From nobody Fri Apr 1 02:21:09 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1155B12D0ED for ; Fri, 1 Apr 2016 02:21:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MyMFSiTE8CDo for ; Fri, 1 Apr 2016 02:21:06 -0700 (PDT) Received: from mail-pa0-x22f.google.com (mail-pa0-x22f.google.com [IPv6:2607:f8b0:400e:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81D9512D0EA for ; Fri, 1 Apr 2016 02:21:06 -0700 (PDT) Received: by mail-pa0-x22f.google.com with SMTP id tt10so86578788pab.3 for ; Fri, 01 Apr 2016 02:21:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=72Qj8ctdBL0q85ogXu80ovr/wAYC+HPpOBr15pYp598=; b=X+xymfTf7Nfjs/qNtCSio3Tq+e02k6naPdqPBAP+QdE+zfOb6Ycttkt7RQvGTL0NdB YNsEqWrNYimyTgwqOyTR02sX8t7et4dLkPj1e+vAwzA33dxpxK5KBHTYNXuWvXsBARy8 AryA6HEZmyS0Ipkq9ivmnUHV5/uz4s9mvo+p4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=72Qj8ctdBL0q85ogXu80ovr/wAYC+HPpOBr15pYp598=; b=XCBq1IQTx9nb14pI4gJV1iUnO302OLcVVye8e1ce6iXIey+WlZu01elBBFQw5cmFcA TskEGJKtnA2uMCGszH5j/0P9csLIJsaxyHwzyqe7RMvjhf/NkFYBL0zWAlwofi/PsNJ0 dYWplqOLJ35eKuK7fSQcyE968ZPqwnB3EnHBh1ueD2+STjlqOjgFz0lbfpLQpZ2kJ569 ykoDBlS5xXCkIqPA3pPx9r2vIztACrn++CjVXvrUoVd3N6uSfa2szmPSeSV9+JNl+oaQ TSd/t4A9HTrKyT53+DZM+Jh0i12fjwdX1r8wtyEi8ZCFKEy5g4Y0uuC5ej2JpvyBTLsL 52sQ== X-Gm-Message-State: AD7BkJLS4wrN8t/gTAgJHhEtDCBW+tK7ManZhrmPaq9zabr3nxopxSZhBVQHzwR53UyBj7su X-Received: by 10.66.141.76 with SMTP id rm12mr29548090pab.30.1459502466130; Fri, 01 Apr 2016 02:21:06 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id dy6sm19062210pab.48.2016.04.01.02.21.04 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 02:21:04 -0700 (PDT) From: "Roland Dobbins" To: "dots@ietf.org" Date: Fri, 01 Apr 2016 16:21:01 +0700 Message-ID: <4A9652CA-C1E7-4367-BCAE-BCCEDDD51396@arbor.net> In-Reply-To: <56FDFF5D.8080808@nttv6.jp> References: <359EC4B99E040048A7131E0F4E113AFCD96F75B8@marathon> <794C446F-DDB2-4583-A9A9-7ACE67C0192A@arbor.net> <359EC4B99E040048A7131E0F4E113AFCD96F992C@marathon> <56FDFF5D.8080808@nttv6.jp> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] Unique use cases X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 09:21:08 -0000 On 1 Apr 2016, at 11:55, kaname nishizuka wrote: > Hence, it causes a coordination problem like how to determine the > range of the protection they cover. There is no coordination problem with regards to coverage scope - that's decided on the DOTS client side via out-of-band policies and administrative procedures. ----------------------------------- Roland Dobbins From nobody Fri Apr 1 02:30:08 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1153912D096 for ; Fri, 1 Apr 2016 02:30:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pgT3sJZBVwQT for ; Fri, 1 Apr 2016 02:30:05 -0700 (PDT) Received: from mail-pf0-x234.google.com (mail-pf0-x234.google.com [IPv6:2607:f8b0:400e:c00::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24E5112D0EA for ; Fri, 1 Apr 2016 02:30:01 -0700 (PDT) Received: by mail-pf0-x234.google.com with SMTP id x3so90645892pfb.1 for ; Fri, 01 Apr 2016 02:30:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=E/n6U6uIgLkwu1BxDtCbyp3OOggykF8ifzLzBu+3iMA=; b=RGsjG2HyAChynAnrLkj5Y7xKv4k3MdlwrxbDlIXVNm8b3NJUsjAfhsk+ofML5+mMBV DgeHOZaUdwGPjMzjq8UhGD1MVw6eZCgFY7K8Lza2AghlN43Xk2Cp27P6sqVPqVW3Xzxh EHNpdWNGCyP9I7GKJkDx+03dhEl5JX2FDrHn4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=E/n6U6uIgLkwu1BxDtCbyp3OOggykF8ifzLzBu+3iMA=; b=FjEbqex/H91xXa6pXrVOWj6DLIFhitbr+YYoFY+Jxgf9TJyEzobv5aAKlesWuaV89u +IrAC8rdnil7YBEWRaJq/VGx1Ko4DtqvRV0UwtyMd/b/HigdWgokWbjaM7ouIUr5uXar 58vKe+CeEGJN5AXuZtKBXNjW6IPhWl6DzZKpnGlUjA3mDmV2hXdkrEyFv//ATFZR532x hBkPhZ5O5v+WBAc+b2G7GMpDilypvRAFEfFEzlc1KBREvzUS5f/X9HG59/jxlA5JJkbc St9v4R8t8P/NiX5lag1Go610kQq1w9bz/6qM5jGQuAfOPydIBGjPBC5Hr8Cgn3OiIRVG f7WQ== X-Gm-Message-State: AD7BkJIjOGj/BQOx+VSzI+oXCTcoB4d8U82VxNmu2aSUg68HH/IS8ItLBeBRY9Amufdqg8pY X-Received: by 10.98.70.197 with SMTP id o66mr29360340pfi.84.1459503000729; Fri, 01 Apr 2016 02:30:00 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id ak9sm18133776pac.13.2016.04.01.02.29.59 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 02:29:59 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 16:29:57 +0700 Message-ID: In-Reply-To: <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> MIME-Version: 1.0 X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 09:30:07 -0000 On 1 Apr 2016, at 9:56, Tirumaleswar Reddy (tireddy) wrote: > What is the use case for DOTS relay operated by some other entity ? I'm having a hard time coming up with this one, as well. ----------------------------------- Roland Dobbins From nobody Fri Apr 1 05:37:29 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 143FD12D10A for ; Fri, 1 Apr 2016 05:37:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fnyCPFvn5HGQ for ; Fri, 1 Apr 2016 05:37:27 -0700 (PDT) Received: from mail-io0-x236.google.com (mail-io0-x236.google.com [IPv6:2607:f8b0:4001:c06::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B3A012D58F for ; Fri, 1 Apr 2016 05:37:19 -0700 (PDT) Received: by mail-io0-x236.google.com with SMTP id e3so149871894ioa.1 for ; Fri, 01 Apr 2016 05:37:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=V/16RaYA5AhGnOwR5FAoyydD7smJ/SL1GgfHGphc1gY=; b=falpOZZliO9UlMkLWGvDiAEwc8YZe/zhhOMIioYh12VmGUqDpWRPESFI2s9MIVWn87 EYSn7jUIgGQMX/WhzArgDqUbmQuZ9bp5nqn76cYWUbMf1XWYd7nPL05xoj3meJTy661g k1B4GxVt/Z0TjBGNHzX1VzIZSupKlBQXMrWD0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=V/16RaYA5AhGnOwR5FAoyydD7smJ/SL1GgfHGphc1gY=; b=kQ/5UwHPiJufa7ZSwLaDxpkAYuBHSmDOXYd3RzygIKWWxSjO1ZMt+nlqZsi6wyMLaK TF3fG/aW92SRGV8coUAuizRvv1Fzavail7inJ9vOy2lkUE4ibpLvJj3IuNs4BemAaTnX r9pdUHSXt0ia75pfbKOPktEQ7+WW7EjO48pYkcqJI94cV6S/5rlgAQWb4q4rwKXwjid7 shc162jbyhOy6YN+AkzSSwSms8uruDJe/r0OCp41HWfcSO3I5j4tmzcsxSJ/VYzszDml jmBUtbOELa/eNi5kIySgETiw9jHloyJGgcp8tktEH7z/79LFZytA+WEHqHqKGqTDwHwx oKkQ== X-Gm-Message-State: AD7BkJJfnv7tqvUULFodf9ifzI2z2x1PPcjIlm7MXenU7Xjri6TtlIZ/9StVL1Lg0JRrKQOe X-Received: by 10.107.14.196 with SMTP id 187mr4116219ioo.134.1459514238701; Fri, 01 Apr 2016 05:37:18 -0700 (PDT) Received: from [192.168.1.157] ([24.236.153.126]) by smtp.gmail.com with ESMTPSA id a8sm12102557iga.19.2016.04.01.05.37.17 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 01 Apr 2016 05:37:18 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Andrew Mortensen In-Reply-To: Date: Fri, 1 Apr 2016 08:37:16 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> To: Roland Dobbins X-Mailer: Apple Mail (2.3124) Archived-At: Cc: dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 12:37:29 -0000 > On Apr 1, 2016, at 5:29 AM, Roland Dobbins wrote: >=20 > On 1 Apr 2016, at 9:56, Tirumaleswar Reddy (tireddy) wrote: >=20 >> What is the use case for DOTS relay operated by some other entity ? >=20 > I'm having a hard time coming up with this one, as well. Yes, this was precisely my point about the utility of multiple DOTS = relays in the signaling path when those relays are not owned by the = entity originating the request for mitigation or the entity acting on = the request for mitigation. In the case where a mitigating entity needs = to be backstopped to handle abnormally large attacks, the recursive = signaling mode seems most apt. andrew= From nobody Fri Apr 1 05:54:24 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB84112D5BF for ; Fri, 1 Apr 2016 05:54:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=verisign-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ccc_hYiF-Kf9 for ; Fri, 1 Apr 2016 05:54:21 -0700 (PDT) Received: from mail-qg0-x262.google.com (mail-qg0-x262.google.com [IPv6:2607:f8b0:400d:c04::262]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 503B612D5CA for ; Fri, 1 Apr 2016 05:54:20 -0700 (PDT) Received: by mail-qg0-x262.google.com with SMTP id x10so9013792qgx.1 for ; Fri, 01 Apr 2016 05:54:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verisign-com.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:thread-topic:thread-index:date:message-id :references:in-reply-to:accept-language:content-language:user-agent :content-id:content-transfer-encoding:mime-version; bh=onO1eButJ2dCQTu5vfzl2FiRA7CE8zzCSx7KbhHc6rk=; b=hXI77BgNix+lWsXHh011exy94ZlsZq6nLYyT9rODf4viVaYHidffCrTjr9KCeYhLGX ZmQgOsg+VUOXcaJaZ6pEJndJFBu7kxujWJgr2H2f5HCLblXKkZvTAevn1rj4WqzhLvZg OV4ee6/xkmDvk2N5oLtAZ/rcRSjcb9XpDt28IOC3x4qohuSCC0b3562P9x8Q+bXZL6CC fhC7suClOze9nJlLZqz/ct1cyMRJ53gorvrRyLgJVUzhctU2pQXHUoOz1C2Tdskd1ZpP B15TtpvUr8Z+ioKalQoVgvBFHsj0Ki6wha77M8+T5MrQzrIU8IBUcx4R/Rvhc+hZqhiY 7Caw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:thread-topic:thread-index :date:message-id:references:in-reply-to:accept-language :content-language:user-agent:content-id:content-transfer-encoding :mime-version; bh=onO1eButJ2dCQTu5vfzl2FiRA7CE8zzCSx7KbhHc6rk=; b=PAz4WSSuV16vL3r2v015+HFFk0iv9j9P8vjKKo2FdHLaWi6ZfKgC6vrED+Xzmm/cVy JWlB3ApqBnwk0teoWe+ju/2VwZheYAlepm26qdFB7e8RZx9yA/RW889/NdDEfX7TXGjr gjuXkC/ELwYtTLdRggOMhvCYOz0vGj462RKrbdkuU5xS+VCIab8QZBRPRJRZQEpe17eb SLHvYKEk8nFPC9j4puIaHNZBOXns/giQ25CzQzM9Vmo6rj1u4wK3z+HlAlPFYQZU/wBY oEuehHwJ78/07nlXi0WeO4MXQKLfEFfDp/fJwQY26WKES0hGfyvqjLnUs0ghIozVk84a qySg== X-Gm-Message-State: AD7BkJJDDpFoHLegBTX7Rb26lmshoQYW8XHNjpKqDfBNNqrN25OTigb0F5LCdFVlGw5t8F6eHYb5ak9zObIDf5RbBMPGtZO2 X-Received: by 10.140.22.212 with SMTP id 78mr24880376qgn.77.1459515259228; Fri, 01 Apr 2016 05:54:19 -0700 (PDT) Received: from brn1lxmailout01.verisign.com (brn1lxmailout01.verisign.com. [72.13.63.41]) by smtp-relay.gmail.com with ESMTPS id d3sm2164647qkb.3.2016.04.01.05.54.18 (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 05:54:19 -0700 (PDT) X-Relaying-Domain: verisign.com Received: from brn1wnexcas01.vcorp.ad.vrsn.com (brn1wnexcas01 [10.173.152.205]) by brn1lxmailout01.verisign.com (8.13.8/8.13.8) with ESMTP id u31CsInf018770 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 1 Apr 2016 08:54:18 -0400 Received: from BRN1WNEXMBX01.vcorp.ad.vrsn.com ([::1]) by brn1wnexcas01.vcorp.ad.vrsn.com ([::1]) with mapi id 14.03.0174.001; Fri, 1 Apr 2016 08:54:18 -0400 From: "Teague, Nik" To: Andrew Mortensen , Roland Dobbins Thread-Topic: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt Thread-Index: AQHRh2dkNI8SLVO+O0i2OSPVMdPpl59tXUQAgAanQACAABY9AIAAGf4AgACD0YCAAG3LgIAANFYAgAAVgQA= Date: Fri, 1 Apr 2016 12:54:17 +0000 Message-ID: <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> In-Reply-To: <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/0.0.0.160212 x-originating-ip: [10.173.152.4] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 12:54:23 -0000 T24gMDEvMDQvMjAxNiAxMzozNywgIkRvdHMgb24gYmVoYWxmIG9mIEFuZHJldyBNb3J0ZW5zZW4i IDxkb3RzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGFtb3J0ZW5zZW5AYXJib3IubmV0 PiB3cm90ZToNCg0KDQo+Pg0KPj5PbiBBcHIgMSwgMjAxNiwgYXQgNToyOSBBTSwgUm9sYW5kIERv YmJpbnMgPHJkb2JiaW5zQGFyYm9yLm5ldD4gd3JvdGU6DQo+Pk9uIDEgQXByIDIwMTYsIGF0IDk6 NTYsIFRpcnVtYWxlc3dhciBSZWRkeSAodGlyZWRkeSkgd3JvdGU6DQo+Pj5XaGF0IGlzIHRoZSB1 c2UgY2FzZSBmb3IgRE9UUyByZWxheSBvcGVyYXRlZCBieSBzb21lIG90aGVyIGVudGl0eSA/DQo+ PkknbSBoYXZpbmcgYSBoYXJkIHRpbWUgY29taW5nIHVwIHdpdGggdGhpcyBvbmUsIGFzIHdlbGwu DQo+DQo+WWVzLCB0aGlzIHdhcyBwcmVjaXNlbHkgbXkgcG9pbnQgYWJvdXQgdGhlIHV0aWxpdHkg b2YgbXVsdGlwbGUgRE9UUyByZWxheXMgaW4gdGhlIHNpZ25hbGluZyBwYXRoIHdoZW4gdGhvc2Ug cmVsYXlzIGFyZSBub3Qgb3duZWQgYnkgdGhlIGVudGl0eSBvcmlnaW5hdGluZyB0aGUgcmVxdWVz dCBmb3IgbWl0aWdhdGlvbiBvciB0aGUgZW50aXR5IGFjdGluZyBvbiB0aGUgcmVxdWVzdCBmb3Ig bWl0aWdhdGlvbi4gSW4gdGhlIGNhc2Ugd2hlcmUgYSBtaXRpZ2F0aW5nIGVudGl0eSBuZWVkcyB0 byBiZSBiYWNrc3RvcHBlZCB0byBoYW5kbGUgYWJub3JtYWxseSBsYXJnZSBhdHRhY2tzLCB0aGUg cmVjdXJzaXZlIHNpZ25hbGluZyBtb2RlIHNlZW1zIG1vc3QgYXB0Lg0KDQpJIGFncmVlIC0gdGhl IHJlbGF5IG91dHNpZGUgb2YgdGhlIHR3byBjb250ZXh0cyBsaXN0ZWQgYmVjb21lcyBwcm9ibGVt YXRpYy4gIA0KDQpUaGFua3MsDQoNCi1OaWsNCg== From nobody Fri Apr 1 07:01:56 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 864F612D5F2 for ; Fri, 1 Apr 2016 07:01:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5hohhbv6P-21 for ; Fri, 1 Apr 2016 07:01:46 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6932012D59D for ; Fri, 1 Apr 2016 07:01:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1302; q=dns/txt; s=iport; t=1459519306; x=1460728906; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=uxDuQCJc62pT3T763TpDOh/aVPLn1htsyTFPSYoOcGM=; b=kOkHX0aOFc0qLL/kp5bZptnI8hMcJDhXOp0eEfXmPIdbk8MMPcjvT5Na 2MsZWae0uDsuBTZQ+EmEwUdcS92HwI6CbsBkFE4R270w21YHsSJvWmuLX CgTKOvWL956iBZ7gsua+7KTg+hzTnw5uxaCzUNFfAgSn3+GAijiqQXjnS M=; X-IronPort-AV: E=Sophos;i="5.24,427,1454976000"; d="scan'208";a="254364475" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by alln-iport-5.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 01 Apr 2016 14:01:45 +0000 Received: from [10.98.149.198] (bxb-fandreas-8815.cisco.com [10.98.149.198]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id u31E1iYH027756; Fri, 1 Apr 2016 14:01:44 GMT To: "Tirumaleswar Reddy (tireddy)" , Roland Dobbins , dots References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> From: Flemming Andreasen Message-ID: <56FE7F48.9080701@cisco.com> Date: Fri, 1 Apr 2016 10:01:44 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:01:50 -0000 On 3/31/16 10:56 PM, Tirumaleswar Reddy (tireddy) wrote: >> Confidentiality and privacy concerns would be the typical considerations >> here, especially if we get into hosted or tiered services scenarios where the >> DOTS relay may not be owned by the same entity as who is requesting >> and/or providing the service. Consider for example a case where we the >> DOTS client needs to provide the DOTS server with keying material in order >> for the DDoS mitigation service to properly deal with TLS flows. > I have assumed DOTS relay is either owned by the DOTS client or DOTS server. What is the use case for DOTS relay operated by some other entity ? Inter-domain use cases, e.g. distributed/coordinated DDoS mitigation and/or the initial mitigation provider getting help from another entity. > DOTS relay is not transparent proxy, so DOTS client and DOTS relay will have to perform mutual authentication, At what level ? Transport/Session (e.g. TLS/DTLS) and/or App (DOTS) ? > and DOTS relay and DOTS server will have to perform mutual authentication. If the DOTS relay is not trusted then the DOTS client will not reveal the private keys to the DOTS relay. So you are arguing for hop-by-hop security and not end-to-end ? -- Flemming > -Tiru > >> -- Flemming >> > . > From nobody Fri Apr 1 07:07:56 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7645612D5F1 for ; Fri, 1 Apr 2016 07:07:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vxVEbOndV6qt for ; Fri, 1 Apr 2016 07:07:51 -0700 (PDT) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3AE1312D59D for ; Fri, 1 Apr 2016 07:07:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1624; q=dns/txt; s=iport; t=1459519671; x=1460729271; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=Yf/KywZi5KID5+r5vARsHu8M4UhmlEWCafcll35wk8c=; b=Oh9RrDuKiukrLk0II9wud2VrYooXW5GU0s6uHF0/smp87strPYlbBdyN xuHP88EEhc0Kphf4+thsShWk05WdjK7A5v4bWt+LuumA/eaki6lR28A+7 67lRBGFhe2pVSiQqaZJUX4fNuxDPLnqxON6BU585bO6axIwwXkaPpV1B/ s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D4AQAegP5W/4UNJK1dg0GBULsWAQ2Bc?= =?us-ascii?q?oYNAoFDOBQBAQEBAQEBZSeEQgEBBDg/AQEQCxIGCRYPCQMCAQIBNw4GAQwGAgE?= =?us-ascii?q?BiCPEJgEBAQEBAQEBAQEBAQEBAQEBARiGHoRGhCaFbgEEl3mOCIk4hVWPGB4BA?= =?us-ascii?q?UKCMoFRIDCIZgEBAQ?= X-IronPort-AV: E=Sophos;i="5.24,427,1454976000"; d="scan'208";a="87140061" Received: from alln-core-11.cisco.com ([173.36.13.133]) by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 01 Apr 2016 14:07:50 +0000 Received: from [10.98.149.198] (bxb-fandreas-8815.cisco.com [10.98.149.198]) by alln-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id u31E7nPx017754; Fri, 1 Apr 2016 14:07:49 GMT To: "Teague, Nik" , Andrew Mortensen , Roland Dobbins References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> From: Flemming Andreasen Message-ID: <56FE80B4.2090609@cisco.com> Date: Fri, 1 Apr 2016 10:07:48 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:07:55 -0000 On 4/1/16 8:54 AM, Teague, Nik wrote: > On 01/04/2016 13:37, "Dots on behalf of Andrew Mortensen" wrote: > > >>> On Apr 1, 2016, at 5:29 AM, Roland Dobbins wrote: >>> On 1 Apr 2016, at 9:56, Tirumaleswar Reddy (tireddy) wrote: >>>> What is the use case for DOTS relay operated by some other entity ? >>> I'm having a hard time coming up with this one, as well. >> Yes, this was precisely my point about the utility of multiple DOTS relays in the signaling path when those relays are not owned by the entity originating the request for mitigation or the entity acting on the request for mitigation. In the case where a mitigating entity needs to be backstopped to handle abnormally large attacks, the recursive signaling mode seems most apt. > I agree - the relay outside of the two contexts listed becomes problematic. From a privacy/confidentiality point of view, I'm not sure I see a lot of difference between a relay and a server+client if they each are forwarding sensitive information to a third party that the attack target had not signed up with initially. You could deal with this in different ways: - Part of the service agreement with the DOTS provider (i.e. out of scope of DOTS) - Have a way of separating/indicating in the DOTS signaling whether certain information can be shared with other parties or not. It seems desirable for DOTS to support a distributed inter-domain model, however I do believe you have to handle privacy/confidentiality concerns as part of that. Thanks -- Flemming From nobody Fri Apr 1 07:23:44 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAAB912D5FE for ; Fri, 1 Apr 2016 07:23:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HMr1fv5OFx1O for ; Fri, 1 Apr 2016 07:23:41 -0700 (PDT) Received: from mail-pa0-x232.google.com (mail-pa0-x232.google.com [IPv6:2607:f8b0:400e:c03::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9704412D5F8 for ; Fri, 1 Apr 2016 07:23:40 -0700 (PDT) Received: by mail-pa0-x232.google.com with SMTP id zm5so91559383pac.0 for ; Fri, 01 Apr 2016 07:23:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=HnLmDI0woeyfLHuervASzv/LK2CcSMdsLKyRTZyhiXE=; b=W/riQnCwfVB7Ztf4Jnu+Y6zxwcnaDTVUKxAcaYHI4E498y71Rfk3F+MCbOsBcJnn/R vMfPscwu422UMTSxB57ZtFLqJ+NOzfZ/nP+dNbhhnnclVZmEQDuWvStBNQnjDuPhmTtf c76VHuKrr6Xl6OEa3ZNn2m05dE0OfZobfcLKA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=HnLmDI0woeyfLHuervASzv/LK2CcSMdsLKyRTZyhiXE=; b=UHkoDjraw2GPnmwFV1j2cjHWC2piQ6OM+3RDzIAx3k3TsijC+lGVDLrM9o9cW8jWlk pvRp3Uycuy2vOGlw/d7DqJ+0+SXgykUhB7Jh73G4yDi8jdC/CQyTF6qD3puhkIteobMX w6HLWfZzGV9t9k7qpSFAK+BuElKUUR9iqn1kO6lMaaNpt+XwdeY4gFXKWWL+rJMPjqma Bf+xiLUjlzkoCvXQLeDTXbYPhWEeYyySETty6uUz5ONUixX9P7an1L/MG5rSDSjnks4p 5JH3IzDgFv3CEW+ANA2kfXIy/DMJXIGMscm50a5J7XbcNabFzIWKJlyYvrKPn1SPkgrW /MKg== X-Gm-Message-State: AD7BkJLQn7O9sjTkGVTeBUhTmojfYS6EhTph4ZW1BDx2lgAvCdxGQQ5NuyQhjYRG24LwN35v X-Received: by 10.66.66.135 with SMTP id f7mr1760125pat.155.1459520620069; Fri, 01 Apr 2016 07:23:40 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id fn3sm21312352pab.20.2016.04.01.07.23.38 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 07:23:39 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 21:23:36 +0700 Message-ID: <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> In-Reply-To: <56FE80B4.2090609@cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:23:43 -0000 On 1 Apr 2016, at 21:07, Flemming Andreasen wrote: > to a third party that the attack target had not signed up with > initially. This scenario is not envisaged any time in the medium-term future. Service must be pre-provisioned; DOTS can help with the registration process. > > - Part of the service agreement with the DOTS provider (i.e. out of > scope of DOTS) This, yes. > - Have a way of separating/indicating in the DOTS signaling whether > certain information can be shared with other parties or not. This is way too complex, unneeded for the medium-term future. > It seems desirable for DOTS to support a distributed inter-domain > model, however I do believe you have to handle privacy/confidentiality > concerns as part of that. That isn't an initial requirement; it's a futures kind of thing. ----------------------------------- Roland Dobbins From nobody Fri Apr 1 07:34:50 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 532B512D615 for ; Fri, 1 Apr 2016 07:34:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UaXuHBiSFvA9 for ; Fri, 1 Apr 2016 07:34:47 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F87F12D60E for ; Fri, 1 Apr 2016 07:34:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1669; q=dns/txt; s=iport; t=1459521287; x=1460730887; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=PBAMZ/EoAHzCXk1GiBWh+IjsLOwGzTjPvUmpR0MrVNM=; b=YJYwF62m19dppsebpz9Q2YhrbDUDdqRS8GyhB64aV6t9tHj1A9LPf5yk NjbEsMgwaMIq5hArp7JlfwYGbbrtbxQfgmqxcgv6KBim3KawLo1Eldhzj YUj90bEz6Js0eD48n/sG3TXhfcV8yA2JpEgMTAXWd9Aw4OA+lt3vmTS20 U=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D5AQD/hf5W/4oNJK1dg0FTfbsWAQ2Bc?= =?us-ascii?q?hcKhWwCgUM4FAEBAQEBAQFlJ4RCAQEEAQEBNTYCBwERCw4EBgkWDwkDAgECARU?= =?us-ascii?q?iDgYBDAYCAQEXiAwOxBwBAQEBAQEBAQEBAQEBAQEBAQEUBIYehEaKFAEEh26QC?= =?us-ascii?q?44IiTiFVY8YHgEBQoIygVEgMIhmAQEB?= X-IronPort-AV: E=Sophos;i="5.24,427,1454976000"; d="scan'208";a="91802002" Received: from alln-core-5.cisco.com ([173.36.13.138]) by rcdn-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 01 Apr 2016 14:34:46 +0000 Received: from [10.98.149.198] (bxb-fandreas-8815.cisco.com [10.98.149.198]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id u31EYk6P030395; Fri, 1 Apr 2016 14:34:46 GMT To: Roland Dobbins , dots References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> From: Flemming Andreasen Message-ID: <56FE8705.1060106@cisco.com> Date: Fri, 1 Apr 2016 10:34:45 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:34:49 -0000 To be clear - the below is your personal view. The WG charter mentions inter-domain and we have a couple of (individual) drafts related to inter-domain already. While I share your concern about developing overly complicated mechanism that take many years to get through the whole process let alone implemented and deployed, I'm also not in favor of short-term solutions that cannot be extended to longer-term envisioned scenarios. In summary, more discussion in the WG is needed here. Thanks -- Flemming On 4/1/16 10:23 AM, Roland Dobbins wrote: > On 1 Apr 2016, at 21:07, Flemming Andreasen wrote: > >> to a third party that the attack target had not signed up with >> initially. > > This scenario is not envisaged any time in the medium-term future. > Service must be pre-provisioned; DOTS can help with the registration > process. > >> > - Part of the service agreement with the DOTS provider (i.e. out of >> scope of DOTS) > > This, yes. > >> - Have a way of separating/indicating in the DOTS signaling whether >> certain information can be shared with other parties or not. > > This is way too complex, unneeded for the medium-term future. > >> It seems desirable for DOTS to support a distributed inter-domain >> model, however I do believe you have to handle >> privacy/confidentiality concerns as part of that. > > That isn't an initial requirement; it's a futures kind of thing. > > ----------------------------------- > Roland Dobbins > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > . > From nobody Fri Apr 1 07:52:27 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38ED312D627 for ; Fri, 1 Apr 2016 07:52:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 671qQcXu3SVr for ; Fri, 1 Apr 2016 07:52:19 -0700 (PDT) Received: from mail-pa0-x22b.google.com (mail-pa0-x22b.google.com [IPv6:2607:f8b0:400e:c03::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9813412D588 for ; Fri, 1 Apr 2016 07:52:19 -0700 (PDT) Received: by mail-pa0-x22b.google.com with SMTP id tt10so92175282pab.3 for ; Fri, 01 Apr 2016 07:52:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=wQ8yu29wSCbhF4HPpo4DObZx9JO8qdPzliP1TIMGKtg=; b=hRzaDF46pqbLRvjLz8aXnjXpk4rq8gsf2YdFcEdwoahp95NdtEiiLQWN6JcABlV0lp BJZPXUhsuvrL29MbQgFR1f2Dev8rh+QNehKEty1NYVox5+GqQlEkXEzRAuX53yVTdjkD ln/PakTVoBJAPXSnP1s5gu8fweHxi/6Yw4LCQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=wQ8yu29wSCbhF4HPpo4DObZx9JO8qdPzliP1TIMGKtg=; b=gQgtcHFUup3vzn+DxF4pR29qZtOEG6ulKfntgeTkweYL8+bE+jdgJONyCwVa3ubcVK ReC9RKZMSw9ZsT7xc56A5AkUxg/cKRZpz4zPYCGUjuRoJ9ZyfQtqtZI8BPPsBZjk7q+k tzPHXXroFCN6Rs3frwqWAb6BKf4E4SjtUAH5HEwTRVtkjism15zwS2fGvCdeLu4Yw4wR wAB/3MT1XBuRxhp6d01fqmzxPuRXftF0TrcGBxGdFWvoEHZfVoHr2TL+VYJwYXZme9Oh gBHxQ+lTLR9eYvJudBKJPlsOYp0HxBV4Ak6xMnlRnzvuwTmA/PzHoVptyoUZiIa8wraQ +ShQ== X-Gm-Message-State: AD7BkJII2V+03+58u9OjJvEIhVcsk0C+VHVMyZUUovgtONN/NJeT/C449SsUiX7q4d3UR4UQ X-Received: by 10.66.138.74 with SMTP id qo10mr25396472pab.140.1459522339187; Fri, 01 Apr 2016 07:52:19 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id ch2sm21715971pad.28.2016.04.01.07.52.17 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 07:52:18 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 21:52:15 +0700 Message-ID: In-Reply-To: <56FE8705.1060106@cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> <56FE8705.1060106@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:52:25 -0000 On 1 Apr 2016, at 21:34, Flemming Andreasen wrote: > The WG charter mentions inter-domain It's definitely inter-domain, as you indicate, concur 100%. > The WG charter mentions inter-domain and we have a couple of > (individual) drafts related to inter-domain already. Again, concur 100%, the whole point of this exercise is inter-domain. We get intra-domain for free. But a *federated* inter-domain model is something else entirely; that's what seems to be implied with talk of relays forwarding messages between domains which have no direct administrative/contractual relationship with one another. Or am I misunderstanding your meaning? > I'm also not in favor of short-term solutions that cannot be extended > to longer-term envisioned scenarios. I'm in favor of something relatively simple and deployable near-term which can be expanded long-term, too. We don't want to preclude anything useful down the road, agree 100%. But we need to look at the actual problem-set which is crying for a solution at the present time, and for the foreseeable near-term future. That involves one-to-one and one-to-many bilateral relationships, not multilateral relationships - but again, I could be misunderstanding, here. > In summary, more discussion in the WG is needed here. The only possible point of contention I see here is federated vs. bilateral. Again, I may be misunderstanding, so apologies if I am doing so. ----------------------------------- Roland Dobbins From nobody Fri Apr 1 07:58:26 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D21212D618 for ; Fri, 1 Apr 2016 07:58:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bdMK_s5BtFvE for ; Fri, 1 Apr 2016 07:58:23 -0700 (PDT) Received: from mail-pa0-x230.google.com (mail-pa0-x230.google.com [IPv6:2607:f8b0:400e:c03::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BCD512D0EF for ; Fri, 1 Apr 2016 07:58:23 -0700 (PDT) Received: by mail-pa0-x230.google.com with SMTP id tt10so92347625pab.3 for ; Fri, 01 Apr 2016 07:58:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=/AmvQlKNSGlnYP1a2od+IM6A68Hza5PKbQAWgRmNoJY=; b=fBhleEYuC/JbMgQ1Rbc5wNWnNu9GZNzTD8ie8UiUtpuW9JXoqW2EaA2qGFTbAYrYTs gyOs2dF7hWmNzVE2htDnTlXyIuA8lIzQLrY2Og/IO6Lkv3JTuU2Ytke+K0sfpRwULo1z dXnbe3ysNm0MkZZr2emc3HfA2vdG2UedxA2Wo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=/AmvQlKNSGlnYP1a2od+IM6A68Hza5PKbQAWgRmNoJY=; b=nI11mggaQI3NeDWjyVjXlMSNpZYVEosoYpVaogy3NQJF0qisMTHRkPWGXShiGoDnsX oP2RM9D0imgHOZJkdn4RqOlHaTrb43y8AKEUBsKOjQFEsVF6RqaZTuWN9T/GfLnNVVjf nowfxuUFGhBZy1Vwvx3AgHHxAJBENRUjqcGFQVVWwQkq3UqM8GAgV5hTk7vzLcMLV+gb HXQEKlpm6g9eTxzndgPoN4N802CBZE3/tzmZ5O2aSrq4t74tmhhN/jz/hM9rJevoMfqi IK3MqvJ13JMXKtsenHOvzBZONZbMbYSDqJfHsJkLzDBlPr3DIKMF3PFmZuKuru/8sdb8 wOHg== X-Gm-Message-State: AD7BkJJlsGToEp5Q2lU/jhG6TJvV1UxKewNHECFp6vqnEtVjlHR3R6aB/xCTUaIeHkrBlLBx X-Received: by 10.66.148.232 with SMTP id tv8mr31405376pab.21.1459522702797; Fri, 01 Apr 2016 07:58:22 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id by3sm21785355pab.39.2016.04.01.07.58.21 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 07:58:22 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 21:58:19 +0700 Message-ID: <64CF1A44-3F96-4A6D-B370-3866843772CD@arbor.net> In-Reply-To: <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 14:58:24 -0000 On 1 Apr 2016, at 19:54, Teague, Nik wrote: > I agree - the relay outside of the two contexts listed becomes > problematic. So, in this sub-thread, I think we've explicitly derived a principle which many of us took as implicit - that the near-term model is one-to-one or one-to-many bilateralism, but *not* multilateralism. I don't know of any multilateral models in this space today. They're all bilateral (some with transitive practical outcomes), AFAICT. There's a huge amount of complexity that comes with multilateralism, much of it outside the scope of DOTS. ----------------------------------- Roland Dobbins From nobody Fri Apr 1 08:21:01 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77AB112D683 for ; Fri, 1 Apr 2016 08:20:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B_gTef3J0uNL for ; Fri, 1 Apr 2016 08:20:57 -0700 (PDT) Received: from mail-pa0-x231.google.com (mail-pa0-x231.google.com [IPv6:2607:f8b0:400e:c03::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BA5D12D1A7 for ; Fri, 1 Apr 2016 08:20:37 -0700 (PDT) Received: by mail-pa0-x231.google.com with SMTP id tt10so92970616pab.3 for ; Fri, 01 Apr 2016 08:20:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=NvddIQeOheHEFbL299/24jDQADK99bArMkSkdc4UHCY=; b=QGmOSjy8WxcF9rLnsz/BiAnuXesY+Jxtu2QBF54xspDR3haWGkdxexSxKyxYgOEWP6 3azwcHFIHkJjRUGDaHK+sy6425ktk0ZEBvMiqj8zwkfdBVHQaS7TEv2OO07SWLqiN6GA 2tWIWL7fJi3LSjQ1TDbvIst+TmuAAy3DcG6r8= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=NvddIQeOheHEFbL299/24jDQADK99bArMkSkdc4UHCY=; b=a4V0WF4KkWz4DOvi3F8JbtUflMeIg8lv8jXcc1GMkng5R8aYVAYYzwnInob4E6BtTU eQJiIxp4iWV+H4T2bAFHoYHRJXUMnjdldOHavsKPhAa0Uafa0MWRMAESri5Lgaoj0J87 EdZbEdriAzhIrvzlhZIM8K3Zie4INQfcNn14czac3xt5eY6fW1V4XwVoxgSLWiVoS/zO xJUgCR/cXlHpGXipP2IjT77C2MDIGygVwO/GAau2og8XM9g3EFyQGlbJq3vCg38/oUtS 9kXJHG7AeFVhhQJ8gt2ixNSYl8ZJT7d+feYjTb3PJBzoBXZUQMSl8rLmwfYOxRulnPYD aUIA== X-Gm-Message-State: AD7BkJLeqYjPibL6Lz20yieZ4okPbDvPebEsoZedUZTuye1iikoaMfoJ+cOUNM0ZlMaSg1Ei X-Received: by 10.67.23.202 with SMTP id ic10mr30974882pad.127.1459524036900; Fri, 01 Apr 2016 08:20:36 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id ud5sm22149879pac.11.2016.04.01.08.20.35 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 08:20:36 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 22:20:33 +0700 Message-ID: In-Reply-To: <56FE7F48.9080701@cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <56FE7F48.9080701@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 15:20:59 -0000 On 1 Apr 2016, at 21:01, Flemming Andreasen wrote: > At what level ? Transport/Session (e.g. TLS/DTLS) and/or App (DOTS) ? Yes, this is the confusion to which I succumbed earlier. From my standpoint, transport-level is node-by-node, application-layer is probably end-to-end, if that makes sense? > So you are arguing for hop-by-hop security and not end-to-end ? Does a distinction between transport-level and application-level make sense, here? ----------------------------------- Roland Dobbins From nobody Fri Apr 1 08:32:07 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE76412D68E for ; Fri, 1 Apr 2016 08:32:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l4Iv3f5kp6LK for ; Fri, 1 Apr 2016 08:32:00 -0700 (PDT) Received: from alln-iport-2.cisco.com (alln-iport-2.cisco.com [173.37.142.89]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC82012D681 for ; Fri, 1 Apr 2016 08:31:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1999; q=dns/txt; s=iport; t=1459524719; x=1460734319; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=osRLj3kyMKOtuaWMQc/TslsaWNNHCfQYDo9+VvnlssI=; b=llB9pd+B3SYRd92q4nRBlmmGlwy9nruZCgmpBsIAKdGVk/UZbcXSqFmB EEtduGL5bE/oWY0MpraXWLJTtFuiRhMlHFQUp2hoyAi9raAk75Qh+5sxI 0D8QRxFiRypVrC0D2Kq+Uh1inNhx4VtEkEmBscIdnuvjuU8DA3Sog2OHT 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0D5AQAak/5W/4ENJK1dg0FTgQO7EAENg?= =?us-ascii?q?XIhhWwCgUQ4FAEBAQEBAQFlJ4RBAQEBAwE6PQ4EAgEIEQEDAQEBHhAyFwYIAgQ?= =?us-ascii?q?BGogXCA7EGQEBAQEBAQEBAQEBAQEBAQEBAQEBAREEhh6ERoQmhW4Fl3kBhXKCc?= =?us-ascii?q?oUcjxSPFwEeAQFCgjKBNYhUfgEBAQ?= X-IronPort-AV: E=Sophos;i="5.24,427,1454976000"; d="scan'208";a="254728039" Received: from alln-core-9.cisco.com ([173.36.13.129]) by alln-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 01 Apr 2016 15:31:58 +0000 Received: from XCH-ALN-003.cisco.com (xch-aln-003.cisco.com [173.36.7.13]) by alln-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id u31FVw47015459 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=FAIL); Fri, 1 Apr 2016 15:31:58 GMT Received: from xch-rcd-017.cisco.com (173.37.102.27) by XCH-ALN-003.cisco.com (173.36.7.13) with Microsoft SMTP Server (TLS) id 15.0.1104.5; Fri, 1 Apr 2016 10:31:57 -0500 Received: from xch-rcd-017.cisco.com ([173.37.102.27]) by XCH-RCD-017.cisco.com ([173.37.102.27]) with mapi id 15.00.1104.009; Fri, 1 Apr 2016 10:31:57 -0500 From: "Tirumaleswar Reddy (tireddy)" To: "Flemming Andreasen (fandreas)" , Roland Dobbins , dots Thread-Topic: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt Thread-Index: AQHRh2dlMIZy2Ma/lUiRx4Lf0iRGx59tFlQggAb+8wD//7pCYIAAdfoAgAAqJeCAARNmAP//wjmg Date: Fri, 1 Apr 2016 15:31:57 +0000 Message-ID: <43b6450f03bc494e96662f09abc8690e@XCH-RCD-017.cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <56FE7F48.9080701@cisco.com> In-Reply-To: <56FE7F48.9080701@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.47.245] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 15:32:06 -0000 > -----Original Message----- > From: Flemming Andreasen (fandreas) > Sent: Friday, April 01, 2016 7:32 PM > To: Tirumaleswar Reddy (tireddy); Roland Dobbins; dots > Subject: Re: [Dots] New Version Notification for draft-mortensen-dots- > architecture-00.txt >=20 >=20 >=20 > On 3/31/16 10:56 PM, Tirumaleswar Reddy (tireddy) wrote: > >> Confidentiality and privacy concerns would be the typical > >> considerations here, especially if we get into hosted or tiered > >> services scenarios where the DOTS relay may not be owned by the same > >> entity as who is requesting and/or providing the service. Consider > >> for example a case where we the DOTS client needs to provide the DOTS > >> server with keying material in order for the DDoS mitigation service t= o > properly deal with TLS flows. > > I have assumed DOTS relay is either owned by the DOTS client or DOTS > server. What is the use case for DOTS relay operated by some other entity= ? > Inter-domain use cases, e.g. distributed/coordinated DDoS mitigation and/= or > the initial mitigation provider getting help from another entity. > > DOTS relay is not transparent proxy, so DOTS client and DOTS relay > > will have to perform mutual authentication, > At what level ? Transport/Session (e.g. TLS/DTLS) and/or App (DOTS) ? Session level, as discussed in https://tools.ietf.org/html/draft-reddy-dots= -transport-03=20 (D)TLS can be used for mutual authentication. >=20 > > and DOTS relay and DOTS server will have to perform mutual > authentication. If the DOTS relay is not trusted then the DOTS client wil= l not > reveal the private keys to the DOTS relay. > So you are arguing for hop-by-hop security and not end-to-end ? Yes, provided DOTS relay is fully-trusted (and not semi-trusted like the sc= enario where DOTS relay is owned by some other entity other than the DOTS c= lient and server).=20 -Tiru >=20 > -- Flemming >=20 > > -Tiru > > > >> -- Flemming > >> > > . > > From nobody Fri Apr 1 09:00:26 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D666D12D703 for ; Fri, 1 Apr 2016 09:00:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iBQw7OEofQ7h for ; Fri, 1 Apr 2016 09:00:21 -0700 (PDT) Received: from mail-pa0-x235.google.com (mail-pa0-x235.google.com [IPv6:2607:f8b0:400e:c03::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77B1312D6F5 for ; Fri, 1 Apr 2016 09:00:16 -0700 (PDT) Received: by mail-pa0-x235.google.com with SMTP id fe3so94161508pab.1 for ; Fri, 01 Apr 2016 09:00:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=xnKc6E1hAB2DjA8wr3E2+u+0pQ8fevIIVhcEc8ke+Yk=; b=AkggazVf75y9szoxKw+FwXWM/Na1B11aOFM8hXD6nachh4MojAMzWaTBGv5k0VL5u2 oS8yPvgLuAlVtgLA6gtYUDyqOgDzB58050hOAxNC/517sICKA8CO9w9scs7CWBvg7fgS FKsCJH2RiV/ZYuJW0iHeDftl2kt0j1OPU8DqM= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=xnKc6E1hAB2DjA8wr3E2+u+0pQ8fevIIVhcEc8ke+Yk=; b=KHAu1vd7psUmQv0tJg4zQiCnjJW83pLetS19kpTeFjEyN9kfwpcKg2jdMWTGwjJUso foDHJlfhS6v3m3gji+YMJ287aKe5ZUi2d01svy8pH41EWbBYoZ/KgyOY8Y+27nQ4sLxB UEBdhbtnKkvzLr2Bp+lDXp1zj8uWbVM7a2LL9Mchq0oJKyFDAu6ykoiQJu5Q3x8Pvp6V 5ahLZQnuxNvy/8MYC2MeUEiW+7yQbIUrKamvSRNOBmEDLYCJ/Pr7MmI8qTxKKFKrWRG2 /CtUgvkDEA4Rk4WgiY4mjwiNJ9zsc5aW2MhD11Yjl84HSMqP/G0unOaYfvHPIHVRpvrl ONhQ== X-Gm-Message-State: AD7BkJLGmGv9gaANkEo8EPLmWD7h7BNHZTbNVTBXIzPYaQMi20a3qKXJmlIS44PhY9f8vXMZ X-Received: by 10.66.159.232 with SMTP id xf8mr32349117pab.71.1459526415903; Fri, 01 Apr 2016 09:00:15 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id c4sm5815092pat.19.2016.04.01.09.00.13 for (version=TLS1 cipher=AES128-SHA bits=128/128); Fri, 01 Apr 2016 09:00:14 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Fri, 01 Apr 2016 23:00:11 +0700 Message-ID: <379F9E22-74D9-4B96-B5E4-AFEB3017EED6@arbor.net> In-Reply-To: <43b6450f03bc494e96662f09abc8690e@XCH-RCD-017.cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <56FE7F48.9080701@cisco.com> <43b6450f03bc494e96662f09abc8690e@XCH-RCD-017.cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 01 Apr 2016 16:00:23 -0000 On 1 Apr 2016, at 22:31, Tirumaleswar Reddy (tireddy) wrote: > Yes, provided DOTS relay is fully-trusted (and not semi-trusted like > the scenario where DOTS relay is owned by some other entity other than > the DOTS client and server). I don't see the semi-trusted model becoming a real-world concern, anytime soon. Fully-trusted is the expected model for the medium-term future, AFAICT. ----------------------------------- Roland Dobbins From nobody Sat Apr 2 08:22:35 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8FFD712D55D for ; Sat, 2 Apr 2016 08:22:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.229 X-Spam-Level: X-Spam-Status: No, score=-4.229 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_IMAGE_RATIO_06=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEIDMzPQuibK for ; Sat, 2 Apr 2016 08:22:30 -0700 (PDT) Received: from dfwrgout.huawei.com (dfwrgout.huawei.com [206.16.17.72]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82C8A12D11E for ; Sat, 2 Apr 2016 08:22:29 -0700 (PDT) Received: from 172.18.9.243 (EHLO lhreml705-cah.china.huawei.com) ([172.18.9.243]) by dfwrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BOP30322; Sat, 02 Apr 2016 10:22:27 -0500 (CDT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml705-cah.china.huawei.com (10.201.5.168) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 2 Apr 2016 16:22:23 +0100 Received: from DFWEML501-MBB.china.huawei.com ([10.193.5.179]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0235.001; Sat, 2 Apr 2016 08:22:21 -0700 From: Linda Dunbar To: Roland Dobbins , dots Thread-Topic: What kind of capability does DOTS client have? Thread-Index: AdGMpHPZ54l51UA5RKWKLBN136NZnw== Date: Sat, 2 Apr 2016 15:22:21 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657E66D04@dfweml501-mbb> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.47.148.170] Content-Type: multipart/related; boundary="_005_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_"; type="multipart/alternative" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0201.56FFE3B4.00B3, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 91ffe4ec62eeb8042c31124b2f4e7a9f Archived-At: Subject: [Dots] What kind of capability does DOTS client have? X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Apr 2016 15:22:33 -0000 --_005_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_ Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_" --_000_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Roland, Reading through the draft-ietf-dots-use-cases-01, it is not clear to me wha= t kind of capability should a DOTS client have? Does CPE or PE act like a DOTS client? Or is it an end device, a VM, an application? Like an email server, or Shar= epoint App? I would assume that most applications are directly managed/moni= tored by its management system. Is the Management (or the monitoring) syst= em act like DOTS client? Does DOTS charter cover how/when an entity decide to send out request for u= pstream mitigation service ? Section 3.1.4 states that an application which is the target of DDoS attack= can be a DOTS client. Do many applications deployed today have the ability= to request DOTS mitigation? [cid:image003.png@01D18C7A.8AEF6AA0] How do DOTS clients know who is its upstream DOTS mitigator? Section 3.1.5: When an organization has reason to believe that it is under active attack, = why can't the authorized personnel send mitigation requests directly? [cid:image005.png@01D18C7A.8AEF6AA0] Thanks, Linda --_000_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Roland,

 

Reading through the draft-ietf-dots-use-cases-01, it= is not clear to me what kind of capability should a DOTS client have?

Does  CPE or PE act like a DOTS client?

Or is it an end device, a VM, an application? Like a= n email server, or Sharepoint App? I would assume that most applications ar= e directly managed/monitored by its management system. Is the Management &n= bsp;(or the monitoring) system act like DOTS client?

 

Does DOTS charter cover how/when an entity decide to= send out request for upstream mitigation service ?

Section 3.1.4 states that an application which is th= e target of DDoS attack can be a DOTS client. Do many applications deployed= today have the ability to request DOTS mitigation?

 

How do DOTS clients know who is its upstream DOTS mi= tigator?

 

Section 3.1.5:

When an organization has reason to believe that it i= s under active attack, why can’t the authorized personnel send mitiga= tion requests directly?

 

 

Thanks, Linda

 

--_000_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_-- --_005_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_ Content-Type: image/png; name="image003.png" Content-Description: image003.png Content-Disposition: inline; filename="image003.png"; size=62240; creation-date="Sat, 02 Apr 2016 15:22:17 GMT"; modification-date="Sat, 02 Apr 2016 15:22:17 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAx8AAABpCAYAAABbN57kAAAAAXNSR0ICQMB9xQAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAPKgSURBVHja 7F0FWFtJ1+6/FYgHAoQEiAfa3XqplxbqQlvq7u7uvnXburu7u7u7GxWqVKlQHN7/3NxAEgjedne/ zTzPeVqSydyZM8femTNzswDwJRppIxvZyEY2spGNbGQjG9nIRj+Tshj/Yyu2Yiu2Yiu2Yiu2Yiu2 Yiu28lOLDXzYiq3Yiq3Yiq3Yiq3Yiq3Yyi8pNvBhK7ZiK7ZiK7ZiK7ZiK7ZiK7+k2MCHrdiKrdiK rdiKrdiKrdiKrfySYgMftmIrtmIrtmIrtmIrtmIrtvJLig182Iqt2Iqt2Iqt2Iqt2Iqt2MovKTbw YSu2Yiu2Yiu2Yiu2Yiu2Yiu/pNjAh63Yiq3Yiq3Yiq3Yiq3Yiq38kmIDH7ZiK7ZiK7ZiK7ZiK7Zi K7byS4oNfNiKrdiKrdiKrdiKrdiKrdjKLyl/A/gIJfpC9NVGNrKRjWxkIxvZyEY2stEPpy/GmPs/ Dz6uEJUhKkBU2EY2spGNbGQjG9nIRjay0Q+ngsaY+9h/GXy8I6pD5EqkIFLayEY2spGNbGQjG9nI Rjb64cTE2jKimkRv8E8qvxB8TCdyI9IS6Yk8rZDeRgm8sfHh3z1/nv+S+fa0yWiG5+1n8eNX2cO/ W+48/2Wy9l/wU/+k8f1b+O2ZAmWm7s/o0z9Vlv4J8/y/pN/mY9EaY+9h/0Xw8YSovJEBxJAYHd6/ UePZMzVevFQj+K0GH77oEGcLWvH5qitaluBj1jGNDYT8i+j5SRdU9OXAx4eDUiXsUaqsBGde6VKZ Qy9EPJajfQAfk3Yr/5b5jvimxZevOsSmx6hFqTC7MQ8th7sh9F8vo54G43x4vhilStqjSBkxdt3T pisw/nJFCv/qAsw4nxmdpd9FEl97C1CyuD0qNZLg+uefOOaPCgxvzkevee6IIDn81XyPDtPi82ct ouOS7+PX2zK0DeCgWFEOOk5i+vn3ylp0uBafSFeS7/O/nGJ1+BaixffIf4ZehgV5YGZ/AUqVMtpV 0s8q7Zxx8/M/iGdxOoS8Y+OYtxTTPA9i4xqGgt5oEBFnGdCGftIg6AXFPFT35XOzui81+Br1I4Jw 9nmx37V4YexL8CeS2SgdPn/RIuoXyW4sPe/TJ3pebNrqfydb8C1M9/fY/xgVlndk7W75lhJc/vgv 9WNRaiwbK0Ip0hVmLFUsfAgTexcnevBfAx+riKQJTIp77YFBTTkoWNAOeb2yw4n3G+RVHHDqrQ18 vDssgTJLVnRYq7KBj38RfQ1SYNsmGTZtkWPZn0K4ywTYlGoQ64WwG87wss+KJnM8fvF8s0H3rp5C NOkqRXB6VqEjFegk/z8o/KX4/L8goxRAPL/pjjVThNBpeJh2Mj0gwhPvDzrCLivp7M7M6Cz9LlqD m6fdMKOnAF65hDgS/BPn/o0bqrj9hiLdZAj/peCD5c+VmQ6oGyDB7fDk+RXxToUjO1zQqrwdirR2 xbe/eafm5koxirV1wq3Q/03fg7ce6OfDx5SDavztu2LRKkxvxEH5hg5YtFaOLZtlWLdaiuVr3fE8 /B/Es1Al5vblIZc2G5zcsuOP/HYoRHFNwUIU25TkollvZxx5EO8HNNgzTWiIeVxk2eCZxw7eVI+J g/IRwK7VxhEbz6kQk0nePzzmii61uchfgNqntv38hWhWj4u8lSgY/fZr+PLmuAuBRgcce61LnYex KkytxkefBR6I+zvkLk6LOyfdMLMbHwX/EGDf63+p/sZocfecHBsoDpnVR4CcFj6EkUF3opn/JfAR TTSISJ7AqLhwLYIeKHHrtgKz+gpQsDQffqX4GLxSgdgfInyehsDOOqWlvmcKdXImascz0e/M61mr a/65p0Ugavj8iwIrp0tx5KH2B47RWt0fpeRpaTutvPuZffBKxPeU5ty8v57pkA+2Xvg1KQrnFWHT 3ZTAB9NOLsMuwtp5Uuy/ocngGFPid2r80GN/FwFqt5cijOlLmvSE4YkO5ygQWLpHichfOi/plYmc ZnOoT+W59P+nMlQpLcD0U5o02g1jG5+UWDRLiuNPtZmYQ1Obbw+7oHQREY69tfabzOpr/Lg12LfC BeuPM8FORuyMZ6Z09e4sB1SrKMGTJHKX2CZqsXYIH2U6yvA9zX34GfYuJwJXi/B7Myc8TlPbnhm0 zZ7J2KC0ylFa61uRizAFeuXnYvJxLWubfqjcpbUfLK8RpUCzIjxMOsz05Xdjf3Lix+wM/EDZiNbh 3XMl1g7lQ11ZhM3nFbhDcc1togtHZBjSmItcFcXYH8QG4Z/fqHB0vhheJfmYtMcDd++wcdDVcxT8 9uQjVxE+5p7TZJh3waekqF2Qg+YjpThxRYG71PaBdc4IKJQdwtwOuBL6K3iXE1/PuSBvXgec/Zqa Pfcy2KIpvlz0WKhMo9yldw490+A3PfF2L/HJW4j9r635iF8RoyQXS6bV3uVMoA9HWR9y9I15PRei zkRR/xXw8R7sYRdlUqGLVGJMUz4G7FPi4jQRfFs740nEDzAuYWocXuaElk0EaNhQgJadHbFssytm D3LCpgvqJEIX8sQDc4aI0IjqNmwkRP9pMtz/oLNwBEHHpejajPlegCbdnHDAaEyenZVjZA8hPUeE +UdVCKdAZOEgoeG5TZoSdXbAlvtsEPr1vhy9WrCfM89qM1CGoChj2sdURzShzxo3E6JLd2ccvq1N UdhCnymweIzY8ByG+k2QYt8uGaYNc8H5YJ0lPyI0OLXeCe2bsnXbdJP8kBUWJgh9fs0N0weJ0dTY j57jpDgfqLXg3dtLMvRpZeRdB0dsvscGaW+uumFCP5GBd1O2KigAzkB/4nR4/cADG+Y7oWtjtg8N W4oxdZ07PkTHK6YO1zc5oTnz/C4S7HukxpOzrhjahZ2nVl0dse6kimAyq/BRL9wxsBvNUWMhJi7x wNt3Sqyb7MDKRxMRhs2R48kXfbJBx+cLLvDOkxz4YPtzYbXEMN+NmgrRmeZj/01NysYlQo0jq5zQ qQU7xqa9nbB1nxtmj3XG4r2qhBWjmO8a3Dopw/RRDgmy0baXE3ZcVputKrE6smGcCKV02eCusUeA sS5LIiw6kXQV/+UJGXo2ZOexLcn1rI2KFFJhSEafK7B2uiNaGeWuXU8nbLugItPnmcCHi0uc0IwZ D/Hg+GMNXlyWY2x3dl4ad5Bgx7WMrMLSHNyWYzjJQ1N6doteUjz4ag4QtTi7ToLGZB+aNBFjlWGs ORHz0BWVCXzMPavBu3tumGiQTQGa93fGyceWMo0YDXYudGT7STrbdagT9gWmrLP4qsKeBRK0MMpp O5qX7YflWDSE5vKyJqF/z/c5o0xxMc6QHj86JcOwDmz9rqNccf+TDplxgoEHXNCeeT7JdocuJPfH lMb5sF7/+SU5RvcSJcjFqBmuWDnfGcMmueFdBuaF4f2xhQ6omD8H5K45ULmeudwJMGGTAuEWAbgG KwbwUba7HJ/D1di/2AmtmLqNRZi6TUGAxPoO0vnNLujWyqgr7R2x9iQDlD0z5k9iNdi9WIJKRbJD pLRD5bqWfR64XpGEh+Gf1Di72xVj+ooS6nUf7oJzQZZ+Jeq1B6a2ZL9vTLZl7mFW776/VGD5OFaH e0+X40W46Texn1XYMVeCNo2McvEn2dynalxf54TWJNPdhsvxJs5UPzxYgVUTHAx6Zqg/WorLQZby /PGGHIOacOHpkBV5y/AsxteqnzMuv81s0KrFA7JL4/qbZGnYdFdcf5NIr76psHoU1anFhVKSDXl9 eGhE4zRQEwfsvZOJ1MZYHZ5dd8fKaY5o39zI8+YOWLhPga+ZSkfywp0VIuRr4YT70ebnKygQjFBi RAAH/r1l+GQMED+fdEbRmiJse6lPFAxrsKoXD8UDnBAY5mnhL55ekGPKkHh/L8SACa64kGgOmbSb eb0EqNRXTr4sp0Xw+nCjA34v6YBzIRnfHX55xwPr5zihs1FeG5LtnLXNAx+jLX3btVXOaOxnBweH HPCrybeQpf5j3SgiNPU54oUHpvTgI69LVugLcS3qNm7niP2PLG1qXKQWjy65YdFEBzQ1yn+LTo5Y dSz5hbC3t93x10Cj3JHdGzZXhgPbpBg8QobAUJMff77DCTUIfBwIZuX1yHwHNKFnNGjA+ryJBzO6 s61D8EMPbFnohG6tTT528lp3BEeYnv/xqhwDmXE3FWHBESU+vlBgJeltc6Z+A7J3mzysyumr6xRH Ge1Mk7YOWLJfiTsEpPyKJQYfTHZFNbDHIP4T4ONBgmIlZtrLI07wKSXG8RBi/gMpyhcTYNmVzOVN x5GDWtFXgGIleOg4UIIJ4yUYMVCMuqVygJ8lG7qtV1q0/2AnCRyh7hqtHDBqvBMmMEFbWQ7K1pHg whuTYLymoGjWJGqrCw+uv3Mx4rASR5c5ol5lIfqOcUL/Zjx413DC2UAV9hHw6dOEA65dDjQY4oIz RocTTg6F2Q7zcMyGwg0dMG05CV80uyV2YZMLxo6WYEx/ATRSe/Rao0o2uH11xhX1StqjdE0yQiOp z2MlFCwLUViVFXwZF+semOrGvFVgQhM+ypQn5zdEgokTJOjfXoCC3nwM36DM+E5THAURM8Uo/Icd qpEB/3Mc248O9XgoWIyPvw6bwM2H226YN1mCkWQY1Tnt0W2HAuc3OqFBJQIr1P+hbXnk8BxwOCi9 gZUXogko9KjFQWEaX89Bjpgw0QlDCAwW9bRDg3FuxlQNCuKOyzC2Jx96bXbkqcRD2So8tOjmQPWJ dx0F8M7NQeeZ7giN80Is8WzlLEfUKmEHmZKDihW5qFJHiEE0z+NGOKBeGTsUruWAoy90GQAfrDG6 vU+KsWNoPoaJkNsxB7otViQ733EhSkxqx0OBojx06u+I8ROcMHwIGcaKduBlyY5Wk5ntanaV6N56 R1QyzIkYQ0bTnIxzRMd6XOjz8jHf7ExCHAHSk2tpDrzt8HshHgZQ3fE0f6NJBv8c7YztV9VJV9Vu uGHmnxKMG+OA6t45kLtRcmlXBNaPuiCA2vapRjJKv5nAyB0F0SULctBhmju+xLDzcvegDGO6C/C7 MBtKVuCjdlU+OvaXYNIER7SubI9cvmIcfJpeuSCn9tIdvYvkgAfNX//ZbngVrkd0qA5fvzDnW3R4 cFyKpoVzQKviYe11dqcj5pEM1X04KF9fiGpVBejYl9EXR+IzBwWrOOKSeS5wDAGYHS4YxfCL7E0u j+zovk+d7BxGvPTAwDpcFPLlo+sglh8j+4tRtUR2CGgO+29TJQQtrw67oEQujsHxBfgL0Gso9WO0 A2oUtEOFrlIEZWKBJuisDFNonieNEaO0Mgdq9I/fUUha9/F+Z1QtSraxhdhgG8eMckT35jzIHf4P 7t7MDkDGHPGNPS7oUMkenjoOuo5gZNQod6MkWElONyLOMmhdP5yPP3z4FIDyUauhGCMZ+SeZye3J w/CNSgtQHfuFdKULH0V8GXvH2gNG7koU46LvWkXGzo3QXF8+IEWHGvaQ5uOi6zAJxhv7PIpke/FB JQV7ln3ePYX0Oi8HjQmkjybbOO5P0tdy9vjdzwHHnpvkOeojAfTJjO0Uo7xbdjQYI8eDU65oQza7 eU96xkAhSpTkYeIJtUFGw57I0a06B0XLCdBnOOPfHNG7rQBlq3FQwP03OHvzMHmFOz4azxoEn5Wi eSWyYY3FGE46PnGsI1rS70uUE2PvPVM/Pge6Y+FwIYq4Zkd5sueM32TGN5rmZMI8V9z9qMuwT2bA 4ObRQhTIZY8G7cnP0vyNGUn6HcDogwirL5rsZNx3NQ4sd8ZYGnd+jxwo39gB40j2DH0Z64LTj7UZ 7sf3uzLUKmWPUgFCDGR4R7LRrx3Jlqc9eiz2SBGEp9b2tcUi5G0qwc3QpN8FrnZA8SoUCL6N39l0 QuHqImx8rEuyEPr1vAuq+HAx74aWjZtitTgwXQRv8pu1WokxgpGl0Y6sny0hxPyjahPY+apA9/oU wK9WIfGuwedHHthIQOFNRMbGF/NMjmYkv0XJLvY16tWgTgLkp361/svNbOFQh4fHZBhCdsJVZo+W /c10ZaQE89d4EAgzjTnirRKbp4tRVpUdRf2FBl0ZQ35xNOnV6CkuOBtkuZD65qQL6ufNgbJkoweO YuOZXq148PLkYMROZaK0LR3u7JSgQiF7VK5PYJfaZvrSux3ZDrffwHUV42yIFfDxjt1x3dDdHlmy ZEWFNo4YR+Ndd06dMfl/54EuNTgoRDFKr0Gs3A0l+1XkdzvUGS5HiHGhIIR0cMk4B1RWZUPOglzU qshD444OGEvyP4iRU/IJI3fELzSy/vPqBglK5bVHjZZijKF2h/cToRb5sNJ57fCHtwgn35n3hel/ XqKz/xXwcdw46MRGQ4uNvfmo0E+GL4yixKkxjRSq1gS3TBmBt8cp6KHgd/V9Hcy3r8KeuqGZ1g7d lisTPvtCxqhVZT5Gb2ech9n2VpgK81pTIDRUhvcxidIAnruhcVk7FKghQLPBzjhCAaYhgCejeeum Eh8ijPXeuaMTBRp/7ldZrE482ipBtSpinHifzJbbJ3fqEw99rJ75oCDmiRva+HJQn5zU2wizVZYY Ha4td0RhBQ+r7usSjP6GwUL4N3HG7RA9zLfv7u92QqUyImx9kDFjHrjDEUX/4GICs/oYY+oHszJx fI4I+ckw7rhvHnzTcz+QEla1Q95qhND7O2HnVQ0LUCgQvnNDieBQXbrnG1+I77eUePXVcnwXF4iR y1uMMx/M5o7mpH2+38DT87HyoiZhpwMU7NxcL0FRLy4mnzAF6Pun8JHFLivq/ymn4NU0xshX7ujn TwCkozSRfKQVfJj1KVqJ7mVpvq2CD2YOCUz34KFIbUecTljpYin0iQw1vMihjzHlyn54qsStOyqE xZlt2UapMLqOPXwHyc2CL9Z47egsQJ12LvhgsdWbSp/pd5tGEJBo42oFfJCuPXJDw6L2qDdBjjff zXYciM9PjklRkQK4oTviHQW198Ydzdyzo3BzAu8UXETHf/5STiCHh34ZPP/0aK0j/Os74GIoO9YD fwrh21CCBzGsc1naU4xWQ92MZx4IyAbKUDVfNmhqOGL/HU1CP8LuuKIWBZJ/HtfAanree3d09bVH vwNqq3MYF67C9JZcFCU9vPlBb8Hj99dcUcPdDn02mMBH8DFnaAmMVerkgquvdMYFAi+82ueIfEWF WHc/c7sf8YtB05ry0WCg3Ar4YA9hjqxO3w9xM7ONNJYoDVb34UNTRIJHcRncSSC6Ok2MapUccSc6 JbljA/nNQ7gQe3AwmAKXD+GmdKyVxNPSJLvBsfHyRUH/aBHKtHXG5WBLe/DsiDMqVhJi+QVtBnnn iVvLRMjTTILbEandIKTD84dK3HykSZg7A712Q9N89ui2JrGus/OxmAGnhbho0VaMBQeUCDcC9KC7 Cjx+R3Meqcb8djz4dXbGXXM5itbh8hoHqHj/h1yDZAk7i9FvPdC3Ng+9FrqzPjaBNNg6UIAqxLsH YWa8Jvvcg54/4aAGlqkfmdsdPzPPAfkK8jHvpAqRsSa+xYRrsJ78k3d5B5z6oLPkx2cPNC/Gw7id 6h/Wl6gvKly+osSnSHPZ0GFnfz4KV3XA7e8/B3x8v+YC3woCLL7GxiTvUgAfzFms5jV46L2VtSW3 1znCm+zlRIojImJMPIiN1GDvJDEKlRJhzwuTv1/cjYecFRxx8onWuPhnLcU7/RRL8c2Vy0q8CzPn nR4nxgtRiOKIcyGJUpjIhhUoIDZLHU3p9i81Jvhx0W2uItFcJ63/9Y0Kt64pjYtXXgm2YEVnDvK3 cLHY8Xt/UYrqRTnovlKBULMdqViKUfZPFEKmFOPkBzPwsd0JNYtSwP5ZjzdHXdCqNh9DyOaEZlb2 ItS4TnL3+oulTbpKMUohbwH2vzHnhQZL6nKgyMXHoqPkx6Pjx6nGjLZ8lGzlatRlAqrkOwKKcNBu kYdFDPbptgx1PH6Ds5cQp94n7o8z0Y7/Cvg4ZgQeWgvjEkNK1rQEHzOOmYzLU0KpRcs54MKnjBuB T+ddUJkCsk4L3PH4rQbfvukQFccqypX1Mhy/rUkIvA5OFSJvXQmuvtbi9Ss1Xrxg6XWw1oCY8xdz SMjVTFgBCJKjUcHsyN/WBYHfPGGZo2sZ2DECXqwVBajxN15QEPgXIdiAkW7JpAAwKNkNLSslBz7I kE8Xo3RZB1wP80xiuCKeuGPGIBecfs0ao1ASwmbFuBi+i0AR8eKlcXwvX2nw7rkHRjThoN7C9B50 ZgITUoRaXBqHnMbhlTSwoXGOqcZBs2nmQJL+fe+Bzj7Z4dXACbc+6pPhXUZzKfUIeatG0HM1Pn7V 4cM5KcoWJAAUqDMFgYzzz5UDtf90T9gpSOgzgd/xjbko01tuvP2HAvNRfIgLi3DmU1JeP9kuQeE/ hNjzPCM7H+bpVAp080sefETcd0W54nxMOapBkvMy1Oe1U5wxd5fK7KY4Iz+itHjzXIUXrzUIjdBi 5wQhBb9Siy1vRie3dRKgNslyug6cM6tCw5MDH+SQpguRJ8AJDyKtp5ztHc1HwWbOeB5lDEKeuaFt Ph5mnjMfI5OCoUCL0nx0X6jIgHwQmHgoQxV/IeZd1RmM99haWZHFgYdtz/SGQ/O9uggxYI86gWdR D1xRqaT5mQ9TUNadwEXP3dbBBYLd0aVM8uDj/SkXVMoTvyCSKNhgzvwMl2DDBcu0q5Ikd0ffeVqA 98g7LihbUojFl7XIXDDBOvypKYEP6tfEhlwUqOmIE3c1+PRFi1Bj4P/tkQeWr1PQ3Gf02XpcmipG 1YqOuBmRWq62BisoOPTpYH4wnuXL6RE8lGrlhCfxcvTSDfUL8jCUAob3ZvbuxUsN3r9XYFxVHjqM dctYeif95voSEXJTgHnje1oBHslgKHvrEONTwmNVmFXbDnVmulsBsRrMr8GBNrcAm+9orXzP3qpW rpAA65PYFS/DAe2hlXIgfy/mYD7rT++sdUCeSmLsu69B8GuTf3v1RouXZ13gU0SIRedNcoe37uhe kItx+37UgXNm11aB7gFcNJjhAVjzFfTMtlW46LBCaWaTmdvY3NGsKA9jtv/Ii1dMZ9beET+ek6/4 HKXHY+KTX2UhDr/7GeCDsUNSg12ZeUqbOvj45I4O1Xjoulxl0NHR5JOqkr+KscY7so99a3PQcJaH 8XuSkQdydK5gB1kue9RuKkLPAY4YNdEFey6qMph2mJh3enwIJj9LMv2J7MGrvRJU8uNj83PLuq8J 7OfPL8bhV2k4cB6nwnhfLrrOTkssYvRvcTSHL2kOiT6H6XBlpRgFqjjhbqQ+YSGC8VHeTVzI5yW1 b5+uyzFwqCvufzPZpBe7nVGnAB8Dh4lRntlB3K9KFCdk9ryHMUYh3n38rsP7My4IKMXFwrs6sxhI jQW1eGg+Sm4256zPXTtQiOL1pMaFQh12jRahWA1nBMXmTGJfD5KPVeYT4niSS0uc/svgg2Xy3eUi KD25GL/RDSdPuOP4CQ8cWi1BGZU9huzNhPEjoTtD7VTIT4aYUG/p0hyUq8hDrToCDJ4vx8sIk7Ff 3MAOIo/s8C5iD29vOxMVtkfhfDngTIHK8ssaiyA5igKammQc/jyTemAZct0V9X34WG50JiGXpKhV XICV93XJC+lbN7SwCj6Mfe4uRNmWrsmmSjBXpsYZ67886ISc9lnhld8eRYvYWYyxCJFGkQ3FujHB RzrBx2cPtC1MjmFbco6BgBcTYHa3DHbjXtHYanLRc++Pc25M7v3Z9U5oTO2WKmZvuGWkJM25X3Ea Xy4B9j+3BI4NyMjFryolDoq3jBKhcC0p3hlXUzYMFVLw5YLX1lb3b8nQlALKRde0mQMfYQp0TQF8 vN4nQYEAMfa+0Sf93pieYg48woOVWDJShKplOShCvGBk29ePC+9c2VG0hStCEoGPrR0FqNXGBW/S CT7WD7MGPtjvVrbhoNJYuXHnwEpK1j4n5C3ogJPvWaMb9VRuAB8zTlnqGiNnzQh89FycEfDhaThT NrSqAH0WeeDzUzd0LZ0dKhEXk0luQwiYd60nws4XJmduAB8+giT9iCVw0ZXARe+91sFF7Bt3dE4W fOhxY5Uj8peQkGP0TFZnY81SjRjwUbqoCMeCLYON7zdc4FdKiKVXfgz4mNIkOfBhTAF56Ib+BEBy /mFnuL6xNMmRf00+GnWU4MiDjKbHsr+5OIUFHzfC0gA+BvDh20lmdq0z++/xoTz4tHbC0yjWuX86 54w8iqzQ5Cb7lsjeFSXb4CXLisJ9yHlncMeGCTBzN0nbjUEf77lhHOlW+TIcw41DRYqRTarAQR73 bKi7yMOK/VFjTnUeWo52I3mwPh+B2x2Rp6wjLn2zrpPrWtIc9WZSIdngZG9fHlxcsyO/N/mzRP6t aCHyb1x7jNtp2nFjQHQ3Ah9jf6B9jrgvQ0M/DsZfTu78mxp/tRGgQpdEu7Lv3dGUwMfobaof5ysi 1Ng73xENKnNRvLAdChWyh08FLnzyZYeimhhnP/6cnY9vF53hU0WIlXfYnY+U0q7iXsjRuAYPQw6R foV6oCPZ8QFWr91ndWN5XyFKNmFWw8125t8qsX2pM4b2E6NtCyHqEfgrVoCD1hPkeBeTQZ2N1uDY Sic0J6BYoij52YL2KFWOizLeOSD3FWLvq0Sp4YdZ8HHoZdpuuxpHfrnLrNRuuyJb+1WFLVMdEEC6 VIxkuRDJsg/ZpRL5s0Nf0RmP43fWCIyPb8dFtVnJABorvvPNIWeU4GaDN/njcuR3xmyJz4jJpNzF MWfQnNHGn4uSTIxC9qAk6YRvsRxw8+Zj9SO9BfiYT+CjxQjzuIzV71X9hSjRQMqeHYoj+92Bj0qD 3a3y7PoqB2gLJfYh8eBj+38FfJwCe97DDHwQ4/5qag+xPDsKMIaxMGMUWQOpc82K0i3Mg9b0UUSo FiGftHj7TInL59yxbb0rVq9wwazxDvAvZY9645h3E7BbzwtbUmDWT4pr16nuZQ8iBUuX6P9XFXjw RI2vEZaCxICPAHISI06k5nzZlJlZnfioMczN8Nmh8UL4dHTFx5QOpaYIPnTYOUKIMgHOVgLipDsI Qcyhoz/4WHJcgSuXFKbxEV0iYtJzXr/TpnLbjbWAWYkBPgQilioAa6umNNebevFQdrDM7HpMI/gg Q9h9149wKOzVcsfnO6C6vxAj5rji2AV2Di+ddcfKMULkzyPEnmemnY+YF25oSHLWYYnSKrBb3l8A PwJjYUbwsZkCbG0FCQKtpFZ9OidFzYIUvD7T/UTw4YUv1FYxPyFWJXsBgWl1JPqDAhNaCBDQxBGL t7vhokGWFTh9WIa+dTgo2txc9th52tKeTbt6a9W5pRd8sMBzW38eiveMd4hJ+/tgkwNyUxB11bjq FPWEBR/TT/5g8EF9OTxcgPqDXLB3iROa1HXEzMEitB4txYFlzmhayxlBcZ5JwEfifmQOfHji2W4n FC8oxvH3Ka+KmYMPnyQ3lfxi8BGjM7yH49M7De5c88CRPXKsXu2KpfOd0KMuBTPMWZyXugw+W48L k8Twr+RoTGFKzoaZwAdz29W3VMBHCIGPwoX5mLXHA1cuJ7J3pAc37irx7GN67Z2pX1cXEfhobj3A NO8zc9lBh7o81O/jhC0H3Y321gNHd7ugiXd21JmXAvj4U57MuRQvfL4sRem8fKy4qUXiG9IYoN2v DAGNnvE7HzrsGchDkVYSnLymNDzf3L9duqLA/UdqhHw32Ucm/bFbAS4mJCPHGeFZ9HPGn3HQJxnd YQLPP5vxUHOku+VK7w8FH2zwvHWcCL51RZiyTIZTF4xyccENs7tw8UcVEU59+Dng4+ZcEUoSuDn/ 2TMV8OGF9xS0VyjBx1pm0ey7Aj38OWi7XpUs+JjTlY+yPeWGXcHvL1U4d1ll3Lk3pVpFhWlxZ5cT qubiY/GF9C4aeBrOnRycKYZvgBBj57vi+DkPNl666I4lpJu5fQXY9dLyNy8pkM9H4OPoa12KMUq8 DIwtQ3HBXI8U5I55d4kKy/oIUa2mGDPXy3Ge6QPp9dkTckxsz8XvlZzwMD79KFaDBb34KN1fnkwa f9Jsixdkpyvk5GPNPR0+XHBFmyp8TKZYJTYzACRWh7NLHFGuugDDZkhx9KxRDy96YPWfQuQjGV/x UJcEfDQfnjz4+Bgfv/YUoGxnuZWr0j1xeaEImoLWdj7+U2lXjxIUhR18TkRck6JqJQHmX9IgnIzf 169aA4WG6Qz3Q9chJL3hccYM3qVFDihVwRFPE67mM12XdnyyAL/XMQXuZ+aL4F3LCUFmV5SxZPxt pBbfoxMFCc/kqF0jfucj9VzUwC0SVPV3wLF7HhhQno9xB5IzJMb2P7ujdRUe+m9Sw+p1cMedUbkg BWqntbC8CjanAWHfpAD8njGliTmc2LYUFyOYVRTDdYWJx6jH92/pfbkjG9TtG8ZHnsqOuPHN/No6 1uhF3HNFjbwcDDc7RMue+aCx1SbQsu9H5PEyK3VuaFaZi/YbVInGxey8CJErpwCHzPIpY167oaVn VuQi8BYUndOi3+F3XFG3JBcjD6kTxrh7LA9ZZPbGlXDz20M0WEmGrUgrKd7EeiaZw/irdrcH6pD8 lXrGtmKV6FGO5ttwFsnKVaNflehbgYs6o5gUt8RX/3riFRngq3dZh/J4nSP8igpx9LOXJT9CPNC9 oj28m5nvmBnTrjryUL6ps3G3x7xfOoSEJJaN+Ocyu0QC+LSPT4WxnMenzG5NHj6W3kysI+ztL8P9 7VFxuAxf49sjUNohPw+zz5sHVfRvuAItffnos0KJjF336YnXByUo7i9AreYUaE/3QDAF8GVrEOBq Q/SXh9mFC8ardssIkvbjkwd6+BG4OJQoHSu+/x890I2+H3hUY1Vno0juupayRytDTnPiOSSnd90d l55qEz57e8QFZYqKcNoi/TQnYu5JUa40AdFbuszpjVGGpxNPGg1xo6AvZ9Kgn0lRrMjHsN2Jr12l /z+SISAfB5MzlP4Vn3YlQpkyDrgenfhaSZ1h8Sg6AVhrsXYwH35dmCDCkvdnR/JQpp0zXsX37Z07 WpXkYbAhVScZe/edwEdsxgNMrxpk8yzOfLB9/hqiNaa16LBrhAgFKjjhTYL/Yf1J6G1X1MybDbUW KpKCB5qPBTV5aD3WzZjqYSVIi1BhVjMOijSU4JLh0DrbfuwXNTaO5EOYJQtyDpYl3Bb2eKcjCpd3 wNlvXtb9G+n49wgz8MGcU8xrj8G71Eh8JWn414y8BI69gWku2Rjvekx6iFcSX/H6qDNKF+Ji6jnz oJixex5oUYyH8bt/hK/wQlygDOUo+J5+SpuID1qs7sKBRyUxLn7zynD7yd52RaBwYGUOag2Qk71j x8zcdlWEue3qhR4WV32TDCztxENxilFexrIysW4QH3mrOOJuRFLeMWl4lb05GGb0WZeXOiBPKQnu J7lSNpchrmiRk4tJh9IL5rwMfjYgLw/Dt6uT8G7XYC6UpYQ48N5SVt8QiMr9h8h4ba2lvfvyRYuw KMu0q7Gl7dH8L48kchdDwOnLN9befTjlAv88FKwH6i37EanCJNILXTkmljPZ39vrJShUSIitT3VI cn1tmAaXDivwOtzUv+C9zqhVRIgjH9m/H+11Qe2yQiw7p0HGzs2wC2jNC3PRdbEyiS06NkkALcVy 655Z2uXFdXho9adborQrneF8VKlG8YsLetxa6YAiNL7drz0t5ShajTFVc8D1DyHOfzHvMzN/f4Dd EPhPgI9gospEKgMDP79UYmk3Pgr5iXHokQahUabJjwnV4u0dOVpX5KDqQBkev0//W8+vLRdDzMmO qt2csPWYEo+fqfH0iQrHNzuhNgVxXVYrEg7kRbz2wOBqHJRt4IgNRxR49JSte/2UHNOHiODPGAjj oenwEDWeP1PhHilV2TIcdFnjYXibaeBDFfsm09hkhO+LAgNb8lCMflOcgry7X5LWi/qmwQt6biA9 /wkh7oCSHLSe5o6nz9V49EiFYHLGcWar/VvHipC/EB+jlrrh2n16/lMlLh50Re/GHBQNEONAwm0q OpxY4IBCFNgNXijHlXsqwxtPH95WYOdSJ7Ssx0e3yRnJgWZu7vLAwKr0vCoiLNqlwEPq+7PHShxe 44Q6pexQsY8UQcbc6IgvGgPvHp6RIqCsPZotcDfk2zK8e/ZKg7AMBgPMtYzjm3FRrIEEx65TW8SH s7ukGNxHbLipSqniYeFxFd5/YfkR+9Id7ctkA9/dDtV7OGHXGSWCglS4sM8FjWh+ynWQ4nmYSdl3 TRJCJCCwUkqAiavdcOeJGo9veWBhHwG8C/Cx5JLJYYZ91ODJYxUeM1debpXgd50Asw4oqE80r4/V +BRmcvKxZPheED8e0efPSd6bFuGg1Ti5QVYDab5fWazOeuLFMRdULcFBg34uOHJZiadU7/5Vdywe JUJJcgrjN7HBecgFKWrk56D9NDluU9uP7yuweZ4TerQQoECu7Mhd0wmXn2uMufss3V8txh+eHIxc 446H1O7jewrsWu6EprV46DjDPWHVKC6Guc+e+hxIfH6iwPTOPBSo64zrpAOPmc9eaoxXHVL9cHKa A/mG27lGLXLDdUZHaLyXD7uiV10u8lVyxHHjWaqvnzR4QMF2XT17oPjlO/atuIzTeXFNhuoFuWg2 Ro7nb+nzjOSck+Osq80GO7k9pjNnPyIV6JI/O+zp7wlnjPMXp8c3mr/7B51QgpzBoLUeePWenYNI CroYnWzsnQMtF7rj9Qc2MI6mOQwKZOf70XlXNKLv2yxzN8j5I5KD158sA7Vb25xQKi8Xbce44tR1 JemhCncvuGFafwGKlOJhxkl2ceZTsBonFjmiYG4BVp5R4W0Iq/vhn7W4tUuCwqTLY3coEBySkUCQ PQf0MFBN9ob015+LKu1dcPuZBo9J7p4H0xzGGQOON25oUiQbPIoI8Ndqo50hXblz3g3j2/BRtbET bmX4TdNMIEFBp6cdWv8lN+jV00dKHN3sgs5NeKhLtv8D0w+SgddPPTChLRfeDZ1xI0jD7kSTfHx8 o8KqThwUrOWA4w81+GKU6auryCEX56LvHBku3WZ1JZBkevcqZ3RpQE59qhwhGUw9+XjeBT5ae9IL 6nOgsc9bXNC+AR9tB7kaQZAeN9Y6olBuHsZt90Ag6cdD0tWF4yVo1YiHPMqsKD9ShqevtQiPoXaj tXjJvOX6iTtG+HIQ0F2KO4wfIBkKZHbeE71t/OsjN/SqzkHuoly07ipGv94i1CrLQbHyXPgRsCk9 NH6HiL3aeUYLHkqSjV62ywP3ySYw9uj2RXcsmiBG7apCLDpjuqabOeczs7E9vCjYPXyFdJrm+9Y5 N8wjMFW5hhgbrmUMbIbclaNjRXuUqeeA9YfIz9J4n9xXYgfJedmCHDT8U45Pxh3IuGgd3r+g7y+6 onoeDnrOdTfMIWNjGDv64XtGdtsIfHxUoCvxqVJ3F5y7oybdJV+1SYp+nUSoXjQ7ZD4CrL+ixsf0 XnpCdpHJ498+RgBddTH23GL8EMkGtX9+P9m7WvYoUE2Mg8Yd8lCyM+eXO+APXwFmHlMa8v+f0lxf P0161Z6HvCX4WGh2/iv0iRv61bBHcWp75R4PPHjGyt2+1RJUK8pB9b4yvIlieXd9lRgcXnZU7+yE LRTPPHzCzvf1k3IMaciDTz0n3PmUft4xC2BDanBRupUTjt8gO0B+/uQOKQZ1IdkrlR1yb/KzJEcf vpl8XMRTN9QraIdqg6W4+kBtiFHO7HXFsJZ8BPRwxk2LA+pa7BzAg6awEGtOkM4Gsf5t9VQxavoL MWUve3tXWKAcbYrZo/YQV1x9SGMjHu9Z7oz+bYUEYHPAo7gDxZRqfA7VJcQHC3rwkM9XiJkb3Q06 ++yJEie2uqAD2b7ytcmGfWP78Ynm8MRsB5QvIDQDTFrsGCZEfh8RNpwnm/1SjZDwdPIunIBRYy6K 1nXEgStsrHZunyuG9xCjrh/1+Q8OJhMgZM6pRhrsnTtGleOgRmcX3GLsXSQrY++eKzCpNY2lihMu BTFxM8URzC2YZBsLVBZh5T4FHlNMdf8SyVFbPjxFWSH3FGDtBWrbsMDMjIc5a1ad6Nl/BXxEEg2A 4fXuhFAXNuXATZIVIml2FCwuxFqzMxUPyLmWK05Bo3NW8B2zo9okchSx6TN211Y6Ii8h/BakGA2q c1HI2x6FCuaANxnrbrPc8C480dV2ZPQndxfAl+oVKGQPb6KSfjw0bCPGxJVueG58n8OD7U6oRn3L /0d2SByzws3LDkUK26Ngfjs0pED7RUzyaSqXFoghy5IV7VZZz+t/R8FLMz/mrajU17w54OKQFTIt m69foAAXg5cqLN/REKnBnlmOqF2egzz57FCY6bMvD426S7CdDGh4rOWZiGPLJGhQka3LpLflp0DW v64Q3Ye54OgtTYbTEMJfeWB6PyEqEFgqTO0yuc3F/Pjo85cMT76Z+vv8iDPq+NihQJ7scKG5d9Ux Odks72p2cMbD8Iyv4n6+74ZhpNy/57Yz9KFcLSFGLnHD5SNSlHDPBs3vFFgvYfiX07Br1YSC6nYz pZjYVwCfonaGlL/CxbhoOcoVD0MsU4s2ktMtWk2CpQuIfwSa8hSyN8yRby0x1p1RW1xTfH2DI4oz OagMfynQFxJo0f7B5lgXLEhybuZQwu7JUK8SzW1BexQpkAOuYppvVQ4UpN8WLMBBfwpyEwPCJyek 6FyXQGxhNs+1QCGawwYiTCOj+ua7CWxe3upMwMseualtbxpXg9aOWHdYge1/CSAhncvjL8b2B2ZB RLga2yY5oGwBkm1Gnmkuq9cTogfJxoFbGsN5BDaQUWJGezJ0Bdm38mrdSIddsht+w7zRt1IbApvm u0DU7s5pJKMVONRfOzbnnPrTpK8zTiVcnavFkYlilCSdciF+KTxzoB45q7cUiLw97YIKzLkrMqJS ZQ74d3FNJtUw9fSiuTXtoPhdjEtfWR5t7sqBQivE8bemud4/U4gC1A8Hep4HBcV1+sgMaWPP9pLe e2eHVPwbXLU5CAjJDKlmIQRIGhVkdbYg6SzzvVyfg2wCyXlhDvpsVVruJNC/N3e5oE1N4mF+Vu6K UpBcvbkYc/cq8CGcPeQ9rSsfuXXZIBZmhT43B4MWexjAx6llDga5ElP/lLns0WaxRzqvyWZ2Cj3Q ozEH+QsyOf/EE7KzTnLmTACNg+a/5XBXvI1fNX3jjtaVOShTV4QOFDCU9Wb7zMhV1eaOOPg4o1ev xgdtWpxeKUH1InYGvfIuxkHFWgJ06CvB+jNs6si3m2QXK9tBJcsKMcluvpIibGfeERShxF9tOdDL f4PIORvylxdiS/wh7Tgtzq11QiN/DrwLsPbO25t0pbYAXYY4Yd91dQZArKnPZ5Y7wp9sWR5Gvyhw rkx9btPPCVtPq0zvJyHwvXeWGD5kbwuSfjDgsnlvZ+y76oH5de3gosiOCh2dcZc57/LaHb187MmG 54CS/IqLe3aDHzK8JdvXgfic9PB5XIgKe1ZS0NVVhDYdxBg9U4ZrFLBv785FhX5Ss6tMPRH5ToFF Q0WoVJy1N4zuFinFRf3mIoyaK8P9d5YXqjDXfTKBaoE87HwXq8BH45ZijF/khsBPGb9u9/MDN4xp L0BZGmsBxmbks0fpKgIMXeSOt2ar4HGfmbnlGvygM+mAu461qUyefMHCAsMthRndAXl3WYaONTnI y/gKmruq9cWYssWd5EUCH6es0BGwn340PeddmABXibn9eMhJoJJPsvh7flbmmPnLXYSDmm0kOPjI 7A3n04XIq88GIc21lulHYdZv/kG/qVBPjFVnkp5H/P7cA1O6CVG+tL3h/I53AXuUonnpO1OOF2Y3 dF0n0KvLyUOnPmI0rMY1nGlh5puxu/W7MHY34ze9hdyRo3dDLvLmYuINAnF1RBizyh0XtjujijQr 1Lm5GLtTadH+gwPOqE9+M29+9jcV/flo1cURS/YrEBJt+Yzw9wpM7yJAkbysf/P246Iu806taQQ0 Xpj6HXjcFS3KkS/OT3UKc1GzkRgLCOSfWC2GWpoNuUoKzK6UJ3n6osTK0WJUId7lK8jGd6Uovms3 xAUnHxhvNIyhuJQC+z/U2aAuEX9OwstwWcLkxnbgccj263KgeDURtt5PLw898e2xG4a3IuDglcMQ q5WvIcTQhXJcPChFfY/foKQYZdRWBV6co7F5kx2gGMmZ7HIRApz7gvSG3ZNeARyoXcnnOmVHXj8H o/31QjTxbXYfAYrmzoFCFFMVLcFF0z7O2LRIgryu2ciH8DBlY/wrFZiXDLYnivivgA+mrCKSGrZ5 3xJqv/dAhUcPlbh1i9Cy2UoDs7tw55YS9x/S9w+UePBKi+h0vvwn4osWb99pERvLrKCocOumAjdv KhH4QpOMs2YDkteE5uPrMmc9QmPM8+nZvt27xbyNVImHj1S4f0dJdak+ffYoSJPim57jIrR4RW1+ SQY1R4dqEHjX1B7T/gPj38w1ss/fWcub1OPbO5ZfTJ/ZPiR3XaUeYR/UuHvL2OY9Fd6EJJcSlP4U rA/PVbht5N2TYPPrYNl6kV80eHjbyLuHprExY33wRGN2r3/G+hAXRu3fUZo9n02FePlEhbv0zBdv 2T7FPJGjfnUehjHndaJ1eP6I/c2DZxqzF9+ZAtINg0Uo0cDVsJL4NVjNyscdFd6GJk17+f5Rjdvx /KW+BAayz2bav3nTfFVIj9hwLR7eM8obwwNmvu+ZeMKs8sdaSdOK+64xrBgy9W7THH4Mt5TR+D59 DWblnjnT89541W0MI2OMzt2P/53lHL57ZtSVuyq8tiYbMToEP1EarpNmxnT3Pquj8Tpz73FiHWB/ G0pyd8/Ih/vMXCeSjS8vVbjDyEUgq1MPnmsMOwtRXzUGeX1o5A3z24wGjWGfNIYbfuJBdgS1/ZJs S2Sc6ZwK8+ZhRj4fGXX7wVMWlEeS3hv+Nurko5fs5zHfiJ83zeQ4QWeVBp0N+mQ91zmanv3QWO/u Q7IJkWZzyLwwk2T2NvMco/wEvWXPyn0hXWfkiunfPUa+3mrTvSvM7Hwwq6bxc8bY2YcPTHL4+IXG 9L4Kmu+3wRpD/8I/a/DIOIe3HqgREqHHD8nDp38/vzLKHTPWd5a2g3lh5qN7Rn/xgPUXn8KMfAo0 yiDJ9B1GF8Is+RzxSZ1gow1n2z4mtUsZ7XPIa1UCz56/tdauUaeeqlhdJZ59izGmwr5VG3T/Hsmz YZEoUosgI2/v0dw+vG+an5t31fgckVw/zG0Ve9vNLgLVfn2kFu9RiO/L+yCTjb77KL5d6wfbGTsT aJTRewm7Lz/g4C31480zE+9efLCSPkhy94bsjMEPMjYh3lcw/EgUL2SkD1GfSS6MPjPh+aQXLx+y +vbmSzrbpzgj+Bkrg4x9jfcBBt49ZXb1zedKhxDGztCYmB1u1j+wdW8/jJ+T5GOUt89NvHv2NmkQ HPFVizeGWIF8slnscy+Q4pnYzMt+7DeTHWCfz6bnvjaO5eUnXRJd+f4uPu5Q4umrxH428bkc0oWH Rv/2iLkRypp/80T4R6ZNhUEe3nw2zmGEBk8Z/pOuB39L2o9Pr8xilFfG1yPE9yOOjUsZu/vktYbd kQS7K/mayVwIZG0uEzd9Cs+g7FOM8jg+RnmtNc3pY5XBP74g+xRp9Cn3HrJ24A7Zt8+R7KLH0wdm cfMdkpXwRPFrIMu3OyRHoXHsZy8opmV866sPrEwArkQT/xHA4xeCj4dEpcG+YTG1e91Tu0M9LUbO M51tpaWuZwbb1mfw+Rnptz6TY9T/IH7/SN5lpA/W+M68N8INjWvyMPh4/BmO5HKJWfCydYQIxesx 4CO+rtcPGuPPnu+UeOGZCdnISL89M/jsHyknKclFRvvxs+bQMw3z5/mD9TW9cqr/gZTe52dWrn52 n9MzjxnxWebvN7A8LzCnNgd1R8itpNFm1F/9bL5lxM78jLnLbPvpnT/PHzAnnr+Ybxnl3c+Qu5/R j7TaoJ8Zo2TU3qXFPzGXHpUguvdfAx9MmUIkQ9KXDdrIRj+bdPj2XoO7h5xRsTQHrZe4G3KI7z9i 79tOsvIXrsWrxwpMbstH7nISnDWuvj97k4HVZhvZyEY2+kHB39ubbhg92hkbDrjj5l3jTt1ND6wZ KUShfAIsP6+x8clGNrKRRfzDLvwPJor9L4KPl0RVwF715W5kho1s9CvIHafn26NY7ixwcc4Cd68s 8PbOgiKV7bDtvluiugpEPnJEU/8s0LhlgYNLFuQtlAUFC2RBo1lOiLTx00Y2stHfRK/Oi9G5RTZU LU02KX8WFDLapuKVc2D+fikioLDxyUY2spEZSYnK4Z9y0PxvAB9MuUrkT+RD5GcjG/0yCv3gg4cP S+FZkA+eBpbC/ful8PCxD75EJK0bF1kGTx+XwuOnPgh6RvWo7oMH9NsPZRBn46WNbGSjv4ni4vwQ Q/bp/UuyZw9YO/aA7FrwF1/6vqyNRzaykY3MqIyR9v+jgMffAD6Y8gXs9btvbWSjX0jvkqH01H1n 46ONbGSjf6Ads9kmG9nIRtbo4z8OePxN4MNWbMVWbMVWbMVWbMVWbMVW/ovlF4OP70TLiWYTzbOR jWxkIxvZyEY2spGN/gaaTnQiHTHsWaIZ/6O8mGukB/9r4IM5Zc/cMczcdsXcyKGzkY1sZCMb2chG NrKRjf4GYl7qWIDoaBpi2HNERYlU/8P8UBLVInrzvwQ+mAMvv4M9fR8PQFIj82t5dWn8jTnFX6Oq zcBvf2Q/0tLHH9HPX03aNPT5Z/Luf50yIxtaM4OSlvbTMz/aNNTXplE+/gky+nf0Sf8D9eKfxOd/ mw1LSR+0v4hvuh8sD38X37QZ4PGvGq82FUpPXe1P7tM/VWf/Tv3W/qRYiWmHufGyJtH7FOLXz0QN jXVTkm1dKn3T4Z8b6zF9UhvH+POv5f1F4OMrUSsiJ6T9RS1UL1JteNFb67YidJ0tw9PQ9L3WPuyx O4YNlWDjbS0y8wKhmGAFpg0VoQ31488FHjSaH/WyIz0Cj7uifSsh2nVwxK5ravz4l3j93HvnU30Z 0CclFo5h53DwNHd8+FeN7+/lbWigO6a2F6JNOxHG7VIY3w6b1nnR4cEBF3Qf44KbIdbrvTkrwyCS vVYMtRGix2gpbn5IQ9vRamwf64hJyz0QnurLoP4pcvoP0pkoDfbMdDDwvXUbEXqOkeN5xP/C+P7N uu2J1+dl6N+e1Yd27SXYeuFn22NWT6/tdWF1kJEHspPDJsgRHPNv4aUnvtyVY1x3CfbcSc3PeiLq nQIrJzkkjLdVKxGGLyS/EOv5i+TzZ78I9kf05Z+qs55/o47r8OiE1CAz7TtIsPvyj9RNRm6VRItT iGFXGwNzTfJxIsn2sjkuOPQ4OT3wRPRbD8wcKcHqU//kWI/hRS6ii/8L4IPZ9VAh3S8YjFLjwHwJ Wvtlh6SkEEffpU9RPh2VwC7rb2i+WZUp8BEdrMTKaY6oXiQ7lBWc8fIHCk3QRTlG9RRAL8yBHksV /yIH7okPF2UY2MIRJ94kXyeOwMemeY6oXzo7pMUkuPevcap/P30L8sDSUWJU0v+GP3pI8SWd4GPf IA6yOHKwIch6veBrckzs74BBQx3QpQ4HagUP6x/pUm87QoEO0v+DRxUXhCT3ttgPCowbKMbkk3+n kfVE5GM3tG8qwd772n+ObhH4OLLUCYOGOKKtvx2EXmKc/pTRwEGL7dMc0GGJezrA6U8IYMJUGN/N ERM3qf45fE4nvbksx6ThpA/dBdC55ECrOcpfMBYd7h6RYsAABwwZ4oAmfnaQ5nTEzYh/C9888WqH A6RZsqLXtpR0nXzBFyX+asqFX4AQvQc5YsggB/TuJsbwmW4IjvP8ebJJ/95aJUGdMhyULMGBD/3r 58eBL0NleWg/yBknHmgSguvYNx4Y0Z4Hn1IclCDy9aX6vuxvKjYWY+42D3yMzuTbriPVOLRcgmY1 uYZ2y9YVYdR4CbpQcD3/8q+wVdT+V5qPIWL8eTAtOqvD9S3OaNbZFc9j/x79Drogw3CKlRR8O3Se /6NjJebdc8xrIL5ZiV8jYNr1SL6NswscUN7fEZeTteVeiLjjgrzc31Brssc/2E4yMQDD3yH/dvAR B/ash4uZMchpJC+rE2T6njUGT9eIUaaKEEcM4MMrld/Ht0HILdgdvds7YOVVDVJdoU/SrleS9o/O EMK7rosRfCTuZ2YMkQLdyAj2WaIwe258PzzT0N+caRhfzlTHlz7KifCzUtTIJcD+zzlT7cuV5WIU qOqEe9H6dPAu8Zz8KGX1TKZtrzTWTY63nsn0W5/BOWRBxPbO5Jz6SvHZQjZypiAb7HNfHXRBi+5O uPoxdV58OuWCuvkF2BioS2U+chkC3q1Dxeg3xwNhVvtA9cIUaF2Dg84HNcbfJMcPrwx+lzYZRZAM 3p5CbHioT6UfqcnGj5I7Sz18vscRBXwdcPpDRuTfyyAfK3pyUWSMWxrHlxaZTq+uMP9XoW1pPjou UKWjHxnV1+R0JfEzM6iHJLvdA3hoN/9HgI/keGd9pf36KkfkLSHBrfDM8iO5Ppjbf89M+gqjPQhy Q//mDlh/Q5tCm0w9OSrlEWBDYLwu5kpoNy7V+fJMx3itLLTc9cD6SWIUdsyBxsNdsGmDK9atl2Ht CikGteAhXwEBFp1VG0GSGmf2SdGxUg5Iy4uwaJ0M69e5Yv16V8wd54AKhezhP1SGN1GeGbAdzM6x BiuHCFHAT4AhU12wYZMrlsx2Qovi2cBxyI6+hzXIzGKp9fm2MndxSvSow0Hzreo06Kwnri12gFdJ Z7y1qJvzB8UoadEVZpHDA638+Oi6QJG+saaqg4yuM2c/TluJYZn30xUzBuTJ7HoEe6BXJR4GbksO yBl1JVKJcQS45+z/kYs06bHnaSW5EYx9+DeDDwZJtgN71kOP788VWD/NGTNnOmPqAjcEhZpv5+nw 4JQMU+j7GTOlOHJDY2DkMwZ8+Itw7rsXQgM9sGqeEyZMdMbqfQp8TbxiEqfFxYOumDjRCROnOGP+ Khkuv9amEvxrcGaHFFPoNxMmOGHJLg88DVRg2yZ3PPqoS+jbkelCFGkkNaz2vrrqhrmT6RmTnLH1 vArRmTEW4Qp09eNhyDqlof9ntkoxmfoxeY4M11/pkghpbJgG9y64Ydk0tr8T/3LBjnMqRCZnBMLU OL5FikkT2PpLt7jj5nV3bKTxvfiWMeF8fkGO0e34+ENuh+YDjf2YyNLiHR74FG1Z//IyMQrVcMZz +v/7O+5Y+Bc7h+tPKBFh1RHTM4jHCyezbf+1TIabVniRIX7HaHB5nysmG+d78UZ3PHysxLFNbrj7 zjL4/vJKhcObpZhqrDt7qRz33utMMku83bHGBZOnOmPNdiXCSU4en5Fh+iQjr3fFr5JZ9jv6mxo3 T8ixcIaRd1OkOHRdnUiOWLnbRuCj4hBXfI/V4fIuV0xl5nGyFAepflxifnxTYdNyZ0ykOlNmuGDx Hne8+p6GXayTqYOPD7do3hg+EM2cJ8Xes0x/k9ZjdHzOaBEK/5EdxSkoYcY3wSgbExfLcfeTadX+ /C6SS+Ld7NnOmLtKjqdm8viW5n/JDLIVRDPmyfD4S3pXst0xs5cASpkd6nd3tJDRuYvd8TbK+o7R M3rucqNuTZrrihO3Ncj0AgOTcvJeiR2LnA3tTpktw6UXOrw8LEGRsg449cGK/F9yw7y/2H5MXyTH 7TeJ5J9kaPNKJ9QplQOqCkKMNefzX1IceKhFcquup7ZJDTLC6OBasqMfopPfQbt/Wo65Rnlm5uhW IOnKITccN6YXRLxWYv1oMYrocqBYTTE73/G8niTDnTe6TOlsbKQWgVfcsHSOsd3JLth2SmkJfCM0 2L+R1cMVGxUIZQLOm2Q/prE8WbzZA++Tme/bR2SYOZG15RuOqBD6RYEB9fhoOy8z4INt+wnN4QIj 72YuleHqIxXOHJXj0H3r6RvXVqYOPqLDtLh7To75M0z2f++l5HyQJ0KDPLB2ASt3jN3YfVaBywfc cOC4Et8TB1EfVdi92iVBNjYc8MC1U+7YS3bsnQX/tLi8gZUhxs8uWEJ6nYyfZeR+Kz1/NLOjRP6i aT8JJhFPJpNtnzFfnqDXH+65YSbJ+4xZpO8kv6fumHgUF6LEuuUumE3fTZnkgoPXNOkGgXHP3NA2 H8+4s2AehGqwpR8fBatJcC3ENHc7RvJRZICM5MwL5mlR7y65oEJBLkZsUSHWPDCO1eLmUVmCrkxb LseNF4kBGf3+mBMqVBZi5U2dRT8i7rqiRt4c6LE/E7vF0Tq8IKC1cb5xvmkOl+9VkD+29EERb5Qk l2KUzJsdhRolstHzKe54Z3m+4spGKTrX4kCm4aHfeHN/74wth1WISqyz4Ro8vOiGFfE6S3O244yK 5C05oEL2/p67qf48V5y9o8LFI27YfTJetolCLcHHh5v0G/IdM6ex/Vm4zh3voy11MOiyG2ZPNcYR c2U4c0OJU1vkOGuhg/GpV39ZiWEXGb9LPo68t9URxcs54nqo9e8DmbiW4THZmLkLKSZ9okHm4phE Npran2aMURasdUPg58zGSgx/SxJd+TeDjyCiQmBz5Tzx/ZEcTZVZIRBmR42uLrj3xRx8kEHb6Agf TTY48O0x5bCKBR/rHFGWgvP+Ix3QMICPOo0EaFyLiwJ57dF2jjvBGzMmU2C5Z4Ej6pDzqOtvD5lz NnTZrU4WnYc/c8eQRjwUKsxB9XoCNGooQJ26fPjmy47fcvCx8Z42YYKPzRahQEUxhg0Vo2ZFap/q 1qvCgT4PD+MJ8cZkaLLpN98V6F6Bh0YdHdG3BR/+NMbGjfnwK2iH4tUdcfKFWbDLbF134SFfIQ6q +vPRsLEAtatykTcXB13mJuIFE/C8UWBMKxpfUQ5qNBCgYQM+avlzkV+TFdmFQhx6nTHhvLvTGQ1K 20EuzoaS1fho0pCPegzP6/DRbaoMLxKlDVxdKUYBPxGGjhAjoBLNIfGuYQ0OPP/gYvBKhRkA8TSk 220dL4JfWS6q+bO8qFyWgxK+Iqy5lLlVoZi3CoxvzUehIhxUCiA5on40qMNDqfw54CjmYK7Zlnfg QWeUK2KPkuV5JE9MXZoTbzsUqOKAfQ+NDuyzErNGiFCG5EUi56NTNyHKl+CgSm3qdwMeyhSxQ9lm Epw2n8N3Huhbn+agGBfVa/HRiOawhp89fs9HvFijMAORRifYjYsS1Nfuzfko7sNFLZrHBtV5KFGC iw5T3czypenf9wpM6C9EPdKRakWyg5+Pjy1BqfPl3XEX1EkFfAQdd0UX0o0G9XnIr8iGPI1draSC eeLrXTk6NuBAJc8KbUkeGjcRoD7JRj36bZ1uTjjz0uh04zTYOdsR5fJmQ5YsWVGphzNume3SvDjh girS/0NWh+yo08kJl9+lb74DD0rRprw9JKLsKFKBdMVMRjv0ccXjiMRpCCos6StAQW9Wt5h5CQjg oWQRLjrOkONDXAb128A7FzTwtScZ5hl0tlZlLnwqkQ7U5SKXnyPOfzKrH6HG2rEkU6V48K/Nyn+V 0vYoWoXk/5opPQQflZg6UIAC2mxw+oNjsEcN6rFjrN1EjMVn1En68oUCvAF1efAjmQ4gOWpEsu9D tqFqNxc8/Jp00WLlAAG8ydZUqsb0g/pbX4CqRXJA7JwDrTaz9jnsiTtG1+FCTbZWW4CL+jTfDeqz /ajXUIJjj7UZ1ldEqrC4Lc/Qh4o1Wd7VJXv3Ry57tCbZ/xhn5AWB7sXjRCjvnQMiJy7adxchoCLP oCuNaxOPPezQbIIcn8x15YsK83rwUZix/bVZXlQoxzX4gWI0510XZxR8sKvb20YLUbSQPcpXZmWJ 4Yl/STu4OGZDjUXW00aurEgJfJD9ClFgCtkOxl9VMdqOWpU4yEXz33uJR5Lg7sUZKZqV4aA4zXcD ko/6JE81q3Gg5P0fCreWItjM1nx75Ia+NbkowtgYmueGpCe16O/fnX6DoqQYV76at63BjrEONCby gVXtISJ/PWKndT8bRj52UjcBapIuujpkQzGy/40YXaT2m3ZwwtnXrM15SX1tVcMegt+ywLmgCFsu m8n6Ww8MbGBHduI3FKggwrLD6V05JpD8UI5WeXmYfTaxDyFg8kKOAPpu0gFVQiyyeSjJRl/XRKml xgWhHmTbO7jgtTGojwhyx/DGXBQkmx7A+O9GNNdVuChWgocx25Sm4Jl+e3y4EDWaOuGVxQo1I8NK rJ7ihC23NBmTOYp9dk4WGXSlQhUe6pMPaEhxUqFcdqjZ2xVPv5sAVHigG3o250LrlhUq6rOFje4o weEnWou53jfRAWXJx4lc7FClLhtHMPpdp7YQE5ab74Az8YwSUzrzkJexozVYna1dmYM8eThoO80N n63w89RSB/iRrvhWIjml+nVIb+tU5cBNlA1lO8hJro0g7asHWvoy4ENpmLfgfU7QZ8mCLDI71CB5 6v4njTPCtLh1coEDynlTu0wcQfyoS/JfiXRQkiUb2i9PrIPORB3AZuuYlz5EkhTsuwZrSB5qT3FL JvVVh4urJGhM+t+EbJE7Jzs6zPNIunCYkTkPIRvWXYhyZbioWouNUSqTvhcNcMShR5kBIFrjhsGi fzP4YLasLM97XCOBqFbTARe+sIJ3eakEnfu54FmMl6Hehr5iNO7oSkEVK3BPN0tQSPQbvBs6YsNZ FT6F6REXTYI1SwQvMlKn35vvfNB3MTpEx+gR/cYNXcnh97QKPjwR91GBPxtxUbq1E84FahBOv4mL 0+HLaxW2jBXCxUGA9WaH6M7MEULglB0VuznjyE0NvseQMyCEv6IdGey6TgiMyKCjClOim58dHF05 GDxHjodvdIilcYQGytG4hD2aLVKajPBnFQ5sc8XuCyp8jop30DocnSqENp8IR17rLJT64AQxSpV1 xGn6PNb4zK9vVNgwQgBXuQgHXmZsVTKO+vfygAsCKGDd8oTlewzxLyZab+A98715/VurRXCi4KRk awl2X1Lha5QnYiPJQTMrThUdcf2bmXGeKUa1WiKsu6DG91j295EhBEj+FJMxc8Cx1xlU1FAV/mrD R9E6Ehy5r0EY8S8uVodv71TYPVWEPHIO5pmBj1c33bBsjRsevNYaDQUF1s/d0JYASL2xbuxha2ac 1Mfbmxxgl+P/oPETk9NUI9TQNrOaQ0a+ih0KtXEhoxg/h0psWi3DsZtUL5rtWywFeuv78JG3tBiX P1uCj93dOBBn+w0+7Z1xlpxCJLUbG6HF3f3OKE/BXt8VCtMKHPUnluQ/hoKyl7skKO/Hx6YfBD4Y mWTmNpac3JohApRs45rIkZh0MPaFG1oFcNFpq8rAO4NsMHoZrbOQjbg45sCqDA2LEoA/aq6nrKPp QUF62+nupJuextSMdMgoE1Bdd0XxPEIsI9AaZyajMQwPzWUjVo01/UkWiwmx5LgKH76zMhz1TYub u51R3YeDDgs8MrDD6YnvpMetStmh9jACPO9Z3Y78qsHZNRLkdvo/ZM/pgKvfTA7z6GwRitVxwKaL aoTFsp8b5H+CECUbkC7H7wAygXeMGvO6EUAaKUc4/R0bw44xmngdF5No5feTAiPI+TbtLTXuRphW HHtSwNR8lNy4k+xpAIabBwtQ3FeItefJ1kSw/AgL0eDSakfkp4CmdcL5DnruVwXalCVQN0NhWISJ 70dMrM6MzxmwM2Qjjq9hdtlUCAmPX5zQ4QzxyNM7Xl5NehhIMi8lG12+vRP2XWHtTBzJ3MW5IuQu I8TulyY+bx9G8+0rwNoLrB4y9d48cMeAmjkoyM2OPiszAj48DbvXByYJUaKYAIuOqfAxjOVdxFeS pR1OKJ07BwIyBD5IHgkwHVguxaGrKnyLt/9kC/aM4kNbRoxjwWaLeeEqTCFQ2HCUDO/idxRJLl7S GAeSvynVzAVvzBb+NlMAVZl84d2POlbXqM8fnisxuyWX+kR26atlfxkdimF84HM56tHcD9tuHXzE GWySJz5fdkWFAgKsuak12EaDHhpslcluxISpMLkVge4+Mny1CM51OEA+uVhjZ9z/ltS/ZA58MPqv wsRqXLSb754K+GDrP9rsgAIU4F0IZYPtUXU5KEV/77utMcwL07/vHzQ4slCMYsV5mHpYjfh0mNuL xChIsrvubvwOjGUaXGxsBvUlSosrB2RYe0iB4G8m/X6yR4J8Oh6mHTebH8ZWvPdA17pcNF+tTGSj Wd9laUt1ODHLAXnLOOF+pCc7f4ydiWbnLw6Wiyd7NlKMclZpprNaHJtGPja3ALueW7Z9c70jShKP xmzwQPAX1j4yu3uBF1xRK4+dAXyEJQIfvVeQ7aEYcNMQIapVFWMr8T0ymuVdbBz7zM83ZWheiouR 25Wk3+y4mXYfHHWBv0cOdFicWAelYC9GijKLX5kbn7oav0sOAHigJ4HMCXuSB8Tx9pCJ9XpV5KHr LA+zXbMMxjOxGqwfIETVmgQWKZ6JBz6h75SY10uI8o2c8SAsM+DGkejPfzP4OA7TFW2sE4y47Uoo TYild1lUPasZGXtXHna/8jQAleE9ReiyVpWgkI/XOKBECT62PNXDfJvy6wUX+OYTYnuSgMm4nfqJ hMIvOfBBRoCEPm8xMY6+Nd99YX8bSwFDUwpS9z0y7XwcnSZE7ioS3I20rPtgkQgla4hx/nPGdz46 +3LRaoo7CaT5drAak9qQIR7qngglx+f2scGgoS45gKr5+VhqvlpEPF/fl4/ffSm4/2yeG/g78MED g/tJce1DxoX/PSlx7YIC7HyZ+m0dl5eK8IevA8591lvw7hUZ8TIVhDjwlv2bcWT1q/IxND530mjk DOP/okCvugK0nafIwKoBydF2CXwL8LHxifl2t5EnL90xpK440c1oxlxlBqgaAim2/tH+XJTp7IK3 caZ69wl88D3sMemEJknbn047w1vPw5JLWrPPzeYwmp3TsHPOqFqKh9WPLVMRt3fkQKYUYN8bS94x vz1LQU6xOjS/Xz2TyP/7AxJU/IHgw/ycwaYRKYAP4+5Ou9pcdN2lTsQPaytH5OhHCuDXQYr3ZocZ b64k2agixvFgfYZXoKPvuaIk2YjV17Up9MMTny5I4V+Ii4mnEtdj6coCMXx8xDjxPr190OEw2Y38 NSR4FO2ZaP60WNrSHi46MS58Na5sE7htVpSPCcbUizhz+Q9TYEBZHkasVCSAYaaNJb148BktN7Md 1nl9k4KeCgEOOPvezCEawc2r/U6oXEeEHUHsHH+9JkW1klyMO5pUnhkHOqa3CKMOqE2fRyjRoTwf necorfAvs6kFJl2JMeoK3spRk4KQsQcsAevT3RL8USCxTfdCKPmKklUJhN5jdT/qkQz+PsTLXaok 4/t4ygn57LOj67KMgY+IhwSmS3PQd2vSthGnxqxBIvTbqswQ+EjCjxjj3w+l8C0pxOIrZjbmmwJ9 ixHoHeuGz1HmdicXXmxxwZSZcnxM6JsG8+twULKlC56GmvuKXIi6Ksfk4VI8Ck/mjAPNRaPyyYOP BL9/0xWVyF9svKdLQTa88PqAM6qUF2LbQ1O9mBfkj0vyMHaPOsO2IEXwQeNf2Mge1Sa6kW55pQo+ Xh+RwNvHASe/UHC/3gHFife7XuiTzjfjg7vzUb6pE55FGUHGBwX+rM+B9g8O2vSXYP5yV+zY6YYL d9RmOyQ/QFcMdoN5phLdfHnoY3GhDRvI92xIcccGVSo2mrVjzIHq/H5OeJIm/U7s37wMZ36aFedg 3HkzGf3igc6VuGgy2T2R/WJ5t3aEIzqMdTfeqsj2uU15igFIHsf3FMKf+HrplQ5Jz3B44uNpF1TQ czD6kNoYmMf7cz0OjZVg2aHEYIE551CbKNgsfv1E1MT4nXW5jrwnQ0XyMctTzcrwMoDcfpV/DPj4 eE6K+uTfFxgXTON9hSHj5Zkb2tXkYdSJzGSKMOe0B/ybwcexJOCDCbZ7VhGg33IlIgg19iubDYJs HPxFICHshRt6NCEncddkeAJXiVG6mhDHP1oK14czLvArKMTOxzqrkxP3zh3dk935IOMygjEuMoRa mxxC9J9DtIbdEPMgonB9F7OtavY5dxaIUCqAAohMgI8ufjwMWJnIOESqMIHAR81h7mbBBntmYtow EZrW5aFKVR7qNBSiQzMecmn5WHNDY9HGx9tydK7OQe4iHNRtLECL1iL06OuIMZOkOPM4c1cQvznk gloFBNj2LPX6l5aKUdDfCY9iLdt4tsEBvpWEOGgEH8EHnVDYNRvykLGsFUDAqxoP1Rjy56F2TS48 HbOjXDsm3ccrfTym+d41WoTi1Qk0WBtzLDvf3yPNdo6iNDi13gU92wlQg/hcrTofzTuLUKdwNhTr IzWmfLC/Zw6KenqLceaTlWd/JiNPge2wLaoE0PDiEjn0PiI0qEVzyGyRtxShFTl/z5IEjp5ago+t BD4KtnQ2rlJaGrNvl5xRoqwIa+4mzS1+s1eCCj8cfBhB7bBUwMdrd7SpxUXn7WlJj2BXRWtTX2cZ 87HjyC4MoPluPdMDMRk+QOeJ8FuuKJFXiBVXUjbCVxc6olwZB9yKtH7YMuo+9a8iF6NPpceYexoW EGY24aDObHerv7s4W4hcheLlhuT/iBP00mzwJntQs4ZR9o3yH0D8zOP4G0oPlZmcMRM09eCh1Ch5 Mme+TMHVig48uLrmQAVqt4a/qe3q5KRq+OYAx5Uc9RF2fHcXO6BaBTEuhVrXlW+ftAgNN99VVKBd OT46zvrxN/Z9euSBBaMd0JzsXVXSlVqNyN4150Hvycf0Y5a2/eF2CfIVdiBbnAhcnnJGSfIhK+6z gcqzjQ4oXVOEI+89k+hN7Es3NMzPQYdFygyN5elWCWpQMHr4g/VdwVCyM9/CrOtZamlXzL9vbroZ rn5vTLajKmP/yV+2b8yFMpfQsKtgbjuubZSgHJO+S6C1STMh2rYVYcBwCaYtc8OzROf9np+WokFp e3gX56JBUyFak69gbqUaP0uG6290yS8evJKjQbnUwIcnQq+5oiL5i3W3UzmDSUB2NM11SwICEcbF jv3DhSjT2AkPwjLur1IGH6SnARw0neWeJvDxbLcjClR3xM1vGmzrLUSN1uQPkjmo/WavI4qS7O14 rksIrOM+KLFmsgOa1OahvB8HRb3tUMSbgyaDXBH4RZ/xMb5WYvU0R7RtzDfIRvU6AnRpL0BBJQdD 1iaKLz55oHt9LlqsTYuc63BqrgPy+TrhYUzq16t/vO+OecPEaFqP9W+MjLZuykPefBxMMVuEC78h RflqAsy+Zj0WCf+qxedQ406cAXwo0KmKPQQKO/yR1w71RsrxLbmLYr6rsHqYEAX/sEO5AIp9WpDd 6OKAoX86YdUBZaIU9XjwEUD02ix+ZQ5cN0oBfHji+3Up+RgR1t5M/app5sB5n0qZBR/s765TTKUS ZEMJ4m9AdZM996f/16zCgbs8O6pOzkx6FwM++v+bwUfinQ82eNndR4CmQ6Q4v12K1qSYA1oJ0WWC Ky5sdUHryhLcjjIpiQF8JNx2ZQY+TmcGfOiwY4wAhTpLCdsmtyLricQrmKbbrkz1bs//MeCj79Kk 4GN8axKk4fEGkRzEKSnaV+cioLUYE2e6YP48KebNdMaQ9nx4qhnwkTQIjXqnxI6VUkyfIEG/vg7o 0VWEWsSXoj4i7HyQUQBCRvUgCz52BKVenwEfhtuuoizbeLreEnwEbXOETwEOev/lgnnzLGku0bKV rjh+TWXlkHrqK9AHJohRtLITXqQ630zKApN3LyS546PncCfMYfhMz58+2RF1CmVH4d4kNxbgwwE6 CiJPfbDSLhn5boX4mLSPlcOH+50NxqJRWwdMnmUc32wn9GrIgboEgQUr4CN/U2cyicmAj8oibHig +0eCjy470wY+mC3kJd0FqNbF1eAU7qx2hG9lB1z6mrmcWAZ8FCfwkdqNd9eXEPgo7YDr4dYdWcxD GeqRMx97Nv3gY3YLDmrNsAY+PHFhphA5C5rARxAFKn/k42HwDEa3k+rAUpL/vbfUBMhMoGIBAz5G y1O4apetN6cljxyVCLMXSpO0O48+W73aDfeNQeZDAtNVCNSeDPFM0QGag4+2FIB2mv1jwUfwFRk6 VKbgpaUY46Y5U1+p73OdMaIzD2o1D9OPa5KAj7zeDjj7MWXw8XyLI0rXEJHdSTqWOAIf9fPYZxB8 eOLFbidULy7Artf65AP2ZH6f2s7H46NSNC3LR8P2Dpg0k527ObOdMbAVF26eAqy9lXjnVo/XN9yx er4zxg53RN9eYnSjYJQ5u1appwsCv1nav6/PFNiyxBmTx7B1e3QWompJexSr74BTL/VWZfjHgg+2 btAOCUpWccCxj56G8xgNy5P9zMxB7FTOfOCjO1oW5mHMjrSd+Tg2ko/i7Z3xiYD49j5CVG/hgvfJ BMFv90tQioDuHoZ/cToEv1LjW4xp9zosVIsPb9W4tNcZNXy4aD4zY+md3x67YwQF+FUbijByklFX 5rhg4kAh8rnbY/C6pOCjG4GPluvTBj5OziHw4ccsIKZc981FKZrXobilqQjjp5GMzmf64YxB7fjI SXo1NSG12QuRd2WoVFmAqec0KeiK5W5Nm7IclO0twx2S6x4EXHoRYAxLYVf9xkEZFsxywrABDujd U4x2jXkoXIiDLosTv6eKARh1id6Zxa/MywWbE8mS5XvMEzlqFhBi6fmfAT5S2Ima7YD8ufkYt8CK PZ/vghUrZTh7S5NMunJadtj+9eDjBpK+44OMy04KMhuI0Lm7EDWHueHRGWeUb0yGsa8I1YfIzYSC HPJaMcqQ4zgRYnm945fzLihbSIi9z60x1ovNxfOzR+/95qkDpjpP9jrBm4Rmi7U0HGaH4YnakK8b /5vjM9mdj7eJrplk0q58aotx5XtGVmjpN1FKw1W7/VcoYbomzdOwRT+pLQ+1RjEHf3IakPyo5oRu x7hR8MFun7Nvjc+JN/ucUNSTj9W3zLa0CbzMGyhCXyY/0lgvIb801ANdvXOg9eqMBgsM+HCGfx4+ tr9KnE7CpkuZclc9cW2FGAWrOSEwkdF/udkBfgQsj35i+xXGpOSRMVpwS2/sc/y1frnMxpAx5/P6 qDOqFOBhUZIUHJbnn9+o8dqYe//8gDOK5SfZMABb8+drMLOBHQob3rthmu87BKI4MjuM3K9O0vYT AlTeFNgeecMGaR3L8NDOsBIe3y6b2nVnqQh5i/Ow+YXllvbuzhy4yvnY8SJx2pUWuwYJUKq5k1lK hOn7DwclqEiBytbXqb1IywshBOTrUWCwNSglwxT/XB02jaTntnM1HQS0Aj5a+nPQeYfaKq9jYq2k 8Z10RuXyQiw76oY/G/HQfbUSyOTWNJPqUeQPAVbdsJZOZUo7+nJNihrkkEYc0MBa2tX52SIULy3C qQykXR2dLkK+qhI8jE3MB5KlenZw0olxNZz9LOyOKyoXFmJdoGca5N+YLtOFixIj5Nb5HJ+yRf8/ MVqIKk2dKEhK3K7ltafxqUN1/LgYsE1tlR+f36vx4q3WAny0JrnukCTtim0zOiYjq3tqzK3HRa1B 8TnfORN48OmUE4rk5GPaSctgm0m7YnY+Ln61tDPfzjmjVHUhVgeyf0c/kaF6SR6GGuQzp0V/X+13 hFfW7OixKiPXYTIpQm5oXZGDDoa0rZxJePc9RI2gN1oreuiJGwS685WMfx9SosArTIHRlThoPpVJ UTGfu5x4usMBuXMJsOaOWarSUzd0queA/S/jZcl0VfenEwTSCgqMO6Zehvkb0UyMucc0ZnWN80e8 qlSYi8FJDpQbv3/nZki7Grnbmp81S0+5JWPTru7rkHLaDrP4o8QQfx56LnXDttFi+Ld0wbO4zFwh 6oVY4kcbAvbzLia1/082OuCPogQQnpput9w+go8i/ZnMCPO6OdkLYkpx0Gaqh2FR8OkmBxQrSuN6 ZC2O0GJlJz78mjnjZQz9loBtu5ZCzLiS+MatnIZnrh0gQKHmronOu6SFtMQnAQoSCHoZ62Wp208p OM7NwYB1yiTgo0stZudDlQYbTeCDgt0/SjvhaZK6noZzhgY7E63Cn7V5qNEvnm8mu/X2oBNKFiDw cc1s/sNVGFyTYpyhcuMul6WuxIRo8OqFxniblpfhZtDWfgL0McQ0OfHtmgxNmTTtzcoksndvuzOa t2GuBk4U+9B3B8fz4UnxyFMLIOVK1BpJz3x0Q4pnPkhWRxGgGLVNmSL4ZtMu2bSr7nMVSMs17sw5 sS/h1hfXn+9xQo3SQhz+mtPMV+Qy43nyMsTcIPjiuRpvQ1JabGQO2Y/7N4OPZ2DvT1ZbMC72uRzV c+eAo94eQ49q2SvUvO0Mf/fdZzL6UdF63FoiQsmKAuwNYg84xTuzF4ecUZpZrb2tRZTRuTEHiMPC iMKZKz/d0Lm0PbpuVSEqQofv9HlEpOW23Oz2XHjXcjBcl/sxlL6nesGPFVg70QE1Kzng8DOdYas8 KkKL3ROFKFjLGQ/DTM6UyUG+TKCkhL8IJ4PT72SZvOvI9x7oUJqHHvM8EEb9izEenoz6QkLdjAf/ QW4Ii2YVdXxzDoq3I0P8QYfISB3ePlJg63JntPS1g1zKxZILGkTGBxwEPsZSoOxaRIQ1x5R4GUJ8 Iv4xW5lXNzshoCQfSy5nNCeQnOh9VwT8ngNNZnjg/TfqD/EomOnPQgk6D5XivnH7mOH9yXkUgFWS 4OpnneEwbDzv7q0Uw6e8ALuCmM/ZYGp9PwF8Koiw4YwK776ycxL6WY27F9wwc6gDJq5yS2bFPZVg JlKDpcxtRmXFWH2SbTuS2n4fpMTmGWIE1KOgz+i8XxJQKezFw19HVfhGdcK/aHD9lBxTBhAAVWbF H11d8JqRA6OBvr/VEVy736AsJsTiw0q8Z2TpO3Mo3AV1yOC2mOZGxjinIQ+7qy8HNQbK8PIzy7OX 9xVYN0OCBiWyQVKIh7X3tOzBbmo7kozE5k4cCP4vC/LXc8TBO2p8I2P0/ZMGRxY5IH9BHiaY6Quj H99DWTl/ut0RZSkgXPNAh6hwVv6jzK5UjYkiPflOY6PxMWArIK8Aq0mXIsNZHYo0v341jv4OM+pQ uAYrBwpQvKUUwfSccGMbFge4Q5UYGWCPIk1c8Oi93iCrn4PVOL5VisGdmZf+aWBtdX5ZZwGB6Bwo GCDBndDMv2Mh7rUbGhS0Q90xcrz+ws7326dK7F3ghN6jXHDutenZ20YJ4V2IjynbPBD0kdWvr2/V OLLYEb5FOeixTJGBG+08EfpQjvYl7VGrvxTXg7Q0N8ylFkqsmyCCRvJ/4OZ2wKm3OtIH9saa9QP4 KFRTjC0XVPiQIP8a3D7nhtkjxRi1zgPhcaZV2H1jBNAWEuPAE41hHphD4TdOyTC+jwMW7FYa07E8 Ef7YDa0IUNQdIMXVQA1CDXOpw8cXapzaIUWf3hLsvqZJCJoOTRKhRFE+/tquwIuPxn4TQD+2XIIa FMhP3Gc6cM689X5qYy7y1Zbg2htj3Xcqw872sAGOWH1Jk359jVNjQQMOSrZwxv23RntHc7d/mRPa VbeDxJGLKQfVJNOeBvmMoe9vrHdE7oIE9F/oDD6BWfWLJTl+ddgJxSoLsPA66VY0uyK6c5gARUoJ sfS40fYz+nrCFU19siE7Jwe6LVQgIjq9h5vZOTm3wAE+pMuj17nj6XudgR/f3qlxdoMzGtQUYMgm Y6DCHK5ldPM7O89nSadzF3PEZQoKIgx+jOxi/FyHKTG2sj3K93LFc6N8vnqgwI75EjQubwexKx/L r2iMOk4+9pEMJWTZDIfvj11X40sYe+HDlzcqrBtB+ttMgssfjEEd2aXmBXMgdxWxwRe+/6Iz+ArG zhxb6EDATYRNZrursYwfoT6HRZD+P5ahrh8PAzeqDONkxhIZZQpqmAtgIskfvzsnRbl8AkMKJDNW xvYw44tK5oA1c1DaO68d8vgQyDydueuuGRAeckOGZrl5mHZMTXaA+k3P/kog+vx2CuIKcNByihub isP43ggNVvfnoVBPKd5Q3xk9CScZeXbTHRPbcpG3sphig3jeKTGZ/HTxiiKsPq0y+kIdPpCsrv1T iALF+JhzUmMIgGMICNQplA1F2zjh6BWqa6bfV3c7w78CF/22qDKQKqPD7rECeFV0wOkXrP59fqXC cdLrvqSXHg45DBeThEfFX7TBpLepMKUJB/lrOeF2MCujjL07s0uKoZ0dse26Jc+f7HJCHh0Xkw6r DD6I0ZfH192xeJwDBi1yYy8IilFjXH0eSjZ1NlxJz/Dh3VPminEntKmcA1KK7yacYmU0fkX+yT4n lCvOQdcZctx/qSWZIhkiflw74orO/gQ0prqxqfFMrPTWHU1KxV+1ywbvTw44oWw5AeafUiOUkT1j jHhrlRguIjt0mSXHjSdaGjvJGo3x9QN3DG7CQ/VxcgJ55nx2IupoJYbti5Rvu9Jh61A+KgyTWd+B iWF1+TvFC1GfFehRnoeOf7kjlGTQ4H+j9FYu5fDERwLrzcvYo1RNCS68tnKumeRuSividV0JDlxT G9LTGFn6+kGNaydkGDvIEbOTAURXlghhL8qBTsuTA0xa46bByn8z+Agl6gz2DZKWjmV8KTLyQh4O BLPOYEXDHMjB4WLrU5NyLO/BR3HPrMhu/xvyUSA1fKcS7I1IDqiYLzty/N9v+J2Ue+oGhWEV4jMh 4S4VuahI6LIiBeTOObLAJQ8H/lW5qEDodNgOS/Qf/VaBqZ35KFaEgzLluahahYuypen/5KjGr/XA hxgvxLx0x4gOPORRZMVvguwoQUZm5RmNIWDZPEaIItqsyMbNCu/KQqy6mFYjyda5u9cFtfzs4ZTj N7ho7dGwmzPuhjMH3t3Qri4H7qLfwJXboWJ/FwSGsWkI7crbI18xDqrSmKpU46FhD2dsWu+MYtKs 0BUgHjEghlFMAh/jGtvBgdr1r8NHDeILc0aEyTH19mauuPVIpHzpDQ60OE7O0jevPUqUZXlXmfpT vgIPbSfK8TyC2c5WYHIvPgoSj/6Pkw1FyEjM3c/uhO3/i0BlTppbCtrz+pLxiL+NI0SJBb2FKENj LOPLNeSMlitHbVP/K9QWYv4hZQbSruLPXygxn9ouRW2X9GX7XIH4UawcH4OWuhkARfy7EHZMFKEw AYfSFXn0bB6q1hRi2GIZFrbjwNkpG8o0cWTBKbV9Y50EefML0X+gCJXJkPowslSBg8LE5w6jCWiY 3YT29KgLOWt7eBelOpV5huuEmw9wxoZFjvCh+fYszsfMI0p8JCM5rDYXv7v8H5RVBehJDs7bm4Oy JMcVKJgtQEZ42EaF0eCxRvDSMglqEa+q+PNQOm822JFc/V6KC//KXMPO4qa7pgsUrm9lDnYSX0mO yhTIDn6W35CrBBfVqG6l2mJsuGHKzY0jQ7eojwAVGBmqxEUu+W/I5pgDfiRPlchhNurtihexluke z45L0dTXHvlLcAz5x8xYy9HzGrR1xvnn1nLI2cP5ns7Z0TlNqQBpc8pX1kpQtpg9ipWmsZEs+TM6 QP9vN9oV980vQCBwumWciGTDHn7M1YXVuPAty0EpHwqslrtnAPCa2n5z0RVtKtojT2F7w9xUINmr 1EyMoX35cJVkQ/6yAuP5BQJMH5WYQ7wuQXzzLcfKfyVGBonPzKHwBUfM3+lA4OaZB4bVpyCiiD0q MfNRkdWVag1oDk+rjdv7bP2X513RlsZVrBQH5ajNKoxcVGGumOWhQXcXXAgy282I1mAHAaQyJUgH SrG2xo/mrxTJSNdxMjz4ZLmCHXzJFS2rUD8K2RvmuxrTF+Jj7XYSHHyUsfTOD7fl6EBtehe1N9iu qsy13u0l2EBBfEWSbzey7R2XeiA2TIW5Qwm45sqGLP9H/PQRYPI6heGWnnMryUaRfGfl/AZ9cS6G x/uAMDVWDRbAu4AditP4q5LdKleJj06DHRFQMjskZDfrjJHhVWQGFjrIvh2Z44BypKcMv5i+l6X5 K1WMizZDpLgZbORdLNnB2WJUqMDMMxdFPKn/2Sg4pQClSkXm2l8JLr4z6cqLc65oXIaDItSmgcfE j5bdnbGFZLywJis0ZG/6rjMGZoEylHLNZjjv51+Tb/AXDJUubIci1cRm15Z7GXLpGfCh/sMelaku kzvO9NmXdKFQGQEmkN+NMpO5YOpHh5rkZxnZ9LGDgGy4PDeHZJvkqbwAU7cpjanCnoarmEe2JNkp nAP25K9zFmPtbkUac41Gjjj5UpfMirIC3fMyV3q74EMmzn0ZAlGyz/WK5YCIbJymEIeVTZJ9P5Lt AvR3S5Ln4CjjZTOvPTCmCw9err/hNynZuEqsnlQqx/hN8nX+7O1K5nFE7DsFpnXhoyj5lQpljXxm 4ohKAsw8rErQwejHctT2zgYdzV/9uqTTZdl5L+dDdobim04z3PA+NmPjDHvhgT8JaOQvzNqBikQ1 Wzpi2RYpmhXODqnGHi37kp2OM9mDVzSPrZl4ojhrow32gOalbgsJTgYmSuH7psKKIQLky29v4ElV ompE5QkgjN2kwDdju++vy9De32gHqjA6y0O9jhKsXuOMOvL/gwcBvSErKPiOM/mt69ucEED8KknE yFR5P/JJZHPqd3cy9kOP+/ucUc3PDsKsdui5OH6nQ4cL8xygz5oF2eU5UK4CH+OMZ2fvrnGAlJsN xSsx5+f4hnYZ31WC+lWxkwuuWlxkwjyD+d1UKzHsfON32mR5/+KIM9k6MY6/Tfpd1GM3dGlKYyJ7 60+8llIs60RzwfSnIun5sCXuVs8dBxGo0jHXCHN5ybzA0xPhzJwTAClenOxMOaMsMTpJdtq/sSM2 n7eyW0mx94yqOcDXCLD7RXKpXcx4ixNd+jeDjzjjhCbdtmJyUQ8dU5LQsn+/f6TAwUMKfIo/F0DO 7+oOV6xY7YqNG1yxarkUB4wrpk9Pu2H1Svp8I32+QoZTRpTOHLjavUyKZUuJlrti3UYZ1q2SYqnh bykOP9BYdRQPL7hhzXK23uZ9HngVqk9A1rFfVDi0XYpVa+h566k/y+S4GqQz/O7WERlWrGH7t3KV DNfSeXXtuwceWEnPXUfjWLdGig07PPA+mp75UYXN9Ky1RBvWumLZHg8EG2/ZCqMxbl/L9nXbcSW+ xLJA4NQemYEnh84Zb80gx3bvsgcuEM/ev1RgP7Vl4MNqmfEFTj/gnmnmJT5XiHfLmP64YsdxBV5/ MfEO39U4uYd4Y+TRimUynDO8I0OHh6fkprmlOTz/VGvR7tMr7lhvnBOmz2duqs0C7cz1+elVd6w1 tr1pjzuehcT32bLevZNyLGfGtlqOK09ZA/D1vge2rXPF8k1ueGw82Mq8HCxfKeYaQh1e3TC2vcwV B6+pjavlloH55ycKbFvB8mzvGeML0ygYOrPFFatXuOI0c/Xze5I7qrNqnQwnmHvXY0gfDrL9Wcbw KzDpHL4mnq1dxo5r+SqSnY2s3hh4uFGO2+9N8vnmrgfNh7EuyQ3zpt3VK4x/r6W6b81kmQJz5hrH ZUx9otVrWV1YzrRLf2/Yq8TXuKRO/2uQAlvWsG2u2+FuuLY4+Tc863GbAsUKjSW4HvJjzgwkONlb JlnaQTYmKESXbB/eB3pgl7HPyzfJcfOFFpl7a6zxOtoQms+trA6u3uKOICbFjxz6wW2kH4wNe2Ip /48vu2OdcT5WrJHj3O3k5J95K7MKR8lWLjPO3cX75je8JErz/KbG6b3GuaT66/fSvLyyNkb2t8Ek 79uNNnTlVjfcfZMcPzzxnWzTHiPv1m91x+3nmeddxDsl9m9k29x+WIH3McZ3Qh2VYS31a+slteHq 9bMHZQZ7solkfuVyGU4aX0QXxLw0ciVrZxjdOnBPY8HnQOZlaAa5Jj27xe7QP7nsZrDHq46QfY3J uNx9eKywkKUbSfihw6OL8oS5iO//CqOerVrrbvRFJjn69kKBnWtZ27HnpJJ91w75yjP7XLGGxrn7 hjHgoHk+d8wDz4I1eHqN5N84h6s3uuHB+0TyT/y7etIDd59q8OYh2bf18TbEZPfMxxdK/mTHGpOf XU+8XRvvZ4mPZ+6abFN0iBpHNhttzEaTjWHGvHqDO55/TWben8jR1peC93OZfyHb2+vu2EBzv34T wyPj85nxMXpF8hBrBqLjiG9Hd7qyNo6x88tM/d1yRIG3YcmcfTH6lU1GO7N2d7xfMdVl2j530QMP PmgN9ndLvG0m/T97V53561ep/WNGO7CWYgaWtzrcPiM3yPOW3eZ22pgG+EqJHcb5XkP6fedFCjaa Yorrh43ySjp29JIKIdFJL20ID1Zir1Hut5LOsucjtbi2m3SW+L//ivmLCT0TbMehbWzfl1Esde6+ xuKinbcUKy1lZI3k995L0yJa0DniOcV56ynGWEY+98RVVl6+BClx6pQS7z+qce2Y3OCrGJ3aelBh fOGoZ6JguzCsv1TvLpFPogX0RHz5osCfDXhovTDpTZwxZPd3bHJN8J3rNrCxnmGc1N+jBl5YmfdI LW4cc8P+8yqExqa8CHz3tDxBTldsluPyQ00yN6d5GXbfyrplQ7m+KV1SwpxxYQ7ff/s3gw+mnED8 1bFJHGHig19JHJX5a+NzJvO5V6LgLmcKlFIue3Kvp0/cplcK/ciIk7LWtmcK/fay8rmnFV6Y89gz GX79iODOK4W2U+Jtajz3+pv6bK2eeR2vJHN1e50j8hSX4E5sWvnslYLsWpMBzxT6k5K+5EyBx+mp m1r91MaZBj6/c0ePBkKM3aX6gXOdnn5kpG5Gdd0rmTnPqPynRTYy2nZ6+/GjeZcc37wSyV5y/fRK QVZT03HPXyB3GdXD5PyeZ6KxeaajH+mxjWntc3rrsml/u0cLUX+oLIM7jmnlcXILIV7pmI/06FV6 5yQzvs2ar/X8AfqdFjvjmUpM45mBtr3S4Me80ij/iZ/NAIvqRGFW4tcYpHzjFUu3NzmhQR1HXHyv T6c8pXJOJC0XtqR5Dj1xbYEQzlIO5l9Jbjc6/m3vP+8dH78QfHwHm3ol/cEBhY1s9DcTkx8crsXp hQ74vbAjzr3T4nuo1pD3HGfjT+oUp0N4mBZhX7U4MFGEirUdcfljRl4iZiMb2ejfTobzL2F6vLvk imolBZh9Qm18d4GNbPSzKD7lam0KMew2MGn2SRfQzQBAuAbnD7nh+ovMvFn8ZxK7U3R6gSM6j5Lh VXRy9RjgwZzTvvG/AD6YcowoN1iEqbWRjf4HiIxMiDvG9eQiv/b/kCXrb/AuY4fyZe0QMNIFb2Js PEqVf189MK4TFxV8c8BdkAX2kmwo38IR1z9pbPyxkY3+U6TGmWUilK9ohyKeZE+5/4d8lbiYfUZp 442NfhIxfobZ0agP9lrd5MoXohbGupqUfdq/we8m2894fowBe2TifwJ8MFeWzUX8zTI2tG2j/wmK UOP0IRk2bJZh5076d50r1q51xeazSoTaVu9TpygNzu2XsTzbJsP2ba5Yv8MDb8N1Nt7YyEb/KdLh 1W03gy1Yv5Hs6XYZNm6R4dJLrY03NvpJxKT4liS6mIYY9haRn/E3SWU35b//GfqV+vfMDlBjoo8/ HRH8QvDBFOb+5J1E64k22chG/yO0xQpttvElw/yz8c5GNrLZgniy8cVGP4vWEF1NRwx7E2x61v8i LzYSbSB6/kvQwC8GH7ZiK7ZiK7ZiK7ZiK7ZiK7byXy1/A/h4TRRI9NhGNrKRjWxkIxvZ6H+cHhE9 tUWctmIrxvKLwQdz5a4/URmicjaykY1sZCMb2chG/+PkS1SeaIct6rQVW8EvBR/MbkclImewN17Z yEY2+meRRyKy8STtvLLxy0b/dlmxyfPPJRewC693bJGnrfznyy8CH8xNV+OIXJH8K+r/yZTay3H+ VymzL1D8r5LXv5Jf0VFahHzU4CNDn7QIjbTNZXIUF6PDtxANPnwgIl59C7XdzmWjZChOh4hQkpOP rLyEfNWavd35n0OR37X4FK//IVpERtvmLv12P6X4QGeMgYaAfXGdrdjKf7f8IvDBvJ6+BNjVFPOA PjH9M4FHzFsFZo0UoWNnMcYv8cC3/wgAeXrWFe3biwzUpZsTDt/X/oPn6Z8jLx9vyzF2lDNOPk2J X/88mQ86LEUzPw5KlrBHqcpCrL5qm+/k5i6abMK4FlwUL86BTxkuOi32oIDS85f3I2VK72+Sq5fS 7zPaj58xxvT241f4IGozWoP1U0QoU5qDEsXtUbeNFE+i/nl6dWuDBNVK2aNESQ58Gzti3+N/i/7/ 3X1knq/F2Y0uWHJUmUp/mKtMCxNds0WfhhKBG+vnoHv79hRntKcYqwvGLDuEt1HW6sbh5anNGGys 26FjZwyYshYPPtu4+G8svwh8LILp7eaeiHvrgTGdeShblotyFOyUKmaPSj2ccffrPzTQCFZg2RQH VPXODmUFZ7z8jwRkz8/L0L+fIwZ25kPJs8OQzap/iTP6e+UlcKMY/N+yY9wxTbL8ur/XBS06SfH4 H7S7cG2GGEV0PPy12Q17D3rgySfTan5UsB6TGuhRtpwe5SrpUaKEHrW76PEw3EpbIXpMaayHbxk9 fMrq4VeRfleByE+P+h302HsnEcg9okdANfq+PNX11aN4ST36b9Cn+Ib4iDd6rJpo/B09o1IzPZZR O3tn6NF3FvH3sh696Jml6ZmlqR/12+vxmFnJ/aLHyHZ6lGH6RuRXXY9jQXp8uatHFz9j/XLGPlc0 /cuMJaA7BWifjTsf4RrcOu2OPXtk6FndDn/0keH7L9MN9k21V5dJEODLQWkfDsrQv2XLcgw21c+X i+b9XHDumdbyN+EqzOglgJ8fl+aCfkfBcOkyHPgxv/HjY8ImVr8fH3JGBT+23Zr9pHgWzv4+7KEb ujfhwjfhmXxMXS/Hij7UJrXjQ5/5Mm2XZftSqZYQY5e44fn3jI0x7pU7erTgGYJ2n9JsP5l+M21X qSXG8hNKI+Bjg7/jfzmgim98PzgJ/fAry0PnSTIEfjYBjjcnXdGBvvM1r1+VAu4fvsBCbUUp0b86 F951JNi1xw3HTqvwLZb9/vRCPSqQ/PqQ3PuSvJYz6gojd13Gk8x+M7UV9lCPlqSDZUobZbQSK5uM /NdoqsemS3rExj83Qo/Z/akOI89lWWJ0t9MKPSKT6WvIMwUO7XXD1pli5CzMxaSL/3TwQX2L02D1 GAn6zfCgcf29fb263AGlKzji4qfU6jLpVzNt0aehhOPGjiUY1KsPBg7ug/reXshVpj+uh1qrG4uX F7ZjdK/e6D+wH9pVKwaVpjZ2BMX+T3Di26ODGFrNj/S7NNllX7JbZUm3WarTejBWHbpDPiZpeX/n KGYMaEc2m6lbHvXbjcDGc09hzpVP1zejQdnSZOf8DO35+fmSDfchG+6HcswzmL9L18GoVbfNXi0Y g6ALWzC4bT22H+VrotvY6RjXrQl6LDlKM5e58gvARyTRALBvTWSVL/aLGid2umLVain6kTNzk+WA Ii8fk/clDm4TpzuZ/51SChTzeeKUIc9UnLm1+uapMzocmS6Ed10XI/jwQtpSsdLTj7Rs6+ZM1F9P K39nhh+J6xJ980CrEjyM2KTMZP8Tz59XKn1J7xwmlg3z9CcvWE8fSy6lLjlZS4nXzGe5EPNQhk6t HbH7XnLO2wsP1jrC01uCIItnpLUP5s/7cemA12Y6wJ+c530rfIoO1eP4Rj1WrtVjSBM9pLn0yEUA ZNwxK21R4HN+mx4dKTBSF9Jj+io91qzRYzUFPsMIfBSkQH7NDVP9TxRUrad2N1AgVjqvHio9te2v x51Q6/38ek+PNtR2QQIrw6dTW/TbuZP0aFRbD7lQD11HPQJfE6hYqUd56mcR+nzdXj0+MC99pED6 9C49OlTRw+UPPaat0yOIAEnYBz32L6FgzZPADwV4y6i/K6nfK6iNNVRnfFs98hXQ4/DbxHOjx9bh fBQbJEPoLw1+dHh1yx2rRougd8qBZkOdsYbs6cpVrlgxzwnNy9mjQC1HXA4xD4I1OLdPhmXLXbFu kQQltTngXdsRK9a5YtkyGU7dZsHy5yceWD3DAYXdsiBLlhwYtkdlkIeod0oc2OaKaX0F+F1ih/bj XXH+rgrXjsgwoi4HOhUXIxe6Yi31Y9UqKRZOk6B+STv4NnXCra8ZsBWf1Ti81QXN/HLAo4QIC6if q1ZKsZran9JPgAKF+JhzXE3OkgVjTy+6Yd4AARROdug8wcXAD6Yfy2dLUJvAS5U+rngTzcr1Zwq0 d9N3Yzry4ODCxdC5xLu1bnj44Uenz7HgY2CAAE3GKpLoatBVPeb000ProUdrAtMbSJZXrtZj+Tw9 Gvroqc96vDWmP0W/12M3fV+zsB6elakO6eMqktHVRGO76ZG3OOnRdeNzo/S4cJjqzCRgQzpVoA3V o9/uJlAek5oNfeyKqv7kj/9W8GHNZ1nzD1pMaSpAhR5uBtubtjTh5HxFJn3bVwWGNuCh1SKFUSaT q8v0tT3R1/8IwEh7uTKtN6pWHILr31Ov+/bgHNQq2Aw7n/9vgI/wj09wbP00NMzpiYKVu2HhqjVk 71Zi9crFmDy4I0r+URztpx+CCZfFIHD/LFTMXwRVW/bHzCWrsXblQozp2RQF8lfDoNVXEW2s+XzP JOSUlUTfGSuwbt0aLJncDYXdpajSfxY2rluHNYvHo2rBQqg8+LgRfETj4YEZKF+8NBr0Hoelq6kv S2dhYMsqcONmwR8DNyIsk+P9BeDjDdhbHlRWDIcas7oI0H6ZO7YOFMC/uxRvY01K+/WZB+bMdMas Oa44ywRykRqc2EqOZ4oTpsyW4tB1tVWDEfVNgxsnZJg7wwmTqe70ua44dV+TfGAercH53a6YzrQ7 xRnL93og6KkSO7e647Fh9Zd1bkcJfBRpJEUIs3J2ww0L/qL6U12w45KaxMB621+femDdAmdMmeyE qTSOc480GTRyOtw/4oqZ1Maxy0pcOEBBwDQpTj/RGb67sluKqX+54MANtZUAln57Ro5505wMvJuz TI5rz605FnYF8SYFEzOmsGPbdlqFKDKqnXz5GLExM+DDk5ynErtWubDzN8UF248rcOOUOw4cUOBT TNJt9JfX3bCE+jyZeDdzpRx33uiSn8NQNY6TbEw1zuGmwwo8vafA4R3ueB1JAe5dN8z8yxlzSBYu PDKN/fMDd6yg+jPnumD/PU1Cm7GfVdg1y9nQ1kwKTA7d0rAyG6PBReL1lKkU7B1Rmla7o7W4tIOV zanTnbFklRyBH3VW5/HmDlf0bsiFjIK1vhOcjPxg+735gAoRxjbDXyuxmdqaRX2bO9sF686rTLsB TCC5XYq581wwi+qsPqsic5FJ8DHLAVX9HHD5W8pzPK0hAZBleiwZoEe1TnrSB+v1do7Qo1ILCvoT fb66px4l6XdvYy0/j6RArDYF/isoaOpVVY8Rh5K2GftZjwG1KCjrr8eTROAk/BWBEQIVvxNQeGP8 bCjV7TQraTu7xhEoqUdykejzgdX16DrXyi7gVhprMXPwYdKXNQN4fwP4MNrQp3JUpyB8+TUtzBdN Yp/LUdOHh94brS3oUL1YJbpX4aPtdIWVwIv+/uiONlU5yFPEHgVrS3Djs+m3IaelqFdAgO0vTDsJ t+Y4oHpFB9yJ9oL5gkhYkBs6+3LQYKIbwtPNHyN/B/Ph10WOKItFIQ0WN+WiQhcp3if4DC+EXnZF +UJC7A7SW/Tj4zEnFCshwNIb5jbEE092OCFfEUdcC/uJaVcEPgbVEqD+cHerfuLrGT38fQnkBll+ /vGUHoUJOKxPtFM4jQB8jeGJnkPAemINPWqNIiBt/vl30iXS15br097fsBtSVKzKx5S/DXwwOxpa XN1HPs5oF1fu9MD7KMsUq7hvauybK0E1bzvk8hFiwmRnM1tKwPihFtbS7GJCVNi30uiHyGfuOq/E szvu2Eb+6H1kJvpM/55f4IDKVSW4H5kS3xgfXQxpvXo3LvIzHl09itWzplMcMQVTZizEznOBhmVd ayXy3T3sWjKHxkd1p83FlpPXcOvCIWw5dRtf0x2nR+Ppyb1YNG8uZs+chTX77pN/MivfX+LAhvmY Rd/PX7wTDz9Gm3UkGKd3rCSfTP2YMhubjtxASOyPAx/BB2f/WPARG4Hgx1exY/l8Y5+nY9nuC3gf kRyjg3F22yqSUabuX1i68yTu3DiDbQdP4fGXjJ7p+YDFdWqg1aj9iU4FxeHRjnHwKVAD0068M3wS 8XAHGnsXRePxh2GZeRaJa2uHonjR+lhykwW4QbunomSRLjj1yVjl1QG0K1Mco86GGD94gYmtA+A/ 9Dj7tJArGNqwCprPvWDZj9iXmBHgBe/eyzMNnX8B+GDOeyiR9KC5J0KuSOFfUohtFDREXHRGCV8R djwyOYcP12RoT0GayjEbilQWo0NzPnx9uahRl4+AalwUKcRF55lu+BhnZjifuWFQZQ4KleCgUk0+ 6tfjo4qvPXIW4GHyPiViEzniiBfuGNmMh0LeHFQJ4KMe03ZtcnYFsiOrHR8bE1avCXzMEhEiFWPU SAcEVKR6VLdWBXvo8vIwaafKzLEYc0DXkmGk/lasykO9+nxULctB4dJ8TNyTuB9pIS1OzxEjp2MW iLQcNGkrRLVSNMZqIgwZ4ohW9QSo4mOH3GXI8T7VJRhaJjd9fHs+ChfjoKI/O74aVYh3PnyM2agw y1P3RNwnJWZ0obqFOahai4+6NbjwpQCmTTMBSvzOxbgdGU27orm+54ae/lwU9uGiJvG3Tg0ealbn 0nh+g2dlR9wL97QAgzsmi1CuLBeVK/NQn3hXvgwHJcuKsOGqJkkw9fU+tR3AhXdxLqoyc1iLhzq1 aU712SH/XYCjH/R4f8oFTavZQ8LNjrbzlIhfGXt1xhW9AjjQCv4Pfn+5J7QdHeyB8TTuenW48OJn Ra2xbvj6UoGJfYWoUUeA2lXsoc7LxV9njf2JVGPzGJFBdgLK2cOBZ485Z6wBTQ0O/eWAcvmyQyjJ gfIko3XpN7WI3zVqCDBirju+Gfv2hYDR6PocuGfNAq6Kg0GbFGbgQ431/bjgZf0/uBbgYuAmRaYP saYFfHy+wKZH7XlOgfsxPSpX0mPzU+t1twzVo0IzExBIWO3dq0eeonqc/pio/jAKwtoRmCEguo2A S+mO9LxEv727Uo+iBDDOvLf+zNPURvGW9Azj34Nq6tFhRtIUru1jKLCrQwDI/PNoPfpV06PzbNNn wc/0eP1Vj8DNFPAV1+PIu38S+PA07LJVK8jH0kvmsmYEF6TvLf5SwOpuX7gCXSrx0WqKh/VFiNdu aFxFiOFLZOhfm4vW8z2Mq7meeHvMBXXyC7DpiclWX5nhgGrlHSho8EwSkF1Z4oAiJRi5ykhAp8GK AWT3O8koqDYbH/17cigfZVs74Xm0yXaEnJOibEEhdjzRJQJpMlQuK8CUk5Y6+WCzBHkLO+LC558Y SKcCPj4e16NqGT1WPUn0WwIj/gX1WHjeUkYnE7iuPjTps7aRvlQmUP4lUQpk9/p6NFv9bwEfRp/c lo/SpXmoRraxHtnyMkXtUaWrC25+MslVXIgCs1rx8btHNkh19qjZgPyK0ZbWDBBj/bmkC3Fvzrui VUV7FCJfwfjvenX4qF2Th8K6rMheyRHXQzPZ9zsytKTnz7qSEu8Y2WR2P86kHj6FPsLc3nVQwNsH lSrXQJ369VCzchnkyVUSnWYdpblOFLre2IpO1X3gXaIiaterhzq1aqBq1fLwcuWBW+cvPI1OP/i4 sXIwcv4fB/Jc5dBv1inL1J+Q+1gwOADqrDxoinXFidfsAz7fO4iB9WrAr1wVVK9dD/VqVEGJIj4I 6LsKT5NdMo/Fpb96pRl8vN4/CwE/DHyE4sSi3ihRuDj8yldDrbrU55oVUfD3AqjSaS7uf46zqB3z 4Samda6BQkX84B9Qh+SoBvxr+qOk3hlZ/miIjU8iM9iPN5hfyx/Nh++ysrPwGlMb1USNHtsIXkRh /5iW8K78Jx5EWW9nVruaKNdtm6GdN3v/QpkCnXH8nXFWn+1Ga5+iGG4EMoh8gjEEPqqOPGn489ul lWjkXRsbnyVBXLi0ahKmbDjzb0i7Om0EHtokCnhwnADF2rggmHEOkUoMLs9F24VmzjCWDEykClM6 2CNr9myo0UeK60FaRFJwEhWqxeX1jiie1x5d15q2OUNfKbB1oRTHbqnxPYY1CJFf1FjQhoNcdSR4 GGaWUxyixLimXJRqLsHJ+xqEkWGPjdEh5IUS60cJ4OwgwIY7JiNyZo4QAqfsKN/ZCQeuqvGN6kd/ 12BpGy6K1nPC4wjTwcXH+5zgV1WA8VsUeP+ddYQxoRqcXOYAX38RVqT7MC/1N0yFSU3t4VXVEdeC 9Qh/74Gu3tmhLuuI86/Zv9uV46DRLGPA8U2Jqc25yFPFAduuqvA5XGcY3/cPahxe4ohy3gSaDhgB RZwWGwaRIacAf/MV4h2NLSZKh6DrcvQoTUDstxwYf0CdAWfEBmirO5Ij6eSCRx90bCBI/XgTqMCE uhwUrOiIu+GeCSDvJIGsajVFWHlaha/GlIPwDypsHC5C1ZqOOBmcKC+cQE1FavvyEy0imDmM1uHd MwVm0zO98ghx8A2zMkiB2gd3Msw8tJuvTBhHbCx9Hq3CtNr2qDXNBD7iCNBGxTDyQLJTl9qvLkLf TkL0nCbDnVc6mnc1TuyQ4eh9425JHMuvaEY2H8pRowAfc09a51dsnA7nFzkgTwkJrlNAFkO8iKY+ R0XSv7G6hECZ6UNstBb7RwtQtJETHiXKnb+3XgI/HxG2B9K8xv2AMx9pAB87B1CAQ0HOa+Zv0qXO BAQ6zDHLNbcCPl4n+vzZLgIfFGxdCDF9FkdBfacaenRdx/79ar8eFQmgbHpm+dtlBCwaD9YTQLPe vy8v9LjzxJjXHmMEH9OtgI/RLPgINv88KhH4IJ6Ob6XH0FV6hFFfA+/pE+TxnwI+oh8YwcdlDcwP Tb8+7YJyfhRAntBYBxdhqYCPV25oWIGPMfvUeLDHEcWKibDPuNORAD4eJwUf10KTthVyQYp6xflY eU+XbptnCT5MuyrfX3mgjx8PHSa5mYEST3yyAB9s3bhILU7OEqFUTTGOvrF8xv148BGS/Gr2zwYf H6yAj7hIAlfz9chXkQB1sKWMGsDHMMs2vj3So20JPfovT6SLn/5N4IOe9UWJKV0IVHZxwcWn2oQU sfeP3TG8JQ/Vh8vwMc4037Fku8c2FaBKNzm+MTY42mhLyRbHxFm2/e2+HK1KcNBkhBR3X2lZ+051 X91XYDz5VXEV8qvfMtn/MCX6NRGg5SwmJvFKAXwwPmhf6uHT1yAc3LwSm0/exYdwdg06LiIEx6e3 gTZ3W+wNMluWjwjCjO4BKNVtCZ5+MoauMWF4/eAcRjcsBJf6U/A4KgMhXMwrLGhUBU3G78b3OAr0 415gWe+emLD5Ovko+v7LRXQt1RwTt943rJLHfbyE4bXqoGmvJbj16jN79iAuAq9u7EDHarXQZsJh hMb9w8BHXBhuHV6PZTvP4PlH48Opzy+OTidgWg7Dtz+1AGRnF3dFnhr9ceTZR0THsZ99fvUQW0fV g3PhRlj/OKPg43UC+PhuhT9nx7dD1cbj8fjjY/zZsipqz76SbEs3Fg5BxdJ9cOUr9e5LMB7cDiL/ xX4X9TQefLxNGOvrZ4F48Pqb4c/wRzvQOJ83Oq68DmsiExOdeZ7/AvBxzAr4YPIjPdCrLA8jt7H5 xMxn15aI4V3LCQ/MV8HJ+fzVxh4CHzGufTW/lYTN99w0QIC85SV4FG3+G1POJxuU5cTnk07wLi3G odcmB3hnoyPyFaXP3phv0RvTFh7J0YgC3T0PzXY+pgmRu5IEtyMs6z5YJELJGmKc/2z8jIDUSCbI nepOImkKZtn6FMy25KP1ADm+pOs6VvptjAoTWvNQa7SHcYxqjGvBQ42R7uzfsWqMZf4e4W7o15Nt TiiaW4jNj5OOjxnPtqECFA5wxosYL0Tfk6FqPj7+OqkBYJk68XKfBL875cCwnRnZ+WCAjRqTq3BQ rrsr3kea9yEXvp5wxbiRrngWxX4W80KOhtX4GLJNZQEEWMekQK+6ArRfoEww7Kcni1CirBgXvyS9 uebjSSk613fEqXfG1c9QBXoEWIKPeBmbW9cSfJjnFC+vz4GrKwfjtivMUj+Su22Hvn8uJ6OYPPgw yPpKkr1SEtyLTu22HeLJM5JFCt7+OqE21QtVYnQjHuqOY2Qs5w9x/qmBj7j3FOBU1WPIZtNnF6fp UbYpASErh4o3D6GgigKlCPPPyblPIUDi05MCCrPPA7dT3XI0n1+Mn4VT0N9EjxYzzYKpWPqMAEqH qfq0pZhRcDG8LgGd0nr0pb4MGEjBGdEQAi/Vi+tRrH6inQ8K7AYF6JHXj+pTcDe8nx753fXoMj+V tKC/EXzEPpahUk47VGwixqBBDhg4yBE92vCRyz07KlOg9iW5NMW0gI/yfAzfzdgDFQUvXLIzbgb5 DzmRPvARds8VjUpxMOFC+hdcGP5uGMaDR34+eg5xxOChjvhzmBgBpTko39AJl4L1Frr89bIUxVR2 qNlWjCHEj5GjJejRhIeCxXkYt0OZJBc/WfARH8jG/Xzw8emsHtV0elQhXRlOcjfyTz16E+jN763H mJ2JwASB31md9VAXIxkdQbJMNJLRMwIe1TuRHn5J9PwUwEcss3gWmRiY/707Hw/JZ1UoST452DQP 8fb/0yUp6noLsfORzsJ2T2opQLVecrIJKdlmHXYO5aNwE2c8j/NK4g+DdjuhVh9n3Mks+CCfPKeN ALW7yxJ2sDMFPhKHn7HGqP3tQdQsUBfzTr8zfRl2F4Nrl0DJPlvwJVHs++XsQvSYuR2vMwI+qFxZ 3AVF2s/DS+aPV/vgp7CDU8MFbLrPw7Uo32gwdj6JMgTINxZ0R/k6g3AxPsWHEEo81ni+aywq1euM fa9i/1ngIwkYiW/zJYZWC0DbySdh2jQKx54/a0NbZQSuhyRi9IcTGDpuBo6/yiCjUwQfwL0F7VCm Xk+cunMcvav6YNCx4GRb+nBsCiqXropVgUlTwJKAjyTjD8Ghae3wuyoParQZiOkLVmHHvv04ce4u Pkb9GBb/TeDDCy92OyIPObBl51R491aD4GAtHh93QeXfuZhxTmNS5lgVxpLz8O3COPekyvx0ixOq FBLi0FvT+Yan5+UY30+EhrV48CcQ0KilGG0pgFQVdsCJd7oEp7Z5BBmjvskEDVE6fPqoRViMyWAc JvBRuL4UwYm2cu8sEKFUgBgXPhsD6CdyVPojG/SFuahVh48a1IfqRqpdj48SqqzQ1pbgQUQ6HXGk CuNaEfgYxYIL5u8x9HftP41/R6jwZ3P6/k/2SuO944QoRP39kEwAEnzIGdVoDvZTcP5ypyPylpPg RpiVvPInMvjm5WDwlozfdvXwgAuqF7ND0dI8NGkhRLv2YgwYIcGUBXLce68z65MTCsuyIW9ZNnUq gXc1mXQqLrwcs6NsO1cy7Cz4mtxMgIBebkbHY/nMmEgtPtAchht3wPDZA91qWgMfasyqYw18sM5t AT23Xu+UnEmiHSqa/5oFUgIfelxeRvwuKcGt8LQFYNtGCFC6tRTv41iH+XCnBCXLiHDw9Y9aoU0d fARu0qMwBe1LLxNwoODgDVHQMT2KF9Zj7jkr5yrG6KEvoMfACRREEY0eqUdTAi95fPTYetsy0FvQ UY8CBDYefdAj+I0e7z7qsXGAHiUJDNyNNNWb3kCPdmMTAZpUwEdOCtTaUPttzah8IfZgeeK0q8H0 vFzFjfXa6/G7qx5dF/6TwQfZGs8c8KkpQNu2IgO1bsaHfxUeGvZwwpEH2kyBjyHb1AYb8OaAM8qV EmDdAx2+X3RB3XSAj2/XXdG4BBfzbmZk50OLjQQ+ZLm4aEVja1bVHs6c7GgxVW64KCBJCuZlVxTz yIEKDRheCOCt+A2qcmLsvamxegjYOvhgV+Dn/emM9efVyPRB5NTAB+lONbUevo1Yucun0kNZnuz3 TSvtkYzO6aKHgvSqbQc9GhBglzgSwFhCemPNlqQAPu7u0WPYAtLlmH8K+NCSzxKAL8mBSrX4qFXT 5Ddrkv2vUdkeSofs6LfXbBEmTo0JzQWo2kOewpkiJpWXfGd5LrovVVgdU3SY1vBuo8yBTdZfLOss QM2OUnz6QeAj5NEZzB3TBy0b1EI1/xqo27g1urSujd/V1bHk4kezmpG4s+Mv1PD2RpFy1dG0ZWu0 69gVA4aNwZSlO/HwU8ajxk8XFsOvcBcceBeJN/vGoLCcDxd1T1wKi8bjNQNRr9d03DdswnzCkjYV IHPLi8oBtRFQswbNX3UD1axVBwF+eWEv88XEkx/+ceAj5tMjbF84Dp1aNEB1f3/UrNsU3Tq1QHF9 MXSdc87i7MOnu7vRrXJpFChWHvWatkCbdh3Qc+AIjJu2BCcffspEL1ICH3G4RoCgcqPhuPr4LPr5 +6Dn3qBkWwrePxnVy9THNiv8SRV8GMoXnFv/Fzo2rIMq5cugRPGiKJK/GMrVG4idt9//G8DHaYNC msAH61BWdeIgBzcrfi9kj6JF7VGkCFHBHORYfkPFfnLjQV5PdjWfwEfpztbBx5NNThTUinHmMws8 bhAYqVuGj8adHTBpmjNmznTGX5Ml6FTLHu4FxDhpBj62jxagUBdXwwFy64bE08JgMODDdNuVqd7t +ZbgI+qeK8oV4aDZQCfMmuli6EM8zZjhjLkLpVhzQoGQ6HQaNiP4CBhpBj5amoERC/DhiX3jCXzU pYA1mRX1d8dcEJBfiAPvPfFqlyPyEfi49j0Z8JEnM+DDuBPxwB2r5zhj9DBH9OgqQicKDsoVsUPp VhJcfc8+6/lWR5TKz0GPicS3GSa+Mf+fQf8uWCLF4UsqMrPshQXTWwlQrVtyjifRuwgIfHQlh9Z+ YWLwocG8eimBDx5aDJOn8SrVtIGPS0bwcTsibfz7essVDUtRm9cY+SVAXoeHVvM9EnbWfjr4iNVj WXc9ctjrkbsYex1uYaLiRfQQc/QoNyYpINhDgEOm0KN6Yz0aUWDVoKke/cbrcepRIsf/Qo86Gj14 7noUJWBShNmVoH/z6/XgOOgx/6yp7vE/9ShN7QSmRXeozsAaFHxZAQ+HplhPu+pL4KjXEtNnC/rp MXajHl8IoJ+lfrwN+xHg40cdbvZE9H0Z/AsJsP4+83f8bT+eCH+nwuI+ApRq7YzbnzMBPray4AOx GizqQkFgX1fcPE5gwjvt4OMR2WS/oiKc/JCRlE0Nlvfno3xPJkf+d0MQyax0d57rYWXBgWzMWSnK FRbhyEf2prv7mySoW88RFz9YB+nJgo/3bvDPy0ev5cqfDj4+EICvWpYAufEM1C0C+f7NSN7eWWmP ZHRSGz1qjzWd6RhE4GJQcgfKUwAfR0k/NaRLj6MyCz5+lDxrsWkEHxofEabNdjH4SnO/OXOWCxat /v/2rgIsym1rn//eE3Z311jHAOkUULpEsDAQpFNA0u7uJBQRMbAbEYtOaZTuLunm/fcENQyK6DnH e++s59mPDvPN/tZee9W7cyyCsjrMfBDwcZCAD/nN49oO6uhu1cAR6b7QuTAR6FG8700b6fp6SnsQ 1tiNJ/x8CXxQQdDzr2ZPeaG3YaIiDYV1Rth79CSRxRmcPn4YdjrKoEySJ+Cja6JbFP8eLhdPYu9W K5iZGkN/0xqI8nFDeONZxJf1ciP05zDYS8rjqHc4HlkZQWODKQwU1uCCfyTum5jAfOcLxh6FXJxS V4CgnBHpQ8Lr6TM0nml8nz6NM+cu4YqLJz7m1vxU4KM+LxzH9ZZDSkUDNrsPM/g9iYN2m8A1iQtG F4K6XAvZWBiHh9cu4ciebbA0M4GxgRaWSfBgroQx7sf2FoB8CXx8hqv+GgJs3VHZUIQzBiqQtPUE a0jZhPdHTbFEZj/LPSFfBh9NqCguQFF5+w8bqstRXJyPxLBX2L1eDlzqZ5HMeu3czwQ+EtqMsjWZ bUkbhxUy/WHpMh6BfhPx/v0EWvH1n4gXF4ZCdvEQvC5sBx/HNPugv+AQhJQxLx0iAdFsAMT1x+Bz C6k3dwKMBfvCwn0yWo89pZeZCL44CDO5hsC3pN2RpDwbAe5Fg/AwfQa6LkuioCR9Kko7JBvvzlBn PkahoJNTIQHOaTBElg9BeDU94LWUTYS2+ABsfziVHjDbkoI5nXhCyzcGMQb4WL63M/hQ3dcZfKju n0j7nPFkBPj/HIgbCcztoydN96jLrhRHIqOZvuxKfmF/nPLveGoOXRapD4Zh5rDfsft5L/d8lE2C /YYhuB4+gyGP1vpnoz52NIQX9cfht/T31sSMhqzsQDjRTnhhlt1cgGmJ0YdLQyCyeDDeFc4Eq6Vl hblTUVLbDj4M5fph4/nJ6HScMvm7+eLfoXSWOTDRl105q1LBx3gG4PnaBW70ZVcqiwbAIaDjEjYm 8HF5GOYKDMenZmaeCXhppjDt4aCfZ++yeSCULMYg6NlwiCkMRWDRjx15/BL4qCeAQVOSgq03SVLk T8F7X3rxIQm5J0nueUjyFMC0gfzRTgqk1jMl+CxKpAsFXAQkPCF1+fq21x0QSsGhFRSob6OQxJ6x tj2SAgkCeHY/7b6+2rr2pSRbVSjQP9P1mcf76addlTD93UaBAqPz7Z9rKsi7SXKWQd63Uor4gB9w 2lVV0TTk505jzMh9T6EPDChwDYBLOLPdEnuJHQUe/oFwjZmOLkdFN06GicwAbDrJ6rQr8v+CCVCX JD7sUbsO10SPgar4QFjbDsUqvkG4l9LuV6LODYWi5FDE1M/q4qMdDfqDr23W7lvBx3RctxsAMcOx jGRuJgqCRkNedADOd7GvWagMJeCDaxCepDHk0zAFZ7T7Q4rYTSmLdiY/GE477Sq8iskOyyditeBA 2Lr/9eCj3I+AjcUUXE9rBxjnNhLQbk5BIbouBzuhS4FShz0fKc/pd+jcjmXx/koKNq+mQONm1+/8 T1OwQJuCtO8EH83102l+trh8xhfv5ulJCXYaCiGZEchu8/3MZRaYl/QeWDsAMgR8tGBWlxje1HHl wpGB4FQbjsT6WSxixXRkZE5DTQNrvqgzIxU1M77e15WTYEHAsbHblwbqqHKlfh/+5dSpNgVHdGQh ufUhmA9cKn13GkIzFXE5rP2co8Y8X+zS0sDlxK5V1YQ7gWe6MpzDy3qZx5Xg+nZ1SBvbYt06Pey/ /wGPzhpB3nQr1mmZYO/j1hH4WnhvXw95rfPozd1/EactIS+9HbE9mKQp9L6A5VwaeJb7vTlqA96f 3YSFqnsRy4yJit9hPbcI9M+GdHwzblutg/Xd+K5VVQdjI68EdM6FoHeQqAhOqorYuOt5V1CR64VV QlLQd6G/9+PNXRBZtAH3k1jsLykOgLH8Uqw9EwyWcDPLE9qi/NjlX8qShxu7tLD6vD9LDqv9j2MO lwle5TZ+l9T/BvBBbdwK0JE+fSmMz7HBEJYhYKKi410MjFJE3xSs7TgJNU108HHKqC9+/e1XyBiN QnAiCdoNM1BdNAVPDg8GH0nyLgbTg1ATAR8GPH9A/cR4FFdT17NOR2bcRHicHgY53t8waDYBNTnU TdcMR1E1Bac39QOP2lA8CZuKshr6RrWi9Mm4c2IoVGSG4hUVmLTQ63p2ZBC4lo9EMklumhjHhFLr Cj87CIKKg+Fb0Pr3GQi8OAQ8JFCf85yEvLLpqCf11lVPR3o84efMMNieHYes6t6BD3l7+tpramDd T8CHwlbG53o6+KB/prfvjF5/zJcbgpt+k1FcOQONhI+y3Mm4f2wIhAnYOOLdPrLpbjMAC6SH4C6R RUUdkQVxuHGvRkOd6zf0/eN37Hk4hbbZv/lbg2/xBCyf8xt4Vw6D5wci5+oZNDnVlE6D94UhEFAZ 0n5CF0my3S0GQoTwcT94Coqr6H1SUzENCeHjcXHXMBxzn0AcG0N3iibBTrUfFq8dAe+YqbQA0UB4 z0uahMs7B0FZexh8W9eFN0zF8fV9QZEmyUYBdWMiBXmfJuCoUT8MG/wvyJycgDoSfFo3KtbVU9BQ PxXnlftD3XYsSsjnelJ3bd2Mtv5v2w/ROIP2HfU3tZ/GQpFjAE6/JvKifq4l3zXN6CSTrJcjsXBG PxzwnIJKqqxria4S3XA/MQxbHcYjv66rHEvCxkBD9g8spPSDreukbo53/sHgg7r2nbThzSkCMJZS WC8TIyDIVIwCs+sUWkJNTUCaiBxv2lKwdB0FWU30JKCFCWxTAVZ9OQU75ClYe4L1pYJpjwhIIEn/ k6T2RMLzMAWzFlKwi7wvrZDUQd5VS0BCfDAFR7dQcOQB/bjRphoKrAiY0DpCEv5Ght4y2nOLJG9c BJhk1NP5oJZGkqiZy1KgS3ippvU1w55Jib1GgBTP9x61S74vnQDNeb9iAu9QRH7npapU3iqjxkCW 6Nolv6lEV4nOEl2qr5+BioIpuG47ABwk2Qopau9L6qEGVHDWWDYR+gRcbDg0gXZIA1VHGxrbZ7nq U8dhhcQA2NwmOtxIPXyBse/t6GDMHvsr5swfhEdp9DZRD0wIJP5ERmIoggkApfoYKh/FGZNx88Bg 8C4k/AX24ohxwkdT3VQ4WQ6AiM4YFJN+bmmm8/GC2La46giEFdP9Q2MzXR5570ZBjGMgbhPA1dhM ByDlcWOxWrw/9j6aQgOSVP6amulyiro5DPO4hsKvgH7gQx3DhhtyxkOV968HH9T4keNFgbQwBc6x 7TpeHUcABgEU+58Q3a1lHH5BbSPR0QMEmMjaUGiHgrTalLspqUOHgoQy8iy1jeR5qn+rzSVgWpXY lwv973W19EL9/ytiR/N/APiIuDoE4/r8CmOXSd85EzsT9ZkTsVmxD+SsRyM8aRqq6+j9Ul40FSGe Y7B36zC4hUzrZH/37AZiJnWfSDo9zlJjRazvOBzbPhRnvKa0PVubNh4Gi/tCxZzkEa111xG/GzMB Z7cMhLTBKCRWduWpOnU87BX6QlRxCLzSpn+R/3Lio9crDcK1T19aYkjVqSXUDPDLqVNdGo5pSoBH 6xLSS6tJf9ahJD0Gz26chvbSRRg7TBwX/fPR0ExPApuyPbFuMslRNA/hXUQKPtc2EP1qQnVJBp6f NIOg+Fb45dT1OpOLvbMTUwaNwHTVzfApbkGx71lwDhyOictN8SKrPRGtTniItaJLob7zJmIyilBT V09srRZlOckIeOoMa+uj8IxpXXbVTOyxDrU1dcT/1MD/iClkltoipLSB9E0t8VX1aN/b3IJmIoPa 2lrSz/VIf3ISShxrcS+5huRn5O91pI6m3ozGN8D3jCZmihrjVWoJ8XcNqCpKR/Ard2zbJI/JQ6dD 94wfyUcbGYAiF2dlp2GckAZcvaOQV15D7LYZDdXFiHt+GtL863H2ddY3c9HcQmRRn4azSnJYu/U+ SusbiNzqUVtdhtSol9ixShr8SjuJP2e0sSYJ5/RUwCVlgbvBSSR/rSe2UoWcT2+xU10WvCp7EV7a WR7NpA31RFYVCQ+gIcSDra8yafKva2jqBK6cdfkxUmgDLr8IR2ZJJfkN4aWuktTtg10bZSFucQ3Z 37n3428AH1Sl3A7aJYMk+bth2h/ThvwLvw6hHjM6FA+i2oNSstdIqCv1xWSSCP6bfL/BaQJRyKk4 tmkgbUO3ieYAiAr3g5RCfywR7wN+4YE4/WRyh+NiZyDm0QjI8fSFwOJ+UJQjiThxovp2o+DhOART R/2K+YsH4phXa0CZiYb8iTiiPwD8vH0hLtUPCvL9aMe6ikoNxD63iShqJKAmewJ26ffHgsn/xv8N /I0Ap8Fwo426TcO9/YPAP/3f+LXfv8EjNxjXW4+8bJiGB0eGQEy4DxZL9IWcfH/ISpIiQ3iXHoAd 1yagtOkb1z8TsHF43e/4fUx/OFI3H7dMxZG1v+OPDp8PqdM/O7yhb+SnHp97ZvNACAj0hdhSIhOF fpAUI/KRGIgT9yd3uBV2Jlo+T8YF8wHgnN8HYoRPRWmS1C8dCBvboZCYQRKmuX1gsGMsCr513TYB H6qzf8N0Uq+s8gAoKND34ojz9wGX+CCceMl0THEJ4cNsIET5Cc8S/SBPZCcp2Q+ypH+WLhuECy8n d5hipwaHCdi6tj+tjYvJc4qy5DnxvhCUG4Tjjyahoql9lCs/ZAzWivTBbO6+UFQkz0n3h+GeodDi /jcGT/0DK61G4SN1FLR4IvaoEV7l+mLGgH9h8LjfIUn0SU6mH6SXD8frlM6BOdtvNJYT2cqQZ2RE /kC/X/6F6Vx9Ce/keelBcHo7pcOac/Jv9VS4bx8EDo4+ECeypq7RpxYJGaIbRO8+N7PazD4NF9f1 wah5QxBc9uPvJaCBD5JAfqjpUC8ByGdIQj9tGAX/GkHAxHIKHkZ0WLZyn4KNMuT7URT8MpKCLQ4U lH6m4CJJav4cS8EfwykQIwm9jCIBGfc7v68wjILNBLT8/i8KJi2gQHsbBSmt4Ib8e+swPSn79y8U TBSlwCG4fWT44TEKFvNTwEd+L0/AiyzhYYkEBcpaFDyKpKCEJHLW5G9jBlIwdDIF6iakbmpiR8DO QSMK5o6nEFsmdahR4JtJve+FAgsCckYPoGD4TPJeZQrkCHCRIUVhGQVCsykYv4iAMBbg46Ztz8FH 4bsRmDLk3xDfPaEX9150fO8MfHAfAVX+39GX6NpMXrquyRLdl5PrBzG+P8ApMoj4galtR+RSbzg/ ZzUI0lTbluyDEX3+haFT+pC+6U90lPhFxrLK9DejoLj4Dwz8/V8Y9yepV30IPKLoMyvNRROwdtr/ 4Zcx/fAgna6Tt60HgnfKv9Hn91/BR3ycItXXETsRI/bNKToAJ55P/sqla90sXyR+10a7HyijSbwY /juWGIyAX/YMul8rIkmqfB9QiB0rrB+K12nTEOI4HDKLfsNvRB5zBUh7brQeEDEDfueGgGPq75Ag vG2+PgGpQWNhRuQl8Oev+OX/fgXvEuJn5KhHexMZkmfkJf5A///rg223puBHgY9VOyd0qSuAgAJJ Lgr6/EbBTEECnh+3XwIYco6Agz/pt51vu0TsJYOAfALmJw6loO84opsEgMQybtOuz6Jgw2IKZgtQ sIzodygB6657iB4T+xg5hIIh8yhQpN6Pw9BpeaLfnFPI31dTkNnMBABiRkO6R+BjJm3Q6rzGH/i/ iQNwP3nG98uKaiMRYwlg6gd+ob5YKkPvF3k56nHr/aCyaTheJXaeyatMngCrVX0xfxGJs0SXFRQG QJbEDdkVQ3A9eGqnZ4uodav0Ba8AySOoPpfUvViYvEd5CFy8p7BYujUTJYEE0Pb9hejJHzjt/yUQ PQNep4ZAUn0kshu/JIexpJgDPTistCD8DvSkBcAhKE5ipgzxSYpQM9qLWzfPQmT8GEzjkMTWsz70 JU+5L7Fxyh+YzCWO5UrLICMrR2xRDktEBMAlqgnHN6n4ngVKdQk3IfzLL5i72pk+q1H4CisH/Ypp iqeRy1Rxuu9VaMhIQEBEDJIy8qT/pEj8lIOkhCRWmp5FSCZjUVFLEe4dM4eUpAwUlaTBO3U0+v4x DvyS8lCQkYaq4REEF7Qm0HUIvX2Q5AHSkFeQg9jCaej/yxCS05HfyhHZrN6Mhx97d/tEY8EHHNOS xyIeIUgryENGXhFKa01w8ZY79MUWYPhETqw2uso4LSwf5+WmYuhMDsjKLSN+V4HwowAZcSFwcsnC 8vzbr95nwooqkt9gt+piTOvXF0PGLyDyIvWS/pNeIg4Bbl6IrNpG8o7KzmCiKAqnTNQhKigKMSIz RTlJiJH/S244gHcpXWVRTPTJbJUsJEUWYOiv/yIxTQxK8itx+HFch5vNC+Gky4v+s/mgpLKc9IMc yV/lSe6zlNS9GNLah0jMrMb30t8APqjkTspIAs2nI+z+GLi4jsH1a6Ph6DQWMbntIwnFSRPg4jwK V93I966jcYt6cVoTdcP5QKhum0DQ13QEe46Fg8MoOLqPxYcsZudI/39B/AS4O43CJYcxeBE4hT5d XzEFL+6MxmWnMfBOmNYlgfjoNw5XyW+odd98PAGZFa3LbmbSLpyj/fbqaLi7jYaTw1iEptE30Ue+ HANnl9G4Tv7ufGUswjKnd+Iln/DicZVer4PjGHj6T0ZRbS83CbfMQHLYOCKbsQiKn05zdimtnz8y Poe2ft/x6M0ZSP8wHm7OVJmMwrU745FQyCpQ0GUR+24cnMlzl4is3sVNo/0+8u1YXL0yGneeTW5b AtPjUjcNQd4TEZ8+jTbKdIv0rcOlUXC6Ohbh6d1ddkjaGkx4dmTIjsj2fcQUVLV0c8oUAXuRb8eR vqG2cTTueU1krM/vuu62MnMS7pI+uUR4uPt+Mu1Y1rzgcXAj/Xjt0UQUNtAvLfQmn6nvdiH6eI3w 7OjA4MVlPJKYLhD8nD4RVxj64+A0Gm7uRM8vMz4TPQxJZnHhVct0RLwaS6/3q7oxk3Z0st3qgdC7 8GP3erQtYTs9lHbSTCBJaBoaGcf3kkT/PUmIrrjSb1J2dKYgJqf9N0XRFNxwpODqdfL9VQqe+lNQ Q71F/CbjN+7kN+R7B/K750zLQqpIMvXwMgVuN0iidIWAjWcEuDS279eIeEN/H7UO6o3j/syXsCVT 8ID81oEAHkfy7vfRjCN2Qb9w8AF5ryv1pnLynftd8jw1yaqjwIv8/wr1b4RnJ5L8JZP21uWT5x0Y z18jdTrReaYV8n8nwt+9t8RHdZiRaqLOCBC9u2rRD1zWXwMfdJ1+Zt0foyf0x53k779JOyd0PK45 M3TNuVXX6MX52jh8yGCyrcZp8Hsyhvb9JcfRcL1O9Poq3RapOvo2ehrDD08kvpnUS753vULV97GI ypvRlmBlEV9y7/kE5FTTl5BEPCQ+8Cr1eeIDHek+hvqO6/eInyno/abllvIpeHR7dHu88BiPlA6b zAsjJ5D2k3dRL/Qsm45Mv/HE5ogvJvK4QnzXm9CpjPuU6GD/zT26Dd/7MBWlGZNIfxMfRHyauzud 747yc3CkynU8PuVO/85+ooMPa8UBWGY3HrUN9BmJ1lm+tCAKiRsMHSd65h3bYQaQyNeT6Koj0cvn fsReyii4Q/T9KtFPN2JbDo8oyO2wLDiT1HWZqqvkN9klBIB4kmdabYA8f4lJpy8TG3hAAH1tq7yb qbNCFJSHkWSbgMjDwV8HHw0Z46A6/leIbhnXwwM5eiizmqkIeD6mzedeJzErKmNaNyB2JhpLp8Dr Jl2XL7tR4+FUBpCY2QXcUOsOfDaWFiuo/fzQZzJjsKebtpK8JdZnHO6/mkSb/e52/1XBBGxW7g/z +18DrCNIce5x9lSTG4P7bk6kbQ645RWGYloCXAqfJzeJvl/Gs/ep9CU61bkIfeuN6JxCZEW9x3Vn R2KLDrh8/TEiM3/AbeoNRQh7/gJ+0YwTtprLEf3OG29Ds8FqAU7L5zS8fehO+s+BVtwev8HHbOab SapJHY9p318i7XN2cSV+xJXYI/03V++9RVbbld5NyIx8S3SC/p3jZRdio9eIzjvQ2ul07RHiCns/ s0MEjXeP6PxeufsKCUXUVrXgU+AL4icvw80jBPQ7FGuRFPAKAQmZKE6PxCP3q/Q2OrvjTWQmenu9 YH1RIjyvOJF8w432vtZ2OjhexcO3kSQ36JZxJAW9hIsjVQ7OJPcJR3E3K6JqcqLxwJXIzukyrl13 x9XLVB1xxbv4jns/apEc4Yf3ifkoz4+H501XRh9exl2vDwz9+376m8AHdT2gLOiIf3aHwuysZrH4 firtHG8l6wksvuvOwGexeGbmF343k+ndLNZAd8v3rC+0h/KVenu5zrvL+1l9nvkN7etOFsxraGej 9xvOZ30HHz2R3cwe9AWrPpnJQmdY9fnsr9T9rc93J+vuniNJv/twqK0ejvCKv+YEmo+kfv6xv4GD rw8EpQfBPeKfuuH4Zy8z0VQ4CQc0+oGfvw/mTPsNonu+tOGVrl/NpROxYeFvmK9FPQnnR8h11ld0 7mt+rrvnZ/XAT8/qAR/f6+9m9jBezOqBr53JZPNfstee+JBvaAN19l6/HyZM/4OmL8s1RyO14eez qxiP4ZAT6gM+zt8xjmcgXGK+bv9RLoMxZFgfnAma9oN9RW/8f29jxcwe8vJlfQhzHwYZjRH4WP2l +saRIk5KMtjEpv9l+pvAB5UuMgxvWo8dUAvtMsHJ2E69HXzzOJTVU1BdPZ22VpedAP2zyVfPC1te 31OoF2bV1sxAReYEWCzvD73Lk2h7F1r+gndVFkyB36txePZ0HJ6+nMCYHWP3AavSXD0VEe/G4fHj cXj+cjzCE6d9pU9moi59PKx0huKy31S2bfwvlebpyPw4AS89x+EJ0ZfXftSR9p+Pz+KkSXhJtX1S vHwnIb9ixldiwHT4Xh6GTbZjkPkTgqm/tbRMR9Tb8fD5+KX8ZhojBzrMzjzZ9D9PfyP4KCNFi5Qx pFBPFZr01VIUOhRrFP4P4wb+gn6jfoGEzL+xRPo37Hkypke/Z5cfXUi/NU9CbeUUlJROQVnZl0sp eaaymnrT60S27HpZUp4PwkbJf0F00S/o/8svmMH7Kw7dHIVa2qbFv+KdkzsUtvx/vKzYcmXryn8T n2xf0TPbnsjIfdRJKWZnnmz6n6e/EXxQiXpEmD4p60nR/GqpzlXHTXdV3PJQw51bqnC9SoqbGt4l bejR79nlRxcdoEYFZ+xGQlikP0RFv1xERAbB9IQESZS12bLrZfmcuAYPGHrvcVcNN6+r4X3UejSx ZcMu7MIu7PIfUqg5CzUOhrGzTjaxCX87+KBSNag3JwIVPSiVjOc7lirG3yvY5W8vRO7NJchKSUZ4 eEIPSiISMwvQzO6v7yhVLGyALU92YRd2YZf/PF/OJjaxiUr/APhgE5vYxCY2sYlNbGITm9j0v0hs 8MEmNrGJTWxiE5vYxCY2selvITb4YBOb2MQmNrGJTWxiE5vY9LcQG3ywiU1sYhOb2MQmNrGJTWz6 W+jnBx8tNYjxf8K4YdERV1zd4e2fhtoe/LShKBFPnzzHh9zq/87eaylH5JsH7Td+Ojrh7psYlDf9 tzSwCVmR73DnVQiK6n9uTj+nh+KKE6MfnF1w624g8qqbv97C8jS8efoC4Wmf/9d8z19KpSkhcHFw huv1+/iQWooWtkiYqAof3z3E5Q6+49bLCJSwur22uQpxfi/hGZCEmv9iiZQlB+HmZeqNws645vYM UekV/8Wt7UC1BfB9eg3OV1xxzysO5c3/G83+T6Tmyiy8vXuFlgtdvuqOFyQX+slD419GFRkRuPfU G4lljWzFoCsHwt/ep/lzpytXcf9F2E+dN/384KO5BI/PW0BaRg5KCpL4c9w4zJW6iNwe/LTs3WEM Hjgamx6k/gOMVyPk8WWcfRGLv8Q0Ggvw7IAOJETFsEROAQrycpASF8cqyytI+wltsankIzyOOeF9 yrcE9Cq4G/Hil5kr8Lbo57b7bL/LUFWUhZyCIpbyUtCn/0rcT/x6qlYd5YSFQ8Zj46WILzyUhocn HeEVyz4fvqeU4euKtdKCGPPHJGidCsB/DR7/Ib6jGM8vboGwoCikiO9QVCC+Q0IUKmYXEM/KPOuS YCcxFZNkjyL7v1gs6a8doaUiD7klPBjWby50L8X+x7epJj0U1465IrygofuHSuNxwX4N+GaPxuAF doj4C8bqiqOe4vjVJ0iuZA8DfA/V54XiqL4K5OSksGDSKEyXv4SCXitHJh5cc8DNDwX/bKNaiuB9 wQH3/FK/aZAozkUXvwyeiyNh/yODBF9XDtw4agRZOTmIzp+C0dM18Kbg52X3P2DmoxlNDbWora1D Q30pbm/TBY+SQ4/AR0v8LUjwSWLfm5x/gPFquJhIYL7tk7+m+oJXWD5/KQ68SOvwx0ZUlVfhpxwH yPXCuimLccz/2xzF+6OamCtvjbCffGKgpbEe9XW1qKtvQIHvBXDN08Od+B4crZjzHCuFZbDNI+EL qhQCQ4oQtj/5b079frTbaERjVQysZJSge9wX7MHcDlTyFpuEOKF3L7mT76iuqkQDS0GV4KK+EiT1 r6Hwf0A8jYV+0FdQhM6lmP/4ttSGXYXCZHm4f2n8rZkaY+vw4Zo5OJbswl+Ry2XfM8dUWTP4sU+b /SHU0liJRwc2gGeVM/J6rRwRRM8Fsepm6j/cmgzs5RKE9ungb/pVwcsjWMSvhmvx/6UrW3pLJPYl PzoCYR4DvMn7edn8x8HH5+wEBPv44P379wiNTUN5TSWyMtOQXc5qvqgBT/YbfRl8tNQjOykSPqS+ d2+88fyVDxKK677CRQOy4sJpv3nvE4DYzNLO35bnIjLQBwFBYUgqpo8gFafGwo887+MXguRCJuVv KEdcpBfsVgthnsYBvKLWS6vbh/Z8YlHvFy8015bgY5gv3rjuAs+Mpdju+gqBAQEICAxEcFgiyluR R20xIoP8EBAcjMSMYjR04C0xKgB+gcGITsgHXTJ1yI4Og69/IMITsunPVucjJojaL74Ijcv8wjK3 FhSnxSLAh9pGH4R+ykZNTQVSkzJRVNXIYCUdQXePQmEGP4zPPKTLgio7Io+ADwkoY+7qmmJEhPqT Z97B2+slXoZ8xOeGrwimrhQJUcGMPgxBQlZZZz9bmgl/P18EhUQh9zN1fKURuYl0PfH1j0BWWTfz kw2VyPwUAT9G+4IjU1HxlUy2OvwKeBZ8CXw0Ef2JbtPRFy/eIzGP9bP1ZVmI8LyAFbN4oXXgZifZ +YfGo6i2haH2ZUgK9iX9HYqwEKILiXkdpuMbUJgSg+DQUIQE+iHwE+nPHmfjLSjP/ojAoHAkZ5eh mPzf3zcISYz53PKsOPj6+CM+u7xrK0k/JkWGwJfWJ34IT8xF526sR+ZHItuAIISHhyAkMrGTLlTm pOIDaU8oaU9g8EeU1H3rqGkqtiosh9H5UNq7Mhg27hMah8IvJEEtVfmIDvSlyzk0BnmVPw66VOUl IciP7u+CIpLxubYaBcmpyCvramGfcxIR7E/v78DwBJTUd3IESPsYTrPZyJhc+sxOJfFTQb40mw2L y0JdV2VCzIdAeLvvgeSff0LPyQsBVN8RQOQbEYeCOmaTykR4AJXXt/B66YnAaBZ1dqTGMnwKC6Tx 6xsUhSyaM6pDSnQIeccHpJVXozQ5En5+gQiJTUJRTatcm1Ga+Qnvff0REv4RhZWNbbr3OSse/tR+ IO0Mi0tr9wNVeYggPtkvKA7FLJS5idjNh0C6nP1DPxHd+UIMyvqEIB+6L0/IqSQ//gibFSrQvvid 4KOlCmmxIe1xJSUfZcV5SEjKRw0LlarKT0GIP53ngLB4FFR/3yxBRW4ivC7ZQ3y6GLa5verkO0Ji 01HFNB2YeNcGi6T2I76ZZnz4QO17YrexTL60o/0WZXxCCCN++4bGElthnmNsRF5qDG7uUceMxWtw 5jEjFhJf6kNkHpxc0LvBssYKfPwQROJYEOKS8tr9WXMNMj6GErsgPiU2i97G5iokxITQ/ExMAn0K va4wBcF+72m2Ek58ZdMXcoP8pOj2+Paxcyxsqf+MpA/+tHgalUkfIaspIP1IrZv4xej04h+y5LPN J/kQ247NpNmh/wV98K12Ygk+yjKI3fgw2hef02VpVmNlHkK8nKAmzgOZHW5tukHLUUJikVvVnUQq kUTiLO1Z3zCkFHwJTTYT3xbD4MMPkUm5qKouQ2p6BgoZBtBcXYjY4JvQ5eSByubznXTUJyASORVM 2tFUjaTYUJpNvfX2wvN3IcjqonMtKMuMI3GK+JOIRJRSv26pYPBN4mb4x+79Acl7okL9aDz4hcSj sJb+24TIYPgHRiGvqrdz6M0oz0tBOMMn+fh9QHpxZ59fV5KFcNJfgSEkH6ElGc1E96Joeaav/wdk lHbHdBXxsfS2Uf1GMensMn9HiPEZ4DUbfLB0+fC5shVyIvxYxMENfn4eiMmoYp2KFGYvFIWNF6tR 3mo82GPwZfDRVIgbB7TAzcMLHs45GDtlLmxedT9i3FgYi8u7dLFEiB/cfPzg5+bEIoHl2OUaSLvK jUqlHzygK8mBKWNGYr7eQTic3gpVOSkI8PODc+YUzJbejKefOgzNl3yA/aalmDxqMAaMo4CLjw+8 PDzg4eYGl5AK9num9VpqdRnvYL9SGIvmTceQ/sMxdS4n+Ph4wU3qFpI0gWcKXaFbst/CUEEA00YO h8Ca8+3LJYojcEB/KWZPGoGx/HsRR7PtfNzYrI6FlEmY8KcSDp2/iO3aalgiwAsB3gWYOoMPppfe dU26G/Lx9NQWSJL3c3Lxkj7kg7D8amisWIoJo9RwJZgetLLfXoIaHwXD+w7BpDkc4CfP8xB5cHNx QWL9bgQxTQ02p3tDW1UMvAJ8WDh9DMbImcD/CyuOcoNvw2yFAoQF+cBN+oSHUwCiEiqwPOeFQoav yPV3hrTQfIwZMgPKeidw+oA11KQlwCPAj/lTZoJXeSd8szuDyLzwuzBcrQgxESHCLx/hexHmzSFO 0tIBsSXdo6HPwU7gnv8l8FEF7xN64Cc6KsA9D2OHcGC7RzzLJwtD3KGxeBZG9RuM8ZQFpK/56LLj 5oKImhVeZdCdc2NxGA4v48aEAX3QZ8gkSO1+hJK2qFeBl4fWYuzgvugzigKZ3W7IqeupxrUg0s0a 88YMwJj5CtDUXgnBBfMhoWoHd49rsFqjBJ6FMzBPXB/PUirbkpL4F+ewYZksFhOb4qHZ1ULMni8G gyMPkdfmc/NxbacWZk8Yhl/+PQL8a/cgpLD9vcmPT0BsZH/8PmA0+BXt4Jv7jY6/KRHblFWgbnYc p+z1IE61cX4BcPALQ2a9DR5EF3Zpa4a/O8zWK0CQkxP8VP3j5sXS5bbEvku/099VIvjGQaiICWAe zd8RWxFTxip1ZfCM5cGOxx1mIepy8OiYBRTEFoOH+EV+fqq9iEJ+nS3uRzJ4bsiG4451WDBzEkaM XYXDly5iyzo1iAkLQIBnHiZPEYWFkx86rXLJD4SFhjQ4583AiIEDMGEOJwSpdRNd4pLfCLeYzkPe ub7OWCNOeOXjwszxEyCh6dSt3y2Jf4FtmopEF7jAR2yQT1AMCqssiZ3ZgGPEMEzhWo3LEUnwO6EP gdkTMZAihNMfWvWlDgHXdoJvAQVD+vHg8MvMVu+M4MtWECc8cs4ajz4ca/EguxHF0S+wc9M6LBXn w6zxcyBnfR/FbTlKPT55OUN7mRz4eblIH/KCYwEfZLX34l0G0yBRSyneX9kGRVEB4ouIfXPzQFhS HdZ7dkFlqSIMHXu/7Kr58yc42m2EwCIST4j+83ILYKm0EkSJP53GuQsxHfOOpiK8vLQNykvFCB88 NN3g5xeF5Apz3Ajs/Wxn/N19WDJvCob2HYZp87kh0MHvKpqdR0Jl5+c/3rEFj5Q1XO64YMv6FVhM dIl/EQUUwbW48CqtU4JelxuMY+akD0RFwMeI3/Pmc2KxqjWeJXS0lXI8u2CCedPGoN+wsZhNkky6 /+cmPowHyw4+Q68mWsqjsIvo8qwJozBTxA7RrV1bk4Er21Zg/owx6D/DEG+oWKMhCQdNlfDntPGY OEsX5y6fhpacOIlZPEQmXODgXQLtPe5IY5JHY0EUzllrEL9BbIr4Aar/5xZagtUmxxCUU8tIN8Jw aONizJk8AsPlzXDe8RA0V5B+JrGId+F0TOJajlOvUr5r2WduyG2YqC4Fz4JFEBDgAS+vBFZbHISd rgoE1roQL9qB6vPw7OIOLBMXJfLlI+0jOQeXGDYdvIPsDmOe1XH3obZkAUYNHYwR0+fTfB0PLUch vkDRDA+YlYPqwdL8cdxoPRYLEp9O/CgP6XdeSQ2cevapa/vqsvHgiCHEeXnI+6my48dSpVVYKy+K SXxqcIimx8aaZG9YKXNg3MDBGDV5DokVrfGN1L1UEzejmJY8VCbiyGYVcPPygmveNIycL4GL0cxx thEhLjYQXTADQydxY+OxizhsqwMZCVHSTm5MmzYXclZuSK/qmNA0IyvYA2YrZcDJQ/VhfCTWSmCZ znYc3qmHGWOJni3WxqPEXsyyVCbDaac+pCUWQ5CXmyZrjtkLwCOjjcu+mW2yy/O/jvW8CzFp8Hgo bT4Kh32WUJNdAkEiuwXTKOBZZoM36Z3bWpsbhuPGa4jP56LlMtw8glBcY43DdkYQFDDBu3z8tPQP gY9K+J+zgAiXDLa5eCIuIxeFhXlIiniHSyaKGDeZB9ZerJZK9QB8tDSiuqwAOXn5yIm5B00hDmx+ msb62YpkOBopYckaK9zxjUVeUTGKc5Pw1nU/lHkVcfBRHE0xmmqrUJKfAAeDxRgy9k8o6u2Em1c4 cgoLkRnvCUMxIchb3EHb2G9THSqK43FcVxLc5q5ILyhAfl4e8nJzkJ1bgPKq3u8Cam6oQWlhAdLf O2HJfGWc9PyIgoJ85ObmIi+/CJUNjGyjsQafi1Jx1Zw4i+UnkdkmHsJbST5endXF/CV7GOt7G1FZ Xoz4h8cg0n8kZgmvxt6L9xCenIui/DS8OrUJMxduxIOkDobXXIynhzdikcgaHLv9Dkk5+aQPc/Ep 2BNH9JYSoCGPy8H0INRYW4Gc4OtYM3cJdj+IRiHhN4/IIzcnB7mFpahhHvqqJ/IuyEN+UT4Cz24C v5QGvLtZ71EQ4gIVgUWQ1T8Br5BPpL5C5GUl4PXNw1AkzkPjgBfKqOwSHkqyw2C3UhD9Ri+CmslR PPKJRm5RIVIj70ODlwMqJ951GIVrRtKbKzAy24s7byORTWRbXJSDqFdnsGQ6F3QvBnc7Yvd18NFM dJTwSXS0KPUVNvLLwvLyB5ZPNtVVoSj+IbQXiMOKAOICokttsisoRhWjv1ua64nOZeH5/g1YuMQI nqmdZ9fKwt2hyk0SUrdQFJTXUFda9JjqK7Lhai6OodNlcc47BlkkCG2VmIMxM5fj9JMoZKX7w1JW APJ7vOkj4y3VCLp5CKY7z8MrlPQJ1a6IHvlf3oI5U5cS8J3dbqvlRYh7TkDGbCkcf5uOxo58VUXC WlocChauSC0oRe23RvDmNOxSFcCQvuMhutIe999HEf0oQmacL85aKGOhlD4ep1R30KXr2CglDs19 bghOzEZxCfVZf5w1VoeMoi38cntrtzUIubYNvIvkYO3wFDGpVH9XgLQYX1yyV8fMIX/C7hEDfDTl 4842NczjXYYDV1/hY2YeeTYfyRHeOGWyApxCBrgfU0Kz2arPRYh/cgjTxkzELNE12HH+EaLSiM3m peDZAQ38yb8O99M78Ez1CSUFSPW/jBUkKbEi/q2Y1E31Szn5xahkEnBDTTkK8wivBclwMVsP8RVn kMWidbVZvrCVF4Kk1j54hieigNhgTkoEHp7YAqHRQzBwuCQc/LNRW1+PmsoypLw6BQV+IRwNLW+z h7qqzyiIvoflnPLY9zCl1Vuh5nMJqS8fCU8OQEBqOazOHIeOpj62nnqE+OxcRL+4jB2H7yOdMRaQ /u4cJJYqwejEA0QTWRSXEPsmsjugIw8RnWOIKG5tYz0+uFiSBFEE1s5eSMwuQGFOMnwfnsUyron4 pd8CWLp+7GV/l+PlQVMILTaC+/sYEieKUJCXgXDvG9CR4sSEP7ciuhV8EAD0/Kgu5iyQh93lZ0Q3 ctp046LNBpJsquNaWO+GLxuqP+PT05NQnKOE8z5pKOrgd/OKP6OOyZ6SH9hgyoTxmLNkHXZefIrY TOLTs2JxXksOHFLb0DHHq/74Arvs7XHO4x0SsvJRXEz06sNzGEmQpHGjK9rGilqaiTsvhr+DIf6U N8T92FyG/89FTi7R7dKq3s0MNFPjWB48j5mCX9gGEa28NRO7KCtChIcdFvIb41kGVTEaUFlagODr dhhBgNjo2fKwufgcsRl5RCaZCH16Bsu450F62x0UtDr10ljsX7EUXOKb4PA8COm5RBYF2Yh+exdb VBeDb+0BhFH30ZBYX0748D6piYmjJ0FguSFO3nuPZKJP+emROK0tj0Wy+/Cptpea9PEhNIQWQsb4 DHzjM1FUlIeEkBfYvlYCv/02CPNWXkXbdsjmUjw7Y4xFUpo48zAA6SRmlZCYFfHKGRsVCGA5SWIh Q9gtJMYWf3oOLUUxrLzgg8Iielyh+YK8YtQwKUdDfii2yytBWfMgXoUnoaCY2GVGDB6eMoeAoBac fTtkZM35uGe/HgJCK3HyoQ9Scuiyi/N/hgPqIhg8WxEOMZWMfKYOZbl+sBEQg+b+xySmMeIb4SM3 vxAVdc3MAZHEOZLv5BOf6H0K8vwiOBHODJRaUEf8TG7UfazjnYSRf0rC8OAVvI1MIe0kPuPpEQhS luKgZ0a7nBMeY4OQBJZbnodvbBrxOQXI/BiAK7t0MXNEP/w+VRMP4vNR3dgLbS0JJ+DHFgeuPEFM Sg4trmQlBGDfqsWYt3QnYhm620jNe/KjcVSOH6OGz4Oq7m7c94lCTkEh0qIeYqMoPxS3v2qfff4c j0MakpgnbY57vnEkfyX56KdgXN+uhVm/9cO4eXrw/Yn3yv4j4KPq4y0o8S+Bzd2Url+W+mCj2jLY ePZy5qNTFhgIc3GubsBHC+Ie7IGIvB2Cu4J8JFy3Bp/qQUR8bmpLIO7YKGDe2pNIZ3Ikb+21IKd2 DGmd7KQC162VIbzr+V+z3jzlERQWrcG1yC9NezbB64AxxFXbwUdb++5aEye1t91pUzkOvAy5qRI4 4sM0FZH9GBIL1XH6bTuMLgpyhsh8RZzyZ6HdWY8hw6sFx4AO32V7Q49DAWcCvm0EOctjC8SkNfCK FfioTcb+tVIQ1usQ7DpQrudhCAkow6Ft9CQXB9YpgV/jCoo6+ZB63LdTALfVzQ6jcC3dBsXnplIQ M7qE4m4e+Dr46BhE42G2ZBksnT90/0xFCCy5ZbHveebX6yt+By2xFdjbcSQdtXhz0gBCK44ipVfK WIP7u9UhqHkT9FS9Dne2qoFrtQsDcNfCY/tq8JPvv7w1Jw87lZSxbv8bpmUA+bhkrAqlXZ6dlvXk eJ+A1NKN8PjYy6S/KQ3blebiDw4d+Jcwm38ydi2XwTLrJ6D1Un0ajhqsxso9L1n0ezoObVTDiuNB vbLl2pQX2MAtCKPrLJLZ+mjYCctj14MkuoR8ToFngTLOBLKKGvk4qyEOUXM3FDEYqQx1wPzZy3HW lylBTbwJGWklHApiYW8ZT7FRRBD7gns65tyEF3uNIMESfFTD84QuuFUPI7m56++e71DCuPEKuJ/S nsw0JnhAXUSkA/ho1fNgbBBQIeAjuasMY65DijIMU2RN4R6a08WX0/qsKh67FFVg4BjWtQmNEbCU XoFtV6Npz7bkv8U60SXQdej6bPpDG0z+ZQZMr37qnd41p2OfihyWGj7oMiJc9v4S5FROIo4RQ0pC XCE1VxL7WMa7z3AzUwHP6kvI7mUQqQq7jtULV+FWyteR+6c7Vpi5UA2Xwzt706JneyEhshz3O7qf bvhJu7sHvPxbEMqkWpkP7cC5whb+P3jvXpz7bgiJ2naKYzQ5+58Ar4gJnqa3e5S8V/swaMRUaDpF dPVMnnsxh6IClw8VNH0KO6eDBSJ68M5m4eTLA2AgLAa9M35tfize1RhzJPTxIqPzjHjWvUOQ49HB 694kgS3FJIdYAe4Vp7raXclbrJo+FnMUHdv2YZWE38JK4bVwjO66rLs2ygWKfDp4+KlDx1RFwHy1 DDQ9Ur7CSD38TmhDcsMp4gm7ktfuDZAzu4hMhqjz3x2DII8KLjFWPnSij9cho7weF6MqOvnXIxIy ML34bXs+Gj7dwmoRURbgg0HFvtgkKYRVZ4OZ7DAJu4QlYeYUypBzCW5vVoakoQtKulRShsuaPBg6 Tuc7dJd1olAXdA4yfDJwTew4jFmKy6pSkNh4AVmdmK7DLTst8K24yuCxGTFuW8HDvRGPs5jrL8TZ lYswdq4W3v/Em/T+AfDRguiLFpCW3YIwVjNY1DWUcXHIYLko79vAR0uhD0zFugMfZbhhJI4x3Mtg vWsXttrbw55Rtm7fBXs9BYwcpATXyPK2591slCG08wnTiHcdXtlqQWklAR+dlKUYLpaKENz+CLV/ gRQbPt6FHOcqXAn9UjJfg2dEXqzAR8xNS3AygY+CNw5QW7Qej5jiYEvKA0hwrMeZt62gpBm+Zzdh /vpzYJkO1xQhPvoTcivbHXFD6gtoL5TDifffNg+Y4m6Oxd2Aj1qSxKgtkcL+7rxCbQwslili9aFA uvk3pWDnyjVQ2+bD9GAFPOyXgcfmNtMSgCbkxfnD3eE4ttvZwn7bXpx2cYC9EgeENl9iAjDt9E3g oyYSxuLKXwYfxf7YzCWN3Y+SeyCxerw9tBH8a04ihWFCTdkvsU5YFjuepqB3VI7bO9ZAWOsWA2xU 4PbOdRDRvcNYmliOm9vVIbzpdgfwUY2kkJe4fPoA7Kmy23UEl52OYbWABLQOvemydyDr1UlILdbA nVSGztQn49gGRSyze4LK3hpJUzLsFcQgZfuI5V6FiNNGWKJgg1iq3WY+hRrHTHCvMsO+PdvbfIG9 /Vbs3mUDFT4OzF16qldJYOK9A+DnsUIIq4Y0VyItJhZpRVQOG+G9WwW8uue73USa9WIvFgiY400e 3QsV+Z0H98LNeNk5UqEu1h0yCqo4HNjVP9QlPcAGYQHs9uvp6WnVeLxTnzX4qPuIfWpCWHs1iuUv SwMuQGDBKtyMbbeF6hh3rBJmAT6KfLGOfxlL8PE5+BJERaSx93X3nr862hX8U+dDbqMldu/c1qEP t2H3PmsoU6ZA1NSNdlxw4fNdEJHXwTMWE+zNmU+gOocf+s5xvVS8OoSSxECIkw/Kmyxx6PgpnLng jNsPXuDVm2AktO3vaob/JRMslD6K7rb8Fr67COmFG/AgrXcAvDTwKlYuWIHrH7++zzD+thVtz0cs 06tyn+2BpLgK7mZ0/ntlTjyeXr+I/TvtYWO/E8dOX8AR83XgEbIAc96ZfMcaHKpWeFf4Y0+7iri6 nSX4yH93BDzCncFH8qM9mLFgPZ5ksABilWEw5ZaCzS3qIEA+jpO4sX63J1gvrm2B78E14NU82uZj I5z1sXDjYXxi+kHK7YNQ4tftFfhoKfKHmYIojB+ksQoKJCmWwKLlDm3LrkKcTTB2rDD07Hdhx9b2 fMZ+6w7ssNYC78gZMPHoAKhLQ2C6UgoaN74yw0fi5h5JbswTW0P8+M5OudL2XXtgvpIH/Xm08Tyn hRYzX9mqQ1bzNMuT8ZqqChAf+wn5lR2yqOZEHBCTgtFZv2+aBauKdiNgq3vw0ZLthXWkH7d4MXnT +jjsFpaCuTNj4KHUH7o8ijjwlLUVpt63AwePMV7m9P4on8aSdLy/54LDJLbY2m7DgdPncXanJgQE pXGlk9Lk4pKKIrT2vWTKM8tx3UYbgitd6eCjpRCXTNdAwvgRy6OWw4guTFukw152xaR+CDlmBDk5 O8TWfetvfyT4IJ2sugAzRBSwaaMGNDQ6l42am6BvfBS+aa1erYx0vhIE7O+hM2aqhZeNJpRWHf95 wYda15GTeA8SaKSZwMdbB6hyrMGdlM4etDn5Pg18nH3XCj5IknR0LRboOfb4pI2/AnxURbhARVwK Z7tVpAzsXrsGSrav6SMfzanYtWoVltl4MwUVklzbKYO3I/hoKUfQ7X2QE5eAlPIKbGDohfoqBXBP GY5FW1xpy7lY0T8LPohvzfSEhpAyjr7Lo/XV2/2aENE6h7ReKyIdfAhp3mCAiwrcImBDaFMrGCnH jW0EnGjfpn+uzceTI8aQFJOAvOoahk1tgLqyOGaMmgOdU35dHWZNEg5qqGL13je0vsr2OgXpxVp4 nFGHXlNTIuzlZbB63yuWS+SSXc0hpWiMMPJlc6wbVGZOhOgKzS6+QENjI7S0tbHn3AsU9GLxdqz7 TnDw70LUV/O/OjyxkITolivozqrLgh2wiNMETxjJKBV8cC0wxuOUzp1LnSmQkVfFkaC/GHzUf8Ie FT6osZptoKqu72nwzF9JwEe712wFH8fCmMBHSUC3Mx+fA89DVEEDVz91rw9FviexcA4HZNdsZNmH m3R0sPW2Pw2IZtyyhOgyfbwrYRE3cj2xloskcU69BR8M7+NzDebaG7BaVRFS0lJYKi6EP2fyYpXF VaRW0BM171M64FzevR+tiriFNQQ8uMX17pCSbwUfnEu7nnaV82Q34X057rWNNLUgx9cNhipLIbhE CeoMGW9Yo4LFBMDPEdyCcKau/WvBhx2YFwAU+h7rMvOR9HAv5i4yIsCdBQ8kId0hIAvbm0m0uLFT RhmGx7tPhmOv6INzw17EMN5LBR8L1u0D8/aD5FsHoMivR9978q3uK8cb+ksFYPeW5ZZyXDeWAZeq IwN8kJh8ch1GU8SwTouF/m/UgrahGZyCOlhwT8FH1QcYCPGBR0INmhpdcyVNLW3obHFBNG0pQB0e G6lhmfbFnh8B/BeCj/XKcjB7yoSa62Kxiwo+LjN81ucAaPNIY8f9JJb1JBFfsYDToNfgozzxOSw3 KkOUvHPVOobcNqyCNP8cjOKSh3tSx3qp4EMBG3Y8YcozP8PNehMEV12jx4aWbBzXU4M0yW1YySzS zQrTuXTxlg0+mALS+1NYIqYG56huNu80N6KujlWUr8WjvYbgUXZEj2Ra7AczcS6YP89gpRLwsFeB xA7PnqoQbtgqQ3DrAyYwUQ9vWy0orz6BjE5aUITL5vIQ3PXsL7ljoCnhPuQ5V8Ml/EtzgTV4slOX tueDeYAvxEEf88X3tK89pnL83hFqHOq4l8bEcepDLOHYgHM+7R40/dl+cPIawjO7m9bV16G+qf27 hpRn0Jovh9MBJd/UzrQbFhCT2YjXLPKkZpKU68lLYv2FCNZqlPEMqySIk2ld3teSht2rV0PF9g1T n1Tijv0y8NreQWvsKAp2hRz/ChzySmQCKpW4tkkQAqaX0F1LKkKdCfjQx71PPUgY6qJhIrEMWy5H dv9MkR9MOaWw71l6D6VWiSc71CGm7Y6s9FdYK7kSx70z0XtqnfloXZZGBx/C2h5tMx9U8CGic5dm G0n3d0BQWg/3opmstCkG5ktIsDv4lgUYaEGyxx6ISZnCKyUZToYqWH3IBw3fwTVa0rFNkROT1U6y SO7K4WayFkra9Kn2lsxnWLtMBQeDf/xB1Z8/XIfyQgVcDCvvhs961NDOuG1B7HVzzFtiCR+WSVoL Ak5txHyVfYhlnIRUEnCBgA+SZDGNjNfH3YCsghqOhnT1Dw0pj6AhIog9PV4CWYunuwywZOVZ5LD4 7tVxXSxYsh2RzM1rzoWzpiCGj5bFnYR2R1NNkgY1ASEc+8Dk/3M8ocYph/1P0rraVPAFLFZYjyvx 3SPouo83Icmni7s9mOCrinIhCfUqnAnsKp/KsEvgGzQPxlcTetfhVcm4fs4BD6Lb+6SpqRH1tRVI f3cesrN5sZfhS5MfHQAPxyY8z2atdxEuNuAVtEHI594l7aUBV6A2fwVuJX9drz8RgMApuRsfmBLo POrMh4QqHjCGspvy/WCkKgetky9RyIQFQy9aEn4tuiy7Srq9BQtUbeBX9mNt68OVreAXsUUUk1pk PNuJhTxGeJHV3u60J7swepowjrEA3dUxbpAW0MA12iEItXi4eRlEN5xCBsuZzmI4b5SD3BZ3lDK+ j7psgAXr9yOWyeWnehyEkgBrkPt1s0vEfg05KO1733WVW3MCti+ehwUkF6JrUjPCXe3BL3OiZ0vS acoRDGM1SWh6fGVQqykdJ0kSb+gQ3qNqE29sAZ+MEV7lsZ4mbm5sQENDU6e27BORhMmFoG8ST03s dawSWYyT3V1Mk+uNDcvksfk505BJQzx2i0jDwqV1wO8zPMyUwLv+LDKZA07FJ+xSmoP+43XwvrAX 0961yTi0ZjkULa8hjen259ynuyDEL42rSR3/ng+H5YrQ2PmMKc+sgLuNNoRWX2cMelbj2T49CCke Q3oXturxbJsyJi3QZu/56EINqTilqQixVXvhn17enog0ViP3wyNYW2zrvIGpg1Af7zMEr7JTz1B1 iT82i3PDopu18jk+FyDFpYgjT+NQUd/egy0NVShICsU9l1sIbbsdvaINfHT2tw0M8MG8tKkS97cu w0ypPYhrO1exERXFqXjjcRPPA5O/62bS5kQCPhatxtUP5V/yGgg7Z4x5s1fjQevIaHMNEt9egeyc sRjJswefOuh98XsnEvwJ+GDW5jQCPjg34LxPu9NuKY/BblUxSBhfRExB+6bBlvpKpAR4wF5zJ57F tSc3LYW+0OP8EytP+3U49rcaeQn+uH7tMaKyWTuQ9JuWNPDxhqXzrsX7s0bg4VPFpdeJqKxv5aIZ VXkfcExbkejKLoS3HdOVjj1U8GH3hsmZV9HABx8BH61cpDzaiz9nbegwRd+I8qIUvHDeDqHJgzHX wrXbU1oqwy6DZwEBHwk9mGqoj4EpAR9WV6K6f6Y6ErZC8yG3+xnaTpttrEFRajBuu91HcAqLBOrT UxgoSUJJShZqJo5I+64snjHzoXWrE/gQ0r7dCXwI69yj9a3/qXWYLrez/USf5jqUZEfi+l5NUIZN gtbpANZLxuvjsH/NKsgvVYSwtBXeFnwvbM/E7uUL8MuvM0mgCWjfvNhUg0iPHRDmkcPRV4x0urkY N23UIaK4HX7pnzuAoxbUVRQh6s0j3Lr/HgW9WXvfmAMXU2VwKe7C+5TS9rqbapEX64VDVia46EP3 Ho0F/jCTFIS8hSNi86ra5dRQiY8vz0GSQwwW7uFtdZQGXAT3Qir46NzBDfF08HEstKt/aEylg4+9 gWU9bEAdnu2mgo9zLBObhmw/mEsJgVthM1w8Q5CWno5o3/s4YLQMkwb2xYDRyrif1O41G7NfYi0v B9RO+be1o7ogBg66SzCyHweOvOr6lsqQiwR8bMCVj1+YCWvMwiUdeYjqnEJUQWUHHaMe8JCPCK9b uPYygn4CWGMmzq6XhvDKvQjPr27r66rcUOxT58Cvv8yCpVtS79SuJACagn+CV8cFqSWVnXS9wN8Z KwSU4BRJt9nm0gjsWL4YgptOIzy7on1QhMTC5PdXsZJHCJrn/HsNwqvjPaAym4O23KbtNFoqCIp6 DRc3T6SUtdf86Y4NFlHBB5Mrzm8FHwxTaUj0gJSgBKwetg+G1JUXIPS5I9b8OQUz+Cy6AJhc7wPg mKeMi0Ht2RB1I3r026e4fecd8ntp6hmPD4B70lKcCypuyxHyIh5DS2Qq+k3WJz6kHbRlvtyPgb/3 xQzim3zSKtrkUUP6fK/KYojoO7Uln58/XIU8x2LoH3uKrIoOultViHeOZuDiIjGnwz6rqCuGWLj+ AGKZXH5aK/jo1WF5TYi4Zgf+hcvg5JfR5vubawvhdU4fI3/tgzmqV9tmSetSvaAtIYYNZ16jpKqD xrTUoyzvE7zuXMfjiA4DQtUfsU1FGIvN7uJzu3KgOD0Sj0nu459S2mY/cTcJCCbg7GpABmo69FVT TTmyYt/iquszJDHOAm/+HAprOQkomTkirqi6LTdoritH8lsXGJgfwNP4jn4pB+eWcUNAxwH5rQ6h mfCcE4NHNz3wKoL1UHNtnDsNfJyK7GaQL68VfDAtAGv8yAAfEe0ZQOIjrBXggsj6nbjrE4H09BSE el6H/dqlGDHwD/w2wwz+Rb1w/uVB0OCRgMYx//bX15Tho89dWMjOxJAFcriZ2slDwJEBPjp7ukom 8EHVUXcs4xOBnpM/ytuUg+R3XuchNqI/Rs3Vhf/3HtL4F9I/dtRuY1YAdq0SwyIReWjqmcHGdgsM tFZBdAEXpDWPIaD1XLjafHhe3ovN5ltga2UKWc7p+GOkCHStbbDF3By7jz5CRocs/nPiOxy3MIel lTUsDFQxc9AfmC2vBXubLTDfYgdnn9ROHepzyQpiXMJQWK0Nc/Ib6y0WMNZehyVCvBBYbos3GTWo TQ/EhV36EJszCv3+lITR7kvwzyRepikLT45vgeKcSRgxhhfadhcRnN3ufQrDbkCdnxuLVTVhaWOL LaZGWK24GIt4FXD4bu9uPq8viMa1w3YwXSeF4b+Pw+JVhrC2toIFkYXNjosELDGNgGa8g5kUP+YJ LIepjR0sdDZAVnU9lOV4MHDkIqzecgKv4hIRePMM9JWEMOq38ZDUMIfDi2jiclqQ6ucByw1SGPTr BPApG+PC/cg2o6hMfA4TJXHwiqlA29QCNjaW0F+nCiEuAaiaUo+j7djCCrw+a4JFf4pitY4ZbO22 wER/A2SEOMCvYo/Xaa0OpArhdy/Bxswc1vbW0Fw6GwNJwrpMbwvstpjD/MAlBOV0aGNTHh4e3ASe eUJYtl4fFkTOlka6WLZUBHwK1ngSTw/ypfFe2Ge9EQvGjsPIuUqw3O2GOKr/K4mH6/HNkJg7Cn3m LIHhURdEFbeguTwWRzfJg1NsOQwsrWFlZojVKiux0fYQ7JX/xOiZgtDf44wwxtr71PfXYEP420L0 0miVKP74dRqkNpiQvrGEueVJvEss69AnATi6y4r83Rp2pupER0dhtugaWFoTnd1sC5eXcUyOpxYh riQIkTaqahrBxs4KpoaaUBBdBF5ZEzyIZTX7VY1nO2XQrw8/zgZ8766zSnjYSaDPeBmce5FEtKIe d+2WoM8EGVx4Sf/sYSOBvhPkcMk7FRVpb7BZVgTC8uowI23abKwNVbU1sNi7H2v45mMypxLsiN2m s8BmmU92Y2r/UVA5Hfhd5+PnRz3HXnMNcIyeiLkc4hDmE4PsCi2iH9bQV18Gfk5xWDm/77SfpKUg DAfXy4FPSA4bdKh9Zw1zUxNorZTHwkXC0Dr8sHfgg6qmheHYr6EAbkFZrNUl/o7wYaa9FqJ83BDV 2IW3qe2clMU8gIG0IHgXq0LX3BK2xHfprVMBPwliWkde0I9QbiqG140T0FERJLo2A9Lrt8D5YTRt QCOdutxnrTiGDh8NbjVDnPOKoydaZR/hcnoXjDZIY+KAfuBUM8BWWytYmm/G5t2n8Ca1Q8ZYl4en Vw7CjPhdO2sTyC+chsFjBaC9xRZWxNfsOfOg0zK+muwgHDdQgyAfDxZxLgI3rwCUtHbjmtMBLOHa AI+4DnW3fMaLo9oE3PNCTdec2LUR1JXVoaWiijkjJ4JLVgsnXANofZPsdQXbbKxguEIIA4ZPhOg6 E9gRns3NrIgvCu0yAFCX/gZWK5aAZwnxSUabaX1oSfwu9Qh3Xh5RGDu093l9hg+2LhcGh7ACtMys YWNujFXK8pBevgLccydjhog6tru963CMbw+pNAQGYuPQd/QcyK7aCBNT4ptJG4y012AxlygMTrWf OkTzeCmvsHmZODhFlaBpaElrn5HmSghyLYbGdg/kfM9kXGMubm1fh4ULlmKDIVWXLGC4SR3ifIsg uPE4IqmM1Gbi/qWdWLNkDn4fMh8rDHfjtg91tUAjIh+chY7sAgwmPkpq03bcCyeJYHMJHh/QhgC3 ONboW5KYuRna6qpYrmeH3WZrMXbQHKjpH8SL8Nz2QanyOBwlYI+byFpnM4mzFhbQXasMTk5+qG+5 2esN9S2l0Ti0RgKzOOSgR3Rzi8EmKKmtg8oyMQwbMQvym7bCLYA+8p327Aj+nCkFpWXKEBFVhqYJ kYelHpYtFoX4sm14n9ERMbUg8elZKPJxQVBhLcwsrGFL7GCDiiR4+GSwm8TBRpoqJ+PuGXuSBE/H r+M5sNpsL26H5NP8b9C1I9BcwoHhfaZBWW8PnkXkfbtPayrA430bwbWQ2NNGovskbuoR/yUqtxpy S+dj4ERR6OxxREBmDY3nVO9zUBIVhLjyOhiZW8Haags2G+lAWVwAPMLqbYMcdGpA5K09kFjAA/kN hiQHI/7OcBPkxfnAK6iLu5EdZoia8+CxWwc8XBJYrmmALSRXstpiCl2NVRDj5YGkFgH8HQzlc/Qj GMqQepaqQs/YguidObRJfwvM48UKq6v49Lm5k6yTPY9jKYcA5FbrwMqOxAwTXagu5QP34rW4+L4V PDQjO/gh9mwmcZb4T5O1EhjbfwD4VptgK4mzm+324V40fZQy0dsVtpsUMWHkcFDkNLHjijdthvtz wlucJjF3fv+hoAivwkEnT+S2As74F7DfqAw+Xi6il4vAwyuMFRYnce2sObjFt8AruxdDAC11CHax hwifKJZtMCY5rCUMNqpDcY059m7VAveIYRBdb407wckoTPTDGWsCMEaNwMT5sti83xnh1FH26gS4 HtoCsdmT0W8cAcQ7ryGKetIaAaexjw9DkosPEkoa2GJnC3O9dZBarILVcpIYNXAmlHV241Fg5k95 ye4/e8lgTQ7eeVyArb4udHR0YLT9BBFUYufpprp8PHHYRvteR0cX+oZGMDE2gC7tsw6sdz5sO2WB SuXxr3GQ8Z2Orj6MjE1gpK9H/6xnhHM+zHPyLciL9caZrRaMd+jDas9FPA+KR+ugUGXSWxzZogsD Q2OYGOoT4HMC3tSXNqbDY7sRjSdjY0MYmh6HfwbTEadE2U9sN6PVrWe6G84P3iGlqPc3cjYURMFx pyF09fRhbGIEAz1dBt9EfhZnuoAPWhqaE47Lu81pMjOyOo13yWUoTXiJXeaGxDHsxcOYRPheOggD fQNanfp6BjjxIILmKBNfu5LPjHfpm+Cw24dOiXFzeRo8r57AZgM6DxY7zsMrKqsbYFWJiMdOsDag 82x5kMg54BM+13d0yTUIczsNY116fXoGVNkSnhifdXachH8usxOoR1rIc5zabcnodyucdPdGZodL Dopjn8HMSA+GRqQ+0ocGJk6Ipo4KlMXiwh5TRt8Svdp9DiGt06sVybhPkjWarpnshturaNpm1UxP Z1gbGUDP9gyCcuktTXl3BUZ6dB51ifxMaHJs7ZsjeB3fDhDqMgOw08qQwase0VFjGBowdJQAM6en sSxmxWrx8ZUbtprQ6zTbexoP38eguKY7t1KNh3t1ILb2PHK/e91fIz56X4SJkTkueMQx9OIC+bwZ F+98pH1OeHWB9v1FxvcN2WFw2G9Fk53h1uN4EppFa4PvzVMwIvI3t/dAKgszyPPcB2FpU3hl1n0X x7lhD2BGZGtovBNPP2QhP+4tTm43p/ePyT7cCUxj7ZAbihD40BG2rX2nZ41jVx4hIrXo+5dP1hUi 6IEjrIzofW1qewR3fT6BlTdoIXbldf00LIzpOmVqfxrPIzsEkcYiPHLeB139Vl0zwxn3KJrdJb92 oNmwMVWvSDv2P4mg8/75I87us6T5DqpfNNRv9x06tgfgldbBdzXk484lhu4z/K5xB79rd+guMliA x/L8NERHRSMxm54EtHz0gAynOm7EMK3Lbi5F8N1zMKXZtTnOPAhHdVUOPE5vo/G176wvbQlksucl mDJsiuoH2vydriFO3QoBy11V1dl4fYPIzpDhQwztcd79BWJYXITZUp6KJwQg6dL42IIzHgEoqijE 62t7YURs0uSiZ/vxqz2l6nTcdXaE64sg+Hu6YjejD3U378CVF5GsD1AgbffxuIgtbbpxDA8CUr5v 2WEHXfG7cZLYA5UPPdiddMGb8FRUtypTRQrcT5Ck1sCQxFYSE3Rt4UJbptmA0BuHiI4Z0nRJX3cL rvkxljC3lCGQ9J8RtU6ie8fc3yCf6EN1mg92EH3U092B+wGdZ7CaSaL+4OIehg5Z4ODFuwhNyvvu NjZ+ToTH8a30eo0P4DFJ8itzgnFiKzVuWOC8D53npIcHwCmwE4E5eQi6e54Rswywx/kFMipZw4Kq nEjcPrOHpoNUO7A+eg2hqWXtbSr7hOv7TWlxysSIyM7IFk6BdPDhe347DIhMaTFV1w53g3N62cJq xHm7wdZIl8aDzUE3ROVXIivkFixJHNK1PonX6R32VGVHwO3EdugxbNXM5ghuvgxhXPrZxeEhxfcW 7M3oemdmfxL33nxAQTUrb1eHFL/72EtAGN0GDbD1lCvefUhHDQvxNZUl4onzUZgzYrfFfge8ic7u JhFuRmbwI+y31Kc9a7j1EG54hiKnvKFTrpbtewf2Ou1xlho723yCqQ1uRtOH+j89J/GKlv8Z0/I/ g7PPaKeCVcS+wEFaXDCm2feOk0/QOZ1oRklWIvFhsUjLo/uLMt+j4BUxg2dmbzWVxO7X12FP49MY e84/QALpi+aiKFyxovJvBhefRBSRGHWA9K8BlTcSI43sziCECj6qPuHsNnOSo1B1jPT35ksI7XBR V0GcN07aGtFkYGJzDM+jiP5nBeOAJV3vbr3JxI/dafVj6B+/4ZxNbGLTj6fqhGfQk9+IsyE/8bwr M9UkYr/WOpg5+n/XkkQ2/TxUG+kK8QUb4PGxmi0MNv2jlPz4ABZw2yOkgi0LNvWc8rz2gHOJObxz G9nC+IHEBh9sYtN/HZXh3i4NKFjc6v0xtf8Axd3YCQVVOwSW/AcxzSba+uySgmzkFFeg4x1cjTUF eLBnAxbI7EVkxc849sam/yVKekQHH0FlbFmwiYmaalGcmY2C0qpOM9z1Falw1JeCoO5ZpNX9z0rn LyE2+GATm/5LqDz5PU6bm8JIWwWUvn0xXVwdp9x96HsEflaqSsbVo9ux2XAj+CaOweBJi2G4/w6S KtijTP85ihePUyaKEJRbAQ0dfZiYmsHM1BAbVKSwkGc1zninsGXEpn+OqtJx+8JOrBSfj3/9NhvL NhnDzNgIFuefI489xcomUC9lD8QueWlIK62Glq4BTDdTfZgeVkmLgGOpNtzDC9hC+sHEBh9sYtN/ CVWl+OKsuTGMjU1hbmlJ20h84povPv/MTNek4dqR7YRnE5iZW8DS0hybd95CYvnPuEWOTayopbES GdFBeHrjEuyszGj7A6jFdq8D3iYUswXEpn+WarLgfm4XTM3MYbXFAqYmdP00d3iJvAa2eNhE3Rde ioQPfrjncgr2FsYMH2YC+8NuCM+uYgvoLyA2+GATm9jEJjaxiU1sYhOb2PS3EBt8sIlNbGITm9jE JjaxiU1s+luIDT7YxCY2sYlNbGITm9jEJjb9LcQGH2xiE5vYxCY2sYlNbGITm/4WYoMPNrGJTWxi E5vYxCY2sYlNfwuxwQeb2MQmNrGJTWxiE5vYxKa/hf4fHB0w+upL6ZUAAAAASUVORK5CYII= --_005_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_ Content-Type: image/png; name="image005.png" Content-Description: image005.png Content-Disposition: inline; filename="image005.png"; size=42520; creation-date="Sat, 02 Apr 2016 15:22:19 GMT"; modification-date="Sat, 02 Apr 2016 15:22:19 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAvkAAABACAYAAACA5mjsAAAAAXNSR0ICQMB9xQAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAAKWYSURBVHja 7F0FWFRb177fd1Vy6O7GVlpEEANFQbEVu7u7u7u7u7u7O7CQLunuhvdfZ87ABAMC6nfvf+/s+6yL M7PPPuusveJdu84fAFyJFkpIQhKSkIQkJCEJSYihdURGRGZEFhL6f0cmRHWJTvyr9fgP3j8kRVIk RVIkRVIkRVIkBY+JrImMicwl9P+WDIiaEr3512qyBORLiqRIiqRIiqRIiqRwSypRTyJd/G+AqEUl 61hUsu7/kv5OPJXwYinAkxmRFtFooox/pTZLQP7frRQVIjcnF3mFxX/J7dO/3cDsDm3g1ro1Rhx4 jJxf3H7kg8MY2qYN2rQlcnNDx0GL8DS6sBJyCcfBUf0xesktpP+jOrwYBbm5yM0rQEU9HnJvK7q2 c0Pr1gOw9XrY71A85OfmILeg6Pc9alYAtkwagslbHyGrXHGQ/meT/v9OPmKeYcLA3ph7xfcf7Egy cHv/bLRpw9pZhx7z8Tgy/x/8vOJUKR855EurpkqJuDhrKAZPOY24f5g8CvPIz+Tmo1KRpaiAK7v8 or8mDuVGPMWSwe24cajX+htI+Z/e/SaRCZEp/hfgND/XDDn5FQFXMzw/qkZ2LIvW7kq48MkEfxdg /em8KnoPUcWb+L8a3Jvi+mIleLSRZeU0ShVPY0t+Y+RlxOvXf1+RgPy/WSkIuY7B/QZg1dP4v+T+ 2XF+uHVsKwY76KDR+L2/2LkWIzn4NU7u3o39B/djwxRvNDJqj2N+uT++tPATxunJQrv1NgrD/6SS igvjh2D43HPc8aPySlLAMxzbOhOOFrbos+Hdr2cjNwhrx/fCwIMffuOjvoC3uTIsex8s/1kTnmCQ +wisuhz6+/gIOAEL2RposubRP9eRFOci8OUV7Nm3H9vm9Ie5rieOfMr85z6vOHV7tQcd+47H6aCq DFV8x3JbNXDqzUPwP0oaObi3cBwGjN6DqEokPbl+59G372BseZvyl3CbnxSCe2d3YYxnQ+j224Lv /7Ncg7nRWLDLPJhR4N8MTvONsGUSB3326qN84G6GsA962LdSCfU1pLH8mjH+LiD/9hJZ/FdBFhfD /mpeTPHlnjYO7tfEunFyMG4oi8OBgqP7GkQref377yoSkP93K3E30dmzIxa9zv0LmSjE1fEt0XLK 3gqB58+WjNeH0bNRD5zwr0wQLsCzfZux5cyHXz678NeWIlwY1A09J537cdW8r5je3QsDNr3/DXxE Y9kgN3jt//YbnzULt/Zvw65Ln5FX7jO+QifrXlh8NeH3sVEcicPr1uPYq+//Dp/ifxZtrXrj2Kd/ 1hzYD8uHHXD0GITTMVW77NPpHVh34Mlv9X1/RXk0fSA69tlRuZnQiPPw8OiMdZ//WlD0ZEN/NB6x HRGF/6s7RhE5gAX5oqPFzDKQ2jwSXBJSQoK/i15b8r2FSH0TrBsqi/Y7mfvVEWlfpO0kPXjby2HV dSPe75YV8CKOJ0sx7YryZ1nOM1uIrZ/so4NV67URmFYRABfkQZQsyuHHsgJZVFS3NjKfqsPDRQ5H ggSXQhkSdQH+YUOElSm/HORnBj7GioEDMXDgIAwZNgOn3rGTnhkRb7Bv6ST6fjCWHn6MZKHRhCx8 u38MM0YPod8HYtjYBTjywA9lYW4R0qL8cO/MTkwfN5xbd+CgMVh58B6iMsU7o1ifG1gxYwxbd+B4 rDlwGud2bcWWXTcRVyBcNz8pAFf2rcbEQQO59YfPXI0LTwMEAEkBPt/ezX22ocNW4YFvPOL8HmLz /Inc+gNGLsKF19+rnSvGfjiPET1awEBPHw3b9uTxzKNFh/A5RcwQTGES3l87hNk8eQweMQPbzj1H /E/lCNm4MKYF2sw6hLjEQJzdMA9DubKehm0XXiJJrMNNh8/Ng5g5jOV30OQlOPUosHwwRyX5+X50 /wHIj3lxHrO4MhiCMZNmYce5zxWD/Lw4PD6+EeOGsHyMnr4Rt7/E8n/PjcLxzbNZ/Rw6DEMHT8f+ O+GsdiV+xN5JgzFs2FAMIR0YMXEz3sXylSSLdHj/yhm8PhmFRTsuwT+5oNpSLk4PxvHlw+FiZgij Os7wFuzvQVMIhEYJX5DxAVO6dcLQnV+Qn/YNpzbOZ/Vu3AKcfRMlqhhIjfTF3dM7MW3cMLbNwWOx +vB9RGeL1Ix+jYWTe6GxmQ4MmngK6934pbji/3Pg8PuzY5gylGlvKMZNnoNjd75BnHomka0u6NkW BmrGaOTaRYiPYaN342NCwU9wkYe3V7by5DAck2YuwIkP0RXUL0T4ywtYMHkk75rJ2HzsHM5s2YQd Rx4jpapGXpiCe4cWUL+Sfk3Zh4/xJUtncvH+0AqMoO+HzliBO+Gsdoc9P45BXD+zAJdfRyEp/DX2 Lp/O9veQWThyPxDipJFB9fYsm8LyPHwKtl98h8h3p+Bp11cMyM9BwKOTmD2G9btDRs/DwbtfRewr HtdXzmFtesgQzN9zC0nc54nH09NbMIHxOTO34VVkVrV6pTArAV+fXsGWJdNK+3rCgu146JdU7jXp wS+we2lJ/dFYuvMc7l89g20rj8A3jWtZ8L27F97t7KGhZ4ZmnfsK6dLwTVcRLbJyKfXLHSzmxa1R E6Zi7aFXZcFwZgh2r5zCi22M75iH0y9Y35IX8QKbR7O+YzD5jnGz9sJXIEtICXyKbQsn83gYhxUH biE84+cAdHFuKgLf3MaeNXNLn2309DW49l7EF+TF4MrGSWhdzxT6JvboPkDAvgeOwe57gUIx6/vr UxjU2QV6egawae8t7A+WHYdfujDfhZlx+Pj4EjbOnYwhvHpjFu/By5Dkcm0x6NEpzJvIi+HD5uDA tXu4vnsHdh19ijQBG3ywpg8aEciPZG6Z+g2blkzCkMGDMIBrk8tx80sKfm15BXbDLQOkeUCy2Azx wQa4dEANY4crEM8KGDRCGTsuGSCtiL8mPfiaBibSb0PGKuPEJ9PS72Pf62Ac8/0wJRx/ZEQohr2m ONYAS6dzYGNeA3r2stx2S2msKs77Ci7Lob+xuuhpL49Nd42RHmGA3YuUuHWHTFLDA39TlAXiZgh4 qo1Vs5V47Sph1V4dBKSYCdVL+ayLRbz7Dhmlggtf2LaSg/SwcwFzrSJWn9Ine2D5LkwxxIGFitz6 w0YpYQmB/OCMcgB4oQnu7FIhW1EQer4hQxUxbKgCxmzXRXyhMN+FyUY4t0UFw3l1J6/SxPsI0edj KTVQD1sX8p5vjArFckME31VHR1dRkF+y9OoT/m3l14P8iFfYOW8+5s0cCnsVC4zc8wQB9/egn7c3 Bk+chZkjO8HKpRv2feR5wOxwHJ02EK7NOmDwhJlYuGghpo3whoNtG4zd9hRZgv4k+xs2dneBTVNP DJk4HQsWLsTsCQPhVK8R2k46hO9CjrsIYfe2o4ujMzz6jsbseQsxf+ZUjOjrAVN5aZh1WIpAAaSR +PYMBjW3gXXrHhg/bQ4WLpyDicO94WztiEHrryGxmHU6Qc/PYsFEbxgqmcOmZVe0d++OweOIl0UU CNs2Qx2HwTjvX70NHil+d7BoXFdYmFnAue8kLF48H3PnzMGc2TMxZ8t5BKYKo+viJB+sGOKJBg5t MWDsDOJ5IeYQKPFwaYbWA9bgfXx11+Bm48pEN1i7NIdXm1Zw7TQQ00h+8yaPQnvn5mg3Zi+EHjEr APun9UDT1l4YSrJYuGgeJgzriWaN3THn0EuUx0XSsx+B/GLEfbyFtbPnYN68qfCwNkedrgdRXvjP j3mBOQM6oqlbb4ybMReLqA9HebeHnUtXbLgfAm6KlBuDm8c2YdqwDtCtqQpH7/m4+iqS1Zi0QFxa NhS11TRg6NAL89cdx+fEQi4fgdd2oIdTS3j1HYUZJIsFM8aji1tzOPVcgZcx1QOfRZmRuLV3Djo2 qI26dp0whdHReXMxZ85szJ67Ehc/iAxBZnzC7N5t0KTjEPTq3gPegyZiLunIyJ6tUMd6EE75CEgm 8yvWdXGGjVMHDOXZyqzxA9C0bmO0m3oUUQIsF8d9xK4V49Csvgks2g3G/EULSvVu5tKdeBT8cyA/ 6s0lrF4wB4vmTUALUwu0GH4U4sJ/StBzbJ3YGxY6deHcdQzmLSzhYzYWELjwTfk5kO977xDJdh7m zRoOB11FtN/2rJy6Bfh6cRXa27mg06DxmDufdH/GFAzp6QZ96ZpoNGA7YqoM8tPw8tIOTOrrAgWt rjj6uWTpTC6+XD2AuUPawUC/NuY/ZSUT8+Ealk4bhLpapqjXtDM82ndD/5GTMY9sa1SXlqjdsBv2 vxVe0hfxeC+8HJqgReehmMn4xikj0aVFW7Rt4oTalt444ysAxPOicGLWULg6UVI3fgbX704f1QeO tm4YuekR+PgzAff3b8bC+TPQp0l9NGo9F28C3mLrrIHw7DcOC+aTXTraovv629WYYSvC+z3T0LKu DbU1GtPnLcDCuVPQtx3x22QgTn9NLeMPQiiWdHJ05PqkKbOpPtnKhOG90EBPDcoWvXArhq0X9vos pvRzg55ZI3QcNYN8wTzq+zmYPXsWFh+4jwQRp5QW9ARb6fd582ehp4sldF3XoszOl4wwnN+/BhP7 uEG9piZaDVmN+5/ZGae8uC84MacP9BU0UaflQCzdeg4B6WzM+HhyDbwcW6EbgfvZCxZh3tTR8Gzu jJZDtuFLSvWBfvCl1fCs3witewzD5DnzsWj+TAzt2gIWDTth2zMBoJ+fiCfHlqGHfQNY1GuLcXPI f3H9DCOPxTj+PAyCw0cJX29g3kgvmJrVRssBU7B4kUAc2n4FYRlFQnb1cv8k2Nk4o+uAMZhJPmzh 3Eno2cIedZ1H4rK/6BKxJFxdNw721i7oOmQC5i0g25o+FYN6tYK+rBTsh+1DvIAd3ueBfG46nv0e I5x08EeteuhDWGHugp14HJjyiyHRMbAj6gzAZkFibrgeproQb63lMXqaMtmKKqaO4KCRuRQGbtJD Bg9Ihj7RxooJHNTT/hP9ThqhBGAm+uph3WxFNFavCe9luhQPeSA/wRD71iihecOaMGurQLatSnJW ITkrY+YSDdz1L+GBB1bj9NDHXgZe3RXQs70c+o1heFFBv9bSsHFTwr3vZihdnpJvjFMLFGBdTxrd hyphzkJVzJmuBG93GTi0U8YVXz5oZoDylrkqmDtVAVYqtTDlhAG+3dBAzx4cDJuigumD5dC4BQcn /Nj2C1MJhG8mPuepYFx3WegayONahLilTdR+liGmu9eCRgsFwkjs8y1eoYrx3aTx5x//gcM0bSQX 8xOZ5A/aGNlBBi3pGadR3UXzlNHXQxZOrRVx1VcY6AdeU0d7W2m49VDEbHq+GRMU0clTFs2a1kKd ZvI4FSIK8g2J7uHfVn7jcp1QrG7pjCZOXhg2YhL23vdHdiEb7Px83iMkKY8b4J7snIo2bWbjvgiQ iHy+H52a9caOJ5F8F5+fAt8XrxAYJ+w4wi7MQSPbrjj4ReD7olBs7OyK3ituCDmwwuxoHB3eHg5u 8/AtrwQcPsToVk7wHLsP35IFQlVRLsKf7KYg1hqTDn1EKcROe40+zg1h6j4N1z5GIbfkBglPMaJ1 E/Q+9BPZYugldOnQCfMf/WBaqSAOR8Z1QgO36bjpnyAwqleEzO8vMd/LFW3GHUFstaY5c3B1nCsU /1BEl2WXEJldUNp2esANDHRqgX6r7vKCeiZurh0LT+85eBQmPJoXfHMburXqg11vxY/o/BjkC5Zc XFzaH44DjooH+flRODilN1pP2gO/1GKh694enY5mntNwJ0TgPvkhWNvPA703vRBqJu/LCXRq1xdb XvF5zg2+jKGtemDegVfCG0bTfLFmUE90n3ISCdWeTk7DqUHd0GviiR9Po2d9w4JutaFevyu23fyC jBLFy/qIGc528CZwVvLkxXnJ8H3+CkHxwn0ScnYmGtp2xxFfkZHXgkAsHtgWnXb9jqVAJSUV+0b1 RYdRx1DeGB+SHqKzvTcWnAv7jXyEYW1Ha/TaVQ7Iz/qMRW2cMXznS2EVywzBtm7N0az7+mqvEc72 2YXmzkNwRGRUvTDkIgY4O2LJMwG7z/PH5A520HQcjtMvQlFqhrlfMc/LAe3XPy7t74Koxxjdshk8 519ATE6JQypGZsgDjLbRg5xSW5z2LxnVIGC2bybaus3AbX9hIB37+jC6NOuJTffCy/D+accMOFk4 ome/wZi7/TyCUlgHmhzyGR8ColH1FKwIsd988OFziPBgTuobTGhjD89VjyFoVtlfz6KnkysGrruD xBz+L4W5Kbi3ahgaWfTEdQFsm/58C9n9IBwNqtpgx7Mdo2DTaTNFsPJM1gdzurbHqMNfhb9+vgNt PIYTGOLbVtrHY/Bu3gdrz38Wkk9R/FvM7d4VA5ddR3o195gnhXzF+3d+SBVsuCAEK3s0RdNJZ0XO EsnDrakD4dV3C6Ir0Xah30l4enbFqtdpP6qJeP+3eOkXJTxrG/8Q/R1d0X/dC4E+LMCnw9NhQ/a9 +3EI8kqfuxjZKV+wvK0DnPtuR6xAfQbkW48/SEAwDU8Oz0Vrr9HYfS/oN/qGfeBv1mTBZF6aCT4+ N8D3tJKlJ+zykWfrObBooYSnCYKg1gCz3KQw/IwhhEbhYYSFXnIYtFyX5CTwfaERVg2RhcdWffCX 3ZSzhCVeD13r1YShvSJOPzciPMUuVSkM00G3ZjIYdYK3jKfYDA82KKKBnTz2PDFGTiH/ZJ5cAui7 xsjDwUsVHzJFltQUGGKBozScXOUxghKIw0/pWmamIs8Evh8MEC4yA8Bck/hYA642CrgRXg7IzzTE vH6y6HfQkC+7VAPM7UDPPFITIVn8ukX0/byechi5Xoc3us+rX2SCC7MU0G6IOr5ksLzmh+qgj6MM +pM84/P4z5fsp4OBDf6DPxrK43yYKMhn9jKcxr+t/EaQH4xlTo1hYTcat4LEj2wXJb7EtFbNMXzP UyQnxiMmOhpRUVGIjo5FYmIg9oxti9aLL4g9iSMrKQ6RkVFISM9HQegFdGrRA8tvCbivwghs7uwM +17L8TIgCmkZWcjhgaLMjw9w9uRDJBSxjuT9tnFo1nIMnqSI47IAj5YPRvNO8/GxhJHkJ+jh2AOz ToYIV80LwMKBbdBx++tqS60o+AKBfC/Me1DxxtucryfQukEnbHki/gyI1Jc74NKImaKvzsrSbFwc 3RwG9UfiuRgf/+3ABDh4TsIzBqck3Eef9h4YuecVUpIE+jAmDsmxPlgysAfaT78lfnlGlUB+Ns4v 6VcuyE/3OYK2Dbth6/1AJMbHkg4xfEQjOjYeSd8fYZKjB+Yc/iA0Lf35xEK0aD4T70oVLAtXFo2A e58tiCzkB8eHSwbAtfs8vPiehPjYGETT80VFxyAuIQnfzs5Hc6/BOBNS3VmTVJwY2A09Jxz78Rrg 9A+Y0sUDfTeKAvFE7O9jB48VV1Ak1lZiS20lP/gcOrj2wuq7sWV0dxED8ne8/Y3uJhl7fwTySZ86 2/XC/DMhv5GPEKzpaFU+yM/2xaLWDnAZtg3vQ2ORnpmFXB6CSXx+A2cvvERaNe+c+WEnXJqVBfn5 ZPcDmomA/JyPGNOmO4Zu/CDSShy2j2sH12W3ef1diA+HZ8O22VS8EeNqPx0YCxNjDxz7yip6cep7 zHFrjiHbH5bxuwlJITgwgdqef7pM0vlp1yTUUauPqUc/4JfvGMpLR2xkJKLjU5Cbn4jDs7zhPOIc MgXs/9rcQWjOzMCKySbSfK5j5UzqLwHnkPp0E5w8B+JwQNW4fbp9ZMUgn2LC061T0NpzOQLy+Lp9 ZGI/dBpzWEC3M3BpSle0GrwWn2OTEBcTzfcdiUl4v38iHHtMwr3Yn1xwXpSF+OhIRMUmIisvB3c3 DoVN150QXrSTixtTBsCrzyZEVqY7fI8TyO+ClS9SKs9HbipiooiP+DTuvpdNA3qh29Tz/GQj5ytm tWyFIRseiVnSWoj3Bzdj1fbbBOj5cn64YQAa9R6PhRO84dB2DM76peD3lgMoWStfdg26OdLijBEZ ZYxkAqdJL9XRpJkizgUIjKBnGGBma/Egf4E4kF9ghJUMyN+sh4o309JvMbroYSuHpddK1uTzE4vJ XeQwcLMB9/viOD0McZfFoD2GELe2v4iSgp6tZTHtgkg7eYaY1agW6jZXxpMIMxH+xSce8Y800Lwi kF9givcPdPEiwIS9V7oh1vaURcs+aviYZC50j8ALKmjUWgmXvhojgeQcHW1MfskYMXGmiHujiRZN FLD5EbuE6dUaRbh2UIZPtoUIn+Z4vo4DxTpyOBMq2L4Z2CVY+/BvK78P5Bf6Y5lrW4zfXT5oyPly Ei7qmjCpZw0HezvY2tqWkj19rmOiCePO2xDBvwJfb+3H+N4eaO5oDxsbWzRxaQW35jbQ1u+IrU+E N+ulBtzC5K4t0bCeDZq5NEeLFm7o0KUr+o1dgbuBJa44FUfH9keHgQfKBR7Jj1bD0aMfjgXygFzi YwL5PTHreIBwxSxfzOvfBp12Vv/FCwWB57kbb+fej62wXvi1RWjkMgtPk8oZUkx9jck2bTD/XEA1 uMjChdGusBu+DeK4yPm0l7L9wTgWnI8cn/1w01KGQQPqiyb2An1ohyYONjDX1oOL925Ei2GzaiA/ E+cW9y0X5AddmAUdNR3UsbaDvZ2gLtnD3sEaZmoqaLf6ltBoWmH0U4zr1BGTz7GAsijmIcZ4eGD6 BcHwHo3NfVyhpm4GG3sHapuvo3YO9LmhKTh67bH5WXU39CTj+ICu6DH+aPnAt6QwIL+rFzlzH5Ef YrHb2x4dVl0TAPnZ+HJjL8Z5ty+1FUfGVlysoWXQCTufi/Cb44eFA9rA6ycS1B+XROwZ2adikB93 D53semLe6d84WlcUhNUdKgD5BEHiP57HiHbN0LCBHZwZ39GSkvcu3TBo6iY8j6j+ecvp73aIBfm5 QWJAfpYPRjMgf4OIDy2OwpYx7dByxR0eWMrEmYV94TDopNjZoNgH61G3Pn+JUEHAObTS0oZxXXF+ 1x71TDWh57kBIUI2W4g36yehvdt8+P7CTZCZEa+xffZQtG3hDHsbG9g2cSI/3RKNLWqj5fgrKN0+ UhyBFX16o+Ok22JnDIrpv8Ji+r8Az8lPNsLJYwAO+WVXRTnweNuIH4B8wkOBV9GvfVcsvhfH+3wR fdt2xor7AoMzhUFY0M4OGjqWsCXfYWcr7Dvs6htBztQbx75UT5/yE7/iyLJx6NC6OZrYkuzsHdG8 ZWs41DdD4x4HIDxMlI3rk/ujY++NiKjEzEHOl2Pcjbcrnif9sG5G8BOsnz6Y+tCJnpH4cHCGOyWR dfXroM+Sm/w+/H4V7o36YuOdmHKsrojbh4J98XR9X+jqm8HFzR2unmNw/NPv3jh5AMIgn0BikSme HlPHQC9ZNHOQgo2tFMU/AqpNa0GtriJuRgiA/DQDzBAH8ovLAfl5RlgxWBbtN1UO5Pe0k8Oam0bC bafpY2JnOQzexoD82sh+p4lOLWSx9auZmDZZXhb25MBrli7ZkkA7lCzMdpTF9JOGqHizK7+t2AcV gXzBjbdEGUbYNkIWTb2U8TJRGOAzIPzuXHloadRAIztpirNSZCc8os9N6K+GrBTmnWGe3RR7B3HQ c7wWeb6yfIYeU0ZDAvknxIL8/fi3ld8P8kWmvAVL1ueT6Fi3HVaee4a3r1/jtQh9+OSLsMhU3pru AvheXIfOrj0xffVe3Hj0gq336hkubZuERnU7YcNDgVHtwlykJqciJT4SX9++wK0r53D00CHs37EW E3u1gFX7ibgTzkSrXNyYPQhtuq1FeDl8Rl9eCGfPkbgexYtuXJDfAzOP+Ys80C8A+RSAO3XwwvxH FY/kJzzeQAYwCtfCyxlBjn+AwY07Yu3tiGpwwY7k1+24XGygS3m0jpKeMbgWV4SctzvQrpkbFl98 U6YPX71+A58vvoiMTxMbmH8lyA+8MBf1HEbhxNN3ZfTo9eu3+Ojrh4gU0TmhLFxfOhJtvLdwk5ng M4vRqtUcvBdaDUYg37sjOg7fjOfv3oq0+wqv332En18k0rKri3yScKx/N3hPPFG5kfyuHcWcriMK 8gvw9dwadHLthRlr9+HmY76tXNwynpLeLtgskhAj5xsWEMjvtOs3HM9ZWioB8mPvwsvWGwvO/saR /B+B/Pwc1nfEReDzm2e4cfE0jhw8iL3bVmJU52aw7TYfr+Or199pb7fDxXkYjn8VXnJYHH4FA53F g/wh60X8SRmQn4uba0bArttOsWe7R95Yhtp1OuEobzljnv85dK7XFktPPcY7MX73Pfnd0O8pIntp WJDv2XYuPv2i463yo55hXs/u6D54Pg5cvldqU4+uH+EmWK5jLgnM4iZh/+i+aDPwUKVPvUkmH9m0 wyAcCagKw5UD+UxyfnRif9Llo9yR6rc7p8Gt40oECKoFgfzF7d3hPX0/3rx7IyznV6/w5v0n+AfG ICOv6ut1ClM+Y+PwPvDqNR07z97CS167T+6exyxvV1h13ycyQJOFa8Rvp75b2E2sPyg5n4+ivWcX rHqVUnG98IeY2bMDvMcvxbEr98jns3347Ppe9HF0Rq+51/h9mPwM/e06YO5Jv8pGQzxY0xt1uy3G l5RkvDo6B67dJ+K8b3Xn0SpTDkAI5BPAf7BVGe1bK2DJLm08eK5Pz6ePF8/1cHiRPEwbK+JqqADI TzXA9FZSGHneEMIg1hiLO8lh4LKyIH85gXyPbeJAvshGWh7IZ0/XEQPyt7IgPz9AG91ay2LRI1Px beYbYlo3OfReq0/+Q3hGgAvyjxmisi/oqjTILzDB4WlyaOyphLu8pKgg1wyZmWYoKmZB+N0FcrDt rYK7bw25MhakV28M4OtvhKRMdunN2fEcdBqqgQQxID/gkBJMCOSfDBW3XOcS/m3lt67JX9WyHSbu KR80FKf5YH67Fhi690u5dbIzsnhr+oKx0s0Rvdc/KVPH59hk1Nb3wLYXAsYf8wDeTTpj9V0xmX/I Mbg6eGHdU9aBxT9cDxcrN6y+J2aEoSAEq3q6oc3Ig/z17Rkv4e3kjbmnRcIAOfVFg9zRZd/Hakut MPgCOrZsi5m3yh4hmJeaTAGBx0TCS4xxckKPVffEAOhCPNs4FPWdpuBJTF41uCjGzXGuUOM4Yvs7 UYcaix2D2qPlyN1sEEl6huGeHhh7uPwZg5zMTLGbbzPfHEbPxr1wNrQyC5wLcHn5ADgNPgVxp31n +Z1DR7uu2PqmvFM+ipCRmVtmOUvmp6Po1G4A9jz5gL1jOqPP5hciU8kFeL1hOJp3Wgj/clnLQXZO dTeFpuL4gHZwH7G/7ChsQRaSKTEp5Yd7hGYnDN4mai8pONC3CbzW3eF1XyCWtmyCvpvKgtj3hyfA Qr8Ddr4WuVuePxZ4t0D7ta/KakNmKtKycn/BCcMZODCmP7zGni7/ZVjx9+Fl1QEzTpY9pTwvMwWp 2b9iGDkC672s0Xuf+GS8MPAyOtr2wL4PZW2n6MMW2Dh44/CX6p0mk/VhF5o07o6db4VHb31PTEOD evZY/U6g3UJfjHPvheGbRf1JInaO90BrgXP+Y+5vRYuGXtj1MbuMbhwc4QxVjXY4VzI0n/kVSzxb YOCOD+XbLON3RTr84+ap6OA+H99+0XvKPmwbCxfXsXgrIubCqLvo52SD5mOvC9lr2IXFaM7svfoo Rva5MXj74jmC0/hMpzzdCIfmvXDAr6zOZBFozCpHlV7uGg3bLtsR9QP+k59uRhuP0Tj78hVWD/TC CJE1+sxgyd153mjRb2O5L9Yqzs1GTl7VdTrswhK0sumJ66JjQek+mObpgIbdDoq84yQXNyZ3R4su K/G9LBNITs4UkjWzXMfdtT2WPC4LqHMpDmXms3J+tXMIzL2WlPGNecGX0atxI/RcdFdgTX4qzk/s gKY9VyNYTEDI+/4ej9/7IU3AlT7d0B9Wo/fw5JeBO5vGokPvuXhR0Saoogz4v7iJiw/fIb7KCekF onpgAaEFiuN0McpaGjOvMp9LjmlkNuaa4cpSeehZKOJ2jMCSlgwDTGshBe99huCv37dE5jdtdKhd C0M2lay955+Tv7yvDNyW64F/pCTvuixTpDIguAQoJ+vB20EO6+4aC7RBf3MNMKWrHIbtNGTbyDXC qr6yaDpQAzGlPPDfBBt6WRVNKFnY/dEUQm+JLTTEPCdZzDxlhB/uD+Bdk/JUEy1sFXA3prxlPUw7 pji/RAG27kq4GmhW2nbgZXUMX6iFsBz22u+3VeHQUgn3Ei0gfJwo79/FlBTksAnC98sqsHeQx/Fv ZgK8MnWMsdW7Fv6oJ48r0YL8MM/KJEH/4HejlFN+OcgvyElGeFAwgr/dwkTbpuiz8DQCg4MRGOCP wJAoZAq9frAA366shksjN4xYdRRPfL4hmOoG+H7ArRM7MLZfV/SZfoI3IpGM0xO8YOU2HueffERI qD9e3zmLddPGo3dHJ+houWL20ZeITMxgwUjcQ3hZ6MHYoTNWHbmGD76BCA0NxufnV7FsmBdchq7B h2SeoyiMJ4MdAbsGrTF5yxm8+hqAkJAAvLt3BnN7t0CjtqNxyZ9xdswGoVgEvzqKNg3aYMjqWwiN TuCuTy3KTEbEl2sY0cERLRacQUhMEnKrg/syv2FRJydYd5iHe+TwQkKC4PPkMlZPGwyPdpNwPTiz VHaBN9ahuZ0zuk7djFuvvlDdEPi9f4Bd84bAgRmpu/S1ypvhCnLSEBX2CTv72UFR5r8kv+5Ye+Ye vgYGw//DfWye3AWWzoNwrPQklzx8OroALa1aYdK6E3j6ke1D/y9vcf3YJgzr3hnDl53l9WExspKj EeDvj6DgILw5uRxtzNti/a0vCA0KhH9QKBIy+BwXF+YgPjwI/gGBCA76iC3jPNHAaw3ehJA++VMf hccjt3SnaQrurB+Kxs26YunBq3j/ja6he3z79Byndy7FwE4dMfHAy7LyKI7HnrED0MLBFQ7NxuFG eNmp/YL4N5jRqQ2adZuF47dfwI9kERzkh3cPr2DLvGFw7zQJF3ySqmkxhfi4dzQsa7thxZln8Kc+ 9P/8Cud3L4a3VxdM2v2Kq8/5qfEI/XABA1q7ouPs8wiOjEcO/VCYk47okGdY2K4umk/aiYDvzPeJ OD2+A6zaTsLFp5+4tvLq9mmsnToO3h2aQlu7BeaeeM23Fa4c0nBxXg9YNO6Hw498EEx8fHv3EAfX TkPX1n2w7U4wqoXtCjIRGxEEP/8ghAe/xpKeHmjeay3eBIdQH/ojJCoBOULoIgzreruivsc0XHv9 FaEhgfB5fgNbSf87dBtR7bPei/LSEEE6FhAYhCD/u5ja3ALtFp1kddU/EGGxafxNyyGX4KKjibqu fbHp1B188gsi3xGED4/OY3bfdmg1cRcCq3v8YfIrjHS2gk3vlXjyORAhfu9wYdt0uDsYQEmvLqac fIPYpHRkpSYg/PMl9Grihs7TzyIoMg7ZdMvibLLP4CeY3csJdhP3wZ/0IJsBTDmRODK7Bxo498Pm M4/gFxKKAJ8H2DZlIKy1tKGi1hobrn1GbDLT54UIurkBro1bY8jyw3j8gbXZwG8+uHNqFyb07wrv yUfATlzmISEqHCHBvjg3cwCcHUfg8udghAQFUJ+GIE4wCa1iibmzCW6NXDBp5218DWb0/hmOb1iE Mf26o66lJWy9t+FjRByySjaY50bi4Iy+sHL0xuqjN+BD/RIS6IvHl/ZhZGcXOPWdh5cJfG7yYx9g SBMbtBm1DS+/UF2y2Ze3TmD2MG908V6GtyUb9IvzkBRJ9yefEhzsj2Pze6B2yzl4wOgKxa2g0BhK CMQ8ZUEY1hKvrk1c0bTVDDxLKutts7/fxyi3lmg1YAnOPXyDACY2Bn2j2HUOa6cPgHu3ObgXVPXl OqkfjqObdRMMWHkBPgEhCPr2Gud2rsSkQX1gX98S5m2W4BnF2/RsPk+h5+egsXlTTN9/H98Y+/N9 h2uH16B/Vy8MXnUHgp6PGYCb1a4JHLovwUMfstPgALx/eAHLJw1Ehw7Tce87m5lF3F5JSasb5h++ x23T7/1DHNqyAMNJhxrrm8KdAPqXcOpD3ptzs8PvY6R7K7h6z8Hpu6/hT9cEfX2Ns7vmw7OpPfqs uQLmELnivAzEhPti/xQP1Bm6Dd9LfETGZyzt5oLm/dbj5VeK6RHk70T6Jj/8OjrL/wEFlzn4XGXR fiayBXsSC4H8DEOs6iJDuqWGBx+MEBpsiIfnNbFonCK8WktB1VgeOx8akh3wRvOLTHB0kiz0Cfie fGqIsFAjPDijgdGtpKAuWwPdZmmRzZqQLfNf4nR9CQcWDTg48MCQ/K4R/D7o4/AGZXRz42DTdfbI zaxkEwQ90YR7XRlM3qmLsGhTin3mKMo2RfgHbfRtKYNO87QREmvKXYKT4KONQS2k0aqPCs7cM0AA tRv4xQBntiijWWNZDF2vxzsS0xz5WSYIDTRC0CdtDG8gjcFrdCg+G1Ocpu9CjZFdKAzysxJ5v1Gd F0dUYVNbHnseGZJ9GZF+GyEpW3DWwBQ31yvAwEQG047oIzrCGIF0r2CSy5m58tDvoYovWbxkIMsY u4bLoambIvZc0MeXAKoXbITPr3Sxb40yurpzsO2+UWndbSM4sHJVxK6L+hQ3jfDtjS42TZJHA+3/ QrW+LDbeM0J8qhn5J6Z9ZmamEVGgBOT/bEn9eB6DbWxgY1UP+iqq0DauA2sbW1hbWcG23WK8LHOs YzY+X9+F4Z3boLFVY9ja2sDKwRFtu/bD2FlrcfVNWOnRbLmJH7FpXC84NKzPXdfYwqMvZm84D583 F9G/pSl0zRqg6zqes0p4iv6OLpT1D8Xwgd3h0tSG23ajek3gMWwZ7gaJgIXCJDw4sBi92rdC00bE q60VGju1Rp9xK3EvOKXEfeDF8XmwbWgJDWUN6JjUQzvv7dw3I2a8O4zuLetCV0MV6oa14TxpM/yq efJg0pfrmNPHDXUbNOY+p3Orzug7cgo2HH6IqAyh+WCEPD6KiX07oSlvba21tRPa9pqE/Xf8UZ0x /JTPFzC2WSOY6VJWPW4ZDq6bCndHezS2toVVPWu49pqGM6JHOyIT785vxhAvN9jVa8T2oZULPJg+ nL8RN32+83gpwLtTS2BPumDD9EVtE2goasC0nhXsbKxh7dwL+18LzGBkBmDbqLbUljVsrRvDTF8T ypomaGTL6lPrAXsQIhhX8+JxZ89CdG3rAuvG1lw+7Jq0QmfvwZixcj+eByWKBSSJjzbDSlMR1tMv o7zVu8yJRRsmD4JrUzuuLGxsGsPBrSP6DZuM9Ucf4HtadTfeMsAtEmdWjEcLqwawomezatYCnbyH YMbyPXgcwM5EBV1biRZ2daCjrgZNwzpw6Lwan8kwcgOvY2z7hjDUUIKavhlc+y/DuxTmnQ8fsWFs T9g3rMfdH9HSsx/mbLqAj6/OoberCfTMG6LHxvtCz5ub8Bk7p/SETeNG7Ppsp3boPnAkFm06g69R 1XxbaspHzBniTrZtA3ubhjDW1oSatika8XxCj4n7ES6CjdID72He4I5oXLshd42vS2sv9Bk8AWsO 3UZoavVmTHJC7mC8ox2srBnfVB8GaorQMKrN1UNGv3ptvVPqZ4pDCSQ0Zo4EHIlhfTujaRNGl6zR qEFTdJqwES+reSZ8ic1GvziCQe5NYdmAadcZnUcuxPELuzC0vhr0LRtj3PabeHVtC1xs6kBbVR2a BrXh4rECPlnMnp0rGOppBQMtNajom8N2yELyqbyms8JwetU4uFo1QmPqc1t7V3QdvRYXT2xDK0t9 mNRuimkbnvGeMwe+t/ZiVBd3ev7GXDlY2zvArUtfjJmxBpdehvB0IxIHRnQn+2yMOoa6UFPVQ93G trC1If9o1QHLz/hVXxTFGXh+fAU6OlqhAemDnVNb9Bu9FJefvsOJpV2hyuhJ97mlgJINF5G4sG46 vFo1QwPGxskWnUk/Bs3chHvfYkWS+AKEPTqM4R2aoXZDqmvTBC3bdcfAcXOx79J7JJeYbEEUjs3o QnJg/JIVahtpQ0ndCA1IVxgdbdp5DT6miU9lIi4tgImqKlqveITyxpZTAu9j+ejecHYgXWN8B/my pu5dMGDkDGw/+wKxmdWZncrBlxvb0au5HepbUZv2rdBj8GycuPsOt3YMh5aWEeq3GYVTXwVG4vMS cWv7bLS1bcT6UIqPnj0HYuKCLbj5OVqE/yLEf7iEaT1aok4DK64PcXHrgn6jpmPL8aeIyeKh7sJU PN07F+2cbFibbu6O/lPW4O7bt9gxvhM0qQ+bui/Dm0R+Jp8R+gSrx/WBC2OPdI2NVVO4eQ3A3O0X 4R/Pal1u6D1M72zD9fkWow+WzoSkfzoDdzsjyEirwYL61G74JnwRmWwIPD8dnJqGGH3wSzUGJhjb diFiRtx558gH6WG2txysGjBrxKXh3kURKw/qwee+Olzq1YAxAe9JpwxQMpKdFamPFUPk0KB+LdjZ ScG1sxL2H9XC7J4y0NaviRZd1PElkw+E85IMsXcGB7ZWzHp/adg3lUX3AYpYuFELnyKZ5MEMj/Yo w7p+TWgo/Ql9s1roMlYD4QR2U99oolWTWtBW+xOaRrXQdIomQnN5x1H66mLxMHm0dJamuCIN64bS aNlRAcuP6SOliL/cJ/6FFvpYS1HMrAU95T+ha1KLu+/Aivhp2lmNdF/47P3nR5S5v9nYSKGhZU2o KNWgJIVkQ23YOing7Gf+DEFBhC766PwXNamOlb00+RG6D1OP5FLbiO7VTx3BeXxeCpMNcWSpEjya SZN/kSableLKo+cgRSzdoYNvcWZ8XtKNcGCeIpozvNLzWTnJov80dZyixKOj3p8wqSeDeacNeO8l YGZKBjMa9P8WrFe3/HKQX5idivBv3/Dtmz+Cw0K5Iz7fuJ+/wS8oFlkF4p1lUWYCggP82LoBQYhO KgdUFGYgMpip50fZbHLp6RLJsWHc64Pj0tnvCnORFJeCbLpfXnp8adv+QZFIrwCP5aXGIsSP5Tcg PI47WioQlZCZHI1vfgEIpWcLDvRHUEgCF8AWZSchhD4Hh4QilJ7ZnxlR/Ylp7WJqLzjgG/c5gyN+ 0BYzShnMytkvMBzJ2cU/0X8piPDzQ2BwKOJ5D58aHQY/pl/8Q5FYQdv5JOcQP14f+ocgJlkUMrMz IX4l+hAQyJVjoP83Xr+HIilLIEwX5SLhexBPfxieQhAWElh6fWBYEvLEsJOVGIUAXh/6kzwSM34A wItzuSdfJGb9CKhTvYjgUn0O+h5X7pR/1UseEiJ4zxoUhgQRnnPTYrkzIMGhjE35c20pu4hhnRmh 9kNQaBhCgwNJJjEoFaGQraSU2kpSTBiCBG1F2BARGeLPyi44Eqk5P7k2ozAHUeHsc/kSH0EhIdzR +ZI+DP2ehHxxKpWTgjB/VpeCw2OR+ZNyLs5LR2SJbn7z58pL0DeFJgjIoiAbiXGpyC0sJjZiEMTT z4Dg6J/mg2+ycQhkdNQvBAm8nCE9mu2XiPg0ZKXFw8/PHyGhrA8NCOT1N9l6WDDjd0LpbwD8wokn IWRLvjAyhOcLInhLH4qQEBXKnf2KjBNellGclYiQEr/rH4SoMn43H0nhITzfGcydDfXn2da3b8GI Tfn5c3bSY1n/4hf0Hak8PF+QEc/qCTMaLUZB0uO/w5/Xl+ExKRWCOcans/7Anxszys7m5SM5KqRU FwKCyM+EBvHap+cOiUO5q8QKsxFDviMlt/BHDh3RYXxfxsxg5f6Cl8lmJ0ayfPqHke9kpVDMzKaH EP/U/8ll7LeQ+6xc+wsIQWxqxetZCikus/pPPH8vj+dipMTw+jCEH19zSIdDgpnZMwGfJCCP2PDg 0lgRl5pX1l7JdzF9ESWwlIiJT6Gh1D9hPD0sExuTcHi4I1SsR+JxtV+avQLs0g4BQJljitAAQ+LX CJEJJUtEzBD33YjsyggRySLHS+abkl9m6hsiIpEd5c9NM+GOdgcGmRDPIstfiswQFWrEre8fbIyU 7JJ7sHUyEozJVxhRvDQi3GGIkAgTskxzFGaZICDAiPyEEbdtv+8myC0S3GRrhtgItl3m+tjUsptx CzJNEcb7PZjXPrc+w0uISZmR/Mxk49Lf/ejeYXRNgB/vs78xxQx+3eI8U8SFGSNCoE4JMaP+3xNN SSPL7kNIiTYmvebVCzFGWq45ym4GZpOOxO/s8/lRvYxC9rukcLZfokr7RYtoO/6N5TeuyZcUSZEU SZEUSZEUSfnflPzv19BBSxtt5t/8iWNemX2EzFpw0WM0BclczGfzX1jfopK/V/e6H9X5K+ubV7JO RfUEv2NG8ZnZmQD8G4sE5EuKpEiKpEiKpEjK//uSF/MZJw+cxZvvmT/TCtEsIk2wGzYl9P+XmE3K 2kSr/7U2IQH5kiIpkiIpkiIpkiIppYV543Z7sKPAErD8/5d0iToSxf9rNVkC8iVFUiRFUiRFUiRF UoQK846fdUSbiDZL6P8dbSTaQvT1X63FEpAvKZIiKZIiKZIiKZIiKZLyDysSkC8pkiIpkiIpkiIp kiIpkvIPK78Q5DMvqh9D1IrIU0ISkpCEJCQhCUlIQhKSUKXInagz0Y2/G8hnDsZdBvYsUoZ0JSQh CUlIQhKSkIQkJCEJVYp0wJ7q1JTo/d8J5D8mqkPEvHLYXEL/M2LOgLUUIAuJTP5nMq9I1pbV7JeS tv+J+vlX62ZlzmSuTrsS25P4MEkfVr4P/479/bv8rsVvfMZ/Wqz4X/n/yp6/L+66qrZd2evE/cYc +zmI6GeOgv1lIJ95q+k4HlMSB/2/pKiXWujVVQ5eXgzJo0cfdbyPM5P0QyWpuMgchYX0tyqOIskA qycqYdVZAxSIe/FIthF2LVHi9kknbr8oYO1hA+RVok++P9SE9wgV3Aj9+/chV3ZFFcsqK1QPy71Z 3Rx3UA9Zf9EzFeaZISfHDLnZZsjMMENeAf+3vFz6LpN+59UpKKqCLqQbYvcCBe7z9Z2ihfA8ia1U Leia4dl2VfRkbKWTPNdmxq3XRkz+L9KTYpbnomKJr/t9wMkMT/aooDPj6zqxtj5wsy6Sy7F1/6vq 6N+ZX7fTHE34ZZj/hf7OAjHPNNF3hDIuBf1Kv0vtpBli5WRFTD9lQHZTfrtFhT/ypWXbjiOex3VX xpVvpr+MZ66tFP3z9LQwn/XxeYyPzzZFRgaP6Lv8ovJ0jwXgRcy1vLoFxWXrMn6RG0N4bWZms/fJ yuR9puty80V9ENtGPsWbkmtK/BVf/iVHgN79O4D8jyj7djgJ/S8oJUAPO7aoY/NWDawYLw81FQ5O /0Kj/2cTAYz9qmjfRxMRxZWVlyUQoQNnlf/CeZqOGODOvP7cGI8uamL9RnXs3KSC1pZSaDFcm1Lh H9/j004O/vizJla9+buDfFNcXaOITit1kFEBnznxRri6Tw0D7f9E7eHqiC/+Xz8TC0JebFKCU52a qNNQCnb2HOx5YMz2ZYExgXQObG2l0MC8Fuw7KuNOuFnl289i+3pqL2loNFLG6/R/rq082asKj36a iPylemkGv/va2LpeHTt2qmNMCylYtVbB1xyLX9L3qW800W2wMs4FSwY+fqdu+N7Vwmbyd1t3qGOk ey1o9lJHaKF4eUe+1cWuTUxdDczrJwOOsyJux/61IN/voAL53RpY+OJXxk5qJ04Xzur/gdEknXJA Pn2Xb4zt0zkYdEAfVZnxDSSeFf6ogUX3TX4Bz3R9sj7GdlHCqktG/yBbYZ/jy0U1ONtIwZJ8fL1G UrB3kIa9vTTsbGXQebAKjj40olgucl2uCe4eUkP/jrKwpfp2TWTQZaQqLr03FpAPYYh9iqhdWwq2 1J4D1bNpVAsWdJ/GtuxnO+taqO0ij10+pvzEIcMYFzcpo5OzNJeXJi04GD9NCZ1dOdh806g0bgEG RBOJiv9qkH8U7DKdkoeozSMLkc+18eMlDiX1ypviEq0j+r2460R5qGia0KISfIjey6KC+uLkYVkJ eVhUUh78utnvNWHXUBFnfH/WUVmIyEmQT0sxsq8Kz7XL6b+K+rYqPNf+gfyFr3m1Qwn1WmggmbvU 7Ed6yvDE1DPG0TVq2HfLCEU/7D8TrBvMQdsxOhWAfL7cCvx1MX+hOp5Hm1Wgn7UroMpc87NTvOw9 riyQh80cbZ5Malcgf3PcmS6L5mM1ECekU79K/39MiUG6mNFJCg2HquL2Q32EJPDkW2SGsK/6uHtK De0NpTFppx5is3/ER1m9CL6oDJtWKniTbvGTelyRn6maP6i4bnl+2aIcG7fA861KqN9KA2mVshVR HiqSBX/ZwZvVSvBs96tAPt3TRwNN2ivgdKyliJ7+b/RO2H+WFxctqim72j/Qj/LqlqdjP9uHLD3f rIDGQ9URkv+jpXGWiL6qAuvOSrgdY15BnBV3X4tfaGN1UBysi4Xkdx9Hmv1kvBeNFaY4uU4VW24a lgPyeTFiqCza7TQQ0VHL8vWaqReqi1Wz1fEgzKwK+lxBbCs2QA97DuZeMK4kH+a/2Faqo3eVo/QY Izw+qQorAxn0X6yFh0/08fChHh7c1sGWOQpoUEcO808ZorCkf7ONsW+qPGrbymPuZm3ceUx1b2hj 9UR5NHaWx6aHvEEiAuKXlsjDtLkyzj/Wx1Oqd3SRIixM5LDhgh6ePdXHrUMqcGkghQVPeLgs1xjH ZnDQxFUBG47q4NFTPdy5oIUZvWWgUqMm5p03FJAjk/gxa/Nj/0qQz2QYzIk6hqwwA/Uwe6oSJkxU wcl7xshMNsSZLaoYM1oRYyapYPcVA6QVi3NqZgh9oY3FlM2MproTZ6jh3EsjntAFRn1uamAS09Y4 JUxeo4UvaexvEa90sGyGIsZOVMP1L8KZbfI3PWxerIwxYxQxeowKtp3UwY2jmth/WA8JhcKApJgy rHsnNDBnrCKXj0lLNHDrnTGBOctSPn0faFE7Spg0mcBYkClSQ/WxZ6UKt/6Yqeq4+cmk1BkkfNbF lAkkj0mUAT5n5XF+hxorj7GUQd43FMkgzUsV4eFxdUwew/IxZ7UW3keZVmjMaa81YNvg50F+oo8u lhHPcw5r4/ENLcylZ126Xw+p9FvoY1JG+jx3gw7Cs/iOuTjfFOGfScGZvubKWREzlmrgkZ+JgGM0 xf1NKhjL9N1kJYzfpI2gTH4bYY/oXlNIrnTvsWu18DW18k4h97s+1s2jNicqY8tpQ+Tw7llI8j46 WxHjqM1Fp/SQUlDCiwnubVZFp2ZSUNOTQb/RSlyex3BJGXvPG5YZpQ+8q4mpzLONJdksUMMNrl78 yFkZY83AikA+O/J/cjsrt/FTlLFohxZ8EsS3x+jn5a0qmDietRNW1sxzszJdet4AuSIgOz/REKc3 qmLsaLbuigO6CE+v7sgZXZNlhEPUj21takLTWhbDqM0xJbKboIL9L41FQKMZbk6VQ8vJmkgqMMWH K5qYOZEn5+sGYpbwMKNbJnh+ToOv/6s08TzUtPo8M854FQfN5uqggDfreI2C78FnxmwQidRFTzsF nPpsKsx7hhGu7lHDRJ5OL9iuDb94szKJjP85Zdi5q+JDMj3fVXq+8Ux9Zaw5pIuIzKrKmrWV15R4 jCFdm7RCC58STcnHaWPFLLbfZyzTwGN/E/EAkXTkwUkNTB/Hym76Qg1c5+qq8HMdn6NMv5PuTFLG 7luGrI8jXbxzSA3jqU/nbNPB9xyWlzukPx2dyFb0KUiOEbaVfRcNkS/CR36GCT4/0cbGJcpcX8fo 3bKdOvBPqih5NcOLlUrw+GmQz7blR/5kSBcZaBvWQqveitxnLdHTibt0EZtf9rq8eCNc3qeGyTzZ zV6hiadB1RkpZRJIU9w6RrozWQUX7urhzDYVioGquPzZhAsiLm5R4caAw4+F41xhtin8X+li52qV Ul86fwP5hCj+SCBjH7d38Xwp9VN4himCnmpj2UwlrqxnrNeGb6JZqS49Ip/BjZkbKWYm83XsxVl1 ro5NnauBdyIDC/lpJnj/UBsb5vD7cOlenR/6jscbFNCoQpDPl1H4JRVYlQH5bP8FUJxl9HDiZGVM mqmGu4H8588J18f2SfQ8RGPHqOLWF5Oq21ieCc7sYv3uOLrHwm1aeBdbtm7gHcbvEx9z1HE3xBTp dO+9q3jxnvi6/tlY5N5m1BdabN+RbGcvUMWxN8bi/Xm8AdYuUIRjnRowJPA4RkBHx0xXwxV/EX9U ZILra1i9GEd2u3ClFj5GlT/zmBpliNunNTCfp89jppLPI1vPFPFfqb56WD1EHmZaNWHtxhHiYzz5 7U9xZmIGb6iPCA8smMzDSpRwXCE/U/yTQD83zRjv7xGgns/qHeNjVnNj1s/MxpFvS9RFBzsOVl43 FkmMzfF0kyIaN1fEzRi2/us9SqhnxcHRb2Yidc1wa5UCHFop42USK4Pzi+Vh10cT6bx6kdfU4dJU Ca9KBnzCddGviRTmPzblfo59rAGvJgo4G2ou3HaKHrwbymDGUUGQzwyeWxG9+CtBfh5RC17GYYGM QF0sn6kIe5OaMLeSR6cOcmjXiYPRBF4mjuSgpa00PCZowC9T2NjOzldEq2Zy8B6mhGnTKPj0l4et nRym7TfgATbetOB1DcyiJGJEJ2nINJTHwU9GuLVTFT09STEpQejVXBoOvTUQmsc6g+9PNOHtLAO3 rhxSVmVMIWUf2FMWppz/wMxTFYG5fANK/aSD0W2lYdVcHsNIyafRfYb158DJVgajt+sSyGXr+lPw mDJMHrqcmnBsx4FXe3n0HaqEKXT/Hi7SqNdMEVd5a/uSvuiSESigoW5N1Gkij66d5dGzHxkOPeMQ LxnUriuHrU+EQVFWGCUGveXg0paD4ROUMY2Abx8PGdh7KOL0Z9Nyg2Tqq18D8lMCdDHeqSb+qPUn WvZTxvQxCnCyk0Unbw76MaBjNAf25jIYvlEPWcWskQScU4MnZastu3AwkoD2NAKcvdrR85FRHX5n UgqsH+5UQU+HmqgpVQOdVuggSmDU9Dspf3uzPyFlTPLepAW/5Mo7bMbpb6UMunndGqjTXbN0PWh+ shFOLlNC50Z/QquzCvxy+CD/4W41dG3GApfBxPMUChgTCSyPG0vg85KhgN6x5H+LwBvVmT6B+lO1 Jrov1BUB1OJB/uofgfwsY5wlHR5PMhvVXQYaRlJY985MLIArIjDaw6YGjNooYPp0Cn7E78y5yujd jPrrj/+g4zo9oX0CUaT/A9oz+q/ATSCmTlCEZzMZtO2jhvfx1XGaLEA8tU2ZC/K1bOUwmgnCjOyY 5IwAzZHnxmWCwe2ZcnBwl8foIRy060a8TFXG+P5yaGQtg+knBUe5KCmJ1Mfi3vJo6SaPwaNZ/e/f SRZWroo49KL6U9OPdinBvp8m4hmHGqWDVqr/QZ0hWtQvlsh6p4lmDkq4GmJWCiRSPmljXBdZtPAi 38Lo9CRFdGklA1dPFdwPEQ6+gQRWGtnKonMveTi7yGMggYJpJJMerWXh1kUFD8OqKmtTvCEANrqH DNSMasG1pzzc2suh1yBF8o9KGNRNFo1J9isvCssuxVcHI6m/bVrIYdAoJa7sRg2Qh6O9LMZtKvFh RJmU/C5Wod8V0dKgBlqN0USonx4WjuWg80DyZeM4sLOivrnMztA+IP3s7FQL6gZkK5OEbWX/VUMB O2DB47U5HDRpKI1O/RUwkfRuCvkQNzspOPRUxbuk8oH58xW/AuSzFPxMCyPJnrSNa6HtAEWuP2d4 Hk8J8oyduogT2T/x/bEmejpJo1kbDkZQvalUf0gP0lsHOSw4bihm/80PiED+0yPKsFD4DxRJbiNI 50dQv9l0JL0muYwlGY6gJMTUSRHn/cz4MtikBJd6UmjvTXXItqZSwtjBWQqN2irhbrhZacy8u18V gz2kIGMqBc8+8mhHvncEPdu08eSvG0mhxSgNROTxQP5eVQxtVwtKdWRxOJDfT68uamBsL1locGSw 44XAgEwhAeBFBNZtZNGjPwG4aWwftmpcC8791fEltXyg/2h95UF+2EVxIL8EKGtjQl9ZyP/xX1h3 JZvjJvns7wXx+pjXohakZWqiwzA13PMzqbofo4T2wm7yu9QPo3vJQMtQCstelY2dzODOTALAJvo1 0ZiwTLfu8vCmeD9tOtl3K2mYuyjhRqCwfQc/0eIOVk0h+3LS+y8cFumImfVlQT4Ttxzr1ISxqzwm T2N9+kTq87Gz1HDjm8hzEci/Sgn3JLLB8f1koKwigzX3xSf7BeRHp/aQhTUlD4OGK2IqtT2ScJWV pTSGbdEXikepgXpYP0Ie5to1YddOoZSPCaRPU2ZqwifeTFh2lKQema6Als6y6DNckYvZRpIOWtvL Y/5Jg6rbSqkPMMGJcXJc39NtMOkd2cykkQpwaSyF5qRTfpnV9QsWXJ/vYcPB0jLLkZgEQA/9Wsth wgmKXXkGmE4+tPcWffEzX8n6GO0ui6FH2IHtmxsU0XqsFpJ4bQZfVEOzJkp4ksAbgAzVxbiOclj/ mtXfF9uVYeWshkjuYJPwsq1rh7Vw55Ngn5fMqpz4K0H+d6ImYNcO8Z3H7sky+IOA3IBVuogW2FQT 91YLXR2k4LVSt3T058U+FbRpqYyrX03BXyJCwrqnAY9mHOwtE9gpmXirgVZOUmjdTwH9ZmrgARkD MxqSF2uIZy8NkVJE9YuNsYWcfK/FOgTY+FNtuWlG2D9IFvZuKvjGSwYKyWlMbEvghxTpQ6wZf4Q2 n7LV2+po00QWM04Y8gyVKFUffcjxGrZSwtmXxsjM5621itHD0BbS6HvYkO8wiY/l/WWgVFce268T b1k8ZSk0wpqe0nCer8MLksxIrRE2jCSHPUsLQWnmfHnkm+AyZZDNeqvhU4r5bwX5zLVfdlJm21AO R31Z474/Xw7q2rLY48Mq6oMFlL0SaP6axd4n3s8Az58ZICFHgOdMA8z1lIbrbB0BwGyBbH9tdG8p j9V3TISAUlG0Lga7UEC9XN01gWY4u4iDpgO1ymz6erOKkrXeKvDNFg4kDyigNm6tjvBKTwdacLPr ZV3l0W/RrwD5wvWzP2mih5MMNn4QD/ILv+uivxclvzeMS+VcQMB/lIsses3SRmweX545lCyOJ+cy ZW/JDAZbvzDZABv7yaPHPG2RmayqkCnOzJGHA+lpZoWy4y3XIZCvq14Tw9ZqIyCJP8J4eJI8bDzU eXsiWEe3mwGagzXwJUlgpKPQFDc2KKFlexW8Sq6eXvscUaWAp4oAZqPddRUYKf8XOvUV8SLDAulP 1WDXXhXPk3i6mGKABT3lMGw1JaK5AqeBUHA7TAC4w2gNBAkMEIReVoYW5z8w8VLFEwIjhSX9mWCA NRRoWw7TQEhe1ROq3ABtdDH5D+QacHD0tTFyeP1VlGOC6ysU0aAhB8d9WXkWxlFQJx/mMlQDH+NM hXyY/10NdKJEfcpxQ+ERfeqDSyTvJpSgDKaguuigHs9fmyHkgz7eh5iUgs+765Vg1UadPL7lD+0w 8IUe3nwhfov5skv7oEmJoTQmXzQWPwPxi0E+d3bzuTqaeSrgSGDFSxoy/HTQy0EaXZdoIzyFD2gK cyjZOqmKZo3lsemJcdVHiwsMMc1dBi1GUnKZb8nGDfuaaDRAA1H5FOTT9NHPXgbjd/PXY4e/18OL d0ZIL+D70vwIHfRpKo0+uwyEkrqEh+qwM6iJdpM08DbClMAVb4T8qhqca8vjTCA/aU16oIZ2zeVw JEhk1DxIGx2s5LFbMM4WUNx7q4dnFFfzBE7DSXmtgSYWslhx0/g3g3zz0ti5ubcceqzQFZhZZf3q zjEUJydoE7j6+eWHuX5a8G4mg1WvTcXzQcBunEstmLRWwoU3Rsjg4YaieD0MaiSDSQcNytFpExzo K432y3TKzHaV1iEcsHKILDy26KHyy1KoXij1GyUGa+6JB/nFycZ48VwffjGmQqPWD6l/LOyU8DJZ hI8UPfRsysHsE0YV81FMSf9mJbR1VxGYXWHr+15VR1tnBRz/WN3BGDN8e6KH9/7GPHmx/j/ukTqa WpHePapuuxWBfFafVvTkoD/F9Jgv2uhNycpRf7Ny+tQU+6Zw0HyIFlKJv7wsUyRnmJUeSCAM8s1R XGiGjFRTZPMOewi/pQZ7czmsummEzMIfLTU35QH9NX8lyA8jchQB+SbYOlIGKgTcv+ZYCjsU+vtk IwWLJsrwYX5LN8DMNrIYsVefuzs5OckEiYkmSEoyRUa6EfaOlYP7clGAREH5vSZamteA82QthGVb iNzDotR4NnSUhmM/dXwkB5idR+C9iF1Pl/VeF0cP6iKukFXOj7uU4OSqiPuJFhC3pvjuIgW4dlHB l2ye4iWTQTjKY8ZxQYNgRliMsHCgLDpu1+fzUWSE+ZT9d56jC+E1mWY4PUcOttO1eZsXLRB5Tx0t rBRw6osJVzGSEll5JKeaIcVfB4Ot5bDpnvgg+StB/uetlFB0oz7KZvvvyxb280def36h35t2Uca7 dEG51+Y+UyrDcwoTcMxwc60C7LyZ0VNhYHF2KgdtCPhE5PNl8XCFApr0VENAdvWB57lqgPxGBPLD qnTEpRGW/iaQn/XxByCfWYpxVQdvuSN6tVFMyens9tLwINAZmCWou2Z4ukMRDTup4h0BvrQUVo8Y Skk3Q9htArVOyryR6+qDfPuZWhVuvC1drjNFFk5D1BEj4shebFNGs9aq+MbTg4THGujsLIcdryhx Tif9TxLQ/0AdjOoki4lXq5MEkm3d1oBHUxV8zCY9IWDLHVntIY+5D00QeUMF1gPU8DmLv/ymURsl 3AoyQXqqSakdpqSZIfGNJlydFLHnFX/kM5Dqm+rLYPNzkzKjRDnUp872HOx8UfUlBTn+WvDQr4WB W0VHlejfGQYY00YGndewv305TM9gS8ElWZwPI5C+WhF2bmrwyxW2xcvkYw2J9/V3jSF8pJuwrTAg vzGB/IhKPQMvKcqjPkwguTEzt9mGmOUtB+81Bv8zkJ/6jAX5hwMqAvnsFHz9zmoIyhcnO1McnSwH hzGaSCquIsjPN8RUdzlM2GHA+sci+txGDuN28j4XGmKymxzGbtEXAO882RE4SCbZJTHLFIooplJy 2WaKrsAoKYGfO6qw9VDEhQhzoTiU6UOgtb489n/iL3FJLAfkF4sD+aVrv6nNXFMkEB/JTPKXSzrn Kocp+wz+ByCffaaouwSaWijhZoRZ6XWxTzXg7sTBwa+/YkM12dm3H4D8OD0MJt8z+qKxcLynWLCi uSzGbNOvPsgv4IH8zXpVeBZLFIdQvzUvD+QLxmR6PvKl8eS/svLZZb0tCWNcChYZnU9mQf6sE4YV JsQFUXoY34ISmxMGwpgtmTBbqiE2DZNBhw261RzNF9B/SrATSe9SGZ9MyfGIjvIYe8DwN4F8sq9B HHjP0MKnmxpwc1TkDfiIj2d3VymiuacqgovLHoEpCvKFfSm7off4LA5MdKXQuqcCJs9Rxdr16jhy XR9xOeLsQJ1o6N8N5Btj3WB5OA9lAEDZDTNxt9XhRUp2PZYZRdCCq/qfMG0gBaem0mjShE9N6XM9 kz+h5yUaWMh5MyM07Tg44F+xkSd80sZIDxk0pPZbtJal7FMO3fsoYMQMdTwNL5k5MMUxZnRuALPM Q/wGpKSHanBsTxlqIG+NVqIeejiSQRw3FO7ALEPM6y+LTjsFQD4Z8dxuHHSbI+ygmfsenylHQEm7 FCi92q0ARcUalATR8zsKyIP+7dhECobKNdD3gMFvB/kfCdQ7EYh/m84+g88mAvldCdRn8D870ef3 vN8LU4xwep0yurYnMMfsFm8qAzeSddPGtWDXlz+VVWLE2V+14OnMwS5uYKmNwu866NFCDouv/MzO fgKeC8WD/NflgPx7lHA2akUBqbhqIH9Jl98D8jM+aKJ7uSDfHIJnTDNTvct6ycC1rxq+ZYiCMxMc HiANRb1acGjK6I6ALtHnpja1oCQnix3PqjsyYopTswnkk1NMqwTIv0Eg33W8hsjpOmZ4slkZzm1U 4VfA2p3PQWXoy9RAQ9KhZk2F9b+pgxR0tGvCc5leBRuey+cj6YUW+pPzvvlKB0MIWBx4bIhTS5XQ cbI27h9RQpvZmogqYNdd3pwuB3WtmrARY4fNHGpBtZY0FpVukKKk4KwyGtsp43GCmICVZYAhjvKY edigyiA/65Mm2jSVw8pHJmID07bRCnAdqs2dObi8mAP7/uX1B/ndexrwasjBxTAzIR90Zpg8uozQ QkqFo4hmuL2OQL5bZRJiApTf9LB2CgftW8mgiT3JkIBQe3dZ1DaWwvBt/zuQn/xEHU4eCjjkV5E9 mWBHH2l4btArt87XU6qoa6+Cd5lVBBZ5hpjSlgXxRQzgItA/mQH523if6feJrdnPxbwEODNCHzvn K6IDJXCOJDtHZxm0I9k1tqiFjnP0BNbvWyDmFoH8jgTyhZaDUSx4q4VeDeRx8DMf5MffU4O7GJBf GKgNTzEgP+GTLpZM4KBdSxnuKSGOLrLwolhqpimNeacN/0cgn1lWY4hVveXQa6M+u2+k0Bi7h8vB c7q2yNry6utJFsWjXhWB/Gg9DOpMYF4IILIzNUtJLuN2lA/y9/X5AcjPo0RhMNnHpqqB/EJKzjyb lz+Sz9j2h8saGNZLDi2asae4uBIGaucqBbO6HEqaROrzMM3MYxWD/LTXmrBX/BPmjUV8NM9XWhr9 CTNvDSRUs2+iP+hi6VgO3F2lub7DyVUWnm1luIMos05VFx/8AOQXG2NpDw4GLtVF+CtNdLTi4Ep4 +fHs3FxFuPbQQKwYXsSDfNEkxgQvL2hiPrP0sjcHnTvIwYlk59JLBQ/LHJ/9l4N8cct1jLFhiBwa 9dUUM5VmgdCL6vBwVMLLTAIq37ThUUcWi47q4uF9PdwXoHv39PDkuT58A00ITJmXBfmeHOyrCNAW mSE7yxSpMUZ481AX505oYec2dWxeo4phnaRh60UCjWQD2LWZCmjbvbypaEvEXFOFs6cirnw3FwL5 wgZRMcjvOltXwNDFg/xnOxRR21kZZx/pkwx0BeTB/vvFOwOEJJnhdy/XqSzIZ2ZjijIpex+pgA7d lLD+sDbuMvxS310/r4lxHaW5m1ISxYyOnRwnj3aTtbh9e2cxyX+wejWWNAgDz9MLCMwP1irdP1Fy vw9rOWgmBuTf3VDeSL7F3xTkl+iZETYOk4WdtwreJrH1CvLMkJtrxhsRNMHBIQQSRqvhwWMRXbpH /36ohzc+hkjMrP5I/slZ8nCYLW4k30IsyGdO14ktqhjkv92tjKZ2CjhyX5+rQ4L6f4/+vnxlgLBo 02qc1W6B7EAdTO/IwZw5iug2TAU+uQSSrqijswcHk4bLY8gabd7mKTNcnyELG9KXq2SH90Rkd++B Hl6/M0RsGh8sBxDIr19fETcixTj0VD30bsLBsgtVDVAEPr5ooW1DWcy/ZgxxU8yrh3HQYZ4eVx53 VinA2osJPOIHKiKvq6OdlQLuxJqXAfndRmv+ICib4dba8kbyhT+nftHBGA959B2nigPndXm+XBcX 96qitZUMBm/+H4L8x+po2oH0KaC8qXdWBodGUxI6jwFi4hOdD4eof91U8S23qps7xYP8sWJAPnfp XYQeZnfnoPtgFew8pcPTOT1cOaaOHgTUPGcJDxRxQX4HRZwP/THIj7vLgvzjoSIji2E66GgtCPKp 7nttjPSSQ/+pajh+iaf/d/VwaR/FQVMZzD7+vxrJZ8n/vCpcnJXwNN0SWa/V0dpZAZerPQtZfZA/ +uLvAfnLCeR7bNUrp42qgnz21LBn+1XQqT0HU1Zp4PIdnh3e1MH2WRw0qK+Aa2EiI/kJeujehFmu Y1gBH8xgiQbcLGWx6owuHohiNqKnL/ThF2xCz1v1voh9pYVBbuSLp6nhKE/vGP97brsyHOvJYOrx 3wTy43XRl+xw2jljFKXrY0xL6tMz5SwrzDHCnO5y6LZaX+xgU4UgP98U/h8M8D29BOxbcM/GZ2J3 dJAetSsDzyU6AgM1pjxsvfivBPnMxtuWYDfeCoyMjJXGH+ZyuBBYMu3HmzqijGn9IDm0nKTNjvKn GmBOGxmMPsoIvi6Ej02qwyozARf+iwTYkcycNxpw6cDBwUDB3c8inRGrh/4u8tjIHQWrC/56f2o3 WBPN7eWw7okJ97tYcoDOVrLY8MQEZY45KzLGxj6yaD1UA9GFvO8y9NHLiQDDacHlOpZcQL9okCy6 7DUQuJ8xFlCW2H2e4Jo7NqidmSMHhzklwYWc9kN1uNor4Aozy1HmqLo63GsZIFc2UJFMeEdoXgwq TyZVA/nNuquULs9hQL1zDxV8yuV/btZTBYGM7MhRt7Tj4EaChQCfdbgjmNM9pQksiZ/RSX2nCU9X Bew/oYkB1Jcr7hnj55ITU5ydL49G3TV4ySWPnzxjbO0tBbM+aggvthQCLvc3KKKOixqBfEsIH3Fq hrQM0RcjWZT25/Ju8pT16+HHR7GaYD2z2XS8rsAJTeWBDUvkU7Dp6SyDrV/Ny9frQuZ4Lw4cuqng SSx/mv7VYVVM2qrLA91meLFHETad6ZlL+kNIj9ilVbkF1Zf1yRlysBqnhSzR42GZNYiUPBQKLneb LosWEzTLjBa/3K6C5u5qCOE9a+JzTXR2ksehAPNy/IEF8nLMqqXTxUkGmNehJnSUpTB+sQ7LNwW2 0d2loKBWE+N38TctB11SgV0bZbzKthQjO54d5puV2v33q8rQozaGcaeTa0PwTZc+eyiRbKmEO1FV XVpA4MNPCx20/kvJGrv+U/A0hpSXmvBwksOGlywwiblPPrGOHNY/M0GZ4/6Y/UmD5eDYX1Ng9InV 84sj5dF9TEn75b2B0Qx31iiibgs13kBIWVspLOYt/5kgj1b91BEvom8ZPlpoTYF66HZDiB7PWXqE 5holdPAgv1JcES+Vl1/KU3U4uFKc8DeH8CkZFsjNMEUOz74/nVThnqZxIdS8rOxyDDGDWRK3XLdS 77oQB/JLl+vwQP6EXbzPPJA/cTcLml9RouZCSY5vkbC+FUbooIcDgfy5ekLxJum+Guy8FHElShCI WSL7kzb6NJTHMX+BNfkP1dDCThZ7/ASWRND3304oo5GBLA6WnuNtiqNk29akczkifZhGAK+5iTRm nxbXhwJHaI7QQGQl/F30NVVYd1XCgySLin1piiHm9JDHiA1a2DxKHv1W6ZY5GKFawI/HBzOb0dtF But8xMVOZlBPH0O7EvC7Ziwc72GEla6ymLjHoBydpgSyH/XbKt3y/Xm+EZb1k0GbVXoivoNZ7ka+ NNtMYFBDQC9JJzq2kMeGx6YibbPYpx+zOZQLigX7kGLeSgXUq8PhJVYC7SYRyLeTx5SjRiK2Yomi XFOk57C6lE9tT2whg2ncpUvifXRBrlkVB2J4s8/9ZClWltW7eErWm5jLYOYZY1TvOE26JkEXHWzF na5jgQ/7lGDTTAHXo9jYeY1k1NhdGS/TLMrU9SVf4dxUAeeCxJ04ZIHvvNN12GstymDS8bZyWHHb RKSv2aVxd+fLoclYDSSUzniX1Dv6V4J85gjNYSg5QrOks3ZOlgNH9k/YeCjhwHV9hEQZI+SzPjZT QLF15OCsH3+n/OdzqmjaiAxlizbe+hkhiuqGhxhxXzIzbbgCBjAbCnkgPyvZhPv75wuqsHGVw+q7 hoiONkZYqDFikko2HvHX0XlZ1IC5Mwebz+jBN9gY0THGCPygh/Vj5dFsoCreJJZk5CY4O1cBto3l MGefDj4ydek+X5/pYhll2Q1bKeDMF9YJ5qabIspHG+2p7ogNuohONOUeg1mUbYrYAF2M7SSD1ku1 EU38ZDNr4cL0MNZdDm3JaYbE0XdMYCGAkBhjiA0jZNFghDp8Y+h7ZuQjxwQHp8qRgilizyV9BIQZ IyrSGEFf9XFmhyoGduVgySV+pp2TaoKICGNERJrg62VV1DfnYPs9Q+414fR9am71ABED8u1bk9Lz XiLzkUC9g5sCbvBOH2FAvn0bBdwnkJnxWhMdGklj1DZdBHw3wfcQQ1w9oI6pBG4bW9REvY5q+BBt iqzcskZ9aZ4cNDVqocNITcQU/Pwrur+eVuFO6807rY/wGBMEvNbFeua8W83/QKezMp4wa6xz+TxE 3FaDrZk0Jh3SQ8h3knW4IR6e18SU/nIYslYHiQU8Y8ujfmT0LNwEsRF6FLhl0WmSFgKjSP5hPN3j 6ShznGgity59H2GAWV3l0KyfJgKi2brRCaZCoxy5GSQz+v47tfXthhraWUtjwQ0jxJL+hVEfMpt6 SuoWZxrjNCUyevXksPG2ERJj6doIRkeMsGOMLOqO1eQtjSIwHKOPOR4ycOutgguPDBFGzxdJ9O2N LvYsV0a3roqk09U/rebDQSXUMSOQecMA4cRrRJABbhxXp2DIwfx9+txTaxg9T4g1wsGhMrDrR/ZG 8kvLZkFjWoIRzsynRMRJCfepXzKY007IDk/MIQfblINNZ/XgR3bN2HvwVwNc3K+Ggd0VsOiQQbWW 6zDJ3rrONfCHlBTWPjIpBahnpsmixh//xcTS0Un2TZUbKLF36aCE47cMEBzB2mHAB30c3aSC3l4K 2PvcCMXU56kJJni8VxGaCv+BrJkspu/UwacQ6ucwQ9zYpYJmlrLcpTq51eA5y1cbXaz+hIyhFPos 0sQjHyOuX3p5XQNdmsrAcwr5xpJjYRkftpSDuvZyJH/yYYE8H/ZSB0sI4NtTYDpdMstXRPpM9hEd ZYjtveTg3ptsNMIEkRGszqWVSaQsEHZdDTZmMph6hGcr9HwPzmliMtnKUPKDybxZmrdbKGASWNhx yxARZAeBH0lmq1UwvKccjPSl0GORDqIYeykq0QO6J2MXMUa4MF0Brs2VcDeQ/Dzj18hmsgqqD+Ly o3XR304K7SdqwieI7vHdCD6PSR7jFdCrvxrelpwSk0b2M0oONs052HiS9I5sN5r6+/19bUwm+23c XgXPvlc9SWNA/GQ3WfRZoIOEPEvuyO+k1vSZZJDADJgQ6J/QUhZ9KelMLiQZn1WBE8XCpWf0EUp9 F/rNAKc3q2JsXzmYGtdCC4ohoeQ/mDdqZiSZ4M1hZdRrycHOp0ZI4h05nJ1mSrFAHR7mslhz05C7 pp+xl/wYXQxyrIWmwzXwIZjVz8tbVOBVuyaUFaWx+oohEnizU4+2KKKeowKOPDFEJPUhswl3z3oV DO4mCxO1Whi1mY17+bwEMCWW4g31IVP3zDx5WPYkeZENfOf1YV4hXy7pSawf/E7695wS4DoUR46+ JX0inQqj+JGZay52FNn/nBra6PwJLWfSj7CfX4ufm8X63Qjyu/531eFpI42Zlw1L/W4iz+/mkDy/ v9FCVzcZ9Nmth5hE1tczQDYuRBeTbJmz17URSf2Sy8QAsq04BsOEM77LAKu9asF1qibZDD03fRcZ b0oJsfBs2uUF8jBvxMHJF0ZcGYb6GuDMTlX09eRgyw3+Zvm8dLKLcJbn0McalLTJYfYJA0RFszbE xgr2TdwLvWXQtK8anvuy8eHtLS0snq2EzsyyXyM57H/G1i8S8I/r+8igvqcybn9k/Yw/YaUDi5XQ zVsRhz+Ylg5Ovj6iAgfCPzN26+BDAOujw4MMcf+sJiYO4mDYQp1y33hc0bLO+4s5sCKwfYynd99I 7/YvVcYgSrD0daQxYgvJP9lMQH6VI2Zz7PdXmnCtK4epe/XwnXQykourDHBqjRIcG1ICt1uff/R2 vD4WUeJlQ/7/2G0Dri1G0PNd2aGMZk1kMP5g2TfYZ6WxPot5+7NNIwWc9WFjRlqe8GzJML0aqOOq gI2n9PCZfHQkT3ZXd6rAnXz3Wor9xUJHaDYmevBXgnym7Ibwy7BIWYaRs/ZWw9ZVyvBwloaVPZGd NFp3V8HF98KnqjCdyxwX17edDBpZSXHfRGZDgnTryMHgcao4/diIN4Jihpd7lOFiL4XG5Jg4in/C qJ4UHOiztZU0Rq/WQYpgu/F68CbDbdWJg/695eHixL7lrHE94qOfCq76ipxBm2eC69vI6bWWgSOX D7qPowy6DlHBFV/TUlDw8oQK7BvVgrL8f6FpVAsefTQQTL9lvNdEz1a1oKXyXygZ1ILbTA3cu6aB Di5S0Fam77RroUkrcn7x5tzpv6lkhEaa/4WcZk009ibD4m2eKk4xwuGlSmjDyM2a+KAg5egkC69u Cpi8RBOvBI4S8zmlgqb0uy3J1qpODchRYmVan73GxlYBx19V74znr+R8LUm+1tOZJQwW8N/LfraZ wS4t8qPPFvTZdhbzuxneU/91dJBCfVtp2DnKoms/ZRy6po8L6xSgol4TDTyVcN7PtExmG0Mg21xD Buuem/40wOdSFgWZJQqwqkvP7yANaxc5TNqkgT2zKPCo1UBdZ3IgHwT4YI6i26UMV5JzYztGP2TQ njnibpIKzpDDzS3RjUg9jOwhA2vSpya2UtCl/lTVqQlr0idbAuXDl+nwZg+I4vQxbwBTl3ST6uqp /QlFDarrwNbtM1EbcQIjXH5n1eBpzb4xz6puTahw/gsD4r8Jo9fE/5pH/Gn0FEqonGv+gT9Va5Kc pbn9zLytlflrov0n6k5m+6s0oIboYdUYDppTv1gzfUN1mfXR3foqYuEuHQQlV3/KuyjdGCcXKcCR ntOGkYO9LDwJ4I+eo457n0y4jiqLkt4pLaVgRnrOUa+BBi0J/L015fqL7f3kYKn3J+QV/kQ9a9LV lzzgnWGMUyuV0L65NOrz7NDaWRYdSP8nLtDEM3+Tai3XQbEJdgyVhjolFS9TBHVQFVYq0lh0WXgq Pi/WANtnKKC1Ays7RsYOZIddvBUwe702vjKzKBRM1zDJlUkN6NooYsN2VXRrIc36MetaaODEweIj +kJ9UiWQ/1GTq4+Ttmpg5jB5rq0z/s7ekYD1cm2EZYiMFOWb4MZ2FXRuQwHKileXfKnXYBVcF3h/ B1L0sdhTlitbU/U/oUw22oinH9YO1BdvxPiNXBPcpiDnUmorsvDw4mDIZBWcfWXMf98H2eCxxYrc YxwZvXBqwdiTOu481cPC/tJQ0SWgOUkDQXm8jYmU1FlTm8y679qkD8yepHpkJ/bES0tKDF/G/5xP CLilgf5tqG3mTZfEd8u28ug5RAmbj+sT8BaQXboR8a0ED1cZLt9Mf9uTL/OezOzfquZxs/lGmNGe PaZ3MzPjUkyf2/E+v2A/T2vLft7K+OoCU1zfrIyWPBk7Osuh70hVXHygh+2TZaDI7BMZRskJJSun 5sijoRn5fKU/YdJAGoN3s7PpLzcrwZkB7jL/hWEdGczao8cm3PRb4G0N9KR4xJUFPWOH/qo4uV8d rSxqwNBCCuNW6CKLiUGpFINmMYNerF9q0pr6cJYGHr3WxbjWUtDUr4XOwzV5szomODKCEiRr5m3S 1Lb+n5AlX9uA/AKjT7ZD1PExRQDIrVDk6pAd9XcD0xqQVf4TFg1ZH2ZNoOpiQDlLZphzxG1qoe3S n9nUyadASoQ6lvjdeqzf1avD87sk92X32KMM3x1SgWujmlBV+i/UTWvBaZwGd3lnCgH/wba1oE3X qZM8vEaSTjMDVWRb89uSDtmwvstI9T9Q0qV+o/60pe86LNXmDx7xni0nzgCbx1Ey2YiRoTQcmsqi U08FTF2qibel8d4CoTfV0akpy7NN/ZpQ4vwJfUvmDa7Es7U81pXuaWOO79bBjB6yqFOf1ftWXgqY s0MHL8keHChWmNSVweIDBkJLiFP9dDGjrywa1mZ5d2kph269FDBvqza+JQrs5Sk2xdOjaujVVgCz EVZqS/5g6CQ1XHhhLLLEunL2UphqiJ3TFNCkYS3uMzqT3o1k9O65DiZSsqRuWAut52ohptKnwrH1 PjNLaBrUhCLhI10zVsZ2pG+NCAs2pZi08JC+yLJTC+RGG2DLdAW0aibDxa+25B+dPRSw8izVLS67 JPUF+d2WpO/1ySY58n/CkutvFHHuo8D7LQiTTqD+cO+tiFF9yZ83YXmxIVzh3FYBq0/pi6x6YAae HIgi/mqQ/6Y0IxV8AVC7CbrcLDE+1BBv3+jj7SdDxGeblzt9l5dsjM8fDPCGqUt/g2NMeRmNAGiJ McL7NwZ4994AX78Ywuc9U98Ab98aICDChLdEgEcFZogON0F6DmVZidS2D9v2e8pSEyvgIzPeGF/e se36+Bkjo1CYh7Q4I7yh3798NcQnavMjc1QcfV+YYYIvHw3wifhi/jKjJclJxvD5wPvuE8O3EZvZ 5ZkikLJIH5LJV/r+7VcjJOUKK2ZiuCHev+Xx8dkIcelmZaaqMhOMuHW48iVZ+PoKysQQcWnVA3F5 lJUGMfINNeHOjuRX8LnESaRGGuHdW6bvDBHDe3FFIQFB38/03J+MeH0vvOTj+nJFtB2ribjiX7EG l29w3/1ZnXvvZ8yOoGYTv8THe+ItNsOsTP34ELb+m3eGCI015R+VWlKP+sv/KyNTqvOW359cudNn /3AT/ixSvilC/VidZOp+/Ex9/Jlfl9ljIjiSn0369lmgDxm9+ljSh8RvhEAfMi8ZCqHfv30x4Mq6 RPe5OkK6FBJvKvKCLtYuv/sZ8nn3KxldsPwlso4I4Nk38RqZKDx1XJhFcqdn+cCTwTsfqsM7ojGS 5PnhI31Pf9+TrsammgnpfwpXn9hne0fXR6eY/STP7IhjaJSpiJ8g+YSQrWaKf76YIMNSWfuQnSZm CSzpoGvD/Yl/8gOB39lgnEn+wYfX9wHRP7M/hkC+jybcPDjY9pmePdsUAZ9ZefiGmPCAjvi1s1mk U594PuzjN2PecYwWQs8c/rHEt5Auf+bpE6OHZAOsrxEvj7hgvq2ExZb10SX1Iv1Znf7oS/fnjfIz +6MY3/guwBjZxWyfxDC2x+vn96TDX7j6wPLiw/Ce/7M6ysrjA+8e30h2OQJLhETrpkQZ4cM7tr+/ BBqXHm9crfsXmyGB9Pgz6XkUT78Tvgt+Jt8j9JknY54/ek9+PymPt6ck0Yj1OYxM8th+eEexxZfx w9TXvtGs/qUzsxWMH/Fl/UhwlCl/tJYrCyNWFtR/7HGp5oim+32ktgLC+Me/MkAu7Bvbhz7+xsjk 9SHD/yfqw8/fSvbKES/+fD/E2DTX5/Ns4C1dmyEwG5NKcY3tC33yByz/H3i6+paeNyFbfD9G3CGA 21kJ10LMf3oUnztCn1CB36W/4bz+yog14vL3hfhkMMTbAF68TzfBN8af0nWfGXn4MUfGsrYV5sOX x0eRWPGJYkV+sRg9peuYkWUuRvkkGO/5z5rLYKT3vLZ4GOTjB368/54oHNuKGEzC+90/kj9QGerH 4oTQMvub6JpME/jxrvlEupaca16OrVByQrjq03seZiPfHhonAGira69FJD9f9hk/k+6UvCwxibEj HwZXmSCviiP5mdTX70leX8kmPvEwJtvPFI9+8IK+GJ4tMnXDEspP9tMjWbtibPLr1xKdJn0WxBuE SePDyR7IpwnhXbFtm/FWyDArZYr+apCfSTSYSAcl65A3DuXAfVzJkZGWqNwacQuRuhY/qCNK5dW3 ENN2Vfj4EQ8WFXxvUQGPFd3H4jfJoyrBUdyzlfdZ9Lsf18v200Z/d0Wc8fvZjcLmFciuIj7Kq29R Cb34kaz/irqVeb5fsda5KrKrrv6b/yaeK1ojbF5N2VlU4Ad+hmdLFPpqwd1THps/mv2kL62KPlv8 RH9XZIM/8hu/2odVVR7mv7j/ytOvyn7+kexE5VZVu6pMv/yOPqxGXeaEneEKGFtm7fuv0gnLSvqp H8X7n9Hp34V/LKsQC6vqd3+Xj7aspN79bF9X5vksqiGL6mBScWfkMxj6En62/AKQz5SbbFDKpGwy QA9TveTQpKcGPgYbwc/fCFEJv2onvIT+P1NRgSmiSCcCAwywfagsbPuq4XW4CbIKJbKRkIQEKS3O GD4XVNHESRYzzuojONAI/iHMPhuJbCT0L6BiMyTHGCHAzwh3diqjaSN57H1mjLRsCZaQ0L+BGIDf hSjx7wLymVN2piDp7Z/wcPkDBlp/QE3nDzS2/QNWROOOq/GY1pHQv5Z0UZCgiiXt/4CN9R/QV/oD 2kZ/oF0/GXxKl8hHQhIqsRNAC9dW/onGdciPqv0BI/pra/MHmnWTwoNIiYwk9O+wgZOLa8Da6g9Y 6P8BBeU/0NC+Bo6+1JRgCQn9w4nRcebkogf4FeUXgXymxKAgexiCAl0REuaO8FB3+Pu1hb+/OyJT POn3DhL6l1NxgSfigtvCj3QimHQkLMSddKU9cookspGQhPjkibS4dvAPJD8aTjYSSDZDvjQwtB0y 8yXykdC/wwZSYskG/Envg1k7CAxoh+QsCZaQ0D+ZPIjaEe3Dz67F/w0gX1IkRVIkRVIkRVIkRVIk RVL+DkUC8iVFUiRFUiRFUiRFUiRFUv5h5ReC/EKiU0RriDZLSEISkpCEJCQhCUmo2rSBaDtRiASt Skq1yi8E+SfAvobYEOzxPxKSkIQkJCEJSUhCEqo+aYM9pjxXglglpcrlF4H8r0SOYHe9V1WBRY/E MqvCtVWt/0+mEjn+jrb/P8pZohsSkpCEJCSh/+/EvMmWeQPvQaJiCWqVlCqVXwDyC4iWEDHHZFb1 RQVm+HZXAz17cljqxcGoyVoIzqrEyw3SDLFhjhIWXTTEr32Z0v9HskDCB21Mm6iK22JfC/4zL6Yw xb09Khi6SguRef8f5My+qe75DhVMmq2F7wX/dt2QkIQk9P/iPSKFRLy3eRYWmKGAR4VF5qj45UXm KC7k1S0uv24Rr04B770kxdQuew9zkTefCrddKFRH4k//unPT3Yii/lLAWFxYSPrIJhpFhQWkFzwq FJN8FBehkOoXsxfy6xYU/vJUpYSXIkiKaPkFID+AqCGRcbWU9/tbHaxYpoqVq9UwsacMVPWU8Dih EkAuRhdOav+ByVSdv8DxWMDvvCq6zNCAX9bfwQFYIOi0ImT/UxPL75uUK4+vF9XRpa8GAnIr3y4z grCmQw380VABPpn/eznn+mtj+GglHPpS2eSFTUx2t6uBGhqKeJcrCUr/n5JVJOljfE9lbLlp/Mvt OoT0f3RfNbxLk+iEhP5mep9hiO0z5GBvK4WGVtJo0lQaTk4sObbnYPZmbfglmUH0LaAZofrYtUgJ HZ2l0ayZNFp6KGDRTl1EZvPrJL3Tgge1a+/I1JFBU/pr1UgKNg7ScKZrnOheNlaymLrLgMAX/82o Cb56WDmWg2ZOMlzqNEAZc6cpwmOgOr79LeLev4mYvtcnOvcXwsUkXJ7VG03tbNC4kTXpkxPphRPp qBOcW3XC2EUH8OZ7RmntxLdH4N3OAdZWjdHYrgmcmrF1nZyc0b7/NBy49QlZP4nKc6PeYNvcEXB3 dSTdbgq3PmMxb/JQdBkwATe+SyA/U34ByGeUzhBll90wxLyytzb4r2Qv79XE7PcRN9TIwSnjcXxF b7Vjrq/DBZ+Hlqhg7VVDVO51w4J8iP5e8ptFJeqbc78PPaaI2n3UEFpaT7CN6hixJYRfXS/YlmWF vHDlEa6LedPVcD+oPDBsicBTqqhtr4aISvFswZOzBXxOqGPKOm3E5P1IzrXFyFLcPSzK0Q0xzxam hVbt5LHVv4SfivqlpI4l/E6pY+ZyHUQVWlRS7uXJwrKCZ/qZ/javoC2LH/R5VXgozwYFry2vjyqS dWVkV1Fdca/+pu8L9NGxMQeLrppUor+rZl/RpP/t7JXgI9RuRXxbiOH5VwXt36l3lbGt38GzeQW+ 0+InbaY8ff1Ru5XpQ4tq8mz563xBrgn83+li9TAZaDgpYNs5Hdy8oYMbN3VwZr86BrYmIN5LFW+S +bylftTGICcpOPVQwrZjOrh9WwfHd6jC21EGHUZqIDiblc93iqsNDGWw+LAO7tzWxaX9KnA1qYEu S7Vw744ubl7SRC9KEtxn6aGIpy9pn5i2ZdB+uCqOXtLFbeJl7xplOJn+CZk6yvjwUyBfnP+3rMC+ KtOHldW7itr60X0sfkL/LSuwR4tyfKPg9SUgfzxR/l8EF3MQ7vMYe6b0QkODllhy7Dru3LyOGzdu 4NLJXZjU2RXWrqNxIySTrR0fiEcXN6OjYx3Yjd6Im3du4vr1G7hx7Tx2Lh2FJo0cMXTnU2RXk5u8 hJeY3KU1mvWZjj2nLpH+X8GRrUvQtbYmatRth5PBhf9yeM+WXwDymaU6xhAG+eySCf+n2lgzSxnT pilj7nIN3H1rgLuXtXD8pZFYQw65Ss6oQpBvhuAX2tz2pk1XwZKV6jjnY1yxMykwwdMzGphH10wl WrpLG9/i+CMixRlGuLBZBTNmqWD5WX2k55vC9742ls1l+V5zVA+xOQLtFZni0XkNDHCXgnpdGQyY wNZjSQXrbxiSCVbV2Vsg5o02lsxWweZjenhxXwsLqa1dVwyoLTME0GeG/7Un9JBYIPxsDw6pce89 Y44K1mzWhm8Z2bEj268Oq2NQO2mo68pg0CRhnnefNiRDEwZ4uZH6WL2Efp+qjHlL1LD9hj6SC8rn P/O7AY5vVGXbnK+GE/cNkZZujDtbVDB7phouP+ePzKZEGuLWKQ3MmcH2yewl6rjxwVhgFImlqPc6 mDJQDkYmNdGinxKmThXge6cOwrOFecghHnZP5+nbYlXsPKWPlOKKAg3dw0cX21eqsG3OVMWh6wZI yuf/HvNKBysYHumZ7gSYID/ZCJd2qWEGfTd9Dj3Xu7J8V7bPizONcXk7K7OZ1H+bbxpSkKW28k3w nHSM+X7ZHuFROa6sqW8Or+HxPFsVB28aIENs4CB7eaaNVXNLdF8HAammiH6pg7VzVTB9MfH/Uh+n tqlgJlf3DJBecm2uMa6vY+1i6XFdxIiZ/Yn/oodty1S4OjJtrjouvTASo/vs57ivetixgsfzDDUc vayHm+e0sf+sAbJ4z5Xqq4eNY+RhrlULjh0VBXSUkb82/JLNqgGkWDl8uqqBYaT/JrpS8B7HyqOk 7a2X9JFRXJbvnDhDXNyjjjk8O1m5Twd+cdXhoSw/4QTotq/m2QvZx1Hqw6Qii9K2I0n3p9Nvc+ap 4/E3U+SS3p0nvWNkPX22Oq6/F6d3bNt+D7WwZBb7jAtWa+JpkOkv4Tnygy62lfThLDUcvmGA5Hxz oeQ06Ysu1jC+czrr8++HsvfOijDAoQ30vDNUcfKpMQorzQ/VKzbFixNqXFlcfqiPywfJ/kgG95il ifnGuLpTFdOp3fNvjIVGorkj3ZEGOLtbnStLpg83HCAbSDET4jnZTxfzZ7M8z5uvgeeBplyAlR1l gCNrWZ6PPzJCgVDb5McCeTo9lfUFp58YIvcn5fxxnyIaDFJHYKEFBAedimL1MKqVDLyX6pKvJiCY aYh5nWXgOkIT3/MthBL47BBdDHaRwcAN+iRnS0RdV0dTW0U8SebVo7ZGuEhjwVNTHqg0xpqhcmhf AvILTXBwBgeth2shpRTMsu2/368IM3tlvEz9CV3KNsb9oyV2pYwlO7Xx+JEu9h7TxqvosvGrONUI V/arlcarrSf1ECmSZMS9oQRpGq8PV2riZSTbx2lh+ji0WoWrH+deG6MoxxjnlzKfVTBvHhOb1PHQ n+3v3O/62LKC9HY+8z35ZMIKwZl8XcqONsCxdTybnaWKfdfIXxZbCOiSGYIeaGIuExuo/flbCWuk sfzFftTDhkWM7Wrgnr+pkP4hwxg39qljFk8ey/dp4+lDHew6rgOfBEF5MDHUFsyLR//KEnlhDbwc R+FJmsgP2cFY26sVnIcfQUIJvi7wx/wB7uh16EuZdoIuLYBto544+iFZ6PvchG+4sm896cc0ksd0 LN9zCb4xWSJX5+PFpuFw7rcafjnCv8RcmQN7m1Y4GCgB+b8A5DPr8Zm3dBmUAdbnFirA1kYGnt0V MHqMIkYMVUAXFyloKPwXTVfrQVw2G3zlRyDfnACvBoYPU8SokRzYalJb5PSKyxnByQvXwyICic3c 5TFwiCLGjOKgY0sZOLdTxi3e2vXiFCMcX6VESlsTUg1k0WcwB229OBgyku7RXw51LKXRd5UO0koc bqEpHpxURadmtaBiLo1ugxheFLk8DRmqiMWnDZBXDecX+UwTvWz+xB/SNdF+sBJGD5SHq7UshoxS wqA+1P5geTSuLY1ZZw34siMweG2zMoYNV8Sw7rJQl5PGlqfiluuY4sleVXRzJp61iGeSxagR1CZd N2SwItYd1hcBiQTyQ/SwYKoiRo5VRMfGf0LNXRk+GeWAipvq8GoqjZbtORg8mtqlvu7kIQv3rrKo r/QH6rZVwnkuyLdEygdtDLOXgn0rOfRh+oR0w9tTBpYN5LDyuqEQ75GvtTC8mwz09GvCsTMHY8ew PA+j9oev0kZIprAMs8P1sYb6YsQoRW5/Klup4FNuOYGmyBhnlyuSM5BB+x4cjKRrRgzkwI2Co9sA NbyN4y0nI5A8d4g8GnJqoAk930AvOXTyVsAo4qV7S2lY2HNw+L1JtUBUUboRTlBQGT5SAc3r/AmD sVqIitLH2hEK6NFLAcPovvVqy2LqEUPScXZUx/eSGjq7yaBtF+KZkQfpSXMrSjYXaCO2QDixu7Fe Gc62sujaj5VzD085tKNn9XapCU0jKfSarIrTd3VxZLUiWjeqAW1nZmaKl/zmEKhcoYTOtjWg6EwA IclCqO07u5XRopkcOvdmZTGguxwcm8hi4n59HmjnP2fQLXV0IP1oTXY1jPRj2CAF9PKkhFP+v6jf XgPxvPpJX3WxpK8cDNVrwro17/m4/U38T9KAT2L1p7o/nFNHz+ZS0NeshY4DGF/Atj2UdHAZJdap RcLX+F9VR0dHKTR152Ao2coY6qNu7jKwb87BnmfV62/wErjTixRg35B8I+nRcHrGof3J5zSjPh2q jg+8Z4x4qYXxgyjBVa4JOzcOuneSRzeS9Qiq3625NGrbcXD6iwhYIH3aM1EBLV1k0WMA2+d9vGTR 2FkBOx4YV5/nQmOcXqLI9ecePam/GVsZQLbiLIM2g9TwPp4PfGPfaGP+BHqmnuSPDKQw4YYRAgn4 DPXkoD/5soHtyWaclfEg0rzy/BDIf7hVEbUV/4CCuSyGTVCCtzv5l9byGDFSifRJEb3bSqNBC0Xc COcD+M8X1dDeRhquZLeDiOdR1N9MHzq4KeLYK34fJvpoY/I48nV9ZaFaUxpzTxnC754WRveUR9+h SujvIYNGjoq4H8n3ec/3qcLTSRYderH6P6y3POztZDF8A+nSTwD9NzsVUb+/Gr5mle2HTzsU4eip hI/ZFogiP9DMVgEXIyzEyvHjPrL95kp4Sz479aEG2jkp4XEc205+uC6GNpPGHO7STvIr+UZYP04e XZbpsZ/TDDChF8XCE0YQHelO/EyJ3h5dhOdWE+AnG2L9SDnYke/oO5i1w359OHCtTbFPVxYb3gkn pLGvtDGirSzadCDfS3Y4muJzG7KVloM08DGJr0ORz7Uxm4lnpHeGilJY/cAIATc10Iv6cOAIJfRp JYUGXsp4FGSEc8uU6XMt1JL+E449VHDnGwvyc0L1sHKcHHT/+x8YO8tj/DotBKSz8vW/qobubYgP ikOMDY4YRDxby6DvHPLZeRaleuF7RR0Tycf1bycFqfryOPjFCE8OqcLbgzAFxdJOTaRh562BUN41 BTH6WDyA5OEij/5DWXn07c3hzpj8YSqHQ36CCSljw3WJPv6loDH49Ap0cBiOe/Flf4u5txHN6g/E lbA89ovMz5jdtw26731ftnJxCFZ2dEK3DQ9K19IH3dyGTk3t4NimK4YOH0XyGITu7VvAwaUXdjwO F7g4Fjs7t8GAVXfLNJsZ9hT7dxzCh3gJyP8FID+OqIkAyGdHXW6vVYRDEw6OvDBGRsnGxwIzRL/T Ro8mtdBsVfVBPh9omGBPH2l4rtQRMyrEjEQaYcsIefScpoHPCfxsvJAC4bEpCvAcrI4vGfzREt9j SjDTrgXvhVr4EGlK6QsTXMzwdKMSHByU8CJZGAT77FNEw76q+CjqjIurD0Qeb+LA2E4RV4PZU2FO jpOBhikbzIvp9xNT5GDVV4OkLuZ5Q3XQyUoe2x+XH8zfH1RBw6aq+JJXxdGlTQpo1lUZ79LL3jfz izb6uVEyslkXsbxRCxBgSgzUw7S2NfGHlhRWvOA77vTvhnhwVQ8B8SXOi4JIHvXlcBk06KOOiAKR ZOOTJtp4yGPD26qNRn4+oQSrNqrwySpP1opoYMPBlluGSMnh911CiD4WUnLSepgGQnJL9MMIKwgg 6pHTZkZ949JZ3gpT9TGBwIbnLF3k/9RSDjPcXM5B7ZZy6EcBYvxaHYQmmnG/D3ilh2e+LCCJfaWF fm3lseScAdIK+ME98ZMOxrWRw5SjBqW28OW0CqztCNzdM0I2b1QwN8UYV9cpwkjmDxiO0UQCMwrF G8F+sl0R1l7qCCkWln/gQSW4eCjiURLfVgIuqKJFB0XsvG+MHPD5CLpLwJgA1do7JSOqRFkGmNpa DoOW6yKrkF83NdYAc7xkUK8dH+Rzf4vXRScCsPPPGOFXr8n3O6QCj6ZKeJpa8bKzxNcaaN9YGsNX Uz8kmZVuOMxOMsbFVQpo3FwRl75VdUSf9Y23ViqgoaM8dt4xRKqA3sUH6GF6RwIR1C/fS+SUbYhJ HaSh0piDndcMkJDB17up7lLouEmvtE+YGcYryxTRroMqd8leqfzzTfFgtwpatFbG3e9m1dLNB+sJ eNpysF2U5yB9zO8sC7eRGgjjLeUrLtn4GaeHkcS7EyUm/SaoYM8NQ6QxI85pRnh0Xw8hqWZVk12m AclHGo7DNBFLILcoVhcD69dA4z4aiMhiP/dtLoMRhwy5PiX6gQZaUx+O3K6L6GT+vTITjXFyvgJs XZRwM0Jk9jlZD30oQXLxJNDeVwUHmOel5yrKMMLTu3oITWHrhZGeezmRbd0k2xIYyY18roWuBNZW XDZiZ+R+MchPf60O53YKOOdngkuLFOHaUxPJ5Q1wfdNGF3c5rH5GupBrhrhoE+QWigP5Ftw4l5Zk grg0nk7nG2PjEFk06q4O3+QfLTWpWiz5fEwZ9T2VcT/KrFR3i7LM4EPfmzWWxZrXpqVxoTBaD5MJ HI9ZoYNogRH1zCh9LKCkynuWNm/2S6APY/Uwpj7hgh4KGDtWGXsJ7KeT3hUkGuHxQ32EpbLPUxxF +uIuj7nnjIQS5YTnGmjjoIiLpbNf9N17LQykugtOGSA1n+8Hk7/qYBIlIBP26/NneXj6n/6W4paL NNyHUKI9RQ3X3hsjl3QlO9IQdx8alM7IP9+liHpdSpZh8YB/himekx7o2chj71dBP8NLynD1bwvy 88NuYJhjK6x8HPdjkI9sXFnaE/ajjlBiDGT4HIWXtRMGLzuH4MTM0s25OckRFLeGorHzUJz5nFoC 5XFthhfqu03Cw/A08Rt5JQcR/QqQHwb26Ew+yGccyKCWMhh/2kjEKbAjgOfWK2PmaYNfAvL3VQDy Y++rwb6VIk59IueWY4aMdFOkE2VSkMrx14anKwdr7hjzQf5hJTTopoJ3mRZCPEdeVkNHG0XcjBFx VgcU0YhA/qfsX7ex5sFmBdh1pyDGA4zMZ+uuGogp+Uxg27qLBr6LA/nhPwb5Hw6roJGTKr7mV9Ex bxEH8lnQcmkBBZtu6sSTaF9bIuaGGszMpLD0hYnIb+wUcF6mKdLSzbhTyqGXVWDVSgVv0kWC1WdN tPWUx8Z3VQP5X0+WB/ItUBxHDt5OFpMOGorRUUvkfNEkgCCPLY+Meb8TyG8hixGb9QXqszq4cQgH rUfoiCx3qnrf310iB1VjGSw8b8gLGCJUZIKDszhwGqmF2FxzZGey+pxOASGHgvjT3Uqw9lSHPwMQ C4ywqoMMuq7Q5a2xFVjXXGiMJV61YDpYAwkCAJ0JKuJAfjDZRXNBkJ9niHkechi4TJcAkDmyMkr4 MEMegYMjoznwHqGJuGLemtIMA4xykUG7yVoIJ8DMnh7CgobvT3Swdo8+uWsB+SfqorM9gfyzvx7k B5D+ezop4VlaRWvwTXF8mByaj9Dg2aHIPolCIyzzkEGflbq8BKfydlRANtrdVRbjjonXu3RKLlq4 yGEj116or3INMIaSugFry+rdjnFycF2mywOTBB78dDC4uSwWE/DMzyN/x+uXjEwz5CYaYL63DAYc NaxyYlIUowtvG1lMPSqe5+yPmmjZiPzOUxEbT9LHWOcaMGivgsehZuCPCFugWkuuCORP7iaHwdsY PuoQPqDPXUkPtxnwPhtyPw/i/m6KHaPk4DhaC2llgKklN/Gc0YXsY6Oe8BIcSp76ONeCITPTECKO Z3ZWY3tvWXRboo2UXGH9z80zxfVF8nCZrMFbQvMrQb4lAXcGOCpg32MDbJ0sD885euXOYjMJy9B2 chh7oGwcLgPyITqrYoG4N1ro4VALJk1kMXKKClZv1sC+Izp4HWTyU3b5YZ8iTO0UcJJAb1ZpHKL+ KzLCgX2auBvGB7WvNyiiVRcVvIgl2Wbz5EyUTXIPu6aK1l0UcCZEJFFL1MMQnRpo0E4Fz7+Xp3fs qPuteRy0H01JYunggylOk1zbz9Tm6w3FuBPzOdzkMkqM3319gOJMOzV8EVk6mvVRC24Wf8J+tGbp bEBZOZvj0XoFGDdVxLVvJsgpEJBHliF27tXC82hxIP/i3xbkF8U/xLjmjTDhalglQH4h7m8aCpvO u5FIEfTSuA5wGbwFUeLAeVEYVnVsiR6LriCL93tWyD2Mb2MDs4bN0X/MDKxYvwU795zCo48RkIzh /0aQH3tfA13tOLj0XbyR55Nh5OeJd+RVHsnvLQ7ks/9+uUYBeho1YO0kg+bOMtxTBbhE/27pLAX1 WrUwnnuaAGvMnw8qoWFvFXxIF75X6HkC+XaKuB0rfH/uSH4fApEZvw7k39uoANuuJSCegN8GBdh0 43++Qw7Blj5HigH5xSE68PoByH/HG8n/nFO1AOuzqRyQT2By2SA5dFioB3GblAoCtdHTThoLnpgI BElTPD2pjuE95dCK+sKJWabQQR4ezaVg7CI6M2LBBRHMSP76N1UD+Z+OlwfyCUy90UATR0Wc9jMT m2wyAWcxA8a28cBVsRGWE8gfu11fxFkbY+0gDtqM/nmQf4XAgc04ZmSunI2BOYaY37wmlClpcnUV 0Gci5+YycKhfExp6Crgdzwb4vjZyWHvTCBBjGw9my8FlmDrveNGKR/IDhEbyLVFEQLVj4xrQrS2N 5i3o3gJ8uFJyb2XwJww6qOCjwNKu4LsaBG6lUc+WwD4lCB06y2PgUEVMW6EF3ySR54xjR/Lnnf71 IP/bQXYk/0lyBSA/j8AjAe1p+wzKvf+TtRw0HqqOsIKqAeb4u2po5cbByXBz8XpHwHWEmzwGb9Rn QT59Ht1GHkM3iOhdsTG2jJFDyxV8kB95Sw31ZP5EPQcZtGgurB/NnaVhovcnrMdqVzkxSXupDnuy lXMB5dhKoSEWOstiwi4RHqP1MLCjHMZd+RWnJDFLkQwwiUD8gE0GrGyYz10I5G/lf55In4fuIpBf bIDp7tIYdclIPM8E5s4uVCRwoSk8i0QAsYcjB1OPlZcM0XcJeuhduyYMakuhuYicXcgu7er8CVl7 Zbyu5pr1ikB+xlsNri2e+WyEgzM5aFFufzLyp+SsgxxmXDYu4wPEg3xRGVHfM3sOlitj2EAOOnnK oTXZu729LKbt1uMtX616PxYkGmLbaHlYNST/4SYHT9KR7n0VMHKcCo48NirVZya+7x4sC3X1WnB0 EY7hjL9zsa0JGU0ZrLgnnKgURepiZENZrLz7I72zRNYXLbR3VsDht+xyHSYJ7+zMwdbH/ME/5Bti aeuaUCK/29xV2N8xfDRpWBPqWhxcDTcTsRvqK3cO9nytaMbPAjkxBlhNMbRRI2m0bMvKo0c/BYya qIozr0T3G5aA/Et/W5CfH3YTIx1dsaJSI/k5uLKiN+zGnkFecSDmtuqIidtfl3vflxt7o9HA1QjM E7hfzEec2LQQ4wb3QedOnmjVzAV2Vq4YsOQcovIkAP8XgPyIMiA/5bUmutvLYa+vWYUO5PeBfJae LidH4qmIQ1d0ceWKjhBdpu/uP9ZHaBx/So4L8r1V8C6tciD/w14C+f1U8SnzN4P8rr8O5L89QCCf GcnPE78Jtcogv9gEhyZz4NxHEyllwKklkh+qo7GFFBbzRvmKC01wdY0y2rfiYOY6TZy/zPbH+dOa mDdABmYuKiKgnEC+jybcyh3Jt6gWyM/+pAlnOwUcfG9aLnCZ3awE6FlyQT8D8sds1RfZ2PcLQf5i edhO1ERieTaTYYDZ7lJoN08T16+V1elrN3Xx4p0hUphlE2n6GOsgi0UXxYF8M1ydLAsHAqmRAstn Hm9jQA8BV5FRz7BjygIj+ZakZ9rwcJLFiNVauC5iW5epP2/c1cPTb8bILOAv3SosNENCqAFuX9HG od3qWLNWDUvnKaFLU2m06qWGz+nCIN+LQP6Cs0ZV6u/KkO8B3kh+agUgn/p+fms5jNqiX+797y+V R9OxGogurBpgTn6mjtat5LHvWzmAOUMfg93p3nsMhED+kPU/Avnkp8h3Nqsth/Vny+oGQ3fu6eNz gAm7DLHSREDogwacbBVw5FM5PBcYYoYTgclDBmVBfmc5jL/yK5K1CkD+FhGQv5MB+YbcpWD9jhiW C/JPzlOAQz9mY2lZkD/zaAUgP5YS6EYyGLWS9P+qiKxJ/6/f0sPzt0ZIL/iVIJ+106+7lNDUS5k7 e/x5jzKcXJXxPlv8STOxt9XQ0pWDU6FlN7L+CORnxRnDl3SlSOCEl4I8M6QnGuMJ2VDr+hwc96ne Zm7mzP3cDBN8fKaLc8c1sWU9+YOVqphMQLeetTxWXTfiDbyZYGtfSix6quLCdb2yOn1dF48eGSI6 RRhcMyB/FLPs557xD+MaF0MMkEO3Zbrcz283KnL3Y/lnC+hEtiEWeUih7WwN3CjH7z57a4ikHPMy IL+5J4H8Hxz9XFhojpw0Y7x/rIuzRzSxmeSxeoUqxtOz17blYMdjwc3kf/+R/NgHW+HSaDCuheVX AuSHY21nJ3Td+oJs9juWt/PA0LWPyl1l82SlN5qM2EJxi8JKWjR8/cORJfB7YUEeMlOj8enKejRv 0hlzL4ZIEP7Pg/wMHsjX5xtFmgHmdJeFx3wdCiiix1JaIDXaEO/8TMSAfkt8v6mOhtbKeJFacTLA tmWKA32l0XGtLsquFbRA1F1VNHFTxN0k5re64B9PVQclR0MyLwcp5jlF/6NKaNRHBZ9zRNq5oo5O 9op4ILImnwH5dTur4nOehcgzmiM3y6yKwZQP8tnlOjxQTyDflj7H8D7fJpBv10NTYE2+wH3JuXUm J7n7hQnKWzv5/oAy6tir4GthWZ6zs4nnInOx/fJ1mwJculNwybWE6LRn1AN1uDWWwazTBsgUWLuZ Fq6PKa1q4A/1kjX5lsj4pIUe5IDXcz/XESBTHJ8mBxNHFfiKrMnP+aiJVi3lsO6tGUSPYS3KMeOt MxXl2QLfTivB2p0SmgKLMjwzgHlmKxl4zdVBjtAyCDaoRVxRgU0jDo75mPK+M8bqVrIYv9MAwtO/ Jtg4lAP3cbrcJUfVBjD09+YyAvmTBZcXiIDzQmMcmCaPFlN0ePpcR0Sna7PBuJidYj49noB8X3VE FQu2R3WidNGz4Z/QHqKBeIHTXJ4QyK/rporg0vvX5urcxamyMG6nhLdZvIBPQW8mJV1DuSOognZV wocl9zr2BT6WyA/URndKEg77mvPq84+ITSPdcW0ki0NB/PW5zJr8jpSszj5jXKa/i/PNkJVXfbDo d1AZLSlhf5JhWUb/czKZFwmxdnZvCQcN21LCnyp4aglPJgl6GNxEBqN3CazDrWQ/FydT8tWW9G6B DvLE+MaA06R3TTk46sc79YQA9Dh3eQzfXFbvdownALRGr/TazG/aGEBge8Mbs3L7pbjADNUB19Na yKDLQl0xPFMSeEkF1o0VcPKzqfBviZSwEOieeMNYRIbVB/kTu5Ys1+GD+iE7+J8n0Ofhewy511yY z0F9sn/ffEuR+7OzUX2cZDCidMSex3O6PnqR/GedMCqHZ9YON3eTQe+1euXImbXDoqLqPedHiisN BqohQMhv1eYONCzwlIXXVG0CNrVRHKGLIS3pGbiz0SLHQxYYYQ2BRPdRvH03IgkAYvQwwlka85+Y QtxxlG8OqqBJWzWECB1zyzu6Oov0v44sVt2u6gwNm1xdnESgermOgOxKYoYJ5nvIotMsHeTyeGJm 41t1VUVYaZwoK+fCAhFcEK+HsRRj1j00qYTeWSDilhpcW5OtB+tjZjd5TN4nkqwWm+DYbHk0H6/9 A78rzEfOO0206MDBfj8zlH9spgmODJdFn616YuRhhAnNZdF/teCSspJjhe+jOCcZQUFhSM753y88 /86crtNkFB6niv6SisNjO6Kx904uEOeWfH/M6++Ongc/l2kn7dV2uNT2xM4XiQxEx9NVfdCo9WS8 ShJz0+SnGN7UBUO3POcmAQn316B594m4ES+OwwCM9fREnw1vJQj/50E+sye6J4Q23jKjSrc1KFBL o/8iLTz/aoy4BBNEBxvi0jYVuLsw6wT5I6I5qSaIjTFBXDxzzKMKLOsp4SJdEx9H38ebIEtwRIRA eVK8MWKofny8IWWBUmjN7G6PM+W2EZ9sylvzy2TgRtg+RA7O7ZVw4q4BwrnXmCAiwABXDqtjRA8F bLljyAXjGSmmuE8Au7aXEm4GmiA9iw2G2ekmeLNXBW4NOTj5yQQZOfxNePFP1NHEVAZTDughPNYU 8TFGeHtXGzNHKmDsfG0CV1V/+y/DQwN3NXxK54F+Avn13UtGOukzgfwG7ZjPLB9FWXTfWJITPX/M ay20qSeHFRcNuM/JyCgl20zgTYbE8zMNNDWXxtj9DM8mSIhleV4yhoPBK7S5aw5LeMmgfomJpjpJ Jri3VB527RVxJ8gUCXEkf+qrnHy+4763RQkO9aXQtrcSlq5Sw4JpimjfXAaNbaVgXkcay5/zjigL 08XwJtLoulAb/pEm3LZeXNXCismKcLWpCU0bZdwNM0Fmjlkpz0VJ+hjtIo0WwzXwiX5LoGcLfK+H 7QuV0LePKp4I7JXISubpEunbg+0KqNdcGfdC6XMcK6McgYQg9J46WjrIoPsMDTz+RPpG18SGG+L6 flW0bSCNoRt0uadk5OeYIjGSAoCjDAYs00FMEq8d0sXUOAPM6yEP5/6aCEs2Q14VAzvzlsrUBIY/ YxymJKfBUHX4Ep9xTJ8SpeUKj1LFv9WCt700+s3RxJMvZFcki7hYY/i+1MWW+UroN1wVz3kbmlP9 tOFNNth+rAZeUlKdSPf5eFcLkwmgaMn/B3UmaPJAPtt+1D011NeXxkSyzUjq3yg/Axxerggb/f9A qaUibvibIpOnH8FXVeHalJKeLdp4H8DjI4p06YE2Vk9SQP95mgjI4IF8fy20sqyBxh2UceqOAUJJ p5ISTRDyQQ+rB8uj4yB1BGQKAJAcIyzpLAOr7qp4Rm0zfId81cfxVcroO4ja4ILJ6gGolDeacLOU wgDq25BYVpd9Hupg2WQF9Jymhe95vH0gUfqY3k4WzcgfHL1viMg4Vlff39bCmA7SlDypwSehqjML bN2Aq2r/196VQDV5ZeEWFUjYQVCWkIRg1GqVPYAbVWgVtVXcta7V2o6d0bZnnE51bMcuR0ed6ji2 Y21HnbbHmba2tafYcamVsAQSUFREQFAJCgSCuICy6Tf3/f8PCRAXIradmfzn3CPPvLzcd/f7lvtj HPFwzu99kHqKt40V56VI3u6JkSH8vQ92R6GZdLfmvD/mk72cSUmBoTaYq9p1uzEYtSR3b80XI/a1 vtyl0sZmPrFL/pMbQqNcsGlvAIrKeHtXfkGKo1/1wYrFrvjtloAuHtcR+H2QkjHSlRmv8zhzukLj Jn/khYTHRXh+i+n4RhPZJCOzP7m+mD5WjEW7JTAaFZwtMZDuNN6yPsh/OUmMyZRs1Al3PV6ZLEbS 2oC29gpqT32bb98o8ccriY4YOd0Te38kHhJOVaQr2gN9sOhJMUbM9UahsIPUcoNkgWS+Kt8XE8Oc sIyCLoOR+RQ5Kunfpg4LCaVHfRAfxu9m6QoF+ae+J1L8sOl1N8wmnSu41sU5ki2oI5u7f50LlFPZ PQaef2zcvAw//HGeGEPi3bDP7NhU/udE/yGOeGGjL3KKeR1ntnHDQidEx7lhf0n73ZdmsmU1zAeS HZkd6YDlX0o5XtVcD273xtuc3e4QuTng2VU+OKyVkX8N4vxxMenshiXOiJ3ohePV1ixmKPDFAkd4 ykR4eYsfsol21WQLqi7K8MMnXoinBGvzAdNRmeZyCZYnijFmgRf2ZxIelQIeuRLs2eqJGXM8sDeH 341gdprZzUvHfTFvoAirPw/kfAUXKxgVd1h0419Ctn42JUQTnTB+mgcOVXa+n8CqL82lxH4W+YoU kv9Kwe6e0QZgG/NDiz2RWsnb6ptXyVYQH4qSeyN6jDM2HJVxfGHyb7xqjgcf5H+UZA+PAWKs2u6H 3BKBHnopvid7EBfrio/TzJMp9vcQSuIy8M26+ZBK+2H8u9/hcvNPFS62oP5aDbK2v4b4kGfxxWkD zc1A/quCZOMItq6cTQn/NOzQXOJ737wO47kf8VLSSEzYdIj4UE19DagoLcAP/9qEpJhwTFj1OSqE Rf/mSi1WTYzHsAkvYfehHJQZqsjuliH38GdY/kwMoma9g2wDP9nKw+sxVCrFmEXr8G1aLvTlBtIX A0rzNfh49TxETFiGr89et0X46JY6+VvBsk6mwObOrJgC/YWTxIgOceDe3hcRK8Lop1zw+mY/FBuD 25T+6HZ3REU6IjrGEUP79YS9Qw8MCKO2imC4Ow6Y3XK/VSXBH8aKEEn9Y2IcIHV/FC7+9oiiwJGN MXmdHy63mLLwZkoE/rbSFfE0dgT7DvVTUXDCzgQvW03Bz3kybrWB2LhYjMdkPWDv3gMDVU5YtY+f z3erXBAW1BMuhFO/ECds/k5qqprQFISDFNyOUTkghJx2TJQIT453wrQlHtiZLEW9FYFI+jYXOLj0 wrw3+Et9We9T25lvs/rLmcLn89/kV6DLydnEEW25+Q+1h6uDHXdWNJqV6Yp0wtaDHbbKm4Nw5EMy HhR8hxLOsWS4xiY6Y+Zid3x4UIq6Wybj8yXRLSaC5jXMEYMC7SBy7YFB4dSm+UbOIydUbr5yHoyS DF+sfZUc3DRnzKHxtv6TAo0Tvlj6hCPeVJu2hYt+6IOZFLQPDWVjiZA4yRXvfOSPw596QO7TE/2j KUjpUO7v3JE+WPikIwaGOHJva4yLF+OZmW5446/+0NeZHEjyu65tsjRY3oNo1xODI3hZikr0Qlq5 2YoxC16O9sHSKU6cXLDvsHKawxNcsHq7P4wt/GpS8bfemBJhD1+xHbwC7DF6rheyjEpuRXzJU47w 97CDk1cvqCb3hq66KxVXSJ5rpdhEsqeKpmTI1w4OrHQk4aoi3kTFuODT7M7b6RfUffDSVF6vVDF8 37h4VsrSDe9+EoDyetP4F7N8sYx0MJRoEBtLPFeJ8cI73tj0vAhPLPPGRfNdk8YgJG90RwQla2E0 bvhwMRb+wQsfrHVBCOlF/3BnbEuRt/H7+N7emDVeBFWEgEeECAnjnDF9gTs+SA7ElRZTkD+W+gyb 4MLJRlwkz8PBxP9xcz1x2MJxgupcPyybIsLjjznw/B7jhEmTKUjd2Benq62pENN6dEiBtN1eSAwX dJZs0pjxJP+E83uUHF+9ZbaDVCbB+l+7YBT1iVUJcj9MjPkrvZFTae3RIf47Z8k2LqagInYYs0ek q2Tv2PndNZR81wiLA4Xf98ZIkjsvJzt4ko0bPak3VzqxudgPL0xyQICXHcS+vRC9lOSxqjVBkuOb P3sgkfRrCNNVZveGk45PdMH83/TGt1q5FTuMgj0nvV2S1FlX1uwgnM1srv6ID2aQzkeG9IKHqx16 93Pg5hlJMpj0Kx8U3bCSbnVSrJ7SC65+YuzSBnEXoNewtr8Tdgvt1Ul8e2cGv4pbd16Ctxc7YxTR IDya2WiCEcRDSpLNK66Vp/kgYRTNK9QebiI79JHbc3yJokB41ApvnLnWGefT+32wYLwY4czeML9C tjSOyf88D/zlS4nwro2uJDFSbKNEf4CkB3p59MTjEby/iiYc2N8JMzzw9ckOJVNJD3O/8sa8p8WI CSM6M5zJpk4iG3XgjKJTsFqt64tFZLMihvaCp/hR9KWEd1iMmAJiabtqQNn/8ICfRIQ5S1wxhRI1 lUrwnTTHCTT2v/OtuXwrFN5Y4ojgSBp7lgvGPiHiZElFuIcNc8YbuzqXcq4t8seaRZRYkI2MiOJp Hc3swVRXrNzki4IqwUck+yApiskd6Yy9Hfz787aDxQqJS/qg9Nad8T31mRt6PGKHaW/5k35Y3pHV p/ti+XSS/1De33J2l+FBdvetXf64WMcvjun+7oEx9LthA3tC7GIH6WBHji9M/pdt8DOrhsT72Z0z HaCgmGQe0SMhjqdHVKgDwkc6Yz0lKu2PgTJ/Ppb8eBH2rHoa9o+QXL+8B9U/WZBvxL7XZiAkyBfO jl7oH6Yi+Ykm+YhEeFgURjy9FDtSzrf1rs7ajemjB8HH3Rlu0kEUS8SQL1YhMjwEodEJWLx2D0o7 vAmr4VIWNi6fTXFNLNncaOJ7ONndeDz76mZoy02dKyjIjwyjJGHmQsyePA6xkSqydypKMoYjYeYK 7EzV26L77gvyDwkBvgIdj000X5PjVGYAUlICoM4M5KprdNweNJYGcp8zSE2XIDtbgnS18J1UKarN z7w3KFCokbT112gDocs0tdnN/6bbHQ1LMC4VBiJNGDNdK8XFy2ZbaI0KnD0uQVoG/baW/k2T4LSQ lVeeDuT+X8dwSpWgpFLRaezyokCo2e+r6Xvng8wqo3Q9CKk3ypCtk+DkmSDKmfvhZg3fPiG0b1j4 PC2Vn1dKKo+nJl1op0hw3uKLsYJRQfRIFXDOJ5wbO+FMfWjuqYxmRwOQphFoI9Aw5bgUxgZLR6jY ufvW9gDSRH88N9wRa1KC2gXXdRUyaNQ8joWXhC3jG0E4lcPoH4izxs6BXL2BviPMVXdKhitN/dDx jYCGsyZZ4vipM8M5U4rLDRYcT30QTucIMkS/XVzZ3jkyXLU0RiaNlUV0yGDn3tlv3wzCMQ39P9FF lyVBaqYMtV09StKkQMkJ/rfTSY6zaRy1gH+KOhCXrljin5KjVV5WQNtcj+XLcb2lHyy+ofG6HLmC DuoKePnMeNMJo9ou3raXDX0+L8/qbCmfMFPwX6Dl5f+cMbgdHg01chzLbMWX5L8kqF1JTW63guhU XCxHDVuZLuNpyek60bH6xp2CZSWaamnsNEGvc2Worrc0P+sC1uoS0msB55OEc4NFnRVsR0Eg0lvp XCQXXvb1oC+WYi9CI7k7xvNeTXJ3rqq93F0neVcTrbJI7rQkZ+kaGa4Sj2+TvOYSPzQkK8z2qXOJ T43t51erlxK/BBuqIZmuUKA7yh9yupJt0pUSQ+fzxjfJRunSmO0mvAnPrFZ7RHPRnZCh/pa1CVow Ks8HQkt+RF/Nl5c1sLbGQrsquN0ChL5AsNFkb06c7Wyjb16W8/QiedDS/DIzTDin5ckE3erMw5Yr chzPNNnfEyTnN25bKR8tCpzLk3S2tQSZJ2VcJSvLMsrrSq6Ac+ZxmSAPnXFoZPhm8LzJ0gUiM52n SUF5+90xVmb07DkFmonm+jOCr2D+9tidx75fqNXLyC8p0ETyn99qd4nuZ/SKO9oCRpvikybbyOjB xwUme1BfSXKXIsyN8dBM7jS5jC932VEluc4jn1Z2NfiuOstsfr7WFG/knG69e2HC40qZlLMXaooj dKS7GsGGMV0+xeKTDn7WeEGGUrZbdI38n07SJktF5ZbowY45rQWrDdl8zYD8E2dQXvtT3i5tQkWe jnxrJsUaWRSnpRC+DNTIyM6H4Xr7mjaNtXroNGnI0upIL9OEvgSpGpwuNd6lwmUjygtziY6sfypy Ci+h4yybrlagsMyA+pYGVJXkIUPAJTUzDxXXm2F7ujXIZ28rm4z2L8TqGPz1v4uT6djnXv37d7G/ JRyU9xjzTt+1Zn5dDQAslO27Z/tO0O8BcO4KXyx9PgANeX0xJUyM9493XlXqPJayC3h3B873S487 fd5dvO8qvl397Y6vkFdCvdoJcS+y+vT974PGygeU/47lQO+XXsp76OyDwMOgs7W6/jDk7mHh/TDs uTV8M28r79J+2DgrH9L8uko3pZX43k2vlQ9JjqwZ+358uLIb6PdzyP/90qM1EUuxRa22p0tPNwT5 7NkFPst8gK10G/x3wi0FftzbF+/t8IXmlAwXSmXQE7BzpL+bJEbcTG+U1CttdPqZoeFKEEovyKG/ JMNnL4oQMcMT6SVBqK236awNbGADG/yywZtgKUG9LWq1PV16uinIryWYS+BvU8b/K1BydxO+eM8D E58SY0SoI8IjHBARwZ8jfea53lCXKWx0+gVAwT4vjGLnygmUfnZw9e6JwaOcsCXjwV5uYwMb2MAG NniYwM7ihxMctUWstqfLTzcF+exhdVBjYfnYjg3+16GlQYGqi3KUlvJQZlA80P0EG3QvsDOwZXo5 t5p/sYKvUlFG/Kq9aaONDWxgAxv8MqF1EeZDW7Rqe6x6/gOwyj3X3QM98AAAAABJRU5ErkJggg== --_005_4A95BA014132FF49AE685FAB4B9F17F657E66D04dfweml501mbb_-- From nobody Sat Apr 2 21:56:04 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1141D12D5C0 for ; Sat, 2 Apr 2016 21:56:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XTaJ7mlHsQ20 for ; Sat, 2 Apr 2016 21:56:01 -0700 (PDT) Received: from mail-pa0-x22a.google.com (mail-pa0-x22a.google.com [IPv6:2607:f8b0:400e:c03::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2670512D545 for ; Sat, 2 Apr 2016 21:56:01 -0700 (PDT) Received: by mail-pa0-x22a.google.com with SMTP id td3so119947406pab.2 for ; Sat, 02 Apr 2016 21:56:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=92go/di0RrR80TC2NKhpbStJ5EOdz9eTZDSa1SJG6zA=; b=fCp11s7O7k7sKFDAxHAmw2TDsZ98vnw0t7/KAq6kCTzALVdw9CIU+jvB75PNS23Gww cVbhCBo8NpwZ6ZATCqB2gGCEAxk3v4uge7+PNInvxh3PPbSsTO7jI254wynFlbYf9ya6 W1UslhDVXSZbALbHjD5vG+oDx7g57ajuJ80Qk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=92go/di0RrR80TC2NKhpbStJ5EOdz9eTZDSa1SJG6zA=; b=INpRKafKRatEIiGBavpBn2iKgBdZ8WzgW/OFldtILlQR/29i3P4iMTUfH3eGaFtZdH TvWdE41TB94OeuvoimnznaIRAWDl1VMC04k/Zsha+Bf8p/TRW5ZpwE5yosB54JVb9XDD hWnq3b20cQkyRsOad9BSKkNvZBFzGb03O8LrAhUcH0FHT9E+m8vjcT2Ubm2GTa+4U52T dvYqjj30T9mN4Mrdwcng0GabdAy5ELXl0tfYNeGHD/z5nWMkiTY65U5YqdiE3iqfS1Rv 3uDCPQelWME8qctPUa/mZOOdkVvy7LOSowhP20hGp1ciinKn8tl7/7x26oC8UweoEefl 984g== X-Gm-Message-State: AD7BkJJgbUDyLO0faVUcXmd/9cF3EWaWd5K+ieaYdxWmBkB8pFDQIx+i9lv1hp3NomhWyEr7 X-Received: by 10.66.176.139 with SMTP id ci11mr42940665pac.68.1459659360686; Sat, 02 Apr 2016 21:56:00 -0700 (PDT) Received: from [172.19.254.139] (202-176-81-112.static.asianet.co.th. [202.176.81.112]) by smtp.gmail.com with ESMTPSA id g6sm30264633pfg.15.2016.04.02.21.55.58 for (version=TLS1 cipher=AES128-SHA bits=128/128); Sat, 02 Apr 2016 21:55:59 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Sun, 03 Apr 2016 11:55:55 +0700 Message-ID: <83F3CE35-790A-46CA-9823-A61C8008509B@arbor.net> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657E66D04@dfweml501-mbb> References: <4A95BA014132FF49AE685FAB4B9F17F657E66D04@dfweml501-mbb> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] What kind of capability does DOTS client have? X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 03 Apr 2016 04:56:03 -0000 On 2 Apr 2016, at 22:22, Linda Dunbar wrote: > Does CPE or PE act like a DOTS client? It certainly could - see Section 3.11, Section 3.12, and Section 3.13, as well as the -00 .pdf preso at (soon to be revved for -01). > Or is it an end device Sure, see section 3.1.2. > a VM Yes. > an application? Certainly. > Like an email server, or Sharepoint App? Absolutely. Copious amounts of SMTP backscatter from a joe-job often constitute a layer-7 DDoS attack on an MTA, for example. > I would assume that most applications are directly managed/monitored > by its management system. Some are, some aren't. > Is the Management (or the monitoring) system act like DOTS client? Yes, definitely. > Do many applications deployed today have the ability to request DOTS > mitigation? Some do - BIND and Apache are listed as two examples. fail2ban and other things of a similar nature could be utilized to do this based upon repetitive abusive requests which constitute a layer-7 DDoS attack for lots of other applications (for example, aggressive ssh brute-forcing which ends up causing a service outage). The idea is that there are some which can do so now, and, once a standards-based mechanism for doing so is available, more applications and services and management systems will be enhanced with this capability. > How do DOTS clients know who is its upstream DOTS mitigator? That information is configured within the application. In 3.1.4, '. . . may be configured so that upon detecting and classifying a DDoS attack, it signals one or more DOTS servers . . . '. > When an organization has reason to believe that it is under active > attack, why can't the authorized personnel send mitigation requests > directly? Because in that scenario, they're using a Web browser to connect to a remote system which speaks DOTS. The Web browser speaks http/s, in that example; the user clicks the button in the Web UI, which then initiates the DOTS request. Again, see the -00 preso. ----------------------------------- Roland Dobbins From nobody Tue Apr 5 07:57:32 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D96C812D0BD for ; Tue, 5 Apr 2016 07:57:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gytNC1IS5GPz for ; Tue, 5 Apr 2016 07:57:25 -0700 (PDT) Received: from plainfield.sei.cmu.edu (plainfield.sei.cmu.edu [192.58.107.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8F1612D109 for ; Tue, 5 Apr 2016 07:57:24 -0700 (PDT) Received: from pawpaw.sei.cmu.edu (pawpaw.sei.cmu.edu [10.64.21.22]) by plainfield.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u35EvN0T009743 for ; Tue, 5 Apr 2016 10:57:23 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cert.org; s=jthatj15xw2j; t=1459868244; bh=hYD6sRG5/p8+9EDcQPWNqdYE6uPMq4mZapTgwZlLCyM=; h=From:To:Subject:Date:Message-ID:Content-Type: Content-Transfer-Encoding:MIME-Version:Sender:Reply-To:Cc: In-Reply-To:References; b=htWIJ94+f/ixACig6yIedZnwtNaglhcGzXZtZvL8PVMLxmBcGp9WQkz6i1n7u3iKX 9kh1p1SKBZTb0QussAO6ccGy4J5sTOXcqPa08vr+iEMIunmw3nrjfs0Gtez20MmQvh TuJu0VjtlXa1kACsmKR/FhEzfm0gNZkEcWiqRIVE= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by pawpaw.sei.cmu.edu (8.14.4/8.14.4/1543) with ESMTP id u35EvLQs008618 for ; Tue, 5 Apr 2016 10:57:21 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0266.001; Tue, 5 Apr 2016 10:57:21 -0400 From: "Roman D. Danyliw" To: "dots@ietf.org" Thread-Topic: DOTS office hours with the chairs in Buenos Aires Thread-Index: AdGPSedWqfMcrncOSXKF4tpkmAOCTg== Date: Tue, 5 Apr 2016 14:57:21 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFCD96FCF86@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Dots] DOTS office hours with the chairs in Buenos Aires X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 14:57:31 -0000 Good morning! If you'd like to chat with the DOTS chairs about any WG-related issues, ple= ase come to the informal office hours from 1000 - 1100 on Thursday, April 7= in the Alerce Room (5th floor). Regards, Roman and Tobias From nobody Tue Apr 5 09:53:20 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A48C112D59B for ; Tue, 5 Apr 2016 09:53:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQz6xIAr5r5b for ; Tue, 5 Apr 2016 09:53:16 -0700 (PDT) Received: from mail-ig0-x232.google.com (mail-ig0-x232.google.com [IPv6:2607:f8b0:4001:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD6A412D164 for ; Tue, 5 Apr 2016 09:53:16 -0700 (PDT) Received: by mail-ig0-x232.google.com with SMTP id f1so111019127igr.1 for ; Tue, 05 Apr 2016 09:53:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=knWcb1aPJb8Lkk5/hv+TWI1h1FJ+JVpOauFZgcvFHUM=; b=CoRWUyeqgY3JkBAxK0zRB3L0xdNr9mykCumk3uibAJhldvayQME+O6Q3NDojDVsgST 0SthLy+oOZXjnf7xipa6hNxMzH86Hgwn9GNkYd/O8N7fVpZx8atquLo/0O/bN/k0iEFH u659dwykSyM7IjeT7iW00lGMrJpdKwB4f1kIY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=knWcb1aPJb8Lkk5/hv+TWI1h1FJ+JVpOauFZgcvFHUM=; b=YJa32ZjzLEs1yUPt5j6I+nQ2Y7YB3CpXA/oLngP9kGvgx2jOl5a9Zvy4sZTbLWreZJ Per+AE/Z5Icsw5QOiuQdtyrFc68xdkYENi9pl4R6rba0BJcoyhoh+DGKntX+/xNe/myM kMgoGWXbjGxrAj2H5bS9+nEHyQDmMqYhNHGFjRaHVkkKLF7q2CZ1BnzpmpU03fjY3/zC uVuf6xpxfKXyaSkypUVVmMdjmPE/WjAMXVyv5vZftLSGiLDTZF/8SJ1hxLtmxqWg9nZQ 9fPYaVcW4Hlfa4XTSz5wPJH3nLnuN7VP3CM8m8Pt4Z/3VS/xv8LqGePozDsrcEQ7UDxP Lr7w== X-Gm-Message-State: AD7BkJKaRbA82/FmlSP7YEeC0v8FC6jNnJ+ehRB9ANzKa4QJmVSn96eak/wghBECN5dSHApJ X-Received: by 10.50.108.108 with SMTP id hj12mr16666684igb.57.1459875195128; Tue, 05 Apr 2016 09:53:15 -0700 (PDT) Received: from [10.0.1.6] (c-68-49-167-203.hsd1.mi.comcast.net. [68.49.167.203]) by smtp.gmail.com with ESMTPSA id b64sm12286293iob.8.2016.04.05.09.53.13 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 05 Apr 2016 09:53:14 -0700 (PDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: Andrew Mortensen In-Reply-To: <56FE80B4.2090609@cisco.com> Date: Tue, 5 Apr 2016 12:53:12 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> To: Flemming Andreasen X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Roland Dobbins , "Teague, Nik" , dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 16:53:18 -0000 > On Apr 1, 2016, at 10:07 AM, Flemming Andreasen = wrote: >=20 >=20 >=20 > On 4/1/16 8:54 AM, Teague, Nik wrote: >> On 01/04/2016 13:37, "Dots on behalf of Andrew Mortensen" = wrote: >>=20 >>=20 >>>> On Apr 1, 2016, at 5:29 AM, Roland Dobbins = wrote: >>>> On 1 Apr 2016, at 9:56, Tirumaleswar Reddy (tireddy) wrote: >>>>> What is the use case for DOTS relay operated by some other entity = ? >>>> I'm having a hard time coming up with this one, as well. >>> Yes, this was precisely my point about the utility of multiple DOTS = relays in the signaling path when those relays are not owned by the = entity originating the request for mitigation or the entity acting on = the request for mitigation. In the case where a mitigating entity needs = to be backstopped to handle abnormally large attacks, the recursive = signaling mode seems most apt. >> I agree - the relay outside of the two contexts listed becomes = problematic. > =46rom a privacy/confidentiality point of view, I'm not sure I see a = lot of difference between a relay and a server+client if they each are = forwarding sensitive information to a third party that the attack target = had not signed up with initially. You could deal with this in different = ways: > - Part of the service agreement with the DOTS provider (i.e. out of = scope of DOTS) > - Have a way of separating/indicating in the DOTS signaling whether = certain information can be shared with other parties or not. (Apologies, I=92ve been AFK for several days.) I think there=92s a subtle difference here that I didn=92t make clear. = In the case of recursive signaling, the DOTS client has already make an = explicit choice to delegate mitigation to the entity controlling the = DOTS server. If that entity lacks mitigation capacity entirely, and is = simply reselling capacity from an upstream provider, that is opaque to = the client. It does not make sense to me to require e2e in such a model, = as the DOTS client entity may have no relationship with the resold = mitigating entity, and indeed requiring such a model seems to complicate = provisioning significantly. In contrast, DOTS clients would NOT be delegating control over the = mitigation to a third-party relay in the signaling path. But this returns me to my previous point about when relays are = appropriate. In what situation does a third-party relay make sense? andrew From nobody Tue Apr 5 11:12:14 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A138812D52B for ; Tue, 5 Apr 2016 11:12:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oMbrP5ZTZox8 for ; Tue, 5 Apr 2016 11:12:11 -0700 (PDT) Received: from mail-pf0-x236.google.com (mail-pf0-x236.google.com [IPv6:2607:f8b0:400e:c00::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EA6B12D0E2 for ; Tue, 5 Apr 2016 11:12:11 -0700 (PDT) Received: by mail-pf0-x236.google.com with SMTP id n1so15472141pfn.2 for ; Tue, 05 Apr 2016 11:12:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=FC48k0RYwZj9kKmjqh5CZp5MtBu4arQS+2V0SgKypiA=; b=WVPUZjgOjw4zd12EAXt5DtwDfABeHsvXns0zHEo8caFoPaF5meg+gvBOYwmMxLsiGV i+XRpz2XlO4ukYjJGWkHyvPUDzTfcSoeb9dY/06xn1st4ULjoct/XhWQ1JkcvyKJ4o2I Q1NG5fTtzKX+hwa0Bf5nVdKka42rTfP0ETgiQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=FC48k0RYwZj9kKmjqh5CZp5MtBu4arQS+2V0SgKypiA=; b=UGv8gowCQ1Pn5coSmqE05UC41z1j/ZOD/r6XT+bo1lRBADCYpOQInzYOHUetsb3LPJ qao5KTszvvrb21hIvJ+54/6P52KwkMvLQvQ5UlY/SZnTApdOqupFBqilbMz0LdhbbjAo lOpYYNL1Rhhp6XeNZySC+EwYRjGpMAM+8ZHbZLNZ0RaeZYjH3YvgqUWt4G9OnevTYR5w AgXRXmFA5Q6fgpAFX0++65D/zhhG8xu5+ALks3jxWyaLTNrjqOy+3ybBBBoEV2ytskTz Ag7xi+eKUFzSTr12qOZzgjxNjuNA72G1kG285mUiZmARmX/VTkmo7l4AHGaTiYQuhQCT v14w== X-Gm-Message-State: AD7BkJJuURBqO8ZBVuENXUFcVjFxgVfd0zlROlCn+C489bqQP3sYWL4AVDzzpH0RMJz8v9gM X-Received: by 10.98.74.6 with SMTP id x6mr31436043pfa.80.1459879930390; Tue, 05 Apr 2016 11:12:10 -0700 (PDT) Received: from [10.153.64.41] (ppp-27-55-35-26.revip3.asianet.co.th. [27.55.35.26]) by smtp.gmail.com with ESMTPSA id ak9sm9385620pac.13.2016.04.05.11.12.08 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 05 Apr 2016 11:12:09 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) From: Roland Dobbins X-Mailer: iPhone Mail (13D20) In-Reply-To: <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> Date: Tue, 5 Apr 2016 15:12:02 -0300 Content-Transfer-Encoding: quoted-printable Message-Id: <579841E4-F1FA-410C-A1AA-02EC006B0A1A@arbor.net> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> To: Andrew Mortensen Archived-At: Cc: Flemming Andreasen , "Teague, Nik" , dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 18:12:12 -0000 > On Apr 5, 2016, at 1:53 PM, Andrew Mortensen wrote:= In what situation does a third-party relay make sense? In none, AFAICT. =20 Out of curiosity, where did the discussion of 3rd-party relays originate? I= was quite surprised & confused when I realized that this was being discusse= d. =20= From nobody Tue Apr 5 19:04:29 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAB3712D525 for ; Tue, 5 Apr 2016 19:04:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j836XRUWbUpD for ; Tue, 5 Apr 2016 19:04:26 -0700 (PDT) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CADA12D572 for ; Tue, 5 Apr 2016 19:04:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2253; q=dns/txt; s=iport; t=1459908261; x=1461117861; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=j0m3vLix122AS3GtCQ0yfE5ax4B0rIpit9GxidJ2sF4=; b=hBM2ddU0BvsZRQt5oskX6Uq5Y+oI0u13IEe4JFMtYO+eRvImle+LnNOB Qt739/DiWkaQVRyKeZneSxIzjllHPPR33hWc0SqIQdidBn2wRnRz3Ukak 0b9RuApX3u8tDFHODaRgWDwFhFRwZuqRm2O9hHP19meCxWcS4vTrSlTeE M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AfAgAkbgRX/4MNJK1cgzdTfbs8AQ2Bc?= =?us-ascii?q?hcKhWwCgUU4FAEBAQEBAQFlJ4RBAQEBAwEBAQE1NgQFARELDgQGCRYPCQMCAQI?= =?us-ascii?q?BFSIOBgEMBgIBAReIBAgOwEABAQEBAQEBAQEBAQEBAQEBAQEUBIYghEuKFQEEh?= =?us-ascii?q?2+QEo4LiTmFVY8cHgEBQoIygVEgMIg3AQEB?= X-IronPort-AV: E=Sophos;i="5.24,445,1454976000"; d="scan'208";a="88672634" Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Apr 2016 02:04:20 +0000 Received: from [10.86.240.87] (che-vpn-cluster-1-87.cisco.com [10.86.240.87]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id u3624JKc016567; Wed, 6 Apr 2016 02:04:20 GMT To: Roland Dobbins , dots References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> <56FE8705.1060106@cisco.com> From: Flemming Andreasen Message-ID: <57046EA2.7080602@cisco.com> Date: Tue, 5 Apr 2016 22:04:18 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 02:04:28 -0000 On 4/1/16 10:52 AM, Roland Dobbins wrote: > On 1 Apr 2016, at 21:34, Flemming Andreasen wrote: > >> The WG charter mentions inter-domain > > It's definitely inter-domain, as you indicate, concur 100%. > >> The WG charter mentions inter-domain and we have a couple of >> (individual) drafts related to inter-domain already. > > Again, concur 100%, the whole point of this exercise is inter-domain. > We get intra-domain for free. > > But a *federated* inter-domain model is something else entirely; > that's what seems to be implied with talk of relays forwarding > messages between domains which have no direct > administrative/contractual relationship with one another. > > Or am I misunderstanding your meaning? > I think you get the general idea, but I don't really like the term "federated" because it tends to be poorly defined and I don't know what you imply by it. In terms of message forwarding between domains, I am in fact assuming that there is some well-defined relationship in place between them, at least one as long as we are one "DOTS-hop" away. >> I'm also not in favor of short-term solutions that cannot be extended >> to longer-term envisioned scenarios. > > I'm in favor of something relatively simple and deployable near-term > which can be expanded long-term, too. We don't want to preclude > anything useful down the road, agree 100%. > > But we need to look at the actual problem-set which is crying for a > solution at the present time, and for the foreseeable near-term > future. That involves one-to-one and one-to-many bilateral > relationships, not multilateral relationships - but again, I could be > misunderstanding, here. > I'm not sure - let's discuss in person here in Buenos Aires. Thanks -- Flemming >> In summary, more discussion in the WG is needed here. > > The only possible point of contention I see here is federated vs. > bilateral. Again, I may be misunderstanding, so apologies if I am > doing so. > > ----------------------------------- > Roland Dobbins > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > . > From nobody Tue Apr 5 19:07:47 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFD4212D525 for ; Tue, 5 Apr 2016 19:07:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bnPNnMjdvZ01 for ; Tue, 5 Apr 2016 19:07:44 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38F6112D0CB for ; Tue, 5 Apr 2016 19:07:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=963; q=dns/txt; s=iport; t=1459908464; x=1461118064; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=wJOhLAevO2E4813duMPj4+/o1IN3wPOvzqDoCnWvALE=; b=iYyOrkZ5N41PlQpMCgcKe8hKZ+Ky5SfjZHAAQZtq/B5O0XrpJvV2/w5X FSZ11huMMlP6NItgvXwyNmsn0FQunD/v164jYEWVOMG92wSE0vs/xdK1D Ymyue+EmxQVTdYRVWoY7w5q64v6t2LkaYToXpO1Ggjuuy1TNB7/NxfF+h 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AfAgBQbgRX/5NdJa1cgzdTfbs8AQ2Bc?= =?us-ascii?q?hcKhWwCgUU4FAEBAQEBAQFlJ4RCAQEEAQEBNTYJARELDgQGCRYPCQMCAQIBFSI?= =?us-ascii?q?OBgEMBgIBAYgjDsBAAQEBAQEBAQEBAQEBAQEBAQEBFASGIIRLihUBBIdvkBKOC?= =?us-ascii?q?4k5hVWPHB4BAUKCMoFRIDCINwEBAQ?= X-IronPort-AV: E=Sophos;i="5.24,446,1454976000"; d="scan'208";a="94191608" Received: from rcdn-core-11.cisco.com ([173.37.93.147]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Apr 2016 02:07:43 +0000 Received: from [10.86.240.87] (che-vpn-cluster-1-87.cisco.com [10.86.240.87]) by rcdn-core-11.cisco.com (8.14.5/8.14.5) with ESMTP id u3627foo023018; Wed, 6 Apr 2016 02:07:42 GMT To: Roland Dobbins , dots References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <56FE7F48.9080701@cisco.com> From: Flemming Andreasen Message-ID: <57046F6D.7050108@cisco.com> Date: Tue, 5 Apr 2016 22:07:41 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 02:07:46 -0000 On 4/1/16 11:20 AM, Roland Dobbins wrote: > On 1 Apr 2016, at 21:01, Flemming Andreasen wrote: > >> At what level ? Transport/Session (e.g. TLS/DTLS) and/or App (DOTS) ? > > Yes, this is the confusion to which I succumbed earlier. From my > standpoint, transport-level is node-by-node, application-layer is > probably end-to-end, if that makes sense? > >> So you are arguing for hop-by-hop security and not end-to-end ? > > Does a distinction between transport-level and application-level make > sense, here? > It helps clarify, but it does assume a certain design wrt node-by-node (we do have examples of protocols that provide node-by-node/hop-by-hop security at the app-layer). Thanks -- Flemming > ----------------------------------- > Roland Dobbins > > _______________________________________________ > Dots mailing list > Dots@ietf.org > https://www.ietf.org/mailman/listinfo/dots > . > From nobody Tue Apr 5 19:33:59 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D7A312D1D5 for ; Tue, 5 Apr 2016 19:33:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u9N0A_4pdk1y for ; Tue, 5 Apr 2016 19:33:56 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23A1612D14A for ; Tue, 5 Apr 2016 19:33:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1203; q=dns/txt; s=iport; t=1459910036; x=1461119636; h=subject:to:references:from:message-id:date:mime-version: in-reply-to:content-transfer-encoding; bh=tXNU0nM6H+8O0YJIQm54lrMACuYhA4l9/t+o6W56Uu4=; b=HW198vjQjJjtKALTM1u6Ux1Imu3Dm46M2YjpH36OEwFQ2KdrAxwteLRg qJKtnYDd1T8tVLSYsya+VqOgMU8UOQxHt0gcjDB3O6WnDwWS1GVJzmuZn RpGUd0GeCAq0wvuC/bq8wqo679qNXDabwhwlgh/dmv5R0hl0YSrd2Sh7M k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BxBQBmdARX/5BdJa1cgze9GoFyhg0Cg?= =?us-ascii?q?UY5EwEBAQEBAQFlJ4RCAQEEODgHARELDgQGCRYPCQMCAQIBNw4GAQwIAQGII8B?= =?us-ascii?q?DAQEBAQEBAQEBAQEBAQEBARqGIIRLhCeFbgEEmAGOC4k5hVWPHCIBP4IEGRWBU?= =?us-ascii?q?SCIZwEBAQ?= X-IronPort-AV: E=Sophos;i="5.24,446,1454976000"; d="scan'208";a="90460519" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 06 Apr 2016 02:33:55 +0000 Received: from [10.86.240.87] (che-vpn-cluster-1-87.cisco.com [10.86.240.87]) by rcdn-core-8.cisco.com (8.14.5/8.14.5) with ESMTP id u362Xr3B016032; Wed, 6 Apr 2016 02:33:54 GMT To: Roland Dobbins , dots References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <56FE7F48.9080701@cisco.com> <43b6450f03bc494e96662f09abc8690e@XCH-RCD-017.cisco.com> <379F9E22-74D9-4B96-B5E4-AFEB3017EED6@arbor.net> From: Flemming Andreasen Message-ID: <57047590.4050305@cisco.com> Date: Tue, 5 Apr 2016 22:33:52 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 MIME-Version: 1.0 In-Reply-To: <379F9E22-74D9-4B96-B5E4-AFEB3017EED6@arbor.net> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 02:33:57 -0000 On 4/1/16 12:00 PM, Roland Dobbins wrote: > On 1 Apr 2016, at 22:31, Tirumaleswar Reddy (tireddy) wrote: > >> Yes, provided DOTS relay is fully-trusted (and not semi-trusted like >> the scenario where DOTS relay is owned by some other entity other >> than the DOTS client and server). > > I don't see the semi-trusted model becoming a real-world concern, > anytime soon. Fully-trusted is the expected model for the medium-term > future, AFAICT. > So that is indeed the question. I agree it simplifies the overall design and I am not opposed to have a multi-phased approach where we tackle a simpler problem first, provided we can extend it later. Having said that: 1) There is interest in multi-provider scenarios, as evidenced by the inter-domain drafts 2) You cannot ignore privacy and regulatory requirements these days - they are real both in terms of customer request/demands and actual implementation in the form of Data Centers/Cloud services implemented/deployed in certain geographic areas to satisfy these concerns. This is not what I would call "fully trusted" (but then again, I'm not entirely clear on your definition here) Thanks -- Flemming From nobody Tue Apr 5 19:43:57 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 217E912D0E8 for ; Tue, 5 Apr 2016 19:43:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.531 X-Spam-Level: X-Spam-Status: No, score=-14.531 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3eZoz9dumvcg for ; Tue, 5 Apr 2016 19:43:54 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4B78212D0A7 for ; Tue, 5 Apr 2016 19:43:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3498; q=dns/txt; s=iport; t=1459910634; x=1461120234; h=subject:to:references:cc:from:message-id:date: mime-version:in-reply-to:content-transfer-encoding; bh=K3co+dwVhAF6PkRkAcSMEGCRFfKW78EUnU0sDW1isE8=; b=jQKRLtQrC9VaO57U5D4KubFV2h28IDxs2avW2CRGPtjvFu/ExugklVG3 9nH9WP4cFGBuV4qZPzeaFlyuY7E7KRtzMCHkZ7SZdrKWi3aqgIEJcrndx QroOpruaiDtofROFphrSJsEskaT6gAKU/CVNsVkqwJ3+0PL4i5cVqNrkb c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AdAgCTdgRX/4cNJK1cgzeBULs8AQ2Bc?= =?us-ascii?q?oYNAoFGOBQBAQEBAQEBZSeEQQEBAQMBMgEFOgUCEAsOBAYJJQ8COA4GDQYCAQG?= =?us-ascii?q?IGwjARgEBAQEBAQEBAQEBAQEBAQEBGYYghEuEJ4VuAQSYAY4LiTmFVY8cHgEBQ?= =?us-ascii?q?oIygVEgMIg3AQEB?= X-IronPort-AV: E=Sophos;i="5.24,446,1454976000"; d="scan'208";a="257119957" Received: from alln-core-2.cisco.com ([173.36.13.135]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 06 Apr 2016 02:43:53 +0000 Received: from [10.86.240.87] (che-vpn-cluster-1-87.cisco.com [10.86.240.87]) by alln-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id u362hnpk025268; Wed, 6 Apr 2016 02:43:51 GMT To: Andrew Mortensen References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> From: Flemming Andreasen Message-ID: <570477E5.30305@cisco.com> Date: Tue, 5 Apr 2016 22:43:49 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:38.0) Gecko/20100101 Thunderbird/38.7.0 MIME-Version: 1.0 In-Reply-To: <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: Roland Dobbins , "Teague, Nik" , dots Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 02:43:56 -0000 On 4/5/16 12:53 PM, Andrew Mortensen wrote: >> On Apr 1, 2016, at 10:07 AM, Flemming Andreasen wrote: >> >> >> >> On 4/1/16 8:54 AM, Teague, Nik wrote: >>> On 01/04/2016 13:37, "Dots on behalf of Andrew Mortensen" wrote: >>> >>> >>>>> On Apr 1, 2016, at 5:29 AM, Roland Dobbins wrote: >>>>> On 1 Apr 2016, at 9:56, Tirumaleswar Reddy (tireddy) wrote: >>>>>> What is the use case for DOTS relay operated by some other entity ? >>>>> I'm having a hard time coming up with this one, as well. >>>> Yes, this was precisely my point about the utility of multiple DOTS relays in the signaling path when those relays are not owned by the entity originating the request for mitigation or the entity acting on the request for mitigation. In the case where a mitigating entity needs to be backstopped to handle abnormally large attacks, the recursive signaling mode seems most apt. >>> I agree - the relay outside of the two contexts listed becomes problematic. >> From a privacy/confidentiality point of view, I'm not sure I see a lot of difference between a relay and a server+client if they each are forwarding sensitive information to a third party that the attack target had not signed up with initially. You could deal with this in different ways: >> - Part of the service agreement with the DOTS provider (i.e. out of scope of DOTS) >> - Have a way of separating/indicating in the DOTS signaling whether certain information can be shared with other parties or not. > (Apologies, I’ve been AFK for several days.) > > I think there’s a subtle difference here that I didn’t make clear. In the case of recursive signaling, the DOTS client has already make an explicit choice to delegate mitigation to the entity controlling the DOTS server. Agreed. > If that entity lacks mitigation capacity entirely, and is simply reselling capacity from an upstream provider, that is opaque to the client. It does not make sense to me to require e2e in such a model, as the DOTS client entity may have no relationship with the resold mitigating entity, and indeed requiring such a model seems to complicate provisioning significantly. So again, this is the part I want us all to be clear on (and explicit in our assumptions and operations/trust model going forward): From a DOTS client point of view, when I have signed up with a provider A: 1) Can I assume that all information shared with A will not be shared further ? 2) Can I assume that all mitigation will be provided by A (or at least mitigation that requires access to potentially confidential information such as keying material which would give the provider clear-text access to payload.) 3) If information and/or mitigation is provided by parties other than A, should I have a way of controlling who those parties are and/or what confidential information they can get access to ? > > In contrast, DOTS clients would NOT be delegating control over the mitigation to a third-party relay in the signaling path. > > But this returns me to my previous point about when relays are appropriate. In what situation does a third-party relay make sense? See above (it's not so much a third-party relay to begin with as it is a question of multiple providers and hence my information and/or mitigation ending up with somebody else than I though to begin with). Thanks -- Flemming > andrew > > . > From nobody Wed Apr 6 04:25:13 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8D3612D193 for ; Wed, 6 Apr 2016 04:25:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1RdC4vMYsVTT for ; Wed, 6 Apr 2016 04:25:11 -0700 (PDT) Received: from mail-qg0-x22d.google.com (mail-qg0-x22d.google.com [IPv6:2607:f8b0:400d:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CFA5812D098 for ; Wed, 6 Apr 2016 04:25:10 -0700 (PDT) Received: by mail-qg0-x22d.google.com with SMTP id f105so9237345qge.2 for ; Wed, 06 Apr 2016 04:25:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=zD+Qlh1bKHtzmuVa9142aIbXlASMYmtQkPbdBp3e+cg=; b=fh4XSycZCMFeAydUVCO+qY1UT3EOwwy10mhQr9174T7UCSomTDvJExnODwgUeh3276 xSFWW2/Oqyv57z8TbkH5ofYnrfmWlq0eoeVZA2Q9jZ8daKDHQKDVLcPH//9a7q0x6FLs 0TB8mYXHqnun8UWVkwfjvTVgnxRHL1u6N3tJs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=zD+Qlh1bKHtzmuVa9142aIbXlASMYmtQkPbdBp3e+cg=; b=EGdb6b/nJJ5tSM1pbYQimMv+8Cikdu+1tmsJLQalpwje85S6/MRt9WcudmEsIPXLuB pt2keU9rTif0a74vsEuCqXg7L1WTqqco9tfO+QQVJ4qbUOy4BM1vBUzN/IUMZnrUsjUv +lSLn3sJ61T2MRii752Z2IQ9k5Hp/6NNezizA4DHEQ872bf/u/QHPuxg6fTjes24AzdH QNpOBp1wq3bHtNCGxCd0zKg9CbpJr+88IgZ2tihPPRGO0GvVYFxZ4H9ENEiQYo/fntAR ofrhA1G73t0QgrZLxTcKAtAUoOvUSxgZeEvSK8/7xXsgGx329anQA+q9RtnKlo1816No iBjQ== X-Gm-Message-State: AD7BkJKr5Tkp8Y6mUv3+viY9eKp/B3jEMEps56FfKxnKEAl5NlOT1BGg56k3of0nHFz7g4C9 X-Received: by 10.140.94.106 with SMTP id f97mr34031764qge.95.1459941909911; Wed, 06 Apr 2016 04:25:09 -0700 (PDT) Received: from [10.0.1.3] ([190.104.245.194]) by smtp.gmail.com with ESMTPSA id q198sm1054519qhb.16.2016.04.06.04.25.08 for (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 06 Apr 2016 04:25:09 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Wed, 06 Apr 2016 08:25:06 -0300 Message-ID: In-Reply-To: <570477E5.30305@cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <1794F7DF-5323-43FD-BF76-3572C1A5DA18@arbor.net> <570477E5.30305@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 11:25:12 -0000 On 5 Apr 2016, at 23:43, Flemming Andreasen wrote: > 1) Can I assume that all information shared with A will not be shared > further ? Yes. > 2) Can I assume that all mitigation will be provided by A (or at least > mitigation that requires access to potentially confidential > information such as keying material which would give the provider > clear-text access to payload.) Yes. > 3) If information and/or mitigation is provided by parties other than > A, should I have a way of controlling who those parties are and/or > what confidential information they can get access to ? Again, these are bilateral relationships from a DOTS perspective, not multilateral. So, yes, with the above caveat that they will by definition be able to see the network traffic itself. ----------------------------------- Roland Dobbins From nobody Wed Apr 6 13:40:48 2016 Return-Path: X-Original-To: dots@ietfa.amsl.com Delivered-To: dots@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5786212D149 for ; Wed, 6 Apr 2016 13:40:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=arbor.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 052bl30CXYaY for ; Wed, 6 Apr 2016 13:40:46 -0700 (PDT) Received: from mail-qk0-x22f.google.com (mail-qk0-x22f.google.com [IPv6:2607:f8b0:400d:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BFA5712D0BC for ; Wed, 6 Apr 2016 13:40:45 -0700 (PDT) Received: by mail-qk0-x22f.google.com with SMTP id k135so18917939qke.0 for ; Wed, 06 Apr 2016 13:40:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=arbor.net; s=m0; h=from:to:subject:date:message-id:in-reply-to:references:mime-version; bh=ZwqvQ78BNP39CbXI+dD255F5H6km25Hv04IXRNfuI4Q=; b=E9NgJz1SHKODhvaBJpJYBcavVm2vyR6bu56e79zOhAwMH0cFfkaS/4oly0Nf0RS1ZW 4jx/IXDF3ac3hxUkBTHKrqI7pL0JodyAovYi1i3uM8nRgb3GCKI1WYm2cDIg7O/PbPQe uc4UdJ6kKoDUYBOFkI2+RBtN3DgclyjauMcSw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:subject:date:message-id:in-reply-to :references:mime-version; bh=ZwqvQ78BNP39CbXI+dD255F5H6km25Hv04IXRNfuI4Q=; b=O7UgqJ7QDkhAYuM9wIBFUVVhwA/XSIcFZpwRGW8GwdPf16KY15jqwgClEKDNRl4nLN CMsrFLKkOAkLQcZc/DUFICbMVORNEeR2alfSgpf9uAg7rA0fz+IVFKc+IO7NWCVysNHm 7LpqzIUOm2oW9EzsPhS+rHcDX9/jVH+aX/2BG6mzenUK+ZP3a4jbvifJDqE+DsoYbOTK mDhpVOOEczLKKBhjaZIbwhdeEzkyn25h7tA1gDLCqleaiMIsLXf1N0GB9wEfiIiaBjoh NNHaLFlj/4auPy3i8dAsIGPsAyw/HCWnmrY+EU9pUljEjCjSTpklAd79wEGki8TRsNQP PvQg== X-Gm-Message-State: AD7BkJLzyMlCcTXJ8eFSAd3/BHkuoJAkfC6J7XU/CbmXRIC4lg5lE+vmk57aRSSHlFFyZhbt X-Received: by 10.55.73.211 with SMTP id w202mr5972901qka.39.1459975244804; Wed, 06 Apr 2016 13:40:44 -0700 (PDT) Received: from [10.0.1.3] ([190.104.245.194]) by smtp.gmail.com with ESMTPSA id 65sm1994327qgz.40.2016.04.06.13.40.43 for (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 06 Apr 2016 13:40:43 -0700 (PDT) From: "Roland Dobbins" To: dots Date: Wed, 06 Apr 2016 17:40:42 -0300 Message-ID: In-Reply-To: <57046EA2.7080602@cisco.com> References: <20160320031054.15010.4162.idtracker@ietfa.amsl.com> <56FD4C72.4090304@cisco.com> <56FD74E8.6030300@cisco.com> <4178169b29724b48968ab1a518a04ca2@XCH-RCD-017.cisco.com> <740664E7-416A-499F-809D-2B4A0DEA4A8C@arbor.net> <05614E45-2882-4CF4-90AE-4759729C8AE0@verisign.com> <56FE80B4.2090609@cisco.com> <240C1AB2-0962-4499-86D9-BCC17674E1E1@arbor.net> <56FE8705.1060106@cisco.com> <57046EA2.7080602@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: Re: [Dots] New Version Notification for draft-mortensen-dots-architecture-00.txt X-BeenThere: dots@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of DDoS Open Threat Signaling \(DOTS\) technology and directions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Apr 2016 20:40:47 -0000 On 5 Apr 2016, at 23:04, Flemming Andreasen wrote: > I'm not sure - let's discuss in person here in Buenos Aires. Note that currently and for the foreseeable future, multilateral is pretty much a nonstarter for both out-of-band administrative and trust reasons surrounding BGP, DNS, et. al., as well as the potential for misuse. ----------------------------------- Roland Dobbins