuSciWT2sc03rHGE 0q0uA7jeMMaz8WRezQsnc2hLulHxofqEdoaSdM/BijB0Ee5FnxOmjT/dp6246cWEae2sLY+UbYgz YrT8MhpMxm3ROM49Eb8tut/++7cTzzg2boue284++3QtzC6++LL27//977Uvf+kKPe6D4yeP99g7 vnzgoTM69cy+GFspkzy5YjE5ea7lS1Fhb6MrUvjqWAdGqEq76AzeLjYMsTVLBWhLTgsvmsbwvm7u 3O8pXvNnE82LuhiXZXHOa87sr1E9Dxlb3LUO9Sb37R/1pnm29MV92+HiAcaEtcmQlUpNzhxDIU/N Fcern875pLBrra3xMs92HaPi6IJKh7B/8J3nil4Wb0m2kAHdt5Lp7lNbxjz3M7W4kGnmYAnPcq4r Ro6GpxOcvJKFbJVPznw77G4Ilnmh3JYE2x+wh36HrX3bXi44EbWcsZBZFuNbxnrGtfyabsq2dsft d7an7rdv2/ep+86+rKAFX/ffvnBgXfVVYP3StmdHZMV69iPzlIkCa1mW8pXPgZNS952U9xiWAaiK qSU95HPWVAH87P1oTM1oVWNVhUGPQo6mHaPgiJsHK5qyO+ZJWrAdzeORMylu3Ix4u4SuQBOR/Om4 cbB94M4b28fPv6r93Rc9vx353z7Yrrn9wXb2OWe3p+/zSPy49iXtySPPSgT8jx+7PyOeMH//DVe2 G+9/rJ1y6gla2PGZvAduuiluu7Z2ynNPaB9+95XttnsfbS9/1fe3O+7bvZ3/xavb7Xfc1f7wN/9t e99+e7X4THi749rr2+7f9m3tp9/yhvan7/9Uu+HW29tNl36u/cLPX9Eee+iBmGdPaVee/5n2S1dc 0G698/F24onHtn3i282HHnlMO/e0I+Pq4K2RrNb2PfSZ7dhYKH7kA59uN9wdV9fi83PEvsdjj7aP fvRT7fu+8zmKeY99ntLODN/vufYr7eYHWzs1fFcW4phw//U3tvsf272dePpx7QMX3hjYW/efmmjw M789nRF/LUyFiT8NGDTeSurTh50MLadIErbqcVxIf7wPZ43FHMeZbajYj781XOjwl/u9sWwDTMl0 LNvgs2H5kZkpLnj223LUtrHGMz+vvuPVVLbqYSvelEZAvInkKuree+/Tjjvu6PbimLcveNHZej7b 1V+9vr37XX/eLrzo0nb71+7Uon3vvfbSvKnekhdy4JLtTogOrbVjDkrwkLePxsh9u2N0Ij2uUiFr edsGKahWH7VzhVxYGfQtje4LErIam/RuklxiJNqEaVuek8IJNn6ZB5r8X9CGFZJBIcZ+nO6UpJct 9Ml6YURz2AsBxUF8Awit0ZkppsycZ6xl/DPF6OSYRKwr58ul7K70bX+TjvkjF+Ruk/AKfeiHXj3H VrrVTHPf83BJN38LPZModuWxf4zFmxcNBjfYsg8dEF7weBnUtXWZKv6Dt/Vyb5HsTiKPLC9Im/B9 adTTRsmPgLb6kDZ4x6G/UODwTTG2B8D91Mg4oZmePuUwCyF8FE5XqB/2tx/oUuj7ZZrpEoiN7dS+ 2/j4tVi8cTA88GkHxELuLrHWMGHYvusA1+IFj9Mj6sg1fz0O1x1Y9KVP4nX8LXGEjRmGsLsGNsKw KsYiUwdStMlxpWUubCvruYwWrGgHEH/E4riANvxoTwbnsL1X/UbU+uTNRZYGI6lkUBcAouvFIRrO jeeWgjdQYCKDzT2ffKyd/8nPtte8/Efai886tn31I1e3l/31F7U7rvhiu+Ta29sxR/WFTNjlCtFe ezzR9n/mKe2Xf/WXQDCi6n3i1xd2j2fDPX7vDe0//c5/a3/v9a9ur/8HP9FeHzZuuObadtHnzm// 359/ItSeaJ/68J+1o5+5f/uOl3xb++W/9h3tgXvuaFddfkX7wHs/3D5zyd1hZ/d23/33t7Nf9sr2 D17xovbMww6M+Jq+HfjkHvu0x+OKIEHse9D+EcOT8WWH2/XA4dwvI1MhfN/t97ZH46GqxKkfCQ/f Dzz6Oe2f/V8nbfU9vlG7++57ly/MTOOtMe7j5ysHHLxMX86dTIoyPPKDbH7Qm6XblLccp6B0fNdD MRoeS2jJR94ScTTRwaC/OZgYXSaxJwziSt25raRXmtvDFGrWzRlkoKxji07a6oKdk0e8nDHG8zF/ KPeGMeyzfqYqbtnHAMVvzx7env+8M3WV7eijntlu+9od7ZOfOK997nMX6UtVfKt0j93jtmjc+mee 4TCeZIp6jrqdad9IguOlx740jyCIZb/Jj+OERMl3ouSWHOdxJfvCDlnfunRs1WbVT9j52I0c4lsY 4BikX2lQQp3VCQUM/KgFv4kMMhjw8RNq+ghj0kAGunjIl7mL1DgORtu/GDFpZwtd7PACXF8A09D4 2ALDRv3GCd9MS5xwQm9+7INxhRmxesxEj3vpxE8J7we6+qJnDjMfEtOGhdzSrnMwSYHZSzcyk1n6 bdleG9+RDkeLnPEyxswDbRfzjWU6teWqrvnQ/BpvUILmTFc8W6s5MR+MsXgzeK1tnNrFyq7tiPvI VXnrLWnIV9qm9nYHGGMzK/GwruCrP8g5ApJkW64tiy2fFDYdWCwL5s6UpY2d0VmTwR9+N5Kv0vN8 JL5Wb2zL1779rLTaRod+pdG2HjklV/QtowkW/W+usIiX8QHD6PHuMwxN9gc3/URmmuKFSRO8b8qt eR4W6CP+Jf0b7oe/no98fvG6L1/aLr/94fbSlzyvffKa3doLTj60ffTt72z3PpRjgB2NQeRnr1i8 f+2yi9tvv+P97bG47WocvqHK7Yd74tb6HnH160uf+Xj75YsvaMefcGw74vDD2vNf8oL2qtf+YDv1 xCPbr/7rd7T7Y7H2+//ht9r7/ucx7ZgjD2vHnRS/HfkdL23/+y+d0X77//nN9oHzrm2vft3r2099 /4va5z/2kfaut17c7o+fZrv1a3e1F37369obvv0Ahf/oQ4/GN1h3j2/HHqArQvjp4dgjbqtyC5W5 RNkzrtzdfPGF7Xfe+eH2ZPguKmPOI0ZiBXTPnXfoIawSDpSY8lE8J5BmnBJuzMk+P8e8TeVtttNY r+mYNuED5cnFCc3Qzjx+Qne/j5XFQteYScoYzE7enJa8asvSHUGm4nQ/mQzGJG/frcWiNS8ehp0g Wm3uF4zkowePhRj1IYccFA8JP1k/U3XyKcdrAf/5z13c3vEHf9yuuuracReAucwXFcYT+QHapsg+ NsOG0zp8Kr5UCPiTTOZ69LtgzsGQ00IpiUsZqCNPxX6H2GElGwxA6Kps8BfesJOS03Ryf60ueLaF peXYGbuO6xocNI6fHEeVbOEPtJ5/5uGSVtB6niaZ4K3kjlznFeLwOA/2I0+CL+MywyqmahOZnZVD z2NddeTTTuLYdtU3zbV5tmV6rSvP8uZXXgQ3xnXMJwtuqMHLX1hgAOK1VpZGkVnS6PMyhmvTlvJ6 dx7ya44uZe1TpYO//KCiaGAW/yqN6Ji64hMvcqzyoUefdw3Y8EuCfeMFJHIUyeBDdqbER982XSNC sf9LenKnLXLVzsRp8eHf+9s999zbjjr6yJCZHmWw5rPtVf1sRwwZxuRTMJTPHr/kSqzGcLzuU0Nb s7WU7Sar6mp7Dcu65tEf75pAYSyKv7ItctAjJonQVyt0ke30TlqvOqb1EDK2FZZ9y1Qd07AJnaVq lphv8XiER+67s/3Vxy9ub/rus9vffuDgts+jd7W/Ou/yeKTG9Dw15Hn8x60339vOPeXp7eYbronP lz3e9o5bjI/Fgv6gZ5/cfvIN393O//Cftt0OO7b95A9+Z3vP7/+/7dPxO5CXhcyH3v+X7fvf9BPt jd9/djvyaX/WznzND7Vn3X9V+623/nm76dpr2mc/9dn2gQ9+pv3r3/zF9oKzT20f+fwN7ZwXPLfd eOEn2m/85lvbg0/uqQX2I0/u3Q458tB4yx+fuYz958Fbb2t3xiLzjNNObfv8+UWxCNsjDirxaJJH Hm/nnnVae0qc0ImZb6reFr6fcfSh7cbrvtpufyAWc7Gye+yRR9rBx5/Wfup1r2qf/Ys/a7fcfl/b Wyu+zBBbj6EpU5/j1jQCpuew5QiYlnVmf4kz7W+ypv2P6dGH3+LdD+wlNgxaHAmgps50LE2bHFPm V0jQc7F/7k9Ts9pJDNnqTqU9HyuwmQhrx5cp9pCRXGzCKdt2/Nx24/l7LKT5bO1JJx2vK2zPPfPU uJK2V7v00svb7/ynP2hfisd86PEegcGCbZ/+EF1fmYqdMexwfGKK4GlcFcK0nRSl54s2vnTarG1a qe2zSct46StEks5rYXNn8PGGj7MLK/SxiX/1zorsyxBmiq1un3OL0qD5CT+z4xygk76DBPpU4E25 TJ70wMYXYnIdarIPzbaDt1rQmTF6AOi6yOnETP/mGojJd125Sz3Zl1j6ZjRd4UMh8GEPOhjQ8RPb C3+FB39RrA9Z+oVfddxe+r+8IFPUtzSN4XqLQBDgaVx20F7TtW+qFwJrNqEt6fneNhgExstCrhe4 q3wcGJcAeyA2tMSpA7DEXus7OZVnbGjGr7QqO9qMdryYJ9aBJ3yIvdSFWpWDXfte7Lm2feu7b9xv prZd3glfd+2N7bjjjpEvu4I5+ROTIMa5FkUfOSAXI98lJ1W2tu0X+nqFjmnRqKIz/pI3E1zpMGeW 82bYDJ5tayxW9HeF5NsQ6HifoL20D83FvrhPPfLQ2445MgQFkVF4hMaF532ufX2PQ9srvuN57asX xjfzbnsgrlrFOI08xj76+KPtgk98uu11yDHtJ3/s1e3Ig/fVr5McePgR7Yd/5DXtpS86rT161wPt wUefbKedcVr723/nlSHzlNg340PlhxwSt7wOay2eCfdAfDNwn/0OaX/9+76rveys47XY2m33vdoR xx7d9tt7j/b1B7/e4m5nXOV9THqHHxrPmYu5sc/+B7S/8d2vbq9+4dHt0VickZQH77up/eUnL2un vOzb2/d+1wvaXnH78+HAP/55L2qv+4HvzBi57PPYw+38j3+6PeXwE9pP/uir2uEHpl8HH/Gs9oYf fW18duqU9tCd9+sd+0jMDhvMt27Cjehmc55jQ435bYLkc956XBh3y4E1jeVkr6hnU0NlnC3cdEpg K7wFyf7bbvZDKJ3p/jAknpWTX14sVcg0GzJBFH8AJgbH7kfjeX58oeCUU09sb3rjD7V/+Wu/1H76 Z/5+fHv0kPaud763/cI/+bX2b37jv7TzPnNRXGl7WM9jQx4fa8EjTtr8sLcf+4KfoofsFBN6IbfQ B2uJCW1TGbLl2IUtZWbkJzHnnhbE4lf62t/04RsvcIpMeh6kClHb1glafl5S3kjC8dNx27UEymbS 6kR8oBm18tb78geb9Km3K2UsMkvVCu14xQJOTyDoWFUC6Ewr9mK9EGMt/0s27INrudN9M02WAFqc iyQbmyGXxkSWjgV2oV7D2gX1VVH2GV5gL1/MIWheC1QA+2KadKOjMaTuOTe/1tP+ntQtt023U4a3 BDD4/ICXE2hNdj615j1jbVeDuUzKdn5VLFmLGLzQVKw90ZZb89k86mpL+pXZ21WmsjfRq8ymtnWv uOLq9urveYXeGfMLC0sf3N82jp7DTTLQjbPJH+iWMc6sH3uaLp0Hlov57g89Td1Jzvz/FfWOZpxP Jhwmq0fo7Ui3+utYHePgdZC94ssHe/dPLfDj9F+75ivtoqvvaN8Wt0zP+/SF7cHH4ynzsajTrw+E Mn5x2/FL5/9V+4M/O769/nu+r/36mS9s19x4Zzvy2ce1Zxy8Z/vTt7+9nXfNXe3x3e5rb/vjz7Q3 xuLt1088o331+jvaYUcd3Y45Yv/2vnf+93br3fe2D/7R/2jPO/6n2k//s19sf/PSK9rDbZ9Y8J3Q 7r3xiva+j10c9h5vH3vvh9q5b/6B9qu/9k/bVdfd1g4+4pntyAP3atdffX074fgT2s+++TXtN37r Xe3973xHO+Hot7Qf+al/2F7+iivaXXwh4bQT2t033twe3u9wLRj2iquIl372E+2/v/+49kPf9QPt pLNe0q69+e72zOOOa4cfsFv7499/a/v8NXfGFZ4th6SRup1vcEBNaeefemozd43GXI+VlwoynJxy /pepa+GVOm0NuC7BIqnqez70VcUMJ32xfM460xBMHDmW+1wBRi4/84cH6f8MvHTwwTngGMivt+wZ t+GPefaz4meqzm4vevE57fDDnt5uigc+/8WHP9kuuOCSdmOM4WPxjVK+8c4Yyl7B3NQkCjxK/6ij FzYhOBd1TDbh7IjOfkqRvWxuUbE9yc1y13WDVmXA5IKZsC2/kJER1HO4ttiEwMUpLiITNqXaoO+x oE2Bv6SZTg2vYljedJ+D1zDQVyH/bm+pJ47slDHzeA4VxW7qIglrNjpt+BYqWvgF4EJbJpCzrGMe d1e6E45/+LRNw7lZEzE+PNtck6s08Gzf+st6Z7CWGEsd+sat9mnv9sM/9Oa13M3kDLAErkI2YNnK q7SKER9j7mIxUNOF4qo6EjQjRsdBQ6fNwciLOttzjQzt2rcedS3IbFccp2Uk3m/djKctd6ZX5nSX etCqrZ3h8yyl055zcvv5n/+H7Vd++V/rwOpJZDxweBnbNfxlIVJe7IdetFhmO72Zrx0A+Uq3vmlL PnYYdfh6knrkMFMfV3TCIfsF31joGI/2slQ586q8fAgG2JTKS0rw+vhLJmxTxqm9xyiczoNvne3w kNPBKoD5yPwJzzm9Hfjk19vFl13VHuuxH/7s49vxRxzQLrvgsnZfjDW/anHA0w9vp594dLv2K19q t971cPgcT9OKW5innfWc9ryzT2vPOGT/dvdtt7QLzr+4Xfzla8NGnGAjwscf36Odfu6Z7dxzTm2H HrBvu+OWm9vFX/hi+8Jl1xC4Ps900GHPbC952TntlBOe2Z586MF25RVXts9fcGm7JR70u2c8W46H 7Z74nOe2F8Xt0yMO3S8e4nttO/+8i9oN9zwRv0d5btv7wdvbBz52UTxYPH5/8in7tjOed3Y78/Rj 4+rbY+3yi7/Qrrxrr/bPf/HH25//3m+2P/jg5fFokNhPd9urnX7WGe2cs07VA33vvPWmdkF82P3S r9wQvnMlh/10GpvtcktOGc0+ZOqtjYGkqlBkiOEzNvx1Pe4oSHvwLefPdeGv5qsmjDZDNk3mHIeT XPCiBHO5zyVjvl3ONXMrNjT3aQ8fi08p82QsxOLXOeLEc8QRh7WzYxxeEj+7x+KNz9N+7rwvtPPO u7Bdd90N8Ssuj4Rc3LbvV1aES6CLvEFflvplstyDJgni4Ytrcd1iSoiOnynJMbSOy6SJ6W4/iAO3 63IsyeVSajgHVZ822M6pZdw3f03HsuYt+8agrsVy5leeadaxLDKm0a50+mulyoeCJkTVMx8af3o8 RwCtyYBvurLaY9J8Lfnb5IduGQfTNmd4K/mx3LC5IrO0hQ7y034Y9mJOQfc6oOosbcDbGRoyFXNn dNbsVprb8r/HYZrxybtnks8/lhl6r/vht0hmKAVYLU4oNGRq33J1kYLMMnlVz3ak239OgrnGm19w asGWHa102hUTmeoD/CVtZheBKMh8MwXM/Cp6x+mfa1jDXPqDTPVpzZcln/7+++/Xfv1f/dP4sPCf tI9//DP6zMl2utvxdnSQtW71A79Ndwz0eS3l4LvAq3rQLS96zIUQCXAuRVsrbVluou64ZZ2lTTTX eNBYXLHH0NZe0B2pOw8Hvs7dsRMrErbNz06FxenngEKWXzR4/LG8wrY7ixid4J6MW1r8pNSecSWO z4/hWSzO4qoJe4sWvjoPBlb8vNZUUo++rizFZ5Di7qlujVnmCb7kELoKM3gc0PeIzzbxE1vyM/Lw WCzg9I0wUgNACMN/NHxlvJ6y/8Htzb/4j9p+N32h/fpv/lF7MG6/8knShx/fs732LW9pP/ZdJ7d/ 9XP/vJ1/w31aEOI78YRqLl6iwTzcKz47tVZyCLafW6kXmZF7ZfKsAQZt5zEBmHA1R6Qc/vRDlRdv G0yJzBzkdjwxjxL97RZvxILttfkbEQQ9/Rp4GxocF1mEg3f44U9vzz3jlFiwndtOOPHZjWdFXhiL 9c/EQ3SvvOKa9uDX45JppI8vxWDXc9W1nhagXSTAejDmVT97aoDSa+kaso/H3GNfUukLMFLLeQBM 48I3tuQX9nWJLHAyu7Y86aSBaWtcY8KBVvumTVqJZ13oa/I6F7CY5z8HcCZnmnHB4M8zg75lXK/Z sn6td0UeWdkKy2MMAmwNg2H2R0m48iWfi5/VB/tPTVnF63mBb3m3q96aLnKzgp149iVFzXiz69iM NZP/Bjv2ZRPmdnzzvCaiX2luL13z8YLofJxAFh940Y5v+fe90NpkoZfR4p0SivGnmWkB175v3cFt xGwZmzqMqhwAC+s1KUMXB4Mn/4qPdrz6bX3zJlMZJPSljPWXOtalrjLqFxoJlS5eRlqQHflCOIpt whO/59a4KTXfzkajy2MLHSbAPffc16695oZ2VjwM82Mf+/Swga26+LXtOXr25Hfxd+m3dWyz+ltx obtfZaw/q8OI7c7o0QmYKH3RpljzswRQK67tuYZP0pe/gShyz51kFhv7LLkAYBaKFn7oQIVuzY/6 QeIPuhc3BVcYdQbgF9gZXJHMPHDbVPaJF/vxt0fcMtyDT/tHnxc03sXqVxdMTtdSVghd3G1qbMdi mJPwVHJxVOcXP4kVd8NG8fjYZ/ozDH7pIQDA2GcfvlUYC7EHH2hfufyW+CLEq9sv7vu09snzLosv N+zdznnxi9t3vuS0dulH3tO+cMPdseCL26GRC87TM8xuPfPOVU4WoJOXmb7smzob/64Pzwe5zDx5 JdeMGePKiT3yST+aDGmW5NOu84J+2kbHPJRAZb4gEWXwsuvcZW+iWTxDC4wBYMm0g/4s5ujk59jq XLKMde0rvkU7xkULtjB26KEHt9NOPam9OK6wnRqfZwP/0vg90d/5T29vX778ynZvHE/Q4mequC1v Px0HtfNCDhkf+ssrN5bHfp6o8HHy028U9f6ImFilUQLLuvI+eEm2J+pqE2hKf2RKeZcei6UofbSz XTBFiA1SyGcsqWOe46NvmSUNHjTx6UQZfgQ6bfxL/gbfpZSepn7aC9UtxfbB4yX5sO/atBpJXSAg hz/4BZbGC2Fi6DjBJohRbNME29CbOd64+TyP2sCYAPwrTehbFzn8cBl6yIRxfJFEj7Pyaxt9YfVc CI92N1/tLfWQhb9Gh2fchEvAfD/R84dQL8ao9sxbq5fy1kOWdu0ja1/wQv0OWuXc3voBkz4oUu4G yJAuhcbO23O1xSg2OHgur4B126o0VzRYPWEMqjKWqA5UAYScnZwOyhMaX0l3Qd4T1zTrmue+a+i8 1vwFq9KRc/E0nNGIgSlqZvTgY6vKGWONZl6BMCnrnicweXr5K//mt8fn3vbTu2f83WRrGYtSzobS /eu7T9IW24pL24UYpBcHT+pZCbG6w5q3bU4Cg1spjLVwu1K1b5wd1uGOfao+r+k9if+xpw5/HYr8 WNHo/DGGG2K15lJu9LvAMr4wm6X4JB3b6UMwcKD7BBbKG+OtOekmMDXMLca2i2yp8ioeTsQrzr97 Rv3+d/1hfGP2tvaqV7ywvf45Z2mx8XAs6j70P97d3v0nfxGfwfO3ZrGW+8TMT4Lu+ZZPcWKHP5MJ TcSe4KiaQsM3pUSbTgqZvEgYGMjia9+SNxYQ+cy3mCXi57GLyz5pM+XNk/Jy0/WW5Hl/wgcXFbu5 I/W0bSnXaLs9twQ+CzaOWwce+LR28snHt5e+9HntOWfEN0Xjqu2Xv3xVe9tb39W++MXLdYsUeY6h +8SbCJa19Z3+HHnqec6xr7htbu3jYcCHp9Hq7vaMSrzmNfNNXqqEUXdc227irOcGFNBlIRxbO5/s 2FLGU9+4KQ8OsANwLFHYNcjgORcZ5WRtDWPihl7BIcbat9wS03S9EQp3pCeneg5CAJ21bA0/q60Q XrObdoxSfFMKFue/FSdzj+go3U96m20lz3MGWe4e6NzfbVb9Kgd9U7GcUp0HjBCNkZHP03yxHDj4 yMu02t5kx3qVv4zVeJLtgpapPNqxeJuSb4Vlnlm1a1BDACWDdWxVoCz1ZnxPwq6/DFa6XWYN31jm VT9o175lXXNAmxXsdJ3l4mb41WVmejvRsX87Iboq4tGAuZZP3oVf/pWvtte89nv1w89XxhcYtlu8 eRHK+Pndsg2PnGnwbHmey0hTjLc15rVyterlXI6e589WTqdgI4ZJPir3m+1uxNhFhuPHNw6iFPm5 YeyR4YrBmCPVHuob8lTFlu2lGv35taeElXfgq0HFoW+DwS6ztEW/QKyxt6d5XPpFE/kStN3jR+8/ /D//Z/v4B96vB0hzB/Teu+9pDzz4aF4h7L/NOnxnUtUSXaC5LcM7cT8pvoq4jVxGkRS6GVNuxQ3/ xoK87+fkSrphC+veZ6zNEWI3LsltKMyVb0VJ/5lD4ccMM2LfYMLzNH2dvGDB9UQs2PgW+tMOjJ+o OuHY9sIXndPOPPP0tl/8CstVX71Wv3hwyaVfarfdekfgx23xWLBxlc0lTU6G7VMex8JJ0trLmPeT uFmz2hgz4koH/wt8lzBlsxE4lppgcx/OK7emTvs1lEmH1ib8lKo2iFv7WgfweGgf9GIN9PiHpoLs JhMpscOt8ijbKaoxyQmkYxBUZOTPNmjycxE94o4LvmyJCGbNVdqQ7W1sCN6+hZzeUG6JX1kMcOyl DWyHtHwZPmxnZ8HTwq3QduhnkXUTD/rQikQYW1y3cK/l9er8XQhGd4m/VSIp9n0tD/AqnbjjJk0/ EsdnjWAShANRP5TGOxUyDr8PksF8L7wz9U5OSV0EJ9zuxNClH4q6bRI13phnu/TB450lxfbViY3l XVuGPrIOnL6Tjgz40DwBLAeP4svLwok+/vdsDZvIUcDwItH+US9pYG1XRswhZFnV3VcOvtdfd1O7 /fY74htiZ8Utq6tGDJYHPy9HC0R8XWEKDBJAFuwjskTGQQ86n7NCTNHGgUlNTmrRcJ7gYos/tdeu voV815YMos5F9VNMGek5HP6FfjqSNfSQ0+k16F1lxJNGUgevfBp2PrFvf9GmbXzTwRDuhjGSHnHH C13HgT1jCaP7B31WAtwYM3p0jIV96fWG6D0P6MgOAvFyDM5GfiZNUj2Q3LegJGh6pBhF7GS3F3E5 JvtGVkGQvYRSn7nGZ/L4zN7td9wZseRYQvP+gqDznLjhBTRwopmzL9oiUHnfHSSNTfU9g+zj0WPI VAWo5mTqYi/nbsxuTQyMhkjPa1ia+ya2ZSQpf6DwIn6pFl9FJQ4dB6yLb10WGJVl3/TJn+6WUyEB 8qGFbdSPx68dPBbPcuHK+/HHP7u9+IVn62MUPJvtujg2vPe9fxFfTrms3XTTbdrneBYbLz1tLcAV R+DwRH6P7Rin/pEAcsK/NrM4FWknz/cDOYpGD0Djnano8yA6+S9R+ZEWOp/MxsI2/p7g88Nx3EkZ 54x8Ro7nk2DEgN4o0VTOOkHxObFCTQa+4qevmJFjrtriKBUqelMhmSSM42AIOEbXaKoIw52ocS1o VLwoPpbRFjuCkz9Roz6O4QhE4fhH/PZJxOiQD+geS+kGE0zidl6o0a0FS8TuK4o+biKTt7Ynn6re aPfPecsmmyiY0CuM2af4VpNiCy+TFrJ8+cruIDfyKpRpQ06cF6huU7ugv+wbs/KwQZ+XYzWKcIPK Xcb43kzIGD1r69IbrC4E3rJA4WX8JX/Zn/m0iA1Zx0fNa3oL1pEAcBLtkGuiwZHR7zquDM6EQWbp NHzRi2NVV/rLq2RdwHrIGMe6y9oyTrH9FT5+lQH0yX07TOF1I8uYIBvfeTOWfV76t7N9+ZsGhgq0 hx9+WN8Me2H8puCf/Mn79asL+bmYFNs6jXJHlD/a01PO+JHRgk8z+gFiHJ7Z5Bit435K55gYpPJM 85cBEjeRjSWMPidU2XBXlhwuam9bMvHW/i54Ni4DXc7tOGANP0O95qCq7bAdDmsOxbyqxT3HWD8P Yjl4SZ/nT97oVihB9/kVzfE5oU5zXvBdscSOt4zD9kNAWGwGbVCmhnngjfxM7KnVczaTcS4mqak1 ckysGVN9wO4kmC38SF9CuBxmq3/gdGlVM1/MmYQ6ZWsVh4M4YScYW53Q1CWvyM9PDEGFpOPkDvO0 1dw2lLS+FMAGV9d4gO5T93tqO/mk49oLYsH2vHPOaAcd9LT41vkt7S8+9Mn4TdEv6hvoyPKMtbFg q4CRj4wvgi5zApGcO+R9fmKrOa9QtPGN+a+FRa56liKzvmxkqrfYnwn2DqIaQmxEzvGN3IezKpP9 IOheedK9te/0bdY8dJMenPgnL9NjV+D4goY1XUttlzazuLum0ajdnkAZh6RPPDzsNCUlUwFFGF3Q cU1YU6vmYzs5NDg2VfkJZWsL0yw2KSx2N5WMIGT6eciLRvviWsEvcITuuAsPHZ97l3aX/htf9I4B ruVcL3F2pm/dmQ0rFn9NWquNIZ9WBIwNa8/p8RZMFnYQJnAm3wlhMRZEjlZZRxdZy8OmoMfVld3j 6pAHMM+3efATKnodP7VyKxs0++DQrH7QdmDYsH0OaODqdlY0EpopIqroiRP9HCVd5TMWdii2lb0u 6k6vQeQl28WfhdgMq67u6ySpOmDqFkLPqQcOn2rc1uFzR+d//uL23a/+znbMsUe1K+LzLHzpZsQU ehxQ1e/5dHyuhcU7ruCLxpUKDEeSsg+e50KODvQhr3dSEo+N5dCf/BiyQRt28dM2JJ0b4lduozvm QrQrRr7jzoVkD2sg+GBg33n/roACV0UnZxkPZ/qodF8GyHaNLos/FOeid1SBCl/zmzr6nv/4kpop I4XY1AWZaZnPkOckGgA+KBIK5kHKbGUb+VqcR+zxck6yB6GPJ1fbu6Jzjqz2Yfb1tdKDyLgCsfuD 6BgrgeI/1G7B+ZfnSfNjIYYe4lGE6c+9kcH+ZisCSYG+VVxuR41P5AbPp/FBp8/paFGwx7ENGWGE CDrQ01/XSE9FixTiIRbFNvEYD41PkDJueM6BsaGlnLhdEN1cd8R+CyMKWP4M236xYDv6mKPaufHo l+c97wz9XNUtN9/WPv6xz7SLYsF2/fU36yG7xMSibfo88DyOzDNzjixNxxwZ7BufsJVDaOGI9NCI f7JJQR86tWixyfzBzSIuAlE0X7IpHZr2Qwkj4Ch6MxO4eW4nf4wd9MxNeCPxOn5oao9ANv5Y36Uv eRxcvz0LJh5GpOEjOtS716tBQZB9HItCKI7R88txiSep9U3GgZEs9Lf8YkPhgZcWi0544E8gdNGc 6xbtRLCrP/TxUyEynl0u73ZFL4Ln6hs5had9Apk+JjQTM/NLvxZyzr8/hf5E2KOwzRYN5n3YEaFT XXV5zPGTZhRYkOU7B8Eo+C+fgsExkT7SyMjVIOgzuf1qYNKxmYY8ZgmTc4N2d4PmkF226Y+8RDu9 DPnImcvA17EOBfCUHeHaH8sv+9DtC7ERNX3ToqkxosbWlitvDKBvbyFEkXIkAGM54EkXT4nDVBZP gBAWga24vd/FRuUAqCkT0hBRQ7bLoq1y4XHy3k1fGw4EQRkpcdeQzalYu9Kug7kremuyioE4CtM5 KSQ1eUd97XU36h33y7/the3yL10ROzUP0GQS52Q13vY+9kmv3OdUkXykjtusawsL81HJHYU6cz3m DUE4/QvnN8XEfAF72hXATdocwgeABVV7b+ooiWF/kxvDh530seawtuceZM98L+CgYqaOa0ruaMvB jnimVA6coDFTRhwdihMR8lLcCD/pRSYRnkkKl4P4au4nUfF7ZKBQXMs7Fl/iz/FTsmwnJRHBzbhS D3/cWvpaUGRbx4BEyb5iIIfTPIqmisepYtS2c8+xOa8QWrFKTW1saA8KMekGq9qdJNdaxJx6j8Ut Ua6csWA78cRjY8F2VjsnrrAdcuhB7bbbbm+f+dQF7YILL4kF24264s4+yPFg7/im6NYy5V7x0mUH i5UiJz/27xyjSROf7TcR58kpFCeoSZgWQpt4c8ktPeGzieK5SB54uXicTKKGb/okR8so6a/i6OcM y9WaB2BTyAEh2AYUCv0a2lxGIttuQGX+4seuFo/Bzugt0Zf9jRjhF3Z0+LZSTF43ZwMBCIyakA5M jJNSJy6qjMfLkWRKL5oeS8kMoMkQ9FFqexAFEpt8Q7Z0EvwZRkiqz466gyKfdkIOGGR1YWksYxO/ eL/F2o7wQaj6zhVAWxZvNVCHVgNlcUYxiGsRmQjxMoZqMaYNjgivk9x27cWhHRadpMTn3Szj255A zPCsFPQpaFrzQ9QQC1wXt2o8tldpQx6f+jsC5HhVOeuOxUiZACOvHQzblje+64pb24/Eb0J+5C8/ 1V77g98Tt07f1+6Op+YzNsp598cY1BXfMtCHz/hvuXBInwFxH8EoYKQN62UkAyPFZtulXePMhJKY C7eSJ31RhndihSa98KMWev68l3JEX9EUqblKYWRTsUcTfWF4kKBZOhqOtcZlNqfCceco9IXZlTlQ LdxOZGIbBoyUdlI/9Hr8VR+eVU13LcAVTKNzdSOx2Wap8XjsEdJnJbc4SDRdbzUu1gf9lsvkVNeY VxNSx+vyim20+wllGyzFExu/eXRkNa5q2fsAkHkhtkdEPwStZz8kFwzXxifXWuBFnUsB9iMEJwla zlf1ATD84AobdxBYsB17zHHt+c9/rhZsh8aC7VYWbPEctosu/GK8YbuhPfLwo3qjyi9R7B3fFEV/ iY+PaXHiEA8vHbNSQH5CmzxFL3pdlgnG8TiveMNbiwNjMT68eY4rDto/yGHoOYfSkxFoYMjBlJU2 ElnkWkJKP2Akl6cd6yE797qrS6eeoyxVfZE2uLHcBp8ik7TThGjedHdkkmxXLItDc1s5sPIGzE3s iq2J1c8xlndtuWrLNGQqnb59cw1tFJLeEwHGUpdBg8bL+j1tysWgdQzOebw58HFrsgMjXl3BF6js tzAN3JXsi2WMJT8nqD6AjhsDOU7223r1nG3aEhu68HvMtW+dhZsiYzWxcp/kOma2UgsdxUNukpQ5 rec454Zcd7kqC4btaPFWnXeyZKgb8CCYV+XdrvLDyXBg3L7rWLVyYsEwtpzrfS7/Q+fApneAnQ7N iyLvqCHIrpiRyUiGnFToceAKGWzhE4X3ARQnh7ZvUVWaYxQ/MFxsG75W3B3XsSA3cDoPmhGEW/Dg bSrIVj/2joP3BfGj46957avbC15wdnvf+/4yT1whV+0bD5r18Zs+udHtxhDSZWh8Kf5MU4z0ZSTG zq4jsZWsq63KWWIYCxnQZcF2op/u5AerkcGaLdqGxjIEHQdyKuQhGh7r1E1tj8nwJ+TkS+jAS7+i 1Y8uyHGCZ0FSP1soO2WDtm9rEIbmEr7RWSnIj4/plJM9orIZNR7T3oIQV1qz9JiqQGDxGS6fdKt9 +ZXJWMcNPVkj+YEJhpqbYqh2u6/oJTn2XZSjcCDzFVpzxYiNYu1ylea2x9D9WvdQRMIGAxUZV9+x Mp51X0+uUfAr2hrrGA8koz+XyRykhoRxuo8NVGUs2ViXcvLHfpXElAwfn4irazzoeP/99msnxy8c nPv8M9tZ5zwnboke3G699Wvt05+5oF144aXtuutvit+RjV87iAM8nz31s9g8ppndybPuRK/mUXif sQw5qfrQNdadKht9XHBfV+qiv8TJ8UOZ3JHPzIdUuws5F+f+MK7I6JuJGHAei1OQGRpup2lRINDN +xQxAGoI50n0ZIV/k77Mmql67iM9xQsvOoqtKFlactLvUSArhU5EPfTAolB7bkz5stcSHrJr8984 js8Ruy8jZWM/CwnvRql6tPHE3mBrOmcMFTU2YgS33lJEWCPYFbDhY4Nsk5d4ObXEzCFRfsCLwjqE 1vAVuhWCrr088OV/qqg95Ksu8rJXIwhiL4lR50nOa41bses1hVGI2RegHo/9odoWdL4LyTiCIH5M cCB7tKJ5zDXOPUb2V8mTm2hvufJWjUkRzFI8iJAsu5SD7iQ7qAIxJqX1Kw+aX8a1nPvVNm3TZQvb ZVCG/R6wsLtBT4be3anKvoFruzN73X+DWcZ9147JfdeVvkkXWcbhzjvvbp/61Ofb3/gbL9evLfDk ekrFqG37aVx4vBgraOILYb6xTI254s6ls7cd3/bX9KB5zGQ3/NKiKQ7e7ktmkWfTqGcl9wrpssAm bxGoRKqP2FS/85BByreOeXO0WF/NzCw7zumIBYHwmbJd/PZJHtoXae3KhnENeXLU1XxlsqKI132a 6P1AEsw8gCA1HcTkO36FXj0WTPrBohN8YlC7Mje0R9wZ+ExqjTfR8IX/2ChfaTFznPMbMJ34yQcy i7wKSwMcOBxI8dyYoet36xlvsDChDfJyGBMrBftJBoMX43Dg0/Zvxx53jK6wnXnmafrSwa233t4+ HfvyRRddpm+TP/zoI/Jhz3iQ8t79Yct6MxBwQNY5JP+39WPFtQXJ+YRMO/GncTd/WdsP8k+sOsFo 5Jk1oS9v58aMIVtdZrssWnvYclLN2IUa26iTruoHBHyY0cDt9KUJ5OwPPOJGNvHDAIMEKV69qf5s 0+OQTjo0Y+9sh3mpJzEormnMdqQ/YsX2NsWxuka06ppuGvPcNMOa5z65c/6cI+lMAsodMtCl3wdO ct1n0UPHWFanrrprfONuxwNneZwbvsCMor796X3blkBs3Le/onednCWWnNf2Eaq+HR41WORsz3pA QECTMGqU1j5QyaoSZa8M0ZGBqOUghCgeELWHk122T1oJdllPHw6yOdnZZit/FKjsXN0H7KI3YtBb NGynj8HCYFY0Q0+9SrMv8KKNfRd5EDRPxghwtiPKfvEFPXJAgVdrdfrGeUVC/vcadmpBcEYSq8aq /IcIVyY//KFPtO/49pe0F77wnPbRj35q3EoZ4whoFPQHdu9rvPAzbGk8e1sKfYMeWLIJv5eBH7qO 1bxlDkx3rVi63hbdACbLmIr3MDge2z7OxZZOxh3QeLYL2fMzHy6TJ28mP7HaZpW3b8wlomQq6cSs D79OuXPcy3kih9EDKGxoTka9LKZgIwzEu1MapqJK9Ao7Y+AqDQuKICom8Zmn9oRcTScSXYEMuDHX gafothZ2MrekAj+3lH5VInMjL+UMkvIN7DhZ0McDMpNprVe3gtZ/tiYuFiEUurFJhWjnqIw5FyIu shMdeN26WYnTqchRkJEP6qSGeOQEWhckR0o1znaeYqQfJWc58uQfJeTgIN4b6nFsoZHjJKx+surf GgpeBBp55Hl1+kIVC7b4VugJ8ViPc19wVjvjjJPjZ+72bzffdEv7xMc/274Qj/XgCtsj/Axa2NJn 2FiwyWwYi9zhAv6md7HtY4dvEpv5mP7lNydph0fSzTZbdLyPuE/d09VDr3btjiWQ7sU+4Gcg4Nrw C5HgVy35a12xewzR9lULZBzX4NqO5dwvuQiWCro5h7PmBIxj/IEcqrpQmNIidc6gjIbGH4UYxxwD 5KMfr/FMwmh7v0i7GLA1RLM/QHtD9Gg7P/YZtnmuu8qQVR8fMuHliJB4mu9dyRjIuh0eZWF/jrmq eEyL2nxwMmtRE0fvq7HcwMeneOkYRDtssutDlzb+Rqn7OD4hV31GBrr9rb6bR+2iMY4OchTrqdP7 5kHDR2FaoMhUW3rTBWbI64Vc15F/tDuWmuZ1OpXij7raBwN9ZonwBL/MQOpIrh9nrLflyhuGKBip O7dppCVTA2VzkTML9jKZNRAnJQzHTsCCiYAcSB+MwAN3Zp+EerB6SpkiIyHdByU5ZKsPXlGPxVnH 7yqq4FGUPHzD3qIYG/IspoWcu8ZwvaajPDMG7FjYDWXkLUubxdtN8ZiAT37yc+17vucV+lFpXX3D x9CRXvdXXve2/ai1o9IBKHRrTpCzbeTwyZe88XPoBr79Q2e74ti3ykxjNGSIZSFYY1uwZt2BEVTH MBPonSrHCUQHlpGvtF/1LS+/Qn6tIOPcyN+Qs140pMJt2Mcfh14Q6PAyrrrM6SAHjRuDPlBZS7ih w0E4xyD3gjmwpTfX6OJTzrhJThEGvrzodoRtv6u/Xc0sXfXrmVBGkP1WFfm0DoaVNLXVHhSfiKq2 5cc4CWPS9/44zb/IjMAShf2G57CxeOMW6IknsGA7u51++klt36c+Rc9h+8AHP94uvfRy7buPc7U8 8s039PfZZ++xKKs+eXbNfHI+V3NZHKpAi1im+TXFN9mYaJEpNBMJezFHco4Fqc9RnayDpRnSaWiI Tp3auQCKw7pvwTJAHVlYwz4Y8OI1bHUM+uBxdrDu+lim7gwD/0fp7f6GpXKGSG/ILwz2QEY8Hc9+ 21ewljKD57iqkRIvZHSRB2eJDZ/cqNI2ulqA5W/YIi8dMHeizHzdIJ/WMt8V1b65Zj7Al7x9jHro 4Fvwl7FZv+bIrsDzebjS3KZGRpjgx8s0NcrGPEjyybJFZtm0DiuBmodNcsgMf5ZCpW9cjinL820R G00fe0zQLynSceBlflpGEwNwDUqZEBj3OyWE6dtpD5YDGWClYecLCZA4+MXtLd+nYjIECNN4JK4n HD2/A1W7C2TlTg6q40MO3zRJAhsfOHD6HZT9llyJVfLdbsVSvOAFz+80lrqWga52wRUtGTkGnYf3 T5aFm/IcPBYV9UDF52De/4GPtpf9tRfGz+G8oH3ow5/QN8+08A5Zj48PopiSPnbAKr7UNn66MCdU Ok3xD9I05pCs59o0T84af207pwx7tic/NcbYjpdxJ+/SkTqxNb5J1lZ2WIQXDNuz2Bj3nmPoxnH8 4Ngu+i5qlT505CyrPrZdetvx18/RCYYJH4UtY6XPi8UJXg7FnBC92HNOInHKj/rwQ9fjj47sBc2+ Dz3zQodYrBPNLOBGS/L4Tl8ni75QDBq8+mYvrEh3sgUAJLDUEI6EoOJvL3U/gjT86XaqLGr6LF1M nEqXvwbcUGtfwk/+Q4Fbphle5iEdpl185upL4Dl32OeNZh6zdtOPv598yvHxLdHntpPiJ6r4YsE1 11zf3vOeD7UvXvaVdsvNt8Zn3fInfeDt3r8lCmYAKa80we2W5BO0nrVsTZ0RNz5lDkIzAIgFLdEy MAjyfdBEUQqyJT1Gb4rZxxublJ2u58q8tNt7zFXla8oZb8zh6k1G1Mpj2FT89OERfG9HR+26QYe7 FyOGDLSKqC3sQpXfthU6edW7CETTtkmefDG7+4E34PQIxfW+IJ3iS90fiGPpD8rKF5iRK/W1zQ02 eC0XLnCXWOwzu8e3Z4f/IeNxQ1528Lv4VzNrOjWyg0fcXcfY8HhZB3yKdYlbPHS7fs0XuuHsOHcj kgbDdhes8tr/kUcvhGss8lUAMLN4MeQ+tX2tuvIteI4LvbUi94gp7OhchE7Pif1UTF0ZmuyFjOm6 29Z1ljawX89f8KWHPDaLHm35EzJj8RYSElJwBV3CAYACbTm24JNcBwHL4A7CCXOSivpoVn18AZDK WENwpWHdOIQGd0oYougDJP9pUwDuRfxoe+DGiQJ+l8PvuuruqlNV8Ex03qhdbMu1OZLpcqYNmaJv nmtwufp24w03tw994GPtB/7ud7fzL7ik3XfvffFD4DkRq337QQ1+xTHPY2X/TV/WS90qv2ZzjeYF Hdjm+zlTaS/HbYwNC7CId1k0PnF70Z9Pg7/Mn/tL3WUfP8gcO+dsLhRBZJbxF/YuNcGq+8XYwzRA 7Fdhif2rH9UcR93ZhYFV5BZ4nsPVX0GHnEroLIv4CyK4teggtqTNBLKD/xnfVjsWB9v4kl3gOgbn qcaYoumbLagXcSmOJZaNRo2c/IsG0jXu1EVYzDkvsFmsMX/53dBnPvMZcWXtlPb8WLAdd+zRulXK z9a984/eE78peqUe8YEsY8Zz2PbZez6HM66Yd+Xkgf3qD55Q8JnC8ciFEPNxJsFXvMyD+YnI+XUu 0QW/FmQ48c4WCwJPqeFP0OpY4JPHZNhBhbkl31J/thVu9yDajguZirE6H7oMOtpHN+j7ViCYFLCw OOLYkgGJjVhqrqRfdO2v4mbRTU6Cr5q4e7EcWM6ZeaOP//GiLI85IM0WgZLaukEfBOTr3BiS2O8d ++Q+42Saa0TF737RX8YGba2Awcv6ig0bgUV80G2HHOQRd1AEKTq28Ttk8JE8SBd6Lz4OjlwG3bqV Znn5gkyRA810y9UaWQoytuwcuw9/yNHpxfuSPrITtJlPJY4Z3XLwyU+RMy629jRDhrtzM6BQtlMk ErBlUVDwOLlGMaYCKzqmz/AXYJap5Bltg33kNQUJVu1EwJYOit23pE4+0keGkzV6VXeLbJcxnZps oK9YKyPaM7+7rmTJCXxtsg2O5ANL5MrrNDEWG3Rnq67cAABAAElEQVRYwL33vR9pL3vZC9r3/q1X xA9Qv7vtsff84L1Q29K1r/hHyW008HXFvuUlu8KH7uKYjW26McyHbpplXJMlvzs1zTU6025l6jdf 25ccoT7OG/Kx09bQ7wWfy95l8qhtnwPecrHkXILm/I0xGwjfmoYPkBVNvjHuPR769qnK7Uxbelvy SjRTrsDBxtKORj7EtsaO7PbW7a/2XvyPP1QUW68tw0FYV4ti0faUfZ/SjnrWs9pzn3taOycemvus o45sDz74YPvSl65sv/d7fxS/PXxVu/uue7TbkDv2T16biu3Z1ia5QQ8niZui7ZZUOU9ITJlx7iRe klPt0lZOudKLdtm30YeKBOtMsRZ8WSs0MDhx+WMWDEoiz7GRU8Ev9Hst+7R3VJa49MtieKgvfBv0 RcNj0t0Y3DVPJBuCNVdDoTSMadLafmVercd47aLvFYOc4p/PczPeTnaq/yPWRd4tw/6i/BefxSv9 nTQrMXSxaXzbd43Q4EV7LPSkPc01y8wWyQxylIrf1Xat6rHVHGvtkeDCsv0lsOmOR3rsCuS3+Iee vA2aPvOGAhOEpZc/TI8QBTovlZJ4QDWpgqFlQvB4sjI0EsfJBlwt5+jHKwiCoW2bA6PLaNCRjeJA XCdVrLFBX6iB7URZDjqD5NUvSvDwrSYEmh5H0n2QTJeNauBz8CYe68Ibsj0maBTHmMvZbhN6fyk3 9qPooocMtqgprtUusvTBIe574ofAeaf/4z/5unb+574QJ5Ir4qrAXjpwIleL8MAJIi/6NSbLaowD n4Ovx2Dwgu7iWI2BrNs+aC8XH+jafgiPGK2nd2jFhv0MR2RWC5qImzxt985UdkNDMYQdyvAp2s6t l7rY1xwMng4AYc9feoDnubPMB7iU4Se2eh4siz7t3CFTFgXHnPogZIw91OTHlRS+dUvhoGhMEcC0 cBCYD/SVo6iNn6jT/iosJWAaX1+xhQeGfaYfne5Z5s0840smNtixj86XedahP57E3vMKractWnGb pA/OdEya7CNL0ZGrB+YxFKPr2jd96EOOTbHqOCXh7vNkXPPiiXiUh79w8LQDD2jHPvsoPX+NLxw8 /emHtrtin7vkki+3P46fqONH4O+/936h5U9TzT9ObD+6uZ5XbjsnJWOdfMP9HoJkrSd5Nn4MQSjq mGSBXtf5INs2FHxMzvjRRwZ7cicakom+BqHrDh05FvKq8YX37RFLEtBSgZ2ifb+BGliyEU0fr7Wv w6METrXJPBJGcseWmPHHc73igkcZ9tWLDfTYj/QJhC5jlmvnctLtcYY8vuiYEMK2UeecjjXIBd+x 4aNei9zIXvHBua37CzTGxbHCM66PYeAsx9cYZGHkOnDclm30Oj5xKTfId5+2yKLfeejLZtTOg2Iu MWpcwOt24SsedOOFPTDG+HXv+E1RinyKeubHwgcJehM8cmK/HotnJzpXiJg+xKMxroZFmxxTONYg W2MdciX+2biHvGKKmmJdavxPqlirG2ScR+P63BPOTHgd3yB5hOlEG1kG6kSL3wOYyZSgAJbzC5oN mr9MkAOGvuRVXbeH/Z4g06kHj842flgW23WgpRYbEqgChnNkWnLGdum/GSOnK37YJrr2mVo6HLSi bVzjubY8fWT2jNs3n/7059u5Lzyr/b03vrb96r/4d+2hhx4ecVUc61aacXdUb6e7xJv1e96Wk9l4 a+NknnNYfYMHPjlc4w/ZlbybB4Z1q69g0uclGdqhhKz6G8bFeEgTLrcDxsNqbXStlqw9mXZ+8KaS vrCTa2E/46UU8ku/cWSOE/gd1PITZY5Dr+YlTXafwo81vUTYua2Q8K+LGz/rOYZ8nZM29mq8Qy/c 5fNWNZ4JgLEm1qDE4sFvIJ/+9IPbCSfw0Nwz2imnnBC/K7pvu+WWr8UXg77QLr70y+3aa2+IK24P Kb96pIc+v2YbgO16qb5v0iY/3BbN2NJ3cmjd9RgTzTL0qpzHIKXmW+vIBnpFNz7rv6VYPhOabB/r 6FW79Id8dkZcY6JqYGD24jmzNlFCxCf+al82Qh7bW+EyekLxMZ+FDcW+qYeuqBPdeQO3xtjFhn40 RFrGbjnXFQPb2LONmS9dATzHtiUwg/baxzWTjQf+Mq4dYRljrTbujNfzOaOVjvOyqms5x9r7I3bz S628kfPQYX+uebWYbQ3bwYAmXIT6mFl+rUZ+iYPcFt9W4ree7ATfflifmvnohR39WnZ7w4/8I42b J4kHESENKkZLEJYbhkPORq2L3kw3MJbyki24ske/BAkGxbjZS3vLiQhP35LrHyi2LPUykcO34M38 qkpu9/jti8lOKPpKsN8xGjP08Bs5ZNA3BnRe6NkXxdhlgzWL2TKrvgaG8h+6TNKnH3ZILNx+vv1V fAP1bW9/t66+gUep9pOyc1vr7Zz0XMrvaKCCs8RS3EF37XceiqnnB10KMmMse9zKScROMbbkRJk2 5kExTt2hnUPnWHZCdvRpd92ohi3aLmk3DuKcWKMzHepDIpT9DDHkKMLDd3jqpW/JjfkRDV0x6jzT Rw6CYCx4zh1txRO1/Yc2Cr6Fg8SPn4yR53PFGPLRIJY1H5HJvEx86+Fb9Q85FREDsYyhrwKANssb CspRaosX+o5rYCIm8L7pOpzIWey61Lygyz7D6zFuhz5ln3bEEYe10049KW6HPqcdG59fCxfb1dfc 0C74/CX6/NrNN8UXDuIbovjOIz3sB/jkjhzlmM39Wcsr/mYqyF3o9zcN0dy2ZGho5smd6BjH3dl0 Wrbokb48BkUz5wVBLQoUYnF+0K/HLokPveAi0IuaZYxMF2Z0nCNjm++6QA3Y4WHg+oqe8ZC3zpDD Tgc0r+I7/zvjC2PI/qGQCq7xqJc2oNk+NphTM1s9d5v0rAuOCzTkNb6h7wUlNONUPdMcKzimyZc+ D5bjILzO8+J1XNkLus5TYd96kgc8SrUvgpLWqcSMXpyTYy8Ue2c2+IqtqmGa/fPxikEaee7gjqee Xy2zyX61RXvEVeKB5hwYz3r0reOxlx+bDAbd42QMRAdG2B3nJ3wQM7n4QPzj2r6VDOS+nUTXPGof bGmbjgxFOgFu3Rm/Dyj4ToSU+saytg/ZbdvSATno9OGZb0eMESwlyEmo9vDNfbcHTuiB4YOXkwze KMTRCzhgTKcIDqTgTzvwJL05XwFiSNWOI7HcSxH3hkbo8q3ZW2+5vb31v76rvfktP9quvPKa9slP na9vnw65UK+60OkPWvHBB4u0+M1tsVN9MJpptj/o3Q+PjenkSLKRc4rHkLaxaK8V89Fc4qofdPtB 3/Jg0YY3+BAXpfIXrFnXuLLhfIcyJ30woEdg2Q7Lnlfo6WWdjmqf1A0BfbkBwU0FmfjjoIquDoQd U/YXeulPEMGUM6EX8lLRFylCa01xgWORNJXj6BzYXS98qqqvpCDT1yeVnWMZlDoX0jkRQyl8xXg4 iW3Wcv7R9wPjdujRxzyrnRUPy33OGae0Zzzj6e2BB77eLr/8q+3tb3t3+0p88eBrt9+lfXnPWFzx 2TV+R9RjAirF/mdGIQSlz1EJrGzkkkS5HReaO5A3hPM3+sIIe5hkTFPA7CCnd/imYwny8bJ9C9q+ 5oYjDJ80/siPOVnj7doLm8bcVIM52Zuk7FN6jI9uTTLL1lLCfeky8AYNRdtcYriPLq+hEn4aDxnr m+Z54L5k+sLNMTp/8CgDO7sbtzsjZ7ubZM0PxzfaEY/xK2OCcPXbcS9BBn4wlAvyBRZ9djT66u3a Bm/tsc6/zENono/dV9tS3WNEz3Ss0ua1MYbgOT8eT9vG/1oqLvQhV/K7lKn6a+1qwbrQ+MiG3mBb aWFjfGHBfANR8xrJskCnuYsx69TkQK995O3YWDVDi9dIAELbFNlZJLOK254xLe8YbB+dSktISVc4 HehMMHfY6H6ITlLp9+RCE35ER2zDrvlV1wYkxzTduWzIrnGitl97xYmFn9Y5/vhj2o//xA+3m+LR BFfHowr26U9pL+a+Zc0R3xpimXBr7C20iMX5M2+Jn7kNbo978FdsDR5gzj/tkjO6taCj/K7gWW7g xnCNE3YwpWch+oG1qWhumBlivjI3SEHLbxFunhMJ323YX7C6J54XdNdopm62MLxJRJsyeZtaoj3+ dC2taDEWBL05INd6Rayx8CCbmbNuCHypxabHQBfYERsyUZa5hp8yXAmJ3w997Im4WrZ7fF7tkHbS ice1s+PnqE466bi4HfpUfSP0kku+1P7wDy9v18Tt0Afu/3qY493vHvG4D75sEFfZZGXThjg4YbF4 kqubBDfQQVegG/g1PuLqYuQumvmKdtwa9gnIdM1PJaxbiLZoHYO80Sf/2S4ugI9uFOdb+S8i32jT uNaXO1Ngyqc87vbxkn+X9Mq9qa64FjeNGJSxUHY8k+a85fxBRT9dM2LKGrfKdsclkHpFh3ym6rCP zJLWRTZWttudGnLyo+drR/FNSjnG9mHQaYA1xmTGmXd6DJnfZG26aGLFnfbPCt0XLQrjjRSlxjuJ ZSTfyMUH59W+LcdvybfNtVpe9LEw37jur9ehmf/r7E7d7Uff8NNlZk2yEM1Yu/KkQVo6NqkPXZMI hFfFpc87QQZjHHDYuYLGu0dkkXExBn3Lm1fr6q/lqm6V3a7tRCsP4c+OMCwPpgfZ9tkBQAiY2U6L bM2JfV+jIbtd8aVu/NgzniH1j3/uJ9ohBx/U/uWv/cf49tu9us1T9VlEK7Yg2t9hHx7Owou2S8pB T1rGY27W2/kOL69o5geHyQvw/UkYI8eWA9FfmLCPaSW3YCVeHoAqD/k6JvBqv+JB1+eIiAuHolQ+ fWSck5TIK7uZJSTmRbaCyWffwOSPYgz0NunWuNhHkEO72qWjK1UepyCkZAjuRKl4iBM2e518is0W rOBviqFioZ8XPMip0HBVL+yM0u3Rd07ME4Y7vc4xorN1XKEaA11+O1RX18Iqv2Zw1LOe0Z5z+snx DdFT9e3QJ+IDzbypuejCy/Tt0Bt1OzR+9D385eqacw5uRjD3n3hcaFd/M9bIVEzqHr5Few0vdMa4 KaIZLTGSnolbx9oqN+HiMXYo4zjEqPaAvK/D17iGrHMIjVLjYk4yO/jAf4fQvocJ5gp0ymRrsk+s 2M1H3nSnUny21dXnYAOVczG8tLEuKS96bjcjzWAjD1sl8Un7NAa6DX1gvtiTVuh6rOaoka+Ou8wb csAYyjmptCUW/aUc9nmRu7U3cuQ83/Qg47HtcZWY7Z/86fS1mJb20ye0IgcrePDJgT6yFI7SXvuA /9IWUD7mex4yrswvSm7VVPymVXpyt249JlttkskpTyWcAeL4h08htMQZwtFIRPtL3qe7bTO5bszj AG/YKDjb0XL/S1R8+oYXbyg7SQk3bQnIQZlK0nlVnh1FxgsPaEoWszVeWmUjEMUYtJ1k2rWghhEq iuWqbnJ2fpu3cjg8Tbhr2jUfHvBhX5OADxmHe4tZs5aTNdqazUpzDqGRt4MPPrD9wv/x5nbffQ+0 f/dv/3P7+tcfihPTlPXlZEAvT1osiKYxrDttxkUm8FBDFPGoOTbb+x7zRreIyuQNAOfJJ01jkCto GHFOh6FoIEccazxo81znwc20Dis4aJsWb4k9z4l92G5OyE4I7MrizXHk2BCdtNPH2EKh6AAZPmuc cCLK2HdCKlg7LIhUMXTqiXkLQPA5vFJ8EHL8UJOT+8jOLN7WdAUeG/Pcr3Ud14wz8hCJYP4z7/eK xddhhx3cjj32mLy6Fg/LPfBpB7S77rpb38K+9OIvt69efZ1+G5gx4uMG49ZsGAZzO/vVF8c9k4+J xbhMGZk0prmHRhYtenQmcwZTk17M4A7jE7O1skYm5dLnJTfzMx0HkWLeU6YjARhpx+OaEvM8aB8N 3d2Lrz6GcHTc0eINK8hNkdtKr4OReet2HdhCTKf4XVy8GcL5p+95hFd2arl4s17K0sOpqRhvmTck iNOx+vhWaRPK1FqT47kD2PG4TdLTGCbfY5vy9g15+7f1WF7RpnliP4nWESuWPqGMhza50S8ihQBt 26j2obvoM6jRN4ZtwV+PPzWrnLHWatutNmlD5yUfA6yHMoOwfe8blp8Jbexg43/d4q2OBS7s9mM/ +jMaGwcsYg/Us8U8Ja8MgmMw333rjX5voO+JAIm+CwcByozWmTp5q03yk6iBiQ5/cy34gdKBIp3S 0UGjLxoSYb71IE0DPtmyz2DkcasvKALCsaPnxROmaxxYMi7++gC1XKggNwJUp2+cG+U+d1DbnYmV DvYeffTRdmQ8QPQXf+Et7Zqrr2+//dtvE83PnHLOi9pqc4p/iqvSUHL+1C4oyzwIoY9D5XmnqbQC k3kh/nhJhrHveUHX+aVmB8IObY+/saQLjsraGMtDzaqZjju9rv7m/GTxkMxpx4++OuGHeCng3EVQ +kfL/pun05yU0O16iHfXp3e3E01y5MU5SnfKlpxMXfIn5E7EjJo0eocMDiczmwIwDH6C4r7Rl31l NYjIJjQS2LFG1iMPIQQLKeKSWHU+6HqMR1xhY7wPOGD/dkTMdb5scOaZp7aj49lrxHftdTe2i7/w pfgM21Xthhtvbg/HN7BB5csGudogwvQpGCrY8jEnbyV2xqjsWRLmvQxJNPwl2Ci5TXnFNLG25C6l UgfZnOfRKoo0XSo2NPOgK3M0whfTkaG4n3JJ89Y819CrHXxirDiG5H424WkShTC2q44QYgJ7kWdb tfYJnbQFerCYs+kFWGrRSIGhmjz7NMgjRih4s/Z5UHSxpDcudDaUGav7lAfz4Mixmq0EMaUeL0yr eKZZjvg8B6GR7/wllpS0fCa4IinLMp7zpgfT/UVv6HaWsBnL6BvJcvTN7+JDxn1q7Sd9YPEbHevC dyy4wdBtKmZZHrlxnhKzz7ceT2JZK1GdQ8ewtJWqOXfNc06MlKFMcSCHnvci4lvGorkrekoZC928 OhoUgaQ1H9fF7/h9gQGp5zns9BETXjovysbFm7T7hkWJdtBQrAYtQyC1eGertB21jWFdht6LnHGi 2kILqf4ODHxj+AAAjW+5pHvhe180WK7ek4fGlZc88aNJnnuSe02UeoWsfYLi8LebNMaqcTFBsWBc bNo36Gk9adbX9DEDhSjwwPXlc8uA9XB8M47fV/z5f/IP2uXxENH//J//UI8QYQFnW2C47dxV+2tx LWnoTz6CuKlM4zBJhP9h0D5At33F1hOceUJ/Gld07LP0NFZBQziKdsLepr/Jzy3xIItCFC/Gspfb Ks9cIP/rizcimeKhPcWZsWDJ/maMqaFQ0HX8wdyyeAMP8SiWy97a1vaSN/yQ/5O86GGT3PNXLAz7 thVSit3jNaEsW2mbPLFf51zJuNGtB2s0OWA7Luef45C/aLDPPvvop6hOjM92nhlfNjg+5vgBB+zX 7r77Xn0r9JJ+de2O/mUD9m2uOqfd9GUaQxKbPtnu2Dd7Hmo05Cf+NQ8TL9TlrDbym1aNa/nGjrFN nYq8fXvM81AEuxbspfXMJXz6OvEhr7GsGthPetW1hHPufq1zDDOH0Iml3g5VTgJUt0CrIrL9tSCP rmPM3OQc8NzwfN3ON4CmcU17Cc48jasi7EA4UYryFP0dLd6Mi6rHnUFcwBXkqWndGv92NHAd95CT obTmHDhPjIED81ybrE8txRgeO5cTJ1vDVnTT0jRPlrL0h91whDxSyA1+QTHN/g75FNXWMRTSlN8g 2tfEDcxQmM7daNlKIqzFkBxvwQgfe4BUjtUS1c81PPtkeWrPXePhlT0bx0sZSmumGQOba7fG4etL mj3Hxt/x4g0FBgOA/gLMxUE4sdDHxLbQTtQVB3GGPQd1OrBXGicVJqIS1gWNwYxy0paLt63D1K3F SOaApbPYMojjAVO4Yc87lrTJEa8OsJanLRihaLmBC36PxTzwKamPnbmf8OSTGm6ljHwKOo824IPZ P/tzP96uvur69ru/+3Z9o85X4PDEsY93OT2/wE60KXv2OU6H0sXWFGNwuyuT3yBRkCeO7CUpog0H uOVF3BTFHzT88iI+c5MSWpSFEXC8c0kvFJzDHKPJF/iY9diF9vATugsW6POSH2aU2mONFDmg2A/N PqABSEdncUlYG1uY8gElS2Am7FiUCa/TphjST3Smud4htlTTOMNynkjyZLfTwxhjx99kIeSWPg3+ dEVl4M7sp21yXhdvNux4rEIumQ+8noyra3wQnx96PyquqJ0R3wo97bST9M3Qhx9+OJ63dqMelntF fDOUz649/NCDclmfXesfbDZu1unLNF59mCIJ44HMIUio5GAZT+2POa8EZhZ1vCR/oe+4lvtQwOb8 SIc2b5VvbZwqKSZlUsNyWp9swk23Ni8w8D/3L+0NA9AnWxFwlqIJONnRzhlk5UAOZEbdr4s3+zuf T0KdbcaYSCE22Cz23TVeVcYFbKebilxjgMySPukhH1axwX+qTezSsm+QFCN1GEv30qM6N4qqjg3O S1gUy3hpuusHx89xFCU2iieNDEjb9cm++jDmmgHAzKRoPiKrbqeNfsjZJw5bOVapuyl/4DoXOKc2 uhEi+1Ka4BiZpfrZSUPGfeqKad8rzbLGd5+6DqFSUJmlvYzVdhCpfloOLONZ1nLYtF3LzWg91wB4 b9yZxZs+zsExEHwZz1GRDd82DZ4GeJkgnPSJyk5ZVjV68YLnA1V1mkFbw3Dwwd5Slj5slzwro2PM SX86KU40a0wTtcZl7jIG013bJ6L3uHiCkg2f5Exbw0t/w3r8w6fkgObJRf3Y+IRC32Ua+LQFVsYY SGG8rxks3h6JW6jHHndM+9mf+fvt9rga8bu/87b4ht0d/TlwW/0dits0nG8CyEmcwltjJUdzmSUs +QTP+ar87eZf5jrHAF3ngDFh4o8DWQVcaW+1O/lc41yO6wpUkCbd5TzBP2wZM/1dRzGVGMgpu20d 18SY59W46G7CtozHyT6hYx7teZnbmfPmPRZcvDMGyz7YVpWs+x2yvPRtTd32bu1p8Tm1I498Rjs5 HpB7+ukntaOPPlK3O2+99fZ22Re/op+juua6G+Jq230BGzbjL5+9RhxpaTv7GnPslvnb1YKyXclc rOYqxlfjFbi5TySS5xd+cSiG6uPl0lL67gCYTYlR82m8STfnHNJj8RhqfmOxdjUGDOcHHCx6fzEP WvdE81ZyIiTV+yZ0Cj6u6XqxwSx2yXjQgWYrya25s7zrmh/7j7YRtuYmNdHjjWP1wZjUNb8saHNm TOPkfRlvHQU6lOFH70ODk1x6k0z2crv0yb5X3cxdX2Qv/E9znk+yUuFH2+Nf84qtah+bjD+xLGN0 fABW3+yv5o2Sksc35PKYnhpVHwrF57Dq05RPSUhubbMmV2NBx+NF2346X9BcbB/MaT5HHurgdeEa B/LWNdbSB8ukXeYAkp490Qwbj/dZwvEAzhoGWnnuSV3NiW908QYYZW0gTcMMDhGAEwktHcxJAsbW kgeiDLQOwpTQmkT06WOH4hpLxhBjsVn6tNTd7kRt3Qo5JkgQ05MyadZoIST/YuODJhMGmuPjAKIT mgxN8SxtOWb0nOPqG/48Elfg+BHtN//DN+gW02/9x//auFrBz2h50hq36q61ne+0O/mFrN5x9wTk 7eX5eK7hkU+wPIGrjHO9FhdyjBO6mbucB86fdSveWntr3Ft9JqQe1jgYrGEh5cXq0j4xBDM20cr/ dYhCNQa60qeOcfaYW9S0jr4qY1lqx4OeD6SVv117sj0fe+Eyjn3xZgzbcl91yHGVwQu2/fbbL26F HtpOjMd4nPHcU9qzn/2stl88xuOu+J3QK664pn0xFmxXX3t9u+3Wr7XHH31c8XFFbrd4nIceUBtG PO4zO9FZ2lcu2dE0FpO049qEk5IZs2WhJUwe05a24Ht+VZ5p8GsBy4uMKo89+2XdiYZPzLvc/7BI n32C4jlkP6GBYTz61ZbnWqXZJrIuxnUff7TP44eM54zlqnAYkz9gfiPFvjNsATaD2JGfCKPvvM6U e2fK5ZQL5wERx1ppKRlxBV8+hBHntPqEPnRsuFR7pjnHVXcs3rrQmh6p3i42+2471MY1DZvf6OIN n5bnkBqDbdTasVbat6aN5TinFrCdsUUM1qlXHg2TQwd27Dv9+IaOS47v9uNgWWqPo658xwRCnzEB cm0sscTL82+3v/djPxsYkwOALou5KLmY5j714OfeNS7/SqbT5FlVinbFGhhFZsnHX9PYbQxdVJQY nUDLqMWuE8bCQjeSSQotABY5AN82/Pk29bucdGOEK63ad7vGYzyUdAUl7CqS6MOzG9bxzm496NpB wrhl4JlPDJoAK3JBUnnssce1cHvTm36onf6ck/Ug0k984rz4xl1ct4gJaVzLUw/8aC/5+N9TooVX lWecNl1dQK4W21jiI+MdCkPGszz82kafvnHMc7/Ka8HSJ4/59lkL966c+0fOM+M51+DV4jHDifiY VRwMuy99cNH3Gxr0JE+jj13agjAV27SP5ni+WAesrcXjs2E/CYWqZSxRO6PyJ/zEZSZWs2uyzJGQ 0i1QvmRAbvjZsP2e+tR2WCzWjotfMuDK2nHx+bWDDnqabulf/dXrY7F2efxm6HWNXzV46OFHAiHG n8d4sGCLPxfyIx+cqM5Iv0IrcgtLcub1mqqqTaiTwI745J2TnuQYR1QZ/KD4TZnn7YRKhqtHId3n QJWhXe2btyM/kasyGzFIUth1cStJ2SO+imVZastnI3OAbOYEfkr4GFp1aWvOhrGB0wWcC+jO3bh6 hF6Xq5Ux1njYmeZ21Vpvg6WFTNTyEbEg4qnjg7RdAaP6hJ776NU2fcqa78gtdZdy2iNiBce4+RxR 8ea2EnGJgfxcDkqUPj+YKniCDLnRftgVqKxbcWlDVx0NXxAJ0jxWKRsheN0Wcjsq6V6MSyoN8Qlt sl8XRfDRtRrzw3NtgOxkw7aoy5JjJ7VLjkIDDC+svR8ApDhjjBlryXjx5sB3NMEtt6MdCWPIGs96 c2cyZLbZmgLPsdN2YIBJAcOrfCRSSqy+gZITOUZDtDyUQral7h/cQpMwpP7Cb53koy8kjzT8hd7S J1layBjDPHkKZsg5X5UWZkZZo9tPhDzgtPEF/9Ym0uPxGSIePPq93/fK9l2v+o72qU+e3971rve0 e+ORInvFb6RmARmLsaNqm72kRLvnoV5lW9qqY90hZpUxnAuYazTsIwO+7TvXQdoyDtCMQ5uCHq+a L+UcZinoVX9grcWxRpMu44hSz382t2LO7JDLMv7o7ExRPF13e3n2hZjHcmxrbtAlnmVZG/dJRtZn +dT4EDdCgafPq8XqlT8WbU/dd994hMchTYu1eONwXNzGP/iQA/X7oDdcf3O77LIr2pVXXdOuv+Hm 9vX4lQMKByp/0SD9z3ktJnzsbchdlfe443VPgyFE6KM29peaj+3zkIsLjofOYNqIbRxo9a66+4nB at9+R7JIlwrxZDFtGrfqUxcaleODsNwPh9Ci4dxVMm/gKPomb2d44TX8LbF2kVllueqTMaqg5ZY0 +vZN+ej2xjhEjvByu3xUTOORZI/Rkr/sI+k5Yd5aXsd4rWDX+Idu+O4R9jnU+LVmEbFJDvpYZNhu lycnPvYjZ4yKTdv5XdLdr8dXn//Mo7YN+0msfqNiOWyMuKWUV7aWY2A/w/VxjDLGztazueTcOTcd JPE5z6ZXnk9jHoXAHn3+bzdXZraMHbXjmsVcAmDf4pi4XTFXy5YArLbsP6OKnM/U2+HtMq8a3GXl nVTYNClRj7HTjsdpxAkVPTb1igo0SiYl294a37Xpo5aRWLqUk6J5G3VCAH+SH75FB5hlYceAXH1f ytT+CkRlb2lzMuTg/K53/Xn7yleubm980w+2k045rr3jD/5EH/yGP32ZIdRxdGPB1+34GxV3iZEL U3aLzbachzUJ83bOaCAA0pU4CNHUAW3bXBR0zY8AiXrNnyEZeDqQDsK3tpEH6fV59k1ZUm5i0/Oh /ESbb4Oy/3MrdP/9n6pfM+A3Qk+LK2vHHntUfOngoPbQgw+3G+OxHZ/85HntqquujUd43NLuu/e+ vj/EAT/eWHAr35jflJ9FWS6X/re+GfMknd5J6G+tRzK9k5YRY5zkcB9DaMuTS/WQufTNFO8HO4My ziHhW9VzGz9wp7j+zbg2dGuMO4Ntf3YmJhuxjvvU1q+82kYGf3ROk7A14OxiicShvcTfaZQN+jv0 CL2SVNsn5zs4Sm52zZhRf6Plm8rFLhhd7lvbq6ZXdT4u5XXbtBK1Q1dCtEmyEh2J10o7ErUmZ0Nr vAppOdPA9qqd07P54PDyu0H7gJ5l0IOusYvlKCvW+rXa7fbu8e4iMEjVrgyi33mgo5X2hpwMGyGn vISz/WJgUOaFmPxuzP4g4dW4bCnQpCk3wXculAknI2KqZZIJaueROz4H94y4dfWDr/1b8WPcZ7SP f+wz7U//9EN6oKlOoN0eWGAohgoMPZmrvCpKLhzXGk6VNSa0KisfkihxonSk/IgRE4G4pB9d587z ClnPNfuCmsepHlygbyrGrXzNgyCAK7zwgxr/q62qs2yv51iIM9ExnoFNAvjsl/NEjLyQWcZjPcCQ CSW2o6zpDlpI4QmFx6Jw6xN9fRs0bD3twP3b4YfFbdDjnh3fBj1BvxnKlw4efPChWKzdokd4XHnl te2mm25u997DYi0XrrxRkP+6TBU+20iamm2TN8UKc402U5JMgma485jXZHdGznoeM88JzwPz5/UU n8drzncPORbB9DNP5ng86OebGmQdX41t52wZDwR8Zxjq7SXsUGSD8c7uDrfGta7iDX2ubtTYPQ/C Qoiuow/bEScxW8q5tw3qcU6IdmZlQvYYIcfVQNuu/sCz7+gbIxIw2pY33kwOgEWxXCWPebKCa/sz +UXslVfbtrUjn6qO2oG/dmw0Hh+qCZHZ2GmuxLGHcVgea0JwjNOwhVzvOIeDVxsdT8dyjEapORm5 qzrRHvNkQV/rOq4tecJe+D4dk9a0O6376fkIFVz5QR04tazGAEYX2jYnyHRZ5MajQmxsTVnmbQCl aK/JbYdRA7Cca7C8aGFQTMdRf2266te2BwCaBxR9MOV31JuKdUmcdDfEtaZfT8rWtVy160XB4IU/ 9tM01/htn6B54E2TnyFDgUaMYDlf2NWBDZke9+C5HzLklaIdNdp64nUon/v857Yfet33abH8J//j fe0z8RupDz/yqK7CdRXZWo690MDpNgS+2OCb/IuaNwDIDt+QXejCM7++Y4EGjuWNC2lt8eb8O+fI rx2glnLgbSoVAxn76fEiH8KLmKi3jNMi1mrHWDWX29KwDx4nxH5J3jlBb/gUbQq5NJ7HDbrtrek6 Xs8T8sdnzw499KB2xDMO03METz75uHgg9BHxBYN92//f3rnF6nZd9X3Z5xyfY5/jS2LHiR1jhwQi Ie6krQhqKeEiIBEVUi88lEaE5AWpVavSvvQRqW9VVdS+oKoIqVWhFYI+tFIopUKiTZNUpagiIYDt OCZxfE+c+HKOfWx3/MaY/znHmt9c61vf3vucGNjrnL3nnGP8x39c5lzrm3t9t+fte0EftY/v+Mxn Hpwesg+H/qJ9v+5Xv/q8++Aydba8bg2/HIoj1kRIokR4nh+RxnytjWSyUq4aL/FKT5tttuLB6fU8 5MOPagpnO1jXMWr6JZmtHy+B9DFGpMpAVZ9CQ24GLX7Zh7+l31r7ihunyEqY8zyQo+/JBvhZnKb3 2MzOP2w2EXgdin2rSXNAPlUOLvlvuTa8/GrtoxFOOmRcEzymzI/CDuFyfSsH/u2HI1+bVS9X8Kvk RJdzJiwYxaGnksWLVNe66t84dNBT7tVGvANfjpfxhhbOmk/JDzPJ9BQpspw/dvjK61AY4RhzOLbk VHXKISDxO+UjsWo48iVM5ZSgbxOv8srrxOHEZzERK3y0fqQ4qwxFkjOEV/qeW/MKTo9J9DcdxJ58 7dx5G5Fo0ZUURpDNMnFhkPkkR0bB/AF+A6uKgV3mw1Q6+ipUlmW8+nVCzUYy7PtjK055YU8fzjXe Ho9dxqsvnMbg6lEWXx2vdBQTkJdto8ZXar3//d8/fd/3vdfvlvz6f/ro9Pu//xn7rki+L9XukGgh 7+EUr+JTvJityUa0OiHdjgVsP5KNeDNH1dua4nDbAoAPqZ9g3d0AIL4Gix3jfFTeJFReSVQv2L1O fnWXONv0fXJ1PLn3ShvneqDOsQnvslQDcOiQ+4/pNLfuz/6k9geS4vuiPQV65532OWtvf9v0bvu6 KT52htev8RT7l+3doI888oXpj+xbDPhGg8cff9Jes2aftcZhMftr1qy+OhSTxkdtI52WreI/Kp/s nLcEWdnDmeeDap4DD+YIQ6p143UtpM2GXmUt65g1XYClaYiRLwMXfGfm1nFu2NPPVnKFPWefj3Qu IV2voSc5N9YIR6xP+xFfzkF94lXMGdtoChIuCWuLblda1anTI+VLsQEd5ao/7MhFh9vaHz15cwKP ywWCL/X7rvJXi74+sBdfHk+ZMPi1gV7iBa8NjfP1TvFRZO63xDyAVZHikx2KkUwG0jHONtKvtT4X 3TzrcTXz1fMp1aTylnrVcTHU6hEfsfXxKfZeLi7/o4aaSdC1Pv+df18/KSfZKtdMIZ1kwvRy6b2l BtbB96bN28y4G4wS6CCzIY5VtHY5n0EOGoiPhPukpYNQvkay7HBtsnOuwok3c4z68juKcw2PbqsP 8eQ4Jdva8oD9qr0j9b773z792I/94PSd3/nN04P2MQ2/8dHfnj5lLyi/evXqbBM38rU11824coL4 /LJo7ccX+kJSIz2+/GJptjrAccAlmxyTLhrC72vFcRTcmm1da8TbXSzwtWarWMhLtuA5aHltGk9/ +gvUDYTmJnvTCq9N86dA3/nA9K5vuH+61z5v7dbbLvkG/yn7fMA/fvCz/vEd3FV7+qln/en311/j 4zvss9ZsQ8emdEtcHsiRfxGtZ1YZIreymarScWeE9ZiNkzIHM+uN0iGLdcJY3ygQOcI/j0MSSYmU l0vwGtmMjXUcPrDRgR0/oPnhWPMViPY7pridJ2GraBrOe+RWROCuxaE1vJuPPIdX+feI5qqTCWtP rnoGSHFkpzl25Ks1zYapT0pKS5u3eufTai8ZJooh1kgiKV30efMmRB8ncr9rbufkca5pisf5rI4n ceQa0lf9M7ee3kbmeGu1yc71qjbUsQxG667iVjp5npYef3PsUDGPfo2wvvyDcV25dvRzKb0wDl74 1fs7fPNWgrEo3UVPiHAtoL1FsVz5sE1/Pc0gCXGrCOKjRPrLKOssGGfhNz/gmXiNXZl+rU12zrWe cNhuWMg5zogoOU1d5Ucc/UJIsNVujnMNKF9gVDPhr5YXnvMBqT/6w391+mb7VPvPPfL56Td/83em 37ePcHjBnhrjtUr+HZEyKq1qyHB4chVcrkk/dwXijWLzutl89vkpj4ozTO6LSzKNZacx+j6mJZte DkeOS9wjnLC06JewkvO6EhZsXrOZN/uFk0O2wkFhzvxuGjJd/M6dPTvdbh/P8Wa/q3aPPQX6jun+ B+6d7rTNG6/54Oum/sTeCfrgg/Yu0Ecfmx5/4snpOftQXDZ7HLx+yT9ixrB62tbnic2bu3TPjl37 pXjBKOZdvDY5bKTGOerypEdI8TZOcQR7yOcyi8DqI++l8MhMCB8++s1bfo0YnJ4767DQcB5gd/Dm zYzqgwd8JM7PyoGfWC2tlsTtcYXSrSN36xqfGFUvBxzwS/weW/IhCl0v0Xt4ppBN77PGJePSCrek 7+CzIflp4yJ78akFo6ctfbISg2O62JPaa6tx5RvMEz5qraVnbkyOXb5ervHgC734ak4o7KDGsmcs Pf1DjiUOybfyjvC9jLE2b8SvOl3rzZvioC7KR3VFpvOvxzEW3m35ZTIT1jWOSEe2R4ZtL5NcNnA5 pwmElU/fvI0CrcbZyPoqKAmJJGNH/d6pTmQVJduMOLEfybFT7Ey2NgAu14nBwA7FQB+unlMybTx8 8QPuDvHUeAxop5yjqizZ7OBNJ1mCRReaUuDMpVhdxeKwI5/kLkBWdIyzvfRrrWx7O+60oXvXu94x /dAP/ZXp2779m+zF5s9Pv/M7n5g+8cnfsw9Mfdr1/tRY8i9f4tWYFh9sDMhV/iqOJCPFqsu2+/rw ZE7mhocmybJ99WnCkT5CYa3ESs2YbCvOrJdstbU8+7Wjc8NLMFjDIx+KJevo80BEGz+TfwwMG7U3 2cbsvrezUXvAvrXgXtu43eG6F+zjOZ54/Knp4YcenR7+7KP29OdT9m0cz/rrHqkh51fdrA3mOuea Y8ny/X2rSCRvcS+hA4OPnDsXfsbtupK51G+cazGKl0WqOAhHIcmHcFk3Ojeb13kvci0LPqnYPFJz DvlibUTOnP/YKBqH1V81Jle3GgEY5QysZ4LdfyJATIvviBUe/yl64R3Y/SKetT9GFa+bGVH7juY5 0Y12Hr5ub+LIemz7nDKf4kQ2wuKhx2ev2Gd91s361AMfM+FgYBgLOH42/oEzilsxjXKXTJgchXTI Ro91ssl5Z5vMNYoLvdYTeq1d2WWu7Et6tZl7DSf8qM0cVV/qTxz1WpviXItPccCVceKWXndD8znR xyKsbNWOeKXr24M+KsQXJsnbwQODB2djOVRAGoND1geO/Gt2WNB+EeAEKofitkDjpJJiS8t5uHPp E/H8wiC66q8I+nohBuM1JqZyuF0ZS+pZpFyEVStfIx9ZlvuypT1rd2bgeMg+f+shu/vytnvvnr7n vX9het/3f8/0o+9/3/SZP3ho+oS9seEzf/iw3aV5zh/g9YG/mWe1b8mM4lyzqXhAKf+lPNa4so67 SMFhF237R32j3XgRL2Q1vhTbjiytnarLwWzss070LQXh7vXpZvtMNT7wltepsUF74IH7pnvf/lZ/ TSOf5ffCiy/5xvvTn/4je73a56fH7HVqbNQum5xLrm394o6aPWCCjzrM/0BSeIpd4zwHOzpAKzUB zxJXHuKMNnRzWRmxhvhXzo8gsDPTAo93q9Mvs6mTpxKt8FbMcgefOedl5H6N4ucbI15jg5ZqNbIW flyvZiFck0BNPdq5R18y+jpky3WOteZ3WlVnAwWL0I0vc8GBSd54NYv1XvZ/iD3rgf/7jhxnxkbM G+fWkss3D+AZ8Xo4hvWaWf29pTbFsWyUc46HAgoneY9j7KxlUqQf8qb573n9Okh09r/nkG9a6bKs +tqjrziLWYdkGp94azkTMz/aZI18CINOMalFprz92Qa7RvImnKwHwyFcjNoY+QgvXG7FkfHI/N2m MVEBb2Vs5jJCV9ZEDYqxZOyywcpZYzj5nmLx2EgkuRjFoF22L8YacTIq3dFfIxmlWmSZ8pVfoimn ZYYN+8Tti8hy4Bj9pSJ+B3S/9BctN7Li7xzzXE5KQbHPsjU+4bJNxvM5XnzI7yV7/dO32Aetfvd3 f5e/gP3ll1/2z4j7v7/7qenhRx6dnn32OZ8Tf/0T81N+8noh48hakc5b6sjT53Xuklrv1KJ2/HAo TufsapD1Di548q05l7uB0p9EyzogD/5tWROKxeBuoxgUJ7W3gEnW4z5/003+ER23336bfeTLXfZa xXv9TQV8cwEf02Ewe6fnC35HjS9w/5M/eWx64smnp2dso8abCuICBh+f7ccLFuJQLT0eSOzIfdtb OHeTz+N1g/SLGeIHpmBLyj3dWhMqsmIsfuhkozyarHGUMhpnPj9wAFNwZHucB2/MKX3iCZ6VwAoX nBF/YPdda8DDTTyKIyI7vIawcLAONQFsxEIY8bD5qOdSaPy3ZAxAKhbGnJv+xe4WWL95yb40H8Qf KUVO4RmmOITTmFY503cfZsQfKxRT6xWdDsVLnD2/MEtt9u/2nl+OYG7Z4xnn+oDuMWKQvMdLr1Y4 8iUSnwMpB63wzmtgxqNKKKtDa4RL+XCOUmd4JFdYXkPzvnPtUyICrrQ9Z4aOaif8SJdt6Xv8cZL5 vMnG41WBeqM8Lnngs9oWPmCS0YIBrvj68yXTbunf8KGf+od2/gXxFoMe48GYkIkjGAXW4056zGKk FLlo8iGZMMi3XCgPwclXbt2vbQB4SiOmKWvHfWofD6ChrxcjK+gWnnlefvoMazL2vislbuqWa5dR Woyv2IWfNzaw32HT8G3f+k3Te/7it/ldnlfsqdaH7cNXf+/3Pj191p5+e9I2C5fts7786UfqY3e3 WCtEy8++QzlmnOqk9Zd1S7xam8pB677Kr9XmjVw3rAniqD/24ERu5fIyXbhwwTZjl/znrjvfbHfR 3ja93X7ufutd0+233+p3x67YV0jxGjW+ToqP6uCz1Z5+5ku2kf7SdPnyy4WL+tsd1TN2R9X+4SXX cKl2iiRiYm3aTz95KHsZhnbIB2pdJ/Acq8AhR/pFvZhHzeUSyUjPNZYc5joiJNrdo+FWEt01W5Ro XeORn/VjOa653RinNQ6WPDYfhq2bIWw7Q82rLdxyTq9f+4QnHl0DOsrZEHz2jw3HWu3kA2Qfrxtf 718EdAKBKC/C1/VvLRU/v3mamXPkJAJIzrSeiImTiDXVv1zA/SK3f3GVyQTYpfHXsKvrUDu/twej 3JTrkqW48xwed33e8NMf+lnz61Ow5Hd4sssmW+rEkm6R8AQUKhpUimFtLeQLwNrFa+2iwGLD7+ww 57OFCWbhgXoUZ55UeCt78bVUS+UAp3hvVCzFdhZnGSzxZay4JRvZ5Dq9ZneDXrN3GnIH927byH3j N3799B32gb9fb5+of/PNF/yLxXkd1R/Yu1U/b5+s//SzX56et7tBXPDx5d+RV249yyctfr0+Wai+ 1qzZGyikReYiVZKa2AVsNCfOXWw8R994y8HJtH5hsIDw73cRzR++4qf4YCdk+gsXzvu3Ely6dNHv mvEl7ffcc/d0z9vu9tep3XrrxemMfVzLy1desa8ye97vpvFVUo+xSbM7ac9aXbnL5ndCSv6tvr4o Ig6eEmUHp/ViYVjXD/ClmkViOmqEOTkUpDDg/YCr4Kph6YCAXz4MOLym9HYaywf0icXV+PSYLQ73 b9IIKeJqMvS79k4y+6Vo4ZnbxDiyaH2rl7tiToOoNLM6gpd2DTcL5UiDFv/IXPVAR0w+22bCOuUp yRZnsfYaREb1+s5MznKlBk3W+9UcIcesmHp9VJXeJo917UZGDNTPlmLU3fo9h+7UG7I5y4RdP9eE a5iOxZoIYK3qBZbzg2AyH1DGfr6hyzGlNYF46ZAPzj2tnRZlsxJFP08e206Vmh1rwONqor09zal8 eowlOMWbcwU3m6cdwbJL8WVE829ECqIA8prudZkj92Wju9EjnxmvvmqneJCLiz5yDvjo+6jMuza7 OfxZjdwybOli7X5KJf3OGwoFK2dZRv+oh/jEn3mkQyZ9lgkrHWP0/POTgbH9xMltn9xtD0jowVec /Y0Cvh5WHS8utqWwVYdMhbU+hXSewtnHke3oZ32vI0aigD7eh9cjlsfKaYgw0ll+gFKO2abWhAdu O3L+6u/kkLlGvpIDbHlaNU6AG6ZLttm45963Tu+2zRxfPM5G5ML58/Z6qxftg1ufmh6xLx3nc8Ge fuZZfwfjV+wrkq7a3bwyBT5PvLGBH8234lO8PrOaM81nilm4FGbtNi7+kncmn3Mz9xraSnJsvVCW /LHLvPR9XPQxrm5q5/z5m6Zbbrl5usU+yPbixVumO+ypzrfYNxLweWls1O6443avGa8zZAP24ouX /TPUvmhvHPjiY49PT9ibQ75kn6n2JXttIR96y2fvxdEeHHjwUV7oapwba1IIZ2toxFFxqTPCSaaL HPAaX6lXovBu1feKNBYvopj+NicaJ3jtxhKJusU8omqbFvEqBo1BSUZ/eBg5z+Z5QF5v6w6AcBIH fBFrjIFmH4EjNtckXcMP6DeL4M/+ekPpVIM65lyJEs7sLSq/JeZvRkpkskfk51Qpih68EnRTF9fF fT1f/ZreFdvjEbAw55xH+ThhZzPEdZGKdxQHUNUALvrMv13UnIXfCl04V3S/VLsZnkrE/1qT2LwV YcdRh/ivTq1PLGk9jGqHrfJTnBqjk4w+Bzq9wYTHVXLPsQeK8Fuso1p7zQyjzTF2vS9xLbUj3iUs 8rW80GufoMcG4pEP9DpynMqjTlQBMRX8cPiS0CBElVdcqus137wV/8NGwaBU4lkmI+kYo+efHszJ s27e+KupJF5x+zZvtpq8GH42tUnRIlM8OQbi0A6dvnRqkfXHiWzeLDe/i+SnQPGATEn3TuOqX9G1 JoPNW29ax6U+Pk6+aq4jWTEmZ55CpbRcUG63p/14mu/r7rN3On7DO6b77IX0d9hTfmftBfHcTWJj wlOsT9rniD35hL3T0Z7ue/4rL0wvvPSSfx/mS5cvl7sDNboSlgdpJ3fISY9XwzCH1Ib5JZZSjmqs HIhPf9Xa5abYYesEPq5GLm0bBTZLN910bmJjxs+Fm8/7mwVuu/WSvzngTW+6w9rb/M0Dt5qMu2pn z/FhxzdOr7zyyvQSGzTbjD1pn5X25ONPT089ZRu0577i3/X5nL2r9/LlK+VCFRcHf+rZEj1zo32f hAWY1wPzq5wUr9YvSfgFiZRI2A6wviYGdiN8ljlB90u8I1zVFb+daRoSGzO3fogv5jQuoXHHkbyw HXNE6rEWqKV45E1j1VFjZ+wXkIzUGvlJb95ErXhibKs6pjDN9zaZXyuKLVy+BnwhBfPcT8j63+Lo sS63W/KjzZuwuJZ7bd58XY6nq3ftY/x4nW2EWfzY745DcWYS5lOxqJ3h4FCAxVC4zKO+1od4l3IR Di76Pn8rm7fMI1uL3HMkxJyq85lMYWvztrrZAZxJfBj81jUuA4gQQTlyXDyT4K+S7XgUL9gtmzdx r7XEk/MBi3+PpxhqnhR7jpWYqt6Lv+aN0qRaDPAnu3lrvqxiO3Xv41Zdb+Bp05yGCo9MRlv0kMQD ZJSzm89Msa3vOURoOY4an+cbXkBlf3pKjyoccpcLbk0KfPFMQJv0HHiNAxwnpLURbaC0I5/ZlEGO 1efKHEXVMrrrG3l+oO60s6HHwq/kyLssQuvIl+NmlrbJ6sbkmevfqT1pP1lwVx7cfHGVauCDA/9s eP0pVk46w/I5cbfZ5o0PhH3LXXfa6+Xumd76trdMvKaLu3Y8jYh/7ubx/Zgv2jshn7PvxHzOXtfF VzC98MILpX3R9Ffsrt0rE59P9+pVez2etVfte1v1VKVvnpnfctXX3Tzi8K/rsZY3V5yx14Lx2XU8 PcnXOHEXjKd+b7mFn1v8zhljvnSdpzGRsWEjVj4zDV42BVfZmNnGizcFPGebMV6L9swzX/anN7nD yJ2z55+3janp+TgWfwG21wx7Nru2cnVxR+BH6PLaKwqvk+ovGa3OBRjEkvXqi7Ny2MQxr3Us4BFb rbW1OGKt4WAt0gigxbsNH1bz32v+VLc4qyOeHLv0WcYjsudZ5mumm7sejMxWJwtnaLg0HPI8xrRh l+YncqskA38nKyLz/sF15KGmiLImzIN8oPvrjzh6fvGsZYiNNnl6g5P4llrVrfd3KH7Nvq3d3ehH 66riOS+SicdaZKqHrw2T4f/GnXUTWlP5wdrp41zzj/PyzHAOY6c02lRpbXr85iuFvmOzT9DHuYTf hyMKexTaWavYcbHUNXfE75hSO+pEfqP12scgO9VjxI3M57Oc+LJBLjv0mnN/nOk3b4DXjuwg48hJ m7dRQhl7rfvEUmo8LO6Sfy9OKR4LjZ+lfEccWvjoNtfAAt20KduKK4HFM2rtwVf55LhznSTv4z4k /03YLg/f0NkVVq/Tir8aJ39qkXdL8mXnly7ZXSx7ivGON98+vck+/oINH087XrA7XefsrtdN9o5L f61KefD0XNRXdYg7zAAAIUBJREFUa0KfXxtz+IlX5lqPlH5xMVm07aR5xTaBbLBoX7GvEHuxbCR5 3R6vPfMfu0v2km0uuTv4on1eGhtNfq7YHUVWY3HrfXzHT7zFnDCanugWjq52GbVUe63J0fxn+53+ iq8d7AYBVednLY7IATKfATrX9Fjzp3hzADn2tbrKNuMzz1KfeMhdy3IJt0W+tB622B4Fw4PNzubN ClDOJj/3lnhVL/T99Uc2Q34pF9otvL2p6naoP/D8rw+0o3r0zgbjtXXVw0cx5py3rL+eY82/uPfx jjZvqkufw0mP+3y28LNGsdPc77OhDpv2OhQK8MZjn39iFB/13Ps5b4Ag1bE0CcSpB94tePiEg7P3 g34kQ750+MTVy8Uc1TLgghKH/CNgAnNuYDR2HFdUJwkm6bIX8WbZWt+Z3GiDZcHlPMQt65wPH6aa po1iR/gGJlc/TOZ5QOrPOYpJzFEDeHO+6iOP2gSn5M160Mv+Tc2mixtMr3OnSXGZnKcLudvG92SG H7iIw3CG504Vnz923l5Dd/78udjEnTvnd8qQc8eMVnhiwxd3++DTHUBx840BbNB4B+3VV2OzRt83 bLZpe9neyXnllZdd7zlHOF7TmBOLjX/Kz/3ZCWZ38PwwUJkBwxgoHRbOMQ64Yn4yjTz0LY5q/KbM NfeRyVxvLXf/KjZFGHoxY9UdrAvseSiWkiSVaJe/rOd1iVo2/zEm16CKbIMq1kTDinG9nfvbxSp0 acD7Zd5cS6dWcTnWcbI6rF0oTaENbznP3J/N38At60/zjd0of/E5riU3YDNvFqzwAHx9UxslwZTb v6Uja/a4irgLSH7grb46J4HRmumU3XAWR4l9Lf8ZvnD1+H4MjFh9Y6PbV10cjikyUu1zy7V2WA4k 2ek8G8VQYGGu8zEJNQ9qUeW14nElPHXWea749JImwXIeOeTsQ1ha8OLK8twXT+bYZ5Pt6cuP1miO s8cyBscfKCwR7XWQy27Hv4IsmF6PXV4P4oFz3wHX3s1bT4KDPghhaiHJbsNxSLD76JwrF2tggDpH NvKf9aKoT6VaXiO9cGs6YXKrcA+xk414sm3OJ8sduzAnwvW1ET+teGn7uUc2kmf7vX0Loq+seHtb 5ByK48qVK7bRuzx7DWJck+xUs6QiNv09qXFXRdukxF9SEUd5ttL9eByadXPN5u9IxyDHg3mGHCUX 0+labN165L6EqqHGrY2atXHfY65jpaiiI34DqWKVwHFl7qrwCB1yZO6Xc9hOGhzjnEd5ZVnu41F/ JMi71qfGW9p9ObXX2TIPwdhs+jzmETouLftmN49sST5H7Y58xucufY40V6N6KBzMOtNdB0ky8pXU sTZimWbxaj/HsgosykPxmHkt9mQ6qkOtXZfT0lwtyfu8RriRf9mNdPvmQra5PUrtsj39Eccon97u OGPl6n50sT0GYV0Po8IOeOVfqrNKuC4QaVZabEb4o3CtuDlYlZPr49NkH0xqBl5bPSAdkUi1wX8f 21Fi2mfDhZ47TSflK8evHJBJvuRHetnkuLOOs9H/CtGjUgJmXPaDnB9k/rRpssnd3iaPwcGRNyM6 l4Szh0VbA5Jm5nm/xdkeSEeyudXxR6rBcZjIldJzTVLMIevPdWpunurFq4xdVE4OAzjGnw5fi2pg uwB3PpuH6naGwy9cu3OkOZzBFwfx+kdsttod3+diMDuKka8dkAnAUYrdWvnEFX2b18CVuRsRHihr cYa/A80dHlMZ87l1LrIfqwCrJYsO6m/1r1yPEuNBAQGOchxsdi0NyN/Pl3SNZKy6yLfGozpJB3ak F0duq83uIs+wYb/aDrXrQmz52RrnGtuoTiO84u19nu0FjPVA2OsglixvDCTL+lEQyJQ4LRsMWsl6 m8zb6/pxxdr5Kk5h0Om1FJzOeqDm1qdfXspiqxzFUGM/Z46wSOSf1l8wXwSKJevX+qoPcaydv8Tr uYOy/4p/iRusHw4vfRNobrP9qI8sy5f8LMmzLbHkp+mYp3rpLbWP3Noa6v3XfIrDzK8YJAOrPq2y 94s+eaU3kcQqEUO0lK6EVRXiKwibi6qadbLvmeJIA5xEpQ5dV9mdatfHPM8pLJA1X6yBzEQ4A1kH KUwzW8XQ+4Te74xaCybXj88XfNVe4AmGD3/279gFb09582J18nF5vp1qeg78BJ/itafT7eLQvuoG X4ET3g3Trz5WqXKMko3awKGJIjL20U5RXbz6y994Ywhi6s11rRV3jjtcNr99TG5jv3zODRzc+IiY Q299e0rJpsCPUMWVNuOinvjKayhs+K26yYc0OaY+XmHUZn+SqSVij9oc6KkvoonshaKG9P1XjUna jJevymugdm7IorU+v0bQ7GwNpqdRkYNRHbDM/ca03luyQa5DMWisttpaUo5vJoLUmMTBNVJ22YcM Gq7VWo/DvOs4uxBWtqNW71Qe6fbJxK84NXeMmTvpRzzo1vQjG2SyoU7G4GP5X7KRXLYaq9152lQP 3AJsafsg8njJMbzaJG7x0WPWfPQ+MxaeXt9zayy7jB/JejzjbON6TkgB48qgUVGHdsduhhoPFJNa R8V1J04+E4x4M77qzU4Xeumrbux+x4fsgNOXveT9GJxk9I96iB/7I/PZNDhPqd9RYzmqXcuBE/ww lmbb7LbWYdf2cP/N69YeF3ywI19NtlQG3lF88c13T9/07vunW868Nn324Uemz33xWf8j4N53PDA9 8Pa7pzOvXpke/MOHpieee8k3dmNfOd7YwBFXX3/VKORLUbF+jr7+8nzJn6LLOskapp1nTUfPC1zq 3DZewtCu5RPzk65d2TD1fSMU4CqVLYJR7BWYOuBaTqHobXO8wu6TyYXwUZf1OVTtZLvaWrJRaUNF MEN4zoVY3KoasnbSYMgwFwqfeeeIGAm3T5d56jsvl8s0ohvK5D/zD4FFKDxD2YxkIw7hZAdmJBvZ rsnEkTHZh+QZJ32WpZUik4Nb+G748E//I+NvJwxCxllGnyMHcLC3EzZQTKO4sk76maycIPk0mem7 WHPeqk+GyDbjsp6+1r9jSj0lm2GLDpn4Rj5nNmWQcX1MGouXsfgzF3L+9S86zRj6mc+IXJ3rmfHC jvxlXO4Pa2OAJR/Zdqnfx9GPsZv5TXMhzpyD7KUbtqU26HZj1wbFzjmU5k93AzLXJj/wJ1/ZPvry lXEj2a5ls7cLRkmixdRki5Zex3Wc+JTDbB4SsWr4mr2p5LZ73jX9/X/wwencVx+fvvTK+emdX3fr 9Es//wvTM5dM/tMfmL7wyGenM7fePb3l7Femn/9nvzg9+tzL9vl4YkikqTuPo9UnQUoNgmeOzygy aBuqmpcnFtk12fxcpFx6bWFmVD+WZdgs+xd63uI5vJsPIyKGxgd2uT7N1wBnZjbDvoa5S+oIp2p8 iNfywiYwbu6/Ij5FXOQM3VUnb2bFlqb5l1B5lMRn8+kY+5VjrXgprdXcSZQxvQ4MeuUi7OjmhXDi Vbskl35rK9/gFeeaTJieP9tIJ+xI12MYa/YyXrMlLscxGXZkGWO9q3WkQ6ZjH05xaD3ITm3vlzE3 ODh6HbIRX8YpX8k0xvaQY+fOm4xFrLFa5Ed1Jo5D2uP6G+WhBbIWh/yO7NfslnTySavJlYxxL1vi uR5yLsLMcZ+7atLHsBb7oWtFPlQbjXufxxmLk3Z0LOUDXrYju5FsiavHEopVvIrp+RtlyoWrKv68 dKhH7Gh3noaiNldfOzt9z/u+f7r41Qenn/unv2SbtwvTT/7dn5m+93vfO33h3P3Tg5/8b9M//9e/ MU0X75z+yc/9rH337n3Tw7/94HTmpvU3nGhNxDwz3+08YC3361n4PC1hiyReQ0evt0OmI3MsLElB V1pWWls/K8BVVcSuVbsKnSvNxKozl3WjyG09xpq/wXhvzLBuUBiQRnrseNMIB5/luBaLPzUGztHX 9xf1zfM98k5Owmg+NB7hr6VsFMtJ+WP+OJgHzYVkrtjzK1bAHpCp9+HkUzHsZ9yPEJe4ZaH1qnHf Ms/8aHPY6/N4cfMGSAtmn8NMuNQXF3rxjWRL9l8LOfHxo3hzDIp9pMu4k+4f6ld44tgSa8arn+1G si05Yidb4TOvZCfVytc+H8LJr/CcdNJJJsxSKzyXothzdTmXjZhwldfPcLCFueCW/OyTB12QVR9c wsS/j8D0Oxy6GhVb5ZCpJHNolwO+q77TZQ71wz9rll7n3CS8vuuxhz89/eqnvjB95ao9HL9uH+ti H/Vy7oZXp//+q79if5Zfnm6/667p7nveMd1x7tXp2ae+svMBnC0evIYPyZAQM6G2GiKdH8KPMVoH LXf8zNNnXppMOnjVl0f5Al/+8JfK2rbWFEvY7+aVjA7qyv9BRgXsthYQf5D43JpccWa+iqPupmC8 iMuGQ75Wkw56YsNDa5Jz2WqrGmR85iGZrBsl1+NHmKPI9vk9hJN1IT61S/bkA2YtL+mWcPIhXPYl XZbl/qq+rHE/88pJvIovxGCE2/fyNWL2zZsM4MiJ0M+EOfhRH2y2z5iRfCSrL2I0Y79sl+TFJR85 ZunUjnQjmfC0S/o+Ro3VrtkGv26vxueuYcdP9ueLNsAEol5tsy/1sVdfwDwW/0gGHv2I47Xi36Po aj/iyhzoxYsP/npoTw2Q96t4Nszx3wXbrxP86chxSkZLbBxZn/voZnOBwI6RnWVncteCoOMHvfjM unjQNGdF05rmk1oUeYfbd+IPOURF2/EVVdck/66JTYTPqT108kJq3zuhs0AVakdShy2mEDlPWRNI 0MMheaDit2pcZVYA8z70SW3Onnl9+n8f/5ht2F6dbr71TdMPfOBHph98z9umX/6Xvz499sXHpwuX 3jT9nZ/529Nf+pZvnKanH5we+vyzw6dMo0xtjvocajylE3FG3cCO8Ptk81zhaPMg24hr7l06pOJQ iyzrA+O/+RW1L3NY58A1PrXWa7MLZ32DlQUST+Wjb3UqppVXY9ock+Q1Nmom4aCtOHT15NgFvt7v XslN3BaqVit8xDPjLXS6No104TpqMspHEck2YyQThlZ6tdIxznjGWZZ16lM/1TDuNc7nnmuj81ju /YG8PySDX777zYPkspWNxrndp1Meshm9VARdxvX++SOA7LKt/GrtMla2+rgveCWjnw/ZZ1nu17pb nah7H5OwejOF+yn1zrkIp7b3u4bNNvXOW08AaAuJyI6Czz5HvqQf6bJf9YXXOMeUdSfBl32s9bNf 4ZDxQxy9fmts4jrpVgubVrFtjUl5EdMot32xyp/arX7FKzuN97UZv+arx+XxPh8jvez90jq4wI5s TlI28o+MrZL/9gtOrM/6KHGSAQy4akxRlBliScdF+v5v/o7ppz7449OdN3x5+rf/6hemj3/6iem8 fVXZa1dfmv7zr/za9DF7Q8NPfPCvTz/0l791+nf/5Xen6aZ6yZv5OHzggdZzxFa8rfnDWcKi2SrX EdPaGs34xjHndbkFuRMm16NMYP3GURQGqKjEAa7Hbo2zc+nDyoWP5GeEPa5sNc5BTbK/3jaPlcM+ Webr++LI8syX5fRneKubHymHzbZhOfydfSzxLWGyvCdf0/VYjauNcjVFjank7Y9hMki4Jto5E+Z1 LMDKK8OFVjFtxS/QbBLjq37Omyzy62wUjFph+nEfbK/HjjLxMysoinLIRn9JIIYXuXQ9VmO1dSoG EyUMbc+HTDmgy/1ex7g/hM/y3kcOKetGtuLRXwt9TbCBI/Ngk7mky7LKW+zFI3lumaeRrXi586Sj ySRpNUYHD/nHa1JgjiPbBWa8me1xWM/+4ip8mn/qpr9+imrWiE/5aax2Bk4D9MLE03kod/NxiWE5 5MMH+kUx7DMVmqXhAtz4y5hGPunvHrBE5ms48e/ah8TrX5Reu5SrbPZyCGitR0We5fBcS00QrcXa 64gN05Bbx8ZX7Y7bA9/ynunvfeTHpv/zW785/Yvf+F/Tl194ebr1zV83fejDPzx99Bf//fTgFx6f PvfQ56d3fPt7pu+65612sXstrkHd3MTQI1S4dd6ybj6X4MvmaG5aOFgrla5hs2jQn/sA0HhaXYrf gT2iVvU5wLktqCV9RguDz1kagEayZNzibMLdvJpup2fzK/9qwdQ4kv8Zb5HPZGbHuMaUuCXDh/zU 60aH6zmJZ+3IePzkcbabxWYKxr1MeMWrsbeG1yEfujbWehlgFEPPlzHimnFbHmuH+GSrcW8j+VKe 4DMH/Yz1fk+axnUO4SlyRa42wdvayMJBH1u3T+tPuQBXzAPTzSK92QcDxSofPf/wz9A+4d4zZJlI 5D3uKGMFjK3i2MojfObYGptwaskv5+jxpBNla0xtChTddsslpGJc0o/kvQ3jnF/uj7AjzsNlsfnB V+9jK9ea3ajCa3h87tMvx5VX2QqqXPA8Nq0fZOoXU2cr2GW20OSYg3efRbvoLCHh4WdbVq1uO3nJ QZefxPvaLSVwn+cuTD/y4++fnnv0U9MnP/356b53vnN6wF4H9+KLV6ab73xg+ht/8wem//DR350u 3HX/9L73vnv6+K/97+nl12+cbtqT4GBqasi57hJ6LDZYow1ObcK4rsj62rSiZ9uleur8lo52FLNw 1fDahOisqqdahNV/8quYwY1iTtDF7oh3EZwVpYD4VRxZrf6+HA7FCX+Uls3bkfNdcZjz1zzkvFdM T1Qln/7UuRb4Hg+Kdw9sr1q+14AZ089D1okjY1TjLfHubt6OcGXJAeVAFJzaLQEJSwsvP2ucGV/7 2NXB4Z2cT7YmjiVdxh2nL35NYs+1Vg/Z9jZL4xEe2ZqPJa6t8oPncivxEXDKFdND41LtfJ42nDPc PdWdVCuw+9MdLvxXvhWurb7gWz3MvwWwA9lyzmCVcd6H7zoffEvZM088Nr35rrunv/UTf42Seg3/ 8BP/c/rlf/Mfp5/84AemD33k3dNZ+77bP/4f/3X6rY/9wXTGvus2H6p5lm3pR7olZxovZe3sodiK 20Ozo+a8DeHuzDZwgTSB9WYyI8nj3J8ZHTiotbZ118e379xTDGr3uV7ztc92pIevX/d7Y8ZmcI6N +I8qox41146kj7dTH2mY67/k90jERzDy2mrBH8Eek0NzAC+bQ+dWdqNQ0Ykv17jH9hw3fOTD/7g/ l3qb4RhnkGXHAtZASlDC9XqNt7bZpz5IVrbSady3inMfrrfbN6Z4KmB+enOf3Unoc53FN5JJd61b PZHqF5UDnW2Zl7Vaj+w15weG8jWBk9vaiXtIUH3eXhsI7Hz0g/PSXvDtI8lCs/p7rf6rhtdI+ao9 dapzL1zYNenGM/ZiYtsg2NPSt956y/Tqy1em55+/Mp05y8Yt0NTn+h1xp23skzjsqVx/w4JwXEUk u35R4onq8LQNsRJZXyW/thQd+Gt2sME7hh/y2Il9KItzYH6+LFzFF2LymsB9XddUVH4ed8j4fZzr cGNpva9lji2Kcc+vbawV+1GcQkomjOTXslUM12M9zP8UPaGsFLiKd0K0Mxq45UcFmwH+jA+Ue05z JMv6P6v9P+1582Djd+asvZ4Xmj/t6+HM2f4z26KSPI5Sx68+94JdI+ydqXbHTWvExNftiDjstY18 YNniwXWMB3+tgEXgNVew4aFOXqtBoaQ7zvUWDuxP1/k1n84/9w60Tvt3zl7LwsiXn0PmSDFcC587 mzc5zc5GAYxOZNkKTyuc+CTTWK3kspU8t3BJX5+CMoD8rv3NITsD17/WuVgd91jjyPEex0++9Mtf zScRj2RSO4flzpFf0Ck9dfGju2jDqbfUV6x1Rr70Qlmfh8Jzww16gOVughhKHPJZxG0eQ9D7wKpE WZ+C1BjbfXdjez5F07eKYyu+t5+NLS548lOkM70NyEGlqb6TbHQvALzXo/DbsB593OJMgNqtHcVZ Bbsd97crPliS44lYlT1U+qMs7kRlcq+jxemotCFqnwUHT9y1AtO+65NR9sE41nDQBWdI+9+xuepr 2qNG41jvu34btumUW/gJnw13cj0ybV53eX2ttRPVr60599x36zIfHv8uXZVozmXPuJcBlqwaWod4 M/8Ik/HtCo+0rJdB1haBm7U3H2WWXCXDEW9WW99jKvl3Kh/mOJX3CHccmXizL4+TOVyJLfv0+poA uz5HcOKmxd84765eGJ7wMfKr2FQHXCpOuc86yfa14gV3FPuj2CzFBBfx6I/AOD3t3aZLBlmeE8ly 9Xt9PxZuayv7UQHQ8ZMXHLwuy+tnxZlgo4XaChULdYWmqkY8VXkCnbV4I28hju5MDDkXuJeONZ1f AnZM+8U3Z17nm2OXRm8UjqX4TlKu8o7OkS1+TqJWW/xsx8xXYFygsCZT6bawCasKLduoBizz5m8Z /2dCw/WzJLJl7ezDqNonWpvBhOCH+VLs+/0pMllonC3zn0XCZb1sRrqM+9r09VjVe/doqeGBh9f4 QJs5/I1dr3msJz/S9eRQZtktnWu+7ut8spGL61VevYf63IRfCmjJeB7oEmosb7Z54bKgtKjGdlm6 r5AZe736ZJMzkl/FqvHWttVpq0XGba3lUtQ912HzU615tO0ecbfWY5R/lm1Zs8Jv9elnXA1+W0c+ RujRehjhhjLOfv0MAfuFim0pf8mFc0Z3O4p8JIt1ccww9yaiOJeB4/VepV3oxHuSR+Qff7CKNypz yFVNloe3W84FsSqu2ZxLecxWZV2fL0WAMyyKlU+Kxq09ytq6FrkdtTSHzM0+H6rKPty6/jCWN1It +7yorX6kW197Ql2Pljrby0H6gPKCQMe4x+Tw1nQZp/4aXr5yDNj1NujbU3RiHrd+3ppKj/N5eTXe fNLHfhYfiqfh4AE7P7IejTCyn6PbSLgm2c0VXUxVoGTD08YeicWDHvno6c2wmnNUmYqDAB7GWWbi eW7UhG8WwGOpE6b2w3Hj8KWyevlsYMC+Zp+3FX9D26gY62lwPtW/P+YxFK3mgbbErNqAGNr0xIOx OGjFIdkAvldENuLpwZ668uiUbldkpUQ+EtdxYhKfKu25GvtSrPt8bYlJmC7NNMx/R7LGpGL98Lqx XEdlEJh4OoG1KYxnIgK3Zd2SIXHkfKKPPM6hwGCqr6CKdZDtzJO9sD98naFq1ba6PKgTuRJzO0Yy sp5nHvi5pThAtk2fclYLav+cOKj61Mstsp181+sRxINDfmXLuJdhJhl9YZlY9bMeTDtadfLnSYL3 GMv3njY8vbg2BbcyCQRrySc2hju/seFnOZ5msgXT0Nt7qgkWuX+ov3nm6/6X825rTQw5jhyf9KNW uCXbXq9x5pLtSLcPJ9uMyzz0wWSZsEty9CO87NRmTB9HG7fZ2nnaNBPkvhwc2sLBT3M+Zhj5GsnG 1tdGqtgzu2Lal0+22dIX7xbsnyZMrtNujqyNyEYPShmTba9FztnXteDfx0nqfd5HyVl5HGoLnhjW Nv37csh6xZFlfd99lklX7mCarTb7sRnjAVRrpOc6bBwLjQdl+RrXq20Cb7yRflmgC85aPm024R9z L5AcKI56RFzaUGWK8E/dcoUz4oh9c7xejSPyHsNMczmniCjb3My112sk/9d6PVyvfP68+8nzuVaL vCav5XVgZ/OWgzrUsS673BXzS1n8+XLsC1mOg8Lk4rSHvxZ5vrhJGjIuZkTWLkExIULRxgUvc/T+ Qc1jQNKOkS5zCDnCSUcbsbVYke3YUA8UdmQfPS5fxrfgg7H/Te11h6TUqYf4uHmbxxGxikFxYKIs muUgV8P5J1CXnMWtvPO4l3lYK79Ua3GsQHdUspFPACOZDKXLuJGul8GffUg/auUj4yWr+LR2qix1 ZLtjVzDos64fZ51okTnOPlCXvQXzbSI76OX8WGtaIVoVsbEC13TY9ofwyINjhO9l/RhbQqhsNlBE /jacNI5QQxt1izt9vf+4JAbjrj9qIQ99TrbJNl2NpahH+DYPjUs47HsOqISUrTC00qmVDjubTI9Z uhAFQj4d1/0a6eS7g67WRNh5XeV/FqlDwbV39ipqtWJbnwdQirXPQ3Ja4Wh7XNbR1zHacOsPCOkK tXHKyqehDVIPv4olibsuseqc0tU5ZADxH/FHToENXHxfNSiCiYDiLrdylkz8YHePUX16WR6rr3rD qG8nUFmybtej4htp9utGNc0xiXVNJsz+Nt8hbuidp02b6vCeAm3TeDjHyKJdMk2rmZkBtaikzBFI ljGSQUffdE1UmBGEcL//WTB7B/0GaM1ANe0xfbiOU4qAe4CJpJbqaHnJWlv17Eq6HK1ktNG394Vm QPTLBUKahm7QiD84/GlzukydrmKhcoOaW5Z1G8/GTGQFmPBZ3/erz6SoHMhWeEa2iWa3S+LGN+fP DjSzzVQ+5jahz5bNYrdXbRcMXJ90dVzi3WWUfzMqId9gm7gYxMaMcyMo7bfmta4XRYRuzK685WkR ODYfSlVdXMbPsn8IIjR7cCN+3bkL4Yx/HutMNR5YIE4z4OoNDuGGLlPKVtOoh/Pso9WkzIkRNI7S a4Jsutsvjur62UXslYSrEmn1WzvVXiso1tauvgL3dJZiXZTXtbxOPIZFnE0X1dc8NcZ5PrHJu8Hv rNcNVZolO+OqKXFzLmqjWBXeMV11jo3VmXXt/7U6GIR/rwF2Pg5ZDFufcT4af5OOZE0bPfdltLyM QakhwxP5beHInC32LI2+fMUfACu5KBDMCky8W2MSfhZFJFVm7fXp7OXLz8/0xxrUCY6YR7vTY/EP jdsCnKv74mZc0hGzfWCpirzOMdceNNKfSxilOq1yxCpZhRyiVAVS9oeYd1ixdeLVoTwPbBFZXaQR sqfb0Y9qNJL1RN2Yk3zx61by3MnukDnExvDKSTmIam+7NZ8c59b49jrfA0ixeQ0ZJ9nIutYapcdZ KuLxW5VUqNrZUjH8ii97rWRZeFBf3rczyQI3AyvPE9VAtxZZtVvgle2e+ufodpiSrXCjKKuOHMrr CeX+4Lb4rOvnYAIMFNEGY6CH1n4fbZ8D43yM/PUY8KvFLoSyy5ydO0fO9AUwlAUvqrZ5S4R03W6P rAafcJKV+pQM5s1IN5LNrXykNcNeQ17r6+E3cgxohyL52nd9GxpLeKSYIjOWBi9xOWNfL3Oj/Zx9 9kufE+1pe1qB0wqcVuC0AqcVOK3AaQVOK/AGqwAbtwsXLkyXLl2cbr5wcTp78803v8FCPA3ntAKn FTitwGkFTitwWoHTCpxWQBVg83b+/Pnp3LmbprNnz01nL168KN1pe1qB0wqcVuC0AqcVOK3AaQVO K/AGqwCbt3PnzvndN9qzt9122xssxNNwTitwWoHTCpxW4LQCpxU4rcBpBVQBXnN39uxZ38D55u3S pUvSnbanFTitwGkFTitwWoHTCpxW4LQCb8AK8GYFNnDchfv/UL3U1Ju4fEEAAAAASUVORK5CYII= --Apple-Mail=_CE32775D-C7EB-4DEF-BD17-04C0E6C29D98 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-26.png Content-Type: image/png; name="PastedGraphic-26.png" Content-Id: <7C4D0EBE-8C52-480A-98B9-A8A4B7B9FCB3@colubris.lan> iVBORw0KGgoAAAANSUhEUgAAAnAAAAHSCAYAAABsL/bbAAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2d lndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji 1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE 9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX 5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjASh XJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHim Z+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW 5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TM zAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRo dV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9k ciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQ OBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhH wsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQ DqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJ NhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/B c/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7Y QbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxF QtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6f J18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIl pSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyT jLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uu q43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoL tQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+ 41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIud Ft0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtO u8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrP C16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARG BFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJF REPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH 4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN 8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqw K10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTk muRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99u it7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/nd zPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqv akfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/ Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4 H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9 jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3R B6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0 RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/syOll+AABAAElEQVR4 AexdB2AVxdb+bioJBAKhhZLQizRBxYIoKugDG9hAxY6iqD9i70+f7WHvDfUpCigigqiggI1ip0mV 3iGhhYSE1P1ndvfszu7du3dvSbk4q2RnzpzznTPfzM7OzpbrA6Cwf3KTDEgGJAOSAcmAZEAyIBmI EQbiYiROGaZkQDIgGZAMSAYkA5IByYDOgJzAya4gGZAMSAYkA5IByYBkIMYYkBO4GGswGa5kQDIg GZAMSAYkA5IBOYGTfUAyIBmQDEgGJAOSAclAjDEgJ3Ax1mAyXMmAZEAyIBmQDEgGJANyAif7gGRA MiAZkAxIBiQDkoEYY0BO4GKswWS4kgHJgGRAMiAZkAxIBuQETvYByYBkQDIgGZAMSAYkAzHGgJzA xViDyXAlA5IByYBkQDIgGZAMyAmc7AOSAcmAZEAyIBmQDEgGYowBOYGLsQaT4UoGJAOSAcmAZEAy IBmQEzjZByQDkgHJgGRAMiAZkAzEGANyAhdjDSbDlQxIBiQDkgHJgGRAMiAncLIPSAYkA5IByYBk QDIgGYgxBuQELsYaTIYrGZAMSAYkA5IByYBkQE7gZB+QDEgGJAOSAcmAZEAyEGMMyAlcjDWYDFcy IBmQDEgGJAOSAcmAnMDJPiAZkAxIBiQDkgHJgGQgxhiQE7gYazAZrmRAMiAZkAxIBiQDkgE5gZN9 QDIgGZAMSAYkA5IByUCMMSAncDHWYDJcyYBkQDIgGZAMSAYkA3ICJ/uAZEAyIBmQDEgGJAOSgRhj QE7gYqzBZLiSAcmAZEAyIBmQDEgG5ARO9gHJgGRAMiAZkAxIBiQDMcZAQozFK8M9Ahho0qIV2rdt jQ7tO6Fdh7ZIS62FeB9QfPgwtm1egb9WbMDmjeuwZsP2I6C20alCUmojdOnSBhmZTdGtw1FontkE qSmJqKioQGF+PjatWo41m7di86aNWLd5W3ScShTJgGRAMiAZqLEMyAlcjW2awIGlZXfB4w/diwZJ CnwJ8dgwfyYee/0jlAY2iazEl477n3gMR2Wlo0LxoSj3bzzw7yewJ7/cO258Cs44ZzCuvuoK9Dmu J1q3aOpqu2/3Viz6/WdM+uAtfDrlO+S7apuF7Y7pg/vH3IyE8lIopjhoKj4+HmWlh7EvdzeWLVuK tes2YMXyv3CgoDiobWUpJKam4fj+g3D5RRfixKOPQfuOWUhNcj9kc3duw7JFv2LKJx9hyrSZrI2q L/7K4kXiOjCQmIrRDz2J3m0yoPjisXzmuxj70dyQjgEH1ICivoMvx8iLz0Z5mfdRx+fzIS4uDiWH C5G7axv+XLwEGzdsxNLly1FS6u1o7Xz6hbjvuguA8gpUFOzC2Ifvwao9FQHjlAWSgSOdAX7kyH8x xEFmr7OU3BLF2P749HUlqTLjj2up/LR6n+GvaPPvSnZDNnv06DOzY19lwrSflFIDIZREubJwxodK j44tPPnrc8HVoYAH1K0oPaysWbFUGffCg0qPVs08+fbKR3C9OKXPeVcqc35bHjA+LwWr/vhOuXLQ 8VUcuxxLgrdvJXCUkq58tXS30S2+e+tWdqlVCX50zOsefdnwFUmiuPCgsvTPn5WxD41UWjVIC9pX zxz1lOmuYJPSr218UJtqaY9K5F7Wp/L6daxx6345z2ojt5rHgFJRzm43srgStdiKS7xfBYdXGwXF xeZKzuHiEih82PSwnXL+FXjn7dfRvnEdP+19OTuwad0m5OQdUFf2Mpo0RatWbdAko56gG4cTzxmO Od16YvTQYZj463KhzD9ZXl4GHmmyf1FIEl9CMjoc1V39d8nQK/H4w2PwzDtfhYQRjnJinQYY9fhr eHLUMKTq7Svi7Mvdoa4O7t2fx8Q+1GKrdC2yWqF5s6aoXctq0OmY0/D+tLno++SDuP2RFz2vYor+ ZDpGGGCLUCXqoKDFW1xaVqmBl4Ww8uYWSFJKGrr3OkH9N5wdZ7ffeSs+mbUooEmF4LeUjUnlHseh gICyQDIQwwzICVwMN15ND71dn8GYOP5dNK9rTiwqig9ixtRPMGHCeCxZuYU987YNRew5Lr4lJqei eYuWaMue8br0uhtx8XlngkwbstvG737+GXadOQDfLd/iueobVi/C4hUb3fXZrZ2kxGQ0adEc2dmt 0aSBOIEE6ma2x9NvTUGjRrfi3v++wyab7nDhlqY2aIpXP/gU15xzsgWi5NA+fD1jCiZNHM/qshWb Nm1FqRBERpPmaNq4ETr0PhlXXjIUZ51xMlLiNQhfYm2M+PcLaJCcjIvuG6teulrA/zEZHy69+Snc OPREtf22/vk1Rtw5FiXy7lsUekAFFv06Dxu37XHF8rHbp8nJKWiWnY1WLbNRv26qRb9Zl5MwfspM 1L32MoybPNdSJjOSAcmAMwP8dCT/xRAHTY/ur2w7aN5JWDDhpUq+hdpCmb10p+Fw/98LlKwM91uo 8amZytRfNhs2PLFj7SLlir7HeOxr7DbioGHKgnU5FoxlM99W6sT7AmKccP5w5bBg8fKjIwLq2vt9 Ymqq0qpdR6XvgPOU1yd+peQdrhCQWLIsT7myf2fPeHZ8t3xcWiPlf9/8avXHcr/O+UQ5oWenEHwm KicPGqrM+X2dDatUeejGQSHgHGljQqLy2OQ/DE42zZ+kpMYfQXVMTlc+/8083ma+elOl3kK96qHn DC4V9nDElUNO8ty3UuulK+07dVEGXnSV8sk3P/s9WnE4d41yfLt0R7z+N/zH8Fuyd43St428heo2 rsiyI+gYd5ijyM+IsB4ut+gz0H/oLRh8fJYBvHf9Igw693x8OO9PQ+aeqMCCrz/GWUOGYcmOAkO1 21mX4/Izuxn5YImERPZ0oMettLCQ3dJdg3mzv8Coy87FwCGXYtkOfqtS3+Lr4va7xyA1jj1dFOXt mtHP4eozewuoCma98zDOOe9S/LJ4tSAPlizF/K8/wbn9T8HEbxYIygl44LHncEpb95dHBIMjLslv udFWUumPHZCnf8KerWAn1/Jc0UL2yMTa1Sswc8oHGDrwDAy74R7sPlRi2Cc37IC7bhlu5GVCMiAZ cGZATuCceZHSiBhIwrArBrMntGgrwyv/vgdLVm8lged9wV/f4Z4HX2K3DHUTXyquueIapFR6z63A wpmfYPjV/4d9h8k50OOUIRjQOdNz/F4UG3Y7FY/cfalFdcGUZzB85GPILTR9WxSCZIrydmDk8Ovx w9+5hmZyw0544v7RSDIbxiiTCclAtTBQUYjPxj2NG+99EeJTe2ddcC261PN+8VUtsUunkoFqZqDS T4PVXD/pvhoYSMjsgWM7tTY871k9H//74icjH2ri24lvYsGaHMOsy8l90SzD+vyMURjlxF+zJ+Ct T342UZMb4sQzjzfzUUhdP+YetEgzH0fdvHgOLh/1KPaGN3czIirYswp33PkoioR3XE64cBiOzfJ/ ocQwkgnJQDUwMO3t5/D1r9sMz3Wad0C3EzoaeZmQDEgG/BmQEzh/TqQkQgYatWyEhukpBsqqn3/H 9nzzFolR4DVRvA1fLVhqaNdpnIVOdawvGhiFUU+U48vpE1DCn8jRt85ZR1Ey4n29Tn1w44X9DRz2 nB0euesmbM4tNGSRJBZ9OR5T/9hkQCTUy8KZZ51k5GVCMlAjGCjJwRczhbe842qjWxPzIrBGxCiD kAzUMAbMy/4aFpgMJ3YZSOAf7BTCLy0rV58kFUQhJzet2W7aJGegbRv2oZCNpqgyUztzd+EQu7+T pL9M27B+bfCbOxFMSY1wL7pgBLLoVVsmXfXDZEz6fp1RHnFCycfnk6fj8hNH61Bx6HPMiYjHtwjh M8xITElF16490LB+XSTE663LviVTzD7Kun3rBqxZb66eRByzDtC8dUd0aNsStRI14hX2tnJRIfvV ib9XYPNu4dlETw5LUW7chwcqyktQHAoBAXykpKWjW7fuqF+vNuvzFfjrj4XYlhv8s9PcrkuXLmhQ rw7i2duZ6qZU4HBRIbZsWov1m3cF8Hjkijdu32mpXGb9ylplT0K7Th3RrEkjpNRKYh8X1p4p4J8g Ksw/yH4FZj227nJ/o9YSqMdMm8490KZlEySyj4bzTSkvR0E+ex5w1RLsPhCN0UQLJL1hFo7q3Bpp tVMQx8ZivvEPLufty8Xiv/5CiXz1WiPqCPgrJ3BHQCPWtCrks18vOMxPlvqDak1aZLAH/4GCCG4J /jVnAp54aqc66MWzqccfWw9UWbXV6aiwAle/SR31O3MRD7lx6bhwqLn6xoZZTJ34CYoj4MmJlF8W zMWOgyPRsBYbzH1xaNWtM+qwGWiehwq063oshl87AucN6IuO7TsgNdl/yNibw3/94TcW+0f45Iuv kZtnvizgFA+XJTU/Bm+98G80TPGhoiQPL/37TvZ5GG3S0pH9msbtY8ZgUP/T0KJJAxtEOXZuXo/f FszHB2++ic/n/W4rN7Otew/AMw+yZ/6UcvXTIR17mLfkMruehmnTPkcF44N/T4/9oAkmvjYWE2aK L34A5w+/Czdc2o9NzYDty3/A/93/LErYx8eatuiC4aNGYfiQAejcoT2S9DnYyPOOw9sz/jCDsKWO YnW76roRGHjaSezn5NqxyaluaOgpyNmxBUvZRPDjjz7EZ199i7zCKMw0DfwanFDbwoyvUUtzFd+U hp9qmtUJl115LQafMwCd2rdFowZpfmAKm9jv2LYVS/+ch/fHvYpps/709As3jXueg9cfvRHJ7BAr PrAJD999N1bu1FbRjz/jbNx+223o1+cENK5vfXyB+9uyfg3mfzcX4956Gz8uWeUXk1dBr75n4boR 16P/ySeyC9xm7CLNupUWFWD1mpWYO+sLvPveeCxfG/ozyVZEmasJDDi+rs0Ck/IaykGN/4xIg+7K 75vzzdf9D2xUererVyX9yf4ZkdefHBWx37Z9L1D2C7988d3bjyvstBsxblrHM5XNeeUGT0W5K5Wj M1MjxvU7duNTlQ5HdVO6d+f/eiid2rdW2KKPq5+41HTllvveUHLyioz4vCRW/TZHufj4Dq7YPL7U rucquWUm4n2X9lEQV0e54e7nlT0FAtmmin+qrFB5/9E7FXYz3dFfr/Nv9LdxkXx4zw1+OHeMnWpY 7N8wT2ETNaXdaVcqyzbuN+Rmoki5dlAvPwxe36T0TOX+/36g7D/ksW466KLvpyv/6tbcEdPSztX6 GZEyZcSw04PHGKCdqB4DbnjEpJKlXht1iR9mWJ8R8cUpw0c/pKzdvteCHzTD+tf0j15QGqUH/4WI 1oNuF+DylXOPa6mgTlPlkZcmKIeEfi4o+SUPF+xTnrpuWMifhEpo1EYZ+8ZUxethwx3n5W5WHrn6 gpB9UVvJvfOYU9W8+F9OswjkJhmIiIF9K/DDHyvZw/LaZzES67XCw/ffhUtGPIgwX6qMKJxIjVs3 64I0/fYpx8orPKyuyESK26Nra2TWNVdg/l4wB6t2RefZN0ts5YX4e+VfFpFbJiW9KV78YDJuOK+v Ta0MG/5eg9VrN4DdFUda3Sbo1LUDMhumG3qdjjsDE+fORdao6/Hc+FmG3C/BfstS/eGA2qykoggV DOuhdybjP9cMNFTLiw9h9crV2LBtB1s4rIWWrbLRrl0b1KZVQPb7ulc9/AzqJvgw7IFn/G5p5zMH RQzN6zpOBfuFE/tWVmq+AXKoIB/sZ+Hw6Qevo1tLHrh9Yx+Wc8BIy2yLcROmYOhpR1sN2OrL32tW Y+2GzeDfsq7XIBOdunRkqzTmylDPfudh6g8dccu11+K96Qut9kdY7qjWnS012nso+EquxcApExeP O596BU/ffZPwVjxTZNxv3co+JL5xM/YUFMLnS0CzFtlo074N0mvrn0Rh/eu8y2/D1LRknHvJKBxw C4cdEPzHcbilkp+H2q26Yxz7/egRA3oaUR0u2I+VK9Zge04u4hPqoHW71mylrBWS9KWy5Nr1ce9b 77NVvHLc8c6n6gzBMA6QSG/bE++xVfshvdtbNIqZr1WrV2Przj2Ij09k9TqKHTtZYIeKutVlt1n/ /b+JyG53A0Y9PJ59TN1iLjMxxIDfVQ6LXcpqMAc1fgWOcdd14NVKvuXKs0KZ89FLSscWjSq1b0V/ BS5ZeeWzxcLVcrny7+sHRKUOl435QMBVlNf/7b8CVOXHYmpj5ZXpCyxxlRUdVD4e96LSv3cvpUmG +IHVJCWrTXvl/KE3Kt8uWGSxqTi8V7nt0sC/w5ra+WxlW4FmUlFarGzevMmwLy7Yo4x78RHlmO6d lXqpKQbXdeo1VDp366k89My77CPL5sqlohQrD11zpqFHnPnYKmKPY3srvY87TjnuuBOUt75aYvjY 9NsXSt/juVz7d/zxxyutmzT0wxj9+CeGzcbFc5TXJv5k5Hli3fJflHGvPa9cM+wS5fjexygN0pKt GA2ylQk/LrPYHD64R/nfS08qp/TqrmSIqztxyUqr9p2UYVePUeYtWmWxKc3bplz5L5ePSMf4Clxc apby3VLzo90VJfuUwX3bWblk40qoK3CnX/mQIq55lh/ar0x+8Sml39HdlOZNGyls7mT4SK2TrnTo 3FUZdc8zytY88XPgpcpTIwYaetS/xH3rM0crtFZdVpSvbNpufvj8QM5m5b8P3aZ07dROSU00Pzyc 3rCpcnTvk5WX35/BerC5VRzOVYb2c2lrPeakzC7KjN/Xm4YstW/nBuWJB5ivzu2V1GTTV4OGzZTj TjpVee2Dz5RDlh+lLlFeu+OSqNxREPmQabNfVTIXVebI9QCo5EoeUb5jYQIHdjJ67L0vLIMLz+za skr5z/23Kb26tq+UNon2BO6UoaOVgjLzFxmKclcpHZtF4zZnnHL7+z8K/JQq9112QqVwEsqxddVD 44WYFKVw72plxOCTg8YVn5Km3PjsRMuJ6DDj6tS2TRxtxQmc6HDfmt+Ui04LfvIadMVo5WCJ2S45 q75XWtQyT1hOdX7gg3mGqzVz3vd00hIncIV5e9htKu2qpGj/TuVudrurcXqSY/00/3HKna98bfjk ibytfygX9+/pYqONxylpjZX73vlKEaepeZt/UXo0DfAoQoxP4Eb8+y1LXTf9+YWSluR/bgplApfa oLPy50bzJ2tKD+1Rrhvs7VZv53NHKruEmc72JV8rTRP946F+Jk7gxAbf8NM0pW+3ZkHaO1G56aGX LRPNZTPHKexpuYB2vvgUZeyE+aIrZd0Pnyl9ujQNaEOx9hl6m7JpnzlBrTiUoww+uk1QO7KX+8Dt Ug3c1KhgZCdyOWipc8TEBI7VI7l2ljJp5grLIEOZQ3m5yk9zvlaeePD/lLP6n6p0aOXhOR8P3ERv Apeo9BsyQtmwl66rtcjff/g6Tyd+aqvA+3jlhel/Eh1KRXGOcnGXjGrt/w069FU2HjAvz0vYCW/E ud29x+RLUW57Y7pRJ56Y8+ajjnw5TeAK96xThvQMdrKj8SpeeWSisFJYUaSMOtMt1kTl4Q9N/b+/ G+/pp7TECRxV7HD+TmX4oOOC8tLi2CFKbpE5ySzat0W5sG+roHZGn0lIV574RJzkK8rHjwR4pjNW J3C+NOWy2x63TMaV8kLl7ov6OvIUygRu4HWPUZOxfZnyziNXOWIafNvGl4feFibfhbuUQb0Cj1FO E7hda35SjvX6TGtShvLJr+YqdEXeduWMTs4XPzzeHmePVArNrqVs+WWa0r1Oiuf6HT34/5S9ReYt kgUfPi2fh7O1f6B+UZPk5gM4LCq5SQaiyUDxoS24+pIz8PhbE5FnPkqkukit2xB9zxiI+x97CbNm /4CFP/+ChT/NxduvPIPB5w5E945tohJKBfs0gNctPi0NnbsejTMuHI73p87GVx+PQ+sG+vMwDGTR t+/i3mffjcrzbzwmn/CD9EpJCXL3eY20cvQuufQmtKpHj8VW4O2xd+KdGcu8O1OK8PrdI/D1sm2G zSlDr0SfbPMZOaPAL1GON/57Nz5fvMOvxFlQjmkTPzSf3fHVQpOjOjirRlOqlOLxu27AR18HfvtV cxeHESNGaW/+qoJS9isYN+OzeZu8R1N2AE/dejV+3mh2jHOvH4muDb0+1efdVWSaCsrYZyq8bqkN GqJ7z+Nw7jW34svv5uOjFx5gz5jqD2cxkM/eeBgvTpnnFS6AXhL6nXqqUVa4czVee22ikfeSmDT5 C/OZ3ZR0pLfM9mKm6ZQdxIN334Y/9DdRgxqW7MWkT6apVydc11c3HQ1atXQ08yWm4ZabbgZ7gVvd yg/txu2jb8OyAv7Ep7dtybRX8PwH3xrKvc8dhuM6NjHyMhEbDNBoHRvRyihjjoHi/F146MYrMGPK ZIy5bTQGnt4X9VL8u11G0xY4kf/rezquv+VO5O/NwbKlf2LGF1/g22+/wuJVW8Oq+6CLb8T07ucY 33ryA2HfSYpn3xmrnVIb6Y0aomVmC/WbXna9xT9MwcVXj0HU3jFgr4FmNhY/KVDBvtnEL6CrZ4ur 1w5XXDnIcH5w+1I8+/qHRt5roiQ/F6++OQEDX79HfWg8Mb0VLr5wEOY9737y3L9lEV58Z5pXN6re ql+XYPv+UrTL0N4waVO3cUj24SjnrPoRb34wI6hpUubRuGhwH0MvZ/U8vDk+uJ1hoCcKcjbirQ+/ wIkPX61KUpt1xbkDTsbySbPtqtWYj8Pou5/ABVceYC8DmBMxS0BMnpicrB5nGU2boEVmc6Slsm85 WjYFM8Y/i2vueN7vhRSLmpcMm3B16m5+cHvn+iVYket9ksld5K/diIPMxC9MD/7//n0WJs5Y5EHT VPl99q84yN6jqccezOOvQ3So43zh07T76RgywPw96B8njsPUXzeZQJ5SCt5//VXceuVZaMI+95RQ ryWGnnMq+8WbyZ6spVLNYMD/TFoz4pJRHFEMVOC3OdNx6ZwZ6HBUV/QfeB4G9D8Vx/TshZZ+3/nS Kp6W0Rh9Th+o/nto/3bM+PgDPDr2FawO8QOnrTv2BP8X7nZg10aMf+tFPPHcm8iJ5NckHAJQjOtt 9iJmWRlbTaq+V8GOPvVkHNPG/HWL+Z9/ji172NkkjG3+Z59h42Oj0SZDW73sP2AAkl+c6Pp9u79m z8T2A6HVv+zQ39i6bz+bwGkTt1psglDZ2zcfT8UeDwsdJw/6Fzo1MVfKZo7/GHvCfMH46/GTsPv2 K9CkDj+zx+G8QWdg7Mez1W/bVXZ9veHH4ejj+sL2jq03U11r29q/2HcB/4Pn3pli+em3kEBE5fIi Nhl8CWuasLeF2Zuoa3+ZGvqkMK0eaqmTKRHYW3rBlKnm6p03ExTlLWVjTCnqpfMLkjikJjifngdd cAEykjRQ5XAu3hz3Xlh3BXasWojZv67H8H7aG6x9B/wLic9N9vTdO49VkmqVzIBzD6lkpxL+n8pA BfucxTL13+vPPY7m2W2R3aY1Tu8/EMf17Mq+aN8DrVo0sb7uz6iqXb85ht10P844+3w8MuZqvD41 8IdSo8Fs4cF9WP7XMnz31cf4YOL0kCeNXmMQP4gel5jMbomEebbw6tBFr2PbY9SPE6sqSjHmfj8r rJMCt8/fswSzlm7EqNO1z0I079IdjWonY1t+4O8w/LpqTcj+FHZKLmVfs6eNPRJEycrZsx9en/P7 PA/YPvTofLT5IdWyfMxa+KMHO2eVPVsXYt7fO3BRr5aqQutjjkU6+wDwPrEDOZvWaGle7k4sXvwn Zn7+ASZM+Qbb9wT/BQvPFSrJxzvPP+ZZ3V/Rh7MvGwjjiQJ/BRdJMX5cs9ml3LmIfVgH5cJjFWbP FvTj03Hycb0NwY6/l+LHRRuNfCgJpfQAliz53ZjAZbdsi1bsGmht4MM0FHipWwUMyAlcFZAsXTgz sJ19UZ//W/j9HFWhSfNsNMvKxun/Ohtns0ld35O6QeygjbK64NVJM+C74Gy89pW32xNrlv2Kn/9c yR4qCXBrh530S0qLkX9gP7Zu2oAVi5ay23L7sH7dBrCXHJ0Dj4aUrbbl7DlkIPnYtDWh8heQDH/W RByasO9E0VZ6cCd7JnE1ZUPfs2+hLflzLaBP4Oo2aobeLWth28pAZ4Yy5O7aFrofxlmAVg0DK7hJ ad5ObPyL1SvY5ktCZuu2htah3M1YuiS8kywHUUqKsXzFZmMCl9E0m/1OaAJ+3OrhpzSMKCozUYGf f5iNNRt3uB5nh4sL2c857cOmtWvYBdIq7N63B2s3bqnMwDxjN23WEk0zm6JB/fpo3Yndpj5vCAb0 Oym8/lWcj737cjz7NhWD9+aUhvXRtVMLw2Tt0h+R4zjTM1RcE6s27zbK6zZrgWbt0rF2xQFDJhM1 mwHx/FizI5XRHfEM7N6+Gfzf4p9/wvP/eRx9B/THbXfchSH9TzTq7ktqisdfHYcfl/XF8q3B70l9 8/nbGP3Ie4Z9zUkobMXJvGXoS6mL1u3rApv2Vn2I7COmbbMbGn7zcnZgtctqmaEYMMEmp38vZqXn aRoJtVCvIb+dGvj3S6vx8b+AtbAXlLGJVF6eh/e+EpOQ3ay+Yb5n5yZsKIrgLMtuau1Yxy5CcLKK GZ+cijoN2Gw/1AlcYgouHjkaPTPT2O1XDxcn7KetSgv34M2XX8TufLOvGhUzEhVM51GM//xnQ1JT E1nsQqVDm1Zow37Xt2enDmjZsjkaNkhHZtPmaNCwAeqkmC8thV0HRm1l9efaqezlhnrmrfnOJw7G jBnHB3720KUS7NVcZLQyL9ziU+uBfWuRWcgJnAttNapITuBqVHPIYIgBpTwfP836HPPmfo3LHn0N b997HVL1C9T0Vr1w3+ircMWdbwhTILK07hOTojAgWyGjlOO3k9nqw+DjNLy4VLRo3wWYHf5KTbiB +RLjkZXJJo/6VnSATSJLI1vdKSzNVZ/wU5ssoTYymrVj6ObVPvmKpX1B/h5srwjOSyL7tH6zRuYL KoXshRyUuU2AgrNQUGxO7H3JdVG/UTYzWh7cUNRISME1I2/HwK6NRKl7umQXfp76Kr5d5VZvH5KS zUmFO2DVl8axXxYZdMlQXH/RhTi2Zzc0E345xDUahbcZm7AHXxhzhYlmYWqtLKSnxBuQTdodg3P4 oRWNLSkFSXXM52CjASkxKpcBOYGrXH4leoQMKOz25oT7b0LjOnXw3K1DjbH0X+y198aPvotdUX6x IMJwQzLfyR7cBi7UbXzolN2Jpb8MCSNayvEJ5spSNM5X8ZZb1uz2cIL2pmi04q0OnPKyErCvAgZ1 zaseH2+yaKaCmgZUiGdvLRsbe1YyPsAD7oaOU4LdtlfYT5iFtLH6eqhySJBVqdztlIvx3ItPYEBP 7UH9QL5Li4uQn5+P/Xv3YMPG9fjr9/lYsJStPn70LhrVoGvAsvJ9KOHPfbKLruhvPtbWwft39P1K xHAZkBO4cJmTds4MJKXhhBN6o14t9qvf7ETDn//5ZdEqRHIDiS0H4eV7rkef43vhQv03/xq07o5T WjfC5GXbneOIAen8P3/DjgIFzepop/jTzhuMrMdfxpYoT0p9CRkY98nH6JGlf5agdD/uuupi/LBW u6WpsN9x3LW7ANC/TJBcl63G8RNEcfitlpJQ15hso6wAuVv+joEWCRaij6/HBN1KS8qRu5fd3m+l qdZKT0cc/xHKkvBPjqmJ5oqecng/9u/YFDQOP4XSfLz938ewgr0MUeZpRZCd0Iv3YWNu+P3AL4Yq EsTFp+Ix9ubzyGvPQUYqTXZKsGDuN5g86V0sXGqOG/z3a0uKi1FYWIiDBw+wttNuIWa0PBPl2qFZ RVF7cKOwUzb/NLa+zXrzLtz/9lzKRrBnfdtXgXVrj4TjNAIaYsxUTuBirMFqfLh1O+DNSV+hRzPt ifwdv36CnqcMQ47bHRgPlSovysf8RRuMCRzY8zzNWrJVnRC+M+vBTZWq5K2Yj2UbtqFZ95aq34xO vXBu37Z47etVUY2jVe/TMGxIf9TWT0YHN/yMv3cK38JgV925B83nCes1aoF27JbYHwVsUhfW5kPj ruZziwr7yOvB/eYLG2FBxpARnxDvKzBf2MjIbI0WbMVsbUlo3yEzq5yIFp3MT+FUsGfxCg4K7Wcq uqfYRGX6x6+xf+5qR0Jp30tvxj23nG+8CZzHPuR7042jMOXL71HqcREyKSnBvAipIaQUFG3F3oIS NE3R33hi/WrxYv68qdz+iQyYU/l/Yu1lnaPPAHuzLG/fQQM3PasTUtJTjXwkiR27xYfg2UsA4S9o RBJG9Gwr8vHFbPGL/im44KIrPK3yhBLEeWcPMyZv3O77L6ZjJzsJGBv7dYEVC8yZcFK9JjimR2Oj OOREXB30OZY9z6dvB/dsxYJNhyl75O/ZN8hW/rnGqGedhi3RtWMDIx9qIq5WfRzbra1hlsu+Tbho e7iTQQPmyE3Ep+GKK642Jm8VRQdw1zVXYtIX3idvnByFDTA1bYgpyCvC5h3mSwZtuhyPmvv04ZHb xWpKzeQErqa0xJESh5KH/exWBG2pTdujf/c2lI1o361DM9NeKUdxfk0bXs3wvKbmTv8UB4Vf++o7 +FL0adfQq3lQvQYtT8TNI84x9cryMHnqJL8T05p1v5p3+OLr4PRB54a9+pDRvjfO6JFl+Ny+ZBH2 HjJXpIyCIzahYOmaPwyOfbUa4rTT+4Vd2+bsy/sndGhi2G/4eSHrMx6XkQyrf04iNaMeenXNNiq8 /s9vMf4b8ULJKHJNpGaxX4vQP5jrqliFhRXsl05WrjQ/8dOmc0/2E1hhjhdxybjw2jvw3/8+iaee egoP3HEj0vWFvSqsknQVAQNyAhcBedLUgQHlAH74c7lZ4EvF8KuvALvZGdmW2hIn9+xoYFQUHsCq zeZE0SiIscTfC79kv4+50og6sX4rPPvoQ0iLypGZgtFjn0L7xuaovObHGZixcKvhjxJL5/+MlcLv Ng44/yJkpYbXaqcPGcqe66PnjoCZs79x/RUGiuFI2v/69XfYdMBcJbvgssvQMMw2HXLZMNQ3JhIV +Gzm3Nhffa7Exk5JrI/02mbfXf3nbPaJ3NC3M888xbJyHTpCZViU4LvvFhoXBwnp2bj8wn+F5Sit SSc89uzTuOee+3DvvfdizFUXIDX2r4nD4iJWjcIcUmK1ujLuqmBg/szPzdUc5vDUi67DZSd3jcj1 cYMvwvEdzM8f7F6zFCv3mJ9WiAi8Oo3LC/D8k88hX1iF633ZLXjqwRsijur8G27HvUNPNXCU0jw8 9uRY5Jf7j9Il+/7Cu59+ZejWb3ci/u+KQUbea6JO06Nw202XGOqHc1bj48mzjPw/JZG3fSEmzppn VLf50WfhWuG3UY2CIImG7U7CDZedaWjlbfgdM75daORlwp+BcrY6Xyr08Xj2YeVQt9TWvTDq8vND NasS/flffYLVe8wp6cXX3opOYTym0v+Sa9GpvjkFmDThbewQnqyokspIJxExYLZeRDDSWDJgMrCI /a7l139sMQS+5Aw8+c5b6NUuvOeA0hp3wtMP3wf2m8vGNuOLSdhbeGTcRlo+ZxL7hYlvjLrxb0/d /PALeHz0MEEWWnLgFbfi3ZceRZLA2TfvP4NJ3wmrozbID996AZvzaNUoHjc98jTO697WpuWSZT/z c+9Lb+GkLPNbUjM/eBt/7CpwMaqmInaSr9SN4b/20ovIPaz3UXa76r6nX0Lf1k29u63VDE+88Qa6 NDKfcvrk1ZexNk+eZd1ILC49iIOF5hVR11PPRXoIc7i4pEyMfW4cumWb30bk/mrKJzbydy3HxGk/ GBTUb9sbL7/5WEi3e1v3PBVj2bc16SXbot0r8Q77fV25xRYDwvAeW4HLaE0GKth3gWrSkF5xeAce ffRhttJjxtis40mYOm06zjlV/1aFWeSaatPtDEyeNgX9OpqrbwfY81rPvf2ZcRvBFSAmCovw+G3/ h1mLtpvRss8gPPDc+/jfMw8iu6n++Q+zNGAqNb0xRj/0Gqa8+xIyhF/i3rJoLm544CXXDx/nrfoZ j71ivqKY0rQD3p06Becea966DuQ4Pq0h7nllPO6/RPu1AK6Xv/V3/Of59wKZVLncJ3ybLal2bQiL NJUSy85fvsIL483Vx3T2e7MTpk1Gv84tgvpLZi8+jH1vEm7o393QzVn5Dcb+7zMjLxPODBTt3Yf5 v5ov5WR1PwP/ueUyZ2WbNLvTCXh9ynTcMqSXrSQBzRJr2WTVlGUXB+OefxZrD5iT1AFDx2DiuCeR kWZO9gNF1+mY/pgwcSLaN62tqyh498V/Y+lm8SWxQNZSXpMYkJ8RqUmtEWYsrY7pixefeRZKgvnc UThQ/GOhK3/7Cu9O+JZ9eS2ybclXk/D46wMxln18l7bsLidj+qwfMH3yJLz74WQsW7wUW/f6DxqJ 7IvgPY45Dv9iD/TfPPIqNBV+OgblhXj0vjutn8EgBzG8L9z3N4axN+U+n/YpTmutr1TGJ+PqOx/D vy6+DJ++9z9MnjUbi5YsQaHfbD0ObTr3QL/TTseNN9+M445qbWFi9/KFuJa93bo1N/hK2IdP34Z+ vTtj+JnHqhgN2x6NT+d8j/deehkfTPsCixavtPSNtPQsnPSvARh92xgMPN5887TsUC7G3Hozluzy b19LcFWWKcPhnebbe007Ho/T27fEzDVb9QiSkJaSgIKiwiheGFTgpQdHok/3OTj7BG0S3LJ7X3z5 009485kXMOmrWVi8Yq1lUt2gUVv0OXsg7hgzBqcKL/8c3r8ZN40ajQ0HzFtnVUZdrDmqKMQbb7+O 684/EWn8DOdLxKj/jkOdFs3xCrvwW7J6g6WN09IboVuPo3HWRZfh+mEXI7OhNrE5uGcHKuo0Rnot DhKPYzt0YPvv2c+YNUYddsm8a5/Zn6qaot2r5mLMPY/i09cfg/bDDD6cc+V9WNDlJDz/wsuY/cOP 2Ljd+ohJhx69ccllw3Hr9SPQuL450fvr6/fwyPOfV3UVpL8oMCAncFEgsbohWhx1LEazf9HYtv+S gSmTvsWeiO9OluC5O69Femoc7rruYuNH6eNqNcCQK29m/27CDvbF843btiM3JxcFh9iJMyEJGQ0b o3mzZujQgX1+JIkW+LWaVbAPmD563//hxSnzo1HVGoeRt+w7DLngYnz8wfv4l/5tOB5k0+zOuPXR pzHqvgKs+XsVtmzdgZw9+1Fe4UNaen32O44t0L5TRzYo0xW1WbXf5k7BVVffhNXb9phCl1RJ/j6M HHoe8OFEDD+nn6qZXC8TNz38FK69/W6sXrEK23fn4FBxGeo2yEAr9usRHdtlWhAPH9iBMSOvwLvT f7fIqzejYPvOTUYIyWziOWHuD/h1yQr2vGY8mmRmo2Dllzj36ntRFHHfN9ygMHcbrrxwEP738ac4 r6+2qlO7YWvcMfZl3HT/HpXPHTl7UMTeKk3PaIg2rTujbavGJgBL5eesw4grLsPUH9dY5DITmIG/ v52Ih14YghfvukBVik9MxTVjnsbFV92JlatWY1fOXvY93ASkN2iAzGbN0aZNK/BvLdO2Zcks3HTn k7jnzS9wCvuBd74Nvu9xzDn9YrRs0w6fPHgzHmbfu6y+TcFXbz+OG+sm4/WnHkRt/Uze8ZhT8dZH p2L3tg1Ys3Yj9rLVyIr4JDTObIajunRjK3TWVcS1v0zBlSNvxl728Wm5xSYD/Ilm+S+GOMjsdaay p4w9kVEJ27ZfJiiN4m39Ia6lMm/NAcPb4S1/KNkNk7z1mbgk5dyRDyhrt+Ua9uEkVv3xnXLpmT2C +jzpgqst8O88839BbWpa/0/NyFKefPdTZX9RuaUuoWQO5m5Vnn1gpJKe6rGdbP0/MSVNuePJcUru weJQ3CrLf5utDD6lXVDOU7uep+xlv6hO2/1X9AtqY2+nuNQ05ceN+wlCmT72TleM9GYnK+tyA9dn y4KPFfbRfgvGXWM/N/APbJyn1EmJs5TbYwqUT0lvojzy8iTlQIht+tsPU5Uzjmke3GdKuvLVst1G rN+/davC5iPB7cLUufbRVwxfPHHj5f0rzZfI6Zk3P2X6Ldys9GsbH9hvUoZy13MTlEOlpkmwVHnh XuWTNx9X2jZIZrg+5f7XZjmaPH/N+Ra/bc6+Q9ArUAafFPwYEOvF0/WzOygbC02YsZefbfFh16f8 WcNvUVasM9veRHBJlRcqU8c9p7RND298IN9yX3nHmBdu5QocYynWtoO52zHl46loUjv6jzDuXPkz DvNhQ9yUQsz9+nPsWaldieZtXYYC4SFhUdUvzX78e8ZbT+CXLz/DtTeOxMWDB6LbUR0tD9f72eiC wwX7sXTRb5gw/kNMmDwF+/KD3z7K2bKePTM3DfTM8m+LY2/VonDvFtx/3VC8+/ZpGMk+wXL+wAHo kN0sEE2GXCkvxppFi/HNnBl4+90PsHK98EydoeUtUcp++eK5+6/H55M/wvXXDMfAAaehc8c2rN2E ZQodirfT4j9/wdQPxuMd9vzQgfzgvxJQdnAbw56GDPULJ2VYvn6Xt8BErbIyzJk+FfuytVvO8xet EEv90gd2zMeIkTfg2aeewDEdmlvKy0qKsH7TOpTZ+v6KJT+BdSd12791KXu70WLmOVN0YDce+b/L MGniB7jx6ksx4Ix+6Ng2y7LqQ2CH8nLxx68L2W3z9/C/aTNRWOzhgYaSEsz5cipK1msvSSz+dY16 ZiHMaO/XLf2D8aITw34ob93GMNovjKA2r/yTPWYwTX34vix/G3IO2hpMxCzZi2fuuAJz5n6Ju269 Ef1PPAaN6vmvUrMfiMXGdavw45xvMP799/DjbyuN29qvPDYKLTPfwJBTj0dG3Trs476l2LxuDZas o1vvmsMC9ksPxrhTnIetOQfFSDyliwsO4ovJk5FVTxu9FrNfafGyffPRq+j77Te4dMQIDL/gLPTo 3hUpAX4rdf/urfhl4Q9444238NXsBUY9vfiROjWPAT4auxwBNS9gGVFsM5BarwFaZ7XDMSecgF7d OiOjQT0kJ2nLHvxljKLCQ8jZuRW//fIbVv29FuvXrUdJFG9pxSJ7Ddkt0s6du+CUfqehTVYzpNWm 2yAKStmJ++D+PVj512LM/+UPbF67DvuK/B6Si7ja/DmhLOa7U5ceaJOdyX6cPgEVxYew/K/l2LBh A2unDTHTTnUaNsdpp5yBXke3ZXVgzzJtX4tf//gL29ltp71V9IxZeqNMtGzeFEd164XsFo2QEB+P MjZpXrJkKTZv3oy16zbJk2vEvVYAYM/BtWrbBm3atkOXLh1Rj73EUlFegj3btmDZkuXYuGMLdu8J 8LxmXCKyWmWjbmoKexO1DDnbtyL3QPDnSQXvVZZMSq3DbsO3Rmt2m7dDh3ZIS2VjBZugHtyXi8VL l2L71m3YsGVHlcUjHVUuA3ICV7n8SnTJgGRAMiAZkAxIBiQDUWcg+vfgoh6iBJQMSAYkA5IByYBk QDIgGRAZkBM4kQ2ZlgxIBiQDkgHJgGRAMhADDMgJXAw0kgxRMiAZkAxIBiQDkgHJgMiAnMCJbMi0 ZEAyIBmQDEgGJAOSgRhgQE7gYqCRZIiSAcmAZEAyIBmQDEgGRAbkBE5kQ6YlA5IByYBkQDIgGZAM xAADcgIXA40kQ5QMSAYkA5IByYBkQDIgMiAncCIbMi0ZkAxIBiQDkgHJgGQgBhiQE7gYaCQZomRA MiAZkAxIBiQDkgGRATmBE9mQacmAZEAyIBmQDEgGJAMxwICcwMVAI8kQJQOSAcmAZEAyIBmQDIgM yAmcyIZMSwYkA5IByYBkQDIgGYgBBuQELgYaSYYoGZAMSAYkA5IByYBkQGRATuBENmRaMiAZkAxI BiQDkgHJQAwwICdwMdBIMkTJgGRAMiAZkAxIBiQDIgMJYsZb2qerKd7Uo65F/jkwxUAyyofjlDBE 3HBwarIN1TESnoLVryp8UAxOvpxkpO91HyoG6Yv40eaYfIi4TjIxhpqSjpU4awpf/5Q4qF/w+or9 Otz6E140sMKNoTLsqF4c26luYnkgHTEu0hexnGSijVs6Els3XLcy8sl1xHrYbUQ9KnPSJz23smC+ CD+SPcXhzVcEEzhvDiKpirMtVVAkmmSRxEQYIq5zBLErpTpGwpNb7Tk++ahsHp18Ocnc4g1URnXg 5V7qIeoTphc70vWyJx+EG626evEdiU6sxBlJHaVt+AzY+3X4SObYwzHoOIkErybZBuJJPL7EeN3q T1hcn/ScZCJeoLTon7AC6UZbTjG7+SUd0beTvqjnVu5UJmJHI02xBPclb6FGg2+JIRmQDEgGJAOS AcmAZKAKGfD5fHHqNE8JPtkLMawKXZ/PJmlGSRDcGf/nAwtAFSqKmz7Zed/rsAhWL6963j1Hqknc iDhuHHI9moebtqxdDQB3Duy8mxgmrgFlSbhxR2XcwN2/BdJDxh6vBxM/FbOOxJNzjKTnxL8faIQC 8sVhzLYzQbV6U7xcbsbsz4nJv8L0ODbfnHC1Eue/bjGJZWQt8uQfE2CXiRjiWEB4dn2S8z3Zij7F ckp71SNfZMdGJ51Ekz9eRhwSrpPMKSZR3/Rhpuy4Thhc2x6nv57Z9mIfMT2ZKTEmN/92nxyB9E00 MzYxpkhsCdsrBumL+0hsRZzqS7u3p1MbBos1mpwE80++xD4RLL7KKBfjJHwxplDjFPHsx4JbGfnm eyc9J5loQ2lNz+6ZSuVeMiAZkAxIBiQDkgHJgGSghjKQYFycCwHSjN+pTFALkuSzW77RXsupEtWB XW7myb9pYabEmEjPTUY6HEHUMxH9U2TjpE9lkeC5Y4grEXyWHWgz+TI1RFtBqqtSfaz+Cce+N+15 imwIg8vENM+Lm1jmZCvq8jTpiHJnDIrTtBH1CMsuI7mG7zNiJz1n/6YvikvUI1sqC7QnG3d90xfp i3iKopWLGKRHZVzflJG1c5+gUve9GRPpET7zZHBIZda9vy23oU3DETHMMtIx9Z3LzBUywcKmqvHF hZwHU49SJp9UaOpRGfnhNiTT7MmG0PjeSeYmF2296AXCt+N4zVvxtLpqMqqrddXXy5hkYpKtuIpJ 7UD4aq2FOwYUOZUTBpeLOKTnvjdjcdernFKnujp5ctMjHridv57/8U06XF+05Xlt88YJ4YgY/rJg WFROe4rBeU/4vFT066wdWEo4Joa/f+txTeW0N7EJi0tMPJ7z1+VSbazRykR9EYf0CEPUI5mmw3IO bjR9H8J4iYFgg+0dvLqahKrvCnaEFAbjJFi5FxqcMJxkXrDC1zFvoXMMc1ASEe06vMwq07Spc5sH grY8bj1ICJmfkNwWoumEpe2tGJwn4oqW4AnX3Ks2xgkqsB5Z8JOUeNLS5OSHtMS9W5moF07aDTvU Mid9JxnF6VZGOsH2XjG86pE/J30nGenzfbBy0nXTcysje6/7cLDcbMIt8xov13Pz4YQTqr4TxpEm izYnbnhuZVXNq1ssbmVOcYaq74ThJPOKq+lV4gTOKTgpkww4MaCgWYdj0efotlBKC7Fw9lzsPFTE FMXOrKBljz44oWMLlBTmYfbc71BYVIKUeo1w3gVDcc5Z/VCvVgIO7NuJL6dPx8wZ3yC/gk+WfMjM 7o6TencCysuNd674ZU1ZUT7+/GUhtu/LZ3oOkzjm/oR+Z6FlRhrKK2gip8VfsH83fvt1IQ4Uaj7i ajdB/9NPRloim1RqKupfhcWQs30jFv6+RJU3zToKfY7vCoXF4rTFxccj5+/lmL9sFdMX6++kLWWS AcmAZKBmMCCuFFkvdGtGfEdkFOxKX4n0Hzv5sXOW9s8LFunyvRf9YDrRwHPCcJJ5jSWYnpfycPwT rpMtyUhH3FOZuHcqF2XRSrMDS7n88Sls4YlvBcoF7VvyOZClb/C4/jP5V00lf4OS3TRNSc88Svly wV+azPb35y/fVNqnJas4F1z3vK3UzG5c/oty/ondLf40DnwK4pKU6Ys3m8qWVKmydOGXSu8uWapt Ypv+ypZCi4KRKSk8qHz1xjNKk/g45cJRrxjyQIl1M19TUtV5oLfjg9pMbA+SiXuxPNQ04YRqx/XJ VtyHgxOOjZNPUUZpEZtkTntRL9J0JPhkK8bgVSbaUDpcW7IT94TJ9ySPlkzEEfG5Hyojn8FkpB9s L+JRWrQhmdNe1As3LeK6YYh6lHbTF8uc9EkWbC/ihJIWccnOSUZl4t6rHtk46XuVEUagPeEEKic5 6dGe5HzvJBPLKW3XkytwR+S0PPYqVV6qr0iVFqEkwOVbYkWpWrHDhw+jwhePh197A2ef1BWHclZg zC13YeHKLeh7zvV47vHROOHskfjotb046coHUFKm2QFl+PLtl7Fw017UzWiG4ddchVZdjsf7n47H Scf0w6rdB9Rbl/xKkkIoLj6s+izYtQYvv/0hikrj0KhZOwy9bBi6n3g2vpn9LS49ox9m5ZegqKgM SEnA6l++w0cz5iIuMRntu5+EoRf0x6Ab78ScrEyMeeZjPDn2EAulFHWzuuC6y4cghS3+/fb9NHy7 YAUSkxKxc/lPLFK5+hZ7vVhGLBmQDEgGqo6BqEzgxKVTL6GHqh8MMxp4ThhOMjqx85icyp1kweIP VB4JlpOtk4x8u5VxnWDlhFMZe7ZSxSMwJlXchy8uAZlNG6vu8ndtwrx587F6Vz5WrLgNdRql4Iyu rXDwUDmS2OTInAqV4IuPnsa4ebtVu/UVzTHursFIb9QcbVJSsQoHVDn/w200r5qoMGcj/vv4E8jX 54LzV+7BpFduR3pmR1x0ySB8+8ZKTZH9XcsmcE88+aSeT8LuifNw56W90XXQRWj1zCN44N4v1bLM Ewbj8mHaBO6nOVPx0JMfGhjsikuI2xA7JpzaxknmaOxRGAmeky0dR05lHkPypOaE7ySjeDioU7kn ZyEqReLHydarzCnMcG2d7ER8p3KSBeOc9EQ8e9pJx6vMjhUo74Qn6gYrF3VDSRM/XvG96jnFQLbk k+uQzEk/GrJI8EO1ddL3KgtWVyccJxs3PbcyEcuu5/Dgj6gu05KB6mWADyji20IUTTl7tmxzDn92 DWja/Wz8+Odf+G7WF3jg7lvx16yPMPyigRh608MoYo+oxRkzOB+Sk2upNmkNMnHi0e3UNNg3CEtK i9U0fylC/adO3/gUTt/iEpFaiz3gpk+rZs//FrvV59+AtpktkexjdrpqQmKipqW+uFCCb6ZP0L/e lYzWXTsTIurUSjZiS0hKVuXqxM144cFQlQnJgGRAMiAZkAxYGDBX4NSzj77uYJzwLLpaxtCjMiYQ 9fXPHVCpjz1KxE20E7Eu9cNgcqbnutlwTV2bf7MgtJQRk4DnILPMgCkmp9ipjNee+DFkFJpQRqJw 9g5xWmBUv1HyZQGOQsaIXcBSzOsKC9+Ciq+8FG8++RDO7vkBumY1QeNm2eq/0846l2mVYc2i+bjv 5tH4/JdlglUy7n1jJkYcKkHtehlo16qFWrZn40oUZHXGkN6NUKG+rMAarLwIP3+3ABXiJamqzRtT wcG9h5FXWI5mqXFo0KQ2+LzQUFXrZLo9XJEHfoOY1yqlvrZqaJaGl1KPJ+pYYv/z2tZe9cILL6gV e8+Y6diIcrOiY0esaxT1A/UzNxd+ZU59meIVy0gmAlC5WGavM+lwO1GPcMRykpGeWEYy0hH3hh5L GOMWV9Dbi2RkY+hzFTWjN6uuSDLSF/aaBgHqtkJ5yEmKxcWnimnnlQtJJjp1wiE9xzJuzOojlrnF RGWqmV5/QUbMhHSciPGHkY7KcSD6FepjiEV+DKGWCOrfC/+Wcy7HDdAmNt9q1iU2J3WLzKgrS5iN Z1FRM6Tn5IvKxDr4IxgScwKneuSnGP5WnYpiKFkTPDLzBOuvL5ZxJOe37awY3EMgPfJuxSWpv3+z JLQU1Uusv5NMRKWYnGJ3KiMZYYi+SBbOnuJ0ioPKouUrnPjcbHh89o3LnOSmXmJCPDb+9g1O7NET lwwfjjNP64vu3bujbessJMUnoGOvfnjv9QvoEgAAQABJREFUwzfwe4/TUVZO/TkOzdt1RnMTBjmb l2L0nfej7eC78OHdQ8ySin04u10vlJRz3vy32vVTUDslXi3Ys6MQRYfZLU8jZCOhlqckNYKmCRTu 2ekPFoJEnSQyeHVV0pjoUrtzv7yPBWtrr3ohBBaSajj+6dihugZzGKp+MDwv5VQvUVeM1y0msg2m 7wUjHP+iDfch9iGKTZTZ9Xk+WOyiDaXd6kM6XvfB4iQc8inWh2Skw/difUhOek5lTv6dZIRFZaIv UUZ6Tr6orKbvo10fL/yLfJF/J5kTd6KeU7mbzMmXk76bHpWJfdMJQ5MJE7jASqGVcMdEMpvA6edO 8+TG0XiQ9o3L6ETrVGaXVXderEOw2APVK9p1cIsj2r4qC09BaUkJAxd/Aor7MvsUv+XpS22MG8bc jOyMFCz+/msMe/UZpDfMRFa79rj34Vdw6cDuSG/VAZ3S6rFPgPA+ybcyfPrqWMxbl4uE+Djs27gO Pyz8CZt35+HS7kUoYi8sVJTxA5jxeDgPxcyOWtnHOnKp8TIE0KfPiWheW4tpe85WlBqTKRY5s1Nb nMXJt5POHqxFX3EY29Zu1fBVDULnWmKa5503VauqupNzCNUgFbnh6WAEhKofzSpRX6P+SvF6jUnU JyyKzysG6fM94fG0HY/LIt2cYhJlbvhe9dwwqrJMjJeng/XDaMVWlb6iFXNl4Hjl34kvJ5lTjF71 nGxJ5hXDqx7h+u8ToNDaABWygSfEfkmTNA2BG/MTnzaA+WjtIRimcAKkSLztQ4/XHdcJz0kmoLjG HsSWYNSlYaYb0ebmy60sIqdRMBavehLR8bhjsT8zh60yaX0zjvWndSuXsduZ5IqdiJRGuPGOh9Cz eTL2XnwyNp19Kf5Yt5N9By4PS9fuZhM4pssMytkkyuzhJZj96WsY95O4CsZfFojH9FfvwO9T/sMm X/zra5yrUmzfuR8j2UqfuiUko3OXrth/SEHTrqfivw/eoeGW7MdnX3yJiqTO6qmS69Zu0BBHHdWJ vYWaihMHDMadF52gQuxb/zNm/LyOpXk76xNFtYT9oVsDfscjKbjs/Wy8trWTHuOWlvaj0idd4lZ5 dit3KHM91kLV5xNtrVNpt3R5u0Sw+fR+bPRThuUUr5OM3ApldPfC59QOgh6ZOu5Jjz2jyYLRVPz6 Cy/RYtd44GpOfcNJpkGqf8mXIPI/v4iFQtohJhh88hNdCG3jFIfgykgG03OKiYzdbJ3KnGSExffh +hIxqiVtflvT8zHkVlevdXDl06GfuuoLTr3qCSb+SQf//krOY4Oh5w0j6itwxoTNCEQmJANeGOCD NNsS0/HMxMnCZI2vIVTghUduRsFh7UUDsDdQS/LX4rPpc9Fz1CBkdDgVs376GSvXbkZt9nmQbl3a qVBb/lyIxQf242T2cVxti0NySoqa5C8LqJs+mBTm52Bd/i5NRn/jUthLBlpcGe1PwFdz5rEVZR/q ptczTicz338eXy/ejYTWXY2XLU68+DosOOdy+OITUS+tju6nmH3e5BlsZx8o9iHROGGSK7mXDFQn A3Lcrk72pW/JQHgMhDWBM6/W+IlR/NwBv6LVVhZoBS68sCrXiuLnU4NoxGnimXH7D4ji1b45oWCE 2TYnPZtKmFmK0z+2MAHDNqM6Cvwn6KsXDDNJf1NUhE9Lr498/ZYkvxMU7yvGM3eNQfO6Plw9bCAy MrPRl/2j7a9fvsUdV9yKAyXliKfXUJVyVJRwwtmkzHYVqHFC7cJRWIxMtbyUr1ywXp7AJmP10tU0 /5O/bxe+nPAuxjzwDPiXRRJLytjtV64bz+JPUf9xPb7t3LQa74x9Es+Mn8ly/E1WbRNfkFAqzPpT ubknvnjkYoymhpcUtb97v/d25efFX+Q6VG+hn0QOKiCIY5cgDjdp61PhwpBdJG1NGMY+KisLBlrV JFz4VPggwAZPz6s+VRPxP9BLPB9NA2405tT0doqVOO1Es/WFRL8phF3Jnjcraz+ZVPaAa48kvDzF 734i845t4pk2/oMv50bb3CeNxGFkJ2szEjNFcfrHZupUTYrqSCfmCtRt2BzNG5kTJHsc+/fsQllC Ghql12Y/Q1WM9es3sRcM2IqcLxFH9+6Ds848HY3SUtkt0BL8/vN89oHd79lboofZ4BKHOvWaomWz DAZZjh0bNiCvmD9jp6/A2R3Z8plZrZFeW/v0iFhUfCgP67dsVnF4LXy+VLRqm41aiXZcBXl7d2F7 Ti7T1T8vogJVIDG1Hlpnt1CnZHtztiNnL/8Ond2eK3vtOypwwD/U/tHq9wEdRa3A3k+iBiyBYpwB OYGLjQbU2omPOHxzGttqRj1obKzpE007W2FO4LRVCf+JSLQGXI5fGY2txU3PvQQ/kWn6VtLEuAjP qsFz/tz46zhLxJM1aYg+SRb63jyYnPCork5loi+vem42Yh01f9oBRNiiLaW5Hp8C8398OEhQ/2p1 clq90p5tY4rMgpcTNr9iDFZHbqVtCnvxQfNJEtqbMWgSXienOHgp1+XxWP1a4zLjNWPVkIMfC1Q3 Kz5Z057an+e1AZVK+N7dVtR0T3uLRatjMJ/+/cTdd00t5ZwEq2tVxu61jaoiJqdYnGQUi1ZmXgyT nO9Fjt0wRBuZrhwGIuE/EttQa0P9SetRoU3g3OKkMjEee/8U86Ke93RYt1DtJyLTHT8J8UGXDi+z xHtKs/c/wXhHcNYMPS6nephxmXjRXdHiHGqbOSEwXwpxrps3aeB241MUajN3X171zIhEnkhq1pEk Gof2FV0qDbzX6uR+IISLzb362ETR28br5BQH1Z/4NdGc4yJ9U49PdpyxNR2vbWJihO5DjCZw2sSl PuysS3ru9eInZHccZ/SaJNUmzfxWHx/QnfpH1UdL/aW6YyJuOAPUzk4ykSEzdm4Rx0YtziudfDVN J5mIIdOVz4DZTqH5qsq2E32FFiXvcf79TsSg+osy6uNcxsujcfx5PTuJcfwD03xeXjMG3+omP/TJ auyfhKub8yPPv+wTR16bVk2N7OOPHJerhnfppWYyENYtVHtVxLUFcZZp1zPzopZobWpoKa96oh3Z uOGK+tWRphi573DjpFUMfvVKK1dOMq/1CxaTVq7dUrRimv6tci0XTkx2X6FPoM3Vy9BtnWpBsshw vXHs3ieIG34FF8nGrfl1IN32jS5PTpGJPT2y2J3QvcvMq+fKrLNZQ86xltMuAolz7p1W5UwZP5bJ 1okxUea9ztWn6VQXLRqzHcQxzIyUODElpp5oS+Xu4xBp8V5Pfd6UOdtS7Kae+7Ep6gVOk3+x/QNr Wz06ReRmG0lZqHFG4surrVNMXMbbT+wT1J4k0/LEnrdjyMmXU5xOek4yJ9tIZVFZgdM6IoXijRzS lvtoMiBXNqLJpsSSDEgGaiYDtPJGJ+iaGWV0opLn1+jweCSihDmBqznPcxyJjeKtTvxqnrdDVW90 FePVbyRxkq9wbl+Trdc4veoRbjgxefVRlXqR1If6XyxywetdXXET52I7O8nE8iMxzfmnPuRUPy+c BMMIF9fJLloyL/WKlq9IcCjO6jpOnGJ3iolkXF9Mk72TjMrc9l7tSE/kyUnm5iu8MnYLNclhycxB pBOjLQ3ycn5dIAZsD4AqYJcHyos+nWypXCxzktnxSYfLRVu7XrC8iOOmSz6c9J3KvMrIJ+nzPPkQ ZaRHZTxvLxfLSD/YnjC82pI+xyWbYLJgMYhYXnRJh/xSHFzuJCN92pMOz5Otk4z0xb2oR3LC4Hkq d5K56VMZ34u2otye9uJLtPGCG8qtcSf/or9AabILVO4mt9dBxKIyUUZYVEZ5L3vCCcfWC75XHYqD 67vFIuoRNum7lZGuuA9VP5At+fcvFx8IN72ZKdFCSzthiVpOtmQjlrnJRDx7OhgG6RM+5fneq61o QzhkS3kRT5SJtpR2syUdvg+GI+ryNOGK8lAxRFtKB8OlcvJFeW5PMsIKZU84ThhUFgjPyYZ0yVbU cZJZ9d1mYKQp95IByYBkQDIgGZAMSAYkAzWIgTAmcNyEzwzDMK1BFZehSAYkA5EwQOMAXSVGgiVt JQOSAcmAZCBUBoLcQpWDs0goI0v9eSVR9s9J09JuTe8T4cZJdrxFa3od/zm9Tta0Mhigvm72cz62 8Y3/fFz1bOTYjKmy4nAex938UxmPyEt8oepXVk2rE5c48MJXsDgJi+sFx7O2L9kGtwsWRc0ot9Yn zJcYakZVohmF03MWRJXhhwn8ZEZheAnqVtHGDS8aNyt62Lj6V16tb2W5xRw7ZWL/i52o/3mRHol9 j7di9U3c/nl9qLJrTJNx2a6VzXT147PxSHuJwVdNMwhFn8FE279XXK3a1VT56m//mI0g0hOpW/9w K6sMwuTkrTJYrTzMQH2vqvtN5dWw5iOHyjXp85pF+1zjhS3rqlBgi+qOM3BkgUso5urgNXBUgUuo LShurhkrsdtrJVfgHNfU+GoTn9TR+pidNpmvWgaqf9WvsurrPHmT/a+y+A4Nl8YAa//jbRZoEhca vtSWDEgGJAPhM+A8gaN5S7CFKdIT/bvZOOmLtm5psnXCpzJuby9nZVRsL1Ld+QkrkNg0HomtE5BQ mw3cZOwWmyyLPgOMd6WkAmW7FRSvL0MFS4svzgQ8iVJ7+bVrGCESFjeNBp4tBP/JG6sj63LJrO8l ZcbDl2KdOPBwLGFQfBahzckRmq2KqitFFSjZUYbiTezL/bz7iS9uUQBMKiSt7SNy70lJNIggHcQX 3WJzvG0q2lIITv2L9MQyJxlheN0TBtd3wtZxqA5qVtTTy40dx3MrNxT1hOCfkhaevOCRIYd08k3l TmX2eHie9Hnaqw3XFbdwMMjG7pPL7TLRV2WmA8Xk5tNrvHY9N19Uxv06cUHlTmVOsZK+WObBNsE4 EBwARHtaYrQsO+o21MF5lvDU8Y7nLSBidHqayrmxniYf/PSlYqvAmj6p69bqjnzyDJUbMiag+Gj8 NfJGghkyHz5fBdL6p6D2qclIqCOePDVU/tPb4kYaFYSjOw0qJxCyo7wRtCYgHKrVP8k/r7vaD0oV lGwuw4HpReoePoEVxh9fCaH+wlkjCqkfqDI9I+pxOd8UbsBx+E4TmX+F5qYysT8Tnigzjf1TpG+U EKgqqEBCRjzSh6QguWMifMmsZmq5pvRPantOh9DKOjtCYwjllXns8fZSDrMLiHWlOPB5Ecpy+U8w aZGpFxB6Z1P0wY7al/Y8cOoblqbWq0JlXI820ZZkXJ1qT+MqlYl7Cx4Z6I4tuE4yEUhPOx1LdjVy o8r1jFhXakcuI7klTh2Q4iOfXGzoM1waKqmc8qq5JQiTcxXDVqbqO/xx9c/0DX88Fps91ceITfQp KLuVG/4FfUMm4FEx+eQdw7iY1QvJTgyTfHOZgcHSBE31E21FG8OINSjXJTuOZ8TCM/pGOE5lpBPW XnTsUl8Rm9eD6qzK9YwYG4/XqC8p674oy23pJ7rgE36OTVTQHZNIDFcvMs5Xon8LoYYiJfz3Br++ OO0ZOGpArkoVscgoIjoiBUzS48FSwDTQWIIMYkssU3A8r2KyPyQjX4J7I14uo3Kqg4ppi510DGUV rAK1+yQj/aJUtW1oUBb9yHQ1MMA7AFsnLt9Xgb1vF6B0NztwaBKn9o8AEzi9zdX+o4dNfdJSC1WP TZbi2DBI/URXMPoQy1OZ2J+pT4oyC7YtQ/qGmECZIK4O0PD62kjOTkBFKRPYYjFsZKJqGWAdKI71 v5Id5dgz7hDKD5gdy0cdxDaBEwOkvuHX9kyJylR93lHZ5tTsYh8mHKHraIbsr5Me/dAB2XFl8ivK DBAhQdVz8kVqhKXm9fFd1Kchn9eL6max0YEoFvLJxSIOz4tlPB9wE5wpPAByrBt49U/4XF+NhRHM oTjPIiThUXxUF9XeadBxIIVsCIvbGjLuUN+IE0NPjUm/pa8HRXbchGIie743MHi5XkAyR1uOK2Cr mIJMh7DsCMeI01LqLUOxU2yqlQt3IirZ8rhVe6ooU3KMieFyPUuZ7kv0bzw6ISrqbWz4ZD7U+ts5 0mPgYr6JEMIVq1bI/zr1Hb2U+E0wJipCBbnM5+M/qizMMh0qo2Mx39w4jnFV7ueTHKm6FDnLUGVp r3YQ7oOTSLFQhR3s1IahQ0mhH3NntqojXnPRiJezL8er9eLR8kkA1+B/uIWCuNQ4pJ2UrE3ehGqr cCH+4d+o51t1/TLpEeWfU1kCxDeIR1q/ZOybfFhvMybnR4DWfJxudTMONr351TbWJ3yqqqK1vdHH 2I8ga4bUd8rNnsMx+D9uSJt+HKhZ3QfUY4VLNGyeojhMPzxc6qfU/7gi12YXDyewlbesRFQUEyiX h74dUW0fevX5Ua5aRe3YY3AVrP8lNE9Anb7JyJtRyPBZJ2By7kntGnqfELuJEbouVHfU/nT1zoWq jEetxW3YCQleYvjS5WK/MlTZWMZGMpZlAx0fAvnGLkz4prrSXfAhj9trJxB9bNT9W3ApXvE8oKIJ f4TjwanPKwYGBcTqop+5RF88PnVTY9Ri0mqtxUplpg9uwZyzuyakp43luozOjhUMUHTEgdS83ZYX MCRdnfyoQuZKp86AMuLlCnqGu1I3s6pGmQHAFXQ91UwfOww8I8H1tBMRwXJTqooaH9Pl6j5+hcs2 Re9XGoQ21ig6hijT0jwMYazThXxn+NMT6o7KyZjv9bSFKx4I24w4tayRV8sEXMOXrmfZib6oQO9P ijpx0awNXzoYmXETio3LDF/UZ1WB3v9FRfWcYPYrwtdCMFC0LP+rtyHxrxboapb5j25hwXOA09W0 7szhhQpRmKTj/AwclTrsRTCjWL3M0dpTjYf/EZwaetFOMD/GVbBnbPHoMo0SGsUhLp1NQsu0Ro8k fM3WRKDB2Zi9m26NFFGm8sekprWh4jlxJPr3lShIyk5EXEoxKvg5NMBG/dPe0QOoO4hZK+mDv4bB W02dBjroRkfE55e1OrPJG7tdTBdU4ba/3c5L3xNrEWn/O2L9s4l1Cmuj/G/i1AmdyFlkaW08on6r YumNQG0RKr7WbzVrsT24D+fjgk13aVLJzUSjAM4DYzkb8AUBgq3gg2wVbb44dvSyOqm+KQD9fOUW gkXfTTFIGbWr2hpakwSx8FbMxwxeL7VuVC9vpu5aHEuPk8KlOgQypHLnvhXIismZLwqdbAnLxSpg EYXO4ybcgMquBc5zBFcTeyELwN42VEc/Va5rFwbJc544HnsGTpupW/T12hv3e3mhiwezSD9IdXsL ppDhVwVqZZie2WA8In1qbAKaVg4y05bU+BVLPMPmJ1z/evHbZHzjZap//epElcWzQYwd7Lyemprd oVYp/yt8TY+anF/5axM1f7nq3PhjxddsxI5nLaeSf6p/hV3KqAtpdPXEeVT7i22txaBNu3o16NYT Rn839OwafGTUZGqLq38Y66RPCSY3+p9xmcWuh/RyrbcwHN7HjAz5Yn2T4xlXkey44ZNG9r/eRXkh Ket7DcRL+2sGmj2h+IUQAN/UI0sK45/tX+1/liGFH7FcwI98nSu1H4gdlLhjGmpba33SHJuYLa0U 6bbGygKj2+hfvAO5jY2mGyGltZd2QcDGQ2GlR1154SGrYVtjUv2zPmy9MOb+SWaO0aoHoZtoHnkI Aidqml0Y03HDSi31t3DHLjdUHvSY6Nxk+GBPgtIBYsi4P23jFytmTGZjqTJxpY70adBmeeJH4fEK seqqZlsYK4pUIuxptUttOF5njkV8mc7oN8S1ttbkPv0ugSbTMCkmwQNLatzw5RkVxyRd4NW0IK55 e/I2sOIzPd1e6yfcTsc1IfR+Igq4SI9DtdC5VkGoYUQZp5Tk3EAro9VBjmz0dZdjiOvRRnypeR1a qxv50XwYuEzRoIrFqc4RqH+J98rUCxkNQ6nQLDQM3o589CVnFEng2FVrCsfi37TlQakqBCtwSO2v VPA+oino3YRltXYKeQVOcH2EJdngwMlTO5BYNaEFmFjvlmZD6qrmsG3V95dTudGddAQ6wO1y0tfU /rH+OQ3iIGAejjp/9p2dR3t5KHm+QqHpi4NOKAjBdPl5PE4dYO2asv1FRqqt/1v6XzT7llg7SnN8 a7tTiZe9dnLTxhPtkOF4PG+ORsFwtBOcpqXWlh0AHIuOg2D24ZRrsYZf73B8Cqd11byy6meZcOiB epWFV6/AVoZfWnUNrBpxCfmyTq4ihq0SAIq9SpyF6STABM4+QPGZu+2qyNGh3Y6fc/kByW3ZjFGf PtLMUp3RakctKxUHF38cR3d+gxwf3rkfe7V4DAxfnd3S0Mh9cH2aOLE0n3Eb4wclrLGQlBkG2EhD tyNzQ6wLKG+gkCIJSMEqJylp+e9JQ7cjc0OsCyhvAJAiCUjBKicpafnvSUO3I3NDrAsobwCQIglI QZOrf6mpSMXYi7aandnHuBJhkYF2BcZzVj0qp72Iq8ksfUvvu6Sta+hZ8sn6FSUNRcLlfZ5Xiinw Q4QnjTqSEemyMraRVMs5/SUN3Y7MDbEuoLwBQYokIAWrnKSk5b8nDd2OzA2xLqC8AUCKJCAFq5yk pOW/Jw3djswNsS6gvAFAiiQgBU2u/lXbhqdEXXNcIUttr+lo4yatXvHxhrWhMZYyHWNFR9PX+qPu m0Kw+DOEmhvHv0Yn0sdcMV4evRaHBVbH0SYwermBreWtkxuXOGjVybC3J/R4VD0xVrtfsqP4Ra75 scM2wRdpaRNVyolckkzb0/lIA9LLLNXSZMaqCyOM/6dtFkVVZI4lhM/rQ3pkx1VJpprZ/oh6VCTo 2/qLpiGUqwITQ4F+u1pV4Sv9Om9cz8Di4yDZ2LE0D/5/ub5V14JtMzC54QWandEPVZHZD2ymAbIU r2qs6lh9kJk1RpJq9fXH8F/AIQu+N+/2qCu1aj14GxOO2H/JL5Vxe5LxtPPmxKFFZoOwz3ScUXm3 NZYbA6gEEGtEiRUTFU1CRGn4aZEsJxTqvC56OkH6YrzRNEaCCNQhaGnYPLBtfkmfxLY8DQ52e+lf I9hoKYM3kvC2DPWgp0YwV9RIEt6eYjGCYzAkExFJJuqJ5SzNi+ifmtRsyNKAJQi9QPY/jRD78WOw S3yRwJb3fPxxO9WWE0/jCO9/PE15lrRtlsHXVqZljRZ2KHUrc1A3RGI8Thgks5Fh2GsndOpbgthj kvC5emAfGpgYazB4jmvXd/IlygjTbkdy+95fz0QzU3arqsuHFoNlkuQXZGhYFnOxWcOGEQ39ebf4 i2rGzZdbGQ9CjDmqQXkEI/9aA3icwGkHNPcQ6kGtTew1p062NPN3KvNYo6ioqc3GODEeSdEHHuPE oHdYegaJZur2KWjA73XpUdq7h99ETdfzO7H8w/2ri13qfI0TQZ04/KavKf2O14DXSL17zxKy/2lt WtP6v9r//B6v0GJ1+2v2M66lHcThXgy7+YlemX2Eih5y7CFpE3RqQx6/46J7Da4YTeDMFaNoBcv7 SbgX0NGKobpxIj8PRVoDNoHzFoTZcYPpa4MU4Zp2PFR/W7Pcvyx45bzaOOlRnLwj8s+fsDwXsX9a t7TaUFf1n7BRlBoelZM+7WlYtOftckKzc2XaOcdFJ4cj1b/aPBrFWiOprcTZs/Lhn+eM2nWcBmJ/ HW7pvxlBsCKyoT3XpnJRRihOMt5i+gPBzNT4FIGBrdn+09u/uutPY4O1Nahdae/fvtYLU/9ysrTu nfTc+pVbmRVZyznpW2XauOwUB+G5lZEO37vpOZVRHCKGmHayoXKxjHBEGenR3q1MGyPi2BBjtqGp r71soeHQW+vWurr5JxzS4Tgko9jEvVuZu635sgHHsOM4+bfriHGYaeutdsLxZmvGQXZiHZxkpl9z fBVlXtLBYqPyYP41X+GtrJMPL/EG09GwPK/ABYOL9XJ1KsDbzpxROlaJVtj4V+/EzZw42eWalnkC suYJI5A9ldP+n+pfXZmyUkuUxPxerRb/o/5zr+Q/tf2pkaur/lr/c2obPpDSIyL6RJyClfsIGKh+ XvlJWjsd8NGbLrW1KhmPjEVQQ2kqGYiUAdcJnCI+IOo3eaQpiT0EGsxILurRQSDKSE/ckx7JRH17 GdehcrHMSSbiiRVib1ipRyRbaOZHrDpOi+XMzry3pYLobxgbEz57nq4yKgw7DY+isl8Mmbdm6SQh /VNr0d5nTK45N2JbU9pgl0xse9ITxcFsRF2epv4dyM7WbhZzu3/CYJ+1YUtvPvaP77XNhmP0I63U 3t/sedn/NP6idvwx2s3+x9uA9wNqT7eJm60duWlYmx2HfItg1J9EmVPajsV1RJkTthMOybz6JX23 vRiHm55YZo+XxxMODscU7QhXlJFfXsbldLxyuciDZsNvYZqrYIRHeiKuvYzjkYyn7RthiHInfSc9 shH9k4zv7ThuGFw/EA4vc9tEO/IZzJfT+Cvi2P05lZEvu649L8bi1YYwRFuS0d4JK7C+cdpj5ubK n6bvOoETn18j1+aeB2F3ymV2wkQ9KhNlJqKZIj2SUKNR3m1vt+W6dpndP8+zjVXHZ5wJNZHxLI7x /It+wBp5Tc88jm2+7Hq6uqlPAtpb7aV/jW/1lgVP2rucShtxZm9X4pT2pEf5cPaEEcyXEzbZUpmA wevF6uez9RfZ/lr7m7xoeXoGlZg0jycbxzY+/fUNiZ6w2hP/6jeh/LC4rh6PHaZK8tZYo+KSVyek 5aVw6k/jObd1PKBDrIqdB+G4ChHJqk64bnikY7W05FROucRN16nMSWZBtmVC1beZq1le12jgOGG7 ydx8RjsmN18Uo9ivQ/Uv2hKeuPfi39TXJm3ONu4TOBMjCsMUJ8HL5lXPC1YYOn7c24kLlrcDkD7J Ke81Nrt+sPz/s/cdgJZURdr14kTSMOScJCgqEgWUpKsoiIBZMGD43UUxratrwIirq+KK2XV3xYSK uuYVlKACAgaSBMmZiTDDxJf/+qrOd05137733TcziCg9c+85p+qrr+qcU919bt9+femH/MRTzjb1 k5V1/GRt+iEv8ZSzTf1kZcLD3CjQ5g5Fzsk4oH+Y82oS//k5oy1dqo/XZO06AfGUs93NmAFTx0/W ph/yE08529RPVtbxk7Xph7zEU8429ZOVjse7fxJ+uPOoU7yIbS0XRPExE51cda3rFFO3c9GJ46Gc D+ZMt53tFCc4uuGbjIOxrGsceR/usqlfTXnShHu4Y39o/Oc/pFT6kkHef13A8dNQq/MCbtX5gb29 LS3gfMIuI8dTASZkcltyTF42cTXJyET/6GE44KHJTvO65SSfRvkJnYPc8lel5GvH085POzm7kMq/ F/9+DxI6jcTlDq2ljm855+Bho53mPQ1apZgqnsbMIbanVjIdbJqZdyxB9ej8+4ByoNoM7180/21O mHvIQ2wlD3KoOo+Yyqls5TmY+WaKqZgnbGssTKM1IOvSpPhsb9BpH+ukI2M3PohFOVV8tI318sdF /PWAqG2tu1+88wOj/fWnPYILGcFzTac+dxv7usZZ0F28dYq91Rx/AOJ/xftw9R87o467nSR8Zlqj bJJ0O77rytbH1SP0Y4v/5XC7Y4nH1/EKXFNof9My5BheKNLXJXnKKU+CujyvKTKBI3D/w6j+FEZf b7/05iO8+2j0k1TjajOmD/zs69Xf/4TdGvoPnlI1R27tln4mVIv84faPY1+KwUPUJG8YzxT+I69A 3/hCdR3l37jm0JgewKaef7DTj16Wfyk2FCl9chZxTuoCAtXGtxagiVv6SfQ66n+i02It/YPBzr/g yZ0t9I/WHh2BR0fgr3AEdF9dw2fY/hV2piWk/vLJr0XXIPBPhzh8+WGMn0IboEEEfI9++qgeQqu2 XG0Gs3SYrOKivrXuK238bAf71cybOPV7q8onVDQYJMvkhPeQ0yevtPGn+UjE8xY+eeDfBoNbyXbr bSrzlv5ZFoyu0sWY++YN0TU3Ro8/pNhgcGu1m5vsVuv1Sj9pMF7/owv9nEeCpIj+QcbRs3OPtp1F S+LNY8MbeZNqTfoP07p/GyddeOFno7DV3JisWaGRR7ByYI7tyicHRQ3Zv6Z5L+TAIbKSk1HXVGc+ NenqPM3Ymq/0FHp/Jph+0kff7JU6GfuqqjUZf1DMnb69bDlrfbnrgRvkgfHR/CGi0/zj7yjmTt9B tpy5vty95Hq5f1w/SKSOc6j//vIvDQAyTk8IfLQE8i1PlVXS/k14Lsv8x/xAnro999BskHK0tGNO Fw7aO475X36hoPDShjzx8w/ntXjjPoL+FY6qHi3u4UXThPe4WrHFin4wGo5mvH7lCn/3X47rtKOv OA/RF/XE10uMQVPfHZeuihhh98eL5vkECa+y+DjE2NjXKGOssT/lKh60PibEsaziXdrI68AEaI2J fIy7tH2GOFPe36gt9fIMvdh/6JtjRxb4t1klV+qxx7Fq6mvxzhq+Bez0h0Yl12mBsu4XsugbbWyU eav9+7jlb3t83R95Xe6jXZU17X3t/auGD7tAEFPfsLP4QaNMDlkQWHxRPrWylXcq9tiR8VeA9peA GC994d4kvMZVjhc+hePVOzZhL/zOrL3UGAuvXuj0hWPe0PCI7Lv7G+W7r/+JHL/V9jI0MtLCTzx5 4XtoeFT23+NNavdTOXbL7dRuNPu3Y+mYkusLMXTyDyxisrg0f3uxTqj1r8n/uup/3b9e0kFA+vvu ZcHSrf/qX2hyVjHQmKi130rurQlX2S/aW0+Sm2le6vOz5vk3ISuHRZ657wfluyf/UA7baAMZHh3r av5XDvfIs/Y/TfPvB/LUDdRO54v5j/lD7j1y808XPGuYf9b39hO8lhoe/9aMhvm7ZtZuRQ6Wnbi6 O3F2YmjW4eTdjf8m62I3yb6WjCc7h02VrymmTjLyo+TWJKMOpR/tgHcb4iPmL1FHHJONH+Io5/zJ o/JxICtL+OG+UcbJuI2yKmv2gkVhM0cz3qW0QQvReHyuW5N351gTS9iU8fCW96fWe5wQJ988ifiZ fHJ8KwJ+6r4oY4nQauG1Eq0DCXz4QSMu2LBgwAvnK7zwV3D2l3DovL30DSs+brj0pS8uxHDFBPW+ 3ukya8Ys6e/TTxzomtlC5wtFu1IHniTHX8FC19c3I9nhvi74188Q4xvKu4/5mvzPcz4gc/XS2+gk /hED+IwTLpIP+GrvHzZ4rX3/o/+h0RF50g4vke+d9GN5/ta7yUptWwwalF3NSLFxwVL3jznw7++q iczhn3pZ52HeTZ1Js0SNJs9VHhAaDwQpN9r1f03zr79/psyaOVv69Uja7fxjXtxO81a75Xk7rjm8 tXziRT+UM552ikzXq3n4YJC3hvyP8w9ot/4fivxbrR+CnvXEt8n3XvF9ecqczWSVLuKmln++f+f+ +ifR3FybSj0Tm7mQIE2bH8g9B3WMmyBdyDwn2/loImC+t9p0zPMmqooM5xWMSHejUjHNdl3a6rch lpNdwqu+WlvNUU994dDKXCTN89R6ZbJYTLWGeeVrMtvelrP4ZBbt9I3HxHZgkzPvWHYEr5WyxLY2 vnSOkG9dnCdag+V8cJ8riH7u+EUUk6Eps5GQ3EqNEj+EoKP1BZ620wG/+IQv4lgWps6Ho+K7ctDC iUI5izbWK0hzhEu8KSxfU2aIM+AkFLfy1RP1ABRvJWaVqYpftXCRgpNTZcOJQHHkNR3scGlNN398 ASoQDsrjdj5IDhrYXtY/58Myb0S/WqVrnlByZ6hQO9u8Xe9PuiRqi7YEDAUWraGpVcaJzzTY2C5j QIOq//HRcZmz/g6y/24Hy7VX7SJjt17jJinulnHJ/ObGvhGyBQF8pq+hXYN3+oqSdvmEr5xUpyb4 g4diWeJukhVt8cFaOahi36A1LQqKtVJih0wJgQ8IWs3Tl3i6G3/6BHPwq1XcTgAfxqvtlnHumH/F Dqu43p6Z8qQ9nipz5w3J9PPOkJVK3ceA/+rzb0K23GwPvbJ9uOz06y3knHn3iK1Op5B/GF1uGPEy 76zHeSCS8xGPm9TRrrRx3GzH4nIexOsoz/dyPHXOattjoYxTB6SzcZ9hzOSgT29X3zvp6v1jzJFf j7/m36+SeP4SxxJxUY98Lj4xB34sck79OKh9KZjcV/MCeYhJTWwOYziGaPcW55CxAUuCKONXdlFW nVvEyv3fc4l+3aYqizrOE2U+HuwrpShLZD6GrksxmbIgoh3qVT7H8dxNHUqfwbo12jre6VmycRSI ZP/ICbnLmtBuRb++EOJ8RnzpD2quoazK4a3Wd6Ija8k5l3oczUhnrOtw20WrryjheDBqzl41jtjS D9ok8IA4yUw+aklVqIsm1hBh2XmiJtZLoFG65vVql6o8UVfVtLZwsuRN1dRyzAtPqTlGDxfjI7J6 bFSm9U6T3l60R2VI7xsas6sSiQlEsa1Nw42OymCf2umJZHwCdriygR0y+bEhnZCRidV61WqFrB4Z lmFZLauGVsryoSFZb3CGXl1RPAOlXXLLYnh0tQxrBs3qn6ZfiQ0rql/PX7poUL9cEA2PDekfXPTI 9L5+YxnVfo3oiXu62pQ/wKj2f3hUbTTeYjMqI5oD01Of0I8JvZF+xfBKWTW82sJZrbE/qK8+HY8Z /YMMMZVVfnarvpCpGXXVxIECuQcP2JmqnjpTTAXbmamNFpcY0VnkSNhy/7Osqod4bHxYhvRrzWl9 gzpPIqOaiyM65uMTM0peGLeCSWh2I8VO26Oae5jv8YnpGWcHHbUZ1rkbnVglQ/o17NDwKlmh87dy vE9mDUz33Mi89fh8/1g1OiyDyCMNYEi/Sp/e5yeh3l6ejFSuuaTLRO2H5p/yjWi/RrVEjlTvpdFg bXMbPHB8MOXsiObsqOrMxmZY809lyzT/Vqf8WzW0yvJvUGabXSJLRTV+dgsLXy5+8WGsxFO1fiS1 qj19JEVeYsX82Bo87zd+Ui8Ir/kHq5Jrdf26bPu4+nFtsnuv1qXfJq6pzvFU8Db2TU7/AjKfz7KQ b3I5lb5kezVaF+eazBcqaxRPsG+q6h8xMKmh5sKNsrIzdOcca3FffHSHbwrJZe3tW2OLLLCLtiXJ eCiO6FCHEU+iJnaW9p8u3HZETzpz19tDnvn4Z8pBOxwkG08flEVLbpOLb7lAfnbVT/UkhNOJbrZ4 0xjsjKgnRF1Ewe5Zez5TDtzhQLWbJgsfuEUuUbufXA27EbfTER3Tq3GP3+4Z8sQtdtUb0qfpX0Rv IM/Z+6Vy4MiQXH79uXLnqmV6EuW4tPYT3Tpg56Nlx/UH5SfX/Er22fEwOeqxz5Kt+xbJu3/2Prl3 9ZD6m5C9tj1cDtn9H2SfLfeQGUp378Ib5ZJbtR83nCfLxkZkMJ9sfVE2rCfiJ277NLV5uuyrNtOT zcW3nC//92fYjMqAHl2nzdhaXvK4J8t+u+xpfdp1x4PlH3vmygOLb5Df3HaFTKSTeepwKmrjj1RM Y1fFTaVVFsYxR6bC0IzF2GPRi7Ev+0wztlmq6ybvX56+Wv+bzXTRMyzbzNlLjtT8O2C7/WT9gV6d tz/Lb24+T376pwt0AZT2aeU1H3Z0wsJnVLbZeC/Nv2fI/rDT70rvWaTzYXYX6iKcdvpV/XivHLjz c2XPzXaXOXrEmL7eFvLC/V6h99itkl9d/3NZpF+H99p+jyBzByzicf0gs/lGe8ihu+wrV91yoSwa 2UiO2/s4OWCbXeWHv/mAnH3rdZpXWKz1yf47HS2HPOYIzfOdZUD93zH/OvnNTefJOTddKMOaRwP5 yivyTxebwWavLXbRGRhVm2vl12bzK+2DfkzR/q6//h5y1BOeKPtstZ3FtO9uR8o/6Zjdfc/l8rt5 N+v+xH3H1OmtYfxT/lUXb7zqWu13ZKrXI5J5WJUhHkhKLvFDL6S0ibx1GfncDlpIfE6LLjJ4nTq0 6pyt6CKB3VTwxbJ7O/fhJ23GaT7Z0D6iv7nZNibOt+10MZR1XueYMCaUlE22qCxYWDgDecjRErB9 mEe/2Me0H7cAyehMzXx1DkQ8YEx+1UxvQ9DxbrYFzOeqwXXioCU428dZ7IEHZ9kvii7WgKvHHvUd 6hzgDpB2qmha1lWMFXEjLqDqMjCy/4wdOIxvyReg6ltPb8+G0W/Sr2Hn6+wPSbtpINo76jQAvISN T9Qzdta/vHtuv+h5wTZ+9Vk9WKuKo6XjPKQLqMfs9CL57Ev+XZ6w2VyzWz08JNMGdZGlrT/f+CP5 5S1DcvKRz5d/+9xB8onrrpQZA4OCRd9jdnqJfObFH5XHb7Zxi90Nf/6hnHfrqNodL6d95gA57dor 5N0vOk/eecjBhi1vq+TVHzlAfnjPLXqVLO1Y+SSTUHrWHpvYTL7zjsvl4I1WyRcuuVRedfhxvhuu vlsO/+hT5I8LVskbnvkx+dcjT5SZek12VL+aXa1fec6eMdNIrrj2bHnHN06Wq5avkgF9HAo+VQ6P rSeve8ZH5R3PPKHR5o9/+rbavF6ueHCJbLPt8+T8t5wlG3qIOfxLfvspeeHX3qbfDM/U8cKI6ZaK lvFX+djyCVnwDb2+twr56QeHbGfGnd865UJny8m03F/ggTvnZDZIJeLHZO5xfTJ9O/ykltu19J90 zD+1Xa2LsAP2/Cc544Xvkx02xFypbHhYpmv+YfvdFV+Xa5ZuLicderC88SN7ytfvnS8z9V5M2B24 5+vlUy88VbbfoNXusj9+Ta5btpW88pAD5JR/e6z8173L5DOvulRe+UTdSeI2dK8c/YH95fLlS/Pi vsTtwJVDI3LiEWfIfxz/KvnJxd+QbXY5Sp6w6Qam/OIP/p+87dz/lpmD28s7jvmknHzoUbpI0w83 enVvRK+qzZquVwJ1u+jyz8u/fOcdcqt+phnQXxfH4m1cNpd/ee5/yMmHPLvR5teXfU7efvY75KZV q2Svx71Dzv3HDzK1jBNvZ/3gDfLmc78kA3oVOyfeJPk3/0w9qI4AxIUbmNbl1vn4NvUc7sy3riKf elxT97zufHB/5Ulz6rFMbvGX8NEaRRmjbvxPlhtNHJTBU/fHutZIIZnMf5MVbOC39LQVRV5oHso5 RgzY0kHDG/re5J+yOG6UwZBxUua4Tr2EVf4KFQ3fQMAN9bWdJHI9lOXaxKm29t2IDpX+59ckXBhg ALHxsiruoMKETegVtE02OVy++IpPy2M3miWX/+4r8vFffl5uWbFUZkzbVF5yyFvkdU99ruyyI1aE zo1iTK+YzJ17hNqdIbvrSfeyy/9HPnbe5+T2lctkxuBm8tJD/1le+5RjdIEHOx/7abpo+u4v3iqX XLKDnHrS5+UJ/ffJa7/6dlm8conctOhuGcTVNwaaSv70kDHoyXBUv0IV5X+dLt7m33e1nHXxN+X3 t18ltyy+X15+2Cflg0efKKuX3SUf//H75PvXXySr9KvULefuI2848j3yzMc+Xz5/osixX3qNLNSv 6kb09bKnfVg+cNQJsvrBO+VjP3qf/O+fL5bVeqVmC7U55VnvkWc87oVm89z/fLUsnP9bed5HniZP fvzL5IPHvEy+/eN3yZevvlxWrbxdxvun29jmXYDxp52C3dLBSMMR89OkfwVvjHKyA0s9VF8IxPzo Jv8wAiN6RXTn7V4gX3rZR2SLGePyiwv/Q874zZlyr349uP7M7eQ1//BOeck+J8iT9OqYjK3y3NYw R/Qr+F22f7F88cQPy+YzxuTcC06XMy46U+7Thd8Gye7Fe58o++giT/Qre9zDMk2vbH3x+y+XH5+3 m3zsdV+SDRZfIq/91mn6VepSuX7FculXTLv8w5Vnjs6RB7xI+sZXyf9e+Gn5xXWXytV6Baxf76s7 5dlnyJsOO1KWLvqzfOJH75Fzbr1KF3B9ssOWT5W3PufdcvB+/yif1gPcC772dr15oF/7PiBvOfYz 8qZDn6E218vHf3iqnHvblXrFbUB22OIQ+We1eer+urDVhd4LvvF2ufXWs+UZH7pMnnvo2+WfDj5C Pv6N18kv7rhF7n/wRunT/MNnnpxVKdj6/m8zBx07U5/KddqGk0fCcXeddnodk3Gi8pEl8FMXRA9Z FZm1pnOJq4m47WOqG3yyj5P578TuHGRCFAWNGhZz0HbbPzIVFjWe4kZf3XJM1v8pup8y/KH1HxZw cFQfFE7SVKPGtQUf6HIJP3LESeeK3leg0JTLj9GmXg+x4SaIfA9EFVf9Wou+6L/01w7YKsbXjb55 pTfxMm14wXilnt9edPDJtnj7w++/ICed+Qa5b3xQr0ToX+ZM3CnvOusEWTL8VXnn045TOr/Wglwf HuuRlzz1DbZ4+/3vPievPPONskAG7euhCbX717NeonZfl3cccYzaqVe16dPXvCXXyB0PLJDlOLHK Krnx7ovkhlVDek/boO5GOncpQI8aTdZSb+ws1SeL7/u9vPQzz5fLF91psc7d+KlyyjNeqoEtkfd/ 9UT57NUXy0y9rwkjc/f9t8qr7rpevvKGH8nTd3++nPj4r8qHLvu5bLHJoXLy019sNu/76gnyxWt+ K9NwL5Ta3HX/zXLS3dfLV9XmiD1eKCfu+VX56O/O16s0d8mmWx1uwTzwwI1y8Z3n67PuZmm/+3S8 SqwcZz8w6Ik1jT/WCN6lMO+5j/V5NTctb2W2QcYWP/m0wFUQcXU9Yma0LNkPlGHX0hYygIuCwkQO jQX91GY3+Ye5HZXp8urD36SLt175xXnvl9ee/UFZ1jdTx7NH5+02edOZf9RF+P/Kq/Y7WBdiuoDD puM8JjPlNWq3udqd88v3ymu/e5qsVDv8lerdi2+VN3/lj7oQ/4G8ct8D1c7706eXBW+///dy93K9 j0y7Onv1UvnTXb/S58Ph3kfkn8aehsAtQv6ZIPH0jMhHv/ka+cjF39GFk97XpkY7b3Oc/OOhR8rI ijvlrV8+Xr5z+012nyYG447F/6WLvJvl22/+gey976vk2N9+Tb58/R9lt+1fIP94yDNkePkd8pb/ fJ6cfcfNth9gRu9Y9GW5+t6b5Wy12Xe/18izLvqKfOvWG+SSJbfKPstebcMwf+HVctGdv5cNBvz+ 0anln1FU3tA7+G7Ol5hfzFMD61vTcTLiiWMe8gZ9yCkjZrISEVb9x/uzPH5wkBe9Yl7TrkkGG/bf 65bILbbUTaWsjkWJERyMqYmvaucI9gutJj35os5l6ehtNGUfbsU187aOu8fT3fvk58LqnPgYVWWt Y8XYgeaLshiXz79zRvlU6hzDwt/KB0l1/NGD1r57v1zH+az3tR5b5K7rOrUjL31FPPpT7wn7EHF1 /3UbYpts6aGdf99bybAOS0/zdqGuQ0frlgpnTywm7KXRp5MqTqyUG0TvT5s963Fy9ONxcrxfPnPu Z+WesUGZ1TdgT7yfpjfwz9IHnH3h3E/KNYuWqzG49DCgdrNm7SlH7aknx5HF8ulzPyfzJ6bJzF49 CepCpl//CGJGz5h8/txPyLWLV7odeqhx9Pb065U2/+MCTFufYqfrU/Khw31GuCKD15jW7aX3n+He OY8dJL794PyPyx8W3ivrD66nukF58m7Hy07rTZMr/nS2fOOaS2S2Lqr6NZY+9TWtf5YMr7hG/vv8 /7FD3lFPOl42Ut4Ddj1edpw9KH+85tvyzWsu1SuHboP78GYMzJbVy2Fzph3Cj9rreJnbM6qc0zRm T9LengH7gw/1YvFhkYaTqJ1I24y/XyTFRHS74ftavJp3jG5ZpoZDxmPhVl28dcWhY2BfP7bpf8w/ 0Zv7N9noADlyj8fJ8LJb5ZO//C9Z3jdb86Hf808fHdI39qB88meflHmr9ECDv2zQoRvTq8abznmy PHOPx8rwgzer3X/r4m22zNA8Qv4N6EKuZ3SpnP6z02X+arWzD0Yavdpq9mn+DfghS++z6e8Z1DlE /uEeuVH9YNKaf/g1kZh/d930Mznz8h/oV7zr6Ve502R8bLoc/rgXyEZKc+FlX5Ef3fZnWW9AY1d+ 5N+sgVmyePHFcuavv6OxzJDnPuEY6dcLioepzQY6xOdf9j/y49tvTDb6MUb7MEtzcfGii9TmbO23 2jzuGTJL97tB28dwINSM0Lina9vu29O+dZd/CsTcrOMNGYPXw7HR98Pl/6HrM/Z5vtbeC85m/Lf2 bH+fDFiM8fX3OQIPTa/1MMgTHHfnyRzxU1kbnB30caAjL+o88PFQgQMp9FHn+OrSbxJfymBbxwMr fDIWP4C7X8gZF05WaKp3ihInnzjvcZk3/Ss/3Ji9lWy14Xqy+K6fyp/0RujpuqCiPSh69AS3aumV ct5NV8mecw9S3h6z2wx2G8yWRXddoHY36Ulxhi7s9FZQjFuyW7nE7R678ZPtQzBO7DkuQ6WDPoZH FetN30Y21WfNMXSH9MiIXlW7d8U9ohf9FKd9n1iuf5RwjT7PS69+YMGg47LjZrsa/PJrL5QlE/2y gcptS/2fpn9gcOUdl8p9ehFnqzk7ygbT15ftk81larNUOdbHuLmVneOm6VXIK27/rczTb2232ngn 2XDabFmwXBsMEP3R2NEn3jPF/hPCkyXH3+QWW0aoR8wrPSOAmC+xzvkHpr510tnAqQF86styG1dA sSGXsEDERl+KZzhp/FwPMRWUVEvc++YLiSRP9ux/tB/RvwTdeu72Oud9ctuV58lNSxfItJ5Zao/x 9Gj7e6bLwoUXy69uv0NeuPvmFuK4Xr3dapPtZZPpvXLLdb+Um5cstEVbJf/0uYULF1wsv779Lnn+ rnPtnjwPBWNQNvySBh5xgyvsc/Sr102mTatc14Bm9dAiuWXovmx01W1/kAeG9VcdpvlitVefdbjj Fo9R/ZhcfP2v9A8VdFFobnSswK+aafpB6PKbLpZVEyfJNpvsLOtN20B22HwXs/mt2UwzG44PYp2u yXXpTXobwMQrZMfNd7W/SF02pCapC8BgbWm7BBq6TZ5/iAlI7De4Dl9yr/PMTpZfdX29DZ/c4KmT njgvMYLN34AwXztxNflqklV9eqtbXDtb2K/tRo6mPjbJ6A8fvmjLcaIulk0cTbJo81DUm8a6SRZ9 xzjZxyiL2Mnqzb587y0j6Swc106+XIe9rFzRxLEWtu6LLIWTfPH87vu1Y7p5r9u6r/aW9NkeUdUw /qq0pZXWAX6s6eTDdW0uFXCIpjoILeGogIMPHZOlCbeOZHkA1iB2HMzrZukAH6PDM9pmT8cVApFb HlgkS1bpfQr6V+NcjBTshMy7/wFr4nlp0K+ndjPV7qYHFsrSIV1C4a5t3aq24zLvAbezeBAThg5Q xqcxwAaPj3jV00+Xdxz61KxSlG13Xf99ecF/vkzuVRt7VMiqxXLH6tV2oldjm5k568827LwFN+py RB2oPG44ASx9cLn2cVQ2m72xTNPF2Jz1/I8b7pt/o16Z0UTSBSjXfbDt0zlYugw2Y7LJrDn6UFhd pE7oFcUKtTbMV1P/QwQpnoQKiqZqp4Rvwq9rGfq0hpy6gsPjMFrsa/MB9nH9698NZg7adb47Fy3U x7OoUFc+FahOyJheGZv3wBJVbmG8uHq84Yxkt3iRPvpG9870IMGcf4oZnRhxu55NPB7kHnZj9k1L 86Vvem1LTj72K/KKJ+2W1YrUTOqRqy47Q477ytvz18J3LZun97D1yGwY62tA/6Bi4/U0/8ZXyIIF t9qV32onsFzplcVLH9RbB0Rmzp6rfyA0Xf96e5Ye25fJ/AW36RhoYLX8w8rsfrVZof2bvf5m+mgf 3eG0T3lT9/b8QuvEFPLP8N43vK/xlo9RYOCgrjFbW0Nf1CJOxroOfOXY1wFX28iTIvtCu40/61rq X5qfyWjXib6TX8ZtYbeJG7p1jVsnHVs3JPxA1ZGtqf8VWUfr7pTkW1e5sS75yIWerGF8uoDjzt3d eHSHj5yo44VEjnL6w5kBW1OiN+EdXX0nf5RCFu3r/NQFOaq1gWQzjrVdPUpr0T49AfZCgLOjUZJX RbrI6v3W0goAAEAASURBVE2PyDAeheFXEbD16lUqnETwE0X5YbymUR6V9erXYWzaE+P18kr9KhyG DGyLHrhTbr7rRl3jqUD/Y8Nfz95w97X6rC58HZWCVTl+oNwwWoIPYWPr1+domcICNZG/aR9w9kb/ cd3BYk42A/1qAwLcpJdkFpHVFas2+a94kz8jhR60dV9ZaRVvJV5cLcGvM6TgtUTP+Uoga5vZJG/E 12Hgw1bX0w90aZwafUUcxzzK6rzg882mCOramLAZ88/iS/SWfxov8shDKn2wa0X5ERmqBwY+dLO0 BDkduNjekRf5+Wyqt8UdcDb+CQgelY3rY0ruW3yb5h+eyg4+18P3NffepM8eRJ67LJsDBl4VmEwn t18DsvklmG40/3AysFxCB9VO16/a12SDuIJfDEKPLobx9aitOWFoEDglKW0oSHIrqjKjVznyD76b N445y4iLsignE/VsN5XAwJYlME12hZ9oIFu3JltyF45mH2Rr4qCOJTnZRtkki/p29bq/GGe0qeOo i3hioow4lJQTF3WsQwccEoP7OnWx7MSxNjj6jxxNdeJYNmGijH2PMtQ79aPOHTk62UUfdRza/ECO OvWRO9rX65gXbMTT3qWd321nDxByBJHFA84mXcTFOrFNsdRldW7qyQFePM01D0yToyhjnURs18rI n1UU1m3Rrsuy0SS6Nji6MnWdu94GCAZpJ8R+mPdFx/ql3ATTAvFCs2zViKzUD/Wbzd5U1tfFz1Kl wYNp44TqLd6y/cabwSiLH9QfqKTderoAWoGTQrh8hWgm9O/+dth4UzPDm6UiFHFDnCob1DPLj3/9 Tjn3Ik92whDJ8OhKGdWv0sozutwGNPj6CwvM++wKjX7VudluMn7NH7V7erXCNu//mF7h23rjubLF bO3jXXfLSv0r23lLlxoCNmN/ulLHDIsax0OBr5i3VZvNZ/XJkjvvkaFVD3ofeQLUIK2aFrNG1vLm fJXxxzhZB6HDqNjIaMleswQZdag3bRELPTjdZ+GLMlVn38CjQTza2IhPOlPrW5hfx8V3xIlFkk5o l/mHhfTSFfoAZbXccv1N9evTHlmpPnztw37pFS79WnWHuXi8jRKrGJm7VL/K1gtTareZ3m/Zo3/o oI2w6ZJK78WcrXb6eBubJP8SzuxJnfD4Gn6aXoM78/9eJ2f93MebEMQyNLZS/4jV/yDGTFSGbiIc xILfZrX869lGtth0FxnVXLFL2Qb2scV9nNtvurnd83anflBZuWqF3LdE8693G9kSNnfdm2wcj46O 6SNwtlOb9TUtb9Yre6Mj+v2/3h6APtiG+UDuYXHXdnNdzD//y27ImVsgRJs8LCNplKUAOuZDtI11 8tRLYNgx6kpEseZsBdPcbuZzrL7TVRbUK+AnqO4L2CZZnSO1ebyojHHAIslsLKM/358CKlQjjmLK mtqcZ+pCaWbsC8ukr1MGs0rV+kfwZL4qltqo+ayrczviYj0DGiqMiSrYdbKlPtqx3sGOELpBWZFx LjtwRNtcZzx1vgxoW8FNB37Eqx0YGVjOScQ2lbjQMXYuzTWbMZqKjI3Qn8zhsjZZEw3I3q2M+G5L BMlAu7Uhrikm6qZWgsnDcE49pdq/wkJfuF+tT+bfP0/ufmClzNl2f3nC1jvpM+HwPRY2x42NrZYN 5zxJDn/MY12s73qruNrdJ/csXSVzt3uyPGGrHWVVtnPYuD7yYc7Ge8thj9ldBTouaXjAalcrrO1y XqwYHx/SX2nQJ+Pra1V64VcbxvQEZROMXISdbmajdYtSb2q/Ue9Vg/opjz9KtlDwiOFw2vJ/+Gvb g3c/Rubouu76u6+S+fqXiDfffqnb7HmUbK5EbmP0+jahMSjfHs+1m9Ovv+tKWbByyL4Ky7mvlZJ4 cJiCMwofP/onK064bg9LvqJdRnaoOHcHQE3F2NbEj1Ih4Iop/aOsbXmO2vQ/5RUI8QcHdy+8Wxbq 6mu7XZ8mu+pieVj/uMQ3tx8dWSFbbvEUOWjbrTRxlFzjwF/8mt2QLooe8zTZZc7GusiinVuPaf5s rXYHbrul2ulSD0nH2LjwYL+sb/pHDJrrLfk3tkKnDAdD3Spj4H7sfXi53KC5hPk8QvNvPf3KF66Q nTb/utpbPTpDjtjzGLvb8Oo7rpIlKx7UnL3MbfZ8tszWHHYbM9Q3va1gfKby6R88aOv3+niRZcN6 RU5j8PwBJF7NRnAxwDbjn/NP4Xmz3uWW84CrLg+QXHU/uTlZxRab7Xi75QKu3td6/ycLZF3qGXe7 fk3mq25Xb09mv7Z6HIeQfXW/aNdfa+trTe27zcdO/PW+1NvMqSiv80Ud63XMI63Nfj/Ucbcfr3Ie rcTQtFNTRjKUlFWMUwP6dlvkaIeBfDIc/aNs2up6tiOWPlSmav6IOm4oxwtXDPDCwgcv/NQW/opy 1YPXyI+v/LVesNpI/vW4D8oeM2bLstUr9H6kVbJSy6GezeX1R58qO2+gf9wAYtvPB2Tlg1fLT674 jV5o2EjeddwHZHf944MH9arCatr1bimnPOe9+qsJyQ4+9eQRv7bF+gU/O4Qn4Y/i+ySNCfcK4YWr BHj16VdXev93vuJR6XHqD36y6PLrfyB/uO8B2emxR8sbDjhWelcv159J0p9M0p8dWr5quey27Qvl DU/XR6HowvLbl5wlo4ODavO/csX8JbLLns+RUw54ruifncpKtUEflqnN7tu9WF6Px6foFZhvX/It Wak3COJbVp9PFetgLB/ShwWP6EN5U4wc33bjb+b2hoHECxvnDlcf+eLizgDpDThsIMALbeJYEqOq rIsy2rKMOnLANuohx0ZZLF2T36HSrV3/OT7IP/yBzP2Lfis/+9M1Mm32dvL+Y98rW+iV2GWr8XNR mn/6yxwyfTd523PfJRvhF33SIqxH71dbvOAS+dk118p0/V3a9x97qi7A1S7nH+z2kLcf+05/6DLs 8N/C1v5y2PWvWlfrQ6zx02hjmn+Wb53yL/XNhkHXhJbL2o/pmhQXXPltuXP5sOy370vkNXseoldr NZe0D5ZLer/m/nu8Rk56yhGafvPk25d/XwanDcj5anPX8hHZf7+XyqvVZnW20Z9o00frmM3Bh8no yvvke1eeI+N6FTBeBcVfzVqO6x911PfvduNvXWD/fab0Pc67CdMbO4ymDZ6WyBfg+bUQ5SrqZouU hqd9LFuJdJht2rAg9ljqGMSFF/Ssx35B1mmjDXHg4RbrTTLG1IQDnnGQmyWuIetmzxaCrOBwBdn7 AUDcIo7yKCNHLImLJWzwwoa4ga9vsV+xb7RlCVvkQxNHnZNt8rGkvF7SB+TAsh1L2kDGDfU4BowN HHwByzpKbPU2OVw7+Tvjish23BGDeoyfOsbDdnelM1V29MTP/rCMfIy9XtYxsOX+D10d796LFX1F Oc9zLtP7zWe9rxh0qtFZJ0zURadRjnonHfWTYeqc9TbjjWUdw/aEDM7RX2PYHl8rVlMRX1fhn53L NCcwpIi/R+/9ueW+m+SgJx4te2y/tzxDf+S7T+83mzNzc3n89ofIvz7vE/Ky/faXeQvm6yNHZsvF v/0vuWT+PH2cwYTcfN/NcvATjpbdt99H/mH3p0i/LtDmzNpC7Q41uxP22TfZrScXXfJluXThfL3q gifQz5bnH/pK2WnTTfTnkubrX8LuJP2rFsoi/MajHqnzFQaNEH+9iMvB6I3+6YQ875BXyfazRuXM C78iC1fq75BqT7DsG1p9n9y8uFeO3Pvp8pR9nqOPB9lYfU3Xn1l6jMpeJh99+Ydluw2my8/Pea98 /Dc/1nv6psvwKtj0uc3eaqN/qNDbO1O/Nt1FZS+Xj7zsNNlOF6D/9/N3y+m/+anaDOiDhMdk120O lWP3PljHclRPtCK7bDhH7r3/bj3k+sJTA00nmzIHHH/0ZHy4R1bcoP0aRRL7vGJuJt+6xThn4WM7 ltR2w0lsp9IPNDN31K88N+wu/9BnXOG9dcGd8g97HyO77/hkOXznvXVh1CubzN5K9t7lSHn/Sz4l z979MTJv4SLNv0E558IvyNXLVuiHktVy24K75B90rnff8UCz0xWObDp7a9nnMW535G47q91itRuQ n1/wBfnTMs0XXUH29W0qJxxxkv0V9V3z58v2m+wiIw/eLUt0btvl36h+nfl4jefIxz1JfvenH8n5 N12tj6fRy7nYl/SK4HJ9ePTdq+bIkU86RA7f5xjZXB8dMti/nmw/dzc57sDXyb+d8C6ZO21Mvvm9 N8uXrrjUfk91mT48+p7VbnPEPs+VzfSxKdMG9K+j5+4uxx/0OvnwS98lG08bka9/903yP1dfJrhX c2xkXPZ/7HF6ZXsPWb16me0TW0/rk3uXLtTQu80/kRXX6bzreNkxoGPuMWc498wXllFOLEvqYlm3 i7qmeuJKZlXmaqtYJ3ARaK1JFgGT6SN2beuMm4u0um+0/UswHh/WziP9RZboM9aBIb5eYh+vYyNn rEfbKGederabyiZfTTLattM1+YIM/WnaiG/ia5JFjk76Trzg6GRLH5GDderWpCRHN74j/5rYRR+x rj3v7dmk3WxEr1qvGrqykynw7fRNXDV3Lc12XC3AJGjyETmwwEEbt16PyaxdxmSjw7A4qPLhEVrY sIDDxjbqQ3pvzU7bPEVOO/GzemLYDaK8TehT6s/84QflygcfIx9/xUny76cfLKdfd7X+7NSADMNu u6fKaSd8Vn8j0h/jQcPxoSVq9wG5evke8rGXv0I+8okD5T+u/5NerRjQ57xNyOufd5a859nPJlw+ 8rH95WPXXqOPStCTom58HILdUA6BXmLAzw597T2/kkM2WilP/+DT5frFC/VHvPlJYEJW6ANbD37i 6+QjL3iz7L6FfnUWtuGVi+Tsn39UPvSzM/QxI9P0p4x8XmHzlL3+UW3eJLttXrNZsVC+8/OPyGn/ 92lZovcB4uGyI/pLENttfZSc/bazZBv9TVZsd1z1TXn2f5wo9+uzyPK4xilSTJar21F9pN6CH+gi ZzVib3cSdQLS+PR5zCWHqUUU3BzpLeqjjLgmHWXE1EvyRBzyDycivMZk46eNy/Qdp55/e+12jHzo pR+XfbbZruJ09fJ58tmz3yPL1jtK3n3s4fKW9z5RvnnvAv8prZGV8qTdj5PTXvox2XvrbSt2q5bf J5/99qmyYoPnyLuOfaq86dQnyrfuW6SPydFF48RMef9JP5HXHrSP2+gi8s3v3V2+di/0/tGmnn+r 9ae0XvyMT8onX3SSfO6s18ipvzhLnzXoD302Es3PFeMD8pwD/1nee+zr9J7ROZV4li+9W8780any 8Qu+LkP6XDf9KVbdF8f13r1BOeagf5ZTYTNno6rNkrvkK/qLDp+48BtqM9NyCD8P96THnSxnnXK6 PkDa4Zedc6q88Junyag+uzAf3uIUKayafxMy/7v6Qco+QPhHi4rjSqM+52iDnCXBxLGNshaEqYir 6yiP9qGe3OFY14qMkqbYwJMIAmW1WueglvJ6vNA36Zpk5GJJDPYZz7fqWPk+lW4cSUb0T1uIKUuQ tkWTDWUcLxrX25Sj7KSjnnjy1+VRDwzGoN3mZzZoq2NRx3McwMd6xDCWqJsMG+1Rpy25op46yKiP MmKpQ7uTvknXxEFZJzwx1ZIW3V04IDpy1Mcv9g24djbUEe84XcBt2mDRIMoxkCALahXaEsc2YHUZ 2pRFGtqwbLKNsmjLerSljKX79TTHD8b6Am7jQ3VxkJ4+T2R+Dle8vKVKjxo3Yg/rozU2kr12OESe vPNe+pyqAbn//rvkvOvOlev0OW+zZ20pm+mjEpYsvVeW4WeN1BJfa+CEMm36xrLX9ocmu365f/Gd 8ku1u36+Pller8httt56+giPe+VB/aoR/vCXe329G8vR+71AdtObtJfcf7v89Pff0UeDrNATmx/Q Sq9LDZdtN9lgCz3JTsh9S+fpg1fTVxDspI4A+rHB7C1l3x0P0x+131UXeL2yaPEdcqH+KP3NC2/V H5yfpj4sCuuDjpT9kPoGesVnvx0Okydut6teWemVhYtukwtvUBstYWMLPgtFfajb3bY9VH9Y/Kky MDEkV1x7jpx/+x/0mxA85NFHtBx6PDiOv17ylHEs4H6ohy5bwPkfTrhd7Kvb8fAG1oKJB/1WG7fE u8dS2qzBJurIEWXExpL6alRlATcqcw4fl1m6gMMjQuLG/ttjL4LCGXt0DlbL7JlbyD47Ha5z91hd oPXo1dtb5Nzrfi636M+szdlga9l45gxZvOQeWal/XML4h81uS7Pbb8c99ANAj9ynefeL684xu43M brrcv+TeZKf5p5enp03bWo4/4AWy7Ybry4L5f5Yf/+F7Ml+/ivTciIef0o+Zmucb61XoB3Vhv0S/ 5i3zwQ7pfWt6L+imG24v++38NHncVtvbQu3eeX+WC248X+64/x7p7dcHQXMYbQ40/5LN/jupzdbb m/6eeTeozQVyZ7LpxwpMQ0FejYz1yf67HiWH7raX4APWxVf8UC6bf5N+iu0i/9R+fIUu4L6nv1dr C7hiw16U3iNQBlvGoeiLRXOtyZayukWTPPqMeMrb2TTJYU871ImJMsjjBkwnXNSRp2nfjLjIj3rE U0cutmMZY+J+WNe3s2ccEd+EbcLRphMeum5t2e+mPtBXLImHj6YYIhZ1xhFjinZRT1vI8GJMbEMf ZWjHbTLeiK3XGQfkrNNXHUsMcdRH/51k1MXe8IxVdO3Ht+6XNk3+qUNJu/a4KSzgSBYdNNXpjHi2 Y0DRjrgoow3LaNski7asRxxlLOETn9aASQu4ncdkzqE6BfkKHOMiT/s2/oJwRJ/2PoobwhWOE0K/ PntqQO8xm9CvWkd14dWfTxLOBzZcSfBfT8APzusXiYoZMDs9SaiNPYYEdrZwUgPdwDekiy08vqFH v4Ia0BObnzzbxwc7/DoDPOMGeOdr7RdiGLVfc/BB6NGn4ePxIgMaQ2syeQLjfqJR7Tv4sVlM+EUK tfWwox+cRIf0apzy64KzX3GD+kLk9YVb3d+EnojH8WP2P9Jxe8Qu4DgWNlLaZxxw8NIF3GHjMnNH HQcfRpV1ns+o91/fwDyU/BvQhzUj57rJv1FdmOGf/xoD7PB1vUr0sjMegxMPVRPqY7XmH2JHfgzm hVX7eMGFx9fgWYS4FcB2En33rdihH55/OgiK6005gnhif6MdnnVnNmng8IslyCv03TeOuWfZsN47 avupcg/oz3kN6uN6HEFcMquNv+ffuMz//rpewJX+03NrX6EhrqC81iSv94U2lLezaZLDlnao1zFR Bz02YIhrpwcOOuqbFhqdOCIeXNjI5a3qe1NMEQ99bMOa/qOOsqbFAnVVz60t+iEebdZb0dW42O8m /022xNMnMKw3+Yw61iNvkw30kDMm1ImLMuDiFvmJj7KIrdeJh5z1aBvrxBBHrjoG8iYZ8apN52Lc k9y6RSF9QcZ6q0WrJHJ0mju31MsYTeSURTI3yB1AUw/KvhEfO9iNzkhaOJIgD1bVR/HVeRDZebLF ErEhsRhj0um9aDkH67poXqvjMvWg/lQUTmZlPJVbT4DQ4ctNPv+NX2RgwWJ2+AUHC7X0CzGghROq hWHj7HrYTNf70LIf6Kwb7At52Faobnpas9KoKio2cEec/sOJz+KhXM24DxpDeQOiagNd8p/jcjyj H9D76wbs297Er2PkNcbt+Prc2Fy3xNF+jls1fuXT2NUhveH+p/qWr3bpzpqixAVA3WBFidYad2Yy R1baNOkSDn1bw/zjHAwil0rPus6/QRuCEJvlHxZbiAnxIX7XI0tm6IOZ2bZjgHWv3ke2gcQ+oPYq svwzLupZglkfC60fGLSSfKLUrWXeXYx363u+HQCS1A/e8wCRbox+UP+gwfvrfvEsOt+SXWp5n3PD 5x/zM8WNOVIZQ1yCt42+0aCMpSMmfw8czFcVkSW6KgvxrA303A8CX9YSnwVa6SQDRxNPtEcdHM6T 4wyycnxv9TWRlAVDvliizjhaOcpVPOJwjCi4wk0OZcvCgoM1Nn/MjNfLe7GljD4ylfa5VQZfblHl JR/ni6woqSuywlFkrLnOneRjXpoPYHhsLDpa1kuOBcuop4xlGcNqv4qe1p3HhKg4TpSBS18o/IDj bapZqh4jZvtFGjr6BKSp3yVmGHC8a3OBHKrxIZSWWAos+DIk0Hn+vSMmCm+O87N6EP9dV21OOCll IH1M6nK2OWLEN8u5TCmTQTztWdK+rq/L2aYd8c3yvwn/9a6x638LJfpmL3aS88nO1eVsU098s/xv Yv6tq537mY+cHJZ0Qlon/a8PbfbxaOXREXgkjQD3IZaPpNgfjTWOAH8dvXrc47zan2knePq4UD41 QK5AYrVVPb4lRdAX2yhM/LHgxwaWYFYTrJTLgdjdRzMD0aY4q0K0hUcxNG7oQNZVe1M6SrlzMB4y VrWNXpKQSGLIwLKdnvK/Q//4NGV/AYhPPOi/tu0TM8dMyzw8rHB8S2lfIZsaeNpST85CZRrCwj5R Uiz4Io50KOkj6rIJhPpC214EZQAYdKvLvf1o/vk4NY+Oj1zze7vxrTPRWuVmgmMQr2URS0wqG6/i BAzNYgi0yVcMFJ9lwbZeJZfKC10QEh9FBJKfGCsjMClSv11NYxo14HOuKobwCGuQ2bFd5Q5LgGxD A/ikkCXjCGVFVWk4iPtjMMFX9tiA5j6VXRke844txmKCzm+NY0yOFFsMMdbJbDK8qV1j7AnYpMsq 5ixJ62Vy3NZ/JqoblimJ/skTZcmyXMUKVMTnQVfa2jAFdPHZRghTp0zEmb8YlG/DiC061Pi00p4c SNBbbHXSdCXOnKfgU/9NVINX1iHUJbPgqVYl0MX9xEcxZaVbrZLCWltUFUWu0Tr6oJI6tlEWXKrp TgAvuGescj9YNMp1WjcxJ5BBlNEgAacC+0kjhfHbEvxoN7bWPEx2SV/3yt3djIM9fuYHGy/V2s8U aZv7OXPlUf82TPrYizT+2DdSnRkSZs7B9l6fiaCqVIHjq6LQTGtlLhLyMwrYFm2pFU5aUMd2tLSu 6duj+efj9leX/5Z/nOrmvGnKiDjXzAjmAdrUU8Y2dFmGg0POfWiqG3FVaWuLOPpguxVZl8ACr+4t yNDkq1nWKp26N3rtHCk9FTS65t7icb74hwVeRVKx7dDozqJwt8NT3hR7J10Mjbgoq9ebMFHWrX/a NOHrPtEmPupo26RrkkVbTBcw5IBuUpsKARpu7XZV66blMBeEVU+MoOmsUnygBgTRaHezhXvgqgE2 G4O+CVfclhpxRdJs2+ypKkXXtHO2yumOz5d8YGEcVcaWFmixtuKBMpu5P34fXr8dBw8T8C0bWBNP ocemf/hpW8tCLRHRiiyP+ueA+bhxJ7IHrHKw8pgTM9VSR5sDnjkjB5SNighqqJfdut3u2mBkIlu4 weWj+edDlIffJ+ph3/9wP6ue3XNY7SayrZwJFwExz5r0ETtZnfZrGiHt4acNh0HwwRfH4sniWZd6 OGsT07p0s864ODgxZsqm4qTJJsoif7e8sJ+qXfTZ5If6Oi/ltKnrKa+XtCMebdbr2DVpO3+VNfLX /Tf4iDsAj9kZRvssWMMKeWJsoCqR659gOais/QBuMFAcFlATPfwzObWDbQvU+XApwU5ipk8+eHkp dIenvHg5MVPyckTAM14XOW/yaHFPJBu7/KlEcZzNxgYbB2JYVZdj9qPxaTxyxxI573Xmc67q/S5X DNyAz2HLdmnFMJ4mm8+Xwq89YKO8ZWXxqH8bH7z50GFAcDnEB8YW6nnOgEpb+KrTJUgGzyzMPfMu zzPtEq/lWc4/oPGXmTkzHZ2SayL4KrxlP/Fcgy39a1XD95xPEwytJkvZD5KvpM55xISuhfJo/vmU 5P0pjXUetzSv3M+muv+BzhYuyIP0skm0+eGnMTT0FebGb3qHwHPIomQeWT76BCO/uPniX7OGOFXw 6xxiPJcRFCT6MdLyIh11QKk56WFUj3GIwvMRdkA4qvW4qnIer60kjs+/S7YmLrGDNW7JKruBjsfo Kk7jxNDZvpz4kjG+wsr7UNjXjCuS5HqKLbe1Yrw+1k3+MzTgsmyySoqJfeW3RHa8oLDCwTg8TmvV +hXhJYcwjG7retQb+mrS6hhmvmyudqGvGBNXqV1jzM7QOnYlrz1vk6fEQSrn9nfKcg7n4JACiJs4 IlmqKo2TI9yQMVl3AheqZb8BR+JJQCuyyCvFv/YmrnXIy3nivgFWDcaO+4nLoMkHcwGI1vMHDHz/ 9HMI9s2w5UbsrTLpvk6utfojBgZHsuD64a9WOp8bHpcOgA94GTAMkf10VoLmw17NtJwQql2snzg4 E7xCxwVdboeDM5goJ+uj/tNIcPwxQaxzkB6qUv3gfGhTVN130olycseWXwnmYVcl9a7A16P5V8b1 ry7/Lf/K8aJEWmp+PETi4H99hgtundZwLIM/JFA+qfjizQ70djKsxpKP2xZIVdcUm+8CeNcXdgzd OvWP/IarHecg457gnv09y2zHA6p5I3fTOYe6aNkpzojr5D/ydsWnXQIO/8gbfTXV6aOpX034LMP8 5wYq1fkkr2kwF1BXDaD6i26MySOtxruuAuGodGRPSsTTigODPxw/fTVnobXimiNmH5u1606qjxBr nU3ucz4ISZ8ODpVPignYwoFeWmLVBqZlVVo60sJhql67MpWvekHWEG9h0VqYFJdbMAWCyVKR0SBG XVHr43HVTnc3vT+NOxATgIalnRykvQA7qW8+TmU0vUY97Uu7MKNGFtaILygyE1nl515JFNvFXxXf iqMn5/9r82/9YdctVPQAvSs9gbg5j0xjeNTi1h4PrvQpVg2YF9GW9WaOElerXnXcd2zmdfmuzzGD iH7+2sa/xMNJ8P4xv5hvodc2PNTTvrTz6CUc24+M/EM/Oa/5qik7r2XuL4dLJbnv+RgGAwdw3jkK HE9r4zhVy3PHuUNeAbA4EjdjczsGVthRc2nK8RxTxLTaVeNUdrNLcaScjhjGEWX07FZVHxZvVeQj ZNw4Vusej/FI8UZe1l1F9kSW8Ohdnq/QVd6T3Og/9cvhiTfyBR5U8zxj1hripCzyldhrnQdfziG3 wHuVg3IAkWdNHIHEqozNsRgTG4MEA389Jmunczg9ur/AnRSMjxxAtESV4oAJ8RFFWew/ZcmNFy0x GaHpqvgUQZg7gBBjOda3RAky44pvcYwtZ6JS6+x31X8V5HbOXR/BTnaRpeEKHCcWsLRzxxEMnamN Q+CN01VCK4MUoA1Vdh6q2MkGaE2EwagPdr0NkxJTBY9+ZpVXcrPmKceY6evIertGwCbHNvNkhVXa sfxd+m/ZUXXQ2g0Qh7FStgyyaiFrR1Lw7XO94iA0im0R1mXFr/1ty6P5V4YqzUkZoaDS6sOS/5p/ ZQZDLSz0q1GyVbCUlJK61p5WTxLFwmu0i0cwlYGmqOqNGkkF2KWOcdKWZc28Y3OKNuZyKjadsTwP 5RzSWOPM1kOvnkxbuevHhsjb7fGl/TFIGcyB+61yM9IUUwqkNUJyOJ6nHI8tcOg4wxd8NPmZPA5y NZf1zHEUo2XZahv9tmohgS1e9EAZSm6T8RMXyya+JKuonDvmQdP4RWavx5icMI6/97vVChLqagu4 SFg3pK4SeQJFWTu7urx9m8FhEKxDOjFlB2McsG/1GwexeKBNK75g9EsbfG/D70gtIaCt2dAB94Ks pg8yUkF5/lIoAShPuLw4qduxTbNk9/fmH922IeQ9EhD42PCAzHYaqYaCY96gMhH14C387dCOgTbO UeSoWxad5Xie80TxaP6FsSxjVRnFh2v/s3TAG168MssYKxFqo+QDj2UQ8cpMHV1tR07yRFkVXW0R R7uqtjlf65jYjnysu57TUEGbsFy5ibo1q0ef7foUmSO+Czni5XE0H++j3WQ+4a8Dxsajgz66qtQ7 8Tb1kbLufOWcDD4p48IDbdZ5HnZ48mUh1v0xDiC9Xnjr57/gvKUaeaikL+rYVk82zsBBRz3aBYNW 2YhppyeSOLYjvq4DpshySDSFNoxpEKeq23o6YrWDdvTXagFJWcDhZNLkFaiKnKRw4E5bHAW8Dy5x 7SaRenLDqXfYyuzHW3j3jXbteIEChjiW+IThDOVdD8r4OZ58Uq0Dkm2rYaHoqlZiaIa30z/q3+cG 4+Ave7dc49hAVZ+3OMoJF0XcSUL+Y4rLQaEdn8fgVMQ0yegs6iCjDeqqQ9NewGGLerST/NH8w2Cs xdZufEnZTq9ymxLo8eIHCdrVyzR/zCvNSzLXkWjnfCPeQDyuwbLkA0+s2cawiEpxtj8AW/CmrvDW dMm+WsCnnsTxbm8effEJYXVJas/3Uv8FA0a/LaUqg7ybjT7bYyu8lT6msavIwANO77+xh3NVqxfH 1eW2oMH8w1Yh/rNyHiuxHlfw1dEPqJI944XrhmOZf1gFFv0zEID6wtYcr+u6e89xKDzWi7X7sne6 zUp+sMmCXPG4GZ/j/PlqlCUo+58tUYmY6LTIK3NCKlWXPgBLfDNHMksFMBHn5pym8iEO8Lifok0/ qHNM3H+JB7qylYsQRVblifJSLwu4IvuL1nx1D5e1wXoIo+Bg4Z433wn1XrvV6hAnxzz2jCcLUkSU M8C6vts2edrh2+kp/zvzr92eGNLXWL3/HIdHYom+4CTYI2OrEL/mQk4H9jMLUgcpT81ikAR1fLs2 eaaqp93fl38cuMcxR/xzX3b/YSirJ8OHIYApucSCbkoGjyyw9s2vlqCT9X3pr6EruJJWfX7qX0NU f4kY1m4/wVz+9SdumwUcA08JaZ/6U73lfg9gucqcbFpacWXn5ioWHPTPsuwaRRJlkTch7KYiYvyr WDD7gpE7mvq0ao8MLe6X0RX6g94zVIZQeKUjB0gbRlBrZzy8YGMc3mr9NEX7pK/v/Jmvjb+Mp5/E R/jfmH9cC1g1X3/QHr9znvuOec8dTgPpueA/FA8t9HUMoJBhzJLePu16DnKBn3WAY8Oc5HxwUfv3 mJN1FGOi/wkZmq8/kr6L+zf0o/Pvg5bHO+V3nstaO48XxzrNeYaxQv0k7cyXeDRXVt7dr3dY4O/F Mbe4io/50naOkdxNJeccusLZgsx5qJh4NQLhmhkq9dgTi8VBbpYhpwwGeafcTFykRGlU4EGFvF5n C7Cyb8T4gk0e06Sv9C/YtIxn4DBHtbfMS1zgqkGbmn5OqPQkwZrHqRIeXNk5EfbuN123TByMhbEl MQrEXSFTGcMwOW2DjVUhJx8NoAjx5jFJHGYS9MYTc6Oms9jq/suRF131YytCYSz0hTLV83qBGDhG PWAgYuyxOxkXbQ3s5sYdeGzfQRt49ifFYWaUJQ7D0WEaC+Qktvq8UEY6mhm4/gZlHRBlIea6aaWd 4uVcQsersmnfabOAq7B4ox5PA2TNRCDmqLRnyAfJCrTSqBpzArTz2TYjqnZIxLFVfbLshj7Z6Ak6 kRpSHjNCWXIc8kRT4eT8mRAcFGzL+Oy8WmnDk0GkZ5n5UoUTmgz+Fv339E3I8MJeWXYj/qwb/eYg 5FHyCue8IiaeA1hRTq3RyD81igoafMhPPdgMLRqQFbeOyXo761dOmoI5WlZYsutt8qb7+U9EmZeV SoQlEKrXmf/kp00/chT0y3Kd+e+y/xpIjz6Ne9U9vbLi9gGbK48N9hqU7X8MKkfdUGnCNMnYUaWI +ZbrQd/gZc1FjKVb/qniY38afOT+TaUHiEG5si1jmgpHJyz5GC/bsEmy7DvwNMlMTfsOtoGmc5Vc EUVZHBOe/6iLeNaho559pa5N2baPgaqN6boVI272sYmZ/WH/mjA1Wce+TYGnRutNj7dRFYVYnKaL UCW/AWB/HKwLuLTKs6DbkJuOq9dIwM6wjBEQF3WURRzrEQdZrQ3TmihfKWFHSRVKx8DQffvclLZD /bPEitsGZWJEZP1dRqV/tn7CVhgfh1lWdIm8XVfSws0fvqj2PEGFmKxKHONi5xIvv6lZU/+5v+R9 hPqXYZEV8/pl6Q36zOmRPu0N8hAvnbO8o8XcTPPMvK73u227llxTwsE//IKDPEwQtkFIGercoPf4 l14zXb/KH5GZ22n+TV+7/KOv/CmZ7limfYYRZVwS/NXnX+4HK6nkB6f6flWD8eDYqf9Ym43q1/ar 7uqXB/XDw8SYPm4I85vyric9fsjGOuciHaV5NzlzgCW9ElsvgSMWOtZhxzrLbrhgRnzkQ30ye2Am 2yJ3OywwxCWfbWMiRzexkZM2KCGLxwTqGAN53dbDIA91tGlXEk892k22dRzxKN3Gb6JowkUZuNGO MnA0bRHDcYgyxkkZS3ClehRlF0XoNbyTK4MSR8G6pt6GdDIZRqYZVc1n9hGcjIclfbAEhnViogz1 ThtsYUefqJOvk13Q2eKMvlnWOPJxLNhZNeHSvtPT27sdGRIyNmM9BozLjSCCDJiac5VUb+yjPl2m NH3TW/RHG+Ka/DCmJl5yAQMutIlzbqRHZefRQZuQUentwwJuTPqm0TdK8tXjiphQx9G/ZfHWxEEZ bfVq4Ahi0MUKu0eVldE/baOsAu6i0Ymjk05kTL/PHBsZk4FpuDKBDe+wmWo8bfyMigyvxP2J+vWi nix9kaGDwuTNfjhQ4CGXVjtuxE0lVtgwnyI58go6cDGWmGv0QZnb5nsw0bQdNuXfgI6p5l+vPUey mziJARF9oV7fIo66iKcesgkZG9V9oD8tWghvLGEXeRpBSTgVLExiTFVe2730D49GhnS8BjQHOfST xkJO8DXF7TGO64e5keV9Ml774ID8cyvaRj7GSB1KvJzTtTEPiCOH5gD5KSJlhYPCyEtZLElCP9Bx oKBjLFFP+2Lrx0nIiSu6wkcu6iIedrQlDvr6FnH8NRNgaAtu1uu2bDdxQMZ+N/FSB36P3/qMY03j yZQxNPliHCiJK3Fn3gSzr3ANVzCRgfG4LPJBEtusV62LHfXoP+t1LOTUNc2Tj03hjPaddOQFhi/6 IQfkdRl0kZdY4ppsIp442jWXPFXHXz8psZCPXGjjuMit0zjRhliUrblWZOBq8hftlTPRtvkKNTol WSKAir01UcRGJ1Os244CG/gzJ6mEDNtU/dTxaFPmPnAYxs7km+rwf0IXC3qj/PBSPoUZWmCIc7Rz kY8ylMRhIuABPohrmuhoi/qY7LTDbrJgwSJZtmKpcVQRrZPvPtxfSQRaxdhpCxTiwu9DMF7E6HHy TgfXQQ95sXXmcdlwww1l9113lt9e/ruEAY7+nKs6Tuw/dNRT5qz+Tl8YOceybF28Rbup1Om/kw3H BpgO+Jy7HTDmpsqHK4hZYqsP7e+EX2kceiCOS0Z1Cnad67bYbFOZP3+xZkk84TW5QXz1vpc55D7h eUos8KivXd/6+vpl/333kt//7ioZHsNfIoGXvrW6xvzeH1zxZS2sEEFcNvtEzf2viKs1Z6nGAxle az8OVV9dtsw1/TfZQOeb10q7zHeUEb2uSnLHHFFZ20VVk19ysASG9cjbZEsZ8WxPVjbhKWvjMx9D JuOmnnzt2pQ3lJavbeJogFdF9Lum9lW27lr0CXQnv9ABi1cnnKprW/FQagXSJCvadVtr8lWTIVdS //p6ejZ8X2sA6DxeOBACHAnCwOAqk90DohDbAg5y/OBghmvdHANTe1nyUsaDr5bGn+DuQN+bYqJt BgUcliF+MvSv3xLWTpg4pUQ+1WksPT26ulY9tH4Apxyyfn351SBnAsa/2nMsMH7Qd27yOA7xO542 9IEV/ajsvPOucsGF35U777pX/vSn6xQ76Piefh1OvxpS/IADsjpn9Mm6Y8jhJ6O6ncci5qeuw6x5 H7xfo3LEEYfK977/3/LTn5wvCxYuVK3fI+RjxH6Bh68+7QM+M0CH915r23g39SHNQz5xWv44F6x9 Y76gpTLDOLtjYp3JCBnnnQsltCmDnhuxUQ8duWr1vE+QC3r4AN7nyuarV/X6QchHAhhsKrP4sXAt Y+ao2K7PO3VAsu4Yb1PO3FWM+sHtBSUXfW4gm5AROejAJ8tPf/ZNOf+CS3URt0BxmFtysqSvwJsx 1JUS/XcOzLvWW/KM+k4l+TAvE7LtttvIeeedLffNXyhXXXWF8k/TFzDg8PH0ftKOuvY+PE7F5fzT ebNY4dPHsppbae4wxwZhzkCOOjbmi3O4HDLmH3MDGsiJYx512yYOJTbY41XfqHe8f1Sq+bJchB05 Ine9PwqzYz7w7Evkg5wbbSMvZfQBLGXgY7yQ4UVbraYNR3pD2bGdUpSRE23ykoPc0GHzuIsUNZcV LpVhfOylc4i+t/gpXEWH/OPmvJ6nal8UDkDbZIwTJfzgRVkGqQwb44AeG9rc6CDaEIcyymFDW8iJ izLiaYuSL+pSaeMETsp5c5C3bQzajXG2ARYU9KftWK/YN8Xh5tW5pIxxxTL4qcQAedwwJnjRJ1q+ RxVfwJMPH4iBhy9yoY5N5SZObSvwxpfiMZZ2EU2PRfkrVAMmgnzJmOSQc0sHHONLRrhhBqRwjriw 4YfA6YgyBIFEz22HOi4KUQeWBzdtZnVTTInHQAQSh3ZNpnHZ1Q/0M/cVHMChH6ilg4HVcaUKP/YL XeCFrfXbbWCXN96XV9MDyWgMm+9FGpeZM6fLz392lozrw4SPfu7LZNmyVcknkO4dcXW10X8Ea7KD pTNHkx/1WesrOAYH+uW8X3xb5uvVwhe84NUqweIM8bkXusYPCldZdV4zXxhPGuSS4wpO9ptcCWTj S10aXTYzDyvMJ+DI3SQDPvqMeHJBHzmSU4sH5rFfDIgytdQF3MQ4fUdOeI5y+FB75mnLyYm2KIGD rdpkXJMt4sELG/vmMzQ+MSpz524kF//mh/LHK66Vl7/yjTIyPKYo72vn3AGn44y6zVvhAqDEQcuO Pqx/buN76Ih89CPvk+c979my997PkCVLl+ouWU74Zb+FK9jpKx/04b+6MRpIESdiqstaLRi5jr1V 9c0OsLCkLtbBQFaWzI0495TRY+AgLfiZG4ShpJ705o8NKAlwI4w558UleFdM0/HaAIwzcOkfe1i/ 7AbKKr+Z5LcG25zzgS/LOA6J3/oCGbCUZfIkVx32xcaxSeNgBTjiBiFlTXEGrMHwlq5QJ9qA0Cpj j9IGXp7rIgfDSCdrZ4CtgpjDxFtfk87ihzGUCWDHpUSYbaiGIOnoUyXZ1vybQN8aYqeqU2m8+tY0 H+3sYJN9M2j1b32lUSVgCq3s0QtIE/nB/BXVOm7wK2nONWJN8fI4bE28Id76GFIOK5/Dcn83qGAT +pn7jzNr3giKZVaGStLDpwWlbUsOQKDjpnXTs40SwSX7KG5bJzaWbcFJQWxowqfFmIP2k2dMJtPD Nm7kwqIhfaLP8evQ6eT4Jwcc+rzuB8HkzzgxxM7DTxmOTdyYYJvkcXnvqW+T3XffRV79mrfJsgeX qxVPRCUOcnkZ/cMzcVqSN5ZRX6mX2MGAg45zeewWt/Kwj9D3amzDw0Pyznd9TJ797MPl8MMP031T /+JANdUXxs3j8lMEWuyze4NHYrzmfiH3ze3LuFFMe9cT3b5swjXJAgNdBFG96mnOftf5tJ33j2JZ 3TWIqTvjOCR9zlHgml4YV80ZyyfqIdO5q8sq8+Rzgpjwu8NnfOpDatMjr3/De3SOR9VTPQ/J7SXz wubV4gpxN8YJO25VLnWsCr48Dyu5of3r0au4WKR5n/rk9NO/JNOmDcopp7xabfXGSeubc3hMHo/h bXFXja/Cr7Zol1yrahl1KeFHN8wN56c6ua63PkVcEpscHDDCy+N2LmLqZcCZirYRpzwQt2zkV4XF 2wIIguSnEZd4AtpONPmES0Wb2DgeOcgGPo4FqawEjvNHBW1ZUr62Zbd8dRzbKJs26qOOMpbQab1l DpPe5FrPOUcg9DBl2xomMr487irKkGSTUC24AlRE8p+xD2HFcglB5kDdP5ra7yhtiULDLKd3Imv9 rDVbOLoSgLshHyv7jDqqt+M80I/FQywafBHQWvoVuAq5gkrPWy26kYCvkcNGvsrQFqswxG9jrxXU seUrDMkHMdYHBRveoZV3w6WVr53MwFVBTNJQAuNoY5THkDFwla2T2xgb+Bw7rk+oPfbYo+VbZ31W Xvzik+X7//tj6e2drvHVfalNr6/Q/WAJbvRDcY0+0CX4QamfsQ1mBpW+w0t5Krbq80FY68hNforJ fQSfbko4rn+2+/WvfUZ22WVHeeqhx8nwkJ7wMb4tsbtJ63sYJ1OqTwux3vdoCYzqCclx1WQ5hm44 yR+wdhBUTvDzzzJzjMEXTbsua/FX7JTXrmSoEFfxtOlvVtE6JmSqW+hTB1Pk4etPfo38+7+/Uxfk L5JLL7tcF3T6lzxq3nE+6+OPdh77Dg4nU/EkZF1HEGHj3GiuIu7/9/9Okn/78Nv1Ktyz5Lbb79D9 J42T5TL6rwsxhMVcNiolJm3O+eCDn5SNS/larphG7BTqTePDKzAICLE0YZAMiNfGFhVrQJCcJxnF SdpYGL9qKmPciExu2pBCzEHknFegiA0vCA2shZbAwreVaCedotbJRh8kM/rkg3FS16kEDzZ0IY8z 6g2b9UePZ/iQYPgGDEWgtT5Xgf7NEEDgwf5f1dM8j2EWaIWc9u2X2oHfckl1Db58OoBJPmDPOUIV G3Xe6u6dPEarb2hH/xxTsk3iw8YE2ElwpPNSndp8mPOiMt8YG4jwhvgUY/EVWMca42c8djtM5KxZ IwQMAvE1dW7WebMiVCxWxKwyLfDR3OI3CBy0cwJDC4RkaMO2IqSyTel4szG+NrZZ16BPuma3HpN1 CINKc4K74M02bXpQxMFXETbXdFgtGPpnXJo0+Mpq5512kS98/sPyqU/9ty7efiJ9unhjyEaoDR8z EMGYBKbt8k05iLR42ECZBBafNnMJnVplQ7R1Y3BW9sgHP/Ap2W23neSElxyv6aPPXZjKZr7gg6+p GE8R2+SDskylY4F9APK8rU1syTZz1SsYe7zoA37Dy6pBx3gTZEr7X7Zt5cMiaP/99rPF29vf8W+6 eLtUF2+DHizC67TxuDEZru6/zkk95eRlG2Udo13Bh52vffW7csftd8t73vMmBfFDQTS0g52ah75D zZijvF63+VBgXd6xrXDcAwxMNxu5Wna2ZGz6tChtx2cYdYl/qV6JuW6XQ0OcqkwxeE5lZd2q2sb4 cZ6SfSKrcJLbysyQfHB/g33sP/k6lXU8uLsMPYfRrgK/iC0nSQBaqPpmMQd5vcrYuwzKbh8gN7g6 8ZObJULFosUWfvVAQjvxhzNCUcb5LNJSo6/Yn7osDxkqaWOfFKs33tsLok5b3lcVBBsbC+5Tga/C QRzmDPXGLXE16hqEDb5s7MwX8KGfDeZZxNhYxjE0UJc8hVCnum97XUagQ7hC045A9VChIy3BQli3 Az7JzAZ22FKDXOgId5BcVxhXwwYn2Aiqb7BVO8AMpXWU2bdW+1SJD922Y5hShfDVFLNKW+Um1DcL JujZhkiJjRPY5CT7SqKsp28f7xkzBuVnP/2aXTF45rNOkJUrV9sN3mDKXC2+XZtjsjFMvFog8W0u LQYIiFcBZAlaxkEF1gfgMphGXlb6GFTqa1x/B+pDH3innHDicbLvvs+WRYsXKwu+ylMc/QUTq0Ju f+SCCrbg13Qqsn6ZMrwRl4gV4yccd+U+i84N1cb/c3ZAnsYpUUdfea4aYssdoi6EltxmiKlSvCjg w8xSPFq0zlPkTbZulBxRlpqA47we40+q3Gm0I23Wu3xcv3acu/HG8ptff0+uvPI6eelL/0kVOn/2 yVIXQ2rLiwE5t8ABzhhObkNIh6wHIMeX92lmaMBkeziKGzE0Qgi9+kibIXn2s54u3/3uF/Xq4Qvl t5f+Tvr6fAHqxzXaKVc21YqJgy67yiCVtOp9HAAuOKBKCzpudWl7JC3cJ246SJz5mEiupEETVdty hYJqWchUrg1SoaJNXDmvnAMMTxDwCadgw0HPDXNKKMqsSw3LzyS0AlwZVGyNLxFFTvppLBVvbpTP YiRv4sk27eQKMF8N+NRn08ert0aV+FCYac0ezdhHG2cFV2CVRoo08aKV40o440wwHWQsbMZsbFXG WG3wE97siW+SQZfkBkN8AWfqoGd/IMJi0bYUrzWTTEXYR3BoGiMM2FjXph1XMK6hy9YnkxlJiQd4 5azkKDgjaWU/IWlwavGrHH2EWPuQ9+U8fomSfYWLvJmR29TiNkgeO20Ft7mDDKnClxqIPYxp6Wsk AiZxqy/7SNcLI8NA0/CCjWJsFWx6mOEFLLa6jYpwcsYr68wVwMWMnc0Y4hEMg4asafOBR0xARhQ6 XrZQRzU32WBfaEF5vazr2UaZSJkc2san7z49AWJ5iRvWuZXQkIij8p53v0Ue+9hd9b63f5GVK1bY 4o2enTdxGwE1LMmKkqPgd+/YnoHxj+ZoIBbsNRqIj1MCWKFvJcBInuayKmKrp2dAPnXGf2nsPfLG U07SfukDtIwf/QZxw8v8BHn0CzOb/qBPHJhvh6ou9QN+8Sr9gU5f1n8vMRfAlA310GYTGL5y3MVK SVOj1jfEYmMLe0CgT1jl67NYtW3cDrH0NzvawA7GfKGNjW2UYTMuHag2Y+VItTF9sAtV3DSLKD95 +nulX5/5dsobT/XrV+DGpqXnL1C1OMw/+sR+UQ8zXNwPNuQzUr75uNi81fV1e4tSY0lRVGPRA1nv oPz8nAvkF7/4jXzoQ/+iz1HUB+9WxoU+UUKhrxS/x5n0OY4Qe1LViwxVRRqtOiS1GTVL4FGHD76o YwlT1lGmmJMs5zpUmQv1DpuNB/RmlIBZaB6ix6p/mCHqZGudj2iX+1wmahSWAyjxwpjTnwpQ5Uur ZYu8RdpUs3MSfCAevowU6MiDOre6vN5Oc5L5YEcMOWJJ7nS8t3gQU8SgnjjAa/3GW5JV8iDYKQRj 6kuhxGlj2kIOYMIGX5Xxpa+6re+HOEb5OV4/vumxzHMsxNJYrXMRhPNbWbyB1+eKAbEseIwF9kVb J2OMwsaW3QIB08oGbXqlqfM2QUFvbhOBkWqcuGBPfyht/pKttm38TU4e17lJLRhCjMMcJCLFmS7K oEoG2ae2aVvxmXDG5hzwbEssDFgtDIPxzdJHSe2LCSNVjfHBmZMRa22V2UGxEkhGtNhUEiXQVQcu 2FtVB179ICYmXevKPH6ZYgErOjgAD8Wor+GGbrZuSmxjpXFSmYEat14xOOaYZ8lb3vJq+aeT3yk3 3vhnPengfiPYYUf1gwFNG8vEb7OImbTZrPdZLYHDxjIvnF3s7/CZcBSjnRYl+SSXFykF29vbLwsX zZcPnnaG3vj+Sr0fblf7atj6XWBk1WRLI4JSfdj8U2YxtBoZJseX9LwnKcuLC68lnHLj74jxSRXQ Cjw3gC34HGOgNK3B9M3/08JQpjcJxrLQgWtMYzWR+jMcy2AZXNWCDBrEy5eJU/I5eQEy6VjCJm7G ganQ+8de9zI5/vgj5RWvfKssXLhApzw8A1E/FYICLzJ4qe8VzqRNsWFfzFdpINN2y6byfEyh0uzZ CKVSYD+3RbiWlWOGwtAeGxuT973vdDnggCfK8cceqfsY/qimYUOoKVzE5b9pmnCIM8WAhSt4676A zMcadstsSJq42hTGl3x4UiiQ9rGEn8gR6E0OLDsSdNEk17M+V7LKKyrPfde6cdcgaKq8+kGoimmZ ZgSa44TvNv4Vk48xoISNxZPqaAOTGDgn+Ps/+xMb6LFZmepsU2eAzm8+N+Cx/85He9Dah8I2HNAT a5AQRzIxCOp1bFYkIDHMANV719L+nihs/wkmIK7kjI0/3irSigUa4BnX8eb+iNJM4TSft4DssLEP aoNq85Y0xDaAOO1QGcxiSPshBDYEiafFvkacbDMMau+YdksbpodWhWiVEHpZAABAAElEQVQycjsH Q2zf3TWOnl00MKPEAxowxPEiv0EyuyFb3hhrmip7SoGtZpMgGCBP7fjU178DjmCmwjsUGJ98WRbA ZJhpEt4zSpU24ooKJch5kIM960aFQMNm+tSOdeyY2JhMqNvOquUofSUZdIZLsZEHJQY6cgDbbqPP qIdtr/JibOwJLrx0mvpBm4qPEJ+Niw5ejy50kA44sey0w3Zy0UXf1z9c+JG8+a3vtSsIPtCIGC/0 FSOuJ39roQoS1+E9z0fSZ1nAQYW4Of5W18WEfxoqn5AShRewT5vNI/BYuOkWxxjt6HNgsF8u0q/h brjhZnnZy09Rv4PqB6iUT6nuEn9HdmH84nyinzFmQ9b6bX6xgNO4+lP/bJ4SeRkzSNWLYnjos8cX 21AqSx4bFaDb2sbTuDE++HtGbAy7sl9ArhhuZcRUEsdPm/GEh2jwd7l+WNBxAQHw5KIt29DHjfoo szBKLKaKOHJFmYKQh/vtt49ccP635N3v+bh88pOf1eGcUZgzpVZgqzxtc51W9MU2S/OtPMZpA01N 2xJQjDlOLNiQg7b/1foBndFqOTY2LJ/+1GnytKcdJPvtf7SsWKGP4tGYjAGxqS0O3EYReWLcSY7c d2CKQ/k9EnhMGzkSd2UeAyfjs/2QctqCijLyxpK4iIEstDlWMEOO5ThpC0XC56fNa5s4qCp/4KGC FplS2HFAOeP5AdS2wRcIEQyM49YQB8YW+WT7APHAwbf+8+UErtwoiIEmTvYRuKjMMPqzMOqxaD9U ZH2g38TrfsCiL3ylpbliEDSJQUl+1BMHvBgm6qDHphjuO3W/ZkebGA9kmZQ0yF2PBMco7Bu4kGEu 9I06R6d39MF0FWluQAcu2HJeuc9k98EnMSSwc4k2OCeQ574mEHi4L1v06s9j8r4kmO/jYzjfQOtb 5K2MOwGp/6YDL8ZE/2EhRfbcD9hYX6BJPpI9WjhWN/XPxhm2aTNsqvNc0yQjHiXPU8RHXaWu8dn4 I068LEzkYdlfiddfypnzPvzFFoNHCSD61BsGwAyMTBMRB7a02cSjnpzSHgORBw9kcdM27OzEBhxi DBOWdcmGPGjChh1ByeSBjjh4I7eV2qYMbb7QSYs36bWwjdHGxPExKX3CGNAfR4NtJ0mxqQ+24Q2r 6hnTp8m3vvVZefDBZfLqV79VRkb06kzGAe02xpvkvqpnZE5pSOgxgLr5eMAqjq+qdcGZ+VWL2NE3 W9yrOVjJbHXltHHVEmxqrWPmvDyZ+qT5+CkEzmV0ZLXceec8+cAH3iq//vXv5fY771BfeORDGrc4 QCrDAMIP9IgnbjFekwOfNtRIhZOsjVOSQQeunEOIm3mbfIEbOcB1uMJ108cP68+XoX+MiT5c62PE gyVkhtOSOPi2ESmhZi4fKX9HfITY1FlD3xCQnTB8TBTWumEc+Apa7D9xzCxf9OsqyBCn2aQ8gdm4 fm8wd+7G8sMffFkuueQP8rZ/+ZBC/CHLmVbt+u0YAHuVJntwgpL7kfWfPhQGqDV9NDKdVWCr/3JM SQs8ZWZPuZYcX/hjPamtAB5yP2lMyLXX3ihvfNOrZGh4WC6+5FIZ0K9X7fYStfc5g4VucJpeeZxc U97RZ2DgIJkVZaiBOxwXfYzcH+JGu8QOv1Xb2KQGscI2b7U6NOZHy4ijhekRk8VOqbOBG2L6wJw4 LMWsOowZhHFsDONifdctxJSP4UFGftjlDfokQNx+6Pf44KtsXvf928eQusgHFDAm0/kyDvAYF3rm G0sI4DdyJIizJFv2246TdY5iUMYg5Qr7XPGhnN4PjGu1LzkucEKHItXrQTLHeAzHuZv9qPDAHlvy ha9HbXGXYoxY1KGzYzDGzyakIKymPODK42zk/sbcYxyQ5r4mHDjshXg5TsCBU1+0tby045afoyhP NLng3NCeHP1pPMADf/RlhvCrm38wQ8X3Wfqw+GqxgNcWb8kW4w4ZsNz+P2PvAXj3dMb/P9nfDIkI IQSJUbFXVLX2DjVji8SepbV3jSq1Ka1Ro2orglCqqFV71d4UJcSKRGR8v8n//Xo/59x7Q3//3+98 v/d+znnOs5/njM+490JP2zLVB9/K0zgFAZ1b17lWHpWX7S+82IR26cyslvlSbay4HDt10xU4GLPr BIHC7R4HXmHAAfSX8Lq/8YZR6mukpshn6fcxKTXR6m4WxWrxJkBtzoLay9cz1P5WAzv75vRsrrA8 cEgQeMO16m1Hq92UlE51EAWfWXSoyQWf2lfPGAQyXsLhJPnFB8ipMsCzX4oORrNgcS9+ASfpi1XQ d0zTMzpHx7777Bw/W31kvPHGm7p1qitViVyutlUN2UxIH/XVbcpMxcbPLApWd/LokRSKhWddSS1O mCnqho3+Dqzkx0aSgcrtI9Ojs0r1Sd0YWXNcULzKs5DIqnjQNGInHjNntsfYW/4U/eeaMzbYcKdo bycJM3EtU7pa0mw+avKAXy0dxQhMqTbTxxU0DEQn+n6Qm+JN/hUX/EBe6p69XWQPpeYSrVZ7aOOf WmpkyANflZUc9EwuvGcNHsYxadJzE7WzcDvSe5bD4mD9IQMNm71ZRo/kVXMuWRGzhKMTHmCgN+sp KyOU/Z35OhL9z9TvhlKSfmZcecU5sfrqq8RPf7qVf0mjm54bq+M1EfUudrZZ9tBXfUOH7RFKRxmn SAbX40LHtB8/YCPzCP2pX74DT9+T52QxvFrH8/fHnNBdoLdeOmIVvH1lUzrO0Bg77ND944jD940V Vtw4xo/XL0noJ7dm91v1Q+qLXbW/zhO1bYFlc+06/hd+zQvy2vkmWDtzp0odz1bMEL2JrhFL4aI/ bRe16S8t82/6OlH8XvCR0vQTvkjKqpOvaAuHhTsfIme0iD/0OK/EwTXLphco6wDQZqlXrA0RPTIa ss0TdSEqhGLUHK859m0rEtxXdFI+QlbtRDePzaboRg3OPokUAV90DiNsdlUw55eh0kJjqOZZh75S I3VL2VDiZ+KV80DOInmCSjxsLVjWC1r08rjQ0Qq7t2af6A23ae75v71Ve2suGF88bKP0onisuSad dGSj5vFUYK2HBp/Co/Uks4GHjkhASClUqy70OhcFrL7rpHmDfO4ilTIHpKP0mG1ciFC/4WKOdV5z g8C65HN1DR0NwyJcWXEISa1LhnWQD8pYavpcRLaj0Ep2Z9YWYHo17WZspk51P4Ld2GpchEOjtt5d 6Mv5DT/TLbtF4/gLA7rkmPg55+QYhhd40Lfyc9wKbcNnwgO/7o/SE/i8zoOpI+NLmFkqb9G51KPg rTo5UYxQiH1lTvX/U0Fp94Kjl5UERrsUaq1tg0t/1aPiNo508DLb5GdZla/6MBzedSKBtjqPOoW+ pksFqHzdm2/Wr6VNFaek3oVjlVvw2OWn7EwKO1GLLUlgW3Vs1OFFmwGohWXzzUfE4YftE7/4xa+1 eeO5N/1UlpmJJ3jiDC0vColT67QZTFUG7f9bQdNWfuCnvjkJw6u2LR+5FQYyPvt/LDUWJ550nr6P a1k9V7WJJtv8WhFkOGnFm4GBD3l9X7f/R1FGg7bKbKXDjvReQl0XrJb/5RN4YWkTq+grGDLsoxZf WK7gTDKVDhHVHvsVQCvHgmhoqyDhgG9cHSuPStuwUSi50ckeKFpvNaj5g5K0EkweabJjoeLW6V57 7axfz9g0dtv9UP2Sxnhdfcxf0bBs4XGE1hsRCWK8AWstjPfGhKgOzKNd4emjpEjKSg9ms1TbW59F Q17Fsh4tfqn+cZwbOom36va7nuH702XXxxdffh0HH7yXdMqNa4OuioYnOagXtBTLxYa6eAhmOgae 4C4Fl5zgxaKWdEz66btE/N/vyIOOUvHxM/VqE9rAk9f/KpWevrrQpB8Tu/JlJJjnbEzSVmRSw79N X8+G6EYdLzabN1cSjz7+4JX+IG+aPNIvkDQ1ZpNUPN1EpCa6Vlmpe6I4l6QlsCo/Y53yXJdetlsK 2Ga1USUXzxalVE29cm5t1Rc5YFZsTii8eQPWYjf96WPZVZCrz//XsfITWaNYVtEZ3uSFN6QFo9oA Xh1n1XMNJqo0dBYedW7VoUNTR2p6aY36X3rAC77Qgke9GmU+5Cv83O/O2XhbT+H8/xXo0y9NLMeF MVXHVbPLtWo/x+/71DTFGHin7snAYBJar+SRx8reY61lDFY4x+oHrnxBS+Ed+f/bebm5zxwz+mxo NW7mhR2SW/cPVlAk1XPIqfIrHRzrRrb6QIqlXerTCdpcJ9bNLzZ7chFCZUpf1tOJ1QowcBr9nOW5 boazB5oFg1TibJ30YaddBz1GcYWIUgcRuGwc4UcyOwCmzTrK4yz6fSlUfbUAaxTV3cYo4cy0IUzW qR98M29EU3QEL52DfLRM273oqQ4r9AOO1sxD9AFwH0EXnOIzFY76Q4/2jvZYZOiQGHvrpXHVX8bG Wedcop+i6ml6gmUf6+hAF4acxcIvYaqoYEdurCUTfMGadhvburW6wgompwavGlNHRcgpo0Cx3TDs r30W71hTkxZ+x76GzoLwAPzH4z+JgfPME3vvuWNcfe3tMXXqdPk9fQM+SdOwiSAUZeHpfgSA5382 HkWW8HK7lNcbEo79JjAtZ4PVHxmv0md70j6fYand7E99GnmV0q1XYV38TishHmjSq2GHehhg6bfM UeeIsz7pZimexBob0ZFFzebDU23GkatWuamdx4FgCcn4U8d+rq44hqaBc+pnPdyDu1MmVwr5uo3h w1eO66+7IE448dy4/vqx0a1rT1+1gCd6MFbNx2rprcSr8rZdiWxpxsYeWjrOkh3YR65iH/Epmaxu YRU72VbZD4gttEKlwb/7aMKzWahnu0LhXbMRXGRMmTolJnz6pa52HxZ3jLvfv+eatyOg5g8dYZ06 YhPQzK8iTXoSk8THy2qrC51tHzTI0x/zGi7x7SfBiHOdhMGphXnBLXAEhA8619tq9JknMPGgv/XM vvYxZ0Ff50hRQWmYdYFebdtYeHIym/oKoGJ9hcNftqrPUycjtbyBV72R8ngXTDY5HZKhdKpXvejP MZfaoBE6yffFD5BUH1gPVFGhLpc2qJsbwDxBYKxhT+Zmyk/xjAnkiIdxqg7ITbuIIVXw8WNqRYOi FYmkFQJ6umptcmzCDZtyzkEKMUqomdIvuiz05ytlQJt2AaWkzogTjQzmihJ91rXQgufnurAHhVSy 39XElz8tFcNUqu3VFq/RjhP6lbmqBS+vIuLT9Dl0yICb/VxwE4J8vJjroL0vRPhCk7q1ZApMzAl8 5jmauZnBx+iK4OSoutrNP5rNlscPcdGf7+xIz5xPLCSlCB9fpBjR0uZWpMco+lmcxwqauQgHioYs 2n7Rm30cPTcWXPoJh0+iVc+4J3+PbVESFee7+4u/VGfuIyfwUq7pHLEFej39rnrmPzFJXVpjbj8z hrp1WywzopgDA7SCgTchOpLkKNeuT3lZADapUK8JlRBD9QZLmaB+/mDhutrwYCnnDxwuu6IMLRfz bLSKDrhDTMxIrBIxDVPdvyJQ+iojqy1eTkdIdUbdoaZ30qKsl4S7yFm2uRKqr9pU+dqa8tuWXfiW fDG3U3G/ZeQZPn5SR+6YgQvPi6xkd9cD/uPuuFy/d9ozNtp4VHw7eaq+p0pJJTzz8Flp8uYb+NP/ SDbLxlkg9rCDB1qvWBAn42k2Z0Gnv9rgDr3hYRICjyhTKlgAfKuC7upl8nNNerXymC3WxTbT6Q2a 9Ks4qK+9vSMWWGDeePrp2/XlxH+O006/ILp31S9LtMqtxPgTflJcbLJuJUHn8n3mD3ZVGZW0Hptx YjiIGEbatDhK8FaxLYq1J6ZKONsR4bzSBlf0lv6AR1kc9YgAi7Q3j5Yj/erVGsgll5KDucg1pPUt JwIPSBudfU0f+8a3x0mlSq6teNRTL2lZ0DIfa9xy8iZjcmLgdvZcA/rFg/+8Md58493Yfsf9lavl OTfpAbcO4Xo8qpF8JFmJw1STtpFjObbLkuGYg1vzgIyqm2tOXPK2O7HJidf5LpzM32pZ0Z0YeCwI QTrgR/zLeEWe2/YZdLykG4lNy75PGL+cwRrDBzQ+/nh87LDzL6QTVxlVPJ3AnAzJ/M8frieWObUa Kr62o+atxaRcb7jEirzEMkodh6k/+QxuissR6qYl1jmv4mRPvptbydt69u0ewaAjrizIKTtzlP7/ NT5kkeOFKl5ohAd/XOb8UIUFjdh53qBXuJmL8oKRix3wKMusb3XDi7lGf46p/MkngbGVhY5/fMNf xsqM1Ukfmgmr5FLOOtC1rAfFf8xNZCfzATWKOaofOXUTUH2Jz5habaT6+UPHWnIk0wJe/Zn9vBP7 jFdqX2nxEWV2P8Oh0iaVfQdi1Z/6bEVat8aXuBa/ei6r2pa8Tv5VRuqHDvXqv9cDyQLD8ZD9HOlH I+elOhvqKE74D0ByTX8CIi4U+7CsI6Q/OYKvyTtomvNo0378Qx9jtN5WFaciA765vnSVUsQq50hZ R70oUkwWLtjC5wMNXP1W6dDYrLdJ8Ql/jWd01e8ruxJTxxY07R67OY5bdfYcpn5ba/+nDGgapfgi DciZAl0df/pUz5wocwhRlM/U4TEHny5l34CucottBQ4d9tfxMUvrMGPHewKipn5KjsNaB5yy8l38 u+hDDCA6aRFupeU6jlay9OFOQGaajFOJJi40KGlaK0hw6K9TXKWvjORsZYbxUQIB6VJaTbj1T4MT BSHGSDyyy81Kn+3kW+rqh411FBNIJLlMAGqo04kErOhuetsEfr7sWAcpg2DLRI4vmEgo8HESiQa/ ctXj18cfrNunG8TWW+8dH2lB6arnjSgeXFQcGCbAvGRfr7JZyyI7dZAM8Z/eoe9ak66WozYwtayD kwW9W17AKI6z4I2SKosVQwKPWKLe8XeTB/j2RzmyoCY2mM042nY596uJX4bW7jjiiH3j5r/eHV9+ 9bUHP3xai3UFQI4gz/XEcFgFAJb+cG92trx7cTc9QOxAV15McuhJHf564SfkKIZIq3hpBfRwyHfb BUJLG+72eYFxqBgwM+9C40/1qbMJAzNfyG6VaT5WhlrBashOWIsk8Sz+go0thsgWWV6F1jzHFqag Cy/4TSzxo6Excpv99CGaydGNW6dVFfnGz5Ro4m/3RjVlVL7pWIsRCZNrh/I+J0zk4RdKqiRpLKSC NWOX/gHHYw19hVz9QxpbVrKxWWyWaRoEPvXW2Kldeguv4hfRzWifEe+++2GcdPIh8cQTz8dbb7/b 3MRBls5JmSlBQJQAhKxUBB3N3B2JQT9y80qS6rRlgOcO9yQf4Ma0zlCknziCn3zdcp24Wi93a3So zcarMfYLPZxqHrKosYjbL1UeR73gRUwzNimn+tsbH/QQuPXqJCAK5DW1aGOR5zjYqg4fW6l2+qM5 70FqD2IPjBJgqM0u9AmvnTkb4FPD68YZTuLhcMHKiukoPPvA7cShmmuKBNi9JlCjFOOqA8VdFw8z Lm3B3IVM9PheIZ+ZQ+sVK7qxs1myhY7G+0F/zj8pW2rIGSz64OsfgFlRr2O8KFt8jR+0icIE4eTF EJHAw+RJDxPnZmkm2yqD3iZ/XzVOAED3OV/QSX9EBTZIKN1ug1ljQQc0+XKHOvOYNMlXkBIzVTCg MPy+r+tmq+phOjHEJmCehxvxSd71jhW4VS9RJL79wwyY60FmWuoLt1Q26TIWguE0yao0YNkP8EIH NUidOr4yLsnfcNsGVRY3VTUttsADoFHgDD/lnMUmnfvdY1VUS7zkIVj37osaUnQVAoRJDB0JZiN0 yAdTVRHME00LHri1zH5mjZIoBZ0wrLDcrw2LpWAp8FLqxG480dR2bpDS1aBWOHXOWqwnHOsWvpiA HOYBBkkrDXQUq5TVPOvg1K3KJUHQGzwdW52ZXyhYYMWEDFDBd7pHTG+fGj/XN8TfcsvFscfuR8Q1 198c3bvoqxrQTwQNvuLPZmPuQYNiobm6xouvfihTihFCtf2Q6BVzzBErLr1gfPTi2/HZ5Om60tC0 n4R1ESI0PiOAt170NGxQG/ne0lFXL++eNFSbJr07dWqLbt1EpYU4/at+NaEyiWcoawS5gOWlCrb0 6t0Wjz92a/zr0Wdjn/2P8mYh5UOTdD4TEh0TI7LNopxlNHQVtvEllD8KA7zGlLZxscc4QH5YLBGc xsIgHJOUOCbrVE14XPmBbyNGsGTUYjy4dQJyDhcYOBSfUiIRRPyHfZlbdDeKlVKrOdtbnpCTRUHE bk9y5XmuVFzElb4yRJwLFXWWw/SOqbH3XqP0Q/UnxIgRu8Y/H/qX4tGj8Kz5g2tmRj/d/l5iob7x 7xfeixk6g/QUxnjFF2ohkp+4H7LcEtFv8pfx8tufWn10bj07beohJdTX8BfYRS9OXOwbuIKm8Vdz bUb7NMvr3rX+pBdEKg2zKpMEz/YOjrrbxeP6ay+MIUMXjHXX3VGfTJ3RyJuaM56LzEpE+s+TqbTV C4l0NxiGaana4BJPpndVnbvYVeYbuj3nqGIEHRS7yq9VV0LPxA3P5AWNavlvnQSZvZQ8TF/lgmJi sEwOpyypB5FTga9zs3RyhYCxK+LMdxoprcahjoGMYRkr6CpbKY3+Ujd5U7xxbEzhWwA6MC9xxTPz JkmQLU/Y16qTN4zXVAktE+b+5ASK7aI523qS/qybAbrxRb0y5TbEpk9b0sYirBxKyEG3fM89TITo ImIvOdInt2yAcoMFr2TBO3le1yIuD1JaZab1ppW9OdarrdAKHTYGFcVsOLB6BZ6LBVyx0hgSa+d3 gxCAcCnlCmijDaw1J+pkXlSqeWA05wo83GrylC716jU9JJXlqwb9bOzpBt8+ow5SwmbTCd0rXrVV aMDSITRKsZ3gZ5s5hVJ1SAHFIOKjCyVseiufgt3kLX6e3j2GiW1yME/eCiuqdNqWYiTYNfLu9xsE SZRrgYiwjVibuWJYbQSNPFYsXYqeGYfqV+Zs0NTpF0xULKY6Tm0cQBdngdUZsE1mqlAvLzd4c3Jn C5rEFRd4oWSNphVLPHB4VRkJLe+iqWcpIm7imRftpixkNF4Gf789G2fLy42Stj7oAz1Hl8JY9YZe 9NPmVfBNL3gTO/u5AjB04SFxySWnxWV/uiGuvf42faUBm7fkgeLUqu0d+gTnWmP2j4tP3DO66wMP HQWPzVdl3q7vuZp7sWXjr/r6h3UXnS+/P80KFZ6FpvqELvTCIubBjAUA4evfsovuOWlwE6Mtttlh 21h1iX6+Ioi+hbsT3zxaBdA5m/G6aqBJZNLkSfpi1fNil9Fbxo9XWVGfDtQlOfRreXFJ3hsxWBSe NScF+kEhDrzqmVltm2cLdoXXo7uQW/W2Di0EtWp44tkfgtdjRalHNhvps2I8fmiUFjvlvcZZbqO/ VKo8aKkbtw7SikPXbMwLrvpb/V7Q85Dykduuq7U/XmmlOPus4+LEk85vbN6M1+oPATqUdz/eZLO4 5qIjoo/veue4ZNFyfJj8pOMsffjmqDPPjFP329Ifisgzx8SpcWxVh4mKTX2e+KCbeou9bIFQAzrf jtaR2yXL/nitGLX5qroNobwBgSI612i3zDPZ2fJON+jaZJ38m/NjySUXix133Fx8uXINHB1gBrcy dquPyxF68pOjZWI5bcXdtIJzBAYGeLQZWhx/4IfCFzRKmZ6dy7PF17aJifkkrvlRbfCgn7zKXJlN VvGV+YNPu8Ca9PBivtPRxkl/K44QlcKboz30fVlFtzo2rEelN9/UL5mZYVbRpxR0Jm9yLCOy9FnX pM84VYrEAQt4fTX85EnOqxMYIDUIG/ohk97qt4ohXIv1WwFiuH0DgXgVGl+xa9BlJfUsMn2QflYM HskEnHobG6qGKHjz+n6pMPnI+qK5WFW16lhpkMHfNJkXhrfwaMVLeT+UaZ2gqXY3iForpRM8Yk0R oZt6sy8S2nzPzrSTOvhl/WyVNZvY0m+8IqPJsNTEyzTwJP/0X95+gGqA+1E7x03qCl3TDuOVfurV Ho68Gjoik1cpFd4YR42+Jg6o5oGji8+sc+UFKi/6KwwiFS55pc+cwYZ15msNfCLlHStGZbLQyz7L GyccCUPvqllweW5MsCKgIcfC00j9yKq6OdOoQlUVDwZtUwY889UwWhDz9VFV+xUc6sgsRwDoZL3c W6qFJ3ApBo2T2k2IUTLxfUCfBHgyKbuclGUeEAqhvlRBQjNZSheyjITC+SBtW1tbXHzxb+Ojjz6J Y449Q72arHQ/v97Th82Mdl1Bk6/aeukH7PW8QHtH1zyDkpRZ2gBOV38v/V5qr7buWlz5almeQukc PbqpLZ2EJRw9l6WrFDxfB4/pOrvAnyy1M2ZMD75gt0cPzsralQSzJINJTreYZoifngtq66krbd27 xPQZM4wTcw+JMy74bWy63DyW2dHeLp6zjIeePOPmr/jwgJESjYkbtngnJ1Gee7vjjvv0hcXPxkkn HqKH5fl5IxzZUkryOP6tXbAh3o1CHEDQy9XWPsDA1UFfwaHul6noL5P7D0jhCxLEyaNJm3F17gkF FrZBifn9Wy/mYT7iJ308wXrXDP8iFF9R5dnDqkfJVdSudpjWuMmrqQ9EemGb+om//VT8mHX4YMtM 5Vd7zNW/f1x+xenxwAOPxTnnXK78yitvdTJoF85M2UNsEclXB3RVPtkV2kjx3GoP5TJ50qF84ja/ EiB6CId8pnDmD7itZw/lZhfnNbdXpYTyRR3a9PTs2U3mKZeU105B9dPXAS/leFvvHplv8kfHzC6x 2b4HxUn7j4hO+q1dTmJ4bKBT164aDz3kAd3mJX+lr32AKBecWIp8ws+Dvfra63HxRVfrh+4PioFz K6c5s8VfPsNl/DMnwUgKIVvKperFvw12OT9iuwUXUdyYqbFkbuus29LNE07h4iLhMh/m3JlzI8/f 0slILQjWAx6OP1DplXOjjtYR3VPPcokg22jsmEOUc3i9qi1I0lKhqN+vVIpO2S2Yx2YxirwF1X+u pn9og+8++BR82vCFJ371WNOR0oKTbd5zjmqsEy1rBTHOOYUrT7oyUdjCummjG2aXeoOEPmyuOaZe vOemBnvSR9mTpLal6J36F1roq94mSH8IqD9wRO/+6g/wBafDqCZKIQwq6wRdpaUKvorzrklf/Vvz EYYpSozFC87g5PiFDiZ6I35+WJ82tuaBVhZkk3MaMSXXQWrooR6z8rgoJEWO5RV708/CNP/qF/CV t419hMaOZOR6X3Ch9wtUiFVoU7ePaFYcHdGxFuNJf3xW+FqBioJf7H9spN7iH3hA70TKPYn5VN7u LzhCc77YB0WXmsuwMJqRxBMfk+PEh1fRjyGqeuYdFCgJL/U7d1I/62S91Iff9PKeiRgat8DtaNU5 IrJULY65SGQmmF0ocy7O0n8ZzEmNg3jBpZTCcDZY4WkMBwIZlaYYYBxhGAys8K14FR0UBY5JrZm0 wieYomEScOJCVwdF4YGP/RUJ6ACs4Ni22i4qiJt4tQhVm8I0btvLscr12bnkuV35I18vNltHHbWf rjwtp69sOComTpqshU3PvQmPqxmUGVoYl1lzk7jtzmvjuWdvj/vHnh+bLDdQty/ZaHVE74GD4vjz z4qnnh4Xzz19U5x11NYxR3f1iT4HBlw6YvUtRsad914fzz13R9x3xzmx3krzamHUIjmrLXY98MB4 5PGx8exTt8Tl5x4Uvz372Nhx7cW1WZsey687Im658+p4Rh82ePyhv8QhI1cXv166arZnzNunS4z8 1dGx0xqLRI+5543f/OFMfyjh2SdujN8dtnn06qZNXI2fj/hNSVwGIl7jn80eXyuy1lqrxs83XV8L O18r0uLjRgzAL3C7W2/FTzWm8PYAF4dGKfS54JV+0VUJHAXVux54VT7zyjygQ/D6qjFGZpVrFEWf BV12gEKsM/48Xyd462SH3i025BU6rtIpPxlDVSkzajSSxn5Dn+RhGarWwoagOSFUqNDJtxZ93WMe 8r3yiwnmjNOPjr795tBPth3nePhBWdNoczVjWiy27PC4aewV8bxy8NF/XB6br7V8zNCtRt9a7NI3 Dv71sfHEU3eof2xccua+MbAnz80xWefWid/0HbDwInHeVX+IZ58dF08/fl0cs/f60V2bNTaHy+hK 2i13/iVeUH7+47Zz4ujj9o/Tj9ghuujkpPcCQ+LUC8+OJ5SDzzx9S/zlnF/GfN06xbpbbBlj1hsS A5ZfJ84+drQ+BDMzNt1t93jgkZs9Vu64/oRYcdE5vNlqzBsNBxfflth26dojzj3/Cp8YHfCL0Yqb rsJhv9FyAm7mAVdJygmqcAondaumV7qt+NwNg1tiUCk0DZiGiBRZtOFYeHFsxFm8eO7QApDLXNiU LrzKlySjK9vmSE6S1+SC4eC04BsuHMNM0ej3QocezKNe4KxtkotNI+cqDkf42HYhkP+WKRC78jIe AJm2oTcisYm5C5+7msIqz2ozvFvVhFnLiyqEeSLcgmizwUUOKAJgO6/WorZzF13BsS1FRsVDiPUo 8BSqXoQgQjwrLEGCAtPLmxi6v8fTRgnNfCHiJZwK19E04l2P6lSRz3zyzvxaZGRHeUeOqqUvcyX5 14sFjhn8QZRenkvJmRovMxCPalOL7sxx+CtL0RdZLoJXXPhWevVRR9/UBEC+Ksz2G6Y3667xVWTZ TvMvb1V+iYnHh+qNO4MKpS9MIIwYtOgBh8YcAX3lBQ46NnRQRd2NEzzgrbh0wh9DDHfDTTNR3J3a oMkOnwgKD6y0R3TVb0U/4sPcjs7+gMhsJ/yCs3Ykg8RDLjj4Sa/O/gQLOtGhlzcX1CWAzV0Zaqlk qg62CtZlkQtUKW1Xa1/ysUMZyFKUiQaTMiHUT2k4kbZekm+DbUzioCwyfCxklUe6CGBJoOIcEoi+ XMiKHPQQfwep4quLqyl+TqzQCqRiY7Ja2k5Q9FOXpttiB6jgUnSlYPrU2GTEunHUkfvpG+FPjhdf flWbtx5+9IAzDdzLVa15lxket95+fswz4804+YSz4/VJfWKPHdaMWboS1h6948QLzovDNl8+Lj37 vDjnsvtjxyN+GycdsHFMm5q3gWZM009yrToi7rjutGh/9ck47tdnx4ezFo0b/3p+LNi/a4zYfe+4 4uwD4pm/j4uTf3d5zDl80zhSv1W6xvDB0Wvw0vFXbRgHfPtGnHTMafG3Zz+L311+Wqw6pFfc9+AL 8e3UjnjvxZfjg287xW8vuiAO3GjJuOjMc+P8Kx+OXY87I07cb4OYqQU4TS4BURJim9/YOcsXXbt1 jScefz6uu+72OOmkg/X4nhZdxzJJk6DUfZBvdfTgrz6FqeocHGvgepFLjkfBhxCpxjVtyQwRkqPc wuOVkUoebhR+IoTa9PCgeLzpc+9sxuqmv6mb4B58ievBKDovXNBbb7Mpiw31tMVjojQbcm0guVX0 SFK/k5v5yanSJ5ym7AKz8bzR1hM52qjsvtv2sdOoLfSLH0fGfz/+xFek0AtarvC2LbhoXHv7pbFk /6lx6klnxN/fmBJ7jdk82mbp6q/SbL8TT4hTfrVZ3PSnS+KUc2+MdXfePy48bdforA/mIMmLcdd5 4g/XXBLbrzhXnHXKmXHFrS/GEedfEPuPXD56Dh6m2/0XxZDuE+O3J50V/3xnZhx/0uGxyzZrRNce 3ePwM8+Ig0YuE5ed9fs47ZybYs3d941j9984Xnn53/HKh5Ni8iefxLNvvB+rj9wtbrv40Hjz3nFx /MkXRqeF14obrv5NzKnbvDbbNmctJ0T5IJue+MZ/+lmc9rs/xi8P2k0f4lg85wTmgrroqubSEk+3 jcJb8So0hjG55sRbc6Ueqz45dyatiYo+qVcLvFS7MlmLeWYtElsIyA2KF6ciF1yB87Y0FfozV9HR +UEFuFYWPzRtm6vs7IKtNzRUVLy4yzaOPC5lu0wizSTQ8y45Wn1F3XLTJ95AoGeVXfppoos3i9hq HGBpsfO+2onOLrLHhM22+Ypn6zxi9ZDjNQNcCzIlfSnTWJbnMdy4FS54keeTG6ha56gqX2Byi08+ umCz/Ykpqhf2Fb1xNHI1KJHyKp7q0MED4upbyc61zYq7r4uu6toGgdh3pazkZTmmV8ZVHgnM9Vt9 VXrqTWzLXE0MVejPeQ3mDQEWlL4TrOAmQeEILJXJI/VWmJHpSl1rnvkDFg28tD1DJt3Qh52Q9Kh0 xCXzuTDUwSctVbaI/UEc2uRQPRq9yoan6nolBCaqoQfx5lViUeOa5CVG8BWqr7y18BUg+ZgV/ih8 kUOwVCB1qUc1sIcvpSaP2Yh6fheNbS+yUM+2UxFj9PKdH9GyJnXlQ76zBOSPW3M8e1KNJ1nr1SJr ZSaulZMMMZUg7zpVxdmpaDqQhYwFs5ZOWgh9lkakDOYt+6209bCHkqTK01E3JozKQqabgdo8iY5+ 43B3mDjkY6TowbdTmDWwVFMAdq0iEaw8OyuQEMVzJos0uOaP3Ux43KihG1mqIEv4thM64VuW4L6r Imxu6ywyZHBcesmpcdWVN8fV1/A9W1pl0AEWelHj6tWm2+0U833x79hk1NHx1lcdcfUND8WgH90Z C0r5hZdaKUaNWDpO2HXHuODWVyW2U0yda6E4ZdS2ce1TV+lsXapoEhx1wC4x4fm7Y89Dz4jPp0bc 8a8P45mnro7RI4bHMmN+Hv+8+o+x7+HnSmKnGPfYB/HvJ65RTDpF/75d4/Hrr4pTT/59vPXl9Hh9 xoDYfcfVYyE9+HTdvY/Hp5OmxgO3XhuvtS8SY0YsGUfvsF1ccucb0v3emDlw4Thu9LZxzqX/iPGS mfNgsQxX8ZuvONixEVzH00+/WJ8EHOsNxfm/vyx66IMcjQ0w/oXOnlFsvPkjI1VIVI4qxMETDwNN hR7ywZhCyivFieOBOEuZQr/kK1QeLCxieQWTnCmcdeDsBz355KSL6nl5nJaUkx4cnb/qgyco6tGb 35Vn5CknQSJVPqEfA5S/vFqpDnD9EDGEdbOnDT3wwhAdM5/MfDabrTJn+MbFdvxAEY0anghkwwyd BKy84oq6ZXq8vgvtgvjH/Q/reweVhy2lXVfONthws1h6rsmxzhoHx5P//Sri2geiV/+FY/elOke/ BYfFQXttEH/67SFx6u//IcqZMSH6xHUnbBlDTr3JY7t9+rRYbs21Y5MV+sXoDcbE7U+OV/wejN6L LhGj9MzZp3N9HQt0/iBW2/bgeGnCpIjr/hk9Bw6JXZfopJ+U009cffRyHL7vXXHJuOej/0JDY8Qb u8bQhQbHp++MjUde/jSGzv1cXHbzE3HNo2fE42P/HAedcFFMndk5HnptUrzwwFmx2fBB8eeHP40e 3ZU39gYnVvKl6l0UAyYq8qybbvf++apbYs89to9jjt4vdtvjMPVpE6ExlOO5xJ04OBawyJjgYzjy yr5G5hjq+YE+YkLw0UP54txTi/hAQR5wq5rCO/mSPJGQ4ggt5JbjCj1ml6x1q9MTuJNM+SUOnvfM iDyXveSwbMhPp/LohDrJ35IzDbbQFDzPZchBmOxG35qDqOP5V3Dd2QahjDVhVTs9wOpVMcVAMjvg U2xkLWnkOPSw8bu4215UQe9Uk/HY7jxHXEEwognzDTAzdImXbz8JlmtJSqCbYp+JnjFigeLZjDtC E87c4PXBO1fBCm96XRcicazFNdleIb5AwdV6/FH9DXKppz+YJfAwdGWzVuaflGECySt0OvDIir+O hxigk9rKXOvN3FLNghIgcw9//kUOdCklc1X9io/nK/U5LsKFDtaugi+dWcNxRWXBc9mGCdG8dLRN xb5qpxkBM5siv+CWlvvyDXsQh3xXoJIcHdTEvhLGJk1h4jAhR6+MJ7yUh/InMzxjgG4YEVfX5buc Y+GKl9SbSDSjS9c6hnKsAkMtCjp5fIk/G9vaUXPCY95jAmx0kRYIsAWikQ48tuY1iHEJjop/xUKx BZnoUfglHvYhM5W0dd2qGxtkQ9mVNwz3uExeQPRiLioM1U8AeVaFrjS+gZzRLRairMmg18uDQQBk 8NNDfjBfBqQI4IUP/UwybtakEpoURZ7dDJkiBi8+pcSfQEjRq/ABrlcR4MkbXCcdWO5XRQYZJiWh RoYY5wJupulkO05wnvXBH/jBieIKPtJLMG7N8TxPW49u8YcLT4lPx0+Io445XR/v17ZYfchlcXXM JA+pQxabL/7z0lsx/qt2fU9cb125mxJ3PfpK7L1Apxg4oLeeJ+oe+//23Nj3N+Brl64v/p321avR s2+b8kIbTPFdYGDvmHfJYXHvE/dokdIkKR3m1NWTvvMOjgGif+ftt5Sc3cW/e0x695V4+d2PVdeX 7b77Tjz+zrdx4z23xhy9uutKWc+YS7epprMz1FUzJrwuukKy0KC+Why7xa/O+H388vTUo2v3XtLj 9Wjr0yNmfafhRSKr2Eb8KNvqzxHBR7/XFm+9816cp9tYR+lrRcbeck+M/2SC7OlSJg+S1U53znjQ wVAw8tJXzbLbqe3NkOKdm60crODO0qdxmYyIfllnGv72z++gi6OteGvX6TwRPgU42cRVNEAZ68wB +o0LveQwSXOC4IlPyM4HcBSTuuhRIdeL2jBAiG0yforNybFigWIc6S9Z8G9woINxA4764IdO1sdE sM/JnQlmrrn6x2WXnR4PP/RUnHHmJfmJU+lt50Drvy4x/1zzxqSP3473Jk3Rc5KK67Qp8czDj8ZO Sy0dXXr204duusS2+x0eG+x+pHJf/PVFzVO+nRzz6jk6fDRTdi4wsI82h73jlD9dGadJNyadHr16 x4SX3o/5BvaMiZ98EB9+O1U4vbSxnBbPPfp47DhsqZg+dWrcdvfjcerRR8RhZ80bnZUn8wyYJ/7+ AFeYu+q2qSY8PQ/Vr3fPGDR3z1hyka3jiRc21FiTDKXpLNHPNd+csvsT6aZcEpX9nG7O2Be349ip U6bq8YDz4sYbL4wrrrgpHnn0aT37qRwufnRIVHcQhC8p6S742v/GoNUozjb15aIm8ZrDai4TykaB nwBeOAX03IooYsm8p4mBUYREpBBX5kOfAOBnDIaBcXK8OCfVdp7Q16qe2plnAEWv9xylNBFc9NHR fcna8sCDdz2B9fxr3tKpCPEYBFboVHMPvGoMAKQ16Jg5ja1eAIWGfrYJfeQH9m++yq02rBkDlORJ vTnW3KE3eNjf4CJPR+ZYz+cgFTid5lNoPK+XevUjJ10uYtDYcAJAz1pQTKXSuFH7iZHGSyt+xoB4 yQcoCKtyoNKMkTmZ1jA1ax7lRRB8wpyQJ57ekMpP4Pq70FR3Tok/mzfmCnTME7o8IsGbNsHRAddA 70/8koO0mwsUKP/nUm0WL/BE2jwCgB9yWkuhSd9BodJyIO9molQp0sxTnseWuJuu8EBvSvPxLsRJ HnD3NWXjK3zYekEqxx+4VVhW6hzqq3kKJzmDSnn3I8caFNZNsTCe5PpkDN+pXnOHfOYEB7ugcLdy hAhiE9M5Tx2IKGMtGHOY4y9kd9FdCnYwP/CyTSLuypfqMaAgBJiJncGHDmVYmGCGX+rA0CbVEwcJ ou8HzU7BatJ4hyhj6uRSjcAl1UCOOAz5vqRKAAwpyauNAY7in48owwsaACwmtHEuV6fkKcFxhA7C qZNE10Rwv9Z38/J3XIGnYn7WUxbif7zMpgs6FQLtxCjeZLPmicUDSQju1/136cSnTo85+pex2mor x3rr7Rxfff1N9OzRI/naiLTLC42ETddtyrYB/A6qZDrpOsWQBeaWKRPET7ZPnxTH7fOreOztr4wz aOgSMWzAtPjscy0SMpS/zvpgwCv33xbbHXiRbklpMdJXf6y11krx5mPPx0pj9OD4HH0kXwtih87X +swTA/r3i/9M06ddt98rzjt+pzj92N/ETbc/Ed/0WSoeuOtU7d3y+SYbr6toPgue9k0ctceB8dT7 E+Xvjlhw0aXjRwNmxOfaePIBCVyVk4z8pbjQJm1zY5fJ2U1X5S65+NoYM3pkHHLoHnHwISfLJn3o QnY7ojrKlRk/2YXPMy+ZpDJ7nDeKjxc9bCc+0GXgPFicL4LneUEZKIwkw4ip9NOLQZCPDwBLed4V kHMC1WmJDOSfN55XNU2JuW5qyN+Cq985TIW2pZgEQsM4kEs5flI+MPMXvJ7oINdjh6NebEQ5iwbm VFbbY0xybJWOqSsd9OXxd6cdoR+rnzO22mJPffCAL5LWBwjcJ78Kpfq0Qz+r1a27PrygFbZdeIpA 9B04WNsneUip0L3zjLjo+CPjTw/qKpd2rf0XWCBWWXKeeEkbPo8tbNd4mT7509h3hz3j/Yl6RlO8 Fl96+eg/45OYe+XNonufOcRPWiqfUGHOQQtFF8nts8BScc0N58en918Tex15U7z08aQ4+uyLYok2 CbYXdRAFHmWieuDaS+JXZ92uD0PowxPd5oy111w6nnz4Q33VDfiFgvmh4WeARCPzhA/y3H33g3Hf Px71h2o22mSM5zZ8j5/tR+ETS+aRzDCgOfkyr6SD4UgeqRAUih1PvmEhtNnv5dZzVgbGJ6yq+kRB eJ4LRAsdqnJVJecH9fEMo4rnSfmYuLM59mMkfhhdfcqLvGINJmPG0XV8c67E73Txhla4JHVG9Zpj Apu/r14x3ugUDX/+pngROrNFy6bSOomGOZg1xHOkmegN9imiVMh3YkC+Wxl3MxagR45jLD+164NW Df2ETb/bovVVFfBroQoPeLKGwEXtukYZTXT5G53q0zphn5gHxIWXY8Y6V2RBKD4+CSyx48QYGDYk WVaaC7TkEAvPT5zgiZfYe+yKh+0gYyySGAlHcOaEjFPyhR9xh3v1g5/bLXZ36ApsbuyEAZKLfECu kJDgmVh15xQbvIw7qN44SAlCTB6BnjCt8dSxFzvUUfOPnEAj9LBPhIcodKXwoSeBBJDvsUnYjrO6 PZaACaGYAFoOG/wJXKS8nB+GqaX8g5bCWsIJs9dixyqhvkqLv4sfyDLmZ04WjCH5rEfOW9sj+2SD +QjBfhQcubDAdu8zVIdnh3RI36gtJNtUZKnhea5TudPk+QOdJZwxaLqiK97BU55JhJP5ie3EIWXk F57jY82UDkSOM35BgpM35w9uyaQUM67slTmIDYn+xZDpJg1z0iAUw/XCwxhIUuWAYjCAzYYs6yiZ qcKkkV60IdQJjPtlpNqVD3gYVP0ilEbBDjhC64MF4Mbkhz4ldTIYwqaPhEO13IQJV3gu8NMgJsiA YOuiCjpgB59aS5HpYPC66mqNfSpa8xQubXblyEGPGdOnxyYbrxNHHb1/HHLIb+LZF17SQpO3rLCx ikIePkGjp+55LBZde73YZuvVNchmxlKrbxq7bzKcQMQ7r78T733VI3bbfrWY8tVn8bUeNzvolOPi l7utp8SZpsBLTy24D9z37xiuW1grD+0Vn3z8afxo9bXjootPiCHztce4h16OzXYcE+stNb+uGnWN 0fvtHKssNkAfkuiIAQsMjvZP34s/X/P3eO2TKbHZtmvr1tWcGCv95DLp2LtXn3j/tffio8m9pMeP 49uvJsSk9i5x8Gm/jgPHrCtfcqWE2GUSikRNJnxyJge2N3aq49fPPv9cX+nw+9hDt7GWX34pXe2Z Zj/Ag9A4z2BCQ4UqA875pUaOB/IlfQgOfgTPk4kqjrtgUiHf7HshIEN+Vchcan6C5x8g19E8BOAP mf7TZMZmBw7WS3Wu9mQEG0AvvPRjO8USaxsFgfiYfRjjvBCMsYAdVWZhYRg4xMMTD4xVGPRVDv0e A+IHDp863nXMyBg9euvYa++j4j8f/VdXvrR5Q77yt0i3bEbSMy/9O9qGDI9Dd1wzeumsbLFlV46D 9t5YG6xZMfW/b8bL/yU3toqY/IWuFH8Xo/bTB2GO3E5X9BjDnb0xfPmZ1+LbHoNi9BbLxefjx0d7 2xxxwvm/id1HrhSPPPF4tC28chy5y9p6DrRTLLXyKnGQcpirZ937zx3z6/xi3HXj4p8vvhvzDVki ttp0SeUBMWfaZsOsT1vrWct/PvRGbKAvwl54zpn6IuzPY9Utt44Lzjo45upXTiCFy9hkbOFnwuxQ Y3Ip+Jk1ga9SGb7KsrH1Vhv7VnMmC/5HInYlgRcugiFA9uW4YJFCjszPOAud3MGfOR+VHBCfnINg CAxeIOcciH5c/UgQ7xminIsy7y3DCrGgJT2y6+IG18yenJuZ2+w74Vgi+qvGuLAgNeschj+wkVct 2EEr8ytzD1qPDdvNJ2klK9naD8yDvGyPeDrXJDPXjZwP8DGLcFWCXHdL+Dzj4wVQ9lknOAmO0omV VODXcUvd84LmlcLKJEQ9aYhllUEeMedrcceH9MiAxpyPXUUWtvECz/aoTp4ztlDJBVzV7ecC4mB9 1IFkxDh1Cj/3qY4OHu/wwif2VjJGZj6vLR7Cc1FXasw78SDp9II/yYwQ0bFG0YdO6E00yEW6UZZN NzGt8wV3b5hHbJNkGBd8oftqk3CZ5fxXdPYnTEFwSZ1xsceCYECQwd0N6uQ2fkdZ3smhhu1Isgzo 6QVLRYQc4Ul8iC0bmHoFGvrahy3eVIov8QGessTBCuR4xR7nr/otX0ytc2lTt8YErch2RTzIYY8F 4ZBZ0POy7rLTRTi08ZVzWfpgNmipb9qNSsSbAl/boTrk9pMqxLTmnnNAfU2e0EoKcVPNNvTq+SPP WDjDiqkLBjjEnIWYmtR2Kgu4FhZr6Floin4CUBcAvhiKcnoZwcfaLbcID1B1jDQ0rh8AJElVmGRg hwvgkW0AJF061TbQrnKqfPibygxEIp5eQOEEPwoYKFFkWye7RnDRyyfWT87j0yVpq/C1kWqf3h6D F5gvHnr4prjn7odjn32P0S1JPWCID+EKLXQ6MnlaC9nV3tY3Tv3jObHPFsvHR//5OPr06aNfLJgW X774UGwy5oRYffdfxJWn7xcztIGb1b1P9GqfEPtuv2c8PHWReOKuM+LoTUfF3Z/Oikuv/2NssdJ8 8cEnX8aCCw6M+/58YYw59MroMnBoXHHDH2K9Yf3i4wmTo3+fXtGjX/+47pRfxZn3TIy7x/0h+sY3 MXmaHsyd/m10mWu+mPrOo7HhNifHebfdEOst0hbnnnJqPPLtQvGXsw6IaV+Mj07Suce0j2OfnQ6I u577XLdXSxITA/svB03e+mFAK9GwWP8MJJLxH3+/Wj+gPiG23+EX2rjycK58ZKcUH6uRuHQQF3fq QBsQgwo5dq8mrRzkxI6fTsnBSV+T3jkh+b6FACE5oP4GHyYRwTzQBfeiJhk5JujKPHQbuWpaM+tQ 5LiOXBXq6FphTnDyQboXXkxQJRuEl3mFiZkjqrBKFvutv/HFgtlBPLj8TjVx9OXL+tTBiisso68L uS7OOfeyOPnk83RLn6+nSSXkXSFjEyRor0VWG6QjTj8pjtx9w/jkPx/q1mefmDL5m+j44r1Ya8QB MfQnm8aNV50UbTMmxuSZPXRbfmYcvO/Bce09r8Xvx14Xg169K0YeeWmMOuaEOPeI7ePrjz+Ktn5z R8eEl2PnbX8V/3rr29jvpOPj1F9tFZ9rM9lzjn6KeZf47r/PxKojjooT//inGLXRovqAxefRR7dK J345JRbWicSB24+KyUtsGdedvVs8ee/Y2OOEsXHBlefE8EHd49OvpsTg+frG1dL74DPviS66uphX hfBZ+tELpez1l+fKTnKCoGD21GnfxQXnn6zn/9aI1dfYNiZ+PSlvReAR+yV9pGYWOZlnH8kA+OC5 9CTx4T/zNjdVLA6VjLN91XnxZh2yzyBVC2r2C0jekxeUmnvGEoxP2SGd9CWF/N17yPZqIQkCJin0 vBRfwXKuglKZAILkYCd1/FNhVRkWF9Iq+8FTqyiMezKfsBqcFJXzMVQtvJFoGUnMSSc6siB6wwYp vOEhR9WcZK40b3UkJUxBER0nrmrgY6+HCQAAQABJREFUCzZF3jBonNgG9WSBYYseZaz7pFe0/hoc 9ePHxKShGEsH83NHsRIYzFwyj6xbsYu8y3iVOQmdBMt8Q9OiG47CVtnP930mTYmH+xR7XeUD34u5 9SHeLYW4yH50lLLqwD/iryb5zpUkz1OIqmSagMChQNHUlRhUROGIp30o/bmKJG8UHuoTWrWzxkYE 5okcqvaRKsSE4nxwDfnSB39xBAaBK7ylbMDAZssXusGFEDz95bta5JL6cF0yVo+ufKEfbXAVBtub 821urpDhDleSL740r1xIrAc9PHfY6i+yO+WhkBhhk8ccTAHpiHwEW6kCo2U7yCVyg2fEGasl9+lz kdaqOk60xc8xKd3QZL6Tmwns1KvXEqbioq6T7n8ljpUtQ46Njy/ti4kHkyX7zCEnLjmVq1jFCAaF FYGHeLtIQ18SJfN4SWs7kH7w+U4iFBSS3m2EE7PU4ZHBY6EvgwXnQaID8uRXXcglEQuOOvJ39yDW f3F83tTB9qKbu5n4MhlxlQv8KXiYV7HFE6TqN//1jzFo0Lyx4UajY+LEyVoQwPV/BgE+znIddbUN PfmOrpl6Pm3pVZeNlfSlvG88/2y88sGU6NOjqzZyE/11IgssMiRWU38PLaD/evS5eP+TSfrOrJ7R v1+f+Oarb/RJwXY9q9QWw3+yUiy58Nzx1isvxxPPvBPTdNNqy522if7tn8W74yfFPH27xEfju8TV Y/8Qfz1mnzjyin/FAkMWibXWXF5XVz6LRx56UVdEBseQuTvFU8+9EQMXXSxWX2WJeO3pJ+OZ1yfE gosvGj/9yTLR9buv4pGHn4sPJnyrzRubL+yR72RrvslI14s/6WenAUxGT9UnZ9ddZ7UYd+dlMXLk fnHPPQ9FW5tuM5MHQsLvddfTJe/NJF/zFC8fkZf4ZIhDR9MxEY5gJDsnIfXWB9BC3NA3B5E7ylvB KrH2IJEcWOdgU78mCasgPTlvc6/AnjjgIrlq6V9YRmQiIA/B0QZTY4cNTGGaeJYnGssqkxK8nHuF l+SlvrTVxazKOJG8/B09/YKCvirkXm2Ox+v5y5Hb8junymEGpXIdbQuhVMOylMMCzkQ1bNlhsfKy i8R7b7wRL7z2oa6+9oqv9PNnM3S7fa755o81frZ89NVX2Dyj2L/yyVe+qtenT1/dep0WX0/+zuNt 4WGLxWrDl4gZX4/XyczzMV6bsR+t9OPYct2l4/FHn49BQwbFf9/4T2x3yEmx8fwfxI83PjymdesX P1tnuD6s0Bb/fvaZeOeTmbHSCkPjnRdejQn6TsT1N/xZxJcfxT3/fCm69u0fq/5shVhEz32+9Ozz 8ezLH2iu6eFFw/MBLqPY7yX/PGVmIDJXtRHSuJtfY/XJJ2+P8867Ik4/4xLnIGO5niHXfGT8+2Si zA81BtWfuUEqgVYckcGkP5Ocd1yzz/pxIsvERHEMs9p4J18Zz9CZlqN6iXFDhPgrjzxOKhN1NvIP ZuB6TLJZyI3ObAKdN0LTPFTFkE+dlSvc/i4OVFubAtrSwTahBLeSRERGpZyKb0WbeJLfGhP7zXpL nxwN4gutOUkE9CrJplmRrMbcr042MDUmUFt//INfPf5holIc1ljQheyNro6WKnxQ8gqRYJKbOhAf MCiyoeiTuSMQt6ir08xLvhcjbmMzdXmDr6PdjwDXSy6mEMFKDliG3iTDGzAYFL2zSx20xSzXMeKl dimNWqFhjiJcDHnWF2Kf8tVQIR7ozoYmYyh/YrX8Rh+bg/zgD5z18gGa5AvPwsn88g1ImU8MgM6z okTR55lPR2CMGuFy0mAa1EnZ5ALoRUXzdMM8s2l93IavuAmZ+FbfuV2Z1FzwOIS+MDcdTbXBISYI zcW5KIBO+Frj1QVZapfxi0UeFqL3xRzZYv7iwcm3N9jCaejTkF3Yy2bbAiNyl3wQTFxccqxlXwLr PkcEpA78yAMO3sAlXTrCxkCsRQdEio5+zoy+mkBWqvYLhwXGWhGIAhc4lYFOsJK3OBx8FPB5rfmq IRxsYozYQrORHkwk4H+/VF2ty/f66+ZSODWp02uZUj6jgC88Kh/zRw9VYAfcOpRFWHK4qmZ0wZmk v9OtoOOOOygOPWQvndGP0vdgveIvMzUD0wuRo195qRerPbEqIdgLt0/Td7YJxoaFS+DKFLuL4LLY sNHjbJuv5KCfgOMOvgg0k1dfOyJG/Fg5VwT5IMVU8dz75FPiosM30lW0i+LV8d/GTnvvGsv3/zrW WGOPePtzbfG0QeaqDcOqK7fZNLA5s+2hDST35PlQRlftRNlHkagzdOvVX0YqPXiQ3DbiMyekZKtI O7XJl4R7o85E0nCqNq5apK6+5pxYdJGFYt11d5IczpyaKPUTQYQ1nS1m/MuHHlTwtm8lD3/Zn6mb AGqryEfusR4wAgSOoMxEVSUHGlAZeDp641P1NaneGOjQ8cyDZGcOFxomEejh5eQVHuME2eLjwY9e 1gUY9dKoeCKxjxjMRaf0GR3CdT9V6mro4IfMzSe/sJkPz2zy83VjLV1V+vCjT30VOM2oxuIRWDA5 FYaFnuff+F5CbnXjIibYuoHmJIw8oZAnnGXzx7hCny6i4QoVz8yQN1CTN530KdfBK60Rjz9wWbx6 99i45u6nYtgqq8che2wQx+2xT/zumiejTScB07Sp59y0C3kl3h3KB+rImKqvzOFEsTs/6SYsy6Bf Mv28pqB2hn2CQhT8U+yr85VoHTOB67g9/PB94vDD9o2f/nRk/OeDj/OKucl4Ey/ZlpOrNIG/Xj7x g78xMv71uTfLVVcu4kkvT0uu8BgDzB3yk3lVVZFDaYkHuQQOG390aO1Dhvklkd6lo/xe9TMYlh5Q 6pNc+pibU2ve9TIOvF2xnDoG7CfJJWsomTXyG7po+0X8GYuVB4/eQGMbJQv9wCNW9Zk/kLn6nle/ ig6WDc9SzD/HCzY3bCrzh+32J/KkCyzARzn1V93hRlejiI8LHXplWog3OjJJAafYSMFki20DJh+C hw/xhTfW1hEi9PSBmpq0c+3zHRfEIttI1CWg6EK++MKGwI31p9J7nkil8Cls8qQWevlQB9aOuiZ6 4yocii+oFJ1SbvIxE+RLl8zFAteBMaweEaNeyoCn78B5EmdjRyf08gIKuYhXEsk32cfc77wVfRYh F1EQmg305IvsNfvKkAeMkSHa6sfCpLBKwcJoFN9NUct7A0TJPt9CdlwxTEDJgYZNKvNKQyFigc9R lbg5hiAm/uy6gSOdiY1K5rnq0DOe9Wd7mMPE1uMW/sRe/54fVTcd9soR3GaeqSuxRgC3FPT3GAEE vUv2O+Za4y2LhRW9e/UallKEWBWkA7sy2MWxtPUC3mRMQwU5OEt00OAoDz4MJtl0zEQFRQazk6Xg pao8nmzUi2wMEMxykaGCmMoLWdYFOr0Mb5VXaUkK0eYZWDKyE8CtdPAoBXncvtX8o4pewsNIX9HJ yHowT/luamy00Zpx662XxkEHnaBP/d2oM3m+MsRETd2ww4XLuGzAGBT4RUFUAtjPgjlxS5LYLoRX vcCHR2k7DrQrHXDk6Agf6jz3tt1uO8W2m60ec/bqFv955fW4/I+XxyOvTcjFHfpSctJBb0hFi2/F i4TMDZb0lu0Z14R7QGjQObGKTOtHLKW7N5vyHS5z3Bxv+M2KYcMW1S803KQfuz8tLr30em967feq v+1BH3xFPhCGGi8rmb5AbqotIEWNkhcsNI0JSj1MfEYVMx4ydlSttwaZ4sJEwBloDqAyKIl9jQns hd+Ik2klX1xz7KAr7Zbipt7goT7wWtX1ZAy64DOVcM2JuenrjDv2V946ehLIcTV1ynex227bxh// eEpsox+pv+tvD2oTrwf9ZX+d3OonCi3Ko0E1dMXP+jdr2wM4F30mnoqaD4oj34FIPek0SAxE6/yo BAgS73Zt/JZb7Sfxi/13jMV1hXjS+M/j7ltuiatufjimc/VM+LCg1HENpOEj9KNFTqlu/2jMWHdT 0Z3ywcO7xNUbE4yiDxalMN6hxe89dSX70Udv0Sd1n4wDDjreX7Sdt6iEjC+kR16VStlmIbjnMzfE i5iRb+LbiD20Bc9oevPCBpx8YqGCNzEXzPmEXqU43qqbXws8HYVelMS3rwRyrAG3yE1/Cg+5OqSa ym/wKBl06wE3zxtC4s8PsJtGHkXHig4TCnYUHZJ30377AxT0ErqvRkJj3yfMdRHWTZ9Z1bHmuEHw w5LzNtqoFFW8oRQNMYUvf7XP+OBWZfBF5Y8+etUNt8eKFK7+h4zSiIPocmxo/mDuLjmJL5DdjfEC PvxR0XFmQ6LxhCNoE5+C45ihTy3Spa5HztMChx103lS5mjTVd3UTV8crZrHpA+41Dz7YWWhN58Ao Fr7LAYL05k20TJrOewtWG53ZcKBrq77Uq87gQttaUk1BSgXFeEkv57zj9H0i6STdkNWMteiZPylC Z+8Cm9zYEhPWq2bUGj4UH84RjIeYFn1hxTzv9az0efNU7UC+xyeYRf9ysJ0oUAtweFc84KW/EUf1 27+z6SA7wW2hRQcuxpg7PPQqu6VW7qabpTh16tN7mE8GnF8mgKOK6nTwiQqntM+WtNApcT3QiyIO qtDTaWxG0pEkce4YNV3A10qaczFOBtedPepyZcNag8oZADvUDCLB41ZYOhu6Ak81kzUyaMtM9K6O qfrQV3Wl7uAw+Youb/lqEJZAMCHgrbwHziSrM352MpKbZ8Xq0yZ18PzzxgMP3uifKNp3n2O80/Yg tSpiID2wqTFBwN+lqT8fm+amgLQ2uo0p/vLD8rIda7y4o6te9r/41ronSMEbkzhyVWh/9+130V2L OZ/im6Kvcuisn+Dip47si2InMr05LZvJoiIC+PdZBjAPBB2ZjIiy5dvWMhETYxF4orHtxS45FvfR h+6KZEz9bpq+WPWI2GH7zXQFZKv48ouvTeeJTqiOofLDg4qJkoCI1vHUETx/rQ3wknPuLzr7OQ7h VB+JgW2GH4XJreaIAaJjAibn6kIAZp0k66RQcd0WD44U+xP7KQVWdUUOOVCvqDi/wMEkjS/6vfGA XELzdj655mbyNn7mDbLqRmaGnr9cfvlhcf/918Xvf//nOPHEc/MTp7LTeSeWFNtKMqoQdmo58ZV8 kqw6PugnfOkpIUo2Vzw8cSpb8Q9u9EmINr7ycvpMcF9lcb/GjY6UDm3iuLrXu0/PmK6Tnhm6itKm 74AjTxwH24Pv4cvkjY6ZU40jAoXnzbXo7EMh5lk4NMRCI0m0HktYDB/hQlfjkzanZVz5237bTeOy y8+I9TfYOZ555iV9dYk+f8u8JBpmTvtCcqwHxlBXMlcdwSM0tdRFpbZto1hRHEIIqdt26YWP3IHI 9Bc+NEiohqALRQf8Y92EUPua+SSEQljHqrYaIiRC8oqdw/irJXl5boN9EQM+/iR/zA/B9KkJX/tQ +sPZ5lRC8AHoUPVQLfGogKc+xmAuOuSI4IJhFkKcS+CRC9/fNKBDsb/O684ZyYWcbrelW1muUg/B G1c1VMdftBsxFb0/NYr+KslH79YrfeGGOzMXmOeZxxJbuM5d1gqoBZddjovTr+Qf9CqWi0zV0ddj RndZ8Bl+YZ/XfKRHMNjBVy/7TsdG3pij3tRNbhQT7EnjlH5kWlto4QMi8jjoD61zHSn6V74t9Glb Auo8Wue0VnTnKPytJ3qrV02P7eonTsJU0MulHOt8zRzDpsw+Eor1FaLzRsd8Pr7M1ZJT86HSV13t a9Z55nbpkfJSp+qfOk+nIg6dq5Yt3i1ORQPLQk61HfpihedBX3Er9nk9w37x4VD18lhgHJi9qBn7 4kl6e99DhaJ+54hwHS8IVMg9b9DZwFUFTcKbnSkEMcXNVk+E1DNwYsJ/YSawabzJKIKMYLNgrw2Y AiJNGo5u0IhPOgruzWLHq0lfsiE5czOD1TiwsG8MTm8c1FfVwlnw8e4cuxRB/nCQB0JhjQiKXWPe OAsD7REFqkxmBYfNG7JuuP6CWGjhBWIDTf7f8NwbP5WFXuLhh5GFnwGEcw6WIsTJ1K5PYWpHpd+Z 7Cb/KMmE1qEvYJ2mW4xQdO3SLbpxJUW6ONkE9CCVj7myMU1fosq1RbaAPfUcmRcLtetzK9iIrlOn TU2x8mZ34fF9cVZAMlwc71kxRd+TxcTNgO7GRk+3t1S1PejDs2rTpk7Ta7p/l5K86KpfmOADGxlD 8gOO5A56uVomJXUIBh9ix63auQfMGY89dmtcoy87/vVxZ+vZPr5yBQzhKIFn1Wch1cZOWKObkDx4 LFOtOpkAB4NSc9MtBkOy1aHGnx5eZVMgX/lMR7qZVl3kCfG0H5W73hChn/qcU7KhdRA3Bqd4+kSn yPKkAY3+7AF0ER/YWwUdKs73By/9xhMONLZZR0/6OvbR79/effdV8YU2wCO32ddfJO1wFnwp6ryA j9Bdsl8AFfLtOz3n1rMXvy8qdRTA6drY8FNaFG5Z87Ud1tN658bBt1flk2919a/6uqu+0qabcsHj ULTII2/hC8/p5fZyN40TX60QgsenZKZu5O5M3TbNX3ngllCbPqDABsMbevHhCvdM/SbqtO/ET4se PkfHbnpsgPjllUYrWnz6A8NNYz/Kscxxd4670reIt9p6b8e6freT048YaiftRUn8XXCdRHhs27HK ToKkPAO3saEyMjISN8dE6oOGnp+Udx7bokUnijcfDg+4ABoH99PKDUk5WZKAunH0HAANBR7ejFJv zpnokfM6/eoi5/Vn3YkFQODqJv+zACBOzXm61S9AyzmuaWrcPY4LB48n8JgkxI7iWcIOylxBnsdZ 0QGc5rhSQ/6SojqwyZVuyq+cplUXHy/sSeQ2MTF7zMBOFtYK0NF+KDZmPNJejznxtj7S1+O8DETi Cwt1lhhSR62KzyMF1d/FUBBEVMhoqV1sK3ZUWS2mG6mINYk3nwJIhbRfOuSdEPTO3LNu4ml7BLWN Ota504FFEeySzvByEcy5gF9gQodkkS81ZjUWnq9EVNvoDq6NEh1rWfWt9VDu0Oe6+msuWK7enPvI g4UKeJ530YOcE3/WG3jixzrn11y1TfSrD15VDvw8vsTa+xhkqx8cxjl43gipbRuwA5luI7pFZ8DW pZwWiZfnPsEh463io1+Od3PKN/rhrVeub4CLztiugj4Uml4LROMeC3CX35yPqnXp3nPgiTCheECU uoWICKPppa/ucquTgSWNyV0HG4ehoO+poyx4OtqgQmM6+pLUvJkkUZwJjH6cwUIJTzXdwcH8Cx/I Ocum3zyBg6o3PlqNzjxTlWf6OKb2J08SgLxrwGFoA0XjI/oniMkB6qnaeB1+2N6x405bxvbbHxBv v/OBNmH6VvkWe1IHvVPRm88oqJkZC1p7bLL91rHYnNPj7Q++9PM3HTM6YqnVVovRO/481l1rlZi3 56x4962PoqNc5vYgEj8G7DyDF4zR+pmkjdb/aSw9dK54790PQt+pa3G2GX9rgWvTVzWM3HGr2HLT tfSQ+tD4+r0P4svvZsgvmTikC37mI+IbbL5xbD9y41h91aWj03dfxHsfT1SSd/KG7aeb7RBXnzMq 7rr177HQj9eI3fXzTOuvvUoM0G95vP/eJ7oS0s2xyzeb7Nip5oLd3LqpPmKS/vLLifry4hlxhH5y bNy4++Kzz/R9d9oApM90kGxexAO3ZdJTF1z2cfWFUhdXgfJKEXAMUyFeFMsVLwZtxkAI4AgXf5lH aYMPDjAecmaBsBp6g1vSIyMzxLkj/MxV9NH0oG4GIHZaX2DQMqKoCp7Uqb9xwLUEdRu/2CoY+kOD /BpfniU8Xb9zOnz4crHtdvvHF5/LfzrTTHuQQ74y2fGetNBT4MdPsQ1eapnYbsQK8ebr7yo++hoS 5eWQYT+K0WO2jfXWWTUWmbdnvPHWh/p0Lz4Qtf65AkUO8h2Em2+7RWy9+Xr68MKwmKYPL3z8xXd+ jg3f2IfCZ1378XrrxOgdfh5rrb5i9Jnxbbz3wYTo7BMEOQNc6Thjqn7FZKlhkr1NrC/ZQwe2xZtv f+TvWER0tzkGxc1/uzg6v/1IvP5dv9h99+3i5xuvEcsuPl+Mf/O9+FpKstkDl42cDsUHuC6v9uDG Gi/iO0Nj7t133o/jjj0wXnnlzXjl1bc0FuGRfPAa/BpFdccGnQ0UQ0LjOYj5C4TSIxwvJAXmCVky hWCbiRMtkXtBMVruRswZ/fzpZGTxYsHlKMQ8mYVT+RMjX23EbvEl5hTjkm8IKcJYwMjLRhEuNB4D AidH9cJD/+QpuleKKt9+rHLgqfmWQizTxyk2aeGaKqRochK+uQGz7cIgL3k5fraz8BItJpArcEEs MuDR0JceOpjQVRIz1yPHBTj08HW85Cu100eqoyDd1p82/JEmMLRq20cFBhxxHmc6isJxBM+8QNDL PABYNqD8Iw4U+4q1ChxoVNgMet6RANZDp4Xo0+akMWfnkOTaHpEzuRSbwK2xRiJMfFVf60n6regi HlU3Kyv52G69ROZ1Bxh+sW8E1JG4UtiszJbL6Cw9vK4YA9rkaV8IhpmZR00fA2W8WA4Y6GCZmrMr H0SjbwHYLlDxg5jbhZYvAulnuNreS6gTvYgTDDgZMRvg8Dexa2qkppkLaat9LxyxS3y9+0qp4wpd 5hJ4IFUf1pyu7J1KhQNi84o+EYEsbUZP5ya2ipf3DyWu0GAPY7hLz57znVgDTodLVage0bh4HmWK uRXbinpAgIfi9Ig5xmcV+jSOhLKiUowkdeBtmVGTDg6izQTC0UkL2GpAaz2ErsQFrn87syaFaQ3N CaHhEGSpgEe3J9WS/EZXX9qobmwhMbClOIBbf+uv/zM/b3Tkkafp7P1+X73gDNjmFr7IKwDLYwBa svq5Ujd02M/ihhvOjb5fvxg3/eM1fUN7Ryw7Yqu488ZzYrEBnaPHvEPjyGP3ic6fvhkPPPOuaPLr NmZq4Ryw0LC4ZdwVsemqC8fU9u6xx0H7xcoLddK32j+hb7LWBx0cfE0AvfrHWVdeFMfvsY6uEE6N ETvtEKM2XSZuH3tvTJzGYpepPEPPpO155HFx5fkHRacp32gTuU78at+t4qXHH4w3/jvZg37McUfG /BPfjOe+Gxx33nBGLNBtRnSbc/44SJ9o7Tfxnbj/yXe0oHPFThHCXxiLD+Q3n43IevxTBzoI1F97 /e3YfLP1Ywk9E3f7Hff64fc8uxIyPFTMincYKO5eKESbMa442Q/PTNWSf2o7+VFItMmGaKpdCpME MSbuXgQzkO4FVjXw1Qc1bY8NVI+Oroqdc0p8vSjBS7I9BqwaeKkbuQKN+6HTnydU8JGmIzJSJ/qB lfGAVuqbpjwctcuWcfzxv4xddztMn6h8wVdIm2MO35eCML1yUUw38CGDtl7zxAmnnxmHbD8sLr3i 9vhmijZQy/9EOX1Z/GTxfjGrR/848PBfxMJtX8Zd97+gsaaJ1L7Rc4z6lPORp50e5/16p5g2aWL8 RD/Jtd+YDeLRe++OD/iADBtx+WC6Phyxwa77xNirTog5Y2oMXGKFOPqwXWL8y0/GU69/6i/hRT2u KC+60s+0kb80hi8yR8zqOSB+ecQvYv5uE+Jv/3xRG8b2WHztEXH4zqvGhVc8HBdcf2nstPriMfGb GfHzXXaMbdcbGn8b+2BMKp+StOXoSvhUfBJXQulF2D5RLLXhff/dj2LRRReKHfXTX3+96S49o8mX yUJk0vS/ANjucS2w5wPFwUV9zbkqQc5V42XsSKOGXOBFfsYFfgikg5fe9GLOcE5abvZnd+YVfaiY eSZdjK9FSbTgWX34IFwAX1nUkV5EuA1vdYOSRIyMHJum541+uvFnoTcDwRpFDPFB0uhdeOCYF8di A7pl3gtBaK5LuHlDJjzy1KXwqDJM65NydxjX8sTT+viAvUU88REMGY6H5eA7+AuJdist2qrP9IUX mMDqRoJF03aCRIGXecBO/Mp65D7BEyvleIyjkP6Bs3DDi0ZelIBV9qMzffYFPhGOejwGDUfPQgs9 dG6ig3UqMgD6ZUtsR1HBKiIXfl4fEQAv0TP/aAVRnUemylYTPFMVlrDmD/4UHWpsnbclVva/+pDF 3I1XkJFLRZMeLt6IFv2lmDdbUskmWIRzQ5gGZkcjhthuXdAqZXjd1VvVi+BCmidWxK7WVUEBOlXA d1VvHmfimzkg35R5HDzytZCgPKCirKCisTQdnd8IEF9Z3vCZ9QBGl+BeW+AIuf2gDuziT7kFHjbZ p4J35hYKQjy5WLjenIRgFaVFbEXEFAEN3IpvrnlZ38oJp3EGiBIq/uCCWAJn40DS+KFL9yJKsvxS H/IlE/kcCIpE2ygGUF5ZS4Mwjp02B3TEIV5AQVfi+SyBoAuODg4k/OEt5k4oM5d8yyx9wrVQ8U5d tBHQ5mmhBQfFxRefGjf99W96duYmfWJTt01VsInnrjxZqo0tWUSvui/X6hN6fRZeIq6+7dp44O/n xPxzdtUtKN2qEurMbn3i0CP2iy+euyM23GB0bDlidBz/hwfjgKP30Vcs6LkjbbLg3a4Faot99o3l 5v4mtth0dGy3wz6x3d7nxHo7j4kNl1vA37qPrXw33Sprbxi7jlgiDt51jxi50/4xYvMDo+sSa8SB u/xEVx4YuLJVOvVfbLk44tDt49ozTooNttg7Nlh3dDz4YTf98P32+vqSKdE214IxYuUh8fB9j+iL XEfFW3ddG2utP0ZfA7JnHHvNv2PHXbaIedp02wvXYYwvM3OUzvKfhz/uQB5+KS8+aThp0rdx0snn 60tVN4o1V19Fv04xHQ4qykm987KDBMzcyrM0BdZyGBj+9BVs5WrwSXaS3HRMGvY/eJl3OXhTCsLI EWAKknW1XLpF50lSR+cNV+8kj5QwDpORczT7U3LmVE5UyQM+5CS3pyneONdxoT7nmXv0hixkSx+6 EMR4a0ySqrfrS6OXXX5Jfdfbr+Pss/8Ud9+l3y/VV8nYF+bDmTa5L3lmAhszNWy6ArX7iSfF00/f FLtuvay+jmayVBBffahgl0MOigHfvuIc3GbkXtrY/yV22H/vWGnInPnwu/h1SP7gFX6m74PbIM46 /NDYdJv9Y90N9MnmWDAO22uL6KQvEybu3J5p6ztQv06yZzxx00Wx0SZ7xqYbjYpL/vFhHHX8ntFP V5h9K1A6t3fuEaMP+2X0/er5WG/9XfTl1rvHPsdeF7scsE8sN0g/8dXeKdZcY7X45NnHY+4Vh8fq C3eKkfoE8w5j9osNd/tdLPzTjWKdpfvp1jxpoQC1OlU625X4kgqFeAvKWS6bTX5ubPACg2KXXbby V/PImTg+CUQPNvh50BG/woM+HevViIri2zKgF4GgG99yAbfwKDBiUPnX/rph9JwrGuYR8hldmIuz nmMFWk/66ANP43l6TLgRchxgn3HwlfHIN/yUOrB4WwflEHmFrGavxadtcpHhIiO7U2+OjDU2Qzlv 2USrnbqDW/VvLLoaf7lo1egJN9Gtg/WkDdB+zTk7XZwRYnCmewqtsKWBaZpzMzwEt+0YIFyhJF76 IZkkjFgyobCk51whYoRacMplW+K5AD4JsprCsn8A1nkK3onLWM+6fcEGwHqYyOw9hgvD/PBf+tNz iWURH2TiUU6WxQOhSEXFMs/IWDVEIFxkeO4XQq7lEMBXVAXfj9KoDRyYXzA0cwtw3WuzCEGVxOzH JlXTRcVG9WBjoqgTggycQWplG3gqokciNG+CaLZwp6K2+m0XQqjrgFku6san0lpNUYCuKh/C8h+6 icB7DFCEk3q5YVnN8Yx/ZLto4O/c1tG+T+Na1rYmjvHILb0YNRxdEOGcU0X0zgF4lxewjLfw4I8f 7AvhamwQs8oKfqxNeu5XX09REgcgFmRwmwobivNhikK8qOsFfysp5nYEyCp1crBjQRWNB6qEQt8a GKKdZwDmZHrerAfHkkDIMw8JdcKTueKV/fCkSCH44XL105dcgRBWnFpg4pMmYbN0ruSeJLGXVwJZ aNhwnqdFc/Lkb+OoI3+XCzEbPaRJrBfmYh9ULoLXShddeZv6yYdx6lHHxYjN9o0n3p6gr0fQFTN9 SKKrfiB+maFzxz033xGfTu0WvbrPittvuzOmzzk0fjS/NmaeSBUrbRjXWnWxeOTv98ULb34RffRJ usfvu0/fH9cRa686WLck9VyQBLbruaChK60S37z5TNzzr7eiV+9+8dGrz8e4x9+OFYavFj3KZoKr QYv/aCH9DurX8ZebHtbPKs2hKyrj41r96PiwFZaOgXPMiqHLLhND+k2Lux97Ww+h6+rKgD7RZ0C/ 6DVH71iof8+YMuk77QPlqNmyi/iVeBnuiNgV+JqFh2Nbr7a4995H4r77/xW//vUv/WlUfxu5/VZj mvhkTs0JYsxzMDmoMuaNEwvzlz7EAiJygkTViwkYGg8UFDDcarW8QUQfLMgVmcYkrleODdHDSz5k sNtO8AuZeTJz1IIM+JCvsJUOXhRMI4D0cF6rXSdUJhti7oUBOhXkIK9v3zn0s2SnxnPPvBxnnHGx nx3MPE//1LFRN4o83E9OOL/Fg4tjd116aeyw3R5x7Pl/iy56tpEJvk0/xbbG8IXjzrG6ijZhmn4j t1vcd+fdMX7qHLHWivPoOTFz8POLy+k742Lih3Ht7c9Erz5zxjcT3o8bbno8Vv7JsjFA3zmIoZ3F s/eQYbFo/4jbrh8Xk6MtukybFDfdPC76DlkuFpijrydXbOutXFpz5QXj9lvvjg+/mKa87h73jbsn JrT3jTVXGqhbBXPE+ustH/966LGY8KW+d05XmnvMrxxs6x2D5+qtK9h6lm8y84J8ybi1r9OfhNkx 0rExaYLDXKAc4ur2W2++GxdeeJUfjVh48CA9w8QNf6NkfGBSC/EkvD5qTiHP1E+aO8boUOR7ARFe xh6ZKFFejje6ZlvvWdfB8yMy1AetOPoZP+OAZ57Yl1cEPN+CD3+9UK2OR6tugPxDNlNn/FdmOrK5 8DwJMnAZg0w5VA0VV1W339SGf5FHvuUcawDMzALd84qUOdnXdYzmVQzlOHokI/FAL72ga9FDCAJL H8E45mYleea4Sb+jdvWleTLODFIP9NwhkK4ZJ3T7/wh7D0BLq+puf09jmBkYhoGBoUqRIqKAFFEx KIoVLDGowdg+u36gYBKj2HsJMbHEoCZqIpjYA2KJUUSaJaCISleKo4C0GZje/s/zW3ufezFf/tn3 nvO+e+3V19rlrYc8tV8bJGOA1onT0KPTjkU0VcgjJbjWpdGX0SkxlxUwPwq3SNN9FP7CtbMjVG6I 2EvoKp/kE9ToR4N2ZB+elKHbyOvwlD44YkhTV7qEJZpFKhI+BaJ6xqzvW49qg4f8VMKtX4lNn+/B SYxtEn/wDm6AyeVUpYsxHXcgS6Z/9B/FvuoIMrHBgMkgckFmW/kOUNppfIzPyAnBHkjno22iu5W1 jV1eMReIr93AozKHGvrmoCn0tooALWljllemU4dCndzzI459M7hUtS32yducD6taPNrXQ6NvaO+V yA698kYJT/mausTVveIFM147UZNRYes3u5dlSll10sFwoN17hKzrFmmnF51Z9MBtwgg7rhNLAfrG NpXHsJw5gHGOJKLZ4AkMOu8BSadXafa1N4W6XOsIVbOCgHyOUPjZn+hiZ7VAkz31g4eLiYmd2qCD kS2/qACB72o76f8+vz3qmIe1V77yTe12n5rMJcNut3qojHrIg4+DTQLg1iJsw+p2+eVXtZ9ffl1b zSUr9XIRtf2Oi9uieRvblZffnndeuVj0HrG7V21qu3GDeTqozGds3ZbyEt9lN1zfNhCv6LDmrrbs zrvbwiU70o4c7BT//vffsf326mWcYeGhi7icn+i66ba2eB6/6hDP1P1JS3iB7wbuX7pjpT9oPieL yrtuuaFt5FcXZvID5wcf8fC26tor2q9+vax95IOfavvxnrGf/vir7Yc/+Pf2lyc8uJ3xmbPbbf6a g/bzPxZWmYS63eaPXo1P2Y5B2GZj+q53faQdetiD2tOe+rjc8D7OYInf3Rr/JU7ISMygy5mP4V9w 7ZiR1WOdjsPkZO7pa/OjeFQOz8SHEWDMVH7ybW51Xvg9Z5Sh16boZEei5HJ1p1NudtPGvooHVvDI pa6o9Bnah33RT4Y9VeKr6ASg2yfMs8BvfeupbVfOBJ/Eq2t8klIb5UfUo594mVSBV+lMrYBnj192 4w08dXl1u/OWu1hEgYdOW8zdri1ZMKf95qYb+elc/MLgt+ne37fbVqwht5Ykp7RxI7+ru8O2u7SV v7+53c0ZU6XM5iDk9ltvbDMXbJucdKBUj513WdLmrL+3XfPLFSyUuDWA/LqFex3XwWM3fvNUnbVv i9mL2/bzZvOLJDfSX3knIXHacM+t7ff3rGsLt922bb3rAe0hu8xtl5x/Wbv4299p//GLde2b//nl dvFFX2n/cebb2y8v/Hb75pV3Eo+ydRI7cwQQUvhCU+pODjX4CbX/z2xbLpjf/uGMM3mv49r2ylc9 L+88DI8eZ21MHf+JTzIll7JPfRJ78ZRWApMD5QvzqfJWPhbr7o16EgNI4TngV34Y2xr3HPtcwFRu hgn6x2IZRTf0Y+xI/NHR3MhYGpkK1BluK/+zr08YIHKwIr725MC0dMvEA75yXObZj8o+INDKIxOj CBZgnvFQJftpxi5oHGvHx/7vvkwdL2oMLr1krg/Lj3JRhBGorbK4+liFrXkmIw9UwlA9kOsEGpvk Rd2i6u6bE4EJ8OyaeoqCToFTcVv+Q3aRd7rBR9+Wf9Vhoq+4fMpP+Cu2FIzvzqszpC0Hh+psQR/9 FWtVyP+hS1WKd8ghYqud0VmjUrCBBv0av0GffB80oA2fBR26yVgdQJiGd/HjO7qUP2p+7DzkCX1i HD0rTiN/whd5niSKf1SYEn1rZ8I7Z5mwxbyIJWyrr0GjSny57jAmk7yGh7hyLZ7sSQef5KHzgDEF I/yTJ52H8i3mlgxgBBZfyEFf66VLGri/unjGQmKkD5PD0sY/kpTulXvhljb9UHOH8S150Vc62Ofe RNjER8l1bHTxqU+Bp2CHthDM0NjPwVe6isCeRoXYubJAq6bATKLoKbJMKMl9tll0CQuCxpeDBdxH eKj4IuB2NYPjy2jdanaMoB4jPKUlPXJjOFWfIBodJsKjU+k1SYguAw2gVqGyx1eBaGtU7/pnoIqz esJ3eyMfOm2Wxst6jzn2Ee3Nbzq5vfFNp7cf/PAnPPXJaxBoG1LK1rI9dMiIffqCj/7UMvH8bcq8 MBX2Fe5Kvhm8zHAdl0jzagR4r+Ulptynzlkq/Qk9H5xRdq2Xvxaq48bcjD3THyWn6uLH4qJtvU/+ ZWALiFeJcO8aE6drT4vJNJOzGfrWjwOvi971G/nxVR5M2GL+wvaExx/cLrn4knbbhgXtBC4xrb3t unbW585u//b5r3EW8Lb2TB582GnbubnE5oChTjU449fkAkrBN9ajcyZtbaHYEX3x8E948/5nPv2l dtobT2rbLdmOS8V58xgY4klTRR4VH+3rvoWHeaRs/RnWtnUaZdf040Q4zqIJpRCn8q08ouGEqjSs XK0YyrN08dKbMR05MokjsMQgPodDzzVtMF6ZeNhqtzwA81EHd6f49YaueTTNwyTPevbx7UUvfmb7 vye9mYdnbmRBxNmzlPJv7faDHHhmYiYRzIj4A1bqnRc0Z6JXaknzh5TF2cyN/QGCy6uduXzJC523 mJd+axwcOFxgbeYyvH4Vps83bOA3emdvkZzamBf6opNJiM/N6zpwa9jhq1Nm8LNdY6EBMfGSx2YS Pu+morKZs2ren8nhRzvsqIe0mXff0L79yzvb4Y8+ph35gEXt3K+ezVm/c9vZ37io7fvgh7ZjD9+D J1ONLzYh13yo8UUtMSaxr/2aXCsX9a52e1D27nd/lN+Q/dP2YH6ZYh23l1iMueR852MlvqRulo79 2sqt06RNKnxmvPlTj/QNYOX52mb8Qu/oTosLNYs+MYc8gMikJUD70jp40AYk45mJRD/OeC1ucqyw 8w1b9RQ3EsKPfWj0z8B0m3OQ4Clvem+ynrHPtq7rWFQqN/0JuLCYka/iLP5Y2JAoKFML/bK2G1Wa gYkc2scCtGwE1nnXQXrRVA46JqJp9IU628HTvCeFXWzAXzdV6RZ3vQNjv6bG8rP6yrcma/HHR2w1 5xNflPz4puO4f9/ScbRrjMviqJBy1R+C2C4c3+mD4sI+e7Zrr1hpASf4Gfe1DagEwI1B8PqCRJ9k HJI2OhsPdZke4bJJiPzFK1zh5k4tLNyPfOiDR12xw+boCIm8/fUF/aSZyfEYRKP6FdvKQbDKl7Wu GP1L/tV7sDU2wR1mLlLLWAlHCXMqZVv5qvTIgtaWIZ+d2CBu7Bz1kEdG0esjqxWdskWaabLgoczR 95L/3bjhHxDiD7lou3CfyNdHucQeWMU5azLxwMmMHvn5Sp9Ing9nl+BuJATpkGxLMEQ6baKsPHWo ClcxCZLH4g1c8fnESLfBn+KVjmFEU2o7Ay/psDyGLTwGySdIkeFeZCvHBnXx0xcuWIen+WfrWUVx 6qiUffH4iwNtoW4paH1T6XK0pbXddl3afMv9l3kC8xNnnJVXdkin/v6JNIKWCSswWkzc3qbceuOX 0ipw7nn0J+2Ku1Y2fpGobb8tNAwyXrLdfvut2uKtZ7ff380qDltd4La2qt3Fqxu2XLhQNhQTeZu2 dNGitm75nYHlDCUtv1u2oi1cNJ+b20uek8Dee/AyVQSxNqToh83t3lW3t81z5uE2/KPJTLbbLtq9 zdmwoi3Yaa92xF6L2ve/eXGbvXT/9twnHd4+/bY3t1NO+1B719ve315wyult38c9sR2118554a88 ZZJBwgGq+1dpiSt22OarH7K4QCfMzc3sf/u3/9i2WbhVe/GLn5XFijQTv4avdSI3jWfiYLzLGdUe u6Q2LqKb/kaKPHAwROYkF3tLDXT6SYD6KQesyEJHj3o0jc/0PiO6RPJ2gK+Fa8G0z8nHTi+NMpyY le2fcqI3W2MzFjiynJJhjYMILo0/6MD92gdPf1N+/ulr557HfW/zsNDlNlzwoVtxa1CBt/mhc/k4 xNumTMGRzU72qdp/N2zgjC+JMZff5JWfXzNnLeaM7/y25p67Qer6bl7flq+8vc2ctwA2tejbtHk2 ObNrm7mO++m8EQ056nHn71fkgYcl5LXvVTSvd+Z3TDmGaHfc46Be+m/aeE9bjux55LUvZffy68w5 23MJf25byStDHvnoo9p1l/yg3bqShyKe8rS29qffai988Zu4d+2T7SUvOqVdvHxee/6fPIbf9K1F V+yGeyxED+PpIKkPxp9tlYu2s6DkoOwLX/hau+KKq9rr3/Aq4pFhM22TvAPPIg9tlF6/jzzpLaln UA6+NIVv5mWf7xRnBXD8S16wr9+Kr0HotGKoP/iRFb6dh1G0TnPOSA8w8RJXDsktcQYdsc2BMfXy iwtl4m2Mu07JIxOhsy+5agSOMPiKLp5tlX8FV07wwRr5X96ECFpzSxsjg6q4mUAxIn2TesTY77Br 4AUob2jCSP1SEyKNct0UhliBYVP6AHC39WejhiCg85EuJ3Eh1xf2nLzUmG36siSUKf7KqXgFe6KP 3a76e3DVR1XVcRR2rWWRig5pUR33jAFl2O3ZmMxvwbOt2sVJXsgbee5P6VZtxcO2oqs5CgLwbZMm 4x/7ajE+5oc0kg1pxtiHLyzGb/o2Nfqt2NLJx9wqfFoR6XAUbmwT78wRwpDFeCndhC/zkTg1fktG nHqpXCsbSotq0HfaJ68caAIOv64rDNWufCUu8PJLFIOONnH52GY2DtCYV5WnXpUz8q8FbfGphaf+ tO5nrBPkNnC0qWLV+6xMexFPFSMDWDWV3i7qsojvdqhfmOYop6NqimeBFFaOGqzdwk7l7bni6CiT yzrFQUD6iJN3BFm32AbHVPrbhoE4eYgfHYgwZOEbPgYQGQiEUpn6zZaSY92SgcfOLn/O3jiQ1WCm HZwtAOwaMw7sl1kMiL8HmPc9CUukFBHELJh04gf++jQuVa1pf/X6dzOp6PgKSgR3msjlrGHJNBlL Me2yqHEN6KniXyGlj5dBV/32Bp7eW9eOPf5hbTM/tn0vZ/0ecOjBbdGm5e1aFmazuU9pPu+E27xp XfvRNbe2hx/1iLbDlhvach4C2ImJfZ89tuLy681tDu9S23qrBW0LxF7/05+33Q87tO296yLw7mlc B2sPP+h+7de/vrat5D1v85mw5s+d1a65cVlbv3C3duyhe3GGbmVe23DkEw9rt179q3a/PfZr26z/ Xbvwap4Y5LUPLvhmbFFnfYg8D5RwxoV4+I6v4Zd02OGXxKpszjJq+A4XG62cVQVmDt1w42/yI+yv PvmFbd/771EDJ/mTRVdyToJ+lsB6961LgFk5YwvHibzye3BEtfQZRJmj81Q+0JQcK7TwCE3FqKDF r+JZued35SIY2KA6NVhSr5HKtKXAh61jlQsTUcMheU8+kYBalWNU9FdSOj06qZ8TwSLue/vYx97Z Lv/Zle297/sYL+tlBRTeGRYUQn6xz0ca92MbOMoyHwc8CxP7JfKLhXSz2qo1K9tlv7q7PYbF0sK2 uq3kkvreRx7Udtpmc7v6it+1eZzt871z87eY1X5x3U1twa77t6P3X9LuJWc4qmkPe9xD2rIrr4du A/fPzefp7Hltxa+ua3du2qo95gkPaWtXrmg+s3MIv9u7eflv24281HdLzhrP411vyv7JDffw+pCj 2txNq9oKeO79sIO4pLuBA5HN7fEPv18773sX02/87VP8mUvfONSOzROx3sqxwZ+mmW0caE8esMUP xij+HmMJvqAFnxgQvU0BR1/4E3Rvf8eH2xOf+Che5ePDPnXw5I3Qw9+iO0lkzFEVZFgmk2evy7vO btiuRAq62YdG3QPV6ADKGDMgCqpfya+QDzoHMvZBIYLdDnRwz5zTniEf3o6sYuZDm/wynoJToy5t 8qLu+KQ3R+5m7A4v9R1FfAiw30w1bzP2wzt9aLp8SCI5fbXonXziJ6qxrfu94lB5Gv2BSy2uSpUu 7POfImOKY41636f/iiSetrLJ7Q/yENc+JWEphtiaoJXpn1sle6DlWxICNU9si06dVt76ZugDUTUX zDabRjOt1PjQnBJkKuYi+0UrBn/qgOyKfWVLXfKHktjXWanKrQkv5amnc5rMumDPfAmOPj2vPIhS hqqUtfp9+AUo/zkQVZfopu6qWuPFfQ4S1FU+bPUdjILrF7XYM5mHyQ3Hp/CGl+2SzEFBz3gKSZ+C Kvw6D7lM4gud8kJtTEODsepPm0xzsI2Nk4INOWs33NJ1jd4gaaP8IpM+E70yz8hTLnwpots26NKi zMw91rQHG0SOlgHJOXkaxsLVY9JPrMuRwmZcXrVSMSn/9mYFEDsOhrPWwS9bzt3xrTZWcVDyU8GV rQmuEQ5Yk6d21M8CQiYMNPPFrCaQA6k8kkRpZ1BAmIZFIe83gF6dKzlQyIqDrr5QmJZSrYlbXcqB aYE4AwbtlgxG/SxW+HTfDZ8oSD4aIb3vOwsd9azUkauLxiIyeoEili8zPemk57UXvOCE9pznntyu 4l1Tc7fgpabILpVLd9nHT5y56mpFnraUHiYQDA12LxvbvPaiVz2/3Xv1Re3L511NAq9pa+cvbqe+ 9iVtmy1ntP34Dcl3vPkV7Sef/3T7yD9/r73sbz/SPvzSh7Yv/+u57brfb2wvefXL2pH7btsW8PDD O99xattq2eXtlHd9th32hBPb1794WvsWN4D/4vqb22Of8aftKdz8vXnW/PbSU09tx+67ZXvLye9p K3Y9qH33O59qs666oH39wqvbLgc/sr3mJY9vM7hk9cQTT2x//pxHtNPf+jdtu8c8o+1w5y/Q4by2 iXuZdtz/0HbSK05oC5jEDzj0YZyFO6mt+PkF7b2fPKet3WQ3wBdeXtOrGD8GBjvg8E384mTD//SO 6mtIrvrl9e2EE57EWc+d+Emo8xK7EdeZ+jcCEMJ2LIgd9BwAktPCI7/zdtAAXdkTuewLGbJr0Ogx Nf/8RD2tgJpBNrABV284JKeBGfs8ETQNFgwXF44j4DiAVG5Tl2dg7lOio7mjvCrJmy7P11q88x2v 5RcrDuNVFye3399+Z85YTiZaJyb7BcSOJfaPyvPSO12Ldl1uW/RFlouTw48+tj3hsMXtY5/8alux gh+m5wGak1/38rbfDnPbjvc/sL3n7Se3O3/47fbGj3y17fbIJ7Tvnft37XcXfL2dd9lN7YGPelJ7 6YmPZKKb2f70pS9qLzl23/a217+vXX77/PatC/+1Ld20rJ3znR+z0NunnfqqE9Ftc3vosce3N//F s9vZf/O37XPnX9feddY/t1OO3q7967/xHsC189pr/uplbZ/Fc9rSfQ9q70X2su9+tf3zLze1Vzzj 4PaeN3+cM3CrmMBmtf9zEq/O2Xf7tvV2O7X/y9OrT37Qtu2d7/pQu+qWe/GFfZ2JGZt7d8epwICn 9LE9tXJKDbCEZQ4Lw1/xTsUDH7hfO/4pj21f+tI3ODPJ+GUOUGoMZB9bjJFjXvVzKn9YjLE04iUm IgATbrAoSQ8QnHxUT1xzyZIxRbmdtbbM5Mtm7XM4sW9kgSKaCNVYNOwHB3APfnxQL5kFlT4ZBfUB /KKjgsNDInPFbZX4U9QO0p9m7bBF39SCy7nAhVGN1WUXhPBywZWYIFpjcyYCWEYO2uNfncC+f8GP TIQOVWiTt78swV62NsY3bO1HcaTGSyZfecQ/YdaNmNIdQHAzZrE7FuhK8D8sgxOtZGot8MwdiMoZ OuPckSdxRuQYByUpu3p/VX86rdx0SRZh2mV/1r+K52vEQcwZ5gA+C3+d20vGya6Xl+My78G7uxrz 9YPKxNsyrnlPuDzSVPy1QR9bOsuiDUTs6Z/Cie9Qp+5vrtyWDxzDw/Z0PReZ2mXbRCfpwFa//Lt4 Zif8ClaKCCvbtUI+oQE2u8d7qo9G+y4rAsFVdWyj33o2K3HRz/i7T9LJxYzn3cdRqed2xoGo4MEA dKqmg1REZfk416UvxVjl2rfVNchZgENZAVcf27st1KoIN7bqJi5l7I3Yq9esuVvu+NYciQfXIyqc mw4NuhgIVZka84qR/BTpSrpwnZyUMER0pypSuMqMhXlw1KucHwRlYITzXSV9tRtAtAm5TJLI8BQi fgpbj4DFUy8n8gyGKKTeiUtUkKo6QskoPlqimfLzSMEfq5duDTeHH80RuGc93sR9b1/l3WlesoJD BUwfoHcGktIk9muDemif/LKYZV/9owu7iTVIrgV/8oP/atf/dkV+9eDqSy9rNyzf1B73+D9qRx68 e/velz/X3vCBz7bl62fyM0Q8HXrrb9oPLrumLfvNDe3HV/6mPeyoh7dj/uigtuyKH7RTX/PX/ED9 Sp4IXNDmbF7TLrzoJ9ygflu74KKf8m6vg9txjzuyzV71u/bW097Zvn7pTZxNm8fvo27RLr3ov9rN v7+r/eCiH7U53Jj+pCc/qu3Ba0s+9q7T2ye/dm1793tPbhee+cn2rZ/9rm3JwyDf/+4lbfmsrdvj H3dUO/SBO7VLvv319vo3fqz9dvk6ruXrXztChTxmY7kDq3HOmQpdAYL+SQ7gsCS7McD3K3jC1xfS vv71r2rf+94P2rLf3hIfGqScKTWX0mtrI7tiWfnkUVJQDCpFfczKqOAWsPH3VTTCEvfOIwOBNC4A ZcqK0I5enKhbgA95EEeJMfBkgRDkYHR8J1hzsmBDpoO9MDt/DZTmZ88nlAwNHPzVi2c+8zgeXDiF e7P+il+uuLQt4NcISoz9qzq/aZcMh1/+VA3f+rSrA4r9o1QoOVohD+/HvO0317dLfnx1ntL77XVX te7tUacAAEAASURBVMtvvLMdfcwftaOO2K/9/Pxv8Hu1H22/5dTZbF4zspBTuz/8/qXtd8tXtIsv +DHvJNy3PZGX6S6Zu7qd/sb3tzO/9dO2BU+QbrNoq/aLSy9t1994R7v8kh+2u+csasc/6ej2oL22 bV/8+D+0d338nLaOy69bc8n0zl9f1y698uZ247VXtStvXtGOfszRyN63/fQ757bX/PkZ7dHPe347 dKvb2vs+eS5nwOe2m6+9tv3gF8u4L+7I9jjyf/Xdy9o73vDe9rULrslZYv1pXL1lIWMKcZr00/RJ co+YJEUMCynr2AD6pFzF+wlfe+pL2rJlt7QfX3pFbsKuBQu8Ek/8CIPKK/Oocis5IU+dy8cYj/jX WQ0n+oqbtB7wpnQdPTPPvNBzwxaYyEubzLcKooDJR5Axjz1RqPqhu5KmuAOCfsm4CFFowIju03E7 iYu+cfAtTZ1JUR8/INGeRWDHR/X4pPjSDE97nw9pITRy1LRey8EeeTnsqakdfihtvgbe6TPxqX7m h1oYJotTl6M8+daVKKHdEe7WWElbThKheKs/2lUs9J05ISZF+ZTcFxjiVLtKxhNZwONv8bRbtoUG HTtUjLtXePSVvMWb5AJA8VTDmJhLyQ/wYgYM5KfPZ/DZrEzq2h05GusRawFlQmONGxknFRtEraw5 K55A8To7X+1yE822jEdqhA/jCxVOkZn61fU1dcjY4vgSfTxBY7uLLlYQ6CU8AYNO1TaGFj4DzlZ4 4tV5u96Qx8wsaG2MpOiVHNUHmlyBTrzV2ZzJ2M2+LgEBHtqsLdoFLFa6pQBAFBu25iYV5/3oDGz6 PCU7lAquu7KJeMiMpfVBF6bqyF/0oCOLYhxAD7F2OI5kjAKSGEWFOuiJTiKDJ1HlUMXDuMo7cJSI 7YsWPzi8HeItCs4RBYierJUggyGnFg2LT5O4yBNunsrNAUcj9IWJIL7GiF+LIp4o86ZmrJntBEsU 1C+nOrNFQZZe4qsir6wNv2ja95Qob2+zhxIZ/mZhyRMvgwuOqURUrbInfgBPzvKwlI7wCg66hn4j T/htaH/yzCe3m266hdcK/Lqdd97neFfWz9pLXvK6+CSXnsBWT6ncq/3J6jRQv5Tkxw6SG7qtkJhZ YOIwE87XkczaYn4uSSXgYK/kKbh5LKzmklD33LuWCdYfJeds4JpVzfd3+QPcct2wZg2/WjCHOq8m 4azEOjjPY0Xo6w/uXbWWhdw8fM2b5rGJe83zWoZ1/IIEt1LxtCGX3xC4Cry58JuDPv480QbOyPhq EH/BYSX3yW1zwEPaX7/hhHbGWz7YLl92T5JcW1bxtv6t4c97+9uKe9bm540cdM2JSsA6zY+iVQhU JgBqXkKpSwDVVJE2fhWbQAnWl79yRvQ5/im8O4xF5XW/uqHdeMMyErryxEFJ39vZnKgJPW7hy0BT KvoV69qvBuWbq0Vv/KoYQX/OrBgZJV3kYGLOjULHS00OCSg1+IqQhIgSRQvIPDZfo3MCXD5yYMlN 6sIIrn8+wFL3WMADsA8r/Mc3z2+LFy9q3/72me1Tn/5CHqDxPq2yQbSySa6TydXBgXoNqPq1BoGc ctfI5PzIV/QwJzB7gU86dzNX86qYLeZyaXPuDC6PruKhAi9bIo/cWrt2Iz/HxutAen0dZ94X8ATn pvVr2mpeM2IOWlZxn6avbfCnsMyZ9ZzFms8rY2DC5dL1PLgiHpfeyff1jBcL+qtMfFH2FlyOncvB gJdw181e0F75lte2ba79fvubf76AI076A5T+Goq/67uAXBaPSKGvZ8fLJ1PfxsCafjVQlD5OJH+A Z+wSzMcctqzm8u673/OX7em8n/Coo/6k7bjjkrZ06ZJ2/vd/mN9LrUQrKVLV3pBlfo02opsRn4c8 8JUThSUTTvbk1PWjXpz6hOHE1NvsV07w3YKuq63SVjb6XXldjEd+dDG01fhYNOQ7dGqjfuGdfCz7 x8Q2FmiO+/5u78i6ZBk6yStXgSNkeKF45DU45Lc+neS88pQL7YbEqnA5TiJPjKJ1KTqPrqMTfY33 FaX0XJyRhUY1dAr0yXjjE856q/hUvKJkh5Wu9hWLdihzXJ4UFv/1sSv1XGUq7cS2z0V+5yGXqX5Y cdbWYZHajJh4NSEHfJEs3KJXS1PHs0pl7ElbfRXX2pevViStaVCWNntBcmAMe0pu8cf1iffwsTy8 z8+DWmZBOUb4RicObOYdPUCNzdCTHYgce6VVD7+SB10pZdSi1LPa5hcaaCQNjqtZ/FAt2yoP1Ud+ xbBvMi/wtoU5MEw/UkCMDWIWo9LhLGm1s3KISq/X3vRvePRcF7d8Y06CQ5+rdUI0EdCNxneITR7T D2ax/pjuv+IOhDytuA1d5GZeWRwLCtOUzUKxI5f2yqagm2uwEiyMug61sAaoHGPfha4LOFHL4RLa UQuweTNvJE/YqLNnMSESVKxJ14SwhpXqADaLWxN5GAkosDvgu8K2TF/AjevLTmw1fZq4JBX4/rh0 rbodLOSpQUyleiWxLC0NhK2xp0tUD4t+Kg2p8+8RQSygPbrCbB0vKP3wh9/eFm6zMK+yeBBPoj3x SS9od919dx+0i1ZeBkqm5XgXE8otWZUQHl3jS/RV52qrzjyimIHGluhTPpGFl5rcbiIyWaDQucpn 8hffrYlSaSFyLTYyddNWcRqDk/XSU0xoJedL3YbeJpZHWOa14usoGCz1B7d46Su9L0O/TfrytjqZ WNXRhVEURewKFskASxPlyMmj2T/04Wom/8MPP6idzS8CvIXFoz+Z9Od/8c52ySWX9UvYpYcTgH7V N05AZoFSxuSI6NSVNGz1NHst3EufMcB5NnWUDRJqG99ixWadwr7eKCmjU+KbxEMSdNAP8Q2R0jfs T3EOtwwC7uWIG7Iq0IJuTrjg++pXPs4BxCUsHg5PLJ7xjFfkIZH8LihyHBY8cHLQrD6iFH1Q/hwD RdQGpp0ZgNi6WE48YyZ0fesg4b2vql/5VPycpOQTXtrKfvjJl0Aav5zFp65c8dI1w7ezd19BpVB0 TQ5gs34u35pPhVOTo/0KZvmIJ2b1cZyngyWclORCyIWr1fCT+leui5z4gVIPlJR+YdJtc7OW2ye2 XbRN+975n2+f52nrBz1oPxZvP2gf+dBnWGDy+78ilRikDF7mx8gbocDxpfHMPl6psQ1SaHXF2Jau 6lY+qBzunkkfAwOCgSe/kcta5n5Fa+QfmdCDMVyub0ffiELhZsZQVMR6dCKuI4cTU5Utj9pntSx9 rfOzXnZ3XtRlmiHSfSqlt5jaOCDWzBl0d05QeMYFoHGM/iTTsUMOhtwJVt4jT8o2uU8tKOx/ue+Z xtJWOVO8zRvzXxr5mw+KdWsZtridPoaGB+1RTWLwHdvcVu71W4kwUIhaOU/INejoLkxczwgGHgPG Ik0qizkAfYiowsNdKaQp++Ax2oGOcUl7KsdKfmyIwjKAOkTqUXoPm+p3XK1hkfMKB1yzttvQ5uy/ vs1YQj3xiRI19Hd2bCZlqKOO/39l6D1R6w+Qp/OZwdWn9TexsLx6btu0jqWpK33m/nr6NK5B57Jm xNHXWZUMWmCmPuaQY0oWP+Xkii1KpE+wSNXndSBTCjmuhx4Gel6/+1fFHBrR6iA25q38tM2xme/M D0a25ivzq8buoZtY4td8oLZVHzI1wPbC92EwTqRFDmOAg3oG7ggtA0CPsqa0+xbvDS4BJJcVSsZQ nCdzB3CP2qqFxuxAz1Z4ndVTCZyKD2ogUY4dj24iXgw2HPLEyM0ugCIqDANjzx85l071oqHEFpDr rIf01QGCR5MopjRI0OpO/hLUEIoBwqy29957tKMeeTj3B61vr3rVmzKReeO2dWm5RQx9IxUSKrKk CAnvScdQfvnGyySx18EHWODItiQdYiSMoiNhwx8WJ2h5eh+Itic56EtFqU8Lrya78qHOFW92Brou I/zRsfNTW/1htDQhUhSP3KnLAzagK4gZcOAXmj4gxb+JY9GXfujMn3Q5wwSN7+XifB82gzxs7vng 0BnHxfQ686qMQw45kEvG89tPf3pl+yAvTpb3XM62DF2lUffZ0KllRTNZQ2yFlI9cPHogI0h9NT/4 2t79NKv73kVbcoK28rsdMdEJvZ1behfVcneBQnbyLS8HEOKh8hSpxiW7+LjDa8EQSGxygFBf/8KK hZXcF3AGaq+9dm9HcrP/3Xcv557AV2QRp/v8tQ+ljEHKnB79UiY1YYgB1xiLtmzF82EJNpGRXLIC N9uNMy5I3wx/BobkrHzEsV2fKR02XE0Pf/tQYNoIg/BA8OwEC5j/GRvwUPypTH3JwQlMMsHQnsHV 3CZ95DHLMYYdMR04408NAqySdSlKb1lUpoZW4yOK+o4FWhEBJDAjv6cfKY/2CXvY7Y3/t+d1Nt/7 3iXtL/7ipRm/Lrzwx0EdcYvd4JoLg0cs0xcU/ef42qu6DZ1qsVXjkp6FAnRzx0tl8rFe97NRp1Iv fXYXbNo8qKr7CazDFT/VQS67cDD/ZnJG132LdQf6hASdcjkxosq/UplD8lc2/21OYmJL5ZEH0znI Tv5rc4215WyYobv0gFPiGxnpVIDuJjLuWIwt+xmDWeVu3ogNgIVVvGs8m8kcYGzLdvOl9pUzJkRl 6b9IQl4WP0MRedIe3sYimqiAshDW7XGhVplOjnSc9JkJtPjH39Cqid/yNgSevXdKr3dhoo+GALG/ 6vhMukJAVk+L8io6jpNmhxTAO0LU65XoLRygf+q+Hr842orn2BUf6S856wd0UI0NxMacVYcJvnoM 3iCVXF4f5VkRz8btz5Wg49dwhgehXR8Y9yL2/6sMxD9s/5/gg8doH/Vp9DP40b6HotJ169uqr/LU /T1cKeB9kuntxE579FxFr8dau/ivEGBbjCtfiCxtfxwvPqh2TghB0z2Bv/RrxURm5po+nPQ7fRy5 jsX4kjb9OXxqo7rJceRMzYMdnrFNgdX37A+WMbYM5smX8LXdPm1+owakdWIEcD3RIHkVEyEPIyBc hmNCSyvEufmfNpM1Aw84OUrqRmiwAlLclm6pynv6X5wCZOCbyOJY3PRdasUwEzFAXash1enhCMw/ CfyT3xQf8HFyJhtQauugV/vK0jHbL9627bILL8OlzOHy5Ac+cFp7x9tPbVtv7WsVSr4dtmsCrPhG tnLh7ZeTxLArzIBLX83iCRiyi5sTUn4izBG/l0qIjh/iKX8M20StxTF0xarq8AM7nIyReo+i+ByJ ABu6B2ea78XVJ5bgT6MXZkvRWqMe/8AveCN/yC0GmbRNicc3xoKPjClDB/V1IFy6dPv2gfe/gXsQ H5o2ceYv4NIx6EVifg3ttCVcIrnsKD0KVxlTPnYQE+InfgtSdc7qHvKq4tHeyJtaaNnB+kAJhwk9 zPSvsrXFwTSF/agWadU50x6ZA2Xoqkb4i8nsfvfbpS1atDDvCtx++8XtzDM/1F71yueyqJmdThsn YJJsyg5l1yJIv1Qf6f4Vjw6s3obItqFfxaz6kLkczWFa8dBO8fmCTto66u3tyS9grLgCFwdr7zuW qAv9hUls5MCIu+OFkVD/nMWLgC5v+uKPds9kRxn2VSeXX+QbvfiSE/XoqrIypTgR1+BZPrFfjhJf UMnLXzutMZSH+vgE7Rt4lcjzn/+MxFk6YTL3jFp0UDTFaMta7lMS3Ec+fope2OQ2OkyTJ32Vkj0m /sDCDDrOfigKsvhRvja50LFM52/DpF+J51jU7c5CkPbQw2xMLEIsIx/cZnwITrXFN8Gq+ugHBkHI bHLMbXfJYFkUKt5luPVsYXQWX3r0s64Mi/pHlzArjtbNW/HKXuwCXxsGr0FbsqZ4ym867oSm8/IA Ayb+h5f6jH4vsPq1XEs/5bgXPkKp5IpFGgonByTaRtU+p82pSCvwPkUbxS14bYV1PG2nzeZStfqy /ipc8epTOHgKRMgCNzY2e8Ap/qBRL0sul2ePL3J/5hJucTiOxdtW5MFaCNf94Qc8XhP63z8D7w/b /if4wBvtY1twXrhQ8tcTv302tvlP9BdYuAeIMVLNa13CDmRTNlGJLzDeRZEbtxlTKre4IFs0MKke BIkF3CxyJWPfGNYfdPB0LW7elzvxowQUxwulVs0YDR+rl3GoFnUcbeZYiKAzthknAEwdSNX4Jt98 /OoE4ivNnJ5tp8hAIBA5cUS2KNoHjoKXEUGjPUMKFRcq+Q1QjA1jFB7O1AtDocjudMoz+dMpNRZ1 ahJGBgsYL9/ovOrY1ShPJ4iJLirCf515hzGlBr/swtuFg4lcdunDiV6gZF+hYcMREvu7329p28Wf 0QH5ggt+1M7gzexexlrNK0RcXClbdiBA330g4/ATXE5VTcyjrg7se78DflaX1PtgLl1CLy8H42IV 3rbVGQsbFWpS4DMp9EVw/dIvbvoAQMU2/S7D8m7QApc2roNlfCD7+LriMdpMeq2RSE7p/MrqdfHK HnUTw42Gy790sr3OKqhl0YqWdvwdHsk/9YQHvO0g3/7Ohe3KK6/jQYZXtuf82dORM5NF9IISA5p0 fsKVnVyK7/yTM/DKggtc8zt2gq3v6qwZ2hAfY148sBN6DuyAlR/NZc2xKCs3uXYzhY3Y2ObYkCa+ nGy9pBv/wcvBM3kgke6Rlo90Y1zRp8IFes/inpz9mc9iQfj3zycPP35m+z4PdKzlvi/7W+EqK3th KD8fx7dvSSeSU14u9VNxK7q+SG4ok3piGI2iVXQAQW2CC7PAMqEH2Puq9NQjSzjFPh2VOm8IA8/N xFGo8qMySmVoln1EOERWqbr7YAJUBQdWwhP8IhzYwQJUiC6sQA+eW/PKj3qaR2nqga28AMs6iruA 17tzWChf+cvr2onPOTkL55NOemHbZput8woV7UvslWdBWWMSmQUpvymTel2Klqt5YAyk80NrWJhk 9r3q11S6ruAPNGhmcolHfsa8fF59Rd84LqiBlsdf4uUsPhmffC6eOjDyQYp2RRx+0arbkQVNpKkN Bbzoz271r9JBzbMISM65D5fwlIgSpm6L3gcLjKNnLNO/xKFoV/SCPpMhdD6N6YKz/CYj8fQfRigm qUSrOnffyWdS1Jm2oq8W877GLJ0GZsex1X4r0NyzaIq3GkRyiSz7kGtMYzd4tVAaejrC1NwWJuEz 9DP3aqzS+5V72hQJSq49BE/GLpoSi/hXvuV346j9Lhqz+AJv0g9VnMaMY3oMG5RiYpTMzmMoaGtM VzfwucS0xYO5o3pr4Cyc1Dq5Mg0/D6UJH87qNgwdVKHKZCfVyGFvtA/ywWeqveiUbYn8Nfj6/hva rJ35neWbOZfF2XuxzMHkDjX7ZvqHdqB5xkeYbuCS8GzWAsldhGe+6B3FPhPfCw/V4FGLRGmcJuTo LKFvdVeNJVP2aXvsUYdhoOjBH30VHPiZwxmDu9+il/rCoK4MaBWMhgOqFrlDouskY48nHBxqWuv8 Qut+UgrF8sdWR23SS1igUNPVl3OazIJrkFeEOCpTZ2JUp7KEFmAOstKkI6RpqkPoCPlGeROV9lks M4UngX2kPwknYf90xeM4GyNQvUpeOq6V4EkECvxy1NQd7E2cu+yytF3KE2cf+fCn2n/+54WZMD0T l7MXCNNmeY/7w8aRiwFOk0mhUsjKhCkQmH5xIZGzHIKQaYml7KqaqMNHqJbLpnkCElp9pZ/zziiQ kyxuJbR0HDlWAiDPBadFc2WYTfkk9OmZDvDIIh4Vu4EHfde9BnMm0Ay76ukiQXvKrjDGKfpe/+DG 2BKxNPqurS4KCqExFP3cNcA5isAGL0HEvdznNrfdetvt7eRXv61997yL+QWMV+dmfh01ErdiDT1E SI6d0TkytAlmEVc2UUOE/pmIxZ/EEkVGHsopHVpb+GRiwCbDNephKQ8+Cogv1UAa68RCdWqAp7Nb pa5u/qXjusALDhBzg31j6Z9nS/bcc9d28SWXcj/mZ3iA4YLcUO87++ryDHZkAtH/lUeQR0gGFeWn Xn3G2rinUrzknvL4M17RRxz261IdW3Sp/gY8B1SVV1KhYWjZSQ7IR4OVHR91+wGWb4ixcPF1Rvap eHO8OReraXNYdF8Zo4R3SMmRAK1olxVboUFvfT36hKIs2lX7Y6v48lfpO/w32mtb+rCI4/dR161b 297zvo+288//YXvf+17PIm5hxqLoWAHsMvQFUGSXbkhgHCqdoo6tZV3Xa/jEfMk9nGzFt9TW3MZ3 iQt9gwMBw52+N4yEp3GrRU/F0n4ZHj03HDPHQXF87k15+CE+y0CqZvaD8mHGePWAzgdrUIEtvO07 /Bln9Ytt0MUODNfe7OsI4VkQ1X6+ZYmusxLzTkdDqSm/WvgkhyUIT7edbzxsnUyBRy5l6WP95qCs r2iO9cZBq9TFRZi28AckH6rxm/d9xY7YWjTi6JbKTSrQpZ+hO5YLgBaoPlEPircmKE++Q8rISXWr XHDLOZP4XAWhcH/4y+ShyDH6Ik9IhYJ9/Bl9u+yau9CJWw3y29H6uxPo57pECL3+1r5pp6u62vHB eHp3k5dOlT2HRcHSOsvliYfA8j39a9g9YL1+3yq1gg9wcftv4JrPAU+1/w906DZnJx6IuhmbwhT7 2dG+gnhhnz2Aju1jDMi4aZ7g48pb8a079pZ/ZGfuyzhjEdscQLjwC7zWLZt4IIsmeJOvCrcmXxn4 3VVP3GxjfslTxIEXrkoPPaSaZBbN6p4nqKsh7PmhpZTRR5PL8jOuS5YcoiVSAinpcYgg6k7gdq6a 5JQgLxshZr+eHOqLBZvCo/AyODlQw1+hypHGBWPO+lFPgodOOdpbA5J8YkxnKZ1Gj4QMSakLzz4Z hDf2J2kjDjSAfoOjNIPkgCfOWMAV75ZLpWt5kGHF8nt4stLfH8Un2q4ckOKiLAIqAOoY/n3jvrxS 3Hb9uvUAhs/4uaC+gkYjaPTOmFx6OIANtkUPBrqImYSSfZcxZBqnIT58o8JECWpoQIIUfsnRtvFe KBfKeXllBl84JeGhCVO+3KqXgXLXbep0HPwSm6BRRg1uxlv7yBPezq/eJr354ELFeGQAES5v48tG naSx+NuU99/7fryWYmvekH9lzoSW+PJPOqE5miCVDyf+kR+f2Kw8cJwglB8LUncBp54IkzE7FQ+r VR8LG/WJbQz8bs2NwMw/5VDJe6sA5wEVcMoX/uYtC5/eET05Eg1kryJ+OQlkv7Wddl7Sbv/9ne2e e1bxNGj9ZJuyXFgpNvpqT9e54ld+Lsu0Yegk0243dpa/KgbqVgcFXXC8Ap+RRcrUrhEMjXXGUa5f UVj/2k/gAV71T5qlFQs93FoykaGDtPkpLvohzdgjpIr6a+Ngb7uGqkPlVImamvCRydkpFxiJL4Q5 sIHQvr7Zl/uqf+xg0+W4434N2uDZrj/0kfpI441+lDU8NevtFfvut2f7yWVXFA9Dr3IiBwI+NP7V 4O7Y6EFJwaNL/CWaRlGil/QVU/lUXiHXNhMlcviqRCk9QwEoW/3CTonpLI2Zjdgjz2wLJ3i8r1F7 /YgYUXylDlrA+MIFXIrjgCoYGPB8Grk8g/+AGeEyTR7K0Y7yinERJ1i0GTcQKo8LucuoHA3fKFC4 0lY8yEv280Q/7fowZ+lodPExrugodaIbP1HkZDjpv6gf1nwFp/soPmHMM/Y2RN/YSUW/OKVHplZE fepDL5moT23LGOVgs7qjX1rk6xlydC17YN19FJpxpkw+foaO6JR5Ch1yVg2T4svoqgxTRPlwSYxU B7mONZ2VO+qyiZMfUUbcUdDLspGfrXNxsnHmmrbVn97bZu+KP/p4pX1VphN20H02/wveIP9DtFG/ D6/plULgwc+29oK5bd2FW3MgNYc4cce7DkiBee+vFUd9X3RGW9H1U1UiV6zjM/YdV4yNWerDNOa3 8exdLv6srBXDPVwNb/OkHF+BlJ9y5Dck56qEvh+d1BYQVc28HOOP/FJIjjGccuYoIO/lNqZZM6ml YOnZzNhhqQu44MVgFff9NznSAjGLBgaSmiQkxoAhLOncieUZeDm0jjS6od0yzQ9/BEqVRSHG+ZdJ SY9FPhDgSf4oawDYcV9faZAcSLCaMOGH7HR2GducLyrAVSsB0eGCTPkcmU2QFZvFqJQuRGRhHxFu UVfl0jStVKM4copMcNLZgyeDarPTBiRJ/JSdWmxLzKcu/3RbAchn2Br9EWQnzpk5rbCHqVM/Q5nB sqTAEIFddjqvA6lxhKcJog7up5Qq8ZGujVz4Z/xGZh0Vi6RP6sgjR2zxYeGnE8B4nLGrQXPwD9Pw TVz1hQtY5MtVWn/2xByrRK5YZvKHRSYMlPGdZapsLBy0DI6+b9wAXQV+ijJwHJmGv2hKEcVGt/Lg UsH0nMi1+N42cj06iiw+X5WexTeK2BCGZYs6yFM5sZ/dLFTNnSgWDL7wvfyUJy6Mfa2AB0NBA1++ 5cuuZ8eVQy2yCeKIH1v5Z0IQD7XUY8RXf8gr6UJjLsP20SkDS6eNLvDyEkl8J69ipzrlB3lFt9FA k301MtgKVi91GCj28cBstaB7DGXXQVcwJheKsbcdmE0C2R/jyWYXH/xJHhbGWlyh7I8xwGnT/mRc kw9gZLBkm0vnNJk3kjp46/vICW8FG1MaLfKg4pkOz8xZusiyW0WgM2oqJW70ULcCgd99FNzCDy6x Tqyg9z9G0Rx/ShXfhnP6jPzkr26x32101i/KltYJSLuAhb/G1tjheBlfK0x/eTARHhLInbEYO2WQ OSC5SBVfVq6UfPHCi60TTHISno4f/NcXfMH2SwbIUVPrXa6LFgmEoIS25gENAb0pvsF8r2CoU171 k2b4SKOhFPlGj4oCBHq8/rqB0asOtKQpTZI+sM6IL0v6hbZKGXvBtKtM9MOnmatoz0IMPuLFFzGt 6GvcljiiEKA8EQBpd99PXRs6KOMalZjV88dK5fCwVz4SdCuw1eJ4rT8kS+zI6TzdK3tJaFeHGs/L JtnkzB6Dgwc7LuDmP3tlm70LmJMFXNj/r18T+6brpl69/r8x+EP6P8R3AbfmgtltDQs4r4z5KjHn iEkOEMfkMjbVu0eT4pFf85N+NQddDPtQDrT4xZzAs/iFOQgnVp9R62RFfJazpfGhzoTGmDu+QFv9 gN1JvLrcQqVhyhJz3Gyb4E6a+jigLhqh9L6AG7iZG5MYaJuO5plWcAdBBotJHRYKSxBV0sk/GUCD SqhwCS06JgbPrIFiGQMDeVtOi1JluA5IB7OT6dDgdHkqBlzn6KTRHp7AQAUx7jYMVoSk2JbEDUPt qo84Tm6jGJjwcFCZeLdkalu3zl0YgMpWaF7hACgJA3NtzSpcfcO8bCmWY2AuejuwHSi0sVltu14E PlKV4yDX9U+7thqH2MK+hhRp6UVTTeildwaaUjh4SQLqk0sa0qaMHRnHwPL38L29F3DsA3/wHfV0 nAz+fUAg8dUg9slfNeELi7KHrYs0Ks6NyZ10AEULi034UYJyYGBxBYOmi44MnCDoD/096S/aa9HO jFQV1dIVGIjD2uBRUU+PbPW8eV19gFZjITs/Uap00+05mGHwdSEwmdBEVeme99JJPy5XOSCPfMkR oGyjuBrBNHLYFU+jkFkL9IL5PfEpJBWHqTb3nKjtKzkoodPfx1pt1V+qGMOkoLiPLH2kJqWI/gPc /TXOagSmnhT7gASRQUOkxZ6CyUt5TiYpoDvwRI75HwdpKPj6vdMmn4DFl2759KbIUNdQIz88rGNz H0PTZq7rK+lqEYoMKskDYLYNebFNNdDJ/qMPyxEgopex8Bm3+BU0cyULIuTKp3QQb8p/yT3btV+N zC/Y+eVmquicKRwb1WfIMgjKt1+IJZ/w0DDb8nEX2eCs5Sz1Bg9+ZEsfm8+791AhNL7PTh3iE85a zM+VBdtA4MylBTaJkTHThzlbaITxQ2InAnU32qHcvscmkNi8aQNPCqKLtsQBZSa4VPmFizk8SZ57 Sfs1ocSgs8rZBYccSFM01eBGrkgVp1pcUenjzYhndNJfYVA6RcehHzqHC3XtSr7B3tsLIgf/xZ+w zlhQIoGFS5kpW/MJYLE1n8zBgdx17rorZxSlmwVxXZchjzGn5OACNi4ZzINRRi7lGFX504rj51jQ Btz1cAiMX2j3hEuyD8FjTtai6A9RbFGp2ImW8uj0jifTywjNdJj7Q9ta7ky1Ym0q9+Uifhky8Ad9 lIBi4E/Bi2fGFEgzaovEp3LRrTgChtSq63dx8houjQZF6fpuxNGFnE9xx2e054SIwkEMt8wp8qsi 3RjLy19yhDW+G/NIuoB48uhyw4/8GXOxOiTvQ+64FeTipZ7gCqr86nYlCPAlNuYtrxOpxLL3M6VJ VQOGbHqyugt7NTHi+iAl19WBxYnKFupCBYyJLvAv79aRSnC7oUnasNWowTUiokeOoOXlQBPmqNST W7YCNVI90lfAiUOigSwARHznrUNxQF02kh649UKzBoiKwXS/Fx3ltXIHem0pkxzQ0zWyQNAvEMJL +iJUF3e1Tbtz6QxAyZEVMNHZZoKDFilBoKUcoS5REAi6Cq+BwYG2ukBd0IAWZtHCrXL0M+xQPwND 0akjXJQNshQTXHbyl1yQk9KchMCyGuwyr+TIQAuVoSPdE1d4MMJPPRJr4IXOIOikVCixPfxloW6R 2WNNQ9iFNdo50OrPYAmEjXorO+qwk3ghS12o2hb/0u4i0Lw2ptV54IRcS3JIYXzASq5ZTYkfQYQ2 8RAYVG2y0SqA7g/JJoMz+mZy1q8wVP9xaSd2yEedQ6v/VAg5sFVW7Ig4EeHrkaIY8IuefDnJ01RF 3wuzUXlpcAvvArGP3lbEGaXrZy7rAcdvbVOfYbMt8gO1+63qaYdXFjnRiyhqJ4XuWXLc8invskXn ioE2K0v9ul7BE1+79IUC+U+sNY423DTVd4p+5LbGi6JL5dl3IiMPHQgXLJJOiLOBOZaAn4MFDmIS q4HrAiPGV0ykDPchSEm0g558T65Zoz1WJCDyML5KVRItPXfGAlF6Y6By8kjfUoa5i0FVr5xqLMqO P/Epbc/tt2LkmNmW3/Lr9sVzLmJiB497SZ/17Ge0XRbNo21GW3HrTe3fvnp+8Co54BndERd5aGQM 7JvKQj/h/jm5eGBh4KtFfVRHnXihAWc0lj7goPa0xzwEOCOSSBZ3kHE3vyJz3ncvbr+9cz2/QOM8 A1B/+A9PxSsLlqHRzepQMXLuQDdjKkL3l4z1nTmUBZmJFn3kLaPKnTChpkrDFmu+FkWehl5GyQVi rB5RO2xmsvB0/OdcBuP/BpBjM4plwR4F9K7IfmuDepI79kkYZWKmzbuBjbmvf0jMNc4PitW8VvRZ AOsXF1/Q19l18OQemqEzdRVTNiXWRnGllB3uhCt0GS+sdx6RC37lePEoVuXnzJ/hfN+vxGgaiBCk /Hd48ayMmUYwwVdLy9C/6n/Ip3D4pqF3oYC0o+yv2IaPLAIvqppP9VvR15jpySb9IR1/8QntGiK9 iQDQPNiYy861rx1Oc1G3tye2kqTuZVgYsF8WdVzyslIdOIoos9YsJJvyKB44QWb3qn5g/+1MzBWV c36Y5B6N5t/sUsDBluTqR6IRIjeZ25FhkPsMor3+magHgoJFVG86opfC7OR9oi3PSQMTEnLQTgYx aXRmOPAF6039fik7QC06AGuNqhicLn82lzPsVIof7dEMgBOip+OzyNRpXUc7ijjDxsAVLl99IG34 C1RnUgAZ8s8ABjQlguCrx6UVCG18AJ9crkThBEv7RrIA0fahzzjKlkHJJRbqKx5/5lIujWZw0gXl w+gZqejZ9dePlhoA4BBb4dFtsjWdKXV06H8ZsOVByalZtqUfg1EfRCNEUXz0xZjclRk9owRt4aL/ tZkktNW8kVb+2DbibT3Qbm9wBPIxbmrYGQKEczEvRkA0d8TM3FWPAGkLbgTAJ52j/Kkb/bmiKtUh rcl64if5ohNfAtMWfBFjCzv8V7zYqgjFb1FqkADVATywIE/ww1O/iQxGxOgreBuf8n3Rp3+qQya8 MKuYRGb5MjThFG5wqByJRigQT5oLpWb0iAwAXozOgiC6hKImjKim72qxmKoy6deRQkhjnPwz81U9 +TEESTT8l1EIzegILqCqaBd7qbMvz/IgeJU3ialMKTljw1a/l/6psN/5gTZikQ4X39IGff66j90f GiQ3YDOZrCKXVhTrLg7u5P6hflYiKqtHeFVfmsQIOao0cGAfs9IP2B15w17pBWxiurjQaqu3SORA JzAZ5r+GZPbVee78rdpr3/b6dtCSuWK19b+/uv34P3/YrlmxhhcR793e/v43tp2qqd1x3YXtq+ee 31Zz+4C0+nBcasqYAb2erpBU/42uLuiI24CrQODqEyN51xj3Du956FHtHW97uWr8P8u1l363Pf8F b2xX/2Z1mzO3+oYjknE3z91mCuw8laOe9lfHTM+Cblpfi8PKWd+v1nVAF1hR7E9qCn99ZJ1vbXVR 69YTAxmDlCkS+FkgGnv5IEsax/3Fu+zbzvjHN7Yd5s9sn3nXB9o/nMsvcfBA0eCcca4HuySFPHld t35Qlymyi7ntXQ5ShEXm0D2SY0YFAjL76PAzBGUnG6wJ/YihVaGZy201f7QFAZmnRO9jUmKIH2yz T+KKkldMoq9neTbyMv/xUudZ3HPmIlTfVEEJSvRgq/1V+J1l6JJfLJL99SWLdOs384s/kCffC3na t/Eo/OJVclzApiR+7AXcZRtDr+wwvmEu9OaqGnUdQXM/C3/2ZVVXBSUZ8S94OOqPPt/r6LxRAM2r f1CHv3aFvwQ6Dhql5daDPPQASIUDR0Ysr3F26KWaQ746Zfxhm9wwRiqsfhmEZGYpTrUPJ4TmAY2Y Sm0m91JFNIBa6NQAnl8tMNj8jTJJKEGRZUdUE50CrreK6PBBwHbQKDgdCKdngBIpna6HzQGji0ry STCNfsCGA+Th/nQa8cdCQa7S5Kbi3nnGYBudHCDGn06nnmQwTLFnym4tCg38k6Dxi9LKPhd5Q7+y Rp8M1WIomE4O8gTjPgEqHjkrQZv/0k58RLW6jzpUjOSjnZFJuyVnTUJcPMYCSh/fJ8HTjL2JE20O RNrXbaqzYYAADz9of3wgGNlloyjqEHUnuNrGUBn8aqyBIvkBvYkzFmDWDHMd1VrhE/61HZ1Ke7Oo UVbUFRHU+/gAmLz464wmG+9zUL48tNunZOueITTljGr5UXr5Sj8K+/FfyZ9qEc9ScOMjHpzKD/iy dFGhgoUt+7VQh9QcQ//hV3m5X1zru/JEqRnpw9uWiot77GuPPo+Ndj94xM6aJMthhVvfPQ+Dpu1B 54tWKkqLFnxl4LKPWWioyw7oAkgdUtg4MCknkwgTw+CZAzHo5NqxJWRfHSSSbprVXW8a4QE/z/7g 1+nFp/8SL/USR1/re2hLPvA0waP7N7rKRuMs7vMJfuyrxtKJ/VTVQf+YN9gsrf7xk8kbfySPyueA g5N2KpEZ24FPK4U2zR8ARn6XDU58KsA3m/CNPuUnbRLmz5G1Vqu0Odvu1A48cEn72Xevb7scdlBb XL9sFh6r+V1dA+S9TutZ+Wy9YEFd0uRs0Yp7VsKLydP7aR2X8aULyA1M4lv1n0BbuXINceD5Rt3c 41g2YL9A+JidM+F//TVXt+Wr6mbwHXfbo+28/dZtn0OPaW96yfHtBW87C1QXVDPawoXzDTFP/K/h J9H4GTUXR9qKwWs5kF+4cCt05GfV+NnBDet5CrGPrwkVdP5MkwuzFNMIOmPhWF8L+8387NrGPATl wdtGLvPes3I1+s6pd7MRz/UsCrfEF3O0HbrVK5HlUtJfIpo1tx148AFtMaHYfiE30K9d3+b6s2+9 GKeKg3HWL6qQIMVP2TMH0NHc0a+qKaZ46ReFntinyS9gIyfVOx0rzHuOxf/Vf9MHuvCMrSYF9DXu 10I0OuroaSVi7ReuqKJ5BGWxQwowp3JWdav92h5b7UDrxnb9Xb9st61dkb4/jU2nLUjl7bz2wG33 a/5i8z3rbm2/WnlLuG+asWV7wOLD2iLOGm/Iw0XSqKtZQ/8l/5av+V37Db/Zfdcaf7pxDq92Mg7F O4kSuyrvNbL6YEdIXsJJfxdnSMhj/sZB/FgzKG8MO5mDNFgaaMdBU+KIfzKm0zYZp9x3jSIPT0oR UyU6FmQdMvQVg30iEL5Upai4kw9FBxAcdbEtvxmLLu4nZmwnoyKuso9aVzdxuNXbP4LVgZlUkmHV EoPkrhAx9beJx99kQINegzQwRstPzSVDUc2TTwKgviabcDu9df7iHMDhC3wM+BCq3EQ2CLW4FE5J sHJWgIYOY08h4R8HdmPHJVmlaIc4Zb16FMyFwgig/FwcWQoP7dTdD5AKaMHUYySHNowS94e1fPQD G1kEh53YWvglCayxI4XykadI4aXH4C5Ch4SFSN2v1u2cypGFJHxZj8/ciuI3/6U7APjlyM3Y6Dwa KxZue5zkx7704cs2O6GdQLp/ZA6u7JCm/OggjcDYZ1vhha9wsaBTn9xsygCqD6zbGcciLnkVkSpl J6zOoqxMtqFRlNqqyuiopbLfGSjDo3xjR1THFPygG+wfapkjWfMxc2vJKk90GSEzziXPDqkuqXpU UJbGf7Hf5FaadHzSJ4qUOpxtgHhiZ9qAZeFApRhDXCWxhUau2hyRqdE/sWXKJz1vJoQSANP1Hslq a5dfsuHZJ/ZSQav5g2bEM0fKNFovf8UkmfmfimNGtOs26euhc9liTnY6dhI380AO5YqyLQYWXw+4 4iv7kkj5RGLRA7GobxTp/UL7QqcN7ovTeVRNCPnBn9bKO/dxCqaEpsRM+r656uIB1BRY13bIjkg5 9b5E6+hf2u++ksLABynYk0V1xdI/cs1ngJOzE+CkzN66PWDffdqGc69pDz94n8bP2d6n+KThvPk7 t5Nf82ftyY85oi1eOK+tXnFnu+C889unP/WldsX1t7fjn/Oc9vynP6zdedNV7ea127bjjn1om7Nh VfvPs89pH/3Y59utq81TNSSS+M0zQP4NXdvGle3017+uffHi37EgbG3JPge3fz/7H9oeC+e0/Y86 iN+1PLPNWbwbOrywPeVxR7T5XKJcdt017Qv/8rn2L+f8AF9i2tz57cSXvaC9/DmPb4sXzGo/+u53 2413tbb//ru2ay/8Znvnpy9sr3zDa9sj9tm+XXPxN9s7PnJu2zB/2/bq017THrbntu1qYG//0Dlt 1oJF7Xkvel574XMe13bYZl5bfvtv2ze+fE775BnntNuJ04wttmwnPO/E9uLnPbHtuoSfUFy9ql12 yfntjL87s/38jhnt1Nc9t22pYZTHnnhC+w3vYjzra5eySOT28Z4ztk3tkynE0U8mcxvjnWyyN/J9 +CxjoN4zL8Nz4sksRtNnaUuaw8Y52iKfKsbBxSGDkmnBX/jAy/30aXCNlyXt1DM+pE+rq3DbOw6L 67W8RucpR762nXbUMwL/zgVvbi/8xt+xavaF1v+9SLlhw+p28L4va59/3ltzSHHFlZ9tT/ncaxwB 26x5u7R3Puvf2hE71kvK/zsH6de0Zbdc1f79srPav/z039pNq5a3LbSLUjpq87BbrjWrjPVLFkX2 QRafzs/aVFgsjgas+7kuTRs7ucNJ3018OjxRsLEu0K/+ZRyTUD+yycEz81Id6LG1f1LsH9Tyl5iI X9KiX+5hVG7Gc9k5+gUh486YrwRJH76K5c/xPAs4OUqWU6WdvozvRAgttWHQO2tNoLE8ndkJpRRU 1FTJglBDKcMQ5Y0zfDBG6W6gUuIUB4haaYaOdvGyLxedY53NKOV4AB1mPQZPo9UmYZ1VHCBMXaKd NP6Bk8ulA3EiB6fFwTTkv+vblRhBsxqL4OcTb5ELgTCLMtKOHUk86g78bOKLuEtU5XfYUEH8JKR2 uajxLwRyvm+JX8FLEonPZ+gw2cN0eWTh0Mmn70tjbJWfhLeeAiyzirHEHsF8anDRz/oUGrbmJkqk PexAVKb/Oe2sVpgfznxly7d6KNkkjwY2QEPF/+woWywbRl6IK//kRHAnBPHV8Mv0fJBDcg5fhk6O 7rvly31tqwk+Tst+NIlpYqpFpye20X/yhCyYZXxwojMkcSG4WayGw9RXOJoj6qHdlPiZ/fiPSm5t 6M7T/omf5O2f/dmf1yn1Og/g1gefgka/DEbThMkjssCZw5Fz+krnNY1lOPiFqiWKxtpXB7kUQFj8 TlUx5rNbB64pScUOcIrbtLGTXJeWA8ahZvWv6kmRQ/sfFuEVm55onXn8EP5FNL7FHf1W1afn0vBH ZNiWsY+ciLPdAFRX/zB4nHMRFl71xbexrYMAeSm7q5WaupFFgWeCBmAuxhZTkNzPOCwx5e4VK9ui hQvaIw7bu2293TbtgAcfaAfjt5xXtG15DYp9cdMMfmHir9/dXvmMQ4oo37u2/Q98cHvkQbu2Y5/y lvbAQ49sjzv2UbT4mSr3f8AB7cC9tm0nnvTRtiY/2VS6aG/00gALW/Wyy2v/xtXrWNRW08rb7miz ttq5feSzH23HP2T3AvK9yy47tyOOPrJtf+op7e3/eEF7+Wmva6e/5mmT9qc/7/mT/V033tTee9Z/ tT865rHt0fstakvX3YCgc3K27KijH9Mete82bYe1v+adpd9sr3vPu9opJz56QrvzLju1Bxx0aNt/ 6eL2vL/6RHvmSae0v3/TM9PubzDP23GHttsee7QjD96vvfQvPtP++IRj2vxu10FHPbq98O7r21nn /AjbODPUuSbn2E/ssNcDCnNnjCPBM+3MD5GCaL3mE3004mpjRh2DL1xk90NmC389z4YC4dN5BnHa l7yTj/AIl7ALlxyMSltDtf2DElnsScfcZft48vrhD3522/97/9R+yeXyOYOfJF22uq7bNL899ZDj 2kLuv7Q4Zpinm9MnZvAmAX9HeE37+n+d037PAzbjdgqfp5y/5dZtjx32bw/e/eB28q4Htycf+Nj2 nM+8oN20xjOm9CITalIcX7UIGLoMPqN5zB3pf91f95nTQdTi/LygbIbdcsR2naXtFrfSZkE+DR6c rlL6gD4D19iPMnhYH/Oq8XNOG3kin4p0MXN/LOgGn9BP4ytOxgSVdXWpASqZ0Jb+Ucb2fOBgkqFd hEV5qhU8rbLTFp+0qUs3broz5aWMKWNkSnHDR7hDlr6Td665U8lRdseTXl3CnrZxn5s0keWOPPgT KbLYzc86sU2LdPypj2ijJMhWOl2SX7z8gaoT09uqMxqsdFa5wXN6x5UmScZFd1XyVK46ZPJhAlK0 +PWqW3krh20WLsRCIgtAfSu/El/70Z3msqTkowEQPiIOW9FXXw68eDi8RSgZQ+/4f8ac8LCFKaY4 wk/65EJ8hjaFUGcsOx91zm7yRAbkFfa4jX88JS534xxEZVDUL/XUAvRMKBlVtPAr3i5azLNOYztF 3VRoJpdGYr++kmkYj03Fh1oGlZKXWnyuV8NGWnTRJwZJUcHVBv/QXb16S2BKsgwdZZXLvtLIdtB2 vlNnTuSOL/BLXSYEX5Al8o1Wj2UaiAP3ongpS13SZ+VtfDphyM2XnH4rm2RHT8cm+VqjeMQoADrj YWyzWESe8KlBcXgSi1FFTinK4z+07NSlaHHUTLbqBW9r5gxlxNyq/tY3yanBUzQ+odMmYlr5EzUT E28+z1lZ5QcdPipGNT2jiyv50nWm4IYiVRdWXb9Om8beVpzFl5k8Kh/sg6Notxj2Ay/FixibrCNT W82hwqO1WLGFC2zEBTGf4FhVXjSDdwjETUNolE9NxPCfilFrN/LrEavWbWp7P+TQttdOu7SDHrhb W738jvara2+VAnru6dpx9/b4xz6QS4Gr27fP+kw77vF/1s6+4Gdp3+uBB7W9Fm3BmRd/99nCL4Gc /eV22ls/1K5cxukvylFPf1Y75oj78SDClm2brbbKZdgF/GqIP72oYtFt5vx2ytvf1c759zPal7/y iXbuVz7U9tqWy2Yr72r/+rlvtWNOeHYWb5s3rm7/dPp72lNPPLVddM0tcN+yvehlz2+HHHhIe+X/ OS7y7rj52va2097dPvWVC/BXlXXo5xiwnoWEZT2XWs0HozFgPn277xGPbS9+1qOBbm4Xfv6z7enH v6Cd9R+XSdKe9MJntUf/0X7tCU8+OvVlv7ioPfExf9Je/e7PtVt5B+OCXfduu26zvJ168untHl4l aPnKJz7R/ur0rxBrxxhCYJ7zmeQvCng/lnEXVvlHltHP9MvA6xEEBtRw88mELY0xZ6GiLfI2PwrF rXziYVrJHucS+fJBaPalDVvp+sfmwLNTephv6sk/copH5bgcKTXAdeb4lRX4wu0OaI/a8yFtI37P c4XgoELhINankJduc1B77D6HhYVfyV1wZniVLAsw+K+7s33iG3/ZXvbFl7VXf+kV7dVffEU7+Ysv ba8467ntaR99RPvjT7yqXc/ByN57Pa69+uAncYl7LVcSsLfbVobCD+XxGOOsXtGe6mvWnFPT/xzX +MuZLhVCvLkT31AZ/tRqYYkbcP+kB1ByaR8Hy6FF/Bg/Is/xG1nSJc7QOWeXT42monsbUsv/4Cuj l/iq8x2wzMvQTS+BJd4ue2kbTKKYmCSRSmnouJyYdyfZJi+IVUmHqhSoKVmlCte3bOvjd5chXlUj U3m5JAVMPql3w/MQBLA4AXnmSfSUudp1IToiAyEwB/HAwRhKpRNQk9aAaBeVUkNWowy9hh7i9VIJ Hg2JYnF2wNhEFitPHSw50mBwjp7Wu45pDH9tTK1ABgExSkpy2sbHTmGy6E8XgPJx0qqEkLRgajRd furQK9/Fg7ZOHpKAyvQS36ebwsP4DV9Ix5/FgaHMLx/oQ2kt4odHuAfEXu8QGjfdnuDzBcwmOcT/ bpHtX5LRxl7odtmL9uga36uO++DpgzyFST2M4Sof2+RVizv5dp6aCs6oDlzxU9jEL/Cwk8fn02z1 ngOLNmaL3OjsoAxt9QG7hLrBvetnYEvF8iGN4aBcNTbuNfhDh9yhv/pJMWKhvcoT4r5F3ORLoGX/ BN7FTeyzPmDptCFCdvdVb3NTsQCdSskvbeqAwvszfABB+eLYJpb6d3971lzDUoiHucsYEn5D59Ab K5B04DR8yeQ9KTZTkaNyyjPU+Dc//I+dA6ljp5932lCBJ3IWeeFV+9ogD8liiTryZw7Gctr1SeSK GkPk1fFDRUP6KDrpH68ZxmbippE0V05is86zDl7shB/VksFO1cK+7GJ3yC77FexeGuLXMLBOufuq K9oNu+3ZHrDTbu3Iow9vuy3est16xY/aVTcsaIfyg+AeJNx7583tL08+rT3liQ9v6+7iEtmz/rgd st/uoZ81h0XZwqkx9O7fXNH+/JR3tJ8tu6ddvnx2+8oHX8kZlbntkCc/p53ygUe07RfoG26k5hLo P73+je1C77GzcBC134MPrv1p37f/6rL25fOuai/9wMmBblizqq3bOK/tu9dObfkddwBb2hbvtHs7 7tnHcu+VN1FvbJ86/UPtPX//jbbofue3fQ78XDtqn8XA8UGcEDblAurpFwXKi8P3O/SBbet03/Xt jtUb2gEPuH+7/Y67gz9jyyXtwfvtz+KgdF667+HtzM99uP30pz9vXzrrs+0/vn1++8EPr23b7b5F 41a+tjXqXHPZT9sFl97AC9/nh0f1gRqPEpSeP/XCWCKnc9BrcuaGfHeuMKbpy7RnjrV/17BXce90 EyOt08cs0mu61bggX2W7uz07smf2jHFg0i9FKlbFQCX5hFb9e7tDjZ9RfnnVpe2ABx7RnnbQU9un rjifsVIakafYrWMBd+j9n9724V7BX994LT9NuU/mnwx82jfhN6vNnT2vbUUuzSMnuyXxy8aN69t3 r/h4e9/2R7SPP/357YD7P7JtccG/1jCh3t0Pwy7H0OhBmz61704Po5yUAABAAElEQVRsSf8yDqXr 0FfaGiPK3km/lr/u4C+5JB24g19OKKTvAvFff7F4zDguoSVNNY7UohwQ/X6mt0N0PbKFVn3HfsW1 j/GwGvNXdINt8gZ6S3KHrfLrHjgHILVUgAnGoDqcMgySQSyRR/iAMZSFLpNMeJjQUsOz5NVk0xNU oiiVNlwlj25MaGA+JuicDZCOdv+Umy0g1ckiIJlcjtbx0x1i51CMalnUd0x84dl1Cfe+n+BFihPT 1MIkk7wGySy6y684jwHfttB3uDLj105QE/HAMUhMeDn7yckQJ7/uMP3vvTbD1uGfoi8dIlvm6Fil kiZOByUJMBY0HSNqq7K22gH7BGOzskZipG5OkHRlLPtlatjbbpnox95oGDboguEfiadc4iBWzMQd /g4dYG10ITXBQU7e19b1TfyKPP7TtUPv4mGjmslZHfwaUtwt4mqlLaUsme3kGycVh+Qf6Nohnfzd j5xuA9JFkKCGDmIqTmVe8bHNUvTupBotHbhncTkm+oRN5w+KfGb7VDf40o5OLDv511kntkMA8NHx OUFf0K5bSSyetXgrWwY8NoE7/KLM5Aew4onUYX9yDjjEmqKeU0VtNESYTPyHaxALS711n/cHFmrZ PJ7clk50izEwJ+J34pgGWVvYxqfsjEG0eoM6j/ZgTuSoSG4FsLnbO3hEF+Pcpae/wSc543gTI7oK wv3wF7CThwDHHADaaFv0QZnwNIfFCYGt+ME268CV537kop80YlnKfcN+oLKxqZqDc8/qO9pvrv5t O+DR92snvPC4LDouu+xnbcW8I9IeHrO3asc/7VntmU8+pM3zdR5wXtMXXrYz4gXXr+V3/K79bv1M LsvOb9f9/Ka2mnDNYTLaZv7its8+uzYezJyU7fillE3L+1jEmbXPf/qf289vWplx7JFPOK4dc/je bemDjm5PfsLDeQJ1y9DNWbC4vfwvX9N5bMpPF25av6HtsGQb7w6hrGnX3nJLm8fvIK/iV0mu/vXt tYCbUjFY+kgX6n8fRLDox+226Q8bbN6iPfX5L2hPTYsPTPjQB69guOu2dsb7P9T2/8Apbf+9dm67 7LFXPqI9+diHtRf82WvbbYzLQ5xvPdhiTmkWKSZZLqWOGKKD8yc5kFgiwxgJq1tFSi8ZTo+x9dgA fuUHeLjSBT9NddVGDOzL+IfccTASSpHETICVUVG0apEuKAJQPAvKNMLPPiVO+Gc3fPIb1oazM7ny mq+1Vdvv1w7f7/HtIYuWtAvvWt7mav+EhOSYuVP740OezI1sd7Szf3JJexULOEvOF7iVV+eXjsF9 dkoeJVqi63yegLxu2Y0Bm2uLoLkLXWbzEUffp2dAWhz6DnjpP/g7vgIr85xYlRbdF3Chr+VXPeLL 4glQivCQT/wGaQ5Qleiiw/UGbZoxZEUJAIWvRqWnWLnqxxxvPzfmmatUF1kyyRgbivoaeoenIMXx V/OWekuMIzp8tgzGn08daXAGBmhHW/gMoQ5CUxrblMWHipmk2tjdgRCkiI2M8E2bFMDkB1xWcYRn OsSXRAwQaMoZQGlnu1K3OTzDIUEpV4qpo6eOhrIyhoe2lMZ+eyZLXPeEA0t9iq+LsQju7dkfOrmF PJ00HKgqo++7QvdMpTJLijtDQ/Y7H7hQgOPvsrMP3Hb0PgGMDj700xv+aYUlcu0RyM9CI1Dl1l9w On5O4SeuRZ0OFV2s85ejoKIdtrjVTtvdz4LBeOWBkY5LLIaeyZlp9pUW9T0OCHywJbFGufgZV8N6 UsT238+Ic/iLI5xtxbPiZs6FBj7hF07FUMvkEf+Z14BjZ0TIrMrwbw16pe9EvnqANgbkgkunHXyH vz4SRwH+l79GHqVNPHw3C+XLLnpIz31DGN9JDCw8AdDX2XfEYt8c63H2JA4t6WfG3fbSQHinUQsY GDf5RAb7audGuH913yX9Nn6sWANO6ZvoHTHikyfi6lv/LFLJS97p9+SvBbUCzaKmGAQnjfoDShHM Df8yyWkvsIoZODKRj/jsR2b4lgbhFVkALdDCFfzOI0CoBOqESILWdjArpycOCrZfE1nsa2/4wqQu 6StbdmhtGyX+p738WH61RYkiT8ZRbwSDxtwYE7C8RmyzsOyOi0+7HR5HCZaheVYPtgBkvMkYqhzK 5jX3tut/fnVrx+zfHnmIZ8A2tYsuv7ktOPLItG/kpvQ9j35s+7OnH8allw3t7DP/sX3w77/cHvnc l7e3v/z44MTHsdCfFlzSdkTwL+9d0w47YNe2ZdYuM9rNv+D3id94RR4u0Lk+uXrhj69psw7cMzza 5nXtG1/6Ujvz/JvbnLauffXyFe2iL7wpE/MOW85ra+9ZEbx7bv9V+/OT39tuXbOxbbt0adtz6TZt 3b3L2+1b7tmeZ8y4DX73xdu1VSvubYv3Wtr223tJ529X0Yc6Rd9samt4cnTRTlu0nZZs1WEz2533 9jOC61e097/lLe2CX97dFi1a2Pbac2fOXKxtF/1qWVu693btS5/7ApeD53KT/eL2qEc/jLM+u7X7 HXB4e8lxR7T3nHNbxRGu67l0u573gs3DP4lt8njowFagZ2TSHoxM+Oa4+noLTVxLk7onxmorqmzY jr5gnM0rD2ZjZ9qw2wm2UGkt2TnR4L6JzX+N2+xQHCPsD7bprjH+2JaTNSHxq+4zzu0GEqjqJIkb Twhf377ziwvaw445rj1pv6Pb9y/4Iqv5qadxPXO2105HtEftvVe76cZ/bxdz6fvVClEv2cMrY2Rg 7ANDOb74lBnZtXn9hg1t5213cLctv/f37S58qtXhAaFqzdFcafMpBsmJPoZmzADDMauKuIUX36sA DtFX6tWr6ZubMDx+wmeTPglpPM+XnGgotmzG+FT9H4BNhVT8B/OIJGo9b4eOE/xOl/zRN9b5OF6Y F6lYxyZfn+bY6nnqlODKmM/UwDQ6iYsEBx+JwZEXnIcik0UHjHtqdwdoHJjiQ2fb/8feeYBrVlV3 f00vDAzD0ItUAWlSpAkCKiAwKqKigCYa7LFEY0mM0WhiFCOWD8VoiIINURSRDgJKEwSkd6QIAwMM DAxT7517Z77/77/2Ou8715mIefJ9yRPZ977v2Xvt1fZaa5ezz3nP8WAGzCUzsnwmSfiZJ8q0lIpn gTobttWVfHDIV3Aj1KtlhCv1pMCYEtLRTfkmy8akbaR2KMNRV/UFA61081GsPLhKD5IlkG1lM22K GKQvB46iEZuivycL0ZQMeJQMM9VX6VFw2lz3MFpy12ZhMAjQ4R39VspskG86Jlvlke1dLx09sQpm OVRCZni2zxOyoZCm3h1uokPRKBtih+8q1bkriGEfJjKzOuVJZvGlrcVRYGP5jKTJqzqElg+AwY+4 8m6mCrm2SJvA25wshw5LOw1KOBKlJmdfniSNLliTj6xK0HaxJyCofdVuDzjZnibH8lm4K+7xEaMT yXCo9bFuGdtU4QcnaNjps12QVziNzrjgw5c6ASTf/RAG6KvJnyOp7Id++NdydPSAVGUGFBK0home ovWl/U23vpbD11BQIdencWm84aAkpKJOZRtMcpKmqBq8DZ6MO0nb+omZEF2tDaDDounodomV7aKK PrUs3/q2dhSNWNgeRVvwTt9qkwAZA+iaOkDLpA2N7+PD5iTpj0rAOXpMbAyrf3VyaID+8bH5KlYc 2dKT18F1BlXt2DFDce0dd2ppprw+MTg37rz7jth57xzmkbW6dsqshR7jcMcN18WyNTePw7Qr5qS4 GtKCodIam+0UnzvmQ3HWdQ/E2//qDeGnny2aG3dc+as4/YaZMR4b+uZu+UHzwz47+44ckY/SozYm BffGTdD9Ysv06A2Hj9oxZfRAXHPbXcLZO6assWHss/eOccaV98fr3vzm2HubDWLBzNvi7e8/IWbN f0tspMuob/3Qe7WDuE5s86L9Y6/Np6VqkssExr1vpC13PzA+8u5Zse7eL4mtpueigkXl9VfdEguk 2irjV4399t0rbrr/onjJoa+O1xywS4wdnhdPPjY/3n3MZ2LzVUfFDRf/JD7xL6dol29mfOYfPxCr aoXAjff4PU+aInZ40Z6x5033xM3aCfT9qjWJSwdixwu0lkevXr+klDj4C554UyQEiOOmh6ucYeKX A1bD7/VNzxPQt+S4hRdaSGfGlG5nrS10Gd8ZABxvks+fGLuvoItGCX+sFAAcpk/F4bhRi+Kc35we H9IC7oCdXxNfvvw074rl8kjPd9OjWPbb/rDQrY7xs2t/ErMGN0AhJdqTYxDt0r9AS2NwcGHMH1gg G3dLEIkTrvTYdL0Z8aED8oclt9x1lRfNExi8RMzBJ55Wn0brI1i2p3cE5irxzL7bejvorV1qfrYP NuD7gAayi/oZS0XGNWzWn8p2HNOXiWDtYapEnkSR8aZkWRfqm14dfZKZnwlN3NoDH/3x75N2sfY4 obKeA4fjUlxOigpY35ArfFsbYZw1IoGPcFWuXRsrQqArmDN4qAcNa2OImgi0LOE6MIEhNg4M2CnR COYat5k6AxNu54sAfGuZKoDR8fCumupR1zg6jmYVbSQamTsHNIg+54kMNZBL+0WLw8qYeWYiBMGF IcSmizjSSVnpI6d/EYE0D8SQESDIJom/GQhgW4tnY6ng1Y4dHKUQizbrJXSoLUO41s3GSTY5+La2 iZ7E0EFXTD0NymAnCJFH3xW400m9zvddMTJpGxscROROGfTJ1xalTpXEAvYpJqbBdvw1Pe1/UVtd N7NnWw86xE3TpNPF9CnSvBCvxODFmQYB29nNNbRESQdshj7QWTV9eTGEmhl+KG1/oJsnUZGCX8k3 +gu/2sa7AyXS/HmQpTtKyZBQX1WGGL04ipaQdlYyfARPPqHO8U5GiT6UiyL5Rc5GZ3zjAZd6ANha +dSn+aEJMMys0q/GFza8rAL2NVNKTSly5WM7xmpl7BpL8swT31h8R2qw2PgoJMeSgxQUVfAvO6RM EbdEmU8XF7aUkBntZRbsm7q3RWjxbvTwrj6GEHwHIbGjUsNCVyC9shuiothnX+owUyZ9hB2G1B1b UYa+X1dkwMFg65Ey5FF8bnzVNZQa4JOP+qXg+L6e15QaNqW64JERhAUNV5HQIPml5GpTZ0P5n3y1 FxnYMW/UHh0TtVAirTJpfPz2qltjvupWV+gsmfto3HbbnNh7layfMmVyzLz9lnhk/nCsP2VifOTz x8dHTJlfY6dOj7XXXUftzIURsfvSI4/Qp4f0029/Jy65/dGYNmWVZjupLoUG9UtBfsjhtuj+Jtaq eY6gxdbcJwlrpxfu+/z4/Id+EGcf+uKYscem8Ya/fLc+xX8wTjn9zLjs2qvj+O+eG59914xYZ7Nt 43Nf+FQi0HDsIGbDc5+KSy66Og7Z8ZUxee3nxN/8y8eLiY+TJ0+OWddfGl8/5ZfxwaP2i90Oem18 T59KV/7ktDjjZ5fEBvteER983d6x40teE2foU2nR7Afi9ItuiflDq8STC5fGmuNHxyFv+LPYcNXB OPidX5EeuVh1n4DIDecr48tzQzHrO9qnsgVNoaf7RIp6fCpybiPIExPa2QiVyQUF7VdsgUsIqb5i pWHaJ/n8TgwuXYTjuUnO8OvlMtCMnlcWsh4cj9HwTDEpozEeM3p83P27i+OqB2fHfpvsF7uu/9w4 c+bd2pXVik3xMmHiFjFjxwNi6eKH4oxbL1QAvi1lwEsf2ruqXvG2umI09Gy9l2x/eGw4b5FsoIqW xumXq+uvtUu8fk+9PUS/pr791p/GcVefocv241N3xWOHrYaxvvUbFWqut0WxiA3juMSI2IAJoa4g dDt1gsPRPoEzZfoaf4wNACSD2PXiUigsHh2GYgkdqY5+sweVHYxxhXGrybDjXJu8jYnYHp+KJ/OE VVYZEzy8iqq0CVxFoZrAZElA6o44Xx83uvHAsgALEZEbA4Q8X8nJgmBI8HnbkkuiSg6ettAwAKWa Ym6rWMAsDQeGeFtL8iVDJHhLqYxPHlnIxEC1AJP9VeIrPwy42SFEoDxlJmYcgv79BjMvTQpdIKOb 2SR/ZBq/waDnT0wdiEa3PuQqCUNFPiw4rAtMlUTmRRx5KHytHVtltfWDPzIdaEgD0V862K5C1tEm Exw75oIg21r6Wgby9PEiQgC3F16wUAcHbj80+2d9E9dk+sxO+PY9qvCnhlhHxZIHGtsetmljYN2A g47aEsdrhtMe8YMvHka+J2/BrZrqKlkfnw5LJvC+OjRxagdsi8Xhyq8jeQl6wlJna5BGy7Y0O8CS H6d4580cNKDqz+0Eh/4C6/aFHVgYuv34Cf8LRrVVIJhFg77w4Gnmtr99B7+EpwOTryUIH/sQLxln ydD8RZQDgzgipNkf51JPjMPDu4+Shy6C6ptky6f+JqY2k4vGFtPmw6xBeQRx4Kgy9dLDPjQNtcnL C67M0jzrRMYg1PBleHSXnm3ATPRGb6piRxxDm21TCbGZhJ76NFz4GbPxto4NR7jYhnbQhLIxjMyj eHIEt/FhGFdROPQxV0DSUhIVqYGNnrwkNTwdYMLBOiijKuQaQ8fRrORIFoZLc3Fp/Ebbz6/aMrx4 cfzgGyfGZVMnxh2/uiMWPPHb+PznTtAEOCGenHlHPLpkSfzqnJ/F0vvXjbmP3hMPXHdVvOcv/zHe +ReHxAbrrBozb7opTv3lzXr479Z6aKoevLp0onbWUpVZd10d373o3njxC3eIsUsWxEVnnRFf+ea5 sVQLtTH0A+nlNkj/cePHx8zbrouvfu3b+sXh4rjrofm+X260Jv6Fs++KLx57YkyfNCYW6b6zcYvm xHve9M64+q1viIP2e35MmTgu5j81O37ynR/E9/Wmg4njx8aJx3w25j98f7zx0H1jdd0yd/UV18X6 z39h7L/HFlJOO3wTlsUPvvalGL/kidhvz61jwrKB+PXlV8UTQ6vqeW6rxn03/Fo2XRLH/u3H4vbr Xx2vf+U+sebUVWL04Py4+Ixz4hsnnq3F2dI47u8+Ho/c8bp4lXYh152u+/h0+e7uW26M7/zrKXH5 7Y/EMj0G46N/9al4vZ6LN3Xy+Lj1mtvVf9WPGWf9hzZpMPoCO11j9QtxIdnX+AkbcezGO5wsEmKZ ccHRBgvlPb4qb/+6pSDqk8OI+wtyx3gBmfHemFkLUB3PsIO36DSsqw59sg7efNB1UO3N+YD7B3Vp jnEJOmg4MmEoqcWxeOF9cdYNP4/9XnFUHLrdS+Kc+++QrHH6heqg7iE8MPbYUM/ku/Hbce2sWbEl Tz5uKc8H9BBmnZCPZ/yesFa89/AvVvUKjw/ee1G8+Ztvj3sV3xMZw6y7UHMZYJqye3fUQMFftc+2 0LwGrVrb5t6eDdIvYkUT1WwypvERPqJrgsuu8OcEp2wMleXhE7WPPPak/2bCiGlDtKh80Zt/YYq2 dDIFrkB+pZaFN/fWwW7Uhhvs2sBSjZFSmhIgEHrwUiA6lQ5MZrSmTRZZR7NSvTpLNYTGgIok2OiT Z5GISQO1WkymLAiJar58NRq/5kvBZb2Y2MDVB349g6bzknfVi4b7EmibBigSZ0dewEmYJxB7R7Gh e1TAs76IZtGYJEmf1CmTHx8oYSO/6gXFK6Fbld0edMk2Jwr1BuiQ8qxzszW2oJ3WuaG5vXDNHp+m orPByfKEb5k6qj1tvWsYzSt6o4gmdw7wc6OCr/mo0r5p/ARj4PEgAB8bRDTC4V4c+GY9VuvpbP0l zLDiVyYSDdyRhyW4Ub/0sz9QhRpk6A/+ufAViNN60+ogemM40JVTGwRydZLjZ8Vr6wi9s+KmiPi3 0c3twfyuSdWUt5b5DV8l34/kTIsN45rK9ejDv30CfyVsJUgXd9bbcaY6+Epp78QIL2NOuKpP9bBE 6gFjt0cNAuaFmuhdL2T+Ei4/Vb+Ff4rPTKqUiyLTCuwkSuyJXPftxrdqmxziBn618Mq2gauP/aFq D15oksm2oF4fxw1g4eqfDF9U5FHFzEoPZCmZk/GxAzB9+6AvmOiQJ2kAM3nsItsvw0XxMLEq1E4n ysYr2Y2t4oZJ1u3q2gQi8pMW3exD81Ad4Um9bUgbkWcpOpqhYDl21E4/JR7LUCntKB6t/e4b4mE2 TU/rKwDtHtAjM9gz42XxE/TDhMWL9HJ7wXnY7CS92YBHawzoxwE6S9NlzQkqD6jP6ReAWjgt1lsJ hqQjj4kgtoaGxsTfHvv5+NjbDogHbvp5vPDgj8RYPTKEn9nMm7/QCzXak5fwrVGprQXBoF5mz31n o8RbNNY/Y5JnrDEm0Zcn6c0OPFB4UG9ImKIfKIA3pEdFLNS9cOMnaCPBYxFvmBiMSdrp43cDj81d Fsd++1vx9hnPi+vPPDEOfcdXYlibBIODQ9r90Q6N9FukdmM7fiE5RguvyYLTpgG1f8IkLUxZWGny nT9/kX45O14LrRxXBvWjhkn6ZekEBEnH+fPmyyZabPgHC1we5I0MekuFFh/D4s8Vquy3xEnFE81u 4yF+Lj9hHcykcsVBrdUrRuHhqUkIxAYn0/Sv6sPdVQXhMV7l2J1jhWll04zH5f1BHSHu+JHxucwJ f3wzWbu26667Zmyy6Yax6SYbxTrrrBnT11gtfnzOaXFJnB7j9fPdRbrM+Z7DvxufPPD1cfLJb4j3 XXxybLrRa+P8vztVDrkiDvn8wfG7QT3wd2hUfOyNp8UH93lxfPaEQ+MzV50Ze273qbjgA5+IG248 KQ75mrZY1ba11topTv/oZbHp2Kfi+xefoIf0tufAqQ5bjNHO3GYb7B4H7fiiGDX0dBx38jvj81dK F8WqzahOMnjTpBi6eZoeBq3XemlnDuPWr7u5YmN/CFYnvh47ZAP1ps4nxsEZ8idXorK29WnbGHUz bsFF9+qLy7TodxJ5+bjGgqzI705GrTjh57hOPdCnXwblSqiW9Dn2WI6HDuIj482bCkJURPcIPSgz AAlkpaw7BeJaBaXc66GCcjIrgaDkBKsa2ilhubOjfONpBSigCEc+Ci4biEbCM0VZ2VoccDS6KDxY MzjoA2o96sFGweBKBK4HSHWEbEsOpmWAEo194SffCx9c0dN5tEADV4DsMHa0qoq5cFgJM1D2HNj0 l2za7zbBXwVwquP6JmQbSxq3SSQXuqJp/LGD3uTCt2D6o63Sx+1VmZwXnFDYZwhVrf9V2+yA/u7E 0pMEL5LDVjy9+ARHgWldqLYsdq4owJA8kpUU9Gbd2o8c31+RtW43NG5vIzG+xabsXHA3AoGGNECy kCxfp3zpKsK6wTvnPskuPURedoe/J0V4UGhttqLiDwmd25lmAftceDKsm+i4lY9NLlOxOKLCl5pF m4sSdEKWvuCD3UmSiy6dzVEBO4OmBKt8rQ9wfRTL4FoCvMAXkturgn2r+3uob0jyk5QC1XjpS29k CaWTK4J8NVjyhDwXCyqn5Hak+1uovi0l9acf6M99V+BqJ/HlvEiW0hgS6hAXxcGNFExVfo8f7VIc mb0ckPD0n80HD1ghh1iSTTzoClQ6ASd2bRsh1gmVbVv0sOASCgJANlPOt4VFHDvugfeS0ShCo+R+ KgataLgnTcU/nIDb1eiqAHDIdEzgYOEEWfMPsEoyFD5rcUabHLfJxHVWXrwZT7CzP+LpmBK+m+Sm 6as5HZ2tt8RM1iLIPms0k3Wp1LZrbRo/YYLuNx+fcoU/XosXbM2vT0fxy0oJGJcGjEULh1Svy2JK E/XKqInKL9LN+8Nqw3i/Qkr6qJ0eK2i2EgfUG6tF02q6bw1WjvdWj78mT9Irszj5UiWxDGySdrSG tEM4hH1k4Yl6P6o7GEyV0JuxYVhtHqM3M6APyQstCaTPTuSSnAYz7lebqIVJf8KOlqNfvTK+DQ4N WrcJ4mvbUi/ZE0THzttC6UIMjR6rhTANEjUfXp2FPSmySykkt5lAyHECXBJzAgf6pyPGNOjACs39 RTL5dT++y+EVXvBOfKnjMQdCxwmcBLR85X0GabtKd5F4p8cyxYX+ojo+vA1kSG1icTt11Smx0cYb xJZb6REzW20R2227VWy++cYxRYvjIS2kH3308bjt1jvilptvjwcffCjGbCSGyLAchCqJqZ4+GffM +nVcfNdv47Xb7hL7bbxzfOOWy2L6tF3ikO33ikVzbo+L77hGPxDRfY8oUclZfQnmNmkX9NRLjotz H5kVk7UYtsIWwTy5Srz1kOPi8695c7xpv7fFqdf8LB7UXCwsmQQeyZTxwnO1jMDtXNVvjCZ7eb0A iW2ro2A8L44juCyCmZd9Qio8394l3FLb+rNbKHnQWG9VIt55HbPU6uEnPbu6amtq7vG21iP2tPVA MNEhOa1fq3eIh+BojjLOW5hwKQqgf8IQPC3gMnlAEISbQ/nVohMYXYtExJkHIzfxSVI1CtMoJ5W7 gIaFjWyRqYxA1UCgpkMR4ZHMqwF9FtInG1kmKGFuHEBUbIHhY6pMewxXfQ50yKuzl2IiLcSCD51u qW7spRPw4upR4zRwK2qGNZF60coECpoUsVkUTMLKAV0Ad0gHiJBAcEfPPI6ms5VUAhGR2ADcOsMW yEiQW3/pAh6STQscnEqUhcxcYhmCQwtW2oTBIGnAcR348G1lBhHrgb6lIJW4RHoyFrnl6SIzceC2 9dCK9ILczwkq3jo6WYRkO75KGHKoVeyhq/g6RhrjZYN0VP3STZdVMk6ErMZgT/RFFrSmoV2KJexp +2VNIgLTn3UvfOptCLFqMZSyhWvGTCsMEDiv0Ta14Q9OLpB69GLpBD8n4RTPHkw1Vd3iFCuzWGRi HWZBO26I7mM07yzCDH9YdxdEkgYo8zqOXA9zoDpKDy86rKst5SpaI8XM36qC3mLapMUUUfBEF3i5 rC+VhZ5JuGkL1eND81KVeVCZdMBdlxVNtgZTxYPvxxde+RXGZi85ZOBgmxOM5gtG8nOdYNim5Fsf CBs9tJXMl0Zbn4SnholhXPipc4xeomlLj5fxooOFPP5y/5E0KUtM+d5a9X3bh2KLjeo4niTcBvRN eXyzGEdrxsyEqqiMJ6cWF+aFWuhvX5rEslhEeaKCuLXTjIRnOjq9+HsnR1mkZAymP+uSj5CazvSz pXHXTdfEuecNxe9uvFoTfOoDn7RpawNGlN7ws2qNN2W3psmGNzoS157gsA1/bjtHMDKVz1xHhWRg YcZSPWoubr36irgwfhe/ueRmmVY904LFg401+oJwSr7bCW/0VKIPuyj9KqUOrSR56Olq6V66+ESe yZV6OAghOWSeRaRlmbvoinnLVbyIQfpKxHUSZF3Ft6OCscsdEwD5z5ip2Pd447gzsmUzXw2xg6r6 VXTv3/Tp0+J522wRO+zwvNhll+3jeVtvEZN1H+RC7YI+8ODDcdcd98SZZ12o+yPvjpkPztKO5ALV LdDO7cIYNWUgVtmYYFKir1VC3DLteg0+Emf95lwt4N4br9zl5XHCDZfETlu8Op43bYJex3Z63PLU HC1+sU0jNF3LFz/pP3HM5FhtrBblLOA6VJ0u6fL7+b/5Znxgxptj/embxUZT14p7Z+vtHcKjb5Pw OyLwUX1cIVnUZf9ssd7wsLVV0tE+Kf+0Y+cL2blbiCFEidit3wXU7ihw9z0yDS/jAEDWOYYcUAnr bILeRkI5ZVBMx6KvzQLrS5XwrT+6Q6sPvhZQCzhPptDDQYJBbkS1KoTA6xEFibTuBOakhp/pxOl0 zMSk552LxsswOpAYY1wmFH+Qp78uSYVcAKKBuEpLDJYTvipR0bO8s0IRQKl0J48sDJo3bKrMpCAe dorOfLJ9KAKhDMG1C/L6+Fdd45bE6OcvjNFbaztev0gfq6jxWGQ9KwKRNDJp8OvDHdXlJQZxqeoI omw9+yGVwCWtGD/rVvbdk1M2XSqdlufVw0ku2X0KH1hPl5XJAQ5FYY7kSX11y+JcuNSRqp3ke/al 1MMcNSTqh3VfBtvmD+vGaN0ESy9m3O6uZcqH/Dn4iQ8P6snFW+tMtooTx4XIqtMVDXTEtyl0MOvy AYoxO5DoJ+ACk4qQqKik+FTeqTWqilQkb9UKWDLB5WTIby5Qx2IHk37Bwi3WGIgxO2gg3Vi7ARN0 imD/9Vvbkpazf0F68SdZrQ1ZJ107pVbmkcJM2h5+lVOH1KeH28sVXyDlQ/p85nv8Eq/XP3p8i1cP tyC9Y7ULnKSsuirVMeGU8NN/xLOHSa5sruxiUT+o3arrtYPzpF4BxA6RmNFraRYTgQACcbR3HT+l Yy6iOOlV/Nlwih/TmEyiiD3lKSpfTmtDaVbwbfYSCAoxJR6ITBfr26O56hibjay6ZncmND75tPqk SLTsM5bvL/gv0yXYsXHuD3/kDzv8Y9XnPGamG8VdGelq+4sRYhj/6UduGiKkm/HQNQtyloHW2T8O 0giB2GyH7ACeUm8eUUE8+WOHbaIe+/G9rx4X31c/ZArgFU2KLslWwc5QO2U4lWzL/n4HX6thgRSM RUbIqkI3na17biFvGeAILJPS/tLLIxt64S/qdWQnhwmee+PyZE8VgjP+WP8xrX1lmyRV+4knxZub LlsmQ895nIx57kI1/dnvyrsJGi/4tfCQVteTdGl4zenT4/k7bhO77bpT7LHnTrHJJhvCKR6a+Ujc cuudWoxfHDdcf2vMfGiWdlgXeyFHPZfY6/V4o3X/+wRdXh8eqzFITe/enNB0taMEHyeaq28+Le6b /67YeftDYtupx8dBLzhYSi6O0685L5bIjmO56a3oEJSmJJdJ9WyWWI7b3sBykmbRmKuF5kNzF8f6 a6yiex1Xk19mSzzeFlvx9VivfNpE0No4kTmJRdYLPM6L54cuZY0g+XiANpoW34lR+rQpoIN9Rdsx MmD46sCPhei++egO9X46kCpqoWf/qb5iro4s/EiURSF8XYpXO9wG4NKzS8Kh5B8/iRcJmTVe1BGZ MDMftWNsCesM3pQ3a/fIZGbuCtBcQKEOzLMuF10qq4iBMvBSOSvlmsTl2wOKAtcGbMr2agHwESX/ 0ocGVxqjn4enYSS8wbMDFlV2GvQATkPpYBLWHKIjcDH0Tg385WF22paNXxJjXzFXb0zWpQU5Pgfi dGInrCkCPclObzkOCVcAqybz+d1MVSq73pGlXLOmcr1U/HtyexCwqtSTn5D8TvnJrQVGY90sq1Kf UYnwjmND7A6FVxKzghKLtJKfUjoi12Qp6WpBV9z65SdGr6bHRe1YfyjGbDsYSy9Qp795ih7yPq4X 1NLZsSFH4evWX7IpxHFf+n39hAaNOgQ7FGPUud0aYoVR26lRqYqYS5alZ+I3xMQWgnEKxfqpUGXq wVSZMYDXpDLRAvPibdOFMWbG0zFqdU5ehGs64uj3/QNNv/1LiPkjoyfUpWoRlwQzlVKtmJpVoa+U ePSSSsgoOeX/nrzCAr+n94rkJw9wSMWxPwe85PbqgRa/Nu314Y1sX9q88Itbjy/cSL0aSpY2Srye o5O57XSf2DmrxdL7NHhrK8gDsgc/+UY+zZNCcRAL+x9uiilLFiOPieJvW2kM9S6BStS7LoPYxL78 jAItGYdAKJyq6D9WXBVMuDnGSqLy6FQ/tGGB0YuBIsgj+tEev01CecZaksdglaWEyxgnrUoR3dpR B3BJmIcs3cllwH11CW3f2IrxGZyeCJeLX+2CsOAbp77KdO62lXiTQizNLBtmyE+G8EkIkdwEqSrn CJMJDmHW5v1U9Pk8yYaX7WA/0H/BFX/x8IIeO9OGltx21fVOzmvBAAKEHJOGdlTqZAhW/qCexRqX m8dJ7tSpq8W2228de+65S+yxx86x1Vabm/yeex6Iq666Po477ltx6613xROPPxULFs63nbjPGJ3h z/1vJHxDGYMxCnGRSa3KhN9Qq6eauzMPO3/0sRvigpuvjXfsuWu8Yb/36rGD28UTD14Wl95znfTT +5K1UOmny+aJkTKIW7RgdsydO1t55mZb3TKRzWYnawwuafOcuXG6dG4fNj1yTDR676vM3oyeMZ/x gR6cYBETJNqLn+CJXpA4cSwZqrcfjJM+Qlf6ZtqrkfTxyjgSHb5tPPFf2dxtTzLJbrpZYCkgXC04 AbH4TD1FYL1K19TLu8nCo094e6EnVMq2Rpi3W5iNph/kwMMApEHAHQMVVaF/DwwINqHKrC6poo6G 2lIqkIA5VATHmC43OB3DXKRL4ZiVW9L4sYijXph0Guh91MSnPA4sw6EfgWkHmrUg0lMKZRtETsDx kMvR+8yL2EqLN92Y2UstL75OVezK/bg9Kp+xUPw9/MJZCV1Vd8di0ABV/FORr1XOqHGaTA6cF8NP 6f6ahxR7OtvFv6wPmvsJgV7Qc6KBnei4OrIec5HgAKyPzaiMMDKuPdMoVggUKvXxgTgRXYJUR14F 5DsGVWCnopcaoQDuIxSlJPFPh0Mv959GgEpcAlk2TTtvh2jxtqoapfgTWkstl6qnUqppTVG5h1kU PtoAyhX5CPquYjmiFRWKQaurYsfvT0D+FI0nWlgv+4Hib87kGMVOnNyEfz1+yTQeZ+QL/jxpE5iY RnYifsjnr/MZbxh/WhwQd8SUUHMMI94YwKlnl0r82LFIFskTXBAab8Zs7/yIi8fjdqx7Wr1DaHR9 8a8Okfqi3zL/CIJL2NwbpnnesjO+Mm79I4iBoRire8EmcC3TKeXrO22QTUo9pVvp0eECoZ0QtIQM W8y2avUoaP11UH2bAmyLbHDC2SRgHPdY750M7KY6pbKN2yreiZd1XjBkN0aM/unH2JsNBeF2Csrn qYp9ncqk8uDZH+hvEF9NuBXIL8eHJuUuTqQgWPglxw6VRZr12EYFjT81P3FP7MDiAd0LOD423GBd XQ7dQc+z2yNeuOcLYrWpq8YDDzwUv7n2pjjpxFPjOu2wPf74HP2QY7H58AJ6+HFfYMZTs494ls7M 0Tns0VbiFsPQFH2BxzxZzVKD0ZPFx9hl8+Psq86Oo/fcI44+WK9X06+LTz3rJ/G7hUu0gzs6loiM /uEEH63KPBw1GD6jD4zWkwHQRbUNWe5WdoEeyvy4HugcMT3Ga0ePt0Lw6YY0rxGIQ+Iz45G2wsVj q/sPNpYMcKlATokh44WOgFTRdvR0rEiOEbNc/ZxfGcHLPhJNxkyjRwSGpDEky8o1CEXPD6qD1hjg M2WgBrj681E8EM06i+Q2qd2OFRZ3os5dXfFMx/EOYiqUrHQageeqwZS/ZC9SGmdEfIOyrYASMNYH /2QnTdwckFBOZQyEcgS0840BB30Kx1KF7z9Uc4tKmOjbc3K4L8gLSuppvSisn7ar2fIk0ExLDfWF pgzFpMcRqlAwjZqiywXb6BdU+kWNGZlZ6qbvXmpBiM5OyHcqQCsWuBVTuSo8g2PRj2BrI0Ne8D8F +fLJqPHy204LYvhh/bqNQFL7HV/NFhXH7nyqy9DJ2HN4gMfpXUsMBpiQy+v5oxJKSo4nZ/RVfUO5 1qlyVBeaBzf4a4CpuiKXQMs0y5SJXlzeZaDkryYfaungY7TLM2qqgmtJ6YEOSq2YBX0/G39pirLL /4/4l09GaRE3audFsexC7V7gA/mRmPDY4qJiRbowMXncdOjgaVD1XfpSJl5wfItjxk5P4gCpypAR gjIGISsvOTJcUa+SqpRh5EWPFK+yEuII8AZTLnFdbn3C9NJVN+wf8upXxVZrjY9z9HiNex5eoEmB BQ1U+pGWLutvu9se8dI9t4ubfnlJXHrLPboUpVUeioDRJlDsgdzRapMnWuUlyWDw0hLoLt4qu58C 1fyT7UUmmPA1cbZLpaTIKqOAISIvQFKNRpu16J62EZ79kEjuq16siQE88obbPMHHF+IJJvrACS7m 1eym6zSCqcBEDh+Y6Jv50PieVEUv+W4vk67ltb1ydEFv1ZP1D44oIzWZ+eHE/PiAH2xsvNH68aK9 d4sDX7ZvPP/52/hHCTfddGf8+zd/EJdccpUWcDO12FkknqP1C2Tdqym9oLNN20mCb/RHG3SSMWib 3wBkmSnUiwLxcMzQJHAU43ygI7k9EMvv/EjhhrvPjBse+Ujsuu6qunr6WJx+0wVqt/aDGl2ttpJO 9CKFL6FfV96I+Wq3hbgghKH5sWARb+vYILZadbptze1SxJZTquT2UPbJi8djFWRYqpfpEi2y7T8j NZu7PfKY47cxMo9iqoWacNJO8isKC5eymDnuyGLrnAOQjwCScEtFYgRZIiQe8pYZ+BBjQoKXqnPV BFojVAOSjtAhrvSnhXbNMSw0SVw1hH4shGQM7wwqwIiUTJFYGnKkDHEq4EZVteAlzNxUzsuvQoCG 1AK6BgFkJI2baCOZNwZsJNSA5z94woevGhhcTBzr1xqMSAe2eJEnEcg2KCpN1Y3jk1WnlXGSmHMv qBtNCoTYLOqAJZxScySXkILnscyXJdg0OQ2/sVX1s/KxUQ0qy1jEraWgnSg/LdEvz2zItHH6E3tl XGDKOkNyvDTbEp9QgOkFHAUGHCjNSl9yfg7ADZE6dWL4eJIVSqL6OwviUckLPTEjrupkpTonA0Ol 6qTULR2jQWPDPHloc4DQnvU/tir/NxeWWbpjWqn5xFZrdiuChtDhVQbmSviVVP21V93gbeAZxcJ6 g0HdI6S3CizVc9C4vFgh0O9XBnwHl6ob3KMU+cLXwMdCxvEEvqU3ecIjThM5x7eKVY97QgMzsZlI MtZ8wopoxRN4tKvGVcbGlNHYVmsFXjpmYhz59nfGAdtMi7X0TLWPf+N8bcXxi9UUsmzcKvGWD3wo Xr/vpnHx6vPishtv16JvUpvAcsHqBSSskasPE5olNjswAUoZT4w5xUg76Ukjqh1pK9oiRualTJsZ 3W+sT1NK+nvs9uJIfRobkLfdRCwmtouz0kR61ASYtkVIfhhGHAPCySNw5CiJn/XEGHywrWSVFmCq 2KypjLaPqMt6fRs/J2TzgadrOcAHDtiKNxPkr3+fu8XGceCB+8QB+78ottxyM11qfDp+8YtfxTdP PCVuvvmOmPP43BjUoppf4qIL98DlL37FC55NTzP2FzBUIS6MIigZ/0tnq4mqCaBB5HGgFnWDelvC vIVz9UvkvK2IOOM+tQVP/jbO/vX5sc2BB8edt54X1zz4QIzXM//sa+Jq6UAs0sOdB/QL5tZMzf/D 5jV+4dOqh3+TVZOildAF6aE5cfMDN8XLt94k9t7xoJh61fmxOAOn4yXqLuW6Qu2k2yhVv6IZsHRc uP3YvMcCe9Bo1hzuK5Rpv2Ac0DGvyMApE7mMVcpCarrX2sf1xCGCk4H7irGFTpO5iwUexGg9xsTz BkhK1sc6KHZ0EpC7bbDMfgOtP8Jtv/mGq5hyxlDeQze825DdQUBTOScycDnbTF1tJNVnwMsJasRo GZ2JFHza6mu8xm9lAX1zr6MFftgPwWZkxijqjlV1kBqHsxrYUmuLIMLqw4OzJfMBFywUlUM4mr4N atia5yDpRZX5qaCCl5J56kgTVpRySVCWACMp7CiV/FgLHbNrVy14mTKkyKeAwmvVz8pvhsBFy8bI p/JXnvkI4F/WyKadb0BK+9vHok3vcyYjwhZLzUOuw97geoDP4DCehOTRPBQ/ummYUCq+EMOnYhs1 uzoKJPgpOQQ5UqxJgQp1YN8srAr9wEv1Pf2pJqWuz8bff3f/83DB27TpyZ1D0zt+m0fWUJ3+bjiM RHaiUGscY1LIBYWBwldsKpY9dkpQ8qfMuCWGNJ64IR509EQlWOnBeJfjhmhRFB2MrzwzEbsr1q/J UB4l4ScEv0UhYlocdNgBcdz3Loo5uv2I0XV4aEms/bydYt/dNgFR46R+ke926SbxJYN6dpyeKTZJ N77r/qyBJfoBxITcJSTul3DJVfer8iy1RQOa/HXbw3jtEvEke567tky7XxMnjtUlQj3DTvpN9A+U 1Arpy3Pq6LETJ+h+Ki1WBnR9dwKLSmxBX1FfHBhcqkeISLb0GBzQvUCiG9bfRD3bjjSsHZgBLYom aUdKmkvOUj3DboInTds7Gy8bYG/MwUjMdIiNbB5PpPaVOGC/xCGnvORBmwXGEMFE57FJti8f2EcO HvkAxiSQBRvgMS4qrrvB2nHgAfvGy1++vx6ovFU8OeepuOjiX8UXv3BC3HjT7VrE6XKiELHnWNmR +9C4rA4sdUVhc/YXbbB+OnKiwFycJ7Sai5sO3eIeXcyIhVZrD2rqM3HMpPjRGR+Ns875pBZw8yV3 ottI3STdh/idn70nzrlwrZi/+PHQvm03140bPSHu/+234sC/+bkWm3MVYdypNSqeevzuOPJvd1Ac LdFrtMboPbkt1WQJY6UJipPv/+wDcfFFn5dKC3VRQruK4KA7bZOe9IFl3JMm7t7dEq1NAIra5EWt INgBOJztW9VBY1+6j8CPeuizDmTw6TvwKgZJgx65gwfv5ZKJBGk2pkiUwMJjhJQmb+bePGLXlJgj BtUgVXixpna5ZewQi1f2XpjBDZ/ynWXFfZ5lwNcfkDBSQ+AAkyRWXgOH642QNFSTgLN6ZNDiWTcw 4eZZgqduCgXPQd3wHWgs8tyRUDXlg9dLgopX0fXgmbNhbRmoMwjTeK0eRdI+Hs9QDBNA4uvLQqbs xRZNXU5ANg7y/yh1vuyMsTx2Dr/Lw7KU/Evq7+M9K992khn4ZbEfUIqDHGcZEw5n210VjgPhNod4 QIUBVfjd5mzxrbxZZSDkoJCIBIRlcMneP8qBn2lhpuQ81MhqJxMqeqA0NFGMUV/9gxB06ntL6dRS ajRna/qvBX9joUMKfTb+ehZZUe7/df/DhXiCsaZ8nIsZQdNFji/GmZw8QVaV6sr9PTwzSnxVMgbl IM64RJRCx5jHgE+dAKrhQDuRT6HGPcZdZqGczBK/04EqyEld38hRxmsAwfgBz4O33xvrPnfH2GvH DeO0Kx/Uc9fG6JLdqHjpjINilcFZcedjk/2kfmSyAHvuLrvFm//8lbHdFhvEwjl6i8J3T9arp27U SdY4Pc1/Qrziz4+Iw2fsFWutOjbuuu0O36d1wx0P+1fxu+z30jj6qBmxyYarxyP33x9nn/aTOOuX 2tnTZMZibK8DDonXvWq/2Gzj6Xpf6WNx0TnnxA/PuEo/+pHeemn6lHU2i/e++bXxwl23iCXz58T5 Z54bDyyeGFuvPTa++b3z/AvNVdfYLN731tfGXrs+N0YPzNdbJM6Nb/7wF5zW2278qtEdTt+5e5JW on0Y3POiLZ7zhLPCxZr2FX5GH2zPv+2Mz+AjnGZ0dp1wWsF5PhsL1Kmrrxb7H7B3vPpVB8Xue+zk HylcfPEVcfzx344btcv55JNzxUVLSi2AWbwWv8rAj4jwIgLhyFRYUM7FGTBSKuKHD0MjXMdPVlpG C6ZEFbrvOcv1oXbRdDlz2Ty31bca2hBoRhzMj5mLdd+ugt7zvPVgDNPDfVX320U3m24sCxGlpVq4 zZ7/hBdM6D+yz0p9J/rVoPjet+hJlbVAs6+Ib7UJJNXrP9sOBbHPSY6AuWBFHv0Amkwc00qg4TzW KGKGbzqs9CPyfYlVRPAgPhij3TyvVUQOjD/j8BQBG9+6OiYkz3GVEWfdLEb4npva+qip51svqj5j hRo0ZgxIPdweCkp5+V/rKtcK2CMCIT8FS2MLB4MI1w3SEfak2lmjjld8MOllazGq/mms5frLPFzW F87nQXw5WJUeyEHJlNHlxa6MA2UyhwaHJW+vvOUg/lDQePBC0XKCsqx8kZ2NwPjUJ451d75gK4Jb mUajegKLD172h/x/5rMy+pHwEeX/5fLdQWVX3wdBQKjj0T09aBFDigHHkExuV3qSwwF0gfSzB7xy Sostd35gJuJLyWdExBUdPUHmrzhWsLaPKjRwcP8IHRJtcHuXVEd98U32eYIjxoLDP0PENOySQL/S +FHlcnE1ovy/3P+/b5f/hvZjY6KOGCCnGMPzo/VoBY9hzEg4mo8Su7PsODGOob9y/uvFCZMp91Xl LgnjKh/HBjGlgLCoFksuw6diR3kP6sSvYrZuCfHCUnWIZezNDGolLGkYA1GUX5uOi/t/fVnc8FjE 4Ye8SA/1XeLbXcZNXSNmaBF23Tnnx91P6hfSYsjO2pZ7viRO/t6X42U7bRSXX3hlzBu3bvyfE74S 73/9HrFIbzl42Z8dHcd/7gMxevaD8XMt6nbc7+Vx8nePiW3WmxDr7rJvnHjCp2ObdSLOP/9XMXmj beIr/35cHP6i58YCvelhn0OPiJP+/Z/iuWuPjgtVv3jievHZ/3NMvOWAHWJQN+hPXGPz+Nq3j4sP veOguP/2W+OG382Pv/qHf4gTjvtUHH3kizUGLxHOFvFvJ3813n3UXnp23DVafC6JD3/u0/Gljx2h zTi1DTtwudO+YYNBZHxVYmdfHxYs2IyE58hhU0rg5ySvcaf9NYNTraz4Ww6LPD2RRjuNQ1p8br7F c+Kjf/fuOOfsk+ILx35c966Ni09+8ktx8CF/Fh/+yKd1b9uVvomfx7nwVoq8P00iYWJVrEBKlP4s blJ+6Ua7aAtHYJobrbS0gYdSnnASlxmbxKeyLsPNchS7bp8WY9o31QUqwWGbrBNHMC3d9Cfiqmv1 LOK8FlAdmzq+LKjLr2MZ55oM+JcML0xRj4948GBddu74hhefWrwKwzzgZG60S9UmVlvwbynqq4VU tvrsIzzbVdhMHqLNbpvCq7twBAfT1SZAM6O4s2NWduaUoCFKiPtWsyf6oCGcUlPxQwx4+pAyFlXv +9yQ5xYlvlHY3KJ94uArpBor4N+UYbWV8ww4MGwCzF1fiQiciiKkzOBVyUQp1IMCmIi1aJjYv8jM M8uG35RAPw86rqdOdMjDisjEACqam3AY5AgIIVkOjWYBnmXwU880EkxLT9ip7Hp4Y3xxNUxIDj7q ldohC/omgPqTaYD3A5UvtA7eMivFbwQdfisXn2L/py4fw2oAwEXaE8ODaeyKt/Jhcwjm5GM8RidR +nK9B1YVW8oORZckiaL8IPbEPnEIiBu3PWGXHwXlRlkoCUWQLMZ6qWx6DhrAxZytcVzIGXLKFEkR Qk5/IojVRqd2yAIIIwClB7L7U6F18JZZKX4j6PBbufgU7z91+ThUNiImPMTq6NgSjAseeJpB3Ujg KoFH2T6XX4kk1zTajDozNV9w/ecYRZ7qXA2U1PiRw5/mA5xac85slSAXL9OKFwsS8rwOyicdikXv LitwF81/JH55zpXxocMPio2/9KO4d4522XbYPV646eT4yGeu0j1yr8gYnbhavO9D748xM6+KQ1/7 4bjtoQUxbsqJ8fGvfDne9v6367LarbHPvvvE47deEEe/++/jcf2w/+RzrolzfnpM7LztJrFgu11j 9WVPxJuP/kj8/N6nYvpJZ8RJp54Y+++zfZx44b0x4zWHxJPXnx1HHPn38dAcvfJq2qnxw/N+7J20 4077VRx01OGx3/NWiw+/8e1x0kW3etw/7xdXx8nf+owWlwP6EcCYeNO73hq7bzik95++LS68/j4N GGPj4us+GCd+8k1x6k9/Hhfd+nhM8OoMD8pLsku3gGudk75ZvnY/FRKLClNoOBnmKe/YU/2WRToJ PO/YEw+q47lhvIaLx34c9LJ944jXvyJ21oN1H3lkdvzoR2fq+WyXxP33PSSd9XgQ7XiO02XkjCl7 THkdydpv1CjjWEt5qCqR1tMLFVUbg7HEObSCGL1ZCKSOzJeZwK7U8hzElKGomUJDEpQVz9IAoX0p xzHVY0ilKpcODdw06CNs2Rx7KSR9aroC+UJkIcePwYyJGuimAhD3Ls8HygmPGKcd6IMv6Z+5/khR iWoqhCslHZdmycMVS9WDl5XFCOZNPXwxhU+6VIVda11Er6N+tHakawFolvDUhhV0icNiEJhsnmGj CmIy9fWlcs14IlNbUi/rDUB4fvoVeZijMnlsQt5gvpSzD8vvgPpSLyA6KtObn3IoUwIwKoqbraBZ V8zABShBJnYIu9JbxehvBDRqbnKpQwAAQABJREFUKK7NMnXwS4dha2F1wSoDtKiEBYZOGdCmoym7 nfBM5bugMy+BK7h8RtBftkaQoVkfnw5ucMefppA42Vthela+zVL2dpyMsFXvTMRdoVk6XedFvfyN NxwyLEDwuQtpcXuKkwT1pv77U/Bt0iQvvumEFVedvxRbjn30omMnQ2XAQDYZKlNxcJOvA1l5MDjH FB4g5FYb27Ha/2z82aj/bf2viz/5hWhjKDTMJbk/nd/52s9dw+/Njx7SyBNrNEUf4oyLIE6CG9Ux UZGT8ZsEImHUd0zlIS0CdeKbgcZX4B7rG4LlidT8VWddU5hgIOk1WeOWxrlnXBQfftfL4oC9to4v nnp9HPSqA2LxzJvj8mvvixl6xyqLnGlrrR977rx+XPe9s2PTHXeNbfbU67AGFsX999wfk14xI3bY ZGLcfec98aaX7BNfPvajcc75V8Q1198RB+1/ZMx77PHYYepu+kXvuvH3n/9EbHXWRXH5VbfG37zx z3QJaVCv2xoX3zrm03Hq6MWxwbbbx/56vtmGm24eW623StyhRc7SsVNi5x23i5nXXxI/ueKOWEWv gtKpe1z3y1/FBVfeH3uvoR2e1abFC/faOWbedlWsuv5z4jWbPte/8h4378GYN2a12PF5W8RFNzyi G8q44V42UYfDYjUJ2xyyiI0lG+Hjmqg9lWAuxhXRQeNpxH5puKpeoue1YasNNlw3DnvVwXH4a2fE mmutEZde+ut47/s+Htdec1M89dTTvpdtjE4MJ6KL+BIB6bKUmXNXeo0oIVdDmGWrgGjHoRDIJ49e e1gUJKUOxBZjEGNhCqISsMegXKggW7C2seR6Y4GYmW6MKng7tgju8Kyw6greJ3J5yqpodly+sseO sdBTuBSxLYTo2Jb2liE+xQoeHq+BCCkXQtSDAR9sLVuov2SeftH6ovC9PoC/cNJ+Pc7eubYiVSda +AjmK4D4gvomrSlpfeCFXskT1dLXHL3AhE7/9in01p14S5j2Nd1W2otuY7khkGBjVZhEopcAOjnB AjO+CPQx2o7lBkTwHPAoDCPVWakWGJ48TSip8KanSFzudDXlVJU0FqB6VqLNERgNhWmolMiJTzDs pZQycYV4Nvl+6jLPm1E9jiBXnL1zwsLRkUfDk0eefaIPMKDumz42URLZ4IaiwvJlKwpdqy+hJb3w 02nITfriX2R1LD5VX/Q9+J+mfHtM8YU9/GdfZlxhO6yS8YXlZGXFDSfZFTTELNTpB8UCwUGvMLpq uNRA/IpW3VufrOZkDCiDnmFguGMAVWSrD9BXakCF3ojgERUqOraYWIlBBDOImg9ZlYXG2b2uW2kw oaa05phlWkoaWYY7qep7ssVXqfCfjb+0x3+2/+FID842cMYIOy9w5fdP6QE8TRzxz49eiBn5h3od MjLBNYGPhKCT/N7LCwKccbVl8SP5hIiX8btSiyvISl7KoB8A6mLP/FocKhaNLxgP733w1qvjl7c9 Ga959UvilCsej1cc+IL4xfc/F4/o+V5cPiXpgRVaEC2L3V5xWGyz/wzFPVBNXrq36+GZs2KM3m96 0rFfiGnjFsUbXn1YHPTaw2Op7qM644c/jmO//N24+oxT4r1Tx8VfvfWw+PR+L5bZhuO6Sy+MTx9z Qjz6xOOxzqZbxsc+enRstMYkPwNt3tx5MVltcPzqtpfxk1aJeY8/nF3V/UttGFgcTzz8SCybrot5 6sfcJ7fe8/aIf/rs9vYBGrKQmTtrVgwt1A8ehOOJUJ2b9te8Zzz3T5pEjRvnvs0c2U3O2AK7et7M uYbdtqX60QTjwA47bB1vOOqwOODAffRctoH48alnx09/dl7cd/+DttOE8RP1YwsepkuvbbGAXPwh es+D+N5jAfoBR6ZdiZpK0CUgxz30hQVjGf5Nv0PBX2PlPNSZkA8NcYQc2W+pfnAwIE4TVWciYyRe ooslsklI7E8N3tEVQeEU/gh6L3aE8x/xpamQD/BrL+nK5USVzYkyfVGx5IWUfJHIyTNbJ3zpBQ96 ksdm1PK466Wh8oKLjxmzHhJz+PuEx20FIB6NQ8YNGDVfMA+gpLijk2lUtDyOORr31kvNr2B4LSUK 9IOFeBJ/+AWW5oooxyRQ2kgsJ7Yd39DA8qo0y/puytTPWUtxzJATlxg2ycQhqfja0PQeK2HNrEPy QuHeYJJbl6a2wqr00cFrrvlFwFGDfHBsMDoY0OLX8LM25eJkG1PBbacIXCcasEH32hFLl8AkaaEk VUj2yq3BDQ/+mZLuD/EZib8yvj14cu+Vl5c3kt//HvnybTW1WbgOGWtZybfvR1I8tAhpaIqWNhH4 fjZ3DllHBHiKI/EEDckxRvzZjepIxJwLnFAQs9CljykzwGfJ5IoveYhB1AOyOnQFDtUWmHiZlWRQ 4Zni25BQyO4yJig2f3r+T3v997U/4w9f4zN/9zvc6jHY4hn5u/kxtQYkH8u5jh1XEm19yXXQdhFh 3MQnThO7Yg5qYoqQJGaNp2OHR4UTcZiy68TWMppw6Jx0HFowJ84669L44tv3i9cfsSg21Xsxv3D+ 1XrdoHaIEkl9S3O7Hqz9vS//Sxz3o2v0Qnq9CF4T56Q1144dN5seV90zP3bcbbu48Dv/Ft/44pdi 4y23iH1etH988K/fFcOPPhAnXPq7mHPrpTHjwJNjvfXXi5133yPe/6F3xBc+sTiO+Mhp8Zkv/G3M u+zsOPJz34qZTzwdczVhH/u9E2NNnnOmXbrFesDrqhs9x9OY35+LXfRL0zU3WE995y7ZgRfcT44b zv5uvOkfTtbL3Cd5Yh81fnLs9oKt4rbrb9eDwbUIEF32UbLNkG2Ct1HV3txFyZb7XZwSVfaFFrvT 730JVPey7bXP7vHWtx4Zu+22Y9yh941+5jNfjYv1a9LZs+f4xwg8q03bbhk7oiWV/Vl4MbGnN7OO uTUXjoxL6fmsST0Mw33yHZfxOcn0HAcf/dvf+NcubkeVfauGyFImqBk/3GM1vESX/J7Sr03XXdCb 7JIBFPpwMEMyLv7+10j4SPyR5cZhpXxT92UDwpunXxLrkjg65D1hCki1Cb94eaRj2dRcaa8yhIlN 0UT3bNXsBAIJUdCA3Dpx+nz5NpVvygZcR+nHcLywKEOf1Mz93zKaLPOAqimWG1Ypv3Th4d95u1ib q9oYgqJus7+YZJgytAMAL1Ie2Jlr/OVcBk/OcARycNNI6OtMoahMj160yK0SrY/wEmeM385UQfAZ hjtEDoAonR0EfHRLOfAlOTBNV85J5mkHjA9WE668WMBIdHTaVgUKnBNZ2MJXWzBWGqzhYewVfHp4 K67v0RQfWU8DxR+i69UX3Yr59/BWXP+/Vr7MQnDmjrEdC8TNzcErYwIcWYYa1eUEyC+j/eMVB0ou uLxgFyJhkfGqWGNmJGBxmQcVwRq3ihfOtNQVHFviTlAqr1gVb/MSv96utmCG05n1UTwpylI3kEmO DcQ+G3/YwObWoRfHwHqfnp16sP76Xh4ead//kv7n8QI/E3uKJ360Jb/zYRxbumxIH8ZNrmgAU4xU QIiCSOOxBz6JgEd9uoHWyjpOGCd9uYuS2g6/MdqFYgz2bgnjpD4pwMw9SZhlk8vuTG9nGkWQKV5s Tyvbwtt6TdDi4rLzzo3HRk2Pv37/kfHQdZfHlXfN1uVVaIjn0THnST39/565cfir9481Ri3W/VyP xmNPLojD3/mXcfwx74u19WiPt//Nx+Nrn32rHqn/dFyry5vH/+u34qZHFsV606bGwa97Y5z0zX+K TVZbFjffdFuccPx34oLL7oo1N1ovpkyZFuuuNipOO/fcuPyG38ZjehXUutvtEHtvv24M6XliS/Uo i19fe0NsuN2L4jX7bKfF3CLd8D8YL9h/vzhwj431S049T23u4/Gb626JnWbMiC03nBKPzJodsx6b EzsddFh842v/GDtsNk1vClDfV5NoE/3SvrL52om9XIClynccc25kkSC4fIE/BgaWyDbj4pCDtWN5 8vHxzX8/1guud7zjb+PII98Tp2rn7emn52u3bbwe/6FYQIa/8CX8XfCRLPbNlHBkehCSsoxDREYu 8sglvaNFQwlv10hY6kYeHdmlMQ+PN4x5+uRAB4pSxnDGKnOkdjAfXD2WzdNDPsCzAI76FCvy/ojc 9dIX/Ro4YVXHcST+yHLhFjz59fgA19w5c0qMWqx3Yuuyc/ah1mb50/N6c2qNuznmwgtbSQYNgBV5 AfKKXDaqfIGX+EtvCVkE0KZ/IMS+2BB/Ma4LROKoD3W10UW5NorIlwyjm5Afeqgv649vcHMcgS/2 TF+iDX7i8THwEVT1xITOBzqmJUyoVHRwynwwEkEoBaknlZB+XPIFb1i0AkGdQsCtqPRKY9A68qUY AgSw5J4ciigPbb8OiQvXHg/21iTSHJhYc4dE/IWThk89obHOaZmMd4Cm5AhFf6k1vsGrvh/DBN3X SPyuomWS/0joSH49Lr1c0hT9SHhxXBm86ou+ynVcnq5X6uUSs+hHwlfMp6C9Y9H3IJlbnp/v7Reo 85Xtjw+ZPDVxMiiLlUqOKQGMCy/gmRKfmMO+HjDh2WodfyrBk4QGFc8e2EoG8ed68UEmKzkn0RpO lIIhHj7A0yXDTIOeEuOXLTP6eBxRfNaPGBp9aZfcKPVyHTNnRsKzdmQcFbR3tGK9Ypdbnl+v1Msl atGPhBejlcGrvuirXMfl6XqlXi4xi34kfMV8Cto7Fn0Pkrnl+eEWz3uqxMv4lTAiVHJA7fEhZtJT GQeOJmBmyVfDFbHBZiZcgxmjEqfkcGTCMk/jABE7B5dyNdGSdYUq++PEwAShmyeuNokjbYIeBssz 19jZePzeO+MX1zwYf3bAlvHdMy+O+Ys07utRauDwSqfheU/E1z/3b3Hi1z8ap56+dpz9ixti4213 ihkv3iG+qV963vnAY1q4nBUH/fNfxCnfnhqX33hfbLvrHrHHWsPxiWvuiIvnPBRHv+GA+Pb3vxpn XXRDrLruZvGaVz4/zvnKMfHwrAfjV7fOiQ9+/O9i4+1/EaOnrqfLkHvG2hNHx66vfG289br74tQf /DDOPmjf+Nw3vhy7/eS8mLt0SrxK9+qtqme9PaFLu+PHDcd3vvWdeOV+n4/vn/z1+PFPL4nRaz0n jjjsxXHtWd+Oy697yM+rw0I4sVxSJgLMRJpzEaW0qbq+YCyo9IgLPdR2lVVWiUNf+bJ4y1teH7w8 /uc/vyw+c8xX/QiQYS0kx2myzddY6aF6oqkxBX52njPLF+wb6ZS6pA7GwKd9ifnLvgfOuKGU/NGP cY2KHj31GQ+NkeOGeTDn0TzmtSgWR6MGJ8fw7WvFqI2e0nuZ9YpJvZljxakUsxWXb1YRENTVcTqM xC+U3z8uX79sUM+9m7VqjHpsqn5Mph96eMxP2XxjL479WmQfhLNqpAOL1q5/NYL+HVYwPR94/pBZ 5etam4COybK/pRT/ejwdJd5Ib3o437N9taTn29S0+q4Xm9rBxkbZq82q+8o4JCYYRTKOWIvhkTH6 gcSozTffq2RYEc5srY4UsSjKcrQNoe98crAywIWTijCJZp6GZoOSbQ8nFfcPCRxkBA84yUeZRqcH MuoaNve0YUBw2HHzWTnGEQmymLBJGXwpC1xyXvW6Vl8i8e6f+QBMPRCd/If183S9ImeD+TH65QrY jOOGB36llJH0Bes//qH6ftz+/Ei6keXCXRn8mdYX3sjjSL4jy4W/MvgzrS+8kceRfEeWGz4dcL7i 4PQ1Y7QGGB7KmR25bxIkHuVfPMzs6niQozMegTER9uKq4BxzgM7YqlGRGMHf1Dv0FEh0nRrgDZQw dy7xRp5lS4tcJEKf53LgegKAZ6OhLw3rsQdLhvTC9ENm64meev1LN1YmJzhkWoldqtqRT2EkXYew ksxIviPLRbYy+DOtL7yRx5F8R5YLf2XwZ1pfeCOPI/mOLDd8JqEFusT043V0F9gqvmcsd9GIOQ0a qiZOiAHHBX4kaGqGtV+SN/GSsQVOwxOA2hy76iS5xbLgFU/IhMa7xMr0xl3RC+5YFX4JyIhECEkS iFEmeP3zAN4YNzkOPmxGjHno5jj38jv0cN7h2Gq33WP/F2wR555+etyjnbPR6mszXnNojHrgxjj3 V7frJv0xseML944jDt8/tt1y3Xjy0Ufi7LPOi9PPvVrPYNNDfEeNjxcf8rI46tB9Y73pk2PW/Xpq /8/OjfMuvU20S2O73V8YbzxiRmz73LXjqUcfi4vPvzh+cvql8bT0WWfTrePovzg0dt1+s1j4xCNx jujumT8uXv+KfeM35/40fnTx7TF97U1ixhGHxIF7b6s3oz8V5591Wez08jfqNda/ihlv+7L606jY aJvt4yjJ2G2H58bwgifiiot+Gd8/5efxhN6owYYitrar7CcVZI/qv50fMZl8iPWYf3gv6SqrTIqD Dn5xvO2tR8VG2jU8/fQLtFD8adypH25Az2NBMmUseC0lgOOiaipOVO6fv6i2DsjUJ09K8RUxlql2 /6gnsQjhlpGMA41OGsgcA9BIn5ILfd0HyRhDPmXkmJfzKSfCLFw0Lul1XoxNMXYwlk3IX9tbIJow oXpNkJAOjqVcJ0g3jimPEQxPnaV1I0zbVinh4EKTKKN4X+qgLpsOj48xXIJmZ5sxVTzrxNk2wB5e 5OggUi/YaL9K/rPolOSXxaOTionb+q1Kaf++OUW8Epb6OA9H6FsChh95xl/ZvvyABGDg8FFB7aOB otEJk9c1Klkd1RcurAs9tcwy8Fz/JO5yCzgHE4RuFjbsCS5/paNhA8PGpCmI8IT72/kerBdMCQM3 6UGEb95nIDwHZfIC7glTOP2Ng6YMh6ZpHDg27XO5LSL41W5MRgXtBJN3zi1lAtUzepZtME8vrNYT r/XydFVJVjq7Z7ws97cHHapMnmQ9dBwJh6dTNssyEtAqlrPds/JH2t9+nCc/n7l2jB2a0ibQNCa2 5lO2b5buDlVHPTHWH8Plp7xU2jyixR/uyDr45mKQcsZO+rnkMan28uiETyve0a2NRoxMqiI0GXyG hgZ1U/OSGBzWAu7g2brvRINnO4EY2f7l+YsHvVup9HdBXyuDPxt/zUIZMvZDQp5h/2M80AnEstPW 0dWESZqoecJ/jiMezFWtKGlC5JeOLTgZQz7LZqFfeMRYG2OZfJw3YcYOvsS//MmxHe/K2PcCwy/j ADkwZQxMKaaFXv95aUcEGl99IqNwZDIc0CuPlioe2YUj7ob0K8oBXtc0QZerPLPorQH6oYBmUL0x QZOoeC/hFUmaTHmDAu9LXbxkWG/gyks8LDLYpRo7XpOuXjmWb23QTp8fk5G/0uT+A2j5xeZi3fzP GxQY54dVZhHIK6KW6peniwf1nmBfJUbPgTjs/R+Mv3vdjvHOP39/XHOfnvKvBcf6u+4b55zyxbjy 6/8Yf/WFM2Os7onjLRLDsgVvYuBxP4sWpT7jeByQ9MMWtiwdnRb5SD5tRyfNcULPvtM8MUGXhg86 cN94+9uOjI033kALt/PjpG+fGnffdZ92hXRpW0rag+KTmw1mCztdJlPcKDqYtkn4yv0U//LXytV3 4UWqcYr60hc4eJ6roVddwZxpXwUvmHm3RQevnvI4JtKKKsYd218nIzneKZq1o8m7fYnsHmZyLF0d WAIxxtFC4NYIEumGSHSv256gLt2Q3cWr6FSQPiiV8Qku/Bk+87Iods6XR1GTNjA6RcvzwlRcas53 +0Tv122pkOO/6pXHdGk+/JEsaDsLJHT0ZWtXYOesr+9qf+LBL31CGb/xIc+HRMuKCV3cdA3uk7ZO fmaSH32NOGhXEyUjeXJFMReLvoTaCQFBixvrDCFlHUcqX8ED86LtP4JfPArHjm2M1CwRuiYbgpxG ZMM0Axat7y1SoZ9H1XEkmd48yxIJlz+aoxtcYMvI6uW+u9sFgDIQLpdaubFxG6hXGecABtbBG23J KnjPLj19jKoiEjqpz1B+j18KLDlNfNfWgvfwU37B3YD/SvkS1N/CkvOflo9hTJyxAm8e1UDCxsQk Z0CVKh6rnmPFLbqgXT9Or56RJ+OpV995patzpn2hi3XoOkriM/AwQaJ27qCkRdT3FF4pxyzI+iOd yu91bDK6yEgW4tt0grf/wMi/jkSZZxp/XjcIv2vpM5Tf82dK7fRqSvwh+R1+164i7DRpgF57ARTd SuWrorE0/e/jZ23BC7mTOrL9VEAiH6c/iZ8GQ4IKXVGDd1nSJK5WvWn7/A7dyARzFmDCJV5J3aUe CbAMUJxTpWGtZIWgQMcmhyAk2VBoUwkZqhNo/MSJ2TZX6XYX7SKNHadXV7FAFX9IJ07iV5OVtIul xRmJ+854LdYkvRZLinpnAp9PEE+OXE0ZpYWfHnMGKyd2qagb1GKNiXnSRBZV/AJb/ViXHieoHUyA /CJwwgR2Q7I8adL4uPrSq2Lhm14Z3/vxv8d5F/w6hidNiwNnvDiWPHxdfO20K/QDhfHiKUm61Dau GxP0Wi7aSHMlA0Wqn1H2uNC0o5z3qLLQHNZ9R2Nif72X9L3veVNsvvnGccbPLogP/PUn4y4t3Bh/ 6i0J6EgfMj02Ez/vinkBlOXOPbKCfcuu1IiUMZL+J09K3hk/Va5jyss68gV3pv+rT3jxTY8kja94 KWSIJHb0uL+DmjF6T3PypZS4sG2iyGYciY7LjnkyIzzfb4z+LGayPSP1M0fp5QVMW/DkohWfEBPV j/r6QlPBNsHOKlc/kabWx60QX6R7bKRdiqUyQeWzzK4jcrSzZ3P7y20GD50dT7TEePBKezdhLpOv 9pFfEQ5DCjGCvtQPMREkshecmU35wsw6fYNLSxynNnxuRCDPSzwLVtBn8/VtJNMYBn2B4Ap+v4JZ l0JoZAoswVCMSHQwJRwEL1bnlcy76eIBxnjwKucsz9e6K0jALdnVjuX1xOipO7KSrsfT8mlXG7h7 weCa7qsoONsiGU/AsTjbs3CijuybZd2kyvkazHqenD1r0j6+yWq575Hyl5+mZJuG/UzlF33PA/81 8gkc34+mhUp2w9S806/p+UzlYz/OiODFYM/N3KQK6vTn8rFBHBYc3K7seSk1sVb6yvgyd+NlDJe2 1MMh4waeHjQE9JkxHYD6LkbRNUHZPlWii5Dg48eb6LhMlwdYc3qoQRFoOCr9MfHnX6+yUGy2xpfP 1P9+fEm/4BZBz1R++c9K6wszkJ6p/KL/r48/lh+y+X9R/Nk5+EcNdN/niE+rwToyduBl/AycKsrO EBBkYKC8YxFDNSz4503VCXPcml9jJLBtJXrk1sl1SpPcWuwhD1Fdyt4HEIv0BWbTQfWo2Mbkpp5A 4GdaHlZQ1ZEVS9ujtc9UwFsbGQOSf8LIu52SRzvwu9slZivqq+4bwuNpBvxgZM5t18Yb3/jeOPTg l8bO22+st0Ysih8c/+U4/WcXx29nzo/x2g1DMXjy535qSA8m8HLjBnJpI2pjVx6+iwl3333HeN/7 jo5dd9U9emdfFB/5m3+Ou+68V7TsJmqBKyKazRH6btEsTmjhSvPEByTwUg9KyHAMiYl9CoZ5UgN5 HskDr+NIeD+NkfRlStok0b1FVfIsXg3LJO7v4Ouva4ca4dvrrUe/Lm5dp1/Jx9ddvsUjc/LYfNps w08+Nbd7w0iDxbLR7CiJQxpOuJLNnOpj2q3azxEbZJ1LfKXNXUx740sSpsN66IY+FRNlx7QHuBkH Ba9nVJScahvH4gUu/PrLKVMx0GxAeZgdsxospIzprJXyDJYoSELXGjzazAnvkYnYxmfdjxhgmI5O XiZqdNS5XoxQinylzKdDS2GfdTWh8AFnObqOb+v8Yla0cDJ34YykgyWwWqj1N6yJEzUhqG+rlLKh SdzUG1zKvp/EP3agU6VgeDs1hizLSDUh0dGynHhLhodijy3fHR/Z+5A45fz3xykP362zzVxcgOfB TccKJgkFrIWb7jEYs3n886uOjdXmXR0fu+Cf4slR+vm2ZnAu6w6I77ixE2K8GyJYquGODj0LB6fG LwuCN32rvFL5DaFxKfTf4/uH2l/tKQbIH9BZ+Uu3/et47277xbfPflec/vhDrR3Cqvb/sfKF71+M moVsSAymKR0TsGN7vOdr2UK+7C+TdxxKR98HUbZTrDD41D0M8Mp4hUfFfsZM8aMD0Zb8g6JSOor5 UFFXQKEmJh2Zy1LEEU/EtwoV9CrnPaIicwV6Jb+V+X+xFoCv2Olj8ZYdd4p/Pf1t8fO5T8T4voFj Zf4fpRgbP3mX+PKrPxVP3ndGfOryr8Xi0ZOk8XAsHtI9oXp0xCTtnPwh+aVnNfR/QvwtHhodr9v1 k3HUtlvEsae9La5awKu2W+rsmuU/Kv7tCsaN9KXHY8EAl6dZgDMp8fR6D8zEqTA4SU06lZoOjmFZ mGcBmodjBvQ2KWgXAxr6+jLhpC9zrEKDpM92EJdOOlq7vnEacZz88AeWdxTAF1/4K+OP9VMZvf0g Yuj6498CEt1zDHGmHSaozQeW+lg3QxMXSF7SSgaevBHb+AOFvn+O6C9bOxhL3Bjt3s3+7R3xtS/d pl01LmPrxfb6NSg7hrl4g5tQteBLAVDTwjz2ywCGHPdp4TBGc+l36623iPe85y+087Z3/Pqq6+Oo N7wnbrj+VvNhx43ksQV6e0X+lh2wq+1gDH2JnxcoHCkCpx20G1jJ1tG4zQY1B6FrkiQu+bJL4sAx FyVV1/Ft7bVgKlvqbz8g+FiO4tX6qEPUPedt6jGl24meStXGLuYMTTgwfi3Z34b+djqepJt32Bif 9ck26fEqzR7ZhmRa7aHULy9pcszO++XlTcn2/CzFWYTWIrFo0Qm6OgIve/TDwOGT9YmP20gFR9aK dKv64lF41f/hAYwEDnkv3pFpaPMJxjcgfdwKnXwR6bLwUG8BR/ByeyATGwzNvIJAcHhZOQuiXooA a0JT0SyUUSihqxWGrgUklNmExK8GGSqGKUd1CiZgtYUJdjY66dAhy2nMwuuHmZfQSwaU5I0j3rQb HQWgqg2SEm0gKlQLXS14HkXgDPdrTJ+2Xey17T5x5ZVTYtlMeEtG4zdygqhFCAE2HKvFrtu+NNZ8 YlFMOF+XEEQ3SlsyG07bNWZstXtcc+ep8ZsnZ2swzXsiEDhSfipPTerDBEL6Q/J7eiVBtTMniWfe /hXJH9K9E2uv+fzYa7t948JL9IumRyXNZ8ayb9Pvj5XPQqJMX7sF2dL8Lp+77fYpcUNHbr4ufxLf gjNB4WMimz//y2fw4UOHZpDhdpSl2imTRS2oJwd7Qy9S+zrjCKzigW2SKnVAHn0LnRx3qnVfg4sQ Pfmb4zO1P5eoIjZYZ5fYe7sXx+kX6CGrev+zNbNO4mOte1+d/RV/o8esGS96/r4xa9ltMeoS3fui 0/WxY9aIo16gh68+fXOcec9lilEeJ9Cj/58ff7qHa3h0bLje7nr8xPPjpLN0r+HTtCsnw679XZPS Q38w/pnghJrYIm6ZnCRk5RZLGEtZJ+KMDkt8EQmGuy7jAdounuw0xh9YZzzUmJXmr294NZcIVLwR 2OWBN/8DR3bKKToTug2ePMBpSnuxqIayLHM8Wmz2CUczeD4BMZG+4CWYlUIDZOuLpAxV1NEm4NZF 9KSavF3QV+kMF/TBfnUC5as05qMFgna/dG5rvhpYdL+c7oviD1lOZBBmKJLNG57VTmRx0kZi8TWw ZDDWXnt6vOXoI+Koo14V99zzu/jLv/xYXHb51f6xB48LMUs4i3WOLdW7WBiYlfmnrdPmQBMX5Xsw eJVetXiARbW7dLWeskPpXbhekDehxb/sV7xlEgnRl/BAtX2cyTyRBK0X61avekHqjO4tIDMrWvSo 9gEkX+WqQ8eRdSjgevm+m8+IA6vX4wEdOlU7K1+8SxZ4wKq+Xw8si32oQ0DRQlP0hT9S16oHlwRt f6KECdE7+fdqoSXVsWpKVj+v0gke5Jl3vfMJC2ylI/FBKlwX2leu03hbbEtmILsnSRLBxElHOqA1 pwX6WEn3zhLTqlsd9Qj2BbSOFOJe6iYvgRgw8gbD5nzJq0ZgQ3am0pa9YLYiPXbWCZmkMmJ/eYUw BRELAqhM2lTs3+40P76UGBIyNeOoyI3oJBYuxaPVJmrfd1NPEDD03CJt1w/qhtuiG1J+sw32i394 7Sfiez95JK647IcxZRxL60wrku+aHsJyxUbWHUp+i7WeCRt917pyfoP32HcYyXNEMQ2p82K1g0Sg kRwqOv5n5dte2BpmJdP8+gZFlSvuytdGL6F99cQF8Qffahu4lLBx1pWg5WUkXsmilHkJV/t6g7nh xJZk8ZdvhlBZAuGf9/1kc7jUweKo7PTHxF/aekC2bvrCx1r9/ldnCuEwgXIvOjdpSz0AGpTWivcc +rmY/uh58cuvXxFzxJPoK37/4+OPJqstw3roqx7bzgaRkvSnfUrV/j8+/vEXfjY3G9jjF35kljN/ rAReToQeU5vhHJcQi0n51iRWCP2aguJgOjH0DgjjHovA4q94oj7/s452ZdznsWK/jq43lU5MFGiO R+slpvoHzxOh9HY73CZEpE7eUUQfB65k0gYUqGMKoIgmwky+Xb2URxx0Tq42lnlkZauCJ31GbR7W eIpeXIGDsuS6rZTh63a0+Gzs4eT3k6rOE7RxgC6f4DMwMOidvNe89pB497vfJH6j47PHHB9nnHFB LNSPJnj4Lvf7YfWcy1JvaIGhGXmOXfuaGODMa/yB0rRsfT9htVBx24TEJgRmSp69Y2luucJjgdJL qQN1tSAwExDgh3z+RII8FlDpCvytWvcRcFKe/e2dVVPJzkYwL49TNaZbD9HjM+X7de63BXDjSJeR qWiAV774FS7w/rrCBVa4le/RsAiEZ+rWj1e42Kr4Fqzw4FOLO/cNMTOOrSm+Jagdi55jf55qeJaf qSsYx5Jh26cHZOfU2ROCcIpn8YAO/OwbzQgGmndPAWCVvLuFcviSo09eCA0lfcHM2YwM5y0YhIxz w/jqGkGeP8mtrfo0oAgEQ53EhUkvuMmbxoahk1tx40JfTig5dexTTfzMJfknuawpYItVN6phcbAT dO/VgBZr8OFGzwnch2X8xoAKVKVzcXTK3RZeQTbkwOdn7GM1KMlJnSwhOi9cbanUzY3LtCW3TOVh 3UjKb5xWnHqy87Kq7CTnMIkska5D7p2Sqcth3KdXTe30w5BK/EqHh5AO6hIfqnN52Xp2fjVa7wsy tXdINuEysm1um3ADLGill7K0rcmhhsRrT5bo12GdfthE9MRDpjJg0w+myw1asCQOshNDU+XGwIeK SwroWEdwq86dSLyBId46kFeqDka+Jhby5qSvks/Aj83N03JaJxQ3eol5Q9T41+4LZSd4YacuJixB gERAdy6/DurSJzU8AHIs24O8VLsSFdDTH4pcGeJiqNmato1VLGgI78MRDfjEgOINv2juVD4HHg/4 ql5x6ulH+9n5JVbJDyr+hnWUpRV/Yz2pVnM7/ZqdiT90XKJ4ItE+4q981FzXUwFG/TaRvujJjevm TXtIHG3TTrLB/IpriWyZl7F5TqX6BwN6s3cSgtprX/ElDvBftcEx0Arpa1Hhg+ZL+16cSiVP0lqg 4NPsNynXtPBGZiHXEXqNGe4DqnZUsbCT/SquOyJUbnSuo9wSvC1H5WxDT4AvnTWlTdKqcJEfFJuD v+iQz1fyKt4cu9ADqaW0DzSZss3mkO03L9glhuuxr+DkUQP/51BUXKglX+1hMk6F3UYRwK8XP9Uf 4cUTCDSuKtb32HOn+PCH3hVbbrlpfO+7p8WJJ/0oHtM7W8dr0cYlWnBRICUt3960fbYJmfa5iowZ +Jh6qyRi6mHk9ognR3QzDnit7Skp2wFny9cxZfXgHbqtA2am/kk+IZJLGxCvhB5JCyDvOSuabKrs JJ5uSzcmtnajt3nw1a9z6lltKZ2F1entuCile81wPXiVzF94PZ0SGVsBq4QsbAxopLxsbNnbqi4n p261KRm+2kbjlfLQi51+u5PvEvlGU7BqP+V+uir3w/pxq552wJY6+jnW7m+34SAr1SXZbgeun2Hl bTAxK7U5euuOnkR79am6/oYjoJLrpUzuOKSRoHMoQCT+PmTvzKAGDV/hdSU7yAIy+Mph6DkmtzU6 vGpkHukorrJhUlvk0cHoaFYk22JBFpYE1TJQWNjo8SIbTdsidtloj5iuJ2s/Mfd3ce1D18XdTz6s CbIJgRK9mVMN0g2xelTExAmrx87r7xFbr7mxtukWxO2zrolbZ98ZC7TwqWQb6HLVtEnTYzXdz0Ea p19SrTV5rRingXOeXhgtM5ZWRdaOCBsdq0oOuE8sfFz3IawWL9r0ZbH59A1i8eIn46aZV8bdT83U U1JyIu0YyQaDwwO6f2S12GLtHWOX9bYO/SgsHpnz27ju4Rvi4YVPqY57ofqTOo4Xh2PiOdO2ihds tFusrkcIzH7q3rj24evj7kWz6+Qh7YB6tgc8luoeqyWx2iS9FHv93WKz6evo0QHz4paHro1bn7g3 BmQIL4xLwbItoSBdc2eMsMnYqCOcybNYYaeAASjjpBcD4PSn6sDFw5He+CYtMvpiDgcAEU7RVCxy pIlgpDeUEx7wfI9k0w0M/edglHygMZHtVIYy1HDuiRxaNjY2nb6t4u8FsZouR8+ac3f8Rra+R0+7 74Y108NMyWx0aUi7a1MnrRk7bvDC2GyNdWNw4CnZ+pq484m7/MyvRBa62jZp/FThrip9BdXMs/qk NRzPiwae1sKKgX1liboxsdrEaTp5HIzZC+fElIlrx76b7RvPmTo9nl7waNyg+Lvv6cfkl3xcRMdM Ph0YGpDsNeJ56+8SO6yzmXrBcDw4+464/pGb4lG9R3OSXvYtS/aEy67DPIIlxiu+d4idN9o5VlHM Pvz4nfGbWTfGEzzXsbDLJg1A3+f+0ulTNokXbLhrbDB1WgwsmhM3zrw67nxK76pk4fh/2XsPuMuK Yu23ZuadHIkSlEGCyEE5AkZUzAkxoSKICUHHcDwG8JhQMYA5y1EBMUdMKKIgwSMiguSMyJBnhjQM w+R4n/9TXWuvdzN8v++7937hXun33Xt1V1c9VV1dq7tX3G3xYIh+/IEqJ9B3vDza4aCyY0DbPIuW gy6yPmPT7CBetKzVH17UR/E5tsWMO4uYarZmJIlLtH6i3medIGKXqo0oPkRtNkbBpz8hduJAaTme 47D35laPrLAYC+HxIq43URpHeNhuBhQpYRtyZaPxCURUwq8Blnr7RiSPH22MT1rGPvf2WZa3WiuN 0fiVtruYcOgcNCV10n4SNmSmfTebRCzdfWH6jocUtthCZ5p1xm3fl+4dZ511Xhz+wU/HlVdc64Oi iXrvHaBcWgWbtpDoX3zqtttKqzdPfdET1XYcQduQ6fsC+c5v1MKkhG3wlXzRqSuZAQ7Y6WPqh5PH P4j0hY1DR/MNOcZJkbLfB32JV2klHcZ6Pe2n95tt6MQfVLQ+KNskOipB5+w+Y7Z/BABcyQz6hWLa BG+OiYJQnjL7iJOMqsvt0PvyCSkMbOKoswkgLiCX+HZoQqTQ2Eo39nGgyRZ8WKzf0pmvcvqyIYu3 MGAl3y838cQU74ZS4dbWPG2e6eKup4d24BZcj0/4gQSlNBwHAlRGcG08L4FlvdroBVMaalUdL17x kWX5MKu7776Bxm/OLYbSi2E2CRzvNwmIW7GV+lx5M4jmEQzBiBT2c98StpBSZ+YBo8wf/smjNUI1 F5eMnn58vDlPaMZg8hw36aHx/ucdFa953HNiY70PqNLiRTfGj874dFyxgss1SlJlDPyo4goF7+N2 fkMc8fx/j0fP3s4s/tKC8OKrTo7PnvwdHQXqGpbk1umSz/RNHxsnvfWnse30fBnky1/wpXjJPl+J 8y84Jl71vUNjlX7Pz76xqrQP+xW5CsBN4/OvPzl2HfOPeP/J34s3veiI2HP2wzqdq7WIO+2vx8d7 fvuJuF2P7+cktV7vb1oTj9j2xXHEi94bT9ph15y8m9Qdd1wb3znjU/G1s78Xy3WDe/2g9bp1K2L8 5IfHB/c5Kg54zDNipt4fVeluLcK+d9on4ub1em8UCfc72sjorIwmihc/9j3xzmfPiX/Z/EFwZFq7 PP5y2W/iYz9/d1ygG/EHD4JUixMKZvqxjnBdxgf6r7gaLN5U6/7MQQLeSo4DGZcxUtTcVvxTqnpi L3UMaP360i0ByDB1BluXfFADc05QojZW88sv+KkujVT8rdXiesqM3eJDLzwy9n3Uk2Oa38Nlibjj 9qvjm6ccFcvVH6R0szDAkq9X6qDjOXu8Oz7wnDfEzltsZR5/ydfnXPLT+NKZf+CkmwVXrx2Jd+97 Yrxpj0f6JuSY8qw440NX6ce/b44DPvvMOE+/QUnMlMkM6KRsm96TNWH7+M7bfxeT5/0+PnnOn+I/ 9j0idt1ia/PwtWzJgjjxT1+Jw//wVdmr5Z4bvz6W6sWue+38uvjA898Vj952hw4fmVtuvTSOOfUj 8e0LT4q1I1NyOJABa1Yvj1mzHhsffvGR8cJdnxBT9KqHSgsWXBHH/P6oGL+2xR8B2OKPS9br9aDQ 659+VLzlqQfG7FkzSyzWrLwnTvnbD+LIX38ortNltcGDINliPEqTWUT57ARkfeh3T3ZZ6PDo4y6R FW/GEn3c4q5NUB63kmFQ14SNX0DGUAGd3gziN81hYpWZTM78jQow9CPlHvOWEgk+6rCj9CVtMFkq B6f/jUF2aAGhojGs16xpA5i22O2usz5JE1viessXMZaxxZzcmqpJSwVQsLWZ0omgS7TSgUy1KX0N J7+goIcdFCsvf/nz9XTpwbp8ujIOPezjcfpputdTZ+P8UEQPG9vcFsSbIZSNiXHS6FiwPpW03/Hw CraWHzHK/WEft9bibEsLv8VA2pl019lX6Kq25PyWogO/wls21pYZnpMKth8GcoUngwY+SVnGJc68 d6y0S+MmunJuHeiAx/LJ3elGhSQSQoLw8J7VZz17r/jHtTfE9dffrEvR+Tuw2bsNoG3gz3cT0gGp jxz+oW+5GpB9rG35z6zSKfuzTanfAMZIXg+HqiLivEgzA3NIntXjjJzXDbJBLE7g9VPpHK0h7aw6 +Mn3Zauu7EufymRiRH/FT73XTzgHJTYlbYDHH2Kl2WU7VD0yZGdzBHwCVwPtQCECztOlhW5lAmi+ bLhNs7gqlcHVqGoI9WD4LBgFsPgzBLrlCJHptEoli83IkkoeOToEoKqHH1rnJAQcBUZOXQnjIWOc enosTxIocSnIA/64B8dH9/9+vG63R8WKxbfEt878VlytBcb0KVvHS/c8OObse3TcetutSPjf7VDw c+Zt913eFt8+6BOx6aQxcdGlv4pfX/0nTV5jY9ft945XPuaF8bWtH6e3XI+LRQsZcMfGqiXz42f/ dXw8/CG7xUv2eGJces2Z8ecb58bNt54Zq3Xmgh8hbutL+8p20li06wh26uQZseWmT46j5zwrxq+a H8f85oi48q75selGD4/XPG1OPO+ph8a4NUtizolHxaqxerhAi4Ndt31tfHfOl2Pr6RPi4stPjF9d fkbcqzXldg9+Yhz4xP3isFccE9tNmRzvOOWbupTLmRBNguO3j8+8+ofx8l0eHkvuvj6O+cN34rp7 744ZOqvxiiceEv8umVtvmy+r2qVVhQ1nDlZoJzzwaZ+Mz770LTFedvzij0fHObdcqcsVm8dzdj8w 9nrUfvEdnZF79dEHxCXLlublMLfOLVRn46WMkWx27gBMoN7B1XX0dSX3uwrEFZ1NjXdi5XKAS96M K6Sy7J1FWXRU7Phy04CFbs74SfenXgSQgY+syuRhQR+DByktyVx9e+EmxvrVGsefDh7GT3lkfPmg H8be228bi3RW6ui/fD9uWrYkNpmxYxzw5IPjva8+Pm7VJZ8QLwbnUbN8rV/6ftbjj4hjXvnOmKKz HGed9704de6FOgM7QQcVL4sX7f7a2GnbZ+pJ0/VxG3q1B1yg/v/W4mviJXsdEJOX3RjfP+/UWLN8 XtyqF72OEHjC31D84VNOO0+bMiO2e9gL4phHvjpWLrwqvviLr8YNixfGQx706Hjt014fB+x9ZKxd sTD+44xv68rvRO0jq+Npjzw0jjvoo7GRjovOvuAH8btr/hordLbxX7Z9Vrxyz73jo6/9bmw94eD4 8F9+HWN0Jm69bkWYPG2POPqQH8XTt9kq7px/eRx37g/iVp1123zWzvHKvV4fH3rtt+LWO/U0B6+D UOzhExacK9dNiMP2PS7e87QXamG6IL59yjfi8ttvlN2z48VPeG08/0lviR1mbRSvOv6tcbPGuvG9 WKLt9q9o9CPjD9saEd3f9C0y9AM8nMpEzHRtYa7U6IxHjjFxERc5hjWZ4mULCGMidiDDX8I7X6yp K20j0kjQnCTgMy8qON5U7WFUDMB246exB1FK/4LhMb9rA2N3FtxmFAiPPGO3l2EGhSy9zKKYw/ir DHqdwybn8IN2ZGTMKKqy2V7RkSWJCEfus/iAiqRR3e2nFJRoE/PWqlUrY5dHPDze+543x+677xrf +fYJcfy3fhJ33XW33+WWTzJKoOkxvl9dkrajwW2zPmlksQu7+MtTNVeit3jBMRbzEBWVqplpvvmr ypj6SgyoyVzlwsz+sAG2w65r7Li5z0/eVWJiXgcDX+If55u+imnTsBg6FiBXPJIhGRMcJfcAPK1j uR935swZ8vdb4w+n/imO+sRXhFMH+olleGSNkfbVwib1SYfbwRw+wBa1swkf8JdWtHi2PVil5HGr HdB4f0xe26v2WF6quWeShTYt2VASq9vbmqs8dkNjbJcE9XyRJY7xCP7o+HTQKlvXyR4f/Jo/433Q NwiDYOnM6LswjAeDcPlDTpdQm3YzpjQC0B2iWWjGNnRrIY+RKJDpKqbByUOeVDtUfyUPf526dRB2 vA2ztYKjdF+ebDrAhBUZWpr60GtVtmNAUwPTgIFdaVrysRiSIFDYbsianSQH5srVK2Pvx77Ni7eF t50fb/36K+KUeVxmQeGY+OG5P4ovHvTTePaOOyCBNm/W66zahMk7xcde8j4t3tbHCSe+Ld73h2/G nToioe3j/vSNOOva98YX9v9A6Gf+YqGU0RUrlv4jPnHS2+Ppe7zXC7iLL/5+HHbmj3V5cpJuptVl VYxqarDZ6lpZYaSzKWt0tnBarL7tvHj91/aLPyy41fq0uonfXn1p/PJtx8UzH3dgbP/Hb8Xli26P seNnx+Ev/7AXbyf+/n3x7t9+2WfnwF6//tg44cIz4ntv+nLsu/dRccpVf4yf33iDKtbEfnsd6sXb bbecFW8+5lVx5u3zZEruGD897yeaXH8aT5q9jWiDM5MsFrffep84fJ83xxhNnm87/rXxw8v/qAVF tulbZ38/Dn/Ft+Itez4l3vG0g+PgX3061uuMo9sMeo4ZqMlJGVpzAht2jq77BFl18KvgCaSLDZXz T1iFA1/nS+UtmDHiEhj4v5+gIaT/VNP2A0qNlQGSGK77Ljq7GkOWG38PHl0rdIX9kCe/z4u3m+f+ Lt5w7Ovjr3drsZba4oQLfhbfeMNPYvctt9BJ2MXSmTjrdfCw6cZP0itq3hZTxiyLo79/UHzyL7+K exXzMjmO//Oxcd6zPx0ff8Eh2UrpHVG//vaCT8eplz08nvC4V8Tmd14Zn/n1O2KhnuicoktK/X0R F4BDskuwW5m1ujQ5cfqsuHnub+P1xx4U5y9cpB1LdeuOjzPm/iN++qZPxQv2fG187uwTYsHKZTF9 +r/GR/d7rxZvK+O4E94SH/3jD2OxzgQY+8/HxW8ue3scf8jH4+CXfCZ+f82f4+yFulysxd0bn3a4 F29zr/llvOGbc+LCxVqsqSXsRT+/6Jdx7Bt/GLtsprO7K+90+1SpswEr4nG7zIl3POWFsfjOq+Pg Yw+M0268LGNG9n/nnBPiiwf/MF70iAPi9Xv8No748wmj4q8DElYbWdyDdkPrt0HfojFTq1JBnExC /gMjSdAZe/qxVXnz8IUSeJAinwXJcSejuSyf8W8w94v9qGrje4BDVilFEkrfLmKbBMijn08tVJmg oLOF5nqVzS++ajc81qltl0R0m9tJUrHL5yljLCFztgcaM041jyWgF5s0x3Wgu+X+Qqd5ISLPWcee 8vLhKv3Kw2RdNeE3S+fMeVVceeW1caBeC3LJJVf5TPME/RpEJtDSLmB8rkKUPNCjXdRn2+F32Y3J PNabpbXFT7njMCXGAEvrizVvg0pfQpPt+EIQSjiIBQsSaQ96ScyZLDRz/kt2XkFDPaZAMY5kXaTG OKoxg3ymOLAqfcmtmTfCgA5YzsuJCT68Lrku+wZMLOPDE701L0LgFzae//xnBL8T+6IXP8c/N3bL LfPtc2zyQs+AaaPtkw78iKnmERB0L6yIX/41ERSv2wpR/GNbY5DFWDadfejTn20Ug+OPcck7TE4s vlwuKDvE0rm4E8X2sCXhlzxTneXcN/BDa5MU2wZVdwcFwgPaR3vkhQEPvVT9IynR4IIGs/Da1iXl /ZwA+0hrD3T5IIPFjVUFBhJwfITl7UAJItlGg4ifiWmQrFGG4L6UZZtPggzkoBlc34WDCDtLEzVG BjsNSdzktfCoL+8gNIpGCqAwIUCjbIvSLBvidrpe7azVATaoR3xWT4uecTr79srHv0C61ugdWx+M 382/JaZMnBozJkzTpawpcdfCy+MDPzsibtMPPgskg1wYq3WD7ON23Cf22GJm3HDtyfGx044PvWJS T5NOjen6TNKRwI/P+mwce+65g3Zgt0Jsos4ycMM3aURnKaZo4ca9cHJO5xvqOMLxU4e0iQ8mCEE1 8c1ffyROmT+/0zd94rS49sbfxl9uuj7GTt8yHqIzdct1OeHRO7w0nrjNlrHghtPio7//qn4YekQy U2KqLldN02Pzl/z9u/Gl036pSJwer3r8gTFFv9k5YcJD44DH7S09K+JLvzg8zrh9QUylXRPwy5SY d8cF8d6fHRmLvHajQ8Sqz5p142Kfxxwcm00cEyee9qn4wSWnxcTxk6RrsuQn6wTSjfEFnTH8x70r 46m7vyRmT9vIR84MfXwcF2Ap0adOtfX9M/J//blf4cujHseDBNjhM58xDpD+Oxp1guiSeRtPETsa A4oSmHywj7o6k6as9yV3izmbblVQ5wMb52EUrfmpiz8tZKZN3Sn2f9yz1KX3xqd//oH466J7HHsz 5OtpEybH9fP+HO/9+WdiOVc/ADUGC78x8fRH7BsPnTYSF174g/js2b+MNeMmu2+JvxGdxTr2lI/F z66aa8vqiwddJin+aBoHFJNGJsVk/WQUj5Zgl/ugMffjr2z3frR2ieLiw/G3u5fEVMUD+qbqAOTi a38Rl95xj47Kt46t1O/LVq+PpzziwNhl4ylx9WUnxCf/+H2dZZ7Yxd9UPXp4+sVHx3F//q8YmfKQ ePVjXhpjVi+NjaY/Il7xuKcrXu6Ko372gbhwydIu/vDJNTeeHu//+ZdjFb5QO8on68ZMjwOe+Brd X7kujvn1++PU6y/VvqXYa/G3ZOmF8fFffiIWya4XPvalsZFsZsCs+Euc7EMc0fdF+a8fGxkL2GBn DvjpptbvFY82tWLBIhUrEmd4oh3Q+TQ+WeA/V7Qv1zMflQD04TI0McJSNoJkXOpUSb7lVEoDPKY7 yFOOBsGXlzbNrjIxj8c8XHmiMhYEY4KNhsQoPSndvqn3goxFRM5D5Sf4vQDBxkRJIckkTx833+n2 qEftHN///pfiDW94ZXzhi8fFIYccFpdddrXPunE5tRYSNW8YUPr7NlonurHNn8qz1T6vHSDbgpSS OrTiA9manyQ9CgM+kmVbnrJ7tgCotxw4Wetv85fepBsHA4cS9PIP/cUZOBaYbBt6k5CscEFAJjGX sRoAAEAASURBVLeNR7cmFTS+wjzaRSrT68wel6M33nhWvObVL3U9r2fZ/xUv9BhiG01tutBzn48Z el/VzhxnmbsTom3xWBmhirQb+zI+rbNYqXc+CdQhCw3+sq/aWLhsodU4CN+gX9OcwXeO+iULr+NM OlIr+ka3mxrcmfrLjuROWzByoAF7bUORUMACED/UB34GMcE1hSmEYDUI8ASjrtCSr1dSHTsjQQBW Oov6lBdNixq/fLGBEHBpSaJQtCynQXF0c3ZjNxM2dU5VRbUHHrFnW/Ct2iS0Vu/dJUnIi85nHTc6 69LjLlvOjmW3nx+nXvtXLbz0ol3Jc6aVS60TNfhff+Npcfq1V6aRxtZ8qycDH/nQvTTxRfzx/O/F LZpNdAE0J2lkVT9h/bL49bnfjeXSyQSJ07Hf9x5o60RZ/GOki0lyDBM1zz3oQz7LqkCvkhcFK2+L M266WpfG9GPvDISq42nWcVpwLdMESEIPN8U/Yts99YJd2Xjpb2LuMt33Qx+19iM7SW/H/vOVv4xF 0rfLQ/aIzfQ6k0033iV23nzzuOeWs+O0uRelT4RXeiZp8XeNzsD88fq50iQPWL9uNx/ZMp7y8N21 ur0jfnLhKVoIz4pJYybG5PaZMjJTl6gvj7/pLN/kzXaKXWdsooWwzgFbHn9juPzAH3Zy34I61v1N o9QOEvFEAR7HKXLEMAGgo1eKlRxPanENmBZVJfRKScszwZ2sqr1oIY4aUeokxycHG6LIe04DrTPQ 4DKBOyCbErTRTjDL/7wGY6vNdouHbTIt5l9/Wpx50zW6FKpLiOLjQ/xNVvxd/vdfxTnzbhdBvqbp qhs3bkrstt2TVVgbv//b92LROj1hqbq0GdV6b9bqBfGLc35kEfS7HcI0gTKp4fnyVxdvonfxJ35u HIZPH84IrVg8N/4470a/BLjiL3TbwLj1S2LpKt2XJhEfqI2ZGv/60D3REr+76Ndxl16+y2Xaaj9P PU5evzTOvEyLT/Hsus0e+gn59bH15rvHDjMmxE3X/j7+NO+GmMqtBZiA/2T/FC0OL7z6Z3HB7fpd Y42I0Lm/Z+bkHeOx2+0UK+++Kk666ryYpfib2Iu/GSMbxZ23nxWX37Eotnqw/D5pqg46FBmS59P5 Qv3ZH3scQy1eMvZoohrpGFR7VEcpAdjgrEzU8OdXXhTRipKtYg8dnlzgtq8dWQOJhmmtqvcWvdil Dzdo2zb2A9V7n9G+QNybRUjA0v0k26SeIPnsh2VEZR9SqiaAqS7rPoNKdLvUvgQgxto3qbQs8uLg Sg/slmkG5fgPjuyASbzEBn+UEwt4KpUkZ15luXF+wsSJ+smrN8Z3vvOFuPvuxbH//m+N7333ZzBq 8aYfR29tYUFTeWBI9ou2tb+ge5CyYZCy70FMGmUWc/i37LPFbljDdftULxHOWKGDs9uOE209tsm2 ejjPOAlvXLRBs82SHdiR9FpgYG/GabNTNlX/MR56Xu+1y7ZTLhr7E7aKlJarl1hhKPnSebNJTGbh 3QVcVsYunvB96b7Pi+13mO3XtCxduiz22+8FscMO27rOfhNOtdmg7WuUv2QLJpgmO1DpbpNtvtRq c+HBb9Qmf0pktPSx8RtsHmOQUSVlTkLlFZLkrj4YyLL/Sa7FjFWpEl+T6MPURr+DSUyJUowwYSsb 9OpDPSkxEFKd8OmjjH2VkSmbqWty2FHYg19ioDWp3UpQhn4YEwQGPiRqB/UDenZugZvJfCWXFNSU jExJfBmFHlRYk5wwWkp0EXxqm8DvISRqfuMYHrxIR7Dzi1ewqORkYdnGKVMnQEnaeKBuncI9VZtM nxyzdBVv/tzr4y4d6Y8dN9V4sKcFsnH94rh83k2aYR5hJTRBTYmtN5khrrVxzc3XaRmDHUh1G91f My5uWSjclfCjvOqVafmkqKjJfMrM3ePD+3wgNtf9dP1qLS3iZye/K346f6XarLavWKSF2mq3eRSj Rgz+SPgZmzaenjdx33DDxbIhr6a7D5riEdFuvuP2mLdkbTx06ib6YepJMXPGZJ0Fivj7grmxSPcd jYzgEwkktPLKrFkcV8y7JV6803aJpMtzY8dvG5tPlT69EuUjr/2xJkculQ3ajTxdsuWW20pmYmw5 OX8vkf6r5H5UmcVQDrJNqTa5QxcvvUMdHziznh6v/lfWqXDKFOp7Kh1z8NCs9CCYSt6ILmbopb8m EfT6qUQFg3o/McEwfl4WsK9LmYxU2GoRkm0g/6CZU3UJNOKy+dfFUt1YP7Yuo4OHAVrkrFq7UL6e F09/yMMh2h5ex7LVxoo/XVb9xy03+fUs1JG80RcL97l3Xqc3pUknxPrgpJY4eMDw1esnxCufeqQu 5c5m7O8Sbbn+6l/FJ3RLAM2g7SuWLtK9jtr/enyJ3RvQVMdPoW0yQzbqQObGmy7XJHbf+OO1IHMX zI97tIKbOnVz4Y+LLWbpDKIsuOHWf/gBHN0ZnfaoPU7yyQpdOr1y3oJ4ApdRSbq1YGTSw2NjPWwz MvEh8dU3nSRjs6r8QnmtZLfddJYPJjebMC7HGl+iUvwAg4ja7Ngq+QbjTY/GIFtd65iQQyxnhcno WGxMJQqvY6oRzFPGMkB1jKmYev0r6QssArWXKI3TmSaM90FE4+0uOVY/QQfLGCImqOOap2lhsy0K AMarFGvCVe4ajDV9Owb5bA9g7WNVtKHxdBhZ9sGDWUGUXvwo3zov3vStGJSnTSv0QNluuz0ijvjI u+JBD9o0Pv7xL/uH51l0+PdQk7Xpa/aDJnXY0F0y1VhKP4zux2Yj9jjLF/3cvEFbWtmLJduXMl37 JCEW/s3rlgiMMSb9KhDGaotxxN5PRU996PCc1XoDHbXIwCSw+4kyerKmxWMq6tjSTnwpkuzo4l4Z 29z8YuR++2DXH+/u4+zbjJnTdbbzP+Jd73pDnHnGX2L+gtvjkbs+PG688Rb7GYVuhRVRypT2aX/r 9EiTByLV06bmq2G+lMY/rT+E675TBU1EDeVugdtsz76zJc0u8m6peL3Hi06c5a/8yCzX5z6avHkm M/WUjtY6mI07iBHJeB+lvzVf68Eq1EDyySFVs6BPt6AXW3JuALvaV3iMhZm0Y1Jp0wXCQF3CtRVF tBIwpwuD+tEy0EtRn6cQ2La2WK/B7Vh7CXXeoTjVzY4MlnYrlGCJNnlKs49tHsmV3oyS0piOMQ89 QTu1kEgeFdgbNIhn4t1rGcBLdOZgmdh4dcAgDfKcMs4EYAYOkygLuIV6ys4u69gzKLDBwaRiN2gy yrag6fSoLE794PSm8bTdnhtbab00KmlxdNYfdQnST91pQl++JNbq/iK3yVHQFDvfJOlrMcycqh94 Vlq5aol31BwNbK2okpMM7+fiJuBJer3EiF5/Ti0eWiyfrKTZNJOUIwkiHu7LJ+oi+8RYQAqL83wE r1OpU2G8SLfNvyoW6AnWBUtXJjTySt5hBU78caaH/reJ+ur3Pzs+O56nnNbmThcCvUSp4g+5MgUd XfyIx/hgsQNJoOo8efQwi44KMLKeEgmfp834Am2OhLZT2k/osEHaqA2qclokX6+qOEmS8YwpkbU6 4iWf8SszlWXxo0CIu3RJkNdVDMy0VpUVVTrDyX7u5NhXHbyVlGdQWStDdt5+r3jmHlokDqXzll3i mLWY+nT5snt0m6Sun3s/Agvd7dNk2ZdZQM7giW5dzl25ekku+BxDrdH4S2XOnrFLTNHif6wWfdXX i3RTOj4ZX+a2+EMXLswHrlDfs0FFzqznvWNNT6lT3Xjlb7zp4li3cmHcvYrfLsTuZCD+KPtgCxKw PVnb1ejEgdWKibgyr9gzEQWKIXU4fyRD1f6gsmEVQIlRHKITEFSq3WSIsSYMQZhZT4ySMm6d05e0 tHpTUnXnT+NBsw6Nsh4j2HWlTHB1gOJC6U1LYfLkaEjvRy3WUaTE/mjbPXIkDR9hH3/YZb/KRrc5 zTejfWQ+WtBwVc/Y2cmLk9tWeOnum3Sf25vf8uo4//zL4p3vPCJuuOEW/24pP+9ESr3O2ma3J4vG 8/yCVfgKnymljeSyxyhX/0IlZZkzULnwM658mbxpN5g+uZDMnf22SZwJhBaNXrjdJCEog4j5FE4D /eQ7rzSbyzcJl9/ZlvI5rQKjUrfoSIVZq2r4zQld+apO32AntYqN1mYwmSNX6AXI/3n0d9XWtXHo oW+MZctXxHe/+3Mv7Eb3A+0CRTgF3lAh8/u3rtMZ/H4azasayRoHGRlU9Q0aBtOrTHuhle6MpWxH n144YBZvbROj+jqtow6ZugqT1PyGTj1XId1jspXdlIMr6IULtw8iMLGltCP9VHyF56hOhsYNsP6Y YNiSqK/VKA3kUwDUFyj5ouMUxq7Chqfq4OsS3lGinkECHhrg1NUNcCH5qIyMPo0l+du3j2IZ9Vtq aC6VHRakAr0ylPZ64JPdJC7ZrdIMwSSx2ZSZMUuBuUB53J9J+okrXXeYNXV6klRFa+Dg9/l0niNm T57gwcYV5oJDPFrITNXlnkm6vY2zIDTZ+hEu08krjdWlnnvuuDAO+dzz9MoEAiF12Fe65+jK266L yWM3N28uORsPg1xZBFbDg5HLQ/PvyUuqm2z0YJV1GdjOLCYw1upp2yl6H9hILNNPeq1asTQmyCG0 7EGaUKdpdl8kWz33NJvRxw+kz5o6DTVuGLQxOou4Tvjr9FqKN3ztBXHDksWaMHO4hM1+06i1Qu8E Y/LncvpEzspUItrdN81/ckJOCincj0EmAy5P0BLjkmsFfAYtv5PBPOVUSPDoU5jw2itua+oXW5cq pmpgqAronsAbwf3FZGYbUkcC4yaVUVLxp+xqrZBx65Z6unOKcsvcnw3MrSAEx8RG0wbxh4BCS+97 Uy9N2CS20Uv9/qJnCbqYanLsHtMmTfGiBbU0n/iryb+04KkJesL12J/PiVNO0U/FwQi/PvTerYuu ipV6xcxkDFXyC19bW+wX6xN3ijUeXrGzNuYv1oHG2C1ik5lbxZp5d0mYo4FilM+1Lp01bZoui0bc vWiB3he40j4BZKupM2KSDpC0Bh0Vf0jzwmrk3CgRfAuCFrOsKRcvuCj2/+IBca8E84wHaOLRh3hf oZ9UApB+m+Qd3NWqFIf8X+1HNmNE7MqT+ObAIelsTRZlQINS46pdKR7Hg+ws7ETSNxMNdPqdxYAA aV/hlh4wyRuZLf+0G36UtD6DzwD68oIMJvO5pqtuSIJJnQkNlURbBhOq22ZORYPGA/58SVi45m66 HVuCGLTRUJgKMRd5DTfbCXIDgUcJ2WynChLkshfz0rJlK2InvYj3Qx9+R+yyy8PiC184Ln784197 3J2ky6WVSnf5JU1LzA43LVJXc+BNO9MO8una5gc2o8wr23LL5TAZYJbSR6H1YJlkdBfE3rUPXKup GJMN5UfZkRN81uE7eGvOTAyR3GmF2akrVW0rQWSJL/ito1PeYbiK/UwZXyKWDT4AMb/kWvKBslzm tYLI/G4sMuwrk5TntSJlFyI+OJABjGH8Zxtbu4ikho8rRe18UPpsDwXVs7865o3b+sDyyW1elXNL Wwb0ypf/y8balu9Tor4HfdNRCqgI2hYGpMSRDa2eMnaXXsjdnNZ48GXVp+30TybK7TUiCVSLtA4U tzWj6mGFAmNbqXgoV321ZVhpydSWxvjmRwURaYAqugZNd56YvGiD1zs5HWF2O6DsTkraQBsqla1l Z22pd8d3jOhPYOi33bM47lyyLrbZctfYbObmcfPd92jQYFHRBhdNbGN1U/+Td9jFCHaJGsDl17m8 2kHpYdvvGWsv/5tGm3apx1RNsJpl/2Wbp8SmmpxuYgei4ajWtvOBMqazw6y9Oy68+Y8KayZO6dCH RGCP534whCyoL/1T7rdzAAqfpHRm4+b516jwlHjUjnvF1LNP9qsdwDOMvlfo7OGTZj8uttJ1vGuv +Ufcu2x53HvPvbp0qgl0q91j42kbx50aPCfoAYU0XtB6keuESTvHk7bfSTTNwEx8WvauWXlLLFh8 l+6lmx2P2nhaXHrXAj8oUWHECzxXrZ8Zc557eOy80cz4wSlHxoULb9flsjzFl4M51qGD/ldefVRn BrJelUrQaYUXVG1wQqbPYz59sZABFAl2HvMVPjr0cfzgFJT30ij/ik93ellHtiltlHAOuLIJHA9y QziGBF+fLv6Edoue4rxXLnzINo+J6Xq6+F7OprX4N/u6VTF1xr/GntvOVkN0ndG+VmzpEvp1d2hB tNPs2HG7x8bqm38Rk3iit0vq27XjYo/tnuYH+9m3HD/UNzu6rUiyPG65829xwx3iaxgVfyO6B40B 2glZJbdf+b5/0idZjyPXrF4RNzn+dordtn9SjLvsAoWJLps3J9N/K9Wkx+2wZ0wV/MW3XaN2yY6F 9/iAZ5vZj/XDEXfL9nG+eSttWK934s2c+YTYUw/nxFrdB2ebxullvf+I25euip023zl2mDoSf7pz se7fpE/KJp1xG9kmDnvJO2LzkVXxtZM/FtevWCHsbDGx01/cIkY00vRqJ/1Lvj4gO3Yary//0T79 13hW8ZDWI6GkApMbdWBxmYUEFvYSAuh20qb0uU5E20UlLPDbyKSXmKtFT/salkWwn/0K2XSObe1Y 6Bl6abBFRxuoki65ss+6gdKfUNMmlUnUuU3Usc+6rAq3EYX6YLt3UsWheCoRcywIOMuz337Pj3e/ +01x/dyb41WverufNOWXFMbrnl0S8wP7du47NCv7qbA2tMXWHA+yFjNwB2OK5Vv7qcXuagtM3M9N 8j6ici00kcv3lA5sQC4Xi2625Whn2VjbDt8c6RbTqqxtlqWjxY3b7WCR4ba9jUHCp676ETlS6S2d bJ3YwKJt8Q6qsq+zb1iI932buIOWJYaxlE07VTuEaynagEIl68ysy0XLfs1+Mk1f2FztqG21o8rw DrexytQNJ/SPPks3MKb8gS39VPT/Fq0bN8UEPzaUrWVPrndyEdfHIo9M+l2FEihCldnyqVRlOt97 uQK6byz5Kte2L0u+eLwVDB1WXV31UDiaI/X1U66dqGwpOwoEel936UO2T6dM07J1+m4TGZOZfvwn Fi+8LM697oqYMHOHeNtTXqV3qy33z0bRmfwU1OLla+LZjzkoHrv1ZiDlGCZZXslw4dUn64xJxPP2 OiSesfmD/UsKdDKfVav0NOe0XeKNz3iFTbZ+mkrwa1uT6VpdXuKeAgeHTh+M6Cb2SfpM8Hai8hP1 VJ0mUAF0XQRY+/gAWxXU5UJQdSTpmagnIM676tcxT48wPn6P/eM5W28fS1Yssy4u3zHBjpv4sHjt Mw7yEuq0i08M/cCMzgReFOfeoDN+mz0i/v3J+4WumfmN/m6bLk8tWrE29nnCIbHr5nkPILbwjrpV q26L351/lho3OQ569jtjMzV0pc7C2C7xLF++NB65w8viA/u+M/bf7fHyl84OstCU8f5gN+1ogUKc qlbYo+MTNhK1tLOfoKVUG4QFxv0GFXsVZ90+IIVeE8GgD7FTPIXbxZadnDzsmF2cNXA2YHEWqJ/M R6X7P/ve8af3td1+27lx/i23xUZbPzb+7Ql6d5l8tMaXFGWXXlVzz6qx8dInz4kdZuosg28FwFfS vXZZnHvlyYZ85dPfEo/SGeJlit2KvxWKv0032zMO2ut5nSm4ionaA5Uaq7tZPDlyryhtHpE9xF19 iD0+vJqzbC+w6tOKP/qtS+TV1km6TH7WZSfqvYgRz93zdfHEWZvEEtlI7PFZofz0mY+N1zz1FTJs ZZx80UmxVPrnzztbv7awKLZ46JPiLY95XqzSO/HSJ1zqX6WnSCfEfk+dEw+eogMt+kT4nBW8Z8l1 eiDiQr1mZ6s4+KlviAlrlvu3i9NWvVBYcbzXo+fEu/aeE8/dcUf5VveU9uLP9rd2EDHZ79nf1FF2 TGrrVBtiAR9RVt7xpCw+dZzAjN/ZsjhocvZZ01fx5AmvLd4UAcaoOKtFgONe2PzxX0f02GAaelqy ZdhXNouO+vXaj9l6P2h21z5BhRdC0JXsB9lNqv2LPO3gwwRELe3NMy6NrsWzZVVrvNb2wrNt2I+f tK/7w2KkJV7KO2PG9Djq4+/RfW7vjh/+8MQ45A3/EVdffZ1fyFtzBOxgWj+xJbyiQbebGm0Unaoe b+WLp1+GZo/TULXDZ47Up7QcFR6/VeW2NV/382kDKKmz+NFhG7Oqy+ML6GUD+eof/FY4yZf91dU3 ucKAt3SAVzqh+d4utcf4XgimfRlbrX3pzpw36K9Ubxvwij/INhzisexli4tzoZxAPuhuIOyb3CxT Bzu2CbuoB6fFEPuP9+Omte+/RrrPxhiiFmadoCp6XyB5pFI6MzUbekwlx6tDwCpf9rc99myDCNha sv36QX9hY8Y/9WlL6ievsaHtSOWYhlKg/Q4tgP7WfSRCGdoPjOIrWimHPipl35nU14dc4qbhheNO pxNbKt0Uh3VUub8tuf5WLlEj+IiqDy/cG7vu7vj2aV+PxToTsM/eH42v6AfmZ09/UEzR06jTJjwo DtQb3T93wGF6otTDb7pCshN0tu3Sv58UJ152WUzd6F/iS2/9Sey305P8eo7JekJwx62eEUe/8cex l84S1Knv1JttkmabtulmO8bM8TP8io6xClLbJVXq856d2KpymmA52oGPwB5LO6jnU0m0Eb2R/tZb /xhfP/2kGJm6dXzqTT+I/XfeS5dop+gJwikxe7PHxBdf/7143o7bxK3X/i6O/9vp+nUE/Tbg6tvi m6ce48Xpy1/06fj8i98TD562qWWmT9oyDnnOZ+OTL3tzjNhIKZReFqUTdE369+d8I65auCx22/31 cexrPhf/qktnk6Rritr47Ef/Wxzz+g/pstX6OO7Ej+hnje724op+4OMd1G0c9DvN6fcr+eFEbNiG Ft/FQyxVou8Lp2hsy2Vs2U/6sel6YQ/TPHjIjIpVSToPX+lMvNIpO9S+UcqsmPsZb9HrPo7TJetx cdDLvxJH7f22eNCUjR1/sybPjn97wVfiiBceqI7WGRo3PXEmagD58yU/jv+6cV5s+pC94pi3/iCe NXu37Fs9dPKvD903jnnzd/UKDy6J0hKJO6aIPKYdXd7X6z420oMDMybO0LI9L9tgI906HH/GaDhg Vbniz7EpudIFznjF0pXX/jq+dc65MVUHA1996/fjuds2GxUTOz/4GfH1Od+Kx+hVPJdf9MP46RUX qd0TY+nSufLJ8YKYEHMO+EYc8aw5sfmUjeyTjaZsF4e+5Otx+PP21SIkz1rZr1rAjdcTrT86/Wtx 58r18fxnvz++vO8HYjs9mEP8TZu4aRzwtA/FF/d7kxq3NL7wyyPj9uX5IFDFHzj5nia6qtdYGjyU HEvElP4cBwz8Q7FZcWhRYtOoihEmO6XR8ejOdR8XvZOXKeTpt0rmUaEfm9jcly15Lwp7+0by5JwA HpbV5EZbKob7uipf2w7bE54NTD80H1CPbfYiTasyAWJXSSs28derK7+v0gM9j370rn49yKMfs2vM eeN746tHf9tn5HivW+nHnr4Pil5b29vXJ13DqXjZVn6DmBiu5Db5K/ulxg1khlNHa2odK01PVyeh og/Ll03DW/jKVrb4bdjmPn7xl0z1MXJ9bPiIBWhlU18meXux41imccJpf2AMJ+pIhVX1tqPp6tsL X789xc+2s534ap/CTfuas8Vb9cj1F1LFV1v4EncgWzKFUbw+udPr66LXVo0c5dOyF7zigUa+ttRV GqaNugeuDO1vARo20mDZL8qmowAuPrbIkYrWV1y04ik+eCr5CEqFHGDUOP0hV6lk2XKESmKSL91V D71o5ElVx7Y+LYYGCyoRRrRQu/Sq4+P9P9oijtr/g/HSF3w49nnm23U56baYNmMLPSU4M278x2lx zDWr4o3P31tntdLGdXpNyNi1d8ZR33u1Jly9MX7Hx8cx7z095t9+g54QjZi99bY6S7csvqP3VT3l mf8eM3UvUp11oyUL753ny0T7PPM9seu/vi4W6t1Wr/vGnLhdZ6/ab5/17HST6AbdTzdFn8k+alWj FZVCK5dqAp2oej3Pp/uemKLFrysM3zjpsNhY96u942maMN9zWtx2x416QGFtPPhBD9VrKsbEjded Fu867hC9jV+/CqBLXCN6EvVvl3w1PnzC5vGRlx0aB+57VOz7nMPi1oV3xMxZW8Vm06fH36/8bfzy Zv1k0XOeoZvVZYNMGaszOHfceU68+evvimPnfDqeute/xZMf/9q4Ub/YMDJ5ZmyzKU8Mro/fnvKp +MyfT9JAoQcstLBRVLUGUj3YcSFWPFR/DhgzZ3qqhzsnR8HVwIR8xRw0XOajTmWQHby8tuKZ3sn4 6essO6jr7wf9MvxerINdwSYaiMZqi9RuQa8aDgT+69xPxZFbbBrvf+GceOP+X4xX6knk+XffrRuC HxybTJ0Sl1z887js7q3jVU97vJY0SrRJ58VWLbs23n/cgfGfb/5+7Pbw58aPP/zMuGXBjVoMToiH bvEQ3Xh5e3ztJ1+JV+33Nl3K5pUzskM2rNb71RboVoGdteD75fv+pLXhivjol54dP1+g8686umR5 RxrYiU4oeoXHRL30V/d1ctZE/8Zz/Lle8cZlXP3yCK/UgX+i9oFP/PhN+g3f4+LVj35m/OhDT9cv eNwQK3RJfvYWsxXrEVde+pN4+3cP1UuI1Srpn6Sb0U85+6PxKfnk3c99Tfzbq/8zXvuiI2LBPYti 0022iY2mKD7/9uOYu3KneMWTHul7/GjbOC3+rr7+5/Hm47aPr77u/fGyF3w09nnGO7Qv36GfKts8 ttIvMOgGzfjmCe+L715+vt69yAMW7D5pPPsLOP0FD21wUj/KdfZ9ElQjGtXEhuND2zorRF2dGUv+ FhPCJw5J8JAnQorXmFSKBbp/eghHk6wOI1zdxbEJ+upkXY9M8rpRLjXZwoNPeduhI0Sf4cNu2tVS xTrbOnDpxKWCMye2szc3WK3tt4LWTvws3DKJtqNbC8A6+4JKXk/BGY6DDzkg3qrfMf3zn8+Lo476 qp9wnKhLpn3bKo9836fg2J8cUOBfFpm4o++SaiM0pcIiX/0JrehsoXPvH6KGa76T48wHDz6Cj1Qy 5L1o77UdGsntd661AB6JI1vyZY/5G73qoFHvsq2CMmhPyVJfqT8emoq9ahdnxfu4lS/+kq+FEPUJ K/2t0u3ptR9y8iUHsoUHvZ+Gy8QLUH6yWozl15IpnGpjlauebdHKR5SLf1hfyRWd7bA8tNHtz7jo 28ZapRs7my/Y9McGdIHVt6V808eCb9zmm293BBkSQvWhDHOVMZY8iS07hmlJMG8dqRVP8ZdsX3nh wjusp+QraChXKqySty2tkgCpyw2QSv/wtrDQSwCs1b0U66YujfVbLPf7tdxK2i7HjtON1Zdd96f4 09UXxFJdHpw8YXpMnjQx7lhwjX6K54vxwZ9+OC7WLxHcrjfXn62fAbpNl2LShnGxRL//eMpFJ8f1 dyyUnokxQwulMZoQz7zg13Hkjw6LY/96Uixadkecd/XpcfH8ubFGOwovWFxw5w1x59IJsYXehTZG 9/RcdNkf4vTrzovVuqmfyVFgHvD6dvITV0uW3BHnX3NmXHDTFaHb17zjiNv+pc3Ll98TV839U/zl 2vPi3lWr5B+9/2bNovjTpSfGBXOv1OsXdNP41Fl6GnR9XHf9hWrfF+LjP/toXLqI+4Vy2sVnLGwu /PsZcfbfL41lK9bHlEnyiV7RMP/WK+Kbv/tcfPhnH9NPeN0W826/VD75S9yxkidKc8JZcPuFcepF p8Ud996rBcFM+WSK7o9bEn+9+KT4ys/fF1888zuxTO+o4zaSbKsyagRP9qxfrfi8dYYmZd1e3o4E aWW/f4kPEjQ+nljBgm7fZR3tKF74syonWZ+VbhiOzSYrOKh8dan02AZMBUip6MXouMWYJm7bFHs8 Bc2Tkes2Xxzrp+ueSvGYRThseRLzvKtOi79ee1UsV/9M09PAk/S03U03Xhzf0O/afvQXn4pr77kz bpl/nvrjb7FQl5bA5rUcdy26Pn534ala8C0W1hT7eu3yxfHbc38aH/nBYfHjS87SpcUFcfaVZ8ZV d9wqX+leRf3E2VU33Bhba4E4VS9znj/vijjp/BNjvuKFgwe3D98JcWCncrptYNE9t8c5svWSeddq kMp6vMF+hNzSpXfFJVedEedcf5FePsx9SboJXZfWT7/wl3HFLXP14MWIHj6YIey1ccU1Z8cxv/1k HPmrz8T1OurhrGLqE558ds4Vp8R51/1dMTum+USvHLn+/Pjab46Mj534ubheP+F1w7y/xDnXnh/3 6GycfjFMC8CIuTefFWdcdpb2u2X6hYmN9ZDOpFh+713xX387IT7zk3fHN8/7jUZTnXPE//o4gLTh Te9jiL9bZglH9bIdP9OvdVmcuOmPP/2+r/nTS2ACSZjZILBbzFqACqr0B9/9JC8+Wn16uscoOlWW T7jRWK4UP/DmTXsc61V2NSDJ5/jt1Yk6av+h7KcGxW9eyr02dNim0mZs7KIIcceIZcTjOIPY8Lhk uummG8XHPvZu3fO2T3z+88fG5/WwAu8Ym6AXndPWrj/k3CoD4eSm+CuL1ZbmH/RUst9agTmFv0q0 rXwBrc+LzdnOxo26ht+1v+ntyxVO8VRZTjJQ0RnD8Fs/gdO3p2QLn219huvurzyKLvvB7yfwsKnS hsrUcb/4y166d1z7jxv1QvFLVdYO2Euj7Gp+hlapj1ttRG/ZAyf5sqX4i7ePVXzlS2whX59hXmyg rnSVTWxLT+XZwlvlwupvyyZCyXMRW/qGv9bmsrHKBtRX2dqnV37MIx7xzEFPlETbllEUC5x80QGp fJ8HGqAEG4swJlvTWiNr8PE9Juq45EeC5rQduYddethWHn0k+HmJIMlHx9rWKhha6R2WpczkuUb3 Eq3SY85rtrgz1u96lxZYSJFArqR3YenpSP06YkydmD/qzo/Q36t7ifiVhDF6mGE5L4/UGYaJvYBC 2u8m0m8+TtYb6SfwKLt8sHzVUv3I1Hqd4RrRpLxMc8SIFoacuSh9a/2Qw1S9cV/e0b1iuh/Hg53E i6XbNorMXSHcNTr7x5vvB9ZXTjj6EfDV6g/OhIzHTjDcJ7qpXTrGjZ2kMyg6GyORNXoVxBLxT9CZ CJ7qG6CUYr3pXDK8oniafMIRhGW4v4+zF7rBHp9MlC5+GJx+yCQ+1a3RBD5l4nTZkf2PbSt0I/6k 9qqS0f5XSQasW64F7nkP1jkkvdJE7//KR9JTHuzhPi6ju3YqA8+GEjzEZZ5hUZ4jd3QSv5KpMwHD 8pSrbc7j1SE9FY/UFw94jj/5eZXu91q7ixZQWy5XLJV1fTvxNS/Bnei+xZ418v0S3ac4Qb+csG7d St9POFHxwus5aEslboBfpX6Yol8PGe/3ga3TO+WW+ongiTqbsWyldOr1HMRf2p39OmFE/KqnT1er 7+rMbx87dRSFuM5YJoYGqdqhGHN86gW9ihcvBmESNvvISukZ0a9F8Msj9NtqPXG6VG3m1zpYug1Q Cpn9YoX8qV/z0E994RP20aWKo0nSj39WauE2Wb+cwn169G2l1XoilXe+TdMvlHCgQP9hG7/eMEn7 c6bS2EoUV2gC/eu2OvDQWWx+sUL+AbVDVgY2+rifwO/TKPftqQVcR2+AJeMtkJ2ilm9q+viVJ3ad 2hmgVsqN6goKftJgD0+W/ndhlj3EMy2lmUiXqtLpcinoA7V8p1PjQmL1fCa5vm+AWaUjy913f6R+ T/M97qvDD/+MFgSXa7zNvsIuPmVn4ZfqolMG2+1Aj3xTxvflRzWqQFJ4IE8jMa6l0ToGbagxnfpa DPR5+/LkbVth4t+KHeU9X1Zd67dWHLUBo/xKBeWidVsarn9sqvGpAxG92ob+StUGtmUXeMUzjMXC 44c//EqcfPIZ8Y1v/MBPpYJVMsjV4qQwqr6vc5g2XNe3pV9X9A3JYwOpr9eE9lU+ga/PuyH+fj3i lPu6+1j43B4tvzb3lh7k+jqGsSuGqn81jmZDUAyxGMoQtgCWQCmCXqmP4bwboNPFQPcm7+JjMaJa B9BAu3iroKpyQDUGWfJFL93yVt7oiEOobxWlq/irzNZ5GNFnGxFK+TS6ldmIH6bxXNITz2pNGrxG A/bJLFSoV6BOa9dANRcpiYaYc5qwxLdeZyhW6igSOi8x1YVOOVwY49vrNhhMujTWi55VmqBLv82j vhsRGrPtU17yk3ipLrjVNljwixO/HKEFpitFHrVQ0GPebp8GSxYKJHXeFF0uTf19mIanzQRdlkId CznrkS2TkXEjdZ8gB1z0idsmRicWA1yK1cJbN53zkAaJs4GT5cdmnihNT2uf40AkiupBhRWDlAZF TaKo69osffRvPgADp5L43O+SIRmLDEWTFFsV+9KBvRkjslVnWpy0qR2RcsWV64QLjGnk+EeXfZ/l Pn+nXzLWg/G0TZ9qdpdx+7mcOtmVg/4ZxN841XHWlFT3aWW7FGv6m6yF2zodZKzUvUPQuRTujERY 2Dm5j5BXvR5OWKe+8Xv+pH/wYknEUk9np+0TXWQOUgq39KcP0KAYc6yLkf8GA509mJ/tooJFWaYW fw2o4+/pn0jMqj2j409+EvZ4/UqFTlRaUY4KYnTSIYfahwe6fVn5sXoYCAuQzdQyrX30GTa0Bwyt 1zElA2psRM79KRkuObKoHOBlS7HXZ5OthPrBYG88jY0IoS8PJgbj3qgYEk8dABuqvlozHZEYXP3T 6sH0U63Ntm7hhlxnr+T4t3wBD+IfO1WdQyUZpbYHJB2CZO2LrLSttL3akKokzL4Dng7omHv8pG5b CcKLb/c/4MVx2GFvjL/+VT93phfz3qEnrCdPntTtj/AVLn1N3mpRotTZQb5hm97GA2yvS8TQsdOJ bWsfZfM0GcZu+MCucaHy8NKWFB/YAg3e/hxbssiUndUWxq0uhgTjy4X4Su2zr7QtnSVb5cKjDH9f T8nCU1iVx3/Mz+jKPqUmUy22wCx91PTxKLuOPsABzUeM16R+2ymjn0/ZCa2fp440rKNobAujjwNG fYqnttCH8yboq6+vTyss7MCX8FW++NgW3zCNsmXYv92m7Bfow/b0yyU3TINO8j1wZIYbD61SCbOt BpLnQ2Mqka8O6sukuwbOMQYdK8HCKwy6qzB4GSz5sq3yxcu29NseIWYApp3QKujgM49ollOA4scB Te1h5+528AycwQ6cZXFZ3tZDamyNONi0wMtW8g1jH79YC6BwB3Trul97Gn+Jl1hth/QPDL2vnhRJ +qB9Aga7w2+ZrjzQ3yG6rujFWLXD5fJMGVx8VW78PTEuadFfdcaCrkTKLE3cp6dF41KVDxLkP/O1 fge94oi4QpYqaKa3hQx6KlWMUr+h1MVQf1/gEqEwgOGluonBYIXNA2wYGDB9vyLG3G9/u5U9WWGY f0MWgZP85eX/0fjrLMQeQzW8gq02dOUhO4b0NxAxdchNoACSPvDNsL7hcsMRuUMsKJD/O/SnrhLq UEbb1a+2LvorefvjUhPKDX2qP0RhtR5tHW9MyjoYIIbTxByrkjn5FeUpLwZkKu4yhhKPhY5Tt1FG /3kbSU4yhZmMvW/HHG1oMplLXdSpzysM2UPQj0Us/ChXe4zYwWRsq9Kw3pe6PoAkOYGW71TMgxza QV56++1brasWU3V7xbsPmxP7vvR58aUvHh/f/s4JPrjiFSEdLw5GpXQVRunATuvV4iEPIpvOxo8c vPVXtkMfTuZrvOZrDGUHxbKh9PfrilZ8bAuTfN9fla96cAqrcDZEA4fEnFfzYlJGfxdGbamt+VFG WZdtUKz2beh4enDYUTyQveAET3SfOad7wek5ra+38rU1Rpvzyf/3pL4s/FWubdlYWLTt/vxTMsXL FvniRxYePsO4fZl+vo+JTKWiFxb0fn3xoXO4rmT1HrgE3BBIMcHjDm28lItWcmyLn05srGVDt0XO vLYonV20YiocAnE4VR1b5Eg52KisPwKl6K5rPNYpmaK5zIAiCA8s4LAWrfVospp/9FfDYNRRqnFU jUq24YbfL07Kp1Dvu8j3K/dPqh+/NN+w4ezbCHe5t+SFW1tAVf9T624xm6TarNTVu1J0YTG+cBaA uoqx4isdbPv1HR/y2sccexgJnLCr3vIqiwyA+DQIsE/C58rMm+GB+EuPdI4pB9U2K9jXSf/L9j/6 KlVmTJU52lac1BhZ9+5WeFUne3yCqDhkmEg5gPn3Fy3ywsZnhBUk0DmbDK8nR8eZYohYxh7EfADA PYVJ85kiKnLcFxvK0uAaIylhg7gAsCz5bGMyd/GLuCrcPgFhk5thNiqzHjTLg9c+6MN273puNOqk CWUuJx5Q4DNRrtQ9sw+ZvVV88hPvj623flC85S0fiLPOOk/vddMrk0Zao2z2YKwHEz22rfzgwVwU 4+qVRZIhYRMJXvLIsqCuBUrhwOOFcrJ37TevJ4tsC/z91JWaHbSzz1O2InOfvIyEF3/ZRc3Wmgtr IYFcfcpuyv28cfCJ6KXLmaa36PAVFvXEnl9E3PigFS/b4odOokzfOW9dpbN5oumnvuTNDJZNG9gH Fm1gW/zO6KtsqDLbsqXq2JaPiq90sq19tOqGt4UHvW9D4RfNgS6ziaHWRR1UYmA/vurI98kUJhWV L9sp8wGrdHY+Fq34R4rYR68gKFoBlVCV09BUVLxsS2GfVrJ9few8xYsjyLvcW7eVXMenRvUT9Qxc 1DOQ1SB7f/zoH7SPYOnZz0TcObz0dIRUKz2kzoyqbnT606nRaSOJ9jkN8w3Tk8sSTaCjOPPPrF+u dPPlSn5ezYs20RwjNaDiJHWO+9he12CA60vW1dVJ2S/0Ef3jPuq6abCTAFmp4pFy5euoM/UIoAUh Z97W6AEFAcPNV06UYhxcoiiFqnwg/uyj/Gp+GeyQSf7fGf+KIc4seJyReblNO7vxRmORz2DBR59T jZwXE8hknCW/8qqvM8puoMqF1S3EVOFYU1zB73phAl4xSAV046ODYNS/uZRHf/HmAXaOtV78icln qIofedE6/Y1uLNclwbcxsN+pWNjwkHy5jwoWMUo+e64yY3XxslColQrjMvav0OJtzyfsoadL3+NL pa8/+LCYe91N97l/CszyU4cnR3e+xCa3O0dg8GW6abz8F5lOrvnNNtBZ+BZeBCjK7/Yt9kOjWtui JfagzO+nFJ+YOjstuIGvjhdc/fErMp0Z/XiSTnRVGm4/9LKreGrb11E0298wC0sDp8fVqoO3ZNkO 5s5EqTr3pWwl7NwK+69zJSAWQN5+bj7Hz3zakGme+irs2kLHrrINes4BAx/36wpnQ1tk4SVVvmT7 /NDK51Wf25Sjn+gz0tpqUxJFaWNAq4enMMiTKJPKJ9zXDa3o1JV95Pvy5LtLqDiYHbsuWwKIs/tp WLiUFg/1fPJ6dzaKunI072YqDLaVqCfVtuj9rTF6TnenS6xQQCiNG8Lp0yrfx0x75PACbPYpnG1G 7TZaDmQ5I1W7aiuX9pJvdA+klugqXKpHiTVsuTywvpUf0J9+an7lvqFylXsEN9lHKinvHVmZ/BvE Uu1CxPeGEjFQMem8FlGUHf+anHLnRNloeeor5aQuHP0R+9yHBoYnQPD1l+rTVgyuGCwMkbIdrd8F 4KoH4i/9Xt7u9rf/xfuf448FdhcGNWz3Y039r4cj6G9SxRV5czdZ6otndFyKKlGkYWVxBQbJWM7x JbTexG7KcHzjsBQ12MBauMHOxUDGIbGKbtnP2eFmJ4uh0p9S1uwsdNuk/WA991+q7P2ntrLR9S5b Y0GMnleaLs6or9Fl0wNf+RLf73bqqWfFpz71n3HvvUv9Yl7agl3VJCOKgM5sQ/rIOqsBYvJ+KhvM b68OJsuOF9zGU7gW0JexERePfagt82JdpqQfaywwBnzw62Mzmn2FX7YiU7TSVdvSwxYeQbrd5Efp KgG2MHWc6DZhlI7S2ddL3jrKZ22LfGGAXAnaKP5WYQ/7S4SGKU83u5IJ2bLfOAXa21LvdUfTjy7K fVnYKTv5wD1x4evb1s93/D3ZYRr8lUoWnj6demheK+lAwAcMzRbmIBDcX8q4H7NjCnZgd6MM41db offz2FBlRMumwQIOBn0Q1NdAoXI2THUI8YGnVoqlCAHyKU++8bbz+F6hNx6ORzU2ZFTSTMmVQXRg vwxu6SRPKh38cC79Z7uF0918Lp5+sJq/yVUbMlDSRgyhyet1No4xmiQr2tab+y7U3FVZ1/+uCaZo 95l4OtyBj4uXbS2ZH9A/7H85h52ixZi7yWXRVMWg6bjBg47RPI2rLLV8uY/h6e8IlPPyRO4g/bjR HOk4JcbAgZdUsWp9rkgaMc0vGDDk1pkNy0iWHd2/aiBDR9X18GjfA/FnF/8fuP+p/1sMsHb0ONUW 6/R6xYZDrfhabNCvJGRIOZ6xpcC/5NtDKLnf1yRG/BFUNU5JccM2EPHZxXbGJnRoFaPma1+djSp7 rGwPAPlhIOPkWNzFNVhuY9qI7jS6AbqIQZRTv8dV7MU276sIZaK9ZVffFn4Si8ujhx361jjwVS+O L3z+ON3v9jMLcaadhB0C1A6SkznyjPukwnRh6KvrMzsuedP/aS/sfVsq38csWgeNbtlRYwX04oe3 O2hvTbdPxF8p8fB1UiiXPFvedcdY4XowGp/jp7UZydJfvpYV/i+6bWnYfR15ljL7yCLCTJvSHr4p 1zhZthW9vx3lB+GATV+tlf02JpndPttPW5pfyFRzKmZ9XKYnhbw7iK/aAEzZY1txDh9sp1Ip6co0 Oew2zbWwpuLa9utgsX3Fq23Vw8+Hemgua6Dm4Stx2Y6qZ2tak8HE+0uFX5jFZ/ymzzTli7d42MI3 WMCJMMxUgdA8goTlrZDVrkv51Zf1JSUWV+L3U3GNsXgsn15W8wlkOQWYhp9OSHuo4+PT/uTFRpnR 1Oxk2x8QrtO239lFA5f8aHxL8SXIZq/y1bpagNWCakCvnul7wTDtq+r7NOUbuQafqi38Kg/0JKXq B/TC/2fRX+GhPsKNaj59WX3rLYujcrD7Onc4PGgZfdH3o3ZUlUmJQ763szD6U8ckqvHIk0iSzF9x lEdhYOg0uicYw1jW8qzsVOf9CXwmI+GU/dZNWZ9mzgPx5x6Tz5oX//fHv7vM8aXey85uG0ed+o4z ru7X6l+2kuAMVfatmEgG0LkuwqCLPyoIAP4zBomLlBjErOPb8gNZS3Y4VQk1U8Z2lYqYW8ahmtCL Y2BTjpV9exp6ZzcTbu6RNKurTUyM9xkSPNQeEhKJsbnSKr1fcKONZsXHP3ZYPGq3XeLt7zgizjj9 L1rQjZqarM/v5ZNg7i84SrjaN/v2gjvcXuqxjEVr39ZqFzKVCqvK/S24xhaO39/ofb35CB0MAPof Pb4kwrBNeK2fRtWryp40XOJT37et+EEh748LEPQZDd9XlfU+2hRT9U/h0wa1pVIt0KTApPxOnRDc VrFXm22XmMqmtAPfDMbibBzSoKWuip3STI+pxR2uTwA1G5AkpbR6sQkxro6pl9eL17aWTDFJLn+P FrnSXVak3W4z8k0WPl6FhiIkaGvnlx4ufMhQV+3vdKQxmN3pNX9bFObao2dT2Y2AeDwOSjkWlF1U 5V6CsZSGUjGiyPfswKdPlhOoDEW0jKWRPgpRxsg5Ug3QocsovOH7C1STgZBnQdwwdInHmMqv0wcY n6HAUZ3FDA2GwvudDvD6dlLh9oCD7pYcWAArJXar6PBpTT+VjtH0wZDU5x34pOBq4TaYkJK/FmYD 6Q3rwaOZ/gn1u8kVf4oZHam2npNbqFRU+K2qyquCus5LdC47uKNF3oZFseCYwKHwV/zk70oRnFmh Sle1RRz5kq8Yy0unxCU2MfQMkmVFcFx3sQdH4lqvdDk2rBNZdJP6SJQ3TH8g/vDNfZPHD8jNbf+P 9j/1TcJUHwxKjGNVC5P72tyiZ1fLBsZRTEGOOO71Whe3qoW/DWpwGllBxODt9mBHqs52DYVI12bJ JoMzWQKH8RMAbR2tZBsL9P79cJCxp8ZTs5kZDMbwwSRrXsnnPmBOfeVlJdrtZusLHfyt0OJt++1m x+c+d7je6TYh3jjnvXHFFX/v7ncrhGpP2Wi655SG2atwu2iN2pT7pO7+42wQtlqrWlzDf0/ODi2/ iBNfk/hOa12073IXzvmluTH9WQLI0eDOBmVhVCr+xDUjK1oNNVkPg3V7rMp8zVflBwO1r7yUl2fr 3B2+AtHGoAo8O39gQxlBdentY2MrZ2U9XjZDm3XWSn3Z73zT0/FQSStKLx6kUnTa1rL2T8lo5s+y YjvF2DeUZ7GPsD6W6zDBs6K2ljC4MdCbJ5EyPjt9IIIjQhN1mYJvkVA9CR4SOMR4+V8FmuBknMbT jSmoUzu8kHSbB4s5avjwnQdMSUETn8JQdpT+LPMtWRjtH+yiHboSagZ9USiHQyNlA5LuRognG5vO lFAyNl47rk1QBEApQQYDKTuhy6tUtbjR2IhlMFCo3PEj1ET9SgZde86URDsVfHRrW3aD7dhq3NaF EqcGaJc2ErFC3Cg1s4RXOlKukyq7O7xW3+jDvmwey0YKP7uy18amh5oH9G/A/+pIXE1M8GsVNTi7 j+3z7Hdx0Hv2YXrS2dyptDMyaXZdllXpcpgbTsadMCiPAkEg7UhbYMmd2gOeIVpM9ydnxEjiTcuE Yn0JbhoEHqh5IP7KVd7+H7P/EX8+wpNZ9K0DoJnIRt3XjVfZrSKqPx1CjE05jlKmTY4ad7y+TANE Gcl2Y4fyOXkkg6MnWWAe6KN6KMnaNlGgN88IlI3d+NiTqTiGZFtbHXR/erxgd/Q0bTC+yy+ePMUP H23yGEz7PeZj99hYuWJFPP4Ju+tJ0/fEzTfPj/e+/0Nx67wFMWmiXuTc+S+Vous+SXpoB8NmV198 0PVXUvmTY1pWev8fgHdytlJftSikLF784P1aeO5vjJAOEDiLk2NJ+gJ6n8c9bDsQoir12vc6m4Nt fPjlFWiElq1WHr2kLt5c6rWTOvikkw/jIbrRgBkk1+N72qzqfjKLGO07CeEXnzUSk+1WhxF3fgIX HWl6B2G9zV6IyNw3iVbGVCUkeI3ZQDuevD8+62AZMrowtB3db9intuuDrJO2Xbn5pcRNb4XG3eJ9 0MhsD7XQGr3hm9r0lY+Zi5w0eLtenVl9mRXNZo8hSbEs9pZ9Ld8tFktQ24y4bN+wr/0iXxyS3d+T atlS1DnNzjFq58hyijt2Q/VDsBjJT+3gnMItDFiLRuMq73ra21bq6akecHOABNoAkk1drx9Rh+YA 9UDGjqngaIMx/YIe25Ibg/bt6WkZZC0zKFbu/uUAV2qbLFAeJmTN/eM0yf9huf/v62cgyajBbTlR eLLI/cB1nV+LEYLyPurBBcRJL5WfiTOwGLBzooFPsTKa3XoRH+hVjKrMd01c1DvGyCilDtUzzhIA sh3+bqBoSnyJyPtFyaT8Br//Cft/lB/+N7Sf+KOPa1FFzNC3DpHqQ7aOM0Kty9j0blIiBJKi74wE l5us5y7FwWAOa9wdNuU2vuEHqXRJWUeW+LIWJW0ybnxQPDljN3hKjk/lPWU2jJqTzICCxu/2ijcj OGttTWElIKiIpA4Bo4t9gnGYy6YveOGz4oMffHucccbZ+oWFo2PJ0qW+D86NkeyoBHZnf+V1ECf/ uqUmYfhATiQvgHI/pMSBW9ZXu9FRbUfWKmClvUpuK7a0tpmor/Rt+U+89DPzSYrlprtsDrFhNAWJ m2i0wGYBg48oUyUitrvpba4COHXDQAHOtAMc5znjiTp3YPYT3P1UC3pLSAH2jI4JaWm6OtsAUAHe NkR1kJZHQDao1nSK7CsmQyFD2bUmeIHYlR3sHL0mX7alq7Ub3EoGAABAAElEQVRU2Zk8IpU9ZPVB n7eukiWKNZL9yLYZA45TKxuvWWYLoYOdXKN4wejswDwxlR4GeHcJt4+l6tRpPYmW0JkvO7DaC+1m l+0k33SpAWS9UO3O1IkAX15CFbOFev4CPEGbE1oDaRZgbnRrQLZQDuSm2NQr7h6YGHLQS04bXsaW MOz6WK+DMBtJdR/JgyIEqtOQzMLYkiXZualvhx8ENJfX3MXS7ftVVMKu7GDVsKM0xxe2wY3b7Gk6 6eDRqW8lNUP8tROOak2Pr6MPyXVqhuldRTPj/+f61Z/pciJLbXVQ02Z95ArTmCiYhsRYfzjHdeKB 5nIXN5Rdm7FCSXVj9NNm5kWhyuR9SwBq+7IWT/lmhBDEnWo6XnRKjegZk01MBHTxYccn/sRXcdL0 CK6lDjTLpaSqUTAqDfEX7v3xdfQhuQf0p1cZT/BF9Yup2Z+MJYwsXZ3jMB3HmFIx6cWEyL7cqv7z GQ7hOL6IAf2t81E8WKmW75Sr2AGgqUoVLpvftmW95VQ2S/FRbjHYRa3jqEoo06eDoM3YmTE6wIQB LAJWArXaI8awoenzmItO6MLBTzywcNBBL493vOOQOO7YH8U3jvkBsPrVDP02BrYgKwgsajCuL99i Hnna0T9gSr0lkWOAWwUJXEBJ2NdS7nuJBb1XY/ZuYqbjm5xjwPKJCdn3eRMfHTZjAO+d059+YYZ6 XIQfZZlfN4Ey06nQTfs+aLQEfBoGiBvxKyvdWpT1vWFz5PuslECZBzpyYGMfeWjkOiZrcT2M+qd7 ZKX1wQssXUu1F0XGajWIyEC3VfnSg836NzaciDQTzEudCW6T2ou/LEEFcrLTtuI7CNS2vmn6TSmd 8JjNyFlo5Y5CA8oQ8pUq33BNFh5tguRqvlRI/zVlYkwP0z95qVTc3j8tZ7y024zit1a+5KDEpp2U 82Nk6Uo+fTuT1R2tqSdevDAXECT6Ji+hahFDys4gh2jT0PKjAggWpRyc4JZx+vMkpJ5HMoNZNYJy uyyBkGohktqmy6rsprRoGNiDSNqYR7XW0AGwU5V9yLiR0uF829JYMBhEUOtT4FyKVdu5LDtGvyHq hG7SKKMh3B+dun7Ctl66D07VDfEV+X71/LPrl4PWEh0suB0lncf6mZxUkpIDoPzGPzHXXE5cVGyY B9dWDDlOamfrIw/niafEBRaLGozpRbNK+FKFQdBpG6SUtnCL6ph1bZCu6x33iRsQlO5DT/Lg2xp7 xaFyV3N/9PvTc3/0DrBlhnDv194hvg7m/vTcH70T/J+sX/AVfxpH6PtKjkmVaarHQSqq3n2dcWJi DlatnhhqfmAjmW5ybFgFRXWNcSjnLxeAqcjR56zoxBV/5sMulW0wCkDMRDa1sz+oIALLSAVl1sBA scZEFUmD9kqIemOrwquUpIFkdHRLy5o1euWCDvDf+c43xOte9zKfdfvJj3/jhxU6+cKRBH+1wLXO NJRspo63Fdl0NAxPgfSZGwGD22eaqnk3Xt6PpHocoA3zhGcwisYbYDVINDlLTab0L/yFbX963waH s2IsdlMOHVamvs930uXc5nr8Jf464YEf1AHVHFgyCcMwo6pUGFRLZ7MdCHCqzg1VAVmRfQkQUeyX fn46L2fxlPM7BG1HlgfxhAz/sh9jmg9Nga4PiS2+8UfcnZ/a+h8e/IaN6SUovSRZ+xOSDAbW/KZn m42J7/RXcWP1/ir/Nt6CRl75RITRzFXbbM5mUVW7ajIkv/Vhu1S4i+HrIdlXzbfI5dnPttZAToJp e8ZiWpjf3W1nsrNSZtGK7fzUoxYwKGHH5Y/EgxzOC8f17VRkOll1qndfVYYJlUhodBh8v4HRaFxV cBSmAOGsl3jAEJJ1YUM2PWl8O4gbOfWpYBk6xBnYMgnPcW5VYCqZRXm21peLN3S7WhvayWJu7IpJ sXYN9MRtCKod0pPIljdGq0/EjtzLVE3h1Dbp+JQ0rOcB/emfzi/qxLHL9aPl6yc4dogvutF9KRdm bKo36Wf50wNmz/XU29flfnxuXlPpAidEBjtd0RLXXY88ehWQCUVPZX2e1U0Z9qfko2xU6TNVchy9 QdUfiwIdpY9Zql/iZPTKnUI8yMDTM7hRvGlfZUVy92sqXzWFU9ukD+SLnnIP6B/yP/G3bIrGtRHH TY4hjYfBu7k7FwTNh+1gka5M/saFmBbqHhaRbH3eIEQRDRlPwElN+co3POprYeBBri9DMDFOApRy AyvVu6rKCQIeTMC2Fm0NizKTsyfEZrpNAw8e7T+GVraTZp/Kqq5ZPJk9cfLEOPwDb4tnPPNJcdi7 j4w/6D1v/Bi922V5zqjVAXbZDJBs9ZWTbAS+QSZL2G0zaMIgb7zk8DxkOH2JbkHJk7jf1Pu68nal wLyAyOpkVSehw/4Bp8kaCzl9PE9BFyN9ZjXs08gZS/v7KJvFB5frci4UjHmQ5VPJ5T6hapueGmey /yQlPV4kiI8+JjxsM7oajptA3jZDzwqbI1ot3mr+te00RP+wppgyKaYyMdRGEtOyolWjyDIWkFM8 C1Nphdo6mwXaU3K0A09R40UvGVVmH5BRrWhtFzAnZYBrXCNvHvqm2dkpMKfkjZP7gZWZt2E0Y2r/ AB1S9jklzMDn4Fs5FH1SEFKufyBxkM5eKV3650nmlJCsLru6EgersoNSyTzVVlUPxpi6hComuBKM xVdTD408BCVuuBwzTh3A6V0Cm+BoZ+/yVLGjpedsjFEqh6g4yjDD4mBldAaitVmbdIbpqdoYtM07 pDnKXuGLp0HZmahk4EldQqPSjhHdRPCpp9M0cOgU9sjKGbHmnmmxfua9Ismmxt9AzKev+yRxmlY7 0KATk3VAHxZN33TysoOUaNo+oD8dVgGjxfXIwo10dDjinYf4o4/7qXxvH9LpuJRCcyo7Th2dQbPv 0+0dTO74qhQ0YnVzr3cKuBqWjGAGdCSapK/+hNvxUam+LNuAICFOFxOD48aPi/FLZ8W6ZQtj/aTV tvuB/m8dU/3f9o/03uC723/a/jLs5/939j/13+pxMe6uTRQGLDqIOwZ4wkQd3Ex1NLhTc5yithUH BluSYEkS9iPe2e14aezF03zgtjQaHGYtfoEYQ+VkZ1LhXWVacGpfQJZP8rAVHw/NWL/K/JWve+0R 2Yn6yvuMTA6qVoacLzeWvCYbt1tl3ge2ycaz4oiPvCse9rCHxtvednicd+5lejmvHlaoBDR4/sfW VMWkbZvxUMMuO6stkCuPoG2Bv9rg2V0jBQ8dyK48yJKQUs5hiZ0U9GYu92zB6OXzSWoyaWTqwVBw 9IcNreCNxxoZsaExIeMHtuwHCyhfGMYT0W0p3GTSdw5M1W53g0wrGeLRT5aKBp5fOAwGzdRfJs15 xUedwKp1Zuz4NMTlcsu+gyv1NiyEUhzXj0oen2FWwpckdhvHWIvHDbfP5phfiw2sdDssJ7jsl/Sb ca2fwRQFKcZ31yJsQM4mpB19PkuMkm08VFQWCNlsGyAbDB9mXxjfJ7nSgGyjkeW3XLzbcT6DnzE4 jra5fY2PDYu09ofR3VyFIbVPobNLQ++Bg57OHhhrXjcEkDRwnBY87aScG8WlVAztjqB6HZeOTDnX d17prMhMsjjvRghj1BkN9T6O4w8HJe4Ao+qqvryfzm4qpANZ/G9synTDuJEYp4Fm3MKNY810LeCa LXaV204ge9fRd8/Qpj6PEygIDWzl0s0cbWRi8Uvqjm5c6mPVkQ+0VPqA/nTFOj2IMlaL6/HLZ6qv 2ssTqaIj5a6Mlzx6t1v1VTsb5ezzjB3HR0pYtvhrW7FXZQZ+UvZK9gs84LBTeSduzNbT+q6Rqsb8 3ZGTYYSY5ntyGVk9OdZogbpmqwWiZ/Q80P9yX7q8t0/RE6PT/9z9T/vwOMXfXbNiZPm0GDuBxUD2 T2dFmSRbHZJt/CMeyPbHIGS62ITfDYSvgTTacBx2cq2+i30mw3JSZ1Avg0HDmNbFOMo0joH+d34w aQhD9PskzOzTyYtGbDNp5wFP2lQPLBx00CviKU95fBx66EfivPMuismTp3r8RcbtaBjlp1TBZJZj fbskZFM6P2FGO/XCGA7dtiNM6mykr2rhxriscaKrdOvN3n01+arJ12x0YDkQGLHZJv8O+7982tk6 bJPGDVJXD17b52G1fNlBu+jDluqJxz7NC3S3CT4J8t/kcg6ln7MqN/IJNsh/tZiEn/7qJ3Rgi/uJ VqpMnkVdlwRctlDXJZthrSbhI6lwMobWC5aDiJ6qbE2AEdvR7zrwGk9fzriSIfZI1KWuLHuRjt2c cNJWcMYsXgvpq7CxBRPyu2pzizx8ud8gNKBnAQLSSq0O+63XNIjJkzTWB/gSrkopnyuHokJDrzZt HYEA6y7/NDDdREooVTRDoWWeDADiE5NX1xiqsg0xMCw4atCJ7nhjgaQkvmRNIzEbzGxMspjNlgKv OhmJEG+4h1wBh/phJxee7RRQnkpGI7yD1OGamjZwpDJBC4T18x4U6za/M9aPX+Nxw1JNmEvLfaBm 5oCm+mau/aymd6m6yRDyE+UOq+GyIZWY9fUIlmm8kIuffKW8/J0YnX4xWr+A8RH9NEp/Ey68+9U/ xLDB9gsLNnSD47y+/pv6Gy5jCqnTrzxnCcbePTVG7thKR5O6hMrlbsWYdyLiA0WMRwiKt3beQQyI 0hwBbTDYISC5rhFZhpeP/SQ0xwryPVnHHST9edJQHhkv5pRPYxKPb1QAUXTHMPI6Agud0dbxkOJm JEbu3iTWj6yKdRvfE+vH8YuKTQZZJcdDy1N2m/kqGjiNDsk6tYVx4P9kNzZ1lcQDFFgFZ32Nxma4 3LmuBEpPwtyP/g3EnxVLPzjKl93D7b2Pfozqp/+7+sGQ7Abjb43OvN29keJvixgZP0ExmJdQLdDT 7bhTXA5GP9pRjsm8489Oq8myJoTRvKMmwp4OZ/GVYIk9L5aIy/+LsvcAuK6ozv3n46v0Yg2ICIKI iKAIBkQR0EhAsUFUELiCJRFLBK4RNDbEfm+M0Wg0amyxpCq2CCopirEQRVA0iqIgKggi9ev/5/c8 s/ae9+Xz/u+d991n71mz1rPKrJk9e599zsH4KvhhK8wkqgnyTXVdCHmuxyzezoHWRXmsZcrr3rFG 1jEnGWaMzOdZrNXcHmOSTXnmqhsi6LVr1+l5t+PacX9wdPvf/+td7cILv9o2X7Ulyj0OO2dMRCd2 eZeFQgh67TYuGKvQaOhtHrPC8HPZYPUTutnArTKLRHQ48SeOiQkQTCzexajES83TmMcPdCqO/I39 Zoroi22e+Im9HUafNIPTbQwaPdW1Y4zZUodtAW7VxYNsAtalS64nJrYmC2K3nuHwnFqLN6Tob/uC usLsOsAvH0Ryoe5c5JO3HOOb1wtqVh0afyxS3U/CN010irhDp95dTH9aPAydB35kvS5w/8wx9lkN iPJ5kEHOBWXiAZ9StrkSil4Te1+QaBFJLHhWsfoXMxPnQar7gt/Ygb+Urm5itD7xEONEJR2T+MQm 20ZepirZ5KGx+kI09utdqQQyvMUf1aLJSdpd+s5OaKXOSZTxw0UQzlCnE1kIIVfHlRiFBR7HVS+5 0pM2AovZwuRBBeuOLek4SPrrWFN0hgM/3wHPMJCH5u5XbOGEyp2dZU0LhJt2amtu3q6tX/UbnUzX TZM6NjiAI0gdq2Fqc7x6JLWjSjqEw92e7/4RxW7R3oVdHzAtY7wQIx3fi4295bUv1fBFIzGCAS7t ugJP5jomhqbrhbTjdS6qmyRal5/aYCujOewNsy5RVIldTGwzriFpEMn6dciEWLZMOnTAiYhnE5fq 7e3lyzfXW406eULTIo6+twzmCc8XFZXcsgjaVGxvr/XjyreJp5oHW8FfjFN2jvSiid020Tb1Vcer wR81GEGJjeTf8qV6a65t2ZZet0tbe+NNbf3KWzUA9PbN4Ie5HatIM0LAiC2TFb0RCxbS6P9ortgs qkEWaWpFN/Z3gn1StRbBhT7xl1kIDHITWXR4kUtY0D/YT3Uq0DtfKai2BXwhlqlW0LXQEn2dp8tl tzg62NVd7UJLtKje7PYt2rK1W7Wly1b65wNZdLsve7+iAK/wydOsQCo3oFVuQ6uc84Wl5N1uC7t9 HUcNbvP8BrpkjRnDJ5yFCzVhqJ05MwsM0OdSWPZQJ1Lqsz26PJ4+NTlIcQimeL04sw99JTCyEQv9 81OEHHKyY95/znNOas/+wxP0XW9/2T7y4Y/7y3orB+d5eRhjA2YsDwFMyoIYoFD/uUsjG/t5Jzxg 8l2h7C0ZXznWVn7TUsU0INGlMcbNKA4ptNHHqUCHMfa4TUrG8e3+6vyb4p30s9JQ4e4Qn6ez6o6N HDiFbxnUYovo9lOyyFCgsxF380LjbePRkc4X+2gHsPs17bovAIsGD1+EnO/Si17O2ZSyj2PTuKum P9skW3oIaI59bsFOEdCn/XiXzTFGp31JO4wZXaGLmiI+8wMCnsp0ly1V44yx6mTvKkappKX8oY1j bKRf6YvyeZKjufc7dtAekXnxBmrdMWWOp4/LVq3ffBxf5z41vvxBb/yLnvpUMmN7tDNfI6L+sJHd KBRTHGhWigKDw045WEkUGOhYksbOyIn1PDPQZVmJWsaUGNIPHVyOxwUedevsfWLn+qTgtGD0y0af rMVI+2/Dz5cbwi6BXuwGx/YTXemYDdbBFyIuVUKt19upy/U80tbGxl1fUXQcBzgQOATa5EviQyTx C0Np6+3ihZs2S3nhO7RPDWLoBbzoC5br7gcYCl8xYLJBEYWY9P6AlgFIgtGWvrLoxC5+/UU9ydGx ROBEDa8bwR5KEmph42TDwDf1D3i2HRlCl3iMi7s8T0l7Nk5QSzQxb7aSE05OnNAo6CrsBceacEY9 5hXFFwKWzMtiWwvL/BXLmEogslk0+NZhOxfa4pOn5Ostc6n+rcWTgqB9G112L1cnsThdun5F26iL iLKpYgUUY4o+5k8HBNJW1PNCi5XB5/wVK26ZTxLpZ8SDBAjuwrNBd7tZ7XsSEeMY3xk/ussM1YwJ bkdyU15mKY58cYUP3mQLY0WM5KpzmecQKOTfWDAuCkaqjx0rGzE3uY8D7VDFLrULNxd4nXfAja/E IfYwvy1ZQb+Qg9pwCP5eEn0m6t4munOAaIoPKia7r1WvPq2J3UGXDJDTghUZ/iRYflnvrFSA8Per +MGeYhn3jgME7oB0hfEzJ1zbok/h5+22+F52lg2xN/YTOxaKVab+kx3M/+TNC09/Rnvq8ce0l770 je2T513gxRv9W3kKrmMikNjS+7zXbaZDPcRaMhUHZLC+7KjziH0Fm7vbLv1MqWM04H9h0FxxENGF VKTPYmdoFQt4jS9y0eAoWrjT17SbXz5jG74WzXz4hlL6jjHITjIhRQ9yi7G94LGYcP0LE1Ryl8iI 3UYekGcsOS8BH4rfeoZkMjdchkasEn/5Z5sX2T76Ubz2Vf2eGMsXBXLEQMcoh132Bd8VIxeEu/22 aapXszA9V8AmuTiASC+h0celO3bN/kyc3Ud4KfR5AWEbH7zpTY5T6Sof4KEdeWs1Hv0cY8pf9vBi t/d2TDTFqptfJrmdCjaPZdLVZT30ME/npWXrNVkzCMrAUdjGgRUfDcyhq1ICbwXKSrpWi3ilqATs xpdB8I+80Asjukn8KCQJOaHRztWd5dRWNpqutqrXfgG9247V+OgOU/Aq0Mj4QU/hk9j+oAa2662S cnwBXncEGqV0drLqOfICzgzYR1/R0JPWx93vzl/xL5xxX7oMZ35eBn8KzzRwaU079iFf/tZKvvAL O/zWUE3TfrGPKMD7+gHuejvGfNVWgRAf52GqG9cTC3naTz7YSWR8kuPItiozex+rZ2CIDELixd7w ZU970TiuYlt6hePN6i0j0ca24i+Msc1eOt5w9f7usWY39hlyXiiJk1jjU51ULN3thq9iDh2cutpC lfUv58JH+Uc/svHXJy6OS2/1qeMoYePGzMFHSYgmtcZhb6V0CpTOD5US+/S4wjRBhV6MLGKwgX/0 RzcLCRZm2BAML/5Fs71R2oH6Ak41upSmjBW8imecmCnlJ8fRSZ+TBwtLxTNNGEF7+NyvWMcXevdC 72R+zgIIsuNu0eQVdnnzhKw8VNu0gBv4ffJBTo7bRrd1e21It9dgNsw4tks05JnusujDxvDj+xi7 6SQnjsQCTvES+F7sg44dt4Ge5hDcPxAwBR/T2I8liZ29TMcyy3cPUMfimoVD2dn7A3/4qhB+iP3s s05rR/7+I9qZZ56rL+r9shdvi09YzOXlI+rQVTGx+tmMiW6Zbp8XkcLwj75bYMYAhwUYRcPePtaF SvVRF+l6kQ3FsZPEAluKedhjC4tV+ChTrHQMzZuCzLxDoY5MzQnoKZnCGGMErdoNEBTROl3jl/MW ZnMBmDtZeWcCVs6bv62ky9SH3Tb4Stfi/Ywxd8hv4/FdWgkQex4AqZylju/YS8G3uljgAmkshR1a 6RRW7yCvJ6bYMEbUB05m+WB/IlNz44hdx2Al5ooBg0+FrxFDkmceaXP+lHpzzC9lSwRC92K7X3hK XCXCOROQhNzVZdzQN30OdW3ODdsUc2zDpAc+wU11eHrY/BYqgrmtr0E1OdfRxUmAktgzSAJQPPO+ lGQR1p2QwVWQG3UUf7V7LwN9flHFHa168VVSjBgLZFUpXujFR9AcBNESYFoTPPaRwX+ig90ZhLRV KdzqCOqFXzy1J1ftq9R6YehRkwFcOMX7/7cfY12ydfLEFieE+zCTBPxOqG4fMlXvY2iByrFP4C3+ kan0TjR3bRKSgetFSA9s4ZlXfETUJV0gfGjIYheDZc4PT0Rq9wCcJr/qn+wX21J19mOs0Flti4+p p9DPM1/levlQeBPO5EzJZ8/4wIvKWzwsGWPRzsDt/UQbm/GFSQzwPXnq4DpwPaR802YK+tWMPv4p ZWNqecUPCnyxg0mT50gRQm/HUG2hTTQzmc18I37kxYJ6vdB/TKL2TV1asbT+mGA+eE1Lt0sJ7tH3 GuNeXKExc81mxEjtlReb1j/Hzu3Y4zSSJL7JB98F0HgODpjJVzppmU4c0WJTbGPFwX1gsviF6wfM wdcfMolN7Pex2kQ2hsWks3hGelFhF3PirvhR9w2jjmMMs4jAv+y1rf04iRb9lTfIVJwmmwqo7+mD Gmngpa9sumKEVNezSM42iIa8EWYQc0LlbVO+FoSvCnn4oQ/xj9J/5aL/8u+aIkccqriuin0q4v/l Hh9LHgeEPJWJPlEcvqk22YGQ+ytNvijhdpWIxCFxmZE7+4TDQcWaY3DZao4tO8rlMa7VVnLlD/QR k/Zq49gFPQwYDFSxDI7YF+id1tvNtOjFmL4ooa8js4hliu9ie+BD5wJbVS97aC8ZyHWxhbXQqw2+ BRgQVBZjL66Xf+HOK7FdXGqeHelgjSX1Ot+rBSN/SylZ7K+5oWjsR78MNGDRTl5QSmZTasb41MX6 yE/7WE8e6Mfsc5fDPb9AiQU03HF7sGcyFrAREMcYxP4Gas2kXg13YbAWOo4+OeWz3YwDHlc17NHs K3GbtjhIEu0Jkbtn8wodOgUM+6B9iurcIhBu2VO8xReZCjR36VgIIUPw6Gz06lzKN2drT33UA20e xGhNADb6hEhdAdc3jvv7X2yX/PRgilw40BadtRpAByt40GrpXfp5qDr2dV2SBdMnMMHkGNsXYmBn Eh2foq+eLas2TogVIzRP+mEHjpOkZP12lJi9UFUe2DUEXPAGAQqAYHLnQysSMW7mk3ePr6j+zidh R29yAzzqqpURgRte7V+vm3e6GpIMcirQ43Mmk4qJWsSC/XBGpwX6S90Fth2ila7CWzBAAcFjLgSs 1oj9OPg1FoDnBAxvYTlWjAsHUfZO5kMTpscMRnAMAgwcuALBxSOoYxRlKR3qwlKG/pdsH4OQcxEH 3sICjH23bxyDk8UNX8GjT/yYgbszjiGkBHMAkkWAwI/t2CvdsBEDYhpZ+llEK4RGDFhskcvJMSJK zOotftosXzFABTrYO+fSB3VXAswFGOIr3Ui4XbS+IjSG+wUbwKMJ+9jrj3/7O9GDgYzbzSk2DB0K GPFbDdgEJn7Bo2M/v6SauyjuCDEP0kQOPv4toTb6NL4gZDyxcGFA38MFFhpsL5j0pdXrhWIjiTk8 nYSkhd3rIioK7pMw8HbTqlWr2stf/oJ24IH76ct6X9W+/vVLRFtpAJ9smO7RbNwOHHi90sIcrkPs 1IWbL9xdJW/od8lghuwjT2PQ7KMI5iEWoFWh/ydfne9oK10oDFL0goGOHh/6Qiyom2JhI6HNOsCo /q9jMEDPSMm8Q9uEreOSGWnwFH2eJ2SH5zN8gSF2wxdfMXKmgTedh/o8SHv5EN7YZyNROpTSX3YF OQzldcIQ/cVH2Olr6ncs4pUBNf/Svim+0l3yxiaKwkZb8jJWRE3v346HfJ2/Cov9qKvoplXcCCH2 dds5dp0B1Qv8hUNb1TmmTLkmO6vNdMkVvxn9Im7mS/1RJOE91dIRQuwqvNIFH8e+A4dqymLBTNQT tHkQYtHEfgIr5322wWEZzBiLbe60wnZSMgi58uw2A1xYlbTEJIuPMFU7vFWKVtjQOV5Mh1adWrKb 2sNXWGDUMynEIfVIUcf26CknkGWBtsy64AyWGSd10ZETFkT8pHByyaCL39ant3V5W4Jpc/mKPK44 3/ZOkiBbGBwn36TTvkAZ7ZQy6O5v7GYrHI5Tym78yYRZPEgoFjV/dn7eNsF2fM8zkIUtBmN0Rg0W BjgXJDWQ6wcw8hYn+jqvk4dKAjTnRQ8Y0J05/RA/OU6MZz7iM8qnfVIkm8hZ+YWtqJ9FjTXZKqCc PGY82F0k4xNV1UcQ0WyXg0FlsF0V94h8EbpOXqo58OIr/xCwTUNu21J4S+F0UATjwlDxqQbwGarO uXpb23zhtf7OXPi2zTrTwNhYt25NHuzvEyzRgz99kIkP3/iPDb09zphOPqEv+KXUSHqRoDGNYp4I Qe9Fh9Oky0lVMvhmPB2Dv170eqvGvg0DhrDCZVU58gP9zhkRwfHCyLfI0AmNt7jdIW61lj7RFx1O Fh53KBID0UV2WjeY+jRgSlrxEPHE0jXLJUdjNW1ze7BAh7trMCQ6XMdmGqvomLYFNNq8SII31k32 0mbyDMJ4X6kfoD/nnDPbvvvu5Ttv3/rmd02DnWIbByVjfoUDHh2hr8fcmnVMQZ5SWulvr58W2YKs 7+BPnJo5fZ7Bx46hC4jCAREy05n9Uh/W88OQIDpkzPf6q0UlLV6oDEjQao7hmJJcIw/QVIvf8DFf jqX6ceFc0212f8CtvNM5gVK6Rm8qTrSj27F07ISjf85bdTEEytivxTtigEMxlvZYU+3uGl6ED679 URXexSXysWdT7fCzHqjn6albRlhjnPB11j/rGTHrGL46Bm8sm6JDY9sUPrKjDDzFV/uSLb7aj+3g UK8+pp7SdRO/hWnh5sKqfWHS6BlmJEAkNAkP761zR4xg4ASJw2QgLa5nsqBnwdC/NjVwEhIyV+fI UEqH9+IjkZhcKRjmk58HGWlCSZBKDqfhc9J1vtEhOhpe9E4TkHGiu3g7ybssEONb0W0L9ngj2HGg 9Bsfh7WNvMijn61465j6SEtwu158mfyx18IAbYl/9PmYY45oj3vco3WypGcTL7fKvrHYP+LTnwMo 2+yjxMxO31j5IEuDNuLPOagWKMYTL33kfrJs+sCTlwFjAX7e6U7btze84ex2//vvKVvXqSExQl3F hX0NyOzFQyoJOz7PeLEf06ovBpvDNuH26kJe4qBNUTa9dLNfUJIwcGHqwgJBG2OgfLA9PSdgNh58 upoy+2QvH7roH7wQjQ/IjAqcx4bH9+SNLRBItYFPIdSMJU5c6HcuyYaMS/KoNjHyDw9+9WMRTKtY TvQ7xCKy6LRNWDLaRoNp+mZ9fRHrH/3hSW3nnXc0D9hV6pg9vrBP/hc+nvKXfELOdex0bBMT0wdc QU1l4u8y6LAec3DM80BL21rl4iMf9dB29tmn2Qb8Ma/jFxnqhpYL+eJN2eP25H7ZmZjk7o119TmJ mNRmbOF5zGey6DYTCfGRJxWq8sd19ZeiwNzJHOrzu/bodnTcx8wAxIwt7NxJNa61QMTm7pdpki6F 2kt7OHUcW0UhVUK2G75wjSabZL4u1yGtky/p3WKLzdvrX39W22efPdsLXvCKVou3OSdt/WQjMRxL YiqrNT7wi2Z7zWQkKbZRP/HwOWa0R2zGKWz5gj/Z4mfONyJaPc6ihV3FITlnqmU5qlgzj3Q7Bv7E b6E8kDXX066BaB3ru23QKgZ1TH3Eilm2rtPnRxqqrfwtrKJbpyoL97ERHi9wuSvHtqiU3WXPhI3N nbdyhbr7yn02j4lFkFPV2S+BsrvsKx3Mb7wzRSn9Jbw4NiO9jtkTbvKuztmbwgnf3GeF7WRIVxly lC1be4NjW7GCxvFYRv7iKz3sg43EbAcB9tj2/Jf+KxlzTnJ9bpFOsK15ZDS4JDhZ5C0V6xFiBnot NnLmFbmezUELRnjixDCMmJ0Dl5N2dKGWLc7QZjzO5j1V4PNDmoCouRZo4SPh0cVgTvI7UHI+C050 z8HheAzyHFSb4AmsaJhSmCSrF6uya9Yv7Jgu4RTw48MsSwv0LFRCR4c32U4c58Ux6c1EnLc1mTjW rF7f9n3AXu2ss57b7qzF0QbdKSEOmyroochj8/gO2QJGCfoEgEOxtR4oRSRiXkn1yTyxQ5+7ZmZS vcdVtNKLqhtv/E3baqst2h8++wTflYFGuy3DPo5tpynTMb6WvcSwYl/9AM5YwKi+qv1ox3wcx7oF EwTtxeO9/KmYmLfHmDYmgozNYYKl752n5GoKY85vqw8dxBVl/Or6UEO7ebOwQ9o6RUugUvdv8xYh KgifGpP38SF1MMnHxTlpXWKxOxM+BynEjhhXLJy/MHcW6+gV86jNuauJdt36de2kk57UTjzp2LZi +UrlOEBpN6+OsxALfsmXbvvcxz93P91ejbap5Gd740jGvFnN19t1TInugdaxrr32uvaYxxzRDnnY AW31mjWCyh+Yk26GRmD6GFDNhN5/HZ+3PdKTwkiSCkQ0tqEw7n2ydMdFDyeXzCfBnHRLLguMLDo5 ZhNVG/5EbnrrkDFMq+Ze/RaiffDYEY1cRqYkIVVZaGFs8ryjCxQ/BiE5+iNzOIsWwdG3Q8FmbOPD AyzeXve6F7c99ti1Pf/5L2uXXfa9+c5bzECJpZGrzXETteqchrA4m/j4Q67i6j0wonn+yTxqngHH urq5Fb4pD5HtvD5wnTgu9A+yY2/26Cv+sje2hTq+Vjt9X7ZN/TIy9mN4PKZ6H1IfzxeFlwVr4jPO eXN75qdNqJA7kSNVKcjUOZS8Ggu2lj3QC59jONksrttEhQsxsV6IhcxYuJgCmwIufqIv9oAtTDVn zg1f8VqoyxUNuVHePFOeBHfkKT1lQ+FYzi/M55nT4S1+mtBDIXKsizy2tK9Sdowy1TbmArTqP6N1 CD8qQSzUXrk/2llY4Fd+FG2KVBldRrAHZFpESWI0tPgAKtkCtXHyeXIcZ/U/GlUy414cgBkm+HQE CiDNdNoIKYNvanezElBZUEEascsWkDgmEPqfi+TBMt5MzZGIYPFdQ973VXKxlZ7SmziV6Bz0KWlr wNJdfabxnTIrj23bb79Ne/krTm9fueji9oH3/4N/9Ln0/T/tu+09By2KvTnoO3gcX9EV2Govv+Aq mqMusJr4ir569Zr2lre8tz3wQfdvjzjsIH2Jp34SqssVjn1EwVASqx5fxQUeTCEsJVc6ECPG/mqH 8kG0sX2UKfpIYwBSxjbq1XfQOaZ4EdbtNcbQ73hRuBxnERNsZI2vauVd7YGrY/PA2//KhmoHJ2XO IZ9cUDh0aKYUTdSLYlI2FIqEpsPomCc6eM3fWTjxoWui45o2+vmQQw5sp576FH2/19va5d/9gXJz voozf3mEPfr3p/Wke3wbM/nW/Sid3QbbgSAqy65UhZKTDM34EF6zWmuO5lfe1r/44m+3T3zi/Pac PzqpbbfN1u4rxxz7euE0R5kjpErPQTfUixdIauq+6aBaMNbHk81zy0RHzqLez/z4wkmMUvL2TSyJ 1TyvdVO1vgGrb0N/VbvB+gsYE++omxM8/dyFbEfPrcrHEQcazzpvvvmq9prXvKjtvvu99LbpK9vl l1+hxdvK6BjHrv1Z6JPtqLgRAgLSS/lcfeu6bQ9GNzPcJWYM+qTrUSvy4xhBzlNtl4nK9PaoC32b 9rtj99iN8Szb2Zd8Hdd+PI9Co6AXXbY1JL8WBnTbtjArE+Oyo9s7iC9ohw5ethwnNPg+Z3vZwDlq U/4bf4oveMEyPv3DX7VP+nqwbYP41UHYYZ+0H/VAp9gqvVTdxP7CCEGWR3biT2TG48JgD/6oo8Ms kF1MK6xRf9krQctO9a4DjKJN8j2/c36vuCfesanPIWDIH2iFw3lnXKgVJu3jMXXNJ7NRGEHxR2kd UO6OKEh9onDj9CI5HkTnrSqtfLkazFumBLVvkiPovLHL1WeV0kMd/fBzEmJDVwU9skzS6bTQ03li NC660eINX4SRZ7TQl7ta1mNd4sPcnkiojn44NHliozb0+OTlj/6hT5uuvPPlkOyR08bVuHxDU3DA r4140KABobsWxkaNiu1zbPjQhprwm1d3Oifrje0MfY/SFpokX/+Gd7R1mjCX6uMmiaN2+DlsfntN EOQA/lkfiBjZSx1W7J1w0onLRH7BHTnJ0F68XnjZLzX0GJU/6CBey5cvb5dc8t326U9/wXfhttx6 C3UlsZECAuagWRnok23oRX4u+EY7cYyf1Vb++KsDukPQ7Iv2kPyQt/RSaJvaVV+K7fQztqgUnvdq ywdw3OQ2Trb6VjbnQk6udeWZhfwSfQDDJwV8BM8vi21Wm7BxsRZEjol4Hd/eRcbBbuyApq3sVzaK oM1jrY8p1f0WrX7r0niS4wuapX3yC3OUTKIQD2ztcRXFV/VSWv1s/8CQGscDs4WMZvbk3tq1q9tO O95dD6u/sP3zP/1LO++T5+utVD7AEFwwiGHyECziEp8SpxqP+fWJLIJmexMXOY6f0koxDRhVa+GO zYtjaWZ4rBz++Avfcn0J73ve+3d6m3+7dszjfm+6uEDGGYpKDUr7S86ozz2P9Jx1XhHbmJT46Ljy FBz3laQcu6pLID7BUQVB4pmY1hzC3qbbFhzGJu35h9X9L7z+SEv852F/ODnpcuBKZKjTl950jL5F JRiZw21/P+nARn20nfqyZTynu76t2nxFe/Wrz2z33XO39sd//Ir2399n8Tb/tin2VnG/91jRJzWH xdTKG946m4XstzzeoIHgbyyhrccL3LSLNMZbx9jrHLcfcpw8QtQd19tE8B1G+pi7QjKQeQbMwvWz bqrnnCaFU3+Fp/iwhbJU+NKUmEnOsbRON/tllplxMTNjFiP7+Bz6gFy27V0/+VYlPqXGceEv1j3R HYrMA/qOLEUr/sM/6engk0xvgwyPLz6UcDZHCBT6mq0mLdvioA997X6BOz5yLvO5UXR0ecyqr7DJ ooFGILYplz0+RF+q345irGaeT9zmvMr4s60MJhXPSf6UvKt5sQPEYugrr3OIt7pC+pCrWNo+c0OV btp9Eu9wErLf8gV/2NxX9Cl4enHPkWfdt/CTwSwSZGuNDXwVqfo6WF1InMhV4TheFqXvaajNpC40 Co8ihYk5WDrd6u+dDC9BMKZoI04MRKbrHGRGHfBRMH86nhW7AVzY2NwkZi++oCMrb3MXCPocCHCr FJ0udGEnwLJzMZ/5bVvsx88kWORRU1slQnQo+EwegffdHrDXrFnbnvTEI9uj9T1Kr3jVm9s11/zS i6PyWWg2AYyKKQTbqyb7x94zp1n7S/hroVa21D4rfia3pAT4sXOON1rmrWI428HC8b1/89F2l7vs 0J7w+EfbF5SPWNjnRVvHz1s0c9+Xzm70HXYsbudYpFnSsw75vhhj0o9O2zP61FWoD5m4GaKUYIhb Lkcq/dm5F+yIoePouKNh8Nl+QijMwus8Zbul8hKEgWBxABbSnHZ+CeZo4XS3t8e5YlCLYsesdC+w caEOaonFRn+f10vOfn67/lc3tL/4i/fmSlj9mXY4HSyfEJMnyUfeXqZeYyi1uGOX9FL2gULx2JBd Xryq3fvRQfFYRj4Et+zonjG2ei6Tb1dfdU370Af/uZ1yyh+0HXe6W78raJDg2I/YREjZyjbssY+y x+NMdca4qi7sawsl/GVf0SomqS9yRkTjGSvAmbsybzq0YliqRZRtEX+eG5uNMB275QsFWzMfAGpS p7txwplbwIw+jzGwpJONxTMfqGLB/qpXntn23nvP9sf6tOn3vvcj58U8JsNfcsEGaPYXv6InraNO 5oP0fXRLOQeTifhkP0VxTw9tMOGv8WhVW234P1hgvOAYZeajZWbsfN2WTbSZQS9+FCDcC+Qn/cU4 dsRgH244jzvfHE/A41f2PR8GPniJGX6zjSU+xn6Ok79xsGwrHuSKNmKA2aeZkezj8KMzscYWf4n+ Ik78W1ywArtHX8sHcMuXSbcx8KAWXmVvkEec0uVFp7Ccc9KFHdnod0rs9qMD+MkfCs0XjgVYPb+g YV/Fi72L5XpfFi0t86t4yjcTUSfewrB90lM3N8ov2jmuOrLybxREu6gabJzIMkmV0zNfgqy6+s0b z71pirUBXt3SNVhFoLXjxZSswCODEzw7ROfD3yfEsMLugrElH/zYsYAmzqrHNmGy1PWWE7OvzLzC J4mryGpfhc2TIi0VJKKArdOkQKxY83bs0glPvyxJcGnXij4/LUMjgWafuCJXfgWDWPGhhXX6EMB9 NDE+o73zrz7UvvbVb2pyzB0W+OJb2QNqYsw+ON1nOpGVvCfNtKUdGUrsiM099qLW1QC8tZkdPPnk PnY/58o1/ZtFD7q4C/fTn/68ffCD/9RO0Q9Y/87v3FXPyuhDMMTM/uNmsHWgGMSSacErDPIuJ17J 0A6T/cNA+gN/+nHZKVpskdtcWWLrxBMM67IbetE/sTS2j/FSVmIjfUcNAG35MevR9+iHkiv8vL0J vmUwF8Nta2h2gRjQokp8clUMxQMeqNr3UpPPhGd6sD0+S49krF+DHhcw3SduHbOotl2Wnf1j7KFq OsFLtxfTjl1swBUmNrDXrd3Q/sfJT2777ne/9spX/lm7+eZb8gnUBFpQOnlIOYuHLB7jlzRIf5TN +SNd2EN8Kx7YYj4aUtIH2KC6r1At5b4jD5gzKpbGcTzIn54jPT70xYqVy9vf/f2n20033dJOOvGJ fhuQGMhcbToB4gHzmJRpvadNDYRB9nnR23mxiY38iV/YijRX0pSMh/QP8x248CLX58lok0xwjIUy 33mMv5PPwgOT8ew/brmRow4FJ27sF777TbIyI030p45VkWpvQUh8uAOCjWOe2nxeFI/aEst8Gp65 6BUvP6M94AH3baefzuItd94qJrhATJGpfsUGeSnQ4URNu3VLQKXGPz4TL1optHJ3i3318xwz4jls KJYYNwLQyXHadSxdxMCw2kMHb7podV/SAG/JgQcfOnJid5vsgy22Zu+vAZIOfHJeeo4ib8AKHv3k mNqIYAtc/7p7KqalnIecF4NPNlpyvpMoAOwhbsbQjmJ8OYtO6ORrWha8Og/QQA7aLvGKv/ppss19 Iwzt3Y/4hbB5tXP/dAu6ItqJqW3BNf3R5+53RHVk/d0fxAQPe2RExyZ3oRijT01mAhvGFB57Sj4l Tqb67t1ctzyytgRF0k+dOUP7stdjk2HbaabLbollTFkvMoayD+irvPOxm3rfS884hyUmiSM+yEKl ovD0v7jMPks/fM498in6yJEIJpepej1QQFQoKPGAUmLZALQNCkMrKRoUEN8V6TQFw+CaADk5LCzi N4k93cyeHpGM1ev7inSLFLlyCLusRR3r54xck4gdCnods0fOsgw8OkPYngDNinJtqEVeexLCAz5Q Ns+BkV5CYlu6zrB0jM6fXenQhCrb81ZPJu1J1GJpx2/7RVar1PG22+m5t5e9UN+h9M32vvf/nb46 RG/gKR7lqv2TLLePGciLB3OSRzFgjKu1Yo1cYdDiE5L7Cf3h88klnQDLVKofAKsTMSKYbkz8mnQ1 vV2lE+Xffardcstt7eQTj82HLyTL5GQ+VHZjiBVXGdhDG7enabMe+FSwnfjEtORWHYcDJo7S7x6j MHT/Sj48nbfrZ+dJyjnCcU7g+EyuIasXvCvBxA54Y1ix7Zt9C6+bJZksBDe87PmjF8dCPGszj/mk x5rjd8ZMBjC52SHFkcnSupx/onj8gcmznk6ImIgeFPdxgc6UaPJiQBjOEfpFSlbrrvDBBx/QnvGM p7Q3vekd7Tvf/b5+2L1/rQ1Q7lv6N77Z125c2Uhf085GVMBFt/seGyY7dEx1NiyEiExxNFG0xAHc IBso1dCkxycC1W644de+MHrCE45s97vf7rqjtJbzkfuaeRWESX7AiHEYq//JrzAQL06KeUta7QKM TfRZnOLVvnKicfIiW5sOXbJQDr4ljMNCa4kX4eiGsWMo3Bn/ojPXaUuJLHp8h07EWFGxyt7q3RL+ LmxM7Ka/rE+w5I9/YeHs57X999+nnXHmOe3SS7/nt1Qt5xhjl2xhAKpMOdxBHCfGses9n7tl4UUq ejmiIJM79MGreTm5gbLw+VUBdsrowtl4sj98nARHxsiATYGHzTICjC3Z5+KefpFdsjsxQW/hJXZe wClm0dNpfX6mH7Ar3dP9Vr3unjIa8Nvffzk4hB1jAYMCOaaHYL7BJKS8dfnyJwbgV/ppUDXhznOG n+sxkOfHvhYAy1rJDcKnivN90oXyxLNboZ14Udbtd6xD8Z06Y9o5wMwuETxABKGcK8PXc2LKdUTs rfhkUJeLMvpDZNHq/DoZIbIvMukjPZLgDkKTbRSixrPjxThgHsUH+ey9jsnJrEV0LB7j0v+2H/nY rwbTMJEUTA7ZKOmKX8VTstbb/cv4zjrMP+0FXo99xU2YUQYghaARlGIwXTzUi9eMeimaQWNBNRmj MCdiP7Bc15GE6jaoHZnp7dSQJ8drAJVe4OqYfenjWPDdF01k9ZBgXJwmp9idoHTTFu26XT02buw2 jYw1sXjCkQ7Yyy4MiW0lUQB98SJbnUxKihe+4FR9knPL9oY3vt0YLG4Wl+BqEHoin32Gr/zH89LP nlJ7V0KBGj4dZbDAF96ccJV0JK7PSHNb+qgvCkCRkDcdY/ON+jH2d/3137bHP/7Itud9d/czRywk xOkErBWzLUNft8N6sEWxqL5W1SU8JH+VrrP7V1TnfjrAMayYlH/hG2VlAH1WANpjB3dgAk0+zq0c 2v8hxggnB4ILFPGAZr042iFMVz76k6YOANzwJ9bc8VpcEE384KuTIPgDwCBUNtYkE9siN/VVx/HE 1Ps4vwWMLhRGFx9A2HHHu7WXvez57bzzzm+f0MaXtiJXBR+ZLOMzdnE3gdwMh+PXj0vGe0EoYp4k C60w2FNsb88PeOfSj7WrHMXPyA++WiDjZJWe07rg819q39UHL571zBOcq9jm2MsB9yt2dt2zrvnI 9vR2+Ovn06RhZrKd2KdNPO5SDjvP/wHeGLOOxDB317gESm4wXxAL+Cixe85Ta1abm6nItMLkJIJd JYP8WOBj4QIPrPQh+zPPfFY7VL+w8D9fdG779re/5y/pLf1WYN/GGAS18jVf9o3u2ZZwxH500H/V zj55FT/RhS1VRvuRpX0Z86WOaaN4ft/EeIKHbRwXhVeyaPezcGbFhtk2dC3YiBV/RfexcjCTkRD6 OVV0/heMW4w3h3f/xxfwXYRbuV46AebPpewofhEZrpbXvmSJkuVpVCW+Bxucqm9qToJ/0m19WDDQ ABjKOF9Ati3VjmAvhVljZaTP+RHbWNTM/SVO9TvytThWxbTCqH35r0iIhRsIWSMM4SpW45eOsilz JvngCFpnYk8OiLwACIKDZcz4V3HqcTC/bOFPsH5XMkCAWc6+i1ZxY49dzkoTWUH66okgyCneipJj gFXClTCICJdjvtLUnTROMvAQQC/CwNDm27ZMP0uWuZ63CjCYla5M8JVpjAtmrU5jPGFiZY99pZd9 dSjNlMQO/QQi/ASEhVV8DF8Yu7+y2w+jV3C0r1LaSw8YNHNV7CvjLpMPemTSsy+ElZU5dxfVefVB kPgqDBuQGKKL5974rrejjjq8vfrct7Sf/exaX91WfO1Zj1OwdLIxdGJKt7ERfz44gPrSqWh4gYge 2wyjbIov3Vf7QXpKtttNDfvZa4mpntIefB4Itf+RdVxBVH/YTr3y6xDnf+5Leovlh+3Zzzre/NbJ t/Zq8oHVD6HyIQAdoZe4guh1AT64v4GMDdwhwZclPYfmOw6i937wJCEAHjLlLWz/vt0mJ17AHMBg CpfnNtwzGNF1xi6e6XBICavsI784ig/44cnd/QOfvtCY+MtJTrSUhTFKG9JqcJ6iL2NMykVGlo3f E6Qtd2Cik3ZZK1F6RDRPQDpaShzVqIIsOrHTY6HHwH7xhbHgEx97hB3IRdZ7tVNYALKoO+vFz2m/ 1qL8LX/xnsl3mzY9DB156238hit9jC/pa4PppeIg0+IXfguIZS5tOcmrSW5lfPUrZTrftvZxbMDY 76tl5woxU4N0EvaKYezoC2YtytdtWNve/o4PtIMO2r/97u/ur7G3ZrILWPdlj03NV+lf8BOX8Ek/ /dc3G62I1vgvukMv+8hrLyhwnrrHUO9TAHvBK4rl5TM5zAhkvLOnOP8ETP+5TfnOnQBaPeOq38ke 8nechz0nMJLln/tfY6lyKbkiexw/rIAn88zzn/d0fQ3L4e3FZ73Wn+hdqbejZaFtzHjAN+lXLm5Y F1vLf+yl4Hb2OSCW5GbpJbQJLzjCJjTuV6Qq7vJTfnlMoI9x7jbshj821QkWH+gP+805JtERY8YV aNYpNnT62S3MU166jzi0YcEhNmlTO/57Pguu53ZRUzo//VOmo13x4QvL5ZZahEBQ+BASYxkC/db9 qvOX80Rx4utifB6j/yQ/vUMgseS6H6/Hs4QC+xzHxAnTzaexxNetEZPpvGgbux+So08wzfI6cD+5 Q4oWrFwg4kjiRTz5Jyck3i0RwVjsug7yRHi2ifEv39E3lkJwjECS05zfMm6U5xJaqvwlv2lzcR/T 3x1JdMuzF6n8wQ4CPs/bYLAOgD/xcid1GFxPf4RQONQms/FZFfeLqEvVr+QbTmYcyX7FaYPHJV/b s06hmnXScT5diH89X64ubF9IOTGil9iWbnz22LERXTlSYSCXCCEJKGIXRKgAsrAj6+aCA7RbQK85 Vs3xxUHaUoJTtdK7KR7RFnVwwYx4A5IPqy0dT+f3Tp4ZfZRkvaMfHUS72eaIzljY8dtwvZiSzmiN X/GZY49Vw/Gltzz3dro+dfqud32kXfTli/0lqWX/LDPb4YWBQMBhq1LHJGbkYajW2dbCpDEyNQiw tgTS13UnKjLYnVjNGMGvExQ1coMT4zve8SG99fZgb2vXrvNCpLqh7CNC5UfRsuhY6FsPpJMJC5dI R8mhE9myjToYuMIk5YdB1V74xe8TKnkuHoZM8Bb6D8iYORyP4wBMb4BuoqDfOSLHJ14UoU9/VVyz vRr2/aIJH0r3LLtoMBTAb9kn3oXikMRP+K1+bjOp/NGePjzxpCe2B+1///YqfaDmZj0/xicRXexC 990yyQ0WYQviM/hY9NIToA4nPJujKnzF6z4VvutqSxy6ZJ+b4mNoPh4J4NpW2vUsnJ7TvPjiS9vn P/9lfRHx0/RdZvq0tPjhqRibs2NzTN/wFUJjfpluvyerBZ940EYBj2J/fMCxSX7xSaPz0OATygCH ZgdlkJn8Fz9k64BNuZJxInhbxgAAQABJREFUE4CJboDYIGbrpQ1fXNMxJzxOPGymqwE7+dDCM5/x 1Pbkpzy2vfRP39guuugb06dNgbIOIVZfgQcNW+zz6CyaaRu2kGZaxck8nOwHXuwq26AvKKyIbHMC JcQFzYzBTZVwSSZito/FhyMrGvFMTIkPi5QB12LJ0ztgiw1Wb3doHAjo6roLWRonhlLnBZEYZM4U k+rrkrOQBBybBcTA2ZYOWHElTKFrLzbiTzCyn/tlE3DWgw28W1J4Hd6g3PxZ3E91XnI/90VWxThW zq/O56Hfyn7Lys7ELf2TvOi+y5PZnlg+ttOGrHm6umDPHVFxoLmwZsvqKGOFmnMzIL0RrEVRG6vi RWYsPheBITliwr5062g6LplSp9zAISlkReoVbJhhrKsA28Lk5AMp1nGu7JgE+KOzsnnBZ0NIiKjr VVXktOb/qlsto4cBOBbXofVkcmfLKel1ZzjJu5PoF6A3Ob5Eq1xJ6S/tFQjDe6CDi81pj5bOC779 4CQajujjOL7OeNRrUucOUk4CxJ7NGmSXE5RzntvRxkRgE3yLfpttt2p/+qcv8Enlfe/7+zwYrsDQ J/hEyQ6/uFoRZn97L1cfRiQ0jk3sRQbd9Mls+4w34qpdVfyrExAxQBaqr9bpb47FE7vEKlfYSo47 QS7yE/tW6dNq/6Xv3/riF7+srxU5sW2+xaq2Xr8mAW4lKPIU24UDfYtfSXB4x4HvWMi+aZBhu4mx B4sUCdkKnTzgLkQUORYBEC05zNnLJ1LxeRBZHzrBiU0+TnhESz/rwIU2tBA+CcmFbKXLmh2o3m++ yuu8yIlf/5I3iupEmqhCpE9jCzTsiV0c0cY+eVJ089gYpFPArxjW2wv46tLj4P7tceJuzuo1q9tB Bz+oPetZT21/9mfvapd/h+97484LerkbIBtt6xxf2rhbi3EVc+JlH6Z+hwsWAkY/scmLdBGGuhWO oiUGQuomI+84Oeb4b0oWMYwN0ZGpHAbL+np+wf3X7/5b/4rEUb9/mO+Am0dA9ILfUeh+VFw5gTv3 jSU+uUndfioOnsO4E4GcS3g8puQjOOQiX97NXItvbHWXNo95xHfPofivv8wb2tlXgIlWfJwipUbj uy/N4jp85qefJO93GLEVDPJKm30SGzEkn8KvdwX0PY4nafF+yql/oO+j/LN24Re/0latXAWDi/3G QuNNVIEQv6qzZ1wJX0dqkjtqL+enDsXS3CXN2/iKkbCdovD2kr4QrxTUZmC34wQR40995VdyUUfa 7Jv2nhOww31ScYsOmyUs54pebR7O6J9cwkpKdAer4lW2wcxfzS+OayBkEcK8pPhQOUN8SreZep5C Axf7K7No8oKO/gPXe46rjozwyUX7W23z3sq6DbFT+ruM44IHIli3jMAO8NKPxCEncer443ztNkNI bqAfJcLRa3J6Irk/TO93BHtLdJAvNOIT/WSEKLOfUMpfG9H5FTzojCU7ZKcyxqBTnO/gw2LHcqd6 mh/VwHGtA0qu9saQzRY1Hi/Cpq90CB/y1Q4/xedU7sBq4y55vIpN+Bc59j3O6rtgiNb7GJzJDukh pkRFxDQgYOV9AECff94CZRVMCat/uNUHTVJ2wvIedUQIYwiSmu2aDBJunitIoKHUwgcuSmzRXjmS CRha9BEokodb9QSEW8G2ybrQJ4WYSTQ5EI9rMsIDEJJZYEpHTfbbD2jS1e20xXQWaMYKHhjYklue ksFnBZyChUb3HSKOsEadwmASXy2+oLJw4O2JbbfdWj9D9XZP5tx9CZJF5xepniehoMZP0bljo9mZ PEJjdbKTFXtke+xPm+038qzJzwFodc0VFfaWLIjTSdZYCHYvpbByZkpiuwyG/uTzu9/zkbbLLju1 o448bH4WTgZgw3ySBZPYWjiTh+qVO/DiE/zEnJMeViWxkU2xVXIJFAZC4IKJpxmw3WcT4NMm3FiM 35LrJb6pYmPZV0uXg+5CHnMAqPxwvPERInbWorUrFZCjqnY4qm98siNPoJEryvNYK4pO+r6lrrap OEDh4O5J3gZOX6O7NqFJJHw+Bo6cFJWxhBWOvnRiMmN+xx3v2l6mC4tPf+YL7RMf1/e96RcXZIEx QfJJBN+MwaswZTt/+OEGHeH7VEGTFIwLKytEKf4qjzmB562DYEp47jfhg1v9wpBcmEPopi/IS7bY B0YKtOZPdv/kJ1e1j33sk/pgxvHtbne7i3NqshPV6OoFn0pPIpUxH19gRme3pS8gMxjpd/otcQuP oHWAj7T57rBjFGX0hf/EU3MjflpWOsgVeylH6EPspC8osScn1+S6aFP4mYOE6ToI5HliZTrYBFf/ t6++XV8D9Kh22mkn62ey3tE+85l/1Z3LFX2+RROS0T1iWBwI6eFCwb55HoRmaOtwPAxSMa69mFSI NVhTP3f/3J/9OGhmDyZ+qZS/7JeC42jJd9XBRVP6MLosM2GSL/mjb4jwehbclpn5O8HnMnCx00U5 57f0hRG9NNA/0g3JQZCA9pEh/uikzf+qcwCOBfqedmGxWTC57T4wbPgtYg/hNQzIC8qIn/GMDbCz T57KWhG0iQo/43rGi132RzlA6qYZuuT1R//O/MCEbkMkCCcMvgHC/BPDhYVOivR5F138PCR9Zlzo ATALL5Hrtio+nMOML9yaW0uHfbW8/JU6f0jBzkQn4U1+9BsSXUuNJ1clDw7noejGbrbYEJHg0c45 3XZwgu5TIyaAQXs4IxUM2sCiT9I/bhU/MlVoc8TKyTAhIBfc0oHUgODohK/AxVOBQZYAJzFFD5hw 6FDw4oTMkkycrYkH1hGHeq5w4yBobh+MRw82jjYhl1Lag1vY7NkYmJSi55h64YUv/GY1L+3iUMdp x0pZATSW4CQx4GWAmWpQ5IrGcZ57e+xjHqlnSx7Zzn3NW9pVV/0id9+ko+wMZ1496dmArkfHVIvX dvTkQKLi4vfknaA4B39PJttTGuyYKsIkoRKe1K2j+NiPfoY+xRFe/WEYtOX6pOIVV1zZPvrRT7ZT 9VbMne+8g2Kn/Opw8KCqfIBsn5x8lbjhxh8k3W4VOY6tk8EdAJnYYEzXODKVqSA6nYaqsRf/7Dcw kXe8sHhQATeleJDdVKGdHGdfPMl9gdEmxWrtbYVRdRATK7fohRgAVXs4gp29TVS77eq4pbvywabQ NvnDQezBFviW69cLXvwnz/FXhfDrGuSEhyz6+jbGSiQX2ijoXOo8gxKboZcNJVu2gZq5gAU6g0sU crYATVG1m8qcIolOnXfxLXWOg1/tsx1QeE7zwx/5uPU95cnH+Pd7cye2y0sDGIw7+inP9eJDb+/K 0FF6FvuD+V5I4ohP7jOvUYRVMRmdHXHquHRIwmGhPsvGpm6ZodCNsUTKhwpr+J30ptEGTunAYX5p 44gjHtZe9KLn6BGID7R//IfPtJUrlueRBYkWf+bzkjVcMIVB8cjusTKhvyDvZx277rltGH+B6E2M 1YFrqgS87InTM6N9FS/jDVttEfOjWHyHRhTPmR26cNgby3GrvOxM0y5+s0DNeE6DRYcLwIl9ODC6 zcR+DuY8NrlTaQMPP3Q0/RWUKWKAJzZXy7z/bXSwk8exoWJU+maEHGEX+lxSQamqPZdiRB+zhV2M yIZ9tgeK1jIywr2olwnfLQtfrEqkuos3tiLvGIkpPlW/Mt77PN8Bon+ONzi50OMoNtUuF/KOsuOb sQOfvPZ8kPk7FHsx9QN2oAu17Kkj74Wc5i5zo850eMJnLB8HVdTERX64dMGKY/qNhabvVshh8QGW kgMzdyI7r/p9mzyrvyX+ZvAYYKOlxBMtsOLPPEwSYq1ovoOGQViDk9nQGTUYrXYmPO+78Vq6btQD 2EzwmeSjCJtByoZM7s5pmjAVzHK4dPjTSrSygmYV288MjhP8pRcVAsgVYW7L2361owlHMzdgY7aF b6GhMR1efpIwfN/bfffcXc+9PbO95z0fbV/+8tf13Jse/hZeTSrm981W7pBUDKRVainec4yMksPR kgP8uTs7I/ax0ITPV4fSzzly9hFfxEQAXfCpEh/ZOiYOQteDo9wNAsF3iZyQ3IauK1XxS0eVZctW +E4H9eOfeozuwumH7mn320h2QLLln5ho8mUK/UeRYZivI3Ipg8dO6bu8MHq21z7yPo1o9BNzqWXk OxryALFAqOuh/4SI+HG1njjkzghxziYxl9Sn2hQjKPjryQVAxxkboGUfKY7riGN3gvayrDehA5He 2rnB1KFwvSEhW+lDv73NA/eTrUiGj34jzrkarStFkWARoPscOcZywuk2+ueEpz5RXxexb3vVOW/2 b9xylWozxbtB+tz/2Erfa2/EbgO2Ufyj8J4nsI8cklY6ww5io/4ta4NiF23A9YsjX33avuSe5cEW mzd8l2HT5Epe1obBtGOOMCp+eVBZ2aGr4uuv/7V+oeGj7bjjjm733n0X5ZOe04z5Pab96tj6yCnB 4INK6cQFjz8d+GQgnbZN3HPOCECFnLR9g7wb/BKexXWwvbj1eKEb8Fn5qm2ZjN1sGGsEeb2SPlHR g+++u4qE5hDfXZek7Msdgdg36VN+3b76tnbAgfvqu95eqDH7KX2V0d+35Sv1MDZhZTBJnHjXhp9z 7tWxbJOAH8cZbHPcFPPKGZnhnJr0UyWf9If9nrNEc4q4jgB2RA/Ho27XpQ+9uuehLTaISwsF+kR1 7LL9gCTevsEgvYWFnZXDnqeIHQHAd5sAb+yIDaJ3eTNhqxoUbm8Ck0faEGJiZgwhaDq8TlARoBNj 7hZmTFYuT482YTboKMD8ynV8w058i5Hej7GyQJ9DYCGn3D2ixSI6ucvDx5iBwTq6nRbAeubM7Dkm lsHoNOT17ybtckJSFYOgqz0+ih9fvQZJu+NhnWLrceguRU4V6nQJOD53C9M3BvCr+k9tflzBCsVr e/BRxyrEyXf0ZALzqGNHX8hHtwkH3ppn84GmxAc/cKVwsp/rngLtIxBS4BOyjgBTcVgNHx0mVExo 58NDMInmdzXyVqPtqj4n/J4bAE2nK5CSGYsZenKS1CQyAYKNLvME64DOjoFRvHBRwse+J4hp6Qgz +AVeggp6NEDGttwBoI3vRcutebPBT6DvUJApfPZ1DCODGduxZRSkU/LWITxjG/wp5Y8EzQCA8NIv xh0Rozf6is7bU9tsnefeLrnk8vaBD+Z3TsMbu3JlF+Nm3YUw7zGB2MJjvm5T4k9snOUWWICTUEu2 YpN9+jb2wk87ri+Q7epjnSNlivsBXtd6qyrYcO2117f3vvdj7bg/eIx+O3EX/Rh6ck5axd15y5Ye +wW2qS+5A2JtI58o5avIBIP/FBuiCnWc0D7x6O3exUdkYKHg62/zmfayq/ig8fY1jqPKITcfvNng oSBbJTqjdBwX/qZ9/GWGmtixs7BCBMv9NfGkvfQzoQ1CVhvbIStOYqz4h86Xta5rD3nIfu2Zeu7t zW/+63bZpd/3t+zTrqg4Nty9SF04jD3bNRghTdjFVm9lxOf45N8T7rpL74J9BagyCVsXwpuDyCFH YZ9YwJvNd6zRQ9084SsZ5FboztJnPvPFduWVV+uLp/8gNqdLrD1jAGG4VWrPoY7BCg8NEuy5Q21i pRsUC+vlGMFeOB7rqM4cy7jtpUNTqzwpOc+VHQ5a5GOTuKW3QFyzLvcZbbajzxsSpO/3ut8e7XWv +RM/t/q2t71PCz3e5oUX3R0LJXg30MoeE9VadkRHl+s6izd7zifpo4kLP3oci1a4qduAwZ7Ui9fj xpVucI992c/Yrk875y1W+EqnG70YwIY7lAKRh5NvYqMfRr98grYP4uMPH7sdHhMdmrYqNWaCiz19 juzYQpCZc4emH0m52U6a53zEpkLPnrpM6RXBAdm34gQNHp1WJp8894qR/EupeRMaG/XYYTwx+TEn A3lYWIy+rnyC4AsJ7ctmsJhn2Nd8r1YbaT1GwT7smP3Ld6Uik4VP9Ydl4TQuwvHBWJ3mxzY0p9FG KLEvMZ15kYztfT6RrEAhd16O4M9GW2/2PnREeru4+1pOtDxGEf2JIWgUMIwTVSGaPs938jWtGE4Z lVDHKVj8hXfuJDlLhmrFrxTzFj6UE3xqrGg4JnF1t0Araq5CjKM2VqV0FANpKn2lL20m1WRFhaT3 IikqHDSFwnzQ/cClbPKf+0KMhp7xvaIVD/xRq7YpIdNxcycBLbRp8OtY6ohNkseqdcxenun8baie yFw5uEW76JIw9kHWc4PP1bMlO+ywbXv9697e1qxep0TWWxTEig1BTr48XygBkjOCaYchMYaRIpu0 qF0mPuJKZLmQsA195Q+/+3eyr0t2ICcsJkoaUuVA9T1OxI/iiQ5QuEIgJs6jyTC16z+Fn2Ba1j7z 2S/qVxp+5p8yQg8+eeDDRJ/IZ2PIn+qrxKP8Rg/MzhzLu2bbGLjio3+JM3HsfWceclu2OTbae5In 3/oVV7/Acczcjwi5yAnbKa09AOmnygfZLD7HjZgjjB3kurHRIV7abA88ula2Iyz61GYOuOgj7qzJ SvskbKn37yz6Too47FvilvEaXyXqgu9cTRJ796Go3nenHFfbRX/2DmInOU7gd7/7nf2Bms997t/a xz/+Of96QZB5ZfJlEW0Bf+cWdzSRBSp9p6ph49Vmysllmhw9WYlOnNL3Mypw9Civ6V8OiYv01aU5 MfRf9av2uCllfg5X/MQdFLtK4HqOVS7VnQSwawNz9erV7a/e+cF22GEHtwc9aB/HgdhmA5A+JuY6 pkr/sWAXdbJThtP3JeNYSK78imGyCbvAcz6AZUhjcpeT8wht6RtZp3ZY8MYH/Zi6N3LKeRWgDmdg Yxug6wRDJdjp/+TGkrZWX2i80053b296w0v8HW9veOM7hM+X93Zc7YByzuFrN8Y6BO85VWMYq+h/ 24av+CMm8w264awy5WEnRA+xzBZy4o9ejzGA2cgTd7h0ea6DZO02wroBkIGxAb65L+GsUrEIY3i8 EBDDZGPEyczEAADpT84HiT7HTjXoD05Zik7L0sd59hF9LNJoD3dhqtbzvxZGzOr+SiExw4tdOdKr D2MYdgQXw9hS4Il/2ZNrDpuaoVM4XzD+yHVeyavKVzNML2Jy3MUjFudE98J9rzZr7ueexCY6wHN8 YrQXynV3sWJY9kSdIui5j/4QKiZJl+frWcDzS9wg5nN/2WdRfE7QnjNA3m0LT7hplxB9VDoEVnZ4 L9Cat9BP7jk8KEPOdwrxrM5rok8FLHIE4/FB/JL35rFb9qIfQLH0vY7UiLw01hqD6ELGZpVpAWcn B8Pd6IlJbnOXTnbTwciDECUQZqXQ0vGhwUl7dNGmGg6oOXuP+rAZJ8EUp/Fr4GQw6y0xkkOWR0/d MmagZ0JFU2Q6D4oK3Ye8BNsY1CaW6aBEomciK+QOwNQ8YRGU3FI2qdsAnzzXf5JQb53qZHH00Ye3 Y455lK50/9K/z8gvF2TAEl+UISO89Tqh7rl3e/lLnt7utvVSnahE5l1KNZMQiX9ra3U36/DjT25n nHJUW6Lvk+OWNH9VYnM5gXD5zKQ2xqmfQEmyoZAoW2yzTdt2m81nqjGQZQMv+DZfXOkf+puYadOE cdttt7V3vvNDPlE++MGcKGUrsvqL3zrlkmfCEsXb9AlY4qHBkeXpnDOllxNIYliysWdqV5Xxgy+5 Gk6+pF/IH+mTncVvG7AD+9jI2+4LHZD2DErVzAM9kYsydEnK1AkHoCrYogYmY58oYFLhFaRqwyO6 xB82sCGdKezWTT4QQ/5AqPzwXSjXwywuwKd2+ODnbh3yfFnrrbfeprtv7zHPeDcj6PJHbzOu2H7n 9pKX/VG7x1Yr1SfVf9GBG4zBNfqOrCed9tx26uMPahvWKHHT4J1d1cscZwkhZ0djnxLZNpALdF7G fqwoX1dtsWW70/Zb2icvErEGKLBwlFcu/ogBOCjhWH7bdzHyydqvfOViP8bw7Gc9zV9S7DzBPueE JDwPljy4oKguHmuxgIniJcDSyAnRe/ShH8Nikw1G0rZiE9dsLG5FS+KkDQZt5S849YiG9wiCrW0s kdIr6lRoTjxS57U3aV7Z0LbTL8C87rVn+U75Oa9+s78+hrsjNsIi5AjzkzIIMBSA2P2ueJYdNmeB TguYv97qMuyil+RbeGly3ATGPmNU/cYFkgczfcg4hjHeMB+xcLeJ6rsY2uc12esTbSfb1goCGCqz /eiMr1xsAVW+Z0xhA+icg9TIsZ1mj11QkeNYNMUp41x1+FVoCza6wCLeFXN4TPQOZWJXYQFSCGri 2Bv2Ua8N+bHAF2y6LO80edJ0upXtVum4FY70OqYJ1KxvtjPpCl98is/4LdpkgryzneAkb8hpcgHK ZvrOtMl+SzHe1SYTjW/HsAlZQOMo5BT0pwJi1gDV5p6QfqSinxbYRz6PMTGBT1+Hp8fX/OBycQ2O /sgLLrpYDHfd2MfbttNaIChSJBuMWfqzkAenFn3RJ+yu2/mufJj6TZyoSQ7zSEz8jaVWBPimS+xD AGOLx57EeBNTJygzT/FK0nKYPKhUjVIBmLgHFgIWTIKQYFUipT5J9YOhMxU49IafYEzGmxePx4Wr 23HDMoU760xyMEHIFg/OagsvctiKzdhm+xzojb7Kvc+e926nn/nsxteF/Md/fFXPva0k3aJPfMit 152Q1fr+rVtvu72t3Ga7tu8+922rlsUPEmONHjK+7bbVepaML5DFnyVt5133aHvufg+frLBkrb4C 4HbJ3377GvPFOr1KwVph3y75NZJn8l4rfRRs5S7M6tVr/SDzWn0HFN3D1wmccvaL2nNPPLjdfOvt 5t0gudXCvv12cPhCQmJWSZ9jLEvJkU+U/3mxTpbf0Jf7nuC35vCXknjlljrBcA4zAWhj8srgF52E 9l/k3A9iRrUHd8g6nvvFx12KE7L70BbTT/2kiaObKIlvt4/+9oASrwzO4JeNxkI/AN0h2wNNEto8 UU0yYhvsm9V2G7oMtSwcosF1yyWPdWh8vfpkwt7/8GBJ12d/CaMb57FhW2FUIV+OP/4Jevv0ge3V r36Lf0mjJrFwbNRvoZJ3t3trK7Zt++23d9t8OSdQ7oKtVz6Qb8pL8gaqxt5ue+zVdtv5rrrw4GTB 76mSl6udl1lwyS5ipTby8lblF8+HbhAG30GWcc/Cfr2ez1rtiwB+1gv6bbevb0ee8Kx27mmPbRv1 7JbvKghprdqdl+ZLXnMXk2nHCzKPR6zpfUWbyl+/+8Ntzz13a4cfdpDz30S9jDlQNPaO/0jocChi LOGVJ2MdJudG5jsep39El2+RDiDHHNViEuhu8h1BimJ/YSxCZCzXyTTxTfb8RuzLX/7H+j68Vf6u t9/85mZ/11/5XQj45JyXfZRp/pMS51qP52I56myIVVws3/sBm9jIN+KEXSWDA4XneRpBM3DAYoY9 JXx+S84BEsl2ZjHHYXDClwVgaKWrYEsfNllX93fqQzcIvrfbZuUWvPajtxungxAxYBwnHdS8Y7ra EPb02THZ1ZxHq2NNAnM+K/9ooFhvv8MDYJ+juhm2KT5lDFpEjbSHbiHILuV/3I5BxUEbtiycG+i7 8NmYAnLwVKGJ4r3k+wJFzngBW3PyFAApY8aL/5Lr8Y9dgGDNZNHkB+345KKDxLvq7GkPg/PYWoKF /fwFlv6xEbYZkYhhO89DBoObDZToYV6FL/EpHto5hfniTOca6NloiSz70JJE07jqeooPnIQC/bEB uWUQc7UFgwxRnVMVxe/GWArFvZ3OEi1BACtGdRFVSSYc6hhytDrN7//DKCW0YyzajOVv5UermkUm QLQTJ9pLH3I+BkY4HPtKqNN5y1Gk4Lg98noVrZ/8HEwoTpU0db2+g+VbXXRpfChfXMNkTR7IcjVo YQ2sOoFwspkXM9iq+0batt5mi/bSl77AzxX9zfs+1pb1h4OjQX7I0fXCO/Dww9tB++3efv2zH7fv 3bSsn+x0AtUdqx133a09+pEPbXfZVt+xdtGX2oVf+b7tWO8THoHijtzGttcDH9wOP2S/tmztTe3C f/lC+/aV17fluqLeuHRFO+SIw9qBe+/WfvXTH7b/+OYVbfutV7ZLv/3f7XZ9g/pue+3TDj90/7bN io3t21+7uH3xS5e23ffbrz1g9x3b0s33bA++/7faZd/7eVu53V3aY498WNtj5x3ajy67pP3LF77W btWDlzxT4r7iAw2yJd1QV8B8w/R6/cTWh9u73vmGdsThD9VXVHxRX0+wUvGiz4kEQsQ2sgwsrlJZ MNLHlM2E3TlzN8KdLYlOrNjzlsqYM8jSF1OB3yVWpo8nYvyoRBJ47gaq19XlTN4+CcgaCrjOZ1Xx JTGIF7ziGnaRyy7UuVND7iKgAh/HzmfHkfuNJqqB8QAHPOHtwTWNJt7O3AyfnZvBIk8HdPH28RKi x+Xt+r63Ax/ygPbsZ5/g594uvey7urDI9335bWmB63fs2z4HPLg94pB92ppf/7x97Zs3+q1HdK1f v7Zte9ed2u8/+uHtnnfdsl1+8dfb+f/+zbamrfTFyDr7iC9L2v6HHNoeduBebc1N17bzP/3F9sNf 3Cx/9Fbd8i3a7/3+7znPrvr+pe0b3/9l204mXPKdH3tB+Dv3vk975GEHtjtvvaJdQb598RvtnvfZ oz1k33u1u67asj3kQbu3r156ZVu2xTbtiMcc2u6vfP3Flf/dPvHJL7WbdfdvM8U6/dLjQgyxy/HU 2NVduO9//0ftn//5X/S9d8e3i3RH7uabb3F/OMD0s2Ls+cAxziIVgMyV9Buc8hJWHVfuQXUX+4xP vkiISXbswM7j3BU+dlHoTcP2GNIQPVBljYGjy7kj7k6SLHozx9oecFWXpUAjbRvPOP3Utvfe92nP fd6ftl/84lp/cjw6SpfZjesPfVlSbcYi4XXcE9uLMMGTqzlPlyeKk8c3++BVfPA554XYa4/LAPuD gszp9ld+UMCDF3/jS7c37omBNvSHz/3tOnyzXWUHT6qoxWM7EDgSPp6T8tdfGS4R5JBxn8chOEYW ydjHVAONiwePfdrV6osyzWGZM+CmHUzkwk+o+DAKjwcQL706Ro6vdYjVaOwla5U2LmQOe4nL4pF+ 69E+haihO4sSfhmgSuImZOyyHC3IycphHio++65m7AaexZe1aG+rfB42xXi1Hsg4SLyazh/4gr3I wJ184iiy6KubrmWX3fGYjL1uN2RPNKMBLZu6fbGO2MY/sPjgizSam4/kcaRLb2tGOzJlF/zYHquw kxby3mrMrZFn2hI+LNdjBkqK9vmXWXwoECThac+b5fbTvFz8ax3kY+Z3uBIveOiLpbvsstcrOqp3 BHBc/dctvShPEhDY6jwrI7B9q7fBeHvKgSEDAVUpHgx2DCArqj6GTRbCg1x476jHQMYKf9XZo6Y+ Il66HOzOlMHTbYHfUYwOugOZlHTZ6Cd0VuAzHtLw67VyxTwLbYafmLxAv3N6Pz0kfNaLX+ufJeLH wGd9LLz0Kc3nPa+dddrj2i2/+lXbZZ8D2rFHH9KW3nJd++ePX9C22e2A9pd/fna753b6nqbNtm4n nnxcW3nbL9pXtAh70GFHtF1W/Kb903lfaY84Qd/d9JJTW7v1hrb9PfdsJ51wVLvmsm+0y66+rf3R i17UTj/10e2m63/V7vmAA9rTnvqY9oj97tk+9+nPt50POrq99fXPb1utu6VtXLldO/Hpx7WN117R br/rnu2oQ/Zt22y5qt147TXte1eva29467nt8PvfvV1/89r2+8cd2x6089L2r1/6dlunviQiHqB9 ovEERL4rtjw79ItfXNfudKft2jH66bB/+eyF/hJV2voYWBATQalOfpMv6RvqwVcCkzhTsRLppzPm PhljbD0yCDzyhD204qk9kBmUaUPnNCDJURiQ01/yhiq8LNLArHrfoxMR/iynY/JdfzICNCryR7su ax8hVpn8F36noS96O8W78gmsrq/vESt89iyo73KXO7U36tmniy66WM+Cfah/lU3Hk07eoj/0eOXU 2Se3Jbfc0La7517Km0e1LZfd3s772Gfa+rveWz+x9cr2wJ23br9Zs1l74tOOa7tteVv7wld/0B52 5JFt8xt/1D7779/126kve/4Tndv33Hv/dvyxD2vf+cpF7aqbl7Wzz32l3mp9cPvVdTe0fQ4+tD3l KUe1A3bbpp336X9tOz3gd9tfvvklbcetNrRb169sjz/huLbzxuvbjyR3zNEPb9vrwqjd9qt28fd+ 2f7nOa9qT33UXu2X193UHnrk0e2IB+3YPn/h1zy2Khb0OcG+49he0n74wyvbscce7ZPl179xie9E OWbijzy13l8cUqZ+oY/5Ax3+RfGHPvVXMOCpAv6cCsirb/X2DHmIrbE73OHtmjTOyjf2lKkuO4I5 2p+U49PGzzj1Kfb3rLNf3771re/oVxb0jsCC+Iz6hCs7ZJXx7enkT2jhjn69TnZAH+1P7KFmrq+I 2m6ocqN8Dq38Slv5CWYdx/XUcaGHwu15ZhF9KXnkBp7C5UKxfBBNdLdNhonkOT78hVPy1Ms/aKFn 73Op2n0enfR1hCF+QrAcM4q4xd83zHEsc7c7GSZa12NdZWfBdjNRR/6UPTRXXM3ac5djeMPnFr8s rifexWupBXzODuUIvsCLrmMe+yh9ldRP2rcu+c7CucWS40uMrrUHupkPKbUuKHvYs1X/Fx1e+4eM /jguXvyrAj0XGSHSBr+LsfERHbUfdPWFmc8Psi+64ZX3inXyIHW3TeOztKOn60KrlLjHi0Qris2T 9knSPAmKvDN5GYor4CXIx65d+lVbjCI48wImvGGrQNYeKl8rkaRPbbIZc4XPR82NKwcdDGQ8ecCf kkmiEju0rInhVd1XSASAK984zWKJUva5Q8UcbAn1hUWuIAlQAoJZXu06AecJs3xiX8dgs420akvg 54mFt6eOOuqI9ngtWP5Ei7efXn2N3rZYgTo7wfMRG/XW5V3vu3878UmHtHe/5jXtvZ/6alu65Q7t zHPPaY/bbbnunG3eTj7tpParb1/Qnvmit7ebbtvQHnni09s5pzypnXf+f/pKbaOuoLba8d7tOScf 1T75tje217//wrZ+2Zbtea8+R1/fcVT7wZqL27FH7dv+4uWvaB/5/CW6oyb8157THruLnsHTc3gP O+wh7Vuf+XA745UfaKuXb9n++HVvaA992P7tvae/o/3n7x3SVv3gs+2t7/98O/6FZ7XdV/y8nXry S9r3rrul7frAw9r73v78dtDH/7Vd8G35poUppXKFuNC/tbBfpu8Y+9Dffrw96lEPb0960lH+GoeV y/JWcsUwfTdOxoo3EVMX50qJ2OnKBBL9rj7jitZdr6+akUqxpo+wxbjau6vVyG8SwluDgPECz1jG ajILUPVVJbXZN/o3CnOvjPwACBTtK69Ui18iSVEWnfCaS7bPsWHysjSNxnEtNPCA7XkX1txVMbte MvllYKMzPoGpDabAG482TmxnnP4sv23+5j9/d9czx23DxrVtyzvfqz3v5CPbF/7mLe3c93yxbVi6 sj3jRX/SnnHUvdvatrwd87Tj29bXX9qe/sxz2zW3rG/3f8Tj2l+95iltv/O+qt8dVWT0LOed7r1P e+axD21vf+lZ7T2f1sJoyzu3V73tTe34Jx7aVn/1tnbkgXdvL3v+2e2Cb1zRVm6/Uzv3ra9v91+5 VHf+lrZ9H3xQ++W3LmzPPuPN7YbbWjvxzD9ppz78gPbad7+2ferfj2qHb/uj9po//4d28FOe2R6x 14r2h6ecoTt417a777G3vkT63HbUwbu1D3/+v/UrAvxuYoLKEJ/jmKDUxcX73/8P7VQtbM6/4N/a 1Vfz3YzMeZlTCGBy06HKC+KEljs+wFtHMEsfjMxDaTM7JBXwRlvUZ8pw8siWxlzx1ViY55XQShZo xllOWBznTkne/UAHNJsmNL7r7QlPOLI9/elP9m8v8wzgSs1JYFKKPzk2+AxOOPyauEQnhNTDZA9g VpXCTkg+xhD/qZ145sRHe+gwYW9iLSmforBftMLQvs4bWEUbswM2K61RYXnoOSfgB3zYwOCPcXQL Ts3nPFXd3SIywfAvmdxx7/ZLJHf40RE9lRexW7RuA3flBGEcdouL76KIF3n7IIPiC/bCnVzQLOG5 gxsjVcyHfnxwDMDhkChZ2KzBiw4T+gtyZu93dSCPfhRv0aodPKPjmA68w35wiJcpk3THhBEpWaa4 lk1w1Tk6EuDAByr3J1Pcvf2YnW2QzopbYUBnHvQ6oYTBgqY7mtqpkDvJlaoHP5pZE825jS67afu9 XnAeATkpAHQqIWP/yIOtYeHcw11n532Pfc4dxEZ24oP2G3k3T/uS05FSUvNR/yOHuX+3SFGUbOp1 DDrt5QD0ahtpdQzv2E7ikIjcJtZ9AJrdXgsoeH0F2oM99af4cGIqTojZDnwpnaM++EOPrwTAOAPU hNl5cydFwfSqIK2xK0KFv1iu6OjjtyR3331XnSSf2T74wX/Uc29f83NvyBQW8whve+628y5txc1X t3/72qVaT2lBc+uv2xc+dUF75GmHtBVb3aXdZ8cd2vJf7tTO+tMXadEg+7e6U9vqLr/T7rnD9sbi bdQdd/2dduftlrd77H9IO2evg5T/usOy8zbtHtveqz1o7xva+ut+3C76r8uFr29Vv+369oXPXNAO f/Yhbbn642Nve1s79GEHtLNefXbbfrvt2j777dauvOhyAse/iq4wtPi6/wPu1dYtXdtOfuFz9XbL Up2kl8mnbdoD73v39rlLroHR9kz+SbiOaePt+p9fc217//v+sT39lON0ovz3ds01v/Biovqu+HIS oibtuhtBvfpuzg8mX/qVQQlneKhXKVxTyFU1eELGMW6/W764h76J40YKGpNLcogm1DHQ6+KBdK4L oqB1qY5j201KTGyH2nxnuPMIMLkpgLoC9YlKctg5xjJ2j75Ha7nDJOU4aJxwImHyqZjyDOXTTjjG P+p+2nNf6u97W7FCFxZ2jxdtyv3t7rVr227pLXq7+5tto/Jyqd4y5c7YEx6+S1ul56b2vt89ZefP 22lnne582LjZ5m3VVju0B+xxZ39dzAbd6dn1Pju3rZZvbHsffnR77SMeq7Rc33a908q2w/Ld2z43 /qZd/6PL2te/+5O2avPN2+rrr25f+Ny/t/sccRctupa0C/7xQ+03Bx3QXnjWGW37HbZue+6jD8Bc dbFyURMwDxAzg222ou16r92a1pvtuP9xSnuyvqR3rYK3fNmqtqfsb2u/0zas4IFz9VmSxOO6Yln5 wRdPf+K8z7XHPvaR7aQTj22vfd1bHdBqrz3ExN7NDjFHmVPQQsl+lOkk80EHo+xBgtiHX7L8F5Tb 6L+ZUHKzzEKbyJnkIshVMicdfPD+XrjzoaJPf/oL/jqVwkEFemrRE0knhRRkrBWPCT4BzYuOWVNs ZWySc/S5T1paXbnfBFL+ZB8dSGELpdqjJ/WZFp68zlgjdewjxil21N0394UUESPGJTpjn0c12rWJ SDyo6W3cdboY4blhCvlXn9Kljl2jvtB4TcGlsp1j95/G5QaNSXQTU8qMkXmAesn5Ag8Z+QE/crx4 TTdgpNFwMNTBtC+82m+CZQEvfON5kEZy3TbomPjhD7Yqyr1tcZ8QH/zG0dgEbtlQ+9mWcYGOxpQ5 PolnyUGfYiUVuZhNn6CXEt5Zd6j1WosmfHNYEZhiXecbPAQH36tUbKBXHPCxbCu+xXswiodlRnBF xGD957wy81RspF2HXJzxXY9CWRgUy066aJsniwRpahwORj7IZUxhu975lX/uaF6Lj6ZMOunUBXYl 5t3OitwcRIVKOB2875CnlH6Oi8bxpkq1x5fEpXwf22iv+qZwoPGBgC233KK95Ozntssv/2F779/o uTctgErWHa1A8AcW20adHPMMnQBUX6tJj1ixMGDQXnvVz9oVP7q+rdBdgQ0br2rvuOzr7UfX3tz2 6CclY65f037y46vbr/T2JuQfX3lNu/Daq9pNq+7hel/zepDxRbjgctI9QW/fPmH/O7XPf/ZL7eLL f9Buun2Ldg8uZStrcEqFhdSN113bfnjFT3XVvkwPnG9o73/nj9tlWrzxnN1Y7NMmYsXV/nmfvEBv oz6ynXzSse01r32rr5orpiUHVtHIaY75o1S/pr0niPm5kT/XzdxfTJW4ZXu+CFK4dQIqHQhEV3po QBEIk5TvIIMFJyAqXiT5SAPffiensZ0N7rCmvxn41CvH4hMGGcSTUAQsrMM6uaR9fM3JKYLlE+3Q MRI/eGWMcWGx//489/a09ta3vrddeunl/UMl8HTlCAvIX08jO7nIYFIkp9Zr8QcuepbqYuL6n5MP V+kb+/m09MZ25Q8ub1/74Q3tscpTw+hkt37Nre0nV/6sreZ6TcH4yU9+1q7Xc5ib7/670Yhaq99M ulhUy3admR5z8sntWUc/oP3r+f/RLvnaFe0Xt2xsh9wjd33KUsQot/76hvZj/fLHEl2gMGiu/sCH 2/e/Kd82XzF5RYzZiDk9jCy6au655ZZb/Zzmq155evukLqD4rka+L46S/kl/0+djnXbnJ0ERXq7g I1P5AQ9llOVt7DzaIRuQxSZjlFcW8ctinNJfHNGPzoU6aKeNdwPufe9d2itfcUb77GcvbB/80D9N d96cJ1OUEg9sKVlfqNi+GTufAo2do22wIcmHV9bqaOfd79323XPXtqXC+NMrfti+ffmP261ruPGv vNA8yQeqmBvJLWWV88qK9ZJQEOvcTSz6uEf3GIt5nMQ24rFUXyi+gy4AbtYFwxo91EnfcwWGXOIl XZrbqNh26+ZI2LoQXqM5eOc99mj73vdebYtlyl/5cZn8uGWt7mT7Tp0+BEZfaoyOC7uy06FDkQv7 PBOMNr5qB8/Hgl3pz9k3+yk+4hSfgcFG7TSu8zu7E8n0eoG/VNj3avi/2Geeip6J3VXNB31f8c9z 7YlrN20S8eNNUwziQ/yYfc88JRGRRvniY29fxFI0FIy0qntsDSAcJjfgiI05muVTxx4MyPqEcek8 EQ09zB21aIPfc0nnqfrYPtpJew9Z7Hen0CNgY5MSzbqhzX1vOTMEAEx06EMM84QGUxKHI45rn4MK Uqh5HWnI4kwwFikXO4Zzx0kXMyoKDjHqjgfnt8hieJUIqyaH+wA0bseBrfRzjD0UaEUvnW7oL6Mf ow/QM7nN3CNvHS/ec6XGpy35ncU/es5L/KwXk1Tx2RZlvx8Ul4nX3XBd22zbe7R977VT++F//kCz 28p24CEHta10Dtyw7iY9X6SJ7tZr27v/6m9116u1B//e0e3FpxzSztdJht7hLaBfXXdjW7N+ebv2 u19tf/WpS0Rc0Z78nBe0Q/dd3v7m/Cvakh2e3B64247tii/ph8lXbNEOPvShbcvNNMVudfd22AH3 aR9900vb//qnr7dlq7ZqL3/oI1u7eZ0eIs9Kf70+RHG7PqF69TU3tn3vtrqd9+GPtGtuWtvu9v8x 9h6AehTV//dJ770HSAKE0DtI71UBFaQLggqC9N47IiiCooIgVbpSIiU06RAILYEQCKSQSnrvPe/3 c86eZ/dewu//zr3P7s6Z0+fs7Ozs7OwG29jN151s4z4eGBeewk1Vv6fnsN3tV4UtWDjfL5RXX3WO d+aGDfvaL5QZ+PiHVPUXeb/Do67datUrlR+oFHsd+8EaNtF5FQE0Se+0cWI6CTHsHSVkhXx08jks UHHMiQWy6wEwT2xnXJzcyTMUFCoEbGpxmD5yYG6EUjFHUMlDTqFnopV7fIoq0alJv1Ee8a4DnWgh mYvGKuukT5pdftmZ9uab79tTT7/oS2mU/FLviKkFk2fYyiZtbPvt1rOPnvlYTBvZQbv+wDq1baq3 pVfYFL2I0GXZHPvPvx6yuUtX27rb7GE3XHS4DX7zHWfJwr3TJs8Us+b2zaDXrP+HE6yh4uu3l1xs WzZbYC+PnWDt9IbzJj3a2duax9a8TUfbbbcdrOmqUQrfFrbzTlvb64/fY5f++XlbqakEp1y1lTVt sNzfUmU0ZZU6AMv1Furc+XM0ItjTXnj6GRs7Y5FerFjHbrrlQpsz9jOdLw2sKRfnImVMUR/+55VD HTfweWC8IT5kyJeaI3aMXXDh75KsqAOyZQ1lHYavqafwNd1DCPjygMdJVKDzyjpCD/8VLL0DJ9gK dRhI6Jap1DnqFfiaZDuVeCAj5YBLDLNcyO+uv9BGjRprt/31Po8b8Em4wHX3OHLVHV5/U9PZZZSl wGvydMyk/5XNWtvJZ51qxx28oy2ZN0ed9wbqRLW3cUMG6m3nO23UtEXWrFU722y9rurYjfWpIXSk a9NkxB5PwzttLSXmkWM4TsrPfdrG0jftuvezu++9zP7xu2ttwFujrLnWpuQmK/kjyX0sgK7b7hB2 nH+rm7ex084+3Y7+4Xa2WHYsK+wY/dFbdv2Nd9vo6YutSfMmWghZL59NnmxTZy2Uvt+tO38RQhyx Rd0+671BH2uybK6NmTjL5aVvkVraQFHWEfFSlDlIyupfVes8PV68PNoM+JB88WzirxKD8MQ+PJD8 weUY2VXYmuDi5rT+oqE6romTdPCoiHN/+CNsFFbCB4nL3ttYjHN9Il6ljeOmPuAF3+BBYZU2+YFD qsYMZflLWYnvyNq4HF2LUSNupuIYnVyvArHKH16khLF3PoWuXteCISvl0h57nHtnLWTEJUd44sWL L96R0z51zP0qD07R6A/ePgLHQY25qxObJEoQisXcplA64ewTN5WvlnGMC7w6pJS080x1iBA6UvJh /328Eq96Vwguv6rDkmfi5z75pgzgmarygQVP19x9VLGkpmvKSb7MMTnwwD3tsMN+aJdd/kctYPtt ZYQjJKWe5BrpLbhvPv/UXv5ool3w+yttkxffsWbdetteu21qNusbW71ktj3yyHN2y+Un2J0de+sC tcL2++FeNva959TxW6LP3TTx9atmjRpu/37lczvt2qttvR3ethUtu9kP999GHbM/2BefDbPn1HCd e+2VttFL71ibddYX/w1tybhheitipo0aP9MOPukka7bhDtZ7w41t52362MI5zWzv7f9nk6cvtB/v trf95rCZ9upjT9hBf71Cb5LeYAOHTrQd9tzD2i8caSMmzfHAq/qU4/xhZ/qJYyZMc6H87LPhdrI+ KH7BhdfXqT9wvi+ln2vlxFSRsqyqR1VuwhNGnpR5HRCElbqNxjDxYh8nZMpK+sQp67ZuTLsgbcCr 0vrJUDRsiVN/n7xrelYQsixA6F4cFXISTuzyCPv8c09WR26F/eWv97ouQY+uNKqB7W5QB2nOt4qp l4baSRdfZN03e91WNO1se2q+ZGObZ42WL7WnH+tv+/3pLPvnHR1tyDdzbPf99rSVYwbZ6JmLNNez ibVo2cImfvaxPT94il35lz/YNi++Z600V3P/XfrarZc8bUM+maWO28F23S3X2wuvfmBr6U3o3bbu bpM+G+GjM1+NnmKH/uRwu6JFb+vYu6/ttOPm1mr5TDtgl031Ms5UW3eXHe2MkybYc6+9aJMPvsbu uvcme/O9r2yT7Xewfh2X2n2jp/qoMVZRL9XkbW9UURXs5/nd9zxid9z+e9t1l+3ttdffU7w2ET1o ERv4B3+m76mXrBv3nZeCUzclfkKTJu/y4UkCrz4ucPDrl2W+/sUEfBJwlvG54vKzfaTr+t/d5kut ML+P+s4bVPj4haW4KAV1bFMGOWh8Xhh34PJH2hCYsV2hm71dD/2pnfTTne3fd99hDz71ri3UqNuW O+3sTyUuOGWqnXb1vdZ2nd319vNJdv1ZZ9urQ/V0gbfzJQCdGdHCl9RbU03XCLXCP4yugIPsRrox rv+iAtcGblaY9+SPvcSjWctmeqwe1zofQVZ9+iVTLB1L/JjaQ13EC6h6A1sLre9zzBF2wiHb2SO3 /90e0Ytii5c3tK132UV2nGbn/mqy5gs/Zk3bah7nrdfZa7f+0e56VlNlJItTyfWUHmiNjtgi7vJF Y/vFGedZr9lv2slXP66blcBHb//coLDoePGWK/4mpV8iV2xVSLnj+HH4rooDOX7ydkk2wofk2+KY fP16TDzg/DKfe+ch+jyvkp7y/CUO+SwHRqqfr/KlPGlq/AsYZaT69MDiRpYnS6WdwDNBU9UNvExV +dXjpAEvZWY5+4S5f8U/8aplwGp2FDjV8uRXpeU4U8oAr4rbqE+fTa4RRJ1CQlmVoWPya0pBHCVV RnnMHiXZk6pwhwHXnYkXy87Eq4+b+TSYPCn4hXrhppJHfVm0tdwdgJcVkPzq4KIHoSylEo6sTEmb e06//IOMlHTseTy13nq97Pc3XGxPPPG8PfHkgNojmBouNGQkG/38EcrKJTb4w49t+qJVtk7vtWzB 1LF2v76T+sFno2zct9NszPCv7POvv7VuPXpa147q/AwYYHc9/LIt0byf+bNn2ojhI2yS3uL74tPP bNyMJdar99rWfOU8+/d9D1r/Vz+1Fq1b2eTxY2zs1HnWe721bPa4UTbk69m2Ya829mz/F+zdQcOt afsO1kdz7cZ9Mdjuuf8Zm7d0lU0d+419OHScdenY0VbMm6VO1/s2cPAIa9Guk/Veq4ON+Pg9++vt j9nkecv9M2fED36oH3DpIzdbjZRQfBTl20lTjM8Y8abSaP2yIQY/6wuapF8TjPJMgSd8HKtzEzls gJNyn3zq83X9C7w8J8CBHQkuPKQNAcEvY8Ml6NEiPAI/ZDphsUl5VRjnM+qhU42XAMBC39A/jktK 8BMGLrQBK3HK8oYem0cdeYjfWFx62R/1CamJujDG48GUVeJLJueqnPj5x0Ns3MyFto5Gh23BNPuX 4vL9j4fbGD0GnTR+rH2oGG3buZut062Vffb2G/a3fz6lFw5W2fyZ0+2rL0foBmCmDflwiM1Y3MD6 rLuWrZ4/1e7/xwP2mh6Jtmrd3MaOGmFT5i2zdTWHc/ywz22UBux6tV1uzw5424aqg7+8YSvr06er TR87wu655z/27dzlNmfKBPtEb7a16tTFmq5YYAN1M/DOe0M0cN3G1u3dzSaP/EKjTA/ayEnz/aKd dmVc4qH0GXsqFmtJ+HDKlBnWo3tX+6FulJinyeNHeCSfHGGp8qvVh/NTDAS7Gk3SVvk4THy5xINP 3FTxXCFt6sZFME5Y4iRf7KD9yyUuGGk6+6xf2S67bGcXXvQ7f3zNY2G3G6sLu8Km4J06wDuPweeY zlvIDskJx4PpF54E/OzoI22tJuPsvCvusUVqp1iJfPTwr61h1962z2597eXnBlrH9Ta1g/fe3IZ9 /IlNnr3I16WkA9OuS1fbZtvNbYuNelmDFUtsxqz5MZIkNiv0VKBbz7Vtq202tU36rqOJ3Stszpz5 8l/UIKPkjZu1so0339i22XoDa65RiyUrmtlPDt3DPnrzTZs6r4G1b93YFquTibX4qoFubDp16WIt 9MRjMQuiA9Nv+apmdtTPj7JOy0fahdfcb0s0+saI3sjPtdzO2hvYXjv0thf7v6kb4l5apH0vmzZ8 uI2aNMPX8mQ6Qbeea0nPzWxjtbkNVi23efMWauSvobVp39n2PWBva79imn34+ThfB5E1EJtptG/z LTexbbbqZ60ardIb1XMVG4VdXKOxEYcrEW/Ug/vcGzwHO5yjKm60RxFjlOErOq3JCxgpaRKe+5CD pyJV4Qljj07ZKWL6xcEH7WtjxvAW6nDdPMSSJVV8+GQcc5x86++Txi1fA03SJh34Ccvj5IE8fpkS rwqr0iRP9omTdiZt4iTPpP//Uw6vakqaNfGoL6fB7nv8THUptxRzZYhar9yKgfWZpxHQ5XEKY/99 vd/EiYurrq5UtjdZlERKBau8k18VJi1FUFY4eiQtx1p+xTG8Ea1UOFIywLjQ+vQFwbLxpBSlYS0A AEAASURBVJyUvMDNEwU4+J7W4CfkMrL0lz9f7W96nX/Bdd7Y5Dp7BaV3ltNs7vTSLhoeFtZtpEnY zIWjCpIn1rDYqa6q0kePwjRvhEYYG5bp8SbzhpprbpmKdKFe4Z/XYh4QjR1z0zr228ru/utF9vxd t9vTb3xubbr2tMuvv9SWfPqSnX/Do7ZKJxd3rOjK/D3uZNyP0oXLS+rLiwwrVyzzx7jczbLgakPh NPZHVBK+hoR9/LgbJYVvw5HQX3rJ6b4W1SmnXuoLxWZAp1/WwLLgEbxiBCH4JY3XE/6TQ2ioSNhD CvmRz2PgXs+qg0pbCFgEwpX+fggPnSt+jgiU8uANnT9+Fdw/Kl7QOKE2jlMP5jzhL9rklfhV3RIW exogfFqFxmelqL+0syxl/tMyX3yX2Lzjjgft8X8/p1jlzcNM8IuGLeizAy2YfLJU66kxyX+V5mnq kiEZukhqrhnLL7DIr84S2Q69fFDEDC/W8NYubyYziZ1FfkM/jYzoIqaIs9477G133fBru+OGm+2t IWOs23ob2vXXn2+f9b/fbrj7ZY1O64UEXdBp/CN+oj75JBH2+0iK9kxPIG6JYXCR10ArvOdK6d/1 SdpdNx4SiiymP9x/35984e1HHs35YtHm1a+bzKecal0CIx8w6jru+hOGzGyTqrCkWxNPaIjXpCNP chrtiUV4LVGbcaQ67Wee+Uu79LKb7J13PvA2KnHZk0JuxGHm8W12yBxJm9SFPWXUt6A126gTeC1e tNJOvORSO/nAdey806+yQcMmeSwoPPViVS9bt0tzm7yos/35T6fb2h1b27y5c+3l+/9ptzz6hm17 wMF26XknWNuGWixc61O2a9HAnrj7brvnqYGai9bYDjz853b2yQfaikXzbfnqxtapXTN79l/32l8f ekNLGelRcde+dtl159oOG3ay6TPn6SsyrW3016Ot72br2+8vvc5673GsHbThIjvplD/aAvFj7nH7 XlvYA/ddZk/fepPd8/wQj3UsU2jbKVdfZcfu0tHOPu0aGzxiCgHucd+1dx/r3aGpjZ48367+47W2 bd9utmzhAvv0nQF2/vWP28HH/srO+NV+tnzBPH9ju2ObJtb/nrvsz498ZGdffYkdtu/meilombH2 4SXn/c4Wdt3Sbrj+DOvXrbnNWbDMOskvbzz7lJZtetqWcLnEuUXCxySvbx2vaV+g+g78jJVsX/Pa lnhVHsAiJkIO50PS1cdL+qShnB8343fdeZO99tq79uBDT9UGMqq6g5d0wDNf5ZnHzlcZ9EhPAEu9 0r7kR1nanTKTV/39msqTX5YlL5cvXfEJMH6pdx6n7PpyyGfZ/wu3igduXJdDXvJt1Ku3RuCKjpDM DXihFET1f0mY+xBCDlyUKyu+Pi15xxc2F0CXVpFBmUpgVgu2Kg/g1TzH1YRjk78ro+L6OJmvsy/0 ggZ4lsE7dCqluMiq2MJe8OiMnH7aL2xL3UFddvkfbM7sebr7j4ncrpcTh07u60K/WmeJhkFBz8gH FyQuROxp8IFzTKOJnfCFDp2ZHBplsl+q8rgEFcFjgiyPGBbOnGZT56+wI4870n5yyN72owN2twWj P9NjtEdt5jK9jsxwvX5O43KSZyz54p1d8YNxA+kJPo/TkRvD/OGUtBM+6cv0Ye7LiwLxYHoxY7wd c/RPbdHCxb4eFR2FrIPkkfuyJuIoeZIDJ/NOrzxasfU/+a7Kx3FUDk3t2PEjCpMHPuVHgh91pyYK gQEr9jVQTU5QpMzYfxfmYS9wWe5stQnJlLsuCcaaorNUlgGrIRS8AkanhrlHf7jpUp/bdcc/HvR6 S/yUG3qEj6g/UsYYsUi9cXNRi8WCgT/CUpkiTnyF53DxEY+4yIevKKMDR9x4rCmG5kyeaAtZ1/DE I+2Qg/eyA/be2cZ9+Lr9/d5nbJHm2xFb0KFH0CvmoHd9IsbgRYrYBbeUXfoNX5b1FTaHrYnDPu1m P3v2HMlsYscc8xN7XY9RFyxY7PonXjVukI/Z5a9oiyo8PXKUr8qGLhPw5Jl7VKYzxiUL3tgQf3Xb yOThvkCG6mOZRpJ+oK9rXH75mfYP1fmLL77pnTfkOCfw8pcxVpRFeXClDms0AkGNfzJuAzfqgtKA r7CZGhXbac997Mif7G0brLe29ezaxlZIp2nffmujxk2z5Qun25fjltgBu29kt99wvT2q6R9t19rM bv3TBTbz01ftgotusQcef8nmNu1mp558mI36aKDNbNLb/n7raTaw/yN2wWV/tsf+87It7bCu/fzH O9v7z79sk1Y0tbOuvtT2Xq+xXXvpDXaLng58NHySHfDTH1knjbq9/b+XbOjkBnb8UfvaV4PetVHq fLGEyN5HHmX7bNzG7vj7IzZTczlpN91mje7NmLNAC6DvLzv2tPXXXce6d27tn0WcLjtGj9cc0RVL 7fNho20Xtalv3Hu33Xz3C1o6Zxu77caTNX/zAbvoqr/Zv5/4n61Sx/Log35g7z3/gr2pEey+W+9o K8a8ZedddbfNbtDerr75Klt79SR90u46u/P+p+3rSUvshFOP0+oDI+zDL79VLMZLcBmj4feyLmsx Q8EaUrS74BPn2qquk4Y9qRYPlThIeO6dBlz46Cei8FWFHlz0PPjgYgROI5a0E9WUshKGyNTHfZ8F 2qfNNTgyC3jqDnqtvHJMebYRWc4+f1W6aqcty5MGvNSDY1KWVeEJy3Ly9e3KfBUHvPq0lGei3SRB izxwfQ6cQ52YwlKpqjGOU9mkUjgm7yhFKaYVpO85zNGMCJlAgl/wIl9eUL+HxXfAoU9xZ+uNC9zD IT7xvKIYuJl4vODOKF6OwDnQoQMJ3MSnLHX3RlUoOXLHKMH++7O22Q/1QfA/2YRx3+qtPC3XkewK Xs7feaavKVCAMeLF6A9C/WLIQaSwrdSnBmckiAwNbAEMXPEpbKQEXZtohOz1/k/bh6+/Zp07tbPl ixba9BlzWK3P7ybD53HRQcekhy02wiNTtQxYNZ/HxE4e5z4CMO7OuCAnfMKEyfb448/acccdaq+/ oUZ6pubTqQFN3u53r5e6shyhsnHfKu98ZT/eYRVsfFBR3ylSNpmkY08ssKfcbUZu4UtwgZEl0qo8 wSeEGFGmLrAv+MKrHClxvmISbB3T+cETmCg9z1HqFeIDnrDEizLHFh386ibwabjP0ULSpD//5R7f hx5+qA36BK3bUTGslJe4oVfQR8MUOHFRSKwsz3x1n51P7xgoTvo/oMep/ftb545tbZHeEpyuG59V 8hmje/Cuq6s4ua/kaa8L/FKOLnCcdVjVHbgTVhUBUviMPfhJw55lVfrr6wwHHbSP1lL8qd3657tr HTjKkxaW5XE4r1oePNGTmA4ZASvpyEf7F+U1ftjof6JkRKzQl3aodlzRJeXSeWMqxlV6Sejll9/0 qRzZAUjeuUd/50V7otgELpauK+I49os/cnB+kQIP/DhXE46NdHwnfTHEzjvrSvuRHkPvsdt29oPd d7czWzbV40ctGn3Hw/b2JyP1iFCPFCV33qzZehFlie134t7WyWbaFbc9ZpP0qLyphtL/+/Ajtuue 29sBO29un/YfawMef9IeVgd/wYrG1kafaB45arwt22ddjdauts7d1tVjzXXtidtutFf0pRrmon32 7ht2273r258u+ImPrH394UD7asbR9sM9d7DXPn3KGmv+2n760sfwgQNs5PRF0p3ldOK8aayb4fFD P9L5c6UddOBetvuu26pTuqe1atlYbzh/otHsh22QppjMnjPLR91nzZtrc/VJuDZ6KvLsY/+xB+5/ 3hbqMWzrFqvsq5HjbfkuPaypvjIyc9p8W6jPwS1TOzx1pqay7LGP7bheS7vhvHts2NhZ1kovRbz9 wvP23O472l4/2s3ue36w+Jcxl77POKpUi9dflkedUGdUaP6o07r1GGUlrKxLjqCL8wy+/gMiMCUk YPUToARnOfgZt8BS/8TLjonDCyD4JV4pp0qP7DzvU1bqUx8v4bmvlsNjTanEwX78V9YF+FX9OE4+ VXhVr+SXsMzDK4+zDJig+oXMgNNO6MlDKFMqlI2MkxQO5DgVTqbg0RAHWzCismBaJjKl89Oo5AFe GohySUt5wqvHJd+6R8kvHivVUaAO4pp4lbD6DoqLAuXJH2Z5jGsIYNJynazMe2O9t8cff87f7muu xl/IwhESuO4pQMiJxLH7tZoHt8BJH+A3Gjk6yunDLPO3I51P0Xl12lJGzamSzwVpmT4qP2HcQpdI g849UfL6vg67h7T4ooPbIvZulsstlK/s0i5AYQt20qEr6RKdckYM+//3RS14vJdfKFlUNjtwiZf7 qm/yOMqojLC7Ljwp6+6rOIwqlTchFbwMSMxGeZqr3NW7GFNO3QSf0KPCqVanVbkeE0INMQVjESVO 9cIYdROd3qwv9omLLFdRCmY5MG4sjjryx/5m59nnXGOzdKFswjIbRWMADkatiRbe2REPOeHj4I++ oXN9PZyjaFOPqo5JSzvpcB00Ee6i+QtsnDpv3jHRTSENE7jhU+TWT6lzTBRnxMn9WUEr5YKLrpFq ern+CQ3/ZZWDz2/+/Pm+2PRFF56qtfBe1ye3vvF4hYry5FVyKY9cf8WJzlwBv2tD1bY8r6FO2dDz R1n1YhkS0K84qqcHj3Zat25pV115jk2cONn+fvu/xKP0AXxDhksL1TBc/IAHY9qbKA87A81lFvC6 MVTQup2qXBHzEsL4EV/bvWNG24P3PKjOVQ/bctut7JcnHWPXXXem/faki21uUQdhf2PN721jDZu1 tfP0spV68G4gyx2t06mlTe/VXSO2L9qAQR3txAsusPV7d9djxvbWrl07a7hwqj/Satp+bWulOZHD 9Gm0hmrvuPg3a9HcRn38uS1e9SP5oZEtmjnZXn5ziP1m3z2s573/tQYbbWlb925mt/x1kB7JNrLm 8pU7A+mygxHssV99Zf8cPcoeuPtf1rl7T9tm+63tl1rw+fpr2mi1gStsWjEAgB10XqeN/dxe/KSl naS3rdfv3bWm5+o53+omLwYrwtWqW/216tweqB17+ml2mB4bowHTADqv3cuaL1hp7aT3LBFkZybj zusLbVUWcYbSqB3xBh9n5rDIJI3nUEKU2dYkHWWZsox8xg5++b8SeHVQvgc9dcl2k3YhU3b0Ml/d r0nPhCVP7KoZXyGmnF/ig4Mb3BXCQ++65UFcnqPQ1p1alfjJkz2wTNDWh2VZFa8K+y685Jc6Ns4G mjBqqF45IwjfmZemMu6GMdRHGKSY52Souwivc1ypMd04yQApLcToWkR5GprK5R7FK/amHQ5LthFI BEaO7pSVUDonjHS+OFF6hC4EeFRMjXlxEHpTGintyArLfOruWCiLbRpBaK5vR15y8WmarDnRG/sm ekV9tUei5IMs1iX3kAFkuT4Ir3Hl+E4pGOLJZGnmCiEL+Xy1gUQDTAcVmF/MC/krNH+DZUVYVDeX v6hJkP2rNXGYi7h3biWisXSjwxQnTGCmXSuER+NPfYFTe/wrI3hTtoNud+fMmauGOYKTD5g3aNRE I43RwYQb6zotXxF1xOfC/HFoiKnXGQggvsW22Rp1uf/+/+jxwSl+oRw1amztkYHXZcFjjXVRlFXx cA9DYqs1gdmT8v5SSwYTxe4fbImOUSBGjKQcHuHlMf1XPzfEC/YNVPf+yjf0EEsoI5pe3867Lq+g ckRQa7HhwYFekGoHA9efQyUvEiBiwBFUXjZCYbdr4LpGfrXPw+Rx/ql6DHPXXY/o8fQX6sQ3g6PT wxvclJn55Xq7lDltzKl0OSpg/mXGJY9CmrD6sysePKAlcdFZphh2neU7RjAY/c3k/CQz1v8KPCzi 5oJHpGEdNscRc0GXabK5tzvSifl0TdTBI+8YmufWuVNrW6C4XO5VrQ/d6yaFxbCZowkfiXN5SzUq RWosmpzEn/K8QBUAbiZoid/XXx9oP/nx/vbrXx3tUyPSbrexSiDC6sXObZUAoiPtgT2d1CIqw7/K 18rr8xNtrCkonFSMvRiFbRWF4V347dxzTvLPpJ1+xuXG2nacz5kSx5kAFIsY3Sn1z3pKmprNKU56 ckkoxDlayVftc7MWdvxJJ9iy4YOs/9vDNHq4Uo9Ox9tzemFl7KzVdt+Nx1u/vt3t/Vk1T2jUlTXR NN1j9iR77jktj6T48Qpxw1+1yd98bVvu9xP7wxW/0pvNH9lLA/6nBaj1FKHV+nb+r3dxX/I0vbg6 larLcw3EN76moFjTywEDX9LXPX52ge245YbWcqedbNGkr23g5+Plp3hMBbG3kVry5oTf/NLmf/aW PTdQ357W29vTJo6z/iO/0g1HQ7vrmsP1eLibTRpb2CGHLFu61HY59Gi78eLjbOzgQfbK8//THL85 1qDthnbW8dspHsp6wp3ksXvFogX25oDXbMoStbeFn4nyRbOn2yK1MdF5wyXEC/LCUm995CM6hvFP 3UQZc3GzXtYUr2ISfJxntMXgQRNyyqgDlnAvK3QUMLiIRyauU+CQko/rnwjah17IwQMlPtc32mqu 2yR8wF+wC2D5ODH7AqlzuXfawo48Zl9fL/TIubmYEvo6ha5ZqgvdSISuwOBfDqQEr2q7gY8Cjy06 V/PpP8qSZ+4DP9qC9Fnso66/2x+hLeMkIbnQkBxKBbi2Lcq500UgRhAiXkXqWAD3joUIHFpozbA/ ZdW0Jv4JC95l8DDqE0agQFRiVHjyZJ+Bl4EdjguZlMlGoTkH6ZWy0rkl/6qWdY/BSTpKOMbeZer0 /Pa3v7C11+5pNJa8hcqjEEYnwxMIducV8jWBWzapn2M//vmxtnrcx/bie6P1GjlfNdBr9rvvZT/c bUs1Mqvt608+sude+sCW6u7LT0g6CoUedLSW6sK29V4H2NZdl9tjT71lq9WRSq+gI41m84497NhD D7B1u7e1xXNn2IAnXrSvJs/WW1rqxBEX0gqfN2jYxA7WSM02m/S2VVp09b1XX7U3PxnjF9XlkrPF XofYOYf1s/POvclmrODlhQZ22C+Os8Uj37dXPhqvxYX1lqPeUdhC+h+8xza6i11hQ957z1587RNb Jr25Aahe3JCM/zP+ePnj9Tfesx8XF8rLr/gjGK6f+7EwzHWt1AV5UrVuyAP2GEVIkZI29wnHByEr IFmuaHLflHjIUU62cLMj5b0IkMcDfqQ59roP20K90BHkUKfQSWBkuO4q8OqoXdodm00hBv+VMChD 7+RJIxONGfrT8emsu/rLLj1D3zn9xJ586gXvJMEj6wE8fqSgUTyr873bQT+1nisn2X9fGaILn976 U4dnF31sfq/t+sm05Tbk7Xfs5XeG6ssMvMlY2CIerMnWqU9fO1RzLNdWp4r5bc8/85LW+1qg+o+p FuDTeWu/1rr2s5/uaz06tLDZUyfaM0+8ZBPmLJat8qC3F/KHYryJLqCHHXuw3uLrrjlTc+y1AS/Z R19O9rjkhYp1tt/Vbjxrf02Uv9amauJ3A603d8Jvj7XR77xog0bM8puj5XqpZ9MfbG8H7buztdbX Hb4a8qGfV0yQdzcW9uMH9MMX7MO2uKm6597H7NZbrrQddtjK3nvvE38BpHBdzQfpy+QBv1qSKM5O edzxOZ9JVZoabgHn3Mh6oSzziRf6ZY596Hr8cYfZ3nvvYudfcL1NmjTN6x0+/Kj7POdQoWpDfb3r 86/lcVuoXxVe+kHtGyNZ2+2+n/Xdtp0NGDjUFvOClNetFmqmoZMfVvo+GK1UvKobaZNnzbOWLXrY FwPfsM80B6xpY9WDvjpz8eVnWLO506z99lvZiqmf29nn/d5m6C355cuW2k7H9vVlRrjWLJ45wRbq E4Jbb9xPn2Z7U59+a64lU5bZJrtsZc3VSaIz3ESPSCeP+kIdtumKrcNsde9NbJBempmpT8E1Uhta S8Jd1aCp7bT3AdZ106Y24L0v9bJYLLwrrXQjW5yx2meHAx+vWNHIdtpZa8aN/8TOOu8mm6e2nk7d HiduIj3VdkLnDuQaEotiz9c3ohvre9NjRn9hz7z7jTVXR3LZqiZ28jmn2aZrN7O3Bw0TCTc40Vbl OezeqzUv1HFojxWOWYsz4qdaaRwHctYrqP6URSXwr1/H4OUP2pQVEgWpADLesix4cW6DF1D2Ibto Ax0sGehZ4BSgLAlC36buaWnyCtem7uyRk7Ffn3Hdm2JsTrviXGms+OM6H/6uKoUSgRt+pSz8kzJC JjBX+Dubqo9L34EP3/BJ+KduBzIYBVO1IyitjH4ejoWwIAxUsQuvVANA+NxJch3LTl2pIcIhicpI ZSCPpRlKzDwCJ42oynYeQqLxQzUqgwQ8+EYeuOMiE+Fg+96Ra/GQZSEP2tS18IOjJw/KS1lRMfCO xNue+2jS9eGH/8huvfWfNm7sRL/TTd3SJnyUyjfUiFWHDh1s2x33sjNOPtK27tvVVipAGP3afM8f 2c1Xn2btbb59O2uZvjl5rv322D10YSyXMCCYsLVtu7a24RZb2hnnnGC777CRNfDGJHTDbC4VDVp2 skuuv8yO2XdTLZQ5wXputqPd/OcLrVfnFhqVY5Qv7NCAnx1z+hl20amH2DxddFc272ZX3XCF7bft 2r5KOqOE2+66vZYUGW0zFjWyjp062Q922U/rbx1pW/Tp5C9vMOdm+wMPlf6/tRZat27SzBV29pX6 ZuYRu7ptCOPCEf4Pn6JlmY9vNN5732O6SG7tP0YOkwY8fpnPOCDPCZTluceyEpegiROCTk6m4FdM ehfQ79DFuOSBI/Fkoa8OVKoNjpPM1F84XBjAAyPjMnTk5AfuG+cd8Bq20wU1sqvyxQ2++lHvUfeu jctBPucF/Kp2uTSd12ee8Wv3AfPeQqfQgWP0DN9FnXAB6tBei6puv72dc9Zxtr0+mbZSI2mMtu5x 2LH2u4t/YQ3mz7DZS5vZBddeakcfsKUunhrRwj/I18hEm1797JZbrrI9N+1mI0dPtE333F9vGV5g ffSWYI4isZREi8697Iabr7T9t9ai0t98a5vv8UP7041nWIfmwQtfub0Nm9lpl15ipxy5q2JvjLXs vqH9/uYrbLu+7fW2oTqWK7Ue11bSY8o4m6f1dDp16mx77HeInXLCodavRxvx0MVUNmy26752yw3n Wdcmi22MJq0fd/a5duEv9/HOaFQO8YMp4Z+Mm/BjTD349NMv7M03B2lx32Otpda2Cx+CESliKS7+ ZRm1qj9nK9uQoVit+UKkKTP5sE9Y8sl8FYcyfpTlj9H7XXWennzyMXbbbffZ4MGfe0cTe0jECkcZ t1W+9Y8LV4g3lOEfjmpJ/leoensOrMQTrmxcvXCe/e/l163zJrvZNReeqA64PvPXpaNtvevudvm5 h9v8Kd/Yl6PUudQcjkbadF2rp15yaGvvvvyKzWzQw67VlzB22np9673+enbGBWfZz/bdxubMna0X ChZa6669bPsdNrNe66xtBx51rF3725/4eoN91u9l86eNt5ffHW0/+81JdtxPdrEundrbnoccZued cICrTpzzZvqqpfPspVcG2nrb7GjrtVpiL779idao1kti7s+wkukpK+fPsldeect6brWvXXPB8bbh unps26mDbbfn3nbpGYfa7PEjbPg36nzppn21vuvWTUuRrNWtnUbc5lvbnuvaD7bfxNaRngcde5xd cfKPXM/efXpq2gDtwmpr2aGj9erVwyZ+OcjeH7PYLrriPDt4ty2s5zrr2M818nfq8fvbstlzvbOb 9Rba5VYV5Odz5rUXqH57xPkeyStUh2XsRCxRh9EWRDwV2F6xQZtxVjCq7b4bO8RL/ErVyJeqUp7t Ngq7GLSCAHHg8ufqCtcRSr6J77YLHzSVulwUC7lF26RMnNMw5lemPI+Cj8qK4tAfPuGnsn0NGa5n IQ9ZZWcsGKT9rlWhbAkL+YCDD/mQo5rTcfjGoWIe/LEwznngHqfaF6+FqBBmyQQKJQQiwINeeRpV YJlwrpcJJ+GJk3kMYyoDVP6IVkHL449MKSPxS4OErxPNk9DzQkWrkTRZWKoUZZSjhyedhGrHRYMO 0ZPlxIFjOq2UTeVAxabU0SFeEOW4h8ZyXb2RdMEFp9qTTwywN/WWWnONIpWNc6G7dthEroFGFJp1 6WMXXHqqbbhOJ2uhpxpL6UhR2rClHX3MQTZ64DN2xfX3aYJuQxs/Z4VddMRB9uRL79uE2frcjD8e 4HFHUzvhzFNt183XU2PSwoZ9rgup7KymFeK7uRY53VVvVl1+6jX2+pBvreNLH9o/7vmD/ezALfSx +0HxiFR3gG3X2dgO++H29ogm/v79qQ81OtfWVv7x93bkYfvZmx/caava99Er+d3s1b98Yo17rG8X X3mq9V2rozXTKOFSPbfCNY3b9LCTTzzEPnj0brvktmc0atjEpuiNsL03XN/aNHrb9GKXfBN1Ej7G L/zKmOKx1uDBX9jbb3+gC+XR9umnX6pzyJImhQ8LQnycJzQ2x4Rc6r48Tl9QtwyBczHP2CSukF2N I0JC5IpNlTnPAHBOeNIOulj2pQCBovjGLrBCp7JM2igDV/B8W+haxCb6FvI81IkTLjCQKbk9vifu gk+cH7IfuH7ewBVlaQ+d6SMOP8j23HMnO/e862yG1gfEt5lKXcInaNGkSTt9z/Rc20IXqM4tG9nw xXTONJFfox8/P3pfe+fJ++3aPz8r+5vb7JUX21HHHmTPvjNMC5KiM3FgtodGKvo0m2EnXnSjfaXJ 4C++/aXd/8/Lbdcte9ioN8b46vfLhb/7nntav3YL7LRzbrKh4+bZiwO/tHvuvMIO3mV9e+CVkW43 Ny09ttjRDtplPbvtkkvsP299rbUH37Sb7rzZjjhkDxt8a39r0Kqtbbvdhvbpa/dZ07U2t+uv/KX1 0FcmGqxa5iOJ+KqRRvB+ftJR9tWr/e3c6x6wBcsa6Lxabj/fqZ+mPryu9cnkbP3X2hrqw+uh9Dl+ Y/TjXw8+6csi7L/fHvbMsy/XRrbSr7mHPi4YtJnOXp0a9hFNEX/4rdJOuYyyjrMu4Vm37kNKdsoy prnZWXvtHr4kz/PPvyb9XqmjXzb4Hj9Fu0qcEQvsdVQcp17sQ7bTeLn0d1yw9dNxka3Rw4nHW83U GX/9iUesiz4lc/SPD7R/7HeQP4JnWZdJevx43W332MQ5ansajbRh4xfYby661LZ+/jG79Jb+dvVV t9v55xxtf/rr773tXr1sod35p1vtdS0c3mr6ANt+s1526XWXe9uwWk8LXn95gG264272m3NOsW/O vtruuu0Oa3vhb+zX551tJ6qdXrl8sb310su26dab2ML5i1UX8UTgi0Hv2fjFh5sNG2zDxmluqOau Zd1gB+dis6ar7aVH7reOelniiB8drJHoH/sUER7VThj+hV2nxbAnz1cbvmy+ffTRKH367UTrt82G eqP0Kdtk/dPtit9f5XquWrrAXnvhOdtq1z3t1LN/Y1+dfo19PGSI7XbcPvaPv21gV5x/td187a2q v5Pt8huv0lQW2riV9vK/7rP7+6utZt4q11/aea8z2hBqQTUQJ7R25AOaxwyyRIsWZeBjV8RXLFUV x9wgglPwKHhFLDN6Tk3zi/NDB3USPEJmxAgy8GXBpraHKPBiH3zFWQ1Z4IYM8NAdeXG9Dv6ha8Qm +kDvLwByXOiX/IMW3vCMfdCTC35+hO50EkDj3AgX1OgAZPuQvCJOoFZpgR/6BIxt3XOUdj3a/fB/ VZ94zA0f9ONaFTjpy4CnbHi7SOlbe6+3NDqQQSLVh1fzgRGKcIzC0XEqneNuLXxT+FeGJGXwXxNP MErHlHoEaRlE8AIvZKNLOCklYHTwwWSowynsq/zr4sEn8YNT6sgeG5n3xsTm8Xrb9L57H9ecG3pX srsQnPjBV1D01B3e8pkT7c/X3qAFeJva7/7+OzUasc5a4w5aCFUTdV975GNbpk8GtW6yygZ/MsQW HreL9ezU0cbPmibOnLy84bXCHrzjLvuXGu0jzr7Ytm1eq8ZCOh2Rhtaz7wY2W40ld4it27axhbMm 27ufT7At+m5kTVa/57isE7dWr27WYuVse2PwaH1QvLlG/BbboLcH2x7H9LWOrdWI9dvAujRZYJ+M 1SvzM5bbTVdeZysbtLE//P1an5O0Wh3Tbv3Wt55tVtjDQ6fYT48/0jo2XWkfv/CYDZg8S1HGKuNR c6FgeIktDRJei5MPFzawB/71hP3zrpts//1218sNL/koQrWuHL8aRPCpIJRxSD1GZ69smMvYCV0K WpSJ8KjxgpbktH5SEdcOchyO0ZubGDV/KggmVV2ABR8u6ooRKKquKKgKrr6DPuKGGi8EBkJNN5dV YZS6spTNFltspMf6x9s///moj8I0b868t2oKO2gospFZvXKh3f6HW3XhMDv16mutrUZFaNRa6pNU 3ZqttKff0ePU5i2thRYxHTRosB27z6Hq6LVUh2iJd1yZ6zZVi0Pfe/cn9u08jbJpRf2lehuPuVV+ pXfxemymz7uts35fG//ppzZm6kIt5NvSZn07Vt9OnWN9NuhnDV/SQq96ZMsI27p9e9qS2RPsvS8n Od6yhbPtg4HD7OhteqszqBuazn1s4+5N7DYtCDxv4iK78qKr9ZmubvbXf1yhmx0qZ7W17tjHNunW 1B556Es74DA9Gm7f2D775FU79SmdT2qsvS9DT0R+zrpNt1brkblRYzXC/rQ+PXbiiUfYuwM/8vmg MT+m6ts8pnOcfLMOaXM45kccUK5cUd+eqWyq8gEnfgXF64/2iFHBK7RcyKRJU+3Oux72mxbqFhp+ SORGg3Mn+Qa/0MW1kh5ZVtKin9od6bumFGWUVP2HnZKt9SIf/sdd9nL//9q6WgS6hWJqnhZ3/nrE OH1DdJV3MBfPnWJXX6DlM7q3s6l64aKx2tVhH72hFxw+tj5a/Na/Ozr+W31xZqHPp1w8fYxdfeHl 1qfPOtamWUObpO9DT521wDo+OkCL8K62mXpCsGrlBLvxsmvswV5rWec2zWyKcKZoIWDmf65S/DbR YzEeaTZr3cE6NVttj/5voC3UY05Nw6z52KsJq7imKcYf+NvtNuDJp2w9jZ4117zIOdOn2IiRE2yx AtU7Vzp/7rrpD/aaHvXP15JN06bMtmvOv8J6r7u22vLVNnECes63jo+/YC0arrLpesw69d8P2+iP 3rEGSxbYhGkrdBP0pV1y1qVaMHtta9+qqU2fNNG+1RduGqrzRpxSi2UtUGORss585BOQ6tsHPDyu la+hxgFcsu6x0+OD+iJOPB982QbvqFsV/x+pxAke2SEMHmWchLzsECXD+vm4MaGjmRjRiUodUv/4 vmqYSFn6IqkSFnySWehahbnOFOsAXXi0nYmyNfNNDGyKJ2MBgX/KcpYC49uE1b8GhD7JLdtkUaKO /6JTl9cSzmU6rtVlRESNgHBMoYby4cgQTHniEBvc1YWDAh9chIODAJKPlhQNiV/iVOaNJoU4XECB dPlz7wP1BI9MMtdHPoSJp1zHKEdGGFmIK0gqFyYVVHllw4Su0OoBmuvBRSY0Dp5+0XaVSp+4XaLj InnKb46zPjrRzjjjSn0jdJlOYjpiYiW2cCpeSooTCVnYw2RIWTp73nxdKJv7XAhpL5rV1qpDO2up i9K4ycwXIogaqsM13xYs0nwhnjOIEvlupzYL5y5UJ3ClPuuiuz/dHcK+aidO7tK9g03X/CItr6YB PiQ1sGlaJbxVnxZqRDQXo+DXvrW+sjB/thbf1N2pTmSm4s+ZN81WNNrMVmu+yIabb6FvSo6yKXr1 vWHDppo4PN8vfjxe44+nt131ncVmamjOufJ8fZlrqs1f2dSOO/4w+8cfb7Fn3+bbq3ReQsdoKPCW 8rIFn7hv5W8mso8ZM8H693/ZTjjhZzbwnQ9tnt4EdAOFqdmAOiau5JFg4Xxygx+yIXKfCcmXZymC jtolpa+inqUDBfgdL3lGMvBPIPusYpfJRVBwjx54oof+Iu6RDQH74kBl4POLkxzc7MhRFviJk7Tk YRZ9Cx0nYsEb7mF/MACft+XatWutF2pOtw8+GOLz3mKx3tQl9Ahd5Et1cvL8Rt8FcxfYEs1dIq7a yzYasTZ6XNRo1WIbP3WZOkXyjnSfM1MvDGj+WAfF/FgUls90H2KfvPOKfaiY4DNdnXttYGdfdLo1 nz/e3hs2ReWqN/mOl2G6dGurCeladkEXMeYc8THzaerob9S8haogdGU0oIPicvGsGXoMqrlw6tSt 1rzKGXOn6y3FXn6ebbj1xtZwzkQbOkWf9ZIOs2fPtxZt4tGpq4W89h21TmITO+6sc7REyWybvWS1 lqv5mT1229/tof99qgWvObeoG+oi2q6GOXvamZR1SWw++dQAO0DrfR2haRN33vWQfKiLq84lUvoy Y8rrVOZgEnUlCVSpUtjIkdez9skj9KA8cUM+eFUcaEng0x6ddeZxelTX0047/QpbpI4z7REJOm/r tG/AsBEwsSdqWGQ5RrPJSDsFtbfpIBXJ5eqYT1I5rwg3WaA/HUtLp4Pe41FySG6H/NJMnaU506bb h/riii9Rovghjpp5m8astwY2V5262dOn+XqWfMqqqdqKlfr6wtf6igcJf3r8+LFsUL1+M3K07CKG G8nWJvoazRy90UoTqxYCO9XmfjtmnE2QXqwZ2EQj0PhBWWvaopXttMeOWhvucGugNdZef19rlIkH 9ol56I6/lOUcoDao+1lTp6r9nOw4xIq/pKUP23vtK79cHbGhQ792neC3Sl9eGPmVXnxAL928N9UT mnmz5ugjdMV5qNHBUV+MiHU8pbMvI6OFfb/5ehQV5yNLjelVeqL+aZmjHtAVH5NipEp+UjYsUJ2H UlHXgea4ge9br2taPO+sYCz/7JWSd9UnEddevIYNfguw66m5gskLaPU4sMq2J8s8Zgq7gIUqwZdj +JcDNKWeaR4d2Ex19Qca/EJG6BOdoqCItpRjyaNxT0+GEoU/Sv4BTh1L3lDCw/lI4RhZLOsq7coO GdjR7mAbdPACP2I1jkNfjjPlVIxoeZxJFIaAZFJ2hJKQPQ0JP8d12jimrCYEYfr5XUFRs3Uc7IHo KJDV6Gr0Do1NNlw6nRwQOqKHmm1k6OQhhUjsCId5w+UlscFBWbGuf6UM4pANfeClLiEjynl0yqOp I/Ro889aF4rOBqNomUpdw6bUKXmhGzj+gWGJkiRAHCipcygdvVw4NA2cYJwQJX1IIg+8ErPu62AW smWsOMpn2BZkwVO8aXWQ7XxdvqQJz0NIeUaVKGusD4rvuH1f+2LwEJu7Uo2MBNLQuE4FT2Q20UWy ZfNWmjz+nObgXGan/uZy+8+7k+1EdeI6NpcemCl+1RRZdAv74EmisXziyecdHz/zGNXrywncUV4G vypPPwanDrxo8JCB3/GZfnAJTi6yzsbrpA4kMsE6+Gfx9+FmOfvQMWyL+Cgb4SpexmbCqAOvhwQU +/BFPaCyyDnj9F/qAtjE/qI5UCQ6aZko58fpGOdCnMtejlmFb4pqCFz3kqKo6jC/cosXvHFKJjFu oE78/pqXdM+d11m/VnPt8itus29mLvWXCbyhUj3QOPGuc/hOjNEJ3cSPP1LsVeZzO1FYQMnljACf yelbbbWFjf5cj3F1k4NPeGPY78gLDtjZRqvZt9Xk8EmD37PfnnypFtq+zO4c8Lkd/ZsjrVvrZjFC iDzk67emlGXE/WzNR3rwwaf9c2TrrttLndXyTt07DmKAXGgyZkurgnvyq+5TbqgQumR5xExg4IZq 4tHpwVqn7ic/2c9u+sPt/nk0zp9qSl2qMD9G0aIWwt+B4ed2oT+QtKca6/DMMvTL9iLhXlhsKCcm edOYN9uTP7VMhw2/Uh4LggcROEEjuDp8LiMDUyhBw6LSlImPeDAPDbWIbfDzLXjaNeIHPK7OLdt0 tRNOPsE27bLa/nrr3Xp5Zrne5it9Di12wCd9B4xOGTdEbgcd5HCM44BH+0LHGTlJS8cxYGEXevND UfD5lJ3Pnytk8ageGt62ptOKl12HOKjJwnffn9CbUvxb2uU6eh6e8BYSvvIbM/DCbpxV4rpgz2Nu tBt1ozBxkYif4ukVMkIHaOCZCTmA0s/Qp7+coqIzNlCeCZpMKTf3Ca+/r5Ynr7zZStzEYe/xJDlV WMIThh7gJTxvzpNf7MPmpGGPPWlTwrnuZ18FWPgLPbJfU/qg5BESVL9RWHVgFNV1cOJR5kJUITTB ipCaoKQLIZGTmd7oEkiEjIeNX5h4rq5qdXukdEFcpU2ZqVsGBqjAwtC6x5QlXQZIwtiTPJ60d1k4 jGNtmMQeAV9WHviZmFvE0P0F55+iEaKX/K3JZs216KNs4ALEHp9wYrpZMC4MCzPZ1tdXCPLhYo0e aADMunfQRUUXLS4MbfWGXptWjWzuMnrj8nf0gqQ3uqsRkx8zebkbxgiIAkL0szT83l4jMs31ODYf ZXXv2V7f+lusN0blP+Fh/fwFc211s5bWRHeIpNUaPmzTprM1WbHIWnRZxzbp0cw+/HiUd97CAsnH wiLDHIX5fNZGtO+9pBXrebtv5WIb9sln1kxrNLXUnCoa/9Q7AxPX+EWbBg/BStQJ69Mxb+tfDzxp h2ph5N5+oSxHvjxm4Cd7vd5E43UpWCMV+qiqKwdcPir412JGwsBhCNr/Cnp4oYjTCJb6FIcug/jg 8ojn4Ydcj23J5U8Qjy+P88KokAtfZ+kbYNVEtmxAww9+84OgKmFQ+xbZLl/xRmz++JB9bZ99drYb b7rdpk2b4Re3UkYpHHbluRE84BM6gRe4DXWxXThdy8ZozmXXNrpTxzbFTPsubTTaulpxqfEAjVD4 aLsMaKRHrGdccqFd8uv97H+aN3Sm5rh9Omq6X6RwCuG7So/OZk2db53bt1Y8cQ6rLjRK071He1ug ZWl4dOqNqx4zzVJcNm7T1i/O1LneEbQObbto4ugia96qvW23WQ/77KPP/C1ZjwW3ISx2G3VhmjdZ I3g6F976WN8ZXqL5lBoVGfTJcFvRpI0ez2nU3BviON+jnqJOS78lv/AJsfmyJrWPHz/JfnH8Ee6r pKPOvd61D38STupsKrBylCTrrLpPWcBoRDwO5SxGjuvEiXzjoyzaC8tvbDbbrJ+dffavtATPE3o7 drCmdmi6gvigbWic3GPvMlTOrTDnZGL5rTEXDJVRJyTU4cf5420a7ZoA8SuOObegqcQp5XXOcc8H M6ctbIS1ivwXdlZ8Dw4BU9gqLLD1i0THjc4OKWjLMm/DvSAoUE1qurWNNM9twayJdtavzraf//JS e1Fv0NNhQq9IYT8+yPPR7ZFshaS3ObQb2Jc/2vxwWWzdxoJf1l/y9706kdQjsZImEd84IvE45sdS KpQxPS2lcH7kSBRkVBg2guc/YEqwSL5e3/ATDBku221UXn/oSfUHnXN1vICU27QZHtVflU5S3Syu /AkP3PAZevGrnwJe8FUhOuaf41IpMsDhhXxkVRNySKlb/bKs07Aj6rFKA352xlLH2CMn4hN8/JV4 GX/JBzXxqntWuK6LcmEP/KEFKZ1Qd1/KDVoh1rGHcijg5x5OhqmAC0wu9Yhh5gGkfZgUCkGDU0ih XAhVxi+UqTyCa+oSnOAXAHgk7Xf4QFfBSx3ZwxHZVVgep23wC1wZLjULMmVETwPlnUrCJVLi5p7O U3N11ui8ffvtZLv3vsf9TopyH00rmGILJ1vaW5WbtuVJ4MajiIbXV8ybqnluy2z3fXbQnIvF6hCt sC223dZaLdUbnTM0h00fmu+iRS7pCoXycZKkxuxp8JtqDkn37p380cX4b0ZY9403tw16d7JFCxZZ 03Zr2c6b97LxX4+wFZoPwrce2+pNivHjJtuyFt1sty1721KtobVKjdzOe21rk0aPt65r97UmC6bq o+AsyeDSCwcVjpI6NKZTJky1WXoNfwO9WLFCr/Yv0RuCa220gfpxC7XciUZI0rEFmd8N67ha/9Qj /uTHne4r+og4C5H+4vjDPS68LrFTvOIkcQrHp+IIZ9yJKHzsd7qqazzFx6qpInI8snY3skOBoHQd 3Y9i4iNCIsj6dzo1vE5QXFyhDA1CZnXrOsCXuBKfkA2+C6zwDV1rI7LI8KSLrJQLPfCJuGsT+sQ+ 84wKb7bZhnb66b+wezUfc8iQL/xCHvokbtDDGpvhl/EYeMDi/A35kV80Y4JNXdbM9thra1u6cKHm LjXUG4DbaC7kJJuu9cXadtQ8onatfGL3Xocfbz/asoOdfvKF9qd7n7fJc/RxcnUsWTaheavW1kXL mjRavdTGfDPKNthuO+uuF3DmaTpBa62ev/36HeybEaOsgUZpunTtbO215uA3oyZai27r6wWarrrJ 0BwozePcaffNbezw0XrjdUPrpnmZ7w2drCV33JgwrPAvNmDP4hnjbOzsZbZp73V0Q6Jva7KkyIa9 tKSE1isUblqcvoSu9Esce9wVAQfe4sVLfL3HPffc0bbeejPvSHm96Pzzese5xBx7VIOpkufjsM4W eJY5CfXDn8dN2a7BCzgdFB57tdOb6HxH+GMtUvvY48/4yLXzAgsezifkYgNlmKGogpHzJ+cjDjo/ oh1WQZHq+AEwysG7hoL3xNP51YBOjawcQXZZnoc29Odm2f8KMi6GoZ908xR7lyAayqq/1MPbbT9P Ua/AgbPIoQ0NdQC7og7VQusGl5tajfYzaufyKvTik8n5u6aUI7XyK/BoX8J3WVclr1o7BI8CX62B jzamDN9TpkYSXyaee0Bg7yCrHDmkmp2C+c0jvL0kzIynXpjrNSNrxQk+TqxDXaDADzni6wUFfpEp VHWuHKfMQkydXcZJ0qBTdXAhkFPDIieclA8EsVxj/YUwZbyMmPBzSn0Ib79FozL/DrIsCLnBt75+ wbu+3mvGDY1iS32JqqYbeeQkv8Qln3YDq18eNLT7pUxFB+u2OW7I4dwr8+CmTckv91W5Li+qNF5i 4EKXjwLqE9QnRAAVRKLeHV8wjtdkEOWJl+XsgZEod5zCSZRVYYEV23BmnOhVOJqIzOnCMaUumU/8 Ulbg1+TBQIkTNjSOjiowHtUyn+HEE47xLy6cdfZV3ogzlO620CGoJPyDHE/iC86aUjPdLROYkqq/ Jfb0f563m674uf2xSUebNK+x/VCfUHntoTttzKRFdsTlF9nRvRfZKeferLkevBQQyYf1NcEaeSv1 OGXj3feyGy88wH7760tsuBaRfH/EgXblTVfY/17/1Pptu5N1XTrJbnrhY2vTe2P72+2X2BNXXWqP fPC1PfHCp3bS2edY937vWLOe69veW7S36y98wzb44Yk2bvgwmzJHc6AYoZMczOHH2m0+X0+PT+dO HGkP//cd3dlqGZF1NrEFDTvqJYRt7cW7/2azFilwNeG4mmp+lyExTyBKy/qRR5Ys9QvldddeYM8P 2EQT8of5YxVoCXa/CDi91CKPV1RWqxOvB+SWdeD1K5D7TxufA6Scnzz0nbygqml5jG5+URQOFydH B79SvXluJDj3JReOgGqrHfp4UkMFwG2gDCAIStX5Eg5wWJwHlHEhZyHpDz8cav9WDDXV/KLwL7Eb DRD1BTv2pPo80+/Y1URxzbp+otaXO2baf578n11x0i/t+k7r2ZJGHe3AA7azx/5wo81YqE90XXuF bT3/Uzvthkdt1712EM18O/L44+1YfQrIrVm1xP5z30PWbadD7bwj+9nxv7zKPn7rDRt56B72h1su t7cGjdJ6YbvZsnGf2//eHak5bF3s5jtvtPcfvcNu+/dge+798frw92W20cuDrNvGW9r2nZbYuf3f s833OcrmjRth0zTBk5cewlPYqPlVikvaTTpASxbMtEf//Ypdc8qx9vsOa9u05U30ybtd7Z0nHrAp +nQTH7yvJvzgI4DUReH/KgxcHu199NGnPs/w1786yr7QPCb8zcWH1iN8GcHEceSjsQYvEzqXuYCC izHss/FPGi+Dxnk00Ly3X7qtt+lNSEbdY1SK8xPZZUr5sKbekZq8Mj4Ksd/RJ7hAg7Z1EzTA0Sd1 RDW53X0IDH9wTrjKhJRUc27Q6hd6YKvy0DquDgregkZBAGp6p7wod+Q4ZCsezkeH3jFkX/ykCQjB H6XcCOoI3Mimb5JrrQxKP19LbgI5bdK4nQBrKfwTF+cAyls6gDs/jvFZ+Cj5OFAb7EyYU7lSxKjg oqVzVy42HrwSP3mwDxtCLvKjnQrdQh9wwmJsCLlVDuVxiRfygn/QlljfPcLGoplzWS5DutB244tC vMcOMtzXjNLz50qFjjFCLxrhEOrQgV//vM3Y/q4mad93dfbBqcLnUSfh/2o9wC9lZr0FLPwZuscx cGjD3zoGUCTwqnzJ0xdjIMavS35SJHbswSHFXp3Z9dbf/BqHrGGTyFnkeQVOnpRxlyMlCgSU9DIC s3Bquih5sffjotwrRvTp7Fq5YBiTdKkDe2wo7HBw0lSdkfhZFnShDbKqyXVwpqWDqcjOWpKgVSu9 JafPD+2++w6aX3SC3fynu/yOl85b8sy7vQLgO3xCJXARUe25P7grcQ1ceb0xpYm7w4aNtFm6kDC6 NWX0SBs6crJ169HDOrRa7W89Pf7CIL1M0NiWzJ9nY0Z9Y99MmKEJquIjHtz1LdTE7K+Hj7CJetTF ZN1lGr37Vm/LfT1qgr6zt8g+/nCILW/Yyvr06mKTRg2zf2hF/hHTFupxgN6EmjzJhn891ubrJYzh Q4fapDlLrZdezFg1b4r9685/2cARi+3sM4+wQU89ZUMm6MPe3lF0q92kGdOk/xejbM78pRoFaWhf D/3cRk+eaz21plMbrbn11EOPWn8tBttQL0JguXd+tMc3+IVz0rkV/ohcCeOCNHHiVNtww/Vsxx23 tldfHag4aWTdunbyERm/08Sh7tSg8zvhoi4pqBs/5KOOmVBNE+h5EZHjspewglvsfBtCiJ2MqRQt Lt4IeV42eV51DU8XUHBhGZ0oE6azk1xHCXhGpc/lcp84Uk1eKkO8smQEi0YzB4pV98lfdfWfNIGd D65z3gQ3+IeMpA6V0gagHkvgFSjz9OLAV8NH2pTZC3yEYpyWS/hq4lxNku9hzRsssv88+Ig99/YX 1kCPExfNmWOjRoy2idPm6OWG6fou5QSbq1G1GdNn2XR+ehT+7fgJNmnabBv/zTgbM36aYnmOffDh 59a4RTvro+VoRn6m5W3ufsImzV+ui9Eqm6HHv8O/0Hmhj6F/Pvgzm7e0gfXq3dPmT/rG/nn7QzZU b5z++oxf2Lj3X7M3B0/wuU7hZ/y5yqZ8O8mGDR9jC7TQK9PBxkr/L8ZOty7yUfvmDe2lJ560h54Z pDepqcvSL9l+VH1Tp76FnGXc8I4bN8FHh6dMnmpfDh+lkcNO7kPmbOa57qMfEpFtDvSetPP2Uvny 3CAsuGAIQ5usjyCIeiJulqreD9Xi3EcddYjq/FYbrZHymGcVnXVo/fwSLvuUGaNc6IIdcPVNrdwh 0EBf/AIn8pRDm6m+v8JXxFuFP/ykg7eFyIOcn7eJRfyT5cSVwaJUkXQmHgFxngKHxgnZk3dAza8O Ex5RTxG09FX17wA/rzkuUv16BRx+KWxXnjqkbuARrzKgAXL1q/nHD2v6hF7gAC9wi+PwqWecRbDK ei7kFnZBX9+/aXPwqeC7kdgcMGirKfXIGATd2zp8i7yCzvmqzH1IHeoAGHrgSVBD8SrcyQtbA86n z/ijfT7ooL2Nt7c/G6oXRXwULdol5yS2pazCZwlDInGq2CEevOeHwwRDG/cdO4EiPurbHjonYvos fRr2FDIL+51tvWNgwd81LXwRsOAdPMAjZVxxHH4PGNpwDvCXKcsjrxK1XcQ9MUfb4BZAo19Vf/Lx Jxn77HuM8nWZZj4FkOeYfTngjBEBJxhwKKb4iac9DZfEvv9yAABAAElEQVQLhbf+kxcdo1olQKeU vKv7Kpzj1AlmyQvWpMznscvwkrIsdQXMcfKDFvx0fMKZU7TzztvaLlpR+9HH/mu3a8kPFvLkO500 limTvc/VgC+/oj6zPPkB9kCU7PAXnzpaqk4Xk3eLRlwe5KK8irwIWOKDN6wUw3ora4V/qYFHi/BK vixUyttkTHol+aeM9FZaM+9gxhuBNKg0Tlx0GHGIJRZW+ZccGFVjAi9zmVjcl4u/mOhfj4x79LLD D9zaXnvuNZs6X1+YQClZiWw6CMvU8WvI21U+iohO4qkOBY8rCb9VktuEC4j+kJ86Z7y4wtqEr4rK dGCJSwelX7917W9/vU6TtO/w+XHd9IjtwYee8sesySP36Xf0FGfnnXITp5pP/DXBgkdQZawxd2VN KfnUL6vFBD4raImROEQ/11IAeUVATkyPEzHKN87QDf7sox5XaTL+CfaevrDQRTcZ55//G7vo4t/b J5987rGJDuDSYHKnrkOXU1+35Jl7Lxfu8uV80UCfrKL3QxIDzgevVx2zgD5vClKzK7ReG+NOxB/x wKLUmdInLDHSgE+6KaaaFfONVipGweWbp4we0Rlk0jZ689i1oc4LxHNu8hYqNyfENrHUolU7O/jw fW3oq6/oqyL6TBSTvQv/QI8evL1HuJKnjPOKN2iBIY95T3lXHCZmXEfMJD/K8hhemYh1fMIo2M5q I87UR9tPPulYPcp8VktGTPYbMnD9U0aSX18WPKnv4pRyPZM3RVRYehK5NTt4XL7phvbnW6+y++77 t8ujTajqRltWpamWBZ+UhBh851VcAusdBQ1KlSn5x3kdcLdJh1EGLPyVb10HVmzr8BRavvmdvlY1 C6j6V1ngQlecz1HkcGzN9j5aGgrxXfjMqZRPfTMfPhJWqCiSsK+mF3GDXiKovY0uGPPfSJDlNc4B 39mAUbZjFKeMREVWcAqeWR7wwE9/JCz5JBxF0ndM3cly9vVpqvnA8y0bJflL+kaHKu0LuBdT6rYX 9kt31Oc8iJHfuGHl/IyneSx31cT+/rfr7Q19YefhR/p7ew2PrK/0r+ultop9wpCJPeDj81U0OjpZ sl6r15PyZhV/pp/j2F1cg4VP0ndhj5PU2aSfEo/CxM0y11V6VXGSSRWWx0kPTvJIfPZi5X7Bf8Qx Kdt/z+RGiE6PYULzq36VOXhrytdg4RdnB8wro7iAA/Tn9R4KoYRaTQ+NQqdosTDcOcSmahA8qURg vAoNXk22owdlbEHkn+CisDxhIu8EQQXf+kAoRN9YDTuC6CFnArdn96563LK7bb75RloxfrzdfseD Ps8kcbxRhkaBFaRxgmdPGytRK7bwjybZR450FW/WrLnb6TYXuvH4ioT9jbUYJokto1gsxZoaBl99 s1QXvrzzgoa5VM19BAYeouOiRQ8QHsXe/aBZx74+WCGXO50mWtLBbZLjGzTRxXn2ZHvoQUY4opPp TLSBnhM3v9NKI4tm8OCxcNRnoal22E+nhUryMinmJx17rCtQw1Jl/KoGTzoKTfUB8THG4qS/1Tc9 yb/00lte5nb4EbbWbYy9KcIBJfMCM/TPDPokH1zhJDWerrKzyJOqVFd0BXIZ81iAoZHgSy7iQWy8 iE0pE0zit7zAF74SHMzwdTiIY/pHdLI33rivbbnlxv749A7F5fvvD/YPmMMv+HtTrDqPhgFVSztd kUAttnFBA0k+V6fe/RJiISzqVZxpsJNScG5AtJICBb6QtTc6OsZyFavBDfu0zL0198eyVK9qR3Hb SMZAyuiznxM6RjM6eSma+G3WTBIB6BhfLdfCrk/oTVCWxeDTRNFJDZ9iIzFYP/FYFR3hz3cn/aCC VI2DBIMLDWWIT/8Frt5ylA2P//tZ22WX7e2G312kFfXX0tvTAyAq6lryVOkZO2lTXKScozAlxQGc G6FWSJO5yjsNessu5m111EtBPC7PZWLq3Ew6MuzCTrbVNg1zqjZke+By3VjfuL3gNlQB9QeN/gt4 HIemjqWyQjCM9M+NHhDOcWIee/yTio4X/ggNC/vAFh7SA9+PYO6yixIvhwXxA3/41joDKCiM9B2l gPxRo5eJTidD1rPXKWLhhd5Q+h4+BVyHhUmiBQ+sIkErgNM7QdQXh3m+B08gUMHXvVnYFDIojbIa 5ygXb3/JrGgLM4YcXaje3kGJ/s6bEnjkTxQqK1xeqBC2hU/gkTTs4RX7aKd07OUJp7BACDTvuMnq 0EW46Ij/uQHNuWwFqpehi3NJQQK4Dso7bcoviFIaN3r8NdQ1y9vJgh4/I4uWLvmkPPJufzJxnKgv cDIOSvwog6aaMl/FT77s8WX9VMWl7Pt4BB30EYPEZ8wNxfWCF6yTHiPDx87U+dadABIca1sII6hr IOdZXmzipCAsSa4K9heCUchPMMGirK5znEibPLHIK+SiAZBjvLddIKUutT14RedwpVasLnvhcYHz tW0K2jXt4IM2/qMipKHDdEzimHXe6OTwxYUZM2bZYYceqEc/Q/QSwxQPpDyBfSEBnWjxGEB8ZCyd mUicROGQPDGy0qvyag2txMcopzpQGgmDD3gRocky6sV1VzkdiLoNGeghk7ujOPYaCAbybZ4IcQnF Xj8NvJ5yTgUeosOE/OTnbJVP3YF7sKVqvufElAx8gO5KSU/e7XEoEjIFHP6heYyU8Pj0qCMP0SPC 7no5o6sjM+JQIQxOrn+Ic92KEyv0TRnlPvVPv+UdXaFuieiCwl/YULvLFTx1z/jPPMTwd5sBFr6I GKM0Y6P0i+Om7RUlan6r8WTR1pZ6AaWzf9JnqUabunfvohuN3fRof6jPGwzbuHjFPDnWoEo7kV5N 4EaK+E8a/OGNPzq5XlErNbtEBC6xwnlIg+20xc1c0lKbhIEC2fkgLsokD8HFBcobYyG6PkV81jn/ YSFi/I8mjKDhG3TzOIOXUtVf5L0NEhKyajUmPhmz4MPXR54LetcBfJhnEk7CAXH840P2s+2313eL dY5sskk/H5GjowhV8kc+sqsw5wPvUMptgGfk0U0F1J3/CSweqzV6Sf5MjfgxMsqnstz/6sRmnSUL F5bsHFiev1UbKAqhcb6mLwIetjP64e2L+6JoI9xnGcOBB41fXCjDNOicBiOph9g7qDA9KGWVWOVT DEd2VDYFRsX34NWKheE+KmSlz6OjFDoQe9WYQK/QLTtT2MFx0V5xhFjh+YGrgX8EUyp2rkNjPc2o xSgIRWHVx2m30wqnWlfOMKyp+AsoQnU90Y7uSWlXUPjW2zv5AttTcCpXReNYPot2K2zPpYWqfsm6 r8JwgXfCwyFiVAoIH4bPeMKTHUo6VFznPHphUEnk6kIqAOpVhXmNhMx1kUhkMTBB8raDMvzDuYVK 4MTOaar+F7iWqvBqmwFClrlMV6S0NcvTN1XcKiptCDiJVxNcHECXv8AJGfDI/gu1GfZgX+kt6Bzb 4yzpiJGCaX1hmY/yzH13n/Ts6yeUXAO4DlrSOR9K0gGwq0dcdQxBG/1yjKkrm2DKBIvUsYRV8AsZ iYMMfnR81l2vV5L43TWTl5ljROWnLnDypgw6NbrA3SbU0jHJ84VIlwOs+FFePzlvGjVaH6WCjR+n nmlByAqZfuxYa9okRV1/JD8osIuOHX+edPydQAdPv7Q/EGObMPT9v3RZU1kNVqrpHflvNG/qxZfe LHWSKP8WpU74+sk7HehfrdPiJKiwrUMWNhcdB5UkLUgc+5/2Lk179w/wyi9wfVuDpy+cvqhHaKIu xY2DuhUbtNIXvLBF9SFa8png26NHVy3z0tpBdGbpPJD8UaQa0NQtabloeKMgNuiTKfGA8qvp7CgB S12SJvfAvdMjtOiYirN0JzZoxJM3x86/Ul21s7NiF/iuJNg65vyuk1QMxF0mBu7XCj26p/7QpXzf QwfQkxjxL1p+6aMsZQ8ffFajKXApSzpw3tIn35jf065dG4q8zeCGDx0TD1mum7glTKA1JsrB5aJU J87EZLmmUBx08N62x5472B//eKffUMa6Z4UN4gi9NnV41y4MhQ3VUpdVA5R1Bh+vN+2xpW57Gn6D tn7yehU/SvznvAMv0IMvceK64pw1JMr0XySOC1n1ZKpEOIEYNCXf0Bu6LE9+sccvKSP3dTHCn1W+ oXOBJbb5RAX/1MFLRhLvdV/RO+OtDq/Ed0VKff0Crmwd3sKJfBKVeyiDuoS5H8qsH9XXCeCaZaQu yKyLkyy9bVHG7SraueQX+6RLinJflamAKwrSvohr+FZTSSO+lFX1EmJyqdJwDF3V9+TrpzgfJL8o SFmJ912aIi4LBG8zKnWddLmv0lePs7z+vqoHZalP7oHVRuAAVk/KFIA+1Z4gKjNHq3YnpHzOC1LT o6COhsqH/3WRpUftla8yzkNfwoFRIaRXkjfzOqmqDTcjUeChVzb6Nbnim4+umI0Dovf8/WTSqAC0 okMn/rNyUmTNPvjr542m9tw5MG+lQ4f2ttZa3W3y5Gm+5turrw30RpM5aW6PNvw5rej8/gCYfENF 5ugcyPBzp4MvnbKTBCxPAPeTApK83y0VfgTH7dA+Ex1F+CJbhX7RdHvhJ6jLEEO3Eb84ovawgA/1 UvAvipy1w2ApFGzjnHLZBS5ItdOp0MftKo4pd9mygz1cMrkumaFENE7md17Cw28FjY9AqpC1paj3 D/VVgRGaJH700T+2w488SGvjtfTXsWHnfGqdOdkFHXzEz23TMfzAw69eN4kjejXjKI1LhJPWOaWX uQXQIkzJ5WmPDNbW80ahgMMnAwI8ktPpkBwx5r/0i4B5zlCA32EBLtvywlBebFh1v0/vtTTq08SX C3nqqRfsI428MZ8yYhPq0N/ZODfOSdkqAe4bUAofhJ7EQ4Fd6E0O3bl4codNctvRD1rlg0THKuaY mAHT36IieICpwEemlYUfdeyL0YiHYwSa47JBP0D+E63LQF6BF7woEDfBKuq6XsEIneOcq9kl5Cou fN0XyKoUVI8hcPnB1LdJQ2bOnLn+2apBHwy2U085Th3pDfzmgrKMJccvfFGj9bx4p60pX3uPfcHR G9losFSdt74aiT5Vn0d74IEnbMhnWiZGI324xO0IgcX5E/bUIhkfgYmsNEbyvQ5dTgJjj1zU8Zzb zxHxh04cozcCQw77ml0opHOfSey05LVrQdEegMef+xi9XBA3vRzHzaOvVwmWy8i4z71Lc+VcE9Gn HaExCpR6cW4Gb7ALuRw578SLDDCvj4Knq1YHT/j6S7/6ea0MKO5f7WOUS3kFK9eDsDZiXtmwl4Mi uf2Z0R6ZXkdSxu1SPn2YaMSHXzMk2EdHXYGwG2XoePuth5h5vfhC3qlhcol9VX71uC7W9+Vo+9AF XamfkFe77Ukni9z1UHnicI0kuS+lM36CLuGUYWOOaJGHFirio6YrMgSnLpABP66tDmNfwBPf9XBo uckyIC4D/jrG77iWFHFETEZ7H1DsDZuq/aMoq7tNubkvZQY9eex1/iJlmRTHLXRBIdelUCjpwflO B86NEMNSGM5xn9S0ctewSQs5BEknDGAXQL5ecjgnVT14ZIvAxPGiTSWzrKgP8Q+jnYcrIowKw1ov O2VAmHgJW8M+UXwv+S1aNLOHH35a3zz82BdF5eLoj+4Qh35rYppMhFNX//oCA9H5lIbFyQrfCp/s cFQ5YCMJGX4y6yTKC1zipXz2/Or4S60ENQUNOmSAJi3+9/pM3YoCVwuY21/H7TXSlAcgdXBeytex t0ZR7wDZBci9LHE58vnPfz6it16/to026qu60EiHykJeECRdPY6epSzluz8k5/tSzb/g1EOr2pKP 3eBHQ1a0S+Hvgj+wsoFxhdcotqobCF6v2oc80RWJkeH58xfa7373N3vn3Q/1yJTPJrHae3ysnsak rmllo1O7gIsdZoXvknecc0EbRicvqpxGOm1PXWIPfeBzThBXTGn4vuQNbD2ffh+uTx8QLgvhZkr6 2oVCBR6m0q80nJgPCmwkU+cRXcHMy5y+2t4F4ZptLQgLGuqf31C9YXfxJTfa0XorNOuxxCyP6svL PBhOh5mqP/5I+J8XmVrpO6cX6EWVYcNGaI7dCzGtAQThO6bsS7nwBIbL3AZwCEKgdHorCVzHqcCq h1X9oBe6p9gXGUHyfMmY9XJt/EbV4ybk1uWXvKg3lRN4onGdVBQyEif21W3gFe1UtaA4pjzkgQO/ Ut/66JT9vy7C9WnIi637L+2v48s8CdFDeP+XfOcl/MAMfzpvSajDW0BaR3iV9R2dGnjUlwFtHZ1A UqqPF9DYJu8qbM3HbpV4laX1+VbziYZO+UZvhdL5VPHT7sShjB/zMtdkE/isGVc/JR3wNdEBByfL OFbGY5dFlElZxnH6NGM99STvtCBVUhUGH/L5Sx4Jh8y9WuiTvL/rr7IO9UIiyofEZOxh4sKCJTZ5 GwoeGSUnicMiE8IpT4Nd+dAIL5RyRFywcZjzh6kf6GLox/SCOUqDKRYz0UbjHcJThstUOdCQH3Su p7Mu9YI9ye0Vgj8iEK2uwa4CF8mpU6fbM/99xRvo5lr0luSOZvQQ3ziECy0nWeSAe0eqaDBpwLAB H2OH32XoGJ2QHXoWjASMcAFT+AWvxAWrDn5B9v8x9x5gml3Vme7qnNXKUiu31Iq0cs4gERSRAAFO YGySwTbOvrYHj2eM8TiOPbZxwCTbYGEwxoCQQAJZQhIKKOfcyjm1OlZ1Vff93m/tdc6p6hLyzHPn ee6u+s/Ze+21vhV2OPuE//z2H33GFTc4nBG1esfQ+g2ZelXHIdb+D3BsP74xGPSHbuzITqu2EE4u VDK2TXSzXdlZe4yyLr053bGWhO1Gkvm7ISQNvUlh71hgv84kZ82cE1d9/4a4Tm/fR851DavXlWAd voqFDw909jUQrYtgUafGo56zL1LFEAAvHGDzX9rvK89ios1rsVOCZZt1AYBe9o2hi6NoPkkWiLu7 45EHFGQtL/xcw+QzidfKf76pyQPsXsiWvfatqeh0VZmFUPqXlJyk8DJjhS5q2HSet7qU8BZ/uyKy KjcCcaix2cdflfonHnlVGvgU0rZpIjawwUieGuRor+QxhRjVIBFP9nKkQE8R84MBYFLJ0ICdnWjg n2p2xLjsrXxNnpQRzFvByiKT4LYN6Dn6Isd6/f7oZz7zJX0BJH86yTipwlZYD8wtlT6K8FZ/pMyt 8J122j721revL/725b7ytr1eUfK7H/tzfRt9XF/CyOeBeISE1Ly3HvcTbLRv2thD8VAexsAxwir6 LkGt9s8yNpWfZmob8LHdc6Xnub62fOr3QlWntn8YoIStNQ+WpG+FSV/1naIjB1b2/WYfdjcG6oon ScxP+UYByj6oYq8rta3gdAgpxbaZR86YUm3dwxjQ0xpY7rCt2VBI9p1YNyNtfw/e2TvEdfy9+JBu 2ZhxALGBSJtxbV3TpNj7alSxQJZe2iWNq/ZL75vU1PZS2fSnbHFvvseVjA11E7FNafEY+ucYIUed /soXmwqEMu5K2lOf9B67429BrTL6SN3JGScLk+RrkVQyw/4Crei1T8DsA+Qn81Mu2lBmiEU9CdqQ t+j2svEM+egHdNHi6/uB4SZsikc/YpMRJLgcpKqCE9o865aclOUzEXq1hQakL+umZoMy/BmE3CpU DvuMagdVrAGLJmNWZ1G5FjkMdB5U9KCbNDEAVsGqBYlMtR5tqcxAQWoBzhBmHSyVaqJ0wEUkYFo7 u9O0rpOswuTKDxXcEsI/ZMdsO4IYwL43o2jobrWudEOaGbF+0Juv2U58cbvib5+kvOy1qtLZsDpf 5bPbsUxij93QwS+6DnmeUFWdCw4syASfE3s6EoWSb3tInM2nlK2HNGXq8MQt8ZamOEspvcUixXhD ym2raHz18Dr+ln/Eyg+cs299p2JjHNE7XnAbFnX0ewzkYfzmWFfvRZvauzO/8dsuEY2JHQCRGi6L s1y0U6OPBKzGvIwlt1aKeMvES1v75qL5IWOnbTVEavEBSvThqyN6f+Dv443ODoysUqIkNSc3M7mu 9CFHm2W70WaM8JZUaYysLGraWXLi6VDFXPZBo4Z9d6vb9QNs4dJfNRrEZ02OV7YfY9UgdsQ4Rkt5 xgpG88A/v++ITN6Sgz3HiH2UAvtYWNoP+4fJ+Cl58zeboadF5PqER3zzkqXJBr1WhVzFjH7peVXs udzq5cCvVLpQQLvsrC/t8MjA/Hlz4wz91unHP/4X8bh+lWQOJ5PiyQUaQ1VxKluxQ3l6bMUpbSFS lXqdUBwzV7VoNixIXbs1caZ3z1Gus9BmG8erYXgulyxzjf+wG5+H5hSCePx4Dfzqb3wJrbCYo91z VMdtSrflZhhJ6P1JYI9hZYHo5hXZR+pi7lqTpJN9tn1S+jhUefK+4jSk17wCXK9ncyxkqfeMS2yI QwEN+odJBmuVGOpYEtnUgVz1+zpRbtzelZ21d1s0BsYbQHWsGMr1+bQsVW8eo2xv2SMGhmJd2Eh5 gZfJIpQNOQeJtxRLlrqyrfjAmDKOLUbMUHkLO+MBP2koT35YBq/0FG8Xe/EWzZnBpnBKtvYDls2y U/GkitQzQUB2MQb0Y0ZOzCGWJ4QykGNF3V5uLKI2y8tBN6hoHNgICYEuI2pQlNJuMmGiRzkDtgXL eA2bHQuwVvTB1iU8kR5f+RgErjDQ0+m2PQC5P1DV1cHPAK5JzfJmMJuC0ncM8PTvyc5XnEqvWI2T IrkdyBHuKULecVPn+ChTflIJbTi5oL/8Yw93+egyNH1YkAz5ijf3IKe95qGlmhyyJCYt/MxE22R8 NtdfPJJRW9fAStxOvGPqMTuSM+ZvuqsmLaHU57q6SbzFRbzsCwSUDRR29AZiVHAa/IQ4Fk/DKwvK /75dqFGsil97YsCBsGitasodPH42URlPXPYrfcgRVMYhrgOtTlZMaXb7KkRDhlQ+mNu251CthUFj 9Q7e5E9L+9jlwX3Im3g9ZdhevU7sTp7SNwi/7U655El/lZd6Jhgs7WwSkK0Cz36o3MCHuhOJyGic NPmmCEFjpHfFufleUUgiB8EWk5oLfAJaIs23KrIf9qnK137IZ174G9H7ViBW/NkvcfBHYl6byvay rfRUnODnG9d7LVsaH9FLmq+66jq9KPi+2HLLLQisEOtjePtqnYprzq6puWyssZzc/Tb1JlfJU9v3 A+JCmXiqQvk6Qap98SPT+eETecYBsch+W+1hwBYXZLskfORzrJAnlwnVTo0wcWFQlWl31pVkLwcd X/hUSnsZO0Xp9xmPtKmn9jnqh3HqazKHGuM3v6buAU1KPDZB8RqmtG/QlgM7K95pJ77lB/lhHX7n HJf2mk88tm+isonBGdYN8uVzzTFDvbQ39UP9A9EpszUGqhIXh/11aG/xDPdEBx7kyjbKlchjqypN Gtahuz4A9FIlnfvCHVKHNk72AR2lh7phyviUOalxM3zJexxzOdWXVFtfEhBecKzwWkn5mdyS8EPK YmTyRXE9tOxGQqIaBmE+zcBSDIsrFKQcgAQ0GxL9HX+q99kqZ1t25hWiVtgEgGClXdaENpU5UMhR FoQDe0pXB0vD6UNDcwvBefuIYQlEMAjzTBCrTmXfcrDNqQubummlM4VgZwKOevslQGzDThLxQGHZ h1/w4Zs7gGuTz2eZqiPl+5MapmmluJ8wwTRvk3FepLxlknxDvyo/lZyB2sZ+CDP7ATbQrQSs/+Ek Cl+lyteeKwJMxnB4od948ZkXPsKHHe7mDaZ7GJg+iZy2lh/oQR9y9oVORlmfBuGyacWDHvHhi/GY 0JGRADZ4wGAHH/qm9rSrD1ToHQCnXlW2hhcrILZlJgcslcFMkbTdBRj5VwX+qnc0CPwAQx92CpTL WRRZf60OurPiqTZwDET1+DWjmOSfupZtoj5xG4g9rzr0VXsO9YCfZeO7L7M8EXODqf5VttH3y76J 9jcRmUHbegwZhvYAkULaj51uGY+fbBcPW3uQNudjC/0k1qpsFn3MSXiJrZKMqX5GnZut+MycuMXD npQ+yDrzpkA3/mFIs/2+SvOr7PFPv1Vj0Hc0ugVErVLDBb/Gf7VNMmgrpdzJWLLTDtY/U68MOeWU 4/WrMNv4d27vvvO+tojq279k3YeBkGEVY7+Xz45gE4YQi+F8mr6Wz2Blv8qYpfHJQ52vaAoGHdmq tHk6mP0ELtU3WuIiQCzokLJDf+YRROZav2BO1O1joBkfnjcUK+LvNjPNUJbvpdO+oX4YHGPtmWPz Cmk2QdnGPg/ExEa6pYu+Bb3nQSbxm1LXQWsuFrmTo871qmmeOld9kzpsI5E3E7aQV0K36apIHLU1 NP3Zrs34epnCTnmB6RnKPDnEJ+Hrv/rwMK7D50ytsznX25K29V8YBM/melP6Km6YSCwnJ+oLs3jh qTm/+IvH/ogoKYcJ+0moLp0mvMKmvmCJRFlTYw9548sm3zGBQcDFVzawrzw9Ed/oLyToSNSYMoBr EgXeyXamjJmafObZ0iZez0iwbKdfgGY5JkNSi+3MWhy5Q8GoTymYrDgtT3m28A15KNudAUZ1vMK1 TBskaVaPN1XOA8xBqmAll92QV0zSdfAdypcPiOYBUQOk+T7kI29esPQwUtkJXW64zn4RQaXCJV++ 59CCMkWSTqKCr6gHZqjD2GlkKdwMpPRQUfpznw5Nri+eAtqsrMmD7sdEjY+Vyi74yRcuezoTEwGd q9ptMi44JdPXcaDJRfhAlVXC0/G5Mjk6eptwyj72xc++bHyFZu3E4KMNuqsG1ku7ZGJvVcoQD3g9 yHUbZ3Iq2+AvALctmCKxaK8JEllTwVXeY0GC3OKTI1R3qd5pCGfhOY/gIFV8q67iMWCZlJUFE1W5 fqJcKsH3SplHMImeH/CwMUF1XCeDqwKpHl/emCY72uSTcgmdJzlpo/kk7JilWk+sFQ/k+OS7DYc6 hAUcAErodw/POTZpk+0UtfjNoA0213xYNPbQswepUHNXswVt5Stc/FcZfC8M7FOPmCcFWbYNGTDb TZnb4zwDR3pZP0t2wQWXxjcvulQ/Mfa8Xx4MO3NZC5H5hhv3TeyDiO7me9pDuRYPOQfYP/GTbI9z KTcsQ4YXuMn0JpI7DOwSBRYsWphqODEGhOJasra1URx78taRcj6iJbtqysasK78MZrmcZ6rMHrd6 voYpei7UWBZyNTwXb71eJIeplytqjwklDYQ2jIt5Wlwbi3jLB/pG9h1k+AzlLStujzsfrDPuaEsE chNTyRQetTluiYMDMVFgUCpZ9jUGLCOeqjN7p5xM7+8EniZTupET7EQc0UrPZFnkKh6WRU+7iEN5 ckLe/JIjDfFcV7KyYSqf4KFfYg8+YStpaENvq+6cqNPWgj/xckFeTV0tlHY0sIT0dmjfUEfH0hsw gd++NCX5iI5fI5LB8pU4sdMszLNm5lmSRgMJWmFjFoNPrniMUW9jVK4GyNrGJ0Gw02BqSOLNjEum CNiLBDp0q0Mvb2Nmb3vsxGBB1k5tbHNz0Iu1Jk912Z2KaAC0K4mHPfw+XJuYXOgvHzdOy3NAbny5 0QSAjGMCAnqbbqT9ygYjpxG2rZWnajQfpDSR2J5mQ/kKf3MxD0wJ6YVr+cy+ku2rCBddGCws8Kc6 Y15pbWASti/iT3m+N4AFmNTr55pIn5IXFcMzV+S7wat86fM3iGRDaex4CtC2Zi0YfuidmOFa+dF4 Xd9oHnziJ5UPvT00C71UqSm2GASVs28Qd66HZcqr0nk9I9ccipzqfWbEZKogAkU5UxsXKnLFlH7h WLd69NM3cnqQOAtaIXAFqxBcBtMU0En9eEuNIqnKrSLs6hPJ6aq00RjI0s8lKRlM4YMtWXbvMmDS qW/t3fiTLy2sfkaU2jyZloqpG8MC8rgDVfHKhB3pJ+1PosaxaPSiAVgcyOSXO+DFeOwTDgxug+JF OhP1lVI7zEnD766/SR5qnoykBLLF0+P08gTN+puO4qk2qLgCTNt7sd78tc2oaTp8FQNPVfZVF9S4 o9E2m/wqkoULF8SF37zUv+zw8IrH/FNi/PID/QB2W4Yt2EUBGkXt3XOV138bw+ae8O0/7K92RCep fHI+Ka2vNUzR3NZih5cosrc+6iyDDc0vlc0nfsaF5xPpqpjBnmMtcZHzb5/KcLcfdikuxDMP4PiE XgN7zrE2fMVZNCvDp09wZ7m56SoWlJ1tCdiLtBzHc65CJ6a8g08gaQPtIFsoN3UVR/RAc0tVUBC1 BP60BB9ZMXfHPI1BxizzV/XXNM9btTV71YmP3ERfAcvUyaaYFTUzbUdDA8q2ZixkYecP8WlcdrBJ OwzJRyxIZQP7muvBSazSKlXGzjK8JQcGdSRoxce+PsXrPg4vNvFRQpL6bh6inJEFODGbGYWDHAkI 5D2Xa0CYreNFHHmdDqqOfMoM8zCnQJoDf37JKGXTthRNW+CvOGEPn+QVDnNT04Nx0G1Vl1cDoE50 5PgpQmXoNGT030YXpk6+QoPxkxNYKMqd9jKgDLcd6bMnmW7git88iFoSiKRBtwiYPqiyz84ML33K shqAjdNn9pazwgbIroH7oOrVdRpTBxefDeZM70mFWj5NrOsQprfOnIOawdMOyM139GOnwjoJRcWW 3EnEj680YCX7rkJ3Cb1ZUHZQpM5tJDWlYSjvOhFsR1Voj3k1GdS3dQrXcazCQKbLNl2AdAOnVWaH bm3h/pMVaQcRa1aS1YfIlD58GR/DnwZWuyZC0bz4TEGbfnkFIVPGDdzsO1Br3ZC6BoNDda0JxZSD wPI2NYd7h5fw3hoH2Xa0o4w/aVgyQuoSsVLBfG2fPmCjDnWNt/ogckmbAOLYpH1Jrzw+GA85xkAD rHrwiCuHCerGdRKWPMTCtXCINu7xnc4gk4cVcDJt3j7UVXVxsTdd+zqQN4BX3pUwsrSd/mw/ZSmg 7NQmDNgrOiVqn8qY5J64NWNyg5kJPfhZ+J0mxYPnPpsdjmnmkUOXP/Rzi5Y1qsRewXftaX/QQIyR M0s/vzA/SsZXs5kDME08m3w2CC6vDhn3Ly08+sjjjk+9vijBUid58Ls+LbIT2JXXHrvMQ5enTh8U IvtqaSKO11KdCFoMJYrbDHvk29RJSNja9HfXtVX2vCYx6upEjHimldUXtJhvB9DObisf6ktrTbZ/ ky3J+olU6fQY6sflsJ4hn75hPi3KH7bJV/ZSlvVpR+WR68NbdmnfzN3MEoMlHvqR7bFbH0nHXEmd GGwT/C5brrcDOglLq54yeY49ucDDkr5dqCel7WnUUNaVKdLk6Uemtg3x7Bc3VZOmZ6yKNnm/mZ5C TOHOB4811U2OYVrbhGSU7WCsdYrQj289pasSV85dE2NV9SWTMXsljOLO+sn+pO6+blhf+D1C5opO e/HMtNPAfuq798Dhqc8alaGiW9RRHiBPCFwreIeFbQCXcSaJ1pWNIz4B5lBwZoCuLMqYdNQROMsg dRYIENvcOKIXRjlaeiyEnHhzYmaAclbDPj/YZjuac3QMt3CT0y5XvmSU0gZpFH/Zg6h1NizbZmCL eEOVDwyaKORQi2sumLNDwKEq+QuWfRGw5USHxt8MKZYLMKYv8kOViJo3cy4mTbFL/3UWrsZ3Hl7w 0CO8oQw0kvU7p02GX7QioKtJQVPF0O7C7gQtltHyIlrDZKMOTkzajZrYguSSsHnwXWXbM1BcJtTe PLKFss9YwJRc1uNjbzM+YXf2b9Edujyr4mzJKK2vIWV+AdgflQ1lQKEPcI0nkr48ai7auSxwf6Is fvzlh9iZJLI/Fp/2ZLFACyqnZnj6nySzNM/USzq+jdyKxTfLgJF5dFQSybFI2Jxg0ZdniXkAo72o hxeDajFXGCULPh8S8Uy12iep0bJlaYySS36L2V/bK6GMl7RzEFV1xlM5L2x89BQVndimvibApspO Gd+E1FW2pT45hE9NImOUOKarbfijbeDiW48ZN+KLzk4TcKIYrvPVxLZxvxND+pvEiknxpZYs5Tdj Kz5lk9pCV+CJ/cjI+njk0cfb60LwA5t6vmGeqqGpcPrZuzbvSosI6YvzCNNSCdn56SI+VF2K2G9L lA2WF5/KPgkFnokCHZ6zWZSxaAQglSBafSqp2SrZphlb05PdNlV79Tan4vxJpZRneoLPbSUAqCnX +9fMdYxe6YJE6Sre4T7x8/jhEMhGbK2UsvSXpFS5973Zp2rLD4VFm1RMX8xbckRAXPqn/wPiRS88 +pDwf7IP5pUMc07VwUebVZm9Y9chJR5q8Kf4eh1EXBUtlc/Etea+lMk5BOy/+dvPx/PPv+jfEJ+M R30eAwtx873rPVb7OvvW2VFRqDjAV33TvTkF8bXFIn2u+DV52WIfPO3Qf4gNokN/M19+dDgEzIn6 jCmy1LOvmMCS5aRNkE+BZhR4fbvxOEjHyzpikGZ2AeRggzJV+vKsAH07pPGX0Tzg7SS6ryipYHDx 44efSWMCVkKGxq1ErnDsHBVV74NqBs6GNCH4a6KwHpWxAKy8ZKr6poJ6+I2N/e6s7Md1xWcsxjaM +QehjaN69NTlyk0cwMFp9Cyo7CS78LvpKWq/bzqp18dszW46m+dP42shpoeSZ8zSR3stWxSffg1t eyXNMAHFB3zkKREf07Vnou+P0TmwbTc8ycViqPjtL7LEWnhO1YzgN1rxUSRvl1Vwx2/IdVsVjGyH 9j6iSRhZCxex4erGuF5BM6b3l6kN1BaYy49zZ3Byx+IkB5k6bE49ACjB3Nq29RdiOsG/zq2ipg9I p2lJ94JTGLTBdP1GKCc23RiQHmJR8aAdiKcXYLLHGnWQIlUd9vLmeXQM9TiW0kObuv+N0/fUDzfo w5c32hhJtLTVfRdfDSRABYn+Q0sSj0z4IZ7mPfrzH670ET77MGDNbPrW9UG+CTstf1mEyavigO29 L4yfLFe9DyDwYIZtYa+ksnkwKSuTPtw2E7GvDqhe7ArPeuXD9HYLAnfwiu3wZC6vhqbf2GlIdBMr 7NKfdpJSXm0AjTKLCHQSfzG7DTZq4UxbjG0YVdtkW0ksU6oeWi+cYTuoysobi3UkAZ22PgNphoIF v8hpF7FoJxQz9SsyulXKSRdPUzpGNki4JYRa5d3G5OWLk/zIxxSKte811DPjEBvPKxZIHLLD20+o s/XANp1NAwBOYBBDE2hrBFRUBJ2nvaj14tYSjQU88brOMaIyR/umTfRHLBRFdZ2P5KGqzn2FPP2V vbGQULbmcJeGG4zLPpDUZixU5O1jjm/6yMaNY6LlyJxgB8LY0NmNfNnJOKnFEW2TmhI7def4IZ8x cvwaX3IPZXqKfZce+ilX3dUpHA9ERbVNcKfOjJ9jIwbHpEF18WzltFectgG78CUra99K2qXdeTzP GCReyk9rL+8GQ/+dLTfffKf6svo0jwcpgZvzCTFqylyz+YZ640l35dO7nhcI9JGmtWfY7YfiZHz1 k0y5L53wZBRbtXa0j2/hK089qfqBC9r09N72IeZQBjqflMl9PW+ZfD2G20tEzy6yPdWnDbazYqGK 0gdGt3qwMihKxcCEON4e5C5a7SssxY+RNpTOJbkhPQvaDoTgGV5yLxmYWuw65327YShswH5jrOZY 4dSBkysbG/SD36Oj62P9wlWxYcu1GgQaCG0irhAOTOuAC8uEMqqrnZQBQGDeNdASIY5OG6fHrDXz Ys7Li2LOhvkxSy/91E1sV+XgTozqpNQknnINouwk1p19pQjxKWPfhMFrvOzVVCo3Lc3+Oqjm3MzK 3/OFJBmApV1ZJeuSvh694SNE+7JXnMc1IY7qqsIGLaBHZq6KkW1Wx8a5GzQHu7sO5IUkme6gm2pS D1gtkRvqLDp7SXs7pHV5VXE2M2NUL1t9aUHMXbtIbTA7ZupXDPiB54zdcNA1H60bOkgDzc2QjADt kWdKFePsgxu8YBhdNxKjsS5GFqsPzl+niWKy72ll72VqsjfEEs9cmfnyyfVVqL2IaVNhJiq06eN6 +e/KBTFrtT6z50bon0VsTVTEoOzHX/oH/aTo6POHA5zbbyI/XQR5NCbfsB5KVtifVoQzY9fe/ZVc xmjZzibKvX0CGPQL6hhHPkAwgesvr7Bhf35ok0zcXla/HNXCTZ/16pej266J8dmjri77MnIidZkm /n+4w+XJULaNfjlCv1zY9cuYjRIW2LRBH0eo0KpNKh7EwrdnHfnUYh5p9Bqrxcqto/ar5yPBI9ln yyZ+y2bNJKPBHSagk0SgcxSax0SEha4dtqZsD1h9r3jALXzjdooAyIZUNDrq/34G2zOmyDp+wNml so+aSsS65ZXJbPpTHD98n21lHuQLjH3DZZxRdNtMBjMbjPKaPBgqEZuJKTEITfUJeHMZ3+utusmy eTwAP2sKH34vboowQTADN2zDYTXvUp1a35ArfYJSvBUjyvYXn/Gls6H5Kpmet82pzX7HQRtxWlnx 1Z76YcLvIsHDXDHZb+jwkcj39iSttpPrUi4xKw8v8omR/jGnYjG00jPEJI88CZ5uAWfKpA2LnFwx 9hV1tQuIeiiZmILJ5OGDsvYc7kkOiCdTTpooqTPAzEeG1mocXhIcfmM8eTDBVj47SA6aciBdVaXr 02lstvPaT2uLt3XTVsbLRz0W63Z/WUertCFRU3aqLdikWhkXT03/5V/R/9N7Acx6bm5scfsusegl fdPMcUhpN2zrbIUHzZawoiIYfIShS6f2k0Wwn4WSQMerPGfUFSfkhx3CegZ6UQC8k7DzYIHeYScC UDhgeUsGQkaKg8E0PVvmwSIwX7XSAPCVN73cdL0W0KuXPhlrDngmxhdsMFbbpF5tie0wrv/X2gC/ 1s6KRfdsE4vv31V2y+o5rGJ0VY5+o9j4ao5tkrctNoS+JrkKAf662puMVzYTkZL/utozpsXbmi2f jZcPfTw2bLN+stvi2zyV79RM6IPSkyeVeQa5uWRR0E9qxmcht2PTYu4jW8QWt+0W00cU8Tl6GFa/ JkAfIQ0XC9lNapwKjViJJx82x1/FimcKlbDZV96aSkdAmMag4Lwqtcen6pNcBc8z38m2lg+GT5zM AuGUO9kkEzy/GEt2tkUEfBMPLkjk4m3DhpEY04nFy+qXq1/zTGxcMOa6RJ5sS1JrW+0zoW1USR8m DftxUv5z2+lrZ8aCe7eNRfftbIFpahuu0jOv4Ue1UY1t9h2NOUFS7q/aQKct8w84MLAtcUx3gJqM KvkDBBxSYmcpdSV9uAViQj8jdMIiFml3xhLdfZImVJUiVRQ++6zrK923xEwd1tnHzNpW2z0BPzVh PyK+gtuuxtQrM4a6iVM6Lf5mS7VlQypA79GXMyRFS0gHsuRzLDijTfolm5vC7opp44Uvx5x45TK4 zD8cBy0jSGzhQgZ1JNtmVdLomFQspQfcYQd0sCw2YZNyiqwhAQOrZ6k8OrErbVJ964tVnzFutlq8 QFLOJotku1Q/U7Eexh4Rxi79G8yKEwsobLQr6TaeObVi5tucjf2kireNFo11iW20IfJDwkN5ZHJd M5HqPtE4O0yX0ZP2glv+1/ikFh3dxT8UtJQxr9LAVwnhOy2MfLZvNmJd6Oou8qi+cKZcwPUG9Qoq OL3qPofiqicQqK2O7I5JWUw5pF3QJvdezClbRjqE4CVod3sA+VrslfHw+NtJYCkVnYZn4uB5q/Xj a+LFox+O9Xusiuljsmzc4OKuxrLxlh9uJk/Mw7qp86+Etzl9w/br44XjH4y4elNs8cKSmDaXjttu oWBOE3GHqEIjZ2z7+PpqlQcEHSo76gT7mnuEk3r2llYmB0iWa8vw55924R1SmyVw9OcBqDz7xMzO ZvhOrB0o9UPrq5Y9ESsPe8IdtHtxVodvqRyoA4X/99pA9s8dj5cOeyo2zdwUW921R0zXz1J5gLAS KPuJq+ypfoVp9ntgI2NFwfLkys8c0d/B4eoOnw3rR2PNwhfihRNWxKZ5GpYMEI/OVEJ2gp+Eoumf QG86c+HApJYxK1OgZwtAoa7qG1hXVpUY1+71khYsG2Lm1ft6XPArEHkVslBSvu9TtDqJbZuKvZo1 cbBBX+lWTln6MYEDwYu1AUvPCd+wBEzqTDJ1OVmirHgn2Cd78qw5x0HneYcLXVeEW9uMrd8Qq/Z4 Il46svXLbm5AQydNYbM0Of6bMWxGeCW8ifSN88Zi5SFPxsY5YzHjjr38qEUeGLi92Ps9Gb7iUfTO 5Y6gTFPlsc3VBbVL9idHVgytvztHPgUKm33l3e+NnfNOLUCIb+F0CkXp5wkLtU22afJlmyE7tL30 JK36wIDHJAIzxFWxgXRYcgXaRDz8S0HaE3/pcT11oow1gKHY4RA/Os7CI6OUSDaHvs6c0OmDI+M0 0cq+lMesXLjVCAS4xzByL0Bu4FxdwcOK4ZXVPg59gOqqkscKtzbVZlO3T6pDMv1qZfUb+CvR9hyb M35pc9aJSYtHVbsuI+WC8dI2yfL8r2PGLtuWdqLe/gsbDOdLr1aUlS07Eq9K7BGqMtxdIfULFD9K V8c5dA6pJpb6S2u/HkGu6mxDk+8XvJPqS5H21RZFKnmrbIrxtOsTjbH6cbuBl66VET6LhtHOpQSN 5NSWlX0oxGZFGXA/I6dyYdgXfPYcXs4nVG6hqaHaPXJHtFV3D8I2ZeWsA46UwMthRIwkO6Ft0K3f Uf1e5LrtXoj1O6+KaaPV6cqGBB360dR6N5EL7KQIfcjWqPZgglwxFX/h2UqN/42zxmPlax6PuVcu jlkbdZvES2ld7Bajz8KkBhn7x16+ylvHEW3UDU+ssGrYEVNfbjNGiSE2rx+qAwBkj5o+KYTFE1Pm VIBGfcJ5X3ZBg4/PhKsooqODhfn6+atjzX7PxjT9NkhiNKDU3LYCmJQmcgnPXqMLbX3q+ZJe5eIo /p6euWlaTK3e+7mY88hWMWtD3kv0c3GOgWxlkpDBQ23dmWK2QIZGcPjpn+OS0oxtPhOzYVyL1/2e inEtGKdtYBj2VuBJDUyoQz3kh7RX870WFEN0QQhzckySY7raYv32a7SAeSpm3jdXC4VZmkzyyy60 besGzRfhAFNEMA0rLO1LJ7rok/5mqeLmCQw/Koaq8+FdBwDq3D908EAf/jlu4HrBlwcVlcTbotQ6 PCxk6UudSVihf3NSkQbKJxDShtyDm1dGN8yW/+qXnFB43ZGc3pY8uqZKaCBV/au1z+btUPKJUHgE CN7Vy56LeY9vFbNX7ehHPvimTPpaGlPesW1BsI4Kitgc1+aYe3HHp7bRIwNefDRahqm3hUUAAaU6 IVudY1vxzJMVLAELDNrKsTAuMulZ4oCXOMj0iZPXHt/9oFUmP70GntQLROcrOZdLU+4LYyp12Ig2 97lmH/HJ45gqJJRWM4bTZuuDKj+xKWObMWqmGtPaB0prceOTmIY6PK6lnmwrxFJP7wPlYcxKb+1T d3pjaWwXKHorBhw3SVWm/7NQ8nzFAYeWA2KzlNZlXNKyfOyFdocZHcJS8zCeXXaMEggJj1MXU75o eJhjhngyH0gXC2MlI+GHS9q4bwyxiou9+p2MKd8qLhkzEJhj1df1YV4CnJ1TU+CLII3ELmWdMzXb S8z0G+uCnMJ5ctWAAIdu26WPmCg4ZRN1iV0GGH7CppAIcPnksaFGrZMjBBw7weiR2UwliDN5VpHK usmz8U2pGiJG09nhQxnGK3X8UjDsVK7sNtmUFDNXsiVNY5IvK8FtAepkMIFn9oRgZ7n6Mx4j26/2 xFKv0OghGlapqGIrMwicWrnY8G0C/RX5kq22LRy9C1o8jC9eFxsWrYlYs7jFqWmhw0qg1ykU6aFM XEtlmVI6JuzF3NW3jOdkMdkWcBSrYft3uABJni8s2AZtcmgR29SSnYuBrI8qaTd3VHAbkw+Uemh/ dLuXY0zPvM3wFQ7Jl6LKWElPt30Ui6/VF1tXUfRX5Etba1u4pRb6xpmyb/uXY9PD23IUyklEX27w AUwGlE77pAK/tADbxCS+RnMMVKm3pDi+Y7P17Ns2a3WVS+1ZDnXyypQPAEJXGZJZ4B/Ww0ONK5Vt vCVHbWPveSAqbe672l4nvvg+fv+oQqoFbAPOSQapHEtZ5owzJyNqYO0wO6Xoz4OBH4pvPDZXzMwr CDpGyhNT8v6zL+a0Exn5LMPnL8+Ip2Toj/S5YcKMst2PYaDTB4XS2Q4QYtyoN9SPbLk6xucN+iVg HWRvi3VUESVKdoVMK7ddX1H0wqsyMqSiZ6mPZaOPq1+OqG02vrRdh+k+KP7yEdGuDcgPMAdZ89he mB1vMYuhO5BZlv6psavm0yHZ5lU7pVh5mMhpQz/WOYD71hSKxFq2Crol4Vs9MkXDHM0xBd2TnSv9 BpRFyZsHthpLiPIBsmDIZ0sr01LVgVn5gRkd/5CGKPMbcU0Z2Y4mysIhX/vSU/v0NUu9H63c0Ia6 kif9KDq0V0p5MG92SMAHeeEiQnwr/qV7IlRrC4OnjtL5SvowGR6iByZ4ng9U9jFESrt+I7525Oji apkB+LAPEMd6HCutyXjnLWR8bHGxUI3ltCY5E7jiZX7xWqfYwCx7sL9uoVsKmIJKmCm2SGVi7gcX UzLmSa94d8II8AH7P5ES0+AoSInyQaXyjRMKJ7GQm1mKi4F9mcu+9Lu+ASbCcJt8KZuDv2oLFz2d XVX5KnsWkxiQNuS2w5MsA6sGEVAsbhwz6aJzjevS7MbZet6K0dyN6MTJ6CKEZJ8kOjFNLlftZHpX rkxrhM34+3qbNWvUz0nRMFyEdAzxQ588+KSl5XeWhGH4pgPI8p2sPqUF9ZbdzDGLiDcxhq2W/MKg zfTnOuF3WJlDJUxWWAfuag9sR54zto0z9K0uTtM28j04UlmXmF0xKw3Zsrkr9glEFSbTu3JlGn7J FbkTVL1sHJ+lL1T4QN+rq7hMUCL5jEXGmC2xqjHUwQKD7/qW7dh0PRSvb2j5OwtT6h8ahz0TNBqn tBVntzcem5RLeil5dd+xaXymfOcbZLRjl/AL0pAmLa0PwEa2ykO+yk/Snsg2lY0zCUK+YfVX5XLy dYXq3QdtS6E2+UTdbEvt5IStLACqX3IbbJy5AeYJAlVouqrYACeFZJLsQOskuV5HVZQvBVyyWc/V 4Y3MDdE/l4fu4UEDCS9qBF4n3Y5hQXX77Kfm1yYjSqlsUVbmeIFtEvzNjkGbI1Gp2j7bqFHNKzkM dbzLR40ak8DN6h4H1sEYqorBvurzalhWGBkwPiTM7Vaw0mNiVVDXx4CrIqTeB5dMq/7rwqQNKki9 XJsbk9zTpbx4W9WEnb9FrYDY5LLfFk+Uoq2J21Q20e6++iWGjI9dNG9nH8LNErIdvVkDjUMsqcyY ShcYJd9hgGdJdCjn/6R4C3lSKtnSUWWz2daJAvDBM+Tr2VLX0LaJ0viU/cAXlpS3SSU2mflVyrRF rZ1gHdo0zFNX/pF/tZQ+sgROX4dxRNbtIsMTc2g8ceGCgjpCJtyDs1+tutWoHASyHpiHzwso1fl2 aYp6EYVIragNqDLKCCeThCehjh9uUho3IRittdwMih51eZsuJXicqA9AIvALCOkRCjRQsZPxmmO2 09PUtcCkbYnatmnOK9dPYB4UHHGVpXfq1IC9Y2BgIJwpgI8Vg9pTy9kNyU1NT0JGbedL2Sw+shqi L2fz/JqxTNGGVG0tWU8fYDS51JWdInnF3mCJaM6NTCglYATj0D7pthahFm6/akHeCzfJ0Fj/f2wD mYZP5Rbe8SHe9okCGWKlTV1Zdr+zbKs3HzzZpixYvWgFDb/5wOMEToNU2VipoNWLpoATV4vIOPJT pU6tOQtXvJ2uyVINh53tEmNzHjdzgcAJUPrf98Ect9X+iHtcAd+OAiyOvKBQJXWd/RjTDBVK0tWR HXdwXC9u2cECZKMPXBhnLYP4KLYiUQNgNktGBk5U0M3I0w/Br/7oVzAg4Nq24MFewBDsEjxKbdf7 2whZ++r1xTd5bxtEN5WOlAAAQABJREFUnKBzyNT06HIWw9zmERds5evCFuxt8fNYonpeEDbxMU/D T3XMCU2UnfpWzSc9knI5yJvrfQ2IkxOshtSmXEG3e6qU6oZvtq/bWbwNjq7mecnlRhR4HS8SI7Uh k/HPW6zc9uOtAshzHPJJb9ODRGeHxh55+HwlGH6Vy2f6mIAQ6VKvP3mpqLYneHn1GGrVSx7ztaur O1wxMgftBTxxTlJ3N4NZ03aYnpXoaaK22SDapH7176p0xZBXmgUxlMcoUGkf2iLdlD2DW3KFz+EA M1M+bXFsu9gkzZjNhrryV37jT/a51Ae2Mbu+1HDxseHawsKrvTtobws2eaZoMjUO+lgQB3tq++kL OXfhs4NvNzVqcnA0V6ixga6VjDCIE1B8Ul3KVyzgaGaklAq9HSY1WZQkpt03X9azpf9OjCU41OCd M+43iZJmotc2J2MaCbeYwOveA1cNY8PKWnEVGGqGCYCsFRWmlkq0ykNH3SjqSHlwyElF5/5OQ75O tjJSkI3SERxAZKqx2KO7NYfr00s5qvhwm4/Udp7wKHc+UFDqBnlzqrPLUdxcfjIe8vwVcg1ugxs/ c0y4xlYjOHyDGNbVoE538bKHnwnFOvBZkyUjscln/Jux8LcPsai2oe1KoPxPm6Gn7eQyDQwTgVKP 3jgEWLbSDuRzMDVmgqRPHfAnx6xsSLT/L9qgkNLSH9oGsNogDpj61rWKbkGJ0kZeUMgnhdk1ZSs+ VmTss0p1IgOnkzAcc+G7D9ocJnDFp3i075GSWH0Q/IqrayQ/OXZMPsCWj2Alj5UlYNvCM5T3D1Lo CJNjv+e3b25T2aqJsdp0AtiwIFFilraCU5HBfhi1IRAtZsSytJV/bb73gZK6xo6w2wC/3C4qI5OL xdSTW7N2G+M6+BYw3VfozZwGVNuUbpiG8aH8Sm3TxTsd7ByaLD+xrKu99rxHLRx0kYqfi6LTODFz Umw15itWGd7ea3IDt1wqs/JKjUh0wBZ0dmDBkweVvo0rZGKZMtXzVN0jKVNxCbc8pM0mp9RNv0u9 1HtRRcaOkME2Dsp5vMiKLGdd+gB+J1JOi6HDaw6lr4lS/JtbBnKfys6esnkO3Oo/HZ6Iqa+jWJCY DOMBT1qUvpDPK59lYcageDbXPpFSeNiT+QbfylO1bfWp2idP2l20iVqy5Ng4K1t5/5q6V1lNu01O PT+25W1w5oHSUSLma8ZXXLs3W2gMTORDCzHLvpQ6cx4q3Ml2WKLh284uUMnZY+FDeTQVytD2qf1N Xb1sqhraOsRIPi9EUSvm8gGfcywYsQdUbsItVAfHNpfh2d0YInXASadTQZqNotbRBFBBLy15xcIW IGRyTQIefC2AJVdYYOctUXGBa4eAkD6jlI1WLlouCKm3H02lPdBBiLNZJsux8VE9n5QT4+wZc/K3 xDSsvFIXbk2odRDlit64XkA7Mq7bLUozp+u9YXz7qJuY0Dce64Q7KiXzZ8yPuXo56rqNa2NE7z+b NWN2zNYzVfLG8hWDLGCdLXQR30kZH9Elkh1K2nIFYRTYMh7k8K3HljWdHFjUd7UNH/6kZWdCb1ZN aj9iWdIFkqDJL1p2ssTJKvKiy95uElUF7Tu0s8G0XYL/sDaAcRjzieWEyValr2ZMQE376sCYekRN AbYiYRs1Ves+0Fgy7NnHzV6xdtCaoGVlPQCil0740WURbbIPJhVbGVOj+pJD9sdp6idzHDP04ysf +l8myiSe89RrWdS3yM+aoXeH6fUnGZscp5tUNyIevZc2Fs3Q+94EsXp8rW7GbYw56o8z28ujba8b Cx2yW7rSB/QoHg5I+l7tXNaw94JVe3HArqR9y8LPn6/2CIhwZX32T64ciwqxSxU340mg+h505gDM cdso4zGCDtvYqe0yjkenM/VwlcXzF46JZKqyfb/M9qCdsGH2zDla0KeCH9Y3xxTr0a49JCO7sj3S NV6ls17zwwatmLfQ/MAD22vUHpy8zlV78G3Gvvelram2Zl1ojorimTSpyBNhVChvK7XJMVd9BdiM MvMHMulN25YQEFSy9zY3RLzoScl4+9ZdYwQ9RUVQ4OCnKv2fLG9zVEs7sEM6U13ZbiXvjCWG2lum 8acnSAsInexSSrr71C/azWae0lq64c5hhscOSodV/Qt0/MQG9n2fUaEDSlkgyJXdxocmMHQXu/fN qdylID3fMvgFE5VJSuUqE9+8k9XjmceB6McLoml3AhivswDopOdFlb6M7VVnY9qGOYLUY0q/As5t ym4+sGzydRgqNlWS1miCRzn6UsYp9fV51bXg5y7xUnfzr/nGiMg2TYJPOqFIBxf23PdLuWi0nXaq y4UkmITENjU+tPkDo1JGCV/RAe+A2njM2HirHyUtMcjDigr29qvF0z0DtoZFtvoYeVsg3uJzOwho 8BoR2FydHa05gqgx0wMVKCdkeohBzT3RW41p5hMBn0lcKSJbz1cAVo6WXGsze4lv+byAGllXClBb GsApB2vRZSehM4KxBVAzQuTB8vE4fOcz44Att1eHG40rVnwzHlm/Kq9gdcO+LLGlktkQ287fN07d 4zgFazzufvyyuH7lo5Jh0hWmDsBz52wXZ+9/bpy07NhYsnDHWKiD6soNz8fDT90eF9325bjimbs1 Sc/uJlfkMNEdVGrsZ6mlskvpQ06+yYD/xVr+F3vHoUzx0LHrthLRdjwkQNuYx22X+ZIvvLz8D7UG QnZ82puPb5c1ZqI1IVEvYi5GpVk/+0QbZtoUYxu1cGkdoxYuGRU4ej5KxIq0UQtpHyiFy8LYVx6z yosh2neUBboEWEjPko/rx9fFerUbB8pZ3a9epLVug9ZB6Cs+NrIXJhHJCdeFpkV0dyqKreeKuR1S B4wgVJIu/ExlzRf0czVmRpyw+3mxdMFi/f7ly/HdBy+I5/QrFRyEwWSSzgNhj8fibffFh8bxuxwq iJG45dGL487Vz3syAnNE/XHxvF3jHfu/LY5denjsuGD7mKdZ7IX1z8YDT9wcF9z2pbjuhYdjzszZ 2T6yC3T09VpUcFIUTOxraqzZ+xYLL/yIl/9KVvsS097zXsOCr6oG3M7iu7ukxYkTC9Y0MuOSkg4n 1ebIfSu60OXLRlHxsa74l3F+PsaTqCSmzY437Pm22GnuvBjd8EJc/MCF8TL92NaikVSWp4ZRLc72 2/b4OGLHfdXH18Y1D30rVqx/edAeo7HDwmVx9mvOiyN2OzB2mL+d+uWmeGHd03HPoz+Ir9/+5bj1 5afUP+ckvGLjxOCpK3BNpWsIjmMku4pOBrptbdFtdR5z5OW820zZ9CfV2B0DZxlWi2qD525Tq8y+ gFnI11DmAAkljwFaVCiPYVw1sSU2C1vBIhFHWgL0pqtRtevannxdxed4US724w+OtAWbEi8PyGl1 2pE1/dZKKRpQOoibUs11dscU6lqmxTz1pPWeLEwo39MWJIZ+NQTHok4Cisag6PyxYkXWbZgcqZ5o 60+6eKckUatYkif+jD+uSPsn2ppNzLu4mAFtMi1Onf5BxpitnrxlhT8hqT7HJ7Zk+/rY1IZGXl3W okKvZBKCRRMnYzIBSwVzFANl6206szIxGq/NEx0+2hsEs5GthaAj3QSUpz+6WptUVbLDcuZp5lrL CKFri+ob0BxvAXFiUH1enFQN8LOXm+aa2qRM2pG0lKz6jG+V0k/s8EVOjxx8IYGB7GABZ3qa0jQM nclaBMvYciCdNl111KKEPbRSiHxNIORfKdXqmLNSfj2S5ElWiMYbAk4Bgs2eOGSAbaKsgTJdrTCm AfC24385fvrAIy35z9/4QPz8lV+I+bP4Bl76VfDVAUf1dcJzjv6v8bFTzrLMhVf9Xvz4138/Fs6a FxvG18ce258Qf3DuJ+K1S5e5fnT92lir90wtnr9FTDvgzHjP8e+PT3/3Y/HxKz8dG6brjf/mYiNN DpKyg3hzZaISZHyovellYDG9yh5ZBl3K9sJ0VmygLuPa1zlurhbNNpjVduTttpSB5VUTitoCpm6h chA9dte3xrItttY3hdfEZfd/I57STxlx5YJUllQbQONnuHZedGCctNuRGpSjcduj39GB7xl/K5R6 Fi4L5y6J8w48L47f64jYUQvp+QrmiyPPxYonbokLbv1SXP3cgzFXV1VaNCSlvoF/7UW05WzGnL5b lqAhUxcbivQtWAzYUEukxRW2OkOts1dopI06CXjvGz8Wp++2i0qb4k8+f3Z8/PbLYqFsJA39N0E8 4+Nz4t2n/Gl8+PDDTfr0RR+OX7rsc7FYfXh0bCQO3uOc+MNz/jgOXZIvgl2/brWuxkUsXrAw4sBz 4j0nvD/+4pu/EX9x47/FNP0CxRQupqrBdnL/cJX9a0zl80BmqmzFzldwvGiakkvEBMR/chzITaF/ lC5irzpjij55Mp0KeSoabcNBE/kZs+fHL5z1x3HUdoulZyR+7ZOnxGceuk0nA4pT6zWlPm3TQWzT FvHzp/9lvG3fvQz/sX95e/zpjRfFollzfHX1pH3eE7//5t+NfbfZxvVr1+ob2ZoFtpi/IE4/6K3x nuPeH3/w9V+Mz959qa/Alo21pqSc3Usa8ZMY+N9Us3c2UQd/43EhV1iO5BDTdWxKuCO0DB0b2amE rF98TV/ezqadvEo0aLU1aOTzTwVPcNle5kHPqyT4aJ+mrnETD8nKPu8HV1N8iw7HOuw+Vq+kCvuc hqwlb/s3l6Raltm/YS0QPcwP8Q+H9GHK756fA8givZyxVFy89TaxaMFcV28cG42nn3nB/QE7tlTd goWzfVV2k05in3/uJV+BbypsYy6EiSVKJqa+vXJxjQfIdgkZx1uLhtlzYrvttnT3GNdCjmMIbc8C cnRkbTwr3Zt0slyHMuO4nRItxyp4k8pZ9La3p7GhXx9/sVFZR032uN0mOYQ+m+sMSihNldJH12oB uGEDvw6kxZLumM3U+zl8VVFiaLGtqsOu7I+b4xUdtWgldb5myWXPZ6nU1FfaVAzoY5NcbCJ6Bs6/ rUaxGUd2qmewPI5VNzwrwUgrkcXYg7GcZTC1OtDQRSueZNK3Eh2Q5qIdoQO3DDqMl2XbwuAUjQO/ brenfSqzGOrwlSds6HKHknhBeuHAWlAfrmBUOvmg82K3a78UT6vVeOh2mPLwMBaz5+wTZy0/vqvy JXktBjdpkTZn7v7xR2//XJy0y5J45OEr43997+/i5sfu0tW3DbHDlrvFCct/JH7h5B+LD5zxR/Hy y0/EH954QUzvDs7ETrAcQLTDVmzgllmuJ+QLvUlXrjIerTOIOSMjIXwUSHUSbM52AqczORkpNhoT nIsqb9LAM5keUm3lWrWDamSF6VTb3hqWFOrAqrO/rGuCU+yqDbBxo4x816kfjbcu28ecf/2ld8RH f3BhLNBBb5iyDUSRqg1jM+JHTv4f8avHnmiW8y/51fjQxX+tAyUL6XVxwC6nxx+85c/i6F12c/2I Fi7rFL8tFyyKWH62Fy5//a2Pxp9c+0UFmgOyYdNunDOBvkMmy+63rpAlxVIZ0xODKLkNJJv9Xgjq rN26EFn6n/adT8iLf7zdmqfwpoPPi7/RAm697LYZZskcclw1Xrz4qDh9v4OQdnILqT9uFM7WW54Q f/Ejn4r9tpwfd9zzzfjEVZ+LO5+8P9aofqet94w3HvaT8cFjz47feNsn4rmXHo3PPfiDWLiRk5c+ uW805fRJsulb+pjjlHHWywjeibPdmrTTgfSDcWr33YkYw+JSnrB4QaI9ePS16ssAUk8C3mPZ8qnM z4QZAyMRRrrVIcTYIVHFHl7xeCy5qtW3drEy5bv2mDZH4/6sOP+BmyWn9zSCMUhYv1HtseP2J8bJ S/dsNVDFCY4OsDvv8Ob4y3f+eew0f1ZcpxOIT157ftz99IM6/ZgVu2y7d5xz1Afi3Ye9Lj7+zk/G 0393enzjiQd0Ja6dU6NQJua8pLjw5wZxlHBHLqdV3tr/9LVimrFMP5u3tpN2SkmpIE4qFBbzB3XJ Lz4z9pRubkJMH/jyKrvylEX0olhtjJ5uXled+4YU0F88b2ENClTHXOcrbl400nzyF0Cl7FfMRswd SUN39jVs49OgstrzH/zpaSPCpGwfR2SabMNAZsCNhPi1aXw1r1ZcXDVJAH4vyPDJAIintRRrvJCH wU1QV1tFKuy6OojRIzpx+8CHfi7OOG6p4zzy/GPx0V/9WNz9nH6qb/aieO+v/WqcfOAOrlv7zIr4 jV/6eDy4mrHGmEKRYpGuUhikIbF4ipb7/qog71cdi+122i/+8M9+JbYgGPKrcGmvdateiuu+d2V8 6jNfi5Xt2JXKCjP9p+TuDAQGNhBHv/KtrWkQ2tFkCbImcB8W3e3l0IqispN43L8k7xUJgnWcEwNz gFPjR//0uVvEmW8+KXZcPDtW3HJDXHHzQ3pXYnsvJsyF3fqJ+x++uyoruers/qTxXzpqPeR3D9oe xnJzV8LkiRvXLPGS8eIYqNTpVL39F4m5NPu0M5tfgXN1c7CCINYfmsq34rcTkyQwLxciLMb6yuLF CfI+ANKjSZQz122LL6sn13ZsfUZQblhHqidzZW3nXY6NE3fYL77w6B0+y4ZlqHFUt7OO3OuUOHi7 rfTeqJFcfKlxmERG9H6zMw99rxdvTzx2WfzUp98RP1i7Kubr1hT96eFV98cVD10cj658Pv7XuR+J nzrhZ+Nf77w0Hh7R+bdXCTkpY5H9nsLXLjYw/ZBUfBNYZGOmPkYdH7r0IZaVVFTqB2PShzyJUxgO Z5MfDsAeL3UkrqgWaLXKDxfSbzjo7boidJFvVxG7YRtYQovuRQsOjzP3P6IBAIdtagudbS5adGT8 2Y9+Jg7ZdnHce/8l8ZdXfDpuf+LeWKU2XrL1HnHKwT8RP3vi2+KXzv2LePGlx+Jv7rrCtxDRZBB1 SPzKg3s/gNDBvy1K9/tJwpa0emKpTraZ3WWtDK0+CE8N0AYprk1ahE6LA5a9IQ5bvGNc/tJzMdtX KqhJXHjXyZ837n167LFglhYII3r5rha8BEGf9WMz492HftiLt3vu/lL85OfeF/ep/87jBb2SfWjV 3XH5iovj2TWfid95/XnxMyd9KL728A0xgm042TVUGf1K+4xV1tKoiPae2J6s7LbUm4O9edGZciw2 3A/xo6UeD65GH6gwm8g9X0n2+1ercz3Qkz8NfFxH2aOWvyX2v+QTcev6Nb4dT1XzxILr9csupy1/ c2w7m6v7+lULFl+aH9we4/PiJ4/9eS/erv3BX8VPf/nX43H1MxZotMcDK++Iyx74dry84d/i549+ bfzscT8d//Gvv6UrzaoklV3kM1jOZBj6uGTYUqi3DaGWWtw6OWXcF6va/ayUpqoSrb2bDM+rrapi 8h5sGzvAkYGgF91tnYC9NHL+tL6gGsZit9DpDhjYkGLs8ljQw1SOEQZj6Sx67Wv8eS9WFqCD7lds 9rcKzPl1UC7aK+9lgY9hfT+fijf1p8+FPaE9y1n7MyPmztXzlf4msq6Cbb9D7LTbEs1zD8RWOy6O ZXvt0NdpzFdiscMvxNQXAXh578yZvOdS8eVn/lRHrPjJTH6rmjRj5gzxTL6kUYjai3/mbF2lUiOM 6WLFmK7CiRhz9LvSi7baNk4959yI9S/Fn3z2u3rWZaYWXOP6vWGuVise+FT4LnM8FY5euk+M+aY1 XRJMFlCzxCsAncDrBi126soY9Ztk+wY9K0PfmqnfWwWWK/tj8sGP5oiJRfNs8VNHIhbUOxYq8xjU rFnyU2fbG2fNj9Pecm7su/2suGb6s3HpD+5znCzoTQNphA6z+QDZvqnCJwiNj+FAP/SzfhReJSXu RD6fFkuPkcBDh8vyvRvMGOKFRZ41wJ5MbRik/CT16oKSYx1KNRs/59Z4wW56J8lNLGJQPpSXGDVe O9sg26fU50BBw+aBM4WKzmaCMmpk+pd6iQcVFaq95a5r4ogDj42zDj4zzl9xk/A50LFez+S8znpO O/BcfSlhLK6689Y4/qC89TrD/XVaLN0ub5t+5/rPxw9Wr4otdTWo1p5zdAt4jjrQV679p/jgyR+M g3c5KJYs2j5WrNXzc/rDjDro2yTKdDq1gRdEzQ529tdO4S+WZfKtA5WSn5Y1c7YbPYGPmB1H6ppk ZlUxaBy3skWyc1CFeIISd/KkLqO8GFSRZ+A9D/ZatQLveAzjXxBuUC1cNGfstedr46itd4uLnn1U z2vxQH4mDnSkdVosn7D8TbHPlvP6hQt+6wxvvcx5+0E/48Xbg/d/Pd7zqXfH7aMjXpDTnR9++Z64 4sFvx9Or18Tvn/Hu+MBJPxtfvffqeN6X/hXLCZ1MmNLnKxjKkJ/ormuhKg38VYka81fM2bc8DrkP dkHMGBICx31sbdx8951x5PIj48zlr49LL/2HiNnzfKBHU05TG/UM35Zx9oFv1uy2Jq656744/sBD bB+T2XRN2ku320vcm+Kr1/5D3Ds6FlvotmpdMZjOZDVtfXz+qs/Eh04+L5btdnhsM2dhPK4zaqyR N7Y3bUKraNjfUvVJKIz2zhXXpz89N1D0oxT2OCWLCjami5syQmI0bpKkN+W8M2+WPR8xeyvZXktl yURturHiPLEDJXtUg02dJaAO6meIMJa8DBpb/2Lc/uiTccjeB8Qpy46OG3VyMYtYSmv1TWyeN3NH XaU7JUbXPa9nEZ+NI/fZz77o7CTm6Hbs0m12lZbR+OJ1n4/H9csXW+jkruaHedPVl3Xl+FOXfTbe qwXcAXseo/q58ZwOiD6RUL/EdWKRIUjbymz7qUI2UfOsxar8hHfYvUvWdLePNXRkQpBzijkcl6xs wGZolFKJTKsm1M56n8R6bAD29CXnF88Z4KVSVmyS7eObfqWuwnX7NxI7YmBcJAVVtwg9R0JQcl/K rHmhZR9xTnlMSIaMqQg4pH/KWZeLN3QVrXymPMRIVPGR0XYoY1BozR7XW3dyW8LZvmy/GlYzs8HM jYOWLomLv39PbLPjXjq2cG0mU9k8pvlx1z32jGOOOTB23GphbBhZE3feelvcfOuKWKs5davtlsTh B+8ZI2tWxeNPrY1jTjwkFs2OuOP6G+LqWx7Q63z0yI/bBdzOaCtJs8fjXz/7D3HFrQ95Abjlkt3j Ax/48dhl67lx2LFHx3ZfuDSe0gWLbXZYEie/7tjYbYfFsX7VyrjhmhvjlnseUtvoqXL9TvaWO+4S p556nE6258WKu++IO59YE0uXbBNrdCJ74433xsJd94jD9tslNunxpJtvujVeXLMxtt5taRy6z06m 3XTT7fHcy6MxV48tnfSGY+KAvXfWgnF93HP7rXHNtXfrERL1K81zC7fdMU567bGx185ba/E6Evff fldcfd1t8fLojNh37z1ibntVxfztd4ple+wYjz35Eg1uf6vd+zgM6NVcCornN0vUhnHbjmTUw+tO qT35hp/RZQQUmKpag0OZrgU2X85g/rEO4+jKXcfeZRB0rfQkEXBMoDvmtKLCIMHViYt5QnnAV1nq J3aHXh561dUB3E562Q14m4xlWw28wq19PfzqMmBy3A/zdrPvtLj+jn+PxXscEScccHa8RmfZd69d 76se5Qe3R7bd4kjdrjoiVj19fXzn3ntzASe8/hs7qdHfbuNsQGMIm8t+rY/180kr4p+/96l4bvfd Y6POQhi89TB/tSMoxLrkPIG3xqPO8Wz1bpNBHfX1bRqTmwNcwi85OkKWWus1+fIVjGGisw69wAJI fSemFmtFZ4DrgGUNA8Cc2FIOPhYwOT4kV45uGo2b77o5jjzwaC1MTotvfuuvYtPsBeLOlBpotIVa aL85Zmxcp4X0XWqHw3xM5h1Y07Tw3qMtpC+47h/jNv326FZaSFuFNjP0LMacaSNx/vc/Fx987btj 6W6HxnYLtopnX3pBdc2Uzh70pk+2QPSyJWt60803qKy+CknntKAYgk2dQNTBLFEH4NNG43s3fyX2 2u/IeNPyc+NPr/iiFpiKqNuQyGrNpi997Lrjm+KUvZbGw/ryzfce2eQFHNjT9FNQjGweKCbx/rmk 9/ZSMyNmx/o1t8Zn/uMLcfjWKunXISZ0pXLCKLkhNMjWx9SB6ck11RYJpPsEZRKJwZTY7nPJW1Lm F8n9jr0+9AbKm+GIDtFn8eIs2aS2ftiAhz4TJ+aRHJfiFvaMjavjouu/pkn9NfHWg86OT9/0bd/W xoLCHeO2/Z6nx1FLtou7b/7HuHH1XlrA2QTHHlxbjDL9j6s9uf1Y8tTO1G3al168Mj57+b/FHrNe itlcclIb0k88vlIUVqWhpEqyM+e/9M19Bf+ac3BT/M8mxxStspvjzURtiTIZr8rFW2W4K0+X6mxx G2d/hifliCmPx+SM0ogqidoW6+kTiB0S4k6Ogcj9c0VV0/aqs2QZJHJecBgQJolQHNamhWntkNUU 4m2/JKN8HXumGEoSFRK8gzaCVvN936appdok/e41j+n2/MxZs2Ovg5bF9H++PPY+cC/dlNcP+qwb iQXz8jGUcZ3A7Xfc6+O//8qPxTYLtCqr9I5z4saLL4rf/dN/ij2OPil+9WfPiHE9fzyiOwDz5+aV u7ec+4a48F++GH+jBdgmI0+MR0Gxf/LRx7Souitmz54eI7c+Hq8//Uwt4Hb0eNooG3Zbfmz8l1/T vKurhJXe+rbT4mv/9A/x9+dfHtsvPSR+679+MPbZecusPusNsUrH4kXz58aT994QH77m9lh21Mnx K+87VV+lf1q3hu+Jp154OZYdeXL88ntPMe3/+cXfjrVzdopf/62fj2MO4Hnilt5yWtz47W/F//iL L8bc3feLj/72h2PfXbaq2oiz3hRn3XB5fPzvLo4PfeT9sfu2+fjCQa89Iz6643bxkV/8yxjhaqUk JrdND9LHpj9ZHs6rr9BvBEAf89yjPpFjeYg6bHU425wAL6W27/pZdpYEtMUWmQhICb7Jn825eorY za9NZ+xQvuecItd0IctEX86WrSXxw/B8toPHTExMquSVnn/xxrjknpti/rYHxRv3WB4jut3kSVeL PXhH9Q6Gw5edFnttMTuuvOPbcZ/OUkheFYMjex5/9kHTTj36A3HctrvF6nWrYr0vKWs6ajiz9EKn f7r8N+Pd//jjccMLT+kqiFZ5DGBheCHX7FHJblpH+W303JSPA9KE7OR6JinTxMXeiX3lm3Qv13ga fyfT+Cw3kGXS8WQl+5lonR/UO2t12uAvfjpu2pPno2n7qlv+LR4f2RSn6gH7PecuzMvfjp0YxM+z RDttc0y8YZ/946lHror/WLECQadauHRl6fE3tawH+fzoZRsxtvau+IdLPxuX3H6NFtWSUFW2QcsX iPZEIuNS+z42A7b/fFa66hlAx6C1f+YFo28gPvr0lVqUPRpLdj8xXrvDruqPWgbKDy/KdEAf3TAj Tt7/7NhSc8x3br0onlV/rQQ2DzU//vwKkabFm4//uVg+f7H642p9sYFbHNUf1SvGV8f/uuhD8Z4v fDAeXKtbgxzO7N4P97HrJzDXpwx4lX0n+yp8P6zaC4E0dALb0Gr1eHmTz16ZiQWtzc2xUIIF4xMb +kHrC9Ue0/Qs5j0PXxg3PL0y9tnvjDhy6+11izoXxdWnRsfmxmmHnKWTg4iv3/ztWElfI2nHnLNh dG089sJjKsyJd+rxiT1nz43VuhVb7ZE4Wrjo2+of+/efivd/+ZfiKd1GmgHMcLyoOIxf5fu5EKWZ oA0/5q3KV9kXru8A1BWDHKSdfnj+j1M2RcNqhx3hbY7Z5i3x++XLmmczQe+1T7R3UNGzZI4FMXq6 I91khs3LQ7TJ9lXch1LQSHUrtspDnrLXHXJQkfQk9DxTl0ts5TOPxYujejxkt6V6Zmtx7LN0NwVr fTz0+NPZYjqQjc9bHG9/x5u9eFv/4pPxxc9/Ob5/26OCmB6HnXScFjKLdPs07Z6hxeD0Davi5htu j5fWaHKcMTfOeMd5cfT+O8bqVWti/fr1+oz4M6ord32aFkeccEy86yfOjR/5kTfHr/zKe+KQffWT hEor7rs7XpyzdbzvQz/mxdu6l56Jb3z1m3HbA0/rzGVenPMTPxoH77c03vqTb8/Fm25j3nvbbXH3 g0958QYGP4vpRm99YCMnQVRou0m3ZUncHh7dODPOedePe/E2pnF32YUXxxXX36vHx+Xrm06PM07a L04+841evI2sfCb+7n/+dfzLhddafq/DT46T99k+vnvxf8SL6xLz6QfvjG9fdqOuQHIUffVU7ZZj B4leqhbnwz5R/MmXY7a00Mf7+qJuvocHbP0Sw6CSeOmKiocMDBmtZOgYK4QiN1mmzT4NhaD2CupS Yl4RKgkt7NRQGFSpztGwAzI1Qw3wDflLB7zc52Y89UFQgXaBCGAzb9rGVXHBjd+IDx1xVJx52Dvj U7dc5eeBssk0AGKrOPvQt2gyHokLbrpAv+f5PtQqaTIQxhx9m+LyWz4d3z/prXHcTkfHlz78zfjy NefHBVrsPbLy6Xhq1ROxTtyzdQWI927ZPXQ3/SBVAf8G7ttU9HRfMDFrCRIrapXcUAhT6JN9p/Pn vx+MpDYnGJ/bDkQSN/XbEnEmYBdjFfmGkWthVN6/kavJsawq7fWQc14mVquJIa9uYAyf4kTNnHjy 2Wvi8gfuix874Jg4Zec941P3361nD/pnOEZ0lej4fc+MHeZMj/O1cHl8va6+kcBhxa0vkzyub5dG 6PbjcR+OL991fdymCWuWng/TW6plJ8840H/Wxd9e8gvxSdlPHPx9YGMAJlNE5+OFqTzljwsidB3b rzLmqyS+vJTtoij1oDnyDFQwkhNufdQWzEGOFkJZbZ7c6Hu1I0/E16//Vpy75/vV794WX1nxP9T+ 2C5mTW5zZu8abz7sDK0Mnotv3nZxLD1CeVLzYY5Wpd+49q/jJ44+Nfbf+8z46s9dFP9yzRfjW3d/ N55c9Ww8serJGNNRbLZui8zUsyX417dH81tYfElI1+sN7S/RuAH7rmaF4nMv8qDczJmUFU/XfxqG AuP4VDzN2IJhN0VwG+CTk0EyS/solwscZYixYm3WdnSueQVaPj+lthAwckmjTRuOqM55nCRWN57U omvXroiLbv1enPCGs+OM/d8Y3/2Pz8YmPSeDzEa9WmjRgv3j9NecFBtWPxAX33N1nLP3R6QlFdFm s6atiS987xPx1oOPimMOeVd8batl8aWrvxiX3H+l5gbND2ue1QFCt7U9P7R4Y6QdmthFsL9Stoma yP4XVfvsnBmXAbniBKlvj4l56uoAUzzsk4ZBaQFbf8mqtSd9YDoHiTYPZbs2bJh70URQ2WT1A6dm s8cMfUNEasCB5nxr5xRgm0cC9xeDiQ9BJR5B8d72pY7yA1Wordur5adFB3YkPb8gZzBtipfyK+WL l7mFY5A4kySlOiLJapXpazK2nu2r5UFT3+KtHobPSsTAcbDdHWK88OKzsWrd1nHY0u1j38P2jF13 XxIbXnguHtVt/9cs202SeoehZq7rv3tpjD6+Yzxz351x9T1Px6m7vsa4mkxiwVaLY1VTvHF0dXzy f/55fPXy++O4N50Tv/Pr79SzYwvjqEOWx66Hvza2XzzXiymejbv/+ivjhsdyoUNbnPim0+LERO22 L+vE5ZOf+1bssOs+sXyv/Pb1dd/5bnzl69fGzve/EEt/6V16i8PiOOu043SFLq+Y3XXFt+K//OEX tPDcKf7bH/1mHLpnynWgyrRmbvFpMVKsZ2+1fRz2mmVmffSOG+LLX74oxrfeOZbs+uFYtsP8OPLY w+OxGfoym9I0Pcawzz57xF0P3hHnf+HJeP6Z5+Ke2+6NB659TLdXj4+tdp4f9153ZZz/lctjnl4n lFpaf2xjotrHgGBWAzZu2owEH2sbf5FEefqBZd0/YDAXm3YMUYaO3RIjwBgicYWatZnnM/pH6xs6 n+9TLt6aEpF7KPObsYz31AkQqSKrrBUKvPgYllTDWTRlN0vDul5vBQL5pGaHznzJdPGDSzZhlk2D DQgYNGo8IJpmHhK/6Z4L4/bnfzOW73d6LN96SVzz/HNamOn1Jbp9uusOr4vX6luSzz16aVz+8O1x 8PYtVAROtwyn6arJy6vuiJ/91PviD877vXjj/gfG+876HX+eeXZF3PaY7vM/cF1crAPo3c/cFfo5 85ijyTo9wh8bZvuwedjo5WvFDpPL1wnBbr787+4coyZUen8ohkytxR8HjvKh2qIwMuZpffJoS1vQ KZm8NK+ZnpVSyRWIZ7RwuUALuF+Osw59R/zz3R/VRJyXrem2M6bvGG8+XM99ja+MC265KBbuf7RN tU7hzdaPfl/4g7+Ndx1/hp4JOTW+8nO5kL7wjkviMb1m5CktXEakfo7ew8cDwHSJtIPhQVJ7Ytsg lT90Iry1X43FeXgpJ4Alh21IFb0enLJTGRFbi3qQJm6D1ZWcjXHJHV+Lp0fep1vE58Tu3/pEPKTb wQz+Mb2u5oA9XqfbdVvHPXf8Y1z79GOxdzuQGVdx4Pbo489cEe/9+w/HH53323HsHofEL7xVHzn7 +JP3xW2P3xQ33vv9uOS+y+L+Z+/Rb7Rqgat7yL7qbA9yg5nG1A5fMwLUpaU+CTM92fp+CQ+08ijL xKj6s2uI2SQWODOuyQmLE/EjU0FvcqkzC1NAWbTsArHw2EOvj8Fpe0DYlT4VZ+vZtQtv/Pf4zVPO jjcd8bb4oyvP921tFrhjuuV0lL7ZvP9Wc+MHV345bn/xuXhbW0TaYl0pmKn43vvwv8dPf/qX4/ff +utxyO7Hxq/z0bM4Dz9xt9vj+ruv1Lv/vhcPPP+gGnBuPj9s69mof6hdcR3zbHMG0/6Uf9T17ZWe DmlVB9tUqXCqzvYbIHUWvfbY44jqYJJ64COn8uS2L6FJ++LLA1+PwwoLqGpuxDazr9lGVEpdnTCV mskyhdP3hOLE6j6+5sOP9KxnepXcUB++UcY29nXQZo7xbV5hlx3UsyB39CyTc0Ja9cpKN7y8Slfs H43Dli2Pww46VK+ymhvP3PNkPPYclwyUhDWu13k89vSL8cbXHemFyY/7zCyrk6fPr33+mbjz9kdj 9tzZcc/dN8WTq8+L3fVM3fZ6DuzAI94YSwZfVL9l/PG4/tGHmvCmeGzFQ/H8yrXSOSN23HXX2GHr BbFoi+3iKN3KvP7lbWN+dsk4+bwf9afXGrHHHjvFvHl5XL3l6tv1cmudyKx8Mm6668EJC7gGMRR1 u0Eg3gt1i3jRFnnreOmhJ8YnPjtxSbnVtlvGv194S5x01D4xf8GW8bqzzojXSXbd6pVx0xVXxA1X rdEt6S3ypEj06TrJncWxQnEkVX8l7zYzeXOr8tEqtWlry+KnPeDeXAJeuKir2to3OlitP9oedZbs Y1nv6JWhBuoGSHZsa9Asn0alkPlQ2EZQGVw43lMtRgYkA8xXxkQpg3ukDEqVMT/Po6CkM8MDbFKK O53pFq2yx1/X1eIM02weRmgidCOQb0kXH2PlyzfEhbdcHQedcmq8df/XxlWXne+rHlwmPnG/c2NH 3R/5yk1f0xcPRuKwCrCBZaOUztai4KmnL4n3/t0Ncezep8bJ+hy/31Gx13Z7xqmHLtXnbfHLY+vi ipu+FL/9jd+LO55/Sg8+61s5soHJq+wmXvxx84eUg55ca1bzElDFT0IZb6Ewibb42j+xZF0fZ8er gi7e1AS2UuEqC595vSVQ2NdT+rMMVVHbxVJ82FW81oF06jIqhWoD6J0sMZymB/IviIfWfCSOPvCs WHbhn8Vd+sIBV8/G9E3LvfY4IY7Xt60evv9f4/tPrIgzD8irFYU7Uy9ffe756+L9n/ygFi7/LU7W pPbhcz+uz+/Fk08/4IX0zfddo6skl8a9WriM6pm52e2LEm4D2WNjcyPYjK/9yeDB0RmN39TJ7PRR +WpHRcHtavbCIZ40OP6nBNUVoC4W09SXnnjm2vj2nXfr26QHxdl7HhF/fOvlsUBnjGOb5sTrD3yb vkwTcfGNX49nN3BG3xLKdUbHGJmrSfS+FV+MH/8rXTna+/Vx0j6vj2P2PSz21CsrTluyb5x2xI/E r+nbYRfrSw6/feEfx2NrV8Z82oJ+wJ9sxv80DnzylYiLWZNFZF9B6NoSPgenBIiGIYxClew0vDbQ hv3GobEkluSkZTmjItw87jueReBx3wTYHwvUxjpUcEpeZRWzzmy1C3SeneuJDC29TuCx78SVDz0R p+15Ypy68/7x+Qdv17dIZ8QGPZP55kPO1qJ5LL6h26er9Axi16eB0YfYzBPvDXf8Xbz9kUvipL1P idfu94Y4atlBsceOy2P3XZbHWUe/K35jzTPxtas+Ff/9238eL+jLN5xY0l044SFK/gNQZSm0scrJ VLaZsJ9YQiFMfrkqkoSEuZB6Yq89MN1YNUXECYn+TGdFGAnt2HTqWgb7Wj2/DmFdVtTjZ0uCI71p XeNrGBLKHF6KDT+V81zmnDWLBz62htKGXMPQrmLRLeRalZjM5xNIiRg+id5iPwddn5TaFgQz7igr OwYiIqsC9dRnyaHCHPCyL9JXIagfNFuaa4YqXNqZiyYYlgtXgHu9uFkxrj3106ePxl2PPhHnxIFx 8qkn6ZgScd8D9+rXVpZQ7cdIFupB/A/+4ntin631UvmnHotvfufKeGnGLvFTP3qCzbenLSDTdWWN i+4b9Y0yXjjP3SXSqqdeiqeuuyle3HY+U4y/nXr3I8/5ZN4MatWvf+H8+Nrld/l54l0PPjz+8Pd+ MbbUe+Jeoy8dXHvNqPsyPfrqy74Xjzy9yk2H/yz6x9dtiDM1P5HmzJkVm/im6aaZehZvXsJrW3Or CZLjG61jenxkq616HuKocyanh269Lq6+4wm9U1HvpaNt9S3TZ1bcG7ff8HD82SdG45jD9oulu+8S S5boBecLF8dxp58Vo7pj8yf/fl8CaMs3RukXynW0LkOjtNTCV0XHBd+qfWF1HsZerGtTgoGGQZVK E3VmrEqhahU3aH7uXZKD30LtBQuQwAxau6Fk7XDbKvqdKkErRDqnb7l1HKUBQnF1lZMc6juxgzEI YEkUAp3cPK5IHa5jU/fDilk9Q09GxSVaXH3kdafGGw4/N3a+8ovxrG7JzZyxW5xzxBt0u+rF+Oqt 35UB+ppyyQmK+c09U7uZOlffpLfoX3b7l+J7t39FV3nmaQF3QOy70/7x2uVvjbcccWqceORPxj9u u3u886/eoasqI75vza0cGct/axANfiZFT+AoGMRIvH44W3tPUu4Q8lUswOT0lyKY6cEOT0tdfStn p5CgdHWpsaOVA3nuu9qcYFpxOJlAopw0O2MfsKpS+iiK2sCLJnQ1fbqpF8++cEN867Zb4meOOSzO 3fuYuPm6b/kh3Q3jM+OU5efp56AivnTD1+OJUX3bska05KsdZqt9Hn74q/GTn7gmjtOB8mQtXI7d 7/DYc7ul8cYdlsUbD39H/Mroqrj0ui/Eb1/wB7Hi5RfyQEnwBnEitr3VZX3bM9Eq1YTsgmTxmwMI 7gAHghfZIImQt5xUaZ8pJy/yG/WtjhYGCjFtbGV884YvxbsO/Z0444iz4+9vuVQPF4/FonkH6Pbp cbFh5f3xtduvCvztBIlDwwZz9nS90Fe/unDhTZ+Lb9/8BcVxYey3/fLYe6flcdqhb48zDj4+zjz5 F/yg8Y/9/fu1+FBfs+E2HgemTBPaWByw5fSDeI47RcOyjgG04STYHK15oB+npS5jD4b7H1AMg2of lYEYjsPudhU8+AA7G7JNn4vNPsjJBTVZEMVMtxn6WqK8Yf1Teszim3HaXrqtfdDr41/vv0kmbdIt paPj9Qcs1zPVN8Z3HrhFMdfBp/QRTnCMxQnKHJ3pPxJfu/5TwvqcXl+zOA5YsjyW7XRwnH3EO+IN rzk83vnG39KLp7eI937hN/St6ozDRg6i2KU/Ykbf9EJDxFKFqfap+Y5K6nofW66MU9H82lb8e17Q lETwAlD9vW439s6puuIsTMsSW4nxYdGaRIB63spP4BORdsYbttmH4YSrpWYcj2Xks6Clk3GYekuf 57SSG+6ZL6THZrMR/EZe0thSfukAHvSmQrIuWYh8I5RQo7uoPLr5m+7+DorsTKhcQBP/ViaTOhNs cjtkfNEuToF4bLXnvVJCCymdGDx820MxIsK8hSxkNukK2iMxrlupJDAXLdwmttuSR1E2xQX/8uX4 1Neujx/9yM93ZlhDs2n+NkvijDOOj3/51p1x6lln69dCcgH6yAMr4vOf/IYe0dUdEY4VwuWZsyV7 HWg9bOSNFm+8mmRarHzh2Vg5Mq4FnN4kIAWrtDBapUd1t1Ld+Krn41+//O3YYe+D4kfPOc6LxBu/ f3O8uHI0tth6dhxz2knxvTsejk3bHhAnH7GswyeQ9SjR9AVb6FVLe8Xzs9bGiYflO0T/X+beA+6z qrr3XtNnGMrQizSlKYIg2IMK2PtVNBqjUa8mmph7Y+I1mty8uebN+0ly1VyvkcQSYzTGSsQCIiBF EQWkI0gfKUOZxvT6THl/39/a65zz/z/PDMS33Luf53/O3muvvtfeZ5+2D2PAqpVrY8mS1XHEHnuq j2yJS885LzbvdkC88U2vin20uPH2iQ3x3he9Po47ZLe447rL4s8+8Pl43FOeEe/7/TfH4xbMif0P 3U/23dm12Ry9QLHrfBbiJt66hkudZFe2Tq/iMFf9o7Cg9rG7+Q/cwtkZn+SZGOjAHyV+LLWSt+k1 /+gCqCIuKR/z1gFGgO4sqdpnGsLp5RVBOqjgBWUPrIylTD4HFY+OgJwMJ4ceZjfQh0gSugfVARhP 8PzJL+69LH62aEmc+vhT4xSdZX/5rhv0evKp8eyDD4q7bjsrrnnonuCLiF2rwUP8WLphvW5tbdek ZK7eepyngdrs9XzMnQ9fE79YdGV862dfjK/+7K3xD+/4RBwm/u86+SXxgR/9m4JdXwPodEXxtNUP INnmhA23BKpTs8F+wVb4kLr2y3KHr6pJvi1c/NnRgwijdCFZgsb+NLxVpoMTbuydb7J1hVNtAHqx avnpW/TWnyYu73rWybpK9Jr4+2u+p7PJLTF/zpG6ffrc2L5+UXz75ss08e2fjcNu5h51C3CW/L9V X134wY1fih/c9DUNELvGUfs9KY563HHxohPP0HNlp8aLTnlPHLLPQfGmf3hbLNFD6XmMlDL6t63o U/a1fLmq/FzxmCYMDTHB5A0OUAxW/DEkWGAjLf9QP0cHzWvu+EHctuqDcbzejj5pwUfiB0sfjGc/ 5eX6/Nu8uPLyc+OOVY/opEGDdicaPyg25K91ExrSdSo9T8tRsEyFk96WvGXRT+OGe38c3/zZ53Q7 8H3xybf+RZygL1a88UmfjTOvuH7UZBGVjb0MOKWmTfssVcHVKlQsUW6pYg+ePmsUDqont8JKmXWg zC81cJBOI8Et/K49BKnxoXNFz67PoVYrdXZVrfjjdx+wQVK+SyrPlVt/eMM58dCr3xm/dvIb45gL PhdXr1qhydwZcYgue3zn4m/G/XoRZOb2/g27EsbCyut1q3WaxhjWhuRqHGn71jVxPWPOwkvjrCs+ FWc87y/io298Xzz/We+Il/7kC1o4+DYtgaNLKoxb+i970R0foOZ4sm9cn74dqW/+7mHttp4A9oeZ jnId9VMv1XIao1GcnvswB061fwd3m4pTMfNem9bWHR4ZbBKckY9+M26ddSi64lcMKGMW+479qJ1d vTONUCgmk2ySY2wq2dQlAlth6E8kO/LLjuA5KReDsgNeQ781PZDBumgk1mhbsfSeWLx6Wxy6u7yz bV3c9dBDseCIfNuU+o16mF8vpcae86bFK9/8pnjqy14fxx59iOm5IDFXOOuyJMaz45W/9a44/YwN usWY48aqRbfH5Tcu1Bpr+uSe7cLe3kYtr6aUa7aVV2kpX+1Uzb66yrXiwcvj0p/cFq97/hPjlFed Ecc++/kxb4+9Yx4fZ974SJz1+X+Niy+7Mf7jf3h6HKjVHj5y5pP1Nbt5GudLMakm4UsX3qer3jpe z5of7/jj98dvarmH2Q1phtaAi7XL4pIf/Ux3wV4Shx7/nPj4p56krx7NiwW7ce93e1x/0UWaGD45 nnvCofHMF74mPqar4KsnZsYBmryR7rz5bi07woteLsZJL319fHDXveJvPvb12NJ8njVTt+94jOOv rjlVwJyKD/hUXRcTPSAroQGm/ZB355Z2NR2/uxlgiu5cpJLHHEAwp5KHhlnbjXIFVjHtFBBe5Y2H uqLjagVnZTV5E1pLiB5NzLL9s/EKlSZvFAv7oE2XUEcuH8lOGFe2CDQaPs90VMI40bFuWPY6yvrp wDexYWGcfdUFYrK7nsF6mZ7J2h6nnXBGzFdfOf/qr8QSvY1qJ5XKsNBnnWbOe3x84JV/F3/zyg/E /lqs0IsZgqPfLHUQPs+1i97u+fFNX4i/u+hcVUQcffjTY169ESh9uEJhbSUAffWP++07rsZxAPPP 1I25o8xKyC7RK8v5JC8Z1ACHJ4xtmIlzgwCSdltFyB+Bws8HTenhlaBVLrzMTL11zKjKOsMa/oqV IofK15jErtrAirk9qFUSMi963HDnxXHT0jV6609LM+x9WKzdtCGOP+LF8VR9suWGW/Ss4rKHdK0O BZMMu0l8uH2D1jdat3mDWE/XLa55ep5Mjbdtfdz64JVx9pWfjfd+5uXx1s+8P5asn4gnPvFV8Zbj T9HachoSULQdKIk9HhTF/rxYm/5JIdo2Y4m/7id7OcF3nGNj0wka8r5aVzDbrAIy+eEIyXaWkjK8 WrFyxU3x7WuuiBm7HBIvf8qpWn5idrzsqa9T3UR875qvxdptGjShhQWJrNY02n33E+Iv9IWFP3/B 72h6J68zu3WlrjRrgN5FJxmsS/jdKz8R/3TFFaqbEcce9rSYqbdUi1f2XXQn7oSCfTSufvmcEzpC mckuUbX9JiaQZJ8XSzmAZXVqPMBQbKQMX3zsW7aiAWZ8wRDQUJpcyeZPzJFNJf0anNwkPf2nyqCp oGLCaKNeFvnUz2jSyYoTBy0WDFee9li87Kdxwc26dbrXcXomlu/P6uHrp+oFEk3Ezr3xHF0F0cK8 xQNCseHN6X32eV789a9/Kj54yps0wePg0ORIOI9ezNf4MEvt9OUf/pWu8t8q4+bHMboyN83tIT8Z X7EIS+nLGXedyXNyxs/2tXryjLUzhCx0tZto5DToXQe+fSKAG5G2FY6KtAU4/klNxvwaE8BIetUT CyOJcv2UdbuYmeOm4wuWeGZsJA9iwcGvHankw8+W0HaVuBKicc/tjw6ibWTGyHziw4dy2ZUIQPof OFbblblh4sFxZOhXP/YjWb1uwm2kZQ9708FmqHOyzTZA5VTPYi0/Wdkv8OhkiEflq19tk83c1l62 eLFfVHjwoRWxasXKuPbqW2LRoofizpt+EQ8sWuGvIFBe9NCyWPzgffHP//o9LZe0JnbbZ3+tq7Zb /PB7F8etdz8Qi+5fHkcctJ9uv6WS61Yuj5tuvFP9VS9TbdwQ92jN049/9HNx30otXi/ljOY2SBuJ 7/vulZz7F8Xq9TpJYbFc/dauXhs333ynddo+e884ZMH2+NLffy6+/r2fxiO6Srab3pidqWdL7739 lvjrv/ifcfM9S+N7X/rXOPvCq2PV2g1ey3LVQ/fFL375YPOe7ijoZOa+X1wVX/y3H/kTXes2bdYt 4fvih5ddZzkLhcvbtFecc3Z84vPnxv1LVsbMXXaNXefNiEcevj/++eOfjPMuuyHO+uKX47wf3RAr 16yPgw5/fDzxqINj3YrlcdG3vh5fv+gWrcGyMr533iXx0JLlsWbtxpg7j3UfM2poVsYcfnzek36V 8ZMx1Y1HXYyBT38j0Z6jx0RfeYapYquO7zX3MYnJ+jhooeOq6kMVI3oLtVXDr6POTOnS3vsAAEAA SURBVFc3gKPYMLkjDgGPkp+K545ICtd60eEHyfY3F/ngJ70I+EkJkAfDZmehaA+Ec5bLf/6tWPrK t8Zzn6KXGS6+OF5y4imxdfVd8f1fXK3JmBYb1KTLg01jPk0vMWzdtle89rnviWMWrImLrz1LnWaR O3JrWWHCXZMT7R9Y+rApWfmZtdDydgAoKNP0MgZFBYp+3cFO9Z5ctfrC9r61XfmJInnXNTvLXMgd kPDWH9+azQlktjvtOsRt4rwz36bnWDMM0XaQlzYwpg0YVSkMBMGPD4msW3trfOvqH8VJL39lvOLE F8W37r03XqwrZ3z4+zx9gmi1JtueVJQU6PQsxLw9Toj3n/6umLP+zjjz0n/U51sY6LGUNwHnsBC4 0ra44JpPxaef8NL485e+KJ6kifScKy7QgKXW9wEBbLzWdxqoSI4t6nBClwYGdLAdZXQAIHxsdPHI NrCaRYYjdMSbpbeeL7n+m/FHp58WL9RE4eibHowXHX9crH7gyvjB3bd7Jf8NE+JTKrCHVs+3vPVF vx17bPplnH3F1+P29etjFkfQDhELWeNMDx4vXWKp9pPbpJRgz+GTnXQsdSmPJexBNCgVf8jyGbh9 lQqm21LfGisMKxziIpHGJIzyNjcmpQNc9KxHESYRjwFKHHxywLWVzD6VUtfamdTGS++tqzVxPjd+ 6+Sn6Lm3l8a3H1oQpxxxSDx013fiikX3+bnD9eM+VAzOmn1UvPNF74yty06Mr155diwWLB8tKqfS Ghrk9dzRg48st0jagxMdruoTl9XX3HIyYGC68R/rpmtPSWQiRGJy4rHCTNFJPwl0W1ow8pquzT0m HNmoAr0M01ZtycEJuoyOEeS+oHr6sl3foB7v8Ai0YmXfqO97+qB908TYqFO67VC1koY+5GVT4ULL 0OsyuqC641CeKqc3GZZThMWTvejMs3w2rBvksQNhyIOE1LErPyd40tZjsvnrBbiZm+PLnzkzvtyw 5ojtFz/xP+NfxNTLrehIs/Scb8VV+mXaHou/fVbccdVlccA+u8fKJUv1MpPWvtRFBZSZ0InCSa84 1qjb9CzsZ//qv8fW/Q7WM7caH+57UG+5bsmvIAijfI0juX27/IG74kP/6c/Sr4LxNQPSTD2m8umP fHTQVlJy6/L4lzM/G+d/56DYU1fEmBDe/8v7Y+168dfVva2i+fwnPx0XfOfg2Fu3O+/XSxHPefN/ jGMff5B5EgvT9SWes//5C3HJd/eMvXefF6uWLo8VmjiyuC3OxK2zdFHlwrPOiisuuTgO2m9P6Tk9 HnnwwVi8Yr2/3bp51YNx5sc+Gd88+HFa1Hi+KLbH8ocf1gLGKzVx1BW9Odvjh/LXtZdeELvpZY51 Gj8n9Ly6JPTJscJkjFhSZLYGLf/U+NYT9DmjNnw3e1+1w5zjVDTm24gsS7DGSkdOpU4wkSVv+E0z ZbOrC4iTSjj4+mVSYLYDIMGcD8y22sI3OTCHssmQl4okL5ez1xovzwxb0AMRL3PoeJrpCNz12uBw zlT9h9H8A/fAaPG5EUyXoXw78/5FP41L7rw13nj80+J9L/mDOHH/XeOan34/blq2REG8iyZrHIEJ k+SFlI16ruWe5fdrAndIvP7El8VF934ytmpleztUQvEd24mts+KpR+UzAyvXLIsN4jNXg4VtUr6u osE+r1ZlYLjebQEjZvMo3NTAIBrKe+fUJwVr4A6vodSZc0NvsoVsmdoMEnILAju3jesFdTtgGXn+ G6YYg4sCeaWDff5oMuOJjIOTqYVcukyXbdM9cZmIH15/dqx9ySvj9BNfHk+86hZNpE+ODUtuiAvu vFnPfencjRE/BVkaD8XHtAPjN07/nThg+kPxHS3jsmzlKt/6AhFZJDoak5luIq2p9vTiBQtjtZgU f3zpsybgqkRkdWTy/OwnMq0tlesTNPhKP777CgH21gTU7SzslNvIOGgLZ6auztx69w/iZw8sj1Me f3p84MUz47B50+Pb131Hn2fTum26xeArySUNvprcrtPzcfesXBcn7HVwvP6458V//dE3Y9e583U7 omkuvG0a5LZP2y2eduSTTP3I2uUxgf/hgT7YTQ2Nxk4/VU1OqqcOfHzbxQGYJoKq+RNY5VUHLu2S caWSB2Hh4iAT1xY6fJg6wJYnpTkQOg7V9r46CFw6GJxigZgJbVSJHLrOkL0TZVULEHgyr9Hz032C l8aH2XqZ4Ro923rrI++LY459bXxw27F6pifi0z/7Vjy8cSLm6oFtaEuS85Kx+pGbY9G6LXH4nsfG y496Wpx5/Y90YNilxUDG5jYdmGbM2idOOOwJlvvI+hX5MDaTCaW6HeV883PWUIfM9E/ar3xrP+vS EMkDd5GC+DgOjQQHZez74ow0eCsZrh1yvDWUGpypTaNFLvrpRxqecLofAKSu8UvmOXEqqbSzccBF lvCTtuluuFBE0MlS3no1uY4raKWb46TZZRnCSe3aOKtCjYs+CYBTm9TiL1Jjm5IbPToVo3ouTKSd TlASy+yLT7oqfVgugKl5kVGyvpmF0LmaIFDkCOArsPQXEmMfO1faedbXMSAdAftW6+KlsfyhxTpp 0ZI1mjDB2X4ajFszNQGbrsF54V33iodO7jVx4ZNVtLFVEXtioP1briVSiSxDcgN8mHheC1bLdYtX T4PYNm4F8yku2pz+T7d76N779LWS/GQW+pCYhHl80cWFWQraNStWqF+t8CSSpZBQLv/ESLrO0tn6 +pUr4w7hoRdyZmvJlMRTXrYtuf9+rSeaGtN+M/MMX9JErzOs9WvW6gd5H8+mpyx5jiL7ziSoqeps b8csMSS+zmelcXCSaVWiBdFgOF+q9s9+kAhuS2VJ8OsS8po+LRqSOSjdcyqdc6BuSgpGvv9l45Wx 6cxUDgX5gUsjulM1p/jyYlOo8CxbyK6TA2gApylourrEyK11KxcBYhBIvVHEwZ8xn/gMktDIY9O2 rohzr/ye4HPiTae9KeZyu+qKb8d63QOygxpqEmqrhQOnTSyKs378XYPe8Mq/iA+c8usxW1fqVmux Tm7nrddr3BO6z/6KZ/1pvPd5p0rOurhUn+RRWOYAWvLhIP7eYasCseu4AtZktHzswBAevu5gwhvm zQzj/evYdzjAC7/asgaboQfJgzdMVnUUNKyWzCYPnCYnO1DaYlvFpGPBQKR2mKWrYXfdc0n89N4H Yv/DTon/8pL3xtG7z4rLdJvqDnVKt8SgHXDfNB0o16+5O+7R7YSYfUC84YQXaj219VoEd7MmzrrY Ld5cPd2sZ5G2qG1P1sr6pJVrl+rWlzSoNrAKWJYxQx9Iu4EBbnvyIvPATRYdBr7sXSW/qR2zLUXu EbPs16QnRQkAw0oCWh+tWLdhkW51Xqhl8vaJNz//dVq3Qpf3r/5ebNXD8um/NrAWqYbADetuVzxe KIVmxbvf+D/i3U99sRbn3JLxKJ+s3rhGiyTvFm95wV/Gm576JK37+bDWMbxEfuc7goo5Gea/gU0d e2XKTg9V6Cls+qoqcEn+WqNSazh1DGbGAycRjE9do3XsIVdk9Df7nxIF4cDPPLUnGZ+DC3kA8EeO cOk7/rlMJSxSbpba1kqIXm2QYSBOQyEGurdquaA74/wbroi5ux8av/7sF+ntuQfiQq0Rx5vDXVsO aHnDfaUWCv/u1VeKwbz4k7f8nZ43fHZs2bQxVrfb/Ws3rhX9fvF7r/hovOTIx8WmlXfEz267WreM 5jSe8nQXd31fH9qQ/sIPyikY3R7KD/1g25v9qMgPvPQxgIHiMFe5ILSX/8Te4xBixIsfZb4pyQEn fd7XJU6WSyasRZg/xCjrMnBJma6DJ/0FGPTQpYzsk4kLUaXUElyQKbVsFijTBxu/IWXy50RiYGvh waRLlR/ISnGpH9txOsUN3do+JgbhleS5ayxLL+g5GOPDktbxhA4RrU3AqeRmg6b5rCdGpcRjz/d5 ZzEhA0+p7xvTYpM+TfXI8hWxZPFyLYbLZIZJHi8sCFHoKb75qBdtPmzcr5ttLqPP2A9b4OXJlPSY PUtLh1vnZGNy4XBljwnYTM32Nq1br/6zKpYvW2HfJE/FrHBYi842N6faa01XZMGHb71OZ9YoOAu7 W7e2ZeI3W8/NzdLPn6cSH+JAqMLHn5LTfiYZ24BHffmYavqp6SnAQz8vKA+8lb2nuv3c71zQRji0 C0tGdbyJXfgpDXkkBD75l+ecPWZKaI1C+PUhnqSFCkrl2WP4Vg7GDcgucZQzvFWAK0X7wUkAJYt0 VJJvCggP3PFkyBjcTgTWaDCPQcIzW3Uqrv6gxxytAk3ySmPoJVGzFbE/ueXsuHHZe+OEfebFyvuu igvvvt5XfVjzTa2hDqCZvNIcHfBw/iw9mHzhFR+Jzx95hL6X+mvxod/+arzm+ZfHVQtv0FuVK2P+ 7vvEkx7/rDjtySfGEn2x4bwrvxhn3X6jrg7pjTV0QTDKYWrrXNiFC/Ieu0sgTkp5XMsGZJAD06nL FCB9baY9aMrcVH6Gcd4SEwl6PsY01NwqidZXGjkoKmEjPycbrALxs/mh+MaPzonT3/6e+I3T3hDb Nj0S517+rZjQpGQWtINnGDlwTtMEe2Kj3pS66Ctx4pt/L97x+o/oKtXa+OGihXqhQZPozZvVWXeJ uToLO/aYt8fb9ZbrulX3xPnXXKj2VASIZ/3ZfiuF0da6KThWbFXeuZOVIQ19lNRAD8DEoFATm7bj WQrFk/TT4/J+7si3tIHpTaoLr/96vP+VvxEH6DnchbdcGJdpCRWtZKerbdJY8TNT64aReN6P2J+t AP/axX8eJx+2f5xy9Mnx0T/8fvzGzT+I6++5JZavXhe777l/nHDU8+LZWtvwgYfvjO9e8vG46MH7 RZ8P4JdeFYtmPtWG0V06ug/vIChwQV1dcL8sF7kimZIdFDtJheq9O3DidQgtgwfLmxVMNQawRzUf YNzCU/MwjnCJJd9Ck2/n0h6ztrqt/Bya7J2tRaD/Tbel3/38F8SuOvG/6bqz4zo9kzmHvsyzQfrN auPKLPwjfnqMPD5zzh/Hk/b7ZDz9CU+Nz37okniHlhz5+X23abX7TbHnXgfF0590epx46KFx34O3 xr+e8+G4evlS8Zmb/QMm2NDGs87WyY6QJxI32yUx8Q5JNZMSEy+Pi5NqBBiLfVDgwYERv2aTcLDR 4hD2c+tBqoDUrQKBChyM/Oyf9ROw2eL2gbHgqacJINJf5Y3gDWLG1UoY9DmZTC1zwoRGto+2SA5t 3++kmlLV93DnOmHSjknqoDr1TWlygBUb1rv/iKZuUQ9I+6yUz/6TIHhySPCEE2YCuL4Y4zeBq0jG cQGs4Ss7kqgn4YtKlcP/XI27+6cXxftvvFxfDdmgiw4sSZEymNLkXbiiKA79PvVXfYrpKwa5EZ2l j9tsUN9lB2LQ6/Jvnx03XPg9TeTWxiZdOeytF0f9d/27YzCaAd+RAHrhC0XZ9Cu66NhfZagzkqTI QBfgU6W+bRLZbdF4IhD9cuyZiloiEDyWgLktH03+kFayZuZtiOoECiQx4LXg6mTpPElrkwzkDnmU HlZaDKm0QTBS6vn0+aIB2SRspL0njMoXf59x2Krkmdk++GswobMic0Re48PBjmeQ6CFag14PVGqg vHKfuEX32mfrjzfKdaMk1j9yU7zv786IJx94oB4UvT7u0YOMvKVKmi3Kn9/yT/H7n7o0HnxYDzTr tso0PUy+TW89/slnXhd/u9eT41UnnREv0ZuOpxz/Yg9uMigWP3xH/NczP6a15s6PB3W2M0OTvxkc tQcJL3VnUcBVTWfG3dz2daI9WmRxsMEPbnBYyU5P4mw/ADiCQ0jCTtsEdTwsROB0GYNYQ4BQqWuB 1oapTAZmXp0SkhRgYuLUfG2+AGAsWl+doIzNtEGeDAHRmRgTaQIw69jNUWf93k/PjOte9pvxjAN2 i+v10P45d92kt5b0zEKjn6krFCTaZrseXmXh5W9c8P5YvXph/J+/+Zfxl7/3b65fv3alDpTrvXDj gl2ZJEXcfutF8cEvvT9+ct89enNYE3HswwT9JD7jTzb5jEw2eMkSUJT3JetmV9cWoskHVGHigljJ LzJ8mnTzBAB6x5jqQUOQE4PMlvjU1/5zfEdfkL528cqYoyuK2Dlj2txYuujSeOffvj4ev9fuccfd Pwm9be9L/LhcL5bFZVd+JH7/gX+Ju++7Vi8tKB41md0oH7znf7w4HrffSfGap58RLzzhlDj1pFeg kZW4/74b433f+WBceMsPY7muUnLVE3mOJQUcJw5EWqek7E11ZXFraw9e1h+8DjMhArkeXH74y3Ta k9ePW+vw9AFWe/hyoAeINHzLCzngJomxwbQMSpVqvOgOsdjQ+BHVSZJxi1TCkB9yLJ/+hf2Ik++3 60rlR77w27HPnK1x08oNjk3abqYm2PfceVa87WNr4sDdd4kbb9MK91p01F+FEK95mnB/66L/I265 aa+4+a4btXgp3/mYESuX3RBv+ZvT9PHsZ8ern/baOO34Z8ULTj5adkknvXxz98Ifxnu+8tW45Ha1 r64U8Ca1O7/Usp3V/7ElIaYtHztO1Xi2VRjYoeCx3Z5cQWUnUlkclKeIANsNUZ8cCypahvYeR6xM 4nT1IoZ1btQSiG3tVrJMK5jblfqOH20i0vajzc1LQJvsxpFdmoDBA9xUVnRGTNqUpyo/XJhtyjGD PskEqhFCPJJsm/RBL+Op1v4wFkoluvUiNq2nlZCvsxKdfHySvC0cZJTga96KGTH2nSfbIAb8VeL4 StH6NyBxCQb9A5qt4ol+/FumBCLZrgGv0dkd3iQA+RD5Khe5hsiONdS87p3GTHTfonUHl+mqMM6v Y+2ElgnxLVSp2C3VIn7lnxrTKdfhAclua/FBPDJKrhinT3CYKutYVbaw7/xg+mmxQc+frdNaoFyR Srw0gjyeto/xAMJIGSCGZ56vH7RjZuEkZm4bPjZXe/L8fHpYfPnH36q3btr7mfHWzjwiUH4uPDMW XtOo1fdCsaB8mLjoZ2ussq8Gii/+Ld9BUwk53AbfxpUoMcqytH/ta3/bOnpjE1pjFuVgj9IV8J1x qk9jbLcKSbBNV66Gxpi2OW7AsjMKXAeR9tkdCKB0ZOF3jW/HCkt7UhlMHjsmdMtso67ArFu3Oh4+ 5MbYMl8vTHNwVJqY2BgT6lwz9RYYi2bSWE5iwsKxm3nYWFfX5vAqv1tSMvS/das++KuH5pmEzRl8 6gkcnmXZpGUpZgtO58sEXLfvNDDP1rcVCUan5gMHixpjnweeGPtsf4JWwdbK+NCjk5LRy0TsBagN XLDR4cYsTxDaxGe7DcltQyeCxgRk0lCLhzn/rmsIyFBlTsqAkRoNWSMnO4rk0Ap+hZ1gQ/Vtzq2x SW2wcf2GWDZ3Yaw85Jea0KRt0JysRU0P3UOTtJvPj4Vr17rD0ZDYctyRL4yj99k77rznyrj+IU20 20SaA/thBz4rnqZX1H+56AatCH6HJiE8L7FN36DVN1P3O1kHytdp/b1nxUF77aU6LZqsdrvv/l/E 9686Ky646QdaPmRztq10sIc0S56/5MA4YNWxXlNppp5pmiE6fEhc8aPj+URH8u2jVke8Vhnba1Dj O33E4AYtMbFyy4Ox/PDb9MIEUd18bdlZ2qh4JK7n6Nk2H4dg1PA2q26L2pFlZ2bbTupErDShN08n FHMzFau8qZXw5L9VS1hMKI5nTRGP3FomHt1m2szcMDcOeOAEfRpqb12t5OsMut3SYpiDpa4llEjL zQODqdN2oKmS9pVRvYzJeGr1NH35i2xDdRwLjs1s04dqGRWKXY0vqhZdH3OOc2iaAiUdQg/gxq0J ot4g0wC5VX14YvNG3XLeEEt3uSNWH3S/eKZ8OG3U1QieW5yjb5dy7t+n7fqOabbHLPlvlgZT8K2w jNmssYM30fu6otR4pLbaqtgnHj3G2VBNVLX0y4R0mqP2dVdGXjN6qwa/XR/ZLw5YeVzMn7+r9fFV ERxjtQZ+KMNhgo/Vh/C9EcF1vTb2c5I3MSMWGlE4+LUmgBnf0FioWbk9YMB/gtNYwTwOlensOcoL ni7OmKDscc5V5EEUo8ZPO+sANO0gl8nmgAAPbAUMqTLUMc4C83FKgNIbtLLFPqKsWg7GpA4PGvHI JE4w45cb7fGPSgVDnvOughiuefLmHLhCKJZC6yYDApd9TOBIyIY/4qiDdU3gqDd/5ONXl5U3QRa9 tULJhE8JMj4S03vstSD22HVOLF2sZ7E3sTCHxXiP3Bk6qT7wgD1jvZbKWbFqg3VJ3cULdkrDftsf j9G1UNKT+ABYHx/Jg3YhjlHZLJsdxavkWJY25itEm0QZuuYgr1foOmTRmsxdoIQ37dJ8lCD7slWK kf/l20yd/4uH6jOGaA/9jJ9yoEgdGnHbVXtRrLkM+U4L+Ei/stX4TUf4gcf4Zh+rXMcXePikRO1o K1XH3II+NNPIMIEQ7jtI5YzCKeEW3JSAFMeRhgaYBt5TsB+CsiuhSpo8YGuenLl4piyldafaOrui baArWTlgZAV8fDVExVm69eRnJN0i2F0ceF5gri4jN0AJZ6//Gbpdsovum7uooCs/UMdyA/Pyzmpr 6PTDDD14P88PScrK6nDNCTwsar1MLx5tMoY2NEy+FaVKziQ0yNjPEiZI8yMBSqENhoDtzPSoBzIh GEW8EzdpOzxVZgCLRnlwCJDqdD5gWETK8GVnMxK+9PcUXXtcidQ84Kdv0Nc6pzrJvPmAGLny5+fE ZerMc1hOAYUaXwacG287L65RgM7U7SRPTpryTHDueeBHcdu9W/ysEBNmGyiF5+rK3NKl18enzr02 /un77TmL1MrBvln8ZjMxZzLYemu2gZQnEU4eWErhBLPFi47rZhMwY2E3MP3Z02aVPifbXVlVARM8 +TCtKBoD7Md/TnZ8IpOdjf1Igrj5oO00gZDffFdfdfIr+LCE1QyuAOXF4yITlAFB15LKZxYKtmpk N/2VuKs2z3iDqjE2ZrMDQUrWheoaNcWOgw39kNt0UNskG4sPM9Xe0olN1aQP0s/IzpT65XggG1W0 fvRRsTeWgI5h0TC8pffRTbzgox9586CIroK5Cvbdj4xuZuulpUytIsGmma3bpLNRgjTcC8Sza1q/ 1OC8FW7tzL/ehoYEO72X9jM1pnQfo3bfgHfSTcd/+kdvBvwt+s0QsWvhUzZgAGRK8PVYoTzt4DYE SB1+cC51cAFm1XYC+IAIDreFVYcvLUeEoJreCpSWDdh4IDORGBsyZZXg0MGUBD/94OeXWNANPSFn 19BAdRsKM+GyCT8ZJ5G8TVLQ7Sv2SdfvhzDntXG8iAHHEusJa5XxNwJtj/CA4XnA5HySbsHeaKKf qSYBqV9eATJJOlP8Gl4aYzt9lcuMJUH9j9DOvgAuE2nGfrIpCxnoIlQy+rcEkPsED+GhJ1fV8e3m Tdvj1W9+S5zxwuPi3H/8h/jMt66Jmfr6QaUJLc/xtFe8If70XS+O2y4/L/70v5+lszu+GoQ0NGny O3mpA6r7ipsE2udtjE99RWtdiD3iGL3Aa1Jtd8sLxkmyD78Nbn+22MqISkLHCho1PtXWcPJklr4j WSTqPBETnwZyu0KbfBKvtuDkOKKMx0PtpQ8x4ZMOFYfyVOxS0aFWx1s8qo1quaGkz3Yh3/HDbpU9 llvBZO2+66AQrnnnBRuM9DCPYp3ATp1RRREyxCmh4/ABuRWreg7+/WAxxMp88UbvjvdkNEPSjB5v iAZt/YThWyRcdaxOkQcWOm1LCCShn1OWaQxSdWIXtOnDoCAtLJALSI3AvrglPQ2T+EP5XC7fWUI1 JnbbFMn4hzJtTEq/ksszGnKk8mOWcovM7srgzkUOybp2QGZOInPUwBQfmAe8yFagpg5VidKq5KDQ QOjD2mS8Ct/crIxSawO+JjBbde4QuqoxbANd//Tzh8YXz0y5Z6FfjTk5ALsBEq61wmMXJm4U9Rtp A0YM4HLucBIN34pDnwkNyraPxsAg/8Mg+WbO7Lq2YuRq45DjxwcI4WN+yWBw80EbRsbqvGn78QV+ GI+/hBefjD0Ej8afWZrz0HbrXwNuisUNlsIW40q/qeLKBxGwIWrJVwZUHsKSV2For3ps8dU9TlCs A57r+YDtHmUQdaJoAeQ+YJmpY1HaO8jORsm+MNClPApvEnSOy4HcEf9Qbzna/382PiBEqZle8jOw 0v/4kpPXHY3TyYBta68aJGDb9B/a7kmsfO6DXU/c56oZmu/q7gH+4iomsVAn6PZhTzlFjlhAM/01 vRiLrJbgGX6KV/m3dO2c0XGDhySJHhz60rjc4t2RTJGxD4aE4uNINMOsIHqsm+jJd7EpYMJrLKZc igyZ4vOkRQWHrMrO526ge/EEb5SH8eHTyUhiynnVMH04JDMuaBpY0H2YKLFWG5XPPPU58Y3zrotV wknT5fu5e8SpzzkR0pgzT7fyRYBG8KRt8oKCqNV2vB1qI0FQPGzVGI1OLJNVb45We/AwP21s63QG ztXHSuBs010ExkMma9M1FjOhL83Z8xIac4ecQOnWrxSmK84YrPaLfoknHnrJwWaWkLaHl7hn21iZ UYTy3dCfHYaIfdUUDvb/KIOi5eSS5iJO/esYjGbof6AIXXgQjKUmwyerqh7qBHaeMCeP7ksMxWKo oA80ppDh2dM6A3B+4bKvfMFrtop+HExssmior7qhTALdxoPbDKiDUAcHR/XoAj9kjiQcA4b+OS7j HxKdsHdC0nDgy8q2N+eeJivRveoLkvviXTqWgD78RunqoJ0WJN/USTpjhyYjuWiiOEhft61E+ewB nzV2HX/R2K9ycPl8qCF643t8zcwfq6HFczyigb6IVddNMpSR/+xTZemQOVDAA7qc5DdsCIHQCHV3 2oNV1cMXXtjhQUyoHgQsLbE63yJ7AC/fNuCv3AbFv3w2ZRvYidkq6UdMan7AQfiCzVgCBtSdSfo7 roVPR2fZGeznIDfZdhgN7G+2o2O1xdD+hON96ns9CqeDD/g0a0Y0nsr2rm3AhLUGYlTzSzTAlK8+ hhwSMWU/dao078hW88tZXV4pTxaGJzFi5BMV8spAr6l9rhr7VE7DnDyogZ+yGfHKB+Vb951mO1h+ Li1HRusJKU1crkN3YpZYd0KgYMYxIOElx4oM4OV3g7Tp8ArQ9oXX8W06lh87hRr+ePuo+9lu+j0x hN7WveG7DbADrGYKPI0rWC7j05DBanxAts+4nN10SrpsP9oXn5HYIcdXQigZ4Cq3oxu26UX7JV5S guo2reMG8uFnODiZSnfjqpD+ka1F1/R1lIGsH77Kqz4UGYXwMnUtblRCDsntgJ2qNhZjGWWljDln +43q0NPeED8fbFttRqItsADqmHDbZ8KxGBHDgbgA0xPdJq+xMRwZYDg+xIfllKrCMNUnjuqUyX6e QNss5tZE/qjjoQlAwU/4jzqV2eMbSpv0WNGCw4+J4554QPzo5sV6nEIvp2iSdNBRR8Vxh+2mBXdX qx3TUj8zp7tLhz/hCXHUEQfqzfV1cevNd8QDy9b4bVW+STpvtwVx0nFHx376UsySRQ/E7VqKZN0m PdohpbfomHbwEUfFMUc9TrRr4+47FsZ9Dz8in2oJaz3mMXOeFq9+8uFx8EF7x+bVq+OuO3+ppZ5W 61Yurxjy6MG2OPDgQ+PoIw+O6fqm+F2iX7J2a+y/13y9ObtMj5foBX3hHKC13Y4+8lCtYbct7rzt zrj73iV+tATf42P7o9wATO7IY5tb2fGAxdliuIuoER0u1I/28NM/8qk9gz+VyPPvYzRljX09j8Rx UAjqq6HiZBpNOKntx4KMF+vZZMK4YsjI8EccymTTAuEKfhNkBLEflFFGuDKCbSaCf9gBCl576Ic8 Co50O7TxgkdN5JyHTsh0zpSqQlMNnXGvHStVckKRzoR/6eM8GqsBrAM8kScGNESmzKQ0fFHlqs1y ObfqS5nyVsGrPMod7KyZjFfyhgEj7OY3d3gxg7q1lXmpeiSVzUNfD/NIgQS8Dg5DJbNqDKsutQIf jKIpLs0adKSOrQauolUGIqdhrFCPPR5wJLt7KaPzedKN+6jK/3+0AYOV5VjP3g6M6XwnN3S2ppne Vhu4IHqSYeDrD77QcTAa4yxMMHr78XQd9LG/bHdbwHeEgjKQTKO8e1xqC6/HSTpk+6xXxWwj2qqd HTdbcnJqJk3TlGcO+IsMjJXPfptFsGw3sddQiCv7UBnI6kfAIa7XjzEgEcBP9sSb6BquCYwCYupf MAOaDOtggDaWIX5tbJgmW+GeJ3cpJ1GTZ0HG/Vflap8qlwVlR8GrXGokd7CzZjJew5DtxIOvCuOg luxD5UdiryohFWrZnTiSZPLcU8ezpOyBK+sEitG05QBHPv2tMnUCVLkjcCblWWYxa3B2wJ3MMPkm gG0CS88UAlR/mgBYnvJMc5K1vAU/DrC8mea82DSFfXwwy76/0U41OXa9uHU6oUEaJh7okwkWqVmW kY0+HpvbGJqTgOSV+jd1mr0dTCzAHeFPuSX7VvkepFwrdDzE0zoInmqC0CuMDeg2POAD4+e7PA2V ZTge1HPDq+cdGS967olawP77wtFXhDQQPP35z4oti++NW5Zsj0Pnc2NOvp6+a7zpnW+LN7z4KbFs ybKYrY+/z9aSW3//0c+K9r5Y8LjD44N/8vtx9H58sWRd7HvAvvGwFr//6P/4Uty/Ymu85I1viHe9 8VQtvLssts+eH3vvMi2+8ZlPx1kX3xpz9t4/3vtH79E3q/eLxYsf0RI9C2L+tA1x5kfOjB/fvIjA j+e96jXxu299hb4UtiJWauHf3fX21t2L1sWRe22JP/mAvmm9flqc/urXxHve8tLYpE8MTuiBk730 4eyzP/8Fvdh2vW4Bs+5dM94+yglW+jX9g53EG3GFV3PMS1he9RVGx6JrAGH2yTGkYt8ixALcMiVn xqka4aum7SXA+CZRvjEi1IYxjd4dV3BU8ATOFQOBxd4BIKIkTFJgI8qpXB1EFb2AYmIlRFtKqswl UXeGpoTl1BmD+eU9XiSKzJMwo9JvcQLAKVJKV52JFNQ8+M1RCk+MkXS3Lxu8a+jGtyun2Z3MMTaT tSjvPwqiz5BFzTKGFqEBwoPWkGP5047Iigy+IRI+YZBLP2UmYWBRxxmCWShPveWRnzKl4tnGiVMy 2bMwrPlJX3MSzLfHs9RvxR8eXgOQQxHt2wa/Evu/Qxs4LnX2m52r6VxWSH/Hftujt22SB0cmsGNw O1ju8TMtPCHjSxPpV3g4qb6LMVd1JVd3pWyCbD983ch3tPPBAqxHQcT3TLZZBFiK2i5OqGRqTwob 4ZAGQ0eah33OqU5tSzhQ7sQqg+r8SPZb82OHQ4X454EVGZlmciarAnFlfVSgLk/4yFOJRnDPqxhu j5JmntmW5TGPN0LncQR0kQjZL3unGBvQ4n95bHI7ibjUFd30HT7kIEDsoWH6tvxqgPxVyct8+JDe IK0hyh/p1+TBFpbJFoz0bJJo22jhZD+CK2R4dKmUEsA6tT3x03Hs8JsBlpT45mMwm4rDTlv5AbuJ lTae+WCo+gaznIEOpSdGQQPX1DdtszxtuIJmSNPNLMhbl9x7DTV4FC9lqCbmGDekrUpKja5Ii6+i TfiCDvQzunkWtjlok95H13pCxIdGqoWaNjhbBDRKsm71qFF4aS08gekZ8nWrNEG6JX779GfFwV+5 KO7X1+bn7L5vPO+Zx8XPL/yaXjZ7Rhw+X89cTmyNZ7/yFfHmVz5FX3z4dHz74utj7oJ943fe9974 /f/85rjt9/86nvJCfdVm74gPv/+/xXWLVscTn/bM+MsPvzte/uyfxRevWByvfd2L4sbvfDU+8q9a n1K3aN/xR++LN73jTXHpj/8snvTyV8fzj987Pvpnf6W1Pu+PeQsOjA/9xX+J1732OXHZTV+JA444 Kd7z9lfF3VecH5/8x3Nj6ZrN8cwXvCL+6L2viQl9CYIXtQ495tfiP739lfGzc74an/rypVrsZ068 +q1vjbe/+21x+x33xnX3rPYVRrzlE0yPJ8QC/shWqytjvHiWc4ucexBP+JvkeG75zrHm0tcnorbG k9dbA1R8EmecIFs2ODQIqe0rDjuw6BmjiDHOAKr9NCgmXdvq7lpplpBhmfywXEqBOYQ7gCyhcR3U F547UeOHOsxzpJ8NMF+CUDw4i6grc+BwkIE1A5If+GyDVJoEg0zwsArwJa/JG2+Mztqkh5IxGrs9 iRACe+4j+nXvVnb9GM6UeP9efHhOwVe8p03o253btFq+dLV/ZAA+qJ+outTBOFLyw0b9Knlghyf+ k4qV8L/xhGse+FmV2S49ov3XeBbfars8sBNQbrG27/nRNm4f7YsPAy74vB49c6tWoJ/QREa6/G/V BoyQioHZm3fVZft8foMoomvzw7vli7LLt7dlB7dK0y8cZPMHAWdyvkogGM9zzNq+S8zY0t5wIZ7q 12Q/agy2OGW9sY7WPKTcVHFVfEvOTuKawWHWxC5evgJdmWf6TLTFATFUdvvsHodIDftGfIkPfsQe MP4Lj0jx7T97EU6Jnz5LXAbP7NeqVGe3fARI9+r3DlZi1rwllIkn6DD0Bp3JSyJ4FixtpBMJvfw2 qdgSfoCpIy5nT7A8jQCdr1K2y/+LxwfWliMup+vZzWoDR6R0xUSeS6t+js/5YZztlqGcZGG7XCIY dfhJ7YX/KAvf9eBQCSL+w2miV6nVZxmwx1VY6YcOuU968tYPwobDngMWetX4lXvKYPe0qUvjAZV0 yL6EIJhmAp5ty15Ura7zkcrwsj4STXId9rVUdezVi42fspqeopeDrR8n1cjJWJY9sGm8fNKHDOlk n1lejr/gowfdD5qhfqN5TlZMaO0wh0dpaInCQ53yX6e7EKnXRuGKr6Ar21WAiG3TA2tIPDt27eVX xdYFB8fTn3JE8PLCocceH0fuvTUuveoX6g6M04qmuQviBac9M+6+8lJ9Q/TnMW8XfZFo7Yo462vf jVkHHB5POupA854xZ07sd+AB+sTV3LhZ31j+m7/8h7jq9gd9i5VjwNy99479taLA9g2r4ktn/mP8 /ee+G5v11vXq+2+Pz336X+JHNz2gb7XuFbvoU1Z8t1Wvcev26rY4+uSnxtz1D8cXvvDtWKxvsvK6 xY/POzcuuuaXHqu3bZ0ep7z412Ji6V3xr/pO6oSWRJo7fSLO/9Y5sXDN3HiObOPLMzyzSRtgv+MX H2SLu80cT6rLOEiv+aQO//Mnn7qvwUO+rL5Wsel2qfajbwqAnGEqGX5spG8aekaLD+SIv38pk37j k1LBqq95TBQSOrkfSz+d7PYB5AqCoSnkKwhorbLIkrDqGqNUFFUyOaha3opbmABCqbrOBhTWn+XB d4SnaCg3Xj1tQkpXqrs648uBCpxckXl27LrxgFi/yxJ5ATuM3Ti6APVYuRW7XeEVYBx/vFz44/BR +q06ci9Yf5DW8NrDBxPP/jtdCnfn+6HdYFK2VO2bsVMyMJ5wfCWt1JwCs/gP22cKtB2ApItii5Wz d9m8Z8zesEdsmq/nH3yELaGP5qtiXXhVfjT6wh/HG6XnA9GzN+0Wu27dN2bM0cBl70FTdLKhZatP dAB3sPQ5XPElqXxGexKDs2fOj/nr9otVe/xStpcMo2rzaHqCVzhFU7oN4UNYwYewomXfw6dtmRG7 bXycXgrRMha+0pN4eWBkElC8evoanBi4GBpGEuViT5Z4VLkNGV1Vodi3jcYyGWdMkFxNr2zSt9h2 QURM2NihhzbmpaEur3XkeAWXrt3cXuDlZJuHredv3zvmbNg9Ns1b2eISitIOxUjj5YT228IryDj+ eLnwx+E9PXE5a9P82G3iAH3IgVX083YvRhaVsdPoIuz25bcO0DLAe38kEFim1MtlYNVoVBaOYYWf vnW7tYYgJsbDNfnRP8rubK+UufNtr1vKqmNVwcfV3Dm3vrZ8YG/25tg3xXtov1EkjElVWVF47Acs lFcJgBDRz1d4uICgVH2nnGQ95NOO3jTVRkjKmpJlJsN2MSD9aZwp6tA4NUzNGZOW/vKuuO625XHq 6U+Lb156W5zyvGfEsoW/iJ8vXBone4kGTXK0+PlsPYt24DEnxV9/7JjUHV398tmc2H/BnnH+97VQ +AmHxx/8tw/FI4sfijvv+mX8+AeXxE/uWa6Jyaz4+tfO1y3U0+PM5z4vFt55b/zihuvjvO9fpq+R bI9brr4xDnzp6fFX//3Fsffee8SumiDuMn+XuPu6O+zl/fbfPVYsWRwPL53Q+MSkUqu1aoJ20x2L 4rRDDpZvZ+p26dyYu+eB8cEPfyi/vCB/8BjvQbvNipX779G8l36kLbrGUxZ/pf9hXT5qDq2daMCr q2OAR9oCQLo1fdwaEr4dXjWjFYBgkBp/qqrp3F6y1bdyDRcD/Y9GWc9jpu/uqIwcHW+96GhVM/PD NGabaYTKTUl203KqqtswKjUFmfHS0Qhc3gwhaFEuZ5MYBs/8YSTzKvo2MBuN8congEym0hNDXN/g 0FSH9K1cKjl46kyCT4jsPrGf7o8fFit3v0dweCe1PygPajsKVdfs6ot/26dCtRVdg3d0GKDU+yc7 7QCQCAptZvHz1+8Te204MmbO1aeMdFaUZ3rJtW98Lu83xo26e2PAwpqvRIbt+NboyjsQBABmHjSC EcAxQZ2HFOfcN/9nWzSQdgzUbsjW5kOibdSBgwj2TY5aV5NTfT5Fa5ztveaIWDJda2XNXiccsGCX +8feBqbqPJLUmJw+ak05cPmO2wCamRNzYq81R2pR3/maaOpAyZVQTf7tPduQt1fSdS3OJJR4RZat VmUXm6LJWBRvOpNtnx17bjw8Nmutuw27LJMBzXrRt9aTv8oC7Mh6cpXKzt5SsDIlnpkZ5rIq1WMb QsMsAkefsHTrdMHax8ce2/aPWXOZJGBNIpUN1Z5m5Cqu9PSJq2cMfr4CYDAWoQE+aTGhUon2Gag4 +AqJgMjJ71DKl8p38CYlPcEWmjwA5lIXSIGrrVWdtHIsoR1RVxJVYoAxlLZBJuMcJxZ6n1lxudea o2Lp9Ftiy6z1oup5/vtjM+Xktre5WhZfknY+PoCtt/k2z1F/OUpLEOnbynqlboauBtE8blP7DbuY qqJxiyIMo6Q9dbZE+axNfxhFNW6Z5jIwTFkKNh7oWmOr8YVkE9T/gXs+Rrzz576CcYz9UOJnsCXd dWpb9C79jAB/ozQcgMIxXubdWC1rPmLp5sQu8LSHB1rwT2/dUcJTTTWFfuo9xKUPIsNugB36W0H6 u0Zs6uGBYPAaYuqQnJ0XDj7xAVgCnBc+dYz7KSPHFWo93iCLE1v957EQO5CRdHAsX2yn3YWPn9mT iFXLRi+V64qcK4HoH7X9cpL65fSta+Kyy6+ND77l5DjpxKPj6SceHld95bOx1kvDJU9sZAJ397XX xrlX3enx0bJ0ospVvLvvfEi3YzfFx//q43HYEw6Nxx9+SDz9WfqW+J/9cRz1hX+ML3zv+rjqgnPj jmuviiOecEg86fhj45RXvy5Oec7x8acf/sc47W3vjjf82iH6iP35cYEmjiuXL4uTXnVGPGU+19r0 nKYWQs81LvXiBRAaXj7fpS19gumMWY88uDDO+saPpBMnx/KxKvgG7JL77vG6i/Dy8h04YZhEzxyF 9uHfLymonjUh3WbCx2f88Kr/5BP4k0a40U76q/YyQtv4pAMB0IIjOMcLX73lti11LeUFFemU4WRc eEILpWWysrhS6cnTimZh4rotBFApGZrMA62DT/AKHCO1DViowuBBKkPJJwfV11UKcFBMBH5+Rh2K gdyBqT3Djx0rWpvX6uA1HJwpk2xkZu0keM/krJXV9nULa9+NR8XsFbvq4c1FsXXmRskZHoYaYafk oNz7tgG1K0NHs3195abip7qZW+fGLpv2iwVbD4t5+tg4b9xw9YOGrgCwH/DRFPJlmlIyr3YYopUv wMj2yqABZyqVirbozF1Ah0sjYIcs6weCkqtSmSoZLsTca4tNLO2hz32Lga5yrT4hVs29LzbM0seG p+vD6oVqAR3Zvyvz7yK10tJdV8Lmbl4Qe246LObP2jtmaVDw9/OqDaRBQyWURpMAhqF8099+TmCj BEcDiSdwvJK/exyw/ila1FdvaM1Zog6qzyr05L0wRvBhbA5ll6+aNiWuwOyH6F2hEKATAldAZ2+Z H7tuOljXfg+MOXO0npwmM8QghmUcqPeJjpOvjqcG0LyKApOEZ/yBMRSCIFCSkm1hcAhznfo7ME72 fGKgPOOAbadOlfDOSZTiTrDeL+TNxjIyyzaHOOdEW/ITc3TruNQgv0227759f8XlzFg1577YOFvf 1NXXMRr7USIUnrJiFK1KoJMmkeyIj+COy4k9Ys/NissZe/lD3F1cJjv7Btuw1kk7RlzLAaSjQ6vJ +im2rfVMU/qZp30OZJSD8QXy+N1VCar+4rdBOxnJDV7d+O+ZnuCC+WodjctxwKjAOobJZazI5Anc xEv+nTgyBKqZWctk2xBMg01G0+GzyHX1NUlSGMc5QsyqCMdQ65v15kC20RtqvgASB5HIQ8Ykm6hU auSmSLPzmEdd0aS2QPrkfigx9J7Ohq669yGabNOt9zoJ7VDI9Gr6itat1/wsFv/G8+NNv/nG2G/b I3H5DXfoKpYuJoCoic3WDRti1ap1cdA+c+KKy6+MzXpWe6sWQX/8U54Tf/D2U+OfdRXvma95a5yw YGX8+V9/Oa696pr4xje+Hx/86w/HSc88Nr57/ar40w++Ob76iX+I88+9OC46/6K44Bmnxcf/r7fE E558ZJxw7BHx469+Pj7xL5d56Q8tkR+n/8Z8PZOaX4u4685FsdeLT9et2r3jx7cs0WRMnpm9IJ5z 4hHScI38tTUeWL4mnqc3ZxfecE3cs4qTvInY9cDD4/1/+La4/pxvxu33LPOJNL4dzmXK1+mWdEy1 zdBnfev2zvO8vS8O0bv8+LGcCsazeo6TMnFNzBEV+Lx0yn0JGNMKcAPR9xgzPYGDiAkPlUxumHU6 oa3yvvTLtJF6hVEKLqQ++KABys+DdaOHzp1XhASgB/4WidN0dulOyjCUIiShDfScxRPpwvXZvvYi N3/tusTZESnr2tAmA1lIV59Ws3NmalDcbf0BWvmclda3mGfHoNFWubEzP8MEcGAbL2W5nNmkzh6Z SkCEE7pEA6GHrgpOm+fFhGfO0we6fNVHt3uZbMpW8xSirVTjZDuMMGocBzoIQomgcdtBLUAFRKnI WXKdg5pjY+uBCx5GTD3zwCxYiW78bGKdHvTeaRqkHp1cnKjmmwG+3gbS16F8ZjRv8276fqlWtNeQ gL6M7+VvOFhGc55VsmyJQJ4B5JWaEeiaNAm07qrLSEmYdYJWcMe6ppSz9ZHxWbpNkB81Tv8bQfzq w89Q9wk5vQLwz36QqlgPK9VwHM7T9EgHvFlpX6v7Txwdm9ccqmFmk2zX+kaSRWQ157uD28YSM5BX jQEF1e6TDa+PkwKIpf2TusEfuznr46WZWbqty9ktH4+erRjkeTAh+AdeiW0sLJHjqE+tVC92Rncf Jy+u4Fp6EWWpuS+BbLMtmg0ehBLFcKkx9IUnjGKKPAY/JFVCXcaNjmer4DmRBFqbQte+XQUSwXaN ZTxbNnuW/CGfzNRV+l027R4TG4hLtQ26w8cpZXZF6Zgi5FPQwGmoeSUqC24f06uMzxTo5oR8w2sj gOqtBx/t02LifGybr7LM1AlovcSQ2KkLeV8xSkOlT8+RIbMkgN3HLO3K2AKQLTGhLGWlYgEs41J7 9G4Y4DHGVHCYVkRcw8hgA7PxTyHij11AG08HkUooCVC/jIQ+5mwLNjAwKHlBcjIdTwrSRbIBOV6R q7J1gqnsy7zYUGe8FAktlPglOcADaOpobQUg3PIoZGpx0R+s4Qa+fMkftXX8oQ397WyYkRrjpDOR 8KURfrS+wFqCkVKSZME6YGez1aKF4D+r0SbKzV7c60mCELsLHYO29sfgebZP/X3VkgfiqhsWxWuf e1Tc+dMLYuFD6/x1kfxgvKgnVsZ5P7gs/vIPXhsfeO+qOPv8a2LuPgfFO3/vbbHvhl/qrdRVsWTF +jjpNS+Nd927OC6+emEsOOCIOP4J+8QDV/xEnzZcFbHbgfG7v/vm2PK5c2L5+u1xqt50nbF5vW63 Lo8Va9fHsc84OZ5+04OxTuPxqS97abzgqYfFw3evjKMO3TcWXndF3Lr09PjdP3hnbP/0v8WDa7bG i//Da+MZR+4bqxet1Mnx9vjphZfEGS/4w/jjD747Pv+1C2KjDjKv+c3fjGcfs2t8//N6LEJ+JtTq ZSj3DfkyG9Du9ibj1E0i/xPHzf/2YrYbiI5NFT1WTWaT8MIz5749EUub5LhMm1JHoKcsZMK3ZEDe RYczKdCyqWTsIxZed8a71U+VgaP/xdyNngygNWMmcKTBLbRixoA4KRkPhiiZLqHD2KlTyMK8TCjK j9RgwmcCR7KBzuUGHXiebDxNk07gMvNmosDaXFv0ozEp4wAndFFictWyLrNpGKpEfpMNEv7Cpu4o CT/gNBETqfQhcijbv+CrRzII8uNzTdyy472U7ND2dCebzPZ2+8f5MeWsQZOP+7MtCIzSerI/vdbQ iIQqIBs/iCtZJfuNQv7XuJ2V3mIvNCU7XeDrw6Lhm23miDrKeE0hHirV54PMWwO0z9LLh/Y2PEXc bN1Om4gcSzzgAufXlBSmE7aDxw/eQjCcDW1BfZ79JKnbAN9zy5Q2Uz0vvEAHpYZFSNUPMobIW0bT izKpPDxVnc22vvKDdOLBXCYctl/wvJpFe6G19ENwx5/bAUr4t4OVtOZQSyfeSPCQ7eTKdF9qpz2x gc7O5K3FogZwD9Q6cZipvFDEQfwdv6LpZJpt+lVbWPcTR3sbx4g4daN/+1bT0G+iYuLgNBg7GmCo cNprfrQZGOl/1MkJHP5KSnaZTd+BXr5MFg0x0Ue29Er44BfixbGpt9o4+GJDThyFkEylC37Ev9Dp J25s86eKZh9fiank27oUoNXONUloftZVSsAT3pxsWg5jhG6bMnHzizJUNhzYPbaUMY+u2QvNwe1g Xdxve13hmRE/zj3b1dsyQLTDeMe67W5/IVT7SmdP7WRfDmFIlQTLRSfKpNbO8JaunW7KuN8KTLxN eXwRb6uk+uLW6TWwz3qIT7aVKVTKhIycdBeEPq3+YL/Jc+ZDHRJsqfkYexDzdB0SdDlJTluTP2MM dWCkl0vP2lPT9SEhNsvMdhRHfNRHuyvTYswYyjOTJMu3ri7mxoK3xWZd9H/dO98eT9x1eXz0H77r uH/8U5+vq2kviO9+8V/iIk3Atus+4ut/5x1xlJ4Z/8jff0fOmB2naZmO17/i2bGrnhGmvyxeeFf8 82e/Er/QW6ez5s6N1/3Wm+Olpxynk6Fp+kTdlvjlrTfFP33um3H/0lVx5Iknx7v+46/HIfvOF299 pm7dyvju186O71x0XRz19GfHu9/5ujhogV6O0DFh8b0L45rblsUL9Vzewusvjb/6xLdi3yccF7/7 njfHMYft5b65YvH9cd+6OfHEBZviQx/421i2eVoc/8znxtt/6+V6Jo9va0eseWRxfPWLX48fX6tb qNxWJQDxkX6M+9o51ow82FS9KvWX/qRNRvxPGLQQGoE3PpNhim/FBu2/RZ+WRP4wqaenPjBVO0Hv 70A3pMIexmi9yAAKOv+7J3AoZCPtCfKS7WlIs6wMxHFSPG/ZEsGEL5WoraRs30EoCsEJHH6kNIEa udIQdwo3hrqk0DBah8WOwkjgVwcTEjTwZHlV09BADWbFVOvuqQ6Yspus3ImSCRx8VF2JfDpDmdbg 5pJ6bdeiZykLzsWPvezXIO0/BmvxzoZXXfFvcpsfJtpqAABAAElEQVT54lM2lPDUlw5L8rMN5igG sLGi6TF0L8blExN1G2nS5CVdli0TXsKj2uMAucwol7KKTUdrpekC8gmMYWD3oAk+SVusV9MzHQVi I8mssNNPMOHNrJRhNDArY3+aryBmyb5qAUgPq8IAa7LWBmo/fJ+JOnwmfA1UTqqrW0HZRh1XH1ig RO6wrvh5YFW9uVsp9Adf0eoyahErBg6sEUVr1+6AiDIdTPgWDCz1h6dR0F512GD/aotNlXjTyrXQ SzbymSoa22Xs119vpknpt9gDWU3ghC4eDVF6pMTcdnaBYn5WCpG230y9AQAjEnYlP0MswFD7yHIT 0WVjNpyyMOMDu5Kd0Yt9o2XHxZ20Rnv5zm1IkLZ2ST6yJdVJysZndAJHFRVZmW1efkqy2qbtWap8 85bboSYOdocMwodM6hkh8ipayrCuqksdi/v4nnYHh7GxfAqnbKfuZGhAlpOqpMNwrKjYcbPgDDKo Qb1+yDCO5FgfjflZrbIzqoeOJFqhk3G/JkcreHAQsicfQshxI+ssrtnRzKBiNImnqDuY9UiFDdvZ BA6EOjiWP+kBrRNJZLVQRVhqn4wbTLKwFQ08HsukPInRXvmaoFsllUjVP2pvmHti0lZ/7q0ymSqh 5aBPTfrTscwEjvaghe3kQXyoDjmOTeHgcT+fqz23W6256iHDj/gfLLetTm6YeMzfY4/Yf989dYV6 ndds27wl7yzgsy0TW2LP/faOvfaYF+tWr9VLB3oMQRMV3oWAdoaeMz3wwH1k3VZ/g3XNhs2+eMEX GmbpxYXH7b93bNP3hxc/tCw2bpkee+69a2xetzb2OOTYeM1pR8c53zwvNs/ZQ1/tmYj7H1wV/+nD fxZPnHV/vP+//lNs0x2ErZI/cw4y9o6Zmmw89PDy2LBxi+8uyDgZlf0bXUcmcM1eULLt7Vx5gD1Q wXVlZKSNDB/4NtG67RA3gfJjCxNOFKkfJtpLain1eHVsADr8AorRBKsJHLzM8w2v/52qgwb1/SM/ nNFjZClggxWRQ31KkXRSN4e1L0rtwhnyyUOIhQ0kIz0dmEJwvsrJoNsn1ui2eHdnNBzcsvfAUT83 kbewKxt0cU4yuOJDJ2suaZUO+ySVy1tyOS2rDgdverM7GVcFO8OTIx8URj80oKpkw7EGEloUDNJI fbO9s88Ykzflo53hoUezUBNdhZGOFHkgG+XngYijiHUarZuqlMPTaE35q+IHOXmgSxvbtaZmrDxd isFGumUSsLVhyfAaXqBQlaf59lpHojqoa9HSLGFncqTMgQz97Gc2qhz3X+ldVOP1wDud4FWIbW/9 3FGFZRsUYW1gyPZlcsQgo2qCXCOy244yrYSC2unfyTQqIBMYuPmQbpbNp1MCXnnQNnExSU7eZts7 wmFm/XPbI8MT7h2kwzMLb6izeXZjs6GvTpwhnyl4gGR/s6d9rA22irDx5cFlzKt2gGaYynd5kFNN 83mPY007H2tcVcK2HGCptZraVuxyRY4DMc0DO7CtnXVq7S8nITt1Q11y2kNQeAnSMaX3D+IB26pW D92OknVDjjI5Jk72BTj87IvGCNbFvmK696H4caQREZYmdU9f/GBVunqilUIsq+qox/dlP1fih3Uu tM2Qb+mUEjpNrQo+NF/RMXaQODbVsaYuBIBTeOZNmzQYNJOS/JjcsptRP+qTpGgiWwGOktPGnAT+ altkVfvnS0Qpv3Qo/yCxTmC6uqa4THA7A+/aW76pSR6BAk7emWi4AJS8NZ9kVvQloy9z5yA1ncEn CaGFWLyh5GVF2gUbaJPk3vsS2eC574qw+HNo9tVuwfyijgjhw+Run8OPi4997A/joet/El8665JY rTfmT3/ZS+LVL3xqfPVjfxvfuOx2P2ogtkq6BycZTGZTB+K5tGh6+MCQMNpufEIlsUrpQ2irHl0r zojpbhTkpBUisXQfh3yQysYByDoZ3i4uVdvgzIrrohvqn12o1714gjvtsU7gIIIpRClExG2EK/gQ J7ut7esatAT3eyllx8IcD9qLXbW6qGRRTFlWuOnQIQ0yVW99uK/o1OvpesFKylBvgikncNSW9sWh p6lBPWvGt2mP27X/7EDnNx6zJBEG/IapJKJTd9Y6RPgV80MbiwWHJqTjIbrb6OSN4E9MBul8gBx9 Hz2VDUPMob9KF9qhJqxVP6wjT6L9U0u6TXLvZMiAOmsfuVJlyn6DnbbVcTNqBWKm0fBKJX9neSNO selkSBKdfCQpvvOsWXIqxt2B08/YhWwGH5MWM+3r4D/CrwoSw0Scq4U1uJcN5T9Q8XUldOsGoAYs ms6vgjs+cU4jhSZpGz/VYSU/UvHI0uRywWuf0Z8xVTyqbsgr+z/a6ADgqzuS29mDcuPUHRcpmnVD HyZp+htaypaBocSBSOCKLyry4AiMH7oBH/rUfKATMyTm+Q4ASkqtzYuHQdrQZgmTd5WpfkB9paEv gBUP9sZXhmYaT4U3pAdtiOo6OIKMF5jou4j1BlLhRKkgaV/GA5XDupLhWGn2M7nK+BmVP4kWf6CA tRzRVLpJJ9VRWwc6T+DaycnkCZzo9V9tArdhm2E7aaj7jvyfz1kmfjJt+erL5vSrbXYmHx3ragwS q48P7RhKta0VDPa9WsFlJk9I6hMtTIInvKEd0peM8hO4le9uZ4/FNfV934Si+b90StDotulpXI+D ffUWfSfrmJOeEW9508vigL3nW9dN69fEpd89L75z4dWxVZ/j6h6rcI+duo3Ry/YMZE01geslp601 gSt6+8fBX5jqLx60hT/FZH5HPgQ+9KHdo03FdXEf7ocX0saPddN+/Q3vFk91yOZoFK9RgcZtQ5b5 eYgSLqFvw1pgFC1IpThYhg94V51pG3xrcwK+cRKh5bRi3m6k42bYFS3VzIytb8NlV7ZkaArgBqyQ 7fWDDz/X2CYGsWxsAp46MTNnbynDbmCPAYNNQ7cOGVy9PtlAzUgjpgxsIFUDlhuKLfakFg3S9EC3 wrWurbrsH9JTD498iwy723DVeENTA4QRS038IDp0Mw8xwa+u9ibh422AbF9NImOaZh80TWbqXAdE CBJ5VH8DqVAaeKH5IB8Mlz4yB7opE7a3uvIYXFM+nSnjfShJlYYnTnIt7kO89EnWsHW5lIBvg+XV DWGIGFWSIv1YZ28JEwH1QoIXsjyJJud/xWvxVYeBl3Vs9iGvbPWzpgBI8GxSE9C2jWdDmYRXOsAz j8doZFWM2zbaJTxlpO5GHNtYJ/GqA5OraUvbQevob9hedRLGwSJFCFd5pdw6myXzKCTqM7aKrvxi CkTCAJqGgO6oQmpVo5Mq60kNPofe2qa/FX/WW20DxtCOEZ5Nd4S73YoZ+6oj3yUUSlzrb2YJM4r5 NF1Kd/g0XVPbZJY6dYzFVbUNwT5oiqafsqJOshrrJB7TEz83F3bMPbqYhWLUB3qqenmF2MRXMdmU wwwVvf5qYgB+0WRIJP/Un8qs9c5uGvi5k5IZtxfcacdmwtAnxhIcf3DrGeXMXZuUl7IYGyu2ENmN 562fVhmcavM6GpVdQ9UKB3wkUIbveCqZ43DKycPKu2uKlVKO8Zk3FptMAFs7QTuJt6ppZ/zUWHX4 ZkAFSXyKnkmH04Av5Rq/WqV2iVfjIHDzkKSJzRNapWF27LFgN710Ni1WaaHfDboFy5vZvrAAbTvx KrnJt98CJ6VNpVOWKY3WT112WwxtM8/GK7mbfxtxDCl/UhjXze7OCikCgnalGpWVOr82QEfY65nX Q4tA+zKoQHlwLAYc7DLPgYWztvHU0WOwKgfqGLXqbRT1jR94vP3n16CbkJzZMigSPH1gVR7HFj+Y ExxdufFFg8IHp6tXvnRjnxNI5URXPuwmNQNcZXeSkmP5HcSSN+QlIDXmUwFdeAZOtRkypZ7ymP1T k6UctizVghyGRVL5vmQbM9FdDyYp4dq6TZMHU4vk0tto5Lbp2YCv63x6PsEUll/Wg0wM0cL4vslr +8bKO9oEPd3mVdGEJHofH131GL9u4BRC+aB8Ak3pDB4Hr/QVZve6DfHIk4wnlDbkdrDMsIXepWYi 0pu+8FaqNnDBxwsIhFWN5IrcFG7FlDmgL5mSU/iCwUK1BbE63cGqwyeTFqRGHSvrNoQVp4IVpuHF r/m+Fwp7XUvTDxRsgN48iqFRBlwbDyB5qiVE6IzSH+CmvP0IkvkWc/aSLXral1hkvOlrK9fIxnUB U/+OBVOVHvCQLMmrCY9IoW6/5Fttxa2eZpbqe/k2CTJgnZyEpkxV4btkZ8ws9JQJbPonE6EMCQqj 31sDozQ+BNEYyyGHsaqe0SCXI3b6Gl7V1gMUZ+Hbyx+vpYw04kWY+d8jqVxjAXycOlublipPZX/n TxENj2DIyahq7JDc8Uy/ur4TmLbVuDLCa0CX3NhCPUI8LPVoyiHXcTUC7QtDveyHSfJwfHpQzHDW QBY6jOoxvLJTvIsv3uzGIcUH7Vvx3GsEUmk8xl/4lYo3ZY+zrU7f9DRKtQ3Wewkd1a96hOV9uM2q Z+tm15QFnvizxYepc8OkufjUvuRCxRjkibX2w1Q4wMgXLeWaiJMnNXWdh41pa6yWKVXP8b34FA8/ ciUE/goRrzoZntluKzR4lK1DPcsbRqBiXPGOScsUsYWPVz5KuWg7NBzZLPVhHEdwRar5tXOMCIa0 5PnZKHi0BjNO49fJaJkhfVfXeHTl/5cypU+xQ88p5QthR/Ci3dGecIeWXwXIELdkDuvxNa7lB/1I SmePgIrWe2pEDzFt393yM3gSt56PqyDS+UnOkonGJr+iCDtgvXM/lT7FPG/vqkNKGerG6wtvZ3to SGUBvsFGnqVwmsIvWbHzbfHFph0mCe3P2hqeYdpYbg4cXGksPuYLTs7KzDplYT88VDlM5jcEKG8Y sbAT3cZIdlzMtqP+sXIr3+yY51iNTSLOpTq669c94zOGWkVkpBxZ2egw3HAhuXWFwxXYR9MH8ciE PpP4KMOVxOxTEoDxidRwRnfVRzkIoQ+p9lka3fb6J7xO9EaxJpfyIIHNfbtMxkqIrZAhyCr9CtZU 3BHpAJ7+BdD5UcTdVf5Hi4ox+QPGv3oWnl1bPTY2U42XU1Fmu7QxByka09pI0UksXkP68g1xM5Vv J9EYMdulaIf8hvnSaao+YTbt7tVUcod8xvPFF29CS3gzcucwPrUl2OFj+g6EDW3BbztAsyrgUl/H 05ELNMYY2wg/7e25DuUVtmF0Pn4YpZT9JjGwgQTeVPSJ1W8Lp5H1Feah00v8NlVlh9nr24EGmWFt 6VT8/DH7Aa6yOKGFpA4IhQhOKTqKP3WpBHmoLA3aA61FAY4HwBHjhJw+tYOrqvSApvK1L354qhPV gIUz1L1gNKCDrenBzBwYb38M5YzoqLqdpSFd4RWsdKjyeH2VOZPvdGzy6nL76Fk+A0l/AMJ202pf Wmbfzfacrnv1Hd+GU3iOMujrh2/wR0v2gWqn61I2a5ihVlXDs2xL/oMY4nxNcWQzGjvj2EaddVAB rxI01V4HI2SBk5fOm54cpICaOfr0egzZpE6KxIY3rBveEi9fgodfio5SnYH6TKnpa52Fa75pxohP LAdGSiNtrkYBnLdWC8HcjOuNwMjvbHJ14li7RtYTCLcvOGf9hZfWjFWq2MFFyFIE6OirWQ0VfgzY bOsg1aog7ug7P1knbeBHg5EGeC4O2gB0k1AxyLloUF3bUJyrbI6tjWHT60qNAExqzUflsbELdiQm +/aUGIDdtOzaJ2tVR309bEwMlz3mIizq9QZO0hOF6SN4ZirOVW7QBoZf9RlqsAcRed5AvCvS1LdH U8+9p+EA0ctKvskvfZF8S9PiZ+sbu7ItYxSMbPVRaUk51BlI4ViuKRutDCq+OMl0Dbnk+FqO7Eyd i1PKKZj1VPDR//BxpWG+YOzhDSc/HN/KwIfJ8rGReBkVa7Q80cwKjwkgDfBoJ9sDtgqT+obBgmum A+54mgq/+JXdmNr5rzHo6lQu/LQTH6IiSuoEwX7K2AGvcM3GdqDUqGLVv3zsM2LKT/3hn/FaunMV aci36gX0FS6cAoyxkd+OJpcDt3YymnjzRwZ8Kg1lAqty4WEHPPnRdsOJmUBdHfmea9makOKJ3HHZ VQf9eOqehYPNYOwADz2qP/c6wT/bqR/Leq79C3iCyQ/+KTvUqbsC15OB19zadsO6IfEQXvmifTS8 wt/ZvngNcaaCUQ98KplT4Q9hlR8+yzCU91jyO5JdtOgFTskCPsxPpXfRGneI39qGppmieYZk9ofl CjM79Uj1lAUGgcLtdUR3ovLRJJZdwqvewe3TwQGGirw68Oi8OgVlM4NAdYAOTga/to7W6zuCMeLr qulx+05rXzX/Ft5j2ffth5/GKRJWMeBa9EVvFcpN41RVNr9CajRVV/uhLWLt1MMK69+/hwdXWieZ NMbKOqbUtJ/29mQKYO+T3k9jDB61mDyIo4oddLL/3PYOg0flUgieOIu43NrDBesmgQXd0X5I3dvY Y08Fq9qeFh9nmzFGUJ/j2FTtV/VglS+HME82DDAj0P4fpdKh9BsyG6kTQpWHOOTlBdslDJV6u6vO YApdghdjxpgNY+Tw5d9j1Shbcep9X3ymssEsmpys75RwpvqsNRHelDwGJCXLiqHZJL0SOUWO8utp e4Y7hcGEzik5HV6TV/zhRF3ZUTHTS+hz0ODTqXBcpw37tK32KbCT39i5bH5MS3bghIZbuyGPyg91 KVjhsx/CKm8VqZTz+4kSgJ2noi+ZVd45VdaO42IxvvTxymPW1HhDumEe7NKD/LCus48KJU/gQICg EGtWOEQex0nyFFR0wEb5VEQldl5xMJbjANzCZ08qXi7XQYBgGChTuOP4oHT0yoPnqyONN/jACme8 XHD243jgjqdxnKIHjzrSjoKo6o00tik7jNP0HfIu9JJfvAYuGrExfZe+hra1itlAg6r2kwr11hXy RmVWBy4fwyUlFl7PF7+XnMFAhiJCSn2ST6e7gQNca9c2UtAPQ6szlCwGBmjRnQScfPFOqGs6GKjG Ea01N3LSlS97uj5nEUxKlNLivs6wTuioPoUlqHUoWzsmYoYdJF85tTFMVouy7cXf7QNeGWz7y+7k UVSJUjDaLfWyjQifxL8oR/fg+2qEVsTBBifpMk5eVNk24IGR+J1rgA4KZccQZj4oP8AzrNsgG760 X68FPHo+aJqyIevh6TuzFmlpiN+RB551knyDYNGLgJUSeJUrC9O3roWPMqmhsLMhkmCwdfQJceiD nDgOdBR+p5M5tjhttnV1gwNEKQff4s34Uz4oWKmStqRBQ5rCN55t6p2RPHqbEyc5pvVcAeqvWCLD /pBONSaUHuzralfB7HT0LyU7AT1kRL9eNWMWn8KpsvkOeKJr2p/AxO9lDFBTF+n0aMnXUoRWfXoq fMvBp5NsTGzHRrMe/dCzt6HiQzDfeWHcrmtiJS1912nb6U1cJ6/cg99hWQ6R4P7Q0RRP6dGclVXZ RzJmM9ZKR/AcUWad/Ium5wY/bLFEgzv+KvlOmPaunUKX4lMyfTIsvKn6m+0RwSQvgS8l6B9MtNDU fEr/EvIY9ugBn9InbVM0DI5XU7EpfOqGPArOmI+OfStN5iIcu7troESxOSPYxXQEuIPCKG7PS+4S RcobJx0ONNSlXuDWLymKd+kNtGDkwa6D3RCHOtJUMOingifF5C26knZGQ10Fx2QOo5BxPmWDLW+N WDjlDfbjCRwugdd6O1kv/7fJxxA/g4IAwY6+Zsi/ZPa1j57rWts8m5QSID9XymxfLviUe+uYg8Z4 vfVt/NkNY2EcN43NdrOeA33GcYtP8letM+NYj63sIa18YJI2yJFvfBl2ZWGWHxNb1lyCeJjG2zPL YCDRfUw0o6o0Gisy5NVUw1GoJSLoOaeeHBcF69vTuPSTMRVHZIs1fi5fT0Ju6sCifgZJzDB+On1G kBrxYAeef/CzIiLQPmMhb77YRx2Na7rSpAxK6F9cR/VriHCEw3jquDZ9hvVWC36ZaVUYlqmjLYD2 frtXvh7S2M4Bj/HygNzZqq+xs6uf1Ed25uSqaz7tmCjTxqBOzpi+Q9TJPpsM6fHxFaWhj8YmFa3O vptkT5IOXNWz/hVyU7XPJDZT6TBAKh69RVmJ7/o0zDcoIH4cnuh7/KZIsBn3WXHr9sapUuH3+ynY dvE3qudUmJNhOQ5w25NxUGnE1sn44xDTjAOH5Sn4oWeNPY9KP+Q1Rb749FVTH6/6+sm59EGviSdw QutbIcfLIeXIFbhhBflqiFKuyoVX8CrvnAY1UI4fjst76MWj9kMeqXnRUUNM5kx3iJ81/dYSqsHU Wcb1BpM+ZMcMvFMNCu9xmmG5ZKNL8kJipsIrXoVT9eyLf+EAG+Ypk6aizZrcFg37SvUcH7D6cYZR fis89ml/u8zdmTB+8Ci8lOHLwkMm8BnIH6uSjKQDpcatxK8Dd9aP02VZkwaqRczkJg8LhYmeLa9M n1VuKKzQ2TcF8FF/oEoZnfmSNNSTvHk3YSVHzPw/ZL+jfGdvQ/CaWxzQEFq6Iseqa1MKNHxklo8r 9hJn4ANw9NvO7aemm1k7D2OY0e8qtvs98HwhBIUQn3tkFn6Sw7nqUk3LNMwYpmfjty21h0enO9Ti PTSv6kzYdCSfssmlPHJTpRH+RvV1kBHUqXgBy2tFEtpEjONRJpU/QPRdhAZLfGBgJS65SkDAYZ82 l+8Slxpo645H0RWv8j1w6yDc5JaY9Ol6BqqnTZnDMvmyoWyaqt59oulb9ZPpsCHjApwR2+uOieFN 0/ItTi5fQNgSfkkeCRjh1/CnGnOKF/ilY/HMvp0+LhilXOsuYxB4yUbTiuvCZ1++GrbdsL7LNz3T MxDyPyp/nEe6JbfwKVkVk6ZWNXphT2FiK3+F3+mQTLIITnu2alSLVq1d6genYQJbvLtLpanXlLKG ZM6Lo4WNShzSjrfTkEXV+bnBriL16Yq/QmYofyryqu/8YP9OhTk1rKMX3fAYO4QXZcGqXDaPw6t+ ElwyKlXdzGJSFexr4jBeN17+v1n7DgA7iivbM3lGo6xRRhISCkgCIRFFRmRMzjnaOKzTer37nXa9 eNfrxTnjgCPRxmAMBgzGSxCYLJIkokA5ziiNpMnhn3Orbr96PW9k/P/WzOuqurluVVdXV1dXi1aC 9BNOPxfssWhCUGMJf8L1nfp1usIJKWrR6ifb+5Pv06TedKzabYrZIQXZSmnq1v6ItkXpBgu6vBJS XeIJNtCiWEbPC2eXDNqo4C5OXwAQplPfQtM3KGN5CuVyjqDDhEhO4kvBlE+D4yXHQymZTicap+3p 6pJn+c3F8K1R4czX8kqU57FwBGblL4IbsuCbmA0ycvaTSmJCUILF0aO9zs5uvi7u32MQjXxcoLVS 58pu1iY02ZS77OSfyuLekspMraczQ4I5ThtyoTyFdIGfhjnY9OTEUCd1R2XhImLFzOoua1uyzkVF mU4vdmvP/SwSdhma0RCrbiEyUbLObaQgwTXgyLwR271o3HZ9v7BM34XVjVHOdonz+jYdkm0GBrmu WWNR0QUacRkg5MUgfVGWPaYwTLBf1Ari7WK7lGFVdmMkSDSIWG8T0pPZZAaHxf4OdzrJLASVN/Qh gikdBj56mcR1yMygU3jZou8V52c50/NQdLLRIlMmW5SINwgFRKQJthdkuA9SGYHfXF3EH+wsWOv2 yoLEVzmeoEv4QvAhbrA+wL3PL1CFVPCb7CzIUNpyUZfbZIu4iXMTAm/UYsDAF1yU3kSFa06qI/g2 2kbegvZoYbRBdGFpDilcca4QMt2XEQhlssUXZbjeVGcqIogtrrvMh0SKX32QffrInOEeKUiRDNmR BtmtkglsPo12ChpsFML+jU00obxBWDirChKzfpAgsyWigmzTYsvmyrhJrmjTSRTdzqglhZlS0TL4 Qnyd4H1qQGWU7bJCaX2RQcdQ/4IFKbKV3pKfElqjFAFlG20sm+AeVFbZngb3QQrL0nIyg/h8fFHq sWpGz4TLz+Yqo4w8jfvd6ZX34DY5zuGKnU5xHu8yFWc3KaKLAlJ616bZdocrzt5CdWCqPE27AYo9 OI/HbpDnRZfSO18eJvoU1l96d52My2bpLJnSpvYI6SWw9hPL4zqdVvxyquBKO9z4I08KM6WlDirb wCE4cv/pWPbKEmzc2mLfiKuuqabsUgzvDZaWrxSHl0c4t1MwbZw8ad85GFPZgkWvLNeZbuzCpTzd vIDp8qaPncun8pXkOI15OfraBPzdB0oor8PBh07HytffxOZdHfFOU10JcbTH7U5FS3885VNwIa3i mHEF0N+XKvZDntfLn4f/b+WtNqzssV4k2Mqc1CNBmmlzP6l+8oEscZAS5OTxludrlPPmz8WO1W/h nQ077ZM4FVXc4TzHYlkJZLAuO6+PKG8bcUyVtRNxqYM2XvHpR1lhJqtgN29vuPP6fhjQsgmvvrHW bnakLQSdg0pxYNXZae2ymt9BlElBXEG+tY+8fVFK36hQ12lb6+Un9eYePAdblr+FNZtbbf8p8Qax bhM94clYPtkX3vQO9oinuL2IJ2MS1sogOoWAK4ZFTKIrQPwYqoWX/IJKScroi/WHNsGmw0A9dlTa dYe0HVVHMVskg+arDRhMNEXlSfj/zqSVPcpzD2W+SmxJxQpfoAm+zvKJ7eoxwsx0AOZpBM3KKJmR 971G4jV+90U/9hbpceHvRVkiz3WJzevHy+Nl8Hp1uFQpretZD78ZqW2JuhVHe60+k8GaeyB7C1s3 i/14xW0IOmLbkG202YsmGlPFhFpVJisWwmGKJaEQEtoC0GTk6cSqQZv5h51FJW++Qh8TGN1vyqnc aT4R3W9S9P0Fx7k/S9GlOKd3uhRHw8wLhov143SlYpuBSwsjYUUCE668YqHyMJflMjwWXOk8vc02 yDkljM3Tuikp3GTmeFM9TpvC1ES8EfldmI1sBaes/CyZ61XsAyfRKUi+ZFj1qhwMPfxunL8CrM/A VA5swFkXnIZbVizD1vLBuOrsI/DAXfdj0/Z220xUssSji1+6fk2yUz326Q7S6Ntz+uyXZgd0UopG 1jivlVkydcISEWwWRRjAzZ5/NOYNWIvnX3iLyGpbEEtyo1MR9N27I047DUNaVuCP/7ME1XGGTAtn deepE8NmJqJ9Zr/soHztcyXv6nt20mh2yi3RN6KV/SRAxeCRuOzK8/HL//4WGne02xYlpMyC110G YEIyFRxnOgIoHCk/rQ+pVpDelMfl2ExptC1Q9nOUgxicT2mXrbRCPu+wlMdh7g+rdOoPXRX9JjnR VtlcoCtuYyyQ2WI6ZX+0z8toeggORQvtqLuHM1wM1h54V1zJj0RfeMU5eP62n2BZUwWuuuYULLr/ Xry2qZUfvA4yw129D6AkT0JjTFmy0X3bzVlmnUfWNgjvUjslsWZ6yRIC+UWvtilBYbBIGNvU/ONP xKC1z+DlJattABfatrfLMs7W9mC/wxdg1rA23Hnf0+jlYFPmaPNve/mGA1JOJhYFb7MVEZHppZ2p r8Rk5wtPmKr6QTjv8ovw1199F8s3tXCGOHNvJjvwqlSF2lVKtSSoz/hYHVreoMFeryvC05C3R2Re fwU9lE9RpiuRI96gS/URpHq99NXhBMIEJa7b7TUhQbkLs7KpvZZp/xSFwBrS8ehyVLsWNHvDtiab fDZT3JkeJ4tlUuHkKQtp2mFJ7LoclC+v8lQbnKiyuGOc4T3IlzXq2UwW+aVT9qVPWEycKZIqYl1X 1G9rFOUGu7sRPnjHfSCeYLskSXohCFfwZcAZn2QTp77CfKaYwfQrLXyEhXbN74V2d/Ec6kR3R0jb +RU8JE7jN74IswEQZYTiBD2BKKM2PlMjfeJT8cSgEPWbAMtnByVCUBmYclIDRvZI4ZYFq0IxI28a 6drD8599TQVv7lDFGVGbQdd10u5YXJzFgrl/ihAlMl4ej0uQWJldnuj6S5fiFa3z5Ipe8GXCKFq3 xWbgPOOC0rzzCeZGpTCnFUx4/zncY+GV1s/lpHUh/N8K4kvliT6Vl8f1Ky96SVFoPoHS7KJ9HryS +9Ob0TmPys9L1pjxY1HDXmpzYxOad7WjbPMa/OibN2L9+m3YY858LDjmIDz/P//DAVwbdNErr6rF +PENKO/pxIZ1m9DJuyHtEl8cylBTW4l2PvIaNXYMulua0bhlBwYMGYoxI4ehfVcz1m/cygasixof TXKafFjDcAwZVIdttGNnWzfUrtWJPHvfnVha3omy6ipeZIERI0diyMBqNG/ZgqZtu1BVW4+DjjwU tSs68adHl9qJ2cVHncNFN6gWzZs3Y8v2FjtRNJPY2dqOocNHoLq8G41N29ixVGDUuHGoqy5D44aN 2NXWg6qqcpa1ixfzGowfNwJlXa0sfzc6WJ6sgyoucMmct5nUO2namLw+Skp470ANXvzRpncC9uiB IvrojGJLwdN2maYDCzlYKCsXkyl/UVpl0o82KbgcXRzYMwdcEJgdnaaXg2VWFv0+hq+d92DTxka0 dvI87NqFX3z/l9i+oRENY6bh2KPnY+NTj+B1DuA0yK6sGYDxo4aht7MN6zc08YlKpU3Yulyzg/qr K8vQ1tGDMeNGo3XHNmxtbkVN3UCM32M4ejpa2e6b0KPOlPZ3dXZh4LBhGDG0Hju3bsHWne2o4e7q vbyoPHzbzSjv2ImK6gqw+WL0mDEYUFOObU1N2KoBflUd9pl3MA4cuBZ/fPAZtHIQKLqRo0diYF0V tjY2YhtncqvYiVeysfd0daJm8HAMqu7Fxk1b0Mu2N25cAx879GDD+o1o53hWM8y62ZB/xo4fjYre LrbLVp5nneZqDTpCf6W+y0qc+DerDoN522QXwHoMNzKBN2MJiSAoByydDVXuuhOaKEMm6VfQI1r1 w2HAFJtLxpiWQWud+uKtkBl9liCjxmLRCRk4aC99Botc/tOfgmw0OyUr2m+IeFD7KJQjAEWXh6U8 aTqTKT0R4bENdCIso0uZPS3bnFc3GWzfZoPj5TDBPJ/EmS7CsrTKaU5WmdUmCr5K7UjTicgsKXlF Ot1Oxua3iDcawky/+Zs33Ry4dXS2o4OfoWrt3onWgc3oqGujJWz3maVRVeI71bXJk/1MF4WsgIIG nOop6C+iNA1BEpmK+Ap0ocZIlcfn85FFExOuK2jn06KeKtTsGIC6nYNRU1OH6toaVFfVGIf86z/Z +V7bVMHC/lMaCLtsUaV1aT6JuvM6RZfCUj7Tlvd5YoLz2UsM7qMEH/mDa/Jw5fPKUxof+DidYleY 0hVLL86ldP2lJdMvrE6zO7ucRrFpo4PkfMvLWWqAidNK2WzE8ZDqMnlV9bjwqktwxH4TOQPHdW87 m/CrH96E11vqcf4lZ+KhPz6GY049jo2qHldeewl++O1fYXPlSHzog5dgypgBnL2owJrXXsSNv7gb jS2cIYm2yI5eVOPiay/DsJpa7D1zEu778Q/xyq7Z+PAHzsBADo40wfD0Xx7Crb9/Ap2kXXDOGTj/ pAPQ292JXc3bsXrNNrRuXoYbb34E+x59AmbXbsQPf/4wFpx/Ls47cX/eJHP2hAPIe2/9DbaP2Aez xw5FxfAjcdEZzbjl7mdxwnkX4Kzj5tI/9F13K+7+9S146NnlOOqsC3DolEHYY+o0vPbkg/jRrU/j yo9cjYNmj7NZldbGVfjRj27HsrVbMXjsFFx77UWYvscg3gnyQrlyEzi+TLo01Ys82V+LTL3//5+2 OtuNGB+8yabUIvH9Ld5UrLepvu2JUvjP6i2SJ12mgxcK4dwfgmkA6fKEYQMO5yIrptRXBbTOpZoz wFd96HLMmTKCXXY5dm5ciRt/dBtWbCvH6ZwZXvLAHzH+2GMxoK4ap15zObb95BdYWTYOH7n2PIwe xEeqHOS88dwT+MWtD2JXly5e7g3e5VYNxgc+eSlqe6swc/po3PS1b2DJqKn42IfOw6iBgff1ZxeS 9yE0twEHHnMSLr/gGLbQLrS37MQ7axpRsWMTbrjpIRx68mkYuOkV3PSHRTjz6stwMh+vaza4t2MH bv/Jr7Ft8J44Yt44DKoYiasvXo8b73wKZ1x4EU6YP4OO4Mxu61bc+tOb8dfF63DEMcfi2EOmY9SE Sdj68mP4/h2LcPmHr8SMPQZzsFaJTe8swQ9/cic2bWvFwOGjeD5ejv32arB2uaVxIwbXV9pyAxU1 nOfm7d0erO2GKi2iC4PAAiirv6RuHRtOeXXsggQ/O8wgDvd2EAiNXXRhDaBaii5SBi55CGVy+dLX P7Hb66qDQLVDt7CkigwoPlkU7Av+VLsVIJNN/buzIRO2m0ToO4JN0lUquD7hUn0OF8zTYaBG31CW yXYfpTSuRPr6d6H1cXo4ES83BR2RP7VFINmQhzlccZGdCb3D9TixhzcqerLTxWtAW0sbmus3oWnW SrSPbKGCYGwynJTYEsELFRyqIahCga8YH7A6OtwhxRViyz+IKshxvPOVzu9WP1kq2ssxcNUQNLw5 BWgbwiqsQJW1szDjJr+m4xO3zuOs7gko5X+nS2PJ8/py/nz8XmTlZeR5vG6LdMuBcpncJQGuOCXy tONckeAS6j+nU5yX5Xk3IpMlWv7KOWsTfl5FklIIou9vsOaynDrVkabdBmsaOgnjiWhwMusRpC7a eXmSKzmlgsvUoufJ+8zF+46aiptv+DG+8MXv4B3eCVx+8Qmo4bzHxCmTUNGyGX959Cm0tO7A/ff8 Get2VOLqD1+F0d3r8dXrvoH/+O9foHrPg3D5uUehp73D1srpAqbHQzrxR02airnTR+CmG36Kp9dX 4JOfuhyrX3wc//aF6/GDXz+EI848F8fOHY8JM+fi2ouOxXMP/AH/8aXv4J7HXsOhCw7GxLEjOaDj zNzIMRg7cjBqG/bERWcfjafu+A0+85mv4aEX1uHyq89B45Kn8NraLVj+2kt48LHF2PvQY3HNufPx p1tuwRc+/zXc88RKXPahKzGxYQDqR4zBvINm4/E778Ctd/8VJ11xOY6cOQg//tb38W///l282zIE H/3gWajlrMiFH7gM0wY143vXfwfXf+NX6Bo2Eg0jBppv6XZ7+yn4X1OFHJFGl7vn5Wu1Dm8hlo/1 5fXgcb6uHO48mRwpZkjxnnYZ9giFGdkh+7KBXQle53EZiksFzX7Y7AQ7Uq2bspvzSJi1Qc7EqsSh 1AGZrfOgXJMt+UrTOh1t4bH4Il4zp3MOOxyHzxyC73/127juyz/CrkFTOTA/DGV8JDl+0iQMqevC fRz479jVhoV3349lzTX4h49fhZ41S/CfX/w6vvrdOzBx/kk4+/i56Ghvj+1Sj2F4B88Ocs8ZszFt bCV+9J2f4IV1FfjEJ69C16pX8aV/+xq+9r3fYfJhJ+OMY2Zh8Pip+IcPno1lzzzKdvlt/OL3z2D2 wfMxa8oY+oAzwWPHo2FoHYZPno3zTt4f9/7kRnzu89/Eiyu7cPU1Z2Llklfx3OL12PD26/jDgy9g /+NOx/kLpuH2H/0UX/jXb+GJN3bhAx+5FENqOFs9cBjmzZuDl/7yAH54x9M4+4PXYEr9dnzzK9/C l/7rx+gcOQvXXrzA2t77Lr0MB02swg+/+UP85/U3Yl3PUIwfOcSWH8i96qEUqwso7gcEp+FaP8Rf 1qYSutBnSYgJCvUSqtJAegymduX1VaCja9lGPC+W0JcFWmuHhIW2GGSL1u0UvUJeboAWH4vLVIyz Npb1fbRUj//4M7+YWlnfN7gvhPWf7LOLHWE2c6yYf7o9zYJGS+5P+SbTnVFYQnxmG2mKy0jNyckk E81Xka5YSvBpHpbmzTZO99i1IkHILv852O0Q3G3LcFZK+k2O6ScYT4Jzee5Lr2WR5GkdJrj065ph ywd4Y97R1omd1Vuw4aC30TpqF0dNlNRNqfyVd7NOdvsTTYEOpE1/AVfA8yEM6fVzPo8dHvT1r9/p 3a7ifKpb6YIepru4RKiyB9unNWHTvu/yqUCLPfWRP6yl0TcKIR986D42RD8HpxGffp53cuUVFDuN 4zx2Gs8rztvhslMao+PBxmlRT4q35uQGeewEbozHgqeGOH0aO61in91yebuLnU80+YGaYKmOfFq8 DnNaxQopPEDCUfC/FZy3v7iInzZofUFvWTVmztwLQ2uBu37+S/zsjoV8VMnHORyB9XS0YQMfX3Vz puudZStQP34PzNlrCB5/4gX01g5EJae3n130GmbOnYe9Jo7GpMkTMXnKREwaPwpVHM+U8/HOE3/6 I+5/9BVM2Hs/DO9uwlPPvYkhw4ejef0KvPjuVhx06DzM3m8/bHr9OfzmD09iU+NWLPzTnzg4W8m3 DVlmNTKe1HoLr7u3E+08CSbNnMZHZYPwzJ/vxVe/fyfW8DHuzrYONG9twuqN2zH/mEOw7s3FeH3t NowYPghvvfIimiuG45C9x7Jb6sHbzz2FO+5biG2dg7Dg4Bl48cmnsaWjAkPryvHUsy9ixJ5Tsfe+ +2Hu5KH4/U134ZVlG7Dmnbfw69vupx6Wyxo+GzRtsg7THUu4fC98qTpwslJxSt8fXr4oFdSeeH0w naXwgpl8v4gkRK43AWVJxynWNUttwtt9vg1nTCUSRT4i3uQFg/tQC9fOm4HK2kGYNWsv1Pa04pff uwG//fNL9qjS1irSjs1sJx0c7K1ZuRx1E6ZiyvAePPbky3wEOQSdOxrxwsvv4oAD52LksIGYvNck TJ48CZMmjOFjc85id+zCg7+/C48/8zpGz56JyUN78OiTr6KOj/eN95UVmLf/XBx4wCz0NL6Fm3/7 MDY0bsOLCx/DvQ+9gB4bqMgfbJcsQSdnDLhCEnvNnoGRQ2vw0J2343u/fAgtXI6wldN4bTu3Ym3T Thxy1P5448VFWL21A8OH1GHx84tQNmISDpg8jPxl2LT8Fdx+15+xq3wE5s8ag6cefxYdlfWoK2vH wmeX2EsTE8aMwyH7TcAff3c3Fi1dhY2rV+C2n93JR7F8ZFvUPtgO2Vt6HRYc3bcNiS1PVwpWkLH7 lJqjt4++lAW7HFdKV2lY4bxyXsWp7aQoDLYkJAan0Y2Ip/vgEnrHpbH41GztfEsRTJeyVySuqxDn GP/OrMspxVYKVwpWktf8FnyTx0tGet573ZqviXuvOvJyi/Ph+qs+prOjHdv3XM/Hplw208mZKJ5k 1teqv+VgTj878XTy5X6BtgD3fBzHZ/QOt8GhyZSOwq8vXLr/9/XbYLSzEjvHbcGOoU3oZN8X+tnQ 18pHpfz7XmBO4+3V85L59wSNb+xGRo08hlKy8jBRO8zjSnvdmD2Exqh9QqrAkbyFsMc4OvNKcamX U6BMKfHGGYDBgEyX5Ec6yRJcPB4yXskh0Byn3iwGl+8OFdj5HZenFTxP4/x5HudVnNJYPoGpo6/k guoVS1/CD29uwDknHIv5J52KHVs24Z5bbseqVt55kV7yNcvHlG2dUVvL9Wpce7Pg9DNwJBuzgqa8 337nXczkY87TF8yVW9C1Yw2+/NVbuK6tE5tWb0Z1dTXn9Cijbhgu4qMmrTmTh7q62/H6xp2oH16L nTubmeej1Wq9TduNle+ux9SJoW6sLHyM1LFpBX58w0248JyT8OnPHYKeth145L4H8dprmhWin2hr ZWU5amvLMWLCdHzwH8bxUa1O+B7s3LAWzbzgD6Dexs2N6CyvQh1lakH5rPlHYY95h9sFULM0q5av QhnXL5Xz4e6Gre1cD1fBC38lmrg2ahvXG3l9qPyhev0OX+1H6dAmvA4CXYn2RbL8NxNF6/xK50OK UweqVmgw+l3tnBkzKlgQZREsOtkT1hERkASTQVlZkF2SnbRdxxXppy7nNdpsQQj16M/xjK2cxBtd VC9TrcG4cMbVvHl49emF+OWowTjllDNw8rk12Lx+JX73699iBWWGoHbJOwRmy/ksvn4A17qxvk6/ +ELaE4La5bI338LMgw/FZRecROewQ2xvxs+/dSva2trQyBlbvRlax8WfWtN5pnhlJyVoT7gVS5tQ zZcmOlp2cXClBcbcwqa8C40beWGZNq5gCdvQ1ncW4wc/vQvnnnY0PrfgWLQ1b8UDd96Dl3mOeLus 4vrNaq6VmzBzHj48bqbB1VY2rliJFkqrZzttWtdIO/VGWg1vVspwGM/J/Y9XHWrLkm4sW76ebZJy yrrRvH07z5UqW4rQtn0DmrTmTu4JTqWf5QfVgUCGYF5AtRfhGDJcyJaqb8Gc3Nh1yAQEPtcj2qDX a0G6gu6CbKdxXlpk5M4T4EFF0Jy2OefSBcX0EeCc3t4cYLZHWzXDw8uQ2aO0gsst2OY346GdBrso P8qQf0WrWeUowPJKhyIES1xuIApHSjQitTD9m854vqjNGVBH6krtEbewggW5QYfgCqkup8nDnM7x lnc7KD20+lBms08ESTDblZdtEa6aMTuVyAXXL7zREO8wxQ5zWZLLYT0jri9m/9tZ3o72wTvDzFhW Ca4kcrlez8a8k6t4Ck6WGR7ABbjnnTAzKiBoWggZ3BUWw53u/1V/D2fi2oftQM8OPb3q2z7df1Fr Frk/pdfrTpPC7HAt7+aLwWW4/z2fCcslHO/0HotM6TQvWv0EM/XKR3lOJ7y9xOCAnD5ZaCATEJVY sXiyl+nCmhOorBupQY0c5/lImkWqNuFMNmNr1Oa1qNN1C6efcAzFd8UGsotBSAWZTuswz0ufd1TC pXDhStkr+hSelic2PSuHtufYc9reaOhYj8//479yvdd4HHv6mbjq/edj5ffvt7dS3R7FejTazkdY ZV1tuPn7P8Dzy7awbNzig48/9xlfw5mrpXjpiccom3by7cGm7dyXij1ecAMrlYOgti1rcf2/fR1N 7YSzjR587FEo37wCg/abjuGThqCmqgctvFD1aDaDF0m0v23yVIZentjD9piImRPq8fXr/gtlA4Zg 3hFH40NXXIAlS5bRPtYI609xF++oVr7yFL74zbt4ceagk+ueTjzpULy1fAv2P0gNTZ0wDWVcxRcX Ft58O379yBs2OzNk/EQcc8AkrN+yjb6vwrDBfOlhlfb7AsaPHYWhnDlRZyCb3LdqFTztTKbS7mfV l9OkvtxtWmZJGYPXd3/0+lxX0QAwsJmtnizijcDMJhpq7biIqJDJ02X5SJIvn1xqgT2IyzUe1xMd k8kRnGVQEEzytMh/1r77ooePND/9id9i5B6TcPpFF+Dqq87AF66/yx4Tyj2ilzo9YtcLCd2t2/H9 r3wdyze3q1CYdeB87FGzC68uXYGvvPkaZZOejW7nLr1wQxLqkQy9GNBF3u9+5WtYvY0z0tJP3lG9 m9E5em/UDt2TL/iUYwdfWuiijLHj92Q7ac/qWAPFsdOmY8LAdvz7Z76EwSNG4pATTsSl778AL7x4 vdmrgZr2VVS//OrCB/GNXz1ug7nqQSNx0rH7Y8XqHZizv2YauN+huYPrSTlsvO2nP8HDSzby0sZH xzP3wcF7DcR2vqDRXVaJwQPq+XbeWvtA/cBR49DAl3XiPVX0p0WlD15PpbERSn9FOqtnQkNNWfPa PafxuRKPxe3pYvagpy/O20mp80B9nG4u6dJw49Kv9KArk8VSeNqtSPOyQnVgrSuaFModMu4T8bpd WVt3ge8xdr1BTt/yuxjpNxtoWKnridPtLpYu/VKbrYwJk/oSP7cScOaL4IcCRuXOyyhgKSpxlvSm eadzmaHHCIMXnmm2Hq7cKrcvpUPS2OWksKK0uzdP6PDs5ImADO5SnNERDg+xY4uhSc7Z8oSujk+W uitYbvYVekr0XoPXp7la9WeBNWN6Cu3F6YTOt4W0XQT+0sd8/eXzRTqiCKdxHN+GDg0hNBwZ7Ean qYIBdrelXpnBhRSwIaX7qbxfUxoZYYa47qRhis54BYt0blXBsiDN5aR2KJ3mU71Kq6Mqoom6BUsH d6KVfJMVaQTrL2hAVDd8DK744BU4/tCZvIpxrRB1cahLFl7kuBeBOgsN9Mo56zZx0ni0rl2NN9Z1 4Mqrzsbs6eOxF/dn+/A/vh+H7Due6+R2YT0fZa5bu4lv8fHix4GUZi0kg5NieHvpK+gYPgUXXXwK JvAR60FHHoNP/sNFmNzAR0nPPIP6qXNw4fnHYcyYUVjwvtNxHF+s6ORFU4swNMuimTRUDsD7LrwI 559+GGo5J97ayk1d2YnLZl349Wh2LNeoLXpiEfaefxzOOfFAjB03ljzn4ppLTkAt1xrpxQt7Y5Zx V0sjnnl1FU665HzM328qJkyegivefyVOP3YeWte9i1dX7sAl778Qc2bwsfC0WVwfeDoG1nImhr4v CnIZQaortbQ8uoj2fynjNqQdqNLWxpJzwtVZZ8u6sHbsQI9zxXHw34rzbMr3afMuJEHIltKBs18c 6AzdYzI++NErMH+fSWyWrXzLmS0ydk567V6zWhrslHH2a9yECdjJx4jr2gfhA1eejql7jsHsgw7G xz91JWZNHo4dzTuwdu1GtslNWLuuCW0ccFVa26ZMNszVS1/Hxq4huJYDxCkTnfcK7DO1Aa8uWoy2 +om4+oKTMXHcSBx2/HE46/h97G1RlVS28IVWVAwYiguuvBynLdiPswZcgK0ZbLVLO7e7UD94GEZz rdzzzyzG4aechlOOmGV2n3v5xbj4jENZDvZppNcbpjqnW7aswuKVzTjvqvPZ9vbAlBmz8JGPXoOj 5k7Bru2b8Txfejjz0gtw+Jwp2GPyXrjimnMwtJ43Fv2E0Fb683k/TCXA6la0hq5vG+q/D/N22rdl lFBQBEoaTISnJbC+zuAFqHQV6ZPBMQR60hbIHVUUF/iLwH0yNtvdByp9BZ190ASUVh+GL+m5LDmi dfqC1EKqr/yAcx7hVe5UrpfPzsFIaBRWuVHi7lT0VVoSYnWRYKzNxPowm2La7PEOk/YoabxKWGdK IbJT57/9Qj6jMZzTFOI+eMkqkhdpM3ixfKMtoi/G95Gfs6MPPtNTsNHK5XDFCtEXEvdeQp4uunW3 rOIp3X77suXl96UIkLRO8zRW9xFYMXufg65jqwwdiTVNpRMhTCorB5pQdvYBH0xRB5kG0RpdBMqP 6kwV3CijifmsYmJewuUMSU8la+DihvusGEkymUorSF4+OJ/i1F5R+s9oyCt8nk7ybNqf/C4/K0NU Vq5HNhvWob16ON532rE44oiDMGVkNe665fdYsrYFM6aMxuIXX8GapjbM2Gc/HDmf69SWLOKbnG9i 5oGH4LhjD8Xhh8zB9ndewc9/dS928G0/bYdgL1boAstZtGl7T8a615ZyZqMVrds2Y82mnTjyuGOw 4OiDcMB+0/Dcn+/HHQ8tQnPjJqxp7MJxfON1wVEHYirfvGtq5tTIrk1c17QYDRMnoaZtM55c+AIa m4ETTj2WMg7GnL3H48n778NjL7yDyvoGHHPkwZg0pBIP3PtnbK8ajpNPWYAjjzgQM8YNwJ2/uBlP v7Ye4ydPRu/2tVj85nqbiVnx9jtc8zYdp5xwBA4/4gDUd27Bj3/yW9qzHe++tQZ7zt4PJxx/GA45 cDbXKC1D09ZmvPriq9jW0hnuhulY1rTVAVuc1Q/dHnD0tepGf973EMBc6WB1GmVYexJt5HcO5zba nCBl/ZfRkz8Nfl54u5CeoDdQKR0G8SmXiIrpHCt6l5XJSVW6/hL8ovdf2DNQj0aB9WvXopprw04+ 9WgccfiBGFndittuuhsrmtqx96zJWPbiS1i+cTMmzpqNw488kAO4JfjDY2/goKOOxrFc/zj/gJlY +cJC3HzHI+jgbJXaZFj7xPOFW3NMmz4Rby96GRtaeK/Px/BvrGjCAUceabyH7D8Ty59/HDf97jE+ ptyGt1ZvweEnHo9j+VLNrMljsLlpB2rRir88/rLNDrZvXo1nnnwJO3p4c3Eq29uRB2HvyUP4CPUP WPTGKlQNrMOhLR0KbwAAQABJREFURx2G2ZMG467fPYCuQeNx8slHW7ucMLAbN/3411i6civGcCA6 oHsXXn7tXV47uvH2W8t5gzQPJ7LtHXH4/mhb/zZ+9It70cxtTFYtX4GGKXvjeLbZ+Yfsh/aN72I1 7Vq2eDHWbuF2OTz/FOR6rxPvN1SRDvM6DDC2Wfop1KVoNBhSXKByuhTiaa/HEDu0EHt/pHbktvS1 o0BfSpfo7ekGydS/Zu2OeZmpOg6BjcgAtD9CPBLE9XrsOMWCGTxhNFEpEdNZGZimNknln24m6UPj DdcE9QnmREZ+rhlaPEVlCBJErp/LZy7Id7sEiMHtNE7J4uDa9BHvejNd4okyjC/KeE9RFBJNMxNt vEF5CpmOmDfbpSvBWf+ng4B+zTN7ogTCurh9SBeX3bRyu6Cd4xrRU8130NUGKdBYGPP9qZinIBMq eVGm4QO9ZhPt6YThnCblD7CCPKchQ5Ec15en/9/VL6XVW+swaOtILt2o5rnIfosTF6orr690LCD/ q2hyp/3M9xoPkN5hig3OcscxDUHGpzirB8sUH9xtLqsYWzqX2SSbcyRuR9lFF3+U53ConMwSzsb4 yeyG+mNEa2gSxhZQKKiyMjEEk0eZgvVnuGhSHudVLB1mIGdgPFieGfE4r2JPO11eZoHGpDqZxUbr nSzlqhNT6COTMC/dbivAHu30YMiIYZxZqsI27qvW2s5HE7yKmv9U6ZyBq64bwH3XqrBlC/fj4YsP 2oNqBHkqejrQxH3UerimTRcN2aHgPpQMDQYi2N4CrOa2IiMahqJj1w5s2ca3bih/n0OOwokHjMJv 7vgTWvlGVwcvhp/6t0+h5eUH8K1fP8bHnFXmRzXoTu53VTdoEBeBD8AOrgNq3sEF75yJUcc+omEw t3rgyc+LXCdnWuoHDyZdLbZv2Yod3FOoio9T9RxLmxa77yjY1hsNHz7U9oFr4v5bbbSpirpswTxn 6oY3DAM3JWL5uUaBnaRmSrysKq+nVWNen+rUlfb2qHKG1hU6ZPGpQdI75jDhrB7FZ8iELuYtkotJ YHqcP8WXSLtNjjI9tE0VY7YrXSJ4ufRoOvS9hXNAOFtXRH8UB8lkaaJIt9PXDSmvn8mO9htM5Zcv GPTIkRNxfPt4OOo4xbW5cTMfdXLmjHWS8ZKusqaGj7gH8OWV7Wy3nVwTVovhI/g2ZnsLmjY3c2Yr zACb0Og3s5vl0UySfC4zbb+/6hq+YTyULziId4fZP3GfebjgxDm487Z7eIPCl346gCs+8QmM2fka /vM7d9mjTG00p8lhrfccOHQohg6swVa2t12tnTbTp4HpUJ4r4KPP5h2tnCnuxcAhQzCknvvAbd6C Fu53qE+z6VxR8PZibY9nzwi2vSo+S2riSxthv0US0X+iHjZiOCp7O7CxiXc1apfWScu3kqS6Ulzc rggVyPR4XVgrJI/7JuRVT6pLqTNBJjPITmHSIV5r8SFDBRmLQ5wxwVVkPAV6axeRp09EGXrApHai tywLdpnFMoIshQdQyumn4LTWxpIy2UBQedaLguundIkqCs4roPoQhYIOYa23s8d/9izeCEhBu4J+ 2p7zadBPGumXMAbpNvHRZwUdAW80JHBbnaeHfWeAybZwTZRFCqntyrs/lP5bIdXjtKG1puUPGMlV DcX/qD2UqYdl1xg7WCQLY7Ci93Ivwza0trRga1sj1u+/hDc7POHU8SQh39u4DIcr39XNHRFoRxWv U1VsY3ouEqs36C4SGTIFUCElmVrQo7qIVUGIeTKxKNCn+hPke0728hwftKIBe6zYB/W8vlWzL9P1 qpTvJdTbn/SmNEpbHcjoBOdwwdxnpfYazNqF5IiYIaULkNJHu0kTffzlqSS77NJLPuZy8/iiRumF MmKvgVyhMmOjJBtwsNO3GiPMCiqlqr1Yg/0WRvgoX+JctjpkTztc8vTTYmnZp4ub32Xo4uetTPDA G2Ci1Wyf2aNYAt9jEK9+pttlCMa0vb5NpGyNxTSpXtEkMjqzU0qZl69kgfbccpvUGblNJjfRYwKj Pj2qlR32ggQf5Wq7hs9+9kOobdmAN1c2cY+26Wgo24av/fcNeKeRnwbK7qyDFMnWywfaudpKRaWy W+uRlFBaIVwUQ16W+QJ+vcVkNEYnr1AKz3D9+QVU9gXfF+To7sZoc+XKfEtkVG10fQ9BptvneNdl +ihAtpqB1GPBOjFDMBtqRbYanQt5D7H0KHi5UhZJFd7at2LmTVO0IXCmHLtLk5/tWGMS7391ITH1 LJIGfqYrAqTCy+OxpFs9E5m1OwOGrrI33rTp7WTdcJh9lKO7eNWh12MpK0O5VF75N5RMR9tmhBdh Ow9oY9XQUfjnz30Mo6ta8PrbazjjticmjyjntjI/wAvvbuaAUmUqtBMb6FKObjQUVBYNrGzzaypw m5xOM/3SKyuyc0h5ljnUVWjnIhKv/CSXhbRwer2C52B280SNEmYSZVdIu6/NHoNJTrBbuiLIYLKn /+DyA7/oxG1jD8rzi1j//MEyx+9el7BumdtLEMHC6NwOPnJppGZZHBaKHm7U5CPZKZh49VNQXNBg oJIHay+R3nldFhVKsfEpCr4u2CKYNLsuxV5/slchiAg2epMUTnTWLoyq+KBzS+eFBItH5xlrgllp CDpDbFmrm8w3UW+pcgXq4qP43FZh8vlias/JjlA+h5SKMwra1KEBXGsrtnEAt27uYnQO7GDZQnkK vBlHAWSpQKdry4F7HIdpQ8bihdV/wbId6ziI4/ZRlXV2nevmea0ZbpVH/VD4cYuhXv6I6ejlGlp6 q4Yz9VWcva8hr/Y37eaOCkbLxt5jtKE9tfEt+R5WQDVpNWB07xeMy9tfwKSpHg3gVjZgPAdwAwcP 4sa+tbyx476UbAMKsjetP/dCKj3Fp7L7Szt9Kp8uKQSWS3qkI1/n+XyBKdR6xpcgxLPbAZwIwkU7 KEx4zYBSuLRhil4yPKgsqeMETwdwXgjnSWV52isg3+GIRwM4KrRKKtOrzDqx7AwOxdc+c0GO6IJj vKNP7XB7dxdLokmlvvfK63VpFdiP8FRuvgN3H+RZJVfltx/LrD3pBjWMwf5zZ2DUsHrOmG3G0ldf t60XNNtVUo72XlKw6gqdudHRIC2M98GvdAiun9KhT5Hu2PmZv8MFwcRFeuczHfFg/Ezn7dGdh+ol XLYDcSn+VFa/aZWHZSjiTwZwYdDR1waX5zZ6Pm+rw/Nxvq4lRzDzG2Nzc57pPeQLctnOo5CsLoxf daOE6qS4XEU+MFrSxGGCuuHQvai7DUFYQW1WIwiNmOJI9ZUvV6aLvvbZuR6uZ6sbPBRz5+6DMaOG omXbNryx9DWsWLfF1r9Jv3S6jyVDP1Wgqw+6WDr2jAFXbIvnePpTknlBTjBa95PLd1qXk8JTvc4X /Cku2VXatyaDSFVBND3YIZgXwhUn5cpsIC7wUkcf+ozx/yth5ZFVqugwWlSJZE0fubLL7S74JNCa neSQnxVU3vdicqENF3idX5AgI9iS+aUfwebjaIHbacbEg8NMjmQEhpTE0rz9tdh8EMk0gEuDLApW Bbt1Xii4DqcW1H1iBKLhn3xcqjyCuQynT+O/hU9pPS15GsC1cQCnGbi1+y1GV8kBXMYRE9FyK2gv dnVU4luX/wlXzTkA199yDr7y8j3Yf8on8LOzP2ovPNlAzQZu3G+O6747mVa/pK2ybADXw32iCLvt ketw+8qN+NaZN+IIfrGll0R6MiD+Lu6SoIGgbG7t2op3Vy/C/UvvxbMbXucXXLQu1nskmujtIHOw J2LNxAFqT0UcwK0sHsDJl+5PxR5K+d/xjnM+58nHTu9wG6NkVzHaF6+NwudlOa/rchmKVbJYuqxv dnylEIViODjE6SDJBZii6EQfTLlSj41bjmLC5McGmtejvBsuHk97rIu4we0Y8ZSlO2Wn4Wgtq9Qi eYmyQhmVKu6mMrKkMh2Wlsf1pbBoltmSDmZFm9I5b9YMvRGaNUGK61Ts9C7f41RuUToSqMOXXi0q b9m6CY88tI7uCZI1u6bBm0IqX/Sez2yW/U5Hdr9rczqXofpXUQKfODxtyT6HlN91pbCMgfrNUgmP IcwyFera4TQ+SyqhXFj/FcopCcU1HokY9RfEIzmyTb/EjMK5QoLdlYGesWuj6aBAkxlN1ZmRMzto lKJIY3zxID2Bn3zRmJRfOGd1uMcmsIRMl69ONMjWMYS0TrzuRWRv6fYxUKWJfCXLpTFCGGyVs122 cXubJx97ggzkotGacdbLCwoFSZY13ytlZYsFki9MX6GAgTg5Wnl48P7JUWm5HKbYZFKeRNJUhlgi 5ZXLdIe00RHhsWhC0M2jeLwkOo9EWKBQKkp3psgaoDoW8IWUSWXW22NBYoE+ayeJ5GC65BQ0S4Z+ 1mcFArPTZCe8xhNpVQnqj/2mQWSpdYEt6LH1kbyQyh4RuX9ddHCH+h2hgxSjJUFRuYTST2JILHGi C5MoziepKZfyIYjH24D4nErwNJhc3apEAlOpdDGZsRhOKeIlMZXl5IJ52stlzP3INFwQmfEJlsq2 QmuCokRwulRXKKJbQSaxchmFO8G9UbA0oc108LaubBDqueuAggZZkqMZby2nqK7k2rLo44ryGr5Y 1GB0zTu5DIj1L99r0kRblS2sHcbP6DVij9GzMXvPsfwUIz9lp6c+kUZyqrjdz6D6eizY+2Rcc/TH cfdTN+Azf/4aWniTEZ8JyOOmww+ec7jnLaatwQ/FvnQ/pdfsTJ4zOICx/GvtJzYQzztJbDaetVj6 Q70ET8t+97kIxGN2ULbbrLxNhKQNMdJJlskUM4PZw5jbiUmwQQIB8/lgyiLQLyCmnLBgZEB6OqOX bBpjtIxVSU7TR0ekE95lS47n9RhFcM2y2UsRTie5UZifrCTU6Uhm1xISASo4Oy/SSLbfRal9K2Qs TKfPoA0pPHk8uJ3Ku27hiwa+1OMh40xk6IPfeixUpcFVpLU7Ez2+ZFBZ7dGoCxGM/KkdVMh/6okD NOOjzBou3pSNUqd9r/QRavEFWLBGdptf+agsNDDK5gXVsNEe7SMnc6rCx1Tt0ZhQ+oKAPW4LxJmF Kr8/ikt1ZQSxDMoLn8ZKS5yJjH4ShchEa/sWKh9/jAyuclldkqaw+FpYBpWZkdd14NUx6lFcpIs4 5mVDsI+peGdn/qMvNCjxwbHk5IO4tZZLQaKtLcm2qCdgCkfR22SIMQTbHGs6mRFU6SjW0QT6XGUs U0rAq6WvlRFDqt/sEgt/ebn2OJGzsvb4Us6XTJa5iw1BfPpETb78WdFIb5/ACoLZLNXutDbSFMW1 KJKnhdZhcMecBSur6GKQHeFGjv5kH+B1KLQuJNpOxNZi8oyXLHHqnKmizjAaKzhDdSm7yvxGRrQS lAX61sqpA+tDVysmi2nM7MhhxCQI7SuUP62fcO5JguzymcqgRFC12SAqnO1Bl4ECg8nWAFB4gbRI 3IOSovU6TVAGd7oQR0URKF84n0AuP6ItUjUEy6OOWC8qp8/I5+WE+iO7LvYkVF6ajTWaEMpcbI/q VTS2DY4UkMsokkIJrNNQLxeozw/nZnE5CC4OFOoi0vKKSPrULh1uaou4zYIMopyVVxBmrGwJk1Mb XeSyUojWGCJQ7OQL9geZ3jZMJvGOM46ENm3/Ls1pvRyCW9noaPXvMlHXFF27WVwLwiv4Ewh3kmau Feyaqjrs4Y0/B2dqIe38/GF1WS1WrLkZx3/zDp5jYQAnuSOGzcItH/8T9sR6/J+fX4jntm5DLR+B agBXRTsaW1airnworyMaRbbgC7ddjkdWvY0B3DNSbUl/NXwsO3zwaBw953J85KgLcM4xn+XG9y/h i8/dRzrZID+GoL5SIUYho7wTJGV1ZJ/6SurO6jXJO49iryv3r8sRj/k+8vmYwk1QPxT6rjD4df5M NvEKKoN4DM8ChLoRNLRNr/MiXZFei57MCFeqvIdUoTE7IsZ+8VfWafN0gpuBjEvpcHrnT1UI5r88 nedT3Uo73HRJtyqSsdHZkYdoi8mOMDXCfGNw8v5it03SXW+Rvmi/8zuN5zXQaRg7lt9v24HNfLNU ZmrdUHX9IEwe22DjsS2b+P26rXwTTnuHlAiSMYDbKgwdUMbGvjXzl0ilT19d6OK6g/kHTcPSpUux U99YpSy3U7EWnQ9pGIlRDUP4gfNObl2yDju4GFwnntYbjZ26N04+bAp+f8cD2NFbiz25C38dN1HV x8jXbODjL87uRRfb4LVu4FAM5pcoGpu2q6c3m0qYbqC8T/J0oeZC+xKtDZx4wsv3zuv1kPIK1ieQ X0E4+c0G3QnM6cVp/BFHRdY2bI2McKwK7widZ3exnYqU4RZZHO3zMpTi9zKY1W5LKcLdwuR/EvDg +n2GMmVLbZJvhjSM4hcLumxBv/oZdbxqZ+P4cXstY960foN9YF5tSSHrCzTI42ODPfbcg9+5rbYZ tzVrNtmjEC+P6LvZzsprhuHQAyfghRe4Psc23A2y3PcanDXwg/Z6waaHu8mvXbvevhyiNZz6QHfd yD1x+fvm4Z7f/BE72S6nTBmLao6am7lkYP2mbfYyQ8Ft/CbsAL6sw5eHNvJFIb1QwDNEJ4nMyYLp tgpWHavvIp6k7j35RiGU19waD4xysjKhloj1UAQswP7u/ifWp5Ui0eu+K1Lzd2bSelI6tNGkH7UG pWJbq8lib8vylVDylDyoID8Kng8uQ3DRiqa4RvIcIZ/pijaUpto9VLrFLveldgggG4pgEhXheami c3uEsxZC2iCfCmKxTWae2fOxHKYz8jrq74nVLsPaU3LJ3uhM9Vcaj3meKRPrAyE3Ulv1KHC4xyP9 E/n51hnWtzWTX0uVeM3gm+OdXa1G28mX7yq7eE4x18XvFq/b9jaW7+Db5fKLUXCmSG7oHZrpb+NX hza2bcCArmpSBH8L+ebWxfifdx9HEx/d/vdJ5+DEeRfi28/dz1k4t9AlRqdG+V6ewgjOxPIQ6FQ/ +mX9VMYXEl5XaT06ieOUz/NbfcW6E97rz9IxL5kGF5DB8yksc0zmsUCbHkXvPJrIkCdsAGdEibPd NdYQiRSTV2wqUKNLcwrxHkwJM2ZkBEqRUwjuITXIYcI6hbrzwKdjSHEeLv4Fu1Rwd4jxRlvs0Q8B Ru06HSdphJnEFOblEI7pcDkhsej1I0wduGLpDRYZ2mCyw20R1Mtq9JE/wPV5E33eaCQ+/s8fx7pH f4Mf3/uqLeKuHzURH/341Zg8nB8d7yjDwIpW3Pi9X+C5tzdxyjoMXCRPZdUbrF2swguvuhp7V67G l776G5TX6oQIQS8h7LHXTEzZczxOPfEAvuk6EJvWrcWiJas5OAzWa/A2bd58fqPyLJRx77ny2nrs XPs2vnfDrdiwvdNO5Fnzj8CMCS0cCA7GtR/7AA6Y0YDmXV0YOqgGf/n9nbiD36Us42vaNmfBu7XL P/YRTO5ciS997ddo46fFrB7lsxLByhL97X5yMutwKFWsGjQooY7F6jnyiFbyBVNwee57wfwORvd+ CqL3L5C4zpTeiHjQXbGs1rXeLs5c6M+UwUTj50e+nZjB4hOR2oQKwDgfHCId6ik1bohcSoS2xNjK b4aE2TTZY2WSD/hnvjEO+Yr+ibpsJpJKsrZuNDxoUG00og/yg31cN8NPz/BDorj4ox9G7apn8e0b H+Tgqwwj95qFT3zsUgyraOdWIjWo4JY0P/jOL/EWt7LRo/ngGdpXNQDnX34pjj94CpqbWzB86EC8 9MhD+Pntj6KTdNLHsRumzZ6LSXuwXZ4wC7V8K3vzOu7VtmyTnQMyU7Np+x99PD5w6Qlo5dvRdfyk 17rXF9kXGviiNGeUezBj7hwcOGM07h88Cp/gN4Wnj60Dv4DFgWMZ7r75Fjz41zftUY9qqp2f1zn3 qmtwLNvxv1z3c/AlavOVDFI9mM9kHINamQXzr7ByUgB5e4kEwW2UYGjJ8v7BFuEJSlmqWzGoLhSb HvUVhTYkuYEmzLaJxMiiZ0MbJgMrX3DZK6l2tLoUfZQRGKUpBukKfAL4G3eOlV4/RwQzOxir5Aoh n+qNsKg3UMWj2yB9sk5ldpgJC/52HteV5RNan70QjdEZLnLk6Tyf+CKTyYSfE4p1EZZh+pNkstrg xumlLGAySJaw+hcDBzGhDiSCef5U9xaY1uyLZAS9EujaRBrygbhwNHghG3kDwHEeO5l0ZEE2UI9o VMeyRnPSwQ7qFSBjoA1FISBiSw3+ls08DwMP8SJhVuvLeYzc9Cdn6vUTpIMDuLbWnfz+t74WlATu M8n58/CkiWBdnyt6ubWHvnltIeiv5GbvFb2teGLxA2jlAG7YwFEYxfK8w8et3POAjK43cBUKVAw3 aUGkEconqe+UDnUT5GQzoC6WsdO4T4XS9d/4ZEe0xTWbDhElsjNchCtSNSik+kVn+uhk4+EhvIlu pNnBbfF+xi4ZYtxdcCYzkLROL/8kPupXRCnpLsOZpMMKxDgLTMs0g1uxCpKUKuQiR1IOWpn9CZvS 5sshvE5q0WQnYeRJ9fjdt9tucsSchFKyE7RaACq4Y/xF11yD//jyP2Lv8fxeJLdUkOl61HXKBedi St12fOWL1+P/fP4beGFND6688jQMrtKjpIK/e9nwTzn3LFz3pX/BmYfuxROH37lLCymlBOjbrAv4 aa8Jk/bEmacfg4HcR0suDmWgLfWjcNnV52Pza8/i85/9Cv79P37KTyTMxvnvO0TTgdzhZADmzZ6A V595CXPedyaOmTUUP+DH6D/96S/jtw+9hjMuOhOTRw609RHtHd049OTTcPR+e7AD0yOvvEFFnsgy 7rMMkCW8rYU42FzwgZNZ+2Tmb2lL9bgsl5HGKc6mxSU7c646RNVXQZvSlk9gqTylnUaxtXC1bcED Uke2QXUqliwcJDOM7AJM2USGry8L8iMJ8XYB0UXGOhzC+wguqFDKylRRh3O4Ge51130aR80cw20I ONJSWfmY49zLL8CA7e/g3z//FXz2i9/F6p4GXHHJ8XyrjA8ao+xOflpt9iFH4Nzj9sZvfnAD/unT /4kbbn8Mh556Og6ZMdIGXXZ+qexVg3DC+7jR9IS9cPbpR3AQVxPPc2rkbF/9yEm4+soz8NrCP+Gz n/kK/uvrt2LMvCNw6lGzOADk436+1TaD3/B9fclbOPT0szB7RBeuv+5r+Jd//m88/MJ6XHjJGWio 46fdqKujowv7H3Mszjh8Ogd0oa5UXg9pHThMsblevlQihuDnkFefoTpTzuDylTISHZhDzAtXIqJQ 71GmIpPhCeXVHxHo9ZrhRcOQwTOaYjsDlVEWkrlUVhYpUh3GenSyUCbZFsoY4AW/eaGK+m7KMIpo VyZLCepRObKg9mk+i9CIV85uOpSXbQppOkDsaLqFTn5uV0KWyZE85ymmixIYiSYd0KZylDa/qN5l U4pkXjIFV8j0KG0QHlJc9LfTO4nXg8lP6IVPYRm9aPjLbGHbMc9SfiZbowb70RJdSHI/u1nOaGiv 6kZGZ4bHdEbjMqjXYWYAD7yO2Sx/okP5+uoBaKgfYoLM2iK8dAYb9ZSV29Xbjbbegme3onugYIvr ynipTwPKLB9k+CgpuCbUSeYLkii4LzO4+1G+VLpEcJ7ULaL0n7M4v+DelvI0TqvY6e3mgoSeT2nS tNERwGZYUK60ghqegkZ3jjeA8tY4gi/TO3spdB8rVt6NcLhkpHDlPTjcYgLNFsqwNSsishrk6JcI m9GIDna+QMIGG3mFLvwKGbMladjKq5PPtiDhOhsPbrfTeN4uWFG/+0o8skVKzb6YF8xOZOowWtF0 dWD18nfw54cexUp+lFvryIQrrxmOudPH4sk/P4y3N/Kbkfxo9x/vfRi14yZjLN/as7dsKTdcMHv5 GGs9nn58IZ59bV1YZxS8JlOsLlhVWLN6FTZv34m3lq3k26hNePnlt7lwnDYwaIZu5J4TMG5wD+6+ 51Hs5PW6ce07uP+hFzGdHyUfXMG9uMbwqwnDyvHimxswYUIDnnjkEbz01kZUdLfhr08/i+3dXHha V2szimP5GbCLT52LZxY+j1atyzJ3FNqBdLo/PK1YwXwXkln707hFHZHq3u6QRKe6i/Ti8V9ktcgG 4xFn9UGo6k7B9VveaSK8jyzVieqLQfTqOzw4bSaPtDTc6Ly+lVcwe51RecmMcj12OTYgyOwinTV4 yQg8skc0inUuqqyuz9qX66FuyRQ+nOScVyLM2k7ESbcs1M9sYgnXsb088cijWLKCj8bJq7fEagaN xuwJg/EXfid3PTeEbm1ah3vufxyjp8/kPm18Vi7b2Pt28zHoqOENWPrUk3jilXe5dqYXLy18But3 dHGNTK09ehFtBb+UsGL5Suzg3oVvvL0a2xrXY/HSlZx9C+eeZoXHTZuCgT1bcNe9f+UsczlWvrkY f1n4JvadszfX4XSiduAw7LPXCLzx+rsYNXYIHn7gIW4SvB3dbdvx2FOL0Fk9CHXc96mH031Dx03D VRcdjccXLuLSgNB+3E0emz9ZDAW53DxO/ygEHwVfZTMagvOioSoOvhOl2iMHXvRbWFsV6iCIybdV 5YlXXUhIDISGNseBt+QG2V5PygdCReHHo4AR4W1BVCEd18daKQKsYK/YJIUhlcGslTnaFVq1UWXn YchFfueNsqJE05/Jl08oNLXPXnZgKcJNRvQBdRqNTJISsyHWWeKnVL+uU87jfa/jPZYd6c/6CPHp JxyF2M+NFzyxRXKihUIoG/LiZdp/kut41ydaO28jrfApTngF6TOctR9KJL3/nF6TCD4LlNGTV/o9 qD1pT0Bf8hHg9Gs2yKEeHwipKPplOCLU9hiVEaY4FtdorM0THxwnPtGHOgt6CrJMXyqfafkBndyI ntc2Pert5ACtWz+e81pW0U5cZ3cVzjz4bM7iARu3rOCXXTiREOVYW+mjXzZIb1/d7jdisiCYgvmP secdJrjzpTjDiy/Wo5+7XkThFTyvWMFksU7tGkZetVdvDx4bIQ/SbW3IAYLpRz7FqT1K69F03yAD xaCCJFiHuSDh8nhdIFKYKY90zu9xIroomfLTEFOiyGUVEecyzqun9GIUjwdLq1wEOJ3JjwRO6w4M A6WIlAEMWaVHcJ8o0qVwL69ihe5Wvon3+BO8oNXi4BMWRF/3oHb4MN6l9OIdXjz1FYYq9njN/FJB S0c5htbW0eadNDzI4NAWLz/9PNp4e1I39QAcMiQrkekIZeGbPZx3fuHRh7CEF7o53FakwvbW0cxK OPdGDONmqzub+KWGsOO8OtWtTfzI94C5qOQ6t/FT90LPtg3Y0LgF62/+NXq5MavWPXVzqvuY445A PdcybGnmlPmAEbj6mgvw9uMP4Yl1VTj/qD1NR+LpmFcRim0VQp2Swz22hbcZbai3rG50EieDbReu +vF1chksJjK5jvgbsejt4sC4qC0kfKLpW5qE4O9ISpa3L7FllwZrsDqvqEnnVxhhZG1bPnE+kyFm 0eXkFdqOCEIw0aSTtt7udjz7+FPo5MOK8fOOQgN7B9VL7agGVPW0YPmqZnuMX87Z383cCLeLs7sD uf6xsZezv7ShproHz/zlHiziHkw93MeJfTKOOPFIjK3vxeqN/Fi8z8hSXWVlJx6592688tZaHDRn MgdvlVwHp7YhUyowpmE4dm3ewG+m8tEL67mHNz2NjRtQN3koO79eDJ88FUPLtmPx2+vxwg0/5jWB j3L5zKa8ZghOPO5Q9DZv4f5X7Xz8W4/LP3Axml95Ag8904LZF8+2gktNGoIH6AMmNGAxv0SC4CNl DFmES2V4WmUIPLqwObRvbPUpxUkI9RgG3g6WCJPngBg7q65bHkx3bB+qf3HmH8UEOFGGD5x5M0Wj i4vqPwuij4SZPYSlbU8avd1leiRAjhB7XpFwJjcimJYMD0FGgJge0eaCaAS1c7QkP/WqHAmvZEmj flF6TmrIellSXmFSXrfIaKnHYtJkvEFUoVy0w30WUYW87I925vsc6bQBkDP1E4tf/VYUE6jkeLkg WuG16i/FeBkyuHERKqUemBa9fYYvwjXuywZPTsfYZuXEHgX77JosAPuZoVz/OnXoVBuAyBe6USzj NWVI/Ricf/hHcc1RJ3GgtxU/f/yXXP9WhhoNEimXtwFBS6pf8Ah2+4NNut0yjYEnd3Q/i0Y2KC8x Ds+RWzaqzWgFdJ3RhGI6y4WDn0vZi3iqEw9JZZVsG8JHG51FsX3MPgUobWJjYYqEUUCmMgrM85oT hIsnvjvDCpfwOLxIfk6Y06TgIljqgEjkeFZHKDDhbrN02QAg7ZSIdx6JEE02wk54hVPIaKN/AjQc pUf8VtYUwXTGJzgvdtXV1VznE76PKgbdnWr7jwpe/Fq4vsfoeRZ27GpDO7/mMLCGV6ciwRx9863Q at5peYPIqZRS9LTuwFNPv2jrlJ54/FleDKPOSFzBzQ17dKWNPqFp3M1emylyLQJ3058xZwZWvfUy tnK9alXPds60dWHMlOk4/+KzcPDM0fjdj2/E8sY2nPb+yzC+exU+d+vDmHLMaSavi4PL3sKSPNNo /qFditPg/nG8cA5L6QwunAwtEcTjnVQJ9P8zyG3xKsjszJXj71JAWz3I5uTscnAWS3/WvqQz4XVf SprbVezdTMzfSGjAr93KteFltI2C7C1PdrAtfNSv80d3nu3NnCFmx1pfTbrwb3XSzn2ndvIR5xB+ EP6s88/CsYfOwJ/v/A0WLd/O9S/+5YdytG9vxF+f5Zo36nn0MW7iqzefVUbqU1NUO+3m1yB0d6+C y5wd3FUelaOsbc6eNR2bl7+LrTvbOODs4N17DybzM20XX8rHqWOq8LPv/ARNOzuw4LzzsO/wVvz7 N+5Hz/QFlKU3V/WRe+kruMN9aGev+Tqcx1m9m200ZDfBab0ORFp8E7Ib5ohKZfxtalKY70NB7CgT k3Ip4341RyZ6rMwsl+sUyv3gabVLW0uZw4lHauQlnYp2GthBnNRqPmQigQmuvipbgxdlCJ7qVd4C 8cYfY7fX0f3GebnKl+ovcrb1J8/94+Y4XZGbI9BoSViyPM7I2GU6KL0Jc1ip2Ko3b0gpwgxGK/Vv jxkTP0tGEnwQYsSEK28zw0p4s2esTdttx4PIqwFVD2G+5txopSsbuQVCG9Ax2cO1cKgdi69/6E/2 FRUNanTDLbg+yzds4BBrTy3NK/GFWz+O3732PGq5XYn0KoQhmSXt4AM6G0gWwBrpsQ7iNUJl5U8+ 18/rxuugaKAsWgbROD4V+57TsW35WEJ8NvZQIuL6k+9wt9P4zKXB/iAiVEqlV5zM1k9MQqlQ+Uuk 4IHNCHkIIZveY9Z4yNsjRykvp0mmYCJXXk5iPmSDQ122bDAe0qhy84XxQokuH1yGZLuznE44lclH weIVzqZBZQ+DZCtlW5VEO42GsEARy0863dFZI4+84s9oCXM7DR7zma9NT/Cv8dA4eb29tZ2zFr2o scZnQNQOrkddXYXNRMi3aZ24b6RDQTLczoyOum37D+JrcjNW8nMnN3vs1eNOdnB6hV+LnQcPGIwq flKorHoY5kwehr/+6k2uOeJFt7sc8084FR+45Dg0LX8DX//SzXjljTWYMu8wXHLK/nj6vnuwz6Hz sdeMSRgyfAQOPHAWnl+6gidqqNOs41b5qTsNWd0R7hinUb2l/hSt0RCuILw6aNXJ7u5QrUMivS4i arMKbpNyrtd9J/3WBomTXNngL0II520ntU0yPWR2SpdsjDKE97Sd4EILyIPgHlSfESN2C4bnoF2d noKV25ECMJ3a4xcG81G0wch0YLCyRn5TTdn26IM4zdzoBYWuFs5kUX8Nm4nJpp/rhg22GS99Eks1 5uXRth8zDzkMH77mbJRtXYsbv/EdPL1kFSfVtKS5UO+SXV0VfFrFulNpVMRQ/B60sV2WVQw2mIDq jIfVD0ZZZzuquKv67NmT8dZTv+PGnyxDVTWOP/d0XHL6YVix5EV86Uf3Y9mqRoyYsi+uPP9oLHvs IUzhd1BHTZ/EXdkb+G3XffD8y29yQCqlwbHW5zCrEOwIdaa81Yj6Ik8rlqECkDi7qJh/CROYDjOS UKAAjMe0jgUKvqOUYIrxSbjXYx+9UY7R68C2EOxhe5W8iPfI5ShvdK6I+RRn+EgTi2bCZJaZprJE 3ozPlKn+xS1b6A/6ys8vQRWEDqTxvBGQskwuk95f27kunALlmOCoU23dZARsdrS2Qxpv66lcyVPI 9DuX4GyDujHIyuK4GLsvC7yxnOSVLdYnkNZ1eL8hdutrRMe0l0167FeiTchmD26P9y+CC6a687IK 53K9DxOd1W+ktzw9rMkB45eKqMbsK2RppyxVKNihZGKWyVBH4IOxjFqdg34eYj4tpror8dlAj5v8 rt70BnZyCY9vDRT6mgHsnGswor6W61xbsWLzGt6alWOARKeGuB6BY9rL4+W3fppItTBfeuQ+dBoX o5L7JIjkyccKenFTtF4fgmV0iT1F9U5682QsvPMqlmz3smSVCqY/yna5fu3RuZDJi/KzGTh3gIgU 7BgLUKQowhxvtJHH6KJy5zGFOZjjFAufd5IbKXgel/J6WjQWKEsOSEOGE3A3dgjtuvzEEExBMuVE C5IR00WyAzaSBCuET2mihHByJ/RKlnNw1bVtC7a3lWH2tNFY+Po6PUnC+NEjMLCyCztb22wD407q 14DMZRXEqOEEqO3bprd2ROd2k9DTGuh0cJZEnVfj5u0oH9SAMcMGYQ23BdGFZ+TECWjbthXDxu3B tw5bsHTNZuruxf7HnYgPXno07r/pl7j30Vf5yIsaud9WdXk3Xl/8BoZOnI4TJk3HIK6Dquc3U486 +gC8/u4abNvpe8wFazM7ZFOhAJl9perJeVJ6ZxVObUb1VgrvdKXkOk4ynNfbn3CSqbx+RqM04aK1 fNQt2jS4PFGrCvRQw184SOn6pI3WLQnnh2gkrxCCLXax08CiCBeoBMvbLUPytKGlBvmh3Oq+vOtQ +SvQ1tTIt4kHYObk4Vi6fqVKgjHj+ViV2wjs0mwWVx13aCBHE6fsdzA+9aFz8dQDf8Adf3gCzR38 hBZnm7W6Te1OW4NUcpZPbS8Nykq/XoSQnHUbt6B+9Dw0cI3dii1tHDjzseqkCdi55R3e1IzH1BEV uPGllRwolOOoM8/BZafNxK0//D7+8uzbBtP6vTLa9fqrr6GOb3afcNJEVA8cwa1EBuCIow7BCn7c fvm29j526GynGRbkK7crtVXp4Ks8NObJF8rnHa57uR/6fsD5uipFJl/p4mf1HW2Xzc67OzudRnJT OvH3F5zHdJBIJXNeDRTywekzp5Ig7V+d1/kyegHkf/7sjHPZXjkFBqsj0ZYKGmhZSPhMh+QSloCN zPVLnff5fm1McWJ0kxzuFkhuWsZgQKFO3NZ82Z3O41SGdEif63CdboN4JM/hLiOLs0GWS0g5MypJ iRnSqYw2mgk8Vr+SQ3jBEuWZFdxC8KmRxHyIiBeN9mfklyH+9Wfn4eFNXBLB3QsU5M0y9jETRuyL fzr767j4wANx/Tmfx2nfuxTbusO3wY0wtS9ypnDXq/V7wc5gnvyin24uUr8G3kLdeJ2oxKI3n4qI 6b8VXIfoXI6nhcuCG5kBCvpND/F5fpGqPfrNgrNWpoRmdMQo7TNrAlmegr1RC2azBxGnvIJXY8iF Y5EjShhvRtE4L6LJUIGTgrgDCpeWINscTForh8tQHNiLCizbnd7t83Ip7xVgMCeIsdko26MOt0do d6pgrkN0mS9UDtJluhMZenRkLxVwtNbb3YxnXlqGC886Ey+v2oHGXVW46PzT0PTGEn5uaBsOOOk0 HDC8A7ff+TDauV5AdppOzm6EryyUcQavG5P23hdnHjcLv7n9Xu54zXuYeLU0O3lRqxoxHlddcAIW 3fcHPP/uO3hrXScuufRU7LyJL0yMnYTzT5qDJ37zKzTsNRvb163Eps0tqK4bhnPOWYANS5/FEto2 Y5+Zoaxcm7T8rcW4/isvyRp7meHgE0/FRYdPwHe+dQva+eaR65e9Hsx2ZegLi3hwf/ndu9PnY9Gn /szqQj6P7ct5ROshlZvhnUdxJLQ4yhFIeae3+o351AbRpcFw5NRCYrsDZrpgJ+XpEYMLDQoz212O gRP/hJkeZwontLWpyJCnd33mE8rxvMtXrLPOvrDANqK1LWojtNRuKPRtUqXbWjbh+dc24JQLz8Vb W+5Ee+VwXHz2CXh30Z95A7ALM7nNzIK5o/HzWx/CUaecgvYN7+C5V1djzxnTQ2fJNrdm5QqgYSou O+NQPPzbO7FsSzvvZoMF8rBuOgZPmI7LTj8ED912B5a/+SbWt57JN11Pxk13P4XRM/bB++ZPxG/5 0fuxe89A7/a1WLa5GYOGjsN5ZxyO15+4Fyu29mCf/WZZOTvbWrBi1bv49tdvoBLK50Bz3MEn4QsX zcA3v/srtHXxZYroSvnFvapUOriUT1O/ZXfnMj0G5/W8x4KHJ0mFtiVcnl71Iz8brdod/3XOeFt2 eflYTSNsD6IO39iCrTJaQqSJRDFleq29iFEUZPKyeWwIHtK8+J02sz3KlZ5s4JbBivklU/LE63K9 bJ4XjQfXkel1hPwUbTdZhItGwfMuz2UErAgCxH0huF/I3ZaMVuQxY+cHLzryr4LpibICpHB0W1yX 0ZPWZvETHped0rkUk++ZJHYes5+yfFDpOhTnr82SH7xOpBi98Yo4Cy45A8SE2hTfHK0dgBGD9CUG CmADDYM4kXhpyU+6cm4fxYc0IdjgKSFRUuTOwltAbQ5czbW2VZqlsCA7OrF8w0J87Z4v4rh978ee E/fHrOGj8Dj3E41by0daRS6sH/sFNhLaTD94HXv7SAQZ3vPevytvJif1ZoWI+VIyjZ4FFc71SK/R ugLJTWVGeFYK0RNmMiJOfbLaquS7XI/D8DcSeuTCrPxiighnUtZxJjQx0uGRJSiM+JTP8CqICit5 pMkHh7h+4T0tnH72CMnTCd4NdBlE2bxCqZNW5XL9nnY94pMMOVE4b6OCZ0HliMErLD1XwqCuMFPi 1OpaV69YjaaNO6zD1nqghff8HmOGXoirrr2SWG5K2vgOfnrLfdjFN/xqBgxEwzCtV6NF0RCpbtqw jrMJ2iyVGf6Xc+3ayJFD7QKVll/p8KvAiIYRqOP6t96OLfjlz27BtVefjY//04fVC2AJHzn9/i+v 40PXnYllT93NLRvLbR3C5tVrMLZhL7z/g9OyhtTTsR03/uAWrOKF3PaW663i5q07sWp9Ix9thUGm +8ZjlV+/fHBYarNovN153WR8qjdlYtvxOhTIZSldKjhe/Hm5lifc7VDe6SVLaeEyvIC5kOJzqKKs yzUd3o7IrMGaZAiu8lmamr1dic9+zhOlii4LJCgaKGaIJCEa/mnmVbzh0Ww5Nq1ZjVZuiMuGiXKu T7nvtlsx/JqL8ZGPf8A6oI3vvoBf3fUoujlAreQ+bg0jh/AFhzLu2bYJO9jhX/n+S2S8KSrracfv f/ELLOXmnKNGcRaMPCqHuu5AEvyrRcwj+cJEHdeCdm7ehB/9+DZce8Wp+NS/7Gcd2MK778aDL6zB xZ88D6vffAltbdzEehA35l25EsOnzsMHpx2owpjPWratxw++fxu2cu2eBmSmhxuRrli1yd7YVnco mGlmXKrtpL62grzHA8VZCB5lUopK9G+RLNKGnGbT9JJGak9Kl0+7/xwu3dZmpFJ1GggcHcrLnGzz i5V4itqN8tFeaxve6ggz2REf2qR8GEImI6czovuNJLOgr0Dm8gryPVWgyafyFJ5XX2qjDxdKRteZ l+F58eqXsdBOlyca53dYqfaiWWeVz8vo/hO/QiY7ZPs9vhc6t6MPLRHWFojwlxYyRZHJbu4FjHWn 84OmcykN+34tf9C3TbmsIQziXJP6C9Jx2cTAiol8MUF6eI2UI/gLolyBcJlWMRKgKgl4119TXssN wjdi9dY2jNLTp0Hj0MvN4nvj65bpIFXSnC+Dx3Yblr8F2bFIpjyti8SaLGn1E2W4uZk/U0Hk6Lcu I7+E5mkyRf0kCp4t8Aqmx8Aau2T4qKPssss/afYJkSGjcC+A49Rg3SAx2Y8wjSUMzgK6Q71xy7Hi 97zLcDlFz++jTEYmz3lcv+BpSDsnk0tkvgxup8lQBSRlcFmZHtkaSBxlsctQxuRErPO5HcJJvoS4 H6xhCcYgf6rcGR3z9nxeF0FdZRh0wmvN2LDhQzlo4uCsiW/7sZHrm5HCKUiC7PTga068giVTC03F Y3UTCQv1qZNODYKXUMrRLvvlvHiOGMGdsrn2YBN3qq8aOQWf+cTZ+MONv8Zr65rNPm3pQgtdLeNg hw+KhVD55Bf/lFZCXHK9WYr3tNuZbzveZkTndeL1LodYOjrG71CdTjwpf4p3XtEoeBk8ndaXEfCQ yvV1EQL6RTuUQRfJEjNwEpLQmkzanVRp8CERZjP9qeah2ZYwC0e4cMaYHEQToVY+5lOp3l5F4vAU JqjyKpvNGjDvGz6r7bHFcOA/jK/0d6GJj9515usJVfgQNQdkbE96nKq6j9UQjQvtVxm1TT12pyb+ ND6kALUX/hQU26fjGHd2d/JN6DpuQTIEXW07sXnrLlTVD8U/fPoavHrP7Xj01U18W5s+oUwvh9ex 1uDaY1T5hJURSsUjfahzLagLOtP6NiPiweqQ/Oo2Zat4vH6V9+Dt1fOi1iCMZul6V9SeRKNzMh9c RuCVrmBbns7zXk6zKJKm/ZDbV5Cr2o1y6RvJNxqrKCuYiTZfqJRWh6JQTbHuSSKct3XVk1vo5VHe YSYsOQRJQYbAafkKZSkwSI63CfM/BYinUEZShH/TaWUhj8cuyWVLniyWW70MyvsNTmqP8ypWffRo 2on/kmXlMP/JHvdu4CjY1tcOl5nqcXrhHO59XgpzXsXSaHaoIAx2tDokPIHJd/qYfQeX3mxpXY9V eyxCN/cS9bpyy7N8EGf9jOQaXi8WDJiO333uSRwyvBkX/8fR+J8N6/m1E143oi7Z28GlFFMnXogH v3QT2lYuxOlffh9W8CUhn1uTPH7iBxUD9sbvPv8kDh6yFRd++Wg8Qll1ksWg9qVQRrru2mn43Wce w+ETK3H19cfjj28s5qe0wlwTe49AmOgXwPtFH+J0c8HdoMZRmNA8FwOHDEJtdS3X7OoFLdah1V9U GKRlxxTn9eN1k+JkhV3bGTvefWptJJNYSLg8hzif8l4PjlMsfTxa2USrvNex09msZyAsGOJIF6qi mnESEJGZkakzqCTjMeWB2Hktl8Al13VLnhyizlj0ZnA0WgUXzHUzaWnXZbgoN18tTiOe1I4iWalN eQFRlzdYoWWPlT/ypbJYIKnK/CC+tIzCWdkoQaR2sRLQAy9oHHdh+7Zt2E5lGmQpL722cNbpklgL QdNQSRndNtcd+NymAhUvMNl8N3XwDquHMxWNjU0Uw5ceOIOHnRvxg2/e+H/bO7dY3bKsrq86Z586 fSm6iksD3Qg0N1ECD5gYopgowQtEDfiAQaKotA+aYORBeSBR4xOPRNAYg4kSeTCQGDVRAxJNjGiT cBEDqIAITUNjQ3VXd1FVXVXn4viNMf9zjjnXXJdvn72L5jLP2d+cc4z/+I/LnGt961vft7+9vGK/ WOFPeBbsHX5T0PJRi7zIN2Tkgxq5vjICjSx04pQ9ck40cdcBYJxg4emaCfxkbno46mYGlMCsr194 IEty6IgJOzXWsM49huY0+DkVGL7YaA1l7/LiQ7/Y4Hd6fGfE3SXzGnA6qOyfVTHyRIC4cDTvLvZ4 tV7k9aBcFOkEj3UwlL1mE6+RiKxvR2vjjFF7VF6Vz+KBgn3n+QM1AZ/R5Fj60PMfROJ68tGY3u3A WeCKDVk8/8VxAE/4QlNi9hF+y/oytziu+O0z+46oX/vAr9qU39y278R5/eXln377d9pd3lf8lyDw ml9AOJWbBz/O4KXMnJ2id3pQgrvc5wbwOpomLporxDF6glB+aKmLGvJgJa6oQ9Qpjndw2ZYZW0zr ELaBkIwZP7EfYWhxMyYntbAMTmR6kpEfZMqP3VhjTRxg8K29SYaxt9HkZjmanUx1PMGKnObnXB9x kW6Dcqz5d8BxdTtUw6H2gMbXymy8ftixfgIw8omtqvE4turWA+crNooTVHDjy/I1H3gJXss6ih5e TRzh8xhN66O5L6RN/NxShQVrncdgflSTiKkASWBoqr9wJZySK7uuxYIpNfULbxuj5VypGP2cZgsg C608djTfW9azF2lU2n/b1F+FIMECmd5Jinj9ItZsnN9Qrzx8ZXnRvg/I/0Y2ZmZDIy6eR+7peceK 4L8MUdKWfwL86EuvLB986SWzei4w5lPXyn318BvVVD682PBWftOiftdiqYXqESCLweUtb+TCqFZ6 3iLHdjyJoeF1HoiU2E+qVWBLql4rl6Q1rzpTyG/IfEfipJhEzzEMbvoWqiMveOAESnK55YCyfGsM 3jcBgRauKK4tDTL77xtqi2AiFxXcT9raovZ5XoeXeCK3bet8sfbkHrf9NA1POKVSFM7upLz8Cm8/ 1UOrQW9oxEHnT3Ksd03SNmYZq+a4Y8z+qLBJDF7Tgp2oB1Hkq32rvTKAVtOIiTjarmqjFfyJBMof /lganaZ6WsXE3QTVB6TkqmdvdTzDfsytXizJ0THNKQT1x9tI6zHYRV+L4/Hyip3gKQiyyDFcRJ49 g9sb0C8eTkWyD+rZA6vYpjrft8S55m17rykdZ+//1D8yvjY7IWHtT8CeBGIO8BFvgc0y3yevuW/B iL9cmDHUnbIt+CVy7RnFcNbWS+p5cy7C6vK8z/qa4bwktuvjDvfEt4nIbZoXcP/xLGrs9TzWiyl9 xV/Zd4fan+TxF2L+dSSx8BEinFwz6brJdFzIcN0XL0ABMH9sX4X1tP0mud0cMJ3Tc0Epv+oNzkcu XrMXasvyzuUd9oXcTlYP4AIsNyjqEsi+nCl8WmLyANLDddc/UUyHNYSp9maFysEv4FhwBBLmDeCy oicE6QhWeOQaS4+MhnyWmGRjj01/JWsC86/1a1fA7YneZYbhn3mEIprvHdvQRcT7+gYzBLk2e8HV j/VgJ2NHUzb0scnbVblyJ2ftnRRNy4urFmvEKxw5ZKzr5dQm0mUfHo0pJMNGrdXJUMYNpqQwXRP4 5UMc9Kq7dPlVYeAarxzgS/sBjGwD3z+OunG/1JjhsTzUXK6akVuqlTCRNxUOOy6CGsxiNJLGKU/A wcfcOeqMQZEDsx+a1pBx8PHFlMzaXnY0/k3GSsvWQf5ADjFTTN2dEjeAoICCqJmrFiI2HG97sl4S NTAjk2eFeLPQ3ZkjdM6DQfGfcDpeeTLgrQxQmZpJjoIx5uycoAad8rcZTXVgbbWK+Q4wkfi6l1hs l2Plj9jTtC9yPHnskZkg1pDIIv4w9seIw6jhSmmHsvhkIl71yKp/TzhqF4+RH9ikMgO34qE28UV0 iaMYNn01qTWQjqz4ZRUU1FXyZhEj2L0CCaChepA+djrWjbqU6g/ccW4uaWUC/HgssE1aiRMNON2u qXsCET/lSgOImsPJwmLR+Qtdds/e8yokobjZC3otK87ck2/25wsIwIXwRgTZ5mic+VJIbqb6BgfI yE0ZVbz8W9406qZYuSHFRVU9fgqmT8SMJKdw8L1uv6T2vp9a3vbiS/a3uR/4OdOJ44Bx/FP2FsRT 9pYpf5PlTfY1IPalBH430KbWPCjuB9jwqeVNgOwz0i//+vNmY2cO8QCl2S81PGVf4PuBF3k36POW P/z5X7J814/9Z8OVLHXhJrscbxD4o+fhKbDvY0VCETVhzHqHOfqI0+UFqLoKg1goZDqKYn3gLYbg 3BhQoJKqkLBPrAV5NXaZxGVvSxaGbUb8p+7AaWPjj7r5HMc5YpST1tytlVs6yXz7FTYAAEAASURB VOXXi1sqIB1TFcWfQFD4K9fwQ1FpUciQyTZm8Sic7ixozvJwu1hNsejCSL7Vg1NJGoesr9eLm7gV OzLFItY8Z+z1qmcubbN2rIhL9vRZpvjzxZr0iinbZplw0o9zydWv9XFQEYN4wfgPubGunmPZfqbQ 3Sl0uRb48HqYSejWeWb/GsuvYqSXTJisy2P0wmZ5jIu1dXVVyj7lUs/eJXTrKvJZWPaRSzb0Y3BW p1E0WHRTYYnfTL0pF+l6A4GEatopvqlrXNnS/RpGx5jgwrjeAqNM/j2TpVDVFwMD+bwkUJ+wTFVx Iu76pmXEvtEFNDDVY9xfhMAPenTYRlhEm5oJlZc+9+t+DEJ/1ISRfx2bo537N6G8KyZwikt+s+3s 2JFevjWnl4yjtDwVRf6m0EVVj8vWoVFNR81sjg9y8kPEeuKtcwVTDGPKuSLVoSMFoQp1itOTbF3d 2+CyI665E1/laqrVSHtACtlUDhdYJFZgZNTKn7jb05m/pYm9bNtILEjsS94/+kvLN3/7V9jbn/bW pv01lqdtBezTNs3OCO7YX1354PM/svyd7/zby4OX3ru8yO+M1uefiNK+ot7+qtD7lm/59r+2PPfg w8vPfeQ1YzfSilMk9vVXd15bvvf7/uFy59d+Ynnxgy8vb7IvFv+o4UAoOqEVSOxti0sKCcL95qPv IyPVdYLMMchjn5d6zsim7mowYVFjd2Jbm9FBIUbMj/CIA1oe420r1z/19folhuTMFxwra91msSh1 NSsngYpH2fnGKRl19hm8M848wPwkUbLRSTDLOGj87go5FL/iYEVVCN2BoxzxFkUUpA/FmK2yqRzu XyTKB07nNX+KyWOlRvwUglmdVhxmKFzlhb/kIh38tLBfx4lOuaoOkWtwSYf9mLl8CQ9XewKL+vay iBmZYuZzE6QNV8vRtMVxixsrWqxDSbOIjMBI/LMWIYnaELOpdLxHvJFFXMBRjzhPFTOPQXnFGrVY wBCW1s6sa5zI1fDAnB/G4dEGqWmtQVEDms6VvvughqC8rBeHejeoHiIPZJhEM2QB64LE+Yqs5dBs 2l4Xx9hHPSVVnShy80vcEXzsGRxK205ANSYPEn3bL5VXjrwv+8S4WE/tC1ErH5molj73xG1kodQh G8NFxOrDdvwJFOLJY9lXRQOTn0uMR36R+Q+1GfjyvO55jyEC8fOl2QQvj+zhEmTlbbk4YOvBzYOj MhTubIJO+lxLl03wsiX+OL78aJC4XjS5oNRaxZcfPzgN4DXwAKJ6mnNnVtjIgJoykrS6q4Naf+VN 3ZJ/TcVXDQsrvsHIh3CjvNmBN6/44P92aHVvYOs50lNbdxKe8t5oPmJfqS7m0VU516hLRM1ddLCi 9XzCSaWUX563sEIN7tVXP7q8bH+95PmXf3n5xbf/sH1gittgpZWrB9aFVveJco4UfK9y/5sI4m+r xt1wnee0fPwprNftb5k+toPnvv1FBV1oV37zx6fbX7WvnaK4TxuGt1irXjkV/w/4rdfy+bZ7d+2y segrPiqipU08ZGO8tnjPfOhTlk//6Bfbl3fbLzHcf7N9/i5+iSEQ/aPqz7FPrr52xWesURREOGal RIFl7oJA5zIiZl5lsSmdIM4MNpTMcDS4tJ4hMRkXbryrYoJYvo07cLHB2QgKMShyECKl10aVnmBU cMnAsahg9YQHuyc3BA+WBjY2r5W0hNIK2D9J+Imn8OS45cPYjC94VeiYxWPmla+mt0Up/kvncfvY wLJ1HxiZTBuYDGUr2VgTTLwusMqByQLfckfld6IxKFi42uKHL9WNePiPXdQROxfVmBVTaOJR+WgN s24mgx+fMMfFb0rCvCv/Jm05Ed1Ybz3BNXzw46LuHTOSPnwTJVyxzuTlenvAjvx9j8gIuDXl6uii G2tiGZS8Io6wbHk1fCNvMrOxSPzYC0PYakzgFH/UodWjsRVD64iXSpNPuR50ZXBkGdYgo+VjQjJ6 +QbpvNYrdnQeQwRWENZ5nb1iTAgmuvToQ3uAQ5+RVQz4ibrnXNtYMcmP4oGTO2/RIjdm8QQW6+u1 tj0gWaCwSPw2a/IYuw+LFXvp5El9iwu+aPElupFnkzEyK4u12thUe03HEPuS0zEXCpKJQz2YHK1i g9fraT4Un2y0X7EDH1jWNWLSHUDh6VXj2FNRAx2H6PHlXEys1XgVH7Xr8o3c9W32OcpYm+DxOtlQ MeYnLcVU8zP+2hjb/1yfvL/AEZryqXZpEHSJ03SsJ63W18acN2JntLxlRa+x18cecphw0VwXw/Zo huw3Go/KBSzNI7ETR7ZlFcDGuQyNScxhh/EJDxGvr5WRpzeU6no7iIeA+35k6n/vlJ6JPbJ3Yz9E vC5GVgz5ndO79ktu3gwseb3QMwXfiXDf3mKlrb7OZPB/ZXfd4ptDTGH/216c+69+Cs/j8hsS5B77 3mhYGJ97CLXeHk+IymoUfZFBqefYzjt86Kxnv6gh5QeRbhQ50gSYCCmc2xWF/fFJnxKzi+zJUxwQ ytZB9lD/EoME1+l14OzZerBEZG0MAtk2hwXtSYBqzVMpRKNtnrfCRkEaw/Eo23Yru2nafESm81zn 5sXWapT9UjLl4znbkRtpJ1+TusKBXVHNXSZp85GEJ4fVlh07NKKt4rPBiIP4NS792kOrj0Pch6EK EN8eXw1iILxwWnO90K6Hx7qQW6w1i9wjNmelJhmumLKNZJQBLPO2rxpSOEl8Xmo16oQZ+8a73m9w nOUR7zm8fLW1ln3uz3B5LX3fDMugPVN0mXdvHGbxRJu5VzamtCxW4lEQ7uNJetTluY55f6q0Z0jO mxx/cZHZ6qSaKM7MkcfCZdk4VmzI2Wtjcw5cc5VacnUbe0AkG/nKfCNXniv2s/hse+lYPo5WKuPG vEaf5NuOmzgPRA2OvBQmhwXHWDsvta97HHvhy6rvnyOLyNgXNO2/Ng9+xR+zhtO84SNezesaF+CR /Lb8s9W49GVNtuqq9VJOY6/18btyAa4Q9l/V8+rcWsxLXQc8+n6dkLSGLfr6yzrYxyZvIBuJAyGe 6mfgpFBQmgNUy7JYttDkxc5ytNgg8w9UBzy9elsnu+Yy+0TahiEnXl2d4ynybiz4B+O1aMaGNAy3 hoqMTe9+gsAjVb6NrRXQZaXAbmurnGWdTclbXQrD4/IN4vZmZZzoPYxioMXFgeoJxl9RlBjETe9x iyfh5Fd9tmHsdSo19MC8ID1qlhd23oxYtdYr9PWaxBr1rP2M+JRnr2mzWhMT5ZgiFFuLkqTXqJn5 KOcvW3+FNeSLD/KAQzaRa59DjiW7IgfiiXysL+NY3Di16e4Udo5nYEZhq+gQRlMc6pGGfzfzcYF6 J1zEXY4DrXECCqdXmqjChpFpC0A4pGqUjTzHaMGOeZC1VxMDGsZ0/hgPPja532UorL4O1KXgwqzU twgdA1fhTJTFDfgWZeUCWORNO+fp9O5ANQ1vsYaRpa+LieOuTjtP5T2pGKJ6aUaulofyhL1p57G1 vPFV4nEr40qBi2fFjaDUQRhYEJERzWPy0fqh2jg08F4D57XaFw5Pyjl7Do/fnIVl04kDuc4rcYcn PFa/xWScN6YYRZ1g20a2WsbK1H0TRSsXnyXSIhOf4s8cOQZ/ui91rvLKUSVdHRRp3jsg8SGdLN0v cn74DW6+i9Iu3vyulIITuPPijEUzAse5CLbk0pdeG3AFHwXKZpSPc/HP5ZTzqUf2lUZ2cUUd2Dcw V3Yzq3e2TA4LS4Idjbm+PsQFw0PgAqy94XUvts5n6vXqDERlKluuBbDlPCwOBvjTceAmLrOvZpnR iUyBZUyEHBLh2gUUAQ+tbNTuiapAPNBSsewLOU1c3tfKShuYAAqZZHXIRi6TMuAAiqeCxuV/ugbY eGAVUzryVZw5Jmi9uAmrAw0cP+4pcUtuO6vqHGdkLF4sfIly9Fs4k7vVsPIXDf6RqeVxyFqd3JZb 9zXeZq2KZXvtA+nkgz7jsnwcZw5dRGRZXhf86ETuPCyAWo251Bx50QtFz88Yr/SY0HzPMkicTOVO +JEnMLFXHMMa+5piW9YbHvtxeZF5vUUOyaTJ50pFEGa7qXcD1thODClg1Ri1bLXuWae3/zLOKf2B k2SQippjrOaaHPpFloEyd+VMdfBY7AFTTmpqGqqXnN45vc7UWJFkxHo88lD+OOrW9cBarKOdmDt5 WUuX2UNdnSQXnjyjJrE+jFuNtGbtLXKtkfzmnhgVZ9wbyNqWV5bia+TUd1Ty5cuqiY47sB6f9fKl XGIjRbbijJQD0fJqEQhnpKt9qOcO9538uXXBV/tCWWNpLroResXdKSYTP2IjgWrDnmyRhlHNa4xx wokIvOKcva2t+Mg74yR3DnvQmnCwuK7EBj9f5v60/Y3Re6+9aXn1/ov23KIdkVnERK8jXR6F0xwM LeRbWukDy+Pcfq2/If92Prr/4Bn/u8t8T6pqOEahNSMPljjvI+lqXVuwdQS+4qp0nX1S+ZA9nX9J MusVY60tm02TBASn1Uzimx3mgtwsc2MjESXdpDFiUfykMAB8OsiwsPVYNacw6QQeWHeik2xvvmlj sOZqbgtTvvvTM89ninWu3ZG6ISeKOFXnTYmUeZbNmUDu1GludLG0XeBum+7Fge58s1VqCxV1wNjX /CSLsNYnqrUxJ4O19MYksX6s441RBpEXu5H6tLho0ji24s5Qlm7H4jwe7Dn8NtNac/OMo48zx0u2 udmILmXz8/SwMXiCyU8ymfP4XJBzW485DnaPhWRSnyR1gWK6HAvQIfRkPR+e8a1z3tlcL8lJUc1s yG3Mb8T585TXYyMTE3PnjQuF+1dvWZ599Z18kCwOQox5i8J/zBkULpvJR31wCM5bfv62n3MkHt6u 5afKR57b8//YfqHi3qtvXZ599Kn29XVXVgPuQpq/E+0c6gTRASQfVwdQU0dUsxyudKcIEmAzEDo1 rQcLrlfZs6vAkSdfyOWxeDM+6yVHxg8bkkYcxIBeGO4Ecv3ua2UDf5XEBFtw1ruZP/YPuu7XkUMt Ah04L2GxRyL/GvPUiyvHFZ/S0dNyrT1HI4mPqEbMmRO8x2Q+4XReycrcK2G+wHltkOObOR2ENo8L HqTRKoZpyck3lGHjN43Md/rEa45Law2H5+AUjmhxJl14bHFprgtTD9NiEJf09JJ5RsZJ40PRscCx 9p5iySGicFi8MjEb9oTWXWvsNoWv8xGmbZ0Kby2+9PTSMSTfolPncZaJfIBhTCaRTQCkJy+NHZfm hapY9t60nh6Tqfwb2Ut87hMr8k0xw1ftbOyMgz7bKh9k1DHnUO/Am4+MG/35nnRf7q3j6Pwbeey/ OKbMZFVfQuWu37gPSXPWIrXwqzsWWVZt4C3eQEeNIC22Fbg9CHS8KKtnKzPXsdPqYsgab+Azq/YC IHLly1C1L4QjqojMUJYQ8bb8pAGdahmJi6L1JhcfYREvz/le5xKoYvK6FHwjWI+ifr1c5yvqwF0+ cdK3/Gph3FgYJnCSq87pyhK5cPLL3kQPW2U0GU3nA8b5L7yIo/YArHUcxBDi6rMeBwVb1N5l2+q3 xAGg7o0JL3EoR3HyJ+646Y1ccUpngsjZuLh4uXf/avmk1z7LvuLj1eWF++9dHvFFbYpeSVQPVeCI 6rfEqroKVX2bANmIrwKCzS3l7uKqF3MG21h4y4kmVPXv0vBx78Fbl0955QuWtz79nP01lyvfL83C gSYLFtkrOsS+FgZwnfxZvflrEmNTPVxuWD3XKD4/V4pDORQS2MQ4W3+dS2vuyblT2gV6ewvVyEXW BZWMNETvmCEg6a/TV58bnPoVWnFH/VWmIiWuMizXeYIf9lpI7Cv3RiyHZHCURfOaTnjQt4rPGcXh 2gnH3EpSatF7EF/OtezklrPMrRc+iWJTmwAOz+HiuGLT1hhKneRrWi/WVfW8hj/FLw7tEcm3euG3 9MjHeKvNTpy+x07mA59qhb8w62XIvZmSNXfQnv/im4skxVv3vBFlf4V52nlsaCa+xDvWZ0qUhLE2 9sj/CKrQO1NCXjYU12VWgZZtpLkfR2jZr80Tw7M1JXHZjjYh5+1quO3YHkMxheou720+wQuUezhs rvB5gfmYz1AVjGLyHqwFMYZBgCM+u9DYYzNgQxdNsV/lZ2psFIN4ct/yDanmemJ1aeHnSXMVeyab jCufcdD2YunMi09ks5qNvOBGbmHQ5VblWgvlZ0+C/HbovXv3l7e89fHyaR/9wuWZlz5pefHOB5bX 7rxsF+f1UtLoVAmtnDz08vVsxMvuOj3sI1/vcYuVHUq29x8+a3+A6x3Lx93/hOXp+/f9759y04ca 1TqJJK9JkXX7RDj6EkblUK1NVWUZf91x4t2lIHbD2p8niwNiFsRMJlIvs9nSdnEFI7vcUxMtTz4b 6RUk7GzivRgzn+NNEFGFJh8EugOmq93sX7LMJzx8mTNjGMNDDWYYl01qgA15zWzgpGWdYpnFCW70 L7+ztZnJvMbJZ8Z4nWwd3EfNBWn49cHwIHu3BVd+BMu5gQ220MpWWPq8jsxlr7iR0SSPWdRYY/Xi wg/2NB6JgYPC47E+x+R+TDY27MSRdTkH9yA/1ofHQLsvG7rfdDdii4vYPc6BBzy8vNABs/KPrsTg WRSMZNgi1w9y5zMZTTgfuyQehJNcONVYciNodxmyfRrnoXjc3gvmDxlSx2Bjaaw2kVwXbwUOgyjH Ni9w5yuQuINok3BCUboaBb0HYPIwqvuGGIt/NKHlseA9ByECqBogtRV1o7BDbx78Fgx9wUdXH6Mu WHMnpllWwGyg3NBBbD/ZUjEp7lHvlHBgp8CKH/F4ROJlYk2xjjZFOYmhGnY6x6cH+cy88sU6Sp/j FVZ31FxXODkP8wt543kYmyyrvCkWDcGiLxm4WMeLZI4xXFHWdeh4Cw8Y8FyOyd7tTHbXLr7tg2Ae 2127G3f16qcvb3v9k5eHr9sfjeddFtYqr7kbQtjE1afxKU7B6KXPvomnb/jpJdRVTbxVYrpaf4Gs j3NtHOfQOd6w+OOzbnfvXNmF29P2d5OftgvXp/0OnN5C1XMoNtVP4dZ8HTdgy9t+uobPJMDOc0hy 4kcunLgzruoSF8OMGVTdNL5qxUQ1gE69nsjhWnOeI9tqTTNvN6Yw2eCWxtnnGRezeh1xSH82nxle shzjTCY9ukv9yVY99uJovtpIuFlNpMv92jK0+NjSZfut8cw2xyQ9B6NeaUkGjnGOQXkLc12/spvx 4NdPoOzzciLNMctWvU4k1U6KjX7mcwpVHCiJxTo/WQ4n91N8icvxNj8b7zS2E0LnH3Ah00XdoBym M6zL7CKJElAPdqenZiPWKnJjwihO1vGVR4E2YV1TxrmlEmXx5hjGXHtiG33NjMHhK6xLFm7bYsx2 kUmWbI1zNAMmHHa5Z/Tc88Bh0/ZxGbNYGWXGtW2WjMh6nBloRZsMpcv2emJFJ3nU2GbDsZKouqHs EMqHAHkuHPx6kajYhd/q4fEY7QWdfVeY2dv9qbtXdlFzb3nw4H69+6Y/Rr/F08lZV+VY1tj1knXg yyYeKwmrAMa/eQEnfyUGXShRI96Sv2MXcVf2nXR+4abPv+V4J6Gp1hOVh6S67+GybT1Pm1A2rKMa Y3FmmcZHvdsbqL2FemQx0ysgFXSCyUGPAU/gvcjy5cv/+lu9DSLuGe9MJxkMKiW2Gjfmy0aZt27w yyimaPH6nr6BOKdOilC+mI71zPXJOPFl/Kj3A7MBNdrtxZF5dw2Scs9WOvLReSKZ+lCYUT6bC3sU 5x4O26zXePQnuX9UpCyIZE/iHz+5Fl1tZse1jnk3DEvtD/Vd7OCzTaecT5RXuMjRZbwuTOICK1y0 k2JYZVvh8/5usvDFYy9TPXJu+JqVRtEpluDUhV5j0IsH4U/3RlxZ3Inll1OcEOVYRvW5Oo9Wx3N4 fU9SpAigM6p+J0WsumKxtbeF29J3DocJJePJ3ks3xFB5DbO1To5JdrJRn2OayYZwuinre7CkHT5P Rl+66APjv4lpv5F61z4Tdu+e/VYxn6d0Z3izcSKqe6zuNrRxXKS0Y42tjuBZ5pw3OJcd8gqQ+cOf vgwYD4owPquITWA0ogdHDfAb332oeWSExVFTDcHlfEa7Q5wVwDGpYCPfHod0nY2KWoIBUy/gBCRJ JZpvCSuBSpxxRoS9OISlH2XVngQBUG06f+wfsOXPb+SGvTjVZ/04Ft75KYA1xYCMHIVBR4NXmJCs HztM4SUJ2c1ik84c1HyrbHRBcGUh/O21ogcPt6tUO/lPHJu8CZOHOV7ZSkYooyzbagx+xGGrJp3m 9G6jD+QOeXBAqlA1lpKzOCSfzfEnPWP+UTnJZDP20nveRemv8sw2vtMr4q64ISZMpBvHha7rHEuq hUe2+VWcZF5PW/ycW0dmk1EnW+Gco/jS0eV7zGS+r8o6YMddEHpxMgZTawNmkr9/ZrU4lI38H/Xg o8UJmAOhiqqxZGDKPrKB4oz1am9rtRAj+jYPwuZTvNVRyq/pdAFAXKVqbuCxJAl18mwM6HUvtJGP 8gxhvM2ZUSEXNtcRS+b4y397tNCnLviCI/YGStUpAX3InlNU6mHwn1S08C1u6mI/RV/PVwkvP+7X Jm4vYZmnaQyhVxCD0o9lfwu5KWY5IVPzGL1mTZb1wtGDGPd1zVnFLAbIu1Zq4eGPugTEt18kgrHj THiPbrCTj90czQZbt6c3frcrNaBm5tDWyZ717I8miJOQ6nlgsEcHTnXKNujUqi8JfOFiL1Ed9O16 IuqVU9zjz9x7OLkWRj1yxvWXAhqQ5Dy/undN1+IMIPXUXtjKf5QLT135ma5L0HtsOdYi7tbHZWUd GctfvYCT0dneN0kh9A9DmyFBiFgBaQ4vsow56+vWcJYEt5bHGN0fueUddiYI25e2HeZIo1NNMmCU zWIBkz9wjr3bESNjf8S3tZ2Y5WvmI8vyuFDXThzhaiPXir7GINVpL47MvBXTWfvMlce6eKGy/oRh yujbCS3jt8aKL8ezkqW9U3VbhCfk4gCa/cpUeu2d2b4Bwz/+z5o4sm6UZd8rHYZpv0ovG+Zs8YCM ey102Xcde8joCdwLW2sQb8vFSdtXc5XbDm91sD3Ap+LfRp3TqB537En3EbdLUq1mDMLP69UshGsS qKO+WSdZxkmPjnMS9ZQM3GqVfA0aPxjwiGe/1Yd+r8kX59lL7M3j5j7O/mY5o4+YT66tJacncHHP eH3rGdZrZvX0ntoUI9koZ3F5n3CSjzjmzmrEih+seGXnfVl/4pZ/6TOPZCPH6Fs4XkiRF7yzmow8 cXyGtXTuv8QnP9LJz7V644SPH8U54xEGnfyqR1Zj4jOFdj3h3ylb4kWvJtw4R575pJ/14hD+SgPA jP1Jq1iOCykMvetKkFoYFipfycInh9jQ5E/ymY9AtsJorl62dW4D3/zFX+acxmAF8xZGPsycGtfe EJkzjFsumtPLRn45HMqhWXPPeNXDbe2BudfQYuM3wNTgrZw1/qYHx4yf+LwyERtXWSObVHvGY1Pc WS5b+c46xrLJr94yBj06ePSqpuNE53lFfcUnTC46F9q8la79lf1o/3EQ1lhKjXzdqCk/Xp2wlC/x MHeM4Wj5qzgiOh7bWspuqx/5HWfBwJF5prhC6q/OGWNX8imqrqsnPQs959iBoEkc5MqcjOKuYuwX bCrOMNS8zovOkegAW+NGiKh5Uvd4eSgt2yOiwvyAGHUmSjLWDUmT1b0R4vqYeciKYyDiFMSkJtiy B40enoZxBieo9UJkreGsfvYvbLioUV0D56RlqE78UbMg9OME3vIDVjjGHD948kcz9FEQFBfBAzbz MqdlmXidpZhJ5lh74Jiq64uwNP/gexl3NccBP/xmo++HFg9w/3oiidqi+j6wRM00cirU3s0u0DjG 1fy4N05qjm/oc0zghPfwBv2IBZ9brgnyS/HYy0b9yCleyVUiyelzEw4Z6+M5Z0AaO7aVy2rN8cQu yl7CQOfQtcaWM9Vc9MqHOXr/YaJ1KPIaHxjU9i9GgEtNQxGC9Jh9aDyLRSbCaE6f8TO9sOTvpVKc Ntd5lXjFs8fh51FLON9sqfnLkfXiwJ/zmk/VP8EqLss0hoO4ur+FitDJjXCryTn62WJLnnFbXDcn J5KIeTumtnHqYjxhAIc5trDOebL6T5uJ699ImwKacBbTKBvnzXoY4bf8my125ZnsF9dN4q42g6uj KZsV29nO1HrCMeOfyWQz0x3F8kR6lniWxIT0KDbplcuEwkXCZX2WERJtFRbng1D5Y7axQq/xhqoY yLJx4slD8MTv63vCoPJnkjKGB71jyp6c4WeyCV0nGm3G1KQ394dN2EPgAAhuHPDDE/FRC9yI0n7J NR9j8lqOhik5RdFBvObNJ7sHHzTvVxssrLe2yiomeLSuYRqbtsQ144Fjw60YNvuV/+J7y2DEj3Ps /IiaLNwMO/MjnHKa5ZzthM9rkfUaT0KS6vKe9bBayTcEWrfLyXqLzNlr5rNL8L5z7YFaYXdpzG4z 7LZD/zt7d55RSLWe9QLOD9gTQc8CyonmjXCdIuwFfaSLAirB0tcCacubPB+IRX/EvdKXhe7k5kIn rFmdMlbR5HqhH+fVBoWMqjAG8hWv0ovMYzE+Pl+2wZrXbaD0qVuW+ogj2+Txln24jqzAe6yex5kn oMYq21l9ahwWq2qhNSZ8xU79+KPaexfD2MNHiDNfLaJbGuV4i4ua3+BSufpdL9Np3sESX8eD3N6W 036VTc4ZvjwH4xwmvGO29UPGBVT9+97zRRZt7Uc+vVpde6om3UA+4hCe+8gG23giafbsE1pXoxD5 Izxzn7Hnwo6xsxRs85DzVkxog7PttYxL7odhi3tQnJrKPzErX2S+BhYAe4K7X8JlUsWnOwZg+a/m LOVE5DopSo+/kXecDyZ1im/5l9DrZ0Kve4pDehRh18dZ9cNA9UCsOzCM92qCnqY8wOock/nAoOMX 8wjK66OYY+M4whSbLfvYw4lia522HFAtj2sLsCFXXKjzGlU5Ql+CYM+YDcqpuPIlrfZUV8+iz3t6 r16i8/1bMtDazXwKf9TLPzjxZRtx690WrRuYWY2EV67dZ+DkoIJ0doGsbrDsPsbS7TkEOfJnJumQ iS/LhJWOOXr+IeMfyYcNtySHD1+blgMHvDY1FfICVztYW5Mv8uLH/ZUTkOxA78aZfICl6f12Spp5 0EUujNYNHb4U14jgrSyLxsV5I4w4R5Xa+VsbWNlcTWP5k9zrpX1gcN9EpuR8PTbFWGtnAH+biPht zA9NNZBP92EPdW4YxpWv1MzXvbAocvXOy8PQPN4U96B2H5QhfjsrtB6nPUTUKdfCs6rRSJrmqrVy RFXzLHkleM1buXf4AvTaTC7Sdy+M5Iuei7i09tCaOJrJvabCVzk14niqSGmiz+Jkix/4Ys87s39v nRuVevZE7I9M1rQhDp3iB7sBL/LGBY6v4WBlabGOjNpey7xohI1xH1sfJxny9rMhcVTclk7mKO3H amK4FnvMAWVOr50BIz/yFFvDY9O3yK2XtVnjsCg8CNMVk6zDYpw3ljaq51Wy52RkBzwvILdbWy89 gW1jQ9N8FGShV/hIqb6X1seBm1WCnJWXercrYN+tyRCMcKMOL9ovqiXHlvARRdTR9caLDh5ib/G2 mohPtvRNFjjSV4UVE3QKO3p7LAKzgqZv6IrY+VmzVBvx9kaYGC7R+flAPAWseMGyJ3hh4B+DoZZy mziyL9Uuy6Blrgvk4ibVRZLoR1ukW7yylI1wOU/lIyy9PtYT+UQyss04jeEIPetSFkZK+MrYD3FN kt6HJieu7gJuxNz0fC+pm/bF7ogtcgFzsZktkljIYcwj40ed7G68twX0u0kkutfAsSV8N1CT43Zp DhUvX8cuTiHEqx4jz2Ww7vWDUlOLzfeEnVTHz3UJclFf9kr2jX3eCxfxTcD+IsQyxod45U899fB9 Tu3tBKk9j16YCfVKBBYf/FxityLaEYhXuXTQUs9Oxr69oMUW18uJ87bYRWxlk1zg842Eqn7qR99N zjqGdk/mx1LCgR1l2z56TfPTy2ezjB1XyffvmZNUJW65VtEbMJjFOd3XNxBL9rXnA5yv38TnWQ7O kWwex094ZiLW08+pbhwIrfFevFMuOIb1z7FPbfb8cw6x/5mDmIiPf1v1mvl5Y2QWVc1/PDrWEdQL OBV8DdmW5MXJ9rjlLlMUabUeU8JsL0CV+RrMk9EixHLYHZKyMCwajbs+qSKxkMiGVn2ZnHHOzaGF L+NEkWVuawr3WwB6ShGeGKfZmDA/CQufe/e1hfO9X1ffzfCjkzkC5kLkuKkRutzGuL0m1RgeTbJV P27rE2uDtlqRB8GZoIulp7C4ABYhwzvzEwy84gYuTnr8eLwGqHfCnNYeZOQ23GULQRJnSAnEOjPN F4P41KuxsXbNqB8pxpBahLxKhciaTi6rvYiOsC3AugZp7LmiHJpiy5rsn7FqhWnVmS9ikX6gnU6r 7UzLesA/0xVZ5LAD2FRF8Xb9F9soUUQRdyxRtKjEUY9lVyV94ZEeTdNSP/ZDAW10UdOsbHsg1p05 XBCxNw4InSpsxKr9EPlKSqwQtzmjmaxH9LMZ3vcKcU4OAtVULIN73xexglNzN6v8Hn78wgqKkUs+ 1Gud+C4x2hiLy1JNVLfszw13HpyTuMi/BDTaj359fSecOl4jrh4wltZjZfWUm8PxzK6JWpZwKsa1 KAnV7MY4VS/WuND6edSpTcbfqoeTn3pODWV9dE4Q/r/0RobNTbaZ/zEf+Ws1spx50ZvWCozXxZKf 3T2WrWPKRtU+GfnFJX7V2BfElF6FoRCaVk4TZF/y4dz2JFAv4LJCYwWr+aw/wiigme1pmZHMlnzm e/THPOo8ak57D2AjWhmOcexAq+0TRlN5jgb48QORCxgdhSbL4yOO03pzpnXSBvTNVwimOU+FER9c 8OQ2O6iyfjb2WOxtgZHL6Gu82W4jpAyJMcA+vDXmtiRWFz6DpnrfpJvp3jhdlJuM5BzXNN5zpqdQ bZkvKEJ6krp8i8ijrW7ncpwT/kx2Kq03FmR5aK/qOOxTi9nltYL3TLv9OuV9yHlP+e5Fl232cNJt 4ilCKZ7qQQQ0j0NCl8TDljxBVkP5v846iWwSilSn+uvEPSOua5QC0ppxYbfXFIOjhueobCecL4WB 6zyDDsZTG4sZ+RUB+BNcOuFs8bF4OvjAaDFHPPXQZxXO4LEXDs7RD/qZDPlW0+KktanQvDTSyz+F pjA5NzCaO46zaqycc0pXHYDPkxNjp3OjE5YFl/OQC1nnfPjzIt0es4n8kas3k3keKHzziknMUQN4 c74aI4/akHtfv8YwjMxF9S+V+dddSI+yYOQHmHKTTJ/3qhRDjJKDly2yce64ESPj0hOv58ortyHP dcXMiHyi2q1uM5nzU8PB4UVTIoj1yTSKa+yhrvUwZb8WNjOZ6633t3MnwYVezHAMjX2BPbdjpIRH XDiZNK1tqFIsLog5uQZVZBtUfC9ZymvCPRP1/taIMUrwthPcv3TqFVeECu56baM0hTZY6/qZNI99 NQ3Sy1ocFrnF1Thm+cvWcQdJYC88XuDnf+X1aaxTi6KNsubAVcRdQPIDU/XVaH0UGMviiNjQXRzF YC//Dl/8jvhxDoxY/e79cPenUHincOnH3HKtHZwDKSRuX46zWQwFFuY6HpMw+5cYv4rF45LCeuqs 41zxjXfGZItZDlm+Ep0PwYtr1GkunsxxZCNb9fLje8WEOU5hcg+OO2tsEV3roJfdyr+CLJhRj13e D+LJPmfjuICDdKY9kOFkDEQmlY8MT7SzAZ+giiLmgk2MUOfIZv6zXhS6rQ1+phduTydM7hXuJXay EU+2zflkuWM31kS4sTbipxcv/bj2XpOJPNsfji2IWWVHX5knx5TleYy9cFk+G6uuqkfG+AG+ESO4 lc0MO5NlJ2fGU44Suel0PrZhbXks4XZNLFMVQuCu5+QVO6W91dIBYjI5TjyOjT04YdgUEd8l67pJ ZIqowzznad0S2aiPP+PTAHt7t6H60fa6BI4XLdHiSYRxsxnz6CN0XFrbZlcoS7cl71HrmR+/vUuP TWs1q4fCwWwwXTtIkpmvpI6axDbN4t1xjmUXWJSX4jHzWhxkOqtDrd2Q09ZabcnHvGa4mX/ZzXRH ayHb3F+ndtme8Yxjls9o9yRz5ep+9k+Up9zU/TAr7IRB/utbqNgp6bpJJoajCJsZ/jpcI/eTzJUg HGN8WvDr8Ht99aR0TSLVZhbbdWI6suFk71/QfAMbDV85fua++ahJeVIe6w2GJj3jEZN1HJH5s2Xg 1TIucyDnR7EIf2mfjwMfFwL54gLO99YBcYuzPZnOZAc0F6tVg4sNk0HUkDVqa6a6qg4Bp+Y2qvuq zF1UDg5fFxPw22e7x8vENpysHt2nrcOcDydw+ZGabLfwCdIN+SLP2E99zh2om6x9rvd5Z/AEk5mv GR04SrGulS+c1wmMcgzc7kLN3GzKWpzhbxO4o4iljPVUnDvwlcoqwG5Zyc8KzvpXrteJ8WwsFRfl qNOPhYH2EbWm5jRqobooRs1ndZJOtrLZ66vNepPvmbmu2h4i1wBs+ZnlsUbvS2Z1mlkoXvm84sOQ /N1CBBLKkLm+C2fUgZEsXxxIlvXiG3slT6+3wSQbsZl31I3zirVjFj5+1NDpA6Ac0nodG7/80DZc 5SiGmjvTNTaK/NPra0QYKxbGZ5rqQxwtq7Ul8XruoOy/4l8jQ1Jr5PDGrLXN9rMxsizf8rMlz7bE kt+yY53q6bfUPnKL9ZXvkSP7yjrJJYNLY3pl7yd+8ipvl2KnE5M4XOb1zZKx3uzBXq9Z9i3Z9Xuc RKUu3VfZJzHRxphVo4xF1nyxB7LWxtRvlA2QmPY4xTD6hMp/Qcp6MLl+jx49XB4+NB50dk67a3+8 m0wePXjI9aPnw36OvzlqitR83Z1PcfBXFez4rJ+djDVUPOoTRd1DWcY4xzjq8jxwSKJgzH12roCO 1YNyJM7RXOdacedcwmXzO8bkNvbga27g4MZHxBx6G9vbS1Zqb6GKM23G4Utf5dL2UNjwqLrJhzQ5 pjFeYdRnf5KpJ2KP2hzobTAyj+yFIkbG/lBjkjbj5avyGmiWV7UlePvf7Ozck95SRU6uqgN2eSye o37LBrmaYtBcfbW1pBzfTASpMYnDIq6y7EMGDddqredhvk4muxBWtrP+7FfQzGzFrzi1dsxZO+m3 bPf0MxtksqFOnK2Yy/+WjeSy1bzegZMg93ryzrKj8RhIno/OMxe+rtv2fIw+MxZ/o34rBtll/Ewm e+mmPjgoBYyzg2beyzb76gA7E9mqd2ice+ommfFmfNWbnU720lfdRgwjTnPgjGUv+TgHJxnj6zbx Y39tPlsk5yn1u24s17VrOayfhI84m21Dnq3D2vZy/83r2REnfbAzX022tRQPHz5cnvnET15+7+/+ zOUtdx8t//fnfn75+V9+3p+Y3/lZn7187rs+ZXn9pV9ffvp//uzy/EuvLld2cTf3leONizjiGg9T 1SjkW1Gxf66///J6yZ+iyzrJGqYdZ03HyAtc6twuvoSh38sn1iedu7JhGvvFUICrVLYIZrFXYBqA azmFYrTN8Qp7JJML4aMu+2uo2sl2t7dko9KGimCm8JwLsbhVNWTvpMmUoRcKn3l7RMyEO9JlnvrL Y9tlmtFNZfKf+afAIhSeqWxmshmHcLIDM5PNbPdk4siY7EPyjJM+y9JOkclF/VPv/oa/2S0JTuSA nnmWzYK4yOMtgBUT1IpdbrJO+k5WDpJ8qHR6EZU+86s+GSLbjMt6xiq4Y8oBLlmHTQe/+GY+O5sy ybgxJs2BCif+zAWOf+MHUTOGceYzQlfnema8sDN/GZfH09oYYMtHtt0aj3GMc+w6v2ktxJlzkL10 0z6dkNex6yLFjjmU5k93BTLXKT9mkGPL9jGWr4ybydaWzd5OPSWJFlOTbVp6Hfdx4lMO3TokYtXw 0cMHy9ve+bnLN33TX1juvvD+5YUH95fP/oxnl+/6+/9oef6tn7d84zf8ieX9v/De5ak3f8Ly7OMP Lf/gO757+ZVff31a30Rf93XE0eqTMVGDiIS487zhyKBdVNW8PLHIrsna+Rd7yqXPGja+NvJy2k7F fqxbQ81HeA7v5sNjhwPsVh6Np/lCppUoepv6E5ORcbfUEQ5pOMR7eWETGDf3h5xjlUJvtIqnyofB dF1SzUri0/XLsc78aO3kMmNGHRj0ykXY2Q0M4cSrfksu/dlevsErzj2ZMCN/tpFO2JluxDCPXdKv o3aLuBzHYljLMub+kZuyD0cderUjnOLQfpCd+pGbOTc5aKMO2Ywv41QfyTTH9kzbvQMnApFrrh75 pQ5le53+Sf3N8tAm2YtHfmf2e3ZbOvmk1wJLxnyUbfG8EXJOxKzxmLtqMsawF/ule0U+VBvNR59P Mhcn/axt5QNetjO7mWyLa8QSilW8ihn5L8+Uk1dV/HYZUI+4ql29JUVtHjy6Wr70y75secuHf2b5 e9/6z5YXXn/z8ue/8a8uf+gPfsnyK/c+bfmZ9/yn5du+898vV8++ffm73/rNyxe867nlfT/+geXp q1bjWSm1J2KdWe92HLCXx/0sfOYKWyTxmTpGox0ytcyxsSUF9d73ijZW1SDYz61CdwYR+4p8x6Ko zMSqs4uL3PZjrPkbjN+XmdYNCgPSSY+d/2FxZHz2cieWuA9LvG98o755vWcRkJMwWg/NZ/jblM1i uSl/rB+NddBaSOaKg4fYAQcgUx/h5FMxHDMeI8Qlbllov2o+9qwzP7pAHPXMT13AAdSmOXIK9qiJ C5z4ZrIjnjdST3z8KN7sW7HPdBl30+NL/QpPHGdizXiNs91MdiZH7GQrfOaV7KZ6+TryIZz8Cs+B J51kwmz1wnM6iuuuIedyMSZc5fWjHGxhLrgtP0fyoAuy6oPTmPiPCEy/4tAZqdgqh0wlmUOHHPBd 9YMuc2gc/tmzjAbnJrlz96nll372J5fv/YlfWl58cNckD5cHDx9Z3I+W559/Yfncz3rn8nvsrdW7 H//py9vuvr688OJrq/xbPHgNH5IhIWZCbTVE2jfh5xjtg5Y7fvr0WZcmkw5ejeVRvtYcINpeUyxh v85LfJf2zf+lliV/C4gXJb62RqE4M5v7AEfdTRF1iBxWuCyw8Zqv1WSA3tj00prkGM/aqgYZn3lI JutmyY34GeY6siO/l3CyL8SnfsuefMDs5SXdFk4+hMu+pMuyPN7Vlz3uu5aNbG0XX4jBCLf3UbYr BSywenik0ziTFj+bHdhsn4Ez+UxWP9hoxn7qLgUQl3zkmKVTP9PNZMLTb+nHGDVXv2cb/LrVGt/L hh0/2Z9v3AATiEa1z740xl5jAfNc/DMZePQzjkfFv0cx1H7GlTnQixcfvIpobxOQ90M8GyZ+gQbM ddu4TzJPjjPLiY2W9XmMrlsLBNaynXK07EzuWhAMvDF6bPnZ6oRgqCHC5pNaBMyEZRDd0cE/5RAV /cBXVEOX/Lsmnjh9TS1+Plzt10/oLFCFOpDUaYspRM5T9gQSr531kgcqHlXjKrMCUMOZT2pzZX+Z 43/80H9bXn/9wfLmt33C8kf/9FcuX/7Fn7z882/7nuUX7rxr+Zqv+rrlb7zjXcvdZz5+WX71p5df +JWPLPo2/urDBlGmVvsxh4xlHHFG3cDO8EeyPlc42jrIdrZ80rU4FE9EmfWB8UdXosMv9fQfGyvr 2IOt0uDqL12ZXbytj14WTtnxNkkfk+Q1Nmom4aSvOHQR2ARlkZS3sKrSsLwl7NwWamRa9pzpOt5i pHPTTBeuoyb9elWPPpBtxkiWkdKrl455xjPPsqzTmBxVQ32KXDp4OTc6j9VjbMjHJhkc8j1eQEgu W9lonvsjXY4Vu9nHRpBn3OifFwJkl23lV3uXubLVV4HBKxnj3GSfZXlc6251ou5jTMLqFyzcT6l3 zkU49aPfPSw2V6MBwpnsiAi73C7FZ58zW+lnuuxXY+E1p5dt1kmWcbNxtpH+rK3wMw5k/MA16i/l l5+b6rW56RXb2ZiUF7HMcjuKUf7Un/UrXtlpftRn/J6vs7gjf9KLz0+vk5OscLfVz/wj43LJH/2k E/uzPlPcVjCFt8YURem8bek4UX/mF/2+5S99/VctH2+fc/uu7/jHy3v+z0eWb/yWP7b8+Pf9u+Vf /scfW66eeW75ur/8tcuXf+kXLv/i+/77cufp029AdDGsJx5oPUZ4Sr3+UjZb5br2185lM12WNY6e 1+UWZESeLDgfpSnDxlEUBqioxAFuxO4dS4Ob1bRy4SP5WQFvQLAb56Qm2eVom+fK4UiW+caxOLI8 82U54w5vdfOWcjhtG5bTx+xji28Lk+Uj+Z5uxGpebZSrKWpMJW9/DpNBwjXR6kjo61iAlVeGG71i OovfoDkUTy/gZJU/d6OA1AszzseARz12lIqfrqgoSpONXlEghhe5dCNWc/V1OSaLJQz9yIdMOaDL 41HHfGzCZ/noI4eUdTNb8ehVw1gTbODIPNhkLumyrPIW+8wz4linUYa9eON1XjA2WcwzDh085B+f UYE5WrYLzPyCdsRh3b3yKnxaf+qmV0FF1XXiU36aq+/AaYJemHhrD+U6H5cYliYfPtEDxeCrLdAX mfdlXRBpzlg+GdOYt89I4CdYRpyDy0Pmy3KNvf5l4rVLuVYMA2LfaFnjUSVsrgnme7GOOmKjnCG3 gc0f2NeEfOYX/f7lr7/7Ty4//APfv/yb73/P8sJLry1vffYTl7d/3N3l3/7ge5af+8UPL49ef//y oz/xi8sX/653LPeWH41z0LA2MfUIa2Zat6yTLEDgywVSb1o42CuVrmGzaDLufQBoPK0uxe/EHlFe hwxxbgtqS99hywSfXRrIZ7Jk3OJswnVeTbca2foqRvVgahzJf8db5J3M7JjXmBK3ZPiQn3reGHAj J/HstYzHT55nuy42UzAfZcIrXs29N7yafOjcWOtlgFkMI1/GiKvjtjz2mvhkq/loI/lWnuAzB+OM 9fFImuZ1DeEpckWuPsHb3sjCyRhbt0/7T7kAV8wT09Mi/QIQBopVPsR/+BJ0THr0DqHI3NHBwo72 e3MFDUZx7OGzTvjMoeQzbjYWTj355RyxGecznrVM0Si6NeJSiWK8xG60Ya58xlxn2Et8bWPjAgh/ o49tm16zZzer8B4e5iN97z3PtK5Zth6L32PTyZbjhf2V4M52wXHU8yaijeERP7Hwcy6rVrdVXvKv XDU/2Z8pgfu896blK7/6K5cPv/cnlx/+X7+8fMbnfM7y2fY1IS9++CPL//vQ68tXfPUfXz74r/7r cueZT13+yB/4/OVH/vWPLq/ZJfO9gwTL0kyjVc2z0mMxwR5tcOpCjPNKZrj5sei59FI967Fe3IGZ xSxcNbz58Cqj6qkeRfVfUbEvmYKbxZygm8MZ7yY4K0oB8au6ZrXGRzlcihP+Oj0XcNfOd8dhzl/r kPPeMb1RlXz62+ja4AceFO8B7FAt33vAjBnXIevEkTGq8V68+xdw1zi75KByMApQ/V5QwuQeXn72 ODO+jrGrk8sHOZ9sTRxbuox7krH4tZAj1149ZDvabM1neGR7Pra4zsovXsuzxNfAKVdML41LtfN1 OnHM+N02q623sqd1pwtZ5dvhOusrnOw8EsfEz5ljhhgyzsfKa8flTavu2i8x/Nr737c890lvX77m z/4pp+eLbP/3D/3g8j3/5LuXr/36P7P8xXf/OXvSfWr52R/8geU//JefWu7eu+pjv2bcYVaqQOcL UwcHqZ7FHdCs1By3IfRwVvoQFEin7WRGkud53BldONH+Zt+N8R0de4pB/ZHrPV9HtjM9fOO+P4wZ m8kxNuO/rox61FwHkjHeQX2taa7/lt9rEV/DyGurDX8Ne0wuzQG8bC5dW9nNQkUnvlzjESuOp/7K u//WeAyN2MM5DiHMzmVUgymBCTfqNT/bZ5+8haSEsJdui0txHuG27LfkFFLFzG91buFvUp7rLN6Z TLrb7vd+seDI95l12av1zF5rfuT7Y0FPbnsH7yUxjnl7bSCw49EbxyXHT5aFZvdxr/67hrekfPjg QT32woWdk+5c2X22x8tD+8WAZ5/7uOXRq68sL9qX+N694nVrHKn5vHFLoSXauOM298kKPLJzF+dR 4TiLSJZo3oAh1eEtHGIlsrJbqmc/txRdFd7GgIu8J/AzO5bmsjgG+uNl4yy+EZPXhFpZvG906+Nu 3p/kPNxY2ug3MscWxXzk5zb2iv0oTiElE0by2+wVw23uh/07cDeQnYJXAW+AckUBt/yoaCvQb2GB cs8pzmRZ/1t1/Js9b55c/A6d9W/kyeY3+36Ii7KcRVSS51LubvJ2KnvjijtvCK2Z+A1ruHz82H4j mS8022ycx7gA0A7YBN66ggpRJ6/VpFDSPcn5Fg7sf2ef3/py/rZ3oH06/kbtbRZGvvwYMkeK4SZ9 7l7AyXF2OAtidjDLVnh64cQnmebqJZet5LmHS3p9wB+9/LYP1vupKJtWOwPXV+2gnrTtceR4n8RP Pv3Ln+qQeWcy6Z3DcqflD3lKT128DSduOPXr9hVrg5kvfXjW16HwPPUU39FF465CjCwCH7R1C/k4 H31gVaL0V+hYaY7t0V3ZkS+8rh8Vx1n8miFJ2G+WeH67NGl9SA4qTfWdZLN7AuC9HoXficrDGLc4 K6YtRBX5cUGcTbIaub+V9HJBjidiVfZw6YVZ3JHK7F7Hsk/zRVH7rjh44u4Vdtq3kW72EazBx3g/ a1yONQ2G/cctv82qxaTcwk9c1DXczY3ItHld8/peS/uDtcq557Fbl/Xw+Nd0VaI1lz3zUQZYsmpo A+LN/DNMxrczPNJY214WaIvAB+0XkkIej7lKhiPerLaxx1TyH1Q+zXEq7xnuSWTizb48TtZwJ7bs 0+trAuzGHMGJmx5/87yHemF4w23mV7GpDrhUnHKfdZId9eIFdx3769hsxQQX8eicd6UTW/tNti3T kOdkZshRP85nNnsy2c+KgI6fvOngclneQzsOBJtt1las2Kw7NFU146nKGxjsxRt5C3F9Z2LIucC9 1fZ0fhpYmbYNmJ4fKv0+X4XtDj5WOHaDvCGlyjs7Rs64uIlanfFzHtPvwLZHyFS6M2zCqkLbNqoB 27z528b/ltBw/iyJnNk7RxhV+0ZrM1kQ/LBeiv3YnyKThebZMr80Ei7rZTPTZdxvzFjPVaN3j5Ya Xti8xhfa9PCP7Xr1sd78TOeTS5llt3Ws+b6v62k3VABugS91foS/1E8f7BF7r2+2efOyqbSxevxs dlTMmc1ty8gmZyR/ilXzs32r01mLjDtby62oR67L1qda84w7POuerccs/yw7s2eFP+vTnn1q6GcH 8jHDX86WWIhFP0l8yVCxbeUvuXDO7W5nkc9ksS+eMMzDlBTnNnC+36t0CP0ay7zt2jSRf7xoFTAq c8lZTZaX92eOBbEqrm7NpXzCXmXeXy9FgDMsipUviuatv87euo3crluaS9bmyIeqcoTb11/G8rFU yzEvaqsf6fb3nlC339e3UGcB5U2BnvkMpzD3dMLkfg8vXzkGbEcb9O3tusy+Hvuxa2I91+ct1njz gR+vyvCheBoOHrB9y3o0wsi+R7eZcE2yzhUdMavJhreQPRKLBz1y3VkVNveZQ/IubngmZ7QOYx4f P9Yvj5Q64bsQ3rG3r6LlKksWGrCPnuLDwx51NdZb4nz7/9j6GIpW60BfFlm1ATG1GYknc3HQi0Oy CfxQ5JXQJhzQWr9B7NNcQdUXxU3EJD5V2nOFO/HjS+0o/zMxCSPOdZ/vhrDHhGD/8DmylnvdNAUS by2wN4XxTETgtuxbMiSOnE+MkccxFBhM7Y9uPgpuAAADJklEQVSy+9aNfZDtzJN92D983aVq1ba6 vGgQuRJzazMZ66a1a0h3n6dlDLJd+Cln9YCO18RB1ac+epHtFHU9H0E8afIrW+ajDDPJGAvLwmqc 9WBaa9XJ3zcJ3mP0zxg2dIzi3BTcyiQ07KWtyrrGFgi77XiCh8czmIY+P1JNsMjjS/31me/7x888 77bXxJDjyPFJP+uF27Id9ZpnLtnOdEc42WZc5mEMJsuE3ZKjn+Flpz5jxjja3D7TK4NZn0nyeIY9 I4ODnxbA3GrmayabW9+OVLFndsV0lE+2OTMW7xnsbyZMrtM6R/ZGZKMnpozJtreRc/Z1G/xHnKQ+ 5n2dnJXHpbbgiWHvwv8oh6xXHFk2jt1nWXTlDqbZxpMqldGTqPbIyHXZPDYanPI1r1e7ELxjf65r /vmo5rnl062mAXJ2DX8To6hH5KOLqsxLfvrN1ix/4rHxhtcnZroxAq1lT6i1nj/R9tjbm2lvxHrc 3n64vQx+hzlXIK9nlo/jvCfn55jR4rL57gVcprrUubYoCfjpLM7Ahxdv2edsnONw7jiDFai8NstQ 96eakIFF3nRalHbCDb7MMfrHU14k5rnNdJlD2BlOOvoWW5OubCxQZZN9jLhcpTP45jGPuODSnZJS p6yu4+atjyNiFYPiwExZNMt5jfU1B24Ti1T3l3xRB9VCshraxkC1PovPNLKRz1lsWTazlUxcmme7 nFfWz8bimcVU8WnvVFkayFZcSeVD9Fk3zrNOtsgcZ9/Zxi9nst6xjIzauvmOKOubj81ySik2Yh37 bhe5ciuWbLnGsN+bdybas/6rOWkeoUobuQR3yMQd8Ud8ku3H0LTg5UHSGUdbh4YWLkcmDnohZasK 0kunXjq3L3tAOmRw0OTTJ8PDTCffA3SXR9i+rvLfRepQcO03fhW1erHtxw5KsY55SK4aqB9x4mge Y6QPqme5XkRIV8rLdqxNsiqwgXwqhqzL44gZPFKdnald1C9eDKBs9WzcesGFbQQUd7vlX7L+XAE6 N/HtyTJG44g9fOivGMSsrVHmzGNxZJnGR7pZTWWTdXsy+Truo+5a7/8PrYNRYAJbxLgAAAAASUVO RK5CYII= --Apple-Mail=_CE32775D-C7EB-4DEF-BD17-04C0E6C29D98-- --Apple-Mail=_E84FBDE5-1621-476E-80EB-D1E591D13081-- From xuxiaohu@huawei.com Thu Jan 17 17:42:19 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B093D21F8ACE; Thu, 17 Jan 2013 17:42:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.057 X-Spam-Level: X-Spam-Status: No, score=-2.057 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, CN_BODY_35=0.339, MIME_BASE64_TEXT=1.753, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id coftekvXhFsM; Thu, 17 Jan 2013 17:42:19 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id 2606221F8AE3; Thu, 17 Jan 2013 17:42:17 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANQ40408; Fri, 18 Jan 2013 01:42:16 +0000 (GMT) Received: from LHREML401-HUB.china.huawei.com (10.201.5.240) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 18 Jan 2013 01:41:57 +0000 Received: from SZXEML448-HUB.china.huawei.com (10.82.67.191) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 18 Jan 2013 01:42:14 +0000 Received: from SZXEML525-MBX.china.huawei.com ([169.254.1.166]) by szxeml448-hub.china.huawei.com ([10.82.67.191]) with mapi id 14.01.0323.003; Fri, 18 Jan 2013 09:42:11 +0800 From: Xuxiaohu To: Damien Saucez , "draft-xu-softwire-ip-in-udp@tools.ietf.org" Thread-Topic: [Softwires] draft-xu-softwire-ip-in-udp Thread-Index: AQHN5s6ZupF9+lJbO0ixhTlA3bPV+ZhOaDVQ Date: Fri, 18 Jan 2013 01:42:10 +0000 Message-ID: <1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597548@szxeml525-mbx.china.huawei.com> References: <0A534525-59E1-418E-826B-177655767B17@gmail.com> In-Reply-To: <0A534525-59E1-418E-826B-177655767B17@gmail.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.98.130] Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Fri, 18 Jan 2013 10:32:47 -0800 Cc: "Softwires@ietf.org" , LISP mailing list list Subject: Re: [lisp] [Softwires] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2013 01:42:19 -0000 SGkgRGFtaWVuLA0KDQpTb3JyeSBmb3IgbGF0ZSByZXNwb25zZSBkdWUgdG8gYSBsb25nIHZhY2F0 aW9uLiANCg0KWWVzLCBMSVNQIGRhdGEgZm9ybWF0IGNhbiBhbHNvIGJlIHVzZWQgZm9yIFNvZnR3 aXJlIE1lc2guIEhvd2V2ZXIsIG1hbnkgZmllbGRzIGNvbnRhaW5lZCBpbiB0aGUgTElTUCBoZWFk ZXIgYXJlIExJU1Agc3BlY2lmaWMgYW5kIHNlZW1zIHVubmVjZXNzYXJ5IGZvciBTb2Z0d2lyZSBN ZXNoIHNvIGZhciwgSU1ITy4NCg0KQmVzdCByZWdhcmRzLA0KWGlhb2h1DQoNCj4gLS0tLS3Tyrz+ 1K28/i0tLS0tDQo+ILeivP7Iyzogc29mdHdpcmVzLWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzpz b2Z0d2lyZXMtYm91bmNlc0BpZXRmLm9yZ10gtPoNCj4gse0gRGFtaWVuIFNhdWNleg0KPiC3osvN yrG85DogMjAxMsTqMTLUwjMxyNUgNDo0NQ0KPiDK1bz+yMs6IGRyYWZ0LXh1LXNvZnR3aXJlLWlw LWluLXVkcEB0b29scy5pZXRmLm9yZw0KPiCzrcvNOiBTb2Z0d2lyZXNAaWV0Zi5vcmc7IExJU1Ag bWFpbGluZyBsaXN0IGxpc3QNCj4g1vfM4jogW1NvZnR3aXJlc10gZHJhZnQteHUtc29mdHdpcmUt aXAtaW4tdWRwDQo+IA0KPiBIZWxsbywNCj4gDQo+IEludGVyZXN0aW5nIGRvY3VtZW50LCBoYXZl IHlvdSBldmVyIHRob3VnaCBvZiBMSVNQIHRvIGRvIHRoYXQ/DQo+IA0KPiBSZWdhcmRzLA0KPiAN Cj4gRGFtaWVuIFNhdWNleg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KPiBTb2Z0d2lyZXMgbWFpbGluZyBsaXN0DQo+IFNvZnR3aXJlc0BpZXRmLm9y Zw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NvZnR3aXJlcw0K From xuxiaohu@huawei.com Thu Jan 17 17:56:19 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE78921F8AE7; Thu, 17 Jan 2013 17:56:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.226 X-Spam-Level: X-Spam-Status: No, score=-2.226 tagged_above=-999 required=5 tests=[AWL=0.169, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_BASE64_TEXT=1.753, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NRSlZNBP6F-i; Thu, 17 Jan 2013 17:56:18 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id B033621F8AA6; Thu, 17 Jan 2013 17:56:16 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id AOW61814; Fri, 18 Jan 2013 01:56:15 +0000 (GMT) Received: from LHREML401-HUB.china.huawei.com (10.201.5.240) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 18 Jan 2013 01:55:59 +0000 Received: from SZXEML463-HUB.china.huawei.com (10.82.67.206) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 18 Jan 2013 01:56:14 +0000 Received: from SZXEML525-MBX.china.huawei.com ([169.254.1.166]) by szxeml463-hub.china.huawei.com ([10.82.67.206]) with mapi id 14.01.0323.003; Fri, 18 Jan 2013 09:56:05 +0800 From: Xuxiaohu To: "Andrew G. Malis" , Jon Steen Thread-Topic: [Softwires] [lisp] draft-xu-softwire-ip-in-udp Thread-Index: AQHN7nBOIORRzIT3s0itIVsTqlOEnJhOYI5g Date: Fri, 18 Jan 2013 01:56:05 +0000 Message-ID: <1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597560@szxeml525-mbx.china.huawei.com> References: <0A534525-59E1-418E-826B-177655767B17@gmail.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.111.98.130] Content-Type: multipart/alternative; boundary="_000_1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597560szxeml525mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mailman-Approved-At: Fri, 18 Jan 2013 10:32:47 -0800 Cc: "Softwires@ietf.org" , LISP mailing list list , "draft-xu-softwire-ip-in-udp@tools.ietf.org" Subject: Re: [lisp] [Softwires] draft-xu-softwire-ip-in-udp X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2013 01:56:19 -0000 --_000_1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597560szxeml525mbxchi_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 DQoNCreivP7Iyzogc29mdHdpcmVzLWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzpzb2Z0d2lyZXMt Ym91bmNlc0BpZXRmLm9yZ10gtPqx7SBBbmRyZXcgRy4gTWFsaXMNCreiy83KsbzkOiAyMDEzxOox 1MI5yNUgMjE6NTANCsrVvP7IyzogSm9uIFN0ZWVuDQqzrcvNOiBTb2Z0d2lyZXNAaWV0Zi5vcmc7 IExJU1AgbWFpbGluZyBsaXN0IGxpc3Q7IGRyYWZ0LXh1LXNvZnR3aXJlLWlwLWluLXVkcEB0b29s cy5pZXRmLm9yZw0K1vfM4jogUmU6IFtTb2Z0d2lyZXNdIFtsaXNwXSBkcmFmdC14dS1zb2Z0d2ly ZS1pcC1pbi11ZHANCg0KSm9uLA0KTXkgaW50ZW50IHdhc24ndCB0byBzaG93IHN1cHBvcnQgZm9y IHRoZSBkcmFmdCwganVzdCB0byBwb2ludCBvdXQgdGhlIHJlbGF0aW9uc2hpcCB0byB0aGUgTVBM UyBkcmFmdCBmb3IgdGhvc2Ugb2YgeW91IG9uIHRoZSBzb2Z0d2lyZXMgbGlzdCB0aGF0IG1heSBu b3QgaGF2ZSBiZWVuIGZvbGxvd2luZyBpdC4gSXQncyByZWFsbHkgdXAgdG8gdGhlIHNvZnR3aXJl cyBXRyB0byBkZXRlcm1pbmUgaWYgaXQgc3VwcG9ydHMgdGFraW5nIG9uIHRoaXMgZHJhZnQgYXMg YSB3b3JrIGl0ZW0uDQoNCkFsc28sIGEgY29tbWVudCB0byB0aGUgZHJhZnQteHUgYXV0aG9ycyBp cyB0aGF0IGJvdGggb2YgdGhlIGRyYWZ0LXh1J3Mgc2hvdWxkIHByb2JhYmx5IGNyb3NzLXJlZmVy ZW5jZSBlYWNoIG90aGVyICh0aGV5IGRvbid0IGN1cnJlbnRseSkuDQoNCkhpIEFuZHksDQoNClRo YW5rcyBmb3IgdGhpcyBzdWdnZXN0aW9uIGFuZCBpdCB3aWxsIGJlIGZpeGVkIGluIHRoZSBmdXR1 cmUgdmVyc2lvbi4NCg0KQmVzdCByZWdhcmRzLA0KWGlhb2h1DQoNCg0KQ2hlZXJzLA0KQW5keQ0K DQpPbiBXZWQsIEphbiA5LCAyMDEzIGF0IDEyOjIwIEFNLCBKb24gU3RlZW4gPHN0ZWVuampAZ21h aWwuY29tPG1haWx0bzpzdGVlbmpqQGdtYWlsLmNvbT4+IHdyb3RlOg0KQW5keSwNCg0KSSB3b3Vs ZCBoYXZlIHRvIGFncmVlIHdpdGggRGFtaWVuIGluIHNvbWUgc2Vuc2UsIHdoYXQgb3RoZXIgY3Vy cmVudGx5IGF2YWlsYWJsZSBzdGFuZGFyZHMgYXJlIGF2YWlsYWJsZSB0byBmdWxmaWxsIHRoaXMg bmVlZCB3aXRob3V0IGFkZGluZyB0aGUgZXh0cmEgb3ZlcmhlYWQuICBPdmVyaGVhZCBvbmx5IGFk ZHMgdG8gdGhlIHByb2NlZXNzaW5nIHRpbWUgaXQgdGFrZXMgdG8gcmVsYXkgdGhlIGRhdGEuDQoN CkpvbiBTdGVlbg0KDQoNCg0KT24gTW9uLCBKYW4gNywgMjAxMyBhdCAxMTowOSBBTSwgQW5kcmV3 IEcuIE1hbGlzIDxhZ21hbGlzQGdtYWlsLmNvbTxtYWlsdG86YWdtYWxpc0BnbWFpbC5jb20+PiB3 cm90ZToNCkZvciB0aGUgYmVuZWZpdCBvZiB0aG9zZSBvZiB5b3UgdGhhdCBkb24ndCBmb2xsb3cg dGhlIE1QTFMgV0cgbGlzdCwgdGhpcyBkcmFmdCBpcyBjbG9zZWx5IHJlbGF0ZWQgdG8gaHR0cDov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQteHUtbXBscy1pbi11ZHAtMDYgLCB3aGljaCBpcyB0 aGUgc3ViamVjdCBvZiBhIGxpdmVseSBkaXNjdXNzaW9uIHRoZXJlLg0KQ2hlZXJzLA0KQW5keQ0K DQpPbiBTdW4sIERlYyAzMCwgMjAxMiBhdCAzOjQ1IFBNLCBEYW1pZW4gU2F1Y2V6IDxkYW1pZW4u c2F1Y2V6QGdtYWlsLmNvbTxtYWlsdG86ZGFtaWVuLnNhdWNlekBnbWFpbC5jb20+PiB3cm90ZToN CkhlbGxvLA0KDQpJbnRlcmVzdGluZyBkb2N1bWVudCwgaGF2ZSB5b3UgZXZlciB0aG91Z2ggb2Yg TElTUCB0byBkbyB0aGF0Pw0KDQpSZWdhcmRzLA0KDQpEYW1pZW4gU2F1Y2V6DQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KU29mdHdpcmVzIG1haWxpbmcg bGlzdA0KU29mdHdpcmVzQGlldGYub3JnPG1haWx0bzpTb2Z0d2lyZXNAaWV0Zi5vcmc+DQpodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NvZnR3aXJlcw0KDQoNCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpsaXNwIG1haWxpbmcgbGlz dA0KbGlzcEBpZXRmLm9yZzxtYWlsdG86bGlzcEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vbGlzcA0KDQoNCg== --_000_1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597560szxeml525mbxchi_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable

 = ;

 = ;

=B7=A2=BC=FE=C8=CB: softwires-bounces@iet= f.org [mailto:softwires-bounces@ietf.org] =B4=FA=B1=ED = Andrew G. Malis
=B7=A2=CB=CD= =CA=B1=BC=E4: 2013=C4=EA1=D4=C2<= span lang=3D"EN-US">9=C8=D5 21:50
=CA=D5=BC=FE=C8=CB: Jon Steen
=B3=AD=CB=CD: Softwires@ietf.org; LISP mailing list list; draft-xu-softwire-ip-in-udp@t= ools.ietf.org
=D6=F7=CC=E2: Re: [Softwires] [lisp] draft-xu-softwire-ip-in-udp

 

= Jon,

My intent wasn't to show suppor= t for the draft, just to point out the relationship to the MPLS draft for t= hose of you on the softwires list that may not have been following it. It's= really up to the softwires WG to determine if it supports taking on this draft as a work item.

Also, a comment to the draft-xu authors is that both of the draft-xu's shou= ld probably cross-reference each other (they don't currently).

Hi Andy,

 = ;

Thanks for= this suggestion and it will be fixed in the future version.

 = ;

Best regar= ds,

Xiaohu

 = ;


Cheers,
Andy

=  

On Wed, Jan 9, 2013 at 12:20 AM= , Jon Steen <stee= njj@gmail.com> wrote:

Andy,

 

I would have to agree with Dami= en in some sense, what other currently available standards are available to= fulfill this need without adding the extra overhead.  Overhead only a= dds to the proceessing time it takes to relay the data.

 

Jon Steen



 

On Mon, Jan 7, 2013 at 11:09 AM= , Andrew G. Malis <agmalis@gmail.com> wrote:

= For the benefit of those of you that don't follow the MPLS WG list, this dr= aft is closely related to http://tools.ietf.org/html/draft-xu-mpls-in-udp-06 , which is the= subject of a lively discussion there.

Cheers,
Andy

=  

On Sun, Dec 30, 2012 at 3:45 PM= , Damien Saucez <damien.saucez@gmail.com> wrote:

Hello,

Interesting document, have you ever though of LISP to do that?

Regards,

Damien Saucez
_______________________________________________

Softwires mailing list
Softwires@ietf.org<= /a>
https://www.ietf.org/mailman/listinfo/softwires

 

 

= _______________________________________________
lisp mailing list
lisp@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/lisp

 

 

--_000_1FEE3F8F5CCDE64C9A8E8F4AD27C19EE07597560szxeml525mbxchi_-- From heinerhummel@aol.com Fri Jan 18 14:46:26 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A1A1B21F8688 for ; Fri, 18 Jan 2013 14:46:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.24 X-Spam-Level: X-Spam-Status: No, score=-1.24 tagged_above=-999 required=5 tests=[AWL=-1.242, BAYES_50=0.001, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QNB9XrDEv2k6 for ; Fri, 18 Jan 2013 14:46:25 -0800 (PST) Received: from imr-da05.mx.aol.com (imr-da05.mx.aol.com [205.188.105.147]) by ietfa.amsl.com (Postfix) with ESMTP id C51E121F84F1 for ; Fri, 18 Jan 2013 14:46:24 -0800 (PST) Received: from mtaomg-mb03.r1000.mx.aol.com (mtaomg-mb03.r1000.mx.aol.com [172.29.41.74]) by imr-da05.mx.aol.com (Outbound Mail Relay) with ESMTP id 7AB2C1C0002D7; Fri, 18 Jan 2013 17:46:24 -0500 (EST) Received: from core-dqb005b.r1000.mail.aol.com (core-dqb005.r1000.mail.aol.com [172.29.212.209]) by mtaomg-mb03.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id 143F3E00008A; Fri, 18 Jan 2013 17:46:24 -0500 (EST) References: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> To: farinacci@gmail.com In-Reply-To: <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> X-MB-Message-Source: WebUI Received: from 178.26.192.122 by webmail-d083.sysops.aol.com (205.188.181.38) with HTTP (WebMailUI); Fri, 18 Jan 2013 17:46:23 -0500 MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFC3E4C6A93BB6_788_1DAC4_webmail-d083.sysops.aol.com" X-Mailer: Webmail 37309-STANDARD Message-Id: <8CFC3E4C56A426A-788-A05C@webmail-d083.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Fri, 18 Jan 2013 17:46:23 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1358549184; bh=cXh6lyastkMj32T81tqVRb4RjWUE9Mku1qzrWm8PswU=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=XDx5uSL45BAniBTHOVkkzp/OVNLXotYA/UibOmM3rGZERni/ktYrGzTW1t+on15W4 Cp3RtV/BTWGgX6HPJfWAsJ9IhDWLKuHMRT4IiR1Ouxyklhip5Mr/uW8Bpw2sQmHuiB JSziPSLBjeZ1YScJs67F6Cni2YpzeYEY/o5zXjHg= X-AOL-SCOLL-SCORE: 0:2:444134368:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d294a50f9d0c05891 Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2013 22:46:26 -0000 This is a multi-part message in MIME format. ----------MB_8CFC3E4C6A93BB6_788_1DAC4_webmail-d083.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" Dino, In spite of adding 4 locator octets you still need NAT !:-( C'mmon! And you try to sell it as a great feature! :-( Your position is: Thanks to NAT you have no ipv4 address depletion problem,= right ?! NAT is indeed a great bail out (like GRE which I mentioned lately), but nev= ertheless a poor and cumbersome solution. And there are many IETF goers who know much much better than me about NAT's= uglyness. And combined with LISP's servers infrastructure solutions become= even more cumbersome. So I admit: NAT will keep LISP alive. But also: I expected LISP to be bette= r: Having an IPv4 address plus a locator there is no need to depend on NAT = i.e. on additional TCP octets in order to provide global uniqueness. LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn't point= to IPv6 and say that IPv6 shall/will do better. In the past IPv6 has always emulated whichever IPv4 protocol. And IPv6 will= rather emulate LISP than come up with better routing. You also wrote: "We do not want to change DNS. We do not require any new support from DNS.= " Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS servic= e as by RFC1712. Yes, Its current status however requires some extra DNS service which is to= provide also a host's "home geopatch number" This I need for stateless multicast whereby the mobile sender is roaming. Do you think there will ever be such models with LISP ? So far you do not h= ave a Multicast-Locator nor an Anycast Locator! Regards Heiner ----------MB_8CFC3E4C6A93BB6_788_1DAC4_webmail-d083.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii"
= Dino,

In spite of adding 4 locator octets you still need NAT !:-( C'mmon!<= br>
And you try to sell it as a great feature! :-(

Your position is: Thanks t= o NAT you have no ipv4 address depletion problem, right ?!

NAT is indeed a great bail out (like GRE which I mentioned lately), = but nevertheless a poor and cumbersome solution.
And there are many IETF goers who know much much better than me abou= t NAT's uglyness. And combined with LISP's servers infrastructure solutions= become even more cumbersome.

So I admit: NAT will keep LISP alive. But also: I expected LISP to b= e better: Having an IPv4 address plus a locator there is no need to depend = on NAT i.e. on additional TCP octets in order to provide global uniqueness.=

LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn'= t point to IPv6 and say that IPv6 shall/will do better.
In the past IPv6 has always emulated whichever IPv4 protocol. And IP= v6 will rather emulate LISP than come up with better routing.


You also wrote:
 "We do not want to change DNS. We do not require any new= support from DNS."

Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS= service as by RFC1712.
= Yes, Its current status however requires some extra DNS service which is to= provide also a host's "home geopatch number"
= This I need for stateless multicast whereby the mobile sender is roaming.
= Do you think there will ever be such models with LISP ? So far you do not h= ave a Multicast-Locator nor an Anycast Locator!
=
=
= Regards
= Heiner


 ----------MB_8CFC3E4C6A93BB6_788_1DAC4_webmail-d083.sysops.aol.com-- From jmh@joelhalpern.com Fri Jan 18 14:51:24 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA6AC21F86A2 for ; Fri, 18 Jan 2013 14:51:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w5D7+Czq9YNW for ; Fri, 18 Jan 2013 14:51:20 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 9882921F86A5 for ; Fri, 18 Jan 2013 14:51:16 -0800 (PST) Received: from mailb2.tigertech.net (mailb2.tigertech.net [208.80.4.154]) by morbo.tigertech.net (Postfix) with ESMTP id 04A2E558088 for ; Fri, 18 Jan 2013 14:51:16 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailb2.tigertech.net (Postfix) with ESMTP id 518E21C9EDF; Fri, 18 Jan 2013 14:51:15 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at b2.tigertech.net Received: from [10.10.10.104] (pool-70-106-134-125.clppva.east.verizon.net [70.106.134.125]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailb2.tigertech.net (Postfix) with ESMTPSA id BB3951C07CB; Fri, 18 Jan 2013 14:51:11 -0800 (PST) Message-ID: <50F9D1D1.4090905@joelhalpern.com> Date: Fri, 18 Jan 2013 17:50:57 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: heinerhummel@aol.com References: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> <8CFC3E4C56A426A-788-A05C@webmail-d083.sysops.aol.com> In-Reply-To: <8CFC3E4C56A426A-788-A05C@webmail-d083.sysops.aol.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Jan 2013 22:51:24 -0000 Heiner, I am having trouble determining what you would like the working group to do with your input. You keep mentioning TARA. There is no Internet-Draft for TARA, and even if there were, it would be out of scope for this working group. Your concerns about overlapping addresses, seem to be aimed at use cases which while interesting are not within the charter of the working group. Dino has nonetheless gone out of his way to address your comments. What are you looking for? Yours, Joel M. Halpern, speaking as co-chair On 1/18/2013 5:46 PM, heinerhummel@aol.com wrote: > > Dino, > > In spite of adding 4 locator octets you still need NAT !:-( C'mmon! > And you try to sell it as a great feature! :-( > > Your position is: Thanks to NAT you have no ipv4 address depletion > problem, right ?! > > NAT is indeed a great bail out (like GRE which I mentioned lately), but > nevertheless a poor and cumbersome solution. > And there are many IETF goers who know much much better than me about > NAT's uglyness. And combined with LISP's servers infrastructure > solutions become even more cumbersome. > > So I admit: NAT will keep LISP alive. But also: I expected LISP to be > better: Having an IPv4 address plus a locator there is no need to depend > on NAT i.e. on additional TCP octets in order to provide global uniqueness. > > LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn't > point to IPv6 and say that IPv6 shall/will do better. > In the past IPv6 has always emulated whichever IPv4 protocol. And IPv6 > will rather emulate LISP than come up with better routing. > > > You also wrote: > "We do not want to change DNS. We do not require any new support from DNS." > > Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS > service as by RFC1712. > Yes, Its current status however requires some extra DNS service which is > to provide also a host's "home geopatch number" > This I need for stateless multicast whereby the mobile sender is roaming. > Do you think there will ever be such models with LISP ? So far you do > not have a Multicast-Locator nor an Anycast Locator! > > > Regards > Heiner > > > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From heinerhummel@aol.com Sat Jan 19 02:51:01 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F35521F89F9 for ; Sat, 19 Jan 2013 02:51:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.385 X-Spam-Level: X-Spam-Status: No, score=-2.385 tagged_above=-999 required=5 tests=[AWL=0.213, BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5ZhhhtrxjNbs for ; Sat, 19 Jan 2013 02:51:00 -0800 (PST) Received: from imr-ma03.mx.aol.com (imr-ma03.mx.aol.com [64.12.206.41]) by ietfa.amsl.com (Postfix) with ESMTP id B384921F850C for ; Sat, 19 Jan 2013 02:50:59 -0800 (PST) Received: from mtaomg-da02.r1000.mx.aol.com (mtaomg-da02.r1000.mx.aol.com [172.29.51.138]) by imr-ma03.mx.aol.com (Outbound Mail Relay) with ESMTP id 25E791C000071; Sat, 19 Jan 2013 05:50:59 -0500 (EST) Received: from core-dqa003b.r1000.mail.aol.com (core-dqa003.r1000.mail.aol.com [172.29.211.201]) by mtaomg-da02.r1000.mx.aol.com (OMAG/Core Interface) with ESMTP id E8255E000085; Sat, 19 Jan 2013 05:50:58 -0500 (EST) References: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> <8CFC3E4C56A426A-788-A05C@webmail-d083.sysops.aol.com> <50F9D1D1.4090905@joelhalpern.com> To: jmh@joelhalpern.com In-Reply-To: <50F9D1D1.4090905@joelhalpern.com> X-MB-Message-Source: WebUI Received: from 178.26.192.122 by webmail-d031.sysops.aol.com (205.188.167.95) with HTTP (WebMailUI); Sat, 19 Jan 2013 05:50:58 -0500 MIME-Version: 1.0 From: heinerhummel@aol.com X-MB-Message-Type: User Content-Type: multipart/alternative; boundary="--------MB_8CFC449FFB6E2F3_1A8C_28B7D_webmail-d031.sysops.aol.com" X-Mailer: Webmail 37309-STANDARD Message-Id: <8CFC449FFAAFBFA-1A8C-EBD4@webmail-d031.sysops.aol.com> X-Originating-IP: [178.26.192.122] Date: Sat, 19 Jan 2013 05:50:58 -0500 (EST) x-aol-global-disposition: G DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20121107; t=1358592659; bh=dLhZIrGyK6Y/CTEvUZWHE1qCosKnqcuYE1bs6h4cIEE=; h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type; b=KxW32breeD3Ywfu7r4a9XjZZfekvmRQjrT4zRrI4KbHZiJ0x/ock/vHJsPR+ba+iu tIIP9wD0zn1qQdtdoCsQj2XCrmM+JCcU7nQYDncesZP4vuvhujjTm1x7jwxmDImI7M DMrcBUvKnnEIe3bzbu3Xts/MdzJwyzCLhapgTx7I= X-AOL-SCOLL-SCORE: 0:2:436985024:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d338a50fa7a92467d Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jan 2013 10:51:02 -0000 This is a multi-part message in MIME format. ----------MB_8CFC449FFB6E2F3_1A8C_28B7D_webmail-d031.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Joel, I honestly thought that LISP would maintain/provide global uniqueness by th= e doublet {LISP-site unique IPv4 address of the EID; Locator} and only in case my mem= ory doesn't deceive me it was once (long ago) a pro-argument of LISP. Given this assumption you must admit that only LISP-DNS would work, not -AL= T, nor -DDT, and that under such a presumption my emails would have really = mattered for THIS group. By Dino's yesterday email I learned that LISP-DDT presumes global uniquenes= s of the IPv4 address which means more NAT, and not less NAT. He also mentioned IPv6-NAT which can pretty eas= yily be predicted: Company XYZ switches from IPv4 to IPv6 but wants to keep= its NAT. The result: Complexity induces even more complexity. Facit: At least myself I have learned that NAT is the ultimate solution ( a= nd not LISP-DDT) for this particular problem. Heiner =20 -----Urspr=C3=BCngliche Mitteilung-----=20 Von: Joel M. Halpern An: heinerhummel Cc: lisp Verschickt: Fr, 18 Jan 2013 11:51 pm Betreff: Re: [lisp] LISP and IPv4 Heiner, I am having trouble determining what you would like the working=20 group to do with your input. You keep mentioning TARA. There is no Internet-Draft for TARA, and even=20 if there were, it would be out of scope for this working group. Your concerns about overlapping addresses, seem to be aimed at use cases=20 which while interesting are not within the charter of the working group.=20 Dino has nonetheless gone out of his way to address your comments.=20 What are you looking for? Yours, Joel M. Halpern, speaking as co-chair On 1/18/2013 5:46 PM, heinerhummel@aol.com wrote: > > Dino, > > In spite of adding 4 locator octets you still need NAT !:-( C'mmon! > And you try to sell it as a great feature! :-( > > Your position is: Thanks to NAT you have no ipv4 address depletion > problem, right ?! > > NAT is indeed a great bail out (like GRE which I mentioned lately), but > nevertheless a poor and cumbersome solution. > And there are many IETF goers who know much much better than me about > NAT's uglyness. And combined with LISP's servers infrastructure > solutions become even more cumbersome. > > So I admit: NAT will keep LISP alive. But also: I expected LISP to be > better: Having an IPv4 address plus a locator there is no need to depend > on NAT i.e. on additional TCP octets in order to provide global uniquenes= s. > > LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn't > point to IPv6 and say that IPv6 shall/will do better. > In the past IPv6 has always emulated whichever IPv4 protocol. And IPv6 > will rather emulate LISP than come up with better routing. > > > You also wrote: > "We do not want to change DNS. We do not require any new support from DNS= ." > > Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS > service as by RFC1712. > Yes, Its current status however requires some extra DNS service which is > to provide also a host's "home geopatch number" > This I need for stateless multicast whereby the mobile sender is roaming. > Do you think there will ever be such models with LISP ? So far you do > not have a Multicast-Locator nor an Anycast Locator! > > > Regards > Heiner > > > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > =20 ----------MB_8CFC449FFB6E2F3_1A8C_28B7D_webmail-d031.sysops.aol.com Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="utf-8" Joel,

I honestly thought that LISP would maintain/provide global uniquenes= s by the doublet
{LISP-site unique IPv4 address of the EID; Locator} and only in case= my memory doesn't deceive me it was once (long ago) a pro-argument of LISP= .
Given this assumption you must admit that only LISP-DNS would work, = not -ALT, nor -DDT, and that under such a presumption my emails would have = really mattered for THIS group.

By Dino's yesterday email I learned that LISP-DDT presumes global un= iqueness of the IPv4 address which means
more NAT, and not less NAT. He also mentioned IPv6-NAT which can pre= tty easyily be predicted: Company XYZ switches from IPv4 to IPv6 but wants = to keep its NAT.
The result: Complexity induces even more complexity.

Facit: At least myself I have learned that NAT is the ultimate solut= ion ( and not LISP-DDT) for this particular problem.

Heiner

 

-----Urspr=C3=BCngliche Mitteilung-----
Von: = Joel M. Halpern <jmh@joelhalpern.com>
An: h= einerhummel <heinerhummel@aol.com>
Cc: l= isp <lisp@ietf.org>
Versc= hickt: Fr, 18 Jan 2013 11:51 pm
Betre= ff: Re: [lisp] LISP and IPv4

Heiner, I am having trouble determining =
what you would like the working=20
group to do with your input.

You keep mentioning TARA.  There is no Internet-Draft for TARA, and even=20
if there were, it would be out of scope for this working group.

Your concerns about overlapping addresses, seem to be aimed at use cases=20
which while interesting are not within the charter of the working group.=20
  Dino has nonetheless gone out of his way to address your comments.=20
What are you looking for?

Yours,
Joel M. Halpern, speaking as co-chair

On 1/18/2013 5:46 PM, heinerhummel@=
aol.com wrote:
>
> Dino,
>
> In spite of adding 4 locator octets you still need NAT !:-( C'mmon!
> And you try to sell it as a great feature! :-(
>
> Your position is: Thanks to NAT you have no ipv4 address depletion
> problem, right ?!
>
> NAT is indeed a great bail out (like GRE which I mentioned lately), bu=
t
> nevertheless a poor and cumbersome solution.
> And there are many IETF goers who know much much better than me about
> NAT's uglyness. And combined with LISP's servers infrastructure
> solutions become even more cumbersome.
>
> So I admit: NAT will keep LISP alive. But also: I expected LISP to be
> better: Having an IPv4 address plus a locator there is no need to depe=
nd
> on NAT i.e. on additional TCP octets in order to provide global unique=
ness.
>
> LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn't
> point to IPv6 and say that IPv6 shall/will do better.
> In the past IPv6 has always emulated whichever IPv4 protocol. And IPv6
> will rather emulate LISP than come up with better routing.
>
>
> You also wrote:
> "We do not want to change DNS. We do not require any new support from =
DNS."
>
> Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS
> service as by RFC1712.
> Yes, Its current status however requires some extra DNS service which =
is
> to provide also a host's "home geopatch number"
> This I need for stateless multicast whereby the mobile sender is roami=
ng.
> Do you think there will ever be such models with LISP ? So far you do
> not have a Multicast-Locator nor an Anycast Locator!
>
>
> Regards
> Heiner
>
>
>
>
> _______________________________________________
> lisp mailing list
> lisp@ietf.org
> https://www.ietf.org/mailman/listinfo/lisp
>
----------MB_8CFC449FFB6E2F3_1A8C_28B7D_webmail-d031.sysops.aol.com-- From jmh@joelhalpern.com Sat Jan 19 09:47:26 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 320A321F85DA for ; Sat, 19 Jan 2013 09:47:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.251 X-Spam-Level: X-Spam-Status: No, score=-102.251 tagged_above=-999 required=5 tests=[AWL=0.014, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K2sAbSGJy8DX for ; Sat, 19 Jan 2013 09:47:25 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 4C1BB21F85AC for ; Sat, 19 Jan 2013 09:47:25 -0800 (PST) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) by morbo.tigertech.net (Postfix) with ESMTP id 28FAAA37EE for ; Sat, 19 Jan 2013 09:47:25 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 18C231BCCB99; Sat, 19 Jan 2013 09:47:25 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from [10.10.10.104] (pool-70-106-134-125.clppva.east.verizon.net [70.106.134.125]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id 4CF021BCCB9A; Sat, 19 Jan 2013 09:47:24 -0800 (PST) Message-ID: <50FADC28.9050503@joelhalpern.com> Date: Sat, 19 Jan 2013 12:47:20 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: heinerhummel@aol.com References: <8CFC30CCBE1ABC1-1808-4680D@webmail-m070.sysops.aol.com> <6DE263B6-BA65-4309-A1DB-D095AEF1F6AC@gmail.com> <8CFC3E4C56A426A-788-A05C@webmail-d083.sysops.aol.com> <50F9D1D1.4090905@joelhalpern.com> <8CFC449FFAAFBFA-1A8C-EBD4@webmail-d031.sysops.aol.com> In-Reply-To: <8CFC449FFAAFBFA-1A8C-EBD4@webmail-d031.sysops.aol.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: lisp@ietf.org Subject: Re: [lisp] LISP and IPv4 X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Jan 2013 17:47:26 -0000 Heiner, I do not know of any point where the problem you describe was stated, or intended to be addressed by ISP or most o the other proposals that the RRG looked at. It is not within the scope of the LISP WG. Yours, Joel On 1/19/2013 5:50 AM, heinerhummel@aol.com wrote: > Joel, > > I honestly thought that LISP would maintain/provide global uniqueness by > the doublet > {LISP-site unique IPv4 address of the EID; Locator} and only in case my > memory doesn't deceive me it was once (long ago) a pro-argument of LISP. > Given this assumption you must admit that only LISP-DNS would work, not > -ALT, nor -DDT, and that under such a presumption my emails would have > really mattered for THIS group. > > By Dino's yesterday email I learned that LISP-DDT presumes global > uniqueness of the IPv4 address which means > more NAT, and not less NAT. He also mentioned IPv6-NAT which can pretty > easyily be predicted: Company XYZ switches from IPv4 to IPv6 but wants > to keep its NAT. > The result: Complexity induces even more complexity. > > Facit: At least myself I have learned that NAT is the ultimate solution > ( and not LISP-DDT) for this particular problem. > > Heiner > > > > -----Ursprüngliche Mitteilung----- > Von: Joel M. Halpern > An: heinerhummel > Cc: lisp > Verschickt: Fr, 18 Jan 2013 11:51 pm > Betreff: Re: [lisp] LISP and IPv4 > > Heiner, I am having trouble determining what you would like the working > group to do with your input. > > You keep mentioning TARA. There is no Internet-Draft for TARA, and even > if there were, it would be out of scope for this working group. > > Your concerns about overlapping addresses, seem to be aimed at use cases > which while interesting are not within the charter of the working group. > Dino has nonetheless gone out of his way to address your comments. > What are you looking for? > > Yours, > Joel M. Halpern, speaking as co-chair > > On 1/18/2013 5:46 PM,heinerhummel@aol.com wrote: >> >> Dino, >> >> In spite of adding 4 locator octets you still need NAT !:-( C'mmon! >> And you try to sell it as a great feature! :-( >> >> Your position is: Thanks to NAT you have no ipv4 address depletion >> problem, right ?! >> >> NAT is indeed a great bail out (like GRE which I mentioned lately), but >> nevertheless a poor and cumbersome solution. >> And there are many IETF goers who know much much better than me about >> NAT's uglyness. And combined with LISP's servers infrastructure >> solutions become even more cumbersome. >> >> So I admit: NAT will keep LISP alive. But also: I expected LISP to be >> better: Having an IPv4 address plus a locator there is no need to depend >> on NAT i.e. on additional TCP octets in order to provide global uniqueness. >> >> LISP will cement the bad IPv4 AND IPv6 paradigms. Dino, you shouldn't >> point to IPv6 and say that IPv6 shall/will do better. >> In the past IPv6 has always emulated whichever IPv4 protocol. And IPv6 >> will rather emulate LISP than come up with better routing. >> >> >> You also wrote: >> "We do not want to change DNS. We do not require any new support from DNS." >> >> Well, TARA as outlined by draft-tara-hummel-00.txt only required DNS >> service as by RFC1712. >> Yes, Its current status however requires some extra DNS service which is >> to provide also a host's "home geopatch number" >> This I need for stateless multicast whereby the mobile sender is roaming. >> Do you think there will ever be such models with LISP ? So far you do >> not have a Multicast-Locator nor an Anycast Locator! >> >> >> Regards >> Heiner >> >> >> >> >> _______________________________________________ >> lisp mailing list >>lisp@ietf.org >>https://www.ietf.org/mailman/listinfo/lisp >> > From ljakab@ac.upc.edu Mon Jan 21 01:53:13 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 567E421F84CC for ; Mon, 21 Jan 2013 01:53:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.399 X-Spam-Level: X-Spam-Status: No, score=-3.399 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_42=0.6, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vFKsFtQ0vOfg for ; Mon, 21 Jan 2013 01:53:10 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id 7EF9721F84CE for ; Mon, 21 Jan 2013 01:53:04 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r0L9r2mO021706 for ; Mon, 21 Jan 2013 10:53:02 +0100 Received: from [192.168.1.6] (unknown [89.123.124.214]) by gw.ac.upc.edu (Postfix) with ESMTP id A05796B01C4 for ; Mon, 21 Jan 2013 10:53:00 +0100 (CET) Message-ID: <50FD0FF3.3060100@ac.upc.edu> Date: Mon, 21 Jan 2013 11:52:51 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: "lisp@ietf.org" References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> In-Reply-To: OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Subject: Re: [lisp] WG Last Call for draft-ietf-lisp-deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 09:53:13 -0000 Hi Damien, Many thanks for the review. See responses inline: On 01/15/13 00:15, Damien Saucez wrote: > Hello, > > Comments inline [...] >> LISP site: A single host or a set of network elements in an edge >> network under the administrative control of a single organization, >> delimited from other networks by LISP Tunnel Router(s). >> >> Since LISP is a protocol which can be used for different purposes, it >> is important to identify possible deployment scenarios and the >> additional requirements they may impose on the protocol specification >> and other protocols. Additionally, this document is intended as a >> guide for the operational community for LISP deployments in their >> networks. It is expected to evolve as LISP deployment progresses, >> and the described scenarios are better understood or new scenarios >> are discovered. >> > maybe describe rapidly what an network element is. Not sure it is really necessary, but how about something like: Network element: active or passive device that is used for transporting packet switched data. >> Each subsection considers an element type, discussing the impact of >> deployment scenarios on the protocol specification. For definition >> of terms, please refer to the appropriate documents (as cited in the >> respective sections). >> 2. Tunnel Routers >> >> LISP is a map-and-encap protocol, with the main goal of improving >> global routing scalability. To achieve its goal, it introduces >> several new network elements, each performing specific functions >> necessary to separate the edge from the core. > > wouldn't this clearer in Sec. 1? It is important for the general > understanding. Agree, will move. [...] > >> From the LISP site perspective the main advantage of this type of >> deployment (compared to the one described in the next section) is >> having direct control over its ingress traffic engineering. This >> makes it is > remove is? Thanks for catching this. [...] > >> Another thing to consider when placing tunnel routers are MTU issues. >> Since encapsulating packets increases overhead, the MTU of the end- >> to-end path may decrease, when encapsulated packets need to travel >> over segments having close to minimum MTU. Some transit networks are >> known to provide larger MTU than the typical value of 1500 bytes of >> popular access technologies used at end hosts (e.g., IEEE 802.3 and >> 802.11). However, placing the LISP router connecting to such a >> network at the customer edge could possibly bring up MTU issues, >> depending on the link type to the provider as opposed to the >> following scenario. > > counter measures for that (e.g., any special setup that can be done > to minimise the risk > a client is not working properly because of MTU) That could be a lenghty discussion. LISP sites should check with their providers and make sure they offer links with the required MTU. They should also be able to check for themselves. >> 2.2. Provider Edge >> >> The other location at the core-edge boundary for deploying LISP >> routers is at the Internet service provider edge. The main incentive >> for this case is that the customer does not have to upgrade the CE >> router(s), or change the configuration of any equipment. >> Encapsulation/decapsulation happens in the provider's network, which >> may be able to serve several customers with a single device. For >> large ISPs with many residential/business customers asking for LISP >> this can lead to important savings, since there is no need to upgrade >> the software (or hardware, if it's the case) at each client's >> location. Instead, they can upgrade the software (or hardware) on a >> few PE routers serving the customers. This scenario is depicted in >> Figure 2. >> >> >> >> >> >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 5] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> +----------+ +------------------+ >> | ISP1 | | ISP2 | >> | | | | >> | +----+ | | +----+ +----+ | >> +--|xTR1|--+ +--|xTR2|--|xTR3|--+ >> +----+ +----+ +----+ >> | | | >> | | | >> +--<[LISP site]>---+-------+ >> >> Figure 2: xTR at the PE >> >> While this approach can make transition easy for customers and may be >> cheaper for providers, the LISP site looses one of the main benefits >> of LISP: ingress traffic engineering. Since the provider controls >> the ETRs, additional complexity would be needed to allow customers to >> modify their mapping entries. > > or the client can have some form of access to the configuration (a bit > like tagging route with > special communities in BGP to tell the ISP to which of its operator > not advertise the route) Yes, that's what the "additional complexity" above refers to: you need more stuff to make it work. >> The problem is aggravated when the LISP site is multihomed. Consider >> the scenario in Figure 2: whenever a change to TE policies is >> required, the customer contacts both ISP1 and ISP2 to make the >> necessary changes on the routers (if they provide this possibility). > > ok, cf supra >> It is however unlikely, that both ISPs will apply changes >> simultaneously, which may lead to inconsistent state for the mappings >> of the LISP site. Since the different upstream ISPs are usually >> competing business entities, the ETRs may even be configured to >> compete, either to attract all the traffic or to get no traffic. The >> former will happen if the customer pays per volume, the latter if the >> connectivity has a fixed price. A solution could be to have the >> mappings in the Map-Server(s), and have their operator give control >> over the entries to customer, much like in the Domain Name System at >> the time of this writing. >> >> Additionally, since xTR1, xTR2, and xTR3 are in different >> administrative domains, locator reachability information is unlikely >> to be exchanged among them, making it difficult to set Loc-Status- >> Bits correctly on encapsulated packets. >> > IMHO this document should suggest not to use LSB in the Internet case > deployment Only for the above reason, or due to security concerns? > >> Compared to the customer edge scenario, deploying LISP at the >> provider edge might have the advantage of diminishing potential MTU >> issues, because the tunnel router is closer to the core, where links >> typically have higher MTUs than edge network links. >> >> 2.3. Split ITR/ETR >> >> In a simple LISP deployment, xTRs are located at the border of the >> LISP site (see Section 2.1). In this scenario packets are routed >> inside the domain according to the EID. However, more complex >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 6] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> networks may want to route packets according to the destination RLOC. >> This would enable them to choose the best egress point. >> >> The LISP specification separates the ITR and ETR functionality and >> considers that both entities can be deployed in separated network >> equipment. ITRs can be deployed closer to the host (i.e., access >> routers). This way packets are encapsulated as soon as possible, and >> packets exit the network through the best egress point in terms of >> BGP policy. In turn, ETRs can be deployed at the border routers of >> the network, and packets are decapsulated as soon as possible. Once >> decapsulated, packets are routed based on destination EID, according >> to internal routing policy. >> >> In the following figure we can see an example. The Source (S) >> transmits packets using its EID and in this particular case packets >> are encapsulated at ITR_1. The encapsulated packets are routed >> inside the domain according to the destination RLOC, and can egress >> the network through the best point (i.e., closer to the RLOC's AS). >> On the other hand, inbound packets are received by ETR_1 which >> decapsulates them. Then packets are routed towards S according to >> the EID, again following the best path. >> >> +---------------------------------------+ >> | | >> | +-------+ +-------+ +-------+ >> | | ITR_1 |---------+ | ETR_1 |-RLOC_A--| ISP_A | >> | +-------+ | +-------+ +-------+ >> | +-+ | | | >> | |S| | IGP | | >> | +-+ | | | >> | +-------+ | +-------+ +-------+ >> | | ITR_2 |---------+ | ETR_2 |-RLOC_B--| ISP_B | >> | +-------+ +-------+ +-------+ >> | | >> +---------------------------------------+ >> >> Figure 3: Split ITR/ETR Scenario >> >> This scenario has a set of implications: >> >> o The site must carry at least partial BGP routes in order to choose >> the best egress point, increasing the complexity of the network. >> However, this is usually already the case for LISP sites that >> would benefit from this scenario. >> >> o If the site is multihomed to different ISPs and any of the >> upstream ISPs is doing uRPF filtering, this scenario may become >> impractical. ITRs need to determine the exit ETR, for setting the >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 7] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> correct source RLOC in the encapsulation header. This adds >> complexity and reliability concerns. >> >> o In LISP, ITRs set the reachability bits when encapsulating data >> packets. Hence, ITRs need a mechanism to be aware of the liveness >> of all ETRs serving their site. >> >> o MTU within the site network must be large enough to accommodate >> encapsulated packets. >> >> o In this scenario, each ITR is serving fewer hosts than in the case >> when it is deployed at the border of the network. It has been >> shown that cache hit ratio grows logarithmically with the amount >> of users [cache]. Taking this into account, when ITRs are >> deployed closer to the host the effectiveness of the mapping cache >> may be lower (i.e., the miss ratio is higher). Another >> consequence of this is that the site may transmit a higher amount >> of Map-Requests, increasing the load on the distributed mapping >> database. >> > one possible solution is to aggregate Map-Requests with a hierarchy > (à-la DDT). You mean having site-local caching Map-Resolvers? > >> 2.4. Inter-Service Provider Traffic Engineering >> >> With LISP, two LISP sites can route packets among them and control >> their ingress TE policies. Typically, LISP is seen as applicable to >> stub networks, however the LISP protocol can also be applied to >> transit networks recursively. >> >> Consider the scenario depicted in Figure 4. Packets originating from >> the LISP site Stub1, client of ISP_A, with destination Stub4, client >> of ISP_B, are LISP encapsulated at their entry point into the ISP_A's >> network. The external IP header now has as the source RLOC an IP >> from ISP_A's address space and destination RLOC from ISP_B's address >> space. One or more ASes separate ISP_A from ISP_B. With a single >> level of LISP encapsulation, Stub4 has control over its ingress >> traffic. However, at the time of this writing, ISP_B has only BGP >> tools (such as prefix deaggregation) to control on which of his own >> upstream or peering links should packets enter. This is either not >> feasible (if fine-grained per-customer control is required, the very >> specific prefixes may not be propagated) or increases DFZ table size. >> >> _.--. >> Stub1 ... +-------+ ,-'' `--. +-------+ ... Stub3 >> \ | R_A1|----,' `. ---|R_B1 | / >> --| R_A2|---( Transit ) | |-- >> Stub2 .../ | R_A3|-----. ,' ---|R_B2 | \... Stub4 >> +-------+ `--. _.-' +-------+ >> ... ISP_A `--'' ISP_B ... >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 8] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> Figure 4: Inter-Service provider TE scenario >> >> A solution for this is to apply LISP recursively. ISP_A and ISP_B >> may reach a bilateral agreement to deploy their own private mapping >> system. ISP_A then encapsulates packets destined for the prefixes of >> ISP_B, which are listed in the shared mapping system. Note that in >> this case the packet is double-encapsulated (using R_A1, R_A2 or R_A3 >> as source and R_B1 or R_B2 as destination in the example above). >> ISP_B's ETR removes the outer, second layer of LISP encapsulation >> from the incoming packet, and routes it towards the original RLOC, >> the ETR of Stub4, which does the final decapsulation. >> > > if there is bilateral agreement, could we imagine single encapsulation > and use instance-id > to differentiate with the "source" able to install mappings at the > second tier? I think this would remove the elegance of the LISP solution by going back to MPLS style LSPs. But it may be a solution preferred by some, choice is good, so I'll mention it ;) > >> If ISP_A and ISP_B agree to share a private distributed mapping >> database, both can control their ingress TE without the need of >> deaggregating prefixes. In this scenario the private database >> contains RLOC-to-RLOC bindings. The convergence time on the TE >> policies updates is expected to be fast, since ISPs only have to >> update/query a mapping to/from the database. > but convergence is O(TTL) or then specify to use SMR or Versioning Maybe we should spell that out it the document, but we expected the usual LISP mechanism for keeping mappings up to date (SMR/Versioning) will be used. >> This deployment scenario includes two important caveats. First, it >> is intended to be deployed between only two ISPs (ISP_A and ISP_B in >> Figure 4). If more than two ISPs use this approach, then the xTRs >> deployed at the participating ISPs must either query multiple mapping >> systems, or the ISPs must agree on a common shared mapping system. >> Second, the scenario is only recommended for ISPs providing >> connectivity to LISP sites, such that source RLOCs of packets to be >> reencapsulated belong to said ISP. Otherwise the participating ISPs >> must register prefixes they do not own in the above mentioned private >> mapping system. Failure to follow these recommendations may lead to >> operational and security issues when deploying this scenario. >> >> Besides these recommendations, the main disadvantages of this >> deployment case are: >> >> o Extra LISP header is needed. This increases the packet size and >> requires that the MTU between both ISPs accommodates double- >> encapsulated packets. >> >> o The ISP ITR must encapsulate packets and therefore must know the >> RLOC-to-RLOC binding. These bindings are stored in a mapping >> database and may be cached in the ITR's mapping cache. Cache >> misses lead to an additional lookup latency, unless a push based >> mapping system is used for the private mapping system. >> >> o The operational overhead of maintaining the shared mapping >> database. >> >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 9] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> o If an IPv6 address block is reserved for EID use, as specified in >> [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first >> level) can avoid LISP processing altogether for non-LISP >> destinations. The ISP tunnel routers however will not be able to >> take advantage of this optimization, all RLOC-to-RLOC mappings >> need a lookup in the private database (or map-cache, once results >> are cached). >> >> 2.5. Tunnel Routers Behind NAT >> >> NAT in this section refers to IPv4 network address and port >> translation. >> >> 2.5.1. ITR >> >> Packets encapsulated by an ITR are just UDP packets from a NAT >> device's point of view, and they are handled like any UDP packet, >> there are no additional requirements for LISP data packets. >> >> Map-Requests sent by an ITR, which create the state in the NAT table, >> have a different 5-tuple in the IP header than the Map-Reply >> generated by the authoritative ETR. Since the source address of this >> packet is different from the destination address of the request >> packet, no state will be matched in the NAT table and the packet will >> be dropped. To avoid this, the NAT device has to do the following: >> >> o Send all UDP packets with source port 4342, regardless of the >> destination port, to the RLOC of the ITR. The most simple way to >> achieve this is configuring 1:1 NAT mode from the external RLOC of >> the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer >> broadband routers). >> >> o Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in >> the payload. >> >> This setup supports a single ITR behind the NAT device. >> >> 2.5.2. ETR >> >> An ETR placed behind NAT is reachable from the outside by the >> Internet-facing locator of the NAT device. It needs to know this >> locator (and configure a loopback interface with it), so that it can >> use it in Map-Reply and Map-Register messages. Thus support for >> dynamic locators for the mapping database is needed in LISP >> equipment. >> >> Again, only one ETR behind the NAT device is supported. >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 10] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> An implication of the issues described above is that LISP sites with >> xTRs can not be behind carrier based NATs, since two different sites >> would collide on the port forwarding. >> >> 2.6. Summary and Feature Matrix >> >> Feature CE PE Split Rec. >> -------------------------------------------------------- >> Control of ingress TE x - x x >> No modifications to existing >> int. network infrastructure x x - - >> Loc-Status-Bits sync x - x x >> MTU/PMTUD issues minimized - x - x >> > Does Rec. mean recursive? if so, make it explicit Yes, will do. > >> 3. Map-Resolvers and Map-Servers >> >> 3.1. Map-Servers >> > s/Map-Server/Map Server/ga Thanks, will do. > >> The Map-Server learns EID-to-RLOC mapping entries from an >> authoritative source and publishes them in the distributed mapping >> database. These entries are learned through authenticated Map- >> Register messages sent by authoritative ETRs. Also, upon reception >> of a Map-Request, the Map-Server verifies that the destination EID >> matches an EID-prefix for which it is authoritative for, and then re- >> encapsulates and forwards it to a matching ETR. Map-Server >> functionality is described in detail in [I-D.ietf-lisp-ms]. >> >> The Map-Server is provided by a Mapping Service Provider (MSP). A >> MSP can be any of the following: >> >> o EID registrar. Since the IPv4 address space is nearing >> exhaustion, IPv4 EIDs will come from already allocated Provider >> Independent (PI) space. The registrars in this case remain the >> current five Regional Internet Registries (RIRs). In the case of >> IPv6, the possibility of reserving a /16 block as EID space is >> currently under consideration [I-D.ietf-lisp-eid-block]. If >> granted by IANA, the community will have to determine the body >> responsible for allocations from this block, and the associated >> policies. Existing allocation policies apply to EIDs outside this >> block. >> >> o Third parties. Participating in the LISP mapping system is >> similar to participating in global routing or DNS: as long as >> there is at least another already participating entity willing to >> forward the newcomer's traffic, there is no barrier to entry. >> Still, just like routing and DNS, LISP mappings have the issue of >> trust, with efforts underway to make the published information >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 11] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> verifiable. When these mechanisms will be deployed in the LISP >> mapping system, the burden of providing and verifying trust should >> be kept away from MSPs, which will simply host the secured >> mappings. This will keep the low barrier of entry to become an >> MSP for third parties. >> >> In all cases, the MSP configures its Map-Server(s) to publish the >> prefixes of its clients in the distributed mapping database and start >> encapsulating and forwarding Map-Requests to the ETRs of the AS. >> These ETRs register their prefix(es) with the Map-Server(s) through >> periodic authenticated Map-Register messages. In this context, for >> some LISP end sites, there is a need for mechanisms to: >> > how periodic (suggestion of good timers)? The Map Server interface draft has some authoritative text on this, we I didn't discuss it here: Map-Register messages are sent periodically from an ETR to a Map Server with a suggested interval between messages of one minute. A Map Server should time-out and remove an ETR's registration if it has not received a valid Map-Register message within the past three minutes. When first contacting a Map Server after restart or changes to its EID-to-RLOC database mappings, an ETR may initially send Map- Register messages at an increased frequency, up to one every 20 seconds. This "quick registration" period is limited to five minutes in duration. Maybe add a pointer to the MS draft? >> o Automatically distribute EID prefix(es) shared keys between the >> ETRs and the EID-registrar Map-Server. >> >> o Dynamically obtain the address of the Map-Server in the ETR of the >> AS. >> >> The Map-Server plays a key role in the reachability of the EID- >> prefixes it is serving. On the one hand it is publishing these >> prefixes into the distributed mapping database and on the other hand >> it is encapsulating and forwarding Map-Requests to the authoritative >> ETRs of these prefixes. ITRs encapsulating towards EIDs under the >> responsibility of a failed Map-Server will be unable to look up any >> of their covering prefixes. The only exception are the ITRs that >> already contain the mappings in their local cache. In this case ITRs >> can reach ETRs until the entry expires (typically 24 hours). > > where does the "typically 24h" come from? Initial popular Beta network configurations. Should we remove the parenthesis? >> For >> this reason, redundant Map-Server deployments are desirable. A set >> of Map-Servers providing high-availability service to the same set of >> prefixes is called a redundancy group. ETRs are configured to send >> Map-Register messages to all Map-Servers in the redundancy group. To >> achieve fail-over (or load-balancing, if desired), > >> known mapping >> system specific best practices should be used. >> > > what is meant by this very sentence? If we were to use ALT, use BGP best practices, if we were to use DDT, which has a similar design to DDT, use applicable DNS best practices. > >> Additionally, if a Map-Server has no reachability for any ETR serving >> a given EID block, it should not originate that block into the >> mapping system. > why? It doesn't receive Map-Registers, so it doesn't have up to date information, and the registration will time out (based on an implementation specific timer). Returning forward-native may be the best choice here, because packets to the ETRs may still find their way through PITRs if it's only the MS that lost reachability and there is another MS in the redundancy group. > >> 3.2. Map-Resolvers >> > s/Map-Resolver/Map Resolver/ga Thanks, will do. > >> A Map-Resolver a is a network infrastructure component which accepts >> LISP encapsulated Map-Requests, typically from an ITR, and finds the >> appropriate EID-to-RLOC mapping by either consulting its local cache >> or by consulting the distributed mapping database. Map-Resolver >> functionality is described in detail in [I-D.ietf-lisp-ms]. >> >> Anyone with access to the distributed mapping database can set up a >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 12] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> Map-Resolver and provide EID-to-RLOC mapping lookup service. >> Database access setup is mapping system specific. >> >> For performance reasons, it is recommended that LISP sites use Map- >> Resolvers that are topologically close to their ITRs. ISPs >> supporting LISP will provide this service to their customers, >> possibly restricting access to their user base. LISP sites not in >> this position can use open access Map-Resolvers, if available. >> However, regardless of the availability of open access resolvers, the >> MSP providing the Map-Server(s) for a LISP site should also make >> available Map-Resolver(s) for the use of that site. >> >> In medium to large-size ASes, ITRs must be configured with the RLOC >> of a Map-Resolver, operation which can be done manually. However, in >> Small Office Home Office (SOHO) scenarios a mechanism for >> autoconfiguration should be provided. >> >> One solution to avoid manual configuration in LISP sites of any size >> is the use of anycast RLOCs for Map-Resolvers similar to the DNS root >> server infrastructure. Since LISP uses UDP encapsulation, the use of >> anycast would not affect reliability. > > maybe change the term reliability because anycast actually improves > reliability, isnt'it? You are right. Reliability here was used as a comparison to TCP over anycast, which can be unstable. How about "Since LISP control traffic is UDP based, using anycast would improve reliability." ? >> LISP routers are then shipped >> with a preconfigured list of well know Map-Resolver RLOCs, which can >> be edited by the network administrator, if needed. >> >> The use of anycast also helps improving mapping lookup performance. >> Large MSPs can increase the number and geographical diversity of >> their Map-Resolver infrastructure, using a single anycasted RLOC. >> Once LISP deployment is advanced enough, very large content providers >> may also be interested running this kind of setup, to ensure minimal >> connection setup latency for those connecting to their network from >> LISP sites. >> >> While Map-Servers and Map-Resolvers implement different >> functionalities within the LISP mapping system, they can coexist on >> the same device. For example, MSPs offering both services, can >> deploy a single Map-Resolver/Map-Server in each PoP where they have a >> presence. >> >> >> 4. Proxy Tunnel Routers >> >> 4.1. P-ITR >> >> Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP >> transition mechanism, allowing non-LISP sites to reach LISP sites. >> They announce via BGP certain EID prefixes (aggregated, whenever >> possible) to attract traffic from non-LISP sites towards EIDs in the >> covered range. They do the mapping system lookup, and encapsulate >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 13] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> received packets towards the appropriate ETR. Note that for the >> reverse path LISP sites can reach non-LISP sites simply by not >> encapsulating traffic. See [I-D.ietf-lisp-interworking] for a >> detailed description of P-ITR functionality. >> >> The success of new protocols depends greatly on their ability to >> maintain backwards compatibility and inter-operate with the >> protocol(s) they intend to enhance or replace, and on the incentives >> to deploy the necessary new software or equipment. A LISP site needs >> an interworking mechanism to be reachable from non-LISP sites. A >> P-ITR can fulfill this role, enabling early adopters to see the >> benefits of LISP, similar to tunnel brokers helping the transition >> from IPv4 to IPv6. A site benefits from new LISP functionality >> (proportionally with existing global LISP deployment) when going >> LISP, so it has the incentives to deploy the necessary tunnel >> routers. In order to be reachable from non-LISP sites it has two >> options: keep announcing its prefix(es) with BGP, or have a P-ITR >> announce prefix(es) covering them. >> >> If the goal of reducing the DFZ routing table size is to be reached, >> the second option is preferred. Moreover, the second option allows >> LISP-based ingress traffic engineering from all sites. However, the >> placement of P-ITRs significantly influences performance and >> deployment incentives. Section 5 is dedicated to the migration to a >> LISP-enabled Internet, and includes deployment scenarios for P-ITRs. >> >> 4.2. P-ETR >> >> In contrast to P-ITRs, P-ETRs are not required for the correct >> functioning of all LISP sites. There are two cases, where they can >> be of great help: >> >> o LISP sites with unicast reverse path forwarding (uRPF) >> restrictions, and >> >> o Communication between sites using different address family RLOCs. >> >> In the first case, uRPF filtering is applied at their upstream PE >> router. When forwarding traffic to non-LISP sites, an ITR does not >> encapsulate packets, leaving the original IP headers intact. As a >> result, packets will have EIDs in their source address. Since we are >> discussing the transition period, we can assume that a prefix >> covering the EIDs belonging to the LISP site is advertised to the >> global routing tables by a P-ITR, and the PE router has a route >> towards it. However, the next hop will not be on the interface >> towards the CE router, so non-encapsulated packets will fail uRPF >> checks. >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 14] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> To avoid this filtering, the affected ITR encapsulates packets >> towards the locator of the P-ETR for non-LISP destinations. Now the >> source address of the packets, as seen by the PE router is the ITR's >> locator, which will not fail the uRPF check. The P-ETR then >> decapsulates and forwards the packets. >> >> The second use case is IPv4-to-IPv6 transition. Service providers >> using older access network hardware, which only supports IPv4 can >> still offer IPv6 to their clients, by providing a CPE device running >> LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP >> sites, with IPv6-only locators. Packets originating from the client >> LISP site for these destinations would be encapsulated towards the >> P-ETR's IPv4 locator. The P-ETR is in a native IPv6 network, >> decapsulating and forwarding packets. For non-LISP destination, the >> packet travels natively from the P-ETR. For LISP destinations with >> IPv6-only locators, the packet will go through a P-ITR, in order to >> reach its destination. >> >> For more details on P-ETRs see the [I-D.ietf-lisp-interworking] >> draft. >> >> P-ETRs can be deployed by ISPs wishing to offer value-added services >> to their customers. As is the case with P-ITRs, P-ETRs too may >> introduce path stretch. Because of this the ISP needs to consider >> the tradeoff of using several devices, close to the customers, to >> minimize it, or few devices, farther away from the customers, >> minimizing cost instead. >> >> Since the deployment incentives for P-ITRs and P-ETRs are different, >> it is likely they will be deployed in separate devices, except for >> the CDN case, which may deploy both in a single device. >> >> In all cases, the existence of a P-ETR involves another step in the >> configuration of a LISP router. CPE routers, which are typically >> configured by DHCP, stand to benefit most from P-ETRs. >> Autoconfiguration of the P-ETR locator could be achieved by a DHCP >> option, or adding a P-ETR field to either Map-Notifys or Map-Replies. >> >> As a security measure, access to P-ETRs should be limited to >> legitimate users by enforcing ACLs. >> >> >> 5. Migration to LISP >> >> This section discusses a deployment architecture to support the >> migration to a LISP-enabled Internet. The loosely defined terms of >> "early transition phase", "late transition phase", and "LISP Internet >> phase" refer to time periods when LISP sites are a minority, a >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 15] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> majority, or represent all edge networks respectively. >> >> 5.1. LISP+BGP >> >> For sites wishing to go LISP with their PI prefix the least >> disruptive way is to upgrade their border routers to support LISP, >> register the prefix into the LISP mapping system, but keep announcing >> it with BGP as well. This way LISP sites will reach them over LISP, >> while legacy sites will be unaffected by the change. The main >> disadvantage of this approach is that no decrease in the DFZ routing >> table size is achieved. Still, just increasing the number of LISP >> sites is an important gain, as an increasing LISP/non-LISP site ratio >> will slowly decrease the need for BGP-based traffic engineering that >> leads to prefix deaggregation. That, in turn, may lead to a decrease >> in the DFZ size in the late transition phase. > > and potentially the churn (except maybe because of PITR) Thanks, will mention that. Even with PITRs, churn should be reduced, sice they are supposed to announce the aggregates. >> This scenario is not limited to sites that already have their >> prefixes announced with BGP. Newly allocated EID blocks could follow >> this strategy as well during the early LISP deployment phase, >> depending on the cost/benefit analysis of the individual networks. >> Since this leads to an increase in the DFZ size, the following >> architecture should be preferred for new allocations. >> >> 5.2. Mapping Service Provider (MSP) P-ITR Service >> >> In addition to publishing their clients' registered prefixes in the >> mapping system, MSPs with enough transit capacity can offer them >> P-ITR service as a separate service. This service is especially >> useful for new PI allocations, to sites without existing BGP >> infrastructure, that wish to avoid BGP altogether. The MSP announces >> the prefix into the DFZ, and the client benefits from ingress traffic >> engineering without prefix deaggregation. The downside of this >> scenario is adding path stretch. >> >> Routing all non-LISP ingress traffic through a third party which is >> not one of its ISPs is only feasible for sites with modest amounts of >> traffic (like those using the IPv6 tunnel broker services today), >> especially in the first stage of the transition to LISP, with a >> significant number of legacy sites. When the LISP/non-LISP site >> ratio becomes high enough, this approach can prove increasingly >> attractive. >> >> Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix >> deaggregation for traffic engineering purposes, resulting in slower >> routing table increase in the case of new allocations and potential >> decrease for existing ones. Moreover, MSPs serving different clients >> with adjacent aggregable prefixes may lead to additional decrease, >> but quantifying this decrease is subject to future research study. >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 16] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> 5.3. Proxy-ITR Route Distribution (PITR-RD) >> >> Instead of a LISP site, or the MSP, announcing their EIDs with BGP to >> the DFZ, this function can be outsourced to a third party, a P-ITR >> Service Provider (PSP). This will result in a decrease of the >> operational complexity both at the site and at the MSP. >> >> The PSP manages a set of distributed P-ITR(s) that will advertise the >> corresponding EID prefixes through BGP to the DFZ. These P-ITR(s) >> will then encapsulate the traffic they receive for those EIDs towards >> the RLOCs of the LISP site, ensuring their reachability from non-LISP >> sites. >> >> While it is possible for a PSP to manually configure each client's >> EID routes to be announced, this approach offers little flexibility >> and is not scalable. This section presents a scalable architecture >> that offers automatic distribution of EID routes to LISP sites and >> service providers. >> >> The architecture requires no modification to existing LISP network >> elements, but it introduces a new (conceptual) network element, the >> EID Route Server, defined as a router that either propagates routes >> learned from other EID Route Servers, or it originates EID Routes. >> The EID-Routes that it originates are those that it is authoritative >> for. It propagates these routes to Proxy-ITRs within the AS of the >> EID Route Server. It is worth to note that a BGP capable router can >> be also considered as an EID Route Server. >> >> Further, an EID-Route is defined as a prefix originated via the Route >> Server of the mapping service provider, which should be aggregated if >> the MSP has multiple customers inside a single netblock. > define netblock s/netblock/prefix/ >> This prefix >> is propagated to other P-ITRs both within the MSP and to other P-ITR >> operators it peers with. EID Route Servers are operated either by >> the LISP site, MSPs or PSPs, and they may be collocated with a Map- >> Server or P-ITR, but are a functionally discrete entity. They >> distribute EID-Routes, using BGP, to other domains, according to >> policies set by participants. >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 17] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> MSP (AS64500) >> RS ---> P-ITR >> | / >> | _.--./ >> ,-'' /`--. >> LISP site ---,' | v `. >> ( | DFZ )----- Mapping system >> non-LISP site ----. | ^ ,' >> `--. / _.-' >> | `--'' >> v / >> P-ITR >> PSP (AS64501) >> >> Figure 5: The P-ITR Route Distribution architecture >> >> The architecture described above decouples EID origination from route >> propagation, with the following benefits: >> >> o Can accurately represent business relationships between P-ITR >> operators >> >> o More mapping system agnostic >> >> o Minor changes to P-ITR implementation, no changes to other >> components >> >> In the example in the figure we have a MSP providing services to the >> LISP site. The LISP site does not run BGP, and gets an EID >> allocation directly from a RIR, or from the MSP, who may be a LIR. >> Existing PI allocations can be migrated as well. The MSP ensures the >> presence of the prefix in the mapping system, and runs an EID Route >> Server to distribute it to P-ITR service providers. Since the LISP >> site does not run BGP, the prefix will be originated with the AS >> number of the MSP. >> >> In the simple case depicted in Figure 5 the EID-Route of LISP Site >> will be originated by the Route Server, and announced to the DFZ by >> the PSP's P-ITRs with AS path 64501 64500. From that point on, the >> usual BGP dynamics apply. This way, routes announced by P-ITR are >> still originated by the authoritative Route Server. Note that the >> peering relationships between MSP/PSPs and those in the underlying >> forwarding plane may not be congruent, making the AS path to a P-ITR >> shorter than it is in reality. >> >> The non-LISP site will select the best path towards the EID-prefix, >> according to its local BGP policies. Since AS-path length is usually >> an important metric for selecting paths, a careful placement of P-ITR >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 18] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> could significantly reduce path-stretch between LISP and non-LISP >> sites. >> >> The architecture allows for flexible policies between MSP/PSPs. >> Consider the EID Route Server networks as control plane overlays, >> facilitating the implementation of policies necessary to reflect the >> business relationships between participants. The results are then >> injected to the common underlying forwarding plane. For example, >> some MSP/PSPs may agree to exchange EID-Prefixes and only announce >> them to each of their forwarding plane customers. Global >> reachability of an EID-prefix depends on the MSP the LISP site buys >> service from, and is also subject to agreement between the mentioned >> parties. >> >> In terms of impact on the DFZ, this architecture results in a slower >> routing table increase for new allocations, since traffic engineering >> will be done at the LISP level. For existing allocations migrating >> to LISP, the DFZ may decrease since MSPs may be able to aggregate the >> prefixes announced. >> >> Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix >> deaggregation for traffic engineering purposes, resulting in slower >> routing table increase in the case of new allocations and potential >> decrease for existing ones. Moreover, MSPs serving different clients >> with adjacent aggregable prefixes may lead to additional decrease, >> but quantifying this decrease is subject to future research study. >> >> The flexibility and scalability of this architecture does not come >> without a cost however: A PSP operator has to establish either >> transit or peering relationships to improve their connectivity. > What's happening when sites have to change their EID? for example > after a network merge. > >> 5.4. Migration Summary >> >> The following table presents the expected effects of the different >> transition scenarios during a certain phase on the DFZ routing table >> size: >> >> Phase | LISP+BGP | MSP P-ITR | PITR-RD >> -----------------+--------------+-----------------+---------------- >> Early transition | no change | slower increase | slower increase >> Late transition | may decrease | slower increase | slower increase >> LISP Internet | considerable decrease >> > The "considerable decrease" depends on where LISP is deployed, if it > is very close to the > hosts, maybe it would not be so considerable. We assumed deployment on leaf AS border routers. > >> It is expected that PITR-RD will co-exist with LISP+BGP during the >> migration, with the latter being more popular in the early transition >> phase. As the transition progresses and the MSP P-ITR and PITR-RD >> ecosystem gets more ubiquitous, LISP+BGP should become less >> attractive, slowing down the increase of the number of routes in the >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 19] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> DFZ. >> >> >> 6. Step-by-Step Example BGP to LISP Migration Procedure >> >> 6.1. Customer Pre-Install and Pre-Turn-up Checklist >> >> 1. Determine how many current physical service provider connections >> the customer has and their existing bandwidth and traffic >> engineering requirements. >> >> This information will determine the number of routing locators, >> and the priorities and weights that should be configured on the >> xTRs. >> >> 2. Make sure customer router has LISP capabilities. >> >> * Obtain output of 'show version' from the CE router. >> > too Cisco ;-) > uname -a is another way :-D Agreed :) >> This information can be used to determine if the platform is >> appropriate to support LISP, in order to determine if a >> software and/or hardware upgrade is required. >> >> * Have customer upgrade (if necessary, software and/or hardware) >> to be LISP capable. >> >> 3. Obtain current running configuration of CE router. A suggested >> LISP router configuration example can be customized to the >> customer's existing environment. >> >> 4. Verify MTU Handling >> >> * Request increase in MTU to (1556) > > why parenthesis? Typo, will fix. > >> on service provider >> connections. Prior to MTU change verify that 1500 byte packet >> from P-xTR to RLOC with do not fragment (DF-bit) bit set. >> >> * Ensure they are not filtering ICMP unreachable or time- >> exceeded on their firewall or router. >> >> LISP, like any tunneling protocol, will increase the size of >> packets when the LISP header is appended. If increasing the MTU >> of the access links is not possible, care must be taken that ICMP >> is not being filtered in order to allow for Path MTU Discovery to >> take place. >> >> 5. Validate member prefix allocation. >> >> This step is to check if the prefix used by the customer is a >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 20] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> direct (Provider Independent), or if it is a prefix assigned by a >> physical service provider (Provider Allocated). > > I always thought PA meant "Provider Aggregatable". Will change, since according to a quick Google search "Provider Aggregatable" address space is more common, but we've seen "Provider Allocated" used quite often as well. >> If the prefixes >> are assigned by other service provivers then a Letter of >> Agreement is required to announce prefixes through the Proxy >> Service Provider. >> >> 6. Verify the member RLOCs and their reachability. >> >> This step ensures that the RLOCs configured on the CE router are >> in fact reachable and working. >> >> 7. Prepare for cut-over. >> >> * If possible, have a host outside of all security and filtering >> policies connected to the console port of the edge router or >> switch. >> >> * Make sure customer has access to the router in order to >> configure it. >> >> 6.2. Customer Activating LISP Service >> >> 1. Customer configures LISP on CE router(s) from service provider >> recommended configuration. >> >> The LISP configuration consists of the EID prefix, the locators, >> and the weights and priorities of the mapping between the two >> values. In addition, the xTR must be configured with Map- >> Resolver(s), Map-Server(s) and the shared key for registering to >> Map-Server(s). If required, Proxy-ETR(s) may be configured as >> well. >> >> In addition to the LISP configuration, the following: >> >> * Ensure default route(s) to next-hop external neighbors are >> included and RLOCs are present in configuration. >> >> * If two or more routers are used, ensure all RLOCs are included >> in the LISP configuration on all routers. >> >> * It will be necessary to redistribute default route via IGP >> between the external routers. >> >> 2. When transition is ready perform a soft shutdown on existing eBGP >> peer session(s) >> >> * From CE router, use LIG to ensure registration is successful. >> >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 21] >> >> Internet-Draft LISP Deployment October 2012 >> >> >> * To verify LISP connectivity, ping LISP connected sites. See >> http://www.lisp4.net/ and/or http://www.lisp6.net/ for >> potential candidates. >> >> * To verify connectivity to non-LISP sites, try accessing > a landmark (e.g., a >> major >> Internet sites via a web browser. > ). I had some input on this from Paul Vinciguerra as well, will have to expand a bit on this. >> 6.3. Cut-Over Provider Preparation and Changes >> >> 1. Verify site configuration and then active registration on Map- >> Server(s) >> >> * Authentication key >> >> * EID prefix >> >> 2. Add EID space to map-cache on proxies >> >> 3. Add networks to BGP advertisement on proxies >> >> * Modify route-maps/policies on P-xTRs >> >> * Modify route policies on core routers (if non-connected >> member) >> >> * Modify ingress policers on core routers >> >> * Ensure route announcement in looking glass servers, RouteViews >> >> 4. Perform traffic verification test >> >> * Ensure MTU handling is as expected (PMTUD working) >> >> * Ensure proxy-ITR map-cache population >> >> * Ensure access from traceroute/ping servers around Internet >> >> * Use a looking glass, to check for external visibility of >> registration via several Map-Resolvers (e.g., >> http://lispmon.net/). >> >> >> 7. Security Considerations >> >> Security implications of LISP deployments are to be discussed in >> separate documents. [I-D.saucez-lisp-security] > draft-ietf-lisp-threats-03 Thanks, will fix. >> gives an overview of >> LISP threat models, while securing mapping lookups is discussed in >> [I-D.ietf-lisp-sec]. >> >> >> >> Jakab, et al. Expires April 23, 2013 [Page 22] >> >> Internet-Draft LISP Deployment October 2012 >> > [snip] > > Damien Saucez Thanks again for the great review Damien! -Lori From ljakab@ac.upc.edu Mon Jan 21 09:44:39 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8FA621F86AA for ; Mon, 21 Jan 2013 09:44:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.399 X-Spam-Level: X-Spam-Status: No, score=-3.399 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_42=0.6, J_CHICKENPOX_43=0.6] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KnTcXkq4gAXN for ; Mon, 21 Jan 2013 09:44:36 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id 6ABBE21F8681 for ; Mon, 21 Jan 2013 09:44:34 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r0LHc6rZ005388; Mon, 21 Jan 2013 18:38:06 +0100 Received: from [192.168.1.6] (unknown [89.123.124.214]) by gw.ac.upc.edu (Postfix) with ESMTP id 1C0F66B01C4; Mon, 21 Jan 2013 18:38:04 +0100 (CET) Message-ID: <50FD7CF2.6070801@ac.upc.edu> Date: Mon, 21 Jan 2013 19:37:54 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: Damien Saucez References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> <50FD0D72.7010502@ac.upc.edu> <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> In-Reply-To: <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Cc: "lisp-interest\(mailer list\)" , "lisp@ietf.org" , LISP Beta Subject: Re: [lisp] WG Last Call for draft-ietf-lisp-deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 17:44:39 -0000 On 01/21/13 19:06, Damien Saucez wrote: > comments inline > > On 21 Jan 2013, at 10:42, Lori Jakab wrote: > >> Hi Damien, >> >> Many thanks for the review. See responses inline: >> >> On 01/15/13 00:15, Damien Saucez wrote: >>> Hello, >>> >>> Comments inline >> [...] >> >>>> LISP site: A single host or a set of network elements in an edge >>>> network under the administrative control of a single organization, >>>> delimited from other networks by LISP Tunnel Router(s). >>>> >>>> Since LISP is a protocol which can be used for different purposes, it >>>> is important to identify possible deployment scenarios and the >>>> additional requirements they may impose on the protocol specification >>>> and other protocols. Additionally, this document is intended as a >>>> guide for the operational community for LISP deployments in their >>>> networks. It is expected to evolve as LISP deployment progresses, >>>> and the described scenarios are better understood or new scenarios >>>> are discovered. >>>> >>> maybe describe rapidly what an network element is. >> Not sure it is really necessary, but how about something like: >> >> Network element: active or passive device that is used for >> transporting packet switched data. > ok >> >>>> Each subsection considers an element type, discussing the impact of >>>> deployment scenarios on the protocol specification. For definition >>>> of terms, please refer to the appropriate documents (as cited in the >>>> respective sections). >>>> 2. Tunnel Routers >>>> >>>> LISP is a map-and-encap protocol, with the main goal of improving >>>> global routing scalability. To achieve its goal, it introduces >>>> several new network elements, each performing specific functions >>>> necessary to separate the edge from the core. >>> wouldn't this clearer in Sec. 1? It is important for the general >>> understanding. >> Agree, will move. >> >> [...] >> >>>> From the LISP site perspective the main advantage of this type of >>>> deployment (compared to the one described in the next section) is >>>> having direct control over its ingress traffic engineering. This >>>> makes it is >>> remove is? >> Thanks for catching this. >> >> [...] >> >>>> Another thing to consider when placing tunnel routers are MTU issues. >>>> Since encapsulating packets increases overhead, the MTU of the end- >>>> to-end path may decrease, when encapsulated packets need to travel >>>> over segments having close to minimum MTU. Some transit networks are >>>> known to provide larger MTU than the typical value of 1500 bytes of >>>> popular access technologies used at end hosts (e.g., IEEE 802.3 and >>>> 802.11). However, placing the LISP router connecting to such a >>>> network at the customer edge could possibly bring up MTU issues, >>>> depending on the link type to the provider as opposed to the >>>> following scenario. >>> counter measures for that (e.g., any special setup that can be done >>> to minimise the risk >>> a client is not working properly because of MTU) >> That could be a lenghty discussion. LISP sites should check with their >> providers and make sure they offer links with the required MTU. They >> should also be able to check for themselves. > is there any IETF document that could be pointed out for that? RFC4459 could be a good candidate. >>>> 2.2. Provider Edge >>>> >>>> The other location at the core-edge boundary for deploying LISP >>>> routers is at the Internet service provider edge. The main incentive >>>> for this case is that the customer does not have to upgrade the CE >>>> router(s), or change the configuration of any equipment. >>>> Encapsulation/decapsulation happens in the provider's network, which >>>> may be able to serve several customers with a single device. For >>>> large ISPs with many residential/business customers asking for LISP >>>> this can lead to important savings, since there is no need to upgrade >>>> the software (or hardware, if it's the case) at each client's >>>> location. Instead, they can upgrade the software (or hardware) on a >>>> few PE routers serving the customers. This scenario is depicted in >>>> Figure 2. >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 5] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> +----------+ +------------------+ >>>> | ISP1 | | ISP2 | >>>> | | | | >>>> | +----+ | | +----+ +----+ | >>>> +--|xTR1|--+ +--|xTR2|--|xTR3|--+ >>>> +----+ +----+ +----+ >>>> | | | >>>> | | | >>>> +--<[LISP site]>---+-------+ >>>> >>>> Figure 2: xTR at the PE >>>> >>>> While this approach can make transition easy for customers and may be >>>> cheaper for providers, the LISP site looses one of the main benefits >>>> of LISP: ingress traffic engineering. Since the provider controls >>>> the ETRs, additional complexity would be needed to allow customers to >>>> modify their mapping entries. >>> or the client can have some form of access to the configuration (a bit >>> like tagging route with >>> special communities in BGP to tell the ISP to which of its operator >>> not advertise the route) >> Yes, that's what the "additional complexity" above refers to: you need >> more stuff to make it work. >> >>>> The problem is aggravated when the LISP site is multihomed. Consider >>>> the scenario in Figure 2: whenever a change to TE policies is >>>> required, the customer contacts both ISP1 and ISP2 to make the >>>> necessary changes on the routers (if they provide this possibility). >>> ok, cf supra >>>> It is however unlikely, that both ISPs will apply changes >>>> simultaneously, which may lead to inconsistent state for the mappings >>>> of the LISP site. Since the different upstream ISPs are usually >>>> competing business entities, the ETRs may even be configured to >>>> compete, either to attract all the traffic or to get no traffic. The >>>> former will happen if the customer pays per volume, the latter if the >>>> connectivity has a fixed price. A solution could be to have the >>>> mappings in the Map-Server(s), and have their operator give control >>>> over the entries to customer, much like in the Domain Name System at >>>> the time of this writing. >>>> >>>> Additionally, since xTR1, xTR2, and xTR3 are in different >>>> administrative domains, locator reachability information is unlikely >>>> to be exchanged among them, making it difficult to set Loc-Status- >>>> Bits correctly on encapsulated packets. >>>> >>> IMHO this document should suggest not to use LSB in the Internet case >>> deployment >> Only for the above reason, or due to security concerns? > For me, the main reason not to use LSB in Internet is the problem > of definition of reachability, what does mean a LSB full of 1? It is not > because the one that set the LSB can reach all the RLOCs that it will > be the case for ITR sending the packet based on what it sees from the > LSB. I see your point. Still, I would like more opinions on this before making recommendations. Will start a new thread. > >>>> Compared to the customer edge scenario, deploying LISP at the >>>> provider edge might have the advantage of diminishing potential MTU >>>> issues, because the tunnel router is closer to the core, where links >>>> typically have higher MTUs than edge network links. >>>> >>>> 2.3. Split ITR/ETR >>>> >>>> In a simple LISP deployment, xTRs are located at the border of the >>>> LISP site (see Section 2.1). In this scenario packets are routed >>>> inside the domain according to the EID. However, more complex >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 6] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> networks may want to route packets according to the destination RLOC. >>>> This would enable them to choose the best egress point. >>>> >>>> The LISP specification separates the ITR and ETR functionality and >>>> considers that both entities can be deployed in separated network >>>> equipment. ITRs can be deployed closer to the host (i.e., access >>>> routers). This way packets are encapsulated as soon as possible, and >>>> packets exit the network through the best egress point in terms of >>>> BGP policy. In turn, ETRs can be deployed at the border routers of >>>> the network, and packets are decapsulated as soon as possible. Once >>>> decapsulated, packets are routed based on destination EID, according >>>> to internal routing policy. >>>> >>>> In the following figure we can see an example. The Source (S) >>>> transmits packets using its EID and in this particular case packets >>>> are encapsulated at ITR_1. The encapsulated packets are routed >>>> inside the domain according to the destination RLOC, and can egress >>>> the network through the best point (i.e., closer to the RLOC's AS). >>>> On the other hand, inbound packets are received by ETR_1 which >>>> decapsulates them. Then packets are routed towards S according to >>>> the EID, again following the best path. >>>> >>>> +---------------------------------------+ >>>> | | >>>> | +-------+ +-------+ +-------+ >>>> | | ITR_1 |---------+ | ETR_1 |-RLOC_A--| ISP_A | >>>> | +-------+ | +-------+ +-------+ >>>> | +-+ | | | >>>> | |S| | IGP | | >>>> | +-+ | | | >>>> | +-------+ | +-------+ +-------+ >>>> | | ITR_2 |---------+ | ETR_2 |-RLOC_B--| ISP_B | >>>> | +-------+ +-------+ +-------+ >>>> | | >>>> +---------------------------------------+ >>>> >>>> Figure 3: Split ITR/ETR Scenario >>>> >>>> This scenario has a set of implications: >>>> >>>> o The site must carry at least partial BGP routes in order to choose >>>> the best egress point, increasing the complexity of the network. >>>> However, this is usually already the case for LISP sites that >>>> would benefit from this scenario. >>>> >>>> o If the site is multihomed to different ISPs and any of the >>>> upstream ISPs is doing uRPF filtering, this scenario may become >>>> impractical. ITRs need to determine the exit ETR, for setting the >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 7] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> correct source RLOC in the encapsulation header. This adds >>>> complexity and reliability concerns. >>>> >>>> o In LISP, ITRs set the reachability bits when encapsulating data >>>> packets. Hence, ITRs need a mechanism to be aware of the liveness >>>> of all ETRs serving their site. >>>> >>>> o MTU within the site network must be large enough to accommodate >>>> encapsulated packets. >>>> >>>> o In this scenario, each ITR is serving fewer hosts than in the case >>>> when it is deployed at the border of the network. It has been >>>> shown that cache hit ratio grows logarithmically with the amount >>>> of users [cache]. Taking this into account, when ITRs are >>>> deployed closer to the host the effectiveness of the mapping cache >>>> may be lower (i.e., the miss ratio is higher). Another >>>> consequence of this is that the site may transmit a higher amount >>>> of Map-Requests, increasing the load on the distributed mapping >>>> database. >>>> >>> one possible solution is to aggregate Map-Requests with a hierarchy >>> (à-la DDT). >> You mean having site-local caching Map-Resolvers? > yes, or regional ok. >>>> 2.4. Inter-Service Provider Traffic Engineering >>>> >>>> With LISP, two LISP sites can route packets among them and control >>>> their ingress TE policies. Typically, LISP is seen as applicable to >>>> stub networks, however the LISP protocol can also be applied to >>>> transit networks recursively. >>>> >>>> Consider the scenario depicted in Figure 4. Packets originating from >>>> the LISP site Stub1, client of ISP_A, with destination Stub4, client >>>> of ISP_B, are LISP encapsulated at their entry point into the ISP_A's >>>> network. The external IP header now has as the source RLOC an IP >>>> from ISP_A's address space and destination RLOC from ISP_B's address >>>> space. One or more ASes separate ISP_A from ISP_B. With a single >>>> level of LISP encapsulation, Stub4 has control over its ingress >>>> traffic. However, at the time of this writing, ISP_B has only BGP >>>> tools (such as prefix deaggregation) to control on which of his own >>>> upstream or peering links should packets enter. This is either not >>>> feasible (if fine-grained per-customer control is required, the very >>>> specific prefixes may not be propagated) or increases DFZ table size. >>>> >>>> _.--. >>>> Stub1 ... +-------+ ,-'' `--. +-------+ ... Stub3 >>>> \ | R_A1|----,' `. ---|R_B1 | / >>>> --| R_A2|---( Transit ) | |-- >>>> Stub2 .../ | R_A3|-----. ,' ---|R_B2 | \... Stub4 >>>> +-------+ `--. _.-' +-------+ >>>> ... ISP_A `--'' ISP_B ... >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 8] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> Figure 4: Inter-Service provider TE scenario >>>> >>>> A solution for this is to apply LISP recursively. ISP_A and ISP_B >>>> may reach a bilateral agreement to deploy their own private mapping >>>> system. ISP_A then encapsulates packets destined for the prefixes of >>>> ISP_B, which are listed in the shared mapping system. Note that in >>>> this case the packet is double-encapsulated (using R_A1, R_A2 or R_A3 >>>> as source and R_B1 or R_B2 as destination in the example above). >>>> ISP_B's ETR removes the outer, second layer of LISP encapsulation >>>> from the incoming packet, and routes it towards the original RLOC, >>>> the ETR of Stub4, which does the final decapsulation. >>>> >>> if there is bilateral agreement, could we imagine single encapsulation >>> and use instance-id >>> to differentiate with the "source" able to install mappings at the >>> second tier? >> I think this would remove the elegance of the LISP solution by going >> back to MPLS style LSPs. But it may be a solution preferred by some, >> choice is good, so I'll mention it ;) >> > If LISP can be used to implement MPLS, it is a strength of LISP :-D > >>>> If ISP_A and ISP_B agree to share a private distributed mapping >>>> database, both can control their ingress TE without the need of >>>> deaggregating prefixes. In this scenario the private database >>>> contains RLOC-to-RLOC bindings. The convergence time on the TE >>>> policies updates is expected to be fast, since ISPs only have to >>>> update/query a mapping to/from the database. >>> but convergence is O(TTL) or then specify to use SMR or Versioning >> Maybe we should spell that out it the document, but we expected the >> usual LISP mechanism for keeping mappings up to date (SMR/Versioning) >> will be used. > right, but it is good to keep in mind that it might not be possible to get > sub-second or sub-50ms resiliency with LISP. At least with the current > specifications. However, we are currently working on it and I am > convinced that we will be able to react as fast just with good deployment > and configuration. > >>>> This deployment scenario includes two important caveats. First, it >>>> is intended to be deployed between only two ISPs (ISP_A and ISP_B in >>>> Figure 4). If more than two ISPs use this approach, then the xTRs >>>> deployed at the participating ISPs must either query multiple mapping >>>> systems, or the ISPs must agree on a common shared mapping system. >>>> Second, the scenario is only recommended for ISPs providing >>>> connectivity to LISP sites, such that source RLOCs of packets to be >>>> reencapsulated belong to said ISP. Otherwise the participating ISPs >>>> must register prefixes they do not own in the above mentioned private >>>> mapping system. Failure to follow these recommendations may lead to >>>> operational and security issues when deploying this scenario. >>>> >>>> Besides these recommendations, the main disadvantages of this >>>> deployment case are: >>>> >>>> o Extra LISP header is needed. This increases the packet size and >>>> requires that the MTU between both ISPs accommodates double- >>>> encapsulated packets. >>>> >>>> o The ISP ITR must encapsulate packets and therefore must know the >>>> RLOC-to-RLOC binding. These bindings are stored in a mapping >>>> database and may be cached in the ITR's mapping cache. Cache >>>> misses lead to an additional lookup latency, unless a push based >>>> mapping system is used for the private mapping system. >>>> >>>> o The operational overhead of maintaining the shared mapping >>>> database. >>>> >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 9] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> o If an IPv6 address block is reserved for EID use, as specified in >>>> [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first >>>> level) can avoid LISP processing altogether for non-LISP >>>> destinations. The ISP tunnel routers however will not be able to >>>> take advantage of this optimization, all RLOC-to-RLOC mappings >>>> need a lookup in the private database (or map-cache, once results >>>> are cached). >>>> >>>> 2.5. Tunnel Routers Behind NAT >>>> >>>> NAT in this section refers to IPv4 network address and port >>>> translation. >>>> >>>> 2.5.1. ITR >>>> >>>> Packets encapsulated by an ITR are just UDP packets from a NAT >>>> device's point of view, and they are handled like any UDP packet, >>>> there are no additional requirements for LISP data packets. >>>> >>>> Map-Requests sent by an ITR, which create the state in the NAT table, >>>> have a different 5-tuple in the IP header than the Map-Reply >>>> generated by the authoritative ETR. Since the source address of this >>>> packet is different from the destination address of the request >>>> packet, no state will be matched in the NAT table and the packet will >>>> be dropped. To avoid this, the NAT device has to do the following: >>>> >>>> o Send all UDP packets with source port 4342, regardless of the >>>> destination port, to the RLOC of the ITR. The most simple way to >>>> achieve this is configuring 1:1 NAT mode from the external RLOC of >>>> the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer >>>> broadband routers). >>>> >>>> o Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in >>>> the payload. >>>> >>>> This setup supports a single ITR behind the NAT device. >>>> >>>> 2.5.2. ETR >>>> >>>> An ETR placed behind NAT is reachable from the outside by the >>>> Internet-facing locator of the NAT device. It needs to know this >>>> locator (and configure a loopback interface with it), so that it can >>>> use it in Map-Reply and Map-Register messages. Thus support for >>>> dynamic locators for the mapping database is needed in LISP >>>> equipment. >>>> >>>> Again, only one ETR behind the NAT device is supported. >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 10] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> An implication of the issues described above is that LISP sites with >>>> xTRs can not be behind carrier based NATs, since two different sites >>>> would collide on the port forwarding. >>>> >>>> 2.6. Summary and Feature Matrix >>>> >>>> Feature CE PE Split Rec. >>>> -------------------------------------------------------- >>>> Control of ingress TE x - x x >>>> No modifications to existing >>>> int. network infrastructure x x - - >>>> Loc-Status-Bits sync x - x x >>>> MTU/PMTUD issues minimized - x - x >>>> >>> Does Rec. mean recursive? if so, make it explicit >> Yes, will do. >> >>>> 3. Map-Resolvers and Map-Servers >>>> >>>> 3.1. Map-Servers >>>> >>> s/Map-Server/Map Server/ga >> Thanks, will do. >> >>>> The Map-Server learns EID-to-RLOC mapping entries from an >>>> authoritative source and publishes them in the distributed mapping >>>> database. These entries are learned through authenticated Map- >>>> Register messages sent by authoritative ETRs. Also, upon reception >>>> of a Map-Request, the Map-Server verifies that the destination EID >>>> matches an EID-prefix for which it is authoritative for, and then re- >>>> encapsulates and forwards it to a matching ETR. Map-Server >>>> functionality is described in detail in [I-D.ietf-lisp-ms]. >>>> >>>> The Map-Server is provided by a Mapping Service Provider (MSP). A >>>> MSP can be any of the following: >>>> >>>> o EID registrar. Since the IPv4 address space is nearing >>>> exhaustion, IPv4 EIDs will come from already allocated Provider >>>> Independent (PI) space. The registrars in this case remain the >>>> current five Regional Internet Registries (RIRs). In the case of >>>> IPv6, the possibility of reserving a /16 block as EID space is >>>> currently under consideration [I-D.ietf-lisp-eid-block]. If >>>> granted by IANA, the community will have to determine the body >>>> responsible for allocations from this block, and the associated >>>> policies. Existing allocation policies apply to EIDs outside this >>>> block. >>>> >>>> o Third parties. Participating in the LISP mapping system is >>>> similar to participating in global routing or DNS: as long as >>>> there is at least another already participating entity willing to >>>> forward the newcomer's traffic, there is no barrier to entry. >>>> Still, just like routing and DNS, LISP mappings have the issue of >>>> trust, with efforts underway to make the published information >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 11] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> verifiable. When these mechanisms will be deployed in the LISP >>>> mapping system, the burden of providing and verifying trust should >>>> be kept away from MSPs, which will simply host the secured >>>> mappings. This will keep the low barrier of entry to become an >>>> MSP for third parties. >>>> >>>> In all cases, the MSP configures its Map-Server(s) to publish the >>>> prefixes of its clients in the distributed mapping database and start >>>> encapsulating and forwarding Map-Requests to the ETRs of the AS. >>>> These ETRs register their prefix(es) with the Map-Server(s) through >>>> periodic authenticated Map-Register messages. In this context, for >>>> some LISP end sites, there is a need for mechanisms to: >>>> >>> how periodic (suggestion of good timers)? >> The Map Server interface draft has some authoritative text on this, we I >> didn't discuss it here: >> >> Map-Register messages are sent periodically from an ETR to a Map >> Server with a suggested interval between messages of one minute. A >> Map Server should time-out and remove an ETR's registration if it has >> not received a valid Map-Register message within the past three >> minutes. When first contacting a Map Server after restart or changes >> to its EID-to-RLOC database mappings, an ETR may initially send Map- >> Register messages at an increased frequency, up to one every 20 >> seconds. This "quick registration" period is limited to five minutes >> in duration. >> >> Maybe add a pointer to the MS draft? > yes with a sentence like. "More details can be fond in []..." ok. > >> >> >>>> o Automatically distribute EID prefix(es) shared keys between the >>>> ETRs and the EID-registrar Map-Server. >>>> >>>> o Dynamically obtain the address of the Map-Server in the ETR of the >>>> AS. >>>> >>>> The Map-Server plays a key role in the reachability of the EID- >>>> prefixes it is serving. On the one hand it is publishing these >>>> prefixes into the distributed mapping database and on the other hand >>>> it is encapsulating and forwarding Map-Requests to the authoritative >>>> ETRs of these prefixes. ITRs encapsulating towards EIDs under the >>>> responsibility of a failed Map-Server will be unable to look up any >>>> of their covering prefixes. The only exception are the ITRs that >>>> already contain the mappings in their local cache. In this case ITRs >>>> can reach ETRs until the entry expires (typically 24 hours). >>> where does the "typically 24h" come from? >> Initial popular Beta network configurations. Should we remove the >> parenthesis? >> > the question was more general: why 24h has been chosen. I will let those that chose this TTL to chime in :P Would it be better to just remove the parentheses as it may not be true in the future? > > >>>> For >>>> this reason, redundant Map-Server deployments are desirable. A set >>>> of Map-Servers providing high-availability service to the same set of >>>> prefixes is called a redundancy group. ETRs are configured to send >>>> Map-Register messages to all Map-Servers in the redundancy group. To >>>> achieve fail-over (or load-balancing, if desired), >>>> known mapping >>>> system specific best practices should be used. >>>> >>> what is meant by this very sentence? >> If we were to use ALT, use BGP best practices, if we were to use DDT, >> which has a similar design to DDT > DNS :-D >> , use applicable DNS best practices. >> > ok > >>>> Additionally, if a Map-Server has no reachability for any ETR serving >>>> a given EID block, it should not originate that block into the >>>> mapping system. >>> why? >> It doesn't receive Map-Registers, so it doesn't have up to date >> information, and the registration will time out (based on an >> implementation specific timer). Returning forward-native may be the best >> choice here, because packets to the ETRs may still find their way >> through PITRs if it's only the MS that lost reachability and there is >> another MS in the redundancy group. > ok >>>> 3.2. Map-Resolvers >>>> >>> s/Map-Resolver/Map Resolver/ga >> Thanks, will do. >> >>>> A Map-Resolver a is a network infrastructure component which accepts >>>> LISP encapsulated Map-Requests, typically from an ITR, and finds the >>>> appropriate EID-to-RLOC mapping by either consulting its local cache >>>> or by consulting the distributed mapping database. Map-Resolver >>>> functionality is described in detail in [I-D.ietf-lisp-ms]. >>>> >>>> Anyone with access to the distributed mapping database can set up a >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 12] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> Map-Resolver and provide EID-to-RLOC mapping lookup service. >>>> Database access setup is mapping system specific. >>>> >>>> For performance reasons, it is recommended that LISP sites use Map- >>>> Resolvers that are topologically close to their ITRs. ISPs >>>> supporting LISP will provide this service to their customers, >>>> possibly restricting access to their user base. LISP sites not in >>>> this position can use open access Map-Resolvers, if available. >>>> However, regardless of the availability of open access resolvers, the >>>> MSP providing the Map-Server(s) for a LISP site should also make >>>> available Map-Resolver(s) for the use of that site. >>>> >>>> In medium to large-size ASes, ITRs must be configured with the RLOC >>>> of a Map-Resolver, operation which can be done manually. However, in >>>> Small Office Home Office (SOHO) scenarios a mechanism for >>>> autoconfiguration should be provided. >>>> >>>> One solution to avoid manual configuration in LISP sites of any size >>>> is the use of anycast RLOCs for Map-Resolvers similar to the DNS root >>>> server infrastructure. Since LISP uses UDP encapsulation, the use of >>>> anycast would not affect reliability. >>> maybe change the term reliability because anycast actually improves >>> reliability, isnt'it? >> You are right. Reliability here was used as a comparison to TCP over >> anycast, which can be unstable. How about "Since LISP control traffic >> is UDP based, using anycast would improve reliability." ? > ok >>>> LISP routers are then shipped >>>> with a preconfigured list of well know Map-Resolver RLOCs, which can >>>> be edited by the network administrator, if needed. >>>> >>>> The use of anycast also helps improving mapping lookup performance. >>>> Large MSPs can increase the number and geographical diversity of >>>> their Map-Resolver infrastructure, using a single anycasted RLOC. >>>> Once LISP deployment is advanced enough, very large content providers >>>> may also be interested running this kind of setup, to ensure minimal >>>> connection setup latency for those connecting to their network from >>>> LISP sites. >>>> >>>> While Map-Servers and Map-Resolvers implement different >>>> functionalities within the LISP mapping system, they can coexist on >>>> the same device. For example, MSPs offering both services, can >>>> deploy a single Map-Resolver/Map-Server in each PoP where they have a >>>> presence. >>>> >>>> >>>> 4. Proxy Tunnel Routers >>>> >>>> 4.1. P-ITR >>>> >>>> Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP >>>> transition mechanism, allowing non-LISP sites to reach LISP sites. >>>> They announce via BGP certain EID prefixes (aggregated, whenever >>>> possible) to attract traffic from non-LISP sites towards EIDs in the >>>> covered range. They do the mapping system lookup, and encapsulate >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 13] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> received packets towards the appropriate ETR. Note that for the >>>> reverse path LISP sites can reach non-LISP sites simply by not >>>> encapsulating traffic. See [I-D.ietf-lisp-interworking] for a >>>> detailed description of P-ITR functionality. >>>> >>>> The success of new protocols depends greatly on their ability to >>>> maintain backwards compatibility and inter-operate with the >>>> protocol(s) they intend to enhance or replace, and on the incentives >>>> to deploy the necessary new software or equipment. A LISP site needs >>>> an interworking mechanism to be reachable from non-LISP sites. A >>>> P-ITR can fulfill this role, enabling early adopters to see the >>>> benefits of LISP, similar to tunnel brokers helping the transition >>>> from IPv4 to IPv6. A site benefits from new LISP functionality >>>> (proportionally with existing global LISP deployment) when going >>>> LISP, so it has the incentives to deploy the necessary tunnel >>>> routers. In order to be reachable from non-LISP sites it has two >>>> options: keep announcing its prefix(es) with BGP, or have a P-ITR >>>> announce prefix(es) covering them. >>>> >>>> If the goal of reducing the DFZ routing table size is to be reached, >>>> the second option is preferred. Moreover, the second option allows >>>> LISP-based ingress traffic engineering from all sites. However, the >>>> placement of P-ITRs significantly influences performance and >>>> deployment incentives. Section 5 is dedicated to the migration to a >>>> LISP-enabled Internet, and includes deployment scenarios for P-ITRs. >>>> >>>> 4.2. P-ETR >>>> >>>> In contrast to P-ITRs, P-ETRs are not required for the correct >>>> functioning of all LISP sites. There are two cases, where they can >>>> be of great help: >>>> >>>> o LISP sites with unicast reverse path forwarding (uRPF) >>>> restrictions, and >>>> >>>> o Communication between sites using different address family RLOCs. >>>> >>>> In the first case, uRPF filtering is applied at their upstream PE >>>> router. When forwarding traffic to non-LISP sites, an ITR does not >>>> encapsulate packets, leaving the original IP headers intact. As a >>>> result, packets will have EIDs in their source address. Since we are >>>> discussing the transition period, we can assume that a prefix >>>> covering the EIDs belonging to the LISP site is advertised to the >>>> global routing tables by a P-ITR, and the PE router has a route >>>> towards it. However, the next hop will not be on the interface >>>> towards the CE router, so non-encapsulated packets will fail uRPF >>>> checks. >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 14] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> To avoid this filtering, the affected ITR encapsulates packets >>>> towards the locator of the P-ETR for non-LISP destinations. Now the >>>> source address of the packets, as seen by the PE router is the ITR's >>>> locator, which will not fail the uRPF check. The P-ETR then >>>> decapsulates and forwards the packets. >>>> >>>> The second use case is IPv4-to-IPv6 transition. Service providers >>>> using older access network hardware, which only supports IPv4 can >>>> still offer IPv6 to their clients, by providing a CPE device running >>>> LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP >>>> sites, with IPv6-only locators. Packets originating from the client >>>> LISP site for these destinations would be encapsulated towards the >>>> P-ETR's IPv4 locator. The P-ETR is in a native IPv6 network, >>>> decapsulating and forwarding packets. For non-LISP destination, the >>>> packet travels natively from the P-ETR. For LISP destinations with >>>> IPv6-only locators, the packet will go through a P-ITR, in order to >>>> reach its destination. >>>> >>>> For more details on P-ETRs see the [I-D.ietf-lisp-interworking] >>>> draft. >>>> >>>> P-ETRs can be deployed by ISPs wishing to offer value-added services >>>> to their customers. As is the case with P-ITRs, P-ETRs too may >>>> introduce path stretch. Because of this the ISP needs to consider >>>> the tradeoff of using several devices, close to the customers, to >>>> minimize it, or few devices, farther away from the customers, >>>> minimizing cost instead. >>>> >>>> Since the deployment incentives for P-ITRs and P-ETRs are different, >>>> it is likely they will be deployed in separate devices, except for >>>> the CDN case, which may deploy both in a single device. >>>> >>>> In all cases, the existence of a P-ETR involves another step in the >>>> configuration of a LISP router. CPE routers, which are typically >>>> configured by DHCP, stand to benefit most from P-ETRs. >>>> Autoconfiguration of the P-ETR locator could be achieved by a DHCP >>>> option, or adding a P-ETR field to either Map-Notifys or Map-Replies. >>>> >>>> As a security measure, access to P-ETRs should be limited to >>>> legitimate users by enforcing ACLs. >>>> >>>> >>>> 5. Migration to LISP >>>> >>>> This section discusses a deployment architecture to support the >>>> migration to a LISP-enabled Internet. The loosely defined terms of >>>> "early transition phase", "late transition phase", and "LISP Internet >>>> phase" refer to time periods when LISP sites are a minority, a >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 15] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> majority, or represent all edge networks respectively. >>>> >>>> 5.1. LISP+BGP >>>> >>>> For sites wishing to go LISP with their PI prefix the least >>>> disruptive way is to upgrade their border routers to support LISP, >>>> register the prefix into the LISP mapping system, but keep announcing >>>> it with BGP as well. This way LISP sites will reach them over LISP, >>>> while legacy sites will be unaffected by the change. The main >>>> disadvantage of this approach is that no decrease in the DFZ routing >>>> table size is achieved. Still, just increasing the number of LISP >>>> sites is an important gain, as an increasing LISP/non-LISP site ratio >>>> will slowly decrease the need for BGP-based traffic engineering that >>>> leads to prefix deaggregation. That, in turn, may lead to a decrease >>>> in the DFZ size in the late transition phase. >>> and potentially the churn (except maybe because of PITR) >> Thanks, will mention that. Even with PITRs, churn should be reduced, >> sice they are supposed to announce the aggregates. >> >>>> This scenario is not limited to sites that already have their >>>> prefixes announced with BGP. Newly allocated EID blocks could follow >>>> this strategy as well during the early LISP deployment phase, >>>> depending on the cost/benefit analysis of the individual networks. >>>> Since this leads to an increase in the DFZ size, the following >>>> architecture should be preferred for new allocations. >>>> >>>> 5.2. Mapping Service Provider (MSP) P-ITR Service >>>> >>>> In addition to publishing their clients' registered prefixes in the >>>> mapping system, MSPs with enough transit capacity can offer them >>>> P-ITR service as a separate service. This service is especially >>>> useful for new PI allocations, to sites without existing BGP >>>> infrastructure, that wish to avoid BGP altogether. The MSP announces >>>> the prefix into the DFZ, and the client benefits from ingress traffic >>>> engineering without prefix deaggregation. The downside of this >>>> scenario is adding path stretch. >>>> >>>> Routing all non-LISP ingress traffic through a third party which is >>>> not one of its ISPs is only feasible for sites with modest amounts of >>>> traffic (like those using the IPv6 tunnel broker services today), >>>> especially in the first stage of the transition to LISP, with a >>>> significant number of legacy sites. When the LISP/non-LISP site >>>> ratio becomes high enough, this approach can prove increasingly >>>> attractive. >>>> >>>> Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix >>>> deaggregation for traffic engineering purposes, resulting in slower >>>> routing table increase in the case of new allocations and potential >>>> decrease for existing ones. Moreover, MSPs serving different clients >>>> with adjacent aggregable prefixes may lead to additional decrease, >>>> but quantifying this decrease is subject to future research study. >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 16] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> 5.3. Proxy-ITR Route Distribution (PITR-RD) >>>> >>>> Instead of a LISP site, or the MSP, announcing their EIDs with BGP to >>>> the DFZ, this function can be outsourced to a third party, a P-ITR >>>> Service Provider (PSP). This will result in a decrease of the >>>> operational complexity both at the site and at the MSP. >>>> >>>> The PSP manages a set of distributed P-ITR(s) that will advertise the >>>> corresponding EID prefixes through BGP to the DFZ. These P-ITR(s) >>>> will then encapsulate the traffic they receive for those EIDs towards >>>> the RLOCs of the LISP site, ensuring their reachability from non-LISP >>>> sites. >>>> >>>> While it is possible for a PSP to manually configure each client's >>>> EID routes to be announced, this approach offers little flexibility >>>> and is not scalable. This section presents a scalable architecture >>>> that offers automatic distribution of EID routes to LISP sites and >>>> service providers. >>>> >>>> The architecture requires no modification to existing LISP network >>>> elements, but it introduces a new (conceptual) network element, the >>>> EID Route Server, defined as a router that either propagates routes >>>> learned from other EID Route Servers, or it originates EID Routes. >>>> The EID-Routes that it originates are those that it is authoritative >>>> for. It propagates these routes to Proxy-ITRs within the AS of the >>>> EID Route Server. It is worth to note that a BGP capable router can >>>> be also considered as an EID Route Server. >>>> >>>> Further, an EID-Route is defined as a prefix originated via the Route >>>> Server of the mapping service provider, which should be aggregated if >>>> the MSP has multiple customers inside a single netblock. >>> define netblock >> s/netblock/prefix/ >> > ok > >>>> This prefix >>>> is propagated to other P-ITRs both within the MSP and to other P-ITR >>>> operators it peers with. EID Route Servers are operated either by >>>> the LISP site, MSPs or PSPs, and they may be collocated with a Map- >>>> Server or P-ITR, but are a functionally discrete entity. They >>>> distribute EID-Routes, using BGP, to other domains, according to >>>> policies set by participants. >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 17] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> MSP (AS64500) >>>> RS ---> P-ITR >>>> | / >>>> | _.--./ >>>> ,-'' /`--. >>>> LISP site ---,' | v `. >>>> ( | DFZ )----- Mapping system >>>> non-LISP site ----. | ^ ,' >>>> `--. / _.-' >>>> | `--'' >>>> v / >>>> P-ITR >>>> PSP (AS64501) >>>> >>>> Figure 5: The P-ITR Route Distribution architecture >>>> >>>> The architecture described above decouples EID origination from route >>>> propagation, with the following benefits: >>>> >>>> o Can accurately represent business relationships between P-ITR >>>> operators >>>> >>>> o More mapping system agnostic >>>> >>>> o Minor changes to P-ITR implementation, no changes to other >>>> components >>>> >>>> In the example in the figure we have a MSP providing services to the >>>> LISP site. The LISP site does not run BGP, and gets an EID >>>> allocation directly from a RIR, or from the MSP, who may be a LIR. >>>> Existing PI allocations can be migrated as well. The MSP ensures the >>>> presence of the prefix in the mapping system, and runs an EID Route >>>> Server to distribute it to P-ITR service providers. Since the LISP >>>> site does not run BGP, the prefix will be originated with the AS >>>> number of the MSP. >>>> >>>> In the simple case depicted in Figure 5 the EID-Route of LISP Site >>>> will be originated by the Route Server, and announced to the DFZ by >>>> the PSP's P-ITRs with AS path 64501 64500. From that point on, the >>>> usual BGP dynamics apply. This way, routes announced by P-ITR are >>>> still originated by the authoritative Route Server. Note that the >>>> peering relationships between MSP/PSPs and those in the underlying >>>> forwarding plane may not be congruent, making the AS path to a P-ITR >>>> shorter than it is in reality. >>>> >>>> The non-LISP site will select the best path towards the EID-prefix, >>>> according to its local BGP policies. Since AS-path length is usually >>>> an important metric for selecting paths, a careful placement of P-ITR >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 18] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> could significantly reduce path-stretch between LISP and non-LISP >>>> sites. >>>> >>>> The architecture allows for flexible policies between MSP/PSPs. >>>> Consider the EID Route Server networks as control plane overlays, >>>> facilitating the implementation of policies necessary to reflect the >>>> business relationships between participants. The results are then >>>> injected to the common underlying forwarding plane. For example, >>>> some MSP/PSPs may agree to exchange EID-Prefixes and only announce >>>> them to each of their forwarding plane customers. Global >>>> reachability of an EID-prefix depends on the MSP the LISP site buys >>>> service from, and is also subject to agreement between the mentioned >>>> parties. >>>> >>>> In terms of impact on the DFZ, this architecture results in a slower >>>> routing table increase for new allocations, since traffic engineering >>>> will be done at the LISP level. For existing allocations migrating >>>> to LISP, the DFZ may decrease since MSPs may be able to aggregate the >>>> prefixes announced. >>>> >>>> Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix >>>> deaggregation for traffic engineering purposes, resulting in slower >>>> routing table increase in the case of new allocations and potential >>>> decrease for existing ones. Moreover, MSPs serving different clients >>>> with adjacent aggregable prefixes may lead to additional decrease, >>>> but quantifying this decrease is subject to future research study. >>>> >>>> The flexibility and scalability of this architecture does not come >>>> without a cost however: A PSP operator has to establish either >>>> transit or peering relationships to improve their connectivity. >>> What's happening when sites have to change their EID? for example >>> after a network merge. >>> >>>> 5.4. Migration Summary >>>> >>>> The following table presents the expected effects of the different >>>> transition scenarios during a certain phase on the DFZ routing table >>>> size: >>>> >>>> Phase | LISP+BGP | MSP P-ITR | PITR-RD >>>> -----------------+--------------+-----------------+---------------- >>>> Early transition | no change | slower increase | slower increase >>>> Late transition | may decrease | slower increase | slower increase >>>> LISP Internet | considerable decrease >>>> >>> The "considerable decrease" depends on where LISP is deployed, if it >>> is very close to the >>> hosts, maybe it would not be so considerable. >> We assumed deployment on leaf AS border routers. > maybe make it explicit here It was stated in Section 2.1, you think we should repeat it here? > >>>> It is expected that PITR-RD will co-exist with LISP+BGP during the >>>> migration, with the latter being more popular in the early transition >>>> phase. As the transition progresses and the MSP P-ITR and PITR-RD >>>> ecosystem gets more ubiquitous, LISP+BGP should become less >>>> attractive, slowing down the increase of the number of routes in the >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 19] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> DFZ. >>>> >>>> >>>> 6. Step-by-Step Example BGP to LISP Migration Procedure >>>> >>>> 6.1. Customer Pre-Install and Pre-Turn-up Checklist >>>> >>>> 1. Determine how many current physical service provider connections >>>> the customer has and their existing bandwidth and traffic >>>> engineering requirements. >>>> >>>> This information will determine the number of routing locators, >>>> and the priorities and weights that should be configured on the >>>> xTRs. >>>> >>>> 2. Make sure customer router has LISP capabilities. >>>> >>>> * Obtain output of 'show version' from the CE router. >>>> >>> too Cisco ;-) >>> uname -a is another way :-D >> Agreed :) >> >>>> This information can be used to determine if the platform is >>>> appropriate to support LISP, in order to determine if a >>>> software and/or hardware upgrade is required. >>>> >>>> * Have customer upgrade (if necessary, software and/or hardware) >>>> to be LISP capable. >>>> >>>> 3. Obtain current running configuration of CE router. A suggested >>>> LISP router configuration example can be customized to the >>>> customer's existing environment. >>>> >>>> 4. Verify MTU Handling >>>> >>>> * Request increase in MTU to (1556) >>> why parenthesis? >> Typo, will fix. >> >>>> on service provider >>>> connections. Prior to MTU change verify that 1500 byte packet >>>> from P-xTR to RLOC with do not fragment (DF-bit) bit set. >>>> >>>> * Ensure they are not filtering ICMP unreachable or time- >>>> exceeded on their firewall or router. >>>> >>>> LISP, like any tunneling protocol, will increase the size of >>>> packets when the LISP header is appended. If increasing the MTU >>>> of the access links is not possible, care must be taken that ICMP >>>> is not being filtered in order to allow for Path MTU Discovery to >>>> take place. >>>> >>>> 5. Validate member prefix allocation. >>>> >>>> This step is to check if the prefix used by the customer is a >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 20] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> direct (Provider Independent), or if it is a prefix assigned by a >>>> physical service provider (Provider Allocated). >>> I always thought PA meant "Provider Aggregatable". >> Will change, since according to a quick Google search "Provider >> Aggregatable" address space is more common, but we've seen "Provider >> Allocated" used quite often as well. >> >>>> If the prefixes >>>> are assigned by other service provivers then a Letter of >>>> Agreement is required to announce prefixes through the Proxy >>>> Service Provider. >>>> >>>> 6. Verify the member RLOCs and their reachability. >>>> >>>> This step ensures that the RLOCs configured on the CE router are >>>> in fact reachable and working. >>>> >>>> 7. Prepare for cut-over. >>>> >>>> * If possible, have a host outside of all security and filtering >>>> policies connected to the console port of the edge router or >>>> switch. >>>> >>>> * Make sure customer has access to the router in order to >>>> configure it. >>>> >>>> 6.2. Customer Activating LISP Service >>>> >>>> 1. Customer configures LISP on CE router(s) from service provider >>>> recommended configuration. >>>> >>>> The LISP configuration consists of the EID prefix, the locators, >>>> and the weights and priorities of the mapping between the two >>>> values. In addition, the xTR must be configured with Map- >>>> Resolver(s), Map-Server(s) and the shared key for registering to >>>> Map-Server(s). If required, Proxy-ETR(s) may be configured as >>>> well. >>>> >>>> In addition to the LISP configuration, the following: >>>> >>>> * Ensure default route(s) to next-hop external neighbors are >>>> included and RLOCs are present in configuration. >>>> >>>> * If two or more routers are used, ensure all RLOCs are included >>>> in the LISP configuration on all routers. >>>> >>>> * It will be necessary to redistribute default route via IGP >>>> between the external routers. >>>> >>>> 2. When transition is ready perform a soft shutdown on existing eBGP >>>> peer session(s) >>>> >>>> * From CE router, use LIG to ensure registration is successful. >>>> >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 21] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>>> >>>> * To verify LISP connectivity, ping LISP connected sites. See >>>> http://www.lisp4.net/ and/or http://www.lisp6.net/ for >>>> potential candidates. >>>> >>>> * To verify connectivity to non-LISP sites, try accessing >>> a landmark (e.g., a >>>> major >>>> Internet sites via a web browser. >>> ). >> I had some input on this from Paul Vinciguerra as well, will have to >> expand a bit on this. >> >>>> 6.3. Cut-Over Provider Preparation and Changes >>>> >>>> 1. Verify site configuration and then active registration on Map- >>>> Server(s) >>>> >>>> * Authentication key >>>> >>>> * EID prefix >>>> >>>> 2. Add EID space to map-cache on proxies >>>> >>>> 3. Add networks to BGP advertisement on proxies >>>> >>>> * Modify route-maps/policies on P-xTRs >>>> >>>> * Modify route policies on core routers (if non-connected >>>> member) >>>> >>>> * Modify ingress policers on core routers >>>> >>>> * Ensure route announcement in looking glass servers, RouteViews >>>> >>>> 4. Perform traffic verification test >>>> >>>> * Ensure MTU handling is as expected (PMTUD working) >>>> >>>> * Ensure proxy-ITR map-cache population >>>> >>>> * Ensure access from traceroute/ping servers around Internet >>>> >>>> * Use a looking glass, to check for external visibility of >>>> registration via several Map-Resolvers (e.g., >>>> http://lispmon.net/). >>>> >>>> >>>> 7. Security Considerations >>>> >>>> Security implications of LISP deployments are to be discussed in >>>> separate documents. [I-D.saucez-lisp-security] >>> draft-ietf-lisp-threats-03 >> Thanks, will fix. >> >>>> gives an overview of >>>> LISP threat models, while securing mapping lookups is discussed in >>>> [I-D.ietf-lisp-sec]. >>>> >>>> >>>> >>>> Jakab, et al. Expires April 23, 2013 [Page 22] >>>> >>>> Internet-Draft LISP Deployment October 2012 >>>> >>> [snip] >>> >>> Damien Saucez >> Thanks again for the great review Damien! >> >> -Lori > Cheers, > > Damien Saucez -Lori > From ljakab@ac.upc.edu Mon Jan 21 09:46:54 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE79821F845A for ; Mon, 21 Jan 2013 09:46:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.999 X-Spam-Level: X-Spam-Status: No, score=-2.999 tagged_above=-999 required=5 tests=[AWL=-0.400, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1BmADqOQEVT1 for ; Mon, 21 Jan 2013 09:46:54 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.es [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id E224221F8444 for ; Mon, 21 Jan 2013 09:46:53 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r0LHkn2h005701; Mon, 21 Jan 2013 18:46:49 +0100 Received: from [192.168.1.6] (unknown [89.123.124.214]) by gw.ac.upc.edu (Postfix) with ESMTP id EF2A86B01C4; Mon, 21 Jan 2013 18:46:47 +0100 (CET) Message-ID: <50FD7EFE.20200@ac.upc.edu> Date: Mon, 21 Jan 2013 19:46:38 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: Damien Saucez References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> <50FD0D72.7010502@ac.upc.edu> <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> In-Reply-To: <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "lisp-interest\(mailer list\)" , "lisp@ietf.org" , LISP Beta Subject: [lisp] Should we use Locator-Status-Bits in Internet deployment? (was: Re: WG Last Call for draft-ietf-lisp-deployment) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 17:46:54 -0000 Hi folks, Damien is suggesting we recommend LSB not to be used for the Internet-wide deployment of LISP, see below. What do you think? Best regards, -Lori On 01/21/13 19:06, Damien Saucez wrote: > On 21 Jan 2013, at 10:42, Lori Jakab wrote: > >> On 01/15/13 00:15, Damien Saucez wrote: >> [...] >>> IMHO this document should suggest not to use LSB in the Internet case >>> deployment >> Only for the above reason, or due to security concerns? > For me, the main reason not to use LSB in Internet is the problem > of definition of reachability, what does mean a LSB full of 1? It is not > because the one that set the LSB can reach all the RLOCs that it will > be the case for ITR sending the packet based on what it sees from the > LSB. From jmh@joelhalpern.com Mon Jan 21 09:57:11 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 639D121F8620 for ; Mon, 21 Jan 2013 09:57:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.265 X-Spam-Level: X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6GtxdY54DA7B for ; Mon, 21 Jan 2013 09:57:11 -0800 (PST) Received: from morbo.mail.tigertech.net (morbo.mail.tigertech.net [67.131.251.54]) by ietfa.amsl.com (Postfix) with ESMTP id 0AC3121F85B3 for ; Mon, 21 Jan 2013 09:57:11 -0800 (PST) Received: from mailc2.tigertech.net (mailc2.tigertech.net [208.80.4.156]) by morbo.tigertech.net (Postfix) with ESMTP id 831BBA3662 for ; Mon, 21 Jan 2013 09:57:10 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mailc2.tigertech.net (Postfix) with ESMTP id 5C02F1BDCA39; Mon, 21 Jan 2013 09:57:10 -0800 (PST) X-Virus-Scanned: Debian amavisd-new at c2.tigertech.net Received: from [10.10.10.104] (pool-70-106-134-125.clppva.east.verizon.net [70.106.134.125]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mailc2.tigertech.net (Postfix) with ESMTPSA id 603081BDCA36; Mon, 21 Jan 2013 09:57:09 -0800 (PST) Message-ID: <50FD816F.9020204@joelhalpern.com> Date: Mon, 21 Jan 2013 12:57:03 -0500 From: "Joel M. Halpern" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Lori Jakab References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> <50FD0D72.7010502@ac.upc.edu> <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> <50FD7EFE.20200@ac.upc.edu> In-Reply-To: <50FD7EFE.20200@ac.upc.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "lisp-interest\(mailer list\)" , "lisp@ietf.org" , LISP Beta Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 17:57:11 -0000 Maybe I misunderstand, but I thought the point of the locator status bits was to tell me whether the individual ETRs were up, and had connectivity to the site that they are serving. If so, then the unpredictability of reachability across the net from the ITR(s) to the individual ETRs would seem to be irrelevant. Yours, Joel On 1/21/2013 12:46 PM, Lori Jakab wrote: > Hi folks, > > Damien is suggesting we recommend LSB not to be used for the > Internet-wide deployment of LISP, see below. > > What do you think? > > Best regards, > -Lori > > On 01/21/13 19:06, Damien Saucez wrote: >> On 21 Jan 2013, at 10:42, Lori Jakab wrote: >> >>> On 01/15/13 00:15, Damien Saucez wrote: >>> [...] >>>> IMHO this document should suggest not to use LSB in the Internet case >>>> deployment >>> Only for the above reason, or due to security concerns? >> For me, the main reason not to use LSB in Internet is the problem >> of definition of reachability, what does mean a LSB full of 1? It is not >> because the one that set the LSB can reach all the RLOCs that it will >> be the case for ITR sending the packet based on what it sees from the >> LSB. > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp > From jnc@mercury.lcs.mit.edu Mon Jan 21 13:31:40 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9F6F21F8C5B for ; Mon, 21 Jan 2013 13:31:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQjxrqIEu+V5 for ; Mon, 21 Jan 2013 13:31:40 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by ietfa.amsl.com (Postfix) with ESMTP id 3149921F8B88 for ; Mon, 21 Jan 2013 13:31:40 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id D612A18C112; Mon, 21 Jan 2013 16:31:38 -0500 (EST) To: lisp@ietf.org Message-Id: <20130121213138.D612A18C112@mercury.lcs.mit.edu> Date: Mon, 21 Jan 2013 16:31:38 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: lisp-interest@cisco.com, jnc@mercury.lcs.mit.edu, lisp-beta@external.cisco.com Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 21:31:41 -0000 > From: "Lori Jakab" > Damien is suggesting we recommend LSB not to be used for the > Internet-wide deployment of LISP, see below. > What do you think? I never liked the blasted things anyway, so I wouldn't lose any sleep if we did! (I don't remember off the top of my head why I didn't like them: I think it was a combination of the fixed number of bits, the fact that it might be difficult for ETR X to know the state of ETR Y, the fact that 'reachable from ITR A' [which you _really_ need to have anyway] is a subset of 'up', etc, etc. But we didn't desperately need the header bits, and the mechanism wasn't positively harmful, so I didn't bother to put up a big fight over it... :-) > From: "Joel M. Halpern" > I thought the point of the locator status bits was to tell me whether > the individual ETRs were up, and had connectivity to the site that they > are serving. Yes, that's my understanding too. > If so, then the unpredictability of reachability across the net from > the ITR(s) to the individual ETRs would seem to be irrelevant. See comment above... :-) Noel From farinacci@gmail.com Mon Jan 21 14:51:23 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 046C221F8795 for ; Mon, 21 Jan 2013 14:51:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TyBQqZB5WFmL for ; Mon, 21 Jan 2013 14:51:21 -0800 (PST) Received: from mail-pb0-f50.google.com (mail-pb0-f50.google.com [209.85.160.50]) by ietfa.amsl.com (Postfix) with ESMTP id 4084E21F86AE for ; Mon, 21 Jan 2013 14:51:21 -0800 (PST) Received: by mail-pb0-f50.google.com with SMTP id wz7so3579173pbc.9 for ; Mon, 21 Jan 2013 14:51:20 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=bBfXFqfIrnKRHJqNYny1IxaykmOpRxrucala/HgvcYY=; b=FFsd1bk6b2piTPPJjnDlv46f0uiPt2IZPOhFWZcJ3sH7jRKA6ZvcOab+FurHSpliWQ H3LyEESSCnVhUWJ8Hv/zCc5JiznZbscZ9aWSXbWi9WX7hW5cCdEO58/M+llMSt8NM7qP pgHRDtjtLao3/4MY68rB0kwZMF/SMtGTw8w/n3hiogpn5CibEenRZ1/1zqbpAIIRprWB 6CnYmVT/m3CHnQjkcGmPO9aHinABKBHR+m0qmxAF3Y1y2eM1MZ+UM4bb5+i0MOLmNu0Z DQ9zhW+Zn20U1cEsq4SBEZWipTeB9EE6VipKrCBKho6S4I/rvKrW6VzMB0r4ZqOOnJ8S A3Ng== X-Received: by 10.66.73.5 with SMTP id h5mr50868204pav.11.1358808680660; Mon, 21 Jan 2013 14:51:20 -0800 (PST) Received: from [192.168.1.10] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id bc1sm10044999pab.12.2013.01.21.14.51.18 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 21 Jan 2013 14:51:19 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <20130121213138.D612A18C112@mercury.lcs.mit.edu> Date: Mon, 21 Jan 2013 14:51:17 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> To: jnc@mercury.lcs.mit.edu (Noel Chiappa) X-Mailer: Apple Mail (2.1499) Cc: lisp-interest@cisco.com, lisp@ietf.org, lisp-beta@external.cisco.com Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Jan 2013 22:51:23 -0000 > (I don't remember off the top of my head why I didn't like them: I = think it > was a combination of the fixed number of bits, the fact that it might = be > difficult for ETR X to know the state of ETR Y, the fact that = 'reachable from > ITR A' [which you _really_ need to have anyway] is a subset of 'up', = etc, > etc. But we didn't desperately need the header bits, and the mechanism = wasn't > positively harmful, so I didn't bother to put up a big fight over = it... :-) Maybe because they could be spoofed? But they are good in control environments to take ETRs out of service = without having to update the mapping database. Dino From rbonica@juniper.net Mon Jan 21 18:11:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03E2321F85C3 for ; Mon, 21 Jan 2013 18:11:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.467 X-Spam-Level: X-Spam-Status: No, score=-103.467 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lJi1vCm-F8Gq for ; Mon, 21 Jan 2013 18:11:35 -0800 (PST) Received: from exprod7og109.obsmtp.com (exprod7og109.obsmtp.com [64.18.2.171]) by ietfa.amsl.com (Postfix) with ESMTP id 56C4121F8510 for ; Mon, 21 Jan 2013 18:11:35 -0800 (PST) Received: from P-EMHUB02-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob109.postini.com ([64.18.6.12]) with SMTP ID DSNKUP31V4Em4kH/hXz+OJ/oiwbdamO39h5H@postini.com; Mon, 21 Jan 2013 18:11:35 PST Received: from P-CLDFE02-HQ.jnpr.net (172.24.192.60) by P-EMHUB02-HQ.jnpr.net (172.24.192.36) with Microsoft SMTP Server (TLS) id 8.3.213.0; Mon, 21 Jan 2013 18:05:30 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.60) with Microsoft SMTP Server id 14.1.355.2; Mon, 21 Jan 2013 18:05:29 -0800 Received: from ch1outboundpool.messaging.microsoft.com (216.32.181.184) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 21 Jan 2013 18:13:30 -0800 Received: from mail134-ch1-R.bigfish.com (10.43.68.234) by CH1EHSOBE008.bigfish.com (10.43.70.58) with Microsoft SMTP Server id 14.1.225.23; Tue, 22 Jan 2013 02:05:28 +0000 Received: from mail134-ch1 (localhost [127.0.0.1]) by mail134-ch1-R.bigfish.com (Postfix) with ESMTP id 1A620A01EC for ; Tue, 22 Jan 2013 02:05:28 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT002.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: -23 X-BigFish: PS-23(zz9371I542I1432Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzz1033IL8275bh8275dhz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1155h) Received: from mail134-ch1 (localhost.localdomain [127.0.0.1]) by mail134-ch1 (MessageSwitch) id 1358820326224421_21098; Tue, 22 Jan 2013 02:05:26 +0000 (UTC) Received: from CH1EHSMHS033.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.253]) by mail134-ch1.bigfish.com (Postfix) with ESMTP id 29B6910004D; Tue, 22 Jan 2013 02:05:26 +0000 (UTC) Received: from BY2PRD0512HT002.namprd05.prod.outlook.com (157.56.238.5) by CH1EHSMHS033.bigfish.com (10.43.70.33) with Microsoft SMTP Server (TLS) id 14.1.225.23; Tue, 22 Jan 2013 02:05:26 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.193]) by BY2PRD0512HT002.namprd05.prod.outlook.com ([10.255.243.35]) with mapi id 14.16.0257.004; Tue, 22 Jan 2013 02:05:25 +0000 From: Ronald Bonica To: Dino Farinacci , Noel Chiappa Thread-Topic: [lisp] Should we use Locator-Status-Bits in Internet deployment? Thread-Index: AQHN+B6xH2WLoA+jRkOqeTVkDiHV1phUY2eAgAA1xNA= Date: Tue, 22 Jan 2013 02:05:24 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> In-Reply-To: <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%GMAIL.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%MERCURY.LCS.MIT.EDU$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%CISCO.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%EXTERNAL.CISCO.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Cc: "lisp-interest@cisco.com" , "lisp@ietf.org" , "lisp-beta@external.cisco.com" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 02:11:36 -0000 Dino, But isn't it troubling that the bits have one meaning in a controlled envir= onment and another in the great-wide Internet? Ron > -----Original Message----- > From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf Of > Dino Farinacci > Sent: Monday, January 21, 2013 5:51 PM > To: Noel Chiappa > Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- > beta@external.cisco.com > Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet > deployment? >=20 > > (I don't remember off the top of my head why I didn't like them: I > > think it was a combination of the fixed number of bits, the fact that > > it might be difficult for ETR X to know the state of ETR Y, the fact > > that 'reachable from ITR A' [which you _really_ need to have anyway] > > is a subset of 'up', etc, etc. But we didn't desperately need the > > header bits, and the mechanism wasn't positively harmful, so I didn't > > bother to put up a big fight over it... :-) >=20 > Maybe because they could be spoofed? >=20 > But they are good in control environments to take ETRs out of service > without having to update the mapping database. >=20 > Dino >=20 >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From farinacci@gmail.com Mon Jan 21 19:15:21 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 113BC11E80A5 for ; Mon, 21 Jan 2013 19:15:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.901 X-Spam-Level: X-Spam-Status: No, score=-2.901 tagged_above=-999 required=5 tests=[AWL=-0.698, BAYES_00=-2.599, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gxICED0qT7hv for ; Mon, 21 Jan 2013 19:15:20 -0800 (PST) Received: from mail-pb0-f47.google.com (mail-pb0-f47.google.com [209.85.160.47]) by ietfa.amsl.com (Postfix) with ESMTP id 7E98611E8097 for ; Mon, 21 Jan 2013 19:15:20 -0800 (PST) Received: by mail-pb0-f47.google.com with SMTP id wz17so3679774pbc.34 for ; Mon, 21 Jan 2013 19:15:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:references:mime-version:in-reply-to:content-type :content-transfer-encoding:message-id:cc:x-mailer:from:subject:date :to; bh=/COM8PVI212r/8y5/T8qRpb+3enWIgAmUIr4Hv/rE78=; b=luq3E110Ugv1lFySHuoE706n2pggaxBDvKVLYM49tj6finRNsy2nIRzF5daVITrtsy vyQQfwCbeSL+ReCn+SS9rqsh4rZ/ThvyTg6etPS/fK/YBoj6AaE5via9ed9pEzsFOlnP nSgGlnZf6CDBPUBHtUi1jDCYtlgMWswLtMYFWSxaw2bsvO68Oc9p6/636sPir/+1FWGt MfU3f0xwfFMiQUzBR/Di5a1W9ws9DvGtccaUDY3y3MZ3eodfrrva/itHl33qHxNEepKw 8EjZ0xH7+BiY/kw5N8cgjAQSnUsjmPYvfE09Izj5dYyQTxa7bKcvjfLL1yHwGQfk2hWI RRiA== X-Received: by 10.68.234.36 with SMTP id ub4mr35523149pbc.68.1358824516470; Mon, 21 Jan 2013 19:15:16 -0800 (PST) Received: from [192.168.1.11] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id k4sm7988518paz.26.2013.01.21.19.15.14 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 21 Jan 2013 19:15:15 -0800 (PST) References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> Mime-Version: 1.0 (1.0) In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Message-Id: <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> X-Mailer: iPhone Mail (10A551) From: Dino Farinacci Date: Mon, 21 Jan 2013 19:15:14 -0800 To: Ronald Bonica Cc: "lisp-interest@cisco.com" , Noel Chiappa , "lisp-beta@external.cisco.com" , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 03:15:21 -0000 They have the same meaning in all environment. It is a question when they sh= ould be verified. An LSB that changes in a public environment can cause a Ma= p-Request to be sent and a signed Map-Reply can verify the LSB in an authen= ticated matter.=20 Dino On Jan 21, 2013, at 6:05 PM, Ronald Bonica wrote: > Dino, >=20 > But isn't it troubling that the bits have one meaning in a controlled envi= ronment and another in the great-wide Internet? >=20 > Ron >=20 >=20 >> -----Original Message----- >> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf Of >> Dino Farinacci >> Sent: Monday, January 21, 2013 5:51 PM >> To: Noel Chiappa >> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- >> beta@external.cisco.com >> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >> deployment? >>=20 >>> (I don't remember off the top of my head why I didn't like them: I >>> think it was a combination of the fixed number of bits, the fact that >>> it might be difficult for ETR X to know the state of ETR Y, the fact >>> that 'reachable from ITR A' [which you _really_ need to have anyway] >>> is a subset of 'up', etc, etc. But we didn't desperately need the >>> header bits, and the mechanism wasn't positively harmful, so I didn't >>> bother to put up a big fight over it... :-) >>=20 >> Maybe because they could be spoofed? >>=20 >> But they are good in control environments to take ETRs out of service >> without having to update the mapping database. >>=20 >> Dino >>=20 >>=20 >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >=20 >=20 From ggx@gigix.net Tue Jan 22 01:15:15 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9169421F87E0 for ; Tue, 22 Jan 2013 01:15:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.248 X-Spam-Level: X-Spam-Status: No, score=-3.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uIFOQn0VwAly for ; Tue, 22 Jan 2013 01:15:14 -0800 (PST) Received: from mail-wg0-f52.google.com (mail-wg0-f52.google.com [74.125.82.52]) by ietfa.amsl.com (Postfix) with ESMTP id D5F6C21F85C6 for ; Tue, 22 Jan 2013 01:15:13 -0800 (PST) Received: by mail-wg0-f52.google.com with SMTP id 12so1977218wgh.7 for ; Tue, 22 Jan 2013 01:15:12 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:message-id:references:to:x-mailer:x-gm-message-state; bh=kinanLcbaYw+0PKMbEATVvWWCI5FM3jy9jOTKleap6I=; b=bcyrQiFkqOIUvIA/ykV6UF7JXid8bS7fXj84uoJG8qFB1InbSdJbo3vEQ7ZrVus8Z1 nqdNieVzCMjp5+AeZ0B2wl/GqnrPSVTOPqX0sks1jlkXNO+9NbUPuN/D+Xl1mK/wWv66 0rfY/rfb3gNav6hB3nvoQ9FzGrYfSrXXR4WqFH+42C7Rogfnk38VCWrcuL+9erwWKCoo lLyeQnXgz/lVxSzGkrxNxSon1o4WaP5zYsWJlZ186cg9l/BxuvbYjASrB5UvrRQrlrOJ pg9pnd459Mbb1fRZ1vS/9BR/Y/tsqC6dfLEgJO1HCto4xaRRb7gOJCO8+rWXI3CjJc4T lxCw== X-Received: by 10.180.24.9 with SMTP id q9mr19621008wif.14.1358846112653; Tue, 22 Jan 2013 01:15:12 -0800 (PST) Received: from dhcp164-04.enst.fr (dhcp164-04.enst.fr. [137.194.165.4]) by mx.google.com with ESMTPS id bd7sm22837401wib.8.2013.01.22.01.15.11 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 22 Jan 2013 01:15:11 -0800 (PST) Content-Type: multipart/alternative; boundary="Apple-Mail=_19394E60-DC0D-4436-9F2C-28BC74E55B88" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Luigi Iannone In-Reply-To: <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> Date: Tue, 22 Jan 2013 10:15:16 +0100 Message-Id: <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> To: Dino Farinacci X-Mailer: Apple Mail (2.1499) X-Gm-Message-State: ALoCoQkQBCwKQ81UEEqVRaoxLo8n0Wpzujs8VOdZ0VZ5cEop1QxzMhsTd9hj2CrlloymegNK0SEw Cc: "lisp-interest@cisco.com" , Noel Chiappa , "lisp-beta@external.cisco.com" , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 09:15:15 -0000 --Apple-Mail=_19394E60-DC0D-4436-9F2C-28BC74E55B88 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Hi All, the definition of LSB as of the to-be-soon-rfc lisp specification is: LISP Locator Status Bits (LSBs): When the L-bit is also set, the locator status bits field in the LISP header is set by an ITR to indicate to an ETR the up/down status of the Locators in the source site.=20 I think that this clears Damien's question since LSB has no = "reachability" meaning, rather it is a message from the site telling = "from my perspective ETR X is up and running". (BTW this may help debugging, since if the ETR is running but not = reachable from the outside this clearly shows that the problem is along = the path somewhere. Yeah=85 could be a long path=85 but it is still = useful information). The main concern is about security. Obviously LSB can be easily spoofed = in a public environment and this is documented in section 6.4.1 of the = draft-ietf-lisp-threats, which recommends: Locator Status Bits can be blindly trusted only in secure environments. In the general unsecured Internet environment, the safest practice for xTRs is to confirm the status change through the mapping system. So IMHO the thing to do is to simply put a reference to the lisp-threats = draft about the use of LSBs. ciao Luigi On 22 Jan. 2013, at 04:15 , Dino Farinacci wrote: > They have the same meaning in all environment. It is a question when = they should be verified. An LSB that changes in a public environment can = cause a Map-Request to be sent and a signed Map-Reply can verify the LSB = in an authenticated matter.=20 >=20 > Dino >=20 > On Jan 21, 2013, at 6:05 PM, Ronald Bonica = wrote: >=20 >> Dino, >>=20 >> But isn't it troubling that the bits have one meaning in a controlled = environment and another in the great-wide Internet? >>=20 >> Ron >>=20 >>=20 >>> -----Original Message----- >>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf = Of >>> Dino Farinacci >>> Sent: Monday, January 21, 2013 5:51 PM >>> To: Noel Chiappa >>> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- >>> beta@external.cisco.com >>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>> deployment? >>>=20 >>>> (I don't remember off the top of my head why I didn't like them: I >>>> think it was a combination of the fixed number of bits, the fact = that >>>> it might be difficult for ETR X to know the state of ETR Y, the = fact >>>> that 'reachable from ITR A' [which you _really_ need to have = anyway] >>>> is a subset of 'up', etc, etc. But we didn't desperately need the >>>> header bits, and the mechanism wasn't positively harmful, so I = didn't >>>> bother to put up a big fight over it... :-) >>>=20 >>> Maybe because they could be spoofed? >>>=20 >>> But they are good in control environments to take ETRs out of = service >>> without having to update the mapping database. >>>=20 >>> Dino >>>=20 >>>=20 >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>=20 >>=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail=_19394E60-DC0D-4436-9F2C-28BC74E55B88 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Hi = All,

the definition of LSB as of the to-be-soon-rfc = lisp specification is:

LISP Locator Status Bits (LSBs):  When the =
L-bit is also set, the
      locator status bits field in the LISP header is set by an ITR to
      indicate to an ETR the up/down status of the Locators in the
      source site.

I think that this = clears Damien's question since LSB has no "reachability" meaning, rather = it is a message from the site telling "from my perspective ETR X is up = and running".

(BTW this may help debugging, = since if the ETR is running but not reachable from the outside this = clearly shows that the problem is along the path somewhere. Yeah=85 = could be a long path=85 but it is still useful = information).

The main concern is about = security. Obviously LSB can be easily spoofed in a public environment = and this is documented in section 6.4.1 of the draft-ietf-lisp-threats, = which recommends:

   Locator Status Bits can be blindly =
trusted only in secure
   environments.  In the general unsecured Internet environment, the
   safest practice for xTRs is to confirm the status change
   through the mapping =
system.


So IMHO the thing = to do is to simply put a reference to the lisp-threats draft about the = use of = LSBs.

ciao

Luigi





On 22 Jan. 2013, at 04:15 , Dino Farinacci <farinacci@gmail.com> = wrote:

They have the same meaning in all environment. It is a = question when they should be verified. An LSB that changes in a public = environment can cause a Map-Request to be sent and a signed Map-Reply = can verify the LSB in  an authenticated matter. =

Dino

On Jan 21, 2013, at 6:05 PM, Ronald Bonica <rbonica@juniper.net> = wrote:

Dino,

But isn't it = troubling that the bits have one meaning in a controlled environment and = another in the great-wide Internet?

=             &n= bsp;           &nbs= p;            =      Ron


-----Original Message-----
From: lisp-bounces@ietf.org = [mailto:lisp-bounces@ietf.org] = On Behalf Of
Dino Farinacci
Sent: Monday, January 21, 2013 5:51 = PM
To: Noel Chiappa
Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp-
beta@external.cisco.com
Sub= ject: Re: [lisp] Should we use Locator-Status-Bits in = Internet
deployment?

(I don't = remember off the top of my head why I didn't like them: I
think it = was a combination of the fixed number of bits, the fact that
it might = be difficult for ETR X to know the state of ETR Y, the fact
that = 'reachable from ITR A' [which you _really_ need to have anyway]
is a = subset of 'up', etc, etc. But we didn't desperately need the
header = bits, and the mechanism wasn't positively harmful, so I didn't
bother = to put up a big fight over it... :-)

Maybe because = they could be spoofed?

But they are good in control environments = to take ETRs out of service
without having to update the mapping = database.

Dino


_________________________________________= ______
lisp mailing = list
lisp@ietf.org
https://www.ietf.org/mailman/listinfo/lisp


___________________________________________= ____
lisp mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp

= --Apple-Mail=_19394E60-DC0D-4436-9F2C-28BC74E55B88-- From lear@cisco.com Tue Jan 22 01:20:02 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5073521F8826 for ; Tue, 22 Jan 2013 01:20:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.598 X-Spam-Level: X-Spam-Status: No, score=-110.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VMZn0MH4v3uh for ; Tue, 22 Jan 2013 01:20:00 -0800 (PST) Received: from ams-iport-3.cisco.com (ams-iport-3.cisco.com [144.254.224.146]) by ietfa.amsl.com (Postfix) with ESMTP id D425721F8456 for ; Tue, 22 Jan 2013 01:19:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4556; q=dns/txt; s=iport; t=1358846400; x=1360056000; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to; bh=uw/INJhBa/d7Dkgx21feHnVFynqIMgwhbjbJ72MnOxs=; b=dnzYjd+FXJK7+n7MmiM0VA+aOylDwqMyQrPfMnbYHIfzTEYBeX8WyBIi cXAueadcYxTW3OOZOc4KvizWEHvp2/5EJLPmqqr9HAdfLkKKGhrV2/t1B dRhTw/ckqnhgKXaB6d0S2OBsCZQgG2hYhGDlwUvZf6pF38LIkMa6p7qTb M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgIFAM5Y/lCQ/khL/2dsb2JhbABEhkWFXLITFnOCHgEBAQQjVQEQCwQKCgkWCwICCQMCAQIBRQYNAQcBAYgVqhSCQI8wkCOBEwOWDJBJgnY X-IronPort-AV: E=Sophos;i="4.84,513,1355097600"; d="scan'208,217";a="11242021" Received: from ams-core-2.cisco.com ([144.254.72.75]) by ams-iport-3.cisco.com with ESMTP; 22 Jan 2013 09:19:58 +0000 Received: from dhcp-10-61-101-15.cisco.com (dhcp-10-61-101-15.cisco.com [10.61.101.15]) by ams-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id r0M9JueA010346 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 22 Jan 2013 09:19:57 GMT Message-ID: <50FE59BC.1060709@cisco.com> Date: Tue, 22 Jan 2013 10:19:56 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Luigi Iannone References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> In-Reply-To: <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> X-Enigmail-Version: 1.5 Content-Type: multipart/alternative; boundary="------------020404050000010003070300" X-Auto-Response-Suppress: DR, OOF, AutoReply Cc: "lisp-interest@cisco.com" , "lisp-beta@external.cisco.com" , Noel Chiappa , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 09:20:02 -0000 This is a multi-part message in MIME format. --------------020404050000010003070300 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit On 1/22/13 10:15 AM, Luigi Iannone wrote: > Hi All, > > the definition of LSB as of the to-be-soon-rfc lisp specification is: > > LISP Locator Status Bits (LSBs): When the L-bit is also set, the > locator status bits field in the LISP header is set by an ITR to > indicate to an ETR the up/down status of the Locators in the > source site. > > I think that this clears Damien's question since LSB has no > "reachability" meaning, rather it is a message from the site telling > "from my perspective ETR X is up and running". > > (BTW this may help debugging, since if the ETR is running but not > reachable from the outside this clearly shows that the problem is > along the path somewhere. Yeah… could be a long path… but it is still > useful information). > > The main concern is about security. Obviously LSB can be easily > spoofed in a public environment and this is documented in section > 6.4.1 of the draft-ietf-lisp-threats, which recommends: > > Locator Status Bits can be blindly trusted only in secure > environments. In the general unsecured Internet environment, the > safest practice for xTRs is to confirm the status change > through the mapping system. > > > So IMHO the thing to do is to simply put a reference to the > lisp-threats draft about the use of LSBs. > And actually I would recommend a small change to draft-ietf-lisp-threats, changing 'through the mapping system' to 'through other means'. Otherwise it is possible to introduce circular dependencies. --------------020404050000010003070300 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit
On 1/22/13 10:15 AM, Luigi Iannone wrote:
Hi All,

the definition of LSB as of the to-be-soon-rfc lisp specification is:

LISP Locator Status Bits (LSBs):  When the L-bit is also set, the
      locator status bits field in the LISP header is set by an ITR to
      indicate to an ETR the up/down status of the Locators in the
      source site.

I think that this clears Damien's question since LSB has no "reachability" meaning, rather it is a message from the site telling "from my perspective ETR X is up and running".

(BTW this may help debugging, since if the ETR is running but not reachable from the outside this clearly shows that the problem is along the path somewhere. Yeah… could be a long path… but it is still useful information).

The main concern is about security. Obviously LSB can be easily spoofed in a public environment and this is documented in section 6.4.1 of the draft-ietf-lisp-threats, which recommends:

   Locator Status Bits can be blindly trusted only in secure
   environments.  In the general unsecured Internet environment, the
   safest practice for xTRs is to confirm the status change
   through the mapping system.


So IMHO the thing to do is to simply put a reference to the lisp-threats draft about the use of LSBs.


And actually I would recommend a small change to draft-ietf-lisp-threats, changing 'through the mapping system' to 'through other means'.  Otherwise it is possible to introduce circular dependencies.
--------------020404050000010003070300-- From sander@steffann.nl Tue Jan 22 01:51:54 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9829121F85BC for ; Tue, 22 Jan 2013 01:51:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.504 X-Spam-Level: X-Spam-Status: No, score=-0.504 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_NL=0.55, HOST_EQ_NL=1.545] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vu+-BIiAk2BQ for ; Tue, 22 Jan 2013 01:51:54 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id AB69D21F8F09 for ; Tue, 22 Jan 2013 01:51:52 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id 5864B2032 for ; Tue, 22 Jan 2013 10:51:43 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r9YHy-d0r+uV for ; Tue, 22 Jan 2013 10:51:40 +0100 (CET) Received: from macpro.10ww.steffann.nl (macpro.10ww.steffann.nl [37.77.56.75]) by mail.sintact.nl (Postfix) with ESMTP id 5FC022027 for ; Tue, 22 Jan 2013 10:51:40 +0100 (CET) From: Sander Steffann Content-Type: multipart/mixed; boundary="Apple-Mail=_122D184C-40E9-4B89-8199-C278EA8F3CD1" Date: Tue, 22 Jan 2013 10:51:39 +0100 References: <8726E14E-F95B-434E-B645-D3D2559D2C3D@steffann.nl> To: "lisp@ietf.org list list" Message-Id: <1B5F7B98-AF2A-49F0-97CF-3B6FE87CC3E6@steffann.nl> Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [lisp] Understanding DDT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 09:51:54 -0000 --Apple-Mail=_122D184C-40E9-4B89-8199-C278EA8F3CD1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, I am trying to understand the DDT protocol and I built a DDT node = implementation in Python. I am currently doing very simple tests. = Currently I'm just sending back DELEGATION-HOLE replies for = 37.77.63.0/24 (some of my own address space). When playing with this = from a Cisco device I get the results I expect from the lisp-rig = command: #lisp-rig 37.77.63.4 to 194.33.96.96 Send Map-Request to DDT-node 194.33.96.96 ... node referral, rtt: 0 = ms EID-prefix: [0] 37.77.56.0/21, ttl: 1440 referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1::10, = 2001:9E0:810:1::10 Send Map-Request to DDT-node 83.247.10.218 ... node referral, rtt: 0 = ms EID-prefix: [0] 37.77.63.0/24, ttl: 1440 referrals: 94.142.242.210, 2A02:898:148::210 Send Map-Request to DDT-node 94.142.242.210 ... delegation hole, rtt: = 8 ms EID-prefix: [0] 37.77.63.0/24, ttl: 15 But lig fails: #lig 37.77.63.66 =20 ***Did not receive*** mapping information for EID 37.77.63.66 Displaying information already present in cache: 36.0.0.0/7, uptime: 00:10:58, expires: 00:03:54, via map-reply, = forward-native Encapsulating to proxy ETR When I do the same for a delegation-hole on a Cisco device I get: #lisp-rig 37.77.62.4 to 194.33.96.96 Send Map-Request to DDT-node 194.33.96.96 ... node referral, rtt: 0 = ms EID-prefix: [0] 37.77.56.0/21, ttl: 1440 referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1::10, = 2001:9E0:810:1::10 Send Map-Request to DDT-node 83.247.10.218 ... delegation hole, rtt: = 0 ms EID-prefix: [0] 37.77.62.0/24, ttl: 15 And a reply from lig: #lig 37.77.62.66 to 195.50.116.18 =20 Mapping information for EID 37.77.62.66 from 195.50.116.18 with RTT = 52 msecs 37.77.62.0/24, uptime: 00:00:00, expires: 00:14:52, via map-reply, = forward-native Encapsulating to proxy ETR I must be doing something wrong, but I can't find what it is... I = attached a tiny pcap file with the encapsulated map-requests and the = corresponding responses I sent out. I really would appreciate it if = someone could help me out! Thanks, Sander PS: my test implementation is attached to the DDT tree and running, so = feel free to experiment with it! PPS: Oh, and the code is available under a BSD license at = https://github.com/steffann/pylisp of course :-) --Apple-Mail=_122D184C-40E9-4B89-8199-C278EA8F3CD1 Content-Disposition: attachment; filename=dump1.pcap Content-Type: application/octet-stream; name="dump1.pcap" Content-Transfer-Encoding: base64 1MOyoQIABAAAAAAAAAAAAP//AAABAAAAvof6UOciDgB4AAAAeAAAAABQVoB5mVDFjSBriAgARQAA amVgAAD4EazwU/cK2l6O8tIQ9hD2AFZsy4QAAABFwABKZV4AACARcSVT9wraJU0/QhD2EPYANrB3 EIABATiTMAZ13oQ+AAAAAVP3CtoAAiABCeAIEAABAAAAAAAAABAAIAABJU0/Qr6H+lD/SQ4AUgAA AFIAAABQxY0ga4gAUFaAeZkIAEUAAEQAAEAAQBGKd16O8tJT9wraEPYQ9gAwsHNgAAABOJMwBnXe hD4AAAAPABiQAAAAQAMAAAIgAAoAAAAAAAElTT8Av4f6UM6BDgCMAAAAjAAAAABQVoB5mVDFjSBr iIbdYAAAAABWETkgAQngCBAAAQAAAAAAAAAQKgIImAFIAAAAAAAAAAACEBD2EPYAVrUJhAAAAEXA AEplYwAAIBFxIFP3CtolTT9CEPYQ9gA2sHcQgAEBOJMwBnXehD4AAAABU/cK2gACIAEJ4AgQAAEA AAAAAAAAEAAgAAElTT9Cv4f6UM6XDgBSAAAAUgAAAFDFjSBriABQVoB5mQgARQAARAAAQABAEYp3 Xo7y0lP3CtoQ9hD2ADCwc2AAAAE4kzAGdd6EPgAAAA8AGJAAAABAAwAAAiAACgAAAAAAASVNPwDB h/pQNUAOAHgAAAB4AAAAAFBWgHmZUMWNIGuICABFAABqZXkAAPgRrNdT9wraXo7y0hD2EPYAVmzL hAAAAEXAAEpldwAAIBFxDFP3CtolTT9CEPYQ9gA2sHcQgAEBOJMwBnXehD4AAAABU/cK2gACIAEJ 4AgQAAEAAAAAAAAAEAAgAAElTT9CwYf6UCRXDgBSAAAAUgAAAFDFjSBriABQVoB5mQgARQAARAAA QABAEYp3Xo7y0lP3CtoQ9hD2ADCwc2AAAAE4kzAGdd6EPgAAAA8AGJAAAABAAwAAAiAACgAAAAAA ASVNPwDFh/pQo8UNAIwAAACMAAAAAFBWgHmZUMWNIGuIht1gAAAAAFYROSABCeAIEAABAAAAAAAA ABAqAgiYAUgAAAAAAAAAAAIQEPYQ9gBWtQmEAAAARcAASmWCAAAgEXEBU/cK2iVNP0IQ9hD2ADaw dxCAAQE4kzAGdd6EPgAAAAFT9wraAAIgAQngCBAAAQAAAAAAAAAQACAAASVNP0LFh/pQ49wNAFIA AABSAAAAUMWNIGuIAFBWgHmZCABFAABEAABAAEARindejvLSU/cK2hD2EPYAMLBzYAAAATiTMAZ1 3oQ+AAAADwAYkAAAAEADAAACIAAKAAAAAAABJU0/AA== --Apple-Mail=_122D184C-40E9-4B89-8199-C278EA8F3CD1 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii --Apple-Mail=_122D184C-40E9-4B89-8199-C278EA8F3CD1-- From damien.saucez@gmail.com Tue Jan 22 02:22:18 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B7C621F8644 for ; Tue, 22 Jan 2013 02:22:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.248 X-Spam-Level: X-Spam-Status: No, score=-3.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m3H3Tuwcrn9q for ; Tue, 22 Jan 2013 02:22:17 -0800 (PST) Received: from mail-bk0-f44.google.com (mail-bk0-f44.google.com [209.85.214.44]) by ietfa.amsl.com (Postfix) with ESMTP id AA5D321F8901 for ; Tue, 22 Jan 2013 02:22:16 -0800 (PST) Received: by mail-bk0-f44.google.com with SMTP id jk7so807993bkc.3 for ; Tue, 22 Jan 2013 02:22:15 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:message-id:references:to:x-mailer; bh=ipGUk/xCb9dz/j9AfAQVnR1aOfI1wi1G07rNssSxT8c=; b=tV6Phrs7LbsM42ZvVnjKOOErRv7fkwXs1M2XimfUqt9eXsgOvX1KQ4c0mafZd+R3dY NsigKMFSBVqIAggwkiLBGZYawtn1MTKM3t3REqWbunKDAstX8LTTY7Rrrpwys+ipLWgz zxfu6Bl2SlEsxMyBtQimfN77pyESOQ972VcHgUV3PhrADZJFxTsX7SZvoegZ+W7K49Fg IYjBoJeguA1KpFqWS5u+ofG+yomIuDWtbbUBX3x6QrK8oqLR6yC4f8eQGkG0QUBuEVzN +rW3+QQekXwTWCx25gT3gqITejn6pCwh+eelICpEpg1JIYIU1CPgWQWEeHAhthMkTw66 Ffpg== X-Received: by 10.204.6.82 with SMTP id 18mr5502998bky.1.1358850135155; Tue, 22 Jan 2013 02:22:15 -0800 (PST) Received: from faucon.inria.fr (faucon.inria.fr. [138.96.201.73]) by mx.google.com with ESMTPS id m20sm10496149bkw.4.2013.01.22.02.22.13 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 22 Jan 2013 02:22:14 -0800 (PST) Content-Type: multipart/alternative; boundary="Apple-Mail=_BDED8206-B76B-477B-8A2A-3F019263F64A" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Damien Saucez In-Reply-To: <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> Date: Tue, 22 Jan 2013 11:22:13 +0100 Message-Id: References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> To: Luigi Iannone X-Mailer: Apple Mail (2.1499) Cc: "lisp-interest@cisco.com" , "lisp-beta@external.cisco.com" , Noel Chiappa , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 10:22:18 -0000 --Apple-Mail=_BDED8206-B76B-477B-8A2A-3F019263F64A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On 22 Jan 2013, at 10:15, Luigi Iannone wrote: > Hi All, >=20 > the definition of LSB as of the to-be-soon-rfc lisp specification is: >=20 > LISP Locator Status Bits (LSBs): When the L-bit is also set, the > locator status bits field in the LISP header is set by an ITR to > indicate to an ETR the up/down status of the Locators in the > source site.=20 >=20 > I think that this clears Damien's question since LSB has no = "reachability" meaning, rather it is a message from the site telling = "from my perspective ETR X is up and running". >=20 Yes, it is not a problem of reachability but a question of status. = However, how is the status defined but the router that sends the LSB? How does it know that = the locator is up or down? How can we make sure that the LSB will be the same, = whatever router is building it? Another question, how bad/good would it be for the traffic if two = routers give different LSBs? > (BTW this may help debugging, since if the ETR is running but not = reachable from the outside this clearly shows that the problem is along = the path somewhere. Yeah=85 could be a long path=85 but it is still = useful information). I agree, that in a controlled environment LSB can be very helpful to = debug the network. In the Internet where the topology is unknown I don't know = if it is a very relevant information, but it depends how the LSB is = constructed. >=20 > The main concern is about security. Obviously LSB can be easily = spoofed in a public environment and this is documented in section 6.4.1 = of the draft-ietf-lisp-threats, which recommends: >=20 > Locator Status Bits can be blindly trusted only in secure > environments. In the general unsecured Internet environment, the > safest practice for xTRs is to confirm the status change > through the mapping system. >=20 >=20 > So IMHO the thing to do is to simply put a reference to the = lisp-threats draft about the use of LSBs. >=20 If the LSB has to be verified, I would then prefer to use versioning. Damien Saucez > ciao >=20 > Luigi >=20 >=20 >=20 >=20 >=20 > On 22 Jan. 2013, at 04:15 , Dino Farinacci = wrote: >=20 >> They have the same meaning in all environment. It is a question when = they should be verified. An LSB that changes in a public environment can = cause a Map-Request to be sent and a signed Map-Reply can verify the LSB = in an authenticated matter.=20 >>=20 >> Dino >>=20 >> On Jan 21, 2013, at 6:05 PM, Ronald Bonica = wrote: >>=20 >>> Dino, >>>=20 >>> But isn't it troubling that the bits have one meaning in a = controlled environment and another in the great-wide Internet? >>>=20 >>> Ron >>>=20 >>>=20 >>>> -----Original Message----- >>>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On = Behalf Of >>>> Dino Farinacci >>>> Sent: Monday, January 21, 2013 5:51 PM >>>> To: Noel Chiappa >>>> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- >>>> beta@external.cisco.com >>>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>>> deployment? >>>>=20 >>>>> (I don't remember off the top of my head why I didn't like them: I >>>>> think it was a combination of the fixed number of bits, the fact = that >>>>> it might be difficult for ETR X to know the state of ETR Y, the = fact >>>>> that 'reachable from ITR A' [which you _really_ need to have = anyway] >>>>> is a subset of 'up', etc, etc. But we didn't desperately need the >>>>> header bits, and the mechanism wasn't positively harmful, so I = didn't >>>>> bother to put up a big fight over it... :-) >>>>=20 >>>> Maybe because they could be spoofed? >>>>=20 >>>> But they are good in control environments to take ETRs out of = service >>>> without having to update the mapping database. >>>>=20 >>>> Dino >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>>=20 >>>=20 >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp >=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp --Apple-Mail=_BDED8206-B76B-477B-8A2A-3F019263F64A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 ggx@gigix.net> wrote:
Hi = All,

the definition of LSB as of the to-be-soon-rfc = lisp specification is:

LISP Locator Status Bits (LSBs):  When the =
L-bit is also set, the
      locator status bits field in the LISP header is set by an ITR to
      indicate to an ETR the up/down status of the Locators in the
      source site.

I think that this = clears Damien's question since LSB has no "reachability" meaning, rather = it is a message from the site telling "from my perspective ETR X is up = and = running".


Yes, = it is not a problem of reachability but a question of status. However, = how is the
status defined but the router that sends the LSB? = How does it know that the locator
is up or down? How can we = make sure that the LSB will be the same, whatever router
is = building it?

Another question, how bad/good = would it be for the traffic if two routers give = different
LSBs?

(BTW this may help = debugging, since if the ETR is running but not reachable from the = outside this clearly shows that the problem is along the path somewhere. = Yeah=85 could be a long path=85 but it is still useful = information).

I agree, that = in a controlled environment LSB can be very helpful to = debug
the network. In the Internet where the topology is = unknown I don't know if
it is a very relevant information, but = it depends how the LSB is constructed.


The = main concern is about security. Obviously LSB can be easily spoofed in a = public environment and this is documented in section 6.4.1 of the = draft-ietf-lisp-threats, which recommends:

   Locator Status Bits =
can be blindly trusted only in secure
   environments.  In the general unsecured Internet environment, the
   safest practice for xTRs is to confirm the status change
   through the mapping =
system.


So IMHO the thing = to do is to simply put a reference to the lisp-threats draft about the = use of = LSBs.



If the LSB has to be verified, I would then prefer to use = versioning.

Damien = Saucez


farinacci@gmail.com> = wrote:

They have the same meaning in all environment. It is a = question when they should be verified. An LSB that changes in a public = environment can cause a Map-Request to be sent and a signed Map-Reply = can verify the LSB in  an authenticated matter. =

Dino

On Jan 21, 2013, at 6:05 PM, Ronald Bonica <rbonica@juniper.net> = wrote:

Dino,

But isn't it = troubling that the bits have one meaning in a controlled environment and = another in the great-wide Internet?

=             &n= bsp;           &nbs= p;            =      Ron


-----Original Message-----
From: lisp-bounces@ietf.org = [mailto:lisp-bounces@ietf.org] = On Behalf Of
Dino Farinacci
Sent: Monday, January 21, 2013 5:51 = PM
To: Noel Chiappa
Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp-
beta@external.cisco.com
Sub= ject: Re: [lisp] Should we use Locator-Status-Bits in = Internet
deployment?

(I don't = remember off the top of my head why I didn't like them: I
think it = was a combination of the fixed number of bits, the fact that
it might = be difficult for ETR X to know the state of ETR Y, the fact
that = 'reachable from ITR A' [which you _really_ need to have anyway]
is a = subset of 'up', etc, etc. But we didn't desperately need the
header = bits, and the mechanism wasn't positively harmful, so I didn't
bother = to put up a big fight over it... :-)

Maybe because = they could be spoofed?

But they are good in control environments = to take ETRs out of service
without having to update the mapping = database.

Dino


_________________________________________= ______
lisp mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp


_________________= ______________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/m= ailman/listinfo/lisp

___________= ____________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org/ma= ilman/listinfo/lisp

= --Apple-Mail=_BDED8206-B76B-477B-8A2A-3F019263F64A-- From darlewis@cisco.com Tue Jan 22 09:48:54 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D119721F89BA for ; Tue, 22 Jan 2013 09:48:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6bowOru+cA5q for ; Tue, 22 Jan 2013 09:48:53 -0800 (PST) Received: from mtv-iport-1.cisco.com (mtv-iport-1.cisco.com [173.36.130.12]) by ietfa.amsl.com (Postfix) with ESMTP id 4822221F8818 for ; Tue, 22 Jan 2013 09:48:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2117; q=dns/txt; s=iport; t=1358876933; x=1360086533; h=subject:mime-version:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=TUUgtQaa3zuv0phWgQGlki4aLLDZUd0JmDu39mi37Nc=; b=M76ImjNa6FlZoIuq4GJaD71NjM9fqYRctKVj+IAnF1LL1HRtUNeBBBWH ESBkSO84HwAJNbyqIOEXqPM2iEimtx+44kKgClH+6Iq6oYS8mjW6bg80n KrxL1wwn1U1I3TT7v6red3OqqXOWDC5V+BwcHu3qbOQaxkQZ4bRfhFmnj 4=; X-IronPort-AV: E=Sophos;i="4.84,515,1355097600"; d="scan'208";a="66331419" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-1.cisco.com with ESMTP; 22 Jan 2013 17:48:40 +0000 Received: from [10.19.246.89] (sjc-jcardine-8718.cisco.com [10.19.246.89]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r0MHmb3n032335; Tue, 22 Jan 2013 17:48:39 GMT Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=us-ascii From: Darrel Lewis In-Reply-To: <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> Date: Tue, 22 Jan 2013 09:48:36 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> To: Dino Farinacci X-Mailer: Apple Mail (2.1283) X-Auto-Response-Suppress: DR, OOF, AutoReply Cc: "lisp@ietf.org" , "lisp-interest@cisco.com" , "lisp-beta@external.cisco.com" , Noel Chiappa Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 17:48:54 -0000 And this verify behavior is exactly what our IOS implementation does. -Darrel On Jan 21, 2013, at 7:15 PM, Dino Farinacci wrote: > They have the same meaning in all environment. It is a question when = they should be verified. An LSB that changes in a public environment can = cause a Map-Request to be sent and a signed Map-Reply can verify the LSB = in an authenticated matter.=20 >=20 > Dino >=20 > On Jan 21, 2013, at 6:05 PM, Ronald Bonica = wrote: >=20 >> Dino, >>=20 >> But isn't it troubling that the bits have one meaning in a controlled = environment and another in the great-wide Internet? >>=20 >> Ron >>=20 >>=20 >>> -----Original Message----- >>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf = Of >>> Dino Farinacci >>> Sent: Monday, January 21, 2013 5:51 PM >>> To: Noel Chiappa >>> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- >>> beta@external.cisco.com >>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>> deployment? >>>=20 >>>> (I don't remember off the top of my head why I didn't like them: I >>>> think it was a combination of the fixed number of bits, the fact = that >>>> it might be difficult for ETR X to know the state of ETR Y, the = fact >>>> that 'reachable from ITR A' [which you _really_ need to have = anyway] >>>> is a subset of 'up', etc, etc. But we didn't desperately need the >>>> header bits, and the mechanism wasn't positively harmful, so I = didn't >>>> bother to put up a big fight over it... :-) >>>=20 >>> Maybe because they could be spoofed? >>>=20 >>> But they are good in control environments to take ETRs out of = service >>> without having to update the mapping database. >>>=20 >>> Dino >>>=20 >>>=20 >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >>=20 >>=20 > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From darlewis@cisco.com Tue Jan 22 09:50:19 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAF6221F8A4A for ; Tue, 22 Jan 2013 09:50:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2kfQCIu7gF4c for ; Tue, 22 Jan 2013 09:50:19 -0800 (PST) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id 63A1521F89BA for ; Tue, 22 Jan 2013 09:50:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=958; q=dns/txt; s=iport; t=1358877019; x=1360086619; h=subject:mime-version:from:in-reply-to:date:cc: content-transfer-encoding:message-id:references:to; bh=iJ57MZPdriUkbb0AgOSjuhtfHbsCrYAC3xZ2Fj5SMyc=; b=eV3w+NMYOJulwM7fEm5A45gsr7cTvnh5MvnPGv85Y/5HLLpr+21UIhbI zduNKPgLUnhqlyb4Bh+gIm8bJ4snY8oT0wCV8vnjLs3o8qanYZAZuC4Dn Wdqw+IfrLd/ObHVzUmQ6FVAhkzr9mua4zS7L4DwoSaubkC17wmIv5Ct/+ A=; X-IronPort-AV: E=Sophos;i="4.84,515,1355097600"; d="scan'208";a="66861558" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-3.cisco.com with ESMTP; 22 Jan 2013 17:50:17 +0000 Received: from [10.19.246.89] (sjc-jcardine-8718.cisco.com [10.19.246.89]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id r0MHoGtJ000836; Tue, 22 Jan 2013 17:50:17 GMT Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=iso-8859-1 From: Darrel Lewis In-Reply-To: <50FD7EFE.20200@ac.upc.edu> Date: Tue, 22 Jan 2013 09:50:15 -0800 Content-Transfer-Encoding: 7bit Message-Id: <69117C55-5401-4B10-BCE4-23533A3F2622@cisco.com> References: <864252D1-F537-471B-A0CE-EB80A2F3A721@cisco.com> <50FD0D72.7010502@ac.upc.edu> <663EDF44-70EB-4C51-86FA-AC920EC89114@gmail.com> <50FD7EFE.20200@ac.upc.edu> To: Lori Jakab X-Mailer: Apple Mail (2.1283) X-Auto-Response-Suppress: DR, OOF, AutoReply Cc: "lisp-interest\(mailer list\)" , "lisp@ietf.org" , LISP Beta Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? (was: Re: WG Last Call for draft-ietf-lisp-deployment) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 17:50:20 -0000 I see no problem in using them as long as you verify prior to trusting. -Darrel On Jan 21, 2013, at 9:46 AM, Lori Jakab wrote: > Hi folks, > > Damien is suggesting we recommend LSB not to be used for the > Internet-wide deployment of LISP, see below. > > What do you think? > > Best regards, > -Lori > > On 01/21/13 19:06, Damien Saucez wrote: >> On 21 Jan 2013, at 10:42, Lori Jakab wrote: >> >>> On 01/15/13 00:15, Damien Saucez wrote: >>> [...] >>>> IMHO this document should suggest not to use LSB in the Internet case >>>> deployment >>> Only for the above reason, or due to security concerns? >> For me, the main reason not to use LSB in Internet is the problem >> of definition of reachability, what does mean a LSB full of 1? It is not >> because the one that set the LSB can reach all the RLOCs that it will >> be the case for ITR sending the packet based on what it sees from the >> LSB. > From amijain@cisco.com Tue Jan 22 10:52:00 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30CF821F8A67 for ; Tue, 22 Jan 2013 10:51:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QIVfUkxC-mGi for ; Tue, 22 Jan 2013 10:51:48 -0800 (PST) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by ietfa.amsl.com (Postfix) with ESMTP id 2976621F8A66 for ; Tue, 22 Jan 2013 10:51:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9126; q=dns/txt; s=iport; t=1358880706; x=1360090306; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=JUkaqXClXG7CWPSeB92iRsQ1tAWZ64PP2ozjvzx30lM=; b=XSyauDOdUOMn1uRteLxnqevhFEmh5gdoLi1UfhaCjMhV31amkEM/fTK8 BBDCADmtGcD3N+K7CBLnl4Rn+sJoarkJdG6+Vya6zIv8+5RA7WbMDvJK5 eLs2R+40h+ucjAi6DgIn0DokwL6HWvWbNGnpQS3j0HCy9GM7deU4LStQA Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFACTf/lCtJXG8/2dsb2JhbABEgki7YBZzgh4BAQEEAQEBax0BCBEDAQILHS4LFAkIAgQBEgiIEQysb5AqBJBVYQOmVYJ1giQ X-IronPort-AV: E=Sophos;i="4.84,516,1355097600"; d="scan'208,217";a="166300354" Received: from rcdn-core2-1.cisco.com ([173.37.113.188]) by rcdn-iport-5.cisco.com with ESMTP; 22 Jan 2013 18:51:45 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core2-1.cisco.com (8.14.5/8.14.5) with ESMTP id r0MIpjcj003581 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 22 Jan 2013 18:51:45 GMT Received: from xmb-rcd-x09.cisco.com ([169.254.9.149]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.02.0318.004; Tue, 22 Jan 2013 12:51:45 -0600 From: "Amit Jain (amijain)" To: Sander Steffann , "lisp@ietf.org list list" Thread-Topic: [lisp] Understanding DDT Thread-Index: AQHN+IYhyUAexJ+QKE2XW0v5+w1YR5hVkHSA Date: Tue, 22 Jan 2013 18:51:44 +0000 Message-ID: <0ACF6B5943AEF541B3FA23A2B4DCC6C70FB96700@xmb-rcd-x09.cisco.com> In-Reply-To: <1B5F7B98-AF2A-49F0-97CF-3B6FE87CC3E6@steffann.nl> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.1.120420 x-originating-ip: [10.21.80.166] Content-Type: multipart/alternative; boundary="_000_0ACF6B5943AEF541B3FA23A2B4DCC6C70FB96700xmbrcdx09ciscoc_" MIME-Version: 1.0 Subject: Re: [lisp] Understanding DDT X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 18:52:05 -0000 --_000_0ACF6B5943AEF541B3FA23A2B4DCC6C70FB96700xmbrcdx09ciscoc_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Sander, >From what you list below, lisp-rig works but not lig. In lig, there is a ti= meout and if the reply does not come in that time, it lists as what you see= below. Can you enable lisp mapping debugs and see if you do get a reply at= all (from the MR saying hole)? If you dont, then we have to debug on the m= apping system. thanks, Amit From: Sander Steffann > Date: Tuesday, January 22, 2013 1:51 AM To: "lisp@ietf.org list list" > Subject: [lisp] Understanding DDT Hi, I am trying to understand the DDT protocol and I built a DDT node implement= ation in Python. I am currently doing very simple tests. Currently I'm just= sending back DELEGATION-HOLE replies for 37.77.63.0/24 (some of my own add= ress space). When playing with this from a Cisco device I get the results I= expect from the lisp-rig command: #lisp-rig 37.77.63.4 to 194.33.96.96 Send Map-Request to DDT-node 194.33.96.96 ... node referral, rtt: 0 ms EID-prefix: [0] 37.77.56.0/21, ttl: 1440 referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1::10, 2001:9E0:8= 10:1::10 Send Map-Request to DDT-node 83.247.10.218 ... node referral, rtt: 0 ms EID-prefix: [0] 37.77.63.0/24, ttl: 1440 referrals: 94.142.242.210, 2A02:898:148::210 Send Map-Request to DDT-node 94.142.242.210 ... delegation hole, rtt: 8 = ms EID-prefix: [0] 37.77.63.0/24, ttl: 15 But lig fails: #lig 37.77.63.66 ***Did not receive*** mapping information for EID 37.77.63.66 Displaying information already present in cache: 36.0.0.0/7, uptime: 00:10:58, expires: 00:03:54, via map-reply, forward-= native Encapsulating to proxy ETR When I do the same for a delegation-hole on a Cisco device I get: #lisp-rig 37.77.62.4 to 194.33.96.96 Send Map-Request to DDT-node 194.33.96.96 ... node referral, rtt: 0 ms EID-prefix: [0] 37.77.56.0/21, ttl: 1440 referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1::10, 2001:9E0:8= 10:1::10 Send Map-Request to DDT-node 83.247.10.218 ... delegation hole, rtt: 0 m= s EID-prefix: [0] 37.77.62.0/24, ttl: 15 And a reply from lig: #lig 37.77.62.66 to 195.50.116.18 Mapping information for EID 37.77.62.66 from 195.50.116.18 with RTT 52 m= secs 37.77.62.0/24, uptime: 00:00:00, expires: 00:14:52, via map-reply, forwa= rd-native Encapsulating to proxy ETR I must be doing something wrong, but I can't find what it is... I attached = a tiny pcap file with the encapsulated map-requests and the corresponding r= esponses I sent out. I really would appreciate it if someone could help me = out! Thanks, Sander PS: my test implementation is attached to the DDT tree and running, so feel= free to experiment with it! PPS: Oh, and the code is available under a BSD license at https://github.co= m/steffann/pylisp of course :-) _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp --_000_0ACF6B5943AEF541B3FA23A2B4DCC6C70FB96700xmbrcdx09ciscoc_ Content-Type: text/html; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable
Hi Sander,

From what you list below, lisp-rig works but not lig. In lig, there is= a timeout and if the reply does not come in that time, it lists as what yo= u see below. Can you enable lisp mapping debugs and see if you do get a rep= ly at all (from the MR saying hole)? If you dont, then we have to debug on the mapping system.

thanks, Amit

From: Sander Steffann <sander@steffann.nl>
Date: Tuesday, January 22, 2013 1:5= 1 AM
To: "lisp@ietf.org list list" <lisp@ietf.org>
Subject: [lisp] Understanding DDT

Hi,

I am trying to understand the DDT protocol and I built a DDT node implement= ation in Python. I am currently doing very simple tests. Currently I'm just= sending back DELEGATION-HOLE replies for 37.77.63.0/24 (some of my own add= ress space). When playing with this from a Cisco device I get the results I expect from the lisp-rig command:<= br>
   #lisp-rig 37.77.63.4 to 194.33.96.96
   Send Map-Request to DDT-node 194.33.96.96 ... node referral, r= tt: 0 ms
    EID-prefix: [0] 37.77.56.0/21, ttl: 1440
    referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1:= :10, 2001:9E0:810:1::10

   Send Map-Request to DDT-node 83.247.10.218 ... node referral, = rtt: 0 ms
    EID-prefix: [0] 37.77.63.0/24, ttl: 1440
    referrals: 94.142.242.210, 2A02:898:148::210

   Send Map-Request to DDT-node 94.142.242.210 ... delegation hol= e, rtt: 8 ms
    EID-prefix: [0] 37.77.63.0/24, ttl: 15

But lig fails:

   #lig 37.77.63.66       &nbs= p;    
   ***Did not receive*** mapping information for EID 37.77.63.66<= br>    Displaying information already present in cache:
   36.0.0.0/7, uptime: 00:10:58, expires: 00:03:54, via map-reply= , forward-native
    Encapsulating to proxy ETR

When I do the same for a delegation-hole on a Cisco device I get:

   #lisp-rig 37.77.62.4 to 194.33.96.96
   Send Map-Request to DDT-node 194.33.96.96 ... node referral, r= tt: 0 ms
    EID-prefix: [0] 37.77.56.0/21, ttl: 1440
    referrals: 83.247.10.218, 87.195.109.18, 2001:9E0:411:1:= :10, 2001:9E0:810:1::10

   Send Map-Request to DDT-node 83.247.10.218 ... delegation hole= , rtt: 0 ms
    EID-prefix: [0] 37.77.62.0/24, ttl: 15

And a reply from lig:

   #lig 37.77.62.66 to 195.50.116.18     = ;  
   Mapping information for EID 37.77.62.66 from 195.50.116.18 wit= h RTT 52 msecs
   37.77.62.0/24, uptime: 00:00:00, expires: 00:14:52, via map-re= ply, forward-native
    Encapsulating to proxy ETR

I must be doing something wrong, but I can't find what it is... I attached = a tiny pcap file with the encapsulated map-requests and the corresponding r= esponses I sent out. I really would appreciate it if someone could help me = out!

Thanks,
Sander

PS: my test implementation is attached to the DDT tree and running, so feel= free to experiment with it!
PPS: Oh, and the code is available under a BSD license at https://github.com/steffann/pylisp of course :-)





_______________________________________________ lisp mailing list
lisp@ietf.org
https://www.ietf.org= /mailman/listinfo/lisp
 --_000_0ACF6B5943AEF541B3FA23A2B4DCC6C70FB96700xmbrcdx09ciscoc_-- From ljakab@ac.upc.edu Wed Jan 23 01:15:00 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA59621F86C8 for ; Wed, 23 Jan 2013 01:15:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.866 X-Spam-Level: X-Spam-Status: No, score=-2.866 tagged_above=-999 required=5 tests=[AWL=-0.267, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4sVkVIR4Xz7P for ; Wed, 23 Jan 2013 01:15:00 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id 4038121F86D2 for ; Wed, 23 Jan 2013 01:14:58 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r0N98W0w000954; Wed, 23 Jan 2013 10:08:32 +0100 Received: from [192.168.1.6] (unknown [89.123.124.214]) by gw.ac.upc.edu (Postfix) with ESMTP id E76B16B01CB; Wed, 23 Jan 2013 10:08:30 +0100 (CET) Message-ID: <50FFA880.2060902@ac.upc.edu> Date: Wed, 23 Jan 2013 11:08:16 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: Damien Saucez References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> In-Reply-To: OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: "lisp-interest@cisco.com" , Noel Chiappa , "lisp-beta@external.cisco.com" , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 09:15:01 -0000 On 01/22/13 12:22, Damien Saucez wrote: > > On 22 Jan 2013, at 10:15, Luigi Iannone > wrote: > >> Hi All, >> >> the definition of LSB as of the to-be-soon-rfc lisp specification is: >> >> LISP Locator Status Bits (LSBs): When the L-bit is also set, the >> locator status bits field in the LISP header is set by an ITR to >> indicate to an ETR the up/down status of the Locators in the >> source site. >> >> I think that this clears Damien's question since LSB has no >> "reachability" meaning, rather it is a message from the site telling >> "from my perspective ETR X is up and running". >> > > Yes, it is not a problem of reachability but a question of status. > However, how is the > status defined but the router that sends the LSB? How does it know > that the locator > is up or down? How can we make sure that the LSB will be the same, > whatever router > is building it? I think this depends a lot on the implementation. For example, if you wanted to have the LSBs synced, you could use the status from the locator records in the Map-Notify messages, and you would get the Map Server view of status. With a more complex implementation, you could probably get a better view. But I think it depends a lot on the implementation. > > Another question, how bad/good would it be for the traffic if two > routers give different > LSBs? Again, that's something implementation specific, I don't think it's specced. > >> (BTW this may help debugging, since if the ETR is running but not >> reachable from the outside this clearly shows that the problem is >> along the path somewhere. Yeah… could be a long path… but it is still >> useful information). > > I agree, that in a controlled environment LSB can be very helpful to debug > the network. In the Internet where the topology is unknown I don't know if > it is a very relevant information, but it depends how the LSB is > constructed. Exactly, depends on the implementation. But the document we discuss is about deployment, so operators can only do what implementations allow them to do. > >> >> The main concern is about security. Obviously LSB can be easily >> spoofed in a public environment and this is documented in section >> 6.4.1 of the draft-ietf-lisp-threats, which recommends: >> >> Locator Status Bits can be blindly trusted only in secure >> environments. In the general unsecured Internet environment, the >> safest practice for xTRs is to confirm the status change >> through the mapping system. >> >> >> So IMHO the thing to do is to simply put a reference to the >> lisp-threats draft about the use of LSBs. >> > > > If the LSB has to be verified, I would then prefer to use versioning. I will put a reference to the threats draft, and suggest versioning as an alternative. Thanks for all the input! -Lori > > Damien Saucez > > >> ciao >> >> Luigi >> >> >> >> >> >> On 22 Jan. 2013, at 04:15 , Dino Farinacci > > wrote: >> >>> They have the same meaning in all environment. It is a question when >>> they should be verified. An LSB that changes in a public environment >>> can cause a Map-Request to be sent and a signed Map-Reply can verify >>> the LSB in an authenticated matter. >>> >>> Dino >>> >>> On Jan 21, 2013, at 6:05 PM, Ronald Bonica >> > wrote: >>> >>>> Dino, >>>> >>>> But isn't it troubling that the bits have one meaning in a >>>> controlled environment and another in the great-wide Internet? >>>> >>>> Ron >>>> >>>> >>>>> -----Original Message----- >>>>> From: lisp-bounces@ietf.org >>>>> [mailto:lisp-bounces@ietf.org ] On Behalf Of >>>>> Dino Farinacci >>>>> Sent: Monday, January 21, 2013 5:51 PM >>>>> To: Noel Chiappa >>>>> Cc: lisp-interest@cisco.com ; >>>>> lisp@ietf.org ; lisp- >>>>> beta@external.cisco.com >>>>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>>>> deployment? >>>>> >>>>>> (I don't remember off the top of my head why I didn't like them: I >>>>>> think it was a combination of the fixed number of bits, the fact that >>>>>> it might be difficult for ETR X to know the state of ETR Y, the fact >>>>>> that 'reachable from ITR A' [which you _really_ need to have anyway] >>>>>> is a subset of 'up', etc, etc. But we didn't desperately need the >>>>>> header bits, and the mechanism wasn't positively harmful, so I didn't >>>>>> bother to put up a big fight over it... :-) >>>>> >>>>> Maybe because they could be spoofed? >>>>> >>>>> But they are good in control environments to take ETRs out of service >>>>> without having to update the mapping database. >>>>> >>>>> Dino >>>>> >>>>> >>>>> _______________________________________________ >>>>> lisp mailing list >>>>> lisp@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/lisp >>>> >>>> >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp > > > > _______________________________________________ > lisp mailing list > lisp@ietf.org > https://www.ietf.org/mailman/listinfo/lisp From wriedel@cisco.com Tue Jan 22 09:37:39 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4825D21F8950 for ; Tue, 22 Jan 2013 09:37:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jh49vuDGa2Pp for ; Tue, 22 Jan 2013 09:37:36 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id 7F2A221F894C for ; Tue, 22 Jan 2013 09:37:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=66156; q=dns/txt; s=iport; t=1358876255; x=1360085855; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=RU1FJJu7udWhfop9p3BLg72svoYB8U2mF6XeELMul8g=; b=a4Qlpp8yJlwJ0iP8S0dZBBis4jcNPM3DxeUZKzKiQHuUbkHug7EV+E6K WRlifnDDuWMsecvDwEWe7D32uR6F+0jbgNH2HNr2TMetuUE68Ngi8mbys g7M1la4AqqdftmzR96N2OgV8H6QWXDFaMNm6AGt7Vp1uhtnOOhFfxc6mD I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFAOzN/lCtJXHA/2dsb2JhbABEvicWc4IeAQEBBAEBARcBUwsMBAIBCBEEAQELFgEGByEGCxQJCAIEAQ0FCId/Aw8MrQmGTA2IXgSMB4ROYQOUNo0NhRKCdYIk X-IronPort-AV: E=Sophos;i="4.84,515,1355097600"; d="scan'208,217";a="166297829" Received: from rcdn-core2-5.cisco.com ([173.37.113.192]) by rcdn-iport-4.cisco.com with ESMTP; 22 Jan 2013 17:37:27 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by rcdn-core2-5.cisco.com (8.14.5/8.14.5) with ESMTP id r0MHbRH9010614 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Tue, 22 Jan 2013 17:37:27 GMT Received: from xmb-aln-x08.cisco.com ([169.254.3.124]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.02.0318.004; Tue, 22 Jan 2013 11:37:26 -0600 From: "Wolfgang Riedel (wriedel)" To: Damien Saucez , Dino Farinacci Thread-Topic: [lisp] Should we use Locator-Status-Bits in Internet deployment? Thread-Index: AQHN+Mck4A9DWErTAEqAP/xqrFkd4Q== Date: Tue, 22 Jan 2013 17:37:26 +0000 Message-ID: References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-Auto-Response-Suppress: DR, OOF, AutoReply X-MS-TNEF-Correlator: x-originating-ip: [10.55.92.228] Content-Type: multipart/alternative; boundary="_000_C50195086D1A7144938C2C63DB7C55520457DE95xmbalnx08ciscoc_" MIME-Version: 1.0 X-Mailman-Approved-At: Wed, 23 Jan 2013 08:25:59 -0800 Cc: "lisp-interest\(mailer list\)" , Noel Chiappa , "lisp-beta@external.cisco.com" , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jan 2013 18:09:18 -0000 --_000_C50195086D1A7144938C2C63DB7C55520457DE95xmbalnx08ciscoc_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi Folks, for a multi-homed side I see a use case where different ITR's signal differ= ent LSBs for the same EID space based on local conditions. This could be di= fferent from the reachability of the IP of the ITR itself. I just think of an active-active datacenter with a ~30km distance in betwee= n which is propagating the same EID space over different ITR's. If I am doi= ng maintenance on one side I may send out different LSB's if I want gracefu= lly bring down the other side. Maybe I missed something but aren't we already using LSB within the beta ne= twork which is spanned across the planet in a uncontrolled environment? So why not just analyze the data we can get out of it instead of guessing? Wolfgang pxtr-even#sh ip lisp forwarding eid remote Prefix Fwd action Locator status bits 153.16.0.0/16 signal 0x00000000 packets/bytes 19273/966730 153.16.0.0/24 encap 0x00000001 packets/bytes 1574/79142 153.16.0.128/25 encap 0x00000001 packets/bytes 522/24816 153.16.1.0/24 fwd native 0x00000000 packets/bytes 31165/1722380 153.16.2.7/32 drop 0x00000000 packets/bytes 4/1552 153.16.2.8/32 drop 0x00000000 packets/bytes 0/0 153.16.2.62/32 drop 0x00000000 packets/bytes 1/48 153.16.2.71/32 drop 0x00000000 packets/bytes 0/0 153.16.2.132/32 drop 0x00000000 packets/bytes 3/183 153.16.2.138/32 drop 0x00000000 packets/bytes 0/0 153.16.2.165/32 drop 0x00000000 packets/bytes 0/0 153.16.3.0/24 encap 0x00000003 packets/bytes 3772/207186 153.16.4.0/24 encap 0x00000001 packets/bytes 127527/9518378 153.16.5.0/24 encap 0x00000003 packets/bytes 17350/1020128 153.16.6.0/24 fwd native 0x00000000 packets/bytes 17844/1054819 153.16.7.0/24 fwd native 0x00000000 packets/bytes 27836/1595624 153.16.8.0/24 encap 0x00000003 packets/bytes 3641/189530 153.16.9.0/24 fwd native 0x00000000 Prefix Fwd action Locator status bits packets/bytes 27698/1312693 153.16.10.0/24 encap 0x00000001 packets/bytes 46626/4586745 153.16.11.18/32 drop 0x00000000 packets/bytes 0/0 153.16.12.0/26 encap 0x00000001 packets/bytes 767/39811 153.16.12.64/26 encap 0x00000001 packets/bytes 786/50508 153.16.12.128/26 fwd native 0x00000000 packets/bytes 7057/339336 153.16.12.192/27 fwd native 0x00000000 packets/bytes 49/2254 153.16.12.240/29 encap 0x00000001 packets/bytes 1308/140869 153.16.12.248/29 encap 0x00000001 packets/bytes 4966/436764 153.16.13.0/28 encap 0x00000001 packets/bytes 180/8966 153.16.13.16/28 fwd native 0x00000000 packets/bytes 53/2438 153.16.13.32/28 encap 0x00000001 packets/bytes 200/12377 153.16.13.48/28 fwd native 0x00000000 packets/bytes 3518/302318 153.16.13.80/28 encap 0x00000001 packets/bytes 197/16828 153.16.13.96/28 encap 0x00000001 packets/bytes 196/9763 153.16.13.144/28 encap 0x00000001 packets/bytes 96/4621 153.16.13.160/28 encap 0x00000001 packets/bytes 79/4112 153.16.13.176/28 encap 0x00000001 packets/bytes 10937/5078427 153.16.13.192/28 encap 0x00000001 packets/bytes 99/4886 153.16.13.208/28 encap 0x00000001 packets/bytes 126/6102 Prefix Fwd action Locator status bits 153.16.13.224/28 encap 0x00000001 packets/bytes 101/5873 153.16.14.0/24 fwd native 0x00000000 packets/bytes 18174/1382065 153.16.15.71/32 drop 0x00000000 packets/bytes 71/3668 153.16.16.0/24 encap 0x00000001 packets/bytes 2291/117038 153.16.17.0/28 fwd native 0x00000000 packets/bytes 2443/114858 153.16.17.16/28 encap 0x00000001 packets/bytes 746/41241 153.16.17.32/28 fwd native 0x00000000 packets/bytes 1007/46942 153.16.17.48/28 fwd native 0x00000000 packets/bytes 28/1288 153.16.17.64/28 fwd native 0x00000000 packets/bytes 569/27852 153.16.17.80/28 encap 0x00000001 packets/bytes 197/9453 153.16.17.96/28 fwd native 0x00000000 packets/bytes 0/0 153.16.17.112/28 fwd native 0x00000000 packets/bytes 0/0 153.16.17.176/28 fwd native 0x00000000 packets/bytes 150/6900 153.16.17.192/28 encap 0x00000001 packets/bytes 278/28562 153.16.17.224/30 encap 0x00000001 packets/bytes 24/1174 153.16.17.228/30 encap 0x00000001 packets/bytes 32/1546 153.16.18.16/28 fwd native 0x00000000 packets/bytes 56/2576 153.16.18.32/28 encap 0x00000001 packets/bytes 2322/143949 153.16.18.64/28 encap 0x00000001 packets/bytes 176/12465 153.16.18.80/28 encap 0x00000001 Prefix Fwd action Locator status bits packets/bytes 178/11838 153.16.18.96/28 encap 0x00000001 packets/bytes 183/8854 153.16.18.112/28 fwd native 0x00000000 packets/bytes 446/20902 153.16.18.144/28 fwd native 0x00000000 packets/bytes 15/690 153.16.18.176/28 encap 0x00000001 packets/bytes 88/4795 153.16.18.208/28 encap 0x00000001 packets/bytes 81/3866 153.16.18.224/28 fwd native 0x00000000 packets/bytes 0/0 153.16.18.240/28 encap 0x00000001 packets/bytes 103/6929 153.16.19.0/24 fwd native 0x00000000 packets/bytes 21137/1141575 153.16.20.0/24 fwd native 0x00000000 packets/bytes 23187/1275992 153.16.21.0/26 fwd native 0x00000000 packets/bytes 35021/2276591 153.16.21.109/32 drop 0x00000000 packets/bytes 0/0 153.16.21.139/32 fwd native 0x00000000 packets/bytes 120/5760 153.16.21.141/32 fwd native 0x00000000 packets/bytes 18/828 153.16.21.210/31 fwd native 0x00000000 packets/bytes 0/0 153.16.22.0/26 fwd native 0x00000000 packets/bytes 37084/2255311 153.16.22.90/32 drop 0x00000000 packets/bytes 0/0 153.16.22.132/32 encap 0x00000003 packets/bytes 0/0 153.16.22.136/29 fwd native 0x00000000 packets/bytes 0/0 153.16.22.196/32 fwd native 0x00000000 packets/bytes 116/5800 Prefix Fwd action Locator status bits 153.16.22.200/29 fwd native 0x00000000 packets/bytes 0/0 153.16.22.212/30 fwd native 0x00000000 packets/bytes 0/0 153.16.22.216/29 fwd native 0x00000000 packets/bytes 232/11136 153.16.22.224/27 fwd native 0x00000000 packets/bytes 1406/80696 153.16.23.0/24 fwd native 0x00000000 packets/bytes 131048/6980525 153.16.24.0/24 encap 0x00000001 packets/bytes 2080/128076 153.16.25.0/28 encap 0x00000001 packets/bytes 347/16626 153.16.25.16/28 encap 0x00000003 packets/bytes 15523/14385604 153.16.25.32/28 fwd native 0x00000000 packets/bytes 438/20380 153.16.25.48/28 encap 0x00000001 packets/bytes 184/9141 153.16.25.64/28 fwd native 0x00000000 packets/bytes 727/34886 153.16.25.112/28 fwd native 0x00000000 packets/bytes 592/27580 153.16.25.128/28 encap 0x00000001 packets/bytes 112/9970 153.16.25.151/32 drop 0x00000000 packets/bytes 0/0 153.16.25.160/28 encap 0x00000001 packets/bytes 112/8094 153.16.25.176/28 drop 0x00000001 packets/bytes 8/368 153.16.25.192/28 encap 0x00000001 packets/bytes 85/4104 153.16.25.224/28 encap 0x00000003 packets/bytes 1403/756413 153.16.25.240/28 fwd native 0x00000000 packets/bytes 0/0 153.16.26.0/28 encap 0x00000001 Prefix Fwd action Locator status bits packets/bytes 24055/21546260 153.16.26.32/28 encap 0x00000001 packets/bytes 206/10582 153.16.26.64/28 fwd native 0x00000000 packets/bytes 1115/56171 153.16.26.80/28 fwd native 0x00000000 packets/bytes 1695/80454 153.16.26.96/28 fwd native 0x00000000 packets/bytes 474/22384 153.16.26.112/28 fwd native 0x00000000 packets/bytes 1651/78716 153.16.26.128/28 fwd native 0x00000000 packets/bytes 0/0 153.16.26.192/28 encap 0x00000001 packets/bytes 12171/1390825 153.16.26.224/28 encap 0x00000001 packets/bytes 97/5257 153.16.26.240/28 fwd native 0x00000000 packets/bytes 0/0 153.16.27.0/24 fwd native 0x00000000 packets/bytes 5744/375960 153.16.28.0/24 encap 0x00000001 packets/bytes 2452/149787 153.16.29.0/24 encap 0x00000003 packets/bytes 2423/136233 153.16.30.0/28 encap 0x00000003 packets/bytes 2452/152600 153.16.30.16/28 fwd native 0x00000000 packets/bytes 1884/99928 153.16.30.32/27 fwd native 0x00000000 packets/bytes 18978/1075973 153.16.30.64/26 fwd native 0x00000000 packets/bytes 36633/1900388 153.16.30.128/25 fwd native 0x00000000 packets/bytes 26905/1452450 153.16.31.0/28 fwd native 0x00000000 packets/bytes 11114/725274 153.16.31.32/27 fwd native 0x00000000 packets/bytes 17526/1129516 Prefix Fwd action Locator status bits 153.16.31.64/26 fwd native 0x00000000 packets/bytes 33377/1795877 153.16.31.128/25 fwd native 0x00000000 packets/bytes 32391/2164113 153.16.32.0/28 encap 0x00000001 packets/bytes 282/13483 153.16.32.16/28 fwd native 0x00000000 packets/bytes 517/23782 153.16.32.48/28 fwd native 0x00000000 packets/bytes 1217/58912 153.16.32.64/28 fwd native 0x00000000 packets/bytes 1956/275832 153.16.32.80/28 encap 0x00000003 packets/bytes 162/7914 153.16.32.96/28 encap 0x00000003 packets/bytes 206/9995 153.16.32.112/28 fwd native 0x00000000 packets/bytes 2917/170863 153.16.32.144/28 fwd native 0x00000000 packets/bytes 150/6900 153.16.32.176/28 encap 0x00000001 packets/bytes 411/48905 153.16.32.192/28 encap 0x00000001 packets/bytes 62747/54741368 153.16.32.208/28 fwd native 0x00000000 packets/bytes 1103/157110 153.16.32.224/28 encap 0x0000000F packets/bytes 9478/934907 153.16.32.240/28 encap 0x00000001 packets/bytes 201/13637 153.16.33.0/24 fwd native 0x00000000 packets/bytes 125808/7498118 153.16.34.0/24 fwd native 0x00000000 packets/bytes 20005/1211708 153.16.35.0/24 fwd native 0x00000000 packets/bytes 28219/1661540 153.16.36.0/24 encap 0x0000000F packets/bytes 2403/135041 153.16.37.0/24 encap 0x00000007 Prefix Fwd action Locator status bits packets/bytes 487/131776 153.16.38.0/25 encap 0x0000000A packets/bytes 4907/360740 153.16.38.128/25 encap 0x0000000A packets/bytes 749/44847 153.16.39.0/24 signal 0x00000000 packets/bytes 2205/120184 153.16.40.0/24 fwd native 0x00000000 packets/bytes 100232/5787525 153.16.41.0/24 encap 0x00000003 packets/bytes 4757/264737 153.16.43.16/28 fwd native 0x00000000 packets/bytes 83/3818 153.16.43.32/28 fwd native 0x00000000 packets/bytes 455/21510 153.16.43.64/26 fwd native 0x00000000 packets/bytes 40930/2405239 153.16.43.128/26 fwd native 0x00000000 packets/bytes 7186/509900 153.16.43.192/27 fwd native 0x00000000 packets/bytes 409/19286 153.16.43.224/28 fwd native 0x00000000 packets/bytes 174/8352 153.16.43.241/32 encap 0x00000001 packets/bytes 5/232 153.16.43.242/32 encap 0x00000001 packets/bytes 1/48 153.16.44.0/28 fwd native 0x00000000 packets/bytes 1584/78965 153.16.44.16/28 fwd native 0x00000000 packets/bytes 290/13920 153.16.44.32/28 encap 0x00000003 packets/bytes 137/7376 153.16.44.48/28 encap 0x00000001 packets/bytes 6429/493372 153.16.44.64/28 encap 0x00000001 packets/bytes 218/13336 153.16.44.80/28 fwd native 0x00000000 packets/bytes 462/21870 Prefix Fwd action Locator status bits 153.16.44.96/28 encap 0x00000001 packets/bytes 230/16736 153.16.44.128/28 fwd native 0x00000000 packets/bytes 232/11136 153.16.44.144/28 encap 0x00000001 packets/bytes 10028/461440 153.16.44.160/28 encap 0x00000001 packets/bytes 81/3912 153.16.44.176/28 fwd native 0x00000000 packets/bytes 0/0 153.16.44.192/28 encap 0x00000001 packets/bytes 63/3008 153.16.44.208/28 encap 0x00000003 packets/bytes 73/3655 153.16.45.0/24 fwd native 0x00000000 packets/bytes 14189/971315 153.16.46.0/24 fwd native 0x00000000 packets/bytes 17446/1122565 153.16.47.0/28 fwd native 0x00000000 packets/bytes 513/25414 153.16.47.16/28 encap 0x00000001 packets/bytes 152/7558 153.16.47.32/28 fwd native 0x00000000 packets/bytes 228/10488 153.16.47.48/28 fwd native 0x00000000 packets/bytes 84/3864 153.16.47.64/28 fwd native 0x00000000 packets/bytes 519/23874 153.16.47.96/28 fwd native 0x00000000 packets/bytes 1462/70032 153.16.47.128/28 fwd native 0x00000000 packets/bytes 477/22290 153.16.47.160/27 encap 0x00000001 packets/bytes 150/7376 153.16.47.208/28 encap 0x00000001 packets/bytes 90/6744 153.16.47.224/28 encap 0x00000001 packets/bytes 726/496246 153.16.47.240/28 fwd native 0x00000000 Prefix Fwd action Locator status bits packets/bytes 125/6000 153.16.48.0/28 encap 0x00000001 packets/bytes 9822/787514 153.16.48.16/28 fwd native 0x00000000 packets/bytes 1166/54548 153.16.48.32/28 encap 0x00000001 packets/bytes 2419/1368023 153.16.48.64/26 fwd native 0x00000000 packets/bytes 30536/1951066 153.16.48.128/25 fwd native 0x00000000 packets/bytes 27251/1791407 153.16.49.0/24 fwd native 0x00000000 packets/bytes 89806/5103369 153.16.50.0/23 fwd native 0x00000000 packets/bytes 187276/10548451 153.16.52.0/22 fwd native 0x00000000 packets/bytes 416440/23021471 153.16.56.0/21 fwd native 0x00000000 packets/bytes 791716/45648478 153.16.64.0/24 encap 0x00000003 packets/bytes 19959/25775078 153.16.65.0/32 drop 0x00000000 packets/bytes 2/120 153.16.65.7/32 drop 0x00000000 packets/bytes 0/0 153.16.65.15/32 drop 0x00000000 packets/bytes 0/0 153.16.66.7/32 drop 0x00000000 packets/bytes 0/0 153.16.66.16/28 fwd native 0x00000000 packets/bytes 0/0 153.16.66.32/28 fwd native 0x00000000 packets/bytes 0/0 153.16.66.64/28 encap 0x00000001 packets/bytes 216/12095 153.16.66.80/28 encap 0x00000001 packets/bytes 143/7048 153.16.66.192/28 encap 0x00000001 packets/bytes 136/13397 Prefix Fwd action Locator status bits 153.16.66.208/28 encap 0x00000001 packets/bytes 106/5148 153.16.66.224/28 encap 0x00000001 packets/bytes 95/4496 153.16.67.0/24 encap 0x00000003 packets/bytes 2420/145387 153.16.68.165/32 drop 0x00000000 packets/bytes 0/0 153.16.68.181/32 drop 0x00000000 packets/bytes 0/0 153.16.69.62/32 drop 0x00000000 packets/bytes 0/0 153.16.69.93/32 drop 0x00000000 packets/bytes 0/0 153.16.69.188/32 drop 0x00000000 packets/bytes 0/0 153.16.70.0/28 encap 0x00000003 packets/bytes 210/11243 153.16.70.16/29 encap 0x00000002 packets/bytes 75/3600 153.16.70.24/29 encap 0x00000002 packets/bytes 48/2386 153.16.70.41/32 drop 0x00000000 packets/bytes 0/0 153.16.70.64/28 encap 0x00000001 packets/bytes 5671/891042 153.16.70.80/28 encap 0x00000001 packets/bytes 193/9490 153.16.70.96/28 encap 0x00000001 packets/bytes 165/9175 153.16.70.112/28 encap 0x00000001 packets/bytes 192/9474 153.16.70.128/25 fwd native 0x00000000 packets/bytes 34977/1919726 153.16.71.0/24 fwd native 0x00000000 packets/bytes 113426/6058747 153.16.72.4/32 drop 0x00000000 packets/bytes 0/0 153.16.73.0/24 fwd native 0x00000000 Prefix Fwd action Locator status bits packets/bytes 96304/5184251 153.16.74.0/24 encap 0x00000001 packets/bytes 2200/127117 153.16.75.0/24 fwd native 0x00000000 packets/bytes 100121/5766560 153.16.76.0/22 fwd native 0x00000000 packets/bytes 426560/24941173 153.16.80.0/20 fwd native 0x00000000 packets/bytes 227475/14382760 153.16.96.0/19 fwd native 0x00000000 packets/bytes 3275775/184546349 153.16.128.0/19 fwd native 0x00000000 packets/bytes 3434964/196842926 153.16.160.0/19 fwd native 0x00000000 packets/bytes 4070673/229418687 153.16.192.0/18 fwd native 0x00000000 packets/bytes 7177127/405113420 On 22.01.2013, at 11:22, Damien Saucez > wrote: On 22 Jan 2013, at 10:15, Luigi Iannone > wrote: Hi All, the definition of LSB as of the to-be-soon-rfc lisp specification is: LISP Locator Status Bits (LSBs): When the L-bit is also set, the locator status bits field in the LISP header is set by an ITR to indicate to an ETR the up/down status of the Locators in the source site. I think that this clears Damien's question since LSB has no "reachability" = meaning, rather it is a message from the site telling "from my perspective = ETR X is up and running". Yes, it is not a problem of reachability but a question of status. However,= how is the status defined but the router that sends the LSB? How does it know that the= locator is up or down? How can we make sure that the LSB will be the same, whatever= router is building it? Another question, how bad/good would it be for the traffic if two routers g= ive different LSBs? (BTW this may help debugging, since if the ETR is running but not reachable= from the outside this clearly shows that the problem is along the path som= ewhere. Yeah=85 could be a long path=85 but it is still useful information)= . I agree, that in a controlled environment LSB can be very helpful to debug the network. In the Internet where the topology is unknown I don't know if it is a very relevant information, but it depends how the LSB is constructe= d. The main concern is about security. Obviously LSB can be easily spoofed in = a public environment and this is documented in section 6.4.1 of the draft-i= etf-lisp-threats, which recommends: Locator Status Bits can be blindly trusted only in secure environments. In the general unsecured Internet environment, the safest practice for xTRs is to confirm the status change through the mapping system. So IMHO the thing to do is to simply put a reference to the lisp-threats dr= aft about the use of LSBs. If the LSB has to be verified, I would then prefer to use versioning. Damien Saucez ciao Luigi On 22 Jan. 2013, at 04:15 , Dino Farinacci > wrote: They have the same meaning in all environment. It is a question when they s= hould be verified. An LSB that changes in a public environment can cause a = Map-Request to be sent and a signed Map-Reply can verify the LSB in an aut= henticated matter. Dino On Jan 21, 2013, at 6:05 PM, Ronald Bonica > wrote: Dino, But isn't it troubling that the bits have one meaning in a controlled envir= onment and another in the great-wide Internet? Ron -----Original Message----- From: lisp-bounces@ietf.org [mailto:lisp-boun= ces@ietf.org] On Behalf Of Dino Farinacci Sent: Monday, January 21, 2013 5:51 PM To: Noel Chiappa Cc: lisp-interest@cisco.com; lisp@ietf.org<= mailto:lisp@ietf.org>; lisp- beta@external.cisco.com Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? (I don't remember off the top of my head why I didn't like them: I think it was a combination of the fixed number of bits, the fact that it might be difficult for ETR X to know the state of ETR Y, the fact that 'reachable from ITR A' [which you _really_ need to have anyway] is a subset of 'up', etc, etc. But we didn't desperately need the header bits, and the mechanism wasn't positively harmful, so I didn't bother to put up a big fight over it... :-) Maybe because they could be spoofed? But they are good in control environments to take ETRs out of service without having to update the mapping database. Dino _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp _______________________________________________ lisp mailing list lisp@ietf.org https://www.ietf.org/mailman/listinfo/lisp --_000_C50195086D1A7144938C2C63DB7C55520457DE95xmbalnx08ciscoc_ Content-Type: text/html; charset="Windows-1252" Content-ID: <40E3155099661548A0A89ECC10BA3AC6@cisco.com> Content-Transfer-Encoding: quoted-printable Hi Folks,

for a multi-homed side I see a use case where different ITR's signal d= ifferent LSBs for the same EID space based on local conditions. This could = be different from the reachability of the IP of the ITR itself.
I just think of an active-active datacenter with a ~30km distance in b= etween which is propagating the same EID space over different ITR's. If I a= m doing maintenance on one side I may send out different LSB's if I want gr= acefully bring down the other side.

Maybe I missed something but aren't we already using LSB within the be= ta network which is spanned across the planet in a uncontrolled environment= ?
So why not just analyze the data we can get out of it instead of guess= ing?

Wolfgang

pxtr-even#sh ip lisp forwarding eid remote

Prefix                 Fwd act= ion  Locator status bits
153.16.0.0/16          signal     &= nbsp;0x00000000
  packets/bytes   19273/966730
153.16.0.0/24          encap     &n= bsp; 0x00000001
  packets/bytes    1574/79142
153.16.0.128/25        encap       = 0x00000001
  packets/bytes     522/24816
153.16.1.0/24          fwd native  0x000= 00000
  packets/bytes   31165/1722380
153.16.2.7/32          drop     &nb= sp;  0x00000000
  packets/bytes       4/1552
153.16.2.8/32          drop     &nb= sp;  0x00000000
  packets/bytes       0/0
153.16.2.62/32         drop       &= nbsp;0x00000000
  packets/bytes       1/48
153.16.2.71/32         drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.2.132/32        drop       &= nbsp;0x00000000
  packets/bytes       3/183
153.16.2.138/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.2.165/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.3.0/24          encap     &n= bsp; 0x00000003
  packets/bytes    3772/207186
153.16.4.0/24          encap     &n= bsp; 0x00000001
  packets/bytes  127527/9518378
153.16.5.0/24          encap     &n= bsp; 0x00000003
  packets/bytes   17350/1020128
153.16.6.0/24          fwd native  0x000= 00000
  packets/bytes   17844/1054819
153.16.7.0/24          fwd native  0x000= 00000
  packets/bytes   27836/1595624
153.16.8.0/24          encap     &n= bsp; 0x00000003
  packets/bytes    3641/189530
153.16.9.0/24          fwd native  0x000= 00000
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes   27698/1312693
153.16.10.0/24         encap       = 0x00000001
  packets/bytes   46626/4586745
153.16.11.18/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.12.0/26         encap       = 0x00000001
  packets/bytes     767/39811
153.16.12.64/26        encap       = 0x00000001
  packets/bytes     786/50508
153.16.12.128/26       fwd native  0x00000000
  packets/bytes    7057/339336
153.16.12.192/27       fwd native  0x00000000
  packets/bytes      49/2254
153.16.12.240/29       encap       0x000= 00001
  packets/bytes    1308/140869
153.16.12.248/29       encap       0x000= 00001
  packets/bytes    4966/436764
153.16.13.0/28         encap       = 0x00000001
  packets/bytes     180/8966
153.16.13.16/28        fwd native  0x00000000=
  packets/bytes      53/2438
153.16.13.32/28        encap       = 0x00000001
  packets/bytes     200/12377
153.16.13.48/28        fwd native  0x00000000=
  packets/bytes    3518/302318
153.16.13.80/28        encap       = 0x00000001
  packets/bytes     197/16828
153.16.13.96/28        encap       = 0x00000001
  packets/bytes     196/9763
153.16.13.144/28       encap       0x000= 00001
  packets/bytes      96/4621
153.16.13.160/28       encap       0x000= 00001
  packets/bytes      79/4112
153.16.13.176/28       encap       0x000= 00001
  packets/bytes   10937/5078427
153.16.13.192/28       encap       0x000= 00001
  packets/bytes      99/4886
153.16.13.208/28       encap       0x000= 00001
  packets/bytes     126/6102
Prefix                 Fwd act= ion  Locator status bits
153.16.13.224/28       encap       0x000= 00001
  packets/bytes     101/5873
153.16.14.0/24         fwd native  0x00000000=
  packets/bytes   18174/1382065
153.16.15.71/32        drop       &= nbsp;0x00000000
  packets/bytes      71/3668
153.16.16.0/24         encap       = 0x00000001
  packets/bytes    2291/117038
153.16.17.0/28         fwd native  0x00000000=
  packets/bytes    2443/114858
153.16.17.16/28        encap       = 0x00000001
  packets/bytes     746/41241
153.16.17.32/28        fwd native  0x00000000=
  packets/bytes    1007/46942
153.16.17.48/28        fwd native  0x00000000=
  packets/bytes      28/1288
153.16.17.64/28        fwd native  0x00000000=
  packets/bytes     569/27852
153.16.17.80/28        encap       = 0x00000001
  packets/bytes     197/9453
153.16.17.96/28        fwd native  0x00000000=
  packets/bytes       0/0
153.16.17.112/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.17.176/28       fwd native  0x00000000
  packets/bytes     150/6900
153.16.17.192/28       encap       0x000= 00001
  packets/bytes     278/28562
153.16.17.224/30       encap       0x000= 00001
  packets/bytes      24/1174
153.16.17.228/30       encap       0x000= 00001
  packets/bytes      32/1546
153.16.18.16/28        fwd native  0x00000000=
  packets/bytes      56/2576
153.16.18.32/28        encap       = 0x00000001
  packets/bytes    2322/143949
153.16.18.64/28        encap       = 0x00000001
  packets/bytes     176/12465
153.16.18.80/28        encap       = 0x00000001
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes     178/11838
153.16.18.96/28        encap       = 0x00000001
  packets/bytes     183/8854
153.16.18.112/28       fwd native  0x00000000
  packets/bytes     446/20902
153.16.18.144/28       fwd native  0x00000000
  packets/bytes      15/690
153.16.18.176/28       encap       0x000= 00001
  packets/bytes      88/4795
153.16.18.208/28       encap       0x000= 00001
  packets/bytes      81/3866
153.16.18.224/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.18.240/28       encap       0x000= 00001
  packets/bytes     103/6929
153.16.19.0/24         fwd native  0x00000000=
  packets/bytes   21137/1141575
153.16.20.0/24         fwd native  0x00000000=
  packets/bytes   23187/1275992
153.16.21.0/26         fwd native  0x00000000=
  packets/bytes   35021/2276591
153.16.21.109/32       drop        = 0x00000000
  packets/bytes       0/0
153.16.21.139/32       fwd native  0x00000000
  packets/bytes     120/5760
153.16.21.141/32       fwd native  0x00000000
  packets/bytes      18/828
153.16.21.210/31       fwd native  0x00000000
  packets/bytes       0/0
153.16.22.0/26         fwd native  0x00000000=
  packets/bytes   37084/2255311
153.16.22.90/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.22.132/32       encap       0x000= 00003
  packets/bytes       0/0
153.16.22.136/29       fwd native  0x00000000
  packets/bytes       0/0
153.16.22.196/32       fwd native  0x00000000
  packets/bytes     116/5800
Prefix                 Fwd act= ion  Locator status bits
153.16.22.200/29       fwd native  0x00000000
  packets/bytes       0/0
153.16.22.212/30       fwd native  0x00000000
  packets/bytes       0/0
153.16.22.216/29       fwd native  0x00000000
  packets/bytes     232/11136
153.16.22.224/27       fwd native  0x00000000
  packets/bytes    1406/80696
153.16.23.0/24         fwd native  0x00000000=
  packets/bytes  131048/6980525
153.16.24.0/24         encap       = 0x00000001
  packets/bytes    2080/128076
153.16.25.0/28         encap       = 0x00000001
  packets/bytes     347/16626
153.16.25.16/28        encap       = 0x00000003
  packets/bytes   15523/14385604
153.16.25.32/28        fwd native  0x00000000=
  packets/bytes     438/20380
153.16.25.48/28        encap       = 0x00000001
  packets/bytes     184/9141
153.16.25.64/28        fwd native  0x00000000=
  packets/bytes     727/34886
153.16.25.112/28       fwd native  0x00000000
  packets/bytes     592/27580
153.16.25.128/28       encap       0x000= 00001
  packets/bytes     112/9970
153.16.25.151/32       drop        = 0x00000000
  packets/bytes       0/0
153.16.25.160/28       encap       0x000= 00001
  packets/bytes     112/8094
153.16.25.176/28       drop        = 0x00000001
  packets/bytes       8/368
153.16.25.192/28       encap       0x000= 00001
  packets/bytes      85/4104
153.16.25.224/28       encap       0x000= 00003
  packets/bytes    1403/756413
153.16.25.240/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.26.0/28         encap       = 0x00000001
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes   24055/21546260
153.16.26.32/28        encap       = 0x00000001
  packets/bytes     206/10582
153.16.26.64/28        fwd native  0x00000000=
  packets/bytes    1115/56171
153.16.26.80/28        fwd native  0x00000000=
  packets/bytes    1695/80454
153.16.26.96/28        fwd native  0x00000000=
  packets/bytes     474/22384
153.16.26.112/28       fwd native  0x00000000
  packets/bytes    1651/78716
153.16.26.128/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.26.192/28       encap       0x000= 00001
  packets/bytes   12171/1390825
153.16.26.224/28       encap       0x000= 00001
  packets/bytes      97/5257
153.16.26.240/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.27.0/24         fwd native  0x00000000=
  packets/bytes    5744/375960
153.16.28.0/24         encap       = 0x00000001
  packets/bytes    2452/149787
153.16.29.0/24         encap       = 0x00000003
  packets/bytes    2423/136233
153.16.30.0/28         encap       = 0x00000003
  packets/bytes    2452/152600
153.16.30.16/28        fwd native  0x00000000=
  packets/bytes    1884/99928
153.16.30.32/27        fwd native  0x00000000=
  packets/bytes   18978/1075973
153.16.30.64/26        fwd native  0x00000000=
  packets/bytes   36633/1900388
153.16.30.128/25       fwd native  0x00000000
  packets/bytes   26905/1452450
153.16.31.0/28         fwd native  0x00000000=
  packets/bytes   11114/725274
153.16.31.32/27        fwd native  0x00000000=
  packets/bytes   17526/1129516
Prefix                 Fwd act= ion  Locator status bits
153.16.31.64/26        fwd native  0x00000000=
  packets/bytes   33377/1795877
153.16.31.128/25       fwd native  0x00000000
  packets/bytes   32391/2164113
153.16.32.0/28         encap       = 0x00000001
  packets/bytes     282/13483
153.16.32.16/28        fwd native  0x00000000=
  packets/bytes     517/23782
153.16.32.48/28        fwd native  0x00000000=
  packets/bytes    1217/58912
153.16.32.64/28        fwd native  0x00000000=
  packets/bytes    1956/275832
153.16.32.80/28        encap       = 0x00000003
  packets/bytes     162/7914
153.16.32.96/28        encap       = 0x00000003
  packets/bytes     206/9995
153.16.32.112/28       fwd native  0x00000000
  packets/bytes    2917/170863
153.16.32.144/28       fwd native  0x00000000
  packets/bytes     150/6900
153.16.32.176/28       encap       0x000= 00001
  packets/bytes     411/48905
153.16.32.192/28       encap       0x000= 00001
  packets/bytes   62747/54741368
153.16.32.208/28       fwd native  0x00000000
  packets/bytes    1103/157110
153.16.32.224/28       encap       0x000= 0000F
  packets/bytes    9478/934907
153.16.32.240/28       encap       0x000= 00001
  packets/bytes     201/13637
153.16.33.0/24         fwd native  0x00000000=
  packets/bytes  125808/7498118
153.16.34.0/24         fwd native  0x00000000=
  packets/bytes   20005/1211708
153.16.35.0/24         fwd native  0x00000000=
  packets/bytes   28219/1661540
153.16.36.0/24         encap       = 0x0000000F
  packets/bytes    2403/135041
153.16.37.0/24         encap       = 0x00000007
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes     487/131776
153.16.38.0/25         encap       = 0x0000000A
  packets/bytes    4907/360740
153.16.38.128/25       encap       0x000= 0000A
  packets/bytes     749/44847
153.16.39.0/24         signal      = 0x00000000
  packets/bytes    2205/120184
153.16.40.0/24         fwd native  0x00000000=
  packets/bytes  100232/5787525
153.16.41.0/24         encap       = 0x00000003
  packets/bytes    4757/264737
153.16.43.16/28        fwd native  0x00000000=
  packets/bytes      83/3818
153.16.43.32/28        fwd native  0x00000000=
  packets/bytes     455/21510
153.16.43.64/26        fwd native  0x00000000=
  packets/bytes   40930/2405239
153.16.43.128/26       fwd native  0x00000000
  packets/bytes    7186/509900
153.16.43.192/27       fwd native  0x00000000
  packets/bytes     409/19286
153.16.43.224/28       fwd native  0x00000000
  packets/bytes     174/8352
153.16.43.241/32       encap       0x000= 00001
  packets/bytes       5/232
153.16.43.242/32       encap       0x000= 00001
  packets/bytes       1/48
153.16.44.0/28         fwd native  0x00000000=
  packets/bytes    1584/78965
153.16.44.16/28        fwd native  0x00000000=
  packets/bytes     290/13920
153.16.44.32/28        encap       = 0x00000003
  packets/bytes     137/7376
153.16.44.48/28        encap       = 0x00000001
  packets/bytes    6429/493372
153.16.44.64/28        encap       = 0x00000001
  packets/bytes     218/13336
153.16.44.80/28        fwd native  0x00000000=
  packets/bytes     462/21870
Prefix                 Fwd act= ion  Locator status bits
153.16.44.96/28        encap       = 0x00000001
  packets/bytes     230/16736
153.16.44.128/28       fwd native  0x00000000
  packets/bytes     232/11136
153.16.44.144/28       encap       0x000= 00001
  packets/bytes   10028/461440
153.16.44.160/28       encap       0x000= 00001
  packets/bytes      81/3912
153.16.44.176/28       fwd native  0x00000000
  packets/bytes       0/0
153.16.44.192/28       encap       0x000= 00001
  packets/bytes      63/3008
153.16.44.208/28       encap       0x000= 00003
  packets/bytes      73/3655
153.16.45.0/24         fwd native  0x00000000=
  packets/bytes   14189/971315
153.16.46.0/24         fwd native  0x00000000=
  packets/bytes   17446/1122565
153.16.47.0/28         fwd native  0x00000000=
  packets/bytes     513/25414
153.16.47.16/28        encap       = 0x00000001
  packets/bytes     152/7558
153.16.47.32/28        fwd native  0x00000000=
  packets/bytes     228/10488
153.16.47.48/28        fwd native  0x00000000=
  packets/bytes      84/3864
153.16.47.64/28        fwd native  0x00000000=
  packets/bytes     519/23874
153.16.47.96/28        fwd native  0x00000000=
  packets/bytes    1462/70032
153.16.47.128/28       fwd native  0x00000000
  packets/bytes     477/22290
153.16.47.160/27       encap       0x000= 00001
  packets/bytes     150/7376
153.16.47.208/28       encap       0x000= 00001
  packets/bytes      90/6744
153.16.47.224/28       encap       0x000= 00001
  packets/bytes     726/496246
153.16.47.240/28       fwd native  0x00000000
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes     125/6000
153.16.48.0/28         encap       = 0x00000001
  packets/bytes    9822/787514
153.16.48.16/28        fwd native  0x00000000=
  packets/bytes    1166/54548
153.16.48.32/28        encap       = 0x00000001
  packets/bytes    2419/1368023
153.16.48.64/26        fwd native  0x00000000=
  packets/bytes   30536/1951066
153.16.48.128/25       fwd native  0x00000000
  packets/bytes   27251/1791407
153.16.49.0/24         fwd native  0x00000000=
  packets/bytes   89806/5103369
153.16.50.0/23         fwd native  0x00000000=
  packets/bytes  187276/10548451
153.16.52.0/22         fwd native  0x00000000=
  packets/bytes  416440/23021471
153.16.56.0/21         fwd native  0x00000000=
  packets/bytes  791716/45648478
153.16.64.0/24         encap       = 0x00000003
  packets/bytes   19959/25775078
153.16.65.0/32         drop       &= nbsp;0x00000000
  packets/bytes       2/120
153.16.65.7/32         drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.65.15/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.66.7/32         drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.66.16/28        fwd native  0x00000000=
  packets/bytes       0/0
153.16.66.32/28        fwd native  0x00000000=
  packets/bytes       0/0
153.16.66.64/28        encap       = 0x00000001
  packets/bytes     216/12095
153.16.66.80/28        encap       = 0x00000001
  packets/bytes     143/7048
153.16.66.192/28       encap       0x000= 00001
  packets/bytes     136/13397
Prefix                 Fwd act= ion  Locator status bits
153.16.66.208/28       encap       0x000= 00001
  packets/bytes     106/5148
153.16.66.224/28       encap       0x000= 00001
  packets/bytes      95/4496
153.16.67.0/24         encap       = 0x00000003
  packets/bytes    2420/145387
153.16.68.165/32       drop        = 0x00000000
  packets/bytes       0/0
153.16.68.181/32       drop        = 0x00000000
  packets/bytes       0/0
153.16.69.62/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.69.93/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.69.188/32       drop        = 0x00000000
  packets/bytes       0/0
153.16.70.0/28         encap       = 0x00000003
  packets/bytes     210/11243
153.16.70.16/29        encap       = 0x00000002
  packets/bytes      75/3600
153.16.70.24/29        encap       = 0x00000002
  packets/bytes      48/2386
153.16.70.41/32        drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.70.64/28        encap       = 0x00000001
  packets/bytes    5671/891042
153.16.70.80/28        encap       = 0x00000001
  packets/bytes     193/9490
153.16.70.96/28        encap       = 0x00000001
  packets/bytes     165/9175
153.16.70.112/28       encap       0x000= 00001
  packets/bytes     192/9474
153.16.70.128/25       fwd native  0x00000000
  packets/bytes   34977/1919726
153.16.71.0/24         fwd native  0x00000000=
  packets/bytes  113426/6058747
153.16.72.4/32         drop       &= nbsp;0x00000000
  packets/bytes       0/0
153.16.73.0/24         fwd native  0x00000000=
Prefix                 Fwd act= ion  Locator status bits
  packets/bytes   96304/5184251
153.16.74.0/24         encap       = 0x00000001
  packets/bytes    2200/127117
153.16.75.0/24         fwd native  0x00000000=
  packets/bytes  100121/5766560
153.16.76.0/22         fwd native  0x00000000=
  packets/bytes  426560/24941173
153.16.80.0/20         fwd native  0x00000000=
  packets/bytes  227475/14382760
153.16.96.0/19         fwd native  0x00000000=
  packets/bytes 3275775/184546349
153.16.128.0/19        fwd native  0x00000000=
  packets/bytes 3434964/196842926
153.16.160.0/19        fwd native  0x00000000=
  packets/bytes 4070673/229418687
153.16.192.0/18        fwd native  0x00000000=
  packets/bytes 7177127/405113420



On 22.01.2013, at 11:22, Damien Saucez <damien.saucez@gmail.com> wrote:


On 22 Jan 2013, at 10:15, Luigi Iannone <ggx@gigix.net> wrote:

Hi All,

the definition of LSB as of the to-be-soon-rfc lisp specification is:<= /div> 

LISP Locator Status Bits (LSBs):  Wh=
en the L-bit is also set, the
      locator status bits field in the LISP header is set by an ITR to
      indicate to an ETR the up/down status of the Locators in the
      source site.

I think that this clears Damien's question since LSB has no "reac= hability" meaning, rather it is a message from the site telling "= from my perspective ETR X is up and running".


Yes, it is not a problem of reachability but a question of status. How= ever, how is the
status defined but the router that sends the LSB? How does it know tha= t the locator
is up or down? How can we make sure that the LSB will be the same, wha= tever router
is building it?

Another question, how bad/good would it be for the traffic if two rout= ers give different
LSBs?

(BTW this may help debugging, since if the ETR is running but not reachable= from the outside this clearly shows that the problem is along the path som= ewhere. Yeah=85 could be a long path=85 but it is still useful information)= .

I agree, that in a controlled environment LSB can be very helpful to d= ebug
the network. In the Internet where the topology is unknown I don't kno= w if
it is a very relevant information, but it depends how the LSB is const= ructed.


The main concern is about security. Obviously LSB can be easily spoofe= d in a public environment and this is documented in section 6.4.1 of the dr= aft-ietf-lisp-threats, which recommends:

   Locator Status Bits can be blindl=
y trusted only in secure
   environments.  In the general unsecured Internet environment, the
   safest practice for xTRs is to confirm the status change
   through the mapping system.


So IMHO the thing to do is to simply put a reference to the lisp-threa= ts draft about the use of LSBs.



If the LSB has to be verified, I would then prefer to use versioning.<= /div>

Damien Saucez


ciao

Luigi





On 22 Jan. 2013, at 04:15 , Dino Farinacci <farinacci@gmail.com> wrote:

They have the same meaning in all environment. It= is a question when they should be verified. An LSB that changes in a publi= c environment can cause a Map-Request to be sent and a signed Map-Reply can= verify the LSB in  an authenticated matter.

Dino

On Jan 21, 2013, at 6:05 PM, Ronald Bonica <rbonica@juniper.net> wrote:

Dino,

But isn't it troubling that the bits have one meaning in a controlled envir= onment and another in the great-wide Internet?

            &nb= sp;            =             &nb= sp;    Ron


-----Original Message-----
From: lisp-bounces@ietf.org [m= ailto:lisp-bounces@ietf.org] On Beh= alf Of
Dino Farinacci
Sent: Monday, January 21, 2013 5:51 PM
To: Noel Chiappa
Cc: lisp-interest@cisco.com;= lisp@ietf.org; lisp-
beta@external.cisco.com
Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet
deployment?

(I don't remember off the top of my head why I di= dn't like them: I
think it was a combination of the fixed number of bits, the fact that
it might be difficult for ETR X to know the state of ETR Y, the fact
that 'reachable from ITR A' [which you _really_ need to have anyway]
is a subset of 'up', etc, etc. But we didn't desperately need the
header bits, and the mechanism wasn't positively harmful, so I didn't
bother to put up a big fight over it... :-)

Maybe because they could be spoofed?

But they are good in control environments to take ETRs out of service
without having to update the mapping database.

Dino


_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org= /mailman/listinfo/lisp


_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org= /mailman/listinfo/lisp

_______________________________________________
lisp mailing list
lisp@ietf.org
https://www.ietf.org= /mailman/listinfo/lisp


--_000_C50195086D1A7144938C2C63DB7C55520457DE95xmbalnx08ciscoc_-- From D.Kalogeras@noc.ntua.gr Wed Jan 23 02:32:37 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 727DE21F8514 for ; Wed, 23 Jan 2013 02:32:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z-i75rivdiJ8 for ; Wed, 23 Jan 2013 02:32:36 -0800 (PST) Received: from achilles.noc.ntua.gr (achilles.noc.ntua.gr [IPv6:2001:648:2000:de::210]) by ietfa.amsl.com (Postfix) with ESMTP id 2556121F8501 for ; Wed, 23 Jan 2013 02:32:35 -0800 (PST) Received: from [IPv6:::1] ([IPv6:2001:648:2000:dc:7532:3c75:dcd9:5b63]) (authenticated bits=0) by achilles.noc.ntua.gr (8.14.5/8.14.5) with ESMTP id r0NATs4m049340 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NOT); Wed, 23 Jan 2013 12:29:54 +0200 (EET) (envelope-from D.Kalogeras@noc.ntua.gr) Message-ID: <50FFBB98.2090102@noc.ntua.gr> Date: Wed, 23 Jan 2013 12:29:44 +0200 From: Dimitris Kalogeras Organization: NOC-NTUA User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Lori Jakab References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <93FFF2BE-48D0-4695-A397-1421CE2B1747@gigix.net> <50FFA880.2060902@ac.upc.edu> In-Reply-To: <50FFA880.2060902@ac.upc.edu> X-Enigmail-Version: 1.5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7 (achilles.noc.ntua.gr [IPv6:2001:648:2000:de::210]); Wed, 23 Jan 2013 12:29:57 +0200 (EET) X-Virus-Scanned: clamav-milter 0.97.5 at achilles.noc.ntua.gr X-Virus-Status: Clean X-Mailman-Approved-At: Wed, 23 Jan 2013 08:26:11 -0800 Cc: Noel Chiappa , "lisp-interest@cisco.com" , "lisp-beta@external.cisco.com" , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 10:32:37 -0000 On 23/1/2013 11:08 πμ, Lori Jakab wrote: > On 01/22/13 12:22, Damien Saucez wrote: >> On 22 Jan 2013, at 10:15, Luigi Iannone > > wrote: >> >>> Hi All, >>> >>> the definition of LSB as of the to-be-soon-rfc lisp specification is: >>> >>> LISP Locator Status Bits (LSBs): When the L-bit is also set, the >>> locator status bits field in the LISP header is set by an ITR to >>> indicate to an ETR the up/down status of the Locators in the >>> source site. >>> >>> I think that this clears Damien's question since LSB has no >>> "reachability" meaning, rather it is a message from the site telling >>> "from my perspective ETR X is up and running". >>> >> Yes, it is not a problem of reachability but a question of status. >> However, how is the >> status defined but the router that sends the LSB? How does it know >> that the locator >> is up or down? How can we make sure that the LSB will be the same, >> whatever router >> is building it? > I think this depends a lot on the implementation. For example, if you > wanted to have the LSBs synced, you could use the status from the > locator records in the Map-Notify messages, and you would get the Map > Server view of status. With a more complex implementation, you could > probably get a better view. But I think it depends a lot on the > implementation. > >> Another question, how bad/good would it be for the traffic if two >> routers give different >> LSBs? > Again, that's something implementation specific, I don't think it's specced. > >>> (BTW this may help debugging, since if the ETR is running but not >>> reachable from the outside this clearly shows that the problem is >>> along the path somewhere. Yeah… could be a long path… but it is still >>> useful information). >> I agree, that in a controlled environment LSB can be very helpful to debug >> the network. In the Internet where the topology is unknown I don't know if >> it is a very relevant information, but it depends how the LSB is >> constructed. > Exactly, depends on the implementation. But the document we discuss is > about deployment, so operators can only do what implementations allow > them to do. I agree with Lori, I assume that this bit carries different meanings whether there is an "hot" association with another instance or some "cold" association, where "hot" and "cold " could have relevant meanings when used in standby scenarios --Dimitris >>> The main concern is about security. Obviously LSB can be easily >>> spoofed in a public environment and this is documented in section >>> 6.4.1 of the draft-ietf-lisp-threats, which recommends: >>> >>> Locator Status Bits can be blindly trusted only in secure >>> environments. In the general unsecured Internet environment, the >>> safest practice for xTRs is to confirm the status change >>> through the mapping system. >>> >>> >>> So IMHO the thing to do is to simply put a reference to the >>> lisp-threats draft about the use of LSBs. >>> >> >> If the LSB has to be verified, I would then prefer to use versioning. > I will put a reference to the threats draft, and suggest versioning as > an alternative. > > Thanks for all the input! > > -Lori > >> Damien Saucez >> >> >>> ciao >>> >>> Luigi >>> >>> >>> >>> >>> >>> On 22 Jan. 2013, at 04:15 , Dino Farinacci >> > wrote: >>> >>>> They have the same meaning in all environment. It is a question when >>>> they should be verified. An LSB that changes in a public environment >>>> can cause a Map-Request to be sent and a signed Map-Reply can verify >>>> the LSB in an authenticated matter. >>>> >>>> Dino >>>> >>>> On Jan 21, 2013, at 6:05 PM, Ronald Bonica >>> > wrote: >>>> >>>>> Dino, >>>>> >>>>> But isn't it troubling that the bits have one meaning in a >>>>> controlled environment and another in the great-wide Internet? >>>>> >>>>> Ron >>>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: lisp-bounces@ietf.org >>>>>> [mailto:lisp-bounces@ietf.org ] On Behalf Of >>>>>> Dino Farinacci >>>>>> Sent: Monday, January 21, 2013 5:51 PM >>>>>> To: Noel Chiappa >>>>>> Cc: lisp-interest@cisco.com ; >>>>>> lisp@ietf.org ; lisp- >>>>>> beta@external.cisco.com >>>>>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>>>>> deployment? >>>>>> >>>>>>> (I don't remember off the top of my head why I didn't like them: I >>>>>>> think it was a combination of the fixed number of bits, the fact that >>>>>>> it might be difficult for ETR X to know the state of ETR Y, the fact >>>>>>> that 'reachable from ITR A' [which you _really_ need to have anyway] >>>>>>> is a subset of 'up', etc, etc. But we didn't desperately need the >>>>>>> header bits, and the mechanism wasn't positively harmful, so I didn't >>>>>>> bother to put up a big fight over it... :-) >>>>>> Maybe because they could be spoofed? >>>>>> >>>>>> But they are good in control environments to take ETRs out of service >>>>>> without having to update the mapping database. >>>>>> >>>>>> Dino >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> lisp mailing list >>>>>> lisp@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/lisp >>>>> >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>> _______________________________________________ >>> lisp mailing list >>> lisp@ietf.org >>> https://www.ietf.org/mailman/listinfo/lisp >> >> >> _______________________________________________ >> lisp mailing list >> lisp@ietf.org >> https://www.ietf.org/mailman/listinfo/lisp -- Dimitrios K. Kalogeras Electrical Engineer Ph.D. Network Engineer NTUA/GR-Net Network Management Center _____________________________________ skype: aweboy voice: +30-210-772 1863 fax: +30-210-772 1866 e-mail: D.Kalogeras@noc.ntua.gr From rbonica@juniper.net Wed Jan 23 08:39:38 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F80621F855C for ; Wed, 23 Jan 2013 08:39:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.967 X-Spam-Level: X-Spam-Status: No, score=-102.967 tagged_above=-999 required=5 tests=[AWL=0.500, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O9lnB3jw3vlV for ; Wed, 23 Jan 2013 08:39:37 -0800 (PST) Received: from exprod7og119.obsmtp.com (exprod7og119.obsmtp.com [64.18.2.16]) by ietfa.amsl.com (Postfix) with ESMTP id 2F67621F855A for ; Wed, 23 Jan 2013 08:39:37 -0800 (PST) Received: from P-EMHUB01-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob119.postini.com ([64.18.6.12]) with SMTP ID DSNKUQASSFaU15XKBhh8zbZwZsnIeTSdwSaQ@postini.com; Wed, 23 Jan 2013 08:39:37 PST Received: from P-CLDFE01-HQ.jnpr.net (172.24.192.59) by P-EMHUB01-HQ.jnpr.net (172.24.192.35) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 23 Jan 2013 08:35:46 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.59) with Microsoft SMTP Server id 14.1.355.2; Wed, 23 Jan 2013 08:35:45 -0800 Received: from ch1outboundpool.messaging.microsoft.com (216.32.181.184) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 23 Jan 2013 08:43:45 -0800 Received: from mail239-ch1-R.bigfish.com (10.43.68.225) by CH1EHSOBE014.bigfish.com (10.43.70.64) with Microsoft SMTP Server id 14.1.225.23; Wed, 23 Jan 2013 16:35:44 +0000 Received: from mail239-ch1 (localhost [127.0.0.1]) by mail239-ch1-R.bigfish.com (Postfix) with ESMTP id C095714800B5 for ; Wed, 23 Jan 2013 16:35:44 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT004.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: -24 X-BigFish: PS-24(zz98dI9371I542I1432Izz1ee6h1de0h1202h1e76h1d1ah1d2ahz8dhz8275ch1033IL8275dh8275bhz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1155h) Received: from mail239-ch1 (localhost.localdomain [127.0.0.1]) by mail239-ch1 (MessageSwitch) id 1358958942878983_16723; Wed, 23 Jan 2013 16:35:42 +0000 (UTC) Received: from CH1EHSMHS028.bigfish.com (snatpool2.int.messaging.microsoft.com [10.43.68.234]) by mail239-ch1.bigfish.com (Postfix) with ESMTP id CB3131740050; Wed, 23 Jan 2013 16:35:42 +0000 (UTC) Received: from BY2PRD0512HT004.namprd05.prod.outlook.com (157.56.238.5) by CH1EHSMHS028.bigfish.com (10.43.70.28) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 23 Jan 2013 16:35:42 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.248]) by BY2PRD0512HT004.namprd05.prod.outlook.com ([10.255.243.37]) with mapi id 14.16.0257.004; Wed, 23 Jan 2013 16:35:41 +0000 From: Ronald Bonica To: Dino Farinacci Thread-Topic: [lisp] Should we use Locator-Status-Bits in Internet deployment? Thread-Index: AQHN+B6xH2WLoA+jRkOqeTVkDiHV1phUY2eAgAA1xNCAABP7AIACZLjg Date: Wed, 23 Jan 2013 16:35:41 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> In-Reply-To: <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%GMAIL.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Cc: "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 16:39:38 -0000 Hi Dino, Sorry to be slow, but this is one of those cases where a complete expansion= might be called for: 1) On the public Internet, we shouldn't trust the LSB at all. If an ITR det= ects any transition (0-to-1 or 1-to-0), verify it with the mapping system. 2) In a controlled Environment, we can trust the LSB 2a) If the ITR detects a transition from 1-to-0, we should believe it. Ther= e is no need to verify. In fact, if we did check with the mapping system, w= e might find that the mapping system still reports the bit as 1. This is be= cause, as you say below, LSB "are good in control[ed] environments to take = ETRs out of service without having to update the mapping database." 2b) If the ITR detects a transition from 0-to-1, we should believe it. Ther= e is no need to verify. But if we did verify, it would be more likely that = the mapping system would report the same thing. Also, in the bullet points above, I am not quite sure what the definition o= f a "controlled environment" is. Am I correct in assuming that an environme= nt is "controlled" if it satisfies both of the following requirements: -controlled from a security perspective. Bad guys cannot spoof LISP control= information on the data plane. -controlled from a routing perspective. ETRs are aware of each others' stat= us (and, therefore, can report on each others' status) because the particip= ate in a common IGP. Ron > -----Original Message----- > From: Dino Farinacci [mailto:farinacci@gmail.com] > Sent: Monday, January 21, 2013 10:15 PM > To: Ronald Bonica > Cc: Noel Chiappa; lisp-interest@cisco.com; lisp@ietf.org; lisp- > beta@external.cisco.com > Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet > deployment? >=20 > They have the same meaning in all environment. It is a question when > they should be verified. An LSB that changes in a public environment > can cause a Map-Request to be sent and a signed Map-Reply can verify > the LSB in an authenticated matter. >=20 > Dino >=20 > On Jan 21, 2013, at 6:05 PM, Ronald Bonica wrote: >=20 > > Dino, > > > > But isn't it troubling that the bits have one meaning in a controlled > environment and another in the great-wide Internet? > > > > Ron > > > > > >> -----Original Message----- > >> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On Behalf > >> Of Dino Farinacci > >> Sent: Monday, January 21, 2013 5:51 PM > >> To: Noel Chiappa > >> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- > >> beta@external.cisco.com > >> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet > >> deployment? > >> > >>> (I don't remember off the top of my head why I didn't like them: I > >>> think it was a combination of the fixed number of bits, the fact > >>> that it might be difficult for ETR X to know the state of ETR Y, > the > >>> fact that 'reachable from ITR A' [which you _really_ need to have > >>> anyway] is a subset of 'up', etc, etc. But we didn't desperately > >>> need the header bits, and the mechanism wasn't positively harmful, > >>> so I didn't bother to put up a big fight over it... :-) > >> > >> Maybe because they could be spoofed? > >> > >> But they are good in control environments to take ETRs out of > service > >> without having to update the mapping database. > >> > >> Dino > >> > >> > >> _______________________________________________ > >> lisp mailing list > >> lisp@ietf.org > >> https://www.ietf.org/mailman/listinfo/lisp > > > > From lear@cisco.com Wed Jan 23 08:54:17 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F18D21F8566 for ; Wed, 23 Jan 2013 08:54:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9FDaOUWr8wO4 for ; Wed, 23 Jan 2013 08:54:17 -0800 (PST) Received: from ams-iport-1.cisco.com (ams-iport-1.cisco.com [144.254.224.140]) by ietfa.amsl.com (Postfix) with ESMTP id AFF0221F854F for ; Wed, 23 Jan 2013 08:54:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=449; q=dns/txt; s=iport; t=1358960056; x=1360169656; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=ffp5UP5hvHs6xPkbkOChGRzL7WmaghQPJwGY2tZVvsw=; b=JUb66xAx0bpOrTVde4Uv2ihD9tfcVVdRvJ24prWXJMfYyWmMbiS5NL6I iAp4b4p+Yjv/4QriKz/r6KRb7vzYv8QZBzSeTiWdis/0Bnnin0ED881oC FP6oujVCyc3oaJxaZpUg/aGuvCXhAJyHs4w2JXmYkcjV3yRLO4Q4V8XoQ M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFAEoVAFGQ/khR/2dsb2JhbABEhkW3axZzgh4BAQEEI1UBEAsOCgICBRYLAgIJAwIBAgFFBg0BBwEBiBaqcpMEgSOOfYETA5YMkEmCdg X-IronPort-AV: E=Sophos;i="4.84,523,1355097600"; d="scan'208";a="149690913" Received: from ams-core-1.cisco.com ([144.254.72.81]) by ams-iport-1.cisco.com with ESMTP; 23 Jan 2013 16:54:15 +0000 Received: from dhcp-10-55-83-209.cisco.com (dhcp-10-55-83-209.cisco.com [10.55.83.209]) by ams-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id r0NGsEUK027570 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 23 Jan 2013 16:54:14 GMT Message-ID: <510015B6.9040109@cisco.com> Date: Wed, 23 Jan 2013 17:54:14 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Ronald Bonica References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> X-Enigmail-Version: 1.5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 16:54:17 -0000 Ron, Sorry to be repeating myself... On 1/23/13 5:35 PM, Ronald Bonica wrote: > Hi Dino, > > Sorry to be slow, but this is one of those cases where a complete expansion might be called for: > > 1) On the public Internet, we shouldn't trust the LSB at all. If an ITR detects any transition (0-to-1 or 1-to-0), verify it with the mapping system. ... verify it out of band or externally (through the mapping system being one approach). From lear@cisco.com Wed Jan 23 10:33:55 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2050E21F8654 for ; Wed, 23 Jan 2013 10:33:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XmUGTYQLcwP3 for ; Wed, 23 Jan 2013 10:33:53 -0800 (PST) Received: from ams-iport-2.cisco.com (ams-iport-2.cisco.com [144.254.224.141]) by ietfa.amsl.com (Postfix) with ESMTP id 369B121F8686 for ; Wed, 23 Jan 2013 10:33:52 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=539; q=dns/txt; s=iport; t=1358966033; x=1360175633; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=eYY/gY1D+bbnn5ItHI9pOx1UrQHpsrG/1CXf7ngV9vI=; b=EKd6r883BNycUNQbbwdH2ZmGRV1j0TNR09Q/2DK+1zWKgMJuhyDSZ4xb EZT7bMdao9+Z3o1clj/KOa92UWXZqlNGjJ/tzFvDP1uKHvYeE4rjtJ2J8 nv7xS3ckl1DkSHczuSF9OINhf4z5r9cLX4LlkTVu4Swbg9co/d0RA3xXZ g=; X-IronPort-AV: E=Sophos;i="4.84,523,1355097600"; d="scan'208";a="79945451" Received: from ams-core-3.cisco.com ([144.254.72.76]) by ams-iport-2.cisco.com with ESMTP; 23 Jan 2013 18:33:50 +0000 Received: from dhcp-10-55-83-209.cisco.com (dhcp-10-55-83-209.cisco.com [10.55.83.209]) by ams-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id r0NIXo1H025449 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 23 Jan 2013 18:33:50 GMT Message-ID: <51002D0D.1070802@cisco.com> Date: Wed, 23 Jan 2013 19:33:49 +0100 From: Eliot Lear User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130107 Thunderbird/17.0.2 MIME-Version: 1.0 To: Eliot Lear References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> <510015B6.9040109@cisco.com> In-Reply-To: <510015B6.9040109@cisco.com> X-Enigmail-Version: 1.5 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 18:33:55 -0000 On 1/23/13 5:54 PM, Eliot Lear wrote: > Ron, > > Sorry to be repeating myself... > > On 1/23/13 5:35 PM, Ronald Bonica wrote: >> Hi Dino, >> >> Sorry to be slow, but this is one of those cases where a complete expansion might be called for: >> >> 1) On the public Internet, we shouldn't trust the LSB at all. If an ITR detects any transition (0-to-1 or 1-to-0), verify it with the mapping system. > ... verify it out of band or externally (through the mapping system > being one approach). > > Oh and s/ITR/ETR/ right? From jnc@mercury.lcs.mit.edu Wed Jan 23 10:44:18 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F9FD21F87AC for ; Wed, 23 Jan 2013 10:44:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9FQfdK538JuJ for ; Wed, 23 Jan 2013 10:44:17 -0800 (PST) Received: from mercury.lcs.mit.edu (mercury.lcs.mit.edu [18.26.0.122]) by ietfa.amsl.com (Postfix) with ESMTP id A501021F8790 for ; Wed, 23 Jan 2013 10:44:17 -0800 (PST) Received: by mercury.lcs.mit.edu (Postfix, from userid 11178) id ECD5D18C0D8; Wed, 23 Jan 2013 13:44:16 -0500 (EST) To: lisp@ietf.org Message-Id: <20130123184416.ECD5D18C0D8@mercury.lcs.mit.edu> Date: Wed, 23 Jan 2013 13:44:16 -0500 (EST) From: jnc@mercury.lcs.mit.edu (Noel Chiappa) Cc: jnc@mercury.lcs.mit.edu Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 18:44:18 -0000 > From: Eliot Lear >> If an ITR detects any transition (0 -to-1 or 1-to-0), verify it > Oh and s/ITR/ETR/ right? No, I don't think so. LSBs are used to tell ITRs the status of ETRs, so ITRs are the things which will use them - and should verify them. But, to make a larger point, I don't think asking the mapping system is really going to be the way to verify any changes - the whole point of LSBs (I thought) was to cover an interim level of dynamics between i) changing the mappings (i.e. updating the mapping system) and really dynamic stuff (e.g. reachability failures). So I don't think status changes reflected in the LSB would _necessarily_ show up in the mapping database.* (* One use I heard postulated for LSBs was if you wanted to change the mapping, and permanently _remove_ an ETR, since ITRs might not pick up a new mapping entry right away, you could mark it 'down' in the LSBs. Or something like that... I forget how you tell which bits in an LSB correspond to what RLOCs. And of course I think that was before mapping sequence/version numbers came in, which allow an ITR to quickly discover that it has an outdate mapping.) Maybe I'm confused, but I'm still not hearing why the LSB buys us anything above and beyond what we have to have anyway: i) mappings, and some way to detect that an ITR has an outdated copy of one, and ii) reachability (which necessarily has to discover, on a fairly real-time basis, a superset of 'up'). Noel From rbonica@juniper.net Wed Jan 23 12:59:10 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4F7221F8828 for ; Wed, 23 Jan 2013 12:59:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.134 X-Spam-Level: X-Spam-Status: No, score=-103.134 tagged_above=-999 required=5 tests=[AWL=0.333, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNRESOLVED_TEMPLATE=3.132, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fnT+0lQoR9HO for ; Wed, 23 Jan 2013 12:59:10 -0800 (PST) Received: from exprod7og118.obsmtp.com (exprod7og118.obsmtp.com [64.18.2.8]) by ietfa.amsl.com (Postfix) with ESMTP id 4A09921F8694 for ; Wed, 23 Jan 2013 12:59:02 -0800 (PST) Received: from P-EMHUB03-HQ.jnpr.net ([66.129.224.36]) (using TLSv1) by exprod7ob118.postini.com ([64.18.6.12]) with SMTP ID DSNKUQBPFbTanS1KGQP2o2jFTPeqjPpuFarv@postini.com; Wed, 23 Jan 2013 12:59:02 PST Received: from P-CLDFE02-HQ.jnpr.net (172.24.192.60) by P-EMHUB03-HQ.jnpr.net (172.24.192.37) with Microsoft SMTP Server (TLS) id 8.3.213.0; Wed, 23 Jan 2013 12:57:41 -0800 Received: from o365mail.juniper.net (207.17.137.224) by o365mail.juniper.net (172.24.192.60) with Microsoft SMTP Server id 14.1.355.2; Wed, 23 Jan 2013 12:57:41 -0800 Received: from tx2outboundpool.messaging.microsoft.com (65.55.88.11) by o365mail.juniper.net (207.17.137.224) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 23 Jan 2013 13:05:41 -0800 Received: from mail40-tx2-R.bigfish.com (10.9.14.236) by TX2EHSOBE006.bigfish.com (10.9.40.26) with Microsoft SMTP Server id 14.1.225.23; Wed, 23 Jan 2013 20:57:41 +0000 Received: from mail40-tx2 (localhost [127.0.0.1]) by mail40-tx2-R.bigfish.com (Postfix) with ESMTP id C6B3E300690 for ; Wed, 23 Jan 2013 20:57:40 +0000 (UTC) X-Forefront-Antispam-Report: CIP:157.56.238.5; KIP:(null); UIP:(null); (null); H:BY2PRD0512HT003.namprd05.prod.outlook.com; R:internal; EFV:INT X-SpamScore: -9 X-BigFish: PS-9(zz146fI1e83M148cI1432I1418Izz1ee6h1de0h1202h1e76h1d1ah1d2ahzzz2dh2a8h668h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1155h) Received: from mail40-tx2 (localhost.localdomain [127.0.0.1]) by mail40-tx2 (MessageSwitch) id 1358974658813323_5774; Wed, 23 Jan 2013 20:57:38 +0000 (UTC) Received: from TX2EHSMHS019.bigfish.com (unknown [10.9.14.243]) by mail40-tx2.bigfish.com (Postfix) with ESMTP id B789A2C007F; Wed, 23 Jan 2013 20:57:38 +0000 (UTC) Received: from BY2PRD0512HT003.namprd05.prod.outlook.com (157.56.238.5) by TX2EHSMHS019.bigfish.com (10.9.99.119) with Microsoft SMTP Server (TLS) id 14.1.225.23; Wed, 23 Jan 2013 20:57:38 +0000 Received: from BY2PRD0512MB653.namprd05.prod.outlook.com ([169.254.5.248]) by BY2PRD0512HT003.namprd05.prod.outlook.com ([10.255.243.36]) with mapi id 14.16.0257.004; Wed, 23 Jan 2013 20:57:34 +0000 From: Ronald Bonica To: Noel Chiappa , "lisp@ietf.org" , Dino Farinacci Thread-Topic: [lisp] Should we use Locator-Status-Bits in Internet deployment? Thread-Index: AQHN+ZmlH2WLoA+jRkOqeTVkDiHV1phXWtnw Date: Wed, 23 Jan 2013 20:57:34 +0000 Message-ID: <2CF4CB03E2AA464BA0982EC92A02CE2501E55E2C@BY2PRD0512MB653.namprd05.prod.outlook.com> References: <20130123184416.ECD5D18C0D8@mercury.lcs.mit.edu> In-Reply-To: <20130123184416.ECD5D18C0D8@mercury.lcs.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [66.129.232.2] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% X-FOPE-CONNECTOR: Id%12219$Dn%MERCURY.LCS.MIT.EDU$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%IETF.ORG$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net X-FOPE-CONNECTOR: Id%12219$Dn%GMAIL.COM$RO%2$TLS%5$FQDN%onpremiseedge-1018244.customer.frontbridge.com$TlsDn%o365mail.juniper.net Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jan 2013 20:59:11 -0000 >=20 >=20 > Maybe I'm confused, but I'm still not hearing why the LSB buys us > anything above and beyond what we have to have anyway: i) mappings, and > some way to detect that an ITR has an outdated copy of one, and ii) > reachability (which necessarily has to discover, on a fairly real-time > basis, a superset of 'up'). >=20 Noel, Dino, Thanks for clearing up my misconceptions regarding LSB function. Now, I thi= nk that we are in a better position to discuss Noel's question, above. Dino has suggested that the LSB provides a convenient way for ETRs to infor= m ITRs that locators have been taken in or out of service. This can be done= without involving the mapping service. However, the mechanism only works in "controlled environments". Furthermore= , even in controlled environments, when the LSB=3D=3D1, the ITR still has t= o test for reachability. This is because a locator can be in service, but u= nreachable from a particular ITR. (I am not sure about this, but when the L= SB=3D=3D0, might the ITR have to test for reachability anyway, just to ensu= re that things haven't changed). Do I have this much right? If so, does the LSB offer enough to be worth the complexity and processor l= oad. Ron From wwwrun@rfc-editor.org Wed Jan 23 20:01:48 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAFAE21F854F; Wed, 23 Jan 2013 20:01:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.84 X-Spam-Level: X-Spam-Status: No, score=-101.84 tagged_above=-999 required=5 tests=[AWL=0.760, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LSS0pK5oCXdU; Wed, 23 Jan 2013 20:01:48 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 49AC921F854C; Wed, 23 Jan 2013 20:01:48 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 75CD1B1E002; Wed, 23 Jan 2013 19:50:32 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035032.75CD1B1E002@rfc-editor.org> Date: Wed, 23 Jan 2013 19:50:32 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6830 on The Locator/ID Separation Protocol (LISP) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:01:48 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6830 Title: The Locator/ID Separation Protocol (LISP) Author: D. Farinacci, V. Fuller, D. Meyer, D. Lewis Status: Experimental Stream: IETF Date: January 2013 Mailbox: farinacci@gmail.com, vaf@vaf.net, dmm@1-4-5.net, darlewis@cisco.com Pages: 75 Characters: 189977 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-24.txt URL: http://www.rfc-editor.org/rfc/rfc6830.txt This document describes a network-layer-based protocol that enables separation of IP addresses into two new numbering spaces: Endpoint Identifiers (EIDs) and Routing Locators (RLOCs). No changes are required to either host protocol stacks or to the "core" of the Internet infrastructure. The Locator/ID Separation Protocol (LISP) can be incrementally deployed, without a "flag day", and offers Traffic Engineering, multihoming, and mobility benefits to early adopters, even when there are relatively few LISP-capable sites. Design and development of LISP was largely motivated by the problem statement produced by the October 2006 IAB Routing and Addressing Workshop. This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:02:05 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6449221F8740; Wed, 23 Jan 2013 20:02:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.967 X-Spam-Level: X-Spam-Status: No, score=-101.967 tagged_above=-999 required=5 tests=[AWL=0.633, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nu59R6swi-7z; Wed, 23 Jan 2013 20:02:04 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id D855621F8712; Wed, 23 Jan 2013 20:02:04 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 35A48B1E006; Wed, 23 Jan 2013 19:50:49 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035049.35A48B1E006@rfc-editor.org> Date: Wed, 23 Jan 2013 19:50:49 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6831 on The Locator/ID Separation Protocol (LISP) for Multicast Environments X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:02:05 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6831 Title: The Locator/ID Separation Protocol (LISP) for Multicast Environments Author: D. Farinacci, D. Meyer, J. Zwiebel, S. Venaas Status: Experimental Stream: IETF Date: January 2013 Mailbox: farinacci@gmail.com, dmm@cisco.com, jzwiebel@cruzio.com, stig@cisco.com Pages: 28 Characters: 71901 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-multicast-14.txt URL: http://www.rfc-editor.org/rfc/rfc6831.txt This document describes how inter-domain multicast routing will function in an environment where Locator/ID Separation is deployed using the Locator/ID Separation Protocol (LISP) architecture. This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:02:26 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF03D21F845E; Wed, 23 Jan 2013 20:02:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.057 X-Spam-Level: X-Spam-Status: No, score=-102.057 tagged_above=-999 required=5 tests=[AWL=0.543, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cD9CDL-mpg8E; Wed, 23 Jan 2013 20:02:26 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 3FD9521F8442; Wed, 23 Jan 2013 20:02:26 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id AC941B1E00A; Wed, 23 Jan 2013 19:51:10 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035110.AC941B1E00A@rfc-editor.org> Date: Wed, 23 Jan 2013 19:51:10 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6832 on Interworking between Locator/ID Separation Protocol (LISP) and Non-LISP Sites X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:02:27 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6832 Title: Interworking between Locator/ID Separation Protocol (LISP) and Non-LISP Sites Author: D. Lewis, D. Meyer, D. Farinacci, V. Fuller Status: Experimental Stream: IETF Date: January 2013 Mailbox: darlewis@cisco.com, dmm@1-4-5.net, farinacci@gmail.com, vaf@vaf.net Pages: 19 Characters: 43758 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-interworking-06.txt URL: http://www.rfc-editor.org/rfc/rfc6832.txt This document describes techniques for allowing sites running the Locator/ID Separation Protocol (LISP) to interoperate with Internet sites that may be using either IPv4, IPv6, or both but that are not running LISP. A fundamental property of LISP-speaking sites is that they use Endpoint Identifiers (EIDs), rather than traditional IP addresses, in the source and destination fields of all traffic they emit or receive. While EIDs are syntactically identical to IPv4 or IPv6 addresses, normally routes to them are not carried in the global routing system, so an interoperability mechanism is needed for non- LISP-speaking sites to exchange traffic with LISP-speaking sites. This document introduces three such mechanisms. The first uses a new network element, the LISP Proxy Ingress Tunnel Router (Proxy-ITR), to act as an intermediate LISP Ingress Tunnel Router (ITR) for non-LISP- speaking hosts. Second, this document adds Network Address Translation (NAT) functionality to LISP ITRs and LISP Egress Tunnel Routers (ETRs) to substitute routable IP addresses for non-routable EIDs. Finally, this document introduces the Proxy Egress Tunnel Router (Proxy-ETR) to handle cases where a LISP ITR cannot send packets to non-LISP sites without encapsulation. This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:02:45 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 635A021F8561; Wed, 23 Jan 2013 20:02:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.125 X-Spam-Level: X-Spam-Status: No, score=-102.125 tagged_above=-999 required=5 tests=[AWL=0.475, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IbzhdM0bBAcQ; Wed, 23 Jan 2013 20:02:44 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id CC23721F8862; Wed, 23 Jan 2013 20:02:44 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 4371BB1E00E; Wed, 23 Jan 2013 19:51:29 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035129.4371BB1E00E@rfc-editor.org> Date: Wed, 23 Jan 2013 19:51:29 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6833 on Locator/ID Separation Protocol (LISP) Map-Server Interface X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:02:45 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6833 Title: Locator/ID Separation Protocol (LISP) Map-Server Interface Author: V. Fuller, D. Farinacci Status: Experimental Stream: IETF Date: January 2013 Mailbox: vaf@vaf.net, farinacci@gmail.com Pages: 13 Characters: 30144 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-ms-16.txt URL: http://www.rfc-editor.org/rfc/rfc6833.txt This document describes the Mapping Service for the Locator/ID Separation Protocol (LISP), implemented by two new types of LISP- speaking devices -- the LISP Map-Resolver and LISP Map-Server -- that provides a simplified "front end" for one or more Endpoint ID to Routing Locator mapping databases. By using this service interface and communicating with Map-Resolvers and Map-Servers, LISP Ingress Tunnel Routers and Egress Tunnel Routers are not dependent on the details of mapping database systems, which facilitates experimentation with different database designs. Since these devices implement the "edge" of the LISP infrastructure, connect directly to LISP-capable Internet end sites, and comprise the bulk of LISP-speaking devices, reducing their implementation and operational complexity should also reduce the overall cost and effort of deploying LISP. This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:03:13 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE7BF21F884C; Wed, 23 Jan 2013 20:03:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.178 X-Spam-Level: X-Spam-Status: No, score=-102.178 tagged_above=-999 required=5 tests=[AWL=0.422, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAE7thJPxJXO; Wed, 23 Jan 2013 20:03:13 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 99B9521F8561; Wed, 23 Jan 2013 20:03:09 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 05A6AB1E013; Wed, 23 Jan 2013 19:51:54 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035154.05A6AB1E013@rfc-editor.org> Date: Wed, 23 Jan 2013 19:51:54 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6834 on Locator/ID Separation Protocol (LISP) Map-Versioning X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:03:13 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6834 Title: Locator/ID Separation Protocol (LISP) Map-Versioning Author: L. Iannone, D. Saucez, O. Bonaventure Status: Experimental Stream: IETF Date: January 2013 Mailbox: luigi.iannone@telecom-paristech.fr, damien.saucez@inria.fr, olivier.bonaventure@uclouvain.be Pages: 21 Characters: 51447 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-map-versioning-09.txt URL: http://www.rfc-editor.org/rfc/rfc6834.txt This document describes the LISP (Locator/ID Separation Protocol) Map-Versioning mechanism, which provides in-packet information about Endpoint ID to Routing Locator (EID-to-RLOC) mappings used to encapsulate LISP data packets. The proposed approach is based on associating a version number to EID-to-RLOC mappings and the transport of such a version number in the LISP-specific header of LISP-encapsulated packets. LISP Map-Versioning is particularly useful to inform communicating Ingress Tunnel Routers (ITRs) and Egress Tunnel Routers (ETRs) about modifications of the mappings used to encapsulate packets. The mechanism is transparent to implementations not supporting this feature, since in the LISP- specific header and in the Map Records, bits used for Map-Versioning can be safely ignored by ITRs and ETRs that do not support the mechanism. This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:03:46 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAFE921F8946; Wed, 23 Jan 2013 20:03:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.22 X-Spam-Level: X-Spam-Status: No, score=-102.22 tagged_above=-999 required=5 tests=[AWL=0.380, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id na-oveNY21Ck; Wed, 23 Jan 2013 20:03:46 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 6B21721F8856; Wed, 23 Jan 2013 20:03:46 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id D619EB1E016; Wed, 23 Jan 2013 19:52:30 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035230.D619EB1E016@rfc-editor.org> Date: Wed, 23 Jan 2013 19:52:30 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6835 on The Locator/ID Separation Protocol Internet Groper (LIG) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:03:47 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6835 Title: The Locator/ID Separation Protocol Internet Groper (LIG) Author: D. Farinacci, D. Meyer Status: Informational Stream: IETF Date: January 2013 Mailbox: farinacci@gmail.com, dmm@cisco.com Pages: 12 Characters: 26810 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-lig-06.txt URL: http://www.rfc-editor.org/rfc/rfc6835.txt A simple tool called the Locator/ID Separation Protocol (LISP) Internet Groper or 'lig' can be used to query the LISP mapping database. This document describes how it works. This document is not an Internet Standards Track specification; it is published for informational purposes. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. INFORMATIONAL: This memo provides information for the Internet community. It does not specify an Internet standard of any kind. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From wwwrun@rfc-editor.org Wed Jan 23 20:04:09 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF61521F896B; Wed, 23 Jan 2013 20:04:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.255 X-Spam-Level: X-Spam-Status: No, score=-102.255 tagged_above=-999 required=5 tests=[AWL=0.345, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DhvyvE1F3lqW; Wed, 23 Jan 2013 20:04:09 -0800 (PST) Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 3913E21F8959; Wed, 23 Jan 2013 20:04:07 -0800 (PST) Received: by rfc-editor.org (Postfix, from userid 30) id 57AC5B1E01A; Wed, 23 Jan 2013 19:52:45 -0800 (PST) To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org From: rfc-editor@rfc-editor.org Message-Id: <20130124035245.57AC5B1E01A@rfc-editor.org> Date: Wed, 23 Jan 2013 19:52:45 -0800 (PST) Cc: lisp@ietf.org, rfc-editor@rfc-editor.org Subject: [lisp] RFC 6836 on Locator/ID Separation Protocol Alternative Logical Topology (LISP+ALT) X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 04:04:09 -0000 A new Request for Comments is now available in online RFC libraries. RFC 6836 Title: Locator/ID Separation Protocol Alternative Logical Topology (LISP+ALT) Author: V. Fuller, D. Farinacci, D. Meyer, D. Lewis Status: Experimental Stream: IETF Date: January 2013 Mailbox: vaf@vaf.net, farinacci@gmail.com, dmm@1-4-5.net, darlewis@cisco.com Pages: 25 Characters: 62093 Updates/Obsoletes/SeeAlso: None I-D Tag: draft-ietf-lisp-alt-11.txt URL: http://www.rfc-editor.org/rfc/rfc6836.txt This document describes a simple distributed index system to be used by a Locator/ID Separation Protocol (LISP) Ingress Tunnel Router (ITR) or Map-Resolver (MR) to find the Egress Tunnel Router (ETR) that holds the mapping information for a particular Endpoint Identifier (EID). The MR can then query that ETR to obtain the actual mapping information, which consists of a list of Routing Locators (RLOCs) for the EID. Termed the Alternative Logical Topology (ALT), the index is built as an overlay network on the public Internet using the Border Gateway Protocol (BGP) and Generic Routing Encapsulation (GRE). This document defines an Experimental Protocol for the Internet community. This document is a product of the Locator/ID Separation Protocol Working Group of the IETF. EXPERIMENTAL: This memo defines an Experimental Protocol for the Internet community. It does not specify an Internet standard of any kind. Discussion and suggestions for improvement are requested. Distribution of this memo is unlimited. This announcement is sent to the IETF-Announce and rfc-dist lists. To subscribe or unsubscribe, see http://www.ietf.org/mailman/listinfo/ietf-announce http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html. For downloading RFCs, see http://www.rfc-editor.org/rfc.html. Requests for special distribution should be addressed to either the author of the RFC in question, or to rfc-editor@rfc-editor.org. Unless specifically noted otherwise on the RFC itself, all RFCs are for unlimited distribution. The RFC Editor Team Association Management Solutions, LLC From farinacci@gmail.com Wed Jan 23 21:20:35 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7D7B21F8863 for ; Wed, 23 Jan 2013 21:20:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QISoapSuEb7I for ; Wed, 23 Jan 2013 21:20:32 -0800 (PST) Received: from mail-pb0-f53.google.com (mail-pb0-f53.google.com [209.85.160.53]) by ietfa.amsl.com (Postfix) with ESMTP id 25AF621F8856 for ; Wed, 23 Jan 2013 21:20:30 -0800 (PST) Received: by mail-pb0-f53.google.com with SMTP id un1so4529683pbc.26 for ; Wed, 23 Jan 2013 21:20:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:from:content-type:subject:message-id:date:to :mime-version:x-mailer; bh=PoTeVK/f8Am2WCSMRSoFOmRmSZP/D7X6njgx7Exhm0Q=; b=URPr1GE2wX7L/CS4wSJP6Ai4hGXl8oztc/cuwDLZqixjeQuXaKeT/O7kAchakVhzTY YsEt0KOXEPKwNbLrAFFhJGd3jvCe944DFnqmkj/A0Vf8yXcEW2bu+IGV65CkmebrPUJ+ gJ+djd5Wp8INtc+OrL/WbjkG4UKjaVNA2/E0aA5BKqFdLNU1B8KisjKRuWegqjqEIMh7 gKc6Xvv+Bccu4uRwJvP+5au5q3l9hGgvgnbGqApevSz6gcOETuiq0XfRUbUzpjz0h9XA +mDjvhbV7u2IkR9XcevCpPRP4+9JuneAp89dnD5uVlGN37jB5uSnT2ZicHnNqnDc8xAz 9ITA== X-Received: by 10.66.90.34 with SMTP id bt2mr1811602pab.29.1359004830253; Wed, 23 Jan 2013 21:20:30 -0800 (PST) Received: from [192.168.1.10] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id bv10sm14960235pab.14.2013.01.23.21.20.26 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 23 Jan 2013 21:20:28 -0800 (PST) From: Dino Farinacci Content-Type: multipart/alternative; boundary="Apple-Mail=_02BDDD06-D608-426B-9C28-0D9C0C6F4B2F" Message-Id: Date: Wed, 23 Jan 2013 21:20:25 -0800 To: "lisp@ietf.org list list" , RRG RG , "lisp-beta@external.cisco.com Beta" Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) X-Mailer: Apple Mail (2.1499) Subject: [lisp] A huge thanks for LISP! X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 05:20:35 -0000 --Apple-Mail=_02BDDD06-D608-426B-9C28-0D9C0C6F4B2F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Tonight 7 LISP Internet Drafts became RFCs: I would like to take this opportunity to thank 100s of people over the = past 6 years for their tremendous efforts: This is actually the very beginning on what LISP can bring to = networking. Stay tuned throughout 2013 for deployments and new = use-cases. Sincerely, Dino --Apple-Mail=_02BDDD06-D608-426B-9C28-0D9C0C6F4B2F Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_98CB247A-53F1-4A7A-9947-CE43D3081FAB" --Apple-Mail=_98CB247A-53F1-4A7A-9947-CE43D3081FAB Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii

=
I would like to take this opportunity to thank 100s of people = over the past 6 years for their tremendous = efforts:


=
This is actually the very beginning on what LISP can bring to = networking. Stay tuned throughout 2013 for deployments and new = use-cases.

Sincerely,
Dino
= --Apple-Mail=_98CB247A-53F1-4A7A-9947-CE43D3081FAB Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-34.png Content-Type: image/png; name="PastedGraphic-34.png" Content-Id: <7F76BFF2-CEBF-489B-BA8C-19AFE0901EEF@dinof.net> iVBORw0KGgoAAAANSUhEUgAAAoAAAACACAYAAACbUtgKAAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2d lndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji 1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE 9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX 5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjASh XJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHim Z+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW 5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TM zAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRo dV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9k ciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQ OBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhH wsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQ DqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJ NhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/B c/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7Y QbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxF QtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6f J18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIl pSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyT jLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uu q43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoL tQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+ 41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIud Ft0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtO u8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrP C16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARG BFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJF REPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH 4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN 8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqw K10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTk muRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99u it7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/nd zPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqv akfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/ Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4 H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9 jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3R B6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0 RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/syOll+AABAAElEQVR4 Aey9BXxVR/M+/sRunIS4e4ggcUISAgRC0ODu7lq0SIEWb4tbi1MKlFK0SHEPwT3BEmLEQ9yT+c+5 NwpBKu/7ff+/nv1A7jlnd2d3n7XZ3dkZOWIH0YkIiAiICIgIiAiICIgIiAj8axCQ/9eUVCyoiICI gIiAiICIgIiAiICIgBQBkQEUG4KIgIiAiICIgIiAiICIwL8MAZEB/JdVuFhcEQERAREBEQERAREB EQGRARTbgIiAiICIgIiAiICIgIjAvwwBkQH8l1W4WFwRAREBEQERAREBEQERAZEBFNuAiICIgIiA iICIgIiAiMC/DAGRAfyXVbhYXBEBEQERAREBEQERAREBkQEU24CIgIiAiICIgIiAiICIwL8MAZEB /JdVuFhcEQERAREBEQERAREBEQGRARTbgIiAiICIgIiAiICIgIjAvwwBkQH8l1W4WFwRAREBEQER AREBEQERAZEBFNuAiICIgIiAiICIgIiAiMC/DAGRAfyXVbhYXBEBEQERAREBEQERAREBkQH8H2oD xUVFKC39H8qQmJX/XyGQn5uJ1PTs/1/l+b+d2eLiIhQUFqJI2tfoLyefkZqMjOy8vxz/r0Sk0iIk JyajSBwj/gp8YhwRARGBdxCQI3bvfKvxNeHlHew6cAbCAFpYVAIzO2e0adMapnq1UJSZiB07f0Zy Zh5KmIORA/9XN8WY0UNQW1UeeW9j8eP673H0/H2UyinCu1kXLJgzGspyNSZV8fHa0d1YvG47sgtK oG1ogpUbNsNGTx25qS+x5KtFuPI4gr9bYvLchWha3wIJz+5gzqyv8So1HSQvQWCX/pg8oi/UJQpM swS/b1+FVT8dBylK0KbLcEwa2RWKn8hDRWb+gYf48FBs2XcKcoqKkChLgNISnoiKeUBXRKeuwdj4 7Tw0GTALfZu7/wOpAdmJL7Fl72l0HTgE5rVV/hGaHyNSUpiP+MQU6BuZQFnpn19bPLr4ExZtvYqF 8yfh4L5fUSinBBWJEgrz81CsUgvDRo5Dccwt7Dl8AYXFhYyzGjwbB6B5Y08ofyI7JQW52Lt5BXYc PIci7hFapnWxctW3sNVT/ViR/8t+hKT4OCiq60Kn1vv5WjmyB7Y9ycKl8yehw83rP+FKCzKwe/M2 xGbkoLCgCLqmVvBtHggPe/O/lVx2egoyC+RgYqj7t+h8PHIhlo0fjKMPolFSDPSdsgLju3p9PMo7 vnHhN7Fkzje4+PAZBn21HVP7+eLArh+gYd8UrX2cqoWOfhKC7fv/gJKqKiQK8sjPy4WykQ1GDekP TcVSXD32M5at34mMvCKocp1OWbwKQa4WuHRkH649eYXigkIoaWjDvZE/mvl7QjE7Bt06dkNsrjKG jJuBYb3b4T/QzaqVQXwRERAR+H8XgU9Mi5UFj39yDTNnz0FYfDrio55hzvh+aNdrEFIKAMpJwtKv Z2Lf9fvIzc5GekYmsnPyQSSHkrwkDOvcFLNW/obADt3Rr0sQkqLikVNUSbump3PbFqJdj5HQdw3A yBGD4WxmhHxmPEF5mD66L3bdScaAwQNQ9PIG+g0fi3SetVOjXkGiZ41Bw0ejjY8VFo4fiAWrjkvJ n9u+GD2GzIJ902C083PCvC/6YNHOkzUl/R/7VpibgefPnyH88UOsmvslFq7+GWHPwhEW9gJZOTm4 czsEMUkp/1j6uSmvsHj+94hNyf/HaH6MUPqra2jfrgNuRGZ+LNhf8ivJTsK04TOhaNwQRrUlyM7O xYu7v2PatBkIffUGOTl5IDk5hN2/gDlLVyA5KwePb55Ft5aNMWnBT/jUKufQ6i8wdNL3qNekPUYM GYAGduYoYeb8f8qVZGPWoLZYvCekxmz5tOmEYX27Q02xRu9/5iMzgBvmzcPh29xm3yZgy9I58PIN wIHbz/8W/bNbvkTH0YvwiWHhb6UBKKL1oHGYO/sLlMY/wKPo1D9F79WtQ2jWuAWuJJZi/qqNGBQs LNQKsXfDGhw/9/g9WiUlhcjlfn3txI+YNncpXiWnS8dFeR51X17ejeBOw0HGbhg5cjiaNnIFlbW3 89s3YcXu48jlRcnlw3vQOrAJxq/aCzkNEyxduRqdPe0xdUhXDJ26FiWfatjv5Ur8ICIgIiAiUIaA sAP4Oe7ukfWkY2RMYW+LpcHvHV5DappmdCEyl0qTnlIdYzXaeOrme6RObVpAkNOk366+eM/vQx/y 30aSs5kqdZ+x6f0g+UnU2NGc5m0+I/W7un85SUzq0LPUovfCDna3pOZ9ZhCV5lL7etoU0GeeNExO ZChZK4MMXDtRSn7Je/He/RAfHUbnz5+ne4+fVXgV5mVTUmKa9D0i7AFduR5K2QUybCoCfeShZ2t3 aj3u28oQRUnkUdeMVh+5QjlvE+jShYsUEZdS6c9PuWlJdPXCebp17ymVVvOp+SXpyVkyM3Ci0Bdv awyQn5VC1y5foEtXQiizBhyePbonLfeDp88pp6AS3+L8bHr29CmFPXtOcfEJlFfml/3sDFmYWdKl l7nvp1eUQ7dDL9H5C5coKb3Svyg/hxITU6XhY149pUuXLtOzyLj34u9bOop0nAIoJrMyHzwhk0TX jK5FZFWEP7ZzIVl6+FN22Zc9i0aRRNOa7sVkVIR5/6GY+jRtQJ4dZr/vVfalMDudbly8QNdv3qPy HBTkZlFiigzbqOeP6Sq3gZxyz7J4WVxnTx4/ohcREZSYlELFXHGlRQWUGJ8kDZEc+4rLfIkehr+i ypZYSjERL+nxkycUHRtL6Zk5ZdQKqE8jIxq19nzZu+yniOsjNiaGkpJTiBde1fxkL4X04PZVrssL FJuUXuGfnpJMmblFVFqYTaHXLnMeIir8PvRQkhlFzUyMaeNZWV/ISY2iRk761HWqrC2nJSVxWyml 4rwMCrl6ma7duE1ZeWWglOTTvVuXpfl4k5JZLYnDi3qRTeDoat/KX94mvaYL3O5DblViX+5HJQV0 72aIlGZ4RDQVFFeiGP4oVNp+X0UnVgSXPeRRX18TGrni1DvfP/xalBVNreubkGvLXpSSU7Wf51FP fzf6YvGBD0Y+tn0Badr5UEKVqtk8fySpGTehytqojD6vY1Pq/MWqsg+FNH9MMBnU9aXkgsowZ3/+ muShTJuO3an8KD6JCIgIiAj8CQR4l+7znMAAajMDGJ4uG2DPbV5IusYu9ILfixOeSBnATaduVSdW mk+jg52pQcexFZNm9QA1v708t4V0alvQzch0evn4HoWE3qOM3LJBlwf88X0DyNDBg3757Tdq41uX WnabQ4VlHFE+T8qpyYl0Zt9aMqqlR1//dJVyE+6TlrImrT75hIgnoZHtm5KurglpGtlRSOTHGIMS +v27r5iJMiQHRycy4N8h0xeTkJWnV/eTu3djmjF5GJmamZGGmoQC+0yh1ILKCajm0glfC6hbK1dq NXpJZZCCRPJ2taFBo0aSn7sTaWlqkIFFAzr3MEYa5tG14+Rex5JsbOxIV8+QBk5fQnmfSOpjDGDM tT8o0NmK825LVmZG5B4QTA9fyxjOwpwEmju6BxnomZBz3brkYGdNU77ZIs3Hk+snqYWbM9nZ1SUv dxeysHKjY6ERdPnoXpo1ZiBpSjRp6IS5tHzZElq1ZS9lc71kRz2lAU08GT8zsrcyIau6Den0rXAp vceMoxvjOOfLcWRlY0XamsrUOHhKFWaIKPX5dbKqrU2rD1Wf7J5e208SHVO6GFbJKB/buYgs3Pwo tay55L65T8Z6arThePW4lcALT6W0YkgHUlC3pm0n71b34rfIh1eoibsjWVtYkyG3gU7Dp1MOc3IP T20mT59gmj9lCJmamxDk5al59xmUJK2YUjqwaRk5WltSvQbu5OLsQA4+PekN83Jpr0PJ08OTvvpq KjnWsSFdbQ2ycelGmYxVzttYGtetLVma2ZBXQy+ytbSiCd8eopiwm7Tsm7nkrKNB3i370/Jvl9OS Zd/Ts4Qcin14hpr5+ZJDHXtqN7rKooLznpccTePbBZA+16WjvSUZWzrRnj9uSMs4e2wv6j5oGPVo 7Uc6utqkqa1Ly/ddeq/8VT+UM4BrTzws+1xKvZo7UrOR3/B7CQ3pHkTDJ06m9s29yNBYn+QVDOjk vTeUl/KaRgY1Jn19U3K0syBj2/p05OojZhRTaPOqb6mnXwPSMXGjhUu5XIsW0cGL96T0b+3ZTPXM jbltOJKpkT616zOSErJknFQWjzv9OzQhfW5X9epym7S1pq2HQ6iUGeLFA7uSvq4ROTvakaGJBa3a fYxrucwVp1OvRsZ/igG88NPXJFEzoQtV2pqM2qcZwN9+nEuatt4UnVGRA7q6Yznv3Ulo/KoDlF/W VsuzJzCAHSdU1uPB1V+Qhq0nRQudqcIV0aQO3mTTqA9lv7PoqAgiPogIiAiICHwEgc9mAO8d3UAa Wtr0/dY9tHvDCnIy0Kcp3++VDqp5bx6Tk6kGNQjoRBMmjKfRzMRs3M2r69Is6lZPlQZ8+eNHsvC+ 1/Xti6mWqQP16t+dHOu5Un1mfOp6tKSQx/HSwJmvrlAdbempHulZeVBUeuUIunPlNHJxcuLVMcjU xZ9i3hZQ6qurpKajSyceJdKln5eStmFdOrT/FzLRMKH9odHvZ6DsS+ytk6TLk/rghbt4ZyWXLh7c SKoKoLX7b1L4jV+FwxcycvSkEyGP6fKuxbzTZEEXX32MoSxPqmYG0MfFkpkICX25eje9fHmffE01 aeB3R6k0L4EaWxlQ0NBpvJtSSDdPbic1ZQ36+VpkOcEafz/EABbnplJ3Nyuya9GHIt6kU3LUI2pc V5/8gieTgOS2L/uTspop/XLqLuXm51Nk2D26+zCcCtKjydtGm6xbD6TbzyIp6t4ZstLXpZ8uvaRj W1dRn65tSFlZmTr2HkDjxo6hmQvXUG5JIS3sHUjqNt50/Uk8ZabFUd82LmTi0IreMtf+8NLPUhy1 rV3oyLUHtG5mD6rvO0SaD1mhCmlat6bk1nYMvbtJ+TkMoIBdMyszWrzveo0YlX9Mi3lIrX2dOS9q 1Gv8XHoZlyz1KslPpc6udtSgXX9Kzsqjl3dOkZaqhNaffkZhf/wozbu+TQPO+z36dfM3pMCT+u5L z+n1naOkoaRMXWeupKjYeDqzeRZpWjSkaN6sTIm4RhJ5kIK2GW07cZWObpxGJtYtKa+0mJaMbEfy +o6089QN3hmNpwF+ltRp5i56eessjRkxiIy0lcm5UQCN5342dvwXdDcyjYrzsygq8hXN6edHTsHT yovEvyW0aWJvUmZ6J5lJz8lMoakDg0jTwIUSMvJo4uDW0vx3HTWbwl++okktG5Btp6rxq5AqexQY wKa8A7ju9FP+UkR/8EJLVUme1uwPkb4HB9SX0hw0exW9fHSerHWN6diNCNo4rjupGPOC5m405WQk 0/jezUjPsgm9fB1JC6dOIF/GWNPQkkaPG0djePzYevQa5cSFUwNm3luO+JpS3+ZQ+K0/yFwTNHTm ViotKaIZnb2otqU/XX8QRSxfR49vX+Nd82Q6tW4uSSR6tOXEXcrLyaCVswdJ2/P1cNmuK/1pBrCU 5vR25d2/QTUsZP8aA1iUl0bThrSXYuXbYSBduf+iAmwpAzjpe+l79NNQcrfRpdb9vqrSJ2RB7x5a QRrK2nTztewkooKA+CAiICIgIvAZCHw+A/j7RpIoScjNw51Yvpws21Tu6gkMoKOJBrXpP5ZWrFhB y5Yto0OneZehJIO6OqvRoNnbPiMrlUEu/LBMOjAauLWhG68SKCX2IbVsYELNBi2g0uJcWjmsE2nr 21CvnkGkxTtv4xZtqGAO4uOi6O6tO/Tb7o3kYKZH/r2nUMSzENIyNKbdx06Qm6U2TfvxFGU8u0y6 EkPaEyrbYatMvfLpyLIvSNPMm97klX8rpl4tnSho9GJ6ePVXkmgb0sG7UVLPjJcXyIp3FY98hF45 lQ/tAHo4m1KnL9dUBBvfzpk6j99MCU/OkIKCPAWP/oo2bdxAqxbPJR2ug/mbzlaErenhQwxg2vNr ZMQ7dT+eFSZxmTu+dTapmden13yEF2RvQt2mry/3qvi9fXg1qaoZV+yaFic/JlcbQ9p67pU0TPbz s2TJu2SXXlUe8fIsTt562jRq5eEKOi+u7mZmWZsuPc+gsCs/886KLv18SXak+PTGKdp76GzFbs29 UxtJW9uEzoa9e4zHu7CfsQNYlBHB7cCAlvzycQZQyFz222Rav3QGmWjJ83FzIzr3jI8zI2+QjoYS efeaLMV+3YolZMbM28SlR+nx2S2krGlIR25FyMqWGU3uFhq0ZM8xWj0hmGzcO1YcRT87tZoM7RpJ GcBkXpCoqqlxONluW1zYddqx5yi95X7koKNMc7h9lrsZXZyp/Rfl/aeQ+vDR5Zh158u9q/1un9aa 6necXvmN+1+wvRl1nvFDxbfUFxdIU1ONjoY+p8mDWpJV8z6UVbaTvG9hH7Lz7E9Vaq8iXvlDSVYM tTDSJVM7J/JwqUd6BiY0bNb3ZbtYOdTG34k8u0yiQiFCXjLt2rqNXsdGUGtrE+ozf1c5GW7Tf7AI iRoduinrP4eX9Ca7oDEV/sLDwyM/kpqaOV2LrDwuXjopmKz9u1Ny7DOyYgyX/nKlWhzhZWJzD3Lv xqIfZa7k7TOyNtKk+TvPyb78aQYwm7rWt6H2U7eWk6zy+9cYQCmBonw6+vMGcrHS4f5gSKuOydro 4p6tmEk3JQ8PDzI1NiSftn3oeXylmEN54glhF3j3U5vOh78vMlEeRvwVERAREBH4EAKfLS5OJSXQ 0NXD/gvXcWHeYIzaeBhn7k5FG3crZkX4QiuVolO/QRgR5FkpX0kFMLC0xoV7ISzcPRhKlT4ffTIw VYdwiXHSzAXwtjHkJ0OM6dQak85F4PbVY5i96wQW7bqOST1dsfWr/hg5dwZaNm+LDo0sYWRiIf3v 5ukOI0pEyxG7ET0+GFosvD51xEDoWrfHV0NbIeLkD8jSUIK5Qa0P5iWdb5eq6evzLeLyIApQ09JF bGERiopLUFtXB551LKSeyhr6UFNRQ1He37hwwZcYmnrVL08MtQ0sEZObg6z0JCgrKkAD2Yh6HSXc scbouQvQ3NumIuyfecjncuUrq8FAV7simnptAxTzpZ3c7CzEUQnqWFpW+JU/vLr7FCpWPnC2kGFW wLca07NL+eRTFqKggG8EsSsqFH5lt1SL+TmDb34bGRlI/YQ/qtr6kFNQRF5hMV+ELoGWsQH8PetI /Z28W6H8LmVJbjJmjF+EDiO/QQvHyvgVhD7joZDLk8H51NL89C1odW09jJmxFG1bNUdw605YvmgP ds50ggLfINdVKSzDHhg4ax6aBTiiMCkaBvr14ediLc1JEQvt5+XLQZXr6vHt17D1GQX1sjymp2ch r5ivnPM/7ozQ0K6FFv4uUl8TRx8MdARibhzBm2wdeHu7lcUqQVIa32Yur+YSvujCcUtKa76cUvKu epCSIqRx32xgYlRGjw8d1WtDQUVFin0JY9/Qoz40yupP29AWyHuMmqmXkeB+XsL1GdRnFHr4OsHc 2h5161iVe7IaI0LzQB9ZX1fRQ/8hg4GCRKRw5pxNhL4sc9J8KEnA8qPSD0V8wYuPDKRplw9KmdxO FbRqo7Zm5Y1nDR1D5Be/RWZOBhI5vrGJcTnJst8ipBYXw8C0sszyKhqQqKnypYq/esVEERrKQE5e zjtp/c1XRWUE9xmNFoHNMaR7eyyeuBwj2h9CKWtasPdqiXljekJHzxDu7m7cpt5Pq0i4+MR9SNqo 3vcWv4gIiAiICHwUgbKh/6NhyjxZuQsP0AWF8hg8byF8TbMxedwCZPOYyhoOpK6wjAGooCbHA1xw N4Sf+BnHQ6IqPn/qwbx+QxhoSBD/Jq4i6J2nr2BkZoyc+Biw7he0ay3cwFPAoDHTYa6Wi5cxsTyB VASXPmTk5qKEGQ0T8zrwstVEQqICVm39XjrhHfntALT0LOFopFE9UpU3B1tbpD28jTsvZbcFS7Pi 8PTuY9hbWkCJ9ccIeBTxJFrVMQ/3t1wxT15VXSmrijGwqgcNLkfz4AFYvHQpli5dgoVffwW/+u8z aVXjyp7loSionKnitA1MYYwsnLtQeZv0zoXLPNHqwtjIGH4mOji2YyMSc6sDqqqujIK4CKRm8XfK xspvpuF1cr4UCxl5Zk5ys5FfWImJoroOnHSVcfHEmYoc3L98iVcMajAzVOdbjAItxpEZ6nfdgbVz cVveGl/P6v+ul/RdVYXLxYBLmKGpdHznSI7F4wXNP8xO7PthJTJKzdDUxb4yyHtPxHVZ+dHKNQht 3GyQkhiDWiaO0GZm2cO3XRn2S7Hwm/kI9LLnW8ICQyEP1kQjdQf59uarvNpo3NCLFw3FSHkluxmb k/wY8xatRiYpg7Mmc1zud+taoqwMlZIMxMYkSMNc3rcEey6+hLJqZf2VsnqbPL5lX+Gq5Fv4Jq9Q lhnhRUmDmb/auHLijwqm7tmtEI5fCkv+LjBrJVXbm1AX8nICj/pxx4Vo2KQVWrdqWYX5q4xSwgxM NSephXrczy6fOF1xGzs89DoK8nkBZixbhAjMX1HG2wp/Ib6FhTXkk1/i6u3wMnIFuHPxBrcbE17k WcNDrRA7t+/ge7hVnRJcrE1x7/RZvC3rSrGP7yExIR12FpVMoRBDUVKJa1UK7z8rw9W/Ph5eP4H0 95upNM/yilVwf4eAstBAeJWkrFKJbGmVwUrNwAF9WjVGYXqctCxCn7d0cEVw29bwa1gz8yckcf/K RWTJmcNMr/Y7KYqvIgIiAiICn0aghnVlzZFKSwqQy7tRRUUFUNS1wXffL4Zfp7GY+2NXfNfLnv1y UfwOMyRQCuo3El02/YS+3bti/lcToSv3Fg+f5mH+8hnQ/sCYqWnhjkl9gzB96mjo5EdDMfMZvj3x CBt+WYc6VjFQz43FmGHDMLhzS5z5ZTVSJRYIcHPG/lWzcfxpAe+seCL3zRPM+mY1Oo74GnbMOA4e MgaHxi7F+aOHEf5bBJbuuoIx63+Dnkr5jPx+ud2DeyPQbRMG9+iAicP64MZvO3A/zwxr+ncGRRyU lrli/uUJLDc3jxnCii/vE6zyRboLV21HgpDHO1VVGaGignxkF+cyE1IP04e1xLhuHRAxYxwM1Ytw 5tcL6DN7HfoEO1ShWv2Rs4Ts9DDMnTIC5jrMbHH9WHgGYe7I7hg/sS8mzhkK5eyXUH/7Ckt/OI3J 6/dDm3WWTZr3FfYGD0Fgi87o19Uf0WEPoGnfBZM6doDKl2vQv3dfWBZE43Z8ErRrKSAhWmBYrKFp 5gzbWqWYMmk0XndrjLuXwzFh8RJM/noaWg2cjgG6BWhQm/Ddou/R7ouVcNZTxh3WdSa0nSrzobQQ iY8vYcqSn/HV1tOwrFW9oWQmvsCqDbsQ/fw2ClPjsGrRbJy0scCYiZN4MSKHqMf3MW7kKLx5dheX rj7A6K9/4t2nDzP6rMcIk0aMg8TADu7MVMeHh2DrhUgMWBEAVS0LzJrQE6PG9UNm5GTYGangwsGT aD1qDRrrqiE95SkWLliEnJgn2Lz9CHov2QQPSz3EdGyF1ZNXo9/QAsRcOYE0VQNIchKQ+rYIplwx OVzmqkyAUGh9e1c0ctbC7HGD8PCXujhz8TwsbIyQ/OKFFBMoqMPDvSFmrZ2NOmpxyIp8BhuvHhgx oKnUv5R3bl9cOo6ZswCPoG7o3swVw2ZNxZ7uvFs3QhlN7Wpj3eJF8Og9DV7WRtiYnYMC7Ur2qYSZ y9y8gmpMmCzhKn+5orI57/kf2OkWdN0Vvqs+R04VI2dPR8u+49FrjDx8LNSwZuESNBvyDbxsZHr/ HD0DkTZvPAZPmQ9PA3m8fK2K1WvHYECnhpg6vCuSJo9D4q3T2HkrBduPjoWahh5mfz0LbUYuQPu0 BAQ1tsf9kNto3p/1aH45E6v8g9G512B086+LXSuWQ9evNzo1LttdZz6sND8LZ3esxpzEiwjqMgxN XM2rFPL9x/Yd+mP2up7YevgGpnRtVC1AKWXh4E9LkBVxine0i1kHqi6+nLMAiil38APrHX0YcgJZ ryMxb+aXsLB1wJSxg7B71TxcDM9Bi8YNUJoVixUb9qJe8BxoMuXcvDzkMcYfc8UcZ+n6jfDtOhW2 uiofCyr6iQiICIgI1IiAwnx2Nfq881HQaVWqpI2WgS2hydsrZo71YaDIkwGv9n0bNeQJoRB+zQJh acDSaVWcvLIm2nXrDKXcaJw9fQYPnryAHjM0rVt5Q6lyQVwlhvAoD+8mzaFSGoszZy8iMjEX0xav w7BOXqhlYItGDaxw8/p1sOoVFCibYfGKtWjmYY3MjEScv3AON0JD8Tw6Eb2Gz8HyuaNYWaoc6ng1 Rp3acjh65BCexqagz6TZmDuq+0fywPuLnPf2HdohN/oRrt28DwkfkW3YshmN7A0hHHcS77C0bM5M gqBNmidfviOAxk2bwYgZg0+5bNZT51DPEw3r28mCMt+YkZULn8ZNYW2kJ/2Wk5sFM1s3eLnawiew LYyUcnE15DoiYhLRIDAIPbu2gKbKh3n4Uj4qzObjaubMeVIukjKABrwb2tizHjybtYKddgkuX76O +IwCTGRl2l8MaMt7qsyIWNdDcKA34iIe4tGTZ7wroYQWrPS7kU9juDMTwepfoGLhiy0/roO5lgS2 zq5wsDLgo0Xe/fJpgJind3H30XPoWNqiXftA1HXzQSNHQ4RcuoYXsUnoPmoKls0cCb4IwVkrZMXc GghkHNWqaOU+e2A78g29MH/KwPfqKJcVj/966DiK5WvxcWlDyBVkIYv5mGYBgdBQFMpKKMrPh4FZ HdYJuBpj+rcUNrY+7OQUkP7yCS6GXEXojVC8fJONYdMXYfawjtLdbVf/QNRhZvXK9at49ioWdqyY t2/f9sh5fRdbfj3Lx8uqrMxbggnzl2HO0E5Q4LTsXX1gIMnH05fRaBg8HuuWMnPKCs0bNWkMHTU5 5PApeYsWgcxwV+5CyUk04OfjieToF0jKV8Xcb39At2Z1oaJpAD/v+rwzJw93bz9IciO5jT9ANisQ D+7WERaGsh2g4hJehLGAQFpaGsyc3OFqbwZjOxcEuNvg9pWreBoRi4DuQ7B26ZdQV5RHVlYW7Lnu 3J3tpdgUFuVBUssSLZq6SdtBjYAx85qVlQ/PgABY6r8vPpGZlY0GHr5wsjKtFt3MwQNNG1gg9PJV hEfFIajvSKxaMBnqAljsDG1c4WyuhNs3biIiNhneLZujkXsDtGjXHhq5cbhy9Ray5dWweNUG9Gwm Y+Ts3P3RxM0WTx/fRvizSN7w1EHb4LZwdq6Pdk3dIewy3g17ibrNgrF5zXKYVFlI5DMDWCpglZoF u4b+cOAd0Y85HSs7lLy4hvlrf4Z7kyDUMa1UWC0s3OTlFZDPbU7Y1ZVXUkMAj5P5qa9w5ORFqNU2 g7dHXeRmpIFUtBHYzAfyzLSe5x28Gzdu4P7T12jSZQzWfvMFHzUrIC8zE+Z13eBRl4/ka3B56fEY N2IQToYVYO/OLTCrXXlEXkNw8ZOIgIiAiECNCMgJwoE1+vwnPnJSgrLej83F7yUrZO8D56rCjqOi gvSsr1o0EqyRlAumVfPhF57AiI+w/lQe3qUhvv/HERAmUkXFDzO3/6kMlHLbkf9Q23kn0VsHV6Lz 1OMIizgr3bl5x1t8/X8MgQI+oh09uBd+OfMM7bt1x/BxUxHoaf33SsnjEbe4jy9QylIoLUjHhtUr 8NP2LYjMUcOSXQcxtFmDv5e+GFtEQETgX4vAh88//xOQ/FnmT8jDB5g/wasm5k8a5WMTuMj8CRD9 z7v/C+ZPAOVzmT8hrKKSMjTUVfnih/Amuv/XEVDWNsW2387h+N41UOdj36iEjL9fZB6PPro7XTWF kny8io5HYJ/ZuHX7jsj8VcVGfBYREBH40wj8d3cA/3T2xAgiAv+7CBQX8i1oPnvW0dH+/En8f7c4 Ys5EBEQERAREBP5FCIgM4L+ossWiigiICIgIiAiICIgIiAgICPx3j4BFzEUERAREBEQERAREBEQE RAT+zxH4bCl7QbdXriDsxJcyBPUVahq1oFR2g4/tMklVoAh68YQ7G9I/LNuioalZcTSWl5mEZy9j UCovgZm5eTUlxB9GoRhhDx8hm29P1qqtAxtrK05TxrOmvYlCRFwSNGsbwMHOUkqCzUPhTfRrJKam gzgdeydnaKkqVSdfWois3CJoaKj/1y+ClLAKnZzcfOkFFbky2UbhDo6gg05VRQH3b9+FoW19WBpq Vc/zX3wTVFJkc3pq6upQ/GxBo7+Y2H8hmiAE/4hvTNo6OrEC3HyuY0F+So7v9QiC9OA6ZSUafKs4 N59vrEsvAimilma5KuZPZ7AoLwNPw1+igIlp6+jD2sK8oo1/Ovb/fYh7F3/Hg0RCvx7BqHKh+p/N GPfxHFYHVcrqjgQ9gsrctlSUPnsY+Wfz8qepleJx6BVEpeZAiZVI2zq6w9a8utaCzyH55sUTnDt/ CSZuLdGiIavAysmGHMuDqkqqjzUlRYXIZmXN8nxRTejugtJz8LOGukbZuFiE8MdPWVF5IY+VWrCy soa6ihLfJmZ1UKxKp5SVZytIWM6UlVgLrjQvFbt2HoAJ39xu6uddpuvyc3JcHqYUD66fx9nLN1HE N6qbte7MGhVkY2d5iL/3S6xIPofzrAJlSWWbKC5gxfOlctBQ/YC6Gh6Tb1+7jKSsIihxXGcXL5jq f0Rt0zuZjAu/jSOXHqHvoAHQ4lvU/0tOGJuE/iLMi8JYL/yXZ52uf3f+SY99jj3HLqBj7/4w1f60 1on/JUzEvPwPIcAN8rNc2IU95FKvPvk29icvdxfy8gugH385wdZG2eJTQjgFB3iRS8NG1LRpE/L3 96NmnUdSXIbMRu+VA2upgZ0RmZhbkY2VOXn4D6C3nzBgnpf0mkZ3DCBtA2OqY29H5pa2dDNKsHlZ SpcPryB7C3OytbUhbTYpNm7ZLqnpsEcndpOdviHZ2dchEwMtquMZQNcexVaUL/L+NerVrBE1DhpO qQUVn/9rD88u7iMvV1fydPcg17r1qEF9N/L09CQXNz86dvYS+bpb0/JfPm7e7c9kNuX5ZWrSuA3d i/oc+8R/hnLNYbMTX9GaVWvpdfLHjInVHPdzvm6a2ZecfLvSi7AQah3QhHwauVMDFxfy9vWjxsE9 KCyliEJPbqN69V3Ir3FjcnNzp3a9R9GtcJld34+lEff4EgW6O5CuoRnZ29uSiZM/3Xqd/rEo/32/ 0gI6sHUNnQp9WWPaS/u2IztXP0r+D7bt4qw31K+pD7k38iVfby9yc/emEQvWUEqhMBL8dffo0iHa 8NPv0vHkr1P5VMxCWjS+H/n4+5IG23OesPb0pyJU9y/Jog0LxpOxJts9d29Ee08/Yv8imtgvmBZu rjTfVx7p/vm91JjbpndDF2rg6kY+fr7UZshk6dhTlP6axnRpThraemRfx55MTW1o8ymBHtG6KcOp npsH911fcuG2HNx/NF2PTqPS/GSaNLgDGXL67k270a0wmW308vQ+9Xvix/k8XqpR+269qEenVjRn yx+fivLn/IuzaFyP5tR23HdV6jGXxvRpQx0HzKvBjnIZ+YJ0GtevI/n4epEym6hcc/TBe+lePryD fjp27b3vwodTa+aTjpY+3Y19W6P/P/nx3IGttOfkzc8mmRP3hDr71SOPht48NzalxtwG+oyeTlm8 i/J33IND20hXU4uO3nn+d8j8n8TNin9Oq1evo5jUChur/yf5EBOVrUg+C4e7h9ey3VMt2nf+Jl2/ dJaGBnuQiqE9PUououKEx2SjL6HR32+lRw8f0L379+jBk+dUwPxf4pNLZKwGatX7C4pNektZafF0 /lwI5X6UASygGb18SNumIV16EkWFBbkUzjRTsnlmK0qjlq5W1GvmJsrJy6bNc4aRxLwuvWZmMyni Kd289ZDYvBS9eR5CHmxIvsOwb6Xl+4PtC5saGZAh26U1sgqi5PzPKvY/GigzOYbOnT1L58+cJD9H E6rbcgidO3+ezjDzF//mFXnVN6dvf/3nGMCkx2fIqLY93Xj+nx8YBaDSHh8nI7YNe/rpP884vXl4 nidebdrxRxjbmM6hxw8f0m9b5hJraqb1hy7Qg8dPKY/b2+87F5KObT26fO8BnT62j/ztdMjBfzBl FHxsxC2l2X382VZvS3oYmUAF+Tn04vkLSs/5D3JSf6VllWZRVw9dGvLd+8yGQK4g+y3FJ3ya2f0r SZfHKcmMIj99XWaefqV7t67Td3PG80asPM3ZdqQ8yF/6/WV+FzLzH0pchf9RJ7SCUrYF3MPbiEau qBnHD2Vg1+LhpCCnRsu3HqwyfuVRN5/6NHHhr+9Fy05Pogf379O3M3uSvKEj/X71Dj169kpaxpM/ ziJ5RXM6cPkpFRQWUMzrVxSXLFuofRXsT57dJtDDRw/o4I4NZGOsSW5dRlD5dPn6/nVq421FhrYt 6XXKZ7ZRLrOfvSkNmL2xIp8lvIX7jzpmALv4WZNcrTr0MFGW28QnV9juOKiB/8iPJiUsH0oyI8jX Xo++PfQ+A7iwvxt5D1haM43iPIqNZQOW/3BxakpsVjdnajqy0l57TWGqfsuJDiVHdTn6Yvkueshj 1r179+jpi8h/oJ0XU1xMLFsC/HsLr6p5/W89J98/SAYG5nTxeaWN7/9W2mI61RGo3Kf/1K4kH+mq q6uBd1zgpCOBpcocHGo1Cel5rPiUrWkIajvc6zVAvfpV9VIR9m7diFQdb2zatBymbDVCcAHNq5tk ejfp1Och2Hz0Lhb+egtNnC2k3g4urrJgRTlsPoz1/5Xy0aaKOpS1VNjsVi1I+Dha39qJ/8uCGdvX g2ltTRQryCwdqBvbYM32gzDIuYW+M0+8m+QH3wvfJmLL5pU4dfUpTG0bYNKUyXAw00Xy6yf449oz BDRxwbZ1q3A/OgMjJ8xAkE/dD9LS1DND8xZmUn8ztvBQy9YJzQMCZOGLk/koWA5KfBxyYu8mbN53 Eg2DurOFit5QVWLc+Gjz6N4d+Hn/71A3c8TkaVNR3/oT9nH53EmRj+eE46f3XGkRW7TYhR/2HkGh vCYGjJ6ITs0bVgRLjHiANWt/wCNWfGzp2AA9eg2Av3sdPscowrWTR3HyYihK2ASbiZEV2nTsAgtW lJyZmS9VzZOfnYnsLD6qZwXLatxmhNPnx3w8uWrbViSx5owOfYZjUI+20mPKlJinOHn5KVsdaYg9 P6zFtYeR8Anqg6kju1Q5os/D1zPHw6bTRPQNcpTmsW79+lDOf8U2XjXhUs8dDexkSonZEBw0tbTh 6toAmvzfSrMErm2G49LjeQh2/9BxVyni47JR26QuW5oxlNqhtrO3q8CCwceFI/uxbftelGibYeL0 mfDmdpnw8i7O3ElA6yYO2LpuPW5HpGLkxDlo2cheGrcoKxWH2eRgKCvF1tTRhalFXfTuxcqlWbHx /oMX0KJtC5zasxm/X3kAR89WmDdrBIRDsqjHN1nR9QkksGJwIxNTuLF95ICGtshlBcGsjZ2Pv3OR nZ0tPU5SU9dE5psw7Np/CooqqjCr44GOhjJF4uUFeHXrAlb+sBHRSQUICO6FUazLTlBefun4QZTq 2kG7MBor1m+Djp0HZnD7NtH5+JGScHzq5FAXrp5O/N8Ht0PP41rIPWBwME4c2Ac9Ry+Uxt/H2i17 UapijK8WL4aTaS08DzmDlT/+gLjUIrTszDa8B3ZjZeBsQSdHsCzCbZ9xFhRJK/Ixs6KyClTZhCGx MvT9P63HnuPXUYv7z+jJU+Fb36a8aAi7dRZrNuxgmlmo6+mLgQOHwNFSH0nP7mHlxtV4EpEGzyZt MX7MENRWk8jaFLdHQXTgz7jEsDOYvmAnJny/HdOGdK4WVYHHPsECzbtOXUufx0t9vL7rzEe8UWzF he2Tl+lsTo7PgCJbM3Gu78CmBOVhZllZJkGHqYW5FerzeCr8R3YEBq48j+RsgrmGHCxdfLBv/354 NfDH3FU7seub4e8mXe1dOIrOSYtne8wl6OHpjBy2jw15RahLj5YJ984ewuptO5GWo4iuA0ehX5eW UkXgCTwGnA2NZMXgLtixYQ1uhcWgWYfBmDCwXTX6VV8kfIRLbLnp5LlbqN/bH1dPH0ICD8E2qsq4 d/M8IhIV0SW4ibQekpn+8asv0a1nF1aALeDHOmLfqRdBjEVqIalAgRVs85E6t3tBvENZlcVaClKx Y9cvyCmVR20jO3TvbAKWpKniShF65hDWb92HTFYO7+7TAkOHDIApW0UqYPvqBw8cwJ2wV6jFNu7N reqjV4/2UJUrwqWje7B170Gks8STgPWUceNZ6bmy1GJRcRGPpzwWV+ZDDcofE4HgYskpSODs5IH6 9Z2r5A14cuM8nqcpoIGlMlZ+vxbZyoaYNXceNDKe49j1MPTo1w+1lXkcZVeam4Y9u3+Di39zPLt9 EXFvc6GhY4YuXYK5XcvCCOGu/nEY+ZpWMFNOx8q1PyItVwHjZi9kU5iWSAy/K+0TTyPfwqtpO+4T g6WK6B9cPY0o1ivpZCSH71euQ4mWJWayOSF9uUScuhIBdflE7P09BHNnTceprUsRqdMQy6ayFSnu u1dPHsLWLT8hV80AYyZPQ1N3e2QnR+Lg8RtoHuSHA1vX4+L91+gzYhK6t/JBIYs3ZGayNTEWhciT zhOcaVaiLvAWcjyv3zlzFBt37mJxgBIYO7pi4phJcLb682IaAhai+wwEqvODH367e2QdaRsaU/hb XnEUZNPc7i3IzrsbvS3k1/jHVMdYjeb8eJBiYqIp6vVrSkzhXSA+MunTqDa1Gf31hwnX4PPw0Pek b+FCZ6+H0vyp42jwkLG079hVKpau8Erptx+/Ik0NCTUPbEmmxha0cvvFCipPbp6lLZvWU68WXqRt 5UoX3zn+C/31OzLnlfPn7AAWZyfRUO+6pGbsRl8vXEwtfZxJ386dnkRn06OLP5GCsjLZ2ZiSZ1AX atvIkTQsfehJyudsLRZQt1au1Gr0kop8U0Ei+bjZkp2tBVk6ulHv3p1IFRJadiCUw5TQ+i+Hk6a2 Dk2dNY/aNvUgo3q+9OwTW+hJT86SmYEThb54dwewlPYvmEhqEjUaOnYOTRnZi9Q0NGnF7gvS/ETc OUbORrrk6teJlixbRsN7taeZi36U5mP1LN4F4Xgdew+jScN6k0Rem/Zefk5b5k0k93pOxFJ5VN/V i5o18afgQZMpnevs7m8/kK5Eldr2GE/zZowlNTVVGrNgi/TY/u7ZHYyjKtWpY0UerTpToHcdquc3 vNoKOWTP96SlVYduR8p2SKSZ5D9Pr+0niY4pXQxLKf9Ex3YuIgs+Uk8t20oqTo8gB1M9Wn4gpCJM TQ9nNi3gvIOa95zG9VtJT8B+33czSVNTk8ZMmUV9OragWhZO9CAhhx4cXUPKyrrkaG1EroHtqYGz JSnru1Eot4+S/CTq0aIhSWqb08jxU6hXoBcpGftQdBZR8ssrpKkmIQcus6NfS+rcyosMLFpSNmfs wflfyIiP6eo2akPTp08lW21V6jZrNz04u4+a+HiRBu+2GZnaUkBAM/IPaE0XwlMoJeIWjR89gupZ 65NzxxnVihd+/gCZq6uRf7uhtGjeND42UqUuo7+R7paM7tOcDE2MydLSmrr26UuWmkrUasr6avHf fRF2AJtxnI1nwqVepbnx5FtHh3rP2sDvJdS2SV2ysLEic3sn6jewJ6ly+zh6M5aeneNyqalR844j aeHcL0hbQ5UGzVxPmSmvqV+b5mRpoEcSiRb5NWnGx6a+NGfzMd6qK6KFvVqTmqYFTZ+1kPp3DuAj UyM6du2lNO0bR1aTjpoWteoyjJYvXUzd2zajHUevU8rzW+TOO/3OLC6wdOFcsuUdNP/OI+htXtlu Ce+G9Wpk/Kd2ALfN60M6fCLxhuuvusujnv5u9MXiA9U/V3n77ce5pGnrTdEZlVtU0aEnuJ7lydSj I50JlWFZHmVex6bUefLK8ldaMiaYjBsEUiqPtVXdrvlDSFPfk2Iz3vGoGoifQ0/vosberqQq4fQc XSigqT91GTVLuqMY8tNK0ua+2W3QFJozdQT3TTWa+u0eKYUrR9aThN/r1LGkRu26URM3K2oYNOkd 6lVeeQewd0sXaf9u2GMalRTnUI8AFxar0KNmbSfTilmDyDNwbEWEBweXkJa5J70WBgl2pZmR5FdH v9oOYMzDy9S+mZ/02FuzliE1DQjgY9TGtPH4XSrJjqPZ0yZQoE89UrELpLJNxzL6JfTrqvGkqapN PYdMoOWL5lNwiwA6dfsVFbIYQ3vfBiTRs6Exk6ZS1yaMjXVzSuXmcf/wUtJUUKN+476klcsXU+8e Pej0gwR68/ACtWniS/qMh3ZtE2omzYc/bfnjfll6Nf/kxISSs5aE5v3wO8+NMfSa58a0jBxp4I2L x/CYrk02lqbUplsf8rLUorrdv6Tn98+SloKEVv96q4Lotd++JQ0tFoN6EkErF82ijkG+BJ36dD+u urjNuAFBZGBmRpbW1tR9YH8y4Pwu3XGNUl7cJFddbarr113aJ2yMNKlJl1GUxydxq7kdaenokLWF GbXr3pfqGamRe/8F9CD0CCkraZGFnR2xiVCy4HHHmvu+oqEz3YnNpT9+XERaLI4wfNIMGtS9DWkY WtLliFRKCjvDbUCJ7KxNqS6LIHUN9CRlbTu6FpVCG2aOIbe6jtJ5ooFbQ2rK80SHoVNJ6BrRIbtJ n9ti5yFf0KrvltPA3l3o57NPKzAQH/55BIRdhM9y945tJImShDx9/cnPowHp1fGgS4+ipHHz3jwm Z1NN0rWqyxUqyGY1ohksl0c8pXWryw3kK9mA8lkJcaALmxbxwKNFupaW1GH4FJo5roeUWVm09YyU RGLoMbLVlJosJR3zevTkTXoF6f3bllGbFi3JwdKYtI0s6ZczAgNV6W78CQbw5s+r+XhLhw7dlckR 5qU8JxdzVRq1cDeFhR5ksV556v7FIhJYvuQ7B0m/timdflKVeahMt/pTzQxgw3pmpOPsS/dfCzSK qJ+XCfWY9wvlJj4iXSUFmrhBdsyW8vwaGUsktHxf5QBRnb7s7UMMYF7ic6pXS5UGLNpZFq2U5g9v QUbOgXxUWkATW7iStVcHSpWNU9IwbEeYEsMvko5EjiZu4slZcGlh1MDKkHZc5OOrV2F0/OeVpG9g QOv3/0G3bt2k+4/CqaQwg3o6W5AnTwjl09S+70eTRNOSwnlGe3JlL+MoR22GzaVcHoAPr/2C2nDY 8qPAwvRX1MjWiEZ994sszSp/P4cBLM2Lp2ZWprT4l+tVYtbwWJJP21ctIGNtNR7IrGjRj79IJ8jC 1BdkV5sZ3i9lR2e5Sc+pjqaEZv5wmcLPbeW8g7qMmUd5PIAlh18gUw15Wnv4Op3ftYAk6iZ04G6k NLFnp1aTvm0jKQOYEnGdGWc5cmkzmFK40PeOrSLf5gNYpCGdujQ0JZdOYyklXzYpTuvoTB2m7aCs 1Hi6ef0c+TvrMnPwLd2+fZvFHe5QWpbQ+mRu27R2VK/j9PJX/i2g8U1dya7ZQMos430u/bKUlJS0 6W5kEn0xtC1B3Yj2XbwnjbNxTBDZtRxbgX0VQhWPJZnRzAAa0tilW+j8ycPUp70/qRnYUMiTJA6T Rx2aNyB5bVs6efc1UdYLCvDypvN3ntFY//rk3HoklU9Xp3fOJyVlQwoJi6Und2/TvGEtycSzLYXc ukU3Q2/Qq5gkehN6UjoRfnvwhiz9okzq6mtOPp0nU0EOi4JYaFPLgfPfky1bNaQD6dg1o+hsWSsK u7KHNJVUaeeZRzI6f5oBLKJRLWwooM+CChwqH/4aAyjEv36S5artTAnM+A6ftogSc2U9ZAHLBjbq MpLOnz9HS2ePJ2WexBfXIGMYcX0fy/Qp81FaQmV2anjKSHlDNy8eJhsLHfpixXa6zX3zwdPnVJKb Su2tDanxwHnMusvctq8HkpqeI0Vzg7l5arO0b3aZsIRbEtHPS0dRJw77QVeUQd3aB1D3ESPI2KI+ /XroV3Jv4EVfTBlG/i3H0eqvRpBv60kV0R8dWU769r4UVcYY18QA5melsahBKA1tU49cg0fQLaHd h4ZSbGLlmH/3129I37k541dBmjIi75I1L7JGzC8f42R+Qq/6deUEkmhb0/EncdKPDw4uJkOnZiQs k0+t5QWusjkdvFad8cjNSKG7N29Qn+Z1yKv7hLJ83ORj+48fY+bE3CJXA5CRvQM1Yfn4Rt6NWM5b tmGx5buJBAVVWrRDNp5e/nE61XZoTZnFxTSmkzvZtRgo6y8s8tI9wIaajFgsXTQLmY67sZuMLOrR vVjZUbu0IPxn8rD2fMtEkzb9LvSZHOoT5EdbjobSupFdeM5uTjE5spp+cmm3tE8cvP6cNi8fz/lQ o+/2npaS+X3JYDJy70EhVw7xXUoN2n7uFn3TrTlp2/pQePg9cvVsTKdv3CVvbk+BE2TyngXpUeRp oEYD5x2ktMgrUrGQpn0nUjqL3hTG3iQbXR2eJ15Q7MundHTnt6RnYEQ/HDxDt27K5gmhp97hBYGC nCZtO/75MpbSDIt//jICn38EzPKCvBpEj749cejbeWwXty3bEJUdzwqsWDHfBB7H9mSHBXlKbc6q 1arNJ2clUODjjcT0mM/Yi6wMoqKmgqLcDDRqPx+H1k2S6qpRzw7E7t8OYnQ7S/TsPRAaPqNxerI/ Zo8dhuCOPXHuxBFY8TFk98HTpf9z0xPw5cjeGDZ0MnwfX4KZ5ucXtTwnL149g34DH7Rwkdk1VdG1 h0dDN7ap+opv6jlAy8wG8+bMgDJHKNI3g7ZEAZmpfMaJSjuh5bQ+57eYb5+Omj4XLpZC/FKY2Fjh WVwiEqIUwELDOLVzNYJ/38Tb6HmAuhYUij5uMP5DaWYkxSCeNNG5TWBZEDk0bdUei09uQ0J8PK5F JyB44kK2WVtJQbCQcf/cSZToeGFGv/ZSjyK2MSyc2PCJDOfVEZpF0VBXVoezqx887WW3b0szIvE4 ORddO3XiIz6Z82vZAXLf/IroeLZ1zPaKtfgYecnC2VDlLbjAAbPh21u+whbttkVz8UbVFcdGd6vM zJ94Kmabry8L89Dm/RO66lTklTFo4ldo3aELls0Zj9mj+qNY2QQTvAuRXpCPOyf3IPjBMRTzTe48 RRY5KM1DIZur0zN2xbLFX0GF6auY1oGJIR/JZsfj9MGTcA/qj65uVtJ0uPtUOOHWvGptXSxZtgi6 XGj1gEE46N0f2ZH3EPIgk+mNh670SIxZYym+pXzcYwQvH21YaCtD09odHh4eFfTKH0qZbrViFmfh UVwKWozrDM2yUyK3xkHcdJbiJdvDFm6lB/Qdjp5NZeIVRg4OoMvx4NaFD97B5AwpsPjAgU3LcJ1F LMzsXXHyj+1o5KzPsXLYRnYh+k2cgdZulmweuxB7jx6GlnoJZsekIOjLzii3WuvZpDVU1FfxjdwC 9PTzgKu1LlRf10YjT8/y4uBGyHOU6tdBO/+ysipqollQIJb+EYWEN5G4w11t9dB+qN6zi/DgZRQ8 2w6EubrsPNDRowlMzDQQFhnHtOtV0P/8h3wkxBI0Gll9fpTPCOnTujdCbgVg83ezMX3JbMRkK+P4 hil8JKyEx2eOYNKrUK4rfT6eZZNvPVu9R1Fd15THZFXZ7eL3fCs/1NI1hpefD9T4Fq6jcz14lGFc kByG8LdFGN65Y4U+sMZBHVC84g9Ep7BdaO6b2uYOWDJ/ulQsosPIbxBE5b24kn7Vp4L8YjRu1Aqp IUcxZtxENAgaAU+zLFy/L7Sq6k44Oi9rltU9qrwpa9RmMYOGbKtZHc/lHOFZQ7sv4X74Lp3Y6DDE KeqjX79OVagJh8wF+OPgKTRuPwRtnU2kZRK3vQAAQABJREFUfjx8SR13B/h0Govuxx6hW4An6rt6 YOCI8Rjen4+oa+nCzUsXDkZqSNZ1rjEfZWTe+SEUFkgwZup3GNzWhafEUmjpyER3BHvlNr5B+GKg bDzVsbaDJP0iMvi4e8LYsdjadiL+ePgtfIpCcOZ2Onau6FvRv4vZtntNTpgbfHuOwMh23rw0LcHq XQfYFrU6xnz7El7thsKs7LjY2bMJjExlfUK3sAAOAcGY2KullKRBHQcopZ3lcSwPFtYN0bW5J5Z+ l4fOg0bCwbgWm1JVQnpcJFLzsxF1/iA6tjvPNrALWcRAnS3k5LFddIKmnj7mfT0PWhI5lGrqQ6+W Ot7Gp8G0aUOos+iOqrIG6gnzhHX5iAA4NemJUd3Oc3tsim+d6qPP4FEYO7yvVHSjprKK3/4+AtXH zo/QYxYTElVVdBsyFm0sFOHZYRS+Wd0VyyZ3rIhlaGQEMzOZjJvsI6Gelz+W/XECyQXTwWIUn+WM bQ2hwjI1gcyglHdsRyNzFEQU4M6VUwhJU8TlTd+hobUa7HcCns364eT1xxjdoXJSVNM2wtjBnbH9 0Lcsd1ZQwQDKTH3xQWU54Y/kSJlVMOSlpYO1xkCzLO8FublQ0ldknlcOKsp8nb9M34aEGR8lDi/H 8kt/1QmTva5G+QArD1V1bWknVlRUgkRZGdPnL4SvpRbLQMqxnzp0uZN92vGEzWoHqjoFluGS54n6 bXolA1mYlw0FYXJnVRaKXNfRMZFVo0if0+LSIKdlymopZF5RT2+zTE8Ry3/K2I6iwiIeHBgZOVZ3 UebkOS1lxiQtWWCMZa6ogNPlgVCRGWZekTMjoAxtdVm51WvpoFxxS/zji1jwwwks3H8FelXkXMrp yOqS92HfqUxBjohFTKQu/nk4stKLYGchG3TL437o18i6HlbuPom3kU44te8Uxvi3k6ptGDP1S3Rx twKvVKGipg4dfQO8OhPGk6oBagucK7ukqCeIji2FpZEFLsRlQsPToiKZm6F3eGDnCY+DCrygMrcd HZZfFZwKM/MszoroF2+RzYNobX2ZzEtx1mtce5QCfYeywjBDxYL7rEaoCjcppVD5R66qLBrLeakw FmmJbysClPBgT8y4KzH2vJ0AvfKGzSHU1Gpz3cVVhK3xgeuymJnl6Wt/waR2bmXqTKqHNCxT4SHI PgljAorToMxppSVV5qOY1fiUFMkWiELsIp7EWWRUik05EytRUkFJTg6rbRLkeGVtuFBQM6KowO1U wpHyEBX/hv1sBRJljsvMjEV6Qlr5B06/CMWFhdzeqveDD9oLr4xZ9qQGGzsN3Hj2tFr+qgaTZzmm Dzl5aZ3Icd2Xl6wypCqPUxMWboUkNxVf7jyEbGYAixibpn0m4/CqqSwr9eGB6m1kBAqyAImAxacc l18Yw4sZi3Inz/Uj4UVDWkqVvpmfw97EssPcN7nOVDVUUKusffON5Q8vDMqICosbTWMHdGnqjvPr TqBb105QfblT6iukL69QPr4BD24/kDI7wrhX1dVUL8XCYlPlw+1eWClVHQYUFFl+lMsSm5zMzUMm HyxLoxDJcfnQ9KnSN0PuIKuQZWt56K5l5oK9py5h4oXT2PnDD5gzfiCeJOZhy6wB0uiC/Xk5hY/k o2pBpM+C6hc5GBtZ89xoXs2X4YUWy6WWtxwVlVrSNlLMas8cmnRFK6cF2LZlG26lXoaVZ3e0cqnM s5SQtMzV24eAsYE+q8MSHHcoPUNB3r6UZSMVkJ5Y2SeovE8oK0nHYG11nhOkkVglGY8D0ubMtBTk WdaSv/MjTPR4kOJMC88KvEgR5sChE6aiv78j+C4KeKcatVmeMj/6OiSK8qglkVGUV2S1QCoyGT8h CWGeEDjZqvOE8F1V1xrr9p/GsOtnsWvzj/huzljcep2GgyunVGAkhBPdP4dAeZ1/FkVhss7KyEO9 9oMxpVcAVi6YgXtR2VIhZoEAHxO+Q0cOfQYMRemzS/hy4S6pfjVBoD76dSwKubN9yJm7tGDmTge/ bt7BOgCBXN5BXH/0NBr6eKM2Xzgp5kksITlGGl0YzuS4tQoC49HPnuBVTKr0e3FeOtbvOgQFCzvW k6TCq7A8ZLGAeSYLQJfyzkhGeoZU4Jzb7QedV9NmoJgbWP/TMenA//jsLzh++iGCmjblSyese47x 4A11aXyh40m3wj5I7fM8hEG33Ak0Bf2Lxg6NUFdPFb8fuQhzO2fUdXZA1mvexYuvZODK41T7FUhR PuLeROHNmzjExsYgISUdOuaO8HLQwMY1K5HK3G1OchTWrNgBp/qNYWVkjAFt/HB07SLsOXUPRVyn 8dGReBQWD6t61sh8fpYvbTzBi5Df0W/oSGTlF6G0bDWqwILZpW/jcePeE2k2XrOAdXqxFlo3r4cD W77Hi6RMFOemY803q3iScEV9i1o88ZfhWKXc0sh8yWfBjPGwbTcK/VtV37Xha5x8ySQbWdJLESXI yMqQ1q3QpITJpJBX1m9i3+DujbMYN3Y0aju1RUADGynZGv9QIe7eu48UbtuCK8hKk+pPlNOSMFb1 eZVqzJcbjsPAwp6xd0ZhQjziY/Okk3Mx22fNyeP2GPMME0ZNQamzH4L8XGDNMgqPzuxFePQb/LFt ASYv2oViXg0XFVe2F0GYvarTNjaBniSJL44cwZvIl5gyuCuuvUrigbls0pYTmBs5PAy5ynrVwExO PCIjeIKr4oqz85GRmcX2iTkOX+5p1dKLL5qsw93XKcwI5WHz8u9RqGgJrzpmXLeMfRXcWQpLNtJX oVfTozBfK/OipAZ+Rhr83XJBUQtBgW44tmMNHsWm8SWWHPyw9HvIaznxTrGxNI6qhhaSH93CkyTW mcY722EPI2Dj7g0zpQSs2bRVWt6Epzewecfv8PNpzjt6Dujra4/ls2bwxaEYHnuKEBEejsjYTLTp 0Jx3bHfhxN1XTLsEe9atRmS6Cpp71pWmJfwRFmr5mdxueDwoLCyu+F7zgzz8Alvh9uWDeMz5e8/J 8QIn/Q3e8O55XGwsYuPiUSC0a94Vyc7KQg5fcimhYqTzmJPFDKzgXvBYFcG7sFJXkofMDNZdqq0u neiEoUSRx7SPMX9CvIMH9kDO2psv2OjK6PzJv0q8mAv0s8e+jd8ihheDRdlpWL1kHfQsveBkrMKT uqDXVaan9LNJc3vKLyQMmrMch4+cQK8W9aW7wkJ8FbabHfX6DmITUnFmz1JMWLwTJczkV+P/uE/k SnHK4r5SOZ+oqWkg6nYIEnOKUJidzvoToyuyxPwVSrm9Z7zNkOpZFTxsnX3Q1FIBc6dOR9jrZGZ8 8/H0wRMIPJCjszbunviZ54o3OLZhJv4/9q4Drqqj2f9BBUEQBOm9CwpiRUEBUcGCYk1sscbEWJPY Y4w9tthi7y32Lvbeu9hQadKbFOm9zJtzLpcmKCaa933vsf7knrI7u2d2dnZ3dsqkZUdQwBJ3Ge6j 6xfP4L5fNFq5eWL9gcO86DLApdsviutSUFBE8IM7SGTjx+zUd/B7KZmHijO8dyEYthCiYkOYB0cz D45EzNuSMSvMIVKOL84hfCeOQzkVjBk/FKc2zMUfx+9gzMRRKDoUKK6BTYCRlpQs0pcUhvDyvfHH HMS9iwsenNqJ809DOEc+9v65CuEpCmjfjBdvvPkq247SfIBpgEsI/4XNp5AEulZjoxnHBmY4f8Sb jefM0LAhG7gkJyA0KI3ti9g3q5BPIGQxCd8kvebFo4IS7wmjeJ54Lb4NefWG52UW7ty+hKs+frB3 7IDl2w9iQPvGuHTzCSRmnEWgqn8+Lwa4Y6qUfLxXsxGIFiu/C6rqREnhj6iRhgI5j/iNMuKDRCOQ tWyo8X4qoF3zJpOqmjrZtHJmn1j2ZO/wzXsKzeXLPTi0hhVY5cjUsiGZG+uSaXNPehWeQdnvAqm3 ixUrz2qTi0t70lRVIuduwykpM582zxpB9bUMydGpPTk0tCA1TSvad1GiJ3fg96ns3439bWmqsn6C DBmbmpFD+64UkSbVfinfAr5nJfQNv/8s1tHIjvUeWeHVY+SvlMKKs08u7yQNU0sKTpXoGWWznp61 ngUduf6mAkDlH+WyEUgT6lTGCCSOmtro07JDEj1HocRvwzpT12+WiIV9LmwhE7X6ZMLK9basRGuk 14iOXQ8R31X2J+7VNVHRnKVV7GdMl3R0dKhrkUHO85veZK2vRkaW1mRuqEMmjZ3psl+MCCozPpT6 d29HCqxA3cDGhvS0NGj49F2UmxpBXRsbsVK+OmmrGtL46TOphY05/b71iqQJ+ek0e0hnUmTfZnaN bdnnYwt6FJxCCaHPyLWpKWkamJKNhQnp6FrQzusSfaxHF3eUwaP0W27sXMjK1qZ0702i9FHxb2zA TTa4sCQDXQ3ehMqSjoEJWbfuyH4A8+nyoeXEGwKuQ4/1o5TJvlVXuvwgtLhsxResK9PBgY0XLMjV rQ3ZWemQgbkDnXksKed/9zDrfuqQvokl+25kIwddU9p9NoheX9hEcqysbWbVgPTZxZCxnQsdfxws VvH6xhEyU5NnXReGpWNL8+b/wvi3pgehmZQYfJvqa7P+m6jrWapFBTn0x5ivRJi69fWoo9cw+n6A O7l4TS7W/bm6aympsZ6iVUPGr6ER/bFVorcjQNkxswfVqqlCZuYWNG3TSRFwCvvc8nJtTPV1DKmR tSVpqGnRkmM3xXff9nWmPj/PE6+FP+c2zyBz276iMUrxw3IXghFIWx1tWnv2ebk3wm0GeTg1oIl/ /vXeu3cRr6izExtR6RlRowbmpKGuS+vOPyrOlxD4iNqYa5CGkbnYTo8eP4nvzvy1kvQ1lMXv1WfD Dvsug8gvQaL3FOn3kJybNSDFutpkY2NN9etp0cr99yk/5x1993UHUq+vxf1lQ+oqqvTz+qMluo0F KTS0rQYpKWsxT7ChDaffdztS3LCii/TIV2SnKU+dRy0qgSO+y6bBnRqTvJISjzF90tXVJcNGrehZ dDb5XP1L5Dla6sos+pIjQxMzas0GK4Jq7YaZ3zMNMK9iX3+Oza1IU1uXlu67IUL81cuZeo6XjPui 6t/7eX7zCOtHgmZsOvPeuwofZESSDfti3XC6rC5sxOt75NTIgLRNLMja3Ih0jRrS/rv+Iogbx9eQ tpUdRZdVM6sQvPiQdQA93RxpyXGJTqk0455Fo6mp21jyf3SRzFmfUZdpwIjrmTR+EGnatafQVF4q cCpMC6P2lgqkqq5HFg1a0JE7JeM24PZJsmJjHsG4qAHzkKHjVkjB0yPW4ZNngzkjYzPqM7nEB+GT ayfJ1pz1qjUMyMbaivmJGZ1+FEWv2B+rPhtmaGjpkpFBE5o/byrp6NnRm/gMWjRtCKmzHnNDWztq xDxGx9Cc1h2/VlzXy6uHyExLmfmmDVmZGdP3k9YVv6voIj2SdQC1QIpMg3p6eiIPdu4xSNRbXT// e7J371OsGx3Auqo6Oo4U/I4nGE5ZPNc1NVAkjWY9KbFE1Vd8F3Z3DxtM1CB95qmuA8ZSkctdGj3Q jbqP/U3MU/pPblosjejrRuoa2sVjYtJGiU75sl8GU8vug4r1QJ+fXc+80J3Os46qaQMvkR9M92hN 09axHnbSG2rY1ImuBKZT5POz1NKMaZ7HrJ2dwBcNadmuxxQfeJX5jTY9jBC0KjllRLPbMytasVfQ SxSm1TR2u9WR5wkNaizME2wg9SoqlfasnsZ9xesE9jdsywaF2vpGNH/bsWLeJxau/vNZMSAjQKvK kjI7PQkhHHnD1MyCd/8SwWFM6Bsksc6HhZkJwlgvTl3PCPWk54PlgIb6P8MjH1/k1VRAgwZN0NjW pFjkXC5r8W0Ie3h/8NgPMnXqwcWtA7TqSs5hs9MTceP6TUTGJUND1wRscQplPqZITozBE5+niH6b gFp8rNaipTNM9PgYlVNSVDhC4xJFaaGwsxZ0KAS3GVZWDcBqih9MQSyZeBOViDr1NNDaoZm4S8/i XWh4dDwfDVmI5Yl3mEHsMkXbwAjKiiXHHBUDJkSEBYN4l2eoU+Syg/U13rwJQj1NfaixvoSQ4qLC kM26eob6kiPB+PAgPHsdCKqpCBMrS5jrS6QnFdfB+7ycDAQFhyKHd4rSblZW04KZoaRcCu9KH78I RCEfl9g1aQ5eTJeAKshhXD7G24Q01n9RhSVLvjRZ5yvjXSTuP/GHsroxWtibITw4kF3xaEFLXXLM QnnpePL4CeLZJYwOu7KwtpLgJ5cjwdx79AJZvIm0smkMY13Jd2dnJCM0Kh68aCnTD09unUc861K6 tynRCZM2Li8nXYzYIRyt1OTjQGEHK1tTHlYcISSf3SWEhEfxswI+NuejOwtLlppJS1b+GxcSiGf+ /njLNCKvrA7Hti7Qq190lMLFUt9G4tGLl8hjHSgjbquViQF8jv+JLmN2Ysee1VDnoxxzG1uoKZXo OUS9eYFXIXEwsWzKR9BK8PcLhj7r+dSWzUFgcASMTM0lLn5KN4uldA/vP2DXFopo2bIFClifMC6t EKbGekWSEkKo3xMEhMWhDh/J2dmxuxsFyRFgSkIE61Umid+uqW/C0RQktF+QlYT795/yMVc+jC2s ue0SNY0oPuYnOSXoa2mILUhnl0cxifkwN5fWVbphRdes/xcS+AaqesY81iVH2CW5CGEsuaytogkt NZWSx0VX+RnvcO/hU2Tw0a+JJbvcMZLoYEkzprIk2ud5AApqcF/aNIS+pkSyFRXki1c8tmqyy5+W LR1Yz7SkQ/NYovzw8VOkpOfy8ZMmrBtZ87Ea9wHj8dH9h0hgPSYdQzM0tjaXVsO/hYgKDUAiu6MQ Di10zSyZt5ToIpXKWOby1v5V6DBkCjxHTMeCKaPYZZA29wlLd3gss2VnsYRElqOCWDJfKWBaDHgT zsd6fGTNbqryObqHHPOlBpamyEyIhc+LF4iKeYsCGXk0aemIhmZ6Yn1xYSHIkVeGgXYRbyjVihzm O5e9d2HY6CnQ7zAC1/atgXKRCkapbO9fstQ86M0b1lk1gGo5Hp2dEstj0xe5PJ6sbZvAQEvCbzJZ Eh7BR+lm5uZVjCxTiPCwMCiyzmH9UrSRnMAuaFJlYM6uryJfP8fryHgYW9nDXKsWAlgKampiKhn7 TFthzE9SMljVgWrAiHXR1HhcSVNchB9e+IWhRm0l8AINGqqS8ZmdnoA3oTGiGoGyujZHdynhiwJN P3nmi4wc8HGoDmz49ESR1R/CA54iIPwdTK2bw1RHHn7+oeK4livMhP9r1h+Me8d67TIcLcZO7Gdp G4Tf2LBX8PWPQC2mR8HtmbpKKb5ZOiNfE9NhMOM9g491pdJ2BY6iZWluiqT4aCRlFsDMyEAslct6 7yHhScyzhIhXEkCRYaxvXksV5rplpbx52Sl4ExzO0tZ81GY9SUtzY3E+jYkMRV4NRZ5XKlB5yc9k 3vIIicKYMDJHY5bgCSnhbRRScwimhhK+kM2S4PDodOjpqjB9psHCQh8JTJOkrAZNFUUEhfM8p2cI JcZjekI0Hj71RQ73l76xKXiDj0Jh3uFTPmMz5nXMn1lkiGCeh1RZT16q9sKm2HjM80RiWg502QWS jZUZZIU51P81wnhezeWTEkNzazSyMJQgovrvF8FAlReAX6T2aqDVGPgvxsCDQ0vRZfwJBETcglrJ muS/+Iuqm/4xDFw/thW/zl4Gv7h0jF+0FzOHtPlYkc/2viAtAp27dOONSgJ6D/sOM2f9Ah3FasL7 bAiuBlSNgf9nGKheAP4/6/Dqz/18GAh9cglrDzzDzHkTUfdjQt/PV201pP9lDBSw9ePL1+zcW8sU JroSKeu/0SRiXcHnL15BRcMIxnrvSwf/jTZU11GNgWoM/N/BQPUC8P9OX1Z/STUGqjFQjYFqDFRj oBoD1RioEgY+ov1WJRjVmaoxUI2BagxUY6AaA9UYqMZANQb+izBQvQD8L+qs//am5nNcz1JeR/7b P6e6/dUY+KIYyKvE2e8XrfT/KfDcHPaP+S9/uxCjuZSnm3+59urq/gkG/q+MzSprEL+LCsCFa4/Y 0kogWoK+WQM4tmKv3vJshcnWfefOXUJKZg5bTrGZJ/vYklGoj549urIDZVn265WBE/u34PjFRyiU rYWWzp74fniv4sgQlXVE0ONrWL5+B5Kz8qDOjqCncaBsPVX2fJ/zDttW/olrzwOhrmuKURN+hrV+ PSRFBGDNyjXwj02ADFsbd+w1EIO83ETrqHfRb7B/x248DAhmZ74cgNuhPUaNGMjtK+OFqrKmfKbn hPtXz8M3JJad7ipAhp2mZrLndiM7R7Rvbv2ROghZmex7jp1N1xIsq/7DUnq4L6bOWYtvf12EJibv W4AWZiVghHsn6H41AQvHffPFWn/t8Fqc8ZXFotk/fNTKvHwj8jjiRz5HqVSoXWJ5WD7P/+b9oxvn kCJngPatSvzZfcn2CFEFCgXfg+ws9rMnjhiwYu4U6DkMgGmdDDwLjCwzJozt28CtiTEunD6Lt0mp bMleAH1TSzg5tuIx+3H6T47yx6rV69kPYxzk2Xeb+1ffY4BHi8/+Gf8EoODjU7DQVxB4QTlAiQEP 4PXVSHy/bAu+af/l2h368jFuP32FvJw8yLIzexu7Jmhia/nPHO8y/8/M4kgi8gof9WVY7rM/6Tbk /jlMXbyRvWTKoB77Q1y1cCqUP2noEm4e3YPV23bhnZwljhxYg4LYVxx1Ixye3TxQp7R1NfslPX/S G1HJWaijIC/6Z81mZ/r2LhwRy0wbgqX9lvWrcfOxP889tdDQyRNTvuvDgQSiOFLONWSx8+M8tio2 NLdCixbNocKuCc7sWYmFm8+gY48+GPvDKGgoVXk6/iQ8VZQ58+1rTPl1Nb77dT7sjCRW3+XzFbKX 8dMnT8OwmSsaswW3kIJf3INvNMHTo/Un89fy8Mvfp8eF4vQN9rPbtQs71y+NC/bPeO4MgtjDQR2O ZiP4gc1iX68NHNzg2JCtjnl9cWDHBpy97sPri5owtuMIYRO/RU12rn7m9AWkZufyuqUQOsbm7Bmk JVuol3hqKN8G6f2LO2ewdushpHBZJRVtjuQyHU1MJXq3Mc9voOfg8Zi8fjd6t7aVFhF/s7My2SMF O1ivVbr9ZbL8R91UWQIY9vgCBg0bhr2nLuDogZ3o3cUVPYaORmo+O4hMicLEsUMxkxdrVy5fxoWL F3Hl5mPwuo1fpmLKoA74euRMyLHXewP12jhz/DJSP+Ld8an3NrRr1xX+qTVg08AciWwOH8euHtiL LGb/2A/Ttp5hM3Nj3DqwEb2HT2C3GUDY0zt48DKcTfcboU5+JIb17IzFm66KCD+2cTV2X3jIJudm UK2RhWlCe9cd+5c7g+D/6jEuXziJyeMG4vuZi3GR8fUkKOrj7eBF76iv3LHpnO/H8/4v5MjPiMbx k0cQwVFXKkqCmxZrO3uY6klcjlSU53M8C+MJ7dS5+39rN79v8Q/4ZvqGz9GMLwLj0IZFWLX57BeB XRHQDTO+waiF+yp69Y+fPTy0Gb8tOQNzSxME+D7E5fMnMGnsAIz6bYk4Jp69iWX3Een4hZ2BL920 CxfPHudwaJ3RkqP+hL+rmMakjWJfoRjQqSPWn3gEMytrDiVVA0FhDO8/LPme3wz3PqNQ0efIs7uY Jk2bQoddL33J5HP8LwwfOw0Xrl/D5mXzOIxbcwyYt4ndHf39WnMSg9DP0x0nHkb+fSBVKKmsY4wO np6wVM3A/pPnkFXiN7oKpfOw4beB8Og7HKRphcnjh0CZ9znhTy9iwvgFHKGkHAhiR8UP7+C8N+Nr SH/MWLkFl69cQVBsKs9JWZg/0gvjFuyGGocHNdRWQ3BIJLsgZ/dRIS8wZvBI7Dh5Hif370Dfrh3R rNcIhCRlwcGtG4Z4OeLwoulwdO6JgKj0cpV+uVvKTsWxQ96I5pB/laWCtGjMHd0fQ8YuRFYRPdw6 zlbw87ayI6XPn96F+mD86OmI4chNZVMBXjy9j0tnD2PsdwPw4++rcYlx/zJccKRegHVTBuKbH/+A fH0DdnGmhciwSHbEzg79E0IxccgIrDvojbPH9mNYr66w79gHz6JLIt+UrUdy9+bOfnRs3wfPOcoV +49EYUYKR5QpKVNbWRVNmzaBZpG7tmIY7EJoxrAumLf7dvGj//iLqnoV9Dmxlh1Ba9OLePZIWZhP l7bOIjllPbrOjm0L416RhbYi/XmqrJNRAfadvSuZdGRp/TGJE0jhGYeCIfaJVGnKy4ihVpYq5DZ8 Thmnq+yJnOPbx1EbKwOatfmyWP7G/sUkp2NO/gl5xDvqUjAL6Bt7Q3LrN1l8lp6aQjkSn83i/YB2 jaj1sNml8ld+mZX+joKDgyk2vsixJWcV6srOkgRvT02Mo7CIqE9wWJlLfT0aU8fRi0oq5W/LyZR4 +yzMy6LQ0FBKzcwp9T6J2jdUp7kHfEqelbrKzUgV25iQLHHULb4qLKBsKczcTAoJCaWYuATKycmh XO4DIXFUFeIwXOJ1Hl/n5kkcY+dlS+BFxrwV30n/sJSM80vuYqIiKCwsgrLYaVNKwCUy1TegU0/j pFm57gxKz8zi/s6hDOG3qJ7iDIyx3KzsIgek+RQeFkrvUgU3uWVTWkoSJSQkEkdU4PaV6sSy2cS7 3QtGUVPX78Xrd2+jKSK6bPuFF8lxsYyrEMrMLUuE68a6UpOvy9JEdrbQbglOOMIIiTTIMHL4miMl 8BUPh+xMCmX6eJtQEqBefMF/slIktJOcXuLJlWOAUhGaKToijN4mvl9OWr7077SBHajniGWlH5W5 Zj+YIg1UhEPKy6bQkGAKC4+kzJzS44S/JSOd4hPiKS09nXJyJTQtAJ430J5cf1hTpg7pTVZ6oljX 24SSMSG8K+nPAooID6XwyGgedxL8ScvmpYSRk6UejV91RPqIf3OoVwdb8hi3tORZdizZW+vSimPX xWehj8+TITuHH7Ngf0meCq5eXN1DMnL16eyThFJvy/Z1WmK82P6MbCk9FZLQ15Jc3HamxaS09z0g pyYzLSYyLWZmFtOzOCaKPrFkTJTCcUEeJTJ+k1JSuI7sYj7x9PBcUrduR8ll0MN8ICuLsnhcsH/L Uu0vuczNShbbHh0bX/ywkPNK+VFGSiKFhoWX4Z3FGctdHJ49hmzbDRAdE+fnptOqmSNIjp2Qv4zj b+d2Z3NYDyGlJcWLPOldSgl/yclIkrTjbWk8c+ak12RrqE7bb0SKZcv/iYsN53IhlF6M+5IcOUV8 LDI6lgNdlCCmMI/HGNNveKTEWX1JCaIXR+eTlo0bvc0s/fTD1/eP/kns/5V+3+JdJuMT7zWka+BC 0ell6aU4U1YkWZtq0pRN54ofZSb4kR47uJ69ReLIu/gFX0Q9OMVzozndj+TGMT9+eHEvqSrK0qoT JXNlXNB9am6kQI49p1JOJdWWhim9TitPiyK/l8wZWWlJ3F9hlFuCwqJiBfSO6Tf8yQUy1jSjCz5R UnDv/ebyd7U15b20jDJtuyhx3C/wV/s2I4tpKy8rRaSBqJgSvl9YINCipB2ZRbTI8YE/msIfHCdt TTt6HV1ZR6aQc3MT+mbuzmJYhVkxZKutSkN+2Vf8THqREvyAGmro0WlfoW2F5PfwHOmr1aLpG49J s1T4u3r6YFIx7Upppd/y/CzAyMnKJJY+VjI2c2lgay0asaLEOX9pEAXZGRQSHExxiSmlH4vX8THC mAimyLj44nnlvUxf4EGVJYDiSpbjbNUQAi5yjMF69bSgpKDMsWvlxJAvQgiu2uVjUlIeDh7fA/P2 QzC0h0PxYrgmi0eF/JWlSJ9L8IupjTnTWbKX8JZDK70VJTqyQqGaSjAx18SerUtx//FjbP3rGBpZ t4eBKsdZrcExevn4IZ91K17fOYVbIalo2LK1WE0d5bocvk1SY9izK7j65A3aOTSvrAnFzx8d2Aon Ftk7O7ugefMWmLd2j7izC3p0Br2+Hoj1qxaIDnsb2jTA8Ml/IONDseWKofKmkY8tZEv74M57hx+G 98filSt5l+gG20Y2aOnSDT7sGDQm6AUO7NzPoaZy8fyqNw4dPoj9h44hOjlbhHj34iG4tG4FpzZt 0bR5a+w+K9mB5CSHoP9XvbB+2yZ07dgWTZo0RttO32L3qlkYMPNPLkuY+eMQDPllkwhnw4TR2H/j GcKun4WHowMcnVzQgoOvj5u5FJlF37Vi7s+YOGs+lxuM5i2awdraFvsv+/FxT9HZi4yEpPavWwBX t/a49iyQY+quQZdOHmjV2gVbzzwphYVc/DZxJGYuWIzv+3myU+NGaMrOu888DhbzFLLz6AU/DIYj f1unTp3g0rYtlmz0LlX+/UsZrj+fY4CuXfAj7Js1gaV1I/yy6qTYZ8Jucevy39C6RUs+SuTv69AD L8LikZcWD+/D+3HvaTySA5/gwKHD2LdvH54GhmDZjwMx7yhLFNP5WKizB9Yc9wGy4zgU4mD4J+XD 7+FFuDm1hiPjvkkzB/y594xIq0LLzh7YACc+cmjTxkn8rtP3JNLbrctn4MdfZmPaD/3R2L4xGjdp hm1nH73/MVV9wk7Ejy/5Dc0ZjqtLWzRnmt/pfa24dOjTC+jWoQ2aOzihnWtbtPf4msNACSL4Quz5 YzacHFrD3aMTO1R35iOhrUhhh+rHD+7Dk1cpiPO9i4OHJfh4zk6thfSQ1TkceSwIY6JZMx4T6/cW 4Zcl6+OHYu4fK/DDN15o1rwpGjR0wg3fstK3XUt/RWitRpjxXU8RnvQPh8soOyb4hRDXWYgvKySj pu4YMbgdLl8+hvICGjFD0R81duStkp+Cv04cB59sFiUpwyHsXb8Qji1aoI2TI4+xLqwWwpIqysSU 74di8fIN+L5vR1jxzr9pK3ecfxwhlhecJc/6biCrvbRhWvRA2zau+PPgA/Hdstk/YtKsBfh1/DdF Y4LjyV6U9PWTyyfQxaUNXNp1hHv7dmjXYzRC3ybjxrmT8Oawkrlx0Tiwez/2M71dvPec4eVjyW8T 4O7eEY6uPXHTT4Lzoo/A69OH4ObA9NuG+RGPzYnz/2S1BeBt4G307N0HG9f9AUcHB5ZcNEDfkTOQ mPMRWQ2jRWCLQq4ateown2jHTchjtZsC+N09jj4DhmLz+sVo7dianfc3woiJq8WmvGC+7syOytuw w3SBR8xYvk2E4f/4DnbvOYGkpBzcO3MIhw4d4DngDAcM4HBgOalYNX44mtm34LHcCg5O7XGFj0yl 6d7Z7WjDbXfkb3N1dsJXQyeL/Rxz/yp6OreGQ6u2cGCeM+SnWUhix8rSlF3SydJHH/7NScL8Ocy3 e/+CKSM838v7oblJMriFsHEleJWTU4YpS5mPnT2KyPekV5xXqEHwOM68qXlbV+jUr4vw2KTiejXM WmITh+V8eHIdzj2S0FvxywouctPiMPeHIaVo0QUr9j9AVsJr9O7dCxvXL4cz80wbnpO6D5yAmAwJ rkI5xm7fjs5wdm2H7v1/QEQ8x7X/QKxpnkw5OLISlJVqYMnCJUjnWyFevPBBAs0EnD+GDq1biv3V onkz/Dh7hRjuNTH4Pnr1Ylpcv4zDNnI7mBZ7D5uCeCF+5UfSB3Evli2Le0HVy4KdU1+9doLXDBnv QRdwLyOGqJWBVfM2MDfQQBiHIvxQMuK1TWroQ+w596wkm9AwysDcqaPh3rEDzx1fcZzi5OL3McGv cHDPbrwJz0HI3fM8Rx/CPg4lGJYgkeo+u3MWrqy+IszR9s1aYd2hC2LZguxELB47hNcWzfnEsx2P s1ZYuvtmMdwvflHVRaXPybXsCLw+Hbx0l26fOUatDLVowKRV4k4gO9qXGugqkevXo+iPP5bSwoW/ 06EzvMMpSKM+tgo0YErFUoTK6r6/ayHVM7SlSdN/JnsOwdbAzJQ69hhB/hGSlXPsy/NkoiwORapv 0JheRpbsSg+s/42cWzuQIneXXpN2FJlaaifOFaYGPyVnHXVq3ON7YiZXWRPE5/Gv75CxfA1y/+53 Co+IpD1/zuAwcjVo9/nX9PruAR4OIBUdE1p78BwdXPoT1VA2oZuhqR+EKXmZw6Hg7MmjTCi4WGrR UE+EOeDnBXTj5llqxCG/Rqw7R0/O7aXunTl0jpwsWTdpQb1796aeXw8hn4g0Sgp+TOYaqtT3xzkU GR1N8yZ8zbuX5hSYnE+5ia9IW02O59Va9MOCtXRi62+kodOadqycTAZ2fehtTBDZ1wfVMXai+LRk 6uzgRpt3epObaX1q6jWGAt5E0KUjG0mJd8rTV0h2ymOHeIhtbOLej67cukRNDLVp0Y47lB1+k0wN jOjS60Q6vGY6ydeSoV9XbSPWCaWYsEC6eeU02eor07StEmmOBA/Z1KdTMxGex6BxdPXmTepkrklt xq/m14W0bGwXklU0ppW7jpLv8yfUvaUpfT167Qfxe3DZjyI8Q+smtPfsRfppaCdCHXOWXGfRo4Nr SVZOnv48eJ4lPEHUkeG1GvobxXGYshG9vchEtz6paOpRT8avV7futPPcfZo3oh11/mEjBd/eK8Lt MGwWxYc9IEvzruQf4E8Ohprkxm0Pi4qhjQvGkaKGCT2KyaKYR+c4dKAijV24nqKjI2lsP1fSas67 yvxCmvNjHxGWg8fXdPHGLRrZlkP7ef5YHIqpsg+sTAL47ORWUpapRRP+OEBRkWE0d8JXpFBXn+74 JbLAPIBamShRc9fh9OTVGwoPekkH/tpF7zh04pVdv3M7atCIOWvpua8vTenVnKy7T6UIvwc0qGc3 0tNQofp6JtSrTx/y6u5F+677UWLgPTJiOuzEIdGEMbF75XSSrVGLdp4WJAS51NW1kfhtHQf/RDcv HyK9upp06Hpg8Se9fXWT9JRVaePJ8qHksqlnh8bUeWypEGgsAWxio0fLj1wpLn9k6UQyb9m9OPRV 8YvSFywtWjp5kATH7gPoio9/8dtn3ttJTl6e5m4+TFEsffVytiGbnuNY8plJXq1MxTJdhoynU5dO UyMDFbLvPpmlvvk0axjTfX1zWr3vLL14dpccjVVoxNIzItwfBnUUyzXr1J+u3rpIjfW1aOnuu5QS 8ZRM6ymTbY9v6faDp3RizTRS1LKl5yFRNPeHodSssRXToyJ1Ztz26N6NpiyXhNALePWUTu9dQ6qM u8MPSiQ0qZG+ZK+uSI5fT6Y3IZF0es9KYhVmWrn3LsX6X+I4HiB5VU1atP0YndkynxRYCnr0WWzx t1d0cXjOGLLvMFh8lZ+dRKP7tCUdy/aUxGzz7umN4ncp65nThqPn6ZdhHail+8+UHO1HNnXlyOWb XykkNJKOb19CvI6gTccf0Nlty6hTB2cOZyhLTVu3pd69etJXw8dzyM1COrF0EtWqrUlrDt6kyFB/ GtSlOYf+c2RpWwFFP/ImbQVQ7xGLKIC/zf/pXTpw4ChlJMdQ94a6ZOHan3z9wuje+f2kpSRDo37d wRxCkh7um/VJEsDYZydIQ0Ge9lx7/R5KBAmgnuEHJIAZESwB1KKpGyV9LwVwYe8yYtVUMrRyol3e 14vHctSD0xwm1YKeJUhae3jDbO4XZTr1MERaVPKbHUcdzZRp6C/ryz5/7y6f5n/nSaz0SCv+OsV8 8QG5mKnS0MVnKCPmsdiGGoqqNHv9frq4byUp11SmnfejOIRqALU1ViNL56/o6u37dOfUFtJRM6ZL T6Lfq0H6IDf+JbVsaEhTf19OWrUVaeWZh3Rk+QRq2m40pcaFkoO2ErXs/SMFBkfS+QNrSJFpcc6G S5Tw5jpr2XOQIQ4ZumDLYTq3czHPXaq0n8PwfSgJEkAdrQ9IAAuTWQJoSoPnbC8D5v7pbaShXIvU OZzf6r2nSCpYFiSAjTT16XKgZE6+epjXMHJytO30kzLly99kxL8hzzbWouRz8KQFFPJWekKTR34v njC9LyVlFT0696JE8v3k4iHq6elBKnxCYdzAlnozz+zRqx/d9I+nzNgAstfTIPehP4vzxJrZo5gP WNDTuFx6+3g/x/qSpd93XaGU5GR6eu8K3XkeUr5JX+yeF/lVS09PbSA5XvwYm5pQLe5oQ/dvicet mLJ4AWitp0wtPHrTTz9OoDGjx9CmfSwGLUyl3jZ16NuZu6tWSVGuKxsWicysjmkLOnz7Gb1+fJYX GirUbaxw/JVPB2eN4TivauTo0JCUlJRpyc4TxQPO7+VjOnroCP0xdzITuDL1HjuXsouO6jJifamb nQbZug+mYN6SfiydXcYMW4NjRBbFqiTiSaqtKXmOW0Ivbh+mGopqtPnSUxFMSuAlMuT4pt6PKh9Q JfVVtAB8S814Aej63axi8fpod3PqMXajpFhuPLk10qQ5HOu0dLqycz6hphrN2XSIzp07S9t+n0Sy Mkp02ieOCpL9SYsnjL6T/xSLJAbeprkL/qRHt46TqXkzOn5sO7GEjLT0LWj/oZPUtVcPWs8LeJU6 fLQfJCV6oulD25KV2wARxvghHUnN0oXxJ4j4s2ntojl07WkYpQdfpwbmOtRv6Dekrsp9sq308Z5Q NI36ttSm6VtLH5NkU293ezLtNITSitbpf3znQg69fqOU2BfEBj80a+MlsV7hz8Sv2tGAseuK7yu6 2L9kLMlrmNK1VxJmk+h7gbSYOXg/9qP5I90JRq3ooPc5Onv+LP3c3YmUNZwpTnJaQX+OdaNm/X8r A3brognkwhP4+qVTyYjjgxrbedClwxvIacAkundmBzMJBfrxj110nnG/b+3vvPGQpb8uBdKRFeN5 4WnMDMmbznFdKycNJRkZPfJ7m0Hzf+pNqhwDNSI1V6zr6KLBZNKkH1V26iRtUGULwIX9PMjAoT8f okpSYVowNeTFy4wt5+jBgRVUo44hxyCWMEEpLMpPIa/mutS+lBrE7hndqaHnxOIsswc2JbfREtqR Pjy9dAopatpTaJr0SRZ5ORpT59EL+UEhdXWxIct2gylZ+LTMGFo4exY9D5UeVWbROC87cug7qTj+ qRSKOLaqsADcuXAsGfMCsCgEd0nx8lccV/nEX2vJ3lyLasmr0PQdp8QFw5Kx3QnajWn3caYB7rMZ /TpyHN/mFJPwjno4mJB9N+ZrRbS4e/Y3ZNjEiQL975Mh09CCvVLazaZv2urRt8vOirWOHtie1K3a UYj40Vm0ZtFsuvMykvYtHEEaBs0ZV5LJP/LODtI2tqPnMRLe8/DAXNJq6Ebx0o4r9Q05kffIylCX F4Al/OTebl5kKBvTo6iSI7Ifv2pGrftPoWDfK8yPlGnhoWsilLy4Z2StXZ+2nfcrBfX9yxMLfyZl PvL15AVoczsrqmdgRYeuSmIj32aeX4Mn7i3nJDzuFm801u85Q9e3L+aFpgVvqqQNL6BBHtbUZuBU Sd3xvmRroknbroeUqjCTBtiZkttIgU4kKf71RVJRUqADd4No04R+pGru8l6M+LCbR3nSVqXDDyOk xWj5pJ6k08RDQmP89FMXgA8OruDYvNb0tBQepcD/7gJQKP/gqjd5OjcWF81eExczHRVS7GNWW5BX pLYdu5C7a2tSUVWjCb9vonLaJ1y6kCYNdKQuP0yXNqXC35RQCS3O2i7li3k0op0hDVt6lkPuPiIF Por+ZftpSdm0N9TMQJ3Web+ii9t/ISXNBvQ8UkJ72VFPyFzH8sNHwLwAbMqL3R1X/Gne165k2Lo7 rZo/jhw9xtP9Y1u4Lt5khhUzApo8sBXZdR1Joa9vkJyiEs3dK2ljIQsibHXVOQ41L7hzEmjRvGn0 88SJNGnSJPrppwm8VpCMo4i/uQAUPvbl4+s0qHtbcd3gMvhnisvOo4ywx9RQSZFaurpTF96UqKmp 0aCJCymzaHxXiOCih2kJ0bTk1zGkxsf1WhbN6MSToOLs6UGXyMTAqMwCUPIyg/o56dK3y8tuDgTh GWQUadLKv8R5Ys+fczl2dQ3662oIpYbeJks+lm7m1of+On6RkjKq0LjilvzziyqbqhSyGFVRQxMn bt2H95RBmHfmLnxD4+Fgykr9TPIFfEwz/KepGFXa0q4wC6paWvB5/YiPiAaJYuOqiDTVtRQhNOyn GX+gt6MdX9lhGh8pTWULId+H5/HdwvX4bulpzB/VCotG98T0779F08bP0b6xNscQbSr+B3rBRp3Q Y+IOvPltOqzqJOK7AT0QoO2BS6yArl/34+ZibznupoqRMTSVBEGykOShpq0H/4wssC4a1Djeonur xuIbOWUt1OHYwjnp74uhxQxV+iODbp3aFeNJXdcMoUlF4mrGv6zQjHJS9HexwZCrXYCn10/hjSzH m+S+GDB4GPTV2VKtoBByCnXQ/2vJMYeauSNm/uKIzJjn0Kv1Fju3b0SXIaOQeXcfdu5eDTmOMVyH v1VGUxcGfEwhTRoGpkj3TxNvWX8TLl3cYaIqwd/oqb+Jz5MDgyHDx9jn2FIuvy4rZ3fpLC0u+eVj eRYGln3Gd/n8XZ07ukJqAKeuZ44CPrpPiPTncK410NbJtqhMAVITkyGjJe2L90CJD/K4X6xt2sPZ Wle8LxCPpOUhy5ZjSXERUGEVBu+De8EMF1A2wdBhjcGG6mKSEY/ky8K3MzdGyt5tOJEmh8kzfsOe WT9h+74MNGzYG7lJHA+0VgECHl7Cu2eFIu57fvMtLPQV4XMumK2J83CLFZcfMPULoIeMHMRxamtA OLJq69wG+oLWOad6uhasaHwXbOjKlofio0/4w7FoM9JhYN0aUoqW4digyuqqSGVaDM2NhYKhKYx1 lMvAzGHrRH//TAyd0rX4eRobWZXuIgEf5XssNi0ZqsYmbEknLVYb9YrGhMAIWC8S3ft2hYrwabW0 MW3WbGlGPDq8BbuupfEx1/SPegAoLlTuIiEpAZCTRVE48nJvS93KyvHx12h08PDE9DGDsGTMTxjo 6oR0jmWtXDML54/uE63wqaYWho10Re1axGNaAT279S/pA7aArlVLGVEvXyCJjDgudbOiCvKQxlZn tYvucpm2XT27wFjy0RgzdZb45uAEHxg79oRREf/IysrhOkq1UTxGFI64Sz2TwuSMIjmWesVSeijo GEC3XkncYnU2OkgJEvhRAcdCVkUX55ZiiRq1Vfn0TgVZqZJxWwpMmctC7i/FuppwcukAjZ794NLB g2OMq4t5hNjFGqbG8Gwn4XFO3YbDid8cXn4FShz3XbuYh8oyLzTA0+RMsZxwZC/L54S8pimpKz8b 0dxGC2vL4md1OGawHFtAp6SksbFfIrRsm6KeZEgU50lKTwFx+4xLxcLVMDBDZs4jUdH/7xCSrIhv btunKUAVt6myixaunvC+6ILNS35mA79fsN/NC72NWTVJThGNHdrCRk8ds5a1gWPTijw+8FgTTmpL oayieqJevURCvh7cXST9DLaBTsvIhzAcBXpRUlHm/pKoPaFWXahwvPDsVI5b/9oHega2sNSTF8Hm pAuW9axIUZbdVVAlj2mZ2hg9ZyY2OXXDoqh6sGrcHwItymkbQF+tmBGgPs8TaTHZIi2qcizwrq4S tS8ZgRbr1kNWChtSyLLqWO3aSGWmK6h3FBbK8diTML2PfHoFbSt5ZNPUGbuPX0SvTXPQb9RCbHbt jSld+ZiwhhxsWC2quYkOJs11YFUp+yp1uxLT5uR5a/BV7+7o91V/TB69GB1ubwJLORlv749NsSVM 98LRePn0LjYEtfggzu/eBcQ9lswTfQZ/CxNNOSgbsRHQiaOYt+APjB3QFVN0rTBn+RqM6Ob88a4p X9HfuP/E6YaFTfJq+HHxYuy70JKtpZbgpvdSycKEK8/PFfSKSiVZdsXSyQtbf9uDe34z4dRAwlhK 5ajwUr+hLVRYnl4oy6Y8RSmcg4arqlnibdAr5NfTx/fDOjFSgV/mrcC2A83xNOCNuACU5hd+VerV 5Q4hNsmWxaHlc3AuQBv3Xu3mibd0rsqvjXX1kOh7HgExWWiqy0yX9YpC/YKg59mf3RswJfCIExYw gkaEoOkh/vvogBLqk+Pg8KzvxO4CyqdC1r+RJkGfTUZc9QlPiM3deYIW65PmADQNG6CmggrmLt+M Rppl4WXGR4oZCwtKYAoPFOvrQr2eIo6dfII9P+9B/foR8Ph2MVp1n4ZmDYyRGxGI50HRMGmmx7kL EfTEFxpqkslPHKRU0i9iBcIf5l75NfSx7q/tWD/9G3YB9BWueB+CaX3pNCnJWVNewoCKy/FF6fYJ 31xD+GauKL8wF2nsWkhIj06vZV3Dp+hrX/YbxZel/3C5GjJyxYPn6O4dSFOygr2FBZ5oGkHLQBk7 d+0sfl+6aCEP4EJ2BVM6GTdsxDqYAXgea4tNHd0RelwHf+y/hV/bz2ZXSO+YBhUxee4KuFqqlS6G EC0zyKtGYeXmHdAu98kskGbSKcGhtJ8/SjrCt7GLgbKJdVt0NbHvyl0kMSnWYw6UFROBt1Fx0Naq D0slniz9V+PCfT8MbNuguKigTyuTn4PkdxI9loSgG9hw4BbgJOlnISMrczM+JPiXFjThMZHw4hIC Y7Nhr819m8eTi/8b6HXtJ83CE39ZehNeFKSH4adfF6LXtEVoZV4WV5KCvCeuZEzUYtdHQsp7F4QD +y/BoedvUPgosiRQFesb4pdJ47Hr0BDEs+sBTX1LqGonY/POHcULOAnwJF78yqAWu6kSUmFaDLYe PAeLdtOhVacWWIGbF9QCLhRx9/AanHn6Ft+NkLJPgV5L+lMEwONGeJuZGC+5zX+H1as24F2uMPaL crDLrILcbOYDkvv3/nIfycmXjB8DHT1kBvvjZUgCdGzqc/ZcBD19CR1TW968cX8yXRXkS9oh4UXC JPse1DIPBFc0QvlpP48v87zkhmEKLK5UMmIaSAvcC7+IFLQxU+E32QjxDYBuszbi+oXlEsyr2K9e 6QUg625b1KuDx9fu8s6+lwgtlsdVRko2tHU1UFvPECuOH8WTqDloqlfCoLU0eZGYHAkf3xA007UR ywU9eQY11XpQLD2uGKm8rqhSMrS1RZ2CMDx4FYLG2hKYpQvKCK6PKiMw7g9Z5k+CO64KE+sDjpw0 C+sWbwcbrKDQiOcfJTWMGDcZ9poVLQ8kUCgrHg+vv4LF6O8rBCt9KOrB52YiNU3gU8p4eHwdTjyK xfBvpERUQgPC6k7kLUwEAt/Oyk0p0tXNwcqlMxH5LoPp/eOrYDbig5pVO16gtMPU1adh3lgW+kyL eeEB8A2OhYGdNkPPRyDPE5pq7SEvWNcItF1Ei0LbWeOd//PKu2Y9jGH8VJbYygDylXUkL0Rlub01 hIm/oiQjj57f/4r2bCUcxpbAhTI27NpICQNH/ogOln8vZKORvTt+ZJ3gcdsDkMVDS1E6/fA8VVE7 hfm7oMwuT5ijrXmeqINpC1bDybREsCJ8goAj2zaeOHjWE1GBL/DrpNEY89NseHa4DO3KaLCib/+b z6RU89HiwiTNlo/IZYZVR9ceyxbMQKeRs7HicG9McquHnCz2oca7yfLJi13FOP25HX2/HoLVS6dC XTYFT14k8oAYgrqV1C5IqkZ0bYmVEyfAus5i1Eh9jfmHbmDGxhkwNY9GYVI45s2Zh5G9OuLS/j8Q V1gPLa3McHr7Sjx8W5uV8hsjI8aPEbmUFX1HwbiuDOZcv4Zspfo4vmm5OLEJBKqqZYlhw3oVS07K t71F969g9/sqfDt8GOb8OAy3963H1WBZnOvfEzKJ51mSU8p5KDM9tq5lX0/CUKssEe5ePwf/oDC8 9gtDWvJNbNuuLvED2Fidy5fFoWDMki0dRHIqMNfTwYaVv8O23mjEsVRCx64TOnXuh1baS/FV968x d8a3kGHT/WP7HmHa6pWwYj7KVocsnS3Xplr1oKnOE4hiFpo1NoJavQ5QwWLUtzZDA8cOcG+hhfHf DUbunEmIuOWNDecDsPLwZvGjcnNyeYdXfrLj+Y/FGBmpqVA1sseRwwfQzq0j+zHrx9K2XTAWpIk8 ERXmZPVlhk0AAEAASURBVOLOicPYWRgI5049YaJRk+mJcVbKG6owIWWyv0MNYzvo8OZyzrTxCHSz wObNu9nMX6XspFIhmgsRFvwE+48cwavb57B41UGMWncAuipy+GrYKKxs1wv9R89ioyQnRPjex+0n cli/cyoUmA+aWTfFy+07sWxHM5jIpSEkSpn9czmiTo08aDZpBAM1Zbi2bs8LwAfQN9eHMRtddLNX w0CvPlgy/ycoUzKO776G4XOXosvXw2GwahN69/wWU8f1ZXoMgPfJYKzZs0xcIOWyRFKahIWW4FOs XC9JXxf/yvBu//Gdg1i6jPPyeCyQlUefQSPR44fRmLvXS3Tn8b1XG+xeNAtvVZqgF+/ALVUs0a3p HzxW+iBu7lToq+bj5u0wTJs9AW1bG2LNvEnQSO6PY1tXIJ4ZrGJcpOjyQeA9FtZNsGjlBqx3M4Na bjzepmpjxIABsF34J0YMH47ZE4bg9l/rcC28Jk7zmBCkEbnZZftT0vhCbJk3gyXUVjjErl7KJh4T 13hMvAmFX0AYsjKuY/t2VRg2dkJ7O1XeVObh9J6dSPU5heP7d+Jluh7WjhtUFkS5u2dMs1tPPoVn p7ZQrp2PPcuXsEIw05OeGqwYX4vWd0SfgZMweog73gb44PKtPGzaMoGZdAHu3fDGkbph2P7nMtx6 p44rP7GfQsVIGCq+xdQfx6NvMy1s5k2OsmptJIVHiTULG9/3x4Qs2nRpi2U/r8WUuQZ4d/MQzr+K ZuOBukhOYkmZhjy0zeyQ84aNRxatg5e9Fu7djMTYWWNRn6XEAi3ksbTz1F/bkOpgia7s7sSmvSdc Gy3E6JFDsHDGOAReOIjdN6Owd+4APpvgCYrHeslQl/CjinhyaXTlMx0JvsuEpW35JU0h06jA48pz 9cYePdHKbCm+/3YIFkz5Ab6n/sKpFxk4uKq/MMxRs64OjFXlsWzxXGjl9YP/3Sdw8PoGI6aOxc7+ kzBhvgHcG2lhMfN3Hae+LK3Xg8zwH2C58QC6e/TFvOnswy0rBqy1gUW/D0dfD1tMZ0X52otnIePV TSzcexu/bPYG6yaLqZCxlfzGD5vXbYWevjl6d3PhhY3kXUV/61uyEYqFDvuMXYXBbhvLfjcjPj72 MZYsWAQ1llIV8OrXqpUHerazw9mTxxEV8QYxsfG4c/E4diAcjV27wVIhHhPnbmFhRwfoaSji9onN CMhWQcMmZrwQ9kUW+0TM5v8sn6uoOeKzWye240YCYXqPjpXmEV7o2zWFiUoSpvOC/UUrQ2zevQVK 9WojOSKKjYHqifWwwkERDJZq85ySm1eIhs3bIXLJdEz+ZS5qRlzHoSuveXHIG5sSgnm/XnFOy+I8 AgXIYOi4qVjJ7teSU9Jh09YD7ZuoYAzPE0tm/oyQq0ex7UoINpz6ljdn0UyL7EO0dDuYz3+MFgWi T0ti/53sjkhPRYFxnw8D2zYY2LUNrp33RnB4CELCopF86zx27MiFpUMHtDQAJs5YCYe2zjBlX8C+ N47iZlQBFgq+UnkTIuA9m+cToOoLwN0bliEyuy7atGjApzyh+PPAGRi2GVd8SiVgNzfxLY7t2ILo 5sxf+bRL9D/JAi9Lc0ss37wYHRvUQEaoP+roO6FPl+7waDgXA7r3waJ546HIm8Fju29g3OJlSH61 C8tPvsZgLw9oqLCPQxakKNRR5hMOYSR9+VRjNqeqVJPFlpJh8Vno3qMnVNmJpTk7DM2LDkPQuzR0 ZAutwIBAOHXkwVDOz1vNOmq8SOmAiFc38Ne+Azh74TLS8jTQu5ebcJJTcWIr49ZtnBD75iYfTe7H 9Ycv8c2kJZg2sgvqs+NnC5Z0Hdl/CCe8z+BVZA6mL1iBPu5NEPz6HjZs3gJv77O4duseWnUaiY0r ZvAkIMuLggBkJ7/D69evERgYiMCgICSn14Wnl3Olpwi16qjDo0NbvLx2AgePnUFkpiyWbNoOLwcL JtQE0YqqR/fuqCMoReZn4pV/FFw8usBAs/KBfnjvZuw/eg7K9fWhViMHPj4+kNdrCOemlnjl+wot nDvC2lDYUQFRYYFQ0rJDOyc+MuDB2tTeDkGPzuLY8bPs4DYGHtwXlqYm3MY2CLh3hdt4HHcevYAF W+/26OwEeZkc+PoFw61Tdxiql9558G6Mj8Jk9R0wpJcL6tZTRWxMMFzcu6GZtQU6enRAzNMr2Hvo BPtaisfUP9bih15tRdF5WIg/6hs1hEtzuzJ9V8gWfn6R8Wjr3hlWpmbo2LYJ7ly6jAIFMzjYm3Le QkSE+CLwTRDv5v3RokNXGKrVQaDfa6alVmhhYy7Ci48NQ05NPfTgAeHYSB83Ll9h6W4qZi5cigK/ q4BJZ/Ts0KhM3aVvUhJjeTHhj1s3biIkPgfjWUI8fWg3CD5d1Q2s4NLMGOfYwvX42fMsSYlFh6/7 wLGxuThxGds0Q800fxxmC+vbD5/C2oGtNx2bISUkEA3dB8GlqTnUeTEbFJWAgYMGQFutHjN9N8Ty QvLAEWY893yg07gZenZ3Q30tPXR0aYbHl07hMB+LP3zuj6ZMG+5tmyImLAh1dSzg2tJebHpqUjT7 uFSGV3eeuD4w7mPZmXlYZBT8img4KCwKrXlR0JCllC7NLXDlyF6cOHsZqG+Kjdu28rGHGpONEvtK 64x89o134uQJ3Lrjg3w+kunVrzecm9sj6Nl1XH/0Cp2Gz8H0ke6Ii8tGp668i+exaWHXArlvfdiS 8yTuP3kBe+f2aMNWf+5Mb75Xj4tjIiq7Jv7YvANerSz5W/g43N8Plk2c0MzKpLhb0nkztmDxJoyd vxptGwlS5bLp4F8bceDYBdTV0IeqbJY4JhT4uKptE3P4v/ZHdGgwAoN5snX2YufOy9HCSqssgHJ3 2W/DsXXDehzzPsmOYHnCkjPBqrXr0MpSA8paJnBr1QDX2Gfl0dNn8SwgAs5sOcnK5TiyaxN8XgXi 9cuXkDe0x3qG4dJAFzWUtGBnUh83rl5iq/EsPsbbCGc+zZCto4t2jo2Yt/hDw8QWzs1sy7TEpFFz yCaF4fzlG1A08+A2zUVGdCxas0WwrroiVLTNYa5WgCOHDuHytTuoo2fCk4mryBcLCzLxhk87/P1f s3VjMjw6dUY9ZRUem24IvX8e+w97w4990P22aiMGuzcFu/1AYEQivLx6QFWhFu/IcvHKLwQtXDxg YVivTLtK3yRFhSFTvj6rYbRh2UvZlJ6SgNikPHh184RCqZc1FFTZStkVgbfPMN2fQlBiNhZs2Ib+ vEgSyFeGrYkFZ9I+108wj76AyKQMePbuieat2sJOTwFH/tqL89duwbBFe2zeuIJPZOQhX08XnTxc EOl3F96nzuCBz0uoGVoxPtrBzcMd6UH3sXc/SwgDIzBm1lJMGtpVHNNCizPYW0DAm3D4PvfBmyxF 9Ojk9MFxJMMbJxuTurxwmYfUeg2YHhoWHwuyyy+85s1ISIA/AnieCOJ5oq5RYzg3McbqFYvZX6IP 9NmhMFJjmE6fwrh5ezQxUMKhjeuw//gxnD1zCs9CszB96ToM9rDnI/gkvOF+cffqBnWWJFeU/H2u wavfCDjxpuTXEd2K21JRXjllTTQ208ItpsVnIWmYsWQDOvBimhS02FuFOfwCw9G1Ww9W0WBxKEul /fjEqmFLN9FytW5eBM+/N1BYrxk2rV2AAj5dcXb3gI4an25VlApz8Do4BM1du8OSVUjqqBtCRS4T NZXN0K2rC3sO4Hn90SXsY/7wOiqJLcE3YGQ3B2Sz6lRAWBy6e/WEmiJL6/hE4PXrYDRt2xENjCs/ BczLSsXLoECEMM4DAgJE3NdQN4U7q4Ft37wSJ87chKauCRT41OExz5v1rdiSnFV9Tu/YjL1Hj+DM mdO49yIaP/y6DOP6ubIKUSr82cG8azcv6HIAiaqmSJ9b7DljO06dOoVzl27Cwrk/NvzxKzvqlkge C/IzuG1+jNuXCGJL6s6dO/EaQIAuCzv7Zoh5fRWHj57G88BQuHHdNuYmjCtXRD6/I84Tt+4/gX6T lujVw41POgn32Jr6xKlzOHv2IgpVLbB6+Xw0ZGvlfyOxmk/xMv2L15eZlorCGrWgxHofVU3pXEam Vm3Wrysr9s3PzWLdh2woMlOUL6UQxA76kJ6RIZZRYo/tnysJR6+y0rObzwX0b8IRdqU1KmiLIE6u UbPm34T6frH/zW9ODHnNjDSVNwItoMDb+Zd3TsKpQ1/MP/YYYz0qXwC+/xUVPxGO7mtWgEMhtyAd lqnC0UhpyMJutQa7IaoosT831PyM/VJRHdJnldGG8F74LuKji/KbS2FH+4F1J+vpMO3LlloBFFVW Vfoo4J14WlYuVOuWHO0VgfiiP5msGylIP1RVS29+Sqos0y88qXRycESbH9bg15FuJZlKXwmsko/T PjUJuq/CsWHlSdC1FA5tq56qivuqQ/x7OT/WDkF6JLoOKwe+sudCNgGmDI/N8vgoLBqX5Z+XA13F 20LsXPoLfpz3J5q6foWhI4bgK892qEKQmUrh57DUS9DzrKOi+kEJpBRASMBT7NmyDqs27IGeSx8c /2sz65GWneeked/7/du0WMi0WJnk5b1aqvTgYzRQJSD/MFMen0xmZGaz9KyueAT9D8ExsyxAWlo6 2EyfdWmrvl6R1lsZTiqfJ1idjKOV1PyXo3xVPGNJv+Iz/yqyL75PTUqVlKkpp4B6/L98kuFJWLmu oJfyedN/yuJP+KqKFn/i88+8yPjf/OachDBMGDAcuWr1UZ8XgK+iYuHcbzyGuFl/lo6tbPEnAP/U xZ+I+0oWf8K7f2vxJ2nH+ws14bmQhO+qaPKs6JmkhORvRYs/4U1V6aNGLXmo8v9/OynWUWKNvcrT e/3C6zuJTm8lZf7G4k+A9OHFn5Dj0xZ/IsxKNi/Cu38zfYwGKlr8Ce2r7LnwrjKYn3fhIoshkxdx WNL2WL1mA3btO8Xhzf7ZAlCejQCF/1VNvo+u4opPBGat3ImhA3tC6VNWn3+bFj/v4u9D/VVVPHyO fLXkakOV/3+2xKeQ/2QdURkNVyYkEHjAv734E3D1r0oAP1vnVAP6f4ABtm4NDcJLPgJMY+1bHSOO 49i00QePdv4fIKX6E78UBnjHH8xHfnXU9aCl/u9KKr/UJ1XDrcZANQaqMfAhDFQvAD+Enep31Rio xkA1BqoxUI2BagxUY+D/IAY+vzz4/yCSqj+pGgPVGKjGQDUGqjFQjYFqDPxfwsAn6QAW24sIutDl lJqL3xVjh9WaWeG8OLFPt7dxiaxUWQtqaqrst6pqVb+Lf4tsdiCqqMROLZWVinWw87PTEf8ulZU+ VaCqUqe4mix2cJksKG+yLydtbc0Siyp2U5KWksyGI1moIa8IrfqVW8YVA/sCFwKeBKV70Z/TF4D/ b4MszM3A28R0aLLDb1nBYUSRnpmEHopooOibhWefqsdDBTki3RSyEYIKG/zUUfyMeh5fHFnEjstv IUtBBy0amX/B2iQ0JRCWoBv+cZ2zL9iUTwQtuLMJCw5COsesrcn+vfQMjKAsWA5+YkqOjcAj9oln 0cQRRlp1GQ8Ck6pAt46fC+4ppHQoOgQXdPCKdaoI8XFv2Sk3B3Jhdwx1mecIrE7EsDBwuWxpHdGs lBjcuPMS1vb2MNQRfPNVLQntK6lTWubTjUGkJavym85eEJKZ/9VWUICKigrHga1cX7Qq8P6tPAKu BNSLPJOvhf4TcPc+/v6dFlFeJh7evYvQmHdQ1zFFG8embIj4MU3af6dt1bVUY+CTMMCDq0op8C6H CuvUmbpzyKBOHTvQ10O+o3O3JTH1suKCaOSAHtSpqyd5eXlR926e1HPIRIopitcUcO8UdXezJ109 fTI00Ce37mM+GsqpICOJlk0cQTo6OmRkZEgmFjb0JEISnszv/hFytm9IhoYGpKdvSkv3SELO+F87 Rvb8zMjIiGMKapBbn+HkH5kkfp/3qrlkpqsnvtPS0qahk+ZRgjT+WJUw8Hky+d08QF9xqJoESUSe zwP0A1DeRfrTidOXKEMSdewDOf/OK45LOaozdRkyjZ7ePUvdunSlbt06k6enJ//vSl+PmyGGC/Te tYI6depCXbt2pc6evWje6l2UlMls/CMp7MV16uLSjHQEumEaaNR+EMVlfbzcR8B+1tcFWSl03vsE hcSWC7Um1FKYQQNsjal1zyEVhD77fM1ICntOgzwZ7926UWd3d/r6mxG048JdMfTZP6nl+Z1LdP2R /z8B8dGyBanRNLCTEzVs1IBU6hnSnuslIZc+WljIkJ9MmxdOIhM1VWpg00oS2zT7Lf0weBB53w58 D8S5faupS+cuTJ+dqatnN6bJLjRm0WYxlGR6XDCNH9CZNLR0RXozaNCKbgQkMowc+n3McJG/eXbu RF2796Y5a3dRIkdtSg5/RC5NLUhdXYvGzVz90fjiQoMSgx5Sdx4ru68FFLcvJfYl9ezShXad9Sl+ 9vkusmj/yplkbKBLBoZGZKCvR9M2FIUL+3yVfBlIBWk0++fvqQv3k8BTunKM7i78u+XCx/GUl/GO zpw8SREJGZ+tbfnp8TSqTxvS0jUg9w5uZOfSi94kfhHm+tnaXA2oGgOVYUDYKVcp+Rz/k2ooKNLy XUfor23rqZ29HtUzbUxByfmUF/OCTOrXol5T5tPpU9504sRxOnX+hrjoSI14RrbastTQ0YvuP/Oj 4Fc+tGXLISoKg1pJ3fm0ckJPUqhnTDvP3aHo6DC6wDAj3nEMTI5h2r21KbUb9huFhAXT7OHdqI5p M4rKKKBQn5t04KA3hUfH0sPL+8i4dg3qP269WMfdE4fozKXbFB0TQ95bZxF76qNV++9VUv+Xe/zw 6HLS1G1DMZ+PJ32wsc9PLOZ+aklhxfGMP5j9k176XT9I6spadPphFKUnhJI3M9spIzsSVA1p3Z6j dPbqHXFiXTJtIOk3aUsnvE/Sgl84jjP7uR0xc+eH6+LF03AXUzJq7EV3nwVQeGgAXbxyi9JzigJQ f7j0v/Y2N/4F2Rqq08aL7y82hEaEvHxCLwNCvmh74n2vkj7Hu525cR8d2LmZvNwcCMradOLxm39U 72/97Mll5Mp/BOOjhQsLKCU1ld4G3iEbg/q06XLFeKwYTgGtmdaHZGqp0vwNe+ldWrqYrTA5hDeC RrT+6OP3ioUFPKWTx4/S1x6WpGDRmg4cP05XH/qK+TZN60sKyuZ04PID5jnhdP3qdYqIF2CmU98G htR+5Aw6deIwTf52gCgL/HbJDn5XSFnpyeS9bhFpK8tS9xGLimMyv1d50YOY5xeIZZxiHGYpNZ9f 86sIc+7ac5UV+9vP3zw4TCqycjR6wQ4xGP2zx3fp3rN/Rht/uzGfXDCX7t+8Qkf3rydddTlyHjKF TjKf8Q2N+yikjPD7ZKGnQXtuh380b1Uz3Dm8luMxa9KZh0HsVamAUtNTKU/aiVUFUp2vGgP/IRio 2jmsIFNks2jh2KCzZ3c0qFcTrg000Kjzz4hKzmNP+TU4ZmYtdGrvgS7uzctIILdsWg3fHCs8O7IP ttoSE/kRHGHgQyklzAe/bzuN6esusTPN1mJWne6GkiIcBieFQzrZWlrA2NAEzVrZQvZyBIdUIRg1 acP/JdkMdL5ib/UTkciRMYTUir1wS5Nnj0HQHz8f79LeSR9V/ssxLL2PbMeFW684+oMdhg8fAg12 +50SG4pH7Nm/ZQtrHPtrK56Hp+Kb4aPQ2EK3clj8RoaPMuXkalXojkNwlnz7/EEcPH0bSur6GDry O1jolhxVJ4S/5sghexCRkMrxDR3RvWtX6NUXLBYL8fTOddEJtBy7wNHWMUbbto4cd5a9UxZy6Bzu Oz43EU6vxCQ9Onl9/yJ2HvRGrqwy+g0biZY2xuL76De+CHqbj6YNdbB3+zb4R75De/bk36WtnQQA /6WcREyZOAnOY+agS3PJN3t2M4Js8gusv5KKHr16QqfotFao1sDUAt09u4n/jRXzMOrPxfjl534w LYopXAxYepGXwU56U9GCI0y0srMQnxoYSX4lWf6HvfeAq+po+scHEBDkCtJ77x3pSBfE3lGx914S u8YaY4uJ3Vijxh577733htgRFUUQpAjS4fufcy5cUNGYvHl+n/f/Pqxyz56zu7O7s212Z3aGFWge 3Uvb9h9nvcdu1IetEmirKdKLR7coMVuFPKzY5Nuq1ZRcqEp9+g8iEy1pYcAKq48fPkIPnr8hTT1d MjZ1ZGXPrtyeCXTjwRvy83WmfZvW0tUHL8k7rAXFNA0Ss0uOj6OjJ87Re+ZyG7IZJDfPemRlrMnq oth4EYs6SI0tSXEs4PfNszi6eOMhqajVIlMb3fJayZ7P716g1Zv+pMx8ZWrduSeFerF6G1bee4kV 5OrbuxMbMqc/WAO9Y0AD6tK2kUzprQxAZQ9znyRsGqthVHMKMFOldtENyZXNKZ68dIeaexjR6WNn yd7bn5JiT9OGnSeojpEdDRnajzSU5Sj+Flve2LyDsotVKLprLwp0t2XI0o4iX8oGnFiKQ3wr6zxi 3ynOo73b19CxCw/IxMZNHBMC7std/J2LtGYjwyyRJ++AcGrKiuA1uC+msSLw39evpVdphRTRPIZa RPDYZtzVlkhItaBMn2dZHy2H9bVn/KWtNHrWTpq+jueKLg0rRWWTbsxOFk0KVvoqeE25vMLf/Uvb 6GaRArVr0aIsBujuvSQ2sRZC0eHe4vg0MGAzA6LLEc1P+fqHUpPmEfzXhhRKUmjnkcNUOIotVLAY StMBY2ivviIFthlP66OjqBcrAf6Sk+PxWJu14pw7epCeZY4naw3Q5v37xOg1ynSa5qYn0ZHDxynx 3XvSNTAga3tPcmeza6fO3yHfej505+Q+2nXyCkW26kGNgj5WQP1pvm+eJ1EW2zyOaR9Npoaq/CdV NF8eLy8rhTavXE23Wbl8BI/z5vW9xaAMVg5/62EK+fo60t6Na+naw0RWPN6K7LVLKVNeg4K8KvLN ZpvkZ6/FsyL8SFJTKqVz+3fSzqNnyNDWi/r06szKqXkOYuXWZ05eIBtPP0q9f57W7ThK6qwQffCQ fqRZWdN0ecHEpyL5BIaxz4N+mjaDvLyDqBkrphZccW4mnTl7g9zr+dHtEztp35nb1LBtV2rIlqCE XstSP6K6mU/HppC2JP89W2NYT2diWSl9SDPq3CZSFBcSWPrnrzwivyBvOrt3Cx2/cp/sPcOod6em oqLsFymvyNDJnRWvW4l9RMJiAuXuRdxNOn6WbXqz/Vl9to/t6VuPTPWkKsme3r5AazbtpBxhTNSr T80a1Sd1VthdxHXYyaYpL9yPJ7/wVhTTMkyEWw6z+lmNgf8oBr6VEL25ZzE09A3wOFuaYtHgDjB0 jEQKs+QK39yDrYEqfv7zBD58+ICcnGzk5hewVZMcdAnSQ1jPCd+ajRgvbt8C6Bg543JcPNYumoMp U+fgwq1y1lAJlk0fAFUNDXTr2Qs2zPIdPWObDP7LJ3dw7PABjO3REur6tthxOUEaVlqMuFuXcWDn VnSM9IG5R0PcS6qCbSeDxJ7C95jQPAxKEjP06NUHrjZGsPdvhBd85B97ej0kmtrw93KChasf3Cx1 oO8SxSeiX2cHXN+9AMbmYUj+7ASwBL8P7wW1mpqI7tALrJ0eehZOOB+XJJbo0cWtsDbUhYtPJAb0 74MgT0cs3HSCDyBKMOP7HlBVVUNkkzZoGuIFRU1XXH/yCtOH9ISfiz0USBXhkcxCadwIg2asEOGd WjoDOsrKnKYT2jQKhETHCBuOSFn6m5eMg66xOXw97eESEAILXTW0+uQkaO8vI6Bl6MvsD27nSm73 6ilQs/TG88wKVu1sPgH0bdlNPA0Uor66e1DE3ZHY5EopP/UWYkbXKJCKDibM24bc4krh3JaLJw+C mpoG2nfuBntLI/g064JM3olv+XkQDExd4OdsCmtPb6ipKMA2vD/SuZgFGYloFewOVU0zRMd0gqeF PsyD+4ms0ssHl0NdWw+B/m6cLgDOlrrwifpezPTi3t9hrCGBo0coOrZvCYmiKuZsv4oja+YiKrQe VEgeLnUDWTyCRSA690cCn4rfOL4ZrfhdU6KKdhPWVyo8cGf3WhipqSKwfjQ6to6Eqro2n0af5ji5 aFDPCR5eHsyCtIB/gA+U5FQwZcv5j9J/+pIadwr2umY4Gy/tz4WpD2Cjq4Lxq49ypV/DydoQAUF+ MLSyRUiwJxRrWuNJRgmub1wEA1VVhDRoj/YtwqGmoYtVe68i+eFldGBWvinXWUvHCs1YrENgm647 GSeytcc3C+ExYY6ePCZcGLZDvSZIeMun8+yOr5sKfU4X1KAV+vfuBi8XNxy7k4jEG8fhpKMJJ69G 6NW5NVS4v46du0lWlYKUWLhb6GLF8W89ASzGjz1DYenbHjmV+wZDLM18Dm8rG6zY/WU24U8jomEV GoPKkhhHF01k8lMerQf9jFfpebKyAdno4GKNsSuPyL4NaeEF18a9UCT7IniK0Lu+M1wjhqCgovt/ FEN4SY49DgN1JcjLS/ALl1E4qbLg+VNFRYJZq04hJeE2vLhP65u5oGPnjrDUlKDh4OXIS7oJawND hAZ4w9DSFta2ZpBTMsLWiy8+y6PyhwxuT2sdFZj4tcTpqx/j9/3rxwjxsIKdewA6tW/F7aqBX7Yd E5Of3/cbNHT0UI/HhI1XAJwstBHWahzWzBkKDSMfPKvE+pw9uCls/TrhAx+H/Tqml9inY7p0h7WJ HkLa9wcPCXBF4WZvDP9AXxhb2nBf9IaCojluvZSe3FYu82f+/GS4Oxhh6PydsqCcpNswNdKCv19d GFo4wN/Dhk9wzXDsyVvsXjwdkUH+fNIqDw/vEFEsqXWPYXj5vgQl71P4BNgHBpaO6NqlEyQ8Bgb/ vFKE+/zWfmiwOEFwoCdMnTzh7WoOM+do5BXnYOL3veDmaMI40kaDJiw+wGz8jWfvi+kOrZsLbR7T noFR6NCqEVRqqOO3Azxe2B1dOxl66hIEC2OiV1d4OfOYuP2SmVlv0DLMHSY2LujaOUacw8cv2yqm qf6pxsD/Cwx8Mwv41r6lUFZWQdO2HRHTvBH0jJlVcuquWMa8pHtwNJJA29IV4eFhCAysh3FzNnBY Dto61ULviYL/292ZFdOhoqEHa2c7+DVuh47N60FNooMVu66JQLIfnoY9m4VlyhjaFnWZvVlBdP2x cLy46GgoK0LL3AFnbj+VZlzyAaOHdkZdW1uwCTq4RbRCfIpUpvBLJbu7eyUU5VSx/GisGCU1/gos teQxct4uPLyyU8w/pMNApGQXIvHcRmhoGOP4w/QvgRO/f4kATL17GnpKChi5dJ8YryArCREumgiP +QFFBQIeDeDRcAAyPkhXlsL8D/jARHbcmY1QlVfG+HVHREIm6coWbhs7XI5/hysnDmPGqG6Q6Jlj xcZt2LljB05dvsuHdy/gqydB0+9+hbh2luRiUGtPWHi0gCBit33FJLFubYbNQA5P6JN7RCBm0AJZ vbJf32ICQws/rj8l+1bu+RYCMCvhKux0DLH3ppS4LU/76TOby9mnXRT4gAsuwU1w5NoDMcrbB2dE ltbYVfvF9+dX90K9hhq2XX6NfYtHimXvPHIml70YJzfO4PZWxZknKdg4ozdI0woH70pZQjumd4RZ UA8Rb1cO/y6m82/D7ZlTiDVTuiK89Rjk56TA11wC324/4K1AhRalIcxJB1M3Xsbze9ewadU8GGmr YcCUedi9axfLWx5l+UYRqyJxPqiRHZqPFliFUlea9w6t7Qzh23kcpE3JhMyAKGiaBbBMaiYaBtpD XtMEO87GMoupED0DzBE1fHl58iqfqXGnYatthI2nbuPBrYvo2MQfmqauiEvk3VruC9iaaqCmvj1O 3HvBxMc+WFt64WF8AqLMdRDSa2oZEVSI8T1CYGBXH89eJeHAru1oxqIWzg06YhezSXdw33n48h1i 96yEAo+JVceli9vbJ5dY/k4eI3hM5KY8hn0dZXQYtkBGGPGlLGaR5eL7iLow9YtGSln/3fDrYCip muLuKynR+ncJwFKW82tkWwuDZm7+DCf/lAAsLcrG3ImDoSwvDz07T6zacVQ6PpgAjHG1Ru/pq/Es /iEWTPsOCvKKWLL14md5H1oyDJrGVnheJv/8WQT+kHzrIBzrhaFRfR+Ecr/aPHsEfJp0QP0AX8xY sgejOtWDtmsUYl9L5ZendKyL0AFLkP/mLkx43tOz9cT1Z2/wIf0ZfE2U0XGMdGxmZqYjNTUVaWlp 4jM9873Yt4UyXDm8CXYmupBT0cSAcTN54y7toyvGdgfpO+NxmpSA/7F7BPQ8Oohs7EsHV4pjol70 YLxlIeJVEzsjMnoCMlPimN2tiHFlBPGHt/dhoqeCn7ZfQ8aDU1Dj+WjaZt6csntwehPUlDSw+/ob 3lAn8cZKG0raNjh8OwFpDw7D2tyNZbu5n/6Vq4oATL4LHXVF6DvXw+2EFJS8ewRXntdmMes//s5l rFs6C7paEgyfsUQcm/sOnRA3C0eWT2YRCWOceMBlYrd51kAo63nhDaPgVexhcb6xqtcKz5j9f2Lt D3Dzi0FuSSEunjyCEX2bQtvaDRt4rO/csROPEt8hO/kebLQU0XT0ArxnY/DIfApPrueiw0+Qz2G2 TOx3Gr6o0pjIQmFJCXbPHw2qbY7zT9PEcqyd0hOq5uFI/gb5aDFB9U81Bv6HGPgbBOBvUFWTYNCI 4bDSVIJZaH+ZYHve63uwM1TD97/8juvXr+PK5St4/JwXdxbQjnauhegRf0+O6PzqOdLFuP048IaN XR6+b+ULt5bD8CHzNTrUtYB53ZZYtWIWrHTk4dO0G5LLJlzW5I+iwkK8ir+LtmFu0HOO4tM26WRX VMxhBfmIu3oU7uZaCOo4QTYoq8LjlmmDoe3YQLp7LYvQvSVP2r1/xK2zf0LNwALX3khPCt4/v8i7 bGPsOJ9QFSjZty8RgDd2/gY1bTvcflNxJrF4cjcY+LZEYsJd6EkkWHlMKqskA8aeRbzzNndrxRiS upQb22BkaodLCR/ED48Pz+PFLBDJfAJW7t7GnYS2qha2Xq2QjTnx589QMnJgYhrYtnQsdGz98bps Inr17CESXqWUJWeCsFs4nMK6MYFVDrHi+S0E4KvYI3wKp4sDt15XJPyirwhn9q1HgB3zyfg06vDd N4g7sIivASrAK7I1OnXsgNZNGkCioIo1h+KwY/4wGPFJbPnBZNbTi0ygKePPMxfQ3sMQbYctluW0 b05XPgGUEoCXDiyDRNcSN15LF8K3r+Lx5EUS7h9fDYmSLs4+FC4DsGMCMMpNDxP/uCR9f/8Yda30 sPpMovT9o99SfN/UDi0qEYC5fFpuxacsSw5JN09C9Htn1kNR2xjXH79AgwAbdJu5Rgblx55hCG09 WfZelefdw3OwqqEAXSMTWFqYI6hhG5y8KT3pKc56BmszHUwUTgPZFeSk417cAwibGWMux6pTD2Ug rx9ewYuzGW4kSnvT9C6eqD9oqSxc8GyaOhA6zg2RJY5L4UspujTzQnjfn3D/3FY+HTHC2aefbKwK UlDPVB8DF0k3N0Kqd/EXIOGTwj/PPxVe8XcJwIK0J3CSaGLq1qti+so//5QALIfx4MYZxDRwBfFJ 77QNwslsAbp52PGptS4sLS3h4OqD+ev3yk60y9MJz6t8kqxtLpywVjE4yiIm3zwA68DW2LhsOsM0 hLGRKWau3IGOEf4YPmYmXA00MWvDORnYGd18ECYQgHziZaKlzRcgYmVhI9p6oWH/sfxeglF9W8DD 0wve3t7w9PRAm+4jIZ0FpNGzUhIwe0wPMOefNyBjkVtQhOFt6vKmyBJtO3RCDI8lfzsLmFg3gkCW X9y3BBJ9a9xKkvaHt4lP8fjZKxHY1G5h0KnbRIS/f8FIqNv4inPMlS0zeGwqwZ/7YEeG16phOFQV 1LH+GPezomQ+rdfFmGXSjVshX/SLjY1D7rcI0VVBAGa/uQNdPU0sOV42lorS0dDNDKN/PSCWsTT1 NhzNDbDt+lspAsp+5w5tBlLVQzPhMKNjDCJ83CCp7YLH6aVIvHOAuUs62H9bujnNfPsS9x89k7X1 zpWTYRMQKVv7BJCXtsyCqsQCD1Kkc3cpjzk/W10sPfYM8ec28JgwwYVnWWW5lz9KMb0vy0vzeGkR LZSjA8I9naGh5YP49C/3nfLU1c9qDPwbGPhmGUCe56mmmoRGzfiVOjjXoZAek2nhphga0TFYZFHz QkC2bJTe09OzEsu6hKzdvGnlqRMsOzWMalfSClMp0mdefTZir8xyVO27dCSJmKYmhTDsXaey6Mrp vbTzcQbtv7CSIl21yUNHmULajKaDF0dQjygXqYkhFlwysnShaSO6k0+rX+l1egHpqaqy7VcGpsCG wL0jaVRMMI3+8zrlMqlZm4+YqnLMo6GSomJi8UKZY6SzKhueQflZS1WZdMsMRCurqJOSYAaIbcL+ tZPKVlWOJ9hoLS0uYVNUFZkJebCuA5bwK+Vysm1CtjX5qUt8kkYSiwgqV47y/Gk8peewXJq8FE5B QSGVyoHrwSlZ8lxwQl5CexazndTPHKOohG0SaunXoToqUsQYWdjJoj06u50WbL9HG06tpVpV9B5W ziDGLZczLE8ovJc3/xs29k3FCqyKh6/i/KWrQcFNO9MhD0cKdPWnbZvO0XchzBlWU6UefXqRjTrf KGGZqmHjppK9szkdu1VI+lpWpFlW16QXj+h9riZpKytS4ssi8rRzlOUYez+RikqtxRIL9lpraUpk htF1jCxJMMd97shrKlQzJgN9DTFd/rskik/Kp4AytQ9FefliXyASEPypK2tLrrvMCe3JeRUxjmVO 6FNCKcpUK5mXyQ0J4Wq1WX6Q++/XXKlgh1jDkH7bcYLq2+uzrK7kIzkiee731hZSOUSlWnXIybEO 5STeYJurXOpC/ilzYt8WyicIT7HjDROXqVI5+Rs4vKSwmCq6KZdbKD+XnZctKi4tpg+Fn5RX6G9C WEHF2BAwI/6V1VnIT3Cf9hvp189/FVUkZKRTSu9eJX0eWPalsrqWTyOV51OpZWRR7OsG08a9p0kp wou2LtlKEzrVE3HRafwCmt6zIamxSiolNk9YlctMeEEoYrlbhaogl6XgoKL8AqpbvwVZFv9Ad9Kt qWVUPbqxfiZ9eJdG73JUWWbWrCxyDsU+TiO5utzPeR6oUUObbI3KZPhKs+g+y+XpthBUDMnT9+Pn Uo/cQmHKEPFdU1VdNi8IwGrrmrPM5Gqy1q9NMSM20tNpI3heyCcHDw/q36cHzwdss7p3P6qtqSea 0BPmIjVxTEhnFx1jK3FMCLC69x1Kv4R1p80HztHupVspptts0uMx95htsqqqq1HPvn3JTFXoFwr0 /UQJ2TmZMl7eiep3rC2lfVFRVYOcnaXjSoD5VSdUil15u5XHVWLbqablllt4bq+lpsFzW6EYnC+M TfYJqoYqu8KCXDKwtqYB/XuRfHERy3cqUq3ammTCC0FySSnDqMkqfaSye+o6JqQuTARlrrCoiMdv KeXze7nU69tnySRXx4K0NaTmDjPeJNCLt4W83nA781jia5KfjwlOL5TD1M6OBnI5wHAVWG5VTV2L DCWcsNpVY+D/AQaqnsW+kLGwMLzPzKfArsOoV6QzTR01hhLeFZFi2WJYzJ34Y6dAHTp2pfSb++jX 5cdkQdnvsystILLPMo+pexg56qvR8b0Hpd9Ksmnj8TPk5O5MKqW8uLDdVRbbEMNMbB1JolhKAqGT 8TaZsj6ULzKltOfEBSrRMiAdFlB/k8gLedlaV5KfTvuuPCB1Mwuq+ZV52sPHm3KfXKA/D18T83oT e4ZOHLtN9Ty9SInHKB/284InLYdIrJX5ZRWp0iMQj4WUk/uB8nJziWUmKb+wiCyc3Umr6CWt37pX TFWQmkBbNx4iN2dPMjKyp1YOOjR36lR68iZHDM9Kf0fvMvPIzFKTXl8/SvFpHyjh2n7q9/0kYk2H PAlKF24Fto+Yn/SC4t++F9O9Y91VtfWtGL9E6/5YRyK2it6zUfItZG7hTvqsUpEPd8RJ7uOln5MX ZdCYkcMpuN8P1NjbRIRX8SPFg2BEW/AJxt4FwqDcCYR0bl4uxcdeoDHjJ5NDQAdyNvyybehSvnzz 4lVyeXKqra5J6jy/5ssVkqlbKNVBMb1+W0yRDaKoQWQE2ejrM32rJC5+gsFtwWW+eUrjRk0jXf9I 8na1J33tIrp57CDlMt4PrxpHP609RYL19/J6Cjjj+f8jp2XEi1XGQxYMj6MPaS9peP+O9DQ1iy9+ SCPK1eBlIC+bnjxJENPlZWVTVpawPFRyZV1SQEdNTWPyd9ASL9fkCiB4cdi4fB1paduTpYEGbwC4 DJUKIWyseNmrBKxqr6DXTkdbj3Vifkz8lccuKakg9IRvqjoW5G6qyuVYSyK5VpJHm1ZsIF1DR7LQ k17WUuQVLPlhHEmX0xJKfZNFdf39KOfxOdp69IYIOukO2zM9eZv83T14kfchV9UM+mnqLN6ESOeC 1OS3lFNUi0K9rengpt/pTdn43L16DZXIG5GrpV55EcX+UioSxowo/v81J6eqw8L0HrR775+UV2Vc XqTzeYzl5XF7f+C+lyfcg2In/PAft7WAWYGQFccuvyW+TqKCMjTJKdcmLd5kFCmLiYSEpF67DmnW YR2mXyD+eIDQ9l0HSdupPhmpfX0RBxMeqtrWtHj9clq6ZinZGqpREes7rcWXebQUU+nciTPcrd7T 0gk9afOlZ8S0QdlwYoJCqAgTORt/nkaHHuVS29YNxPIZmFmSg4M92dvb89OBLMwMxU1XZnoqvc34 IMYRfvQ0WU+iHHdKlVrk4xdOr+IekYGdH0VFRVH9ED9SV1CVbdaqGhMCDFO/KIoOs6QxfbvR+QwJ DewmvZhh7RlOtQrz6G2mHEUyPGFsWuroUg2WRC7vxSXCxuLvOB444nzGT2FuElx5qwhPca4p+ypt S2lO8jWUCDnp9OTZSzE0NyOLsrlfetdrQJkv4klB01asc0R4OOmq1OYxLYUrwPh0vIgAvvCja6JL +byhuhabSFmv42hA7670JjOXN9KFZOngR87K6TTtx9mUUdb3U9+8pezcEvIJiKTUp0+opp5TWTlC SFNZIsP9F7Kr/lyNgX8PA9zZv8ld3zWPr7+rM4syR4z/+t5xGPL4iho6B/mpj1lgXB7zd5/9HFZx Hmb2ac/yPtosU9URrVlANjC0NyrJD3+ehr8cWvwDlEkB/sENEOjjjDpmnrgQl4bspFsIcNCGnpk9 OnfuBlsjTdizYPnr9HysmNgLlnZ10a59N7QMD4BSTW38uuEQQytB98b14OYdiE6duiPIzQ7qxi7Y f/VRlXnLPhbnYuKAaKizUHBEw4as6kYdzg27IYmlzm8eWw01QzPEZ0nZy/ksj2KpZcJykVLWmwzG J54be5h9yfOMpa09HB0cYGdnh5HzBcHfUhauHgNWdo2g+g3gKgiBu4XiQoJUpvDR5UMsUK0DbQM7 hNdn4XcTC8zdfBUvbh6CiaocjC3sYaZphO59ekBbywi7Lz0Xc857+xgR9gbQsnJBw6hweHm1Fi/u nNm5EtoSZdQNDEWAuwM0DO2x+eJjMc3aX7+DqXcYS3BWdiyzMmc4NHQ98KRM4L9y6K2z2+Dn5wsL FsoWBOld6nqjYVdm2TOVPHdid9a8qwxHR86H62fnGo4LsVL5m8owKvuLMuPh62SHgOD66Na9g3ip Q8/CB8fuS1nRW+YNhqqSOvxD6iMirB4sDN1x8lYadi8cDmVmbweFhop6z/Qc6uFgnJTVvHPuKF6G CI72DhzmiN7dWkLHIgTpvKpc3LsYtU1t8LIyz4wLVJj5Ei3dzbnv68GOdU6GNWkNH2cz9J1UdrGj pADTezaFEl+giGgYxULudbGtTD5O6HfDm1lCpZYp4yYAa0/dF6t49+wumGqrwNknECG+HlDXMMJi Uf9bLl/aEXS0/SlDxeyBLeDbaLTsvSpPSuxxmLJqihOPytjUlSIVZ8XD1IDFB45K5WcrBeHKoQ0w 1FCGq18wgrxc+RKMGVYevyOLcm33MmipKnEfCUewryf6COzz0nxM6NeGx4SmOCbMtdT5MkRPJJbJ 4R7esAja6qowt/VAeFggjAyccfDGG6Q8vgw3az1YOHkiIiQAGkqq+GHtIe71Upefeg/u2gQjMyf4 BTXFqXvlIgey4nzmeXRii6hOZc62MnZ8WYzSzBd8iUICDT1D7nOOYIIIAS26I5OPKPes/wV+vj7Q 5XqToho8vX3RfdISTlmMPq0i4MIXgDp16YAmLJyvweNp4W4Bb/loYWOI4b9VsLA/Kwx/uHxgJVRY fnDxvutVBcu+Jd/Yx6IloXiaLp07xAAWl4l0tcWkBXswZ3BrZj4ow8nGDs5uQWjXPBAekUPw7hXP MTpqcHD3gb+3G8+pGujLstaVoMjyqOw5+MfPMDazQ8u2bdAlpgmLRKigWf9ZLNfGNWM5wuhga+gx q7dho0Z8QcEWwY3Hie1yZsd8qJvbITG3MrQK/yVWaSXMZZF9Z8jaUcDj2pm9oaasgXphkagf4g8L Yx+cvsN9ky8kWZqoY8n+CxVA/spXmo2hfTrA29MVfFoBDRa78fPzw9LDd1gaIw6ammrYeV0qRoDS HDTxtMN3M3dJofL8/UNMfShrGaIBj01Xe28cuPycu3AWhkT7QKO2ESJ5Xg/wdOF274h3zMF9fnMv i6do4eZrgQn+udu4cBSrtAoUWeTloTnJDxBipcsiJHzxTM8UTdt3hrOVIcYtkLKiD65bwOqy1GDB a1N4qDAmXHhMJKEkNw39mnuw7DjrFGQdu/51+QJYQD9kSDnu5eCrn9UY+I9hQE6A/C3k5PvUl3T5 9mPyDw4jCZ+aCO7OxTOUXCBHIf5edOX8WbJw8yVTnQq1JRVwS+jiiUN07vItKlKoSS6uQdSkkd/X VVvw2dSlE3vo1IVYkqulSSyvQc5m2iLI1FePaMeuA/TqbSZpG1pR61atyVRfQq9Y9cbho6coKeUd KdaqTcFhzfi0TmCPEMVeP0tnLlyjtIxsUtc2pEZNWpO9hRSeGOFLPyigMwf3UtzzFFbNYkDNWzRn lQaKlJX2mq7GPqHA4BBS4a1jaWE2nTt3k+w9fHiHLT1BqQrk+9QXjIe7JLASyhFv7uhJde3NxOi3 zh2iy7G841eVUFSTFmSiI2VFCIHvkuLpCJ+Epr8voDra+hQaESGqgXl0/TSdufmYTGz9qGGgHZ1j VSLWHr5kqCVlsWa8fkgHjp2n7AKQvZsXBfl5kMC9fcaqSE5cvEulNZQpMLwBOVkai2V4/fwhPUl6 T0EBPqLqA/Ejn7jtWreMFEz9qHmYl/ip8k8aq1E5ff4GH84qsoUBOSooLCTVOgbUILweJT69R7H3 nzEbrZjUmb3k5evLKhCq4B9XBsgnHFeOH6Ur9x9SesZ7qq1tTM1atyEbIy1ZrDvnj9PFOw9ITlmN XD29yc/Dmf6cPZjGrb1HP07oS8o1JRQYFk5GmmWWYvj0+MzhPfTodQ75seoHW90iOn89noLCgyjv 3Uu6Hvec2zOYan5yLp715gntOXSGoGJErVs2oMT7V6lQ1YDcHczFspTkpdOxw4eYNZxFfHuaIiMj RbUnQuDjO2fp4fN33N6l5BEYTlbMWhfcq0c36MiZa3y6psAnEuHk5WTFX7nPnz9H2mYOZGMiZfOx 3kx6myshP6/KKnBEELKfwux3dOnybXKpF0yaguqfyo5Vtpw+y/3BzYeMtSr6UnmUl1yXo9xvi+Rr kH9QBLnbm5cH8RMUe+UoXbz5lPtjbcZlJNmacrkEPB7aw2PiLUl0DKl58+akXrOiPV88usPqSq7Q Bz5a1Gd8hEeEUR0uV8brx7T/8BnK5pMuB3dfCuN+WO5Ki3Lo8vnTfHJUSMVyNSmA281QvVywoTzW p88imtGnLU368wrNXfYH9W4bSap8w4u4zhcvXmBLQTmy0yFVDT2KEPrik7t0485j0eqIAotGFPLp u465AwV7OdHT65fo5LVrlMzzRw1mT4Y3bMYqiIT5o5hunjlHtSycyM5Uyr78qCSc39E9G6h9j+/I re0QOrxyFtX8ygFgwftUOh+bQP6+3qRabkGCx9e1ixdJw8SVrPlQdO+uPZSap0QNGjUnlcJEuv8q n1wNWITBryXFfDeO50JNMnf2Jv8yFUkfleeTl+zkl3Tw6HF69uo1W1UicqrLKqQa15eVsSA7jQ7u 3U+JjC9NXUMK5hMxUx0NSk95QTcfvKAgHhPKn4wJIYtSVql05NRFMnfzJ4cylqk061K6efoYXY5j PPMYdPXxI28Xe1IozaczZ86TpbMXz2vfyPpl3J87c4pSWPWVspISiy0Ui+x4F78wstWrSSfOXCQ3 VreiI1HlrEvoOuNQom9PdpZSvm1RTiqr0zlML1KyycDMmiIjwknCfbW0IJuOHzjAc0EqqWloU0Bo GNnxmMt7/5bOXY3lsRAqW+ekdZL+CiIlj19lUlA934q5kYPSXtyjvUcvkYqmNbVuHkL3r58nJV1r crIyFBM+f3ibTl+4Kh0TJhZUv36oOEeU5GfR0f0H6OmbdySpo8vzcDhZG1biOVfOvNpfjYF/GQPf TAD+y/lWg6vGwH8EA3/82Jt+OSJHsSwjWu3+72OgOC+Lfp30HS1Yc4A0jBzol1UbqhBP+M/h4d3L G9SyTTd6xHJgTbsOpBk/TWIxigpi+N/MOSv+Auv/7Mws4ZsUbF/VRvvfzK0aVjUGqjHwfx0D/5mZ 6v861qrr978WA0bWLhSQUSLKd1VxaPG/ttzVBftnGKjBl6/GzFlDnfvfp8u3HpKd0eennP8M8rel UuXLN8PGTCEbZx9yszf9tkT/MFYN1ToUFhFCEqVy3sE/BFSdrBoD1RioxgBjoPoEsLobVGOgGgPV GKjGQDUGqjFQjYH/MgxUH5L8lzV4dXWrMVCNgWoMVGOgGgPVGKjGQDUBWN0HqjFQjYFqDFRjoBoD 1RioxsB/GQa+WQbwQ0YyxT5MYN1GRayHinVJGZmRnbWZqNuppOADxd69R7mCglhR/xtHUJKQt5cH 1RRvuYFuXThMx8/fZt1fyuTuFUiRYZVumH4B6emvntDmbbspg5WbaukbU/uYGL7lyAqx+O7kqV07 6BLfLNUytKBWbdqQLltXz+Uy7t+1l+JZzxJfW6SgyKYU6GH7GfTnD+5QBiTk4Wj5Wdh/+kN26iu6 /zKd3D1cq7xZ95/O/9+G//TGITodm823CoPo4f3HrGdbmRRZuW8hKwOWZ0W0PnXdKC3xKT1LTGE9 Z8WsTFyDHJwdqXbNT26rVlkw0NXTB+nUpTt8M5QVvtq4U7tWUf8/wlsRzf1+IKXoe9KMMf0/ujVY ZXX/4cfC3Cy6G3ufb16z0nLWEafLY9OWx+ZXLqL+w5z+/WSleZm0bN4cis8oImVlderQoz+5WlXc 9P6WHHPTXtGfa/+gIxfvUd+Jv1A465O5deMu6Vs6sGLvj5WNJ794Qg8Skqimck3W+wbKL8inWjrG VNdRqhA8Ie4K7T50mnJYIaCmvhm1jW5LerUV6eHd25SenSv2YbU6OmRja0u1WRtAxosbNHjEbLL3 D6FuXbvy7VnJXxa5MCeDbt59RJYuHqQrkSoPRkk+3bx+m3QsHMhU99+TYyzOfU83b98lE3v3j3Dx /OFdyiqVkJujxV+W959E2LP4J9oRl0VLFs0hyTevMl/O6e3DKzR43GwaNH0ehThKNSZ8OXZ1SDUG qjHwTRj4VgUzt/cvhRobcPdjvWt+dV1Yd5EGuo+YijzWJZX3+i5czTXZBJcnohqw7qf64WjYfgiS RDtu+Vg4MhqqykoIbdAULRvXh09QF6RVMk1WVRleXDkED9Z7Z+sVhPavUpyuAABAAElEQVTt28Df xw9XXwg68YqwZHIn1gdliVZtWrI5K1UEdhzJmrqAm7tWoa6jO9q2j0GYrz3rydLCqp0f6+RKfXIe zkZqsG824qtm4Koq07/x7caeeTCzicCbT/TN/Ruwq4IRf2Eb2nQZLLPBWlWcf/qtKDsJoXb66Dlp Ne5f3YfI8Ppwc9Bng+xa3E9C0aLvaFEP4JIf+0ND3xj1I+rDysIEFqzb7ORNqUmpL+ddih1zh0FV RTCi3gxtWzdHcKu+bNaPO9z/IleY8Rx9OrbFgRtV1Scfkzu1RN8xP/6lrrb/SZVS759n83ISuAeG oZ63O7Q1tRHQdQSSWO/P/8St+WkgRs3f8T8B8ZdpS/My8Ov0SRgyoAtUWDfgiuNSXZR/mbAsQlLc EQQ4mcLQ1BajJ85EQjJrr8x+Dj97O6zYe+szMAc2zGX9hKGwMZNAVdcYIWFh6P3jUlGP3f3ja1if ogocfUJ5zmmLgJCmOP1AMCOWiy4+TjBw8OA+HgwTHW0Yuwfj4P0kFL5PwvzpI+FmrAsDS28cuRL/ WZ6ffnhz9xg0VFUwbOF+WdCzK7t4jlTG9FXHZd/+DU8+m8xzM9dAzxlbKsAVZqC5ixnajVld8e1f 9m2cMgJN2nSWmWT8n4J/dfMU6terhwPXH/xPQVWnr8ZANQbKMCBowf8md3PPYqjr6OLqywxks9Hx ddP6QJENal9MzEcpGwO3ZmPgs7efREF+Plj7PvL5KSh5jT30h6jAc8KinbJ83qWlg80MfdGVFmSg iZc+XBr3RXrZGlaUl4sCwWZkQSqC7E0wZomg4Bk4tuZHKBrY4NG7IuSz4fmcD2UJSjLR2l4PER3H V+RT9B79GvsLV+jg3Hj43yAAi8EWO1D4BZuVpcWFyM2T2oGsyKxqn2AL2Mg0lAmZqsOFr0JeefmF VUYoZLwK4XzS85ljSyzgE9iPvt/f/zPUWYFymYnbj8KEl7zcD8jN/bLm0ZKiAnzIzeX2+rzBNkxn u7BOoUgSDMOWFoNNL2Hbb6OhYl6X7WLmch+QtsXsMR3h2bQz1ykPr5/cQjMXfTiH90Pu1zTYFqYh wEIbzfux8uEyV1hQ8Fn9chkXYr8oj1TpWVxYgPyCqvFYxLj6GFOVEpYUMY5zwXoLK33kKjIOij/5 howHcDHRwMqTCR/F/ZaX/LwPYj5fiivU7XOsfx479d4pNkZvjENxycjJysCBzYuYmJDHvF2fK2YX YOYzHis7oQ8IbfypmxrjgqB+Cz/9XPb+9THBVm6qhFmYz9+5DJ+57Keoy3ZiVxz/uiL1yumKct6g obserHya48mbClurgi1gL0trLN91s3J00V9SVMj9NBdT2Ia2SVA7VrrLc5XYR0oxsl0wzOp2lClA Z24HW+gSWiAb7Z0sMXTRbjHto1vn2Ja4BkK6fC/rQ3lvE9A9yg6aZqFISP/yeBIKkRx7AupsHc+m fheU72cWDukgzkvTlx0Ryyn9Kf2sD1YK5HH7eZtVDpf6izG6uT/MfaNRZi4dKbf3Q1NVgg3n42XR S3isVNku5TGqHBMlYpoPX5k/ypNXfhYV5H01L6F9Cqua4D6Z2yrDFBTpC2O2KlfCY5at61QVVP2t GgP/1Rj4GzKAbOWVzU2pqqqwvcI65McsD3Vmo9Rks0iMQbbxKEeatdlGJrMAa9asyewcZWYPl9Dm LWtIz7sNjRrYSnYiqalVh23Vyl4/8yTdOUHn7+fT7JnTqI5CEZt0YruKbGdXqQYnYkXSWrqqdPrI dkpMSqIT5y+TmaEr6bP9ROVaErbPK7CIWTHny3h69q6ADK2sZfA3Lf6Rtsd9oHZhnmz3UmqqShb4 Bc/LSyeoTVQQOTg6shLWENp48JwYM+H2CRoweBQd3reFIoJ8ycrGjqYu2kKF36ChQe4T+6flWac/ ukuDOjRiU06O5OLuSXNW/slqUMtcSQ6tXzSFPN1cyMnJicIiG9HBC/fFwDes3HZUny4UFhpOjRo3 pvY9R9GzlPf0NO4O3byTSHJsCuvahUt05fIluvv4uZim8G0izRjYkRzZbJS9ozMN/3E+ZRUIxrGI LhxYRyN+mEEHd66m4AAvsmG7mRPm7xTDyn/Sn16kCXPX04SZ88hAMPLMLFrlmspsD7kWt60C1VJR 4T4gbQvBPlsNxRoi283Q2p2mzPiB4m/spHuvpebpymF+9GQYGvJKlMCKV5mWFIMUWRGsfJlN0Lcv H9CAmFbkZO9AdX1DafsJqbm+UzuW0Zipv9GhLYvJ38uV1XN40qpdV2Wgb57YTR1bNGVFrBHUtFkz GjZlpaiQ+8mNIzRw2BhW6LyDGrHCYBsba+o7ZomYroTZlCunj6dIVhbboGFDFjmIYVvUjyn19TM6 f/4WCSaa4+9eo6tXr9CVG3cov4To5smt1D46mlmIHWjR1rOy/AVPaXY6LRrTj1wc7USzXb1GTKW3 Oaw1Gbk0bcx3tPbPnTR5WDeytmSFsc260IOkzI/Sf/bCJqwUFBRIRYltodbWoMYdOpMTKzl/kJDC unEzacSgAbTz8BEa1a89WdvYUN16rSkxu5SQmUJzh/ciFwehHA40YOwMSs8rpkI2n3Xz6iV6+bqI cln5+FVWjnz50mVKTJW214uLx6l1g0BxTHj5h9LmQxdkRSp8/5rmjO9PzmyKzMXVjaKad6K7L9JF 5dFbfp5Iddkkn6O9LbXsMogSUirqVZhbbqpNBuovPSc2LaCj92vQ2o2rRPu2lRMINmPLukrlzyTP isqVeS5RrKnKVgBrUC1hrlISxBHkSKOGKpsPfE4PEqXlkufwGsKcI4Ty3CfgV0hr6x5InVqF0fMX r6Rm9Di8po45LVy5ierkXKHZK3aLab72o8ic3yfnztPV+AyigjTac/aEGF0w6Se4Q+uXUosGDSiC lYo3b9GK5qw+RgXp8TR4wPd07PgR6tuuCZmYmlLnQdMp7QN3uC86BWrSoQUlxp6jG0/fibFOHzlA pXouFOZuLr4f27mW6vt6kb2dLbXpOYJevcsRvz+6eojHxFgeE9upYZh0TPQft0wMS7hxmmKahZG9 gyM5urtQm8EziPXM09snl6hzh/YU3a49jfl1g0zZvZiIlbvvXTSDfNiutyP3ucbRvejBSxbXYbdm 3o/0829raMWc8eRkZ01erDT92K3nHJJPM3/4juG1oxgu26MyU5hCmvx3CTS43wDad/ggdW8dRRYW ZtR16I/0js2sCS77VTz99F0fnhdDqFHDxgyjO119+EYMq/6pxkA1BhgD30r+3tyzRDwBPB33Ei/u 3URLF0vU7zQO+byxyk+6BztDNcQMn47du3dh+/ZtOC8c1Ze8R7SbKqJHzP3WbMR41zfPhpaFBxYv X4IGwQFwd62L/qNmIyVTenJx/9xmGKgSVNUk0NS3w+lbUlNfQuLDWxaic/tomKopQc81BM/SpSdA r+6dgCEr0Fq48wTm92gB89CBf8mWy068B08tVThG9saly1fx43edIK8swcEribh/YbO4Y5cwu23o 9MX4eWg7yGvY4vIrZkF9xQkngMbmYZ+dABbnpKK9hyUMXBvg6MnLWLtgItioAWauPiFCW/9TT8jX 0MdPCzfh5o2r+G32JBw4ext56a8Q7GgGTSd/rN20EyunDYGiug2uPk7ED93awM7KDPJyCvDy9Udg gD+6/cAnOiWFmBwdDhU2K7dp92kc2rocuupK6Dl6mZjXpiXjxLppsumzab/9jtaBdmjabU6lWhVh VIt68IwaKrLeKwVg9+opUGNW2PPMih337LGd4Nuym+w0K43Z8EZa+th3K6ly0s/8R/+YCWVFgp1n Uxw4X8HOK8p+ixbe9rDxicCpC5cxYXB7Nstni3tsy2n7L4O57HLQNTLBhAVL0LK+O0i7Lh5nFOM5 s6klyorwadkXew4cxJCmntD36y6e4lw6sFyss5qWHr6ftRgDo+uhbuhgsUyzBrUBqelh7Kzl2L9z PczYhN70P69g35If4e3hAgU5OVjbOyE4OAhhzTvhcVohkuLvYMO6NfCw0ECzUWsq6lZaghXfd4GC himWbTyKUwc3w1xPFU16TONy5CHc14bNgBG8G3bA72tWwJbzip61rSJ9Fb7UuFOw1zPH5dfSvn7r +EZocD1Xsbks5CfCykgdCooKCOnQHysX/MCiHNZ4+vYD5vduCSUtS/y+9TiO7/0DxmwirP2Q+Xh+ 7wIaBflBk8Ur1DV1ERQSggD/ADYnF4sPbPaqbh1VODfoK46JKUNjIK+ijn0XE/gQJg9jYvzYpJwj Vv15ADcuncXsyeMR+yIVhxZNhLyiBibN34bLZw7By84AHvV7IbtA2k8KUmLhbvE3TgBLP6BvhAUi uk34DCPCCaC3lQ1W7P78BLA88k8jomEVGvNR/024dgAWuqpQ0/PAb38eRoHs+DUbHVys2XTdKTF5 duoz1LPWRNM+Qpt97Ob2bwQDm0hkFH4aUhHvzZ2jsDQ3gq62BgbM3Ynn53k+s7SEqYk5Zv1+Eme3 zuO+qIS2Ayfh4MEDaOysj+C+i5GXdBtGEgUoKcijaa/vMWPaKLHPTlpzqgJ4Fb7sl1dgrqGEocsO cWgRuvibILL3RDFm3OFNbFJRkc2n/Ybzp4/CkU/dm3wvHevn9y0V4Uu09TF89hL0b+MPr/pDxXRD GxjBxLUlLl6/i2vcnvOWbQBbyER26nNs3bQebUMdYdFg6Ef4OfX7LCgrqGHEjPW4euE4gl3ZdJpX S2Tnl+C7no3EvKzdA/Hb6j/QhEVJ7NtP4PQlOHVkL36ZPJg5TqY49TBdVsOcN7fZ7KACFBUV0aL3 aKyePwGqcspYcpJPkYvS0SfECbWMXLF49XrsXDMHmmyebsvJR7L01Z5qDPy3Y+CbCcDb+5dBke1c GhgZQaKiCEOePFNypAtOHhOADkYS2LH92I4xMWjbpg1+Xs72GNmOYxtHNfSZtOlv4fnE0pm8CMpD ycgO87cexsl9q2ChqYRO41aIcM4s+wnabKPUzFQbahp6WH/0sgz+1fNHMP+XuRjSqz3bnZVgyIyV yMtJRwt3tnHZ4Ucx3qyObNc3bOBHk5MMQCXP8UWToFTbFnffSglPoT6NvAzQevh83Lu4A3JKEszc IiXQsh4egbGmIQ7eSq4E4XPvlwjAp8c3Q7WGOrZfS5QlGtMlAHZhnZD17jXc2b7qgFmf4/Hg8tGQ qJvh4gup7cq02zuYxWyHSwnZKCzIx5VtM6Fl7Y3Hb3OYNc9sdGZ3Zb+4CVMlZUzdeE6W17pZvVHb 3AOpzMnesWIC5JV08MeJWDF84/zxmLNijyzurf0LmDDgyfhxquxbuedbCMDUx2eZADTAvptfJwAF mGcOb0WYl41wxIx2o2Yhi9lACee3iAvkmOV78fBBHC4w8aIhJ49VBx9iz+LhkJfoY/u5OLFIb9i2 p7aqIvbfeIAfOvrBKrAd3petzQd+6Qbz4B5iP7hyaCXk5FXx0x/HxHTHNv2KCXPWITXhMvRV5TFl 3SnxO5CJKGY7Tlp3CcXMTsx8cQPO5tpYcvCuVPSB2eCV2fAjWzigxei1ZWl5XWKZQa/aahg0v8xe KYccWzuB7ZVa4PFrZmnWs4VNVBek50kLObqFEyJ6fn0DlfbgLKyZpdeySx/07doOupoSJhDGIpuH Z0l2AqyNNeDb9juWZOMF+sVV9O37PZ49uQOnWqoYIRIF0uLtWzaC5eJsmH3PbFHuK2PbeSCk789i vfKYzVfMchvHFkyAkrod7jGRK7qSLDSoa4A2IxciJe4MszZVsVi0nysNlv5mo5UN213t97Ps46Nz 66GkrIbDd6R94O8SgMVZL+CrL8EPK0/JYJZ7/ikBKKR/cucyOrcIBR+qwp/tB8elChu6D+jC84d7 WDMMHtQXfHkMps7+uPu8ghgpz/vCtlnQMjPHE8Hw8Bdc8s0DsA9tiZH9Y2AT0BL92zdHzJBJaBsR iMmz17D4iyGaDJolSz2zuw/CBixB/pu7MFJXRKuhP5VtXovQLdgMzQdNEuPu3rYac+fNx8KFCzF/ /lys3bIf0lYqxIBwB7hE9cPb5wyDCfvfDkk3VJO7R0DOMgjnb8Xh/oP7mNwhnO2CR4hs8MsHl/OY UMPM9dI57uj6OZjA5RPcqFbO0LPwxLItB5FRtg6IAWU/mye1gn2jYZXm2Hx097SFX4fxsmiJN3dD TUUZu688xdh+TaFi5YN7bzLF8C1T2sHCpwtyy8bq+4eHmEC2xMmHGbL0OW/uQEtDBS1H/SLNp+gt gqw0MX3jdcQeXy7KgO+5Wiaby7bFXc1tqwlAGfaqPdUYAL75flZpaQnV0tKhLYeP0vaR3WhN3EvK 5Nu5urWYfcLLcQmHD5k0nQY39a84WS39QLXqSJgVdZejxIg3hisCv+yro61CcnybeMCoX2lYdJQY cUrv4zT10iV6es+WOg6fRE2GraFfhwfRxJ5NqW+HGLK+eJ387DTZrmoD8U9I5GPRj/r9soQaOtek fWzH2EX+DHWIvkUXz12mlJzb1Kh5Mg0dN40a+ztWWZhX6W9Jy86BLLTLWZlqZGhhTY8ys9i2qz5p GRlR+6bhYlrF2vqkxmzv3Kxsfmdjnn/TpWSkkryeGdvjNZClNLd3paxHyZT2LonimfU9KrgSbsti XTl2iUx8W5K/qfT2YaFwE5Q5IMwAI0WBJch2L+XlFKmmSi1mzUsTpWWm0XuVOuTpYiPLy9TOlfIK L/LtR7Z8WlRIFp6eFB3uLIZ3HDZdFq8kJ5lGDJ1FbQbNolCbb7ClLEtZ4cn9kEVpJYWkzOIDf+WC o6LpWFA4rZwzmgZMGUfuTmHUWD2BWZ7FdHrrMrq/jwUNSkrILTiSjLWVKSuukJzcGlGrQGmbKvFN ZAEPuVkpdPnCM4ocPJ4kvLoLLr+whDdA0jKwbB9pW1pRt3YRYlhEzHASfFc2zaH3NeyoXVQZ7jle YRmfX7B7XEtVuPUsz6IPAn4/tV1bymWTstVFoEKeHzIpWUGZvDycyj+Rka0rlcitp0xGPq93FB3d hurUlBZS28SGil6myuJW6eHxJxyfCGlr61vSvN+3U6tmDdhGNY/LPJAc8xt79+tOooVqU29avtyb Mp9dplS+Ke/pbi8DaWTjyiIMO+k9s9CUdWuRYFZYXkHlo3q9fPeWdOydyFyLAwUnX5sMzS0pIfM9 vUp5Sdma+uTrJe030ghcttxsellYymzGuuWfSMfUnkU2lCg964Ps29/xMDVKhXkKVKOW9Bbt30n7 tbjWrr60fvcx6rp5PnXqPYpGj/eg/SsGciW4LfmGdQ3WbtBpwHiKZjanqfbHN4wFuPKKtYRfaYN8 JSPem1GzNq1o5Yr2tOyyGm0/PonFUw5T6ovH9CC+lCbOrhCZKeB+KjQek/PMujahAb37lN3wVqDa LI7zTiBX2fbN6ycP6NbDtyyCwbbJeT42tKrBQjisEIH/NWjbhH6fdpQWLVWjPDVbasC2j5n3TKnJ z0mZ+8jMiWPFOhbly1FEfU9xrmY5WdK15jERLZ3jIjuPpMiyOo38ZQN9GP8Djerdjn5gCyW9Rk2i id/1JLUyljnLTpbFLHsUf6DnuQXk5ldhR1zL2IZUJLXoLdtnF0Rywhs1Jid96Q1oLVM7oqxbokiN ClePN65c/49BCq/KtdSoe8do6doir0Ka2gaUl5FOT5POk66BK4V4GYmJSgoKxHntYwjVb9UY+O/G wDcTgOIKwxOLnokDTV4wh3Z7hdF3oxbTgbVjpINPwCNPkh85+VoUFNaE1i3aSnFJE8nZUPWj4C+9 GLGMkBrzP3UMKwiM/OwiJmK0KCH2OmWpGdGEMV1JsG0/d9FqOuBYjy7efcAEYL2PQLo4W5N87jGS mHjSpu1biIpKqZgnkuL4ODqZp0+NWrcgEwOdj9JUfjHQ1Kb0R2fpdWYp2dURCIUCepv4ijQDJKIs GnP+iKWL+bsCH1BJ/6qSO6oMU/DLydVgWaKPv2rX0abS1Nf0lBd7e15EBZccH08SVR3SYCPh+kU5 dPL0aero310MK/8pZpmtElavInUltHXjRkrJVmACSUpA8MUFbpZifi9PQSRR1yS1vPcU9+glNXGR Eqtvn8WzPKcSE4xCM0KM/0lrigC2zJ9Ct5Rs6I+RMRUAK/kUa3CXkpNnokuavxjEM7U8F0BKahEd 27aTVGqyGiFTzUopv+xVUNWi/pMX0f4/uB/diqMOMVakrCKhGYvXULi97kcJNxwrZllRFVlep/bv pEx5c3I0MaLCbG77soWpJOcFrd12kgrVW8r6ryh+9UmlSwTVRqz3qKQM4p3jf9KVR5kUoSytDXij IhioF2Rgv+TkFcuIJY6gXEuddJj4jY2NJwq2EZOkPn9GCkyIqqkp8yLHuEd5ewqyfUoCOr/q+HYK KUq0aPSMhVTPRCTzPoov9Mka8h9XTEWiQRr5uXTv3jMiX3MxfurzeFLivqmmJp0WSngnIcdER2Vn qKlFaQ8vUhKPCRsNoWB5lPrqFdWxVCMdLQNSzXhFZ6/dIi+jis2KnCpvnHg837seR9Sjvggu800i FecXkbp6pTmBC1qD5Ty/xdVQ12XZVQndvXGdKKYir4q00g1QxfvHvhrcH+V4zFadWw2KjBlJ3+3Z Tutv3hITCnR8027f0Yyy8n8MreLt4bmrLA5rwCpivtJo3B4lPA+ZuYRSu2BTOpTnT/W9bWmTsCHh vlTCQqR82CoCTU84T1uPPiajzkJJmZgnZSbMpe3z4dUd2nfmPnWcM4fD5GnguJ+JSdUqXQDPwyZj l9DPi56QT5thZK4t9MlSqqWhR7Zu1rRn39oyorIiuaDRS+h7n07rQgxdSzdasmU/TXz+gDauXEwj Rw0ic2dfGtDQRQZArgbjuPyN5StNVJQp7to9/iIlbt+nJFF+Tj5psqoesd+L5Ko0gQLL/wqy0rL0 wmd+F+SAKzshXI7nN9Fx/1FguU2hvwtjsqQ0n0TamAN3rJvLROFbUuYyVbtqDFRjQIqBbyYAhUVG 2KUxa4hPxUJp1vhB1Gn8ZFrfrRV1ca3BYcW86/xki8Z5RPcaSL/OXU0duw+nNQvHkqZCDt2685qi WkbRl2ym6zqEUHSAHS0aO45CLRaTQvZDmrr5EHWdtp1MjNKoIOM1rVu3nvq0CKPT2zdTWqEKOZga 07k9m+h5gRYF+TrRh5Sn1G/cfDILjKS6zg4U5O4ga/OkI5voapINDeveVfatKo9P01ZkPJlPIUeO pV9G96aLG5kIuZpGf/7SghRKLhLfEhXpYjEtL9zCKVLJp9vUTwDL8Yz0PuMRbd2yjbSZiODbtWTi 4ElevmEUaKdKY0YOI515Uyj1+hGas/4MDV20h3e1pvRdr1Y0aMpIspCoUlMmHO5euU4GrpEUEOVN M79bRfPWhFDR9W00Z+MRXu2NKed9LuesSnUMLKkg4TYtWreLeoRY0vnjD6hNj2bUpqkHzR43iNyN l1OtjCc0atpqqt/9J9Lh+bWQyyTU5VOXxgLeY3/dSFPXnCRj1o1W2WWxLra7rJfxBhNouVlpdPrE STLX1+LTIDdxIk96+ph2su7GG6f30aLFf1C3aVvJ9BMYleEVf0imBSu2k39QMJnyqcCTq/vo6us8 6uZkRqbu7hRsWYsG9RxCqxZPJA3uU3vWHqLIXt8zYc262dLi6Qov3A8vHqLvxi2mFhOXkaO1JdX1 MaA/lk2nRjaltHvxD3TiyTtSd3pHfBgjrnIftWdZYSw5L7W88TRt2s/UxqkmTZ4xiYrZFmv2O+lF AYVaWqStWEqrV68kX4NuXM5bZORaj7zdTEQIwgbh9d07dPacCZnZuZOZrgl17NaApk4fRkGOf5CJ fCYNHTGHPKMGkI2BBuulE/Rs8spb5oSFTOgjX3O8DaGiwiI+EcvnaJ8SgEK/LJLq56wERFnLiqLb BtKiKUPJ33YN6RYmM64Wkl/T4WTDJ6mCMzSxoOtbNtCRbiGkWZhGz14rUYNW0WQ0ZS4NG/UDzRnV g86vW0gHr6fTpjmNycTJiDqEOtC4Pt2pTsFCqmurQedP36LgVh2o24D2FDN5Oi2PcKBAU1Ua22c4 6XvyybWddLMjrPTCSeGds6fprJwNObKOPG31T3ZJlcpPCmrUqEFT6r7sN3o4tg/Za1eOK8dEy3s6 d2IXqec/4lPYYiaQdSgqIpQykx7Tk2ev6dHj55SeokxHT50hLT1j8nI0pTWr1pCOuRO52hlT1usH tO/yI9Kr30bMtVA4ceRTpK+5kvcvaen2feQf/SPplm0QqorPsjHcXnzaq6xJ8/dco59KapIG08F8 i540jCzJzqKUFsz8kbTTGtOimSMpgU/OdPjUvkg4rUYOXb92ifBGjqZ8N5SSDX2pd/THG9+q8tS1 8SJvGwO+fPWMGjRtUkbsyVP7Tj1ocYsBNOnX+tSthT9fFrlCJy/xZaSf+8jGREVvlEIufBdPQ6Yu osjGLcnDzpz8mDOhMGM564GtiAkmLjOfPaOTp86Svjm3p4UBte/bgVoMn0/zNnlQlJMu/dhvCNW0 DqUIF3M6yRf9imtW9HNhvRH0hpavKMKzmDkvV0+eJAUeW56sX5RbWdq3K825gp7aIt64mNl7UnLC Vpq74Hcyyr1JU+Zt4qPQWiKhWRV+qr9VY+C/EgPfygePO70RPvXqsYC79Kp98Yc36BLhh4Z9xuJ9 2gsWGvfAptM3qgR399RehAd4wNTGDpZWFgiIGIjMjzVsfJYuJe48ovztoK+nDwNDQ3QYNguZgnaF wkz8Oq47DPUNYWNjz2EWGD1jlajSZeviH2BsZAwrKwfYmpsitFEPPExM+wz279/3Qn0W4P6LIojp rp/cgRB3a1hYWMDc0haz1h8Q5U3iLu5GvYiGeF2mx6Eg7TEahzTEsUoyfJ9lzB/un9kCB1trWFtb c/ltxOeoBVvFqAlxl9Ay1B3mnJepqSnLLy5FVlkh87PfYerI3jA1NoW5uQXMLOxZ9vEe8jPfYECL YBhxvb382+LYiYNoFBKBo9dfSLMvysVv43rCzMyMcW+JiBZ9kMHiSRnJCejdOhRmDMucw9oPGIfE 91JZx70s6xPVsbcoM1ZRhyLMHdgaYa2GibofK75LfddObYadnR3sbG1hy3+CP6htX1EP4MalU8S6 CvV1966H6Qs24n2ZjNuncMrfS7h/tQvyhomJMRwcrGDCsqc9R87BO0HxJLvXD06hZbAf18uc62WF 8CZd8IR16+yY9z3LlklgY2sHC1snDJm+DHw3RHQJ148h1MMKxiamaNdzEg5tX4qQ+jFIZxzf4XYJ bNgMyUIfq+xK87Fm6hCYcv5mll5YumEPRvaKxoR522WxLu9YznJh5rBgQX4HF1+cvv2yLKwU80Y0 ha2NgA9H/F4mU/khMxnDuzaGKZfd3NwMzWL640maoBrlAzq3icTC7UdksFfPGIYuA7+kikUa7d2T K2joH8Z6MitUoZQDKMl5haiIAOy8JJWJLP8uPN+nJWJIxyhpObgPtOo2lC9NVajSSH9xDzFRnmK4 FeN40rwtYvJrJ7Yj2N1KHBMWVnb4eeMh2VhKffUEAzq35HaT9lNrx3q4+JDHYGE2Zo/pBQvOx8LC HEERLXDtZcXYLMx4ig7h9tK+4xqCo/eSKxe1Sn9O0n24aCkhosdE8QJCeaRS1k/ZsWk97nPSMca3 2BHQvJuoBmXb79PFvin00fJ+2mG0IGNZiuksk2diYgI7ex7vZoaIiu6HR0kCTvPwXbNI/PrnmfIs Pn+WFGBMvzZQqmOKq/GfywZWTiDIbIa07Y2X5XpZhMCS7P+Pva8A6Op6339FAUEQpLtDRJBGUezu 7u7ujk2dXdPZ3R3T2bMVu8UWEEFAQrrr+b/3foJU2eb23f83ziafGyffe865577veZ8HQzq1xtpD d/Hw1HY4WZnwnjc7TJizkR3CZqB9nx8QE/IUVuykYmxmCVsba9Ru0wvXXuU5wOUvo7jjo6unws6l Hp59lOwXlsTJwLGNP8KR50th3rGxq4xJi/eKtx5e3gffZm0QJR0/sjyz02IwdkBbWHF/F+dFnkMG TJiLzzIILo54ZsM4ab+3x9QNkv2uuZnJWM1jydpM0geq12mCK28ke0BnT+yLEfPy+vmt42vQsNko JEv3AH4OuI6GvIfQjsd1rQ4DEM1TVTrPubVr18CVV7J906kY2a0Nlm9n+KOsFMwd0JzfB0Zw9myG g3s3wlbXjPcGS+dFWWNKf0sl8B+WQBmh7SVd+QpRBXiF/CGXv7jK8F4oYYNG4Xv54yEng8I+hlMO 738y0Nfn/V/fVsXnZqXRx7BIKqPM5gPDgqa+z1HhvH8olSpq6ZK+YAsWAygh7jPF8X4kBd6TZWqk X9CEIKsQ1xXcjoItkd0s+publU4JzAKgxPvoKrAZQxYKy6PwuSxewV8umyWeX+xl2M4iF2tuFsXz PkIF3rdVUU3YT1QwpCUnUiqzFKiqqZEKu8hKQg7F8T4adQ1NNvUJeQtf4tw+eaZEKZxOsH5W1Kgo N49yTEqIjyd2LybNivkZDCR1zJ9esAOFhX7gfaCGpCnYiYsJuVLNlZBOJgvZsRBduCaDuSgmeZFL 7GVBMbG8X5G1mRXYbG2gW6lgHDZPxsXFs6zKkwbvJRLCngXDaNmZDLp1aSPLogwpSc1lsoTZmamU nJZDmhqS9uZyu0T5cwRZnWVx8/8mJsRTWSXh+QsyLyqfrIxUSmJNTQX1ioXMTByXNePCICvcdiFP NrJSJQ1Z/y1aB0k/EZ5l/toUPf5a3b92T8gpkftADvfBStw3ioYcio9LoHLKDP/EEFCykMNjIrGY MSG7n5wYz5rkMqSmrsYm+byxnpKYSJncTypqahYxOQr1FNvLbZU9E1l+X/q9y6bLVt0HkrFHe5ox YRjVr+NDWsyuIc9LmlDoh7K+KJYhjo+85yjcE/p4PO8fi+P2li2vRmbGeXt5hTRinEIVycpIottX fqf1qxbRoevBtGTvrzShba1CsYqeFpdfXr3YsJ6SxHIqy/1aYiIX+mnS+7vk6tObNpy6SHWdDETI raI5f/2K0A+L60oZqck8LjJ5XqnI80qeYai4espKEKxBjAFIZXmu0qxYeD+k5FkKc13hfp+alEjp rKUT9i9KtwxKnrtQN3lHF9IX7PdCXWT1kcWTncvqJJ5zC0PfvKAymgakq6XOMD9KdGbbXOo4dTfd eupPLobFz1+yPEp/SyXwX5HAH1oA/leEUtrO/38lsGPOAFp8Jode3N2Rb6H7/297Smv+bQm8f+ZH K5atpAv3g2n+liPUoabFtxN9pxjRQbeoYesBZObgS5OmjaPabnlbTb5TEfJs4gNvkoNbd9p1/S41 qiY1ncvvlh7kl8CxucNp9JaLjDtpTwq8SL9w9yn1njSfVs8aTnnL2/wpSo9LJfDfk0DpAvC/98z/ T7c49O1TCogE1fV1KVbT8X+68f/xxgn76sqUVaRyX0OZ/84yEjxzM9l5Qw56/p3zz59dVmosXbn2 iIG8fUmHuc9Lw5clwFtm6MrlK/Qm4D3lKpQnR4+a1MjXrfSj8MsiK73zH5RA6QLwP/jQS5tcKoFS CZRKoFQCpRIolcB/WwK8Y6w0lEqgVAKlEiiVQKkESiVQKoFSCfyXJPCPLgAz2USTWRgg9BvSZvJ2 5gJmPKdi4mUI14u5kZGRLsJpFJPkX3wJFBcbS2kZReFX/sWV/serJmw8LwZt6LvVQzAjpn0D7uO7 FfadM/r8KYTeBIV+51z/L2XH8D3xnykyMoqio6MplXEIS0PJJCDMtTJswpKl+HfFykiKI392AEli 3NTvEYR3kgAMLoTs9CTO+zkDqGd+j6xL8yiVwD8mgRKbgEOeXqGFaw/wyzeX97xkkr5lZeravQe5 2JkxSXkoLVi4hMFheQ+O6CGZS2U1rOinuVNJt0JZigp8SPPmzaELd94xJpwCudTsSFs2zCHVry0/ 2Wv44NolNH/jPgG/mVQr6dKeY6fJwUCdPgXcpAljfqBHQeGMJK9DExasph4NXSj4wWUaPHQifUxN Z0zCXKrRohsj3E8mA00VunF0J+06fZ1ypS5wOdmZ5NykB43v3vQfE3bII2Yz+WUP71NiknkBHJhl mc0YZVk5ijRo+CD6efY4ajx8MQ1pURyw7R+vZuJHf5q9Yj8DxM4kG918gLt/PKsSpchKjaenLwLJ rmo1BsL9/lutrx9cSj/ueEgbfp5Ca39eR2nsJajEwNNZ/JGQy3h8M2fPp4x3l2j5pqMiE0JuGSVy 821I3Tu2JS3uh18L6fGfaOnc6bTvzG0RcLa8vgPt3beLqhgW9cT+Wj5/6z3eb/b62RNm6bAiS8NC HtFc8MIezWmTfwLdf3CTZOQ137s+uWmxtOTHuRQYn0I5jD2ormtMdRkvs00dj7+0vyo69B19TCzD TC82f+PezUyaPbALHXv4npISkqn/7O00q7fvt0WU8Znmcd8Kik6k8uxRKuAKZmUzY8uomdTMxfyr 6TNT4ujZqyCyd6xG6n/DmPhq4fluZiTFkv+bYKrsVI0Zi74+FvIlozd3ztKcBQvo8bsY9uYtS216 T6EFU3rlj/LvPs5Ooj1MXLBk7U7K1rCnA78dp8oqYTR9wVbqN2EaORrneeAL3v0HNi2nc3desSe0 kuCSTxmZ6VStWU9mpGootvPplaM0d9FSehmSIILb9xq1iMZ2caBmDVpQcIICDRz7A40f2pX+h4/6 3/08Smv3r5LA15ZgBSoa896fNu7YQZrWVcnO0ohObltIrTr3pLAUhvbIiKdd29fTu+zy5ObmRtUY PNfFyZ7hMBR4cRhEXVs2oMN+kfTT0l9o/Yr5ZM/wCnLyigKlyE5A+xePpT4M5NxpzGzauWMLDe/e mZgEnSHeU2jC8MH0QsGGNm7ZQF66OTRyzGiKzuCFKWtuGnfpT1u27+JJqh/99vNs+mHpUTHT15fP 0cHfLpCKqiozHaiRqmp5Kq+cB1wqK/nv/FVkRgTGNGQ4Ey26eHAnHbv6igwMDcnQwIjhRcpRSEgQ JSQLVHLfJ6QnRNCerQcpOv6f+TJNeH+HunTuSveDv18bZJJIjwniRf8icmvUgyxN9MnZ1Z10FaNo 3YZNzLxnzd5+TuKLLej1Q9p5/DTZufF9tSyaM6wz9WfwWX5ffzXsXjSaFm68RCNnLaId2zbRmH6d SE1AfPk3hdxUmjOiAy09fL/YWnUcO5VWLZpLmn9nvZmR5viWbRRaRodc2cPyrd9pat+4CW29+LDY OpX04tVds6nbuOX0ffQzXyqVP7Rmr6SD+7aQtUocfYwtIQ0ds1LYV3WmqpbqtHXLenqTqkLu7m6k n5/F5AtFJrCXcOdO3elhSPIXYvwzlz+/uUwdOvei5xFpJS4wzP8itWzWggLTDGnVhq20ePYkqsQw WN8YSiXO/2+PyIw6P0/tSQNmrKa2vFg/d3InVTVVpTSmhdy/bT9FRBeVhYmlLXlUq0x+53bxh8IH cnH3IGsjCQTZu9tHqHmzjhRfwYHWbd5O86aNJRVmgyqvacXvljM0nT/Alk3sTYMmrPmb+/HfLrnS Av4rEmDcpBKFRyfWQsvAEK/jJUC8gZd3QV3dBJffpyI36iXsDFWx6fcHRfI6tHg8SMkQ115HF7n3 pQvJn17AjAFeRyw/VjRKRjR8HUwwbc1v4r1L++ZDxbgKAmOLkq/3dTVD/Z5TxHibhndCne5Ti+ZX gitP717Apo0bcfzMZaRLmo/U+Gi8ehWI7Jws+F04iR17DiAsJqkEuUmidG3ujuajl+XFz46Gu6MJ fjlxHeEBz7Bty1bcfPw67z4fhb17gZ2bNuHQifNIkbC8F7hf+CTqxUWY6Dng7rs8AvX8caI+vMKu 7ZuwdcdefIgqBCLMANKXzxzHRm73yd+v4FNsXtviPoXi8u/nceHyZTx+4o+4JAl6cuKr3xmo2gJX 3ibnL0Y8Tv0chiMHtmLT5q14ESQBfxVupCbG4OXLAOTwf/evn8e2bdtx7d7zQulzsXpCO5jU6ITY fO0OengCytomuP0+r7yTO+fBwt2XIZUl4cLmH5kUXh83A77W/7LQ1dcZ7q3yiOoLVQAxoYHYt2UT 9hw8jrgUCTp3ctwnvHwbzFGzcefyWezkPhAeVxBJ+sOb5zh35gyu+fnh+asAZHL/YZMRXvi/QiaD 3L56eANbt27D2ct3RTBzodyc9ETc97uGM+fO4e6DhwgJlwEmp6GbtyGG/nKxQPXSWIYP792H//MX +eLmRclMisZvR3di46bNePAiUH4jNOAtwqISkfT5Iw7s3o5Tl/yQJQXelUcqdJCT+AF1GZh9w6U3 kjtZCWjkYYqWoxeI50GvXyE6IQ3xke+xd9d27N5/DFGJ6eK99IRIHD+0XazH41eC3PLCsZ+6wrrB 0LwL+Y4Cn9/G5k0bse/QCcRKZS+7nZ4QxXnu4366CRf97iJBBkbMoMMXTx8Qr9+45y+LLv1NRvca hhiy4lyh6984Tf3AgOA6WHrsvjxiZko8Xvq/Ybnl4JHfRWzdvgvvPub1tfgXZ2FqYoXrAbIeKU8q PGjcPHsSm/i5PHyRJ4/UhGhxTOTymLh3TTImrt9/yayDmXjt/xLJ3ImCnt8T+82Dl0H5MgSCXzzG Np4jjp+9igzpXCVEiH54FIYMLH0/lBGUSxSyMLldHWja1UJoQr6MpGmjw4IRGPwJ2RlJOHfiELbv 2IlXfC4JGfC7+Kso+wvX74vA+cL1yLD3CAyNYkjYRJz99SAOHz9bYB7LzUjG5eNHeI7YAv93eQDX SbGf8OrNe24/z7UXT2Hb9h24/fSdtKwv/zw5uw6KZZWwbO+FApEYTgeW+na4/FRW3wK3xZMerbzA 1pi8GwwIP6BuNRh7tJQDy+fdzDu6vOsH5mtRwa7LhftcXpzSo1IJ/FskQCWtiLAA1OQF4FspiPyh BWOhZ1EdIUm5yOIFm7AAXP3brYLZ5aSifyNLVO82ST4JFIxQ/Nnrc2uhrWuLh0FRuH72BA4cPIH3 4dJFDE8Cs0d3gIahBRYuXQrPKlbowUwJsikqLioMr1/6Y+uiidCsZIy1Jx+LhWwc1hn6Nh5YtHwl jpy8gPhUKcVG8VWQXGV0/02j+kJNTRe+tevCRF8bDbsMxefUXPhf2wtTK1t0bdcIBmbW0NdURtV6 PRFe6AVVfPYZ6NjEBU2GLcy7nRGJ6sxS0bJdK9hbWzALgCFU1I1w+OZbMc7VY5thoqMBDy8fGBvo oX53ZlPJP8Pn5SQ/+toC0P/4TjjoqDNzRXW4VWWmjcquuPxY8hJKjn6L3s19oKNniXr1GzDLhTVG zFgr5nvt162wN9SBvaM7atdwh3pFCxy9GYDftq5Er7ZNoaqgglYd+2DE8KGY+NMqJPKCIvqZH+rY mMLU0hk1PatCQ98cO07dFvN7cmUPy9EOvbq1gpG1LYx01eDWcKScWUKI9PH+aehV0Mb+6wFiGtmf lzcPQUnLGFdfyRZIwMmd82HmWhOfpY83I/olTPXVsepE3ktblj7/79ZxPZmEVws/bjyF9EKLoMeX DsPWVBfVXL1gbW4Mj6bdEJOWjSen1sLC2gt9OzSALrMbKCopoLJPLwQnCB8jmVg5YwS0NLXhWcMX 7g5W0K3cDB95rRojvIAszdGnd0eYWFrBwkQHRnYtJbIKeY4WXk7QN7RBvXp1YKSpif5zDyHgwUUM H9gXZqoqqOLWCCNHjcTQEePwKCQRrKlBgzq+vDjRh0/POfmbhbj3z9DamRl1jB1Qx4efl4Yulmw/ KcYZ168lfBs1RS3XyjC1sICqkhLGrTlRIH3hE8kC0BBrzspecBlo62OFxiOEvpyDTk2ro0WHDnB3 toONvRWjJ2vi1IMwrscTNOV+ZGjqyP3GFeqaBlh/9BoThERgzoRRqOtozdesMXjYCAwdPBgbT9wQ iz697AcYqGvCw7s27C2Z1aFWU7yJkHysfHpzDbVdbWFsUQUN6teFg4051h25gUxeFA6t6w1NXe6/ zBShqaGB8Ys28hORhux4dK3+xxeAGbFvmJFGGwv2+8lyQsTLS7C0MEf3zi1hYGIJYx01mDvWx+vP KTi2YRl6tmkCFR4TrTsx0wWPiUnMdiF0j+zkzxjQoT4MjS1Qw8sNqvwhs+O8ZEw8vrQLZsyw0rNb S8mY4Dy9m01AZloEPJ1s0alLe2bvMePnrQd1bWucex4h1ufopoXQ5f7iVb0m9HW10WHETKTzM9m7 aiEzozSEsoIq2nXtj+HDhmLKonVIErrpF0JmbABczFQxcOHuYmNsWDACzt610KZxdVgw649qWcKE pccBXtxNb92An6UJ6tX1hY6WJvpMmo8MHlPb5g5CNe/maF+/Go8XU0GRiCYDlkAgBUqP/Yj2Dbxg am4Hb/dqPL9b87wi6WOXj66CZWUndOvYBKY2dtDTUOZ5eHax9ZJfzEnDgEYOcG40DIWXvN9eAGai C3+gNxg8T55dctgjWOsqYvLG0/JrxR9koF89Rzg1GiV+7BUfp/RqqQT+HRIosQlYQF7PTE6mdUvm 0U+TRtOEnw/SlPnzyFStDHOX8ruT94csmzmFOnfuRG3btqGF69n0WiaXEsMjycGqyh/a1xP9kVkE ymTR2EHtaOispbR2ySSq7lWTTvq94zzL0eRxE8goLZimTZpEwenatHTpSPn+o193L6d2rdvR4KnL SMXQhOq5mIrKXBM3b3Kx0qRdG1ZQx1ZNeG9YC7r56tNXFb0B107Q2NW7adya/XT92hW6eHw7Pf5t A63bd4UUy5en0KB39CSG+URv3KEre1dR8MNr9CrsL5g/mQXk9PlbNG75TvJ//oDq6GfQ8esvKCc5 hEYMHEe1Bs+h+3dvkt+pbfTwyHZmHmB5/ImQncS8r+MnknrjIXT73k26c8uPPHUTaNTo2cQvSdo0 fRz9ej+eTlzwo8uXLjKP7U2aOrwDpUS9oSGDh5Fm86F0ye8qndq3ngzVUiiF7XZauvpkZGZACvwm MDQ3IQsLS7JkU79ybgYtmjyOXmlUo6t375Lf7Xs0pJk1jR08liLTea8om/VDg97StbfpdPqiH80f ydyrWfk4V3OSaeaU6eTYaQR19rX+w61VUtcmOxUNZjn4+ob/bj8soAFtXWnOkFZUr01PuvlMItvc 1E80btBI0q/fjx4+uksPuE+EXj9KW8++4C0EyhQceI/8QhXowrW7dO3YBgq5s5cu3X1Nr6/up8kL t1OfRZvpyqULtGH2QMrOiJU4sPBYCvvwgY5eeUs7T1yk7QuHk5JCDpXLzaTF4wfS9XgNOnDhEp07 d57aeOrQZ2ZbKK9akcwtzUhRoyypG+qQhbkFWVmYUYWyIEOH2nTi1Gka3aoqxSfmNzXm0MYfptDV ZG06d+s2XfW7Qz+NaEozR46mD5+TmQ0nh25cOEduncbR06fPaEprVzpx7uo3TXzCmzstPZU5n6Np 67JZ9Nv9MOrVuiVfzeE9U6l0+uhJaj5iMd2/eIgqG2qQQnYabZgxie7mmtKlO3fo2s27NHOAL00Y NIreRWWSmbk5aeipUTneq2tpZUGWlpZkVKkiJQQ+ohFzFlKjCcvo9q1r5HflLCHoMk2fs4Vys9Np 5sABbIp2phvcpy5eukLXr1+nLo3c6PjKObT9YRTtv3idLl+7SZtZvmtmTqPLjz/+4f7zrQS8DZU+ 8rO89CyKjpy/Qg8uHKSM4Ed07/Un0jHg7R2mzEakWo6MLCRjwoLZiYQteKc3Laatv7+ifRdu0q27 D2l0M1ua8sNqEjdrcP8ICXxDNwKy6cwlP/ppeFvmWpeMifi4T3Ti/B1auP0Y+T++QVWUIunqk2BK j3gqjt+OM1bR3dt+dH7vCjq7ZQ39/iiMDIRtJyZ6VLaCIhlbmJIlj00LZlYqK90PXVwbM5OZIzs+ nTl8JWMuJuw9PX78hIJCI8XoudxLnt31o3TjOnT7zm1q7VuV52bQrYMbaOmph7SO+7XAA3x442w6 vGIu/cZzd3lmGHl69wylmdajx4+e0pb5Q+j3ncvobXQy7Vs0k449TaKT3DfuPHhE3T00aOrcjcwo LAnvX/vT09iKdOH6bZrYqxHvPxV4r78c0mPeMR94EHXp2YF4N99fDqxppiye2qtYWoh5RYYEsDye 0ofw6EJ5K1GPrs0o5OExCuI98aWhVAL/agmUdB36+OR6KCuroGmrFtBUIlg0G83flpKQFv4c9kZq 6DlpHo4dPYqDBw7C7+ErVgjEo6NjBfScuqGkxYjxrm1eIn4d2jboiw8J6Uzr+Ak969jDq8sU/gqO w8Tm3tC28MKUiQOgp66AdsNmIEGqtklOTkRkxCc2J56Gj6MZ7Op0RazMbsu5p6Uk4tqZfTDTUYVj y4lFvg7zV/Qo87BqWtdBjFx1APRq4YL6g3/C0xuHoKrDJvAACe9nQtB1WGkb49dbH/Jn8YXj4jWA blWM0WfxLmmaXIxt44y2w9bj49Mz4IUSajM36YxpUzFhxEBo8mw7d2NBU2Dhwr6kARS4SPWUNbHb L1Ce5Pe981DetCoCw8NR18YQvefK6iGPgpv7F0K1ohWef5KY9LKin8PFSp85biX5pL67CAszK1wL yjOD5iaFwE1HC+M2npdnFHz/KJQ1NHHpVRxeXd8DlYoGOPNUosX48Oo+rt56LNcYX93zE2tybPEo ND9/qSSrkmgAM+MDYWmsi4UHC2mn5bXJO8jNzsSp/evhaqUBBT0rHLr7HskBftBSK4uqTXuLsp88 biQMFBQwbslJPL+wGaqVzHH9nVQDmfQRHpbqWLD3OBYNaIQqvr3kZt03Z1eyBlrQmLNGNNAPqurq 2HjuqVh4dMgLXLh6B58/PIClujKWHrgpr9SUdlXQcvw26XkmetQ0wvA1V+X38x9sndgUTm0m513K iUNTGxN0m5OnxYkPvg1NTXUcu/Ua4/o0hGPbYfI6HlrUFzYu3eTm87yM8o5ykkLRwEALmvrG4AUo TKwc8NOGQ9LnlYxmtRxQv79UC5kej4vnzyMyKhgNzA3Rf8lheUbRb69CTUMNR26/F6+dWNgdNo1G yO8LB4+OrYOqhjUehOXxE6+Y0hlmNTsggnmKjVXVsPrUowJpBC3ksLqu8OmdT0OU+B42JpqYue13 SdzvqAEMf3kBKqx12337nZh3TnwA3M308fOBB+J50pvzMDezwc1gyZiRVCAX03vWAulUxtjJ0zGN x3RrT0do6tREDGuuH1/cDhUNQ5z3jxSjB7+8j+t3niErKRhWZtqYuPWMJBtm6+5d2wqjF5/C60ub WduqhKa9RmE65zdmYE+okCLWHZPws8c+Ow5j88p4GCFVjUtz+NJPSsg9VFYvi+X7mVeXw6kts6HJ fbZFt1ni+eo5A6BTuTZbPFh9x+H+jYt4ExKBecwtbdd4qHz8IuczalQ1wsjlB7F73mAYODVApDRN tP8F1lgq4xxvdRnSohrKmHli4lSWx/SpaMxWCSOrFszCDFw+vJw1pFa4EyzR/L59ehM3H7wQy/3S n0j/y9BW0sXuYubjP6MBjHlxHmbKSth+XjJm964YDw11NXQbtrxIFV5e3wtt5g5/+ilva0qRSKUX SiXwL5BAiV01kZtDFSpVog2HT9HjFaOp/czt/PU6kHo2cmJFPv/PHq21GjSmdk088xa8yCITewc6 dvs6pdEQymMSzYtS3JG+WUVS4q/ToaPGkpmIeK9Pner60ugLn+ju1RP0yyV/2n7mGXWvb021rTSo 3fCldKZzb+pa144qVFAX/+kZNKd1c0eQT9c1FByTTpWMJV6w5VXVqXazbvRDz/00+7cX7ElKYlnF 1SMlO5sUVVRYu5l3V+BE5X1S7L2by9y7amRtoCneVGYv1PLlVfjL9M87XAhaVhcbE2lhZUhD24TA X/7pKfHMZ1lO3HRvoqXMnsxmtHSb9E4SPAAAQABJREFUL3n5Vsmr2FeOhHzzh0zm2M1k/mZV1mDJ giLzLeeyOkOA6vnMmhxbKQep7L7wG/IiiJRM3chMT5IuOT6GHUxyWIsniZWWnsFdgWUjaiskfJu5 3G/SWP9bgZ1vZKEsl8Wu0OyYAYZSYF5YvUpU1VpCbWVW2YPMpBEzYoNp0qRV1H/yFnI1UZclL9Gv rMlpzA2dkpLCnKAVvplOYJFo0XUo1fKtSS19a9P6pQep9k/uImetWzV7MjHRZMkQzd28ldkYXCjj 7a+kU8mOqphpi3kL7ANMq0sazBn96HkEGXt1kNNORXyKppRMCbcpj3vmyK1Aro7mYjod0yrUkBXV IbeOU0yGNjlUsZXWNY2CedO+go30+eWksXcz+DkVr83kbAsG7qO884xMK+TJXuCYZqoMln2uKPuq NqbyOmpos+Sz/eVal4KZSc8Ez3V2ihg4cxUNqOdEuuzApK2pJo/KywHy9KgsOVfWoAaNGxNlRhFv BSC1AvXg/sEdh/fOiXEzs7hNrJEUzqTdidJ4/PGgovL5+JwVy1egLDCXLGuA4liFVZ6duQoGbjP3 KdUK+Z439/WynEdWTmEBFUz5zbOCw0iMLshc4Eh2MNEVzxWU1PnZVqLcTImDQbp0TGSJY0I23rIp hfuKqbkB2VuZUQ6303zgGOqmY05q3Hhhbqmop0WOVhLnA3MHDxJ6SnZCEIusbL45Qok0tIwpJyON UhnmRJkdydzY+c6Um55rak6rtzUhX08hJUmhtEACzBFjKojXvvanPM89Wqy9vXTnLo3v6kuNe02h 3sf208MESbuymcvX0t6CDFQlQvGo1UDMLiEjk1RY9nJRMc+4gHiQyW0SYGSsef7Qk6aJjQ6n9CwN 0mTHkhSuv52dB9mYm3K8HDIfPZUGGViT4M+UlZ1LWqzBtDWVcFXbOvuQbIR8qQ3leb6pWC6dkuO/ bJEpPC/m5SWvvfySuoEVqWuXY3k8oL6Nnanj8Nl0/sh+ikosquVLjYrm9wCzfMsmIXkupQelEvh3 SSDf0uZbFSsjQsAkcodvO34WtXPTookjp1AUewGXk9oSsgovfsooUqdOPSnk2n7aceyRvADwAC/y spLfJTJ38SWLSir0+N4D6dUcOnPrIVnZWxPxxFlWTYOqOhqJ9+q26ET6qjkUHRtHGWlp4gtEltWT 1wGUXUGTNMqXo2T2rpVP/2lxdOXuK/ZNMaLyRce6LDlVq+ZECS9uMsdokHgtJew53bn+lFwdqjD8 iCAPyUJQvClt0F8d88LkJwvCQiGXXw6GPDHq8gtMx7gqDR0+nIYPG0b9u3UmKwPJwkMWv8ivtMG5 bJrJH7SNrMi6QjodPXZKejmHzh05SYa6FmRqZEzNHMzp6GqGOgiXmRNzKZVNqFp6mpQW9IgCw1Mp JzGUpoweSGFxGfIFsgDxk50YSzGxkkkXAuajsg55Wlei0wcPSMxbXOKFw8f4RaZL1sbqIpaWANmT la/dsrpunDeGIs18afro1rJLBX6VhYUBC7wcQ3PkBaGtkoVWespnWjlvOqWpOlEDV/u8KEWOcikp JVV+VcPYidys9Ckp9TNVMnMiI3V1fqkZirIfwfIf1Ls7v/ANCfxSE0pTFIvPorUL51OYogk1rOVN 2owuEfr4JqVzhPDn52nstGWUXJYXANL+JjzbbGGBky+oavDHS24M+T97xW/wHNq7eCQdvPOelMpL l0TcVjB80eePYfJUGYWw7MrwwloeFNWpehUTunDkICVKi7p1+iQvFpTJwVyf4UyE/pu/v7HBrQQd mKVLVjZVqHJluwKLP1m52fyBUSAoaZC3nQGdO3yQF6SSO34nT7DXvgbZmUkWTmXKKFBKxEeSPYUM xlSztHOkCnHv6LcLtySJ0j7T78cvkb2lPRmZ2FF9w3L0y7IV9FmyJuGxksX4n2XIx7Uy3Tt9jGE5 JPV4dvUChYalkIu9eYFqKTAc0x8JSryQFNquIEA45Qvis5TLkT+BhLlAKkfJmPjMY0IylsDwB9nZ 5cipWi1KYTN8826DacSIEby1YhA1r1OdhCWiKCIeE8JCsLiQ98wkZeVy2WbOvlSByzW29eJ+OoLn iKHUu3N7MtGSLJrK8Bad7ITP9Jnhe4SQmynUo/j8hfsKqobUo1UzurhtFV17HsN9vDzTz3H78/WP XIbDyes9QiqiGu5V6dWlk/RYuhUm5J4fvXgTQW7CRw1/PAiiEUJWYiTN+3ERVXKrR87WFmRvV43S YtKoc/+hEnkMGkiNfDzkHwPsAcL9VZK2JH8rcv+wtVGj4+fPfjE6Cs2LeRHLsXmcn3S+/qGkZUnd mtShY2uX0eMPSaSkrM7QUsJ4LvoCOXviLCkaepMpv8NKQ6kE/tUS4MmqROHBsRVQUlPD4wi2YXF4 43cYrJNBlx+3IjP6DVhBg59/vVY0r/QEjG5WC2UrmqHv2KkYN2Yw2rQfh8/5zKpFE+Vizw8D2ZtK FZ16DkTXtg3ZzGKBU7dC8DnwBuwNlFDZvQ5mzPgBtapZwNDKHQHhydg+dzhq1GmBSZNnYRRvsFcq q4IJyySmzMmD28G3YQsMHToU9b2qQolNLHsuFTYfFaxJDpubB7SpBU0jC/TnjemebE7Td22MdzFp eHxhK1T1TRGQIDGppEc8g4WmEfZfflswk2LPMtCytj3qyExlQpyMT3Cw1OQN5ufkKaZ2r4v6nX8S z/ctGQolBU207dIbA/p2RzVLF+w++Voet7iDyOcXoc6bs508qrNDQT3UqV0bg2evFaMeXT8HykrK aNmlFzo1qwsldQOsOilxlAh9egXWJnrQNa2GXn36oqFvdQydsRdxIfdhqaYAS0cvVLe1hU/9+jDW 08GiHRIzUXZKBDq4W0Lb3hODhwxE3eotcT8gHv5XD4qmnprN2qFPl7ZcJxWMWn1UrMe9c2xGzSdH WTsCrh6CpooG9l3hrQSFQsyHR+jWuQPq1nASXifwrtcMnfoNx3t+Fuf2LuRrZeFbtx7srYyhpq6P 5TuuFMqh0GluEnqzA0uLdt0wY9YUDOjCm9hVtbH4oMQUe3bLTK6zKpq07YrBA/vAw9YR6/b749WF TVBV0UKbzt3RsLYXFFV0MHP3BTHzy+yMwutCVPetD3tdAzRr2QSqWjZ4GJKO6HfX2ASsBr+g6AIV yU2PQ786jvwsjNCghg/s7J1Qy9MeNdtNlcbLwZbpfVBGTQfd+g1Em0aNsGKj1KzJMTZNbAgFJVO0 adseq9jBQgiBD87B3EADrnWbY0DvrtBVKouOM9aL93q39kSLERKTnnDh1LrJMLRuAckIF6MU+ZOd EAx3DXX8fPJJkXtAMmq7mWHU8h1F7r269RuM2cHHo2FL9O/ZCdply6Lfot1yZ5+AG4ehr6iAGs07 oX+vzujYeRqvrzOxcGwPqLIjTbd+g9CYnWNUTBxx5lm4mP/dUzv4OanAzrkO+vTtBW9XD/xy4B4S Il7Axd4Ydu61xOdlrqGKmv1mIlHmDcBbU7q4qkLP3A3tO3TG0etvitS3wIX0aIwfOQAtm9YV+5tV NR90aN8ZJ5+EIeoVm4DZNHrrvXQbQCo7aliYYuF26ZhIDkc7V3M2l3phiHRM3Hsbi+TI16jnqMvO Hh4YNGQIO1P4wqfOWHFLyt0zG1HBwBxBiTkFqpEVFwAjPVVsuSgx64KN94OauKP3JEHeuVg5sR2U lPR4zuyHfizDquZeOOX3UcwjM+EDO+EYwcDRh+sxgMdOGzwKKh4dQFZoSuQ7NGWnEw0LZ4yfOBPu Fuqo3ni8eHvJlG5waNBevn1AniYmCPXcbGFWxQ2DBg+AvZ4mqrQajFi25W5ns7GGjiW69+rFjme2 UDWojEP3JdtHYt7dhivnb+/ky/UbgpZ1a6BhS0nfPLt7AW/FqYrIr74zZDXI+z3CjooCAsDlfE5i wt34gFvQUyU4uHpK5sU6tdF74kIx4ZZVc9C+bSve9qGA8vrWaNuuPRbsPivei3//GD7szKbL89uk SbNQWU8JTbpK5mcxAv/56H8RuoyUM3GdBKVCdr30t1QC/0YJlJ3NoSQrVCU2nVrbO1N1D3dSUVQg bTN7/qqzYdOaOlVhjCwTMwuq6eNDepqFTHXllKlJx46sMVGn0MBASs1VJB/fBlTDszKxEu0LoQw5 16rPJpCKFBoSTspsmpq/YjU19bYklUpm1KRhbUph097HT1FkVa0uLVm6lBwt2QSrrkYJglkyKoqI TbLjZyym8f2EzelEmmyWSE1Nos9x8WRRxZvmzV9BrWvzxuWvhDLlylPz1m3JvGJZikvJJKeajWj1 ikVkravGWgBVsrGrQt6uzoxPKPla1DOxohre7lRJXfiO/1ooQ1o6+uzYUp3sLAylEcuSjr4J+XhX J33eAC8E9UraVM3Ni+ysDLjsplTTyZziE+KpfEVdatevD7Vt6iViLUozKPIjmPvYy5S/rm3JxsaG TSx25OLiRo625lTFow418LRl9pFE0jSypB/mLaRu9d3EPCrqW1DXDi1ZZoL5pQzZVKlGbds1ITv7 qtSwtjt/9Zajag260IpFs6mavRVVcapKJvqaLBM1NvnVo4oKWZSRU5ZqNKpP9Wq5k5mNE7VuUIPN MQmkyMDdw6f9QBMYM0t4/Eps0rO2rUJeLEflfLvS7/ldJBPPFjSsexO5g4+sgYKmJyI6nmwcXKlV q5asETIhUwsr8mLsPy0NDbKwticbK0uqWa+ZCNratr6zLGnxv9weHd6gHsdguZGRMeyMYE7T5i2h /i29xfg2rKWoX92REhLjqGx5DWrarQd1aVebol/fpT0nH1KTpg3IvrITzVywmPrxMxGCpZM3uVc2 4QZWoI5DZtLsiQPYKcaYXFydSFNNlYzNbcSxpMblyoLQ3+o0bMCahXKkbeFMPy3+mdo28GLHCBuq UtlC1D65+NQhRxM1Skxi5wkHZ2rfsRnpaEjMnWpauiwTWzI0NCBnF3eyMtKhSkY21K5ZHcpMSGBz qhr1HDmZZo/qIWpWNCqxdtbDi81yEm26spo6Axa7kktV6yIyl9eRNYy6RmbkVcOL9Irg4PG8oGNA Xp6s/dAvqJ3WMbWnto192bEggcqwU06fcVNpxqCOcg2PllkVqlfTkTLYXK+ioUdturbm52pGtRo3 p2pmlSiWNVcmVVxp+fLl5OtgLFbH2M6F2reox9oaBqBXKE/OnjWoVfN6ZGxsLjp6lUtPoXQ2Irbo OYiWzhxL6jJFMWsbtQyMuT/bkgH/Ont6kom2mqyJxfzmUkRkNDt1mHN/a0WeVTmdkQnLzpOMdCuR iYUNz2ceVIG3aTBaMmnzOPb28iJ9nQokmISFMaFeJpMycsuRT+OGVJ/HEHtj85hqR2oKGZTE5kKL Ku40ivuIma4mO5ipSsaESzWeW/JVh82p+kYWPEd4kbZ0i0ZFfuau7p5kYaJN1Ru2JncbfYpLTCA1 LUPqMnQANantTIo8rsqyOb5Rk7r8SZ3Jjl6K5Nu0EdWt6VZgzOUrSTxUrKBF7Tq1Jb3yWfQ+OIS1 jDWpC59XrWxO6mzmdqrmRlXtrMVxLEurqFqJ2rdrSWpIoxRWwNZp041WzZtB2uwcdv/ScbobkEaN 69cgZ2+et5ctpXqsoRaCqpYJtWvTksplpVAqa/rsXGvQyPF9yIA1mMr87uGPIXJ3cvzKO0NWg7xf W55THv+2h9YcvkTVfevy1hUJ6LMCq+yNzKyoMs+H1tJ50dnZhao52PB8GMNbKdWpfuOW1IjnLkN2 5HFydmVNtQHj/RlQh06tqWKZVAr+8JHsvOpTl45tqLKNZPy8fXKNWrXrSeTQiHYunU6qSn/AwJZX 7dKjUgn8YxIoI6xK/7HSSgsqlcD/IQncP7qC2ow/RW8+XKZCnz3/h1pZ2pRSCXwfCayb3IN2PTOg O+eWf58MS5BLZLA/jRrQhy49iSKvBm3o55VLqLJRvv2hJcjjW1FSY9/T8KEj6fdLV8nSszmt2bqZ XI0le8O/lbb0fqkE/pcSyFM//C9rUVp2qQT+P5SASkUtsrYyIRGRorAvwv+H7SmtcqkE/k4JVNIz ItN/eGGkb+FEh36/RTd+P0N+TyNE69X3bqNCWSVy8qhNbfvPoOZNfL7oVPi9yy3Nr1QCf1UCpRrA vyrB0vT/WQkInu8CIXw5mRv0f1YSpQ0vlcC3JSAgAoCRBgTsz9JQKoFSCfzvJVC6APzfP4PSGpRK oFQCpRIolUCpBEolUCqBf1QCpZ9i/6i4SwsrlUCpBEolUCqBUgmUSqBUAv97CZR4D2BGaiJ7wn1m IFoGa2X4qEpM/aUj9fjNzc6g8LAIxnJjkxj7lJRh0xi7nTHFkykpKkhcfcOC/Jma5zXlMoisfRUn 9iSzKuA9VpwoMlNi6RJvrE1IzaJKegZUq2ZNqiD1mnzz8BY9DQghTT1T8mXgXsZApcy0JHrMdGMh 7MmJcirkXr0WY83l90YEPWZQ6jfBYVS+QkWqxh6QlkZ6xRX9t11LT46jiNhUMjU1/kMebX9bhf5i xtHBT+jBm3jyqeFK0ZFRpCCA7vIzz2Zg3zKMHWZhakLJcVGMP5YsYs4pqaiTuYkE9LkkRX94+5Tu P31NOeypa2TGnrOe1Ujxi97jJcnxn4zDWH4/L6RYbUca0bvdFz1r/2qNchh0OCziE+O6FR2bfzXv vzs9MpLp+KF9FMZAhcrl2WO2WRv2XpZ4wZek7NysVPrA9GS67JWrVl6Cz/f8xlm6+iyQAYiVyKqK DzWu9XVv/5KU80/HSY0MogVL11LzAaPJh3E5/66QxXPmx6h4MjYxEdEMvlc51w9vpYuBqUzXOYpU 8nsy/8ECMuIi6MiRXyk+i0G/1XSpVZvW7H0uc+f+QmbIofDQUErLyiUFNjcrMFafgDUqvLuUVTXJ mKkUv+cUEhnwhI6d9+N3niJpGtqzB3pdfu99oW7/0GWkJ9OVMyfp/I0n1H7IBPK216LQ0DCqyF76 GqoFUSoSP0fRp8+M0MB4qgqMQpmVlUlK7OVtaqAryik+MpiuMw5vCuO6auka8Vxfg9QZQPdTWBil ZmSJQOYqFdkbnuOXNKQmx9KnmFQyM+P3oHSNkJWWzH0xjjE+jdk7PU+AqYxfGR7NCAy81UaBvewF MEnheeZwbfU0yjEyxzrSYRzJdm1aMQrJt0HOS1rH/0S8kmLT+J/fCiNDQya2rwk3JweYWdlh1orN Ig5UWvgL1HS2hKWTK2PN+aJWTR/UaTsEYSJGXg6OrJwAAy1VODi7wdPVES7Vu30DBxCIefcQrTwq Q9+CcdB8qsPOrjLuBgu0a5zf+onQYyoqL29PaKmooMO4JSKe2OMTW2FnZIbqPrVQhSnKKpna4/g1 KcZXZgqWj+gJTT1DePnURFU7K8xcu7ekzf9u8Z6cXouqbm3wKY/d6rvlXVxGHx6dx9ip8/FZYFz/ 3iEjDp1qWKHD6OV4dus4fFmu1aqaw9DEHB7Va6BpnzFI5i+CrUvGwdjCGjW5X9jY8G/Lnnj6DQwy oapX9y6GPpPJ2zu5o7q3O5wb9MCnFM7wXxSyEsLww6SxuPHiU9Fa5aZiZMPqaDNwbBG8tKKR//yV mDe34WJshGrePvCsVhUWlrboNuNnxKf/NVkd2/ATlu3Kwxn88zX8csrclGhMHtEPbVs3gmJZdca4 KwmOZl5+j46sgZ6uHpbszKvn6e3L0bZzZ1jpq6JG38V5kaVHwQ/PYey0BYxN9zeMiSKlfflCwJ2T GDdjCRKLwbeL9PeDi6UlNp+58eUMvsOd93ePwcGxDgJi0r9DbnlZrB/dB+61GiPqL2abHP4Ggxn3 tAWPI1K3wJU3EurNvJKKOWI8zaGdGoDhyVDZzAyGBsawr1wVjo5V0H3YAjmFaTEp/9Slt7dOo0OX Lkx5x7ijzh0Qm/WnsvluiRLCHqJzQw9oaeqia+/heP4hAbnJwajv4YZdvz8vUs7xbQvhU6M6HJgC 1NDClt+fNdDnxzUinV/w/ZNwM9ODgVUV+PB72MbZF1dFXMUUDKzrzZiwrqhVwwuWpuao0aY37odJ 6PqKFFLowpYpfaCrb4trz8Pkd0If/oYqjr54XejlePfYWjg4VIGzgwNMDQxgamoLZ2cnODBm5NX7 /lj2wwjGBtaGsZ0PTt0oihsrL6D0oIgEeDFdsvDoxGqoaWnjon8w3ge8xrxhLaFUyRwPIjKQE/kC 1nrKmLH9OCI/fUJ4RDgYNwtM/YP3t05AjQkM+k1ZhdRMnnBz0vH6VSAyvkZJmZOMPo3sYerZGu+i JHyKMZxnUjqPrMwY1GWO3+GLD4sVP7ZyEpSM7PEuLgsJUWEICZXwZ6bHvWf+US007T1HjHd22wyU UVDH1nMSENWMpHhExnwdCLVkkvljse7/uhKGpnV4IfPH0v3Z2M9PLkJFcw+E/g20lGc3/ghNMxe8 ZW7gnMxUfIqIwLYlw6Bo7ITbbz4iMvqzWO3FU7rDqXFHhH+KwP2rJ+FtogafDtMgdIcvhqw4NLTX Q72uc5AqnVBjYj4zkcLXEn0xt7/tRs7nF3A01sDGi4HFlpGTlYGMjL/3jRD9/AqsNA1x8PYbhAS+ xbqFk1FWSZG5hu8VW6eSXvyhiyNqDVxZ0uh/LV7CW7hZ6WHTxXd/IB/m1O3TXICxgneHiUUW2SsG 1YRPn0VF8nt2fAEqWnoh7B8ag0UqIL3w4MAP0LD1RbQMoLpQxPTUFAbDLnTxO58G3TwEPR1nnmf/ 4kqtSL2ykZb2hYYVifvtC0mvz8LM1AqXX5dgzs7NRuj7QLx+8xb7V06DgqYpfr36FK9fv0bwx6hv F/YnY9zcMhoGbu0QW8yC/k9m+YeT5WbEomd9O+hY18DN58Hy9DlxQQy0bYUtvz2WX5MdpPK7MCI8 DBP71oVh9bZ4z3zw0bHCQi4XM3rWhYFDK3xMkPSP+LhYpKQJ81kiOla2wKCl+/Ap/CMu/robJppK aDFytizbL/+mR6Geg7E4bsesOC6PF3LvV+6LVfEqvKB2JCU+Wnx2b17cg5utAZoPXYA3b9/g1esA JKdLFhKJ4YEY3NadOaNd8UwgXC8NJZJAnp71m/pOBZHT0cDAQATa7dWzL4ObMvWXwCbEKnZBPWth bEJ6+voieKaBng6bAnNp765NVK5yY1o8ZzS74LPiXUGZQXOtCgKcFir70/NrdNwvjJas/IVsdCWY TdoMyCmC5jK9XPkKZen9m0eUkp5O7yPCmI7KjCoxXVZFVk+bMmekEARVscC0VUFHi8+yaNvmfdRk 0Czq30QCdqzEdHJ62t/GaooLeE4TBncmVzc3atq2O1199EbMP+zVHZq/aCU9fnCD+nZqQW7etWjr kctf51HllAKV0pe84NIjP9LiqUPIzdWNatVrSgfO3hDLkvzJocvHt1HTer7kxoDHXfoOppvPgsVb ydEfae2CWdS5Yyfq038ATZq1gj7GplD0pzBW+yeSIpsGQwKDKPj9ewpjM74YmF9495LpVMPDlTy8 a9LK7UcZIFZy68n132jF2h306Pbv1LVNY3JnwNvl289Jbkr/pnx6QZPmrqKRc38mW31lBoFWIX3u GzoM9aDMnMgmTCmnJ8qeE3CbK1RQI0N9A/Ko05KWcbmPL+6kl59kVHMFspaeMBVWahliy4+AOy0G bW0tOe1gSnwELZ42ljxdXalxmx7k9yxIjHPvwkFatfkYPbnxG3VoVp9qNmjBNIIB0jyZnu35PZo+ ZjhTFHamQcOG05L1R0XqrRCm/Fuw5Bfyf3qbBvdoR+7uHjRl0S5JutwMOrtnE/Xr1o269uhBY8ZN pmuPP1AKmyYCAz4ya1tZig3/QB8+BFNwyEfm2SV6cfsMjRk1hiZNnUn88pGXLx5kpdGv6xZSbTab u7p50k+rtlOKkIjBczeuWEJnr92mrctnkTsDAfcZOZ3C41MLpi98xjJSYvONIW+TMLWypWFTp5Gr lSY9fvWBOb+SaNn8eXTz0VNaPW+i2LcatR1IESk8cDNS6PAvc6mWtyu5eXjTwnV7KJ0v5/D10A/v KSFBgXKSP9OHkBB6z30nLknCuRYb4E/jB3USx0Szdj1YFm/zapSVRAc2LuI8Pblf1aABI6dSwKdE vg+6fmAzNa3ryXVwobEzl1BsSh6PaiZz5rJD9R8KOcnhdPPuAzK1NKeXfozHGCnlhJPmUoRKjU2D keEf6eNHYUxkU0jQe3FMhEdJxwSnu3b6ILWvX5vb5kXz1uyldJ5DhPCIOch/XreTx8R56tJaMiZW 7rlMaZ+DaN7cRfT4yT0a068LVXP1oCWbDlOmMC9ySIwIppVzpotjs++AgTR1zmqKZD7dKKa9+xiW yMDHWfQhkPsNyzeCzVzCXLVr3VIaM3Ycg7OvojfhTC4tDef3rqWFa3dzjLzw0f8GTZ+2iGJSQals Ll04ZYw4Jpq07Um8AMiL+KWjr8xH2fHRtG7OOPJ0c6XqterRlsPn8+a33Gy6fHA7DejVlboyMPro MePp/K3XlBD+nCaOHUPjJ06lTYcuiGMrf9GZyZG0Zv5k8uBxW6NWbRo9dRFFp0qEHPDgOk0ZOVQc m4OZzu7nLb/Jy0tnjuESI9YyWLkJA8MLAPiWdhZUTkWVbJm+097ensyNBTNlLt06sp2a1/fivuhK o6YtZE7fdL6eRdvXLKfTl+/R8W1LycfThTr3G0cBEUliEzKiwmjptGGS+bluE9p3+lr+plGmQH1Z THh77Qx1a1OP521X6jVkPL0Lj5HHin3/mhbNmkidmCxhwIDBNHvBBnrx9BZNmDyLnnP/kIXMuI80 n8f1bf8w2aVif6/sW0b7rsTQjkN7yUfKNS6LKLwT81P5ya6r8LvQgGlRNRhUXJ3naVNDQ+Y4l2zD yE5iukFuVk45ySSsoVmJVJlaVQiCeV1XS4f0DY2pAfe34b2a0KsXr0g2qtMTo+jXw0coNq2gXEK5 fW8jE8nYVJ/H21FKk44VnumLfTeqauiIz86uiiOpMzuBHm9XsLO1o8pMDVtBWbK/QN3QilZv2U+O 5YNoxpL1RfqdrK2lv4UkUKJlIkd6dGItm08N8Dg8CUmfQjGwtgvcmg5GMi/AMyKew95QFcMXbMK9 e3dx+9YtvApgCqKcRHRxV0ObMUXNMF8r9/GhJdCxdMXB48fRp2NrNGjQHAt/2ccaQMnnsB/XRZup fKxt7ViNbIVDv7+QZ3fz7F5MmzQe1W2MoONQA/4RachNCYWPhTbGcx4LpoxA/dp1MGDEVPgHFmO2 k+cEpMe8RzMrAxg4N8f+g4cxsGN9KGuZ4ObLGDy/vkd4XUFHVxvtBk/EiI5Mp6brhEeF1Nf5shMP HxxfBROLekU0gLkZiRjFavuKxi7YtO0g5ozvy7ROyth8/IGY7szmaVAqp4lB4xfg12OHMGV4H+w/ cwdZKbHoWNsVSgbWmLNwJWaP6Ioy6ra49zYUU3u2BZOrM/CCAlzcPVHdyxM9pwoanRysGd6FKcf0 sWDlDqxfOp0ptZQwaZlEq7p39RQw3yn0TUwwiGn16ruYoVXfZQWasrh/S9h59UBiIeXW8W2zoWbl ieD4PNXF4qk94N22j9z0EvXmKvS19XH6sYTSq0DG8pNcHFw6jjeUEuq2GYFH7ySUVsLtnLQEDG7u A32rqti6ez/TuNWBDtMzBSZl4eCS4VAoqwYjA130GjsJ3k5mUDKvhw9JuYh67QczHXVYeDXHL+s2 oEtNe+h79xVNHbdObQBvFoKugT46DJuELo2qwa3eKLE2W5likBTV0GPYdKxbtRB6SkqYf/AuTqyZ DVenKkxZWAaWNpXZRFIDtZp3xduYTAQ+vY6F8+bAxkANrSdtF/OR/MnF0QXjUVZZE9Pmb8KO9Quh pa6MvlMEerY01PO2gbq6Kuw96mLmj9NgwJq8fiu/TisV/eIKKutb4Hao5Cv9w+Nz0FdVxMpjd7kT f4Q1ayg1tdRRtW4rzJoyECrlrUWT355pg5i+Ths/LN6KravnQlNNCSN/2o2Q5zfQqIYHNFVVoa6h gxo1a8LL04s1ik+RmRCCJhZ6MKzWEgd4TPRvXxcqOma48UwYS1lYPrY1VFWNMGvxWhw7sBvDmaLt 3rtPuL3/F6gqqKLvuKU4uGs9LPTV0ajbNEg/4JER6c8mzz+mAQy4sZfbZYYDvx2GlpIKVh7h9uYL S/rXKKgBzPyMsZ1b8pgwEceEqwdTGvKY6DVtlZjq7hGm9mNqueHTF2HzmkXQZAq5WbvOifd2rZzI NHuSMTF4yizUczZFhyFrERPsB2VFYnObBup3GYIpg9pDUckAp17FIjspAs08q0DFtArmLfkF0we0 hYKWM54FhWJsx+awMjXmvqMIN09veHM9+v+4gcvKxYkD2zBldD/W4urg6L08E9mlnfNQppwerr6M lrYyC9N61YRTkxHISGeTXDMeE9bO2MZjomdrX+g7eONN7Ne1cEG3DsNQ36WoBjA7HXO6NGKNijV+ Wb8Xy38cBRXu90u2XRTL/m3FWAlV54BR2LD2Z9joqGLM/CNIignA8sULUNfVApaNx4hjS1pZHrdx GNXWFZo6Dli+djv3g40Y3Kc/AplaM/jBWehx/7Or1QZr1m9AOw9LWNQbIZ8zop+egKlJCTWAsgL5 1+/kOp4b7fDkY55W6faBNSIdZa9Ri3Bo90ZYG2qgVrtRyMjMRPe6jjz+NGFVpRqGT5oIDRVF1Oy1 CFlZqRjXxAvqhs7YuPUAfprYX5yfNxzN63NX1o8oogEMvncOViy32h3G4eihPajtYg4b96a8PSoH aTGv0MTaGFqW1bD459WYOrg11Cu54eWb56imr4y2kyX9UmjOlT0LoFLJhtuRmK91hQ5z09C3vhVq dp5YQO5CLEED6G5lg63FUjhK8pkzpgNs6/cQ6QhlOfuf3QlNZab/dGmFUzefyS7zbyI6O1rx+Lgq XstOi0YzFyPU7zVNXnbM6xuoamCER5F5shci7/qpLyy9WvHctwBKFcxx773EbBxy7zj3ReciGkCx AOFPbjxqe1ih95zt8kuFD44uGwk1jSp4HyuZCwvfLz0vKAH+qipZeMIvSCWFsvyis4O5kR70XBvx g5Ko49PCn6OKsToMbF3QqGFDkXN25nJhf10yOjqqYfCP+0tWiDTWZe4YZXnxU97AFCPnr8HmFZO5 EypizBLJAuXN6e0w4QWgiooCNJiv8Wo+VffZY1sxhHlSG/l6QIP3QKzYcwaZsaz+1lBjzk4NuLcf jL17tqGRqzEsXNojglUvXwo3NnM9lI1xPUjSQZEWiVqVNdFzxka8vHOMFwzKGL18l5g8/vlpGGoZ 4dyzr5sYvrQA/HDjV6gpqGDLpZfS6mRjSCtHODcZiJSEKPgwj2rnCb8Uqeq1/fP5ha6DY48lC6TP T47ByMwed4ISERsVgXNbZ6ESTzD3Xofg48dQRMXEIyXsOWzKK2HsulPy/FZP6QAtNhvEsfni6KZZ vPBSxYI9F8T762YOwKQFu+Vxg+4chJaGHg7dC5Jfkx2UZAEYG3gLltpGOPnoawtAzjEnA7vWLhAn aCV1XUxft1+cnELvH+eXjxJm77mMhPg4vLl5HJXKKGHHhQD8tnYCSEkNvxy6LFYpSFgk8AR87lkg Fg9tBB2nhghNkSxOTy/rA4va/cQJ6+65LbygV8KwBTvEdCfWTcOA8SsR/+k5zDUUMHj5IWkTE9Gk mj5+3H2bn0ssAh9fgr2pFpYcuIawsDCEh39CZlbe4ndiGwe0mSzJU8ggOzEMvtrq6D57uzQ/4PDK 4VDVsUNwVDSa8qJUz60RAqMk9snxzSqj0dDV8rjFHcS8vAbbilqYMO9n/LJ4NuzNdeHWuAeieAOm sPfH1lQTNr6deN9pDhIDr6N508549+4F3HhM9F+UNzZ3L+wHNcOqeBuZhIiwUIxq7YSavWeJ7foY +hFJqRm4vmk+jwn+CAqWvoiY+9bHTgM9Z25CbMBd6JRTwpytvxeqZgq6V7VA9S7T5NcfnPqFX6Aa vJ9IMl7+zAJw07QeMKvRnU2NqWjnbobazK2dJ3mgyAIwNwefIyNwZvN0HhOuuM8fSbIxIWxN6cUv f93avRDOW0Pi46IxrH5VVK49QqzzAe4PVEYNi/ddEs/XTO+H6fzBFB18E2UVy6LDxMWSxUqMP3PE amLHtWBc3fUDcz6b4NxrSRvDbu+EAfPq+oeniPU4vmYCtGy98TTwo1iP6M/xcvlkhd+HnZkRjtzL GyM5KeHwttFEu4mShcHnwJu88FTB5uuBiHpyUhwTc/dfEcfEqxvHoMljYvPpvI9jeeb5Dr60AIx5 cR36/CwXSPmwhSSz+tXmj6d2CA97BxteoPSZltevezXwxMi5B+U57/+hPSo3K7gAfHFqOxR5Xtl7 +bU8nuQgixeGbjCryX1Uul49OKcD7JuM/BsWgLxIcrWBe7vx8rwfn+N3m5I6bvgH8SLaGRXMnfAg MFKs2tYZXWHIPM73rpyCZjkVbPjdX1r3HIxs64wq9XtBttW2uAXg0p7NoO/YDJ+lr5no15d5oauM jaceYt+KETzuq+LBB8lYCr3Hc7ehN8LTgOMrRkORTdcPwwRzJvfNWg5oOma5tOzif7KTQuDBH5xT 1xcef39+ASiUdP30Af6QtuSPYBX0Gj+X5xHhqz8JXZ2s0Lj3GGzc8AtaN/CGOitjrj7J+1D//OYm PCyt8ZQX+PKQk4SOnlZoP2ULhHWDsYYSZu2UzNXfYwEYcu8ojwlVXHv7deWOvD7/8QOpca2QWrCY U9GDitW/C1evokMzRtD1dBWqJPUCFvSt2exhNWHBchrevLrooVNOiT2NctJJSUWZ3n/KZyIqJu/C l9Q0yhMyM6jz4AW0enpP8XZ60Gv65cJ5mtzJmjr0HkqVO86nXybXoSl9O1D71u3p+rVrIkdq03b9 SfhHbLZbMrYHzRg3i1r6HKKKKqlUUbslndq3kQy4anWr6JFrg/70MCCaWjgX75X6PjyU9Kq6k6uF 1CuxvB7ZM+/tW/a4TM/QIC1Tcxo1qJdYP8VKhlSRzXBJcYLavuTeULK2h7P5t4y+DflUs5VeKksu 7MV84kQkRUWF0MuscjS8XQtZdPmv36mLZObdntq6GIvXstjcKzhh84ZH9tQ2IDN9DSpXrgJ7VpmS sZQBKcL/PsUqVaL6Nd3l+Th516bk3Rspnq1ovG+NzN1r0qgeDcX7A2euITAPqRgyE2nqqBlUsyub LTwt5en/yEFycjyFMydpuXzcv8WmZ4/xXsOnUcs2HWjx9KG0YERfMjFxolp4x/aHbDqyZi7d3K5A mdxXdJn/V105lzLSM6myW2sa2qmemGUlAwuqoF6OEmJC6dqlZ9Sm12oyUS0j3hNMhLyKF49zmF9Y 28KGpozqI543H/AjNWFT0ovf1tDnbEsa0bWleJ3dm0UveMEcpcqebxZmhqSqqEhaemZkZCThBJVE FP6yp5rgMp8vpCfF0IdcJepbx0d+1dGzDhufTlFUXAqbQXOp9+ChZKUr8WbT4zplhkfI4xZ3UIaf dS6bbS+fPUFGbLrpMnwOU1P1J90KbMJN5PLLKdHYKVNIX4V9/Mxr0NFfvSgt/DGFU3maUEfCdyzk K9QjPfsq94EyZGvO2zkqKpJyBf0C7QoMCyH9ah5UzVxKfqdiQLaOjvSBebk/hL6jBA1jat64VoFq Ii2R3iVlUJ3G9eXXrapWJ2XeHBwRzRzFlf/4eKHMeDp94iJ5NhxJKWkZ5G3nRPPPnKDQ5OlkpvaF aY3lpMVmcjPmrS7HHM3GvGXFUOo0iNQIln8EpcQ+pF5dOvGHcQ4lRILs3SqJdRb6mKVnTRrRTdKG QT+sozLs9Rn99gqps+ls3MghYk+CsibzUVei5Mhwun72Ktn5dqYm9pL2ZfN+GXZe5LFZVlIP5qZV ZN5ZY/Z61C7k2JrO21sK27EUVA2Z27w79VqzmUJ+HEZX/l971wEeVbWt/5Deh0x6JwQSQpAgLYCA dAFFQBEbTb0qqBfvQ7EiXBUEES54rYBSRAVBBRSkKASkSUhABEIgIb33mUmfyX7/OdOSQC48P/ST d8/mI3PqLv9ea5299yp7zcdwCB+IBwZG4PzmL2WekFT6P6+xQUN9PXzJExxrWDD/vxyUleSjxj0Q g/p0s7zWPX4Q/n3yGFKTD6JK64bHZowz3dPTE5Re/0a2kq81Npp055a3gfPZqXCIiMOQ+KhmVylv tAU4cjQdD72+BH4mHAwGqh5bPHWDThq0uKipxQDuyWzkfCAitg952V72hm5ssMXDjz2HnhFGU6LQ DpH0Uk1FTn42xXoEBsSZ696O+xnfhs2b0yFpOB3NmbWoph6p5ItuQ+6Hl8kT2jsiBn6MTHE5OxMi YT/3b74XPUONvNTYQDU3/zXUC4yZ+nfELPwUy9dtwbK7Q7H7VDnW/mtyi9xbnxhIMzqdHVy5P/WN TAPHTMah20dg7bKX8PcFr6GdSwese+M+7sHdDimJh7CtNA1BXQZh//uz0SsqCKvfehlbDiRDr83B r3k5ePTecdxrXSB66HTMmxiJYyl5ePYfwai2U6GnSo09O7Zj/tQhLejn99bf3s2L+287kH//EOr5 vdX6y77XhqS8Sn2Jp72DPXoOvAP93n8b3QfdS3uW9Vi7+BHLw85OTnBxae6GbY9etw3H3C3bkKV5 GWEe11dcYKdQuNBe4Zae1vAN7e3JJIZ2OHc8AZehxldLX0AXX1usW7cBXW8djZ9OnOMA0Poxk2wN x91xG978OBGNdi4IDPdBRWi0PPiTKuzq6AEHPQWlZHvVRlK5uaOKrvOM2gI3efBkgLasHC5+TrIt ha20yTqd0en/T9sFR/63o1BpOz9zMTb8ADBCRYvk7uoOfUUpXeO16KI2MrCmqAhO1C85M2SNa0MN Tp89i4cGRLR4T1tWC1tnD0tYgwN796BIQ3tN0+BKLxlCsk6E05Kcubm6Q10NcvJoi2Ia/OpKi/lO OziyXtJHyolxdcyv2Dta9znbu345fsh3wi87Zlnya35g246Sjl8CO7tmXwM+INmfmPNL2n+A2yWp GaLn2jaYUt7tgzpj8dqtSDoQhqP7kzB8oq8cxmfZx+vRl8KTwR7g6OzEujvgy58b4eqkgjEgCHDq yI8obwhEhK8PqsoaEcY+lZOhCjv2nkQDBsvYSfLCniGGzJt6SBMYiVprKqtJP85wcDJ2WM6vB3Eq TYvbTRu9G4iv4ORHanZbqZ05Uz5g7+gCd4ZZyMwu4lln+ZXq8hIqkfkRkWxr+CuFNDInBz5vI938 D6nJoIedKgArNu7AoHBT+5o9L9n9uHHwJyUb0qgT/wsXNzjzg5GVVQzEd5DvVTMchC3RcDDZ1UgD FhvblmW3J51qspJRQZ5wlVldD115OZxDHOHmpoKNphS/pWegV3CMnKdcJm1C27P4zIs5lmu1mgoY GgxwcmnGCJI9msnWyPJgGwdFqUk4eIF1L16J3t+vRW15GXTaRvz0SxpmDIu2vGXTDHvzRZkniGlz nrBxcCbO9hh17zSs/+dMhsLQs68ciYWRkiT7xOY84dCMJ+zYNnsbo52TDbcFs2P4I1sO6bXldbB1 N00eWfi+3ftoq2dnCXth5E1Sb0tWMVdT5qPWeIyZ8jjCln2GpSvX4JcNezF97lpIosmR2EuhrZav 2oDewa4yTziRJ+ztmxGTNedWR1REtxJILuzndrQTziukDaKJprQlRXCUwjzZUEDQBlCyAZNSUcp+ HE5MxaQxLcuy4f3mTVPR1qy2OJM2cOUI6OhlrQMnnDWcqDgahSxN8UqxY98ZNKk6tHhfkiut8bBm cp1Hdo4cjLVD1sUsywt12kroGc7EhbTY1GRHe3JP0z2BvXsPwM2/LyL8fCify2T5HOtjrLummHhQ YEr9b0kkKisJ20LNPjiSai1L1FajTqeFi6sjNNxDsp0rsZSTAds3bWDIM2kCb4C9uiPmzHwQs1Yu gP64F4JuG49hvYyTfEtZrQ4cPLwZVsUOab+dA+7p1equdCrJZbNkvPK21J/SZLJlLxqfc3DxwhPz PkbWyROUm4eANyYzrFcTHpq7FG9NH9Yis/iRd8K7S19U5p/HxfR3MWX63xDGcC3eYd2QmPAl8nUN WPbcI/iA8rqikHx7/DDSKw3wkOnpSlpskfk1TgpTUoivPVyIu5KujUBz0v3PT3NlwmAwoFrH2D3x EzF/5iSs+9fL2PcbmcDBloxjjM3TOpMHZjwBNVcbZj67FAVc4ajmByLpxBnUGeVl68fl86BbhmJ4 twB8svgdZBVUIOfSSSzZuhNDhtwOXy831GkrcOT4EdTW1uFsylka0NvB30vFweFBHEm8gJqaOpTm pWHesrVw7xqH0EA/TJxwH85uW4+tP52FVluOf9HYt943Gn06tb360HvkHXCrPI03ln2Eco0G+9at xLb9aZg4ehQFvp5t5gqS5ftobP+1Zh42ZMK62kIkJp7EqeRknDx5Eum5JYjoNRCxvrV4c9FbyCur xFkana9cswsjRo2nkW0kHh/fH8tfmoNNuxJRUlqEIwf24/SFIvToH4W0nzdiW8JJfLPyRcx+8xM0 2XMljKsiUnJt74fqjLPYnpAEbVUJEn44CjvfKAyPD8byN1/DhdwiZJ0/gX8uWoPeg8bDn3wjx3Nk X1uaJufEwVDxBcxZsIyzwHfQxd+0nGi6V1ddZXQyyS/k3rg1SLuUhqzcfDkPaQBSWVyMU6eS8dmH b+HpV5Zi9MOzEalum0kNdeX4dsduZBeUoo75pZ86hgw6Q7gFtUdY3HDEcOz49uIPKEQ5uDRUY9dn W5GWWc2BtS1ptIzOLkU4/MNmPDZ7MfpPnY4eXTohOtoVuza8h+SkZMx/ZDzWHUjhh7qWn2opCZm+ Wzc6NKYzHKrOYvWnm5D44zZMfngayii4G2qMjhntGLvOuakGO3fuIo1U4fSRXyj0SkyoSNkKVOUV ICMzExW6eji0D8G4sT2w+u15OJWei4LL5zHv5WWI5CQmKsiLhuRGujJnIMcvk5Z0/1PiYEawv5ra MEKXY2a18rBw9umIUUOi8MHiefgtIx95l87gtfn/Rkz8GHTmBEdK7b3UOLd/J1JIn/kZF3H44Dn0 GTsWzhXJeGP5Kpkn9ny6At8duoxxI4ahY7f+GNPVAy/MnIWDJ1IYFzIPe7/fh8zidrhn8nDsXL8E e+lEVV6YjYVzX4NLSH/ER5lWTaWRAlfZ8tPTiBUdbGqvXEGSK2X689OObwH/fjh4NBkJBw7geOJP iA+3xXc7rc5K5EjoCvORTgeLImml0ZRknkg/g+0Hk6GtLGa8tCPQCRUm3XUX9q3/EAmns+HEmIKZ p4/h6y+OGt8ifpL8a80TUv8a+8icO885IDfYOHF/2A44/+Na/HAkCV8sno25S78gbxrkVWrpaVcv P1RcSsYPx85BU1HEehyFrt7a1zRKQ256OldW88CxspzcQrrj0QeH4r15TyPNIQJPThkqX4/sOwrR ngJLyRNa8oSNvho7N2xByiWrE4kxh9Z/GbOzoRxJSccs8ig1Mx/+0b3QL8oVS95cgAw6jl06uR+L Vm7CoOHj0TkiHI0NVdj4+RdIOrqLjlGPIptOPC3jcwrUlZbjEicDReVGJ4r4oXci1rkSTz46G6fO ZzKOXAa+5ypupfBAl04O2LT6fZxKSsILU8bhKw7kbZpqLY5pUq1FLWM+XrqIzKxc8okVp9Ytan5O mwAOqKSVflNq547xk4Zh98Zl2EUarSjKwcLn58HWl04pMWGMY6unfM1FMWl39eIXsGzrKTw6expi e/dDV/8GLFy4ELmllTh36DusWP09Ro6+F2625swpOzlIvHghHdm5xSzTBmMmj0PqwY34aPshaCpL 8e78BUjXeeHOgb2hpvNE4uHv8DPb/PHCmXh51S7YclBkThNnzUYnm1Js/u5XzHhyKtfrr5Go1RnS fwC2bF6DwprW+EgMVovUlGTK4VPs75M4fS4VEow6OvtkZqSjjP1VratCKvssV3YW1GPvnj04ezGb 39oalGSfw9nLBXAND5ArIn//rrLS261nf0wYfzcnBCOodXLFiAn34O7xEzCgRwds/mwL4u+eixPH jyOBWrv9O9fAteQM9h5NkQenEi0mJ1tp8UJGXotGG3nN0pst7lEPic8+5ze/+xB0Cbi+xYVWGfz3 nV6vCvzM7lUijE4XZ022SbWlF8WQ6GAxaPqLQldyWfSKChRrdh+/anZ7160UncKDRQhjMXXq3IHx yqZeM1bSxQNbRAxtq3z8AoWfr1r0u+sJkcsAS/T8E8/cP5iGumoRGxsnVDTYnfzEqwwV0iTWLXqK RuE+Ijo6jvGfAkVk18G0SUiT69RQmSseH3Wr/F4gY6b5dOwuvvrRbM9x1WrLF7evXy46BXmJ0LAw oVapxWOvf0iLDCF+PfiliOzei84FjHXDVFd8XvSJ6Sl2HMmQz9v689ueT5mPO+MY+gl/xjTy4+9T SzbKjyf+tFX06BQggkLDhC/j341+bC5DVRiNRyoLLouHxg+lUb6acZBChJeXv/jw2yShyb8gRveI oL2jlwgP7yPWrFslbo2JE98dN9ajqaZcvHD/MOGp9uX9UHFr/3tFCe38slNOiCG3Rgq/oBAR6Oct +txxvzidb7R13Pzxa6LnHfcIoxWauSV68cGzk0VMn8mi8ip25b/s2yBCGXOL3t+si0oEBYeInmOn Ch2NslbRmUO6JrVXihE49akFIu8axukGTbYYEhspAgKDRFyPLiLAWyVunzDLYtz7W8IGOg1IMQdD RFhosIjpPkwkp1eJb1fSwYIOAaHh4ULNmI93TH9epFcYK3xq12d0ynAXajUdGxhTcM2/54uucWNk +5yT7JfOPfuJvJb2yvRr0Ih/Th8n3FzchbdXBzH3jRViyl2Dxew3vzAB0yS2rXyVxssqmUZCQqLF 90cvWe69PqMv+8qP2ISLD+lEIaXSnBRx98BYOpwEieAAP9G93yjxc7pk2F8txgyJE4s27JCfk/68 9+I0MfahhZbzqx2UpPwsekXGisPpV4bIMGizRM/uncTnB09f8WpB2mkxpl+08A0IFkH+vqLHoLvE 8cxSy3PZpxNE/65Bwi8wRISQZ555dbV8b/vad0SkiSe8GRrq8TdXiRqT8V3ar0fEiP7kS7Y5hE5E ar8Y8eOZIsJYIP42aSidpvxFaHCg6BjVXWxLtobOqS+7IEbEqsgXgSI0so/44XSBpR5XHjSI2ZMG igmz3mpx652/TxBRtz4oKk32Vh88P1aoaAccQrp8dNEmy7OG6jLx/H1DLTzRa8B9crw6Q3WemDNl hPChDAkLDxPBpK1nFxptP7/84BXRe/Qk0Zo88lMSRERUZ5GUY8KedsKjGZ/0o69Pi7KMX0nDIayD WnSMHCDWrv9I3BLdQxz41di2Rm2xmD1hoFARk/Awxi+9/WFRZnJ00+Ymin609/MnjcQMHkcaNjWK rchO/k74eXuJaa2M4c/sXye6kydo7iHzRNe4EeKXlDJLu692kHVylwjycRc+voz1ZpJHD75otDU+ n7hPxDPkVkAw+ZrlDbrvCYbbkqRfo1jx1CQ6jrkIH59Q8cxLr4sRcR3Fs4u2W4rY+s4MOtF4i+CQ UPHsu0bbbenmLz99LfrEdhLe5M1g0lRQx4FyCK/jX30gQtVuwlvtIwaPfkR8tOwl0b3PREtIleKU vaIbnZn8A4JESM+x4lxB656wFN3i4PjuT4Vf557inGRYZ0p1VQVi5gMjSYvky5BAEdGpm/jimGSX 2Cimjoqj3aaX6MD+92K8uTnLP5flvfRqUsI34tbOrHOIUT6PmjFH5EpekKZ0+PNXhJrfI0n29b2f Dk7SdX21eGvuo8RPLcLokBcYFCbe3pogv5GbfEDER3kLlZrfsl4jxfKF/xABAbdRxlnzfHvaSKEO 7R0gfBYAAAe6SURBVM9yjN8ZU1Ft/hSfTRBB1IBOe+2TFvawBjpvjezbUai9vS39fMvwyULDbDe+ /ypxCBE+7GOVl7HPxtNZS3JIenbSSH6DA0TsLV1ERCjr2fcOcfi8RL81Ykrf7uKNDT+2WZeKSyfE sFvixFmTDWB96SXRO7qDWLn1mPUdfaW4u3ekuH/2J6Lo4iERRuew5rQ4aU4zu8cmjRhN+ThrieRf cGXa+9V7guubYsXXVx+HXPmGcuW69wKW7MK01bVw9/SkCkCaTQB11Vo5Ejg/7tBx9cOJagPHNlQO 0m4QFy9dht7WCWFhHRgixLPl8v5Vxt7a8nykXsqGDXePiI3tarWz4Cwt9fw5FHNm2Z5hR2KiImT1 YkM91ZrZWSgtZdRwvhMVFQP3ZmHo6YaGC+dTUVHdiPBO0QhUX6kuu0o1aD9WgKIyDSPReyI0yGgv qKcaT1dTCw8PT6MKR7IZqqqGi5sb7FvoBFrmKOFYpa3mwoF1FuNEdZwrbSWlVKspQ25hKTdScUZE WGjLl7mikZuVBR1XR6R+8GWoHXsumzfUVCKL6lwv7oqi9nREVWWlqS/MU9NG5GTmyKuuvgzF4ukm 6+5oN6ZFRnYhBFWCoWHhlp0AGuprUdugh4e7u7WPuAp1/kwyXP0jEObXTH1jqmGj1K4qLVUIXOPk f2mmZku1UntPD6541KCaq7LSbFxSJ3u4t1w9bNVI06mgur0UOQX5qOAuIu5evuga04krdtZUz5Xg rPwi2nw4IyAwgGp9B2xcNAtLdlRi17fLiQ1XholR81RZkodSTSNC2F5HWz0q2WcexFLazUZXU89j D4uq2vpeIzLTs9GOqqHQIG/Uku4NVBe6uVjn5KWFuSjT1MCzvTd8qSIyL63Xcged2rpGeYXc3VNl 5Q/uYHE5Kx96YhUcEg4XrlxKq5BarjTbU2XqZFoJqKvRcZZuB3c3a1nWehmPBFectFod7Zho79la n8h+q2KezuRNB7vm6JnebagmDeSzPQydERrOUE3mmhvv13M3nhyGrbCjKjog0J8qQKOCqKqEPFFO nnAnJrzePAk9VcsMh1NPEwuVlxe8uTov7Q4jzdCzM7JpZ2iAb0AIVM3bRP7RUoY0UO0s2MseKk/S Y8u6WMsQ0FVVsd/dqOqxKqz0bIuOIUWk/pSKq+cuF9W1DTL2Dmy/h4nHjPk04wmGmPJ0dTZlL8hj GWB8MajU3uDAR77eUEee4Aqrp7ubtRo8klb7NMTendjLbSTeWo2Ots+usmakjtqGnMJyePuHob27 vcybzjRDsPQFbWGzyJuNTdzVIMAfHi7GegiqWLVaDRj3UrY1VJnaZC68kjzuSHnk3MrUQtKOZJMn OAmCv4knzO9c7bfJ0Ej60MoYme87ONFMwYRHI9XAWXnFsLF3RHh4GGW/ZBZRLofuMNBmzdbFA3aa S+jG1d/nNx7HM2O7ydk00CZVV10n5yvRnlm+STcb67TIyeXONcIOXt5qeNFuVerpssIcmhYYjLLI phGVtNWT+ZFlCtZTo9XKakeGKICK9NGq6XK5rf/o5e9WHeW0h4kGzU/okUNarCUt+gQEo70bcWcY pvsG94N64NOY/8yd9Hlwozxt2d912jLKJKN87kD5LFG1OelppqPRSW2m7KP8VlHOme8X5mZRvVtP mvKFnxR+jHRSUljEMhxk+eBL29TVrzyE1xMMSD+2CRIV1BenYnCfwYh/+n2seO4eczHX/N25aiEm znwNIx7+H8yf8zhu6RJBvrUhfqQn0rD07ZFktLRrkySf66iW1vHbLql/eVmuv0QDHvxO1POdHIZO ooMS6+qOLjExptArEg8yjBGfk8yUrpYkGtbxW+ciYc+MpT6s0lTDTZJTJhMl6T1Je9TQJMlTB1lW SdpEc2pOi2b5KNG2i8kkR4pRU5CVhs1rl+OFhasw6h9L8c3S566qxjbnqfxaEbjuAaD1FeVIQeCv i8DaBY9gya4mpJxYZxG+f93aKjVTELj5EEjdvQH3zHoLPYfdTpMRG+zc9wPquN3hz3u+RoCbcSJ7 87WKNeYAcFyvOIRNpPPhK9c/4Pp9bW3AC3fejkO13hjYNRyFBZn4fEcC3v7sG9zpU47VWxKQeOR7 5Hj2wdFdm+DflmNTG4Uf3/MlFi5agaTLOry7aSfuHRDexpM392W9JhNDGeu1UOeKp+c+j7/NmCQP nm/uVv15tVcGgH8e1kpJfwICKbQFS84UeHDScGUA+CfgrRTx34eAnhqHHd9+g6MnT6GmrglBUT0w bcoDCFZfz8r+XxkvPb7fsgkeHeIxqFfkH17RDAal3/T1DuQWlHA11wuDRk/A+GF9cO7HLXhv816o 6bT42MwnEe79O3HlClxRcSncVN50jLOulP/hDfszC2hqZBvL/n+38Q/EUxkA/oHgKlkrCCgIKAgo CCgIKAgoCPwVEWjLyOavWFelTgoCCgIKAgoCCgIKAgoCCgI3AAFlAHgDQFSyUBBQEFAQUBBQEFAQ UBC4mRBQBoA3U28pdVUQUBBQEFAQUBBQEFAQuAEIKAPAGwCikoWCgIKAgoCCgIKAgoCCwM2EgDIA vJl6S6mrgoCCgIKAgoCCgIKAgsANQEAZAN4AEJUsFAQUBBQEFAQUBBQEFARuJgT+F6xuF+Qn95hK AAAAAElFTkSuQmCC --Apple-Mail=_98CB247A-53F1-4A7A-9947-CE43D3081FAB Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-35.png Content-Type: image/png; name="PastedGraphic-35.png" Content-Id: <5DB78D6A-4A38-4BA5-90F6-F69CD0478CAF@dinof.net> iVBORw0KGgoAAAANSUhEUgAAAeAAAAHvCAYAAACMggxAAAAKQWlDQ1BJQ0MgUHJvZmlsZQAASA2d lndUU9kWh8+9N73QEiIgJfQaegkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji 1wnyEFDGwVFEReXdjGsJ7601896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE 9wIYEAEOWAHA4WZmBEf4RALU/L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX 5QKUU7PFGTL/BMr0lSkyhjEyFqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjASh XJgl4GejfAdlvVRJmgDl9yjT0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHim Z+SKBIlJYqYR15hp5ejIZvrxs1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW 5mj5v9nfHn5T/T3IevtV8Sbsz55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC0 3pzzHoZsXpLE4gwnC4vs7GxzAZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TM zAwOl89k/fcQ/+PAOWnNycMsnJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRo dV8AfYU5ULhJB8hvPQBDIwMkbj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9k ciWiLBmj34RswQISkAd0oAo0gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2 g2pwANSBetAEToI2cAZcBFfADXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQ OBQDxUOJkBCSQPnQJqgYKoOqoUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhH wsvgRHgVnAcXwNvhSrgWPg63whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQ DqQbuY1IkXHkAwaHoWGYGBbGGeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJ NhGbjS3EVmCPYFuwl7ED2GHsOxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/B c/BifCG+Cn8cfx7fjx/GvyeQCVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7Y QbxJHCZOkxRJhiQXUiQpmbSBVElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxF QtlOOUq5QHlAeUOlUg2obtRYqpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6f J18hf0r+pvy4AlHBQMFTgaOwVqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIl pSEaQtOledK4tE20Otpl2jAdRzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyT jLuMj/M05rnP48/bNq9pXv+8KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uu q43Pp893ns+dXzT/5PyH6rC6iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoL tQRa5VrntV4wlZnuzFRmJbOLOaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0sv WC9fr1HvoT5Rn62fpL9Hv1t/ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+ 41smsImdSZJJjclNU9jU3lRgus+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIud Ft0WXyztLFMt6ywfWSlZBVhttOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtO u8/2DvYi+yb7MQc9h3iHvQ732HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX 1C0YctFx4bgccpEuZC6MX3hwodRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrP C16Il69XkVevt5L3Yu9q76c+Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARG BFYHPgsyCRIFdQTDwQHBu4IfL9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJF REPEu0iPyNLIR4uNFksWd0bJR8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH 4+ziCuPuLjNclrPs2nK15anLz66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN 8V34ZfyRBJeEsoTRRJfEXYljSa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqw K10zPSe9L8M0ozBDuspp1e5VE6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTk muRuyx3J88n7fjVmNXd1Z752/ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99u it7UUaBRsL5gaLPv5sZCuUJR4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/nd zPaE7b2l9qX7d+B2CHfc3em681iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqv akfVp+qk6oEaj5rmvep7t+2d2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/ Z39ff0TtSPGRz0eFR6XHwo911TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4 H++eDDzZeYp9qukn/Z/2ttBailqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HO FZybOZ93fvJCxoXxi4kXhzpXdD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9 jdYeu56WX+x+aem172296XCz/ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3R B6kPXj/Mejj9aP1j7OOiJwpPKp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0 RupHrUfPjPmM3Xqx9MXwy4yX0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk 03dp76anit6rvj/2gf2h+2P0x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/syOll+AABAAElEQVR4 AezdBZytVdU/8AfB7lYMrq0YKIqtXEGwu0XxqoiiiIUdXOzCblSu2IUBdnDFLuwu7O6Ov89/fdf7 rvM+czjnzMydmXtnLnt9PjPnzBN7r/3bK3fNDn1Q16gh0BBoCDQEGgINga2KwKm2am2tsoZAQ6Ah 0BBoCDQEEoHmgJsgNAQaAg2BhkBDYBsg0BzwNgC9VdkQaAg0BBoCDYHmgJsMNAQaAg2BhkBDYBsg cDIH/N///rfzs63p+OOP757znOd0f/nLX0asfOUrX+ke/vCHj/7e0i//7//9v26l154tFsd3vetd 3Stf+cruP//5z5Y2a9738HTUUUd1T3va07pvfvOb8z4/fOBf//pX94IXvKB7z3veM7y84t8Xi+OK M9QqaAg0BBoCy4TAyRzw+9///u6Wt7xld61rXav79re/vUzVLL6YdevWdW9/+9u7n/zkJ6OXz3ve 83aXv/zlR39vyZd///vf3WGHHdZd5zrX6R7wgAdsSRELeud5z3tet88++3R3vOMdu3/+85/zvnP2 s5+9e93rXtf9+c9/nvfZpTxw0YteNPv1Ax/4wKKKOc1pTtP5ec1rXrOo95b68Jve9Kbu3e9+91KL ae83BBoCDYFVh8BO4xztvffe3cc//vHu61//ehrbxz/+8ZktPv/5z+8ucIELdL/73e+6X/3qV92t b33r7jKXuUx37LHHdj/+8Y+785///N2XvvSl7hrXuEZ3gxvcIIv9zW9+0x155JHdz3/+827XXXft 7n73u3enPe1pu5e97GXdqU51qu5nP/tZZriy2nOe85z5jro/9KEPdZe+9KW7C1/4wiP2vvCFL3SM 8VWvetXRtX/84x8dvjjVgw8+uNu0aVOnzgc96EEdhzaJTn3qU3cHHnhgOqHvfOc7yfNuu+026dEl XbvHPe7Rff7zn+/+8Ic/dIKam93sZlneX//61+6lL31p97Wvfa27xCUu0V384hfvbnvb23ZXvvKV u5133jmxfu5zn9v9+te/7g499NDE9p3vfGd3wQteMPsF7je84Q2zLM+8/OUv737xi1+M8DVK8IY3 vKG79rWv3d3iFrfoTjrppMQb/ne5y126Pffcs/ve977X4WNIP/zhDzM7/v3vf9/tscce3Z3udKdu xx137P7+979nYPDLX/4y+/8sZznL6LWPfvSj3Yc//OGs+wc/+EH2jcyajOBt9913T57vda97ZfuU re9/+tOfZv/C6HSnO133ile8Ikdd1AGvhz3sYd15znOeUaBwhjOcIZ3/uc997u5KV7pS1g/bt7zl LfneTjvt1N3//vfvzne+8414a18aAg2BhsBqR+BkGTCDy6C/5CUv6b7xjW90v/3tb7MNsh8Zo6FI xvHe9753GkiZ6pOe9KQ0tJzms571rO61r31tOkWGlyO8733v23F2GzduzLIY3ac+9and1a9+9XQE z372s/O6rOzwww9Pg/7d7363+8hHPtJxmIgDuuxlL9sdffTR+bdfDO9FLnKRzJQZfs4AP6c//elH z0z68tnPfjazU06bEV8Jwk9h87a3vS2rMJz6kIc8pOOsNmzYkI7wGc94Rt4zLC4oMfSu3QIN7eCU OVTvcOJPeMIT0rn97W9/6+B7pjOdqbvb3e7Wfetb3+oe9ahHJd4f+9jH0rl/8YtfzPucqyClaPjd NX2sLE76oIMOShwNNxumf+hDH9p99atfzXtvfOMb07l6B4/6UJ/A80UvelHWST4+85nPJN9HHHFE vifgMApwn/vcp+NM73e/+3U/+tGPusc85jGKSh6f/OQnp+M3BF+YeMYP/gVmZAgJvB75yEfmKIag wjOce6OGQEOgIbCWEDhZBsx4y844UUb/ve99b7fffvulM7nd7W6XxlMDZcGGiDnXq13tammMOURD nE9/+tNzqFhGLMNTjsxGdop22WWX7sY3vnG37777pjM3XIte//rXd4ccckh305veNP/+3Oc+lw7f H7IfWd1wOFJ9skf3bnKTm6Th5tjmo7e+9a2dTI7hPu644zLjOvOZzzzfa4u6f8wxx6SDfd/73td9 4hOfSCci8DCsD1MBjWF+Iw2I8zWSwEHLaq9//evndSMGl7rUpdIxGoJ/85vfnM7m+9//fjpImR8y GgFPw+ucN4fEeXJU5zrXuRKffHDCLzjLik888cTM2jk4wZeMFL/mfWXDRkCqr/SDkQRZ9q1udat8 33397339AV8yQ56Uz1Ff6EIXyrluWbIREEQeZPVGTgRa5qgRDPChrwQZRbAzhWB0xT1tF6g0agg0 BBoCawmBkzlgDkNmyBAa0jPEzAHLhhh92ZOslEE13Cyr44xlKRe72MXSYMrcZGYcBod4trOdLTPd 4Vwo54kY9vouO1IH4rA5AMa2iJPyMyQZ1wknnJCBgCzpete7Xhr04TPD7/hWxp3vfOf8NFTKmdzh DnfIxzghgYVM0LD6ltCf/vSnxENwom2yVY6Ts4QXxyQwcb2yUTzB69GPfnQOUXNKhqiRezvssEN+ hwfMYPrHP/4xcT3jGc+YQY7nOHmByjOf+czuute9bmbPnJNRiyI84aMI7hwjh8rh418d6sSjERHO VZZdi8Rk9x/84AdzFIMDN82AvENWtEs9MnuERzzsv//+Od2gXKMtRSUDQ3lwTzmcNbIgT3naeMUr XjHn1/W/TBq+BxxwQD7XfjUEGgINgbWAwBwHzBFxuAw/B2XBDedmCNVQMiPLORuy5GDNE8p2UM0V c8aGJmVCsiNDpr4bPrzKVa6SmbF6zB8qTzb4yU9+Mh06B2Uo1PweZ8Lwy1BdN8xtWNdcMOe41157 ZaZsHtE8pyFRw+KysZozHe8AzkM5hrc5A07OHLIhT86Kw928eXM+YwHVljpgQ+pf/vKXsw0yNfjB 8uY3v3m2xRCs4Xp83OhGN8p5TcPM2iuAkPXBzhAux6jNhueNNMBKgCBTNiTNoSnLMw9+8IMzOJJZ c0qG800b1Jy8YENbOUwOWPYNW1MBytaHggBBinf0hQxWcCILFxAJtPAnI924cWOWf45znCOHljlD /aWvZeGGrsmDvzlOw8VPfOITM/hwzdz7Fa5whQyAjLyYGxYAfupTn8o6ZLb62RoBfa9+IyQCDO0z x4wvDn8l5vHH5af93RBoCDQElhOBHcJ4jc6C5lgNXcqyLIBiEDlYw3wyQ0OInIeMhFOV7TCKj3jE I3JokgORbcl2imRNDL8MynwtMtQqG5ZlK0s2xNl5T/3e8azyZUDKrOxbpsTQM/qGnl3Hr/IZe4uL OC1Z0jhpas2HcjQydX+rx/ve0V5twptsbEvIym3lyFItLjMEz+EZURC4uC9oUMe6yCSR4VjPuCaz 1Rbv4wk/+gA+ghYZaw25cuLuG30YLkKCoUBKto0HQ+xww4v2IgGJIKT6i8NUt2v4KOL8ZJ8cPb4E L9qBOFYOm6MX+JAZ1/BiysGzPvWXejhe/OKfDKHCS536Xx8WVu6TK8+47zqctAtPntf2wsPzjRoC DYGGwFpAYI4DnsWwzNfiGvOM5hXLaJsrltVYXcsIy1oanTIQsFr9xS9+cQZJd73rXXM+/pTR8tbK hkBDoCGwdAQW5IBljpW1qlJ2WnN2MiJzhrIpGUplRktnrZWw2hGQqcrIZbd+GjUEGgINgYbAwhFY kANeeHHtyYZAQ6Ah0BBoCDQEFoLA3CXFC3mjPdMQaAg0BBoCDYGGwJIRaA54yRC2AhoCDYGGQEOg IbB4BJoDXjxm7Y2GQEOgIdAQaAgsGYHmgJcMYSugIdAQaAg0BBoCi0egOeDFY9beaAg0BBoCDYGG wJIRaA54yRC2AhoCDYGGQEOgIbB4BJoDXjxm7Y2GQEOgIdAQaAgsGYHmgJcMYSugIdAQaAg0BBoC i0egOeDFY9beaAg0BBoCDYGGwJIRaA54yRC2AhoCDYGGQEOgIbB4BJoDXjxm7Y2GQEOgIdAQaAgs GYHmgJcMYSugIdAQaAg0BBoCi0dgTTlg/zfY/7NdDPkvTv5n7ELJ/x/2P3b9z9mFkP8I5P/SLvT5 aWX6/8jqXg76+9//nv/7dznKamU0BKYhQPb9F7StSWzAcujbfDz/+c9/zv8VPt9zy32f7vp/2quV 2Lnlwt9/2SNDW5NWG74r6oC//vWvdx/4wAfy/wgvB8j+YfzDH/7wRRX1tKc9rXvve9875x3/4N0/ kZ9E7h1yyCELEgzG56lPfWp3u9vdrnvXu941qbiTXSPAX/ziF09muF74whd2D33oQ0/2/GIvKF+b /W9mAt7o/xD41re+1f32t7/9vwtb8A2mn/vc51KuydU3vvGNLShlaa9wQm9961u717zmNd1Pf/rT pRW2BW9zTmT1wAMPTPnfWg4D9kcccUR3hzvcoXvLW96yBZzPfeXb3/529+tf/3ruxf/96+Mf/3i3 cePGifeW4yIn9pWvfGVOUYJwenv00UfPub6a/vjJT37S3eUud+ne+MY3Lokt+O6///4pQ8cff/yS ypr0Msc+ju+//vWv7iEPeUj3spe9bNIr2+TajiFkG1eq5hNPPLF74hOf2L3oRS/q9tprr+785z9/ VvWHP/yh23HHHTMzFZGc4QxnmJeFf/zjH/mMcup/z1JIZZ3mNKdJReJ8Tnva047Kkvle5jKX6a58 5St3pzvd6UbX3//+93ebN2/urnvd646u+SIDxc/1rne95HWHHXYY3deh/veta1XWqU51qu5a17pW 95vf/KZjlK52tauNnp/2BY8PfOADu5ve9KbJdz13trOdrXv3u9/d7bPPPt0f//jHOf9X2Tu//OUv s61nOctZ8hVGz3PaLmiA56lPferkz/9lfs973tPd/OY3z2gV73getqfq9anN/qezevyfZ5gyBrD0 jvs/+9nP8p76kGfcU+/vfve7vKb++YgS4EfZ+qfqEMxQbjyc/vSnn1MMJwPfanvdxBM+EL6mta+e f8YzntGd8Yxn7C560YvWpdGn/2uNn/E6Rg8Mvjz3uc9NI6m+17/+9YnNNa95zXxCO/QHA3vmM585 r3GY8CWvZEY95Lna7ru2u+faLFLuve99706ZnueQdt999+7c5z53lkuGlSHQ0IeFpefJLx5Kfl3T H2RJ+xfSdv3z5je/ufvCF76QznePPfaY8552aA+ckbLxQq784KFkdVI7S6fxqJzCybPwvsY1rpFt pw90b0j00I//SQ4bZdERcuk6bKrt3nv2s5+dPF3iEpcYFpPle279+vUdvUTaXbZG3XgpXaiX6QG8 q6/rf6bX/eGnkbxnPvOZ3S1ucYvRZc/j16jdpS996ZPx60H39FvJ1ujlKV8EGNoOC+XDHukXZZHX cftLr/AxLg/qhYt39WPhDxcyDyO4z2q3usnloYcemm2/xz3ukfpYck++le3vsifqxQ8+2SLy5Pss fdc2ydEtb3lLVSZpu/IF4rvttlvKfulHPbNYfOu9Lf3caUtfXMh7++67bzoCEevrXve67kpXulJ2 kgzts5/9bLfLLrt03/zmN7snPOEJ6aBnlcmZU5idd965YwCRznjwgx+cHUJRfvjDH6azv+xlL5sC d+SRR6ZTU/51rnOdfIfjFRBQEob9Ihe5SJahcyiFZwnIG97whlEHE4hHP/rRKVzeefzjH98xPIig MDaEcj5Sp4BEBnXwwQensvrcddddU6BkUzILnwcddFB35zvfOYt8wQtekO9wXJe//OW7xz3ucen0 7nWve40cDyV45Stf2V3gAhfIawSU8t3mNrdJXgljGcVxPj/60Y92D3rQg7r73//+3X777ZdRKeEX iYtUn/e853VnPetZUwkozE1ucpPEAOZGJB71qEcl3vNFlp/4xCe6Zz3rWckHRaCsL3/5y7MfYIpn jvZGN7pRpx79+9jHPjYNH3zPe97zdhsjXoQ5Z/r9738/lR2PskH9Po1e8YpX5EjI1772tcyern/9 6yc2jPJTnvKUxJxxYTye/OQnp0ObVBalJ0uexbM+ufWtb93d8IY3zPr1LzlkJMi//hXwkZ9HPOIR 3Z577tkdcMAB6STgq6850bOf/ez5zt3udrfEd1LdrnF+cMIj8h5M4UhOPv3pT2cACWs4HXXUUYmp uhH5fcxjHpPG8yMf+UjiyRjB8trXvnbKln6ZRh/84AdTf/SH9pMFRo5TIgeMMKdJph/5yEdm3wk4 yd75zne+lGOGGx6TSEBAp8vxMrx77713d7/73W/k9JRFfob09re/PbHRP/rm+c9/fvaleuj1ec5z npxaes5zntNd5SpX6V71qlflqNXnP//57p3vfGcG43e6052ySPJkRIqusQeI7gp8tJvjFbCQqXXr 1mW/qYfswpxN0ydXv/rV893xX9/5zne6ww8/vGPT6DlnCit96Tt+jNB5ju4JsARt6lA/vbjUpS6V ujfL2bFhRmnOda5zdR/+8IezvwT+J510UnfYYYelHMF3fQQaRjPYPX3K3sGRfvsb3uz3Mccck05Z 2yUKSPYKB30LNxgaQZxGpW/aTs4+9rGPZbu02ygiG1a2hu5IhthsOkKfjFrQr6c//emJy6R6yLL2 8THwFZCR/3Oe85yJL30UMCiLT7nqVa+atg2+5A8OF7vYxbJPKgiYVM+yXIvIaMUoDHt/n/vcpw+l 7wO8Pjou64pO629wgxv00dA+DEofBmlBPETk0t/+9ref82x0fn/3u9+9D8Hso1P6MNBz7j/sYQ/L OupiRKl9dGYfzqYP49eHMNat/AyB7G984xv30RGj62EM+lDw/rWvfW0fwy99OJ3RPV/Cofdh/OZc m/RHRJt9DIskFp/85Cez/jAk+WgITR8GsA9F790Lo9aHMct7MWTdh4Ppwyj0YTz6cKx5PZS4D6HJ 50Lo+zC2eT2ykD4UrQ9n2ocSzmlLPjD2Sz3hzPswSnnnnve8Zx8GvA/n0ocC9J/61KfyOrwi0+th eMIJJ/RhFPP6j370oz6CrOyDsaJHf4bRSJ6UBWP1RQaQ98OB9W9605vyexjyPkYm+lCOPpxKH4re h0FLrMJ59eG0sp4wGn0Mw+Y910q2RhWOfSGD5CSCsj6mRkbPqzeClF4fozA4fQQjY2/P/VO9odCj i+EwEmcXwghlX0XAk+1QLtlURzivfCeCi+zjMEaJbziLXv+HgevD6PcRTI3KHv8SQ5Qpb3W95Ils KQ9GYVRSjiIISNkgy2HUU35hoAzkemSUfQQlfWRJfTi6/KyyJ31qD3mnV+QwspN8LJxs/6QnPSm/ 6+tb3epW2R4XlB/BUR9OIGUqnEk+N+2X/iR34Qh6ssx2sBlF5DQCsPozP8PJZvu8Gw6rjyA3r8dQ ddoM2Lz4xS/uYwgyr0eWlzKoLeQhDPKc8iKQSXkZXiSv2klf9D99RBHQ9JFU9HRZfWR2FtEr/QEj OhWONvvOO+xhBN69/mRTytbQ9Zjq6mN9StqQGNXrw7nOqiZtFZzoUgwZ56cXNmzY0LMXZI4+Rrbd h8NPGWaD4MHWstH0xT39AWN9hw/yjSLoSlvq+Xe84x0jW5E3p/wi38rQp2SUfujrCGxTVrwGf3+z hyiSjp6d0G/sBxmbRmQynHkfowuJr/aXPWfHlUMeXvKSl/R0F5Fd1/VFTHWmnT322GOnVbFs16eH usvg3qMBGWnIVkSQNRcrSpatiCRFcgsl0ch4xCdSk1mLpkTdAfSc4jw/jGJEmRe60IUyYjPMs0tk 4UPyfP3U9Ze+9KXdcccdl5G1DNOwzZDUPStrqGdl2Ya7RHiXu9zlcpipslKYiKZFgrJyUby2VTQn 6hXJuh/Ck0Xi0/C657Q9jOPougxMdBuSMqf9xcvw0/vmnsyrGQbHp6E+WY3vIkQEL8NSImTtVT8q vGZhIGOBm2F6Zci21Is/0b1IF8lUDBHLACyG03eyFT94uuQlL5nvHRYR7vve977MkMOJ5jBwFjDl l5ET+MHWtIQhW2SdgkxF5oJE2eqeReP9bYjPsP+XvvSlzMz1pWxdH8pYPB+OL+dtv/zlL+c1ddIJ /RSGrSNjRkbueMc7zuwvUbx3ivQx3vUTIs8RQKWcmKqBsaxC9oIffOIJ4RPeF7/4xTM7gEnJVj4w 4Ze6KlODZw3haUNlRerRPtk9Uk8EBtnHsvca1p1Q/Oh5/SCrom9Gm+BWNI6/zFP2TV7JFr5KF8gX +0BG6Ui13XSY9q4LnSMP+mtIJdPDa+od6ptMCRl2l9XTZaMj87UPBjIsONIp+Jcu4fcKV7hC9icb WbZGtuaekY5IBFJO9eUsklUb8ZDZ0R9lIBkkfSRz4TRzJAhu+ou+vfrVr86RE7gZBYA9Ow0rbTNC Ra5QZZhGVYw4Wt8yH7F/MCB7ZBSubArbpo8Qm0OmjeIhcmdUTL/hlYxNIzIJ08KXzS0fAEN1wBu+ ZBMVNrJ5o2lk+cIXvvC0Kpbt+oo5YMMnhgDMc/gxbBoZWjoFBsQQAGU3nOGnFGZSy4AUWVYOyTB2 yq6O8a45C4qlTH8TWkODDLhrBI5RLYUhAIyl+wTQQjGkHMNH+COM/kaGSRh/QqF+ZXKI6mF4KCBB V57rs4iw4cNwDR50uHfMHzEgvqtDOxgWDtgcCKEnWATVc9rrGX8P215YCTIoKuekDsZ+FhFGQYFh n/ve9775KGGnFBQLFoa01MWJUUSLHMynGP7TJ/idRhwHQ2fYPDKRzlAgLCgyI2TIEIYRFSeOht3g TdkMP+ILjzCA36ZNm1L5DXvrz8985jPTqh5dNxRluB2vZZAYekEHI0PGDD2ujyG5WVQyQGm1hexy EobVGGHrFCi6vvEsotD6wFCYYX6kbdrE4JoTu+1tb5uOAC7TyDMwUpf5KkOUFgHqF/JHLyxW1BY8 IG027ApPcoYvMoUfz7um78iT77PIVAeZ11faLwBAHI+pHTwxwjAVVKmHDCt7qLez6mAsza3TO0On H/rQhzJgK31TB3nUXuUL4Hy35kGgRT/90AXt86x3XcNH2QGyrQ58MbqCMe+cFEO0ePauezCB5SR9 g7t5XEPKkVHl8Pl8GGo7B8RuqNNUQC1qIi/FLz1Xp6SCg+dQDOfHqGIG8uNz0OOY4ofccdoCItMH iBwIbCxI2rBhwygJ8QyZVD59q0DAFIWhev1A5zlufMKKTefs2AjBo36fRXAkm9pGfuCsb5QBSzZG ++m1/hFkeNY1z7Ljs3xF1c1OeIcuxGhdypN7+pQcqHMcXzYNvoIKTruC8ipzJT5XbBGWjJGiA1FH mtegKBwD4AmWDjdXBRDRFiM9iQggQxNDs5k1M7Y6kvGSZXO2HCQBYyBE2zrLOzpLXYKBK17xiuk4 dCojIuPTSYSbsyGoBIhyEDhChkeRH0FTrwxOeSJCCiC7xz9jpg48TWuHtonqGAkORNtlLKJqvMML VoIARoCjUz+8OFLvEgxCxGnJACkB7HxnWBhC2Q4eKB/s9IU2jGf741iLipVhrguJEmGj7wQpjK45 IdmC8rWb4fAdb/p2WlTO0eqXMn4MgHcsXlIHLMwBUXBOCr5+yEwMK+Y8Kp60jyNlDAQxjJe+M4c1 Kyr2ruwZTn6QsuBI8ThkisrYMD54m0TkruaQyAhnaZ5aEABjPJFJ0b1MTEClTOX5gaHRBu/5IbdW NGs7+RadyzqmOWFZm35k8MyNWUgou+ZArY0Q1DI65Bu26jSiIKtRPkcMU9c4AAGUftP3AkIZiUBs GsEI9uTKfLO+V5ZyGVZz1DGsmTyZZxfIwhbRH0aWjM8i/MOZgeQgrU0wYkK3za2qh84rT5/SCXpO fzk/OspQ+9RX3oMFvEqn9Zd3tcXIHIMMS3ipQxDhO51mzGGuj7SbAyNDeCBD7Iq+x69AjNOOqbJZ TUx5obuw0V42AI5kp/gVfNB1NgBvbJrAhC6yUfTG5zTCuzaTSXJobp2sw4UssBOCOfqjTQJk7TNi wh6RJfVqG70WYLFNsGQDBZrsFH6U5zunrrxpBGflVHJB3/GDL+1k5/QJDGJYOIMObSan6tTn89lY detfNofdVoeA3qgDfNnqkgdlql87JWrmuskMW0LmaoRyWnuWen2HEPS2V2WpKK7x9ymDrCLm9dL5 WFA0TozFNKcw/uysvxlGCkC57nrXu85ZBUoUa2hrVhnDeww6Q7nWaUvw3RK8VjtO2mTBjWDUqMAs Y76a2sL5cpaCVUG9BXGrhabpyHLKz5bI7zR8lrOsaXWsluvTx7pWC4eNjxVHwPCd7MloxbThs+Vw vhRLhsQ4WZ19s5vdbE7bFut8vbw9OF/t2BJ8twQvda1mknWZApKpGuqUua0FMiVgdweqldOrhe9p OrKc8rMl8jsNn+Usa1odq+V6y4BXS080PhoCDYGGQEPgFIVAy4BPUd3dGtsQaAg0BBoCqwWBFXfA Fnc4lcnk+0LJYhA/CyVlq0NdCyGLBSx8MNG/GLI4wFzPJLIgyWIp8y1bm8ypWk1pcU2j2QhYOKSf 1jJZhGRhyUr3t+kIC1LMFa5lMvVh0dRi9X0tt3kleIcfHOE5TmSEXpm735pkYRpbzgauRVrRk7AA wilagWkFbO11mw8oK2I5MqtHiyxsYHRic3hdGn0SCNsIrN60QnY+surRamcr/+xfWyiZvzRPOr5n 0PtWxNqKYMWe1XZbi+wddfqSFbdW1NoDulxkhaCtTPrC1hBnwFr1iqzmtQKa4sEfJu6bv6GI+tx7 +sO2Bs+5Jlgy92Tlre0by7nU3wprddiaYktKrW51upR+QxyK1a9+1ipZdWplu9Wg+r5Iu93T9oXO 7zlSEllJP07mYa0KdRLVtHnE8Xe21d8WQFn1G4fonIwFWGhHbZ872QPb4AJsreidxO82YGdBVQrI 2AOrn8fnaWFs65BEhC3eWmRVMz23ndBpfmuNVmwbEiBEJbYhAMe2kyLHAVrubkm71bfDrSuMt6Xf 9hDWEnsGnnLpWALLsDMIOt32AwsgbAdgVMvwMPi2YhBywj6sw5YJe+pkjXibj9SnDtsnbDkYBhLq l61bwq+tlrvbgoLUbX+p9pQD4IAEEsrDYzk0z4vmbOHg+NSJx1nE6Nhjrd32ytoCUQ7NFhNbA/RB rSS1Z1O99vq57j6+pi21x4M+so84Tu3JvXpVvnYoz7YBZTDgtlHIyhxFp59gZWGK4IuD5hxsG1q/ fn1ujaA4nqs+m9XWhd5jBCzicUSiEQvbWOxP1GfkzuEOtm8MtyyJ7O2VJYtWhOuTcQMzXr8ARNm2 osACht7xt20ftjRos8BFEErW9DfMbV+zTaJI8EYmGDj3lCWqtyAJtu6Ts5IHMmYrG+dpfzhStiDV sZra7m/8wNZ3ekWHtK/kAd+CKHpiGww9K0cLQ9eVX4eWFL8W7ZFtPJWsW92u72VAcKZvVVa9N+lT O/GF8FMBtLYIxPWNtiKY+yG7Ak91k0d8q1PfO2pROWUf2Bn42Wpii1f1K13TRg4DD7Utjt6QA2Xb TmS0QfvrPf2IX5gOdZeeuM7WoGH/5oXBL/wqxz7dcX49hjcjNRagTQr2B0UlrzDXXhjYMuUHkSk2 QnCON8/pezLhO3z1WdlmbVC39+GuPDoOC8/pYzskxnlSFqzYH/arzl/WT7atwbTwHfI+/E728esd W5JsA/MeW6WPla8NQ369b+uS+/StDvPRr7Yt4ZMcaZftdXUYh2e1nV6WLgx52ZrfV9QBUxZ7ymQl siMdT/gcduAMYQbGfUan9gYymvbvEnCOEumMjRs3ZgdRPAaOw/UeAVG+d6ysLacNXMbfkDEnwfBU ecpkkHSEvbLzESWW/ZYzKaOjffafcryGwPHm/GYCZC8rgZGVWc257n/30hFq7ce3T1k7A+NZ+0kZ WXVxVHE02kzW7OPzLOElZE5uIeiye2VxoJwcY0k4CaPtPw4fcY0z4IhkUpOIYCtPu4wU+LuIkgo6 GBIYypL0LwNk7x0c9KlPTo9hdV+WZrO70QfbTfxHlIUY6qp31icjyWlQ2tpD7Fptq5I12uNJ6ez/ ReSiDh6BoT6GezmCSfXZOynIYKTsJdeP2kHxnfMMAwaAbAs+OOUNGzZkQKAPHN6BJ87V3lX7gPUD PMg9Z2FVun2gsFW+kRV7S2GIGEoyXG1jBMmcfqUv+p2jJouMsLNzGS/7z/UdZ6RevJDJCkDsj6zy BV5kxVnuRXTN+bmcnLbTIQGNoUkY0Dv7ZcmFfcCzSBu1jfzqF46SDrMB2kJ+7UfFG/kSzDp0BIYc VGX7sCafAmEB5ubY+6od2okf2S9srbonG6j41f/0BQb4pRPqhjXn4RQpusPZwkoGSF5rZIj+4tF5 AJwu2VfWrMy2+NVP2oxfo1dsl35WFnzf9ra3pdODb/X7OJ74tQ8cHgIJ8kS26S37YISEY2Mz6TF5 8d2WQ/iSMfWTM/LqRLE629vJU3SerdXP7utzOl1EPtga9x2igU99RA/pFXmGBxsMx6ENqTJ8er7k jPw76U7CVTslBJb0q7Lr8hfe1W731kdgj06KKUZnGehP5ToRbF3Y39oH7Fx8voOccuxkZRq+WeBK /gqAVpTCAfUB4uisU5WFQuV5p76HMTvZmashxHles/sohDHPkXVmdBjwieeAOsczjND/vBC/1Rud 1UfH9TEs20cWNLrnS4Dfxz8+mHNtvj+cXxyOcvSYc1qdD4vCuOU5yREl9mEE+8hK86ziMBJ9CGIf JxjlcxFx9xEs5FmqMZTTOwcYxdBoHwKT57GGkOdZzHljnl8RmPRhYEZPRVaSZ+eGQuY12EWWPyov jE0fWU3y64EIiEbvTvoSApznGNe9EPTRucmuwVCZQwrD0ccwaPa7M2cjqs3bYVhHZx87p9rZ3ctN YdT7iIr7OM2mh68zi4fkDNswnqNL4SzzOefCOifWD9mZRhE05pnWYXTzEf3uHFm4O5ebvBU5v1b/ IGeiKxvhLYbO8ruzp53PHMYy+z6yy7zujF5yg2Aeh9ynHuSF+BWGc3Sms2v6UV+RswgMUk+qb8MJ 9eFMkzdndtcZ3hFY5rnRcSpZPj/e7hiJmdP34Sj7PeOsafUg5YZxzrOC3QsjnnyEg0wZU/40igAi 34U/CueQZyuT13BefQSgo1cjo8/2uqCOCKqzHs/Rp3AkeXZwBAAj+1Btr0Lof2HrmnqV5V1lhGNK GwUDzxZfYcj7cPz5dzi2PoLpnk6T3Rj1ST7CaaZMhJPJs5wjCKhqJ36qk42IffBz+I2gvA8nkucR e5GtiwMi8jzjiQXFRXIXjq0PZ56PkCu2UB0IdhGk53e/XHdOPF0soqvaRLbZhnCmaUvpqGtF5Mr5 1UX0ms0KB5uXwhmnzvvDmdvOs2fX2IcYDctzsuvdSZ/OMI8tXHmL3kYQmd/hEIFjyq+z+NnzITnv /rDDDhteymcKE/pJv7Q9gpl8VnsjmOzDKef/Kpjz8lb8Y6eVdO7Kjrbk8M1w2DaAGKX+hkdqaGDI y/CaiFPkJJsR1U4iEcwwujIcJTOVqRiqE+UOSQQ05Gl4b9b3YR2yDqelIJmGzEqZInqZrOhbpiui c9QaLPy3IxGXIwVDyXNEwPuGbwwjyxxk7bJrUfawPs+NE5y0pUjkbGShhtxhhxfZD3JfJIpfNF/k p+xhhioLMGyPX6S9w/pFwoZ+RMbqdIqRYU6ZoWcNBZnbF51WFqocMqG/RO411Or6YgnGjpKTjclM /IzTkF8Zkbl7IxAyBNmWoXSnUU2iMOw59CqiRnAUYcNRvw9HE5yeVIsJYahtiJzgE5mf3hwZiCxF +2ULThvTh/WMERg07IfxflE/3fA5Pvwp4oevjMY99aCSnXo3Lw5+qX+oI4ac6WANQRoql7XJIpUr S1SW0QP3fJ9GdAO/NYxrCNyUBfkMJ5hrBOpdz5T8GjWAubLJCR7xZARhPvswnHZQT51DjN8aoXHd Tz0LezqojfBShyFqGBhNQmRZ38hs6a3MyuiBZydR8Vmf9Qx8kREjBB84GpadRrAiw2QNmY7CKzlV Pj5lt0XkwNC2NRhFbLAMUl+bvpDles57w/6vMus9Izueoy+IjasRSLqgbnggdo8dnEX+k5LM1SiG 4Wd2Chm9MNrkntFH2f6Q9MuQT/foj+sIrvQFr66TIX0IHyNDS7E3WcESfq2oAzbUEdFyDqPoVE7B mD1j44egGD7gdCgYQAy9Gp8nJM4Y1mkMFqE0B2FYxfAbhbG4xzCOv81LGbJZF4bRIgEdRjhdj2gn jY6hCcO0hl0McxnSUgflHwrkOJ6GKfDJcBlqJhyGxCx2MWSJVzww9gyu4STzRgSAcBoWJLzaTjAp tefMlxB8gsxh4cVQmiE2w3wEZhYJLJRtHosBMFSlXoLLKRia0kY4c/rwOz6GT81rwYojLOWZVA/F F7gY6sQbwjPFFFgYooM/I6itdVweRYpRjDTKhN/iFzzAXFs9z1AMCR76wVF25rW3hBhOfcQ4MyTk j1F0Hc54N+THKFBI/JI7w3GG0ciYIT28TiPvmRctfJVPPkyBGEJzCAPZ1N+Ga/3bQDiScW00bO9T fxleM0TIwRjWgyF9QXQFtqYYPC84YDRc14f0hA7pF46L3KsX3oy/+smFdpE5xhyvZN/fZMzUB33w PB0jT2RI/ypfv/shKwy8egz9GaI1TK//OV5torOwV6fA1HA+eTMVMIlcZ6DhGFl16qg6BMwWWtID QZtylKmv6LK/4c1owtTf+o3c00tDneonY6Y6BDTVDqdUcRJ0Fxb49aw1F1UuvrzrbHLYWLRnnlZf GdLXl3SJXukXsgA/9oHs4kngrIxZxOnpA8GpgJuuO6JUHTAxFE9+OeDhcOt4meRIOfBidwwDG2ZW P1uFH5jQcziTMcPj5ML0GSzJVTk7MmzNhOfwhpQlMPVs2Vn2stZ9CLL1mefhrb+sGdm0aVMO+9J5 8mS4vhKD8Xb4mzyYmtoQ0zX4o2uIvHKc+pENYb/0tefJMzl0jS6wseRBcOXIS8ER3wNHNsHf+CPn dI3Mu0Y/tgWt6BwwpQSUjgIiYTH3xFmJZGQLhI8wUmJGg3EBHnAZTeP2DBSFo6CMKDAJkWuMFCFj HHQ058ax+JsBkJExFjre89VpjDTHoA6KVvO6kzqB4OkoPCJKqA4/eBeRyebwpI0cCSW1SIeSK9s9 kSoFIzAUjqBpM0xE9bICQsYoUObKmCbx5Jq2i86Vqx2cmnLM2XA6sjqRIeXEJ+WRdcPC84xuLXCZ VAcnqwyKo//8MFAMtLnczZG5MfyyBe2BRykNJ8coCVIYBJhpmz7k4PQ9JS/Sp9oLJ3xtCVFS853w IDdwxB9Z0F79oQ5Ow99wJ2sCNXJKjsiKAI58TCNKrp/JojYwZMpRlz5grMi1OTABJCcvSGMYyBoc tRFeyhEsMlyyBys5YaEfPcPxMkp4LUcDd/2rjdqhTe7BXuaOL3rAOSjD2gfOgqPh6JWt3zktZSDO nJHWdjJFRpXN+PtkoPS9+zCmD/SSbOGXrpExOkWO1UHOpsmXdpMjtkDdyrZORN10BwkukTq0j8HU t2XEYa996pTVOBNaAFWZHH7IoB+46Gf9QAdPimAc/95lN8gEHP2QF3W7BkO4kldOSlnajn+r+JWB D23mxOmMbM/1WSRYGudXf8AX3nSbvdJ2z04jMk9HzVnDkiM0+qP/OT39q83+1pf4Jr8wqsTAPHf1 Exl0Tx+QT1QOmPy4hj/9xB7ChI3VN4IGOqB/vE8nKuAXHBg1U/YsIoP4NVpT9oE9pZv0WYAAJ3Yc Phww+yMgoFfehz2foz+0m04rS/sFIRwwm63POGU2aZa+z+J3qffaSVhLRbC93xBoCDQEthECggEB oH+0YGpoPse/jdhs1U5BYPIkxZSH2+WGQEOgIdAQWD0IyOoNGRtxktk1WlsItAx4bfVX47Yh0BBo CDQEthMEWga8nXRka0ZDoCHQEGgIrC0E1rQDNsFeq5K3JewWxMy3Ynlr8WfBhIUPFn81agg0BBoC DYHVi8DsJWlL5NvqTyeXWKa+VLKC1+pPWxOKrCC2TcPqP3tol0JWidp6YE7FqjhbLWr1oRVzttVY LWlFpFWp9qQh7bP9yCo6/Bx55JG5xcHJPpyhFXpWBtoyZWXocpIVl6961aty60aVWysWrVTVnkYN gYZAQ6AhsDoRWLFtSByZ5fGOL7MNwlYLWwUsg0eyNPsLLV+3N6+WnE+CieOz3Nw+PsvLOR7bEThD 322B4KA5Ykvja0m5FYL2xdnmwAnWJvFJdXC2lqXb38f52sJgXzJSl20g9iBb4r9+/fpsiz2lznO1 B9Sye8GALTeWyNtGgD+O2lYSR9/Z0jCNZNAwsZfNlhTbMrwPQ+2wvcV+ZmX57nn124NoWwUctAGO fmxFsd3H+3iv5f+2AjnuTjm2RwkKjCS4Zhm//hFU2Gpgm4TtRvYR4g1ftpzAplFDoCHQEGgILA2B FRuCtmfMQQScojNfnaAkI0b1tz2RhkpltXUKzKTmKINzs6/LARWcej0v6+TcOB0brzl15FocBThy yHGMZDqVSeW7xnlxOPYV2ktWgYJ7HDDHzrH6rD1znJp22vdpGNrZuvaocVLaJpO2h9bePvtMZ5GA xQkwthHYgO+EFqSdsml747TR2bn2w3GWRx99dOIrAKgzdasOPHnHEH1lwpyxvanlqP3nJPvrEEfr EARnrgpEYI7wYXRA4CMAsD+0UUOgIdAQaAgsHYEVG4K2MdopP7JJWWIR4+7Up01xSgon5UhGh38b 5rVJehLZRO+QcO9wNEOSvTl5iTNxWABnYUM4Jy3jlRkblnWYhuy2TnwZllHfZZUcepGMz0b2OpbO PY62yKZ0DkuWbSiYo8afDfyyZ9ksZ6lu+/RmEQesfDzaXC/YQA4F4PjxJvOW/dYwuaPwDj300Pxn D8Oy3Xfaj/2B3vfPIBD8ZPB+kJEFTtxRhTBzYszGjRvnHEoiIHGwvxNoZPmT/h1kFtZ+NQQaAg2B hsCiEFixDBgXHEllqv7mLDkmQ8ScRJHnaoi0ro1/cnzjZXnGMK2MDhni9jeSwXLcTl8xZys7NlQ7 izjaIR8yRycaFbk3PLLM3K92yO4NjwsuBBJI/c6Jdhyeo+nqzOgqa/xTXd7nDOMQ9Mx2PcMpy2Sr XYaanUKDJuHruky5MBGE1PP4V1ZRZdX+FqQIiMZPBHNqjjaYRpAVO1qxSP2G5WXWjRoCDYGGQENg cQisWAaMDcOxyNFssi0ZIgcjA2PUHTtofla2XIf75wsTfjkyzpmn8V8v8uxSR8Mpw9yw4dP4zyK5 GMpRcRZ9GXJ2prDj0CxIMvcpu5OdTiJZKkdq7lbmLuOUhXJghmkNLzu6zZCss0Oddeo4O0fFOTxf +5DjzpQlmxQ0mMsd/vuuSXW7JtM0zA4fmBiaVx9cBBYWcTkmz/D05liM5hB/w9UcvWMrBSd49a/M YGIIWrvN3XrHcXHKMMxsKoDzdDSjf1ohS4//iJPzxvA1Z+zIN4QfQYaj7nzioUhw4hAA894CkEYN gYZAQ6AhsHAEVvwgDnOkziTlHJwHyiEijs4QrwU9hkuHmec09jkRi4u8IzOT2TlvWpYoy1UmZ6we 87AOXJedeY4jsxBrGjlFps545ZyQs0YNuzplphZVuedcWtk0fiyEkpXiwfCsc1A5JmUhQQd+amFY Xpzwi8M31GvhlLOcLU7jlOu8X9m2DFWWrixDy8jZzpwsfGHCKcvC8eRvC9Q4YvzCTRBjHtdIhOF4 QZIFcnWGLidryLsCIsGAw9rNOXtf8FF9JWsWJCjDvHmjhkBDoCHQEFg4AivugBfOSnuyIdAQaAg0 BBoCpxwEVnQO+JQDY2tpQ6Ah0BBoCDQEFodAc8CLw6s93RBoCDQEGgINgWVBoDngZYGxFdIQaAg0 BBoCDYHFIdAc8OLwak83BBoCDYGGQENgWRBoDnhZYGyFNAQaAg2BhkBDYHEINAe8OLza0w2BhkBD oCHQEFgWBJoDXhYYWyENgYZAQ6Ah0BBYHALNAS8Or/Z0Q6Ah0BBoCDQElgWB5oCXBcZWSEOgIdAQ aAg0BBaHQHPAi8OrPd0QaAg0BBoCDYFlQaA54GWBsRXSEGgINAQaAg2BxSHQHPDi8GpPNwQaAg2B hkBDYFkQaA54WWBshTQEGgINgYZAQ2BxCDQHvDi82tMNgYZAQ6Ah0BBYFgROsQ74X//6V/eXv/xl WUBshZwcAfj638bLQX//+9/z/zwvR1mtjIbAakHA/wD3f7sbnXIRWFEH7B/Tf+c73+l+/vOfrzqE 3/GOd3SPfOQjF8TXT37yk+6ggw7q7n73u3fatNL04he/OOvjeNYqvfvd7+4e/vCHL5h9MsJpT6Ij jzyye85znjPp1rJcE4j95je/mVPWr3/96+5e97pX9/nPf37O9S354wc/+EG3YcOG7iMf+ciWvL7d vsMB/fSnP11y+3772992MEb/+Mc/um9/+9vdD3/4w075W0Lk7S53uUt31FFHLfh1uvqJT3yi+/Sn P939+Mc/7v773/9273nPe7r73//+3X/+85+J5Xzzm99MmzLt/sSXtsLFz372s90hhxzS3ec+90n7 vRWqPMVWsaIOmMG5293u1l3rWtdaVEf+7W9/myO0fd+POmj4fXQxvnhnEv3zn//sxt/x9zWucY0U sPF33KPEQzrvec+bzvr3v/9996tf/Wp4a+Z3BkD9Q6KYaJrSqf92t7td96Mf/WhBGfokfquOYb2+ T7vu3tBYTeJtGr6cJh6G5O899tiju+997zu8nN8n8evGE5/4xImBGp5vcpObdHe4wx1GZSlj+OMZ fw9pMcELw/mKV7xi+Hp3jnOcozvLWc7Sff/73+/+/e9/z7lXf4zLyZCH4TsXvOAFu3Xr1nVf+9rX 8lX8zuoLDw3bN/xedY/LVj1T785XfpUz/jl8T5njbaznp+FLToayVM9P+lTG4x73uEm38pq68TAf cRhsDMf5u9/9rnvQgx6UP8OAblo7XB/2lbpufetbp8x96lOfmq/qvH/SSSdlgPWud72re9nLXtbt ueee3c9+9rO0Md/4xjey/PE6tOsCF7hA9+hHP7rbaaedTlbPOL/Dfhk+PLw+Davxsobvj3+n+4cf fni3zz77dAcffHB37nOfe/TIJHlQ/7Dehfb9qNBT+JeT9/wyAnL729++++QnP9md/vSn717/+tfP VDbVykSe9rSndb/4xS86zu6sZz1rGsbjjz8+Bfvyl798J2o83/nOl9nVuc51rnTsz3zmM/Pd0572 tN2DH/zg7nKXu1z+/aQnPan70pe+1J3udKdLY6pszvSd73xnd/TRR3c3vOENu8te9rKjFjPEL3nJ S9KZM5hPeMITkvdTn/rU3YUvfOE0yqOH5/mijje+8Y1Z1lWucpV04JzxQx/60HzzD3/4Q/fXv/61 e97zntdd6EIX6hijZz3rWdkef++www7dqU41Oz76zGc+073gBS/IOvCnvUj0ev7zn7+TGfzpT3/q 7nrXu3b77rtvZpHf/e53u7Od7WyZIVz96ldPJ4mvQw89tDvDGc6Q2L3tbW/LT+VxQE9/+tNzOPk0 pzlNGrYrXOEKWaf7X/jCFxLfM5/5zN1Tn/rUrJchkj1QYn1R9LnPfS7by0hro/fJhr74+Mc/3h1x xBHZtze4wQ26K1/5yvnapk2bumOPPba7xz3u0V3sYhfLa/iD273vfe80cvr8jGc8Y2fkQCarnw1/ M2yM8W677VYsnOwT/+pgMBkT8rH//vvnu+TsDW94Q/bjmc50psQPdoz8YYcdlnV5h5xc8pKX7Krd F7nIRbovfvGL3Z3vfOfkm/yc5zznSRl873vfm3jKLujHJFKm/vjWt77VPf/5z0/eNm7cmO0VnL36 1a/ujDCQkUtd6lLdIx7xiM4ojRGHZzzjGTlK85SnPCV1gTOYRWQU3+RFGevXr8/M/33ve1/2C+MK B3VoA2dDHgydatcDHvCA7kpXulLKmv4n10YP6M+sUQsYahsZZvDpqGBdXd7Hv1EROqA/yMQ0osfX u971sq9udatbJU9f/vKXU7a+973vJb/0gPxyKoJDMk/eOEhOQ5C33377ZRXnPOc5k3/tm4/go//x YITM3wJPjoys+JvOs1t3vOMduwMOOCCLJB/6Ck4l624IvJVHfvEL05133jkxKszhstdee6VsGcl7 y1veknIg81fewx72sJQ1tu/Zz3522hly/eQnPzmvT2sTjNQNE9k7mSCH6IMf/GC3KfQEVsoiD/rq Va96VXfcccelrJMj+icIca/RAhAIAVkxOvHEE/sQ+D46pb/ZzW7WhwDNrCuMcH/d6163j+GkPob+ +jCyfRijPgx2H0Lah8HuY0i7D2PUx/BgH5Fdf+Mb37gPw9vH0HD/2te+tr/Oda7TR7SZz9zvfvfL uiMI6K92tav1oYxZv/fe+ta39jGsPIefGDrq3/zmN/ch1H04pz4c/5z7MYzYh2LPuTbtj1C4LEt5 u+++ex/GNNsSDr6/6U1v2oeR6cNgZpuUoU0PfOAD+zBwfQh6f+lLX7oPIzWt+Lwew3cjfiOj7z/0 oQ9lHc997nP7MDJ9KHn/sY99LDHBz1e/+tV+l1126cOh9aFkfRjz/uUvf3m+gz91hkNP/D0PR7yG oUx8w1j3kWn0kVn0kbH24QCzHWFE+6te9arZRozBNwKQ7KNhA8LJJb/uXfOa1+w/8IEP5O0IfPq9 9967h00ocR/Dh6PXIjDJ+vV9URiKPgxQf8IJJyTvYbizTfi9+c1v3ms/eXjTm96U9URgV6+e7DMM Xh9ZSH+nO92pD6fWk8EwMvlcGKM+HGXKUDiBPoLIvK59ZASOERj0YfDyOvmO4KTfvHlzH9luH86s D4eU97SNPMLs/e9/f2KUN6b8iqyuv/a1r91HkJYyrx+UFYawj2CqJ6twiCHOPhxYHwa/P/DAA/O+ /oGXOmcR2VDu17/+9f7DH/5wf4lLXCKxD0OeMkNe6F44ij4cR8pDOLg+HFfie8wxx6SewCOMcB9O KPn66Ec/Om/d+kT/0HdYhsNP+0Df1RVBVNYNRziQ12mkvXAgy4cddlgfQU4fQUJicotb3CLtgnaQ F/XpJ7bltre9bU+HlE1f4FGkDfprPtI/bI7+KNIX2kEe6QU7UvIQiUU+5p5r4fjrtfzEG9sET7yH A83rdPuiF71o9tNXvvKVfO/tb397D8dIIlJH2MZwmH0EnfkOHWB/yGkEYqmTcyob+wPf7G4Ezskz G+CacrWRPYEj/aIP2kg/I7DoI3jJ9pAlmDRaGAIrmgHLAqNDMqqSSYWSd7e85S2nhgUi6TDEGUGK 7kWGIaiZjVz84hfPIWNDg6JuQ5KicT+iSREv2nXXXfOdcP4ZNYpm/YRCjTJKmfLZz372jOCLmRCm 7oUvfGEOucm0ZDwiwiHhyc98JLMNIc06RK+yM9m9d9WtjbL3MAZdGIUsztyRaDUcZGYCsrxZwzn4 lfHhMQzniF91yCZE85X5RfCR81PqkymE0c0673nPe3ave93rOp/aG4FCF0Zn1DzD7fotFD770Q0j BvrE3OijHvWobIe2yGALm2n44jcMzIjfWqRlOkAGf/3rX3+U5RYT2iKTCMWvS51s25yqzNjwrqHG CMRy1ESGL0KXMSL8wmoaycThI9u40Y1uNOcx7dFX5MdogVEZJOIP55PvaavRC6QM2a/hUNm34Tv3 jOQoy5QM+QxjlnKQL035ZdSEPpCDk0LGzUkqB85w0m4UwUfK+Y477phypl6ZG/l2bRbpV7xe5jKX yR84GJEw9GrkokaH1CF7Iw8ySnjAV5s8A3+yRcfMm6tXG+E+bRSHTmhHOJEugqYRm+HMU+Ye//jH Jy/wUoeRiggQR8+Nf/Ge7NdURji8HN4la2TMqAFM8ESWyAj5JVNGYRAdGg4Fa5uf+Uj7wtSOZMDz hTv9lQmSb3LiuzrxoC44ku8hGZEwEqfv86TgjQAAQABJREFU6SS7gfBPxukvioAx5ck1GMmslcU2 Gi0Kx9lFQJJz7Pp3kj3Lgga/8A1rNvaKV7xi8uk222qkpewJeYggIduiH8m5a/hotDgEZo9xLq6s OU8biiDkhkgf85jH5PBHZKhTF9p4OSLCHCIx7GcYgwM3NEhYDbtExJzDf695zWvSGHFuDHdEsp1h aEMvHDxBJAwR/eXwi0URhJEwUxYOkmJSBp8MCOMaGVmWYeiQ8pXRJ8yeY0x9el8508gCEMM/2s24 cFjeLUUtPpTPcLjOEeCXQzWUYxholgM21GeYyLAjZ8sQFL++G5oynGVYqgyqNpkvMy1gmA/ODC1D yVjhEw7lUDg6AYE5Mfiqi5GDL0UtfC2kMf+G92n4uodfw3HF7xBHPETEnWUwoPhwDVZ+qs/0BdLP 2sdQ40+bGYN1MQSHR/waJnOP8ZtFHKdAQ99G1tcJ3pC+GfZVzeeTQ0GMYIWz956+Ikf4hF/1uWsw gS/jyBkYfoa/67PIAh6BnAAzsqF8lGPevHlzvq8evNQwPwMq4MUPZ1j8TqtDUGGoWUBhDlwQSEb0 LV38QSxsUoZ+Nl8p0CIPeCl8b3Ob2+TUBV2PDC2fNbRL1ytgmVa/656hL/Rcv+sLwYUAR914wEu1 cVJZsCf7fiyWFFTqO3P4ZJXcKQuPpmUESRyuMg2nc8IcSAU1yoFhferLaaR8jh0edNLQuikC/Ut+ laGfyEF9Kst1MuGausoOwNpQNhmhf+RPORywYJ0zZAvhYyqI3MPP37BUt76CCRtgCkbbvD/Ut0nt IY/a4Dk4+UQcuOkQC2pLHgxPC9a0o/SkdGVS2e3aZAR2jEh24+RbS7tqboBCi/piuDENBeMvk6Wo k4ijNC8i2jXnQLBFeAQwhu3yk2ITbnMVyiYc5pLMrRE4SieSZ6hc46xlSgwzPggpR8JAmWum9Ay3 6E6Eb27RXCXnTtjNPeE7hrZS8PHmB2+MxSSiOIwGp+RThEh4ZRubYh6FwpjDYSgItkxABgEzETAe OZria1IdFJ+yM9D4K37NRSmTkmqHDEr2BEftdQ1+6tIP5ng40GqfLI0xhBWlFcgIomApW8ETww1f AYv5W/gKhGKoMB0ofOEKT594hW/xa96PkRCkiOgpsqhbPerAp7lL73PY8CYbMQyXRlKwwqkyFsrC uyDND6M65Ne8NnmorGQSlpxoDD+m8WLkOCDZyUtf+tJsDyxe+cpXJi7mCvWn+U0yKSuVFXpHsOMa Ay8AFUCSUY4LT+bh9Y9y6YbselZwgAcOkpOTESH6Qz6MJnAs3reQB8bFlwyKbJrTVad+nER4w6t+ pDd4xp869HO1UX/QN30E3xe96EUpD2RLvfAh3xyvYMFIF5zWx3zyrCzSu4y8esxpa4uyzNFaM0Ku BAcyOvoyjWTyAhH4k3UOQb/od5kcrOCIL0E6mea8yJP3zKGSefJLFplE2NrxQH5lrLX+YBIP9AHm kgY2iMzhly7Blu3RZ2Rbn+JJ4KhuOuE52OOXDMNxcwRZ+of9UD7HR18EnWwa/RNsaKt2cPB00XPK NgICW6NqAm72Qd+wM7LhSUSfJA3qELTD1fP4gKd+0h66KGhxzSf9VDYdwivZabRABCLqWRGKCCzn CMKRZPn16fo0Ckeb82+RLfUhsKPH/B1GKOdwI2IcXa8v3gsBzjmXulafyhm+49mIaHNuo74PeYqo dDQHOOTZO553zfeFUAj06DHveV9dhU19ul6k/qIhX3Vt/NPzxWfVEYqSc2ARkc553FxtLMjKeaNQ 2NG9wqE+q7zRA/FlGr7auFh8q/zit+qBa0TU9Wfi5VphVt/rAdeHz9d1n9P4HT4z/n2I16S+qv7y nnrDwGURw2ddKH7ren265zsqDPKPCb+UHcFSH5n+qJ7hY+ofylfdg1H1Bz7mI/zQkQg2cx4+Mp/R K2HMp65DgO9QhqrNeBrK8KiwGV/wOyyrHg3n1ONhPtIGP0NMh9+9r12T8ND2Yb97FoYlm+My5/40 0na2qqjqK2zwWNeU68e1qq/ei4x4tEbA854xR249Al6HbYsgtY9Rnj4CiNE7VY5PfaF8VG3KPyb8 Kl7qs96rR/WRPhlStUHZ9X14v32fjcAObi/QV2+zx0SuInARvvnKWSsitxmTq6TiMGYZGctazOke FtlhZVlWWcsqDCO6LvtptDoRkAWR+zDAOcJjyHQlyFSHDFrWNl+muRL1tzIXhoDtWub/jU7IcI3a IFm1zNSQsCkRWXyjtYPAmnDAEZEloj7NefhpNB0BOFVcNRx6HeLo+qzhwemltztbAwGOF+mj+tka 9bY6VicCQ901TF3kOvkgL02nC5W187kmHPDagbNx2hBoCDQEGgINgYUhsF2kkqJAixUsQJhEVhnG 3MmcW1b5WTyz2kmbxnkf8hzzMtn2ypiG99bKd7zrDyulK3NfCO8WmRhCbbS8CMR83qL7Ynk5WJnS Yo42Fy2tTOn/UyoZJpeNlh8BC/1izn75C96GJW4XDpiTsuXEvOcksvLYPsahI7PK0ArB1U5W+dpm RbEnUSyGyZWdsShnzm0ro4ftnXNzEX9wjlZExgKLRby1uEf1m3O5bRn6wf+e6buQEiikubHFOO2F lFvPWGFqtfJKlV/1bMtP26/8DMkqfSuvbQtbbTSJ34XwKKgw120V9EqSXRS1D3cl69key2Zj2Joa bh9voy1jVptvT7RiDpjxso0E+fR3kUjUNhlkGb5l70PQKRkjUBQr+XKbACck47NlgNH2DgfBCekc W1uGxHCqxz442wssUELKsZ1i+M8YKKhtB8pXvzqHpC51qs82nipr+Mzwu+dsA7E1Yui88Fq4qM8W oCI8eB7PHKo6a2uEOh0g4JkivPoRSIxvLagjDOvZ4afMf1L2r15OTQRfowkwtDVs3MHjx3Pu648K EPCn3fBxj0M1AoH8DUOGfViefrO1xVYJsrEQ8r7tXvq95rLVI5MmT77jy98I5trkPbyPk3dgr9+K tMnCtSrfdW3Qb8ryrP4bZjyuax/5XWi0rh5bx+hC1YFf/QFP5WjLsDz8emcoD/iq9paOZIEzftme 42dIttxYoKc8MjfsK8/B1sjDJByH5fhOj/QprPQ9/IakDniNB4vaqg74Du/ZBmOL0GJIn8DFIqWh XtMv8n5SHHQyTrbasAPaTseKpvFb7YvTyLKNw3eUA8dxohvq19fDfhx/rv7Gr3LwVkTP2BSfyhrW W89M+hziW/pZz+FryC8M1IG0f7wOcqsPS349hx92AM++w6De01byi9+hvqnH4sPhNWUhshMnBebW tv+58n+/9Z/yi9jb0nftGMpPPbNaPv9vNn+ZOdJwm8ntNQUowben0/5OSsRB2P9aAhjH5uXetYc8 5CHJiU6yl82ZsJ536pI9Z07HslHdqr+j4rxhxs/Zvw4gsBndnj2k872DLNoiQLV4wR5gezHtN3zs Yx+bzxBI5do/aUUoQVO+/a2EhbNWjrbobHt8nU09jezntXcWqZeDse/RRnv7/7TdPmPGQT2E1EEN JbCMm/2JViy7h0+G2mEBsLO3kyI6+Yfg25PJUcCtIkXth4ezoOFO0YwUqMOPdsLUJ0dj77U9fPpu Q5w0pf+U4WAKxksQg0fBi37xrH2DVqgLsLQDL7IMK6+dHWxqwF5C1+AONzh4zv5MzxRGsB86u7wx 5Zf+pqx4cMgKst9RlsOhK5/8wMN+awclwNueRjg42Wdj7PfUpzCEJRzIE/z0sz43kiCjwTMsvG/v tMDIoRrkVR+RQTKmnVaokhlGwKEq0/aL45lskw3veN4Jb7JP5QqSyLRnnAlMf+xz1WccvLYzLvoC Xw7TsKcU3vZlqhfe2jWJrKC1dxQG+tjeWId/IAt6BF7eJaP2jcNTH5I/wZIAAQZGaKYRmdJP8CbH SFvWxd5Y2QwZIFfkHQ70GuaCSkGAZ+x5xYs9tvhA2kf/nHs+i7yv7+1Z1be1I0B9dKH6nMwYTYGF s6ntbYUf+6RP4U6+8Ogd9sF3OAjc7CrwPL0iX3SeQ6Ef6iXXrukrgaPPkjkBkFG64ZnQ420SUOEX /3BkB/Cpbk4fvuyDQJw+kNdppK/hCV8jPPod3vhlZ8gUHPzoK4EevbcCm3Nzn57Zt0xGrcomi77T A/uca3U9W6H97inDeQTaas+wsuyLZnsEaep2ToHT1PAPd/6DDtuHb6+4Fd/kAeGDjmo3eYWvdrnO fulz1/keclMrx6fhsk2uR0S6YmTvbgh/7pkMxc3zewOsrM/ZrXFoee5Tiw7KPWShAHkubzHkvOcQ 8vxTWWFc8nucVJXnGtdzPp2bGgZhdMmeuTj8IPcXOuM1hGLO3uLY4nGys17DwI7OZnaeajiULA+v IQC5JzGcZ+883PkoFKMPg5jnVMchCn1sah+94v0w+rm/M4Ql9wY6MzuEJ58JQ9xHMJDnQrvg7N8w SomR83ZDmEdlwc55smEk81oYgNwTaG9gGO4+otk+DELesz/Y+3ix7zMOE+nDOeX3ODgg90p6EG5x LGfuPwwD1McRjX0obfITyp9lxYEVec63PyJLyfNgw2nlPWXD2z7WiHpH9UcUm+dch1PIM4Sddzuk 2GKW9QyvzfoeTi7P861nYOB8X/hpZxjp7OMwpnnGs/Oy8RoKmfzGSWB5frZzxuEbTj3PhI6DRBJr +6adYQ6DcHijvapxGEwfRierhQs5RXFQQp49Td7CsPURFM3Zs5kPDX7hA+5wQtoTB1GkHEfgkrjD VB0RBOQzEdTl2eL4DSOXZ/A6/xd5Ng426SO4zL3AdI08TKMIOrMdEUClnMCtSF+Ec84/7R13frXy w7nnWcCR8fQRHPRxqMVIburd4SfZcx6yM6zJDn2OEal8RH1hjHvy4Ixx5aFwynlOuXarF54Iv/TG 2dfkOpxgXp/2i27FlsU8A5ockmn9iei6M4z1uXroKJugPs/QK6Sf6wxw/IYhT34jAMszmz2jnDgc I2XGeeJxGIXLqf8R+KZ+0TlnLOMB4Yt9ITPOWI+AIK9P++WceOdjo3BIKafkELEn9gkjvJP3WRQO OvcOx8lgaSPoMmLj2AQ8OQccjxFs5b1wnCO5Uhf90p8who8yncMe//Ahn/dL38ZhMynXEaCP9uwr 2/PO42YnIoNN7NSrHnJN38qmVYHssP4pcia1s9WL6C1ZRhGYjXh3RnokM/XYqvpcsQxYNCEa8x9x RLgyBlGgyFMEKIp0nKATeIpCqfKM0/pbhCXTQbI42aPMTyTu5KEhiX78oEC4i07NY9g873Qdpye5 XiS6q+eH16pc+y5r6FhmI6oT4TqRSOYwiwx3OQ3KaUCG8+xfrrK852QkETUMikTDYZjyT8+L+Ipf GIlW8SviHpalHaK8Ou0IxrII2K+LLMNPkcxdG5zjqmx9I/oVRYtunXSEZLvuK8sIgOjWff1WFMY4 6/W35/CAF+Te+vXrRxE93vAMExGxU7H0x7Ad3pvUJ65PI/UO+1D2IXL2A0M4+I4fUTR5gh8ijyJ7 0bKsQnTtOecNO81HudoOR20fknqq3mq7+97133Y2RYSvXPeMPJDXSSQy90ydsQsTIxaGXWVDslqZ At7qPyfJJPBrGFab/Bcm/CJ84dlRqoXDpHrrmrrIor5bN5AT99VRZy+TYX1llAPPsjGjCt6rM4ir zPFP7+GpTo6zh5/+GI40oqBsbdX2GqLUVlmTbEc2SSfpcPFLNsf5Ha/X30ZBYOQEOrJl1KnmENkH 2BupQtYfyLbsk9cfpZuyMvWRDfx6RgamTSW/smFlkwntrEyLvsHRKIYyyJx3fZe9qtspVmyiDFxf TCMjKkYbENxhVsPEeJUBoyGOeWHCL23Vj07RI6fexTd+yY3RNDzWqWSKgD174T7dlunKxM15Kysc cvYlvIdkdARPRWRb1uo6G8vmwHGob65r4zi5VnrnHl0o2fc3fss2e65sOf01irMaacXmgDWWEhkS sJDIsJkhAYLG0RIoR505e7fmhymnoWFO1xCQ4+h0LPLJERom4oyLdGhETjlH4JMzoVgOoTDMY6iK IhvW4hgpkvINkRim9o5yXVcWvgiRT/ddd7aw4R/DNIYftWsWKY+Rovh4UZYfZRnSUk9E3clDCaxj CZVvyJZSmu8wLG5oRlmG+9SLJ38jRkQ5EZnnObdwLaIohi7haMiQkke2lQoEPwEAA0/4OSZzOI79 gw3j4BhFxHDhUVmG4BypaKiKkYGt8p0pDU+KyGBqg/bCtnilrMqGiYAC735g4j3Dw54lD3hxfRox DnD0DlyqHljBFh6wMm9EthhIgYf2UVD4ciAMSWRnGVjoY1MQQ2cLQ0bcsK5DMRw1qO5yjOpXDsOl ffrCcKLhObLHQMB9GinHEDwjpgzDZNpdjm9DDKPpC22qQ/gd7C8Qch4zfuuADs4XdjCkb/BxbT5i ADklbVG/wx4YK3UKCjlFfem7QFoAasjdsCeDDNdZxBDCoeyA9sAc0X/yIEAxpO5H+x21yDF4JzKc HPautozz6+jQaQRbwaMhaLLKaXBaZLSOQDW94B8b4EFb6aH+Pj6OoCTH9N6wO77gy8h7tuSXbnBg /tWfOgy3l00RfJEhARGdq7OmlcUmkTk6L1CkR7OIg6fH7JthY4ECewknfa6/yCD74PssIrN0Bb7+ daIgj1ybusAvPPwLyKHj9LzhaLKlDwWy5NCQsWBA22BCVvBBB8lg6an3EX1l18gx20OuvIME6tpD P/Wr6QnP0EGYahvboB/0leFsbYG7vjLd4h+quAcT5XrfJ0xKhrKyVfJrxc6C1j5CLMOi4Ay5uQJO 2HnOQGUYAUepdaY5HQIt09WxnASQEUXWQYw/peHYUBlVSqGzdSilpig6TfZAkBgNkaLvBJmyEzbP UGrKShDVIQKmdIRSWbJfho5gcVaUwDzdNFIeIdBOykawCQFB3RTZEaFQP8PEGImS3eO4tR0mDKxs kbARbBmd5/wNK5gRPsKqPsaMYJdxY8TNmTGogh7X4csh4YuAK0fkyxFoo/K0m3PVPgZXv4n6OVkO xtnb8MEPQyZapnwyRRhTIBk2bCmGfnP2Lt7N98jstdMZxZyOrACe5i/Vp/8EEnCeZtzJSAxhpYyI zNUjOqZgymTQZBNwxpP61M0IKFM/y9wYNW31LOezOVbGK5txJk/aoJ0OuBdg6CPGVnvxyNnCg5zA Fgbwc+i/TxkLI1yyOi4veHafc/dDJ8yn17y4LIseGClSD9I294vfchraJXiFNzwZK9nBpExiyIcM 1PMyanhxQHRMvfRF35Mh5dIFsuxZP3QHJvqXnEwizrz+GUgMHyZO/kEAedAO8sAocyYwJQ/m9PQR Yw93/+8ZFgg/nCi9xu/6CKL01STCMztAD5RXeAiy1Kde6zFK5j3LPsBEn3tHf7NBZJOskFOBnffJ Gjkly8oQpHqezNAtAQr8lcWpazN+yQkZkRR4jzOz3sL9aSShIL+yafJunpTssHmcEgzIuHIFHWUH JpVHH/QpfNkawT490W6YFb9kCr/awpazEewG/s15q8c7ZBEPcGDT2QeygRd9hF+4skP6XDtk/8q3 DodzrP8Y5Rn2iT3jO9hAwYk6PC+gxbORBPXgRaKmLf5Bit0unvE3/WUH9aN+0L/at5poxQ7iYIgt KDGsShCnKclqAmMWLyeFE6R45VwYykZrBwEKzGGK3itrXDvcr11OOXfOxYgAAz7LyazdVm7fnHOY bLnpFQGYJKrR8iAwOWxdhrJF4KKezZFViJ7WOonIRL/rYq7MHEajtYWAqF+0HAtfMtNcW9yvXW6N 8sg4DSvToUZrDwHJhzUodnXInBstHwIrlgEvH4utpIZAQ6Ah0BBoCGx/CKxYBrz9QdVa1BBoCDQE GgINgeVDYJs6YAuCTNBbzGAhyyyyaMliDqvbthVZebgt65/Wbjha8DBrxe3wXc9aSTmJLKxy30KY lSBrAxwwYvHQKYksLiO/pmaGBGd9YbHRtlylaSEMXbRoZiXIAqs6mKbKNy0AE8PUi6WV5ncaPxZi kl86t9qIjbRgiY5tCVmUZmteo62HwDZzwFbsbohtFlZuWhk8n0HmFGyBsfpupYgxtAp5GlnluBod MOyc3gTLhZC5OKtcJ5EFF07vsbp5S4kzmTbvj1cr18f35VndWccobmm9q/k9zs22CntJh8ToWRFq VatV0NuKGF48WFU7iwTK+LVSejEk8LDSe0gcr5O4DjrooEU7fnzid2s7DAGKQJwjXk1kNbnV5bbK TdPtIb9WhltUOiSri+0wWWoQRkbYdLte/Ni+WGSXgbU0rlvIanuqYAoJ/m2N0g7bPe3wQBZQet6J dbZtWdi3vdCKbkMCEvAtt7dNoTaa2/dpUQYgGSRbYWwnmUW2YdhYbTm/bRlDsuTd4gBRqW0aRZyl la8yQ0JlOb3l6Iye5fQEzvOWq9suJBPXwfYce96WJFtICI3y8WA7wHApu0CCoDAmyrJUnhMTiXqP I3LNVqFZRGgt5bctAd8We6kbrxyafa0WtCnHYqIiztSeO88zcrVftO6Pf2ozst3ENoIhCXK023W8 15Fv6oAXHmwTQPb0qlfUzbnYxgAXDlamY+m/Zf/K0X6k38mC/cieL1IuZbSFgxxot37Sr9puOwyH LVPUx7Z5LJbgy1hrB4VXf22dIR+OTNSH+s5WCfVPIv2hDQwwPjxvmx3jYZuKIE6gpi9t7yJbSNts HVPPcAsbnbClhZzaLUBG5yNbPciJflGnLTJI35E3e3r1jf3WdW9amRwpXC2ysdjGdqo6rARW2lry C0PyLgjWt/QDTnB0jz7jS7Y/xJeMkGntHO6GsJ3LVjDOACZDvcILvdJWZdVWLrjj1zVb+2xTKX4n tdG2PXzpC1tT9IstTfjW7/pKdm7BqPrJm3d8h6cMnaPCq8xS3bb/2A5VPKlXG/HrWbpID9g+Ould +HhXu/BCnsmC+vBBr0tPJrXDNX3qHe2mh3hUrm1ZHJkdJ/YW68MhluPl6XOr0rW5bLLn8e3oVFuL 9Ds+h/JDp7VBv9vyNI3gon2O6iTzthoN7Tts6Bq9cSiI+ujJxo0bs+z99tsv5Qh2dILM2Tpqa6ay tdX2qGGZ03hZ7ddXLAPm0JzlKSIj4M6x5XQRhWBwKKozoDnVhRCFGAq9d2xo1yEEWxZoszgiQDbA +5QZUhodimRbBImxsLQerwwEJ8Dou+YsXsYWuc/hiMqGGYLvhIWzJUy+K4cxtrdOJEeBKYbrs4gT kg1QJpmSwxmQrMgmfgoDJxGqZymeiBDP9uj6LIcyqx44UQzvFFEIZwAbYRBJu0/JkGhV3ZRAXzrU QN2MvEAFlhXReh6m/mbYZDYOP+CEEQNGiWGjL5F7ol7O32EGtqww/EhZ2isz9q5zf+G8JcRwF77a IdBCggKHEehrwQmeZ2Xi8HNSmH5SJr7InQM+OIsNMarD0ZPxOM5xTr9Pkt8taQuHBQcGHr81mmCL FdwFAWQV1rOIPpBZQ6rkhwOpYNTeW22CBT1WLjmRiXBQdgLAjRwggRF8tZsMlR66Bxfb9/TzOClz XKfx4dxgQ9T2++KFDgqcil86j6f5nJb+YnvIFftD7skyR6x/lCljlE3DTXv0IdtEj7WzTo7juOCO t+EQtMyebOJX8EnvyYaT34z2+K6PODf4kXn9Y189h83esC+ziI1hRzhs9bEJbIOy6KB2qMv+eO2b RnSXzWT/6DJcOHXkHpmwUwCv+pfMmhohA0YH1SlpUtcssj9a0MmBcuxFbJQ9vxIF+8fZkNrWpA0C I3/j0SEoyPNOfOOs9RnHK1naHminlWqErIgzo0BAlbUypj5FRAw+YXUQ95YSo2molIKI5BhDHUo4 48zVNJQOQ6C8nEtljvaBEiTGhiL6LkrlaAgXAyIixDeyd9GJPJxEGTvXOSqb9CkQkhl41xCuTeT2 zonwGUnZyqxIXX2EjOLLXBhXjkrWL/PGF75lCtrNcHHIhsO0g6PTjvnI8ZiyNsJexOCJrg0tIu1R vh+Rp83tMi3RrMAAFiJQbYSZsigynGW3jDYj7dQyxrVwFLVzEnFm7Gi+U7sd90ehGCVKWc/jQ0an X/WBjNzpT1tCymQQZCrwFRghxoXhZVxlBHieFd0zBg6kkHkxBoy7AwHw5QAD2IroEUfJOJZ85MVl +GVbj/5iMAWBMijyy2FoDyPHSQyP6ZtUrcDUgQ2cDLl2ipD+IqvkauPGjakzytbvjKn+ZqQdY0gm qq98OvRAsA1fBr5IHRwlnZyPtMlpUjJyGZiy6BMMOU8HfzhpDL90r4K7aeU6nIHjwAMZLSKHgkxt M3IlCCFrdFa/IfXLdOk1TLXXd46TrCP8smGyas9zHvgTpG0IR+5vQ6h0ifzK3I3okBNZr9EmjqYO WslCJ/yihw4mEoAg/QsPTpKjFzz6rOMXJxSRl/Sv5+iboAOe1Ydkh3MTCOMtzpXOAFWQQI61XX9o A35gO4tgpN1I0iAQqYzb9cKwymDDBIL6WoADR7rmOfKOL8EFHmt0rt5dq58r5oABTriqc3WoDi6F qeGrxQDH0VR53qOEDHhFUBwsRdfRfigE8o5OpUSGoURXshbXKRMimMqiULMOC8BDkTYOh0MJV2XZ yjKUiXwqfxYxhrIqToijJ/BF6qzhFjhqBwWmyMUP585RLZSGmQMDPnQ6ytI/ol8YqROe2srwqlfm WMOJ+tk1fGln9REMxgm+7g8xruddG3+HkWC49THjqI4iyqj/GJHCp+6NfzqmTpbB+AgMawQA75wu A3ZSZEtOeGJgHBoxjUxD6C/y7PQwxoQhF3gIMsroMJJDQzEuv8PyYVB9Obw+/h3vDJVsEuayt5It DkamZLTF6EFl9+Nl1N+MmukfBHsyAH+ZnL4lA/rd6VRGk5D7+tDQ5LCvZE36gjOH5aaYAxySd5Q3 TsoZtt1z8OMUGWH3ODgyKfCUWSH80rchD+Nl19+G9U25DImu6Ct1wI9zqbK1lUMW3Ojr8WkBMlhD s/hlh4pf94pfzsN37wuOjA6wQ+RGRqkv9ZUTwmAznJoY8uq7ALHsib/ppDKL4DTU6bo+6dOzaFzf 8M7B0glEpzwrQPW9bCucZvGaL8cv76oDsWmCMgErGq+brTHNJ6mBD/zZaMGQevGkXn0mkJ4kS1nw Gvu1YnPAjLXzhBk9Smy4gzDLUEVfsgXGgvD7EV1OI0IuSyOoDAtD5R2ZAKV3HRm61VGGaggTR6vz 3DfUbQ5KNGf4RJYigzSMJZsRvXvHsWYMl2FQ95z8YthHGd4TQDBQImNKYCiTIdQWQ1wMPKOgbkqp HtEigWHI8D2J1HdSOABBhHpkIbJn2FHiMgS+i7YNqXMihsxkoDIUAYGotYR+vB4OQmajXZy9tlAs OBohYJD1F361SaYqo+HoZHnmnmS26pahcz5GNBgWw874ZRTxLOqHp6P+GBnZ8uaYwzZ8pn3KV65M BwmMZKWGK40iiOQ5XTgb2pTdy4SG+HHMRlJk5ONGcrzt5Ma8EwOjfrgZBmOAN0SmQjbU6Tnt41Cn Eb5MUTDaeDOiw5HhwdRKHXlouJIMcOiyK/dgoO2MjAAR3q7TFQaL7MFk2M4hH/ra0LDRELx6t9ZH kHs8cDbaShc4gWlEj2S0+kngQScFHutjdAO/nB6Dp8/1lXZ6Vp01zO7YQG1nYF2DjVEv+gBf8kXm lEdmyKa20XfBg3oNd+KF/MKKcyT/RhsEmt5jfDkgQ894MHoGe/xOC5ZgTG+N7Ohn8k932AQ6Sufo JOMPSzZAHXggz+yDaZ6SLUP65FdfccDKozucI2dqXlz/4VdQqB/ZASNb+pytMpwuwHDesn7TRu+S czoyjfAs+MULR4UHtgbesGALZIqC6XXr1s3roIxQar82GLbWdt/ZEfIPE7ybTxZEwoJNN0okwPJs BSyTeDaszT7oA/rP5sCcbOkT/U5m9Ds5IxdsCRsEW/XRHSNq5ENCwk6zQ9q8vdCKOWAOh1Ez5MeI MwQidMrHCVJoBo+xJvSzDB4HTGAIrmHQigYJA6NP6Ck/QRdhqdtQpvuE3t+GgaseRoEQURjDWIRE VEUIlE8hCAaBIHTaIBqm6K4TTsLACGoDQ8JoGDImsCJGdWoT4eLoKD4hn2ZYlU34OCBDvsqWkTDK +FUW5VM/o0h5td0QuvINh3peOyo6HxdSETOhJ9iUFI6MBIPDiGq3AEBZDIa2qQNfjDAjYB4GjhyB NjEcjBue4O2eNqtD4KIeQ5ucAacneOGgZA3wrqE3xp2ium+oU90MLbwYHEO86hqSzNXCDP00H8GX 0ZBF+W87cIIr/rRLvQJD9wRds8h7gi+yw5EwKrDXR8plgGFGvsg9wwNbeDPMPgUq8CvZYuTIuWfJ 7jQ5gS2Z5KBgJkjS/3CEsb4QEJE1Uz7Km0aCQzqDN/LsP9TAgiPQJv0FE/2qHuXji+EVwGmHKQ0Y eodO60Pl6D/BDnxkPsplPL1TekhnPa888qB8cq9d+Car7IOgkqMjq/DFL4xML5EhbZ1E9FogoJ2l t/jyjnLIKN4Ed+RckEvf1I1HdejDIjrAdpFftqjsjL7TPnag+NUOZWm/59kFdeOVXNMv+siukBFy 5/o0wq92wIT9kUHDRBvZOOVqFyesHvzMInLIWZNTTk7f6AuYkOOyO+RNWzxD5gR2dJ3O1ZTeeD3k GO7egztM6AdZgSucYEfmyAPeyYpnYQBnNklw7Tl/e4aMuE73thdqJ2FtLz25HbZDVrw5MkaZmSyK oS+SLRkqFLFTykYNgYZAQ2CtITA9PF5rLWn8bncIiJxl8+bNZHlDkkEYdpuW7Q+fbd8bAg2BhsBq RKBlwKuxVxpPDYGGQEOgIbDdIzB90mG7b3prYEOgIdAQaAg0BLYdAmvCAVs4Y1m6eb9JZOGJ1YoW FTSai4AVv1aQL5QsMrGa24rnRiuPgIUvVoyb47a4ZjFkgZRVyBaQLYWsSK094LPKMQ1gW4gFWNuC LAqzwtoin+Ui+Fmhuy1IO6yUx4OFc9uaLJokB9O2M9piadX8+P7dbc23BXF8wFqkNeGAAWtJfO2x HQfa6rlJq/7s/SRUy0G2/1gxuNbICnF7RheqNOZUGWQ/q5msrLddaq2TVayMB8O2kINUhu3VV4x3 HSoyvLeY77X6dPiOAMwCtyFxGLbhOPhmpUndDqUZEpwc1DBthfjw2YV+n9T2hb671Oc2xV5p7RRA jbd1qWVvyfv611bOacEAeZu1qn5L6qx31LkhtgPaX2w3yVAXBF4HHHBArnp3GMnwRDXbRu2QsMvF Sn0r8QWInnNugB0d9qYLdFcjrdg2JI3lMEX39i1yAJbNI3u8RNK2N/gU/dvGQBlsMbAZ2wpYGa3t GrWVgQIqC9mSgOwT5Ggtb699iq6fFHtqHTloWbul7ISr9vPZ+uGevWq2PlhWjyyJtwdVts3ZWgTk nq0CjL06avuBRUD4loVol5W6nL0tAJ7BU2Xk9iD7blsDHJzMI9Jk5GwfmU+oLduHo/1ztgnYhsKx 2gdJ4GSsRgnUXcbJ6mHZApzwTzhtLZhGcMQTbGBiS4OtCrIee3nxzEjYDlD82h6kbbYnwMtqZP1m T6VtF/DR1/rWnkPG254+IxnKsw3DVgVkb6n22HJgywVZsEXEOxTKnkJ9QR68J2uxF1KbbS9ycIT2 ucew2RvpGFJtqQNZprV92nXy5oAJ7dc+8mGLBhKgcH728ep/xgnetoXh3z24aLstb9qt78mvvqst VbZf2MZCFm2/KhlVh/aTR5+w9SwySmEBmnLIGj1S5yTCH1zhgk+GyB5XZehL+NriZz8sbJEMCD94 hS8HUQdzwEC7lEtXbe+aJVfKUyd9I78CZfyqg0wztIwouSMz5Fd/2+Ntu5cAhQ5XP5IpOOoTW2Tw bDuTfaLe1+cCBFt2vEPW1KNv3CNXdAg5RY+NsgWvsHVdu7xDhsr+uA4He2ZhYzuQ+pVPNsk8/YcN TPXpLFxkvs4QsPWJjLBdZEjbtIUuCjL1EfvFQZFF/LAH+pQ+2N4zifBDR8gp3WZn2SDlkRkYkSGy CTd1sCu2D+HJdRjTHdt+2Dn9ZOuQrWsIr67BkHzTffJQ9oHd0Q7bMrWXDNp6N4lsadJfbIpgVDtr W1bpiP6w9Ywt8zxdc1iHPnG+BPkix+SLzLHf9kqzjfRo1uEh5IwNqoBWG/Gz0rSiGbC9ojpJpzn6 jXFFOhSYBx54YBoCHUaxGRorXnWSayIbgoB0ns5hRBzLSDiR5wDuIIlh1EQJdBAhZHDslUMcs3oZ QJ2FL84Kn64zLPbECQIciYcYegaCEOvIihDtS9P5iLFgZChkGQx7km2et3GcEiB7V+0TrQNJnHyl 7llE+AmkOpwzCyvt5tQczwYT7efsEOMlYGDsRLQc/SxjgDd7RmFDcAUP9TwBpsz2MjIu+kcwY2jb wRgUWhDgEAj9zcDBBI8UmnFyHb9GMSiO4/O0GY+URH0M3r777pv1OljD+57V1wwsx+QQA8O0eGRQ yYD+YCg4S+SUKO2Ar75kdLeEGCnHCXJO9oZrU51vLGvh5B1vqL/JqU9t8hx8OCxyx/jgXdRumqTa XWdRF28MwJAYA+cGcw6crxPBOE1tV58+0z4GjvGcRYJDPJBh/cAY2s+JGHAOb5jVMlgMKhwLX/2E tI2+cD70QtmzSFmyEE7PwRz6h1PAB32nf5wl3GooWN+SeTIGQ+1EMCLL+p1RdhgKHSQn5Mw9OmLK hYNERq7Ij73o9HY4WsC5sCnjUzTqVo7AXzamDxF5J2fklA7ji7wz2mwPXukkfYHRNIKhgI4swwdf 7BvauHFjOgL6hg+6oI0Cfn0mS4Qb/ujdNCIT9M17TmSjT2yBIEIbOE12WTvGR5Loq2fJKmyR4ADm 43IrKFc+XYcjG4jYbft4lUFO2LlZDk3Az+7XfvqyP8pSNx1wz6d+qeuCUAkTrOAv4WD3yJuEiZ0X DOkfuE8jskWu2FJnMTged2vQim5DYiQAQzEIkU+dLuISWXN0zm0ucsoNQ7P//vvnJQ4S4IhAcT4i LAKoXGATEJvCZYFDI8ahUBAHRww301NuhqycKAGhLDq1skn1yUZEcIiiCx6cfDTci4oXRkLUbpN5 nUaDVwrvb22qk1sIgejWPXXCxOk6soF6Jisc/JKB4otAEyAKROgIGAwdBmE/LKERcDDYInvRssDE AQN1/F1FlIPi86vIkYPXPsTgqFddImKYMTT4dsoSXES+DFId8edTGYwaLOHKiMhwOTPZv8gaL9oO UwLPADGe+pnxUi9Hz0AYHYBxHa7CeMJCtmdYSZAkwBmSgADuDA7lK/6Gzyzku2yGcYENYnQZcn0m EOMwyB/8BXeMrixGMEAeYKVdjCzDoq8Mn+JPFO9MX45pmHkN+SLPymEgEcerfnKoHgYN0QM8TSO4 0yMGTn2wxI/DMhAd5BhLH1zTZwIf2I7jqy7vOsmJ7lXQ571JxKly/Jy5HzIsuIAPTJwEpSwyTV8d 3uMfG2ingAteRWSK4xcUMrLkgY2RCeprWJMZBpccIZmMbFGgoN36sUjd8B0aZnUok77Bn7wZYdFP eNFefaEO8swpyGBhq37nI+PdM9NIuWwW5w8Hh1wgGSp7YOSBPXDPD31QH32CuSB+PsIr/jhBegVL P2wQRygAYI/ppgCsSP8KkMkJXS1ib8itviviJNlzGSl51jecIdIGz8MFqasy57ww4Rfsh31hJEK/ 1qiQe54pYjME72wRm6LfOGG84o3dYssEFOQZ7tNIAK2f2VDv8BH8yTSbOa2cxV5fMQdMcBkcwr8u DlCo4yGLQQZhqFyui9YISBHFqgjM834QARqP+oHr/SERrorcffeM90TcFMXfDLQOE4ESPkrkGfXW cKMy/z979x1syVPVAfwCP0MZypwVHwYw5xzwCUYkiKKWmFZUxKwoCMYHJkTMYsKwmDGCYiasYg5g trRU1lRa/mH5B8V/1Nifhu/SO7+ZueHduy9sn6r77twJ3adPPme6+7mWLMu3ewgExgFMc9ziBf+x Y/WbU+QcCRMhzRhrQ6M/FFLZjWHXPkFPdEg4MmZt+G1MjA8HBBg2/cg45sBzGYd7CLKxM3KeRRsO 2LjR0TFeENgAZXDedX2HDvjpPLx8Qt8ItvtEuAIHGSWaMsKhDxwyXvelXf20ODsmF2TKJu5w5Txl kYKRgNI3HLK3cc6Pv+HsPu041jaaGANaolFAAAU3uIfu8EE3dHKe/NAJ4Fl0DQ2cM8bw0m/jZnTt AgU4ScZOQNSOWx/uXQIOWObCGRs/WUHfADxC15ybo6++0ALAd13fxiVQEaDqh+xzWgAtM2ZtoklA /9FdtNMOHPEidPNs5BqfAoxnbIVgIv+8wXaYMkzBTUBbudc5mbMAjiNhgO1QlT7IJ6eNx4y+zFFV wzjci8/wM44xPdNf++25jMV5/WgDT9mJyB/ZAu4f28x6YeaP+9kC7WYM6KwKwRlysMbRBlHwRiO0 Uj0S7AXwoMU358NDeEYeZMTe3aKVgF2C0CZIebb99nzwdJ7ecuASNuAa+gYEvYJ4PABXSnVAsOHd L1zZFEkCeW/bzfPtt0oPW0VPlNKzRWt7zyGOD/oOmOOQSWCm9xYMkGgP02UHIi/RoqgVkUQ7ynsY J7NUXpOJMvRq/YSSMiMO4DxFWldLOVAfoizMZrgICkOnJKKMKDJiwGx7lywY8+CoXIhZsgD3i8Qx QuQlugXXS/QuihZ1KznZPo7jdk4kS4iVvSkpQVIadg5OhE87zjMqxka5lOGNn1GaExACjA7aUboz FuUnCoQmaAp35SbZkMiaoCvtGQf6iCRVAdqAog7qZX8YY32ghfKkKJdTYXzgiyeiSGVu7Yh4BRcU Gb09y9kp+6KZUhQDhudwFvDIdPGJAVPelMVSIFkznpAHeKeER05klsrprlMO5UQGlbxQRP0ymHiA lxyNLfrgLxrHT/c7Dxg28kSGOLQl4CRkwPoXFZMHfZItsmrsDD0jgR8qNwwR443vPt4VyuDhQObR lvxQdmVkxs19/rED+SVj+OzdO/zRhAFlCNHRebRg+AVm5E0fjKbMjsGdAq98VDcYVoEcesim8MRr FnJI5/AyVQxj5azxkMNS/iTzZIEMCmC9NoC/IAFNpkDWSR7Q0tjIGBlR6kNDONBj7bIV2mXEyRva 6l8/8CXPZBDd6DZ5IFsyabw2HwGe+kATvFZKVAJFT+PDe3sdux9PZej69dFWeAhXdkLAgxbknjNA J/QkE2SZ7fBqwjnBLrzdj8+CjjmeSEzYEfjKcOmDkil+G5cMWoWH3aCH8CQn7tU3B5dS7BTdyYUq DVo5xge6grbskLGh57WSORo7mdCnPmTKbLFgn831CgZtyTa5wzM2mT2lH8ZqS1gyzg7gIT2hh8ao X/erbMZBj3FWJWHXtQUPMqPSaVtelTg0MQ42TrJDr9g1rw05W5UMFSK/yQae+I3+KgHuWQK6rDrJ J6F1eEImDgkH3YhDmQPDZEcEgLBhJgFi4BPxMiyJqjHKMxwShWfcEJSwONYOwlN45TNExjBRrKiZ AsUBIxzjBQ/RP+UDDDFD737nCX8AIymR8z4BuDKgntUvBwQ4VxETh6g9AksZOQ9jcI4xTxTnGdcI EiWCa8bu2hQYO5oROoB2+mMIjZtDIjDAPYwPw6WMq304UtY5B+w5bTLocEcnzxJcbaE33nHUbUSM 7pQEL/AqkXDoi0aUHWiHkFNszhQvOXcK4lzKq0p95AEejCA8yA8FQjMlbvcDfMVfRpBc6Yth1Q+l 5UwYlkTtjA0jgDaM3SZgfJyHzIPBCVBUNMfbtg9lREaEgyEzeIueHLTgwNg94zpgeAQPDJOgDC3R HV2M3fhcMz5OBNARwQt+kiF9eibjrDeN/pBdvCNLAkfjx3OyqC8fxp8sxbBrl2zjlfbJGocETzqA 1rJxTmLOAUPDPfDFb7pGr+iFtugIByoQFYBpVz8yQbpI9+kO2cMHHzaAPJFJuDKScMJfMkjuBKZo hk8cBnlIoE2W0BD/9K8vvKI7xmpc8NEv2uOZtpSlteOD9oIh+DmPp2RXv+iLr9pD1ynQN0eiX/2j b0qt+hYsaEfgAYyVvk3xaap9MmXcdAef0QV/9YdenIxjCQO9QlP0hzebgVdwxFf85UTpNXrgHfnB RzbIvfgGR/fQk7xa0bcPvfNqbM7WoaPgJjbTmKILaAoXfRsDG6s/+k9+tQ8ngRXea8v9aEWW0Had A9afRApv0VzbaHahHbBBdegUOC8UkOkJZEysuZXASJjrwED4ljl16BS47BQQvKkocogCdHN4OtxM gYNmwDd31X91CtyeFBBNyzJE6bLh9v3r7UmRPurbgQIcr4qLKo3XMB3uTIHugO9Mk36mU6BToFOg U6BT4OAUOOg64INjv0EH3q9cdvDupsPFoMC2vCK/t4MMXwzudSw7BfZLgUvhgNtlGWPyZBbk+Pw2 v01mMJ3dTFITAg4NZp2aRa1kuQ5MzLDEy0SEiwx4uI1zMpPaWlgzLzcFk0VM4jgrMLnGxgrjcRr7 nJM1M9Rs5EOC8rhZoydllrQJiPsGE6TQvgV6pD8lyn0AGpqFTA+UPvW5DuC0yX3r2tnluglQS3Zr lzb7MxePAhfeATNmj3nMY2YVydIYMztPA2bdmVpvdushDNQYN7PwTMM3S3IdmOlr3ZvZfhcZrNfd hrZmWpoJaenApmD5jtmcZwXe/doObzwzlvyOHVRwtETHLNRDgk1RzC631Mbs4n0DvbG8pQWzYc3O N/N1H2CZjAlulpfZSMLM/XXgGbidBZjhnvWrZ9F/7/N8UOCOQ6EhsrVLiSntZoFyFI94xCPqUgDT 0a0XMzVdJmPquzWtpt17xtIPmYqF4p4H2qAwItyjo6O6dtb6V9mBJRbWvJnGn401ZBTWFlpSYKu0 Fjg3a0c57xhFU9UZA+uFLTuwFEb/psWbjs4pWnowl6m07Tu2PtI6VU7UekRZqs0CZDSm6Juyb2q8 zUosfYCLNXPGacmLJRPrwFID6zgtIRAgAPhZE5yMwLR6mYblCMD6XPTnsI3HelRT9+2ug/6CFVml pSEyTLTguCwJwsPMIJYxieKBJQmWe1jXqQ1LvKwZlMHjkbFrx9j1xTj6VlWAh/WClqkIdIzFchnL VYzFWlDLUbRlw/UsyzAeMyvJ0SagfcusTIiyxMM48Rh9rJkmZ/iCPvh1pSzqtz6S47BkhbMnRxyU 3aHw1ZIL7amMmFxFZuFraYbMCl3QngxZcmNGaLs0xQYT1qiSX2uDycHx8XHlizFZByprbnckcv5a WW5DtvTHacJV9qdqYqmSJRiW56Av2Z0Dz2T9LbzgnPXR0QVyRBZk7tqyflUQY/cquqcN22zOySu5 ECTRQ/JjjIJiS0ospbO205IYAQB8LSVDF3SHg9/WdrbL+KbGY4atteNwgSPdMh4yScbIr9+cHjzQ XN9sj49JQpYVAfKmCgUPM9bRV3vWDZMF63td1y49YHvIkTX7KlKqbpl0ZL0tHtMVu1rZmY/MWONN T9gh64btqDa3RGdqvP3c5aDAwTJgBpIhshEE50CRGW+CaN2kMhHDx4D4zxUUEjAgD37wg6uB5JwA 5WH8CKm1lBw0IwS0y1ATfs455T1ZhmzDdQYpYGo8o0ip7PUrAIAnoOwUzi5JNiywBrOFtN2emztm zBkzOFisnrWezqOJYATODDZgbC2TsTMWJWd4Ge4lYLQ4N8+lXG3cnAFnbhE7PljEDmxQwLDZ6s8i e0ZA+VE/NteAgzXYtvHkBI2XYWNoZKicIkPMiOIfAypzk8lw5vBgaG37pg0G1baNV8sGHIIjBpAj tNAfT2wuAV900JcAhWNLmdg1Dt0ifw6QPOSa8WhvU9C2+xlVTiP04vRthMIw45HxZbchhpHDRys8 Y7SBtYEMsA0SrOfNnuHG5LzAhXzpKzLjPsbXJiyByG2+OfQENe4xbmt726ydTJJfgZMtGTkv+/Za M6kdekHPLLdq+0qf7Te+oiuHhLf4iebW2pIRDgMP/aarQHCibY7OjmW2pVxaY4lfaG9ceNtm+vih FA1fATtnBTg18m+caEBPydgSoBMbQpZ9jANeZuAKFPw3HeeTic/Jg/Xo+McmCUrRV1IA4OK3YIle CyT0g24cKf6qzKANwAsBgO0gtalvwSaZQAffbBb5x7sOtx8Fli38KeghmjsqmSrlouScEeWlzM7L gGTAlDygBMlJMCaUk2ACC6SV4ezyBDhNyiwbYYhkNrIEBqUFTkE/lCSQnVpkGkAUyjhQAMolO6O0 nhHV7gKMO2Pi3TFnBRgajpGxMw7jEWhwSIBiyhApsCBAFN46m3rT6I+Awf1ZwJ/LNgXgVGR4nEgM ApxsCJFIXyCDZowX3GQZjA5DBWzEwOC7h1GED764X6YKT3RSRUBDkb3x4A1HFLoynnglKxNw6Yfx SsmZ4YIbXsIjYEMN8iDz0hajhbbBL/dt8k32yAmnEd57Dl76hJfAoIXsxgNvY4484KFKi6yZrNrv G3CyxsZ54Y11v54DeGTjAucDeCOAEojI7sd8JLtoO5ZfY7CBAqBfggdlVxm3TBYO9Eo2tgT6RxeB mN2skoEJNDhkPAIcvWBOQCEgolcCleCw1IdghpxrE44tcEAcWeSBvgB8QnPOC/04UgGfc0swdmKe xSvBJRukL9UfIFtWpVJFafeHFoDqS4WBzJF5cg2Oit2yCQwdwZeATWOOiz1BD7qXjfzJD0ev8gE3 cmuM+Kdc7hjfO9y+FDiYA0ZS0R2DTPjtPsSAygAB5WC8WlD+Y6Ce9KQn1SzXHq5AFne1ZFHa84yd ZxhOBodDcF7WKCNU8mJQXQeUvDVgFIhRp1gUQpmLoYOPPhhDCiUT9WwLlMh960B5mUMVAVPA9j2T NltDkfYYX86OQ5WRc06bOBrt+aQduGk/ffjO+BkQTlfm5rx+lBfRVBscXZvN4AWjpyJgJyB09u5K phHjhP4APbWJBzJEvMMDARdDD9qxwyl4uca4c7h4h34qIUp3gDwozQuO2meMOeOsN675A8c4JWVH sqh0Cq+x8xNEyHzggAZKru4D+ky/voOTQOPe9753/chmvZvnqJNRt+MPqgk0yS8+kF/ynoqQZ9K+ Z8gvnCK/HAaHCNr2PdM+V2+Y+KMdn/DRLYIr1YDoG/lVKYhOkcul0va4G3jhLfAqAm2MEYSOLb5k iJPiMMmFKg0dXQdT8tDyyvOtnrTyQE4FIAIMeuKffQg8Wz00DnwZB/ptH608aAvvvaIwvuvXr1cH DQ/6g+dAlY4zzu5oZEBQZetLr3A6XF4KHHQvaM6MMVWGVA4z2YMzZlD95gBkoIw7Y0iwlXe8m1GC YuwZb6VnhtM7GI5Nu7ILAs4oEF57xPqXat7bieq9c+MEOH5tcYayA9mfMjTjCi/Gxf2cOSMvcxO5 yr6Vo/TNMSrFcdbu0bbIOQZpLB7GoQ342OOXglFkpXd4wlF24d2RtpXo0cA7PNm9Poyd4V+agKO0 rKylJMixMlQyOe/KBT6yIGNEM45BViwD8I5XiV252D0cB4OjhCpTYYyUXhkbOHgHDCfPyQ6831J2 lY26joYMDccgI+MovfeTyeAVw6KqgO+yakbFe1T4oi96MW74KzgiEzIU2YsSPXlAezJAHvDRnAEB Ex7BmUFrtw4d88RvBtZY0BheMhZtZt9szgyv0JyTEejpAy85I3RGQ+V9fEU7cqyt45IBuUdGQx7J nTEL5Bj9k1JO9Zw20IvxzRZ5jtEDzYxTH2QET9wb+RUsqTpo23tOFRvGOq9q8ISjg4txeteNvgmA xjTRrwlgeEt+9IM3HDCZIKvkiO6gEV57FYEedADd6VOb1Y/78FsVyNh8zA0Q4HJyKjPBN/M1ZKvG KWukG/fu3/gAAEAASURBVMrHytPGtOT00c/8DTKNZtrnyM2HYGfwyp7SeMy5CygEXeik+kIm8AN9 0UG/xu28YEGQoxKgbXhpkz6TE/2mukLXyIR2yHB0wOsZdJPta0vf6AcneiVQp7uAHqI3fHw6XF4K HHQjDuVO7z9Er5Q0CkTxGVwfEaOyTZwZA83Ii/RlzAwrZQGcmMxEhpUMIazhsECyAc9qh4KkLwY9 /YhGORDOIVGxvhg09zESSo5wE4Vry7OiZve7J88Fh/abQunD2I1bCVq2pR1jZpSMBW6O4cmAcwgM oIzEfakYtG3nWDYBN3i5H03gqy94alcg4RqFT+RujHBHY4AO2oKDe91n/AE4o722GTVt68P9nBqn pX3jyXMyKLgZi/GjrWf0i5/aBGgSOjL6+IaH2gZkxQeu2oOfcTnnODjLHuGwDuDggy/GiU9wkfkb F1wjb3iDVsZk7OTBsQwueLT01Ya2XUdTgYpz+OhZNAi+9ME4AujrekrO8NKW+z3vGhwi9zJ49KAL +pijrz5cnwLPwMt1Y9eXPpI5k0Xvy1UlOHF4oDtwv/vowVz7bZ9wNUb89gm+2oBj9MI17ZEDMoSv ZGgdkF80D321A2fno2P4ol/8jR3Qr3tUXNpAhe7iAX6QcW2gFVk1djgaO/y14Rxd9Qw84J32BEJo x5FHB41Hm/iofQlAC3gPz+hGe60fXx4KHMwByx6832LolO+8Q+rQKdAp0CnQKdAp0CnwUgoczAGL eBNxivaXMrnOjE6BToFOgU6BToHbjQIHc8C3GyH7eDsFOgU6BToFOgW2ocBdt7m539sp0CnQKdAp 0CnQKbAfCnQHvB869lY6BToFOgU6BToFtqJAd8Bbkavf3CnQKdAp0CnQKbAfCnQHvB869lY6BToF OgU6BToFtqJAd8Bbkavf3CnQKdAp0CnQKbAfCnQHvB869lY6BToFOgU6BToFtqJAd8Bbkavf3CnQ KdAp0CnQKbAfCnQHvB869lY6BToFOgU6BToFtqJAd8Bbkavf3CnQKdAp0CnQKbAfCnQHvB869lY6 BToFOgU6BToFtqJAd8Bbkavf3CnQKdAp0CnQKbAfCnQHvB869lY6BToFOgU6BToFtqLAmThg/1PU //s8T+D/efp/n74vOhiD/+VqPP7n6BT4373+97L/U7oE+T+u/j/pFPgH8/oK4Ov//M//1P+7mnP9 ++UUQE//99j/jF0CfHOfz1gm8QLNb7UOkRUy4/8/HxKM97/+678W5Xeuf/+n+b//+7/X0nfu+dv9 PJuB9uvkc1c6+X/J7P86u7NJ++Rwzi5t8vx5uOdgDpiBf9rTnrZ66lOfuvqpn/qp1dWrV1e/8Ru/ UQ3z133d162+9Vu/9czG759t/9Vf/dVN/RO8T/qkT1r9/u///k3nL+IPBujxj3/86iEPecjKWKfg uc997urBD37w7PU88w//8A+rr/mar1k99KEPrf+cPefzja/aCvzN3/zN6hM+4RNWf/7nf55Tp/r+ u7/7u5V/aH7egJz4Z/XbwB/+4R+uPvVTP3X1pV/6patnPvOZi49yrnTE/9H+vd/7vZvu/Zmf+ZnV Ix7xiNW3fdu33XT+0D8YZbr71V/91QftioH++q//+tXHfMzHrP7xH/9xq744j8/4jM+otmerB/vN lQI//MM/vPr0T//01U/+5E8ehCLsycd+7MfWwPK0HTzvec+r+nGoYOG0+G3y/N1OCmxy47b3/MEf /MHqu7/7u1ev+7qvu/q+7/u+1du+7duufuRHfmT1cR/3catXeZVXWf3FX/zF6p73vOfq//7v/1av 9VqvdaP5l7zkJau//du/rdHv673e663ucpe73Lg2dSCS+s///M/VP/3TP63uuOOO1au+6qvW2/79 3/+9PvuKr/iKqxe+8IU1E9QvEAhg3vHxcf3tz6u92qutOI9Xf/VXr+fuete7Vjxzg4Di7//+72tk +Bqv8Rr19Itf/OLqwDwrs2Es9KFPGQznIYMRlTuvzSnQzn/8x3/UjEb/BOpf//Vfb/z2DMFlXF77 tV97dbe73a1ekwX5P8v+77Ln4eGac/e///2rY3y3d3u31Ru+4Rve1K223+Ed3qE6yXd5l3dZvcEb vMFN19sfrmnrF3/xF1cf8REfUfvIdX2+1Vu91eq93/u9V6/0Sq9UT7/Jm7xJ5Z9v/Pu3f/u3itMr v/Ir1+t4xaGiUfiR9qa+OXjjfI/3eI87XcZX7Ru39tYBWTF29zLy+OL4X/7lX1av8AqvUPGU0Yf3 eOh+1/1P64xBP1/5lV+5esd3fMfV67/+69/UrT7wXRWA7Ed+8Yiq3fve91597ud+bqW/fsgpOsDl egmW0BFOPh/6oR9aZdf43v7t3/5GP+/5nu9ZaSvIud/97lfPkyFtcdzuR7P//d//rfpAJubgRS96 UeWHALTF1/3wCb2MCw3e6I3eaEW39as/QchrvuZr1vHKbvx2Hu9bwHM40XX4yKQFiuhuzHB13bXX eZ3XWX3UR31UDYbf7u3ebvWmb/qmbVNVvugVfFudck57Ptp73/d93/oc2mgbnckf2roHzem8LGqM 700dlh/ow1aRec+TOzSJDBuPMbID6AG0ix7OsU/RXbYEHvTc86EjvrXjqY287I9+XUNjshUblHv0 DSd9G1uAzfjnf/7nahv1BWf9obnx+MTmeeYDPuAD6j3w+8AP/MA0U7+jC9ppdeGmm8oPOOpDhsoW qWh41m82/7d+67dW7/RO71RlQN8tvmQitjy0Hbef30dHR6tf+IVfWL3/+79/5Uvo67o+2Qf96gPP 8AFeZN45x+wAmUMPz5AH59bJQ3A47fcdp21g7nlM+LAP+7Aaqf/1X//16ou/+ItXjBsiYB4mOOaI v+qrvqoqHKX5si/7sipchJPxesITnnCT0R/3p22ZAIHU/nd8x3dUZy97QGSG8lu+5VtWlFA2/qxn PWv1vd/7vdVpMTAcyGMf+9jKBILw5Cc/eXWPe9yjMu7HfuzHVne/+92rIXjiE5+4evM3f/NqNN7n fd5n9chHPrIK/Jd/+ZdXB8f5Y/anfMqn1CBDmxjq/K/+6q+ufvZnf3bFmEwBQRGYfNZnfdbqS77k S6rS+iYE3/M937N69KMfXfFlANHo27/926swP+xhD1t9//d/f1V0NITTAx7wgBtd6DsOwEkG4VGP elRVfEIn0CGY68C92mqBIv/SL/3S6ud+7ucqjT/8wz/8xmX3Up5v/MZvXP3pn/5pzZre7/3eb/Xj P/7jq1/7tV+rNGUUOKL73Oc+N54bH2hbtkc5ZI/v/u7vvvqCL/iCWkXRNkeHRgzP137t167e9V3f ddzEjd/GTrbIFdzJ3Xd+53dWx/64xz2u8uqN3/iNq7FiuPFVlisjYBjx9gd/8Acrr7/hG76hOiGy xaF88id/8upDPuRDKt/0YeycNwNPbsjhU57ylNUf//EfVx684AUvqLgIjD7ncz5n9fmf//mrt3mb t6n8Oy5BIT4G0L7lYc6jsWsB+H38x3/86iM/8iNr9kjmOWgGahwk5Bl0oDuMHqP+zu/8zjW7dd7z 165dqwadjqlqkDEgyEV72bmPjPjXf/3X6zMMuECU7j/mMY+pxvgrvuIrqlFDB/3oU1Xs53/+56su Cq7gSs5PSpDyoAc9qPYzll+OC19isNkYeNJ9vPzd3/3dii8DjhYAn/GXY6I7HCk5xCO8woMYZNn9 nGN59rOfXeWZveCc0BQexuF5tKGfgvQv/MIvrPYMn8kreyE4YFfYJ0b+0z7t06r8q2SgE/sk60wC UZFv/tDz3/md31m9xVu8RQ2yBB/GDl+yr31jhBv51Bf7RUff7M3erMov+yJwUh2jM+RdgCCQVOWK jvseBwKSqT/5kz+pzwhI8UogOAWc/gMf+MBq07RrbOhDH376p3+66qAKhz7INruMdj/xEz9R5TX4 XrlypVbppvpwzvN4SmZ8c8joSy/Io6QBfQRHkj/yQ47pmqSQrXcfHfesyhR7Al/4oKPvg0JRtoNA MXhDUeyhMHooyjAUgzQURzOUDHcoTnAo5dHa7zOe8Yzh4Q9/eD0uznYoAjL82Z/92VCYPRRDOBQh WsSvRCtDIe5QnOpQjOBQCFvvL2XR4Yu+6IvqcYkeh0/8xE+sxyUKG4owD8URDUVQBs8HnCvOrf4s RnAoilrxLkZtKApYz5dMZihGcijKVX//8i//cv1doqk6thJUDCULGe573/sOP/qjPzoUxzEU5zsU QU83k9+f/dmfPRSHOBQjUJ/55m/+5uE5z3nOUIRyKIJ445knPelJQzHY9XdR9KEYnXpcjFqlw40b y0Fx0EMxQDdOFcUbiiIMJTAY0KQ4tKEY0hvX5w7wDr/wcwxFkYaiVDedLo5pKA650hi9QTEMQwlA hvJaouJkHMUpV/re9HDzA62LAg/F0FRekSlQHMOAJ8UA19948NEf/dGV/vXExJ8SkA3Gb+zl9cNQ MtF67FZ0RwvnjRX/QMmahuI4h6KoVRbJKiAzRZEHMkaGMsbiBIaStQ4l6KifD/qgD6qy5pni+Idi bIcSgNT29QOKgx6uXr1aj0tZekC7ForzGEog0p6qx2Qj8p2L5Lo4lfqzOKoh+Ob61Hcx6nV8xYgP xXlWmtC/EhgNoTcdpF+gOON6rQR6VU/TZnEAg/EW4zUUAz2Uakm9VBzUUF5f5LbaTgk6ql0gn+hH 9otjHIpTqs/nZuf/6I/+KD/rs/pAXzjSsRIUVZzIWzHCA/3TDn6DEhwNv/mbv1lloxjaoZSn63m6 jofPf/7zax+lEjSg/xzgeQmSh2LEq76zayXYHoqzr7zFI3Kib3wGePzBH/zBQwk2q6yWoOSGDtHD 4FgcY9X5ub6dRwf6QgfJvT6Mnf6XbLJ+s0nlFcfALhSnM5QMtuqd50tgUPlLVuFaKgx1LMZDd+hQ oAQCwzd90zflZ322OK0qu+wJ3NnpJSgJV7Xh7NJv//ZvDz/0Qz90w07oL3bLMb0jB/BlR0FJpoaS 2VaezvVDl9li8oYmZEA7wLkf+IEfGEoCM5Qq4FAqnvU8e0r+gOvhgTGVVx5VHkqgXO1BCV7rfYf8 c3Nas0dXnzKM0k8iHVEGKAOqEZpjGWYieSUBEUdhmEv1XYGsZw60UwhXo7Ii6DWyFGUB2WfaLYpw 41jkK2sRNY9LsyI/ES4QQSqH+4i0lUyAbEjkWBi9Ur51XVSZMpmMEl6i6SLUNYuSnRinUu0cKKPI +GQbImolSxliEZAaoeY52YISINB3sgF95jj3ont7TmZQApFKCyXit37rt6645v65b1HquK3c61rb h/Pwwn+RJ9qhucwDji8s2b7sF2+MbwnQWgkLv1peKceRJZkxkPmK5PF8LqMvBrRGvvqVRaQ05rfn ZG4yASBqlinLkGTDyviyYfcBpS5yqhzb4iWrMFbZkrEq3acMikbwNaY2y9Jm6IduyUJqR+UP/Mbn XJvKUrynl5E+/elPryVX2fASGJMs6vM+7/NqllSMfM1I6Cx5jQ6r6hgP0C8dQ79i5GpVwnnjQA90 kZ0lkyP7Xj8FyK+sQ5aDHuaJeL0iCyGPbcZB5tqxo692Q1+vROiNbBxPyQmQcZI7QJe0q6173ete tQrhvEyRrBTn7GetXLV41pPNHzYE3+AjSyIDnveRTcHBHBKvAMg3iB6wF8aKLs4BlQ8ZKbuBx3Be AvJIPvO6yP3ohh5kToVI215VsDOqGioO+gayPrqKHu6TvboOvI5iGwLGCKeAtsiozF1FwXPesy+B Vy3kEM/IAPlJZYcOkC/ADsFHhcr52FG8gge9Dl+n+ottQF98wacSZNRsVjXQ2LQZ3S0Ov1bVVGnI kWoiYFPwN/LATsYeTPW7r3PTLyX31DqiUmqOVSkyzvF6Kf0SUkrCIPtNMLzzIiTKF94BEQJl6jlA bIT0XoGCKf9olxIQvBIlV2elxKHcqkwBMAo+cCuR2epXfuVXKm4ExfOEnUA6hgMDrxxBAJVECSQB 5oT/8i//svZLAZSBgPcqJYKs70yVhwiJdzRLoBSrBIMGSukEhkAyohz5tVIOJPwEhmEHDKQyntIm 5w1/wNnBx29lI88R8pIxVIfu/beSjHfhBG8JGCqG2n0cPzqC8Bb9BQ1wULoxdvxUhlNK5BCU4hhI fBLYKLc7xvN1wMEZO14pGZmQJNhi8Ci4vgU7HOic89WHCWmlIlHvVfLlZCi4cZATvDY+uANyx8Ew BOSUsTNWsgHwpmSYlTalWlFlQdmVHJJdPGIU4gjIJplSag2ttGN8JmQZn9KoPvXBiOAduTFhkLyS a4bM75K5Vd3BZ2VdwDByliVzrJO94tjrxYk/xkrf4AA3v42RcWc4lUThq4RMzgB6452SaMkg6rfS Hnp6Hj3JjOfph+BUQM3Y0RUl+QQGSt4cr9ctnFicED1FD+3pn/zQB/JLH7WJvgymQPW93uu96n2c eakMVDnxrGcYXAGGVxZK5fQAeGVg7CZ6eX3CloS39YbRH+Njq+g4p2Bs5Nd5ssGRcIbkEg/RAV/o IHoYE5zYQsA+GY9Xc5zxOiDb6EhGyAu7ZQxoJhgi/yZVsm34Qc/wn87QWfbLKzTX0ZAdoz9ejXkt py32mVzhMTnAA+Pg1I3PNz06KsEvui9BqVTU9iVQgl/04nTRDk3QgoyjFd1jH+iLV27wxS8BXRzy VF/scOgLT22iNTvEXgk60EL7xoP3eMS/mGgmqUqAwu4CNBTYgSV5qDfs4c/BJmHBDXEZKVEbhaQo iMyIMiSiYczGeMSIAnImjBTimAjQRsXtmBk7Gav3MJhB2SgIxSaA2vXOESNErJiJqaJvypNZ2YhP KBkI0aSoiSASYDhxjgwhIyKr41S1wSh6xpgYWOMkZBQbwxlKBpLgltLUTdF8Ow7HjCfhNEOQYUEr YyP4xuJ9BpwYL+8c9WFcpQxaDQOBZ6BlBAwCY2QyCyPASGhPJsexcOiCAveikfNzQAkFKOhG2OGo LQYb3Y1dm4IGgQr6oBUjCW808Az89EcevMvCJ0pvfEvAAeqXYSUHnC+5IDsMCB6gLyOOh3MAf1G5 8R6X96yCEhkjGRX1CmaMgaGTCRkXeTFGhkIwwXgKvPBHdAwnzptDch4/PM+okV/yoE8yhX/6ZhDQ joziuexMYMfRkHVOQ1todrVMQCODnLhn0FffjDADw/DCmQMlj8Dz14sh8q6ffiwB+WKcjMOY4UKG ZFAyd7zCfwaX4YWL+QzwYFgZNM4RLfDIs9qgiww0PpEVPDR+Y6RLjB/5JYMcH3lmQAVmxkd3vCt0 nfEO3dGXASXb6CujJFd4SwY8Q94ZWPptHPrHH+3CmxOVGaE/HOFFht7yLd+yjhnfpwDu2kQL1TM8 xV9G2ntFTpEtizNnB+DO8aID3nNCcE6mLVg1/s/8zM+c6vKmc2hAJvDa2GWg9AeN4G7sbA0dcJ6j JefsgwAa3U5OTqoOCRLoEh44JitoY3zeG+uHHLNpZMSY8VsQJnhHN8Hm3NwCiGuf3rBX7BD++KA/ 2XXOh60SzOIV3Q6+nvfuHt5zENuC/+jI+bLzbAMeCTLIqIBYn/ogw5w9uZUkuA+w+fTMGMmDMbNX c/Iwh9O25+9SHOHyQtBtW+z3dwqcUwpQQg6LAeOkTKpihC4DMHaCQa8sZEMCkg4vpQDHKChQYRLc qICcJXC8cOJgVCsEHusA7pyDZwQPuwJzL7sUeJp0NDcxdNf2+3PbUWA5RN6urX53p8C5poDsSPYv 8yyTwC6N80V0WYuxybZkDx1eTgGZnAxVNmbW8VmDYACvZMIqFptAsm9O2CumXUF/smQ6AAfl2g5n R4GeAZ8d7XvPnQKdAp0CnQK3MQV6BnwbM78PvVOgU6BToFPg7Chw6R1wJkeExCadZCZvzh3y2/se ExdMMtkU4GfClYkFAZMllIzOG5jI5t3jRQK0NKmmpe8c/iacmJgyNxsfn26lPM3huc/zJop5T54Z 3Ptse5O2TK5ZoqnZ4SaOnRUoIdNpE0t3ATKFviatTQG5NPnPhMbbCUzMxFfvx2+XqUkXxgGbNGN2 6bZghqnJNwGz38z628T45hnfZp6a1bgteMdireU2zpPxsYOO93oB7y/N3D1v4P3aroborMYCZxNx NgmKyInZpXNLEswwNZll03d5+xgzmTYbeR9gRYIxtMABG5MJa2cB8LHjlZnDU2BGMB6eBXD+ZiDT Z6si1oGlbZx1CxywNeb4OAVmr+sHH24nENhYkWB28lkFf7ea3gddhmQwhNSyEwaMQpk2D0Q5tqPk WCxXMRuVUlluYbr+tbL20zIQE0o8S5BNQMhyG8sKPCOStGzB9HxT2GU3ps4TYoJveYnp5O4Hps4z OiZAcMbaNyHBxAbn9clhe9a9rstireu1nMHyA21bQwrgb5kOp9lOgGGQGRJRrmfA0qYirlsu5BlT 4uFmqr9p+KbqMzqWS5lmH+DcLbOShcHZtfRFuWX/lkHAwbIEWR98Qyt0Nl50dJ/7Pee8eyxFMA7r Dy1H4WjRI1P34ao/s26dDzAw8BIw4LflMnAlB2RAe2bt6juA9q5bzgIs11gC2YH1i/DSvn4sObAd ofFqz7IESw4CxhX6ws1yDUsg5oCDJofGZ6lHC2aRkj1LuNDV0hYyQY7IAzqiYfjhPHw58+CrPThn HOhLTkPftr8cM0yMlHFaYiMzjy64Bw1dQ2fyuAR4IKgV3JoN6xltwQ998NQ3eW+XnFh6RXfJDN2d A1kMPmjf0g6Tf+Bu+Q66m1hEZ+maPtALoLVxmDRF79kFy3rQN0tPrKGFJ6Cf+mEnVGSAPgKWxeGR JSjwYBNaec19+UYXm4XQK324H9BB6/DR1XprSxSX2iHzllTqn06HvuwN+0e/jAcEX/ylH5bsWJrZ Lq1zL7qTPW0v8Zfsogn7wZmjkeU6gL0kh36rXrkPfS25wVPBHfllMzxPj9DCdc8ZR6ufrpFhfR6V 5TuB2Hj4omnwZeeMgxzpAz0A/tNJy98sKUWfyw4Hy4AZFjufWOqBgXZ9OSnr0ICSnn10RXjWcsr2 GHpG1ZR8QksBy1Z7NVOlgPZvpkQic9PoCSAQNdl32WJ2yoexyRyVNGSfDFKAs+GktUHxr1y5cqPc ZkMHfcHLxgCECthflPCbOWtMjD5QzhYNE26OzXo+wsUQwMdGBoIGuFP+JSDY1kdyEDYMgGOcvPY5 NPvdtmAXMI6aktrflUADfaIpXPRNmCm2IMEerAwj3PGAYlAotOag0BU9KQ1gcDhmhtl+sI6BNtD3 u77ru6qTqifLH+cYJ4rtGH3ghb9oikba1h9jCKzrdI2zsp7R5gzrAJ20i/9lK9NanZCtkicyJGgh b9Z5AkYIrxkb+9MyMOt4gmb4IFvB0wADYRcvzsE+vuisLcGD/blVSnzIfAIK+BovmsA35UX00x7j ZtMEx0vA6dtYhkzTBfxBW/qGb65xbPZQt6nBEtAXewULGMi1jUoCxk5PBcTtOOxprU8y51lr4ueq SWSEw0Uj8mt/ZgE53QPkkQOmb7IevwFao6cMXLWKITc+wEGQFxWpgCCE7hoDuUZfeAPyarML9LIW n24Z2xzgm/vIlqBJW2QG0DXyAE+6zbEuAVtE/jg0uNk8IwBnYwi+voFxkhkVAHIVgA99p4fsFj1e Au27hy4IJsi8DWPwhD0hG+wNfcMDwcX1EihZk21cjv3nLsdsBP64n01kW8gZoLf6EXRbKkVX9MEp 28AFvmS/xZcM0D92wDIs7QeWeJN7LtP3HYcaDKXxwXyOxA4jFAqBMY9jsEAf2LSBgMk0RIp2beEo OQ7Kad0bxSGwGN6CDRIIkQzEJhYt2DyAI2iNJwGXYVgvKapnGBgUi7ZFnIRBxmxBfd7RMOSEhcMK zvq5WjZKMB7tEToOjHCJ5DxLIAFlWCdYnCunhBaMNNxj2Cwghzelb8F1jl8ky+HLiDhTRtL4ZGfw 8JwMQ/XAOxa05RgdM96UxDeFlzFSojbjY5Q4DLtayTyANvLv4owvgBeeRTMg6jU2vDMO2QSjxsBy SNZlAkYB/UTA2ZClXpj5g3fGhF8MpQX+FuD7pw+yEkZfJYSThCcc7Ihkkwb3k8cY9ZkuKl0ZEQFX eGGsdoHi4GxFyhgz8HDBb4ZINk4e9MO5KXcHX87ReQZO9A/QFx8ZSxtVLAEeWuNLXzidAF0TZHB4 9E1b9MdmI23VJPf7zr+Fw8up3Zg4DfyQ2RgnXtK/ZPsqQoIy48tY2vYjc4ILsgNfdONUAb0RdKEH unJuMj/4M/xkVDDWVo6Oj4+rE46z1o7skY1QMbJDFh4ImPGfrbH7lnZllhxiMjHPjkHwqr3Qlj4I ktgmsgMvMgy3dYD++GpsnFYL5IPcyPIlDPhHb2SclkpxsnQ5gEdkXaVLtYL8LgEbxJ6hncCT3KEN u8JOsHHaF7gH2FjjFMgBvCHrbAm7J+i0WQZdE5ThhWRJoKaaZUzkRRJDv4OvDVTQLsBeoaP+OX5B dGtvct/t8H0wB8zpKSEki6MAR6U8wdBjFEELuI+QMnLO++1YaYISBzw7BRSC4Z0CgsvBBOBDsFJ6 ZCz1DeAcfClxykKuMdZtOcg52aLt3eBpTBw0hyJKTFnFffAjkEtAQWLEPAvH4JLn2jb0xwgQZA7b f70h8CJKtMv4OCNGGE2NL8GIMTtOm4wtxeJoOXB8YGgZEcrHOTMKjKSqQgsMbEC7LW/hkT7dk9KV XXDCT7wzZspIeQUGnBneTQEjJBsQODGmounIibGHjhxPxoefOQ+nKfpO9eWctiND5EAwBX+gRJlr Y3mQxXAMAguy4b8AMVScR8aGxowP+goWGGLjWgfj4IExIy+RmZRGQ+O59siRzxjwlNwCPCP7+tQ+ mcdjPOOQl0rmns+zaQ9PyIlAwoeT4KgC+nAv5yR4tEtT+Jt7yHMLrocnwTfX8R4I5lunluvtN96S jQBZaZ8xlrEdyL1T32hLJscwpu94fOSjxYPt5Bhlx/RdoKsCkTL8uH2/9c2+AePQRxIBNM4+5fWG 8gdPoiN5xjkAn/APv41JcN/i6Rhv9UGmBa/wxVuTygSjdFwmLnCDe15x1E7KH3KLvu3YXSPH9IPs +VwWONg7YIxkSJU3RLjKtxRBdiPiF9kSCIJEMWQnSjwiLlGUZ2QtHFoILprFdFEqIyaSE9F6j8X5 MHSiXsLFmXBKMnACwLGIZhk4DsT7NvfYz1ZpRVTJkHuGIeWEGFYZHzyVv5XFPWMfZdkWvAiV4AJe xmpLQDgr8bhXJK4MT7BE6HPKS9BF6oSX85HJiDZFskpunLqshyAScsGBDcMpMjoouXJGjuGinMlw eNaEERk9oTYutMUb5Vrj46hkQzIaY1E1kN1xvLJySnRcol30pdTG4Rw+KGM6j6ecizZUN/BUGdCx 6B9ulA6fRNnwoIwckAgbnxhc4+eMZK0UegrIEbmRVVJKODC6DLlMm2yoJMBP+UsQQSZkX9pnDPRn m8j2HfG4LyVE96mSwAXdyIlXKugLD7Lg9QHczSsgD77xM/KAh/CiE+6FL8Mo8FBtQCeZL8OKZ9mL doxPfrtHuVgfxgIf8wOUSq9du1ZpjKboIetZAnyCG5m/Wio6ZB0tPQ9H2Qs9JHf0UrYi6MNn7xKV GmXlY4eYPjlQmTlc8MN2m6pNnkFXekF2lYoZdXJG9ukbW0C/ZVi2uyTr+C6TFQjCGY50in0REKig yVjxGU3JyEmpxpAD/OSkydwc0F/6qtR9vVQptCWopQt4xwaxHa6jU5zSXHtkJHbLtzHSXfRt8RWk 0kVVISVr9HCObpE558xDwU/OlONS0keTOSC7dBwOAiX9KiuTEXJDz9hGuqlN171uI1/sFrqTT9vF skmeY0fRhJ1hM9DCNXaBLpAfFS68VXZGa22z7aogcGGT9KU9dg3NVeu8XoGvZ9FJVYw9B2SEXXWO Pl8WOJgDphQMifIKpSVcyh8YJPIiuAwPoy1TEFEzcATdhADPc3CYo2Qh6pJNeFfiPCZQXmVtETJh 5pg871vZjAJxJPpgQBkTmSbHhuGEzzsPzgk4R3Hh6D0QZWVo4KJ8ivmuK6fY85ZgKvMQVo6FYyKY cKH8ytaMLgU2Xv1zBFNgDAy17I4xRzvGhaAyNpSd0wcUxr3ahitnSDj9Nxa/3ec5hhL9lI4oASPJ EKILPOHL+bpH+xSPQunb/qlAHwIR5/FFW9pBCwEGw+g8QHs0QV99UzalKg6XMUFHkbGJOxSWcnFW +hANcyT6khW1WXRtvPnjXoZWtoz+eIW/eGIMvvFNn759jBdu6GvcHDSZMvY5IGuM/HFxCuiKr9rm RBg+8qrUy5GSFbiQN0EeOeOwyDraoxN8fcNXe+SBgzBmwQi+KufOObPgibfwwEf0wyv0IsdoboyC C3K3DgQg6M/QkyFyS8bR+KhkXXCCD77pk+NEY/xFP/sgw2cK8Bg++Ex36TFeoDkdhi/Z1gdc9eM6 Iy9Q16d7BY5kDE703bFAEZAldsD4HeMx/dcnfI3Payq67TdDvuSA9YFvbBPbJTgnzwBd8StOAX7r HDCc6CpnRy/ZQXJJJlp84Uke6AC7RGeisxywfuiqa4Im5Wt0WwIVK05aO+glmE5ygq5oFb1xDz4q TZNTwZ3AGd+A5AOPVEHIgOqbZx2TX7YOfTlsfNQenYAvOsIXHdgZ9CM/eEx+6ALbgb7stjbZCrwI rR3TLbYXDy4L9J2wLgsn+zg6BToFJimgKsHRqxBwqKorlx0SHHJanPC43LzN+AXakieBjG8BQYf9 UGA6HdtP272VToFOgU6BM6eAjMkrEiXRZHRnjtQtQECW6tWBisVpQKarKqUdmXGH/VGgZ8D7o2Vv qVOgU6BToFOgU2BjCrx8ivHGj/QbOwU6BToFOgU6BToFTkuBW+6ATcywdiybMJx2AOueN6vPjN/T gPcpZvOaeWpyzTZgYoFnTVI4DZgMZDID+vkcAg7VbosrWj760Y+uk9ba8+fh2AQds0XNRr6ocCt4 uA/amJxFn0zuO0uwOUY2l1nCw0RSKzfMft4GrKow+59sXWZAF+XudfLnffLVMtveSo0pMMGMfTDJ M+CcmelWTpik1YJZ8ujbrgtvr5/344M5YLPczBA1M9csTbONLTDHJM7I1PVbAWYKmpF3GjAjz4xk 0+y3NRhmilqGYbr9rmDZhh2WvIcxI9Ps113BUhDLPMZg1ucm60/znHvNlraswXKoTfe6NpPYrHQz Hw8B18rSBjMrLcvZ1uiZZWoJhOVetwI4IbOezchGR+/ssuvSLv1rr91xaJc2TvOM2bNXyqYPJjmZ sGO5yRzgv+VElvbsAywLY29MsrJUh/3ZBMzMNcN2HZjZm20l192b65yRti0Z2lQ/8uzUt2VfmURm NrAlWWcNglWbuHCaZpe3G3tM4Wb1AGfqnfwUsNVj+8D+mgVu6ZTJdC2gr1UHeHMR4WDLkKzpEjWa fs752IRANMhoWzZgaziO2FpJS3Cynk1mbP2f86asmxqvLdGnCQCWMshSCLUJFZgzBYSfk5eBmtLP 8APMYhg4UhEVhmcZjQxT2xye52SdlkvA1/IRa04tZ8myC+Nh5C0fEElbjgQnkxZMv89Wfsamf0sh LEFwnvIwEpYHWDYxB/B83OMeV7MFhg19zGyEA4MLX23B11Io+FpDBzf9wMnyAEs5LFdyzpII43Y/ Gos2ZQGcj+UQlMrSlDnawtXz1lXii1mRNvKAnwALr43TchLRaZYGWWKhGmD5A1oARsX6SDuIiWIF K5woOi/1Xx+e+MOgWqpC9vRvWQ2wjjLbQVo3btmD4AgIaNBFdm4JDhqgmQzNelT3obO1jJbqcB7W K7puHSz+G7dqC/my1MtyDWvM9Ul2GPAx4DvDwglZW0kObbZglyP346E1utogJ5ba4JXgB56yDs/R C89aKuJ+y1uMX9CoHfc6z4CRB8ulnNevGcLk0FjIFPrtCsZiGYslTYIZQaN+BHf4LvBDO/g5T7Yt 9bpW+M0W0B3XyTM6qlyRSfQbb8wwxtG6e0veLA3ynGAGb2Rb5Ah9GG88odeWt7AD5A/OcA+QB+3p G5AHNgBO7Ao7YEyWTGVZITqioeBN2/SDHYAP+uObfk4DnI0lb2yLY+NFRzaBLYODcXBggAyE7gI7 /KXvQEAQ+TU+9onukWu8oNfuXbfUybaiaGuNsslu7KHgF7Dx5FO7dF9bcCCnKonsLN7oHxgXe8H2 0DP0A8ZI/ukfXWPjAp5lX9is4+PjnK66wY/YrISesFHaw1NjZIP4B3aPLbKU6izgMGlIGQnmWYuI 4IQF0azvYnQIMcNGUCkAogOGxo5B1mm61163NsfQlswN0zgz69swi7IugTWSlCV7N7vX2rQYU+vy GDwMYsQINEZaB0g4glf6GO8+RPmSyRufTQeUVkR3DAB8KR8jEFz1J1OwKF05xdo8xnsOGB7XY8zt IsMgade6PMYOvoxJ8LXhBGW0nhi9Rc3KOBycvhkSgokHAC0pKMdMOGUmHOgSMLAEn3L5WFdIiSkL I2DvWG1xdO4DHAieMAppn5NQRsJXTpAz0B5Z2AUomXEIiMgWJwwYRLIFP33ZSQtwAPiOTp7j9GJU GU+42paQY2KEgWyLPFreQb49j0cMP4OCJ5w5mWIc0159uPlDJsg2/dA+pw/Qi46QDzKaGbyuwR3t BbZwRV8BF6eif7xkVHwElICsCLY4ADw3JsDQkRXBm75lMdrZFdDQOOiYD5pzVOQULQVDNqDIfzVD M8G1YIvupEqEh/YGYLCNHY7rQNWDPaEnNuUgV+hiMwo8IvfOsQcpf3KgdOJaCQACHAV+Mtg2msBr dAZ0SLCIX2yKihQ+yegENzJwzs/zbQk18p8+dv0OfckMGUBfQMbZH7Jgm8/0bWtJskdOOVWyDmys Al/2ga6yD+QVnfDHvcaPB+teuUmI8E0GCofwCt3tP22tL3rZaOl6CWwAuaab9laAI5qDJDp4SF7H MLa/uT6mLxnGA06VnRXcSwrAUVnbzr5Z40xXBQ309KzgYMuQKJWPrIsiEFRGA1AATlakLxLJJuUE HTERzP3uE8Uqz8mwGGVRDqHyGwHngBIzXjZsaIFSZ1E6gSMoHDDh0F8ESPBAEJeAkHI6+mJcrhZH CzcMFhVmz1sKwtgQKhGYsXNOftt1yneysXF/lE2kKiDg7E9OTupvxoAgUyQQfI2BQsh40FYgg24+ Sp0cHOX1DxMCDJEF9ASfg98E8IdhZ7wZSc7E+x0O1kYVjJroGG0ClF3pDJ08DzgB/PCKggOEl8hZ 9L4LcN6MqgDE5hbobeMLxpkDulJKpPgtOwMcKRplL2QRfBRS5eSoKCxn7XlAlgU7jI0swm+GTTUC 7oyEQIgcuIdR5jTnAN3gSzcYQRudMAoCQfR0jUGNIWSk8JqMoW8CO+3DE904oBbIH0cIT4EPnQTG JusUBMKR3HDa67LNtu0cw5OTZfTwFl0AOZe1eU0B9AM/TgGt8INMkCNG2eYc5JGOoJ1sXQVoHXjN JbjFY3jQDcd0lH75JyCyMWPWNlB582mB7eEQVAroprHQHc4YrW2v6Hm8Vs1TbWG3BBzkwf3oK7sn 7/sC9E0m3tKXXdGf7J49JCf0Ud+ySIEYmfasTA9fnBNYoDPZFwQJ3vBEcC945txVLNAxjn5qLBwZ WyewEdh5RcbxqmJIoLLpCZlFeyAQJ3NwUkXDe7aKLfX6QDYf+akPbPkH7/gNvCd/fAoesnHOGTfe rdslbstud7r9YA442FBIgtEaYpFcjJKMxAcwLhSOMQaYh7lAhMuoYhxlWxKK+sDL/ug37ec8fBhI oE+/tUdROTDnPCdya8F9banCPQwvYCQ5xYyHkQ9wLCJjz1MM4zoqwkgwvCNfGosMSnYqGgUMNSOh zANX0R6DGXwZCWNjiAk1QYZbxqJPeALG2G8K4TjnXWOI54IC1/WDNzJ9AC8GnAMGMmI4jcFzzof/ uQ5PH/RjVMhIAN85EMoevuXa+FtAxTjCjTOz7WN2nkqb+JD+fctYAxxf5AWesqa2DMf44ZeAS6AB Zw5EMMfR+CcQeM1wCeASeaf98bfxyFxk2fgIN6B8BjelPcbR7xb0gZYtCBwYYDi5hu/kjaNmaK8U Zyf4SeXDs/oPn/TX0pdDFOBxXvpbAk6VjCoRpl/36187AUFR5L21A/QqVRH3wgW4J/yoJ2b+cBZk RCZmvIJvjpKDldUJpmSqyt/kPWDsbfvwcI+AAS/suNfqAWcB6Ap6sxXaQ1+7XKE9/RYEBLQf2cs5 3wIigbJgMHauvd4ekyMZt4QCfRMkcTSqWXSELnsNFBkiV5wwfVJd8opEgI22bBJHBDjsjNGzeT62 scVjfHxyclIrHN75ow3brdKE78lsPYPnoYHvto+cT9tkV99jIJuRi/bamL5+y8wFFNphJ1tdce7o ZcFA245jwTXbbb5S9GJ8zz5/H+wdMCRFbZRBuUZpjFIgoBKw9wCYJgMRkSmHiNAQgEGUyTgvYqH8 mERBCRtBag3FFEFEr/Z8ZrxEgN4fcO6yCsIs+qJsBJJzkh0yDrIX75d9y0QIvPc6DAycZZCiXoJN aOErG+EkfWRzosDsUa1c7jyHlq04ZbOYTGm0RXHnxgNf5RSOFh2V5P2m4JyschJ8vbOSLXs/TPhl 8p71LsdYGV9CSPBFqhTXpDKOQ1uEUiQPV2U2PJBBzIF2RZeibzxEO06YEuob/9BdlswoA5UO2bxo mfFhBCgmPsmEGQJygtcCD4GWLAnd4K1isqQU10rW7T9pqbwwBMZP1gQinKEyp3I9esHffXgl88dD H+9F9aF0RnZF6HjEiZBffFJBYNDw1DOiawaYnIreldaMAS0SoEzRUcCnD8+TB9lHnJOslWyJ5skQ XXKd0TfG0JdcJOihW6oHdMQHDWWUxu43HSBDyrF4S5ZlQvSOUfdumWHSD/Abzxj+NvCcGgu6KS3L 4jlDwQ95VDnwLxYFjTIt7+L9C0NOi5zg93GpatFpNOa8ZE/uc6wtThWf6OMUcHqyNo7GGMkBRyRw gjfd5YRlwKppHA+e6h9eskcyQQ84bDREd/ILd0GYDJecen2Drvgsg5JJuRZ5EIR6njzASx/smPbo LkdL1gEbQxdV86YcTjtW/GY36Iggk4NAD/qBPtp23ljIr+AQD8gWucBzWSgb6Dl2j37QdfLsNYE+ 2BH857TQjEyzKXNAfvFLIkK/6I1+0BJP2Rn40RM2nr3AD68q8gqEw/SMCh+9ZIMEUz7aI/vwxVc8 MUa6yB+gLzuKvs7TdTaYfcFbOkj26YkA2fjYOfzHc/RIMGPMeKoNenMr4KAbccgCEIIxIiicGWIj osFSBIYe8zBMCYIh4PAIEUJiVAATZFb+u886YNAwUH8UIf3rl7OgNBwv4+SbkwIcN8cgesw5RsV9 2qLkvgUGjLF+PONeEShmUnyOh6PhDCmdcTKUnqEMhJ8iEPapqC7jE2lrnwAx2LaUE90FCJ5Is8XX NWMkkIygSUEtGAtFOCrGVrQfwC99wRnt8W0OGG84cQgcu3eIAhL00L5xUhAOXikW4LvxoJ9r7ncd LfSJdjI4BkEmakz6YcxMyvN7CQQkPowup3/9+vXqJLUH4IYXZICDQ0c8gBPngG/kwn3kEZ/IIVwZ SDxPJK3EiL5klhL7BsaoDfJGrlO6rhdHf8iSNmTVjslHjIFb6QEnz9gYFzl1HU1CX/jjY8DYPIfG 8II3+SeL+uFg8N5YySu5xIMEDGhFxzzDYKnQqDysAzSSWaOrfluc9IO+cOPs0cf9jKBxoDVd1Se+ oW1ox+GQSzLEEc4BXuMbuof/sTtkWr++8YPzZ2dCR3TxHPlCY7jBl3yzUXSE7pFr9giP4UJHAgw9 JyiAMv60w3lonxzhMT0h68bK6QgUOOB1gIboK2BhM1q9RS+ySj6NGb3IEtuLJuwXpwKvAL4LJuCS CU/adp5MsUlsiHEuZeecGDoZvz7IjLECNBasaEuwiy/OkT/9kgN8RzN8cQz32AeyjsbOuRZ+0sG8 WkRftNQnGqFv5ETfxk520MM99A1/8UI7aAYv4H5BPt4by62AgzrgfQ0gGYtIxzKLlKj31X5v5/xS QIAhsk8J/vxierkw4yxl2pxDApjLNcKzHY3A1WsHVSNBcoezp4AgVfCqmnKr4EI4YFFcMlDRjQi9 Q6dAp0CnQKdAp8BFpsCFcMAXmcAd906BToFOgU6BToEpCtw8jXLqjgOeU7P3fmRTcK9nOpyOAt53 +ZwVdB6eFeUvd79L9mHp2qGp4h3lWerbocfX29+dAgdzwCYhmZBhEoUX4YSwBQphJl+7JKK9PnXs Xs+cFkwaMMnHpAOTfuDi2LpdEyzOE6CjEjx8TUzZB5j1a0boISDrEE22CO4mOQVM8jCxpz2Xa6f9 JmPkzQc/vcfcBLyPg/ehwWQZs0LRAG2WwIxQMzbPE5i84r2wmbO3GuioyTh4K4DDM3aFnLkGTESy pGfK2Znhm7Xeh8Cd7JkQZCZ3i5O+zJB+4hOfeFO31qfbhtTSqBZMnPLe3VKefcgkm2FmuElSp23P uKy6gJ/Z3gFjtxLCul/L5abon3vxjT2j//TT8WnsmjbY84sKB1uGZMahCQam2ZtVbB2e2W0BM9K8 z82sxJxf+jaj04zNo2bW59L9U9coq6UI1odaHgA/68XMxDPNX/vrZttOtXuoc5Y02M2FElmWYuYo WmYd3S79GisaGuu+wfIR624ZSrMMTes3I9RMS2BGZJannGYMU3hTZIvtLU1AL2tYKXy2B516xjk0 NtHLkodDgeVXZI0TNqGM3C/JmVm3DHc2sDgUXtu0S2fxle6YLXorgfO3/I6Bt8TGrHBLvMyOtw7b bGqzWc3gtSIBri2wHWZ+Z0Z+e+20x5wbZ0o3LVuyXMnGHfQMmHVtJnG7esE1+FqiQ78DbKQZuIIc 65izPjfXt/m2bNLmJFZJWHrptyV9u4I2BI/aYDsyeczSNgH9wx/+8Io7/Mf0T58m1FpbnVnI9nfg RNm0XcDmJ4La8YYqu7R1Fs8cbCMOS19ERNaIEcgWRCzWj8lSzGoOcIjWgclEKVyYaq0dJosWLck4 LusGA5awWK/IMGC83YAY/DlgkEVoMgyG2jIDS0gIzFFxStaMwdlEr5OyyJziirzdK5CgTNYxUiaz shluSs/gMxDZXUUmzVhQMsqmX9uumUq/DVhTapkG482hoak1iNb4UXhZkmgSvgIea+uMwRpdjpCx RCNr+hgBis1oWRfcgjVzWc+HvioNeBAaWJKAbpaCZR1j+3yOGWZroO1iZL2dnYPQBZhIh45oZ+0z EKjhs7bRiVPmSK0hXOJjfXj0x/2ic5tX4C9jAR/riS15wA9LDfBaFg4HWZPAhmO07MF9DAQ84As3 /Icz2hs7I2uMAjmZgOUsZLxdGtKiFmdqnSQnYKlGlkrQATTJEhfLKPRDFtGBs9a+b7IAyJyMA80E NtZwckD4LEMJvmhBNhlOFRT8ZIzpHFnAG7jJjOgBGaY/dIyxRkOyxTjaSpD8ZbmZ6pblSZaJMPKu 0U+ZJhDU0lt6KZuzBMZsajJhE5Nts1GBGwNv7XrWlTO69M01ht26WvhoPyAjJfuA7gl88AAtyJis FR3RXHvoKhCnO5b8ZWMVuzsZ4xhkf3TEUjkblqCn2c2519po2e546SR5Qmd9tUAHLJla0rH2/rlj dPePEYzRsiVLjtgEwOGxG8aOJvCObNEFa68lKuhoUxtAdl2zJpj9yHgs2VEVMW57LpDtjL0+OPrj efwTPJEH/VrjTVfRmExaekdm4WWplkqHcaTiQR4FPOSVrTMeVRF8jf3llNlJvkZAxjay83jD+aMP 2aZ76zaZGQ1hrz/vLFF7bJ6hm2IGp8SBMArtbimYhxgWbSOgNVqUABAiTOcoWuAQMYTCMOac+BKI MBkZi705dcqTaC1lQYLLuaUvQsrQEUYMFSQA5xhg36auZ5N8jBVEGI8NPigZJ8pI7gJoSCE4GCU2 mx4o3RBCUbLyFmFmcBkEAm1MzjOCcEMnYHMDxtbYW2Co3SvjYuSyfptQUyzjEYzI5NYBfDkFzoXR DH0FSHYys7EEAwjgQg44Sn1yDOQDf3YBfWmbQguC4GzsnMO1spCf80EPToEBwhP8JRc+jLk2GBRB CCMp6OAws/fvcQlQPEN5bewR5Z7D13gYHu1pC01lcQy/NhlbjpMDZ1Dw2gf9rBOVTSWIxXvH6Ggs 2TyBAeLUGG99yE60DeiOYJHRk+VzSMZpTGSK46FvNsbJPs1wshmBQEUmnlcz5EtgYIMTGbwgRLBC J+itbSPRgw5xijI4+NMNTrsNJOboNXcezQQL5IQxJjfZLIYcGV90Nm2QJ07UBz1jb/CdfZF9ojua AbZEoG2dKp1iqCUTkeG0m2/4sBVoB8gauYgDtWMd+toQYwxLcyHw/zTAFuIt3gPfEgAAP0GdQJXd xC+0Ub26evVqpZV7BUsJEMgvGltPi0boAwT+7B+77fxcEFpvLn/YBjTTPjvstSJeJJsWEOtHoCdY BvC4XtZ5nxRbnc2MnJ/SXefxmC0kd/iKlvivb3ZYQMQGwJkcnyXs5hF2xFgExchTSkZIttEKNoEX xXIqnKHSYIBgi2QYjhZEa5ROaYkhoDBLgAmYm1IlJlvUTVjhIvsRJXNiylzA+jBZD+ESPckwgIiK EnOyQJbK+BMW7ckCAced9uuJU/whTGhA6dFR+Q0QKBkdw8SZ2jBAFtJmA+5DY46QwgVk5wyvdzwU AR0doxVFE1VSCs57bODSRvstIoWXRe9KRMER3mgryg+kNMjRUW4OTb+CmF2AUjIueedGAWW28BY8 ida1z/kYIwNuhx4O6EpTFcBDi/85PMYTjdAF/dFdCY7RTSa/hCu54iw5JAaH7AmeODgyJqjh/Dkn TsT9jDO5lCGgGccMjMNz2VRBOwyqLN+4BVZwJofGCeArQ8tGOMaqD3JCb4zFuDgamZLAQGmUw3QP mkbmBR7at+mEbDElXUGaoIVR1za5wUPP0nV03mRDj4rwzB9tobcgG87wjT3AY/aBPLUg+IlTIPsB AYUx0gUBBdkA9EZywOiTUzaK3C8BmwAEffhsowltsAvkjJOS1d1qSJCrmiFAMka7ULFnZCKZumPX yJYAnK4D/6SB/gpSVBbQkZ6SpQDeCjAS+Of83Hfsl8CEbJE39CNXaE1m8RLNInPknS+QfLC5ytZA UMFOk7NWd63lhStbAgQYdJVO4Qf/Igt3zlagZwkHdcCYQpkR3bcoXASO4c4hvHscU1rfsi+RLiDM /kML4+QaAqY99ztWZhDFEBBZ11JUqU3PKHNgDgW2qQdB5CDhEmVyX0DpkjBSRMZOhAxyf57Jb8LD wTEUImHKLNoLiNxlQ0qzcd65NvUdXDgMxpoCHJUSpT6UTkX5MkZ0Cm3Ri1CHtmnX7zHdlS6VlSgq RbxWMkVjAfrO+IJH2pr71i8lgQ+eqARw7OGh9hwHNzxjLMLfXE/7MjbORdmMEV4C7VAuz8QBuR+N 0EZkrH3ZbwyN66Jm+DCiHAljzbjIKtFaYMNZkjvg3in61oujP3ikxKnEzxFxCspnInROnUPDU4bb xiMx+C3d9QeMTVYiQNWOCoyxMV7KmvBlfOBrLGDMw7SlffTyyT1oRr4FtuQATxi/yINABK70wZjQ mROGA3qqlGhX8CVwANrnKPUb+tUL5Y8gR6ZOJ1PtyrWpb0bTGLWXrNV92o78ZHzjvnLe/eYHcNhe J7FLgufgJ8sS8MCLvi8Bh4AnKiyyrGSV2cEveKFf2teeY+fQvT2fa86Pn3GNHUHfdXiZ98CB0Wv2 VMBiPAIOckIn2T78lHXST9mh6pSqBznwbHQEjvjo/jG+zrkG31bn4Dv5Zm5bAABAAElEQVQGz9Jh /XPA7GPkHL+8T9cO/Uhw5zUCnPgO+kHGJAXsC/CMdr0m820cbBr7qA92jX3Xr77SX2jc4kge6L8q 01h+2vv2dXywSVgifcLo3Rbn4J2ZSEXJyv66KfOKxjFdJOM9g2e8b5JZUkqRtPKH90yyNO25X9Sq 3IbIsmYROMaJzAkcYzsFnJgoEJG9E1EOkaGKUL3vgyNGO8ZQCo+pSoT6cD+BtbWaMo8oGq4MuHdm hNs12ZzSnUwKiNYoKmDcMNg7DxHZEsi+VA5EdfCVxXBqxifa1w4DqfxHeDgLRtF7QsIKZ/RDR6U7 RhM/ZAAiXsGCUiKawt+38cJbSUnwIdsWNXL+8BCRMjxTgM9owgFwwrIoUbQs03sd7eGhKJzDoRhm Zcs2KK9+KY3rlIxyi25lgolop/p1Du9OTk6qDJAr8qF9gG4clzHDD204Q3ThvOBIvhhexlN/cPLu KTyg8GTDOeW60Fc2usRHxolce1+GV4yLLNg4GQvG1Lt6/avOMJ5wJSecEl2CF/lBe8GDjMYzggJj 1haeBF9tCRA8bz9nPJd1KL+RFfIog0Vv8kFejFk/eEXGr5ZyJHzJA54dl9I72VKNko0w0PgpK9I2 ORUQaNcY6aHgQ1maEWUI8UjGFKDz5I7synzWAblHR4ELuQAMKhpoh+Elw+yC0mgLAmIywQnRHU4T DekuIy7oQmOGWiVNIIJPS8BIo5txkAljZJvYObZGwOccfUMvfBKs0AU8jD1TNSJH+GAs6OX1QuyZ 8XKo2mWT2JglQEs2SJCCXtplGwT87JW+8RbPBEGCKrINV2NR8TM2Nliw4xUC2ZGx4jEZJfNsOVup DbqFrnHaU/jRS3YkwQU8tMMh0zf4klX8wxOvptgw+kOW6CJZo7vwEzgIptgdgZSgzzjoHBoLIj3D 36C9vc9VolRiPeeaqgoc+AD0RaNNgsGp8W177mAbcSCAbIpRTcQhYicYhM2HgRCFAIrlfsqeyEYb BA9TEQfTKIdIl1AwBICjdEyBKLg+3DcH+pZB6Cs4wUP/mKo/x4BQOJfsRyTJCevfM3Bp8dWv54Hr +mGsOM2Ug/2Gr8BhHSS6RAvtjo2U8TIWsjU4AQbA2CLkDDO88MH9aGpMfhsf/B0zRMaHJu5zLTwJ 37TrWBtTgLbhd5w0fBz7di24+NYXGmkPHsbrnHb0L8jxWkBpFW5LYLz6iMxxvi2ecOf09YNeLeCV ygSH3NKY3KWs345nir5te+0xvMiPb0aU0237MH7GXjaQPtAdTpEzdKMvaAPgilaMeQtT+Ao29U1+ yJF20cAxCG/zHfmlV4yW35EHsg8Hz8MbDp5LNYCRdBz66sNYwpNWb/UtyGIw2wqR80tA59AfDsAx /IyRTEUnyY+xkiU6oryvYpaSNF6gjXeB7gHGBmdZtgrVNob4eglmPCtzC9/gZezRN3rvWqsL8NUv OqIpeqEhnpNfMuF5gZNXTV6bGdsmAB9BifbJinaAtvFXn2O9SjUIXQL4jr4+6A0ntI4MaBetyYq+ 5gA+ZMb9xui3McIDCFqcowv6NE6/9YNfU7qLfgJ99r/t2/3aM47IJ37DP7SGs2NjuVacNTuNvgnc 58axr/MHc8D7QvCitsMQKvkQDBGy93uEAIjWROJHJSLtsEwBGQInLBLucPkoINOXgTC4hwDORxbL ccgcr7wsa57ri5PjpFUATkom6jXBeQHZJ+coe+uwfwqoLAnQN3ktuK/euwPeFyUn2klUnYxi4pZ+ qlOgU+DAFKCHMpwEwEvdyc5koLm/zaiWnuvXOgV2oUB3wLtQrT/TKdAp0CnQKdApcEoKvHSdwikb uVWPi04zA3mqz7wbmrp2Hs+dF3y9E4HLeQB4KBcG/PYOqMNmFPBOKzNJN3vifNx1FrpArs6L3K/j Ar76XCS4SPQ9K7oebBa0Mo53d97BmIDiZfppyzlmg5otmfW1LdH0Z/a09yR2T1kCBt5MO7MDvZRX msqErqXn9nlNWcwaTjQyA3FbsBGHdxYmHiiX+W3GpN+blNra/syONvnATEAThDYBy4LMfNQ3g+9d Lf5mMsUmbUzd472bWbTWtQoMLBEzy9Kkj6XZlVNtneacCRxmOZuo4mPSyL4nZjD++O+9k48A04zs 04DZo1kydytffZh8RfcEyI7JBJ5tovNobcKT+RLjmctjWpjUZDazd7TmWZhA1E60G98/95u9sBmL 5UfmYlgNsG8w89kEPjN1gZnNxpjf2/RnhrcZwmYAb0JTskV+6Tb7Sz/Ry7v2TMTapv9t72XfbLZh 1jHaZknRtu1c9vsP5oAplXVmjDRlMd3cFP/MjiQgnAblYcQBpomanHPdzDdRH4fit2/Tz6cE2HVL gEz1N9liDhg5S3HgZHaiY843sx0z247xiqBSVn2blQe/zL40k9A5sxqBMbumXWCmo8+UU4IvWpjS b5bvtsDImbzCyJnkxYFm72C4ax994RKHjJYCjjG+nDZF9YwlIu4RpIQvU7jpSzBkZrd1rCacmdGa GZVmH2onY9ce/sIFnbQ9Npzut3TCUhiTrtzDIDNangmPgo/79ZPgSR94hS+excvIU3iSZ9d9M1pm nFqygI4m5owNCbwym1N7ZEvQ4AOvdQ4QboyU5RDkyDahxomfAbN3jSc8wyMftINX6Ot+/HXNkg4z P8djhq9zaBPZ9px24L6JYXf/FAh+LVczBmuALR0xPkuUAONPF8KrtIFncHHe0iXL3eZAGzbzME44 m1xl44gsOcR757XVjs/9xm7cPsA3OrEDxm1ZFkCH8BGttOn56FC9acM/dEQwZAc/smi2tyAu+xzg uTG1NKEjeKg/z/iN92Zu0wv6Bl94GcOYx0HNuMzkJoc2pSFDZNgErgSSaALYLDIb+xv7Rr88h5Zo Aif0bW2c5z3nvPvgExmjrwJ1smrZUgsCqXbsaKyd0Npx5LzlZdvGZTh+qTQeYCSWL1irRkEIOkdj Yw0zgC2hsL4McwmIfaGt03TOFPCrZf0hJbZrkVmINuOwJs5aNIvns8sRtK0rszYxwhhDNTck/euT cgCRGUEH1oLaGYWAMwzwscEHPESTokcBBXytkRXhWp9snARKhm6DDRl61pQSIn1Y60mAGRnrkINv hL0isMUf690IuKxD9sRQU2xZbEtfiiGLtNYTvjYL4NQovzW9toq0XpcjZ8jgbc0z47Y0A1TWLqLX lqzZGkA8BLIKFQZGgtExAxweaMNhOM84W4dpza1gwjo9Sq5SEqOsLb8tDWIMWrCpBX5xchTe84Cx g49NO3wYLfK0bfacnXTwX0BnrTLaqK7IJqxthSfZsV0kObcmkiwKItDaelp0nDMgcLdLGGNpGY51 mWSbk0EvzplcoZXAU8WE/KCntduqS/DzDHlCR2vL6VW7w4/z+M7gwRkPrMVkiMm2/umEQND+u7uA dq27JNtoBGe4AvJgvSVZ1yfa4an1uniUgDHLg+b65+Bl2NHdrB11v6qJDW8S9AgO6Z2qkMyR7pEh 8i5wxZPIfOvEtGMMsmMybl2otdlszzhgnMMz59mFo5JdW9Ouf8uAkuFbsyrwQjcJBblhd6zBtU5d AGpNLp7ZnIg9pQtw5dTpkDXfc5kluaF72rUhi3tVGTynOkFO2CY6RwZ9yHF0hzyRSfaObrmf/WNn 4El32QtjsxYcP9liG2Zw/HP0RRvPGhtbTRb5BZWb7L9tza9zbAh6tMuhQtvL8n3Qd8CiGQwGHJZj JRlOgrJjOiZaigAoB8YjuF2qZIgyO0DZKO71stYuIKLmJCkJBSGkDMkSWE+qrQAnQ2g4MZtaYDzj ZRtHjt8YROUcllIoJyLKBxa028SDkXc/A025gWVGxkioZeWMtqgOvioD8OV8ZDy7AFpSCFkZw8fo UShAGTgNOyrJbkNfjoGQw9duP/BV0gLobqG9zIWzgfcSUDAOw9pKNOEwRNGAs9C/MjKjSGkZGVkG nBkeeNtoAjB2DJN10egmgGiNYtqtN5c/nBsl5ZAEF8bIWJAX/PAsQ4wOeMeA7gocPfzgKlBhMPHw +Pi4ygna24lNwMjhMnBklgzZ/GCdPMIV3cmaHX7oCTA+NONsGCz3wAGdODJLJQSTHAwjCRh7JT8y xQECtGM8OQObK5BvssNJA/JKD22EA+foa724xR97UzPMnqeXKimcCAOt+iVoYMjJAtnnIDhJ2wRy ePhFx5ZAFiWQksXhvTGyJXSLHJBD3ypheIZX6MqWOE/vVLxanoxli15watolqwIG6/a3db7GYYyc uFddEggBcvTdphvsAxq5jo9AX+RW5YXzRDvybSx4hob02Pk556sddLpSllzBwXP4gj42IaEr5Ai/ Bds2auGU6S3aco5kje6gneCdTdYmmyGYoPtAEOy1CboKNlNJqBfLnzF90YG+uNdY6IuEho6m6sUx C478hu9lhoM6YEY6hpQAECICfbVkJJwAh4R5MRYES5maANj1iQCkvKQtSor5AWvinLc7ECG1Z2lb kst97bf+GfgxMGKELP8ijjFlSETNxkAIRaCMgHEAfVNMSqvUZizwELUKFmQoBJBCGX/61XbwbctP 2kQL/a4DgQE8OFAZznFxCIQZUCzG2W9GPPQNvoIOChh805eMVt+co3uXQP+UU3bBkKIrOlFkRl7U jVfGZ+zAb8EPB4KO8DMGfMQ7dFI9EJi0iqvdyJF28IpR4VAYb+NL2VYwpT3Rs6y8/WcQnt2Uvu4F 5BHe+mdAjUW0rtwO0Iph4oAFMYIAlQCGgwEP7evNE3+MQyWDQZKVwts7Z68EBDH4QAcYR++L/SY7 5A1tj4rTpUfANU4QfeMwBGV4Qkbhh2feoXIwyQ45RXrjOfgE8IA8JLDL+alv9G95ZOzoonIEyKRg Be6cD1mDg7GTUcEN/JbAODlSGRdHcXJyUqtOxofOdqIiD3QWvXyTBWVQ56+VjRY8F9roC81avBl/ 5XSBjywVf+l+CwKFyHR7fnzsHk6SPKOHDBie6Mk+wIv8o0N4CBc0ggNZEkzgi/PsiioAXrlnCdAU nbVvjD54T5bJV+RX++RVJU1QJ0FBRztkqUYqeXsWXeiub/cnWJLt6sPrGkEBm9cCvFv6Cp6BIFyA wdGyBfqQoZMXAYnqiUzf+YBqU/rNuYv+fTAHTJEJDGOFKZRFdI+BoitOU4bEkMuKI9AyKhESZclk K4ZAOxRN9Opb2wSU4CobESqZm3d3S0ZPpiqbYOg4RBlOtuZT3uL8ZXPKPt5nEhC/4WhMjuGgDwqu P9cout9AOwyosYgIRb3ukaETIiUmY5DZcFQZO0EWFYtQ1wGjiSYCBmNgVDJ2pVDbNlKylr7B17Mt vgwCWthAXjVBFC6rgM8coD/aC0ootUjbOCgYo60dJUV9oZe2fKODY+fRhYIxFt5PoYlonGHStvuM yTi9r0JXfTDsjBo8OX9yoi/AAVFk/TPuZCRAjgQfyrHrQD/6ZaDILmenjIfOynSMjTEo4zOKMnfj Mya0EFzkeK4v40MPsoRPPuiKJgIkDtm40UNlglMhP9olh/jm2zPAsWDMb9/axhuBLfriMaPqdYi+ HQtqBT9k03jSlvYEwfDQ1iagP23gWYJITkDbyupK6oIKNOXY8JOs0l34eb4NAMZ9cgz4KlCTsXNu DLLXMdpU3SEPnLlXVWRBAMXucHgqEzJzNEE7/cMXXeihcyBbntJDWWMLyqwcBke1BGQtsss5ydjx 0gefTKAkv5EbeEQeyBGaeJ5MAM9wxByXANRrh5ZXU7iQK3quPd9oK8hBE/ZNn4I62bYxoQ2ZcA8a s8HOeS66Cx/P+Q1kxOirVOz1D8cN0BJN8ZQeobVzqobkQYChMsPekQUgEGGfvc5hu5J8uUbuJRvt 60fnLzocbBIW4bHPqkjXJB1MJ4iYS1mUyjhBxoGwuc7hyRwwnuJTMsAYyrQYIcKgrIWZymregXmP 5BrDSDAovYhzCvTBWCt3pkQoEJD9Eg6GwPtqRs77MZldHLwMCG4UgHEXreWdsrHIKCk+4SVwnAkh NEZGVNABN33LztxLiWKkOG2ls5Ni8ONQpsbgnKCB8hBSz5slyVBSJLRDX+/Y0JXywYFzVBJGI/iK ouHgOYojM2fkZZbGdlyyako/BWinPVE9/irh61u2IHplKDgh/GTg0BatKBL8VEDgoQSKrjIkGUci ezKCngwnejNc3iMahzFRYnwnY3CVEaYkh/fwky21FQY4cr4cAaO9BJwqOugXHWQCXj2QN0ZDEAnf TEBjSMkGY4Ym5IecCi7GZbn0y3ngG13BK8GfjJ1cy1bwl4HzCkP5VIZirMp/jBXZNH48Io9kVzAG lProFdq6Rt4EfvA1FjSEJ73BF05JMIVnxgKUwZMRtplIvTj6w3mQazJxvbwm4tjxnHGVAQmq4SoY 924S/cmecjS+CiTJiWut4W27EdhoI/uio5Hgy/0CrcgDHnAc+kBLsiXrpzPkkaygjUoN2gv8OFTj 1paxwkWmie4tXC3VO9mi8imazQHn59UPmcMDdouTYsu8GhKgoInr5IOdpHvelztH/oxTZQEeSr1s imBJUgAPAQadmwNBNIelbzRBC8+SBzJFvtkBwQG6Cy7RAu3YUr9VDNgwso4usl/yYhwqlNmnXNaK 914p4Ll26B/b44O+2qW/ZMo46SjdNsYEymSaHni2tT1oTh59cu/cuC/U+RKpnQkUhZ3td+na3EO7 PFOcwWRzRbgmz297sgQJs49M4VuM8VAc0jB1bbahmQv7aGOm6Y1OL419roESXc9dmj3f8qoYmqEo /lAM61Ac7Z2eKUHGUN7JDbv0c6fGyom276nr+zi3Cx3n+i1OYfISuo2BbhQHN5SgYnxpp9/kca7/ TRvEN58SJAylmjP52BxP5nR93EhxjEMJlocSjA4lGxxfHkqwPpTK1Z3O73Jin7zdpf85WqWtbWzI pvRN275beUCLEhQN5VXMUIKG9rZ6XIK7ocxLudP5i37ijrOKFpYi6qVrc/ju8oxIbArayGvq+qbn lt5pTeErUhaJTl3btM/ct4820tYu30tjn2uvfVc0d8/4fMsrWYV3fSJ/GVUxMDXazjMif1nOLv2k jfa77bs9v8/jXeg41/9cxibTGYNz3rXKWvYB5HGu/03bD99k13Mwx5M5XR+3I5NT6UB3mZtsuQWZ WeaJtOd3Od4nb3fpf45WaWsbG7IpfdO271YeVJpMxpI5y9KL879JT1V/vL64bNC3orxsHO3j6RTo FOgU6BS4EBQ42CSsCzH6jmSnQKdAp0CnQKfAGVHgTBywl/qZJbnNuM0ENImkw+koYMKHzRfOG5io YdZkh06Bs6KAlQImOymBtuB1hvKoCU0d1lMgM+LX3/nyO0xKzITLl5+93EcHfQdMiM12ZezNLjTb z3tOyyDMFDbDdRswO9B7Ke/ydgUzSL3bMXvSOxgz8ShX1lzu2u6tfs5SAMtEyuSFumbW0pxsArIO F7O8zXY1I3GfgN9mSJoBbMmAGc1m3qKzRfVmOC6BWeNXyuYB2Yxi6d5tr5n1KfCAo1mUZnyvewe2 bR9z91tyIrggc2jgPaNZ8X4vvTsz49msXzyGs9nXZj+fFZSJNnVFACeFjmabmyVr9vQS0FuzjbNW e+neXa6xL2bOemeJPjaR2eT9Kp6YbZ/Z8/o2+9imIuTYTPsAp2zZkFnb43XBuecsvjkssi0wMFua DbCi41aAPs2kNmMcvcsEuTozm1ybtc220v9NgZ5YSqo99F/SjU3bPO/3HSwDLrPT6jaNlleYWMTo mPZvcodp+JagILhPQFbM6HAOrltKkbVujDqlPylLdMZgEwRLGXzn/vE9+c1xWS9o+rxjBj8bHLiH QGuLEAQon7aNyRILawEJm4htjC+8A8YmY885RsjmByYcABm96fVtX3l23Tc6Ws+MRiYzWNRuWQNQ YdA3fBk/+DLiwJIjy4CMuwXG1ViM3XIPgN4cBdpbxuB4CRhA6zrxGn761FbWKXvWUisyIQgK6IcR tQ55POlF33CytGnT9ahpt/32rLWPnK4lOdYKZ/MDfEQjvEIHoF809JxxwI8M5Bm8s4Sjld+2v/bY +CzBs5zNsXFa05pJReQLTcgWmQSWMNnmVJDEQVieZgkPXMiM+wSO1m3id8A92pKtgeiZZTeA8ySD u9ASf/UrCGYcyZ6tK0MTeouGaBkgg34bu2Pjb2GMr2vRE/fCm65a1jMH5J98WvbDCY0nD6EvGTI5 LwAXS/K07dgHWNpkGQ36GEt0wbJAE9L8JsPWtrYQOc2OVq6hB51i13zQi9wE6ACeazPBYa5t+m2s ll+hj/ZsXkE+ABtlaRB5QFNAfpzzcax/OMcGecbyJ8EJ+VoCsmDpGZ2yrAgOeEAnBNxoir/aa/lO BukzGUejgABNO5w53Fogx3iYsblG7tAX/bSJvtGf9tnzfHywDBhhKJ71kgyN2afW4gEMcx6DGBDb xWEYAbI4W7ZMkQiNxd0iKkJvK0gCl60gtWVDBIyxrlG0ZbH90n621h7aHo5yUSLRbGY1mkHLeRwd HdVI2CJ8a4Qpqayd4yIIlM2mDITKwn+z9mQBDKFF5DZ7sF0hxbdhhKha8MFIcJSEViXAmBhju8mI rrcBFQSBjbWytl+k4DGqwZczE5BQeusBjZPQ2+BBlpBtPvUrmxZJE37KaJ0hw+Y5Cop/eIVGc/9t Cm9E4MpP6IuWgh30sh43e8Dads4WeDYqkYlSNpE0gwg3aw0B+vknDwyfwIgBzbrXesMWf6yVxmt9 AgGIAAavjJWDpdDGzwjoy5pLsoRO5BJdYmDM2NQmB2HNpPXFcahjtGSv1t7qA038tn4TfdGdXDPw jCK5pxtkhGyQPwB3cilYkIXhqd9oxGnY6pEuCC5UQxhBuNMlY7X2mS7hjQyPbFhbvw1wuratJMeR V2tX8Ve7tiPUN5lDU1u7Gi9eu06frT2mM2wAXgvYyCV8bbIhOBcQW4NvzMbrWfqD3lNgvS+8OJrs 8JT7ZFJw0Qee2lvAuleyKAgi0+6x+QY6AcacvsORE7KOGF/oO7zwiq1CT/rOzgU/gQ8HbhMPgbb7 BaOqQeyD8ekHr8i8fQmMV3XQ2n1re7cBuFhvjXay/+iWapKxWRuub33ILh1bq8vRspfW93LgZJA9 eeQjH1mrk9ED9mpuTwV6q29yZj053UIvH2Mm7+wHO2cXrZOXJU/2CEAzOLgXL9psd6xHcLfuml1A QzaVPpIL64L5ETjSBbOlo+Pb0PGs7j2YAybsyjshJsYTEiBSYlQxXZmCEeKAOVGKTRBtUICoeefC YBByhqYFzo3zY4QYwnXLJii0exhOBs8mC84REgZZ6UR7mE5QKSyliXMi2IQL040NsxkYi+yVrODL CMJL+d092rV8IQZSViNSJZyMzGmm13MIokklOIEMYIT8hiPhpkyOAadCcdqsyXnGjcFwjZNGD06C 47DsA69kkMYy54C1I1sTEDHKDC4DrCQmMuU4OAJGg0GjVEqYlI8DE43jRYCToVQMHf5SWGPZBfAl suR5dDdGILDSNsMrCKDY+rOtJTwFO4xqtgcUmHE0NlYxTrs8ceQJ5GqjzR9ZNRpoh2MVdDDgzqMr uqA1g6VagAfGrT3HDKlxoyH6opWgiwN1j3HhJ2Mpa+aQlLoZKYEQw4pnHI8x2JDBblG7gL7oNlkW mDGKDKKtNMk6AwhnGT+jLCATwBgD3hsHx0Y2OGj6jJYCBfLgeXRVXRDsquqQjzaDmsKbIW/5m0oY 58Ke0Dnn6AaZQz86ihZ+t47PONCYzRGoCv7oh2wN79gFwa7gkn5w1uQD3rIxNPYcp4rmnLHAVeAV XqkIsBlkwv0C8haHqTFOnSO3PoJHDhiebAJ9F6CRbXJGDvDATlPkwragaO4e25TCXWWDTeTU0OCk OEzBB6c8BYIHY8MbOBg7+81e0CXX2UaJjg1m8Agv6RZ8fcg7WWcTQOxU259gl4zhk0QDvfgLdpyc sXvoS8daGWjbOK/HBytBEzbR4BRBZUoEFnDSHFoAAQlDoq7W4GqrvdczmMHgcJz2bxVVLgHjQFA5 VkZYRO4cQypIyPsskSRcCAmgHHm3BH8CCoJv3hfBl3ExvtxD+RkTRtF4/5+9e8mNJDnSACxM9z2G FxGG1xAgYCjtBAGCBPV+uNcJtJq6ydRR6iY5/kX3XzJ5xyuDGWSSdANYSUZGuJvb2yzcvODJYHLm TkqSxQYo9lapN/cSfEaAUZcZMooxPAQdvrKsim+edT0gs2NA0YJBcVoQhQLmiHJYk7HWAN8psbVT GNGu9XMerlFG5S309J8PVDA24xzAV/cICDhGxrSW8BhEJSnKvgXkpsoO56sawpnIyODIWeBF1i5g /NpOtzIHvL2b9h0aG0twwTgz1ozNEniGXMhmyRW5E4T6ARwQgAMnhAbkEG5opqIha5UZA89xqnH4 xiZf7hU8oK9raOea+VSN6CODJ8gR7AYEXjLQrDvX5z7JDfzop6CD7JmDzKtyKAPKkAUpTg3LWhhl eqdaBIIvfsIXPRlSYwHPkV9yDHJ9+mPmH3iFv+wEJ8Kwey7yy+HQQXMKrMiga/CqvcXWQU8BvoYu 7kFLQFeMQXfIg/nJA9m3DnoA2Adylb/xJRkiewM/zoUNCsDfOPDfAs/7QS/glZM1AY7TWGxdAjXX yQ488EqSIMAF5hMQCOg5a3sO8p+1TDd0/1izdQUHY7JnOX2OTYQXfPDd999akK06SA/QxT01uMLv uh7445dx0FfQRK7jP9DN+vLe2xwBgYcgUWBwr3CaAxblIJIIxcYnZT3lGOB9B0IyoH7ncEQ2stIo sI1CsgRAASipiNo7Bd8RUCArxgRRqXcIuT592f2DmYyp7Pbx8XGKypTKCRyDhGHw9M7COzcRFoPM oHj/J6v82gxysjTOklD4vuJLINwvEvU9A0+QORilGHMorX5ppbEoNFQZVhG2rGgL4CBjYpzN7chC ysOoWN8cvgRRJu8Z65apM76CDA7S88bEE4LLePjdNUYDz/xd39v0eDImlIxCoLF5GGsGS7nKHMp9 6Br+oqM1kANlRPKCp4yADF6ZT5meIpKTAPoJGARPW0BuOEtrlnkxnGjt03oYDXx0D2cEOGiGQrWC s6HcjDz88YoB4TQFU3Gmc3jghTHRxsZD9EQXY3FSsggZnwxWdgKsl76QeQEpR4B+aIA+eFH14KFl MsbiYODHEIa+jgxUfhSsGQ/tyUlAdkJP6cca4InqBj1hOOlbDL/M1XWyT/cFApET66ZjaC+Iohfw lT0LNOgGGYFvdJSekgXyumVA0Z99QBPrU1omvwJJjue5ZXJ0WqUBD/OKg5MVsKMjWuM/+grOyIF5 ybu/6Rs+sjeqdviI1vhPBq2dPOCRYITucGiCR2sxB+cI2EX2huNTFXAMbOjoe/PJvtmaLSC/9I1t Euxao4oDpybgIgfwgAMZhCc7JLiUnVsDuQHkBP1lzewU/gmU1sB48KRf+It+QPCIhuwL/fY7fOgv unLIcHIdrwD9V2FDJwkFOwZX8s/+oC9c8ZssojN59Dz6okMFVQZBMxrdK/zQhPP5DOREMQiHqBiE kE/t3YdoSP2fAeDgfE8plOAQnsATCgwVXTHkiC1Sw0glON95nhBjKCZSMAZNdJQstl8X4TI33CgO ofccp0DgZGyMm2vK2cpjcKNw8CcEggRlHgJEQOBvTXBiaCiXv0WZMhb32LUtIzAvhYAH5TOe8nOy AgLJOTNSyaj7NeRvgo1WxjQ3/AQNonnCaw5OAb5KYeaQxRFKdEIjz3EyKQGqInheyZ3Q4gmlFenj FQMUviXKDT75NDZ6UhYGkJFjTMynDEpRGCXKzWhzLJyRd4HuZ+gYDEZANEwmKBgDzhG6HiC6+MZB b4F1oJXxOCClWnJGxhhL5wTLlJQCGR3vvAH540w4RLIAzImucGYsPcMwWPscwB1/Is+cLX6QI/wX NHI21ut9GrzwRNDiHZ2gFA+952R83IuuVQ9kI+jLATFK6CjjRl88JWv5H4c4jGR4ghdOQJAYQzy3 BteMgX+cJWPn/uga/ATK9nmgNdlR3k2WhHYMtE92gXzDl21AD0YZvvDCCzqPL/jFYdKpJeB4yWbw YicEAYyvtaIvmuA/x0k+gXHxj76zK/aGoK+M1ljuI4t0lm7TOcECG0EnjEUP6DpnQN/ZIvKBt+Yl 2zJdvCJ3Dy3wgIcgyZj4jCbmSjCu2uM5ZeLqmOfWb9zojEBaRdDazWFs77fxzasn+m8OuMPD2p+a TSYjgLyhP1vLbqGJgKoGaz0O+Mam0F30EfBYp2CGPrAvnDLZsF62wHU2yjPshOCfXgui8Int5azx H74CPWN7hr1lT8mX382DP+iAzql2wFMVhI+w4fJeYZyEdUec8d6b8ambzO4IvbtCRdnZ+zzvCCnZ gGMUUA0RuAm+toz9sRnGU3MUEGDI7jkfm9GyH8S9XjdwQqoSA45RQPLBPnDCApJ7heGA74gzIlmQ rOKOULs7VJTYRNai3wHHKaCE6CdZ4fGRxpPXUICDsGdDBcKrEBWmALlWIVE9GHCMAiqAgpt7tw/D AR/j73hqUGBQYFBgUGBQ4EUUOG0T1ouwGg8PCgwKDAoMCgwKfHAKvIkD9uLexiabGeZ2j9qs4ecz gtJJBZt9bExIK0T9bvz+OhSwucWGKxuCzgKbeLz/z45Q7whtqHItrWVnzT03rg1ENlTZ3NSDzTEO eLCpZy8YRwvUgI9HAa+DtFTawLYXbCC15+Wzw8/bOk+gglYLu3mBdxmU1s5SjdoMml1+DuDQE6vV o4JdpwzQHogxcCDGnk0kTn9h2OxKtXsxh4PsmevMewixzRga5jlhOxM1oHtHpGWJIV7bCXoWbnao apNAZy0y2T176/kc8mHTxNbu7yPzkicHodh9acevnfDkwC5eh2hsAVlxP9zSSjf3jIMVtIPYBWuH p7/tPPaObw3s5rTxhn7YKQovARcdsosV/9HmDMhBOMZ2uIFOAGD3L5kTGOB/Bbt27falx3vBrnet KWcA+jmZDp/8oN9T2927tnv3DDyuGZOzsqvXzv57AbZYh4Id1HYna73bA+7H27Sd7XmG7JwlD3vm v5d7TmtDIvwiaI7EFnhb021vd6ykTUZaBDBbq0I1uq7JkB9bD2nacxDLrlc9e7JBjta4jJR2CKeg 2N4um9bKwUAsgRYPrRRezmv0r5tPOEF9aL63dd+2fJAdixSG4ggYKDrjZPcoxyhTFVAYz3b4a8HY xtJnaF7ZArppXYGPcVUFjJ3xOWf4CigogXuBv23bT4+y1oC0yOi11DagNYaxrzSew1nLgqBAtQLk 6EHGWbuJTEnLktYYrV3mYZy1z2gr4LDRHP+s0YYffZqyurQMyKT05mp76BvxOYJr8J1bA5zMSW60 PsGHw9diAWe4aP2wTt+R1YB1M/Bww29tLUuAVnZl66tFH5tAfv/73080Jjf0wXhors0F4IfDLARd 7tVyAQcyTDd8729OJVDxNdbRjSZ45jQtByPQH7Jn961WOrzRWkSWqiFmZOmhFhetIGgrOMNbQbXA QxZvne71tzYhLXbonXVbizWrLPghHw+tNQa4VyDjWTyxWxg+Sw6VzDixyRq0MukioBvoB6xToEEn rI/uaj3CV7Ka8XMYh5YW8ssWsTPRb2s0rmt4ab10CN+17dB/TkXrjaTDugV75Ib8RRfYFq1lMkD6 ZPOldib2y7j02+/obM3+1lpF19GPzhkPHmRDK6ZADb7GqTSeCLDzH+u0bvZC0JiAn23DT+syt9Yx vIEbfWa38MdGstgZU9JrvLUWFRB4wln2q32IPFTbvxPND3XbaSVohoGjomSyKIKi97ICh0cZKmAo Y8joBhgckSKBJ9hOmiGc7mW8KBJDoi9vK6piXOClYT4Kbx7O3Fm2hIuQOADC4QWAIWUQGHDXUzph eFyXRTPo+uoo3REwP0VV5oSb9WUXJEGmGIy4fmKCDGLYOF9ZUuZGJ4GOsTTnoxGgPHrioiQa9hmb NdBDKlq1ZkaDsYCrMeGkyuEACQeB+BvgN5ytR18iPuG1MTT/C7DIAgdNPpQzOXPOS5btAA5AUfXF RkY4ti3+Tg92/zDQ8ODMU41hOPXgyo7Jlp2nghwyAC/ghCulNetWjbCGNWCgBE9ozvnIKBIUafch H4I5ZzzncAD0xzdGDv1kvRXIWNbvOllU7fEJ35wUVp/Z+7sMXT+6XkvGUz+1awGOogc0wD98wl/g muDQkYz4iZb6in0C43B4+loDnnEACaeCF2TDsYXA/fTpqWWxems5dLK/BAJ6ARKHwBkKSBJYCs71 1pMBjsLpUOSXMxbgcvD4zabAHQjyzQd//d+CA3xzSpmgFu7w/vLlyzQWvj0/P0+Oj0PHXzrD8ZBf 9uxbSxRcd41esiOcEjoJPtHU/KoN1hzbYqc0ML85HaEpOKcbdMFz5AEvOGpnF7BJR4A9FKAIvNjJ AFzYV3jjDZ3g7AFasEfWL1gMkGvVToG+g4XIWbo80IAD1nr12WE5VbwBZTCH4BFmEXPdar80vAyD MWJgAqIoiqWMCDTQMwAOJsBE4zPeUbo8t/RJAf0AAkVwCBkFVZLk8DlhUTUnBUTHlEtmItoFDmlw aAXBokRxbNOXV/6jxGheimk9GtMFFOazLusVdTrLlSMRpTI4FBO9ODmBiJ5YWZQSEqfssIMYNkbO eq2dsqMx2maNcyhTIMpuDs5KRoTuyvccGEUUxXJsFNS4ImdOJbgxZByRfjzGkcGAg+zAOPpQ0ZbD s64AZxDnbVzZhyyEIbsWkkFy9BwqGuGXzIhjlBkztOjNYMLT2n0vwEnkvjYvHPEuWZIDPQQwgJPg lM3hOloZUyXImdP0RCa6BdaPH0rFwZdBVva+FvCF8wvAZ+vkI+tgWMlNdEhgioeCB/QDZCPlbJmy U7g4wgB54mzInjnjhAVKMln8ofP92e95vv9Ee44npy6Re85JRimYx0+BFr0QiKKXebySML/qA8dg LeSXnLAJdI2zFlzRJ3yCl3V6HUH2BaECL/qresIx45F1c2acrDEd7WgstpAzF7jGwWY9DpmgN7JY uo7fgGN0CAh9E1QErA2uvuMI2QQBoENFjgCeWjcgrwJF2S27QhfZcLRFK4AWeKtKl+dcF5DLohOA Gyf2n/0mQ2zmZ4dTHTDDRREd9s3Yc5IiygAhTtkn1/IpYg1w5MYK+J3C+SEwBLZmCa7Xv/NcPilZ xocXByW7klFwAJwJhaIAgPOTJTjuUlZTszBzcSxzzpdjZxSc/FPLmsGjfnL+xmGMRc+OheOUCD4a USxAkdHNPbI1jeaciwg4a4aT+wCDmWcpDUMi0nXPc4ta45imm2f+YQA4SYZNyUi0zwGbyxh4I0Dg DCij7FsQIUoGjENo45k4JJ8x4O6jvMYL+B1fK74MmepAgLNTPkQrBnYNzC3IYfAETHF2AhKBDSMD OHfGjlyQs8gdmfGzBtbJiZER8+CNANGpPmitoqIMyQFkXON5LjTqxyeLkVXf9fjSJ9lfgNORKSm/ ot0acASCoDhKgaW1B8hdHGqu5RM9q+7Kvjg0TlUFo+p5nqlj4Te5iXzTN/wJHdCaE94L6Il3HCun SY8E8/CstPY32fKT09zMRXbRWWamuoN/riuH53mvrFSQZKh0iU0wjjHZjfDBf2oQOtK96B9dDA3o TZyYNcbGkfnohUAu97vHPCmr+xtwioLb8Bp+NXsl64IQvHG2+hZUeSO3qlMcJbkLb+BVZdKYcKvy 4PdUSDhfeGRdub+ubQuvj/r9ae+ARbhKD5yVciRDqdRjU4pIWdTOUIg+MUpUJDr0/kZ0zUjJuESC okiK7TmZA4cpmnWdcih/KQ35EXmJ0HoBCQO9y7DZCX7m9axPpSIGCK7K5SJNTkckCXdZUkrBcBBx ioY5Gk5HNkGJGeCACNd7NVl1Fc58Xz8pfP7XD07beMo2cHC+q6PtjEEZZN7W7kxdiqu8ySj4Hb7e B3kHaVONyNS7d8ZN6d17Kg6Hg/EMo8H4zYGyIcehnP3UyoHGV0aUrVBqyuqaaB+flJ5l7uZnvIzv /Zs5GCTywEE4ulEwho6iZIqozEgeBB1oymBwEHCHL3oYD64xdOSAUxZlx5jOrSPXPKv0zUBl8x2H KMvlDBgZ8mBdj4+PEz7JkMkMeVTxWOIl/JROGUTj+194rA3dZSXGJX/mYIzRQZbNyClH4ol1kCEy yZELgMgq2WNk/cDJ84y1sdCa/gCBnFIyed56vwYvzgJt6Y6xVF3Iv3HICnw5CsYT/fDTdTgwqnAT FDHODy2ws5kMf1Q5gCxK5QVt6L/AkbH2DLkhA5y37/Ae3Y2t+sEB+DGv9S6Be2zCEpAZA6292xf8 M/54x1FZq0A4Z2KzNSofnvEd3cFbNoT9YIesn4wIjn1nDlmz8jleWIsfevbQ1m8s9sK7XfaBjMpq 0ZA9EHD4IRfwFCygp6CF3UJTeiKgZSPRlx6TE+tQWWInBbDWAje0hZugxtzwkX0D30mA6K9714DN IHNkz7z+xi/v1QUmsm1y6B4BvgBHCZ++4xnd9hzaC0jw3drQxphkgr3AW3LNxqbCVYOGNRw/2nen HcRBUL1LESEm8mFQ7fTklCk8w0FoGB2GmDPGrEScnlOi43Aw18YDn4x8zurFEAbEd+Yi+FGMOWZx Knnv2ePFAHMslJbRp5CyYqUdSglf+IiKRaJKTpw2fBlDSmqNgKDBRdTsPd0WyEQ4cjQwD6WjMJSY gxW9MsycHNwotXVwWrI3xlSA4oxZa6QoKbcxUPDmOJWpKSlAQ2WhRLY9jpSdY6Tosl+lWwpG+a2d 4WRs8VMmzUiYnzG1FnwCjAl6UWiGAl2+tnft+OV+GQJFRHvjeo5DQdcYNPfCFc7w9TeDJXtT/twL DAY6kpEA48CA4D/HIOPHA8aQ0TEf3nIYHASZmAPrRmuOD25oTQ/8no1F1uV7fCXzaOw7RpMuRIY4 ew7R3GTJ9zJ9ho98wpdxhC9ZgC8QmDL29V3uHK65Bj90B4K0GGn8QRdBg/E4DfQnp4Jj85H56G6y GcbYGqMH+MrYoq17jOV7AaT10luVIrKJtmSKkzc3HgNyvFZBiq1BJzqtGsI5RK69NsE7gRGHCw+y KqiWZeOzSo0gF95kxDrxwjplfMmmBUlwlmFnfDjivTHJN12jr/jPPtANdKI/5C62i97QRTxla7J5 Cm+t3/zkxNzuJSvkwBrxPIEoh8wOCHbwSRUgCYg9I3C2i38LOES8QPfIHF7Bnw7jrUBIQGRM8mh9 gkd0wk/rp5ORR+PBWcnZqx3yRB7IbuSBDCdg2MLxo31/mgP+aIS6dj0CBRuOvK/ZykSuHXvc/7NT V+ZU4mW8B/xMAWVY2W+M/KDL56aA6lt21782JQQkKpeCUoGH6gpnPOBfFBgO+F+0uPlvIskhcDcn 6/cBB32/k+L7L4Mm30kxfmkUeEt5kMWr2Kk8yNiHLfy1SA4H/GuajCuDAoMCgwKDAoMCp1PgP06f YUwwKDAoMCgwKDAoMCjwKwqc6oCzKcKsNg4oh3wkyJpsPtgDNnNocbAxYQnseLZJ4SigsR+4ATzw A2xusTNxCWzi0nfZ8ylj9c9l/f11O5cdymBjyhlQ19jjujWfXanZdLR179HvbTCxSQVci9/RObee W+LV1nO3+t78wcHnEUBL8uu9v01TeyCyks89z5AP8qt8+h4gOm6NR2n7Htb5EXE81QHre9R2ZBef E1yOntByr4TnTK3NZiCtHw7uWAM7AzlBOweXwPb9l2zasnvTzmKtEsDORa0zcLV7V4/uEtiF2fcF U2pj2c3ag4MVtCf04J2P3czapM4AO7P1VmuPIl/6s+0a3gPoW1vF9jxzzT3akPSUO3FJm5E2lnsA DsUO9rcAu3P1rOurpy824xx1FHbg2hFsp/AWkFkHfego4LD1yOpht2t4DWzq8+xasLr2/Gt+J1iw Jq1Gdh873Su6/5p4jLmOUeC0PmDoMOZ+RJIMv635tu7b9q8PVKsEA669gXPSdqFvTAuLvliGPK04 eir1zDH6nrc9Hvido9czJ4OzpV1bi/aRr62Vwtwcge35OQTC+PoGbd0HexrUpxu7fx5a359s70s7 +UabjuzRp3kYCdmWfkqtRfDSGqAdwg5pbVjai7Q9wJej0+dnS782nRykwVm7rh0hR+qlyb9DZ/pT Pyul1KeoHUlLArpojdDeoxVA25YeyNDXg2iiH9Wa4Aq0jAiazK89BP3hlQM3OBvZnhYTVYC0imgb 026gDYOjDKCDQEBLl/5PPEz7Su7Z82kesqKfU98pGttpaa12Xfqbk9XbyVCnTQeftPy4L7JgPnKC to7/FKToSRRA4B+nZZ1ab/Qmp0VuDk9zkTVrdH6yFhPyq+UGH52YRC5lLAIBoD2EzMOXjpBJbVBw JUP6Q7W9oH8CM/wkv/iM7mSITLkGX8+6RxsLfSMHeqvR2rp8Rr5UKfSd6hfFVw4O3/WsagEjl36H i/GObKQxH5nWNkPO9LKTeRUhek0etNSRB3KDPvjIBmgJIu/wNbcxtAX6wcc1MC86aNPTE4wW5EQg IADQh0u28Qk/QhN6gRZkRdsS0I+Pf2iDZxy6fld2C77WEHzt+CVHeCFbNy+9xh/6qSXJ7yphZFRb mUM9jtDWvHa8a3UThOpzF3STPzQi12QSL8kh+tJpuk422QN9vdqAtBo5PIaMR8Zy1jQZoL94Qb6N YV7jDThOgVMzYELMWBI4n+kNY7ApoIiNAya4gOFWgiUAmKu/k8AzlgxujkF0DwEh+AywiNZWewIk G2WUGCsHW1BYfYGibsCQ/uUvf5kO0nBYAqXKGcbTDVf8Y11Afx4D629r1pco2mYYZcbGp3CAw2Jc KLkypWxJhgD0ylIUzjngPobCdcbAOvT4LgEFF8EzNI52FIAwRAwro8PxCQQEPU6DQl9AGQVLHHNA n6cggaHUw2gsSgis2TrxgTIat0LGzTU815NIBnwyuEcjdevRj8g5oS1DxrgAhsQBCtZuzXhgHUAA Yt6+NI7+DKBn0YThIp+CHs5Xfyxnx0mtAWMmIyd7+iEZPzIOyKZAT4DmCENjA72net/hS/45AnJt fi0kgiXOmVwz+oy6ViMGV88vx8qp4yknQZfICUeeVxlkk474lJELpAA6MNgyRNUEssXhcRho4fxf DopcJriaHrzyH46FIRdE4BsZpQc5ApXu4stPP/00jUwnBR10iFOmI2QwEH7m77VP89IndEIP87Mv KdfqPUbv2IeM1csvh+pcA8fh4hOHyo54VhBBDuFLDuGLb55he7Qjor2KiLnZCDgJ+AQGeEa/joAg gFzHsQs2yAZdh5910DfOOa+XBAhkhRzhNVuLpsYgu/Bll4Mve6JyJ8ijv5IIgdxwvkc49u/P/Pjv f97+LwJK2P0kwsN8DMZIApJ3ogSbMBBkzzEiMlyKK/JihDgOmYZnKBfDL5oj2DIU5VfROiEjQA7C kP0RQuAwCMrM6JnDj341ZdprwXoIpVIVI+iTsfQp43aSFXDua8qS/laezDGXDJ+yMRwZGwpVQVmY UbZ2imAeDjjZUL03v8OBw6DcFEdAgoZoTUHhQkHRkbNhXM3jMIAajAgoHFKPPgwUwxGAP7ydkoPO W4AnjI7skpPHA84E/fHuCHDqDAe5YeBk2+j+0LJ4MiTrqiDASHaf68ZQ0oYLx85RMi7GRCt8cRAE WXVwwxpwKjkAwX3JstGawUYvNIWzrAeeeOvTQQWVjgJHZweTFYBPDLbr+C/oQTt6ZVwlSPg6WAK+ Arbg6wQitDeWgCSA10qtPo1jPLRQMWDUHe4iWGCYjwIc0AQ9M4ex0AOt43QFQMrT9No6ybfMDAge BA2h53Rx5z/m5CgERJwHXgBjysb9TYf9vQZsjQBKuZeNcRAHeROIoh/9gi+bwNklKLQucijQqYBX 9FNAxrELyK45ejNj5X+qytncaM2xGo/uoxl9s0bJB9mjg3j72IKPnFiW8eCrspCjWnNdRU22zZ4K LiQ3wwGHOsc/T3fABIKBjfOFqjIH58TAiHY55IB7KU0UR4QGPJ/fjel3DoFAycScDkXwGUEGg9Nh UIExIywiYMIn+jYGYaJcAQ4dTrKL3ljnnnwaV+YouxX5yhYem1CLeuEUYAyTLVsHYw4YIBllSl+u +T64+huYxw+w9qxrujDzj+BD6YsTdlQjmojGGVvPxnAzSHUsc2eeDOsZGSJc0ZuhotSe49DRD1gH vLNOY4dfvoc3oyrb4fCNaezMh48OLRFoJTjx3BJ4TuYm6GIwGBIOBl6MLb7MQU9fGR9nhlaCAgFR cPJ8eGE9ZHIN4KH8R65BnDon/6WVhRlJma3v6xyu9fiaiyyike85MsEZ+eUIBFHWCufQ3JwVXzQN wEFgAVRejEPuBX2CO3RBd0FegFOZc76CYu+UOQ/Ofg28DoC/OVL+dj+ZN45rfmcDrBle/nbUq5OW OMgEF5nHGqvc5vrSJ8fOYT60QEeVAsg60U1wjP+qahV6+fUdGtJdDliPK/yNAV/XVDvgyynSQYCu PW9zPWvodZquoa+ADA32QI+vvwXV7Kz52QDjRj7MLSjqYQlfwYbXfOxmXrP1z46/r6fAqQ7YpiRG RwYlKvPOTpQnula2kYWKbAmz94WMjMxYREgQlD8ph6yYoSTUjLhrHCxBkDnIbkVusiCbvQic98LK OhTGmMZScqMcnuegGAZGDl6UE4i+PZvMY7q48A8lNqd3LBy28p5IkdOzbiVugYH1u8ZYiko5Lhmh tTMOjCAclcngqdTrvZSSkaBChiNzRzt0UJ6T6S2BtXBy6CWbUapFT2X80JcD8G4QD0S1giLl5PCK 8iufMw7oz4BywP52HjTDzOgIPuADz+fn5wkvpUtjywKc08z4cU7KsyJnARC+CFr8wA09vHKIgVxa m+tKsWiEfoyMcjv6W1N2rzLssgwZPAMp2/GO1frgjlc2BqERw2R9jCceKfnLoNEL/xhB5Wd8w1NO Yg7IovHRkyPjgNGE4xQAKSkzjGhl/4MAjx6ktB983St4cZ8yorVYG34ILtAbjeGhdIu+5oOv6ocj LuEryCHb1ktX4EI3ZNPe6cEXTvgpKMMvco8f5JX+MLjK0fQ3gLcy4z1VI3LKyaExvbYGIIhAp6en p0n+yb3SJ17ZVOc9MZkQyNJ1f6M/vTU/h8Je4NtSoOx+fEZHlQwBsozV+gVu1iCg5EjREc3wmgzR GdfIr8BEdYi9kO3S+W8tw0R3FQk8wg/X4Jtg0n1oq9qhaiHwMj65ZQeMRzbooLXIrjlIOuoMeXKx B5TWve4gb4JYcu3VFVlFL1UWSQC988oDHdg5R0+qMnqNRw/8TS6sAc1k6NnDQR6tF2/YqQG3ocCp B3EwjEofhIoyEArZk0iXU8FUAug+hkO0zwDKIAEhcL8ok3BxAL4TLXME3vExFv7mSFM29Cwhp/QM DkPEiHnWeBSEkMOJITA3gJf3Z5yW/wFpC8wrKoaftTEKhJcwA5s4rN8aUwL2jCCCslLAlAThhw4i U3hwBrJBOFJg2QqDy0iaj2NYAs+ktIym8LJuxkamyjmjG/oyePChoJ4LrziBzJHSpE/KzAkEGCnj WLNx4c1wMpr4i9bhu2eUwazHNbQPMCBK9wxmMoN813+iqaDNXHCyhpQ4GTLXMj+8rMkzyUhDXw6P TOEZnK2No0M7+JEpa0AHzwIGdw0/Y5MtYwgu0B2gu/LuQwuO0BYNjGUO64CvufEcvl/bxjCGWYmW 8XYdLsD95sBb1zlfdK74kiW4VHzRHl4MMZoBYxjLvWQRD13D1/CPvME74GxzdJbt7wF4kS+62DtL 49BVvKgZGVnlLMk8/aEr1uh+QH7RvX3zcwAAQABJREFUjA2Yy9LdQw7MTa7xEx1DEzQ2Pr7gk0oO myKgM4e5sn70RRfrFjQYiwxEP8xV8RV00BFj4jO+wpWeGR992QFrYnv8bjy8cq9ytSBT9WAPWJeq Bnz9kHn0AeiOvtaA766TZTYRffxED5bwDQ6Cbfxw1OmA21DgVAd8GxRfbxTCKIJUJqVkA16PAnaW CjIScb/ezPc5k8ydA5YxMchxmPeArQqRqohK1mcBjtzrCU5XSVw2eBbIMFXF7Ia/B1AZs/NZVU/F RMY84DYUGA74NnQcowwK3JQCsiKZkowtWfxNJxiDXUUBVSRVBZmsQLFmv1cN9A5vVqInj6oGKkaf ae1ns2s44LMpPMYfFBgUGBQYFBgUmKHAz1trZ74YlwYFBgXeJwW83/vI4P2s97oDXkYB1RWZfQ+y fHtbBpxPgdMcMCNgAwImAwpjswvmvgRsJLFDVV/jewM0sIlKKUtJR2nnXgCf8AdeNm3A0zvxzwoM ExrYsOJnzlDdgjZkgDzYxNODDYnK0BXssrYzOa1s9Tu/25ym9cTmovcAaGtHsM1CNiIGbCriaOfg S2vpsrv3KLBB6IS/frcxze9zPDg6x2s9F71FR2vwrjrOk43UIWJHu417PZA777Ktv4LuFTvBK+AF nrwUdCN4j/xe5POl6916/jQHzEDY6q95G9jNaROD3aiBOOf8vefTzlk7Em3xrzAnYPX7/vc157L2 XT/ONX8TYAqhNYSAM5SMT4UjNLl27XW+/G5eB5rgk/YixxNW439LmlyL79r9a99lbUc+BSKMk/Yb LSF4ZWdqhSO8qs/7nUMVUGqj03pWwc5wLTcV7NTmNJYcsF3X2lDsXN4LazS8Jd97fPRea2vR/qOn u55TrkUID+ZA6577jwIb5Mxku3kFOdqttAhpkatw7dqPyMO1c1T8/E4W6K2+cG1DZFUADezGtkbt X3HK0xe//KMr5G9/+9v0Xrde13KVAz5y3ZhOAVsCeOwB9rsPtvY891Hv+fGshTl1yLZ3PbcURguG I+2042hbISi2z9v6r0/Q6SzOVdafpl1BawTDZNs/4Kj0Z2o54Mi0JgBKqnfNFnpb5PUxmlc7ix5L fYd6DLU9mcdJWhTdNRkp48PQ2VjhHmdUy3a0B2g7sH0frqLjZPGc51of7oTYzD/WRUlUB/QO6il0 3rCeW3PmiE2tCHoPnTIFtKToG6UwntWuATenCXneNe0Nds7C12lZdhXrA9Q/rMXGfdoNlsCcWq8o mn7MnAmrXSr0RSM7IK1dj6KdkfAU1eqbFGnrVUZ7LUUCJbjZtAE3uynhoT3MWlxDE4ZPRkKJRfH+ Jj8CAPdTWM9o3xEYaNkwv2MiReYPrUXGWGTJCT7Wgl9oqg/zyI52js4hE9pmGCOHszB0WjEYbTKh YgAXp4Shrf5cx4ziD8eK/ul7XaI73vvRn+lZ/bpAbyfeoT8nTG4ZRptgrIceyFQEuGTec+4l45yw vuuAHlXZDmMvU4K7+RhlPFRVwif6Y5022+ChftHQV2DGqetz52joMJ6Qjdo+lDn3fKInvjkpip6T PWOTX/quZYZdcLSiXdfAYRBshH5/MhLQUkQ29FlbB95z4lp9emCDBMJ4RG/Si0/ugd5YdGUbtCgJ EoznuFDPatHCBx0TZJJDR1OyC+fn5+fvLXbsCQeIvnrV0ztN99NmpFKoz5nMXQt4RW/tmCd/9UAR O+fxmd5WwDvP0C86h6+hLxl0Njm5tRMbWJczq+kc+UdTAalxBYLoTk7og+f8GNd1tgutyKTd/NrG /I526Pj4+DgFjOg2BzJlQQKwNnaFbvANbClbTlbRl74JpMg6OdXWpRX0odkHslDbJ+fmeotrp2XA lNvCCSgi1WMBEYJSIRhGKSkBRkPZROsFAnKgGIvJBEbUmqMbGRM/HAKHyxDo39WYb24tEgRaqQqT MYChoOQMiyzBwQ96HzFfMMCQmYNRYlAxnkEgnAwCp8cIMlJHQZ+eA0EcW6ePkvIDCkiACbgDOODN QAgwOPynp6epRYeSoSXjJztzYpC1CxgiqE7kYYQEFg6/4BgJ/R5gdNDDuiko+ubgFOMyUgyOg/kp KDw5EE6TcnECfpflux+++EpB4Gu98OVEgq/xKRGecHroDwRtsiSywAEwxnCjYO41B0VWxmX0GCOy IJDiFPEbr48CR+5wC46eEbVOQH79Tn7NyZEA6xTYkW3ZArmvFZ/ppu4fzpzzcC62IDKZLX5xshyE IIUeBciQc9HJJBqmXUWgg1aC15rxCHwFwu7FE4YRCIjIID1AXwYLffXBGge/8IJTc49gg04l2KIj DqM5CnCxboZZ6dQBIkBwRn4Fk9Ze+3ydy+1QjVoZUELlyOkCxyxwodcCsiUwt4qGsjd64aOeasEk 2SH3dFKlDb3gQMccGETm2S2OCpiHTpqbM+OsAoIEQSq55kAE8Z71u6DDXPiHpy+BpUzaXHS5Atli T+kpWltTQNDPXuJxwPqsHU/orR+yALRMWbMAxHo4W0D22XK0Q0uHfHD8AL8Etr4TiNT5pxvKP+jO PrB3Ago2hzwmUDUO+vIZaMpmkRtyzHkngGdf7hFOy4AZcgaMw+JAMFz0Chg1Jx4li807CMyj4Ijr eUbHJ0MjszIW4CQJlecYEULEWBNCgkLoCIVo1fuyelye8QhKTvwR4RJ+2SRlz71KOqJgcxACBlc7 CCUXVb0UKD3nyrgDwopOskY/5uOoGQVKnACG4RB5MlieV7ZkcAQq6IUuFIXhJpiCki1AOwKOxgQX 4J2sVOTPsLgu4mRcGGgZGUUW1StZBygUvgZfRhX94ApnETH+B1/P4RWjaq3oy4kB63YdDxlIDg4e 6M9ZyfKNw7k/tGDPd9aul1gwQCn1LvaARlln/139O/dwXn5PWQ7NyYZ1krnIL8esxIYeDBS5hFuf gdQ5yDYHzGHLTlWBBGB4wdiQx8hkniPfHCdaJYDzHRoJOtAzuLtOr/ADbtbuNDWgkuF52SB8OQLP cW5oz/ABQa3AF+Al+nLW6IvfPeyhr3sEMNbG2AuU6ASHRP/ZCtliX2kyvwMt6jtEQTUnkbK0Pv6e Bj2OdIXukw8Vojh/ekgXBBbojL/sA33ARwEAGsMxDgUPZY5wZV+yt0PmaByBkTGMxUEYh30RIJvD 95xKD3vomGcqv3PNZ67n0zW4cFKAjbS2AP1BX8lAgBxzzOwEm1KBbSC7PrMu36MJuXpoeumHLTMv wEP0dp0OCUKXwDMCbYE8euMXm2MuOKKvtZB99GKv2CU/eCVoZzfu9f3+vyi/RIGD1xkegiwbUDrG VIYKkTgdZQpRNqOAaK4TXpG7KJFh9eN3kTajgAGYhQkEl2GhDN7VKTWKppUmKGPGMq4xfAJMU0KR gX5pmbeyiowJHjIr5U6KYg7jU2Q4+clY5s54xmQ0vGtxfQ08gy4yavgyYrJp1zkf/zkCvK2RURKM iPBkwr4jhJwthaEUFFeWIvKToaADRYOHH+tAw4rrHH4UK/8LEidgDD8CAWOgkTFkB3iI5qGv+9DX fYDTcJ8ynh90pETGmsPXM56foy9H/9CUlDFWyuP0OHHO1VhKgugog0ppz3oZuYzb88rRgv1B89PN 3T/hlaAPbciyoNF1cqPURd7wyHyuhybW43e4+FwCuCmnKhurLMgIBChxLmiLBsbjnMiuefwt85eJ PLfMP+s1Hl0KPf0N4DFHXyVAQSf6ylg4dc6IzAkKBGD4io8CW/gYJ/OZp6evVyuy0S2ApwMtOH5y a/10L2Bc+JmDLoQm4a9P38GPLNArOs3wK1MmQ8t4c5+ciXXTrwQ5bA35UjVSqREM5bvQ0VhZu9/J A4ciyRC4xJ4JNOEn0ySfwdenoIHuO8aWjJDtgFdsTuSr1/Ld3Cda4UtoQkZA5DF4Rx7qGLnXNb+7 F38zVvQa71UJ0VnJPEEyuaRTcBWgoxngWMmNtaoykC2fmSPyaJ45vKZBfvmHDRb0cfSCGoEnEAjD 1esy+mis6Jt5I6f1+i9D3s3HaRkwR6GchgkyB5kTBVP2ES15L8UxM8yUXSbre0aGwcdwzoDjoSgM k3FENKJXxH9qZVkGCNNFcgRDxid7pIye5Yy9H1E+dqYtZjOonK5oj8OgNCImpRKlONmjDEtGynl4 Ht4ctN+9M4MvQ0UgBRTJItY4az0yBgIhoyA4ojvvaQQjDJcAQtlSdvHYSkGcrTV6B8zxKbESXgGN LJ7jhbvgRJQqY+SUZDlwpBie5+yXQDkZvazfGvEHiFQFF4y9943oC0/0QUPlYYZOeQfdZMUMmPkY wYqvZ5SNPY9XIlJGBq/QVAVClsxoKUmRCXRipARf5EFmyWEIoARwjD0cKbasxzoYYIbC+Mq0SoiU Fi5kyzo48y0QlFgXvFQdyKv5yErkV7ZqXRwFQ2ROTkvGLEK3HmvD4znwHePP4JsDvnCVTcn6vT5A L5uUZEgcdd63Wy96e44Mwo8Dl8GRBRlW5Mo86Pnt27eJvtFDxpBewoGckzd0kskbX+ZLP2V0XuEw bmhCRtAYvvAh19Zg/eTIa5QtoJfwZrwFv8YQSAU4ZXrNQdJ3umJeQQ/nRQfIiQCUzLuXrOCXTDSO I+PNfaIf/tX3pCoC5M24cGTE0UEAhrbkjR1io8id63DlZOmDbAyeMj5jCW7cL1hSQvU33uApWtJL czgHOmBTGNoKrLeAjpALDpHdYD/oHz2kg4J2emtOFQ42YwnQNfQVRLCv5FAQ+tACYRUD737NSe7o G1sok/eag+xLRABbInhBG+vzLDqQF3JIJtkONkqQnorZEm7m5YTZ8bzXl9yxi8ZlF9gV9s7f7LX7 VHHwjY6qnOLpXUFTwlOgKcilEf7iEzSGTn835k1/Nwd3aZne9Lv7mmO8tKhlut89flx3LdAMy6UZ g+lP4zUlm343RxP6S1OG3Do9656m5NMzxgeecd38nunB/c0IXpqx+f4VPPy4lnVlvKYsl+YULy1q /X7/0i+eN7efPJ9155nmJC4t2s+f3z8947sW/V2a4fl+3ZqtA36BzJG117Xknv4THk1IJ7r03+EF mtQ5/G6ezJH15NmKb1PSXJ7u7/E1lp+evqFXM+zT2r8P8ssvzQBOeEWm8LaOVX/3SIvCL2238b+t ox8zf1tP6Bj6kcXMRX78ADLheuQ395k/8p9x66f73GMekPvrM36vsmWe3B964QFwnX4Yx2eu+9uP NRkvv3vePfSqGd9pjPpPq3b82/XQ1zyezbihTwsuL82ZfcevjjX3u3mtjXxU3c29cAuNXTNP1pW1 hh++tza604KzSwv8XdoENIkdqTebl77lO3Ob05rr2vM9WxY+wQNvgfubA5x+D/38YazmMC8t8Ph+ 73RT+6dVAy7tf/fKn5uf6OQnNAk/zF3lwffA93A1dyvTXtr+hu/X1+jrJnQxV8Ba/U2n6WMP1l55 iF/w8hza+93PHjBO1pb7jdMc//Rn6Fv54/fwLbzKs/fwOU7CemE4pCQqo0iZ6oXDzT4uO5A9NmGa 3l+LBmWE9wqyOJF2U7CpNCSbugd8s+nGO6EBt6eAbKYZyc1s5vYz/2bKpsmcLE5VRQY29171jLlv PaYqkFdSss4zQKZsQ55XXapKqnf1PfAZc44x5ykwHPA8Xe7uaoscpzLhe1GU94bv3TF8IHQ1BQR8 YM/736sH/2APtGxwWtF7sScfjPzflzMc8HdSjF8GBQYFBgUGBQYFXo8Cp+2CfskSbPDwMwde9Lf3 F3NfvYtrysh2Erd3RDfDt73LmEpwxj4K8IHXS8Y4Ovd7e0720N6Vfd9luRf/9q5r2gyy9/5b3+d1 CbwrtPdj00aiZET5LvKQrDLX3/JTVeWWevOWa7nl3O096MTX19BdcmLjWS8vt1zPtWN57eHVw3uE H9qOueczEPeewU5c70e1UnASdqntAQdw2FU6tzPObkjEtgPvrcHuUbtL7cb03tOOSv1oa2AXoJ2G dutpXbjFeyq7Xu1+1Krh+M8lsGNRD63d6fC1wzW7Au28tevb92e+z17Cbe46ubGLGb7WZofpa71L 5qgcHkB+/TBu6AXsptYC5QAOMmoX+h6ws9qudTvgb70ORrHiy3FqVavgDF4yqp8dMKJ4bteync92 9Qe0XNE13QJp+8h3/SfdtuuXHvhRArZz+dZgl7Fd+fr4X1I6ha+dxniMRujgbzTsaXbrNRiPjpEF 86KTQ17Iup3zWh+vBb2wDgeh03M289rx1u63H4WtIb86SK4FO7K1lZETeoTeWzZzaw47y7Xz2SX9 3uA0B+wFv94+wsYZ26pO2NJYz0C0nXOTEFL+QPpMbZnX/xWgLIywNhztRNoBKJJWAE5MCwSBjkNx nZL6gQuBYRhcN7exbFMnEMY6Av/XWqFsZtBiwADpdSMEESiRmWxdu1MMLgPIoHF42obqGkWy8BHp RxFdkzl5XvYP14wFZ9/72/2CgTXnCUdtBcawNV8rEXw9iy/aQbRu2cZfwfyUG/1qwGBu19ETDlm3 Z/G27Y6chnG94lzHXvtdm4bNNPDVtgE36wsOaIvGoS95IGu+F5RwmpEH88ie0LDSd2l+49j4xjBb h3YdcsromM/mFZtlyCL+B9ACDz3jvgBawc8BDtXIk3dZKFk0JzkP7/Psnk/jaAUT9Brvn//850QH 7R/mpQPabuAf+uEJPfMs/amb05wkpZdT21wO4VjDw/GAWqY4Mb3RenOBv60JDnQx+kcmorvo5bsq P3SZDMExeqxFStuJ9jXPHtVbeHFYnDlnIsjDlxx+Alf0YCM4xYC/yQ6ZInf0IrYr+LqXnsB7Sead HiV4Q290ciQlfBwcIcgjK5yT1rDwKjhIPsxb7YY2KnaFI08/PLrjK9rBh0yQr/xtDLoA77T1kF3r sj6444v54QGMYb3ug98RZ681zwEs8NDupW3NOFq0AL6qfsIJ3uhtLX7M68e6oiOuo5mWpMqrjGUN aJU1GJ+cWSd7kLVPk7/BPz+eNadshVBTeAZdjx6DqmGao3B0GQNFqF3TowU4Jtlh24Y/9UEGPxEO I4whFI+BIUR2PjLE6bvU4ymS1xQPBw5Sfy2h0iepN030RQA8w1DrVdMndy04eQe+siFAkJT5GC5Z /NfWu2yNcNZErjePIMC/OgbPEiR9kIwV4Ra8cNAyEI5A/6nok2HU50s49fjpQTYewWJg14Cz5TD0 LFIwTgS+BJhQGqcaQWNx2jIkwRMjji96lFvL0mTAVDXsfmUcGRXGA+0pq7XIuvGuOp01HOt3DKJD S8gK0IfLAOOV84L14TIgcEvvqT5B9JOVfmv9huSOgeIQHcDBCDE8AhEHBywBfAVK+q3t4pZlkF+9 uWjHAPipRpbhhqt5KbheSf2kQOVDPzV61T5kvfBO9MJrtCYHeGreawAP8cW6/7v1HX9ph0PAV780 +UMf/cnRj4xNDskovlVYkod6T35HA45Mbyz9soM3gEcyaXTRrwsfNkEVSH8tmtEJOozG+okdBkJn GUh40VUHVsCTnAs0GHL2RUWh8iDzrn26X+DBAaC53fH6WOEFyDHamVvAT3fhSKcFOIJAa0UjQSx5 I3fwZZOMLytbqoyQK3LIabJP+njpkLkExuTEWt1D9tgZdor8wsk8bBx7wQ5wknTX7wEJD9obi6PX H08v0dX8aMiZcejs13+1Xt90W6iQoLkqJLv8xz/+caI/nWMzBSdsxxFgG9kpwRr6CGwd+ck2y4zJ KbqyHdbA5tB389IN+mN+PGIL2UCyrpqowhMgL+wOx24s87n/f9oBK/yPvmGVNf3jZOGt4NR3wJRL tMdwEl5MBpSGkmK8LfAEULQLNHJz2Pl7utj+4SRFSw4coIQMr2iMUmMKJjBijBkQCTK0IhzzMYiU iPIQSAyRITkrlFIdAc8TYMaEoMLFuoznnFiHCPxvO2JPQz7hRw+QzzonYy4CphyElGEGDhahjFqP CBSHhjYyT4KLdtaABsk467j1d/iKCGWV8KXMst5Aj5fvo5yUXSYUw6iyIVLFL4YhBwkwpHFUlJyj S7SaefZ+MhBw9gPQkbEEHDN+y4ZkqejCmZAxysqJKVUKkABZcT/6CmZC3+nLlX8YWPSiqKLsCj29 GF5O0A9ZMDcaAgcCkN1+bwP6CCDwk3Mk40uGu8699LuDRuArowq+DDQ5kZnSgx76deT7pev5vv/E L4EXoJ/4Rs5UVzgIQY1AwZp9el3iYB28YJRVOAAjidcyQwaZ/EcGfM/Jc3ACCgb6CHBuAlLBPplV KWBXgECaXOGjzJ4dAXSBjlkn+WLT0Ba+5I5+0sUe3+nh8o+slxxwigIz6yADAiV2QmDCbtBvDpTO kj/PkUffydpzFrWhe16RdQ4dz40pmGWb0JU+0ldOVMATHZEgcGIOycA3Fb0casGWwQcebGrkuixr 16/R59gq+LBn5AV+8MIXAYfDSOBvHWys39l198RmO6RJUiAgCwiAHRzDNuEZx8t+CSqsmYO3HoEF OXpLONUBI6rj5kS/HKQIV8bLaYliGBynoGBySjmIIZKr0VwlECJypBUYY9cYVtFhIGMgeH53H2Gn JBjLceU7zxFkChlDkrHmPhlcERYhoqQUl0KKsETTMaQU2ZopLrAGz9Z1MDaU2nXRWQX4WhsHI9M0 jveSjgd0HQ6Eso5Xn6+/M3yEkvGAN0EMeN78AbxCC3OJRp22wwnjq2cFMwy7jJwxgRfcOV7jUhrv 7arRv5a+lU6MFvxlGYIqf+MjHlaDQB7wFA8YNSBSFgwab++7ZMZCliwDcqoQ48dwBypurqlWMFLm 5GwYquo4qhxmDJ/WJMq3Dj/uCzBUlX65PvdpLnIAX06NM49Tcf/S/OTRTw+9PPTf939Xesgs4YAP qjloJ4NiZAWYwPicsLnJcXhIlwSjwL2CarpEvmSNxlAh8Hv4615yyXBnHNeWwD0qIwKDfHqeTJFb dKN3dKvaFA6LYXcd3+AkAw6+gg3r9N0S4DEZ5nw5W7ZR1inDM57gDbhmjZwLp8KOAHLF1iQYda3n FTzcx0mrHOIFulkTueB08Ya+Vhk1lrXQIbplnebh/DhofBCc9MBWKA1vARmpciKAYvtdY0vQhJ2D FxoB64AHukkY8AyvAr1cq+pZk1eE7BYdkiED9ge/PcM+9GvPmK/1+Wutu9HMhJYwYwylEMUhKAfl /z7FUNmU9wEcIYJQCuUn2QCHZWMCoayAUQHENDYFQEhzcOyEmAGUpXEenJtxlSIqLpwLnOAYZn9t ZWNl2ircma//hCP8bAjDaBmOUpIMmzFWUnGP/1HGmq2RwCl9mFsp3PfABho0EUmjAyNEoAmPNcEb jmhqnRSMoDnqU/anlON6NUg9vsawVgbdj3EDaIhG7kEz31M2BpCRxCvl1/9sR+dZh6NG4Wfd3qWJ VuHNWMhkXPOawHjWG1C6owAi+C1gBBMAmE9ELuJFGwZJhiuDCk1igK2FDFR5EDFTXvRFI2NU59Tj 4h7Pu8cazIH+5I8ckU3XleKtmSzalMc4MJRo5Hn4A1E+umY9ob3rficL+AnvgPV4PSNg2oLgG32r +FoDfF1DNz/moTPmhAM5xP8EnmjomeCbdSzh4fnQwziCNfOAx8fHydgzsLJfYG744IPfffrbmukf nUFXgR1ZQnvBD1qRTbLn/poBkw+y6rk1MJ8144/XMYyzv43nWTQUeHGi7nHdM3htjXTc/XDFZ7rt VQdaku/n5+fVahSHE92WqargxNlzuAJF9Pf+He/ougxW2dW8bJPAVgme3LkGN7TBM88IalQV6Kf/ ThE9859rqFCxWZw4+4X2Psk1nvnbOOgArI89k6mbG37ogCYA7zlsG/e2wDxkyTzWzWayK2jpbwGk aoS1oD2c0N/ffIpPsm4MfxsHz9wLZ3TlT+zLMBa7JWDIKx14Wx/5z7js1lvBD01Yns+YHFGUMhCG c6GUshYZnLIqI80xcniuUZyUVT2DkN6HiAJrRui6iI4hRjiCiEnGZKQpJAcoWvNOQ4mJI2E4zcNI Yh6BlqkSHMZPmYLCUSTjpWSxRhvvI81nbNmg0g4hlfWbX8bvb+MaT2QHR5muQES0R3gpAucg0kcz jphweY4DZswEFBTXRgsRIeWDs0yWcqCfdXmfwQnMAVqZz7sdeKGtkpNIWMYqYhRJUwS4ykrQSbQs g8RHxkDkSHgZCPfCyTtAjhXe5sE741H6HLoPJ1UPBtQrAHOtgfkYFu/qyJNXGYyz9THG6GvNjAn5 gquSIQNEBtDS9zIKxoiBUHGhoIyHCL+W4CsuDKDghsLDQ5Cj1P7QTidCPwaN0aD05Mh8+Iau5DrZ LMeBLkqTvsN3NCO7DJvrZIgMChitIdUgxkX5kOPCqzVgVODLwAg2OAkyRw7xR4BmzcakA/CFg4wd baNv1sBYoS36kQ34+qy7pCsu6EBv0F2QYX7OiGNDX/pBt8lwNnSZD76MKRnBN9eUzcm24FUmidYM KLysA50EXfjvO3Qmj8C7Zrruvbs5l4BjIc/obi64klVrFPCgEd2GG3mnM+ROORw/7WC2TjT0DNtD RuGLtvD13BoO9NrzAlz34buKFlmlV+TUWp+bebZedgqe7Bk6eDdsjwEc0R69OGO8QhPyQk/Isdd8 5EGyY0OSTNirCsEN2cS3hybX7rUGOkx/3Ru7yKGReePAlf7DlazCVfldJaxuDpujv7O68Q0NOXPy oKwsYPDqSMBg3WwinRaQsG9sHr3FG7yAB9op0bsPHeCsusVuwVsCALfgjI5oi+/Gx3N64/0/uXkL eNODOCjuXOlrjhCEj2Nm3ERRew4qnxtn7Rp8vCP0Dk30dAugFGuKeIs5XmMMxnvOYa6tr3/Gvd7v yIK8dhiwTgEBmayHc9qrJ+sjvv63nB0Hb7MRZ8+R7IU12erHEExw3pwA4/oWcA2+W/hdYxu3xjr7 e7yVfHjvem9w73R8Uwd8DbMYIZmYSFhEp2Rza6BAoqWUxG89/mcfL/SVFckEB6xTQHQuG/He8b2C VxOySUGz/0VKyfUMEOypRMiK3muwcgZdXmNM1QCZqve0A66jwLtxwNcta9w9KDAoMCgwKDAocN8U OG0T1n0ve2A3KDAoMCgwKDAo8LYUGA74DeivXGZzgM1eA16XAjap2ORRwWY9G0Ky6zPf2axhY5RN OAMGBW5FATvNbd6zcWgOvLe0WbOXx7l7c80mN5v87g1soPJabw5spPPawMa2zwo/nrlwu+vs+LV5 Ks3fdn6+J6AMdh4ywt5hej+sT+4l75mMqS/STkk7cW8J3rXZ4WiXJdCqY4fjewRr0L+YXc12mwbI lN2UNnVVQFs7He0QtZO7Bzvo8dBPwDU7t+2u1PIS4JQdemDHp37KuU1ouXftU5uIHdgCL20r2nK0 WhwFsogudpPbC2GtdrPeEuz+tvve2C8B7WaO7AToh8bW/1pAZ23ctLmSDbo1cB70zQ5uYPPm0s76 zI22T09P0w74uU1pbIu+c7t29+51sRPYpj1tdkfBTmptVHTIvN7X21X8EsB73RzezfdAL+xYd4rY WXsD+jnv7e/T2pAIvh4sW+Fty8+JI4yo7/SGUnBG1vZ74JqsEPMprggJ8wIERDRFkY2Rdg2bAGQ2 NqzYDAAYOwbUd7bX6/vaK8yZL5+Mp4MFbFeXuX5trVMUmqIYG16yKCfVuKZlhdG25d72ed+jAwNg t6ZWBVv4OYHqyO30dq9WEi1TgLLaeu+5tBhk3cGvfqKLXad2iTv1RetIbQ0QfVMyc1EubRTAhh9t UdYh84MvZ4Fu6AhniokfnDw+cASew0ORLJzt+OYYtGXINPH26IYr8+Gf9g/za2eCk+vkQ3AnGMJr dDQ3Q6jdzUEhHHCuWyN+aKewS7Y6Z0YQnhx6Gvbdb/MTGjrSz9xxwGgML2skr1tGilzCCS/Mq/XI fNpBAOOphYIxT7/i9MXMPwIPu8i1XmkHQRtjWpNsHe3xiByRHfOgCzklw4KZ2tZHHtI2ZO7QV5uI 1rTQ19qP7OYnG8aR7dlAqb3JNTRHFzKHl2Qkm3jIIFsAd5ki+fM7WaVX1vat6QRewivyCD9rtAZj 4ZO5tI/ZIU3/qjyYBw/RNLLrmjmMS148Q4eXwByyT7uvf/vb304tMHQnUPFFd2uAW1qoPBt8PYNO ska8JS+xD9rp0EqLEb7C2+9wo4P4zs4etXHmhouWt/RFOx7SmoyJjnSQjFmfxAHd/Q03ModPbA95 RDc2QesZ2vc2y73GIH/sU1rJ4PGZ4LQMmGAywBwuxbODGcMARnMQlEqPpW3shEdvHsESUeoRtINS NkMZREmUA0M5QScH6XO0w1IPGoPkORGg7zD4z3/+828eW7RtTPgYMwK9l8mUmnDAQe+dH31rBE82 r6+VIeHQ4OXULwcCZMc2Q6InD956MRls2ZZ7rdd14DrDTHApmoiQoRUlOj9XryTc9clZs/vmgPA7 O9ZZqJ7zd4CiarGSeXNaGurNSXkYKcaBcomkZViCBEqk/4+T0TTvKDqGT/8wxaR8+vfgr2dVYAI/ ToXS+p0BZmSuBbjrz8NHiq1vj5zgrZYH8vWHP/xhukcPKPpYB4NunYwTuUnVhaNxCpCztfs2M059 TjYEIP11RpX84h2D7zQjNF8C96E5udGfSFbh68AOfZd4hb9oxfBa75Kzc49s4qllUED2Hr1CH2MJ FJUv8ZN86vfUL8np0SF6539B4nicUuVwFcDgki88dZoW3juuj8NA7yO9kmTfmuCsx5asqCg5PpAj xQ/00aJETgQlAliOwDPk1Foc96hqoC1LECGgYBusy/doBk9Bk+ABHci1fnPygOecAFujZ57ht16O XzDJTpEVeu0kNzpPF9ALr/BsDsi1dclYHd9ofRXomIAWrWXi9AdvrUv/riA8+Arg4aXjw73siCwY sJl4YI0cF4eLhipAghQ9r/DF76OA9my1Y2+B4E4F6Ln1IiuJkzXOEt2sF65slL5b80qy8IQdxlP8 9byTwzKmZxwlimf4IanA288Kp70DZrScR0uQtB8QFoIICCklwEwClXcXom0C7VnKQIGAk1sYdIpL 0AgxQ8bAU0AN7QyYSIthZJAYGY6DoeKsnHjTG9Jp8B3/MMJ+AowKhwDMKxKlPBrkOXpOAi7md50S ysxkONbEuFEsjjvA2RiLEsGdMQUOkLBWwYayNcjc0x8z/8iWKXjeragk+J0y4IGoVqDikIucXuMA f0qEJw7VyAHlsiJlQ0rPoMueOWNjcHZK3A5Fyf98BR0Oj5P2I5hg0I+CQAZ9HSiRKorMQEYJBwaZ 8YYfPqMt2SIHvqulXjKIN4KFlwAamcOccAuv1sbED3wB1uJvlQ6447sfh0IwbtGTufEEHSmfM3AM GONO7hxUQrceW9D5pR1vSO4YezpCfnIkLIMvKJWNoo/szY/fOWBGmOMSgKEhfXtJZiW4UcLHEzg5 1x3QAU6WDaDLskKg6mAN6EvfBSnJkNCdcadXgh8G3e/0hK6TYfKHNgIwrxQ8gwbW4j7A8QpU0Etm GhukckLmyRf6KJEKVqxhCXp9o+sJisytKgdHVQ7rBPhvbPh6faAaCODjKEw6H3lx3T0OrXANP9jC HE2p+uG0tHq/Z64FOPmJ3UBzgQ6Aj9I62gvkVQesiQ1gu+geupHBBLzsvsC06pvkQwAl8CJrbOlL 8b52nfd0/2kOmGIwDIymqJ0gcsiAIeBEMEfkmWhf+SWCnt8pimiP0ZeFAkZf1EnQGR4/DBMHa2zP cGIUWBmcEhKejG2MlIaqE3R9DszL+QRExQRSpEqQKALDzjBbi3ng4JPA+r0+bxz31dIWZZfxy5Kc qlXvFymmtG48610D86FFsl9OTBaEXgIAwYwfDonBARwyOlEkyhwlFK1aB14xXqEh/M0BT7hlPhm/ SJ1RwKMeX+MyjspoWyD7p+wyXr+rMqA9fqCdT/iiD3z8+BsujLrfIzN1LvTpwbW5e9HQePUZlQDr tD5OyrxbYOyMYQ1wRjuBne/IL+OHduR2CWSrsjTgFYBMhPOEA7kQ9MQwu8f4DFyyXPfhCZ3i6AUD gYeHhykosF74wavSN/eRAc5yKxDM/cahj2yAk9uUOOmdIxLJI9kSVFl/QCAuIPcsgDf98Dz98B1n FYBzXtugQXRkSR7QTbam0qRqE12Bl0yfYwACBA6j4pY584mv5s8YKnIyRhUXQTgdo9fwDV7uzauA im/GtN5qH1z3rHfy7AxwT8B31WbkuvUIttjiLUBrP1mHSoQgSdCgcsDmsb1kJutg99hS5Wnr9X0F 90XuXZfJPzQ5A+aSdYfH08VP9s9pDpihdfSZCI9xEUklco/x9R5NdsuguMbJcgzKnxRNhEsIHh8f f/OtvfMRMTnCUllMOZnhl/2KNjkHgiMyA4yc81xFYwz3U4uOayQmcjPOmmIZhwDBgcERxYvwCJCS IpwJOOGmcNbJWShpWZMMh+PwPSFFA98bR9mIoiZ7kiUybIwaQ6P8B2/Pmt/fjKb1GWMJGFuBgfG9 u2RkzIFGjJZPGQ5eoCkcAUdrw4RIW/UBjsAa0cC8+GFdlAgOMinr97tPTolRNwdnbzzXKGdA6Z3T Qpc1MJ5In0zICJS3GSrZiO8YdPgr0ymjkxfAcDNcAhpyJJOBCzqihfdrsniRuDIYmqOPYxetR8Um jkX2rkKAlrKwZCmhiesyJ7RJpjC3JnwjG2REec56lOVklSol8CO/nIWx1mSSTsFLpswQcjpkkaOl E2TPKwR4GQctOBh0cC1nhgt8BRCqKmjhR9bsXF5At+iQ9XMi5guQRWVl2fcWkGEOQEAtKEpJFb6p jJCP/LAb6IxP6OU1DT4Bn74ns/iFpnhG3qwbXTgLn67jLePOYZEHZWl6735yij7kkJwaiz0iP9aN Xu5Xjub0XJ8D61Ka9Sx9JmNwg2cqT9ZpLXQBXuxQj2+CKteN496MZR1orsLmh4zSQUAXzAcH93jW Z4Css5Hw2wL6hA7GoFNsLbuJpmiPXpwsfcdTPCRfTrUjl2QqVUs6An/Btmf8jm9K5sbFD7InECLz 1vgZ4bRNWASWcBJCCiWiVHIRpXmfQnkJpnKUaFuErqThPu+FRZ7KcqJGBoYTVsIhmEp1Ii9j+d01 jCaMnAxDLQP3PTwYR+Um44kafUcR/V/CDMkacD4UEh6U1ns05VYRL7xcozzwYESN7xnGJu+RrI1g MmoyOgZCuY8hoKiCBD+UhFFnGBkq5U3AiFiTzAhNOR9zzwEHzND6XuROEUTaBN+7GuNQWOVnc8pU Raju9R1HxWDJUmQC1mQ88ypTUxRO0d8yKXS1BiVriir7gidnbY2MP3qnhKgMaR7ZzxpYB4OABinH UWBzCxLQUiDEIOExeUBj9CdfZM79siXVD3QX7KGFMr/vyBinJ+BhTMgeepFD83ACZMt8ZFWAh67G 9x1aec9uPM/AaQ7MZXxr8inwQ3dArvEi5UkZGd7X7KaOaS40NT+Z97d9CXRIIGENHDpdgDfZYYAZ T3OQTQEAXMmlYAx/ZdNOmAte5N1Y6GsM9MVvoKolSFE+n8u6Kr54iP9kis6gOcAz8sH5kT8GnD64 5p2t9TDu6I7m1omPaCgYFsSRPUAf2BmfZAIPlUOzfpk3B49fslHBp3noNf6iubHJAtlEJ5vuOCN6 Q+6X+EEP0J2McqzmRltOm+7QDfjiQX2tA18yhgfkA77u56DdT1etFU3YHI7Z73jgfs+Zxz1oaB68 ND+9RQcgMCW37N3SGqYb2z/ogc5o7tN7c3KNLoI9emJ+Mk/G0Bf/yYlnBJXJziUcX9tmVeuCD7zg h85eadFF43o3DC/XyNlng095EpYs28YZWQ1BG/A6FGD8vS9WRfD+dsD7pAD+MZheYXw0ENgIRDgf gU6C4Pe6TgmOAK3u7n+va/mIeH9KBywLEZUP5/v6Ii3yl10NeL8UkP3IXj5ixqL6pmwLZMYy0fcM 9I2d28p+3/Ma3zPun9IBv2eGDdwHBQYFBgUGBT4GBU7bhPUxyDNWMSgwKDAoMCgwKHAOBd7EAdtR Z3el3bo2DxwFGyCMsbYr+OjY9/ic9b4EvIO1G9PO4blduzbM2LThvvcM6OQQARtB5sAmG3SwMekj gc1c+kOVUQfso4DXURVsRrPL2ObKa0GPs01UHxnQRXeFDVv3ADZ68SV22/dg46Xd3Pes5/9qbu2x f+HfGORQBIu3U86uPbuHvf+zQ9P2f9v87aCzg/AI2JHrfY1dgdorXgKcuB26dmcGX6fr2I351mCN eqk5Fu/fbBKx6/pa4Fg5JZvPfBqngl2qWmbuBeys1HbkE9j16YCIrXf3eMhQLAUsAkCn79gFbsxb gbYKbVZ4oz1Iq4UdtHbmvwbYJWtXr9Y/eKDDa4K5BT6CarLmtDE9vvcIbAeHqUXG73bvareyq1gQ ygbY+X0N0M2XJBTXzLV1L5vI/upuYMPwg+11wpjd5UcBXQTwgj1dJEuAtgJdAY69AmjsYI4jdmtp DtftrhYQ2CXONlQwL3t2zwnFaW1ImKyHz9ZzRkiPYtp1CLst+SJ1rQS2qgOEwjQMTuuSzR7AZgJ9 nbb8E3T3ek67D+LbVet7jp9Dv3bTAaMu8rW709Z4+Iqq0jpg2zxGEzxb6WPctA3paxNU6NeVWfrd ln3tE1pF/G4bv3YAeMvazSVCgyvHtwQiaqcYOVBEX7N+P4qktYLwoZVrxq3/cTtaazci+A7hQHPt AFoHtAvZhFZbsOwMd79evvRqwklrhb5A9OC4tHCgrTH1G8LPc2iSYMW6tKrgr5ak8HdpjUvX0ViA pk8Qn+26NRZ6CeDMoZ1NuwicyRx8HTwi4NPWUTcK4Q/a4wWZScuU9hTBoJabii8eGRvdZJYcjAMj lmTLjlnnUwvcyASeMDpoT2b155IF1+HLYQqGrAlP4G1+80UHrMPOXBm7e/CYcSXraeXQfgOMQ171 9OrNZCyBQISMWI8qB7kMXYwNL60v+IaPS+ubBlv5B//Js3Y6c9t9a+0CKLyCr3u03wDOwZoFmPgh GKKHMhqGW+uQliS0ojtA+5O1sxNaYtDKvfhDH8iA760lsjo92P2jdcc8gm4tSWjgEAk0RCPtN8bF Bzi7jq5k3rzuJ5fkAT/piLnpT3BFc2vTHkdePR+86J8x8BV/8BmgETnUDsV+0iFzxN50y1j80/3W IaPX468NkKzZWIY/9Nka6TFZdSAGWwtPwb42QnhnF7jAxH1somtsnLUugcBZaxmdMTcZpUsO/BEc kwfZK5ppDdRXbK2u0WE2hfOk/3iARto3yQS8PQdskiOv1lmdu3Wgn9ZT+g4kg3gg+eBHjIe20YXp plf+Z9nyvxARQohQCMfQ+DuGIkNzDlXZCTKHReAxi+AAzpcTp6R6BmVuX9qhAYAgUHbEzlGN0xdX /mNOghBHxRBSEiAiFh1TCpmyfjfzElJOgVMW8TnEgKG1JqUPyoa5TstiSICTjhhCguN5zhUdloAx 0VOo9xR+HIXzj4F5CRqD4PSqlOI5GbQzv0xP1FudPJ5UuhvL3wyYc28rCCgYHbxzMAajAhjPp9ak z3Fzwok+KajrMgHG0Qk6nM4RYEQY9IeHh0mJGFT0ZAyc9UwWOCRHDObwDPO4x9Gj1hNgcLXPUD5n 8OIHJUY/ssW5BV/KD/AF/RxMgg4MF74vgawXjxwYw3irynAq5FfvL1r53klaZBXNyULoI+h0MAEQ WMAT38ihoxSNaU3GApwlujMmgbkMzPwMF1w4HWcuA8aRnOjNZZxkzmvryxxLnww4g4ZffsyH3vBF S/jqQc564e5ACbrAgcKRDZCVCiAYZM6IIbcG9HfOOz6RR+eRc4IAjcja8/PzZLjZjzUgW+ZmbwR3 gmu6D+BKHhw+Qk4SyPiOLsn8yI3gO/Qii/gdPXcvmXQyHz7jo/EET+SXDeMg0ctxm7Fn5iI/zlhm 74xh7deC9XFe5kJHeNFttIOL9dJTtBaACpLIZw6IIad0jG6zF/ChQ/5m23r70eNHpvSU0wkOkOPl D6IL8JKcOX3PuGjusB14sKlkk8xz1uRCcCQ4EXgJ7NAxMGfPfMcWqwJUkJhYt/kFAez2W8JpJWiL wiRRBqVimCmg35eYR5gJh0yFAnAwgIHhEHOU5ePj40Rc3xF8zpeicg5b5UnPLAG8RKWYQng5S3gw WjKbh2ZU9LE6KEPmoMTICDAWDBiFlGESXkJnPRynKIyACUQwXVnOvXA1nyb5pbN2GTCCCuCBjjIC 58KiJQEVKRIoYzJmnDbHIcN1BB6jUbPjufXDlyOqBsR9jD7jRnABZ5xDBkTAjBEcnR8NrEd2ji7A uhj8HHk5XbzyH7T1E+BgBR0CGLSAN9kC5EQFw0leaB6AgyqCgznwAV0YO1mBgw44ZyC659CdR4zP +M6wq4xsAX4IejhBeDAS8CS/nD0DA4zldQy8VYDQWIalZEuO6YCACs39TgbxmxFzkhbDjd9kwRqs tUb/PZ7kEP2ii3FaHA5DLQuT7cjck731Y2z9zVHIbOkjulsTMDbDDgf4mo/xJw+cKIPuXmV68mq9 5ActyS3grOi2ORjVvCZBF+NzYg7OoFscPKO/BWiJxmgnuKbbsmF8Ygd8R09jc4wHRzqPTjkEJPPI LOGSdbvOmckaOR1jsgMqIpyIzFiFhs6qaNFtjsGBHfSdjuH5SwANzY1u5shhOD7RWNIhuAwIDAXW bAogx19bRuqa371eCJC/NRBc4TXnyH6QeZUGASf7Tg/Zd/JGBwUnbKWERCDqJDI8UHVDN5+CGUBX yVBszhweZEDgx2kH2A26zl4JKAT3Ar+3hNMdMIEjuJSFUUMUESdgPAhBgAIphWG0CDZZFcJVwWZs jQdCVO/zZGjPz8/T9fzjCDTA4G4B5cdcztepXaKxnK7EgAQYM/P6DF4+8+M+Amt9wDgEjWFi9Aga Y0VBNPuvBQ0EV8bAWBMYmRGl5RxkL6JRJUVGCv7AHCJISuYztJq+bP8wknPASARn38PXHGiBd2jr HgD3ZAzGCx/RpdIKHVwLoIWSEgOs7LUHjF9xNresyDyMBefKcPrfaALwzOsL19wb3MMzBqLHl2Gp +HKMCYAy9tKn5/CVk/TDYJBlNGWIAuaAi3XAK8GF7DZzy1Q4JBkxg5T3be4VdDAkgFFTmQlYszGq I+XIBGaMWsZzfwwwfPBFNkKWyD+Q5SlVCgxSNp6+mPlHdsWYe1aAgx8AvozhHL4Oh3CiFePKAcGB zqNVpRd+kUU/ZCZjcSSRIbRElz3OF15KxtaUagD5VkGim3jDuMu4vzYH9Pj46JEJBFQc/hx4Lnrg e39zoqpW+Jz34WiiOmAuskHHYxM9R68E8nPAyXOIAo4tYA84L0GJsm4F+iQAqIC++Oc63NFX1UlQ 7rsAflTdyvX6SbeAT7JoPHJZ5cE18ithiU4YG255PrpT5cHvFR/j5/6Kg/VHn3KdnAhGgCC52hXX ZOMCPPSF39lw2jtgJTslBA5A1vSllYyVJThjkbgsU1TrPpExpsseKAZFpPhKDwyCaNXfhE/ELFLz zuShRa0cECIzdn5sPuF4CDRB9azsryrRHFEpG3wZQc4OGM97QmNx7sbzPwoRPgpKgZU6KS684fbU olgMVtqSiXKWskIGlZIzNo7+o6iiM7TgjAjaHKAZh8UQMGqiZ4orAhc5Kh/JmrzLYfiMRahF8yoD HLaxZe6clTIjWqa8hY7wxQ/ZgHEIoLEoH3qKWOEpEPCuBU2sgZOxUcV3skbnGovgZY14TnEZfFEt 4wjgrIwoixDcrAF6K+t5bwMHeDFWMWaUjkGU0eEzY0ym0J2siHTRn8Fm1FQFZAOiXutk5GQa8EUP 64CvyFsmLCo3t1IlGXV/gpw5vMmAsayLHKCJ6F/wJxPCQ9mg0jL54RTRmWzhIyfE6bmffKhKCAgF AAIOwMF4xWBc9DAueWQs/a60jU+yb/wmP96vqRaYG33oJH1I+Z1DYWzQiuFJQGj9dEApcsvgmhte DCl5l/0xrPA1pyAw+FobGbUmdLVO/IUH2cYLr22+tUwfr6xF9YK+oxG+4yM5jvz6DynwHB3ZEeOv ATkUkNBtMo5W9J58C5okDvQVPczHDtEdGZx7ZG/mYHsESPhuHHtQJA/WYp0cWjJLeuB+ztcz1k6W 0Yese3+Pf9ZsHHwyToIZtIWTcbdOtmJn2ADlZ04t1QU0kT2iL36ze+jKBigRswFwJBvsh+DO/hrv 6vGXTYYfh86W9w6s0pweSqrMQ0/RgkxwcioZcCQ31uNv9IUneriX3Fo73VV5QC+yhf55dcc+SLJU i1w3Pv370vwNWaFz5uFT6IKAC00kMMayJgEmmccLR49av7W9Bpx2EAeB5ixEKgSAoHsnwBlQHpku 5iWaYrx9hzkI6V6KF2WVSWEMYorqCKZnOTHGnbMgHARHaRTDjeV9KUbKZNaA0noeDnARVWEew2Ys +GKy3ylBIi6KwvFSRtG7sjVBJqCEiyFXaiNg2bQAZ8bQWByWe9bA2hkXwQoBYzwJDMfgOgXifBgx GQWhFekxeBSMIorCGXtz+w6IRuFEYK3V99ZF0Rk2zg4fCThcBUnWSkms249rjIf1EHDPecZ7VAJt fQxsQJZqvd5zbQGjDd9Eu3DjaPFICc885MG8KQlyogw3/pmf8nomhhL+jDz++A7fjAFf60YPyo/m mVvEjd4MkXGWgPxwANYHH3JOrvxubLyCs2pNdRBoL/Bz3TPoKzoHDATjj8cBYxgLjtYuwICXgMfz 9Mp8jKdg1H14yMnih+DImNbEGClTusf6Mg8ZQTcBilckW2AMjp+hIxPJUj2HvvAVNFR8BanoYz0c tTI6HMkqWVemRE844xVgG9CLTJBP+km3yIPgCM85uOja9NDMP5y8wJmOkCclZHpqPnykR2gqUCNL eCjQZXPIA/6gl2c5Y7YB3emUNaBdcEZjAQz+BvCHw0Yv+sH5et466KF5YosS/HDagjPjhU8Zr/80 BnzhY9zojfvYQ/KGhvhcbRB+4KPvBJzk1HrwVzDKUeOhNbPR7PMcGNf7ZbbBWPAVcALXyAP9Flyy 5+wUG0IuyQvZRAM/AhrBiGAf/+GL/tFR98DRp7EkRvhmnF4X0I7uG0Pgjv/0TYJEf8g7HqSyMre2 m15rhPqw0DLHS8suTl9fE9pLK8FdmjBdWgZ1+nx7JmiR7KW9h720SO7Sotc9j5x+T1PES8umLk3w T59rTPAyCjTjeGmViktzhC8b6Mqnm3O7tE04l+aML62CcOXTH/v25rAvz8/PH3uRM6trr9cuLSm6 tGz3woacBS3wuLRy/VnDz457WgZ80yjhzgcTxSrxydBkqDW7eSvURagyHe/LVQcGDAq8BwrI2GQp MjiVHJmoTHDA56SA7DlZq0oEeUj18SNQZDjgj8DFsYZBgUGBQYFBgXdHgf94dxgPhAcFBgUGBQYF BgU+AAVOc8BKSX4q2LzQCuH10l39DjebOPaAe63HRgBlEmv1+72vcc/abnGPTR42xNl4gz63BOOh sx9092kDxlHIGEefP+M5a6pA3uoa9RZrL9kCz31pO0Jt5roFeLWhrckOafK+BaHtEV7ZdGQHsR2w 0Uu7jdt70GlTZD+3jTr6q835mgA360MP9L4GbCpyWISNX7cENKjyYmw43loXb4nzkbHQG91tasOH yMmRsTyjQ8FJYK8Fpzlgu4btwLTbDegTtLXbrrN7BbsxtarsATsvnc7y1NpNOBs79ZzQklOy9ozx Ee+hELb6azNiKO3uRJtbgt3edsw62IKRtis9h1wcmcduUUb+XoCR1H7kP1MH39qubjs17Q4O2Dlr x+ceMJ6WjFuAXbB2BBtvjy7bCWu3MMP2te1e1mHg9y0QvGk9shvVDvw4Nrueswu8H8MuZnOttYr1 zxZMI3IAAEAASURBVLz0b7TVP21ebUxOw9PSt9fR6c6wwzinr70UnzxvV7GdvlptgBYfu8p1Tnwk IIM5DEkLpkNVXgJ2qr/mnpnTdjfYcu5lub45RlhLDuXR8kLgtKGIprUMaODXpiSCJSj6srQhcN4O 7iDcIkU9uF7Eu5cDdEKRbfN6wXzvoArMsHlDCxSD5VQk2+79/PTTT9MWer2xvhM1Md4a5OGkB05/ K+NiHlv3bYefA4bIBicHaWj90Crwu9/9bnI2nrUpi/DbCm/7vNOyAMPCQdkKL1rTlmNjgUxRdM9Z iVwJAmcOtGvop4MvJeL4gfYikS5nJGpjqAQ51mY87TAMge3+jAS66M2zqcFzf/rTn6ZWAwZezypj Zwu+Fg5z29p/LaCFnkE9hObjhBOJW5s16s9lxPUDawfRT2xtOQ0MbeC71OKgdUGLjT5SLREckdYi oI2EDJEH7UR6WI3DUevx1Q+tZQR/yAP+wpXBsoGObGnz0tOL7jbY2VSnZQVP9O/Cj8x5RvsC+UVr 7RvaH/xuPrLL4VwLHIhWHtmfHkrtUAyNa4CMklWyW0EgKDPVL8mIwFu/o3Yd6xGkGEdbUQ7v0NNp fDzCj7QP0U0yQX49r51PSwf91aqhXzVOseLQ/248TgavPEuH8R7glWMY6TpdMj9+WLMTqGQ2ZAW/ 6RTwrO97R6K9zNhaZyK3Mj7nBGhZ0eJCF7QKRs5UEdgY45Nbdoo+XwN4xeZofzOXOdgc8ohfeKXv Fn21EOkzBVr4yL0NZvDL+uiO5IVd0P+PXzJkOLNLcMYHjl5QtgT4j5b4rsVKC1EOKmEP0F0gy47R AzyCkx5ocuUeekFf8Bv96A9dolc2eDoykh3XK423erHdGxqy/eirnct60BdoDzU2+bEWfff06AjQ NXQ3pvlUQICWIjaR/tJnyRG50P/NF7DVdIh8oa9xyDTbkKN+j+Bz7TOnZcAMvF5dgsUhEMgYVN+J VjkSyiRiBPq3/Ij+CR7joZeOwXONcXxo/WR6bQktghrLNUKgrw5jAWdCGeKQOUHM1vtF4NzvOw6B gnCGhIzgEUzBwFY5g5AzIvD3w+nlyEfCZc0a5hlSCg78zjEJHigVRwGUCEXBf/3rXydB5RQBB/X3 v/99cuDwVU5MVMvxcqiUye/orQdZ8MEQEX40YOBkeQA/KAiaMci+FwQ5WlNgwmkQREbgCFiTOTTK w9ORb+n/M5c+P8GIgwDMp//Tp3s4MEYTTQUCS8Do+UELES9lS88ledCLbI6vLePCWyBjZOzIkWcF KvDUkygoklWRjW+/0N0Y5AmtHNCimkNhKTTeCnYEbhxBeprJA9qRc+MLIuzmPQrmZnTNwXgJUoCg w4/vAmQPrc1NTgQM6APgK/gRvAkUrSdAJxhcuEce0EKgwXnSFeXRf/zjH3lk+sTLPSAIp0doJDjg 2DkG+Dq9jeGGrwCYThjXGgQIcGUY0web+chID+kj5sACDD9dEyz5j0zYlJx8JVCyJsGmgEWwIYA/ AvBFxwA587cADk0FH4ILB65wyNbqb2tDd3wktwCf6aLXCxKWZPScNQcoMCZbqgNbOkrmOVY2grzQ TTaTPKA7+4om+AJcQwOnrtED8u0Z+mhe36OzAI4sssfkm65yoBx8XnXQO3R3ih7n60Q9tkziRC84 dtVDDpDNPQrWQz7oPz7QaUCOBKD4ruJCt4GghW44hIW9lGShBxAsWxfZeC348ayJRHwEkYBTeAIl QgEcnCwMcyknBgPRGIHktBLJuE4gKVKuiVJkK4DxJQCEA8ShMZAE0Hg1ohEtMboEJEaEYBA22RJH uefgAXMx0tbEmckUZD0cO2XiBBk9xgaDHSrCOVub/9yB8gg2KBmQXYnYGDyCDR8gsoMv4x98BQeA AIlGCXTo4bpr5kEbQY4x4MewcsTwYcQYAgJHeOFGyTgaSs8pJeMy5l6AOyfklCI0EBUzvsYSeYbv cMArCiFYgi/FgC8jxdGtAcVDPwZBMBbakI3IgzkEH4CxQxfBhnVWUOrFO0FDwNiMluyB4ZNxUEwG h4ygI/mVpUV+GTv8ZFjIvqoFg5PgIGPv+TQPPghilNaMbS7gd/IC54CMhFOL7MKZYwF0jHFhbOhJ HHDkgSygH1x9kk3BKP6lBcTfRwAPOEIOlZFmLAVAZNi8XlUAr37gh1+CSJkU48x47wG8kB0n6PCM ecwrGHNoBFmnR0BwpWQsK/Ujg0XXI2AeuFqD9cq2BJT+xjNygK5kFk/widwKQIAqniQDsCl00Rjo EZDJClDwHdAlWW3+zn35ZH/NSXbYByeaJTiR9NARusr5RX7xRjXAvIL+ALvkengFX46Ow4Ov9XtW pST6xi7CQWJi3UDwJQAni/63JHohUcC7I0BO2T3JHLDefArqfW+NeII/eCJIeGj2WvAhIK3AXwhA gm/97qzfT3XAGMCwKi9hUAwIA8BIieSUPBj7AGIxkhUQGWMJHSWWKaX8YixOFSMJqOcDBKNXqkSd ojyGgfAx4ICh4uw4UEzgIBiDJYZwHJybUjAHK7tlABkr5SN4xqDBBfjb8ZWCDeU/iiFC5SBzQLjn KYAjHxlM9Au+BAktA4SYk6+ABtbgxxrxwTOU2BpFhAwOZ+/7QNbJedTrDLV1cY4pL+WZ/lNpl5Gj YEB51jXBgmzVd5wbp5f55vCt8/dz+FuGIUihTDK08F1Wgw+qD6LuXPeM+Xp5cB198A9wfIwhfuGV 7zKGvxke/Ca7onjVB04/YI7c39NRIKk8rgzKcK0BPpFV64GzTAo/K4R+rpETeNMT+qIcjW8ALUNP 68rveGHdSreCUAGuMRktDkL2QjeMgw4V3LenH9N9xhDA+PQqyjqsTQAIT/ouKEe3yDJa+5mDup7+ +0oT3xkzuuc5PAEMLVy8J2Wov7WMrz6rekSHVdvgugbGxyO6XG2X5wRx9MzYeOM+wYdyrwAEDQXK EoUA2e7n9Bw5yysNGd1jK60uARob3/2yfk4qwQn55WSfmg0WLPcZX12D8f3NebLf8KVvsb/WlWDZ usIz8sh2SmpcY+Mfmq4K8thqQTAZ9xqMc+cQAZv7/Pw8JU1bp5kJKAT29JAcCQgAOlsrHrKP7ETl rTXAbwmiH0vf3/L6D22xz7ccMGPJMDkWzoMQyPocJSnqQAyRkehaNCbz8R6UIHLIBM3mDYYA0ygl AeJoOQ5MFO1SIpG/CE3WpFTnbyU10aHysrFkK7IfQgwf0R/H6dMRfSJOCoCBon7lHlGraFVptzIv 6/NJUZSPRIYibe9nvBeRrVNu5RhCwMn78f7HZjQleWvw3kqkL4pVfvYuRHRMwOHpO3jB0zjoJbJk vNFDxmZtMiEGFJ2NiYYUmDNBE0JoXeZnbI3HKVIq94lAGXrGiTJ4/8aYu59xsS5GxE+izUqH+jvh FyyY13MMG8MucIIDeqE9esgk8YQTg4NonKLiN/7LPudor7JgjdZHkZT2KBW+ey+rvM2oGAtdZAEy HjIXecBzgQAwH36TT7wnd/AmV8qw6MWYeBY90F/JEu3hwhgySOaymUsWzLHJ/DkyBgegMTzQh+ws QYI5gZjqDTm0RrTwvls1ifPEa0EpnLIhi3zBC5/JkMAHfdEcPcm7H3LNUaOV9aG3eQQY5A7tGDiy iGfoqzqCRoIr83JcHCcnBoc5UIYVdFgvJy74Y9AFlxyEdZlDxs5Yo5VAhTOzPpkMw4+myqXWTq98 R56i1xwl3rEP8EJDxpmcGM/aORt2QlKAX/jGRjHeAmDvbq0TCIA5SaX4NYPMwQv46C/bA5/oCN1F L/SlC2yCDFA2ji5w+9pek5AhekPf0MdrNOuwPjQXPHPk+Ii3+MLGkKPg29PevGQAj9Ha7wJwTo2u RX7xj9ySc/qIt5mbPbAG8u4eNhz9OFp4eYZtwUPy4zlr8bpPAIy2bLp1kz82m411zjZZo2MSHsF4 Ag5yjfds21ZmjG90DO3Ye06dXqMJupJz+sbW4CU7wIe4Dlc2EJ7WYH0CY+sjW2ytBKsPRno6v/Tv 0w7ioCwMpMUhLiJRQAaTQHG6BBuDfeceERFFYGjcq4zMGFZw3TsVhkk2JrpCTBklQRFBUQDRtfkp iGiQICZzdM385qMwldHGJ2AEXElizgFUfOAbHM0JD89wsMaBk8ifQWCMffrOJ1qYH3B4aOaHMWNw YtQqvnDizODJSKIhQ8bAGZ8TE5ESdMaUQ+dg4IkGnjE3R+teY/uekLrf2H6nfByUtciE4MdYb4Ex KZZ5/a4shSYAvdGdUOORUpbv0A294eyZiu/cfMa2Bmv3PJp5njMnDxwlmj+04I08uA5/PwDtrI1s BvCEUSBzvkNDuJANpUv0NbYfskphgSDQOtxn3MgA3qF55J8McpLe8ZPfNcBPYwKOnwOyXvwhM3iI b+E9nsWA+Y4+WXuMh7HQPnphvOgh+uA3ebBOc6MXEMxYw/+zd9dBkn1XHcA7+f0Kd3c2aHC3YANB QwIEgttCQoK76yBJcIIESIIsDsHdyeIQSOEu2cLlL6rIX1D1OJ+bfGfvvnS/7pndHtt7qma6p/u9 e889fs675w65SrAiG0Zv9IjcLVWJ0Nw9rsdfBpcemh/AF370JPjSW5WerI9+4Utk3n2xEdFr41gj 4+sV/63X+tA+PM360BLgJ3lVfWLEfY6HgmIBG6O9DQSbxjG2OXu5gjOZxy+6Hl0wps/JLfpxJnC0 bvj6sUbfxcniGycPRw55CfCNTKM52uExupBT+sXxwg3fzekzQO7JrrWQKbIVQEvjCcjc25fQ3cc2 4TU+4jc9hS9bIhh0r3WRTzxGZ/a/t78eOeCpLH0XEDRwrhyv8nLA3HQ0jz6s0XuyFvq6lmyjL12H F1yB9UW22gd7+rU3B3yn8SVQNh4QVEzzXANDB+yfAioJMoZsptr/jJdvBgbBphQZFecw4OwpYPe3 PQpAFpb/vyvYkZHbHCYIGPBMCggyVFhk1wKNa1Xm7YONO0EnOqICI4C8G+DCOGARpCjGa6Lxu4FB Y42DAoMC+6GAjF9ALyvtM9P9zHbxR2V7ZfsyyFTIRoBye3y9MA749pY57h4UGBQYFBgUGBQ4XxRY v3PifOE4sBkUWEsBkbjnXMcBz3pkPgNujwKe3ylJXhQ4S3zJG7m76IDf6DjgzlFgrw5Yydgu52wo 2Ya2Hb52snmg34OddVdry7xda/sGD/Tt2LND0rOg8wAE39qv184+mydsptgErvV83K7Hk4CNYzYJ 2Q24BDbXeCZvR6Ndg7cLSoF2ktrRbUPNLmDznV3nSmO7gnOMtX+dBcCXbNkcsi1wOKzmBM/YziOQ Pz209PI0QcBl576fbKjbZX74sh9kuwf6bTPQccBGHTpoh7r17xLM2X2ts2AfAH/0sPnJJi3v2d2T gA1yNqSRTT8ZN2NZNzraoHVSsCuajbeRb8BqtVcHzGEw0Lbd21EZYDB7o5lIWm8a5xvH53PX2SHp uS+nCOb3+2wXRXDdEth4YWu/LegMjB2rYD5f8M1YFHybUPbrzX27vBrblnzGWCuS9hGK0INrAnZO 2iyl9WKOd4/DfA2539Z7rRJ2aPZAuXuwk9WpUjYU9bztr9n1PQduR6V2DQ7SRqVAj6ediQFrsVFD r681B7JGxnoOxiKP/c7W0Gj+2t+7SbZsrMp8/fXz967R/qANSRuJNhjtEXPo16p9yG7uddBft26d Pb7BL6/G69/7G13XjeO7dXJtlyyZtIN0Dq7v8evnWjfW/P6lv61LTysdIC8ZO6+Rj7xmrODb75L1 nbG0+hwHtEBpO9LWpGUntsoYvR5mTLjp1tDitA5ulyYcJrupfYftRJuc/pb54BAa5bN1r4JfJ3Fp MWNrHQSTpMf9dhE7DyA7hfsxepnrP7e+XrbsupaQyaSX1r4Lvv08F/X9M/dc7wl7DdL6w2y112ep hw/oY/PjtBdOxVZyu99sJbf13TZ7hlXEatcdh6A1wkYJvWwOdNBbqnnbNnd9aCJiToHTdATZcUG0 p4dTdmQbvR2RyQKdRgR/+MrStKvobaTQ+vb0KjI6hF90xyGk/9EuQQbAVncKK/KjwHZ12+bOeflb kLEO0IaREMwAvXdpGaAwImvRKtoIdOzcNK5sS2uFbNI12pocOcdgcHIOdpB1oqWWAYeG6HvlUI1n LCDS5zgoDL447AR9rSntKb0DbDcd8xf66sej3Jya81oB3pIZDlN0DkdrcrIR+mpV0I7hXsAIyMrx wvXWwfGRK2DHq+BKv7X2DqCP0IEL6IGG5tMyYWz9qe6XZRjDmbH4yeihCYOLvvos0WUTKD+agwwx YgwmOsPRQQT6X7XlcGrWphVDwIn3PtNCoseZEcc/c9EJ96gaMfA+E3ThMXzxxoEv5Es2jV8Mp84B 2ZI+UO0pelHJr3tkNw4toAtoJMBhiLXPkFF6TH7RiPzqCw2gvV5c8+GhQJYBJ6N0WOeC/lyfWRN8 jgv0G45wRQf8oQ94ha+CRLjKTJ03oG/dWvGWc4Jvdu1qObKbVzXC+rUd2X27DbQ/+nGwCPraDYyP aJwWFxWotAnhOXlmO7SsAfaDfSNTZNwreTpJV4dgm1xymvjDJgpgzeEQHDyBn1c2c376U79eeiao FgizMc43ECwCmSsc4aoHOED+zW8OdgSv6RZesMsJ5NFWZQ2OxnYd+dZD7lhI4+CXsfDXqyBLb/Rl huNrwTGoQeFEowSBgOT5ASHhaGWcDJDTrNJvxpjrv8NADosxBHbbEQxN3Qw1wcAohkfjN+fpGEgO OPMcA9VmKCgv5ysy09NGkBlz/xyCsdLoTyjgy/g5UMORi4Rb87j1wI/hdwydbIvDEEUSWgbQ5wyb NXCAlG5dJhHcOXmKCweN4gyz+xkghwUwSBwnA0dJAJzRnVFAG8ENYPgZJzSmjAwGJyKjJvDOp7Vm RkHUahz0lI0xcpRBT3D/PMs1twtOlWIMze+wgRhCvHf6FsOpn1jQo5kfOGSBs2WEAwyAgxw4ATyC t8pBgKyhZV86dVas9TAsjBk5YyzRSCDjmELVEEZa9gr0QZLPGIk488wzf+U4GD4GiC6QT0EDQ6Ti gN54miMRcz/jhTYME9lyQAO9IYN6sjlxAaBrAOfuPXzpm8NIOALOzj1kQi+yLEQLDiCXnAnjKxgj D2ghYGQs6RWHLJAGejZj1DnhANo7TMch9+iY84XxzXXm1M4mgMWfk4LsjnyQC4Eb4NStTWB5vQJV DhC+7IMeYrpJJznjAL0S1NNzwemSDuaevLIPMrRkcHQY/cgNO5bzpl0PTzoY3fSZudAWjdGX82Hb Tgr4bX3WjQYJjtkytMYDji6960vzCAzQUGBHvwJ4yv4I7HtAX3aBbMNBYgUErh7n0VkJgEM56DjA F22N5EFQLdGiQ/gBXwE+WdpUAWqDXJJfe3XAslURNEPlWbDTYADhY0hE/oSDoUxWJ5ISnTIClLYv d3h+hnlOfJKNaQznAETtjByn7HoZSg+UcxswIHHcBIVQM2YcXfAVHQZfxo+SM1gEjMGPYlEoiigj ptyUEL7Ad5wmwyuSZtC2beU3PhpyHoyxzFyES/it2Vy+Z0CB9XJUDDLjlPIQQxE80F82YN3WwRBT CvjKtBgYtMY3isCZmxdPeqfLUflZB5z4LqUk2RynJvMTlKAPp4iXcJQVWieapYzIeAmKsh7zwwOv GEPKfHBwcMRT3xsLzXp645lyopKwbC0RvjUKBqyZPKUyYBwOyxjwZEBDX9+tA3Qg6wkgOE1BEUNp XGuxVkFd5B0PORqVCPqBBpyme+iKYIrBFzQKvtCZ4Wc8OUxrpUsZVzBzpZw8uWDsOA8ZiOCGo0dv 9CPP1kYuzY+OZCPOy/y+M37PdwEKWgjmeudkbcaQwZNHMhw9C63Qui9T5vP5q6BHCViVSuBLT+EN F3yMM2XAfWYt8MXzOb70mNyhLz0n90tAb1UxQL9uf8NDpiuwo08qAAHySD/DV5+jL5zQl5MUFIW+ uQ8Nd6GJ6wU4ZFA2HqdlDms2Lx7Qd7TYBtbpPtfS/UD0zXp6wAt23trJcp7Nq1BxytaJN4KQBLDk l44KcPGAnK7D12dz2MWWz+85z39v58gJsVfyURLjFGR7omaZGqWgSH4oDyMfg84oYLRoiRFhHAiW 70VXIjLlPmVWAkvgCKkoyrjKUIQ/RpoQa7BP6XtpKZ59ED7KZA5zUSYKAlfjzvElPIyfTN2P7JER YGjgJ8JjKKzHuoDrRamCCSWdRNGbcCO0HLW5CDRjyHCaxxwyHbihgXI+QDN0tX7f+RudKIg+PkGF iJyCoRujyIBavw0cnidZs6BGaZzxV05SllSa5/TwxByhSc9HOHAwlG5ubH03B84JnSgl3sIJzmhD ofvX3GtdxvbqGtcDeGftcPN5jJnP+5/IHUeGH8rR5AWQNxmnjADdGTLjAdmKgEBpUVBmrUvGUiYg SGQE0Y/B9xlAS5mJNXCwwd14skWGTVCisqJM6nPrZoj6dXsvcCW3gkfyhjaug7ef6B56oon5yLg1 kn9zuyZyE1xCR/j63lyhe2giY5IlKT3Lut1rHvi61nXo7X14ZTzP/2VngsAlgBMa0APlSz9wlgVH FrM+r+aw9nX4GgtwMqG9KhW92gR0RoBDvjwSIB/0Ccj6ZIHkWHCDPtZtHnTwt/V7hdMSfY2H3wcV PO6yWdD6lHDNL8BT3s86yGzWR2ajC+ZYB+SK/FiHSo3qV6oc+DbXN+uA49UKRJWrOVvrxQ8BjWoF evEFZFnVZ0keyOwmfK1TIuNRyGWCew4L9rGga1X6o1ScEQXDKM8yReIMhfIY5bteETvGYJ4zOjlR /xJP1Mxpi4I4QcIlUxFJe26lvK18qOSo3CWDka0ok3AoQJbIQBIkmdsSiPoYOGMxxiJtZRARMucD rzm+hIzjEliIjhlLRoESyjQIXZ6NwInxMB4hk3WgDcESCW8CQu95HUfLMYpAlVJF1ZwwgUQ32Run YEyZiEhY2ZMTgSO8ZEucrgzMbk64GYfycuaeabmWo5D1KYnKFARR6EGhOGXnySoVUVblI+vBT2sW 3VJMNMdrjwXmGcN8rYIMzkzUTE4SaAiGPI5gUPDE2AIYNCO2smaGkQwxbsrSnKHn1tYu8FGBsT7r ZpzgK0szHtmRdcroyBN6CADgyzF63knWyK3Sv6AFr+ApOFSOI+MeNRhrEzA6eEKG0JHz5fTIvCzA Gq2VrFsrGZdRMWQcg3IzHfI4A54qIqo/gi6G0bo5UsYSvu4xrrVbX+TGOskouYGLYANPOTFr5Rz8 WKvgER9l3+SPwxFQoSl9EKihA7lEa/dYh7nchy/kCK/w1FrJmh3B1qmKBayNniif9tWMOS05MPKZ 5+GcS7JOskze0UHQT86V9c2HZ3Skx5dzY+xlZuwU3U0ggF7rgNyjK9uFh3SNLgNrYzcECJwy+SOn eOIxEZ2KDJvTOtEqjsp7sifwRxt8paNK59awBGQfr1REVG/wEq+skQ2Fl0ALveBgjk10di97gc+q ZQILOuc5uwqbR26cqTnRk01BR9U/1U12Gh0lCXTOOtxDJlTirpajxifyYL8FWpMH+rYOX3oSfPFT UCCZu1KVnMsCezuIg9ERYRIyQkWxvVJOn+U7fxMOTMg93vsc9Nfmfp+71t+5lgEhrMYNMBYcN4Fx 7a5AoSkcxQJwX4dvxqM88CBUPXAKfjx/Uzrm0IGoUDRKcCmDoGETmDvXu4eD7QEdGN7ecPgMPn7Q zysIbeCU6D109L3PGQ0/Pne9e/GC4qEHhQM+C1289xM+cg4MrKw2wVC7acMvUbN5MkfoCIdA5CB8 lF25B47B1Xfe+9xP1u49/HKdMX0XfP2dbG1eYsPblPIiw+4F6I5/oWX7cM0vc6Ot+wRUjDCcAj7n SM3jfXC3Hn/jO4MI/O1nvu6M1eMb+mX9oc/8FW6R9dAoPDVP3uc+8+e9eSMTnC1Z7fmXdRpjPpZ7 OTLGWsC2Dfr1hEZ5Nbb3/d/wNG/wzd/B13y+J3/beBjcZKfkZu4YBQjGwkOvfuASHXF/8PB5rllH E9mk71VktoExM55r8964gFz7Yc/CW9esg6WxrANO4bsx0AFw+GhKd4wBMj8d8R26gHxvrHVr34Qv O86RC3424d8muGC/9uaAzwMdZGYYupSd7AtPhlb0KzAQxSlPRyg5XkGBDFoWKVO4TEDpZEYyuQGD AksUUInwDDROe+nau+U75eIrleUJ1AY8kwKqTRy+isxlgkvtgC8To8ZaBgUGBQYFBgUuFwVu1msv 17rGagYFBgUGBQYFBgXONQXOxAF75qQ0vAk8Q7Rbd9/g2ZpnZp5HnBe4UZufbGC5U5Cdi/146GvH 82mCZz9ovcT308Qnc3luCa88m8rn/ka7+ef5/iK90jfrPK+Axh5brJMNzxc9Xz3PcB7py6adB32z kWrXo4jx2LNmmwe93i7Yj+Ax5Hmy7/M17W0XNOPl+Y7dvnZeegjvOY+NANpZ7JbLpqQ5Unay2i2X XYbz7+/U33a32iDlWex8c9PtzOG5r5YggmS3MBrY6LHLHHYb2pBzktO81uGs5clmNIefZPOCHbl2 TduZeFKw6xmP7Ky1M9VzKxuS/L0ObLCyexttPPPbB5A5dLdj0o+/7UhfArtmyYDWmf5am220f9lN bNfwHNDPDtFNO0rn19/JvzlTu/7pEPkSUGkXC3/7uRifw9oxbrf2wcFB/9WJ39vxqu3I3AwlGt0O cBQ5tc1u7x7sYCav5Dd7KPrv9/FeIECOyLc1SgY20df8dEwHhja62wG0NI7nneRXYGJn8UkATe3o 1wkyp+lJxlt3D3ztsLbTfBO+DvDhhHfVeXjTRxvzsnHL3A7csRFxvklyHV75zG503QbaKG0eO4+w NwcsKmRwRbaMr11stslrESBYmKbFZb4DkYFmCDlfO/eA60VRDIwdurbTMyxhBkMrc0Tk7BbVVuM+ 38kos8szTPAZfLSk6CfWMsORUD5jMGoiqAgBwSBI5g1eGWv+areef4bgnpxYZEu/oznhZc3GZeRd w5ADf2uXso0/ht31rmF8CDy8e7zQFl5ogTYB1xpPC4H2CAYMfYzHYAp+srbcc5xX7StaArQMCTC0 CGhb0o6Chuk3tlsU39DMK6Xg+LUxqECEltak91uAFrysDf/sohSUkA3OJ/fM8ZUp6a0WHNjYJvBw f46qJA/akchm5IGsMXhkwKYXeKE1vLUsmVvg6LPwxLzWbnPfOgNpHeicnbJkhvx6NQZ+WWdkdb6O bX/jrRYPbTGcEzz8oC8aqW6Yhzz4zHsOmFyhR+RNdomu4ZfgyfVLoK2ELBtLG5ggloED6Iu/+Ipu 5A2tybu1ws3fkQX3+M786I8PNiwC9CG/5tEa4yQ4Y4IbpevG6ulLd81vrdaPRielr7kFGdamRUgw jL5kAF97+sLHPAJQB9n09LVWMgkX92yjL/y1XnJq5rpWLVLGQAN8Ipt2a6Ov8dARjY0ffcsc7IEf uikwcC8di+7QI7pgrMiDtRwH4Ks1TKJlgxR8yRR8Af0VvGpXCi/YL3Pirc/YcvNbLznAV/g6y6GX RScIOoinD/ZcT6/iB4xF5smJtaK9Y1rX6ehx1rnPa5+5j3wPM2iLwQhH0+kb1QsnUsw5uAwI5SMg sj69hIDz0t93tXrGcigC4dMniDkyFb2QHJV+SOPImBl+zOAQHHRgDAKhN1AZwnj6iwkeIWdcGXoO WH8x0Nsps4GviItgUEDCotmdcjOuzpZdiiopjdOkCB5l1s9nbgKr144BY2isgzAyoujlqEuZBWFz ihawBn2Y8CBookPj6u/TO+tHvx8D5FhO36EpWrve/ISRgAPj61tGWwc2nBS0jYh60VamL1MRUAH8 kFnir4CLkpo/zux67QC3Q1y7heMn0RpP0CAKKHgzpkwEvRhdTt4pVJzfOmCQ9elScvgxnOhkBzrZ cB+eMxL6NEXHDAelxWvzwQ3ttFExEA5f0E7lfrzgpF2nd1n7GEdPxhkN6zUHenO25sJ7RtLBEYwk nPD9Su1ylR30RmbdmtZ9Rg4dCYr+5EcfMuAc9VgyOAyuAxUOKuu1DviSW1kzHOmIz7wXoMiUvOJD ZGXd3BwT2RdMOlzEeID8oTl8/PhbkCbQFnzrtfW3vk9yLqMkiwJVTgPPODlAN+kAvqAjfUJDBhXN 0RmQb/iSKzyxBjKIvvjkOMSltbRB1vwyLz2T/ZorekJ3BXX0jU1wnCu+o69gKPQlpwJeQQ8ZQ1fO AW4O7NmEE1mkv9asIkAX9NGjM4eLV84q4OThRt+1caGhAIBtE8josjCWH8Gjfm064Me5CO5F3+ib wMFajiuLwZdMkzXJlmCMPeVA6W0Oq0EPwGbrQRdImA/OaMi+khm6Z63kBV2BM9xVBsg02XYgh3VL khz8Ys0CC3bPd9ZpjWiNluzduYVCcG9QRnQqB9nGLyc6VYP3VBFk+6wO0ZjKOUwl1FMJ2y04lNGb Sohu+ayIPZUAT1V6m0rBpxLCqZRjKmc5lYOaypFOpRxTKfFkrlLGqTKtdk0Z+Kki6DZenak7lfOZ yghPZVTb/XUQQPvOuJUZTmVo2xiVebbPjVeCNJUTnMrYTtU6dAtu8z/gWsIyVSvOVP+cYSrHO5Wx bOt1bSnUVII2lWFpeFQEezTE4eHhVIJ79Lc1VhQ3lUBNZdinUsg2NtyrdD5VwNLWXkI6lbGdSqCn UoKpspP2Hn3LmRzNbeBq3J9KOI/mOOmbMpRTBVlTOdGpXwN6V1AxlYOZyvhMpVhtispkplKcqYKT qZx2+6yi2Iks1HF27e8yOm0dZbjbOisQmfABTesUqamM8CK6pWxtvWTPXBWdt+urD3uq4KzxoYKs qYzGkWzWSWlTGYipDNpUUfvR+BUYNj75oAKGRjfv4YLGVVmYKuNrsujz6tucKrCayim1H7iTGVAO ZqpqxFSHphzJb/vimL/Ikh9QQU5bk/cVoDR5L0Pvz6myt0ZHMlPOodECj/CgHEq7Bu3JOz6icbWN TeVY2nebflXANVWlo/EM3/0N0KeC5PbeWivgnOrR05HM4ivweRnKqXrtG370gn65v4x4u6aCrAkf yXI56aajvkBLMl6l4TYGfMu5t3uMT9boQ+xD++KYv3r6VkY+1SlpbQR0ZU+e/vSnt7/JEL0ij97j O3qyT+wLYN9cg0bsDT2mt0tQScBUQePRJXhVQWH7m05ZM1zQLLqAHr6rA3OmctDtezewvVXKneqI 18laAtZUwVKzG+UMp0pmGk3z/XFe0b+c6tEt9djmSK98WIe2TBWQH31fAVzTMzpSwfJUWXizB7Ef 6F8OfCpnfnQPWbEGvKVv/XdVLWg2yHj4zqYG2ODY/Xx23l6fmRbtKTwQ6YlcgShWNiYrKCK0DMT3 ygrzyMs9oqse3KucqqSQjEVpVjSo7OWwetmsTNP9rpdliIxEw7IG4LmO8qsITOQkSy+mt++8ythk WaLr9CY6lcZpPZ7hwjfXt5vW/FImEalZlzV6lbEn8nWGsUwdLeARGhlqvnb4K7/JHmRijvsztsNC lGBE+zIKtHCkYilmi5xVFGQGMmnz9TCfI98ZT5Ymg9sFZJGyFieSZQ3KWjIBPEIrpd5Srjac9ZOD UpT240Pv8VDVAchiZUfGsU78UUKXfegrTlTcLl7zC288b7J+GVOePcmgyYRo2Nm1MguPIAD8/KBh L3fWlL7DnMDlevyVMSuv+fEewBnN4SoTlUWnKmBumYLMM/LbbnrWL9G/DGIbyAyUKEGvNxUUNNrl GFZ0M6dsP3pmPfANr9CKbKA3Wfc+vNqEh3vgILu0HgfM0GcZXqo2MitVHfyX4cATXQBcrF8ZHq/p BV2LXhtLpuNv9xxUBk9PAfq6V1Yl26fHbAKAF90gi5voq3y8DciGLB/09MUfsnylbAowL1zJjOus lez4PjIEJ7TwGT3fhb7o4ycAZxk3MI+jTPEYzeiCbFH2iKdsV04fc71x6Bu9pgsBOu5vNtMJbOxG byNk/a4hP9tgjq+sPfxyL7zC+4yFFvBHFzT1PVoCa3RPaOgz1U3ySU7Jbx4f+Q6OnhfjPb6zqQG4 Rdbz2Xl7vcnpO4wZw6pspxTgUAZlGUecITbmEhzKyXD44TgYfmUEDlU5SXmLAOVz1ylpUV5AuG2g osRKlpQWYzGRwpiHMHnPYTFwB6XQjLCSkY0slFk5iZAqpboOvpQ9QqGEw5B6TmxuP/BaAoKoPAsH m9CMRSHRwzo4TgFDDB4nZL0MmWvQAU2AgIDRVYpOuZEgUnoOxto9Mye0hJuCKr94pqYcZSxrxxNr tLbQ17wBCskRosc2sJ7KBhod4BzjZlw0Nw7+4jMaWCc6KL17Tqtk5fEBeWDIHW9oPM4W/5XFwMMf /vBWYnMtp7kE1mdteJkylZKbtefRh5K3xwMMTgwUfpBP5Wv0xRdj+Byv4W4d/o5RImeCMvLo0QUZ I1sCJsFVZS7NwZsDHfCAbHnEgUY9wJl8kcdtAB8lR/N59hbjLFCwfiVSwQZ6CjzpCNz9+B4Ofhhg MmpNHB4a5f0SDkqjTmhi6AQwMXiCI0eWknnP4JVHyRF6kAdrU/K+XiV+8zshzfdkDg2V48kRutMz JXvyax1ePU8U0HA6eGSDnPnX0df6e0BvpVsB7DZAJ/Rlu/BXEAjYGHIg2DW+sqhADP1DX3Yq9LVm OhGa0rO834QDnTIvfNFEmdgeBbTCb3LCNrATHD+gW+YRjLAv5AM+5JS+oZlgSSncKVJkgK3gqJXZ lYw9AugB7zyiiqz33/Xvg6854XtYm/04S/iyj2QeregznNEEfeDnPblzHfy9WovHUT43nvUGyBl5 Jwvkj6ygAV31XmLV2y1zutZYvoPjeYS9bcJCDM8BEZXRZwBlp5jmuR6CM7KeDVN+z0k4HM/sEJbR cj9mEixKQfk4LsZDBCq68TxK1Eq4EFzkT1k8M2BgGHdCS4BFUKJ0SkuRCAFhNJ8IyvM+DiGO2PMY 18KB0yYc1gFfRiLGbx1jOW2bRxhqAmce6zCHtRFMCuL8ZNm5OTlYSm5862SUKQfhsxZOI89SjGut 8EJPwkoJRZXmYjwILMMseqQY5qGMBJ6hsx6OPBsbPGd3XjXnsQ2sxfM8uBJy46OvKoH12qAjGBAg kQXP7mXxNmAJGigI3uOf5zlw4XzRxHM+GSewZs8E3WNdS2AeRhZ90U5kbA4RM4eM5rJTwYw1m9tn 5EyVAZ99x9jDlyPBf/sIOA68gYNI2/fkzjUifrJirYwwp+J6PCIvZF1G6G8ySt6SmVsPunheKFhy zRJwqmTD+LJbz8Dw133WIzsl+4JQeys4QM7PteZEZ7KkcsFwMUzGpAtoz2En61+HB+fAsKKT652v zUlxcNYlM2U88dRndJRM2IyIDuhG9tARXX1uPaETmRaoy0LhTZfhhIeCN/bDPdaPD+5jD7JHAn3J N70KeNaMJpzmtgoKWhjD+NaDvuamO/QLz31H/j3fp5v0D33hbi2xO/QAja2f4+MsrIWtWQfogq6e h3MacHFSHt7SZ7wzDnkVfBiX7LlexYXtYhc5OfwlCwJhtICLAMh7emEs+208j5U5w9395MCc9mf0 MroOX/pA/q0XzQQLHD0as0ccJZuOP+bDe/TBH/MJSNCC3koa4IJXKiOxwWSaLLuXbuOj4AEvyCGb QcbQRCWK3cAb52N7Lm4sc8dnrFvHWX42TsI6S+qfo7kpnuBEEMB5DTg9CtQ+geZoZOG7guzkLMtr nAWDfRFApsdh2cS0K5w1fXfF805fx/GTR8G7AHrAfikwHPB+6XthRhfNym6UtQecLgXQXRYpWx1w 5ymAviopKZff+Rkuz4iqFDJaAcuA/VNgOOD903jMMCgwKDAoMCgwKPBsFNjbJqxnm2l8MCgwKDAo MCgwKDAocESBS+OAPbOx+cOD/R7snrX5YVewmcKmGM+4bhds/PIPvAcsU8BGDTvP7ZTs6W7Djc0Y Nlj0u7WXRzvbb+Frp/M6fG02qT7go931Z4vpzdnpja6AXcC6bDCkUza7zMHGF3zcBjbKZWfstmv3 8b2NfXYcnwZ4rmqD0Tog9+g5B7J/nnfv9viSA5unbF4ccDwK3Npse7x7F6/mCO1W9GzRTlI7ZO1E 3bYLcXHQhS8JrBOYCMMTnvCEoyvtmrMz0G7KXcAuVrsD7bjsN5nYUWiTkl11u4LdiXZCOxnGTr7T AJup7AAUSGhLskO2mtifrdVgn7jYcWknMIW0M9GO2KUdlXZS28WJV3ZW24kN8NTudjsdrUFL0mmC XbBkSiBFFuxAT7/yOjzIHnz96Nd0Ik8Pdn9ywPuQB2Nnp7XxnUJk964NNb0c9/jkPUMvOLCTexvY YavVidMQqKZNJ/fZzW1Hqx3hS5DdttrCsrN/6fpt35EV9sauY7pm7bouNj33RSu2SZvTriD40MXA ttEtR6/a1b8N7NalE3b0zkFwKXmY64c1WA9606WzBLuPBZVk3+51O87phna7tIJJNHQR2OU9YHcK 7K0NiTGyXR/j9FfaAs+QMg6+E3WLCgm17fbAVnaK6TOZhO3mWg0AA+N629h93u/Q02bkR9uDMRx2 AMyddhNtBOb1GQVidCiRbfRaaGz15whsWdfTyIgEbGHXoqM9g2JTDjtQbVaAk1YhzoYD8T3c0gNt 7TaA9JCImLNPC5BImCK6F620G5xEmOHmDFttC5yAvkzBA5r4zhpVBbQJWHfoa/OFnY8yA+syN8PN sFkjQ8ERCaB62vfr8l5LEqNKUfUg6pG1roPqkUVHuGkNMi8+Ak5aD7fP8TA0gS+lZygFFL2DwEvZ FnmAEx6YBx1d7xUuka020TF/2TVrXMcukl00isHVvoSOHBcjBNfgCzd07p01XGSNWkDSvjbHF30j d+iuzccatfIJYAWyS6DFjEPUmqO/nUxq6YGXjUhae+BhLJ8BOMHDwSXhK/nkMNAWn8ijDWKCObJM ph3gQE98FnC9ABWN+nYq2S5akUVgbrznXFQ/BKpe+wMcMuaur8Y0hrUIQMm+VkF6ypagI9uidQdY j6M8bTpEZ3RjD5agTkxr6xIMWg/6kmu2jHyipZ+eV/TJ+tEqB7aYI2146MWu9GsnW3DmlAU6DhcB 6ESv9cuTa/iyE9YG0ABe5A+f6IG2JviRU/OfJAEiC84VuHr1arMZdEuQqR8bfcmHljItn9mZb934 y9ayueQ6gaB1wJmtpgt38+bDZY1ubD3ZL46IEWZQCZAWCwQHGKOvlxBqNhdJA0xhoHwmE3IAhYgW UHh9gRykTIiTBtpm9OpxMnrQCCRgwCiYsSKgBFP/r0MgRMCUVHTpYAhgTEZKIzpFBkqiDgXggPRV Oogg44kCrUPfrGvSV+e+ZL9OherBqVqcuYDB+bV+gHsdRmBe62T8reG4QMhl/AwLo8pYcrbGQm+n 3lBqSuM9XqALmuAP5bdGRgk4XAGNrBUt9fcugT5Q1QaN/AwI+uApoIjuNzYnDa8e4BjH0H+OJv3n AhdnITvvm6I7iIR8hL96ehkefLydRwB6ZDkSxpmcmQfo+3TuMYeJb2SbsQvM8fU5Yy2T6FthXKeP WyYFX3KslAesEe04LVkX2VgChhXdGV7GlqPRO8lpM9r4C1/jO4c7+HLMsnx4BODioAs6xYGrTuj3 he8S4AU9IL8BjonhlpEL8AQHxgN4Ss8FeKoFdOx2QMCD92RfBUvwQM+dFEXfHve4xzXdI2cchaBK Bky+6YLgZAnIg0AejQWWaAoE3uYzHlviLIMA+4V/stkejCUY5TB7u6W64FxmcoVPgj7AlrF79FOg il6CPM5dlQ2/yBb+qrIAZ7B77zoymhO+2pfH+KXyh7YCGE6fbGrtEjyYH9/oA2cbILdkB22t3Rpj z+B0vZIz62cHBOZ3K+zNASMognNWhJwwMcpAxKNcIWL1XtkKOJRbNkG4lZFF0g5yB5rFOXUCQKhF ZYwagSXgDvnmOAgHoNzmo/DmAe41h5IXg6JZ3X0RHHMfHh62TIAxBxwaxyOYINDXrl1rY/rufnWI hYP4KTNHStmV2YESnIb2PmthAB0EoUGdQriegzC/DNWcjIZ/I9ZnEG3AY/wyJ7o78clYolefmVem aT2CCcGRchKIMstMGKy0IwlK0A/tKL0KxhJw8ugSwOdkgjJuPww5w6I0dxJgSDiZ0NHBHYwrXsm6 GUOHujMKjONJwcEYsjpyJRhk/AB5luXIQgQZHFUClnbBml+cIZlLFuASvCbjeAJfDjj4kimZkQBQ lslJbQPyQ75kwjKUyB58ZSAOSnAQg8MkZGoArchwdMRnDK6DDtx35cqVlaDR2AzwEqgUeNzQj8WR cFrkTBBhLDIBGG9ZlAMt6M2uz6HnOAi6g5sx4SrAINMCbvSgbzJjsiODBOTUd4JMjz3o9hJwrhwL 5yN459QBejlIiE6xJxxLQObLuccu5XN2SXBOF/GXraRrbAKcjCOAtB7ADpIJOLNbqhTWIqt1aAad 8m9eBVOOBwWCZvOSOSfC4elJgd4LnNCawxXcA1UTeib4S/Ljc+sj89YBJ7TK9yoTHg2QC0H4aT2L h9d5g706YEZbJM4oioyTQXByImNRG0bFUGCQ6DLPbRgNQsRxcQqc59WKplPyY8QJJaMOGMR1jguj A4l+CawyK0cNz0C+7w1lvpdl+Dz4usc4jGjKdxnHa8bKZ5QBvsqawDqNx2AxtAwHcJ17+6xPGVLU OFfkdsOaX5RNUCBKhSNA877UpfxD6c0jemagZUSCH6V5IIiRRZtfBicTXALGdZ7JMCLWSFGdfIOH Xq2xB7TpeZXv0Kjnh3WEhq6xphgqNEwJW+ZqzB5s/Fm36aW/xnuyqNRmvZyaKg6HlO/MSf7QzglL fal7jm+7qX7N5cHnm/BliFOlkNVx1tuAXDLCMjDPfiNP1kJH4AuHOOR+vJ6+riHznBj58R4de3n0 9zpdM2aPK/mi0wFHH8YRmDPySBZ7vXI9+qdqlvvXvcrYZdIB64YfmYBzHnXAi3zJuHxv7qwb/zzm 2gTG4ljphvK+gCyVM/ORNSBJ2CTD68ZOsAJPeBkrZXI4pWSMjj4XaLABgs48kmE7HJ6TxxeZR+Do ubNkBc6qED2oSClP7wICNYmPSongPDTNvfAPrj5jc+gonpKT2DpVEoEKm6JyGF3NOHfb603Pc4dX TpiVBT1PFImKEAMETfYq81XOI0DKPwSX8T4sB02glRhlnb5ndAkAJfB8hIOwyYJhyVnIlNC8xiak rqHEnLg5RW1K2KIuzyxkAXC7UZmNkrFxCYgfkTNHL0AA5hHJec4BRyUVOFmjDJZyyIZEdwyXdRlP xCxL55jMKTMWoYoolQavVIbhhwBzDEo2xqcc1gsHQOF8v815MLbKWhwN4yLKVn1QVZBtiLgZVDQV 0cpKGAFlLwqLRuZIRhFeeO7lsyUjBU/XKYN5XibDVnY8ODhoVQcOQMlbQGV9DKCMSQTM2YjqZZOy aGVrRk85U+DhvYDJWAKxa5WtyBQcPSez8S/bOA60U97Db3PIYPGfYUQbjnTbpjDrwEMlRjJiTvTM EYLGgKvMXmBCzhg6Rh2+MhPzk2H3Wic5UUaMPJAT2Sh5JH/Bl0FEJ7iSTWuQzbrP/dmgBsce8AaO eEvGOCUGEU3QxjxwDL5w9x05JYd4Qt84R+OgG14x3n5UHODJmJKPrAM+MnjXmlOmzjgzvPgkeBBo y3w5WY8gyFrWTu+V4OkpHls3O0AfZY8CQxnfElgz3bduNgW9fYb+5qFvaIBPggE4C3DIGvmRgdIF VZRNgFb0CG04I4GB+QDa4htb53OygR6yU7wjv2QSfdGdvgfoPYgTZyc8XqGHnCZbxL7IuAWDdIDd UeGyDjJnHXBgZ6yHHQIqcB5HsTX4zokH4Iq+aLPLyXfW4vhIVRyyHLBeNGHr0BD+5lPd8rl1m8vf dIlcwJ8s0RNyRGZUOO9G2NsmLMwmhAwNxVJOoxSAUmAYw3+1siFRtpIeo0fRKSSjrNQjyqMghJbi K3UodVFUgkP5OSpON7vyRGi+Z4xdzyAwcN4zVKIugikqY1QZZ9Ejw29++LmeIYjBI9Tm8b05rcff riM8jKYMkqMW/XlOY93m8Z054EXoGVaC5z6OXGSOBpwtoWW0OXpjMRjopALg2ijXJmE1J+GmCMbj BBk+ii5Tt1505JQ4mCiftXKulERJjcFyDxqhpc8pv1LWpswHTow+B6cki56MPiNsfAGIAMqaBE/4 zYhRUAYMLmjhc+sXJKAj/PEHHRkY/GOgyBAemE+mju4Mt8xB+cu43uOVRx2MBWcti7GWJSCrcGEY 3Yee5NHnzjBnkDkNvCGv5FzQZ30MP9oHX7y3DrLCiPmcTOM/BzTHF+4Mte8YTv+Eguy6h4ytA3ig F9qam5yjlbUbC+C76zzu8B084AVfpU1/e8Vvskf20dqcxkQz8oXuAmq0YVDxkP7RN3rKARoLztYm iI1DlwGTQ3O4Bl/hQh7NQz4FjoyzwEDplQwugTmswfrIJrlWkSK/ggB05wBcx4G4RqUHLngs+FDu jS6smyvygO/kAZ2Ufn0uQLEO68066LqxldXZn9gIdIRrgJ30SICDtW5yDR+206MBtIE3mcMLAQYZ T9mbzkoo6At6Rq6MTxfxm+6a3/PWZPyCJc+s6cK66l3w61/JuB8BSAIHeq68zM6RBborYBI04Ce7 TmbIhCQFntZBVlzHzpBbcpox+zkv+/tzdRKWrJPCeV4jiiLAA1bNoXJ8IuhtxmjQazMFZBQMu2rA gPNNAWV0zknl5zKC4I0TFHgKWmzMPE2wf0KAd1jVxgFnR4Fz5YBFZLImkZSov48Uz45EZz+zzE6U uJR5nj2W5x8DkbgoO1nA+cf47sVQNQGflFgvI8hKPSpKVYzNO01QgUBbGfyAs6PAuXLAZ0eGMfOg wKDAoMCgwKDA6VLgdMOu013bmG1QYFBgUGBQYFDg3FJgOOA9scaGEDszPesJeKblOaRNFGcNSlDb wG5F+Np4dhy4Xrs+Nd/baNaDHZ3Xavey78872Ahjxy4abAK7sE/ay7xpzF0/tzs6PfK73nMa12lT sfN9wH4oYOObRykBm8n0Wu+iz7knr/ZC2D29D7AZcUnPbWTTf323w94cMMNkF5/dqQ5wsNt522k+ F40ZdjzaMKYtRVtDD5TEc575mjkmzvlOgN3U6U3ddTzKqkdUy5FdoH2AMB/Djk/42il7HLB2uz9z yEfutUPSxg8HL3iufZqghcx67b62G5RsMhKbwNptVMlhC+uu8/zMdScFO/21bWkjAQ7hsPdBu9E2 sKv8tIEc2LWqj5MjEID4Oycvwec4z9ft2k0v7T7WQtbwWR830LpDBs4qaLrdNWpRJLv0Vx9yDn9x 0I4d/8eF233+q3VQR4rDNgBbgd6Cdruznf2wCdbtZ7Fj21i3o1Ob5juvn+/tCbzNBVoibENnVJw+ E4Oc3X+Uwa5UvWJOi0lPsLYB291tVdcTZxzOzJFrBI3D69tx3HejWm9scRdZOVVHW4/rjaEhnOG1 RV8LBeegzYIAubbvUT4Oo/TGwcUORkrOGKVB3clZ5mCsAubXTqC1hDIRQi0sMabwshYtMwIX93Oy skb3+VzLgoNNtJZwnvoMtSTYMY5m6wQ786O1QEFQABdzcDBaYygzQ4q+2lTS/uVVS4HMxhxpKTIm B6Yn0M5sp25pLwDaFKwpxyq2D+uXVgPtG+5jwPsNNtbhc+0KlFjrDuCUyIvxtHBQ+JNsWNFXLKPF K04C/ckCusoC9O+SO4YNnmivhQtdtNDYEOhoPXPbEIcextF+0gPjjo42e5GNtLH11+S9MbUL6e8k ByomZMM6BShoK1jTJuIYwhw+IvtFlxxoYTyZuoMW0JccaTuxltCrlG7dAABAAElEQVTK+rSwaOlC 34wVXHZ5RRdGMi0n2vHoWHTRkbIqB2S/B2tCLxurtCxp97FGuonvBwcHTW7Jbw5zoAf6Q9EIvvRZ a46jTsk7PNAH3Tbpr7Ypczopz+l3HARbY24goEAXeqUNCC/Rkb7Bkd0hM9oS05eOxmRCuxS7RoYF tehs7RyP4Dbyy275nlOhO2h4EhCk0X2HvgC8ZfPwQKtSNrDqHknbWU6u0vrIKZJXzhuueobhZAd2 D2REBYOuaxsSIG5y1Gy7JATt2CLtgDaWaZuyTkEvvmuTIr9pobPzW4tZ8DS/oJ0ekgdta3jCh3gF 5P16Vc7ILV+xrY2w3XQBfu0tA+YIMFCPHKOPwNlqj4gUVzRHOQmC70WofhgYTkKGwCgBDpxQUB5H 9olugTKG3k5GUVM5I0DQ/G1Htd48jfGJ0jgLJ0QRMgJhLEpzEiDIyqxpnLemHtaVhRgEgsmxciw5 Ro4CPfrRj25GlZGkKBSagqONHlROg+PUc0nwGQd9sNaPTsZcAkrHUTJ05nBfDhpBX3SjkOjI2AFr 0CuIRgIWh57IZCmKTFZPJ2elyoFfATivA+ufR7gyKeceM6TWIFjiDDlIc+jlZAwFOfh6EoAj+WF0 BYJO4WEwgCCETPrRD8opAjRW5rUWBtChEAIHzpXsMC59tmpsPagMEyOEt0slPrzlMF0rWGG0c7gC GsMLrxh8shEQ+HmcgS8BY+GPthI8hHdKwUqNnDz6cjBXqxrl/uOCQID8cPBAsHFQzhNtAZki0wK9 AP1GayBA005H1tEYPznEa+Xw/JBroPJgbfB1HXzxAv8EiIy5I1zpwtLjETTBCz+cF/w5BkbdqW4O qeFI0dNhIRyae8inw0LQzBweGQmIHMSB35weR+X4UABHNoCj4nCT+Qkw6Av+wsGxsGTkJCDwoGOC BD9kT189QBOBGttId9kNQGfoliodeVJxiF6yzejPGQY4SucNsAn5fp0Ny/X46Tq8obPsLRkW/KEX /cVT9OnPgsYH4+JzgFxGHtgy9iA2nt1i58ka+40O5rwMsLcMGHHyvALTCSdjAjRgi4S9Ojwj4G/M Y2Q923CIQ/5RA4PhGSIF8Z6xJ2AiZY7Ee4clcAyEgGISTI5FtJxSIkUwN6FkODh8Y4mwjwvWBz9O iEBcrwhNdLbUUE4wGaGsW9YswyJk1hbjZv0O5dCY79g22SHF7qNRAQ2lcsrQLgBHTiaQ7I3BQVOG 3vjGlPVSMPgyRlfLCAIVA/jqSRaABF+BgEAnxrhdvMMvvOF8BGkch+xbdI8vMi0ZkcADfxhyRvgk gFd+KL4ggAM1NsOELilLMraCDYpufZwugysgwgdGmoz6DO+NGdDH7rQxGRtAR5/FUOa6/pVuGFdQ SCYFccaEIzwYRQYsxsi95BydOIgAp0KuyaLKhjUJDoOnoI/+uY8TJasysuOCKgA+GJ/ucSoBmS95 6GnC8dFrpzIBOo2u5FB1iI72fdkJdhjnrJOT4NRlsYIxstYHJJl/3avx4KxMG/qyL/jCoaIPEAgI aH3mehmae1KdwndOW0ZINoHs+bACHuujp5w4GjhtDnCSsmT8AGRPFi6jPi7Qz2TV7hW4BciqtZFL VQNrUUlCK/ZOkkGXevAdvet5ZXx6Rt9U8tioVCT6e/OevXKPgIoMs73sRwJEB8qwdWTFWNYvMZPZ 4mVssvFktOSBLSYPvQ3lkOFjbWyVIMi9myofwe8ivO7VAWOQcpESBWPCyIiEAMHGoB4QHYEZRQaF 8ScABIpCUhDCpnRtbNfL2jgE5TiZM4UDIibGWgRIcTiMgHv8AOP1Tk30yBnmdKPcs+7VvKJ+JSC4 iH45IQoJ4N6P7TN/owWIoYULXJXyKD84qGivL1dRrvlY1sqBBWSN5uyFN995VVKlLMn8kjHDB73Q V8SPX+gLenzxhhIFX6XrHt+enxQtNG4DPesXvho73zHGfhiYAIfjfuuQkcKBY5RxoO2VctRAxK28 x6Fsc/zGoMSqLugeWnIYstuU6zjPfAev0AhtyWW+Mz/84BnwPtf7DF2XDJhryDinxNFzntbjHsci 4q9XzqfPdt0Htx4Xn8GHPAOvcAboPadvj5fxBbeymPCl3bjml0CXXPpHFcbl9HuAV5yWz/FbdhMQ 1JEjEPn1N9zha37rYrQD5CH4uo5j3hXQ12MG9JXZCQiCY88r8/UyxMH16zAv58RheyULAhGfkyfr BO7JfXDu5yAPuc61AgmlYY9VZMlLQLforrUAmSU6cYDmS2Aqu+zlAq4c3jqAey+//la1MZbAiEPE 616v5+PA2xoENBw9/lp3zzNy4jOvgXXyG3lAW3LAtsHP+pSrU63jU1Q2AwIijx5VRkL7fHfeX+85 LNgHkiJ3SioK55g4QZ8x7iIaDlEUI/PAZAzhoBla2YnymWe6mEvoPVcjsKIsjhZgCOESqYpGzSPy 87yGcVam8pmxzMPBUTR4UWJC4V7RV6JSzlcU7B8H9NninEayG9Edo6HsI9IU8SpNeQ7jvbEYeGV4 wsd4WaPPGDzPppQcZc2+cz1QTvJ8i7IJCOArA5YVE1IOH1AUdGVAZWPGFYmj5TpgLCkKWnlmo0yJ xujt2ZbxzRv6+s4zJ2uCr4xLFiXL82wOvoxnnkWjL4MgI+fUjGNMdFSq4lxkusqUSpOME4eKDx4R WKvSE6Oh5G5cTkGmTqF9T37iZNBFtKzsa4wlIG94cqMyGWtAb4B/1g4ftFQyhi9DYoOQMqJKBAdI DgUcInEZJbkynlKbZ4bk2AlO5NqzMNcpc26SI3OhL1oKImRdKRUzQHiqKuFzOORYUffIXtCHTjC4 8CVbMuWDCt4EVGRflouevkM/uod+SqPu4zxUHBhcjoAR3gaCToZacGTNwFyC3eihLEXQKPsX2KEH +YSXdZA5a7Q2MkdXPeejOzKorEXGiLfwxQtzeGVLyD+92wRoZpOiwIuOwQEfzY9G5lDpIZfk1DGV 5ADf8Q5t6TkdJddoS9cEoWQF7+kbuWKf0JpMkDWyYv+ExAEtyLz1OSMdPoCekHu2JjK9aS30hKxz NnDzGMX4+EYP6Ag7pkrGCct4PcaDFzzJpHXjOfsCL7iqEJJf37GZsnWypAKDNvQNPzYBuhlPhQNf BDx4qJKDd+jAB9AX9oEdEFSiOZvGNrqHHScP16syI9DwQzYkC9alBE82rR0fVRrwhP1hj+Auy95F fjet5Sw+39tBHCI0Tg+BEBhQFoRmeAh2PscYyoSRXkWfBIOTpNiMG2HwvWgM4T2jlIFxNuZgSDGV EFA6hoWyMNwElTKJcEVIxiRkFIGSYnAMidIIA02ol4Aj5GCUsxgZ84nC4E+YrZ2zJ1QUljEifO6h LISSYZH1BCiK7+FIgVxP6SkIB25O9/YZACfm2Z+x0EMGuwSiSnSRlaBLDJi50ZexQReGCE1k9KLc 4KvSECGnfJyANcOXURW9Gsea4Yw+xrQWY+Cb662FIU8GxcGbCy/QxL2yNjRFR+PJFJOloLeomOPi gLcBPqOVeQUWnF4AfWOEyBPaoAt8rQlecCWngCxxjNZBhtFDsCRaJ/f4AayD89sEaMEwctBwQgP8 xmPzXy9jBGfrxA98wQuODJ0jE3TK5+hO3tAU3dAIX+AJX58ZwyY+9wI8ND6HQm53BXrm+WkyDoGz 8Rn46Ly5rY3MWQsdRSe4BvCYU4Ej+U2wgi5Kz/BFR+My1j7Puulp5Dfj9a8CDjRlLzgwNPAZnrIx aOqZLL6hCSdoHfhtPrLiWvIb4ADgQZ7h616yJbs1hxKqx18yNDLmc/8EAk3oDvkG/hYEcDD+g9Uu gFYJAIwFB3OxZ+aiG3hA5tgI8mAe65B5wzd0RBeyEhvMFpAXtpm+4ZnPrH8JXGuNV6oqRfbpKbxC a8kCZ66KiVe+I79wim30OV4CfgG94KnEjP8A31Ucsw76CNDbujw/JscXDfbmgE+TEDI5gsNJyziS zR4XBwJIGWRfHOaA80sBgZUNIzKKGLXzi+35xYzzkF3Y7Dbg9CjAUbE1HsklqDy92S/PTIIPVTOZ fxKDi7S6S+GARVsyB1FnSosXiQkD10GBQYFBgUGBu48Cl8IB331sGyseFBgUGBQYFLjoFLjvRV/A ecffM5h9w2nMse813OnxB03uNEXHeIMCgwJ3mgJ7d8CedSgRZwOMBdh84tmdthKfX1SwucCzSJsj bEawecdz5IBNJBr0e2dgR6TdljZ5oc2uYLOBXY2ecdtAEfDc++rVq23zQj5zLfoe1gZ3uyTPG8DJ /3m1C3MJ0M2mDJt35mDTkJ2Xnl/OAV+0JNhYdjuAP+a3kWwOcOp57Xv42qkKL5vpBgwKDAoMCixR YK8O2DZzW8M5DlvTtS0AO3U1btvtxoFcVLDzzg5Na3RYhUMqbL0P2M2qbaXfHGD3nqMatV30/ZG5 Z9OrPkaOwE4/O0YDnnk78rD/LPTNjs1ce15e7Wy0U1PLyhKgj00qdh/Pd4raDW+XthaXOdiZiibZ UTv/fte/7arPsZx2PvegR9Ju2DnYnYpPWk4GDAoMCgwKLFHg3qUvb+c72/ntUtVrZzs5YxvnZLu/ Pi4Oqs8OZRROteK4tVlwau6VbTj1yVFrtrXrs9OapH/O1nf9dLa5c256c+0qNJdeQeCVIdfqAWzl 1w9rPjhwnFqJGFkZjDHtgjb/UluPQxv02dmBpw1I+4nsHmjPsZa0rrQP6xfno5FcH16/dpm03dyy Ni0A8DG/LEy/MGeqdUq/G6cPtGrpCUWX3gHbqo++tvf3c3AMdgxqVfDeeDLltKS0QXf8pY0ArbRb ud9JPFoJZH5O0tGWAGeOUKsQEGxZi9YH7StotgRor/9TFqolyHq1jwCv1jbPomXXZE4bgx7EAHzR 3K5f+OrdTj91rpm/6oHUpkKWyRwZIjP6E/V1wg+NyagNgAItcol3ZKgHtNA3rVKidzSHOJA5eOG/ dZIpAdqAQYFBgctPgb1lwByQ9hDGCTCGDinoYV7C04PJeerF1XunRO0axloGrQmfIVNyZeQYck6Y w1FuZQwZbM5bdsTJMnac0WMe85g2NbyUcTVvOzTdyThKxRydM0Y5aWP5m8FdAkaeI3O4gIMJ4KT0 CfThwdmBCXOwpt4x+t4BIxy4TM99DDXgLPRbCi44HeOaF6CVdSjHcjBzmNPXOjkBB41ouGf059fM x9j0N16ht6P2OKL8VxtOTWUDD1Q8OBeO11zau3JEnoBMqXgbaMjnwMmEwz16QPs55Fxfh4f05Xf4 ClTgKzPO2eDz+/u/BXWCIUEOR2wNnKzM3Pr8bY457X03BzKq15RTRxN9jUB1SECqwkFmw/f5/ePv QYFBgctHgb1lwJxj72QYrjRVbyIjQ82ZMFaMmsyXkeWAHTag0Z3zZEyBpnrN5q5nUF3LcXpVmlWu ZfSUK2UtwKk7yoqyUMBZcEKeq3pWzdDKwGUjxrKGvoTcbnrWL99pJnci143KXDX850QbTonjVA7d BfQuK6dy5JyIM6IBZ+vcVtm0pv2+MV4GKWAw1y7AOQpsVAngiQah5S7399dwIHiFp57jx3HARfWA gxcgyIo9I5fpoZUACbhHQ/4SkAEn6rgXTx2Q4OzhPtuf328Oa5z3BquCcOZK3+beZe8BWZHhy/T1 Gyore6TgKFQBk7N/yeU24JAFHGQkOiBDxg+Bhf0AKgcOUxAwDhgUGBS4OyiwNwcs85XByjidVOK0 FMbMM7IeegfgmSpnyyBxhErY+Z6TdMRa/jYGByQzdMwcR8RpcuLGcH0CgN6JyiI9fxUgyC7hpBTL cXAYNk15ha+fTc7X/L7jIJ0gFIfp88Cm7NIa4GT+gNK1dTg9iLNQflY1gJdrGXFOaA6+M08/Vn9N Ty8Bi39NhgcckIPlGfycQiNrVM53PKfS/BIICJRdlZ49K1V2DsAna8/8HI/NYcq5giNzbQPBEb6q TKC1E84cQ2f/AMjY68aZ00Tp3TpVNVQlHMm4BGhtfo8+4K7y4FjUnH0tOENPDthjAZl9gi+49nLD 8aq0OA0KvwSNATJmDjIoAHMgRjJ9AajNagJINBgwKDAocLkosLezoDlLR84dHh42o6n0qfTHGTNs /mOIo8WcYOVVpiqTdVYwI+s5pRKgezghpVmfMdyclWerHK1Mh9NwNJ4dsTILmZ3zfTla793DeHKU nJrMy1mqDLGSts+u1DNLTs5ZsYIGh/ODpePNzOc62UtKxO5hnK3bc0O7ns0nCzQ/Z6Uc7lkkQyzr 9kxXdqUMCX8ZuGeJzrQ2lkDEcX3WKDBRUpcFKo3C1zGKPucIHNdoTZ7thr5oLEs3F8fOccCZ01CS TUYJL2tX1k+Z23rWAUdibs/TBQx+ZL7W6dzXOCSPDWSlngVzvjYvuccGJvha47qzZpV586/VPBfl 3DhN+CnRy0o5Vc+G0ZfDVcIVCHDUsmX08kMGBCjwJVuydz/kc9NzYHsIyJAAAI4yXgEiR+weAZzy MRnjWNFXxk5OVVsEduSc01eqt2YyaH5rI9sqGh5fWIeDZDwiQCeVHiBIQgO0tk9hwKDAoMDlosDe D+JQmnTeLIPsB3h2xrgwzAyZTEb5zStDJCuQWXj+xrByzIw3I8pJKuumlGc8z+Gc6yqzkkkA48ti GHevnjcy4sYCjD+DyZj22aMszfmqxjHeElibMeAkSEgGxGBaB9w5Mtf4TjDBQcnUrR1eXq3dWn1n 7ejA0ANjwMdn5ulphSbGzlgcKZxlTsbp6StAcL/P4W1uGWzW7m/Zt8CIU94F0NxceGVM81kvByM4 8pPPcyYyWQBK6XBBE/fNwboFI15zr+vh62/v4exvr/iMB/hOvtAi31u7jHSOL1zXOX+44IXgxzXm Cy6qLoJLQFasX7XAGtAXr5IB+xs/0MFYZM5ZuGSBzOK7eYyBl2S6f8RgDt9by66PMtwzYFBgUOBi UGDvDvhikGFgyQnI+q5evTqM/RCHQYFBgUGBU6DAcMCnQOQxxaDAoMCgwKDAoMCcAntrQ5pPNP4e FBgUGBQYFBgUGBS4SYHhgG/SYrwbFBgUGBQYFBgUODUKDAd8aqQeEw0KDAoMCgwKDArcpMBwwDdp Md4NCgwKDAoMCgwKnBoFhgM+NVKPiQYFBgUGBQYFBgVuUmA44Ju0GO8GBQYFBgUGBQYFTo0CwwGf GqnHRIMCgwKDAoMCgwI3KTAc8E1ajHeDAoMCgwKDAoMCp0aB4YBPjdRjokGBQYFBgUGBQYGbFBgO +CYtxrtBgUGBQYFBgUGBU6PAcMCnRuox0aDAoMCgwKDAoMBNCgwHfJMW492gwKDAoMCgwKDAqVFg OOBTI/WYaFBgUGBQYFBgUOAmBc7EAftfqP4/7ybwP2Nv3Lix6etT/xy+/sftacDf/M3ftP8zu+tc /s+sfzrv/yqfFfgfvP4/7y7g/xfvC1//h9n/7TXHRQJ4/+Ef/mH7n9AXCe994UqW/H/sAWdHAfbO /6j2/7hPAv6P9WnZzJPgd17uuXdfiCD+z//8zzdH65+VM4ov9VIvtXrgAx+4+uIv/uL2z8g/93M/ d+30P/IjP9IY/2mf9mlrvz/NDwng133d163+8R//cfXt3/7t7Z+t73P+b/3Wb129wRu8weoDPuAD dppGcPCFX/iFq+/7vu/b+M/ldxmI4/rbv/3b1Zu/+Zvvcvkt1/zAD/zA6kd/9EdXP/zDP7x6gRd4 gVu+m/8RfL/3e79367Xze/u/1+ErqPukT/qk1du//duvPvzDP7y//Njv//Vf/3X167/+6yvO0c+r vMqrrN70Td/02OPkBuv+67/+69VbvMVb5KOj1//7v/9bfcmXfMnqy7/8y1ev+qqvevT5nXgjQPu5 n/u5pofW8UIv9EJNB5/jOZ7jTgx/x8eA41d+5Ve2cR/zmMfsPP7//u//rn7iJ35i9fSnP331Yi/2 Yk2HXv/1X3/n+/d94W/+5m+u4PN8z/d8q7//+79f/f7v//6RbL32a7/26nVf93VX//M//9N4RR7A S77kS67e7u3e7sjm/MM//EOzqXj68i//8qt3eId3aPy0duO/zdu8zeqee+657aV853d+Z5uH3f6M z/iMFfw2AX6Z+43f+I1Xz/3cz3102ZOf/OTVU57ylBU9v134l3/5l9Wv/uqvru69996WaKDLO77j O65++7d/u9llNtp3b/3Wb7166Zd+6ZWE4Bd+4RdW6OJzvuflXu7l2vd8EjqHxs/zPM+zetCDHnQL 7reL73Hu31sG/LSnPW3FmfzzP//z6tGPfnSLph772Me2yPbBD37w6r/+67+asswz3f/4j/9oxJ0b UET+i7/4i9Wf//mfrzAkBFy3WNGzcf/t3/6tfY0R/d8+5GyM14/DyZofEHa43/e+923GHBNda25j 7RIZuu5P//RPV/7ZfQBOxgX/9E//1ObJd8b+kA/5kBX6zMF9MgOBTdbF4Yg0v/qrv/oW58t5uM78 DFIPhM+6OYMeGIUnPelJ/UdH7zk7GVrmzReybtWKD/zAD1y98Au/8Naspce3d9TB11jovgtY1xOf +MRbLmUABHj/+Z//2fhr3B7wED9UGbbBfe5zn9X3fM/3rH7lV36l0fJLv/RLVz/2Yz92dBs6/smf /EkzAPnQvGgF8Diy5G+8mOPrczJFDjjg+93vfj5qQD847X//939f/dVf/VU+Pnr1ue/hMV/n0UX1 xjqsWRCJ/j/1Uz+1EvgynIG//Mu/bHrVy7Tvzftnf/ZnTebpUMC8f/RHf/Rs8/73f/93u54sBawP T8kjeTGm+wPW8cd//MeNbs94xjMavg95yEPa37vKgzk+8RM/ccXmvMZrvMbqu7/7u1ff+I3f2KbA A/QF9AtuWbs1sSd/93d/1773i47BCbgXH13P6RkHjYxjrbvCH/zBH6y+6Zu+afWcz/mc7RY8+fqv //qmU5zFZ37mZ65+4zd+o9kaTovcsRnf8R3fsfqqr/qqdg8affzHf3xzuHTnYz/2Y4/kgpP5yZ/8 yVvkcxtuxicXaBywTrJ07dq11cd93Met2OtXe7VXy9drX7OWeQXs3d7t3RrNNskvPlgTmdwG+Et+ vuZrvmaFlqmO4N8XfMEXNF6QsY/8yI9szvd3fud3Vt/1Xd/V5O7LvuzLmq/x6j7yJ9ClN2jwuMc9 rtmKbTjs6/u9ZcAWK0r56I/+6KaUn/Ipn9IMH0F+rud6rtUv/dIvNQZR5M///M9vUYhFilAI4Ad/ 8AevPuzDPqytG6Fdw4CK8H72Z392JUu+//3vv5YuFOr93//9G0NkRITjEz7hE1oGTvBFdRgKD4pE yF/mZV6mCbxoThbIQT3v8z5vc0qcsEiJAr73e7/3URbvs3XA0Ag6GDbROIX9oi/6otXrvM7rNANo fQcHB43x6MHxveiLvmjLIK2LUIluAYX/iq/4imZcnv/5n78Zvvd5n/dZffZnf3ZziLIFjpECog0l +uZv/uZGR1EpIf/0T//01UMf+tA2FuHjJCiGdaIFRVSV4JgEPpzp4eFhy1BFkgIpzoGyvtd7vdfq /d7v/Zrj+azP+qyVTMp6rZEhWAJ4wte1HEGi9Sc84Qmrn/mZn1m9yZu8ScP3Uz/1UxudN43FKcCX Ms3xxdMf/MEfbIaWg8RvmStDCl9VGDwXRaPzpkxQJP2Wb/mWTcbQjhFgHL1/6lOfupKdyUI4XXRG Y/P+3u/9XnMAjBhZkpUxDvhPHuArC1W18CqAYpx/93d/t1URXuIlXqItG32+9mu/tuFAFt/jPd6j Zff4K+AyD0NMf9793d+9jbeOXtb3zu/8zo3f5iZ3dMt66CjjH77RM7JGzuCHToIauMhkZHACkm/5 lm9p8iBg5Sw/6IM+qI1FZowrOHrP93zP1SMe8Yg2hrUnaxP44sfnfM7ntDE5GbzwucoPWcBDDoms Wt8nf/Inr8j8Jrh+/XpbHzqCt3qrt2r89578Cnxkkow+w0vfrJWc0TuO/0Ve5EVWjLSsSrCCb+6F z/d///c3vfrQD/3QhitHKkBi2/BlG5hfYCijBK/0Sq+0esM3fMPVwx72sEYL+mC9MjjXocXDH/7w 1au/+qs3O0K2OArBObsG8OIVX/EV23tO8H3f932bTsAn87Qv1/wSTNOfl33Zl222QIbLnpBFdgv/ 0JJNxNNNOkJ+8JZTZGfZy4/5mI9pegwH9oSOscdkkKyRD8GmNZN/Dt+cffA5R9k6jctOXb16ta3d NW/7tm/b9POjPuqjWuDGZrJReCsAQBO6h89JONCHXUB746mysndnBqXQe4FyelMZ3KmUdCpCTOVI piLGVAyYfvmXf3kqR9bm/fEf//HpUY961C04lMGfyikefVYKMlVZcarIdirDM5Whm8o4HH2/7k1F Q1MZvKkEaCqDOZVyTWVA2xhliI5uKSWfyjm3v4txU5VxplK4hmdFSO3zcrxTBRNTZaZTBQ5H9256 U0ZqqrLGVNFdu6Sc6lQMbzTwQTmxybxllNo15cCOhirFaOvLBxXNtXvLcExoWgo6lQDl66mUYCph a2PlwzIiUxnG9mcZkakCmXw1VSlnKuWaKqCZyhgf4VAOcCpDOpVCTBX5T3Cy/nLSU2UTUznyqcrc 02u+5mtO+FHGp43junqmO5XxnOqZ0dE8m95YM3xDG9eV82m09R59y9B4uxHcW2XVqTLvW/B1Q5XP plLWdu/jH//46fM+7/Pa+zIQUzmeqQz6hKav9Vqv1eSwfbnhVznZ6V3f9V3bPOVQmjyREbStILDd hS94UtnXVE6+XesLcl6BSqOJNVdgOdVjhWfDN1PTh8qS82fTHbKIB2WQmzz5Eq0rCJjKWLafd3qn d5rKAB7dt+4NnakSZ+NZOaKJPAJ8JQPuh7/vyrk2OS2DOdFD91Y5caqstfGsnNtUgUGThx/6oR+a KgieKqBr45EhslXZ6JH8+aKM31QOp+EeuUIrY5VTbPeiD10F5iQjgK3YJg/lnKYKJNv17E05mKmM /lQBe/uMnFRA0fAnO3CoDHIqR9u+94vsk292ir2KLFcQ0cZzzSMf+cipnEfTmcqcp3KYUwWyvtoI 0SG2qAf6wyb4gV85jvZ1PcqZ6jHFxH6xOfQV4FNVrppc0UXz09UAe/hmb/ZmR+Pk8/mrtbM/kQH2 A69/7dd+rV1q3eSLLPpuCdCKja8AsMkPfHIPupBftoLdf5d3eZc2VAVLUyUiUwUcTYbKoTa5XJon 3+EF3Q3QsQc84AFTOeC2BrpufrLKhlUAcKSP5Mza0e2N3uiNpo/4iI+YjHfWsLcStOhGtiF79CNK E+UkS0vEI7rxfQ+u7aM4EbGITcQiIpWRbSsjyl48h5AteT4pWpdhiS49bwn4TDQGikENR1kOPPNM Q4YggpdxiA63gUz5lV/5lY9KTsXwVnYzPhB1i2RFlqLpfv3e92tXrnO96BJNPcsQ4fUAv/4eUaYo G7zCK7zCUYYjU5ARXrlypUWR1lcC2HB48Rd/8TaHzE8WBg9VgjIgLcuTBYkulfrQBj09c3KdzAVe uwDeur/HN3R3v3GSkW0aD83W4et64+c5KhpYH8Bj48q0n1KZ7NWKpPFoCdzr+VA5uSYbxoWrLMqa Ab7IhPHc9eYPeI8++Iymru3pm+u8okmfaZhHhoJH7k21RTVHxC5L9WPuuTz043oPL1mODE4VSZkW 4CGcfvEXf7FVTMpIrsqIt+vpm8yFvskYZe/kytpVUMiD71WWPNdUuVH6RaPXe73Xu4W/8CtD2WiG HtYkg3Rf5FSGVE6y4eXXlZJRQB56WWkfzn6xM9FLJeVv+IZvWFVQ39bq0hd8wRdseyrITfRN5qVy EVCdulGPCSIvrgtEHvGHzHutQLTxRCVpCdAL3fCqB7Ihq1eFQhN6CsqptX0CsrdyJqsKFNvnaEX/ 3Kd6aH32XATIBzxVZJYALsreMnDAtqI1+QXwtD62xndLABfVC/zEJ7Ld3+NveKkCZv0qUT77rd/6 rdVP//RPH1WYlubJd+gUXvjM32wyWpgDLuanH7FhrgHkzHv0xWs+hOzOgWyze6cFt3q+OzwrRtts gLmez8RQECQKU9FoE3p/KwMx9q5XWuRglfqMoTSiNKbcxTAwGhzpEtiI4zkAA+qZJ8K7rzKaVl5S 8lGeVW4yLsNkbkaposH2bCjK6H4M/bZv+7a2SQIudghuAkqqzMHYMwhKLD5jZAUE1qvUpbwWmjCs 1suouQYuaCKQ8CxKqdizu+vlRGOo0cg4jAmBTpnFGtCXAjMq5iNUPmNYGHalGZ+7FhBa33t+opSK dspyFNXaPedlsIzJINpMpJTkemVlJVQl5iWAr7LsEr7wgZfy5xIwEPC1foGWjSPAvUqN+GmN1i94 Up6igAwbR8N4MEabgMzB16tHIRwLHuCXEqoSNLkQ3MGDIWUMzM9A2phWmdzRc2D4wgW+lTmurlWJ Grge7Rgm15MbcidgcD35Ry90QV8BI9ooq3ksUxnikTy0AWe/OHIyKJBLqZHhMa9yJ5lUwlYyph/o hi6e/3mEhMcMmzF8TwYYO/LAWdNhdCV75IWs0E34klv0s+sdjazTmoDyKmNJ/+gBGaqKRfsObq5n D3aRB/ykP4JLjhHeHBp88cic5FTp1fqAe5R10ZtOeazlM2sh4/iKtkru6A/c63GV65Wr6UGCvXbB ml8cJ321lgAjTzbpNz6SRePhtUDHWtgLjwqUXtGxsu/GE+vwCOhKOU00DMAZfoL1JYALm2I+PBVI mVP5m2yzQew1PZXwsJvbAB08ArNpEX3IJ1nFR2vxHh/JNPmlJ8rHysCCJ7gvgfHgZQyyFDtHzoxN jvCe3bLhEJB3pXFrIV9k2lr4FniRhQQ3mRv9yXTK/Pl8n6/3HBbsawLOxMYVSkkJGC7E4vwQgzJz ggykjIIyc3IEiVBSHlmKZxGEBSEZMM8/PA/po6H5GjAZQT2zJCAIayyRGuUUPQoKOGRjMRSezbqP Aack8KWQHKkIitMxJ+fob45sHXBmcKTEBIfhkzlasyzBGJSaIBBITpGx95wNrgSSUsgk0I5hoBxo JOK2FtGlrIOioA+h5GTR1GcETuaNbugKB1kIgyMDJHyqD8b1nvEUycJZFH1wcNCyK4rJCDFGBN7f 6AgHRtJzMn8zBtax6bk8Ohkb79ENvmhu/T7r8SUPDClDvwngy8AGXwEXRyEQAcalgMb13nNBQZPr 8c+uZmtIMDOfx9rIJmfofs7K2NaqQkJGZI74yBGq6Fg/vMgWh2sOODLSZCKZIoPKAJFFuzsZf7jH SMGV3JADdGW4GCHXG4s8cKwqOTJJfPbdOsB78kvvyL150Z2sCDzx3DNOzpHx9r0MhfxF36zD81yy yTEIUK0dD8mUjTr4Tu7oJz2RdVov/WGc/W1MDp+8GYuMkSvjwYMeuifyIPhjA6zB+Koe68DaBFjk 1M+NsjWcFydFpwGZ5vToh7lib+AGL5uOBFEALwV1kUm0dj28vNIpuiwZwNclsE50gaPMCwiw8dr4 nCGdQgP84WDYPlUKayJn8FUhYAsEb9EhcohXgKyax/PQJbvoWjwT8NlvAw/P4/FQts4G4RX5J6ds IJ5tArjSVY6cvFgj20fHyC/ZMQ5HzGaRVbZT10Z01TqX6Ihv7Ca86LDABR/ZHnwAZM4ayB8Z5mhl 2GyINeItXH2GF3wTXNA2QFbRgF3A59OA+5SBeWaN7jRmG3OciAKEgmKK9rRCyU4Z7AF3JwVkU4JH hs0GHxuZNgWDdyeF7vyqGX0BgscRKgaC3l1BZUN2L7ngkO80MOE2OHGEV+vRyoCLQ4F7Lw6qdy+m IklZkmxNyW4437tXFqycPCi1yUyUUYfz3b88qIhdqYxaZiUT27VPH2YyKpmbwMm9dxpk6CoTKiMD LhYFRgZ8sfg1sB0UGBQYFBgUuCQU2OsmrEtCo7GMQYFBgUGBQYFBgTtOgQvlgG1GsQnhuGAjhw0C /eNun9mcchywuSbb9ef32Shg44xNTScB99nh6Mfzpn2AzSbwPC7YLGLThI0Utws2/9gYY6PVgPND ARsCPavMLuElzJQ8bdxSlj0PQKZs+rFZa8D5oIDNY3Yak5V1wA71J8utu+Zu+Gyvz4CdJmNnnp3F WjjsEr0doGgc1NKpOOvGt0PQJgg74OxOBXYT29jkxJRdgYO1C1bv5RzstLNGuwi3tSbM7/U3w4dW cLSr1s7AOw12rlpzWnZ2Hd+zRjsW7dZc2q24y3gU0jq1vdyuPOwy3910jc16dsZrmzou2BXrtDqb /ObtGfOxyIPdpnaWbmt7ca9g167a4+jafM78bV6BtN3DAbu6nZalFSX9rfnuuK8CYbZCsG8em6a0 bdlta3yvdst6RSe01ivN4bjed17dY6ctfUYvO3DJvmNmD2r39zrwnNgzfc/46YYWpOxuh48T7hJk aN/RWQE/nQ16tbMj2KlWdt87utFY5rdpzCYyu/RPAwT7TjKTMMF1DtqE2FM7ue9m2GsbEuFgELRa cFy2iRNOTpTScAZaGWxVJ6BLwEDoS+OYbMcHlIUxl0155VRtlAhoETGXdg1z2cpv276WHwLdb3/n QDkZRoyThjMFIjwE2N+2z9u63m/zlxWaW+sCJbRtHz6iP20+BNHcFAA9KJA2Aj1znG420KQ/TyZi 63zf45f1zF8pl1YCc1kP5aK42oxstYc3p8so+M667J7FBxUBn7mOIiSDtzatHBrnXW/jiFYRho3B MVbAGGn7sOZsDkN3m8bwllGxdriglbVz5OjVAyMNV+0ieEge8MmPz65X76Vx0nbR35v3Nshop8l6 08/I8KEp+Qm+eAknsAnfjLvuFV+tkSHBB4GJea3X574nO9octMNxHOQVv8xLht1rXXYza9FAG3RA e+04ZF6VhhySJfKDH+GpyoTv6RRHiIcMuGMXyRaZCr/wwtzkBO3zOT00L0NPB7SRoPMmIL/6nOmU azMOJwBfjhYP4Gt+cuF66+Sw4UVGo+/m9oM2S/PCx9q1B1knWbR+YwnwBdlkAx5wio1wH/2AA/kj W0sAL3jH3nBa6EVP0Np6HEeL3qpCjjZ0HKNNWTK6g3Ku2vXgpY3QkY4+0yZDjvF3U3BtbrKky0E7 EZsJF2BNnCpdtDa2DM+0p3HEV2v3s/5nAZQ2IDjTB7bJASxsk93yHF541tPBvFqh8A/v4MJGkT02 yj10hz1lI9ISxgbQK7xjP/GBbmmjMh5ZRA8tgewDOprDuOiQVkN0jRywX3ilLSvAttMhuoPH8NvH hrbMd1qvN63pHmZEXEQXIRJOhgJgjB5EzoDBWHdI/RydGArCHhDxab7WmE6w9bOlrExQ6rixJkQO sCCMDBhg+PT/iWgDjKReQMaDMSCsDnQnGOZhnIzDIQQIln5DSuHgAuticOEKFwrHIDu0gaACigBH iqN1gIL0wFkQrl2gjl5rgu1apwgpw6Exw+AnBl8kDIxrPs3yDJIzfBkzfHDQuyBDZmo9snDrNgZl cWCAtQQo2+HhYaMpw+5wEkBxHBRPoTlA59j6DDDelMdYxg3goeqB61RNRP6+N5+DM5Ss0RaOjO4m oPx4ZBzVEqV8h6BYn/s8QsATtHGeMsB3+DLunJOzYbeVVuHoHGDBEgNLlt2Ptww2enF4ZIOxsW5n 4lo3+dFTS57yuSwB3/EEHwWB1sIIG9dYdTRhwxVdGEbnOtMFRonhgrOMQ48qWpItgQUgb/42h2sZ bPSAPxz1UzoIw/wcxxKY3zrxlVEMkCPtOYKPOl62nS3sO2VtugRnWSrZMwbZwiutOXhAf/IPFDLm /JWc6ePWc2ospxkF6Om1OtwErdD3RvUCAw7J2ugF/qOvuTcBRyPIFiwIgvWUcnx+ODZBKbr6W6YJ XOc8AY5HcKlViaNQKfOZe+i/XcpLhzywHe7nAPW1C8IC3vtOq5G+9JxRgI/0hKxzSDJu3+GjXln9 03rY2TY0IXPrAE/oM90nc3HI9Bpt6Qi+0i3yRWeBPnRy6KAQ39udDx80RgNy6XoBmHEA22ceh4EE rIOckEc8pCscMaALbLm/VWmck02/LwPcu89FUGgMQlzN54wPYXXQgPcUUISkfMLYLAHBc+A3ZgYI mchSNMbhEVyOQalLu47rCT2F4aSjeJQLThEi44noKS7hE1ETZvilxEYAOGcRfCDGF+6EixIScLiK Xo2lPUC5LIJPkWSecWaic/Q4CUT5CCMFoZiEnvIyrtZAMRyeDxhg0ayj+tBOSUtwZG0CFMbJew7b miihMZTTOG7zBRg0jkL2RtGtOYAWaC4DxBfrBbI8NJVxhxeuZUjNmYMKODR8PKjMQabjPxHJbnzO WCdqznx5jQMQ9HHcDDq++tzaGUSOj6ETkQfwFL7wg294nu/7VzRAT8aDHOGrjEVkj5ZkAL0Ah0i2 BWDwkC3JXBggBhle6CGjdb9sh1HPwRc+Iy/wdRBBZJsBgj/D19PCfGSe00nmhE8CTWMaj/45QAId PIogn4IO64J7z+N+3XkvO2fM5/JAxjkoAQ/ZVppl1I3PWdIddAgImAXJnL/AmH4K/mSSm+jvUB3y hpdw6ME6o+/oy97IEOkoe2DtsjJ2ga70GXI/Tt7D3Tw9mENlAw6crB+fWTNwPV3E5wDZwjfBKDzY hSVIcOIVXQQ5ZMAPMEfPI/wX1FgnPSIr/okHWQaCcsGNwNfpZQKHdcDmCR7NI5Bhu2TwV6piYM3O IOBgAfuC/rJpWbcqpwoZWxOAJz6Yk2PvHxuSE0F2gnb3wIs+sQGCOzZDcBn/wDbjv+DW9+zCZYC9 ZsBKFiIwEQzCyhwA4xslY+C3Rd0hNGHnYHowVsohmJbysCw0SmYOBnx+bzLijKdUwyjAG8Qh5HsZ JAEPcAaZwxoYp8yfUptrOaqskfAoDzHSBG4OcMq18+/6v9FCVpRyo+g+AYW5fQ8YhGTU1g/HjI8H Imc09B2lRytZgHX0par52vHVWozFmHMGnBE6c2Ipj8k+lKgC8DJucDA3ZY2BcR1jmWjZeGhufkai xylj5tV1Mg6BhXVyiAyU+7yHB+OrhBgH5R74KncxGIwZY7UJgi86AbgyXMYTsJgr4H0CL/SNzMMp 6xAgMm4yREEQJwjcx/gZH204V5kNQC8OvXe+7YtnfZe1+Sz4Ck6NpVQuMFEyFBxHd/AbvpHfjLfp dS4PcMrazcOgZo2uhUcPZJSsRwfjGHrn0l/fv49s95+RpwR6oS+c4EAWfS8A46hkpNvA9etowYkK cARSsndA1oDr3Zcfn5EvFQfBDjy2AdqRldBFVtgHi3P7INAW8AgCVQfYI/tQgGvN6bkzPUxguAkH wZKkSYVDFiqblRywIfAKkEf8DE/97d4esgYZrcoF3ZpD1pjP8TXySFdCfzzMxlSv7NRlgXsqOjnc x2KUokT/MlYGj0NU9hM1ip5T7uTslJRkN70R7nFCcM5b2UIpA2MosGxO1CcqohAckIhPJE04CB1D LnsQaSvFEFDPkYxFsF1HEGRNDIgSnuxGCZbRAgyy0o4fkaEI2EYriif6hZ/oUCnREWYct/XBVQSL DsbicJ0RTKBkXO4h3KJIr+5HN2VSpR4GmDJvAtElB2VcCiPjZKQ5AkaWQNutKtsQPQouZABK8KJa dFHqESBZmxIXGlImuKguKKFSRDxCK2uXSaChOWRxlBONZC+enQlkjCHal/lYn4iccuODNVJQ5Slj UU58xFfzohljgRc2xIi40Udkj76c7CawZsEARyrjkomZQylUVmQOa4Wv8iI5Uoq3dvi6jpxseh4J b87R2tEDvgwfx0mGUtpW2VDqzr9slOFzfsnCOIeDyvDJHhxkiTJb1QSA72TUegV6ym/kyrWMMh2y VvKdTYFwk40wykrNSs9oD19VBxkNuXMv3pIX1QXy61qyYo6lY/jQh0FFQ2vAK8GYLI8ToMf0UcBj fWhifDjD3RxkxPM/eNAR8oo+ggr3c9ibgB0xjzVlMyGdRneOVSWGjHPk5iCvHAoc4eVxBNnsg5R+ LmtCC+uzdwMuV0oP6T1ZpGfwZWc8xqKDvf67TjDHgahyqJaQb/qfrLSfr39vbXSSfuA/vaR75NTa yBrc0ByeWRMdJK8CuTzeQxN2R9BpzweexqH1c/bvBS7kmm1jC9lHVQU8JONsBtvBrpJ3VQ90YjOs EV6SC7iTE/eovsj+VdfgiwaSBbJNZtCXHJtD4GwM+o7H5hM8wEe2LEi1frwX9F4G2JsDjmISHAKJ CcoUnCYGMXYEAzERWIkskeScsAwdZjBWDIe/CYvojjIYyxiMkVfjus415iUsHL8IGaMJpe/gYyzC yxgBY/lOeSWGgGB7PuhEm2SIDKkfJT3Pgn3ncHFBhDE4QjQwJwNvbfByDqtMh4Ar87oezgyGzxlA QmpuAttHnj1dfA9Pwnujnu14biXaZIQZZOuEt+AHjhSDcVAe8z3npwzkPpkQnBmvK2VsfI8folER JyMmEma0/Cj/wN8Pg25cz2bg43vGhzFhaK0dbQA6GY9BAdaOJr5HJ8aN4VCGNbZABF7wsS789p4M bQL3u05Ahq+UWZCi7EVWODM4oTOHyDB65eDhy6CSnSVAM/ICX7zyPNhazOcxgMCBs2G80MqafY+2 rmEIBRHWLhizRnwWwNAN4Du4McLkmmOCM/zxjqMmu2idzSr0Ay05HPPhPbrCl/wJQMznc2PDh9Pz OIgumF8mivebgD7hC+MruzOnNcKJHBuXcwjf8MOPMT0nti7/IAV+KceroNALdIzObZof3cgZXsFZ sIQ+8DY32UBf8k7uE2ThlTk9moiur5sjtoaekxn6RQ99Tkfh79W68QQ+1ss+uT72Do5sBt74jD4u zQsXthCN0NZ85jamKpc5BNJoTb7pGfuDB+aigwIvvEUTsi4zdj+At3uWAO3hS4YEa2QDT92HV3Sd TVMFoCdwZLPQ2RrJFlqRYWv33vx0hPyxJ/hDDvGLjTQG2vgRyJAbsuK9V2O7x7qcZy94ElyS1csA 4ySsy8DFsYZBgUGBQYFLTAHVOxUTlSUBpcrdZYDhgC8DF8caBgUGBQYFLjEFVBhsypLJe1x0WWA4 4MvCybGOQYFBgUGBQYELRYG97oK+UJQYyA4KDAoMCgwKDAqcIgXuagesrGG3ZnpyT5HuZzJVdibu c3LPauzutoHkIoNNZNeqH9Jmkk3QH7Cy6Zp9fg7HAYMCgwIXlwJ3tQO2c88JXTml6ryy0eaD9Pbt iqNt+3ZB92DHoVae44B7HNxgh+YuYEeqdoKL5IC1Sml76MGOTu0ggpZNYFfrpl3qm+7pP7ejVJuU nbmPetSjWo+ynaxAv6rdwtotHI6ijczuT6AlyUlYWpfsTtWeMmBQYFDg4lFgb21ISMEY63v18Fxf q/5B29L1qjEatpd75QR9bks9g+doSsbG9notDByknjJtB4yPXkfb8W21dy1jrx9N+4eH9FoElkBv q+MNtXTYvm+rve3v6UeFj6zYNnqG2PjmlC1rZ9CWY3u8TM/f3mvK195k+741Xa/+Rr3LWlA07muF scVfe4q59UNqF9H6A1/4W7sfc5lbK465/K1/0XZ+ONvOv6ldA67owIBrpUAj42vBcJ9+Xs5Uj6qW Hp8BLQ5oCWdtB9o4tFvoH7Vu12o1Mc6S0zEn3rlGz54x0iaDFuikD5DzwcPQF83Noyphzdo7tB7p G75Wmah+cZ9pGZrTV4+p1gdtKNoXrM2Ptif0XWq/0FKDvtapRYicoonxOEOyoqdbq4y2DHQ3h75l 69Ge1dMDvvpTBU34Sx428YpMaKfBH33n5hYI6GOnG3ihJ/3g4KDRHm/JhN56QZHTo/SqOuhFq8qA QYFBgYtFgb1lwDIn589qWNeXpydSvyGDy7hoqtb3xxkweBwT5+p8Y31ojLPjzjhfvY6MLsPsXsaY k2EkGfscS8cYOQ6N498EcHCCFJwYV4bfOPDIGaN6hhndw2edUaLJXwaqp5RRthaOjYPQOA84KO/N zem4XgAhSxFEaEjXy2d9+uAczcbJ+x6tBB/oBReG1tnBQF8g58CZcFwcu+s3ge/QUekUndxjncC4 3itdcuYMOboDtMUHgZDjEfX8+c7hGb6TDQqCvF8CzkbvquvxzTF4gjB4OYXK3DI+AQUnAhycwMly IvB2CAfnBjjqOFH0AcZCa3TFC3ijL7qjm1YFcwiojMVhbgL0EPQ4pAGt8D30dZ/sWM8tJ4+uwBrJ p2BGH2QAX1UeOFBBGdotzU0X9OmSPc7XjwAH+Nz3HLqqhb5LhxI49ECfqPn1ViqDO6ZvwKDAoMDF o8C9+0JZZsGoyewAo8XQcHyMkwyPYesPJ2f4HU6h0RtwAgwOI675nIF1H+PDsMkg/K1JO43ZToVh gNcd82hMzoCD5fyBjIvBlb16zQHres0YPA7BWb05zcpBFoy7rIpjYAStTfO7zMcYPnewgBOhBCDW ZHxjyQqd0IMuMhdBA2eOJrIpJUm0U5I0lkMhGFgZanBriG/4JSjwTwsELpy9TDaAflfq8AVH4xlb 8AIHWSXcnA6VYET5WkYoMzO3oxDRexuYQybKEbker5wWxrELujh+jkug4nmxtaOJE4NUIdAXP90L txz84Hp0MT764i/6qq7gJdzJC7py5OZQ3UAHh2xwaOtAsCdoExAk6Ml1AiblXw5V4CV4w2cyjFd4 JqgJCAjM4zQhjzesY1s1xljkVTAkIBO4APwB6IAnDirw3klE5gmoOPgZMCgwKHDxKLA3ByySl0Ex bE40YSj7I+4YFSXFHjgzRjTACcS4MNQBWVHKfhwx5wFcw9jmu1zfv3KcSqkBRs9nTmZxr/EYTcae Y2X0GElzciwg2Yn37gGyLe+N5T6Qsbz3me8YZo7dWJyJzEb2y7CiCTCf9zIgYBzjA4ZZdohWSyDY SRbJkRnPuuAQ+P/27sJJkqT6A3jhgcYPd1jc3X1wPeCwQ+8Wdzvs8IVDDrfDbXF398UhgMA9Ajaw IIIgIPgH+pefhDfkFlXVPTvTO/ZexExPd1dlvvzm88rM0a/PZYHKz5yX8XreyJEjjg+u2vOdDBZW 8X20Fa/a1y9clZ7hpg+fqwho25xqF+HJj+s4YARf9yjTc3yCH4GS07ZgA0s/cInxBL7a9uyUbMFX mVbZdoq0E/PIocILvvjCB4JVzEe0pc9W1syNYEtAYz5l7AIP8j9G7hF0qOLAxvF8nusap7F4Bgxr fSGBnVK9zN81+JY5R5lfkGAeydW8k5fGeMrPE4FE4MggsFQH7L+syCqUIhnYOOeWQfU8WIbMOMnY GAslSobFtQy+8mv8Jx/HkMlUPAdWknW/LIiBlO14Rnfw4MFanvOsbowYNJmTzIbxlJkqQ8vYZEO+ c+SfZ3hhTBlH2bljBvHEecrKlZ0ZbxkqPpRePd+WdSlXOpqSc2MUBRYCBWVuzk6G7XPOAb/ORlUK 9UxZxmmMyp/GKHDxzFG52jNDR+Dhc4rcJ3tVsucMlTGNVcYt8+RM9KdM7Xg3/MuYOQR9cH6yV5/L OGEgqPK9c3vHnNqBUiJXlo2jKY3RecMcouqEUrEj9IzRs3dnxJpzr/A9WOZQ5u0sZw6ZrDj1hkPz nefuXvXDuXLQ+iMzZICMwIqsKdsLGpxdy1mNkee0nFrgK0Ayd7DxHFfFQhUEqVDAjcyQEc6PDMtg XWt+PeIQGJATAdcYCfJUZLThkcSJJ55YKx/uoRtkQAkd9uYC4U0lgbNW/RGYkOVwwPiElznzjx6S EoFEYOsisPSDOGQUMhFlSE6WU2M0ZFVKfIhxYSiRRUbx3JhDjM9l0xyHrEAmJUthgDxHdKYoA885 +Gwe6YMRVdaWrTCAYeCUAxlzi7kiI9Me4+4Zn+eNjHtkJLJp9zDCeJQdGptMEU/aMm5OEO/u53w4 cqVExp+T46jxpWRsbM5n5jyjDv7QvAAAQABJREFU3Mh5czRKuMbYz8b6Y4a76oMMSfCiX20w+hwc /r2HpUBCtcE4jJsDEDC4Tz+CDM4AvoIF4xgjJWOlXxkjh4RXPAcJAPQFe5iHY3SfAAE/8I3x+Qwv Ai9jwTc+VARg5Zm08iwHLWuFF/mCr7bg22apwUf/VR/uM1eclzGbJ1mwuRUYITzDkOPnZMkwnuBC zl1nHmX45HKs9K0tcqJPcwV3/AsaBDeqCMZIpgQq/XbMBxwFi+QsyH1kSXtRHYjv8jURSAS2FgJL dcCMGMfLEDMkFjMxvBtFnJRMhcPwulP+Q8ZG4ZPtJAKJQCKQCGxdBJbqgA1bKU1GJCJfJBNZC1TK 1DIOjl5WJlNISgQSgUQgEUgEtgMCS3fA2wGE5DERSAQSgUQgETjSCPx7me2R7jX7SwQSgUQgEUgE djkC6YB3uQDk8BOBRCARSAQ2B4F0wJuDe/aaCCQCiUAisMsRSAe8ywUgh58IJAKJQCKwOQikA94c 3LPXRCARSAQSgV2OQDrgXS4AOfxEIBFIBBKBzUEgHfDm4J69JgKJQCKQCOxyBNIB73IByOEnAolA IpAIbA4C6YA3B/fsNRFIBBKBRGCXI5AOeJcLQA4/EUgEEoFEYHMQSAe8Obhnr4lAIpAIJAK7HIF0 wLtcAHL4iUAikAgkApuDwKY44Pg/wJsz5K3ZK0z8n9sx8n9e/R/apMNHwH/N8j97xwj+U9/Hff5/ r3+vOSbH/o+v/08cFP8TO95vl1dj9D+HdyP5X83+1/SiNCUPi7bhujGZWksbce0ishzXbudX/yfc /1vfjrQ0B+wfkvvn69/61re673//+903v/nN+g/lGbknPelJ3atf/ep14+Uf13/nO9/pvve973Xf /e536z84j0b/9a9/1b599+1vf7v78Y9/XP/xue8p1yc+8Ynugx/8YL0Gr/5lon9y7keb/uH6kaQ3 vvGN3X3ve99DxtD2/5nPfKZ7xjOe0X6Uf68BAbLyhCc8oTv66KOrPA7dau59T26niFN62MMe1t35 zncelJO3ve1t3cknn7zaxO9///vu7ne/e/fZz3529bP1/MG5//GPf1xPEwvd+8tf/rJ76EMfuqFO YaGOt8BFBw4c6E444YSFOOGoH/GIR1TZ8b/PFyH2xr9qbYkdeuQjH9m9+93vbj8+rL//+c9/dg98 4AO7173udYd1f/8mNrPPb/+aRd8LMugYu8w+/+hHP5pMPua1+/73v797/vOfP++yLfn9qfYVWgZn jNnjHve4GkW+5CUv6QjXW9/61u6YY46pCv2DH/ygu8ENblAzjtOc5jSHsMDA+F+/pz/96Q/5vP/m b3/7W/fKV76y0/5pT3va7ipXuUp3xjOesV72l7/8pXvXu97VvfzlL+8YklOc4hTdNa95zdru8ccf 37lX1ProRz+6u/3tb9+d8pSn7J7+9KfXe0RUlIATv/rVr97vtr4XSOBRVoV/WQ4hFXWe+tSnrv1R Mm2c4QxnWG0jrnGP++GC9wtf+MLdhz/84e5Wt7pVvd910Q4+/b/j61znOt1Zz3rWQ/rXDmVzrTG0 pH/f6wP1v2+v9TfeKcepTnWqOhb39vnFM36DzJV74rPIBLTh2sDDNb7Dp8+9TtHh4Bv3aNvfxu9v c28s173udbuf/vSn3VnOcpbuspe97CHdw+j85z9/98Mf/rA729nO1l3qUpc65Pv2DRm74Q1v2H3+ 85/vrnSlK3XnO9/5Vr82tvOc5zzdNa5xjdqPL8wdJ4yfq13tavWVvAQGsBHBex+frTY48MfXvva1 7pOf/GR3oxvd6H++hfE//vGP+r+3jXsRivmAGRzwYN7M4fWud73uXOc6V20Gn+2ckg3yr5+Qrb// /e/1s0X/97c2VAxcvyi/dBd/+sRjVDbwrT1z3ZJxuWcIX/Lre/JrTvAAwzOd6UxVXshCS0P80m/y 8OUvf7m7zGUu013wghdsbxn8W4D/whe+sDvqqKNWvzcWfP7hD3+otqyVERd5b26N/XSnO129z9/G b2zGEjbT9+brJz/5SXfzm9/8ED12o3vMFYJjzF/9YOCXgO+kk06qtrL/Nb60hQdjmEd4ZpsFpOz3 Oc95zqoveCBf7Bn+gyfz4XNzZEyC6Rg/eT3HOc7RXfva1+7+7//+b17XW+77aSu4DnYJCmfCwT34 wQ/uXvGKV3R79+7tlFIJtcxY1Pi73/2ue9GLXlSdIzCf85znVAE0SZe//OVr1mJih4jB5DRN2Ikn nnjIJRe5yEW6F7zgBVWZZDUUBP3pT3/qfv7zn1dl0e61rnWt6tQYzQc84AHdV7/61e65z31u5eEe 97hHd//7378K1iGNlzeyIN9z0C996UtrP495zGOqIHLe73vf+2qWzbAQlmc961nVwMt0Ge473OEO 3Re+8IVq8Pbv39+d+cxnrkpPwGRLhO1lL3tZd97znrcK6pve9KZuZWWlEzwgBlsWxlAIGNz3hje8 oRpLivjMZz6z8kIof/Ob31QsGP8xwgveOCdzRKgpx1ve8pbu05/+dOX3S1/6UlVkGR6lgz3jSUHw hp+PfOQj3Uc/+tHuHe94R21P5u5vhuWxj31sd+lLX7oGZfiVYQiahki5XbDGwZEd8iCg++tf/1qD I8GKfuALK/gyhKoIj3/847tzn/vc9fo73elO9TOGlSP00xp645AlcGqwYhhvcYtbDLG0+hnDIBAy Z21bLnjPe97TfeADH+juc5/7VPnwmevhqm/4vPjFL+7IivEJCBhiToODfshDHlKxdN8Qqc6oHsm6 YM/5P+pRj6r3f/GLX+xe//rXV0zgq9IEvzEy9te85jV17Gc/+9mrLtIV+iorwRf5gz86ePBgd9xx x3VXvvKVqzF+2tOeVitG5ERAQx7IHj0WLD784Q9fNaJDPKhaRdvGT977Dq+9j+HdV/IFTpA8Mcpk QIXN/OOBXtJr8n/xi1+86jo74DP4PuhBD+pucpOb1MD4KU95Sh2zOYQXLC560Yt2X/nKV7rXvva1 1Sk89alPXWVBUoFfuGkPv3Azv2RnSB5Wb27+kCWzc7I/+kyHvWrD+N/85jdXnWWrXvWqV3WXu9zl KqbwNT4Yy27veMc7VgersnOJS1yizs8lL3nJmpDAM2SOE2bH7nnPe9Z+2AMZo0BScsJ5sXljxEaz r+YLn+7zSge0DV8YmA/9sPtTRF/JpnbNE11AkjK2FL7mRPLEObOXZMx4yaVM3HXkkD6xL5Iocrvd aNizbcAoGNaLXexi1UgwnkBloBkh0RdhI1zKB29/+9urA5YhmwQGhkJw2DIRRnSMTLprg2Ly4r2+ GYQgjpnA3frWt65Ce8tb3rIaGd+7lpERHJh0gj8W0TF8jNvtbne76miNi2IzjAR8f3GqojwGTDmS 8nBmjBJnR/Aps+ibAsIEn/uKgcEfBYtsVx+cOGMTRDDxx1kyugKdz33uc9XwM/AXuMAFalucgTFd 9apXjVv/5xXPqggUieOFO8wpAYcAi1/84hdVIfDL0FAgTs4cCoAEDZzrbW972xp8MJLmm8NgLM1j OD+GizJr40Mf+lBtr8+UtsmQ9jhxzvVmN7tZHYvxCEje+c531qCGA2VMyZEgw/fXv/71u3vf+97V wbVtk4+WBBfaZ3AZaOMwxkWo35Z7OCifMy4tkSM4mkfyzXiYc8bTGJWzGXiG7UApfzKeQ0SnVI7I DwfOGHIGKj7Pfvazq6xd8YpXrGN64hOf2H3sYx+rDnmoLRmbH3NIBvBOLxAcGWlBTxDn5HtzS2Zl e2TUtQz4n//85xpMc5Swx8dQlt62x+GTM7rgMVWbEcZ18aqK8I1vfKPqEZ3nwMyVIFoQKIgW1KkO eGWYyRi5udvd7lZti/Hoh0E3Jx5DGbtkgC1BMkbjI2MtGT8ngF/340UgHTQkD/Fd+6qiwEnJGskb ZxlVMjbIOMi0gIANed7znlflxj2cr8dpbCVe6Iisl+0hR/T2V7/6VXeFK1yhjo+DpA/m8sY3vnFl w5wbK+fHmZnPKWJr9E2Pg19yx17RO7YKDhIbTlDfkqN51Lfde/bsqWPizMmkQMi83eY2t6nlanrK dpgbP8j35oMsbEdamgPmoPwoXQDIjxIwImScFxAZIoYHyQYoFOFGvmOIp8hkaTuI0sh2o4ToO9cE ETaGyav+lFUYMMLrVfmH09hThIExbNuONrz6nKJSZveI6hgjUabnG3jnfBEjI1Izbn0YE4WP711j 3BRShufecL6+wz8lc2+Q/vXpWkbdK2eMKBzFEJ0zaAzF2DhczwBxjpEtUea4npFiMPr8/vrXv66G AW+idhmP6FTJkkHBq3tlqDFHgi6ZofGLWDkiRpvj7pP+ZaKeE3EuCB93uctdatTdKjlDpOLAAOrb j/sZtRYzbfi8lQdzbR7DYBi7eVqE+m25R9vGbOwtuZZhFAD6cZ0qkbHBUrbpM7y0/LVt+Jsx5PjM deiTz825eeD0EEfJ6KqUCMaGiPEVmIWuwjScCH7JHBkL8tn97ne/muUwxgykoM3nP/vZz6pBlpl4 3z4uifvbV/IemZN+yaoAaIrIyd4SHApmBS/m7K53vWu1I3TpXve6V5URryoRbA98BcQtvvrAL5km I+bjU5/61GrgBX9jJ0dB+NUGfGAsUO3za9xTcxdtCWDpmopFO4e+14+qGr4ENoIJpDLHIUsY2E19 Ia/0ShDCKQrQwg6QQXMMG4+4QhfokEqPoF1/HLNxRZu14eYXftkXAWTLL1vFjkbQJiGgo4LP0Kem mfonmYGrALntDx8SB4EUbOAb44ApPFQvVDVa8h19i7G1322Hv//rmZbArQhJyUSpzGQBGXnP2Yhi ZU/eU6gwBhRM6YcxMhFjxFBq1/368SN71ab2fMfIcTD6Qww6AYyokaMWsWuLsipjKUVT9LEsJPgh RKIyAm4sHJD2CKtMXkQoYlXa1S4hYbjwyzgoswYm+NOfjNUYRMBKy77Hv7EYFx4JJoXx3n2u0Y/3 Pr/pTW9ao1vVBTjqb4ooLbwEI7JKmUMY3jF+zZUoXP8MHAMhc6dc+BClM3Ii0zBUXmXrnIU+8D3m HPDLmVN6xpkx0RbnwwDCWnRv3IIuxplCM04COrLAqPpePyEP3sMdnubcs9qPf/zj1VBpT8YYij+G mchd+8apHe3BPeQRZvoxVxHlu0Y1gQPzw0gxbEqGK6V8L3uVPTC+reEf4oEx4szxILhSPteOefaY gMx7TCCIYxDHSHbKCbhWBURVIuad4xYcadM4jBWRdTxyXsqeDDsiD3tK0CqrknUy6hzDGJEFfNMz 44c5WWqrWf176RPcyJA5p2OCX/OO35At1QwBpWexeBSQw9eCMvMNXw6L/Jq/CCa1QVbMVcyvsdND joaMqxIYG5sRuhd2rpUH7UyRoBm++LfuQCUGwTtwMI/ew0Tf9FTGZ2yuwQOH5To/ZNyrdSfk0Rhk j+bW4i6Jgbb0Zd7ourlic8juFOEXFhw33aNbAj4yRpf1y7nCcCigjrbZCtebb/MXNhaGB0rl59hj j632y/d0CL9wNV5zZUzGjELfzJf+8Re2Jvrb6q9LW4Rl4DJMpSWAMW4Mqmjlve99b3VASmkMgChN ZEURTRCDYJUy4XMPgRsiTiyiJk6L8SGESnOMoOdCJk/7BJ0iMoiiSs+NGN4LXehCtYRicjlKk67c asFOGKOhvn3GiTOEHB5B9KMPRs+PiBVPFN4KZk5EFE1QOCeCLFOACSXAKwVzvXI1x4M/Ro2wEi4G l+FWppL1EVxGRSnN/YwDR4h34+b4PUsSdIyRaxljBg6P+GFMKZIsiqHwHUMR/OqTQ8S3khbFUaZi DLWnigFTc8cYuf5AUTBGWdBiPjxXkn2NET7IQ2DKuRqfLDDKdORHnzDimOClrA13zoJyukcQQx68 MiKcDUciyyAr5opx58jcY07HshmyI3tjAJWCyTb8jHdfeYTw29/+thoMcwVHgZfyuOzFWDxKYAxl +OSMI2DQPJqAB2c21jesjF2/ypP6dn0EJmQYJuZM6ZIMjZHgVgkTLwwy4yabgbN1GeaJkVPl4YRg hYxJhim4i/a1Qx58TnfpPN3V1hCREWMkJ3RBUEXGBLXmcYjIN9sgwDK/7AUHox3vOQTYmheyhTdy B3s6L5iDnXH4oefac6/+zQUd83xWoM7pGjt9lJXRDfaMXQt+8WC+leA5Ps6cXmuL/I4RvXC9dRts l8DdD/zMAznBs2DV3/pnN31mXOycjBeRG47MfMIetpIAAYl5UYI3x2QMv9onO+ZLBUhmyU5MUZ9f gQ0M2BqBPllho6wLoENjhHfyyRawnZ7/qojB2A98ybS2yTgfwcbglc2gU9YGaYe+0WnzCEvfmd8I Csd42Eqfn6JESoc+FNsC3BEuSkXgN5o4A0PWhx/ObD2kLQ4AtX9HmwwRhTjSxFgJYAgvwY2y/hgf eI9o3yImikS55tHY+PpYuE7m59kgpQrjMa/9tp3277hPACI679PQtf1r2vci7WXIW9vH1N8CwymD PXQvWR5y1Gtpy7wwZAw9x8OYTmWuwccYXtoTcAzxFfe2rxz8WsuH+nZfzDuHS648dmG4h3Acw4QN 0H/ocMvb0N+Hw+9QO/HZZsop3TH2tcj9GL9jehjj7L8K6IZs70bj2+93q73/70PFLcSZSGhZFIaB 0A0p6lr7bRW3/Tva2Qznq29RsQxZZrTI/mElH9m5Uo4y2yLOVz9j4+tjYQENIygbUaZiMBehtp32 77g3jHC8j9eha+O7ode1GKGh+9f72eHIYshyv++1tMXxyiJkUDLmRZyv/sbwGpOHPo/xfq3ON/pu +5cBmW9BpurX0EKuMUzWamsOh98Y69DrZsrpmO4M8RmfjfG71raGnK8+Nhrf4Hurvm7JDHirgpV8 JQKJQCKQCCQCG4XAKTeqoWwnEUgEEoFEIBFIBBZHYEs5YM8tLRDwnKElpUsLrjxf2gzyjMxzpqRE YCMRIOfk3WKfI0EWslhwdiTJow3609fpI8HDkcb3SIxJH7ErYjMwPVJj3C39LHUVtFVpDofw/M8K v7FnVgG2VYo2ylu116589pzKFg3Pp6aWuEc7h/vKydoaYcN9kIUunqFa+Wo17XrJSkGrr62UtJrT IpB5R9dZnetnasXwevkau9+CF6sW8dg+d5u63lYec8/4HukViVZO6t9KVXsG45mkVZfGwQlxevZ+ LjKesXHacmHV+9izxf59nnubbyuIgyxccYqVwDNWGMd3h/PKkRsn+R16VudZr1WiLQ+H08/YPVaW cwqt7tqOZluffd9jq5uH2jMOz6XtNFiE7F7Qfzs2AbvT16xqtxp6M4g8cphT28HWwpftVFZKf/3r X68yE9t4+m1YBW8NiNXPVpm3usCe+o4Nog8CpFi5bOeEbVz01yple3vJrj615cfiTvqTtH4ElpoB M36ODKQElvMHMYAmF9kSQkmtfqOkFMhWAELBiHKKhMcWDhPvPYHyfRBhs21AlrweImiW7uMloktB g0UdFidRJj8tcaCcsx/Oah5Z9MGpO2ZNZh+LQGwVoqiCFYoR/WuP4XaQB2o/9971sIVpEGzw6Vor oLWHN4ZIP1Y7U7x+RcGc2BJhrEGchAMzOIl+33FN+8rww8xJNg4ygWlQbAfz3pYT2zeC9KnvPr4+ hy3Fh9s84lQZJ/sbregNYnRs+cCboNDWi3mZJzmwrQS+/czRPlSyixbBxTzZbuTauJ7zJtfatvWi f5A/PeBUzN8iBCvG07xGH+6Dm+1c9sHa/4rIg/kQ2NEn8yQ4NOYgYzcn9mAuQvA2Tyj65/gcykAO jaWtJOEBX/Almy3ZhgczFG213/f/NhfmxLVxvYVBtsYZG1tivC2Z/7Xg615ya+sObASYQfSDDbIg rCWBmsQCBV/t90N/019txfhdY17ogcWVtn8JpmyzGyN6QNdtr4NDm/xY6MQ227Kmj7BB+nUym2TJ 4k3nAvjMvcbMBhkDnK2YT1o/AkvNgO3XpNSMnT1oTptC9o0ykITZpnA/DIN9fK6zf5DTZkjtO/U5 gdQegbZHkZBwzM5dtnqX87K3jVLZ+7ZWYiAcX8fZMSKMtP2VIkwOnsMUZTNw+CGgFNtxi+4VRAg2 7AedyorseYs9sYQ4MkQRKZyMwwZ5fRm7rM14GRAYMNT2SlIKDoVRd63VxSoENuvDqI+vtjg3R8lx RnA2N/aiUiq8mAf9M37wNXbtyEb0aw+i9o1hjDhg7TEY9iIKiuCIKK79s/jQP6W2jxMfTiezl89+ QsbNPkrtMAKCBZ8zbisrK7WtsV/2B3IaDh6QCQvqGCNtmUf7hfXJmPjcPI4RxyD44BgZK31bvWmP KSw4Lnz5DC5j5DqHy3CkjCg8Yz+1sZIpTtgqXhUeMmGOHHbhc+OxV5Vsja0SFYCZKw4lDnaAP5kQ JO4vR6PSE7jKgumJk5DoDwdhuxrjjuiP/d/w0z95kPGMnW7kHgfH0D86TWZtM9E/0re5xpt9uo5W ZfTJs2NaOQGybL+r7NmeWlWiwFfmTNfHiDxxSsYNX/bFKn7ZsyCPE6Kr8NWOsdBZ+HL8eKPv5jec 0VBf9qiad4kAObLn3Hzp19Y9n2uHrthqZ6zGR3fZMsEO/KfIuDlXfJkTr85I4Exlv4Jkfws49DFU 6dC+/dccNNm1pbAdF702x/TO1kD2FrlWnwJnfTrBj80lQ4I6ryo29iTDYm85RCVpnQgUw7Q0Kv/t YlYOx58VwzkrxmNWhH61r7IBe1aM7qxM7KxEwvXHl+Wowlkp9c6Ksqxe6w/vi4LMipOaFUNdvyvC OStKOysKXN8XIzQrAj4rhra+X8uv4jBmRXFm5UzemXaLU5v5DBXjNysHZNS/i8GdlZJa/bsYqVmJ sGfFUM9Kyab2XYxV/W7qV8lsZuXM1lnJLFYvK45qVkrvtc+SFcxK1j0rmcusZMmzcjj7rBjXen1R 8noPLIuTnJXS0KwYkFlxVLV/96BSyp8VRZqVDLZiayz+hqHxlUxkVpxvfS2KOCuGZFYccG2rGOZZ OeKv9g/T4sRmxZDV/s3XPNq3b9+sKOgMVsXYrs4t3spRj7NyaEhtojiG2kcJzGYl8q59F8c8K85s BgNUnMKsBD+zssezzjU8psh95VzaWXFsM+0WZ1cvL4HVrBib1VvLmbKzEgysvh/6oxi6WXGOtf9i 0GfFoNbLzEH5Rxx1zs3hPJ5gVpzCrGy9qhiWTLWOW2PlVKBZCRZquyVAmT35yU+ufxdDV/soTqqO oRyUMKNPY2R+i3GeFaM5K1nLIfIb95RgcVYcQbydlWrPrDi+WTH6VVZgZB6KQ6uyVZxNnZPiXKoM rN448Ad5wjN5LM5uVrLD1avIcnGM9b25KY61/l0qMav4loBkVg5QqZ/DtxwnOSunP1W8SrCw2tbQ H+SoPDqalWNgV/FlU1A5vGJWMv/6dzl0o47PG7pBp+Hr3uJUZuUQi3rd2K9y5vGsOPpZCXBnxVGt 2hk2w9jpYXHAVX6L053R83IK1YydICclKBlrun7OrrF97kUlq56VYHtVF+hgOVCnYhu2qV448qsE BlXm4mu4tveVf5wwK0FRfF1fS8AwK1WZWTnetepH6Lt5NXdsEZzpT9L6EVhqCVp2gGRnoljRY5As 0QH0IjPZXJRIioDUZ1hKU0q0QWWoq+evKosgGZNSSmSRIntRr1JckAysX9qL79pX2ZAIT3uiPs/3 fIbwFs9pRZWRhcg6ZD+yZj/+O5LMZh7pQ5teg5Tj8K9PGXY8+1I+0gf8fB7PfGS9rsWDTA2eIteg wDf6ci1sjVGWqD1jFEHLer2XLWhLhuC5ne9cY45kvfpvI+noq301ZyJr0X4xVDXziBKq/s2VDBTB 0WfFMNS+9G3eZcOwkMnIQEXrsn6Hd5CDKZLNafetpTIAqyjdG7+fIPzFnMZn7WsxPLUK4x6ZmczJ HCHtwhWOMJm3BxJmMjvXud4cROZCDvb857lwy0/MiSxRRcY/8ZjK1vEZ8muuWvmNcemzlTmf48m9 slvf+dE3+VOyNSeOC3WM5hSZGzLXyldcH9mY9+YVjn5UuRB8PYMkC6iPr3anyHz38Q170uJrHIG7 MeIZvrJm/1DAmdRTJMs1PietqQqQT8Te4AFWqjTKuOwEDI3dj3n3OkVR0o5qijHpLx4B0FGy5LWV 5bE2XRs4uEYFhNwHaaPV55LI1IoYu+2fHqi6RFXE+MgK2YJD/AejaCtfDw+BpTlgDolAMqbKWRZR KeMpnygtKRtZ8KQ0E4KnLETYlPgYaoequ873yjgOXudkHOivzEWhLExSPmWklDcZHsekIc8vlViV nhYhCsKxKb059k3ZGTFEHINncpyU95y/50uMBgPCQeCzfcY11KcxchJKSIQ7FMKrdvXvO+89q0WU WRmWQ1PSUurmEJS/HD/nOaKgIQITJTC4wRbGwZNgRLteOW6BiXFxcBaJUHznb8NB6QtRPEqsRO6Y O+VB5cUh4hz3l3KjZ477ypGM5mOllPW8GpeFHcZIwRk91zEAjn1kkI3DMXP69p3xMJiuMb/4df8Y wU0ZVCmfzCnJwtjjAXLnXhg6vtT445HIUHscsHs4DPOgtOqHTCGGUbmOHCoNwnSKOOuYc8GBkisi T8qK2lWO9l55WJDiM9goB8LP51PEMJsbx5LizTjJp9I7Z6Ft5WzzQCa816egCbbkG0acIb0SiJEH DpHDmkfkVAlVXw71gDu+te2HzujT3+Y78NU2m9Diy2G1+MJuilxvDpSAHS+pJI7018fXOB25Gfgq V3uG6/MpUnbmFC0U5ay1iywaVeYnv8qzyvbkB8HEOc7kzj+qCIdWv+z9osN0mjyRd+sokL7Ml3bo r/+jC9spEtSyv5yqvv1ok14JGA6UxyDmmiywF8gjAo9sXOd+8kRu/c3+CM6U3dmLpI1BYGnPgD1X YbxFmYSKM6DInCZlo4AMCofk+DhGX+aEKL1Ii3MQRRJM91AajodBYaQ5PQ7WMxiGxbWen0SkyWl7 vsZpLbIK0f2yEZk6JWL8ZCWEjxMgeHjikKwO9CyXkMqyZHkcmOcyUxmRMTJQ+mGAYGJMxqBdWHE8 8CHsMhOYee8+fMDHePTF4FA0Cspow82zXNczMAwXBZZFw5ACGhPs3aMdz+qswvXMSuAkMhZcCGZi rPqhzJ5hycR83idtU2iYGJ+5N954RiqiptAcGoOnT31pU9sCE0bBvDqb1nNon5tb5zbDhkMZywSN TxBE7rRNBs2FPhlI/B0sz1YZ61LqrU60P4Z4z9hwQLIdfQr+zIt2ZWQMLb4YL3/jT79jxGGTY8++ 8RhBE2OnPbIlezK/npnDxPwJeoxLHxyx78fIWMkS+cWr/+xkDPRA0COY0De5gy/npG8OiLxrXwBs PYYV/+SBUUZ0D25TJHji0OkL2RWY0lUG39g5L+9hYYz0Bb7G6Qx0jtjn9NB49c3RkF+6NjV2ekT2 jV0Qwi6QbfjCJfA1R/6Gr3kVMJhDvBu3eR8j2NB/4zMWz9DxCj8yzTEavyoYnsm2FelkPewfZ00f hohOwZ1jp0cCWvYM7uaHXrMFdALvxjFGEXS5ntMW9JAN84hXuAsOBEWChWhLPwIh2HsGzNa4Ho6R oLjW2JLWj8COPglL6VsGaPFPUiKQCCQCiUAisJUQ2NEOWCSshBkZ8VYCPnlJBBKBRCAR2N0I7GgH vLunNkefCCQCiUAisJUR+N8HeVuZ2+QtEUgEEoFEIBHYIQgcEQds4YfVfxZ/JC0XAYszLPhYZNVq nxPzs7+sYp631ad/305/b8Ga1c4WDC5CFsBZxGLV6ryVtYu0t1HXbMS8WohkQZftO8a51ckq7OCX bgT5+0BZCWxerfLdLNI322jR3CJkwZpFl35ipfUi9y1yjcVd5HZMTtiUsg94W8z7IuPdCteML9vc YO6c7mQVnhOBtipZrWgLhz2w25UYFltcnG4zb+9mf4wU2irOpEMRsI7AtjSrbG3Dmkf2gXLaVvva zhPb4ubdt8j3DLBTiAQDDKVVzLb62UpUDn2oK72tFuYcrdS3/c8KcKdBWd1KPqwmdw8SJJB591uF 6wQxK4LHyKpZK9utyLX6HyaHSwLz2DZ2uG3Mu6/l1/Y9K8ERfOBhDE7EKgdPzGtqKd/jw/ZMK/+d MjVFVvE7TtQKbDsMrLC2knmjyMppsiuAH1rRj1crtMcc9EbxsZvaWdo2JCCaKJNpK4ztNKLRciJW xdc+UFsyLHG3HSG2tdjLZ/+fiQ4jRjBEZq6z3cf2EtsrbFmxJcB3lNnntif5DnEmtlLYOmBbjC0G tqG4ztYIWzws8bfdhpGikLYtUQaZC+Nmub1xiJTtpbN1A6+2VQyRa20Xsmyf8dWG/vzYDmNBmJXZ onJ4GBOyVUAkzKDZdmLbD8womsCA8TBOyje1HYTiMDoiawqDX1sRYttAbEGAI2MUC9QYdFmN+Qml ZqxtDYKtsZvHOLQdz/bS2lrEMNguwoHblzxEomfGHh5kwpiMD9kGYtuF97b2wAcuto/ow9hbfmFl 3o1Jm/iMbWaRrZov26xCFsw7TOFrjzT8zY/xw0sf5qiPL77ImX3psbVnaHw+4xzNvSoCQ2mrC2fH gXNw5E175igcAcxhB3PzT25gHPPV74vskVe82FoiyLLlx9Yvc0HG7Z/Xvr3bjh4tp21VjAW/ts3Q O58brz309tbb/mJ/Mn79jJG+bS/Ca+wRdi0ZoNNwpXeC7dg2RLbgS67JH36R6+x1hRN9w9vYuOsN 5Rc5cua0tsy1cbvP54ICskNnQj8FQfglD7YVml9kDmy7Il+ut23ocImemVfbkFSRBFzmyfhsL2ST 4GJObJdC7pGB+w6m5GPqEB866HwC26Y4alum4p/GkN/YQmgs7AwiD2SEbtiexRaQLfI4RLYnkg06 7N6WX/NG19jG9sAY4zBu3+mL/EX/Q33kZ4cisLQSNKPopBtKTTid6RuRk21BMglCymAxVq5nGB2y YbIJrj1zjDPDzlAQVopqQ3sooE3x9jked9xxtS0HANjLpkTjxBYCz4E76YZTYiRF+XjwuQyBoabA jAHHb8O9/rSDbGdixBhJguz83DEyRgEE40epOBptOxiCk5e9MNCEnEHWF+OFL4bl2GOPrfcbH6eh 5Oe8Vs6asXECDUM3j+DOSFJaY9c+R+JvPMLbgRX6QL63D9UhAEH44rTKEYrVUDlJx9gQ41KOsqvz BPO9e/dWgxj39l+N3ZwbH8PvsBXtIYZU4GOc+uOEzDWFVo2g5C2/eLUHU+YCC3KmwoIEcOSNIdcH DJB7OAH9y2YFW0pucC3Hpda55ow5I4EOslfYP+fgJPEOjykyDoaIQWSUjMW4GU/jMG4y79xi8oHI nrY5Unzbh01mxsj9Mlv7ZAUp9h8LasgGx2nc8ONgotpk7BwNp80JyTqR05zKsYK1DXuuYWX/9yIU uhzX0lHBmlfjhj2ic+aJYfadzwW/fhyQQ47sdSV3eJwi8uC0OTLLVuAVpsiY6a6xOp+931af3+iH XI05pLhm3muUkV3nEJA4ZIU80BF6zfnhCwZ+/O1z9s+BP/MCD30IXMkWuyEgJo9sFJmWZBgL28Z5 InJUjnCtn6lakOOpRyLaoz8CGfNi3uCJ8Az/kKn6YfmlssLGcNb0yt9JiyOwtBK0CTdhhAWJPBk7 QsKBKbtE9udwdlkAgbQhn3AiESGnJ3uVyRAGpVWRK0FyEIWDESi1vjgzjp4D1z6D6jpRsPbx5HAC 0a4DykVy+hO1Ml7uVZrjIFsSYTvMndKL1ldWVtqvD/mbgaR0Sluu51j0FQcv4MuhDgyvzJTCMvoO l5CFcJL++UIQR8pRMLCUIMqhDO8YwcmG+3CmnGNk5YICbVB4zp2xFISI2uEexwNqm9GEtYMD8Chz 4SDwz4gfc8wxNfAxrwKgOHx/iC9jVdp0WIhyH4NSzpatDkA076AFWYt+gvbt21edM0zxrB+ZhICN wzDfDgUI44YvWRe+YeYewZlMzfXmnuN1QlSQwArmTsWCG1yUZEXxjDpj5DOZs36miJxxrtrjVGUj iGMSRDgRDMHUOB3Fijc80AGyuCjRI222xMlwTow0/skcEmi51vGCdENf+me8VQGQwIpTlLnCaa3E eMvkZLuBuzZg5wfudFm/eDNP8OAwBAKumUf0UlDOqSD2IWwIGTV/gl2yBQf9HQmCu0CfzAl8VGuQ IImtIcfsH3m3NZItgjV7h8g3vZwi8yQgZIda+yCoZMfCMbKVnKJAi3yRrb1F/1cmbFb0aw4lBuwp POkpG6Fv7ZorOtES2yiw47AdfmJ+khZHYGkOWPRHGINE6ZSOcqL2OwLIQBAAxjNIhEsxfcf5REmL gYnr3MsYea9kidzjM05FWVOfMs847cW1YRwpRii/fmQsQRTLvZwD40q5GRKOTRARY4nr41WG4ig8 zg1PImJj0TYclIEIOt449ODFWJyq0xLF5Lyi7ONM4Cg9tde1fxtf4ONzfzNOMHSv9oyNA8NrS+28 xOdR8oZBzIFxwQMx5AIdmMf3cW/7an6NH+EJD4G39vpjx3PLr//LzIlrJ9rwqs1wSI6f5MjgLcNu 5wi+nH1L8DUPga9MlBPi7F0fsqGPFtO2jfZv17uvxRG/PgvynbEHMXZkbC0Erz7WxirA2VsMruyH IRZU+V+ujLG/ZYblQP+akQtKDpQyKKMpwBAsc9CLOGDjZHyDyDgHJJtVlYijII1VJYqswFS2x6CT e7iY/8A49C3a7L+6vh0zvuHKAXBAzg03lwKldt61g4+W32hbe7DsUzzmEJjFY5r+NfFesKXMK9AW eEdWbjzkJmTePBurikg7Dv2vRbaiX69sVitr/g798D07E/+NzPspwhtbFLwIKmJu3AfT9r3PVopj pzvmV4Jj7iUZSYshsLRnwLIZmYSSHIVQ8hX9iao4Apkho6l0SAllNSJW2Qnj4T4lKlmuyDqem8pW lYRlxISY0skoZHie08l4CIlnFcrFImRRuWdAsmWRpxK2yFRWKZqktLI3wuuINtk056mUI5KUGWvL 81G8GYczU/tKHpDjS7kHL0rqxsEwGQcDJzM2VpGyH30omRuXvgkzg8jhKe14LsMJwglPDImjBIfI NcqmDAFF98wIZkr12vKsSCYLByVHmHHISqKySwaZUgugfKct/DLsSkye0Ro7R+g7GaJ2tKeU2zqa Pn/KU/pQXjZv2uAMtCGggY3HAntKtG1uGI8+v5QdXyoHMPNc2qMDhtKc68MccQbmjNGXZXqksb9k ULJT/TOY8DUP+jc3sCNHDBDDAndywBhb/SkbkD0OGXJjJReMj/sEJJydygZ8ZSrkwRhlokqpAkKZ p0wIfsp/gsYwgH38vMcjGTVOskOXBAyCUnKmDGvMytnGosTscYpKisyTHiAOmQzBTr/ky3N14+4H ZfWG//yCI72GGfmCpXY8MiHzAhrjl+VxsuTBHNM3euZ+8+Fveko+3auk6j7994189A9HDlzApy+L zmTBHBs7wpGRCWMkP5794gPGwa97jc+re8ij8RtHyJ3+LEYiLwKyqflwrdKwDNAckjn2jk6TZYE/ HAST7I6gB1/kl8MydnPDFtKx1jFrOwi/9M3YYEwWtUWXVRDoONsh6BKk+1z2yw6oCODF9WPY6oc8 xTN5fcDX3LrPnJsf9kdgQcfInaycTaB77JbvVN+SFkNgqQdxEEgTJwJkbDynoHwUhtASPka2NWqE SMmOoCihMbZIWwwPw8m5Mzz+ZtQYciVd/biPwBF6Au55HqH2njAx2MqoslAOiWOn2L5HlNHzO5Eg h8tQ6AOvjBzjywEx3lPE0BN60Sfj4h5EQCk9o84gMjicAJ58xqlzgNG3exhtBsSYGQ9GZ8woMND4 xzceKFLLrzlgmBHeBCXIPXCDVRh1gQ1evZdtiOwpnjlUORBpGyPjQek5hTEDog9BACPDucORkUKc fiiv90pZkXUzZvjVF36V3hl1ZVXG0Xyax5g/7TC45Ar/jIrSPods7IEvI2jeEUcJX0aSjMCXMedQ tUWm9MvIyg7H5p4Mcth4hZkxkGH8+k6GCT+6INs3z2RdP/7Wp8yd8xgjWOvDPdrVF0z1F8/+tIUE nzJ++Bo/o033lOoDXyXN4IuuwX4q47NOgBMlf2QtxqhP+klPV4pMHywlYPjSM9jSHQ6bvJmXILJN xrRH5jmOKRJMaw+RSU4A0VF6Zv7oE10SlJkzZdOWXxjDQuBIHuikV2MXiJEDc+Rx1N5STZhHxiWI MhfGrkomoIcPG8Q+wZT+mBMYcKjwIkt0mt0jK2PBnaAq+NWuKgK5RuaQc6RX9MDZ+vSeTpMLMmPe jXtKPwVvcS42+8d2Br/awkPYB7LC6cIWxmyHjJmtmZKfeVjutu+X6oB3G5i7bbzKTRSfo2f4RMNj xNDKhDgez477peCx+4Y+5wRkkOV/Kldnou+kRGCjEBCQKZvLONOZbBSq2c4QAumAh1DJzxZCQLVA KVDW0n9+229AiU/VQzQua4nMu3/dIu9lcyJvmYCFLmP/HWmRtvKaRKCPgIwYyYqTEoFlIpAOeJno ZtuJQCKQCCQCicAIAqcc+Tw/TgQSgUQgEUgEEoElIrDlHLCFDFEC6o/bQqjYA9j/bi3vrUi1+tmq z+1OFh05nMOq2+1CFmxYzWrh2aJkVa9VvhbzzKNYhDTvuvZ7q+4dKNKSBSnt4SPtd/P+thp3UX7n tbVZ3x8OjmO8wsNq7O1A7A871JJFb3ZuWNy1EeQxCpn2WMZiJ4v0jhSxf3Y0jNlZOw9iG9mR4mm3 9rPlHLA9i1b7DZHVz5bEr5esmvVMMk4jWm97m3m/VZQWIU1tL9hM/ob6tlrSKlSGYFGyqtuWCque 55H9wlaEroWsKrXisyUrR8kcw+t581oo+GVotyNZxRwnlW0E/3QuVixvRHvLbENg3t/LaouiVcyx x3e9/dvuY/uRVfZ2EFjFfaTIbhFbrKz2HiJb/WJf/ND3+dnGIfDfkzI2rs3aki0plqfbJG/Bja0L Vr7aAmEhDudnib5tDI5HjJOG7HOzPYfA22ZkCT+K/XztFgafy/zsMbb035YHSu7EGUbTnkrbTexn c6CD1bfIUn332QLSkq0BlALP+nUEI7KXz5aHPWV/qszNaVy2LIiSRYsiWFtCLEZyqpS/x0iAYfHS 0UcfXZWPo7B62NYTK4ptpbAdxclSxkNBYedwCVsA3M+YOSZOOwyFsbknSOYCX6uUbauwZcf39p/a nuNEGw7l5JNPrq+OdbQFwVYKUbEtGw5tgP8YuR8vtvnYOqFNfMkabSuxBUWEb5ywQrJXJ2hRfNfC ex4xhgIyWMA/yL5HRoQjJxPONjZuGQUMbSMhW7ZkGDOZwy8s8Qs/21WQe2ztiW1R0Ye95q6xt7PN Fsw7rGTwAiAnn3G4CObkiuy5fx7ZLmIfJxzdIwiwuhuFPODX+c5Oa5OZwFEAaWsUjM2v9/TJqzFb Ke7VffglR+TU9jH8xvz4jIzg25YbWNpKZNuJ7V/ekwevZMhWFPwKhPBL3n1u3smcle5kyd5Q28Rs sfG3rUOxbSYwMQ77q7UlsLaPnHOgm+bW5xZC0dfYxhf39l9DHvAHF7puzqxkNj62iF5a3RwH3/Tb 8N4KaPPH3hifa7VnDmyDgzEZ4qCcXUAn9WO7pQWJgkv4znNgqi3GimAIpzGi58ZB/h1pKhunu3hz LrSx2dPMlsDY9isEW5m1fbn22ePV1ir2y1yFDbBVif4KOM27akX7zynYQ/PBzpA3ukVWYgsXG+is AAsiyYG957F9dGhM2sOPFebGgG/j0odterbV0VXzdcIJJ1Rf0Mov26h9e8htwXKELbutsgYP8kdn +R3y7dqwn0P8bOZn455inVwxfoyUSXE8n8mz+RzYDts4UPYmhqAyIATFdpaDJfKOvZ8mNSgiaEAH Mbj2ltrfSeFEkc5cRiaPYHhl1JRcWiJ0LemfEDAmjDklw7dAgEFioCkMY07ZkGscKOEsVicZcRbz ynaMon2XSumMNiNNgWHFmWqLglBue2w5AJki5YABZyFAQYypoIZBbDM0AYc9ofDVvgCHEQ4DzLBx fhQo9sZSTIZOgEShObYp0h6nZu8mgxC445GTNXccrwNIOAVOl0GmfK6hbGMRePRrj7bgxBjIhDGZ H4bbXJEpY+SgGSQ8cYrmizEkYwwyavm1b7MtNzNsMI0zkqN/r3hsna/PBGGCDH0z0uRXmwxX8Gtf p2CS0Rsj7TIwnC+ZI/9RpsWL06U4Y4YfdrJp41AuF7A6gUnASQbJJaNK35xwxsFqA1aw4czxy9Hh l7HiJGRiruFgyaSAgBEk24wbDGEZ+kJ/GU57SjlVe1mROeU4IxigD6ELAlPBnIMhgrQn8yND5JMD jcdLnAlZxa95YdSnCJ+uVcWAI3lwzKWqkPkjm2SbYY5zmsfaI5/siG1zAjmBCcwRXjlmck2H2QQE fwkHR8CRGk/IXb1g4Fc4X7wK4jjuMfIdXYCxEjhZMw/sA11mKzhFh6uwIXQL+YwMOLmPnLA35oSt oPv451DtWaZXSKCLjCfIfMv82T3Onb0xP8jBHz6nB4KEGE/c238la4J7c+PHgSehI2SXY8Yvm02G kcQBP5woW2Cu2RQyxTGbF3aV0yULPqcLZJtuC6iclNbX4z5vm/F+aRmwgQOUQgBPdMtBiTBFLiaa ohFugsQhiNRE7gTFfS0xOKK7NmulJJwFQTKJnIHnxIih4Vw4UKdpUZgpsq3FtbJBRJEYGQZJiRff omCbz/WJGDCTzRBSEhvptTFF2iVEhLDdusMBwyICBYLKIBvTyspK7RNmBNMeWKRPmTmjEsJFGAUe FA6+PocvhRWZes+BUCoKzcDLcMKRc+oUN4R/bCwUANbaY8wZXwQP2Bsfg6hszBgxFK7hkBEDAPMp ooyMC8OCXK8/rxyy/hlLRlZmYhyOouTQKHGb6QS/DBAHzYgFmUcGmrzMI/fDl1OBLyIbFJ/Sc0CC GITPcFz1g94vPDHoDAdeybf3iGOLoMh7usOJOlGKg1TlYYzNKacvUPMd2cAfZ6AtDsV73we/PqM7 tm8xXDBmgOkIbMindQUqP84FbkkQAF/4mwvZGTLvZJszCR2K+8iSoDJ00+cO1BCw0Gt8GRN516aA g83QNwfM8E6RoJSsGTPSH1wEN8YiKw/dbB3LUJtknwPl8MhQS3TLyXYOooF9PA8WIBs/Z0euzSud k4TMI3PvIKIpopMqAGRJcCWzIy/0wv0OjomqiaQB33tLhgpHdthn7VY9toANgxu7024JFNTK+AVg QWwFHPGpSsT5kgP2S5WEnMBcH4I9/I6RYAouISPsvbYR7P0tEIu9/TAX6EVFk50SNOiXfVbdIDPG QAZc71W1SDtkkq4cddRR1ceYp61E095iHZwSRAQQWSgCFEWnpJwto+d7CsZAINEZI4AYSQYvokNt Rlu+V7YNB07QOMvo1yvHgBgb37XEWLfPTfHECBBOjpbD0BfHju9oi8GJiFibAgvGmAFWxiEgeJki fMd44zpCy8EyHNqnUKJKJCsW1TJGhKklPBqr8SB/GwuDo/wOXwZIhsQIijgJuYCHwVM54MAok3Kl MYkWCSolHiOlUG0ScmUr/AXhKebJfMMZpvDVvuhfhhjXxH3915gHn6tQWHBmPuBH4aNkGadCuc5Y OHrXM1LmhcJHKdJ5vYI45bmW4NbKQ3yHV3y2+JJHRtipWOSTIRTMuIbcILLL0UVmEe21r9rWr+xP 0AKbwIQ8MHLmDJE7AS1ZRPREsKd/9+Ddd+Zbmz4jR6FvAjU/wa+yXNzreuTaCCC1HzLvOziSP8Em gy4Q5Qxa0udY6TV4jOv15fm6QJsTpnd+8OKHXJFjjkCAweAOzY/2zC95Nl79wC2w9X3MndfItnw+ Rq0NgqdgWB/uDXy0FXbAXHFMHAJM6S5HNo/wzIm3gfjYPYIzAYkA3OM2ch7/Ca5dzEinw15qS+UM vi3BaE+xUfv27avVSEdktvYI/jHOuM9ngV0rJ3DhII3ZawTicV//FS90hP5rT2DZ2rQ+v3ilx+Y0 7KGAlywic0Mu6JuqHd4QPmDBAevPPIYc1Au2yK9TlUnYtwxeRPCyOaUoBppz8SwIcByDUgnHKIKT vRAwBhdIyhqudTYyQ0GplZFEa65V3gS4tk2icqJsg1PwnhMUtelDOyImisxohBGRmYnGZFAcieiL IRRpidSVupXITCBlVgbRt/YogIiKECmHEAACQlg4O9cPEaWx+lomI/KTSYg2CQ2FUKJnaJVxlFsp JgFXEfBMhEAxemGI8MqRUECYEDRj5zx9HvgS8pWVldqOz2XViMCK6AkrQ6hvThIOnIp+x8h1Mhcl uugfVhwfrMwZZbKQx7xSMjwqjytpiqLx63mPuRoigQK8lFxVOcyXaz1XjsqHsqIMhIGAJcMhkzV/ DALDLRgxRiVQ/OobL5wexykrlxmREXOvDRUEmCsvGp8554TIiXuU4QJf7XHG1g30+YUBuRsicsK4 cGr6FiQw6gJT/cORfMqszbn/VCXDgJ+SsdKf7EeGixeBBf4OlLIx/LVJtozfOgnXkD334xcWdIZj F/TKZASTsmJBDt2ku/RQMKGSBAe6ow0yDGvOxxxpC7/aZdD9CI6U1d1D3uEbc2VO2AjZsLFwSOzA /hLMKSHDRx+cjoDHfUMkGNOu+4xZm6oHdMqY8CN7o1/kgcy1TqrfpjmRzcqCtWlOyAobxPjDThWJ DMlM9RP65tEEG8HGmfspMm9swrzn29oQrCipCtDpDZ0yJnLiUYeqon7ZDiZd3zJhMmHO/LANZJtd hBdbEq8yRpgIvs05XTNf+jUPxi4wkVXTaVk+HL2nC8Zt/lw7NR72l50k2+bKPeaWYw5+8eSHjLPn ZFmf8DaH7JJHUDAwdpUyOmj8bAY9hK15Z0fpsefs7MNWo6UdxEHZKR9gIxshbJTIZ75nREW5yg0R uQCII1DCYQyUEygA56MEY0K8hmNyPYEUSbqesgaZXPeJnPCiXEHIlM8i+idUFNh3iEGXaRHs1gEF TxSR44rv9M0ZaYfxG3Mm2o5xeBWRMap4i2iTEWTACLFyTqvAjJRx4yuI04etoMV3+iaAiKEwFtE5 fLWJBA2UAL8yDpjhR1swUi4WLMFkHlFS/TPgsNY/XvQNZz+cOWNOiZAghgwYt+v0H7wN9YcfxsO4 zL0sUVCGGAjYM4B+gowHb+YYjvpHsDXG4JehJUeciHvMB1zIpyAG7+Yk8IUlfhGHBF9zBF/GALme 8Qh+YdzyVi/q/SJb5BTmEeW7RAaKZ22TLYaLnOOR/DGCggGBAd0yBgYTRvTJ+P1whGSaAWv5dR9Z Jg9k0DXGqE1kbmFvHskEfMgtY6cdunCwrNmACV6NHbnGfNNtf9O3Fl/YwhixAXTdePRBNvBlbF6N nZHX9zyCu/GYc33oE394IDPmDDb4jfkaa9NY8AZPNgXmdAQfxkYftR/zjF/BAlxamRtr3+fki2zh dREip3CCNZwia8UHZyagETyZQ2MmU67Du37YDjLEZhkHeYMX3o3TPOvDNe7ThmvoDxzJlD7dT172 FJ1zLSJnHmFwxALJeaRa4x5VN+VowQE5CX7pOn5j3vFJFo2N/gbRL49a4OLawMVjBNU+/LFLIdNx 31Z5XZoD3ioDTD4SgUQgEUgEloeAjFrmLQnweEJlcooE664T5AiGVEjmBURT7fW/E3xz7IIRFT6P BrYqpQPeqjOTfCUCiUAisA0QiEqKLHSqAhhDkfnKomWnsuiNJs+FVddk8DL7RSsMG83HIu2lA14E pbwmEUgEEoFEIBHYYAT+XcDf4EazuURgJyHgOVPS1kFAZqPcmZQIbHcEluqArUBzgMBGHGlH4cPR cRwAAA75SURBVOZtbl/vZFghiV8rMFuySMS+SNuMlFvWQhYWWIFn1ehWpiOB71Ye/xhvSllWnrZb csauPdzPyZSFNJtJVoyTUwuVtjpZ4W61+bLIQq21zLdnmrYExeE58/iyuI1cWYTFtlgkhcgA/H1n kZcfC6Ri65lrLKSz+FCfcZ/Pk7YnAkt1wE5YcTCAE2WGDEwrWC18nhH0yYrTjXDk/Xbb9/hlbPv8 2qbEOFkFSTnWQvYDWvEZByzEvWNjj+834nUI87F2rZg86aSTxr6uKxZHv9ygLzYSk7GxD8kW9sf6 tkra9p9YSb1BQz2kGftcGf2NorGxTLVv24xAgENYhMbwXeTe/jVrbcs2oHbvaL+9ofdr6cO2M1v8 xqiPr5W5Vt1ynpzmPLJa2lad448/vm77sVDISngO1ZY4i4ZsEbItx5Y7bZIPx6f6Bx+2e9miY+tl UJ+n+DxftzYCp14me7Y3WIlmu0dLFN3eR9sebEEhaJa7K/XZt2erhSjRA3TvLYGP/a4E0FJ/+1an Vs4RWBvMHaHmek7UIQzatB/U/jjL9h0CEmdEM7bBbyvQlt/bWhBbJ9qxjP1tT5p9shYl2PoS24OM BV+yecv+Zda2X9hG4nOZsnvwCRdVBCfW2D/LKNjGYz+gfZX2xhqDbRK2F9mqYoy25mhLX5bzCx4o rG0C9sza2mXbgpOD7Fu2IMI+UTzD13wJnDgdWzvsy+a4BB/2303t87NX255QiysETfYGMxy2QRiP 7QT2/dnbavzmFz6OJ8UHrBmzOJzAfj57V8mH/u2RFSQ505fhc/qTtmwFYrxsb4OVzME4OE/bZWDi czJn9SW+9pX9kgyzjIqcRGnT3l9baARcVmiS43Yvr0AFLzCRxZBl7SH7ie2fxS+DbHvF3pEDTcgo GbGtx3zBw95OQRt5MBdWdFqsQk7t57U3Hc/wMn7VGjJhX6pxebUIhUzY00lH8GQvpANdVHlsNbEP 0zX2zPostonFlrgxuTbuwJF8wNceUuOwH9N+UbJob6h/igFv2bUtJRyPa1WS6L3qUPALY3t3yaY9 rdrCr2DYdiB92qJlHOTYOe1xTjyc7PlkM8y1fhwXCStzACt84Je+0WU2wD5f2w9tb/E5uXSvsRiD 6/EFe3pEF/QlO6bPxucasm1ceF+E6KKTm8gFOXfoiPE6xc1JauTK6Xb0Fy9sEZnUVyQhMFS18p2x sBHucz6CveLsR9LWR2CpGbDhM2p9YhRs6qdgoj4GEHEKNoFzIhTC3i0CxihTBI7JijbCFfvD+m3H e4otqyOMBJ2RYZgQRXbQBGPHAbTlpiF+o81Fo2gGzhg4N/04CMM4tG3Pmw3hFNkBBpwTQ+w9Q8O5 OtyD4+WsHLRgHIITTpEjYUwormzFcXsMkvIXQ+x7jogiKtNZju+Acg7JqUqMvYM48MexcuCBL4cF Xz+Br2sYZ47IObCunSL8mkMGy9gYrTAaxsXJc9AcqHmxb08GSCZg4Br79xhOmYjASwAhMBJwcMB4 cx1nz1DKFmREDBC5YQgZbOOEC9z1qXTH6WpPsIVgaRuFebE1gmyYK8SJ4g2u7TNH88cxuMcc4hvB VluMqGoKHOIkq3pB7xfHSq6NHeYCvNgTzUGad44ZD+aSMzY2wYb5xAM9ir2knAnHA1cG2QE0CI++ oxMO2eeYjV8wxvA7NhS+Mio8jRF8ZW14ha+TtTyyIWuyNltKzJFqDz60aUsKWaY7nEZUWgQY+iUv 2hKwkVPYy3DxBwPBHkcX80Vn3UOngswHXcEb5y0ooO9kmywJvvWBJ/z63LxwwHSUjOjL+MyF4Cts jXsDE3PFScNXoOz+lha1D+4h9wI1gS97EVt39GWeYSNwEJTYw2yuZcNB5AIOxi0wdz2dFggkbR8E lpoBg4Ggta/+phxOyiIsFE4GhCgsZWLAGJU4StHmb6euMDr9M6LrjQO/GHqOiFHwQ2E4DwIrOqdk IkrEuckm0BC/9Yv//Irv28/6fzN+xsGQICUmyum5jb4EHohzZrAZJcaboaVsfmRkjDFsOEb9MkIM KcwYCA5CFiD7YlAYU30wTpwmx0ShBTIMnjFyMAxntMd4+p5z5dD7+DI2siwOTN+c6hQxYKJ7xlTf onoGEc8CJ5mQcYZBlbUwQBy8z+IUKMGY7JLRhKUfMqN9vGvLhnwGKuZEZYXDV/FgtKNPY5fBOiRA 1g9Xhtz3nAkjrB38cm5ekSACjoF/jNt7jg+W5jWcgSyMgQ5j6nQn/I4RGWdUZfBwlwEHkV/zZ5x+ yNKBcsKVbEzAqgLCwXJQ+pS5ymZVHcg73gVjiKxwJHSozeTh4ThPwYIfDnnquaIANg4GgS+Cn+BE +4I1Gb/tKCoXCNbaFhjhScBINmS/KgzOgzYO/ZJPeOLXmGX8cG7J3ApU2qAZbhcpGSldYEPwsL+c YCWIwy9sWn71ZQ7Jj2yUDAr0fK4deLIVrS6QFQEf+aKfxqLi0KeQxf7n/feuExiqTtCJsBXGjwdB omycjASR4yD9IzopMOd8kQpABM/1g/y1pRFYqgMWUVJOgu2VIhAOwq7MyOgrS3IaBFw2ozxEmCiY rIaTIpAEVvlLO65nbNsTUfooK68pfVFIhkg24rxSWZWsR4mH4fd5ZL19fgk5fimF72Icrp8q1eFX qYyzd52sgKHk9LXDuIpeRbqUnyN1D36NiaFjHB13yYDh35j9LUuGhXYoZOAbvFFYBoLx4lg4WEaD c4tr3GNcxmFsSJsMlu/wLdjBi3s5UcGScphMYSqr0y7D6og4ARRDLIDSvkzfK74DQw4KbzbyM3jm WEBi/hh1sqC0zhnLRM0JWdEWRymgYSz1y6hymAwSR85AMvT64NBlxIIJpW4lTM5MO9rcXww23mAm +IEfjH0PEz8hv3j3Hh8w9d7fAg+G3slNSuEc85ScwN29MjLj21OyQOVQDotzJ5vGTkYEaDI1jyvg SyY4HHPCIWuDA4Y33Np/BBGyqz/84slY9edRDMfsGaQAwudjBEf4ws3c4oEOcZjalWXClW7CWUZq XuCtH5k4/mSSgj6OWrDNadBJGJjTMX5hDC/yo78Yi89innzmvfkhD3QLv+aeTaE/Am+Yaqedw1YX 4pmseXStxwICXP99hzzTXfej4Evf+tX/1Ly73r30W5DFDsqmYep+OsxutfaNPMp0yRb+6RdbGUGL pALWZF9b8e8EBW3mwmMS9yZtLQSWdha0YRIYPxRLBsUgymQQQ06ICL2oXdbAmMqOKInrPd/juAiz SI8Riujfe8ZpjHzHIIla/TASlNB9SrYUiXOhNJ7HirQtbhDF45cQc0T4ktFyBAIETsCP6yMK7fPA AbpW6VV0z6hZSCGYYGyUEykGPqyeZEgZXXzKhrwyHisrK9XpcozuYZwZNwqIR04aRkp+soKD5ZmR vigh3JWtYMB5O2PXexE3Z6pN3zGElF1wwAALjmRXsgoKyzE5f9WcyCb2loyYExgjcyjg0L57zbns ltHhyI1BNUJbDI65NQb8csKyRo5Ylh4b+2W+yDwJosyL52YctXmCLYdrPhhKpVbyA0vza945YIfZ u8d38OAQOBEy53uOl0FToYCxMp9j9WBtHjlzPMOILMqUBE3mUiZFtmVowa+xk982s+3jxuEwuvqC uyoE3sgdOVBShYmsTrbKyNIX8yWbhSPHDEd8euRifJwl+TZGZU6y4lrVJ4adHpA7DtE8Kc+HIyN3 Q6QP2ZrHNvogPxwffJXhtePRAgdrzukBefcMX0BHjjha82BuBQrsAPzoI5k3Tm3hF//K1+RDkMYp al/WbB59JyDw3rjg72/Bi/mUnXNu+gh+ySd+jVtQIGjSD70Q9LkXX2TRedB0VNkfZpwxfPErGIan Co2VyWRbMAJHciRIdc0QkSXPbc2XCghMrSvAv8SAPtNFMk0OEV00Jo+o8G6djL7pu6qC6yUX+qSj 7B1iqwQO/vnNnhJwJW0tBJZ6EAfljGgwXkMoGVHGhyFwHeX2XmSo7CoKFmn2iQMiXNFO//v+exkV Y8RgBTHK2on2KaVrxvh1Pb7wiC9EMaayBdfoA5/41Ye/3aM9hkiZrf9MdYhfbcGLgXI9g60dwQue ODcEPzi7xncMBofAqSD3+ZwRR8binrbMpR9jgwcybm1yfjDU3hRxvMqNHJd+whDoFwY+055+w7ho zxjwy1n1+zAvjC9Hw1C7xmfRltfgV1vGyeDjN/rXJ9xlQbCLBXX61RbeZJEcQ8yrz2AEY/dHP653 H9x87m/X+EG+50iVEQUBHNI8UvWAUSun7iEP5IaeBLX947nFC/7wga3v3GsOET71AStjCSKLHBz+ XeueKQr5bfGFlTmNdkO24O2xhcAWXjEf0b776AmnF3PoM9TnF+/GpB9zpA+8eo058Brz53p9Br/0 ILAyzrjHdX7w3gbV+HJ9q6Ow8lmLr3vNCfzwgnwffNQPml/4CZ7x7zr86N933pMrbRhrS3gi37Hg yxj07UemTn7792i7HUPbXv69uQgs1QFv7tCy981AQLQtA5WJyu7jeejh8qLUZ3EU47y3RPbKpVuZ ZEX4ZVhl0p4172YSMKneeMQiMPPoJSkRSAT+jUA64JSEDUUgsmwRPCcUWeF6OtGmzGQso1hP28u4 d7vxuwwMos1lyEO0na+JwHZHIB3wdp/B5D8RSAQSgURgWyJw6AOGbTmEZDoRSAQSgUQgEdh+CKQD 3n5zlhwnAolAIpAI7AAE0gHvgEnMISQCiUAikAhsPwTSAW+/OUuOE4FEIBFIBHYAAumAd8Ak5hAS gUQgEUgEth8C6YC335wlx4lAIpAIJAI7AIF0wDtgEnMIiUAikAgkAtsPgXTA22/OkuNEIBFIBBKB HYBAOuAdMIk5hEQgEUgEEoHth0A64O03Z8lxIpAIJAKJwA5AIB3wDpjEHEIikAgkAonA9kMgHfD2 m7PkOBFIBBKBRGAHIJAOeAdMYg4hEUgEEoFEYPshkA54+81ZcpwIJAKJQCKwAxBIB7wDJjGHkAgk AolAIrD9EEgHvP3mLDlOBBKBRCAR2AEIpAPeAZOYQ0gEEoFEIBHYfgikA95+c5YcJwKJQCKQCOwA BNIB74BJzCEkAolAIpAIbD8E/h+R0d+P8kJ95AAAAABJRU5ErkJggg== --Apple-Mail=_98CB247A-53F1-4A7A-9947-CE43D3081FAB-- --Apple-Mail=_02BDDD06-D608-426B-9C28-0D9C0C6F4B2F-- From farinacci@gmail.com Wed Jan 23 21:37:08 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54ADA21F882A for ; Wed, 23 Jan 2013 21:37:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.25 X-Spam-Level: X-Spam-Status: No, score=-3.25 tagged_above=-999 required=5 tests=[AWL=0.349, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1z91PzrEr8IH for ; Wed, 23 Jan 2013 21:37:07 -0800 (PST) Received: from mail-pa0-f45.google.com (mail-pa0-f45.google.com [209.85.220.45]) by ietfa.amsl.com (Postfix) with ESMTP id 1D74121F8746 for ; Wed, 23 Jan 2013 21:37:07 -0800 (PST) Received: by mail-pa0-f45.google.com with SMTP id bg2so5275393pad.18 for ; Wed, 23 Jan 2013 21:37:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=O+hKJtoYs24vSYD+gjqCZu76burAYGB4OQLeIPnxndc=; b=rz7Uv5ZXSASO4pb6JAKBnvysUB8C6BaNxCyImRKIkXAXeEknZwbQ8rBC1Yihxx5D+e 5LZdstu5wS+2FEJG4Ynw4HLgIIOvVJuLNY8Nvx6HcTt5sZAhGO+yrECxCFeqMlX30a9b N46RTh37OScg0GkjhMvR9jy5cz4cidkihqnm/yn/G7vsNNsBKVJaAfUWCgqG6L3STNQY dwrFrjnB3bNiqU5PP4Ek/B2iWmnV1FJBGsS/ftK4sQ4MHLHLhJZ9yjUV3oqoVrbIe5Y+ 62HJIOOpTEpcqZcB/vrMhMVJSUtGFA6t9EPHJ8BCI38Hq0tnUshH8R3YBU7dc0hbnMDU K1hw== X-Received: by 10.68.197.9 with SMTP id iq9mr1768522pbc.130.1359005826876; Wed, 23 Jan 2013 21:37:06 -0800 (PST) Received: from [192.168.1.10] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id w5sm14982326pax.28.2013.01.23.21.37.05 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 23 Jan 2013 21:37:06 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> Date: Wed, 23 Jan 2013 21:37:04 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <4C3AAF19-9581-43F7-B1D3-BF7476A53F13@gmail.com> References: <20130121213138.D612A18C112@mercury.lcs.mit.edu> <7D5470F9-F554-4FF9-8318-54A486C21CB5@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E51384@BY2PRD0512MB653.namprd05.prod.outlook.com> <96F26812-148D-43D2-8C81-109B7EE466F9@gmail.com> <2CF4CB03E2AA464BA0982EC92A02CE2501E55867@BY2PRD0512MB653.namprd05.prod.outlook.com> To: Ronald Bonica X-Mailer: Apple Mail (2.1499) Cc: "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 05:37:08 -0000 > Hi Dino, >=20 > Sorry to be slow, but this is one of those cases where a complete = expansion might be called for: >=20 > 1) On the public Internet, we shouldn't trust the LSB at all. If an = ITR detects any transition (0-to-1 or 1-to-0), verify it with the = mapping system. Yes, the LSBs are hints and can be trusted, if chosen to, or with = paranoia tested to be in sync or the truth. There is a = control-plane/security/fast-convergence tradeoff. > 2) In a controlled Environment, we can trust the LSB > 2a) If the ITR detects a transition from 1-to-0, we should believe it. = There is no need to verify. In fact, if we did check with the mapping = system, we might find that the mapping system still reports the bit as = 1. This is because, as you say below, LSB "are good in control[ed] = environments to take ETRs out of service without having to update the = mapping database." The mapping system transports the Map-Request and the devices which = advertise the LSBs are the ones that report their status of them via a = returned Map-Reply. And as I said in a previous email, the Map-Reply can = be signed. You get more validation *from the mapping system* because the two = parties (Map-Requestor and Map-Replier) have a shared trusted anchor = point. That is the Map-Server(s) the ETR is registering with. > 2b) If the ITR detects a transition from 0-to-1, we should believe it. = There is no need to verify. But if we did verify, it would be more = likely that the mapping system would report the same thing. If the LSB transition to either state, it should be verified. The only = point where I can relate to what you are saying is to "route away" to = the 1-to-0 transition. And to not "route to new" when the 0-to-1 = transition has not been verified. But this could be splitting hairs. > Also, in the bullet points above, I am not quite sure what the = definition of a "controlled environment" is. Am I correct in assuming = that an environment is "controlled" if it satisfies both of the = following requirements: Controlled means trusted. For instance, a leaf/top-of-rack router in a = data center who is encapsulating to another leaf router in the same data = center or another one controlled and managed by the same organizational = entity. > -controlled from a security perspective. Bad guys cannot spoof LISP = control information on the data plane. > -controlled from a routing perspective. ETRs are aware of each others' = status (and, therefore, can report on each others' status) because the = participate in a common IGP. I believe solely on trust. Dino >=20 > Ron >=20 >> -----Original Message----- >> From: Dino Farinacci [mailto:farinacci@gmail.com] >> Sent: Monday, January 21, 2013 10:15 PM >> To: Ronald Bonica >> Cc: Noel Chiappa; lisp-interest@cisco.com; lisp@ietf.org; lisp- >> beta@external.cisco.com >> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >> deployment? >>=20 >> They have the same meaning in all environment. It is a question when >> they should be verified. An LSB that changes in a public environment >> can cause a Map-Request to be sent and a signed Map-Reply can verify >> the LSB in an authenticated matter. >>=20 >> Dino >>=20 >> On Jan 21, 2013, at 6:05 PM, Ronald Bonica = wrote: >>=20 >>> Dino, >>>=20 >>> But isn't it troubling that the bits have one meaning in a = controlled >> environment and another in the great-wide Internet? >>>=20 >>> Ron >>>=20 >>>=20 >>>> -----Original Message----- >>>> From: lisp-bounces@ietf.org [mailto:lisp-bounces@ietf.org] On = Behalf >>>> Of Dino Farinacci >>>> Sent: Monday, January 21, 2013 5:51 PM >>>> To: Noel Chiappa >>>> Cc: lisp-interest@cisco.com; lisp@ietf.org; lisp- >>>> beta@external.cisco.com >>>> Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet >>>> deployment? >>>>=20 >>>>> (I don't remember off the top of my head why I didn't like them: I >>>>> think it was a combination of the fixed number of bits, the fact >>>>> that it might be difficult for ETR X to know the state of ETR Y, >> the >>>>> fact that 'reachable from ITR A' [which you _really_ need to have >>>>> anyway] is a subset of 'up', etc, etc. But we didn't desperately >>>>> need the header bits, and the mechanism wasn't positively harmful, >>>>> so I didn't bother to put up a big fight over it... :-) >>>>=20 >>>> Maybe because they could be spoofed? >>>>=20 >>>> But they are good in control environments to take ETRs out of >> service >>>> without having to update the mapping database. >>>>=20 >>>> Dino >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> lisp mailing list >>>> lisp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/lisp >>>=20 >>>=20 >=20 >=20 From farinacci@gmail.com Wed Jan 23 21:41:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C344021F84D8 for ; Wed, 23 Jan 2013 21:41:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.366 X-Spam-Level: X-Spam-Status: No, score=-3.366 tagged_above=-999 required=5 tests=[AWL=0.233, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8tkQ5mUQNr5u for ; Wed, 23 Jan 2013 21:41:35 -0800 (PST) Received: from mail-da0-f54.google.com (mail-da0-f54.google.com [209.85.210.54]) by ietfa.amsl.com (Postfix) with ESMTP id A5C1621F84BF for ; Wed, 23 Jan 2013 21:41:35 -0800 (PST) Received: by mail-da0-f54.google.com with SMTP id n2so4105010dad.41 for ; Wed, 23 Jan 2013 21:41:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:content-type:mime-version:subject:from:in-reply-to:date :cc:content-transfer-encoding:message-id:references:to:x-mailer; bh=YPclPcNTo5Qupj5jP+UYWIjOdU9mwnCOxApiN8/ApS0=; b=BxxgI/e7AVjpYgXAepP0xRAQqCvtWmOl8tcV8q2pJXPnQBvP62ORRmaXwBMJNfUI/R bN0nFYPAhEVaUFNYfCnLZDiY2Dr3/IIsKxnGG7U33+AsyIr5oGMyunqK2QUVhvf+8iZ1 YF/1lCL50YiCYaep4Me5SZNHYx8fhbiAZjiUGtNjEZG0Bw7+eaj6EBitBLGAFGmJwGIC y2yLg31/xhFP5VTkXYjjq1bTPitO7qBDor5ahoAVdcFK9mXQAcok3tsRMWkY4P1xjKls /DWcgSI9CSQIY8OT1ObGuIN7ag0Ld9swThnZw7vLUnjSC+hou1FxBcRMErYl1qEGewEQ 7w2A== X-Received: by 10.68.136.132 with SMTP id qa4mr1731024pbb.166.1359006095375; Wed, 23 Jan 2013 21:41:35 -0800 (PST) Received: from [192.168.1.10] (173-8-188-29-SFBA.hfc.comcastbusiness.net. [173.8.188.29]) by mx.google.com with ESMTPS id ti9sm14200593pbc.16.2013.01.23.21.41.33 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 23 Jan 2013 21:41:34 -0800 (PST) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Dino Farinacci In-Reply-To: <2CF4CB03E2AA464BA0982EC92A02CE2501E55E2C@BY2PRD0512MB653.namprd05.prod.outlook.com> Date: Wed, 23 Jan 2013 21:41:32 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <83ED8F0A-570E-4621-AE6E-E7693D8EB06C@gmail.com> References: <20130123184416.ECD5D18C0D8@mercury.lcs.mit.edu> <2CF4CB03E2AA464BA0982EC92A02CE2501E55E2C@BY2PRD0512MB653.namprd05.prod.outlook.com> To: Ronald Bonica X-Mailer: Apple Mail (2.1499) Cc: Noel Chiappa , "lisp@ietf.org" Subject: Re: [lisp] Should we use Locator-Status-Bits in Internet deployment? X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 05:41:37 -0000 >>=20 >> Maybe I'm confused, but I'm still not hearing why the LSB buys us >> anything above and beyond what we have to have anyway: i) mappings, = and >> some way to detect that an ITR has an outdated copy of one, and ii) >> reachability (which necessarily has to discover, on a fairly = real-time >> basis, a superset of 'up'). >>=20 >=20 >=20 > Noel, Dino, >=20 > Thanks for clearing up my misconceptions regarding LSB function. Now, = I think that we are in a better position to discuss Noel's question, = above. >=20 > Dino has suggested that the LSB provides a convenient way for ETRs to = inform ITRs that locators have been taken in or out of service. This can = be done without involving the mapping service. What the LSBs buy us is fast convergence. Let me explain. (1) An IGP operating in a small part of the network can converge faster = than propagating control messages to remote ASes. (2) Once the IGP tells the data-plane, the data-plane sets these control = bits. That means the control bits are sent from one AS to another very = fast, via fast-switching of packets in the core routers. (3) The LSBs are NOT reachability status. They are source up/down status = that the source knows about. Where the source here is the site that = operates the xTRs. > However, the mechanism only works in "controlled environments". = Furthermore, even in controlled environments, when the LSB=3D=3D1, the = ITR still has to test for reachability. This is because a locator can be = in service, but unreachable from a particular ITR. (I am not sure about = this, but when the LSB=3D=3D0, might the ITR have to test for = reachability anyway, just to ensure that things haven't changed). If your LSB bit is 0, it doesn't matter if the reachability to you is = up, because if you are down, then it doesn't matter. However, if your = LSB bit is 1, it means you are up. But from my part of the topology you = may be unreachable, but from Noel's part of the topology you may be = reachable. So up/down is global and reachability is pairwise. > Do I have this much right? >=20 > If so, does the LSB offer enough to be worth the complexity and = processor load. I believe it is worth it and it is being used in different use-cases and = environments. Dino From sander@steffann.nl Thu Jan 24 03:11:27 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B96F21F8953 for ; Thu, 24 Jan 2013 03:11:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VKekwcLI+hk3 for ; Thu, 24 Jan 2013 03:11:27 -0800 (PST) Received: from mail.sintact.nl (mail.sintact.nl [IPv6:2001:4038:0:16::7]) by ietfa.amsl.com (Postfix) with ESMTP id BF61021F858E for ; Thu, 24 Jan 2013 03:11:26 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.sintact.nl (Postfix) with ESMTP id E9FDC2040; Thu, 24 Jan 2013 12:11:25 +0100 (CET) X-Virus-Scanned: amavisd-new at mail.sintact.nl Received: from mail.sintact.nl ([127.0.0.1]) by localhost (mail.sintact.nl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H8dZNqU-zUPG; Thu, 24 Jan 2013 12:11:25 +0100 (CET) Received: from [IPv6:2a00:8640:1::3578:b3c6:c458:366a] (unknown [IPv6:2a00:8640:1:0:3578:b3c6:c458:366a]) by mail.sintact.nl (Postfix) with ESMTP id 41175200F; Thu, 24 Jan 2013 12:11:25 +0100 (CET) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.2 \(1499\)) From: Sander Steffann In-Reply-To: Date: Thu, 24 Jan 2013 12:11:24 +0100 Content-Transfer-Encoding: 7bit Message-Id: <7C1ABD15-D302-41F7-84B1-02850F1CE6B9@steffann.nl> References: To: Dino Farinacci X-Mailer: Apple Mail (2.1499) Cc: RRG RG , "lisp@ietf.org list list" , "lisp-beta@external.cisco.com Beta" Subject: Re: [lisp] A huge thanks for LISP! X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 11:11:27 -0000 > Tonight 7 LISP Internet Drafts became RFCs: Congratulations! Sander From ljakab@ac.upc.edu Thu Jan 24 12:10:38 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C2F221F85DA for ; Thu, 24 Jan 2013 12:10:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.379 X-Spam-Level: X-Spam-Status: No, score=-3.379 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, RCVD_IN_SORBS_WEB=0.619] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9GDW1cd70eqy for ; Thu, 24 Jan 2013 12:10:28 -0800 (PST) Received: from roura.ac.upc.es (roura.ac.upc.edu [147.83.33.10]) by ietfa.amsl.com (Postfix) with ESMTP id 50F3F21F84D5 for ; Thu, 24 Jan 2013 12:10:27 -0800 (PST) Received: from gw.ac.upc.edu (gw.ac.upc.es [147.83.30.3]) by roura.ac.upc.es (8.13.8/8.13.8) with ESMTP id r0OKAPlV031619 for ; Thu, 24 Jan 2013 21:10:25 +0100 Received: from [192.168.1.3] (unknown [92.82.60.34]) by gw.ac.upc.edu (Postfix) with ESMTP id 99BA76B01C7 for ; Thu, 24 Jan 2013 21:10:23 +0100 (CET) Message-ID: <5101951D.1010400@ac.upc.edu> Date: Thu, 24 Jan 2013 22:10:05 +0200 From: Lori Jakab Organization: UPC/BarcelonaTECH MIME-Version: 1.0 To: "lisp@ietf.org" OpenPGP: url=http://personals.ac.upc.edu/ljakab/lorand.jakab.pub.asc Content-Type: multipart/mixed; boundary="------------070406020305050106060100" Subject: [lisp] Proposed update to draft-ietf-lisp-deployment X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Jan 2013 20:10:38 -0000 This is a multi-part message in MIME format. --------------070406020305050106060100 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi folks, Please find attached a proposed new revision diff and full document draft-ietf-lisp-deployment. It incorporates the feedback received during working group last call. If there are no objections, I will post it to the datatracker on Friday. -Lori --------------070406020305050106060100 Content-Type: text/html; name="wdiff draft-ietf-lisp-deployment-05.txt draft-ietf-lisp-deployment-06.txt.htm" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename*0="wdiff draft-ietf-lisp-deployment-05.txt draft-ietf-lisp-depl"; filename*1="oyment-06.txt.htm" wdiff draft-ietf-lisp-deployment-05.txt draft-ietf-lisp-deployment-06.txt 

Network Working Group                                           L. Jakab
Internet-Draft                                      A. Cabellos-Aparicio                                             Cisco Systems
Intended status: Informational                                  F. Coras                      A. Cabellos-Aparicio
Expires: April 23, July 28, 2013                                          F. Coras
                                                      J. Domingo-Pascual
                                                 Technical University of
                                                               Catalonia
                                                                D. Lewis
                                                           Cisco Systems
                                                        October 20, 2012
                                                        January 24, 2013

             LISP Network Element Deployment Considerations
                   draft-ietf-lisp-deployment-05.txt
                   draft-ietf-lisp-deployment-06.txt

Abstract

   This document discusses the different scenarios for the deployment of
   the new network elements introduced by the Locator/Identifier
   Separation Protocol (LISP).

Status of this Memo

   This Internet-Draft is submitted in full conformance with the
   provisions of BCP 78 and BCP 79.

   Internet-Drafts are working documents of the Internet Engineering
   Task Force (IETF).  Note that other groups may also distribute
   working documents as Internet-Drafts.  The list of current Internet-
   Drafts is at http://datatracker.ietf.org/drafts/current/.

   Internet-Drafts are draft documents valid for a maximum of six months
   and may be updated, replaced, or obsoleted by other documents at any
   time.  It is inappropriate to use Internet-Drafts as reference
   material or to cite them other than as "work in progress."

   This Internet-Draft will expire on April 23, July 28, 2013.

Copyright Notice

   Copyright (c) 2012 2013 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.  Code Components extracted from this document must
   include Simplified BSD License text as described in Section 4.e of
   the Trust Legal Provisions and are provided without warranty as
   described in the Simplified BSD License.

Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  3
   2.  Tunnel Routers . . . . . . . . . . . . . . . . . . . . . . . .  3  4
     2.1.  Customer Edge  . . . . . . . . . . . . . . . . . . . . . .  4
     2.2.  Provider Edge  . . . . . . . . . . . . . . . . . . . . . .  5
     2.3.  Split ITR/ETR  . . . . . . . . . . . . . . . . . . . . . .  6  7
     2.4.  Inter-Service Provider Traffic Engineering . . . . . . . .  8
     2.5.  Tunnel Routers Behind NAT  . . . . . . . . . . . . . . . . 10
       2.5.1.  ITR  . . . . . . . . . . . . . . . . . . . . . . . . . 10
       2.5.2.  ETR  . . . . . . . . . . . . . . . . . . . . . . . . . 10 11
     2.6.  Summary and Feature Matrix . . . . . . . . . . . . . . . . 11
   3.  Map-Resolvers  Map Resolvers and Map-Servers Map Servers  . . . . . . . . . . . . . . . . 11
     3.1.  Map-Servers  Map Servers  . . . . . . . . . . . . . . . . . . . . . . . 11
     3.2.  Map-Resolvers  Map Resolvers  . . . . . . . . . . . . . . . . . . . . . . 12
   4.  Proxy Tunnel Routers . . . . . . . . . . . . . . . . . . . . . 13
     4.1.  P-ITR  . . . . . . . . . . . . . . . . . . . . . . . . . . 13
     4.2.  P-ETR  . . . . . . . . . . . . . . . . . . . . . . . . . . 14
   5.  Migration to LISP  . . . . . . . . . . . . . . . . . . . . . . 15
     5.1.  LISP+BGP . . . . . . . . . . . . . . . . . . . . . . . . . 16 15
     5.2.  Mapping Service Provider (MSP) P-ITR Service . . . . . . . 16
     5.3.  Proxy-ITR Route Distribution (PITR-RD) . . . . . . . . . . 17 16
     5.4.  Migration Summary  . . . . . . . . . . . . . . . . . . . . 19
   6.  Step-by-Step Example BGP to LISP Migration Procedure . . . . . 20 19
     6.1.  Customer Pre-Install and Pre-Turn-up Checklist . . . . . . 20 19
     6.2.  Customer Activating LISP Service . . . . . . . . . . . . . 21
     6.3.  Cut-Over Provider Preparation and Changes  . . . . . . . . 22 21
   7.  Security Considerations  . . . . . . . . . . . . . . . . . . . 22
   8.  IANA Considerations  . . . . . . . . . . . . . . . . . . . . . 23 22
   9.  Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 23 22
   10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 23
     10.1. Normative References . . . . . . . . . . . . . . . . . . . 23
     10.2. Informative References . . . . . . . . . . . . . . . . . . 23
   Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 24

1.  Introduction

   The Locator/Identifier Separation Protocol (LISP) addresses the
   scaling issues of the global Internet routing system by separating
   the current addressing scheme into Endpoint IDentifiers (EIDs) and
   Routing LOCators (RLOCs).  The main protocol specification
   [I-D.ietf-lisp] [RFC6830]
   describes how the separation is achieved, which new network elements
   are introduced, and details the packet formats for the data and
   control planes.

   LISP assumes that such separation is between the edge and core. core and
   uses a map-and-encap scheme for forwarding.  While the boundary
   between both is not strictly defined, one widely accepted definition
   places it at the border routers of stub autonomous systems, which may
   carry a partial or complete default-
   free default-free zone (DFZ) routing table.
   The initial design of LISP took this location as a baseline for
   protocol development.  However, the applications of LISP go beyond of
   just decreasing the size of the DFZ routing table, and include
   improved multihoming and ingress traffic engineering (TE) support for
   edge networks, and even individual hosts.  Throughout the draft we
   will use the term LISP site to refer to these networks/hosts behind a
   LISP Tunnel Router.  We formally define it as:

   LISP site:  A single host or a set of network elements in an edge
      network under the administrative control of a single organization,
      delimited from other networks by LISP Tunnel Router(s).

   Network element:  Active or passive device that is connected
      connected to other active or passive devices for transporting
      packet switched data.

   Since LISP is a protocol which can be used for different purposes, it
   is important to identify possible deployment scenarios and the
   additional requirements they may impose on the protocol specification
   and other protocols.  Additionally, this document is intended as a
   guide for the operational community for LISP deployments in their
   networks.  It is expected to evolve as LISP deployment progresses,
   and the described scenarios are better understood or new scenarios
   are discovered.

   Each subsection considers an element type, discussing the impact of
   deployment scenarios on the protocol specification.  For definition
   of terms, please refer to the appropriate documents (as cited in the
   respective sections).

2.  Tunnel Routers

   LISP is a map-and-encap protocol, with the main goal of improving
   global routing scalability.  To achieve its goal, it introduces
   several new network elements, each performing specific functions
   necessary to separate the edge from the core.

   The device that is the gateway between the edge and the core is
   called Tunnel Router (xTR), performing one or both of two separate
   functions:

   1.  Encapsulating packets originating from an end host to be
       transported over intermediary (transit) networks towards the
       other end-point of the communication

   2.  Decapsulating packets entering from intermediary (transit)
       networks, originated at a remote end host.

   The first function is performed by an Ingress Tunnel Router (ITR),
   the second by an Egress Tunnel Router (ETR).

   Section 8 of the main LISP specification [I-D.ietf-lisp] [RFC6830] has a short
   discussion of where Tunnel Routers can be deployed and some of the
   associated advantages and disadvantages.  This section adds more
   detail to the scenarios presented there, and provides additional
   scenarios as well.

2.1.  Customer Edge

   LISP was designed with deployment at the core-edge boundary in mind,
   which can be approximated as the set of DFZ routers belonging to non-
   transit ASes.  For the purposes of this document,

   The first scenario we will consider
   this boundary to be consisting of discuss is customer edge, when xTR
   functionality is placed on the router(s) that connect the routers connecting LISP sites site
   to their upstreams. its upstream(s), but are under its control.  As such, this is the
   most common expected scenario for xTRs, and this document considers
   it the reference location, comparing the other scenarios to this one.

                                ISP1    ISP2
                                 |        |
                                 |        |
                               +----+  +----+
                            +--|xTR1|--|xTR2|--+
                            |  +----+  +----+  |
                            |                  |
                            |     LISP site    |
                            +------------------+

                    Figure 1: xTRs at the customer edge

   From the LISP site perspective the main advantage of this type of
   deployment (compared to the one described in the next section) is
   having direct control over its ingress traffic engineering.  This
   makes it is easy to set up and maintain active/active, active/backup, or
   more complex TE policies, without involving third parties.

   Being under the same administrative control, reachability information
   of all ETRs is easier to synchronize, because the necessary control
   traffic can be allowed between the locators of the ETRs.  A correct
   synchronous global view of the reachability status is thus available,
   and the Loc-Status-Bits can be set correctly in the LISP data header
   of outgoing packets.

   By placing the tunnel router at the edge of the site, existing
   internal network configuration does not need to be modified.
   Firewall rules, router configurations and address assignments inside
   the LISP site remain unchanged.  This helps with incremental
   deployment and allows a quick upgrade path to LISP.  For larger sites
   with many external connections, distributed in geographically diverse
   PoPs, and complex internal topology, it may however make more sense
   to both encapsulate and decapsulate as soon as possible, to benefit
   from the information in the IGP to choose the best path (see
   Section 2.3 for a discussion of this scenario).

   Another thing to consider when placing tunnel routers are MTU issues.
   Since encapsulating packets increases overhead, the MTU of the end-
   to-end path may decrease, when encapsulated packets need to travel
   over segments having close to minimum MTU.  Some transit networks are
   known to provide larger MTU than the typical value of 1500 bytes of
   popular access technologies used at end hosts (e.g., IEEE 802.3 and
   802.11).  However, placing the LISP router connecting to such a
   network at the customer edge could possibly bring up MTU issues,
   depending on the link type to the provider as opposed to the
   following scenario.  See [RFC4459] for MTU considerations of
   tunneling protocols.

2.2.  Provider Edge

   The other location at the core-edge boundary for deploying LISP
   routers is at the Internet service provider edge.  The main incentive
   for this case is that the customer does not have to upgrade the CE
   router(s), or change the configuration of any equipment.
   Encapsulation/decapsulation happens in the provider's network, which
   may be able to serve several customers with a single device.  For
   large ISPs with many residential/business customers asking for LISP
   this can lead to important savings, since there is no need to upgrade
   the software (or hardware, if it's the case) at each client's
   location.  Instead, they can upgrade the software (or hardware) on a
   few PE routers serving the customers.  This scenario is depicted in
   Figure 2.

                  +----------+        +------------------+
                  |   ISP1   |        |       ISP2       |
                  |          |        |                  |
                  |  +----+  |        |  +----+  +----+  |
                  +--|xTR1|--+        +--|xTR2|--|xTR3|--+
                     +----+              +----+  +----+
                        |                  |       |
                        |                  |       |
                        +--<[LISP site]>---+-------+

                          Figure 2: xTR at the PE

   While this approach can make transition easy for customers and may be
   cheaper for providers, the LISP site looses one of the main benefits
   of LISP: ingress traffic engineering.  Since the provider controls
   the ETRs, additional complexity would be needed to allow customers to
   modify their mapping entries.

   The problem is aggravated when the LISP site is multihomed.  Consider
   the scenario in Figure 2: whenever a change to TE policies is
   required, the customer contacts both ISP1 and ISP2 to make the
   necessary changes on the routers (if they provide this possibility).
   It is however unlikely, that both ISPs will apply changes
   simultaneously, which may lead to inconsistent state for the mappings
   of the LISP site.  Since the different upstream ISPs are usually
   competing business entities, the ETRs may even be configured to
   compete, either to attract all the traffic or to get no traffic.  The
   former will happen if the customer pays per volume, the latter if the
   connectivity has a fixed price.  A solution could be to have the
   mappings in the Map-Server(s), Map Server(s), and have their operator give control
   over the entries to customer, much like in the Domain Name System at
   the time of this writing.

   Additionally, since xTR1, xTR2, and xTR3 are in different
   administrative domains, locator reachability information is unlikely
   to be exchanged among them, making it difficult to set Loc-Status-
   Bits (LSB) correctly on encapsulated packets.  Because of this, and
   due to the security concerns about LSB described in
   [I-D.ietf-lisp-threats] their use is discouraged without verifying
   ETR reachability through the mapping system or other means.  Mapping
   versioning is another alternative [RFC6834].

   Compared to the customer edge scenario, deploying LISP at the
   provider edge might have the advantage of diminishing potential MTU
   issues, because the tunnel router is closer to the core, where links
   typically have higher MTUs than edge network links.

2.3.  Split ITR/ETR

   In a simple LISP deployment, xTRs are located at the border of the
   LISP site (see Section 2.1).  In this scenario packets are routed
   inside the domain according to the EID.  However, more complex
   networks may want to route packets according to the destination RLOC.
   This would enable them to choose the best egress point.

   The LISP specification separates the ITR and ETR functionality and
   considers that both entities can be deployed in separated network
   equipment.  ITRs can be deployed closer to the host (i.e., access
   routers).  This way packets are encapsulated as soon as possible, and
   packets exit the network through the best egress point in terms of
   BGP policy.  In turn, ETRs can be deployed at the border routers of
   the network, and packets are decapsulated as soon as possible.  Once
   decapsulated, packets are routed based on destination EID, according
   to internal routing policy.

   In the following figure we can see an example.  The Source (S)
   transmits packets using its EID and in this particular case packets
   are encapsulated at ITR_1.  The encapsulated packets are routed
   inside the domain according to the destination RLOC, and can egress
   the network through the best point (i.e., closer to the RLOC's AS).
   On the other hand, inbound packets are received by ETR_1 which
   decapsulates them.  Then packets are routed towards S according to
   the EID, again following the best path.

      +---------------------------------------+
      |                                       |
      |       +-------+                   +-------+         +-------+
      |       | ITR_1 |---------+         | ETR_1 |-RLOC_A--| ISP_A |
      |       +-------+         |         +-------+         +-------+
      |  +-+        |           |             |
      |  |S|        |    IGP    |             |
      |  +-+        |           |             |
      |       +-------+         |         +-------+         +-------+
      |       | ITR_2 |---------+         | ETR_2 |-RLOC_B--| ISP_B |
      |       +-------+                   +-------+         +-------+
      |                                       |
      +---------------------------------------+

                     Figure 3: Split ITR/ETR Scenario

   This scenario has a set of implications:

   o  The site must carry at least partial BGP routes in order to choose
      the best egress point, increasing the complexity of the network.
      However, this is usually already the case for LISP sites that
      would benefit from this scenario.

   o  If the site is multihomed to different ISPs and any of the
      upstream ISPs is doing uRPF filtering, this scenario may become
      impractical.  ITRs need to determine the exit ETR, for setting the
      correct source RLOC in the encapsulation header.  This adds
      complexity and reliability concerns.

   o  In LISP, ITRs set the reachability bits when encapsulating data
      packets.  Hence, ITRs need a mechanism to be aware of the liveness
      of all ETRs serving their site.

   o  MTU within the site network must be large enough to accommodate
      encapsulated packets.

   o  In this scenario, each ITR is serving fewer hosts than in the case
      when it is deployed at the border of the network.  It has been
      shown that cache hit ratio grows logarithmically with the amount
      of users [cache].  Taking this into account, when ITRs are
      deployed closer to the host the effectiveness of the mapping cache
      may be lower (i.e., the miss ratio is higher).  Another
      consequence of this is that the site may transmit a higher amount
      of Map-Requests, increasing the load on the distributed mapping
      database.  To lower the impact, the site could use a local caching
      Map Resolver.

   o  By placing the ITRs inside the site, they will still need global
      RLOCs, and this may add complexity to intra-site routing
      configuration, and further intra-site issues when there is a
      change of providers.

2.4.  Inter-Service Provider Traffic Engineering

   With LISP, two LISP sites can route packets among them and control
   their ingress TE policies.  Typically, LISP is seen as applicable to
   stub networks, however the LISP protocol can also be applied to
   transit networks recursively.

   Consider the scenario depicted in Figure 4.  Packets originating from
   the LISP site Stub1, client of ISP_A, with destination Stub4, client
   of ISP_B, are LISP encapsulated at their entry point into the ISP_A's
   network.  The external IP header now has as the source RLOC an IP
   from ISP_A's address space and destination RLOC from ISP_B's address
   space.  One or more ASes separate ISP_A from ISP_B. With a single
   level of LISP encapsulation, Stub4 has control over its ingress
   traffic.  However, at the time of this writing, ISP_B has only BGP
   tools (such as prefix deaggregation) to control on which of his own
   upstream or peering links should packets enter.  This is either not
   feasible (if fine-grained per-customer control is required, the very
   specific prefixes may not be propagated) or increases DFZ table size.

                                  _.--.
    Stub1 ...   +-------+      ,-''     `--.      +-------+   ... Stub3
             \  |   R_A1|----,'             `. ---|R_B1   |  /
              --|   R_A2|---(     Transit     )   |       |--
    Stub2 .../  |   R_A3|-----.             ,' ---|R_B2   |  \... Stub4
                +-------+      `--.     _.-'      +-------+
          ...     ISP_A            `--''            ISP_B     ...

               Figure 4: Inter-Service provider TE scenario

   A solution for this is to apply LISP recursively.  ISP_A and ISP_B
   may reach a bilateral agreement to deploy their own private mapping
   system.  ISP_A then encapsulates packets destined for the prefixes of
   ISP_B, which are listed in the shared mapping system.  Note that in
   this case the packet is double-encapsulated (using R_A1, R_A2 or R_A3
   as source and R_B1 or R_B2 as destination in the example above).
   ISP_B's ETR removes the outer, second layer of LISP encapsulation
   from the incoming packet, and routes it towards the original RLOC,
   the ETR of Stub4, which does the final decapsulation.

   If ISP_A and ISP_B agree to share a private distributed mapping
   database, both can control their ingress TE without the need of
   deaggregating prefixes.  In this scenario the private database
   contains RLOC-to-RLOC bindings.  The convergence time on the TE
   policies updates is expected to be fast, since ISPs only have to
   update/query a mapping to/from the database.

   This deployment scenario includes two important caveats.  First, it
   is intended to be deployed between only two ISPs (ISP_A and ISP_B in
   Figure 4).  If more than two ISPs use this approach, then the xTRs
   deployed at the participating ISPs must either query multiple mapping
   systems, or the ISPs must agree on a common shared mapping system.
   Second, the scenario is only recommended for ISPs providing
   connectivity to LISP sites, such that source RLOCs of packets to be
   reencapsulated belong to said ISP.  Otherwise the participating ISPs
   must register prefixes they do not own in the above mentioned private
   mapping system.  Failure to follow these recommendations may lead to
   operational and security issues when deploying this scenario.

   Besides these recommendations, the main disadvantages of this
   deployment case are:

   o  Extra LISP header is needed.  This increases the packet size and
      requires that the MTU between both ISPs accommodates double-
      encapsulated packets.

   o  The ISP ITR must encapsulate packets and therefore must know the
      RLOC-to-RLOC binding.  These bindings are stored in a mapping
      database and may be cached in the ITR's mapping cache.  Cache
      misses lead to an additional lookup latency, unless a push based
      mapping system is used for the private mapping system.

   o  The operational overhead of maintaining the shared mapping
      database.

   o  If an IPv6 address block is reserved for EID use, as specified in
      [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first
      level) can avoid LISP processing altogether for non-LISP
      destinations.  The ISP tunnel routers however will not be able to
      take advantage of this optimization, all RLOC-to-RLOC mappings
      need a lookup in the private database (or map-cache, once results
      are cached).

2.5.  Tunnel Routers Behind NAT

   NAT in this section refers to IPv4 network address and port
   translation.

2.5.1.  ITR

   Packets encapsulated by an ITR are just UDP packets from a NAT
   device's point of view, and they are handled like any UDP packet,
   there are no additional requirements for LISP data packets.

   Map-Requests sent by an ITR, which create the state in the NAT table,
   have a different 5-tuple in the IP header than the Map-Reply
   generated by the authoritative ETR.  Since the source address of this
   packet is different from the destination address of the request
   packet, no state will be matched in the NAT table and the packet will
   be dropped.  To avoid this, the NAT device has to do the following:

   o  Send all UDP packets with source port 4342, regardless of the
      destination port, to the RLOC of the ITR.  The most simple way to
      achieve this is configuring 1:1 NAT mode from the external RLOC of
      the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer
      broadband routers).

   o  Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in
      the payload.

   This setup supports only a single ITR behind the NAT device.

2.5.2.  ETR

   An ETR placed behind NAT is reachable from the outside by the
   Internet-facing locator of the NAT device.  It needs to know this
   locator (and configure a loopback interface with it), so that it can
   use it in Map-Reply and Map-Register messages.  Thus support for
   dynamic locators for the mapping database is needed in LISP
   equipment.

   Again, only one ETR behind the NAT device is supported.

   An implication of the issues described above is that LISP sites with
   xTRs can not be behind carrier based NATs, since two different sites
   would collide on the port forwarding.

2.6.  Summary and Feature Matrix

       Feature                         CE    PE    Split   Rec.
          --------------------------------------------------------   Recursive
       -------------------------------------------------------------
       Control of ingress TE            x     -      x         x
       No modifications to existing
          int. network infrastructure   x     x      -         -
       Loc-Status-Bits sync             x     -      x         x
       MTU/PMTUD issues minimized       -     x      -         x

3.  Map-Resolvers  Map Resolvers and Map-Servers Map Servers

3.1.  Map-Servers  Map Servers

   The Map-Server Map Server learns EID-to-RLOC mapping entries from an
   authoritative source and publishes them in the distributed mapping
   database.  These entries are learned through authenticated Map-
   Register messages sent by authoritative ETRs.  Also, upon reception
   of a Map-Request, the Map-Server Map Server verifies that the destination EID
   matches an EID-prefix for which it is authoritative for, and then re-
   encapsulates and forwards it to a matching ETR.  Map-Server  Map Server
   functionality is described in detail in [I-D.ietf-lisp-ms]. [RFC6833].

   The Map-Server Map Server is provided by a Mapping Service Provider (MSP).  A  The
   MSP can be any of the following:

   o  EID registrar.  Since participates in the IPv4 address space is nearing
      exhaustion, IPv4 EIDs will come from already allocated Provider
      Independent (PI) space.  The registrars in this case remain the
      current five Regional Internet Registries (RIRs).  In the case of
      IPv6, the possibility of reserving a /16 block as EID space is
      currently under consideration [I-D.ietf-lisp-eid-block].  If
      granted global distributed mapping database
   infrastructure, by IANA, the community will have setting up connections to determine the body
      responsible for allocations from this block, and the associated
      policies.  Existing allocation policies apply other participants,
   according to EIDs outside this
      block.

   o  Third parties.  Participating in the LISP specific mapping system that is
      similar to participating employed (e.g., ALT,
   DDT).  Participation in global routing or DNS: as long as
      there is at least another already participating entity willing to
      forward the newcomer's traffic, there is no barrier to entry.
      Still, just like routing mapping database, and DNS, LISP mappings have the issue storing of
      trust, with efforts underway EID-
   to-RLOC mapping data is subject to make the published information
      verifiable.  When these mechanisms will be deployed in policies of the LISP
      mapping system, "root"
   operators, who SHOULD check ownership rights for the burden of providing and verifying trust should
      be kept away from MSPs, which will simply host EID prefixes
   stored in the secured
      mappings.  This will keep database by participants.  These policies are out of
   the low barrier scope of entry to become an
      MSP for third parties. this document.

   In all cases, the MSP configures its Map-Server(s) Map Server(s) to publish the
   prefixes of its clients in the distributed mapping database and start
   encapsulating and forwarding Map-Requests to the ETRs of the AS.
   These ETRs register their prefix(es) with the Map-Server(s) Map Server(s) through
   periodic authenticated Map-Register messages.  In this context, for
   some LISP end sites, there is a need for mechanisms to:

   o  Automatically distribute EID prefix(es) shared keys between the
      ETRs and the EID-registrar Map-Server. Map Server.

   o  Dynamically obtain the address of the Map-Server Map Server in the ETR of the
      AS.

   The Map-Server Map Server plays a key role in the reachability of the EID-
   prefixes it is serving.  On the one hand it is publishing these
   prefixes into the distributed mapping database and on the other hand
   it is encapsulating and forwarding Map-Requests to the authoritative
   ETRs of these prefixes.  ITRs encapsulating towards EIDs under the
   responsibility of a failed Map-Server Map Server will be unable to look up any
   of their covering prefixes.  The only exception are the ITRs that
   already contain the mappings in their local cache.  In this case ITRs
   can reach ETRs until the entry expires (typically 24 hours).  For
   this reason, redundant Map-Server Map Server deployments are desirable.  A set
   of Map-Servers Map Servers providing high-availability service to the same set of
   prefixes is called a redundancy group.  ETRs are configured to send
   Map-Register messages to all Map-Servers Map Servers in the redundancy group.  To
   achieve fail-over (or load-balancing, if desired), known mapping
   system specific best practices should be used.

   Additionally, if a Map-Server Map Server has no reachability for any ETR serving
   a given EID block, it should not originate that block into the
   mapping system.

3.2.  Map-Resolvers  Map Resolvers

   A Map-Resolver Map Resolver a is a network infrastructure component which accepts
   LISP encapsulated Map-Requests, typically from an ITR, and finds the
   appropriate EID-to-RLOC mapping by either consulting its local cache
   or by consulting the distributed mapping database.  Map-Resolver  Map Resolver
   functionality is described in detail in [I-D.ietf-lisp-ms]. [RFC6833].

   Anyone with access to the distributed mapping database can set up a
   Map-Resolver
   Map Resolver and provide EID-to-RLOC mapping lookup service.
   Database access setup is mapping system specific.

   For performance reasons, it is recommended that LISP sites use Map- Map
   Resolvers that are topologically close to their ITRs.  ISPs
   supporting LISP will provide this service to their customers,
   possibly restricting access to their user base.  LISP sites not in
   this position can use open access Map-Resolvers, Map Resolvers, if available.
   However, regardless of the availability of open access resolvers, the
   MSP providing the Map-Server(s) Map Server(s) for a LISP site should also make
   available Map-Resolver(s) Map Resolver(s) for the use of that site.

   In medium to large-size ASes, ITRs must be configured with the RLOC
   of a Map-Resolver, Map Resolver, operation which can be done manually.  However, in
   Small Office Home Office (SOHO) scenarios a mechanism for
   autoconfiguration should be provided.

   One solution to avoid manual configuration in LISP sites of any size
   is the use of anycast RLOCs for Map-Resolvers Map Resolvers similar to the DNS root
   server infrastructure.  Since LISP uses UDP encapsulation, the use of
   anycast would not affect reliability.  LISP routers are then shipped
   with a preconfigured list of well know Map-Resolver Map Resolver RLOCs, which can
   be edited by the network administrator, if needed.

   The use of anycast also helps improving mapping lookup performance.
   Large MSPs can increase the number and geographical diversity of
   their Map-Resolver Map Resolver infrastructure, using a single anycasted RLOC.
   Once LISP deployment is advanced enough, very large content providers
   may also be interested running this kind of setup, to ensure minimal
   connection setup latency for those connecting to their network from
   LISP sites.

   While Map-Servers Map Servers and Map-Resolvers Map Resolvers implement different
   functionalities within the LISP mapping system, they can coexist on
   the same device.  For example, MSPs offering both services, can
   deploy a single Map-Resolver/Map-Server Map Resolver/Map Server in each PoP where they have a
   presence.

4.  Proxy Tunnel Routers

4.1.  P-ITR

   Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP
   transition mechanism, allowing non-LISP sites to reach LISP sites.
   They announce via BGP certain EID prefixes (aggregated, whenever
   possible) to attract traffic from non-LISP sites towards EIDs in the
   covered range.  They do the mapping system lookup, and encapsulate
   received packets towards the appropriate ETR.  Note that for the
   reverse path LISP sites can reach non-LISP sites simply by not
   encapsulating traffic.  See [I-D.ietf-lisp-interworking] [RFC6832] for a detailed description of
   P-ITR functionality.

   The success of new protocols depends greatly on their ability to
   maintain backwards compatibility and inter-operate with the
   protocol(s) they intend to enhance or replace, and on the incentives
   to deploy the necessary new software or equipment.  A LISP site needs
   an interworking mechanism to be reachable from non-LISP sites.  A
   P-ITR can fulfill this role, enabling early adopters to see the
   benefits of LISP, similar to tunnel brokers helping the transition
   from IPv4 to IPv6.  A site benefits from new LISP functionality
   (proportionally with existing global LISP deployment) when going
   LISP, so it has the incentives to deploy the necessary tunnel
   routers.  In order to be reachable from non-LISP sites it has two
   options: keep announcing its prefix(es) with BGP, or have a P-ITR
   announce prefix(es) covering them.

   If the goal of reducing the DFZ routing table size is to be reached,
   the second option is preferred.  Moreover, the second option allows
   LISP-based ingress traffic engineering from all sites.  However, the
   placement of P-ITRs significantly influences performance and
   deployment incentives.  Section 5 is dedicated to the migration to a
   LISP-enabled Internet, and includes deployment scenarios for P-ITRs.

4.2.  P-ETR

   In contrast to P-ITRs, P-ETRs are not required for the correct
   functioning of all LISP sites.  There are two cases, where they can
   be of great help:

   o  LISP sites with unicast reverse path forwarding (uRPF)
      restrictions, and

   o  Communication between sites using different address family RLOCs.

   In the first case, uRPF filtering is applied at their upstream PE
   router.  When forwarding traffic to non-LISP sites, an ITR does not
   encapsulate packets, leaving the original IP headers intact.  As a
   result, packets will have EIDs in their source address.  Since we are
   discussing the transition period, we can assume that a prefix
   covering the EIDs belonging to the LISP site is advertised to the
   global routing tables by a P-ITR, and the PE router has a route
   towards it.  However, the next hop will not be on the interface
   towards the CE router, so non-encapsulated packets will fail uRPF
   checks.

   To avoid this filtering, the affected ITR encapsulates packets
   towards the locator of the P-ETR for non-LISP destinations.  Now the
   source address of the packets, as seen by the PE router is the ITR's
   locator, which will not fail the uRPF check.  The P-ETR then
   decapsulates and forwards the packets.

   The second use case is IPv4-to-IPv6 transition.  Service providers
   using older access network hardware, which only supports IPv4 can
   still offer IPv6 to their clients, by providing a CPE device running
   LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP
   sites, with IPv6-only locators.  Packets originating from the client
   LISP site for these destinations would be encapsulated towards the
   P-ETR's IPv4 locator.  The P-ETR is in a native IPv6 network,
   decapsulating and forwarding packets.  For non-LISP destination, the
   packet travels natively from the P-ETR.  For LISP destinations with
   IPv6-only locators, the packet will go through a P-ITR, in order to
   reach its destination.

   For more details on P-ETRs see the [I-D.ietf-lisp-interworking] [RFC6832] draft.

   P-ETRs can be deployed by ISPs wishing to offer value-added services
   to their customers.  As is the case with P-ITRs, P-ETRs too may
   introduce path stretch.  Because of this the ISP needs to consider
   the tradeoff of using several devices, close to the customers, to
   minimize it, or few devices, farther away from the customers,
   minimizing cost instead.

   Since the deployment incentives for P-ITRs and P-ETRs are different,
   it is likely they will be deployed in separate devices, except for
   the CDN case, which may deploy both in a single device.

   In all cases, the existence of a P-ETR involves another step in the
   configuration of a LISP router.  CPE routers, which are typically
   configured by DHCP, stand to benefit most from P-ETRs.
   Autoconfiguration of the P-ETR locator could be achieved by a DHCP
   option, or adding a P-ETR field to either Map-Notifys or Map-Replies.

   As a security measure, access to P-ETRs should be limited to
   legitimate users by enforcing ACLs.

5.  Migration to LISP

   This section discusses a deployment architecture to support the
   migration to a LISP-enabled Internet.  The loosely defined terms of
   "early transition phase", "late transition phase", and "LISP Internet
   phase" refer to time periods when LISP sites are a minority, a
   majority, or represent all edge networks respectively.

5.1.  LISP+BGP

   For sites wishing to go LISP with their PI prefix the least
   disruptive way is to upgrade their border routers to support LISP,
   register the prefix into the LISP mapping system, but keep announcing
   it with BGP as well.  This way LISP sites will reach them over LISP,
   while legacy sites will be unaffected by the change.  The main
   disadvantage of this approach is that no decrease in the DFZ routing
   table size is achieved.  Still, just increasing the number of LISP
   sites is an important gain, as an increasing LISP/non-LISP site ratio
   will slowly decrease the need for BGP-based traffic engineering that
   leads to prefix deaggregation.  That, in turn, may lead to a decrease
   in the DFZ size and churn in the late transition phase.

   This scenario is not limited to sites that already have their
   prefixes announced with BGP.  Newly allocated EID blocks could follow
   this strategy as well during the early LISP deployment phase,
   depending on the cost/benefit analysis of the individual networks.
   Since this leads to an increase in the DFZ size, the following
   architecture should be preferred for new allocations.

5.2.  Mapping Service Provider (MSP) P-ITR Service

   In addition to publishing their clients' registered prefixes in the
   mapping system, MSPs with enough transit capacity can offer them
   P-ITR service as a separate service.  This service is especially
   useful for new PI allocations, to sites without existing BGP
   infrastructure, that wish to avoid BGP altogether.  The MSP announces
   the prefix into the DFZ, and the client benefits from ingress traffic
   engineering without prefix deaggregation.  The downside of this
   scenario is adding path stretch.

   Routing all non-LISP ingress traffic through a third party which is
   not one of its ISPs is only feasible for sites with modest amounts of
   traffic (like those using the IPv6 tunnel broker services today),
   especially in the first stage of the transition to LISP, with a
   significant number of legacy sites.  This is because the handling of
   said traffic is likely to result in additional costs, which would be
   passed down to the client.  When the LISP/non-LISP site ratio becomes
   high enough, this approach can prove increasingly attractive.

   Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix
   deaggregation for traffic engineering purposes, resulting in slower
   routing table increase in the case of new allocations and potential
   decrease for existing ones.  Moreover, MSPs serving different clients
   with adjacent aggregable aggregatable prefixes may lead to additional decrease,
   but quantifying this decrease is subject to future research study.

5.3.  Proxy-ITR Route Distribution (PITR-RD)

   Instead of a LISP site, or the MSP, announcing their EIDs with BGP to
   the DFZ, this function can be outsourced to a third party, a P-ITR
   Service Provider (PSP).  This will result in a decrease of the
   operational complexity both at the site and at the MSP.

   The PSP manages a set of distributed P-ITR(s) that will advertise the
   corresponding EID prefixes through BGP to the DFZ.  These P-ITR(s)
   will then encapsulate the traffic they receive for those EIDs towards
   the RLOCs of the LISP site, ensuring their reachability from non-LISP
   sites.  Note that handling non-LISP-originated traffic may incur
   additional costs for the PSP, which may be passed down to the client.

   While it is possible for a PSP to manually configure each client's
   EID routes to be announced, this approach offers little flexibility
   and is not scalable.  This section presents a scalable architecture
   that offers automatic distribution of EID routes to LISP sites and
   service providers.

   The architecture requires no modification to existing LISP network
   elements, but it introduces a new (conceptual) network element, the
   EID Route Server, defined as a router that either propagates routes
   learned from other EID Route Servers, or it originates EID Routes.
   The EID-Routes that it originates are those that it is authoritative
   for.  It propagates these routes to Proxy-ITRs within the AS of the
   EID Route Server.  It is worth to note that a BGP capable router can
   be also considered as an EID Route Server.

   Further, an EID-Route is defined as a prefix originated via the Route
   Server of the mapping service provider, which should be aggregated if
   the MSP has multiple customers inside a single netblock. large continuous
   prefix.  This prefix is propagated to other P-ITRs both within the
   MSP and to other P-ITR operators it peers with.  EID Route Servers
   are operated either by the LISP site, MSPs or PSPs, and they may be
   collocated with a Map- Map Server or P-ITR, but are a functionally
   discrete entity.  They distribute EID-Routes, using BGP, to other
   domains, according to policies set by participants.

                              MSP (AS64500)
                              RS ---> P-ITR
                               |        /
                               |  _.--./
                              ,-''    /`--.
             LISP site   ---,' |     v     `.
                           (   |   DFZ       )----- Mapping system
         non-LISP site   ----. |    ^      ,'
                              `--. /   _.-'
                               |  `--''
                               v /
                             P-ITR
                             PSP (AS64501)

            Figure 5: The P-ITR Route Distribution architecture

   The architecture described above decouples EID origination from route
   propagation, with the following benefits:

   o  Can accurately represent business relationships between P-ITR
      operators

   o  More mapping system agnostic

   o  Minor changes to P-ITR implementation, no changes to other
      components

   In the example in the figure we have a MSP providing services to the
   LISP site.  The LISP site does not run BGP, and gets an EID
   allocation directly from a RIR, or from the MSP, who may be a LIR.
   Existing PI allocations can be migrated as well.  The MSP ensures the
   presence of the prefix in the mapping system, and runs an EID Route
   Server to distribute it to P-ITR service providers.  Since the LISP
   site does not run BGP, the prefix will be originated with the AS
   number of the MSP.

   In the simple case depicted in Figure 5 the EID-Route of LISP Site
   will be originated by the Route Server, and announced to the DFZ by
   the PSP's P-ITRs with AS path 64501 64500.  From that point on, the
   usual BGP dynamics apply.  This way, routes announced by P-ITR are
   still originated by the authoritative Route Server.  Note that the
   peering relationships between MSP/PSPs and those in the underlying
   forwarding plane may not be congruent, making the AS path to a P-ITR
   shorter than it is in reality.

   The non-LISP site will select the best path towards the EID-prefix,
   according to its local BGP policies.  Since AS-path length is usually
   an important metric for selecting paths, a careful placement of P-ITR
   could significantly reduce path-stretch between LISP and non-LISP
   sites.

   The architecture allows for flexible policies between MSP/PSPs.
   Consider the EID Route Server networks as control plane overlays,
   facilitating the implementation of policies necessary to reflect the
   business relationships between participants.  The results are then
   injected to the common underlying forwarding plane.  For example,
   some MSP/PSPs may agree to exchange EID-Prefixes and only announce
   them to each of their forwarding plane customers.  Global
   reachability of an EID-prefix depends on the MSP the LISP site buys
   service from, and is also subject to agreement between the mentioned
   parties.

   In terms of impact on the DFZ, this architecture results in a slower
   routing table increase for new allocations, since traffic engineering
   will be done at the LISP level.  For existing allocations migrating
   to LISP, the DFZ may decrease since MSPs may be able to aggregate the
   prefixes announced.

   Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix
   deaggregation for traffic engineering purposes, resulting in slower
   routing table increase in the case of new allocations and potential
   decrease for existing ones.  Moreover, MSPs serving different clients
   with adjacent aggregable aggregatable prefixes may lead to additional decrease,
   but quantifying this decrease is subject to future research study.

   The flexibility and scalability of this architecture does not come
   without a cost however: A PSP operator has to establish either
   transit or peering relationships to improve their connectivity.

5.4.  Migration Summary

   The following table presents the expected effects of the different
   transition scenarios during a certain phase on the DFZ routing table
   size:

    Phase            | LISP+BGP     | MSP P-ITR       | PITR-RD
    -----------------+--------------+-----------------+----------------
    Early transition | no change    | slower increase | slower increase
    Late transition  | may decrease | slower increase | slower increase
    LISP Internet    |             considerable decrease

   It is expected that PITR-RD will co-exist with LISP+BGP during the
   migration, with the latter being more popular in the early transition
   phase.  As the transition progresses and the MSP P-ITR and PITR-RD
   ecosystem gets more ubiquitous, LISP+BGP should become less
   attractive, slowing down the increase of the number of routes in the
   DFZ.

6.  Step-by-Step Example BGP to LISP Migration Procedure

6.1.  Customer Pre-Install and Pre-Turn-up Checklist

   1.  Determine how many current physical service provider connections
       the customer has and their existing bandwidth and traffic
       engineering requirements.

       This information will determine the number of routing locators,
       and the priorities and weights that should be configured on the
       xTRs.

   2.  Make sure customer router has LISP capabilities.

       *  Obtain output  Check OS version of 'show version' from the CE router.  If LISP is an add-on,
          check if it is installed.

          This information can be used to determine if the platform is
          appropriate to support LISP, in order to determine if a
          software and/or hardware upgrade is required.

       *  Have customer upgrade (if necessary, software and/or hardware)
          to be LISP capable.

   3.  Obtain current running configuration of CE router.  A suggested
       LISP router configuration example can be customized to the
       customer's existing environment.

   4.  Verify MTU Handling

       *  Request increase in MTU to (1556) 1556 on service provider
          connections.  Prior to MTU change verify that 1500 byte packet
          from P-xTR to RLOC with do not fragment (DF-bit) bit set.

       *  Ensure they are not filtering ICMP unreachable or time-
          exceeded on their firewall or router.

       LISP, like any tunneling protocol, will increase the size of
       packets when the LISP header is appended.  If increasing the MTU
       of the access links is not possible, care must be taken that ICMP
       is not being filtered in order to allow for Path MTU Discovery to
       take place.

   5.  Validate member prefix allocation.

       This step is to check if the prefix used by the customer is a
       direct (Provider Independent), or if it is a prefix assigned by a
       physical service provider (Provider Allocated). Aggregatable).  If the
       prefixes are assigned by other service provivers then a Letter of
       Agreement is required to announce prefixes through the Proxy
       Service Provider.

   6.  Verify the member RLOCs and their reachability.

       This step ensures that the RLOCs configured on the CE router are
       in fact reachable and working.

   7.  Prepare for cut-over.

       *  If possible, have a host outside of all security and filtering
          policies connected to the console port of the edge router or
          switch.

       *  Make sure customer has access to the router in order to
          configure it.

6.2.  Customer Activating LISP Service

   1.  Customer configures LISP on CE router(s) from service provider
       recommended configuration.

       The LISP configuration consists of the EID prefix, the locators,
       and the weights and priorities of the mapping between the two
       values.  In addition, the xTR must be configured with Map- Map
       Resolver(s), Map-Server(s) Map Server(s) and the shared key for registering to
       Map-Server(s).
       Map Server(s).  If required, Proxy-ETR(s) may be configured as
       well.

       In addition to the LISP configuration, the following:

       *  Ensure default route(s) to next-hop external neighbors are
          included and RLOCs are present in configuration.

       *  If two or more routers are used, ensure all RLOCs are included
          in the LISP configuration on all routers.

       *  It will be necessary to redistribute default route via IGP
          between the external routers.

   2.  When transition is ready perform a soft shutdown on existing eBGP
       peer session(s)

       *  From CE router, use LIG to ensure registration is successful.

       *  To verify LISP connectivity, ping LISP connected sites.  See
          http://www.lisp4.net/ and/or http://www.lisp6.net/ for
          potential candidates.  If possible, find ping destinations
          that are not covered by a prefix in the global BGP routing
          system, because PITRs may deliver the packets even if LISP
          connectivity is not working.  Traceroutes may help discover if
          this is the case.

       *  To verify connectivity to non-LISP sites, try accessing a
          landmark (e.g., a major Internet sites site) via a web browser.

6.3.  Cut-Over Provider Preparation and Changes

   1.  Verify site configuration and then active registration on Map- Map
       Server(s)
       *  Authentication key

       *  EID prefix

   2.  Add EID space to map-cache on proxies

   3.  Add networks to BGP advertisement on proxies

       *  Modify route-maps/policies on P-xTRs

       *  Modify route policies on core routers (if non-connected
          member)

       *  Modify ingress policers on core routers

       *  Ensure route announcement in looking glass servers, RouteViews

   4.  Perform traffic verification test

       *  Ensure MTU handling is as expected (PMTUD working)

       *  Ensure proxy-ITR map-cache population

       *  Ensure access from traceroute/ping servers around Internet

       *  Use a looking glass, to check for external visibility of
          registration via several Map-Resolvers Map Resolvers (e.g.,
          http://lispmon.net/).

7.  Security Considerations

   Security implications of LISP deployments are to be discussed in
   separate documents.  [I-D.saucez-lisp-security]  [I-D.ietf-lisp-threats] gives an overview of
   LISP threat models, while securing mapping lookups is discussed in
   [I-D.ietf-lisp-sec].

8.  IANA Considerations

   This memo includes no request to IANA.

9.  Acknowledgements

   Many thanks to Margaret Wasserman for her contribution to the IETF76
   presentation that kickstarted this work.  The authors would also like
   to thank Damien Saucez, Luigi Iannone, Joel Halpern, Vince Fuller,
   Dino Farinacci, Terry Manderson, Noel Chiappa, Hannu Flinck, Paul
   Vinciguerra and everyone else who provided input.

10.  References

10.1.  Normative References

   [I-D.ietf-lisp]

   [RFC6830]  Farinacci, D., Fuller, V., Meyer, D., and D. Lewis,
              "Locator/ID "The
              Locator/ID Separation Protocol (LISP)",
              draft-ietf-lisp-23 (work in progress), May 2012.

   [I-D.ietf-lisp-interworking] RFC 6830,
              January 2013.

   [RFC6832]  Lewis, D., Meyer, D., Farinacci, D., and V. Fuller,
              "Interworking LISP with IPv4 between Locator/ID Separation Protocol
              (LISP) and IPv6",
              draft-ietf-lisp-interworking-06 (work in progress),
              March 2012.

   [I-D.ietf-lisp-ms] Non-LISP Sites", RFC 6832, January 2013.

   [RFC6833]  Fuller, V. and D. Farinacci, "LISP Map Server "Locator/ID Separation
              Protocol (LISP) Map-Server Interface",
              draft-ietf-lisp-ms-16 (work in progress), March 2012. RFC 6833,
              January 2013.

10.2.  Informative References

   [I-D.ietf-lisp-eid-block]
              Iannone, L., Lewis, D., Meyer, D., and V. Fuller, "LISP
              EID Block", draft-ietf-lisp-eid-block-02 draft-ietf-lisp-eid-block-03 (work in
              progress), April November 2012.

   [I-D.ietf-lisp-sec]
              Maino, F., Ermagan, V., Cabellos-Aparicio, A., Saucez, D.,
              and O. Bonaventure, "LISP-Security (LISP-SEC)",
              draft-ietf-lisp-sec-04 (work in progress), October 2012.

   [I-D.saucez-lisp-security]

   [I-D.ietf-lisp-threats]
              Saucez, D., Iannone, L., and O. Bonaventure, "LISP
              Security Threats", draft-saucez-lisp-security-03 Threats
              Analysis", draft-ietf-lisp-threats-03 (work in progress), March 2011.
              October 2012.

   [RFC4459]  Savola, P., "MTU and Fragmentation Issues with In-the-
              Network Tunneling", RFC 4459, April 2006.

   [RFC6834]  Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID
              Separation Protocol (LISP) Map-Versioning", RFC 6834,
              January 2013.

   [cache]    Jung, J., Sit, E., Balakrishnan, H., and R. Morris, "DNS
              performance and the effectiveness of caching", 2002.

Authors' Addresses

   Lorand Jakab
   Technical University of Catalonia
   C/Jordi Girona, s/n
   BARCELONA  08034
   Spain
   Cisco Systems
   170 Tasman Drive
   San Jose, CA  95134
   USA

   Email: ljakab@ac.upc.edu lojakab@cisco.com

   Albert Cabellos-Aparicio
   Technical University of Catalonia
   C/Jordi Girona, s/n
   BARCELONA  08034
   Spain

   Email: acabello@ac.upc.edu

   Florin Coras
   Technical University of Catalonia
   C/Jordi Girona, s/n
   BARCELONA  08034
   Spain

   Email: fcoras@ac.upc.edu

   Jordi Domingo-Pascual
   Technical University of Catalonia
   C/Jordi Girona, s/n
   BARCELONA  08034
   Spain

   Email: jordi.domingo@ac.upc.edu

   Darrel Lewis
   Cisco Systems
   170 Tasman Drive
   San Jose, CA  95134
   USA

   Email: darlewis@cisco.com
--------------070406020305050106060100 Content-Type: text/plain; charset=us-ascii; name="draft-ietf-lisp-deployment-06.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="draft-ietf-lisp-deployment-06.txt" Network Working Group L. Jakab Internet-Draft Cisco Systems Intended status: Informational A. Cabellos-Aparicio Expires: July 28, 2013 F. Coras J. Domingo-Pascual Technical University of Catalonia D. Lewis Cisco Systems January 24, 2013 LISP Network Element Deployment Considerations draft-ietf-lisp-deployment-06.txt Abstract This document discusses the different scenarios for the deployment of the new network elements introduced by the Locator/Identifier Separation Protocol (LISP). Status of this Memo This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet- Drafts is at http://datatracker.ietf.org/drafts/current/. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." This Internet-Draft will expire on July 28, 2013. Copyright Notice Copyright (c) 2013 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect Jakab, et al. Expires July 28, 2013 [Page 1] Internet-Draft LISP Deployment January 2013 to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Tunnel Routers . . . . . . . . . . . . . . . . . . . . . . . . 4 2.1. Customer Edge . . . . . . . . . . . . . . . . . . . . . . 4 2.2. Provider Edge . . . . . . . . . . . . . . . . . . . . . . 5 2.3. Split ITR/ETR . . . . . . . . . . . . . . . . . . . . . . 7 2.4. Inter-Service Provider Traffic Engineering . . . . . . . . 8 2.5. Tunnel Routers Behind NAT . . . . . . . . . . . . . . . . 10 2.5.1. ITR . . . . . . . . . . . . . . . . . . . . . . . . . 10 2.5.2. ETR . . . . . . . . . . . . . . . . . . . . . . . . . 11 2.6. Summary and Feature Matrix . . . . . . . . . . . . . . . . 11 3. Map Resolvers and Map Servers . . . . . . . . . . . . . . . . 11 3.1. Map Servers . . . . . . . . . . . . . . . . . . . . . . . 11 3.2. Map Resolvers . . . . . . . . . . . . . . . . . . . . . . 12 4. Proxy Tunnel Routers . . . . . . . . . . . . . . . . . . . . . 13 4.1. P-ITR . . . . . . . . . . . . . . . . . . . . . . . . . . 13 4.2. P-ETR . . . . . . . . . . . . . . . . . . . . . . . . . . 14 5. Migration to LISP . . . . . . . . . . . . . . . . . . . . . . 15 5.1. LISP+BGP . . . . . . . . . . . . . . . . . . . . . . . . . 15 5.2. Mapping Service Provider (MSP) P-ITR Service . . . . . . . 16 5.3. Proxy-ITR Route Distribution (PITR-RD) . . . . . . . . . . 16 5.4. Migration Summary . . . . . . . . . . . . . . . . . . . . 19 6. Step-by-Step Example BGP to LISP Migration Procedure . . . . . 19 6.1. Customer Pre-Install and Pre-Turn-up Checklist . . . . . . 19 6.2. Customer Activating LISP Service . . . . . . . . . . . . . 21 6.3. Cut-Over Provider Preparation and Changes . . . . . . . . 21 7. Security Considerations . . . . . . . . . . . . . . . . . . . 22 8. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 22 9. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 22 10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 23 10.1. Normative References . . . . . . . . . . . . . . . . . . . 23 10.2. Informative References . . . . . . . . . . . . . . . . . . 23 Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 24 Jakab, et al. Expires July 28, 2013 [Page 2] Internet-Draft LISP Deployment January 2013 1. Introduction The Locator/Identifier Separation Protocol (LISP) addresses the scaling issues of the global Internet routing system by separating the current addressing scheme into Endpoint IDentifiers (EIDs) and Routing LOCators (RLOCs). The main protocol specification [RFC6830] describes how the separation is achieved, which new network elements are introduced, and details the packet formats for the data and control planes. LISP assumes that such separation is between the edge and core and uses a map-and-encap scheme for forwarding. While the boundary between both is not strictly defined, one widely accepted definition places it at the border routers of stub autonomous systems, which may carry a partial or complete default-free zone (DFZ) routing table. The initial design of LISP took this location as a baseline for protocol development. However, the applications of LISP go beyond of just decreasing the size of the DFZ routing table, and include improved multihoming and ingress traffic engineering (TE) support for edge networks, and even individual hosts. Throughout the draft we will use the term LISP site to refer to these networks/hosts behind a LISP Tunnel Router. We formally define it as: LISP site: A single host or a set of network elements in an edge network under the administrative control of a single organization, delimited from other networks by LISP Tunnel Router(s). Network element: Active or passive device that is connected connected to other active or passive devices for transporting packet switched data. Since LISP is a protocol which can be used for different purposes, it is important to identify possible deployment scenarios and the additional requirements they may impose on the protocol specification and other protocols. Additionally, this document is intended as a guide for the operational community for LISP deployments in their networks. It is expected to evolve as LISP deployment progresses, and the described scenarios are better understood or new scenarios are discovered. Each subsection considers an element type, discussing the impact of deployment scenarios on the protocol specification. For definition of terms, please refer to the appropriate documents (as cited in the respective sections). Jakab, et al. Expires July 28, 2013 [Page 3] Internet-Draft LISP Deployment January 2013 2. Tunnel Routers The device that is the gateway between the edge and the core is called Tunnel Router (xTR), performing one or both of two separate functions: 1. Encapsulating packets originating from an end host to be transported over intermediary (transit) networks towards the other end-point of the communication 2. Decapsulating packets entering from intermediary (transit) networks, originated at a remote end host. The first function is performed by an Ingress Tunnel Router (ITR), the second by an Egress Tunnel Router (ETR). Section 8 of the main LISP specification [RFC6830] has a short discussion of where Tunnel Routers can be deployed and some of the associated advantages and disadvantages. This section adds more detail to the scenarios presented there, and provides additional scenarios as well. 2.1. Customer Edge The first scenario we discuss is customer edge, when xTR functionality is placed on the router(s) that connect the LISP site to its upstream(s), but are under its control. As such, this is the most common expected scenario for xTRs, and this document considers it the reference location, comparing the other scenarios to this one. ISP1 ISP2 | | | | +----+ +----+ +--|xTR1|--|xTR2|--+ | +----+ +----+ | | | | LISP site | +------------------+ Figure 1: xTRs at the customer edge From the LISP site perspective the main advantage of this type of deployment (compared to the one described in the next section) is having direct control over its ingress traffic engineering. This makes it easy to set up and maintain active/active, active/backup, or more complex TE policies, without involving third parties. Jakab, et al. Expires July 28, 2013 [Page 4] Internet-Draft LISP Deployment January 2013 Being under the same administrative control, reachability information of all ETRs is easier to synchronize, because the necessary control traffic can be allowed between the locators of the ETRs. A correct synchronous global view of the reachability status is thus available, and the Loc-Status-Bits can be set correctly in the LISP data header of outgoing packets. By placing the tunnel router at the edge of the site, existing internal network configuration does not need to be modified. Firewall rules, router configurations and address assignments inside the LISP site remain unchanged. This helps with incremental deployment and allows a quick upgrade path to LISP. For larger sites with many external connections, distributed in geographically diverse PoPs, and complex internal topology, it may however make more sense to both encapsulate and decapsulate as soon as possible, to benefit from the information in the IGP to choose the best path (see Section 2.3 for a discussion of this scenario). Another thing to consider when placing tunnel routers are MTU issues. Since encapsulating packets increases overhead, the MTU of the end- to-end path may decrease, when encapsulated packets need to travel over segments having close to minimum MTU. Some transit networks are known to provide larger MTU than the typical value of 1500 bytes of popular access technologies used at end hosts (e.g., IEEE 802.3 and 802.11). However, placing the LISP router connecting to such a network at the customer edge could possibly bring up MTU issues, depending on the link type to the provider as opposed to the following scenario. See [RFC4459] for MTU considerations of tunneling protocols. 2.2. Provider Edge The other location at the core-edge boundary for deploying LISP routers is at the Internet service provider edge. The main incentive for this case is that the customer does not have to upgrade the CE router(s), or change the configuration of any equipment. Encapsulation/decapsulation happens in the provider's network, which may be able to serve several customers with a single device. For large ISPs with many residential/business customers asking for LISP this can lead to important savings, since there is no need to upgrade the software (or hardware, if it's the case) at each client's location. Instead, they can upgrade the software (or hardware) on a few PE routers serving the customers. This scenario is depicted in Figure 2. Jakab, et al. Expires July 28, 2013 [Page 5] Internet-Draft LISP Deployment January 2013 +----------+ +------------------+ | ISP1 | | ISP2 | | | | | | +----+ | | +----+ +----+ | +--|xTR1|--+ +--|xTR2|--|xTR3|--+ +----+ +----+ +----+ | | | | | | +--<[LISP site]>---+-------+ Figure 2: xTR at the PE While this approach can make transition easy for customers and may be cheaper for providers, the LISP site looses one of the main benefits of LISP: ingress traffic engineering. Since the provider controls the ETRs, additional complexity would be needed to allow customers to modify their mapping entries. The problem is aggravated when the LISP site is multihomed. Consider the scenario in Figure 2: whenever a change to TE policies is required, the customer contacts both ISP1 and ISP2 to make the necessary changes on the routers (if they provide this possibility). It is however unlikely, that both ISPs will apply changes simultaneously, which may lead to inconsistent state for the mappings of the LISP site. Since the different upstream ISPs are usually competing business entities, the ETRs may even be configured to compete, either to attract all the traffic or to get no traffic. The former will happen if the customer pays per volume, the latter if the connectivity has a fixed price. A solution could be to have the mappings in the Map Server(s), and have their operator give control over the entries to customer, much like in the Domain Name System at the time of this writing. Additionally, since xTR1, xTR2, and xTR3 are in different administrative domains, locator reachability information is unlikely to be exchanged among them, making it difficult to set Loc-Status- Bits (LSB) correctly on encapsulated packets. Because of this, and due to the security concerns about LSB described in [I-D.ietf-lisp-threats] their use is discouraged without verifying ETR reachability through the mapping system or other means. Mapping versioning is another alternative [RFC6834]. Compared to the customer edge scenario, deploying LISP at the provider edge might have the advantage of diminishing potential MTU issues, because the tunnel router is closer to the core, where links typically have higher MTUs than edge network links. Jakab, et al. Expires July 28, 2013 [Page 6] Internet-Draft LISP Deployment January 2013 2.3. Split ITR/ETR In a simple LISP deployment, xTRs are located at the border of the LISP site (see Section 2.1). In this scenario packets are routed inside the domain according to the EID. However, more complex networks may want to route packets according to the destination RLOC. This would enable them to choose the best egress point. The LISP specification separates the ITR and ETR functionality and considers that both entities can be deployed in separated network equipment. ITRs can be deployed closer to the host (i.e., access routers). This way packets are encapsulated as soon as possible, and packets exit the network through the best egress point in terms of BGP policy. In turn, ETRs can be deployed at the border routers of the network, and packets are decapsulated as soon as possible. Once decapsulated, packets are routed based on destination EID, according to internal routing policy. In the following figure we can see an example. The Source (S) transmits packets using its EID and in this particular case packets are encapsulated at ITR_1. The encapsulated packets are routed inside the domain according to the destination RLOC, and can egress the network through the best point (i.e., closer to the RLOC's AS). On the other hand, inbound packets are received by ETR_1 which decapsulates them. Then packets are routed towards S according to the EID, again following the best path. +---------------------------------------+ | | | +-------+ +-------+ +-------+ | | ITR_1 |---------+ | ETR_1 |-RLOC_A--| ISP_A | | +-------+ | +-------+ +-------+ | +-+ | | | | |S| | IGP | | | +-+ | | | | +-------+ | +-------+ +-------+ | | ITR_2 |---------+ | ETR_2 |-RLOC_B--| ISP_B | | +-------+ +-------+ +-------+ | | +---------------------------------------+ Figure 3: Split ITR/ETR Scenario This scenario has a set of implications: o The site must carry at least partial BGP routes in order to choose the best egress point, increasing the complexity of the network. However, this is usually already the case for LISP sites that Jakab, et al. Expires July 28, 2013 [Page 7] Internet-Draft LISP Deployment January 2013 would benefit from this scenario. o If the site is multihomed to different ISPs and any of the upstream ISPs is doing uRPF filtering, this scenario may become impractical. ITRs need to determine the exit ETR, for setting the correct source RLOC in the encapsulation header. This adds complexity and reliability concerns. o In LISP, ITRs set the reachability bits when encapsulating data packets. Hence, ITRs need a mechanism to be aware of the liveness of all ETRs serving their site. o MTU within the site network must be large enough to accommodate encapsulated packets. o In this scenario, each ITR is serving fewer hosts than in the case when it is deployed at the border of the network. It has been shown that cache hit ratio grows logarithmically with the amount of users [cache]. Taking this into account, when ITRs are deployed closer to the host the effectiveness of the mapping cache may be lower (i.e., the miss ratio is higher). Another consequence of this is that the site may transmit a higher amount of Map-Requests, increasing the load on the distributed mapping database. To lower the impact, the site could use a local caching Map Resolver. o By placing the ITRs inside the site, they will still need global RLOCs, and this may add complexity to intra-site routing configuration, and further intra-site issues when there is a change of providers. 2.4. Inter-Service Provider Traffic Engineering With LISP, two LISP sites can route packets among them and control their ingress TE policies. Typically, LISP is seen as applicable to stub networks, however the LISP protocol can also be applied to transit networks recursively. Consider the scenario depicted in Figure 4. Packets originating from the LISP site Stub1, client of ISP_A, with destination Stub4, client of ISP_B, are LISP encapsulated at their entry point into the ISP_A's network. The external IP header now has as the source RLOC an IP from ISP_A's address space and destination RLOC from ISP_B's address space. One or more ASes separate ISP_A from ISP_B. With a single level of LISP encapsulation, Stub4 has control over its ingress traffic. However, at the time of this writing, ISP_B has only BGP tools (such as prefix deaggregation) to control on which of his own upstream or peering links should packets enter. This is either not Jakab, et al. Expires July 28, 2013 [Page 8] Internet-Draft LISP Deployment January 2013 feasible (if fine-grained per-customer control is required, the very specific prefixes may not be propagated) or increases DFZ table size. _.--. Stub1 ... +-------+ ,-'' `--. +-------+ ... Stub3 \ | R_A1|----,' `. ---|R_B1 | / --| R_A2|---( Transit ) | |-- Stub2 .../ | R_A3|-----. ,' ---|R_B2 | \... Stub4 +-------+ `--. _.-' +-------+ ... ISP_A `--'' ISP_B ... Figure 4: Inter-Service provider TE scenario A solution for this is to apply LISP recursively. ISP_A and ISP_B may reach a bilateral agreement to deploy their own private mapping system. ISP_A then encapsulates packets destined for the prefixes of ISP_B, which are listed in the shared mapping system. Note that in this case the packet is double-encapsulated (using R_A1, R_A2 or R_A3 as source and R_B1 or R_B2 as destination in the example above). ISP_B's ETR removes the outer, second layer of LISP encapsulation from the incoming packet, and routes it towards the original RLOC, the ETR of Stub4, which does the final decapsulation. If ISP_A and ISP_B agree to share a private distributed mapping database, both can control their ingress TE without the need of deaggregating prefixes. In this scenario the private database contains RLOC-to-RLOC bindings. The convergence time on the TE policies updates is expected to be fast, since ISPs only have to update/query a mapping to/from the database. This deployment scenario includes two important caveats. First, it is intended to be deployed between only two ISPs (ISP_A and ISP_B in Figure 4). If more than two ISPs use this approach, then the xTRs deployed at the participating ISPs must either query multiple mapping systems, or the ISPs must agree on a common shared mapping system. Second, the scenario is only recommended for ISPs providing connectivity to LISP sites, such that source RLOCs of packets to be reencapsulated belong to said ISP. Otherwise the participating ISPs must register prefixes they do not own in the above mentioned private mapping system. Failure to follow these recommendations may lead to operational and security issues when deploying this scenario. Besides these recommendations, the main disadvantages of this deployment case are: o Extra LISP header is needed. This increases the packet size and requires that the MTU between both ISPs accommodates double- encapsulated packets. Jakab, et al. Expires July 28, 2013 [Page 9] Internet-Draft LISP Deployment January 2013 o The ISP ITR must encapsulate packets and therefore must know the RLOC-to-RLOC binding. These bindings are stored in a mapping database and may be cached in the ITR's mapping cache. Cache misses lead to an additional lookup latency, unless a push based mapping system is used for the private mapping system. o The operational overhead of maintaining the shared mapping database. o If an IPv6 address block is reserved for EID use, as specified in [I-D.ietf-lisp-eid-block], the EID-to-RLOC encapsulation (first level) can avoid LISP processing altogether for non-LISP destinations. The ISP tunnel routers however will not be able to take advantage of this optimization, all RLOC-to-RLOC mappings need a lookup in the private database (or map-cache, once results are cached). 2.5. Tunnel Routers Behind NAT NAT in this section refers to IPv4 network address and port translation. 2.5.1. ITR Packets encapsulated by an ITR are just UDP packets from a NAT device's point of view, and they are handled like any UDP packet, there are no additional requirements for LISP data packets. Map-Requests sent by an ITR, which create the state in the NAT table, have a different 5-tuple in the IP header than the Map-Reply generated by the authoritative ETR. Since the source address of this packet is different from the destination address of the request packet, no state will be matched in the NAT table and the packet will be dropped. To avoid this, the NAT device has to do the following: o Send all UDP packets with source port 4342, regardless of the destination port, to the RLOC of the ITR. The most simple way to achieve this is configuring 1:1 NAT mode from the external RLOC of the NAT device to the ITR's RLOC (Called "DMZ" mode in consumer broadband routers). o Rewrite the ITR-AFI and "Originating ITR RLOC Address" fields in the payload. This setup supports only a single ITR behind the NAT device. Jakab, et al. Expires July 28, 2013 [Page 10] Internet-Draft LISP Deployment January 2013 2.5.2. ETR An ETR placed behind NAT is reachable from the outside by the Internet-facing locator of the NAT device. It needs to know this locator (and configure a loopback interface with it), so that it can use it in Map-Reply and Map-Register messages. Thus support for dynamic locators for the mapping database is needed in LISP equipment. Again, only one ETR behind the NAT device is supported. An implication of the issues described above is that LISP sites with xTRs can not be behind carrier based NATs, since two different sites would collide on the port forwarding. 2.6. Summary and Feature Matrix Feature CE PE Split Recursive ------------------------------------------------------------- Control of ingress TE x - x x No modifications to existing int. network infrastructure x x - - Loc-Status-Bits sync x - x x MTU/PMTUD issues minimized - x - x 3. Map Resolvers and Map Servers 3.1. Map Servers The Map Server learns EID-to-RLOC mapping entries from an authoritative source and publishes them in the distributed mapping database. These entries are learned through authenticated Map- Register messages sent by authoritative ETRs. Also, upon reception of a Map-Request, the Map Server verifies that the destination EID matches an EID-prefix for which it is authoritative for, and then re- encapsulates and forwards it to a matching ETR. Map Server functionality is described in detail in [RFC6833]. The Map Server is provided by a Mapping Service Provider (MSP). The MSP participates in the global distributed mapping database infrastructure, by setting up connections to other participants, according to the specific mapping system that is employed (e.g., ALT, DDT). Participation in the mapping database, and the storing of EID- to-RLOC mapping data is subject to the policies of the "root" operators, who SHOULD check ownership rights for the EID prefixes stored in the database by participants. These policies are out of the scope of this document. Jakab, et al. Expires July 28, 2013 [Page 11] Internet-Draft LISP Deployment January 2013 In all cases, the MSP configures its Map Server(s) to publish the prefixes of its clients in the distributed mapping database and start encapsulating and forwarding Map-Requests to the ETRs of the AS. These ETRs register their prefix(es) with the Map Server(s) through periodic authenticated Map-Register messages. In this context, for some LISP end sites, there is a need for mechanisms to: o Automatically distribute EID prefix(es) shared keys between the ETRs and the EID-registrar Map Server. o Dynamically obtain the address of the Map Server in the ETR of the AS. The Map Server plays a key role in the reachability of the EID- prefixes it is serving. On the one hand it is publishing these prefixes into the distributed mapping database and on the other hand it is encapsulating and forwarding Map-Requests to the authoritative ETRs of these prefixes. ITRs encapsulating towards EIDs under the responsibility of a failed Map Server will be unable to look up any of their covering prefixes. The only exception are the ITRs that already contain the mappings in their local cache. In this case ITRs can reach ETRs until the entry expires (typically 24 hours). For this reason, redundant Map Server deployments are desirable. A set of Map Servers providing high-availability service to the same set of prefixes is called a redundancy group. ETRs are configured to send Map-Register messages to all Map Servers in the redundancy group. To achieve fail-over (or load-balancing, if desired), known mapping system specific best practices should be used. Additionally, if a Map Server has no reachability for any ETR serving a given EID block, it should not originate that block into the mapping system. 3.2. Map Resolvers A Map Resolver a is a network infrastructure component which accepts LISP encapsulated Map-Requests, typically from an ITR, and finds the appropriate EID-to-RLOC mapping by either consulting its local cache or by consulting the distributed mapping database. Map Resolver functionality is described in detail in [RFC6833]. Anyone with access to the distributed mapping database can set up a Map Resolver and provide EID-to-RLOC mapping lookup service. Database access setup is mapping system specific. For performance reasons, it is recommended that LISP sites use Map Resolvers that are topologically close to their ITRs. ISPs supporting LISP will provide this service to their customers, Jakab, et al. Expires July 28, 2013 [Page 12] Internet-Draft LISP Deployment January 2013 possibly restricting access to their user base. LISP sites not in this position can use open access Map Resolvers, if available. However, regardless of the availability of open access resolvers, the MSP providing the Map Server(s) for a LISP site should also make available Map Resolver(s) for the use of that site. In medium to large-size ASes, ITRs must be configured with the RLOC of a Map Resolver, operation which can be done manually. However, in Small Office Home Office (SOHO) scenarios a mechanism for autoconfiguration should be provided. One solution to avoid manual configuration in LISP sites of any size is the use of anycast RLOCs for Map Resolvers similar to the DNS root server infrastructure. Since LISP uses UDP encapsulation, the use of anycast would not affect reliability. LISP routers are then shipped with a preconfigured list of well know Map Resolver RLOCs, which can be edited by the network administrator, if needed. The use of anycast also helps improving mapping lookup performance. Large MSPs can increase the number and geographical diversity of their Map Resolver infrastructure, using a single anycasted RLOC. Once LISP deployment is advanced enough, very large content providers may also be interested running this kind of setup, to ensure minimal connection setup latency for those connecting to their network from LISP sites. While Map Servers and Map Resolvers implement different functionalities within the LISP mapping system, they can coexist on the same device. For example, MSPs offering both services, can deploy a single Map Resolver/Map Server in each PoP where they have a presence. 4. Proxy Tunnel Routers 4.1. P-ITR Proxy Ingress Tunnel Routers (P-ITRs) are part of the non-LISP/LISP transition mechanism, allowing non-LISP sites to reach LISP sites. They announce via BGP certain EID prefixes (aggregated, whenever possible) to attract traffic from non-LISP sites towards EIDs in the covered range. They do the mapping system lookup, and encapsulate received packets towards the appropriate ETR. Note that for the reverse path LISP sites can reach non-LISP sites simply by not encapsulating traffic. See [RFC6832] for a detailed description of P-ITR functionality. The success of new protocols depends greatly on their ability to Jakab, et al. Expires July 28, 2013 [Page 13] Internet-Draft LISP Deployment January 2013 maintain backwards compatibility and inter-operate with the protocol(s) they intend to enhance or replace, and on the incentives to deploy the necessary new software or equipment. A LISP site needs an interworking mechanism to be reachable from non-LISP sites. A P-ITR can fulfill this role, enabling early adopters to see the benefits of LISP, similar to tunnel brokers helping the transition from IPv4 to IPv6. A site benefits from new LISP functionality (proportionally with existing global LISP deployment) when going LISP, so it has the incentives to deploy the necessary tunnel routers. In order to be reachable from non-LISP sites it has two options: keep announcing its prefix(es) with BGP, or have a P-ITR announce prefix(es) covering them. If the goal of reducing the DFZ routing table size is to be reached, the second option is preferred. Moreover, the second option allows LISP-based ingress traffic engineering from all sites. However, the placement of P-ITRs significantly influences performance and deployment incentives. Section 5 is dedicated to the migration to a LISP-enabled Internet, and includes deployment scenarios for P-ITRs. 4.2. P-ETR In contrast to P-ITRs, P-ETRs are not required for the correct functioning of all LISP sites. There are two cases, where they can be of great help: o LISP sites with unicast reverse path forwarding (uRPF) restrictions, and o Communication between sites using different address family RLOCs. In the first case, uRPF filtering is applied at their upstream PE router. When forwarding traffic to non-LISP sites, an ITR does not encapsulate packets, leaving the original IP headers intact. As a result, packets will have EIDs in their source address. Since we are discussing the transition period, we can assume that a prefix covering the EIDs belonging to the LISP site is advertised to the global routing tables by a P-ITR, and the PE router has a route towards it. However, the next hop will not be on the interface towards the CE router, so non-encapsulated packets will fail uRPF checks. To avoid this filtering, the affected ITR encapsulates packets towards the locator of the P-ETR for non-LISP destinations. Now the source address of the packets, as seen by the PE router is the ITR's locator, which will not fail the uRPF check. The P-ETR then decapsulates and forwards the packets. Jakab, et al. Expires July 28, 2013 [Page 14] Internet-Draft LISP Deployment January 2013 The second use case is IPv4-to-IPv6 transition. Service providers using older access network hardware, which only supports IPv4 can still offer IPv6 to their clients, by providing a CPE device running LISP, and P-ETR(s) for accessing IPv6-only non-LISP sites and LISP sites, with IPv6-only locators. Packets originating from the client LISP site for these destinations would be encapsulated towards the P-ETR's IPv4 locator. The P-ETR is in a native IPv6 network, decapsulating and forwarding packets. For non-LISP destination, the packet travels natively from the P-ETR. For LISP destinations with IPv6-only locators, the packet will go through a P-ITR, in order to reach its destination. For more details on P-ETRs see the [RFC6832] draft. P-ETRs can be deployed by ISPs wishing to offer value-added services to their customers. As is the case with P-ITRs, P-ETRs too may introduce path stretch. Because of this the ISP needs to consider the tradeoff of using several devices, close to the customers, to minimize it, or few devices, farther away from the customers, minimizing cost instead. Since the deployment incentives for P-ITRs and P-ETRs are different, it is likely they will be deployed in separate devices, except for the CDN case, which may deploy both in a single device. In all cases, the existence of a P-ETR involves another step in the configuration of a LISP router. CPE routers, which are typically configured by DHCP, stand to benefit most from P-ETRs. Autoconfiguration of the P-ETR locator could be achieved by a DHCP option, or adding a P-ETR field to either Map-Notifys or Map-Replies. 5. Migration to LISP This section discusses a deployment architecture to support the migration to a LISP-enabled Internet. The loosely defined terms of "early transition phase", "late transition phase", and "LISP Internet phase" refer to time periods when LISP sites are a minority, a majority, or represent all edge networks respectively. 5.1. LISP+BGP For sites wishing to go LISP with their PI prefix the least disruptive way is to upgrade their border routers to support LISP, register the prefix into the LISP mapping system, but keep announcing it with BGP as well. This way LISP sites will reach them over LISP, while legacy sites will be unaffected by the change. The main disadvantage of this approach is that no decrease in the DFZ routing Jakab, et al. Expires July 28, 2013 [Page 15] Internet-Draft LISP Deployment January 2013 table size is achieved. Still, just increasing the number of LISP sites is an important gain, as an increasing LISP/non-LISP site ratio will slowly decrease the need for BGP-based traffic engineering that leads to prefix deaggregation. That, in turn, may lead to a decrease in the DFZ size and churn in the late transition phase. This scenario is not limited to sites that already have their prefixes announced with BGP. Newly allocated EID blocks could follow this strategy as well during the early LISP deployment phase, depending on the cost/benefit analysis of the individual networks. Since this leads to an increase in the DFZ size, the following architecture should be preferred for new allocations. 5.2. Mapping Service Provider (MSP) P-ITR Service In addition to publishing their clients' registered prefixes in the mapping system, MSPs with enough transit capacity can offer them P-ITR service as a separate service. This service is especially useful for new PI allocations, to sites without existing BGP infrastructure, that wish to avoid BGP altogether. The MSP announces the prefix into the DFZ, and the client benefits from ingress traffic engineering without prefix deaggregation. The downside of this scenario is adding path stretch. Routing all non-LISP ingress traffic through a third party which is not one of its ISPs is only feasible for sites with modest amounts of traffic (like those using the IPv6 tunnel broker services today), especially in the first stage of the transition to LISP, with a significant number of legacy sites. This is because the handling of said traffic is likely to result in additional costs, which would be passed down to the client. When the LISP/non-LISP site ratio becomes high enough, this approach can prove increasingly attractive. Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix deaggregation for traffic engineering purposes, resulting in slower routing table increase in the case of new allocations and potential decrease for existing ones. Moreover, MSPs serving different clients with adjacent aggregatable prefixes may lead to additional decrease, but quantifying this decrease is subject to future research study. 5.3. Proxy-ITR Route Distribution (PITR-RD) Instead of a LISP site, or the MSP, announcing their EIDs with BGP to the DFZ, this function can be outsourced to a third party, a P-ITR Service Provider (PSP). This will result in a decrease of the operational complexity both at the site and at the MSP. The PSP manages a set of distributed P-ITR(s) that will advertise the Jakab, et al. Expires July 28, 2013 [Page 16] Internet-Draft LISP Deployment January 2013 corresponding EID prefixes through BGP to the DFZ. These P-ITR(s) will then encapsulate the traffic they receive for those EIDs towards the RLOCs of the LISP site, ensuring their reachability from non-LISP sites. Note that handling non-LISP-originated traffic may incur additional costs for the PSP, which may be passed down to the client. While it is possible for a PSP to manually configure each client's EID routes to be announced, this approach offers little flexibility and is not scalable. This section presents a scalable architecture that offers automatic distribution of EID routes to LISP sites and service providers. The architecture requires no modification to existing LISP network elements, but it introduces a new (conceptual) network element, the EID Route Server, defined as a router that either propagates routes learned from other EID Route Servers, or it originates EID Routes. The EID-Routes that it originates are those that it is authoritative for. It propagates these routes to Proxy-ITRs within the AS of the EID Route Server. It is worth to note that a BGP capable router can be also considered as an EID Route Server. Further, an EID-Route is defined as a prefix originated via the Route Server of the mapping service provider, which should be aggregated if the MSP has multiple customers inside a single large continuous prefix. This prefix is propagated to other P-ITRs both within the MSP and to other P-ITR operators it peers with. EID Route Servers are operated either by the LISP site, MSPs or PSPs, and they may be collocated with a Map Server or P-ITR, but are a functionally discrete entity. They distribute EID-Routes, using BGP, to other domains, according to policies set by participants. MSP (AS64500) RS ---> P-ITR | / | _.--./ ,-'' /`--. LISP site ---,' | v `. ( | DFZ )----- Mapping system non-LISP site ----. | ^ ,' `--. / _.-' | `--'' v / P-ITR PSP (AS64501) Figure 5: The P-ITR Route Distribution architecture The architecture described above decouples EID origination from route Jakab, et al. Expires July 28, 2013 [Page 17] Internet-Draft LISP Deployment January 2013 propagation, with the following benefits: o Can accurately represent business relationships between P-ITR operators o More mapping system agnostic o Minor changes to P-ITR implementation, no changes to other components In the example in the figure we have a MSP providing services to the LISP site. The LISP site does not run BGP, and gets an EID allocation directly from a RIR, or from the MSP, who may be a LIR. Existing PI allocations can be migrated as well. The MSP ensures the presence of the prefix in the mapping system, and runs an EID Route Server to distribute it to P-ITR service providers. Since the LISP site does not run BGP, the prefix will be originated with the AS number of the MSP. In the simple case depicted in Figure 5 the EID-Route of LISP Site will be originated by the Route Server, and announced to the DFZ by the PSP's P-ITRs with AS path 64501 64500. From that point on, the usual BGP dynamics apply. This way, routes announced by P-ITR are still originated by the authoritative Route Server. Note that the peering relationships between MSP/PSPs and those in the underlying forwarding plane may not be congruent, making the AS path to a P-ITR shorter than it is in reality. The non-LISP site will select the best path towards the EID-prefix, according to its local BGP policies. Since AS-path length is usually an important metric for selecting paths, a careful placement of P-ITR could significantly reduce path-stretch between LISP and non-LISP sites. The architecture allows for flexible policies between MSP/PSPs. Consider the EID Route Server networks as control plane overlays, facilitating the implementation of policies necessary to reflect the business relationships between participants. The results are then injected to the common underlying forwarding plane. For example, some MSP/PSPs may agree to exchange EID-Prefixes and only announce them to each of their forwarding plane customers. Global reachability of an EID-prefix depends on the MSP the LISP site buys service from, and is also subject to agreement between the mentioned parties. In terms of impact on the DFZ, this architecture results in a slower routing table increase for new allocations, since traffic engineering will be done at the LISP level. For existing allocations migrating Jakab, et al. Expires July 28, 2013 [Page 18] Internet-Draft LISP Deployment January 2013 to LISP, the DFZ may decrease since MSPs may be able to aggregate the prefixes announced. Compared to LISP+BGP, this approach avoids DFZ bloat caused by prefix deaggregation for traffic engineering purposes, resulting in slower routing table increase in the case of new allocations and potential decrease for existing ones. Moreover, MSPs serving different clients with adjacent aggregatable prefixes may lead to additional decrease, but quantifying this decrease is subject to future research study. The flexibility and scalability of this architecture does not come without a cost however: A PSP operator has to establish either transit or peering relationships to improve their connectivity. 5.4. Migration Summary The following table presents the expected effects of the different transition scenarios during a certain phase on the DFZ routing table size: Phase | LISP+BGP | MSP P-ITR | PITR-RD -----------------+--------------+-----------------+---------------- Early transition | no change | slower increase | slower increase Late transition | may decrease | slower increase | slower increase LISP Internet | considerable decrease It is expected that PITR-RD will co-exist with LISP+BGP during the migration, with the latter being more popular in the early transition phase. As the transition progresses and the MSP P-ITR and PITR-RD ecosystem gets more ubiquitous, LISP+BGP should become less attractive, slowing down the increase of the number of routes in the DFZ. 6. Step-by-Step Example BGP to LISP Migration Procedure 6.1. Customer Pre-Install and Pre-Turn-up Checklist 1. Determine how many current physical service provider connections the customer has and their existing bandwidth and traffic engineering requirements. This information will determine the number of routing locators, and the priorities and weights that should be configured on the xTRs. 2. Make sure customer router has LISP capabilities. Jakab, et al. Expires July 28, 2013 [Page 19] Internet-Draft LISP Deployment January 2013 * Check OS version of the CE router. If LISP is an add-on, check if it is installed. This information can be used to determine if the platform is appropriate to support LISP, in order to determine if a software and/or hardware upgrade is required. * Have customer upgrade (if necessary, software and/or hardware) to be LISP capable. 3. Obtain current running configuration of CE router. A suggested LISP router configuration example can be customized to the customer's existing environment. 4. Verify MTU Handling * Request increase in MTU to 1556 on service provider connections. Prior to MTU change verify that 1500 byte packet from P-xTR to RLOC with do not fragment (DF-bit) bit set. * Ensure they are not filtering ICMP unreachable or time- exceeded on their firewall or router. LISP, like any tunneling protocol, will increase the size of packets when the LISP header is appended. If increasing the MTU of the access links is not possible, care must be taken that ICMP is not being filtered in order to allow for Path MTU Discovery to take place. 5. Validate member prefix allocation. This step is to check if the prefix used by the customer is a direct (Provider Independent), or if it is a prefix assigned by a physical service provider (Provider Aggregatable). If the prefixes are assigned by other service provivers then a Letter of Agreement is required to announce prefixes through the Proxy Service Provider. 6. Verify the member RLOCs and their reachability. This step ensures that the RLOCs configured on the CE router are in fact reachable and working. 7. Prepare for cut-over. * If possible, have a host outside of all security and filtering policies connected to the console port of the edge router or switch. Jakab, et al. Expires July 28, 2013 [Page 20] Internet-Draft LISP Deployment January 2013 * Make sure customer has access to the router in order to configure it. 6.2. Customer Activating LISP Service 1. Customer configures LISP on CE router(s) from service provider recommended configuration. The LISP configuration consists of the EID prefix, the locators, and the weights and priorities of the mapping between the two values. In addition, the xTR must be configured with Map Resolver(s), Map Server(s) and the shared key for registering to Map Server(s). If required, Proxy-ETR(s) may be configured as well. In addition to the LISP configuration, the following: * Ensure default route(s) to next-hop external neighbors are included and RLOCs are present in configuration. * If two or more routers are used, ensure all RLOCs are included in the LISP configuration on all routers. * It will be necessary to redistribute default route via IGP between the external routers. 2. When transition is ready perform a soft shutdown on existing eBGP peer session(s) * From CE router, use LIG to ensure registration is successful. * To verify LISP connectivity, ping LISP connected sites. See http://www.lisp4.net/ and/or http://www.lisp6.net/ for potential candidates. If possible, find ping destinations that are not covered by a prefix in the global BGP routing system, because PITRs may deliver the packets even if LISP connectivity is not working. Traceroutes may help discover if this is the case. * To verify connectivity to non-LISP sites, try accessing a landmark (e.g., a major Internet site) via a web browser. 6.3. Cut-Over Provider Preparation and Changes 1. Verify site configuration and then active registration on Map Server(s) Jakab, et al. Expires July 28, 2013 [Page 21] Internet-Draft LISP Deployment January 2013 * Authentication key * EID prefix 2. Add EID space to map-cache on proxies 3. Add networks to BGP advertisement on proxies * Modify route-maps/policies on P-xTRs * Modify route policies on core routers (if non-connected member) * Modify ingress policers on core routers * Ensure route announcement in looking glass servers, RouteViews 4. Perform traffic verification test * Ensure MTU handling is as expected (PMTUD working) * Ensure proxy-ITR map-cache population * Ensure access from traceroute/ping servers around Internet * Use a looking glass, to check for external visibility of registration via several Map Resolvers (e.g., http://lispmon.net/). 7. Security Considerations Security implications of LISP deployments are to be discussed in separate documents. [I-D.ietf-lisp-threats] gives an overview of LISP threat models, while securing mapping lookups is discussed in [I-D.ietf-lisp-sec]. 8. IANA Considerations This memo includes no request to IANA. 9. Acknowledgements Many thanks to Margaret Wasserman for her contribution to the IETF76 presentation that kickstarted this work. The authors would also like to thank Damien Saucez, Luigi Iannone, Joel Halpern, Vince Fuller, Jakab, et al. Expires July 28, 2013 [Page 22] Internet-Draft LISP Deployment January 2013 Dino Farinacci, Terry Manderson, Noel Chiappa, Hannu Flinck, Paul Vinciguerra and everyone else who provided input. 10. References 10.1. Normative References [RFC6830] Farinacci, D., Fuller, V., Meyer, D., and D. Lewis, "The Locator/ID Separation Protocol (LISP)", RFC 6830, January 2013. [RFC6832] Lewis, D., Meyer, D., Farinacci, D., and V. Fuller, "Interworking between Locator/ID Separation Protocol (LISP) and Non-LISP Sites", RFC 6832, January 2013. [RFC6833] Fuller, V. and D. Farinacci, "Locator/ID Separation Protocol (LISP) Map-Server Interface", RFC 6833, January 2013. 10.2. Informative References [I-D.ietf-lisp-eid-block] Iannone, L., Lewis, D., Meyer, D., and V. Fuller, "LISP EID Block", draft-ietf-lisp-eid-block-03 (work in progress), November 2012. [I-D.ietf-lisp-sec] Maino, F., Ermagan, V., Cabellos-Aparicio, A., Saucez, D., and O. Bonaventure, "LISP-Security (LISP-SEC)", draft-ietf-lisp-sec-04 (work in progress), October 2012. [I-D.ietf-lisp-threats] Saucez, D., Iannone, L., and O. Bonaventure, "LISP Threats Analysis", draft-ietf-lisp-threats-03 (work in progress), October 2012. [RFC4459] Savola, P., "MTU and Fragmentation Issues with In-the- Network Tunneling", RFC 4459, April 2006. [RFC6834] Iannone, L., Saucez, D., and O. Bonaventure, "Locator/ID Separation Protocol (LISP) Map-Versioning", RFC 6834, January 2013. [cache] Jung, J., Sit, E., Balakrishnan, H., and R. Morris, "DNS performance and the effectiveness of caching", 2002. Jakab, et al. Expires July 28, 2013 [Page 23] Internet-Draft LISP Deployment January 2013 Authors' Addresses Lorand Jakab Cisco Systems 170 Tasman Drive San Jose, CA 95134 USA Email: lojakab@cisco.com Albert Cabellos-Aparicio Technical University of Catalonia C/Jordi Girona, s/n BARCELONA 08034 Spain Email: acabello@ac.upc.edu Florin Coras Technical University of Catalonia C/Jordi Girona, s/n BARCELONA 08034 Spain Email: fcoras@ac.upc.edu Jordi Domingo-Pascual Technical University of Catalonia C/Jordi Girona, s/n BARCELONA 08034 Spain Email: jordi.domingo@ac.upc.edu Darrel Lewis Cisco Systems 170 Tasman Drive San Jose, CA 95134 USA Email: darlewis@cisco.com Jakab, et al. Expires July 28, 2013 [Page 24] --------------070406020305050106060100-- From internet-drafts@ietf.org Fri Jan 25 14:07:36 2013 Return-Path: X-Original-To: lisp@ietfa.amsl.com Delivered-To: lisp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B784121F88AE; Fri, 25 Jan 2013 14:07:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.498 X-Spam-Level: X-Spam-Status: No, score=-102.498 tagged_above=-999 required=5 tests=[AWL=0.101, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mPfdISLFW+Yj; Fri, 25 Jan 2013 14:07:36 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 409E121F88B0; Fri, 25 Jan 2013 14:07:35 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.37 Message-ID: <20130125220735.21522.7931.idtracker@ietfa.amsl.com> Date: Fri, 25 Jan 2013 14:07:35 -0800 Cc: lisp@ietf.org Subject: [lisp] I-D Action: draft-ietf-lisp-deployment-06.txt X-BeenThere: lisp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: List for the discussion of the Locator/ID Separation Protocol List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jan 2013 22:07:36 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Locator/ID Separation Protocol Working Gr= oup of the IETF. Title : LISP Network Element Deployment Considerations Author(s) : Lorand Jakab Albert Cabellos-Aparicio Florin Coras Jordi Domingo-Pascual Darrel Lewis Filename : draft-ietf-lisp-deployment-06.txt Pages : 24 Date : 2013-01-25 Abstract: This document discusses the different scenarios for the deployment of the new network elements introduced by the Locator/Identifier Separation Protocol (LISP). The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-lisp-deployment There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-lisp-deployment-06 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-lisp-deployment-06 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/