From bingxuere@gmail.com Thu Nov 1 05:19:35 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B93DF21F8843 for ; Thu, 1 Nov 2012 05:19:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y-CefHMp1JnQ for ; Thu, 1 Nov 2012 05:19:34 -0700 (PDT) Received: from mail-ie0-f172.google.com (mail-ie0-f172.google.com [209.85.223.172]) by ietfa.amsl.com (Postfix) with ESMTP id 71EA521F887B for ; Thu, 1 Nov 2012 05:19:34 -0700 (PDT) Received: by mail-ie0-f172.google.com with SMTP id 9so3974228iec.31 for ; Thu, 01 Nov 2012 05:19:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=+VQhheLoXBbSvCeurKJpxKSot1NzFTGRxgYV9b2e2Us=; b=e6dpFBkuih0umvLhnExR+aVjOopvnbz11IsgvGFypIKoutfo1PtpGRy90uGe3D2Uif QNOtZ+u0h9z2qqvnqr8Q6dLBO8g87GvQCtFZkkp5Oegk43aKWp9eeM1/r4jwjT89mi7Q u9CZBMHMlFVITWD/XbYjwzBXrz021lBXisTunPblQU8//5LTcQSOxyd7tJuHylBLdPQv M0QUp8ZAgszSBrSejH55V2UvCqaHexCmi/Ck0TclgObs3WNrW1BFj1eb0Y9xRO6eBYy5 4YB47k/OkoOhmXJ3OuKh31wp6qfCCTMIUWTDApZqaC8EI6cJNV+traJHLQXeQngcUew2 +jlA== Received: by 10.50.155.162 with SMTP id vx2mr944748igb.61.1351772373944; Thu, 01 Nov 2012 05:19:33 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.76.200 with HTTP; Thu, 1 Nov 2012 05:18:53 -0700 (PDT) In-Reply-To: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> From: Qiong Date: Thu, 1 Nov 2012 20:18:53 +0800 Message-ID: To: Dan Wing Content-Type: multipart/alternative; boundary=e89a8f2354832a8bda04cd6e0825 Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 12:19:36 -0000 --e89a8f2354832a8bda04cd6e0825 Content-Type: text/plain; charset=UTF-8 Dear Dan, Thanks a lot for your review :) Please see inline On Thu, Nov 1, 2012 at 2:07 AM, Dan Wing wrote: > > -----Original Message----- > > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > > Qiong > > Sent: Wednesday, October 31, 2012 12:41 AM > > To: pcp@ietf.org > > Subject: [pcp] Fw:I-D Action: New Version Notification for draft-tsou- > > pcp-natcoord-08.txt > > > > Dear all, > > > > We have updated the pcp-natcoord draft according to the comments from > > the wg before. The major changes in this version is as follows: > > > > 1) Update the PORT_SET_Nonce field and be consistent with the latest > > pcp-base draft > > 2) Encode the port-set in contiguous port mask, and remove the > > Cryptographically_Random_Port_Range option > > > > 3) Add coexistence with MAP. > > 4) Add security consideration and failover consideration > > > > > > Your further comments are appreciated. > > draft-tsou-pcp-natcoord-08 says: > > Using individual MAP requests to reserve all individual ports of a > given port set can not achieve this goal because an additional > indication is needed to instruct the PCP-controlled device to not > enforce a NAT for packets matching these ports. A candidate solution > is to define a new Option to request for this feature be enforced by > the PCP-controlled device. > > The sentences above are not accurate. A PCP-controlled device that does > not NAT will simply return the same IP address and port for > the externally-mapped IP address, as described in draft-ietf-pcp-base-28: > > Mapping, Port Mapping, Port Forwarding: > A NAT mapping creates a relationship between an internal IP > address, protocol, and port, and an external IP address, protocol, > and port. More specifically, it creates a translation rule where > packets destined to the external IP and port are translated to the > internal IP address, protocol, and port, and vice versa. In the > case of a pure firewall, the "Mapping" is the identity function, > translating an internal IP address, protocol, and port number to > the same external IP address, protocol, and port number. Firewall > filtering, applied in addition to that identity mapping function, > is separate from the mapping itself. > > [Qiong] Right. Thanks for pointing it out. My understanding is in pcp-base pure firewall case, it only keeps record on the mapping rule and this pcp-controlled device can be configured with non-NAT function. Am I right? This can also be applied to pcp-natcoord where this port-set mapping rule is recorded with no-NAT functionality. > > > draft-tsou-pcp-natcoord-08 says: > > Another issue, is when no NAT is enforced in the PCP-controlled > device but only a Port Range Router (PRR) function, the > request has not to indicate the internal ports. > > But then how does pcp-natcoord ensure the subscriber's equipment and > the service provider equipment have the same configuration of > the subscriber's port number range? Seems it doesn't ensure the > configurations are the same; something else does? > [Qiong] Sorry I'm not sure if I understand it correctly. The subscriber's equipment (e.g. CPE) can initiate the pcp-natcoord request from the service provider equipment (e.g. pcp-controlled device) to get the port range. Since the subscriber's equipment will have distinct IPv6 address (e.g. cpe's wan address), the pcp-controlled device can use the v6 address (internal address) as an index to fetch proper mapping rule, including internal v6 address, external v4 address and port set. Therefore, the configuration consistency between the CPE and PCP-controlled devices can be ensured. Does it address your concern ? > > > The draft needs to consider what happens when the port-sets overlap > or are supersets of each other. Especially how the Mapping Nonce > is handled in that situation. > [Qiong] In the draft, we say "However, this port set indicated in the request of the PCP Client is only a hint; it is up to the PCP Server to assign a port set". So the PCP server can guarantee that the port-sets will not overlap with each other, right ? Besides, since the pcp-controlled device can identify each client with the internal address(IPv6 address), I think there will be no confusion in PCP servers to assgin non-overlap port-set to clients. I will add it explicitly in draft as a requirement to PCP server. Is it ok ? > > > draft-tsou-pcp-natcoord-08 says: > > The Client MUST use a different Mapping Nonce for > different MAP_PORT_SET requests. > > This is a MUST, which means there must be something that breaks if > it violates that requirement. What breaks? > [Qiong] This is used when one pcp-natcoord client is allowed to initiate multiple port-set requests in case it has used out all the ports in one port-set. As a result, one pcp client may get multiple mapping rules including the same Internal address, external address and different port-sets. In this case, one mapping rule should have one corresponding mapping nonce, and the server should also keep the Nonce value for each port-set mapping. Otherwise, the pcp server can not get the distinction between a port-set request retransimission when the request is somehow lost and a new port-set request to get another port-set mapping, since the suggested port-set might be zero in both cases and the Internal address, protocol is the same. So when the client is going to request a new port-set, a different Mapping Nonce should be used with the previous port-set request. Does it make sense ? Hope it clarifies -:) Thanks again for your comments ! Best wishes Qiong > > > -d > > > > BTW, you can also find the opensource project in sourceforge: > > http://sourceforge.net/projects/pcpportsetdemo/ > > > > > > Thanks a lot! > > > > Best wishes > > > > -- > > ============================================== > > Qiong Sun > > China Telecom Beijing Research Institude > > > > > > Open source code: > > lightweight 4over6: http://sourceforge.net/projects/laft6/ > > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > > =============================================== > > > > > > > -- ============================================== Qiong Sun China Telecom Beijing Research Institude Open source code: lightweight 4over6: *http://sourceforge.net/projects/laft6/* PCP-natcoord:* http://sourceforge.net/projects/pcpportsetdemo/ * =============================================== --e89a8f2354832a8bda04cd6e0825 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Dear Dan,

Thanks a lot for your review :) Please see inline


On Thu, Nov 1, 20= 12 at 2:07 AM, Dan Wing <dwing@cisco.com> wrote:
> --= ---Original Message-----
> From: pcp-bounces@ietf.org= [mailto:pcp-bounces@ietf.org] = On Behalf Of
> Qiong
> Sent: Wednesday, October 31, 2012 12:41 AM
> To: pcp@ietf.org
> Subject: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-=
> pcp-natcoord-08.txt
>
> Dear all,
>
> We have updated the pcp-natcoord draft according to the comments from<= br> > the wg before. The major changes in this version is as follows:
>
> 1) Update the PORT_SET_Nonce field and be consistent with the latest > pcp-base draft
> 2) Encode the port-set in contiguous port mask, and remove the
> Cryptographically_Random_Port_Range option
>
> 3) Add coexistence with MAP.
> 4) Add security consideration and failover consideration
>
>
> Your further comments are appreciated.

draft-tsou-pcp-natcoord-08 says:

=C2=A0 Using individual MAP requests to reserve all individual ports of a =C2=A0 given port set can not achieve this goal because an additional
=C2=A0 indication is needed to instruct the PCP-controlled device to not =C2=A0 enforce a NAT for packets matching these ports. =C2=A0A candidate so= lution
=C2=A0 is to define a new Option to request for this feature be enforced by=
=C2=A0 the PCP-controlled device.

The sentences above are not accurate. =C2=A0A PCP-controlled device that do= es
not NAT will simply return the same IP address and port for
the externally-mapped IP address, as described in draft-ietf-pcp-base-28:
=C2=A0 =C2=A0Mapping, Port Mapping, Port Forwarding:
=C2=A0 =C2=A0 =C2=A0 A NAT mapping creates a relationship between an intern= al IP
=C2=A0 =C2=A0 =C2=A0 address, protocol, and port, and an external IP addres= s, protocol,
=C2=A0 =C2=A0 =C2=A0 and port. =C2=A0More specifically, it creates a transl= ation rule where
=C2=A0 =C2=A0 =C2=A0 packets destined to the external IP and port are trans= lated to the
=C2=A0 =C2=A0 =C2=A0 internal IP address, protocol, and port, and vice vers= a. =C2=A0In the
=C2=A0 =C2=A0 =C2=A0 case of a pure firewall, the "Mapping" is th= e identity function,
=C2=A0 =C2=A0 =C2=A0 translating an internal IP address, protocol, and port= number to
=C2=A0 =C2=A0 =C2=A0 the same external IP address, protocol, and port numbe= r. =C2=A0Firewall
=C2=A0 =C2=A0 =C2=A0 filtering, applied in addition to that identity mappin= g function,
=C2=A0 =C2=A0 =C2=A0 is separate from the mapping itself.

[Qiong] Right. Thanks for pointing it out. My underst= anding is in pcp-base pure firewall case, it only keeps record on the mappi= ng rule and this pcp-controlled device can be configured with non-NAT funct= ion. Am I right?
This can also be applied to pcp-natcoord where this port-set mapping rule i= s recorded with no-NAT functionality.


draft-tsou-pcp-natcoord-08 says:

=C2=A0 Another issue, is when no NAT is enforced in the PCP-controlled
=C2=A0 device but only a Port Range Router (PRR) function, the
=C2=A0 request has not to indicate the internal ports.

But then how does pcp-natcoord ensure the subscriber's equipment and the service provider equipment have the same configuration of
the subscriber's port number range? =C2=A0Seems it doesn't ensure t= he
configurations are the same; something else does?
[Qio= ng] Sorry I'm not sure if I understand it correctly. The subscriber'= ;s equipment (e.g. CPE) can initiate the pcp-natcoord request from the serv= ice provider equipment (e.g. pcp-controlled device) to get the port range. = Since the subscriber's equipment will have distinct IPv6 address (e.g. = cpe's wan address), the pcp-controlled device can use the v6 address (i= nternal address) as an index to fetch proper mapping rule, including intern= al v6 address, external v4 address and port set. Therefore, the configurati= on consistency between the CPE and PCP-controlled devices can be ensured. D= oes it address your concern ?=C2=A0


The draft needs to consider what happens when the port-sets overlap
or are supersets of each other. =C2=A0Especially how the Mapping Nonce
is handled in that situation.
[Qiong] In the draft, we= say "However, this port set indicated in the request of the PCP Clien= t is only a hint; it is up to the PCP Server to assign a port set". So= the PCP server can guarantee that the port-sets will not overlap with each= other, right ?

Besides, since the pcp-controlled device can identify each client with = the internal address(IPv6 address), I think there will be no confusion in P= CP servers to assgin non-overlap port-set to clients.

I will add it= explicitly in draft as a requirement to PCP server. Is it ok ?


draft-tsou-pcp-natcoord-08 says:

=C2=A0 The Client MUST use a different Mapping Nonce for
=C2=A0 different MAP_PORT_SET requests.

This is a MUST, which means there must be something that breaks if
it violates that requirement. =C2=A0What breaks?

[= Qiong] This is used when one pcp-natcoord client is allowed to initiate mul= tiple port-set requests in case it has used out all the ports in one port-s= et. As a result, one pcp client may get multiple mapping rules including th= e same Internal address, external address and different port-sets. In this = case, one mapping rule should have one corresponding mapping nonce, and the= server should also keep the Nonce value for each port-set mapping. Otherwi= se, the pcp server can not get the distinction between a port-set request r= etransimission when the request is somehow lost and a new port-set request = to get another port-set mapping, since the suggested port-set might be zero= in both cases and the Internal address, protocol is the same. So when the = client is going to request a new port-set, a different Mapping Nonce should= be used with the previous port-set request. Does it make sense ? Hope it c= larifies -:)

Thanks again for your comments !

Best wishes
Qiong
=


-d


> BTW, you can also find the opensource project in sourceforge:
> http://sourceforge.net/projects/pcpportsetdemo/
>
>
> Thanks a lot!
>
> Best wishes
>
> --
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> Qiong Sun
> China Telecom Beijing Research Institude
>
>
> Open source code:
> lightweight 4over6: http://sourceforge.net/projects/laft6/
> PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >
>





--
=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Qiong Sun
Chin= a Telecom Beijing Research Institude


Open source code:
lightw= eight 4over6: http://sourceforge.net/projects/laft6/
PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--e89a8f2354832a8bda04cd6e0825-- From dwing@cisco.com Thu Nov 1 07:49:17 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4918F21F8D2E for ; Thu, 1 Nov 2012 07:49:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.524 X-Spam-Level: X-Spam-Status: No, score=-110.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4vUfF2gmBzmJ for ; Thu, 1 Nov 2012 07:49:16 -0700 (PDT) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id 5916F21F8A91 for ; Thu, 1 Nov 2012 07:49:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7920; q=dns/txt; s=iport; t=1351781356; x=1352990956; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=tsd6A39cn38lbUFs1m9YTI1DGALtHBNYegrdw6rThd0=; b=gCpQ0tPoKd72rVfLoMuO7HcC2HL9YUw476OO2vGT9RRptBnZ48XTw3V1 7CDanxhF8KMYx2aAgTBbQoFI4ckQSY6wEzPH4rqDK3zaCUn+Lz7Tls4NY j9sdps39wmjQSICUL4vuA4ITpLFvPChGQq7n1D5SM1Zxh8piYMOjeu/YL 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFAA+LklCrRDoI/2dsb2JhbAA6AQmGF71UgQiCHgEBAQMBCAIIARBPBQIFBwEDAgkRBAEBAQICIwMCAhkIJQkIAgQRAgsFCweHUgMJBQycE40piScNiVSBIIl0ZxABhReBEwOIWoUXhjKBVYEbiheDJoFrgw8f X-IronPort-AV: E=Sophos;i="4.80,693,1344211200"; d="scan'208";a="60304016" Received: from mtv-core-3.cisco.com ([171.68.58.8]) by mtv-iport-3.cisco.com with ESMTP; 01 Nov 2012 14:49:13 +0000 Received: from DWINGWS01 ([10.32.240.194]) by mtv-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA1EnDNi007686; Thu, 1 Nov 2012 14:49:13 GMT From: "Dan Wing" To: "'Qiong'" References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> In-Reply-To: Date: Thu, 1 Nov 2012 07:49:12 -0700 Message-ID: <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQNPFg3hnot8iaQn7dMg74vbEf4q5wHPoD1sAYkIPtOUt40EMA== Content-Language: en-us Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 14:49:17 -0000 > -----Original Message----- > From: Qiong [mailto:bingxuere@gmail.com] > Sent: Thursday, November 01, 2012 5:19 AM > To: Dan Wing > Cc: pcp@ietf.org > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > tsou-pcp-natcoord-08.txt > > Dear Dan, > > Thanks a lot for your review :) Please see inline > > > > On Thu, Nov 1, 2012 at 2:07 AM, Dan Wing wrote: > > > > -----Original Message----- > > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On > Behalf Of > > Qiong > > Sent: Wednesday, October 31, 2012 12:41 AM > > To: pcp@ietf.org > > Subject: [pcp] Fw:I-D Action: New Version Notification for draft- > tsou- > > pcp-natcoord-08.txt > > > > Dear all, > > > > We have updated the pcp-natcoord draft according to the comments > from > > the wg before. The major changes in this version is as follows: > > > > 1) Update the PORT_SET_Nonce field and be consistent with the > latest > > pcp-base draft > > 2) Encode the port-set in contiguous port mask, and remove the > > Cryptographically_Random_Port_Range option > > > > 3) Add coexistence with MAP. > > 4) Add security consideration and failover consideration > > > > > > Your further comments are appreciated. > > > draft-tsou-pcp-natcoord-08 says: > > Using individual MAP requests to reserve all individual ports of > a > given port set can not achieve this goal because an additional > indication is needed to instruct the PCP-controlled device to not > enforce a NAT for packets matching these ports. A candidate > solution > is to define a new Option to request for this feature be enforced > by > the PCP-controlled device. > > The sentences above are not accurate. A PCP-controlled device that > does > not NAT will simply return the same IP address and port for > the externally-mapped IP address, as described in draft-ietf-pcp- > base-28: > > Mapping, Port Mapping, Port Forwarding: > A NAT mapping creates a relationship between an internal IP > address, protocol, and port, and an external IP address, > protocol, > and port. More specifically, it creates a translation rule > where > packets destined to the external IP and port are translated > to the > internal IP address, protocol, and port, and vice versa. In > the > case of a pure firewall, the "Mapping" is the identity > function, > translating an internal IP address, protocol, and port number > to > the same external IP address, protocol, and port number. > Firewall > filtering, applied in addition to that identity mapping > function, > is separate from the mapping itself. > > > > [Qiong] Right. Thanks for pointing it out. My understanding is in pcp- > base pure firewall case, it only keeps record on the mapping rule and > this pcp-controlled device can be configured with non-NAT function. Am I > right? > This can also be applied to pcp-natcoord where this port-set mapping > rule is recorded with no-NAT functionality. > > > > > draft-tsou-pcp-natcoord-08 says: > > Another issue, is when no NAT is enforced in the PCP-controlled > device but only a Port Range Router (PRR) function, the > request has not to indicate the internal ports. > > But then how does pcp-natcoord ensure the subscriber's equipment > and > the service provider equipment have the same configuration of > the subscriber's port number range? Seems it doesn't ensure the > configurations are the same; something else does? > > > [Qiong] Sorry I'm not sure if I understand it correctly. The > subscriber's equipment (e.g. CPE) can initiate the pcp-natcoord request > from the service provider equipment (e.g. pcp-controlled device) to get > the port range. Ok. Which UDP port does the CPE send that PCP request, if it does not yet already know the port range assigned to the CPE? > Since the subscriber's equipment will have distinct IPv6 > address (e.g. cpe's wan address), the pcp-controlled device can use the > v6 address (internal address) as an index to fetch proper mapping rule, > including internal v6 address, external v4 address and port set. > Therefore, the configuration consistency between the CPE and PCP- > controlled devices can be ensured. Does it address your concern ? > > > > > The draft needs to consider what happens when the port-sets overlap > or are supersets of each other. Especially how the Mapping Nonce > is handled in that situation. > > > [Qiong] In the draft, we say "However, this port set indicated in the > request of the PCP Client is only a hint; it is up to the PCP Server to > assign a port set". So the PCP server can guarantee that the port-sets > will not overlap with each other, right ? Let's say the PCP server assigns ports 100-199. Then, because of another request from the CPE, the PCP server assigns ports 200-299. The draft needs to explain if that second PCP response will be indicate just ports 200-299, or if it will indicate ports 100-299. The server could send either sort of response back, so it should more clearly explain that the CPE needs to handle either response, or declare the 100-299 response as illegal, or something. > Besides, since the pcp-controlled device can identify each client with > the internal address(IPv6 address), I think there will be no confusion > in PCP servers to assgin non-overlap port-set to clients. > > I will add it explicitly in draft as a requirement to PCP server. Is it > ok ? -d > > > > > draft-tsou-pcp-natcoord-08 says: > > The Client MUST use a different Mapping Nonce for > different MAP_PORT_SET requests. > > This is a MUST, which means there must be something that breaks if > it violates that requirement. What breaks? > > > > [Qiong] This is used when one pcp-natcoord client is allowed to initiate > multiple port-set requests in case it has used out all the ports in one > port-set. As a result, one pcp client may get multiple mapping rules > including the same Internal address, external address and different > port-sets. In this case, one mapping rule should have one corresponding > mapping nonce, and the server should also keep the Nonce value for each > port-set mapping. Otherwise, the pcp server can not get the distinction > between a port-set request retransimission when the request is somehow > lost and a new port-set request to get another port-set mapping, since > the suggested port-set might be zero in both cases and the Internal > address, protocol is the same. So when the client is going to request a > new port-set, a different Mapping Nonce should be used with the previous > port-set request. Does it make sense ? Hope it clarifies -:) > > Thanks again for your comments ! > > Best wishes > Qiong > > > > > -d > > > > > BTW, you can also find the opensource project in sourceforge: > > http://sourceforge.net/projects/pcpportsetdemo/ > > > > > > Thanks a lot! > > > > Best wishes > > > > -- > > ============================================== > > Qiong Sun > > China Telecom Beijing Research Institude > > > > > > Open source code: > > lightweight 4over6: http://sourceforge.net/projects/laft6/ > > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > > =============================================== > > > > > > > > > > > > -- > ============================================== > Qiong Sun > China Telecom Beijing Research Institude > > > Open source code: > lightweight 4over6: http://sourceforge.net/projects/laft6/ > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > =============================================== > > From simon.perreault@viagenie.ca Thu Nov 1 09:31:42 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4001021F9002 for ; Thu, 1 Nov 2012 09:31:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xZLpEq0cuVe5 for ; Thu, 1 Nov 2012 09:31:41 -0700 (PDT) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id A5A8D21F9001 for ; Thu, 1 Nov 2012 09:31:41 -0700 (PDT) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id C59A4415CF for ; Thu, 1 Nov 2012 12:31:40 -0400 (EDT) Message-ID: <5092A3EB.2030500@viagenie.ca> Date: Thu, 01 Nov 2012 17:31:39 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: pcp@ietf.org References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> In-Reply-To: <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 16:31:42 -0000 Just replying to this one because the others seem clear to me... Le 2012-11-01 15:49, Dan Wing a écrit : > Ok. Which UDP port does the CPE send that PCP request, if it does > not yet already know the port range assigned to the CPE? Uh? MAP gives one port. MAP_PORT_SET gives a set of ports. MAP and MAP_PORT_SET have the same answer to your question. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From dwing@cisco.com Thu Nov 1 13:53:16 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0795821F8660 for ; Thu, 1 Nov 2012 13:53:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.535 X-Spam-Level: X-Spam-Status: No, score=-110.535 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id clkoCORQI1Mv for ; Thu, 1 Nov 2012 13:53:15 -0700 (PDT) Received: from mtv-iport-1.cisco.com (mtv-iport-1.cisco.com [173.36.130.12]) by ietfa.amsl.com (Postfix) with ESMTP id 6A5F421F842A for ; Thu, 1 Nov 2012 13:53:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1302; q=dns/txt; s=iport; t=1351803195; x=1353012795; h=from:to:references:in-reply-to:subject:date:message-id: mime-version:content-transfer-encoding; bh=vzYAkljBYPECxadHOs0E+m3BvSpE81Cd6HPpaBfs2XU=; b=fOryGBOGwf+nInWiScYUT+iZ5ZmzLdpjObOS+VgBG5mQMHLCjLC8RZAs sleFdUscRJviF4lqMkknMvQRJAwE6y5U+YtJ7Y7AFTbZQRCDg0ZOoDEbg Rn+VrdOjqlttQgbKh/EjZjurHZE129wYKtJdVjB5pvpgJF+dZR0vS6T4R Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhAKANzfklCrRDoH/2dsb2JhbABEwi8DgQWBCIIeAQEBAwEBAQEFAggBFEcJBwcBAwIJEQQBASgHGQ4fCQgCBAESCwUSh14FDJxfoC2Le3SFRwOIJTWFF4gHgRuNPYFrgw8 X-IronPort-AV: E=Sophos;i="4.80,695,1344211200"; d="scan'208";a="59801217" Received: from mtv-core-2.cisco.com ([171.68.58.7]) by mtv-iport-1.cisco.com with ESMTP; 01 Nov 2012 20:53:15 +0000 Received: from DWINGWS01 ([10.154.161.158]) by mtv-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qA1KrFh7025569; Thu, 1 Nov 2012 20:53:15 GMT From: "Dan Wing" To: "'Simon Perreault'" , References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> In-Reply-To: <5092A3EB.2030500@viagenie.ca> Date: Thu, 1 Nov 2012 13:53:15 -0700 Message-ID: <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQNPFg3hnot8iaQn7dMg74vbEf4q5wHPoD1sAYkIPtMBOHUi3AFnS4+SlKL18sA= Content-Language: en-us Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 20:53:16 -0000 > -----Original Message----- > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > Simon Perreault > Sent: Thursday, November 01, 2012 9:32 AM > To: pcp@ietf.org > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > tsou-pcp-natcoord-08.txt >=20 > Just replying to this one because the others seem clear to me... >=20 > Le 2012-11-01 15:49, Dan Wing a =E9crit : > > Ok. Which UDP port does the CPE send that PCP request, if it does = not > > yet already know the port range assigned to the CPE? >=20 > Uh? Sorry, I meant to ask: *from* which UDP port does the CPE send that PCP request. or can it use any source UDP port for its PCP request, or does it have to be one of its assigned UDP ports (which aren't yet assigned until PCP exchange)? -d > MAP gives one port. > MAP_PORT_SET gives a set of ports. >=20 > MAP and MAP_PORT_SET have the same answer to your question. >=20 > Simon > -- > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From simon.perreault@viagenie.ca Thu Nov 1 14:04:51 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8DDB21F9732 for ; Thu, 1 Nov 2012 14:04:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jExCFAGmhRYr for ; Thu, 1 Nov 2012 14:04:51 -0700 (PDT) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id E613E21F9731 for ; Thu, 1 Nov 2012 14:04:50 -0700 (PDT) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 01C2841A0B; Thu, 1 Nov 2012 17:04:48 -0400 (EDT) Message-ID: <5092E3EF.7090308@viagenie.ca> Date: Thu, 01 Nov 2012 22:04:47 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: Dan Wing References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> In-Reply-To: <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 21:04:51 -0000 Le 2012-11-01 21:53, Dan Wing a écrit : >> Le 2012-11-01 15:49, Dan Wing a écrit : >>> Ok. Which UDP port does the CPE send that PCP request, if it does not >>> yet already know the port range assigned to the CPE? >> >> Uh? > > Sorry, I meant to ask: > > *from* which UDP port does the CPE send that PCP request. > > or can it use any source UDP port for its PCP request, or does it have > to be one of its assigned UDP ports (which aren't yet assigned until > PCP exchange)? That's what I understood. And the answer is still the same: Q: From which UDP port does the CPE send a MAP request? A: From any UDP port on the internal address it already has. Q: From which UDP port does the CPE send a MAP_PORT_SET request? A: From any UDP port on the internal address it already has. There must be something else I'm not getting... Simon >> MAP gives one port. >> MAP_PORT_SET gives a set of ports. >> >> MAP and MAP_PORT_SET have the same answer to your question. >> >> Simon >> -- >> DTN made easy, lean, and smart --> http://postellation.viagenie.ca >> NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca >> STUN/TURN server --> http://numb.viagenie.ca >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp > -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From dwing@cisco.com Thu Nov 1 15:40:53 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B594C21F9731 for ; Thu, 1 Nov 2012 15:40:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.543 X-Spam-Level: X-Spam-Status: No, score=-110.543 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dptZJxKJovZz for ; Thu, 1 Nov 2012 15:40:52 -0700 (PDT) Received: from mtv-iport-2.cisco.com (mtv-iport-2.cisco.com [173.36.130.13]) by ietfa.amsl.com (Postfix) with ESMTP id DA9B321F9676 for ; Thu, 1 Nov 2012 15:40:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2038; q=dns/txt; s=iport; t=1351809653; x=1353019253; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=Xwz0qNglCYQjxSalIGs0JHBe+JvhG/mV4OZ+N9L5T+U=; b=YOl6cpefjtYf5kz8OzzMPckSMpoyDubVDuFII3AVl5ZcHkPPYTQMmoQZ 5wckLwrIpL/aaJoQ8UbKCE6fRF8VE74ZCY3X/veJTkMDvEfBpZE+vEn1d jmB/Ngov0eZ6KQ9OPWN54G1/JBcgM8ny8tM+6Zyb4ofcBWA9/npafMSgo M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhAKAAf5klCrRDoG/2dsb2JhbABEwi0DgQWBCIIeAQEBAwEBAQEFAggBFEcJAgUHAQMCCREEAQEoBxkOHwkIAgQTCwUSh14FDJx4oCuLe3SFRwOIJTWFF4gHgRuNPYFrgw8 X-IronPort-AV: E=Sophos;i="4.80,695,1344211200"; d="scan'208";a="62914550" Received: from mtv-core-1.cisco.com ([171.68.58.6]) by mtv-iport-2.cisco.com with ESMTP; 01 Nov 2012 22:40:52 +0000 Received: from DWINGWS01 ([10.154.161.158]) by mtv-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qA1MeqB4007259; Thu, 1 Nov 2012 22:40:52 GMT From: "Dan Wing" To: "'Simon Perreault'" References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> In-Reply-To: <5092E3EF.7090308@viagenie.ca> Date: Thu, 1 Nov 2012 15:40:51 -0700 Message-ID: <04a301cdb881$f26cc900$d7465b00$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQNPFg3hnot8iaQn7dMg74vbEf4q5wHPoD1sAYkIPtMBOHUi3AFnS4+SAeZ6klcCPyvAa5SB5yGg Content-Language: en-us Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Nov 2012 22:40:53 -0000 > -----Original Message----- > From: Simon Perreault [mailto:simon.perreault@viagenie.ca] > Sent: Thursday, November 01, 2012 2:05 PM > To: Dan Wing > Cc: pcp@ietf.org > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > tsou-pcp-natcoord-08.txt >=20 > Le 2012-11-01 21:53, Dan Wing a =E9crit : > >> Le 2012-11-01 15:49, Dan Wing a =E9crit : > >>> Ok. Which UDP port does the CPE send that PCP request, if it does > >>> not yet already know the port range assigned to the CPE? > >> > >> Uh? > > > > Sorry, I meant to ask: > > > > *from* which UDP port does the CPE send that PCP request. > > > > or can it use any source UDP port for its PCP request, or does it = have > > to be one of its assigned UDP ports (which aren't yet assigned until > > PCP exchange)? >=20 > That's what I understood. And the answer is still the same: >=20 > Q: From which UDP port does the CPE send a MAP request? > A: From any UDP port on the internal address it already has. >=20 > Q: From which UDP port does the CPE send a MAP_PORT_SET request? > A: From any UDP port on the internal address it already has. >=20 > There must be something else I'm not getting... If it doesn't get (learn) that UDP port via PCP, how does it learn it? -d > Simon >=20 > >> MAP gives one port. > >> MAP_PORT_SET gives a set of ports. > >> > >> MAP and MAP_PORT_SET have the same answer to your question. > >> > >> Simon > >> -- > >> DTN made easy, lean, and smart --> http://postellation.viagenie.ca > >> NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > >> STUN/TURN server --> http://numb.viagenie.ca > >> _______________________________________________ > >> pcp mailing list > >> pcp@ietf.org > >> https://www.ietf.org/mailman/listinfo/pcp > > >=20 >=20 > -- > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca From bingxuere@gmail.com Thu Nov 1 17:12:00 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D2CD21F9880 for ; Thu, 1 Nov 2012 17:12:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MIQ6bfUS+Iuf for ; Thu, 1 Nov 2012 17:11:58 -0700 (PDT) Received: from mail-ie0-f172.google.com (mail-ie0-f172.google.com [209.85.223.172]) by ietfa.amsl.com (Postfix) with ESMTP id 0131721F987B for ; Thu, 1 Nov 2012 17:11:57 -0700 (PDT) Received: by mail-ie0-f172.google.com with SMTP id 9so4916181iec.31 for ; Thu, 01 Nov 2012 17:11:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=fvhiEFSF9rhWlYjhUoOxEijL8XuYN24yjYYdadMs008=; b=f1NS+GlEHlk7x/Nj0jWr1Wt1bKPXYu1GrlZwI1Dh0NJ+cC878viB1Sv5unXm5pTCLu QYyvbLibUcHEQC2pen/o4zFJew1qn0vLJRKWU5A0BPCWY+B9kXnXenDcVsquhhFl5o8O cBJDNjgDsN7kyibyhkzuW0vFf+VLyOIE0uXpih5ttC/eNWHGEGfkbtw3luaMaCAajNPa gUPxksyMYWnnBFC6WtqA2fHv+epyJOUcUjzhPuydoyfsBgq3Z/3xsF3AKNWHLaZuXKoV d7oo1MbC31vWfldCmH/lZALW7IjVEfQqHSPGKkVw1GL9Z0yYunEH4NBllO6zprA6XvoC X+5g== Received: by 10.42.37.142 with SMTP id y14mr23023icd.44.1351815110493; Thu, 01 Nov 2012 17:11:50 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.76.200 with HTTP; Thu, 1 Nov 2012 17:11:10 -0700 (PDT) In-Reply-To: <04a301cdb881$f26cc900$d7465b00$@cisco.com> References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> From: Qiong Date: Fri, 2 Nov 2012 08:11:10 +0800 Message-ID: To: Dan Wing Content-Type: multipart/alternative; boundary=90e6ba6e80e47686e304cd77fb5e Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 00:12:00 -0000 --90e6ba6e80e47686e304cd77fb5e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Dear Dan, The learned port-set is only for restricted NAT on IPv4 packet. MAP_PORT_SET is sent using native IPv6, and so there is no restriction on the port-range. As Simon said, it can use any UDP port on the internal address it already has. Thanks for your comments :) Best wishes Qiong On Fri, Nov 2, 2012 at 6:40 AM, Dan Wing wrote: > > -----Original Message----- > > From: Simon Perreault [mailto:simon.perreault@viagenie.ca] > > Sent: Thursday, November 01, 2012 2:05 PM > > To: Dan Wing > > Cc: pcp@ietf.org > > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > > tsou-pcp-natcoord-08.txt > > > > Le 2012-11-01 21:53, Dan Wing a =C3=A9crit : > > >> Le 2012-11-01 15:49, Dan Wing a =C3=A9crit : > > >>> Ok. Which UDP port does the CPE send that PCP request, if it does > > >>> not yet already know the port range assigned to the CPE? > > >> > > >> Uh? > > > > > > Sorry, I meant to ask: > > > > > > *from* which UDP port does the CPE send that PCP request. > > > > > > or can it use any source UDP port for its PCP request, or does it hav= e > > > to be one of its assigned UDP ports (which aren't yet assigned until > > > PCP exchange)? > > > > That's what I understood. And the answer is still the same: > > > > Q: From which UDP port does the CPE send a MAP request? > > A: From any UDP port on the internal address it already has. > > > > Q: From which UDP port does the CPE send a MAP_PORT_SET request? > > A: From any UDP port on the internal address it already has. > > > > There must be something else I'm not getting... > > If it doesn't get (learn) that UDP port via PCP, how does it > learn it? > > -d > > > > Simon > > > > >> MAP gives one port. > > >> MAP_PORT_SET gives a set of ports. > > >> > > >> MAP and MAP_PORT_SET have the same answer to your question. > > >> > > >> Simon > > >> -- > > >> DTN made easy, lean, and smart --> http://postellation.viagenie.ca > > >> NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > >> STUN/TURN server --> http://numb.viagenie.ca > > >> _______________________________________________ > > >> pcp mailing list > > >> pcp@ietf.org > > >> https://www.ietf.org/mailman/listinfo/pcp > > > > > > > > > -- > > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > STUN/TURN server --> http://numb.viagenie.ca > > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > --=20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Qiong Sun China Telecom Beijing Research Institude Open source code: lightweight 4over6: *http://sourceforge.net/projects/laft6/* PCP-natcoord:* http://sourceforge.net/projects/pcpportsetdemo/ * =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --90e6ba6e80e47686e304cd77fb5e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Dear Dan,

The learned port-set is only for restricted NAT on IPv4 pa= cket. MAP_PORT_SET is sent using native IPv6, and so there is no restrictio= n on the port-range. As Simon said, it can use any UDP port on the internal= address it already has.

Thanks for your comments :)

Best wishes
Qiong


On Fri, Nov 2, 2012 at = 6:40 AM, Dan Wing <dwing@cisco.com> wrote:
> -----Original Message= -----
> From: Simon Perreault [mailto:simon.perreault@viagenie.ca]
> Sent: Thursday, November 01, 2012 2:05 PM
> To: Dan Wing
> Cc: pcp@ietf.org
> Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-<= br> > tsou-pcp-natcoord-08.txt
>
> Le 2012-11-01 21:53, Dan Wing a =C3=A9crit : > >> Le 2012-11-01 15:49, Dan Wing a =C3=A9crit :
> >>> Ok. =C2=A0Which UDP port does the CPE send that PCP reque= st, if it does
> >>> not yet already know the port range assigned to the CPE?<= br> > >>
> >> Uh?
> >
> > Sorry, I meant to ask:
> >
> > =C2=A0 =C2=A0*from* which UDP port does the CPE send that PCP req= uest.
> >
> > or can it use any source UDP port for its PCP request, or does it= have
> > to be one of its assigned UDP ports (which aren't yet assigne= d until
> > PCP exchange)?
>
> That's what I understood. And the answer is still the same:
>
> Q: From which UDP port does the CPE send a MAP request?
> A: From any UDP port on the internal address it already has.
>
> Q: From which UDP port does the CPE send a MAP_PORT_SET request?
> A: From any UDP port on the internal address it already has.
>
> There must be something else I'm not getting...

If it doesn't get (learn) that UDP port via PCP, how does it
learn it?

-d


> Simon
>
> >> MAP gives one port.
> >> MAP_PORT_SET gives a set of ports.
> >>
> >> MAP and MAP_PORT_SET have the same answer to your question. > >>
> >> Simon
> >> --
> >> DTN made easy, lean, and smart --> http://postellation.viagenie.ca<= br> > >> NAT64/DNS64 open-source =C2=A0 =C2=A0 =C2=A0 =C2=A0--> http://ecdysis.viagen= ie.ca
> >> STUN/TURN server =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 --> http://= numb.viagenie.ca
> >> _______________________________________________
> >> pcp mailing list
> >> pcp@ietf.org
> >> https://www.ietf.org/mailman/listinfo/pcp
> >
>
>
> --
> DTN made easy, lean, and smart --> http://postellation.viagenie.ca
> NAT64/DNS64 open-source =C2=A0 =C2=A0 =C2=A0 =C2=A0--> http://ecdysis.viagenie.ca=
> STUN/TURN server =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 --&g= t; http://numb.viagen= ie.ca

_______________________________________________
pcp mailing list
pcp@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/pcp



--
=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Qiong Sun
Chin= a Telecom Beijing Research Institude


Open source code:
lightw= eight 4over6: http://sourceforge.net/projects/laft6/
PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--90e6ba6e80e47686e304cd77fb5e-- From bingxuere@gmail.com Thu Nov 1 17:17:55 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7221D21F988D for ; Thu, 1 Nov 2012 17:17:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FfuY17jS7ywo for ; Thu, 1 Nov 2012 17:17:54 -0700 (PDT) Received: from mail-ia0-f172.google.com (mail-ia0-f172.google.com [209.85.210.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6ABE921F9888 for ; Thu, 1 Nov 2012 17:17:54 -0700 (PDT) Received: by mail-ia0-f172.google.com with SMTP id x24so2611005iak.31 for ; Thu, 01 Nov 2012 17:17:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=NNAtumCol0XGxU1yvpgOzm7bc6sZ7yfjd6czUPE06w8=; b=VYLra2aMCb0pq/z2kYRkdpdUM1PatcFjVgHYzZnuleVYbbsusT9zUzymTkEvfmcDkl BWsXSFfkBn9IRyfVCZ51ZMzy21UUXCs8un9c2vp0JGOnXq8itwF3rhJh1SEXx0db6AUD YCzJvvvyX1MKnMsjc/p4XOFvrFcnuSoJEUcDcZYXY4nigAzKftCvko3osa201YySG0gI PKyRFeXoJ4ebhz8YN3cEdZEgUJf2aeadHfb7LU8DPrk7lY3l/7nNaGQHpEIARkBMtSx2 3kDk2gupJI8gxk8sAqsY40DcQRQjemlt/3N6Uiz2s/8Aj2rxVuG6Qm4WizEWGWSAkDzh Somw== Received: by 10.50.40.137 with SMTP id x9mr267424igk.1.1351815474091; Thu, 01 Nov 2012 17:17:54 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.76.200 with HTTP; Thu, 1 Nov 2012 17:17:13 -0700 (PDT) In-Reply-To: <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> From: Qiong Date: Fri, 2 Nov 2012 08:17:13 +0800 Message-ID: To: Dan Wing Content-Type: multipart/alternative; boundary=14dae93404b922962e04cd7811f3 Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 00:17:55 -0000 --14dae93404b922962e04cd7811f3 Content-Type: text/plain; charset=UTF-8 Dear Dan, For the second comment, please see inline :) On Thu, Nov 1, 2012 at 10:49 PM, Dan Wing wrote: > > -----Original Message----- > > From: Qiong [mailto:bingxuere@gmail.com] > > Sent: Thursday, November 01, 2012 5:19 AM > > To: Dan Wing > > Cc: pcp@ietf.org > > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > > tsou-pcp-natcoord-08.txt > > > > Dear Dan, > > > > Thanks a lot for your review :) Please see inline > > > > > > > > On Thu, Nov 1, 2012 at 2:07 AM, Dan Wing wrote: > > > > > > > -----Original Message----- > > > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On > > Behalf Of > > > Qiong > > > Sent: Wednesday, October 31, 2012 12:41 AM > > > To: pcp@ietf.org > > > Subject: [pcp] Fw:I-D Action: New Version Notification for draft- > > tsou- > > > > > > The draft needs to consider what happens when the port-sets overlap > > or are supersets of each other. Especially how the Mapping Nonce > > is handled in that situation. > > > > > > [Qiong] In the draft, we say "However, this port set indicated in the > > request of the PCP Client is only a hint; it is up to the PCP Server to > > assign a port set". So the PCP server can guarantee that the port-sets > > will not overlap with each other, right ? > > > Let's say the PCP server assigns ports 100-199. Then, because of another > request from the CPE, the PCP server assigns ports 200-299. The draft > needs to explain if that second PCP response will be indicate just ports > 200-299, or if it will indicate ports 100-299. The server could send > either sort of response back, so it should more clearly explain that the > CPE needs to handle either response, or declare the 100-299 response > as illegal, or something. > > [Qiong] Right, we should make it clear. The PCP server should assign individual port-set for each MAP_PORT_SET request, rather than an aggregated one. This would simpilfy the implementation both for the pcp server and pcp client, right? Thanks for your comments! Best wishes Qiong > > > Besides, since the pcp-controlled device can identify each client with > > the internal address(IPv6 address), I think there will be no confusion > > in PCP servers to assgin non-overlap port-set to clients. > > > > I will add it explicitly in draft as a requirement to PCP server. Is it > > ok ? > > -d > > > > > > > > > > > > draft-tsou-pcp-natcoord-08 says: > > > > The Client MUST use a different Mapping Nonce for > > different MAP_PORT_SET requests. > > > > This is a MUST, which means there must be something that breaks if > > it violates that requirement. What breaks? > > > > > > > > [Qiong] This is used when one pcp-natcoord client is allowed to initiate > > multiple port-set requests in case it has used out all the ports in one > > port-set. As a result, one pcp client may get multiple mapping rules > > including the same Internal address, external address and different > > port-sets. In this case, one mapping rule should have one corresponding > > mapping nonce, and the server should also keep the Nonce value for each > > port-set mapping. Otherwise, the pcp server can not get the distinction > > between a port-set request retransimission when the request is somehow > > lost and a new port-set request to get another port-set mapping, since > > the suggested port-set might be zero in both cases and the Internal > > address, protocol is the same. So when the client is going to request a > > new port-set, a different Mapping Nonce should be used with the previous > > port-set request. Does it make sense ? Hope it clarifies -:) > > > > Thanks again for your comments ! > > > > Best wishes > > Qiong > > > > > > > > > > -d > > > > > > > > > BTW, you can also find the opensource project in sourceforge: > > > http://sourceforge.net/projects/pcpportsetdemo/ > > > > > > > > > Thanks a lot! > > > > > > Best wishes > > > > > > -- > > > ============================================== > > > Qiong Sun > > > China Telecom Beijing Research Institude > > > > > > > > > Open source code: > > > lightweight 4over6: http://sourceforge.net/projects/laft6/ > > > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > > > =============================================== > > > > > > > > > > > > > > > > > > > > > > -- > > ============================================== > > Qiong Sun > > China Telecom Beijing Research Institude > > > > > > Open source code: > > lightweight 4over6: http://sourceforge.net/projects/laft6/ > > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > > =============================================== > > > > > > > -- ============================================== Qiong Sun China Telecom Beijing Research Institude Open source code: lightweight 4over6: *http://sourceforge.net/projects/laft6/* PCP-natcoord:* http://sourceforge.net/projects/pcpportsetdemo/ * =============================================== --14dae93404b922962e04cd7811f3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Dear Dan,

For the second comment, please see inline :)


On Thu, Nov 1, 2012 at = 10:49 PM, Dan Wing <dwing@cisco.com> wrote:
>= -----Original Message-----
> From: Qiong [mailto:bingxuere@g= mail.com]
> Sent: Thursday, November 01, 2012 5:19 AM
> To: Dan Wing
> Cc: pcp@ietf.org
> Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-<= br> > tsou-pcp-natcoord-08.txt
>
> Dear Dan,
>
> Thanks a lot for your review :) Please see inline
>
>
>
> On Thu, Nov 1, 2012 at 2:07 AM, Dan Wing <dwing@cisco.com> wrote:
>
>
> =C2=A0 =C2=A0 =C2=A0 > -----Original Message-----
> =C2=A0 =C2=A0 =C2=A0 > From: pcp-bounces@ietf.org [mailto:= pcp-bounces@ietf.org] On
> Behalf Of
> =C2=A0 =C2=A0 =C2=A0 > Qiong
> =C2=A0 =C2=A0 =C2=A0 > Sent: Wednesday, October 31, 2012 12:41 AM > =C2=A0 =C2=A0 =C2=A0 > To: pcp@ietf= .org
> =C2=A0 =C2=A0 =C2=A0 > Subject: [pcp] Fw:I-D Action: New Version No= tification for draft-
> tsou-
>
>
> =C2=A0 =C2=A0 =C2=A0 The draft needs to consider what happens when the= port-sets overlap
> =C2=A0 =C2=A0 =C2=A0 or are supersets of each other. =C2=A0Especially = how the Mapping Nonce
> =C2=A0 =C2=A0 =C2=A0 is handled in that situation.
>
>
> [Qiong] In the draft, we say "However, this port set indicated in= the
> request of the PCP Client is only a hint; it is up to the PCP Server t= o
> assign a port set". So the PCP server can guarantee that the port= -sets
> will not overlap with each other, right ?


Let's say the PCP server assigns ports 100-199. =C2=A0T= hen, because of another
request from the CPE, the PCP server assigns ports 200-299. =C2=A0The draft=
needs to explain if that second PCP response will be indicate just ports 200-299, or if it will indicate ports 100-299. =C2=A0The server could send<= br> either sort of response back, so it should more clearly explain that the CPE needs to handle either response, or declare the 100-299 response
as illegal, or something.

[Qiong] Right, we shou= ld make it clear. The PCP server should assign individual port-set for each= MAP_PORT_SET request, rather than an aggregated one. This would simpilfy t= he implementation both for the pcp server and pcp client, right?

Thanks for your comments!

Best wishes
Qiong

> Besides, since the pcp-controlled device can identify each client with=
> the internal address(IPv6 address), I think there will be no confusion=
> in PCP servers to assgin non-overlap port-set to clients.
>
> I will add it explicitly in draft as a requirement to PCP server. Is i= t
> ok ?

-d


>
>
>
>
> =C2=A0 =C2=A0 =C2=A0 draft-tsou-pcp-natcoord-08 says:
>
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 The Client MUST use a different Mapping No= nce for
> =C2=A0 =C2=A0 =C2=A0 =C2=A0 different MAP_PORT_SET requests.
>
> =C2=A0 =C2=A0 =C2=A0 This is a MUST, which means there must be somethi= ng that breaks if
> =C2=A0 =C2=A0 =C2=A0 it violates that requirement. =C2=A0What breaks?<= br> >
>
>
> [Qiong] This is used when one pcp-natcoord client is allowed to initia= te
> multiple port-set requests in case it has used out all the ports in on= e
> port-set. As a result, one pcp client may get multiple mapping rules > including the same Internal address, external address and different > port-sets. In this case, one mapping rule should have one correspondin= g
> mapping nonce, and the server should also keep the Nonce value for eac= h
> port-set mapping. Otherwise, the pcp server can not get the distinctio= n
> between a port-set request retransimission when the request is somehow=
> lost and a new port-set request to get another port-set mapping, since=
> the suggested port-set might be zero in both cases and the Internal > address, protocol is the same. So when the client is going to request = a
> new port-set, a different Mapping Nonce should be used with the previo= us
> port-set request. Does it make sense ? Hope it clarifies -:)
>
> Thanks again for your comments !
>
> Best wishes
> Qiong
>
>
>
>
> =C2=A0 =C2=A0 =C2=A0 -d
>
>
>
> =C2=A0 =C2=A0 =C2=A0 > BTW, you can also find the opensource projec= t in sourceforge:
> =C2=A0 =C2=A0 =C2=A0 > http://sourceforge.net/projects/pcpportse= tdemo/
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 > Thanks a lot!
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 > Best wishes
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 > --
> =C2=A0 =C2=A0 =C2=A0 > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D
> =C2=A0 =C2=A0 =C2=A0 > Qiong Sun
> =C2=A0 =C2=A0 =C2=A0 > China Telecom Beijing Research Institude
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 > Open source code:
> =C2=A0 =C2=A0 =C2=A0 > lightweight 4over6: http://sourceforge.net/project= s/laft6/
> =C2=A0 =C2=A0 =C2=A0 > PCP-natcoord: http://sourceforge.net/proj= ects/pcpportsetdemo/
> =C2=A0 =C2=A0 =C2=A0 > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D
> =C2=A0 =C2=A0 =C2=A0 >
> =C2=A0 =C2=A0 =C2=A0 >
>
>
>
>
>
>
>
> --
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> Qiong Sun
> China Telecom Beijing Research Institude
>
>
> Open source code:
> lightweight 4over6: http://sourceforge.net/projects/laft6/
> PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >
>





--
=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Qiong Sun
Chin= a Telecom Beijing Research Institude


Open source code:
lightw= eight 4over6: http://sourceforge.net/projects/laft6/
PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--14dae93404b922962e04cd7811f3-- From dwing@cisco.com Thu Nov 1 19:07:00 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4665821F98BD for ; Thu, 1 Nov 2012 19:07:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.549 X-Spam-Level: X-Spam-Status: No, score=-110.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vlHvxO3WA9Nh for ; Thu, 1 Nov 2012 19:06:59 -0700 (PDT) Received: from mtv-iport-2.cisco.com (mtv-iport-2.cisco.com [173.36.130.13]) by ietfa.amsl.com (Postfix) with ESMTP id 873E921F983D for ; Thu, 1 Nov 2012 19:06:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3779; q=dns/txt; s=iport; t=1351822019; x=1353031619; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=nObYleSPitY8aXDXk/Oi/TvdkKYl1NbbZ7V1J81xtfE=; b=W7cs+MAcdo9okfbBvoyioeh9xPcqKxojuo4aHfFqmEsAL1xkxIAT89BZ SijDIleACoJIiTmTwrjdh2p0+XAjRTtzSR5+RMlL30H+BR2+pc/KyfM0S lkHVLFA5uANMKqIYD+ghfgY/MhjyJli0MeX969/+Gk3xKyzT5TbzYPeWj o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgEFAEIqk1CrRDoG/2dsb2JhbABEhhe9GYEIgh4BAQEDAQEBAQUCCAEQBEcJAgUHAQMCCREEAQEBAgIjAwICGQgGHwkIAgQTCwUSh1IDCQUMnHONKYkNDYlUgSCJdGeFKIETA4hahReGMoFVgRuKF4MmgWuDDw X-IronPort-AV: E=Sophos;i="4.80,696,1344211200"; d="scan'208";a="62926829" Received: from mtv-core-1.cisco.com ([171.68.58.6]) by mtv-iport-2.cisco.com with ESMTP; 02 Nov 2012 02:06:58 +0000 Received: from DWINGWS01 ([10.32.240.194]) by mtv-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qA226whg017115; Fri, 2 Nov 2012 02:06:58 GMT From: "Dan Wing" To: "'Qiong'" References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> In-Reply-To: Date: Thu, 1 Nov 2012 19:06:58 -0700 Message-ID: <056201cdb89e$bd681170$38383450$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQNPFg3hnot8iaQn7dMg74vbEf4q5wHPoD1sAYkIPtMBOHUi3AFnS4+SAeZ6klcCPyvAawK69TaXAg3Oi0qUW86FgA== Content-Language: en-us Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 02:07:00 -0000 > -----Original Message----- > From: Qiong [mailto:bingxuere@gmail.com] > Sent: Thursday, November 01, 2012 5:11 PM > To: Dan Wing > Cc: Simon Perreault; pcp@ietf.org > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft- > tsou-pcp-natcoord-08.txt >=20 > Dear Dan, >=20 > The learned port-set is only for restricted NAT on IPv4 packet. > MAP_PORT_SET is sent using native IPv6, and so there is no restriction > on the port-range. Oh. The draft doesn't say the PCP messages are always sent over IPv6. Or, I can't find that sentence. -d > As Simon said, it can use any UDP port on the > internal address it already has. >=20 > Thanks for your comments :) >=20 > Best wishes > Qiong >=20 >=20 >=20 > On Fri, Nov 2, 2012 at 6:40 AM, Dan Wing wrote: >=20 >=20 > > -----Original Message----- > > From: Simon Perreault [mailto:simon.perreault@viagenie.ca] > > Sent: Thursday, November 01, 2012 2:05 PM > > To: Dan Wing > > Cc: pcp@ietf.org > > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for > draft- > > tsou-pcp-natcoord-08.txt > > >=20 > > Le 2012-11-01 21:53, Dan Wing a =C3=A9crit : > > >> Le 2012-11-01 15:49, Dan Wing a =C3=A9crit : > > >>> Ok. Which UDP port does the CPE send that PCP request, if it > does > > >>> not yet already know the port range assigned to the CPE? > > >> > > >> Uh? > > > > > > Sorry, I meant to ask: > > > > > > *from* which UDP port does the CPE send that PCP request. > > > > > > or can it use any source UDP port for its PCP request, or does > it have > > > to be one of its assigned UDP ports (which aren't yet assigned > until > > > PCP exchange)? > > > > That's what I understood. And the answer is still the same: > > > > Q: From which UDP port does the CPE send a MAP request? > > A: From any UDP port on the internal address it already has. > > > > Q: From which UDP port does the CPE send a MAP_PORT_SET request? > > A: From any UDP port on the internal address it already has. > > > > There must be something else I'm not getting... >=20 >=20 > If it doesn't get (learn) that UDP port via PCP, how does it > learn it? >=20 > -d >=20 >=20 >=20 > > Simon > > > > >> MAP gives one port. > > >> MAP_PORT_SET gives a set of ports. > > >> > > >> MAP and MAP_PORT_SET have the same answer to your question. > > >> > > >> Simon > > >> -- > > >> DTN made easy, lean, and smart --> > http://postellation.viagenie.ca > > >> NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > >> STUN/TURN server --> http://numb.viagenie.ca > > >> _______________________________________________ > > >> pcp mailing list > > >> pcp@ietf.org > > >> https://www.ietf.org/mailman/listinfo/pcp > > > > > > > > > -- > > DTN made easy, lean, and smart --> > http://postellation.viagenie.ca > > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > STUN/TURN server --> http://numb.viagenie.ca >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp >=20 >=20 >=20 >=20 >=20 > -- > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Qiong Sun > China Telecom Beijing Research Institude >=20 >=20 > Open source code: > lightweight 4over6: http://sourceforge.net/projects/laft6/ > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 >=20 From dwing@cisco.com Thu Nov 1 19:07:42 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0137421F98CE for ; Thu, 1 Nov 2012 19:07:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.554 X-Spam-Level: X-Spam-Status: No, score=-110.554 tagged_above=-999 required=5 tests=[AWL=0.045, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A73F5CVhuLqX for ; Thu, 1 Nov 2012 19:07:41 -0700 (PDT) Received: from mtv-iport-4.cisco.com (mtv-iport-4.cisco.com [173.36.130.15]) by ietfa.amsl.com (Postfix) with ESMTP id CABCB21F983D for ; Thu, 1 Nov 2012 19:07:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3741; q=dns/txt; s=iport; t=1351822061; x=1353031661; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=jQ1I7t9bupOlnwRxjNmcSF/WRkXQJPIhvBDCDpQ+I2g=; b=dP7A65G1WBH0yGNNLkyQheheUtFIql28rA1HabSA24QanhSNwtUnemkG pq0c6BYFQCuYtPkd4058LIB0UcBPlTPL50C0K7cRPudjirbPkBRtD0MTo viVvmfE/VLAbyHGrsQP3gHoQWPko4AYSkc5R4AEXba93OUvsO1+hpLg/b A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAEIqk1CrRDoG/2dsb2JhbAA6CoYXvRmBCIIeAQEBAwEIAggBEFQCBQgDAgkaAiYCAhk+AgQeBRKHXgUMnHONKZJugSCKa4UYgRMDiFqFF4gHgRuNPYFrgw8 X-IronPort-AV: E=Sophos;i="4.80,696,1344211200"; d="scan'208";a="62850541" Received: from mtv-core-1.cisco.com ([171.68.58.6]) by mtv-iport-4.cisco.com with ESMTP; 02 Nov 2012 02:07:32 +0000 Received: from DWINGWS01 ([10.32.240.194]) by mtv-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qA227WpP017508; Fri, 2 Nov 2012 02:07:32 GMT From: "Dan Wing" To: "'Qiong'" References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> In-Reply-To: Date: Thu, 1 Nov 2012 19:07:32 -0700 Message-ID: <056301cdb89e$d1826660$74873320$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQNPFg3hnot8iaQn7dMg74vbEf4q5wHPoD1sAYkIPtMBOHUi3AF+2gWqlKKRraA= Content-Language: en-us Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 02:07:42 -0000 > [Qiong] Right, we should make it clear. The PCP server should assign > individual port-set for each MAP_PORT_SET request, rather than an > aggregated one. Yes, that would be good to explain in the document. > This would simpilfy the implementation both for the pcp > server and pcp client, right? Yes, I think so. -d > Thanks for your comments! > > Best wishes > Qiong > > > > > Besides, since the pcp-controlled device can identify each client > with > > the internal address(IPv6 address), I think there will be no > confusion > > in PCP servers to assgin non-overlap port-set to clients. > > > > I will add it explicitly in draft as a requirement to PCP server. > Is it > > ok ? > > > -d > > > > > > > > > > > > > draft-tsou-pcp-natcoord-08 says: > > > > The Client MUST use a different Mapping Nonce for > > different MAP_PORT_SET requests. > > > > This is a MUST, which means there must be something that > breaks if > > it violates that requirement. What breaks? > > > > > > > > [Qiong] This is used when one pcp-natcoord client is allowed to > initiate > > multiple port-set requests in case it has used out all the ports > in one > > port-set. As a result, one pcp client may get multiple mapping > rules > > including the same Internal address, external address and > different > > port-sets. In this case, one mapping rule should have one > corresponding > > mapping nonce, and the server should also keep the Nonce value > for each > > port-set mapping. Otherwise, the pcp server can not get the > distinction > > between a port-set request retransimission when the request is > somehow > > lost and a new port-set request to get another port-set mapping, > since > > the suggested port-set might be zero in both cases and the > Internal > > address, protocol is the same. So when the client is going to > request a > > new port-set, a different Mapping Nonce should be used with the > previous > > port-set request. Does it make sense ? Hope it clarifies -:) > > > > Thanks again for your comments ! > > > > Best wishes > > Qiong > > > > > > > > > > -d > > > > > > > > > BTW, you can also find the opensource project in > sourceforge: > > > http://sourceforge.net/projects/pcpportsetdemo/ > > > > > > > > > Thanks a lot! > > > > > > Best wishes > > > > > > -- > > > ============================================== > > > Qiong Sun > > > China Telecom Beijing Research Institude > > > > > > > > > Open source code: > > > lightweight 4over6: > http://sourceforge.net/projects/laft6/ > > > PCP-natcoord: > http://sourceforge.net/projects/pcpportsetdemo/ > > > =============================================== > > > > > > > > > > > > > > > > > > > > > > -- > > ============================================== > > Qiong Sun > > China Telecom Beijing Research Institude > > > > > > Open source code: > > lightweight 4over6: http://sourceforge.net/projects/laft6/ > > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > > =============================================== > > > > > > > > > > > > -- > ============================================== > Qiong Sun > China Telecom Beijing Research Institude > > > Open source code: > lightweight 4over6: http://sourceforge.net/projects/laft6/ > PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/ > =============================================== > > From simon.perreault@viagenie.ca Thu Nov 1 23:09:43 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28EE521F976D for ; Thu, 1 Nov 2012 23:09:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HWcgdTpTBGWZ for ; Thu, 1 Nov 2012 23:09:42 -0700 (PDT) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 22B0421F9756 for ; Thu, 1 Nov 2012 23:09:42 -0700 (PDT) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 97B2745C0D; Fri, 2 Nov 2012 02:09:40 -0400 (EDT) Message-ID: <509363A3.30608@viagenie.ca> Date: Fri, 02 Nov 2012 07:09:39 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: Dan Wing References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> <056201cdb89e$bd681170$38383450$@cisco.com> In-Reply-To: <056201cdb89e$bd681170$38383450$@cisco.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 06:09:43 -0000 Le 2012-11-02 03:06, Dan Wing a écrit : > The draft doesn't say the PCP messages are always sent over IPv6. Or, > I can't find that sentence. It doesn't because it wouldn't be true. MAP_PORT_SET can be sent over any address family, just like MAP. Remember: the only difference is that MAP gets one port, while MAP_PORT_SET gets multiple ports. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From cathy.zhou@huawei.com Fri Nov 2 01:55:21 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17F8721F9931 for ; Fri, 2 Nov 2012 01:55:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id afyrqLKtio8e for ; Fri, 2 Nov 2012 01:55:20 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id A3F7021F8B86 for ; Fri, 2 Nov 2012 01:55:19 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml204-edg.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ALD70141; Fri, 02 Nov 2012 08:55:17 +0000 (GMT) Received: from LHREML405-HUB.china.huawei.com (10.201.5.242) by lhreml204-edg.china.huawei.com (172.18.7.223) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 2 Nov 2012 08:54:29 +0000 Received: from SZXEML430-HUB.china.huawei.com (10.72.61.38) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.1.323.3; Fri, 2 Nov 2012 08:55:01 +0000 Received: from SZXEML527-MBX.china.huawei.com ([169.254.3.21]) by szxeml430-hub.china.huawei.com ([10.72.61.38]) with mapi id 14.01.0323.003; Fri, 2 Nov 2012 16:52:58 +0800 From: "Zhouqian (Cathy)" To: Simon Perreault , Dan Wing Thread-Topic: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt Thread-Index: AQHNuI6zUdC4bP76F0yY6+pJ2F/WqZfVRkAAgABDzoCAALFxcA== Date: Fri, 2 Nov 2012 08:52:57 +0000 Message-ID: References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> <056201cdb89e$bd681170$38383450$@cisco.com> <509363A3.30608@viagenie.ca> In-Reply-To: <509363A3.30608@viagenie.ca> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.77.118] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 08:55:21 -0000 QWdyZWUgd2l0aCBTaW1vbiB0aGF0IHRoZSBtZXNzYWdlIGNvdWxkIGJlIHNlbnQgb3ZlciBJUHY0 IGFzIHdlbGwuIA0KSW4gdGhpcyBjYXNlLCB0aGUgbWVzc2FnZSBpcyBzZW50IHVzaW5nIFdBTiBz aWRlIElQdjQgYWRkcmVzcyBhbmQgdGhlIFdBTiBzaWRlIGFkZHJlc3MgDQpzaG91bGQgYmUgcGxh bm5lZCB3ZWxsIGluIGFkdmFuY2UuIA0KDQpCZXN0IFJlZ2FyZHMsDQpDYXRoeQ0KDQoNCj4gLS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogcGNwLWJvdW5jZXNAaWV0Zi5vcmcgW21h aWx0bzpwY3AtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mDQo+IFNpbW9uIFBlcnJlYXVs dA0KPiBTZW50OiBGcmlkYXksIE5vdmVtYmVyIDAyLCAyMDEyIDI6MTAgUE0NCj4gVG86IERhbiBX aW5nDQo+IENjOiBwY3BAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtwY3BdIEZ3OkktRCBBY3Rp b246IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3INCj4gZHJhZnQtdHNvdS1wY3AtbmF0Y29v cmQtMDgudHh0DQo+IA0KPiBMZSAyMDEyLTExLTAyIDAzOjA2LCBEYW4gV2luZyBhIMOpY3JpdCA6 DQo+ID4gVGhlIGRyYWZ0IGRvZXNuJ3Qgc2F5IHRoZSBQQ1AgbWVzc2FnZXMgYXJlIGFsd2F5cyBz ZW50IG92ZXIgSVB2Ni4gIE9yLA0KPiA+IEkgY2FuJ3QgZmluZCB0aGF0IHNlbnRlbmNlLg0KPiAN Cj4gSXQgZG9lc24ndCBiZWNhdXNlIGl0IHdvdWxkbid0IGJlIHRydWUuIE1BUF9QT1JUX1NFVCBj YW4gYmUgc2VudCBvdmVyDQo+IGFueSBhZGRyZXNzIGZhbWlseSwganVzdCBsaWtlIE1BUC4NCj4g DQo+IFJlbWVtYmVyOiB0aGUgb25seSBkaWZmZXJlbmNlIGlzIHRoYXQgTUFQIGdldHMgb25lIHBv cnQsIHdoaWxlDQo+IE1BUF9QT1JUX1NFVCBnZXRzIG11bHRpcGxlIHBvcnRzLg0KPiANCj4gU2lt b24NCj4gLS0NCj4gRFROIG1hZGUgZWFzeSwgbGVhbiwgYW5kIHNtYXJ0IC0tPiBodHRwOi8vcG9z dGVsbGF0aW9uLnZpYWdlbmllLmNhDQo+IE5BVDY0L0ROUzY0IG9wZW4tc291cmNlICAgICAgICAt LT4gaHR0cDovL2VjZHlzaXMudmlhZ2VuaWUuY2ENCj4gU1RVTi9UVVJOIHNlcnZlciAgICAgICAg ICAgICAgIC0tPiBodHRwOi8vbnVtYi52aWFnZW5pZS5jYQ0KPiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBwY3AgbWFpbGluZyBsaXN0DQo+IHBjcEBp ZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3BjcA0K From alper.yegin@yegin.org Fri Nov 2 02:56:46 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 765DA21F994E for ; Fri, 2 Nov 2012 02:56:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.332 X-Spam-Level: X-Spam-Status: No, score=-102.332 tagged_above=-999 required=5 tests=[AWL=0.267, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EzeG3F60TV2k for ; Fri, 2 Nov 2012 02:56:45 -0700 (PDT) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 86E3E21F9941 for ; Fri, 2 Nov 2012 02:56:45 -0700 (PDT) Received: from [192.168.2.5] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis) id 0LmbFL-1Su4E13CxX-00ZXfy; Fri, 02 Nov 2012 05:56:43 -0400 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=windows-1252 From: Alper Yegin In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> Date: Fri, 2 Nov 2012 11:56:24 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> To: Reinaldo Penno (repenno) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:fmt9/91vWduW7URA6Pv1dsJkURkZir0SWmlg5pp0yN0 yhIKUsgAcmLDqWXAcada4WedyKyUa5ClnXc9NqYjkP+Nsb88yN WcPtNe41VC5TCR03btXq+7iIWlaO3yULuLeGF9WY2j1GTOOHvx vpVQh/AnVqy2kAt4NaDqW/K6z2I26o1yfujTIVkobKUvPEZ1Ig kXUGTPQVIrQwG5g14eeGYczb8KrLW7XPWmn8RgwDcs/6Q5BZvI LD8MQvyaTi+6TrkJic+Ptn7QGuFFXJlYuVrgPqpXYgdZjrniWA n+qCRfrKcLK9rYB0yj53RC8rZIHAV+vKzLHOYNobeQWymii/rv RY6Lw11X0Y7aAPhmoDq90NEIKJhtZnYkRjXJ8s0AXbnZ4XmSzw 2Lxfl5KX752nQ== Cc: "pcp@ietf.org" Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 09:56:46 -0000 >>>=20 >>> In other words, when detecting that a Mobile host disconnects the >>> address >>> allocation function can flush state by some other means. >>>=20 >>=20 >> You are talking about something else. Cleaning state when the MS = leaves. >> I'm talking about setting the lifetime of state when it's created. >=20 > [Reinaldo] I'm assuming you want to do that so there is no state when > Mobile user disconnects. Otherwise could you explain what is the = driver? >=20 What you are describing is the "trigger to clean up state when the = network detects MS has detached". What I'm talking about is the "trigger to clean up state based on a = timer". Both are needed, and used. The latter is primarily for covering the case when the network cannot = detect detachment. And it's also for the case the service is authorized for a fix amount of = time and is not extensible. >>=20 >> I'm saying the network operator can assign lifetime to various states >> such that they are all aligned with the "mobile host's network access >> session". >> This is how we typically design the cellular architectures (3GPP, = 3GPP2, >> WiMAX, etc.) FYI. >>=20 >>>=20 >>>>=20 >>>> Network access session, >>>> PCP session (I mean, the state associated with PCP, which is PCP = SA, >>>> etc.), and >>>> the state created by the PCP (the NAT mapping, firewall rules) are = all >>>> synchronized. >>>>=20 >>>> They all expire at the same time. >>>>=20 >>>> This is typically how sessions are managed in mobile/wireless = network >>>> architectures and deployments. >>>=20 >>>=20 >>> [Reinaldo] >>>=20 >>> Today CGN is heavily deployed in wireless networks and in general = NAT or >>> Firewall mappings survive after user disconnects. They go away due = to >>> idle >>> Timeouts.=20 >>>=20 >>> There are a few CGN implementations with subscriber awareness that = on >>> receiving a Radius >>> Stop flush all NAT state. >>>=20 >>> But I'm personally not aware of any implementation where the NAT = mapping >>> time is the=20 >>> remainder of the Mobile Host session time. >>>=20 >>=20 >> Because, none of those "legacy" solutions involve host/subscriber >> authentication with AAA and explicit signaling with the host to = maintain >> state. >> So, I'd not be surprised if we are deviating from todays NAT state >> management. After all, this whole PCP thing is for that=8A.. >=20 > [Reinaldo] Are you suggesting that 'legacy' mappings will go away and = only > authenticated PCP mappings will be used? Nope, I'm not saying this at all. > I would say that a FW or NAT will > have regular outbound mappings, port forwarding, non-authenticated PCP > PEER and MAP, authenticated PCP PEER and MAP. You can only control > lifetime through AAA for the latter two. >=20 We're circling now. All I'm saying is (which btw, does not really have much affect on the = discussion anymore), by using PCP, I can design an architecture where = the state created by PCP can have lifetime set to the lifetime of the = mobile host's network access session. For example, a firewall rule = created by the host may have its lifetime set to current network access = session (e.g., 24 hours). =20 Alper >>=20 >> Alper >>=20 >>=20 >>=20 >>=20 >>=20 >>>=20 >>>>=20 >>>>=20 >>>>>> You seem to be saying this is impossible, there's no such a case. >>>>>=20 >>>>> The important word is "practially". Given the current state of NAT >>>>> affairs, I don't see how it would be practically possible to move >>>>> authority over a NAT mapping's lifetime to a AAA server. >>>>>=20 >>>>>> Btw, when the PCP signal creates state on the PCP server, what = value >>>>>> of lifetime is assigned to that state? I think you'd say the PCP >>>>>> server >>>>>> decides on its own. >>>>>=20 >>>>> Yes and no. The PCP server is most probably operated by the same >>>>> entity >>>>> that operates the NAT. So their configurations can be expected to >>>>> agree >>>>> with each other. But if their is disagreement, the NAT has the = final >>>>> say. >>>>>=20 >>>>>> A general PCP question: Should the PCP server indicate the = associated >>>>>> lifetime to the PCP client at the time of state creation via PCP? >>>>>=20 >>>>> Unless I'm misunderstanding, it already does. A successful MAP >>>>> response >>>>> contains the created mapping's lifetime. >>>>>=20 >>>>>> And if so, should the PCP server notify the PCP client when the >>>>>> lifetime changes (due to some of those external factors you = listed >>>>>> above)? >>>>>> Without this knowledge, the PCP client cannot properly "maintain" = the >>>>>> state on the PCP server. >>>>>=20 >>>>> Everything about NAT is a hack. >>>>>=20 >>>>=20 >>>> :-) >>>>=20 >>>> I'm seeing PCP bringing some determinism to this. PCP is setting up >>>> state >>>> on the NAT/Firewall, learning the granted lifetime, and even = getting >>>> notified when that lifetime changes, etc. This is becoming more >>>> managed/manageable. >>>>=20 >>>> Alper >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>>> Simon >>>>> --=20 >>>>> DTN made easy, lean, and smart --> http://postellation.viagenie.ca >>>>> NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca >>>>> STUN/TURN server --> http://numb.viagenie.ca >>>>=20 >>>> _______________________________________________ >>>> pcp mailing list >>>> pcp@ietf.org >>>> https://www.ietf.org/mailman/listinfo/pcp >>>=20 >>=20 >=20 From simon.perreault@viagenie.ca Fri Nov 2 04:08:53 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E23A21F9299 for ; Fri, 2 Nov 2012 04:08:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cilqlj9tkczw for ; Fri, 2 Nov 2012 04:08:53 -0700 (PDT) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 01C0A21F9286 for ; Fri, 2 Nov 2012 04:08:52 -0700 (PDT) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id ECF56412FB; Fri, 2 Nov 2012 07:08:51 -0400 (EDT) Message-ID: <5093A9C3.5010903@viagenie.ca> Date: Fri, 02 Nov 2012 12:08:51 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Cc: "pcp@ietf.org" Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 11:08:53 -0000 Le 2012-11-02 10:56, Alper Yegin a écrit : > All I'm saying is (which btw, does not really have much affect on the > discussion anymore), by using PCP, I can design an architecture where > the state created by PCP can have lifetime set to the lifetime of the > mobile host's network access session. This is true. However that doesn't make it tightly coupled. If the NAT can still change the mapping's lifetime without telling the AAA server, then it's still loosely coupled. AAA server giving a "hint" to the NAT about a mapping's initial lifetime: fine. We're still in loosely coupled territory. What happens after mapping creation is what matters. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From bingxuere@gmail.com Fri Nov 2 08:34:22 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1879721F8B14 for ; Fri, 2 Nov 2012 08:34:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2UEbDfUozRfL for ; Fri, 2 Nov 2012 08:34:21 -0700 (PDT) Received: from mail-ie0-f172.google.com (mail-ie0-f172.google.com [209.85.223.172]) by ietfa.amsl.com (Postfix) with ESMTP id 2832921F8908 for ; Fri, 2 Nov 2012 08:34:20 -0700 (PDT) Received: by mail-ie0-f172.google.com with SMTP id 9so5908452iec.31 for ; Fri, 02 Nov 2012 08:34:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=HKdOqOTWgb/XeeA6DHb8nNOsmtZRJwA+rXclcveEn08=; b=ikdnQLA2uZB9G7hbE94QfKKa3xB3CrKpQgTQI1DkBjvNiW9y1fJhtTonn/j2BkFJj7 bzNRhmQx5DVLosC0UwQai7CsHEfILKvSdqBlPoj+rNRWHXCLZZDNBZm9hJVDkl9J37Ed 5wySKRkSL8IBRGtAIw2SeGAI1MFXKpt/ErRyQsYRzd23r3koSxJ3D8tnoUsUrJpYRvng vGm5CKCFya/nMYbAJlFnnBOHZig3lmm3ALori0o8yx5OrJqxgP0WwO/t5IgYoGc+eDL4 MKPAxZFZanLQxB2FKEHKKf7ucHnMw5R0m+wTIbeHdeGaVEMGkflnHdMb0wh/3Ac6LmWH KMaw== Received: by 10.42.247.136 with SMTP id mc8mr1811966icb.36.1351870460471; Fri, 02 Nov 2012 08:34:20 -0700 (PDT) MIME-Version: 1.0 Received: by 10.64.76.200 with HTTP; Fri, 2 Nov 2012 08:33:40 -0700 (PDT) In-Reply-To: References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> <056201cdb89e$bd681170$38383450$@cisco.com> <509363A3.30608@viagenie.ca> From: Qiong Date: Fri, 2 Nov 2012 23:33:40 +0800 Message-ID: To: "Zhouqian (Cathy)" Content-Type: multipart/alternative; boundary=20cf3005dbd0942a7a04cd84de56 Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2012 15:34:22 -0000 --20cf3005dbd0942a7a04cd84de56 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Right, agree with Cathy. MAP_PORT_SET can be sent over IPv4 as well. Sorry for misleading this discussion ~~ Best wishes Qiong On Fri, Nov 2, 2012 at 4:52 PM, Zhouqian (Cathy) wro= te: > Agree with Simon that the message could be sent over IPv4 as well. > In this case, the message is sent using WAN side IPv4 address and the WAN > side address > should be planned well in advance. > > Best Regards, > Cathy > > > > -----Original Message----- > > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > > Simon Perreault > > Sent: Friday, November 02, 2012 2:10 PM > > To: Dan Wing > > Cc: pcp@ietf.org > > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for > > draft-tsou-pcp-natcoord-08.txt > > > > Le 2012-11-02 03:06, Dan Wing a =C3=A9crit : > > > The draft doesn't say the PCP messages are always sent over IPv6. Or= , > > > I can't find that sentence. > > > > It doesn't because it wouldn't be true. MAP_PORT_SET can be sent over > > any address family, just like MAP. > > > > Remember: the only difference is that MAP gets one port, while > > MAP_PORT_SET gets multiple ports. > > > > Simon > > -- > > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > STUN/TURN server --> http://numb.viagenie.ca > > _______________________________________________ > > pcp mailing list > > pcp@ietf.org > > https://www.ietf.org/mailman/listinfo/pcp > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > --=20 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Qiong Sun China Telecom Beijing Research Institude Open source code: lightweight 4over6: *http://sourceforge.net/projects/laft6/* PCP-natcoord:* http://sourceforge.net/projects/pcpportsetdemo/ * =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --20cf3005dbd0942a7a04cd84de56 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Right, agree with Cathy. MAP_PORT_SET can be sent over IPv4 as well.
Sor= ry for misleading this discussion ~~

Best wishes
Qiong


On Fri, Nov 2, 2012 = at 4:52 PM, Zhouqian (Cathy) <cathy.zhou@huawei.com> wro= te:
Agree with Simon that the message could be s= ent over IPv4 as well.
In this case, the message is sent using WAN side IPv4 address and the WAN s= ide address
should be planned well in advance.

Best Regards,
Cathy


> -----Original Message-----
> From: pcp-bounces@ietf.org= [mailto:pcp-bounces@ietf.org] = On Behalf Of
> Simon Perreault
> Sent: Friday, November 02, 2012 2:10 PM=
> To: Dan Wing
> Cc: pcp@ietf.org
> Subject: Re: [pcp] Fw:I-D Action: New Version Notification for
> draft-tsou-pcp-natcoord-08.txt
>
> Le 2012-11-02 03:06, Dan= Wing a =C3=A9crit :
> > The draft doesn't say the PCP messages are always sent over I= Pv6. =C2=A0Or,
> > I can't find that sentence.
>
> It doesn't because it wouldn't be true. MAP_PORT_SET can be se= nt over
> any address family, just like MAP.
>
> Remember: the only difference is that MAP gets one port, while
> MAP_PORT_SET gets multiple ports.
>
> Simon
> --
> DTN made easy, lean, and smart --> http://postellation.viagenie.ca
> NAT64/DNS64 open-source =C2=A0 =C2=A0 =C2=A0 =C2=A0--> http://ecdysis.viagenie.ca=
> STUN/TURN server =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 --&g= t; http://numb.viagen= ie.ca
> __________________= _____________________________
> pcp mailing list
> pcp@ietf.org
> https://www.ietf.org/mailman/listinfo/pcp
_______________________________________________
pcp mailing list
pcp@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/pcp



--
=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Qiong Sun
Chin= a Telecom Beijing Research Institude


Open source code:
lightw= eight 4over6: http://sourceforge.net/projects/laft6/
PCP-natcoord: http://sourceforge.net/projects/pcpportsetdemo/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

--20cf3005dbd0942a7a04cd84de56-- From zhang_dacheng@hotmail.com Sat Nov 3 07:46:50 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7C52221F9A82 for ; Sat, 3 Nov 2012 07:46:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 3.67 X-Spam-Level: *** X-Spam-Status: No, score=3.67 tagged_above=-999 required=5 tests=[BAYES_50=0.001, J_CHICKENPOX_83=0.6, MIME_CHARSET_FARAWAY=2.45, RCVD_IN_SORBS_WEB=0.619] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FZS7nPYHvOIl for ; Sat, 3 Nov 2012 07:46:49 -0700 (PDT) Received: from blu0-omc3-s10.blu0.hotmail.com (blu0-omc3-s10.blu0.hotmail.com [65.55.116.85]) by ietfa.amsl.com (Postfix) with ESMTP id 8287021F99DE for ; Sat, 3 Nov 2012 07:46:49 -0700 (PDT) Received: from BLU0-SMTP139 ([65.55.116.73]) by blu0-omc3-s10.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675); Sat, 3 Nov 2012 07:46:48 -0700 X-Originating-IP: [123.125.157.38] X-EIP: [QlUZU2LL8koR1AXjHriC8PwIsH0GsKAv] X-Originating-Email: [zhang_dacheng@hotmail.com] Message-ID: Received: from [192.168.1.101] ([123.125.157.38]) by BLU0-SMTP139.blu0.hotmail.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Sat, 3 Nov 2012 07:46:45 -0700 MIME-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset="GB2312" From: Dacheng Zhang In-Reply-To: <5087EB64.70607@viagenie.ca> Date: Sat, 3 Nov 2012 22:46:39 +0800 Content-Transfer-Encoding: quoted-printable References: <67054721-2DED-4023-89E2-F8E3692A6117@yegin.org> <3644979.ovSNnDyzia@porto.nomis80.org> <5087EB64.70607@viagenie.ca> To: Simon Perreault X-Mailer: Apple Mail (2.1278) X-OriginalArrivalTime: 03 Nov 2012 14:46:47.0047 (UTC) FILETIME=[0CABD170:01CDB9D2] Cc: pcp@ietf.org Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2012 14:46:50 -0000 =A3=AB1 =D4=DA 2012-10-24=A3=AC=CF=C2=CE=E79:21=A3=AC Simon Perreault =D0=B4=B5=C0= =A3=BA > Le 2012-10-24 07:41, Alper Yegin a =A8=A6crit : >> When the AAA server authenticates and authorizes "joe@domain", it's = basically telling the following to the NAS (the PCP server): >> - This fellow is authorized to use PCP with you, >> - Next time he wants to send a PCP request to you, you can = authenticate and authorize him by using the following session = credentials (MSK, or an MSK child key + an id [session id]). You don't = have to come back and ask me to authenticate and authorize. >> - This session credential is good for duration of X. (this is the = authorized lifetime of joe to be using PCP with the PCP server). After X = has passed, throw the session credential away, it's useless. >> - Feel free to come back to me to re-auth and re-authorize anytime = before X has passed. You'll get a new session credential, and a new = lifetime. >=20 > I'm following you up to here. >=20 >> Now, a mapping created by Joe using PCP can have a lifetime of Y. >>=20 >> It makes a lot of sense that X =3D=3D Y. >=20 > In my previous email I tried to explain why X =3D=3D Y does not make = sense to me. >=20 >> It can also be that Y < X. PCP server can have a reason to require = that. >>=20 >> And there may be cases where Y > X. >> We need to be talking about where this makes sense. >> For example, in firewall configuration by an admin, this makse sense. >> For a mobile subscriber accessing wireless network whose apps are = creating NAP mappings, this does not make sense. Network resources are = tightly controlled, and the PCP clients come and go. >=20 > I would expect Y to have no link whatsoever with X, and would advise = to design an auth protocol that has absolutely no expectation on Y. >=20 >>> Because PCP is just one way to manipulate NAT mappings. Others = include: >>> - ordinary traffic using the mapping >>> - NAT administration interface >>> - other mapping control protocols that may be enabled simultaneously = with PCP >>>=20 >>=20 >> Please see above. >=20 > I'm sorry but I fail to see how your reply above addresses what I = wrote. >=20 >> We can talk about different uses of PCP and how it may impact the = relationship between X and Y. >=20 > Why would there be any relationship at all? There can't be, because = PCP is just one way to manipulate NAT mappings. >=20 >>>> Why would you want to toss away your EAP session when the PCP state = is still >>>> up? >>>=20 >>> There is no such "PCP state". There is only NAT state, which is = independent >>> from PCP. >>>=20 >> Let me expand on this: >>=20 >>> There is PCP state that we now have due to PCP SA (Security = Association), >>> And there is the network state created by PCP signaling (which can = be NAT or firewall state). >=20 > Right, this is a good precision. With this precision, my point is to = be understood as meaning that the network state, in the NAT/firewall, = has no PCP-specific component. >=20 >> Depending on the scenario,the two may be tightly coupled, or loosely = coupled. >=20 > I'll reiterate my current position: so far it seems clear to me that = we need loosely coupled, and I have seen no use case for tightly = coupled. >=20 >> We are going beyond today's NAT operation with the introduction of = "authenticated signaling setting up and maintaining NAT tables". >=20 > I'm not sure what you mean exactly by this, but I'm afraid that = changing current NAT practice is going to be an uphill battle. >=20 >> I think you are referring to the following in your above concern: >> - PCP creates the NAT mapping >> - Application traffic maintains the mapping >> - So, even after PCP SA is expired, we cannot remove the mapping = because now the mapping is in use and maintained by the app traffic. >>=20 >> Is that it, or something else? I'd appreciate if you can elaborate. >=20 > That's one use case for loosely-coupled. Others I've hinted at: >=20 > - Protocols other than PCP can be used to manipulate mappings. Even = more: multiple protocols can be used to manipulate a single mapping. >=20 > - A NAT administrator may want to change mapping lifetimes. An = administration script (cron job) could want to do this. >=20 > - NATs have complex behaviours and may decide to change a mapping's = lifetime because of arbitrary traffic patterns, because of load = conditions, because of the time of day, because of the weather, or just = because it feels like it. >=20 > My point is basically that the NAT is authoritative for a mapping's = lifetime. Practically, this authority can not be moved to a AAA server. >=20 > Simon > --=20 > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp >=20 From dxhbupt@gmail.com Sun Nov 4 01:11:19 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5916121F86B2 for ; Sun, 4 Nov 2012 01:11:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hSf6pRBmIjef for ; Sun, 4 Nov 2012 01:11:18 -0800 (PST) Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id F0FE521F86A4 for ; Sun, 4 Nov 2012 01:11:17 -0800 (PST) Received: by mail-lb0-f172.google.com with SMTP id k13so3747328lbo.31 for ; Sun, 04 Nov 2012 01:11:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=jIBchsvoRwIXVdf3tnMOHv4rfznLFpQfXOA2dvUoHwU=; b=INBDQRonGGd9nZVoYl+Tp8mRFWvK7Feetv/WkKu0M39ONC0U8xAeO3iak3hBFwSZKG ifxjqmTdnU5pBJTSiKE4aer575s8EZ9PenpXhIWwcuWYfpOZKCgJSh4FyK3xPQwmVMZe R5IRX8XP/8pyERaoX+qUSCkD6QIodBrdL+5jVWJ1xMAXkF1V0tQqkCru1EvrLRC34eYv yln4JcDrJ95/X13+RaK7oeFyvSgV7UoAAQ6Zv8y5FUcoWDpm2HzmFWCc4nN4aoTcNe3T MynqQbJ9UsU+evXurzUlzIQrRrCEwiL97ZNZ1/TiNt1IvVvnSjQqp0Sx/JixLhlKtX5k EtgQ== MIME-Version: 1.0 Received: by 10.152.108.197 with SMTP id hm5mr6123747lab.45.1352020276719; Sun, 04 Nov 2012 01:11:16 -0800 (PST) Received: by 10.112.98.134 with HTTP; Sun, 4 Nov 2012 01:11:16 -0800 (PST) In-Reply-To: References: <0c8701cdb792$8ee8c4a0$acba4de0$@cisco.com> <01ac01cdb840$0ef753c0$2ce5fb40$@cisco.com> <5092A3EB.2030500@viagenie.ca> <046101cdb872$e9c448f0$bd4cdad0$@cisco.com> <5092E3EF.7090308@viagenie.ca> <04a301cdb881$f26cc900$d7465b00$@cisco.com> <056201cdb89e$bd681170$38383450$@cisco.com> <509363A3.30608@viagenie.ca> Date: Sun, 4 Nov 2012 17:11:16 +0800 Message-ID: From: Xiaohong Deng To: "Zhouqian (Cathy)" Content-Type: multipart/alternative; boundary=bcaec54fbd3a52b0dc04cda7c0b8 Cc: "pcp@ietf.org" Subject: Re: [pcp] Fw:I-D Action: New Version Notification for draft-tsou-pcp-natcoord-08.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Nov 2012 09:11:19 -0000 --bcaec54fbd3a52b0dc04cda7c0b8 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable On Fri, Nov 2, 2012 at 4:52 PM, Zhouqian (Cathy) wro= te: > Agree with Simon that the message could be sent over IPv4 as well. > In this case, the message is sent using WAN side IPv4 address and the WAN > side address > should be planned well in advance. > Right. Address family doesn't matter, because in either IPv6 or IPv4 case, PCP is as a means to obtain external IP plus port set information, other than performing address assignment role. Cheers, Xiaohong > > Best Regards, > Cathy > > > > -----Original Message----- > > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > > Simon Perreault > > Sent: Friday, November 02, 2012 2:10 PM > > To: Dan Wing > > Cc: pcp@ietf.org > > Subject: Re: [pcp] Fw:I-D Action: New Version Notification for > > draft-tsou-pcp-natcoord-08.txt > > > > Le 2012-11-02 03:06, Dan Wing a =E9crit : > > > The draft doesn't say the PCP messages are always sent over IPv6. Or= , > > > I can't find that sentence. > > > > It doesn't because it wouldn't be true. MAP_PORT_SET can be sent over > > any address family, just like MAP. > > > > Remember: the only difference is that MAP gets one port, while > > MAP_PORT_SET gets multiple ports. > > > > Simon > > -- > > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > > STUN/TURN server --> http://numb.viagenie.ca > > _______________________________________________ > > pcp mailing list > > pcp@ietf.org > > https://www.ietf.org/mailman/listinfo/pcp > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > --bcaec54fbd3a52b0dc04cda7c0b8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable

On Fri, Nov 2, 2012 at 4:52 PM, Zhouqian= (Cathy) <cathy.zhou@huawei.com> wrote:
Agree with Simon that the message could be sent over IPv4 as well.
In this case, the message is sent using WAN side IPv4 address and the WAN s= ide address
should be planned well in advance.

Righ= t. Address family doesn't matter, because=A0in either IPv6 or IPv4 case= , PCP is as a means to obtain external IP plus port set information, other = than performing address=A0assignment role. =A0


Cheers,
Xiaohong

=A0

Best Regards,
Cathy


> -----Original Message-----
> From: pcp-bounces@ietf.org= [mailto:pcp-bounces@ietf.org] = On Behalf Of
> Simon Perreault
> Sent: Friday, November 02, 2012 2:10 PM=
> To: Dan Wing
> Cc: pcp@ietf.org
> Subject: Re: [pcp] Fw:I-D Action: New Version Notification for
> draft-tsou-pcp-natcoord-08.txt
>
> Le 2012-11-02 03:06, Dan= Wing a =E9crit :
> > The draft doesn't say the PCP messages are always sent over I= Pv6. =A0Or,
> > I can't find that sentence.
>
> It doesn't because it wouldn't be true. MAP_PORT_SET can be se= nt over
> any address family, just like MAP.
>
> Remember: the only difference is that MAP gets one port, while
> MAP_PORT_SET gets multiple ports.
>
> Simon
> --
> DTN made easy, lean, and smart --> http://postellation.viagenie.ca
> NAT64/DNS64 open-source =A0 =A0 =A0 =A0--> http://ecdysis.viagenie.ca
> STUN/TURN server =A0 =A0 =A0 =A0 =A0 =A0 =A0 --> http://numb.viagenie.ca
> _______________________________________________
> pcp mailing list
> pcp@ietf.org
> https://www.ietf.org/mailman/listinfo/pcp
_______________________________________________
pcp mailing list
pcp@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/pcp

--bcaec54fbd3a52b0dc04cda7c0b8-- From alper.yegin@yegin.org Sun Nov 4 12:18:10 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB76321F85F0 for ; Sun, 4 Nov 2012 12:18:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.353 X-Spam-Level: X-Spam-Status: No, score=-102.353 tagged_above=-999 required=5 tests=[AWL=0.246, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lgZrBEP8NpIJ for ; Sun, 4 Nov 2012 12:18:10 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 166FF21F85C2 for ; Sun, 4 Nov 2012 12:18:10 -0800 (PST) Received: from [192.168.2.4] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0MSMfj-1TxO3V2l35-00TQED; Sun, 04 Nov 2012 15:18:06 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=windows-1252 From: Alper Yegin In-Reply-To: <5093A9C3.5010903@viagenie.ca> Date: Sun, 4 Nov 2012 22:17:31 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <13FCF043-A36C-4C13-AAB0-EEE896E11964@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> <5093A9C3.5010903@viagenie.ca> To: Simon Perreault X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:O/KwxnpTNxRimfPf3D8WMkBnjrcAZeOrmwASQ5HBiGo zPWE2tZqgulhRGAhTJHQna/K6Y5+CGwW7cMRAWJ7XXPcArFney F+5wuJSMRhIQmnlp0XOsHdnHw2wMk7QnIYdv3s+KotQCLHUoa4 BVeUPYKs6iRySkhfL1kbYKq6bFleqo+G3nDju7OQf1uurXrSoU RIhsdHJsoib4xJ7R/ex5GM9/xf62ojIiiUlrHULlma6nbo8Hrl McPtYT8n9QyET1QxUhnteQZ6j/cNJEbJ882ymX1NruRpNAGhPr x+qJ/9XrsIcMMSaxdAd1v6ibAgGF9U3pVLUskBrm5E3n7EmzY8 Ecr4S6sVjdSQc+8V1BT32TOoPWfbncXVQFADqyLns8gH6s9/zT DIpc6lUhKCHMQ== Cc: "pcp@ietf.org" Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Nov 2012 20:18:11 -0000 On Nov 2, 2012, at 1:08 PM, Simon Perreault wrote: > Le 2012-11-02 10:56, Alper Yegin a =E9crit : >> All I'm saying is (which btw, does not really have much affect on the >> discussion anymore), by using PCP, I can design an architecture where >> the state created by PCP can have lifetime set to the lifetime of the >> mobile host's network access session. >=20 > This is true. However that doesn't make it tightly coupled. If the NAT = can still change the mapping's lifetime without telling the AAA server, = then it's still loosely coupled. >=20 I gotta tell you, the way these terms (loosely and tightly coupled) on = Margaret's slides have issues. I'd agree with your above statement if I can disregard the definitions = on those slides. > AAA server giving a "hint" to the NAT about a mapping's initial = lifetime: fine. We're still in loosely coupled territory. >=20 > What happens after mapping creation is what matters. >=20 1. In NAT case, there are multiple actors affecting the mappings, hence = I understand the lifetime of mappings cannot be exclusively dictated by = the AAA.=20 We need to define how the lifetime is managed, and how the relevant = parties get to know about it (and if they need to know about it). For example, PCP client needs to know if the mapping lifetime changes, = and it does know thru PCP. How about the AAA server? Does it need to know, or not? It depends on = what it meant by sending a lifetime value. Is it was just a hint, it = does not care if the NAT did something else. If it was meant to be an = authoritative value, then at least a change in the effective value needs = to be notified to the AAA server, if not confirmed. Not sure if these = are needed. 2. In firewall case, I think lifetime of the rule can be dictated by the = AAA. Or at least, there exist some use cases where the AAA server would = like to control the lifetime (as in my examples). Alper > Simon > --=20 > DTN made easy, lean, and smart --> http://postellation.viagenie.ca > NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca > STUN/TURN server --> http://numb.viagenie.ca From Markus.Isomaki@nokia.com Sun Nov 4 18:16:46 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E97BF21F8954 for ; Sun, 4 Nov 2012 18:16:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9klQGqQ7r5oK for ; Sun, 4 Nov 2012 18:16:46 -0800 (PST) Received: from mgw-sa02.nokia.com (smtp.nokia.com [147.243.1.48]) by ietfa.amsl.com (Postfix) with ESMTP id D712421F8937 for ; Sun, 4 Nov 2012 18:16:45 -0800 (PST) Received: from vaebh102.NOE.Nokia.com (vaebh102.europe.nokia.com [10.160.244.23]) by mgw-sa02.nokia.com (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id qA52GhVM020617; Mon, 5 Nov 2012 04:16:43 +0200 Received: from smtp.mgd.nokia.com ([65.54.30.48]) by vaebh102.NOE.Nokia.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 5 Nov 2012 04:16:43 +0200 Received: from 008-AM1MPN1-041.mgdnok.nokia.com ([169.254.1.221]) by 008-AM1MMR1-014.mgdnok.nokia.com ([2002:4136:1e30::4136:1e30]) with mapi id 14.02.0318.003; Mon, 5 Nov 2012 02:16:46 +0000 From: To: , , Thread-Topic: Comments on draft-reddy-pcp-optimize-keepalives-00 Thread-Index: Ac26ICGtepI7C2jMS3WSr/1EfDkumAA0bIyA Date: Mon, 5 Nov 2012 02:16:42 +0000 Message-ID: References: <9B57C850BB53634CACEC56EF4853FF653B8EB511@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> In-Reply-To: <9B57C850BB53634CACEC56EF4853FF653B8EB511@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.163.54.182] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 05 Nov 2012 02:16:43.0128 (UTC) FILETIME=[99123F80:01CDBAFB] X-Nokia-AV: Clean Subject: Re: [pcp] Comments on draft-reddy-pcp-optimize-keepalives-00 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 02:16:47 -0000 Hi Dave, Thanks for your review. See comments inline. Dave Thaler [mailto:dthaler@microsoft.com] wrote: > >1) The document is nominally about optimizing keepalives to conserve >power, and Section 3.3 is the core section about keepalive optimization. >However, >that section doesn't actually say anything that would result in any >optimization. True. The current version misses this explanation. And I agree it should be= pretty much the crux of the draft. >It basically just says you can send PCP messages instead of application la= yer >messages, but just changing the packet format doesn't save power. The mai= n >issues that it needs to discuss are as follows: >* Simply using PCP instead of an app-layer message doesn't optimize for >power. >Power is optimized if keepalive messages (whether PCP or app-layer) are se= nt >less often >* App-layer keepalive messages typically still need to be sent to keep ser= ver >state alive >* Sending PCP messages less frequently than the application needs to keep >the server state alive isn't useful, since the keepalives to refresh serve= r state >will refresh middlebox mappings. >* Thus using PCP only optimizes power if the PCP message interval is stric= tly >longer than what the app would normally use the keep middlebox state alive= , >and strictly shorter than the server state refresh interval. >* Since PCP is not ubiquitously deployed in every middlebox already >(obviously) an app has to have its own app-layer algorithm regardless. An= d to >optimize power, some apps already do their own dynamic detection algorithm >(e.g., [RFC4380] >section 5.2.7 has one such algorithm, and undoubtedly there are others). >Where >power is important (where isn't it? :) such algorithms are what all apps >probably ought to be doing anyway. >* With such an algorithm, using PCP for keepalive interval detection only >provides benefit when a middlebox gives a longer mapping timeout as a resu= lt >of using PCP than connections without PCP. > >Since we want PCP to be successful [RFC5218] for keepalive optimization, I >believe it follows that we need to strongly encourage middleboxes to grant= a >noticeably longer timeout when refreshed with PCP messages than when >refreshed with >data packets. But I'm not sure such a requirement/recommendation is in a= ny >document (maybe it is, but I didn't see it from a quick glance). > >(Of course this might also beg the question of what happens if every >connection Then uses PCP, does that cause any problems?) > >Separately, there is a potential argument that using PCP can help an app's >keepalive interval detection algorithm converge more quickly, but that's >usually a startup-time thing and not a steady-state thing and so any power >savings due to faster convergence may be negligible. > I agree with the above. In most cases the application will need to send som= e kind of end-to-end heartbeat anyway. What we need is a way to set the NAT= /FW timers long enough so that no *additional* keep-alives would be needed = just for their sake.=20 I admit it is not entirely clear to me how PCP can or should be best used f= or this purpose. If I've understood correctly PCP actually can't be used to= tell the NAT "keep this binding as long as you see any traffic on it at le= ast every N seconds", i.e., control the implicit mapping timeout. It can on= ly tell the NAT "keep this binding for the next N seconds". Is this correct= ? If so, the best approach is probably to set the binding lifetime as long = as possible via PCP so that the PCP refreshes would be as infrequent as pos= sible, and set the application heartbeat timeout to maximum value. A furthe= r optimization is to send the PCP refresh and the app timeout at the same t= ime when appropriate.=20 If the PCP binding lifetime were for example 4 hours, and app heartbeats wo= uld be sent once an hour, the message sequence would thus be: --> app connection setup (t=3D0) --> PCP PEER (t=3D0) --> app heartbeat (t=3D1h) --> app heartbeat (t=3D2h) --> app heartbeat (t=3D3h) --> PCP PEER + app heartbeat (t=3D4h) Without PCP the app would have to send heartbeats (or other types of keep-a= lives) as frequently as needed by the NAT, most likely more often. And even= if the NAT would have a default binding lifetime of >1 hour, it might be h= ard for the app to *reliably* detect this. >2) The document does not explain how to detect firewalls. Indeed it says = that >"Firewalls can not be detected this way" and then goes on to say what woul= d >happen >if the app determines that "all NATs and Firewalls on its path support PCP= ". >The >obvious problem is that if there's no way to know whether all firewalls on= the >path support PCP, then you cannot use this draft. > Yes, this would be major showstopper. My co-authors have some ideas how we = could solve it, I believe. >3) Section 4.2 discusses HTTP and websockets. Such protocols are used fo= r >persistent connections because they go through HTTP proxies. However the >section only discusses NATs, without any mention of HTTP proxies (or >firewalls, for that matter). I believe it needs to discuss having HTTP pr= oxies be >PCP servers, and how the client then uses PCP in that case. > Proxies also complicate the detection of PCP-unaware NATs, as we can't ask = the proxy which source IP:port it sees on the TCP connection in the same wa= y as we can do with an HTTP server.=20 >Note that since hosts do have ways to discover and/or be configured with >proxy addresses, this would be another potential PCP server discovery >mechanism >besides DHCP and default router list. Should proxy addresses be used whe= n >DHCP and the default router don't respond to PCP? > Interesting. I haven't thought that we could use PCP to set the HTTP proxy = TCP connection lifetimes. Would the PCP semantics be compatible with what i= s needed for that usage? >-Dave From repenno@cisco.com Mon Nov 5 02:16:57 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81DEA21F867A for ; Mon, 5 Nov 2012 02:16:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.298 X-Spam-Level: X-Spam-Status: No, score=-10.298 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U9LYKxejUpYl for ; Mon, 5 Nov 2012 02:16:56 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 4F0E421F866B for ; Mon, 5 Nov 2012 02:16:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=180921; q=dns/txt; s=iport; t=1352110615; x=1353320215; h=from:to:cc:subject:date:message-id:in-reply-to: mime-version; bh=J4CStoC4xPbMfq6rgfyNIMB8BryqF7X9hqUs1llIIdk=; b=fgcJ8yCVvkJ2fRQPrR6mY4AUm8RPM14vRkfXLXbsD6yw/Sfe4gz4DaoU mGg2Ja1xGJCwU9PPthuBvWeIDAuHQbT+LgkYjfz4s3HM5xL+N+l6Njm0D zvvmDmmKmvG9iPY1pZV51ZdrP9TAWbNoqLSKGA491PtpATHqR3MAh172R s=; X-Files: draft-boucadair-pcp-capability-01-repenno.pdf : 130897 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAHqRl1CtJXG+/2dsb2JhbABEgknAeYEIgiABBBIBMjQSAQsBAhwmGBglAgQODQYUh2iaIp8/kVxhA457lVmBa4Jvghk X-IronPort-AV: E=Sophos;i="4.80,714,1344211200"; d="pdf'?scan'208,217";a="138597882" Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-1.cisco.com with ESMTP; 05 Nov 2012 10:16:54 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA5AGsLM030232 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 5 Nov 2012 10:16:54 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.02.0318.001; Mon, 5 Nov 2012 04:16:54 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-boucadair-pcp-capability-01 Thread-Index: AQHNuz6trhCHD7jfe02Yst1TtjeM+w== Date: Mon, 5 Nov 2012 10:16:53 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604136763@xmb-rcd-x04.cisco.com> In-Reply-To: <0AE0D2CA-70BE-40C0-B269-417E453DD9D8@yegin.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.64.238] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19340.004 x-tm-as-result: No--27.196400-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/mixed; boundary="_004_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_" MIME-Version: 1.0 Cc: "Tirumaleswar Reddy \(tireddy\)" Subject: [pcp] Comments on draft-boucadair-pcp-capability-01 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 10:16:57 -0000 --_004_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_ Content-Type: multipart/alternative; boundary="_000_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_" --_000_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, My review comments on the above mentioned draft. Regards, Reinaldo --_000_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <5EDADCA69F87E74A88699AECD83720D3@cisco.com> Content-Transfer-Encoding: quoted-printable
Hello,

My review comments on the above mentioned draft.

Regards,

Reinaldo
--_000_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_-- --_004_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_ Content-Type: application/x-msword; name="draft-boucadair-pcp-capability-01-repenno.pdf" Content-Description: draft-boucadair-pcp-capability-01-repenno.pdf Content-Disposition: attachment; filename="draft-boucadair-pcp-capability-01-repenno.pdf"; size=130897; creation-date="Mon, 05 Nov 2012 10:16:52 GMT"; modification-date="Mon, 05 Nov 2012 10:16:52 GMT" Content-ID: <6C95E9A1BD23364989397B70EDBC8394@cisco.com> Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHdXVtv20iafdevKORhNw30Mize2W+Jk94NkIsnUe9gMOkH WaIcTkuiQlJJDMyP31Mki2SJtyKlsolNA7GSsO3D736rr76Rv5FvhFqakf2m6zoltmdqDnEd9nsc kL+TA3lxk1CyToiu+ZavU99p+7RI1sQyHM0wHUJtV/MNPEcdS/OoZRHHxP+cfcNt/Wc6mmcRy3M1 26keWQg/k+j4D9/7G34o9amR/bn46LLvrluAix9sOq5B1nvyaokndd0xyHK9MM3s+eLLck9eLJdU 0wklyy15Tq7065fF8l/kzRJvVqNn67uJ9Ox7N9PGS3oAzt9tkb/bwBv9QqSgLM5Z2welIjP1NapT RyDzYrkmA6AyMqtA5ruaa3vUJ66ITMCzaLBdEkpD/hdSskip5kEJetm1yAXwn1ORMHZBoTzHcG2m ea3a4WkOpIgRp46oVI4urhXYXkfr5BJ4UNpFGyzf1HzTtL2JsP4kSolGdVuzdNeaiC79mV5IM/Jt 0TR0lMKaeBTGQGClIObkXMz/fYlZ4sLVZXqpoWuubpfCVVinQeEqLO9xs5Wk0yhLRU1Do67fLlvD hkpetlpRDdLMglO1TVfkIthdeKsuhSxotoxX67+CWAndXF2D8xaBSbtRebLBoja9+yDZPJgv3y9F baT3ebNfhTsVRDN0RBLGuU6W3ByIPRQTzaCGZvnOVKK9DrdbqoRoJtUQmol2bC40g37qvnkJzQwl NHMMzaCTeSkvaZOsmuHCqvn6mc2VtmofwlQ2zGiF1+WgDM/TfM9vV08ZVyDmBir4WoX43V5dMnjV jMHkjQWvdVPrsvAQqZmr+5prGh6yNo3lbEX0gQRhS/JoyKg/RDULeVb+EGMIHkIo4PhI5KrvVH+I RdF4iPk+q/6dkLK5jid+J2bpvfpDLKznPy3/RplhcwXc4jOLLTGYIjtOHZH4DABlYmsLqBvvv7he OlflULqF96bOyIBJlMbpf7okJuxStUqOxXfrD0+JCpUqyewgNYT/Gxkr/G8QJ2F0SH67CFxdy9oy IEohnrbjEgGktMXUdRWUKwN6AZQYkkoaI4nKx7kxaiWTYWm2qaMy1MJLFHcGsOmy8cuoNL/MMKaB mqy4SvW2eJcLKkxN/9PqrOuakWuBjtqgb2umDwfkwkNwh1B4DSYCBhxC6zO5+1FgoxHOoI6pW/8f bfTZuz2pjfYMCARYXq/aDodmtze35O9R/Fd4uCf/HUen4wileq8pUSTEbz7yeqd4oQsUqWk7WxWp 0xUjiEN0UUEZSdtX0Wm92qxCJVWGMk7gdCrACTJ4XR/TRacqTnBtFBdgheoyOOxc3h7SID4EU4p9 C9ZJ6Su3lyVIR8QmkKmq9hXl2v+SDAoa3q4fig9DaFDCoYy0iK/j1TYdoZ7k93h1WAdkGeyCdbRX oqu8r3L2Sh3U5Z0iSeqOUtZKCB3kYsZoQ8iE8LAJNiRJV+kJQevndHXYrOJNQrJa4RDhlxr5FGw2 D2rJXLzb09nEGpmpZtq+2CUc9jdvfh7DOAB5Xx7jcIdM9leC0p85RN36v9+EyTpSTOb83eZAZtti ZbSxuVedXuJnFbpHIRWGzZKLa6Nl2GuI0QMrGuxN1z7KFpcFLY54pC3+uE6juyAmlGbyW69UXg1j 5eELqs5BHC1Xw9AC13rBzj92sGGi1GaXmiFAaTj0uhBVUxoXClFlC9EpszxvpAyVelkT8D5so9wh RSEyDzZybEJINmymPwVpHAbfWVaQfg3Izeq4ugt3YRoGCYm2ZEWQNzDYiysPahiWo/nUszHAUidp B3OLeEI2WhtFQNgzzbVMRGuTCLiODmkc7XYIKF6DjutABZPNMkERMArUemytNFD4ZUWGcSlAqQvV BxUEozBfluuZxGmDOawWGxaCKwHmOJqjU9RmRGD9rJQV/IZr7Ju9oUX7+gxJ2VYcqBTejUx669gG szkDNXHPchFo9JCpYfwnk6kvmzN0pBkuOtYcykjrf1wfVQiSgf4RtRyYrR4KNWzCZAr1CZJhYDjJ 1VE+EaHIStKaO50HSUKNEyXeBz5DJ2jcI4kSlF+3MAnIoYwUJeni/DgHyFvRHNUcCkzUg3TzGmc/ qxSHfFTPuqsjWfXyLkkxeaTGh/BpO6fANgeG6ehUU3SmZQY41XLM9jHWbFNjJMfEBPRq8bmH4W7P Mg3CYQkB03AksvwaJmQTrU/74JCS4CcrXiXkNopTcpOHnuQ2jtJoHe3Il+eI1r/8Qn6E6dcsnM9j +QeSqi2j8FcrKN6hro9SFLQ9pENsQqIelg5TWTnzp8GKpWvloyx+OQA+kVosYwwyAStdd5EvFtli MdZ/tQpJGYNxwFKSJhvsjKJdOSLIoYyUtFq+uMnyxd/Izcvbl6/evnu7/Ect/rka7UxEZxaqBDij kquGFO1kTfQo2pV1FBstP51iRmluWjoJ1sdjivEXrca8q3mPcujljGKCiW1E+bLMq8fR2VGlvii/ Yh4+uRbOHs3A1TtI88eW4z4F305oTTB/mpB3q8P9aXXPqzaYXbveZAS1bczhuTbB1FIFU2BdlXc8 jnd0MLGOIao21j22FNkmInzBADQayKDO4vzomaSWNUSb6BDujjM/VYw2BdQSddO/ggfyI2I9xGfv //i8fPZr/pV8+Jh9/vTmb3+8/fTmNfv7z//z8t278kP+hJIml2VgEMwidvZOczD6FoYG2AzqzIz+ NFjg48c/3hUcZZ8qXt98fP/+zYfXObvfv/wHmI0OM3n28Xb59uOHl++ekfCA6ClM1LCdZT+eQ+zi vebAeRMlNN2bXVA+DVaZjK0wo43MSsHZ0Wzum515skWIgu94HINdVtLPoMgW9+4CSDvGfo7IZdAj WSGZDZJ1HN7hD1CDS6hXn4tsG4U1eLlNhC49Mvzp9xtiUOpfgrHL5eDMAA4SoP8lYhuoucuSq+H9 +gI7U0dQgOZXL5QqUHmMQ7iYIkXVxPXOIXUIXSNOAOdGMO6MWhmtOmMFE0exdEdvUKsDWkNJ/5TN E85QZfFLDyoPB0t9ePseg9HgYbs4NaeSG1BYv4RrHztInWkadgrgxzuazQJMbC5gM0P1YzEZU+36 Q8JhFvwQHEK5XvRd5SvgmIkK3BwcISazDWe0I8SEGibVWD+eRQ3kfbBX5HWKpqktwnwCr1Mxj2IO RYdxmkGymR35ciecQVLhQKqcpYA1MqzO6sojB3JHFXsoTIGuI9zHMgUclUMvt4WFDfMoW7NrmKQ+ D0cxQeQZqICJSGRNdj6PC8VLTnf7MGVhDCKX7Wm3I6jmbaN4n43f8qp7jdvXK+LhSB+CerN8hTkY Mx2TO2fbY2ZQaZ+E6hhH38PsEBuzsjUOjq7kcbfYFfhVslijnnRI+urmlrjeJfg6caFN7rLGiS0Q 8AlsP+UjMiISWW1lqbYkgc6MSB74DTKQL1aYBi/joGxKUQcoPzMjAhM42AgBJ0ejUiMzBZILjFUz GG11QnWmZRpGcUbZRmJjsmjLwIkpOKJ6MEr5oen2h9gPURKMWtmxvTKI6GDOoxSDMciq4WDmyLhB dad0GiqlgQxfIyRCE1j3SHEMXx8kIpG1jFkckxBWtkKtOjsJyGtZRXIREE5I8uZwHx6CIMZksJIy pYkBPw8TPsWrXGAimsPdrSaiy/GVqYblYdKH7T+YV316IqzlKvmL/B7FOBf25fnbN8vfv/yiEfIh SlnjfpWSCOPeMblnJ0ETsl89kNUuicgmxNhSeHdKAyVM561o/k5z4DqbftOxiGVmXJ8G64eSwkC5 fM6ahurc1qAIzO2MEKktrnPmh2K+hbLVKhyulJjJZp6jjAvfdsWRjJSy3GJDb1mPcQfdZNnJ+hTH bBasTsJrH88wi+Yhx/10FDRxUCTrZ3EoBQn73e/EDKC/yFp5CmQotnHmKRrd60ZMIB861eN+DGb0 V6TLSpA1DVYRFqC+Abcg6OPAGbxFbcltvSLc5WnLilAr0OHSwdc0Pf724sVmhXJovtVPC4N0q0Xx /YsNO7CRvCh044US78X7JBy+lFLIJlijzErZH+FQLlCKZoZ1Jn25UogZlq35LKOysKnYwumzbGUx G3Ktp1i9pfxRr1spno0RNnSSL3jdZrTY+rpdMlyDgu0Vvi2mTzOwAfYkWHVfMnIn82BdolzDaonY BAveKEzIuuMG9/oKE+W6Jg6lUOGODKoCVSTktQwqMzjlYHZCvq924YagGIwzk/vVz3B/2jNnnYQ/ Cbo1KlZdlxlUQdaR73JIvypZIVieZuY0noOyWhhZZGv66kH+DJR1GixW4WQZG0YrTkd4w2DzK7Tg uFut2SdIYHSXRLts3OLuoUj0qkQfTn51ULO9ogzViveScpCyIcdEj2FiP5Z9ZqaHQw35UG0UrCpU mwYrDfcBsoG3KUG0Fh5WR/QtsF4DIoBBJHJKqvqNCotTntm2CvRS/JU15KMIWR7a5lAEzR7mLzfk CRRnGyCdUnRuuyx4iPwWXF8zTxgThNdvmujrgVaBC0YzTG9+tnAarD1kHwqwY2YPKrAOs/pWAN+b 1bdQ6jqwmbNnrODJurZQmHuspUm0Zyo0xMRZYRxrQGBcvI2Uhii2gJBBBkmm+y6LpBF0yUkethh4 bHnszLzwNFhTBigyup2nzV2pRpUuiwD7jYesuR3FQt60tkQkHWFzw6Bl1hanEjEwEWRroUh0EPZC SRq8cS6CT3+2gh52EVg3qwSWi3t7qA0TIdKyn6uKFRNmyy31UkBSpUDF3OdkJH15WeWccDuAjd7t yFzmJjo+xOH915Q1OMQdLFcbwanUUcTYQa5HaeGaPtvHhSWwT2/cTcS2vnc2DvT0KdZEWJVAfXm+ xolq1PENwrpo2BF4QhmepWAIMMgRq6+x+ZqEG1Tkw22YT7jjX5REF4aLVU9suLag9QyiC9PFcB+u WRB8+rBxVZ1fTYTFs2SyOqVfozhBrvUSTiszLSxVSIL4e7BRsg0XjNUsC7eyceizYK6B5dKlTguW ruHkJzsGqdjRdLDu2juTsxmYl2mwstixFLZ8svRfwTplKcwlQUe9SN92Ioaik2u6pkdEcs5g/BAm RMPKXPsM2VOchyk3K4lEQm+j9caphiJw31C5i//EOePgfqXkPiWTTwafoZ2irFNaQUyibLSCTNx9 abAgsmXYTkEnCC1hZNqzczuTUGF/C4aPL9H7zhQSA+/Zcshp5GKXemDZ8W6VZvshozwCel0so6kQ X/HGFwMxjuvbJikQz8ELYkGkx84t1csWMwhxRFj9+v7luaR4tZYFhtwKLn6gOispst5Pg1TDXrpo 7KcstA6Cqqm/Qyp3SPhuhqGLYlurA0PQy80yIvSBa+hGFFnG39xXbpgRIRX+Z1jwQhxJkeR2K8m6 jElNNVu4PIwLaRQKsMF2ywIdFIBY/sS6V2iTCnCvNAVmltlSIZQXmJKmY2ylXF3YMp3AiJBpobbC YmjKWgD4C8UjEjjpyM5xzM1YTUJ1PN3BBMD7QFr44UceNSM1u90FK7S8YqxRCn4wccIf+D+r2a2A kl12T0hB5AskqjmG0ipRXbpYFsxMduCWnbydQQXIQLBhzWJpIzIJbCT1FR/5ZfcvURs3TKKh1vjU sWqmYhxmXXGDytjlReVVM+Q/8msoUEnJfhX3LeRl9anVp5b3KN+t68LsKl0q3qhNFKsyclYXXTyX TXMb8UgTIrJXTv4OopcLak0RomxG13l5xT9vsTqK0D8F/9U9NTlKxcs5mjPQ/YHeVLpSlPfpsLXR 4cNA7H4WK+0UsPs32fXsZgFFrQ0uJauSsepTh7RVKs7On7nm2APjI2fxGkI1BXN5exJbBlLDLAjb mRKT57Jh8JUg8lxWhNihxA2weROSm0v+tdq9yP+m9pVf/sGq/1NNal/bq1Jx8ZX6qS6r4g2q90Ep hdZAQQfJXJuGNypdskgaRlyq5Gugy6EjvmmDUnFXqbHBGTXEVg6uvUUQ74z11ZAkFY6hHCIrUBX0 yfVgOA1b4/wf213wgK1kCYuaH8qNTOQhOsW828HKmOh44DjYmgXgSb5VGH9zRP6mVBtEaj+pMrho R+vl8IwsidUzfhIsNBey/TE8R0IKdRNtcOlLtD9Gh2wdJvZLs63laGNu42gvPk72KM8oYTyfGzUK cqv16XJmECcbDBweH6lcyjk/DVZ4WO9O4PTncH/c5W3qV59fk3d5fY2kYHtzM9sFM+v1QkhbH8rw sBkVnUUsjsrJXHBc1pd/hgliRQFLhX0tOyoc3EgZ0BoVrWtlBNjtlS35OgMmWEhJJ92saLU66Toj M6bh5BGYZmBxABwzTiCw2ywUV7QMG8c5cdHjSDYoV8VpsFjVM58hyVqCbHk/3zzDPC47nI8Z1e8Y KNlkHjc6peTHKsYNnynOaKspa/FKKaf0HOyvhZVN/vzs7zRYwspLJgHthljRYAk7M4ec3Siwz4K7 GCwxy/3vUwxYs4DaasAGSxps7gat81lkGYanGf7oi0uWq7sdcznZfSAsiqs5xStOP+Yr1AwRo8C5 Kil7lOFHA0Ve3WjnXK8X/D/3ngQ1CmVuZHN0cmVhbQplbmRvYmoKNSAwIG9iago0OTAyCmVuZG9i agoyIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA2IDAgUiAv Q29udGVudHMgNCAwIFIgL01lZGlhQm94IFswIDAgNjEyIDc5Ml0KPj4KZW5kb2JqCjYgMCBvYmoK PDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAv Rm9udCA8PCAvVFQxLjAgOCAwIFIKPj4gPj4KZW5kb2JqCjkgMCBvYmoKPDwgL0xlbmd0aCAxMCAw IFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngBnZZ3VFPZFofPvTe90BIiICX0GnoJINI7SBUEUYlJgFAChoQmdkQFRhQRKVZkVMABR4ci Y0UUC4OCYtcJ8hBQxsFRREXl3YxrCe+tNfPemv3HWd/Z57fX2Wfvfde6AFD8ggTCdFgBgDShWBTu 68FcEhPLxPcCGBABDlgBwOFmZgRH+EQC1Py9PZmZqEjGs/buLoBku9ssv1Amc9b/f5EiN0MkBgAK RdU2PH4mF+UClFOzxRky/wTK9JUpMoYxMhahCaKsIuPEr2z2p+Yru8mYlybkoRpZzhm8NJ6Mu1De miXho4wEoVyYJeBno3wHZb1USZoA5fco09P4nEwAMBSZX8znJqFsiTJFFBnuifICAAiUxDm8cg6L +TlongB4pmfkigSJSWKmEdeYaeXoyGb68bNT+WIxK5TDTeGIeEzP9LQMjjAXgK9vlkUBJVltmWiR 7a0c7e1Z1uZo+b/Z3x5+U/09yHr7VfEm7M+eQYyeWd9s7KwvvRYA9iRamx2zvpVVALRtBkDl4axP 7yAA8gUAtN6c8x6GbF6SxOIMJwuL7OxscwGfay4r6Df7n4Jvyr+GOfeZy+77VjumFz+BI0kVM2VF 5aanpktEzMwMDpfPZP33EP/jwDlpzcnDLJyfwBfxhehVUeiUCYSJaLuFPIFYkC5kCoR/1eF/GDYn Bxl+nWsUaHVfAH2FOVC4SQfIbz0AQyMDJG4/egJ961sQMQrIvrxorZGvc48yev7n+h8LXIpu4UxB IlPm9gyPZHIloiwZo9+EbMECEpAHdKAKNIEuMAIsYA0cgDNwA94gAISASBADlgMuSAJpQASyQT7Y AApBMdgBdoNqcADUgXrQBE6CNnAGXARXwA1wCwyAR0AKhsFLMAHegWkIgvAQFaJBqpAWpA+ZQtYQ G1oIeUNBUDgUA8VDiZAQkkD50CaoGCqDqqFDUD30I3Qaughdg/qgB9AgNAb9AX2EEZgC02EN2AC2 gNmwOxwIR8LL4ER4FZwHF8Db4Uq4Fj4Ot8IX4RvwACyFX8KTCEDICAPRRlgIG/FEQpBYJAERIWuR IqQCqUWakA6kG7mNSJFx5AMGh6FhmBgWxhnjh1mM4WJWYdZiSjDVmGOYVkwX5jZmEDOB+YKlYtWx plgnrD92CTYRm40txFZgj2BbsJexA9hh7DscDsfAGeIccH64GFwybjWuBLcP14y7gOvDDeEm8Xi8 Kt4U74IPwXPwYnwhvgp/HH8e348fxr8nkAlaBGuCDyGWICRsJFQQGgjnCP2EEcI0UYGoT3QihhB5 xFxiKbGO2EG8SRwmTpMUSYYkF1IkKZm0gVRJaiJdJj0mvSGTyTpkR3IYWUBeT64knyBfJQ+SP1CU KCYUT0ocRULZTjlKuUB5QHlDpVINqG7UWKqYup1aT71EfUp9L0eTM5fzl+PJrZOrkWuV65d7JU+U 15d3l18unydfIX9K/qb8uAJRwUDBU4GjsFahRuG0wj2FSUWaopViiGKaYolig+I1xVElvJKBkrcS T6lA6bDSJaUhGkLTpXnSuLRNtDraZdowHUc3pPvTk+nF9B/ovfQJZSVlW+Uo5RzlGuWzylIGwjBg +DNSGaWMk4y7jI/zNOa5z+PP2zavaV7/vCmV+SpuKnyVIpVmlQGVj6pMVW/VFNWdqm2qT9QwaiZq YWrZavvVLquNz6fPd57PnV80/+T8h+qwuol6uPpq9cPqPeqTGpoavhoZGlUalzTGNRmabprJmuWa 5zTHtGhaC7UEWuVa57VeMJWZ7sxUZiWzizmhra7tpy3RPqTdqz2tY6izWGejTrPOE12SLls3Qbdc t1N3Qk9LL1gvX69R76E+UZ+tn6S/R79bf8rA0CDaYItBm8GooYqhv2GeYaPhYyOqkavRKqNaozvG OGO2cYrxPuNbJrCJnUmSSY3JTVPY1N5UYLrPtM8Ma+ZoJjSrNbvHorDcWVmsRtagOcM8yHyjeZv5 Kws9i1iLnRbdFl8s7SxTLessH1kpWQVYbbTqsPrD2sSaa11jfceGauNjs86m3ea1rakt33a/7X07 ml2w3Ra7TrvP9g72Ivsm+zEHPYd4h70O99h0dii7hH3VEevo4bjO8YzjByd7J7HTSaffnVnOKc4N zqMLDBfwF9QtGHLRceG4HHKRLmQujF94cKHUVduV41rr+sxN143ndsRtxN3YPdn9uPsrD0sPkUeL x5Snk+cazwteiJevV5FXr7eS92Lvau+nPjo+iT6NPhO+dr6rfS/4Yf0C/Xb63fPX8Of61/tPBDgE rAnoCqQERgRWBz4LMgkSBXUEw8EBwbuCHy/SXyRc1BYCQvxDdoU8CTUMXRX6cxguLDSsJux5uFV4 fnh3BC1iRURDxLtIj8jSyEeLjRZLFndGyUfFRdVHTUV7RZdFS5dYLFmz5EaMWowgpj0WHxsVeyR2 cqn30t1Lh+Ps4grj7i4zXJaz7NpyteWpy8+ukF/BWXEqHhsfHd8Q/4kTwqnlTK70X7l35QTXk7uH +5LnxivnjfFd+GX8kQSXhLKE0USXxF2JY0muSRVJ4wJPQbXgdbJf8oHkqZSQlKMpM6nRqc1phLT4 tNNCJWGKsCtdMz0nvS/DNKMwQ7rKadXuVROiQNGRTChzWWa7mI7+TPVIjCSbJYNZC7Nqst5nR2Wf ylHMEeb05JrkbssdyfPJ+341ZjV3dWe+dv6G/ME17msOrYXWrlzbuU53XcG64fW+649tIG1I2fDL RsuNZRvfbore1FGgUbC+YGiz7+bGQrlCUeG9Lc5bDmzFbBVs7d1ms61q25ciXtH1YsviiuJPJdyS 699ZfVf53cz2hO29pfal+3fgdgh33N3puvNYmWJZXtnQruBdreXM8qLyt7tX7L5WYVtxYA9pj2SP tDKosr1Kr2pH1afqpOqBGo+a5r3qe7ftndrH29e/321/0wGNA8UHPh4UHLx/yPdQa61BbcVh3OGs w8/rouq6v2d/X39E7Ujxkc9HhUelx8KPddU71Nc3qDeUNsKNksax43HHb/3g9UN7E6vpUDOjufgE OCE58eLH+B/vngw82XmKfarpJ/2f9rbQWopaodbc1om2pDZpe0x73+mA050dzh0tP5v/fPSM9pma s8pnS8+RzhWcmzmfd37yQsaF8YuJF4c6V3Q+urTk0p2usK7ey4GXr17xuXKp2737/FWXq2euOV07 fZ19ve2G/Y3WHruell/sfmnpte9tvelws/2W462OvgV95/pd+y/e9rp95Y7/nRsDiwb67i6+e/9e 3D3pfd790QepD14/zHo4/Wj9Y+zjoicKTyqeqj+t/dX412apvfTsoNdgz7OIZ4+GuEMv/5X5r0/D Bc+pzytGtEbqR61Hz4z5jN16sfTF8MuMl9Pjhb8p/rb3ldGrn353+71nYsnE8GvR65k/St6ovjn6 1vZt52To5NN3ae+mp4req74/9oH9oftj9MeR6exP+E+Vn40/d3wJ/PJ4Jm1m5t/3hPP7CmVuZHN0 cmVhbQplbmRvYmoKMTAgMCBvYmoKMjYxMgplbmRvYmoKNyAwIG9iagpbIC9JQ0NCYXNlZCA5IDAg UiBdCmVuZG9iagoxMiAwIG9iago8PCAvTGVuZ3RoIDEzIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAHNXV1zm0gWfdev6KfdpMrboRtoYN8cZ6bKVVtJdkZbW1uTPMgSstmShQKS Pf73cxrx1YCgwQEzqUpsD4mO7r3nfnfrB/k3+UGYRXnym2EYjNiuSQVxhPw98sl/yZ58uIkZWcfE oJ7lGcwTTV8t4jWxuKDcFITZDvU4nmPCoi6zLCJM/OXkH9yWX1NQ1yKW61BbFI8slNckBn7h3/6B F2Ue48n36ZeO/NcNC3DxwqZwOFk/ko9LPGkYgpPlemGayfPpH8tH8mG5ZNQgjCy35B0h5D1Z/p/8 sgSokig0YeEduYI79iV4LqThWiavwlNALaqgmD4kVTuLFkl5kJjhQgOXJEXaQVFCbvfHKNyc1scg 3BNCO37lb2LRJVf1TbSpmzswFGZb+ZtYVNStvglSlWwd82tQdmnftGCTtluIPEWrCLqG0cwhtRvk osrNNsGZNtTv4oUr2leg1AyxmRuUd7oJaYhl6SQ84FJt8DTCIiZ18V3KYbyPLUlkJf1E0yPyrXZ7 DX0zKrwG88AKJnqakb7XaFRSWTJNTq3wGim8s1PrcGVc027g0/X9a+E1FCja/hVe4+b66/XH23/d Lv/X7TPq/KTk/ULXP9cNoEvSBUNVQ1BoMTVDVUkrUCZgKBPU8xCT2yja9MyIHGXUNedL0QSdFkN1 PftQhpaQ9CHo15uv5GYX+Pvjh9/96MmPyEf/YfUUhKeoI8Sf6ToRQctWoJCixk9L0xM2OudLqVwR QVlZzgqSCehpeNQxudtKz6ZnxqOnYVFHzDeEpvC0CKprOAMJqkDpw9AvhyTl/k+8uveHBNFpGKoa gkKMGkXtcSmqSlqBMgVHORV2Rwg1Gp4ZjaPCc6jlzTWEpui0GKprN8MYqiDpQ9Bfg8h/Xu122t2E XqGHmR7qJY8MhdeUVXf9bBKXodqlQtOaxxCjegxVtAqS8R2G8Gxqeu1BvfGZER2GgTaeYc20LhYo SyU8LZehazhDXUYZSh+f8bu/PkXB8YXchPs42PjRSgb5WCvlluydiKGKISjEqFHUGZmiiqQVKBNw 1HUp4+gvt9TFoumZ8TjqcrQ3LHeuHE3haXFU13IGclSB0oejt9efr4fyczqOqoagEGNqjqqSVqBM wVGDuihF2zna8Mx4HHVs6nrzjaMpPC2OuprefSBHFSh9OPqbv/Ujf7/2Y63S+DVh81JviLuMmhZG p0LVt2L/NSo2T1fqk8detQJ3bYqZq5NDOes2Fehiue45IdNUeiNG7e57JjYtOxwlVuTdPRWKKqwJ PJhjUsftyDKanhnPgwmXCj4ky3hdLdxlO55JPRPDVSJSgKnt5IN/VXU18iGbe41pX/IEzLCpZThY d1Bg9aAf+RxGjygFnnzS07NNVhOoJtHu5HTZ2uhALkm5YKsqZQXKeGxNbA/VpxCC2hz5BiYCFkjb OM/OHyoXDiPSFZHI9nj/omAyup4B9qar7ni7lyGV6FqG1Yeut/vtYMK+JhfpcpD5aFsIxSQUjtTd 4hhOsURXRcoKlAnoanuUY82sla3pM9OQ1bao4U092r7kVPOtE5HC6pk5Xp+OD2EU/51cbzaRH8ea +bjS75qGEKrYFSucmhCqqBUo4xEi37USNsOyByJZ2dxRv3UtW/XysfmyFaoSit3RbEVzyJutF0cS rbIt2rYDWUDBRMWxsad6Xh9UoBQmsEh3RDV9Yg1K20JeCQqnlpt18S4gybZVNZEM1A+3KefYy2sQ iqYx/jT9MOTnltuEZGr1MPSLsKyYJlRvqh8DG9lMNEplYv3YntxsxSp2g6lMrCDbRVR3xBwIZKP7 abBmqUytIPgXx0KyMwMFCSwfzEI9wkBt3iyTqdVjm/Bv7cohbJGcUND0+cOij22hQe1Yc3BvtolO k+HOwr2ZqFPksY0ZsCfZmJ9FfmAz5G9Gs1Sm5k+y4ujMwr1hkwvNnxnkB1ayRtIslIn1g4SWsmZL mTg9sFw57xNzcHAWGvfCMObg4Kykc4mDOG/v4CzZcYHfnwOBknLYbnT7UxPIQv4mz0/OQEGmg3VW exYeDmdITXmGsUEqP09BcheP2cJb4MXOX6EfnH3VdQ7V4sjs8ho6n0Z1nN36GJ7Wq80qiMjfMPXZ bF5wwiz575c/D1gtjcn1IQp2OKJ7RbjBzOz/5n/+8VVuhvPvr+mfXeoL5t3b9K2NSlSGTge7hCTv mVgMWavcsB7VDlo7SchVIRiPtEH5eaEuN7/cEEvG2WmShouhcias3CTVAWmNPjjs60d7/zig/Fgk J8UzxuSQu1mUj2OsHPICh7nbmy7/0ERYa4rVhaqDENHK5IykCFMyXBBqYQBpA+9TtNoec9ZmX5RP SGY/y//8sj6GdziTBd7zcel9lvmo9Jbn07vP8mOTBqe8c4tV1F+zU90tmlp93Erv7FoB08OBZRur 2Q2eptDuJI1iEwMaD7shPU2OVQ7ul9iyyG9+0OjbtmmOmQKVIQ5vVzAqmivENUk323TQ4pfD+QbN TW1EDg77yAWBM5QLzqIOSnskX7HtxLIv0iyf85nDYC0fgphswvXpESdGif/n0d9vYnJ88MndKvaJ PE36R8nIiutF6kZWc8nSyLoG2xwZlucYDlHxd2RYt5qQIMr66fhuSA51PNusQFIDV02/uoGrol1i SP12QkILCxegqDLCX0uvRemA9okG/nGrL7J8BJeEfi0tYvJpC6eqxQ5c44rMdmVKUNOirtAO68MA ieFanTNfOzUqcApM1HWqONmJjUx2NDx0NAaamXQYrxHZpUKBo/3kud5gTX4nz8HxgazI3n/uh2+R 35TUFi9NE/mFi/lmRW7tqmzOdAbcxpJ4UEtew+IY1JZ3M9nwCy68Q3K90ljzfxMvY7p5RD7Tqnsj GZmwpg4aw8klGynC4DBYW381Biyc1HVsl3lkoLSOJ6jvGJJNEK9DeZeDDMzr1WF1F+yCY4BWQriF YSNKj1FM8NyFpkLVqiZ0vXov/XLBKdK/wYJch/K2q93O35CN/xSsfTqGuk2EaUMYCNSqFQ7xBPX8 qjFzuESIvLuCrWrKKjTFTWodoVmfphVUutnqIFS/+ccogPr29y1E0LsArp/15UmqArtdrbo8qAjw nBBeUivnWW6qINFNamo0IM/habchOOwePsPRjEKK7LIy1RLbhacbJHoJr8QJjJHs7MSxdh49PikG wVo9hcGG+FEURlfkEIVPOH6MoPAQoKB7fnghcfiI7w+HXbBODyVvV8EuviIP/u5AYn/nr49jhI98 Z1n2nKW4tcKHruZ7EbjQvIUjOflQdTZJyyBUMhf4crgJoW2kCEEcn/wr4h/Xo4Q2hkNxruchACtY 35TF6FPZuC60qSdUtKem6eZxNJKtfC/qgjsuQGU9s7GT4RSW0qrqztGTnlB4vqVovdqPwkiG9WHL cVHUDcN455PEcSGhg/Hju42/Dfb4bhWfK72UGnQUz4YbibjroOJT9a6woa7tMaJr4dk4tr+dWexj m7iBGHvoWZv9AhtqzY3Rw+swWGU2PMC67nx/n1vbNojiIwn2IzdJTZxDtHAvsirZN22SYueeC5ib CqmjrHhVTtzZUkNkwgEchKhhiv5E77LBvSZT0+xTbRN1wszOdFdgKs6jRo5xJZd32IZJbuReqWlg 1VdgAW0+EsN1RWkEGCaxZNASyxuC+placnd73pa/VCWaFqe2iY7gMHDfdTPIXtVXvnlSQaXYfRE0 W/M2jTZpeWwh77Ln0ofKMbTJOHVxSzRhBjZgKwd9uy43r0+TLumgCMx4GYFJRFOaWqO5bq7VS/Il KFjfcGZxUIrj2DVusO85/ubKDdQKdRawdfmxBxp9s7ZmPuMYG2E/jqgALxhplscrSLIPYKgjGVaz cjS3DbNZaxMbEHewfJSfWZpLYjcM1RLlc2lXJ613vr2TBfU/yfLj9RX5NbiXDXj27T3Ka3KKUV7c vZz77eR8ufIo1UXqvdO3NYOuCXewwmNU9iC760j9hL4XMfJZz0BYslmy38hmWNI4WcGX/jj58VG2 lYvbs4sO8xg6Rup8Hv9m76GnI8zGP8GRxKfDIYyORSLxEz+hI0skKijf1BviI2jwmTRqcTkDWxwG K5lMR/79KpJbNyGRmiS4guIZP5D2GB6ymyRHaWRwdGYdy2QEH+ORSHUOzgYfNsRwSdEM8iVugaX4 UCClf/b2w7OBsL7sfRLDqHaIe9kI+QUWltxGjviG4dCT/4IYh3aG7C3HK8wNpEPEyvoBlYo/hiPM lyeyNzUHC0QAFigTFLXPwMUMg/WI2zvkeQL/CX2rYIuBDxYJVjuyPe2Tz35CvxQ5zjocQ7s86xLx FLuWdnV7Hb2yBp51hzIoPbW7C2XCUCPHGJl/vkZQgaqE3Vrmryu1XqVjiZ4KJxQomkV7vR6qQWmr zPIqVlbyWLCY+AL8S3V+kY2msHraVX0k/+2dT+/pFfl8vcQ212q/kV8JHBZKfjAKTXGA0LDQEqmI 9oKWx6x6i8R4mDiluJJ0GH5O97RLLz9i4gOd8ClwZi6rVN+KrGrkHLevw9G04PKzFOe1kj4Q1iqO g/t9so+er7q9nCfb397rtiZ76ZRhT4/Jj8mqIH5bnWKXTF5w1nDiodXh/gW3At+LCmVuZHN0cmVh bQplbmRvYmoKMTMgMCBvYmoKMzQ1NgplbmRvYmoKMTEgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1Bh cmVudCAzIDAgUiAvUmVzb3VyY2VzIDE0IDAgUiAvQ29udGVudHMgMTIgMCBSIC9NZWRpYUJveApb MCAwIDYxMiA3OTJdID4+CmVuZG9iagoxNCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQg XSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDEuMCA4IDAgUgo+PiA+ PgplbmRvYmoKMTYgMCBvYmoKPDwgL0xlbmd0aCAxNyAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCngB1V1rd9w2kv3OX4FxMl4rsdt8P7w7D9txdjIbO06s3Tl74nxQpFbcs3o4ajmZ nDM/fm/hUSQbLXSBNtua5ByLZJNg4d4CUFUogD+rb9XPKisXuf4nTdNMVW2xqFVT079XS/U3daEe Pl1n6nit0kVXdmnW1duOkvWxKvN6kRe1yqpm0eW4L6vLRZuVpaoLPKwLPKWH27To8hxHbYUSBwco pEUZbV6qJodcdalyiNJWEAlnVZ1AptOh2PWiLVXZNgvc0r9lJLZK8T9K/hkvzLoMr6P/zWFDAqYl iofsRd3kyfG5enKIn9O0ztXhsSoKfb/9c3iuHh4eZotUZerwVN1TSh2ow7+rZ4cQaoCmLxZJLhZL g1AWOYulhmIlO8U6fLNaq8u316vLi/vq1zfLC3B5vFz9sjxRp1eX5+pIvXz6Ur1aXv2yvLqvcO+7 NX768Tf7w9Oz1fLi+iARVcxTE43XDXgXFYBvAeYG3jtQ3orxIt/UWIdxrn41Wvv0FZjs0qoljUoX Rd6VWdYOjl49HavFA6sXulE0TbNoSSGKpl1UKm+6RUVtxLtwpl5p8gf65RcECpMCJVJB7aLDf7og faEszQVpQZAIzyU5nqsGpRSLkoo1pQyabai92RagmqyGDGhMeVMBqHb2Bpd1iyzN6tvW4KxYkQ3u +lIdX16sr6+OVhfX6vrNkk6v0YjU5alaXa/RSH5+t1zj4OjihH6/Wp5eokc4+uVydaKWV1eXV+vF vA1ujPftbnBZU9XQ7CJrjEafq80ropZCuoUHqYmhKDQUe5JjkNN9h6gUUgXzYIKRiQRqh0VlKN2U E+z/N7rJRA9Cu4elLFu0GFJN938DaYkdi7b2kv5ItCGJ7q4FA2RaLpqa2+sNorhhUSiK67C5rwqN HTxW1x2pxVZQEm+AFkrigaIJumEUG0iSwuJJy1vATw3V7OpSj1cwYD4qPxhB2m47KvsmqG4XdV62 t4GgOlsUVecszI9KUFUu0m57t7JvgspmAZ8ivw0EFd2iqQpnkXxUggqMM+1Wrd03P3m1yHNYzx9/ BKqzdpHdjg4ug+tKLsUWUPbNTwpPPau3qoriwXAvFkLVwYWustvQwVVtt8ib7ajsmaAK43KaIeqw RVf2TRDslqZEECUoyl5MuKqGCbdVafdNT50uyhTBoyAm+2k/VYH+7TaQU8J+axC224LJvukpYL+l 20fCD9d6FghHZlXdUWDIHCV8tNNFqwrYdRSrM2jdEDn0cHty+e746ORodaXuqu+WJye/IZSo/3v2 j7erq+VaPX4rdF08J8pVoq/O4OgGlyZPAXSTF8pVJzIuc7U6QxD5vsrTrHA14b/fvzz6aamKH2YN cGwIPo/5lqF3zHarhI5db9daTxGkAeQ4DxVsItbaqSogym1pQIjypGl0A/oK8bWri+W1sJUM4Uv0 bIbX6He3kiytMFo0paqszKLe+oFQxA/SkLMUpk+RYyZnLOIN/VKvA3bc/+Lq6PSaW647ePr45eMn X3391eH/uiuDv98cX1/+uLyitp/P28THVZqnicsCc2hbi6ZottoNe2ribuqqSuEsNm78uQGUoAXj z6QMW4ud+9uYRMAIaWfvMKK4SYSyKxaYY6FZO+gbzV/pWTsqbcesnaf7okhg2WGuomMWjI7vnh6z uju1WYZEw5TGAiZ/qyaKlg7alTvM3MHgbz44dofFLI2vgJ61sNVdhURd3vZBzdezEe0farYOcYIK xghNCtPk2PBUHPCnqYcqoUJ0EVRUVlaFjfSPppK3TvXpuQv9TE5SJLo8KqKfLuCgd3hCnNsWJoXT HEZFDt8Jru3ME+IIPy2ywjnz0tHDquK8LctINrK3d7d5mrHPVaEwditM96tWwdyXX5ulaZXQjYLS F4ZQ39CB2+F5UsMyyRsbHTisnS0dOKamkfyRYxYYiooQ/uxaBinq+mN6vc5SLlsjSqReaY2fQ98x ydVUbdZBPUaCjfTDMzU+F4riDfCh+a5+UAuI0luS1taQmr2eKOHx1VrgDhXRcCRFZTQcUasJi2It bSeKKF4yGZUgQRkmtBFTC+qKR5AUlTiCkEfStggCOFREBElRiSMoTxdNWt2KFgQ3vCrSmlHZpise QVJU4gjKW4Tpq5xFEREk1ZU4gjDNlTVIp3C6sg0Vr4ubjEqwBRWwrlJ4LiFRPIKkqMQRhHnINu+1 VsSPFJQ4fkpMLlVFuFvx+JkMSpAfzBOXTdt3K9tUxeNHikocP7DhizSWICkqcQRV1SJDwl5Qaz2C JqMSJKhCUmOFrN5b0IDqfNHQ7J8T5SO2oLrG/EUW7lY8gqS64qltkKAGM135rRiB4NLm1WAwFPEj BSWuAcHfSZH0waqyrVvx+JmnAbVI9aP0Xae120TxejgpKp6qBC3btlog/77vVkQESVGJIwgz+Vgk kAVR8QiajEqwASG4WTRF362ICJKiEkcQnMOMkrWdrogIkqISRRCC/ghL3YYGlCNDtS0RDHagiPiR ghLFD8+mOlFE/EhVJY6fjFKWMbftRNmGyn4aUA7XEDNTfbeyTRSvh5OiEkcQXMOsrPtuRUSQVFfi CMqLRdekkUb2ZFRCPVyeI+bU7RgNPYKkqMQRhKwKLMBySiuiR4pJHD0FAk4lVog5UbYp7Z7aDxzD vEaubEgUjx4pKnH0wDNEBnHfq4gIkmpKHEElFi5lbbhX8QiajEqw/WB1W1MWfa+yTVc8gqSoxBGE FG8EBPteRUSQFJU4guAZItci0kSYjEqQIHiGGIV6tRURJEUljiB4hmmZ9f2KiCApKnEE1Qg41YPe dhsqe2pBDSJOXRppY0tRiSOIllhmVaSNLdWVOILgGhYlVp6GOn6PoMmoBFsQXEMs6+77lW264nVx UlTiCMK0add2fb/yEVtQl9NC9zh+JoMS5AdJ+HWxYzT0+JmsKqEoQpEi4ERzyU5rRfxIUYlqQFii h10FmnC3sp8GVCDRFssBwrriESRFJaoBFVhc2g2i+yJ+pKoSx0+GgFONJbpOVbb1Kh4/k0EJNaAC 66Srtu57lW2iePxIUYnjB55hiXxORkVEkBSVOILgGeYFlklEETQZlSBB8AzTGruGhETxCJKiEkcQ 58bZvAgRQVJU4gjCQokm7cLdyp5aEKc13Zy34vEjBSWOH7iGBRozq4qIn9lTrBDZaCmPj1OskFFe Ets7cmSj6m7TBlF3MqnT1C0Mj8vkE2YTRalqn9hkJbM9rDR7959qnI3+T4UFNGvay+ZEJ2PhvP/v 6+XFT9dv/gA/i//75zy5fE7VxnCPsrV6rd9TNh/2XyqxGGCgarNuolTCp62waZNtZrdJ1axk2wZz r1ec3BeFhq0+hy4gSq8g+8mhG/MV1lUpKlF9Aa9WcaojImjyYB4kiHPoYgiSohLVd2ecQxdDkBSV OII4hy6Ayp5aEOfQBUTZUwviHLoYgqS6EkcQ59AFUPEIkuqKp7bBFsQ5dAFRPIKkqHiihGIPmcuh i+FHCkocP5xDFwDF42cyKEF+OIcuIIrHjxSVOH44hy6GICkqcQRxDl0AFY+gyagECeIcuoAoHkFS VOII4hy6GIKkqMQRBAlMDl0AFY+gyagECXI5dAFJPH6koMTxwzl0MfxIQYnjh3PoAqh4/ExGJcgP 59AFRPEIkqISRxDn0MUQJEUljiDOoQug4hE0GZUgQZxDFxDFI0iKShxBnEMXQ5AUlSiCOIcuAIrH z2RQQvz0OXQBUTx+pKBE8dPn0MXwI0Uljh/OoQug4hE0GZUgQZxDFxDFI0iKShxBnEMXQ5AUlTiC OIcugIpH0GRUggRxDl1AFI8gKSpxBNkcuhh6pJjE0cM5dAFMPHomYxKkh3PoAqJ49EhRiaOHc+hi CJKiEkcQ59AFUPEImoxKkCDOoQuI4hEkRSWOIM6hiyFIikocQZxDF0DFI2gyKkGCOIcuIIpHkBSV OIIggcmhiyFIikocQZxDF0DFI2gyKkGCOIcuIIpHkBSVOII4hy6GICkqcQRxDl0AFY+gyagECeIc uoAoHkFSVOII4hy6GIKkqMQR5HLoAqB4/EwGJcgP59AFRPH4kYISxU+fQxfDjxSVKH76HLoAKh5B k1EJEdTn0AVE8QiSohJHkMuhi+FHCkocP5xDFwDF42cyKEF+OIcuIIrHjxSVOH44hy6GICkqcQRx Dl0AFY+gyagECeIcuoAoHkFSVOII4hy6GIKkqMQRxDl0AVQ8giajEiTI5dAFJPH4kYISxw/n0MXw M3cOHb7pg6/M1XtLbKpo5d2tzKGzksXm0D0eZclxbpw5eHr09uhHm/qX7PiuXZQy5TYiNQ3O1dnq mrfJ3hBZzZzVN5Y4nCk1t/KXWK6FVaB9/ui8SX2Yqu+ws8stTOqzkolyxiZ3jqFuuk/qC4ji9dOT R4xgxovbmpq2GJ3A1+ebDSrqfO7WN6rSR259tNRrNPTMm76Nbzw2+JjqLWx+VrLIoedRlGL5Nz+a N317DPfHVTVMm9BGffvq6AvsK4z33UJNs5Ldho4+IMq+O/oxX2FVlQ5/UQ5Tn70dQGU/DlPG2dsB UTyCpKhEGbl99nYMQVKjII4gzt4OoOIRNBmVoKnE2dsBUTyCpKjEEcTZ2zEESVGJI4iztwOoeARN RiVIEGdvB0TxCJKiEkeQy96O4UcKShw/nL0dAMXjZzIoQX44ezsgisePFJU4fuBimB1QYwiSohJH EGdvB1DxCJqMSpAgzt4OiOIRJEUljiDO3o4hSIpKHEEIG5rs7QAqHkGTUQkS5LK3A5J4/EhBieOH s7dj+JGCEscPZ28HUPH4mYxKkB/O3g6I4hEkRSWOIM7ejiFIikocQZy9HUDFI2gyKkGCOHs7IIpH kBSVOII4ezuGICkqUQRx9nYAFI+fyaCE+OmztwOiePxIQYnip8/ejuFHikocP5y9HUDFI2gyKkGC OHs7IIpHkBSVOII4ezuGICkqcQRx9nYAFY+gyagECeLs7YAoHkFSVOIIsnNlMfRIMYmjh7O3A5h4 9EzGJEgPZ28HRPHokaISRw9nb8cQJEUljiDO3g6g4hE0GZUgQZy9HRDFI0iKShxBnL0dQ5AUlTiC OHs7gIpH0GRUggRx9nZAFI8gKSpxBMEzNNnbMQRJUYkjiLO3A6h4BE1GJUgQZ28HRPEIkqISRxBn b8cQJEUljiDO3g6g4hE0GZUgQZy9HRDFI0iKShxBnL0dQ5AUlTiCXPZ2ABSPn8mgBPnh7O2AKB4/ UlCi+Omzt2P4kaISxU+fvR1AxSNoMiohgvrs7YAoHkFSVOIIctnbMfxIQYnjh7O3A6B4/EwGJcgP Z28HRPH4kaISxw9nb8cQJEUljiDO3g6g4hE0GZUgQZy9HRDFI0iKShxBnL0dQ5AUlTiCOHs7gIpH 0GRUggS57O2AJB4/UlDi+OHs7Rh+JiWwfqCvt2cN5kbw4fSGwt749vr4XPr99gSPIXlKF2MKMWdV Jf+CuykCJZEjOSqkwLmR5Fv1Mz7qvsjxDz57S7vv4qMBtaqLdNHVG0xpjUnV+hjP4OtDXZbrfE57 2O/XimeLFk8fn6snh+qGtB67P+R2pnaKYl68WxR0v9iqfFJCmFSyqDbe59saySJTD9VMQrnvQE8S 6vDNaq2+eXu9urx4NMd2uxnPkI/EG+mV1y1KgdpQcZWGusVexWHstBWayy1QcWzH37QTVXxufTKy RSq5USX14uh8+Ui9fPpS6dUctHZitXSKpl7f6/dQfn0wR0YtUpbthyhGCI/Urh8Dg/sh+91ZVKfR qx0+VVhlrHbS/aY5BXmW1pm6zmOacC/enf+4vHqkDp88BqlfPX7xGHSqw7+rZ4dqx8qdKBAxHtsP pY7lHPG5526k6Og7snk7aiDq8Hg8ZvpCOUKFOA37uOR4HR47OSV2onAv3129vVyj5X63vL5aLX9Z qus3S3VMC7JcE748VUfUsIXiR9Gcu+jjhvhhmmcxonMXfdwQ5YZdxT2ajy8vrq8uz86wK/zJ8pfV 8VKIF+hO/qYu1MOn60ztoruwlv6GjGG45h1cixbfw2ub/Ha2imnC/c/R2epEnV5ewVA6vjxZrh+p xy9efPPfL54+u6+eP355X7189uw7IcFxDcLNIm3A+lEZbjosCcInDYz5JG0Qrtubon4R/d404cx3 Gh6prBayGNcru9zZYizdiMXeGtmLc1U0+QIfUpu23AZcCnGK0vZ+9LLCjVQs2Rxae8Ss/fb86Dd1 NItgLmXfoRYp2Nu3y6Mrtbp4pH68vH4D3fn53XJ9rY4uTnC8fnt5sXbDw4dd7+xmW53Y1pW+Qe/2 YgUXdYX4wkbvsZva2N5jot5NE+750T9W5+/O1eXx8burq+XFMY0QLy4vHKkf1BTmLLsNJEekeuaI tL0O+zVtfog8anzlCF+VcyPCSJK+ke6nW0MGSFulzqO+QZT9aDpSdBqs1B0OkxGKzhpvDmbp1lxy fDFJ1C9XP73DZ6OyR72P/5u61KGkkbSJNEQZ9m3w7WnznVgr7W3ozLBoqcrSrZEkYRNc5GmKT6tW LT6TpZqa/gWmIw8A9nSKLxjnCal22eHbc3yAaC5M2rzFBx0LzBBl9EVfbE5SoCjsGIJQ8O7PekX1 lBzMKHIEDspy7PyKtHukGjdHr6PE0hiU+NLUhlij5u8R8lgoikdIqE/sEFBPKX4eEsXrFCe7sLrJ 3BDTR7p8V6BrZlEiI+k/rq7Vr2+WF2q9vJaOH1G0ZW552wZW0tDY63urxXJxX2WvD2BcnayOj64R Y6SIBQUeX9E32a7U+t3bt5dX1+s5ooycS+Aq8B59kt8RjLD8QPNbBQJplaJvaepJpdGpdHZLFRQb SfQHOc/NCUrMc/ncli6AnkFEVJ0nfJryzNZojuqBnaTS40iDl+tup26oDlwVfaqFiisEVdGFYIoN H6zXJ1SV5BWsNpEU9hldlb6IvirfJvJJuvAIOOh9sSNJ001w3oRd3kj1dkWhBr2vESvS5Dl6hyZ7 cU3NF7NQC6W+OkUjxrQUdUD4Q93P9aVK79NJ387fnh2tLnQkMhEFnL1uPNR3Fi7JgXR0APVoROm7 8TkNysIlOThRIuFdrecgnUOPFh8r1Agfb8SVjiIeVaERt28V6B+6dMMmEQXkhQBtiKWFunFGvW8V 08Sy49byZDFBut0BM7cfQjGWbsRfr9/78d1S7AADQ3e+QZR6MmdN90b0Nms679pF3sCyz+gjprAs jT1N/eIsn8mlXM2iKSbssyTUjok9uhUrsss5hAnG876/qS9Xy7MT6rwRGkH4HIcXKssb6t9nMcty twxkIqoYgp4dHb8x488FGZQMMuJzH2o050+9b0h5QxMMDjF7NR4rtFPKSLLGozmNNR7xlC5CW0/4 SHS08YjYNUnhjMeSPmctLyTLyXVX0BRTF3Oe2HNxZfCYroCpjTtDdZLoImx90DBMkVyhDxoS5sEy h3cIRzXSJZwp8M9jpZUqsrsZdDVkMp4frf+Pept3a3Q1MByvlm8RZYeF6VzDOVxBjk6NgQ03Zqnb H9V58yT6NDCnTlxHyVi4bNmxjCO09mw95lDCtEDkbBiv/fjW40SxOGXjNwxmr5DIcXV0psdbJHNc qB+X2qlaneKP+en03cUxeV9rdQQT5/hyjibCPpWrk8jQm6WNsE/lRLkF7kuO0ExTjyOqt0D/Jkl1 dkmxOG3oUThujWxAmwYDdWRjSkdYdFBnW/5yVIeSuQ05tqG4Oy5NBuspsnUuf11d/KR+OTrD/KxO +CDp++FlllbhcuSt5KJGMQuGvW1AtlSKOYVhV7gbxNmNg2linWrvA93aPPnNzpE226QyaB91KIPP CvvWdSUjUfbs0+e0VX49MYl/jo4C/URTtVkH099IFqnkT2BgfvJIfbFcH1+t/LnODzShlbmZ2Q0p R1Tu20DSG7+zVsXlfQmpHEbYdsaweiqnSYaJ6xePD8tyDtkylzGUj2UbEbjvtohs0brIXHztBgJ7 oVzEQScgCEGKGrQHBBrJItti/ki9uoadcbZcr4nKulTfv4+cWDTV1nlT3bQyKcMIiQgBvvthkTTy Yl4+Tevcs9U8JL/78mmdldX7iHiTaG4XsLFkiHGSZLuH7h+kQeYofnkXrg2pRo1A2Iv5Ea5hX8Gp SkMKNV1FWYIuzMYhUT+vtYFtZxN3h3KjKttbT9iwCLlZY0dyNwXzpfn0zWyaZKVtZqfvzvbTytJF maORjaRNRkrjNy1ho4LS+On1Q6UZTfm6eWdu9yORxK1LN3tpZnGU0vVuzzTJ5mr3JVaj0kcqxlKN KJyz3UOBKCsrLwpkQcEk31PDx5if07raaLdpJs+pb/jTJGuxzuHzl+ol0mfUd0cXPy3Vd5fvrpFT M+8oC7GzDuvk8pHUUaNsUc7S3HKsYe0azFyMRRN3BDM1N7NV34ZM+2psxBaWsAKSepG1extkkXaQ 5rdykJ0mWVY/Ul+9/KVUp6ur5a9HZ2fvFeLZOaKxfzmSVtzGXi11tFjNa8uOZNu1rHKrATDFagQ0 VQtXIs/aBbJukVmLDADk1Q7Nxu/hG2XqB2QQnZiVesP0PKCIfMAyy1o8445ePZVkk+F1lJ9XYIf7 suu65BxS6IlKmizGlVY+w0kPqgJ1MJtHVG1iTszE5I40CEpHLikC2CA8S2kQ5zpDeXgJM5wV9iKr s67juyrsP1HS16kabHrbpXWBW/hKuqhb9A/H/bUacao6xcelqCh7X401K8gB6cuuaxjvHax4lomv HCtkIGPSBqa9u4aiyhLL+7Oq4Gu4Ui5SEssVPrhgJIBUfK3JjKS6KPsg14cLd8CwBO7CsXqDFJFc /aq+N/oxsij9VEaK9+Zd00C/U8DMh2c4xAZrFTinX3Iiv8AGpODAnlRYIGoOK2x/RmnkEFnfV6fY I6RrM5zZImr6QA0lmuvy+QzPY+JS8Tmep4gT3pHwNdJJ1ZdIZ+599H46h75CMc2hE9GWQ8In+iVU CwKHEiuhfmnVUtp630L6I+Qz92zgw3IZ2D/nS4kjCK/sb3MKJyHIaRJKMtr93qqcNFbMoUh8yWQM lVgFWGNpCrQwQ0y0VdSyM/JPKzQWMlPhkf4t6Zf+UheTOYc/7TDYpfT/Qh9yaTBHFjW2O7BWJ6IX dJf5Y21sKAcKOjxV36t7WKYKHczVPeS0mIOVO7hwB1hDZ346cwcnB4m5cumuYHjSxbzkcvhxPsDN P6jDv5rNAKgZ7KyEnfzoK1HBhG8q0hPr8iFrwdTl3u/6Hv8DlT3EydUvcxXmg4cH6OABIMY+g8lD CwXfkbtfXCF8K6Yg9LN8a+GAdbc+fj4EjbKNSKM7Ipj0pqPOLkMba2qssUYYKq3LtLChkES0aNxq TqVqMt1olGB/BUqC7QsarUHmj9UgdIOsQU9BK6p/jkoW/AdagGtgPlP3rg9Uqe6hQrW6B0+hUvdQ 3Sy594M+BgSN/nWsGpsbEmGwMx/u8KVM20qHU4ZyWu1AX8Fy/u7OgYKAn2jJPtXv/j1khpjDS3cP Etz0b1rw1/f0vfaPueuuLoR2tUCdPtOlYKss1NLeZQq2v98/QKKkvcs8iJ931NP0CmADPXWTpm7S RkfuOkk9HyxQKxIIMqJykBEVegAh6SLeD7mhocA/HV0jFcQNqCXfBhToEiTnH3JTgC37gSuOqule UegXmte+JiSpDGBvgMaxeeiBueRKoFfch0QJ3f26F0OMFtoRWRN6lyoCC0uZN5V3i1Lcf0A6AEhG 9bo/RAHVzxMrkJEZMwQQ0twzrIUtClVHgWjjwN38awrXCLuS7qfDUuCdMjCNecYUn9Lb3buGWFVa T1PzevNGA3zripIih1nUFl2q7WoJuspr9luQe31wH8gZ2Xa8ChZEhQ80YTHE6FWjjmXzDUSIS+Mf WUzW7C7xCWSsD/cKhfy4LKnA75FJAp6AIPoldNE4Bo7oi6CEYI7as9GLHbVDnlCVk3lpa2d1cFQ7 221yd7Szdmj8iFj1tRMV2u2ADGvRmq5G1zKWlCjPW0lrefQICNkugTr7T6l1oz+HktIpVJaaUo5G TMiRvuNHKKQ+pT6D9IXUBj/bmz9tzF3/bq7as0/RQ1GJ0HJ6nX2rfYS6LZTryvvUHYBP/SJ5F0vL K6tRknUlUp2H9CrIRZKgRndJApze0d19an6DzPjJ3mFvgE6TZpm7CQc8RJXCH/NTX3BCBds77S3b yrKCoOnjdlOGebF99O6nWpmh5P2r/sO8kbjDQ7ZwXYewpldYJAbDA+7BGLeRpnvt+A9hpazIv8sz soJHZIQL/eOuQit0AygiqtBBjzPI6vZDBi4iH3T6Ydc5V78/2u30a+/POP1Zi+giOevW5c+aLial OdEOPx6ilWd648oa+0/qM+Pys3EYXgHBzlFJ0fMKXvPA9+drA4+Jr7EPXyIgif66Y68+KfVyYZjx A++/QKClKFD+wPsvEBHIMJfZu/+F1hc8yXLxlYH7z9cG7j9fYyeRS3dXEpZh4HGyrANfjmvE7iXX 2gUAEr4SGwGgvl675VmLQdMcJ/p4EAPQ59q5z1psG81RANIaFwbIM3yu2YYAsEGPjgFwCAD6gSx7 /R59ZF1/fdy7/VA+uouc+r4Ec4ayjbsP2fBO6+/30jiH30hKYQV9JHL5k6HLX6IdwOonxXNEwdOh 9eZQAxEpiSNFDUhxCtRfEylx0qu1k2GgxCzrUC4n/5ldK8S+OqkkrQ1nzx9bGjRtg0Afuf6DXb9k rj9mSRFyx+IkYwX3XjMiAP8yrr+rxByuv7zsj+D6ZxGuf4HGXNZac6zrjx1XWqhSPs31L7EFKk3Q svs0l+cPO3uy5+8JieUqAhfvT+xokT2GQR62I8xLnMBSg1W0MH+yzw4SmKVwvvAvbCj8SzYU7DVz AjsJj8DSxRVTyOfmkvmXKuZ+wHPkQcA2M5fCZhXHX0pE7vIK8T9mAU4sPBksaRpEYDYNLMTwxr4k hIPsqfljfElTA8SWIBXEhVRUNVTH/PBnWIJ4BL/skBRhZYyZnXKS2jYalG+nq0PbUpSFVyh5JRgz BASPIgnWBze1hPGLepHdjCqbS+bfrWEM89NjGz4xyKVACKDpIhKqCsobxgx2AOaCOQWWj7Y0adRT K4pZDZ1s6yWANXKOUCFIiH8hIFoUZKdLJCfEfX0ASfsbySPBmf3R/HQHT+wQHlvmlgjDKSe8iO0n Ycu8BBAY3zC7YRGxheqwg0mZ26HsJDhVlbwYVIq8GKPVDwADvJhtNSdKcZPFgfxSnAE4PM8g4vj1 gbn2ifE64TvRHeRi4Q+hhz+4tgO2nnPKW2qHS+pgMgn02dXQ0twTpReb2viHCf3rKGmJGbEGOzAC U/PGgZYhmnvzG80qbnQgn6GL1JBQJaHhFPug892VxQ4ZZYcQtHv1gE5Z47X91FPzYsTwCeQvnn0J CnDwn+bc/vonnIH5v5iLX2l27B32p7+an/7L/LEXv35+kIQ5Y8/WVWOAICq3iaAXzXkEoELBqgrB KmwaUTBMg/JrUVD3Wd/JhavCo0nRwobJRgvIS68mWwaTT7ANEqFMjQV/aGzAgKk7xYRaC1j55IXu B1Fp6Ag63B0SQZAMO1EpK5Gpu04t0MPbeIJhi0T3Uzta4YVQTrRR/GuCnXQlcYPZKGqLxgPpH3zO 0Wit1tRb4LKJmrpiTYEPYBrQaEF/6QX2nX2hO2rJzZ72LMYc9KAl4DMPmyq0pZp3bcd2hxojhHSn EAuYP7TRVkuL7Y10Q+3vvYs48g4xaR/0rEUmwFjM9xzCEa3s4G5sFCofwgfqDehRc9TpcartksTo nu6poW7mN0PRMzCHS4ZN84Md/lMzeuPfARxQuc1ZpQp2dIrURJbcNsxdcPAOM9tC0xWlMdSUbWEx HrT2Lf3xZm9C/TEFVEE6qjmQHyGlTfn71o6dKjNsdjLUOonSvT6wA+gd0iiDLykfxXCNAPjXjoBo SvjF/AvJ8MPYsKBpTn7mG5yASurQ0UKfm8Jfmju+NX9MGeAQpVKF8cdcihHKir1T8St8d6KtYIHR NpkDpHYxzf36bQgJ5jQ+DUKCyKelfB7p3gImJIiHzB4HdYOgjjmZFhEssNYNjYdiVBxM4WuDYApf 49BJgZBIWnZVHxEs8AFoHbrgSypH0lFGifODgGDeIlWkRCYL5xrl2EM5ozQKJ0LCVwYBQb42CAjy NY4qcenuSsIyDAKCTtRBiIfrw/FArrMLPSV8ZXI8EGv4OhcP1MeDeKA+1/FA7BfR9vFAUhmOBwJ/ itNR6lCOfCCdTORSgpK8xmSziQfSkYsH0vEwHqjv0hFALsGcoWwbD9TvtPHAXhoXDzSSUjxQH8XH AwsEK3LaUn4QD4zipA8HDjhx6oPdEa1WizS4Dwc6EQbRQJZ0qCpOei8aSPrYIKTJ0UCkqWF/z2pi NLDIsLSxgfn6rxwNdJWw41of0vwAiUDysmeLBpKppxOAXCIQX4hJBKJuCw2X4sg2GoipmhbR8Wxa NLDQgajhys65woFkTExNBPKlTGtRQPBr6wW8pjwTGB6wO0YOhnV5PsF0LsyZ1+RwwDAiQ4PuJBsF hg3m2nFm/VVMRxrjBT/0SSB4yDkRsOGFhhxtNNaOYoBb/OgtJuMD9ypjBxub2IhqXKHUxrVSnYai 3SgIaNJITA1tCebEFGPQMcWMYBjBZu5NEVTTDpRxucxDCE2OnnPw2XdZsCiPSIwPYhzjRasyLzKH HKDHCGf+dVARzeb4cyvXDuBQjnEwTJn2Icq8cTHCoU9igR9eAnzeOzfdUWSiGWsab3tfpxQ7QiMY MPqwmNApHYQBkCYDlJyZnmi3AGpP1aN2YrIagAhOyGPAT9ZLBZq4Bsz7X+5QI0OBunjjweN+9IJh NajwfSokbmMlma3QNn9ts3VQi3XRmaAVb3tLpMXSfBuytZMt2fzvP7Gf11gGN7TiqVbRVnyFD5np if28IGtOn00z42mjkRQRi6EZz9cGRhBfYzM+x5a7eQpNcldgeyOaP87qh5VHGR5jMx5rKJDfNDTj C8wtIHl1YMa7K0Mz3l0bmvHumjPaYVfa0t0VbANsZRiY8U7UgW3G9WEznuvMZjxfmW7GY9E3m/F0 PDTj6dwY6DV8JJ7WJ51hM578JGfGt9gzm9YE9GZ8i1w0Y8bTkTPj6Xhoxuu7tOHOJZgzmj7WE/5w CPBOZ8azNGzGa0m1GU9H8WZ8XsNNoa00B2Z8FCe9GT/ghM14vibS4N6MdyIMzHiWdKgqTnrfjIc+ ogV8ICsem44i6YozW3sD+F9pTt9VYg4rXl72R7Diy4g5fVqdXCIb8UNZ8fDnMX/H/h+CsXNZ8XBa JlvxvpQf1opPv9tlelfYezDNkGu7RRRhuJbsHFhpPG1GZhKMa3Lm8Meewf4jO4nSYY1noFNbbTbs Z5tF7LKEOPKLT07CCErwbWYKtyOkJ5hqeP6FdlheGTMU5hFmeGCywQKDzwPhhlfIrsMlyImfjZWM mvBN5grmjPCrvdVc+tzYr8ZCzmAuAyDziykd5iAZtvatVKAO92uTsC8LFiFkg2OBf5/7MnCBYbOx B4tGS4SO+jA5FrxIEPsz6tEahiEJBCG6gUytDX78Aq/KVFCLS/f+GXXDJYBlDGf+Af4YjmH54lcY z/jXHCMBCMfmRcALmej2pfQed4Ia42EQhysAEu8xN0F/8LC5AsES/GykNA+YH4A5HoD7i1u19O5k Q0gpmrBjsanKaNJBNtVFHjjagpvUgnQ46/6C3hJ6AInJebj78A6qhuu7HYw/mgLu2jt1Acm9h+Zx 43eYY1v0aKbC/DJyVaz7QhBBEKziIWHts3fMu2wRd6x/ZF5iH9jtxmDaHEsGsPpyjKB8MuL/AWx+ wYoKZW5kc3RyZWFtCmVuZG9iagoxNyAwIG9iagoxMDM2NgplbmRvYmoKMTUgMCBvYmoKPDwgL1R5 cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDE4IDAgUiAvQ29udGVudHMgMTYgMCBS IC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagoxOCAwIG9iago8PCAvUHJvY1NldCBb IC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDEu MCA4IDAgUgovVFQzLjEgMjEgMCBSIC9UVDIuMCAxOSAwIFIgL1RUNC4wIDIyIDAgUiAvVFQ1LjEg MjQgMCBSID4+ID4+CmVuZG9iagoyNiAwIG9iago8PCAvTGVuZ3RoIDI3IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXety20aW/s+n6M3uTqSNA6Nxh6vmh6zYNZ5KbCVWKjVl u6YgEpI4Q5EySdnxlt9yX2i/0zfcCAJoGRLtKgmESPD0ud/69Ef2K/vIeOB44ofrupyFie9ELI7o 5zpnf7Ale3q64Wy6Ya6TBqnL02jX1WQzZYEXOZ4fMR7GTurhfTwKnIQHAYt8fFg88LL8nZGTBCxI YieMirdMKt/JXPzHsz/iS3nKPfFaXcb0dDcAuPhiP4o9Nr1hz8/xTteNPHY+nfi+eL/6dX7Dnp6f c8dlnJ1fsiMm/h2z83+xF+eAq4SNJmSTOjb2QZbGThwmPN0N2eR8yvZD5nvP2KuzTxF7OV/nn7PF gr27D5jAfRJ5cdiGSB67DohXg3Zi8NgB7W8vTyM39e4DYStkwCRPwSU7SdyNyA/OGFB5LjgviOsI q6Jp0mC3naA4XqfcTSADZRIKcoHxgRTIbhQwsH8cJVpCwKgdUjaIlwsp46nDXR5VpKybBA8hZXaQ RcEz9vrsHGI2rnT5qZN40AUVKAdJF5TpTua5p5riUeRELgcjVUBTCrSbtONIFwfHeaEL6apCVVGZ I0oXkYuTyuGRk5LueSjx4k4C61m2Yd0keBDpsgGMezFs2M+vz9j5OltuFtl2tR5ZzhLAmaYkaCWA O3yAVz3lCs5Q0zEpK+VdDgpPQgc6OqxC1GEmfuwPUdU9q5uJ3RClThikvAZRi6VvCNlPzny9vbQA cEL+I/3vQpnHPSdIoxoRHxNlHtSA7/E6EfuibL2+ssAX/G0iZw98eXA109CvEXS/rhyVxTyfO/C+ K0KoLApc8g5KzhfL21HRFUCnQyxr4D0mukLXiQPfViKz9fT6Pghrc7w9uAZuAGevSscKopjxcCcy oPpgB4nUDO2QwB5HBUdNpIFsgUSHdjshafraOz3hso7iZFQSD96Amzqx7yUsCRyOXyoGHc3ZRogR R8bZrqy2oZbZztU2ncNGRC90TFd0HSEGg0pWjkkFkgYHWEMieKAbEhcJBjdQLNCiggugFDP4DmNn p2fsdDHPl9unb/P1p3zNnufX2af56m59POmVAGggbx/IPPUdP/YTFqUVkFuwt5drm3TcybVt8mPi tyjxwNlBsouQD81ScQhXDRFs2dnttg5wdu04XdrSNgwlSFslge+xyA6s8+v5hm3y6Xa+WrLNbT6d X87zDdte5+xCMtmarS7F64INWbac6VtjcKDvI0eRgNp6UffQm9+MA6MEroHhQCm/vWKcnmQfJBgF 2e3AUnpku2LXoOUiF9Q8PTk7ef7q51fn/2BvbokhnDGI6/mhEwTIfEYK9IMgLnf8MNVJ2Iqme2j1 EgaOm5pYugJKYR2U02KpUvY7LYXSDWIHOXNvXAI5fooIBVGTu+Oq06oi4RGHfjTQqj5f3U2zWTZf s7/0RWFDPHdAW6ygBW7uwWF2wxQVAyu4f8tnsy8ybcLYiz9vkWHfsJPb9XyBKsgT5rnc1381v9+d ZVc5Cz6MIcs+AgCegEdr62nh2nu6Chyf522GsOBaH1F48pieAgwFEENEboXk20lykw2RndUi1cKG Ba680PE8RAjDfJlXy22+Xubbnpat7H2KZIqBr4C0uGqBmbswG26MepyCuZdW6pst+DbSjTDLQ7ql DmJfX/+ndXa5NXKrL0pWWd8qfr+ZblcXCAgg+d64Aj4E69Y6dV9YUjAtTxxuHLGKqnloW81dGWDv Dev32upmWF+WFlW6TlwINMrHToL8p+tBwOUF6ULhCUKCUQtxQg6/wQsQfeN3jPIaatNjBfmRizI7 R+WurDoOwB+2A+vNcip94FKQg8Boulpezq/u1vmMfZ5vr9l8uxHRuHSf3x9t3h8/wU32y8k/RpE+ pCPdyEVwp1bVS+ftlr4mo1V03ulbsFfqhiJfBGXspQHnlCnSV29Pq30MP6okkmjBiOPYSQg4P06c kMGhQ9YF1YzGjQV7K1oV1IcpTdx8EFhq4uOJ4kHiGXSdoNdClJv7PgPA4HOTBBICYJLSg0InpH4R +aBSi0hNzozAkZwp9cPCNHACiGNJzmCVAkJmR+W6Idi9tF2YIoUfcu2E97UlMBE9rXOFDXSpo83L MnGnBmug+M83m7sc6QN28vr1m99fn75ApHm6muXs8/V8es3y5XSx2uANTFq9MYTKZIf1EgbGDuX4 uIbkiepHauYcBtHeR+04TCIfvGZF+7f5cjZf9i3dDKK/jxqED9gMaIr+Nla4qZEqWCprJHJpLTQS AccJidAkIXAKoZ807ig1UKk47tRJ9CihlMIEtfU0kY+SaiqgO+nwR6EJhhRl+VG+1FZSOe1t66qg S0suNbNV1qJUrXGfwgReKrXclA13I3+JAGVSbzjrqVB2gIUcZgtYhUKxA4sSlXVdorOTJc9Z5rMY utFWn2V2szD0YygZP/Cc0A/QkiiRfQ/D3VQmgyS2RHcP2Rx0IZbp/vgOW4jMvgVYyFzOckShN/Ml GY8cfLDWKWmmsptw4LLF/BPZmxmuNiuGT63z7Xqe4yZ8uVEor1MiemGHQHowQRwgGDgw0tuBNc1u s4v5Yr5FoQLVsefZBu45qhekCtb5NAfFZ6z8pieGMWQVjd1kX8YlvVrYIZA+QgG0oes7Gov6O49A eLO1qFvX7wSqo71ihtoUHEWI8PZuOcQUTUpt4PtcbgTPCDDQ8R3agCcUCtDx8S7fIEp8f5Q7V86T eznh5Vr+LpPuIZvMgwiN7yWAe/dmvlVFv6AnLgdZHQ9VDEAVV0BDPNWvuf39sVDZiuJau8N4jwFq 4dKWsNjBi7vJ2uHQkodGxdwyWQUJKQEbRiGK7vDKUPqk1hXltXVHlYPIUjgDEbrm3cOzCHZgkS8n bf6GLXNofyiJi5yyN9tsusXr+ZLdZmswUL5gaOVcLRdfEGNu7i42+VaVt2/GtQhqYYdgEUIfWqPi CvTabtJT9iwtwk6gOqRwc726W8wqlB5lywSPPCcm2QzLUNqEvE1fHuhqdsK2GdBCfAP0oCDrpKhY AeXblZb2GcsCFB/lLjcR2b/y/qUq7QqgdA2wljrRW7maGBqk4IpwUoFV4fPuaOf3WziSwom8FYoh E+leZdXZ5Xp1A71RhI7C3s/XSLZoF3MULaLbYcIqrlvIrjHcU2AH4bdEdnRMUN/RgYUUyJhbgFW0 w+TLy9UatQCkKFe3+TqjNpgSIidmz2GTURuivE9+ULBzXA8pPgXw4xkGsyFMgzKQpBf5lxXiayqN 7Ay6DPYmw5NZbYrQR+c4+oiQhnx09BUSITa0mcaDQ2kQC+3AUhKBwhbYenu3XpJE5Os1vKcp5eu3 qyuZcxF1MQq9S9m21XjdY4W3rtb1eIJTUJ5TZcrowopafuCKNNpOUPzF7s6yWm4kd5tA9bbGNSXX sznVEqw/rnPwHVz6z6WqK/vXar6UOVy0oHxerf9NtnepyrDoZaVkX1FgGsUgmyqIQvchMKGLZqPa NvJuf6d/pmeQm1C4YVZQ6ZqgLrmX7QoyK3MnR2alpG9kdv/98Tj9qqgfRT623YRyLQdA6yBFsiA1 Uv6YCgeddg7frfoKn39vB8w9HSmjhYMEbTFRNHSDRYAUsqoO/b5Bp6RxV9iv38zZM5nFGowVwhXo ehAHPojRv+O6OjVcAaVpH0pYKcZu9KCcsA8tpb+CctivFdIsgMMyWoEdWM9z1BhZhrj+dr36hJT1 jOV/Zje3C7Tqqp0UDdXF7oj1no1iq7ChOPVjpldzCOoLtXgPOYMKvR/fVgV2YK0YeyW8YzH0RLsk wi2uDmhA/DM8Aioni3fWAPQOXw29oq9JtXfkYWj+yUgTGrzAp50MKdOgDaT3hydmhMyGzUmAbrAF bqzGFqRWsE0SI32qXGCjF23qACCjR/MaAswfwgwitHE+yFyUIIR2SEOLNM5InqOZPmQJGUWiRTlA qGFk9Gbzy8t8De5B08Cn+TTfPNP5OrWxki3ybI2oYnU5ig7W8YJe1CEoYWoTpkFXZaPbSwmPTnk7 yIjy2adsvsgusJ+t4IENu/gC+0o52p/+hkLRu/tQuFMd67ondrgJ9PaidN9BHjtjsG6QEtpv4TMN kqR4RwtA340TyAc0GwA6QUJBBaMpYBnsSI1RHnnvUR52SMP0E0yAg9tUgfBRkYZIK03SOh1VUb1b cm+nfadTWGHMd1FRxo6nA8IYdttjc3Sc1EDqjbHZ9f1Q1pq91v29VebqDdcHqmFnyy89g7Kd5GyF Tbev1WB7KD+I9KdPfhAaKCOKCdEXQVHqyP0QgR87UXiQfpAdZCuYw3XJCsIF2kxXmB3xhW3z6fVy jj4lOEOXaJ8U7RGXd0jy5/cxja0cZaRQraSXSdzdYdPMOAxi7iLjgJmefnKQzo8dZGpyw1TUK6kr slSjVq5tzTMu51RHIbsuWgdqRYdAdg+tL7Xdrt2GE/7u6C6vFWDSqW0kk0D9cxUFqX5XqomM0uzs URIxhXoO5AIej8Ye7fXiIQyHFSp/OTkTIqM7PbarUYyriQMrQNrY1qYmrFXmZK9hm1IuNCFHJ1EI g1sOA3sVDPvLRBkyM0yvDbIiAWAHGRRfT9KVwTIz69rA4npvd1AFq0K7IoWvKh4DoqhqF9i+1hHO kVdDcy3ToCip65vyo7bI9Qq9kDM1QVbmROQOV7m1P1uws9V6+1cXbuaMna1X29V0tfirO46h0Jk3 hdnHUyKFVLiAqSYUh2EorAB7fyS3V97kmGbKvqeZ3Lcg74ah14n2RFGlQlB48z1ar9E8C7dQDnjK /6RJD9liFMKrPVKBXNNBkJ320B8m3a0ge3XGstkMQ2LIJRSjvsgv1EbuOkMbheiUhoOAdkfqil7R Rngky/BTVC9GIbyJMcXMgkSXbFt06YOUQ31s6/ZCzEYs28GDEHlLyGis2zbb5ig7YhvcctbTKA6K pzjthA0xmaIGY4WQD1NMNj3aNVBajGIDKFWrBaoYf8YhIhj6jNbPzfX8Fg3m2885dSJJUUIdd170 hH7LrkbtHuo1HIBK9NHKkyY2fUX9/cNBPGf8Q0vIKAz+Dg1kKMx/J7yb71Z3W/nqdo18yJ9iU2Et gPo8h5EUnWXkXo4wc9MM0tKrOgTSx+glRJr+AFWiHWTIb41wXooZTOVXodqvBK0jg30dNSZIqYHS VwlqxwBOwetzOsJFuAQXOdxEOR3nZLOZX1HG8Of5Zb6d3+S6owXx8yhioVxEvZ6DkAokpq0aLUdX iLEVZPAOsekFQ1dyNU8QMQG2XMr91NerzZblNxeYO1ja5CKK5qPQWzUr+Wopit4t/FuE28pFXPad SDfI4phxLBoqpRD3C3jfBHYtC9EzbePTdtGkppsPIm1jCVk2/XgnplnKdm/RS6X8LVW8N0ZbmmkE NH9bfcYgB1HlGIUZdUuQXtIhaB943LxG9sOIUqwAU/npwr2CHXl69uLFbzpGFQGqOUgMdmm6zhHU PJ0hrtmOU64yVJcrOgii08C/2sTxA6G6FWSzL8vsZj5l8LwvVndINd1kt7dkX2B67mCJKEkBF32b ZxjscSm2lqFUmd0ttqPIuS7HkxNOeD4EkqN3EluOD9D1tgIM5F3MZXGS/TvP79WI0pqhN8mICoj7 rfQ4brjeL46dqA0qdhtpMbNIKL6bbI4JBhheQEHry/kY0YsHrInusF2wdusYdcKjyDTJYUuj7MD3 9SDMKpT7aTuyB4ZpMSEdZFhOGHYTF0GA+NeTlmXvsLN0VkSidrCNVTpDb3OSYDK5XwWrQr3Cl3+Q zUKYJuhgUK7F1AKiXk/iDYoycDolhj4iAa1BqzBWtyQqV0pyV8vPf5p/Y9hRU4LXKzgEO4pJtGls DnaQgWQ3MkeisdkWiSHhZbAqktBITf/Qk93KukIMjt6XKsLRPtylDqgaKC2hdgOoH4t/w8CbmHm7 e2vcGJ3PYwzttQTvB1DQEm8Ca63zKjk2TPguTkS1BEyibRjKxCnW3dof1Wtx9KglZOOhTJ8nZQnY eCgzxyNaQkYoY0/ph/zXn6zNnvk2t7akVQfojPeo49udDLZPaXg4UM4PMDnbEl/Akh1Y+2XSSz06 qr0OVUWrNvwLS+0glFardsB+GrlXXCNImcAWrVoApRKYhVLtG5gM8jF8k9t4dPujB+RqRO3KqRbo eRifENO7ca6bhU/Yk6kH0arwFRRYA/3BrydFzP0Vft9X2c8hL1/+AVGkS9zWh7mI15VPjeEkGrpX kd0iqw/T+uGi958m+pcjuQPwEe3A+sr0lkZQmKgsTdPXvpp3EJOKE0Zp8LlvB2xvezAQKnVQtCVU BmUF+giJGptqNBL7Oqp8KIQeQgyFnV04D9QiGTmuXqyCVdEgjXDF2trvc4eKGKoKSou1bwA13Nqr EG9oDGUH3ngBgYmh7AAbLyDgJoayg2w8lJkYyg6w8VBWxFB2kIkYqqeiqGU4OqICfc4o7Uwt6a+K omi4mPaBk0lnYAI3T3HOAh1upC49HPfoRXAxarC0aIoGVCZv90+KNi2VWQe6TOhSRVcLiA+tzIrQ pQpehZoNoCwxtb8Jw7iweyBpULCv+1Vj8f3hptmv4EE9IJ13AM6Ch7jFRaJ/uDNNLlZPPTDMG9SJ dUvQXooD4Jj3TO2WoR0xiJ+Wqy0mYeI8GZQ10RAn5v1Q3XojT2g/1YdUjHPShO4U1ms6BMrj6Lfi WKH9ctmX0A1p2OeOFdIQo5Timn2eFVAeWjAjJGX96CAkkyYL4QTzXZmWhuIcmUBB6qD2oDdbPCqB aM6Ab47XawHlvnkImwNvC3aGI4MWtPuccW1xbrRtcLtvqW1nk/nY+RdHPGZ0NjwtdRePFpIrqDE5 subRJoh0vpw6hbxlWKFpAq2B2Nc9kqdwhx96Wriy4uus/JjNAzXYWpj5nsnUfqdwe16CgWZjy5Vw j1ooBnMkj+HWoOxiqm+n+DQDlVipk6kKEUc+3vUM30um6k5B6tRtT6ZquE0aZoQpmv2Lqxa0miYT T8Hcy/WwLmfsAKwHiIi2UFhgNRBbZLWmWNjRIZ/DXVtSi4jvtVfN8YSaMd7hc5x9gFTNRM2Zlc/g JCaxOIOT2AMHHIljgRGlhDiG16N5uDiSk87EGXJq5oQ+aE7yxINwIGdSvB5ynO8kTHDOJvmIYYqy aojn3uCwxvq9Be6FOOYaGW7zvhDnEAccvZkh5f/CMMWz9B1cpDS9aIrP6Xs4upk8QJwNWroHcecY 5WWeDjw4IG1UwKXv4FnoU0JMhdYgc2+Be5jbwENMA1OfFEOuXAEXHS2Bp09ohJO6o2CgZ+l7GlZ6 lr6nVlQ8Xa8az1Iw6DuA6xonHnvsM3snOaYynnT3CapeGseTFO45yE4HMtNrZl4v8BpDzgRR9Xs8 emOKujPKzin+Tq/ARuIg6OlEvOYBqEefxd94EGAOCC7MkzgmauIVvkdcTcGMGDwnrvEZD04x2EC8 nhCblp4gX1EoKxi4+F76HN5ZQKWfoleCJ+E79CuBKTr2ev8B29C3BSFwKKafElOWiDiIYHhWjWAT YkorBi8xroJBPEszuIa1zEjFPXkoNpElohZ2YteYBo6SDuA+jjCC/GH+SMK1EtL9QRU/w01hHGVC TVya5+GjOAnJFO/iULxL/lLGHeeLSn34jh39dkznjXvsCFsB5QW6auUFtvTKi0xf4Lg5eWd2PJEX mAojL+B7isecmeeYj5sLvPkDO/87e3GujjzvXIQypcUiQh8NxDjBA4s6v2E4jxdpHqXb/6Mw+iR4 3+DZZTzp9XG9YHPx9BgeDhAY6r88Vagw7/D0X/RDcMKgxNoz9VbzWa4Rq9968ksZaTQumRRdSnNK cXozYgOcr8KRTI0jbEmmge9okveUs9yvKqI4B+P84X35NLDQlH25aN+NBQdhYjbYTXEQ1KPhoFOQ Fcu/wZp88wtcgHugPGdH2IMWMApOInb07piFAlV8cgTXH9dAQSz+WmWNesKYxCRy0dPShNKNE+EZ luFU3IGZlQbOX54IaP5HQPMXAd9/CQiqdyaA6Qd4ZwD8/fExw5Lku1xxC4TCWuRP+ab/luv+T/Fn UBqfkx/gyTECC3rRsTKpCYB/bGFLq7tawrSNAuWVPf0eMADd34lvlz8Bz4/4duR76S+0EgkL1uPI e09xOEQHZNCOyO3C1Fchk6zA1C8ph4BHhVHPq3LYICT8hxj2v/5Q8kUxmfJ8qp9bYbjycrkkhSSh xPu5IKTEe9qF8NCFp5BAQ+plKS1DECReAwLFSsjiSlY60lvhT16/fvP769MX4GzdWfZxR6mjkC+x f6py3vTer1P4fHMrzhdSW5HF6ArIN21RxdyF0ldD5zVwbVgLG3ncxOTD+670OsOx0MsVkyDs/64Q 9fkkwYLC6nftYpYCl5Ahg7sdCwg5ul5TnOdafWZf+PUQQJx1WZoNWnHLFNLCyHcSj84nt/umxQo7 s/avpeADZNg8HGk6kO3eH22vsy2bb+TpzYt8ebW91tvNi+TUrtUVX40ZhF71yPMdLKiUfEGlPvSn 4zNwpAKdQFb+jsm96B9giF0cUVygHjoQZ4YBZtk2A+rY/+br1f85glIT44a0iw1mzmOPc2EQW/TD BI5Iga1XOEf16gqHHtOJqjkds7rFBCF1uHBfHuFw+xHhDFwvzTS9w0gCdfzi9DpbXokToulr+yyY u+VCQbucVVeM3U7LWbaeScQW/l0DsQincAYyTF3xPROckbmLR4zGJwu6T0cUzI3jiKiDX+Gs90N/ /X+UgcOhCmVuZHN0cmVhbQplbmRvYmoKMjcgMCBvYmoKNjU0MAplbmRvYmoKMjUgMCBvYmoKPDwg L1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDI4IDAgUiAvQ29udGVudHMgMjYg MCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagoyOCAwIG9iago8PCAvUHJvY1Nl dCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9U VDYuMCAyOSAwIFIKL1RUMS4wIDggMCBSIC9UVDMuMSAyMSAwIFIgL1RUMi4wIDE5IDAgUiAvVFQ0 LjAgMjIgMCBSIC9UVDUuMSAyNCAwIFIgPj4gPj4KZW5kb2JqCjMxIDAgb2JqCjw8IC9MZW5ndGgg MzIgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AdVde3fbRnb/n59i6my90tqG 8X6kp914nc3WPXGi2tpN29hnD01BNncpUiEpO+7xF+y36u/OCzMACAwgQdI6JyIBEsPf3Lnvmbnz C/tP9gsLYi/kf3zfD1iSR17KspT+bkv2E1uzp893AVvsmO8VceEHRdr2brZbsDhMvTBKWZBkXhHi e0Eae3kQxyyN8DBv8Nz8zdTLYxbnmZek1Vdm1m8yH/+h7V/wo0ERhPxavs2odT8GXPxwlGYhW1yw P5yyKOLfEi+z0wv29PQ08HwWsNNzdsSO2enf2B9PAcTofisUu/szJyhB4QV+kLZBYRrK7JpQ3KgS BF4epTNBFN/z/TRkpwubPBUmRR7mSqBZnT+6UOVgjTyOQpYJVJI+AtWsF9WGsRdrNmfrcv9ps/07 +7Tcf2A/PDtNY/azNZ4zyc4O40lwwZV5GmbJIRYLisiLsihXsAcS89V3z9MgTi2ESuCaCAcRNAwh BXEaKGQDCfr2MftuuS0/zVcrtry4XJUX5Xq/XL9nJ89PLLgDCXqIkFGYQTdAzuX4S0JaotrkRQuJ IpwX1jVVK+HMoeXDmEARZX7hZVGYM2iMLM2VUgEn9yim1p841NlKMfkxfkZrA1duZ/xfa+evyTVF 5mVJHhQgxChku3L7sdzu2BwU26zZ2fL8vNyCc9hZ+XG5KHdfsxcnHzm/z0Zo2C4FEsaR5xdRhdyJ g55MQcQwTr0iyJOxRNysV58hZ5NAy2C4Cx/6atz4nrDnqyWN52K+ZrtyfTYFyCjKPQgiSaPFhJYy uGW7nUIyYrgoncayiWmIoJr+1Iz8qS5214I6DtjJqz9+9+K/YB2hztmPl/slhNU2lEqbOioUU5u2 +WJBlnt+lkTMwjuzhrSh3184chco1/QKexHlcH+KorAR2d5PY0Bd9YU5ltw3JuewH1HiZWGc1BAd 8Mwa2L713m2uFvOz+XLrTjdyYWfagyeO60MZwlJnRX0k75JuYRR4cF0tzkI/Wv3ZBtUuF5fDqKXi He7u91NLmSUbncX3DUyTcpm2TjYiV3qt5/s0npRiaer5MXwiG99dUiwtvDwdz2Hb8nz56yiiaTPQ J5SR73txivDp3hAtgu0O8yyvIXJlsw23SSP4TJPskPOtIw2bVK7A3sKvXX2eBFiCiC0Hn9vALMav TGRniqAZAjUMkqnqKTnDDXSCfEtaJF5UIAQKYqQqkK6R2ZT+GKjVDB8aBh0DwR1F5OfHddeqxze4 hRioFVl/LmK/YfsPZSNQHuhQHaIbRgSWjXJmNt0sNrlZi3IYCvRiSA5U+wj2+ASLzXq/3axW5ZnM 1IgYkYF+q3K+XQsqSuX55mj35phd7Uoecdx08BjFoZdEFU2dYsdJ8mCVWOQhlH6cW2LRz3y3IRbj kGFY310tV2eUAXB1IAZlVYIYIVqWQ3/aAO9CMpLAi3wSDRuKq5EpL96VZ2cQDMqWsPnZ2bbc7cqd 52h2BpFNJ05qWLvJ5sr8DbvjlCVPswSxWdMm9GgUML8jhWqwhC9/SM/p3PRIWEhOv7xa7ZfIog6w CoOsaYAwI02ijNUgdg/iteKMQ9SqxHDcIBpmQScNX5cl0tHvr7al4/gOk4A09MIghbTaiLuJN5LV mN8lAaEOfmworooj4kaz/HVOKXu2OWfzKQgWRZhZy2Gb7p5glb1McyQBavayMZ3VcIwG2UtTa/TG GVWGbhwyNZV1Vl6uNp9p6mVXIrc+X7F9ufiwXv5yVe7IVyrXO8gFW6735Raysy4XlM07no2bxOzK OVbDLnt0DTepGaE0RNYrch+BCKZ0vTzBzLLxBvFKmCeITmAi0qTwQkwcJRFcOMwfeWGapNRYz4yN OZg8RdfVdYPNYNmTIpRdPyCXVZhWzZq6G6cGJbqQGWwmkA10GPlMKblkj9nldvNxeVbqKRqHSfBB UDElIvObqQW1W89OY6TywgNPBSy1oRwYz4ba4FM0Sto+LvefH7Nyv/Cc/Y9BdOOsnsYw7m1g+2OC H8/ZYnO13ZWPkbuYxILqGZsawu6RbbegTc1gSerz15Si9pM8D+OZ70VhEQcBTdSqd6+f24tBnsj8 BZ/4z7LM4yFVEAe5h0w7lmMkWNcyu0B4bt1hK/aaLwCRj9NszMGmsEIFTeUephMK0RTdQTaF3xnc FD2YsAtMrQeinQhzT5ipEJB0tr5bQUqVBf0YIq2EfGqAxI4fYlYNEzFxPJ2GTGKaiB2xrmRyDSmR DdSQNNU5376/KuFbLXcQpfU5uaJzPmmGG+sNGHS+Wu72y4U3hd0Ndf7ZJq0lXU2T0+r5NaXLUkWm dBkyNUS6yDIGEbgPIoGFXpxxm3ecpEs2lYimGG+FX4TRAJmK4EonszQMCUtuthKgYQFkyEqv7mCx 8hSQjsBqOLXozNWyCIe0/2/r6DpO1h4K3aqpPRu7xWgNW/jIEYqlxml+uzMQknN6NpADRATvz6w1 fE+ejPYaOKwDCwqrVMlYWGNJ1YkK8wZZHMGXsVFZo2aqhxktcxw9al3OaAgFlaQZPBUJ5RoRwjV5 uZLDCEu6KDIwl270O03OEjgbuk60k4CYNcvjjJa7CtQD44y/8n9ffjg5/Zh+ERf8L/HdTSfNsYLX SyMsc6phPch3g5bXWmapbzWMMdjQ8vm4pHnHiEuxveGhxppjGDLM2hLkgQP9VKB1leJB1FTrKQQw S26QUOmZl4PqdVa+w1BpNdeCq1+eHxnD66iFh8GrpMFkQUsYGqbzDea0xuVpumxntRjAopQFpbIH nRPJTSXcsOJd6qySyzDxwhARm6mEG9m5CpSVNjFGrv52Enfbl4I5DvOXOkZ1/WUKsNVY22gPDLai qyPbDZKAarARCQe1TGy/gCoyHXydVAkLyAPZs32ouU6+cWObI7uQFzAXo5BOppUjH2MdIKsgcUlr YbFfQ+25Wq2GrunUetg4UtAMmMV9FhBTv3AnuD0DdWNKL0DmmtJUg5XeFOJZzWJKWHc3VFgvEvg5 VlOnNpQD4V2Dfzg3j4nweidtggC7CBDBXAuZ4+jVuLs7rRDAlAcZ0hcjSUbuz0ix6wGmlzrcu7GE QQoTfzSXSY+xXcl/YSevXrEvjkM9yI5GWpEJ9eEkp6M1WZdKrSy6j+UFAfZDdWqyhpyC5xwJNEgW Kk02DtaXZ5eXq+WCJ3ApSP4iltnIeFmM9+sT9oPcS8gdkomNuuzIQEtxC1bdprBlTRvDPVK/dCcC tTR0IKns+q0EMwlCvSgJRswBO0rDIHWhpUHBsoS03+/+QluA5LYu4n38/91P/IUYv1370QeTRjOq L1IgLL6rRvtWopkEU8Uh7QU1dV8/WUGiaUfbhmVR6HYkU3txrRRqBPcNUMKLG6LDpJWw9ysdmszQ HtNIeNN7TCOBTej9Ko9pJLJOj8nVOgxSfqEKi1sR90vpIFoOQqbsVg3YHchpFGDZTRpkWI9gaTIL SqVUb8eEYl20j7zBQIeHLJL5z9CwM12p5Jrhu95gkdwMRtMM3BjIUOYoR2Jst+pfxD6MaSx7xYTW yB9gwtux7FB3WYylg/fMstuwLAo1jKirVq0FWN0+d2XZbSjD8jO3YNnHwbsFyz4OmLBG0yS21P77 ZBw0YdoP6Q3kligicJvLGmhGlfGycXdLhalzqxJWDobBKRuC/CBmbC2t0fB2YU/tJSkwW470aYhq 1+KPKvobA4rHfrKiB8+EPHuEvMezU5EKOTjaPD6cJP7TVoL35j5Efyk2ViMjbI12v1/pPtqDpMEY bQtWtzRMbCPaKNSQh4bhkrqOXobJxdDobxy8W7AR44Ddio0YB82yEYOYbmZUEexaTyBXpiTj8HHS DWM2u9jHoVQDZhnECryRwAThoDMGEU2WXuyd06pi5GuQbaCQcrr1ItMxsg3M0maNwHQMjXr391Qx soRyH0wPdjQF48oiVDGyI7sPskJVhHwTCF3dokEQdXxsIrT4qmGQplmLFaoFnYmJ5EAg1XAaxQrO 5nLOp1MMq15KZEHtJprr4DV8WjdHO8Y2cOxVsZyvftei4v7ud1MQUS+hT2zs3WQcrdO6yKiMpQ3E lfWuYSy7kwuVsbSBWRS6Ha2vl6urwboPWh/FD1NfL2G2qNLQWROLH/ZgRFST18yPjRK/KSRN1xlI 2mD2h2iingCLvh5TnGGYMRJ7WWo4u0d2jL+lCw0e9FOjxItjFMSuQTmgExrsZpdm2Cxc95JC+zfr Mx4CWZkhe1y76TWxJIRYSpS2C2VDVY2G0hX5IPslapkn2BLq+9GImZMphLBKSEhYlq7oF0JVt5vX uVEVD8SW9O9/OGH77Xy9W833my2qk16jokFf+bzKJtnUtXiuGmg5O+FanrRVWfRDklup1IALyvbt vnAc5FaJ7IeUU2W4iNmQsE+USm32D/a33nK7P3dEOI5oqOkaxXRMgcWOd0o0qlNBm/dtSM5E227f T0oxtW3FhneXFKsMgDWIzhRbrtauJV1HMVmVK7Dw3SnJqIxBno6WzPl28eE6XHbQlqtCQTZ3OQ/l 28eToJLV/mqgLGXf8H3arXpzO31rpGtqVm5r6NCTBBUpCoZSDwGKbToX2Wxl2UP0r7wGfq4B9pWa rny/xhbx8xRjoMvWJOOQuR1OcVM1N9UpHzWwYzjmmpOQAQgXFCjTWoPi6sL3HdCAEjZYDzrFiKsa mzXgd0BDQyqwVVMfC+RKwkFCYaqD3ny4IRRjgC3E0QzrsjzjlcHofAZe4H9bUrGwPa9cTCXD6uVp sa/5plZPhdoD83kXnDIqrsHuIN2nqyYlAslA1WfEui8QikwrEeZo36VAxLz2c81MuGZ8HEk0TiJG IjMCSPD9+RIC8afV5h2K6H2/wQaQDR1Vs9ttFsv5HtVWReBJhfTW89V14s1D9jgKUckp8AumuuMk Hu2uR9OQDBIPrQRRewCF9Owk373wDMYBU+M6Sa1cvabcxjZGZB08R1XfC2XOWgogcmMBNxIlj7G8 FwMYotBXBM9AVEAkMeupgDiWXwAnxdExg11JRwUxCJZOQMX5KFhIQE0BS1vykbB++lDK+ufTOGO6 XnANXzcnu9ppU8X3JqV1Hr8GxdUdMwy1LCCPmmxz2p75WDk66tCqnTXUN3VynVqzpvBLnX4AfyOL +GFzhaLoqGxvgbuhyCVSZ0oocFJqu8e5XSR6NJZZOu4ahRljzH8lOCIUJ4yiBCLjlzN56VQ0jnoY R1Q3kZ7iTYgLlGNfzRxrOqoGQgJTtYejj1TFOKrCyB16paURwrdoaWlmoaVxRlGOGQSUKKbjTEUR Rq2kb4gXK6NO57z5/tCqQoNCm0F6ulKIEtlA8/Hy2clfT358dfrX1zg3cNqTytSG9thC2pPec50L wIg3p8LM9FDr4WkJcsh0CqkNqaca/rW0dT8k1CNJUJy5BumA1muk07719rvNlaPKM+2JDqJ7Earz 3WoIu1XftERTBZBrkFyJNvFZZTq3VIN3hxRT67hqiFwJhsPKFpvN1vWUylY+OxTLyeU1I5G9RcH2 3b6cn1GRfig3HML4fHNWThK1VFGnpdF61McoJ0CV9TSFM4BCDekwD7KBcYHsAlx1qtxu5rx5UWPT hcCnsqKz4Uw41nZOqQwlThfHJjmy3oF5PXN2IvAYFZulZkQj/IqKw8gmAEwfOX6gNLRsIsGxDhKJ bIReHErPDrKxlfWnnwt1iNYtv+3j3MwumMLR69RXUKg6P9YztfmdlSvcuee0x+8klmv4YFXIjFKu 2gfDgWY5CvLSujN4YlPHyWD7AiZyoKOTIAOvJjcczeMgJglwLnjmJ0hB2fjGMEnPyJjibAixFmzm Js4RCnpBDDNMl5EM8cuZvHQW5ghztaIR3gS/SHPfPSKQDaQZZlqNJpB8UYL8S78+SBLSA7or1qVT Vyi2TFBVW3dFXvCuuBas58/MAtUV1YTRlWHzAV2LUCtFEGOzLUrGXkMROOgkpyVUFNxBMd+3JVQK 1kCFcfoBJ6zzA9c/zrfLzdWO/R1p7h35FefLbflpvlrtviZNcuMlCdVBwAr4fUhmR9AuVFnuniUn x8FCcvI5Dkksf8XU3Zb9z0SHdwQ6urRRdluEawVKh3zqIFFRpQ3F1d9/N8cBkRXbUwJwvqdzbXBk 0p7tPsPjvtjxaZ4lznQwzOuNFWbQZyTFsgf3QSgw60QlOgfLBNJBBo265ogHuSBVLmgUsMtyu7wo MUnHzrebCz2qm6v9jk4vWu5VEHWz5bq1thOg78O4IvOc05G9gwd2ilGtZmLGwYKyOym3H02pvDGO CwL4DnkQsXgctt3yY8m24DAcwzYF7QKcQJhRjbEavrtQwYgdEfEiWm8jVf9aAKGCL8o5nUq3e8w+ fVguPmgVzE+puwAVcervFITUh3vX0HcT0lXLjQyBUSI5q0lpPx0HpeJNYDpBesjIVup3FDBlRbny LecY3A3WE23Zu884ivB8s13QUYU413mS+Sy9Yyu2sHcP7ySuSghXhS+Gt5EM81QuN6hDuoSYOMoC xrk5e3BonPU6ZRthN62mFgVk5IIxsuBOIPaT3BiPJBWPTP1DBKosFiUKh8OCxXotXUruZ86xaujz /yIWq8rLsnflh/nHJbz3OZYe7bfL9+8hKps1w1Ge6/1ukjVGmEDN/AIKXPbqHngqUUGlmLHMebCn MrULOhKZGG/E3Vfrq93VfPWYXWCq4QPWHeyW7zHrANuHwxa3SPJ/3KzgO+AIuSucdn+FAORskkGH dxpGmFdW/bm7QY+wbc9PcVqrgjJw0C/Lcqs8eBzA2JmKGhR26LUQNWB3qRAj6KAi10uQLSiO6fGb yopFyGxmOAZbcs4BQ1aBUiX6pokRtW5WsAZyEbJiOyyAUwkwtv98ieOS55DY8tfL1Xy5Rp4AOYBp dxXiDC+c3QhJsEl7YJRvZVchzonH4ZyFhiTI2rO4YYAD1XRPzKnAtsUNYQwRwNHANUiY1HHeVVhO vKtQnb+pxvEeEI1mcgtMq9mQnIm2udzNP10rlO0dVrWx0EZ4l5ymNxbakJyJprWJozM6zDqprXI1 cJayaCyjeesIxQwQeydv9WnOXVAqQ3DdyVuas1HcNKOT3UltxshXRjisGaf5xAy7ElJ8h0+29y9r ln11qxOn56eiLPSwTdeernUK08cNgWNoMhIWRRtU119s92Kv//3HP3//LYIRtry4XJUXiD1g/xCG tEwv3Pg0UaUIBIWdXFNXkzNMxnxUTaSl8q1U7d/0wHNbjsM9DJjav1sD1i3808bqUZpgKg3nhouY zYLiKPw35poi14IUrhPjuBJl0PhUWgLrqfMEa5daiNJQzq5QGsqZEktYvFzQognxDtpPvTtwNnEF ES4ecskSoXbjewzvHzZXi/nZfLllD9mr8uzss8g/MvbHXy/hRO/Ys8vtcoVV6Y8Z1uRF6lP9+vPJ /H3J0reTBLdqETuKEVHXJuWDAG54cChjVBE5wkKOYGo+6FxYgTJRiGjhyXdAuTk51eynGdFgzl6W DMmi95VMbsjPC74Tr9w7alxTjMTKfCUyGnO/GAU+SiT5GZwPidmJ2UZbqyZZXSCCmlEY1CFqUbcX dlY8IAPMb7fz870WXPXm+bOTZ2OFt6sX5NG1hn1I4KcZiskoQtcVVqMXdj3tP7z4/sXpfyv0xuuP i/3mHZKsUFOhI+cMsgVVGsnmastANnh5tC3o1AGqKBS4wSsyZBpazFI1/p2O+o3Zaqpq4cdq54lF lQqKZEVXqgwaoEpJ+4gfoAMszur38sBLU/BNldEaB0tHn3wqYb2h7fxy6q254MsbK8pdC+hCzFIj QQiTI3vgpBsnIaYxxlDuWaTcHYvdblkIQ1QJwbGm90AGQ/CaD79Ajo+rYUix9Ph1ubjaLvefKTKk 5TRbfkriJBNVgTqSogbXGsNbVhkh30zdOoa3zU3YLIHKFSrSODCGTVDOyst0l9ynSsNxsDRbYbeu wVbsbLlbXO1o0R5Pxl/jABGVQTrkusvtOjb+nqBo0k19mK4TxThtSLbb0xhfV0+zNrqiJG8/jeSE RQ2SK/OhwJ97Kt5EqNes9CJUJqiG0NIZt0w0LJjyY+RJapBciTbxpr4QSdQkSOI6vLukmKoRNJJi lIZz9NBMJutVctidAH8RM1Ejcb1lF5jgR5Z1BDgtAYf0l55Wr4GzxrGylp2+fs++HdpR1UzKwxwV KDeCCU2Ee3CqkR7EBvOBaXnXgz60f4ddbAh2a6ev3n1afiQsZf3KM9cVDpKB3SYzUEgQBxNjy1kN nsUjDe3o6qDXZKm7yns1gNithOWtyo+xoDiy602FpiHf/5feh9AU81tQNcHQ0DSDh/7i2Q/P6t75 NfymQ/pGL0muQbUG8LZ5CS4TpiVag73b5iWIWliMOcDU0TgMSnno3EIoYQ1MeWC1DDvfrFabT7R4 lyYOf7zcL6dAGmSYggvhLI0DyqcsscmDFvKgoBsmNLG9jSq5lWd8jxtDdRC+ZuyGCqpU3pM93pYU VKx3K2mtEMk+P9RSIPxMp7TWRJktvaB8JDJKPYt07iQch/kR3yfPxaabNYSOiuyw4/Qzhj5gb2EU z8SZYebmZ8rph0UcBOQuqXf9m58pfRPyekEsLah0QlFg53FIxy8lcL+MncfKCyO3rbUSwYyewjM4 uFK0EkSYItTXYu8xr8HQup0e7cvaRrvFLMlRxJAyEynsaYq9ltiSXL+1wi0s2giAWH0ryfHjAf1q nGEbfo5i1fLOLMWOfOxgRtpF32NwGTws/aCG1HMhbCboYTSNvew5CIQ7AtIsVXcWDPNNSIJhzbG+ t8I97JgKkqi6h+MwcBA1oVKtqztoiyOgltR3FE5qSd+TvanalmSpAIgbswX7gJJ8IfvEfgajsDN7 XqR13FhYZBlLM58GXr1dzcICRRuTAn3DJ2HB3xQ0KPICB/himAvQk3+YY92D76OMxUpeB+TMoxaV bGaWk2jQF/hv6Cs8Dnef6Ws8HhIL4Xf0PWJQlqsGcTHTv0aP40OsUxNo6HG6xmpIDlW1xTtBP0Rv iEhUpAvP+EmO0W2tHIBJJWMEsDQI3I0yXdWgSIZqGahZ70BxNqzxeAdDg31rDA0Wb2HoWMC0IKlb olJjjIZSWl2QYjwiqvJMsh5EpLwyLM6N606BNVntF7AJInDjb6vWyNlE4l46BagjRd8SL1Lx4Uxu Ybt+ZkevjkmHhOwIcax4A09AvFmrN9ilJ+6s1Bssaxd3NuoO4grezIluRz+u3+DLb9npfwizTdOE vZ2QOe2qE0mERQEJ1IIv7TCy8NIO/1NlT26obZNOqn+B6rB+8/QYTAsCJuoTnNfGb+hvYGZSUEs1 EqsbcGPsZ2NFWPXVZy9NotH6eOLogmorkBILaIFTgDV0GaZXUb0GGjJJw0FxpOQcGJkI7Vmn3wY8 9s44B0X8RXIQ1KHmoOcYVnT/An2K9Au4APcw8gE7wpR+zI7QoZQdoZhbwo5S3J8dYTkj3oMEGf/U Zg1da0euBIQlEzsVmyhR+O50gVVeBkzJHCikpmH++SsO6eExA8of+E//hv/9HYf35ph/8JvjGTBh wIAb2Vf8NR8TDzwSH+gnqBeiWfFd8fcbjCR+CY/0dEyoAZAfW41za7cUYvt6xyT9zY49wO89AVAf L4INcYFO4f3DN8fiDViyBwUWRMJrIFvJUajJvi6iUt9O/6adcFXEsuk2KUWm3SZYw44SUBCJUW4T ZIEKLWmnCbWcQlw7lVqBthRek1lHKlVVpYZ4TJV7EiN5FsIpMV0mfc8wMfqedn5iOhDbTxLtDs1i JOACOpJK38KWXZ87ZIbTRHv/UCGYnpP+WOwjy0nOlnaa9B3DadL3DKdJ39N2Vreu7swUBMM+K6CG 4dO90bZY91h5TeifpNVotylIsY1Z+E2odoP35P5Ix4lfc+cIiQ5u64VrRByj3KagCFEgSN4vsK3J 8pkCOPTCX+LvpK/E3xt+kvgWuT2BbkFcoW3hIAEbflM6RxUa5R0JpOQe8XcN/8iQDS0ltOhGDQkK PUFP0jF+hoM0aEzgMUlX2hgTxT1M33PiX0QP0p1XEEz+VUhNVqnu1ZwkLNPCpkL4RtpJSuE1wRUI lHZRAY2bmxRjbgkZVDX5W3kY8Jb+Ydwk1Ykp3CT3tu/ATcoHuEmktnxId+UmYYVpjPoLwTg3iUqp pXSKj1h+BS92Kjcpu4ab1ETpx6mLn/QXWHU4EHBoyKn4rfDq3hwJ50K9fgX6k38hvvTmWDwjPRCr AU80QD4KHoAfQq3CKcHfiP/93TFmr9QHeLTHT1HeUozVwRFSstUooMydS/+eEkr8IgEDInlFvjqu hLcETz6cyffk5eHbuXgI+ODTATi+Cy+Q2nnAPxcfPMctOIOIRMj1w/BRmy94B+XFd+KjP4mXl+ob 9BPf4wIvvxf35EeiXQEL5wY/AS44dfwnDbcPj1GMgRfxfQlN4MQtV5piV1KB4hVSnVAaAaUD6y5o i2+taEqE44GQJuUjwSicbzQ80R3ZDYG4kPSRhJEv/yY+lGMk22rrKQVUaF6SRAyJACNJIZuQz4Ln gJDTkx0Rtm4CwexgqUIWoNK4IJBkOivkqHvmpnfctiQ2wU5I/F9vkxPdhY/fHKOOBPGX7DRIhYs3 x4oG3+BTBFxf866KD4kvEYnhoru/OiJE7h7ly63kc5a4gMtoADEg8gW/iN+F8AMhBgQf/BajE82O QvHJYwwPbmIUxSDir/hAfFlGWo/RNXyC0UUzZpM+lzBPNBKAu/Bj1D6XZ7yXz4sPRCPQXLoR8SOq 2RkeINrhRTxA/IGffSxbwQ+7Ug+lLAPUQTDECalHB3FqBJgayzcQJ1x4oneiKxKsuHhUocT3not+ 0LijB9kLTpOMdBA6/ye0hbsvxV1oH1z8/iXCcWgwQd2/8O9bLYoxFJR+VJGCnyklI3WRlOLxe8VI dO6bmhXmLJ50EEIsZ0By6uFvBVSpq+WLFOkHBAyYgQK9OfQZCfoDKf2GwBva4qFoQLYmheqB/BEJ QOiv2ZH8VDwhv2I/iGGgth+Ir0ghlDdNGNDjIHU3JyVZ6kUBFbIyyWdpHShjWimv8wFEDaeYXM3v 12Py2Q1MZZB6pOSvl8yCIqWZiyomz5Cjco/J+fwHlVBFYD+jYqiIrPiFjOqVz4/8ce5j8XeI+Kjl XIYqfMGGD6QQU2pLzWIg0Ob30KQRNst7VQDjI/EYwRwadxAjYsMqMv36Hm2mTSk9bQTltGUnKlIc U6uCciobiOiS5jZk4lndQVs6/FL30JYOnPU9He/p1o07AgNvS85bqOowvC19T/ZIt64poTGoO+Nn MxASZzIsR1AcZ6jIXYXl9JkIy5HNrmY0iGlUWB5ikgKo+bfCCK68FZZjnSdNbGDWhL+TYTl/b4Tl 4lsUiFct8CtqW4Xl9JsqLNdodFjOkfKwnN4ND8sj7GouaOW6GZarQkRmAKzYrDEoRlyuGJYYTzKQ Gih0QbOZvqfZM5atG3G5wmAyscJq4NL4V/KcKT3fECHpFlDuWU1eIJOT5VlRjIvLMRHiIYeh/Pp/ zLhcdWKKuNy97TuIy4dMXxDjFLTYT09fYJI7zwvoWKz3QF0vt2Vw2seIkGsqKPM1eVyOYHD09EUT pY81ag5O4ffkisCzeIP/voL7Sm/hAGkvVvivX5GHCAfuSQznFQ4wuTz8IfgFcAjlE4/Fh6IVfNLt hlQUpnLoOMvBcGiRo3bA/lA6QE+lr4SfB27uP81UGCYcJulvSU8Nbi7Ay4cfSkdN+lTKC5SfYuIG Tcr25b1nsvOmn/jPuEf0ER/JnxO/Q8EhJye1JBMCunUCLP03+T35Ir+hH3YnZoBt7np/MznFcXO+ pyXYTggGhpb6qtxYgHsg3Hk4lSAZiIm/L/EFDDo5rSIWwj2MOT0kviAvqAtogZIzeEG7PDDAIOGL RCjJR3gRj1FfcSE/kk9bDdP48W/wOTCFVDytrmQ3klfiu+JDeZOoD+TyF2iU4pnuML7pyrBUaRXb EyuVIBIas7oPzUwfGoGHSmj0JIkoRDTYTrC1ZAjiVkkkkFE2RH3HlcH/Og0BBsbX0f/uvtGByhG2 5LGopW8NWawnJdA1nqyTzIwXwfriL3gHd4Bb/30OyiOJQOOAzJOaaeSXPFwnfpH9lRGP4Br1I2+O H4gbiihoiHPfrLuXlcrB4S5xbip1v6lxWnspQYreSOZ8c0z8BcySP6XQypsPQjA+PhSIfxJQJXDR DCWpMEj/IhqRV+Ijlcyk4RV0mh2RrgH1ZPMmpcUzxOVoTv6EjC3ltymjpbE8EcAkiQt8hF/5115W gSfmx5jTjSwiYrUClvIfVDVYG4Q+nJ6zI1oZWkWTbTmsapiQzApTXbTD9Rf6CtZU+1q7fx1Rl67O cOC3JY9UvWsphlMtTKmvPkgCzBYV2ITPf0navzYlUrUP/lOBeBv4BHFwXKAJq8kD4KUVqBqv1aZp /QGC6iNpOeoH/q9n5Cl7iUkQ1HHro0h7auL/AaJxjeQKZW5kc3RyZWFtCmVuZG9iagozMiAwIG9i ago5MzQyCmVuZG9iagozMCAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNv dXJjZXMgMzMgMCBSIC9Db250ZW50cyAzMSAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4K ZW5kb2JqCjMzIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8 IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4wIDggMCBSCi9UVDMuMSAyMSAwIFIgL1RUMi4w IDE5IDAgUiAvVFQ0LjAgMjIgMCBSIC9UVDUuMSAyNCAwIFIgPj4gPj4KZW5kb2JqCjM1IDAgb2Jq Cjw8IC9MZW5ndGggMzYgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac1dW3MT SZZ+16/I4GEDYr1FZdZ93oyBGffStAY80TPb9IOwy1iNLbklGZp/v1+WqrLq1DUzpZI0E9GoBw98 OnnyXL5zyT/ZP9mfjPuOyP7hui5nQew5IYtC+c9Vyn5lC/byYs3Z9Zq5TuInLk/Ctk+T9TXzRegI L2Q8iJxE4Od46Dsx930Wevg/Z3/gbfXvDJ3YZ34cOUFY/siE/J3MxX/xZ/+Jv5QnXGT/nn+M5J/u +oCLv9gLI8GuH9irK+Z52U9tf5lcPbCXV1fccRlnV7fsOXvBrv5gb64ApPL1W6HQrz/RgsITh7s8 bIPCFJTJjlD0pMK5E3vhZCsU13HdULCrayqeElMunthh7EN6m67SxXW6JrKa5KqiIas+gFzEjhcE gkUEIDm1BizdU5vUlbYPSalAru9EYfupHViBwiRyfNyV3lNrYIodjnN7v1w9zDbzb2nXCRaXvXmC RnLjEJwIXFxaApacYAOi7gk2zI7WvQsTF7bH9U/g3oWxgLHzY8OLx5iuhIzOKoZNjn1PsAIW0azJ oD347ZLYgD1pUOI5iecFcR1Vvwr9jyYUIxWCCkdBzJM6lA6D2dDr187n5dP17GY2X5nBmyjH2mej uJc4sWigO4KguI+gIPAiW0E9Xj+aCaiIPDID0BkF8CBwuIiCOiwiodKf5K7XWpV6zyqInSQQ5V0z NAGL2Sb0NWVkZAR4FDtuFHi9MmpotrWM+iw2jxGVJElDoXWv2+MqvZ3/pS2mqimYyCC27/wEF9L3 NrAdQZUER0greKnVhqq0fNzMl4vfx1AmATvgJl6/lBrKpOvcqgeWZR19yqQCuDAKoFXK/esqE3xu 5T+awsoQTip5UZ9KqWDXEuGrwrecsZ+dM/bsXTpbLdj786vQZ9MPb95e/jv01+xpPV98YdOL6bMz 9SUmZtlN35fweCDDY1j+XMy5MnbcC8NEy8iSlScexk4o/NgwnKkcNz4qYfWngq0IEePFofQ7Hdlp efIE6aRDN0sPlYvvZjW73YwK0EemEcVwChRg/6kaOIVmJj8os4A7niujHQIJub9MXoeDVdNIzO5g Y9wG4cM0E5CTY8otTpzAT3gNkrbc9EMzK4kJF/SLOCVFE0j4Yz9CBkvOUFtgO0dqQzdBCGRIkQuT SwAeU8mEQKaUyCCSQNKWmWHkZqdpiMC95LRULRQOojlrm7aN5MZ0BAIGDVTtSelajEwqTqx1zRW7 CKzLpYPTdkIvrlt+yqgeJvL1XNfxQ0nrtF3GBs3bAPXp+ffl6iubLzTlVA3LB/Moz4O9D90GuA4P 2cuGO2KwLiFD18KeyjpEFnn5CJDDMHQC3D0UImIQlrJwkdUQwBGPUocIQ4QvQVLUIVSkN2C19xeT diluJRZtQTgcVz2ull9W6Xr96cUZ+5g+btKHz+mKwa0Lh+jPnioEFU+zhXsK+Ubgy6y3IOaJKjdu l25iUb1VBskuAnfU4RpqNmSHtPOdGqx+/q0kmO1gaRPMNVTM7WMGSoKZoiLnVuZcY7KCJcGcQzGk cl4783RzS+7Znlh4LlwncgOEJj1Caii3QQaoX0DlwncCT5aUKBRlQweUWz+DqalRv3JzL0TqKSvY FNYR1EgVAuy06PNsnY5CB3JFeveIqKFEI1tIFE1AdxfGWleJrBxxpk/mdKAdwl/B852x12ACL+7S 9d18lcIh499qNOE0XSyWZ+wDfme2uGFT58XEruehlxX0Ba6sbO7YCvsUnLQHAj8+Hic4HH9ZAfyY 3n/Vri625s2dwBThZgXsKxjp6XK1YRfLxWa1vGfT1XKzvMaHT8/BRn96ofhosNH746NFhJYhHkjV y877FDRPBI4Qoug/0CUsrSxO6wkXCVDnSRddNyFBeop0NAXY4WpzltwgGNmFjiaQtBmvXeO2wTNF fhu6HPeA4BtIN8cVWQReQiCMI4i0JaYfxtldAlV8JvCOKjBVTSCQtCUm47pdcoMhHVPcPYF3TImV 3D2BpC0xEe8iry77WvYOUFTEfB0mDC57BygU3TBYcYOsyvv8cr1ZtrM+e8pGvSKepKhtBKhBGsq8 r6r7JWmIyguX7Erso68oxk9pcoatFqlLXco6Nkfvpipj23zZZjNnLcXtZ0oqSFwnjmshzDCTrF9G r8Hqz7xLWolbwRqbVqKoyLkdmlbKoZwgrdQjpIYpNAhLbGglCkXXFOrHI0bKXdJKFNYR1EjRSnZa dHN3/TgyrdQjooYSjUwrueiARS2J9BxpWchKnqcZfFjSSnYI++mj1w7b8k7PXv/jYsp+eSzbkvba ZMbRE44idP4VDM0Zuh3X7Hap24Nt5KxVZEKlS27rgVUxQCnaCzAPZTYnUtFDQ79tzHBaItzcpWyA UtK95K1nXI352obKRNFBQvGfDk+iyK8aQKKNZQhyCJ5EIK32fDk92KaVw+XlsXkS1bdB8R0ziVX9 GxSSdhKrH5hY3QIPo3nSGFN0RxVY0YNMIWkLTAYqmq7XTmJFzwvFd1SReWhyjJFbUkjaInODXQTW lfkWzrQGipgvTWdqkeZn5h1945AJZhghm8Nk+QEadEVUixyHDaOVu25V367TUJ1BlgjbuaKWHqGJ xcR1X/VRFG2VBfATKAIFmPx0uQrKbFR6X2ROAFon8tHyZhwfat55o3xXkTmWsEYmc2qoyLmVkdRB eoQKKIbZD3qEViP3CBXIco0iQmrY63HJnBoUXTJntfoyhnIrMqcGi0joMGpUkDkFEkMtmt8vdoqR Op1MMaJb4DqiDhXdSjUoujo0W13f6fJdRiZSjejWgPVrkW4qXIOSOdbOiWpVEQhCTIhZ7DGohC3k wu2pPbiMWWzwnW++zhfr5UK2R2XdUR8Vxj2yWRxdnzzBehsrGTrs1d1ss5mjveby3fspO4fWzTfp 9eZpNbsfpZfLRRUKPZgUbofuHWS+MwjRSODWApjTipjtEL5O19ereTae/exM9/62xvRDVJYataey PCEqK58LrOHrVzuD0MK840f1FlBI2inzrlHY0JEKdGxzPwTTRpTvmCyDmlSkkLRFph+VWV0C4QWO 72NJGIV3VImhYVaE6DCgkLQltmuYNqhkGHWB2wL7dzpKplh5AklbZDJsU26+vxPVTssiVAYTF1Qb wXdULSuaZCkkbZG54S4C60oF1KxpDRWx+Y10UtdNNsLcvhEhUcyY1qDopgKK+tKUUxXc8Agl9ggG cejVFIpOwTSSynY5adCkMiEozEI2QikbJWUvUCAvnosPHLVPyZdqt0Ph6zb9b5dalClHgO4r2kV9 UgX2wAZftY3up6f7Hy2Tk3vqoROI47EIE2pTxXmEy1UeqI/NPBEmqLZEJIGiqb8anGgfU1xC8SAc N7ZIaDVveKvr6FL5khPNYRGqdjjT+e3D2wuBRsXfGXu1mt0s0tV2FOjZ/6Y/GIa7b7J2CKwGSjHl zfDDazZG5ljWfu2ku1myy8XN/Hq22amNuUvKHro5fe4mLKBSJnp4GH9T0UNZLsfsvjE330WsdFuP zOmY926gmGmB8EP65xNG0h7SxYa9S7+l9+uRM9zS3BHA2hnuq4spRDfG7RYAhHW7AcGVx15waAOB oTYv0OpkC0fedSeEyj/a0A1bHtgSJi3PKHILse4y7JLcMDasSZOxPuMJCLgxAHoqMKPCszEoGoFZ vU090/gAi+4CgSTSZwK7ZuFcq1FZdry+jN22P4Ld23InxfZHpIsa3n1BG2z1nCsGuEWonCsRR+nn D0MdcuxHcGv2dVh19BviLP28HSzp50PuB/Dz70AI/1tO+84w3HuRD/e+BVk8+yq9/7PL6cvLi5+n 7Go1W6zvsQl6uRjD5Zc+Nf9Gp1B6dzGE7GGhV9Wnap25uU81Ov6yWGGH8Pz+y3I139w9jOxK1U7v gODUdqXSKUg1HcPmlqwswZa70+FTPmPnj6v5vUy7+ChOQSjGjAIkVlAzyrRwCtnZeXADgRthQRU+ EJsvY8ABm2+k0mUg62L8+iSeXfCTAHvfatdfizjQ1Ncsji4fw9CcXbKElZv8UKZ2sy+Lp3uYe7n9 9WfUBO/S7+szbHTYbna4dNi32YK9Sud/LJ4e4AI+bpBI3T6NUyTMB/SKb3UCZh/LHhxu4+kPZfXt AGb7ff/G3qebbEvb+c2N3L613eVRbFioOHl2u1o+sMvpt3AUd+/LUYM4xEstmbBP4tgxExhiw9vJ ens/tkJ4cT9H8rxmkhWZftO0TUbGWxWFLRH6WAC3+pauRk/ti22jFKdpPDJOEaOoRlFspxOPeEU7 Rw3ggeKRbH9fhCQV66WxOBz2+TDxiC+rcC6qcC1cs2b0pcE199WUVGjkZ6snlYUigi/T4d7NlxpQ tDJzP5DlZregvTug7JqZy7W7PMCaW7flU8eK9FJaWEOU4OUMw35FNbbI/gsvHt3c/Ci8+pu/HsFD rvOwn/tnMvT3it9Vv/42nX1JWfT7KF4zAOESQ9g+/W7jiJ/j+HgX31eK2UdTuHyY7Xj3AxUYDxkm Q0tGJ5T93Y+mKsJ/FIo6qJQekin5Tlk1yBjOKS4Xm3S1SMsZ2f52g2pikVWFFb4SafmpAzN30eTi RjC4OWatGE23k6oRX9hBhBXCiyZ1iB3V9lIHcsP0Wj6HoG5u8eHifHr+6vLd5dV/iv+l8mt1Y8m4 V9xE6u01+qaxb0hdz9jD03rxUa948SqjLxepgIZuMTbl6R7GA2J2MA5i39C9YGc0HtW7XGCqvHhW T0Xk+2wVxt7M7B0O3w5m+2ON3SVBI8Uq04UcXNtxHjq2QnQbobX6BBQLDawBN1Ys2CilSP3eweis VEcBRrEzWMRzDdOk2lNWRqjUJuYaKhIINTRI1zdV3efgBm21ibkGpcMHNUAd6Km/GrojCEo99VeD oiso/en02vn186rqqb8aLCKhhm+xVqU+h6u2HhdQDH1L+tcmXazl0hLdaSKjS1ds7SvQtdnKhnrr GqXamWmuF/PkwHWAhWpm4XQlntM3mxlC464XS4QqC92S9LXdy+XynI/Lh5S9UecOjm/UoLT4Nlqp gO7RGymhyjs9eKYkVoWirRUZ9kdWR2+EUBVnLREOLKpRTn6P0aJq3ikgn8L5Rii+y3dWqlf7kOc7 1PFUnjNBqk0mH+4tPo8C7PBseU5s4NmardiDMitWg1NI2iT35+LlSnULLELdQZDF9lwKcqC9bly5 FW/xUUjactOPnVpN3ZDEisiAojumwFR3B4WkLbAylBpT09SrtxTlUQWHwmzC8RwZhaQtONfbRWBd bLPqhamhIqbsMLGn2uVWg6KbxqgJn+oi5DFkph5MqwG1kZlN/5B8G0A+mOZhZiwEn4En1EKMrxdN ozKcHqWByIuEg5d1KMV+yMChS4krAYMVQtVvVnsgbV+sXL5lvyY/G3VpEs+W6V2IDqxYxYAESiMl 1003GlD6UvIy3UB5nvPQMCPXzy5b/W6XJilSDi00EpVhjDwyJ0dBkUNrmGiDqIn2j/cVzBUlR5Ho Wmijt9Gq2jQ4gKneRqPAiIgaem0toj69Vk+j5UgM9Xr5uJ591118ZKTavChc9IjoMFrEVa7ScsmG S7a3aBb4Pru/1+bizDRJJQQEXL8mjW0h0Z2GKRJDVeohZPa92gdNAjYI80mIt2iPffbLgr0tDlaO QBaFeTSwXT+hpf4HHqca41m0oveq9hU6zjtP5XXP2+iClh7R95yo1h19yDBrKCktw60q0FOkZwi+ /iM1cAa7sDNVRNqp39gbl3nxMhWmSEvNO2ayzIuQuQpIW167O9HBK4A6qRd5MTsdiRUrzAgibZEp p7pLwjwktXzMliIk13K/AcgwnnzbEEWkG866rqawqgHIYNm7pK6I7hMxNUJZXYfUQNIXygrFWG2R GMYffXwMSiz7e2BSDfnmx5jj7JBYrwtv0jGtLryqWJk3zOgYH0PkEUqmnMtuSVy9UZ+i8vDYccDR tn2sMk5XDl2GB3YIf3papOPtXCl9HUVHtKVhhqzvV182XQZ82eh3+7Nih7nqFSjo7Y4S097u0ekY sYVlqOxj8zEUVb8KGQSYNoQMhaLrwl47m/XyycKNGTAyFBkRUkO5rYXU58dKSiaHYujIdqzxddrJ 4rV69Flndy5XbiKhhiWyllCfJSo2UdeQ6GrRYra5XmKHkW5zVDUKGVYk2CYRuCGrgSNiaiiStcHu U6TSSsLDJ+4pL1v27BB+fFqcsX+Cj6m1Sb1O5Uv2cpvF/90tn8p1FlcOu4IBGYeayQeYa1+l49x7 w7pm2aQ1rOu6qeW5ZxP7qLSdbsxlh/DZu/mXu833VP6T+UtMjIbZu16ansFImmorrkexkoM9jN1T 23BrUHQN3zrdsPP7+yX2oaE59G/sX+v54gubXmCpy3IM0ZWVZxPRWdvCPpdRuROYYYk8WiobZvGr 7LSmqHK3MXl5seZZGt1nq8uKkGuJzwwVU6j6pFbmRnaoLqSbncPfptgigfuaLph8gu/i7++zdQP/ kE2rf8fvfp9Jvpxd/cGKh3z2RPmrl9DkB3nsOyTb+7LKAmQcV3PE27t7knw5AXqCfDnFR+xxGWAd tJuRINImMw1ymlbPVaV32l6dVBwCgXcKfDkBpC2vHROcQXHJ9cRJkjCC7qjiKhpRCSJteRX5DjGw hs1CQ0JDg7aDjCc4HaGpuM1OaG60i7i6QvNseUUSeFRMdPF2I5YcJSDKixttwmlEQ7Cmk5dXV9xx c2vaypWzcbdPo4dwuymIQiZmX1N0Tdq8muKrkkdV5xVtLhKIAbk0SxJH7sEcmTYXaPFywZ1rkS2j KIqKnEW2b8VixErzItXOIItLO5+RUp1vdqiyJWhuIrAE7dfl8uYHdp+dsZ9kY8eH9Hr5gCXDN+kN +zh/eLxPVUsHu5g9zj7P7+ebUVo7sJMI74mELP9GhqzfHBtJ5gtNUbeGEV02S7aaZMtGqKhtLl4z hK4duua4n4gwgywfDqgSGw2z1bQG1SzO6LIYj/tZIrx4Wm+QFK3YFJuu52uc6RtsvX7Mll5/en4x ffPphXyHHr+9/DZHZlW23u1xCkwteCq+xCkkTSFoVe+U37gVdgg/pOv5DdayzWf32ZK9aifZ6tv8 Os1Xs9o+cVt1Ym3JgUAzjeujdbjAb2h3stWssKRjWB71tHqBTcsLUiKhO841Mj2KSOiDUmadvZtH NMIPSRUVJyefTMlOSVbP5cvEXMYDpkvPsm+ra8ZKnx/gpUH5ovXpGlo7hD/NFk+zVfZYivbWXiMR qic3BQV4VLfpY/99oowogaKpuxoevI/mLBUL1ZLQ46dWuBc5LKLvw+RcFk7CWslwcrZep1jpg8LU z9snQMkO9XG2qKqxuAK/lsfWrc0aRYtqLK6AYihKLC6o8sDd5tsMlfJy9IDJFWjEi7oCMvIkeJxv +whFq4CGg1i5iVct70WYeDv/awyJeXk5s4ayX2BGMXW58Fo36sdri15Ye7V1WGAk6DdCqOsuVZlE vgdpgbCybVl/EX+rNypihq5cTm3cakU6bOiyaA+GbgyNExwL3xMs+bTEhgQ+b8XT9uhmNgQTNljv CO6OnrLNldAIASX/UT3O7Ojkq3nCw2N5MiYzDQGNvm3pqTG/C9KraCKw+bYaQUNfFbICBdybsDEA mvpaM+S6FBQaoixgZUEDWE25iP9pfSefDAf/dIX6aLGS/fH+aZ31NbBPz8//e4rc//wRz/3N8AQR dnijkjoKD+Vhx2IMglPkX0srlqja1f8H9w8HiAplbmRzdHJlYW0KZW5kb2JqCjM2IDAgb2JqCjU3 OTIKZW5kb2JqCjM0IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNl cyAzNyAwIFIgL0NvbnRlbnRzIDM1IDAgUiAvTWVkaWFCb3gKWzAgMCA2MTIgNzkyXSA+PgplbmRv YmoKMzcgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0Nz MSA3IDAgUiA+PiAvRm9udCA8PCAvVFQxLjAgOCAwIFIKPj4gPj4KZW5kb2JqCjM5IDAgb2JqCjw8 IC9MZW5ndGggNDAgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac1b247aVhR9 91ds9aEXaXpy7uc4T5mZJuqojTKdoFZV1QcHnBkSLomBtvn7LgM22BjGOINxIg0kIXh5r31dZ/sz /UafSWgmlz8454KMV8ySs+nPJKY/aELPrmeC+jPiLNQhF6GtehfM+qSlZVJZEsaxUOJzwmrmhdZk Ff7z8gvfb1/TMq9Je8eM3XwkKFyTOH7juz/joiIUcvnn9VuXfjvXgIsLK+sk9cd01cMnObeSev1A qeXn1y+9MT3r9QTjJKj3nr6nwq8fqPeBXvaAb8squwiDslUOIRTSM2WMrEYY9Pp0GOHN7T+aLgeD JJ7N6O3DNJlH9/E3F/Q1WEGEt9KZfVaVEubVVpQwB7lVH8F89+oaZGr7NRj3YjOcOa3K2NaMP27P C7pc3C9mc5JcCHYKhIojnLzzJesVbRbseGIlFCYfDckA4bFN6JI8KTUuDxxWEwLPhIiaVfDAdx8J wKPcexOAImSCC7sOwIJT17zZ3UjbyT/pze7zjC0ognkkoVUqKCCh3OzBOgFUmr0GkkMxv0ECV3BW 2KCUlYq+sAG1zkqXizkCffZdFvfxLEcZHMxMO/Y6hFJoZHijHLkiyj0GyzJmDuUJk2RuMBs6plEm Kqhr2YlsyFHJuC4XlCJ1u6CobmYucbX07L2+7VFWvVaSGsJ6PX2IxvGArqaLfjSIhklNFgGyfjEW RjDFZVgGWXCoXYvVh1LsRWrlAuslkqP2XaOxGaxXSTTpx9SLR3F/Oj7GcMFWE3cwKaiQ+ZTCIsCz UugM82H3IrEZrLt4MolnF+g7lUFtr8/hEXGYJXZbhHhWEq1nVnYvDpvBWsVhfe7yxBWkQ9TB+OMh yo4UZIvICtxtGoZWuhhrkdfRQq67mD1Q2ukPjGY8zHu71UDyeNOPaKtJ1lHN76YqN4P1chwNR89p vCrO7F1WnF9MkefvY7bJ8Wj7nq7xy8c7u4bdBWK1YxAWsvm94GNttwwogc7kPlaA0nbkKcm0913g Rxom06myA5258FAnso7urPQIzryXugv8cAxzwlZapeX4MSGkOAOdrsJVWo4f41FNne1CABk01FCc Kq3SNkEYt52G4NoBgizm/RPTw1QohbEhFLDdd4/pysZyprk5VsHJ52z6lu7iweBLpjO//O/TEFIu XX5KhiNo7hepDqmyf81f/7qNfghqidElGaHyJvMbTyX6KhldKUjilkvKbvfwuIwoDgoy+n1M/u+a HdYO4ENzPGYkJjxyfAnYabK+QA8rHpUXjVGoP2fM+ZikYJeQVkCqovjpEkoWMtD+GwSPxuTucPiz SjR1u/WbyTxOJvG8pkPttOwVSDfo90SA4AZx7jSZNeZa/P7YLsT1aFiCWPdU5qckej/PM0z25vry 9vLq5teb3p/Z32y9vunPp+/iJM1Rsmk+OjTtbsL7GKufZJbLJWijEF/cd6KTQlpWqerbgUK9PEzK R5G6Pgdfahoih/wmH7zNGtaRGaY3TBbjaBTP/o2SVX0+BUphDBPpMWsJZaF4PV2qPlRHN94tMGfz 3KX28LgLqjaPpfJe81jDNIN1PZz1p/T2y2wej6Gp3kz6JznRFcaz0Ei0R0WYZyUSQqFTLmviO0Nk M1jX2G6YRHS1mA2hjs/oNko+XtDvUTJ/WCT08/TdaHiKCM2VMLRT29Y8L7HQfHYXWc587mh4E1Rv o+RD9AkMvo6SaP4QjUZDerNAd0d3w8k93U2jwYlp3UZ9TlZ1aNCWdi5cG8K6gjwdjaZJfEG/RMkk mkcfI0pnNMHVKQgVoWLKKU8lvGdl1EOG7FwhhVrcANXNZDCMahJ3VIHPx6oirgJvLWuC2kO0tfac A3y2tKgdRFvOs1FjVcPPf5rVENbyNKumE+3M7Ie6/Y0TNbPXc5pDc4MI96Kf9otbx2pPu+npPOM4 OKKS/QrOvttZ17RYKeyI12r3tbXMpEuA558gtYF8gcG6lrBykqkxH4I0FpVCNPRVVmmbIA0tPl2U 7gBBymEf0HThmF9jZ1X5aqu0TZCE2lt97tl24RJQU43vROHinjks7lc4bdv0cMGMqIbSMj8qxL61 kV1IcAoCWejzIfKcFUg5TNayei+8bYKcZBajdQcqkLIYB321VVqOIAVxS1QjaZsfHPZ5w7uQ4KC6 M5dP62eNH4UODo84VeXatvmR6OD0qY/rD00CeQeHDUkWuk6siyk8PYft5GyIK/hK2wRxdHA4pu1C guPo4Fz1El3LCU5CPBL5kH1OfiTKMlcqWybZA6WVRVqJYRWLUVVZpW16HDo43okOG4Ny+vRqFzo4 iQdoBRbmu0CQxiMheGK0CkrLCU5qdHBKdCHBSYUOzlYv0bUdQXjEWKYPRleMY20ThLrMZb4uVz/D /Q8ncVKSCmVuZHN0cmVhbQplbmRvYmoKNDAgMCBvYmoKMTc4MwplbmRvYmoKMzggMCBvYmoKPDwg L1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDQxIDAgUiAvQ29udGVudHMgMzkg MCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago0MSAwIG9iago8PCAvUHJvY1Nl dCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9U VDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKNDMgMCBvYmoKPDwgL0xlbmd0aCA0NCAwIFIgL0ZpbHRl ciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzVZNb9swDL37V/A0tEBBi/qgpN3WocCO22Bgh2EH 13G6dMmcOMmw/vsxiRc3rZG4CRDEBizJlqWnR/KRM/gCMyCLev1QShG4YJDB8+pZl/ANfkP6cU5Q zEFhtFFR5K5eMi/AakZtGMh5jFrmEVsMZC2wkZ/XCw6f78kYLNjg0XE7JdnZE5TcsvZMNqVIej1u un61urICVzY27DUUE7jNwJj1rE2TZBNIs4xQAUE2hCu4huwR7jIB8uz4nVB2j5/0gkIRSRF3QYEt lOREKP1YIcJgOOkgpUXyRlKSlz7RD4my6LmblDPbh6NHK664l5SzmIejkmhR9gLsw0FLeNrQxcq5 7eMdhqhsF5TWa89jIA7I2obGQAqVYg1ZsasvLagmlG6rZZEP8lEN7+BrORg8QXPd/Z2O6nIOH6b1 aCyKewNakfn/ddt+/5w/lBB/XCfHydS+iDROpDOIMPLu2XYU89WJ+irmceLATGhcvATxZmdRRclg F6AO1qPkWv1G5/u0mIxhkte/llOY1tVgWZQDuH+Celg0b2mVnm4g/5OPxvn9uIRhXU3gFGcT6Qis vTuYptlE9G6bkfoG1M/FYvo+TRdVz8Td6YaHQJKKosaapA7ZgNz4QNIXZDWe46hcDLGqHwSqDNMt 5+kKeHJExbEvlLWWULbcAj4hj6B+Wfsd5LCpvYQuj+xEr8k6NKv6bFOmSZ0gpd4/KF9AzAplbmRz dHJlYW0KZW5kb2JqCjQ0IDAgb2JqCjU0MAplbmRvYmoKNDIgMCBvYmoKPDwgL1R5cGUgL1BhZ2Ug L1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDQ1IDAgUiAvQ29udGVudHMgNDMgMCBSIC9NZWRpYUJv eApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago0NSAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDEuMCA4IDAgUgo+ PiA+PgplbmRvYmoKMyAwIG9iago8PCAvVHlwZSAvUGFnZXMgL01lZGlhQm94IFswIDAgNjEyIDc5 Ml0gL0NvdW50IDggL0tpZHMgWyAyIDAgUiAxMSAwIFIgMTUgMCBSCjI1IDAgUiAzMCAwIFIgMzQg MCBSIDM4IDAgUiA0MiAwIFIgXSA+PgplbmRvYmoKNDYgMCBvYmoKPDwgL1R5cGUgL0NhdGFsb2cg L1BhZ2VzIDMgMCBSID4+CmVuZG9iagoyNCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAv VHJ1ZVR5cGUgL0Jhc2VGb250IC9aREtGU0UrQ2FtYnJpYSAvRm9udERlc2NyaXB0b3IKNDcgMCBS IC9Ub1VuaWNvZGUgNDggMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDg3IC9XaWR0aHMgWyA2 MjMgNDE0IDQ4OAoyMjAgNzc0IDQzMCA1NTIgNDk0IDMzOCAyNzggNTU4IDU1MiA1MzEgNTU2IDQ0 MSA0ODggNTQ3IDU1NSAzMDMgNTA0IDI3MSA0MjIKNTY4IDUwNCAzNzUgMjA1IDU2MyA1NDcgNzUy IDM3NSA1NzUgODMyIDQ4MyAzMzIgODE1IDUzNyA1MzcgNjUzIDYyMSA2NjIgMzcxCjY1MyA2NDgg NDk2IDU5MyAyMDUgNjgxIDU1NCA1NTQgNTI0IDYwNCAyNjQgNTcwIDMyNCA0NTUgXSA+PgplbmRv YmoKNDggMCBvYmoKPDwgL0xlbmd0aCA0OSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngBXZTLbtswEEX3+gou00VgWqTsGBAEFCkCeNEH6vYD9KBcAbUsyPLCf99zJ26KZnEFXM4M OWckavW8/7Qfh8Wtvs3n9pAW1w9jN6fL+Tq3yTXpOIzZOnfd0C53Z2vtqZ6yFcWH22VJp/3Yn11Z Zs6tvlNyWeabe/jYnZv0QWtf5y7Nw3h0Dz+fD7ZyuE7T73RK4+J8VlWuSz3bfa6nL/UpuZWVPu47 4sNye6TqX8aP25QcHVGxfm2pPXfpMtVtmuvxmLLS+6p8eamyNHbvQveCpm9/1XNW5rEi2e8cj45H 7nnU3irvOe8qYq6KXMl153K//i+58K8NNf29k3xdlZL3cV1xHtWS99tcNmCR95tCtsAiolvZDRZh g+wWi7CW/IRF1FryDouIRiXXWER0J9tgETbJtliEfZLtsMlsL9tjEVGdGxhmMISNEALtS0R1UKB9 CbuRZaASbZiFJhjRplUUGsn7oIMCNJL3BVMsAzQSteo5QCMxY6uFJhgRrRKFRmKw1iQ0wYi21iRE QVSeAZIMnMRWnSxwErWaZARQAkFRXpSJNjQctjeRbFHgogFGdcUGJqI6iIcJK8AInASgXncETiKq 0UXgJKKWDFw0wEIIETiJqDUJHA3IijdCI/EpWhvQcCKWxaxknCbmrK7Yz4TVufRigreRBVBiZ0sG rjBApk0UQImoXgopJg4yC1xhgFuSuW5/P3zdPP0h3m50e51nLrP9Ruye6/4OY3r700znSRuY/gDx 0ipZCmVuZHN0cmVhbQplbmRvYmoKNDkgMCBvYmoKNTY5CmVuZG9iago0NyAwIG9iago8PCAvVHlw ZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9aREtGU0UrQ2FtYnJpYSAvRmxhZ3MgNCAvRm9u dEJCb3ggWy0xNDc1IC0yNDYzIDI4NjcgMzExN10KL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5NTAg L0Rlc2NlbnQgLTIyMiAvQ2FwSGVpZ2h0IDY2NyAvU3RlbVYgMCAvWEhlaWdodAo0NjcgL0F2Z1dp ZHRoIDYxNSAvTWF4V2lkdGggMjkxOSAvRm9udEZpbGUyIDUwIDAgUiA+PgplbmRvYmoKNTAgMCBv YmoKPDwgL0xlbmd0aCA1MSAwIFIgL0xlbmd0aDEgMjI3NDQgL0ZpbHRlciAvRmxhdGVEZWNvZGUg Pj4Kc3RyZWFtCngB7bx5YFPH2S88c472fV8sL0eWJdmWbVmWNxnZPrZlY7ABA4bYrDYWCRCSsCUh C8EJcSAmG0ko2ZrQhqVNey8C0rfQ24WmKaVpSJM25bbpEsjSpkkIJG/blBTk7zdHEtubft/3x733 ryvreWbOzJw5M882zzxn5HVrbl5KtGSU8KR65IbhVUT6lPYiuW/klnVC5tqynhDVs9euuu6GzLXH RYiu/7qVt12buS7rJiS8atnS4WTmmpxHWr8MBZlrWou0ZNkN69AP+wRXAp1cedNItr70TVyvuWF4 ffb55A+4Fm4cvmEpUnwGDgEJq9YszdbTAULMReT3g/f8ezAQQnFXIzlCKskOoiAcMZEwwYjV83Ev j1pWL//nrAr5ztRiY/zvxKNCASGH//xEM0uPNedv/lvtxz2OT11ncKlGD5kP7lM+lY4R4pz3t9oL uxyfSj1lK6Wk8TARaPpFtYtOFQ7RL3KZc7nMP3OZz3OZf+QyZ3OZM7nMJ7nM6Vzm41zmo1zmz7nM +7nMe7nMu7nMO7nMqVzmZC7z61zmV7nMG7nML3OZ13KZ47nMq7nMzlzm4VzmoVxmPJfZkstszmXu y2Xm5zLzcpnBXGYgl+nPZfpymd5cpieXmZrL1Ocy1blMOJepzGUqchl1LqPMZeTihMS5v0n4Mwl/ KuGzEj4j4dMS/ljCH0r4fQm/J+F3JXxKwn+S8FsS/q2Efy3h4xJ+VcKvSPjnEj4m4aMSflnCL0n4 iIR/JOEfSPighPdLeJ+Ed0t4l4R3SvghCT8o4QckvFXC4xK+X8JjEr5XwpuAxZapwqh0tVHCd0l4 g4SXSHimhPsk3C3hdgkbGDa2jcjaSBEgDGgFzAAsBtwE2Ah4GPAcYB/gR4BfAvRkMf8hVGmU/xt5 BLATkAIcAbwOOAk4C1Ch1yh6jaLXKHqNotcoeo2i1yh6jaLXKHqNEg3GUIvWtWhdi9a1aF2L1rVo XUuUeKqPvA04A+CJEbgI0ApYDHhO5hN98rPv0NSFIxe4Ixdev3DywtkLskzCH5l4feLkxNkJ2ao2 jcyPYR8Bfh1wEnBW5hd1spM/PPtDTkLGNrPMi469zApxA2htBD4J4PBYDbuWqV6kxgA1tnlkSula AbyRc0ptnyFF3DMkDGgFzAAsBijI28BnABPcM+Js/u2TDmf+m78BuuNOh+eOO91v/Ar5W24FumEV 0MqbgK6/0eG5/saNa/LW3Wyz51+3Auja5UBLl9k8S5eNrc5zr3Xc3uH23gZwt0W4R8mTAI7kA1ew HPck9xT3NNFxD3IPcQ8jHee2cg8QHfFwT5KtAEwJ+DnA/wD8HiDjdqPNXqLnnsO9X0P6DO59lugn PuAeOmDzxQ4j8xTLtOVx93AbwOIQdzd3J5EjvYu7nciQbsimt3PXSOW3ctdJ6XXcNQfkIeEQt+qA R4j9gFuDetb+RpTLWPk1ByPRmLqtjVtN3IAXUI9CtFmOq7eQ+wDAc/dyt4GiIW4UKbt/I1I2jjuy 6W3cXKl+PcdWvRB3C1JWf3M2XZtNr822W4eUtVubTW/i5h5Qhsra+nBNyX0Mcwu5RdxikHAmN4ub jXQ6N4PrAym13HTATKLhFpJJyA8ifwvgZlw/jevvIP0dUg23HHdcD4KOoKelSIfQ0xKky0mcGwEM ARYCZgKmAxJcXKJaB2cGo0KcmL1uwTWbdTNnBtW62uwop6QL+CiA4yahXon6GFJGpYZsey/aKxmV owesjlibgwtnK6qyaSVSxsaK7HUom5bjRnlocls7rimRA+8GcJhulPQAkrhaB5Bx7ZxJenQbUtZT K1I29KZseWM2rc+mddlUyKa1SNl9kWxanS0vy6alnAlTGG+7EdeU5AEf5mowZSfn4txgipbTcXqk Kk7NaSTmqMAcLYjvxGhVYI4WzNGCOU4wRwXmOMEcFep9uMMPZhSgpyKkeegpH6kPjCgA5AGcAC1A ReJ0Np3GZkanZ9O5dAFjCp2TTa9Byurfom/CtoXob7Pp+/QkmyE9lU1P0o+k6zNIWfuP6UegtXgI iVoDZTtCZQcikWwGSnNo4siLPysSYmjBH6ioiH2P8sw7OlBU7DvMsgePFBb6coUFBbnC/PyLhR5P rtCWl82Naq3ZnKjWIMdRelDs24ocRY8s16ZBISEzSBErYilGRg70zZFGRg76fGxE5LsFhTHxA49H GuZfSvyxuYeoSrTSP/5WHpp0oucEJ6a0+tiPj8hDmIfY8JzVGhOfCVfHnnmKhp5+Sh56apss9M0n ZaEnH+VD4k8rIrFHt/GhLdue2MapR1wjPxvhhRG9EZ2ffXFykT/2i0NUI+bTJ7bTUMOz9CvbuZBr R6A85txBTdtbxdjvttPv03pagfUiRKsPHJeFDtHwgVdZUnngOI+kghV+n/bSqVKbqQc2ykOH6Xza D70ytrlpP6bbTzh6H90iMWczUsbk+7PpFvqwdONDSFn5wwfH5KHWNh3dSSh9jb4qVf4KKdSQvkFf PaBgnFUeqKmJsWQfxjBx5OCfCiW2iuY/uPJiP3+FD71yTBYSj3mLGRUPHrM7pfQoqMmujzryWCr6 flQZifXNBJ1mgt7vY1rvvYuLd8vLY8dfhQS92p6Q2r8aDLL0u68682IvfUgxa/WBt6QHi9EP/f7Y 2x9S8WVPQezgfnloPxgjHmlujh3ZJwv9ep88tG8DzPVbFkfspz+gwkPU9BBlQ9ha3yh1vTUYkoZS sxV9P/CgPPTguCx0/7g8NA46/u0MH/rsjDz06SgXOrtTFjoD0ogf19TGxI/xNNbNzpmzMmnn5Eza GJe60+4E49/eSXfiTtbuccg/UvHNUdDn7o00dBdGtQGPOA347Ua6ccxftGWMhjYD7sVTNgHKxmJj U8b4a8do1xitH6OBMeppsLvq7fY6u6XWbozadTV2dcSuqLbzYTupsp/7wiicqz7HBYKG0qCxPGSo CBmLfYYSn7GwyCAUGYncJOfizQZtfF38yThvNJl1ao1Wp1CqdLxMrsMCoVPwyaJV5dRYTrXGHiMs xSSS4Nfx3yK/Nyq0RMtrjZPIJPUgP199C/80eVr9pPF3RHeYaqlOLDd6aIHepczT201OvUVm04fP 3XTuuXM7z/3y3OvnFK3nxHP7zqXOnTwnJ4eo9kD4XPh7VEtaqVaskv0rfi7+efzv8Yp4ebw0HoiX xIvjQrww7om74va4JW6Mq+OKOB8n8b5oP01ZekhPf3vKSpHObk9FQz2HeGFWqibUk1L3zR/YT+lD gyhNcVugz/0p2ZZDHBJLx7z5A4eom1WPeQ5DvEmqZ2jswcFQqCCV7Jk9kBotGEzVsMwjBYOkJ1Uz M+XxtYe+7LN23c1SMdK16zIN1obWZjL7SwOdqfLO4VRF51AilCuV6uhafDLts3eFcmnmXgmjz9zV xUyu4FKarWIJlUrJOtbZOvbAdZf3uvbLnoE7yKW+rriSeszNKtuG5Cacuc7WXurh39xzxRNwId1H GU65Uq3g3dUN9qsZE/tmtae4jgU9qeSsnlRh3/yhVJ6vvSd1DFf1ffNTOl87xsNIiQ/SdWtvBmIg lewnXEf/fo4hBdD8+QNtIzRNkvQLwDnAPwGfA/4BOAs4A/gEcBrwMeAjwJ8B7wPeA7wLeAdwCnAS 8GvArwBvAH4JeA1wHPAqYCfgYcBDgHHAFsBmwH2A+YB5gEHAAKAf0AfoBfQApgLqAdWAMKASUAFQ A5QAubg8+bfkZ8lPk2eTZ5Knkx8nP0y+n3wv+W7yVPJPybeSv03+Onk8+WryleTPk8eSR5MvJ19K Hkn+KPmD5MHk/uS+5O7kruTO5EPJB5MPJLcmx5P3J8eS9yY3JUeTG5N3JTcklyRnJvuS3cn2pCF5 NWP+91xD9f5PfIj8QTgwRD4HMZmQFDEhMify2Q///Uwe26uvEjJxNleennUpj7v3Ez3fTPSsF84+ cZY7SUwTOy9vkbvvUsqjTeaKxXoYyNhlO9nAEnxGMgnSTKyJ+fD//vPSv6/6tzWvkZ+T/0E2SfXf JwfJt7Mtv02+Q8bIS+T7JBMlG4RDdC/ZCdyPknlkCplDFpHlaL2a7CK7s3ctIUMkgj9CWkDR8Wzp K+QD8h/0PNo9nS25lDyGp6whh/Ckp8lU9NdCtmG2j5NvkedID7kPV5c+J6TsSW6YrCBryV6Swr1J skwqnUbuJt1kAcbWReZiTDfi6fPIPvIiWUr2kydR/n0yizyr+CFRcesYpyb+k2ua+E+yFXd/hVuH /d1D/ChZR+4kz5I/EWz5ycPpl/7fuXdpYP829wh5ArO4lzwEns7jm/k+fugib//tTdmK74JePwZt 1oMre8CXZ8kj1E+eIpvJBqojXyXfpzVXUOf/q78vq/8ueQB9X/n5CTkMuu0Gfx8CxdaCL9/A6Puu bIRwZinVQG5WkHnUQL4gi6+u/19yvQqysB4Sdw+eswYzH0DENEJuRroMcHPuGXCBW8gWcP15GMX3 UN5O7iI3Ui+tJkfJFuoit6P9V1H6OPkerUbbteRFWkrOQavmY5b/5QN7AL2U7AHqVIQ6yGtMN/kv WFP+w5w9YFdMRmgJOUbIJXtAfVQPefsueQHP/zp5mnooT/5OTpE0DdN8cK6MvAE4Crp9j/wY9PsY LVzkf7J9x9Wfq8eCO7bKl0p2Ak3/61gg7Q9ePhboxV7yDPRrA2ToRej6j8mj5D+QPoCrndCgHeS/ QQb2QJZGMdaLH/k8EgUNrmNYooGB/CRrn3DNH2HlE29MHGe1Gcxy6Ycu5n8Dbf499LkPtuL/fv4v Bf4PUoBTnn9X/jY3RW6U04mPZC8oZen59O8YwG5o/GPAd+Dvui8fEH+B/0C+b+IT+ffS7XKzvCS9 On0n1rL/SX5Hfkl+St4lvya/Ia+Qv/DV/E/5U/xnsiGZQn5c/nXyHVkVuZV85epeZTfKlslmynbJ 5smq5EFoUD6ZBrt6DdaqIbKEXA+7RuSPKCOyR+Vz5Un+M/4L+RPoYyXs3n2wTY/BkhFx3tLk4kUL F8yfNzgwp3/WtN6eqVO6J3clOtrbxNaW5vikplhjQ31dbbQmUh2uqqwIlZeVBgP+El+xVygqLMj3 5LldTofdZrWYTUaDXqfVqFVKhVzGI+BRQV0pV8dA54qUu2MIvnPCZxJSuulnp4VTxOLx+sxCNDxY mW2VkodSxNqTsvUN7Cdi42BKEbq6yfQU7zd95sXN0zxCZ0rmx9c3dTiZKp014PWZTngu1g+i21Re x4DX60lxfnynoArfqcNCMmXqQzkqpJIpKdI3wODQxDuNKCSN3kHgWQOpwtzlIOstM5XLBnkYtunI VcOcTsdN+3XujkSK2PYT3TspYmfNzjbCn4inSrEt9JuQk3oj4RS1fZai1hS1T8OUrnwEu+1k45fQ oDO5wteZXA6KJocu0fRshqJeYVwYnzVgjnq8XmnQ2LnMHNiv1XT4OpZqMAtsLVFA9mu0KNGyArBl 1X6qa6FShtN1Nu3niEoP8lnYcDsZrEiJW4eQ8SVAN9RYL9UgsvDA5VUEt2UaETSTclR6ZkrRkVJm BiEsT4nDKbJV2F9xZPyBQyayZCikS/qSwwsGUvwwBrWf8P7OZf2p/J6+eSjCIABDywTG7oSEGPOE zmXCOK5Z2yFgXwK3XlmeXLZ0iIkJHfIlUKfuGNjsPeLBdnxgc2fKHErpcbv+9vc8/Hina7nALsfH NwupnTMHLq/1sjYQAldlhTDe6cPT0FnninbGsfBFtknSOCUpMUfcOiykRpesAM3wHX4gJ//ecVNK 9w8vuAP+4E6mHYzADJJDK9hUVuBOGRJhfOtSaaoPSFODvAqdKxIM2I2QfjIHd88b6Fzm6wQ9sw8E QXA/77/6Xq835Q6xG8fHO9kQh5MYPaMMvm7siDGMzAV0whOiGE9HSuyXEtIv8QBPFIcTg9mibAPU yMCHlDiUGBxkk8owIKX0b5ZX+YRx1qnSn7KFTN6XUXeksqJn1kBngkknWnIdA82nXZ7TyPf0XSym LrQZD59mRGI1s309MzNSsIzRh6Gh/owCg2pZzqNptr3U63GX53jmCQsGunxdQ+PjXT6ha3xofPjQ xOgSn2Dyje/X6cZXdQ4JkvpTlH9vqyfV9cBgyjS0jDZJHGKPx+R4fxd2/9aZ8xmruoRlwyjBt9Xn bfR4zRfbwIp8eXVW5yD90AGmc+OmjzF7HayTR+hipgYR2UZPytTIVBYDmjMAnRjBIzqTEoKuIDDE eZjW8IP+zuWzs8TyePFISXiYDZyZLUUnXi/Tp62HRLIEF6nRmQOZa4Es8RwgYjgEPg6xmiO5Gvsc VjOaq7l4+5APfHOxwJQkH/9OvmHbL8r2uNlnEWLMsGN0+E5Jpo70Y47/bEypQDGJ9daOAd7DsSbI cR6e5TQhLA/xlDMk3choAos5bvIJr/tSplBK3jFwxBMfFExmGEuKNt1oyCTV9Lrv55TZUWIzpWg8 RR2snMCugnqw+85GVF4UJKFzfCgrgJdPC01Z6+Syi6qUGTx0l80Nszf5oLqeDBnMFh+b4atM4HML g7+L6RVYIhFq6mDKwNa7lOFjCWG8no4BAZYImjtTygidwjLG7JQwlJBMwqCH1eeKD02cHEowEzgA GUQTT1bEIegZ0l4pipUV/38FfRSCfvcDg8uaMCaxHDMQ6vBYRvSO/oGsukl8kpQAz5rCpnJl/UUq 5trAsEGdvanqvJ+7IKh5LkmrM7p7sTGY0I/ZXGTA5Q+T6nLiwUaS6sL6n7EB0shSk6Vrae6suvuq 6im5apiPDZ7b0Q4LWft+H90yc79It8yeN3AYGy9hS//AAY5yHUPtg/tLUDdwWIATJJUibjfUzgpZ E4FdkB6K3g7ghRhr7zksEjIq1cqkAul6BIFeqSzTCGWUjCDqK5WZcu04lMkyZaJUhvUEQ+x0LYN5 G/CB6cmU2Ddw5+Cy8aFBRmziyAggJNvXQlKcr2U/5RS6lMa3tD2l9bWz8lZW3popV7Bypa8d4g/l EA5B1ceHfFB/GOAB4qGDTISZlHN+4dDEBCzocVheb0rhXwCAgVWHBoWU3D8V7SYzGELx5NToyDAb BxNT3Kv0TxkZTKkudogmU1Jq9KDO9oAWXdI9WJ7ZTSMQ1mGflEUxlGN0MDUYYg8dWM5GJAjwh7p9 TSlFIDNIeYA9KDw4bvHVSMuJwp/S+DfjDjxjqmQIpRIPLvEwth7hq9Rh5CM+tBoZEsABGRmZDWGU BdhXw/iGkqVY1WUBLKoADRRZqsS5C6b4Wr0mpa5Ch/iyvLYKHeKrHARR2OSlq83ZBni2KaXFiAKX kTJ7A6iDqilsLPhuxuBZ0x+zbmYeIrN861NUoqj0KCWqU3r/lGE4C5n7tSjxwe/L3Iy+VH5WxPp4 OVOqZDPXSQ5t/6GJvb7bmJLkPpUVvhTpH2CCSfCegYhkcPzqgtR8GE7V1aV6qXh8XKX/8hsy9FLp L6asF6FzOWSVCFhTQEZFYMrw1kZLbaU8QX5I2Y7+PFHIRsmt8h6yXvYUuU3WQ27jnsikivvIzfI1 gCZyq2wruU1K/0lu4/9JVsl+SNrlYTJP9iZxyB4hFv4D0icbJtX8ZrJctoos5/9ClnEryQz+bzhp soKIXIzMltXgxEgFaVV8A/lbAa1ou5ZMkQ2RZfwMMptfRRZx3yF+2fUoUxGrooYU8H8iTuRt/PNk Jt1FXHhl/QLSGxQyco77BlnJD5MFeCm8HDCZ+xzzuZFMA9wD4mbO1OFwIF5OsiimlzQQjpQQF2rK iJ8ESR4JkHwiEA/qiomD2IidOImblJJCUoP7QohyhPGK00eqSS1eYheRcsSf1AgJKXBO0QCJrcNB ITMxEhOpxC6xgdSTAmIhVcSKQwIVeCb73IK/M3QBPcy1cT/hJvhZ/O9kU2RfkX0uv0OhUDys+FDZ o/yxKqI6o16ifl0zU/OStkFXovuWnup36U8ZfmUcNh40dZgOmwPm71kslvssZ6wP2xy2R+xye8S+ 0H6zfa/9p44yx52Onzv+4Ew4D+GJMvJDoPvk/ZhJhTT2HtFvD9eWllWQigJtpKq2QltVpa2oldXV k7JQddRitRpcrqoIT1qP14Txbf3jieM1Zgt1xsL4mI6bjpujpuM1pj8ejVTTutoWrqGFr6sN+IoN nNJXV18frSnk7DZcGHi73Wn31VGz18yAa1A4ykucAY+xrUWoLnGrh+L3d3SNtOQbS+IVQsCutDxC z19Q8MPnG+lfHA5/eV3QHY7GfD2zbCU1hfcUVhVEu8oCLc1dld6KYGm+4savfS39nuypf10r+/yL b2OC4KgCc/2rfCm4U0w2iAmV2lss12qEYkOx21UseIt5uUGeV1RUYnBaVdpim6DhNdtEozBD4My8 ILgs1FbImy3mPQniMCg8ckuxS0Zao2FnNGQmzqjZEnOFsfvOOx0yW0gsVo0NRTRqiQGZLc6YORo1 bT5y5AiDiLeuhQNVgkGvUqGw2xxOuxe0aaBRWsg57dTL8/k1EZfJ6E9XFeeZmlvTcxpnB+nXnqX9 Ln9t5fmD9Os/jGhcoZLiGZG7l0ztLYo3qiMR9aplstn/2j19VpU2wuVzY5DeWyfOyiyYsUBuEk02 k8HebTNaFltusvAWJ4FXJlajCKTpwwmc1zmZmucKnQbesE10WgsVvGJboayQKhSchlp3cRZLseau vPApNqNTYHkMX9J6OkRcrZgycZlexuRjIdPLQOC92VfF+YoVYLbFEa3B5KJmhcJXTMy1lpJojUNm GXFNXdJ53dcW9D6+ctayycLIop/ekk6f30wV/zH/KXlj+qNrrqu4P336Jy+nP3owfO1I+h23mw7Q OScoXtiCl9BT2ZuIvHqgezFR8BTyhds8oofuSXgsBt2ehKGML9tm4K0b/P7K/I0Kadin2HDZeEMk z2U6jVFG6yCd5toqLljnlQSTUyrAEV8QQ26R1dVyEFzl+qpSh0bjDITpf/zg0z2zpk0VF057ZW+s dHr/vSvn1rtv/s3jieaIzlEsdvLDXa3Fdn1k9tc/3fvN9MQ1vZHS4oWy/Pj1W19Y+gsqX49oLCW3 YeTlGHkV2XyYGPEyv0et6zZqioqcLo5T40G8RUSJxblN1FQVa7aVVhf79iSKXbxrm1hcVbknUaXm 1duqePMuo8Xiors4zuUVdhUVVWtcG4PhUzXgTwZJjMpOOQwWsamH8y4cDUny6QqDf2HT0SyvZD6v Ocsmxjif2VvTwjdEeUlSMxSSCUuMQnFZYzD98omKGq9x0SJDcTh8gjZEmiuKnbYR6/klLeV6EKpK Pif9q8jUmkLthb+542J6NN6cd+FH5rL2yYn01yKmYPdUfriz1QdC5eihBj3KyWZxNjGYDIJhpyFl kKt5g5rjVGq1gzeai8xh8z7zj8xytdmxTSRqaufV5YXqberq/KLCoj2JwvKyPYlyFa/aVs4bd5kN Bh8jTIXaudH3ZdSAwkYZNZi6Xji6aGGWIqajKMjILn81PWxMMy+nhnqJo6wyHkn//rUMMYzF4arX DEJ9aTpxGRkS/RWWCycLEpPT8xKdBen18e5yHLa4kgiSTHBFoEEeKREtcpVStSehtFuslj0JK082 6sKQXDZkV5jhSLX/6sF47TCn9AW1vawqPS/7dLqnIujUftHRUuLSXfnAiNbhbe/M0d6E5xaSyWKQ qE1qTser1U6ihQZpsZ5tE7Vuh9OxJ+HkNepdKpVANpoyqoQVOjMiJljM3knExNAgN7Ir5SYzuG9S RaipzFvosS21nd+QG+PuCr9Lt0Bj98fnz0/feAVZIjqr0A7jRNn7GwV7X1pPrhUn1bpFtaXb7Y76 tYYgX+Iv2ZPQ+0kkGtmTqHN6+CjvdtW6jHRabW2R4rTDWcdbLI15nihfNBoKn3Iy7XBGmQ0LRXEa VzLdIOtlFjwE+lJQ03w5jS0NPryr8TksVxZLdoNSr0LPSC1Rf3GswqRWmNPr1qYfgbRKZY/lZruU Lqb30FnyEokB55/L8sZQ0jWTbtxB62LnvfyZ5vSRb6Yf/RK2nY/yxxk1Jr6Q86BGLekQS0r9Af+e hMwZMOlramv2JPINtbx9lJc5eZWq3pNfywujFZemjdWKzTSKGR+tyYgSdTic0QBXV5cxgkyOzD4a CATZZO2X00CaLP9MSSRPL1ep7P4quqzS79RtuPDr2gqrWam4cqoxriA+r7GZXv/orzpFZhMjOpsg TvnXc/yea/qC09I3HHv1S6bIVmm2Zv0Ea5YJq1ZIdMKjs0Hjrep8Pn+bWqbf4HIVmzfIw38FD/96 af2JVMuLA5hHrQUuBoZu4xTUZIFFs2SsuIHjHlr/0wenbbmw98B/3vHARFp/8Ns3PNE7+NS18+6e EzTN2Etl33mbinu/mv7l7z9M/3An94v08fSRrVR38C1adE//03/AyJjlbpS0JUQSoj9f4IVtYn6+ VZnVWElf2bpj5Z13lZRUFkmqW2OGQc6ZYUZ0yVGA2nyZHtcg+m7AuhmsY8aYMQULEP2m3lMVSU/J idHZD9/vvvfFkZua161+bHrVzFXtIzUXJnWVObVXqvnB7y7bs6JKNnvS/avnru0qkDHapu+R14C2 Xnin14sxjcamNCj5PuWQcpWSV4pGA7XyBuKx2fy8f5tos3oq+cptokemEbTEZvM6izaUlUWLNzgl G/CpOQav5kSe+3jOBWCOwEVbkHc8Z1YxUWehDBNqcDIXAIIUDHDwAzKcMnFXMYoXfZ7qhkiFraHP Xz39vsmxqVPmTZp8biLDuqMXui/nnDoabI35jGUlLdMTjpprB5br6CKayHEy/WH6q9z6L+fkP8HJ MImTpWJdvodEIoSPQM7IJGWJGj7AnoQ3oLRZ9yRsk/hJ22x8eVGRJ+DH29e7Ghpa/BG6UY91JcxY awYR4AzBmkjOBdw9ScVyXJZ8Qbam/BddYrxWKO1QQKe0tkDpglW8j8c6LHmH8D3oC1pH4DKTfubD D3bsaL6mbl6wsak6/VEg4R0ojYYikRtXX7NyQUPbvavmcTPT3+5u8zKFu3yhfeHg/UfqVe6FS3Z1 95aqInW3t+7t7S7Qct+48N/dXRvmL76rHZZl1cRZfjuko5qMicYw8xbDlWGUE63MwZzFOEocVnh6 LsE16pIZeJcrX1tSIsuvlPGybWKl1cp01Cpz7ZrhpE5nqXDaaKwuPa1U1pBd1ZllA0oLgoUXSgqR ERtGIEZBaQGxxCBAqEcaqbYWchAa+MmBYBU0m20eHM6sX8m8ZgfollUX85u2xMo5N2+oveW2m7d0 LP/Fpt5tN4w4uxb1tF0Xj65cMfrgjPabnx/+6nHaMHBt5Pabe66dF2+66Z5pq3bPM+WnPxtYEqwe 7pi8pL9WvPHBRcu3zS+roxa28rRD4++EnAhkjlhptJixIJt5YxHV80VFZrWbuHk3ZIbndvEGTZGr vWiXIHg1G2GhvGwWbJk5FaKmz05lZ0py04xmF3KrF9Ph4W3lhENWZ85sldplTUscoeqGho2S7jdg f2PV3hVurg1ZR+Be7ZqbrHWcJ1mtV5qcJS1xGbHElvdh1PNgQd/CqCMkKuarJCulslrLK3mHHUt5 yM5HdgYC0byNhswIsSpAYp1RyY+HpNrgAzMbBJpnXWO7gZMWPkkwzYwfdVjUObtsqc0a8C17PHnb f1tdo7GWROiuxgpT2dRre7tWTM4zB5vpw00hE/3tDTN6mmqnlNffsfdu7tHpDYIT0mnwdc26EB++ d4o3knz0Dm71NWKxKRIxliRmYQYOzOA3mIGX3CnOUQhmOk0haAy0V8mySimrYlmVlFWLatSpBaz6 ao/VYhewx8dBCuwFrPICo0tO+Dy1x5PvNhp9Xnmp0UR75fnh45KgHQeLso5AlgZY/nMnIUOUTRK7 MyvFNgHbNWnWSngCbC2kb1VVY4v2IS1S6NR8QzvdVVYT8aWHN6X3eUqr4eFHVK4KP3Zo51/n663l pYX6eIMmEtEE+hf869uy+fOnBTWS/wtBkz2BuYbIXLGqgBgMSr8v4A/sSfjldhcv+YIOTmPxyJW8 y1AgRzRFXmEo2EhIZYUkZDFMAUL2DmQsuxPNuImSAYoyb0YartcubTStVrasXJzKRcHj6+g7aZxJ roXNWeTxHftpqTdUTu8oaxFb0h/q8rH8NFRX5evxSwu6sA8bzIi2q6C7Pb2JLpg8P1BSJgPr6uZd nw6kvx/rKnehXuMMdTWx9bwPViUFzyWASMmfDxM68cGLjAXYfn4galiOq6IFslKEyMWE2thdqtUG +eBXxFXaUW1Ke0QrI1qTtk/7iHanVq7jtVp3Na2SVfFVz4oyh79kb8JvF6zV1p3WlFVWDcRZ2fno YLCiW2a14cqttxfYK7Fb4O0mt4k3PeE2WW02VeEY1Qb4GvZQNcSmpqa2fEyFq4O4UIVDkoOY8ROP M7uOVRs7A2xxV4cWrsb2UVIV5khlzdZqtvBhSyFtH0Ihf5Ctc4FAXW2Jn5kv7IMR/GiBNXM4mCLx 2Enw0sYf+0zwg3veeM2Tc3vXteAokrd0bvf0xa5NQ6Oj7SPr45zGFqxIf6L7xStVXdWJm1oelg1O nXR916PP6duWrW+cNeuemrCn9Z5N6V1Tm2uLHLoIPcYtWx5rd7dfix+DkGrQ/px8B2JXVWSR6K+g ZXL4JztEuQmerMOk9+l9vG+7qHfkufcm8kg+VW8KMPrpGV8CgWpTVVX+mFXaQTEpg9W+OHnm8re2 Sis+6AApc2bnZ5PmHlQGYTz4YB32/Zhwxo4z02anC2VdC0cmXf/k7JEf3zt1U3dXJ693BqOfTTJ4 W6dXr79z9ZpY3ww/X0SntPtueOvZ50+t9RQ3m2StQ711hRZ1reZfb0ybH6+xvvzy0Z/5pnZXwVos xyxnQcK85FYxIeDgFpfCTzOKRq2TBWIxWQQLry6yUKOFurG1DpR1W4wuI2/cIbocRQhybBeLTCaT xiJYrT782sOn2eSR1ihmGuDbMA6TTIQjG+c4wdi8BjtH92mEEY4vXI3J2zPRDqiYtGY1IIoCAciu WfzUjeaa9kjXylZX09DkzlvFWHT64DXRHxxb9cq9s7byu99o6ymcd2hszoPJxvpEe2NzmfVfpx9/ /04r0x7MTRYCB4ux+7lOrDK/YDIZ9yZM9qgt7ArzYTaJ4rKiInCVzUOp2JtQEhXVjFlsxbyPsZKJ t8/XWMFmxXgIqb6aixnhhf2HYJvex2wuMQ57XqWvIciWg9xsnIyvkGgYRilIwsuy/FPYQvUfx3XG 1oXL47sOrPvpHe0rYwZvY0d49L4bV1U0NTZ5DJdx8fbpHaVuba1ml6yjo/TcR7veX2V3pfdPXyRW 2I4fOXLM6G2qboF95MgycPdxcNcN/q4X2wWro9Br5s1fEb1erYNMFt52n3FzxG1yC+6zboSw3A6Z g3fsgHnQIii0XdSixmkhXotpU16ez3KvUqLDp5bYCXPsKt8V0z8B3uLXhKcl65l1Z2NwYC+jAJw1 L/M+mEPLMwddoeRHxetHp732q+uP3r30oTlh/sJ43W3Dsza1Xa8o709cd4f2hY7e0Oefbn/vTvGm b26x3PK1+c2ddM7K+6fsfpJ5GTMwzb/In0EEdqUoaJQq5d6Eym6ygM0O+knISASTIAhHhNcFuZ7H S4ojoqvY3y0UiAUlfMlXCuCfcd7dQogbcxlRedBEpxmxu/205k3Gb2mHxMSUCW3r6WgNM17MVoHN l9wOBMFgn2SI1UZrEJRlFgsbQXuUGzmjd5dVpq+rCNg1twXcTrNepm6+eWzejIYRa7TKWxnw6M/w 11x4viPhs2Nxk6Jg3MIoHIi8aNUNW4aC2u9MilgC4uLe5TgMSFrTbfw74GUNaSOzyVnxmnbvrGBQ owqr6nnV9iP11FhfVB+u59X19WHjLDpLJCZqhy0ymopMYdMZ04RJ7uNNpnA3RRc8+USsMbq7+e7t ojs/3Mq3bg+bghpdcW8JI1IZCFFSUuhtb+/tFExW2ttZWNjPqUsjsvJJ98pNUAu53B4lZE4vWwW0 RrTotdvnRO8tlwTkeAjUYwssFgNEb2PMYYCfigwqjtcg/nEp9Jm1gpLMMPmBbTgOFzaMLNYFWEoW K4UU0aASC4ANa0NQ8l+j0oIgGUzJwW1gS0a9hJkxdXqppGMsVMzWEKu0ZEgrBtsY+or5dw6ri0p+ fnh2vLegI3F2xX2xla9uWbr31rb+aeF6cWZ3T2zpeF/3ZLrkwtRrh6LdlfaauY2Lk+5o9OHH5t2d MAS7m7bP5K9Raouub3l+v72p0R8wtd80ddFjs1yxhV2t1wWtU2tii5vLH1kwd+PsMnP69Q1bgonB yMAtDXedPx2YUz9vTvW8eH5duRsyjJ2TrBh2qomsEOM8oy5XCkQZIgyZrCG+tKx0b8JSZhdogbyA L2DrUGPD3kQjiVHdmMsVJ76x6qwIV4PuUijzMmPFAhdZX5U5aXDTpDWnkAVrsBlg0TkWzZWkN+Ow XizLrET0Btn0+YPRhrltZTZjcFL6lmCxU++ZMblU7A8pbWWh9Dom55I5+zSOFWhGq5BXN+36WenN 17T64J3qLEJHgirGHuzK7+4Npe9ONAXdcHUysd/O3AIFmzUbav1XvDnjYbXmiuVOmVu2N+G256y3 kRtZxVMj/zbPGfnFSHiebuKsY5wm64IglRRZEw6FXj5lOkXCC1cvPJ2xzzntxbsTXpovc0bZKiuR gG48dG3Q69TLXJHKvzabKqPp9fLESy99cRpjb++iL4rTw05VnfpC3dwOXyb+2grOxcE5kdx/mFgm PmAuEJwoKbWxbV8zCsqrmgWnR24v4ctEDi+uOB1i2UZ3foSvClftTXjCdqNhb8JobGnem2ghIjWY 7e4SOSkfq8/OpJ7x0wmtkRwIZoQym47cS5PjeIHCXpRASxhjozUNeGXAvllnVaFQKlmsSnpRwvQB e2WogLQLzDE+y+SVgtfujjdUhdUqfzndV7Ws4c9UqJlZnR7Nc2uLK28tLhA8jYwya2uCZmWW21yl Uh2KhuJuu72wWIGXKWLtW+kt7a0warzZZiyoadlZma87K1Etos8PdtTzlxgO+QcV6R9ARQepFu0y 7KD2JqDi1r0JG7HjLT4Z02cJoc+4URkySHbYf7nw5uZw9fi++LdPhqwpFvOv4pToKXGuVgVmaVj8 U9oOydglzxDHdkeUIcKQKqpweaIzZsnr6+r3Jvry6uyLX1i0aOHexCIjVZeGuuQdig6+Y4deYVJX jsWZNMCaslRkqh2PD1jHjF7a8Tb8VSayqET6AawoMt4lQ6R7DIeEjhzEFg2pJErsYBRrNwCRhigw 3Q6FYCklpwQF2IUyH5ptQyU3JBOqhFRkRYLpO1N4rFCOjNpfreIyyb28bEcDR+ViGXO5M+Yhoy70 JkN8WnerN3mXq2fhcGPHcEeRxhqoTN/KTILa6imuCpR2ziy5VKaxe4urCsq6ewIKvc3vT68PeF06 pmUfNvPFsniz37RgcW93MDjz9uvSm3ubBCeC7ll7Meem9kC+SeidVpt+7MqawVWJcofW39Vbkb4/ Fi+2W9kaeoWiMv8AHJaFweE4uUVsrmIMqGQWtYKhEEPu/DiO6HJw4am97IXS0uDeRKmxwmKsZm5u tal+TKVqqSi3jRUfmnidqTfSIy+azLS3GDzI8AJOobSFuUR+iRkZO+vNkS5HzsusbYacykuWGO6R LJwxrSqrx18dDHb1ByRDlLNLHzZrDVPnL6ytn9NWblfZAuEcobrWTCkrMBf1Tq1Ob83I+5XEeF7W I/rctdNWzk5v7mwBo7IeMn8CPoUeu5wpYhGBb7hdJA5lHp+3XWlymLR0mmOTRtBBLzSFBkjhd1Bi 2MQzuUUhD31kSz3wpSVdiiZnvXes14or12HO9vrv1x4bPfGHG19Jb9l0e8eiSXltq7pvu9v097O7 37vp3F/3vLeafvHaH9tu3DbjsZfm/wrrwZT0LJkWHCzFf/YZFctZgBGOuocEqgLYym4XA476vGhR lI/ugBPvfAFOwt6Ew1i8KZJdD5BiUwbtiUSaiCuPbxxjrp6oRomRyQMcvlDm5QZSvJlhfnxua5bZ q0rbtYzf578Y1merZcbggH9Msdhc4enzmV1MnSmzYVuldoaq08tKKl0qmc4ZrPyoWW9s6Z42uXT3 /uSP7p26vsbVPDtx2+3vN87s8xb+uk30u1icw17W1cTP624uzbOo69TPy1pjAdPnn+w+tdpNFw8t axN+/jLd4ps+pVzy8UEfATwsRMxqnhgolISZeqpU5bpyvnyHqHM4SqxWuLvbrSaX0WlyuMdUEk3Y 7iYSiQY3GTO7m+gpvJNuZaIsTfjSzibj8Wbk+DJf3uFscEoWA3se5snnNjUyIb2sOuRU1y9cI+7e v/a1zZPXxLsSamdlSfpdV9P0urvvv+mm8kmxSXmG9Cy8ife3ttPB5ilV//hoz/urC4Rm078emtSJ t8b8GwuvnVz0+g+wnyluCrP9jKTNfCXmGiRJsdDhdmHn7bKzSEbgBb/RSHVEZVJxNl4lH9Wx1ddi cnQj8KGTm9QqVVmQWsYKs1pcyJZU9nYBIYrj+Bku8/LhfWIZbX3/Mi9f0sycU89s5n9RXtjChkU3 dDaFV7vqwyWT292OaDR9w2X2zcF3TCtX/Lk+Ut7XVZ3++vxOAa8wL1fNWvwskpJF2KlpMLMIeVJ0 hPNa82bk8T/Kwz+nMOUJ0Ma8QAFlUtttcXSHsUGn8oDuFt19Os6vq9NxPNGZdKKuTzekk6vluoIq OzzE7aLdUYW3XdurTHm73e7yGopfEKpMY8XFUdVYxk9n4eRTWCQy71iykRkwH5RYvBDEYA4GexGB oPLCNWzTk+PzpegxomFRtp3LRN0vizVzE0OOeG9D3+JA39Jrb2qtX7K5r//ZniWeFQtLOuuF0v4V 829sHfzG6vY7FnKn4p35PW1V8dpQxdQliRkrE4Vu2xsLZht98cqoWFcZ6F7SMes2UW9ldPLjV58v yQ7CXs0VI04TbxOsYiDcbRV1xm6raYcT4T6jgup4hVLUEDhXmk+URqtNrS5UyrVjOIERY0w/wQJT 2M3luB5rvXAiFMKGlgXOW/Dq3u61e5los22q9N4lgE2ev6bFZ9M+RDvSPzBVNFaUdhVXTt6YuPuu x/lxVWnr4vmfL013DK9ty/cW1Xe2PPk8h5+5UjIFMQg/ft2KHxGLxQUv5Od79iby7dip+vDSaIfo c1graAU8HWp0jAmFkNpMUE2nq+LGENeDnYIfUMrcjlJmp5ixjbIohPSi5GIo7WL4AUFxadhgR8Y8 SdeZQIRknjAR5gBOoQWWkvamQNdcv8Jg9QVpgcJWXv9+s8I4e0fv/Fua9P4W/vtp/ubbW8oLe6ZG 6K2xJrzU1EQuzJmWyIYe5vV3P3wPvb2/1c/+iYp14h8yDeZZhEiLqK62womqZpFlpYmFw1QShluF vNrlMFkLWZh5b0KuNzs8cmK0GsCh9sJCwe1Sq70CJK5ZOv+DaCw1nYRg5qKzrSzEjN/a42fvFwPM V0ZlswHmb1UFrHrDf3/VZqqM01uC5eUF6X23pD/N9wbBjYjWJng8k4JpBX2/usVTXoGYuso7Wbzg 4T6aFstXSbamYOJfigrMyE9eEk0Gk7RcACHeBT+QOWwFyNgEIDNDBmktYQhRJqnFWdHMKGAzMWyW sHRfs9GNUoFhcwbjlSG1E4tRg6M4UghDpnflF8tVRn+JzVZg5ajZbEWoW1VQEFSFIQLslVmUAQgF nH0Xz9y/KCiV8TtAIDh97N8DsBSxOYRbWBA+c2bKSqOXR7N5BOb5wvQXW886iyAMW5vKdLqvUvrg WymDpbKeLoTYet3ptzdzH10wcX/unlTAfK1gkJGQ4xXnv6B/DXQWlrPQttJY0CxeECARTgQtfgb6 NZDkYVI+8U/mPOEfcfxTrEbGU04MMl+1xe7ni33FkH+fUlPDh6vDCN9UG4nBUy6zVEOC/BZLzJ+Z Mg7JIZhw8YXLxXMHTrbtoSGKHc9l+x1rdr/DioKXDorhTJ01RwisV05OdY89r7iETg7MiP3yvcj0 YPrG2QbrtqfMVn9p+oC3rqHy9d9U1FY46JYZdgfXttsT9TgLlZGIVpycTh9v7zJisa61B9yvHHP4 nR4fQvm6klgD/slNSbw+H1shXY2zKp/ZAVt6qqQfVdCPFq3L7Oh+X/t3LacUkSNKk1JQIsyu1Ipw dbTfEmX5AjE57MFy3uV0wSF1GlW7lUoHXusLZY4M+2HGTl8kBhx+KcAKg/YqjHdoIQyZnC3VF61z Q/ZFRvalzBU6w6kalm2Y29A5qCspLgxHO0PpDzzeQJDuCAcsesOBY2ZruCmjQ7PufGq6/miZ4Gxc N8h9OqWpEGuZ1u7N8zQF01p6srSjIJTTJcx5JiRgNiTARp4RbTilpeHwywQbp+YFtb6bN3DY1p0U y5DXy/GKHDVGm4FoTBrOzWvkHM7SbRc5LVvBtEb1bo2MrehFkB2ZnimYXqPX8LbdRFI2HCpkqYGH VDATCTsJccGeFNt/KdbEznDBsWPH7Ew4swS9YctaaNFC6ciSt456i7FLxsktHCDEWtbAzz6f5krS n9Y01bqu4f5x4Y9UWVsbKHHT4vSfInxTSf9kaqo5/zOTr3cW464r/THtwC/w9cQnWhQHjuhFNiuF Us/t12qNBjwqfOro0RoSDuV9jICo5Csqg2zNDNI6Q/XyBfXRKpvyg65E17q1nc3V03AucSrz7V5A 52tw2pfHSdeoWMSlCG/iBb6Pf4SXG3lemRIVlJPvU6jUin2l0ALTqWgNO6h2mp3OOo0VG4EOKzso uubYsWP85g8/vDD8wQcY7w3otwHj5YlT1PCpUY7u4zi5TBonwe0YI7ur4ZUP0BytzuH3kzuk9kqc ya0XPVqiTI1qqEK9T2OQU0U7u1+HgSj0OqkTNuHs21sY8rzTNfjVJOvSmwX6k1e4F9kXD2AfjGkl /TEX5xbgaYJo4SjPvSgSirNqVCanpLQJ7MueEMW0vHVeLp6upq/THz/N6LQAg3Tg7bsfZ46niWWC SuUggZRYyl5hcF7e4hh1QJwedcgC+8r8o4RY8u7SaCABYfaigi2qp05kBCXrEeCo32ssYolHZc7h 5sKI2XO4LBJp4PGmN3sON65x10WaonnlvTUzFlu2rHlu2vqvTjYWVsUm11XbfMfozuKymtj05qkL RpqnXV+/aNGupqruO2eWdbZ3ds1u6Zkccx/K0Hk5/zJP5d+AHHng4YgiDleIDpVdmU/1eq1SpfV4 3HbB4dYe5N0HzeFP/3TKxI6QMDfNdCL3uuVEjft4TZ7rOCiOs0hsI8ZcGLvN6b3iCv9ZSqst6Z8Z awia05aLWfou/3JJb0Hr0hVT6rvuGOyYecUF/u8KqD2ZP8g9AXkw4Bx2g5incgpKBymgBQUeh9Nj MOjwz4wsBz38QV1mhIzGphMMw169WYMBs6FJwVxFVgm8V1zRqFbrmz07VuazmOknl/LyHWwwyWW9 9XVTF7RmhnbpiukhmTByn09sggwZv0N+B9WgYdPLJAx5tkP0uM8/XbcO45+GmIBXvgAnBovJ4sw5 0jA7R2pUaZRyTb4cJzGexlFCuSrPhTZ7EnmCCv+pSWO5P1/wqmRyeYlHGYZvjMNwn9b8Bq5k5kQC 5B6H4TK7JumAL5wXCD2UvA72BRE66SCvEmE36cQKZBjhah/lZDiadOFNbsrD9qYar6FXd1Y6DLYi /QndrJBp0rdJZ1F29fBrzz9vDkVe25U5+kUnzi3666QLjzF+3AMfUwPpd+N8/FyxolCuUJjVauwa nhHVanfAjX/oJrpl5gAfwLom97nhDOgfDIXCvgdsGeHHWoL55LbwxzMbQGYyM+dLmBrYcRxZ6ZSO kWR3utIppJIGygwnO/ib2f4xReEffuqTrwqa/ucXr36uL/nGk79/e9Vr1PSV9ERkfl9Ap9AoRu/p ubbVc7u8KnLvBEnJ4o0jB9ff87M11IR/Kkbr/zKmunC9o1zQ6qyN7T86Vjv/ju7HsXVh/LUwHuOj gOyReYmertmdoY7hG5asWT78/wBShciRCmVuZHN0cmVhbQplbmRvYmoKNTEgMCBvYmoKMTUwMDUK ZW5kb2JqCjE5IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZv bnQgL0dBTFhHSitBcmlhbE1UIC9Gb250RGVzY3JpcHRvcgo1MiAwIFIgL0VuY29kaW5nIC9NYWNS b21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExMSAvV2lkdGhzIFsgMjc4CjAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAyNzggMCA1NTYgNTU2IDU1NiA1NTYgNTU2IDAgMCA1 NTYgMCAyNzggMCAwIDAKMCAwIDAgNjY3IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA4MzMgMCAwIDY2 NyAwIDcyMiAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgNTU2IDAgMCA1NTYgNTU2IDAgMCAw IDIyMiAwIDAgMjIyIDAgNTU2IDU1NiBdID4+CmVuZG9iago1MiAwIG9iago8PCAvVHlwZSAvRm9u dERlc2NyaXB0b3IgL0ZvbnROYW1lIC9HQUxYR0orQXJpYWxNVCAvRmxhZ3MgMzIgL0ZvbnRCQm94 IFstNjY1IC0zMjUgMjAwMCAxMDA2XQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDkwNSAvRGVzY2Vu dCAtMjEyIC9DYXBIZWlnaHQgNzE2IC9TdGVtViA5NSAvTGVhZGluZwozMyAvWEhlaWdodCA1MTkg L1N0ZW1IIDg0IC9BdmdXaWR0aCA0NDEgL01heFdpZHRoIDIwMDAgL0ZvbnRGaWxlMiA1MyAwIFIg Pj4KZW5kb2JqCjUzIDAgb2JqCjw8IC9MZW5ndGggNTQgMCBSIC9MZW5ndGgxIDE1MTEyIC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AY17C3xUxfX/zNx79/24u9lsNslm9242WSALBEJC CKTkBhIeRt4Ps0okASIvETCA+CQ+eBhR0FZ8VvCNWsuSRFwCllSpVpRCq7XVqqBFRStC+6NUgWT/ 35lNQPr38/v/782ZOTNz7jzOOXPmzMxmxfUrG4mNNBOJ6HOXNCwj4skahCgxd9UKLZW2+wgxTL9m 2fwlqXTatUhfN//aG69JpbM9hATXLWhsmJdKk/OIhy5ARipNixHnLViyYnUqnfkx4unXLp3bU551 HOn+SxpW97RPeLl2XcOSxhT9cF6uLVvatKIn/Tjiy5dd39hDT2sJsf6G/C12x0VwEEJBlU7+RcrJ L4mRMKKSQjKTEPlXcg5RkOblinPWzzueHzbbWf5vU7ZJVP/U3/sUcOR3j8254uyOrvkqMdmQNAt6 XoDvjCO7J5LRKjm74+xNaqolXtL7pO8m06W+bRFf8PBeqR85CmBSv9ZoTnC31EfKaR0R1BNSuM2d XuSsHCBpqLFQhBrCpYAdgH0AmcyWAihVEa4BNAN2APYBDgMMhCDkpRpgKWAr4CjAIOVI/lYtqFb2 kTLxbSbG65QyyElAEiCRIMJCwCTAbMAmwFaAQdDxnKWANYB9gFMAA9GljNYHhqDvGa33iKht0bVF ItmQSs6qE8m2K2KpeMKUVFw1PkU2PEU2uDiVPXBUKu7TPxW784uaUXmbxV7UWemVvBikFx1fhpCy /cRJKQmSbVI6iQOYhK6KHF1yt+VFirbuk2RCJSZRMo8Ek50SbbW7iiotLMlOEjcJsu/YiVQJO9Hm cBVtrbyMfU52APYBJPY53s/YZ2QNO8p5jrACsBWwD3AIcBJgYEfxHsH7KfuUONknpBBQAZgN2ArY BzgJMLJPEKrsY64xIuR4BYCxjxGq7G8Y1t8QOtlHwD5iHyU72XutpWVFuwUSLexBgvk9SEZ2D+L2 FiXYn1p/6AeNikDS0Kg9Ui4ZSYZIua35g4MJyddavjCYYH9v06LBbZWD2PskDmDoyfto+X2iASYD 6gHLAAZgHwD7gDQDNgO2AeIAaBlCFaCxA4B3AR+QQQAdMBlgYodb0UyCHWqNjApWetkf2FskAxw/ yH4v4nfZmyJ+h/1OxG8jDqD8AHuzNRAklVaUE3yjIlYRF6JcYb9ty3MHk5Uutg8cDCIsBFQAJgFm AzYBDGwfy22dF3Sjkj3kAOZwkLWSr0X8HHnKRPRFQT0yGgqo8SAy/GfAEGzVtkaYHtnyCJI8iNz3 ADAeRO7aCIwHkZtuB8aDyLWrgPEgMm8RMB5ErpwNjAeRSdOBIUiwJ17N6xMsnbSYapVOdgO4dAO4 dAO4dAOR2Q38JT/IvI+PtRYUgGOP6tF+BcHmDtq8lzZPpc1P0eZG2nwbbb6dNpfT5qtpc5Q2+2lz gDbrtHkPHQZWNFO9/ZJkme6jzQdo88u0uYk2R2hzPm3Oo80aLdUTLNQ6HrMOUbWI2ir5pGOhtp+N hPVxshA4GoLOh2AT9iE8BEiKlA4iLTdFnBngcW5bQUUqPXB40dLKcewNfPgGxPAGOQKQIaA3oEZv oJI3UJ0TYQVgNqATcBKQBBhAnYtxbBKhE2EhoAIwG7AGcBJgEN05ia4wshQh7+IO0bFChBWASTzF 3sCbizfEQnqO6lej6jhpk586A3RSIBlgpcTrhV12u0yuBLXv+o/9+//YibnSzO5jm0gOBLG5J97U +kNOMEEfbo3sCVam04dIQIbW0TISofmIh5EmkS4hfhPPLyZ+9hLiolb/THzmbI30D3ZQB/9qV/AH /7Hg1/4EA3rcvyf4Fy0h09bgn5Hz0q7g+/67g28XJkzI2RtJUEQdmiDd7R8WfPmAIL0dBY+2Bm/j 0a7grf6xwcV+UdCYKri6CSndGZwauTI4DvVV+ecE9SbUuStY4b86WJ6iKuHf7AoOQheiKbQAne3n F42GA6LCGaUJukDvb9xirDVOMg41Fhn7G0PGoDHHmG30mNwm1eQw2UwWk8lkMMkmZiImTyJ5VI/y Vc9jEIufAQpNiSxwFRaGcjODkDBqYuQyEk+TaljNtFG0Jt45l9TM0eJnpoUT1DLlyrgSHkXj7hpS M31UfFi0JmFMTo2XRmvixslX1e6k9L4YcuNsQ4KS6bUJmuRZa7Pj7tG1uwmlrrX3ZvO479p7YzHi 866q8FW4R7rKxlT9RFAvMuurohcf30U06ovmxLfUTKuNv5gTixdxJJkTq4n/fJo2q3Y3/Rc9VV21 m/6TR7Ha3dJI+q/qqTxfGlkVi9Uk6ExBRzT6T9BBYxCBzoSFmdMRzRRI0T2aosvH96DL4xHozGaS L+jyzWZBJ1NOt7Mpr7pqZx4C0GRopEnQNGVoP6Y5kA+afASg8TaTA4LmgLeZ08RHimr8fpAEEICE ZhG/IPHTLEEier5TkBT2kNx9geRu0ZKU6o2g4QGqsR/tpbEfBc2PGPm/o42jolHaNiI2d1Z1Y7i6 PlzdCKiP37NqgS/ePEfTds6N8QItLkXq58xdwOOGxngs3FgVnxuu0naOEN/9V/EsXjwiXLWTzKqe Xrtzlt5Y1TpCH1EdbqiKtY2dXFx6SVt3X2irePJPtDWZV1bM2xorvvuvtkp58VjeVilvq5S3NVYf K9oiQscn1+40kVGx0ZAfj9uY1QJ9rc8OxUZ51WUjhfKOCPluy+6At7KdWKOxuC08Km4HcL0eUDmg khdhTvEiB7KdPUW+20aEsjvo9p4iFdmu8CgSXbGyaSXxVS+sSv014UHWipVcFKkwyvN+8gFJdVxv qOK+dU28YFpNvGLKlbU7jUbk1lfFkDe8N89qrU4kO1OZA5E5nBNK0gVCnlfO88zmHsL/WxdEn5AN 7uyGo7GnjeoBuoI0xaR4oGY6gymYfiXYMOvK2g74UnyRaIphgE00Spt6a+PjEDhJ5RAMu6kXVqzs wXp4saInFqRNURJt6mVJb3VRziwRCF6tiMK0KR0kE5ClPE8y5QjB/if5FQD7kORX3QuTx3k5j9k3 MHSJHiBkO3mZLiQvk33kdXoKX+0gu0k74S5QFXmc3EJ+QdZjWbsSOXeTqXgV5P+CZibbsTN5Egvm k+QgaK8gt5EO4qW+5NdkDVkrvYev1hI7ySWVZDJZSu6llydXklnkiHwnKSWXk+vIMtqcrE3el3wg +Qx5luyWfp/sIlaSRebiPZj8Tvlr8mMyAF88SB4hR+gD5leIjlaaQflLcj15VKqTaXJ+8ix6ECI3 oA8ymUAO0k4WRe2N5Cvqo7dIo1HL08l4cj+o/KSOLCCPkg5aQseykDIrOSF5kHjRxmrU+ghpJbvw Jshr5CNqU04ln0meIpmkPxmP8bSTP9BOqbvr9u4K8E0Bl/qRMpQsJb8hb5HDNEx/y5YqNqVI0ZWb ku8TDxlMZqC3z+PLL+l/2G1410hvymOSo4gDfLmfc5v8jnxGs2ghnURnsn5sKXtCup6Y0OJgvPPI QvD7YdT+KdRoF7OxQ9LT8kvyOUNO99GkAxKJkMfIL8lvqR0j1WgTvYN+QP/ORrPZ7DH2ufQL+QX5 T8YGjPpqsoTcS14i/6FuOoxOoVfRBfQWup7eTx+hB+lhepxVsulsMTspLZCWS6/Jo/BOk5vkO5V1 yj2G49213fu7/9j9n2RRch2ZAn24Hb1/kDyBke0mh8iHeI+Qz6lCrdSBV6MhOoPejPc2ei99im6n L9B2tHKYfk6/xpL0b3qOYaVlBpYN54e7QGF2PTzMX7DH2SG8h9m37AcpQ8qVolKJVC7FpKXo1Xpp M95XpM/kLPmQnASfi5QtylZlu/KS8rpyymAz3oE1/t3zT3cVdH3aTbo3dG/pbu1uT36GvXQmdMqP LVg5et+AdxHkvQUat4O8R23gXRYtoCPp5eDMbLqILqerwcm76KP0WdH3X9O94NJf6En02c78os8D WQkbxSbhvZo1suVwxh5g7ewDdlYySlbJKaVLBdJYqU5qlFZIN0pbpLj0rvSJ9Ll0RjqPNylb5KCc K0fkqDxWni2vlJ+Qv5K/UmYp7yhfGCyGJYZ1hoThn/BqRhonG6cY64ybjLuM75vqoZ1vkFfIq9DA Cw89Kt0uVUuvkPvYEDkTW5g/QJ9nk3nSBAZNZdvpBnYrbWd5ymrDCDaCTiSn5Ah4/Sbbys6wEdIE WkOnkUVscKpCg0d+EVi5/AY5Ie/F2P6AmlcbbPQ2dtJgI63wkcrgI/1OGiRHpXfIR9IRapSfJH+T LTSDnmDPS5OhBa/JI5VaEpIeJ7+WltNbySusmhDLOdNG6PFE+iLswnRaRL+XknCDJ0KLSqW/kzvJ YvZXcgLzeAN5iM6T55P7yBB6C/mKPIdZ0U+5zlBgSKdvs4VyC0uj7YTJL2B0ZTSPSoqH3EXrpEcN J9mHZCU5JFvIp9Kv0PtD7NfSBPmUMpUuwAy4lawjy5O3kxuVWvlPdD6R6EySLx+FdbtFKpJDiNfA qsyCTduF2d0BO1ApTUCOD5pzOfRiBizEo3gfhp2QoUELMcevgBX7A2k3TGcJMl9xUFgdnNS80z2V XJl8jjySnE+uSz5ABsAerE/eghq3ky/IJrKdru2+mSzDVvJDzO3LlTHskDImOYC1sA/ZNLblUvmC 2/nUR77B+2tIZqSyh7TIfyHTSEVyY/LP0O6+sLCPkDlwWI9hlN+hhXFSJxnSPZHtTI6RlmG8R8iU 5PPJILWQBclrySSylzxrVEiDMQoZx+mfMN6bSSObmlwhNXYvBB82gQs6uLUS9uduffSM6ZV6xcif lY8YXjastKR4SNHgQYUDB/SPFvTr2yeSnxfODWnBQI4/OyvTl+FN96S5XarTYbdZLWaT0aDIEqOk f3V4TL0Wj9TH5Uh43LgBPB1uQEbDjzLq4xqyxlxKE9f4dw0ouoRSB+U1/0Wppyj1C5RU1cpJ+YD+ WnVYix+sCmsJeuWUWuD3VoVjWvyEwCcIfLPA7cBDIXygVfsWVGlxWq9Vx8esWtBSXV81oD/dabWM Do9utAzoT3ZarECtwOIZ4WU7acZIKhCWUT18JyMmO4YYzwpXVcczw/gU1Uj51Q3z4pOn1FZXZYdC sQH943T03PCcOOGeUlSQkNGimbhhdNwomtEWwseJk3u0nf07WzYmVDKnPmqbF57XMKs2LjWgjuq4 K4p2q+IZNx3zXUyicvhk639cmi21VPsWapy4pWW9Ft82pfZH32aHeA2xGOrAtyx/TH3LGDS9EZKq 4b54nK2N1cbpWjQJxzJfjCo1vpTXm1+/SIubw6PCC1oW1UM0WS1xMvXGUGtWlr47eZRkVWst02vD oXhFdjjWUOXf6SEtU29sy9S1zEtLBvTfqbpSjN3pcPYgNvuPkUYwPVUmMEHOsZqpFzhLeR/D4+EJ xrW5GnpSG8aYhvGgcRhpmTsMAsATo/gqPg8SWRg3j65vUYfzfAyRxpV8Nay1/JtAA8Invr00p6En x5Cv/pvwQq4nF1QtTht68Xg0Gi8o4CpiHA2Zoo8jRbpkQP9VCRYOL1Oxf+abBjIZvG2IDS8E+0Mh LuB7EjqZg0S8eUptKq2ROdmtRC+Eb83qeUlnb0n6DF7S3Fty4fP6MDS5ne9nSXrcFLnw51S9adUL hsep938pbkyV10wL18A11qpb6nu0tmb6JalUOWco+IayHiyeNrpWymbI4xjLlkRpykPuJYG7XGuL y/n4MwilnpcwmqCVIodqY+Jq/bhUGLOEQj1z5v/1USJ5in8loouf9QwjPjza09FUt+MjLklf0j1b i1QzHSaHwbNvabFcUgZVS/VyfE8EjcdGP6SNjpMZmJn5+MOWYxiHWHZcB8tQMh2zSGTHsnuSlxBm 93wUw8O1c0D/MbCZLS1jwtqYlvqWhkSyeU5YU8Mtu9nr7PWWZdWwdinFSSQ77smOj9kYA8cW0OGY HoyM2hmmG6bs1OmGaVfW7sYRh7Zhem0ro2x0/ajYzjyU1e7WCNFFLuO5PJOTaDxBaigG2cpMgj57 t05IsyiVRYZIz8XphshLESGPkrkJlspTe+kY8uRUni7y+Pi4jRk9vbZHLEIh+NSDDuGGBtVwH4OD 3ITdQhO8kSYyE5AFmAGYhrLdysxkl+FF8rAykzyhvEWeRP5lgDGAGvoW2QC4E/h6QBUhqJRPBIJb IwPhHo6GPUkqR2T/RMAPgySs9Aq+MIpyftFivoTScknqYsIqUH7/Yr+Y+RMYrnvwOHHHk3pcInIj TIN3wZ90vBPIHnqYvSYtkS9TfqG8bnjI1N+0w/yFdaKtr91ov92edHzufAOnViBX8KLX6G/IFXLl I8AJFzmvSZ3ndYWcI5rcyXmB/SArU94D5bTdREp+2uopY4nkp7rmKXtIokzaKu3AhcQqQtEJiool YpGOE3acJugLr0AubTf5omq5evqEeoJUlFeUr1cGRutuVfcPHkTrotF0OoTSFzZ312Yq357lNWB/ QNg5pZNYyA5dk3S7q3ixvIZtYo+YcK1FzcSgMMmsUBujBywE00a3hMLFgwjV8C2O7dpVlc0A8o3u cjqB+W02hA67XeSe0jOdTsMMotpsPLTbEWbZFN3uLFZ4XQ5el0I17MyYkmntoOV0LfFFJ6rH6pZH o+qZnh01EuUTuspJRUVGGXWV8aGQumgo7DIYjCVDh5YOYefaK9+b/tDnhSvkm0feEvz12AOz+djK wQ8jxhagb+00cLXWzS7V7ktLM8ywJ5Kn210ugXynm1UVWMCjBBLJ43oGJwgEeGnA70BJwMZ7Hkiw PbqNWTIycAvmYkwLutxlhe8f5OFBUniCd7aCh/vhhmXvxNTtadDmdjPRoG52uoCl2jmqW91pbEbA w/N43a2oGs23W61sBpBvdcHFn2otGk21x1sTjelDRygjDHuUfYY9xrdMb/uN420x23THYts8x03u m9Ludu91f5H1RfapLNs+66tpLBuH2jlqQDX8BttoI7wAE2Jz8pSeFbCoJoPhgD/L4/dnmfxZ0DhT ll+yB9QEe6ZtkoviyNv3Ch8BEexwUmazNGW8B27rkCXdw27H/FXpMN3meqUC292lbA2TWQfLw8H2 pp33QDfP1EE3z0S5ikJBu8orTnTVHXO5uWQRrHcMjDqgrkhAzmQYHsoDUkfrro/F8tNDkVJIfOjQ kuJIONdg7DN06JAiuLbQBPzJxvOlLCP/6UdPbn/k5jsep7vTvv/je2fGPf/6U7MCL79cWT6387b9 X1yz+OePt6Qd+vCbl2tf3PvMhobB0JSZyS9lLzQlSmM9grNm+nSuxT4/oVxVozYkaL+wxe60OQMW S7/0gF8O9PMr/exhu82XSYlbg5qzGZoxwqXIySOF0YP8j7/EXVZRoWJWQltOvKm+6S5T90eLOEBZ 9L6K3Wuvtq+zy9WuK1yrsqWp3mvVRZ553pX2Gz3r7C2eu7OftVsUTeIn5Varze6QjRTtUi4WHQPY g41IP2KnJe02W7rs62DPkEy2QO+DXiropt3dNFtbqjHNxzVZazY2Rbi8BkUoiagRhh6ffpWXRDYP 8CXosNbM92gHHQZj1KlbQadh08HI5v4J+kCPDKMnhBQxM0+cjtZBkicgR4gRg1OFPFPixFSFADFb 6fJYWqnXO6QoJThj6QW0V4ZciEYvQhLOjcxsDz64eM2Op24dcrnHbW1KrFu0cKOnPfTNr1cfWHzN vDs2dx//4LdJeqfvkfXxO2550vMEW33r3Dvuukt75a35rfNmPz4w8Np9nd3//hKdzoINUJUO2Dc7 jehD3bW2BbZHbS/Y3rYpl0uX238hS27oOLEZJKNisUpGYsNkPyDJHkmSJTthNrtslPbgItAEM75N txBZBgk5YJET7JpXFcWi5wSLLb2WEMiX7VxtgHwHxACElup2o54bLjY2h0qMm50w5+Cq3VNMmIo1 XUL6qPgGyLFd/Bv2iiNBNwpOfxuN1glDeJqbl3L1S1XYQfV0+ZlyVxlnclnZ+oFRGVPG6XSC3eIc 1I51w10GG/e+bh1SJuUOKJPknJxyXkUMwgCN7rHp1jJb8+Qymx4ps+X6EQ8o4wTRGJamEjrENSQ9 7JJclG3puov98udvvtneXUJnPyvtOn/Zs91PYlI/2LUYijcj+ZUcUp6DjZ2Zmjm4P8H47JwJ1O+w BNLT/W5uOa1OWQ747Q5KjD6sF+18uRCImGWFsGl8lnA9ghJ17cfM4BOjn1vYXqcIa7JuzGnJ2ZL2 fNobtg9sf8s2mdN8joIsyTxIGWTtgB2TMDvUNEu6Oy3tgMPpcaR5HE47poiexjuiO7Y5mMPh1NNp T6dedcr0PT59YNV0jXfPNVtdqq5RN6myikniE5PER4lP9TF0NjVJfJs1915agt8KPAilGtbqeOWn Jguu8H48WS5OlzosZNzmiYHWucoK62AWjq03DYwqkCIRhk/YPLocK/Yl0wZzJS2UHpJg80i6x2jA TJnxWvoj197R/vLGKzb2feE+9mHXq5Puur+Tmlbce/r3XbRZbbln/1OPtk6q8LJ//qp71azuM398 6/7Wo9wTmQbJZcLmZZAwbpVJSnrtNpIdGMg1FKsgmzFwoDsUMCh9A257wGzj5s0MLkBJgUSd8OWF GIGkli2OiEKnD5bqlHAOBMKFDeS0nsk/lfLSbXyVSxc1pkO2wKEB3Fr+KDjYqw3RE2VYDLJTa/ir oiOG3o4A4R05ho4YZnBEzKCe9nkemj2v5/JpxZvljghvkId8pBfH19sY2qJCG1M94V06yDWxtMRL +3nHe8dHvrR9PUgxD8Lx2a30FnmFabn1ettK+00Z95AWulFeZ7rdepdtnf3ejHddb6a5czG7W/1a Fo80rZBHAzTY26N6oJ9mIwEfsaEb2wbSiz0JNO0zU3OCzdfVaJNT12CnnZQ4VSdzJuj9u4p8TXGJ SihvzWtK73WjtHQ9naVvHvxWao2FWa47oZ4W9rnHPLvL6gr54LjJEHaZr6vcOl+/nCyPxWgkUlLc s5j22mGCnDTPRVMteS6acANdtOzaL/d1frN4yfp7u898+GH3mfvnrFu8YO3d18zfMHz85mm3b3/5 jjXPS9n9Hl607aMj2655qF///Rv2JnG92rnpt3T6grvunD13/V3nkxM2T3qu+Y4Xt8MRxak1oetw P8L95GGYkfDwjWZmKJelcmqQLawcFoIwDTP2SdOTD8ObwAix+FRgXRXjEkNLKxmSLgF2Hzx4UIod PHj++YMHCcMNBlFiWAmMxEHn76IOJzxXmNx/tfcg3wt7jZzTeoyrCdd3wwxFhIXqIHW+aYG5Xt0g bVbfVt40dKqnVKtJieF6YLK6wBpX/8f2P/b/cZhlm2yXHRKO2BRZxjptMhiNNuAmnIPDu08kv9ed wkfWjDYPipgEBf1eh2ZiXmiyzYOvzAFFMQUMkiHBlulm/Frsax37Q9ZBrWCeVXfbNNJolKZOxnH7 EVnaLFMZ9++6dbKt03jEJm22URtPq07jISNbY2w2MuPPnR/8JcWtTHAMfz5wLCtTPXGC+CrKs05U HCtXT+CP7xaisELrB+Iqu8cNK8M6s17dv9+xf/96JRVDfWriVtzOBXAE0S47JZOxAy4kSX7PNSpG r+eWiz9h7DfCUkhKC0mRPgajxIb8kdV+8lLXY09+SP/5yJhc/xCl4+wYure7il1Jt+y+4d57oAA4 xyUGJySlsmO9a4opeUa3ch6ZHHb4y5ASllcg2EZ8p/flmM3NixWnTcIP65jJbHUQk5lZrAa+Q7Fi 74EwkTy7i1NZVQjiy969y/fCiCHnvFiGyUUjBM3q7FQPH+7krmkUCxLFmEiPIdKDRs1qNcwwiFAS oSxCRYQm6JYe5hQM1g7mx8D1iTku6pZF6JYR8heqhw++14PcNkWw4dIs7mKnCBSbRKjDSkwmyoRf wWsTCK/KsofNJG7waqZuJ6IhIhriqiaqJdycRU8XwoMQO8Ly1GDqUqPhUsIlJn+y9TWEOU0elm2S V9nW2X4PVtrG28Y7pX5yvr2/o1a6Sl5lX+1YbzdZmWIqsw91TGI1UpVRN02wj3JYHmaPSFuMW0zb peeNBjdzOhyDFOZRFGaCwR2kmICabFOdU6kOZTaZzBar1W53OPBzSDOrdze7mbuDbceKOrhV0UwJ Oli32MwWTbetsVJrBwbpoFaUsASmgBkGUXMuUyn2JTNf1ZR6pVmRlATb3uYaEfNFM2EXTteV+7qg 0lzLgWddSByrg85XlJdjl3zhzcJM4Lq//lah+oiw+bio4q8RW/IcdkkfwIx8IDS8Jm6D+veF+u8m 9uT3Ox0Wrvc9ztf7u0Jljv4h4YDtKi1zFJUK9JUByO1xsqIxzBGyHLuaWGwIjgK8GUNLacgVduG6 0vUw7k6uGuTNhL9FlT3dM3d01yod5/51/7jJj0nnz46R3zlXIh89p8FePgHvtgszxY67kFa9f6Nr sYfVqDWeq9SrPLLVFoAMSIYvAOtBTO6IycJngUnl+gNlO61ncwUyZWlZFH9ZPrsmtvVaz57+TO+8 OJOaF5g9qTnYo2ZIY7eBLT2Weh1VA6vLHDGL7/GEPsF1xf5uorq8jqcncDuNNLw7hFA+OKIYeVFG gKV7WCjkAs43B30i4dATrN8DE659IPZd99vdG+jNe5+ou3zwXd13Kx0Od+OuJXu6u7p+JdGNa2bd mY5DHIZbbqK8DC74SC49r4fcVgd1D/VfGbzGtCQom8Wxg0mERhHmYc1Ex1N7coHYwAyBwEKkEHci +XmbO6sY8am23D7FLp7O6VOs9sTwNEQa5X9ty4mkykEvyhHzcn08kHzHZf7LtGnWWf4l/uvNqx03 OtdaNjgfsr/gTDiPO75yqrAHmsvpcbmcLqfN7MbNa5bXYsBNjd2m+Mxmb0ZWZgDHAZ16JhdbRgYJ 5Qp5+nxOp8MUiDgeN3D3i3tYQFKiAnJUz+VDNBi4XAx1Wt6yvOY8KS/X9/8rYwNvDqL9T6+Mv++V cXjEdn5GI3YkEGwdP5tRhYyjmcd8ELOYVj2yjqKsvKxQ7O9T23vu5XLx9+hIKuIWSOxLLCbdWeZU h7vcw5EVo8vFnHLgBCwrs8yVm1nmBjh0f5ma6wEEAempfQuouT7xLSQ2khnejLSwNJBBncJCtcTG M/Qka9n/7k0H3pvQd8blydOvz7juigGhms/ok2u3THzo6e5BSsek39/4+Ac5+XkTV3Yvp4Pv2jjM auxaKQ0pvXHsgnVc1y5LHpf98kjc7ZWyAXp/s91ckGnPKuhnLyiAQUwvzR5eML6gzl5XsMi+sKB+ UIt9Xb9HvY9lvWBP75vykg0z+gBJSfO5zBf77src03d/5qG+f0r/pK+pyktxBHVad/F55caK1uuA lHCJzuDpYEbQF+1fUFwml/UfL4/rP9MUi15jWhhdZVuPTe0P9h+irtJiB5XVwrzijKKQxze739J+ rJ+/0FHh2OTY6kg6lK2OHY6TDslh40rj4JsxPuOBnNbT+UmYQzjIDgN3nx0Ov5SRYC/u8j2IMyEj FOK0niVmfXUfS5FfsvZrUBsItAwHfvkhTK1vRWUcwSYXuXky10Okj4mTLSCngRh4zse6lTeXJxpC +rxQtbwEu0p39NH5yYQWGRTZEVHK+Ix1OHCikkh+sEsgg3mebg/AOS7rLGPbymgZZslpvZLXmJHv yy3M22c4ZGBBQ4WBGRxieoiNhsEn5oXYgBjEemnAQRvmiDikNAwedtF6LcchR1SFDw37VYdzjp6n vCv6xRd8u3AM532pQw9RAld0OZxr7l/DGc3g51dCycU+jizPN/D9GjxqHF/xt6QYusmPsEYyHGFB YdPTPd6McEQyGB0widzrBpFUPm/3oh17xzaNK1n80Xw6pHrDmhtz4r7rDt+94cXJqjkjd68/Y87+ pbOKlixc8FQk584ZY15aO/H2iR6HPSsv33LdgJ/FlvuW31OjN1w2cPWpc2t/Nox+0tev9p1QOK7+ qkk/uwEaPSZ5XDoC6+kiOXSG/oyFyfZ8e7G9yq6UeEr8V7Dplqmeaf75bJ7SaJ7rqfd3Bt9X/pz2 SeYXaV94Tmb8I/OLnKPBZNAbDEazyr3lWTVZy4Kbg8aBLM8+0DucldhrWLV9jGe8/wrLTPt8+xeG r7xn6WmHStMlh1V1kmy/1egilnSokm8IJfkuZ76qHnZR1aW76l3NLjmo871iUJzGudxcU2GMMUW4 SF0GrgwunGqJ3H+BFKrlcnAlANV3QqGAfK+P4jJ2rXDn7YNXfMSYNMpBYwV+nyoZA7x6o9AKY4BX ZBRaYRSTwCh03ZgZKJ78I5tXt3zCia5edYBuLIefgYOZY1wpcKBZgaMZsY3n515Y5UMlXPIQvZvv rzJcQ1z0x5uqYY371/x55aL376zfUtjWpf1q5apnt9+8+sl1T2w89/RWKrVMqWSOs2OY+90Dv33z o3f3cytUAysUgBVKh8ym6RlB4k/H9qFOqTPPsDZKi5Wl5karCXvDY8IDBAOO6VM5A3L8POzj/lA5 6zmTJQ92D88c7K90T8iq9E9xz8qc6m9wL8lq8K82rE4/w874VPxozGnPyJjsrfcuw79P+J2b1W0q U1U5228xkg72Ij/sERNeHJKqnO8qpfTBNL9szdBxAvWx8B2ApI7DgHwjhAKkUzf3KSiO26k9K4hU W36kmMd6JZ/UQRr0DlHzjHpeQXGvpOBWX5AUBgLcwcVtxKUDQi8fGpdU6Y8lFZ3QdQwuSDR6BpDy QnD4Eo32HL+Udy0v79k5plwS0NDl19MMPlmJSyU4aXF5jCGx76Uh7p3kGqSrO/p/t/vr7pPU8/Gf 8buq88ctrWvnbuz6iE2xDZt59y0v0JkZT7fTIJXwI6a+3Z92/6BqOzoW0AfXjV7wHKS3AZuccsw4 vss9qF9tHsrHNcm82bzNHDd3mo+YT5mNxBw0LzM3m7f2ZB01J82WoBmXZUYZNzIG6TaKuxnsiQ3G fIXIW+VtclzulI/Khk75lMyIrMmHkZJlvg3gkwbIWT2DTxfsMGGRZbjfCD2cgyjja4BAuoXKIOc8 /G/wVZ5oGgvdv2AVoe3Xw4HjzlxFatPdc6CAc4So2HpDvze0t7fL/zh06Fy6HDn3Ed/T3YmgVIz5 77sUMWB+A9RWOkzcBLUVl6TiQYNTcW5+6oYoPz2j2KkE8XOyI4o8CcEpRQoqy+DuJxX8ep5YmJTP L6JETTzW04eUFG8ltJOcAqdxGXGYHMU9Wy8XgJzVczgXiOACEVwgggvExFkAihQLgCR7fZ8eXpCJ 8qW84MzAsaxgB9cfnuIPTk9dd7bzvS0f+3oct32J2eqlt+ppimRIY9vVhPp36au0U9KZNAN4fUov t9qLb1Tpw+ph31Ff0idrJo/D43X7FSM1eO0Wu8PmyPPpXJA+YQ+tfTlu9fChwGv9VnfxCWEVg7Lm ctFyXzZlD60ePjCkf+BLMjALX9mRPoOzBIjYqg8ZWpy0UvxZJ+KYs1PPKh5aHPed8rFlvm2+uK/T J/uwd0/3Cl6fwcUZ+Mfdf94HwVKhWJewVOaKJcpgqYEx4TTIvH3kduputHkKzLkgookZuBsSkzTF Q3D1NPxKrL4/zkUZDiqgfuU49XGVUX5NNPpG3WtwmS0mi9EiGdQIVoVs6rS4sykudKLRgtshGAJR 8TNtboH5WoutVnGET+Z01/qnVn5S/+Rk1dJesHhc0/Ny5KEd1csmFN3a1cTWXbek8oF3u/Zym1sF m9sHUrSTTLp4V7q4SUnjPh0fEvz943oTxzJFgdtoybSNNYwzzTTETPMNC02mYnW4e7i3xFet1rhr vNW+Wcos81S1zl3nnepboiwxz1OXuJd45/luoOlmg2K/SpquTLdcZbtWalQaLdfaLBl+2ejyW62e vGyxFGYLNcDhQc/Vq1EsgkZs7mAX+eGrMI0c4b0SOVwOAhH2kgshLS+/eBDOpYyqUcNSOPhINs3m +eO5CQbuyCM2B9ZZ4ubahYsPGA6CTiAUppff9EKeNjFxvELCOqoM8lM6MjiLm2IINSVPLjkY4roz dRczotgt4MQfU4evk/xewjxNmWaeo8wxy9gai3OJNLUUQsN5tzDJPz6OrHrm7t/9jXpv/sc9R7pP 7G5dv661be36VvwIsc99q7o/6zr4jztogNrffefdP/7unQOEy1A8yT74jelPPenIlHCW4iHpxItz cR/Jxj/05JFBZAgpwW8VxpJx+P3yJPxWdSoocePH1RePAb8bJmMrL68de1m08vqFDddOmP5/AEvt eNQKZW5kc3RyZWFtCmVuZG9iago1NCAwIG9iagoxMDYzNQplbmRvYmoKMjEgMCBvYmoKPDwgL1R5 cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvWUJWTEJYK0x1Y2lkYUdyYW5k ZSAvRm9udERlc2NyaXB0b3IKNTUgMCBSIC9Ub1VuaWNvZGUgNTYgMCBSIC9GaXJzdENoYXIgMzMg L0xhc3RDaGFyIDMzIC9XaWR0aHMgWyAwIF0gPj4KZW5kb2JqCjU2IDAgb2JqCjw8IC9MZW5ndGgg NTcgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AV2QwW7DIAyG7zyFj92hIukZ IU2dKuWwdlrWByDgREgLIIcc8vYzLO2kIfnA//szP5bn7q0LPoP8oGh7zDD64AiXuJJFGHDyQbQn cN7m/VY1O5skJMP9tmScuzBGUEoAyE9GlkwbHF5dHPClaDdySD5McLif+6r0a0rfOGPI0AitweHI 495NupoZQVb02Dn2fd6OTP11fG0JgRMx0f5GstHhkoxFMmFCoZpGq8tFCwzun7UDw7h3nlqtSjV8 av/DKWj54jOSXYk4Td1DDVoC+IDPVaWYyoO1fgBtmnAQCmVuZHN0cmVhbQplbmRvYmoKNTcgMCBv YmoKMjIzCmVuZG9iago1NSAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1l IC9ZQlZMQlgrTHVjaWRhR3JhbmRlIC9GbGFncyA0IC9Gb250QkJveApbLTEwNjcgLTczNyAxNjQx IDExNjJdIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTY3IC9EZXNjZW50IC0yMTEgL0NhcEhlaWdo dAo3MjMgL1N0ZW1WIDEwMyAvWEhlaWdodCA1MzAgL1N0ZW1IIDc3IC9BdmdXaWR0aCAtNDkwIC9N YXhXaWR0aCAxNjQwIC9Gb250RmlsZTIKNTggMCBSID4+CmVuZG9iago1OCAwIG9iago8PCAvTGVu Z3RoIDU5IDAgUiAvTGVuZ3RoMSA4OTI0IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4 Ab1aC3hURZY+Vbfz7k53Hh2SNJDbNAHkBsLDR4ItdB6dEQLYQMBuUOiGDgQUiCS8kbRoIDb4AB/M p47izux8+xjlphPHziomq4uf7I47yPqa1QXU8fHtyg7jOuI3uvT+de/thmQyfuynu7dz6q86p86p U6dO1b23O+2bNjeThSIkkW9pqHU1adcYFVCxan2oVW87vwWWrtrSLuvt3Eyi9F+ubl2zXm8XDhBZ pq+5fXtSX/TztDSHwrqchP61LWDobXY1cGzL+vZtetv5JTDz9o2rDPmYYrTT14e2GePT+2jLG0Lr m/X+Y7qAE1o3trUb7aDW3tRs9Gd+IvNRYuBy2kpWuoky0LLRFNpJlHbWMh3zZZo8naU/Erd8scLq /gNzYFq4ejteeVHgidP28xe2/NFhcWbNQzNL6y8EsJvx4kUf5jz6wpYLdRZnSiKk4uJxukOJ0xrQ raBFSk0umA1kA3Hq4PXE+Czuhp7CZ3J3jCm/e4HfAOYNaBSW0THIbCDO9rGuWGmZJ87u7bEVVVNN LusiG4izu1knbCnsHgP3ss4YVyIvsA6YPcN2eVazM2eLRox88y0UO3cVOaw7y3ZW7pR27ip54xRY W7aiWN+K4vaNKG7bUORYsaHjNn7bho5Npe2bC+0j16xDsXotiuaWQscDzUeaTzZLzS2dd5SWtBXt qCtxbgfxPmmhNAcj245JDeQDcfJI1bGc3Oq+xIBUFcs1Kj1Z5mpfTY40iZg0RZqKFVD4l/y/KBP4 UewlrsT5+z0vhTFX/l7P1BnVAmOu8cIKKoWFWuU3senVRmXiZKPidBmVESVGJTdPq5yM5aHCI3yb cK9G4e3kA3GE9lbUbkUth88lB+g2kIRWI1qNxPkMbqIiKuNVwHzgND5VBJtPMbASOBr8yXxqbHSZ HAfkF1X3sQvso5ikZNfI7Eti7HfsP4UWO2fg5wb+h4GfsU9FGNgnQBPwYyD6J/6RfdSTA9drRoHB aAvKvULEHmaHNIMPGXiIPUjpUDwIzAA+ABQD3s8exJT7+9Fk1IoyIgTs5tghkxJni2IHBdwUOyzg 2p4OSUGCVcfyi6trsthYVq45ZWN5Gpo813+L8H3t+5p7PiktrX7scUl54nGT8vjhbOUh2Dt4KF05 BEuPgH58mCuPHpaUI4fZU4ePHu4/LL0o3SjNFpOTZsc6uSJSoq7Hlldd9pKETUBnRSldI12NqMk1 +dJ0mgLygHwgkzRdKhROSNMMrJQK0bOyH03sQmSPDOL8fOxYOvLnw1h/phiCfxAbMUFLgQ9iyIU4 Pxvblw35mZ5+E6bK3+lxlYv8eidmx6Kh/6kYXKqx8Ff5cRFP/jIf0PDvDTwgfH+Rb+FbxVT4VmMq /A59KnyTmIpWengwaTQYy87RrK+IjSjWKstjY6/SKks1vZpCvkxTFKWVz0FZxGfTOBCnLD6JSkAc 7imxPLumd1WPJa8a2eYS2XaMj+GyWG7u5HLMpJyAPRlnyGiUYnOV6VL2Ffu1tpBn2XMkk5OdYc/F xjnlODsTG+2srill/8be17LmPQP/1cDfGPgue0cz8A57W+v3NnsT2aX2o8nYW+xNjfkvGnNtTQ47 hXn0iZKdMmRvaDKMeDKGQ6AP+f1rkd9KP/sp/QzUC5ISZ9nPYwV2LAO7jx3QBtxvYBQo0npJbC+O CbY4FpEATbG9aYCFsX0CFsS6BPhiXUI2P9YpYK5YqDiriu0TMDXWL5hjdGauJwfCP35jUr4RnRID nuw/iMT8ip39iolmVrd9ZLXnY6S8aE0+arFWw1NPr6832NvaG+kd6D3Ze7b3fG9W79Fw2WefmpR7 oxlKdH+6cgAElefvnzKt+v77MCTUC+8b7aq+bz9X9ndmKnvuMil3iTkkBnoic+YJ+z2RWXU6Xl2t 44TJ2rjmyChXdWQ3Vzp2a1Y95ju9s6vvRGM3LAnTchdMd2GG+8DY25mu3H1PtnIPsLUz0sn7O1lN trRIaqJcySctQDlfukmUMSlcVrNYmivNI6vkkEZKo8gsWSWblAc0SxYpFzgeeBVZJCfkLuBoyGXg eHJLTtBokANkBZnJzZ/hz/KjZOZP87/gPwU+yZ/iR4B9wBfIwnsgfw6oQh4D9kGnB6QKXdDToCdB d/E9lMt38w6Uu/idotT83cx38J3YKzaex/Nh18JzuRXIOOcSmdlFluC49+Mkz6PHQVz0xVlvo6dA /aAzoDSc3BaaBeoASVTGLmLflEDXAZ8KYNMOLIEfBSAbyAJKBzFyo6+bHWMvsX6M181irAf4LDvK VOAJ4D+Rhb0C+XHgAOQvA09A5xXQgNAFdYOeBa1nG9hG6IXYSrYKuJytYEGtvTo2oqysppatplmg DpDEtkO6E9baoLUZ2AqtTcDtsNQGahUWQatBIdByUAWbRFY2jo1HOYFdRblsIlNQFrMScPJZAcpC ZgeniI1AmcbSUXImocQWFqXnr5AqFxNWx3X24mvt9mvs+VfbrdPt5mn2rKn29Cl2qdJOk+3jxudO GG+dqORWKNYxrtyxLuvosly5zGq15ZmzsnPM6RmZZsmUZkakzSR5CkpdJBWUpUsjy8qss6wdVkmW WJl0k9QvJSSTg42yFGeUWuy2EZZ8U6HlQQercE90T3CPc491j3HL7tFuh7vYbXfnu63uLHe6W3KT 2zedqfmN1NhUqxYw4KJadbrSGJfkheo0pVHN8i3zdzN2fwBclXfFGTWppq44B+TXLV3mj7MSIe50 9Il5q43BzvsC3ZxqVdaluhb5BXgW+FW5K26jJn83Z7WBQEC9rtGHOtUGlFFquBHdIqMC6jRReXBU gBrVGQtUh6tWGXq1CUZbuwaXZN0TxnnVid6QWuEN1l9iKwqhAYe96kVvKM64a5Aw2XGIsSQb2IbL aMb5Lm+c74AZvnt4Mym9uDTfG5fmoqvkE13b21hKNkylrR1MppVDpdrg7ZvhyCAJGLjaEAahKuKh wWWF5nabLqDLxZSylOQm8bJBLpu2YVNotSmszu8IKIparLqQJEkFw6IAFme7ZO+6+ji7U4fdOnTo ENHhLh326HC3Dvfo0KnDXh326dClw70CjJnhqeR6jcvdOtygw0wdZung0aFGh1od6nSo18GrQ4MO PxKAuGFubd1ZIvt9C2sb1cyFIN8ytdSFxmtoXIuG2VVL6QqV4M3oNSpPlvqLjF6aZpJ4I6PEe1r5 WbJ+cXNCqxNdfFfwvs8l3r0Emb6PEaF7nHCgJq5PHEx8Sf3UQoWJmsSPE58Pa3ZPYjedoVN0gnrp GXqcTqN+nF6iPvpb+gj1V1F7hh6hldD+Gf2EOoF/Q0/Tw7QJfIGCc/xPbbMJg3gX6AIdZjU0Bzj0 ehhWHh7K/LPtTxKlw8hOJ8bQLtrFN/Pf0mZ8HoPFX9CRy3quRf0vqQ3vv8fZOVrJXqTVmE8XhekB 7kv8e9oJKpK24ZVno+mIyIRB16Pkp+0Ulp5I/B55Ys3w4aZ6NPF78S496PqufhsxdvLqowMsm3Yj blPxZv4Y1SYFgxExvIA5rMJc9uBzGKvRg88ujHvw8p7p9aKV9DuT9GxN5lGa+K4BV+JT0DatelzE 28jYD2gLRnDTJLzOWRNlyJsbE82J7YmfJI4hG8Tq/9zIin60/poOssPwYCXdQkv4r/BiJ1ob0V5C c9goZqEnYfsabZRUYewqSWeIHBdX0j+TEUVjb8FL/Upcn6yxQ7gxX6DX6BWKa/48QYcoShHEoR35 vZR88H0GvpbQ+32s5bDw/FKf5dSE3MOFHJyJ+ZxO2haY9pa2943vbv7EP7H3j0sv6zoiivp1MVkh eh0rqe+GLkRjM+KxCit7Qds9Yv2OY9WeRq4lZUtS0le1tRX9Z9I04UViRmI3Yv/PdDNt5D14YLkb el2XhkrVfgFuMpOL6TSbmZIMrnyfvN+FPXScHh1ksJNupeZBnCGNofEbIh6mmXYOj44PY9V+ifF2 4rNrmE59yO/jiNMOWkA1tA/reBr7owV7OIyIn2Iy1ucNnGLDXSHYPYlV2SitloxVHq4bMkR8hrnS zunMTGImZH4qd5Nd9dxNtgbhzDSJ3mX5yI+H6F3kxDP0PM6SNYKLLNav/90a7aENNNH4kMezcPaN 7utnVFddd+01V0+fNnVK5eRJFcrEqyaMH1c+1jXGKZeNHjXSUVpSPKLIXliQn2ez5lrMOdlZmRnp aSYJz/MVrFgtrvN716kldUHcC+tdNlk1zz8/r1KlfIfTlSdPrwxMMnqpaYpKBY1qIZ75yFMVUNOV oV3mq1K57QsnlOc5ZK9qKsefa04orE5Y6He6bG87UvIAzKqldX6n06HycvzNhgh/c0JyWLX5wIdA 48xWyecXFE98WAUmVTkDKBf61dHJJh5Fh3GyDztqYIib81nU1m0uqatXqbCbzB+qZBfdzlcRXsLU CXg0LrehplmjSpUVfqGyApXZ52FKg4cQamerhomBN7zO5Q2vRUTDwUsxPa9H1ClH5ehCf950h9Op OY0nkQX+7pzsOlddczZmgYdmMKg7OwecHMHAsrR2M/NMplW42TsDT9yZFoQvX7jrFbRO9ewPouKq R9wgKbgkwUvygctFBDW9E6GbVmPamGp6nZqhOyGvVT0hlfbL3RUD0QN44l8ZVMxhVzh0i1+VQnCq m6Ryb0uTOrLRtxQsOAEKtshiueu1Qiye7G2Ro2iLvkGUrnqoDuaHW5qDIk1Y0FUPWVadf59zwIFX Ev8+r5qnqBaoW3b81iFFvcVrZdGMRvfJ6hG8ilwmdYo+SILiSRVy1OvCaDDmXVcrVqwytWxaNs4O a4vj2R+S1cjKdYgZ/kIHkvnvjNpU81dOrA7WB5pid4gACwoH14mprIOmCSBH9zdrUz2gTQ35Kh47 BQlFZD8thvZSv7fF5UU8jQEREOhL5UN1nU61RBGK0ahXuBgKw3sRGfyV4GEdbugN7AmHwuBPnepp 0oCatDXAiJ5QfcBgGR0gMWEdVE+wPhAQk9IXQM0o35c22SVHhdGMcrVQsTn/AbKBSRWNC/3eepGd 6Mnr/DecK3acQx0vekk2K0afaOU5ESQhWeRqXKBnQYuIjyiCTfoGRtSMlUdXo79m9fVix+vQbXA1 BKPRBpfcEA1GQ/FEZKVLtrmi3WZztNUblLWdz8D/u/0OteFAQLUFW9gMLLLItwY8wRcsWCaWp0Fu CYGDv1kuZ5XDmQfTeh+cHMOLjX2GjEfei30WtX2OGZtxIjnkBnG8xHEqOFRbldim8GSxH/tgFYbw hrUC+wOvudwhdooUKPeuXWQEyOHEkFrCiHNvgcGFEadT7KH9cQ+tREONLPDrbZlWOmLkqVSwdkEh GUhK7IuFJJKUpNSDLqxVsXjN1nLiz+U0zvNUPkfzXPlytTjM4R3+ZofVgSbM8esqNRMR05a7oM4v Objoghp3SKKWreCW4FZHKJqiiAlOyajNJZ90qTZFTavzDzjcAdmWhwOSpZLBsCjS1HbSdYKJQ5QK bSpzq6xIbCvCoYow4tAfUQVhSlH2RoNG9l0+P3QVvcMtqX2kzwIbV0wSYbC5sG8dejzy8l1iqr8S 2a7f4NS08gaxqbA2WsTmBNRccbNTcz/XCkzOUeeXcQxh2y7QKrJXbhGrrsrBeu08CDiEPMmOJ84G 68X550eioYvDyG9kOcJm7AkjDI1N/mRtof9Ox47AJPwqVtEYpyzcScV3MnGW6IxT/ag+/M4mrVgO cVOFLHvX1mNANBZXgDHRidqSCuSmSH2/KyDuJLPDUVkkfxjT0hCC5migEvm6yI/zEl/VOFVPwJGq NgcCM2DnZmEHKugeDcDCOsMCUGNV/jc6+SsacVKN8/lx2Ebqkej1YgtjugPYVQNixmIigZSn8PjO tcWGz0vhc2Ai5Mt0K8jVCEwEolFhc5HfhTSPRh1RzMNo4xueoQyPwYiTUMHEvXEW8UEX4NKeD7wu p0tEPlCPoW5B3JOnFH57/O4IL0/5Dc0V8Ha5FuHgDxTh0JVEeOUVRXhVytNBEQ7D51Uiws3DR1jl 474jxpeH1KOH1DNMSFcPCuma7w5pS8pReLUW7rVoIV33A4X0tisJ6e1XFNL1KU8HhXQDfF4vQrpx +JD+XyRt66AI3/HdEd6U8htOtsHbTVqE23+gCG++kghvuaIIb015OijC2+DzVhHh7f9/Ed5xWYTx wyYzXrxQ0atmMM1giv9kSAplksHBGxK+IcAHP5NkUOHz6dxEgipff/N1rZg6xZnnzCtHwfBe+K1H inwbSaNvyGOKQBM/wGhXogrvqcNdQq6PyPBDu15LpwKiQO2SubV+Ze7mVWvDoR9tCm0Ia6/deg9h yQYamTAuwUjVjT7/A2MNgckKZW5kc3RyZWFtCmVuZG9iago1OSAwIG9iago0NzQ5CmVuZG9iagoy MiAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9GRENJ QVIrTHVjaWRhR3JhbmRlLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjYwIDAgUiAvRW5jb2RpbmcgL01h Y1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTE2IC9XaWR0aHMgWyAzMzAK MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2NjAgNjYwIDY2MCA2NjAgNjYwIDY2MCA2 NjAgNjYwIDAgMjQ3IDAgMAowIDAgMCAwIDAgMCA3MTIgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDM3MSAwIDM3MSAwCjAgMCAwIDAgMCAwIDU4NiAwIDAgMCAw IDAgMCAwIDk3MCA2NTcgNjM5IDAgMCAwIDAgNDA1IF0gPj4KZW5kb2JqCjYwIDAgb2JqCjw8IC9U eXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0ZEQ0lBUitMdWNpZGFHcmFuZGUtQm9sZCAv RmxhZ3MgMzIgL0ZvbnRCQm94ClstMTA4NiAtNDQwIDE3MzQgMTE2OV0gL0l0YWxpY0FuZ2xlIDAg L0FzY2VudCA5NjcgL0Rlc2NlbnQgLTIxMSAvQ2FwSGVpZ2h0CjcyMyAvU3RlbVYgMTUwIC9YSGVp Z2h0IDUzNiAvU3RlbUggMTAwIC9BdmdXaWR0aCAtNTIzIC9NYXhXaWR0aCAxNzUwIC9Gb250Rmls ZTIKNjEgMCBSID4+CmVuZG9iago2MSAwIG9iago8PCAvTGVuZ3RoIDYyIDAgUiAvTGVuZ3RoMSAx MTY1MiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG9egt4VNW59vrW3nvulz2Tmckk k5AZhgAywYSEAIGUDCThFq3haoKOJJJgglwVqYpKhEZwoAqFwdpznkc8/T2ev62HTVBMvJRoFS9H W2wRUJRyqD3aan7jrXKQTP537ZlESNHj85yes5Nvfetb1++61tprz7qbbmlmdtbGJFa7uHHNMqY/ BTJj1LZ0ZeOaFJ3zAfDzS9evC6ZoSxFjyqRla25YmaKdLYzZS25YcVu6f+5R0M+0NDc2perZeeAJ LShI0TQeeETLynW3puicfwS+YsXqpen63F+CHr2y8db0/Owd0MFVjSubU+0jJ4AL1qy+eV2a3gE8 a81Nzen2VMeY6QQjlGawlczJrmJGUCorYhsYk+P2EshLej2xzaHnVi9b4iz/ggImfbjHtz0v+GWv nPL2fll7foP9tHkx2pr19qIC4xqfSdYy5mBf1n45xX56sEbUiiejk62NdLIbADHA/Mi04ewqnoF2 S5CuBmwE3A94CKAwxt1MBQQBRQANoHA36nwsoOOs/m56J3qL2Vr2h9O+zJyjbyLZcIcvsOGOrDd+ h/z6HyBZuQbJitVIblzlCyxZtXrVxlUSu5FuXLXxpux1t3i8OTcsR7KsFUlziyewumVjy/0tEmtW m4PNWvPpZqW7mZpb2tdmZ93su70yK3QbgPMuvocnnpiSl+znkU7iB4CincQOWixlvQljZJqDT+GT 2RSWx4M8jxlYhI+kPmg40t/NcztcrrJneS7PSRfkdBQWlXWhJqcjKzudcapokjPYJ7sjI0Ovye6w O1CThRoxqo/6OgwRy7QiOsaI3qTfMc4idDSNf5/Gb6TxkTR+nV7S272Wxv+Wxq8Cg0d6JY1fTuPD 9FKHHLFOM9OLsJcVpQEA7z9CL3RMKANfx5DJC6UznsxU5oDZUeZ8hu5meQBOkY49EnR1WcdOgUYd 2GkSKss/YLaUAYcPWG067gDdSYGORCivk0IdO/OA/CkkH4Rqv0Hjnf3d0Sn/4c4o27TLFNmakCM7 d1GE3Uf3JSyRnQkpsivBIz9JFOc99AAd2XN6T+8eaU+CItFEVqAsmoCyO/mqjruVSCdf0XFIiQhj XH8Axmx7ms9iBCpwYOQo8Afs8+m4w2bXDeLtCA5PZzL9ZV08wL0dEiTjmR0+0Ojq6TDbUOGh8x26 l5w/ADYh8vkOuG4XnaIHOoaFQJ/q8GSVTbPQ83RIt85zadxNh9CRTRtD7zIVwFkQaZGea6Nfwe5P U6fe46k07krjJ9P4YBo/kcYdKdx/mjo7bA7wcID2Ywrr07Qfwh4hbcCq2oBVtY60VbUOWPVZ2kyb mIvlIQI3iRGeoRZqZcWwdGbHRgPMO6ajXaDRHVtloJEdPxRoxIG7IcdTNBwsDz+ABhA6qyNrmNAS Mn5dXcg4XPCAvKi6OZTXdx66/AqK/aoNXtPffeCs11umY5db4KjtrN1e9tcvpMgXbSa9wWfFJXqD z0aM0BtYP/NllxXtj+6v3S/pHfa7/GXR98YWlqnvkRipI3uY3nBCh+oq0/YpkX3tSkT9Y+0fd/xR 2t4OJz2TlVUWPFNx5qEz+84cOnP6jOHOjSi9y+ksuys9Z9vkKfqcbem528YUpOiAPvSBtnCKF0+b x1/W1s4jO9rlyN0YZSPGF0wFtkyvLdvSbolsFhO25+eXRdvz8pAgGKbdxiUuc4XZ6Es6S/8J/Dl9 QX9lNqwuYs3Ooy9ZBaAWIHEnfcFdzM7N6GMFNtBZbgJ2snJuBhgAEitH23L6HPAQ7aWHMeYu2k0J 4B20k34M/Avgx5idHkH9o8D/hPr/A/wL9HkE8E+iL2AXYAdgEk3B4p9HU6icvof+hVRE44ALaCxd DjwTeDb6T0N9JfBU1EeBZ6LvNMBUwBRAIaAguqs8MNHrn+D1lnrd473OEq+t2Gse5zUUeaVCL7vc O3KUY/Qo55iIoyDiHB52jAg7h+U5gnlOp+qymS1Wm8FoskmyYmPEbUxy5+VJV0mHpH5JznNWOGud UoBy7X5jtt2rZtrdssdeUD6mfHT5yPIR5cPLg+XDygPl/nJvubvcWW4uN5RL5ay8toQ0dw2rWTBd yyDg+dO1kkhNpxScpxVHajRz7TV1+4nuq0epxrdiL1igyVs7OZC7cvE1dfB0Ud0e6ILzM62mof1H 9fs5m67RVi08v06g6Nw6Lbi1U2UL6vZzml5fX69NrKlFnk2vj+RqTTVo1pZbrxWLzI7celajTZ6r BcLTI5d6br75wtL9o0dWa2OqG7WC6oaqCyv+67w+EF2iHSbQ50Cybmj1RZN/Tdx88yVbMnRP8fs3 1QNzfD2GaDt0ukiEKusC9QIiEc2vRWEecJXWwQWq6KTjwerlVZ10IoXeSqG3U+hkCr0jkM7Suv1m Ydyp86bXaKZ5gNprtOwwiJdBTABhC083RFgWzn4vs3DqoHNxKs8RtYz1v6un7+vpScaSt/TjBGmY iNxrouy/84gzmgAcUf97z+NsETi9ov/nGKaLxZCf2f+zbx4SsfspjScblbLfIXa/oNE4CI5kL+MY KWTuAzyDEiv7t/QYXezP7FH28jePKGrony+sx3oxGrwcZqvZlxeW6/nHkAr4+rn76+y35PaygVP0 w6lW0ljuluLsEDvAEuzUkJ5dmHk324mNy8w+oXxsYdvoGcpg77E3cHbexp+U7mH/F326hvQT5Cn8 bUXvwYcuY19SG5vGjuMEPo4doAA1s9cIx2b2ISR9h33INrFDlDOos3RPYV/xyEx+LOVRKfp/IN0A Xb/Iln73kWk0SeT/pvaIjHzEh5Sq/1qOFC2ntd2PmIC/6fGh56ak6uEPq+ADEzFHDvngayaS2Fn2 EbR/HF7RxXawH7JbhT31dpejXRA6VUkmzv4TWu1lv2I/HWiFnYaxiO7lb/b/nPLZKNAvDsz07VhZ JvQ+EM8mBj7e+DrmlDfTcZ6K8M8Hxkp+oucOsoPsHDvNPma/IZUdpO3g7EX2PPxtO6y+HRxuYNez z4iSTHoectXi71seJUcRklz8bGC7Ib2IltXg5RS9jpku9eyGPw7xcUMtvTkkkhh7DnG8F+Nd+Ii3 0KHPbulW9jmbc1Hxe5DnDf4k24a42cRW6XWr5b1yF2YZk/qLRufNnlU+ZXLZpIkTSseXFI8rKrx8 bEFkzGWjR43MHxEeHgrmDcvNCWRn+TN9Xk+G26U6HXab1WI2GQ2KLHFiBeTX/JV11cu1rMoGLMVV YTWo2b7fe2WhxtyBUNgVLCmsH5tupSkRjWXUaB7sqCw6qV4zRIY2+b4m5aufhtD5ykCwWpPz8R+e 09ikjZ5XFwqrxwKD9fUYVsuurAuFAhrPx/9sVOF/TmOwSVNrUY4KvWS2xmrrBHT2n5mEQjYpVI90 Xp02bIDERn8JJrGa9HcPYfP7FFf327IqqzTm2c9sZzTmFc16JzGNlWujcfDIV5HTR2OFGnk+1ShD I++VEOniKUS305MuoYPqpuXh6qZWaLSp4Wud9qY0GgrGg/F5da6SQCikM42NcG7dfqulMlzZbIEU OJKggO23WFFiFQUwy5r9ZJtKeobbqifjPGOyQ31uwW61gOVadFsDMuEq6A01GV/X4HC8/cIqhm6p RgzN9Bzpc2qGSs2YYiLYqkUbNbYtuL+gO74d56nrGyK2pnBT47V1mtQIpvYzKb+6ZYGWU1O7GEVg AtDQEhTmrtITYbxgdUswDlq0bUAarkLXi8ubWpobhJtQQ7gKdebKui2h7gAOfHVbqjVXRLOju/32 9wJSvNrfGhRkPL4lqO3FQe+C2pBoAyfwjy0IxqvDmA2DVS+fLixWOGg23RtnN+nGiW5rDGpt1y+H zvDfuH3A/0NxVbP9NQTrwD7oKaJDKFhAU8NyIcpy9JSBgvFtzbqo23XR4K/i0CNAdIT3s4Xovbiu uiVcDX2mJ4RC0F/KH9o3FNKyIqJjPF4tWGxsAvdCM/jPwoEMbKQIxEQgQuCnUosu0BFboNsAM0Yb q+rTRekGqJFhBy3aUFVfL4RKGUAz5m9RLg8H42JQY77miaihF1DXPbagZl5ddZXwTrTklXXf6/EH epDHMXqgmPxoEy/sEUoSNfPDNXNTXtAi9COShgWpAIbW0pZH03R7fdTX/YHX0XdGeEZDPD4jHJwR b4g3dva3XR8OquH4fpstvqa6IahHPqH8qW0Bbcb2ek1taKHJMLLwtxk4QGbMvUaYZ0awpREl+K8I hyYFQi4MnWqDlePS1ek4g8fD70WcxdWPILENK1IgOEMsL51YFQKaOkmEKThZWIc4WIopqpv0BPGB lwgeEJEi1edXt85PKygQwpS6w4h1b266FIOEQiKGtnVG2fUgtLa5dSk6yK4PdLBoYQS2axA13QM1 3oWipm2gZrB7Qxi28ouXGN0nvsmnsZ4P+nPcFXYHy8RiDu7wP7tJ614AGc9O0kzQmG7ujMo6KcBF E+R4QBI5SwRbQrmWGdE7Cp1glYyr4eCRsKZGNKWyrjtQXh9UXVggadAZ0iMKN1WPhF8hsYgyj6pR uUY+EVYMiyrUiEU/cxIqBzsGq+MNae+7UD40Fa2bWgbjKCUFAlcICTWoYcRtIKUPlzssRH1NeHtq g9OU/BkiqGAbXWNz6jWH2Ow0x0d6AuEClXVBLEMI27l6JlgdbBFW14INVfp6UB8Q9QPFnf2nG6rE +lcHR0OTQNq/4eVQWzom0mqoWVA3kJtXd2fg9vqxuL0tqOlkZuyk4o23k/rbO1lVbhfug6Ul16F6 QUEwWN1ahQlBLCxAwZgQcosK4JvC9evC9WInmd0UDwrnb4JYOkZFc7y+EP46vw7rJV6EQ1q0PjCY ba6vn4xxrhbjoAuax+sxwvL0CMB6UWEfGtUV1GClGllbh8W2rQqOXiVCGOJ2I6q6hcRCkPpBTsHx na3+NM+LwXP9GNRfkxoFvtqGIerjcTHm/Low3DweD8QhR5rGC//Qgmi6oJOJLhC8upPaatEXKKyf D6rDobDQfH0VproWeh9YpXBH/u0avm6Qb/RcAm6v0zXc8HfScON30fD130nDSwc5vUjDTeB5qdBw 86U1rPGR36LjC1UaTak0egmVLrtIpTd8u0pbBhkFV61gr0VX6fK/k0pv/C4qXfGdVLpykNOLVLoK PK8UKl19aZX+Tzjtmos0vPbbNXzTIN9g8mZwe5Ou4XV/Jw3f8l00vP47afgHg5xepOFbwfMPhIZv +9/T8O0XaBiffIhx3MgoMymozGS7AK8CGgBJwA2AzwH30TnWqhxgMY63TMBSWWOLjM+zLrw1dik5 bJE0lV2Bd7LU9z6Gm2QDexx0kC1E2X/1cHwjkvGFzoAviCas+YxZ/qaL9W9Kvr3Ahmr7kCaOIbQT Xytdg2XudG4ym8zuIANup8/yJv4f0hzZLU+Vfy6/Jn+uLFc+Mkw27DGcwucnNFfEZ0UJXGPzmo9v kKZCbGIAk9rJ2BGAoJGX3kEeWAaWgJV32FP65doidJLVp/CtxcBEnqtF40KukCsfCaHF+ajUdr5N YV+xqNyGe94g7gceVHqgo6ufMKhZw2fhC8QHUavbP8uIu3a3nFDE5X9+3vBZStTrn6UYZJORZNnY 3sB38G5c03OVa/w07+UKL4yt7Tl8+HX1dVbxbiTSU9HXPa4oEgmVhlxKab4r5KUgjU6e4HNp9GNy 1ZyO3ee6xc0YsV3gYT14yGLPRu+5x0M1GXQyg8wKvaXQMoWmy1Qsb5I/laVSaaH0J+kLSfbyfF7K pRnKIoV/z3elj/uKfFmzqg30hOFNA281UJmh1fCgQVJ8Xt99suKRZWWOTD5Z8cqZe7LctkSelazm hENOFW0m42ZX1F/r5/6AFUqhbPVY7DDgaI/ak1nMKvqOxXoqkKPYFlmNbLnzhXFFFFsbWxtZG2Ox GHKCiJWUTpxQQax0fGi4sXRCSbHs9RicZDCGvLvUH9x5G0WSZ392/MzvP6Kc+L82vTGK3/cX30Mr byTTSx+semvBH56+++j22n/Z8ReoBDp5tf+kvEP5fyyPdUbvbs2iZX6q91NNzjU5PNs4xjjZKBXZ yeCd4OVmmyPHUeCQbD7fSN8EnyTlkC13Re4dudtzZafkyHBwVTInLFHPMEuiuIglSEoMy3Inilzk ciY8sn1zpmHzmkBvgAdC5qzVlo0WbnEF8eWjAbdHtIbacHEWhCrWHjscKy5GpudoT1ohfcd6Iizb r17ZA3UsuS52HVRxXYwJJJ6Jpb6S4gmlaihcOjHoGh8eUIqqyC6PHBr+6jv3tz+cnH/NlfTjsz/r +vWJP5GU7KL1yaPJ5EnrqYVb11I+Dm/GV+a/WvnMPyfPrViUPPzSB/jozhrgL7/GnZ0F8bg9eu2N 9g12vsy63soVmZplypIflLlstVvvk2SPJMkmMkpW2mOzycxtlyWTYpHt0y3b89hGxmsZ1bIjuIGT GLMukegP+ADD10BiqUjSJEmCS8fWlpQI1PNesdp9mFWUVLjLCnu6i7vV7i3KoDOgAYshxkop5Crx hl1AUkbflfxRcj72WN9Eeo22nZKWnH/4VPIW3sqrdBsnYeOtkMPH7o3Wl8tUbrzWyCe76bjnfQ+v U0+oH6jSFFeNi09UZircWGSxz7KYEk6nlSUq6CrisKQ3y7HHKtlhQXevm7v9Dud9liJ8vaEo1cKC baSID4iPI3IpUz0WgRX7hF/3vMAqEJ/IuMoK+w4jTHWL0QVGG25ExIakIPMKWyWfvWtjIjlxwgRp Xt89Tox+Q/Jw8uN1huOzH7ibppr5+39JPpc89+Fb54R9boBcr8B3vSzE7o82Zdtojnexl8+gRcRn ZC/K5uMtdLs5buZz/Iv9fE5wcZBfZoeR6EEPKR6vJ98jsayEkxPnjryEKUtNVMBZMxCuV7mWuFa7 JJevvVchJZqVM0sJ57DN1uHqsb4XhXw9L8QGohVWWtuDKzsIpT8iUGMxQlxCJBYOMpfKQsWZ3pHh 4ZzGIzV4PcJh6R+2vXWY5OTRj5IfJV+lRqrYc+rVvR0vcEP7TSsTP16/arPk+pfkVy/9OXmc7qXr 6G76xYQTC5On+x59QNu7/h9+9bBuW9yuyh/Atla2M7p6mZm85nxztXmhudmsOKU8qVCS/BIZ5Any DFmabam3cKM50zzKLN1upqfMb5t5qXSLxP/MqZST2XKb5V6LxNwmZY9BkrEXmHpNksnOlCIlqtQq axRFsd65keEuNah7cmEs1nM4piJeoYvuigEVYJXSV6tYaCplEJZlr4m8VOLdcJyuPZ+UPk++mzz4 6HmaTF/19iZ39q08Jnai+2DLI7BlBhvGxpApumI9u4dxCLTMTq0uapVoTv7i/J/mS9XhhWGeMNIe M0Uuo19cRolc2jWMFg2jPFymeoaNGWYZtoON8TA2ZhjL81jGGJQRCWdWVkKRQQ0bo9jczKf6gj5J JDt8e32yT2w9c/PCs3z3mmzOnLycwhxJJA/l7MuRc6KoyLk3ymt5A74+u9mohlFrRklslDpqxyhp VLzXRrYCZ2h1aGNIygs9FOKhONNjJCL8P7Y2nR6N9SAq1KMidbkzy0Rc9ABv0SNbdbygbnFgtded Z21swJdiNLJ0/IiSYtz6GrHKy+HhI0pVwh1x2o2ktC+hYBQdPEaOk7/58hyVJ18793HyJF+x+/am 2M03WR5++I6Vu5beL2X96KVfvnnwJy/se+Tcr3vfeRwx67p586IbFs+etTL59j2JdXvW112xYi7c CrHVis1hJ274xRlhbNQv71OctI+5DfsUA3bgfRQ1mWlfcVGE9HUZa5SK1RoijSsqwSmAAK1iExa3 8MkT0nCR6v4a6z+pNGAP9rJN0auvkUQ0LjSS2Ujkcrm43Znr5Da/O3OWD+urgZod1OymW41bjZzt VL3kzdjJMyw7rfadJtnK1M1KFO7IcBgqwuIqmyWW6VNW8Aj51cPYJ2LZ2DJULEHYQPRFKOWh0HFq GYrlG0KD4Ylrdo5ILSmeqDQcTx5L7k4upwdpw6cfJz958i9Jcn329qkpDfRTWk3raVfZJ0uSx5Mf Jz9PHtUv9Im9iAPHbnz/NLK8qEt5gMkPEJMMyuNrWBu0WRjre7cb+imEfjKw3oWxdr9Ivz1xInnC OP+xc8bU+WQpxijWx8CBan7kKYgm64crRNxTOLAZdULRT13S4KkLuvaWuMJeXpwcd+GAnC3qf1+e KC+FerzsgegIF35xYJ9rf8P+7/ZP7Eq7TAn5EZlnG8jgd/tmzZSvljkOZb3RbKh/jkS3W8j2gNNF h1y/dXGXy+FhP1FFoASdGbNUx0+4z5MwqarTTWbJvdlqc8EYVqh/WUr9UD1Wyh5YQcgN7Ud68DMV cXITRlgbwS/fxFFmbb5BrJDjoXe3K+QOFU+kkBoeLk/8/bPJnuTzFP74k1N9Vw+jKYmn++ZT/InO /Kn4eYWjnyYmjySfTB6upn8UH1hJfHE0+iBrgP0yavGZSTJkGLjZ2tl/JNpkts36wHrWyqfINfJJ +UNZXmf+oXm3WRIJd3iZ1+TaY5H8exSVnCbmcbTbpUA7i+IXGU5GFsnLPPbmKZ52b3Sjl5zeCu8h r7TXS5qXmBfVObnedhEIEHXtTbG1ejzoVExk+xAYEJxVVPSUHOkpqTiCsyrkXwv5r0OYI1i82Cl8 mRNKglnYy8XpBbGjoy7K2dR7x173T9+mscn3NrXflXxv8+a75Dm//eD2VR8kHz//Z37w1919M/nB F57rm5nWgbxbt3djFzP2n4haIDl3up1ccgpFWD2Zs7jklrgq66fvXNBOya7LbWGWdjNXIbbb3IJf zTRz/JBgQABW2A3+i4sjkDGyJAYJIgOMe7/mdvTOP+36efLEHT/aJHh86uHzZ/mhp1/qu1JfT4Qv vgjerDiFXBud7DCRQ6Z77Q/aOfYGh5McGWSxk2S1kdWKYwU5FFfCoNoSzOfYbPZslqJ+cyvPlOBd 6SVncL0Rio/FlqS2nFhMSUW0nuYXuwZWSn5Psj/5Bo3D65GRxiV/kzzbv2X9LVvuycL3VCNZaHzy teTZ5KfJ33TRlgNHjjxx4HdgG351Rf/7/GMlH/vSVdFii4klMlwJ7nMoViVhctqdBtnqNMkZzvYG uVvmeCOSg/IaeQc+72nyadkkw+FxEBLL42EVZ7oe5MRqpL4+rkh4fhaFS0tK873iJOfB0sM/Xv69 5MYNG2j0hx8+MrLUkEctfHpX1/CTXX1/ehUvgVwwhe9Vk1hTKjckzQAtMQ/i3ccymR9vOtmIiFw2 kk2FP8/Cl9S5bB67Gq2IuQHiMaAdm1FVOXvavMgVtyxtbWqceVPjqqbmsdNXrxCzpFqJlgsADQDx i4E2wA7AXoAG6AYcAZwG9KY6YdViFAQUAaKAWkADYE1/+mF4BvOEU8XF9LghdPEQumQIPX4IXTqE njCExi9OLpp/0hB68hC6cgh9zRAavxK5aLzmIfTKIbS+dVwg/+oh9esE/f8Bt1CtswplbmRzdHJl YW0KZW5kb2JqCjYyIDAgb2JqCjcwODEKZW5kb2JqCjggMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1 YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvUElIU0RPK0NvdXJpZXJOZXdQU01UIC9Gb250RGVz Y3JpcHRvcgo2MyAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIg L0xhc3RDaGFyIDIwMSAvV2lkdGhzIFsgNjAwCjAgNjAwIDYwMCAwIDAgNjAwIDYwMCA2MDAgNjAw IDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYw MCA2MDAgNjAwIDAgMCA2MDAgMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAKNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAg NjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjAgNjAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDYwMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDYwMCBdID4+CmVuZG9iago2MyAwIG9iago8PCAvVHlwZSAvRm9udERlc2Ny aXB0b3IgL0ZvbnROYW1lIC9QSUhTRE8rQ291cmllck5ld1BTTVQgL0ZsYWdzIDMzIC9Gb250QkJv eApbLTEyMiAtNjgwIDYyMiAxMDIxXSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDgzMyAvRGVzY2Vu dCAtMzAwIC9DYXBIZWlnaHQgNTcxCi9TdGVtViAwIC9YSGVpZ2h0IDQyMyAvQXZnV2lkdGggNjAw IC9NYXhXaWR0aCA2MDAgL0ZvbnRGaWxlMiA2NCAwIFIgPj4KZW5kb2JqCjY0IDAgb2JqCjw8IC9M ZW5ndGggNjUgMCBSIC9MZW5ndGgxIDQwODE2IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp4Acy8eWBU1dk/fs65dyazZu7s+74lmck+kwWy3BACAiJB2UIICSoiFgUK7lZwRUCFarUqKtR9 qRLCYgAV2tpWa61arbbVvmpfRGuL24tUq5n5fc6dCRBt3/f75y+Ts59777nnPM9znu3c1d+/cDEx kLVEIPJZ5y9aQZQ/zyxC6LKzLlodKpQNBkJKbjxnxZLzC2XrHYSoli1Zduk5hbJvGSFXS+cuXnR2 oUy+QdpwLioKZZpBGjv3/NWXFMpuEffvXrb8rGK79yDqHzt/0SXF55O3UQ5dsOj8xYX+W09BWrZi +arVhfK9VyD97YrvLy72p/MI0e0YWy7FI9BrFo2QKeQaoiKMSKSazCZE2KqaS0SUebuKkIqXf3Zz v6nlC41Wo9z+/vhMZVy/1L96b77kX5vFrzUpNGiV/rwHrlM/OnInIeJL+ZL878Wvj7co1yOatY/M yh8UDg7NrpeHkYxTkp2lsbq1KO7UG5V0SFvf3lEtHCQrELYjvIwgkn7Ea4o1Agki147AazchiGSb sJ8MIhxEeAWB1+xDzT7U7EPNPtS0C8OECk8Je4ZiQYxg1053rO6TDo+wk+QRmPBDYSMJ494Li2l/ Md2EtAL1m4vpTcLGofFBU4cWZUo+QZxHYHi3u4cmz6jbq2QaW5TMltGaLTtRE+xwC3djVHdjVHdj VHdjVJ8gprj7FtRvQf0W1G9R6rcQqtwqXF68VTFz95DJUaxBpkMn9AhzSB1uMa+YzhXmDNUFD3QM CLNx6+1KvE2YhfwmJe5X4hlKvEZpXaPklyv55Uq+Xcm3F/P82molX4iDSt7EY+F04QxSjqfPFKYq abfQReIoz0CZp6cJU5R0ujBZSU9FvQv104QuYkE6VZiklKegPBHlU1Dm6WRh0tDEYE3HCpT70caI SeD1EzGSiVjMiZgkXrMJYRvCO0pNP+I1CC8jCEpPKkzErxO/DqEDV8i4h4wWmQiCjF87fm1CG1pa 8TatiGWhBe8bRFyN0I4wA6Ef4SDCKwglQgvikJAlNQgyQjfCAIIK90njujTGlcYT0kIlieFeYXYj sSENFdMg20gCKAfYxqFAUO7Qsl2kG2EAYQXCWrZrSGUxddjQj/etRpiB0I+wBmErwnYEDWlHjBZZ z9pZuzCDzRBEQHf5zpaWOiWtbyikPn8hNXjqTB3fF8oxTeVkK4KAIZdjyOV41dFSEDkG0EmSAwgv I7yDwCc8iclIYjKSeMEkrk8qvdRKv09QyiMIZDniNQgn9+FTk8QrJ/GsE3fhtWWoKcM9y3BNGe5X hml8BzFVruDt3QibEA4g8LYI2jYpcTviGQgM94jgDXjOhDgoRIaY1jSM+aXjTB2NmPcZCGhkN2E2 b8K83cQhBLMH2EZLe7HHJqTbEVTCXvzK8UviV4ZfBL8wfiH8gvgFsHqb8duE38343YTfjfhtxGrY tqcOpFh/dnl2TXZTdmt2e/ZAtmQ/W4TfABuQdcThAE20mDWeDomJZAEx0n8p8RNK/H0llpXYKXsW GA8tMD6/wHjnAuNtC4zzFhhPW2CctMBYvcA4TM+UnSnjWynj5pRxTsrYkDJmU8b6lLE8Zeww0x46 lxjJs0o8QYnrlDiixH46d8hItE/TXhLWAOJpclf4quD74WGRDgWvCQ9rkFxdKPUWkvG8ck+wJrwk mC7UJApJLPyMiDuQ2fSnpISm5HTJCyX9JXJJc0lVSWVJWUmyJFoSLLFpLBpJU6oxaHQajUatETVM QzS24fy7MrYTSmxqiSdqvhcSUclLjOcRISaMahiZSgatwjQ27YwJdNrgwbPItDNDg8fOiA5T3cz5 g6roBDpomUamzZrgGmxMTRsuyZ8+2JSaNqjt7p23g9Kbe1AaZDcMUzJr3jDN86rrvIOWznl7CaXp 627yFtOeHn7NvB0ivemmHuK4qN3VbmkzN0+a+G+iAaVyYGLqxJ/rRDaV4iPxD94+7Yx5g4/5ewbr eCbv75mGeT4jtGDeXtbEGrom7mWNPOmZt1e3ljV1nc7rdWsnYiCj/UgI9RP3kjBPlH4kxPuR0Lf6 BVgj7xfnSaFfQOkXGNNvR2u4a+KOMKJCn1alT+vYPkvG9lmi9FlS7CMo41duMXqfkndJWOkTLnlX GfvJfQKFZ/2vfeL/ts9J07l4wkmF72TpXjKVvrGj87KuxdGugWjXYoSBwY0XnesaXHtmKLSXdNI3 eFNoUEgMnHnWuTxdtHiYvhFdPHGwMzoxtGOqcunY9sHLePPU6MQd5LKuWfN2XCYvnjg0VZ7aFV00 sWfn5EUVT4x53PrRx+2oWPTdhw0u4jer4M+arFz3rWc9wZsn82c9wZ/1BH/WZHmy8iwF6gGWGjKh p3NBId3J9DoA8IA33DPBIa1oU6B5fNh1pXefSOgjRJ/qGTREJwwaETigV3ZUdvAmYBlvKkW1qdjk unJ82LuPPlJsklBtjk4grq6lE/G/alUxUyj+n/GqVatWL1y1EMmq1cr/qtUXIuVrRlYRcK54gw6D sr8FQY05bd6IcKNCo4VVq3pWE2V9V11I+NNX8+j4Q0/kLsTN6aqTIYHwR475QytNkULA7VZdSDEG PowLC9fRVRSNuA0uXV2sA80RP0C4hXiRBoQzsWOT/DvF8NfclYX23Eg+z95EZ0gISkCi5GaR21DG j04vpORs8jo5n/yQ/Bh19fR35FEiExPaXicCJeDYW8it5GLyBzI7/xlqw+R+8glJk2Zybj5HzGQN ydEfkPsp4zNFmshrZDHZzFqElPh3EMcKWiM8Tq8mlbjLLHI7cZKXcceKvA7lnczPWnDVLPKi0K9J 52vyn9OD4gv5M8l9tIW9IT5JfkuO0IhIctfkN+a35O8mpeSo4B/5Rb42fz6umk0GyIXkCoxgLbmX vER7WCs7kF+PMc3DGNaQp8iLNAWAGgBHdzp6X0vuIHvJs+Rl8kfyPqXURMvoWvoafV1FRp7LPZef kj8zv5x0kdNIN1mLVj+N0w42X5gvPCG8OfLfuXfzAdx7FrmIXEIuJ5vIZvI4eZP8ibxFBaZjs9hs 4QniJa1kPjkTs3krxvQoeYG8QzU0Q8dRmV5Pf8ouEoWR57DDi8SOGTwFdzsbfbdgTh8k28lz5BXy Ku75GeZUoG4s/my6gP6AXkdvpj+iD9Kf0ifp35mK/VEQhKvEX4l/z72R1+Xvyj+K53qJj4TA66ax BqdiPV8iH+H9KmiattPfsxRLC1Q0jORy9fnJ+TX5X+bfJFGSRN9W8LVdZDqZi1FfCvlrP/kVrn2J /I4cJv/ELAlURy2YixCN0tPpGfRCjOIJ+gkdYQ6sXxNbxobY60JKeEmcKz45sitnzw3lPsnl84/n B/O/yP9WWd8GPKcTK9BHVgDF+IrtxnN+SQ6Rv5Ev8Aw1DWKsp9BpeN87cP936DcAJw27kv2U5cH9 bhZeEN3iHbnTcufn7sjtzGfy0wFbApguN8ngNw7QNJv04N5XYzbvJ49hZXYCet4gH1MXDdAaOoXO ofPoAD2XLqcr6Ep6Ob0Cs/oo3UX30zfoW/RjJjI1s2OeUuwsdjW7le1iz7E32CGBCGdAhlkpXC7c KuwSXhE+FCUxLdaI08UB8VLxMhVYMrVD89tvnN+cP3LmyF0jv8hV5SbmvpfbmPtZ7o3cX/P6/IH8 +0RNajDGHrIEY/wB3v96cjPZCvh4DGN8j3xA/o41/xxzIVAt9WDEQWXdOjHu6Rj5XLBM5+B3Lj0P 87+WPk6H6NP0IP0ZfYG+SH9P36afMIrRV+E3Hlgwm52Dd7iLPc4G2Z/w+4J9JSTA9dcJ9ZAqBvA2 64Qb8D4/Ft4W3heZaBdrxTPENeKvVYLqbNXtqi2q51TPqz5SS+peQGjhV6AfSiz8lv1MbBOWkW2Q DgThI/Z71kJ/wL6mDzM//Rme5he6hW7WycaDN9oPKD+f2Eq2qMPqMLMRqWSA34TdySqFuWJCMJDV wDfC5rPr2QB5iD5NvmanANIuEl5i21i/sEW8RWyjb0K++BlUAUZ6jHSQDtqGtXuNrMQKVQrbxd/x O6o0wjeq85kxv078QMWE34MOtlIm/IbOp0doN3Ngtsazm0kUZYkeQToFGPgnQP5esJ1N4rvCjWwq ewt1y8it9Gd4x/1kGdtP78O6NAEfv0+76d1CLbmSrsSMNJPz2I9IhK1gEcDzbPI/9GpqB+Z+jbWJ sXOIKBjZWeR11oNVf4VaWBW9EnB6PtlIN5A0HaEHyW/ZD0kDXSw8+417pIzRb47QHcIpZAf9WnxB fAHM99eYST8gV0NlQMj9oBGzgZlhIQGoaSIqBjkO+DQAXDezL+gVbBlZSu8Q/kYfZB1kBlksrGKT 6O25L8QOoR4ztg/UpFPdrCGqFpVfzGDFPyBtgMYl0JCcK76juprnhdeEo/mefDjXryrNvU0uw+yc Auq2Ebh0CvkzddCFdKaYZ9PEfH4OeZxtF9/OO6mBhsmreWBYbjdtobF8iK7M6+lMQPhCrnsRN4rX iReK0APlvwbVvJ7cQu4iP8du8gD2rSTm8VTM5gLQnqXYI2qgMcji7drIBFClKWjrJnNATwdAJc8h F5CVoLz3kJ+SHdihpmE+FuK6c8h5qF+FHepyciXwfx25ETTgdvIQeZU9xrZCxr2B/ZJdxJaSP5M/ C78WZDqHvC6uF9eQMyADz6RWPLkRqxTEdTfmX8PTyokX1D8DLAXk5/+efyP/yMjLuN9DGPst6gnk 7+pOUkZm0GOih6rkjllye1try/hxzU2N2Ux9XW1NdVVlOlVRXpZMxGPRSDgUDPh9Xo/b5XTYbVaL WTKVGg16nVZTolaJAqMk3RWdNBAaTAwMionoKadU8nJ0ESoWnVQxMBhC1aSxfQZD/LpFaBrTU0bP c77VUy70lI/3pFKohbRUpkNd0dDgSxOjoWE6f+Y85G+aGO0JDR5R8tOV/GYlb0Q+HMYFoS7XuRND g3Qg1DU46aJzN3QNTKxM0x16XWe0c7GuMk126PTI6pEbdEZX7KDONqpkmLNr3A5GNEa84qAnOrFr 0B3FpbiNEO9adPZg98x5XRO94XBPZXqQdp4VPXOQcC4wpXQhncpjBtWdgyXKY0JLB/E2ZGNoR/rg hhuHJXLmQMpwdvTsRQvmDQqLcI+uQXMKz5046LzskOtEETcHv7nu5FavsKHLtTTEO2/YsC40uG3m vJOu9Yb5HXp6cA9cy+KTBjZMwqNvxEpN45LSILuuZ94gvQ6PBM8cV96q8H4Fjj4+cF5oUBudED13 w3kDWBrPhkFy+qXhIY9H3pt/l3i6QhtmzYuGB9u90Z5FE307bGTD6ZfudMsh99iWyvQOyVyY2B2l pmLGYDw5sxiTXmhTckp3npt2+vGZpXyM0SmDMiDqrBBGMi+Kd2ri0eImsuGsJiwA/noorho8Gyuy dFDbObBBGsfr8Yp0UBWXoqENXxBAQPTIP8bWLCrWqOPSF4Q3cjg5DmqDdNFofjCVGqyo4CBS0ok1 xRjblHK2Mn3RMFsaXSGFkEAgIt2Y20U946ox/eEwX+CNwzI5E4XBtTPnFcohcqZ3iMjVkBvYAG85 ONpin81b1o62HL98IApI3gUmghD7oCZx/N8kOaxd544bpI7/pXlxoX3aGdFpM+fPC3VtGChC7bRZ Y0qFdj6hmDe0FXOD1s55gpehjueYV1BaAZQL5h/vgsI8w6AYx79aAeqzh0s0gEqlhoYmDUoDpxTi Hl04XMSZ/+ui4fyn/ColOXFZ8TUGx6WKAy0Me3D8mPKY4Rk2CNNmgeSwabPmb9igG9M2CcRsw4ZJ 0dCkDQMbFg3n154ZDUnRDXvBgCQ2rOgCGSqs6HB+30bv4KQbe/Aq59JxgFtGJuyI0htm7pDpDWfM n7cXmpbQDbPmDYG16RyY0NNTKb5EliBAm091SPcj5JB/T3yJ9SHl7ZuRppDuQ/oS0sMI7yMcQngc 4RcIbyA8h3YL0tcQPkDeWuy/GOU3EcwIcxHWINyLMA9hK8JahO8h8Hvy+/Ug8DoXQhXCuQg7iym/ Zi/CJoQzECSEOEI3wlkIf8C4W5H+N57dghTvxcdP+Hvwe1+JwO/Nx/MDhNkIzyDsQjiAwN/fjrAM 4YcI/Dren1/7MsItCL0I4xGaEPi73YZwBM/lz1sM4IeAh5jAsqSmC5GGwJHyGgbugv+J4LHVpAQ5 DewqOqJHTyPkMBNsNGbIVVboj+3EAbmO/7mU2E08ijTi57pk3DFMIpA1YiROEtjxy7C/VpAU5JRK UgU7Tw2pxa5fD+4oSxpwfSNCE/iCcWQ8duVW8ALt2O07wBF0KpLKJDIZ3MgUKNymgT+YDmltBriE mbjqdOXp/3+MzlAG1Yh320i3skvYfeDHu4Unhf8SvhQD4mrVbWqP+u8lP9f0a0t1Fbqb9XcZbja8 anSXVpm6pdPMpeY3LI9av2ebZb/ZUeH4i2uZ63VPo7fKt8DvCswNXhzqDB0I/yhydawxviPx6+Ta 5M/L1GWdZWeVL6qoqfggdVs6k/5r5b6qn1VXVT9RO6f2p/XBTE0ml3274VeNm5o+aN44bvr4ulZV 22D7m/Iq+d4OblpjnC8Ul6hggsPaT9qhLhmmhl1gVVQizwhEp1Yhs0cQmEdbwuv2UOLWzLjclTpN OtoyfaTlNOlYy3RpBIaKlpEWHmpr6s1hczxsDi8RyTch4eA3sop8TULiQcgIOvaw8DPx94AxMxnY UaoaZtfLOqrTckue7k3tPvYA0bNnZUPIfMD8svkd8ydmlXkfdRDGnt2pgWwwzB7YXaNZDr3t0+xO QOVntJu4UtKxvqNHpJFjfUeOHsE4WqQWjK22hoYFtToaSSRPZPCsSeqQ2x1S0yVK1uUJqcTf5zyJ YDBBDxdSzMr+/JWiWTUBEDiNTpPru63dvq22rd7ttu2e7d4SwGUiPqVDbkxXNvROka3ZKXtqx9cy Oi0am6rRWvw+a+/U4fzBoUhWSWKFxK8ke5zZqXucRucONeucNc8rt6q20Ynb5PJtlaFtMdo7jfSe Ivc2tvc2tTVmTslMy1h0vWZtr7nNIlfcnrHIkaxFdoxDxpTtt1DLMOuWK6dX9WYrexvivVNivVOz bQ2ZKZnuqXRqxurttW12bXMxX2+3bbNtm02wtVkxLlmPW0nWzdZtVsH6NPsM2PUZ+HjM49G+1D/6 jvRJR5A7evQfSAs/1OPvH7xw9OjRb0arD0nKr4dUV0sjvMdIC/+TlFipO7kCC9JHhfo6MMfqaJQv TTKRzVpHc41WLFU201BffyLT0FAPXrpEqLcezxUuD0ch4IYsPwl4PIGHw8xpNrvDz4aYS7K4aWg7 r91tuTvo8QTvCxcrn1F6eWh4J2/N/c8z1mfZodyXTqvVmUsHXKLJY6K/O5Hj9VSjxK/73aLkknJ1 9HhOuepLwEku/46QE7nWo4Mck8ddUXKF9orm39DfhlTjK+bULIkuqb685Nq29R2PltzX9os2Xay6 XM5Wj5P7ErPHqWM1tbXR5g4QYW1T3TAblmuz2S0IdbV1TbXRaG1tjGhtaOyI0RpRG20WKtTHsyah qjeZTAxTz65AWjbF9tNNoL9UUMnOJqJrTwv6iqynM9xr2NGSVrsnfPa0a5jGruM4Ox04wnGWtE8/ 0t5y1OM+4qr2HDnaIh0xW5zNzmZaSNZVpUp/ID3nIhpppNXSXO2i0mfVR59bxyufQyI9xxFsZR/p Cyc5jmHhGhPK8tU5nA2FRS4pSSSiEbXd5rQ2NBaq1FF1ibMIAlSNJkd9XaMwS55/8yV7Ll821X/7 0sjESEpndpfaO4Idka4l8z9sjZ4e8JhsyZq25snK0nXOOuu6M1ZMOevaZ9ef90Do4mllZ91mszvc FoNNH/V5z2nv2JTbtOrHLovRoXm0b47TanExne3y2YtvhsKU0vdgLfu7+AEoULksqfag6kl2C3ly kyavEJXp2Pxy9LQCUTk0coi0HzmZkLzHiUbYBfohfjDyPxXhcAVuwPpy30A38QH2wm45WW6okJjK WWrVWRxqtUpyOqz2NqtqulZr3VYaI9hOGXH7frOPqoiLupU16Zs+whdAwtNAQs2WZr4Kzc0KwmQs lsbCfJZAbWWzcNkSE55MsATra3ksaSi1uEsuWLjwghK3pdQQf0Smn6+ijJ4e1bvMOsNvcsMPPJgb fsGAKdVH6NQcZqAy9w1bUxxtuZZpPW7m9oh8xFqL2umQVGqMVqfDoDFeEzZ2Rjz+B/bR6aPjPcbH ewgDVoY7ZrQ2xkoK4NDYYMlmGDAcGF3ndFgcbM2/He1nq3L53BMRgxujfYGe8sCD9JTfYLQufSS3 B6OF7rVTbBWnYxi9cq27NxgEg2J7WOoVH9aYerVaje9t0qtx9prNrl5J0tDekhLN2zUGanCHNN1X uVKkmgLo+6Yr84sh82nGqmKHwHSPHEKKHCbazCc1kTWHCzQobObDdtjN4QK9YT90AY5yN3IApKt5 nq7meRbMLVDqHlBIxX0KgC7keQ5rqdzr7FVaBZCql10/J78n75JPwWjtEen/sJ+R35tgkmQlT9M7 wG6dT/0nYK6aj6iPhmlxKqEANOfe9CbcUYFWjfyxLurWwf2Hkn2sRLSyNdi7PbKBHMQ6qZhbPOtx vjkfkg6T6un8RvZwVrR+8zBbc8klGNNL+b8KFDpII/Fh5x3S6MU/6t2l5++lATxfoQ8KyMeLSFpA bTY71tQ9s5FHn81oGncaD3j+4fxc4SPV+QDp8+VxWq2DurUCODrtJDpF26v9nvYieol2vWa99nZ6 p/ZB+qh2D9lDf01f0L5BD9O/aY/RL7VOvZbqh+nzuwV9G+nVDtMhDKpX80y1QIU3zcN0/46nlW1p BFTrEFHmZWVfH/TIyrgaKbYFvkDCuyMLzF6zW8fu19tKzW5V7F/z4m6Twa56xFnqNukBwu/jvT9U cT1yNX1ip4XpovvynxMhf3SoUlPeoUW+LH+UJPP/JA4Ee/6fe3yl2lJNKduX/5JI+c+H/KWV/IqK /OdytFzlKw2WRiznawI+C6miSZUxEi0Nt1rSrSqLSmX0tIJT+e2e2lhrqbvmJ/uoGqiTLpJf6Rjw ph3gdwSYAzQ38wi43nmpPJ9VSQmX2+l2uO1um1ul9nn93oA36BXVyURZojxRkRDVeoPOoDVoDCUG lVpIRMwxmYSsHpmm1HEZkkG1TKOmsEy9bkQJQ1omVQwR351hc8JfBf5SV5Gm4h8dzSgphFHZbg5Y 3e22gNnZbuaRIxCwtEeG81/LMjJJm8+MyCshcpsQOUvbozxK2hxG5BAJNvQTAhZ9e6UOkYPn/DZ3 mN/kH7ITGZPNGeRXBduZTjK3OXlUGJ0yxOMRH3YPtUsKTUkmEpxhkBRy6HQ4nI6SDGqSiWiE2bGT OPGrr7NkhQ+vWnzX1Guq/F0mJ3LTrq4KTJQcszor3GXNk2/a1plylTWfcuM29tYruc/uvWJ8NnxL 65xVr1CJ5yO3tMxZc/FLrVF3NPfuwb0X/6414o7R8EGObYfAJH8ofgkqv2PIovEO57+UTWY10Wi9 srfb0u0VtaZ97FFioFtkrWQwmKRntRrGa1SosVCVitFnNUXlYInFa9sHq52ZLXmKqLQag5vZ9rOr wBU72e9kHVliNtMlRKLSM2wFzD0/gbFOgSBwuiBhI2DDFOJ75IiyXZPje/QXR58bU6itIX18Yeko ITtO31RFFGpoZJtpiNOtkWUKJQvlPrZpTW6dxi1++fUCvn26LFanWDNH7TabjBrOqT+OmXgTuJSi oQIb+5RXn1KJYFaGae9uncHWGlGBirSPcF6itgY+DY78f8lpbyxziumy0uuT15ddX/5Q2UPl+w27 KrRGi86RNTRViOXRikDKlgyURbGTc0gxfmQ54viXZcQhlmlGZ/Ltp4oTqXqGHgJh1VMjiFrvLq1W Z/AM0692Kc/eT3shwDLUa94zt8Y7jGw5hFAnagPor2fnQzX/w1GslI5BeDgGAsM3tCNgirBBSEdo cU6JhDlVsNMXjFlcjngoYQ+7ZGKNmmXqDNpkaokhKmLXVVcV5htTTlbSlamexrCyATrsoMKxxjaW zQBc1SX4FShrgX6p1SWkZIRdxzeWb16n5POVs4JPXn7BY2611iCZnUv3Lrrnr4nei3J/3DcrzBfp wisOf7z83Bllyx66ss9VonNKNQ8s/POGcYtWrc69/RMOq7/I/1XERBEs/M5lTZQMg2rV19VlzeNi U2JT451N3yfqNeHrm24Tb83e3vRg9qGmvdZ9zhetL9pecr5l/YvzH9Z/OfPVZn7dblsEC2cexgr6 kCnXmPSpMrNQjYG4iCrqI+5AqCyRdmPpd4ZClvQwvWlnorW+FOluS6s62towTI2yzt4q+HzNgmdc 9T4sgY9d9ZTe3VyvUhv/sY+uLQA3yCLfrKcfOnSadBg853SJy3N8NUYOoQgGtZmTSwXkAVjmAtH0 ZbKxuNUmquKZqEytKrtMY9mETG2iRSYgIFiaq/CHpKlvZRNpWkkdBRaKU5MCc1Jf14B1wcIoFU6l pKzSKI4UNkPBuvqyL4aXfVhlckqSbcsTt/xy0Z6+gMftPmXlrXddMfeWtGTWm11zL71r62/PZI9n dp/54w8W1EgWyWVa9dSKaZvP4LhEN/Qu3NySsWmdUlnr7APXzrode9MbHJ/AkfmhQXlVNmI/D7FA WOUP+hyY1sN7/P5nHSa7ZZgOyJbS0mftoXB4CRPAawksHIQ6v/cpQRBV4YAxgPwQlDbDDPuV38fR wEFMqHPYhWF2jWyiqtIlfn+QmAIUqBDYxy4gYdor64FD1B0RRbsBu9XvsRwQForLsXI6BOuVXKwb aQGHKrWAgWqRPlZ4KUXUHmkxN6sgLyjiAkecL15vIcXUVFuzkoaztN48yk+MZoqEqN5sjlJBGHmN vrZ9EhfYJilx7nmevyedm0v7FwnJb37L5y73xSg1ov3snZEw4Pw5DueYuTT5Lzmi92p9EW25e5xL VVl+anl/+QXld5S/4H7L9XeXxs2B2MGB2IqMNxTV2KRQzBH00KA/TJ7BRMU5HcFsHJK1/lZR1JFE 3DpM/1vWOlt1nlaphJbsY9eRcrZsN3ouiceG6V+ektyVcVE3CsIn5gzsJuboyEhfAXw5S199BFSb g7DC2nM4VoiKy+VTaX0q7N8uLSKv2i9Tt8Z5AnKBwqlU30pqLrI6AEm+542B3GikQE5GiTxdM/WG 1nv/8Omuiy84TU64JLP1x0O3Hnxo7TXXhIxgxKdyEiLeklscDP7X7ue/zMYbww6L23LTCw/f/ESX 5HKwSk6HQD4tmF0PqEiU1NDHZENVxBbLRAKpQDiQ2Jc/BkPfX+XSrDhe0ylO08wW52vUcUzwTsxv qJhiw0c5mokN51+XdZx64OqYxjiMK9eIoqixiTZNQkxoKqzjrNOsvdbzrJdab7BeF9tv3R37s/7P lr8brXqq0pSE1Am3KRaKhxeHzgpfGr60bFX1ipqdkf0Vbxj+qjtssMzXgOmRzJaQ1Ra0Bxx+p1ty GSMkZjTE9QkdralmVWnsIuUlqQqVU11qjNUCRx7cXdkqCFrvMP0v2RFstamSrVqj6z11K6mQKkLQ qYkVz7CXoLOM0RgxsIeeirTWlNJSd+1+2kSvKtAsRbjge8dInyIsYgPha32IrzLf/Qo7IHg7Xzwd CotWyWQ2WUyC2mDUG5k6LVbINGSNDNOfynaS0IGXi8fKNKhMqSplGjYFeYuexo1JmZSXICoyclKL wslxurZS2eA5y1TcelKjXDGnXhxSsO1wEawoN0YjBBK5A6wSJ3ocdOiy0x5cfP0rzz58/jMNne01 2/5wxawml8NstJS3/iJ3wJ24f/mKrdsWL5rfwqyrLnjngdu/un7jE7+/94alWxdHTG6LU2fL7fgg /Oqeu7ffeM1Pz2gEVr6WzwlvACvtZO0OrcBZIDVIVwVTqwX2rNZgNC6xE5vdTuxgJgxOvd1ABImy JXqd2STpRMmg3wdMpOyRXU6t24H94Tj7fGi6wvi0Q8MkAcPMirpC2RTWlRYVFt/at2k2rLw3GMew HRqHgtwgXDXyEKclgpB7UuMotbjU4rKEghZbr//6eY/ZJeksoMIfQGb4QJEZ4qSWrpMnWh6O/IZ8 TD42iB7Rb09Vzk0tZip9qejyltpcG1w/ondp7tLfmtyaurvyUXp/cjc7oNtn2Jd6SfeblPVS+mCY 1doqwdkM+aKB4fxfhmqiVfvyf4Gw8eUus6asDFjyl6GKssi+/D9IPP/RUDIS5myQJVUma6Kt5eVq f6tVVd2qNsLZ9E+yVF7ukBKtwnue1nbHDAdzDNMjsr4+1Cq9l27Vuuu+JXYARI9y/SgnRYc5c6bA qUKDaiprvUGzXdQELCGZ+GygQ1UlkBlqVNhGg2ZQJK8dUaWmWia1EDBOCBN8Y/2uJEH6aN9KshKy xF6Syn+4E9IAXuTDnRASeCrXQEZQuVBSuZCjPEd5TuWyGdrtLnS38zo7r7PzOlDAE389x/dv0MDG UVII6C5RNyrMlaJUarCelBesS7/37rZt737vvAUV4/5w+49fH1du/MmFq3+y9aKLtzp/unbtT59Y s+YJtrH+4YHb/vzn2/ofzmSbZ5654eWXN5zZPe5vy7bcfd6Zt96aK1n+wAMXfP+RR0AXraCLTsBF nNRT6F9LNGJFSYpUPRbbF1MnOJGMphGVuhAZSwN1GUMEUZ2jPp1M2zknZuqtfd/yVfR/Ko5WqQ4Q WsupJL9qmC+6A+v/EanDPFXiKrVtd+1zta/Vigs1xhhJlBqS+jJtBaQ/5IwJVBhFU6y8Vafi9EzW VYOg6cKtDmNiH2iWkT0k62KtJk/W815Ja/oZ9gjJnCBd0tERMFrHoBB8H/CgUK32gjwBGDlBuJLJ qkhUtBtLDaVMbQY7Y5VskqhWxSu0gJEyPWAkmYjYsR/+VLbSKpELm5pyVJYiikph1O8mlWqAzSjc nCBepC8FTjm1kh6nYcgrSFrY4CDR8XVVuOWT9jySzUAYVFSLnIw1NggHOnYunHv/wIFt338609mc uHXBlTfMb/a4zAZnsv4PtM6WvWfp9+6775zxq+rD7FerVp/9s/PuGrl53RPvD13UfXt1e0RymZ16 K63/oOKPL96666b1O2U4hLOCrkQ4E7oSL6mVtaYhh14zRNSW/bBIuIlIHbv1erfbd0J5AktIQYpQ tIajLI/CVlrHlE5SqChaFSUSzuxuHH8aDyObjmtZGFlMN4hL4T3FR9E4VBKjw+xL2WuPmfRuj1+c YaH4N1mqLe0WweL2FU0zfWDZuJa3GtybosEs6rUUdZYwKgUqJbH2G0XyE37E+YKT8uwpzgfwkHuN q7QUtRYjb+avhPRnhsVuMu3bC93IwZ2+QMbCDQtaSyBjlBG1o7QTKTc38NSlpK5MJ+/ltLgy+zRP y8wiVRujknCuJuSnrQ3Nw7RU1jU01LVScXLbRP+woJK17tp06dttvbrWYUGQzWJ64kS3Th1Lu/Wh J5vbGsD7TpKNDl1btiHWNjkGNysIG1uHOtIwY1XLeoc9VumIVXanafpp+gGMib/mSlduLgITC5lv 5GjfCGfUwNdKR7mqtx1YwMUNEMtDQAJLs8LGSi2kTyGUp7d3xjMqV0WqPFWWSqYSKahKbRab2SbZ RHV1oj7eru0oI664o5+Yauz9xFinL6OdKtTJmrYy6ky5+4mtqrSfGjKlZXSCemJZASeKmhmumyns 6EVqR7PFDauhvrhVAxfsZpsFSvOC4KjwfcAFIIe5oBiBzlKRb9TcrlIghY1Cr7vCcvk9v3jshnMm t6d8NV0777h9mlkyu1oGtnRfV+k7TXLesOze0zecZ7MZra6J1952/pnmuI1W6UXxjmWX71h0wY0x d6x9xzW53T/P/XMybCGhROv4TPD2cTNXwFeO3Hd110+WjhxkYBnsWvouvXrWqeeo+Gk+M2yLB8Rb YAWuonvkVIMZM+ptSzdWTrZM8ZyanlQJtYmj39Of7q78ssKUIhUV6SrKWKVOgp1Pdhg3Gbca2TtG aiw3G42S2a8zW6LlvKk0kaivSCTKK/zRirQWog2q1Op6hcHwa1ml26pUORxzLA6H1eJ3W8wRH686 JUiCa4Obg8IrQRos9waD0LBFvB5PuqIi4PXYvF6PxWwOsErIVpWxaBS+W4QGUqaqIBwuq7TuynTC Y01AYe7ZB+fmNG2TbRUJr2zSthMzNUFR9673U68IhjK9p4YlzJUJyz7aRszAAbOuHSL0QVlCX5OZ EvMM2DbzZhE6zvTO6q5lsM9AQQjIXInNjqsiCllAIpTsXOLi+3YfgFUxb65TKeLWuipXat0Pxhpp +lbCTPMtq83/e1G5ugTsFQ8FJfSoxW5UYKNFMTlMixRttEEQooJw+cgfVypWudyvODXpoKu+5Cl9 mN7VwTO5X3PBbtutHwbfo+tyL40KdMJHnLh8/fPRMl3Hzhq5B2IxvJWJ2AMY8sGjoI6eIz+zveLx 1K90v9S/qVNtqtiQuie0Jb419WRcfXlsTXxV6sLKTbpNto2xTXHNbGmxtEa3QlphXmFZYS2ZGpoe nhKblrq+VFVnGh8aFx4Xb68Yn+oyTZY02mp3yBf2xr0V3uqoqSKluVR6OvbramFSaEr8otD1oQ01 t4UeDO0OadIaiOQ4K+R3MI0qRalfUxMqFaJlpXWhpL884UgmNAF/oLauzqFhDk00bjIEDdWGdsMM Q79hOVS2w/QaubwyToB8zGTebD5ofsX8rvlTs9rsySTLIJRz89CnYKHd9VMvLcAElzBWFi3tfYow zvXHgAZFxFRESkWodDaPCt2jqUKzArG0xabTWxOpeIWtspLGddFKmraU41ygPlFJCwoSRUVCVvbR lSuhXu/ri5tHF5nvECVFglJcaGsY1EeRHWDjr1NyiWiYkpV8fZl0zy8fvOay7gcXjSjGkl/S8v4Z rRN/dHFuJ3105iVtPfduzP1+VmG5d192V3/13QtnbTyTaxhZQ9R3XuOM675xnHJes3xJGyZhTf4d 8VTxCVhX35EvqbTRaniIzCCCymF3zHEutp3tWFq1wrbKscK1y6lr9DXUTHVMbeh19mbPc56bvc53 Z7WuvtYU8kbgQK4pdTgb60LRgAnaFYs+uitliTfqN4qBeKpREFlKW5rQDIQTCc84b8JUG6ytrm2v FWvdzetOWoTp3G46fWSET7+iv+d7fUHGU1T4Bb0UOCdI9mTaoP6MaYMxeI3tJT5w/GYb4Wy9P/+P 3dBc+1wOrpXFXw9nlYH0o1pCxQxVUGpzJWGJGpptovA4CraB/kP+rxKy2YwFO4Dwx8K+bHYy1ZzV P1o0R05MSPqotGvZ491mu8WROv2lpb0LT1m4vu66D9a9IgbH8yX6W9Dj8s7q6EkFK0/rnzTv1qdz f1/Yb3eYndUL+qLeUx7/4dzHr6D8SDHONRDxIuCeH6TOIIdv1q3X32BZb11vu9G+KbgptCF8U3JD +aYKA3a5ZKjcB+b+XVl7Z3J3mHVqnH5Ob/WecuLx+InfqWG8nFWVK/pbv8ZcZQoGHA5/wKlJBbRa FtCwWMJkoiZTyMRMnqp0IEBDWG0YSyv302aqOSFvn0AGrrCFnkWJuMQ9Rvc9pqDgQiZUobOXmowm g0lvEtWJeDJeFi+Pi2qrxWZh6nC8QheroiF7tIrGTakqGrEEq/gOzeUPWE2Kyl1I3CfjBzc7YJGw VNFRSqhgBedRsTMDM/yK3Zo+d972qhnl/u9fd9bVuRa+EFto7Xl7+9yxCbEbZ+ZeLiLFvKb+86Yv XX3V5/MncKzY8LOFd5zW2tOdngJ8mIf1qMZ6ZKlF9vQHl6vXqAWzvjRlsfj1EV8wG436fYJWzXkt U6Cdp3La5G5Xz2HMr7V5nCmr1e/JVHEAZ7WpbNZflazkug5WkUok/JVQNiyTWzyMJvTRWMKThQYs QIjew/SaSMLko5/48j7m64BjupZ2a7dpX9G+q/1Uq9JmE4kqUilVssph7IiOeDyGTVN7urXa8onl U86UNkxdrtgW+1qmH+EeIaBonHj1rTwC0lakZgobhgj/UCFCb/ZF3+stxzNFdaJSn0qNNryu9IW6 kZs5YOIoItGoEbf+OBUrWnezIFijfQr23iydza7nOPTNIr4iKxUaJqziNSMPUUUPhlVwsWwuqOxj uV18UQrkK/cOv+Sl3LR+nuY+5nE/VmkrVmk1VilDPpMXDqioSWtISZJfG/YGspGI31tfaaoJ1rCa VCbjr8Q20sC3EYvbnjKb/e5EmpRL5aw8FY/705Fowp2BRihBiBuronUzrSYTr4wnSFpKd6cF6Nrb 5HQsFiU0IUUSxBvysm7vNu8rCh+i8p5uDkmUSGulzdKnkii5s8f2cjziZl5lS8HkY76V9QAawSWk HUXOAnOWeOQ7sz+6r4xdnZMWATbrURXkKCoUlgDcavh/WYO7CwaonHd0DUz6gHAPn/iRH4xdhFH+ QFkBo+7fLwHWYC12juuwc7TQhNx0Y+iuEKuW2qUZkjDFMCk2R99nmBN7SP9Q7Gn1PoNWjDqjCUMy mog1xNQNpHkzaW4m/oZsNSdY9aY6WtdQVVdXXeXP6jTBpFRppQGnC9tTZUNF0C8JYW9LoqE60XBO Fmb2cLxUAPu3VA7ZbFZWERe1gXOqqioDlBJPWzJh0gThZeJuXbf8xN6ubCuKCx33/+DmJ9Azzu0d OrG9FJTGikTCeeiTKFtfweCnOOh8IcFQddLO06GDcPYPooJdOw2VQjlCWf6j3TFHxBEd3X+wAXEn HuiX+c5SxYobizNTUDcXdGecjHGjFcicyPeiUQRTKfKjWqweONC/7qWbZ6z/+MYXbyzh+jSXxeyk 6lcvX71/ZgMl75169dzCUlHImJKNDuXuyDZ0bx5af9cGqtqwvNZm8gSeDbqd/tnLFt/cd9Gdrx4L ldFGYKGLOq1GRwlW9HvAquXAqk76c9lg+YnjyeqdjgPVYkFU0BtTRQnBE+KrVir5qT8V9vtDYb8n DecqVMHuX11eX11dV+9Pt0zgVZKpHQbo9lRne/uETn9LQY7Qq1NFMaIgROgd5UUZIhVX7mMqo2Wp WFlZPOZPjc/yqk7o6JtSmaambMY/PhoJwJAA/VsinU6FEp54IpUqyAwt48frIFDUB2KZQKxT9gUz Wzu3d7JNne90ss5htl/2dlkC4bA5UMNkHOvHtxReYczE+tly2HmexiGlifxoMZdfj0K6VzxZgMYp LspCRuCeLFxSAPjgh5iDEKeyo+5bXxRBBdVw5vpW6Vtm4+8C2L+9auwduZkUFEBR+1VzZYDJ1u6Q EVVjI3qq1IoCIi7a9tDwd8xARYZzVEsCF9Jv13xb3Lhm5DWFXOfeVihvhgsWXykUhFWugFku+BWv yRSoM/q4gytYQy4whoQoOo3cqXRXgY/CPuAYbQfMvQ8B5G+AuSB5U66sFqtUUUPIGLKF7NW+6kCb qt5QY6uxt/vaA6epOg2yTbZP883wzwjY+XcfwPsYGhQ3AL/WHVTKvgbi8wWJ313ghfSg/NwpwK9x wY/zATlpbzDb7Raz3xVMuC0Jt4uxhMaUgI8TF0LNM+AN4A7d+M7oTqq43PLF5qsOOl700vu2B8BJ S/mtRVZW61v0GhvkyYqiKPvht3wD3uUTzBRNkdh2YrIKOyKfRG59fhzUdzvmLUE+l6+4Ulhjvcy2 nt0obLJusH3p0GiZ3qa3C3exe0oeK/lAet/2vkMtSudIe6Q9NrFOkwhFsxCwQu6g7y2Xyx8sMVn0 ejEUZBZQU5eTk1LZaIaruEFqf5fAdgzSWmY6pzSg0ZTwhhLesBbmOnfynr30D8XtDiwcp7Fc4amI 2EWfZUweIBvqziKDMbrFKexiRHIwtd1hQ2xWmUB1TeoSq+CspJIaNNjBLJUF5pCjXopzh1yAwhZY 4OGLHmQCt7RweelbMytsP3Rv/1PL+CZHp/946ulTGntzT3GAZefwKRbbRjx3vjv3LNrAS7nPJ08u C9w8kx0ehVO8dQ8o4p2Y5QnsbLnPVelq8HTE6rP1jQ2Tw70dS8LLOi4OX9GxQd7Qcae8pWN7x/6O F+utJtJQ31U/NyOaIqmGSZmO7Jza59p/IR/s0Hgj3tqlkaW1P8psr3y04cPIV5VfNejqJhBSOwrN qTHQXEp81FcfAkCH/O6KGg7AjlDl5kpWU0krKzfXVlbW1PorakkB1kvhBKOqHwPuejA8BXAvj/Kr uxOmRDBRg8MjqQjfb/zlkXBHRm4Q2ydEaomFBMIRWzgcIeHaiBiiNYmKaKKivNxdG4mEgC9AGBdr aky0tbdrNFJChuJmmF22Kxx2aeuG6bynQhMm1JIJiTp8XACHOS+TnXJ37UDtiloBit3a7lrh3dpP wRN3NO6HXidE2mmDbJ4YDnG8gxfOpxz1Oqfuo7NOCCGKSN7S4paOekZcoMMr4UR7hHCiC5danhxx tXs4V8UNVYqAwrP8B2zlUiMs5tzbyk3kQAug2deIyF2HyFmJyFbWrqjLUz3rVD94Dvd1NrtOcsXt 40qe/4DznCqf1LW6b+WYvt8m2iWlUPUU3Hj2kkj+XXyXKsMluSGkGEIPJxOKiPqfSHbRRTJqHtUM jdJwGGogHI2WGPzw52zhEJ7bplBphXjTAV6zhU1cwNN/8oZIrm7JDe2xgaW85r5rd62jv8ltGKXK JwjNyNfwsgXB4SF3VsWVqzs+5Z3o0pe5Ty6+FEDEecCOMFkmN0FIynIhibPgoC1eCElvFWWiLJeJ WELv5WKOSUu1HnDTAavFHXnwUoXUFqTNw33gjgvqfcXBQeGBj7O+J8gGGODjrqMFSnpCClG4pSj9 A6tS/HwG+Ms+/zyP6fs85gSVnsY3qtzCE2KGQlQpP3EjHsT7NLGkPO6v/sMBNolMbTqI7wi8Rv/o e9V/jByjx/y6OEn6k4FE02TfXN8jgb2B18nrcFv/iH7oN84LUIOy0Vi3cjE7CDG73GoyWax+Q1Bh bSQS6Y6wSHkiEokn/MFqhbnR1+ELTnXZBn+1XqXsYpp6UaNRiX69187L1q0uanIFXcxVbnO57Da/ t6qM15eSVDfO2JcnU6mypL9qOL9R9vkpCfn8/gBlNsrjQBMhUJfZUAVs9cv6QBznMAIBnz8BI4df nurzeZsamWBPeFlVdbIhUV2t1xtEa8KgSSSbmvyBgL+xIQCr+Ms0mOxPLk9uTx5IqpLwwc4kZUvW lNyUfCX5bvJT1A2z92S7P0j7KdtEX4aDNBV9PpExEWqKS2WHNSSINjEww/qy9R3rJ1bR6m7+eVFm nc6R2OOWjrjMzdWF/76VKOJIxEqXdNgDQalQywUoRXJShNgW5LlohQJnxxS2jKttoa9dp4HeVgV3 mZTrJBwei5ffQtoxGDym8N3LgLDfB0+/Ep9xiP4nnK2no9rbf9OF3TuQe0bawkEy9xseT87y+Hc4 i9/8O46UmYKPzotQmQe3WLgzzrc5gZE0e50D7sn1HCuhThGvAhSn6XIZKlKq9bl97NeM6qna66UO r6g3K0BWWg5HJzMwNp4qABOY7vJ0WVkq7Y/rRKVLSb1QUiIKfp3HppSh3XA6bUDmWICXI+F6fzgc 8PtjXjiy0IDPawM0US+xphLxeCARi0Ehddkery0BzIdt4DI4Hut1Oqrx+wIUynjZS0hajmdN6Rnp /vTy9Kb0O2l12lPF4Njq5d2tln7rcusm66dW0WSlVnfluO8dF+pWck0HAINzG5zvOFxg1rhox8k/ UvwrjkDFXcBENaD41Gb2IZK8isW7R1Ht/wciPwYGxhTGAgRnyhXyHY7S/wwMo7z2KCkX2bKR2wq0 +kW+4JMUWv02WwagcAcLPMlk0flN61iy/PUHwi9HSTI/W3Yu+MBzIYUbiZt+I+dfMP3SzSyHHYdd X0lfWY46jrrVv3b8SfqT5Q3Hm66/SX+zlHgkj8XucLjEX1v+ZTpmFe7R3mZ4gD2qelT7gOE36t9o NNewG1U3adYaoIS0/4htUWka1Y2aem2LYZxUb6l3jHNpKljKUC3FLXFHtWs8vOtNB6Qhy5B1yD7o OODa59Y8YXpSetByn/V++wOO7a7H3Jq51pmOPtdW6TbrrY67XXe6NV3WLnuXY6rrVPd803zpdIum 3DXO1GBttDe7TjNNlbosGr1ap/GqvZpyU9KatEMudlNRYzUZRVLiBJNqjuuE0jhX5Ydw6HEbDlZe bIuXuHd6Oi9TdhQoweAYxl0wFJUxd5Hlivei7h2Y29cHzmC3QwdPa5hVj+1EKsHdeKfF1Q4Xti/l Upu33eFy+NtdPNJis94JNR+aPuKpajj/xvGy3sLLP9+JFP2UFDbZn+8EowxXhHeL6VG5FEyzHd5h bdYAIsrdNeAEDkctJWU8lezthmIKc+7n4LWtbbQUkSHCc1ywG/tXYGBSPdDN2Ri0C7B6QJXtsJRk GHfZ5npti3juDZ+sfzH3Is2+uP7j9bM/fmbH17TkwWc+ZpMeyb23DV9DKcUXGuZty/310ZfopNwL b3+Ue5N2cdjaCUrSC0oSJZXkU9kFhxxvCU6hWr2WYNyb9XZ596Z0FZbkcP5jWbrQc62HJTUVmls9 twWVr/Jx6WyUn/330ljtcfY0rchiURKIW0yx9hiLxVwQycrj0Ij6PNWVYBEld9WxE4aCUfX0dC6W gxHs49+ZwhktGWsQg1SMSG/icnAP5wzHiOhjEPlbBc6Hca9iOHNDW1PE1LFqNmjZFB5DcS+OF20z UEAPflu/Bo7jwyfemlw3rXvcnNxX1NB3/7THrs79gb6bWz0Wo3+7fubV8SaPddYZl7SdBXMAx2mz gtNVZBx9Qe5fl7q+ZkPmx6k7M4+UPVTxQJXGcl7t0nqmSwopb9KWslUmyNSazkxnw5TmaeP6YvPj c5J9NWfUz87MbextXjDu7NTZtUsyA41P1tyf2db4TM2e+qHMYOPecb9K/aomUmNoBLTvGaer0cR4 9uhQraYeidyTMiQ15ZXlzdmy9opxleOap8Qmp26KbUxek7q26tqa9Q1bYluSt6Y2V91Wc2fDg+Sh 1GupvzX/q+ZY5ljDv8b5Ghqbx4mZ+hohnYBpiASiEVsU4sY5wFEQ/jlD+nPgPbBetgpxZxNU3XXx cme5ENWWnpOGe3vfED0Cr4O07MpWx7kaNpSuSW9Lq9IXZ+MJ93hguGLI5W7MHMvhY4AjkmAdq7lW D/LnKKNdguOhWimT6jnkft+FeoU1KP3BcycoguISUzAS4UM03JtKnhRtwZGLqrPhIZUqQ1TFKURD AFGGRw38VEaGRw0B9GvgpzIyPGrgpzIyPErZgPhjUZVAHdOnKoE1yalIqgq/XnRQ596BsGtwRrax McGyHH85FltPwmD2/RVnNMyb3RIeN9lngDegfWpTQ8WPumpPWdxq05pdzv0PfwLkBoLnXnnrOHqH Z5lDzmqL02rSu0LuBoPZDOcvm7SunE79kCN87pHcZ7kvcg+zs09Ge6ZYQJ4F1leSRvoTfIkw/5x8 WijclrJBI9ubPaf2wlqhJDWudmrtfM+82tWh1elLsjdlH6x4rPblxB+Cr4XeSfyh8pOEGUqV2q7g pPAl6euCG9I/DN4XfDz9fOiF8OGUMbAfx320+ALcv6MQYwXY8ScoRDBUkQqrI5XpKAxGDUVptJIE qqs40iPCqlVpXOUQWSu4Pie4j11GKtk22Yhj8DQg1cd9JEFxnLNv9xrfJhhZhmkZ2iK0O7It8krk 04gY4fywySxLtBq6fCa5m6YWfQZOKPMP9R3iR3fBdypnjBSmU/EbACEeFUIVHbICZCexnt+iNGNa QHaaoFO2FK2ZQ0FDaB8UyuH80V0pQ9YRxP40lAnBhe2jAqzCw76gUgaU/UeOo0imIB+eJB3iyFnR rExnf1dO/OaeN6+7e/7am2TOiq64+/HluS/ev2DnzEcvzb3IdLmpY8nWr38wf2u27e7PeS11Ppud 1b2sadYd4D/3giOxgSOZSN6SK1rrT/XOqO+rv9hxvWOdZ733xuY7J+imhCZ1MA4Sj3Y8MuEPzsPO L5wlOOtzbMjqaoCfHmiPXN463uMyqWyENpbW1USFqgy3Kpv17kRLS8Yc74RduWpjMhMPd8K0nNSE FeNyY7w/sDzAAp5Jtrhcm4gm5I7l5WvKN5VvLd9erip3d92zjwZPqBemHzoCRpHzj6MW51GT8wik DUWBwHUCCg+puBlzozNWgHL24dvWZK69t9sCjJsqi27Ao06x/AAEr8Xcw8WIWyyLfnbCrQVOzuKk qvuv3fhA1akD5zzeMbfn8C/euoZPKwJa9t9771OTumrueHXBgteeGBTbfHx13sDJEO+s6zctqju9 Pmj2+ZMbFm5+cX0Nb/qQ254X/PjeZROWBOwefAPpumuf5XLBJuzmLcpufrNcAYNZlhvMYNJs4CZN 2Miy3EZmdTsaIMW7oxYIHjCFaXA4YvkeSTLDSgnKvVwOSb5q34DvZZ9o8rX7Zvj6fSuATdt97/g0 vr/FuUDHtX84CgoxrXDWdtTIdVySHyvXA/i/wzSPGrIg6BfPjLLNf+bvNqJoL/6ce4RPj/AEn76x KtLcXzgvTS/OrVdS6BnIGYDHK/DeNTSyH34CX5Jg/suhoOTjhw694PQiF3sPqQ/7Pgp+xb5Qf+H9 Mvh1SKtnopp69cHrvFvUaouLCzsSsUt2Zq932+0ut99SUMeVEmjiygkUccRfYdYpQpKxXGs06rR+ c0HnNjlRX9S1QZ8GhVp5uSth0SUsZuYHHxsJQ9m6HGvDTDDE9/NjpnVuD/SsM7T92uXaNdpNMP66 a0+SeyD2FKWeQk6xZx0XeP5fRJmx0gtKnDfmWyGAu6hZhatbYUcaZXeiUTM/R851rErD8Xph5B8P r3jyMpjfSw2BgtSy5dmrz1i/RJFtCxVQtE7Y8emZv76EPYsVM+r4so1M2PjzU+89S6lR9EtYKQkQ yneeFO2RfTit5aohp7qmpgb8t0iv+L9yfZXSPUIe8TODIoyWSlK9HWeE7H6D3RGp4FMPAr8iwUhC SgwkXsGRh0Q5bO4VKX8kRfSKA5treQnlJ4KXl0CuLWclJQLz6xkNu/nVU/z+epff73b5wy6nHdqL APAYuIwDzgTWSJvTiY+OVSQi7kTYljAICX0EX1Ay6BmBvRfuC4kaV7dr0PWpSwR70ibrnSxRbe+3 H7ALdpR34uNuzn30Gqi0X9mZVnzRzoYv2tHDffAYh7HpCHRfYFRHtRjc5lBdParL+DcuaN92QAPK /RuN5MkqyuIyQ0bFAnLXX2UJOanClyLwqdJ/U8sevDDX0+G0GY02J212WY2lVudP6PVqetU2lw0F F20qpLLYprUbDHZtIf7GIXx0cplTH8hq4gNY2zL2WYE/k112F3M4VWocLtKUeWzqRMjAtDFmLy9s nZxrb8GUcBKM843yGcs9y73Lfcv9Nziudx5UHbR96NAOSAPmAcuAVXyZUckhOWWH7BRdzOsMuIP+ QFm5s4E1OGqdk9gkR4ezh/Y65jlvcD7ifIE97/gzXkvxYDRL3VA9Z22SZLX5jTZ7GHqsB+RALBRb EWMkJsW6Ywdjr8RUsc1lsViyzB8uIwa10kVr0ga1zKQ9oH1H+4k2D0TdrNJq1Sq/QSWGPLyLzd8P I2nW7fd73LC24LyPwxkazv1LzthFIWRTiWLAbsMpDRucVAMuN5R78EFgAg24nMg7YZOkQgDWEbvd wRLOYXaRHHAlYPqEtk4QNclE2MP/QyFrwqhOGA04/ErTBF8Owg7lxqT3yXUvu2nQTd1yRdYtZxoy 7rXVyERjGbecSGbcCdlUFizrL1tTtqlsa9nLZZ+Uacr2s0shgjjBfjsduMwhVyPgUofsyZocnyiH IObtYnIiC+XOpUOqkP0ZPM5GBDxapJWyPWijB23UlpBU+MTNDNUm1csqESdJ4XRBuhTtPgd87BFH ALMfu6VD0O6lRlZysdZ12C2NrPS4jigy7sq+Q2h1SR8DM4r0DUnB/tqCk14cOzTQ8CF1ncjwigK+ 4H4n6+gVdf5JCPEdJ87vVgDJQBqnDSbAmFXAzewptpZ5nB6HR6GVPWjxHHdAY3BAYxonPge2wyEV 2xWVfl9fD76kAr/NsXQzarXWW0e/wjKqExLevPbjv117RZBvdbSJ72DPLf/vq/52/i+VigZeERTa v8H3QguMA5R/EaH6m1eF/xotA9O6gWlrgWmdrF6+zZKl48JN0WynbJjhmFHV0TTT0O/oq5rZtMhw geOCqkVN91Ztbno4MmwZDg9nhjuftzwffj7zfOcfyT8yn7Qf6fwnvlrzmRRx4bZ11NJptnRGpQgO HODTjDScyXRaLDCnZ2AzytRFcWwhgGMAlNYx8NkSTE06a8KSCCdgoZ+Q6ExkEtnE+NpEXQLuA5fI PvDpOo1HM55VsE8yNJPo7GxvamqPRquqkp2cNbe0d6ikBKUqg0Hl9xvgxgb+o0w2m1TVqnbAVb9K pfJ01SVwUKdsd/IcP57E23UzgHPL/YLfPXE/TSgubfbCB0Dc04+6QGrdiDnP555+yAXNQUGv7EZO aVTq3CigvlDJjRLcF1FhFo9wjnE04gDIRcaAxI1KEjcqSdyoJEUsgXap1OhAZLCNioJc1cghE1fs JZb86ztxDTRPr+/EZUqKK5F+CFf+QhnX8/qhsbcw4U/Zr5X71Oc/k62l+IiACVpNs8rOI+iQuG5J tqIq7EJjJ48kF7wElPsjrUP7U0jNpZDpRkVVRZXUc1xpPar2+FZFA9TaRUgelSu+U8HupJtCHGRz n/P4+tyDuUevV8pHuWtKPd2Qu0GB8fc5RC+kE+mEhTx3mPcJsbkjI5y94+YZ+mxuQiFf6lCDMH4w Cue5Pnr/aB7AeRZg/lzAfB29mxvYPtiJzx7gYOQHchYatj0Rqo1q69xRd93S6NI69XzLQke/f35Y 1ITPjvwo8mBE/Gf4yyh8E7VRe9gdxTcGOO3Wg0HmXxjwawv+Lsbjzi7hSKoWPXZKVbRqmP1c1tdV VdXW+VN1RUOsHqx0wenAbeVf23LwPsed5Cti/O71yVQ0mYxF/RXRSIRKETMR3Nq6qLU2kYolUhWh RIUnbLEofvBgwqOJbrhIDbMDu0HVE2a47h+QTeEEscywbOLOf/Un84c4bMQVXuApFJaiYC6BfQSQ CyvkqERzEmnk7gwnCON3nBtOauKc40lFlE7mNxWwJCshybpBFuMgmDuJy+wqOuCuBHx9l9P/v2Hp 1uOMvzv459ymOg4jH/DoDHwHvP7043BTx6TcxONw8zSrGgWP/6+yL4GPqjz3Pu85s+/LmZnMkpkz M5nsyWSZQGBCciAsKrJIQUCJC4KyaFmUUpdP4tfeiruIqLhc8121XoUGTYhsWrwWEYst9hbrUlqQ i623xUq9lvYTMnz/5z0zQxKrv98Xf3POnJkhZs77Ps/7PP/n+f/fXAX7sPCcIpH30HGSw1zByqiO uVlinqvNV/uu8q+0rLKu9Bt2Sp+Knzolk4iHMyYFnJViWmoVse2KtE5a6/ye6y5xveTUIgCr+dL8 gq/1MVUjd9K4EC6nKLl1+qjDLnqQOjGTU1VanGopHsFIxlmO8sotajKoxfwroFcTCrvLbeMVxmZA U3sdO8V0LBjCqGp9hMhUyWUB9aSlEcOqgZrEzcwPAJdQGHbBVy5fcX1ynvviZdFBY0G9aNRBNCCR uAhA7+P9+fMO4Fii5IwR8ZUQqzhY5UVupxvcTl+h8Crlzr4vvjj4Kyqyiu8NXir+kO7wLdJrxr/T gLCpa89OMLMUPQfJdFxuUNoErqpbmKyWo078hSA0WZFxfoG1wmS1uEwegZWZXZYGy0yLZAl6Fr8w tAGHuvWGEd7xzYoZYwGkFTe8wx3MMQ2G1T301V76i/R/or+QRv2/zl0Cnul10Fq8eMBcaQ1m4CM/ UO14YjYHzd9lS006yCkc2G6YBm0c0sixQSvntTS4yO+7DG/tYgfR5IL2NpgV6eQMClw+CDOa5ZN9 prHp2FjxGUvQHXEPduEU1k/4ap7f4gqm9C/4rC4so6wtNyg+zO9Fu6qMvBcuq8dsKWMd+HsLd+Es jTq1jY68B/piIlboehE7DtI9YEruGJ236cdT58tXvNsKv1EYhI5lLolKkX278XJm1aXTmtrPsHYk 3aYzz9C/1nXFgsHBQ0XDEYUHkUdfKnULlaCALVQvedH4bOzFeqncmIpldTd514a+F+6W/yX0kLwp tMXYIz8b6k0PGF91vCxvD+2KHnR82eizQDa7mkmPux8OibfW313/RP2Lji31bza+1/hJo6kS6Fuv Gkql46lUIp6o9JR6A1Wj4sKoKujZ2cy1IJ0dUy9j6ysFS3NcsprjBAyvRH9uVdZmq5SfdMVLjfSG XVCUOPhqHc44S8c74jPiV8afjm+L740fjZviodbAAw1xA72/wvC0Ya/hqEFnCI6u3lOElLtYzbTB P5C1gSWk3Xqgypy6me7CM+i5UetJERcCFWGEE8z7P+Il7BWMABky504JLXgEz33Z7zHVmxAd4gcl G3KVRGGQ8dE9QhQf8Z57nd4BvNQVb9FAYQ4e5alpfOEdDTImLb0FG5CokwcFMp6fj5bm7Xj30ReP vT92/Yzu7oUvK2ZXwOK45smZT/etJGt8M/vDC3dcN33t6hv2XHPz45tX3PKK07V+0rVjLOgmtThD 1U9dM4iiMhC9f3O7ZmRnXbxk7pVUkajD2M/FrI0IlazsZUqcelWrK82TpoQ94qdrbzDtCwb9vkQk apSYVSm3dUF26pqB8rhZiSN2u0atliLwvUaztTTuxJ0XDaHq5GzBpvhkonc55RXyUegnBquuuH/o cNAg8J4yKvagQYSSAqxlwRMlxB8kWsjQRejrg2HL+0B19jIza7A2lE2pvLRyUeULiefKdrBd1lej r1Ts0x80HdYdMZ3Q/8nk9usaWZN+nLWTzbBeGL2UzdF3Gbusi9i1+uuta8RbLbdGb47dFd0dey0x kPLDi5zqs7oqgc2+HOUNv7xDbT60JADjo/4GKomvEC8VLBbRbpFYy6ofe38nM+T+PnBkIw/z8/3x //rRQw99RA+I4P16f+5vb+zLndr/HMVEunbyaWcPPP273z2NByybegGnwjKrhVMDcQuAcJQdT6u1 ePKW70jqw4pjsWPxP6f+VGEs81X4JyrTUtMq5ihdqcsqljmXBZem7graUNf8Qr3RK8/3Xupbnrq2 4nRIb0A/hi+ERnlPKnS36wnXIyWbQs/5nsNnkwCvnEE5zIjzE4wENGRWWO+OVxmt/TpD5N8C8aTV kTXN74mxB2Ovx8RYqFaOI9k0d/SUM2pBexAtaMGafUPGGdbGu7RBvyI+HjSC8B8GmOQdCIINoCcb toYLgLCEVlEbIPxvgdTDWZxaE3XeEriRgNmMomhLBkUV6U1yh2h2BpPHsO3hPW/85sWFB2f5oP2z +JkDB3NnmPXgf0j2CFnJT2OhQHhK958efebwBTPlgLtmwnImvXWQQRFOFG7H3d4CW4jifn/8yoXV S6qxuQYZAG/AS/PQL2GKAjTsVV3hdCAcLgkkohZ/otLcZYEZ9FfGcb9hDkoiLkcFm1U2ImeHzpFZ 6aZ9VBgL1abi3QAldrJ7+2uquzVjcJ1exYMA0NOo5YVMgTpeIKN04kuyg28wAg7vTX3JnzeCfgf2 5yIXM/Wlgl3sgt7ayT5FriBAtByxc9JUFiz6qOJSm+T+SAOOmgKFqTxUAkAnai7moY9X/+rmm391 45FH+PXKDzY98sEHj2z6QPfHMzeQb3n+wM3H1n7/6C0H2EfaTO45cqSHZrLIOQVpzOQgyvrvqkst /s0+sUmcIM7CPiL7xf3enwc/8nwUPBL+r5JPYl/57cFIdSQjtkYvCl8cWxC+LLYifH3s9vC94c2R zdEdeuca/+7IPmmf5+3I21GD6U13SFGwArtL4wGjLu622maHsj0CWwkL2sk+UQMJJcuyPTJbIe+V D8EV6aCnVr31vCtaNQ3ZHwEXnENASwLF2QgEhtzMPr8MTtCp7WE5FkVF/2TR1aPBj8V5DUDz3kS5 L8xMwUgu3GDU1Z39d/8nL1zxy/FeBxjADX+744PcUeY88EtmmRt8b+PGwyH21DNvtTc7g263q2ku C7+9A57jf+64p3frfRTjvI8s6DLMzIxwUE2ptpn6bv0PbHc09tj6bNtr3qg5XGMJoP3OdsDlSpgz 9ZDbQBqjgzwnOAkm/U6mqiHGEqayyoSQ6qqKlwqCRwnW15UYzCYL5FPuBXEcTUVK6BCfmptUe9qn +lb63vXpfMGWNbvYO/k+4GmcetQGcUSCNNsoWB3kYi1YKYdGMSAfFV7gvcCO6powBrQ2JtSEq2Kg TTKoSn0j3wUittz2i+UW7lN9eShFTDPeTzO4goKZg6/Q8ZWt96+9sxlqFybvo0u+u5bdRS9K9sEp haxB3EXzcd2yJ/0mv8cTkALXT1qnxY+i8L9yt+tux8ysgB5FVG2cJK+UxSPxX6dOxk+kzsS/LDMs r7qh7pr0Nc232G+rWtV8b1V381NVG5q3VPU07446RBN5g4XUoZs26/Umc0IUojWNJYoroGAsHdGN jXHFUhMXNpYbAYkYsIlPZanCFIvFBRLYS2bJaaaCwDbzIaCMoZb6eHfywWRP8qWkbm/yUPJY8lRS lwxmqq8eNll5EEP9lHAYFEB2nCCXSuE0Zy4M8RjcSQyZxXtQGPlSCKEboNoErOAffVG0+uKq1tRA pyobWgT+0VfnB+ugUJLMT3SKXFhLARlwy0aHiMI/j42h+TV6VAt5ESi0gV4/1HVId2hrX1nJygXT OMvrrxetrfDf+d5Pzpz5yXt3Hrzvvp///L77DooHHuceY9fsCbVXVCI2LWEXX1g9/uwuxgYGmJCb +vA7v9j48C9+AVuYA1u4AbbQylardZtDZxRRx3xskWGN4UH2sNjDnhVfYv2i5TnDj43b9QPG/cYP jEdDxpDJDZgVftspx2RRXoCCeaAk4a4CTwkBT+2ChtradEOiyoVKD/l70OYX8GJPwqXFr9bUgnz8 SnLDvWqyJc3VhhOtjMibuqrKSgx3q6AzuiwmsxI8WsKwTjyjWscKcaVxb8MhcNZ2sj/3j5mSH0rK +ngyj2Pe5fOas/sbHf6wpJwS9m9eGAqNEgxkRghHIZY51geSNBL1+dwgXaGw3mhIhfXoRwsZI5pJ wiYxUwq16l2C4dyXA4otJmvRD7JGCoA0Ja3zMWoBTHJT5IN+h0LsWnw9P0fYrJkbL19414IrkHzE cp/TWnzFD9YsGJ++figBkFs24qIzc6dMemDG4N+L9itdfkudsnbwZOEFLVTCuvIaZoMfehoSIth1 anUi2BRUg7OC1wRvCv4waPTaXfNkOWE32Mzz9PqEzR8JbvIhjpXeFHeyh1+JGOw2i4C9rag8JyIN ceh0gL1nAOQOll6y7nyuirocb0LsOA0LG5aynvdzMA9fssVbyFsLuVdhPRUfvG0du4i+92AJuSd2 0d+oA1Tv/vDD3CVnebGdYkB4KsQyFI1sz90utfJvVio8rda40EqP1gXpcuf8CKK7yE3ObqGbdYvd 0ianY7rpAdPTpi2R3RF9xBSmFoMIrFlvRb77k1d0uoRV+8Kqw2oIzQ4qHq/DvxHgxU52peqGEJ4U jdnsSmnpDFRsgtHdbID9Ku/xeUkSQUi6WPYdPNFxejB/E3jVnEEZkH/z4jceSufVozQuHr3tjpyd mh/FKfPmjZud+xu/AeblP6RvP3iWW/41yx+si3HDv/c6WPlejOtGWDlqEbtAvnu9H/03VcTNhaIR ndUZ0EW9zvtjr7gvw6rl6lR9VXWmsmVMWUdqXFVHZpm8LGm91suS3lFesUaeUfVh6sPMydTJzJnU mYxpbGpsZlnZspYt8pakoQzMX+yixv1A0YdHKGndjl1VY+jReL0f/X10Vl2IvGMLkrFYIpmIoHmu mXuLhobJmYaG5kyiLtPitvJf5EhbHA6rJeGmPm9kUFqTd8lm3uWdCMve2nJ6fUpV1YJUVVV5KlGb KkuVlSktGRkkwiQ2QPIqQhKaoEnB21Im65MskY1EfNmwoTxb25ytq6utFa1Zj1swZRkEuimFNq9A AfDxVNmclt2sR0jhFfvKTHdGVLCPwVUZKUPeqHS0F2s/Vp+V5m6z6DIr5gY8oXXIYA6O2sOeQud/ CUMZp9AXw3uwiWcMVQ0NdyzUaWitKVDHwcfQccR8F/Lcw/2gZKBN8nA/WBn8DDycn4GH07nvPD2D ET8D6mNaR3fJEAiS9NKHXX7N4Z2HK0d+FtlDeuTHhxE1vOjdDJVlaO/afqebdHaO9eFMODn8I6o/ 5yPoJCJo2ZQi8eLMudO0FhY4nxAoQOg9Exn+LiGJ/tJUMKPwt6ljmKB3VjD9IomhucjyKNSFRmDw zcDgXx2SLL7JFtdwW7GT47g6B32eq+lZ7hS9ms09yr6Xu3tI6vgVqyX3QQaV+0tufsFbYmdMhp0E BXTv/BFciC41s9B3o+8HPgQftnkUMyJKnEcRoqfEt8ntRlUIgaHAFLcLrN+9LskVDA71hhT9fYsX /EYPuGG4//uC/F8hdTj/JSje9eFv3YuYbLJYrbY5RztbHWOcY51tznFO1dnpnGT2lNtG2baH+2p1 FWwUE+dEFhoXRm4y3hTRjzI2RSYZJ0XmGPUNptHjuH0eHcvGTm4fO3Zce2K0DyWAXjWqeNhMz7ue Y6DY6wSPy6MCbJ/s8HicjoQvBcIhAgUh4QKfY3I0kYhFE6lRIGnRi82uZrF5crq5uSGdGDVZpRcX H+1knZM7OjvVjkRd2hAtr6+rLI0YmLF6tJoVJhuq41IobjZLRhDZUimfxe5QUICNtTT4u1FzPVte GlUqyum6vBu69GfbhbTS0U5AltC+t/0QtjcPTqn+ibYWacAVLJFa0vInjAY1F2jRH4qohToAWHZF WuNwa/jWK95vcD6ywGcLwYSBvDAPJkYGFfmoQqmsKoG4uk5vTVXpKmJMbwhaAtiyUl8dYyU2gMdU KKghATMufdfVhXAjnE9fQbe2nPuLoMPDeO4jxB4fCezcrwuxJ9P08ND32e8PtXONBpwR1rzehzO3 W9bl9XFEDe0PpNdYCESSPDI5H5ho10MilZEYzqfLrx+/MN5649jLR03h2hNPTG+uv3b8ZLK4J2Y0 1tWO6+QvH6cXtE9IC+fcOGny5EnZiy8bHCCjEx9VZ09aPAjhLzzf0Dm3tGqRdkHTXEtGMMuvxyyf i1neyu5UR79neM8k7jPsM4nPmPoMfSZplbHbKF5jXGRaFJaeCD9nEG+N9bPtohSJLYuhNQX0myjs lc9Kpy+GBqbJvIEp4RkZ02pLkkMA4j05vyppMa1LSLlS4ojA1t4yWQtsm7KtBrabHRMUIBre0rjO iBjXAzDRbFFCR9F6QAuKi4e3Dzb0ILwNUmzLVw4C9jA7tZiJT05IMXV8VpyOw2LXb5uNIz9YmIrf FNfK4Qj0TrE5uWiALGyMhU1gLVG6SQTT85OtD50MaEd8OSyTwxaIOwAOAaR7mE+bPUOmj5biNI+Y RV8Lb+fOu3/+VTNaL+dT42Py0ZP/9w3fuWXV0OiWvyctXDd/YlX0ngsHPy+4Z1Gaf2vnvwz+tXjN s1WKATcAkWrDDLGibeMCtdXj1/mhPiq9zd62vif+Vv8743tWw3LjUre4WFysW2paallmv9692Htt wOSLS864GXC60RZHhgdNk2AHP6NiTGfV7mt5SWAucCyuQvC7U7xTLfEAP8fHDCo+swIQ+iHDMcMp g96wkx3vL4ELKqhsYXFDe/Yq3NYaAm4pEuBQSUG0Zw8Uy78UZDS5umSHHNh97jjCguP99qg7yg2a 33Ri+2qN2VY/kXbQwBwmla/TCJaiHVYZB5MFByMd8PpJtRQRn1FGSzAY0J4Ov+wOtMt08MpU8N6J bmYPnlgsCNZMdOAFL0Y7RQ/7mc8Iu9WQQwEi+EXAVteW+wxg7F+YZ98bzDvn456ej+nBtr2eO8Xc e1/HNhKn/uNff3/0qSePHcXY1AE3IOslddM6taPR4hxTgUdL3SWQRemyL2IYE8Ny+03s1urV9daf GV63fGj80PxRxYeNfzB8AoF4bDR7q/FeabO0FTvjgkOFNDSYLoUiYmnCr61SVs+BYUvS+EQ6vxpB 1C3tzPoiWXSxOdJxq6UqzjbqjEIsmzKUx50mZgo11woOJeosncG7JnSlwaah4DtZKCdYEfT+WRsH EP4ZfjDMAEdc8DEvREp9lbYGyjvqeGuzXWE06o3nfvdyRbI45nzEMWk0K6NmWgLRC476ayY1ZGhY 9dSta277zxtzg699fK9WD+TwTx5Sf+rXj20+fHjzo4elhZsvX3DTodUDuXM7cgayJypz6bI8IFq6 4dC7D2549xDGrhtj9yLGLonC38Wks3q6zzkGacVptdU5pld4PtybkmYJV4YWCd8NLYtjL+bQ9+p/ INwX+lH95vInax+tf6F8a+2P693PJtkTVVuULVWSlj9oOHEeBtJ8s9V3IO+WNTc8i9xwITkQQhV1 JVkPBfKOungE+hZAiCqAFSUgVBk0B5VuC3NajllOoXgaaqyOk/heT+ylmO5Q7FjsVEyKBRsKIDIP 2As4O5EuASoAFSL2NG+yGg4kD/e5w8YVbw0f2JAmvpVGIJySa0mAt1Kugdjuy1UjRlZD7YsIUf5J cVgBD8HoykbAQ1vfJF+5kuPJOQhPANK75/iruUEm/fTYPYcfe+wwPcS3N9MIngE/ThtR9tUOAEOv nMtN3XDo0IYN776L1XQLVtPLpLXw9j5Vvs3Bas0zLMs8N3vu8jxieMpr5Bmdao0dyGdvYd9usRfJ jqqa80kZSZT0qjMqp3N9kkSN1SHzDWj1Rju2v5UdLktZKivUGCwdLiyGyMUoJQtbnMZT2IgmVCfI SpkzOTOpAXinkoZksHbw/vMLImT5qRV0mpY4YVS4LCGNixaxQTfnfNg1bEhGXHzrIohVzp0PqQa8 ssPviWhLHGhPfG3TitroUye/ZxwRqhcTFVF89plJU+8Iei0ObzITHP3EXnYTjdPgDZTFH+RERmnh 4YfnLA55gbIkQ/O25DJ8cCBdI75Kg4UROUT7e8HKJrK/quvljsh40XMxhBeWTtyqbB39f1rf8b49 4ffe3/h/0/7bCX/2nsh8OuGs98vMPyZ4rF6DX99unhDz+vy+9vCEexKbMnuc1rney1qXti7L3tJ6 e/au1ruyz8l9suX+7EBMvMRUA3ZIozquLQNugcPos40RMiAX6OpHOR02yQJ+QTA7bhz0OTpRp2nZ LinU4MMeUSPlo+JxIWucMyY+I0oUAwkUg8bZyWyVL67SKunHeqjOX1HFwDHoNEqGckvcekW+bkOo Hd9zARsksRriJxEuyxkHNMacTYJms3xRuRiW87oXal4ciGsdPcGjRFLeVKDdFxOy4TExNlrBwTMB l/6OkpiAPq5xY0vbEMuEsm2tsVExQR7v5qE0BVaIpnGgbBM/PMYpjP72rJyxRF4990chABmjiTDb dhk0sJP9CX8bzQnthyvorSLG5C6hFWusGWlHVsahlVbcEnScZWUcJtISO1HGojpRBgQSod+DO0Mf 2kGBhUwH7Y+gI5EWOTeCpN0QXxMvQqtkE4miiOtTgzLCq3yhryirXlFelt8MTbpNy2aprtc66877 pmcnN/xo28Srr/zlW2+tM/nsnEgRDCQ3r3i255JZubfWX3x4Y69UU4qZ+mA05A+2VbSOqWlpq4w4 vSXJ2y5Y/vzihOwIRX+CSeyrjzV03DJxejqtZJa0Xb+Oss6HEG1l0T9UK7ytlp0JM3s4FBaftQxY 3rD82nLCov+e40eOTY4fO/Zbf2M1BEy0p0EvOmNXqz6TTmc0odtLNvugwu72yPqgrWone0Z1R7Nl ZcYsY4LBFg9a5fW6newFVa6tBUZcHt8vRFwRBTyLvcDtdoqf9NdRoodJdALOARF0QdKKaPBaoZQo K8PchFZfCYUtVmvIHBMsYVsMuipUX+HlauyDpQkngG/hJ/WpQu2U3/kiQJEfAoT7XFEh17pm1Zz9 o2U79gFQ/r5qYy9v+X+CBkNaSMY9+KsLFzYrdtrTJj7t7jViml7kGm90Hy/HfZwvLRQq4IltFt2A X6z0sxAKVDzIsaVNNpvZlHBqhVRreHq+kFoRp/chrcnKJitlZXElUcH8TlmJZ4UKS6AkC20Dp8mc hZCMjHYQVPyEANoTnlHNVS63YjoE0RoC2CtHAuy4kRTjcK4ojCXfYDWsrvoty2Eh/QXBXSUkXRkG o3u8pOXt1bljgscga3deM0Nv3gm/BoH6k4iHj6Mz9DhsjppDeAMIiQ4XU08am9HnL/NLp/SjrQdu Vb/DQfE3l0z/xRY+DJ/zNOLWJzvnrRGjfDDum7XsVe2phiPTGGSxGj6EMUgC4m3cwrZ4tnolxaJY FZtiVxyKU0HmlmWtnrHea8Xr3Evlpclt+NCLXo8aYyQL1qv60E7ksqftkn06lwdLQEBYW0TxbQGM nodBSfsLRRODYQEX/wKcBM17eqmjxMnFLaYXYU832BeKByLMeCQFATtOyF4v0E5sYJoHOMOurEXK WsyGZBaw5jLV6hWzaXeHe5tbwmamywQvM6tQyWYNnhWeHkA4Os9rbBvmTIrFNegSieeqP3DuBYa9 0F9O7eXfSrsY2UQ+An4c+TZda12RXRrvgiyoCOpxzsXQV8SX7s89fylFNyxLx3tYJsXqucYra6OK yBzJTkPJh3OKBhDQcxrJ1nPndA9jJCulWvW5Sn9F4EfSi/7nUMza5d8eMAmiS1znf8C/zf9T/1F/ zm/qEV8SD4mSSWfygbDiqxSrdJW+ikCrrtV3ge4C31zdXHmeb15wXuW1bLluie+6wHXB6ypv1X3f 95j/kcCPxS26f/f1BAbEPbqdvpcCO4I7Kt/2vxX4rf9w4L/9JwI1Vn/YD2ESf03gzuCdlVv9e/z7 9fvlI/5P2aeBf4hn/P8IuLUeIpB4Ck1EGvOiV61dWcYEsC/UMukUPesB+UJaWdZdJhIVA8zwzZyH kcjzMHrVqis5TQooZQxFUulzM9vGKRl4gZnNm3mHZiJPyehV3aWlac7HSICPsYnzMc5dpDYV+Bjo RcrzMZQhfAxlCB9DyfMx9gLzCLCbMJuO4fb7AKQndcJscDNm6ywV2Xgoq3izdkPWFlcUu91mWIFK 38+CqKXcq5YLG4NqA3gYlTXgYaTAw1BLozgEQzgAYA5m1augxbGHPY8cJMDuARFjjqg2jsmI9DmR PieqLncGxannVbteuQqNmT+TdRvlLGQIXu9raKFTf+uYDL+s0S7xv+Ev4zfwM/49P+OX0Vn1+AMZ veprWQfChki8DRGcjeNC1RCLOd3Ft6jlC/hnxM3oIuoGfgY5caOrQNyo+RI8jhNdQokGOVKUw6NZ kALRrYJy9P8vdWOElaUBwaz6Gt/pn72Y528UEIeBSlPQpCN2Rj6gYavjRkmqKFAzCknJUGpG4TVp /ZJdO5f0VpFd/pEOyzf1L9r5wDJCp/9AQW8lEyNocxhiodeK8uBJkVesC1a6GP52Gay0U3xI3RRz xzyip9U91y2GCWOJJa5iN3hWxFckr+r8GfuZ65eeX8bfSb7T9EbmjU4nNEWFxxLSP6NhcOqFolEv OCVD0SgZItpZnFk4Sm/Wk41nlWyoMduULcsms9UTsp3Zlmwmm1ULtIsK8C465uszO1n9dqXzcfQF Y0aHiX4Rj/tBwRD8kJoqZY879SswNUC8wPv9yccrsGMWPhd/vGK+szSdhxH0IF9YLCFLtSFr+MNu ZoSNQHh9SCB8gkgYkPUaxsToIsoFHlRHpHdPhD4rwRYBeR5G/hwSSs4TMM4/o72x8sSKn48gVmzt 14gVp/s9SSJAHO8HboXz7/vCbe18LkP/q0jNUJOuUUTmqC2SOSz4Z64oMSiiCHhdieK/4v+M6Bha pjXgLrE7M81gVvThjDCXakRc9zPP1DiOrRus2O4RqBQ+dVy9CE/cFn+g3Y0ls71zPMQGGB06R0Nn gNGhczR0BhgdOqlVG+VmZ0fcUqq0Z5w4NMnBcDv2CfERneMkSYfgW/EzdoDY1++SCfnep9rxJNmG Q5wO+RxA+97aUYvIKRhnTRp1uZCMjyg7EfVDow42F6xiBPXDkERnxR3lkBqN5b4go7gntyu3hy9g uc+xw7C3nN2Re7HMi/c/ofVsEQuz0kVkQp/Qu2XszdwDRj8CdgLA2ZjcWxrWCXVSJKYXmPg7WO9y nzO3tg7a/NBtFDYBp3kMVtXEXkUwIZR4ShI19ngAzevuGXY1cMb7fxNWM/a+uiixhC1xf9/7/cR6 7/rELvdr3t2J/Yn3Ew4soJ4mj7vJq8U0Ubs9XQxmwoloN7Zx25yIAlULJ5LE/ejdXt/Ac8NAnvyR qGnymrUmQL1+s9YCaIZoIpiqWHICDSB/prl0UiLkbSIGSK96Q0VFmlNAEqCAeJsgnM41MtwejyIA e/R4BdaENzzYyMAU1XvMFPqEw3I2FIJFixT6lGWrG7NQzXYI0ZlRcWX0WPQUZaaZmXoQ71x6Rb9S f0x/Sm/QB5urdzOKe/j+qCe6VgFjWFUEGYYEP/lOS4hnce0soivxHee+uYg6MuIZ4aqLb8Oksbt1 V9o1vFz75T6jydVm0va5jufJIOjs0rKR5NemV0FRKz9D4+L1uVuC0ZDd5+fcoVVsLpvFA2Ewi1xy /eDJH5CrznHKPDPCN3uwfQYPn2aIL2tTCJPrPGJEkdRn6FH+C2ZTQPhv1eIgiJiZHBbxNezGZkeH pEXQYfSsxjSXxkpY/DwMnuhNO73YeSzhdzDRIyp2B1izDlAyHcxvF23M4VSEALbmUrC1LOvSZZ2W DssKwuuC/q4VtJVyyZo8XkAQ3bR8vzMR6LVMJN8FOwaIAFydJgAraiQytBm+TiQyfoavw/mDPvgr sm6ubzWMFjLsAh6KEnwGMIzF89mdEaSP4n5e0m8G7xFbeb/FoCCuHjytJXdTB8fdRDf2wFTxjdX0 5C2wPIjZsAGVY7sQ34V71AxyhcAyQpnRFHTkGR3AkylZxf9WyvP6ef4PBVTN0L0lut6v7qRfqL8Z 7gMDISzGPlBLhG1U2wAOe516ofluyXe3M353OOx0StaSu5Uoa4iqsIDuaE/03aghesR2N+q2DSjW zvR08+Df4Dki3J02dBhmGLoNPShVBMsKW/iALEVtC3jgVgMl4ZFKY0NK+/P4X6f/huesqa26pg2q pG3scTrSFXuSnsEo2y7U3ip8pHimeg3/ARNjNp4w7WrIkV6VIGhlgEaKBd/bJjgEJ7jxbsEjAGBE 1duPe1GCHtmQEEY/U6mAHhChDBWGcnQnVoJmWy3UAJ2ogxJcGoWbRuyu14ye0BZhlDBawN7RAnI6 oQ17C7VjrwdVmCBMFCYJk4Up2LznQuEiYapwsTBNmA45gpnCJcIs4Tv4O+cIl2KXkHmA5S4TLhcW CF2QKgCSih+Gv0r7Dgaqx8+88ILvTJxR07lizeqli1dPX7x25nemzRb+H402aEEKZW5kc3RyZWFt CmVuZG9iago2NSAwIG9iagoyODA4OQplbmRvYmoKMjkgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1 YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvUU5EREZDK0NvdXJpZXIgL0ZvbnREZXNjcmlwdG9y CjY2IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENo YXIgMjExIC9XaWR0aHMgWyA2MDAKMCAwIDAgMCAwIDAgMCA2MDAgMCAwIDAgNjAwIDYwMCA2MDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNjAwCjAgNjAwIDAgNjAwIDAgMCAw IDYwMCAwIDAgMCAwIDYwMCA2MDAgNjAwIDAgMCAwIDYwMCA2MDAgMCAwIDAgMCAwIDAgMCAwIDAK MCAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDAgNjAwIDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2MDAgMCAwIDYwMCA2MDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2MDAgXSA+PgplbmRv YmoKNjYgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvUU5EREZDK0Nv dXJpZXIgL0ZsYWdzIDMyIC9Gb250QkJveCBbLTY1NSAtNDA5IDc2NCAxMDg5XQovSXRhbGljQW5n bGUgMCAvQXNjZW50IDc1NCAvRGVzY2VudCAtMjQ2IC9DYXBIZWlnaHQgNTk1IC9TdGVtViA3NiAv WEhlaWdodAo0NjIgL1N0ZW1IIDY3IC9NYXhXaWR0aCA4MjMgL0ZvbnRGaWxlMiA2NyAwIFIgPj4K ZW5kb2JqCjY3IDAgb2JqCjw8IC9MZW5ndGggNjggMCBSIC9MZW5ndGgxIDE0NTQwIC9GaWx0ZXIg L0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AdVbiX9U1b3/nXvvLFlnn0mYzJZZ7kwmySzZScAEwhqh qMgiRgEDKoqIgEp5PrTIU8QULYiAaC1EKtQiuxKVuoTaRap9oC1VX9GmrbYxj49ioZhM3vecmWjI s39AJ/zO8vude+45v/PbzjmX5XesWEB5dC/JNO2aebcvJPGrukAknbph8bzb03XDs0Ts3hvuXO5N 13M4/ZGFt9+4OF3PfxB5+423rsw8b1pO5L9w04J5bWk69SGvvgmIdJ1VIg/ctHj53em6oQD5I7cu uSFDN4VRn7x43t2Z99MHqHtvm7d4Qbp91e95/fYly/Ae/qu6Fcmtt9+xINOezSLKfpIYsAH2KGXR d0lDEhmpkUxEuk+yf4T5MkFHm09dn6WuNzR8yUx63hntvPefZ3n+y/32Dy6+0feS1q1/AVWtaM8J eEarT6GxdvPFNy6+rnV/TeFU/gs0DUj3siaykMwaKRfpaEohHSXSkTQa5Tp6CWmtwNSIcjW1AlNF m5FWCnyFwCepDZi4wJSJtJQFkGtYiahF6BbQw1SFVBXlkHhnUFB5S5n5Ra9e5qFiPOcVOF6WmVu0 dbEiugoUl2jHyzJz0uVIR4hyoXiigDmQa0QqMzu9JmpWQbOI95tpAp4xMSNdRDuToPCyzAyinCvS HJFmsyxyoRVPZaanLygbNT3WSWY6+m/0pEHejJpWtNeIVMm0U0RNFqkkOMqoHG2Jz4AGgM/HqvOc t+mHFPDn81HjZRkyidb0laBfpH/SPaBfFDVelukCmZGep3/QJlDOC8p5epUUYL6kecBxioz0XuC+ pHPoTyMoMn3ZNABZU4ATcxI0WZRlOks2PPW/or9e+oxy8FSvqPGyTD30F3IA1yNwf6e/iRZ/FzVe lulTciP9hHYh/SvVIf0L/Zn0eIY/KYuyTN30POcncs6BP4n0Yy5h9JEonwFdpj+K8v+I9H2R/oGs wJ+m3wuOnBY4Xpbpd4LynsC8S4eoCb2/K2qnRHoyvWZ0UqwAXz+Zfiso74j0bRoBzG9ELydE+S2B /zX9iq81/VrUeFmmX9Iv0E6DnI+el2V6k34ucDyV6TiXdOriGkJv0OuC8gYFeW2Ar9Lrmflziiwk VaZj9Ao9jF6PiV6PidV8hV6m2cBxioyUr+bL6DUEHKfISPlacoxMnZl5d1IStaOCLy+K3l4Q6REx r8NY/zR/Dgvs4YF30APHyHSQDogxHBSUg2IMB2i/GAOnyKDzMeynfWIMnCKjxsewLzMnTpFFWWbj KAypb+Yp7RVr+lPR83Mi/YlI90A6ZHpWlH8s0l0i7aCdXE9FKtMOrqf0I2pB+jT9kNsD5Jy/vCzT U+KZJ2m7kAyeyrSNtgKrEalMW0SLxwRlEyzmSFA2if42citDPxD0R+kRIdM8lWkD1136PrVTBK2/ L7SSl2Xwgq/9epE+JNJ19CBaa2ideAMvy/SAoPyXkOy1QibupzXAaUQq0/cE/T6MRQZfYfFoNf0n jQd9Ne1BjZdlWimev1v0e5d44k5aIcZ/p6jxskxLRfk2kS6mW8mAXhZTBSi8LOPtfMSLKIX1l+lm ugm2TIOcaxovy3Qj1SBdSNcI3VzIrRstEG9to+midZtYhRtoPjimoRtEj7wsw+bMha/WIC9DjZdl ug7j5nrCU5nmZPqdI57i75AhPXxMszK9zxKcnUkeYQ9nCtoM8f6rMy2uFjg+Fhmrzp+9kqrFel0p aleIHqaJ8lQh7VPE85eLtIVq8cRkQZ3E/RZNFOUJwiaMFzZrnMCMFVZsTKbvMXQ32jaJvhuxrtxy NYrnL8vULhM9cIpMo0TaIPqpF+lIkdaJtBY8LsDztYKTNZk3cJwsyjJVir4qROukSBMijYsnYlSK luUCI/wt6pwPUZGWiDYR0gETzsh4WMxdFboS4q2aNsMScT8UwFv5+gSErPpFD8Ui9YlUeGKxGjL4 oYi2biEVLnBRpqIMrki0doLfYfTmFDVelqkw84ZCgeNvk+EF+HjtIhXeGZGIWXgInsqIgozgtEak MiQ3H55eg5zrPy/LkK209uaJPnKx/lyjeCqD91noWyNSGf1xnC7TXid4wJ+V0SI9H42wALws44+3 ZkJuSHhYxgrWtrPov/GP/r3G7hIhKmx1J6zFL+gESrsoW3JKE2kV5PgQ6tvpOTouZbPN9C67jL1I G9k69hprY+tE6xPowCrHID257DVFL/Xgib3ArYMtPsH+pJym9yG77fS+vI1WypeBspL2smvkMYjz lipWUe9Am3eJlDq5njazbPYyO83eZ+tpF3uT4e3yLPoc/a2Tt8tHMMp1SiF9LlfIEt60Ge94VvSB foHfIktsB/uQ9dIRcrCFbC/LpWelLXjnXewibPhmWsfK6FF6lF0GmzlfeRq4+2AP+d9ZvGULtbNf Y97tgNfky9F+L2Z7gjkxjhN0iC2lNlnP7kO8mGIX5XzZwfuCL3wAfxtpi7SGjWePSi5EUpwD7UhJ +YeyI/2Higd868U728mn9PI/TT6tkJwYCdoA2661amewN6Uy9iJ7E5xukxxSO1uMmIaokLXxp+Rs tHtUmiqvpnb5t1IhIpJ2zOE+tkrZIXVIC1HLxUw2sC3SNXhqs1QPm71Ka1WywT/xB2w7n6k0UXNC M0rjwpw3y9vZBnk7HWNaKkS+ip6SN2vXgmd3sT3g3j2c/7QUXGtTnsZIl+BvKWAV+poFH3cWHm2J rIcHOsFHi1E7wKlszin0sRSc8tEqzVLEWsuk39IykW4Et1bC7/4Ro8Fv9QDGtAUeOt6o02oULCSV eo37pOCktn2NV8zy/mK2r6x0WNVr1Hn30bR9eSu9Lw4MTJulODWz92mK9slB/T4l6P/oXxE/Kitt mTbL+yIbO6450+24uc1AXjULb8A/jsbrxjWXYWTKCVoIQM62AxajvA35DuXEQArlqYAxgGMAH2Ay YBbgWsAowAOAuQCO4/28DFgLaAPsAnQCbgJcA+D98P74Ow4A+DMTARFAHeBNwAUMKb1fJay0lt2B uheais3OJT8pU5NheTWXUP5VRQuCDpDe+hJs+uAvG9Y+N1PJg1f49p8BaCP8iRkexoqdjV00cyAt gGcaAU9VBK13w8N5BcWHCOzf7ecXAy7GyNuog96hs+x7kl56SuqR75Z/rsSVfZqk5ph2tPas7iG9 Xf+HrIezlexrc4w51+UW5P533rT8Gfl/M3zPmG88ZLrdxE9CJFqY2qws1HTAE+rI0ZilYEn1Gkmh 2FsfvJUg46m3Tr0Vt5h8pqDP5FuoUN8y2dn359RmXf6Fz+/QRvhwGNueWiInlOPgrq/RJGcZ3nQe dOeS5REt05psbuOpntbuJPrq666rizOrVqeVbFa7w81sVq2/OKSGpKpKc81oVpG0y4mxpua6eKJw psXouTx5y6KZs0fODxktyhbb+sgPUxe+v+bL7445aLMXNk3cyqYd3c0qHrl+biEfw+LUMbmMXY61 LmscUWA25Sj52VSYL58o5JVsBdGBrtBWiME46vhY3jLX1ZkcGM9oVs+SdgxFx/IZhhNj5ayqgdWw s/oRnvcNZkVJfaYryJd1+vFGo8QcxZbcLI1R199lMEvyCJ05NydLA+nfBs2skGKIXHyNwCmyovst vWM06HWk5MhG46ku8d5z3XinpTg0ilVWV/iSdhf44T9udTis8ijHCLeFLS60L7LY7ZZFZu4cGdsx 8LkcZTOgAdbGLPlU1slcrZNyMQ1M4lxPPIhuxOgxcrZj8czZty6eNevWjqlt86dNmz+fpIEULMfv YDMlitOmxmSLNEeSwvLRbDrq+VN2d8znkg1dYXtczsk3EJPcHq8vt3REmdHCLOXBMl1pacJ4qrv7 XGu3mQ8/1tDjSPac6zH2xmGsmgpJYs3oF1EUcg/ADTCIKI5TZEygmbwAH4C3i+s0xp6eHmOPjmf6 ntnUynyYX3GoKs0PB5cCLhc+gapnqk83DMO2sK2/2/CDUYnoXOaqUY3sAVN1OFSZOnt5NNbUOi+l zJg3Jh6dlPpnY0lJg0UiyexTIx6X2hdzI/dEQp7eXk+Il1S3kF+aOvAn5UrlNYzw7sZZ+lJ9mTTH dItplWm9abPzCdPO+C7nwfhLts7AhbILpXnLiw4VSWTJypULj3vCuZ9auuRPyg+GDyfsDrst5AjZ lhcst66PdJQdKssy2rWUKM6y50XjCazWqa6eOlNdopWM3X34M/6812SuM9e1xluXQgzFNO1VXCfU kFoOWYSamCuS1WnV4BLKBZRMRkJTeUd2oDjoVryRMVadYnlk3v73Th8YefdI53VWTzTWOH3PdedT x9j482PWKfc57YHa+btzYr7rigwt16f6//CHVL/Plz824nbXhGsqWSszsjzW5sVy0RjISx3kZRQ9 3DgtXB6L+gIemzGroq56pI4CvZ6/Rnspxs7GWKzHlXW08O/G7oSuq/pvNMpcZDNm65iiV8q9CTVZ lLCRys6qTI27DXW2qjxFHxtt7OtKdif7Grpalxp7k/hngliBB1y0enuTKQ6tS7tT3cCZoJ/gjknQ 4xWQb4hIPTMNFgaVh+sSbBOXn4w6/X9MZywQjE5pbGwpC4bK5JHFfi4J/T1M6wr4nUWBgDN1UbJy yQj4AoGwS17riQT9EbWnMlw6ZUPq+arqkrLJnS0l8XH+1LgdU0ojdX2BEHh1DLzKB6+KqabR4zUe dXTnU5c2X+8wKYYc7wgtKS65zmew5tQZ/MYPMPHuJJ+u0KSeZF9PMh7MCPvgpL6ZXVroo8wkb54S jU7p/1EsECqd8vHHLeWhUJl0PSZU1vJxuysc8Xwz4kAg4unjQRHG5hs4q6zD2Ooh07UhX5Vvoe/m eiU8stJX79UU6ZPF5qMlRd1G6qrRj/TW++xj89QxPjVWWaEZU69W5FUWmbKaGox9DQ3dXZBULImR L0odxbqwRg29SbF03Ar8TCj3SKrnqo4/H1Tb2DM7Qa3BjGGNSpeuXUUc65i0O5gpo/j1kmADJpt2 CIzNqJhcXR6ddDGGKdVbCqfXV9SFrdeVBwvZBXVCdaJk7P/GA/5oXa4zkXA4+3vavcFBPnjDQZ9k i/Ztk+3+NNLbZ3LZc8rlx8AXiSYPfKSsUd6APXXQqMbS3C7Z3JV1UD5cELAEHFFTNK8+r9JS6ag3 rdevV+7Pvl/KNeRRsy1PGy+ABp/rSWsvt4DMSIPaSCxprqqU/MVaaKyyJvXOZ39Pvc3Kez9j8f4/ Pfvaa8/u/tlr0pWp3tSP2FycSFtZa+rp/lzGPv6YsYHuj1MDfM0kxLKkXIs102M3fV3jKHaUQixU AEvdbc/qMoSKQ4E5ujnyLbpb5FW6VbLeU2g3Kg6LIUsvhbxaHNHk+XNVMvjHFVkcEeMHUDVomhE2 JiN0rVAy6FjyvVYM3gTDUlUZ8lsuNbcZAeSuCQYHK8KOvfTk9ie32xOlJfUpR3HAH7xv/KxooJi9 /UXfxS+fV8yp+PIVy5b3rfIFwt6g31/MlccffPmFFzpTb0MOr8WclmJOCVrSeFmRkxLZpjynzZyl JW1RgRwvOprXXebuCqllsRJvyOXPN5tkpy0vO0vWkjNhm+if4KKEdqLLUDIhloQr4s6n+9zXc+Ii yYHbDz61nyfh01GP6/J1FuHOq+LVVRYYV0zIYbGmzWtIlX2mjHAOOhrJ5Dsrecr8filbCoTkBaEA y5FCobBbyk59tE0tCQWK+98uDqgx37bUR3J+SyQY8BjZ5KDPF0wdMXtZwB9pYQpngz8Y9Ae98lq+ poxGDfxRacf8k3RP45RmW3PhdNv0wjZbW+Fy63LbHYVZI0ylSYUcXbESpwGnuMW67tjhipJoQPX7 o8VFnhGGLGMurCp5akeoamU0t9ZoiCqVemqqgHIO6uYgG3gOy8mNJ8IDLD/cNQQAIUerJWNivlE1 HoFxIRi0Od9QeFRWdcTYUAZTc+KK0spJUVuB/57LN6ypmlpVMubDeCBYOjL/9B+O/10xQ938nkjY 2//BkgUlo5qfe1Wq8USELnr7D37xxRe/4XL9wMBflQfkQ4jhq2hN48zvatZrntBssz2m+4mmQ9cR /El4j+1w9kueTlPeCFdhVV4ii3JLCiPymTN2Zu/Lumj0XnCdCZ03niz5KhE1jTR3muVEtLwqmYeT MU8hqZFp2rDfUg2Jh3QkeaTCJQLS3tPdB9vVm2rthZSkBQW8ibciwhOqaufTd6TFRLgPB9eIYjH9 dFwFLUnrAcJUubnmxoptB5bMWH1af+VrCx974YsPRt45+rblU1/1uEIfPrfvUGJCPBx+siigZZ1m 002zmmetnfj25Km71j6112DULbtteixYf+XB51P1bjUQKPZCNuaCL2XgSymtarx2bdEGw1b/Dw1P 5G81d5S+ZOj0HyrN1ufoGMkm5Ts51+csyWkrWl60OueHOc/ndBTtc2e7HRcDOaYzSsn5wMmyZnOz fbp5un13aHe4M9QZ1udbKeHTTbeG1Rllxr6ec109g6FHV0+XMdXVKuwC58YlrlMEHjBjnDc1+BMM UGDoqipF2LExBJcTCjnVovi62dvfeGnj2JXVFm9T0KOm3n32dOqPzPv7y7fKcxWfJ97SGQx6Eldc 9eIPHnslGMwtrFI933mG2d95hzn4xgH2DvPfhhOAACKv3zXNoLGIHK8CPIcdI78n2Inyyyh3onwQ ZT12cAXixLBcnDgr6CVMZ7BzMWH7WYBz0jPAn0f9JGoD2I98hRbNFAOoOFOOAVT0nAPIQq85gCz0 ig0ETlQD2Bv6xBvM2LPyfasN7aLYU6rAzwTlapykhnHmOIMSnKPdfV2I5tM6l5Y3CBw8AzROCJuQ NcSxo8TGApsczkDHoLrBA9oy4uVngt1p4ZM32kwNh25+ZYAZf31jR33VzIqIesLtLEuUhrx9+w6s e+jA/vXte23uK1uuYnm/eJtZJk1gqz2RQMBq+2qrL4BtwGsP7Xuhff2hI4LHC8Hja3ByVUR+eqVp Ks77NXQnYJcAO+3G/HZjLY6gzs+Rz4DPPqQ2cO8obin4XbMWNyMEHF8zhPqgnUerk+BYMzDTAbvg TXdj370bq7MbTxxGvRP1TtQ7Uc8Wu+8C9ODC/rwIXHeDk1lYpVnAhIGbQYFBKeX2y5wOk3v6Wrta BUshp9xcBdIKmY6EBUdJ+KmgT+g0s+oPPrGCWV3ucEl527s3d6d6WfGnJ5k9dpOhf4G03rB71doj bMcjT94TKnLFHYlKpjv9ITMP0JHa0Jq7Hn0YA8RoX4bPqtd44LM2NFVg9fnJuRPnCT6UzqDEd3lH MWoDcIzsTAJuAJJHkDctcEaUse0DD7JRJ5xvx1Dj+x8HelORu6HzKjAqeJSNE40kd9d9Xae6hvpr 7tNgvBBsQV3BEZiuwXjx0oCqPqPC4AQsNwyYi6X9t99nkrdFohG1/w6e7umIlJWEn/rNX26/pTxg XpdYOp/Nj0RLQ6ldGwL+AH7+gHRDCKXmwzuTVZ5wwfW31cFUqf1Pcr5ItDa1VFkrPwW9qaHPmuZB X0twQu+FzpbAz3tx8+TF6VoJ/Qfy5wA7UX4ZeSdk7yDKuZh1FPceMZzBiLt+KgZ/qhkBwzl8BnLA 5YzfZZwBzcz4vcZ57DcU3KA0g9fNkNLpyKcjfwiSswe3j3uwKp3IO5Fnofc4bsFieFcW3uUGhyvw tg2oPw+QANPBfxUyHKRa7Mp7sLdFmGTK+AxsS7tPcYFLfb0SiCZaGY/shLuoDPETjCE+A3YyreBi CwsFF9uUjNuQJq/ZtWvN9378YxYvKq791bo7bq7wO293bfqPUZvmvvRlX+eUjS1O1+PhcHKcWdbv uG/1zp2rV3f0lz28onTylNK4J2Z48JmVE8b882ev9teNnGiz+v1h7jfaIJ+rYDfr6JdNEyFrKiQu F3aMgccBSBSfn1BU4FTcpBjBQz0kNAqe8psPLqdJ8LsIdT+4Y0O5AM+VAss5Vwee8buZavCQ84yf 33lwjuvHKhfAElrQaqZYTxW0q1Cfg7ZXotVsGoljHpjBBrFnEEIrws+vvS8P1Rp6HRBsbifTNDSL 11xiF9O74UHzOHgWYBLe+WurmUZX9FqaYSK3ON2TNkx5/KexZGk4nPpHzBep8y9acOMT/oYSXyz1 D1WNNbcr5A0HAnZLqr656eVdqXps9gIIXlzs6RWrHlqYmst3hXw3xWV9F3g8TTMXsq7Sd5tKkPrB L/79RxbTUBFk1g+pHAH+fIX5W1HyQrsD4CROvrAmRsiwHxLqBVeuQ7kRGCbWSUU7L9qFofNdfV2t p+CYhRcBG/CPM4hvDs/1cLbwYyIhS1Bsy6BSC+2v8A2N1aVstXF0ONjUqB5lTWrQH+u7EA6XlLDE G5FoOMyCTo/y8q21sVkzIqG+PB/2iVD2Yuk+BOx+u4XbvE7Ml5/GO2l2kwezBgo2bODrGabnpAdF BxKfr4I/fuLKOTQNc2IAjimCVnW19sFi8UAMc8tMCJNJx6Bic2EaNhnJv2deIqKyyU43GwkbFuvH amACNqWdOze7hTu39LDxDoYTf1JWI3aqp7ebJoPf+bAUeowrCr3mt3o8MrgI7wN3RXqslAk6UIoV 4V+8cPmvEB6Rxx5elOyIAazAlcF65KEf/oVOPaJV/nVOLSx0XkYLvJDyALSgEPJvRduZeB/XP64F VmhBLej8i7LZxPfO36oIfIkH4Vt0YYgmICB3Zc6FhsSh6VOQSzQhs8Gu+ByaUBKLzf1GFWINHzYG SkZCExZuhyYExh+pjkSgCdJ9fJ9stzQPKoLqc5eo7m8UocTtD0IRJLoG8cMy+QBW2UHjGivpjEF7 xnbecLKgWdec06JpYdN103PmaOawPaY9lmccz+R1mjothx2H84xyOLctK2yeUcD9+pB9czC98RQW lVn5Hjrtx6WF247/fOvW413Sj1MffPpJ6gMW+OQTFlz2xuOPHz/++JbX2TXvpc4y43vvMUOKfxUn 0Rj4ozXwR2Hw/H+aZsLnBAAq/I4LficAUOF3XNC+MHxwELJdhFkYxQ3CV5DjCLxMELbsIqybEXLi YArpmExBpgPmPNa/BTFlCyzdHORzkD+DGGAXpOgw8iPI9bCHSfRpQp96SL8hox9cD0rx1mLguKUl jKQY8aMVdB7hXkFVsJNigy78DBcJhJIi6OnpzkSR4nxMCAscUMYKfG0K06rEN7FpGUEYhCg9pF7C 3bazoVAwlpoQjlSMs1jGVUTCW9zO5meu/yXLH6A3Fx1oYNXrDxx86KF9zw9QIKB6A/AvSr437Pdb bfPGj0+dPXE81TJeen79g/v3rXtoH+f5VPB8g4gBKumDpqvhfU30E8x+JzjBo72XUD6IshYWohBr 4IJ+GKFF/DvAr8TXImdQD4DbLmjXGWjeeSoDz43guQv8r4KPz87EldkittyDqKAToAUPS+DRy9Ar 1ggrUIlVSaBfF2o4aAUUopaO1kvA5yA4zu2ABdEl+I2Inbt6HkqlFfBfcJwTsWEe9PeIp5iJO/xA JoIf6uAvdVEVffvWr9+/f/3Dz0vLRh+45XhqgBl+dV3HeKf78XAoMdZiaU7COY2PBcMh9uaDe/ev e3D/gb69bMP4ltTx3zDD+PHzbNbiQNj71edYg4AX+0SMn+G7HlKWwNZFaU1TjHsOSFyRsHSwv1xu MVO+D+Iyy2WY35Bx+d4EHnUADgH41xRcTrmUWrE+BmHHlYxsWiGdOcCVcp/UBSaJcwQcVPJddLKn r+9rKUUMeonlHnIiOyiK4vxexKE6SWGXc2/Uf4cajkT3Ns+Lq+FuZ9H1v7lr9m01Psfi6NSf3tw+ aNel+3By5LdZ99y1fGJdsG7Ukrsx9wMDnyoOzL2RzWl6DN/jJfGNlAl2N4k1NeHuth53tiMATkAR vtCy4KbYTPfDlv8X2jwJ+kbQN4K+EfQnQN8K+ibQN4O+GdK5FVL1U7TbiXY70W4n2u0Wup4H7sUh 4eWQ6npI9QiAE1AEeSzBDqAMnE2A98UAHyilkM568L4WvEziLSbhPQowCwWYM8CvRstVWCsJNqYR 7c/giQKs2mjQTtLtaIe2oDQhnqrEG/JgZfi+IQf96tEn7uVEvzas5gJ8C+dDVOsjHMGijQ+6EwOW 4OOasI64bmgVoYVYRiO/hOvr6ulp5dvTTOCV1gMIe404A3AMHglVhgavZJI86IXtEfdUg/cSPBb+ 5vpOxMIHfMFIgTGvpOOGRffeeE/NW+/99pUpTys5o93FPq/fXeqxVt19xXXL7nzjnVdPHap7eJE/ afIHJx4oDdUWm6qbZoyf0PD9B+7/QVRNJldUxSr85kT0qsbLqhXNA+0P7LAVOhwJoQezBnqV+Uon OPJ000hEwXm0HHA/YBOgA6CBLXCAU25APuxBDDa+FM/mg4MXQfEAdxSYkNjRQnWYHtiTWMUQeWHP ua/gcY+MsglP62BNcKQKPAPgLqy1oScJDclEbOKQrbWhqyezQ8vYFb5hSAdtPpOwIkM2rfxmZ9Q3 txjiHpCzV74rUVZSkrrl6hvnpNxFaqJ+/pPjVvxQtZr2lIQqr14aVEuL5bZixGupAx03LQq7fAmH GmiZ7J/b5mFTwXz3iapoJDn719xeTBzogc/ejlk928TlkVtHGZKfgOzkY078DnwEMHyPFYLHI0hy PuxGMThhgeUYgTmXQcKDKFnBHwNkm3+txbmohTYE0WcO+nCjxqPZmaAuRPurgFdBvQL72T5sAvg2 IGNsedCTjnt4NAgCWJY5JqmD58O1sNhdXbIJSHONS+LgBmsomS1etGzxE+tUf6jk3ZCnPIH9LfYA c9dd/swztuakGnnc72RL/3P5QzexJ33+UMDX2H+lN8gDyebJNc/vZ69zL1cUx4gZRQY+VJ4Gv0L0 oyYVNsGAb0mD0FG+w9dmJMMt4gbEjsLeasEtP7il4vkQOOEFbwxooQOnZPCM22j+daCKWBj/uLoN nseCDYjr+fWpmQxsHB4NoRMjSrwbj8CFsBzjgEXn/MJUXJfq05cquDvmupq2wVGWNTSm5gf26Uts dfuYBML+grpQcmyQKczXMKU6VMeqwuHEGHPqSGEiFo0VysLTe1Sc3q6UHsB1qIfvL/vVGp+3Fq9m VAdf3w6+xOhYUxLS4YVf9sLCeLHaRtiiMEpx6An3N0cx9xhskBuz5qdx8FHgEY+m4oIzXJv4LhIX RJCkUvAoiC9QS4VldIoS4mmwqhsM+8tQfqWjIMEwq2CTF6zh33lw5vkEm3jPHOsBmPBnFLfM/IpZ 3yNuooZHTxbI1LdxMXMnoJOc0UmVETVVEQuq6ukdqUcFNx21gpsGZlXHVYbqzkfU0toBgs8Snppd Jr3NZUrw87SkesOcnyEvjsw4L9+ED88FL1UmNd1AfHHHQ3pmAhaBF9xqr0S+Evq3Etq0DuV1KHNf thXlrShzv7Ub5fQ5mxkctwIsADNKWpSy0JsdOc7EIVQW2D4VnLVgZXgMpKIVvpZDe/4lsAetvMhj yBVexmrxVdQggspDayvWiUu3lgJon4sag/0IYO1syI3wgWGsVs8pKLLwJrgY7MFmlm9a68StIGEx 0A1SbkJJk7kWjOPGvzU49Lo2HdLWMF/6+GrwywjUdKydfQ7+FleO6d9ZO7KwXGpI4bYhEBg7UXKM n1BW1l45oyIc3lWmlpc64+VSfcVMxFd7ImpF0jUpisFDhy9I2+Q/KzvgZRO0qimBNApLFYD28q9V uY/Ogabyb5lUKF0E8+L/XyE5pJ0LuELMuxz8+uYJfkLMv1WygbteegxUG1IdLN+pHuzoeTQPAKdg A5PcwH3znYksPKb4zqSyuuZfE+brrIV7s42y/L7WnCPpdLW5+ZLEzuoswObL8mmtKVfS6mvy8hlT 7ioy5OjlXF2qPi+PyVaNIUvJ0bBN/w+rz+LDBl/EL7URZ8Hf9uNxJ486uE0zgVshSFApeJJE3FSD WKUZ0jsB31NPwteVLTgD/A5s/pWw/9MRcc+AVM/CDvhafAl+WHTOwGcmSlpuK66Y2tw8fmx07JIV d9y84I4MhZO3ADoAhwBdgFOAbsA5KJACgPyyAKAS0AyYDmgDLAfcD9gE6AAcAnQBTgG6AecwYQVg BQQAlYBmwHRAG2A54H7AJkAH4BCgayDzw/vp6zLDWl9aDw+r82hjaHv+Cd/QevmwetOw+thhdeEG hrx/0jD61GH17wyrTxtWx5wvGQ/fIQ0d37xh9RuG1cGvS9pzyzX0+YXD6jcOq+Pc5pL2Nw+r3zqs ftuw+pJh9duH1ZcOq/PvE4eOb9mwOtb+EvqKYXWhH0P4v3IY/buX1r3ik+b/A9D2/aIKZW5kc3Ry ZWFtCmVuZG9iago2OCAwIG9iago5MjA0CmVuZG9iago2OSAwIG9iagooTWljcm9zb2Z0IFdvcmQg LSBkcmFmdC1ib3VjYWRhaXItcGNwLWNhcGFiaWxpdHktMDEtcmVwZW5uby5kb2N4KQplbmRvYmoK NzAgMCBvYmoKKE1hYyBPUyBYIDEwLjcuNSBRdWFydHogUERGQ29udGV4dCkKZW5kb2JqCjcxIDAg b2JqCihyZXBlbm5vKQplbmRvYmoKNzIgMCBvYmoKKFdvcmQpCmVuZG9iago3MyAwIG9iagooRDoy MDEyMTEwNTEwMTQyN1owMCcwMCcpCmVuZG9iago3NCAwIG9iagooKQplbmRvYmoKNzUgMCBvYmoK WyBdCmVuZG9iagoxIDAgb2JqCjw8IC9UaXRsZSA2OSAwIFIgL0F1dGhvciA3MSAwIFIgL1Byb2R1 Y2VyIDcwIDAgUiAvQ3JlYXRvciA3MiAwIFIgL0NyZWF0aW9uRGF0ZQo3MyAwIFIgL01vZERhdGUg NzMgMCBSIC9LZXl3b3JkcyA3NCAwIFIgL0FBUEw6S2V5d29yZHMgNzUgMCBSID4+CmVuZG9iagp4 cmVmCjAgNzYKMDAwMDAwMDAwMCA2NTUzNSBmIAowMDAwMTI5MDU5IDAwMDAwIG4gCjAwMDAwMDUw MTggMDAwMDAgbiAKMDAwMDA0ODEyMCAwMDAwMCBuIAowMDAwMDAwMDIyIDAwMDAwIG4gCjAwMDAw MDQ5OTggMDAwMDAgbiAKMDAwMDAwNTEyMiAwMDAwMCBuIAowMDAwMDA3OTU2IDAwMDAwIG4gCjAw MDAwODk1MjEgMDAwMDAgbiAKMDAwMDAwNTIyMSAwMDAwMCBuIAowMDAwMDA3OTM1IDAwMDAwIG4g CjAwMDAwMTE1NDQgMDAwMDAgbiAKMDAwMDAwNzk5MSAwMDAwMCBuIAowMDAwMDExNTIzIDAwMDAw IG4gCjAwMDAwMTE2NTEgMDAwMDAgbiAKMDAwMDAyMjIxNSAwMDAwMCBuIAowMDAwMDExNzUxIDAw MDAwIG4gCjAwMDAwMjIxOTMgMDAwMDAgbiAKMDAwMDAyMjMyMiAwMDAwMCBuIAowMDAwMDY0NzAy IDAwMDAwIG4gCjAwMDAwMDAwMDAgMDAwMDAgbiAKMDAwMDA3NjA4MCAwMDAwMCBuIAowMDAwMDgx NjgwIDAwMDAwIG4gCjAwMDAwMDAwMDAgMDAwMDAgbiAKMDAwMDA0ODMwMiAwMDAwMCBuIAowMDAw MDI5MTE1IDAwMDAwIG4gCjAwMDAwMjI0NzggMDAwMDAgbiAKMDAwMDAyOTA5NCAwMDAwMCBuIAow MDAwMDI5MjIyIDAwMDAwIG4gCjAwMDAxMTg2NDcgMDAwMDAgbiAKMDAwMDAzODgzMSAwMDAwMCBu IAowMDAwMDI5MzkyIDAwMDAwIG4gCjAwMDAwMzg4MTAgMDAwMDAgbiAKMDAwMDAzODkzOCAwMDAw MCBuIAowMDAwMDQ0OTgzIDAwMDAwIG4gCjAwMDAwMzkwOTQgMDAwMDAgbiAKMDAwMDA0NDk2MiAw MDAwMCBuIAowMDAwMDQ1MDkwIDAwMDAwIG4gCjAwMDAwNDcwNzAgMDAwMDAgbiAKMDAwMDA0NTE5 MCAwMDAwMCBuIAowMDAwMDQ3MDQ5IDAwMDAwIG4gCjAwMDAwNDcxNzcgMDAwMDAgbiAKMDAwMDA0 NzkxMyAwMDAwMCBuIAowMDAwMDQ3Mjc3IDAwMDAwIG4gCjAwMDAwNDc4OTMgMDAwMDAgbiAKMDAw MDA0ODAyMCAwMDAwMCBuIAowMDAwMDQ4MjUyIDAwMDAwIG4gCjAwMDAwNDkzNDYgMDAwMDAgbiAK MDAwMDA0ODY4MSAwMDAwMCBuIAowMDAwMDQ5MzI2IDAwMDAwIG4gCjAwMDAwNDk1ODQgMDAwMDAg biAKMDAwMDA2NDY4MCAwMDAwMCBuIAowMDAwMDY1MDcyIDAwMDAwIG4gCjAwMDAwNjUzMzIgMDAw MDAgbiAKMDAwMDA3NjA1OCAwMDAwMCBuIAowMDAwMDc2NTY1IDAwMDAwIG4gCjAwMDAwNzYyNDYg MDAwMDAgbiAKMDAwMDA3NjU0NSAwMDAwMCBuIAowMDAwMDc2ODIwIDAwMDAwIG4gCjAwMDAwODE2 NTkgMDAwMDAgbiAKMDAwMDA4MjA2NiAwMDAwMCBuIAowMDAwMDgyMzI4IDAwMDAwIG4gCjAwMDAw ODk1MDAgMDAwMDAgbiAKMDAwMDA5MDIwMyAwMDAwMCBuIAowMDAwMDkwNDQ1IDAwMDAwIG4gCjAw MDAxMTg2MjUgMDAwMDAgbiAKMDAwMDExOTI0NyAwMDAwMCBuIAowMDAwMTE5NDc5IDAwMDAwIG4g CjAwMDAxMjg3NzQgMDAwMDAgbiAKMDAwMDEyODc5NSAwMDAwMCBuIAowMDAwMTI4ODc3IDAwMDAw IG4gCjAwMDAxMjg5MjkgMDAwMDAgbiAKMDAwMDEyODk1NSAwMDAwMCBuIAowMDAwMTI4OTc4IDAw MDAwIG4gCjAwMDAxMjkwMjAgMDAwMDAgbiAKMDAwMDEyOTAzOSAwMDAwMCBuIAp0cmFpbGVyCjw8 IC9TaXplIDc2IC9Sb290IDQ2IDAgUiAvSW5mbyAxIDAgUiAvSUQgWyA8YzI1ZmI3YmE5OGZiMmU1 ZjQ0NWU1YWRkOTFkMGM2ZGI+CjxjMjVmYjdiYTk4ZmIyZTVmNDQ1ZTVhZGQ5MWQwYzZkYj4gXSA+ PgpzdGFydHhyZWYKMTI5MjE4CiUlRU9GCg== --_004_45A697A8FFD7CF48BCF2BE7E106F0604136763xmbrcdx04ciscocom_-- From repenno@cisco.com Mon Nov 5 02:41:37 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADD9021F850E for ; Mon, 5 Nov 2012 02:41:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.448 X-Spam-Level: X-Spam-Status: No, score=-10.448 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bCa8jLBcMHxP for ; Mon, 5 Nov 2012 02:41:36 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id 76BF621F8509 for ; Mon, 5 Nov 2012 02:41:35 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=188718; q=dns/txt; s=iport; t=1352112095; x=1353321695; h=from:to:cc:subject:date:message-id:in-reply-to: mime-version; bh=Z4TbL8VwaC19hnEbypsFNYWUThdeXiWZxeC0PhCPn84=; b=c9GeyFlf01/Usj2TPcr8MVGDFwvoQ0SwYxz9p9lF2M+zZkhU8FNPQqkG nmL4q4KlI0oG/cr11QzyPbO406h5RQSYQ3yHUXVACX3S1nz4AyoVcPJDR pX88eYGUY66XppQECurEedGYEeBc1XwBxYSwiNCRN+fn3nOiS2x/K0Gy8 o=; X-Files: draft-boucadair-pcp-nat64-prefix64-option-02-repenno.pdf : 136381 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EADuXl1CtJV2Z/2dsb2JhbABEgknAeYEIgiABBBIBMjQSAQsBHiYYGCUCBA4NBhSHaJovn0ORXGEDjnuVWYFrgm+CGQ X-IronPort-AV: E=Sophos;i="4.80,714,1344211200"; d="pdf'?scan'208,217";a="138821762" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-6.cisco.com with ESMTP; 05 Nov 2012 10:41:35 +0000 Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qA5AfYtu017339 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 5 Nov 2012 10:41:34 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.02.0318.001; Mon, 5 Nov 2012 04:41:33 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-boucadair-pcp-nat64-prefix64-option-02 Thread-Index: AQHNu0IfMLyWWbYSj0Ggno8HYyv31A== Date: Mon, 5 Nov 2012 10:41:33 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604136786@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604136763@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.64.238] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19340.004 x-tm-as-result: No--27.196400-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/mixed; boundary="_004_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_" MIME-Version: 1.0 Subject: [pcp] Comments on draft-boucadair-pcp-nat64-prefix64-option-02 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 10:41:37 -0000 --_004_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_ Content-Type: multipart/alternative; boundary="_000_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_" --_000_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, My review comments on the above mentioned draft. Regards, Reinaldo --_000_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_ Content-Type: text/html; charset="us-ascii" Content-ID: <3C5202FA2289A642828CA03CBB4A35A1@cisco.com> Content-Transfer-Encoding: quoted-printable
Hello,

My review comments on the above mentioned draft.

Regards,

Reinaldo

 --_000_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_-- --_004_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_ Content-Type: application/x-msword; name="draft-boucadair-pcp-nat64-prefix64-option-02-repenno.pdf" Content-Description: draft-boucadair-pcp-nat64-prefix64-option-02-repenno.pdf Content-Disposition: attachment; filename="draft-boucadair-pcp-nat64-prefix64-option-02-repenno.pdf"; size=136381; creation-date="Mon, 05 Nov 2012 10:41:33 GMT"; modification-date="Mon, 05 Nov 2012 10:41:33 GMT" Content-ID: Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHdXXmT20Z2/5+folex1zOxBOE+nM1hy/KWUrZXa03iVEmq FEViNLQ55JjkSFZVvk6+Z36vL6BxNsABzYpdpQFBoPn63Vd3/8b+zn5jXuj4/B/XdT0WpYETsySm f3c5+5lt2NNne48t9sx1sjBzvSxuuprtFyz0Y8cPYuZFiZP5eM6LQyf1wpDFAV7mA16XfzN20pCF aeJEcfHIzPhN5uJ/jP0bftTLPJ9/lpcJje6GABc/HMSJzxa37JsrPOm6sc+uFrMg4M/LP1e37OnV lee4zGNX1+yCPdB/l7OrX9jzK8yshM/GuZn47JpbEGGSKQBXc5uJufXM6JJZgTKrkrYLlALNXuZ4 rhdLNBugzGrItQSlxmUzK4p7npOC1TqRMhNkfj0WEkIK2DaN/SQi/m7kwdSJQauMJQZEmgWZgSWm sSRh+3a72B8DHkRj1gRWFjhZEETpSLDeskmR5rmRE7pJOBK6w++HI3HGfpvV1YnnQWZTDyJnkLKF gFKH/M8xwq+Yq03Beb7rJG6kmUvqgF7mkrDdLa8t8TRIH3iB73hJ1sxbs6tFG8tLqOx5qxGqXpyF MF1RkJhUBLmlTeiB7mo3X/ya7ybBW+I6MJEmYNbGyh5t0Kh1G9qLthQKNcs0qxmmtJ+oz2/nq/UU SPNd2Gu/KpOamj0WfmKk+Z7vhFk8Fmnfrq6vvUmQFngOHCBTj50LziCfbhYcgzN/EpzFvuN7o2lp z2mjtJqfQKtlbkXnWmu1H1cHWzejEbw2A+WnqZOlWbN49muNtxUHfAq6Fo50u1W3dF4dvzdEIue1 rGoTcg8RACVu5iSBnyI2cigykt4H3PBrJrwhv/yQ54SIZsRDRBA8BFcgzhAuFSOVHyIvGg+R7QvL IyEwSuLUHIk0fVp+iNx69WtiIK7YEgNu85nZNfNJkOO4DJH5DADibBsZUNfmP3u4oKmIVNwQ8/bi gQ5ThR1HfzzGJ2wTtYKPzbl1u6dsCpHSaI6zhOzfQF/hP/PdfrXd7L86CriylDVFQJ4H9ozihBlA WmtM150Cc9qhN4AyXVJLZWSRX6gqo0Y0+aETBS7yLw20RAqlBzbX1n8ZFObrCMMEqoXVZShty001 SGzCfC+IEUBQJssGTbUw37V1WRqB4yqhKWBVoc44oMapN0MsZjJ5aMGMXRkmrdvkRI7IddVtdKND U9YeQlO4RNvICTIY6QRWVBlNYRA9EhMfRrPxGWmig8jJMs4jreP02bp64NZmD0pK2EXWFeD/P0x+ wuXlczuCIeqs2cgQ/WhOfTAN2KKM5n4X9+Wzl+zn7e7X1eY9++tue383QOp+cNg32/vFfDlf7SZ1 KWI5t3NAcxIhD1Hh5n40v9gc8t0mt80LDmIBna2MTdgMc1Sz2k8MRamqLHVurGn8rvy3hzDCD3yP VUDRsX2Puf52N78+2HKgMYEH0vQ+go8gRJ1JTWCEh27A1Y7YQTRGTIZALY00XAPF/LvdfLPI2VW+ zhfb2ykgLGzkEC4c7RR1cWFhemKEt35FJ/Y7jSSsm2W+ZPvD/HCPOODVYb5ZznfLPePp12YGfZXf HfLbd/kOsfBjhrygP61OlHM7B50YQ2iizCxv9uvE57/frXY50PvDfLe4QTGWYy2Ygjk9JM8SSjTE JqjdKnJi5oxCSjSq6NQApeagjwaly60t5CRMHBTO/SN4ycKvRSbOhftKmZw0QqW+dIHipRd5yDyR lxvAvY1w4XmpE1GOx/HjKBY+bJ9/al/ALiYfIPUVBQ+Ri5Gsi4zRw8FJeAlcPwNeRsH5fT7fbdiP X18hE/byp+ffvfivONyz+z05fHD+ptBRfpw5aYwEfwXkFhZX3Q6Ngt/DV89egZsyN+IJQ9cJ/CwE 2+Ceunr1zCyLP5GZTR4YJknipMT0CbEatZcgByoumu6t2StO2FJptm04tIxgLA/xFuqQNBbdoOiR 37AaCBZ+VrwXUu2rGChGXgsji4FKDTBtEkbtAZLjeSdLkMIq+r7nJFDbQsBEINnPuLNSx42ddgFO w9QMTPqNsGlkG3mjxVm1BdDzU5itiNh0DIBL8lWHwFW0KnHnpbVtyIM2DpM0qMDVIj0yuzTane8i YUn3cAwNdIbf6eBwgq4fL42cxA8hVQb1DCydKOhJM9ipDDGDAYltzHO3uJuCi1Rh2gTKQE/Ny5iE iXzUA9IwoQ66MUy0mR/i0BJBw0IqHz1IiYsEvEE2A0OnYSDfT6CHo6rAWzPQLr9e/W6NpHJAP6O2 yS4N4EfQkRn6GzqQdCI2UvXvcWy0vTugpjMJH0ERoZH0HPhIVbtNYtny0fgiQFcwXmQu2sWsxkHN 4U7dFyzzMmv2BVGXsPcFKasCo4dcOkuoG0p4b5U7M1v3jYaKaCj4w3DfyH9TdxD2YRReWu70JiVA fBSk77mPWholJBAzOVS/61Z4IN1SX8RGPsrhKCscERjWnbRBWroABS66V0nl9OcYvn63P6BjztZP GwRakXc1QOs2IM2cXUeSwdmkpbtkrIQkxNbUOyGKAAYolkJmAUqXwShAcdHr4cU8vCr3vJsZ4AIo FQUyWwwNolWKzv80DODrS7AkhoRu7Oejq5vVni23i/vbfBIjUlSUx8F3YEs4AZt8z+Zsk3+kyJ79 jZu8p3+7e7Zd5uywZWueCjjc5FME/YEL+UQZUmP4DHRGhKx5EKF3aFhNDKHnFI6C5sGRYL2Uft6b i/2bS2RwkKB+9wn0Bq0NcB+oFOKpjlsFrhVBbUOIQdKrYz0FykCCLrabw267XgNjIhG2zD+sUA6B TLy7X62X7MXLDzzGmD30Khl49n6A1UMK8D8OhwGyUW6MpKsCpclG1OIdW0EYZ64iRM4+peXL8mmV GjIYvr3GVgGrO+9SyOc4sKj4s6SyEbgpZvPlEsWNfb53GOPWw1THMCebPKenr7c7tr9fLPDw9f16 EtWs1mopfFtxoS3pB0mydg8ilPRd2AuD9P12eHLVPA4s1FRv7zerxZyCzD37eJNvuE4puIDN0QHL dfZqA668zne7+XrP3lzkznvnMXs1Cd0DZF4o0auQLeneEhDWfLEXL99cOpaSNogLdK1YAXYOugis mYRQ1X+864yuUCTMBxILNWrUqtn2mh3IV/0hv91q0j1gC7NOThtAtgQayqfXgHTXxQbxUKFJYgTq 6KRtItyp7VkUIEY1VFrNmkHKZtVVvpb4qVgzCsNg0VoWfhbWbAxQ3GINbFoqg9ebWNQNq1EZvBY+ mrTGgbJqivKqgGOg0Il+JYjb/v7d7epwgDmHeocZXzP4nLDst7zt5uPqcAOxnCbuwuqIKI0DcwIt iDyNQIZokaPFGWWv7gxM+ziw7nbbDyu+HoB0q6WkNmqyck9vY6u74kQDUOsVAd8g5E/SYwBsUyW6 eyYyIDMzOadRtV6MPjgXOrYCSotLUwMKfVy2NCyrM2wvIWKHXhrqoNlElS18nIiZJRHLEPYqXF2G q2CuRVNIlWvr/pVB4XtxdOUIfaSKsBsGVJZE0hHxSL0m0Ct7HsmZh0VfEdYnJAliEB+t09BXMhMv lqqpVWjND9GP9G8VMqIbKQqAGzdV3l8LdU6jx5ExCChnemZ6fBxYA52ZRi5qVZBqZ4bIhM2gXk0X 2abKarLVVQrQK7gqoNgqIO7RIIsM/v4olwVYaqNhGMMGIEESIDQ1MSbA7HcWZCr+IAOenCnysueb 98iD5zv0txHgD57R0zG1BPwI3VUvtQzCYREBYfGPH1c6rPpxOHkuZRxYV/P9r+y77Q752TcXL55f fYckBGM/bg/I197MD2wLR3rH3tNalT27nSMDvt5v2XKFQt/q3f1hGicbvSIhFjewSM7pHKiOnkLX PT/1PA4spWwKwZ7vtVCXNBB2E3qYNX0emjE9WrAeSYCtSGqrswcJsmrVUpAMNLhCZfM0c87WkAMK VBb3u12+ORgofHBdGKJZNjgHDAYhFfpS1FlM7us2wCMjActaPDbdwpYK6Hsru0+1dFDNK7DXyhW/ wLa4MQ4s6Rcg1QEVXJLHYoO+ujXjAFa7cXsjKLWSuRF//Vbt5nC4++qpJYSNYtoLIXriMiy2ZSaE 1oH60+UcuVqxj5Ozyg/Xznb3/umS2on3T6XcPp2kHuAiU4reMA24lcqzDQEbcdnmMWM9MBoyEvh/ JjuOEdh6CFiRDCGwZbJ6ail05GKxCW2AQltBUqxTjgE7G6oGTbdw1Vz0wOqNIMfMtkXMyq1dXfGB hiTki8nPTj2NBEu5/5ZyX2aQ3syJ3nevAptBvaJ4NmmyWm24p0CREtwS3RVAyYRBKbrj+ka1NCGO +jBfr0Qxeg6v+vfV7f0t+RH71e/sFu0TN/tJNJKqTFfm04Lak6Q9sFTFQTuWYbb7zY692R6kOHQV ZxxUlO6kEOkdas93MDv58jFY/249X9AVGg+27/bbdU51C7QSiciq5IEf2HzzaRK6K39NTsvKENm6 HYMQXOjDFK2TtF1U2V07B7qPAuuwus0REbw4MHhsq838DmWMu90KHEBNT+hDKAKDCTYH9kHeDE1b 2DtZQG9F32liK2iYJAw8DcpA+iqNuYfcoGkjxyp6SxsziA0DlWBQGJNgGoqwHitYglI2dzw7b+ch 0J5+Lvb0K0vEHx/AhCZYBoYKgyet8O1YDHXVL7Dpi+em2FdMgTLQCkMKIYpr0r8QxsWKZ7ZymFue 2UKSa8OQ/HhEKREqJ0N031MrmfNoElWs+nYrk2nB62lMMKp8ka91sQHKqYUgQosiCjLnJgTjwBrd 1lGN4tviOt3WEZoAdpPQVvMP0mO8zIfGjgokLa5yja244mcfV2jlyPlGFWy7qexUMUlk7GNNOpYN 4dyBIRi09Y0GYbDwjbAHQYaUR5NRqqnc0aB0qdwClBBtelhTNlDlPtvefdqt3t8cqJCA1u+SWXi4 jLLKXIUmjAbvF+g6jSblm2k0U67G8qMpZ+dO4IyNgKzmmbkT48AqGOrNxQLLMWi/H0bVKmwRdI8U PEVeMOfsDpuJUkvwaols/Op6hUgLtn2qXjC13CCUk7Lyu23JPsihLQQWni0tCypT/QzCqlFQqdCY ze8PN9sdtfZ/DfvAFQsFCPt89yFfOlO4aVhF4kCvwOcUkJ8DZbG4NaXNkwVpDTV3at0CJzbRkNia ePucTcVsWpZawlFQcR+Nc1rJSPWWWWT+tz+ZSRuF0n6644CjkqJod/0lXxwofLEEslF5lFPyjR2R qkvEANa60DJdRyQ24seqcg8JDoPEf4AI+MgIe2GM/IYBia0IKDNVWK4v9uz7/P18ksMyAtWrbAI7 Bm1jij7ETbShWOiiiTRFTNfQ9zdBzQfbScKjr2inMzCB48B6WfRD/5SvseAJ+4hBDXAG+lYskBZn OTx0t4HeJUXh8wxMYJChjBlhR+bz8m4qYHXL15sLSxVeMYL1qmqTCte5sgpMtgpKlPOfHsipzvOi XL5GELfZl+O4LhM5yvroNmUT9J4jfQbkMuqbafcZRH2gjwkSqtZ0elS/TllhTYoltRtR1pb20bI5 Ei4EUEh05tfX5FQgz0KRE5WrpoA1gNuKszcSVoG1W0ps/ZxGIWlDm7aHFVBshWNre37aMKhUFFmB ykBQkceQmfZmBFmYaUr7KL6nbQq5xkDuF9tOwbNBvsCjHAZuWLdm8NnaZix1oBqg1pqlujfDlgZT BxEjwbq7fwcVydcj6zWhKnxF2PoSe4GgCLjDPgjYLQTihg/q62kq/VrqJJrPwXon6NCDK39u1nsc WAv07NPKw0+PZYbpE/aE2S/QFJ2zT9v7nUpTkMuPVAW6pRdytTqtTsSdOyjfKVIXerV3ICd2FqT3 cYZGRdj77ae9sA8yn7rLI0hGgQX/my/6VhIMAed7/jzb3t5tN4jZ96hh8H2waL+J3fbWfJzdwrma hPKqzUPN6xwoH+Pwk/T8hH4cWKvNYn2P3Z1erW7v1iK9/M2rb9n3wjtmB5CdtMFyCur6WEeHrZ59 FkjYJXVbLGfhMcjKh1ROfMn0MY6ech7avCxfbdCo4BT63jqN9Ap6Edt6sEl2IS1cwHEM4OQw78dg rw1rARYi4iw/+GEmYIYXaJnmtfACKaVaJiQnGp0aFOCod59yu1h4FUJsrb3AQRq48ALR3I2Gz3Nz CUZBRVGUqEbxjB4rpW7ICaA1fugt+YDS1BKFblQ07g/s4xwb02wOWFU1jRuoYwsxo3MwCOgQS+m8 gTPL4YwDS7l8XKsSAzRbholqVMogSNjPgbp8jbeS5zHK66Ea7gO0B0Se5jMDlMI2dkbTFqBYNVFg Q1zHD/UWQy2gnKRBAVUU7MKtz44xQLG0LhZYoT2svSjOYPPlFeyIumrZQKcwCVhwiINJhiZ59dFo CBqM/+S5N5VmIuMR+vD65fx9zry3U7huRUgm5zappHrgJK/NzyjQzJfiTM0Jna0qdBgyFiSxoAOU hxNVzYCaFUvs2cuUWMuFBfRKsbX43DUJOnadTB3mfkHS+yQHEmYrZrPNo9fcvHEgQiHSuXUVEFvQ WvCA1JGiWbAqwrQJ75+x4+hYCe6aCWVKm+otPtpD+KkGaiaGW1Pr3sZMzN3I6Jigyn/FwWb8ULMJ zvIo1JHJ1RNZg04dgC0TYaRj5qNajC5viT4DkoL8J7HWPtJDLrwHK7FpTsPXTWRNbKwcBwRi/Lz2 Ya7y1fzdmsJUJKXoZD1RHmb9W+0OglG1+5ogGnSraUNbZPGCwuAVln6Cur+rW98MUE7NQljd6gen 3oy9HM836Sqd9kSrPwdPCFtPgXXAid71AmubF6LL1CYoMG5UWIXa7AGK1lrRHtPLe5ErctjQ/9lY K1Gun7VNT++PoKZnpUsmOYpR63oFSpOGtZTUEXklznOQSR/HyXhQqizA7o9mbZEjy0OfUOMzpJQm 2fnLj7AhCU4rlaTRnGdus1coDhWeHbdZvb2MSvCsZHTAcfJjZNQAZYiM/gfKnM9Q+NyzwfJJ8nwi GTUZocVuSPJPk5RG/sZL8cOKJ/8gGY0ix6VzZbtktOmZ6WQ0xNaB2fnaUQmelYzaanc4P2Nk1ABl iIz+lP92j3OBcdAKypbfzzfv7ykP0i6vx9jNNnupS0a+SfBuWbR1Jwf5tb461EuBImVR2If+krXp hxwFYp+tKLwMg/g9rpOtBhvEh4WXYYBi2tITeBk4yjOhM567NFjTMxNqMHQYBJ466vnsvAxsKUbg WWmwSTiniAQMUIZoMHXMsjyBqUN3NWq1E3kZcnpWkYAtpgdptpKMlol+ehl1sdg87RbR+iPTSShW eqHmrtI9AyR02kgA+bAswCZ7jJaiEYBSRm0BDB3byH0QF+nssgmWlFcb+0ibjd5iVzvTUtp9OpGs mizR7YVMLKsG8U8lq5z3UDr1AzSDIEZmnse3USs3gxRhu3qobHSnE1ecIu5nYwzqqcRVAjhYXG2D +JHiaoA1RFy/yW/mH1bU0TpYZE8kriZLdItrNEnzlg7gTSwboEzn/mpx9WPkEdJuaZXPnEhYcQie P8a2HkOlvripyIOjGYLAs/J+bRlnUNxUeL8GKEO8378+v/pv5QEfg7W22FyfQOWbII7h7XpdbFCp B6c5O4GLPWYqoLS4RDWBk0ezDlBjKn7HiV6dK1Vr0xhWJZCYtYoN4imIXMQGxxP5mCoBTnbOcP51 Z3DQ9IxwN14jSeuxt8D9kj19tvdajiiHdNkfUU40AUQpzhVPsYmuPKLcp42X6NBy7Mjtuh6dCM4Z RDpIaK5lT+Q13z49wS5D/IwRehGvwZ3SB5SXPoth0JibuuiWot1x0yjMcIiovkAbQpRic3zUOWcx jI2LTimcc67uMX1vjXsRToTGceX6XpTioDsPe9DGMAJ+5id4RtzBWKHjJrRxjb6HsyKw9w+dZ0hj yTcjnCqPo+hwlowaHbsboEaNdWMKhpm+s2BoekMtHdGevrfGPexj4UUYQr1JG/i4BJceXd3BWBIG Gks+pWGlsfQ9OSM9up61gqHA14LdoKbks4/stWAWo1paJxzZBz9LEpz3hJNr8N+s8hkY8jMkDqMs 1c/gDn3CqjoQS3wAVcXB9Avx2UPJGqfb8wc9H2PT+3ogDxTCJ/wsv8I76P4X13iHSgU0sHgKDIor McKM2BWfEg/E5Nf6d+k9fKeBUoOoeYmf0J8WsxvO12BIN+LnnBeSU1yBJQsyQDhBVmLJ4p5kLcy0 dK+XXAXbFiyv72EszYCa0JpJa+yN9+rsHUtYDbgU/GtZdAyRLYypW1kfnEKS79EW1jjs2ksoQEeF 8ufSfiBG+52bwb0gdQAbRZd6vJgUrW58TyL+kPxzdctwZCEObBX9Lq/ZxU+XpE98doEluuJipS42 6mKuLrCXhHhmqS62lzNxB/aMD/NSj6Nf1xdYsfyWXf27aBghyeibgzRbxRwiRITQJSjzyvIpWntk /exPhfV6mKGBJTE0sKRmh8SHmK6+wP7ufN5w4sQ32LGe39BPIPoyUaQf/Uo+qp8Iqtj8+ocyyshR IC2UYds0zjaZhyOXqV8mwSlcDHozjOMgkWwz44ZqsRdM0uaESbaJWOwhNSb8VaKMxzvMEv4yhgSb SacH7K7R8gwUBevcYoaB/gMGwD0Q3WMXh0sWcuzF7OL1JYvYBdDizS7e8mvMP+HfmlzhIQgXQONc D1zCoImj4ioguqnHs0JlICVbRIotQLs/PeIA/QMHSFx/dskA7+f8zp85iF9czgAc7aAAqN9c8j// KKYl/5RH+ZK//5j/+wWfihhL/MaTS0jXBe73TEsoAGAeW8m75nrlKGpDf3lmjx1ACFyD5Z7gF+Uf AEqfHgNI/HH55GlGdBMAPvFnF49BhR7gwEwRjHYFNsEJTP4RLYcaIpry1S+FdNfoGKElz3cjHFxO HXlFS16ZgJLL0CgnuOzif/sGpWU+WFVUGZQ8d9jAq4UCVsNMGlDDDP54cwF2ABaBN2Doc6BNf8CE wL6f05/ZBaQUXwTi4TeXyM4RRsE+YCXxLnEKnhdvRWIgYzz+wEw+TbTAAOIx8Q44Sv82vHH9LYiI cd9cylcSTT1+HnDJNZSXEa0+pX1xKkipkq+Mipk9+dIQwZIKbhvxC/LJjkpr8pmDkgbC4ZBV8knu KJMvJd4GdnDWIiQYhMC/wGbKLqBe8C8kE98Cg7gGsaBwIDW489nlDEqp/DwwjnfF86BE47fyx0AI DAHS4SF6YSZ/QNwXg6LvGc8IUMTPi29xp0f2tJwkwGNa7iOCi19FSYPGc4lPBHzEYeBY0hIAfUZq GnDRl6Q78AeTpi8xFXrU5YoCD2GEHiAhw0EQwtE3gOziMI6MTgWBTXgyCmPMMUmU6/qwYd5fcugx G6CY5vRPYm5APkwOKEozFF/9BR8wy8/UCyTM+Az+wCMgHz1Jwgryihfk219+DhzS0OYz8hOhHaN8 OYDCOCA8xsGV0tHhM7Wa6mP5kzEIR3TjE+azwVT7iQeaJSkkmM7+pt+Xdr9KPeoo17JGmOiknmZb rAiMKboTzcXGoOPVuzkoYSqNbNT7PwNToNi/gDb4Iyw/0AVJB+ogAOJrYf8hE0AmaA0q4n6fBIQU BQOJJmhN8y2Q+K89SMRhZq6L6KsyKOeMzGa+MfQRsa/iEFANs1GfNL/MgAzBL9Ir4JxO3MtxoL4S bwv2IvbGW7H6DrjE7/xFSIR5U8IgxpKsOkAqkPSm441KUoHFDBaK79G/ibnLnycJBp1J2CEVEG5A /wjUBdRiXsQUYAFMT0+cdAa+F7doxvph9ZR07vCG/Bn5FOlV/bD0DgSKHskHvy4/QcNxUaWXmpAu ACU1jQcwXjc3Yk0cGtrgBpm4M5ixqjIv+phRSzRaDFzEqiWCNHio1eHhW9XYjkggWEXMHR8fgxb4 A2utv4OcipuSdST+YqnQxXeEGXodm+n3oAahNw4IhKDKaTQppgJ46bj04CbCdo0ROoKqgwpBrTFr g+NSFtSeCSDqTaESTCp0kxY46lTWKvigiBoxo2pSsB707/8HtCZqiAplbmRzdHJlYW0KZW5kb2Jq CjUgMCBvYmoKNzQ4NgplbmRvYmoKMiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBS IC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRzIDQgMCBSIC9NZWRpYUJveCBbMCAwIDYxMiA3OTJd Cj4+CmVuZG9iago2IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNl IDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMy4xIDExIDAgUgovVFQ1LjEgMTQgMCBSIC9U VDQuMCAxMiAwIFIgL1RUMi4wIDkgMCBSIC9UVDEuMCA4IDAgUiAvVFQ2LjAgMTUgMCBSID4+ID4+ CmVuZG9iagoxNiAwIG9iago8PCAvTGVuZ3RoIDE3IDAgUiAvTiAzIC9BbHRlcm5hdGUgL0Rldmlj ZVJHQiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGdlndUU9kWh8+9N73QEiIgJfQa egkg0jtIFQRRiUmAUAKGhCZ2RAVGFBEpVmRUwAFHhyJjRRQLg4Ji1wnyEFDGwVFEReXdjGsJ7601 896a/cdZ39nnt9fZZ+9917oAUPyCBMJ0WAGANKFYFO7rwVwSE8vE9wIYEAEOWAHA4WZmBEf4RALU /L09mZmoSMaz9u4ugGS72yy/UCZz1v9/kSI3QyQGAApF1TY8fiYX5QKUU7PFGTL/BMr0lSkyhjEy FqEJoqwi48SvbPan5iu7yZiXJuShGlnOGbw0noy7UN6aJeGjjAShXJgl4GejfAdlvVRJmgDl9yjT 0/icTAAwFJlfzOcmoWyJMkUUGe6J8gIACJTEObxyDov5OWieAHimZ+SKBIlJYqYR15hp5ejIZvrx s1P5YjErlMNN4Yh4TM/0tAyOMBeAr2+WRQElWW2ZaJHtrRzt7VnW5mj5v9nfHn5T/T3IevtV8Sbs z55BjJ5Z32zsrC+9FgD2JFqbHbO+lVUAtG0GQOXhrE/vIADyBQC03pzzHoZsXpLE4gwnC4vs7Gxz AZ9rLivoN/ufgm/Kv4Y595nL7vtWO6YXP4EjSRUzZUXlpqemS0TMzAwOl89k/fcQ/+PAOWnNycMs nJ/AF/GF6FVR6JQJhIlou4U8gViQLmQKhH/V4X8YNicHGX6daxRodV8AfYU5ULhJB8hvPQBDIwMk bj96An3rWxAxCsi+vGitka9zjzJ6/uf6Hwtcim7hTEEiU+b2DI9kciWiLBmj34RswQISkAd0oAo0 gS4wAixgDRyAM3AD3iAAhIBIEAOWAy5IAmlABLJBPtgACkEx2AF2g2pwANSBetAEToI2cAZcBFfA DXALDIBHQAqGwUswAd6BaQiC8BAVokGqkBakD5lC1hAbWgh5Q0FQOBQDxUOJkBCSQPnQJqgYKoOq oUNQPfQjdBq6CF2D+qAH0CA0Bv0BfYQRmALTYQ3YALaA2bA7HAhHwsvgRHgVnAcXwNvhSrgWPg63 whfhG/AALIVfwpMIQMgIA9FGWAgb8URCkFgkAREha5EipAKpRZqQDqQbuY1IkXHkAwaHoWGYGBbG GeOHWYzhYlZh1mJKMNWYY5hWTBfmNmYQM4H5gqVi1bGmWCesP3YJNhGbjS3EVmCPYFuwl7ED2GHs OxwOx8AZ4hxwfrgYXDJuNa4Etw/XjLuA68MN4SbxeLwq3hTvgg/Bc/BifCG+Cn8cfx7fjx/GvyeQ CVoEa4IPIZYgJGwkVBAaCOcI/YQRwjRRgahPdCKGEHnEXGIpsY7YQbxJHCZOkxRJhiQXUiQpmbSB VElqIl0mPSa9IZPJOmRHchhZQF5PriSfIF8lD5I/UJQoJhRPShxFQtlOOUq5QHlAeUOlUg2obtRY qpi6nVpPvUR9Sn0vR5Mzl/OX48mtk6uRa5Xrl3slT5TXl3eXXy6fJ18hf0r+pvy4AlHBQMFTgaOw VqFG4bTCPYVJRZqilWKIYppiiWKD4jXFUSW8koGStxJPqUDpsNIlpSEaQtOledK4tE20Otpl2jAd Rzek+9OT6cX0H+i99AllJWVb5SjlHOUa5bPKUgbCMGD4M1IZpYyTjLuMj/M05rnP48/bNq9pXv+8 KZX5Km4qfJUilWaVAZWPqkxVb9UU1Z2qbapP1DBqJmphatlq+9Uuq43Pp893ns+dXzT/5PyH6rC6 iXq4+mr1w+o96pMamhq+GhkaVRqXNMY1GZpumsma5ZrnNMe0aFoLtQRa5VrntV4wlZnuzFRmJbOL OaGtru2nLdE+pN2rPa1jqLNYZ6NOs84TXZIuWzdBt1y3U3dCT0svWC9fr1HvoT5Rn62fpL9Hv1t/ ysDQINpgi0GbwaihiqG/YZ5ho+FjI6qRq9Eqo1qjO8Y4Y7ZxivE+41smsImdSZJJjclNU9jU3lRg us+0zwxr5mgmNKs1u8eisNxZWaxG1qA5wzzIfKN5m/krCz2LWIudFt0WXyztLFMt6ywfWSlZBVht tOqw+sPaxJprXWN9x4Zq42Ozzqbd5rWtqS3fdr/tfTuaXbDdFrtOu8/2DvYi+yb7MQc9h3iHvQ73 2HR2KLuEfdUR6+jhuM7xjOMHJ3snsdNJp9+dWc4pzg3OowsMF/AX1C0YctFx4bgccpEuZC6MX3hw odRV25XjWuv6zE3Xjed2xG3E3dg92f24+ysPSw+RR4vHlKeT5xrPC16Il69XkVevt5L3Yu9q76c+ Oj6JPo0+E752vqt9L/hh/QL9dvrd89fw5/rX+08EOASsCegKpARGBFYHPgsyCRIFdQTDwQHBu4If L9JfJFzUFgJC/EN2hTwJNQxdFfpzGC4sNKwm7Hm4VXh+eHcELWJFREPEu0iPyNLIR4uNFksWd0bJ R8VF1UdNRXtFl0VLl1gsWbPkRoxajCCmPRYfGxV7JHZyqffS3UuH4+ziCuPuLjNclrPs2nK15anL z66QX8FZcSoeGx8d3xD/iRPCqeVMrvRfuXflBNeTu4f7kufGK+eN8V34ZfyRBJeEsoTRRJfEXYlj Sa5JFUnjAk9BteB1sl/ygeSplJCUoykzqdGpzWmEtPi000IlYYqwK10zPSe9L8M0ozBDuspp1e5V E6JA0ZFMKHNZZruYjv5M9UiMJJslg1kLs2qy3mdHZZ/KUcwR5vTkmuRuyx3J88n7fjVmNXd1Z752 /ob8wTXuaw6thdauXNu5Tnddwbrh9b7rj20gbUjZ8MtGy41lG99uit7UUaBRsL5gaLPv5sZCuUJR 4b0tzlsObMVsFWzt3WazrWrblyJe0fViy+KK4k8l3JLr31l9V/ndzPaE7b2l9qX7d+B2CHfc3em6 81iZYlle2dCu4F2t5czyovK3u1fsvlZhW3FgD2mPZI+0MqiyvUqvakfVp+qk6oEaj5rmvep7t+2d 2sfb17/fbX/TAY0DxQc+HhQcvH/I91BrrUFtxWHc4azDz+ui6rq/Z39ff0TtSPGRz0eFR6XHwo91 1TvU1zeoN5Q2wo2SxrHjccdv/eD1Q3sTq+lQM6O5+AQ4ITnx4sf4H++eDDzZeYp9qukn/Z/2ttBa ilqh1tzWibakNml7THvf6YDTnR3OHS0/m/989Iz2mZqzymdLz5HOFZybOZ93fvJCxoXxi4kXhzpX dD66tOTSna6wrt7LgZevXvG5cqnbvfv8VZerZ645XTt9nX297Yb9jdYeu56WX+x+aem172296XCz /ZbjrY6+BX3n+l37L972un3ljv+dGwOLBvruLr57/17cPel93v3RB6kPXj/Mejj9aP1j7OOiJwpP Kp6qP6391fjXZqm99Oyg12DPs4hnj4a4Qy//lfmvT8MFz6nPK0a0RupHrUfPjPmM3Xqx9MXwy4yX 0+OFvyn+tveV0auffnf7vWdiycTwa9HrmT9K3qi+OfrW9m3nZOjk03dp76anit6rvj/2gf2h+2P0 x5Hp7E/4T5WfjT93fAn88ngmbWbm3/eE8/sKZW5kc3RyZWFtCmVuZG9iagoxNyAwIG9iagoyNjEy CmVuZG9iago3IDAgb2JqClsgL0lDQ0Jhc2VkIDE2IDAgUiBdCmVuZG9iagoxOSAwIG9iago8PCAv TGVuZ3RoIDIwIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXVtv28gVftev GOShTYCUSw7vD33wOk5hFJu4sXZbYBMsaImO1cqSIkpx9t/3G3I45FC8DCkPzQ2Q2I42+njO+c59 Rt/Iv8g3YjkGTX8zTdMibmAbHvE99vs+Jv8mG/LTZWKRRUJMI3RC0wq9uq9myYI41DOo7RHL9Y2Q 4nWW5xiB5TjEs/E/p//gffk9PSNwiBP4husVL5lJ70lM/MK//Q1vaoUWTb/nX/rsXzcdwMUb255P yeKR/DzHK03To2S+mNl2+nr+x/yR/DSfW4ZJLDK/J68JIW/I/L/kag5QJVEowsITBR713SZ4AaQR ODatwpNAzaqgPHVIsnZmLZIKITEzgAaaJEXaQRmEvF9vn8jVj+hxt44TQoyev8ibmaqk5cdiCuyS tO1A/25QPN4sMwTpoUhV0r6ipGdVHqQ21WCTtgtRB3jjiqQlKCdKr7dDg3ZSkim9LJ3U5qiDdwer PYfYRoDvOF/wHPcklRXjZN1L2KN2M/RUQU0UKBhqhbBAy+OKEQyV7e5ERWCoMkdr1VSWTZ0LCW0j tGE6xOcAMxcyUwXoGZYOK7JM13BMH0qSYHHPNpsvOuQGvgqqPq0OD+Tm09X76//AIG4ub8jH3WG1 3TRzeCSuyiYhEeTEEDRzVZayBEUfV1PbM5mOPSMMEQkty3AQxOrZmr+ozGiNdLWMwJ4yW1N8vclK NZO1hGo4V/9xNf9D8PXj7nK7jMtcPSeQNvlpGgRGGISIWrDB/oqXkwE5mM14flmbVJ1Gki6HXYR6 CalE2RPvEepQexHpMyQ8+ZSQjOA8zNDwbRq0O4/8ReM4D9MxfG9IrD9HTV2GU2TjHB53HpK+TixH Ne6gVlKvW4psXILCPUZ33YLofn3x4YJcbjfJahnvIxbOe+Xk5/iQLkHbDjVcG2FtmBlYWhKqgqyy yCXt62OrSMtNanguQn2ZiKzOZnk5NVBeM7nx1/iG5wQ8G9AW6b3Qx9sOiPSjcJWjU6JqoIhoGFUl JH2YehsvjvvV4c+BbB2DqcNsQDNRZYGPzFMvdA07RFRt4al4zUg8NdFbM53+BbQiLQaVzyKoeohp DJ4SU1XTsaFMLUPpQ9WLxf8226d1vPwaP8abQ9KzxTUOVQeZgXauSiIfm6woXiyKwrmNrPlrxiFr QJElOcFUycrhcbKq9ros8xxX0lR6ig6cJ6HivFVpdX2K7+N9vFmgLW3ItWc+2zitPWu9XRNEy7UM 26QhGQxRLpC7vxvFlQwzUktLD0Xk5xURj+5KTCNA6UrKbqKSn3tBzWv05ee+awQoC/q7kpEa5x4H 2NuZ6Oqch0hEqEVkXD3cyYft/hEV9feYSI6lm7RwPlpnXFlZnT9XT4PQTVvJCuTphL6yOu+ge75t +AEyAMs12NxZ7qDzulq8qMxtfbz1AsOjQ1KAsXjLAfbnrZYAYKFFmfFWwtWDt9eb+6HMHYW3wwxC N29laY8UbgVvPc9wKcJtK2/zF43EW+R6bkh7utczx9RNmWdRX3sZrIytyqy4OB4etvu/JuRiudzH iWJFew4dmp6EhpStAhGPPwiXr2RwJ913Ldk8AoTh2YEroPSUaTkROKcgUu2j5xLr66i1uOkiT5cN UtKjvoAvmuSei3CBrbGyT8jy9NY9rl5ln1he8VzHMEMsttVsFSk+62kFytBKm25t+1sFFMc3sIKX b7pJYi/oM+P7bYrmeQKlbcGpgGJj8uiKJYEGKPmqnSKUgQqykeMFwRT0Q5GBUqxc1ZjK2Pqx0BYT CeiLqsdCxcz20GqEMjZ/TCy2Wl6tqYysHxdxyHatPNN4SQW5AbypXy+VkRXkoitlWtjzrbGVsRUE V+c7bj4bfVEFeZjS1hrt2OrxTCwmIvBOQD2uDf/2cnmkCISugxadj43aGpmMrR4bXQezPhKOzR4b FQu236egoHQZul4qYyvIQv5m4kxAja2MraB0KcyfhHvDygvbfK0Rysj6cdLBvz8F/4aE1rAmwR8n nXhgeXwC+kGn1zPN2lA4Mn+ctC/lTSECOawaht+fgoIwKw1Dt5bLYyvIQf6Gbs8EIpBjo1Hh1ktl bA+Ho3g2OwpWQ+bnUxDbnrJcL0Snkn+FIzX5zxqOTomEyqHI7ES52LCecCK2n7fHRbSMVvv00FDp t6sfuxWan+SXaL94wJnEt4Sall16Qfbl7zfR15jQLzq6n6Jtxh9Nq0la6LlYTX3YQsjouQdsFbXG Dk5kq9qIPekktTa1kKtCMCFxWqBMxSTNABPGXFiqJnm9OcT7TXxQbH6VpTdLD9zmjCm4U3zVwCJx dMwRkGc4E9tevf5NEeFJe05wusBVfNWIkI/6OEJOhgahFgbAW4nv9tH94YS97FzbX8iHiznSlMp/ t/HuED/exXvGe6qX3pnMtdKbHfPtPhLtmJbhWsJiJfWPRO/8dLYd4iyqi2XaGk9TaHeUnrWNgVqI RYGeJmexExebw367PC7YWYsSW2biAL1Ci79Nc5btoTJEF6GCUdJcIa5R+uq2jxY/m8/WaG5sI/Jx KqKoERucxSko5W2KsvPFbQdp4GqkmZjL2sNgzR9WCVluF0e2Z0yW8f1qgwQlIpv4qTihW7Ky4pqG Uys78cltVkapb/iha5Na4N3blpuf+IHE389B1zX6pCitTAd2J6PsuM7hWhESNH16VqsbUojNQNwq IUOS4+qJ+anG1YrxEbN6rr/u7DpltXCIqq8CSZUb74xVfLhXF5oYV6a5CbOyTqHlo/YKQsmnjSs0 20QD20MDrgJJVWi7xW6AxIRD6ZKYjbOkoe1X0b2kwJCc4zTnCSRVgd1FSXyOxJoKGRv9ZdMzByvy CzlsteDK7yKpGJikwiKOt6Y9CheAlGnI7uBJXScuxYEFmYbLrt5xkVbkxwiZn1G532NWuvWnLZyI atLG29iByBRUjQOZug4dFOF5GKxVukqYRuLL9So9ChTdbY8HcniIyc0e4foHygy9IdDGDSAO7jaS Jat8Mcmn95ee6WrZAaIeNZAUhhVoyktpX8gxiZfk7k8kPCjbFA2gV5pj40IP3AeENEc2AImEzxt4 Gv0UmlkOtltboWj0B8yOWB1o40ovyloYuCuLjfrLO9KtO1NpbtLfIbiYXkzPHwxCtdiy2m+Ng4G8 wbCMv68WsV4HYAW4iSMMYTdlzL34bzmql4n1IhdFkwOXrYFcZWTq9Dd0MB4OycCxD7cCqp3w9cFH IepW0/NUWWzDyXZRuVjodfRlWS8NFGEXt40Fbn7stqMYqX/a04Kythhpcm8FFAdnMMTgdDIJwCBU aXnOb8lCob5XNFgI7rSwbBKchU1Oxw/AonqIHcVu/O2IocYSSSx5iNc7EieH6G69Sh5Wm69ksX18 PG5WC34xyF18eIrjjZbOJ7/sgz/EBBqfNvpoLkuAs55VZojdjQ31TLQXU4tMdBis65vvWnw47uJD gsQuOJBxtfvLs9oZjUTI77qrQFF1IdvN+k/ysE1wXj/aLMHBx+0hJhCco0jbXgqluD8mcODnKmhf QHBFHJZ1qCq4VGbobF9syGq9PiaH7CIhEmeXfJJVokOANlbUfDNEqJRRtwtQc+yimEg5YsFSVYDq PqMSUlWby8NgJQ/bJ6h0Q96vvh5R8GfTC9SuCGVct295IoufLIouyKy7DihfB9zWGKBe3i7lz6AU GVT9Sz/GijZpnTi7I8N6iziKSJveo6mvYs0DqQzyZVmBXqQvzppMhxWDYCXx/jtGwE8Pq3UaHVTD ar+kLr8pAqVIWXbtalQ1+4oXyaYEjWHVddmtKCiIZCiqakzD6u31Dfn1Ar4EewzRAhG2IAHJOmNa ijkbFSbOACBGyNjbxag5RuAeS9zDMIkptoltMqyG9Jxiq4erXv61SHE5rJ6Z93URqN5mDdbLG25c SEGSYzoYZesdv1zcgAHf8INDaoda6hmkdzTwkRfLMpYsr+jWjTOFx8jK9sXxw4zA3XFLv7oHwbr5 +Gn+x6er26tPv13Mrz9++OPjDfuDFbJY0mNOGm3hHVvj296T3XYPp7PL/oJVtruI3aWnRfNibsPF rZSxqPqcXowSPRWKg/K4t78noXQrfhgqVpuxRipyUnYbotbhieitSFA7Oipa1wfEFVISoo6G3Vl5 Qdek2crzAxmRanrwzsBALNu3VawSefYyEx8nwuqHTpS4ntRid6PLKCV3/LxznC5E2CE0TDS/ZUCq YtO8PkAtdtkNRnMyupcUV96XlxGpymt/0LpuIdahZHQvKS+sNWDLSMajLq3ztlOaagmK2BhauDJj GKwvrMlUieksHETlRcpnW3ETN8TLYNt1Wh/Hh0yCWFvfw3YADeEnWL0QhoaDUkZ53jowVUAabqKl NrVcYRis+AdbnI/WaRuXRPzymgjNLGxgbBBJDkfs1ac7BOlKho6EULSwKH+GnuUWKhbec0BqC5Sl MPlsS8NiCaqCUTL2kcsVLBmkCwbTmr8MQ8XLTVZ5sAqUtzwISQeE2ZZQOmNDoSqWWphBpmObMy4D bHLEdr6Mxx9HqUZRTSN7OR6xYTNMsHl3qUSK5wsA+UdwydAkTpzkjPUB4LmG49THuM3sfaRNvZLj yXX+WX2KA4aBsNARhEu7O67WS7JCfX777gbFOi7hZd1VHLFjZV60widSxD8WmCvhKk1M6NhALvfk caLDYecfPJE/lRI5VPXeixxFAY8PQMQnIk6ugh8G6/PrONnFi1W0hj4xX2Ke7tXi76/IGscXst4d a9jgr5Zs9wDxGTcyksd4uUJHJ/0LPXrPJ4r4wLtU2lNQPD4C08L9n1NLx4bBYooWKVmqyShJVjp8 t4WtZXyMKKHDgH4tJ4UiAfv8BgXInIXlD79dz6/gK9MmshYfJGyRP8AUbNHBLBafVTo1WxwGa7VB TFmyjIxZZRF6kIHhBxvmcp6i/bIoDrIzoVkOjuXt7Q9N7ePsembKn2oSeseROVtcpZU1EV5+bkAx 6R4A61bMb5FhPGFhBTReR4hD2MpP6yuyQFyC2jEiQH/58+uVERtvsz0gHZl4PqLMH0dJ4ZpS8ezM UI6kJ8+1puJ8q6EC7UVTcSzE41SA3CjBZ6519OK1p+LDYP168fkNbP32EO8S/GnhO7Dh82v785s0 6ulag7NEX17G3a5ZVfOvVDPtiw6iIS8jUe2Z5ubP9hyixQJ3BaSBhBc0rE2pfH6tV40g9uBoHe5u N71Z6lnPE8WzDKtdsapVVC/FFlUUDXCtfyWQTYCyw2DdRYv/ibI52iRPqJtRTEXkFT7um3z85ytU TEnC7qLJqmkkNmmkKzIabOVoyV2F6vmDKYU0VdX3IkdJ9WzaVvHW3eRQ99a9YIlVF4q9pAGw0uyT 8EyGuZYsNz1iKr4mdzFLapfxGv0Svtmvq41IA+yG4TYFkj+HkqZVvXcvkYpPHs6hDMxe4L511KNF g13WuLo7/D9sTld2CmVuZHN0cmVhbQplbmRvYmoKMjAgMCBvYmoKNDA3MQplbmRvYmoKMTggMCBv YmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDIxIDAgUiAvQ29udGVu dHMgMTkgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagoyMSAwIG9iago8PCAv UHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250 IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKMjMgMCBvYmoKPDwgL0xlbmd0aCAyNCAwIFIg L0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB1V3/d9s2kv+dfwUue23tS8KQ4Pfb3e65 jrObuyZxY3V79+K+fYosN9qTJUeSm+Ze/vj7DL4RFCWKpA1bdfsiEiKhAWYw88FgMPjIfmAfWRj7 XPwTBEHIkjzyU5al9O9izH5iM/bseBmy0ZIFfhEXQVikm6685YjFPPV5lLIwyfyC47kwjf08jGOW RnhZVHhp/2bq5zGL88xP0vIRr/KbLMB/qPsjfjQsQi7u1WVGtQcxyMUPR2nG2eiKfTfAk0GQcjYY eVEknlcfgyv2bDAI/YCFbHDJDhhjh2zwT3YyAFFWV9ySrBy9kMcR70vW+cHZany9ZOcH8fkhW81x kZ4fnh/6jB2t2OrDmI1nF2x+icvJkl0v5qPxcvmEvTz9NT702janytmmXuZ57hd5EZnmeLKXm/v2 acue9daFrJGUgpM8GUoq/PYGI9ZM03w2/czOXp6yH4/YaDhzQWGUQDZzkLEmkhXCvJogtiSlNiK9 VqMjLPwwCNNKb2F0VHurTlSX0WGLkyBq66AtR0c/spYk/Ffji8mQLVeL8fBqSUOERgUNADa8uFi0 7M1uosfB2DgNWbaJ7N2yhyH67Hq+WLHhkk1mF5PRcDW+wJWg/Oz5qaHZ26WI7K6W2nCbfoxi7icR hosiudXAbasSO/VeqanD0M9hImxFvbvz2ivqTlRZotiHqvnl5XjBPn2YTIXspYaFzbakE4lhnPlx lkOfVDquWZ201b2d1EmYhH4U8GKNEmNrd2iTNd3LZvMV2zCUMTrEk8KYSduMAXGXQwJIIckBGWR/ 7sOQCGI/S9fU8x6MiX5kkf6Frhsv2RCW/RrX49nK0nNsOFt+Gi98J0glKnyeFgBeivY94G5aYAAD +m7ATHWL21KDdBq3RvWmRQB0HsQV3fvwMGCNrIpmYwYoeRKxP+7bQ02oEv0SBjl4pElRYrNFtZVE qWnEU/3XkrhuBoDHsOFBSVyFfbvVxGPYTuuvbQd2ozFP/IzHienAjjSK/nPReRx6II+zW3eek17j WltpsevTa0r0nHQeuIoJfNaXq1LynHRdBONdRL0p0+O1LU7qNBiiWCGMNbZWFFtN9bftpk6q30xG m0gp1ZnSsW0nADVSmnRsaYVyDk9QnHfUsVBhLmTczABSRVbHMfgFONUN7g8SPw4yeM6qhDVLUVuB rrGuyY8QBkBVEQ/XSdliHmuiTXj+i2WCcPnl9dHASbfxAN49Hm0mdbexjDWd+BTeBHIWMVlIrI6V DN7tlIRn6F/ygFaHRoXV5SjVoMPFcIgidF8acENKx+EgWO2EMO1W032kCKv0UU3y2qqMTsOh1GRZ 4ufF/uHpfmR90Y5RJe5mwCrpV/dfThfz3+BEHS9+HS/0V8qlyr64mNSVRkw1bB8mdWnupzzOOw4P 9KGLwVEasSpZzYPDCeIop1JVUtraiq7IzB65Hi1RNWGQ0Eyl+hHXcyoFGtsvaYVmKrWFxh1LWvcw ldpE2G7Tqjuvrdh1wtzlVKofcUbscOFihHIzlepH331MpfpRZnrORbeVU6kqcQ+g2Eor1EBKCdLu ZyqVwiOfFLz7VIqMuQuGYZXRT3Kes1SR1tFAfsFS9xBr3qfHp+zV0Sl7e/LDjydnA1AroQbRrf5q BY7Qh0HE1c6uiGDJdx1Y4KJzS+CZxH5Q9FhEc0EV5ixxUmSYHfalCgx1QVgpi/0I+3L65u3gH29P zk7e/v1o8PLN63+8OaWPmuDVClxLomrPPuBgrE4iIKgad7MbC6gh7Jbr/Uj78ueNf9/WmFwrcM11 1Z594Doc11nSQ/8Ivrvlej/SyO68r9ids9M3r89O9sHuqBbtBd+h6/Mek17iu2O296Gso4Z34dzg OSBcjLDLNBIt6AflnI2ryLgmJXmtvG5fWrLanruL8NImJ3TpmdxOSQnD7gd+88TnnMf9eNaykzpN g0vIo0jrCr//tNH4/blm62oFro1ftasfFHyHOeIA91IJ9qKszkqhTfZgwiWbsw92Lwz8POfVwJk9 Qbn9SAPTzw9CAB7y3L98/feXA0Ad8UdIiFe/EA9Ha2UujGGp41Wr9oH3ATZChOlejvd+pG2d4Ujd b+zSHcYhcx07nSqSO5pMY5W+rRH/rZs1J+P1qRL8kIYnKSiuBBtgOodO08A2bG2Ope0HN3qSRqZH bG0RaogHAXvzX0IJwficHyRK46hyoYVoPwypLF3mVAvpVu2BFkpyhGBke6mFepL2ZRvUXC+vP+h2 xOv27AXXObxr+zni4fbtQRqN+E1/tfJageMJBhYtRHv2gevw82cxwoEePmI8SRG7rqHPVtvnia2U LQ1MbdLftGBvVjySNEA0XJJ2xA2bRE3ReacRXGZrzF3Q2bIjO1lqHRan6euIIV5MfrnBZo7QCWmA Wtiru0ZZRdjuOa4rSSLM8DcNv9LBxML7kPoYAWZZrB1MlT6xSZF7mV0wpxyAEQKeAuP7rZByd+zx o4KHSVp4gb7CVm5Vtm2Po0UiuVKx67obPv5ufjMaXgwni3VlcfLb9QS7l9ir4WL0ATvZnwB1htH6 U+zd6fCXMYt+dgJFddRjgkFCbXNqnkIsXoe7uxlBVDx1LQlNruAMoohwjIIlDaSU4+O2vmAjgEYU LfHclZggCbFAGqwJ5e49Vy9nq/FiNl61HNO2URVRcHWadw+kUEeca5pbCVvvcKl+JKpI9DUSt0QX ljKgwjKeL4aXq9oIpmCTrxlFpMfr352Nr1fjq/fY5Yuxz90OcSUprXrdyXS+1KQI+M8i7JraAwQa YFnM5PWomJ2Su7cd4a0gaFwkENmsBwRtOYg7AToT8qvJ6mj1jthyPr1ZTeYzJlOIXM+XMh3BbajF xp485VmyzYiY4NYq1dCnKl9LdQ95yWE1fs/GI0Gy3oYBX1bjzvBOXWqclFXiqiTdHdZpsnCcR36R BRlbI2VLP9WIGiJDRks+2qYDi7CCKkrV08hHE27bkz7Nx6QHkTujvHkGj30R5Oud16w8/B6kiEXr JuXBM2Q2ChOkOKoqjy2kKCnfzDofPs9qeqaN0m2zTgy3AFYtLiKfF0jDFMV+jEQDKn0SpnSXTPAy xuLW5ofoR3anbGqfksQYGQSS+KFjRNu4G8CiBMt7Kbrp4c1dTLIbQHbtOcxuuMiRGerH5ZgdD5F3 oYsge1ZyryZBNjsn1gisCHJNDW0W5I3JtaoC1KQbS7alqZ/wzWwrLUcjNqiPqTV1iJFS5AFmoEg7 5ucJsp9xGCt5QUZOmGEaO0h4hqRnKTKgYf8cEu5gigQP3u6xs3EMbzOfZdMTynOxJiatFqRbCkcn skos0o+sAWUxm7SV206khWHkw20IQ9qPtOXNuK0Qd6OL51jLS3hfutBhIn/O9Xg0uZyMKAEWLYu9 v0GmFfy/ZL8Op5MLdjlfsOF06mTegswKPM9gZVXP3mLeUh+Glc48PqNhGCQiBAOTcFiyMMxRpq/O jqvZAZ8q+yYSG2awwWKzeQS/QQI/Tga1wa5Y5XbKzgSSVC+S3ahXQko5IovuUSWiCtxQjkPOulVA 72CjBLvyRH10G+C2dSW0MpkQGjCt0SWCtG5VyTaIBiGO3zTIa9kj5h3RIGZuywb94Jkcky10f5MZ shQg8j8UifaHbcHFpRXQyMrNOrilACVZFfO9Wy8Pr6+nlA8Os7Elu1lOZr9g87lIZCcTKSFJ3GKM VGOL4XQJSz9Aqrv5NT397M318fxi7GR86wiIGGm/rK6uWPx6B7uwLyXXY6yMUVpRGx3t7l44dVyQ VXK9H1kX48vJTKcAhMq+mI9urihXFjJTsvdjCIL88tfhYjK/WQIUfBhfUVqtJZtOlkge6IbtSJiT Y80vVo26hVqvD/aKWt+1W7dke5T5KRnLPWN7P7Lej6fzTwhvoYSVxEey1mTLx799GN4sV5Nfx+eH /07y6rXKSlsFzk3Ks/RvKML3grWw4pR5S7K2olxaTifq4GErhi+hu43hYfOyBHPjmFPqEIBqjouM ksg5BvFw8mBetW9S3YuquRsVK1iThwV406evXgD+fpgvV0v2abL6wJ6/PsPUzIUpCAEtA+yI6knn aHg9fD+ZTlafn5DVh9pXCW2J+G+g+Vc3711ohChE2rY0xOxIdm8rhdB7wadJN0VIUIuknOsd6EAf 2JMJWsfrMZmgERtjPRzQP08TfKhbT922hvExFLGsRFQhb6KQTdtib10BkqtLKmQVHJ2pJhOUul2u CK77MYxDg7wNytayGPPlIsYoQW4TysmOxUvEHxg/hqdSxdcte03nNnG7tOwQwDzJdYBDBxjvCNOV CkdR1lE7I15gPkViHIXSaeCiZ2QZ8tqKXM80qKGQplO2WnymkT5/vxpOZk7QHMZ1jPRd4Guloyvj qiWIr9vZGpqr+co2y1iQ+mlOdjZBnnx8SjtLtblxNAe5n+2ljEnCOorY+cEMM0VCiewIfxCv0Xxx gWkB1nwml+T+AbL8LJLvEqy8nN/MLp4IwRP2z4mYmblipasfVMqiooDoY9KA5Uho+XuQMvg/wv0U M0lZRzm7vJnJxdaa2vp4M4biIt9iVfogdzO2/DzD53Lyf1iIcHAWhUnDgj2zdn8/sKxxBAxiFgOf vE/BPo41WlTA95rwHik0XZtNTVlHWROKzAkwDwFVckTt9SRMKVexvEZuOZq0n749efHyv4GRKG7o jfDDSf1qo3UXoq+1rG7LA8J1rCMLL5EmRfG7Mgrva/6usWuUC6IwCCOASsKuTtfgIvj/ityEJkns 2soZ6XwQ9qPM4FTyP07Hw4WEq8jgfzn5TXojSedTwttnIjfqaoFU/tPhihaZZo68kYBuQYG4BdWk ViK/eYp/Z/iVlmzyANo+hLanRVg5SXKGX6MM0Xg87BF45lzQFGUdtX0JEdYQ7IiQLNTs9LOIxrlz B2iElMoxTgtb69GK1rqb2ZDtZbAWKkt/Q7slyzCEpU8Qe4pjr2iCX71v62fw8Bq5KagaWYm8S/L2 K46yCo8HCHRQlKhKaDVVUtIYirfmIJBxZjsDHaKM+8hAr13/WzjlNsZD+4cj2BWOiSR8I1iGQvYj 1wYGvqUo37tjYaJ+ZLn2EPck62jJTsdjJweGmZipNdIqQlwDSW3dq2vjiQVNMVOhDjdZI2WLw61G 1GreEpx3oypKEfdLUYlVkap0UKmP1Sjv3UFNHskQSbZyHG2lKVE4Y0v/lDSpuAISISzpnfJTeGVG 86urm5lZzyfMhFPqnATh4Kwjilzk63Rv6UFFbdserPn3mnrQRN3qLuwIClaTq3G161qKXCcq9YF4 a0RW+qsm/W3xZEX4bQRw63UGoD9pdsWyg6du29p/LFbQ2/SWWWfgIdrccZ0B70gYouvDhFTb/o7r DDjtANut4ZXbYkvveqEBJ7754V5CaElYx8GCkIH345GLARIiU0sWJNCEvQibX5GX5Hp+fTMd4mRE WnV9Ozj+6eQ7aMex/4v/hEFHCtfhKzrA8wm7GK6GTvyEekGxyvnKQK+p8bYDvaZy2i18RFhTK+Cl gIcCAS3u543YPJonwR4urpETlyjrKPWjD8PZbDxdCvm5pEM3hQeCzuAcr0bnh+SFw8iQoXGVKCos sn0YT6+dCJo6YlW3aS88FAguxWHYpF0ROIv8Ia790XHkZ312xjl3UEjCOsoZITa5GxTyhcXc5XAK BzDFV5N00RHS8xmO4P5teHUNGRxezYVjGPvnnMiXjtHA9m+rkx9WkdE2ogCzcqREx5KXc/HCPCHB Me8dQTmEy7l8Kco6ChhObF/NR3ME8zox4WZaVaWuIjJ7BXJTuPCBTyMkfCTfkrj11G1rkJtinVdW IqoQNxzC2Rrkqgp4HikqVBWEeZWD6+4D2RF/5AMD66W8Co/uC58YBxewXwC7gbAmdAGWzl07thFn WSDQsvu4djFsTDg3TroTZHUc1M4dXP3IOraCycmwDWeIDSn3G6jtBmJ7gQvzxVPuY+KJ+UQ/Zost Dy7YbRJva8IUuysjcK+0pAw5xHZdUpY65FDdttaSauqOSkpXQJQG7bWkrgC7viQVwrVAsyytJT/C 3RES6ty+iwruNlo2MG2p3rdqDCkNvCZ/XbTG3FFz2u7nki/B2Kj2mEqsBrlY10AgJU4O1Pt8K0JX qv3GdY27isGMAkxGscP1FhOXOim1GXKT69CEg0YBFshoZaXbRo8I6Pzt+OMNsjXR/pkl+344++UG WZlc6I0wQyY6jjXEKq0VDrZUG/Vuq3gQaX9Mk1PfdBvH7n6cX75Jgd2zLHEY0SCKeixVu2CVseia rI5yNUCwz/8ilPKTiK989OrHs8GjJ0x8stdvxDWdT/Xy7clzKj/729H335sL+YQLk6p92LpVezBw sSyKjQRaAjuEwrhley+qwMc3P36vOEpXJa+P37x6dfL6uWT3q6P/AbMp6vaRPBfq6PtHDDs1yQfl hu3qWHHV2XvBdiwABHu3hYlnvcgy+y+HiESHxxBbMCeUhg0BUNhsSdsuL8bL0WLyXm7LfHcbJttZ Wj4iQMTgJXVpFvZ0WxS32y5Ivn1xzBGy4WJ4Yf8t8EIO9Navm3924vSIdDqCNar62OV6pNhGu2zz UPArwlI2XSD0HGHnqdCIip+79zb0Q0xIf4Kjw43m7dPaO0MhlAIFZyLvAwyJsSyOFFYdB00MHGmC e2VgrxlAd3gYQoiD3OIsj+Cdr5BZYV4J3HTqAkPKHaY8KyEkVjHSyGQar5By32gWUXpYnq9OAnan QIr9EOx7MV9cDTtmzfRo7XpnKi+zMIqpok3fg3YVwno4zbQ37J4uBeheZpG0ZzrAhq6OQ86Rg75E /oqsHsgfzjKIEptfljqhDPinlaCL8fVkRMgAoE8lyOb+bUDBtmjICLuqcAoAjEu1kyuiV/K7UWHU bZs2PO/wXsh+xkT9gokRYUew3CKGFQekia2yGc70IY8RokjI94NgFMtlZEOgjYl3EPMCvwBeknEw SZHrG+nqMWO4eSk+gWc7BmL1Ypyhiv3GFA+ry5DJSJVNUZbg1J8CGyd1WZJDa4eU4QvZwQOko8Az sgR1YTmbfDmmSGwPFlmB9EMooc2OnF7TVYtVNLxXEqBKvBHSb2BHOW1bi/VTU5RhE2dIu8x1GSXp CARRunarJIefQtSkn1FkUkWmSLWlrFq3tyRAlaCqD5QukH1i76SUVIDrRq4xXmQZGJUXxHh97U1x jex/kon4jheCnQUoDoCcxB3EBR2qrpFRlN6hpzKMbXpR1+CFGW28EnXTFd4BBsNzuMY7HKiEKpVP QRStGuQd6qZ3sAQT0m/SO/RUqqkxNVArZN10Rb1BGZIaM1N52FpddjbYF9HuMPhuSwZI0WnFE6/G E1BRCo/mXCvp9UrB3CC9mlKbrLJM7tKNAWNSCuIgaSwoLpoGdkggGLE3UYjph1YtenCSgjEJxoMC Nl4kaMRZ1rgs60PFWW4SjIM/9JT8UFgESfZQEY6deMcO3h5Sqi7ODuDukxcTfTHTF0N9MdUX2K4i H0Zkq7xA8I+o5tTUY143F3j4Zzb4TyYys5D472yEsodlI5IIy/hIXI4mDa7Ys8EAvjvZloN/KSHe HdVt95NuHw5xkA02F88O4bFHByIbq/zmmeoK8wTX3+hKzKPIVCPeNU+kumP1o0ev7E4jXzopm4LS OMWAUrTOCKc7JktYeKQzBmKEBKv5VjtkpgQnQXWIc6GwF+M+hoyMsNtDCJD8UAIE/WcE6BhcReuv 0MbIfEAIUAbGh+wAeDJmB2hPyg7eHbKEHaC1oXfws7hGD2Ti26pkrM/oY+xHTgMcK7GBSuzkXKdT CUeihQOC/t0fBQXBISvYQSp+VZZ8A2oCdiC/eHLogZwn4mtfEPhIvKYekjf/IYq+Ev/Kmh4fspwd fC3qPhblz8E2z5b19RYlWNpLcx6ut6jS32U7FAwFHYN/ygFkravUYYmecm+AJZDW22UDJAGRsASw AhN1C5Zgjwwt/7dePxKwRO7P8cT+HNgiuVunFy6BsMJIAJ9YsEQVgSYDHXSRUeJYNaFcqBEeUTAl gncGwBFzYKuMspPSgKOq9HMU+Y4tbVblSG2CIWgMSyTvR6X5USUWIlElxq5FutayRP92aRGR/FDS CHrK53RLDCTRjTXWTxfYgAQLJRe7kkAKthNQ4DjqQAMScW0BErr3BNSAA43CnBQgIUEhoEAghPOs AM3qugCutQAJVjVxkJ0AJHSF/hegQZRagEQ+RVCDc12DvEPdEpCATvymAiSaGs9AGkG5rJva0wqQ 0BRDd7VHQfAZ9jFbeKQfR8BIIbU2HNFFdyC1ikxbSEzRGhYhOUzFTEFjEfGZ5mE/LALXGsJzCFZe se8GCoT83rCIboQLLNK+7gfAInkHLEIaCylhCcUqMEJHTlO0Nny3P7FZRywSYd6RYSXUPRaJboFF 6lQG8Jq2wCIJoMVTQKNnzx4BauAC+AF4CcYdSOmrp0+BRYCl/oD+p4dksXxQvYgTHJrxUoIAjIjD xaFpVNK7BV0oCP2XEl1UZqfKDU+HjGWwbWt10qoKJvQt2v0E+ImalKK9+EAz0erzQyr00Fz2VHZC c9MMYI3gAF470LUAFVCnFmItEZRsI5Dg+eG/Wt39R9AEWr4ynS45Q53uHXwLmsASyQ/JpD9Kdsgb +wugPzBN1iafIZzLDk6oXZ78UHea1ckxNRrPqKrly5LTsmp5LasD0+nZ428OPdCUyHdKgaDv8GDr zoPHESsttscxb8PD5JHsvUJ9ZqKRL0R37f55wJM4B4aIEGNPP68G+DrLPMzsDHinVt0K9Hp34IsT 6AcIA+mr4cKWG7mUL45HiPzsDHpFzj4AVcqFjWDdas454U9v54vDAStIn4PNYBXQq8oEVFUOM/2c DV4RMITDF60SuMQDcUqPVYYIJ7imabd7CXtx2BXy+hNg1rXjpGdOh2OUwFeVCCeacsfBgSOfssGv LtPICsFBqnarRNIg6lLeN7j3BK2gq3wOqfxEi0r4q3uixL+6v2wADI3RAQDjpHUDgHFte+Sgc0MF bSNsHykBMITGAOA4RZZC9RS251cAsAchI9BMQJuuNACmaxsAi6cE5DU1yDvULQGwEFTxDsFkQ432 yElKydsnrloB4IpHLuKgHHmUKgi4E1PsOZEU4goG1qyzQbAuK0VRsbx0yRnBsOdumlZbWMqydRwM kYSrmFwryifHgUcwr5RgRjr4EWDWziMXAQoFBIV+1yhYNcIJCm5d9wOg4KwLCkYYRUS+V4OC6VQ6 WqvpCYMxhU7ganEPg4EtervkojqVnVxy0pEGOAMXGky97Ywj3yDgDhXh+2ZoAwcODn7OWZ0c2mu1 jk6VJ9OADOBChQRBAuCVwlXAX8CkNqiDww9A66vyC4+IxhvqdYmO5BtwAnYDZcjtiXyj9jIw8u2s k74B0v71MXWccFwSDMSvE5QWH97Bv+FOOjUVRCT65RPyLTiszeM07RCeXFUHmkNviee9g6/lC0iB QM5e9Qi6gh5Bx9CHegHwFTd/kg8+lncC6YMuTGx2sBKTSBxREqnu2AISyf0P/u2pZxQnrFY8o5FI ItTRMyp2K5BnNCIXmdy70NMzipMgkQqs6hpVZcAIFo6Tz9lYD0sUBZIfGJOLxUMkNqa5g1UGV08O mCjqUs5RjiOmkOGL8KVCiRRwlWMvIkrkSjICvWSJjRJ1GeoyOM6UGaxnardKJA02StS0iro0ckTw uWiRqT3SPVGiRN1f/VEijmgzKBHXFZRI30kHaIxNGCVKpHN5gd6Em5Qyk2iUmJJf13KTejhDGCFQ AiXSlUaJdG2jRPGUwIWmBnmHujVKpN+kdwglGmoMShSUCpRIV91RIqfkW7SsaflJuzHFQomaTdbC rWFdKyEuUaKhwRZiTauFEg39U5Vf2ay0Ij8irL21cHs7ZymHgoC7/PcMEmUTXEDEtjU/AEDs4iYl kSnooDsDEG/lJsUGXUx372PJFivWvfFhncogTtu4Sf+qkIUEHY+xXEuoQ2IJ6yuvH5rBeq2s6m8S uCiIU8Mq4kclCRrAYNEa4AZlzTDGeCo5Dk0LEGloOdta+UtFkxWQkz+IG9FyT4AvlCnUpSlT4I0A Gh4FhfiX/IboN0K0+ICbEq/JfwnAga2PgVMVNMTjVq/jbjsJEv9VSPDoR3uQgJ/p0JmU/qWakR4D qgVI/gOaC3Llv0/VB5oO5+zuX0esbxZQimr541sg6Xa/5f8DKdl2AAplbmRzdHJlYW0KZW5kb2Jq CjI0IDAgb2JqCjc2NDcKZW5kb2JqCjIyIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAw IFIgL1Jlc291cmNlcyAyNSAwIFIgL0NvbnRlbnRzIDIzIDAgUiAvTWVkaWFCb3gKWzAgMCA2MTIg NzkyXSA+PgplbmRvYmoKMjUgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9y U3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQzLjEgMTEgMCBSCi9UVDUuMSAxNCAw IFIgL1RUNC4wIDEyIDAgUiAvVFQyLjAgOSAwIFIgL1RUMS4wIDggMCBSID4+ID4+CmVuZG9iagoy NyAwIG9iago8PCAvTGVuZ3RoIDI4IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eAHNXV2T2zaWfdevwO5D1t7x0CT47X1yHKfGW3HGiXsmu+X4QVHTtlLqbkdSO8nW/Pg9IAlQFKTb 98KmWkmVm1JL7MNzLi4uwAPwN/WD+k0lWaTbf+I4TlRepVGhysL8u27UT+paPX62SdRio+Kozuo4 qYtDR7PNQmW6iHRaqCQvo1rjc0mRRVWSZapI8eX2hO92/2YRVZnKqjLKi+Ejs9HfVDH+x7l/wx9N 6kS3r/vD0pw9zgAXfzgtSq0WV+rrC5Wm7ae6H7OLK/X44iKJYpWoi3fqgXqoLn5Vzy8AZOfyD0IZ X/6MBSWpoyROikNQlIMy+0woPFaSJKrSYnaAlAGJkJTZfkzwkMRZVBaHSTmxPkVdRhlCkSTlJPIU dYzWEmdnoE9RaTTPrDrEyqn1KfOoquPsEJQhak8jUFFFhc6qcxCoSKI0r88hwRV5FsU1svwZtKCs jNAf6WkFitJaJ3lRowPyj+7qmYq0jsrcJeE4iuNCq4vFuI8aArtPx1/f3C7ml/PlWu399/yPj8t1 s1Ev5+vFB/Svj5SOk3TvQ0q9eTV/36js7cNZWFdHZfU0R/dboXPdu7ZRr+tdEbfX3e9gEjCS3FkA FKmOsuo+8xdSBYipQcpRJAMnn5u+/ECcDcF5Z0jqPNJa2wx7JCS9tP/ietusr5ttQPU0a4tHv/Hc iTmJ8yiLS9SPPWZWS/8rE+J+qA1wDh0doTWJa/TiOtmHeITWIQb6lv7Nev5u67XfV89eqa9CG68f HUPqMmX6oVJaJwjbGknOMk2n9xb8LLyU9iHeHcA6QZGPTLwP8QjTXgB///SiyPaZft183DZXvzRr k0d1aODw0uW43Y3SpQeWmy69MRprkFIkVZQcLveGAP3cJEWR4kZuRRJHVaXPogiOMeZNCtuJdGE1 u7OrthE1RewM+S8MW2zB7fxMdo7tobYHOz/T0PRD6Z6mVVTGNRJ6f0GshM5tDF5Cp6C4EMxr5JUc MwtdQXtWugdiM1MdWqUqU8iWqlSVQvXKf28S5TPDclUoe0nnoHyFvrsMbfHTNPgkyitdYRpuBI3u LP7ChCLqLFzuoaB4vQW39vKgUE3V1VgWCit2uKyIskaSpFGcF6VMoGBWqN48QT1UVRj8WVbokq3v zrmsyATSMdJ6XjsoLIG4rMgE0lmUpzHyzP23IF0h5eWahHKiFoRRaVLWQ15hCcSNFZlAaYFJENwT EAnEjRUvbMkWhMmZSg9Re48NKEPtmadDWmHpwyVFpg8m1bKyotOKN17hhopMnxyznrFUIC4rHhSy C8rzKNFl7qKWJRCXFZlAeRXVuabTiidQMCtkAyp0VJoCimrLXobjsiITqCiiIk6GtMISiMuKTKAy jnArlCTF0yeYFFIfDHJ0fkdn6OnDJUWmT1lFMWbCHSssfbisyPSpcF+0rum87wkUzAopUJVHpc6G tHKPXRDqpTyrjQOgG3qwBOKyIhOoTqO0TOm04gnEjRUvbEmBcLs4qeFSsKywBOKy4kGhuiBMUEax PocGpHE7v8pKYYYLJoXSR8e48VLusMLSJzhUSH3sFLoNlftrQG6q3EI5xMppGpDG0DDJiiGtHIJy mi5I6zSqy1hYZHNjRZThtC6jst7pDQ+x4gk0TQtKE7gcmPlNJTNjoeJyIstvKW72ZXBz2aC9x/aD gaEuYLewUFjyBLNCJjiMDGG3oIuVE7UfTOHWSTUUKyyBuKzI2g88CGWW0lnlRO0HfhhMCA5Z5VCs eAJxWZG1IIwMcZddWCJws4pMIIwM0QvRYesJFMwK2YIwMowzmA+pxuwJxGVFJlCBCadiJ9veYwsq MeNUx8IaO5gVUqASBuAkF9bYwbFC1nAYGqZZa4O+70GQxtAQ/mk6r5yoBVWYcarqIa+wUlxwrJAC 1do4yl1bvscGhNvGRbrTGx4ixdMnmBSqAaUxJpxgPHOsHILiZbhJGhD8zJGuyiGtsATisiLqglIM DZMEPjcq73sCBbNCCgQnfr0zu8/Sh0uKqAdKE0w4FcmQVVj6cEmR6YOVEjAE0FnF0yeYFVIfjAwz 3GUmQ+VEDQgjQ51iPYyNWpZAXFZkAmFkGBcxnVY8gbix4oUtKVCKGacKjjXLyj22IGthslBYAnFZ kQmUadzrFiY4bqjI9HHuHuKu+4kakLWni/SZ2GKG9TUx+qI+avkWM6axRxQ1wJLldWnGzoGo4BKc AhiWzVnzUxCwfyn194/b5c21enZz2SiF1z82m2b9qblsfY14bT/wXXP9fvthx+1oDv81ie9tCMfu oljpYhJ+B8cjjsoMfUyQ43Fa6cfQ7tX3RkDxUllwVqUGO4PvrYfCip1JuprB90aw4tUCwaxQtcDg eyOgeAJxWfG6PVIg53uTCMRlRZTVMdDpfW8EK55AwayQAjnfGwHFE4jLikwg53uTCMRlRSaQ870R rHgCBbNCCmR9bwQSTx8uKTJ9nO9Nog+XFJk+zvdGsOLpE8wKqY/zvRFQPIG4rMgEcr43iUBcVmQC Od8bwYonUDArpEDO90ZA8QTisiITyPneJAJxWZEJZH1vBCmePsGkkPoAQed7I6B4+nBJkenjfG8S fbisyPRxvjeCFU+gYFZIgZzvjYDiCcRlRSaQ871JBOKyIhPI+d4IVjyBglkhBXK+NwKKJxCXFZFA zvcm0YdLikifwfdGkOLpE0wKpc/geyOgePpwWZHp43xvEoG4rMgEskvEc4IVT6BgVkiBnO+NgOIJ xGVFJpDzvUkE4rIiE8j53ghWPIGCWSEF6n1vBJBBntP43iTycDmRyeN8bwQrnjzcSPGClpTH+d4I KINA/epGLiseFGqWRzvfm0QgLisygZzvjWDFEyiYFVIg53sjoHgCcVmRCeR8bxKBuKzIBHK+N4IV T6BgVkiBnO+NgOIJxGVFJpDzvUkE4rIiE8j53ghWPIGCWSEFcr43AoonEJcVmUDO9yYRiMuKTCDn eyNY8QQKZoUUyPneCCieQFxWZAJZ35tEHy4pMn2c740gxdMnmBRKn8H3RkDx9OGyItJn8L1JBOKy IhJo8L0RrHgCBbNCCmR9bwQSTx8uKTJ9nO9Nog+XFJk+zvdGsOLpE8wKqY/zvRFQPIG4rMgEcr43 iUBcVmQCOd8bwYonUDArpEDO90ZA8QTisiITyPneJAJxWZEJZH1vBCmePsGkkPo43xsBxdOHS4pM H2c0kugzsdGowF4i4w31sPftbOTqGdjpd8TsXVnT2oxCgBn/2KH/Xq2bd8s/sLfkzw/+OV8v57+s mp8fHvrg1A6z9qJYHqGpZcd6BOySdY7+smIEbRSJXsoIbqdUyhj2VSOgDI1iyomtwV/WQ2HFDpcV UUof/GUEK55Ak+T0wV9GQPEE4rIiyumJ85dJBOKyIhPI+csIVjyBglkhW5DzlxFQPIG4rMgEcv4y iUBcVmQCOX8ZwYonUDArpEDWX0Yg8fThkiLTx/nLJPpwSZHp4/xlBCuePsGskPo4fxkBxROIy4pM IOcvkwjEZUUmkPOXEax4AgWzQgrk/GUEFE8gLisygZy/TCIQlxWZQNZfRpDi6RNMCqkPhlidv4yA 4unDJUWmj/OXSfThsiLTx/nLCFY8gYJZIQVy/jICiicQlxWZQM5fJhGIy4pMIOcvI1jxBApmhRTI +csIKJ5AXFZEAjl/mUQfLikifQZ/GUGKp08wKZQ+g7+MgOLpw2VFpo/zl0kE4rIiE8j5ywhWPIGC WSEFcv4yAoonEJcVmUDOXyYRiMuKTCDnLyNY8QQKZoUUqPeXEUAGeU7jL5PIw+VEJo/zlxGsePJw I8ULWlIe5y8joAwCTTkNN/jLJAJxWZEJ5PxlBCueQNxYkQnk/GUEFE8gLiseFNIA6PxlEoG4rMgE cv4yghVPoGBWyBbk/GUEFE8gLisygZy/TCIQlxWZQM5fRrDiCRTMCimQ85cRUDyBuKzIBHL+MolA XFZkAjl/GcGKJ1AwK6RAzl9GQPEE4rIiE8j6yyT6cEmR6eP8ZQQpnj7BpFD6DP4yAoqnD5cVkT6D v0wiEJcVkUCDv4xgxRMomBVSIOsvI5B4+nBJkenj/GUSfbikyPRx/jKCFU+fYFZIfZy/jIDiCcRl RSaQ85dJBOKyIhPI+csIVjyBglkhBXL+MgKKJxCXFZlAzl8mEYjLikwg6y8jSPH0CSaF1Mf5ywgo nj5cUmT6OH+ZRJ+JjUZ5iocLHNoL0JOHC8TjhJIHt4GqJDZb1md5VJV4qNnujlreY959UAddYlyo ophO3C3FQ1Dvfsztt8v3t+tG6SfK2d3MQ6q7Ddd2vHqz31SCm2P4B08nzFRWYW/nAk9Fj6O68Lgl B91uINUDZpmTJuFukBk5qojv9TnzLuLQiaQZ9vwVR9yOWHgUOFesthnE6sjjw6sCu/4aNHkYrIsP jbpsNov1stvA7+ad2uKtd8tmdblRy42ab9S7m9Xq5vfNkxH+GRd/G2pH8Ws32dTjP4dgg+NKF+cR bEmJZzaeX7CFwbpx20CafSKfqIsb9UuDCNss319jq8hf/lQvnn7/NBrF2fF2IsrC2Nm3f8bJGDrt Q+UmNS+/8vquuI7KFE9z6jLJCIpXWgRDoVL9kF9j7E1a6r7xdduker3ogGkwjE+h1ZDTOlSjTHt3 hzlEWbfZ6BP14vpyuZhvGyS0a3Wz2DbbTZvlVt1mpH3Os91rNMlupK7eHzF9RHPL7xTsOs2zOsdD S1z48ffGRe00BTB4JOoUTypXe8BGHPmVHBOKqInCI1HmVVLvQznSMDxQT02HiYz2ab66RdTNUb9l j1T+SBWPVPlIVY/UzVphV+I3TPAHUx3quqowT0Y9Uhq4rnXM5+zIRXit+8dvnxVxrj8H4lFodlZ6 DE1xY/DtNH2EnRXeQxUSgJGO4/ZpJnjYiyoL8y+C4Cd1rR4/2yRqsVGx6SN2NWz1Sk3pjpaga4xp dIFHBlT4VFIjWPD9d+oHqnI8GCbHNBjyAC47cSVGyMUyBhysDjGrYvOUnoDBHDNI9zRgltaBsNAP 2S4Fpc4H1NJtVa2Wl831donjrhN68epToW6v0UFttupju6JJbdvC6HbTXE7SF9kJBXthZ1BzZ2bQ GeOpSLujqrv7+m4Yz1Rf1DyGLiAM2Ttk+MXN9Wa7vl1sl9fv1fxaQepsCqyJdTrusUi35UnmzRLr dNyDcqTT8XrO5uqX5vISXWfbLOaXl+tmg4azvrmaksDUTpfvoaYJ5FZBe1mny/x3p2Xc5c91SDLk 12e7yGamT6IGC0OLCEPWi8ntukXYErsyKQvDxq5od1G5XvyYloldGRSIykzO2Caw+fMaEzOb5f81 6uU/Xl/0kzLtMOb9LbqU1fK62bjkMiPrBO8iKNmHttFTew69RW4eE3qWvUUYssubxe0VygIkPgxR Jx0WJHbhD55FskPiOQwLEruOYQztnocFQ+86IkyFdA4Bw4JWrwSjgSzHE9FzjNdPNCzAWrW6zu08 d8jVfrFxQYbHpmjcxtgtDr3pKa+WcPd4XFqkh0+7afHO3tAt4caTk0PA9Q/M+X5+hYnQVz8+//bF /xQTF4djoPcqaFpGRe5ii1scnkjQMHDf36J0XZ92Utua7rMx5PuVNo7S6lzbKu6GBoB7dbv+eLNB O/2uma+v25qrH6ibIbq5b2HumX3/9IKZaEQDUY2yq32KcnYI/N1DZIwgzHTC7XJ1OQU8Z0rbg3ev MYjhnHn+6Fl2F0HYBDMHu70YRij0HJd7eFE2gjUSb5gYnnItxjCC65AIb0UdnDdoNlE38Ya5N9xo tI11rj7cbLaTzKxZB2BP5zkMleCPrHLMKu82hruzhrSrFaW0oXYKA2fm1lY3i/nKGx1vsBVUE72P HqnfPzTdhJv7zHIzreT9tZyD5ngAc3mukgdhQ3e7wfDYDI4xQ96s1/PV5ueH3KkkWXC6GcwR0lFK 9IcazK51LzlzpwLN8zmTPUHPZvwTBu6f89XyErNYazjZFnCDbJ6ol09fMWkMFXRE430qmtZmHws9 vt1xLooGgrNuC7sVH1NLNInZ6L4oNRmZ9DuR7EG8VylhV6mr0s6TnNdYNg0D93L+p5p//IjRDjLu E8F9DoGSGNYUMTzExyDesVnluvkN1ortI4TP5iPuszWTdAbONraH8l4DroRtTCfnORuWhoF7Of9j eXV7BXPW4na9bq4Xpj9ImBkkrDfYQ3q/iuqogP2ur9FHULzRl6A1jv0mVF51ZpC0gCmsSgrh8Au9 WaTU182H+aflze16JNwXcgrDohIlZV2pPYhH2DqJhQ5utQi7Vh7S7cQlYgpPR5XH42Eeq6AYaXXc bbtXudLTCs7BGQjrqTJLHJ6tlqbmf/n0f9ELLVa3eLT83E2Vt5/oJ9ExKpib6hEY204BE16TDPXs Qil7VWcw1MNKhKgM8XAyZRfl1kH2IFQrN7vamj/2pljhn7n9CDtNM78y2k8hsLbbTfSssvTl2mhE TGq720SYvjAebddYtYHJacxKT3NfyfkCxhBH6fjUSRB+ixzLwkZzXWeQBMNgXTaflosG3epPZioL NdEK9yBaf8Ao2T2yKdG16C9o/tB2f4+0vwZpXdCZVTD5umm2Ji2ri1/V8wvch/3hi61XS+2q3j2M o0gcyqjTFAYa3opsbwd+1qzrDkNfzOo75OUwWE+ePMbeEFMgczPB6RjZSLtTZxEN40NZn0U1jkV2 dZxVwlbHNwCKOqUhjHpYozx7d3R3Vd3rZv2pWRtvbNtFtdbYrpdSr//293989425VYPfvmvXvV6a m5frZnvb3XedotdP+0Xn6ZjsUQieOn3E8EekLgS5yyIm1z0MVrsKRu2tsuruxtk70501euY6Byr1 7Y1E2mHt8fWlduO7tMd+jzWd3fjOQhE2nyO3OMe9KkWcqLG7VjHWfNQqTp2YY7g3ytQOtwUzrcyu ay+yuGPcMFj9WNXkv2GwixvWXbk371aQueIu2x3vIjt+av6c5namG+P2V8VqL9w5KVEEujkpjTty SYjZlym7CJXrBMNQGaOQy4dT4HOe8zB8r/pHKk1T7fV3b8bQ7jOlaMgZY9xwaAZv6PN738vhKGdY enF/KEZvrmFkrvKsjjXM1t2BWTnQRhTcSrrEHZECYwY42wFKqxL2bGzhMdW6P40N7M3yQrExZIqw HZpVECpuabm8/rVZbA9PI05TWxYRJonh2e4u6zOyqR9no7z17LVZTRrnVYVQQj+JBaRJYtaO2qPX z1Ab9EtJzTqfv/bH7T4eJXasbEcZKXDmiEBscp2rKzV6uVKvWwM1eRITTqnZ/3JmTtKeAi8UptYK JTuB+U5uUMza85mXGV52J3GraL22hWsc2lbfh+CCaqx1R0Gt8ag2xHzXtAyBdyyp3SsJ6GJz6LFK OA1inZ3ZuE33sIRNHtPr3eR6d6N1o5pPmJBadjvF3HT7xsBhd32zVavlpl/DYjo67Oxxs1hi44Vp lrH24zZ7VdO1LbMyjhtnGg0OORzYYjhvsXsLNqeaLs4K3HhLi3ObH8CqxRaWMM76inia0gMPEKiq JEUCGGELKT78TDzKEruZGB29zb/D0d2Z2BCXmxlXk7jMj/4lcmr7kp1IcywM6E7SnqJ7UWi1mjFT uT1BgYS2ewrTPXQovtxE7pA+zUqnwqXPkUZDVXaSiVyd1RFWM9gqaQTlxMNfjZxSpNgIoivYRlAG VshalbEgC92kTvKiNpVDd2RiuH/vyE4jg3DYZQm35205zR2hf31zu5hfzpdr5zruD57/8XEJf496 OV8vPqgEu6fgmTHp/qfUm1fz943K305SwdnNEowVyFzbZ3QzPv2jEg7dTNL+fyfNWO2szZYgByLh REGJ7fhwF7xWmoByLkGJ+fxYi4PyBVbjrq+bLXO0s9sFtIsHXaMZms9wdERh94ha3WNmBVvwHegw iLizleoEyne0Cmvcb8bmoOOGk/2mMZB36OgYoa7bD0M7f7f1so2Zrfuqv2Ox98vXzcetmaZdmzyl p01H4ws60huQfaRfx1jO37Rp6C1GO5fdfkW7NY3pGQJHlxqlsalHSixlM+WENrNVbX1iKhNuVTMz X9utjMyUyU5dxBwb5lWKh2WjytBY112hizP1Tf8eBpv9eyu8l0dFUiPX2fdy7K2aJWYlNgwjWJuX 4zPdOzgXltuYpWfuLaUx759iQaQ5k/1elsDLVpnv2XPjPkVaYZLTIphp+85C4UaymRDCZdr3VngP fyjJUdDa98xC5LhFZc9u35lZCOZU9kM9UHMm91Z/NcO57RVbBANXC/UBY2etfldvuji5Y3LB9FW6 LkuIj26jO561xyu8jy2oclj72te6bo+SyqiD37Wv0hiU9se1CZXuuIoRP+YD/RlmGt5FvDJ/xxzh OwiN7hjf0Sgs25O2nzLjNO3O0L4qcW7zHdxyNUFq/k73vkXjzmCuoju3OTJsmIqanIKZIUntkB1H 2txlvtp9rwseliYzq8kQlyboupge3mPF72yIzAPxiwqoRTqC5d7rJlAyPGS3MP5DE451ju0KTNNO UnOAyE6SpLbJxTbPUa0T1+ig2+1novZwOF+uMUvpnBTY7s58qvvR1zoYand57o168ONDM7Gl1YPG HiztwbU9mNuDlT3A/ET3LRhUugPM9baneeXO477uDvDht+rivzs/iwn/Oy+i7yuHi8hT2PdyM2PX F0u409Hn7H8bCo8vdO5dnuz1wWPdXbA7ePwQBT8IzO1vHvdUuE9gS8AxSe6j2CK4/a77RG2JtX/v 6ctd0swuNSbZ1GZzB52hU0CSSxBBZQE3tNnyOYsRU93OeTMbOOQuRX3goFPBcAlt147coE7SWsHK NoDS9kcfQMh/LoCeQVVc/RWuMXU/EAR4D8In6gEKwkw9wPUU6gE2asnVgwLvzx68bY/BQNn+dhwZ 7QZ+XXi3h1ldd6sffJRxlbdWil2cfXDkNjgQ6M+/anF0//5H+7d/ftjCBASA6t76y8MZwP5XC/zf 29/+Z3dh37Qv8CEaZzv8z9BRWZy2IKXQmb/t7uT/P2mdQVcKZW5kc3RyZWFtCmVuZG9iagoyOCAw IG9iago2NzYxCmVuZG9iagoyNiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9S ZXNvdXJjZXMgMjkgMCBSIC9Db250ZW50cyAyNyAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0g Pj4KZW5kb2JqCjI5IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNl IDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMy4xIDExIDAgUgovVFQ1LjEgMTQgMCBSIC9U VDQuMCAxMiAwIFIgL1RUMi4wIDkgMCBSIC9UVDEuMCA4IDAgUiA+PiA+PgplbmRvYmoKMzEgMCBv YmoKPDwgL0xlbmd0aCAzMiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzX39 k9tGkuXv/CvqPONZ9Y4M4ZuAZ+/i5PbHeW9mLFs9OxthOTYokpK40eqWSbY9czv7v98roCoBdrGz M0tCi3K4SYIgmHgvKyuz6lXxZ/O9+dlkZZJ3f9I0zUzVFElt5rX9u12bv5or8+R8l5nlzqRJW7Zp 1tbHns12S1PmdZIXtcmqedLmOC+ry6TJytLUBT7cXfDV+DvrpClN2cyTqh5OmR18p0nxH679M740 a7O8e+2ezu3V0xLm4ouLep6b5VvzxYUpiu6s/mF28dY8ubjIktRk5uKVeWTOzMV/mq8uYMjo9o+a cnj7M5EpWZtkaVYfM8WQKTPOlCQXMNGkRZsDjaSpQEo+808sVg1oaPLSzNMWPJQmr3Agbcw8Secg A7Tew8LsNvMyFrIsaUB/T0KapGmdzy6Wh3QMGHg6jJQQlVUdBmWRm3mUVX95d30FoJbrzbu9uX5l 9m/W5tkPX3397b/XpXl2/sx8926/ub563L3x5nq3N+u3L9er1ebqdX/u+bOzWZybcVgXZZ5UBZjt b2p2xN9DgI/6e+hkB/CeP7eNPK0a60dpUuRtmWXN6Nnz88Mm+Zlrk100mc/nSWONK+ZNUpmiqpLK BpfgwKV53jXCUdsOLwSHmhW4or1QmbRt23QX6g7ksBL/jPRCsAifmxX4XDVcBW22tJftrzKKd7da GTU328pc9EEry5O6QiDLSxiDCDVP8rqqLZz3NLMgwHLUD8EuLZN5ndWO/L6dmY/fzpxZyuZ/frlZ X+3NzW69M8+261ebv6GBvbremsvr5eLSLFar7Xq3M7u/X6EJ7jb/b21+fJ+GhV6oqfN5dVeXkjdZ UpRw1Xkcyj98fV6nVX60yYVdzEGTsz0s5wBF2iRZ1oX13gGUSP+UTGJVVllvnBNgzqqYPjiMSUEL sX3wmMOOrxQuM7TCGvbYSNVlC10j7Br08YiGftPHtvsjmr21rEaEQyRqEYj7kHbryEwcivBBxEVc KvNBzR+x+RP+6S+FD9qwRtepXVyb2TCry3Y4V6RYVLdzfIMPRQecC/uh92wUI0tS5J5pqWwUZuLs o26jzHpqnk3RWMHWvGqy1kSadf7MuHj9/P9895c/fmkWu931crPYr816sXzTJ0y/rFdDJP91s38z aUJUoAZoyobu6D1Sog/mik2OEAWbTisRruPMer7e/rLemlfb67fm1zcbsNzlwr6r3lyhs367sMmw +XWxgwvst5s1fCB5n276ru4ZDRylzRx0u5s5BbrnVdK0FHkOguADF5913SR1Tp53YMoQj9niM2wE QR8s6xlqJFJVmyuz1Cox5puvLv6Daq3v3p1fr9Y2GM4iSnbO1KzOk7lNFepDU+9AzZerU8TloRdD gZO2VEMfmPLQvlRiuCBr/ZjKHWVGaBR6VHGfOnat2X3579B5xVn25Wa3vNntEKg+N19co1siH7vu anmzuFqhrLfuZhbIG98uNld7/I/ubHOFoLfZTRLRKmSqDYiu3V2dQkQrWuQJ5IWKkRw59arSZ6A+ zjJ0YJZ3P5Czul7evEXViVgzRWvOYG7WYkCgjrP2i8UOPgdzbUf712/gfe9u9rvH5qV1WlTG11eX f8ef9bTu6Gw/CXfMk7KJSKem98YYw/rRRCRTm8tL83IcZw4L9JkbmH/PHjlPMfSdI74UnbGnwGde JXmOgYwjo5dhfyJsoeOupJusEI3W1xnGVChfUvRxcVZ1Nt05nUFD1nFWXaCHov7r8vL6153ZX1M+ bhbmcoNhanifH2bbmeX11avN65sthZtJQkqJyZmqwQxPD/YpeGCG6RI7sn1iFVqcWZiOELpjZKd7 aBaflH4mNEXVXjGhllRNjlT90BRpg4Wf77fXl5fw8z8/vcBo4YtHu/XafN35vilenCET+MQ3iyff PvsFczxdgWvOr2+u9p9M0iyKJsEEHbIEd0+n0C5STPtmKIlOrF3EmbW5Wm2WGJtCHEQidXWDCTok T0P8M++2zllnH3JwNMfcUlbWmamd2Y7YO5x1qMtdhWnnQGDz5mp5ebPyxcca7WWHOcndeppxFTev eMvkg6YeGDpJ8kylcNXabgPTaafli5FmfWWHR32EMeioaeR0hUQQef3iynRx510Xd4J4NE0EQmZY p7nx93QCEahq2iS3gzInxnqcWQediHm1WV+uzJ/+8vzCpv279d7mZ6kdXFigdf98s0Z6ZscgDs+Y hHmfknm4T4L5HONNp9feMdAcYdZhj0Ox/L98CHjct/bdzcur9f6/vQ9MGeGhcUASXkDg1d/QKVCO YD8vof3qG/tBb/PAhWBVYyLzMOock1TMDpVkdqhT2gveSnj5UpAGvCR2BVB1leCiKwF12fiMpC/s wDmGhpq8NQe2HZCHVOEWUjo7BsmhtcNKC4/J/7IS2WpVzA8NuTfNctMffW18s72yjc82193i7ZBl dUd8wTyUycLbUNVZBQXjsQ8e4BkwHOl0wFKiYazqNClTapd3IBoaFdsc5EP/kZb5kf6deYcSYJRn me3i6jVSapkiVEUrlQG3bP6oxFYFSpNj4Xac3M/eSyXLRY4huS8xZwotqrI0kkdbFVU08FY5s5TZ 59OD3N1m99s18vgdphhQv2FS/JPO5Z72WraD8YU/rq9e7998MmlR5+/qFHp8DHrUacxY/hRNdOA9 ziywWvuBop5Il+MPIw/oW15u9v0IxGXHtZuEmiSt91q8yt3PSTBuBZXQYZ9YQVdEmeXT9z+YLr1C 6/5lcXnTyRMEKwpUQSlDsMyrtDZVnKkYYsAkdpE/NmWK/5vHSJMeY5a5KzExtmJoOGISV/S6LG/9 KbhiDkTr0ws+cWYdHU34/PMnWGZzz4hCl9v2fjvJEgU33VO5+zoF5jNoWdLTC0JxZvnlKF6CB+38 yg4loUzZ7bc3y32X4doO80NLpnKEohrjhc5uEbPSCSFVcMyLKilLrPzypii7l36xDmDrunC3yACD 7nbhwWKUasxoedx7zsIPRZ4GO2mZp8JuSMKxPGxezP3wS1/mffwFW1WcWa83v6xdHt6PqiUYVoXG YrVcbFf3Z+Dm7TR6Gj/L5+/KtZk7aupxGdYtVlxc7UbuOKzWDN1R5QOFV515s47VhGGBLzTl1lCX dNQB66hKWsN5B0ChTdMMwA2lQZRVdjxpNMPj00ZbGqLj3az6QHP1934swsWfbhjig4dsLFTBElxT 9fchCtnThp2yrZKipbATMx4iWCiUtP3avWFh7HiFbJai/0ghAClBdJojJ8yLAskh1hF1i/esB9+z eE/V3ijmQseWZDGJiGZsTWVaD8XcQhFjWtoZdvgnO3zZvcqPHCumqTycrsLdz3t4fOhmB8geX1Gm XiNbdmtkswqqOLt26+CleC1Z2S1rtRfpLmGXgWVlm8nXxXYXsJ/pFsbO/EvMe1Zxy2LtfWAbgdzk c4h3sDxi4mWxZYMGXtcRQ4qdZwq7tgMHuE+xPmpavW3KLNXuWJCbwiB6G2xyYBrTYnRVfGyS1uUn K27BfRDFgyzmeIdyT/Pqd5yQrMAu4WGo6xHEsRSngEys3+jAcnVPEA8yFdHodTnHxFOadivcsd3E HalKiEIfAqfxNCeQ86aJ8rnfC00JUOJmkQandygdM2XAxs3GSavEwBSOsAyVRF7kGWLqAWG8s0pR 0YWCrEgwozYnU46hEiS30aiwBGUoHpoMYUVDkBQVHUGQys3TqiVTRJ21FBUdQRitqgoMt3KoBARF o8ISlDdQvlU5a8oDtSAsGsjm2BnDoyIiSIqKjqACmXqK7Wu8KR+xBTkBBGdJwI8UFF0D8hIIb4qI n2kaENavIefjw8oDNaAKkzspFCoelWOuEhAkRUVHELa+yex+I94UEUFSX9E1oKpJ2gp7RnlTjqES EBSNChvh/NJbzpSAICkqOoLqGrkcBki8KSKCpKjoCJpDdpOfRA/k5x49KMdcJeBHCoqOH5SRKRaj 6viRuoqOH+wN1NjNpjhUHqgBNdh1Jy+HsCIiSIqKjiA7RGCHGjwqH7EBtUVSzIshWzmGSkBQNCps hPNrgD0qx0x5mBbkF4B6S0T8SEFRNaAcu3c0JUZ+vSnHQAn4iQ4rHD/YDjHBhpFDWDlmSsCPFBVV A8ozzHu09RBWRARJUdERhNIQ9TIfVgKColFhCfKrqDhfCQiSoqIjKC+Sdp4OtbuIICkqOoJy7ODU jnrDY24bEBSNCktQrwWQ0WOyTlQqxURHj9cCeFNE9Egx0dGDwjCvsWeKN0VETzQqLD2oDLGTzBBV jpnyQO0HY8Zt1gxRRUSQFBUdQZj3npfFkKwcQ+WB2g+2+sGA4BBVjpkSECRFRdeCUBliQ8OhMxQR NE0LQmWYZ6PO8BgqAUHRqLAtCJVhWmInZ64xBwRJUdERVGPFTQ3llTdFRJAUFV0LsoPGLTaT9qaI CIpGhSXIznlm1VC6HzMlIEiKio4gv22sR0VEkBQVHUEoDbHvOh9XHqgFQVHQNu0QV0QESVHREeRk MCp+pK6i4wfa67oY9YbHQAn4iQaFa0BFigEnO0XvUTlmysM0INrY0Zvy8RoQ7bPsTTmGSkCQ1FcC r2UJwjbvLRY4cpYE/ES7CjeVWvilJd4UET9SUFQNqPArmb0pIn6iUWH5QWVYYpZZR5AUlcBVWIJQ GUIVPWQrIoKkqOgIQmXY7SuhIigaFZYgvwyFM+WBWpBXAntTRARJUdER5HZ78ZZ8xAZEcqKPrkUg SbRHRcTP1Mom/IBOCQnLSNk06W9LlKh5Kshg3b2flLLJmeactTft/tUK/xjWuR0svO029oIgC++7 fz9gwS62ul5hc7Cstos2X5x17/xjEh2dF+DfQpyXJk3tbfj5APx2U/1g3lbZ4bLT1NE500ShURqk gw6d67oGHR1jysN0XYOO7pAw3lmlqKi6rox0dAwqQXIuTXN0BJGOjjElIEiKSmAKl/xlpKPTECRF RUcQ6egYVAKColFhWxDp6BhTAoKkqOgIIh2dhiApKjqCSEfHoBIQFI0KS5DX0TGWBPxIQdHxQzo6 DT9SUHT8kI6OQSXgJxoVlh/S0TGmBARJUdERRDo6DUFSVHQEkY6OQSUgKBoVliDS0TGmBARJUdER RDo6DUFSVHQEeR0dA0rATzQoLD+ko2NMCfiRgqLjh3R0Gn6kqOj4IR0dg0pAUDQqLEGko2NMCQiS oqIjiHR0GoKkqOgIIh0dg0pAUDQqLEGko2NMCQiSoqIiiHR0Gn6koKj4GXR0DCgBP9GgcPwMOjrG lIAfKSo6fkhHpyFIioqOINLRMagEBEWjwhJEOjrGlIAgKSo6gkhHpyFIioqOINLRMagEBEWjwhLk dHSMIQM9D6Oj09AjxURHD+noGFQCeqSeEjgtSw/p6BhTBoKmXM6ak45OQ5AUFR1BpKNjUAkIkvqK jiDS0TGmBARJUQlM4YbhctLRaQiSoqIjiHR0DCoBQdGosC2IdHSMKQFBUlR0BJGOTkOQFBUdQaSj Y1AJCIpGhSWIdHSMKQFBUlR0BJGOTkOQFBUdQaSjY1AJCIpGhSWIdHSMKQFBUlR0BHkdnYYfKSg6 fkhHx4AS8BMNCsfPoKNjTAn4kaKi4mfQ0WkIkqKiImjQ0TGoBARFo8IS5HV0jCUBP1JQdPyQjk7D jxQUHT+ko2NQCfiJRoXlh3R0jCkBQVJUdASRjk5DkBQVHUGko2NQCQiKRoUliHR0jCkBQVJUdASR jk5DkBQVHUFeR8eAEvATDQrLD+noGFMCfqSg6PghZZOGn6mVTSUW0GBd3rBB2LQyOkyctthr4xRl dM40vYyu36u038rUuJ878Nq5TkZ35OcQhvenFdEd4s3rkiZ3Nbvh6oGILrW/dDLZZnQlfkQrb+tT 9DVn2imI6BhTgrgYHaK5waFBRHdIGO+s0hCt6rcGER2DysN0XBmJ6BhTAoKkqKg6rkFEpyFI6is6 gkhEx6ASEBSNCpdZZCSiY0wJCJKioiOIRHQagqSo6AgiER2DSkBQNCosQV5Ex1gS8CMFRccPieg0 /EhB0fFDIjoGlYCfaFRYfkhEx5gSECRFRUcQieg0BElR0RFEIjoGlYCgaFRYgkhEx5gSECRFRUcQ ieg0BElR0RHkRXQMKAE/0aCw/JCIjjEl4EcKio4fEtFp+JGiouOHRHQMKgFB0aiwBJGIjjElIEiK io4gEtFpCJKioiOIRHQMKgFB0aiwBJGIjjElIEiKioogEtFp+JGCouJnENExoAT8RIPC8TOI6BhT An6kqOj4IRGdhiApKjqCSETHoBIQFI0KSxCJ6BhTAoKkqOgIIhGdhiApKjqCSETHoBIQFI0KS5AT 0TGGDPQ8jIhOQ48UEx09JKJjUAnokXpK4LQsPSSiY0wZCHoYEZ2GICkqOoJIRMegEhAk9RUdQSSi Y0wJCJKiEpjCjZMOIjoNQVJUdASRiI5BJSAoGhW2BZGIjjElIEiKio4gEtFpCJKioiOIRHQMKgFB 0aiwBJGIjjElIEiKio4gEtFpCJKioiOIRHQMKgFB0aiwBJGIjjElIEiKio4gL6LT8CMFRccPiegY UAJ+okHh+BlEdIwpAT9SVFT8DCI6DUFSVFQEDSI6BpWAoGhUWIK8iI6xJOBHCoqOHxLRafiRgqLj h0R0DCoBP9GosPyQiI4xJSBIioqOIBLRaQiSoqIjiER0DCoBQdGosASRiI4xJSBIioqOIBLRaQiS oqIjyIvoGFACfqJBYfkhER1jSsCPFBQdPySi0/AztbIJG+3bn6V7KBFdMU9qfN8pCpucaREiOlLE jZ5AOFeap6vVdr3bYfc5bPc32n5udB52q5tWRneIOK9MmtrZoDvJG/wg94N5W5oUzWnK6IretFOQ 0TGmBJExOkhzw0ODjM6Z4sID76zSIK3quQYZHYPKw3Rdg4yOMSUgSIqKqusaZHQagqS+oiOIZHQM KgFB0ahwucUgo2NMCQiSoqIjiGR0GoKkqOgIIhkdg0pAUDQqLEFeRsdYEvAjBUXHD8noNPxIQdHx QzI6BpWAn2hUWH5IRseYEhAkRUVHEMnoNARJUdERRDI6BpWAoGhUWIJIRseYEhAkRUVHEMnoNARJ UdER5GV0DCgBP9GgsPyQjI4xJeBHCoqOH5LRafiRoqLjh2R0DCoBQdGosASRjI4xJSBIioqOIJLR aQiSoqIjiGR0DCoBQdGosASRjI4xJSBIioqKIJLRafiRgqLiZ5DRMaAE/ESDwvEzyOgYUwJ+pKjo +CEZnYYgKSo6gkhGx6ASEBSNCksQyegYUwKCpKjoCCIZnYYgKSo6gkhGx6ASEBSNCkuQk9Exhgz0 PIyMTkOPFBMdPSSjY1AJ6JF6SuC0LD0ko2NMGQh6GBmdhiApKjqCSEbHoBIQJPUVHUEko2NMCQiS ohKYwo2TDjI6DUFSVHQEkYyOQSUgKBoVtgWRjI4xJSBIioqOIJLRaQiSoqIjiGR0DCoBQdGosASR jI4xJSBIioqOIJLRaQiSoqIjiGR0DCoBQdGosASRjI4xJSBIioqOIC+j0/AjBUXHD8noGFACfqJB 4fgZZHSMKQE/UlRU/AwyOg1BUlRUBA0yOgaVgKBoVFiCvIyOsSTgRwqKjh+S0Wn4kYKi44dkdAwq AT/RqLD8kIyOMSUgSIqKjiCS0WkIkqKiI4hkdAwqAUHRqLAEkYyOMSUgSIqKjiCS0WkIkqKiI8jL 6BhQAn6iQWH5IRkdY0rAjxQUHT8ko9PwM7myCT+PjLHKB1M2IaBl+Un+pGtv2QdS0R0I5fyLKfRy OZVL74Ost9A+npmL/zRfXZjvZ9+bn01WJjn+1ElTmrKZJ/hR7xr+29Y636dmeGAlr5P6B1liWEt0 oYla4QHfB5YEoWnAZGxJkqdpmpmqKZLazGv7F/vq/dVcmSfnu8wsdwY4NWnR5vksTZqqbNMch9yT 3dJgErTJUuCK3xFtywN5od2lz17t1fgLQxJUt+6+Dr/KjlyrqUDo8q354gImpWmd3//rxc5JpmAl S7OkavIm1rTPxw48et5vEAlkXzz6t8V2s3h5uXY/pDw6qXv6+RSNc/gZb4e4SB8o9baAfO9tg5Md 9ba0TurmAUN+2iTz5iRDfm+ZshkMP9J924dkryeWTR+gfRDWhjTHZObilXk0saMVbZsg1DycRt8G kexEPa037RRU0w6lY6YMHjLldM2gmj4kjHdWaU4eREVuYmJQTTOoBOnAJJXKoJpmTAkIkqISZCYs KvQL3hqCpKjoCCLVNINKQFA0KlwpOaimGVMCgqSo6Agi1bSGICkqOoJINc2gEhAUjQpLkFdNM5YE /EhB0fFDqmkNP1JQdPyQappBJeAnGhWWH1JNM6YEBElR0RFEqmkNQVJUdASRappBJSAoGhWWIFJN M6YEBElR0RFEqmkNQVJUdAR51TQDSsBPNCgsP6SaZkwJ+JGCouOHVNMafqSo6Pgh1TSDSkBQNCos QaSaZkwJCJKioiOIVNMagqSo6Agi1TSDSkBQNCosQaSaZkwJCJKioiKIVNMafqSgqPgZVNMMKAE/ 0aBw/AyqacaUgB8pKjp+SDWtIUiKio4gUk0zqAQERaPCEkSqacaUgCApKjqCMIDfztO5KTUESVHR EUSqaQaVgKBoVFiCnGqaMWSg52FU0xp6pJjo6CHVNINKQI/UUwKnZekh1TRjykDQlMNwwy94awiS oqIjiFTTDCoBQVJf0RFEqmnGlIAgKSqBKdww3KCa1hAkRUVHEKmmGVQCgqJRYVsQqaYZUwKCpKjo CCLVtIYgKSo6gkgGwKASEBSNCksQqaYZUwKCpKjoCCLVtIYgKSo6gkg1zaASEBSNCksQqaYZUwKC pKjoCPKqaQ0/UlB0/JBqmgEl4CcaFI6fQTXNmBLwI0VFxc+gmtYQJEVFRdCgmmZQCQiKRoUlyKum GUsCfqSg6Pgh1bSGHykoOn5INc2gEvATjQrLDyrDErPMVBmK5rqlqOgIItW0hiApKjqCSDWtISga FZYgUk0zpjxQCyLVtIYgKSo6grxqmgHlgRoQyTUZUwJ+pKDoGhDpNTX8RCmbzp9bwWZaNU1e4lmR t2WWNaNnz88hiE2TrM2g48R/n7nnnUZ2jrS3sfq+bN6WSWWyFlMklbn9+tI87ySd7GUQr2a4DHY4 7S7TX6R/BVmo9BLWEnxolrUYdHCWuIvkeN1fhlXW3mKqa9KpgXL1AAZ3KyQvLXD/eQUxZy8vvUPW 44Y2jjMVKl1vmdLhLzClqSGKnPttW+8whZXDhaaoGvWAyrzFT2NntUNFKbrtpYWTSG+9wqZ4XwMn sc5PSUda9/Xm9Q1k1MXn5puvLv7j2Q9fff3tv0MO/N275fVqPTJ49qGU7qTH9wa/h+T3w7lentTl PD/WIIMOJbpBch3+0ArqCjvbUiu4o0E+TGyA8AKiu1PgB31cU2EhwJGA+eH4SbAQIavqFmsR3DPb tfXH7o/p6ELm88PgZS6WszsIdBH1i+ub5WK12GxvK6O/+tu7DTaYNn9abJdvTFY/NpgOLW6fZX58 tni9NvVPk2rzi/7WJvWDDIBk94MMLV1lF4RM6gdsO22SGosWWlMwpgSJX3TIIPcjRxw5571pRt4m eVn6NKPvUOGTsL3LDvqHoP18e7Vfb6/W+1Hwly5zmnVLenyTIZvvb0ZZWiUllvQY5JSdzSJni64C Q1glJsKyIs9um3gHrIMPuKb+5Xbxah804Gfnz8zvzJ+fXqDPvfXv+frdfv325Xprm34+bQvXoC51 5sgsMM8wad2eRFeMsqVNqf0ctJqB3ofpilP8ugLalWsWUp+DRwlbsYos1Ax5U+KHDwpnljJlf2p2 6+0vcOw//eX5hXm5Nsvrq1ddHroy+2uzWC7h+uZ6azavr66RnO7fbHbISM9tRjpzay/5ZX+qYqhw o5X+bpQgJ8Y8lQZLFcyFH4/yhn3Ebq9fiFmDcUT1eRHkOff0KXJHvMUcX1GPHDHKrO16ud5YV3tl Fvjin2/Wu/1js3llNnsDlzvqliNnfAzPnMYj/fCSh1vUHU7S1qkwySFSzLAosk+9FNX5pBEozirb 6z7vQxA43m+vLy83V6/hA31H3IWl7Xp/s72yDJvLza7zkcEfJglDfszX3dMpcI4GliLTPTXS48zy a5135hX6lvUChVX3Wz67m5dIdxHGv7VhYAdPuFwbf/JhHJiEdzeqjd/P6cA+Bd4xMjuvT66tR1ll uV5cXvZUL/qfbVrvHoPpXzeXq+Viu/JxE9s5aAZ7+RHW3OtA895qZVLROea77frV5m+UJfURab0y m6tJ/NBP9BxafEfa66oajx2QY7FTJT5DnzPHquAUkw0n1unEmWW7EozpvLu+2iGnvX69xoEtvHD/ putlht6Fgk8yBc+51/zk7jZOIeDUmBEpKOIc+FwwQCH1uVuppEnZgR2f4ebVPMnqWz53/6jJ1Blu pFk/rPfbzfoXBA3foe3MAiXVzQ6HLq+XiIx/tzUXnG+3394s912ctCnbzO5wwzfqAOAuJN4xLJU7 JZO/EZHXRY/w8JZgf4+iqYw3RRle7KDMagX8EKTrKbLbwqf/twz8qM2ibBP84N5hTnACzSLOLMoD +qxvhxayXVzeaiOrzW55jTfWq64mtOF7hQJxc7XYb66n6YJ9KujuStRGpOEwsguGSXWB+fwT64Lj zOrSKke+ebvYL99gjmUxRRvO3KLYPM7Qqz5fdRngZqhDuzEHs9jtrpebxX69miJDKLwmyxt/Cn6I n7MtamyudmJ+GGeW74xtddl1xQddsI00y+ttnyuu7MiE7WmM89tJksLCixNzd0OnQLn9UVkrJeop /6i9H2Yl0py878AU4VTA3Zvh/djNff6ElGXVb4x3/hyzfO+ns7KY5XkJgdWszDFpCoVUntkpS2PF R17bdKBSCsVa3UXwKXwGetG2bWcQa9XQJvjXTiIV7OaH2bQju/nZfQBLW83N7SByXeJqtw/hghXW AdRZ2/qzcGAOsSqm1usWt1PXxfhInRRlA1XZ6Fg9T9IWm2rZS/lPorxooD/DEXdxXCbBYCZ9v3u9 nGG+FKMw0Ga5I5emLLEZYFYV/kiJH/lOO3v8VUdH3Hcv8an+rFkN3by1Efb4Y8Od0LUdJDjFfb0/ sDRvsMdhbn41P/6E+mV1qCy7g7MWt1qmmL1q28Yyf/D6Eq+xwKFqmxmdk9sTS8x3Yaloi/ftq7zq P7/sX1cYx+iuZz+P96s2xTXm2BjVX60Grd2Gj9330St8Pq9bQ6/xeZvXwhOGY9ZVR1fEqxl9n/08 3iV77Ofta7LWX224G/t99Go5e9NJCvkmhaplRA/8FyqDt+NDztNiWSRP88RezsgZ/aHBX+/0dDP2 dDBgzbyE03qX9IfcvpglNreprXDGenNdoSnbIJAVEEl2jzX4QzU42pIT05kjJQYaUt2Pc9k2hY0x 6XqICDnqAReb51V3lnu4eGueXFzkSdrPjf5oHv1wZrWguXkESVn/ZOOfXPknSMP6ty79k5V/cn02 699Crttd5hldhz5OT67PzE/m4l+7HVq71nLvTbi+briJqoCYp0KkSl1wx9SHG/D6H0OyaKPnB7g2 cOqvDZz8/WX+zunJkzP0CQCw8u88cVDQGbl/x1+ETv3cnVr4M9rbeD790xg0O5JnI1Obg+DaDs3k 0MZlWCQ8r/EEgSEvsDlq7zgziv6dC9xR/TvHqUzdQFpr9cOUx2GrRUhS5t2n+wc34gOfJmDOwSru /i3uoKAHOAGOgfjMPMIMbNnhV5tHP56Zyjya4/js0U/dcyAw79499AwSKjuFLvq4pE4zNJfAyrTN ug1gx3Y656i8c4DAb3/T2fS77lvPu+f/dGZgU9r9hR2w7J/OZjgCNmD9i0fdQ/+iP9Ud6q/Rf+6T M4Pb7q8NFTnu1F/VXunx6Mi/dGh82l30t93x8fkvzro3vBm3GkoAR9/aQRpGZIs67dTbbj/cNqTt GBzwQdzkl535vcnfOEJmHRAWmvcFwkLQw/TeQHQ7Oo+U5+4ptNpJOU8HIAbvTdHV3PbfAQgKgJ+C l8/gpu4B3IJPGI2/GELCG5+CJiDVH3pxBqp5V6063W+R3ebmoCENhvQNyXqN108c5H7+PtHWC6RO R/iumLukVvr7P+AucRdwV3uzuAnbWvGlP83GAfluP4P4tSXBjc0mwq91wWHc6PzXAjx8K5zAfjm+ FZZgANEaZP1+ZBidMsN7zkp/yu/7D7pT3J24h3/GVeBs/RmWStyd/9xjxNTh23tTyv4UsI133DW+ vpdZ7F3YqWvqHg1fiXGRZ0zsaB4mrDn8INCRmgO92fvVHNbQvuboFGvjoiPDNt+KqmNmaxW7sqPt LoJlGvSqX5RBfQ6/o7NPumaF3dbI7uI/Kjno2KjmoGOUihVYIVLkaGf+CK5lhRC2FqRjUL9AF2pt HhUdViFatLX9pCs6CszwI+0uqeyAOtgdsdmny/zp2Kj0oGOU6dHV/RFcy9kwymTJ1lHaSndExQfd tbdhwGtcfqCHlpcfqOAyV3pgfQ2eD2UHiMXrroiwG8R3lYB7ZYt99w6KiO4zKDVyu7QVwA2lBgix r1DmdM9cidE9H5UX/Vm2WBiu0L2y1+7LipnVVtrv6Y6TNb6k6C215UT3zKJhVyexLWU2LiWK7hcB OsfzRHXVc+dAIlKGipRoso7nSmk6JnJilByuIibHGDuxt3Vs13Cs32mfKoACA0VZlxa6gqLOoAyr 8syHGN9GZQVFgcoltVv893nhkItjHZkL+eNEObagcHUEsskpCgp/E1MUFPJrj3HytQBVCfTkgxYU c0VBYR1nXiJ+UkGB1R01ZpZGhWgnJBfVE3YVUYVV+ENGFiamH6aeaNCLx9YToZXpvJLUE0WfKSJ3 QAaBrL7PMPoUC8+RiaAW+OQMeeaj/929+y/9B/pTkYXg7d/0Z/3BZio473/1SUl/EFkncpg/9NfH IWGiVkA6kNkxMKriUjTd23nwkVTtE5ttwYg+6e1yJ7yyWRoe+uTXnfEE1sA0ay3uAWd26VXSn4mb dMkdPtaf2B/yV/SPT/vz7Z0NYwKopG+noBU2s2tzdNZH7qzMgzsbEmvK8H/Xp3z2C2G2TfZgIb4X Bn7eWYOjKMhcaoqjoMhlx3hhS/Ni9uh/4gF3+6/9w//tz/jmj/1L1Oj2A3/uHw5vCV3S7Vuikruw pQJ07C4qHU+rhzuCxfjtA9SyPq22huJexonxzGezv237N11y+1vKrMd4HzMOOVGTNcA7NA6dym1P OmLdd8+AALD6/oc/909+0zvx789sUk9uA8jx8inswsPX3SfuRa4qkazaZUa3jHuv2mqgAxtoQQyh TeuP1WvDNe0YNVZNDBRjM3YJil+gYkNFc979BTBZ2hVEqM1ti8M7CBBN78d4B86Nd4Az3uj/ogjq 63j7wW+6c+HKOAS/wEnwVfzFeId9G2+MGuERp6ggxM/qZm4Kdzuj8IKq9LZTHAkvv3V+iAEONCq0 SJCOuOiaIl4gSuANd5aNNDiGnrDzb1e8AgUcdE7vTnFlZP8WbtO1WJzn/N82SrzCnfK3ODBWIBPD 2NroFo+MJBy5xU8/+6z3adwEzIBj01+YhwbRDyS8OHvSn9C/RIS3fUT/yS+7z/RnV5/aohYf68/u DwI+BJoXZ/3p/bFvOlhsnEIv2CIW8TdaQcNSo6tHaXRwo7fb0AwjxVTL23jpxye+//98YRxnCmVu ZHN0cmVhbQplbmRvYmoKMzIgMCBvYmoKMTAyNjIKZW5kb2JqCjMwIDAgb2JqCjw8IC9UeXBlIC9Q YWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzMyAwIFIgL0NvbnRlbnRzIDMxIDAgUiAvTWVk aWFCb3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMzMgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERG IC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQzLjEgMTEg MCBSCi9UVDUuMSAxNCAwIFIgL1RUNC4wIDEyIDAgUiAvVFQyLjAgOSAwIFIgL1RUMS4wIDggMCBS ID4+ID4+CmVuZG9iagozNSAwIG9iago8PCAvTGVuZ3RoIDM2IDAgUiAvRmlsdGVyIC9GbGF0ZURl Y29kZSA+PgpzdHJlYW0KeAHNXW1z2zYS/q5fgU837rRlSfC9c81Mmrp3nrsmaqy2N3O+6SgyHevG lhxJjpMb//h7QAIgQUokiBgW3JlakZX44S722RcsFh/Ir+QDCSKPlv/zfT8gcRZ6CUkT9v9NQf4g K/Ldq21AFlvie3mU+0Ge7Hs12S5IRBOPhgkJ4tTLKT4XJJGXBVFEkhB/ufwHr5q/M/GyiERZ6sVJ /ZGJ8juJj//wb3/ALw3ygJZ/5i9T9q/7EeDiF4dJSsnilvw4wyd9P6FktpiEYfl5/m12S76bzQLP JwGZXZGTxCPk55v1Azn9NL+9uym2X5HZf8npDBAbgumCnLQF0wcyCHMvo3kbo4Js0kZGNJF0VDTR EleQe4EfJFxcChQioUwqIRlD6RNKrbkg8LIwmbQURw5gkooLoDqhNfKw3F2T6dvTn8/+lURk+mpK 3tztluvVVxMtdXaE2Iec0tDLUz8lqYK8H6+uDEctrFqGfuSlyX51PvPKSvLUi2DoversYiK6Amqp qlztB+khAxtlUUiJGaqfl+/vYegR2V6vH7ZkviJFRRNkfUV21wW53xbi5bpcb+SyuFquikuytLL0 QphtnCWheB5uNMdceknug/H9SFH4ZLYYsF+irfC9FgFXkiU0jQ/5hYbim/Am0i8MwDsvFow+SKTJ wntBHgIXUN9L/TiHFpvgVEgdE/E0obQMhPh9DiGgkReHPnxvDxRNh+DRwfCB0apQHQsXSjVRBAdZ 5gUU3juMvAg0xr07bG84WCB/TBoBSh9xS7pMMgoUUbbP+3XkbkhM/XKvoaSxl+XSfA5Y8rM44iTJ vIRG2UhP/IWWfMhIagvmsLSU9bUNI4FpBH4GnyYkpHAdgswBy/32WyuoUi+NswAsogroAMV11vW3 1ZcBtAnLBPoMrWYVM2hfY001vkYoVT9zCLLYS2kUHxTfQOZQSk9TeKO8A0Usl0XpgdU27FmF8HSl Ng4cUhma5Aio9ml2GBxfdPaEB60i5UxN8VXCsyK6ENlCHhojk5KzsebCCNkzAsu22BR31GEQXTGN ikjCGGyb4Re3VpgCRTMi6ebtHSh9NFY76SSAeHLqnGesYCnuaNgGH8+mHxMbqyjwYy/yU4RzXF5a LtuKcwx88FRIgzYUXee4Xt18fmy4ILx8fP1ylkTiTXyHGCNyfjbFj8pPMrlGNgoOIU3xMKxApq7D AybBKyS6ch3F/2GI2lniM/43WnulXG2svQZtKMAUGXUYzHJsH0een6Ma6lgtxAzWY7nWf3splru0 Dr76+Z8fp5v1p8/kvNh8LDbiR8xKyr9pxTykx+AP5kJVJEo91MnVcvQwNUOGNoyjzqVUWP3GYcW9 17mUCkWXmMeGQU2HPyJvMQMnQm9uCiMEaJK3HMB4/LxlH7DhtS+Epyu1UX6LyrzFDJxcdnhhw0Kp zFvM8D1H3mKGTErOhtjqvEUFdwRiqwOQHijPnbdg1afx6L01Tl82FIY9R2xg0Ax7vRU0JTYaJolH cnEyv/iq3OH75eWUvD399bfT8xkQV6EGh86+dd4gj1aiDxkRq8JWlmCtdx6cW3Hzdb4aUi/KRHm7 cq3DsuWys6x2E2SP0zdvZ3++PT0/ffv7y9nZm9d/vpmybx0Vd96wrvPycVwIOGnsUYqtlGau4YjO zaBVuhR7+lzj++z62ZXOn8cFrQfYN5P7WE4ZuhGyxx+ULytUFGdeHlNUMIwQCnwvOquu84Zt7qnw O7EKfS/L3OSewAgaCzPeKWHG+fTN6/PTPVHF86u9eiIX9O6jRTBInIwzzKC5G2jw53FA63HO9orQ hulepGEIrTJhByMN8TwuaD3DhkpqaOs2/DjaDKv2h1hFpuRdz1Pwl0ltC4puTfPxryKqUL93XEvn DcshhngeJ9YfRUHdTdZBN5kBNCjz4iRAkME2R85e/342Q3hRfrHog6o/KD8ctt6zWs5AlaZ8Khd0 j8JGGmH/00GPYwatlecIs3/Rfr/zxg8v7BaxYv48Lmg9QSO5GlsOn+fgFmTD4dQsbwKMUffFScIt GJ2y5M0/amuP1fdLa4+q92wYOQ7meEmYxSQuH+V4yg5934sS9OdXQBQDH1Y2l+KjDW3LRgcF2RGC C1nUjRPIym+x4HDz6TiLGLddKor5htAOxj3teKj7QcssyEV9PMOotR6HqPCNNIxxOh+1kVqzoAkw xoKMB1POdy9fcRJkuzUXJ5nydvnhi5O8+aZlvZfP5ILWI5wKSHFq0sGIxwxaO7LhIU8nwOm8YT3i 4c/jgtZDHMDwndy3i82gVfbO6ajxrfE+d96TgQO3TcdUnkTua9xFs6QXRTgVLGBz5R5IyLu7syVU G2EFxe5DmNNQIhtp4Q3BcXFajn5UvR81/sFGe8jOcjY50ZH4xwyaCGtYPzZ5O5tKTlTin7LNuP5p +SHbWSB/Hhc4EQcUKY4HKlp3Y187NoPGtc7ax5nWX3G1vxCroVoFXOvip8+idf48Lmg9QPus37J1 R7RuBq1L3BV/H3q/6SxtlADq/JY/jwtax6GNNMTJt4rhj+psfDT2yGkiCpI6WniWU7lRHiNiSMfO x6jXj40wJghCD6WIlAh0I+lZDFb4vpzgYQVhghKXj8zZECFmwbDJDiVJ79b1WZ/larlbzneY8HBe bLeWJoyEmDAS4QiTBO+AcaKf0AskIysW8Ty7bLIkEmXogEgw5mV0IKi50Fq5Rjk/YXjEiCGssxU5 3xV3W5Q/5qh0zFeXeIXek2/KASNs/WmiHlXGoSjd+UhDWqD71arb+d6SX/8kBHncuQXlQK7WWWvs RJk4mbQpdptl8bHAqBZyN19umAXfrTc7K1OdZO95C3i/DHUbf0fJsDaNFB05vi+iZQXKc/stEHBM k8gF6orZofX9UumsJ2MFsbw+iJMcM2b4K4wxEa+GxpdFMQ6Hoy1R4bThgPfH9f1ifslWeuvr9NPd cgM7+GW+WVxjCNs3BBYftj5EyL+n8/cFSf9jJcIUx/LEs1ldCQEa64NDs0Rq+4iwk8zG0h0vwkSJ D0dF4Np7oDydqcoFKJdiY3kOLsow9ZK4tSiHKy5nq12xWRU7Tb/VZLryhF4X87AhyaPnEcestdh0 HVrHtZpB5EfSWxAPOLp6DfAjIz9t5le7jgWzUXd/IeXR9PbPzou7XWFq2X1PyCY37RvGGAYYqZIE yAq0Fg6ecKIMY7x9V2wYT1HTldNXE5bns1rgjuojMRMzxGAhrcWq65g6i7VPKjUzIuXA2J4jEqOY 5BlhFWUxpoI6Ft6bwULu+K6cE3hJrtYbVuX9jtX8qui++MSYcn5TpZfzy0u4bDZm8LKM/acbzBL8 lNgZKRFRzH1DdsyfyoUV6Gde2lL7cAQE0tNki1F2IU/MR0aoGlpnL++XN5eljm1ADdLM83HKk6hQ FV7rRLm6nq/pnMtttzIZPsD/QYZJrnmO2GaP0IbjhgL8f3mJykpZdOHWUGwx5nWGUZsit9sjyAmf X/yF435qD1HBd8ImcFw2cNAojGA1CY6l5WR1z1w+GA+DHjFKFbQnjIUNVz3/aYoE/goxwbKqkaAw gn5Z04imzw3WuTxraYLAHdB9mGPnK8ZR6aYfPD4hGsJ6uF6ioipcGlluhcKtUKIgohbYfk7UdSQj OZGPGWxBORD1d4h6sV5td5v7xQ4lrcV6gwDhbr26XK7eKywJO7Ehx5BHCS3sRxCjjFNDeOY8kzsz umLUDxNa2tUs/hrCYjRX7vQKaixWi5s1Y0JQnuDA+Wr7ABK8nV8W5N1nURa2ExaKDE48jxYP6gYT oyIwOepaQBnJg6IubMUuRGmrhe2ohpFi85TKEfDOGIYZLAwLuzhh+yIELfOIAEXeRK5wWUMVMBSf Ftfz1XvYyrti91AUKzafvdwvsTDzP0RIiNNHEQn58xzTMKo5ogKJS3Yh/IWq9OOaBfUwD1YtrA/n Itb9RWoEC2bBqgPVQtedTV96NN0Z6eKuklAF2K9CXQfQ8q39G4NBhL2sGANzW1B0ma10ABAYuxpk fb/D7/5wv9ywyGm++kxe/vNvZL4rnWlVPGVy5b7iSXtRQ3RQpn7OmKNSOWeOA4/RKfuu1lY8mBj4 K1BxFunXsxDQ0O04o/Rch3YJOl0y9zyYGay7+Wa3XNzfzDfk6n5V3SZRlYW293cs+2WOqxHN1fcO TeSFTF9Y0KDYgvXZdQohf4TjOS3MDGc9G7jgYZ80h7NaEc0hg6yni1oxDBnaqUCPahhoGg/cswsj VDCB6+LmjhTb3fzdzXJ7zQiZZTrbqp0KYV/hvfe+IX9fb5mJgJzJbjPHLNnt/AahoJXqj2i3wgh0 JmgtM9HlwlFJT82FWIZZvP9akE6NQBeKIS3DD6eyKfOA2+pi0q7Lt1DpJtxGqF7jpreHa6QKzRWH WlTd1Xe1Wd9WKTmfWXxxsi0KwhsWcU73eysrUAYJ1WO5sAJD9O/gar2R6YV+4DzKMOR+TGgGS7fF DqHfU3nfAHNJ4igPcDlMJUktpeqG0qOkF+ShF6ZhJqGMVKr0vginbThdOZ1XiGokPrE31On7w4aC gvepdopk9DxGtVZEV3sMivaSqDUwYTiwsm6vZrC+dM+cKd5GGUgUOPhTaZm0bb2jHJQ6N2ked2+Y wBJ6lxuBrDqumLC4rLabG42jRHE+oAW0P87XZedWTDNQ6Egx2IEiS9snsuFSVe+2Oe6n3D2sCUJp dJgv5itFlE/GhlUvicDvglGgIwCX6jm3d2oGC0ZxWdzMPyMdul/tljdYXYti+VFkTnx21C0SKNbN y+vmGBZlJVmSs2NC/jAuqNtHoyparV0oYmGiDUIt0WE8Il3S98RNdhm800LOyWOzdgyQne3YZj1W 3Pr2tlix9hzdxt5xfCxIcB/K4TBmTe42hUJuT+UnZBSvAjuGn5BRvApFd42hd4BdytM6G8N6btjd xbfL/8FXXFsRYl0DV5H3C1E3bmqaw2CPmoyXKaSJWz2VTGPY2cJIbdupGbBqdwPWKepossAGq91V /kP3BuFRhitzNxX3UVWLaoGPVHKfO6j3V57l9C5FcyampnIfecBSa0zidgjt4tkoVckiCkelrP1h jp11ujCJaFthm2d6HX1WsjJRs1elrSzBroxteIuaXVL0Efqyn75S/LCI9bnFVPFGsHgHUt2GyWYT HuzoQ5+a7Fmzom44kXJoIOVCdiACxUFHXNFoMh7ZxjKsDd0MVm+jYdMtP91WJT+PLOQ4kjBZOX+o j87KUhR1+xbuo1JPnOIKZPeoxwxW1QDe6X2sd8v76vWjSDLgGQhVgSqq7GxzWSoIsc5vPyEtKAfC hw6oZrm+UQ3Y10Vng33kaJkW/H5JNmmlT6eG0X6E/oO8xc9a4b6mhFqwNHcxqRmsw62PNuxCNNO3 wPar045h4JbElEYxaUExMYzxfXSj2ISySQw58ssW1CNIjaYpdnLjqA1llNTqRjp9g9C/1DQMcfoz Q712lLRsUwb69cLWjQMuUIYRLI3uxxWKaIea1qwET+Jac4pdNSZpF+J4TA5Fi5ooHTiTt5nBanYa aprtKJLDPCgvSHOYrYqvn+SsmG2AnXjfx8TkFhRdkhMZhKaYmu5+sAQfiL3GFjZFTHWBghemjD1o 30FHGeRyhY3Ms2Rk2WzDZBXkvT19VkhDtF4IWbpAGjTzaN7yFA4Ue8xgiQLyERoxKTxCmuMoO+XQ nVAum5QmPYJis53Mq0lt/wemAbwZCmVuZHN0cmVhbQplbmRvYmoKMzYgMCBvYmoKNDI4MQplbmRv YmoKMzQgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDM3IDAg UiAvQ29udGVudHMgMzUgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagozNyAw IG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBS ID4+IC9Gb250IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKMzkgMCBvYmoKPDwgL0xlbmd0 aCA0MCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzV1rb9s4Fv3uX8FPixTT YUnqXUwLZLqZRbCYxpO4MwNsFoUbK413E9u17D6w3v++hxIpWZYsS+zKZgo0ruImh/dx7oPkzSfy G/lEuEtF+hdjjBMvdKhPAl/+vYzJH2RGXrxJOLlLCKORGzEe+XWvBskdcYVPheMT7gU0Engf910a ctclvoP/nH7D++2f6dPQJW4YUM8v3jIo/UzC8Aff+xN+KI+4SP+tXgbyuzMXcPGDHT8Q5O6J/Dwi jpO+K/s0GD2RF6MRp4xwMronZ+QZGf2LXIwAZGv5tVDKyx+0gsIjyhn366CQHMrgO6G0kwrnNHT8 QY1QCiQdhTLYtYl2SJhLA79eKEfWjx8F1IUpNgrlKOrxIwZvYa4F+vFDAfd0wzqpHFs/gUfDiLl1 UAqrPY6C/JD6wg1tUJDPqeNFNhCc77mURWB5CzzIDSjikbBBQU5EA69eKsf2IEdQN6z15WM7kPCo EMIKhuMh5XYQHGc0DIUVBMeQ5XHfBoLzImRwHtK7GlY5sv94YURF4NvgQB7iMuPcBoLzkGwHLvJ0 CxTkI4U7oB7CB9+V61MnEtzzI1Qd6tUgf3WwHPF8Rl2Wy4pRxnxBRncHCpOf5+u78WQ8XZKdj4uv i+kyTsiv4+XdA4qq50Qw7uy8iZB/DMcfYxL+89nArL5pSuUdDzVXiIpKr63XmMtRlfDDYvYccPoJ DRLpIeQSEW8vkCLgntYgXSTVAerwzHnbGuTlbBUvZ/HKoGAepP2CihMV7rRPu5x58J3AJZ7C3MrQ fmwJsVK+au/eAnbQzzlDgHAEeiVliHvEum0DaQPir8vx/arivcM3Q/IX8vZ85Lu7X7sx9eim1cmG TV1TxWEgL98R+eqajQarG5TaK/FiFT99iJeSo0RLtWx3mlLLaUdFZasudX0KoR+lVPQccAELrcik HJSKLvRnQaAWaC36eSmyxz+q6R0xbNGlDbq93cIQzclQCsYrw2q2mx8MTDhtljaZMDo/nIXoQmko iuT2SKgwZtWt+1F/tARXob0mcBzi8RxWgCsRwGA3jamA+6FMX20F2A1j6NFAuF4uwI4YU/n1ITyB TmfoBt8tvF6kJtCkED66SNrsTKSmTK8X4UGr2DIITPFllteL6Bz00iPHGJn2V+M8pclhHVfWzmHF 5krEVmHZtmLajs0psTVtgxRlQheONaT7VCZ76T7fHPI4uoTM0UV0W44Fi/Vh40UUUrA6+uDmcvjZ 7wNYkXiXgTVbUVuD7mRFRYJdhrJHdRXTns8ev23KUWiTJtb6IT5DjC65uRwSkj2UcnVN8+xG7xQB qgU0A3bssCTXShBtK9dOUdNBash8Bv6vk+vhyJ7KtQ/bK2ijDKwko4qa2/pnJ9sraANVXuAgkner mdvTxg6stsmrGaxNauvvzrW5596hrF/9ezNczr9+Izfx8nO81F+SXpL+z17cI28sqYW1qvfbqr6T e2ypHjso+WmCjHUOe0d7zXdCVQQMto2q2TV6Ce5F1VJC0paVu+ZA2/5xsClQFC1G2HTN0pLcukHz kNWKALWKETTlmb0gC3FAJIrQwCwhK5lWEZlUI8XYtJqCJM/ruQyJST3cUkKdnK8o50oSaksJ2qza yqwbtryaM8KWuyNe9CK6vJgzgneMWq4GGHZpBnvs/xi9l6KUK2ErIarkQW2ta5u1OlRy+5FUuKFt WK4gaeKGPCy7kYeGdqAPtO2JOwUopbBuBNrJBXHQj2KPNiQaWilZPJwybMjt2fj2GZG9/1/Ph+T6 4rd3FzcjIM5yLwVdfqo8IJte0jFdIugVWZCO4TAL5XlDuy33Ktn1QW2F2o2QbYZX16P31xc3F9e/ n48ur96+vxrKTxUVVx70rfNsOVaoHIdkfOyEbRdfh/3pODo3gpbpcnh98cvln76rNF7n18dXerYe G7Qe4DwSY/poh1WebgZt86r243VFyZUHfbu6Wo8NWvd96gk7fd0MmgzrH0ph/WZ49fbmoiaKH13v akU26N2Tu1F2ersZNHsDu1qPFVrHRlrk6eMJVnG8ZwQtc+GWkb2PnF1ILo/gSK5agFJzxwKpLnka qMthLW5HNZVwjt4D2UFYqmsrhdumj9w93wPRUFSKWYJSKbGNC9umzdKisHVxtlbel9vOdg+fF61T mL7N16yww+3UvLA1g7b5qTbveVUJd5UHfec9aj02MKETUN+zkwnNoEGZt2cOEh+5Y3T59vfLEVKe 9ENmRKL8hfTNfOdZH/RYeLxalRW6xylTeQBs2+MtqW9xVdcA2l6P32WC6ht7bmSp9digdYED6/nN H6tSHyNkkrxvz1zlw4IxcvX3wt+922cqgA+63rRuyiUExzZohJsZbob5dHoVHOeucEtEI+nozJIk lcxSLvTLctzk2Q/El9/Sb47rBw+eFlx4auEVyQ/H3QQPcwAspEIzaHubPjs50evKG1/3TIVqPadz mULrLKSBnUo3QiapUJJhpJz4/I1iQrlxc3sWlh6nb749C7Yf9qz5bFFWKB5bZtxSzRtBqyY0mZ9X nlcevOpb6dl6LNC6E+EmiIeNUvtI3hBa5vBZttO2O9BtbxnNHIeJiBgCVNDkpzyTaB540w1e5FAn cEJTeCX5SZCVB+gEYFDPwGBQT1P6mGdAWqw2eAfO+EWhyYHD3rSr+z+OGTRNdfKwOrkeDVXm81o/ z/6dnsEuvpo+7DkF0uuxQesBDhijhrCRE82gKe3Ks/VS62+U2uu1rr96FK2r9VihdUFxxcnG/Q8n MIJWJW7JSnWEnj3f+rvf/Eevxwat+zi6Fua+fsrNBtwUo7weSbEDc5RL0/LWR+jlA9Dab1f1kc9g 0orrRQEnGpUZLfeTa3GHYpxIYIrtl+nHNeb2eS/Jxdfx0+IxJvP77ALUap6RtexFTWfT1XS8iie4 /pEk0/msl2Y8+k4u7nflS7HBOV2HBvlFn5P6poOjMJhoWbK9wxuBuNhOidZtQr5MVw/kbxej93pP mlwt3swncR9uI6DPKGAwzTL0k0pR4GCJe2hC0HEoTuBIQZBPqGtPcb3wSH6VCF3rFFbJzg5vPyke 8UnyMP+SkPGMxAWfrB5isk5SapEvM5Mjk/h+OgOlTPthEwxbxcVnh+gF2cAmODKB+ZUGrY7v8U+M 7wx9ecloz1SXQvUleBhqVTubqsgE1CH6m/huhZBAvO8BuQ8cF4wGzENQKIE7MC6LtoRSuWzQdCYj v0fWBKWQTiOJUOzuHJioLDsVWnVyIE+qJuwQOtjkCuUUYcdFuJQDl9PZxwjih+cnkz8GWzObm3oh eTfeYTiKgGFNig9OSt4YP4S+UrkqPhwCUVSYmUNqDHuHCBRuYwbr3exx+u+YLJbx5+l8nWi+TJ6T 1Zc5DPPTOk5WYFIodhbHExAlMrLF4/guJquHadJPBqbuo8tBT1LSFnCmQDMRA3E6hqP2Ou/U2cx1 boYqyZLnl+RmFS8S7P2Msc0znk3wSp4JlqpGmEwVvYxXy2n8Weo6Jo/TZCXz8v/0NogAXBKGCExq XTboHbJmyBxtU7wZrGT9AcPynpPhEknPV999+fLF7L/ky8MUBZc2hrvcGCYVY0jkrXsy7sXpXYGZ Ti4RamU26D7ADnA+ZbXDYZiWPG/o80aoFnJoJ3x3MV+uUl9/jMfLWerWY5TSH2UGnDa7x5MJBnkm qNZGcPll/DRG1T372IvK9U0+kS3JCpVjQ5KZHIDqWedGsJKU3yWfJ9On6eN4KWO3KpHc7eR08P86 vYOJipQJh4ggA2yDSvEbPvArP3ToPmXmKPBbRzjm9ZeCyekzR0NYkh/mywnmaIJXWpp/Wum0Tf45 GjaMYSasIcAknk1AXSnJ5YnsNEl7AzNyP1+S6ePjOlktx2nhuFgvF3PkRrQXrtNDZPRabPAMN8Jw jdwzrAlwZrDOZ3MkqTDG1CRBdNMkWWeJq1I+eRp/Ix+Qv0zmmAA7eU5i+pE+70XbekKtUGuxQtvY O0PVbkEFjWFj+GVInaePt6+mdhoqLStoQ1gcuVKply1LKTkrIeecO/QhYXfgo5WMxOvH1XgWo9h+ /NYP1+ieo16QDdYnQirkL8fKjledNAqjtcyEfdZnBkvuq5SsT5PdttFhmjeYMbPJ1RoD0yeyNd5b Ga/v0gm1pM729z84RXkOCmVuZHN0cmVhbQplbmRvYmoKNDAgMCBvYmoKMzExMAplbmRvYmoKMzgg MCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDQxIDAgUiAvQ29u dGVudHMgMzkgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago0MSAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9G b250IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKNDMgMCBvYmoKPDwgL0xlbmd0aCA0NCAw IFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzV37c9u4tf6dfwVuetvKbcKQ4Htv m2nq9XbSdhPHVts7E+/sKLKyUceWvJa8m536/u/3w5MEIfFlQ6YzE1EQRX04LxwcHBz8SN6TH0kY +5T/FwRBSJI88lOSpez/2wX5F1mRl8ebkMw3JPCLuAjCIt115W3mJKapT6OUhEnmFxT3hWns52Ec kzTCl/kDP1V/M/XzmMR55idpeYtn/CYJ8A/P/hE/GhYh5e/lZcaeHsSAix+O0oyS+TX58xR3BkFK yXTuRRG/X75Mr8nL6TT0AxKS6ScyIezviEz/TU6mgFUhhg3MqxOjCVgR+UUUJfluYN50TtqAuUAV BqGf5HQwqsWX7eJ2Nbsib07J7PLydrHZ+E5wZrkfZElUp55BM89iZkcollR7nSQsLHzQL5USZkAh Goon5WoolCaZKoU9DP08Sr2arLeKlBNJz6HxeRxRkglUhga2C3rkE/KXk+n3p2cn37z53zQGc368 W2y2ZD5bkY8Lstxs7haXZLYl288L8nG93m62t7Mbsv7EGo68TqprcbyJzBGN/DgMCtUhSeY9DFeG pCPDexmRkuFB7Geplj1h3dppy62bG/tWWpJh0GY3N1fL+Wy7XK8gAG/XZLUAl7drwW/OayUIn9a3 ZDGbf8YtP5MNTA77jhPGxxhDkhyDiezTCDifFpkfY9wUqm7I4IHtX1oEGNqDeBeUA9u/NKfwJeJ8 DPzJEj8vdlPl8RjkRwUNk7TwAnUFD0e2tbpGaZr7KY3znob5z+u7+exytryVVkS/nHy5WWLkJ9/O bqGUYfqc0CCM9Mfq4sPp7IcFKb5zoqkJ/L8c2qD65lQSQtj4sAOZQ1iPQnmgT6Gq4HOUYOBK0/1Q Hk9VtQBqUayIZ5u/niaxHxSYKTT6MJYGvVkxB3Sx7TjaVsd9j89flNJozO2KFAaJHwcZpjAScydh e9ERouUQ2GTtArGAbaZhHaKeBrW4hl/fzj5tB3uHgxBH1A+zIh+KWFkZ9VqhtqcntPYcrioQYkLb LBB4lj3pDDG5i7KoxN4sxJbGnR6fkt+Qt6+n8HZrf+eLm+3i+uPiltlUWulUOUu3O2WJUKN3q02n qYFPYa/U5D2NMx9RhZ2m06JeVzG1WN1EFe1pp1HhY+Kp5lYGVUooB3H6U6hInPcdtiFQLsRGz/JM VAZ9LGv9+45ILFY1TcjhhoZBDpfYRLLH1FmYXqi/Adj4ENIkRiGN/SQKhmL7vWkNepCve8QszBM/ o3Gyj3wtATNOvY6k62WXKOZceZztJl37VFeRrivN+mGDUaAp7NMukWvHpiSOvTohHViKOGs2EJ4g nRPCRQgJFdFuYO3BWU03F0SL1GTf5OkTGDS47HIyYxh8A0k59BwkwJjSxKeUxtLT3WNbS1BqPHQ9 9khYhr/Vrn/3b05/Sl3IUDkzMIEZrLNHoI5Qeo2KiFfKGYAJZQ/rLFDr1dUv9+bwc889VNWIV5Ax JucI/RPRyOgaO5ne0wydYStCphwadLWkz4ltjSIsFqUBTP8uurbLHqdrR4b3GpNKq2ECM2hksbmr b9hL9krnOcz9sBZogpk3J582ps5Wo4aKe4l7lwZLj3UQqnsu6f94rYRd64aUffn+/vR2/eUXcl5h ca/5Z5M3SdPUD2JE/VPRg57WeHH70+JWoWVqyzsjgXoti501UnOYe0ldyqIB1BBFS127imIvraiI YuDnOVXRamEG29UVXK1w8tEm3RVZNGAZFLIUo6tLZvGq2/QpNKB0HSj6OmVVcD3mT8PAqVmAVM4e BBwygdqD8elnULuAtcu+Il5XqvVSTKqnUMPAabFzPocahu8Qk6hhyDTlXBi2chZlgnsCw1YZhAzD ZkApR6HDzKMCJFGFqVqo3GNjS1DlPIpZMBcM0+v2qYTWdy51MZldHLEItpG0cXbyXnga0vKyF6uB 3DuZLGgP3ST2Hr4rErsgrvY+koJlEiBVrbq61W6BJfFcQNN8Hwjt/o87/15ZTLYaHHNd9afTotxu lfJpPe/RGtr8Ig+wUoTcQz9PkAJZucBKJ598U6zmJEhkDDOsalIa+hkChpjHpknKHtee9WhmWjZN DEo5yzHrz0ZpXxIJracK3F9M3Ii/DI8MhPWxZvOcYMR0Lw1CJkWCqz1Jx5Lnzk5OLQW0GlxrpCmU Q+zwfo2k5GeRjXx8Dl0sgoRP8rCaT4s4DHO2VC6vzo/NjOEXciGXJztnWebzUTkucj8hBex1wnKf r0mt4Yqc86zgyiqw/SAwyouRqMUelPhFgWVt9iDegFQMNBSk64PE97wC30sqTwmQBaafUknHbjJL 0kyQJCtAqZzQBKmaeHVulChWc0PaM1xxkMEPiWMMWk/Nuv/7EgmpyDj9Dw+Bbu4+IgXl+Q4P5/Cq ZpD6cVWtt5RRP40RcYEa+gky/l2LGcQ7izG4Vn0sK9r4JL51IqH1FTOpAoSc3i4+Lb+k8VdfvVz9 326n5YFpIDqH5cFYJehdoo99FV77vopqhIjn5DS5Pjoer3A78fsee5RBohuseRhklBt1423ngQEL qX7isYdgXOBv8ERkIfV7APsOG5iuPf0Ihk08pHH/y34+Ie9v78acJEUCs5nE0qCkalYuhKqjl7UT GNuNtDN5S22BGQTs/g87p0F/tKTfaoDTJbYZPW7kXU1+RW8eoAwPtCfllCSFqxJg7a5qlkcy9TWh GaOlFXxX7GrbFWYJX1PwXS8YJw1QyiFLacND9GBf3rJeMFZQeo6jF5P5xRFhgaBvX59i3vH+Hyfn U6itJfhWg+vphyTtGHQhibAeamhCe9aLHE878tyKVDQNnmUQaAiw+9N3Z9Pvz07OT87++Xr65t3b 79+dsheLwVaDa47z3oyB3zE2g2RwfUdo+4ZBG2/YT/ZnDFyPsO8iGJKoy1TdrZ4Pg3ZPLiaXhnU/ P3339vykxbo7ie4jLZTmWU4S2ZWew5Swpi6IHKkkJYVMav0TuBXlpMjktwHlMG5F6QfCM42wLXgQ v1xrhYDW00yPd/wzSb2H64dZ+EICPE3HaQuHQXvQjM/F7nQ945P9GcMIGGL/ToASACP0e4ZBgwt7 MQkxBLK8uTdv//lmisGP/7GxkZof8JujWpuTwVDzXvZqDLxH4nEWYd/GCHk/DNpen7ca+mEexWPH NmkcsT2xBcEeXk7TnmMn8L2ywL+6dwG19DhMqE869gTYL1erADSSwNMgZGwafTFJpV1BjgJ597fS BiVmO7dBca3NrQ0SnRqBCYqx6BoVozRBA6HtdTrq4Wf7Rrc5Vqo/Y+B6js0Go/Q5sGl3ADKm7kzh M6nEr4+ltrOQ6sUkN5r5zReTotromPOiU6NgPJKwUiS7jM/jiPNB0KxBm3kaLmIWYY7CYSyPZCDQ HQ7GTo/D5bxHQR+DJGZI7w2QUTNCSRwGTRgh4WVU/7farQbHMf5Y9mcMXEeeXsKyPUfI9WHQlBfB 9smSs+mpnOi8Uu3iPc99Kj/ljZhdONV12Z8xcD1BUibC/GPk+jBokrtsWy/j+rFk+26uq08PwnXZ n1FwnaVvJmOMbMXJIGjccDvxLWjgZ0EC32IYsOpwI6+dwFTFmwbCtAc+C/i904iLwj0G7YiRgsmq PIuR0Aj+WAk1Xdd0eiXU6OWmGEltaaIV1YBy4JWvGJWuIxQokgzquelLS1NF+B9tR3mIPMQgQILC QIzfLH+4w16W9Cty8mV2fXO1YEnRPES+Wm6Xsy1KuJ6LAq0u3AJIGgoc5kkd/R5mH2TBK0axYFR9 GoMGhEg+SVBNveqWWqmWtlp2TkGoKSbPc9tbEkDveI+HwXqz4jWAF1LMNp/XP6/IckWkBGbPyXo1 X/B7mP/iQll0+QXVhU4W10kVEhSfYiEPShQUg8ntQW5WhYQcXy0Xq66VM3vllakyTzV0hl7aglfh WVOhhZrYkaApwbIcD4Lcz8anDINQXS438zVqebAC2aiBzudhsvq+LIMOGl2vt+KjClkfbdygKfVp mMK3Ex14Sk2QNVEkkiGKsOGVUZ6TpRtlUOXjTYRPqwzYTBaOUBsGwbpdbG+Xi4qYd7Ue7eVHsJjJ y+jGbJNAf4L9hKrYTEP1WQaoZ48jDO42orT9x7vlFU4yWHENNvB78gQWOwnfsn5N+b0UuxqTMIF7 J/E/oZ4i0hwBhobSU1FZEdzLS9CtNro38brfmKVyKRStJMCn1NOoQPZUguNZxuXCDYSlhih2fsP2 Mw7wEHYXxz1MPy83OOiB4FCH5eInpiDL1Q9mQQlsLHAxhdB5C6pPnTSk69S1lwBqVyWCr1zkQxIX DBuiTnGybUgvWNpxHwjr3c3x+nKBBcvz7eJmg9cZ1ihnq0tcYRP9xRFn/4LMuTPKTOPGMJfz9Qrn u9zNt/iOEwFQxTZV98YgANifncG9MtS+3alHpMCtAAyDxcPJSvcZ4zEisqmbCBBA6QlCzQR8Xi3m 7PgXISoueE2xZF3kRUQi2RPJ664RGS6+LAkQw/jFBMk1kF5J8cfdxKdK0dZwGkNRGcQ6SFwjwlZV lBRWgW8DyoGnclGK9J68ph5PH9gYCGsK//Buw45GsWIa5HJxs5xvmYpsf8EVzlkTdyLIVq225EJX ohhbk6OYqF6NwSwmSKOpsX0EVnEQKrZPUo6MPzNzOCNfvz1nS8izm9nH5dVy+wvzh7TTi0AXm0d8 Xm+2bk66knW5cdoVI/EomM0qK7k+R6lT6Ai7VvxMZxMalq80wi635paeISsbgOMtx8AfiqlxrDfy G1Q59HiA2loFK661Y9Xp0AzCvB2Hf6n6fgZVSiiHGbADLIChRNkuqhyaQQEWwFgVtKdnEMVqL04L GYECUUysgmg3UQ7MH4rTVVE0bgzsyRBnC/Q5A470Z8j5VNoGI9ELMcHeJfYeeHqeODwvDNyenlfr mxvydzs9j+LA6BCnFO4SygOphzo9rwlKadQf6gDYQtnj9DwaYz2w0Cq8Z0Jr0e1JT89TmDvZ4sGr qDZZWUlAcXpmaymUGsQ9ZC1lQA7s4vS8B4RjNMASanm1r44RvNQ0wdk6A0HrPBN2MTSONAi4SsAa CJxNpbqdnuciM1WFD2vg3ZhOdiz53gyLcoTC1D2NdFFDA4plArqy2lp36jR1wqEtPiIIo/D8aO7T YmgVygfoRBPPwhA7PFGqC/WBBbpOw13Xgvy9eIZpPw7IwLm9NSh7jJ4lSH3LylfBtS/EIoU0Cmgx FJw6ykAauR4E7H4OBA2x3bRATsQ+Aj7ZORBY2USq0EBYJum6Uq7XEpOOy++E2B7i6yt6vcBFKn2j Bq7ZrHalU1ULeK3LJrOqK8w0QSm9kYd6pE2GqxxsEHwJUEhYenF7rEUJSsU+pCYOdzWa0FXMqkAn zapA1y5Q7g6IU6ccs3rwjGyd7H1X57eXMOnU3xqUPRy07H3rAXGCw+JMOFHpUpROfKTclkgVglL4 3c4jmsQtQhIcikjHMLEGV7uKm7sz4VRJqhqwZtu12yW0S7ArcfsAnQ7Jd0jEvHzUUuw4b5LVYg/D gBWkvSaUiSyvmotDdTtXufXY11ip3Yg/pEBFLH66g2wRdW67lbb2kjxCLVMwOskwH0Pw+xq1+WtN V2hKcMgLNtWqu9gpEHGIFYQkRYfYooZq8RJsaIsiluGj21DZDNVzWDybPUp9M8JpuDg5pvLwCK4j VowUAC+RDXOCsDxCi3ioarpCE5LBwyTSTTG2agQck3pypUX8vseepO5SONmjdJvsTflwSZYSgGjA kz7jwAtWRfkD5IRcmpV4dxbQJ7TIMvAN6f1gvbr2rnCNZfwEJfX5Z5QV10ft0pgxBp+xdxAY0FNc U2xAYt9h7RRo2BfVE7yQ5gHesd9hV/gOEqvFNb7D4j7soeIuCGPlCeIdns2+g3g//032HXaXRqOf wHohns2uGDXYKQKN5xWwesUVUmMvFapo4RSBkvpScrpwxKtzBBiU4Ggx7SC5kB8pkbslF6VWGUwD kmoSB57EONo95SoAcU1ZnSCm1WGEPSj8Nc3yuntmBAyDAoMmnwejNA4uy+elEY4+0fH0LOF3iRc5 eKE2vnA/PpDJ2RGB2FEyQeKouFiqi5W6mKmLK3VxeeSJm9eqBcaSP+ZUP0d/XV/g5u/I9K+Elz5n NahbOyHHsrITTJOzBJYnkK4UljGkK/VfZbDmkZ5dpZPqX6g6rC9eHiFACQIm6pOXkhT6Dqo+UQ/R t34lb43UHYUirLr19bdVorE65MzKFGxzGdISkHyO+EaIM+SyFDkpOPE0xieRHJE8bc65DOwJmEnJ SQh2iYG2eoEX7Al5NknGv42IGsRNShAsn5agY7AV3b9GFyL9AilAGzgfkgmyyWMyQYdSMvlwRBIy KdDuTb7j1yBBxj81RaNeNx2nfMhDYGyUYcxd2SpOKR04/1vjzH/NcRzzX4359TN+/dsjkpOJuP7T kQesf+Cfivt/xa/heqJd3Ik5DXryP7wl4N99zlvwaUsfhM6D0jBe0HS1/Mb9o9ii9Y4+PAOaFyAp 9vXg/4sj8Q7gXoCewAIGyDteAg3evcJHAC4+AnB8C8DZI8Tn6GP55r/5589+DRnEDb/hLBS3PfuT uE/e/ju8AxtBpvLGZ98oEuFnE3nj8W+PPLwtf6UrgRAvK4waNjAB07knhBB5a1wkp9fk5XRa5XGE 6iAM0l/Fy994h/7CKfF30fTtW/QIFHl+5EFAwXTcjX7jmgklpxQ+/RV0GG/ErSCbpCReGM31J+/5 9dnbr4+85o4lmO/QIA2hs9WO7emOnLDi16f/Fsby/f8DkuZgRQplbmRzdHJlYW0KZW5kb2JqCjQ0 IDAgb2JqCjUwNzYKZW5kb2JqCjQyIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIg L1Jlc291cmNlcyA0NSAwIFIgL0NvbnRlbnRzIDQzIDAgUiAvTWVkaWFCb3gKWzAgMCA2MTIgNzky XSA+PgplbmRvYmoKNDUgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IF0gL0NvbG9yU3Bh Y2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQzLjEgMTEgMCBSCi9UVDUuMSAxNCAwIFIg L1RUNC4wIDEyIDAgUiAvVFQyLjAgOSAwIFIgL1RUMS4wIDggMCBSID4+ID4+CmVuZG9iago0OCAw IG9iago8PCAvTGVuZ3RoIDQ5IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHN XW1v20YS/q5fsciHQ4KqDHeXXJLFpYDjJD23TerGAtq7ODgwEm2rsUWHkpIr4B9/z1J8W5Eil7RJ 0wUcWVLtZ2dmZ5552dUX8jv5QqhlsPibaZqU2C43BHGE/B4F5A+yIs+P15TM18Q0PMszqSeqHk3W c2IxYTAuCLUdw2N4HxWW4VLLIoLjf45/4UXxbwrDtYjlOoYt8rdMlL9JTPyH3/0Ff5R6lMU/Jw8d +dtNC3Dxh7lwGJnfkJczvNM0BSOz+YTz+P3JP7Mb8nw2o4ZJKJldkKck+3pGZn+R1zNgK0ikjG6y L5E6dJRyw7SFU41uMpuTenR35Ph6Gaw2hNxlOOMHux/VJ/HTWRB9DSLybKK1lJJy65bCGTcsanrZ UiY7QTcsoA+pcubAxmAvezpXoExKmtaEUpLKRMv8qGdQk4p981MVXAaVqbUDuonckHU6y81PRacI imSCmuy2xHcdoMS+oR4KtpJLOXESKIn5ZPtUFVQOKtmn36dfmuDabVObGtxksG1VTjtwzdv0u0yL 8QNdAbbCyCgzLE90xhjLrw/hMU4NeNpK0TX7X1V0/UjOdQ3P9XLTU/Zos3ZTy/u+D+nlblU1PWWL ltyGrpxa+bLcrdZAyTdm4i2IplRKUOq8RR7VKTVcLlo6C3U7KgAnCdUpB/ZWAClzDW7b0uy7AFQD dw734PO9RHRqG46gICfKGhTLy9Wd8iVFmilxLEuzlW/L1W1aEpIaRZt3aC5A+agPhLm+uyG8O3/q nz87PT4lP72e/ff0/es3J38Ki7x//fsjqTxZhhaJ60Wimc6F58jA1tIpD6jybgDvXlR+/Vip7162 t2kaluCMJPjb+9A+NhKHr/G4k4JKtK74nFK0u9MEUvLgdcydp95PVa+CJPd+gwQ74ZnIa0yrvaYK u0GR1UNHu44I4f0+VXq/08rdgNXc9bIjcpUrgj6g80EinnAZqiKWO2L31w3hQc0WbLX4sGeNJ4sY Q7xzbMP1TGvEGu+GMNb4+VN6DhcEonP273epfpNXWMUr/e7zZCFj0LpwkSWPep93Q3iQ51TRn160 nfGcZAEtw+eLFz/qEoxWSU1OMFTBKtGmxHV0uXYrrpNzbYFCl+2ViuRq8a0MKt3I8b8KwzicAcYI J4XWQV3Cn+VXohtC6WHOn1q5g3l+dPxLjHb3Cq96RS5k0lzxL4m6biEFre9EPQbfY1uG6aEpU2yN jCqrFt0Q3v2zysm8eHHw+V78T8Yqk0WMQeOWY6BLp+7zcWm8G8KESdjJdk43OXZ68oqoeKVfrScL GYPWuWc49qj3eTeEI+IYyQJGxzFUwT4qx+BoVLlqQos+0IgoRieAsX+JGYX67eDzGU2a1M4TdGQX uzWMwekw22CMpenso1oedQ2apVgKkqEredREt5vdr5KX2FliR7Cih7MjatsGZY5NRDegb5aXW8zB OD+Q1//zb26vAxJe7JL+YL1ehqs+Ii5zMCNEbQwSqZgP6HmY6p2JGSkqUmenQClnUZlHaKnJujJ2 ltrZHuafbAxH1Y7lDFLHtl3PYI5wWwZJxyDk5OjdETkOV+vlIoj8DUxp3UeWRgUzHCDEqJsCVVFg 7jMGsSUbJUqTVitwaFuCVTkWBqyKCaNWDO9m4rGBHxzxczFR6FpoZNndYM2ulmuyCOfbGzlJFwVf tsF6Q3yyCr4R2ZH97fY4XAQ/aEJvVQPClJphWZhO3IOu2NnQyhXot1Z6rKLBT+LhSE2ZtOIwuccS aFBiOrKlm9iFRU1krbSFRrRju9QjdoJMsf/m9LnY2u8DH7UQbWw0T/fwPao12Rycqz7oEDqENVlo qzhWB8rVh6pyn5XAamlKTT4rvEVslMAfun7JMFvreDYndjd5rnr2o6o4H9XyOTo6ZpboKlByTzoM 4cIIJkeEHKEnTZC1NP90QKqPrZm1GmwVm6LAoWMywwEMMQ5boigdm5ktKVLJzXoYRmyinskdlYY2 h2EXecRZMN9Gy83fFblEdsbjoYZjHNcwUXYldgJ3BEUZ20QNLjsLo+hwYMu2PNvg3p4OHz+V6AhL DcuLMFiTVbghy9UmChfbeUD81d9kndrecr3eBniR+IvFUuayZBP2URnhiESO6eEYVSLsEVggKsAG Rc5WzCCbty64fR8uP2Nj3VB9u/Kh4zXZ+J+DlVR2SPz5PNwim4RyP2SIOxR6MfvlClmIO3C8jWFO 17WwfRLkWpo9yRDVF5oqk6NmRKA9DuMpop2GG07Z6R6dQCJZPvrXiCg9GdNNu6+MZbC56FVkaRVA AfioIkO7iAn0hxVEyaHJ5m16O7/tVV62ifITpyq6R5UXWvs4xumoiLTl9clfB/cR2EHvIDzDFTh8 1U2NH41eQKV1ehVUFxJisMbzyLJ0WHQQscNkOFphwembDJRa2OCzLt4VHx1G16Lh+HGlVzykgayY Zbno+Aj83Yry+9CUy0GZSC65AkrO4AdJTC0hDBvaaJmYemDwR/PPq/DbdbC4DGTdNm4DgLo/cBss Ofe5h1Ox1VxkgyQ9li1dc7X2hjYkHIv1PBxyK5K4EXD3brDeSm6+ufJXn8HkQnJmkNMgigJ/e70h U/LeILNltL3xr4P1Nz+akhmeWIfbqXSRD15kQ69OcNcmVrIULVrXCzXm6fRsCkVRdjMVeGWQP5ar SyQ+iz6CCbeYYXN4c1XnygYdeldYaI7Jmy1Gtiu6wfrZIP+58kNyEUbYHAGZhzexu5UKJevt5SV6 ZbIL2w9VQEMDg6keQY+sKNNHVS930GTJnJ4CJQ8Fw0RP3JjCXS9tkB2AMkxUwu0fNBvy0b0XAYMa hLwPLoIoWM2DNIQjKa2dZGlFwFBjMKjjubh4pohQkdXQDgIDwa6NW21GwL9MVIbclH4pQslteRgD Mimmd6qFMrB+uIdiu83GwI85khTPddLGzWMqiDsotrPs6L0C5eEUhFowo7bwJvBsu0dIzNJHB2pg WY7FHWaIvKyt64Vehtu5v/CXkTq4STC7druMUMJ960fzK1xUNSXMxA01e18fTv3LgFD6sZfSLUod 1IWw07X1ygQptjptTGU5Mmbu9m0JtUNtKDFytFNIHZTcgd03GGcGmJliwTwbjdJGoTsT1oHrjEob 6GS1CaJVsNHkzMUBm/jWpzLk5n1ETQwjmY5FeAZ5gpvSlJ2eCzWJCrqV21LQ7oYQuS9nNEXYsmzw KvIvcFXa3pcc8foHeXc0Q3Fm7+ssuN0EN59wYxo2Put3f+9k3uv2rr0LLPeicDmunZ0/VtRfslPd nLNooPFdYLXbO72zDzMLcgxzBESJcxSqcI9gS4sDwaWguO/C6AbDql+DlOz2UTSgqKUJE7NWHbH2 RcDT9ncKq0qbQ9sVgx+xmoYc7xs26o6B5ruNoYbmeCnDOxAfSm4XjkozNJQcbx2srBEKJxvDUooY zdWeD/dqLR5iHh7HlTAISmQPVb1r0o1MrVxTNgK6B+WA3kp23aqZWETWfJcjQ1PMtMGJVNUpQsrt KDHuzkKqsyIUAlCUM0UGpaXXvGf78JAZUfhw08RNs3USKmmss4TqIhxFf9XFfZJ7SHStSPYLP2ru /6IRIfLGqA6O0lOwEBT02T6weiPSdUV7UGITOggl95C4kQ/XobQ9LaJSOUVYDzXYld7xx7shlHXx KXllTMnxVbC+Qqo5RddhSrJ8dEre4sfTYLUKZQNiGtdcT41eeGhSR99bygG9D1IR4iYKrUj9W4ag Gr0fvouiVZDMBkQ7IjwLrj8vo89T8uQ0jDZyAhHTYdfkNAo34RwPzp8iJTl/9mTah6KzU3Ip+DFk HOgxcecRz6UXBwSqLhEvaLyIFFWA5BLxhiR5IRNPxQW1NMVGgLhkwHJclIkUUT7mSAxFRy6+M1mF hDKElFkzlex76CpPl8YjMgcHnhhok4JIW2L3pE2NNubiJlvPA2lR4D2qjbm4oZZZ9h4kbYndd+6q SWSoGmHGaEy7MpsXVZWoLTEm7uPGDjHz7O7yPVQK/Sgx8860s46Zo8NhgJWXTEqBUkqjzp9qiuUw BUYw2f/sCoaUjloC5U5lxyXKKg3alFB9C6PPcgL5Ngov0cdYnz+bkp+3qyCuZvbSsOc4MmMKE/mD iliRnqYiOwz3xXHaQh2XeS5OmKOG6VpoS/c+3MdQoaCjGMlicqoRlTaFNJcspawB7XLSngHXp5NZ OakjrA/v3xwzSr2PhLyM/MUqwNyVzJCe/BL8TWDdi3U8l7Jdx6co8OZ4cutktVjO/U3QB33OruNP VzQC+sxQYZV3FRTnjZr51YB5UjeA73EQHzlxfCj/1+BrcL1+MtV1+ZX5XHO0Tk4uKHi1Sf7L41Ow es04UAnwYHiEV8UQtwIrDwINBExbZtjZHc5WpAcFqsA1GyG2LJEbvBeppcPv3aCh+LJr+/cCjmPw Bnd5IFJ12rwoQ/chMo4P9rBdwfdQDRS9GWQiZOMRd8MYGJV3CcPd16jXJswoHs1n0uCsWHDJmzAE J28s3b1J7quG+f29CKZZhWQO5pPM7MYmRSQ58RqkMIZ5efkRah0cfh82k8f4brBkjBemzWSM91Hn PEZ8/9d2ib67v/vhpX+52l7jFVkM3auNyiHUP3stiKbCHkOcx0fm4WKidG5Qt5AyZKDvhvDXJSjd yelXQY4WC5moyIFxXBiGp6zn8fOzyF+tr/1NGMUk4B4fX9dEAtLPn2DJUlq2rmRAk9bcx05LZ91T aAnhU1xRidnH5xOyI+2Hy44lr1iXJHNL3iXmClIHJfeKtY10jTRPuuhUb/IzJKWOXA+zogzX1KHl KdPNQgyQS9GJAbp3T2edKGaha4cDuQrT1kquCntQ0zJifegizOrTHRH+Nt+EyZSTqUss2gFMh0D2 ANbbri7bb2W7BW1iWpRX36emabvlj7UqQYnpRdOMoLwGDKOM6SC/blsBVqVpTa3SjTyiJ7AUe28m 9XFER90qjuiF2P3W7wMtTWvAqRBbot3gVMu3NdqsSX/1xCBf/RV5GSz/Wm1vEJjONqglXGyveykn JG3XFPsYWAa62kx+iO54ywndEMYTnj+Qd8EmrosmVGPXU09brynPkHdxXEThjaQgoh/FpxE0Wcwo NC+7FXu3OjZv90Js68kh5eENo00dEO4+I3lXGwSlxOU/8lOQey8npTelMQW1dj0pppJwo304TYY5 H4xWINFXsCVFpWadT8nRbbS8lo0EqksYWsWgvD6iAuxCGDQYpiS7KcOUVbj4ljvZP2C4MtqTt1dX Mcz/AzMEryAKZW5kc3RyZWFtCmVuZG9iago0OSAwIG9iagozOTQ0CmVuZG9iago0NiAwIG9iago8 PCAvVHlwZSAvUGFnZSAvUGFyZW50IDQ3IDAgUiAvUmVzb3VyY2VzIDUwIDAgUiAvQ29udGVudHMg NDggMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago1MCAwIG9iago8PCAvUHJv Y1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8 IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKNTIgMCBvYmoKPDwgL0xlbmd0aCA1MyAwIFIgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzVvLctpIFN3rK25lM0kN0+73I6tJMpmaLJzy JFTNIslCAWEzMY8I7GT+fq4wkmiEnhQgu8oGW4aj+zh97un2d/gbvgOThG++UEoZKCuIBqOTr3EE /8Acrt6sGIxWQImTjjKnDz0KViOQXBMuNDBliON4HdOSWCYlaIF/vHnBye57amIlSGuI0vklgfee QPETX/s7vilzjG+ebx+a5NWpRLj4xkIbDqMZvB6CEJurnr4FwxlcDYeMUGAwnMBzeAHDf+HtEIHs 3P5BKP7tB42gMEcYZXoLhRJKNYfhqAYUo4QTgHfzySKehevpYwQfokkUR/NRtGoIONjPV1XsmFXE cKnA+IAvGztGLNbPgSxClsXgyCxWBSUvKCqJ0UwHT1BKspiDSksLmhZXq1xZbCsrBQezheUVV7Bf XAVYn96dooKcIE4IZfdRVVfQbw2hFMinqvucIUZZ5vahlOStQAl/kK+Lh1E4DqdxO3hBxo1VZcWE I5YX0F0gUEwirythugZqOVq2C1C6eGyyV0rkTCnCuEEy8gvci1Be1lsK6FxKlblSljjF815rSQHx ummEWlEAM5Tg8loZoEJZdw5QVa8xJEmuaAFK016L16Pll5MUERKSMKKajwpF1JSwC3xUVUTZOqKR maTrsIxA/uHFKtiqtQZypQog45YIpTh0A/g6ZcsBXBMI52P4SODj9DH89jAL4wE8+xCtovhxOr+F 95tfv/+Vwc0iXq9eBN20V9XNCIV60CJX+DdTQh7pUu2FNRXBxbC26tKdvKOeE1S2XKjzpCePToFw J/GdEP6Yru/g5s3Ns8FR8HAYsDoh/BJln9KddrsogxKOyZt6m9xxHE7Wx4SvFp91REnHsOQ8gNU1 14KPi0NQLaSU/nxIODYlE0i9SGyrgA42Rh1IzlGpOZW0al/ixgUjOKH5gBpHrbkg6hYv1GvUCbcH L7hgnXGpicPpcQ9S44gdKZBqKwz1m3C8VxWmOeFM7yexRcQaq+5uRWbQgGEKXZr+NKVlREi0o3xI jUNG5THsX7YqcYuzgXX7tVVj7TRdKAsKs0qFc8cTZ+1wfOrtps/PfyzibzCdNwzTLrYgsQIr9RgX RDJaqPcS0qo0dAivdSUTKCkrJC7kRjugLQga04VTJZqbzOJqLfGyjYOINtlJXEhtOeKQ1hN9mIsa ts5EX8NcHOzxspLFNKAQ5dhIh8DVq4INuJMAyyaQbsCW8eI2jlarzy8G8GoZT++BU8bJKaByfF0c 4rCefahePReG75O0fT5gGEWsywYMD0ouhytbqzjr7Hb5xvCv6vIcirYooKTdGiUlUM4zdmlcNpRL 9wGaSt9XD+u7RfzLCl6Nx0lNnaKImNAoxJOtEB+jF65zF5GSibrsg+GupSG4tcRbum0nmpIzwz2F 5VF6PWteL+7CWTSGzCc5SUUpLHaKtvIeyItWFDrdRmUVVTKvF8u8sdmxR1HVtnKexm6w/oxD3H6D YXQfjRazhjncIAx2dk2rSDTdGdA+wMumEFc7WxAxdSL35BnsgupDNJ9HqwGyBHqElDbPYNF+KRVY 6Y6KFrsIL5pBrgjn3Dcf62eC5lzasQm7wXpqwuapy/bsa+eUXBv7yLzcnVtM4ajC+qGl8EiCtXtV VL/0Na+iVnNMTuXdYL2dhdP7lzB7Wpjz7d7fF8jxtxHJ+T1oeyykit85x5lTahy/trD7IJIp7gEz nTK8V+3FlblD421GhyrzIhsdlMNzOwoP9Vz+xIdCR58b3YcpRuGYSdnhqJw7QZgqI/F0Vg8SpHEr tRfp0bgVTw/H5NzpUQLppTo5wIKjTr1V0VveyBLtCCNlD+hNCbQjaCZgL0pvuLUkknNbPegejqc2 0BDtQ4IYjvr0cFTO3T/ojhphekFvFMcHk/ofXtXmEvQsJpp0CnfQDgflzPnBOZSww5WSB+UsJqe0 qIa1TgmuxNjIQW0zlRlAKIu9j7c/l1O0GuE6jEd3eE56kNjXwrsEn3y6CW8jYPzLSY/N7N3bRWvP oDaltA/aVGpNFNc1q+t5ik+hNsU1raU5+td6dg94HquhhG81jzGqUAQZPL2/xbZd45pa7t8eloBb OOOHEdqkX/+DeDJCpMlPWXJ8fgDhIw5s4dd73KuLFzM4pgHSzcEyCydTMRIdVYeHP1vG+W69Xr68 ulovFvcrMo3WE7KIb5+eXmX3dXXMHZQhz8bLPeRdWri403qwIHaDuQ0cSInnm3HXhaEKFMm/aOzu s/4P35XNFQplbmRzdHJlYW0KZW5kb2JqCjUzIDAgb2JqCjE2ODkKZW5kb2JqCjUxIDAgb2JqCjw8 IC9UeXBlIC9QYWdlIC9QYXJlbnQgNDcgMCBSIC9SZXNvdXJjZXMgNTQgMCBSIC9Db250ZW50cyA1 MiAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjU0IDAgb2JqCjw8IC9Qcm9j U2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwg L1RUMS4wIDggMCBSCj4+ID4+CmVuZG9iagozIDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvUGFyZW50 IDU1IDAgUiAvQ291bnQgOCAvS2lkcyBbIDIgMCBSIDE4IDAgUiAyMiAwIFIgMjYgMCBSCjMwIDAg UiAzNCAwIFIgMzggMCBSIDQyIDAgUiBdID4+CmVuZG9iago0NyAwIG9iago8PCAvVHlwZSAvUGFn ZXMgL1BhcmVudCA1NSAwIFIgL0NvdW50IDIgL0tpZHMgWyA0NiAwIFIgNTEgMCBSIF0gPj4KZW5k b2JqCjU1IDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvTWVkaWFCb3ggWzAgMCA2MTIgNzkyXSAvQ291 bnQgMTAgL0tpZHMgWyAzIDAgUiA0NyAwIFIgXSA+PgplbmRvYmoKNTYgMCBvYmoKPDwgL1R5cGUg L0NhdGFsb2cgL1BhZ2VzIDU1IDAgUiA+PgplbmRvYmoKOCAwIG9iago8PCAvVHlwZSAvRm9udCAv U3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9OVU9RQUErQ291cmllck5ld1BTTVQgL0ZvbnRE ZXNjcmlwdG9yCjU3IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAz MiAvTGFzdENoYXIgMTI1IC9XaWR0aHMgWyA2MDAKMCA2MDAgMCAwIDAgNjAwIDYwMCA2MDAgNjAw IDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwCjYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAowIDYwMCAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgXSA+PgplbmRvYmoKNTcg MCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvTlVPUUFBK0NvdXJpZXJO ZXdQU01UIC9GbGFncyAzMyAvRm9udEJCb3gKWy0xMjIgLTY4MCA2MjIgMTAyMV0gL0l0YWxpY0Fu Z2xlIDAgL0FzY2VudCA4MzMgL0Rlc2NlbnQgLTMwMCAvQ2FwSGVpZ2h0IDU3MQovU3RlbVYgMCAv WEhlaWdodCA0MjMgL0F2Z1dpZHRoIDYwMCAvTWF4V2lkdGggNjAwIC9Gb250RmlsZTIgNTggMCBS ID4+CmVuZG9iago1OCAwIG9iago8PCAvTGVuZ3RoIDU5IDAgUiAvTGVuZ3RoMSA0MTAxNiAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGMfAlgVNW5/znn3pnMmrmz7/uWyUz2HRJyQwgo iARlCxASUEAsChTcreCKLAp1q4oKrbtWDWExgAq2tnWtu7Zqn9g/4tLi9pC6kJn/79yZAMH2vZfJ 2c+999xzvu8733buip9fMJ8YyCoiEPms8+YuJcqfZzaSt866cEUoXzYYCClav2DpwvPyZevthKgW L1x8yYJ82bufkKvnnDN/7tn5MjmKtP4cVOTLtBZp7JzzVlycL7tFQuiMxUvOKrR7K1H/+HlzLy48 n3yAcuj8uefNz/ffIiEtWbpk+Yp8ebOM9LWlP59f6E9nEKLbmm8biovxCOSn0Qg5lVxNVIQRiVSQ qYQIm1XTiYgyb1cRUvrqszf2mJq/1Wg1ysX3xicr4/qD/vV7ckU/bBR/1KTRoFX68x64Tv3w4B2E iK/kinJviD8ea1GuRzRtN5mS2yfs659aIw8gGaEk24pj1atQ3KY3Kmm/tqa1rULYR5YiPIHwKoJI ehCvLNQIJIhcKwKv3YAgki3CHtKHsA/hNQResxs1u1GzGzW7UdMqDBAqPCns7I8FMYLt29yx6i/b PMI2kkNgwi+FdSSMe88ppD2FdAPSUtRvLKQ3COv6RwZNbVqUKfkScQ6B4d3u6h83qXqXkmloVjKb hmo2bUNNsM0t3IVR3YVR3YVR3YVRfYmY4u6bUL8J9ZtQv0mp30SocqtwqnCrQuaufpOjUINMm07o EqaRatxiRiGdLkzrrw7ubesVpuLWTyjxFmEK8huUuEeJJynxSqV1pZJfouSXKPlWJd9ayPNrK5R8 Pg4qeROPhTOEM0kKT58sjFfSTqGDxFGehDJPTxdOVdKJwjglPQ31LtRPEDqIBel4YaxSPhXlMSif gjJPxwlj+8cEK9uWotyDNkZMAq8fg5GMwWKOwSTxmg0IWxA+VGp6EK9EeBVBUHpSYQx+7fi1CW24 QsY9ZLTIRBBk/FrxGyWMQksL3qYFsSw0432DiCsQWhEmIfQg7EN4DaFIaEYcEupIJYKM0InQi6DC fTK4LoNxZfCEjFBGYrhXmK0nNqShQhpk60gA5QBb1x8Iym1atp10IvQiLEVYxbb3qyymNhv68b4V CJMQehBWImxGeAJBQ1oRo0XWs1bWKkxikwQR0J3a1txcraQ19fnU58+nBk+1qe3nQgrTlCKbEQQM OYUhp/CqQ6UgcgygkyR7EV5F+BCBT3gSk5HEZCTxgklcn1R6qZV+X6KUQxDIEsQrEU7sw6cmiVdO 4lnH78JrS1BTgnuW4JoS3K8E0/ghYqpcwds7ETYg7EXgbRG0bVDiVsSTEBjuEcEb8JwJcVCI9DOt aQDzS0eY2how75MQ0MhuwGzegHm7gUMIZg+wjZbWQo8NSJ9AUAm78Evhl8SvBL8IfmH8QvgF8Qtg 9TbitwG/G/G7Ab/1+K3DatieSO9Ns566JXUr6zbUba57om5vXdEeNhe/XtYr64jDAZpoMWs8bRIT yWxipD8o8WNK/HMllpXYKXtmGw/MNj4/23jHbOOts40zZhtPn20cO9tYMds4QOfJzrTx/bRxY9o4 LW2sTxvr0saatDGVNraZaRedTozkGSUercTVShxRYj+d3m8k2qfoLBLWAOJpcnv4yuDH4QGR9gev Dg9okFyVL83KJyN55c5gZXhhMJOvSeSTWPhpEXcgU+lvSRFNy5miF4p6iuSipqLyorKikqJkUbQo WGTTWDSSplhj0Og0Go1aI2qYhmhsA7n9MrYTSmxq7GqUqPleSEQlLzGeR4SYMKphZDzpswoT2IQz R9MJffvOIhPmhfqOnBkdoLrJM/tU0dG0zzKBTJgy2tXXkJ4wUJQ7o68xPaFP2zlrxlZKb+xCqY9d P0DJlBkDNMerrvX2Wdpn7CKUZq69wVtIu7r4NTO2ivSGG7qI48JWV6tllLlp7Jh/E/Uqlb1j0sf/ XMez6TQfib/vtglnzuh7xN/VV80zOX/XBMzzmaHZM3axRlbfMWYXa+BJ14xdulWsseMMXq9bNQYD GepHQqgfs4uEeaL0IyHej4RO6hdgDbxfnCf5fgGlX2BYv60t4Y4xW8OI8n1alD4tw/ssHN5nodJn YaGPoIxfucXQfYr2k7DSJ1y0Xxn7iX0C+Wf9j33i/7bPCdM5f/QJhZ9k6S4ynr6ztf3SjvnRjt5o x3yE3r51F57j6ls1LxTaRdrpO7wp1CckeueddQ5P584foO9E54/pa4+OCW0dr1w6vL3vUt48Pjpm K7m0Y8qMrZfK88f0j5fHd0TnjunaNm5u6WPDHrdm6HFbS+f+9GF9c/nNSvmzxinXnfSsx3jzOP6s x/izHuPPGiePU56lQD3AUkNGd7XPzqfbmF4HAO71hrtGO6SloxRoHhl2XeHdLRL6ENGnu/oM0dF9 RgQO6GVtZW28CVjGm4pRbSo0ua4YGfbupg8VmiRUm6Ojiatj0Rj8L19eyOSL/2u8fPnyFXOWz0Gy fIXyv3zFBUj5mpHlBJwr3qDNoOxvQVBjTpvXIaxXaLSwfHnXCqKs7/ILCH/6Ch4de+jx3AW4OV1+ IiQQ/shhf2ilaZIPuN3yCyjGwIdxQf46upyiEbfBpSsKdaA54icINxEv0oAwDzs2yX1YCH/PXpFv zw7mcuxddJ5SCEiU3BRyK+rwoxPzKTmbvEXOI78kv0JdDf0zeZjIxIS2t4hAwf2TZnIzuYi8Tabm vkZtmNxLviQZ0kTOyWWJmawkWfoLci9lfKZII3mTzCcbWbOQFv8B4lhKK4VH6VWkDHeZQm4jTvIq 7lia06G8jflZM66aQl4SejSZXGXuG7pPfCE3j/yGNrN3xMfJy+QQjYgke3VuXW5T7i5STA4L/sHf 56py5+GqqaSXXEAuxwhWkXvIK7SLtbC9uTUY0wyMYSV5krxE0wCoXnB0Z6D3NeR2sos8Q14lfyEf U0pNtISuom/St1Rk8Lnsc7lTc/NyS0gHOZ10klVo9dM4bWMzhZnCY8K7g/8vuz8XwL2nkAvJxeQy soFsJI+Sd8lfyftUYDo2hU0VHiNe0kJmknmYzZsxpofJC+RDqqG1dASV6XX0t+xCURh8Dju8SOyY wVNwt7PRdxPm9H7yBHmOvEZexz2/xpwK1I3Fn0pn01/Qa+mN9BZ6P/0tfZz+g6nYXwRBuFL8o/iP 7Ds5Xe7O3MN4rpf4SAi8bgZrcBrW8xXyOd6vlGZoK32DpVlGoKJhMJutyY3Lrcz9IfcuiZIk+raA r+0gE8l0jPoSyF97yB9x7Svkz+Qg+RdmSaA6asFchGiUnkHPpBdgFI/RL+kgc2D9Gtli1s/eEtLC K+J08fHB7Vl7tj/7ZTaXezTXl/t97mVlfevxnHasQDdZChTjK7YDz/kDOUA+I9/iGWoaxFhPoRPw vrfj/h/SowAnDbuC/ZblwP1uFF4Q3eLt2dOz52Vvz27L1eYmArYEMF1uUovfCEDTVNKFe1+F2byX PIKV2QboeYd8QV00QCvpqXQanUF76Tl0CV1Kl9HL6OWY1YfpdrqHvkPfp18wkamZHfOUZmexq9jN bDt7jr3DDghEOBMyzDLhMuFmYbvwmvCpKIkZsVKcKPaKl4iXqsCSqR2al486j543OG/wzsHfZ8uz Y7I/y67LPpt9J/v3nD63N/cxUZNKjLGLLMQYf4H3v47cSDYDPh7BGD8in5B/YM2/wVwIVEs9GHFQ Wbd2jHsiRj4dLNMC/M6h52L+V9FHaT99iu6jz9IX6Ev0DfoB/ZJRjL4cv5HAgqlsAd7hTvYo62N/ xe9b9r2QANdfLdRAqujF26wWrsf7/Er4QPhYZKJdrBLPFFeKf1IJqrNVt6k2qZ5TPa/6XC2pZwFC 8788/VBi4WX2rDhKWEy2QDoQhM/ZG6yZ/oL9SB9kfvosnuYXOoVO1s5GgjfaAyg/j9iKNqnD6jCz Eamol9+E3cHKhOliQjCQFcA3wmay61gveYA+RX5kpwDSLhReYVtYj7BJvEkcRd+FfPEsVAFGeoS0 kTY6Cmv3JlmGFSoTnhD/zO+o0ghHVecxY261+ImKCW+ADrZQJrxIZ9JDtJM5MFsj2Y0kirJEDyE9 FRj4V0D+LrCdjeJ+YT0bz95H3WJyM30W77iHLGZ76G+wLo3Ax5/TTnqXUEWuoMswI03kXHYLibCl LAJ4nkr+m15F7cDcH7E2MbaAiIKRnUXeYl1Y9deohZXTKwCn55F1dC3J0EG6j7zMfknq6XzhmaPu wRJGjx6iW4VTyFb6o/iC+AKY7x8xk35ArobKgJB7QSOmAjPDQgJQ00hUDHIc8KkXuG5m39LL2WKy iN4ufEbvZ21kEpkvLGdj6W3Zb8U2oQYzthvUpF3dpCGqZpVfrMWKf0JGARoXQkNyjvih6iqeF94U Due6cuFsj6o4+wG5FLNzCqjbOuDSKeQ96qBz6GQxxyaIudw08ih7Qvwg56QGGiav54Bh2R20mcZy Ibosp6eTAeFzuO5FXCdeK14gXo796UdQzevITeRO8jvsJvdh30piHk/DbM4G7VmEPaISGoM6vN0o MhpU6VS0dZJpoKe9oJILyPlkGSjv3eS3ZCt2qAmYjzm4bgE5F/XLsUNdRq4A/q8m60EDbiMPkNfZ I2wzZNzr2R/YhWwReY+8J/xJkOk08pa4RlxJzoQMPJla8eQGrFIQ163PvYmnpYgX1L8WWArIz/0j 907uocFXcb8HMPab1KPJP9TtpIRMokdED1XJbVPk1lEtzSNHNDU21NXWVFdVVpSXZdKlqZJkIh6L RsKhYMDv83rcLqfDbrNazJKp2GjQ67SaIrVKFBglmY7o2N5QX6K3T0xETzmljJejc1Ex94SK3r4Q qsYO79MX4tfNRdOwnjJ6Ljipp5zvKR/rSaVQM2kuy4Q6oqG+V8ZEQwN05uQZyN8wJtoV6juk5Ccq +Y1K3oh8OIwLQh2uc8aE+mhvqKNv7IXnrO3oHVOWoVv1uvZo+3xdWYZs1emR1SPX54wu3Uqdo6iS Yc6OEVsZ0Rjxin2e6JiOPncUl+I2Qrxj7tl9nZNndIzxhsNdZZk+2n5WdF4f4VxgWulC2pXH9Knb +4qUx4QW9eFtyLrQ1sy+tesHJDKvN204O3r23Nkz+oS5uEdHnzmN547pc156wHW8iJuD31x9YqtX WNvhWhTindeuXR3q2zJ5xgnXesP8Dl1duAeuZfGxvWvH4tHrsVITuKTUx67tmtFHr8UjwTPHlbfK v1+eo4/3nhvq00ZHR89Ze24vlsazto+ccUm43+ORd+X2E09HaO2UGdFwX6s32jV3jG+rjaw945Jt bjnkHt5SltkqmfMTu7XYVMgYjCdm5mPS821KTunOcxPOODazlI8xemqfDIg6K4SRzIjinRp5NL+R rD2rEQuAvy6Kq/rOxoos6tO2966VRvB6vCLtU8WlaGjttwQQED30z+E1cws16rj0LeGNHE6OgVof nTuU70un+0pLOYgUtWNNMcZRSrmuLHPhAFsUXSqFkEAgIp2Y27ldIyow/eEwX+B1AzKZh0Lfqskz 8uUQmeftJ3IF5AbWy1v2DbXYp/KWVUMtxy7vjQKSt4OJIMTep0kc+zdJDmvHOSP6qON/aJ6fb59w ZnTC5JkzQh1rewtQO2HKsFK+nU8o5g1thVyftX2G4GWo4znmFZRWAOXsmce6oDDD0CfG8a9WgPrs gSINoFKpoaGxfVLvKfm4SxcOF3Dmf7toIPcVv0pJjl9WeI2+EenCQPPD7hs5rDxseIa1woQpIDls wpSZa9fqhrWNBTFbu3ZsNDR2be/auQO5VfOiISm6dhcYkMTapR0gQ/kVHcjtXuftG7u+C69yDh0B uGVk9NYovX7yVplef+bMGbugaQldP2VGP1ib9t7RXV1l4itkIQK0+VSHNIv0I/EV1o2Ut21Emka6 G+krSA8ifIxwAOFRhN8jvIPwHNotSN9E+AR5a74/bUR5HsJ8hFsQ3kUwI0xHWIlwD8IMhM0IqxB+ hsDvz+/dhcDrXAjlCOcgbCuk/JpdCBsQzkSQEOIInQhnIbyNd2jBGJqRx7vx9yD8ffh9r0Dg9+Vj +QXCVISnEbYj7EXYg2BHWIzwSwR+He/Pr30V4SaEWQgjEfj78Xe7FeEQnoeU4Zn0FiABBD3EBBYm NbgMTDz2Vl7DVVz8j0ssKrTBvATtrpboiB59jZDITLDWmCFhWaFJthMHJDwXuHIPenKJxM/1ybhb mEQgb8RInCSw65dgjy0lacgqZaQctp5KUoWdvwYcUh2px5UNCI0ITeDsR2JvbgFH0Io9vw18Qbsi r4wl48CTnAq12wRwCRMhs00CrzAZct6Z2LVhO8JfA37r6NmQnT5mzeCGXwQ3rxN6xStVatW76seL JhT9oHVoL9Vdp79U/7TBarjQ8IwxWtxominNMLvM+y3brBfY5thvd9Q6PnFd6PovT5u30bfAHwnM DV4Zmhh6IXxPZH2sLb4n8XpybfLlEm1JKpVMHSl9LD0r/UPmobJV5avLD1csr/JV/bz645ojtc/V /aZ+fcPUxseaJo+wjviu+aVRF7beLTfJr8o/tD2B0TLOi4kLVXyui8jYreqiAWrYDvZAJfKMQHRq FTI7BYF5tEW8biclbs2ky1zp06XDzRMHm0+XjjRPlAZhHGgebOahqrLGHDbHw+bwQpEcDQn7jsoq 8iMJifvAl+vYg8Kz4htYTTPp3VqsGmDXyTqq03Lrme5d7W52H9GzZ2RDyLzX/Kr5Q/OXZpV5N3UQ xp7ZpgE/PsDu21GpWQJd6VPsDqz/17STuNLSke7Dh6TBI92HDh/COJqlZoytqpKGBbU6Gkkkj2fw rLHqkNsdUtOFStblCanEN7KeRDCYoAfzKWYlm/tQyIpcgmwjR+QRlxddrr286UX6ckg1snRa5cLo worLiq4Ztabt4aLfjPr9KF2sIiXXVYyQuxNTR6hjlVVV0aY2ALK2sXqADchVdXWbEKqrqhurotGq qhjR2tDYFqOVojbaJJSqj2VNQvmsZDIxQD3bAxnZFNtDNwCOqaCSnY1E15oR9KV1nvbwLMPW5oza Pfrrp1wDNHYtX4uJeHe+FqR14qHW5sMe9yFXhefQ4WbpkNnibHI20Xyyujxd/AvpORfRSIMtlqYK F5W+rjj83Gpe+RwS6Tk+ccu6SXc4yeeurra+IcHjmmqHk0d2m7qoKJGIRtR2m9Na35CvUkfVRc58 NkrVaHLUVDcIU+SZN16887LF4/23LYqMiaR1ZnexvS3YFulYOPPTlugZAY/Jlqwc1TQu4PEEsu1T zrr2zKWnnnXNM2vOvS900YSSs2612R1ui8Gmj/q8C1rbNmQ3LP+Vy2J0aB7unua0WlxMZ7ts6vwb oXyi9CNYHv4hfgLISsmSaieqHmc3kcc3aHIKsEwE+cjS0/PAcmDwAGk9dCKAfMSBIewCXIifDP53 aThcihuw7uxRyHmfgKZ0ysmUoVRiKmexVWdxqNUqyemw2kdZVRO1WuuW4hgBQWLE7XtxN1URF3Ur a9I9cZAvgISnATXMlia+Ck1NeHA3rbVYGvLzWQQVgM3C+XRMeDLBEqy7+ZGkodjiLjp/zpzzi9yW YkP8IZl+s5wyekZU7zLrDC9mB+67PzvwggFTqo/Q8VnMQFn2KFtZGG1Ky7QeN3N7RD5irUXtdEgq NUar02HQGK8JBJIRj/++3XTi0HiP8PEewICV4Q4brY2xojw4NNRb6mpZMg8STofFwVb+29F+vTyb yz4WMbgx2hfoKffdT095EaN16SPZnRgt9FjtYos4EcOYJVe5ZwWDBNaPB6VZ4oMa0yytVuP7gMzS OGeZza5ZkqShs4qKNB9UGqjBHdJ0XulKkwoKoO+eqMwvhsynGasKzMd0Dx5Aihwm2swnNVFnDiug XBM2K5BsN4cVSI6yX7oAR9n1HADpCp6nK3ieBbOzlbr7nFark/5GAdA5PM9hLZ19i71OywFSNbLr d+QNsp98ha1qp0j/mz1L3jDBvMOKnqK3Y8M6j/qPw1wFH1E3DdPCVEKZYs6+6024owItH/xLddSt gysFJbtZkWhlK0GTPbKB7MM6qZhbPOtRTnQPSAdJxUR+I3u4TrQefZCtvPhijOmV3N+hOP0au6MP FLVfoxf/oncXn7eLBvB8hT4oIB8vIGketdnUWGPn5AYefT2pccTpPOD5B3PThc9V5wGkz5NHaLUO 6tYKjaRJO5aeqp2l/Zn2Qnqxdo1mjfY2eof2fvqwdifZSf9EX9C+Qw/Sz7RH6Hdap15L9QP0+R2C fhSZpR2g/RjULM3TFQIV3jUP0D1bnwLZPtw9CKp1gCjzsqy7Gzo5ZVwNtD6PGsL+wdlmr9mtY/fq bcVmtyr2w4y422Swqx5yFrtNeoDwx3jvT1VcJ1dBH9tmYbro7tw3RMgd7i/TpNq0yJfkDpNk7l/E gWDP/Wunr1hbrClmu3PfESn3Tb+/uIxfUZr7Ro6mVL7iYHHEcp4m4LOQcppUGSPR4nCLJdOisqhU Rk8LdqCXd1bFWordlb/eTdVAnUyB/EpHgDetAL9DwByguZlHwPX2S+SZrFxKuNxOt8Ntd9vcKrXP 6/cGvEGvqE4mShKpRGlCVOsNOoPWoDEUGVRqIRExx2QSsnpkmlbHZXBYFTKNmsIy9boRJQwZmZQz RFxlD/09/krxl76SNBb+6FBGScHYy3ZzwOputQXMzlYzjxyBgKU1MpD7UZaRSdp8ZkReCZHbhMhZ 3BrlUdLmMCKHSLChnxCw6FvLdIgcPOe3ucP8Jv+UnciYbM4gvyrYynSSeZSTR/nRKUM8FvFhd1G7 pNCUZCIBclInKeTQ6XA4HUW1qEkmohFmx07ixK+m2lInfHrl/DvHX13u7zA5kZtwVXlgjOSY0l7q Lmkad8OW9rSrpOmU9VvY+69lv77n8pF14Ztapi1/jUo8H7mpedrKi15pibqj2f37dl3055aIO0bD +zi2HQDz86n4Haj81n6LxjuQ+042mdVEo/XK3k5Lp1fUmnazh4mBbpK1ksFgkp7RahivUaHGQlUq Rp/RFBQtRRavbTcsIGa28Emi0moMbmbbw64Et+Nkf5Z1ZKHZTBcSiUpPs6VgVH8Nw4cCQeBgQMIG D0kKA9N66JCyXZNje/S3h58bVqiqJN18YekQITtG31QFFKpvYBtpiNOtwcUKJQtlv7BpTW6dxi1+ 9+Nsvn26LFanWDlN7TabjBrOgT2KmXgXuJSmoa1q1j5lxpNefVolglkZoLN26Ay2logKVKR1kPMS VZWwDzty/yVnvLHaU0yXFl+XvK7kutQDJQ+k9hi2l2qNFp2jztBYKqaipYG0LRkoiWIn55Bi/Nxy yPGDZdAhlmiGZvKDJwsTqXqaHgBh1VMjiNqs7VqtzuAZoN9vV569h86CCMBQr/nI3BJvM7IlYOad qA2gv56dBzXnL4ewUjoCpvAICAzf0A6BKcIGIR2ihTklEuZUwU5fMGZxOeKhhD3skok1apapM2iT qSWGqIBdV16Zn29MOVlGl6W7GsJ5nsgOKhxrGMXqagGu6iL88pQ1T7/U6iJSNMiu5RvL0bco+WbZ lODjl53/iFutNUhm56Jdc+/+e2LWhdm/7J4S5ot0weUHv1hyzqSSxQ9c0e0q0jmlyvvmvLd2xNzl K7If/JrD6u9zfxcxUQQLv21xIyUDoFo11dV15hGxU2Pj4+2NPyfqleHrGm8Vb667rfH+ugcad1l3 O1+yvmR7xfm+9W/Of1p/cOYqzPy6HbYIFs48gBX0IZPSmPTpErNQgYG4iCrqI+5AqCSRcWPpt4VC lswAvWFboqWmGOkOS4s62lI/QI2yzt4i+HxNgmdExW4sgY9d+aTe3VSjUhv/uZuuygM3yCLfrCce OHC6dBA850SJ8+l8NQYPoAgGtYmTSwXkAVjmPNH01dbF4labqIrXRmVqVdllGqtLyNQmWmQCAoKl uRJ/SBq7lzWSxmXUkWehODXhuzynGvVYFyyMUuFUSsoqDeFIfjMUrCsu/XZg8aflJqck2TY9dtMf 5u7sDnjc7lOW3Xzn5dNvykhmvdk1/ZI7N788jz1au2Perz6ZXSlZJJdp+ZNLJ2w8k+MSXTtrzsbm WpvWKZW0TN17zZTbsDe9w/EJHJkfkujrshH7eYgFwip/0OfAtB7c6fc/4zDZLQO0V7YUFz9jD4XD C5kAXktg4SBUo7OeFARRFQ4YA8j3Q+wdYNiv/D6OBg5iQp3DLgywq2UTVRUv9PuDxBSgQIXAbnY+ CdNZsh44RN0RUbQbsFu9geWAsFBYjmUTITAta4a0NNgMDlVqBgPVLH2h8FKKCDXYbG5SQV5QxAWO ON++1UwKqamqchkN19Ea8xA/MZQpEKIaszlKBWHwTfrmE2ODHk9wrBJnn+f5uzPZ6bRnrpA8+jKf u+y3Q9SI9rAPB8OA8+c4nGPmMuS/5Ijeq/VFtCn3CJeqLHVaqid1fur21Avu913/cGncHIgdHIit yHhDUY1NCsUcQQ8N+sPkaUxUnNMRzMYBWetvEUUdScStA/T/yVpni87TIhXRot3sWpJii3eg58J4 bID+7UnJXRYXdUMgfHzOwG5ijg4NdufBl7P0FYdAtTkIK6w9h2OFqLhcPpXWp8L+7dIi8qr9MnVr nMchFyicTncvo+YCqwOQ5HveMMiNRvLkZIjI05Xjr2+55+2vtl90/ulywiWZrb/qv3nfA6uuvjpk BCM+npMQ8abs/GDwv3Y8/11dvCHssLgtN7zw4I2PdUguByvjdAjk04LZ9YCKREklfUQ2lEdssdpI IB0IBxK7c0dgNPm7XFwnjtS0ixM0U8WZGnUcE7wN8xsqpNjwUY7WxgZyb8k6Tj1wdUxjHMCVK0VR 1NhEmyYhJjSl1hHWCdZZ1nOtl1ivt14b22PdEXtP/57lH0arnqo0RSF1wm2KheLh+aGzwpeELylZ XrG0cltkT+k7hr/rDhosMzVgeiSzJWS1Be0Bh9/pllzGCIkZDXF9QkcrK1h5BrtIqihdqnKqi42x KuDI/TvKWgRB6x2g/yU7gi02VbJFa3R9pG4hpVJpqLSyVCx9mr0C3U+MxoiBPfBkpKWymBa7q/bQ RnplnmYpwgXfOwa7FWERGwhf6wN8lfnul98Bwdv54plQWLRKJrPJYhLUBqPeyNQZsVSmIWtkgP5W tpOEDrxcPFaiQWVaVSbTsCnIW/Q0bkzKJFWEqMDISc0KJ8fp2jJlg+csU2HrSQ9xxZx6cUjBtsOp XEFujEYIJHJHgehx0KGLT79//nWvPfPgeU/Xt7dWbnn78imNLofZaEm1/D671524d8nSzVvmz53Z zKzLz//wvtu+v27dY2/cc/2izfMjJrfFqbNlt34Sfn3nXU+sv/q3ZzYAK9/MZYV3gJV2smqrVuAs kBqkq5Sp1QJ7RmswGhfaic1uJ3YwEwan3m4ggkTZQr3ObJJ0omTQ7wYmUvbQdqfW7cD+cIx9PjBR YXxaJU54QHcUdYWyKawuLigsTtq3aV1YeW8wjmE7NA55uUG4cvABTksEIfu4xlFscanFxQkFLTZf 9+PzHrNL0llAhT+BzPCJIjPESRVdLY+xPBh5kXxBvjCIHtFvT5dNT89nKn2x6PIW21xrXbfQOzV3 6m9Obk7fVfYwvTe5g+3V7TbsTr+iezFtvYTeH2ZVtjJwNv2+aGAg97f+ymj57tzfIGx8t92sKSkB lvytv7Qksjv3TxLPfd6fjIQ5G2RJl8iaaEsqpfa3WFUVLWojHPf+KkuplENKtAgfeVpaHZMczDFA D8n6mlCL9FGmReuuPknsAIge5novTooOcuZMgVOFBlWWVXmDZruoCVhCMvHZQIfKiyAzVKqwjQbN oEheO6IyTYVMqiBgHBcm+Mb6U0mCdNPuZWQZZIldJJ37dBukAbzIp9sgJPBUroSMoHKhpHIhR3mO 8pzKZTO02l3obud1dl5n53WggMf/uo7t36CBDUOkENBdpG5QmCtFqVRvPSEvWBf9bP+WLft/du7s 0hFv3/art0akjL++YMWvN1940Wbnb1et+u1jK1c+xtbVPNh763vv3drzYG1d0+R5a199de28zhGf Ld5017nzbr45W7TkvvvO//lDD4EuWkEXnYCLOKmhnXJZkUYsLUqT8kdiu2PqBCeS0QyiYhciY3Gg utYQQVTtqMkkM3bOiZlmVX1s+T7636WHy1V7Ca3iVJJfNcAX3YH1/5xUY57KcJXatqPquao3q8Q5 GmOMJIoNSX2JthTSH3LGBCqMoimWatGpOD2TdRUgaLpwi8OY2A2aZWQPyLpYi8lT5/moqCXzNHuI 1B4nXdLhQTBaR6AQ/BjwoFCt1rw8ARg5TriSyfJIVLQbiw3FTG0GO2OVbJKoVsVLtYCREj1gJJmI 2LEf/la20nKRC5uaFCqLEUWlMOp3kDI1wGYIbo4TL9KdBqecXkaP0TDkFSTNb3CQ6Pi6KtzyCXse qauFMKioFjkZa6gX9rZtmzP93t69W37+VG17U+Lm2VdcP7PJ4zIbnMmat2m1re7uRT/7zW8WjFxe E2Z/XL7i7GfPvXPwxtWPfdx/YedtFa0RyWV26q205pPSv7x08/Yb1myT4VzL8roSYR50JV5SJWtN /Q69pp+oLXugaXYTkTp26PVut++48gQa7rwUoWgNh1geha20DiudoFBRtCpKJMzrbBh5Og+DG45p WRhtzJXCz4ePwkVmyOZ9xa8V/0XaX/yZ9FXx91KRE0zKI9sqTdQEZbCsxfhM/y096xAHqEM26muL 3zA5qOM9N1EXRklaKQjBYb5jgZk7hCwYESibhg1PgOqpQCrZlHjjpM4GRJNnU032Y7vb7AqpTxjq y9nKiCVgN1i53DGPtIlN0NaZydVyYKuaarTaGKE2otURrr2PETPyUOprZlE+bKKbZW7T0keIDp41 BnYb5OFHiYY+1a/eRQfYo4Bn3NNtIZOuhP46CpbUXUFdypZ74NAh/BP3Ydcht4RotSZP/5G6FM01 fykrrVdeq4jSwu43T1jv0JvdkaNHBG3EbdY72Dj6A3SPbmu2M9tpRcYAfnw+XSsugu8PX/eG/qIY xvKd7LXHTHq3xy9OslD8mywVllaLYHH7CkaObjDJXK9eAX5Z0RkXNImKAlEYkruVklh1VJG1hVs4 J3ZCnj3JOS8esm9yJaKiSKTkFszqz5RZvU6O7FW/bvjGIAybzRNneRbUZphZzHCbHjPLZ5XPbmFm sa0+Cl3hrgo1VWNiOy/DxIZPnNjBA/+HiT2ugKMFTlT82dEVyswKuqP/KsxsVq3MLO2jfUMz+27u CmgOzLCZjaPdu6BX27fNF6i1DOT2yVpLoNYoI2pFaRtSayF1Kamrtp33clpctbs1T8nMIlUYo5Jw jibkpy31TQO0WNbV11e3UHHcqDH+AUEla91VmeIPRs3StQwIgmwWM2PGuHXqWMatDz3eNKoectNY 2ejQjaqrj40aF4O7EwTVzf1tGZi2KmS9wx4rc8TKOjM08xT9BOa8P3GFPTchQQCCvmAQSknO5EMm kg5zM0ErKCgXVYFZB0BALU2KCCQ1k25lkz2jtT1eq3KVplPpknQynUhDzW6z2Mw2ySaqKxI18VZt WwlxxR09xFRp7yHGan0JbVehTtaMKqHOtLuH2MqLe6ihtriEjlaPKcnT04JWj+v18txgYaekdQUM rq9RdA5c5aC2m20WGFwKWJHnD/kOas4r1Rx2syIbq6MwiOW30QZhlrvUctndv3/k+gXjWtO+yo5t t982wSyZXc29mzqvLfOdLjmvX3zPGWvPtdmMVteYa249b545bqPlelG8ffFlW+eevz7mjrVuvTq7 43fZf42TXFIo0TKyNnjbiMlL4bNGfnNVx68XDe5jYDftWrqfXjXltAUqfqrODHvjXvgRl0K9ulNO 15sxo95RmYaycZZTPadlxpZB5ebo8fRkOsu+KzWlSWlpppwyVqaTYPuTHcYNxs1G9qGRGlNmo1Ey +3VmSzTFm4oTiZrSRCJV6o+WZrQQi1GlVtcozKlfy8rcVqXK4ZhmcTisFr/bYo74eNUpQRJcFdwY FF4L0mDKGwxCOxvxejyZ0tKA12Pzej0WsznAyiCXl8WiUfhQERpIm8qDcHws17rLMgmPNQFji2c3 nIwzdJRsK014ZZO2lZipCUre/d6vvCKEkczOSpYwlyUsu+koYgYumHWtUL/skyX0NZkpMU+CvTNn FoHomW0VHYuBwlAuAzKXgVEC+AE6eRaQCAMNl9Y5z9cNYFVMnqtViqi+GnRy9S+GG/i6l8HEd5LF 7/9eVK4uAmvOQ96AIRR2lSFhnxZULOGh7WaoQRCignDZ4F+W/ZpTxOwfedxGl3/HU/ogvbNNqf4T VwpsufnT4Ed0dfaVIWWA8Dknkz/+bqhMV7OzBu+GSgVew0TsAgz5YNWvpgvkp58ofTT9R90f9O/q VBtK16bvDm2Kb04/HldfFlsZX56+oGyDboNtXWxDXDNVmi+t1C2VlpqXWpZai8aHJoZPjU1IX1es qjaNDI0Ij4i3lo5Md5jGSRpthTvkC3vj3lJvRdRUmtZcIj0V+1OFMDZ0avzC0HWhtZW3hu4P7Qhp Mhqoc3Bmx+9gGlWaUr+mMlQsREuKq0NJfyrhSCY0AX+gqrraoWEOTTRuMgQNFYZWwyRDj2EJ1P0D 9Go5VRYnQD5mMm807zO/Zt5v/sqsNntqkyVQ6HDT4ld8w6wZf0keJvhWuaxgfe9WFDnc9gBoUNQT ijpCUUg4m4YUNkOpQrMCsYzFptNbE+l4qa2sjMZ10TKasaRwPk+fKKN55ZqiXiPLuumyZTDNdHfH zUOLzPe6ogJBKSy0NQzqw5VtUdj9q5UcspQs4+vLpLv/cP/Vl3beP3dQMbT9gaZ6JrWMueWi7Db6 8OSLR3Xdsy77xpT8cu+49M6eirvmTFk3j2unWX3Ud27DpGuPOk45t0m+eBQmYWXuQ/E08TFY5j+U Ly6z0Qr4aEwigsphd0xzzred7VhUvtS23LHUtd2pa/DVV453jK+f5ZxVd67znLprfXdU6GqqTCFv BI7cmmKHs6E6FA2YoJmz6KPb05Z4g36dGIinGwSRpbXFCU1vOJHwjPAmTFXBqoqq1iqxyt20+oRF mMht7hMHB/n0K7Yfzifm9QOK+Sev0wTXDWaMTOjTnzmhLwbvrV3EB2kRPBMXCf25f+6A1cPncnCN Pv66uJgFTB/SMCsmzLxBhFP7IjWsIkThj/NcEN8QkuVCXV2tBTuA8Jc8h2F2MtW0FbfMnSYnRid9 VNq++NFOs93iSJ/xyqJZc06Zs6b62k9WvyYGR/Il+izocXmntHWlg2Wn94ydcfNT2X/M6bE7zM6K 2d1R7ymP/nL6o5dTfrQX5wuIeCFwzw9SZ5DDN+rW6K+3rLGusa23bwhuCK0N35Bcm9pQasAulwyl fBAM98vaO5I7wqxd4/Rzeqv3pIjH4yd+p4bxcp0qpej+/RpzuSkYcDj8AacmHdBqWUDDYgkTWGBT yMRMnvJMIEBDWG0Y2sv20CaqOa6rOY4MXNkPHZ0ScW3NMLvJsIKCC7WhUp292GQ0GUx6k6hOxJPx kngqLqqtFpuFqcPxUl2snIbs0XIaN6XLacQSLOc7NJddYXErGAagrTkRP7jJCouEpYoOUUIFK7h8 k4SEE6Z+xeeBPnfuE+WTUv6fX3vWVdlmvhCbaNW5u7rdsdGx9ZOzrxaQYkZjz7kTF6248puZozlW rH12zu2nt3R1Zk4FPszAelRgPeqoRfb0BJeoV6oFs744bbH49RFfsC4a9fsErZrzWqZAK0/ljMnd qp7GmF9r8zjTVqvfU1vOAZxVpevq/OXJMq4nY6XpRMJfBkXVYrnZw2hCH40lPHXQngYI0XuYXhNJ mHz0S1/Ox3xtcBDX0k7tFu1r2v3ar7QqbV0iUU7KpDJWNoAd0RGPQ1wIaM+wVli+tHzF2ev68UsU u3R388RDg1wLfZjvZFL3MoguywrUTGHDEOEf6mfoXL/tfqv5WKagilbq0+mhhreUvlBVcxMZzGMF JBpyAKg5RsUKngF1IFhDffK+AnV0KruO49DRuXxFlik0TFjOawYfoIoOFavgYnXZoLKPZbfzRcmT r+yH/JJXshN6eJr9gsc9WKXNWKUVWKVa8rU8p1dFTVpDWpL82rA3UBeJ+L01ZabKYCWrTNfW+suw jdTzbcTitqfNZr87kSEpKcVS6Xjcn4lEE+5aaBMThLixKlo302pq42XxBMlImc6MADvNKDkTi0UJ TUiRBPGGvKzTu8X7msKHqLxnmEMSJdIqaaP0lSRK7rojuzgecRcBZUvB5GO+lfUAGsGdqBVFzgJz lnjwJ7M/tK8MX50TFgEi6JD6eggV8ksAbjX8P6zBXXnjZdY7tAYmfUC4m0/84C+GL8IQf6CsgFH3 75cAa7AKO8e12DmaaUJuXB+6M8QqpFZpkiScahgbm6bvNkyLPaB/IPaUerdBK0ad0YQhGU3E6mPq etK0kTQ1EX99XQUnWDWmalpdX15dXVHur9NpgkmpzEoDThe2p7L60qBfEsLe5kR9RaJ+QR1cNMLx YgHs3yI5ZLNZWWlc1AYWlJeXBSglnlHJhEkThIeSu2X1kuN7u7KtKG513HeImy5Bzzi3d+D49pI3 OCgSCeehT6Bs3XljseLc9a0EI+cJO0+bDsLZP4kKPhEZqKNSCCW5z3fEHBFHdGj/wQbEHcBgm+A7 SzkrbCzO2rypIq935WSMGzxB5kS+Fw0hmEqRhNViRe/entWv3DhpzRfrX1pfxHWxLovZSdWvX7Zi z+R6Sj467arp+aWikJYlG+3P3l5X37mxf82da6lq7ZIqm8kTeCbodvqnLp5/Y/eFd7x+JFRCG4CF Luq0Gh1FWNGfAauWAKva6e9kg+XXjscrtjn2Voh5UUFvTBckBE+Ir1qx5Kf+dNjvD4X9ngwc81AF n5GKVE1FRXWNP9M8mldJplY4L7Sm21tbR7f7m/NyhF6dLogReSFC70gVZIh0XLmPqYSWpGMlJfGY Pz2yjle1w77TmK5tbKyr9Y+MRgIwQkF3m8hk0qGEJ55Ip/MyQ/PIkToIFDWBWG0g1i77grWb259o ZxvaP2xn7QNsj+ztsATCYXOgksk4Xo9vGrzGmIn1sCWwET6Fw0Jj+BFfLr8ehp5C8YICGqe5KAsZ gXtBcUkB4IMfYg5CnMoOuf59WwAVVMMR8KTSSS4HPwWwf3vV8DtyEzsogKIyruDKAJOt1SEjqsBG 9GSxFQVEXLTtouGfmBALDOeQCgtupSfXnCSHCFcPvqmQ6+wHCuWt5YLF9woFYWVLYdINfs9ravPU GX3cwaWsPhsYRkIU7Uz2NLo9z0dhH3AMtQPmPoYA8hlgLkjelcsqxHJV1BAyhmwhe4WvIjBKVWOo tFXaW32tgdNV7QbZJtsn+Cb5JwXs/PsL4H0M9YoLiV/rDiplXz3x+YLE787zQnpQfu5Q4te4LLw9 aa832+0Ws98VTLgtCbeLsYTGlIB/HBdCzZPgSeIOrf9waCdV3HD5YvNVBx0veHie7D1ywlKetMjK ap1Er7FBnqjygs/cSX4l+/kEM0XnJY46Pln5HZFPItcgPgrq+wTmLUG+kS+/QlhpvdS2hq0XNljX 2r5zaLRMb9PbhTvZ3UWPFH0ifWz72KEWpQXSTmmnTazWJELROghYIXfQ977L5Q8WmSx6vRgKMguo qcvJSalsNMNZ2yC17ifwOwBpLTEtKA5oNEW8oYg3rIKp1528exd9u7DdgYXjNJYryxURu+DHjMkD ZENVXmAwhrY4hV2MSA6mtjtsiM0qE6iuSV1kFZxlVFKDBjuYpSzPHHLUS3PukAtQ2ALzPHzB+1Dg VjouL500s8ITB+7peXIx3+ToxF+NP+PUhlnZJznAsgV8isVRg5479k8/i9bzUvabceNKAjdOZgeH 4BRv3QWKeAdmeTQ7W+52lbnqPW2xmrqahvpx4VltC8OL2y4KX962Vl7bdoe8qe2Jtj1tL9VYTaS+ pqNmeq1oiqTrx9a21U2req719/K+No034q1aFFlUdUvtE2UP138a+b7s+3pd9WhCqoagOT0MmouJ j/pqQgDokN9dWskB2BEq21jGKstoWdnGqrKyyip/aRXJw3oxHKhUNcPAXQ+GJw/uqSi/ujNhSgQT lTjEkY7w/cafioTbauV6sXV0pIpYSCAcsYXDERKuioghWpkojSZKUyl3VSQSAr4AYVyssSExqrVV o5ESUKLDmHLp9nDYpa0eoDOeDI0eXUVGJ6pxyB+HKi+VnXJnVW/V0ioBRoGqziphf9VX4InbGvZA rxOCfr1eNo8JhzjewYPrK4567eN30ynHhRBFJG9uhuLaM+gCHV4GB+xDhBNduGPz5JCr1cO5Km7k VAQUnuU/YCuXGuFtwT313EQONAOafQ2I3NWInGWIbCWtiqkl3bVa9YvncF9nk+sEN+5uruT5DzjP qfIJXSu6lw3rezLRLiqGqifvAraLRHL78X2oWi7J9SPFELo4mVBE1P9EsgvutVHzkGZoiIbDyAfh aKjE4Js/bROH8OwWhUorxJv28ppNbMxsnv6LN0Sy1Quvb431LuI1v7lm+2r6YnbtEFU+TmgGf4SH NggOD9mzSq9Y0fYV70QXvcr9uXFin4gzgB1hslhuhJBUx4UkzoKDtnghJL1fkInquEzEEnovF3NM Wqr1gJsOWC3uyP2XKKQ2L20e7AZ3nDcNKc4xCg98jPU9TjbAAB9zO85T0uNSiMItRenbrFzxEevl L/v88zymH/OYE1R6Ot+osnOOixkKUaWwGxFxH96nkSXlEX/3HwywsWR84z6c53+T/sX3uv8IOUKP +HVxkvQnA4nGcb7pvocCuwJvkbfoW/7P6ad+44wANSgbjXUzF7ODELNTVpPJYvUbggprI5FIZ4RF UolIJJ7wBysU5kZfjS8pVdfV+yv0OMGBXU1TI2o0KtGv99p52brZRU2uoIu5UjaXy27ze8tLeH0x SXfirHsqmU6XJP3lA7l1ss9PScjn9wcos1EeBxoJgbrMhipgq1/WB+I4mxEI+PwJmGv88nifz9vY wAR7wsvKK5L1iYoKvd4gWhMGTSLZ2OgPBPwN9QF4VLxKg8me5JLkE8m9SVUS/vu1SdlSZ0puSL6W 3J/8CnUD7CPZ7g/SHso20FfhXE9Fn09kTISa4hLZYQ0Jok0MTLK+av3Q+qVVtLqbfleQWSdyJPa4 pUMuc1NF/r97GYrd6fQyl3TQA0EpX8sFKEVyUoTYZuS5aIUCZ8cUtoyrbaGvVexbKrhapV0n4PBw vDwJaYdh8LDCTy8Dwv4cPP0yfE4h+p9wtoYOaW//TRd2T2/2aWkTB8nsizweV8fjP+NMfNOfOVLW 5v27XoLKPLjJwh25TuYEBjPsLQ64J9ZzrIQ6RbwSUJyhS2SoSKnW5/axPzGqp2qvlzq8ot6sAFlx Ck5yZmBsPJ0HJjDdqUxJSTrjj+tEpUtRjVBUJAp+ncemlKHdcDptQOZYgJcj4Rp/OBzw+2NeOEHR gM9rAzRRL7GmE/F4IBGLQSF16U6vLQHMh23gUjit63U6qvH7ArBrZmQvIRk5XmfKTMr0ZJZkNmQ+ zKgznnIGp2gv72619FiXWDdYv7KKJiu1ustG/OyYULeMazoAGJzb4HzHwTyzxkU7Tv6R4l9xIivs AiaqAcWnNrMPkeRVvCW6FNX+fyDyw2BgWGE4QHCmXCHf4Sj9z8AwxGsPkXKRLR68NU+rX+ILPlah 1R+wxQAKdzDPk4wTnUdbhpPlHz8R/jBEkgk0d+eADzwHUriRuOlROfeC6Q9uZjnoOOj6Xvrecthx 2K3+k+Ov0l8t7zjedX0mfWYp8kgei93hcIl/svxgOmIV7tbeariPPax6WHuf4UX1ixrN1Wy96gbN KgOUkPZb2CaVpkHdoKnRNhtGSDWWGscIl6aUpQ0VUtwSd1S4RuJkhmmv1G/pt/bb+xx7XbvdmsdM j0v3W35jvdd+n+MJ1yNuzXTrZEe3a7N0q/Vmx12uO9yaDmuHvcMx3nWaeyZO6p1h0aRcI0z11gZ7 k+t003ipw6LRq3Uar9qrSZmS1qQdcrGbihqrySiSIieYVHNcJxTHuSo/hIOHW3Cs8SJbvMi9zdN+ qbKjQAkGp0LuvqOojLl7NVe8F3TvwNzubnAGOxw6eOnDrHpkG1IJrurbLK5WuD9+JxfbvK0Ol8Pf 6uKRFpv1Nqj50PQ5T1UDuXeOlfUWXv7dNqTop6Swyf5uGxhluLHsL6SH5WIwzXZ4Fo6yBhBR7uqD AwRw8lNSxlPJ3moopDDnfgNe2zqKFiMyRHiOC3bD//IMTLoLujkbg3YBVg+osh2WolrG3f25Xtsi nnP9l2teyr5E615a88WaqV88vfVHWnT/01+wsQ9lP9qCr5IU40sJM7Zk//7wK3Rs9oUPPs++Szs4 bG0DJZkFShIlZeQr2QVnLm8RToJavZZg3Fvn7fDuSutKLcmB3BeydIHnGg9Lako1N3tuDSpfx+PS 2RA/+++lsapj7GlGkcWiJBC3mGKtMRaLuSCSpeLQiPo8FWVgESV3+ZHjhoIh9fRELpaDEezm33vC +T4ZaxCDVIxIb+JycBfnDIeJ6MMQ+aQC58O4RzoOAkBbU8DU4Wo2aNkUHkNxTY8XbDNQQPedrF8D x/HpY++Pq57QOWJa9ntq6L53wiNXZd+m+7MrhmP0y2smXxVv9FinnHnxqLNgDuA4bVZwupyMoC/I PavT11Wurf1V+o7ah0oeKL2vXGM5t2pRDdMlhbQ3aUvbyhJkfGV7bXv9qU0TRnTHZsanJbsrz6yZ Wju9YVbT7BFnp8+uWljb2/B45b21WxqertxZ01/b17BrxB/Tf6yMVBoaAO07R+gqNTGePdxfpalB InelDUlNqizVVFfSWjqibETTqbFx6Rti65JXp68pv6ZyTf2m2KbkzemN5bdW3lF/P3kg/Wb6s6Yf Ko/UHqn/YYSvvqFphFhbUylkEjANkUA0YotC3FgAHAXhn9avXwDvgTWyVYg7G6Hqro6nnCkhqi1e kMHRiO5+egheBxnZVVcR52rYUKYysyWjylxUF0+4RwLDFUMuNKwKlsPH4ABX67VWcK0e5M8hRrso t69fK9Wmuw64P3ahXmENin/x3HGKoLhT5Y1E+CAM98STx0abcVyn/Gx416VLEJVzClEfQFTLo3p+ oqeWR/UB9KvnJ3pqeVTPT/TU8ihtA+IPR1UCdUy3qgjWJKciqSr8ugJBEUhhhQwcUBsSrI7jL8di 6wkYzH6+9Mz6GVObwyPG+QzwJLWPb6wvvaWj6pT5LTat2eXc8+CXQG4gePa194+hd3iKOeSssDit Jr0r5K43mM1wHLRJq1N0/Kcc4bMPZb/Ofpt9kJ19ItozxQLyDLC+jDTQX+OLgLnn5NND4VFpGzSy s+oWVF1QJRSlR1SNr5rpmVG1IrQic3HdDXX3lz5S9Wri7eCboQ8Tb5d9mTBDqVLVERwbvjhzbXBt 5pfB3wQfzTyP89YH08bAHhwV0+JLbP+OQgwXYEcepxDBUGk6rI6UZaIwGNUXpNEyEqgo50iPCKtW rnGlILKWcn1OcDe7lJSxLbIRh8hpQKqJ+0iC4ihw946Vvg0wsgzQErRFaGdkS+S1yFcRMcL5YZNZ lmgFdPlMcjeOL/gMHFfmH+g+0M01QeA6+fk0helU/AZAiIeEUEWHrADZCaznSZRmWAvITiN0ypaC NbM/aAjthkI5nDu8PW2ocwSxP/XXhuD++HkeVnE6I69SBpT9R46jQKYgH54gHeK4YsGsTKf+VE48 eve71941c9UNMmdFl9716JLstx+fv23yw5dkX2K67PjhZOtPv5i5uW7UXd/wWup8pm5K5+LGKbeD /9wFjsQGjmQMeV8ubak5zTupprvmIsd1jtWeNd71TXeM1p0aGtvGOEg83PbQ6LedB53fOotwTuxI v9VVDx9P0B451TLS4zKpbIQ2FFdXRoXyWm5VNuvdiebmWnO8HXbl8nXJ2ni4HablpCasGJcb4j2B JQEW8Iy1xeWqRDQhty1JrUxtSG1OPZFSpdwdd++mwePqhYnwjJO4wRnndPMW5yGT8yCkDUWBwHUC Cg+puKhzozNWgHL24WRrMtfe220Bxk2VBSe6IYdqfniG12LuYdHnFsuCj6Zwc56Tszip6t5r1t1X flrvgkfbpncd/P37V/NpRUDLnnvueXJsR+Xtr8+e/eZjfeIoH1+dd3CqyDvlug1zq8+oCZp9/uTa ORtfWlPJmz7ltufZv7pn8eiFAbsH3yK69ppnuFywAbt5s7Kb3yiXwmBWxw1mMGnWc5MmbGR13EZm dTvqIcW7oxYIHjCFaXCwZslOSTLDSgnKvUQOSb4KX6/vVZ9o8rX6Jvl6fEuBTU/4PvRpfJ/FuUDH tX84RgwxLX9Oe8jIdUySHy7XA/h/wjQPGbIg6BfOG7ON7/F3G1S0F+9lH+LTIzzGp2+4ijT7N85L 04uya5QUegZyJuDxcrx3JY3sgZ/AdySY+64/KPn4gVUvOL3IRd4D6oO+z4Pfs2/V33q/C/4Y0uqZ qKZeffBa7ya12uLiwo5E7JKd2WvcdrvL7bfk1XHFBJq4FIEijvhLzTpFSDKmtEajTus353Vu4xI1 BV0b9GlQqKVSroRFl7CYmR98bCQMZesSrA0zwRDfw48oV7s90LNO0vZol2hXajfA+OuuOkHugdhT kHryOcWedUzg+b+IMsOlF5Q4b8y3QgB3QbMKVzfFNMCNinmVStTMv0HAdawFm0GhXhj854NLH78U 5vdiQyAvtWx65qoz1yxUZNt8BRSto7d+Ne9PF7NnsGJGHV+2wdHrfnfaPWcpNYp+CSslAUL5zpOm XbIPJ/1cleQ01/h0r/8m6TX/967v07qHyEN+ZlCE0WJJqrHjfJndb7A7IqV86kHglyYYSUiJ3sRr OC6TSMHmXpr2R9JErziwuZYUUX6afEkR5NoUKyoSmF/PaNjNrz7V769x+f1ulz/sctqhvQgAj4HL OBxPYI20OZ34+FdpIuJOhG0Jg5DQR/AlI4OeEdh74b6QqHR1uvpcX7lEsCejZL2TJSrsPfa9dsGO 8jZ8ZM25m14NlfZr2zKKL9rZ8EU7fLAbpw1gbDoE3RcY1SEtBrc5VFQM6TL+jQvayQ5oQLl/o5E8 UUVZWGbIqFhA7o2qLC0nVepoFJ8M/Te17P4Lsl1tTpvRaHPSJpfVWGx1/ppep6ZXbnHZUHDRxnwq i6O0doPBrs3HRx3C5yeWOfWBrCbeh7UtYV/n+TPZZXcxh1OlxsE0TYnHpk6EDEwbY/ZUfuvkXHsz poSTYJyNlc9c4lniXeJb4r/ecZ1zn2qf7VOHtlfqNfdaeq3iq4xKDskpO2Sn6GJeZ8Ad9AdKUs56 Vu+oco5lYx1tzi46yzHDeb3zIecL7HnHe3gtxYPRLHVC9VxnkySrzW+02cPQY90nB2Kh2NIYIzEp 1hnbF3stpoptLInFkiX+cAkxqJUuWpM2qGUm7V7th9ovtTkg6kaVVqtW+Q0qMeThXWz+HhhJ69x+ v8cNawvOijmcoYHsD3KtXRRCNpUoBuw2nPCxwUk14HJDuQcfBCbQgMuJvBM2SSoEYB2x2x0s4Rxg F8oBVwKmT2jrBFGTTIQ9/D8UsiaM6oTRgIPTNEMIdrhu+N0T2i1Xv+qmQTd1y6V1brm2vta9qgKZ aKzWLSeSte6EbCoJlvSUrCzZULK55NWSL0s0JXvYJRBBnGC/nQ5c5pArEHCpQ/bUmRxfKgdoZmxn cqIOyp1L+lUh+9N4nI0IeLRIy2R70Eb32agtIanw2ZtJqg2qV1UiTiHD6YJ0KNp9DvjYIw4BZr9w Sweg3UsPLuNireugWxpc5nEdUmTcZd0H0OqSvgBmFOgbkrz9tRmnBDl2aKDhQ+o6nuEVeXzB/U7U 0Svq/BMQ4idOnD+tAJKBNE7oS4AxK4Wb2ZNsFfM4PQ6PQiu70OI55oDG4IDGNE58lmurQyq0Kyr9 7u6uMJw2o8Jwuhm1Wmus1pPqhHev+eKzay4P8q2ONvId7Lkl/+/Kz877g1JRzyuCQutRfLczzzhA +RcRKo6+LvzXUBmY1glMWwVMa2c18q2WOjoi3Bita5cNkxyTytsaJxt6HN3lkxvnGs53nF8+t/Ge 8o2ND0YGLAPhgdqB9uctz4efr32+/S/kn7Vfth5q/xe+CPS1FHHhttXU0m62tEelCA6r4BOJNFxb 226xwJxeC5tRbXUUR14COEJCaTUDny3B1KSzJiyJcAIW+tGJ9kRtoi4xsipRnYD7wMWyD3y6TuPR jGSl7MtaWptob29tbGyNRsvLk+2cNbe0tqmkBKUqg0Hl9xvgxgb+o0Q2m1QVqlbAVY9KpfJ0VCdw yKtkR3KBH0/i7bpJwLklfsHvHrOHJhSXNnv+4zHuiTj/IB3mRyE4z+eeeMAFzUFer+xGTmlU6two oD5fyY0S3BdRYRYPcY5xKOIAyEXGgMSNShI3KkncqCThnEerVGx0IDLYhkRBrmrkkIkrdhFL7q1t uAaap7e24TIlxZVIP4VLf76M63l9//BbmPCn7NfKfWpyX8vWYnyAwgStplll5xF0SFy3JFtRFXah sZ1HkgteAsr9kVaj/Umk5mLIdEOiqqJK6jqmtB5Se5xUUQ+1dgFqh+SKn1SwO+iGEAfZ7Dc8vi57 f/bh65TyYe6aUkPXZq9XYPxjDtFz6Bg6eg7PHeR9Qmz64CBn77h5hj6THZ3PFzvUIIyfDMF5tpve O5QHcJ4FmD8HMF9N7+IGtk+24ZMZOFT7iVwHDdvOCNVGtdXuqLt6UXRRtXqmZY6jxz8zLGrCZ0du idwfEf8V/i4K30Rt1B52R/F9Ck679WCQ+dcp/Nq8v4vxmLNLOJKuQo9tUjktH2C/k/XV5eVV1f50 dcEQqwcrnXc6cFv5F7gcvM8xJ/nSGL97TTIdTSZjUX9pNBKhUsRMBLe2OmqtSqRjiXRpKFHqCVss ih88mPBoohMuUgNs7w5Q9YQZrvt7ZVM4QSyTLBu481/NifwhDqpxhRd4CoWlyJtLYB8B5MIKOSTR nEAauTvDccL4E+eGE5o453hCEaUT+U0FLPEZ1wl9bpDFOAjmNuIyuwoOuMsAXz/l9P93WLr5GOPv Dr6X3VDNYeQTHp2J73HXnHEMbqqZlB1zDG6eYuVD4JFN0r8O5Tkn8jY8TrKAFeyMctMlArXM1c61 9zqW6pbplzrUA8Kn7FOToGEIpqDgNP3/yr4FPqry2nd/e8/7/dgzk3lkZs9MJu9k8piQwECyITxU 5CEFASFqeSgPPTyUomglXnsq1iciCj6O3KPWU6BBE5CXFo5FxGKLvYVWrRXkYtvTYqVeS3vFDOe/ vj0zJLF6fzf8svfsmUnI7PWt9a31X+u/VqWYltpEjD+R1kqrnd9x3Seuk5yaB2A1X53f8LU6pmrE ThoXwuUUJbdOH3XYRQ9CJ2ZyqkqLUy3FdzCScZYjvbJGTQY1n38Zeh2Fwu5y22iFsSnobb2WnWM6 FgxBqlodISJVMllAPWlrhFg1UJN4vXkB8PYbgy74zuUr7k/Oi5+9LDpIFlSLRhVEuyRqTAPQ+3Rf /rwbOJYoOWNEmibEKo6OBEVesBu8YF8h8SrlvvyNuLX/l5RkFU/0Xy1+j+7wGuk1499JIGzi6i/H mFmKHoNJNSrXL20Ez9ktjFfLkSf+TBCarIg4P8NeYbJaXCaPwMrMLkuDZapFsgQ9C380sACHqvUG NUvAJytGjAWQVlz/NjcwpzQYVvfoFwfoL9L/if5CSJ2NzPWLj/G/oV1Vhv4NLqvHbCljHVgdhf/9 S7rbVK459P/WFwOgQrWJ2HGU/m+m5E7ReYd+NFWcfMGrnPAbhX70cMwlkaGx7zTOYVZdOq11aBpU BqTbeOE5+mldVywY7D9WXLCi8Aji16ulbqES1Kt56lVbjc/HttZL5cZULKu71bs69J1wt/yvoUfl jaFtxi3y86Ge9C7jq46X5Z2hvdGjjs8bfRa0ja5m0pPux0LiHfU/qH+qfqtjW/0bjScaP240VQL1 6lFDqXQ8lUrEE5WeUm+galhcGFbFpGabuRZkr1PqNWxdpWBpjktWc5wA2eWoi63K2myV8tOueKmR XrALihIHT6zDGWfpeEd8Svy6+LPxHfED8ZNxUzzUFni4IW6g15cZnjUcMJw06AzB1ur9RSi3i9VM 6v89rXJQcrRbDzSX023TXXiEHnxU8lHEY0ABGGJ88naH+AAHBCOC+8zFc0ILvoMXP+/zmOpN8Mrw hVQJmSiiDsh4634hird4Lx6kVwDrdMVbkEYp0GrzlDD+RCsItLTlFdaeRBU0SEzxuLhVmrX7nSe2 nvrNiHVTurvnvayYXQGLY/7TU5/tXU5a8Eb2e5fvvnHy6pU3759/+5Obl615xelaN+6G4RZUcVqc oepn5vcjmQsk7d/drinZaVcumnkdZQLqIPuZWLURoZKVvUwBS49qdaV5sJKwR/x07Q2mfcGg35eI RI0Ssyrlti60Cpu/qzxuVuLwmear1VIENs9otpbGnbjzoiFUnZwu2BSfTLQqp7xMPinDGFRd+9BA cZAQeC0XJVlQmEHOOPaQ4JkS4u0RHWOg8f+qMGx526NOX2JmDdaGsgmVV1cuqPxR4oWy3Wyv9dXo KxWH9EdNx3UfmM7o/2Ry+3WNrEk/ytrJplgvj17NZui7jF3WBewG/U3WVeIdljuit8fui+6LvZbY lfLDwznXa3VVAhN9OcoLbXll2Gz0/wB8jrwXKBy+gp9S0Fh4mUUyNKve9Js9zJD7+64PNnD3Ol+X /m/vP/ro+/SNxoW/Opz72+uHcucOv0C+iK6dbMmXR5793e+exTc0m2rwJkIzq4Vzu+IWANBI951X a/HgTd8HqfcqTsVOxf+c+lOFscxX4R+rTEpNqpihdKWuqVjiXBJcnLovaEM+8TP1Fq8823u1b2nq horzIb0BdRC+EArUPanQD1xPuR4v2Rh6wfcC3psEaOQMymFGXJtgJKAhosI6d7zKaO3TGSL/Hogn rY6safaWGHskdjAmxkK1chxBnrljSzmj0q9HUPoVrDk0QM7QNl4dDdoT8eDQ1wn/IGBqyUHQZwC1 0NA1XAD8JJSIyu+wkxfINJw9qRUv5zWBKwnY6EhGtmSQzJDeIHOIImMwaAw7Htv/+q+3zjs6zYd+ TQufO3I0d4FZj/6nZI+QlvwkFgqEJ3T/6Ynnjl82VQ64a8YsZdKbRxm6+InCXbjb26ALUdzvj165 vHpRNYZLkALwwrc0d7kSpijAuh7VFU4HwuGSQCJq8ScqzV0WqEFfZRz3G+qgJOJyVLBZZSNiZfSm MivdNEeEsVBtKt4NMGAPe6CvprpbUwbX+RV88wUtjEpNSBWo0gStr858TnrwNUrAYbWJL/nzStDn wHwqMjETXyroxV70yDvbq8gVBESWw2dNmsqCRRtV3OKS3B5pgE1ToLCUB7Zt0ImaiXn0o5W/vP32 X97yweP8evm7Gx9/993HN76r+8OFm8m2vHjk9lOrbzu55gh7X1vJWz74YAutZJHX8qexkoNIp7+j Lrb4N/vEJnGMOA1zNA6Lh70/C77veT/4Qfh/l3wc+8JvD0aqIxmxLXpF+MrY3PA1sWXhm2J3hR8I b45sju7WO1f590UOSYc8b0XeihpMb7hDioId2F0aDxh1cbfVNj2U3SKw5dCgPexjNZBQsiy7RWbL 5APyMZgiHXrgVW+/ZIpWTELURYABr92nLYH8W3DHB9zMXr8MLs65nWE5FkUm/WzR1KOwjsU59q5Z b2qTUFiZgpFMuMGoq/vyP/wf/+jaX4z2OsC8bfjb3e/mTjLnkV8wy8zgiQ0bjofYM8+92d7sDLrd rqaZLPzWbliO/3P3/T3bH8QKwsQIQXcNVmZGOKqmVNtUfbf+HtvdjVtsvbadNa/XHK+xBFD2Zjvi ciXMmXq0SEH4oENLVXABTPo9TFVDjCVMZZUJIdVVFS8VBI8SrK8rMZhNFrS8eQCEbRTzKKFjfGlu VO1pn+pb7nvHp/MFW1btZW/n628nccrPSDS0JChxJDmJ/bzBDnbKgV4MSD+FJ3gNrqO6JgyB1saE mnBVDHRFhk5gX8szGdYMojR0vJjm4DbVl4eDxTTjdSz9y8iZOfoKHV/Z/tDqe5vRocTkfWLRv6xm 99GTkr1/QsFbF/fSely75Gm/ye/xBKTATePWan6bKHw3d5fuLqzMCvQQiaqN4+TlsvhB/Feps/Ez qQvxz8sMS6turpufnt+8xn5n1YrmB6q6m5+pWt+8rWpL876oQzSRNZhHlbFps15vMidEIVrTWKK4 Agpk6YhuaIwrlpq4sKHcCCgCZH9WWaowxWJxgXz1kllymgmI32E+BnQv1FIf704+ktySfCmpO5A8 ljyVPJfUJYOZ6m8PWqzciaE6RhgMciA7zpBJJTeWMwYGWAxuJAas4v1ISHwuhJCFrzYhRv9HbxQl triqNTXQqcqG1Pw/euv8qPYvpALzC508F9ZSiMjdstEhIuHO3Rj0aWsd1kJWBF31QGsfaDqku7W9 r6xk+dxJnF311ytWV/jvPfHjCxd+fOLeow8++LOfPfjgUfHIk9xi7J0+pvbaSvimJezKy6tHf7mX sV27mJCb+NjbP9/w2M9/Dl2YAV24GbrQxlaqdZtDFxRRx3xsgWGV4RH2mLiFPS++xPpEywuGHxp3 6ncZDxvfNZ4MGUMmN+BN2G2nHJNFeS4S1YGShLsK/CA4PLVzG2pr0w2JKhcyLGTvQVefy5MsCZfm v1pTc/P+K7WI7lGTLWneITrRxog0qauqrIS42wSd0WUxmZXgyRKGfeI51TpCiCuNBxqOgSu2h/25 b/iEvCgp2uJBNI55k89zve6vNfiDgmEKlL9+YygUKDCQCNHsC77MqV6QkxEgz+YK6QqF9UZDKqxH HVjIGNFUEjqJlVLIEe8VDBc/36XYYrLm/SBaIwdI6352yUctgDhu8nxQZ1DwXYvP59cImzZ1w5x5 9829FsFHLPcp7cXX3rNq7uj0TQOJd1yz4RddmDlh3MNT+v9e1F9pzpo6ZXX/2cITmquEfeU1rAY/ +lhI8GDXqtWJYFNQDU4Lzg/eGvxe0Oi1u2bJcsJusJln6fUJmz8S3OiDHyu9Ie5hj70SMdht6Iey n1FaTEQY4tDpADdPAbgcLL1q7aUYEfkwXvzXcR4aNihUvGTnoB6+ZIu3EC8WYq/Cfio+cudadgV9 7v4SMk/sir9R5aXe/d57uau+5Elu8gFhqeDLkDeyM3eX1MY/WanwrFrjQgk7SgakOc7ZEXh3kVud 3UI36xa7pY1Ox2TTw6ZnTdsi+yL6iClMqf0ItFlvNe1hP35Fp0tYtQ+sOqyG0PSg4vE6/BsAGuxh 16luNC+UojGbXSktnYJMSTC6j+1iv8xbfJ4KhBOSLqZb+890nO/P3wSerWbo5sg/efETD6TR6pGS Fk/eeXfOTkWH4oRZs0ZNz/2N3wDz0u/Rp+//kmv+/KWP1MW44j9wI7T8AOS6AVqOHMBekN4O9qHu pYo4sehCRWd1CnrZ3uj9oVc8lGHVcnWqvqo6U9kyvKwjNaqqI7NEXpK03uBlSe8wr1gjT6l6L/Ve 5mzqbOZC6kLGNCI1IrOkbEnLNnlb0lAGxi2miHE7ULThEQpad2KqaAy1EQf7UFdHZ9UFzzs2NxmL JZKJCIrWmrm1aGgYn2loaM4k6jItbiv/RY60xeGwWhJuqq9GBKUVV5ds5tXVibDsrS2n5ydUVc1N VVWVpxK1qbJUWZnSkpFB3ktiAJBXEZLo45oUvC1lsj7JEtlIxJcNG8qztc3ZurraWtGa9bgFU5ah qTqF0OZlSLw9mSqb0bKPbRFSeMa+PNOdEZVMQ+b6jJQha1TaiuZAHuw+y83dZtFlVswNeED7kMEc HLafPYOK+xKG9EmhHoXXPhO/F90sNLyvkB+hvaZA2QYPQseR6r2Ic4/3gQqB8sTjfWBD8DNwaH4G Dk3n3ku0CEa8CHSMK6mhSuqSAdAf9bgfdPkVg3cJJhz6XkQP6aFvH0SQ8KJmMlSWodmtfU439bc5 1Ysz4dOwj8i6XPKgk/CgZVOKGk5nLp6nvbDAtURjALjeUxHh7xWSqOtMBTMKf5kqdQnyZgXVL5IH movsikLOewj23Qzs+9UBweIbbGEN1xU7GY5v59AX59v0KHeOns3mnmDfyf1gQOj4Basl80EKlftL bnbBWmIyJMMkPQFVM38AB6FLzczz3eK7xwfnwzaLfEZ4ibPIQ/SU+Da63cjGwDEUmOJ2gW17wCW5 gsGB1pC8v2+wgl9rAdcPtn+fkf0rhA6XPgT5uz78rQfgk40Xq9WRzlZnm2O4c4RzpHOUU3V2OseZ PeW2Ybad4d5aXQUbxsQZkXnGeZFbjbdG9MOMTZFxxnGRGUZ9g6l1FNfPkyPYiPHtI0aMak+0+gC9 96hRxcOmet7xnAK1XSd4XB4VIPd4h8fjdCR8KRD94CgICRd4FOOjiUQsmkgNAzmKnmx2NYvN49PN zQ3pxLDxKj258GQn6xzf0dmpdiTq0oZoeX1dZWnEwIzVrWpWGG+ojkuhuNksGUEgS6V8FrtDQeIz 1tLg70au88vy0qhSUU7X5d2YJfBlu5BWOtoJyBLaD7Qfw3jv4ITqH2t7kQZcQROpFCx/gjQoqa95 f0heFvB3sNuKdMLB2vCNVzzPf8mzwHsLzoSBrDB3JoY6FXmvQqmsKkFDfJ3emqrSVcSY3hC0BDCy UV8dYyU2gLYE0NdQ0znerrCrC+5GOB++guZsufgXQYdv48X34Xu8jwnyvyr4nkzrYYh6yz5/qJ33 RsAZbs3BXpy53qLJmI+AgQDKDqjHZsERSXLP5JJjol0P8FSGYjh/XHrT6HnxtltGzBk2gfd8eGpy c/0No8eTxj01pbGudlQnf/o0PaG9Q5o345Zx48ePy155Tf8uUjrxCXX6uIX9aB2Gx+s7Z5ZWLdAu aJlrwQhW+U1Y5TOxytvYvWrrCcMJk3jIcMgkPmfqNfSapBXGbqM437jAtCAsPRV+wSDeEetjO0Up ElsSQ0kIaC9R6CtflU5fDIVD43nhUMIz1KfVtiSHgI6p4/O7kubTuoSUKyUOcWztLeM1x7Yp22Zg +9gpQQGi4S2N64zwcT0AE80WJXQSKX/aUFzcvX2kYQvc2yD5tnznIGAPq1PzmfjiRAukjk+Ky3GQ 7/pNq3HoGwtL8ev8WjkcQY9aDOcWDWjlG2NhE9hCFG4SsfPSYutFBQHKAF8Oy2SwBarZR+0+WuYw n7Z6BiwfLcRpHrKKvuLezpz10Ozrp7TN4UvjI7LR4//Hzd9as2Kgd8tfk+atnT22Knr/5f2fFsyz KM2+o/Nf+/9avObRKvmA64FIjcQKsaJc4jK1zePX+dExVnqLvWU9If5W/zvjCathqXGxW1woLtQt Ni22LLHf5F7ovSFg8sUlZ9wMON1oiyPCQy+RYAc/I1NLZ9Xua3lJYC5wG66H87tHvFct8QA/x9sM Kt6zDBD6McMpwzmD3rCHne4rgQkqdLfC5gbywwrc1hoCbskT4FBJoVnOfnSZ/1yQUVzqkh1yYN/F 03ALTvfZo+4oV2h+04llqxVEW/1ElkHhcJi6a52HsxTtsMo4mCw4GOmA58+qpfD4jDJKccE89nT4 ZXegXaaDV6ZE8x5UEXvwwGKBs2aiA080MZqUPOhrNiPsVkMOBQwuKAK2upG5TwDG/oV5Dr3OvDM+ 2rLlI/pmOw7mzjH3gYMY/XHuP//tw5PPPH3qJGRTB9yAtJc60tapHY0W5/AKfLfUXYV2JF32BQwy MSy138ruqF5Zb/2p4aDlPeN75vcr3mv8veFjNPXHoNU7jA9Im6XtmAwL7hLC0GC6FF0sSxN+bZey eo4M2pJGJ9L53QjN1NLOrC+SRfWYIx23WqribIPOKMSyKUN53GliplBzreBQos7SKbxaQVcabBoI vpOGcmITQe+fjOQAwj/DDwYp4JALLvOCp9RbaWuguKOOlxTbFUZSb7z4u5crkkWZc4lj0WhaRkWs BKIXDPVXVGqAaFj1xO2r7vxft+T6X/voAS0Px+GfPKT+zK82bT5+fPMTx6V5m+fMvfXYyl25i7tz BtInSnPpstwhWrz+2DuPrH/nGGTXDdltheyS6CdxJfXGPd/rHI6w4rza5hzeI7wY7klJ04TrQguE fwktiWMWceg79fcID4a+X7+5/OnaJ+p/VL699of17ueT7Kmqbcq2KkmLHzScOA8DabbZ6juSN8ua GZ5GZrgQHAihirqSrIcceUddPIK+EkCIKoAVJdDqMmgOKt0W5rScspxD0jLUWB2npndbYi/FdMdi p2LnYlIs2FAAkbnDXsDZiewIUAGoELGWeXHTYCB5sM0dJFe8NFiwIa3pVRqOcEqupabJlXINGiS/ XDVEshpqX0SI8g+KYgU8BKUrGwIPbX+DbOVyjifn0PABkN79p1/N9TPpJ6fuP75p03H6Ft/aTBK8 AF6aJlH2xW4AQ69czE1cf+zY+vXvvIPddBt202uk1bD2PlW+08FqzVMsSzy3e+7zPG54xmvkEZ1q jR3JR29h3z6xB8GOqprzQRm1BulRp1RO5n1BEjVWh8wHsOqNdox/lR0uS1kqK9QYLB0ubIaIxSgk C1ucxnMYHhSqE2SlzJmcmtQAvHNJQzJY2//QpQ0RoxSoBHOSFjhBKrwdIMlF89jQr+aS2zVIJEMu vnETxC7nzrtUu7yyw++JaFsc6EZ8b9Mqx1EfTnbPOMRVLwYqovj8c+Mm3h30WhzeZCbY+tQBdivJ qf9miuKPcgKhNO/4YzMWhrxAWZKhWdtyGS4ctIwRXyVhQSLHaCYbtGws+6u6Tu6IjBY9V6LhweKx 25Xtrf+z7W3vW2M+9P7a/+v23475s/dM5o9jvvR+nvnHGI/Va/Dr281jYl6f39ceHnN/YmNmv9M6 03tN2+K2Jdk1bXdl72u7L/uC3CtbHsruiolXmWrAymhUR43MoKbfYfTZhgsZFPXr6oc5HejQirr+ YHbUKPTF6ESepmWnpFBhDXtcjZQPi8eFrHHG8PiUKJX2Syjtb5yezFb54irtkn7sh+rsZVUMtf2d RslQbolbr83nbQi143MyMNSK1RAviHBZXulPMuYsDhR55ZPKRbec572Q8+JAXFvrGI8SSXlTgXZf TMiGh8dYq4KDZwwu/R0lMQH1U6NGlI6ELxPKjmyLDYsJ8mg3d6XJsYI3jQNFm/jiPk5B+juzcsYS efXiH4QA2geNhdq2y6Bfne1L+EfSmtC+eOe6FcRU3Cu0YY81I+zIyji00Y5bgkqvrIzDWNpix8rY VMfKgEAi9HtwZ+hNu8mxkOmg/RF0JLIg5yRQSzX418RH0DLZRF4o4vpUGAz3Kp/oK7bCrygvyw+w k+7UolnK67VNu/fBydnxDd/fMfbb1/3izTfXmnx2TmAIBpKblz2/5appuTfXXXl8Q49UU4qV+kg0 5A+OrGgbXtMysjLi9JYk77xs6YsLE7IjFP0xFrGvPtbQsWbs5HRaySwaedNaijofhbeVRd1OrfCW WnYhzOzhUFh83rLL8rrlV5YzFv13HN93bHT80HHY+murIWCiORQ9qEhdqfpMOp3RhCor2exD53y3 R9YHbVV72HOqO5otKzNmGRMMtnjQKq9DO+gfqXJtLTDi8vhhIeKKKOA3HABut0f8uK+OAj0sojMw DvCgC62kiH6uJUqJKjLITGj5lVDYYrWGzDHBErbF0M+E8is8XY3ZZVp1PXgOfur6RCES7+RNd74I UORFAHefdzLIta1aMeNwq2zH7Abl7ys29PBS+6dIGNI8Uu7+X14+r1mx0xyi+KQfrBLT9CTvrUb3 cQ7u42xpnlABS2yz6Hb5xUo/CyFBxZ0cW9pks5lNCaeWSLWGJ+cTqRVxeh0tLVnZeKWsLK4kKpjf KSvxrFBhCZRk0VPAaTJn0cBFRjkIMn5CAOUJz6nmKpdbMR1DsxgC2CuHAuy4keTjcI4mlCVf2DQo r/oN22Eh/AWxXCUkXRkEo3u81H/dq3PHBI9B1u68pobevBF+DUMFzsIfPo2KzNPQOSoO4QUg1Oy3 GHqSbFovXea3Tun724/coX6Lg+JvLJr8821cDJ/yMOKOpztnrRKjXBgPTlvyqvZQw5FJBlnsho9C BklAvI3b2DbPdq+kWBSrYlPsikNxKojcsqzNM8J7g3ije7G8OLkDb9rq9agxRu24elQfyolc9rRd sk/mbbkSaNyrbaL4tABGL8Gg1HMLSRODYS5vugU4CXMK6KmOEidvKjG5CHu6wXpQPGh+jO+kIGBK iOz1Au3EMNE8wBl2ZS1S1mI2JLOANZeoVq+YTbs73DvcEgaLLhG8zKyiOzVr8CzzbAGEo/O8xnZg zaRYXIMuEXiu+D3nPEDshbpuKuv+RrrD0OLtIfDj0JfpWqtG7NL4DqRBRVCPcx0GPiO+9FDuxavJ u2FZOt7PMilWz3urspGUEZkh2UmUXJwTNICAHpMk2y5e1D0GSVZKteoLlf6KwPelrf4XkMza698Z MAmiS1zrf9i/w/8T/0l/zm/aIr4kHhMlk87kA1HEVylW6Sp9FYE2XZvvMt1lvpm6mfIs36zgrMob 2FLdIt+NgRuDN1beobsNE2wfD/xQ3Kb7D9+WwC5xv26P76XA7uDuyrf8bwZ+6z8e+C//mUCN1R/2 oyGIvyZwb/Deyu3+/f7D+sPyB/4/sj8G/iFe8P8j4NZqiECeKRQRaYyHHrV2eRkTwHpQy6Rz9GgL SA/S8rLuMpEoEGBkb+b8h0Se/9CjVl3H6UlAKWNIkkqfmtkOToXAE8xs3swrIxN5KkSP6i4tTXMe RAI8iI2cB3HxCrWpwINALVKeB6EM4EEoA3gQSp4HcQCYR4DditV0CrffByA9qROmgxMxXWepyMZD WcWbtRuytrii2O02wzJk+n4aRC7lAbVc2BBUG8B/qKwB/yEF/oNaGsUhGMIBAHMwq16PHhj72YuI QQLsfhAgZohq4/CMSO8T6X2i6nJnkJx6UbXrletREPlTWbdBzoL+f7C3oYVOfW3DM/yyRrvEf8Of xm/gZ/w8P+OX0Vn1+AMZveprWQuihEh8CRFcidNC1QCNOd+FPij5r0+IE9FFlAl89XPCRFeBMFHz OfgTZ7qEEg1yJC+He7Mg46FaBeno/1/KxBAtSwOCWfEVntE/ezLPmyggDrsqTUGTjlgReYeGrYwb JamiQIkoBCUDKRGF56R1i/buWdRTRXr5Bzos3di3YM/DSwid/j05vZVMjKDMYYCG3iDK/WdFnrEu aOlC2Nsl0NJO8VF1Y8wd84ieNvdMtxgmjCWWuJ7d7FkWX5a8vvOn7KeuX3h+EX87+XbT65nXO53o 5SlsSkj/jP7AKQ+KRnngVAhFo0KIKGdxZmEovVlPNp5VsqHGbFO2LJvMVo/JdmZbsplsVi3QHSrA d+iYrc/sYfU7lc4nUY+LFR0m2kM87gf1QcBYClAfnnTql2FpgPCA1/uST1ZgyhneF3+yYrazNJ2H EfQgPVgsIUu1IWv4/T5mhI6g4fkAR/hMcQ4E+cJ5BkQXUR3wTXlEmhJxJvRJCVrz5/kP+XNIKLlE fLj0iOaZ5QkNPxtCaNjepxEazvd5kkQ8ON0H3ArnD3vDI9u11TyAEqEmXcOIRFFbJFFY8GOuKDEX onB4XYniT6Fd13cPEQ1Ci7R2uUvszkwzGA29OMPNpRwR77eZZ0icxsgEK0Z0ApXCu06rV+CB2+IP tLuxZbZ3jgbJn9GhsxX8fkaHzlbw+xkdOqlEGulmZ0fcUqq0Z5w4NMnBcDtmu/iIRnGWWnbgU/Ez Ji8c6nPJhHwfUu14kByJQ5wO+Rggr8X8pHnk5IyzJo0yXAjGh6SdiHKhUfaaC1oxhHJhSKKy4u5y tPiM5T4jpbg/tze3n29guU8xFdpbzu7ObS3z4vWPaT9bwMKsdAGp0Mf0ahl7I/ew0Q+HnQBwNjz3 poZ1oisoAtPLTPwV7He5T5lb2wdtfvRLFDYCp9kErWpir8KZEEo8JYkaezyAonH3FLsauOD9vwmr GfPKrkgsYovct3lvS6zzrkvsdb/m3Zc4nPhNwoEN1NPkcTd5NZ8mareni85MOBHtxui9zYkoULVw Ikmci56d9Q08NgzkSReJmiavWSsC1Os3ayWAZjQrBEMUW06gAaTLNG9ZlAh5m4h50aPeXFGR5tSL BKgX3iY0LOe9Kdwej0ITWDxegTXhBQ8GCJiieo+ZXJ9wWM6GQtBokVyfsmx1Yxbdqh1CdGpUXB49 FT1HkWlmqh6EN5de0S/Xn9Kfw3z6YHP1PkZ+D59pe6ZrBTCGFUWQYYDzk6+0pOEslGklmtD/I+E6 1OMZYqqLL0OlMZG8K+0anK79/JDR5Bpp0maTx/MkDFR25bm+X1lehU5W+RUaF2/KrQlGQ3afn3N2 VrCZbBp3hMHoccn1/WfvIVOd41R1ZoRt9mBsBXefpogva0sIi+sSYkSe1CeoUf4LVlNA+C/V4iCI mJkcFvE1TNCzo0LSIuggPasxzVtSJSx+7gaP9aadXkyLS/gdTPSIit0BtqoDVEgH89tFG3M4FSGA cWoKxgGzLl3WaemwLCO8LujvWkbjr0tW5fECgugm5eudibiuRSL5KtjhQARg6rTGq6JG3kKZ4UEi b/EzbB3O7/bCXpFy875Sg+gYgy5goSjAZwDDWDwf3RlBtijOYJN+3X+/2MbrLfoFcWX/eS24m9g/ 6la6sUcmiq+vpAdvoq5yI9gVI5A5bhQ27TrhOZEQjTCyu6Mt/kQkkcH8tA9VGQ+SibJ6t8clOfW1 c9QOBHF7xJJdgmKaoyLlWqLGBSUkVByvtx3X6cvg8x8PpevL4nHluIB+UWIo2PTFXvbdYp0hLzfh HH/qvBJMp+GQlIQ+CeLUhTMvGyboDFAl5RQxSpRSftroYY45UHhFrRCoQK2VSOUaHoHiTCOfvmIQ hzV5AmMaYxZ7KDilZcKY5ojfH8mMvm16SchuVppGV7LPyhN17bnNwy/XS2YbzFbTuPlsUetEneSX vX5JN7GVLbr2uyUej80i6a9ozW3qmAQmCrFA1uNe2YX4XqynZox+ElhGKDOago486wTYOwX2EJGU 7z3A/zZ0adWMordE1/PFvXTz9bfD1GLlsscw1344l8AJ1VudYGsSP0v8KSFtTbBIbaoug05Ox1UH HpQmcIjRATzRg304o2D8QzqjDvxDNY4HUfoBHbXK5wJz6qOT/JMExQiZoaGgJrOaOSpJTy3VZJYX VKgoOlh5iOxV8RWUTO5nRyE1bPZ5aWmnr4oMouNDkmm9k9iKHifqZ1cySEqTV75xRUGaBFfmBcaD ZaJIcGGKm5rdEJ9itgeDUzMTOpvDgUA4M+a2bwWDNktBfLXtbFHbFToJo409Jc1jF+Q2cfF5ZS6+ 3CaIz+uxmSU9ZHljx2QBXyIdBAFsmuk4MX4x8HA1LiQ0A4PVRlbOJjgEJ7oKuAWPAIgYdQt+WJcS VDmHMLEqgpkL6GYlKEIcmYYyZIrKUWVaCZpytVADlKkOnfTSSMA1YrJlM2p7W4RhQquAue0CYnNh JGYztQuqMEYYK4wTxgsTMProcuEKYaJwpTBJmIxmDlOFq4Rpwrfwl84QrsaMlVkAV68R5ghzhS7h WrR6uJ7/4Qx/m/Y5DFRXMXnGlKtGj67pXLZq5eKFKycvXD31W5OmC/8NCx6kVQplbmRzdHJlYW0K ZW5kb2JqCjU5IDAgb2JqCjI4MjkxCmVuZG9iagoxMiAwIG9iago8PCAvVHlwZSAvRm9udCAvU3Vi dHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9QUlNKU0crTHVjaWRhR3JhbmRlLUJvbGQgL0ZvbnRE ZXNjcmlwdG9yCjYwIDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAz MiAvTGFzdENoYXIgMTE2IC9XaWR0aHMgWyAzMzAKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCA2NjAgNjYwIDY2MCA2NjAgNjYwIDY2MCA2NjAgNjYwIDY2MCAyNDcgMAowIDAgMCAwIDAg MCAwIDcxMiAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMzcx IDAgMzcxCjAgMCAwIDAgMCAwIDAgNTg2IDAgMCAwIDAgMCAwIDAgOTcwIDY1NyA2MzkgMCAwIDAg MCA0MDUgXSA+PgplbmRvYmoKNjAgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250 TmFtZSAvUFJTSlNHK0x1Y2lkYUdyYW5kZS1Cb2xkIC9GbGFncyAzMiAvRm9udEJCb3gKWy0xMDg2 IC00NDAgMTczNCAxMTY5XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDk2NyAvRGVzY2VudCAtMjEx IC9DYXBIZWlnaHQKNzIzIC9TdGVtViAxNTAgL1hIZWlnaHQgNTM2IC9TdGVtSCAxMDAgL0F2Z1dp ZHRoIC01MjMgL01heFdpZHRoIDE3NTAgL0ZvbnRGaWxlMgo2MSAwIFIgPj4KZW5kb2JqCjYxIDAg b2JqCjw8IC9MZW5ndGggNjIgMCBSIC9MZW5ndGgxIDExOTY0IC9GaWx0ZXIgL0ZsYXRlRGVjb2Rl ID4+CnN0cmVhbQp4Ab16CXxUVZrv+e5S+3KrUlWppBJSlSKAVDAhIUAgbQqSsEXbsJqgJYkkmCBb 2FpBJYIRLGiFhsLWmTdidztOLw43hWLi0kRFXFq7sRsBRWkebY+2mifuDJLK/M+tSoQ0Ov5+0/Nu 8p3v7Ofbz7n31OqVa5qYlbUxkdXMb1ixiGnPqBGM0a6FSxtWJMtZHwE/t3Dtan+ybCpkTB6/aMWN S5NlezNj1uIbl9ySGp/9NmO2I81NDY3JdnYeeGwzKpJlGgM8tHnp6puT5ax/Bq5Zsnxhqj1bRXnk 0oabU+szzMf8yxqWNiX75/P58lcsX7U6Veb9r1yxsinVn2oZMxxnhFoXW8rs7GqmR0lhhWw9Y1LU Wgx+SWsntinw7PJFC+xlX5DPoE332Nbn+Pzs5ZPuM1/VnF9vPWWcj75GrT9vwLz6pxM14JF9VfPV ROupgRbeyh9XJ2sNdbIbARHA7NCkXHa1kIZ+C5AuB2wA3At4ECAzJjiZAvADCgEqQBacaPMwn4Yz +rrp7fAao7n0z6c86VlH3kCy/laPb/2tGa//Efm1P0KydAWSJcuR3LTM41uwbPmyDctEdhPdtGzD yszVa1zurBsXI1nUgqSp2eVb3ryh+d5mkTUpTf4mtelUk9zdRE3N7a2ZGas86yoyArcABKFL2C3E Hp+Yk+gTQp0k7AMKdxLbbzKVnonpQ5NswkRhApvIcgS/kMN0LCQMo15IONTXLWTHHY7SZ4RsIStV kRUvKCztQktWPCMzlbEr6JI1MCYznpamtWTGrTa0ZKCFz+qh3rguZJpUSEcZ0Rv0RyawEB1J4T+l 8OspfDiFX6MXtX6vpvDvUvgVYNBIL6fwSyl8iF6MSyHzJCO9AH2ZUesDCH2H6WB8bCnoOopMTiCV caUnM/uMtlL703QHywEIFIrvFiGry+I7OBq+b4eBiyxvn9FUChzcZ7ZoOI5yJ/nisUBOJwXiO3KA vEkk7Ydov0XinX3d4Yn/4Uwr3bjTENoSk0I7dlKI3UP3xEyhHTExtDMmhH4aK8p58D46vPvU7jO7 xd0xCoVjGb7ScAzC7hSWxe+QQ53CkvgBOcSVccM+KLPtKWEaI5R8+4YNB33AHo+G4xarphB33J+b yqR7S7sEn+COi+BMSI97UMZQV9xoQYOLzsc1Kzm/D2SC5fNxmG4XnaT74kMCKJ+MuzJKJ5noOTqg aefZFO6mAxjIJo2kd5gCEJgfaaGWa6PfQu9PUac24skU7krhJ1J4fwo/nsLxJO47RZ1xiw007KMO LGF+ijrA7GFS+7Wq9mtVjae0qsah1WdoE21kDpYDD9zIZ3iamqmFFUHT6fENOqh3ZLydoxHxLRLQ sPidHA3ddwf4eJJyQXLuPnQA0xnxjCFcSsh4NXEhY3PAAnLCyqZATu95yPJrCPbrNlhNX/e+s253 qYYdTo7DlrNWa+mXX4ihL9oMWofPioq1Dp8NHap1MH/mySwt7Ah31HSI2oAOh7c0/O6oglLlXeIz xTOHaB3HxhVHqbpXDu1tl0PKX2r+sv0v4rZ2GOnpjIxS/+ny0w+e3nv6wOlTp3W3bUDt7XZ76e2p NdsmTNTWbEut3TYyP1n2aVPvawsmaXG1ubylbe1CaHu7FLoDs2zA/Jwo3+bJNaWb202hTXzB9ry8 0nB7Tg4SOMOkWwRRkASZWegrOkv/Cfw5fUFfMguiC4/ZOfQVKwfUAETBTl8IDmYVjBhjBtbRWcEA bGdlghGgA4isDH3L6HPAg7SHHsKcO2kXxYC30w76CfCvgR9lVnoY7Y8A/wztvwD+NcY8DPgZHwvY CdgOGE8TEfxzaCKV0Q8wvoAKaTRwPo2iy4GnAk/H+ElorwC+Au1h4KkYOwlwBWAioACQH95Z5hvn 9o51u0vczjFue7HbUuQ2jnbrCt1igZtd7h423DZiuH1kyJYfsucGbUOD9iE5Nn+O3a44LEaT2aLT GyyiJFsYCRYmOnNyxKvFA2KfKOXYy+01dtFH2VavPtPqVtKtTsllzS8bWTaibFjZ0LLcMn/ZkDJf mbfMXeYss5cZy3RlYhkrqykm1VnNqudMVtMIePZktThU3Sn6Z6lFoWrVWHNtbQfRPXWoVYUt2Avm qNKWTgHIWTH/2lpYOm9u93XB+JlaXd/+47oOgU1WaYsanF3LUXhmrerf0qmwObUdAk2uq6tTx1XX IM8m14Wy1cZqdGvLrlOLeGZ7dh2rVifMVH3ByaFLPatWXVjbMWJYlTqyqkHNr6qvvLDhv89rE9El +mEBbQ0kqwc3X7T4N4VVqy7Zk2F4kt6/a+5f45s5eN/By4VCVFHrq+MQCqleNQz1gKqUDC4QRScd 81ctruyk40n0ZhK9lUQnkuhtjjSSVncYuXKvmDW5WjXMAtRcq2YGUXgJhbEoWIKTdSGWgbPfSyyY POhcnEozeCtjfe9o6XtaeoKxxJq+9xnTjUPuVV73P3n4GY2D9D+ZhI99jM0DpVf2/Qr5LhZBfmrf z799UvjupzSGLFTC/gjf/YJG4CA4jL2EYyTnuRfwNGrM7HepObrY39gj7KVvn5G30L9e2I54MQK0 HGLL2VcX1mv5R5Fy+Oa545vsd+T2sP5T9EPJXuIowSlG2QG2j8XYyUEju7DyLrYDG5eRfUJ52MK2 0tOUxt5lr+PsvFV4QryL/RJjugaN48WT+NuC0QMPXca+ojY2iR3DCXw020c+amKvEo7N7ENw+jb7 kG1kByhrQGapkVy//JGY9GjSopLl/4V0PWT9Alv4/WemESSS99v6wzPy4B9isv0bPpJlKSXtPvgE 7E3zDy03MdkOe1gGGxiHNbLIA1szkMjOso8g/WOwii62nd3Jbub61Ppdjn5+yFQhiQT2n5DqGfZb 9kB/L+w0jIU0K3+j71eUx4aj/EL/St+N5UVc7v3+bGCg4/VvfE5+I+XnSQ//vH+uxCdabj/bz86x U+xj9ntS2H7aBspeYM/B3rZB69tA4Xp2A/uMKMHE58BXDf6+45GzZM7Jxc96tgvcc29ZDlpO0mtY 6VLPLtjjIBvX1dAbgzyJsWfhx3sw34XPby4spPK7xJvZ52zGRS3vgp/XhSfYVvjNRrZMa1su7ZG6 sMrI5F84PGv6tLKJE0rHjxtbMqa4aHRhweWj8kMjLxsxfFje0GBuwJ8zJDvLl5nhTfe4XWlOh2K3 WS1mk9Gg18mSKBDLJ6/qraitWqxmVNQjFFcGFb9q+eGZqwpU5vQFgg5/cUHdqFQvVQ6pLK1adWFH ZeHxdaouNLjLD1UxT/k0gMFX+fxVqpSH/+CMhkZ1xKzaQFA56htor8O0amZFbSDgU4U8/E9HE/5n NPgbVaUG9WjQaqarrKaWQ2ff6fGoZOMDdUhn1apD+ovY6C9BJKJJX/cgMn9IUaXDklFRqTJXB7Oc VpmbdzsznqmsTB2Bg0eegpw2GytQyfWpSmkqua8CSxcvwYedGn8JGVQ1Lg5WNbZAoo3138j0TFKi AX/UH51V6yj2BQIa0dgIZ9Z2mE0VwYomE7jAkQQVrMNkRo2ZV0AtKzrIcgVpGcFSNQHnGYMV4nNy cqs4LFbDW+uRCVZCbmhJ+6YFh+NtFzYxDEt2Yuim5UhbU9VVqPokEf4WNdygsq3+jvzu6Dacp26o D1kag40N19WqYgOI6mBiXlXzHDWrumY+qkAEoL7Zz9VdqSVcef6qZn8UZd63HmmwEkMvrm9sbqrn ZkL1wUq0GStqNwe6fTjw1W6uUh0h1Yrh1nXv+sRolbfFz4vR6Ga/ugcHvQtaA7wPjMA7Kt8frQpi NUxWtXgy11jBgNo0a5zeqCknvLXBr7bdsBgyw3/Dtn77D0QV1fJlANqBfjCSewcXMIfG+sWclcUY KQH5o1ubNFa3aazBXvmhhwMfCOtnczF6fm1Vc7AK8kwtCIFgvJg3eGwgoGaE+MBotIqT2NAI6rlk 8J+BAxnISBbgE74QgZ4KNTxHQ2yOpgOsGG6orEtVpTqgRYIe1HB9ZV0dZyqpAFWft1m+POiP8kn1 eaorpAQOoq17VH71rNqqSm6d6ClU1P6gx+vrQR7H6P5q8qJPtKCHC4m3zA5Wz0xaQTOXD0/q5yQd GFJLaR5dU/21WV/z+l7D2CnBKfXR6JSgf0q0PtrQ2dd2Q9CvBKMdFkt0RVW9X/N8Qv2TW33qlG11 qlLfTBOgZG5vU3CATJt5LVfPFH9zA2rwXx4MjPcFHJg62QeR49LNKT+DxcPuuZ9FlY/AsQURyeef wsNLJ6KCT1XGczcFJXNr4QcLsURVo5bAP/ASIfi4p4h1eVUts1MC8gWwpGYwPO7NTNVikkCA+9DW zjC7AQW1bWZtsuxnN/jiLFwQgu7qeUt3f4t7Lm9p628ZGF4fhK68/CVGs4lvs2nE8wF7jjqCTn8p D+agDv/TG9XuOeDx7HjVAIlp6k6rqBV9Au+CnOATec4UwpZQpqaHtIFcJoiSUSXoPxxUlZAqV9R2 +8rq/IoDAZIGjCE1IzdT5XDwZeJBlLkUlcpU8nC3YgiqECOCfvp4NA4M9FdF61PWdyF/6Mp7NzYP +FGSCzguZxJiUILwW19SHg5nkLP6Krf25AanynlTuFNBN5rEZtSpNr7ZqbaPtATM+Spq/QhDcNuZ WsZf5W/mWlf99ZVaPKjz8fb+6s6+U/WVPP7VwtDQxZeyb1g5xJbyiZQYqufU9udm1d7mW1c3Cl9v 86s7mRE7KX/j7aS+9k5Wmd2F78HiguvRPCff769qqcSCKMzNR8XIAHLz8mGb3PRrg3V8J5neGPVz 428EWxpGQ1O0rgD2OrsW8RIvwgE1XOcbyDbV1U3APNfweTAE3aN1mGFxagZgraqgF51q86sRqYbV 1CLYtlXC0Cu5C4PdbnhVN+eYM1I3QCkovq3Fm6J5PmiuG4n2a5OzwFbbMEVdNMrnnF0bhJlHo74o +EiV8cI/uCKcquhkfAgYr+qkthqMBQpq54OqYCDIJV9XiaWug9z7oxS+kX+3hK8foBsjF4Da6zUJ 1/+DJNzwfSR8w/eS8MIBSi+ScCNoXsgl3HRpCavCsO+Q8YUiDSdFGr6ESBddJNIbv1ukzQOEgqoW kNesiXTxP0ikN30fkS75XiJdOkDpRSJdBpqXcpEuv7RI/zeMdsVFEm79bgmvHKAbRK4CtSs1Ca/+ B0l4zfeR8NrvJeEfDVB6kYRvBs0/4hK+5f+fhNddIGFc+RAT8EVGnkp+eSrbCXgFUA9IAG4EfA64 B7CRzrEWeR+LCHjTBCyUVDZP/xzrwptjl5zF5olXsCvxXpa882P4mqzD9x/G/Gwu6v67R8A9kYRb Oh1uEQ2I+yZm/rshlr+r+e4KK5ptg7rYB5UV3Do4B+rSUrkJbAK7lXT4Qn1WaBT+Q5whOaV/kV6R x8q1cpv8pe5m3SF9rn4xeuOtEdLj14siKMcmNht3kYYCbGYAg9LJ2GEALyMvvo08sAQsAstvsye1 j2zzMEhSnsSdi47xvKAUjg44Ao48JIQe58Ni2/k2mX3NwlIbvvf68Z3gfrkHcrrmcZ2SkTsNNxHv h81O7zQ9vrk7pZjMLwHycnKnyWG3d5qskwx6kiR9e72wXejG53pBEVThlHBGkIWCSGvPoUOvKa+x 8ndCoZ7y3u7RhaFQoCTgkEvyHAE3+WlE4rgwk0Y8KlXOiO86182/kBHbCRrWgoYM9kz4rrtcVJ1G J9LIKNObMi2SabJERdJG6VNJLBHnin8VvxAlt5AnlAjiFHmeLPzAc5VH8BR6MqZV6ehx3Rs6oUVH pboW3f06Ufa4PfdIskuS5BkSeSTZLaXvznBaYjlmMhtjNilZtYn0mxxhb41X8PrMEAplKkcjhwBH epSe9CJW3ns00lOOHEU2S0po820HRxdSpDXSGmqNsEgEOV6IFJeMG1tOrGRMIFdfMra4SHK7dHbS 6QPuncqPbruFQomzPz92+k8fUVb03xtfHy7c84HnwaU3keHF95e9OefPT91xZFvNv23/ACKBTF7p OyFtl/8fy2Gd4TtaMmiRl+q8VJ11bZaQqR+pn6AXC62kc491C0aLLcuWbxMtHs8wz1iPKGaRJXtJ 9q3Z27Ilu2hLswmKaIyZwq4hplhRIYuRGBuS4YwVOshhj7kk66Z03aYVvjM+wRcwZiw3bTAJJocf NyD1+IpEK6gNH9D8EEXr0UORoiJkeo70pATSe7QnxDK9ylU9EMeC6yPXQxTXRxhH/BlX4ikuGlui BIIl4/yOMcF+oSiy5HBJgdxX3r63/aHE7Guvop+c/XnX88f/SmKii9YmjiQSJ8wn525ppTwc4vQv z36l4ul/TZxbMi9x6MX34SesHvbyPL7dmfBbiG3h626yrrcKi8xrzYIsUZNEGdL9kiCZreZ7RMkl ipKB9KKZdlssEnNaJdEgmyTrZNO2HLaBCTWMathhfIkTGTMvEOnPuIgRVoBjsVBURVGESUdai4s5 6nm3SOk+xMqLy52lBT3dRd1K92Z5wBjQgUXgYyUUcBS7gw4gMa33KuERsj/6aO84epW2nhQXnH/o ZGKN0CJUajpOQMdbwIeH3R2uK5OoTH+dXpjgpGOu91xCrXJceV8RJzqqHcI4eaos6AtN1mkmQ8xu N7NYOV1NAjTpzrDtNotWaNB5xik4vTb7PaZC3OJQmGqgwTaS+UXiY/BcSleOhqDFXm7XPQdZOfwT GUdpQe8huKmmMbpAabl6eGxA9DM311Ximds3xBLjxo4VZ/XeZcfsNyYOJT5erTs2/b476Aqj8N4H iWcT5z588xzXz43g62XYrpsF2L3hxkwLzXDPdwtTaB4JUzLnZQpjTLTOGDUKM7zzvcIM/3y/cJkV SqL7XSS73K48l8gyYnaBBMGWEzNkKLFyGGsa3PVqxwLHcofo8LSfkUkOZ2RNk4NZbJM5Vzna+wLn r+dgpN9boaXWHny6A1Pawx01EiH4JVhiQT9zKCxQlO4eFswVaAxSndvFDZb+aeubh0hKHPko8VHi FWqg8t0nX9kTPyjo2lcujf1k7bJNouPfEl+/+LfEMbqbrqc76Ndjj89NnOp95D51z9p/+u1Dmm7x lVV6H7o1sx3h5YuM5DbmGauMc41NRtku5ogFougVSSeNlaZI4nRTnUnQG9ONw43iOiM9aXzLKJSI a0ThbwKVCGQ03WK62yQyp0HerRMl7AWGMwbRYGVyoRyWa+QVsiybb9vA8E3Vr1lyQSTScyiiwF8h i+7yfhEgSmnRKhK4gtIIYdltIDcVu9cfo+vOJ8TPE+8k9j9ynibQ12fOJHb0Lj3Kd6J7oMvD0GUa G8JGkiG8ZC27iwlgaJGVWhzUItKMvPl5D+SJVcG5QSGmp91GCl1Gv76MYtm0cwjNG0I5+KjqGjJy iGnIdjbShZ8KDWE5LtNInTw0Zs/IiMkSSkNGyhYn8ygev0fkyXbPHo/k4VvPzJzgNM/dBos9Kyer IEvkyYNZe7OkrDAasu4OCzVCPW6hnWx4/fAVw0U2XBm+fbg4PHrGQpZ8e2B5YENAzAk8GBACUab5 SIjbf6Q1lR6J9MArlCM8dTjTS7lf9ABv1jxbsR1UNtsQ7TXjaY3021KEhpWMGVpchK+/ekR5KZg7 tEQhfCtOmZGYsiVUDKf9R8l24vdfnaOyxKvnPk6cEJbsWtcYWbXS9NBDty7dufBeMePHL/7mjf0/ Pbj34XPPn3n7MfisY9WmeTfOnz5taeKtu2Krd6+tvXLJTJgVfGsj9HEaeyX3rV/ue0RP2J9PhW+y OqbVYcsT6jJJdKY5K5yznaucm5y6Ku9cb5NXnJFJFf7Z/oV+cY293S5MsNOxbDJLPikkibqMmMHg srHY1dj4xJgrIweOlqXbFHYQc5xxCI5gMpaI5GnHD2zMPJ54s6dxn9P8DYJs7X1hIJ7w4DjI60LJ rcBZogvmYndkxUnfy03T/C0ptMPP/GLv7378h+cTX9KoD8hJ4xI/Sfz2bmpfuWTXjrXLNpqPXkXB r39JtkPv0WWJdYlfJtoS1VLhA/Gfrf0/3XsglxZsmjtwA8LPTqPCXmmvbKe9zKnbK+twMtlLYYOR 9hYVhkjbrxC7FexiUPXowmKcjgjQwg8n/JYicVzM5anmx5G+E3K9Ju+N4WuuFXmUmqsno57I4XAI Vnu2XbB4nenTPNh3dNRkoyYn3azfohfYDsVN7rQdQppph9m6wyCZmbJJDsNNmfbTtsNMMoos3SMv EULkVQ5h/4xkYitVEJqxsWrBOem5sL1keI7k6QIDYQvXEAIiWHHROLn+WOJoYldiMd1P6z/9OPHJ Ex8kyPHZWycn1tMDtJzW0s7STxYkjiU+TnyeOKJdeBB7AQexXbgf1rOcsEO+j0n3ERN18mMr8OtC gRVEet/phnwKIJ807ANB7Gkv0B+OH08c189+9Jw+eW5biDmKtDlw0JwdehKsSdqhE5HoSRxk9VpB 1k6j4sBpFLJ2FzuCbqEoMfrCCQU2r+89aZy0EOJxs/vCQx34RYZ1pvV16/+1fmKV2yWKSQ9LQqaO dF6nZ9pU6RpJwGH1TDgT4p8h0joTWe6zO+iA4w8wWofNxX6q8ADit6dNU2w/FTyumEFR7E4yis5N ZosDyjBD/IuS4ofosYP0QAucb0g/1IOf8fATLVdCawi/DORHvNY8Hd85YMNFTkfAGSgaRwElmCuN +9MziZ7EcxT8+JOTvdcMoYmxp3pnU/Txzrwr8PMTWx/s+XDiicShKvpnfgFN/EZW7wGvPvabsMlj JFGXphOMcK7D4UajZdr75rNmYaJULZ2QPpSk1cY7jbuMIk8Em5u5DY7dJtG7W1bIbmAuW7tV9LWz MH6xYmdkEt3MZW2a6Gp3hze4ye4udx9wi3vcpLqJudGcle1u544AVltXRlo1f9BKEZ7thWOAcVZe 3lN8uKe4/DDO8OC/Ffxfj/AHZ3FjB/Wkjy32Z+CMw0918B0NdVHWxjO37nE+8BaNSry7sf32xLub Nt0uzfjD++uWvZ947PzfhP3Pd/dOFfYffLZ3akoG0i5N3w1dTN93PGwC54LdaRdEOxeE2ZU+TRCd oqBI2ltJNsp20arxbWKmdqOggG2nsRm/KmoS8EOLfgZYQTfoLyoKgcfQggg4CPUT7v6G2hE7/rrz V4njt/54I6fxyYfOnxUOPPVi71VanOW2+AJoM+N0dl14gs1ANonutt5vFbBn2uxkSyOTlUSzhcxm HLfIJjtiOsUSYx7bJqNrkxj2GluEdBHWlQo5A/GGCz4SWZDciiMROenRWppX5OjfQYS7En2J12k0 Xh31NDrx+8TZvs1r12y+KwP3zXoy0ZjEq4mziU8Tv++izfsOH3583x9BNuzqyr73hI/lPOzXV4eL TAYWS3PEBI9NNssxg91q10lmu0FKs7fXS92SgDdFyS+tkLbj+lOVTkkGCQaPAyIPj4cUnHV7kOPR SHltdCG3/AwKlhSX5Ln5CdeF0CN8vPgHiQ3r19OIDz98eFiJLoeahcldXbknunr/+gpemAVOFO7z xrPGZG5QitMAIrYL/u5h6cyLN8BMeEQWy2bD2BWw6Gm4a57JZrFrtHGE92tETzw69GU1s2bPmD01 dOWahS2NDVNXNixrbBo1efkSvlKyF+9ZC+A1qwF3AnYBfgF4DHAQcATwLuBzDJIALsBQwBhAJWAO oBGwGnBnX+pBfzaQJ5y6Li6PHlQuGlQuHlTGWhfNVzKoPHZQGb/Muaj/+EHl0kHlCYPKFYPK1w4q 49c1F83fNKi8dFBZ21IukMfyQe2QHWP/BaeXDMcKZW5kc3RyZWFtCmVuZG9iago2MiAwIG9iago3 MzE0CmVuZG9iagoxNCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jh c2VGb250IC9WRFFLREorQ2FtYnJpYSAvRm9udERlc2NyaXB0b3IKNjMgMCBSIC9Ub1VuaWNvZGUg NjQgMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDgyIC9XaWR0aHMgWyA2MTEgNDg4IDU1OAo0 MTQgNDg4IDI3MSAyMjAgNTYzIDUzMSA4MzIgMzM4IDQzMCA1NTUgNTUyIDQ5NCAyNzggMjY0IDM3 NSA1NjggNTQ3IDQ5NiA0NDEKMzc1IDgxNSA1MDQgMzAzIDU1MiA1NTYgNjIxIDc3NCAzMzIgNDgz IDUyNCA5MjEgNTA0IDQyMiA2MjMgMjA1IDMyNCA0NTUgNjUzCjU3NSA1MzcgNTcxIDU1NCA1NTQg NTU0IDU1NCA0OTAgNTU0IF0gPj4KZW5kb2JqCjY0IDAgb2JqCjw8IC9MZW5ndGggNjUgMCBSIC9G aWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AV2Uy46bQBBF93xFLyeLkds0tscSQoomGsmL PBQnHwB04yDFgDBe+O9zbo0zUWZxkW5XVVOnmmb1fPh0GPrFrb7NY3tMi+v6Ic7pMl7nNrkmnfoh W+cu9u1yd7bWnuspW1F8vF2WdD4M3ejKMnNu9Z2SyzLf3MPHODbpg9a+zjHN/XByDz+fj7ZyvE7T 73ROw+J8VlUupo7tPtfTl/qc3MpKHw+ReL/cHqn6l/HjNiVHR1SsX1tqx5guU92muR5OKSu9r8qX lypLQ3wXuhc0XfurnrMy31Uk+73jEXnknkftrfKe864idKrIlVxHl/v1f8nF7rWhprt3kq+rUvK+ 2FW8L8ci77cb2YBF2CRbYJH3u1x2g0VE17JbLMK2sk9YxM5Bdo9FRDvZGouwUbbBInYuZFsswlpt xCKSLZqwiKg1CXFu1FshBGYrkbyXBU7yPtSywEkMRk0G4CTvN8ypDMBJ1AowACcRVRsBOImoWc4m ILYSQoBVgtcsrMF4d1tFYZWoNQtrMN7tk6KwShBZG7AG491YG7CGV14BFsBJJKu2AE5i50YWOIme LRk45q9kTaMATmIaOoUCOImedYIFcBLfj46bL8JE1GqBKwxwp0myZiJqWwFXGBEbEoVGog1rEhrG ovcKv4BGwupA2cCEVRschQmraWyAk+hKL2IkJqIMhxv091vWZdKlf7uk7XWeuZ/2Z7CrqyvZD+nt 5zGNkzYw/QH4syCfCmVuZHN0cmVhbQplbmRvYmoKNjUgMCBvYmoKNTUzCmVuZG9iago2MyAwIG9i ago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9WRFFLREorQ2FtYnJpYSAvRmxh Z3MgNCAvRm9udEJCb3ggWy0xNDc1IC0yNDYzIDI4NjcgMzExN10KL0l0YWxpY0FuZ2xlIDAgL0Fz Y2VudCA5NTAgL0Rlc2NlbnQgLTIyMiAvQ2FwSGVpZ2h0IDY2NyAvU3RlbVYgMCAvWEhlaWdodAo0 NjcgL0F2Z1dpZHRoIDYxNSAvTWF4V2lkdGggMjkxOSAvRm9udEZpbGUyIDY2IDAgUiA+PgplbmRv YmoKNjYgMCBvYmoKPDwgL0xlbmd0aCA2NyAwIFIgL0xlbmd0aDEgMjE5NDQgL0ZpbHRlciAvRmxh dGVEZWNvZGUgPj4Kc3RyZWFtCngB7bx5YFNV3j98zr3Zk2Zfmy43TZO0Tds0TbeUtL1t01JogQIF W9ZCgywii+CCitSlggVRVAa3UWZkmXFmHgI4z8A8M9rxcRz0EUdn4TePswhu44ags4lC+n7OTcLi o+/7/vG+v79+ab7fs957z/lu53u+96Trr7t+CdGSYcKTqqFrF60h0qekAcmtQzesF9Jl802EqJ64 es3Sa9Nlt5MQXd/SlRuuTpdL8wgpv3nZkkWJdJmcR1q3DBXpMq1BWrzs2vW4D/sEVgK9snL1UKa9 5BmUl1276KbM88mfUBZWLbp2CVJ8Zj0MJKy5bkmmnfYTYipcs3rdeqmZlCeR9lzZrieEojZCxkgF 2UUUhCNGEiIYsXquqRDzpVK7/PMZ5fLdyYWG2D+IWyXd7uh7DzexzLGmvM1/r/m42/6p8wyKatwh /cF9lY+mooQ45vy95sIe+6fSnTKNUhI5SgSaekbtpJOFI/SLbOZcNvN5NvOvbOaf2czZbOZMNvNJ NnM6m/k4m/kom3kvm3k3m3knm3k7m3krmzmVzZzMZn6bzfwmm3k9m/l1NvNqNnM8m3klm9mdzdyX zWzPZkazmS3ZzOZs5u5sZm42MyebGchm+rOZvmymN5vpyWa6s5nJ2UxdNlOVzYSymYpspjybUWcz ymxGLo5LnPu7hD+T8KcSPivhMxI+LeGPJfyhhN+V8DsSflvCpyT8Fwm/IeE/SPi3Ej4u4Vck/LKE X5LwMQm/KOEXJPy8hMck/JyEfy7hwxI+KOEDEt4r4T0S3i3h7RK+V8LbJLxVwqMSvkfCIxK+S8J3 AovNk4VhqbRJwrdJeKOEF0t4uoR7Jdwl4TYJ6xk2tA7JWkkhIARoAUwDLASsBmwC3Ad4EnAA8Bzg 14AcspD/EKo0zP+d3A/YDUgCxgCvAU4CzgJUuGsEd43grhHcNYK7RnDXCO4awV0juGsEd40QDcZQ g9416F2D3jXoXYPeNehdQ5R4qpe8CTgD4IkBuBDQAlgIeFLmFb3ys2/R5IWxC9zYhdcunLxw9oIs nfBj46+Nnxw/Oy5b06qR+TDsMeDXACcBZ2U+USc7+ezZZzkJGVpNMg9u7GFWiOtHbwPwSQCHx2pY WaZ6hhr81NDqlimlsgJ4E+eQ+j5OCrnHSQjQApgGWAhQkDeBzwDGucfFmfybJ+2OvN/9HuiWW+3u W251vf4b5G+4EejaNUArVwNds8ruvmbVputy119vteUtXQF09XKgJcus7iXLRtbmutbZb253eTYA XK1h7gHyCIAjecDlLMc9wj3KPUZ03L3cdu4+pKPcVm4b0RE39wjZCsCUgJ8E/AfgjwAZtxd99pMc 7klc+x2kj+PaJ0jO+Pvc9kNWb/QoMo+yTGsudwe3ESwOcrdztxI50tu4m4kM6cZMejN3lVR/I7dU SpdyVx2SB4Uj3JpDbiH6c+46tLP+q1AvY/VXHQ5HourWVm4tcQGeRjsq0Wc5Sm8g9z6A5+7iNoCi QW4YKbt+E1I2jlsy6QZuttR+E8dWvSB3A1LWfn0mXZdJr870W4+U9VuXSVdzsw8pg6WtvShTcjfD 3HxuAbcQJJzOzeBmIp3KTeN6QUotNxUwnWi4+WQC8gPI3wC4HuXHUP4x0v9GquGW44prQNAh3GkJ 0kHcaTHS5STGDQEGAfMB0wFTAXEuJlGtnTOBUUFOzJSbUWazbuJMoFpnqw31lHQCvwjguAloV6I9 ipRRqT7T34P+SkblyCGLPdpq50KZhspMWoGUsbE8Uw5m0jJcKA9ObG1DmRI58F4Ah+lGSDcggdJ6 gIxr44zSo1uRsju1IGVDb8zUN2TSukxam0mFTFqDlF0XzqRVmfrSTFrCGTGF0dZVKFOSC3yUq8aU HZyTc4EpWk7H5SBVcWpOIzFHBeZoQXwHRqsCc7RgjhbMcYA5KjDHAeao0O7FFT4wIx93KkSaizvl IfWCEfmAXIADoAWoSIzOpFPYzOjUTDqbzmNMobMy6VVIWfsb9HewbUH6h0z6Lj3JZkhPZdKT9COp fAYp6/8x/Qi0Fo8gUWugbGNUdigczmSgNEfGx575VaEQRQ/+UHl59KeUZ97RocIi71GWPTxWUODN VubnZyvz8i5Wut3ZSmtuJjestWRyolqDHEfpYbF3K3IUd2S5Vg0qCZlGClkVSzEycqh3ljQyctjr ZSMiP8kviIrvu93SMP9a7IvOPkJVooX++Q/y4IQT3Sc4ManNif5iTB7EPMT6Jy2WqPh4qCr6+KM0 +Nij8uCjO2TB7z8iCz7yAB8Uf1kejj6wgw9u2fHwDk495Bz61RAvDOUYcPOzz0ws9EX/6wjViHn0 4Z00WP8E/dZOLujc5S+LOnZR484WMfrfO+nPaB0tx3oRpFWHjsuCR2jo0CssqTh0nEdSzip/Rnvo ZKnP5EOb5MGjdC7tg14ZWl20D9PtIxy9m26RmLMZKWPyPZl0C71PunA7UlZ/3+ERebClVUd3E0pf pa9Ijb9BCjWkr9NXDikYZ5WHqqujLDmAMYyPHf5LgcRW0fQnZ270pZf54MvHZEHxmKeIUfHwMZtD Sl8ENVn5RXsuS0XvcxXhaO900Gk66P0upvXO2yi8XVYWPf4KJOiVtrjU/5VAgKU/ecWRG33+Q4pZ qw+9IT1YjHzo80Xf/JCKL7jzo4cPyoMHwRhxrKkpOnZAFvztAXnwwEaY6zfM9ugvf06F7dS4nbIh bK1rkG69NRCUhlK9Fffedq88eO+oLHjPqDw4Cjr+/Qwf/OyMPPjpMBc8u1sWPAPSiB9X10TFj/E0 dpvd02ek046J6bQhJt1OuxuMf3M33Y0rWb+HIP9Ixd8Ngz63b6LB2zCqjXjEacAfNtFNI77CLSM0 uBlwF55yJ6B0JDoyaYS/eoR2jtC6Eeofoe56m7POZqu1mWtshohNV21Th22KKhsfspFK27kvDMK5 qnOcP6AvCRjKgvryoKHIqy/2GgoK9UKhgciNci7WpNfG1sceifEGo0mn1mh1CqVKx8vkOiwQOgWf KFxTRg1lVGvoNsBSTCBxfj3/A/JHg0JLtLzWMIFMUA/wc9U38I+Rx9SPGP6b6I5SLdWJZQY3zc9x KnNzbEZHjllmzQmdW33uyXO7z/363GvnFC3nxHMHziXPnTwnJ0eo9lDoXOinVEtaqFaslH0ZOxf7 V+wfsfJYWawk5o8Vx4piQqwg5o45Y7aYOWaIqWOKGB8jsd5IH02au0l3X1vSQpHObEtGgt1HeGFG sjrYnVT3zu0/SOn2AdQmuS3Q576kbMsRDom5fc7c/iPUxZpH3Ech3iTZPThy70AwmJ9MdM/sTw7n DySrWeb+/AHSnayennR724Jf91m3/nqpGum69ekO64Lr0pmDJf6OZFnHomR5x2A8mK2V2ug6fNL9 M1cFs2n6WgnjntnSxUy24lKaaWIJlWrJenaz9eyB6y+/67qvewauIJfudUVJumN2Vpk+JDvhdDnT eukO33DNFU9AQbqOMpx0JlvAu692OKhmTOyd0Zbk2ud1JxMzupMFvXMHk7netu7kMZTqeucmdd42 jIeREh+k69ddD8RAqjlIuPa+gxxDCqC5c/tbh2iKJOgXgHOAzwH/AvwTcBZwBvAJ4DTgY8BHgPcA 7wLeAbwNeAtwCnAS8FvAbwCvA34NeBVwHPAKYDfgPsB2wChgC2Az4G7AXMAcwACgH9AH6AX0ALoB kwF1gCpACFABKAeoAUqAXFye+Hvis8SnibOJM4nTiY8THybeTbyTeDtxKvGXxBuJPyR+mzieeCXx cuKlxLHEi4kXEs8nxhLPJX6eOJw4mDiQ2JvYk9id2J64N7EtsTUxmrgnMZK4K3FnYjixKXFbYmNi cWJ6ojfRlWhL6BNfZcz/P2Wo3v+OD5HfCweGyGchJhOUIiZE5kA+8+F/ls5je/VtQsbPZutTMy7l cfVBksM3kRx2F842fpY7SYzjuy/vkb3uUsqjT7rEYj0MZKzYRjayBJ+hdIJ0jZRjPvw3f57/5qZv bHmVvET+g9wptf+MHCY/zPT8IfkxGSHPk5+RdJRsAA7RXWQ3cB9q5pBJZBZZQJaj91qyh+zNXLWY DJIw/ghpBkVHM7Uvk/fJv9Pz6PdYpuZS8iCech05gic9Ribjfs1kB2b7EPkBeZJ0k7tRuvQ5IWVP covICrKO7CdJXJsgy6TaKeR20kXmYWydZDbGtApPn0MOkGfIEnKQPIL6n5EZ5AnFs0TFrWecGv8b 1zj+N7IVV3+LW4/93XZ+mKwnt5InyF8ItvzkvtTz//fcuzSwb8zdTx7GLO4i28HTOXwT38sPXuTt N16UafgJ6PUL0OYmcGUf+PIEuZ/6yKNkM9lIdeTb5Ge0+grq/D/d7+vaf0K24d5Xfv6THAXd9oK/ 20GxdeDL9zD63is7IZxZQjWQmxVkDtWTL8jCr7b/f1JeA1m4CRJ3B55zHWbej4hpmFyPdBng+uwz 4AI3ky3g+lMwiu+gvo3cRlZRD60iL5It1EluRv9vo/Yh8lNahb7ryDO0hJyDVs3FLP/HB/YAeinZ A7SpCLWTV5lu8l+wrvyHWXvASkxGaDE5Rsgle0C9NAfy9hPyNJ7/XfIYdVOe/IOcIikaonngXCl5 HfAi6PZT8gvQ72P0cJL/xfYdX/18dSy4Yqt8iWQn0PV/jgXSfu/lY4Fe7CePQ782Qoaega7/gjxA /h3pNpR2Q4N2kR9BBvZBloYx1osf+RxEq4l8KcMSDfTkPzP2CWV+jNWPvz5+nLWmMcultl/M/x7a /Efocy9sxf/5/B8K/G+kAKc8/7b8TW6S3CCn4x/JnlbKUnPpPzCAvdD4B4Fvwd/Srx8Qf4F/X35g /BP5T1NtcpO8OLU2dSvWsv9F/pv8mvySvE1+S35PXiZ/5av4X/Kn+M9kgzKF/Lj8u+THskpyI/nW V+8qWyVbJpsu2yObI6uUB6BBeWQK7OpVWKsGyWJyDewakd+vDMsekM+WJ/jP+C/k7P3SSti9u2Gb HoQlI+KcJYmFC+bPmztnoH9W34wpPd2TJ3VN7Iy3t7WKLc1NsQmN0Yb6utqaSHW4KlRZUR4sKy0J +H3F3iKPUFiQn+fOdTkddpvVYjYZDfocnVajVikVchmPgEc5dSad7f0dK5Ku9kH4znGvUUjqpp6d EkoSs9vjNQmR0EBFpldSHkwSS3fS2tt/kIgNA0lF8KtdpiZ5n/EzDy6e4hY6kjIfvt7JixLJkhn9 Hq/xhPti+wBum8xt7/d43EnOh+8kNOE7eZGQSBp7UY8GqWZSkvT2Mzgy/lYDKkmDZwB4Rn+yIFsc YHdLT+WyQR6FbRr7yjCn0lHjQZ2rPZ4k1oNE91aS2Fi3sw3wJ2LJEmwLfUbkpLuRUJJaP0tSS5La pmBKVz6CXXay4Wto0JFY4e1ILAdFE4OXaHo2TVGPMCqMzug3RdwejzRo7Fym9x/Uatq97Us0mAW2 lqggBzVa1GhZBdiy5iDVNVMpw+k6Gg9yRJUD8pnZcDsYrEiKWweR8cZBN7RYLrUgsrDt8iaCy9Kd CLpJOSo9M6loTyrTgxCWJ8VFSbJVOFg+NrrtiJEsHgzqEt7Eonn9SX4RBnWQ8L6OZX3JvO7eOajC IACDywTG7riEGPOEjmXCKMqs7yCwN45Lr6xPLFsyyMSEDnrjaFO392/2jLmxHe/f3JE0BZM5uDzn 5nfc/GiHc7nAiqOjm4Xk7un9l7d6WB8IgbOiXBjt8OJpuFnHijbGsdBFtknSOCkhMUfcukhIDi9e AZrhu2hbVv49o8ak7p8ecAf8wZVMOxiBGSQGV7CprMCVMiTC6NYl0lS3SVODvAodK+IM2IWQfjIL V8/p71jm7QA9Mw8EQXA97/vqtR5P0hVkF46OdrAhLkpg9Iwy+LqwI8Yw0gXohDtIMZ72pNgnJaRP 4gGeKC6KD2SqMh3QIgMfkuJgfGCATSrNgKTSt1le6RVG2U2VvqQ1aPS8gLaxivLuGf0dcSad6Mm1 9zeddrpPI9/de7GaOtFnNHSaEYm1zPR2T09LwTJGH4YG+9IKDKplOI+umf7SXY873cfTT5jX3+nt HBwd7fQKnaODo4uOjA8v9gpG7+hBnW50TcegIKk/Rf1Pt7qTndsGksbBZbRR4hB7PCbH+zqx+7dM n8tY1SksW4QafFu8nga3x3SxD6zI1zdndA7SDx1gOjdq/Biz18E6uYVOZmoQkW1wJ40NTGUxoFn9 0IkhPKIjISHoCgJDnJtpDT/g61g+M0MstwePlISH2cDpmVrcxONh+rT1iEgWo5Acnt6fLgtksfsQ EUNB8HGQtYxlW2yzWMtwtuXi5YNe8M3JAlOSfHyTfMO2X5TtUZPXLESZYcfo8J2USI71YY6fNyRV oJjEekt7P+/mWBfkODfPcpoglodY0hGULmQ0gcUcNXqF17xJYzApb+8fc8cGBKMJxpKiTxc6Mkk1 vuZ9iTI7SqzGJI0lqZ3VE9hVUA9239GAxouCJHSMDmYE8PJpoSvrnVh2UZXSg4fusrlh9kYvVNed JoPJ7GUzfIUJfHZh8HUyvQJLJEJNHkjq2XqX1H8sIYzX3d4vwBJBc6dLGaFDWMaYnRQG45JJGHCz 9mz1kfGTg3FmAvshg+jizog4BD1N2itFsaL8/62gD0PQb982sKwRYxLLMAOhFo9lRG/v68+om8Qn SQnwrElsKle2X6Ritg8MG9TZk6zKfckJQc11Slqd1t2LncGEPszmIgMuf5jUlhUPNpJkJ9b/tA2Q RpacKJWlubPmrq80T8o2w3xsdN+MfljI2g566ZbpB0W6Zeac/qPYeAlb+voPcZRrH2wbOFiMtv6j ApwgqRZxu8E2Vsm6CKxAuinudggvxFh/91GRkGGpVSZVSOUhBHqlunQn1FEyhKivVGfM9uNQJ0vX iVId1hMMscO5DOat3wumJ5Jib/+tA8tGBwcYsYk9LYCQbG8zSXLe5oOUU+iSGu+StqTW28bqW1h9 S7peweqV3jaIP5RDOAJVHx30Qv1hgPuJmw4wEWZSzvmEI+PjsKDHYXk9SYVvHgAGVh0cEJJy32T0 m8hgENUTk8NDi9g4mJjiWqVv0tBAUnXxhugyKanGHdSZO6BHp3QNlmd20RCEdZFXyqIayjE8kBwI sof2L2cjEgT4Q13exqTCnx6k3M8eFBoYNXurpeVE4UtqfJtxBZ4xWTKEUo0bRTyMrUf4KnUY+ZAX vYYGBXBARoZmQhhlfvbVML6hZglWdZkfiypAA0WWGnHugim+NkeTVFfihviyvLYSN8RXOQCisMlL pc2ZDni2ManFiPyXkTJzAaiDpklsLPhuxuBZ11+w20w/QmZ4b0pSiaLSo5RoTub4Ji2Cs5C+Xosa L/y+9MW4l8rHqtg9XkjXKtnMdZJD23dkfL93A1OS7Kei3Jskff1MMAneMxCRDIx+tSI5F4ZT9dXa HKl6dFSV8/UXpOmlyrmYsrsIHcshq0TAmgIyKvyTFm1tMNdUyOPkWcp29OeJQjZMbpQ9SjbIugFv kxu5h8kGxd3kenkj6rei7nOygf+crFEuJHbZA8TGv096ZYtIFb+ZLJetIcv5v5Jl3Eoyjf87TpWs ICIXJTNl1TgdUk5aFN9D/kZAC/quI5P4aWQmv4Ys4H5MfLJryCSZilgU1SSf/wtxIG/lnyLT8Vr6 abqHXMt9j6zkF5F5eOm7HDCR/5g0y1aR2wGHMukUpHeAkOnzczgIiBeRq1D2kGrkLMRNCoiBuNDO kzySSwRSSMxotREHCSDaqyFGXGMi5QjzFBErsZN8nED0klJSTJw4BOQjZYQjJXjl78eZOxleZOtx 5zDO7lWSClKFJxFyA/7O0Hn0He5q7n2+mP8B/7lsQPaO/Fr5x4rblDHlAVW+6gm1QX2XZq3mc+1U 7ae6ypzCnH/TE/39+guGHYYPjPONL5quNp02LzX/yaKyCJZmy3ct/7C2WQet37f+zbbI9pK9Cc9+ Fty6W96H0ZTjyTWkW/TZQjUlpeWkPF8brqwp11ZWastrZLV1pDRYFTFbLHqnszLMk5bj1SF8W/58 4ni1yUwd0RA+xuPG46aI8Xi18c8vhqtobU0zV9/M19b4vUV6TumtrauLVBdwNisKet5mc9i8tdTk MTHg6hX2smKH321obRaqil3qwdg97Z1DzXmG4li54LcpzffT8xcU/KLzDfSvdruvrDbgCkWi3u4Z 1uLqgjsKKvMjnaX+5qbOCk95oCRPseo730m9I3v0y6tl//rih5ggKK7AXD+QLwG3ishGMa5Se4rk Wo1QpC9yOYsETxEv18tzCwuL9Q6LSltkFTS8ZodoEKYJnIkXBKeZWgt4k9m0L07seoVbbi5yykhL JOSIBE3EETGZo84QdtS5p4MmM4lGq7BJiETMUSCT2RE1RSLGzWNjYwzCntpmDlQJBDxKhcJmtTts HtCmnkZoAeewUQ/P51WHnUaDL1VZlGtsaknNapgZoN95gvY5fTUV5w/T7z4b1jiDxUXTwrcvntxT GGtQh8PqNctkM7/cO3VGpTbM5XEjkM8bx8/KzJixQFaLRqtRb+uyGswLzavNvNlB4GmJVagCaXpx quY1TqbmuQKHntfvEB2WAgWv2FEgK6AKBaehlj2c2VykuS03dIrN6BRYHsWXtJwOEmcLpkycxhcw +WjQ+AIQeG/yVnLeIgWYbbZHqjG5iEmh8BYRU425OFJtl5mHnJMXdyz9zryeh1bOWDZRGFrwyxtS qfObqeLf5z4qb0h9dNXS8ntSp//zhdRH94auHkq95XLRfjrrBMVLWMxsA3hZhmhqJdl8lBjwmrtb resyaAoLHU6OU2s0Dt4sosbs2CFqKos0O0qqirz74kVO3rlDLKqs2BevVPPqHZW8aY/BbHbSPRzn 9Ah7CgurNM5NgdCpaswyjaTpsnliiiFMNJ1eeDEocdkZAhVCxhczM5Z5PabMZNn0vSZPdTNfH+El fptqKrlArUxYbBCKShsCqRdOlFd7DAsW6ItCoRO0PtxUXuSwDlnOL24uy9E4/JXyWanfhCdXF2gv /N0VE1PDsabcC8+ZStsmxlPfCRsDXZP5RR0tXlsOXo2k6aEGPcrIZnEm0Rv1gn63PqmXq3m9muNU arWdN5gKTSHTAdNzJrnaZN8hEjW18eqyAvUOdVVeYUHhvnhBWem+eJmKV+0o4w17THq9lxGmXO3Y 5P06akDsI4wqTOgvvLhgfoYixhdRkZYA/qv0sDL5vpwa6sX20opYOPXHV9PEMBSFKl/VC3Ulqfhl ZIj3lZsvnMyPT0zNiXfkp26KdZXhGMKVREhL+8OQ9gpys5hb4vP7oKl+qub9fh2XL8/n83eIVG4x MLkvhdwbiLHXOGh8zQi5N+p0Nt62Qyez6XQq4x6TiavYJAgh10aVJPCnohAHE3Q4LfAZUW+JMF0n 0HGJBiwbrvIpA5fLueMrelALtfcHaj022D9Z3dRJrdvnXRgn26ji4PwfLh9yT1467do9c6c8vPqG 6yxV9fSh4mKLUm6bWuLH8ZrZv6dtP7Llpk7PWRLcljrzixdSH9679JrYnN5yfTisK6xsb07LAVcI OcglxaJZrlKq9sWVNrPFvC9u4ckmXegUaWHjdIYyo/0qQ6SB0afVttLK1JwMB+i+8oBD+0V7c7FT dyXRw1q7p62DyR/emyjYe8o6crU4ocYlqs1dLlfEp9UH+GJf8b54jo+EI+F98VqHm4/wLmeN00Cn 1NQUKk7bHbW82dyQ647whcPB0CkH0z1HhNmZYAQEl8wrBnyZlQ2CzhQENF0+enO9F+9IvHbzldVM 5zyUehQ5bBLSvBZGy41qhSm1fl3qfuiCVPdgdq5L6EJ6B50hL5amdv7JzKz1xZ3T6aZdtDZ63sOf aUqNfT/1wNcQ5HyEP46Vhtnd/4QkGmF5g6IDHogV+mZR5/F5O9SynI1OZ5Fpozz0Aeb4wSUbGq6S F/n9WBjMWCYxDyunoEYz7Im5toaTllBu+02/vHfKlgv7D/3tlm3jqZzDP7z24Z6BR6+ec/usgHHa fir78ZtU3P/t1K//+GHq2d3cf6WOp8a2Ut3hN2jhHX2P/QkjY3azAXwqgJ8SF315Ai/sEPPyIGVp WZEkpZQv3WHhHbcVF1cUSkJTbYL8Z40gkxxpsYP0Q94v54FE7GpEhfWw/YFaZgprYfW8RUr6/Rx3 ZTg1KUvmsx++23XXM0Orm9avfXBq5fQ1bUPVFyZ0ljq0VwrY4Z8s27eiUjZzwj1rZ6/rzJdlZvA5 ZhAiMbJErM1zk3CY8GHQl0xQFqsVSsW+uMevtFr2xa0T+Ak7rHxZYaHb78PbsNvq65t9YbopB9Ys xKbEVBoLmaTWzJJFmJCx9RoazXSbrePMkn3tHBVKm93ucEgWDTodqOS9PKy/tLKDW/Rprd1/mRKd +fD9XbuarqqdE2horEp95I97+ksiwXB41dqrVs6rb71rzRxueuqHXa0eWPQrLNvTh+8Zq1O55i/e 09VTogrX3tyyv6crX8t978K/uTo3zl14Wxv0b834WX4nJK6KjIiGEFvpQxUh1BOtzM4MXgw1dgtW aafgHHbK9LzTmactLpblVch42Q6xwmJhsmmROfdMc1CHo0Q4bTBUlZxWKqvJnqq0DYSwgmCh+ZIg pFd9RiBGQcn+maMgGNqRhqssBRy4Lxm7Skg0c/zsWVvIPB476JYRE9PvrPGVs67fWHPDhuu3tC// rzt7dlw75Ohc0N26NBZZuWL43mlt1z+16NvHaX3/1eGbr+++ek6scfUdU9bsnWPMS33WvzhQtah9 4uK+GnHVvQuW75hbWkvNzCLZx88pByEnPnIbNkTjr4kmtYv22KoYNksYHtBrYlRNp6CSTkEdneIz 23jOrHUX8Co1TKclT6YnziKlmvcV22wFONNoNqusFry7LAiosOwz+ZEEiIkMshlr5Yg4YbbCVemD JhRmqZJnNj/t61ng5lkYadLLgJJ6+R+lxr6b+rMZZ1A99IfNYbPxJdr2PSr/OBiZQEcLij2B3NRD 98lmf/mUrDk+O+zC0qerCnoHm85/KFv15Q7uy60Tmuo04bDGFZzT8+VLbPY26PlGzL6ZLBUbSypV TlpfH2ou8IT5ylDlvrhQGyzOlYeo0cI3NTfti5uishy7vJlXOev5kpJCS5OlqaqwUKwKgaFmLH7Q FpPjsuld5vRi5lEz05LM9Bz1ad+WrXGckrcU8Gnvlk2Y57PeLtwii0QVeqqqzO/dcZ8g5BSX0XW+ Ce3Nb6XqQqUhb2pSZXl+wY+fqyouS93tqyqvm/Bx6r2SUm+eWT4rrPR78voa//bXmuYye2FQBYJU 9i9MfTe1YGBiuBgKpPJ68+LVtDL1q2kRTxnatYVVk+fRNfQ1sbHYoIDPxJFe6EwS9tqP3dd7Rwkd f/8ZgxFHo46Mvy9qWI6rpPmyEgTkxLja0FWi1Qb4wLfENdphbVI7ppURrVHbq71fu1sr1/FarauK Vsoq+conRJndV7w/7rMJlirLbkvSIqsC4izsNGYgUN4ls1hRcuXY8m0V8MB4m9Fl5I0Pu4wWq1VV MEK1fr6aPVSNJbK6uqZsRIXSYRRUoaC0LKZXx+PMIMNcwduC8702OH9tC2wYc8aZDcso5dp0MSi5 ZMGgT3JO/P7ammIfU0546NiWNUNX7Xa2bjJe8ZKYSk57LfeU4apHZvesb8bBB0/J7K6pC513Dg4P tw3dFOM01kB56hPdf71c2VkVX918n2xg8oRrOh94Mqd12U0NM2bcUR1yt9xxZ2rP5KaaQrsuTI9x y5ZH21xtV+PoOakC7c/Jd2H/XEkWiL5yWirHqrNLlBuxftuNOd4cL+/dKebYc13747kkj6rv9DP6 5TC++P1VxsrKvBGL5JVCRIOwSRcnD5vkbGnJ0gGC6cjMz8ocM39AGYAnDn3EjgQTTlsptj+10fmy zvlDE655ZObQL+6afGdXZwef4whEPpug97RMrbrp1rXXRXun+fhCOqnNe+0bTzx1ap27qMkoaxns qS0wq2s0X74+ZW6s2vLCCy/+yju5qxJauByznAEJ85AbxbiAYyJcEgfBC4ctEwViNpoFM68uNFOD mbqwXfGXdpkNTgNv2CU67YXYfu0UC41Go8YsWCxenC33au50Sxb4OGac6wJ2hkh675XZgZ1gbL4O 3rjrdK7TeHz+WqaV6X0Y9E6yyPXY34EIGYvMT95kqm4Ld65scTYOTuy4UYxGpg5cFfn5sTUv3zVj K7/39dbugjlHRmbdm2ioi7c1NJVavjz90Lu3wgBybG6yIDhYBJ9vqVhpetpoNOyPG20Ra8gZ4kNs EkWlhYXgKpuHUrE/riQqqhkxW4t4L2MlE2+vt6GczYrxEFL9VS5mZNnJeGt8F7O5xDjsI5Te+gBz NLKzcTC+QqKxvGAZltXysgz/FNZg3ccxnaFl/vLYnkPrf3lL28qo3tPQHhq+e9Wa8saGRrf+Mi7e PLW9xKWt0eyRtbeXnPtoz7trbM7UwakLxHLr8bGxYwZPY1WzZD+WgbsPgbsu8PcmsU2w2As8Jt70 LdHj0drJROFN1xkXR1xGl+A668Imw2WX2Xn7LpgHbQFfsFPUosWBwJHZeGdurtd8l1Kiw6fm6AlT FPzNbqyzzAVv8dul07C3lzsnvssoAFfEw9ZWyHQ9z9wuhZIfFq8ZnvLqb6558fYl22eF+AujtRsW zbiz9RpFWV986S3ap9t7gv/6dOc7t4qrv7/FfMN35jZ10Fkr75m09xG2ikwDo/8qfxyxoZWioFGq lPvjKpvRDDbb6SdBAxGMgiCMCa8J8hweIdEx0Vnk6xLyxfxivvhb+fA+OM9eIciNOLHpGjtspFMM 8Ok/rf4d47fk9zIxZULbcjpSzYwXM11gs/eix8XXmmCfZIgiRaoRLmIWi0WOItzQmRxXaUVqabnf ptngdzlMOTJ10/Ujc6bVD1kilZ4KvzvnDH/Vhafa414blkadvUjs4OZHFEp9bqTy2i2DAe2PJ4TN fnFhz3IcPSItqVb+LfCymrSSmeSseFWbZ0YgoFGFVHW8audYHTXUFdaF6nh1XV3IMIPOEImR2mCL DMZCY8h4xjhulHt5ozHURXELnnwiVhtcXXzXTtGVF2rhW3aGjAGNrqinmBGpFIQoLi7wtLX1dAhG C+3pKCjo49QlYVnZhLvkRqiFXG6L4EfBPWwV0BrQo8dmmxW5q0wSkONBUA9SwBYDxJWioeNB5ocg g4bj1YiRXgrKZKygJDNMfmAbjsNBCyGbcW/RxBbvgBILgBX2MSB5ZxFpQZAMpuS+1bMlo07CzJg6 PFTSMRbEYmuIRVoyLrr73iL+raPqwuKXjs6M9eS3x8+uuDu68pUtS/bf2No3JVQnTu/qji4Z7e2a SBdfmHz1YKSrwlY9u2FhwhWJ3PfgnNvj+kBX487p/FVKbeE1zU8dtDU2+PzGttWTFzw4wxmd39my NGCZXB1d2FR2/7zZm2aWmlKvbdwSiA+E+2+ov+38af+sujmzqubE8mrLWIwW+wJZEexUI1khxnhG Xa4EiDJEGDJagnxJacn+uLnUJlApUMDWoYb6/fEGEqW6EaczRrwjVRkRrgLdpfDQZcYK662zJb1B TXt96TWngG1R4eqyiAcEWaIV1pnLhTtj0Oi1sqlzByL1s1tLrYbAhNQNgSJHjnvaxBKxL6i0lgZT 65mcS+bs0xhWoGktQm7tlGtmpDZf1eI1QrzNQnucKkbu7czr6gmmbo83BlzYSklSz3dkFyhY7ZlQ 6w8Qp+dhtWaLZQ6ZS7Y/7rJlrbeBG1rDUwP/Js8Z+IVIeJ7eyVlGOE3GBUEqKbImFAy+cMp4ioTm r51/Om2fs9qLqC4vzZdtB9kqK5GAbjpydcDjyJE5wxUfNBkrIqmb5PHnn//iNMbe1kmfEaeGHKpa 9YXa2e3edEyrBZyLgXMiuecoMY+/z1wgOFFSamWbmiZUlFU2CQ633FbMl4ocwvCcDucYDa48ydHd H3eHbAb9/rjB0Ny0P95MRKo32VzFclI2UpeZSR3jpwNaIzkQzAilGZlxoHKPI7QrbQklztJIdT2C meyb8eAVCqWSppnMdrvSThChP2mPk2V82t2gKwWPzRWrrwypVb4yeqByWf17VKieXpUaznVpiypu LMoX3A2MMuuqAyZlhttchVIdjARjLmxAihQI84o1b6S2tLXAqPEmqyG/unl3RZ7urES1cE5eoL3u MoZD/kFF+idQ0U6qRJtMqYANh4pb9setxIZ3hmQkJ0OInLQblSaDZId9lwtvdg5fHd8X3/hkyJpi If8KzqSdEmdrVWCWhkV91AKQjBV5hjhWpAwRhlQRhdMdmTZDXldbtz/em1trW/j0ggXz98cXGKi6 JNgpb1e08+27chRGdcVIjEkDrClLRabasVi/ZcTgoe1vwl9lIotGpO/DiiLjWTxIukZwJGHssIlO QSqJEjuGwfr1Q6QhCky3g0FYSskpQQVi/MylZps6yQ1pkaIEkAq268n+lgAKjxXKLrma2NleqeIy yb38hjppe3SZutDV+tiUrhZP4jZn9/xFDe2L2gs1Fn9F6kZmEtQWd1Glv6RjevGlOo3NU1SZX9rV 7VfkWH2+1E1+j1PHtOzDJr5IFmvyGect7OkKBKbfvDS1uadRcCCIl7EXs1a3+fOMQs+UmtSDV7YM rImX2bW+zp7y1D3RWJHNwtbQKxSV+QfgsCwEDsfIDWJTJWNABbOo5QwFGXLlxXAgkIMLT22lT5eU BPbHSwzlZkMVc3OrjHUjKlVzeZl1pAhbcabeSMeeMZpoTxF4kOYFnML0juYi+SVmpEnvyVjWyiyJ L7O2aeujTLMkEyyUhdKmVWVx+6oCgc4+v2SIsnbpwyatfvLc+TV1s1rLbCqrP5QlVOd1k0rzTYU9 k6tSW9PyfiUxnpJ1i15XzZSVM1ObO5rBqIyHzJ+AT5GDXc4ksZDAN9wpErsyl8/dqTTajVo6xX6n RtBBLzQFekjhj1Gjv5NncotKHvrIlnrgS0u6FCPMeO9YrxVXrsOc9bU/rjs2fOJPq15Obbnz5vYF E3Jb13RtuN34j7N731l97oN976ylX7z659ZVO6Y9+Pzc32A9mJSaIdOCgyWkgQyLZSx8BkfdTfyV fmxld4p+e11upDDCR3bBiXc8DSdhf9xuKLoznFkPkGJTBu0JhxuJM5dvGGGunqhGjYHJAxy+YDqk ixSxZ+bHZ5wS6FMmxpb1+3xsk3JxtUwbHPCPKRabKzx9Pr2LqTWmN2xr1I5gVWpZcYVTJdM5AhUf NeUYmrumTCzZezDx3F2Tb6p2Ns2Mb7j53YbpvZ6C37aKPieLkthKOxv5OV1NJblmda36KVlL1G/8 1yd7T6110YWDy1qFl16gW7xTJ5VlJJyvAA8DJCEW2F1O7EadNra79z/tMxiojqiMKs7Kq+TDOrYi mY32LgQDdHKjWqUqDVDzSEFGsgvYMsPiqNi2H8cP4ZjnC48MS0vLu5d5vpK0Zh1dZkf+h0DDPtQv uLajMbTWWRcqntjmskciqWsv03k73z6lTPFeXbist7Mq9d25HQKLF12muzUaNrMF2L1oMLMweUS0 h3Jbcqfl8s/l4ufhxlwBEprrz6eMk11me1cIm1Yq9+tu0N2t43y6Wh3HE51RJ+p6dYM6uVquy6+0 4fXKTtFmr5Tz8p2Vxty9LldZNcVveFTGkaKiiGok7buyAOIp5rtKWp2JVmDDDkosnA9isEWXvUdC GHH+dWwjIO1irogXImwWYVucdJw1cCm6yI0P2mM99b0L/b1Lrl7dUrd4c2/fE92L3SvmF3fUCSV9 K+auahn43tq2W+Zzp2Ided2tlbGaYPnkxfFpK+MFLuvr82YavLGKiFhb4e9a3D5jg5hjYXTy4XdX z8sOQ4dni2GHkbcKFtEf6rKIOkOXxbjLYec0BgXV8QqlqCFwODSfKA0Wq1pdoJRrR/C+NMqYfoIF a7DDyXI92nLhRDCITR4LlSIWFrF5bB62QLCtm0MSdWx8fNXNXqt2O21P/dxY3lBe0llUMXFT/Pbb HuJHVSUtC+f+a0mqfdG61jxPYV1H8yNPcfihGSWTsC/34fdl+BmfWJT/dF6ee388z4bdm1fJK3eJ XrulnJZj9acG+4hQAKlNB5p0ukpuBLEu6C7WxhK2FJcw3WUGKMJ25lJo/GJ4KWOMMfrMsMGOdFhF Kqc359I8/JLjG5hE883FbY3+ztk+hd7iDdB8hbWs7t0mhWHmrp65NzTm+Jr5n6X4629uLivonhym N0Yb8S5HE74wa0o8sx2f09d13x305r4WH/s3Bpbxf8o0mGchog+iusoCx6JKrac9SiMLEakkDFcD ebXTbkQYkhK6Py7PMdndcmKw6MGhtoICweVUqz0CJK5JeluPF2PUeBKCmXmrD28QKw1+7YofnlIE NCGKDotFcvSk8C2H8C1lKw39QaXfkqP/t1esxooYvSFQVpafOnBD6tM8TwDcCGutgts9IZBS0Her mt1l5SxE6ZkoXnBzH02J5qmkd7j5418qyjEjH3leNOqNkgkFQgwIvhFzYvKRsQpAJob0kn1lCJEX qcdZxLhBAauRYZOEpeuaDIh5WwWGTWls9fHURswGDSLd0rZeluPMK5KrDL5iqzXfwlGTyYIouio/ H3FuiIAU3WYRbhDqyjh35PJIN3s7DmA/Dka8CiGIK6Lel9ONZ2HvgtQXW886CiEMWxtLdbpvU3rv G0m9uaKOzofYelypNzdzH10wcu91Tchn/kcgwEjI8YrzX9AP/B0FZTjpEFYa8pvECwIkwoGN/K9A v3qSOErKxj9nDgV+Cv+5WIWMu4zoZd4qs83HF3mLIP9epaaaD1WFENKoMhC9u0yGNwBVap/ZHPVd DHtjg52WfHh/F99AOpjfR4MUu4DL9gCWzB6AVQUuHevACRhLlhBMeDjVHbbcomI60T8t+ut3wlMD qVUz9ZYdj5osvpLUIU9tfcVrvy+vKbfTLdNsdq51rzvidhQow2GtODGVOt7WacACVmPzu14+Zvc5 3F4ZyFIcrce/mSiO1eVhe6CrdlTmMTtgTU2W9KMS+tGsdZrsXe9q/6HllCJyRGlUCkqEnpVaEcu/ 9geiLE8gRrstUMY7HU44aQ6Daq9SaccLTKHUnmY/zNjpi8SAEyzFpWDQXoHxDs6HIZOzUNRF61wv qQV7CfA/dYZT1S/bOLu+Y0BXXFQQinQEU++7Pf4A3RXym3P0h46ZLKHGtA7NuPXRqTkvlgqOhvUD 3KeTGguwlmltnlx3YyClpSdL2vODWV3CnKdDAmZCAqzkcdGK0yAaDmeDrZyaF9Q5Xbyew1bnpFiK fI5cK7UYrHqiMWo4F6+Rczj5slPktGwF0xrUezUytqIXQnZkOUzBcjQ5Gt66l0jKhiNALNXzkApm ImEn8ZYE+zRsiaX4C3t/mDkUY8TZCOgNW9aCC+ZLRyM8tdRThJ0jTojguA/Wsnp+5vkUV5z6tLqx xnkV988Lf6bKmhp/sYsWpf4S5huL+yZSY/X5Xxm9PTOYb/k0WHwdzsrxOEUWEQu5JOGNvMD38vfz cgPPK5OignLyAwqVWnGgBNJqPBWplg6wsNMap7GyYpNuYcevrjt27Bi/+cMPLyx6/31Q8Frctx6/ reWJQ9TwyWGOHuA4uQxDx5KNOeGFL7uq/uX30R39V9JfcDFuHvoLopmjPPeMSCjOlVCZnJKSRpAg cyYKj/TUerhYqoq+Rn/xGJvDPHDLjneWPpyMmyKWCiqVnfiTYgkLjXMe3mwftoMlD9hl/gOlvmFC zLm3aTSgYogFwNnCdOpEmtiZVTWUe+FVFgnDo9Inz7LhqczJMxbh0vNKCGT65FlM46oNN0Zyy3qq py00b7nuySk3fXuioaAyOrG2yuo9RncXlVZHpzZNnjfUNOWaugUL9jRWdt06vbSjraNzZnP3xKjr CKMBj3OEL/BU/j34+W54CaKIV9KiXWVT5tGcHK1SpXW7XTbB7tIe5l2HTaFP/3LKeCITvjeeyIbx T1S7jlfnOo/j11ZUirVJboDN6vBcUcL/R9Fqi/umR+sDppT5Ypa+zb9Q3JPfsmTFpLrOWwbap19R wH8PALUn8oe5hxEH0OM0Yr2Yq3IIShxMpPn5brvDrdfr8C85zIfd/GFdeoSMxsYTDEPnf1eNAbOh SUFChTLAnK+A54oSjWi13pkzo6Ves4l+cikv38UGk1jWU1c7eV5LemiXSkyGmlMz+B9hZDzJF3U8 5dyECnxW6iK5TcchuS0teDqWWv5HFyq/zf1Ovuvz/1B2YFa3w4s9DRlieyx20gJ7rEdx0kKFg16P qmTabVZrgX4bn5aWK3dRHE6isdfS+P0aJx2zMJuypyzK//Db1uv3LPrjiXdTsQ2bNlwfu6anY37U aaR9dM4RqjvQl/q31NOpJ1I7uVdSP039mhbSivdo/q0zHv0zZnMIIvEqRpRLmsUCsx2yplKoVepH 4ioH/gOA3m5XK3Dqc1Svz3NLWvUiXiNHWDyXtEiHcpDDUsNisunXcZnQIQvmB2hEYeN+kuNpXjDl Qv7qhdWOPLdww1Xl9Hf1CipvnOCzablJk+SmouZOPljia2ucQh2DT2NMt2NML2FMJWSxGBHyzWa1 02lX5dv5XPtjYr5MLReNli55iaqEL3lS5XKZ1XKlQthmNpe5StRq53ZX6FQkxJb+0Kcnqo+zlIQk 6/ZikK0C1dBJvHNj74hZSAReKyedeWNBsvq0m44TIOnTn2kVVCi5Z8OxYptxlun8S8EH7l4faah3 Vg11/0frhg2/7fvps7aKnnlrnx3YrcurCKX+VLX8TzuH27qWzw91r2t7bSwaeeqx2oGrEktveulb kIApiEF45PNA7yKyMH0WMMTOAhpUGqVckyfHuYbHcBRKrsp1os++eK6gwv+h0ZjvyRM8KplcXuxW hrDvwBvtT6t/Dzc9chkX0u+f4PIwnmCF82E2tbDdiAhKRxqVCPNJO1bYNoTHvZST4YDLhd9xk+6z NVZ79D26s9LpohWpT+hmhUyT2iCd7NjTza87/5QpGH51T/oMER0/t+CDCRceZHp6B/x3DXjlwjm2 2WJ5gVyhMKnV2JE9LqrVLr8L/65KdMlMft4Pn0HudUErcu4NBkPebda0mGOdxnyywo6XAxJzMltt OG+QLBsOZiod0qGMzM5a0obiesoWJfxl3qExA8rf9+gn3xY0fU8tXPtkb+L1R/745ppXqfFbqfHw 3F6/TqFRDN/RfXWL+2Z5ZfiucZKUxRqGDt90x6+uo0b8yyRa99cR1YVr7GWCVmdpaHvuWM3cW7oe wraQfSjCtXhHhI8CVonMjk/vjk8Oti+6dvF1yxf9X1cGJHsKZW5kc3RyZWFtCmVuZG9iago2NyAw IG9iagoxNDQ5NAplbmRvYmoKOSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5 cGUgL0Jhc2VGb250IC9FQktFRUwrQXJpYWxNVCAvRm9udERlc2NyaXB0b3IKNjggMCBSIC9FbmNv ZGluZyAvTWFjUm9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMTEgL1dpZHRo cyBbIDI3OAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMjc4IDAgNTU2IDU1NiA1NTYgMCA1 NTYgNTU2IDU1NiA1NTYgNTU2IDI3OCAwCjAgMCAwIDAgMCA2NjcgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDgzMyAwIDAgNjY3IDAgNzIyIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCA1NTYgMCAw IDU1NiA1NTYgMCAwIDAgMjIyIDAgMCAyMjIgMCA1NTYgNTU2IF0gPj4KZW5kb2JqCjY4IDAgb2Jq Cjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0VCS0VFTCtBcmlhbE1UIC9GbGFn cyAzMiAvRm9udEJCb3ggWy02NjUgLTMyNSAyMDAwIDEwMDZdCi9JdGFsaWNBbmdsZSAwIC9Bc2Nl bnQgOTA1IC9EZXNjZW50IC0yMTIgL0NhcEhlaWdodCA3MTYgL1N0ZW1WIDk1IC9MZWFkaW5nCjMz IC9YSGVpZ2h0IDUxOSAvU3RlbUggODQgL0F2Z1dpZHRoIDQ0MSAvTWF4V2lkdGggMjAwMCAvRm9u dEZpbGUyIDY5IDAgUiA+PgplbmRvYmoKNjkgMCBvYmoKPDwgL0xlbmd0aCA3MCAwIFIgL0xlbmd0 aDEgMTU5ODAgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBjXsJYFTF/f/MvPf2Pt5u kt1Nsuy+zSYLZAOBEAiBSF4g4WjkJphVUhIgcomAAcWTeHBFFLT1tqLWKmqRJYm4BPojragtSqHV 2mpV0KJSW4S2lCqQ7P8zsxuQ/v0f+/Kd+c7x5voe853vvKy6YXUzsZFWIhF9/rKmFUT8ckYiSsy/ cZWWStt9hBhmXbti4bJUOuM6pK9feN3N16bSuaiX99Gi5qYFqTS5gHjEImSk0rQUcf6iZavWpNLZ HyGec93y+enynNNID1nWtCbdP+Hl2vVNy5pT9cdcydMrlresSqWv4O1PW3FDc7o+rSfE+j+EFN1C 6lI1CHEQQoF7yT9JBfkJMRJGVFJMZhMi/1zuRxSkebninPOjrhdGznVW/NuUaxIvP/uX/oUceeOJ eVed29mzUCUmG5JmUZ8X4D3jmN4pZJxKzu08d4ua6omX9P28e8gsaUBHxBc8sk8aSI4BmDSwPdov uEfqL/VrHx3UE1K4w51V4qwaJGlosViEGsLlgJ2A/QCZzJUCKFURrgW0AnYC9gOOAAyEIOSlGmA5 YBvgGMAg9ZP87VpQreovZePdbMzXKXnJKUASIJEgwmLAVMBcwBbANoBB1OM5ywFrAfsBpwEGokve 9geHYeze9ntF1LHkuhKRbEol5zSIZMdVsVQ8eXoqrp6UqjYqVW1oaSp78NhU3L8oFbsLSlrReIfF XtJd5ZE8mKQHA1+BkLIDxEkpCZKnpSwSBzAJQxU5uuTuyI+UbNsvyYRKTKJkAQkmuyXabneVVFlY kp0ibhJkX7OTqRJ2ssPhKtlW9QP2GdkJ2A+Q2Gd4PmWfkrXsGF9zhJWAbYD9gMOAUwADO4bnKJ5P 2CfEyT4mxYBKwFzANsB+wCmAkX2MUGUfcY4RIccrAYx9hFBlf8a0/ozQyT4E9iH7MNnN3m0vKy/Z I5BocRoJFqQRb24acXtKEuz37d8OBEdFQGlw1F4pj4whw6S89oKhwYTka69YHEywv3Ro0eDTVUPY eyQOYBjJe+j5PaIBpgEaASsABmDvA3uftAK2Ap4GxAHgMoQqQGMHAe8A3idDADpgGsDEjrSjmwQ7 3B4ZG6zysN+ytyB6QXaI/VrE77A3Rfw2e0PEv0EcQPlB9mZ7IEiqrCgneEdFrCIuRrnCftmR7w4m q1xsP1YwiLAYUAmYCpgL2AIwsP0sr31B0I1G9pKDkOEgayd/FfHz5FkT0ZcE9cg4MKDGg8ioK4Ah 2KZtizA98vBjSPIgcv+DwHgQuWczMB5EbrkTGA8i190IjAeRBUuA8SBy9VxgPIhMnQUMQYI99Vp+ /2DZ1KVUq3Kym7BKN2GVbsIq3URkdhN/yLcyH+MT7YWFWLHH9ejAwmBrF23dR1tn0NZnaWszbb2D tt5JWyto6w9pa5S2+mlrgLbqtHUvHYmlaKV652XJct1HWw/S1h20tYW2RmhrAW3Np60aLdMTLNQ+ CVKHqEZEHVVc6Fio44ox0D5OFsKKhsDzIeiE/QgPA5IipaOSlpeqnB3gcV5HYWUqPXhUyfKqiex1 vPg6yPA6OQqQQaDXwUavo5HX0ZwTYSVgLqAbcAqQBBhQOw/z2CJCJ8JiQCVgLmAt4BTAIIZzCkNh ZDlCPsSdYmDFCCsBU3mKvY4nD0+IhfR+ql+NqhOlLX7qDNCpgWSAlRGPB3rZ7TK5EtS++z/2b/5j J+YqM7ufbSH9QIit6XhL+7f9ggn6aHtkb7Aqiz5CAjK4jpaTCC1APJK0iPRw4jfx/FLiZy8jLmn3 z8ZrzvZIUbCLOvhbu4Pf+o8H/+pPMKAn/HuDf9QSMm0P/gE5L+8OvuffFPxNccKEnH2RBEXUpYmq e/wjgzsOiqp3ouDx9uAdPNodvN0/IbjULwqaUwU/bEFKdwZnRK4OTkR71f55Qb0Fbe4OVvp/GKxI 1RrO39kdHIIhRFNoIQY70C86DQdEg3VlCbpILzI+bKw3TjWOMJYYi4whY9DYz5hrzDS5TarJYbKZ LCaTyWCSTcxETJmJ5DE9yne9TIPY/AxgaEpkgavQMJSrGYSEURMjPyDxDKmW1c4cS2vj3fNJ7Twt fnZmOEEt06+OK+GxNO6uJbWzxsZHRmsTxuSMeFm0Nm6cdk39LkrvjyE3zjYmKJlVn6BJnrUuN+4e V7+HUOpad18ujwesuy8WIz7PjZW+SvcYV/n46u8JGkVmY3X00s93CY36ov3iD9fOrI+/1C8WL+FI sl+sNv6jmdqc+j30n/R0TfUe+g8exer3SGPoP2tm8HxpTHUsVpugs0U9otF/oB44BhHqmbAx83pE MwVS9R5P1SvA+6iXzyPUM5tJgahXYDaLejLl9Xa15NdU78pHgDpejbSIOi1e7bt1DhagTgEC1PG0 koOizkFPK68THyOa8ftRJYAAVWgO8YsqfpojqoiR7xJVitNVNl2sskn0JKVGI+rwAM3Yj/XVsR9D ne8s5P8dbR4bjdKO0bH5c2qawzWN4ZpmQGP83hsX+eKt8zRt1/wYL9DiUqRx3vxFPG5qjsfCzdXx +eFqbddo8d5/Fc/hxaPD1bvInJpZ9bvm6M3V7aP10TXhpupYx4RppWWX9bXpYl+l076nr2m8sVLe 1wTx3n/1VcaLJ/C+ynhfZbyvCfoE0RcRPD6tfpeJjI2NA/143MGsFvBrY24oNtajrhgjmHd0yHdH bhesle3EGo3FbeGxcTuA8/WgqkFVvAgyxYscyHami3x3jA7ldtHt6SIV2a7wWBJdtbplNfHVLK5O /bXgh6xVqzkpUmGU533vD1Vq4npTNbeta+OFM2vjldOvrt9lNCK3sTqGvFF9eVZrTSLZncocjMxR vKIkXazI8yp4ntmcrvi/84IYE7KxOntgaOztoHqAriItMSkeqJ3FoApmXY1lmHN1fRdsKb5JtMQw wRYapS19rfF5CJykcgim3dIHq1ansfRarErHompLlERb+pakr7koXywRiLVaFYVqU7pINiBHeYFk yxGC80/yS8AJHvcuTp7g5TxmX0HRJdJAyHaygy4mO8h+8it6Gm/tJHtIJ+EmUDV5ktxGfkw2YFu7 GjmbyAw8CvJ/TLOTnTiZPIMN8xlyCHWvIneQLuKhvuRfyVqyTnoXb60jdpJHqsg0spzcR69MriZz yFH5blJGriTXkxW0NVmfvD/5YPI58jOyR/p1sodYSQ6Zj+dQ8mvlT8mPyCC88RB5jBylD5pfJTp6 aUXNn5AbyONSg0yTC5PnMIIQuQljkMlkcoh2syhabyZfUh+9TRqHVn6ajCcPoJafNJBF5HHSRYfT CSykzElOTh4iHvSxBq0+RtrJbjwJ8gvyIbUpp5PPJU+TbFJEJmE+neS3tFvq7bmztxLrpmCVBpJy lCwn/0PeIkdomP6SLVdsSomiK7ck3yOZZChOdVeRF/DmF/Q/7A48a6U35fHJsTjkrSMP8NUmb5BP aQ4tplPpbDaQLWdPSTcQE3ocimcBWYz1fhStfwI22s1s7LD0U/ll+byhX++xpAMUiZAnyE/IL6kd M9VoC72Lvk//wsaxuewJ9pn0Y/lF+ffGJsz6h2QZuY+8TP5D3XQknU6voYvobXQDfYA+Rg/RI/QE q2Kz2FJ2SlokrZR+IY/FM1Nuke9W1iv3Gk701vce6P1d73+SJcn1ZDr44U6M/iHyFGa2hxwmH+A5 Sj6jCrVSBx6NhmgdvRXPHfQ++izdTl+knejlCP2M/hVb0r/peYadlhlYLowfbgKF2Q2wMH/MnmSH 8Rxhf2ffSl4pT4pKw6UKKSYtx6g2SFvxvCp9KufIh+Uk1rlEeVjZpmxXXlZ+pZw22Ix3YY9/58JP ewp7PuklvRt7H+5t7+1MfkqyQEPsHjiCVWD0TXiWgN4Pg+N2knepDWuXQwvpGHolVmYuXUJX0jVY yXvo4/RnYuyv0H1YpT/SUxiznfnFmAez4Wwsm4rnh6yZrYQx9iDrZO+zc5JRskpOKUsqlCZIDVKz tEq6WXpYikvvSB9Ln0lnpQt4krJFDsp5ckSOyhPkufJq+Sn5S/lLZY7ytvK5wWJYZlhvSBj+Aatm jHGacbqxwbjFuNv4nqkR3Pk6eZW8Bg68+KPHpDulGulVcj8bJmfjCPNb8PNcskCazMCpbDvdyG6n nSxfWWMYzUbTKeS0HMFav8m2sbNstDSZ1tKZZAkbmmrQkCm/BKxCfp2clPdhbr9Fy2sMNnoHO2Ww kXbYSOWwkd6QhshR6W3yoXSUGuVnyJ9lC/XSk+wFaRq44BfyGKWehKQnySvSSno7eZXVEGI5b9oM Pp5CX4JemEVL6DdSEmbwFHBRmfQXcjdZyv5ETkKON5JH6AJ5IbmfDKO3kS/J85CKgcr1hkJDFv0N Wyy3sQzaSZj8ImZXTvOppGSSe2iD9LjhFPuArCaHZQv5RPo5Rn+YvSJNlk8rM+giSMDtZD1ZmbyT 3KzUy7+nC4lEZ5MC+Ri0221SiRxCvBZaZQ502m5Idxf0QJU0GTk+cM6V4Is6aIjH8TwKPSGDgxZD xq+CFvst6TTMYgmyUHFQaB14at7unUGuTj5PHksuJNcnHySDoA82JG9Di9vJ52QL2U7X9d5KVuAo +QFk+0plPDusjE8OYm3sAzaTPXw5fbHaBdRHvsLzCigzRtlL2uQ/kpmkMrk5+Qdw9wBo2MfIPBis xzHLr9HDRKmbDOudwnYlx0srMN+jZHryhWSQWsii5HVkKtlHfmZUSJMxChrH6e8x31tJM5uRXCU1 9y7GOmzBKuhYrdXQP5v0cXWzqvTKMVdUjB5VPrJseOmwkqFDigcPKooWDhzQP1KQH84LacFAP39u TrbP68nKzHC7VKfDbrNazCajQZElRklRTXh8oxaPNMblSHjixEE8HW5CRtN3MhrjGrLGX14nrvH3 mlB0WU0dNa/9r5p6qqZ+sSZVtQpSMahIqwlr8UPVYS1Br55eD/y+6nBMi58U+GSBbxW4HXgohBe0 Gt+iai1OG7Wa+PgbF7XVNFYPKqK7rJZx4XHNlkFFZJfFCtQKLO4Nr9hFvWOoQJi3ZtQuRkx2TDGe E66uiWeH8SqakQpqmhbEp02vr6nODYVig4ridNz88Lw44ZZSVFQh40Q3ccO4uFF0oy2GjRMn92q7 irrbNidUMq8xalsQXtA0pz4uNaGNmrgrin6r495bjvsuJdE4bLIN3y3NldpqfIs1XrmtbYMWf3p6 /XfezQ3xFmIxtIF3WcH4xrbx6HozKFXLbfE4Wxerj9N16BKGZYGYVWp+Kau3oHGJFjeHx4YXtS1p BGly2uJkxs2h9pwcfU/yGMmp0dpm1YdD8crccKyp2r8rk7TNuLkjW9eyLy8ZVLRLdaUWdpfDmUZs 9u8izVj0VJnARHWO1c64uLKUjzE8CZZgXJuvYST1YcxpJA+aR5K2+SNBAPxiFG/FF4Aii+PmcY1t 6iiejynSuFKghrW2fxNwQPjk3y/PaUrnGArUfxNeyPnkIqvFaVMfHo9G44WFnEWM40BTjHGMSA8f VHRjgoXDK1Scn/mhgUzD2jbFRhVj+UMhTuB7EzqZh0S8dXp9Kq2RebntRC+Gbc0aeUl3X0lWHS9p 7Su5+HpjGJzcyc+zJCtuilz8c6qejJpFo+LU838pbk6V184M18I01mraGtNcWzvrslSqnC8o1g1l aSyeMa5eymXI4xjLlURpykLuqwJzud4WlwvwZxBMvSBhNIErRQ7VxsfVxompMGYJhdIy8/96KZE8 zd8S0aXX0tOIj4qmB5oadnz0ZenLhmdrk2pnQeUwWPZtbZbLysBqqVFOSkfgeBz0Q9q4OKmDZBbg D0eOkRxiuXEdS4aSWZAikR3LTScvq5ibfimGH+fOQUXjoTPb2saHtfFtjW1NiWTrvLCmhtv2sF+x X7WtqIG2SzFOItl1b258/OYYVmwRHQXxYGTsrjDdOH2XTjfOvLp+D1wc2sZZ9e2MsnGNY2O78lFW v0cjRBe5jOfyTF5F4wlSSzHJdmYS9XP36IS0ilJZZIj0fHg3RF6qEvIomZ9gqTy1rx5DnpzK00Ue nx/XMeNm1afJIhiCix54CDc0aIbbGBzkFpwWWmCNtJDZgDrAZEATAPYpqUOdPcrsZI/hJfKoMps8 pbxFnkH+DwDjAbX0LbIRcDfwDYBqQtA4FwiC2yMD4ZaOhrNJKkdkf0/AnUISdnwFsQE3MibcqVhw Tvnuj9+0fN/PLjJxqUOc31d8MQ8Ews9F3OmcDBFnIszC+YT/svBMJnvpEfYL6XF5nfxnQ4Gx0rjM NNb8R8vV1q22b+3vOtqdRc6X1Ptc18ODhVcUPmQJIyYhV8hVgADeLnJBk7ov6Ao5TzS5m68Hzoas XHkXNWfuIVLyk/bMcpZIfqJrmeWPSJRJ26SduJy4kVAMh6JhiVikE4SdoAn64qugUcctvqhaoZ45 qZ4klRWVFRuUwdGG29UDQ4fQhmg0iw6j9MWtvfXZyt/P8RZwViDsvNKNNdypa5Jud5UuldeyLewx E664qJkYFCaZFWpj9KCFQIR0SyhcOoRQDe/ChdepqqwOyFe6y+kE5rfZEDrsdpF7Ws92Og11RLXZ eGi3I8yxKbrdWarwthy8LYVqOKUxJdvaRSvoOuKLTlGPN6yMRtWz6dM1EhWTeypIZaW3nLrK+VRI QzQUdhkMxuEjRpQNY+c7q96d9chnxavkW8fcFnxlwsG5fG4VWA8j5hagb+0ycBbXzS7V7svIMNTZ E8kznS6XQL7WzaoKLJCpBBLJE7qXVwgEeGnA70BJwMZHHkiwvbqNWbxe3Ii5GNOCLnd58XuHeHiI FJ/kg63k4QGYZLm7IMbpDm1uNxMd6manC1iqn2O61Z3B6gKZPI+33Y6m0X2n1crqgPxdF6v4fb1F o6n+eG+iM33EaGW0Ya+y37DX+JbpN37jJFvMNsux1LbAcYv7loxN7n3uz3M+zz2dY9tvfS2D5cLB 3U8NqIb/wZHaCIvAhNicPK3nBCyqyWA46M/J9PtzTP4ccJwpxy/ZA2qCPdcx1UXh/va9ymdAxHI4 KbNZWrzvYrV10JLuZXdChlU6Ure5Xq3E0Xc5W8tk1sXy4eTesute8ObZBvDm2ShnUTBoT0XlyZ6G 4y43pyyCDY7BUQfYFQnQmYzEj/KANNCGG2KxgqxQpAwUHzFieGkknGcw9h8xYlgJzFxwAv5k44Uy 5i346eOntj92611P0j0Z3/zu3bMTX/jVs3MCO3ZUVczvvuPA59cu/dGTbRmHP/hqR/1L+57b2DQU nDI7+YXsAadEaSxNOGu2T+dc7PMTylk1akOCDgxb7E6bM2CxDMwK+OXAQL8y0B6223zZlLg1sDmr 04wRTkVePVIcPcT/+EPc5ZWVKqQS3HLyTfVNd7l6IFrCAcyiD1DsHnuNfb1drnFd5boxV5rhuU5d krnAs9p+c+Z6e1vmptyf2S2KJnGvudVqsztkI0W/lJNFxwT24lAykNjp8E6bLUv2dbHnSDZbpPfH KBUM0+5umast15jm45ystRpbIpxeQyKURNQIw4jPvMZLIlsH+RJ0ZHv2u7SLjoQy6tatqKfhAMLI 1qIEfTBNw+hJQUVI5skz0QZQ8iToCDJicqqgZ4qcEFUQENJKV8YyyjyeYSUpwhnLLqJ9NORENHoQ knBeZHZn8KGla3c+e/uwKzPd1pbE+iWLN2d2hr56Zc3BpdcuuGtr74n3f5mkd/se2xC/67ZnMp9i a26ff9c992ivvrWwfcHcJwcHfnF/d++/v8DC1CW/lEPK89ABs1OUha8fs7Jz2lK/wxLIyvK7uWRb nbIc8NsdlBh90GedXJ0JRHBBMWSOU5HPE5PsOQDKccINdAvd4BRhbc7N/dr6PZzxQsbrtvdtf841 mTN8jsIcyTxEGWLtgpxJoJ6aYclyZ2QcdDgzHRmZDqcdJNQz+EB0x9MO5nA49SyaHtRrTpm+y8kL qdM1PjzXXHW5ulbdosoqiOgTRPRR4lN9DINNEdG3VXPvo8Nxr/0QOGJku+PV7yMmrpu+S8xL5GyA ouUyKSba4CovbgDbHt9gGhxVIJhECKaQSboSO8plZAUtM0JZIQkySbIyjQZQsu4XWY9dd1fnjs1X bR7w4v3sg57Xpt7zQDc1rbrvzK97aKvadu+BZx9vn1rpYf/4ee+Nc3rP/u6tB9qPYVMik0G5LMhk P1JIp6alMuikQbiFJJo7IKDbqd0OlZ2r5AUy7ZYAJQUqlkDP5gRTA16VU9ArZNIL8gAHEYVAvndI faOPkg0n1QMNnJKDlmbTaqOeVZ1drV3tnqUtlRYYF5iWuBdoq0yr/etM6/3vm97zuIwal5P+fOvj SFgIJMdCosDIC/prYS3EC1x8lNPsDOPMpe/O5YSEUJr7xow9e6TuJq8WtKiCkCo+GMB+ilmcfo3v mOrWIgsXwwAt1z2V3rne5d61Xtnr4WVeD+/Um2D5HdG3hF6NQg65ZhUymZZIrllBwJNCDkeO5FsU l8YYNUb6Q39ynckVqJsr0HAecallSHlo5iVJNUjnO3xFk5bOrqqbx6r2LezsuenIPZ/2Hv/JphM7 Pu4pm3r/lBuee/bWW16SZzqWDJk8ZMzXH81v7P3P79tO3gFX1m30xV9u/9WFjxteiiWeenTnTixA E/ZkDzzidrJCdxywUxl/zCSbJTvWZq8+hFHZbLO3SBLjSzJVbCESy3GaWsx/I1NB+7lMqkS0nK6l Ms12pLl4inqmYWXF5DMnp6hnubXArR++u5S7uCLiJsPKhozhoSwDkQzG8Ai3u6xJenVz78naEc49 0l3/2iSf27H5oV537/nEn3fQr+hbT3JbbSY4MBsc6CVh3MGTFA922khuYDDfEmAnsLrBg92hgEEZ EHDbA2Yb3wDMYMLdnN/MUScoKRQJkNTGzhFR6PRBl58W5pNAOLMCSbOvlJ9l43ZAlmgxS7BvVpp9 BQ+ngkN9XBw9WY455qasnNfEQAx9AwHCB3IcAzHUcQT9A0n1z/PQ7QU9j2fybjlz8Q55yGd6aX59 naEvKvRhehAc5xJUNtxDB3omeSZFvrD9dYhiHgJn4+30NnmVaaX1Bttq+y3ee0kb3SyvN91pvce2 3n6f9x3XmxnuPEhKu1/L4ZGmFfNokIYd6ZgeGKjZSMBHbBjG04PppZEEWvabqTnBFupqtMWpa9jJ nJQ4VSdzJugDu0t8LXGJSihvz2/J6jM0tSw9i2VtHZqSlgZsXJB9cI1A0nNrKOaTA8NwjuF2B//B 8lhJVsZiNBIZXsrl4zs7FUFORqanb18zSN8VHbpkxXVf7O/+aumyDff1nv3gg96zD8xbv3TRuk3X Ltw4atLWmXdu33HX2hek3IGPLnn6w6NPX/vIwKIDG/clcRndveWXdNaie+6eO3/DPReSk7dOfb71 rpe2c63I9zPOkwFoxVfS9LYGsQUUuLABnBVE5juB0E5ATusDOEV9LkFSl7DEXT5XUdQ6IOB0BB1T HZLDkUmmUSrMHLsKq5fynQZKVRGrciDaUCKUSIlYGFCbM6J6CFr04zc40wlL97VLg7i0d+qFYvN0 CS7+P/R6eV//1RV6utSRXjoq50qPHr7Gc1X4Wuk6z7KcheFbcm4PbM65N/C458WcfTlfeb7QzmoZ V3ie8uzwSKMGLjCw/nzfDYOZfCHNoA0ITHXM5Zusn0+PvstPm1DJnXwQ+PCinFihkV2Xb6tbi7ie 7uRq2nWRl1y6i7m2pjUv5yVoXs5KXO9e3Dv71C5pWEkbYumdcgwbXtqfa1vEBMwE/yzjGyUVBm2W 4KUVOzy3Nc28fdoIOmLvst0XqPHNLSdvveUfz/78Q/b2z1ataX/xttufoTPVW66/cu2fVth8s5dS 05+OUvXx3r/0/rP3y96OV/ZLpU/sPvDkZqhc8MwemOfrcQPJT58jYUcoxGA0M0OFLFVQg2xhFbBr CNOwFs+YnnkUNjqkgutPWKuC5EIcMoYPy5IAew4dOiTFDh268MKhQ4ThjpAoMaULLTvowt3U4cR5 EAfWf3amkW8EIyLnjB7jjMh1pKFOEWGxOkRdaFpkblQ3SlvV3yhvGrrV06rVpMRwATdNXWSNq/+y /cv+L4dZtsl22SHBia3IMqxfk8FotAE34aYJZ+ZE8hvdKU6emtGWiSImQal9o0ObQatqsi0Tb5kD imIKGCRDgq3Qzfge8686PDCsi1ohcFbdbdNIs1GaMQ0XWkdlaatMZXzholun2bqNR23SVhu18bTq NB42srXGViMz/sj5/h9Tq5WNFcOfDyuWk62CC3yVFTknK49XqCfxx8/gUdhOGwbjY5H04QYbU/kG 9cABx4EDG5RUDJVTG7fi/jsAJ1+n7JRMxi4czEjyG66FYvQGbm/xXxin+LAUkjJCUqS/wSixYb9j 9R+/3PPEMx/Qfzw2Ps8/TOk6N57u661mV9OH99x0371gANyUEIMTlFLZ8T5L2JQ8q1v5GpkcdpxC QaWvOzmCw/nX+gCO2dy8WHHaJHy6ykxmq4OYzMxiNfBzvxUneoSJ5LndvJZVBSG+6PMIfCM2PuRc AAfAG8CVBk5DCMBZ3d3qkSPd/MAXhRlNkUvSm5ceNGpWq6HOIEJJhLIIFRGawFt6mNdg2CGxZRk4 PzHHJd6yCN6CIZZiPbzwjR7k+1kEbgzN4i51ikCxSYQ6rMRkoszCJ85bEwhvyrKXzYb/R2WzdTsR HRHREWc1wdGEb4HRM8VnMHTuZ6lITQamJJ+N+KW+LMjV1xLmNGWyXJN8o2297ddYStsk2ySnNFAu sBc56qVr5Bvtaxwb7CYrU0zl9hGOqaxWgilqmmwf67A8yh6THjY+bNouvWA0uJnT4RiisExFYSZo 9CGKCajJNsM5g+pgZpPJbLFa7XaHAx8cm1mju9XN3F1sO84BQ9sVzZSgQ3WLzWzRdNtaK7V2YZIO akUJS0AEzNhENecKleK0P/s1TWlUWhVJSbDtHa7RMV80G3rhTEOFrwcszbkceM7FxPEG8DyWAb6n i08OJIHz/obbBesjwpH+Eov/gtiS5+F7eB9q5H3B4bVxG9h/ANh/D7Env9nlsHC+F5952JPv7Q6V O4pC5XDdvLe7rNxRUibQVwchdxD4iP9ikBGyEr6CWGwYHGwe74gyGnKFXfggwPUobievGeLJHg7r UdnbO3tnb73Sdf6fD0yc9oR04dx4+e3zw+Vj5zXoy6dgo/ZAUuy4bWzXi5pdSzNZrVqbeY16TaZs tWHfdBCvLwDtQUzuiMnC+dukcv4Bs53RczkDmXK0HIq/HJ9dE84yLe0p41u0cI6dTckFpCclg2k2 QxpneDjK+N6NpoE1ZI+ewz0nqTlGG2DXTlFXNvD0ZK6nkcYGjRDMB+seMy/xBlhWJguFXMD5kRvW fugpNvDBydc9GPu69ze9G+mt+55quHLoPb2blC6Hu3n3sr29PT0/l+jmtXPuzoKjlOE7EqLswCr4 SB69oIfcVgd1j/BfHbzWtCwom4UzzyRCowjzsTdi4ClPl0Bs3AwRiqEPcSeSn3W4c0oRn+7I61+K /fSzjn79S3HiETGsUxGj/E8d/SKpctQX5Yh5uT4JSIHjB/4faDOtc/zL/DeY1zhudq6zbHQ+Yn/R mXCecHzpVKEPNJcz0+Vyupw2sxvfNuR4LAbstXab4jObPd6c7ACcbN16Nieb10tCeYKePp/T6TAF Io4nDdxk56QCkiIVkGN6Hp+QwcDpYmjQ8lfkt+ZL+Xm+/18aG3h3IO1/+mj8TR+Nw6O3c88n9In4 NXCPpypoHM0+7gOZhVilaR1FWUV5sfCapZxm/GzOyZ9+PRVxDdQA8dEtJt1Z7lRHudyjkBWjK4VM OeBXzskud+Vll7sBDt1fruZlAoKArLRIRbkklXDHDNwzXo83IywNZmCnsGAt4c4JPcPaDrxzy8F3 Jw+ouzJ55ld11181KFT7KX1m3cNTHvlp7xCla+qvb37y/X4F+VNW966kQ+/ZPNJq7FktDSu7ecKi 9ZzXfpA8IfvlMbg9L2OD9CKz3VyYbc8pHGgvLIRCzCrLHVU4qbDB3lC4xL64sHFIm339wMc9T+S8 aM8akDpZiSP5iRQ1n89+acDu7L0DDmQfHvD7rI8HmKo9FI7dMzrsUEOdGztanwEynFO0jqeD3qAv WlRYWi6XF02SJxbNNsWi15oWR2+0bbD9Bu78b6OuslIHldXi/FJvSSjTN3fg8oFsoL/YUenY4tjm SDqUbY6djlOwpm2caRzchcQlHsgZPYv7lx3CAncY+JELBqiEs/tLu30PwdNqBEOc0XOE1Nf0t5T4 JevAJrWJgMugKQpCEK2/i8Y4okO9s7p8mfMh0seFvxjIGbGBAflIt/Lu8kVHSF8QrJafYNfojv46 9/dpkSGRnRGlnEuswwE/ZSL5/m6BDOV5uj2AA1V5dzl7upyWQ0rO6FW8RW+BL684f7/hsIEFDZUG ZnAI8cC0IBE+IRfi0GoQ+6UB7mvIiDhwGIaOvKS9VsJYjqowlqG/GuA9TP8qeqKff84PHMfhRU+5 EkUJTNGVOJDxMxmMUS/3CgsmF94nsrKAm9L8XAanMH9gXEeEY3gMg3ENhs2CSe0NR3Dsd0Al8pMa KkkVC/Ys2blvQsvE4Us/XEiH1Wxce3O/uO/6I5s2vjRNNXvz9vm98w4sn1OybPGiZyP97q4b//K6 KXdOyXTYc/ILLNcPuiK20rfy3lq96QeD15w+v+6KkfTjAX51wOTiiY3XTL3iJnD0+OQJ6Si0p4v0 o3X6cxYm2wvspfZquzI8c7j/KjbLMiNzpn8hW6A0m+dnNvq7g+8pf8j4OPvzjM8zT3n/lv15v2PB ZNATDEZzKjwVObU5K4Jbg8bBLN8+2DOKDbfXshr7+MxJ/qsss+0L7Z8bvvSco2ccKs2SHFbVSXL9 VqOLWLLASr5h/HDoLFDVIy6q4uDS6Gp1yUGd+xeCwsftcnNOhTKGiHCSugycGVzwFYvcf6IqtJbL wZkAtb4WDAXkG30sp7FrlTt/P6zio8akUQ7iHmyqUTIGePNGwRXGAG/IKLjCKITAKHjdmB0onfYd ndewcvLJnj52AG+shJ2h9lQc50yBa4LKChfnAk5/0J6sDA3nlAfp3fxM7nUNc8FvdekgPrL5wNo/ rF7y3t2NDxd39Gg/X33jz7bfuuaZ9U9tPv/TbVRqm17FHOfGM/c7B3/55ofvHOBaqBZaKAAtlAWa zdS9QeLPwvGhQWkw11mbpaXKcnOz1QR/wnFhAWIBjusz+AL08/Owv/sD5Vzm2Rx5qHtU9lB/lXty TpV/untO9gx/k3tZTpN/jWFN1ll21qfis0yn3eud5mn0rMA/KPmdW9Wn4fZT5Vy/xUi62EvcRS0E XpzJ4ROELxAH9Icy/LLVq8MA+kjYDkBgr6NrIF8JogDp1s39C0vjcI7mBJHqKIiU8liv4kIdpEHP MDXfqOcXlvZRCmb1RUphIsAdnNxGXOUh9PD2OaXKvkup6OSe4zBBolE42/DjVgiOvdFo2mlc0bOy In1yTJkkqENX3kC9XFjhZcS5l7gyjSHhZqQh4Ys0SD/sKvp6z197T9HMj/6ALxcvnLC0r5u/uedD Nt02cvam216ks70/7YT/V8JnggN6P+n9VtV2di2iD60ft+h5UG8jDjkVkDh+yj2k/9A8gs9rqnmr +Wlz3NxtPmo+bTYSc9C8wtxq3pbOOmZOmi1BM66hjTLuOQ3SHRQ3njgTG4wFCpG3yU/LcblbPiYb uuXTMiOyJh9BSpb5MYALDZBzupeLC06Y0MgyzG+EmXwFUcb3AIH0Cjoh5wLsb6yrPMU0Abx/USuC 22+AAceNucrUoTvthILvKSqO3uDvjZ2dnfLfDh8+nyVHzn/Iz3R3IygTc/7LbkVMmN+rdpSNFPer HaXDU/GQoak4ryB171qQ5S11KkF8sHlUkaciOK1IQWUFzP2kgv9PIRYmFfDrXdESj/WsYcNLtxHa TU5jpYlGjpBjuL3uWwUg5/R+fBWIWAUiVoGIVSAmvgSokVoCIMk+2ye9FmSKfPla8MWIRlPLwfmH p/hvGNbg7k5+tuVz3wAX7ReQVg+9Xc9QJEMG264m1L9IX2acls5mGLDWp/UKq730ZpU+qh7xHfMl fbJmynRketx+xUgNHrvF7rA58n06J6RP6EPrAI5bM/lUcK79u+7iAmEVk7LmcdIi90xKH1oz+cSQ /pZvycAsfGdH+ix8CSCxVR82ojRppfizToEnrlvPKR1RGved9rEVvqd9cV+3T/bh7J7lEWt9FtfR WD9u/vMxiCUVjHXZkspp+/Ec19RYViaMBpn3jze6dTf6PI3FuUiiKV7hmEotIEKs6hnYldh9Ad/9 wVEB9quA1wcuc65mx92sewwus8VkMVokgxrBrpBLnRZ3LsU1aTRaeCcIQ0AqUCWLa2C+1+KoVRrh +2+Wa8Ozqz9ufGaaauksXDqx5QU58sjOmhWTS27vaWHrr19W9eA7Pfu4zq2Gzu0PKtpJNl26O0vc T2Zwm45PCfb+Cb2FY9miwG20ZNsmGCaaZhtipoWGxSZTqTrKPcoz3Fej1rprPTW+Ococ8wy1wd3g meFbpiwzL1CXuZd5Fvhuollmg2K/RpqlzLJcY7tOalaaLdfZLF6/bHT5rdbM/FyxFeYKNoDzIP1B g1FsgkYc7qAXwVHCyBIIH5VAOB0EIvQlJ0JGfkHpEPiljKpRw1Y49GguzeX5k7gKBu7IJzYHPwS6 OXcR4R0lGARwoXr59xOgp00IjrjtITqaDHIvHRmaw1UxiHqReCehiBvONlzKiHJ1XMm9j3yf5Pa/ eaYy0zxPmWeWcTQWfokMcdWDWzqhkr/rwq5+btMbf6aeW/9279Hek3vaN6xv71i3oR2f+fa//8be T3sO/e0uGqD2d95+53dvvH2QawP+S/bHN9zf9/MiU4InJZPwb2d84uvvXHz/3Y/kkyFkGBmO74Am kIn4H4Gp+B58BmrjJp0zMH4G/g/YNWNra2qujFbdsLjpusmz/hePpXQlCmVuZHN0cmVhbQplbmRv YmoKNzAgMCBvYmoKMTEyMzEKZW5kb2JqCjE1IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBl IC9UcnVlVHlwZSAvQmFzZUZvbnQgL0dSU0haRitTeW1ib2wgL0ZvbnREZXNjcmlwdG9yCjcxIDAg UiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAxNjUgL0xhc3RDaGFyIDE2 NSAvV2lkdGhzIFsKNDYwIF0gPj4KZW5kb2JqCjcxIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3Jp cHRvciAvRm9udE5hbWUgL0dSU0haRitTeW1ib2wgL0ZsYWdzIDMyIC9Gb250QkJveCBbLTE2NyAt Mjk5IDEwOTQgODI3XQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDcwMSAvRGVzY2VudCAtMjk5IC9D YXBIZWlnaHQgNjIzIC9TdGVtViAxMDMgL1hIZWlnaHQKNDY3IC9TdGVtSCAzOCAvQXZnV2lkdGgg NTcyIC9NYXhXaWR0aCAxMDQyIC9Gb250RmlsZTIgNzIgMCBSID4+CmVuZG9iago3MiAwIG9iago8 PCAvTGVuZ3RoIDczIDAgUiAvTGVuZ3RoMSAzNzA0IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ab2Xa3hUxRnH/zOz5ySRJCwXQV1Tdo3hmjRAQOQmCyYxNhZjgnQXabglIVgikQACKWVp TIFFvJSWpjSlYim1SOMKFCO1NHloBcvFC1R6oVqqFGkpWouUB0PSd/678oGn/dbHszm/eW/zzntm zjlzsmjh4kqkIgKD4JyaWbXgkbZGmpvmLFnkj+sp1YDuU1U7tyaud4uIjrnzl1XF9bQd0j5aXTmr Iq6jQ9rbqsUQ19UIaW+trlm0NK6nRaRNnr9gTsKftlV0t2bW0sT4OCm6/6FZNZXSypEeEvhrF9Qt oor0odIOrF1YmYhX4k/2AtnLcX88QvoASmSN5fDQpuFFED2ApPclVvHHmKNvfzBqRvdxH6seyQzc cmRNxAqv5J4d37n9SnNym7tZVJf5rEPyOs1XmmXMqZ3bPzmZvOqqx3rtoVuRNGRil44oB50wykMa rBBZU1YkLNFFdpJXyA7yE/IyeYn8N3mR/Ji8QP6L/Ij8J/kh+QF5nvwHeY78u9Ro8DfKZ/E+KuDg LDUrG5yh/FfyNPke+S75F/IU+Q75NnmS/CP5B/L35O/IE+RbeBQZMtpbyJRx3qTtTZE9eIPy6wla y2uUj5KHyUM4KL1+Q/lV8iB5gHyFtf+a8q/I/WQ7+UtyH/kL8mXy5+RevIR7pa69ca3rdRnfWgxa 8aLcTI60fahFxPMi9sj94NBjhEGxWYvBzzBcuBtfh5nYhV14GnkStwvTxbqLcTs5wgusNYbnZUQH MdqeRwuWiGZtRmhHaklksB4jmh3pORSLvJ19fkI+S/6YObdhjHh/RHkr7T/k6M/QsiWRbwsmSNQW 5rM1GvyA/TZjosjfl5UxaGbv73G0TZS/SzbZ+xjfwe3CjbR8m/wWM2yg95vkUxzzSXqfwGWJf5wx 6+l9jFzHNY0yZi25BgMlck3Xh3Ktq2n5BtmYuHcacYf47X1k0CAzbWe4gRENXDdrMVgl83dSPKvo WYU2yRbBSjwmNusxQjvDK/E1jBOb9RihnWFrsU+rfTq/StbLe8RG1cc1jmMtBstoWUo+Qi7hVS+W 9bf967AQBdKzLq6xp7UYPIxarv7D9NRiAVff2ox4bG0L8BD6S1/rMUJbm7UYfIV9qsm5ZCU5h5xB lpNfJqeTD2Ca1ObgAWpWNghTDpFfIqeS95NTyDKuVCnlEvJecjL5RfIespgs6vqzVHoX8xfSks9n /E7Kk8iJZJBXM4HyHeR4chw5lhxDjsadUu3tlEeRI8g8cjg5DCMkZijlXPLzZA6ZjSLxDqE8mBxE DsQAuSsduevselnZSFVWziJvRXeRM+ET3iJ3vEGAdr/sNgb9GP85WjIo30z6Jsbvg5s4Czdy7BsY 1ZfsQ16foFfmq7fsTllSR2/aeqGnPHkOenHEngmftRnKRvYzW6NXfh6p0D5d6bSkkalkN/I6MoVM JpMwUuJdHBU6tHCPEs3m1Hy27I7pkb3N3iUz5epnijWCNDwp59NyxuRskzMJSt3TuF7VDflMDnwm o/xfB8nAeRzBWKzWa+W9OxXtKFfnsFNtwDqVg7XiHSvv9p04IOco5GCm2SYxHTgmu84xPR2HRKvC MH2jtJMxRaKatdYZWIx2tRHtOl1PUDuwWTerlbIy09DPM0AiLyBkdqMGefpZlHse1I1JQJ1+BouV V95G5XqSnpyi0eS5iFFOoewRL8uKbjM1+kxSOfLVJclejT/hFEbqUZiN9Xq2VLpPHVN71An1ri7F a2q/6lBHnCL+7LdgX5x32rFH++Tdtkd0HyYYT8JfJHo/DJL67VmlNjiH1Ga5/hK5+vMYhk14Suyb nCKpYphpQo6RyuWr5AvyG2SaxJLnNIi8H0+g1DmGaaoZi90VMlfiM3vUTuSZJqdBHaDeJKP1VKfd DIz2BPQAt1x2krNOTI/XJ/AIGvRFidyNd5z1epvMR0+nWTeo2fE5wWSnFOuc9egtMxOQdrqsSD/n AkrVXp0Dr9mmtn86N86r+oxOdQtR4ZxT59UlN9fNUjudSxpoUO3uSIxXHW6e2ueOdtNlNhtkHvfV N67skl1rKAYDwSTX8RitkO33xnTW3RWx4H0h/8FwICf7GtXvTfLHUBJLW+Zv7eoqCXl8Tjjm3Bwz WckxT1bmqf/lPJWTXVwS8reqpIL8RNqCmfliLAvJCPJnzTJcQX6OfLRmF7fCLQm9oNTj4VbV1diK /IyX7IfNjHJxJ2f7/QXz8mNqpigp2WIYHBDpumx/odRRWBrKDPuj/ujdFVF/ob96VoUUxlYcldFw rpRYFponnBIKxIJh31WxMhweI3m62TzSRcKjYcnwYCKDtDTlXpGg1Oxif8z0LwndF4pF8n2xYH7Y Fwj4C2JtJaFYW74vEA5LVNrVSqXiFfNuSNScLjWnDRZ/93gWmYOgL4ZwNGpzloUyA7FINOqLynUk 9Fa0XWNQuNYQTBhaYXPITBS0qkiJJJMmM+CzhsxAZkDqDNtJ9tq5L5BKA+EczxFUmRZ59u1/Ffb/ Fch/Y66ckC+4Ty2QXWeSWDSqOjd6qpyt8j5OQt9gigeuSna0B7mHTx4eBu/xw8cPD+3VI9AjK9Aj UOVBR53xdZzu3JiUfumjhe4gm12hRb2hOzwBdEOvYLL5bUqqW4xU7/H3bP9zQ3uNuC1veJ/re7uZ t/Rvaalf/txPl9fv0JeXteyor2+RMuXGtkfnDnkK/9th/avpULJ/xa/IlT0Cd5WWFU0rHFK2rGb2 gvn4DzjcIIkKZW5kc3RyZWFtCmVuZG9iago3MyAwIG9iagoyMDU1CmVuZG9iagoxMSAwIG9iago8 PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9BT0VBUkcrTHVjaWRh R3JhbmRlIC9Gb250RGVzY3JpcHRvcgo3NCAwIFIgL1RvVW5pY29kZSA3NSAwIFIgL0ZpcnN0Q2hh ciAzMyAvTGFzdENoYXIgMzMgL1dpZHRocyBbIDAgXSA+PgplbmRvYmoKNzUgMCBvYmoKPDwgL0xl bmd0aCA3NiAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZDBbsMgDIbvPIWP 3aEi6RkhTZ0q5bB2WtYHIOBESAsghxzy9jMs7aQh+cD/+zM/lufurQs+g/ygaHvMMPrgCJe4kkUY cPJBtCdw3ub9VjU7myQkw/22ZJy7MEZQSgDIT0aWTBscXl0c8KVoN3JIPkxwuJ/7qvRrSt84Y8jQ CK3B4cjj3k26mhlBVvTYOfZ93o5M/XV8bQmBEzHR/kay0eGSjEUyYUKhmkary0ULDO6ftQPDuHee Wq1KNXxq/8MpaPniM5JdiThN3UMNWgL4gM9VpZjKg7V+AG2acBAKZW5kc3RyZWFtCmVuZG9iago3 NiAwIG9iagoyMjMKZW5kb2JqCjc0IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9u dE5hbWUgL0FPRUFSRytMdWNpZGFHcmFuZGUgL0ZsYWdzIDQgL0ZvbnRCQm94ClstMTA2NyAtNzM3 IDE2NDEgMTE2Ml0gL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5NjcgL0Rlc2NlbnQgLTIxMSAvQ2Fw SGVpZ2h0CjcyMyAvU3RlbVYgMTAzIC9YSGVpZ2h0IDUzMCAvU3RlbUggNzcgL0F2Z1dpZHRoIC00 OTAgL01heFdpZHRoIDE2NDAgL0ZvbnRGaWxlMgo3NyAwIFIgPj4KZW5kb2JqCjc3IDAgb2JqCjw8 IC9MZW5ndGggNzggMCBSIC9MZW5ndGgxIDg5MjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngBvVoLeFRFlj5Vt/PuTnceHZI0JLdpAsgNhIePBFvoPDoKEWxC0G5Q6IYOBBSIhDdIWjQQ G3yAD+ZTR3Fndr59jHLTiWNnFZPVxU92xx1kfc3qAur4+HZlh3Ed8Ztx6f3r3tsNyWT82E93b+fU X3VOnVOnTp2qe293Nm7Y1EoWipBEvsWh9pWkXWNVQOWKtaF2ve38Fli6YvNGWW/nZhKl/2Jl+6q1 ertwkMgyY9Ud25L6op+nrTUU1uUk9K9uA0NvsyuB49rWbtyqt51fATPvWL/CkI8tRjt9bWirMT59 gLa8LrS2Ve8/ths4sX19x0ajHdTaG1qN/sxPZD5CDFxOW8hKN1EGWjaaSjuI0s5YZmC+TJOns/RH 45Yvl1ndv2cOTAtXX+erLwk8fsp+7vzmPzgszqx5aGZp/YUAdjNeuuDDnMvObz5fb3GmJEIqLh6n O5U4rQLdBlqo1OaC2Ug2EKdO3kCMz+Zu6Cl8FnfHmPLbF/l1YF6HRmE5HYXMBuJsL+uOlZZ74uy+ XltRDdXmsm6ygTi7h3XBlsLuNXAP64pxJfIi64TZ02ynZyU7faZo1Oi33kaxY2eRw7qjfEfVDmnH zpI3T4K1eQuKte0o7liP4vZ1RY5l6zpv57ev69xQunFToX30qjUoVq5G0dpW6Hiw9XDriVapta3r ztKSjqLt9SXObSDeLzVLczGy7ajUSD4QJ49UE8vJrelPDErVsVyj0ptlrvHV5kiTiUlTpWlYAYV/ xf+LMoEfx17mSpx/0PtyGHPl7/dOm1kjMOaaIKygUlioVX4dm1FjVCZNMSpOl1EZVWJUcvO0yolY Hio8wrcK92oVvpF8II7Q3obabajl8BvJAbodJKHVhFYTcT6Tm6iIynk1MB84nU8TweZTDawCloE/ hU+LlZXLcUB+UU0/O88+jklKdq3MviLGfsv+U2ixswZ+YeB/GPg5+0yEgX0KNAE/AaJ/4h/Zx705 cL12DBiMNqPcI0TsEXZQM/iwgQfZQ5QOxQPADOCDQDHgA+whTHlgAE1G7SgjQsBuiR00KXG2MHZA wE2xQwKu7u2UFCRYTSy/uKY2i41jFZpTNpanoclz7bcI3ze+b7jn09LSmsefkJQnnzApTxzKVh6G vQMH05WDsPQo6EeHuPLYIUk5fIg9fejIoYFD0kvSDdIcMTlpTqyLKyIl6ntteTXlL0vYBHRGlNJV 0pWImlybL82gqSAPyAcySTOkQuGENN3AKqkQPasG0MQuRPbIIM7PxY6mI38+ig1kiiH4h7FRE7UU +DCGXIjzM7G92ZCf7h0wYar83V5Xhcivd2N2LBr6n4zBpVoLf40fE/Hkr/BBDf/ewP3C95f4Zr5F TIVvMabC79SnwjeIqWilhweTRoOx7BzN+rLYqGKtsjQ27gqtsljTqy3kSzRFUVr5XJRFfA6NB3HK 4pOpBMThnhLLs2t6V/Ra8mqQbS6RbUf5WC6L5eZOLsdMynHYk3GGlKEUm6tcl7Kv2a+0hTzDnieZ nOw0ez423inH2elYmbOmtpT9G/tAy5r3DfxXA39t4HvsXc3Au+wdrd877C1klzqAJmNvs7c05r9o zNW1Oewk5tEvSnbSkL2pyTDiiRgOgX7k969EfisD7Cf0U1AfSEqcYT+LFdixDOx+tl8bcJ+BUaBI 65tje3BMsEWxiARoie1JAzTH9gpYEOsW4It1C9n8WJeAG8VCxVl1bK+AabEBwRyrM3M9ORD+4Y8m 5Y+iU2LQk/17kZhfszNfM9HM6rGPrvF8gpQXrSlHLNYaeOrp8/UF+9r7In2DfSf6zvSd68vqOxIu //wzk3JfNEOJ7ktX9oOg8sIDU6fXPHA/hoR64f1lrpr793FlX1emsvtuk3K3mENisDcyd56w3xuZ Xa/jlTU6TpyijWuOjHHVRHZxpXOXZtVjvss7p+YuNHbBkjAtd8N0N2a4F4w9XenKPfdmK/cC27si XXygi9VmSwulFsqVfNIClPOlm0QZk8LltYukG6V5ZJUc0mhpDJklq2ST8oBmySLlAicAryCL5ITc BSyDXAZOILfkBJWBHCAryExu/ix/jh8hM3+G/wX/CfAp/jQ/DOwHvkgW3gv580AV8hiwHzq9IFXo gp4BPQW6m++mXL6Ld6Lcye8SpebvJr6d78BesfE8ng+7Fp7LrUDGOZfIzC6wBMe9Hyd5Hj0B4qIv znobPQ0aAJ0GpeHkttBsUCdIonJ2AfumBLoO+FQAm3ZgCfwoANlAFlA6iJEbfd3sKHuZDWC8HhZj vcDn2BGmAo8D/4ks7FXIjwEHIX8FeBw6r4IGhS6oB/QcaC1bx9ZDL8SWsxXApWwZC2rtlbFR5eW1 dWwlzQZ1giS2DdIdsNYBrU3AdmhtAG6DpQ5Qu7AIWgkKgZaCKtlksrLxbALKiewKymWTmIKymJWA k88KUBYyOzhFbBTKNJaOkjMJJbawKD1/hVS5kLA6rrEXX223X2XPv9JunWE3T7dnTbOnT7VLVXaa Yh8/IXfiBOskJbdSsY515Y5zWcvKc+Vyq9WWZ87KzjGnZ2SaJVOaGZE2k+QpKHWRVFCeLo0uL7fO tnZaJVli5dJN0oCUkEwONsZSnFFqsdtGWfJNhZaHHKzSPck90T3ePc491i27y9wOd7Hb7s53W91Z 7nS35Ca3bwZT85uoqaVOLWDAhXXqDKUpLsnN6nSlSc3yLfH3MPZAAFyVd8cZtaim7jgH5NcvXuKP sxIh7nL0i3mrTcGu+wM9nOpU1q26FvoFeBb4Vbk7bqMWfw9ndYFAQL2myYc61QWUMWq4Cd0iYwLq dFF5aEyAmtSZC1SHq04ZfnUIRsdGDS7KeiaO96qTvCG10htsuMhWFEIDDnvVC95QnHHXEGGy4zBj STawA5fRjPOd3jjfDjN818hmUnpxab43Lt2IrpJPdN3YwVKyESodG8FkWjlcqg2+cRMcGSIBA1cH wiBURTw0uKTQ3O7QBXSpmFKWktwkXjLIJdM2bAqtDoXV+x0BRVGLVReSJKlgWBTA4myn7F3TEGd3 6bBLh04dIjrcrcNuHe7R4V4dunTYo8NeHbp1uE+AMTM8lVyrcblbh+t0mKXDbB08OtTqUKdDvQ4N Onh1aNThegGIG+bW0ZMlst/XXNekZjaDfEvUUhcar6NxNRpmVx2lK1SCN6PXqSJZ6i8yemmaReKN jBLva+XnyfqFTQmtTnThPcH7Ppd49xJk+j5GhO4xwoGauDZxIPEVDVAbFSZqEz9KfDGi2d2JXXSa TtJx6qNn6Qk6hfoxepn66W/pY9RfQ+1ZepSWQ/un9GPqAv4NPUOP0AbwBQrOsT+1zSYO4Z2n83SI 1dJc4PDrEVh5ZDjzz7Y/TZSOIDuVGEs7aSffxH9Dm/B5HBZ/Tocv6bka9b+kDrz/HmNnaTl7iVZi Pt0Upge5L/HvacepSNqKV571psMiE4Zcj5GftlFYejLxO+SJNcOHm+qRxO/Eu/SQ67v6rcfYyauf 9rNs2oW4TcOb+eNUlxQMRcTwPOawAnPZjc8hrEYvPjsx7oFLe6Y3iFbS70zSszWZR2niuwZcic9A W7XqMRFvI2M/pM0YwU2T8TpnTZQjb25ItCa2JX6cOIpsEKv/MyMrBtD6azrADsGD5XQr3cx/iRc7 0VqP9s00l41hFnoKtq/SRkkVxq6SdIbIcXEl/TMZUTT2FrzUr8S1yRo7iBvzeXqdXqW45s+TdJCi FEEcNiK/F5MPvs/E1xJ6v0+0HBaeX+yzlFqQe7iQg7Mwn1NJ2wLT3tb2vvHdzZ/4J/b+MekVXUdE Ub8uJCtEb2Al9d3QjWhsQjxWYGXPa7tHrN8xrNozyLWk7OaU9DVtbUX/WTRdeJGYmdiF2P8z3ULr eS8eWO6BXvfFoVK1n4ObzORiOsVmpSRDK98n73diDx2jx4YY7KLbqHUIZ1hjePyGiUdopp3Fo+Mj WLVfYLwd+OwcoVM/8vsY4rSdFlAt7cU6nsL+aMMeDiPiJ5mM9XkTp9hIVwh2T2BV1ksrJWOVR+qG DBGfEa60szozk5gJmZ/K3WRXPXeTrSE4K02i91g+8uNheg858Sy9gLNkleAii/Xrf7dGu2kdTTI+ 5PE0z7nBfe3Mmuprrr7qyhnTp02tmjK5Upl0xcQJ4yvGucY65fKyMaMdpSXFo4rshQX5eTZrrsWc k52VmZGeZpLwPF/JitXier93jVpSH8S9sMFlk1Xz/HPzqlTKdzhdefKMqsBko5eapqhU0KQW4pmP PNUBNV0Z3mW+KlXYvnRCeZ5D9qqmCvy55obC6sRmv9Nle8eRkgdgVi2t9zudDpVX4G8ORPibG5LD qs0HPgQaZ45KPr+geOKjajCp2hlA2exXy5JNPIqO4GQ/dtTgMDfns6itx1xS36BSYQ+ZP1LJLrqd qya8hKkT8WhcYUNNs0ZVKiv8UmUFKrPPw5SGDiHUzlSPEANveI3LG16NiIaDF2N6To+oU47K0WZ/ 3gyH06k5jSeRBf6enOx6V31rNmaBh2YwqCc7B5wcwcCytPcw8yymVbjZOxNP3JkWhC9fuOsVtEb1 7Aui4mpA3CApuCjBS/L+S0UENb0ToZtWY9qYanq9mqE7Ia9WPSGV9sk9lYPR/XjiXx5UzGFXOHSr X5VCcKqHpApvW4s6usm3GCw4AQq2yWK5G7RCLJ7sbZOjaIu+QZSuBqgO5YfbWoMiTVjQ1QBZVr1/ r3PQgVcS/16vmqeoFqhbtv/GIUW9xatl0YxG98rqYbyKXCJ1ij5IguLJlXLU68JoMOZdUydWrCq1 bFo2zglri+PZF5LVyPI1iBn+QvuT+e+M2lTz106sDtYHmmJ3iAALCgfXiKmsgaYJIEf3tWpT3a9N DfkqHjsFCUVkPy2C9mK/t83lRTyNAREQ6EsVw3WdTrVEEYrRqFe4GArDexEZ/JXgYR1u6A3sCYfC 4E+96mnRgFq0NcCInlBDwGAZHSAxYR1UT7AhEBCT0hdAzajYmzbFJUeF0YwKtVCxOf8BssHJlU3N fm+DyE705PX+684WO86ijhe9JJsVo0+06qwIkpAsdDUt0LOgTcRHFMEWfQMjasbKo6vRX7P6RrHj Deg2uhqD0WijS26MBqOheCKy3CXbXNEeszna7g3K2s5n4P/dPofauD+g2oJtbCYWWeRbI57gCxYs EcvTKLeFwMHfbJez2uHMg2m9D06OkcXGPkPGI+/FPovavsCMzTiRHHKjOF7iOBUcqq1abFN4ssiP fbACQ3jDWoH9gddc7hA7RQpUeFcvNALkcGJILWHEubfA4MKI0yn20L64h5ajoUYW+PW2TMsdMfJU KVi7oJAMJiX2RUISSUpS6kEX1qpYvGZrOfHnchrneSqfo3mufLlGHObwDn9zwupgC+b4TbWaiYhp y11Q75ccXHRBjTskUctWcEtwq6MUTVHEBKdk1OaST7hUm6Km1fsHHe6AbMvDAclSyWBYFGlqO+E6 zsQhSoU2lblVViS2FeFQRRhx6I+qhjClKHujQSP7Lp0fuore4bbUPtJngY0rJokw2FzYtw49Hnn5 LjHVX4ps129walpFo9hUWBstYnMDaq642am5X2gFJueo98s4hrBtF2gV2Su3iVVX5WCDdh4EHEKe ZMcTZ4IN4vzzI9HQxWHkN7IcYTP2hBGGphZ/stbsv8uxPTAZv4pVNsUpC3dS8Z1MnCW64tQwph+/ s0nLlkLcUinL3tUNGBCNRZVgTHKidnMlclOkvt8VEHeSOeGoLJI/jGlpCEFrNFCFfF3ox3mJr2qc qifgSFVbA4GZsHOLsAMVdI8GYGGNYQGosar+G538lU04qcb7/DhsIw1I9AaxhTHdQeyqQTFjMZFA ylN4fNfqYsPnxfA5MAnyJboV5GoEJgLRqLC50O9CmkejjijmYbTxDc9whsdgxEmoYOLeOIv4oAtw ac8HXpfTJSIfaMBQtyLuyVMKvz1+d4SXpvyG5jJ4u1SLcPAHinDociK8/LIivCLl6ZAIh+HzChHh 1pEjrPLx3xHjS0Pq0UPqGSGkK4eEdNV3h7Qt5Si8Wg332rSQrvmBQnr75YT0jssK6dqUp0NCug4+ rxUhXT9ySP8vkrZ9SITv/O4Ib0j5DSc74O0GLcIbf6AIb7qcCG++rAhvSXk6JMJb4fMWEeFt/38R 3n5JhPHDJjNevFDRq2YwzWCK/2RICmWSwcEbEr4hwAc/k2RQ4Qvp3ESCqt546w2tmDbVmefMq0DB 8F74rUeKfBtJoz+SxxSBJn6A0a5ENd5TR7qEXB+R4Yd2vZZOBUS1N3lrm69Xbty0YnU4dP2G0Lqw 9tqt9xCWbKDRCeMSjFTd6PM/WQiBoQplbmRzdHJlYW0KZW5kb2JqCjc4IDAgb2JqCjQ3NDkKZW5k b2JqCjc5IDAgb2JqCihNaWNyb3NvZnQgV29yZCAtIGRyYWZ0LWJvdWNhZGFpci1wY3AtbmF0NjQt cHJlZml4NjQtb3B0aW9uLTAyLXJlcGVubm8uZG9jeCkKZW5kb2JqCjgwIDAgb2JqCihNYWMgT1Mg WCAxMC43LjUgUXVhcnR6IFBERkNvbnRleHQpCmVuZG9iago4MSAwIG9iagoocmVwZW5ubykKZW5k b2JqCjgyIDAgb2JqCihXb3JkKQplbmRvYmoKODMgMCBvYmoKKEQ6MjAxMjExMDUxMDQwMTdaMDAn MDAnKQplbmRvYmoKODQgMCBvYmoKKCkKZW5kb2JqCjg1IDAgb2JqClsgXQplbmRvYmoKMSAwIG9i ago8PCAvVGl0bGUgNzkgMCBSIC9BdXRob3IgODEgMCBSIC9Qcm9kdWNlciA4MCAwIFIgL0NyZWF0 b3IgODIgMCBSIC9DcmVhdGlvbkRhdGUKODMgMCBSIC9Nb2REYXRlIDgzIDAgUiAvS2V5d29yZHMg ODQgMCBSIC9BQVBMOktleXdvcmRzIDg1IDAgUiA+PgplbmRvYmoKeHJlZgowIDg2CjAwMDAwMDAw MDAgNjU1MzUgZiAKMDAwMDEzNDM0MyAwMDAwMCBuIAowMDAwMDA3NjAyIDAwMDAwIG4gCjAwMDAw NjA0NDYgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDA3NTgyIDAwMDAwIG4gCjAw MDAwMDc3MDYgMDAwMDAgbiAKMDAwMDAxMDYxMCAwMDAwMCBuIAowMDAwMDYwNzk1IDAwMDAwIG4g CjAwMDAxMTM5MDQgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMTI4NDY4IDAwMDAw IG4gCjAwMDAwODk5NzUgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDk4MDUxIDAw MDAwIG4gCjAwMDAxMjU4ODEgMDAwMDAgbiAKMDAwMDAwNzg3NCAwMDAwMCBuIAowMDAwMDEwNTg5 IDAwMDAwIG4gCjAwMDAwMTQ4MTQgMDAwMDAgbiAKMDAwMDAxMDY0NiAwMDAwMCBuIAowMDAwMDE0 NzkzIDAwMDAwIG4gCjAwMDAwMTQ5MjEgMDAwMDAgbiAKMDAwMDAyMjc2NSAwMDAwMCBuIAowMDAw MDE1MDIxIDAwMDAwIG4gCjAwMDAwMjI3NDQgMDAwMDAgbiAKMDAwMDAyMjg3MiAwMDAwMCBuIAow MDAwMDI5ODg1IDAwMDAwIG4gCjAwMDAwMjMwMjcgMDAwMDAgbiAKMDAwMDAyOTg2NCAwMDAwMCBu IAowMDAwMDI5OTkyIDAwMDAwIG4gCjAwMDAwNDA1MDcgMDAwMDAgbiAKMDAwMDAzMDE0NyAwMDAw MCBuIAowMDAwMDQwNDg1IDAwMDAwIG4gCjAwMDAwNDA2MTQgMDAwMDAgbiAKMDAwMDA0NTE0NyAw MDAwMCBuIAowMDAwMDQwNzY5IDAwMDAwIG4gCjAwMDAwNDUxMjYgMDAwMDAgbiAKMDAwMDA0NTI1 NCAwMDAwMCBuIAowMDAwMDQ4NTYxIDAwMDAwIG4gCjAwMDAwNDUzNTQgMDAwMDAgbiAKMDAwMDA0 ODU0MCAwMDAwMCBuIAowMDAwMDQ4NjY4IDAwMDAwIG4gCjAwMDAwNTM5NDEgMDAwMDAgbiAKMDAw MDA0ODc2OCAwMDAwMCBuIAowMDAwMDUzOTIwIDAwMDAwIG4gCjAwMDAwNTQwNDggMDAwMDAgbiAK MDAwMDA1ODI0NCAwMDAwMCBuIAowMDAwMDYwNTY5IDAwMDAwIG4gCjAwMDAwNTQyMDMgMDAwMDAg biAKMDAwMDA1ODIyMyAwMDAwMCBuIAowMDAwMDU4MzUyIDAwMDAwIG4gCjAwMDAwNjAyMzggMDAw MDAgbiAKMDAwMDA1ODQ1MiAwMDAwMCBuIAowMDAwMDYwMjE3IDAwMDAwIG4gCjAwMDAwNjAzNDYg MDAwMDAgbiAKMDAwMDA2MDY1MiAwMDAwMCBuIAowMDAwMDYwNzQ0IDAwMDAwIG4gCjAwMDAwNjEz MjkgMDAwMDAgbiAKMDAwMDA2MTU3MSAwMDAwMCBuIAowMDAwMDg5OTUzIDAwMDAwIG4gCjAwMDAw OTAzNjMgMDAwMDAgbiAKMDAwMDA5MDYyNSAwMDAwMCBuIAowMDAwMDk4MDMwIDAwMDAwIG4gCjAw MDAwOTkwNTkgMDAwMDAgbiAKMDAwMDA5ODQxMCAwMDAwMCBuIAowMDAwMDk5MDM5IDAwMDAwIG4g CjAwMDAwOTkyOTcgMDAwMDAgbiAKMDAwMDExMzg4MiAwMDAwMCBuIAowMDAwMTE0Mjc3IDAwMDAw IG4gCjAwMDAxMTQ1MzcgMDAwMDAgbiAKMDAwMDEyNTg1OSAwMDAwMCBuIAowMDAwMTI2MDU1IDAw MDAwIG4gCjAwMDAxMjYzMDIgMDAwMDAgbiAKMDAwMDEyODQ0NyAwMDAwMCBuIAowMDAwMTI4OTUz IDAwMDAwIG4gCjAwMDAxMjg2MzQgMDAwMDAgbiAKMDAwMDEyODkzMyAwMDAwMCBuIAowMDAwMTI5 MjA4IDAwMDAwIG4gCjAwMDAxMzQwNDcgMDAwMDAgbiAKMDAwMDEzNDA2OCAwMDAwMCBuIAowMDAw MTM0MTYxIDAwMDAwIG4gCjAwMDAxMzQyMTMgMDAwMDAgbiAKMDAwMDEzNDIzOSAwMDAwMCBuIAow MDAwMTM0MjYyIDAwMDAwIG4gCjAwMDAxMzQzMDQgMDAwMDAgbiAKMDAwMDEzNDMyMyAwMDAwMCBu IAp0cmFpbGVyCjw8IC9TaXplIDg2IC9Sb290IDU2IDAgUiAvSW5mbyAxIDAgUiAvSUQgWyA8Njhi OGE2NjRkYWQxYjIyZTZhMGQzYmVmMzZhMzYyZGE+Cjw2OGI4YTY2NGRhZDFiMjJlNmEwZDNiZWYz NmEzNjJkYT4gXSA+PgpzdGFydHhyZWYKMTM0NTAyCiUlRU9GCg== --_004_45A697A8FFD7CF48BCF2BE7E106F0604136786xmbrcdx04ciscocom_-- From repenno@cisco.com Mon Nov 5 02:56:42 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07D5B21F8542 for ; Mon, 5 Nov 2012 02:56:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.199 X-Spam-Level: X-Spam-Status: No, score=-10.199 tagged_above=-999 required=5 tests=[AWL=-0.200, BAYES_00=-2.599, J_CHICKENPOX_24=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u2NTX9guxcHM for ; Mon, 5 Nov 2012 02:56:41 -0800 (PST) Received: from rcdn-iport-7.cisco.com (rcdn-iport-7.cisco.com [173.37.86.78]) by ietfa.amsl.com (Postfix) with ESMTP id C282421F8533 for ; Mon, 5 Nov 2012 02:56:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6854; q=dns/txt; s=iport; t=1352112984; x=1353322584; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=F59Cmhj4B6NZmaAFA30kR2/nCzAvk/wZq8MLk78VCi0=; b=MFgun+p6+oJJEjfi8HG6z8mxhUu6K+kcc7nFQhfFG7kRS63jZIIwTEMK +o62oekNRwAM4CDdmxWDylvhYZU008LCLjhFcHD0zW0/JT+vwJ9LuYMxw bEBbpJ/mD4FUydA4u6CXKwQUxt5dbVpFbPsAdHCCGG76WVwodyXq0/EKA g=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAOial1CtJV2Z/2dsb2JhbABEw0KBCIIeAQEBBAEBAQ8BFBM0HQEIGAoUCS4LFBEBAQQBEggah2gLmiifPwSMHIVAYQOkVIFrgm+CGQ X-IronPort-AV: E=Sophos;i="4.80,714,1344211200"; d="scan'208";a="138822204" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-7.cisco.com with ESMTP; 05 Nov 2012 10:56:24 +0000 Received: from xhc-rcd-x10.cisco.com (xhc-rcd-x10.cisco.com [173.37.183.84]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qA5AuO3k026176 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 5 Nov 2012 10:56:24 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x10.cisco.com ([173.37.183.84]) with mapi id 14.02.0318.001; Mon, 5 Nov 2012 04:56:23 -0600 From: "Reinaldo Penno (repenno)" To: "Markus.Isomaki@nokia.com" , "dthaler@microsoft.com" , "pcp@ietf.org" , "draft-reddy-pcp-optimize-keepalives@tools.ietf.org" Thread-Topic: [pcp] Comments on draft-reddy-pcp-optimize-keepalives-00 Thread-Index: Ac26ICGtepI7C2jMS3WSr/1EfDkumAA0bIyAABavwQA= Date: Mon, 5 Nov 2012 10:56:22 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F06041367B1@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.64.238] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19340.004 x-tm-as-result: No--61.466700-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [pcp] Comments on draft-reddy-pcp-optimize-keepalives-00 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 10:56:42 -0000 Hello, Comments inline... On 11/4/12 9:16 PM, "Markus.Isomaki@nokia.com" wrote: >Hi Dave, > >Thanks for your review. See comments inline. > >Dave Thaler [mailto:dthaler@microsoft.com] wrote: >> >>1) The document is nominally about optimizing keepalives to conserve >>power, and Section 3.3 is the core section about keepalive optimization. >>However, >>that section doesn't actually say anything that would result in any >>optimization. > >True. The current version misses this explanation. And I agree it should >be pretty much the crux of the draft. > >>It basically just says you can send PCP messages instead of application >>layer >>messages, but just changing the packet format doesn't save power. The >>main >>issues that it needs to discuss are as follows: >>* Simply using PCP instead of an app-layer message doesn't optimize for >>power. >>Power is optimized if keepalive messages (whether PCP or app-layer) are >>sent >>less often >>* App-layer keepalive messages typically still need to be sent to keep >>server >>state alive >>* Sending PCP messages less frequently than the application needs to keep >>the server state alive isn't useful, since the keepalives to refresh >>server state >>will refresh middlebox mappings. >>* Thus using PCP only optimizes power if the PCP message interval is >>strictly >>longer than what the app would normally use the keep middlebox state >>alive, >>and strictly shorter than the server state refresh interval. >>* Since PCP is not ubiquitously deployed in every middlebox already >>(obviously) an app has to have its own app-layer algorithm regardless. >>And to >>optimize power, some apps already do their own dynamic detection >>algorithm >>(e.g., [RFC4380] >>section 5.2.7 has one such algorithm, and undoubtedly there are others). >>Where >>power is important (where isn't it? :) such algorithms are what all apps >>probably ought to be doing anyway. >>* With such an algorithm, using PCP for keepalive interval detection only >>provides benefit when a middlebox gives a longer mapping timeout as a >>result >>of using PCP than connections without PCP. >> >>Since we want PCP to be successful [RFC5218] for keepalive optimization, >>I >>believe it follows that we need to strongly encourage middleboxes to >>grant a >>noticeably longer timeout when refreshed with PCP messages than when >>refreshed with >>data packets. But I'm not sure such a requirement/recommendation is in >>any >>document (maybe it is, but I didn't see it from a quick glance). >> >>(Of course this might also beg the question of what happens if every >>connection Then uses PCP, does that cause any problems?) >> >>Separately, there is a potential argument that using PCP can help an >>app's >>keepalive interval detection algorithm converge more quickly, but that's >>usually a startup-time thing and not a steady-state thing and so any >>power >>savings due to faster convergence may be negligible. >> > >I agree with the above. In most cases the application will need to send >some kind of end-to-end heartbeat anyway. What we need is a way to set >the NAT/FW timers long enough so that no *additional* keep-alives would >be needed just for their sake. > >I admit it is not entirely clear to me how PCP can or should be best used >for this purpose. If I've understood correctly PCP actually can't be used >to tell the NAT "keep this binding as long as you see any traffic on it >at least every N seconds", i.e., control the implicit mapping timeout. Interesting, please see below. >It can only tell the NAT "keep this binding for the next N seconds". Is >this correct? If so, the best approach is probably to set the binding >lifetime as long as possible via PCP so that the PCP refreshes would be >as infrequent as possible, and set the application heartbeat timeout to >maximum value. A further optimization is to send the PCP refresh and the >app timeout at the same time when appropriate. In the case of PCP PEER if the client misses a refresh, the NAT reverts back to its normal operation and outbound packets would trigger a refresh "If a PEER-created or PEER-managed mapping is not renewed using PEER, then it reverts to the NAT's usual behavior for implicit mappings, e.g., continued outbound traffic keeps the mapping alive, as per the NAT or firewall device's existing policy." Is that what you need? >=20 > >If the PCP binding lifetime were for example 4 hours, and app heartbeats >would be sent once an hour, the message sequence would thus be: >--> app connection setup (t=3D0) >--> PCP PEER (t=3D0) >--> app heartbeat (t=3D1h) >--> app heartbeat (t=3D2h) >--> app heartbeat (t=3D3h) >--> PCP PEER + app heartbeat (t=3D4h) > >Without PCP the app would have to send heartbeats (or other types of >keep-alives) as frequently as needed by the NAT, most likely more often. >And even if the NAT would have a default binding lifetime of >1 hour, it >might be hard for the app to *reliably* detect this. > >>2) The document does not explain how to detect firewalls. Indeed it >>says that >>"Firewalls can not be detected this way" and then goes on to say what >>would >>happen >>if the app determines that "all NATs and Firewalls on its path support >>PCP". >>The >>obvious problem is that if there's no way to know whether all firewalls >>on the >>path support PCP, then you cannot use this draft. >> > >Yes, this would be major showstopper. My co-authors have some ideas how >we could solve it, I believe. > >>3) Section 4.2 discusses HTTP and websockets. Such protocols are used >>for >>persistent connections because they go through HTTP proxies. However >>the >>section only discusses NATs, without any mention of HTTP proxies (or >>firewalls, for that matter). I believe it needs to discuss having HTTP >>proxies be >>PCP servers, and how the client then uses PCP in that case. >> > >Proxies also complicate the detection of PCP-unaware NATs, as we can't >ask the proxy which source IP:port it sees on the TCP connection in the >same way as we can do with an HTTP server. > >>Note that since hosts do have ways to discover and/or be configured with >>proxy addresses, this would be another potential PCP server discovery >>mechanism >>besides DHCP and default router list. Should proxy addresses be used >>when >>DHCP and the default router don't respond to PCP? >> > >Interesting. I haven't thought that we could use PCP to set the HTTP >proxy TCP connection lifetimes. Would the PCP semantics be compatible >with what is needed for that usage? > >>-Dave >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp From alper.yegin@yegin.org Mon Nov 5 03:12:55 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1774621F8585 for ; Mon, 5 Nov 2012 03:12:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.37 X-Spam-Level: X-Spam-Status: No, score=-102.37 tagged_above=-999 required=5 tests=[AWL=0.228, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92AceQuZadmh for ; Mon, 5 Nov 2012 03:12:54 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 5263121F855C for ; Mon, 5 Nov 2012 03:12:54 -0800 (PST) Received: from [192.168.2.4] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0LzsTb-1THFku1dDv-014eMA; Mon, 05 Nov 2012 06:12:53 -0500 From: Alper Yegin Content-Type: multipart/alternative; boundary="Apple-Mail=_6803E23E-6678-44A5-AB5C-5A142B95EFA4" Date: Mon, 5 Nov 2012 13:12:37 +0200 Message-Id: To: pcp@ietf.org Mime-Version: 1.0 (Apple Message framework v1278) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:ongHqPR97T2QUyWD5JeSn+eSI9YxSZYSFYI2KUOf1Vr 2q35Uz7pvZtAumq1hJGFdXycCTTHC7kaoSO6UF7j8vCDt76V6B xCdRJAJDM6ZpWFF66ACzYOdo5LxSHi8/+5tTvWjINFotFD/UUJ Mw2zRx00ZgRDjj/3Px8paL7lM/9VDNkO/Pi2Re3N4vZtXAgyqi cAJFWIaSrrDXwN4cOayE/TNN9LMtN+xcRO2QQh++xrB0wuJg+g CnhnoD9n01dX7U+U97YTbyl/i6WUu3oSJtOwMVRLq8v1KB1FQD jfEBJmVL+jWX+xY/1eEqRCAQSVUk4ChRiH1q3rakRIew+p9Qj4 U2BitD66GhVBgZeSI+fvmcr4jAwSNd1quIXl2TZbT8zycDOPhp CFu5q3JXwRATQ== Subject: [pcp] issue#60: Loosely coupled vs. tightly coupled authentication X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 11:12:55 -0000 --Apple-Mail=_6803E23E-6678-44A5-AB5C-5A142B95EFA4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Let me summarize my thoughts on each of these outstanding issues=85. First of all, the issue description has lot of problems. See further = below for more specifics=85=20 Nevertheless, here's what I can say about the essence of this = discussion: - EAP session lifetime, EAP session keys lifetime, hence PCP SA = (security association) lifetime are all driven by the AAA server. - The state created by the execution of PCP (i.e., NAT mappings, = firewall rules) may have a lifetime different than the PCP SA lifetime. = Such state's lifetime may be initially set to PCP SA lifetime (and may = be not). Their lifetime may be extended or cut-down by actors other than = PCP, without any coordination with the PCP SA lifetime. These are all = scenario specific. I think all we can really say is, anything is = possible.=20 Coming back to the flaws in the issue description: Loosely coupled:=20 =96 Authentication needed only at the time of a request, to = create/modify a mapping.=20 Alper> Authentication of the end-point (the ID that gets authenticated = via EAP) is what this text must be referring to. Alper> There's also the "origin authentication for PCP packets (+ = integrity and replay protection).=20 Alper> Gotta be specific about which authentication we are talking = about. Alper> Since PCP server can be sending unsolicited messages updating the = PCP client, that also needs to be taken into account. =96 Authorization done separately, using the same mechanism as in = non-authenticated PCP=20 =95 Mappings are removed when authorization is revoked=20 Alper> I have no idea what these two lines really mean.=20 =96 Mapping lifetime is not tied to authentication lifetime Alper> Good, this makes sense as the definition of "loosely coupled".=20 Tightly coupled:=20 =96 Authentication and authorization are performed using the same = mechanism, or there is a link between them=20 Alper> There's always. There's a corner case where AAA server = authenticates the user, and the PCP server has a database mapping user = IDs to authorization parameters. That way you can say AAA authenticates = the user, PCP server authorizes the user. But that's such a corner case. = Typically, user IDs (with credentials to authenticate) and the mapping = to authorization parameters are maintained by the AAA server (remember = the second A in that acronym). =96 Mapping lifetime is tied to authentication lifetime =95 Mappings are removed when keys expire OR authorization is revoke Alper --Apple-Mail=_6803E23E-6678-44A5-AB5C-5A142B95EFA4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Let = me summarize my thoughts on each of these outstanding = issues=85.


First of all, the issue = description has lot of problems. See further below for more = specifics=85 
Nevertheless, here's what I can say about = the essence of this discussion:

- EAP session = lifetime, EAP session keys lifetime, hence PCP SA (security association) = lifetime are all driven by the AAA server.
- The state created = by the execution of PCP (i.e., NAT mappings, firewall rules) may have a = lifetime different than the PCP SA lifetime. Such state's lifetime may = be initially set to PCP SA lifetime (and may be not). Their lifetime may = be extended or cut-down by actors other than PCP, without any = coordination with the PCP SA lifetime. These are all scenario specific. = I think all we can really say is, anything is = possible. 



Coming back to the flaws in the issue = description:

Loosely coupled: 

=96 = Authentication needed only at the time of a request, to create/modify a = mapping. 

Alper> Authentication of the end-point (the ID = that gets authenticated via EAP) is what this text must be referring = to.
Alper> There's also the "origin authentication for PCP = packets (+ integrity and replay protection). 
Alper> = Gotta be specific about which authentication we are talking = about.
Alper> Since PCP server can be sending unsolicited = messages updating the PCP client, that also needs to be taken into = account.


=96 Authorization done separately, using the same = mechanism as in non-authenticated PCP 

=95 = Mappings are removed when authorization is = revoked 

Alper> I have no idea what these two lines = really mean. 

=96 Mapping lifetime is not tied = to authentication lifetime

Alper> Good, this makes sense as = the definition of "loosely coupled". 

Tightly = coupled: 

=96 Authentication and = authorization are performed using the same mechanism, or there is a link = between them 

Alper> There's always. There's a corner case = where AAA server authenticates the user, and the PCP server has a = database mapping user IDs to authorization parameters. That way you can = say AAA authenticates the user, PCP server authorizes the user. But = that's such a corner case. Typically, user IDs (with credentials to = authenticate) and the mapping to authorization parameters are maintained = by the AAA server (remember the second A in that acronym).


=96 = Mapping lifetime is tied to authentication = lifetime

=95 Mappings are removed when keys expire = OR authorization is = revoke

Alper

=
= --Apple-Mail=_6803E23E-6678-44A5-AB5C-5A142B95EFA4-- From alper.yegin@yegin.org Mon Nov 5 03:21:32 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA4BE21F85EE for ; Mon, 5 Nov 2012 03:21:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.385 X-Spam-Level: X-Spam-Status: No, score=-102.385 tagged_above=-999 required=5 tests=[AWL=0.213, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8cLF+9svC87m for ; Mon, 5 Nov 2012 03:21:32 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 1AFDF21F8527 for ; Mon, 5 Nov 2012 03:21:32 -0800 (PST) Received: from [192.168.2.4] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus4) with ESMTP (Nemesis) id 0MJjH2-1TUEoe1Y28-001Kh4; Mon, 05 Nov 2012 06:21:30 -0500 From: Alper Yegin Content-Type: multipart/alternative; boundary="Apple-Mail=_AF9A9CB5-AD11-4F23-8523-277482A79EF6" Date: Mon, 5 Nov 2012 13:21:14 +0200 Message-Id: To: pcp@ietf.org Mime-Version: 1.0 (Apple Message framework v1278) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:i/kXcKWDyDnpa1Onl2mkxYyYjOs+678BB5r6foQpUmH 6eaDA4I7SHNp8o8AIvy8pQmNwjMFvoW06knOvahrL1KEdIuxKn +XJQvluiy02g2JmoPBKYmeX4nqXieE3wfNn5HBxJ+7jPxN6BCr /ts+Ouqk9Rp4bRUsOeDVTgDX9N4Up6hPUDcDy3SYC267n0/Vuc qugMfIj5fdFmFBRCMfp57o201OAhJoI7WZDLDVnntM5sIcW3Go NeYBhE3zomN4YF4IYeRl7o4eOCmW5JCJrHy+Kr/EiyzSW5s8dw LH4/uH7X6TAWNuUox5HzqjD7JWmrEGAfou3JqU2TIPTula10v0 z8PDk15yC0IhRJagPYxkk2aEbbCQcCk+D+v+vbOMiG+L1nk3jh xoxq1wcUQ/L9w== Subject: [pcp] issue#61: Unsolicited reauthentication X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 11:21:32 -0000 --Apple-Mail=_AF9A9CB5-AD11-4F23-8523-277482A79EF6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Would it be desirable to support unsolicited re-authentication? =96 May depend on answer to issue #60 =96 is there a need to renew = authentication information when no requests are being issued? Alper> As we discovered over the mailing list, there are cases where the = PCP server sends unsolicited messages to the PCP client (e.g., when the = mapping lifetime is updated). Such messages too need to be secured. So, = tossing the PCP SA as soon as the first PCP request/response is = completed after the EAP authentication does not work. PCP SA is needed = later too.=20 Alper> Besides, I don't understand why you'd want to toss the PCP SA = away. Keep it around because you are likely to need it even at least for = the subsequent requests from the PCP client.=20 Alper> And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP lower-layer.=20 Or is it preferable to wait until a new mapping request is issued, and = start a new authentication process then, if needed? --Apple-Mail=_AF9A9CB5-AD11-4F23-8523-277482A79EF6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252

Would it be desirable to support unsolicited = re-authentication?

=96 May depend on answer to = issue #60 =96 is there a need to renew = authentication information when no requests are being = issued?

Alper> As we discovered over the mailing list, = there are cases where the PCP server sends unsolicited messages to the = PCP client (e.g., when the mapping lifetime is updated). Such messages = too need to be secured. So, tossing the PCP SA as soon as the first PCP = request/response is completed after the EAP authentication does not = work. PCP SA is needed later too. 

Alper> Besides, I = don't understand why you'd want to toss the PCP SA away. Keep it around = because you are likely to need it even at least for the subsequent = requests from the PCP client. 

Alper> = And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP = lower-layer. 


Or is it preferable = to wait until a new mapping request is issued, and start a new = authentication process then, if = needed?


= --Apple-Mail=_AF9A9CB5-AD11-4F23-8523-277482A79EF6-- From alper.yegin@yegin.org Mon Nov 5 03:25:37 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76CD621F85EE for ; Mon, 5 Nov 2012 03:25:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.398 X-Spam-Level: X-Spam-Status: No, score=-102.398 tagged_above=-999 required=5 tests=[AWL=0.200, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fr66MMfLfFZZ for ; Mon, 5 Nov 2012 03:25:36 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 21D4021F85A8 for ; Mon, 5 Nov 2012 03:25:36 -0800 (PST) Received: from [192.168.2.4] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus4) with ESMTP (Nemesis) id 0M093M-1TEmSO3DmG-00u7AQ; Mon, 05 Nov 2012 06:25:35 -0500 From: Alper Yegin Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: multipart/alternative; boundary="Apple-Mail=_D244C193-1EB6-4972-8F65-9D77AF202613" Date: Mon, 5 Nov 2012 13:25:18 +0200 In-Reply-To: To: pcp@ietf.org References: Message-Id: <53E15237-EFBC-4D02-9681-2420E176DB7E@yegin.org> X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:HhWG/e2U34ly3nrzj9erih003vC/LTui2OC3XjgyICo DvD9dfyYit0xZ/7IE4uCgDOv0f8oUZB9atiGXsTANvArKETQNx X0yUKDcMReG4xbPHfyz45RX+3dNfIOSQpw4aFgK+65EogsTLNO tnknLICi3ZKa8iNIKYqQq7Bpn8+UQ63xqw+cM6jab14Mk+Laoz KBo4GLUVGi0dTIe0iNde1zJQ57fj6seZCXKVzWDaxuXEC9eyMH jGPDlGnAQlNiuf3bgHg001fpudQW9H0utDff0jesc5a1vqNyt5 qufWU/PwCUvrdzanki/sqvOFi3fR2sGckkLv5dFjGyZF3KoJ8y AJGjLokspYr904IP0niSR2ZJToknnMW3gBFa88OAzhBuExlxv0 fDpTmh28kSJNw== Subject: Re: [pcp] issue#61: Unsolicited reauthentication X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 11:25:37 -0000 --Apple-Mail=_D244C193-1EB6-4972-8F65-9D77AF202613 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 I realized I missed the additional text on the issue tracker: Should a client need to remain reachable in order to defend/retain its = mappings? Alper> Depends on the deployment. The "architecture/protocol design" = shall not assume the client needing to remain reachable in order to = defend its mappings. Alper> Supporting "re-authentication" in the "arch/protocol design" does = not imply otherwise. Alper> Even though re-auth is supported in the design, deployment can = decide to use it or not. Alper> This is a deployment decision. Not to be dictated by the protocol = design. Consider case where client periodically goes to sleep but wants the = mapping to exist whenever it's awake. Is this scenario important? On Nov 5, 2012, at 1:21 PM, Alper Yegin wrote: >=20 >=20 > Would it be desirable to support unsolicited re-authentication? >=20 > =96 May depend on answer to issue #60 =96 is there a need to renew = authentication information when no requests are being issued? >=20 > Alper> As we discovered over the mailing list, there are cases where = the PCP server sends unsolicited messages to the PCP client (e.g., when = the mapping lifetime is updated). Such messages too need to be secured. = So, tossing the PCP SA as soon as the first PCP request/response is = completed after the EAP authentication does not work. PCP SA is needed = later too.=20 >=20 > Alper> Besides, I don't understand why you'd want to toss the PCP SA = away. Keep it around because you are likely to need it even at least for = the subsequent requests from the PCP client.=20 >=20 > Alper> And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP lower-layer.=20 >=20 >=20 > Or is it preferable to wait until a new mapping request is issued, and = start a new authentication process then, if needed? >=20 >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp --Apple-Mail=_D244C193-1EB6-4972-8F65-9D77AF202613 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 I = realized I missed the additional text on the issue = tracker:

Should a client need to remain reachable in order to = defend/retain its mappings?

Alper> Depends on the = deployment. The "architecture/protocol design" shall not assume the = client needing to remain reachable in order to defend its = mappings.

Alper> Supporting "re-authentication" in the = "arch/protocol design" does not imply otherwise.
Alper> = Even though re-auth is supported in the design, deployment can decide to = use it or not.
Alper> This is a deployment decision. Not to = be dictated by the protocol design.

Consider case = where client periodically goes to sleep but wants the mapping to exist = whenever it's awake. Is this scenario = important?




On Nov 5, 2012, at 1:21 PM, Alper Yegin wrote:

Would it be desirable to support unsolicited = re-authentication?

=96 May depend on answer to = issue #60 =96 is there a need to renew = authentication information when no requests are being = issued?

Alper> As we discovered over the mailing list, = there are cases where the PCP server sends unsolicited messages to the = PCP client (e.g., when the mapping lifetime is updated). Such messages = too need to be secured. So, tossing the PCP SA as soon as the first PCP = request/response is completed after the EAP authentication does not = work. PCP SA is needed later too. 

Alper> Besides, I = don't understand why you'd want to toss the PCP SA away. Keep it around = because you are likely to need it even at least for the subsequent = requests from the PCP client. 

Alper> = And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP = lower-layer. 


Or is it preferable = to wait until a new mapping request is issued, and start a new = authentication process then, if = needed?


_____________________________= __________________
pcp mailing list
pcp@ietf.org
https://www.ietf.org/mail= man/listinfo/pcp

= --Apple-Mail=_D244C193-1EB6-4972-8F65-9D77AF202613-- From alper.yegin@yegin.org Mon Nov 5 03:35:18 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57B0E21F854A for ; Mon, 5 Nov 2012 03:35:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.411 X-Spam-Level: X-Spam-Status: No, score=-102.411 tagged_above=-999 required=5 tests=[AWL=0.188, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a5AEG+Tg+0vW for ; Mon, 5 Nov 2012 03:35:17 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id BD1F421F8549 for ; Mon, 5 Nov 2012 03:35:17 -0800 (PST) Received: from [192.168.2.4] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis) id 0LhwPy-1Szpwn1jjW-00mPRk; Mon, 05 Nov 2012 06:35:17 -0500 From: Alper Yegin Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Mon, 5 Nov 2012 13:35:01 +0200 Message-Id: To: pcp@ietf.org Mime-Version: 1.0 (Apple Message framework v1278) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:++qHYwHp7ZTuU8YNUJbs8ScF9TlndSqW8EuUdmrgCUT rC3rKfC67HM9INUd/QoHB8VeIXgZr0md7aLN9DwrzQrmTXq/Nq Iclr8u8979zZqfKNXuM5uHS9IqKh29yuQUBoB/lQHw5FNZDUkg 34X/wcNdSMub1ckjjyT0c7J27JfvnC0UmEaaUdbtcTjbZ50DZi Aam+jtzY9eWH81YY3EgHDDmDDf43A6+q0y29rk4SxFLVugVwRF fp9iMh9vbwqVdgMvXIefp40OIDKpX7wdVE2PQQwowvdMSkRBy4 FHWe5izj1SsaGiFpyH4fqN5hyhWJFhyWaXjOFJUNt1IHiyIsgU tz8vdmHZz6nJ20FF+ZH8ZNux1Y+BpgIOPKoK1sv3F7NfBabr51 VunZxsSA1o2bQ== Subject: [pcp] issue#62: Client-driven or server-driven auth retransmissions X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 11:35:18 -0000 EAP is a server-driven request/response type protocol. Defining an EAP lower-layer that's client driven is not trivial, maybe = not even possible (to-be seen).=20 Sam initiated a discussion on the ABFAB WG mailing list on this matter, = and there seems to be issues there (a single packet stalling the = protocol flow, see = http://www.ietf.org/mail-archive/web/abfab/current/msg01746.html) Furthermore, as more details of client-driven solution discussed, it = became apparent that server still needs to maintain state even when the = client is driving the rexmits. So, there are no savings there. In fact, = if the savings are targeted at the "PCP implementation", then offloading = the authentication to PANA is much more attractive. =20 From Markus.Isomaki@nokia.com Mon Nov 5 05:03:53 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8467A21F86E8 for ; Mon, 5 Nov 2012 05:03:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.299 X-Spam-Level: X-Spam-Status: No, score=-6.299 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SA4kOOdgzqaB for ; Mon, 5 Nov 2012 05:03:53 -0800 (PST) Received: from mgw-sa02.nokia.com (smtp.nokia.com [147.243.1.48]) by ietfa.amsl.com (Postfix) with ESMTP id A41F321F8476 for ; Mon, 5 Nov 2012 05:03:49 -0800 (PST) Received: from vaebh105.NOE.Nokia.com (vaebh105.europe.nokia.com [10.160.244.31]) by mgw-sa02.nokia.com (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id qA5D3LVM028463; Mon, 5 Nov 2012 15:03:44 +0200 Received: from smtp.mgd.nokia.com ([65.54.30.47]) by vaebh105.NOE.Nokia.com over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Mon, 5 Nov 2012 15:03:36 +0200 Received: from 008-AM1MPN1-041.mgdnok.nokia.com ([169.254.1.221]) by 008-AM1MMR1-013.mgdnok.nokia.com ([2002:4136:1e2f::4136:1e2f]) with mapi id 14.02.0318.003; Mon, 5 Nov 2012 13:03:35 +0000 From: To: , , , Thread-Topic: [pcp] Comments on draft-reddy-pcp-optimize-keepalives-00 Thread-Index: Ac26ICGtepI7C2jMS3WSr/1EfDkumAA0bIyAABavwQAAARjLsA== Date: Mon, 5 Nov 2012 13:03:34 +0000 Message-ID: References: <45A697A8FFD7CF48BCF2BE7E106F06041367B1@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041367B1@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.163.48.127] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 05 Nov 2012 13:03:36.0112 (UTC) FILETIME=[F7699B00:01CDBB55] X-Nokia-AV: Clean Subject: Re: [pcp] Comments on draft-reddy-pcp-optimize-keepalives-00 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 13:03:53 -0000 Hi Reinaldo, See inline. Reinaldo Penno (repenno) [mailto:repenno@cisco.com] wrote: > >>It can only tell the NAT "keep this binding for the next N seconds". Is >>this correct? If so, the best approach is probably to set the binding >>lifetime as long as possible via PCP so that the PCP refreshes would be >>as infrequent as possible, and set the application heartbeat timeout to >>maximum value. A further optimization is to send the PCP refresh and >>the app timeout at the same time when appropriate. > > >In the case of PCP PEER if the client misses a refresh, the NAT reverts ba= ck to >its normal operation and outbound packets would trigger a refresh > >"If a PEER-created or PEER-managed mapping is not renewed using PEER, > then it reverts to the NAT's usual behavior for implicit mappings, > e.g., continued outbound traffic keeps the mapping alive, as per the > NAT or firewall device's existing policy." > >Is that what you need? > This is how I assumed it works. Thanks. (Not having read the pcp-base for a= while...). And I think we can optimize keep-alives that way reasonably wel= l. There are however a couple of additional questions this raises: - It could be useful if there was an explicit way to learn what the "outbou= nd traffic driven" binding timeout is in a NAT or a firewall. Today some ap= ps try to do this by trial and error and it's not very reliable. Of course = it may be that if the NAT/FW supports PCP, this information becomes irrelev= ant as the client can set the binding lifetime as long as it wants. But per= haps there could still be some scenarios where the NAT/FW would not allow P= CP to set the lifetime, but just ask what it is. And that could be supplied= to the apps.=20 - As many people have commented, apps often want/need to do end-to-end hear= beating regardless of NAT/FWs. A typical rate could be for instance once in= 30 or 60 minutes, which would still be reasonable e.g. for cellular radio = power consumption. So we would like to optimize that pattern with PCP. As d= iscussed, the best option seems to be to set the PCP binding lifetime as lo= ng as possible, and synchronize its refresh with the app heartbeats, so tha= t for instance radio would have to be activated as few times as possible. A= nd in practice that might be as good as is needed. However, in theory you c= ould be able to leave the PCP refreshes out altogether, if you had a way to= find out that in this particular case the NATs traffic-driven timeout is, = say, 65 minutes, or even better, set it to 65 for the duration of the bindi= ng.=20 The much bigger issue than the detailed optimization of the keep-alive/refr= esh pattern is the detection of when PCP can be relied upon. NATs beyond th= e outmost PCP-contolloable NAT can be detected by the application, but in r= eality that is a bit tricky. Firewall detection is even more challenging. I= t seems quite a burden for every app to do these checks, especially if it c= an't be done in a client alone. Perhaps some checking could be performed on= the host level and apps could use the results.=20 Markus From simon.perreault@viagenie.ca Mon Nov 5 05:06:39 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F1C321F86BA for ; Mon, 5 Nov 2012 05:06:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, NO_RELAYS=-0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id koom7s3ocS7z for ; Mon, 5 Nov 2012 05:06:39 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id EBBA921F8661 for ; Mon, 5 Nov 2012 05:06:38 -0800 (PST) Received: from porto.nomis80.org (unknown [IPv6:2001:df8:0:64:3d84:372:9328:b7f]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 5D1A2415DF; Mon, 5 Nov 2012 08:06:38 -0500 (EST) Message-ID: <5097B9DD.3010107@viagenie.ca> Date: Mon, 05 Nov 2012 08:06:37 -0500 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> <5093A9C3.5010903@viagenie.ca> <13FCF043-A36C-4C13-AAB0-EEE896E11964@yegin.org> In-Reply-To: <13FCF043-A36C-4C13-AAB0-EEE896E11964@yegin.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Cc: "pcp@ietf.org" Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 13:06:39 -0000 Le 2012-11-04 15:17, Alper Yegin a écrit : > 1. In NAT case, there are multiple actors affecting the mappings, hence I understand the lifetime of mappings cannot be exclusively dictated by the AAA. > We need to define how the lifetime is managed, and how the relevant parties get to know about it (and if they need to know about it). > For example, PCP client needs to know if the mapping lifetime changes, and it does know thru PCP. > How about the AAA server? Does it need to know, or not? It depends on what it meant by sending a lifetime value. Is it was just a hint, it does not care if the NAT did something else. If it was meant to be an authoritative value, then at least a change in the effective value needs to be notified to the AAA server, if not confirmed. Not sure if these are needed. Agreed. This is a good summary. > 2. In firewall case, I think lifetime of the rule can be dictated by the AAA. Or at least, there exist some use cases where the AAA server would like to control the lifetime (as in my examples). Possible. I'd like to see what others think of this. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From hartmans@painless-security.com Mon Nov 5 07:00:26 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD9BE21F84DE for ; Mon, 5 Nov 2012 07:00:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iBEzgPe1esnZ for ; Mon, 5 Nov 2012 07:00:26 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id E36E621F86D5 for ; Mon, 5 Nov 2012 07:00:24 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-933f.meeting.ietf.org [130.129.11.63]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 6DF582010B; Mon, 5 Nov 2012 09:59:32 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 5DB03412A; Mon, 5 Nov 2012 10:00:22 -0500 (EST) From: Sam Hartman To: Simon Perreault References: <45A697A8FFD7CF48BCF2BE7E106F06041342A7@xmb-rcd-x04.cisco.com> <5093A9C3.5010903@viagenie.ca> <13FCF043-A36C-4C13-AAB0-EEE896E11964@yegin.org> <5097B9DD.3010107@viagenie.ca> Date: Mon, 05 Nov 2012 10:00:22 -0500 In-Reply-To: <5097B9DD.3010107@viagenie.ca> (Simon Perreault's message of "Mon, 05 Nov 2012 08:06:37 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] Loosely/tightly coupled auth/authz X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2012 15:00:26 -0000 >>>>> "Simon" == Simon Perreault writes: >> 2. In firewall case, I think lifetime of the rule can be dictated >> by the AAA. Or at least, there exist some use cases where the AAA >> server would like to control the lifetime (as in my examples). Simon> Possible. I'd like to see what others think of this. I don't expect I'd want this in the enterprise cases I'm familiar with. From repenno@cisco.com Mon Nov 5 20:20:06 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF5E111E80E0 for ; Mon, 5 Nov 2012 20:20:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.449 X-Spam-Level: X-Spam-Status: No, score=-10.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tCZKYas7UDq5 for ; Mon, 5 Nov 2012 20:20:05 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) by ietfa.amsl.com (Postfix) with ESMTP id 0A88111E80E3 for ; Mon, 5 Nov 2012 20:20:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=137644; q=dns/txt; s=iport; t=1352175604; x=1353385204; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=atGrBp2D8qVq6zW06Wunzg+nkkGbUXfBjkwrD/WT7XY=; b=c70jSr6aRXtgRN/2tFDNwGwwc2r936aSNOxBLJPuk47hlVbPuTtk5bUj K+uSJPzBqsHESnPEgbQCVVtx7NBaRDmoXeM91TacHapEevEh6T0+2w727 Q1epgqh73wYbP4Pvj1HMmGr5F95/qBFZx9jZP3fz53fjtds7tIDH0J4x5 s=; X-Files: draft-boucadair-pcp-server-selection-00-repenno.pdf : 99935 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av0EAPaOmFCtJXG+/2dsb2JhbABEwzeBCIIgAQQSATJGASomGBglAgQbBhSHaJlLgSuPZJBAkXBhA457lVmBa4JiDYIZ X-IronPort-AV: E=Sophos;i="4.80,720,1344211200"; d="pdf'?scan'208";a="139161372" Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-8.cisco.com with ESMTP; 06 Nov 2012 04:20:03 +0000 Received: from xhc-rcd-x06.cisco.com (xhc-rcd-x06.cisco.com [173.37.183.80]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA64K3r3002248 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 6 Nov 2012 04:20:03 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x06.cisco.com ([173.37.183.80]) with mapi id 14.02.0318.001; Mon, 5 Nov 2012 22:20:02 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-boucadair-pcp-server-selection-00 Thread-Index: AQHNu9X9pblI/OxazkSXJAKY0uVaVA== Date: Tue, 6 Nov 2012 04:20:01 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F06041388C2@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.84.28] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19340.004 x-tm-as-result: No--30.721100-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/mixed; boundary="_002_45A697A8FFD7CF48BCF2BE7E106F06041388C2xmbrcdx04ciscocom_" MIME-Version: 1.0 Subject: [pcp] Comments on draft-boucadair-pcp-server-selection-00 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2012 04:20:06 -0000 --_002_45A697A8FFD7CF48BCF2BE7E106F06041388C2xmbrcdx04ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable Hello, My review attached. Thanks, Reinaldo --_002_45A697A8FFD7CF48BCF2BE7E106F06041388C2xmbrcdx04ciscocom_ Content-Type: application/x-msword; name="draft-boucadair-pcp-server-selection-00-repenno.pdf" Content-Description: draft-boucadair-pcp-server-selection-00-repenno.pdf Content-Disposition: attachment; filename="draft-boucadair-pcp-server-selection-00-repenno.pdf"; size=99935; creation-date="Tue, 06 Nov 2012 04:20:01 GMT"; modification-date="Tue, 06 Nov 2012 04:20:01 GMT" Content-ID: <4EB1467063C05440839B8668905F3F9A@cisco.com> Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXVtv28gZfdevGOSlWWDLcIb3vmUTbxsgt8baLopmH2SJ ttmVRIWkkhjoj+8ZkjPk8E5KVJQAiWIr1uF89+t8If8kXwg1NZb+oes6JZZraDZxbP5n5JPfyZ68 eBVTso6Jrnmmp1PPbnq1iNfEZLbGDJtQy9E8hvdR29RcaprENvCf0x94X/5MW3NNYrqOZtnFWxbK ZxIdv/Gzv+BDqUdZ+u/8pcN/um4CLj7YsB1G1jvyyxLv1HWbkeV6YRjp+/O/ljvyYrmkmk4oWd6T 5+RMv35aLP9LbpZ4stJ5Nj6bep5dz2ZYeEgXwMWzLbJn63min8ggKIsqabugFMdMPY3q1FaOebFc kx5Q6THPgcxzNMdyqUccFZmCZ1Ej+0AoNf5fDOJFSjUXQtBJrkXGgP+ZioSTCwLl2syxuOQ1Soer 2eAifjhlRFI42qiWY3sdruNT4EFoF02wPEPzDMNyJ8L6g8x6aFS3NFN3zInoku/JiWdGvizqio5S aBOXQhkopFTYnFTZ/H+nqCXBXG2qlzJdc3RLMleunXqZK9e8h839wHMapamowTTqeM281a+ohvNW I6reMzNhVC3DUakIcufWqk0g8zNbRqv1n340y7k5ugbjrQIbbEaHHxs0at269x6bC/XleZLVRlqf m90q2M5xaEyHJ8GqMimp2eN7zHxojDLN9Oyph/Y+SIYq/0ZRaFMbjMFie1bzoQ0R0G6PTZJ5MYcj luneE/wwjVVd7MbDKwuEw404HGhH9zTHYC58a4171rmNgBt3TzKbxcpvopoJbzh7E/8MvAkK2/bg bhc/qfwm7uvgTVxDmeWfBMfasV31J3F5dMtv4s6X+LTsB6Xs53ThXvQHAsOd5cJD1U3gpfZIc9TN VcO/e4rFbROZIhBQn63b+BMpCt0xSSMDtkGRx2zD8YZ2GamJ/+VHcRDOAUzGAdOA7eO/nXReZYFt cnkpNTTdsh2iwBts+HV9jjOTHpwCKjf6/ap4uFDU3zmrmOSPc1k1nVFYR6LDszTDg552oEiF3sx0 YqdJmiqHOhIu+Nhy3mNe2pWpOTMds2c7gZD1FMzEY3YZRBzkHHfMH199JL+H0Z/B/oH8PQqPh/LZ pa9zuYa30skcnH8GJ8UYzIRrOkio5ajPZgtnITfQMtdxp6J9p5FfwuN6tVkFs0RG0vqK08x5QLG+ F84w2Y6FgKgi9ch2qvFjDdSbfeJHe39KgmLBs79dKUKZNqlgU46pyFDkKaa/DrRro/ifwlNmBqNE QBnJ/6+j1X1Sk9SOL/warfZrnyz9rb8Od7MIicgFVx6p5XRFdnvg6U7UiTYiEzZaJ3Im3G/8DYmT VXKE33WbrPabVbSJSZrf6Djn9FufNPLR3+/DeY85f7ZrMD021QzLUysb/Rb+5vshiHwc77tVtH4k 1PmZIF1h9J1u8f3XGvk92M9yyiZqNZYL+5Q/2qBTfpiDmQvlrp6yIlc1PTo0VKhprUHlA9syNd2T 9QOZTupR7gXlJr+ahdgGcmS2zoh4rJHK+FUQr2eJGAvSq+f9Q0lvOhrKq6qs99v1aQTn8rQ4c82S ITNkmCgi2/mTjKT2rX9I/N2dHxFqpAqLSamfI6FXQamQvvBVLmNNDaT3LCn1CpRLKyDUUExXxDoK kuJQcgdusirs8iWLLBNDrpMxcyQXtcvDHBqOAi6zdJizaWh5kHjrR1/B9Lfcg0yCcJ9z/XnDQviQ jmlANlWcLQS+DNdTV6OjXcgqfaWO6A6iR7m51LBRleONK5MgbngMMQsuy0Kq3bEquBQi1vTF5DCr y2Ghlqt5FoNlbzihfqN1NzJoLztT/dEoegwMx0BSQcGmnFJNl00+pS5dRpGZprzqkiMZqcoO68Mc XMR0xG4OSpcd53MZLpJlShXJUK83ThXnwCMaxULMQB+IidYyFdgPYCEG14DZ8AqnsVBcMSpQkp25 xlFqkjmoF3p6p6BdiJEcNBFSSwqakqrtV0eDSyxlJkp7Irt0JHOhreFlCtI15Q5remhmn4rqafE2 V0Qt/HwZ66+DeSiKy+Oy6i/vBsr7KE5Grty0PAfu0TRUcYLunHlMvuhIqyBTSFcTsslc1MXP0jO3 PJ7DQc1/SJPjZChdhrWA4kI9okVhpGWFEzkLG6EB2jUNhjbqDNZI5l4+BjHZhOvjzt8nJD746+A+ 8GOSPPrkzn9cfQ3CiCQhXpP7cLsNvyGTeveUfpsHEq+2Af7fHGGOzJeIB7sCBWJBaHUquTBzGvpz o/OTfhIsUHUd7hNoEYLmK1LEhZ+fx59/It8e/T0J9z4BA8Q+wsXVNn3P+9UO/LGK/FmozgzNREEF 7Jw90zVQHaLvmBgYGGc2Zqf6NFgg+X3wcIz8jUbIu+M2CQ5bn2RE3a2euKAXb+GSv0qpngk6CfYk DnfzkF7UnKz8wa6B9DbajlR/Aa5dT6PlcMLDt6t3p7b1QrlS0zeC6knXb/zDNnxKlTwXev87JD4+ olKzismOc8EcxkkGW2hFKs6x24+YHBV3+REM7eyo0FpEAdIS9MFBXihTO4/hDh0V2sATqjjsKazW gSKG/kcUX6DvWk/owv66ZaMzG71j1yB9loFsnaJ2+6Xvk//liEok5/SYvF3tH46rB38g6UY58FRk xqwyzG7mHuoCVniI6F3MXXimJto0eA/sFTjJBhI+unt1TnIOS+GpfgduCWf4T/+JfAt528Czd7/d Lp/9nP1N3n9IX3+6+edvbz7dvOZfv/3Hy7dv5YvsHbM4SybTLMMklnrYCgsW2uMiIbaF8qvBw5Er 85WmwQIlP/z2Nqcpf1VQ+9WHd+9u3r/OCP7u5b9BbrSVkGcfPi7ffHj/8u0z7iolCK7mIXze0SCO +xqUNUNZypZlvKuJjabBkhEx4pw8/A14N9sh8hNEwHCaNn68joI7/AOEPoXIfb3czEZlyMQMrJU/ Sk7sdu9FnTn+9Osrwij15rCBGAzBtIgLv0o9ZkUFXSZVZOjwW2yeCOmAUmjDS8zDok86azWtQGqn nOp3gnIjCFfxGbr9TkO0yQyDViPhHxO94W5PxoAhw7QQLNoYGjY7VfXRp8oBpck+ZaY5lTSM9+Pj MdVpI+LHEgHeCleefUqJapXfpEws4UPmGTSyKHp1dINdg6pPR8PQ8D3OyKPxEg2YJLxP7SJ55+9m abSiaAUyHdcgmETHBJuE+QN0UuGZ68j2y20RCpKaSmpm5/pkQSM7tyUPJBIzHRdxRHjXropUIzI8 pzEqhpI5DQFrJEul2euRbeajAMq2jApAhYQ17ThLDoOiLOsyj1SQtFCwhinrMkeyPz7e7YKEezFw XO6P222a7wujXdpU/i1IHnl2v+QtYKlCvrHlRCY0MLaJPlxDPsIV6DI0nmkY4h/Jd7OLwyRUhyj8 GmDgcZ8q2RIFi507dQo2ikOfTyp5sYxz8HjhLygcOe4p+NrUHLWZ5vDxYZWs3dI6WeF2JWUovHZb R/ZKRTJUWnksOfCAKnYg8/t6CShWHEyDl1JwaERRBtjbSSWHyVRgCgVrJnOyM9pV8JU9SzmSE5RV 3RftlbpUwmi6rArhH0NcDZ/UQ26v7ItSMRhvwpDW38Q/ZJahd9NFT4dtiz7ZFuJcJOFk8oYgHQ1B 43zR2RX4NFizujJipU/lyBTq1dyGeVwZscunAmWodkx9mbQGzVOy6birSNjk8YVPxFGSm/1DsPf9 CCWcU9I0bSbHMDD96qJIKJ7lBD0x0Dq3QSmcfBgfi9miEJAda3+ae3ahmAZruYr/JL+GEUYePz9/ c7P89fNPKF2/DxNk5h5XCQnhrkbkgc87o5aJEvZqG4dkE6BDKrg7JvMUq0Wfgpk/0zVQ3eJ9m9en CqfBqgs2kq5CqEuu0dmiE9k5jba89BwHkXSofmw0+G2CLBY9CSQjjVumHiEjvG61hRzwnMv6GEW8 xSs9wvz8zjrvIVOKAnV+fi1KvXDicj9h+KD4qLM08iKZQJWf5Q+weoaYQ+2CUhzLRSaeTItqHqYq RtJqdkuRw5rE+ARJDpiFko6YIf7Np3XE+WVAB0fAj0ly+NuLF5sVUqLZkj0t8JN7LYweXqSjPPGL XF5fzOKziFqJgD9I1Q2NssaJp6iRCCiD5LOZuPUwqxx6yub5cmxMMXXh8bDKNJFdQ6qfLxDm9ety mHW+8YXCQzPRU8jXqjW0atR88OanrTuLjU/bZmMKKAY2B1mWmgLrH2AYrgIqsLoLU0VGeBqsBg+h S/rL2HpzE3IpqqliU2xJTYEP9RDKUFJe7UpOyF1aAspIBV6KoFJ9I1vAY/J1tQ02aPaO0Pm5W30P dscd9x/i4DvZoXPwcZ6OBtH8WXmelqO9TGoB1T/DlTJ6NVHUNFg8o5j39x4PMDz+5mdw3GG7WvNX oHZ4F4fbtLsB/f1ZTLWZZesJ8xjf0U7M/EFGsm42qpCa+NX+SbHyizPVKaSjpiL8ocyIgJNiBeaV pbkmoUqCnY/o5A3mDmIUoVYHFC4OUQCe5K02x7hI3szh/DBQ16PoWTEz8IN8n6FKfJTvgyn+bEI+ RzKSuEKHx5Djex/B3bpcteuyeqNQGjLVoRBbEYZLuyzYSetaSI6XpeEKXJZpsHZgfHD/lithPpMT pIktH1Y3TWwhx7XnDWfPeEaE12whLQ9YtRRrz+YQDwOj2hhxgnrOn2aQfAx1UUdxXuGiApMjyf1D OQ8ruC1elrkyzpsGa0r7ROqmLkp3tHS6qWKrBXb0lM+tm4RDlW3NY+4syIr2CRVJS3aqptBSZUu+ BWiX8NNVZxiNq+w6myU+ZmLMfNQJDhXHUScoxdHw+AYarJxtCF5r4c9kKF18VUBBvOi5ztj81avw 8BQFD48JLyMEit08Xz5Z8L6hYlR4vziui4Q0hoOWOAxDNVGuxvKTKdclhgXlHIaFxbInbqgczp12 MKbBKhjq8/M1hmeRwWeE16qwZPKIBDyPvpJHJVhpb6oaZSQZvDLP0R3SiLy/6OeTA7ak856hYIP6 AJ/+Tvvb1R4wXBJzptgK9zFg1Qlaa/ODvgL3wrCxQtuVUnEtgf5EWKISTlbH5DGMYkRaL2G1UnXH Q4V0hc1Gm8N3lDtsBPRrIC7WRiFxdw0aD+GeyzvHr8t35IsWJsBSF0dkfaX/xTY5HsKcoufK2fnG qw3Eqi0V9+DSy3zNh3LIWEXWM5g99LBGuWoMDTbUtCmpQBlqZTNzhTyMtGB/wTCt/7Ca5V4j2Rdc Qat4SgPdkyk1IM5RFmpAhokwk7skDa12M9SAMCfJm1UVddBvr4c7QKPcCFl3mYbqY9F6/MnfrhJ+ AwEUQco/r/PtMun9TmffACvud8pxX4PFgeNv8TGihvBoIBefq7ZnMLSymHKDhSJQRehxkU4DrF+A n+qJSK0FyqlREL8KhVq4hQylm9qrtmsrxaWuBlxc3HIwdmhdXgfxM/Hh6W/hcGW/br5PdbIawMsH art9k+LmLh0rfYl4DEWx1LKjIL86bZjub6+kNMSTyL//8xHbFAj94xQL31aR5to/vYC28gAKq5xN gCi4nrZBKaJUHcVxcFKTLF9IgPh9bPxSVSOHMq+G6+K8AacFLnWMscNlI2v2Nbs2BbO8P4TPDZcw K8xWUDjXS0Mzk2eCCOXN7xWpQGxx4mpgs5SlFF1S2vBVbH4ufRtfFNvQefpiqu7qytsVIj7m1Ie6 yLVT74IiRZzB/aOya1ah/9mUzbD9LQxOmG4072QvqHsRa81gTK5vx2GOqkkZ10j1+flAG9UYWPVF oR5Mlc57Q1RILaJZA5f3/yU8N+j7Re/fFrnofXxSGbcPuRxrUpD3rDQbqvdwlvWFZr2IxM2xCiJ4 cPyW4v6AKNjfzzJHLm+OnQYLSWDUav37e54TQa0I+VTC227QS6Uw5rnzqjnaE7yEegjdqFjLZE3F AfMm2IuqYS4Ml8byDjl8YeY2SuagrKhfXVvMRFiH4x0UAIJneSHDWXdnU+Yiz4FGzwq8H2Dy5LXp FShD9afYISFy3Qi5Pm79FTqHIv9r4H/j0oZ/iG8XN0uf81YX9Efg5l9HHucJIleP9xtFrtcBx8wX XMbRG67hBCo66UylKZlTmghrjeVLfEHBE3ZrpRuJn+TWJfIUHiNR0+DZStQ1MO6VXmYSo0yPJQb4 CrYZz7ubWDzYNZDewsUPuB9Pifr7refspJ8GC7lDvjxNSjAE/FW48fHH7oCdxHy3I1aY8g3oqFbe R+FOfTtWmsbzUF60hrL8ua6B8unowvUJ/TRYwX69PYLSt8HusM2q0b/cviZvM8+Y8M21l12/Jq5U YPnz5BRvMVVFnJanDG7TG5ZOUa9lR6upIiY79gTCTAUMrojtiXkKvDajJKs6KqzBfr1Wc5XPZJbk lrEKsCl+UN1Xht1Rr07m3TBlEqZ3dPArtBkWVTn84kVMkPP9fnP7yhiEtI2rW17PpsHi4VTWWpOW JUmpAMXdAb62EX2yX9HTskndgfCYkG+rCDfnJhgQn2eGRbS2iEe6BtuA+TY0Y1xbkZE3ikyApezc 5BzQbCRm6m3hU+GoBAjs10BdRHTMkyI9RYHVI49GBdam5IssKsp7OpOMpkApbGJD7vL/92Ctywpl bmRzdHJlYW0KZW5kb2JqCjUgMCBvYmoKNDkzNgplbmRvYmoKMiAwIG9iago8PCAvVHlwZSAvUGFn ZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNiAwIFIgL0NvbnRlbnRzIDQgMCBSIC9NZWRpYUJv eCBbMCAwIDYxMiA3OTJdCj4+CmVuZG9iago2IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4 dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4wIDggMCBSCj4+ ID4+CmVuZG9iago5IDAgb2JqCjw8IC9MZW5ndGggMTAgMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2 aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZ2Wd1RT2RaHz703vdASIiAl 9Bp6CSDSO0gVBFGJSYBQAoaEJnZEBUYUESlWZFTAAUeHImNFFAuDgmLXCfIQUMbBUURF5d2Mawnv rTXz3pr9x1nf2ee319ln733XugBQ/IIEwnRYAYA0oVgU7uvBXBITy8T3AhgQAQ5YAcDhZmYER/hE AtT8vT2ZmahIxrP27i6AZLvbLL9QJnPW/3+RIjdDJAYACkXVNjx+JhflApRTs8UZMv8EyvSVKTKG MTIWoQmirCLjxK9s9qfmK7vJmJcm5KEaWc4ZvDSejLtQ3pol4aOMBKFcmCXgZ6N8B2W9VEmaAOX3 KNPT+JxMADAUmV/M5yahbIkyRRQZ7onyAgAIlMQ5vHIOi/k5aJ4AeKZn5IoEiUliphHXmGnl6Mhm +vGzU/liMSuUw03hiHhMz/S0DI4wF4Cvb5ZFASVZbZloke2tHO3tWdbmaPm/2d8eflP9Pch6+1Xx JuzPnkGMnlnfbOysL70WAPYkWpsds76VVQC0bQZA5eGsT+8gAPIFALTenPMehmxeksTiDCcLi+zs bHMBn2suK+g3+5+Cb8q/hjn3mcvu+1Y7phc/gSNJFTNlReWmp6ZLRMzMDA6Xz2T99xD/48A5ac3J wyycn8AX8YXoVVHolAmEiWi7hTyBWJAuZAqEf9Xhfxg2JwcZfp1rFGh1XwB9hTlQuEkHyG89AEMj AyRuP3oCfetbEDEKyL68aK2Rr3OPMnr+5/ofC1yKbuFMQSJT5vYMj2RyJaIsGaPfhGzBAhKQB3Sg CjSBLjACLGANHIAzcAPeIACEgEgQA5YDLkgCaUAEskE+2AAKQTHYAXaDanAA1IF60AROgjZwBlwE V8ANcAsMgEdACobBSzAB3oFpCILwEBWiQaqQFqQPmULWEBtaCHlDQVA4FAPFQ4mQEJJA+dAmqBgq g6qhQ1A99CN0GroIXYP6oAfQIDQG/QF9hBGYAtNhDdgAtoDZsDscCEfCy+BEeBWcBxfA2+FKuBY+ DrfCF+Eb8AAshV/CkwhAyAgD0UZYCBvxREKQWCQBESFrkSKkAqlFmpAOpBu5jUiRceQDBoehYZgY FsYZ44dZjOFiVmHWYkow1ZhjmFZMF+Y2ZhAzgfmCpWLVsaZYJ6w/dgk2EZuNLcRWYI9gW7CXsQPY Yew7HA7HwBniHHB+uBhcMm41rgS3D9eMu4Drww3hJvF4vCreFO+CD8Fz8GJ8Ib4Kfxx/Ht+PH8a/ J5AJWgRrgg8hliAkbCRUEBoI5wj9hBHCNFGBqE90IoYQecRcYimxjthBvEkcJk6TFEmGJBdSJCmZ tIFUSWoiXSY9Jr0hk8k6ZEdyGFlAXk+uJJ8gXyUPkj9QlCgmFE9KHEVC2U45SrlAeUB5Q6VSDahu 1FiqmLqdWk+9RH1KfS9HkzOX85fjya2Tq5FrleuXeyVPlNeXd5dfLp8nXyF/Sv6m/LgCUcFAwVOB o7BWoUbhtMI9hUlFmqKVYohimmKJYoPiNcVRJbySgZK3Ek+pQOmw0iWlIRpC06V50ri0TbQ62mXa MB1HN6T705PpxfQf6L30CWUlZVvlKOUc5Rrls8pSBsIwYPgzUhmljJOMu4yP8zTmuc/jz9s2r2le /7wplfkqbip8lSKVZpUBlY+qTFVv1RTVnaptqk/UMGomamFq2Wr71S6rjc+nz3eez51fNP/k/Ifq sLqJerj6avXD6j3qkxqaGr4aGRpVGpc0xjUZmm6ayZrlmuc0x7RoWgu1BFrlWue1XjCVme7MVGYl s4s5oa2u7act0T6k3as9rWOos1hno06zzhNdki5bN0G3XLdTd0JPSy9YL1+vUe+hPlGfrZ+kv0e/ W3/KwNAg2mCLQZvBqKGKob9hnmGj4WMjqpGr0SqjWqM7xjhjtnGK8T7jWyawiZ1JkkmNyU1T2NTe VGC6z7TPDGvmaCY0qzW7x6Kw3FlZrEbWoDnDPMh8o3mb+SsLPYtYi50W3RZfLO0sUy3rLB9ZKVkF WG206rD6w9rEmmtdY33HhmrjY7POpt3mta2pLd92v+19O5pdsN0Wu067z/YO9iL7JvsxBz2HeIe9 DvfYdHYou4R91RHr6OG4zvGM4wcneyex00mn351ZzinODc6jCwwX8BfULRhy0XHhuBxykS5kLoxf eHCh1FXbleNa6/rMTdeN53bEbcTd2D3Z/bj7Kw9LD5FHi8eUp5PnGs8LXoiXr1eRV6+3kvdi72rv pz46Pok+jT4Tvna+q30v+GH9Av12+t3z1/Dn+tf7TwQ4BKwJ6AqkBEYEVgc+CzIJEgV1BMPBAcG7 gh8v0l8kXNQWAkL8Q3aFPAk1DF0V+nMYLiw0rCbsebhVeH54dwQtYkVEQ8S7SI/I0shHi40WSxZ3 RslHxUXVR01Fe0WXRUuXWCxZs+RGjFqMIKY9Fh8bFXskdnKp99LdS4fj7OIK4+4uM1yWs+zacrXl qcvPrpBfwVlxKh4bHx3fEP+JE8Kp5Uyu9F+5d+UE15O7h/uS58Yr543xXfhl/JEEl4SyhNFEl8Rd iWNJrkkVSeMCT0G14HWyX/KB5KmUkJSjKTOp0anNaYS0+LTTQiVhirArXTM9J70vwzSjMEO6ymnV 7lUTokDRkUwoc1lmu5iO/kz1SIwkmyWDWQuzarLeZ0dln8pRzBHm9OSa5G7LHcnzyft+NWY1d3Vn vnb+hvzBNe5rDq2F1q5c27lOd13BuuH1vuuPbSBtSNnwy0bLjWUb326K3tRRoFGwvmBos+/mxkK5 QlHhvS3OWw5sxWwVbO3dZrOtatuXIl7R9WLL4oriTyXckuvfWX1X+d3M9oTtvaX2pft34HYId9zd 6brzWJliWV7Z0K7gXa3lzPKi8re7V+y+VmFbcWAPaY9kj7QyqLK9Sq9qR9Wn6qTqgRqPmua96nu3 7Z3ax9vXv99tf9MBjQPFBz4eFBy8f8j3UGutQW3FYdzhrMPP66Lqur9nf19/RO1I8ZHPR4VHpcfC j3XVO9TXN6g3lDbCjZLGseNxx2/94PVDexOr6VAzo7n4BDghOfHix/gf754MPNl5in2q6Sf9n/a2 0FqKWqHW3NaJtqQ2aXtMe9/pgNOdHc4dLT+b/3z0jPaZmrPKZ0vPkc4VnJs5n3d+8kLGhfGLiReH Old0Prq05NKdrrCu3suBl69e8blyqdu9+/xVl6tnrjldO32dfb3thv2N1h67npZf7H5p6bXvbb3p cLP9luOtjr4Ffef6Xfsv3va6feWO/50bA4sG+u4uvnv/Xtw96X3e/dEHqQ9eP8x6OP1o/WPs46In Ck8qnqo/rf3V+Ndmqb307KDXYM+ziGePhrhDL/+V+a9PwwXPqc8rRrRG6ketR8+M+YzderH0xfDL jJfT44W/Kf6295XRq59+d/u9Z2LJxPBr0euZP0reqL45+tb2bedk6OTTd2nvpqeK3qu+P/aB/aH7 Y/THkensT/hPlZ+NP3d8CfzyeCZtZubf94Tz+wplbmRzdHJlYW0KZW5kb2JqCjEwIDAgb2JqCjI2 MTIKZW5kb2JqCjcgMCBvYmoKWyAvSUNDQmFzZWQgOSAwIFIgXQplbmRvYmoKMTIgMCBvYmoKPDwg L0xlbmd0aCAxMyAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzV3LcttGFt3z K3o3dpUHQTfeMyvFydR4EZeTsGoWsRcwCUmckIRMkHb89zkN4nXZeDQgNci4ylYixDq8fc9998UX 9iv7wrhrifw327Y580LH8lngy98PCfsf27Mf3macrTJmW5Eb2Tzy275aZCvmCt8Sjs+4F1iRwHPc d62Quy7zHfzP+V943/yZvhW6zA0Dy/PrRxbkZzIbv/B3f8EP5REX+b8XXwbyb7ddwMUPdvxAsNWO /bjEk7btC7ZcLRwnf774Y7ljPyyX3LIZZ8t79moZf94mLL1nb9P9Mdkfs9ds+X/28xIQG4JRQS4u BdMHkjuRFYroEiNBtrhExjSRKEe00BIXjyxuc78QF4HCKiiLs5AmQ+kTSn1ynFuh4y8uDo51YCoO jjFdVK1HBVUMfRF4XXoVQo1D1xEsOKM7y2lAmbj+kelreARNt0MwhyDRVnCLsXf74yFdn1bHTbpn zBr96/VCixKKIsrTH5Kz44K2Xlh9ukIL+s/e0ZRz68l3nbjjQdAhfjCVM0GiSVJLDNpRSdKmbHJ9 Ey4L7MgKHBEyBxbDxTO5wYOxuWe5qKQlbX1GftZhw0qNuR49bdcKfH6z/CzgaRFUaCoOVHkKQQmU MQxdJofdZp9u04fvXewskC8G/FIrCbtUXjie5brSedIzJjpfe4PS8moKcRT7BFyk8CPY2zYhLpar AXfQZ9UI3kUR66guvVV0TY62xR+1/RojQsMGjIqQnOYcFkxYvoegrteCtTxjzIL5UWC50a0asAKd lv3S1Ztp9osgGWO+3se7hP2WZOn2lMcYfWRs+94sAQbVAkIKxcTpynmUiasCDCpngsQ8Pf3Is5yo P8BofcYgPW2kjLZ7owmAjwBcwtMiqEt8TZlXt/qaCQEGhTKGoe8+sLv1+pBkGfs92SajU4GZGEoU gRBDoaiupKdStHnoNPaYgaNhaHGBWkaPC/XbnjHH0VAgEnLD8Rw1m6ZHjhU5yB+ZXwAsWFqVf+jR qVpk6ebso/SI2wis7QBFLwKrYKxONAuaHjbxlv16wp9JNi5tn4etVCWuylYqZQLFHFtz3YNf8EPb CpEgM1SKXJC2NWevHmpS2hxdA88Ko9t1qQU8LZfqmXWpBMoIl2oEVWAFXsgj5lNUUxS6Neag5Z++ QjFqw5YXIky8gNJhWBWW/fxXvHvajjVcdXIwjwmjNCFiVl2F5omPchR1TvD8E39G1dEPHCsIBwKO tmfMWTA/tHxxywFHAXBkwOGZDjgIrDEBR8FYFPlqFup+NQ9bqUr0s1XXa0xkK5UygaKYwvY+1QS2 VgGH71ueGAo4yofmCTh8jjZOJG43PygAjqarbstglCLV+QGBNYWu4nbpSlSCcERxrqbpeoZyPnya Es5AVw+tDUw39KYHxTPzkNVzLTua0nGfK5kvAI4mq5G6bU1WAmsKWZ0Oshah5Qs394qOmj/tuPt8 /zz+nuK+qgGhJ0+gzGFAuBUhmx+wIMVD85gQN7AwBjbB3z8nixpqxlZDO34BrzAg5LwU3+NrQprY VCNQRhQYUAFcnQ6b43c5mpZt1skhls21rMOEqHSdh6RUEV5G0qNiqTqFppImUMyRtBzc8V3XihCT N+knJwoaczttj5hLoDFQEXhTnLwmHVoPSZ+hBTwthgaakCYylEAZw9B3d+/vprJT8nUehlJFILSY bAtbD79rzKhmKJU0gTIDQ50Agylwo30UbXvGIEeF5YYTmmqafGg9pREUzdFpMTTURDSVoQ0kYwh6 t/pzn37bJuuHZCeHu8e10WYjaFMLCClm52dTzgTJHPS0LSd0eydf5R0C5Rlz9BSeJYS42cGUAp4W QSOzBCVQxjDUBKy6dzUN1m/JfXJI9qup3at53DpVTkLWuc0GFTOBMoPdEI7FkYr2uvW2Z8zZDY7x nVtuXZ3xFXajo6Or6BDuC2mStTXs6AoO6+paE1VhQrQmZd6nhx1S469yBHUsceehKtEHQg9FyrrF iFEyrgNwImOCxBxRq7YV9y3bhYPvLYSXDzWDdINMxegO7tncbtuKnwGO5qrhthWBNYas7/b3k+k6 E1mJShCOzM7W5uHP3rayQysI4Fd76Vo+NA9dbVxJ5v7MCXOX56qrzQWsM0m12XB3Oj6mh+wf5WR2 Z7j5HL3vAi9cR/YAMWpGZdqv7+2jDOqo2SjvJHAFNOKhV0EZKUe18l3+l+fEK0NlkuriVynAwkT3 C9BIJbN271QRCRRz/r26l+rLmUGOy/9NY3Cugb/cXfrq2rgXyZvD2AZwvjc+5cOqiivRkt0DfTOS NZQQrdbAD9ug1D5jlsv0mNlEY46XjTkilRqKyZuctVTwVeBi8OEGDsjHDcCB42F8IRdC6Jo4RVO0 LlN7vo2LAV55F/Gqx+Mhby5uNU2KLV6MPS6G1QPca2/Rk1pl52GPg6lTu6rIX/V4HMwsyQUULVLR tOUvdkAC62Fw36gNytwHxDF3YDs3Yd7yTQ3BTZg3G3X7avVNh9bOQiA3v10a3IJ9Q2PN4jfBHze/ IOTfgoFzMcTv23aZQXWoyizhgZsPKLdLZWYD58rpS9j9GzBwrifHuLxbMHDYDGIFcoXX9T2Qm7fl vVZnOLMHcvMWZLVNwhCD5BV97vkRignqV0Or0FzZ7Rhd1PwxPa3idbw5vGHJkcVbLI46//PzX08b 3Bxnv8SH1SPjwRsmbO6U363+/OND/JAw8clEtaLKcOlHMyN8DvPHu+omVXbjckStcs3J9diBWBWC iVgflJdjh6qIi1o5B1VS1gkrYXW0nBSrj8VlyWGfHDXrOM2UbJEvK1S5Mwi56ke5FeQF9gn2q9o/ NREqdTFVqA3GdwiVI/AUjuCsQDiyefHTIb4/VqzFFx/efpC3zb8mh+ZuiPqJ35OnY7L7jG+D98Is vc8yLz5Rv8x1E3VF5lqJupvXsiqNJVAUPdWF0lTQfJumVnXJiZB+ebiK22JpXo7eWlJxUPOOcE90 pMrxiyWEDbYsquWjGtlqH0bUHZEZoopwgZGcXC2uWUJcJ8AMrryo13JycytRgI1bdY6oa4FhBRqH VW+KHTysXLM7t7ZWrRNnGqzl4yZj63R1klN9LHtKVpt7uSXj+Jiwz8ljrIl5lGkQsE3YL+uwVszD kwpfN+mBHVPgY/fpdpt+S9bs8/ccsrTAb7cbfBYJfDG8fVYxJH3MqIKnEvgNmFfHxxaqsGLGWR2H ZaivjqOOtlZHCovYDoWwf2hqmXJYkhtD7aVq6+uFpAgkmLMF2Wb8biokqT8lJLnGuW3VYbVrZwBS c8Hy4pVuaKRIqQkJ0TgcRbFYBVDLL7HY77ww4wJSh3mrzX9RDPvJ2iTHe5NC48K2AtuL2AXCy3Oc UWhIDS3PsdGmo9quK7Sn1ZNRiVWOnMK7psRwb0Hu754osM9xljxHYl3azz1sk5A7rCfi+iTd0Qp7 z+PVkW0wHV9nAh9fZR9fM10L12psS3PSlUmLADvfuYeAjZzzwIrtERZOXbA3CCmUPRdswKeQaPKn +IHJFk7HD4gQZ4zA7RJSB1kVcJMtXJ5AX9jgVrfgIC5Cw/nyHK8pNAcjS5EzWWaTDdw56B3SMgfl ORdJ/OWREgOnHKRRLXNEgJICWvUXiq+rZdMtXH+e4LgCrqpftRSn/umZtrZdy8s99aWEnhFEq6tf Bg1oHg6iV+LgpRxCFtJgM9HGKeOg/J6pNKiuXBrf/pD8GUYWxGP9IgxA2fLrUJn6lMrMWzuzbBVO l1epQ/kzqiL1PqMaTjC+PSZ7RKKrZPN1s39g6R7vBjmwLEFxDMsYpX+Uu44z9vFVYj1Yb9hP/337 wURFTFSeiAiXmAhVpJqKP0qgVcFbppGhvD55LmboStR4ykZhEQkpRlQ3oFGSER1XXadsPZBwaFdJ 2fohzZh91CkbhTRoN66QslGERLUuyGc4z61TNgpJV2iTIxoZAA5XBuraK4V3TYmVKRtFpCuw9ePz ktzhlG0ark8fX6OWTsufKIXu06oKupJJnXRL/0ZKxzaZCZ9QhWX0Q5DjVmxveyFZjYUGbW8VC7no KcqSdkssZGDeGMN4uA9R1vJvxv1NQhU/PW03q/zVZ9CWeP/dhJZwjLI4tiybEIxTtGSw3cDsPJHo qFzWhRKCpMMYKJq7S1aP8X6T7VCsj4+yYnK/eTjJkYjs3Dbdy5jQMiFDvHcA7yELcCmeIL+CDOs4 EPU5D6/ca2tq1V5xlmlDR6ATjhuFI9uRxkPSAtbISPmX0/a4wc7kIsXYxd9lr6jStrU07HGeg5x7 RWyzZ1mKN6+sk6dt+l22wkykIpWxp8ImKlife5ndmSBDrYIC9R15Ne3GUpFpsGQFNvkL5dfshPmq OGM7qQgmBMgD3D4QqPJQoOQoFev3rMJTV5rOcZbCkz0ICkXXJD+meF/agxwrkDEOS09H+Q7PbJU+ 5S/zPDb7w0SSI1//1YW/JsVZE59RDVJ928T8HC82w5LAckzkZgKUabBg65I92vtYepdgGHHbMHI4 k2QfHzZpxr49bkCZQ/LlhAnFM29qA3pMjZhDxLz5ayKd4oPdwtHb2GyFWbdbs4fTYBGnZySqKt/H 61CA/XawPX9R2duav3TZkdql2ZhMDHB3smVUqPaus0RVAo1+vHH2xoKqAtVIFaeZcpxlMCkZQ/pz SJ/wfh3YFhm748iqd9ftkhg7Nov6rhEDUrZ/qJyJ8tUnPks8JVA1t51K+WZyHUN9sqqUT+Fh6rh4 tTdtMSoyw/5UuTCVuP/uN7K1Ot0hiJzjFr3nB+wC4sscJtRyfA8bnRisNMF8PoWEIp6U2nAHxLe4 xWUw9cdv/3mLvq6j205rFWCX3cN1f0xGut5UlBhOiOHx46/xZnt+g/s+n6R7TDMk6PkoXe45XnyW Dq9Nx9uqa+k+w/urpa9WETZ1MKcEOnwilO89Qw4eRQjo6WuiDZS+0HHEK6DLyJIot5IumHWTIsCK ARuf+AbcpI8Uxhm9jETI+m39umdinV4oOcGtR4sHUcgEhUgOTjGXugfXqqRdPK/iG+EFmGNpP7i5 dcjFNFdUqXOHO1FBaTesLyLA/hGH2stNg0UjnF38Z2Kk5M/Rh8a1RMEEhUl0SpUZUe9u53shsYFq ri9kIR7qTaHoHuQpK2oE5SC27PTjotEu+5cm3FEUELjnarsYdb6AewXJ1WzEXI3vtO9OqQ3DPNkG 3kGPmZpbGx/BNFQOa2S+kZLrVOsEjTmZb7D70z4PRjFEgtfv5rcWytqFnDWRz+zXRrKNKmChciba Vx/5POmGCC0RVdqnG5mibG+ocl/NJIhpyJBNYllshlOUE0KyHJVkqOfeH9IdqdjD9d81hmzZKt6f S/xGTr6cWCs/lFaoqlvtHWUCqxsoJZS28G0e51GbQBSebflapmYPgS1XNKlUQY1RwqZbq+Zpu0Kl hhJOQrZNV6hnrNm3zfFRDq2hjJYlT7EsoK7PqihvR5WGqKxwsPd3yzdG1K8yPIWgtdSvGYT+DcCG FWcKZW5kc3RyZWFtCmVuZG9iagoxMyAwIG9iago0MTE3CmVuZG9iagoxMSAwIG9iago8PCAvVHlw ZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMTQgMCBSIC9Db250ZW50cyAxMiAwIFIg L01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjE0IDAgb2JqCjw8IC9Qcm9jU2V0IFsg L1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4w IDggMCBSCj4+ID4+CmVuZG9iagoxNiAwIG9iago8PCAvTGVuZ3RoIDE3IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHVnftz48aRx3/nX4FzYkeKtTSeJOhcHt61k+zVOdl4lUpd Wa4rLgV5maNEmaR24/vr79PzwosEQEjY5TmVFQECw56enp7v9Gt+8v7m/eQF8ThU//i+H3hJGo0n 3nQi/24y7x/enffFi23gLbaeP57FMz+YTfZ9Gm0XXhxOxmE08YJkOp6FPBdM4nEaxLE3iXhZNXhT /M3JOI29OJ2Ok0n+yKj0m57P/2j7J340mAWhujYfp9K6H0MuPxxNpqG3uPWeX/Kk709C73IxiiL1 vPlzeet9cXkZjH0v8C5vvDNP/XfuXf7T++YSugrcqFM2qnKjibLZdDxN0mC2n7LR5cJrpuyPy032 fr5aXZ17y523WN/thqAymITj6XSS9qVys15tx573XXaTbbzd2vv+MUQiH+kknCaHBjsM4eksiSrE tgzxy44kIet1uWslKQrGyFlF+kojO6rK3LPuBJUn34iJ0E5QMo7jhglRFrsacV+Pl9nupgeFI1EP 8r9WCpN0HM3C6ii20DUs05gFYTA5MFfRIi3E3S/ue3AMhSoj2oFjU1TxzK9N0o8pZlM0dpDEVcl3 ereFY2/m2+wxLDuoImahLDd9yfph3I8oz1cjeWCRinx/HE+iZjXhOTUxMkvTXlLGYesaXRQpWZOV 2pz6whTW+QlLccLqmCJ3ajVlUWtfkb1/jAooQE30A53NV+RgNg78YFJdkVskgwV5b8fry3EFnOi5 dEgwUnBJGssY9CNr7XmvXrzyXqyW2d3Ou87u1rts683Vze36Zvd+Dh+Xd9vd/G6RQdn2fn23Xb5Z wdz1xltutw/Lux/PR51wRqVjitsHEVCUMI4pqsB2bKQRUEk55MJlcU9HHh8FeQpDH4xTUGARi7Uj ng+BxYI+hMnAb7KfHrLtbisgR4/662zzLtuUwc8jxrd92YzByNMp46z60GmYu2KfvcPcTpFdyItc bUFjR6zjPdCYW8eLFKHoZDPQLoBHYZ9+LEuTMTsiN4h6hnxUlqXpeJbORH30mRrdkU8vfuUrZ5G6 j8mvyGcNTadgsSJFnUXsCNyzl2GHlreIVS1JJ32HsTPuOY4o9mthxMa+zKvSylTbgOxf/TvAnuru KExQmBHWhak/G0+jMD0a9xzV2XzxQ0KmkwruaVc+3XHPUWTluKcfWeCev8xvgTYCdq7Xt/PlnXcn N3Zv59oswZ2tt77LPHDO7RoUtJq/yZRV4OXdIIAnjMZx4LNZMz3qtBLuF6s6qDyKuW7MJ1h7Yqxb Jwd4+hF2P9/slouHITBiwB4kiXyMfb1YtppvLgz+UlJ4O//Ze5N5293mYbF72GTX3nzrff2X195P D/PV8mbJDfXcejOIKMYYHVG7tjMnIYk+OpfN3gmKYi/KGN3F+vZ+vWUo1zcy0myktt72YfFWxnox vxMBuJ9v5QHA+Y/Zbn59zUM360GG3GofDDKK0acw5mkIVo/TExzzMmXNK//VWUeFU9sfV5f+fZ4C TBEgJEEBZZq6WqxeZ4vdcn3Xg8TOltEgZEOVJGGVxGa2dV3Z+nEtCsfBdNaba5NxILP2++/++CKK Z9EP3dlX3/0dwr7BLBpH0+gwjS37havzCyw3i9XDNZrFE+WRbbfearnLNvPV9sLLdgtrFhy1eIhq PG6ylEUWHluJfIQqqePjvUCmuKVXE2IKPp6k/jgVwDoLxBfU3S649ycOjVKOlabJOJ25FWpA4W4n ZZLivXGKs0RKbjJrtMfWEeRRMpBzZRIw92ehkYEDWiknytjxIuxPCp9/l23Xq4eShkJYnWv3kWQG Mfh2mkbepEzmAY59ECPjhP2dP3NWxhIpHXeVHbjSZNfPBw/24BWvOZ8/sqkbQ1Mfsr6ZA61wON8s f1SIWskX+78cY+3eZhpWoymN1KEv32zmm5+9q7Ns/OP4YhDs5eC26dgjFGZ96HtqswjjQuKksKup 8ZG7/aIe3wd23K5/UiJv1FWtHAd29nKujcQgiMY+Bm2iPoocbFmrjwA7dQDRThJSkQZouRJJnY17 gJ0c7gRB2Bnu7GXgodUrwIaMJy+pUvkRFGCQYnWMZ0GVlANiVtPKWIy6BoxUVlXt7Gsb0BALURoD afYOaLtfH9Q68ZOkO2h18RoO8x8axVAHjvQk7Aeigtjrbvr40NtJs16UnsSxQ8/eiYFwEOqcS6BC XUn8c5zUCN7qqLkiZtr1asVMnOlKs4YSzjYdTxJQ7Gw2jrkuOtOV2ClHu32I4DQJsnIPjbp43Itx d037iByGsFmL0/RICPnIpeiQgBeWIEXVkcaJxXqjnehqU/byld2XAS+2CP/V2ctX72IxOfN3cnUO DL58m91diNQVHPWDoJAoHeNSEBEosvuA/H0YKBwm4zBECo82+nVUbUctUPnI9yPr27+/viRqYrVa v1fDeb9ZL7JroKi3vc8W2qiLF+IxY2tn9CHhxWulo+gmpgtHzimDn7x4CP6Gkxn7daIOLXFm2EsS WFtrj0BObhVTIb9NO6DQRqZVSOkKAFjDJLJ1vtgR5LqViTsEw6I4xOfAhC3LYx9+dVgxhF9F+VKy FIidBdNxILvEKMaBNbydJUjHgbNtfKCNyaEJleuEXlTpWJurM1S/NcU9abB27pUqkddHQuobyxqm aJpR+WIeYJVLnU4vkdIR3nQgpRuu8Ik/DSYnBywMWUeuel95b9fbnSeew7dzcOrtw2q3vCdQ7y7b vV9v/gdbMJbfm/mC+D5lzLjwoj9deP9Y/nGpbcFX5795zNpzaIpEDleU2X1g5D8IsEhm4uAk5eK0 gEVPsrKKYWuItcZZSnvSeL28IZWCGNPVz2BaZYqT8EOtAL1VNt/c4edUEOlNNogY2kgi24ETMLIl 2BlC2UCdmBj2IwtX9XqxnO8Yx/fL3VuFcZ3O8d4t5977t0tMsKT9vMfDbcZ8PMRgk6E1nkRpQs6X 5vBJDHaI1drpnJL6+zCo1q3BCZ+mMQFsWu5KpHzgNRhLKXv7UxieCckMGG738eRDD08CoLab3gOD 4wUjlefXUdfXsFongJTEuDSncXwKwwOKmPipVZUlrjzd8EgCV5BMZjgUzCf2PPZTW2JIgukzklSM 47T58/XDYn49XxIAlu28+YrlUf/3zb/uyZXcet/ON2jNYHrhhT5G/Op/37+a/5h52OQfEaR/ELvZ JAzbt0ElIQD7BYdIyZWXyvYZWhIa9zKIIukpMy9pIOXp9KgTQCeKBfFsFcoAX6lfEcp2D8FL2Suw ceihXpQdvk5z+0QKfIxT/jT2EkNzJ2HrmnhRM/X1IxE4EYXkkpdJPGAXymXA7Gq+3sxvdsUJXMDA r7OVDsUqfv86u99lt29IQg77zu+mforlf5+f1e3ZbD9LOq0mPvRzVEo/94Owh+Qos5xKOTxEllNH ZakurQZFpn+INVJF4U8nnYS1q7GyJqzdlmsfw70rFVBiytMtkY2K0VYtiGcJYoeDsrgU1sSmRlTM 2vfylfeVCVVzM6KjLB3FtWDCFsEHZlVo/ahsI2kpcLq6REku1Y2ev6cyjcUqdm5ikV9X/YbqGmKs nJXVklWSq/YclMu3hPlsjXa1zhZSHvGpvckwli3xt2GyJ95au2fYwb75+UO43Gzgj+3XCSiRWFwf kkZdnLrtLB585PuRVXfEGJOTsrljkMju2BotsuU7iZE12T5b3PyEyCp/qwSJbb/su/Y2qW2X4Gw5 fgqDj1JMxMO/xzBQ09b7p3oHTxKJmT6bqhAYmxJm41P5xn5g4XfxuzG1dqi3M/HCGHMFoWhk3U3Y oLcn9h+1ELiNRZwA7thjnprk9yMrYC0dQhe7fIOe7Hp5wzRb/azmmqBfG4WZB2Z+6S1vyIVaLfFm EGMPIDCx6+yFl9tBpqLTw4bXj5iKdfm30hh673XBqRevxZPqJ8oNxqYunMVBIFE09tPrF2VU/swE 2Kh6VlNKlCiDWUzBmYRCVFPmrHfrlS5X3mtV88m8KOVY6o2IoMskS0bSiGqCCyltFXrHNSDvkIbi 3Y5Ue3Lpc6kbKRTZ0vM+n+7FeW/moRfHhAHgTQ4p1JVKkq2a9cLEQYKL4iQYz2bJsQHqepM2xARz BbYsZY9Qxh3gYBOeL8x1zaSSamzH85uM3EXx62Dun6O3t7gkZUqr8Gq14tqwJuMHEmXgYp0GmenW GWmZO8hMP1ripbiPLHRRpArZYLIRq+tgIi/rKS4S0/cjwL1I/RAynwuaIa0kaO3o05Sv0ehdA/uP EV1lA0wpVNaHwS66ahwMwWRX4sGS10mxdI1LEVhWKm/YpFgin40uwSkoe82pfaR03PLWF9waKQLD beiSqhzFQAUpMDcmgmoieJe/Pn9cICtrTefletS+XEv3gLKkiGPHT4jaYrEtX6ulclSyxe1fsHkt Mc3oRvQV+KHTki1z3jWBFc1QYhoRJKGbac+xOrpwVqyihkkD1ZuLA2qnvs3orHIq464E8GB9qdym 0I+sUGxV5G1X94qeFMwqglkVnWFR7m6TKQe5LIjDrm+mVx9zfVMZHTKtYhKAQ5lvAbJPOYmhIR0l WaP0NNc3Q1ppDrSvb9uM0hUIjjJJuAJdQywSLgsn7kfpt1RKWWM+wZkpUUlK7k0xC1BfgWJ0nSnP 2wGkNtpRbBVCS/GRsGa9egdCJVBlXaCuKcPU7uccymukzgHOMj9Lxt26zttLSstKV9xWioewx7ZS xDKdsa2UeslBSiJ3Mqrd6bbQ6KbUfpJ2WKpSNjbsNKfU5Oq0UhUamFL9UhYq1QQrKAndyUg34gbB GpVaNpchNZJDbDw0AkSj3NXAu0uJjQ57mNGHR9qasiMVkVhIc4OM5KnsN9QMsbapwldSKTDuxVTW a1Jpikk0eXXsp1NGNsqwTGNptue4tjHWtT7bS4qnONuR+T6zXWHBMBHQBxoWCAg2LF13nagjXtNT fWIa0VdR0H2u6yZG1PwU05GixGgPkjE7o9I8uawZ/uVW34AYp4Q0hqNR6RFTtIhMW/MU881wP9JM 5gnG0jty23FkrLKVcmbdLDeYVIvT96awSs/vroeYtRGTVZU1i01vHoFI60ihNCVspe7WEKKY7adU CCkOeTsIk/Hmv71L8yMpy4e8F2Vd7B5a2fUq9GK3zof46rLKDF+PBGADmz1CW9K7POolldwRgNVH uTix27PKUgkQBFmVKem6EZaCy2IvzR0jQ4hi7pYsiWIfdtVXsL3sKoqXSyqLfcIzUoDaHstMo22i r0YAUkoy2ymqhF6k5T4zZ4UXAXK7MmvX66URDmoCe5IFUq74eaQqeJx2LQpSyZJmzHoFPVVkKXsl c6hKua5NDadZRdW1cMJRouiyXy3rjCj2mXiP1VM2+7VCygE+1ZQnpvd3y2u8tdv17VG1ErqaFHNM YcTsEbx6jJKKpEgCNq0PlPkazajRnLBpPT0l1ZO07F/zW1IUVfX55Wr1QBVMsXLtJF7LOXCUphq1 H2NUW1ya7DIhLv8Zxi7PUn4CsDTCJj1LTyKAM1LmkUqx53aHb3d4XBms5s2as9X3JEv2/dfL7UIM kz/ngqVyZY1Xmr2SPv7AuBL1kRc70tmGOt+CbBF/QuyT7dMpCOAUd1geQaz1faeN0RBItDDqvchy CdC38/t7VVxXqnzv+L+O70QiGFxKNORB+HLmlxIW6nFspSrqEDk1pmpDZJh9CuOO8SdKK7P9BMa9 H1nEfD5sMzKplNWDT278wb/XZFmwwggyeVSllYMIOKb82yyaeZEh/kgETHQMe7xbqUt/nd2v1j/f kjNtZteTQnWHoSqElvBmDQL3zrZpWotdwVhLyiPg3COhrzMLUv6cCIVjExgGX/96UWUi3hcot79K 6KUYERb6wCcpM36NsrvOJBaaLzDo63mTzxoc2oPoQesZM6w+BT1IflEqxc+OBtjDrn/9yLrLsmtW OpSeCridU1v+zZYUU6NirAHA+9sTFtTFtTbmtNLIEzOSsPIURhWVLPWf9aCW9Ftt69rVuluBr83n 5OVKJcLXwrGuJflqR9Ux9Tc9yVtYkpTwtwf+ljzpT+arDgiFjfyQtatM50dlWUhQfuzKPZVIyVen xpyoDjv8mvM4T00gI0EBUYLVohBELGfxkiUwlpxaHacpstASmnyUJSgXF5zVM3zfJXE5AVjWjyzB 1YK03QZrye5qtfxfieqnRhpWys38bnvLkYIAb2+3vJUgku++ufzuv/778uW333xHXPAwJ1/Y4H/y ehW7H6Gy6qJWGvkn8tlGUwn8D8VyIY7S0mVXjy1vSTiGNKKaEFcrB1z73f21qgHeIWUCKkbuUmjr FZsRBYRBy8GaHyjyPyL+iHr9tvjIAetmrmSst/5xRupDG4d8t2vIOnLWh5LguL67tlvYwlQrHUn7 ZKEOAfE8wQyXSU8+QqotjuiRY7eVKhZs3QSc5hvyYYFnWQAOrC122PdCvJYJr4+W75L1ElH8QMqt h9TDkWPLhw1Linx+hRS8Izen3bc3JbXX5pfPRd+QdaToE7lARSlZRNwkUKfTqpQTOa82Az4Rq3sn laXVAbbq3Ded95ldc0rKbhA5s4aeMrM/qpiFBPeFcmYyfgRMPhwiOLSgEZpE7ubJCZom60hBu14/ cPKxzi95N189cDbgTRmibDNRa3NOUZat9NUZG+s7jpybr6jtjFYbRMzscTtSQbzA648sZxwZQKR3 QFogpbsNUhat0IKUaxurJsORQ8ohRyUF/qmt5IaqI4XMroUFrfbrAgxGlQ1hDgwDKmJS+8rrx0pV YcF57MR6ucnudarD7u0mG9aAVCZ5ALl/ItxOgSOJtSSO1cRalq67IvcRzSi0TjMSJmmvgmNiLdVL oxBjhID3vBGK2Vj03hhlU5mmze67fJqy0vsYF0ozot3+0R12HEWWgx2kpvQh6+oskuMqlrd7kWGz Ibo9CNQeI9OTuIwD3tRyJXUtBFPvW690NJBstS1Akq48tavdeRpsVx6xwa5z9SikmUsiW+jTK7wa 9qJqH6b1qDMGALlZPwgKiZHT+Y5CYvc7xMLusIwhRo41GaaqgjXwm26dxLAT+OW74uOn4uAOp73I clV277J/leK6CWaQ3ZANFM2303klDT3hh9r4mOODbb9OYeQnxE5FJ1dqmdzjPmS9JX80+9fbOQFT krtmxlpP7f0oTNJUfx5i++FKLduufLzBdkcoWVJKOKPdcH6zRGlmdx2X86MWHufirpBWAqsf2Bsl KTsBx4SWuHQCaKwfWbfLu4cde/MH9tsq8ENZETfZTw8ZSS9S/+1hwdEH25uHFS5wPA3vKUd/rdTg haoDNsTkiDgSJU3xXllef7zJkUMfVV/n9DRhP7LE4CIQV9Y4M9jaPiM3DMIxhj6xy3gvX3z7yss2 G7ziQ57o6cbd9Ookxp0oOnwspenerhS7b76OUoj55gsraQ+y7tebHXOdcgqLt3OMchfumJPCTWAv hw28/vNf//6fX3vL29vsWo4nkAgYwkCBwYNMeetODE3HTmHoOfaL2KryvvsEhr4fWXvQrmxpBO2i zv96t7A5B08aL5cbyAzVH29cQ+IQgngSiPO1z7hWNoACJouLo8M/TxgX5ApKW5I/HvfyhVCqksxO TyH2I8t6s3ShNeX18m4261sT1m4KrJmsMCLC0H9zcJE9E2poJ1hoenUS4y41IE5PG6rSFEeTpT1O KrQPqHuno9lzJCQOdcZ5S2E9AgQ27AKtDcAh5flA3k9rBDD9esTIH/ayf493PvB+wEl0/aS1NTl0 VBXXnIJTxEAeBhISJ8W7ImcgL6UY7i3WNZLXShW/3NVRETJJSg49ZqtRTFnNiMCzWw420rcoYaZv rbiVcJzdbOZuJSln60hdwRhLHAdFRjzi7jA66ui7/J7EcUyFYGnKPCcxOfGMpcY1HuEymEjYh6PA 3hkt+OVUAuNSYkLMUyvuUWAhSAgJtfek6JsvdLnWC3c0Daot81QM64VW6HLPuR651i0fHAnmBi29 NdXcvtdy0j5uOMEoMwKFaujtZyrO4D6HkzMpH8N34Ux9YkFhcOxVCsrSnwGAUkdVPRXGlHaUF20L I4IaI674HfWJd8gA1Z95R/aLqlH1FMLIN7YFfUXb8g7hSwFCKr8j94Oppca2oCmVttUn4YaUhm0s QCs18gqs9gmfFZkr3DpiRBBaIxR2iBa57NhbR0nvyEmEtOQkWpNZEhJ7Szud49icbR0FAVEQoSeT Oohi6pKxOsUUKKtuYUS5uBNp/BnKWSrpYjaWj645GRnYbeH1NFFP6T/GpkN5QRrixKbvvbPvzqUW b+idgVP1h6X9gO1J35nbDyv7geIc+ivKVOkP+IFVM69cO+5194GHf/Au/8NT2ZMi+K2dMGo670RC 76hZSHFEEwqHq1335ezfHFRU9YqfoO0in2z/KIapO+w+fHFOfC4MJBFbf/OFYYV7guNHykxy37gP X7p3DGPT6juvvi1yT/yhom1mWDzRXME4lRPUgog6UhITHFBMcUqwblWElMAcCvozIpRQ5SDkRLZi vgnSsiCoUomS+XN563HKClrRidILxhc+4IF8Frk/iAP3EIHAOyN1KPbOyHSaeGffn3uJd0b/uf+D +gwLpvJtRUYCAcVa0NXHmDRnfVSGodLIiLhP4omyGO6hM7Figsj/2yfqV3+h6fwlf6Dw08+4OToz V7/SN82Vfv7qTN+8Otcv6rvymnf2a25B/Of6mwt5cHRGetIzvhtXXxzzZnke1PqodQMjwSpYqgaN hr5cEC5bH4liD7+4OvcV3z+HFEgI6Ah/rs4/OR/BdSGISx5pIYM1nMrgKBdFRsFWkySHBKJIhs9M EN4Kdxhy4Q5XY/Xj8I3PwilFGPqESxjDv/orX1/op2UG8Y3iJM/rm8WnI/WmvsNTI2lVX31a+Dm/ +CK/3dz9hMKsqdKt1VGI0i6jEEEAZKCXhBpOKX+G9HPvh1FRBx4ee4qOBD6TuZD/M6v9rlHpRbZf nSUJsge/9LAzzvy+/rd4B1IgaKKeFOoQ/6n6q6jkq1Q/rdv6VfFCNzazTOdZBo1Jn4uU2q4XCr6b jxQMGM/iCWXTyr1rkuiRMO3yn/myUWVZIkW6ZA9VaVRUAvUQqhNmD8ue0Tk1V0Vi6cczNck1B+W+ 6HauoIN/x0Yaf6nFDL1lvmsWJ6deOYsI0MpCXxxYZQBrmdZXolLcsOrh03xX5EKn3Bud/UZT9O+O MMZH5iB/LhJ62kInkfyciUEuuKHT7pWaqGsbImD7OElmQbVRGSLQYHWIzOJelmotdLrbF6JM6LD6 Mzq7KEp3oh9hrsOrC31hui/Dy1voBAZZPwADC/xgKa9Jl8RJxZx1aPlhxq1JZL2z3+bm3BLEt/OA 3EkOHam2KexgxlfZsUdiwwvTJehnXK/Of1fqB+Cq1o9U1Zl2P1lYN9kjVX+yOgJnv4eRTZMwF285 5Zb87UL7jHtb+6zLf2BA6AqzS8u4zEN15yu9OtBTVhFGmoeQYr6GJO6gs3hhqv7Vn/V9YZBrSb/m n4+EWax/fAHHKl/r977S77E+8DUSowWGdRMt0CIqUkDcJxKOgr+KB51EhUW5ibEJNvwwjUhtKDd6 hKxcnQFo6IZW4fQSJpSmh2Ch4vemmweUeGGoyaucuNMvlb4VZHAIoOjMOIbaN/rWqlmI4echDI7r zwYZ6Ft23ddrufyr1gQeNo8Vl3/9vtPRqmMiCkiKbg054k3702ACyFLAjz/2l0oKf8+PWPoFE/La c/NzDCVNl3+g2CsDiNTyUhClfbOVggxhSLpdpA4/S204cbPW4beaRCkfOFpnw1CYol2VMJx2qlOL k16T6DlCpb+9MmhAq1mjc4tL1+9LE2lP72OQJ4G0yFGRzifqO1EuPifjPsmyZoF6lGDu4kyDAkeP 2oyIzkFARdIQIGFZNDr7VKRQqzlkDA0moqa+U8pLnkSHGR0nf8wjssHgSYVTeP0zJeDmO/OV+SF9 Vd4J6XvP9a99yhi3CCpun4Tuk2RdY0FXodKyocXlS34fSYJcJrlZ5bWgQRK9YnLRJy1o+rP+tqyc 98gUNhGxHpJQXCa0WaoQ1aYZlZC4OJtMJcW81PvmRuliU6P5NEW8QixlTyuq2F/TSqZhJwT2QrPb Ys0rA6M+PR8xIDJszYIST1kfOC+KhG5NQAH/Yuetrhp7MM9nIsOI+SeoeJkKonQRFcZfYXb9pbn6 RGlymTzYZ+Qp8679GmGSpuxTlW9lOrKf3/MD2kQg7dpXWzuekN00nYnNudRxVelPbaQPLZeIuzbS +eUVRSY93deroXRIL4ct7HeqSmq/l/K4uyHOxCJOpd7hqJgTZKpenV/Z7QXEQJi+DYf5fCHs18TC NAPNi2sBnGccLvTkr8MUel74qV/rsTRLin4HYaAB/ZzRF/qLIjFswvn5uDhW5fNNDF7Op96evPKm WWKS/mXv3TK5SVGWNAkS+GsJ9WqzutfOVtwJ2c2qb1GUMZWU15BngUPNIuditOKvWS/gg+ZZ4St9 zyAls8poERuzgjQLl+zAZ7GglXKnDqhBw6zfNnNKbL1UEsd/U270COBrRdZK0e+KAqDMxLVdkhS1 kVr89kcLK3q35ezCAqI2fegmJNkVyaR8vG2TqDm1cHX2XM0xNwMQcTHTtBiYqAWVUigSs7H+3eZN SrexiieEL/BftVEZqz1s26PcD3Wmok+uFDKwW5mvFbRpH1TymVPxYDV1uUqTqDG7ShfSj+ruX5vn 49y/o0Hcv2EsgfkF929KdrbNjyrZGHA2KLHGbElZEDmhkSE27t9UDlWlEQrc46DTV/3cvxHpWazb Be+vuVNwn5k7zi8mqd6YVQu+X0k1x+nF9ib3noUpVm/Sgguu3xDjBRk7CQ8Zv3LIvohkzjR339k7 Rdevvafctcb16+45F6JrvXBHkVD0/FpKVVPWZ2z74zy/psfOzWiuF6Oeft8wTnwZc+2b5fNqZL22 eGG5Nh5dVhXn9xVJcX7fJJUyGvopDHAVvy+eFNO2fLJ+X/lc9Puqp5Sn17Wgr2jb+H3Vbxq/L3QZ aqzfV1OqfcrQfLzfF/qR4oLX95jRyJ2+djRyoTF3jpHZkfvtoswqAgv+Xk3xyqQYG1xBqjtl132J c3fuXqlSTTRF5cS6bs5eCiQxLbB8a1Ny7ifFYWb0WdGJ+R0g4PScvbYTZqXNO/EEzt7ubRf59KTO XrwkmunWxyt7DTUKMQhNfbC/99W3xU1UyccrcsPRRRImYH28pB+G2NTN8jNyhw8p3yBBE6U1oYpv iTXEVYzz2Dkh6jZaI0G9fLximNU+XjZR7E/6+XjrVPrTtIur5Bv5Vbsr0FsMlvPc9wmwVXtCMddh C9EgI//688/1Axo36o1EsRUQF1jLvSjgWCeqNvOcMKnEVQ9TMLa+78XwPsKxXgT8V+dfGGP/LzQp DmHShz/SL9khaZ/uLzRNdh8lls12YxtlOKT0ELqpSF8Vu5eo6g+OTGzc6MVrbDSPO3daZFfHxo3C CY7FAjgirV1wTtc0dhVSZ3LhOWOM/ZlkyajM+F7gyAspWR0RQkFjLjTN3oOqHMWY57hjQofUCSEx NVsLd4BIpGqVIJKqRIc6KGIkVhIK5k0LrYeYUYnQy0nQN0oIyTxTiI0j4Eu9lqMh23LhjlTCm2JE zQOxQs4CFTqhKX9OCntJbxxAclxwEMneoa2+IGniy6FuGiTxuRgcR3k8otokOC6cUFYiB0lIjANJ KXsUC5JSgGU5OC6dCcyS4Dj5ZEGSfC6CJPWUgkWuBX1F2xYkyW9akOSocSBJUapAknzqAZImLA1S ObmAk44blBwp2UGBjFx6rLB2EuBRTYBVW1bMLa1FYcnvVWLkRCJTiURxqEmd3dkXNrGOUmmI2fP/ GTbZTgwBm7q3PRhswsJfhk1ijFVoKarCpobQOOJYKUOEYcrBJhKhQE1BX9g0ATYlxTSNoWAT/e8P m+pUhp1g059gMsANpKq9pYHvnWFWBCQBPPJbz89HWMcFcnBPTIsgJ2CIPG2ugCF8BUxK3TeYFHkM FMWrhdZG5in9y+6LZnujM9OGhMBjVjexNNqkXo+fqAYz4IG2RtTxM2XHL9hBfWUCHYlFmbu+sb3T IeUvMHZUeitf5m+PoVzs3MbAmgcFEQhonMmmief6QWNhNfZW87Y109rWzJv617DCFsjkXlceEZUw K6eYsHBX/S17ePRnoKMgTPOHX+TqQrve9IUJv3muEDQXLRRhxCF4m+j0MkUlpFkzw7VYicVVzKk3 Klq91s1OQv8Lg501wGckGMav1fjSSUT2D3rAiBMA8+t9hX4IGN7c4QTDNW5sgvOP6TATztod920n ElRaqhLuyo3KfoLadh3G1frRROjo0icMn8g2Wx6R4M/MbWRROc6YxHIb7shDn4iXgRkswsy7IsUI hXlVxJUr2NbMl3z6qtrO6Ca3C/WJXO/QhatzPQT63zziC685lEEuNECJ3r+ZzZPs6SBZv2Lu6Yur c72h0y/pzxJ0xNPF1vS2S7+iH9J3jPzYoFvTtP5tLVTEHcE7fUe3aB8+glfscDDR3Y6eX7JzIrKx KdIGFhjXIYTCDq3l+KAv6YNWVso3J8qKr5jmIg2tgwfMJwQfPG0I8iCoeQrTppXov/0ftqH/IApl bmRzdHJlYW0KZW5kb2JqCjE3IDAgb2JqCjk0MzkKZW5kb2JqCjE1IDAgb2JqCjw8IC9UeXBlIC9Q YWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAxOCAwIFIgL0NvbnRlbnRzIDE2IDAgUiAvTWVk aWFCb3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMTggMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERG IC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQ0LjAgMjIg MCBSCi9UVDIuMCAxOSAwIFIgL1RUNS4xIDI0IDAgUiAvVFQzLjEgMjEgMCBSIC9UVDEuMCA4IDAg UiA+PiA+PgplbmRvYmoKMjYgMCBvYmoKPDwgL0xlbmd0aCAyNyAwIFIgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBzV1bb9y4GX2fX8G3dgNXK1L39Km7TYEA7SJtDPSh2AdlLCdTjGec kZw4+fV7dCEpSiMOqZgaeYGsN/baR9/lfFdSn8m/yWdCQ481f/i+T0mUBl5Mkrj+81SQ/5ID+fnX kpJtSXwvCzOfZvG5zzblloQs9lgQExolXsbwfTQOvZSGIYkD/M/ND7zv/87YS0MSpokXxfJbNsrv JD7+wc/+jF9KM8qa/+4+Teqf7oeAi18cxAkj2wfyyy2+0/djRm63myBovr/71+0D+fn2lno+oeT2 nvyZEPITuf0/eXMLUD1R/CCsFFJIw4DNhfXu13fkfXH6UpzIh2J7fChKcjgeDJFuhkprBDAhQJr4 HpQ2BKpIbTOU2l8MkYzMZ6NRJYUuWeSPoAhVEj2oU1E+Hg/l7ktxQ75+2m0/kW3+VEJy1aeC1ALd 7nfFoSLV0RC9lRyDAJaYhqmdIC2MT/VDnSClT9DMoz6Nhz5xQZBWPtGH1YCadFXpE/Ng5VVVPDxW c0S2qalL6wUUDp/SgCTzsFVHmLqhWQ2cQi80GsRgMtDnAJjiCkT456Zltdn+qZVRkHkpywSSzYBp VauSmDqm3VXFKa+KxhsfT8dtcfcEniqr/FTtDh/J1131qfna/e5UVrW//rQx5eW+Der1HLAE4Qmh houze4gJcfIgYahZK8LoeSn1UoTMvjg3t9sL4jR3UitUPSedg6qLWfndHdi4JMcD2VUl2e/KylNk uOkyjrNh1lydNM28KMwo1NmgXYM2/dBLYsG5imGN4ugcLmvSMCP6j7PEC5FytYalIJHe2THGbCQ6 xhAmHmc+3M4PLSkj8gh585w/PO6LUjEfnrCOzcfK2CnzvcSPMsLxnRPV0kpLGdJk5BEr0FoSeWlm rTXXzBR3sCwJ8xZZ4P1xvz9+rcNN+fTBiUVF1At8BMkBSMX5RhY1O1zraIBGkUdZEg2hmKbTZbGt dsinCYL1l91dHbhPRUGKzh+RRpPdfv9UVjyqC3luLtVR5gQfhMyLAhSPqikq4pRctki4juPUi5lw 0Fac14/XM2GJTEyNzy9GsCHUh5JugE7R38gdZscinTvIWBTDRaOMNwoUKNKUlgmLUej5WRCvIG2J w8RDX+esVF5OQV6QMRrF2cbnn6FR0/3dxQ5PjPojiawT5V+OT9v8Lt+dbkhRkXyPnKL9ePP8uEOW Sv6Vn9AroMkNYT4qwOHH/+bWIeLB5COKz+pW2bl2VsACL6Q+4se5h0U7a1QVbJR21rv8Y0HC3wUV X2xp9alYX4kGEVpuKdxlAM2NA1FwOTUwCeaFaXpF/0EsgGBqfTVIzmVta3EfFnmMsdAybXp7QN1+ KCpDkxrl3zovmNIv9SMv9BOE/Q6zkYJNs6gXgpihomF0CHEiu5KBpctR/n7K76s+1fQ6vu+LfZt7 9b/+vnhE++sDGsJgKTaXk3TVmnRwG6mbBuuR1HVQZLCmqUdFrqVQzcu5lVnaQH10CIX7KFCkdpdJ G3xMZmjMac/U5GBNc51YpyvRMYo7WJYE84/jCVF5X/f+Slle3JB9Uf2pRJ32+HjE3z9uH8tmHuLC 8lmMJmuIng1/BLd8o5Mmi9FkjTG54lAspfl80xOV2WDLyjMDGtXtrWSIT/GHkWuaUvOgNU58nWsG aNVHaYyE5JzhjXKlEahvJD/cGXrEANiFTClI0VbKEL5UYIqMFuaMKMN4NKKss+y1cAaHZWnlkg0c mLjoCg7AKeobWZMTE6esq58HUCbUNwL1neSYsWyPh/vdR0xb7kheNpPQ33JMlJ1U/Ax1CziMkQFi vfBMA9PADfX8IJKICFMClsRraKlG6O761NoN0cmTrXBCFdJ6qVEKChiaZCm2PxSIiuIkaS3Saoug wiTEtO5ML3xk645tKMYshVvQhPtBOmo1bp5xjQy7Me2JJoHIuKI5oP7Z5FX5vjzy5Oq1Yk/TrT+A NF/MoVHqZREDEfRBKta0uAqx6eKftyZp2Itk8FEUoKxZWyxuQCmR+PL+1Cvy9t0zrTMp8tbQjKzy TSpoaQ66d8+siYCnonpCE+MOA6DTRH78QjTKwtjLaBoRRcWK2Utb60jUNHWwEhw2qcCdAbb55gju +a+tXnf13lkFx8+3n/IP+8JJzhBAZgEyeRWqIrOlqSLE5DPB1k1/J+NyRTGb7/X1hOT7ebBqH/3W +ei7b8YeMR0I7AxReISKXq9fU58YBU5dxSh9QoUyEc9HRvet9gpIEl4hPMIF6YktpUjFqReZ4wQI RW3spxdSoJHInLvEPFi1S3znLvH9ei6hotfr17FLqFBMXeJ77RKQ5HIuoeLUi8y1S2CSXC95nylP ZJBfJqFEo4DFYhI2oT0JipdvjlvCUQdLiaOXdyXqVR2xmFAvmqCDUeVbrG53m9ztmmFZWx06Gu1W T/naSWsYfbM4qPM5VcKK3Y3l6iIqyH4GxazeP293YwI2hGIVSCUUHzP5IOEV+oTdjUEZ290Almmi pMKaUFbnma/mSkjXx8fCI/VTLF9iONxIyGikYMpXVglYFnhZgPxaQLH0xvcFirt6PHkqPj8VJfZ5 4ZH1xKYdyJSvEQGe6U2bGjWFIAKCW1+8ukx7DoC5/+DU0WWCM8+KrDQtCwV/DqpX5D/tERosxdR9 41OxLXCaBlXz6figqpd8eKqayrD70rMThYsJT9Q+z/V8SOg7zCJsNAwIz0jhxpRnpXLh3ANgCuWN +NdJKolt8yRKaUZ0UGSodJkX4dATRoMsFVAsW211AtKxXZvZ9kLERhyXHG+fD6JVEyAmz0NRTJ1j n+L0Y2dTRuZtqjorK+KHADkSywhRtsfqmjjQk5Q8WDqWlBU8htNZ2LWJhKTOZdwjIzcNpiOl6VoI kghSbKaIHMwi8THmgQEufeojeUDBpdDAyPdMbWmARG/WkgZaJEZWbaorK7ORLKDIpNXVZc5+e48I h0dvTpUWLQ90ARG7W1jEuj8+YXWlPZVY3jTFSUcaLrIf0RTCwmNtedeTa88HsBMVx2qb9LJgkf3U Hy6YoqfyWdBQUPbIjDmByAdjYapAVFx1aTJLsFHm+7y5p0AZsYap4qxYQ9oUomLEYtvhGHZb6wm5 E4WJZKKDZhkd2wMzxI0x8fFYqGJTNLi0MUX1Csg6jAnHsTJMoS3TP0fkJMqzsINlaUi/Hb/ekN19 E2jkSTb0xu527Umtumh7yO8KN50wPsfh6NcQgEIsiNS3jJzpwC5t9UHixVHEm8EWCaEhZw3oVJ8O SlObB6s/1rcYor/0yDBU0etZbXY2q8v3xchwAMVUv9cZpA/A6uU2O57r5CbjOa79CepG6LpG6eE8 WCsZpQ/Q6/Xr2i9m6XfxUbqVyBy7BA75YbN3bR4xC9VKBumhAv6q/qAgMQ0TvTE69q1sMoJN73I2 3UAKt2/gSrIELVEFoF5UTvwg8NG/qO1fRWIqKtvNm37edPEeKH7fgApNEdLS9TAO3KRRyuvhCSh8 nm9oOVZtNBnKobgEt/X1I7lRt8cFKpnhzkJlvGKwL/K7euBZrx6IostJgSUbfO0TraG+qlsfVKhc Mb6F66sgq28HxEinb33XX8mcCesVbnecM1XHcaeN0VWV/XP9+n49yud2w4U/ygrsLoB3Z+nqxuoz Yb0ifzs/RpBz9dE4vd2od7RIIebq/IHWoPIEezIY9Cn+bRRd3EwSxEAtUIHpOdBJrSUmajooy6Ql Yr7CoXSWM5G8SVBdglJHUbFG1O6YiOTgBa+NElfJDmAqyhuBM1WeVfZEk9TzcW0N4VAsDbw3jhL7 yuoBwJdqumEuhat4RkAVmS0d9BPm4WaitTVVg7mwhK1b3cujP+baIypFWIrepK13azemtt6vnpqb J3U1Zo+oWijXiys9olKk0hLV5biy1uE/N73rSVaUg0GMVbh0XsR2E7Ol0udBw/QfAeqgrADwRKw/ vn2xFTBGsaeZxRnhslyDWhEHqNCqwiJLsz+OMKaRrzYcLpd8sMreYfnAnHMtDjfzsXt9Z1IP4lWl FQZeIhZTFSQj9p/d19OxvyQG3Fke4aUMlrmh66l70MGyTMDa8/L8HqLD8Ss4Iq9Mz8xb5ordGxAG UBVlLu2EDNscobj6QIGytF0xbHMk2dq2ObCZ2sCytCuLEbuDi/DFOXWO3ijymGaNVlYvRuwciqUg rzNiH4BV/GJpF8Vl+rime3Wt0XmwLo/YDSO6nRHyFfPgHOrL9YK4ns7BhVTSV1Vsepsz9dVRhadb 65C+qkKZ6P+MHKE39lfulXChUj7LG2hUL7XZmZFOajIz8rEkhiaLwnCXM1rzzGigzAbU5AEUMUIL 5sFayex/gF6vX8deMU+Q6vQfOuxuW3HqFSpUvdRcewVWiBJxsbcCZeEUk6GbhnO7K6tcOlQKa1wO ScYj7gVP0avyndD0IssMDOzno87qhKpAGYUtt/bPMCJYx/WELMG832e8cleEIj1xGf3gvZF4kSRP ahUoS+sH77KkeOXHOVORUnF5nlUkECzE9cCZuPpZkYqEsoyC8GqWOMDbOJ3u3vPr42e9MQJvesM7 QcWNf6a9/x9+Y0TzFobodyenAPlbGPizGdXtpvw1LJnM3sLAWOqx+r2sTi1Bm2Dz1zDooEj/+FFX 5UYpX17SM8+JSzulC6Nd5LOBUV6uASzfw9AvBJqtxzFmif7iexhYh9nI2ExT7KGxiZej9IDJv5sQ K96V0r6HYQBxoiCVNtBx5JrfwzB4JHOy/wN4ypZuCmVuZHN0cmVhbQplbmRvYmoKMjcgMCBvYmoK MzU0OAplbmRvYmoKMjUgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3Vy Y2VzIDI4IDAgUiAvQ29udGVudHMgMjYgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVu ZG9iagoyOCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAv Q3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKMzAgMCBvYmoK PDwgL0xlbmd0aCAzMSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzV1dc9s2 Fn3Xr8D4ZZuOliUAfvZpbSfdut2m3lgzfUjyoEi0rY0sOpKcNv31e0CRIEGKJACbkpoZR26U+PB+ 34OLqy/kv+QLoZ7Dsi+u61LiR9wJSBiIr+uE/EFW5IfLDSWzDXGd2ItdGgf7Xo02M+KxwGE8INQP nZjhfTTwnIh6Hgk4/nL2D95Wf2bgRB7xotDxg/ItI+VnEhe/8G9/wQ+lMWXZ9/nLUPzrrge4+ME8 CBmZPZCLCeE8e9fut9HkgfwwmVDHJZRMbsl35BWZ/I+8mQBI5fH3QlEff6QFhcYOdWmwDwqRUEbP hKInFUqdiAejnVBcx3UDRiYzVTwlpkI8RFdAo7p9dKGKYBqRxxkJd6hy+exQjXpRfU9uktWcXF9e wyq/PCWb7YZsUzJdLskmWX9N1psfydX1X3SMr98omeK9V9d/01cjO1V3PQkM2wl45BdPkstXMbqm VDWNzkimpf27nhMG0uh0hUqGVrUdrO/JW2h2tfkzWZPFBvqeJYuvyZzcputM4YUBDKJcHjssiGGm OfYT0G4Qh46H6Fn1436PgXKHUW/MnZhzPyIqLsX+G0H3n5r238g5XUEXcgn9iMZdSEpPHDLmIuI7 fsSkTAxj7vY+KcPaFGF1nUh5jcySVFfkoggYzHeRa3cWpWXbupozilw0jBw39HmBxNC2N8lqK8L/ vohfTe6jvLbRSO5dcmMRdbiH4shEboNkURnxg9hFqeV6hoI7RFBQgB03KrRDOXhY2EExjAtXt2SV IhhsHtPVJqkkQxEdRhYlbJeVUwQFGqMgL2zLEOycTG+3SNm36RPy9HabPDxuN2NSiW1DJGzOQjiC 6B9yj9AKagM7Z8TQ7XiRjXMOk7PL/GQHDWUY9LhCrS0DL8tKbVaU2ixPWEhXL5ewoFjH89DgBTns U1Bu6DtRLCNvd4DTtTOjsqdMAkHkBEzamQLlMAGuAgUp0o+ZYcwIHILGbva0Xmy/kUsEucU8WU+3 C7waIliUZUegwG2RXNERy1qs27SNKqBScr7nuDFYk+NzF4EXOuB3ChqlhTFo1Pb6fUbNzLPavpXd kYyBJawJiupNYVszxbbIYkXeP0erCO9RwEK/jZliLjwzZKhvFZGOug3tShMSxNgkyXohUSa6SDRL CiSVDWroVrf6r2mWuEK3/ZBA2zHq1yHpGt5rZ5Fsb/WFJum8kWAzxa9ehAUdcEJC87iIFw096grt cfZoITHwvztv7ZUYwpkfhGFdp4rlH9jM/MjhccMZof29jGgD3KfppmzHu1NAzQ26AxwLQbLHLkgD 1SN1cX0kgipAG/zJEN5IMvpd/QCnviAVDTW5v+JxWO/hQj1gZCHUR50VeJ4Tg9sMfOgrKo4B8OQ9 RwmW6RgeD2KiSMc7XWixbZpeZQSrzIF2sIq0l8ydIeBRBs/yfYbDG0Vq3c6+30Q0OJrMnfrOggKO PBcVvZeC5NA1MfMdxph3Ck0LjRwqGwVdow5RnV+dvz2vV+ZViq04Pmyqz8jQacCcMAwQCxWkivoa gXlgQ6KuE0WsoNgUKIe2JBeZggaRYXelX5gb6aoMSjksQ55jcg86YZ7Onh4EmzBPkw1Yri1SZ3au B0LhG5nOtiJevTTFxThFw0wCO3GiKyW36/Qh8wk1nr4Y0ew7ODNHylURttjeQfpTH8ed3MfB+/H7 Uz/C4ZwIEnugHNgjcdiDVpma8h0RIur57PMq/XOZzO8S4QCbPDG/KHFGffAbLosxzqHgPKohgfII PTC1e7R34NCOBgU1ghK29g1GjNS5EW1qttYFiCIbpUtL4SKjqRWoycWlGona83EDVVc5JQljBVWr +YyeNVjT1YVInswPXMdz/WKcpRWK0YyPUd4rofgc1dQp2LEHLjrEfNXOpXQbxxhR6F1ym6yT1Swp 4g8a237iflSZBuvSmmwMfBWhorVDOz0HJ+eeRGfgow7hGIYyrOcwWQbNvU3XD6DIvyZVHQ4w5ySn BWpoFR2WafcwxQjDBEOwX4eHNicKstzFQJuZ7+nX5LV4nUVrjSxiB+u9AfcsadRsKLQri8hRIV9F 1WJC+YSONefcFZHkrFABxdD3jLhmo7RCmeuEro9arUNIDeO2FlKXvijcy+cYEKpB0U0sz+SW20ok ygO4GtJcDdYRzIiC6IpEXZ3rytCKBJX8cRAmDhx37DMmgZ1CdeKCFORhUfDrGlE2oyS/aAorC5bm 1Ykdwj8Wq7sxee2MyeV9srlfrJMxucF3F+nTbDqfLtZj8hu+vU5Wq3RM3uGlmEe+doY40uYeg8vC NfJHyQ2yxTUOk6RdMLByGF+XbJQaz15oqt0w0OZstW8F8CZZfl6sP4/J2XW63gpOdLtOl+R6nW7T GV58+A7T6R9enY2HUDMLcUmC+kLPmXBPQM1e7ONYrebeWiclFVU/R899R5GyCVGRjloCUaOUna8x 0DYoQJz7eWHESQ1gt/MaZH7zKQFJHKmQ8rPSfu0aHMjv9d1enQa4fOGi+Vbx9QxWDCuyEMQEC2qI tCWmXzPZCQyzy1EcxzV4RxVYhINl5vk1SNoSMziPtxIZwzC/i3GB0zExhssokYdQq0LSlhgLnhPG 2spyVkwU1VAp4avRuAxyaMdoPklUg9IS6hugPnz3Z7r+LMbCHtfpHQauNx9ejckvT6uEwBqYLsW6 19zaxMdBArmBy+pKtRGfxXxFlh29QERS7rAY3VXkOfifMKrsnuVQAxY4m3eopE1sHrZ51FyjSnbT Z21ylzSuF+GAN4AETovBsYQ1MINTQ6XoraycDsLgFFAMe+8DMDgFMq3m26Ao0WfcJINTg6IbCPWr kZrPddOTksGpwTqCGRUMToHE0Irm97PHYRmcApiWEQ2STcsIKSYUxdCdcYQ0b/HsGBzPDmE3U/Pa ITuK5+z1z5fX5PfH7EKCuH88RGtfMDjFo5xCa48uy2e1zNjf/FWUjpdDlJxlS2+HUFxGa2dvKohH ci+GRrXRde7AQBhnF8q9HLFhvMkYpWfJsq+lZsV4dIFw5+2nQ5NI7qsGsCV55BynQXo1p0nkjWAV knZDNjRNIndUqPiO2fVzFzQJhnOJCklbZPqVyd4urM8LONaSxDysoTuqwIr5e0uBiUqlEtHKTT/N iGYnMdm/KrH4qCLj4EkiTHZZisz1niOwtoZTJnhFTj0Xr/aHfIs+PwvvuCUKmXjgKeGAB+rzfZH4 arXjadUQdgj3c0XnT3dPm63CFr3oRCf2dmB6klPi5ahPoUzElGmMU+dT6FRwSSgUK8eMOxVNjzdq d+VMJy6v28B6/+6nS0Zp/JGQi/V0vkpwoiwOmM9+Tb4RMJXzTbYM6UnshFgRvDlbhnW1mi9m020y SJPCuONRF8cI+ROdgvnx0AnE7aOqzk8rwtghfIebEBgqyK5H/Cf5miw3Z+P9+eCFUrm8ruwpgLVb gAt0yXSQ3Jnf2FBx5TUjRrZ7ig1tqcG7LZoA2dopUtOuaOG3RHi5ZgTaW6S11RxoOQW3jWrbDhsm WKbr2T2hMQbnhgDIsSfRjwKcsqkAlaaucU6z3wtsqiJxQV/cLvWwYkTEEIaVLTgDqR5+ZK27Jyqn /D1YYokVF/l7hDp6bqDWckZGE7ROcJakG34Mj+JTGHRHuYgjIfWApD/Aou4TFwdX4Muag8rVu4Mv dGuKyiPuHdxTSE3o3SIfu5R2qcnGqJuhvWFOXaOcpTnB0kOJRPccQJ+/q6HqPgcoCyMrVKIuwqUr ntdFyWo3XXdWSZi7yuhqhU1Uq2RLfk7FptBBKiLJZ+weRcvqdEkpo1iPNXDYrRqi61WEegSj4wAA /SBiKkh0je788XEpKlhctNRMObnxaS40QAtFI4hFRXcEOVWcE3sjqY13Vrh2E1kZj8hi7aENQjHw evP0+IhJSdSuN5PXhGsXY3uNv4+/K0tYBbB2CSuKMRFaNIW5F2NrMSYLRQWbdqE4Jr/Ptukn7NbD fr54kHKsJIxViDbO8ZxyjMcx+kzUY0qtJdy8p9YyUoj0Px6LjagYejl+nubIjXFUG5tu3EptVsTa B212idoSlsjUHJNFyNT/XiyXi7tpnqsn9+nDJsU3+cD8ao45K1Abv80upyv8b/FaBI8/Bp2WL55K K2nvbzqa9ZmlCYa4JYH5tdNlMbgdwpstqIsVNoCeXUw3ixm5SWefUZFlpdntdJaQN39t8edi11/G Zl1dfw2GGZ7nxbFA8SQnoXbmYNPD8cirvoQqj9p5WEVqlFBFBBgiodLitpOKzSCh/pR8Wj9N199A 2GPVxhAYGa71US+gpIbxQBlVjndyjKf7YDYOlFCxpYtHMprZPGwzsNYyl+Z4J1bUoxkp4qqCpDGw qBviG0i6Rj/KKgONRwSyadiwI3bcUR8LHkEfNV61LJ8oIWKrIPYv5QhbGrZSbPmMRWWMCpF9ugTt s/vvzV+PILA3BYkYjsXBGC/+VP7+/np6l5Dg4yD9edHt4aJ95dFa7OCZF+Mo/j5tK/9LIeMeq48P rDlitQnWk+OqIA6f26GUan7uRyY0DRHpozDOXpNkIBK9vjUtjYK4oH40Y3rVo7O1oBJfibR81YKZ uthT7YYIsjlmLU+3JoPsIEKaWLZah6jr6q/FZTjpuHghPornJvvoHfy2TGaCtan++U3yiBXwomkV NyiG9XATqeuGestqnuFIPJQrlJVo0zBVXShVG+3duVBGG3z4BfaU7+1tX87F9RKgi5Na+L1heoE5 aXqxkbIkCc1zWIatl+htA9f30dtO7qdLcTgv7oL/uhTdTKWFvXEq98PProZwAUnbFI9iKOHzCzxC +nR3D5K8Rrq+0OEMss2OdK0hVDyjNMdn5uFsqXN/HgZ1z0ObHa+VADeEZZY9lx3CN6tZOsdyguoh SEanT5eLv/EJWq/ThykGRt5OH5JspOAZW4P62kd5FCDmPoWwDS1T8LHCyYYQM8cmqNCNRU+kGIJi k41oPdaEYhSti9nALiSld3TWYxq0qwjWheLEBzYKJaFs8QiLI2xWRGVq2iVmD6t7qCBTE8OVQ1ob DdSiOs39zwig9D87gBVSAdPEJuaiK0F51K0C7DZc3SRqZLilLpFOXbQT+5oaTcvV6Pi1ygyGTxXD elCt4ltXKEaVRSmUEKdmrvHkxPnT9j5db/5BzudzcQlZezmfEUqKhjjwMevOVJRHtSIMJ+OjY0+h WGX49Fqsoy7YGt0GaehitYBlWKz+lt4j28/L3USaYcnMoop1szWQR7UoDxNw+JgWRV5aSUZTQrVw qTn4wuxg/bSeYlcnmYhOO30wQaidWvLNZjWAx1UhTh64XD3d4omNQk3fE21VaAXrHdaBJTgOIwQ9 kevq67A5mdrW4ZSRHVvBKpI7qhIxPMkDufb5ZJRoB2vnh/q6kzf35UcOteoOC9wygk586F1FYIru Dl1Q4fM9GD50/RQqKhBrLquZUf8sqn4sMEp4kkJidrDeoA9f/kgedsnZ+VQsDvxXijh/lzhljH/Z S0TFmWQB21ix/wci7ZxJCmVuZHN0cmVhbQplbmRvYmoKMzEgMCBvYmoKNDEyNwplbmRvYmoKMjkg MCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDMyIDAgUiAvQ29u dGVudHMgMzAgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagozMiAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9G b250IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKMzQgMCBvYmoKPDwgL0xlbmd0aCAzNSAw IFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzVpdb9pYEH33r5jHrYQud+737dNu 00i7lSp1N1R5qPrgGpN6FzCxSXf773cAg2NjiCHCmEgEIoKP58yce2bufYQ/4RFQMbF+4pwjaCeZ AWtWz1kM9zCH4U2OEOXAmVeeozdNr4I8AiUME9IAasu8oM+hUcyhUmAk/fP6CyfPr2mYU6CcZdqU Hwkq1wROP/Tdj3RR9CjW74uXdvXtXBFcurA0VkA0g3cjkHL9qc2vYDSD4WiEjAPCaAK/wBsY/Q23 IwLy7PYboVRvP2gFBT1DjqYJCuygBK+E0i4qiMxJE2yCwhnnRsAoqoanxLQND7QNUFDPj2OoHKWG U1KA3aAq4rNBFbyI6q84mYfTcQqf4vk8bcngSQBReuaEr+G7aipxxazZpdIBAvfzuzWBtQJf5/fB YisJPA/WTZJHbYk7CRhyzRS3CmwVWIW6Ms07KT3jLVO+b6VXoDqx9D7f/XaJeqMIWe3QQxVVhbX9 3G6JpJZAwFtpt/Gc1i+ueqDdxglaMJXrmXhvYZ2YQrezMJm+JVIWK/X+NVpJAYvSWUs2T9Nx6xi3 WkIN61UTy2rmfD8SyzhmxC6xKlEpRXLrBS5B0M61GYNMar91bW2tALRe307Km936dias9+Ec7pP5 wyVChkj21CHldDVkFfa6FkutGPfk9o/ay31QrdmraXhLd2LOg7V2J3D3M1/Gs3wAf8wjdhEitWNe CwE1mFclUllGXV21DPf6hO6JPA8WWg73cb6EUZjPqCTfZ8mP+CJUGsMMR+ptq0CvSiX1MLT09a4m z4N1R/R9SPN4ADfhNJmk2TwJAbxGqS5CqPNMK480iahE8bqECqac65vGynNQte8jTlL+so+ooKqw Vhqbbro/oZkQQhXm/QCUbjwWOoaqmkAvT1subrHOQlV0EeN/yWVduofgjIaZYCo4Kzzur4ctNamW 3G1bU+TkAEUvWlNOs2E029a0EpWy0DrJbu1p7qtpKHz9ua+m1UNYs620A1HpRH40zQ44ouiB/Ghq 9qyi6X4PCDI0knuBHsDgVTsExwbgu7ZXGxIXrrfDwQOZ0k39aEmrQx/IUTQgsbRR1JAnpaZ0Uz2S BiTc9ULeJA1IVnsmDVHpeP3RgnYJzc6JHkjabghC6le57IW8ceoUpO2FvHHy5M07oB0XkPKaSW/7 oG/UOjHsRf0oR/7NmD4InLLk3zjvg8ApmqFo0RyVjgVOafJvpPtNWtt1AWlknqaEJ+79vEufWrYg 583FVQGriFDbcX0UjsMkG0C8hHDKqLNcP27/WyRZnMPHMIu+A9oBCE7z7frjy6fwIQb79U1w3pGN Y4ZMajpG4mgl295YD/yyUuSXVydnrr/iK2mZ0brRfHRdEHR6SLqTt9N/X86mMAuzf54WsMjS8VMU j+HbT8gmUfFXXB3VGUD4g7Ynw2/TGCZZOoPXJBtt2jojrH7xyJISZL13I6IDZzvKOBftwPflcvF2 OFym6TRnSbycsDR72Lwd7m5r+JobOARcCKoWZZAOeT0HfsAIHu1emKifNGsUpOehLJonujid4xKk 0kgNg1ydBtscCqOTSHSw7H/nHk2/CmVuZHN0cmVhbQplbmRvYmoKMzUgMCBvYmoKMTE4NAplbmRv YmoKMzMgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDM2IDAg UiAvQ29udGVudHMgMzQgMCBSIC9NZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagozNiAw IG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBS ID4+IC9Gb250IDw8IC9UVDEuMCA4IDAgUgo+PiA+PgplbmRvYmoKMyAwIG9iago8PCAvVHlwZSAv UGFnZXMgL01lZGlhQm94IFswIDAgNjEyIDc5Ml0gL0NvdW50IDYgL0tpZHMgWyAyIDAgUiAxMSAw IFIgMTUgMCBSCjI1IDAgUiAyOSAwIFIgMzMgMCBSIF0gPj4KZW5kb2JqCjM3IDAgb2JqCjw8IC9U eXBlIC9DYXRhbG9nIC9QYWdlcyAzIDAgUiA+PgplbmRvYmoKOCAwIG9iago8PCAvVHlwZSAvRm9u dCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9OQkxMU1IrQ291cmllck5ld1BTTVQgL0Zv bnREZXNjcmlwdG9yCjM4IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hh ciAzMiAvTGFzdENoYXIgMTI0IC9XaWR0aHMgWyA2MDAKMCA2MDAgMCAwIDAgMCA2MDAgNjAwIDYw MCA2MDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2 MDAgNjAwIDYwMCA2MDAgMCAwIDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCAwIDYwMCAwIDYwMCAwIDYwMCAwIDYwMCAwCjYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgMCA2MDAgXSA+PgplbmRvYmoKMzggMCBvYmoKPDwgL1R5cGUg L0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvTkJMTFNSK0NvdXJpZXJOZXdQU01UIC9GbGFncyAz MyAvRm9udEJCb3gKWy0xMjIgLTY4MCA2MjIgMTAyMV0gL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA4 MzMgL0Rlc2NlbnQgLTMwMCAvQ2FwSGVpZ2h0IDU3MQovU3RlbVYgMCAvWEhlaWdodCA0MjMgL0F2 Z1dpZHRoIDYwMCAvTWF4V2lkdGggNjAwIC9Gb250RmlsZTIgMzkgMCBSID4+CmVuZG9iagozOSAw IG9iago8PCAvTGVuZ3RoIDQwIDAgUiAvTGVuZ3RoMSAzODQ0NCAvRmlsdGVyIC9GbGF0ZURlY29k ZSA+PgpzdHJlYW0KeAGUvAlgFdXZN37OzNz93ty5+75vuVv2DUjIhBBQEAnKFiAmgIBYFBDcreCK LAp1q4oKreJaJYTFEFSw1VqrVlyqrdoX7Iu4tCi1SLWSe7/fmXsDBNvv+/9zc/YzM2fOeZ7nPNuZ 5ZddPo/oyUrCE2nuJbOXEPnP3YjknblXLA8Wyno9Iap185csuKRQttxHiGLRgkVXzy+UPT2EXH3n RfNmX1gokxNI6y5CRaFMa5BGL7pk+VWFsksghDYsWjy32O4RUf/wJbOvKj6ffIxy8NLZl8wr9L8X /UnpksXLlhfK94xGum/JZfOK/el0QrTbZqJyOkdIHn9jkBKKcC4Nk7PJTURBOCKScjKFEH6TYhoR UGbtCkJSb710R5ex8Vu1Ro0KQh6JTZLH9Yru7Yfzqn9vEH5Qp1GtkfuzDrhO+eTA/YQIb+ZV+XeE H062sFb2d24/mZzfx+/rnVIt9SEZLifbS6JVK1HcrjPIaa+murmlnN9HliBsRXgLQSBdiFcUa3gS QK4ZgdWuRxDIZn4P6UHYh7AfgdX0o6YfNf2o6UdNM99HKP8cv6s3GsAIdmx3Rau+bnHz20kegeN/ xq8lIdz7gmLaVUzXI02hfkMxvZ1f2zsiYGzRoEzJ14jzCBze7cHesROrdsuZ+kY5s3GwZuN21ARa XPyDGNWDGNWDGNWDGNXXiCnuvhH1G1G/EfUb5fqNhMq3CiWLtypmHuw12os1yLRo+Q5+KqnCLaYX 02n81N6qwN6Wbn4Kbr1Vjjfzk5FfL8ddcjxRjlfIrSvk/GI5v1jON8v55mKeXVsu5wtxQM4bWcyf x59Pknj6JH6cnLbzbSSG8kSUWXouf7acTuDHyuk5qHeifjzfRsxIx/Fj5PLZKI9G+SyUWTqWH9M7 OlDRsgTlLrRxxMiz+tEYyWgs5mhMEqtZj7AZ4YBc04V4BcJbCLzck/Kj8WvFr4VvwRUS7iGhRSI8 L+HXjN9IfiRamvA2TYglvhHvG0BcjtCMMBGhC2Efwn4EFd+IOMjXkgoECaEdoRtBgftkcF0G48rg CRk+S6K4V4hbR6xIg8U0wK0lfpT93Npef0Bq0XA7SDtCN8IShJXcjl6F2dhiRT/WtxxhIkIXwgqE TQhbEdSkGTFaJB3XzDXzE7mJvADoTm5vbKyS0+q6Qur1FVK9u8rYchmfxDQlySYEHkNOYshJvOpg KYAcB9BJkL0IbyEcQGATnsBkJDAZCbxgAtcn5F5Kud/XKOUReLIY8QqE0/uwqUnglRN41qm7sNpS 1JTinqW4phT3K8U0HkBM5StYezvCeoS9CKwtjLb1ctyMeCICh3uE8QYsZ0Qc4MO9nMbYh/mlw40t 9Zj3iQho5G7HbN6OebudQQhmD7CNluZij/VItyIo+N34JfFL4FeKXxi/EH5B/AL4+bF6G/Bbj98d +N2O3zr81mI1rFvTe9NcV+3i2hW162s31W6t3Vur2sPNxq+b65a0xG4HTTSb1O4WkRPILGKg/5bj Z+T4MjmW5NghuWcZDs0y/G6W4f5ZhntmGabPMpw7yzBmlqF8lqGPzpEcacNHacOGtGFq2lCXNtSm DdVpQzJtaDHRDjqNGMiLcjxKjqvkOCzHPjqt10A0z9OZJKQGxNPEjtANgU9DfQLtDdwU6lMjubFQ mllIRrDKXYGK0IJAplATLyTR0AsC7kCm0F8RFU1LGdVrqi6VpBqmKlNlVaWqhCqiCqisarNaVJeo 9WqtWq1WqgU1pyZqa1/+oITthBKrErseJUq2FxJBzovYtSiWjcWEo2qOjCM9Fn48N/78UXR8z765 ZPycYM/x8yN9VDtpRo8iMor2mMeT8ZNHOXvq0+P7VPnzehrS43s07TOnb6P0jg6Uerjb+iiZPL2P 5lnVLZ4ec+v03YTSzC23e4ppRwe7Zvo2gd5+ewexX9HsbDaPNA0bM/o/RN1yZffo9Kk/56lsOs1G 4uu5d/z503ue8nX0VLFM3tcxHvN8fnDW9N1cA1fXNno3V8+Sjum7tSu5hrbzWL125WgMZLAfCaJ+ 9G4SYoncjwRZPxI8o5+fq2f9Yiwp9PPL/fxD+m1rCrWN3hZCVOjTJPdpGtpnwdA+C+Q+C4p9eHn8 8i0G76M6SEJyn5DqoDz20/v4C8/6v/aJ/cc+p03nvFGnFX6UpbvJOPr+ttZr2uZF2rojbfMQunvW XnGRs2flnGBwN2ml77OmYA8f754z9yKWzp7XR9+PzBvd0xoZHdw2Tr50aHvPNax5XGT0NnJN2+Tp 266R5o3uHSeNa4vMHt2xfezs1DNDHrd68HHbUrN//LCe2exmKfassfJ1ZzzrGdY8lj3rGfasZ9iz xkpj5WfJUA+wVJNRHa2zCul2TqcFAHd7Qh2j7OKSkTI0jwg5r/f0C4Q+QXTpjh59ZFSPAYEBerYl 28KagGWsqQTVxmKT8/oRIU8/faLYJKLaFBlFnG0LR+N/2bJiplD8f8bLli1bfsGyC5AsWy7/L1t+ OVK2ZmQZAeeKN2jRy/tbANSY0ea1COtkGs0vW9axnMjru+xywp6+nEUnH3oqdzluTpedDgmEPXLI H1ppmhQCbrfscooxsGFcXriOLqNoxG1w6fJiHWiO8BnCncSD1M/PwY5N8geK4a+56wvtuYF8nvsA nScXAxI5N5ncgzr86IRCSi4k75FLyM/Iz1FXTf9AniQSMaLtPcJTAo69kdxFriR/JFPy/0BtiDxC viYZMoxclM8RE1lBcvSn5BHKsZkiDeRdMo9s4Br5tPA3EMcUreCfpjeSLO4ymdxLHOQt3DGV16K8 nfNxjbhqMnmd71Jn8hX5b+g+4bX8HPJL2si9LzxL3iBHaFgguZvya/Mb8w+SEnKM9w38Jl+ZvwRX TSHd5HJyHUawkjxM3qQdXBO3N78aY5qOMawgz5HXaRoA1Q2O7jz0vpncR3aTF8lb5E/kU0qpkZbS lfRd+p6CDLycezl/dn5OfjFpI+eSdrISrT4aoy3cDH4G/wz/wcD/5g7m/bj3ZHIFuYpcS9aTDeRp 8gH5M/mI8pyWm8xN4Z8hHtJEZpA5mM27MKYnyWvkAFXTGjqcSvRW+ivuCoEfeBk7vEBsmMGzcLcL 0Xcj5nQL2UpeJvvJ27jnPzCnPHVh8afQWfSn9BZ6B72bbqG/os/Sv3EK7k88z98g/Fb4W+79vDb/ QP5JPNdDvCQIXjeDNTgH6/km+RLvl6IZ2kzf4dJchqeCfiCXq86Pza/Iv5L/gERIAn2bwNe2kQlk GkZ9NeSvPeS3uPZN8gdymPwLs8RTLTVjLoI0Qs+j59PLMYpn6Nd0gLNj/Rq4RVwv9x6f5t8UpgnP DuzI2XK9ua9z+fzT+Z78b/JvyOtbh+e0YgU6yRKgGFuxnXjOK+QQ+YJ8i2coaQBjPYuOx/veh/sf oCcATmrueu5XXB7c7wb+NcEl3Jc7N3dJ7r7c9nxNfgJgiwfT5SI1+A0HNE0hHbj3jZjNR8hTWJnt gJ73yVfUSf20gp5Np9LptJteRBfTJXQpvZZeh1l9ku6ge+j79CP6FSdwSs6GeUpzc7kbubu4HdzL 3PvcIZ7w50OGWcpfy9/F7+D3858LopARKoQJQrdwtXCNAiyZ0q5+44TjxCUDcwYeGPhNriw3OveT 3NrcS7n3c3/N6/J7858SJanAGDvIAozxp3j/W8kdZBPg4ymM8RPyGfkb1vwbzAVPNdSNEQfkdWvF uCdg5NPAMs3H7yJ6MeZ/JX2a9tLn6T76En2Nvk7foR/TrzmK0ZfhNwJYMIWbj3d4gHua6+H+jN+3 3Pd8HFx/FV8NqaIbb7OKvw3v83P+Y/5TgRNsQqVwvrBCeFXBKy5U3KvYqHhZ8TvFl0pRORMQWvgV 6Icc829wLwkj+UVkM6QDnv+Se4drpD/lfqCPcz76Ep7m49v5dq6VGwHeaA+g/BJiVW1UhpQhzkpE VTe7CXc/l+WnCXFeT5YD3wg3g7uV6yaP0efJD9xZgLQr+De5zVwXv1G4UxhJP4B88RJUAQZ6nLSQ FjoSa/cuWYoVyvJbhT+wOyrU/AnFJZwhv0r4TMHx74AONlGO/z2dQY/Qds6O2RrB3UEiKIv0CNKz gYF/BuTvBtvZIBzk13HjuI9Qt4jcRV/CO+4hi7g99JdYlwbg42W0nT7IV5Lr6VLMyDByMXc3CXNL uDDgeQr5J72R2oC5P2Btotx8IvAGbi55j+vAqu+nZq6MXg84vYSspWtIhg7QfeQN7mekjs7jXzzh Gijl6IkjdBt/FtlGfxBeE14D8/0DZtIHyFVTCRDyCGjEFGBmiI8DahqIgoMcB3zqBq6buG/pddwi spDex39Bt3AtZCKZxy/jxtB7c98KLXw1Zqwf1KRVOUxNFI0Kn1CDFf+MjAQ0LoCG5CLhgOJGluff 5Y/lO/KhXJeiJPcxuQazcxao21rg0lnkQ2qnF9BJQp4bL+TzU8nT3Fbh47yD6mmIvJ0HhuV20kYa zQfp0ryOTgKEX8B0L8Ja4RbhcuE67E8/gGreSu4kD5BfYzd5FPtWAvN4DmZzFmjPQuwRFdAY1OLt RpJRoEpno62dTAU97QaVnE8uJUtBeR8ivyLbsEONx3xcgOvmk4tRvww71LXkeuD/KrIONOBe8hh5 m3uK2wQZ9zbuFe4KbiH5kHzIv8pLdCp5T1gtrCDnQwaeRC14cj1WKYDr1uXfxdOSxAPqXwMsBeTn /5Z/P//EwFu432MY+53KUeRvylZSSibS44KbKqSWyVLzyKbGEcOHNdTX1lRXVVaUl2Uz6VSyNBGP RSPhUDDg93k9bpfTYbdZLWaTaCwx6HVajVqlVAg8R0mmLTKmO9gT7+4R4pGzzsqycmQ2KmafVtHd E0TVmKF9eoLsutloGtJTQs/5Z/SUCj2lkz2pGGwkjdlMsC0S7HlzdCTYR2dMmo787aMjHcGeI3J+ gpzfIOcNyIdCuCDY5rxodLCHdgfbesZccdGatu7R2QzdptO2RlrnabMZsk2rQ1aHXI8jsmQbdYyk coZztA3fxhG1Aa/Y446MbutxRXApbsPH2mZf2NM+aXrbaE8o1JHN9NDWuZE5PYRxgWm5C2mVH9Oj bO1RyY8JLuzB25C1wW2ZfWvW9YlkTndaf2Hkwtmzpvfws3GPth5TGs8d3eO45pDzVBE3B7+56vRW D7+mzbkwyDqvWbMq2LN50vTTrvWE2B06OnAPXMvFxnSvGYNHr8NKjWeSUg93S8f0HnoLHgmeOSa/ VeH9Chx9rPviYI8mMipy0ZqLu7E07jU95LyrQ71ut7Q7f5C424JrJk+PhHqaPZGO2aO926xkzXlX b3dJQdfQlmxmm2gqTOy2EmMxozecnpmHSS+0yTm5O8uNP+/kzFI2xsjZPRIgam4QI5kewTs1sGhe A1kztwELgL8Oiqt6LsSKLOzRtHavEYezerwi7VHExEhwzbcEEBA58vehNbOLNcqY+C1hjQxOToJa D509mO9Jp3tSKQYiqlasKcY4Ui7XZjNX9HELI0vEIBIIRKQdczu7Y3g5pj8UYgu8tk8ic1DoWTlp eqEcJHM8vUQqh9zAdbOWfYMttimsZeVgy8nLuyOA5B1gIgix9ajjJ/+Not3SdtHwHmr/vzTPK7SP Pz8yftKM6cG2Nd1FqB0/eUip0M4mFPOGtmKux9I6nfdwqGM5zsPLrQDKWTNOdkFhur5HiOFfKQP1 hX0qNaBSrqHBMT1i91mFuEMbChVx5v91UV/+KLtKTk5dVnyNnuHp4kALw+4ZMaQ8ZHj6Nfz4ySA5 3PjJM9as0Q5pGwNitmbNmEhwzJruNbP78ivnRIJiZM1uMCDxNUvaQIYKK9qX71/r6RmzrgOvchEd DrjlyKhtEXrbpG0Sve38GdN3Q9MSvG3y9F6wNq3dozo6ssKbZAECtPlUi/CJ8CbXiZTV/xVpGmk/ 0jeRHkb4FOEQwtMIv0F4H+FltJuRvovwGfKWQn/agPIHCCaEaQgrEB5GmI6wCWElwk8Q2D3Z/ToQ WJ0ToQzhIoTtxZRdsxthPcL5CCJCDGEuxtuE5zUij3cgGxDY2Nn9rkdg92Nj+CnCFIQXEHYg7EXY g2BDWITwMwR2HevPrn0L4U6EmQgjENi7zEO4B+EInslsRBDkEBNYkJSQMjCx4B1YDVNhFf6YTKJA KwxI0N9qiJbo0NsAmcsIe4wJMpQFumIbYRrCwp8DGnIXccuSh4/pjXHXEAlDroiSGIljdy/FXpoi acgkWVKGi8oRKhAqEaoQqsET1ZI67L8N4ASGkxHYh5uw+zdjf28BD9AqyyZjyFjwH2dDxTYeHAEh ExDYXz1+a8lOcCBzuVHcZdBx9vJqISk8q1ihnKr8p+qX6hc1YW2ZLqybp9uj32/4puSosUe8yjTe bDAft1ZY37CtcJQ4rnD+2bXfnfP0e7/3u/yfBmYH60LR8J8jX0cro5dG74iti89MmBP7SruShuSn qb+nO9J/yt6Q/aB8XMXMymSVquof1f215tpddVfVdw6rGP5RI9f4cONrGB3HeCthgQJmLMzomG1K VR/V78B2rxBYhidapQKZXTzPuTUqVreLEpd64rXO9LniscYJA43niscbJ4gDUPY3DjSyUFlRbQqZ YiFTaIFATgT5fSckBfmBBIV94LO13OP8S8I7WDsT6d5WoujjbpW0VKth1jDtB5p+7lGi416U9EHT XtNbpgOmr00KUz+1E457cbsa/HUf9+jOCvVi6D6f5+7Hav+DthNnWjzeeeyIOHC888ixIxhHo9iI sVVW0BCvVEbC8cSpDJ41Rhl0uYJKukDOOt1BhfBOzh0PBOL0cCGFNvMT6KX/JnyGcSYlUbELoPks dyd5dr06Lz96AkAvR88tPPrQwCHSfOT0x33Cbh1y4inCZwP/TIVCKdyA68ydgBTwGSCxXUok9SmR UzhKLFqzXalUiA67xTbSopig0Vg2l0QJgJkjLu/v+6mCOKnrFjbbnRMGjjWKR0Q8DRNtMg8bRlmE B3fSGrO5vq66CrybCgKi1cy4OLx6Is7Fuc7GpxL6ErNLdekFF1yqcplL9LEnJPrNMsrR8yI6p0mr /32u79Etub7X9FqTSxem43KYgWzuBLeiONqkhtO4XZzLLbARa8xKh11UKDFarRaDxniNQCuOuH2P 9tMJg+M9zsZ7CAOWhztktFaOU7GFqa2przPX1nAJ5DB6h91s51b8x9H+Y1kun3smrHdhtK/Rsx7d Qs/6PUbr1IVzuzBa8ldOxf8vRpulNdJNVq8Ykbzfur+LKlpdqywrrXzAE4ieE+VT0W7DhZZLom84 /mk+5jkaVWdSYZ6Uaq0lamvInEkljFqFECPZbDQWtcZi0WgkGotEvR6r1+vxuD1ed9RitlosZo1a HTWbrGazKQvm2asgpW6wzBpFiTpKzJqsQGJ9PC+ZTSrzTLWaqKITPEHzC6SElvTRBySjWvJMMAdV 6Ct8X0pJH22SdBNLF5dypa6yV5939tFocbnl1R5odLvEI26neKTzCMs5MZ0saT7UPGwY1h8w4EDq GCasKkuX/FR8eVVJmTOt/lFGQA2R+1ZXy3DD8gx2OsnSTmpi82+3mWIFIFKqFIMQlBhcqfpYvLhM XIPTYnZSk0UrOk3u3NdPii6T3fbkkzab2WV6MveVy+Q06iz8ehoIuN2B3CcdSpfJaFd3fO4wmF2+ L77wucwGx+cz1DajyQVSTmk69x73Ni0DUlVLzl+Td8hBchSEfpdA/8m9RN4xwvzBqZ6n94HcX0J9 p7CunGFdJw3RIjBB2WDKfeCJuyI8LRv4U1XEpYWrASX9nEqwcCtA49ySnuwDpCo4lzD3aUbEDomH SfkEdiNbqFawnHicW3HVVRjTm/m/8hT6DgPxgkL1qnXCn3Sukkt2Uz+eD2ycALjGVTEZ6ZQRGZrr uCnRhvZJ9Sz6x8SG4eeygOcfzk/jv1RcAqS+RBqu0dipS8NjL9GMoWdrZmp+ormCXqVZrV6tuZfe r9lCn9TsIrvoq/Q1zfv0MP1Cc5x+p3HoNFTXR3+3k9eNJDM1fbQXg5qpfqGcp/wHpj66Z9vzIIPH OgdAAQ8ReV6WdnZCZ1XAMlpXWFf+4MAsk8fk0nKP6KwlJpci+u/pMZdRb1M84ShxGXVA4k/x3p8r mM6qnD6z3cxpI/35bwifP9abVSdbNMiX5o+RRP5fxI5gy/9rl7dEU6Iu4frz3xEx/02vryTLrkjl v5EiSYW3JFASNl+i9nvNpIwmFIZwpCTUZM40KcwKhcHdBIr+xq7KaFOJq+IX/VQJ4pGRoX/CEfE4 ZrgZ9O4IaAcA3cQiQGzr1dIMrkyMO10Ol91lc1ldCqXX4/P4PQGPoEzES+PJeCouKHV6rV6jV+tV eoWSj4dNUYkELW6JppUxCZxJuUQjxpBEPS5EcX1GImUcIqbShn4bfyn8pW8gDcU/OpiRUzC+ks3k t7iarX6To9nEIrvfb24O9+V/kCRkElavCZFHROQyInKUNEdYlLDaDcgh4q3ox/vNuuasFpGd5XxW V4jd5O+SAxmj1RFgVwWaOa1oGulgUWF08hBPRmzYHdQmyriaiMdBUGtFeUNw2O0Ou6oGNYl4JMzZ bFaUHfbqKnMt//kN8x4Yd1OZr83oQG78jWX+0aJ9cmvKVTps7O2bW9PO0mFnrdvMfbQ/94+HrxtR G7qzaeqy/VRk+fCdjVNXXPlmU8QVyR3ct/vKPzSFXVEa2sew7RCYic+F77DPbes1qz19+e8ko0lJ 1BqP5Gk3t3sEjbGfe5Lo6UZJI+r1RvFFjZpjNQrUmKlCwdEX1UVFhMrssfbDQmDiFjxHFBq13sVZ 93A3gHtwcH+QtGSByUQXEJGKL3BLoFr+BQwDMgSBIzjSKA4cEWWGoPnIEZlMEnGgyTys3EnFb4+9 PKRQWUE62cJSU4htospIiO1OddUhk6KIQnX13AYa9Lvd/oFFLKbB3FdWjdGlVbuE736Y5QBFdJot DqFiKqN2BjXjaJ7GTHwAXErT4DYl1zp5+nMeXVohWAmI/sydWr21KawAFWkeKNBi2E/t+f+RMp5o zVnGa0puTdxaemvysdLHknv0O1Iag1lrr9U3pIRkJOVPWxP+0ojeqmOQYvjSfMT+b/OAXShVD87k x88VJ1LxAj0EwqqjBhC1mTs0Gq3e3Ue/3yE/ew+dCQaaQ736E1NTrMXALQYT7ECtH/113CVQA/5s ECvF42CyjoPAsC39yJFmzO8h8QgtzilhcypjpzcQNTvtsWDcFnJKxBIxSdQRsErUHEVUxK4bbijM N6acLKVL0x31IZkFsNtAhaP1I7naGoCrUoVfgbIW9yWliqgGuFvY/nPiPUq+WTo58Oy1lz7lUmr0 osmxcPfsh/4an3lF7k/9k0NskS6/7vBXiy+aWLroses7nSqtQ6x49IIP1wyfvWx57uNfMFj9Tf6v AiaKYOG3L2rAZgyqVV1VVWsaHj07Oi7W2nAZUa4I3dpwj3BX7b0NW2ofa9ht6Xe8bnnd+qbjI8tf HH+3/NuRLzex63Zaw1g4Ux9W0ItMUm3UpUtNfDkG4iSKiJe4/MHSeMaFpd8eDJozffT27fGmavAE t+80NykjTXV91CBpbU281zuMdw8v78cSeLkbntO5hlUrlIa/99OVBeAGWaRsBzp06FzxMOB5gsj4 XrYaA4dQPAI6ycilDPKMOSgQTW9NbTRmsQqKWE1EohaFTaLR2rhErYJZIiAgWJob8IekoXNpA2lY Su0FJpJRkwJ7Vl1Vh3XBwsgVDrkkr9IgjhQ2Q96y/Jpv+xZ9XmZ0iKJ14zN3vjJ7V6ff7XKdtfSu B66bdmdGNOlMzmlXP7DpjTnc0zU75/z8s1kVoll0Gpc9t2T8hvMZLtE1My/Y0Fhj1TjE0qYpe2+e fC/2pvcZPoHL80GCe1syYD8Pcv6Qwhfw2jGth3f5fC/ajTZzH+2WzCUlL9qCodACjge3yXOhAFSH M5/jeUER8hv8yPdCaOzjsF/5vAwN7MSIOruN7+NukoxUUbLA5wsQo58CFfz93KUkRGdKOuAQdYUF wabHbvUOlgO8WnE5lk6AALK0EdLHQCN4dLEREkmj+BUYYMgjTCQZaDQNU4BJAyPmJAxxvn2vcTA1 VlYspaFaWm0a5CcGM0VCVG0yRSjPD7xL3906hrFVY+Q49zuWfyiTm0a7ZvOJE2+wuct9O0iNaBd3 YCAEOH+ZwTlmLkP+RwrrPBpvWJN0DXcqsslzkl3JS5P3JV9zfeT8m1PtYkBsZ0BsQcYTjKitYjBq D7hpwBciL2CiYoyOYDYOSRpfkyBoSTxm6aP/K2kcTVp3k6iiqn7uFpLkFu1EzwWxaB/9y3OiKxsT tIMgfGrOJhyDwCgeGegsgC8TasqPgGozEJaZVAbHMlFxOr0KjVeB/dupQeRR+iTqUjtOQS5QOJ3u XEpNRVYHIMn2vCGQGwkXyMkgkacrxt3W9PAfj+648tJzpbhTNFl+3nvXvsdW3nRT0ABRZBwjIcKd uXmBwP/s/N13tbH6kN3sMt/+2uN3PNMmOu1cltEhkE8zZtcNKhIhFfQpSV8WtkZrwv60P+SP9+eP w6jwV6mkVhihbhXGq6cIM9TKGCZ4O+Y3WEyx4aMcqYn25d+TtIx64Oqo2tCHK1cIgqC2ClZ1XIir U5bhlvGWmZaLLVdbbrPcEt1j2Rn9UPeh+W8Gi44q1KqgMu4yRoOx0Lzg3NDVoatLl5Uvqdge3pN6 X/9X7WG9eYYaTI9oMgct1oDNb/c5XKLTECZRgz6mi2tpRTlXlsEuklSlUwqHssQQrQSObNmZbeJ5 jaeP/o9kDzRZFYkmjcH5ibKJpMRUMFWRElIvcG9CVxKlUaLnHnsu3FQBYcdVuYc20BsKNEuWX9ne MdApi8vYQNhaH2KrLEslsjQC3s4bywRDgkU0moxmI6/UG3QGTpkRUhINWsJ99FeSjcS14OVi0VI1 KtOKrERDxgBr0dGYISGRpApRkZETG2VOjtG1pfIGz1im4taTHuSKGfVikIJthwmhRck5EiY2K9in AtFjoEMXnbtl3q37X3z8khfqWpsrNv/xuskNTrvJYE42/Sa31xV/ZPGSTZvnzZ7RyFmWXXrg0Xu/ v3XtM+88fNvCTfPCRpfZobXmtn0WenvXg1vX3fSr8+uBle/mc/z7wEobWblNwzMWSAnSleKUSp57 UaM3GBbYiNVmIzYwE3qHzqYnvEi5BTqtyShqBVGv6wcmUu6JHQ6Ny4794ST7fGiCzPg0y4QHdMch YxNDJkiHspQIHqjACxX3bVobkt8bjGPIRmW1CSaEv2HgMUZLeD73rNpeYnYqhUVxGS023frD79wm p6g1gwp/BpnhM1lmiJFKukoabX48/HvyFflKL7gFny2dnZaexyl0JYLTU2J1rnHeTR9QP6C7K7Ep /WD2SfpIYie3V9uv70+/qf192nI13RLiKq1ZcDa93oi/L/+X3opIWX/+LxA2vtthUpeWAkv+0psq Dffn/05i+S97E+EQY4PM6VJJHWlKJpW+JouivElpgGPbnyUxmbSL8Sb+E3dTs32inbP30SOSrjrY JH6SadK4qs4QOwCix5geiZGiw4w5k+FUpkEV2UpPwGQT1H5zUCJeK+hQmQoyQ4UC22jABIrksSHK qsslUgkB45QwwTbWH0sSpJN2LiVLIUvsJun859shDeBFPt8OIYGlUgVkBIUTJYUTOcpylOUUTqu+ 2eZEdxurs7E6G6sDBTz113Fy/wYNrB8khYBulbJeZq4gCgC2LaflecvCnxzcvPngTy6elRr+x3t/ /t7wpOEXly//xaYrrtzk+NXKlb96ZsWKZ7i11Y933/Phh/d0PV5TO2zSnDVvvbVmTvvwLxZtfPDi OXfdlVMtfvTRSy974gnQRQvoogNwESPVtF3KqtRCSpUmZU9F+6PKOCOSkQyiEiciQ4m/qkYfRlRl r84kMjbGiRlnVn5q/j7yz9SxMsVeQisZlWRX9bFFt2P9vyRVmKcsrlJad1a+XPlupXCB2hAl8RJ9 QleqSUH6Q84QR4VBMEaTTVoFo2eSthwETRtqshvi/aBZBu4xSRttMrpr3Z+omjIvcE+QmlOkSzw2 AEbr+IQjxz4FPMhUq7kgTwBGZOIlQ0ciURaOCDZDib6EU5rAzlhEqygoFbGUBjBSqgOMJOJhG/bD X0kWWiYwYVOdRGUJoogYQv1OklUCbAbh5hTxIp1pcMrppfQkDUNeRtLCBgeJjq2rzC2ftueR2hoI g+DQCktdX8fvbdl+wbRHuvduvuz5mtZh8btmXX/bjGFup0nvSFT/kVZZax9a+JNf/nL+iGXVIe63 y5Zf+NLFDwzcseqZT3uvaL+3vDkMfY9DZ6HVn6X+9PpdO25fvV2C8ylX0JXwc6Ar8ZBKSWPstevU vURp3gPNrYsI1L5Tp3O5vKeUJ9AYF6QIWW86yPLIbKVlSOk0hYqsVZEjfk57/YhzWRhYf1LLwtGG fAp+MGwUTjJdMu0r2V/yJ/FgyRfi0ZLvRZUDTMpT2yuM1NhH3ZIG4zP+U3zJLvRRu2TQ1ZS8Y7RT +4cuoiyOkjRTEIJjbMcCM3cEWVlbRocMj4fqqcj7cpNjDRPb6xFNmkXVuU9t0IIFlacN9Y1cRdjs t+ktTOv+Qf56SIYm2BHG0s7d0Jvs2+7115j78vskjdlfY5AQNaO0HamlmDrl1FnTyno5zM6afvXz EmcWyw0Rkb9IHfTRprphfbRE0tbVVTVRYezI0b4+XiFpXJWZko9HztQ2Ma2kSciMHu3SKqMZly74 7LCRdeCLx0gGu3ZkbV105Ngo3D0giGzqbcnAFFAu6ey2aNYezbZnaOZ5+hlMHK8ylTRTuYPBhTw4 AKUTY+LA84rHmCK8GRjCRBHM3CEgiHmYzOqKjaRTRpPzmltjNQpnKp1Ml6YT6XgaimSr2WqyilZB WR6vjjVrWkqJM2bvIsYKWxcxVOlKaasCdZJ6ZCl1pF1dxFpW0kX1NSWldJRydGkBX4paG6a3Kez2 RUpIa4srVFcty5RMpFTaoLytrjqpMZf3f0YhTQWlCRShsuyjjMCAUMQdfqYrZb72od88ddv8sc1p b0Xb9vvuHW8STc7G7o3tt2S954qO2xY9fN6ai61Wg8U5+uZ7LpljillpmU4Q7lt07bbZl66LuqLN 227K7fx17l9jRacYjDeNqAncO3zSEvjskF/e2PaLhQP7OLATNg09SG+cfM58BTtVZIJ9Zi/8KFNQ n+2S0nUmzKhnZKY+O9Z8tvuczJgsVCr2LndXpj37XcqYJqlUpoxyXFYrwlYi2Q3rDZsM3AEDNSRN BoNo8mlN5kiSNZXE49WpeDyZ8kVSGQ3EHlQpldUy8+HTcFmXRa6y26ea7XaLGUpbU9jLqs4KkMDK wIYAvz9AA0lPIADtW9jjdmdSKb/HbYWm3Gwy+bks5K5sNBKBDwmh/rSxLADHrzKNK5uJuy1xmBPc /XCyzNCRkjUV90hGTTMxUSOUeAc9Rz0CmM3MrgoubsrGzf10JDEBF0zaZojX+yQRfY0mSkwTYR/K mwToPzPby9sWQXUO5SEgcyk2QoAfoJNlAYnQmTNpjO3pnbKZCvC6SiGLYqugLV/1U0hk6pPKoX90 Li2Hfui0iv9fRflqFVgvFgoKar5INQaFOVoUoUOD5GSwgecjPH/twJ+W/oLJHrnfsriFLvuOpfRx +kCLXP0qE/o23/V54BO6KvfmoLDHf+mwWBw//HqwTFdxcwcegsgMr0kidACGvLB2VtH50gtbU0+n f6t9RfeBVrE+tSb9UHBjbFP62Zjy2uiK2LL05dn12vXWtdH1MfUUcZ64QrtEXGJaYl5iUY0LTgid HR2fvrVEUWUcERweGh5rTo1ItxnHimpNuSvoDXlinpSnPGJMpdVXi89HXy3nxwTPjl0RvDW4puKe 4JbgzqA6o4a4jjMLPjunVqQp9akrgiV8pLSkKpjwJeP2RFzt9/krq6rsas6ujsSM+oC+XN+sn6jv 0i+GOreP3iQlszEC5OOMpg2mfab9poOmoyalyV2TKIXAzoxnR8Feu6rHXV2ACSZ9LC1aKztlQZ3p lgENsvgpi5tFS8qgQD6YyjTLH82YrVqdJZ6OpazZLI1pI1maMSdxPkkXz9KC8kRWnzBbytKlUL13 dsZMg4ssm+WKBKW40JYQqA9TpkRgJ62Sc8hSspStLyc+9MqWm65p3zJ7YB0rv0KTXRObRt99ZW47 fXLSVSM7Hl6be2dyYbl3XvNAV/mDF0xeO4dpH7m6iPfi+om3nLCfdfEw6aqRmIQV+QPCOcIzsF0f kK7KWmk57NYTCa+w2+xTHfOsF9oXli2xLrMvce5waOu9dRXj7OPqZjpm1l7suKj2Fu/95drqSmPQ E4Yjq7rE7qivCkb8RmhezLrIjrQ5Vq9bK/hj6Xpe4NKakri6OxSPu4d74sbKQGV5ZXOlUOkatuq0 RZhwhHFSAwNs+mXdPuMDCvKfrN4v6KzAVWGzJeN7dOeP74nCe2U38UIaMFkJY/l9+b/vhFbb67Qz jS3+OhgbDUwf1CAyyyeoeQKcD6P2KiW03gSs7kl6j/ZEGV9bW2OGWpH/E0Mbh8Xk4BRTl989e6oU H5XwUnHHoqfbTTazPX3emwtnXnDWBaurbvls1X4hMIItyRcBt9MzuaUjHcie2zVm+l3P5/52QZfN bnKUz+qMeM56+mfTnr6OsqON8K8mwhXAPR9InV4K3aFdrbvNvNqy2rrOtj6wPrgmdHtiTXJ9So9d LhFMesH4H5Q09yd2hrhWtcPH6K3OnSRut4/4HGqOlWsVSVm361ObyowBv93u8zvUab9Gw/nVXDRu BItjDBo5o7ss44eaGqsNU3J2Dx1G1adk8VPIwJS50MHIEZPGh+jFhxRkXKgJprS2EqPBqDfqjIIy HkvESmPJmKCEadTMKUOxlDZaRoO2SBmNGdNlNGwOlLEdmskmsKgUFb+Qxk/HD2aSwCJhqQYV79Uy VjD+NQEONkR9Y9m005cv3lo2Mem77Ja5N+YaWc1GWnnx7k5XdFR03aTcW0WkmN7QdfGEhctv+GbG KIYVa1664L5zmzraM2cDH3C2VyjHetRSs+TuCixWrlDyJl1J2mz26cLeQG0k4vPyGiXjtYz+ZpZK GaOrWTmV43waq9uRtlh87poyBuBcZbq21leWyDI9CJdKx+O+LBQRi6RGN0fjukg07q6FdsxPiM7N 6dThuNFLv/bmvZy3BQ6yGtqu2azZrzmoOapRaGrj8TKSFbNctg87oh3GZ2yamvMs5eavzUfNvNlV N26xbHfsbJxwZIBpGY+xnUzsXArWdGmRmslsGCL8Q70Indq3ne81nswUVY5yfTo92PCe3BeqSGYC gfmjiESmwR3pJBUzyWgF9cCpPsUaOoW7leHQidlsRZbKNIxfxmoGHqOyjgyr4ORqcwF5H8vtYItS IF+5A+ySN3Pju1ia+4rFXVilTVil5VilGvIP6YJuBTVq9GlR9GlCHn9tOOzzVGeNFYEKriJdU+PL YhupY9uI2WVLm0w+VzxDkmKSS6ZjMV8mHIm7aqAtihPiwqpoXJxGXRPLxuIkI2baMzz08COlDEz9 hMbFcJx4gh6u3bPZs1/mQxSe80xBkRJxpbhBPCoKoqv2+G6GR7JDBttSMPmYb3k9mKIXdA1FxgIX VL5nzv7gvjJ0dU5bBNizB9WTQ5cA1Cv0f1mDBwvGqZxncA2MOj//EJv4gZ8OXYRB/kBeAYP2Py8B 1mAldo5bsHM00rjUsC74QJArF5vFiSJ/tn5MdKquUz81+pjusejzyn69Rog4InF9IhKP1kWVdWTY BjJsGPHV1ZYzglVtrKJVdWVVVeVlvlqtOpAQsxbqdzixPWXrUgGfyIc8jfG68njd/FqY4EOxEh7s 30IpaLVauFRM0Pjnl5Vl/ZQS98hE3KgOwAfH1bRq8am9Xd5WZDck5h3DTFOgZ4zbO3RqeykolGWJ hPHQp1G2zoIxsGAYFGHEOm3nadFCOPs7UcDmnYG6IYlQmv9yZ9QetkcG9x9sQEs72QZkYqJGGVfc WBw1BVV0Qa/GyBgzaIHMCWwvGkQwhWxvVArl3Xu7Vr15x8TVX617fZ2K6dqcZpODKt++dvmeSXWU fHLOjdMKS0Xv9rtFK+3N3Vdb176hd/UDa6hizeJKq9HtfzHgcvimLJp3R+cV9799PFhK64GFTuqw GOwqrOhPgFWLgVWt9NeS3vwL+7Pl2+17y4WCqKAzpIsSgjvIVq1E9FFfOuTzBUM+d6ZKroJPQHmy ury8qtqXaRzFqkRjM4zTzenW5uZRrb7GghyhU6aLYkRBiNDZk0UZIh2T72MspaXpaGlpLOpLj6hl Va3Q3zekaxoaamt8IyJhP4wM0M3FM5l0MO6OxdPpgszQOGKEFgJFtT9a44+2St5AzabWra3c+tYD rVxrH7dH8rSZ/aGQyV/BSThejDPd+znOyHVxi2EDeh6HJUazI45Mfj3WCcwFnDDOMM1EWcgIEGLh WXUECRMeEDMQYlT2pNm4CCqoZkbkoaUzTMo/BrD/eNWZ95AFBlklWM6UAUZrs11CVI6N6LkSCwqI mGjbQUM/MhEVGc5BFQXc8M6sOUMO4W8aeFcm17mPZcpbwwSL72UKwmWXwGQX+J7V1BSoM/q4Aku4 upx/CAkB72Rx5M6hO1jKwgn7YDtg7lMIIF8A5gLkAylbLpQpIvqgIWgN2sq95f6Rimp9hbXC1uxt 9p+raNVLVsk23jvRN9FvY+fPwfvo62QXAZ/GFZDL3jri9QaIz1XghXSg/MxhwKd2mll7wlZnghuS yecMxF3muMvJcXG1Ma6Bxxb2U9NEeAq4gusODO6kstsiW2y26qDj/8U74LSlPGOR5dU6g15jgyw6 DxRcCbifneE3cJBNMAcshnVp5KnJKuyIbAKZZfppUN+tmLc4+Ua67np+heUa62puHb/essb6nV2t 4XRWnY1/gHtI9ZTqM/FT66d2pSDOF3eJu6xClToejNRCwAq6At6PnE5fQGU063RCMMCZQU2dDkZK JYMJDqx6sfkggV0ZpLXUOL/Er1arWIOKNayEKc+VeGg3/WNxuwMLx2gsU4bKInbR7xOTB8iGKvQM m6bMLoZFO6e02a2ITQojqK5RqbLwjiwVlaDBds6cLTCHDPXSjDtkAhS2wAIPX3RL4+3QVDN56YyZ 5bceerjruUVsk6MTfj7uvLPrZ+aeYwDLzS9M7oD7/oPT5tI6Vsp9M3Zsqf+OSdzhQTjFW3eAIt6P WR7FXSh1OrPOOndLtLq2ur5ubGhmy4LQopYrQ9e1rJHWtNwvbWzZ2rKn5fVqi5HUVbdVT6sRjOF0 3ZialtqplS83/0ba16L2hD2VC8MLK++u2Zp9su7z8PfZ7+u0VaMIqRyE5vQQaC4hXuqtDgKggz5X qoIBsD2Y3ZDlKrI0m91Qmc1WVPpSlaQA6yVwkFFUDwF3HRieArgnI+zq9rgxHohXwIk9HWb7jS8Z DrXUSHVC86hwJTETfyhsDYXCJFQZFoK0Ip6KxFPJpKsyHA4CX4AwTq6hPj6yuVmtFuNQkkJZfs2O UMipqeqj058LjhpVSUbFq3DIGYfKrpEcUntld+WSSh5K38r2Sv5g5VHwxC31e6DXCUJ/WieZRoeC DO/goXOUoV7ruH46+ZQQIovkjXBnPOYecIIOL3UzRwZGdN0umfbCzdHNuCqRKW1kai0XmG1dlhph TWeeWC4i+RsBzd56RK4qRI4sImtps6xKT3esUvy04PzoPE2p08m0Ov8F5xlVPq1reefSIX3PJNqq Eqh6Ci4+u0k4fxDfx6lhklwvUgyhg5EJWUT9byS76HUUMQ1qhgZpOIw4EI4GSxx8maduZBCe28xg usBr025Ws5EbPYul/2IN4VzVgtuao90LWc0vb96xiv4+t2aQKp8iNAM/wAe5SLVzc1PXL285yjrR hW8xj2WyEtgxHdgRIoukBghJtUxIYiw4aIsHQtJHRZmolslEXFznYWKOUUM1bnDTfovZFd5ytUxq C9Lm4U5wxwXVv+z8IPPAJ1nfQc4Yc4WNq+iPOpQFBgdcIKn0j1yZ7APUzV72d79jMf2UxYyg0nPZ RpW74JSYIRNVCrsAEfbhfRq4hDT8r77Dfm4MGdewD+eZ36V/8r7tO06O0+M+bYwkfAl/vGGsd5r3 Cf9u/3vkPfqe70v6uc8w3U/18kZj2cTE7ADE7KTFaDRbfPqAzNqIJNwe5sLJeDgci/sC5TJzo6vC l2Sqaut85Tp4vGNXU1cLarVC8Ok8Nla2bHJSozPg5JxJq9Nps/o8ZaWsvoSk23HWN5lIp0sTvrK+ /FrJ66Mk6PX5/JSzUhb7GwiBusyKKmCrT9L5Y/Bl9/u9vjhl5XHwXW6o53hb3MOVlSfq4uXlOp1e sMT16niiocHn9/vq6/ywmL9FA4muxOLE1sTehCIBD/WahGSuNSbWJ/YnDiaOoq6P+0Sy+QK0i3Lr 6VtwH6eC1ytwnAA1xdWS3RLkBavgn2h5y3LA8rVFsLiG/boos05gSCx7L5uGlRf+O5fCi7kznV7q FA+7mW5WbmAClCw5yUJsI/JMtEKBsWMyW8bUttDXrlJDb6uAK00avjQn9+2heHkG0g7B4CGFH18G ILwMPP1SHCeP/DecraaD2tv/0IV7uDv3griRgWTu9yweW8viP+BM8LA/MKSsKfjvvA6VeWCjmTnq nMkJDGS49xjgnl7PsBLqFOEGQHGGLpagIqUar8vLvcpRHVV6PNTuEXQmGchKknCCMgFjY+kCMIHp TmZKS9MZX0wryF1U1bxKJfA+rdsql6HdcDisQOaon5XDoWpfKOT3+aIeOLlQf8ETnnqIJR2Pxfzx aBQKqWt2eaxxYD5sA9fAKVmn1VK1z+unUMZLHkIyUqzWmJmY6coszqzPHMgoM+4yDk6vHtbdYu6y LLastxy1CEYLtbiyw39yUqhbyjQdAAzGbTC+43CBWQMQyMwaUvzLTkLFXcBI1aD41GryIhI9sjW8 Q1btnwKQIcv+3wtDAYL5NcrkOxSh/x0YBnntQVIucIsG7inQ6tfZgo+RGe2PuUUAClegwJOMFRwn moaS5R8+418ZJMnMUngR+MCLIIUbiIuekPKvGV9xcebD9sPO78Xvzcfsx1zKV+1/Fv9sft/+gfML 8Quzyi26zTa73Sm8av638biFf0hzj/5R7knFk5pH9b9X/l6tvolbp7hdvVIPJaTtbm6jQl2vrFdX axr1w8Vqc7V9uFOd4tL6cjFmjtnLnSPgeW/cK/aaey29th77Xme/S/2M8Vlxi/mXlkdsj9q3Op9y qadZJtk7nZvEeyx32R903u9St1nabG32cc5zXDOMM8TzzOqkc7ixzlJvG+Y81zhObDOrdUqt2qP0 qJPGhCVhg1zsooLaYjQIROUAk2qKafmSGFPlB3EYazMOfV1pjalc292t18g7CpRgcBpj7hmyylg+ ygDFe1H3zs40dIIz2GnXwgsbZtXj25GKcEXebnY2w73tO6nE6mm2O+2+ZieLNNist0PNh6YvWaro y79/sqwzs/KvtyNFPzmFTfbX28Eow03hYDE9JpWAabbBc2ykxY+IMlcOOIjDiUtOOZaKtmZ9MYU5 9xvw2paRtASRPsxyTLAb+ldgYNId0M1ZOWgXYPWAKttuVtVwzJ2b6bXNwkW3fb369dzrtPb11V+t nvLVC9t+oKotL3zFjXki98lmfJWhBCfFp2/O/fXJN+mY3Gsff5n7gLYx2NoOSjITlCRCsuSo5ISz jkeFE3IWjzkQ89R62jy709qUOdGX/0oSL3ff7OYS6pT6Lvc9AfnrYEw6G+Rn/7M0VnmSPc3IsliE +GNmY7Q5ykWjTohkyRg0ol53eRYsougqO37KUDConmanLJh00cm+dyMZoxLWIAqpGJHOyOTgDsYZ DhHR/ztWMzxmHhRkKRy9oa0Z6updPRSBZdfjWNE2AwV0z5n6NXAcnz/z0diq8e3Dp+a+p/rOR8Y/ dWPuj/RgbvlQjH5j9aQbYw1uy+Tzrxo5F+YAhtMmGafLyHD6mtS1Kn1rxZqan6fvr3mi9LHUo2Vq 88WVC6s5bYJPexLWtDUbJ+MqWmta684eNn54Z3RGbGqis+L86ik10+pnDps1/ML0hZULarrrn614 pGZz/QsVu6p7a3rqdw//bfq3FeEKfT2gfddwbYU6yrLHeivV1UikjrQ+oU5mk8NqS5tTw7PDh50d HZu+Pbo2cVP65rKbK1bXbYxuTNyV3lB2T8X9dVvIY+l3018M+3fF8Zrjdf8e7q2rHzZcqKmu4DNx mIaIPxK24giMbz5wFIR/aq9uPrwHVksWPuZogKq7KpZ0JPmIpmR+Bq7vnb30CLwOMpKztjzG1LDB TEVmc0aRubI2FneNAIbLhlz5kA2wHD4Gh5har7mcafUgfw4y2qr8vl6NWJPuOOT61Il6mTUo+enL pyiC7C5TMBLhgxjM00oaE2nEcYyyC+E9lS5FVMYoRJ0fUQ2L6tiJjRoW1fnRr46d2KhhUR07sVHD orQViD8UVQnUMZ0KFaxJDllSlfl1GYLCkMKKGfjT1ce5Woa/DIstp2Ewd9mS8+umT2kMDR/r1cNT 0DauoS51d1vlWfOarBqT07Hn8a+B3EDw3P6PTqJ3aLIp6Cg3OyxGnTPoqtObTHAMs4qrknTc5wzh c0/k/pH7Nvc4d+HpaM/JFpAXgfVZUk9/gS+i5V+Wzg2GRqat0MjOrJ1feXklr0oPrxxXOcM9vXJ5 cHnmqtrba7eknqp8K/7HwLvBA/E/Zr+Om6BUqWwLjAldlbklsCbzs8AvA09nfhd8LXQ4bfDvwVEg Db5E9Z8oxFABdsQpChEIptIhZTibicBgVFeURrPEX17GkB4RVq1M7UxCZE0xfU6gn7uGZLnNkgGH bKlfrI55SZzGAV47V3jXw8jSR0vRFqbt4c3h/eGjYSHM+GGjSRJpOXT5nOhqGFf0GRi0D3cuPdR5 qJNpgsB1svNHMtMp+w2AEA8KobIOWQay01jP/wfZaYBO2Vy0ZvYG9MF+KJRD+WM70vpaewD7U29N EO5tXxZgFd73BZUyoOy/chwF6qWCfHiadIjjaEWzMp3yYznxxEMf3PLgjJW3S4wVXfLg04tz3356 6fZJT16de53T5sYNJVuv/nTGptqRD37DaqnjxdrJ7YsaJt8H/nM3OBIrOJLR5CMp1VR9jmdidWf1 lfZb7avcqz3rht0/Snt2cEwLx0DiyZYnRv3RcdjxrUOFc0DHey3OOvjwgfZIyaYRbqdRYSW0vqSq IsKX1TCrsknnijc21phirbArl61N1MRCrTAtJ9Qh2bhcH+vyL/ZzfvcYa0yqjEfiUsvi5Irk+uSm 5NakIulqe6ifBk6pFyYcOgI9AeMfBy3OgybnAUgbsgKBmZ5lHpKdkzAzozNWgMpHIs+wJjPtvc3q 55ipsugiPOgwK8uqJz2FmcWy6IPH31Xg5MwOqnjk5rWPlp3TPf/plmkdh3/z0U1sWhHQsufhh58b 01Zx39uzZr37TI8w0stW532cGvFMvnX97KrzqgMmry+x5oINr6+uYE2fM9vzrJ8/vGjUAr/NjW+x 3HLzi0wuWI/dvFHeze+QUjCY1TKDGUyadcykCRtZLbORWVz2OkjxrogZggdMYWocnFi8SxRNsFKC ci+WgqK33NvtfcsrGL3N3oneLu8SYNNW7wGv2vtFjAl0TPuHo6kQ0wonkQeKJsaTkvxQuZ7J80UI PSnNDxqyIOgXbIgmbsOH7N0GZO3Fh7kn2PTwz7DpG6oizf2F8dL0ytxqOYWegZwPeLwO711Bw3vg J/AdCeS/6w2IXnYg0QNOL3yl55DysPfLwPfct8pvPd8FfghqdJygpB5d4BbPRqXS7GTCjkhsoo2z VbtsNqfLZy6o40pwojibxIngCuJLmbSykGRIagwGrcZnKujcxsari7o26NOgUEsmnXGzNm42cT7w seEQlK2LsTacEYb4LnYEtcrlhp51oqZLs1izQrMexl9X5WlyD8SeotRTyMn2LMBxQeD5/yLKDJVe UMISyN7vAO6iZhWubrJpgBkVCyqViEl2B4aOtWgzKNbzA39/fMmz18D8XqL3F6SWjS/eeP7qBbJs W6gQRg6M2nZ0zqtXcS9ixQxatmwDo9b++pyH58o1slUAKyUCQtnOk6YdkhcnuZwV5BznuHS3705x v+975/dp7RPkCR+nl4XRElGstuH8kM2nt9nDKTb1IPBL4hyJi/Hu+H4ch4gnYXNPpX3hNNHJDmzO xSrKTgsvVkGuTXIqFc/5dBwNudjVZ/t81U6fz+X0hZwOG7QXfuAxcNkJXyRYI60OBz5+lIqHXfGQ Na7n47owvuSi13EE9l64L8QrnO3OHudRpwD2ZKSkc3DxcluXba+Nt6G8HR+ZcvTTm6DS3r89I/ui XQhftGOHO+FNDhvTEei+wKgOajGYzaG8fFCX8R9c0M70OAPK/QeN5OkqyuIyQ0bFAjK3YHlpGanC 6WR8MvE/1HJbLs91tDisBoPVQYc5LYYSi+MX9FYlvWGz04qCkzYUUkkYqbHp9TZNIT5h5788vcyo D2Q14VGsbSn3jwJ/JjltTs7uUChx8Ehd6rYq40E9p4lytmRh62Rce6P8IQMmvHmk8xe7F3sWexf7 brPf6tin2Gf93K7pFrtN3eZui/AWR0W76JDskkNwch6H3xXw+UuTjjquzl7pGMONsbc4OuhM+3TH bY4nHK9xv7N/iNeSPRhNYjtUz7VWUbRYfQarLQQ91qOSPxqMLolyJCpG26P7ovujiuiG0mg0UeoL lRK9Uu6iMWoCGs6o2as5oPlakweiblBoNEqFT68Qgm7WxerrgpG01uXzuV2wtuAskN0R7Mv9W6qx CXzQqhAEv82KExxWOKn6nS4o9+CDwPHU73Qg74BNkvJ+WEdsNjsXd/RxV0h+ZxymT2jreEGdiIfc 7D8YtMQNyrhBj4OxNEMIdrhO+FUT2ilVveWiARd1Salal1RTV+NaWY5MJFrjkuKJGldcMpYGSrtK V5SuL91U+lbp16Xq0j3c1RBBHGC/HXZcZpfKEXCpXXLXGu1fywckpu/gpHgtlDtX9yqCthfwOCvh 8WiBZiVbwEr3Wak1LirwmZCJivWKtxQCTpnC6YK0ydp9BvjYI44AZr9yiYeg3UsPLGVirfOwSxxY 6nYekWXcpZ2H0OoUvwJmFOkbkoL9tRGnwBh2yN8xUAx+0IBloPIrumzifqfr6GV1/mkI8SMnzh9X AMlAGsf3xMGYpeBm9hy3knM73HY3mADGgo3vcZ90QOPggMapHfgs0Ta7WGyXVfqdnR0hOG1G+KF0 M2KxVFssZ9TxH9z81Rc3XxdgWx1tYDvYy4v/94YvLnlFrqhjFQG++QS+W1hgHKD8C/PlJ97m/2ew DEybC0y7CJhWRR9kxobPtuN4OA6QfSbVQtuwK0w1EU2VK+KqWhhZWKWcYb7A3uWbERLUoQvDd4e3 hIV/hb6LwE9LE7GFXBGcxWZwrAOzwE5i+zQF27/hpOE/FE5Xosd2sYyW9XG/lnRVZWWVVb50VdEo pQNbUTDAuizs6y121uekw3Aqyu5enUhHEoloxJeKhMNUDJsI79JURSyV8XQ0nk4F4yl3yGyWfYLB kETi7XAX6eP27gSEx01wY94rGUNxYp5oXs8coapP3ytxKIMJ/6CvMnktqI6hKwYgwSIzyN2dBibs 4PcpIDnzGPjpTWwX/e895S0Vn/Qb3+MCiMQAPNuJ0+QsOiMuhbTwY67nR7adMyu4u04yQa7Ah7n1 VQwsPmPR+fg2a/V5DD4Os2IVJ+ZGMxaJmTjo81zZIHjkEvTPg3lMH9eUG+DvwQkzExkjxWHB+Qaf NNKBF/yG0iq1TiuqzYRGNaK2Qtuu5bUu87wnTzeNMz+aIcdU8dYneblB9Qn3szfYkHIHCwoS4c5/ 72UjUHwpH44EMWvMDXB3y2MYKQXPHIOoM2u0UdoMuB58+gnwPUzXC9Xe6UdkKysUJ1mTQTsw1/w6 ezbO4ss29a2KFmYL/rfsf4A7kgF8dSoXge7UsEM1k+qE8vLCtzGGGOiFe354hN1F6Ay4XANvnZw+ jmwAZzmVX4kvRNXROdKkp1SPBp4q4+OqWGCEsNxypfsKz0rrLe47rfe4n1Zttj7qfrZ8p+r5km3W He7d/tdLjlXatPigZYryD5judnPXlq0p21j2VMnTZa9U/rHy00p1KeTRZyV3rDwUi4VD4VKzz+JI 1oVIXZLy1XpNBscwDkoz6G2lRFsd4nWaEFOVLIHHWnKEXl9qfVAM+VSswUCCwRBOcDQbQ7Q81Bya GOoKbQptDe0NHQipQ+4Gx/qKkJK1L1ZuUu5VHlAKSld9as9JJUsnTU8YOFw06hemHnoW+aBTeSdy zY3yabiTkhKcc4fIvbK/FMMC5qm7l6jAdtfkj5JaBFf+2HazukwNeok/KDEZwjCnXiu67iF+dLHk 97EW2Pw7Q7VQcA4eaCoe1pAr6ouuu4OwxzPbNlTGMsdaz09/bv/Pnzr4wfDbJq5cOWdbUCM6tCVz H2zf1LuEIcwrI24++7kF51552SV75l79wP2Lr9llFG9rmz9MC/8qrdGdemjuAMwskHF/aRInjjjv nIumdTEdXRZrPw1Q6yWlNLqNsRLPSjqxXGYjwgavnZUtrnKby2W3hb1+FU91wbi+Ex9pmbszHtIE Q5Cm5kop3gv/F5VG5wsZMfOc0p2KTCb6oM3KDjwYrYutB6y81ZW84I7Tl4MtguxlwdSfMJmybRIU zXXIyU7UMEH1v4oB8mLoi4shTb5YQyt0FdGxpVNLLyx9Mrwl+hzdrXvevyvxsuJ19XvCx+pDii/V JrtQSasUTbpWOlF3tn8qnaLoVHXqLqTzFYt0l3PXaq/1Xx1Y7e8PvBDeGbNDr320VyeWQluxzS+7 wMk+Gx04eQ3FFjTScK62FdfxpE6VnnbKkKbu+6CPKnP/2vnxXfLGV/QYffjDO+/8kAV8NOvd3+a+ /fXLuaO/3cIonDBSNvb+btNf/rIJAZjNvGPGAzNT5OjOkBaqISjij0sZZF61fRz7c+Jg4GDob7Ev E6qoLWEfHZwQm5CYEuyMzUhcbLzYtTC22qWHpv8baZnF2mGZavtJbH7iuFuhhIXS5obrqDnmXiNu FO913uPeYtuCvhGIc0aX1SN7wbv+T2VfAh9VmeV7v1v7vt2qSi2pulWVSlLZKksFCm5ILgSCLbKI MICC2gjKosMitO0yEp/zRAcXaERF2zd5z21aMNAJKIs2jCJCY4s9oqO20yCD3T0z2OI8munXmGL+ 57tVIYljv/fCL/dW3aqE1P2+c75z/ud//l80qGEVwoOeRMZk69cbo/8rmEjZnIp5Xk+cbYwfjIvx cJ2UQPhl6eipZETK2AhSRqj20JBxRmsK5y2iIYE6VKCogX8YYI5E8BiZxroIS1D+RsQYrCslYIL3 NWm0wqIlYAB4HyDKBK05wIy6t8kdgv4Hbrtxx+P73/zo5YXHZvqhlLH4uSPHCheZ7djf6xxRspKf xcPByOTuf33yuRNXzJCCntoJy5nunWMM+kmicC/u9jbYQgz3+/NXv1ezpAay12QAnJKS5QFA0hxD Gt2ruiPZYCRSFkzGrIFktWWBFWbQX53A/YY5yMmEFBPsNsmEKBaqIBa5mxTOGQvXpRPdCNP3sIf7 a2u6NWNwX1jF0Rs0bFARmEyBasAQHTlznuzgO4yAJ7xTdgaKRtDvxM4Z5GKm7CzZxV6oE53tk6Uq gggqEUGlzBWhQR81uMSluD/SUqnmYGnxGdowqxc1F/Ojz1f/8s47f3n7Z0/w5ys/3vLExx8/seVj /W8v3ka+5aUjd56644cn7zrCPtVmcs9nn/XQTBY5yzaLmRxCoet9dak1sNUvNosTxJlQ+D4sHvb9 PPSp99PQZ5F/Lvsi/qeAIxStiebEfOzKyFXx+ZFr4ysit8bvjTwc2RrdGnvN4Fob2Bc9pDvkPRo9 GjOa3/aEZRkrsKc8ETTpEx6bfVZY6RHYSljQHvaFGkzKClN6JLZCOiAdhyvSQ32oZvtlV7RqKhA0 CuU5q5aWBIq2IHs15Gb2BSSw5M/tikjxGGpcZwddPSgvLEHMrWGNF9rMFEwaHVZf/83fBb74yfXv jfc50RPX+If7Pi6cZK4j7zHrnNCHmzefCLNnn3unvcUV8njczXNY5Ohr8Bz/+74NvdsfwQyClrWg vxYzMyccU9OqfYah23C//b6mHnuffVftm7Unaq1BEFLsR9zupCXXgOZ0BLN6yPmBpWs27GGqGmYs aa6oTgrpBZlEObaVkUMN9WVGi9kKsYGH0UqJMrscPs6n5hbVkfWr/pX+9/16f6h17V72bpEZN5WT 8dsgJUZJfhsBxQNc2gAr5dAoBnT80gXOjnPW1EYwoHVxoTaSiaORiEGD5TsZ4KNa0MIIGx8EIDkm 6S8CNWKW8QrzwAoKZo69SsdXtz96x/oW9IabfU8u+cs72EN0UecYmFyKHcW9NB/XLftxwBzweoO6 4K2T1mlxmyj8VeFe/b2YmVXo3o6pTZOklZL4WeKD9NnEmfTFxPkK4/LMbfU3ZW9quctxT2ZVy8OZ 7pZnM5tatmV6WvbFnKKZvMFC4qxlLQaD2ZIUhVhtU5nsDsoYS2dsc1NCttYmhM2VJrMiGiGvX10u M9lqdaMtYqdF57IQRLbDchx5d7i1IdGd2pjqSe1M6Q+kjqdOpc6l9KlQrub7wyYrD2KIYQSHQQFk xxlyqRTGci7vEI/BncSQWbwfUOF5IYz6WI25GRWzvhjIb3hWZ26kU8aOotkf++oD4OGWQPriRKfI hbWWMHiPZHKKKIXxMAYKOaNHtZIXgZ4RGk6Hug7dfdraV1G2cv5U3vfw9ZV3VAXWf/jKxYuvfLj+ 2COP/PznjzxyTDzyNPcYe2dNqLu+GrFpGbvqezXjv9nL2O7dTChMefzdX2x+/Be/gC3Mhi3cBlvI s9Vq/dbwRVnUMz9bZFxr3MgeF3vY8+JO1i9aXzC+aNpl2G06bPrYdDJsCps9AB7gt11SXBKl+Sgh BcuSngyY+wh46uY31tVlG5MZN7BP8vdoJJ3P4c+kW4tfben5xfg1j6StV021ZptaW5ubknlG7Uz6 THU1hjsv6E1uq9kih06WMawTz6m2sUJCbjrQeBxdHHvYv/WPmVwcSvgbLaXDsejyeRXG850OH4na 5aWA0rbLz4Y9wUul0iFDew9kVhDLnOpD2yDSNXD0oD7iDkcMJmM6YgBDI2yKaiYJm8RMKVVv9grG S+d3y/a4pEU/qPxRAKTpzqBzeCTWTZEPKoDful6cI2zmjM3XLXxo/vVIPuKFr2gtvv7+tfPHZ28d 2hLDLRtx0cU5kyc9Nn3gPwbtV3fdXfXyHQNnSxe0UAnryhuYDQF0mOsQwa5Ta5Kh5pAamhm6KbQm 9Nchk8/hnitJSYfRbplrMCTtgWhoix9xrO5tcQ97/NWo0WG3Cth1ggBrEWmIU68HEDQdsE+o/Op1 l3NEINWcltNxARY2LF277OdgHv5Uq6+UL5Zyr9J6Km68Zx27kj73QBm5J3blH4gTZfB88knh6m94 +YliQHgqxDIUjewq3KvL809WLvytWusGuRTFPN11rnlRRHfRNa5uoZt1i926LS7nNPNj5r81b4vu ixqi5ggV3aKwZoPNvIe98qpen7RpH1h12ozhWSHZ63MGNqP3YA+7QfVANkoXi9sdcnn5dGCYodg+ tpv9sujxOUiPICQ7WAgZONNxYaB4E3gdiUFHi3/ywU88tMHNAPUs8eQ99xUcRAcSJ8+dO25W4Q/8 BliW/zV9+oFvuOXftHxjfZwb/sO3wMoPYFw3w8qBzu1FO8rBflSkM9StBv0POqvToSJ4i+9Fn3go x2qkmnRDpiZX3TqmoiM9LtORWyYtS9lu9rGUb5RPrJWmZz5Jf5I7mz6bu5i+mDOPTY/NLatY1rpN 2pYyVqAXDvubcD8w6MOjlLTuwn5ncVQtD/aD8UJn1Y3IOz4/FY8nU8ko6CQt3Fs0NnblGhtbcsn6 XKvHxn+RM2t1Om3WpIeYj8igNNpj2VbOe0xGJF9dJV2fnMnMT2cylelkXRpirBVya05CW00KWxP4 ZCEFBb2U4GutkAwpllSiUb8SMVYqdS1KfX1dnWhTvB7BrDDRKlEKbVkBSPzpdMXs1n2sR0jjimNl rjsnyrnG3I05XY68UfloyDJ4sfqstHRbRLdFtjTiAa1DRkto1H72LLiwZQzAZqlSzFmJ1HmHPnMN fSohl7TWlJopg2PW6zlFeS/y3BP9ICmDOHSiHzxlfgZVmZ/BVqZz32XCMiPGMldyJY7jMJzzW5WB YT4OTy6DVl+PeC+yh+xI/ziMuuwDmylckaNd5fpdHlKeONWHM9wj5zAPjaBTiKAlc5qkPnOXLtBa WOqCAhCA0HsGMvy9QgqMq3QoJ/OXiUNHvAlWMv3B9LBlkPdcqkYNcitLNUPGXh+SLL7NFtdyW3GQ 4/h+AYoV36dHhXN0VSk8yX5Q+JshqeOfWB25DzKowu8L80reEntWMezxI6Ce/VuwgxeouYX+2/33 +xF82OdSzIgocS5FiN4y/xaPJ1kmIDAUmOxxow/ugFvnDoWGekOK/v6MF/xOD7hpuP/7d/J/pdTh 8oegeNePv/UAYrIusUZtc4125Z1jXGNdba5xLtXV6Zpk8VbaR9l3Rfrq9FVsFBNnRxeaFkbXmNZE DaNMzdFJpknR2SZDo3n0OG6fJ8eysV3tY8eOa0+O9gMI7lVjspfN8L7vPYWmU73gdXtVQK5dTq/X 5Uz602jBQaAgJN1gOHfFksl4LJkehbYFutjibhFburItLY3Z5KgulS4uPtnJOrs6OjvVjmR91hir bKivLo8amalmtKoIXcaahC6csFh0JrR2pNN+q8MpoyQRb20MdKMK8U1leUyuqqTnld3Qsf6mXcjK He0EZAntB9qPY+PR0OSaV7S1iIEhynFgImnAIOmE0aBymxb9oaxQQoPRd/JdhOFhpjTcUtAuNvLV UjBhJC/Mg4mRQUUxqpCrM2WQItYbbOmMvirODMaQNYjNpAw1cVZmRzmb4OJakvvhQlGQZJ6yM1JM X9GAaL30e0GPb9OlTxF7fIq9bT8oxZ5MU48CE6o/EG7nXcs4I6w52Iczt1u2wOcnYCCIgiCpm5UC kZSHYzKDgYn2fEikMhLD+d3yW8cvTORvH3vdqMm8G/uZaS0NN4/vIot7ZnpTfd24Tn75NF3Q3qFb OPv2SV1dk5Srrh3YTUYnPqnOmrR44AP+eFPnnPLMIu0JTXMtGcEsvxWzfA5meZ6tV0d/aPzQLB4y HjKLz5n7jH1m3SpTt0m8ybTIvCiieybyglG8O97Pdom6aHxZHMVaENJjsFc+K13+OEr6Xbykn/SO jGm1JclJwtxdxVVJi2ndQtqdFkcEto7WLi2wbVbyRraPnRJkIBq+8oTehBjXCzDRYpXDJ1GMowXF zcPbjY09CG9DFNvylaM4SYdMToiTdHw5OB1HzrAhkezw2TjyjaWp+F1xrRSJQh0Q24aKRogoxlnE DB4/pZvUcnV5svWhtgeCzk8jEjlsgdi0kLOAmAXza7NnyPTRUpyWEbOo5K5LLp7NmfvovBun56/j U+Nz8tFd/+22a+5aNTS65a/pFq6bNzET2/C9ga9K7lnUzbu7878PfD34nGerFANuAiLVhhliQyHz CjXvDegD0OrTHWVHbR+KvzL8k+lDm3G5aalHXCwu1i81L7Uuc9zqWey7OWj2J3SuhAVwusmeQIaH Lv9QBz87g/ysOvytOwXmBuv4RgS/e8T1apkX+DneZlTxnhWA0I8bTxnPGQ3GPex0fxlcUEl3Bosb aMmrcFtrCbilSIBDJSUZi/3Q9z0vSKB9uSWnFNx36TTCgtP9jpgnxg2a33Tqf9OoirYA0dhB6YuQ 7s0FBEuxDpuEg9mKg4kOuH5WLUfEZ5JAkkNPoLcjIHmC7RIdfBIaR/GOQ6oXD6xWBGtmOog6V7yN 0R6Ow77mMcJuS/gMdw4arqhvK3wJMPb3zHvoTeab/XlPz+f0zXYcLJxjngMHIbp+7u//x69PPvvj UycxNvXADch6SQuwXu1osrrGVOG7tf5qCAUscCxiGBPjcscadnfN6gbbW8aD1k9Mn1g+rfqk6TfG LyCnjC3g7jY9rNuq244969BVgDQ0lC2Hflh5MqCtUjbvkWFL0vhktrgaQeYo61L8UQW8Dmc2YbNm Emyz3iTElbSxMuEyM3O4pU5wyjFX+XTU7leU68tDzUPBd7JQ3nLA9d3bOIDwX+EHwwxwxBM+5iWs sa/a3kh5Rz0n+zlkRqPedOmfflqVGhxzPuKYNJqVEb2MQPSSo/6WSQ0ZGlYzZfvae/7h9sLAG58/ rNXhOPxThNSf/eCprSdObH3yhG7h1uvmrzm+enfh0msFI9kTlbn0Cg+Ilm46/v7GTe8fx9h1Y+xe xtil0Ol9FakSXuhzjUFacUHNu8b0Ci9FetO6mcIN4UXCX4aXJbBLYvgHDfcLj4QfaNha+eO6Jxt+ Urm97sUGz/Mp9kxmm7wto9PyBw0nLsJAmm+2+Y8U3bLmhmeSGy4lB0K4qr5M8VIg76xPRNHxDYSo ClhR0lQB8fyQ3G1lLusp6zkULcNNNQmSo+qJ74zrj8dPxc9hg+lQYwlE5gF7CWenNiTEBUCFqJ+Q 0w6GA8l/3ssOH9iwJkeTRSCclupIrrJaqoU05U8zI0ZWQ+0HEaKRAAHgIRhdxQh4aPvb5CtXcjy5 gFZsQHobTr9eGGC6n53acOKpp07Qt3h0K43gRXSMaCPK/vQagKFXLxWmbDp+fNOm99/HaroNq+m1 ujvg7f2qdI+T1VmmW5d57/Q+5H3C+KzPxDM61RY/UszeIv59Yi+SHVW1FJMyatrvVadXT+Md+8la m1PiW8MZTA5sTCc53daKtCLUGq0dbiyGyMUoJYtYXaZz2LYhXC9IcoUrNSOlAXjnUsZUqG7g0csL IkSsiRw1VUucMCpcqIvGRYvYoCTxHYDOCLv7s4sgVjlPMaTa7ZOcAW9UW+LQCMDXNiJKIeIpyjSM CNUHExVRfP65SVPuC/msTl8qFxr9zAG2hsZp4DbK4o/x1h7dwhOPz14c9gFlSYXnbivk+OBAzEF8 nQYLI3L80kldAVY2kX2tPih1RMeL3qvQirx04nZ5++j/mX/Xd3TCr30fBT5q/9WEf/Odyf1uwje+ 87k/TvDafMaAod0yIe7zB/ztkQkbklty+122Ob5r80vzy5S78vcqD+UfUl6Q+iTro8ruuHi1uRZ8 6SZ1XFsObFunyW8fI+RAt9U3jHI57TorGLchZdw4dKx3ok7TuksnE82DPaFGK0clEoJimj0mMT1G pFsdSLdNs1JKxp9QKeEPYD1U563IMLBuO006Y6U1Ybu+WLch1I4rlC+Yep7VEmN/kINLY8z51RoB dwwvdhXVaXndC8ocHIjLj57glaNpXzrY7o8LSmRMnI2WcfBOwNNAR1lcAFt93NjyNsQyYaUtHx8V F6TxHh5KU9SPaBoHyjbxxWOc0ujvUqScNfr6pd8KQQh7TITZtktojDjbnwy00ZzQvrim1CrqIdor 5LHGWpB2KBIOeVpxy9DHo0g4TKQldqKERXWiBAgkSr8Hd4be9BoFFhIdtD+CjtTGw9nCJHbEZ5sm UkVCw0OIxUTZQ3hVLPThNSqikBZSRXELFt09WjZLdb38zPWPTFO6Gh/YMfH7N7z3zjvrzH4HpxaH gqmtK57vuXpm4Z0HrzqxuVdXW46ZujEWDoTaqvJjalvbqqMuX1nqniuWv7Q4KTnDsVcwif0N8caO uyZOy2bl3JK2W9dR1vkjRFsKGEd1wlG14mKEObAZjvi8dbf1TesH1jNWww+cDzi3OF90HrZ9ZDMG zaQA3guu2GrVb9brTWZwfiSLH5rFHq9kCNkze9hzqiemVFSYFIYd6+2JkE16EEKcP1GlujpgxJWJ w0LUHZXBPD4A3G6P+EV/PSV6QIbPwDkgvyuJvFBjKDkJTS18mJvQ6ivhiNVmC1vigjVij0NpgOor vFyNXWM03isYyHR3QYTVaqf8zpeiV63eEvAj3Oc9xoX82lWzD4+WHFDNlv9j1eZeToJ9hgZDt5CM e+CX31vYIjtoB4jE1L9ZK2bpIlc9ovt4He7jPN1CoQqe2G7V7w6I1QEWRoGKBzn2rNlut5iTLq2Q aotMKxZSqxL0OsTmWEWXXFGRkJNVLOCS5IQiVFmDZQq6fV1miwJpBQl0EFT8hCDoCc+plozbI5uP Q8aBAPbqkQA7biSVnXn3FIxF66P6f14OS1g6Wj5VQtLlYTC610fKtz69Jy54jZJ25zUz9BWd8BuQ cz6LePi04L10GjZH5BBOACEZzsHUk8Zm9OWnxaVT98D2I3er13BQ/O0l036xjQ/DVzyNuPvHnXPX ijE+GI/MXPa69lDDkWkMFKyGP8IYpADxNm1j27zbfTrZKttku+yQnbJLRuamsLx3rO9m8RbPUmlp agfe9LLPq8YZCeX0qn7QidyOrEPnmMYFc5KQ1NQWUXxaAKOXYVBSw0HRxGicz+VwACdBIZoudZS5 eLv3tEHY0wM+sqztKSWlBAH67NhoCmgntkUrApwRt2LVKVaLMaUA1lym2nyikvV0eHZ4dNgibZng YxYVurGs0bvC2wMIR+99g+3AnEmzhAZdAhZZ9RvORsawlxiXRLj8s0TkkbTKEZDiyJfpucaNW6Ax kcmJDYJ6nIU89Iq489HCS39B0Q1T6LiB5dKsgasesjaqiMzWOWgo+XBO1gACekwjmb90Sf84RrJa V6e+UB2oCj6geznwAopZewO7gmZBdIvrAo8FdgR+FjgZKATMPdhm+riIvffMflC4/dViRl/trwrm 9Xn/Ffor/HP0c6S5/rmhudU3s+X6Jf5bgreEbqm+W/9D/1OBJ4Ivitv0f+fvCe4W9+v3+HcGXwu9 Vn008E7wV4ETwX8JnAnW2gKRAFr1A7XB9aH11dsD+wOHDYelzwK/Y78L/lG8GPhj0KNxiEBrL5GI NC5yr1q3soIJ4COrFbpz9KgHdGTdyoruCpHIyeiV3MqZyckiM7lXzdzAGweAUsZRJNV9ZWE7OEkZ F5jFspWTlJNFknKv6ikvz3KGchIM5S2coXzpSrW5xFAGF6nIUJaHMJTlIQxluchQPgDMI8jWYDad wu33A0hP6YVZYCvP0lurlERYkX2Kw6jYE7LscNiNK1DpeyuEWsrDaqWwOaQ2gplcXQtmchrMZLU8 hkMojAMA5pCi3oju9P3sJeQgQbYB1OTZoto0JifS+0R6n6i6PTkUp15SHQb5Rj/zvyXpN0sKGnMP 9jW20qk/PybHn9ZqT/Hf8Mv4DfyMn+dn/DI6q95AMGdQ/a3rQGEWicksgsV8WsgMsZgLC6BQUPz6 ktjKC4jMjK8BTmVeUKIy154Hs/nMAqFMgxwpyuHRLNpkwFZBOfr/l8w8wsqygGBWfasD4L+6WGQ0 lxCH3dXmkFlPfOViQMNWJ0w6XVWJrFxKSoaSlUvXdA8u2btnSW+G7PK3dFi+pX/RnseWETr9Gwp6 q5kYBc1hiIXeLEoDZ0VesS5Z6WL422Ww0k7xR+qWuCfuFb15zxyPGCGMJZ68kd3mXZFYkbqx8y32 lvs973uJd1PvNr+Ze7PTBZU94Snsz9fMvJ0eb2fKnYRKOvauZolccwr66jL0ykFjzXV6vV45kYOw TU4EncWlwFH6FK+SUGQl3KQ0KxVKSqmZoHQqrUpOUdTOzo58viOVqmpoqOqYZ8jtYQ275M6n0R6O GR1hzGBPJAJ2u0GAIHignD3tMqzA1AhPggbOqf7U01XYXwbvSzxdNc9Vni3CCIby0ESrNWytMSrG 3+xjJtgIpIiHBMJnQufLvoTQTRlnNIWmnimjrmZEwSF8Ux2RXj0T/rIMotm4SBeK57CAvf/wNeJA O8nw6NR76ef9KCShyf1EPwpJOG/vRyGJN717U3Q+3Q/cCudf90Xa2rXZTLoIRKOnjtiUexR+3l2H H3aTZg72dEh1uGP4GXcMAa87OfhTENL5q0MufGmZ1m5PmcOVa0E/ex/OCHNRQycoY4EGSrdcOg0x cxs2RwMqhXedVq/EA481EGz3YMls7xyP9ltGh87R6LxldOgcjc5bRodO2jUN5WZXR8JaLrfnXDg0 S6FIO1T1/R3NFGjjjE/Fz9BEP9Tvlgj5PqQ68CDVhkOCDsUcoGjF/KRF5BSMs2atma+EsYwoO42C xofWTNNSsgo2nLRtTIFZcV8lxPfihX8no9hQ2FvYzxewwlexsMtXye4rvFzhw+tf0Hq2iEVY+SIy oS/o1Qr2duExUwABOwHgbEzhHQ3rhF4fEtMrzPwVrHeFr5hHWwftASiZCVuA0zwFq2pmryOYEMq8 ZclaRyLYylo90x1q8KLv/yRtFuwUc2VyCVvi+aHvh8kHfQ8m93re8O1LHk7+Y9KJBdTb7PU0Yw9H CkhiDkd2MJiJJGPd2PRoazIGVC2STFEHQO+uhkaeGwaLLQDJ2mafRSMBGgxbNQqgBTJi6N3CkhNs RDtUlouJJMO+ZuoD6FVvq6rK8kaAJBoBfM2QEuZd4x6YrwDs0esTWDNe8ELa2xwzeLG7b1KJRCQl HIZFixT6VCg1TQp0ZJ1CbEZMXBk7FTtHmWluhgGtKG6DbFhpOGU4ZzAaQi01+xjFPXw3wTMLVgFj WDUIMgwJfoqyz5CT4WoyZBP/l4LryIhnhKsefJlLBH69IIttN4dXZE1md5uZhMFXLUgUJxOYXcUu vG9Nr5LGTHGGJsRbC3eFYmGHP8A7AVaxOWwmD4S/iEMVsmHg7P3kqgu8iZSZ4Ju9EJTn4dN08afa FMLkuowYUST1JTjKv8dsCgr/olqdBBEzs9MqvoG9ixxgSFoFPUbPZspysZikNcCnzERf1uXDPj3J gJOJXlF2ONFH5kSTkpMFHKKdOV2yEMRGNjI2YmQL9IrL2mFdQXhdKLBghZ3ZQ2Vri3gBQXRTi3xn ainVMhEivmqtuWPg6hj3dSJ8HHwVaIYHydfxMzwWzh/3wV+RcXPFl2Gb2wx7gttOCT4DGIb9trRc 3ISNtwZ3v9F9NLBBzHO+xYAgrh64oCV3UwbGraEbe2SK+OZqevAOuiuos2ETKscOIbEX96gFG0kI LCdUmMwhZ7GTAngyJav4b3XFTlf+f0ITUDN0X5m+90/r6Rca7oT7AC0WERD/Qt/CLDxg2rMhx2l4 rIMgSmnv65E7X4/c8fq7drrOosTRhF2bRu5v3Ya9rVVhgjBRmCQM39V6qjANTawzhKuFmcI1+Otm C38Bbfm5gK6uFa4T5mO37hv438kEtJXwR0aqWE+bcNVV18ys7VyxdvXSxaunLb5jxjVTZwn/Cffy MsUKZW5kc3RyZWFtCmVuZG9iago0MCAwIG9iagoyNjU1MgplbmRvYmoKMTkgMCBvYmoKPDwgL1R5 cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvVktISEFUK0FyaWFsTVQgL0Zv bnREZXNjcmlwdG9yCjQxIDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hh ciAzMiAvTGFzdENoYXIgMTExIC9XaWR0aHMgWyAyNzgKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDI3OCA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiAwIDAgNTU2IDU1NiAyNzggMAowIDAgMCAw IDAgNjY3IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA4MzMgMCAwIDY2NyAwIDcyMiAwIDAgMCAwIDAg MCAwIDAgMCAwCjAgMCAwIDAgNTU2IDAgMCA1NTYgNTU2IDAgMCAwIDIyMiAwIDAgMjIyIDAgNTU2 IDU1NiBdID4+CmVuZG9iago0MSAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnRO YW1lIC9WS0hIQVQrQXJpYWxNVCAvRmxhZ3MgMzIgL0ZvbnRCQm94IFstNjY1IC0zMjUgMjAwMCAx MDA2XQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDkwNSAvRGVzY2VudCAtMjEyIC9DYXBIZWlnaHQg NzE2IC9TdGVtViA5NSAvTGVhZGluZwozMyAvWEhlaWdodCA1MTkgL1N0ZW1IIDg0IC9BdmdXaWR0 aCA0NDEgL01heFdpZHRoIDIwMDAgL0ZvbnRGaWxlMiA0MiAwIFIgPj4KZW5kb2JqCjQyIDAgb2Jq Cjw8IC9MZW5ndGggNDMgMCBSIC9MZW5ndGgxIDE2MTM2IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4AY17CWBU1fX3vfe9N/vyZjKZTCaTWTLJABkgEBJCIJIXSFiM7IsZJZIAkV3AAIKi xIXFiIK24loBWxXcGJKIQ6AlragVpdhqbbUq1OJSW4S2lLqQzPe7dyYg/fv9v29ezr3nLu9u59xz zzn3ZeWNq5qIhbQQiWhzlzYuJ+LnHYYoMXf1ymAqbfUQopt+/fL5S1PpjCVI3zB/ydrrU+kc1Auv XtDUOC+VJhcQD12AjFSaliDOX7B05ZpUOvtDxLOWLJubLveeRXrQ0sY16f4JLw/e0Li0KVV/5Bc8 vXxZ88p0+mHEk5ff2JSuT+sIMf/iWmTWMUKS+I1BTCggi/yTVJCfED1hRCVFZCYh8vNyLlGQ5uWK fdaPOp8ZNtte8W9DjgEZhDz5lz6FPH71sTlXf7u3e75KDBYkjaI+L8B7+pE9E8lolXy799ub1VRP vKT3l3WATJf6tkc8gbcPSf3ISQCT+rVFcwMHpD5SbtuIgJaQwu3OzGJ71QApiBaLRBhEuAywF3AY IJPZkh+lKsL1gBbAXsBhwNsAHSEIeWkQsAywA3ASoJNyJV9bMKBW9ZGy8W425muXssgZQBIgkQDC IsAkwGzAVsAOgE7U4znLAOsBhwFnATqiSVltDwzB2LPa7hFR+6IlxSLZmErOqhfJ9qtjqXjClFRc PT5VbXiq2uCSVPbAUam4T/9U7CwobkHj7SZrcVeVW3Jjkm4MfDlCyo4QO6UkQHZKmSQOYBKGKnI0 ydmeHynecViSCZWYRMk8Ekh2SbTN6iiuMrEkO0OcJMC+YqdTJex0u81RvKPqSvYJ2Qs4DJDYJ3j+ zP5M1rOTfM0RVgJ2AA4DjgPOAHTsJJ4TeD5mHxM7+4gUASoBswE7AIcBZwB69hFClX3IOUaEHK8E MPYhQpX9CdP6E0I7+wDYB+yDZBd7p62svPiAQKJFaSRQkEayctKI012cYL9r+6YfOCoCSoOjDkp5 ZCQZIuW1FQwOJCRPW8XCQIL9pT0YDeysGsTeJXEAw0jeRc/vkiBgMqABsBygA/YesPdIC2AbYCcg DgCXIVQBQXYU8BbgPTIIoAEmAwzs7TZ0k2DH2yKjAlVu9hv2OrZegB1jvxbxW+w1Eb/JXhXxG4j9 KD/KXmvzB0iVGeUE76iIVcRFKFfYL9vznYFklYMdxgoGEBYBKgGTALMBWwE6dpjltc0LONHIQXIU ezjA2shfRfw0edJAtEUBLTIaDBjkQWT4FcAQ7AjuiDAtsv0RJHkQue8BYDyI3LUFGA8iN98OjAeR JauB8SAybxEwHkSumQ2MB5FJ04EhSLAnXs7vEyibtJgGq+zsJqzSTVilm7BKNxGZ3cQf8o3Mx/hY W2EhVuxRLdqvMNDSSVsO0ZaptOVJ2tJEW26jLbfTlgrach1tidIWH23x0xaNthykw7AULVTruCxZ rnloy1Ha8gJtaaYtEdpSQFvyaUuQlmkJFmobj12HqEZE7VV807FQ+xUjIX3sLIQVDYHnQ5AJhxEe ByRFSkOlYF6qcrafx3nthZWp9MDhxcuqxrFX8OIrIMMr5ARABoFeARu9gkZeQXN2hJWA2YAuwBlA EqBD7TzMY6sI7QiLAJWA2YD1gDMAnRjOGQyFkWUI+RD3ioEVIawETOIp9gqePDwhFtJyVZ8aVcdJ W33U7qeT/Ek/KyNuN+Sy02FwJKh1/3+sX//HSoxVRnYf20pyQYht6Xhr2ze5gQR9uC1yMFCVSR8i fhlcR8tJhBYgHkaaRbqU+Aw8v4T42HOIi9t8M/GavS3SP9BJbfyt/YFvfKcCf/UlGNAvfAcDfwgm ZNoW+D1yntsfeNd3d+CNooQBOYciCYqoMyiqHvANC7xwVFS9HQWPtgVu49H+wK2+sYHFPlHQlCq4 rhkpzR6YGrkmMA7tVfvmBLRmtLk/UOm7LlCRqlXK39kfGIQhRFNoIQbbzyc6DftFgzPKEnSB1l+/ XV+nn6Qfqi/W99eH9AF9rj5H7zI4DarBZrAYTAaDQWeQDcxADK5E8qQW5aeeSycOPx0YmhJZ4Cok DOViBiFh1MDIlSSeIdWy2mmjaG28ay6pnROMn58WTlDTlGviSngUjTtrSe30UfFh0dqEPjk1Xhat jesnX1u3j9L7YsiNs80JSqbXJWiSZ23IiTtH1x0glDo23JvD474b7o3FiMe9utJT6RzpKB9T/QNB g8hsqI5e+nkuoVFPNDe+vXZaXfzZ3Fi8mCPJ3Fht/EfTgrPqDtB/0rM11QfoP3gUqzsgjaT/rJnK 86WR1bFYbYLOFPVIkP4D9cAxiFDPgIOZ1yNBgz9V79FUvQK8j3r5PEI9o5EUiHoFRqOoJ1Neb19z fk31vnwEqJMVJM2iTnNW8Pt1jhagTgEC1HG3kKOizlF3C68THyma8flQxY8AVaiX+EQVH/WKKmLk +0SVonSVuy9WuVv0JKVGI+rwAM1YT/bWsZ5Ene8t5P+ONo2KRmn7iNjcWTVN4ZqGcE0ToCF+z+oF nnjLnGBw39wYLwjGpUjDnLkLeNzYFI+Fm6rjc8PVwX0jxHv/VTyLF48IV+8js2qm1+2bpTVVt43Q RtSEG6tj7WMnl5Rd1tfdF/sqmfwDfU3mjZXwvsaK9/6rrzJePJb3Vcb7KuN9jdXGir6I4PHJdfsM ZFRsNOjH43ZmNoFfG3JCsVFudflIwbwjQp7bcjqhrewm5mgsbgmPilsBnK8HVA2o4kXYU7zIhmx7 ushz24hQTifdnS5Ske0IjyLRlauaVxFPzcLq1F8zfshauYqTIhVGed4P/lClJq41VnPdujZeOK02 Xjnlmrp9ej1yG6pjyBvem2c21ySSXanMgcgczitK0sWKPK+C5xmN6Yr/kxfEmJCN1TkAReNgO9X8 dCVpjklxf+10BlEw/Rosw6xr6jqhS/FDojmGCTbTKG3ubY3PQ+AklUMw7eZeWLkqjaXXYmU6FlWb oyTa3Lskvc1F+WKJQKzVyihEm9JJsgFe5RmSLUcI7J/k5wDYIcnPexYmv+DlPGZfQtAl0kDIbvIC XUheIIfJr+hZvLWXHCAdhKtA1eRxso78mGzCsXYNcu4mU/EoyP8xzU52wDLZhQNzFzmGuleT20gn cVNP8q9kPdkgvYO3NhArySNVZDJZRu6lVyVXkVnkhHwnKSNXkRvIctqSrEvel3wg+TPyFDkg/TrZ TczES+biOZb8Svlj8kMyAG88SB4hJ+gDxpeIhl5aUPMn5EbyqFQv0+T85LcYQYjchDHIZAI5RrtY FK03kc+ph66TRqOVnybjySOo5SP1ZAF5lHTSUjqWhZRZyQnJY8SNPtag1UdIG9mPJ0F+Tj6gFuVs 8mfJsySb9CfjMZ8O8hvaJfV0395TiXVTsEr9SDlKlpFfkNfJ2zRMf8mWKRalWNGUm5PvEhcZTGZg tM/gzc/of9hteNZLr8ljkqOIDetyP19t8ir5M/XSIjqJzmT92DL2hHQjMaDHwXjmkYVY74fR+sdg o/3Mwo5LP5Wfk7/T5facTNpAkQh5jPyE/JJaMdMgbaZ30PfoX9hoNps9xj6RfizvkX+nb8SsryNL yb3kOfIf6qTD6BR6LV1A19FN9H76CD1G36ZfsCo2nS1mZ6QF0grp5/IoPNPkZvlOZaNyj+6Lnrqe Iz2/7flPsji5kUwBP9yO0T9InsDMDpDj5H08J8gnVKFmasMTpCE6g96C5zZ6L32S7qZ7aAd6eZt+ Qv+KI+nf9DuGk5bpWA6UH64ChdmN0DB/zB5nx/G8zf7OvpGypDwpKpVKFVJMWoZRbZK24XlJ+rPs lY/LSaxzsbJd2aHsVp5TfqWc1Vn0d+CMf+vCT7sLuz/uIT2be7b3tPV0JP9MMkFDnB4wwSow+kY8 i0Dv7eC4veQdasHaeWkhHUmvwsrMpovoCroGK3kXfZQ+Jcb+Ij2EVfoDPYMxW5lPjHkgK2Wj2CQ8 17EmtgLK2AOsg73HvpX0klmyS5lSoTRWqpeapJXSWmm7FJfekj6SPpHOSxfwJGWTHJDz5IgclcfK s+VV8hPy5/LnyizlTeVTnUm3VLdRl9D9A1rNSP1k/RR9vX6rfr/+XUMDuPMV8hJ5GRx48UdPSrdL NdJL5D42RM6GCfMb8PNsMk+awMCpbDfdzG6lHSxfWaMbwUbQieSsHMFav8Z2sPNshDSB1tJpZBEb nGpQ55KfBVYhv0JOy4cwt9+g5TU6C72NndFZSBt0pHLoSK9Kg+So9Cb5QDpB9fIu8ifZRLPoafaM NBlc8HN5pFJHQtLj5EVpBb2VvMRqCDF9Z9gCPp5In4VcmE6L6ddSEmrwRHBRmfQXcidZzP5ITmMf byYP0XnyfHIfGULXkc/J09gV/ZQbdIW6TPoGWyi3sgzaQZi8B7Mrp/lUUlzkLlovPao7w94nq8hx 2UQ+lp7H6I+zF6UJ8lllKl2AHXAr2UhWJG8na5U6+Xd0PpHoTFIgn4R0WycVyyHE6yFVZkGm7cfu 7oQcqJImIMcDzrkKfDEDEuJRPA9DTsjgoIXY41dDiv2GdOimswSZr9gopA48NW/2TCXXJJ8mjyTn kxuSD5ABkAebkuvQ4m7yKdlKdtMNPbeQ5TAl38fevkoZw44rY5IDWCt7n01j2y+nL1a7gHrIl3he BGVGKgdJq/wHMo1UJrckfw/u7gsJ+wiZA4X1FGb5FXoYJ3WRIT0T2b7kGGk55nuCTEk+kwxQE1mQ XEImkUPkKb1CGvVR0DhOf4f53kKa2NTkSqmpZyHWYStWQcNqrYL8uVsbPWN6lVY58oqKEcPLh5WV lgwpHjyoaOCA/tHCfn37RAryw3mhYMCf68vxZnuy3JmuDKdDtdusFrPJaNDrFFlilPSvCY9pCMYj DXE5Eh43bgBPhxuR0fi9jIZ4EFljLq8TD/L3GlF0WU0NNa//r5paqqZ2sSZVgxWkYkD/YE04GD9W HQ4m6DVT6oDfWx2OBeOnBT5B4NsEbgUeCuGFYI1nQXUwThuCNfExqxe01jRUD+hP95lNo8Ojm0wD +pN9JjNQM7B4Vnj5Ppo1kgqEZdUM38eIwYopxr3h6pp4dhivohmpoKZxXnzylLqa6pxQKDagf5yO nhueEydcU4qKKmS06CauGx3Xi26CC6HjxMk9wX39u1q3JFQypyFqmRee1zirLi41oo2auCOKfqvj WTef8lxKonHoZJu+X5ojtdZ4FgZ55dbWTcH4zil133s3J8RbiMXQBt5lBWMaWseg6y2gVC3XxeNs Q6wuTjegSyiWBWJWqfmltN6ChkXBuDE8KrygdVEDSONtjZOpa0NtXq92IHmSeGuCrdPrwqF4ZU44 1ljt2+cirVPXtmdrwezLSwb036c6Ugu7z2ZPIxbr95EmLHqqTGCiOsdqp15cWcrHGB4PTTAenBvE SOrCmNMwHjQNI61zh4EA+MUo3orPA0UWxo2jG1rV4TwfU6RxpUANB1v/TcAB4dN/vzynMZ2jK1D/ TXgh55OLrBanjb14PBqNFxZyFtGPBk0xxpEiXTqg/+oEC4eXq7CfudFAJmNtG2PDi7D8oRAn8D0J jcxBIt4ypS6VDpI5OW1EK4JuzRp4SVdvSeYMXtLSW3Lx9YYwOLmD27MkM26IXPyzq+6MmgXD49T9 vxQ3pcprp4VroRoHa1ob0lxbO/2yVKqcLyjWDWVpLJ4xuk7KYcjjGMuRRGlKQ+6tAnW5zhKXC/Cn E0w9L6E3gCtFDg2OiasN41JhzBQKpffM/+ulRPIsf0tEl15LTyM+PJoeaGrY8RGXpS8bnqVVqp0O kcOg2be2mi4rA6ulRjk+HYHjYeiHgqPjZAZ2ZgH+YHIM4xDLiWtYMpRMxy4S2bGcdPKyijnpl2L4 ce4c0H8MZGZr65hwcExrQ2tjItkyJxxUw60H2K/Yr1qX10DapRgnkey8Jyc+ZksMK7aADsf2YGTU vjDdPGWfRjdPu6buAFwcwc3T69oYZaMbRsX25aOs7kCQEE3kMp7LM3mVIE+QWopJtjGDqJ9zQCOk RZTKIkOk58K7IfJSlZBHydwES+WpvfUY8uRUniby+Py4jBk9vS5NFsEQfOuBh3BDg2a4jsFBbiYz ACcAFYCZAC+A50E/JTNQ54AyM9mte5Y8rMwkTyivk13IvxIwBlBLXyebAXcC3wSoJgSN8w1BcHuk I1zTCcI2SeWI7B8IGCwHGRq/DrcxqasWIzHBTvn+j9+0/NDPKjJtCO0/VHwxDwTCz0Gc6ZwMEbsQ ZsI+4b9MPBOgPz0CneYxuVbpq7tRv0Xfadhqyjc9Y/7IOsYWtCXta+3/UT9wHIQHC68oeDB2PSEh R8hRgADeLnIhKHVd0BTyHQnKXXw9YBuycuUd1Jx2gEjJj9tc5SyR/FgLusofkiiTdkh7cTmxmlAM h6JhiZikLwj7gibonpdAo/abPVG1Qj13Wj1NKisqKzYpA6P1t6pHBg+i9dFoJh1C6Z5tPXXZyt+/ RQuMzEh+LjuULtxr5dIZ+8B70+s0k9cvKy6/1ZplTCS/6LDb2QyOaNlWKzAHsfAc4rZYEFp4HimC HXwMwTFSebry9OBBOft0/7Olc2hJx1v6rMNqFchXWrbZDMxBVJ5DVIuFhzzvYpOX2uzQBbNVH4QJ toX5FzjI3AAnwA5X4hxZt4ltNm+2v2FTjHqzh9VkXJV5ZfbonOkZszJnZU/NWaxfbJ6bsSRzcXZD zlp2k261+Wb7Jt3D+u3qG54P2Hu698x/snsvTrzZqIXCJYOMlBhVIzNuCziaCQSIZkNuEOoYI9v8 r9+DpT5fHz2NYEUUyy2mTutXwLAdxn8UEItlqM6hQ4rdbmemynThvD6RDNU9pHioQ42E8/S6GYvf 2bm6beWoRe/senft/Qf2rFu3Z89t666sZ+9QmV7x/Oz2nuQHPT09r7zw8Mv0Jz0PnTkLa3HRVws3 cl45AQJ+B9qZyF4tKGlWR8lieT3byh4x4HqSGolOYZJRoRZGj5rE6E18ToQG8S7crx2qCtIlkl9q DkFQnyCoTRAUq6xlc3L10kTQx2tRNKu9ROldiUEKDcLCZkq2uZNW0A3EE52onsJiYF3SnhEkKiZ0 V5DKyqxy6ijnbEjqo6GwQ6fTlw4dWjaEfddR9c70hz4pWinfMnJd4MWxR2fzuVWAl/WYm5++nuYl o0O1ejIydDOsieS5DodDIF9pRlUF5ncpfs6iWbyC389L/T4bSvxgUIQJdlCzMFNWFm4zHYwFAw5n edG7x3h4jBSd5oOt5OERqNM56W3AO7Q4nUx0qBntDmCpfk5qZmcGm+F38Tzedhua5lvFbGYzgPxd E6v4Q73xPcL7472JzrShI5QRuoPKYd1B/euGN3z68ZaYZbptsWWe7WbnzRl3Ow85P/V+mnPWazls fjmD5eByIlf1q7pfwB2iB/MbEBtBLa/fpBp0uqM+r8vn8xp8XkgLg9cnWf1qgv2sfZKD4urC8xKf ARHLYafMYmrOegerzXmdHmS3Q/6qdJhmcbxUCbfFMraeyayT5eOCYuu+FLNDrpyPcvEC4dJdUXm6 u/6Uw8kpi2CTbWDUBlGDBOgstgDfAcNIPa2/MRYryAxFykDxoUNLS8D6On2foXxfZLrACfiT9RfK WFbBTx89s/uRW+54nB7I+Pq375wf98yvnpzlf+GFqoq5Xbcd+fT6xT96vDXj+PtfvlD37KGfbW4c DE6ZmfxMdoNTojSWJpw526NxLvb4COWsGrUgQfuFTVa7xe43mfpl+n2yv59P6WcNWy2ebEqcQYge NiOoj3Aq8uqRIi7QjhXxhzjLKytVSFRwy+nX1Nec5eqRaDEHMIvWV7G6rTXWjVa5xnG1Y3WONNW9 RF3kmudeZV3r2mhtdd2d85TVpAQlfuNhNlusNllP0S/lZNEwgYMwKPsRKy3tsFgyZU8n+xnJZgu0 PhilgmFanc2zg8uCLOjhnBxs0TdHhGyKUBJRIwwjPvcyL4lsG+BJ0GFt2e/QTjoMB0mXZr4krfon 6ANpGkZPCypymXUuWp+SW90gIyanCnqmyImtChGG3UpXxDLK3FxmCcLpyy6ivTTkRNS7EZJwXmRm R+DBxev3PnnrkKtcTnNzYuOihVtcHaEvX1xzdPH18+7Y1vPFe79M0js9j2yK37Ful+sJtubWuXfc dVfwpdfnt82b/fhA/8/v6+r592cQsV7IAFXphHyz0og21FlnWWB51LLH8oZFuUq6yvpjWXKCx4lF J+kVk1nSEws2+1FJdkmSLFkJs1hlvXQQF7oGHME7NRORZVQhR01ygl3/sqKYtNxAialXEgLhBxOb AeQrcUKZErRMs+q1vHCJviVUqt9mx1GMVbW6SghToZtJSJ8U7wA5tZ9Tgb1kS9AtYqX/Ho3WC0F4 jouXCvUzVchB9VzF+QpHOV/k8vJNA6MytozdbsdyC3+2FWe+sxwy7l3NPKRcyhtQLsm5uRW8iRiI gTqay6KZyy0tk8stWqTckudDPKCcV4jGoFaU0iGOIZlhh+SgbHv3XewnP3rttY6eUjr7KWn/hSuf 6tmFTf1g92IwHj/7Q8rTkLEzUzsH92CYn5UvAvXZTP7MTJ+TS06zXZb9PquNEr0H54XQCAQidhk/ 9/ku4ecfmKj7CHYG3xj9nEL22kVY612b25q7PeOZjFcs71n+lGMwZnhshV7JOEgZZO6EHJOwO9QM U6YzI+Ooze6yZbhsdiu2iJbBB6LZdtqYzWbXMml6UC/bZfoO3z6QalqQD88xW12mrle3qrKKTeIR m8RDiUf1MAw2tUk824LOQ7QU33w8CKYa1mZ76Yc2C65iv79ZLm2XehxkXOaJidY7yovqIRZObTIM jCqgIhGCT8g8ugLa1mXbBnslI5QZkiDzSKZLD00gMuPnmY8suaPjhS1Xb+m75z72fvfLk+66v4sa Vt577tfdtEVtvefIk4+2Tap0s38837N6Vs/5375+f9tJrkVOA+WyIfOySBhfB5AU9TosJMc/kHMo TkE2Y+BAZ8ivU/r6nVa/0cLFG1Svc2BSIFE7DnhBRiCpY4sjotDugaQ6K5QDgXDdAMi5lPon5Wda +CmXKVrMBG2B96p/QgcUQUoRBDdET5fjMEjrgy+LgQjVjw8ECB/IKaEXckTkpfvnyge6vaDl8Yq8 W64c8g55yGd6aX69rIe+qODGtDbKcc6JZaVu2s893j0+8pnlr4MU4yC4QW+l6+SVhhXmGy2rrDdn 3UNa6RZ5o+F2812WjdZ7s95yvJbhzMPubvMFvTwKBot4NCAIeXtS8/cLWojfQywYxs6B9NJI/M2H jdSYYPM1Ndps14LQt+yU2FU7syfo/fuLPc1xiUoob8tvzuxVo4KZWibL3Db4okJ5rv60ek7I57R4 dpbXF/HJcZEh5DI/V7l0vnEFWRGL0UiktCR9mPbKYYKcDNclUS25LolwHV20fMlnh7u+XLx00709 599/v+f8/XM2Ll6w4e7r528ePn7btNt3v3DH+meknH4PL9r5wYmd1z/Ur/+RzYeSuCbv2vpLOn3B XXfOnrvprgvJCdsmPd1yx7O7ey0JzpN+UkhfTOlsL5sD2IAFDmy/84LIfB8K0QrkrNaXU9TjECR1 CN3f4XH0j5r7+u22gG2STbLZXGQypeIQt6rQ6Sjf53lcheHC5ki0vhgsVn+6WCwMqM0ZUT327jH1 o1c50wlz5nuDuCS5tEIhuhyCi/8vvV7e1391hZ4udaSVDPde5dbC17qvDl8vLXEv9c4P3+y91b/F e4//Ufce7yHvl+7PgueDGVe4n3C/4JaG95unY3241AuDmTyhoC7Y1z/JNpuLOB+fHn2H28EJtqCD DwKfhJQTMxQzx+VCbVt/WH3DOshLBc2Oi7zk0BzMsS16iZfS5gk/5y9KLphoadVsBa2HiSKO95Gs tKSPDoIJMYFmBs8xN1giVKhrmYKXlr/gXtc47dbJQ+nQg0v3X6D617aevuXmfzz5/AfszadWrmnb s+7WXXSaevMNV63/43KLZ+ZiavjjCao+2vOXnn/2fN7T/uJhqeSx/Uce37J3L+eZA1A+N+JulNvF wyDFYdfrjUxXIUsVVCebWAVOFcKCWItdhl0Pw9zCrsBEKqGLCZKL7ZBROiRTAhw4duyYFDt27MIz x44RhttLosSgPeiJjc7fT212WDs4pv/ZkUa+FoyInHNajDMil5G6GYoIi9RB6nzDAmODulnapr6h vKbrUs+qZoMSw9XgZHWBOa7+y/Iv679sRtkiW2WbBPe6IsvQ7Qw6vd4C3IA7MFjzieTXml3YVUG9 xYUiJkGofa1BmkGqBmWLC28Z/Ypi8OskXYIt14z4UvSvGnxDrJOaseHMmtMSJE16aepkXLWdkKVt MpXx7Y1mnmzp0p+wSNss1MLTql1/XM/W61v0TP8j+3t/SK1WNlYMfx6smDdbPX2aeCorvKcrT1Wo p/HHvQNRnFybBuIzlrTqXg7dZJN65IjtyJFNSioGt9TGzbiZ98P92CHbJYO+E2YHSX7NpVCM3shP O/4Lw78QlkJSRkiK9NHpJTbkt6zuo+e6H9v1Pv3HI2PyfEOUzm/H0EM91ewauv3ATffeAwbAHQ7R 2UEplZ3q1UMMyfOama+RwWaFjQUqQSUDAtPzK60vxyxOXqzYLRI+qmUGo9lGDEZmMuu4VWuGPwFh Ivntfl7LrIIQn/Xau1+Lgw85F4TqdpmnobKrS3377S5uzkShxFDMifQ6MwL6IPdM6EQoiVAWoSJC A3hLC/MaDCckjiwd5ydmu8RbJsFbetBfsB5e+FoL8PMsAiM9aHKW2EWgWCRCbWZiMFAmdFHemkB4 U6aDbCY8UyqbqVmJ6IiIjjiriWYJPwKj54qgdQoPUEVqMvWp2XAq4QMG/svR1hNmN7hYjkFebdlo +TWW0jLeMt4u9ZMLrP1tddK18mrrGtsmq8HMFEO5dahtEquVqvWaYYJ1lM30MHtE2q7fbtgtPaPX OZndZhukMJeiMAMk+iDFANRgmWqfSjUws8FgNJnNVqvNhk+hjazB2eJkzk62G1rY4DYlaEjQwZrJ YjQFNct6MzV3YpI2akYJS2ALGHGIBu3LVQpbdubLQaVBaVEkJcF2tztGxDzRbMiFc/UVnm6wNOdy 4N6LiVP14PnKigp4xS4+XuwEzvubbhWsjwgG6yUW/zmxJL+DZf0exMh7gsNr4xawf1+w/wFiTX69 z2bifJ9W2N/dHyq39Q8JpX1/WbmtuEygLw1Abloxj8awR8gKWMKx2BC4/txZQ8toyBF24FMFx8O4 N712kDsbOjpVDvbM3NtTp3R+98/7x01+TLrw7Rj5ze9K5ZPfBSEvn4BF1I2dYsU9aJvWv8mx2MVq 1VrXteq1LtlswblpI1keP6QHMTgjBhPfBQbhTwOzndNyOAMZvEEvxZ/XYw0KV1Aw7QfiR7RwCJ1P 7QvsntQeTLMZ0rBQ4RLiZzeaBlafPWIWd4IJfoK5A5/ARHVFPU9P4HIaaRzQCMF8MF4w8+IsP8t0 sVDIAZwblH0i4dATrN8DE5Y8EPuq542ezfSWQ0/UXzX4rp67lU6bs2n/0oM93d3PS3TL+ll3ZsKF y/CFC1FewCp4SB69oIWcZht1DvVdE7jesDQgG4Ur0SBCvQjzcTZi4Ck/jkAsXA0RgqEXcSaSn7Q7 vSWIz7bn9SnBefpJe26fEjUdQzsVaZT/sT03kipHfVGOmJdr44EU2K70XRmcZp7lW+q70bjGtta+ wbTZ/pB1jz1h/8L2uV2FPAg67C6Hw+6wW4xOfHXhdZt0OGutFsVjNLqzvNl+uJC6Uq7RrCwSyhP0 9HjsdpvBH7E9ruMqOycVkBSpgJzU8viEdDpOF119MH95fku+lJ/n+f+lsY5LGZD2P700/rqXxuER u7lfT1ixIGw99+epgsbR7FMekFlsqzStoyirKC8SPqGUS4hbRpz8aR5JRVwCCVvWZNDs5XZ1uMM5 HFkxukLsKRs83t7sckdedrkTYNN85WqeCxAAZKZsXdTm/MTdDnA+ZLmzMsLSQAZ2CgvWEs6K0C7W euStm4++M6HvjKuS534144arB4Rq/0x3bdg+8aGf9gxSOif9eu3j7+UW5E9c1bOCDr5ryzCzvnuV NKRs7dgF8LHiw9PkF7JPHol7/TI2QOtvtBoLs63ewn7WwkIIxMyynOGF4wvrrfWFi6wLCxsGtVo3 9nvU/Zh3jzWzb8qy0s3oAyRFzaezn+27P/tg3yPZx/v+LvOjvoZqN4Xb8pwGPVQ3w4kTrVcBKeUU ncHTgayAJ9q/sKRcLu8/Xh7Xf6YhFr3esDC62rIJjpBvrN9EHWUlNiqrRfklWcUhl2d2v2X9WD9f ka3SttW2w5a0KTtse21noE0Lv72NG/B8xwM5p2Vy76lNaOA2HTe5oIBKWQn27H7Pg/Aj6sEQ5zSv 2PU1fUzFPsncr1FtJOAySIqCELbW30VjHIFjBLn5MudDpE8JbyiQc0B0POdDzcy7yxcdIX1BsFp+ gl2r2fpo3JsVjAyK7I0o5XzH2mzwwiWS7+0XyGCep1n9MKjKu8rZznJajl1yTqviLWYVePKK8g/r jutYQFepYzqb2B6YFnaER+wLYbTqxHmpg3MWe0QYHLrBwy5JrxVwjEVV2F2QX/XwjaV/Fd3RTz/l BscpeG1TjjJRAlV0BQwybpNBGc3iPk/B5ML2JysKuCrN7TK4PPkD5Toi3J4jGb8OwMcZUKmzwhFJ p7dBJHJLDZWkinkHFu09NLZ5XOniD+bTITWb16/NjXtuePvuzc9OVo1ZeYd8WXOOLJtVvHThgicj uXfOGPPchom3T3TZrN78AtMNA66IrfCsuKdWa7xy4Jqz3224Yhj9qK9P7TuhaFzDtZOuuAkcPSb5 hXQC0tPBb3y0n5mYbC2wllirrUqpq9R3NZtumuqa5pvP5ilNxrmuBl9X4F3l9xkfZX+a8anrTNbf sj/NPRlIBtyBQNRb4a7w1nqXB7YF9ANZvnWgezgrtdayGusY13jf1aaZ1vnWT3Wfu7+l52wqzZRs ZtVOcnxmvYOYMsFKniHcOLQXqOrbDqrCcGlwtDjkgMb9CwHhwXU4OadCGGOLcJI6dJwZHPCEitx/ oipYy2HjTIBaXwmGAvK1NorT2LHSmX8YWvEJfVIvB/SV+DZd0vt583rBFXrccQEXXKEXm0AveF2f 7S+Z/D2ZV79iwunuXnYAb6yAngFn3inOFHCCV8KdJ1w/3FeKUz5UyikP0ouLnyzHEAf9viE+rOnI +t+vWvTunQ3bi9q7g8+vWv3U7lvW7Nr4xJbvfrqDSq1Tqpjt2zHM+dbRX772wVtHuBSqhRTyQwpl gmbTtKwA8WXCfKhX6o0zzE3SYmWZsclsgD/hlNAAsQCntKl8AXJ9POzjfF/51nXeKw92Ds8e7Kty TvBW+aY4cSvma3Qu9Tb61ujWZJ5n5z0qPhi1W7OyJrsb3Mvxr1M++zZ1p8pUVc7xmfSkkz3LHYRi wwubXOXrrsJAfzDDJ5uzNHgtPxS6A5CUCxXIl4IoQLo0Y5/CkriVWr0BpNoLIiU81qr4pg7QgHuI mq/X8gtLeikFtfoipTAR4DZObj0uqhC6+dQ4pcq+T6nohO5TUEGi0fOAlBYCszcaTbvsKrpXVKQt x5RKgjp0xY00i29W4lBh9xKHSx8SvhIa4tpJnk66rrP/Vwf+2nOGuj78Pb6pvPCFqW3D3C3dH7Ap lmEz7163h87M+mkHDVAJHzD27fm45xs1uLdzAX1w4+gFT4N6m2HkVGDHcSv3mHadcSif1yTjNuNO Y9zYZTxhPGvUE2PAuNzYYtyRzjppTBpNAdw/4os+3OLppNso7vNgE+v0BQqRd8g75bjcJZ+UdV3y WZkROSi/jZQsczOAbxog32pZfLvAwoRElqF+I3TxFUQZPwME0iNYBjkXoH9jXeWJhrHg/YtSEdx+ IxQ4rsxVpozutBMKvqeoML3B35s7Ojrkvx0//l2mHPnuA27T3YmgTMz5L/sVMWF+a9heNkzcHraX lKbiQYNTcV5B6laxIDOrxK4E8CnpCUWehOCsIgWU5VD3kwr+c4aYmFTALy9FSzzWMoeUluwgtIuc xUrjAuttchL36r2rAORbLZevAhGrQMQqELEKxMCXADVSSwAk2av7pNeCTJQvXwu+GHDli+Xg/MNT /AePu+PODm7b8rlvgov2M+xWN71Vy1AkXQbbrSbUv0ifZ5yVzmfosNZntQqztWStSh9W3/ac9CQ9 ctDgsrncTp+ipzq31WS1WWz5Ho0T0iPkobkvx80uPhXYtX/XHHxDmMWkzHmctMg9l5KHZhefGNLf 8CMZmImf7Eifhy8BJDZrQ4aWJM0Uf+aJ8MR1ad6SoSVxz1kPW+7Z6Yl7ujyyB7Z7plus9XlctmL9 uPrPxyCWVDDWZUsqc8YSZZDUwJhQGmTeP3K7NCf6PIvFuUiiiVni3jy1gAixquegV+L0BXz/B0cF 2K8CXh9HOeVXi6PXam6dw2gymPQmSadGcCrkULvJmUNxCRiNFt7O7+BBKn4Pwr2i/KyFqVUS4Zs5 07HpyVUfNeyarJo6ChePa35Gjjy0t2b5hOJbu5vZxhuWVj3wVvchLnOrIXP7gIpWkk0X788Ut28Z XKfjU4K+/4XWzLFsUeDUm7ItY3XjDDN1McN83UKDoUQd7hzuLvXUqLXOWneNZ5YyyzhVrXfWu6d6 lipLjfPUpc6l7nmem2imUadYr5WmK9NN11qWSE1Kk2mJxZTlk/UOn9nsys8RR2GOYAM4D9LX9Xpx COph3EEugqOEkiUQPiqBcDoIRMhLToSM/IKSQfBL6VV9EEfh4BM5NIfnj+ciGLgtn1hs3Ah0cu7C ZRkEB8EgEArRS4TqRCxi4+ADENBWQ5MB7qUjg71cFPMvInp/pyGI68/XX8q49JUEPyf5XZZxmjLN OEeZY5RhGgu/RIZaBqLhjkSI5O+7sKt/dverf6LuW/52z4me0wfaNm1sa9+wqQ0fIPe5b3XPn7uP /e0O6qfWt95867evvnmUcBqKX7IPvi//oV8WMiX4UjLw7TD/sicLFmUOvk3PJflkEBlCSvGN0lgy Dv+/MAnfqk9FbdwUcxbGT4f/GyAza8eNq5oerbpxYeOSCdP/Dz5DndcKZW5kc3RyZWFtCmVuZG9i ago0MyAwIG9iagoxMTMxOQplbmRvYmoKMjEgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUg L1RydWVUeXBlIC9CYXNlRm9udCAvQUdOUlBHK0x1Y2lkYUdyYW5kZSAvRm9udERlc2NyaXB0b3IK NDQgMCBSIC9Ub1VuaWNvZGUgNDUgMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDMzIC9XaWR0 aHMgWyAwIF0gPj4KZW5kb2JqCjQ1IDAgb2JqCjw8IC9MZW5ndGggNDYgMCBSIC9GaWx0ZXIgL0Zs YXRlRGVjb2RlID4+CnN0cmVhbQp4AV2QwW7DIAyG7zyFj92hIukZIU2dKuWwdlrWByDgREgLIIcc 8vYzLO2kIfnA//szP5bn7q0LPoP8oGh7zDD64AiXuJJFGHDyQbQncN7m/VY1O5skJMP9tmScuzBG UEoAyE9GlkwbHF5dHPClaDdySD5McLif+6r0a0rfOGPI0AitweHI495NupoZQVb02Dn2fd6OTP11 fG0JgRMx0f5GstHhkoxFMmFCoZpGq8tFCwzun7UDw7h3nlqtSjV8av/DKWj54jOSXYk4Td1DDVoC +IDPVaWYyoO1fgBtmnAQCmVuZHN0cmVhbQplbmRvYmoKNDYgMCBvYmoKMjIzCmVuZG9iago0NCAw IG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9BR05SUEcrTHVjaWRhR3Jh bmRlIC9GbGFncyA0IC9Gb250QkJveApbLTEwNjcgLTczNyAxNjQxIDExNjJdIC9JdGFsaWNBbmds ZSAwIC9Bc2NlbnQgOTY3IC9EZXNjZW50IC0yMTEgL0NhcEhlaWdodAo3MjMgL1N0ZW1WIDEwMyAv WEhlaWdodCA1MzAgL1N0ZW1IIDc3IC9BdmdXaWR0aCAtNDkwIC9NYXhXaWR0aCAxNjQwIC9Gb250 RmlsZTIKNDcgMCBSID4+CmVuZG9iago0NyAwIG9iago8PCAvTGVuZ3RoIDQ4IDAgUiAvTGVuZ3Ro MSA4OTI0IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab1aC3hURZY+VbfzpDvdeXRI 0pDcpgkgNxAePhJsofPoKESwCUG7QaEbOhBQIJLwRtKigdjgA3wwnzqKO7Pz7WOUm04cO6uYrC5+ sjvuIOtrVhdQx8e3KzuM64jfjEvvX/febkgm48d+uns7p/6qc+qcOnXqVN17u9OxcVMLWShCEvmW hNpWkXaNUwEVK9eF2vS281tgycrNHbLezskkSv/FqrbV6/R2wSCRZebqO7Yl9UU/T2tLKKzLSehf 3QqG3mZXAse3ruvYqredXwEz79iw0pCPK0I7fV1oqzE+fYC2vD60rkXvP64bOKltQ3uH0Q5q7Y0t Rn/mJzIfIQYupy1kpZsoAy0bTaMdRGlnLDMxX6bJ01n6o3HLl8ut7t8zB6aFq6/z1ZcEHj9lP3d+ 8x8cFmfWfDSztP5CALsZL13wYc6l5zefr7M4UxIhFReP051KnFaDbgMtUmpywGwgG4hTJ68nxudw N/QUPpu7Y0z57Yv8OjCvQ6OgjI5CZgNxtpd1x0rKPHF2X6+tsJpqclg32UCc3cO6YEth9xq4h3XF uBJ5kXXC7Gm207OKnT5TOHrMW2+j2LGz0GHdUbajcoe0Y2fxmyfB2rwFxbo2FHdsQHH7+kLH8vWd t/Pb13duLOnYVGAfs3otilVrULS0FjgebDnccqJFamnturOkuL1we12xcxuI90tN0jyMbDsqNZAP xMkjVcdG5VT3JwalqliOUenNMlf7akZJU4hJ06TpWAGFf8X/izKBH8de5kqcf9D7chhz5e/3Tp9V LTDmmiisoFJQoFV+HZtZbVQmTzUqTpdRGV1sVHJytcqJWC4qPMK3CvdqFN5BPhBHaG9D7TbURvEb yQG6HSSh1YhWI3E+i5uokMp4FTAPOINPF8Hm0wysBJaCP5VPj5WWyXFAXmF1PzvPPo5JSnaNzL4i xn7L/lNosbMGfmHgfxj4OftMhIF9CjQBPwGif+If2ce9o+B6zVgwGG1GuUeI2CPsoGbwYQMPsoco HYoHgBnAB4FiwAfYQ5jywACajNpQRoSA3RI7aFLibFHsgICbYocEXN3bKSlIsOpYXlF1TRYbz8o1 p2wsV0OT59pvEb5vfN9wz6clJdWPPyEpTz5hUp44lK08DHsHDqYrB2HpUdCPDnHlsUOScvgQe/rQ kUMDh6SXpBukuWJy0txYF1dEStT12nKry16WsAnojCilq6QrETW5Jk+aSdNAHpAPZJJmSgXCCWmG gZVSAXpWDqCJXYjskUGcn4sdTUf+fBQbyBRD8A9joydpKfBhDLkQ52die7MhP907YMJU+bu9rnKR X+/G7Fg09D8Zg0s1Fv4aPybiyV/hgxr+vYH7he8v8c18i5gK32JMhd+pT4VvFFPRSg8PJo0GY9mj NOvLY6OLtMqy2PgrtMoSTa+mgC/VFEVp5fNQFvK5NAHEKYtPoWIQh3tKLNeu6V3Ra8mtRra5RLYd 5eO4LJabO7kcMynHYU/GGVKKUmyuMl3Kvma/0hbyDHueZHKy0+z52ASnHGenY6XO6poS9m/sAy1r 3jfwXw38tYHvsXc1A++yd7R+77C3kF3qAJqMvc3e0pj/ojHX1IxiJzGPflGyk4bsTU2GEU/EcAj0 I79/JfJbGWA/oZ+C+kBS4gz7WSzfjmVg97P92oD7DIwCRVrfHNuDY4ItjkUkQHNsTxqgKbZXwMJY twBfrFvIFsS6BNwoFirOqmJ7BUyPDQjmOJ2Z4xkF4R/+aFL+KDolBj3ZvxeJ+TU78zUTzawe+5hq zydIedGaesRirYannj5fX7CvrS/SN9h3ou9M37m+rL4j4bLPPzMp90UzlOi+dGU/CCovPDBtRvUD 92NIqBfcX+qqvn8fV/Z1ZSq77zYpd4s5JAZ7I/PmC/u9kTl1Ol5ZreOkqdq45shYV3VkF1c6d2lW Pea7vHOr70JjFywJ03I3THdjhnvB2NOVrtxzb7ZyL7CtK9LFB7pYTba0SGqmHMknLUS5QLpJlDEp XFazWLpRmk9WySGNkcaSWbJKNikXaJYsUg5wIvAKskhOyF3AUshl4ERyS05QKcgBsoLM5ObP8uf4 ETLzZ/hf8J8An+JP88PAfuCLZOG9kD8PVCGPAfuh0wtShS7oGdBToLv5bsrhu3gnyp38LlFq/m7i 2/kO7BUbz+V5sGvhOdwKZJxziczsAktw3PtxkufSEyAu+uKst9HToAHQaVAaTm4LzQF1giQqYxew b4qh64BP+bBpBxbDj3yQDWQBpYMYudHXzY6yl9kAxuthMdYLfI4dYSrwOPCfyMJehfwYcBDyV4DH ofMqaFDognpAz4HWsfVsA/RCbAVbCVzGlrOg1l4VG11WVlPLVtEcUCdIYtsg3QFr7dDaBGyD1kbg NlhqB7UJi6BVoBBoGaiCTSErm8AmopzErqAcNpkpKItYMTh5LB9lAbODU8hGo0xj6Sg5k1BiC4vS 81dIlQsJq+Mae9HVdvtV9rwr7daZdvMMe9Z0e/o0u1Rpp6n2CRNzJk20TlZyKhTrOFfOeJe1tCxH LrNabbnmrOxR5vSMTLNkSjMj0maSPPklLpLyy9KlMWVl1jnWTqskS6xMukkakBKSycHGWooySix2 22hLnqnA8pCDVbgnuye5J7jHu8e5ZXep2+EuctvdeW6rO8ud7pbc5PbNZGpeIzU216r5DLioVp2p NMYluUmdoTSqWb6l/h7GHgiAq/LuOKNm1dQd54C8uiVL/XFWLMRdjn4xb7Ux2HV/oIdTrcq6Vdci vwDPQr8qd8dt1Ozv4aw2EAio1zT6UKfagDJWDTeiW2RsQJ0hKg+NDVCjOmuh6nDVKsOvdsFo79Dg oqxn0gSvOtkbUiu8wfqLbEUhNOCwV73gDcUZdw0RJjsOM5ZkA9txGc043+mN8+0ww3eNbCalF5cW eOPSjegq+UTXjnaWko1Qae8Ak2nlcKk2eMcmODJEAgaudoRBqIp4aHBJobndrgvoUjGlLCW5Sbxk kEumbdgUWu0Kq/M7AoqiFqkuJElSwbAogMXZTtm7tj7O7tJhlw6dOkR0uFuH3Trco8O9OnTpsEeH vTp063CfAGNmeCq5VuNytw7X6TBbhzk6eHSo0aFWhzod6nXw6tCgw/UCEDfMrb0nS2S/r6m2Uc1s AvmWqiUuNF5H42o0zK5aSleoGG9Gr1N5stRfZPTSNJvEGxkl3tfKz5P1C5sSWp3ownuC930u8e4l yPR9jAjdY4QDNXFt4kDiKxqgVipI1CR+lPhiRLO7E7voNJ2k49RHz9ITdAr1Y/Qy9dPf0seov4ba s/QorYD2T+nH1AX8G3qGHqGN4AsUnGN/aptNGsI7T+fpEKuhecDh1yOw8shw5p9tf5ooGUF2KjGO dtJOvon/hjbh8zgs/pwOX9JzDep/Se14/z3GztIK9hKtwny6KUwPcl/i39OOU6G0Fa88G0yHRSYM uR4jP22jsPRk4nfIE2uGDzfVI4nfiXfpIdd39duAsZNXP+1n2bQLcZuON/PHqTYpGIqI4XnMYSXm shufQ1iNXnx2YtwDl/ZMrxetpN+ZpGdrMo/SxHcNuBKfgbZq1WMi3kbGfkibMYKbpuB1zpooQ97c kGhJbEv8OHEU2SBW/2dGVgyg9dd0gB2CByvoVrqZ/xIvdqK1Ae2baR4byyz0FGxfpY2SKoxdJekM kePiSvpnMqJo7C14qV+Ja5M1dhA35vP0Or1Kcc2fJ+kgRSmCOHQgv5eQD77PwtcSer9PtBwWnl/s s4yakXu4kIOzMZ9TSdsC097W9r7x3c2f+Cf2/jHpFV1HRFG/LiQrRG9gJfXd0I1obEI8VmJlz2u7 R6zfMazaM8i1pOzmlPQ1bW1F/9k0Q3iRmJXYhdj/M91CG3gvHljugV73xaFStZ+Dm8zkIjrFZqck QyvfJ+93Yg8do8eGGOyi26hlCGdYY3j8holHaKadxaPjI1i1X2C8HfjsHKFTP/L7GOK0nRZSDe3F Op7C/mjFHg4j4ieZjPV5E6fYSFcIdk9gVTZIqyRjlUfqhgwRnxGutLM6M5OYCZmfyt1kVz13k60h ODtNovdYHvLjYXoPOfEsvYCzZLXgIov163+3RrtpPU02PuTxNM29wX3trOqqa66+6sqZM6ZPq5w6 pUKZfMWkiRPKx7vGOeWy0rFjHCXFRaML7QX5ebk2a47FPCo7KzMjPc0k4Xm+ghWpRXV+71q1uC6I e2G9yyar5gXn5leqlOdwunLlmZWBKUYvNU1RKb9RLcAzH3mqAmq6MrzLAlUqt33phPJ8h+xVTeX4 c80LhdVJTX6ny/aOIyUPwKxaUud3Oh0qL8ffXIjwNy8kh1WbD3wINM5clXx+QfHER1VgUpUzgLLJ r5Ymm3gUHcHJfuyowWFuLmBRW4+5uK5epYIeMn+kkl10O1dFeAlTJ+HRuNyGmmaNKlVW8KXK8lVm n48pDR1CqJ2pGiEG3vBalze8BhENBy/G9JweUacclaNN/tyZDqdTcxpPIgv9PaOy61x1LdmYBR6a waCe7FHgjBIMLEtbDzPPZlqFm72z8MSdaUH48oS7XkFrVc++ICquesQNkvyLErwk779URFDTOxG6 aTWmjamm16kZuhPyGtUTUmmf3FMxGN2PJ/4VQcUcdoVDt/pVKQSnekgq97Y2q2MafUvAghOgYKss lrteK8Tiyd5WOYq26BtE6aqH6lB+uLUlKNKEBV31kGXV+fc6Bx14JfHv9aq5imqBumX7bxxS1Fu0 RhbNaHSvrB7Gq8glUqfogyQomlIhR70ujAZj3rW1YsUqU8umZePcsLY4nn0hWY2sWIuY4S+0P5n/ zqhNNX/txOpgfaApdocIsKBwcK2YylpomgBydF+LNtX92tSQr+KxU5BQRPbTYmgv8XtbXV7E0xgQ AYG+VD5c1+lUixWhGI16hYuhMLwXkcFfMR7W4YbewJ5wKAz+1KmeZg2oWVsDjOgJ1QcMltEBEhPW QfUE6wMBMSl9AdSM8r1pU11yVBjNKFcLFJvzHyAbnFLR2OT31ovsRE9e57/ubJHjLOp40UuyWRH6 RCvPiiAJySJX40I9C1pFfEQRbNY3MKJmrDy6Gv01q28UOd6AboOrIRiNNrjkhmgwGoonIitcss0V 7TGbo23eoKztfAb+3+1zqA37A6ot2MpmYZFFvjXgCT5/4VKxPA1yawgc/M1xOasczlyY1vvg5BhZ bOwzZDzyXuyzqO0LzNiME8khN4jjJY5TwaHaqsQ2hSeL/dgHKzGEN6wV2B94zeUOsVOkQLl3zSIj QA4nhtQSRpx7Cw0ujDidYg/ti3toBRpqZKFfb8u0whEjT6WCtQsKyWBSYl8sJJGkJKUedGGtisRr tpYTfy6ncZ6n8jma68qTq8VhDu/wNzesDjZjjt9UqZmImLbc+XV+ycFFF9S4QxK1bAW3BLc6WtEU RUxwSkZtLvmES7Upalqdf9DhDsi2XByQLJUMhkWRprYTruNMHKJUYFOZW2WFYlsRDlWEEYf+6CoI U4qyNxo0su/S+aGr6B1uTe0jfRbYuGKSCIPNhX3r0OORm+cSU/2lyHb9BqemlTeITYW10SI2L6Dm iJudmvOFVmByjjq/jGMI23ahVpG9cqtYdVUO1mvnQcAh5El2PHEmWC/OPz8SDV0cRn4jyxE2Y08Y YWhs9idrTf67HNsDU/CrWEVjnLJwJxXfycRZoitO9WP78TubtHwZxM0VsuxdU48B0VhcAcZkJ2o3 VyA3Rer7XQFxJ5kbjsoi+cOYloYQtEQDlcjXRX6cl/iqxql6Ao5UtSUQmAU7twg7UEH3aAAW1hoW gBqr8r/RyV/RiJNqgs+PwzZSj0SvF1sY0x3ErhoUMxYTCaQ8hcd3rSkyfF4CnwOTIV+qW0GuRmAi EI0Km4v8LqR5NOqIYh5GG9/wDGd4DEachAom7o2ziA+6AJf2fOB1OV0i8oF6DHUr4p48pfDb43dH eFnKb2guh7fLtAgHf6AIhy4nwisuK8IrU54OiXAYPq8UEW4ZOcIqn/AdMb40pB49pJ4RQrpqSEhX f3dIW1OOwqs1cK9VC+naHyikt19OSO+4rJCuS3k6JKTr4fM6EdINI4f0/yJp24ZE+M7vjvDGlN9w sh3ebtQi3PEDRXjT5UR482VFeEvK0yER3gqft4gIb/v/i/D2SyKMHzaZ8eKFil41g2kGU/wnQ1Io kwwO3pDwDQE++JkkgwpeSOcmElT5xltvaMX0ac5cZ245Cob3wm89UuTbSBr9kTymCDTxA4x2Jarw njrSJeT6iAw/tOu1dMonqrl+QZPveuXGTSvXhEPXbwytD2uv3XoPYckGGpMwLsFI1Y0+/wNc84Gx CmVuZHN0cmVhbQplbmRvYmoKNDggMCBvYmoKNDc1MAplbmRvYmoKMjQgMCBvYmoKPDwgL1R5cGUg L0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvVlVDSkNGK0NhbWJyaWEgL0ZvbnRE ZXNjcmlwdG9yCjQ5IDAgUiAvVG9Vbmljb2RlIDUwIDAgUiAvRmlyc3RDaGFyIDMzIC9MYXN0Q2hh ciA3MiAvV2lkdGhzIFsgMzI0IDIyMCA1NDcKNDg4IDI3MSAyNzggNTA0IDQ4OCA1NTggODMyIDU1 NiA1MzEgNDE0IDMzOCA1NTIgNDMwIDUyNCA1NTIgMzAzIDU2OCA1NTUgMzgyCjU2MyA0OTYgMzgy IDUwNCA2ODcgNjIzIDMzMiA0OTQgMjA1IDY1MyA3NzQgNDQxIDUzNyA0MjIgNTkzIDU1NCA5MjEg NTU0IF0KPj4KZW5kb2JqCjUwIDAgb2JqCjw8IC9MZW5ndGggNTEgMCBSIC9GaWx0ZXIgL0ZsYXRl RGVjb2RlID4+CnN0cmVhbQp4AV2TzY6bMBSF9zyFl9PFKA4myURCSNVUI2XRHzXtAwA2KVIDiJBF 3r7fuZNO1VkcpI97j32Pwavnw6fD0C9u9W0e22NaXNcPcU6X8Tq3yTXp1A/ZOnexb5c72bv2XE/Z CvPxdlnS+TB0oyvLzLnVdyyXZb65h49xbNIHvfs6xzT3w8k9/Hw+2pvjdZp+p3MaFuezqnIxdSz3 uZ6+1OfkVmZ9PETq/XJ7xPWv48dtSo6JcKxfR2rHmC5T3aa5Hk4pK72vypeXKktDfFe6G5qu/VXP WZnnFc1+73hEHrnnUXtz3nveOUKUI1dzHV3u1/81h93rQE13nyRfV6XkfbGv2C+AyPttLixABG6E GxCBrXALItC8OxB5v9uq+gQiqmvhHkRgEtYgAqOwARFe5i3zFkRUOyGZJKo2VQI7w4Jq4DAlqkFI GglvI+QEJfBJSDgJ1JCBcJL3G+0bCCdRtZUJFywgQagSTuKsbCPCBQu4MSRcsIDEpJlwElMZEi5Y wMKWIlywgIUOJ5BIYt+dkHAS31FnVRBOYl+dBg4TK6u5IJyEV2MwmolmBSwIJ3nPgiDhJPIqIC0m qhqjIJxE1VYmHNPKy8z8q3//Gv22ul5v16G9zjM3we6gXRL9/P2Q3q7pNE5awPQHLij+pQplbmRz dHJlYW0KZW5kb2JqCjUxIDAgb2JqCjQ5MQplbmRvYmoKNDkgMCBvYmoKPDwgL1R5cGUgL0ZvbnRE ZXNjcmlwdG9yIC9Gb250TmFtZSAvVlVDSkNGK0NhbWJyaWEgL0ZsYWdzIDQgL0ZvbnRCQm94IFst MTQ3NSAtMjQ2MyAyODY3IDMxMTddCi9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUwIC9EZXNjZW50 IC0yMjIgL0NhcEhlaWdodCA2NjcgL1N0ZW1WIDAgL1hIZWlnaHQKNDY3IC9BdmdXaWR0aCA2MTUg L01heFdpZHRoIDI5MTkgL0ZvbnRGaWxlMiA1MiAwIFIgPj4KZW5kb2JqCjUyIDAgb2JqCjw8IC9M ZW5ndGggNTMgMCBSIC9MZW5ndGgxIDE5NzI4IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp4Ae18eWAb1bnvOTOjXZZGkrVZXkaWZdmWbdmW98j22JYdx0viOE6ws9qxkjghZCEhBEqIaTAJ DgmkbVhbSEtCemnfQ0nobeijrculXOAmFNpebi9dSFhaCqQEbnvbAJHf74ykLBTee3+8d/96sr7v rHPmfOv5zpmRt15/wypiIBOEJxVj141uIsqnSEQyPrZtq5QsW7cTon149aY11yXLHhchxsE1629a nSwXnSKkoGB81WgsWSafIq0dR0WyTKuRFoxftxXjsE9gPdDh9RvHUu1FrH7wutHtqfuT36AsbRi9 bhVSfHrPA0mbrl+VaqdDhFjyUNe/8t7RcTXZNDq26vrRDWtW6SMVFc2Rzs5m/aoNMULRo5hMkzJy H1ETjogkRDBj3RJcy6OVtav+NlCqOhRfYY78hXi0qCDkqd/f38TS55uyd/+5+v0ex4euD1DUYYTk B9dpHkw0EOJc/Ofqi4cdHyojpRqVpPgpItHEkzoX7ZZO0o/TmQvpzN/Smb+mM/+ZzpxPZz5IZ/6U zpxLZ95PZ95LZ36fzrydzryVzryZzryRzpxNZ86kM79IZ36ezrySzvwsnXkpnTmdzpxKZw6lM3en M/vTmal0Zk86szuduSOdWZLOLE5nhtOZoXRmMJ3pT2d605medKY7nalNZyrSmVA6U5bOlKYzunRG k86o5BlFcn9W8EcK/lDB5xX8gYLPKfh9Bb+r4LcV/JaC31TwWQX/TsGvKfhXCv6Fgk8r+JSCX1Tw Cwp+XsHPKfhZBT+j4GkF/1jBP1TwCQUfU/ATCj6i4MMKPqTg/Qrep+C7FLxXwVMKvlPBkwq+XcG7 gOXmbmlCKe1U8K0K3qHglQqer+B+BXcpuE3BJobNrWNCK8kDhAAtgHmAFYCNgJ2AuwGPAJ4A/Bjw M0AGWcG/C1Oa4P9M7gEcAsQB04CXAWcA5wFajBrGqGGMGsaoYYwaxqhhjBrGqGGMGsaoYaLHHKrR uxq9q9G7Gr2r0bsavauJBnf1kdcBHwB4YgbOA7QAVgAeEXyyT3X+DRq/OH2Rm7748sUzF89fFJIJ Pz3z8syZmfMzwqZWveDHtKeBXwacAZwX/LJROPOj8z/iFGRutQheDOxlXogbQm8z8BkAh9vqWVnQ PknNhdTc6hE0SlkNvJNzKn2/TvK4r5MQoAUwD7ACoCavA38AmOG+Li/gXz/jcGb/8l+BvnSLw/Ol W9yv/Bz5bTcCXbcJaP1GoGs3ODzXbth5fdbWGzLt2WvWAa1eC7RqPNOzanxyc5Z7i+Pmdrf3JoC7 tZL7CnkAwJFs4FKW4x7gHuQeIkZuH7efuxvpFLeXu4sYiYd7gOwFgCTgRwD/A/BrgMAdQZ+jJIN7 BNd+E+nXce3DJGPmHW7/8Uxfw1PIPMgyrVncl7kdEHGQu427haiQ3srdTASkO1Lpzdw1Sv2N3Bol XcNdc1wVlE5ym457pIYfctejnfXfgHqB1V9zojLcoGtt5TYTN+BxtKMSfdai9Bpy7wB47nbuJnA0 yE0gZdfvRMrm8aVUehO3SGnfzrFVL8htQ8rab0ilW1Lp6lS/rUhZvy2pdCO36LgmWNzajzIldzDM LeOWcyvAwvncALcA6VxuHtcPVhq4uYD5RM8tI7OQH0Z+G+AGlB9C+XtI/x2pnluLK64FQ8cw0iqk IxhpJdK1JMKNAUYAywDzAXMBUS6icK2ds0BQQU5OlZtRZlQ3cRZwrbPVjnpKOoGfA3DcLLRr0N6A lHGpLtXfi/4axuXwcZujodXBhVIN5am0DCkTY2mqHEylJbhQFZzd2oYyJSrgIwAO5IZJDyCG0laA wLVxonLrVqRspBakbOqNqfr6VFqbSmtSqZRKq5Gy6ypTaUWqvjiVFnEiSJhq3YAyJVnAT3FVINnJ uTg3hGLgjFwGUi2n4/SKcLQQjgHMd2K2WgjHAOEYIBwnhKOFcJwQjhbtPlzhhzByMFIe0iyMlI3U B0HkALIAToABoCURuoD2Mcro3FS6iC5lQqELU+k1SFn7a/SX8G1B+qtU+jY9wyikZ1PpGfqeUv4A Kev/Pn0PvJZPItHpYWzTVDheWZnKwGhOzkw/+c95UgN68MdLSxt+QHkWHR3Py/c9xbInpnNzfenK nJx0ZXb2pUqPJ12ZmZXKTRhsqZys0yPHUXpC7t+LHMWILNeqRyUh80geq2IpZkaO9y9UZkZO+Hxs RuT7ObkN8jsejzLNPxT4GxadpFrZRn/7K1Vw1qs9r3Jy3JDR8JNpVRB0yHWP2GwN8tdDFQ1ff5AG H3pQFXzwgBD8hweE4ANf4YPyT0srG75ygA/uOXD/AU435hr75zFeGsswY/DzT87O8zf8y0mql7Pp /QdpsO5heu9BLui6r7CkwXkfFQ+2yA3/fpA+TWtpKdaLIK04floInqSh46dYUnb8NI+klFU+TXtp t9Kn+/hOVfApuoQOwq7MrW46CHIHCUfvoHsU4exGyoR8ZyrdQ+9WLtyPlNXffWJSFWxpNdJDhNKX 6Cml8edIYYb0FXrquJpJVnO8qqqBJU9gDjPTJ36Xq4hVtvzGldXwwot88MXnhaD8vDefcfHE83an kj4HbrLyc44slsq+H5dVNvTPB5/mg99vg6y33kThzZKShtOnoEGn2qJK/1OBAEu/f8qZ1fDMuxRU 646/ptxYDr/r9ze8/i6Vn/XkNJw4pgoeg2Dk6aamhuknhOAvnlAFn9gBd/2a1dHw0x9SaT8V91M2 hb219crQewNBZSpVezH2XftUwX1TQvDOKVVwCnz88wd88KMPVMEPJ7jg+UNC8AOwRn6/qrpBfh93 Y8Mcmj+QTDtmJ9P6iDKc4RAE//oheghXsn5fg/4jlX85Af7ctpMGb8WsduAW5wC/2kl3Tvrz9kzS 4G7A7bjLLkDxZMPknEl+9STtnKS1k7Rwknrq7K5au73Gbq22m8N2Y5VdV2lXV9j5kJ2U2y98bJYu VFzgCgOmooC5JGgqDZrzfaYCnzk3zyTlmYlKVHGRJpMhsjXyQIQ3ixajTm8wqjVaIy+ojFggjGo+ lrephJpLqMHcY4anmEWi/Fb+O+TXZrWBGHiDeRaZpRvml+i28Q+Rh3QPmP+dGJ+iBmqUS8wempPh 0mRl2EVnhlXIzAhd2HjhkQuHLvzswssX1C0X5AtPXIhfOHNBRU5Sw/HQhdAPqIG0UINcLnwSuRD5 a+QvkdJISaQoUhgpiORHpEhuxBNxRewRa8Qc0UXUET5CIv3hQRq39pCewba4jSJd0BYPB3tO8tJA vCrYE9f1Lxk6Run+YdTGuT2w58G4sOckh8TavnjJ0EnqZs2Tnqeg3iTeMzK5bzgYzInHehYMxSdy huNVLHNPzjDpiVfNj3t8bcHP+2zZeoNSjXTL1mSHLcEtycyxosKOeEnHaLy0YyQaTNcqbXQLPsn+ qauC6TR5rYIxZrp0KZOuuJymmlhClVqylQ22ld1w65Wjbvm8e+AKcnmsq0rKiGmqUn1ImuBkOdV6 eYQvuOaqO6CgXEcZjrviLZDdZzsc0zEh9g+0xbn2pT3x2EBPPLd/yUg8y9fWE38epdr+JXGjrw3z YazEB+nWLTcAMVBqjhGuffAYx5AaaMmSodYxmiAx+jHgAuBvgL8C/hNwHvAB4E+Ac4D3Ae8Bfg94 G/AW4E3AG4CzgDOAXwB+DngF8DPAS4DTgFOAQ4C7AfsBU4A9gN2AOwBLAIsBw4AhwCCgH9AL6AF0 A2oBFYAQoAxQCtABNACVvDb259hHsQ9j52MfxM7F3o+9G3s79lbszdjZ2O9ir8V+FftF7HTsVOzF 2Aux52PPxZ6NPRObjv049sPYidix2BOxI7HDsUOx/bF9sbtie2NTsTtjk7HbY7tiE7GdsVtjO2Ir Y/Nj/bGuWFvMFPusYP7flGF6/xUfotqHAIaoFuJMJqicmBDBiXzqwz+dzGN79Q1CZtjpj/JJDFzO 4+pjJINvIhlsFM4+c547Q8SZQ1f2SF93OeXRJ1liZz0MBFZsIztYgs9YMkGaPGtiMfwXf5754qYv bHmJvED+B9mltD9NTpDvpnp+l3yPTJJnyNMkeUo2jIDodnIIeBA1i8kcspAsJ2vRezM5TI6krlpJ Rkgl/ghpBkenUrUvknfIP9JP0e+hVM3l5Ku4y/XkJO70EOnGeM3kAKj9GvkOeYT0kDtQuvx5Vcme 4UbJOrKFHCVxXBsj40ptH7mNdJGlmFsnWYQ5bcDdF5MnyJNkFTlGHkD902SAPKz+EdFyW5mkZv6D a5z5D7IXV9/LbcX+bj8/QbaSW8jD5HcEW35yd+KZ/7X0Lk/sC3P3kPtBxe1kP2S6mG/i+/mRS7L9 wotSDd8Hv34C3myHVB6DXB4m91A/eZDsJjuokXyDPE2rruLO/268z2v/PrkLY1/9+SfyFPh2BPLd D45tgVy+jdn3X92JEFpE9dCbdWQxNZGPyYrPtv9fKW+CLmyHxn0Z97kelA/hxLSS3IB0HHBD+h4I gZvJHkj9UTjFt1DfRm4lG6iXVpDnyB7qIjej/zdQ+zXyA1qBvlvIk7SIXIBVLQGVf/eBP4BdKv4A bVpCHeQlZpv8x6wr/27aH7AS0xFaQJ4n5LI/oD6aAX37Pnkc9/8WeYh6KE/+Qs6SBA3RbEiumLwC eA58+wH5Cfj3Pnq4yL+xfcdnP5+dC67Yq1ql+Al0/fu5QNv3XTkX2MVR8nXY1w7o0JOw9Z+Qr5B/ RHoXSodgQfeR/wYdeAy6NIG5XvqoFpMweLCGYYUHJvJPKf+EMj/N6mdemTnNWpOY5RL7L+X/Fdb8 a9hzP3zF///8fw78F3KA03z6pup1bo7KrKIz7wmPa4TEEvoXTOAILP6rwF/C35rPnxB/kX9H9cTM n1Q/SLSpLKqCxObELVjL/o38O/kZ+Sl5k/yC/Ct5kfyBr+B/yp/lPxJGBLXqtOpb5HtCObmR3PvZ UYUNwrgwXzgsLBbKVQFYUDbpg1+9BmvVCFlJroVfI6p7NJXCV1SLVDH+I/5j1f0YYz383h3wTV+F JyPy4lWxFcuXLV2yeHho4eBAX29P95yu2Z3R9rZWuaW5KTKrsaG+rramOlxVWREqLysNlhQXBQr9 Bb58r5SXm5PtyXK7nA57ps1qEc2mDKNBr9Nq1CqBx4FHKXXFXe1DHevi7vYRxM5RnyjFjXPP94Xi xOrx+ixSODRcluoVVwXjxNYTz+wfOkbk+uG4OvjZLnPjvF/8yIuL+zxSR1zw4+vrHo3FiwaGvD7x Vc+l9mEMG89qH/J6PXHOj+8cNOHbPSrF4mI/6tGg1MyJk/4hBidn3qhHJan3DgMPDMVz08VhNlqS lCsm+RR80/RnpjmXTonHjO72aJxkHiPGN+LEzrqdr0c8EYkXYVvoF5FTRiOhOM38KE5tcWrvA0lX 34Jddqb+c3jQEVvn64itBUdjI5d5ej7JUa80JU0NDFnCHq9XmTR2LvOHjhn07b72VXpQga0lKsgx vQE1BlYBsWw6Ro3NVMlwxo7GYxzRZoB9VjbdDgbr4vLeEWR8UfANLbbLLThZuOvKJoLLkp0Iuik5 qtwzrm6Pa5KTkNbG5dE42SsdK52euuukSFaOBI0xX2x06VCcH8WkjhHe3zE+GM/u6V+MKkwCMDIu MXFHFcSEJ3WMS1Mos74jwL4oLr26Pja+aoSpCR3xRdGmax/a7Z32YDs+tLsjbgnGM3B5xs1vefip DtdaiRWnpnZL8UPzh65s9bI+UAJXWak01eHD3TBYx7o2JrHQJbEp2jgnpghH3jsqxSdWrgPP8B29 K63/3ikxbvxPL6QD+eBKZh2MwQxiI+sYKetwpYBEmtq7SiH1LoU06KvUsS7KgF0I7ScLcfXioY5x Xwf4mbohGILref9nr/V64+4gu3BqqoNNcTSG2TPO4OvGjhjTSBZgE54gxXza4/KgkpBBRQa4ozwa HU5VpTqgRYAc4vJIdHiYEZUUQFzj360q90lTbFCNP54ZFL3Pom26rLRnYKgjyrQTPbn2oaZzLs85 5Hv6L1VTF/pMhc4xJrGWBb6e+UktGGf8YWhkMGnA4FpK8uia6q+MetrlOZ28w9KhTl/nyNRUp0/q nBqZGj05M7HSJ4m+qWNG49SmjhFJMX+K+h/s9cQ77xqOiyPjtFGRELs9iOP9ndj92+YvYaLqlMZH UYNvi89b7/FaLvWBF/n85pTNQfthA8zmpsT3Qb0R3skjdTJXgxPZek9crGcmiwktHIJNjOEWHTEF wVZwMMR5mNXww/6OtQtSzPJ4cUtFeZgPnJ+qxSBeL7OnvSdlshKF+MT8oWRZIis9x4kcCkKOI6xl Ot1iX8haJtItly4f8UFuLnYwpejHF+k3fPsl3Z6y+KxSA3PsmB2+c2Lx6UHQ+Lf6uBYcU0Rvax/i PRzrghzn4VlOH8TyEIk7g8qFjCfwmFOiT3rZFxeDcVX70LQnMiyJFjhLij5d6Mg0VXzZ9wJlfpRk inEaiVMHqyfwq+Ae/L6zHo2XFEnqmBpJKeCVZKEr6x0bv2RKycnDdhltoF70wXQ9STZYrD5G4Smm 8OmFwd/J7AoiURjVPRw3sfUubnpfQZivp31IgieC5c5XMlKHNM6EHZdGoopLGPaw9nT1yZkzI1Hm Aoegg+jiSak4FD3J2qtVsaz0/1TRJ6Dot901PN6IOckloECqwW0Z09sHh1LmpshJMQLcaw4j5er2 S1xM94Fjgzl74xVZL7igqFkuxaqTtnupM4QwCGouCeDKmyltafVgM4l3Yv1P+gBlZvHZSlmhnTV3 faZ5TroZ7mOH52b0w0LWdsxH98w/JtM9CxYPPYWNl7RncOg4R7n2kbbhYwVoG3pKQhCk1OLcbqSN VbIuEiuQHorRjuOBGOvveUomZEJpFZQKpTyGg16lLtkJdZSM4dRXqRPT/TjUCck6WanDeoIpdrjG 4d6GfBB6LC73D90yPD41MsyYTRxJBYRm+5pJnPM1H6Oc2hjX+1a1xQ2+NlbfwupbkvVqVq/xtUH9 YRzSSZj61IgP5g8HPEQ8dJipMNNyzi+dnJmBBz0Nz+uNq/1LAXCwuuCwFFf5u9FvNoMRVM+OT4yN snkwNcW1Gv+cseG49tKA6DInrsMIutQI6NGpXIPlmV00BmUd9SlZVMM4Jobjw0F206G1bEaShHio y9cYVxcmJ6kqZDcKDU9ZfVXKcqL2x/X+3bgC9+hWHKFS40ERN2PrEb4aI2Y+5kOvsREJEhDI2AIo o1DIvnomN9SswqouFGJRBehhyEoj3rtghm/I0Md15RgQX5Y3lGNAfDXDYAojXintTnXAvcW4ATMq vIKVqQvAHTTNYXPBdzcmz7r+hA0z/yQZ8G2PU4Wjyq00aI5n+OeMIlhIXm9AjQ9xX/JijKX1syo2 xrPJWg2j3KgEtIMnZ476bmJGkv6UlfriZHCIKSbBcwYik+Gpz1bEl8Bxaj9bm6FUT01pMz7/giS/ tBmXUjaK1LEWukokrClgo7pwzujeemt1mSpKfkTZjv5TohYmyI1CD7lJdSu5ibsfaSPKe8lN/N/I JuFHpE2zgjj4d0i/MEoq+N1krbCJrOX/QMa59WQe/2e8SbKOyFwDWSBU4Y2QUtKi/jbyNwJa0HcL mcPPIwv4TWQ59z3iF64lcwQtsamrSA7STHqYXMd9m6znR8lS3kSeBASFDeQ4YCMYlHwvDi/44QHj YpS9pAg5itdzROIgmSQPLS7iJFnETTwkh+SSbGInNmLBsY2Z+PF4UkcKcZWKcMRHrCQfD+8lYoKu FWBXF8DbhkUYlZBt+PuALqW/w1sQD3C/52fzLwtB4XHVuOrX6jnqFzWzNHHtN3QFupv1OfrFhh7D a8ZS49MZxRk/NNlNd5o+Mn9FNIoFYpv4mPihZZZl0mrFHX4E7t6hGsQdSkkFqSY9st8eqi4qLiWl OYbK8upSQ3m5obRaqKklxcGKsNVmM7lc5ZU8aTldFcK35bevnq6yWKmzIYSPeFo8bQmLp6vE3z5X WUFrqpu5uma+prrQl2/iNL6a2tpwVS5nz0TBxNvtTruvhlq8FgZcndpRUuAs9Jhbm6WKArduJHJn e+dYc7a5IFIqFdo11nvopxfV/Oin9fQPDoe/pCbgDoUbfD0DmQVVuV/OLc8JdxYXNjd1lnlLA0XZ 6g3f/GbiLeHBT1YLf/34uyAQvFWD1j+qVkEe+WSHHNXqvPkqg17KN+W7XfmSN59XmVRZeXkFJqdN a8jPlPS8/oBsluZJnIWXJJeVZubyFqvlsShxmNQelTXfJZCWcMgZDlqIM2yxNrhC2AFnnQtarKSh oQJBfThsbQCyWJ0NlnBY3D09Pc2g0lvTzIErgYBXo1bbMx1Ouxe8qaNhmss57dTL89lVlS7R7E+U 52eJTS2JhfULAvSbD9NBl7+67NMT9Fs/qtS7ggX58ypvW9ndmxep11VW6jaNCws+OTJ3oNxQyWVz k9DAG2fOC1ZQLJGNspgpmuxdmWbrCutGK291EkRGcgWqwJp+vAXzMifoeC7XaeJNB2SnLVfNqw/k CrlUreb01HaYs1rz9bdmhc4yis5C5A34kpZzQeJqAcnEJT4L4huC4rNAkL3FV8758tUQttURrgJx YYta7csnlmprQbjKIVjHXN0rO9Z8c2nv19YPjM+Wxpb/dFsi8eluqv7HJQ+q6hPvXbOm9M7EuX96 NvHevtDqscQbbjcdogtfpXhoCspugix1OP0sIbvlBcQkmiTTIVPcpNLxJh3HaXU6B2+25FlClics P7aodBbHAZnoqJ3XleTqDugqsvNy8x6L5pYUPxYt0fLaAyW8+bDFZPLRwxxXqnPu9IXOVoHQJLGM ShAYgpjDLGVCvvjc8mWKnF0h8TlUJCnmfV5LilhGvs+SyeSpSNtSXc4FagTdSkdxWaQy8euXSqu8 5uXLzfmh8pdMUm1RItpckqF3FparFiZ+Hh0stV48kxOdnVgc7chJbI90leAxeaUY6OrmRztafPaM yiQPVAJ4UE+WyRVBM28+IAd9zuCBigq1zs67nK7Holqn1V9ZzedX+Xz5j0V9PNlZmpHRaC7ZmQPp nzDTvpxQUKE0fJa0MPoszrCrJanQjFRItrLCD71PU+H9O5K8dpgyDLi6sDBQgwJnF+5RmzL9gcSy ulLLxV/q7MXliSUp4uiR0oDTwJVaimbRR+tLxY8bG30Oq76y0pTfuYA+mljW3lzgMl5NaaXB4W3r SDxMV14j54vo6uscSFLP5YH6LFIgW1VajfaxqMZutVkfi9pApjGUIigpNoWIq0WhzJs+rkxvcXp6 j7HpffyFk2BehNnUP8GmRFhVUHaSTD4TumXTZfPZB3RCxg6XK9+yQxX6I9Tnj5fto7JClV9YCKO3 wgU6rPZMTk1FK3TFWlPNKe6R27/9p/v69lw8evw/vnTXTCLjxHevu793+MHVi29bGBDnHaXC916n 8tFvJH7263cTPzrE/UvidGJ6LzWeeI3mfXnwod9gZswm6sGRXDwhjMr+bImXDsjZ2TZNijsKb4r5 4gM23nlrQUFZnsKmKgv0/EoVVxxZWvCf4VkVTuhMsOtADVPzGui0L19D/yHDU16ZmJNm4vl33+66 /cmxjU1bN391bvn8TW1jVRdndRY7DVfL9cT3xx9bVy4smHXn5kVbOnMEyHTTzHn+IHhbQSZlc4j5 q1BZCPXEIDiYu4qgxmGDr3FJrgmXYOJdrmxDQYGQXSbwwgG5zGZjUrAJrsPznNTpLJLOmc0VRec0 mipyuEKxZmbRZ0HxMoXkpO9i7toCT61YtrUBZo12pJUVtlwOdMJTFwbKITu2fDmcKc/G/LbDmVzN wBDLLzOj6xfesKN620037Glf+y+7eg9cN+bsXN7TuiYSXr9uYt+8thseHf3GaVo3tLry5ht6Vi+O NG78ct+mI4vF7MRHQysDFaPts1cOVssb9i1fe2BJcQ21ssiiDTK9BTKVyEK5zGy1QL0tvDmPZvB5 eRadm7h5N7SP5w7zJn2eqy3vsCR59Tuhg15GhUJtkIofnU1RStJkhhVvBgq9IIe/wlMJNZbkYt0m NK50BCvq6nYq0q3DCmsz3Bpqqg7axuCjDi+KVTs+JSm5akRnQXNEINaGtf2YtWPmgmYEs/aTWxE8 zrwsY6q0117BsFXBWH1elht0tA+VtA91tM9vtfOc1eDJ5bU6GLMtWzARV75Gx/sL7PZcvP9ltWoz bXjOkxvQwula2JKKVYgtrwyTltRC7EKmsiL5UJ7iMVc5z/xScp21YYm1MYEqrorXUB//3xLT30r8 1or39bz0u82VVvEF2vZtqno/GJ5Fp3ILvIGsxNfuFhZ98qjQHF1U6YYbNlYEfSNNn74rbPjkAPfJ 3llNtXBgendwce8nLzAP0Q8tjvOnEdNVkd/jJZ2Zd540i3hF4uTMO7Ke5bhymiMUYWMuR3XmriKD IcAH7pU3GSYMccO0QSAG0dBvuMdwyKAy8gaDu4KWC+V8+cOy4PAXHI367ZKtwnbIFrcJFUCcjb2V FQiUdgm2TJTcGfYcexlWOt4uukVevN8t2jIztbmT1FDIV7Gb6uD3q6qqSya1KLFFQItFANoSdIZZ cpo5AywFWNWwqG8OLtvcgqWALfKoTOvP5mQxqCx9waA/wBb3wsKa6gI/Mxes/Aj3mmE9DocdSwZb P3hFBEowUMM9ar7mgUW9W5vxANRbtKhr7grXrpGJibax7RFOnxkoTfzJ+C8vlndWRDc23y0Md8+6 tvMrj2S0jm+vHxj4clXI0/LlXYnD3U3VeQ5jJX2eG1/b0OZuW41XUEkFeH9BdR8i7HKyXPaX0mIV PN59skq02i0OMcOX4eN9B+UMR5b7aDSLZFPdrkLGvwwml8LCCrG8PHvSpqz+jCPwEpeIh5dwtbSk +YAF35miL1OhPaAJYI2HriHSAcFJv8FMyU6XCZ3LxmZd+8CCsZ/c3r2rq7ODz3AGwh/NMnlb5lZs v2Xz9Q398/x8Hp3T5rvutYcfPbvFk98kCi0jvTW5Vl21/pNX+pZEqmzPPvvcP/u6u8phX2tB5QA0 zEtulKMSHhdzcbwQmjdhmy0Rq2iVrLwuz0rNVurmrXJhcZfV7EJ4cJ/scuQhrDso54miqLdKNpsP 75j69Ls8ik88DYqz3MCuEEnGdKnI7lUm5usR9bjPZbnE08s2g3h7Mr6DF1R8ZB3iRihAykfy3Tst VW2VnetbXI0jsztulBvCc4evCf/w+U0v3j6wlz/ySmtP7uKTkwv3xepro231TcW2T8597e1bYNwc o00IQoL5pJaskcstj4ui+WhUtIczQ64QH2JE5Bfn5UGqjA6N+mhUQ7RUP2nNzOd9TJRMvX2++lJG VUqrPyvFlC67mGzFt0HNZcFhwdP46gJskUtT42RyhUbD4YermoUaXkjJT50ZrH0/YjS3LFsbOXx8 60+/1La+weStbw9N3LFhU2ljfaPHdIUUb57bXuQ2VOsPC+3tRRfeO/z2JrsrcWzucrk08/T09PNm b2NFM15L4cg4pPs1SNcN+W6X2ySbI9dr4S33yl6vwUFmS6+7P3BzxC26Jfd5N4J2t0Nw8I774B4M uXzuQdmAFqeVeK3irqwsn/V2jcKHD60Nr1oaIN90wJ4WLmSL3zCcgxdV4j1l84J46QoOIIj1stUO Ol3HsyVfreEn5Gsn+l76+bXP3bZq/8IQf3Gq5qbRgV2t16pLBqNrvmR4vL03+NcPD751i7zxH/ZY t31zSVMHXbj+zjlHHmCr2jyQ+QfV17HnXC9Leo1WczSqtYtWiNlB/xQ0E0mUJGlaellSZfA4GpmW Xfn+LilHzingC+7NQTzAeY9IQW7SZUbjCZH2mUPB8IdVv2TyVmIupqZMaVvOhauY82KuC2K+HJDz WOZqmgXsTsNV2IYyj8V2pGFu7IMMd3FZYk1poV1/U6HbackQdE03TC6eVzdmC5d7ywo9GR/w11x8 tD3qs8PtGx35cge3LKzWmLLC5dftGQkYvjer0loor+hdi1cQSEuilX8DsqwirWQBOS9f0+YdCAT0 2pC2ltcenK6l5tq82lAtr6utDZkH6IBMRGqHLzKLeWJI/ECcEVU+XhRDXRRD8ORPcpXZ3cV3HZTd 2aEWvuVgSAzojfm9BYxJxWBEQUGut62tt0MSbbS3Izd3kNMVVQols25XiTALlcoeJmRhL1sFDGb0 6LXbF4ZvL1EU5HQQ3GNRAxYD7FexEATZGosMGk5X4dzk8mYv5QUVnWH6A99wGiFTCNnU9hdNDeB4 QIMFIBNrQ0CJl8LKgqA4TCWgqmNLRq2CmTN1eqliY2xzzNYQm7JkXAo1ffn8G0/p8gpeeGpBpDen PXp+3R0N60/tWXX0xtbBvlCtPL+rp2HVVH/XbLryYvfqkXBXmb1qUf2KmDscvvuri2+LmgJdjQfn 89doDHnXNj96zN5Y7y8U2zZ2L//qgKthWWfLmoCtu6phRVPJPUsX7VxQbEm8vGNPIDpcObSt7tZP zxUurF28sGJxJLumxA0dlhGZ5cNPNZJ1coRn3OWKgChDhCHRFuSLiouORq3FdonmqHL4HLYO1dcd jdaTBmqcdLkixDdZkVLhitRO7MolB+ttejeWjGiSa04uNlws+GQ7SyiywiusM5e2ZqwuuRLR64S5 S4bDdYtaizPNgVmJbYF8Z4Zn3uwieTCoySwOJrYyPVfc2YcRrEDzWqSsmr5rBxK7r2nxYa9ltErt Uaqe3NeZ3dUbTNwWbQy4EcYrWs93pBco+KwFMOs/4ryOh9daJJc4BbdwNOq2p723mRvbxFMz/zrP mfkVSHie7uJsk5w+FYIgVQxZHwoGnz0rniWhZZuXnUv657T14rSIV+hlO2m2yiosoDtPrg54nRmC q7Lsj01iWTixXRV95pmPz2HubZ30SXluyKmt0V2sWdTuw7YZkmuB5CKQnEzufIpYZ95hIRCCKCXN ZNuMJlSUlDdJTo/KXsAXyxwO5Tgj3mcyu7Mr+fJQ+dGoJ2Q3m45GzebmpqPRZiJTk8XuLlCRksna FCW1TJ5OWI0SQDAnlNxWp4+JTuPISIldFcnScFUdDknYNxWdqtUaDU0Kme20sAXBHsTnU3YdacGn hLxe8trdkbrykE7rL6FPlI/X/Z5KVfMrEhNZbkN+2Y35OZKnnnFmS1XAoklJmyvT6ILhYMSN4Dpf jeMjufq1xJ62Fjg13pJpzqlqPlSWbTyvcK0yIzvQXnuFwJNcpL8BFx2kQrYLGjV8OEzcdjSaSex4 dkAmM1KMyEiGUUk2KH7Yf6Xypmn47Pw+/sI7Q9fUK/hTeDflrLzIoIWw9C4gnQQksCLPEMeKlCHC kDasdnnC8wZUtTW1R6P9WTX2FY8vX77saHS5meqKgp2qdnU7335fhlrUlU1GmDbAm7JUZqYdiQzZ Js1e2v464lWmsmhE+g68KDLelSOkaxKPJqdPWGgfUkWV2ONY1m8IKg1VYOdJwSA8pRKUoAJnhyyk ZgcuShjSEr50kJjevuC9eCdboRxKqIm95tUmLijh5RfUJY9sFFegmAvdaIr0dbV4Y7e6epaN1reP tufpbYVliRuZS9DZPPnlhUUd8wsu1+nt3vzynOKunkJ1Rqbfn9he6HUZmZW928TnC5Emv7h0RW9X IDD/5jWJ3b2NkhPnNil/sXBjW2G2KPX2VSe+enXL8KZoicPg7+wtTdzZEMm329gaepWhMguFhIUQ JBwh2+SmciaAMuZRSxkKMuTOjuDFIA4hPLUXP15UFDgaLTKXWs0VLMytEGsntdrm0pLMyXxsM5l5 I51+UrTQ3nzIICkL+NnkjuYS+xVhJFnvTXnW8jSLr/C2Se+jSYqEeWKER0Io6Vq1No+/IhDoHCxU HFHaL73bZDB1L1lWXbuwtcSuzSwMpRnVef2c4hxLXm93RWJvUt+vZsajQo/sc1f3rV+Q2N3RDEGl ImT+VcQUGdjlzJHzCGLDgzJxaLL4rIMa0SEaaJ9jl14ywi70uSZo4fdQY9rFM71FJQ97ZEs98OUl XTmfSkXvWK/VV6/DXObLv97y/MSrv9nwYmLPrpvbl8/Kat3UddNt4l/OH3lr44U/PvbWZvrxS79t 3XBg3lefWfJzrAdzEgOCARIswunkhFyiUyuBuocUlhdiK3tQLnTUZoXzwnz4PgTxzscRJByNOsz5 uypT6wFSbMpgPZWVjcSVxddPslBP1qHGzPQBAV/wrDNpU5Bk0oAuhfUso2zXknGfn21SLq2WSYcD +THDYrQi0ueTu5gaMblh26RzBisS4wVlLq1gdAbK3mvKMDd39c0uOnIs9uPbu7dXuZoWRG+6+e36 +f3e3F+0yn4XOwGwF3c28ou7moqyrLoa3aNCS0Oh+Nc/HTm72U1XjIy3Si88S/f45s4pSWk4XwYZ BkhMznW4XdiNuuxsd1/4uN9sxsvTWlHLZfJa1YSRrUhW0dGFwwCjStRptcUBap3MTWl2Lltm2Bke tu2n8YMYFvkiIsPS0vL2FZGvoq3pQJf5kb9TaPiHuuXXdTSGNrtqQwWz29yOcDhx3RU27+Db+0rU v6+tLOnvrEh8a0mHxM5CrrDdaj2jbDl2L3pQVkkekB2hrJaseVn8j7PwM1ExS4KGZhXmUCbJLquj K4RNK1UVGrcZ7zByfmONkeOJUTTKxn7jiFGlUxlzyu2Img7Kdke5ilcdLBezjrjdJVUU7/Jrxcn8 /LB2Mhm7siO9syx2Vaw6dVoBDQAnViwDM9iiy87rcbC37Hq2EVB2MVed4OFIKMy2OMqTmSvP+7iZ EUekt65/RWH/qtUbW2pX7u4ffLhnpWfdsoKOWqlocN2SDS3D397c9qVl3NlIR3ZPa3mkOljavTI6 b3001535ytIFZl+kLCzXlBV2rWwfuEnOsDE++fH7i2eEE7DhRXKlU+QzJZtcGOqyyUZzl028z+ng 9GY1NfJqjawnCDj0f9KYbZk6Xa5GZZjEc5gGJvRX2WENdjhpqTe0XHw1GMQmjx1eNvN1YbvXrhzZ s62bU1F1bHz8Vc2+TMN+2p74oVhaX1rUmV82e2f0tlu/xk9pi1pWLPnrqkT76JbWbG9ebUfzA49y +MEJJXOwL/fjdyb4OY+cn/N4drbnaDTbjt2bT8Nr7pN9DlspLcXqT82OSSkXWps8aDIay7lJnHXB drE2FrGluIjZLnNAYfbUgS16WAIv2a5iysrBpGKTEEcymE09eWCbc4WOQiXwDcyhOdaCtsbCzkV+ tcnmC9AcdWZJ7dtNavOC+3qXbGvM8DfzTyf4G25uLsnt6a6kNzYknzhcXNgXTW3HFw923f1levNg i5/9nNk285+CHnTm4fRB1lXYEFhU6Ey0VyOyIyKtghFqIK9zOURbLvvh79GoKsPi8KiI2WaChNpy cyW3S6fzStC4JuUpIB5DUPEMFPPSISU7o8Sv3vADNMoemuAhoM2mBHrJpyg4mqRspaHfKS+0ZZj+ +6lMsSxCtwVKSnIST2xLfJjtDUAalYZMyeOZFUio6dsVzZ6S0ozKSq13tnzRw73X15CtVeLdnJlP 1KWgyE+ekUWTqLhQIJwBITZiQUwOMpkSkIUhk+JfGcLJi9LjPM5vwYFMkWGLgpXrmsw4z82UGLYk caafp3ZiNetxiqts64UMV3a+Smv2F2Rm5tg4arHYcK6tzcnBGS5UQDm5/dwz3PCVp7gIoNgP9diP BHFehSOIq050r+SbcqSbm/h473lnHpRhb2Ox0fgNSve9FjdZy2rpMqit1514fTf33kWR+33XrBwW fwQCjIUcr/70Y/rHwo7cEjxBrdSYc5rkixI0IjPRrWhEOTSi2eCyOLreNvzFwGlk5IhG1EgaHLZq DDIWPMN3ZCFbIqLDHihhT+AQljjN2iMajQOPi6RiR5JgGO65pOIrT9vCykkMTPgU3FVwGUxXZUo+ Y0n6ozpFEZRHa3+nJZy2bnzHorqOYWNBfm4o3BFMvOPxFgbofaFCa4bp+PMWW6gxqTUDtzw4N+O5 YslZv3WY+3BOYy68t8HuzfI0BhIGeqaoPSeY1h7QfB1Mvg6/ieKJU9bz8QmOPsFxKiHpYvFYEAdE 7OF93YvvvPMO8w7r6U+4CLcU/SXZylGee1ImFM9bqaCipKgRRp16Ng7n663xcpFEBX2Z/uQhFs8s xUGJA099/KSY9MnFklbrIIVxuYgdZXJe3uqYcOCh9FccQuETxf4JQqxZt+r1cOYhdmDJHMnZV5Nu P+UFQ1kXX2InF7hV8g2E9HFC6g0EdiJh4jUwuuQbCBG9u6ayMZxV0ls1b4V1z/WP9G3/xmxzbnnD 7JqKTN/z9FB+cVXD3KbupWNNfdfWLl9+uLG865b5xR1tHZ0LmntmN7hPJnnwZKKPe1P1EJ6/lcpO PZThXllPCY7k7iUeQ679dpVKymMMvPjcFWcpmCR7MGgRrXi6ZM/HPkr5w2Nzp4P9hbk3H/+37bU1 23/1eGdtU7Ai12ex5vqyS/zhWcsTfatfwb8+yKXZdP4v1w0YTUWl85be/82Zs4mfxgZDxXYXk0wQ s1r8mVl5krOiuQbV7XZ7clbnrp6VDSf3eBWfg6+twdY0+YdnlYFC9ucLfuGkVA+tfiVxPPFG4q3E E1dNis5KTQr/sQASfwkSzyLNcq7VATlo1Tqt7gE8r8avGk0Oh06Nd2KmTKZsj6Jxz+FxT5idTZEW 5bkVcni5gp0vpR9Ns30OOzHSBGhYbee+n+FtXt53MWfjiipntkfadk0p/WWdmqoaZ/ntBm7OHJUl v7mTDxb52xr7qHPkcejtRsQtM5hTDinDCcEKuZZQ0SLM8vlm8bMelH1Ore/BogotItYHZa3NGeSD DzoFz75AoM6Yu89mMwp31dW1lt+F585MIT8nHGEmkIxLnWziTuVcjMWeyjFzXSB92sxCUpDFHjwq 234QlYpOU0UTx7u4zVs3/ev+yRc2Rka7uX/b/MrOe54dW38xnt081rVgc13r9d23ThpyW1fPGbih qW37vO5VLR7ulYzSf7jxhuOjw9/Zes3EgvyMZW+s+dbS+Q9cu+ERqp413lvWumNg8Y7InZ9+1Lp5 oKL99sUje+eUz8UZJtMhK4B91HgriSxa2N7d3hlsH71u5fVrR/8nqndE/wplbmRzdHJlYW0KZW5k b2JqCjUzIDAgb2JqCjEyODA5CmVuZG9iagoyMiAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlw ZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9UR1pGTkkrTHVjaWRhR3JhbmRlLUJvbGQgL0ZvbnREZXNj cmlwdG9yCjU0IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAv TGFzdENoYXIgMTE2IC9XaWR0aHMgWyAzMzAKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCA2NjAgNjYwIDY2MCAwIDAgMCAwIDAgMCAyNDcgMCAwIDAgMCAwIDAgMAowIDcxMiAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMzcxIDAgMzcxIDAgMCAwIDAg MCAwCjAgNTg2IDAgMCAwIDAgMCAwIDAgOTcwIDY1NyA2MzkgMCAwIDAgMCA0MDUgXSA+PgplbmRv YmoKNTQgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvVEdaRk5JK0x1 Y2lkYUdyYW5kZS1Cb2xkIC9GbGFncyAzMiAvRm9udEJCb3gKWy0xMDg2IC00NDAgMTczNCAxMTY5 XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDk2NyAvRGVzY2VudCAtMjExIC9DYXBIZWlnaHQKNzIz IC9TdGVtViAxNTAgL1hIZWlnaHQgNTM2IC9TdGVtSCAxMDAgL0F2Z1dpZHRoIC01MjMgL01heFdp ZHRoIDE3NTAgL0ZvbnRGaWxlMgo1NSAwIFIgPj4KZW5kb2JqCjU1IDAgb2JqCjw8IC9MZW5ndGgg NTYgMCBSIC9MZW5ndGgxIDEwMjQwIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab1a C3hU1bXe65wzM5n3mcnMZJJJyJkMiZQTTEgIEBJlIAmv+AhPZ8RIAgkmyFMRH2iJ0Ah3oBYKQe3X 71Pba3tvWy8nE8UEtUQr+Ki2YBFpQcqleGurueKrci2Z3H+fmQTIRev3tb2HrL322ms/1v73Wvvs 2Ye1t93RzOysjYms7sbG1UuZ/hScYYyyl6xoXJ2Us4+Av7hk3VolKVuKGTNMXLr6lhVJ2dnCmL30 luV3p9rndDOW1tvS3NiU1LPz4ONbUJCUaRz4yJYVa+9KytnfB5+4fNWSlD7nYcgjVjTelRqfnYCs rGxc0ZysX4D+WeHqVbevTcm8n/Dq25pT9SmC8Y8xQqmDrWBOdj0zQZJZMVvPmBSzl2K+pOuJbQq+ sGrpImflZxRI07t7auuL3F726knv2c/rzq+3nzLfiLpmvT5XoF/Tc4k63vnndZ9X2E8NabiWP45u tkbtZreA6kFz1Sl57HohHfUWIV0F2gD6DuhRkIExwc1kkAIqBmkgg+CGzscCOs8c6KUT4TvM1vLf n/JlZB95C8n6e32B9fdmHn4T+XV3IlmxGsnyVUhuXekLLFq5auWGlSK7lW5dueG2rLV3eLzZtyxD srQVSXOLJ7CqZUPLd1pE1iw3K81a86lmQ28zNbe0r8nKvN13T1Vm8G6QIPQIu4WOpytyEwOC2k1C F1i4m9hei6X8bIdJneIQKoRJrILlCoqQy4xMFQqoHwirA71CTtzlKn9eyBGyUwXZ8aLi8h5osuOZ WamMU0aV7KE2WfH0dF2TFbc7oMmEhvfqo/64UbVMKaajjOgtepMJTKUjKf6bFD+c4odS/A16Wa/3 eor/MsVfA4eN9GqKv5LiB+nluKRap5jpANbLitIASBg4RC/Fx5fDrqPI5AZTGU9GMtNldpQ7n6P7 WS5IIDW+WwRW34jv4OyKrh1pHLL8LrOlHDzUZbXpPA65mwLxjmBuNwXjO3LB/Ekm7QW0X4J490Bv uOK/3OnlG3emqVs6JHXHTlLZg/Rgh0Xd0SGqOzsE9eGOktxHH6JDu0/tPrtb3N1BargjM1Ae7gDY 3cLK+P0GtVtYHt9vUPliLO7CYrY9K8xgBCnQVXAF7AP3+XQet9n1BfHGlbxUJsNf3iMEBG9cxMyE jLgPMpp64mYbFB46H9e95HwXzMSUz8fhuj10kh6KjwhCPhn3ZJZPsdCLtF9fnRdSvJf2oyGbMpre YTJIYArSYj3XRj/Huj9L3XqLfSnek+LPpPjeFH86xeNJPnCKuuM2B2zook4MYX2WOjHZQ6QNrqo2 uKpaPLWqWhyr+jxtoo3MxXIRgRt5D89RC7WyEqx0RnyDEcs7Ot7O2aj4FgmsIP4tzkZ23Y957KM8 mJzXhQqYdGY8cwRHCRm/DhcyDhc8IDcsbwrm9p8Hln8FsH9tg9cM9Had83rLde5ycx62nbPby//y mah+1pamV/ikpFSv8MnIkXoF6ye+rPLiznBnXaeoN+h0+cvDZ8YUlctniPcUzxqhVxwfl13l2h6D uqfdoMp/qPvD9j+I29rhpKczM8uV05NPP3p6z+n9p0+dNt63AaXfdDrLv5kas21ShT5mW2rsttGF STmgd93VFkra4mnz+Mvb2gV1e7uk3o9eNqB/blRg89S68s3tFnUTH7A9P7883J6biwTBMOVuQRQk wcBs9Dmdo/8B/5Q+o78wG3YXvmfn0udsMqgOJApO+kxwMbtgRhsruJHOCWngTlYpmEFGkMgqUbeS PgU9So/R4+hzJ+2iDvDttIO+C/5T8CeZnZ6A/sfgP4D+X8F/ijZPgH7A24J2graDJlIFNv9cqqBK ugrti6iYxoIX0hi6Enw6+Ey0nwJ9FfjV0IfBp6PtFNDVoApQEagwvLMyMMHrH+/1lnnd47zOUq+t xGse6zUWe8UiL7vSW3CFY9QVztGqo1B15oUcI0POEbkOJdfplF02s8VqM5rSbKJksDESbEx05+aK 14v7xQFRynVOdtY5xQDl2P2mLLtXzrC7JY+9sHJ05ajKgsqRlXmVSuWIykClv9Jb6a50VporjZVi JausKyXNXctq503V0gl87lStVK3tFpU5Wolaq5nrFkY6iR6MolQTtuBdME+TtnQLYO6qGxdG4Olc 3R7ogfMzrbah/dvRToFN1WiLFpob4Sw8O6IpW7plNi/SKdDUaDSqTaitQ55Njao5WlMtqrXlRLUS ntmeE2W12qTZWiA0Vb3cc/vtF5d2jiqo0UbXNGqFNQ3VFyv+dl7viC5TDwPoYyBZO1x9yeAXhNtv v2xNhuZJe/+PenCMC33wusOHU1WqigSinFRV82thLA+sSmFwERTd9LZSs6y6m44l2W+T7HdJdjzJ TnCmm7S208wX9+o5U2u1tDmguoVaVgjCKxDGQ7CFphpVlomz3ysslDzoXJpKs7iWsYF39PSPenqc scQdA+8xZpyA3Ou87O95+BmNk/T3dMLbPsUWwNJrBn6CfA+rR376wA+/vFPE7sc0jmxUxt5E7H5G o3AQLGCv4BjJ59wPeg4lVvbLVB897E/sx+yVL++Ra+hHF+uxX4yCLQfZKvb5xeV6/kmknC4891/I fkXuMTZ4in48WUscI7jFGNvPulgHOzmsZQ9G3sV24MVlZh9RPl5hW+k5Smdn2GGcnbcKz4gPsH9H m55h7bh4Ev+2oPXQQ99gn1Mbm8Lexgl8LOuiADWz1wnHZvY+ZnqCvc82sv2UPYRZqiVfX/5ITHoy 6VFJ+Z+QrgfWB9iSr98zjSKR/F9WH5GRj/gQk/oL80jKUgrtAcQE/E2PDz1XkdTDH1bCByZgjGzy wdfSSGTn2AdA/214RQ/bzr7F7uLrqde7EvUUYCqTRAL7H6B6lv2cfW+wFt40jKm6l7818BPKZ1dA PjA40ldzw1KO+2A8pzHYcfhCzBneSsV5MsI/Hewr8ZGe28v2si/YKfYh+xXJbC9tg2UH2Ivwt21Y 9W2wcD1bzD4hSjDxRcyrDv++4jFkG/hMLn3Ws12YPY+WVbDlJL2BkS737II/DvNxYx29NSySGHsB cfwY+rv4+dnFQiq/S7yLfcpmXaI5g/kcFp5hWxE3G9lKXbdKekzqwSijk//C4TkzZ1RWTCqfOGF8 2bjSkrHFRVeOKVRHf2PUFQX5I0N5QSV3RE52ICvTn+HzetLdLtnpsNusFnOayWiQRIFYIfk1f1Wk ZpmWWdWArbg6JCua7bqz1xZpzB0IhlxKaVF0TKqWZlA1ll6refBGZeGJUc2oDq9ynSbmyx8H0fja gFKjSfn4C81qbNJGzYkEQ/LRwJA+im61rKpIMBjQhHz8zYQKf7MalSZNrkM5FHrJTI3VRTh1D5ye iEI2MRhFOieijRgU8aK/jJHYTQZ6h5l5HcXkTltmVbXGPJ3MdlpjXl7t7ESmsUptFA4e+TJyem+s SCPPxxqla+S9FlO6dAje7NTEy2BQ07QsVNPUCkSbGi5gejaJaFCJKbE5EVdpIBjUjcaLcHak02qp ClU1WzALHElQwDotVpRYeQGWZXUn2a4mPSPYaibhPJNmB3xubm4Np2VaeGsDMqFq4AZN+gUNDsfb LlYxNEtWYqim50gfUzNWaaakEUqrFm7U2Fals7A3tg3nqcUNqq0p1NR4U0QTG2FUJxPza1rmadm1 dTeiCEaAGloUvtzVesIXT6lpUWKQed0GpKFqNL20vKmluYG7CTWEqqEzV0U2B3sDOPBFNtdoLlWz o7n9njMBMVbjb1W4GIttVrTHcNC7SBvkdeAE/jGFSqwmhNHQWc2yqXzFioaWTffGmU364oS3Nipa 2+JlwAx/jdsG/T8YkzXbX4JYHawPWvLo4ABzampYxqeyDC0lMCW2tVmf6jZ9avBXfujhxBvC+9l8 tL4xUtMSqgGeqQEBCNqL+cPbBoNapsobxmI13MTGJljPkcFfJg5kMCMpICYCKsGeKi08T2dsnr4G GDHcWB1NFaUqQCNhHbRwQ3U0yieVXADNlL/ZcGVIifFOTfmaR5WDL0HXO6awdk6kppp7J2oKVZGr +vyBPuRxjB4sJj/qxIr6OEhcMzdUOzvpBS0cH540zEsGMFBLrTyqpurrvb7hD7yBttNC0xpisWkh ZVqsIdbYPdC2OKTIoVinzRZbXdOg6JFPKN+3NaBN2xbV5IYWmoRF5v42DQfI9NkL+fJMU1oaUYK/ yaHgxEDQha6TdbBzXF6dijN4PPyex1lM/gAztmFHCijT+PbSjV0hoMkTeZjCkvkRxMESDFHTpCeI D/yIEAI8UsRofk3r3BRAgSCG1B2G73uzU6XoJBjkMbS1O8wWQ9DaZkeSssIWB+IsXKRi7Rq4pndQ 453PNW2DmqHmDSGslZ//iNF94st8Gvv5kD/HXCG3Us43c1iHv5lNWu88zPHcRC0NiOnLnV4VEQMC r4KcEBB5zqLilVCpZah6Q44JdsmYHFIOhTRZ1QxVkd5AZVSRXdggacgZUj1yN5UPhV4lvokyj6xR pUY+HlYMmypgxKafMRHKoYZKTawh5X0Xzw9Vee2mlqE4Ss4CgcsnCRjkEOI2kMTD5Q7xqb7OvT35 gtMM+dN4UGFtdMRmRTUHf9lpjg/0BJMLVEUUbEMI29l6RqlRWviqa0pDtb4fRANcP1jcPXCqoZrv fxE4GqoEUv4NLwdsqZhIwVA7LzKYmxO5L3BPdAxubwtru5kZb1L+i7ebBtq7WXVOD+6DxUU3Qz2v UFFqWqsxIIT5hSgYHURuQSF8k7t+JBTlb5KZTTGFO38TpqVzKJpj0SL469wI9kv8EA5q4WhgKNsc jU5CPzfwftAE1WNR9LAs1QO4XlTUj0qRwlrsVAV1EWy2bdVw9GoewphuL6Kql8+YTyQ6ZCksvq/V n7L5RtgcHQ39wmQv8NU2dBGNxXifcyMhuHksFohhHikZP/iHF4RTBd2MN8HEa7qprQ5twUL6+aAm FAxx5KPVGOom4D64S+GO/KsRvnnIbrRcBGtv1hFu+Ach3Ph1EF78tRBeMmTpJQg3weYlHOHmyyOs CQVfgfHFkIaTkIYvA+nSSyC95ashbRkyFFa1wrwWHdJl/yBIb/06kC7/WpCuGLL0EkhXwuYVHNJV l4f0n+G0qy9BeM1XI3zbkN0w8nZYe5uO8Np/EMJ3fB2E130thO8csvQShO+CzXdyhO/+/0P4nosQ xicfYgJuZAzTSTFMZztBr9EXrNXQxeoF/KIELZE0tsD0IuvBL8QeQzZbIF7NrsHvr+S3PYZbYyPu eRhT2HyU/a1HwPegS6+V8GVu2GMcJv8t0YQKacMqmYfJFmaFpYOPPZWZxCaxe8mIm+heoVC4Tlgn fCCuFJ+T/FIDauAXIZDhnw5FfNvEC2ouvjOmFeFFBUqT8YH0EIjLyIsnkAeXwEVwwwm2T5/pAjSS 5H34nmJkPC/IxWODrqArHwmhxvmw2Ha+zcD+ysJSG+5yFdwBPGLow7vvhqeNcmbeDHxleC9sdftn mHCf7pY6DPyCPz83b4Yh7PXPMBilNBNJkqm9Qdgu9OIqXpAFTTglnBUMQlH9mr6DB9+Q32CT31HV vsn9vWOLVTVYFnQZyvJdQS8pNCpxTJhNo56UqmfFd33Ry2+/iO2EDetgQyZ7PvzAAx6qTafj6WQ2 0G8NtNRAUyUqkTZKH0timThffFf8TJS8Qr5QJojTDAsMwlW+a32Cr9iXOaPGSE8b3zIKrUYqN7Ya HzGKBp/X96Bk8EiSYZZEPsnglTJ2Z7ptHblWspo7HFKyaBOZNrnC/jq/4A9YAQplyUfrD4KO9Ml9 GSVscv/R+r7JyFH9ZklWN9/30thiql9Tv0ZdU8/q65HjQn1p2YTxk4mVjQvmmcrGl5ZIXo/RSUZT 0LtTvvO+u0lNnPvh26d/8wFlx/6j6fAVwoN/9j264lZKe/m9lb+d9/tn7z+yre7ftv8ZkACT1waO S9sN/81yWXf4/tZMWuqnqJ9qsxdmC1mm0aZJJrHYTkbveK9gtjmyHYUO0ebzFfjG+0Qxm2w5y3Pu zdmWIzlFR7pDkEVzhyXsGWHpKClmHSR2jMh0dxS7yOXs8Ej2TRnGTasDZwNCIGjOXGXZYBEsLgVf NxpwQ0SrqQ2XYwqgWHP0YH1JCTJ9R/pSgPQf7VNZll++tg9wLLq5/mZAcXM944w/E8p8pSXjy+Rg qGyC4hoXGgRFNkgujxTMe+3Ed9ofT8xdeC1999wPe35x7F0SEz20LnEkkThuPTl/yxrKxwHN9Orc 16qe+1Hii+ULEgdffg9xwloB0A7cZPE4GRP2S3sMTtrD3MY9BiO8cA+F08y0p6RYJd22XrlXhsVY v7HFpYgEArVyR+S3TYljYh5PdczrB44bGuCHXrYxfMNCkUwizTeR2UTkcrkEuzPHKdj87owZPoky jdTsoGY33WXaYhLYDtlL3vQdQrplh9W+I02yMnmTIbyB71D8vygcYpJZZBk+w3JBJb98EFjVZwE2 +SWOJAIFqHKPqufepOrg1ecbgwpzySxYkuHFdZKAbGnJBEPD24mjiV2JZfQIrf/4w8RHz/w5Qa5P fneyooG+R6toHe0s/2hR4u3Eh4lPE0f0iytiBxB0u3DPb2K5YZfhISY9REw0Gp5azdqAZlF9/zu9 wKcIJqQjSkOuUu8B+vWxY4ljprlPfmFKxugS9FGi94FNZa66D1OT9A0Gt3T7sGmZdMGg7zzi0M4D rL2lrpBXKEmMvbhDgS0Y+KM0QVoCeLzsofBIF76s2WfbD9v/0/6R3dAuUYf0hCRkGcnod/tmTJdu kARsTGfDWYB/lkj3WMj2kNNF+12/dgkul8PDHpb5PqU402fIjocFn6cjTZadbjKL7k1WmwuLYQX8 S5PwA/r+A3IfVoHPG+irffgcy3cvPaxV/A8PHs5r8o0hLME44O52Bd3BkgkUlEN50oTfPJ/oS7xI oQ8/Otl/wwiq6Hi2fy7Fnu7OvxqfER0DNCFxKPFM4mANfZ9/SCB+s27yYa4B9rOwxWcm0ZhuFMzW 7oFD4SazbcZ71nNWoUKqlY5L70vSWvO3zLvMIk8Eh5d501y7LaJ/t0EmZxrzONrtYqCdhfHl0cnI InqZx95c4Wn3hjd4yemd7N3vFR/zkuYl5oU6O8fbzgMBU11zW/0aPR50qZ5n+xEYmDibPLmv9FBf 6eRD2K+xra3B/G+up3oEixe7mC9jfKmSSUE9ghE7PJBdPZS98ey9j7m/9zsakzizsf2biTObNn1T mvXr9+5Z+V7iqfN/Evb+ord/urD3pRf6p6cwkHbp693Yw0wDx8IWzFxwup2C6ORAWD0ZMwTRLQqy pL+BciA7Rbs+bwuztJsFGdN2m1vwdbhZwAezwQmwol7YX1KiYo7qonrMQB003HvB2lE73t35k8Sx e7+9kdu47/Hz54T9z77cfy3iPumLB2CbFf8356bwJEcaOST6F/sjdoG85HCSI50sdhKtNrJacQ4h h8HVYZRtHczn2GT2bBLDfnOrkCHCu1JbztB+w4Gvr1+kvySQMSQjWk/zS1zjCkJ5Rq/HJzyQGEgc prE4GphobOJXiXMDm9fdsfmBTHw3MJGFxiVeT5xLfJz4VQ9t7jp06OmuN2E2/OqagT8KHxryWTq7 PlxiSWMd6a4OwecwWA0daU670yhZnWlSurO9QeqVBJwKJEVaLW3HNbYmnZLSJDh8/0Fsjr3yQfkg AgE5vhvJb4wt5p6fSaGy0rJ8byl2BA+2HuHDZVclNqxfT6Pef/+JgjJjLrUIU3t68o739L/7moPj qD8DE1lTMjcsRRXs2B7Eu4/lsAJ2Nbx4Br4TzGZz2A16XWJuvmPiMTI/Y/Om3zjtupnqNXcsaW1q nH5b48qm5jFTVy3nvSdr8ZphED8f3gRaDroXtA30fdDPQPiCx14HnQB9ADqPxraB1AOZDeWJKcPk scPkkmFy6TB50jC5api8cJiML5SXjN88TF4xTNa384vsXTVMr//fuf8FQwMfoAplbmRzdHJlYW0K ZW5kb2JqCjU2IDAgb2JqCjU5NzgKZW5kb2JqCjU3IDAgb2JqCihNaWNyb3NvZnQgV29yZCAtIGRy YWZ0LWJvdWNhZGFpci1wY3Atc2VydmVyLXNlbGVjdGlvbi0wMC1yZXBlbm5vLmRvY3gpCmVuZG9i ago1OCAwIG9iagooTWFjIE9TIFggMTAuNy41IFF1YXJ0eiBQREZDb250ZXh0KQplbmRvYmoKNTkg MCBvYmoKKHJlcGVubm8pCmVuZG9iago2MCAwIG9iagooV29yZCkKZW5kb2JqCjYxIDAgb2JqCihE OjIwMTIxMTA2MDQxODM0WjAwJzAwJykKZW5kb2JqCjYyIDAgb2JqCigpCmVuZG9iago2MyAwIG9i agpbIF0KZW5kb2JqCjEgMCBvYmoKPDwgL1RpdGxlIDU3IDAgUiAvQXV0aG9yIDU5IDAgUiAvUHJv ZHVjZXIgNTggMCBSIC9DcmVhdG9yIDYwIDAgUiAvQ3JlYXRpb25EYXRlCjYxIDAgUiAvTW9kRGF0 ZSA2MSAwIFIgL0tleXdvcmRzIDYyIDAgUiAvQUFQTDpLZXl3b3JkcyA2MyAwIFIgPj4KZW5kb2Jq CnhyZWYKMCA2NAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAwOTgzMzggMDAwMDAgbiAKMDAwMDAw NTA1MiAwMDAwMCBuIAowMDAwMDMyMDE2IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAw MDAwNTAzMiAwMDAwMCBuIAowMDAwMDA1MTU2IDAwMDAwIG4gCjAwMDAwMDc5OTAgMDAwMDAgbiAK MDAwMDAzMjE4NCAwMDAwMCBuIAowMDAwMDA1MjU1IDAwMDAwIG4gCjAwMDAwMDc5NjkgMDAwMDAg biAKMDAwMDAxMjIzOSAwMDAwMCBuIAowMDAwMDA4MDI1IDAwMDAwIG4gCjAwMDAwMTIyMTggMDAw MDAgbiAKMDAwMDAxMjM0NiAwMDAwMCBuIAowMDAwMDIxOTgyIDAwMDAwIG4gCjAwMDAwMTI0NDYg MDAwMDAgbiAKMDAwMDAyMTk2MSAwMDAwMCBuIAowMDAwMDIyMDg5IDAwMDAwIG4gCjAwMDAwNTk2 MDcgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDcxNjczIDAwMDAwIG4gCjAwMDAw OTEzNDAgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAwMDc3Mjc0IDAwMDAwIG4gCjAw MDAwMjU4OTAgMDAwMDAgbiAKMDAwMDAyMjI0NSAwMDAwMCBuIAowMDAwMDI1ODY5IDAwMDAwIG4g CjAwMDAwMjU5OTcgMDAwMDAgbiAKMDAwMDAzMDMyMSAwMDAwMCBuIAowMDAwMDI2MDk3IDAwMDAw IG4gCjAwMDAwMzAzMDAgMDAwMDAgbiAKMDAwMDAzMDQyOCAwMDAwMCBuIAowMDAwMDMxODA5IDAw MDAwIG4gCjAwMDAwMzA1MjggMDAwMDAgbiAKMDAwMDAzMTc4OCAwMDAwMCBuIAowMDAwMDMxOTE2 IDAwMDAwIG4gCjAwMDAwMzIxMzQgMDAwMDAgbiAKMDAwMDAzMjcwMCAwMDAwMCBuIAowMDAwMDMy OTQyIDAwMDAwIG4gCjAwMDAwNTk1ODUgMDAwMDAgbiAKMDAwMDA1OTk4MSAwMDAwMCBuIAowMDAw MDYwMjQxIDAwMDAwIG4gCjAwMDAwNzE2NTEgMDAwMDAgbiAKMDAwMDA3MjE1OCAwMDAwMCBuIAow MDAwMDcxODM5IDAwMDAwIG4gCjAwMDAwNzIxMzggMDAwMDAgbiAKMDAwMDA3MjQxMyAwMDAwMCBu IAowMDAwMDc3MjUzIDAwMDAwIG4gCjAwMDAwNzgxODAgMDAwMDAgbiAKMDAwMDA3NzU5MyAwMDAw MCBuIAowMDAwMDc4MTYwIDAwMDAwIG4gCjAwMDAwNzg0MTggMDAwMDAgbiAKMDAwMDA5MTMxOCAw MDAwMCBuIAowMDAwMDkxNzE2IDAwMDAwIG4gCjAwMDAwOTE5NzggMDAwMDAgbiAKMDAwMDA5ODA0 NyAwMDAwMCBuIAowMDAwMDk4MDY4IDAwMDAwIG4gCjAwMDAwOTgxNTYgMDAwMDAgbiAKMDAwMDA5 ODIwOCAwMDAwMCBuIAowMDAwMDk4MjM0IDAwMDAwIG4gCjAwMDAwOTgyNTcgMDAwMDAgbiAKMDAw MDA5ODI5OSAwMDAwMCBuIAowMDAwMDk4MzE4IDAwMDAwIG4gCnRyYWlsZXIKPDwgL1NpemUgNjQg L1Jvb3QgMzcgMCBSIC9JbmZvIDEgMCBSIC9JRCBbIDwzNzVmZTVhNmJkM2NmNWUwN2M1NTJmNGFh NzQ1NzUxZD4KPDM3NWZlNWE2YmQzY2Y1ZTA3YzU1MmY0YWE3NDU3NTFkPiBdID4+CnN0YXJ0eHJl Zgo5ODQ5NwolJUVPRgo= --_002_45A697A8FFD7CF48BCF2BE7E106F06041388C2xmbrcdx04ciscocom_-- From repenno@cisco.com Mon Nov 5 21:50:45 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E76B121F85A8 for ; Mon, 5 Nov 2012 21:50:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.479 X-Spam-Level: X-Spam-Status: No, score=-10.479 tagged_above=-999 required=5 tests=[AWL=0.120, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3WaExe-nfLlq for ; Mon, 5 Nov 2012 21:50:28 -0800 (PST) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) by ietfa.amsl.com (Postfix) with ESMTP id D71A021F859B for ; Mon, 5 Nov 2012 21:50:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=244530; q=dns/txt; s=iport; t=1352181026; x=1353390626; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=Blj1bS0jWjGuZXAIOelLCFByP/4H7T7oc+fp3nRYfyo=; b=gXAfrK/WD/MLXOz8ILlRUHU/8NN2p3WqK3cCiQm624ORFdAsGI+KasKV k0AwpaMJSqmSkWkkvMS6v2qHFc7s7U0I+hDNcsJhoPyvT34V48Hsjufm/ fa+VNdn6kR9s19kc9Rvj4HYZYIqupKChp5iWS3LB8RRfI0X6PvWMah0OJ U=; X-Files: draft-chen-pcp-mobile-deployment-02-repenno.pdf : 178047 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av0EAAekmFCtJXHB/2dsb2JhbABEwzeBCIIgAQQSATJGASomGBglAgQbBhSHaJlRgSuPZJA8kXBhA457lVmBa4Jvghk X-IronPort-AV: E=Sophos;i="4.80,721,1344211200"; d="pdf'?scan'208";a="139161483" Received: from rcdn-core2-6.cisco.com ([173.37.113.193]) by rcdn-iport-2.cisco.com with ESMTP; 06 Nov 2012 05:50:24 +0000 Received: from xhc-rcd-x09.cisco.com (xhc-rcd-x09.cisco.com [173.37.183.83]) by rcdn-core2-6.cisco.com (8.14.5/8.14.5) with ESMTP id qA65oNLd026570 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Tue, 6 Nov 2012 05:50:23 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x09.cisco.com ([173.37.183.83]) with mapi id 14.02.0318.001; Mon, 5 Nov 2012 23:50:22 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-chen-pcp-mobile-deployment-02 Thread-Index: AQHNu+KcH7NwBjrvv0C9TH6T3E9pZg== Date: Tue, 6 Nov 2012 05:50:22 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413895B@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041388C2@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.69.7] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19340.004 x-tm-as-result: No--28.498900-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/mixed; boundary="_002_45A697A8FFD7CF48BCF2BE7E106F060413895Bxmbrcdx04ciscocom_" MIME-Version: 1.0 Subject: [pcp] Comments on draft-chen-pcp-mobile-deployment-02 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2012 05:50:45 -0000 --_002_45A697A8FFD7CF48BCF2BE7E106F060413895Bxmbrcdx04ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-ID: <1541A1F352EADF44A6EC103810D78626@cisco.com> Content-Transfer-Encoding: quoted-printable Hello, My review of the attached draft. Regards, Reinaldo --_002_45A697A8FFD7CF48BCF2BE7E106F060413895Bxmbrcdx04ciscocom_ Content-Type: application/pdf; name="draft-chen-pcp-mobile-deployment-02-repenno.pdf" Content-Description: draft-chen-pcp-mobile-deployment-02-repenno.pdf Content-Disposition: attachment; filename="draft-chen-pcp-mobile-deployment-02-repenno.pdf"; size=178047; creation-date="Tue, 06 Nov 2012 05:50:21 GMT"; modification-date="Tue, 06 Nov 2012 05:50:21 GMT" Content-ID: Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXVmT20aSfuevqJndjW1FyBAKN/wmt2yHJ2xv76hjJmIl P7BJtBpjXuYhuTf2x++XhSoAhbMAEmraEWqQBMGv8qrMrKysP9h/sz8Y9yxH/GPbNmd+5FoBCwP6 d5+wf7INe3N74GxxYLYVe7HN46DpanZYMM8JLMcNGPdDK3ZwHw88K+KexwIXXxYPfCz/ZmBFHvOi 0PKD4paZ9pvMxv949h/4UR5zR7yWlyE93fYAFz/sBqHDFmv23T3utO3AYfeLmeuK++Wf+zV7c3/P LZtxdv/IbtiF/ns1u/8X+/4eIyvRs3FsOj27xub6GGQE4Gpss2xsPSN6xYygzKqs7YJSkJnHFrd5 oJF5dr9gPaAEmadAFodW6Ec8ZqGOTMMzq7HdEEpN/mdGssi5FUEJOtk1ywTww1gkxC4oVBQ4oU+a 16gdkRVAiog4ZUS5crRxTWJ7t10czoEHpZ01wYpdK3ZdPxoJ6zc2KdG47VueHXoj0R3/PJ5JM/bH rG7oOIc1iTiMgcZKTcxZVcz/7xyzpISrzfRyx7ZC28+FS1qnXuGSlne3fDSk0yBLxV3H4mHcLFv9 hspcthpR9dLMw6Tqu6HORbBbzlZtCilpdr+fL35P9pPQLbQtTN46MONp1JxssKj12b2XbBHMVxzn otZkWWs2/ntDMjXa+H5EvhU6nt9GL52RNWzreboaB09MQK3ukGPDtXGqRqJFvGqoBnGx7MdkoPpo 5nDH8uKgykVTdO/Sx0c+CdFcbsFX1A2rKaqpaQaDYcfuOTRzJqFZ4FgOH83LqakWwszGdvMkgKCg Rzt/TY8j/Z4e7YwiK47i8eqpByvmfK1b3LZJvYg52t2Mmt1gjUgspzeaJHKVrUZI/ipixdCOrdB1 IoSRFgWR0h1CxPLIMvfMKd/ELQ+BX3YTTcu4Cb5JECOyLJ5UvolMPm6iydgrPwkxZBhE+pNo6onK N1GcoX4te5AwbKGGW79n9sgcUuQgKCPS7wEgh8TW11DXxj+7XHxZBHW2h3HzYKAHp0vj+FfnOKn9 cqyPrdtfbhbkehjf6Pu1QcnJHCBWxfw3MHT+R7I/pNvN4duzwJW1rCkk4xzi6Qch00AaO6a23WgC zqRcHmFooHqMtymZxrl9jmf5ro1UVQMv+ycWe6T/wmwxsbRE+XnIo4NqEXUZ248mk0negbsBIhpK +pmQqQhbJTZ7pMsiMliZb9wUQavYaxyocfZNU4uZzLPW1aImjF3JuHyOlgM5Iy1Yn6MbTVvZemSW wibe+pYbY5IOMYuqSVPOrKQmDibNxnvkFO36VhwLGWl9Tt9cZ+7XlIywjQQ14F8qT6xxWGXS6xxu pGvblMEB1/GFmWlA25/FGCark86/cMMFvc8Q0jOJWbA+ciDIENUy6/uJ+Wty/LLd/87+iX/SzSf2 43572g2h8I8Wu31KNtOSWY7tGsgc+kjWVDSsn8w/bY7JfpOYJk+H6ZNK6QY6Nm2KrIU13xiqds14 d07WCG0c1+GsAsU03/BuP388DpE+de//QArn22mFUFL3GoQwQCjpDNZ1EsLNMlmyw3F+PMHn/mnz uN2v50d44POVImXz39undBLqIgZGcAbPXA5JUrdFYApnSuaMN3P2y/YhXSWG0jxIsQpXRKd3t2KN 9j27FKsw8wG3XD+urQT3xA3f/7lL9wlY/na3T1fM8V8zZFPdZl5X3v3FYt9tT4v5cp7uJ5EBtRIc yLFdg4b5HmUmh4azFcoNeDkFYZFcQsYp8lkgRzNQuX7YzzeLhN0nq2SxXWsadnFnX0eoaVhN6U01 bJCyFxrmhRaKQHQN65/hB/C66dYp+O/mxlUOaSD/31rsH+n/LuemizmD6F0YV53eGutrXosp6wd5 LQXrXWRm/YrW9yc+mvgp39OU5mLxU2TZgImKoga450jqFGidENVP3KcSqVFo3yWn42HxlJmh37dr 9vbHKWAW4qjDfFlxxJJipEd0Z0ljh6AqeZ2i0suOLM4pX4LqBYxnoBX62WL3T2nyMD9NEj2VGF+m 9ovy3cHCCCWYyqH8lIyfYvIpnA85moFsf7tazI/JNFOP41oeR+FYoBO6m+eTBMyuEyJgpupQHUpL /FObD38+LZKNqV6UJ8UZ1bua5WF1ZBqRCtfsEon3toRhMT9zWBJvqAHpt3rNd0yiFWqRPBg1lP9a HLcPyd7UCxrmkGHp148CuBUZNM369HsVjiNCStPFjWHQ8ghRg6aJYk01TIlU1gpRBW4Wh3M7Wzk3 KYMdDaVLQQutsLGwzgOlFhpVCgVVJeFTOE85FB8Rp+ujgKA8c/XLTqF/U6DLV38HoXPyKvq3SI49 H9ID2z6yu+3+yG63m+N+u2J3++1xu8BFupFZKCbT6VOYDle5UWoYckJ9UX5HyPdSUclYfivOT8J3 tSTqD0FZ8H1JyehJgKG8LCSqVYBpnJT2rIAzif/BA6SIbO5VoXT7HwUoBGYbQxJV7Kywsq2lnlzV xHaRSBo3oJHex2gSddlZHsliWAXFyJEtSLRb7AwpNGhO5Cg+4FQEpmBJHXwBIVJ1uRUkpjK0HpLA L0tRrw/rwNGPQzvspNHXkSIHjn4YI2mjiDRQipbJbrV9Xps7+4OEyYEZsD1sfFLoXlCYgtiKAlQs V6CYStP48pouvy/PYlVQadpWOFtfJRrysSpuI7FyDX4APMDQQxg7zA94+3A4YtPHNJOsWhX3dWwa x75y0IASRCTAmnSrEB3GZ2LrpuGcUbaHInrpmsoKPz3AfhhURBoZIW0/qSGsQdYnwq7ayHOh8hLW QDFCevDA1sl6y3b77ed0mRzYnK23x/SzWNpmeGOxT3e0zM2w4M2OyCaXHflJvHVsu7ADuxjTNWip 7yJ9ohEXWcX+PcSGPIcompesFTxvBNWznJ1HXh9v7m7vPr4Ci9X0SMHYnLk/3t1BBKgygKHs5ks+ hAtWmBeTphjCQF2ioqtk8zndbzc0q1sMWW5VxQCQfcWB5Q1KQuVbXWnXo5g8wtxehqmZwbL1yTaO 5/TqBjJIzQvr46GGinYUDJstECtOAauQxHGwltvFiTgI07I4HWB7YGXI/OSyR5w+7JJF+pguWHo4 nHDPx5vE+mSxRbJasd3TdpNMYoNU2syXI7sGG+SidMmuLGoZZYim5f04WA/zI+r6ntlu+wVZ2QU2 MpzWYp55zX5PkiLuu6TVwZaPyAuhzhKyEVNNI+NBCu0gI4WmFIhpxlFvvko/Jwwe4CNpxj5ZnhY0 R3989ZrBqpf4jX32FyouVzluhdiIeM1mx6C6HPvhbBSR036qyEdrkdIFdjs4tBbgwwz6Tmx5LrKm aCJCpV2oP4F1JFb0NxMxnwcK8wvXxIW7NXDCmtz8SlgDZ4X5brdKF3NY2/T4zI5b8u4OibKzcAwf T3u8tUfR42mZovhxvlmyKaytYCftf/TH0Xcu0szJsiT3RfOaM6vE3ULuM95LImteQC0Ysgyh1GKQ rkjaVYuvikxNUAqHpDOSrqugBuX2PRQvtn2xw9G2XCf2OI+weUZesfe3emORb+RWTGFsQhSuiFgN Oykjy8euyxgLZGwNU1R6PVux98JHKjW1aH0MKmHEY7KHZK8Cn8lHlHf19DwCbYckEvkQF6+NkJDS c1pBKA9Ie230GDBthseUB6ReFQOSW02Fe9oyIPGlGXfUgPKHFAMa4gl3J5ULC4gdPE6QOyGaFhiK Xl0hNdHrW10voHBYe3uwMX4vKrhpRepIwe8vCH5zZb2gs8FRm+eFEWyaDrOFYl9njVFsn4YDlEUP GpSaCWueug2Y12XCCubZKBmqd+XqCV7NJ9KKSHVLdxHHjEJFSZRchLqjvkGw0E8LZQXYSOdrsDS2 fR2dy1sfSSQD/Z9Jt/CoLaUdRKrJtqlPX2FX33ZbpN+duMKtluQ7+DbTGs5l+3dgkA6nh3WK2GhJ 6ZjHE6JcBEdiswlVlH9Jj0/kp2nydqmS8tzVyeTtDA+/biYGhUe5mfDEXtLcYmXEfPmYdyQskWMV m/Zp+tFY2B6lNRKuvPG2cds+SnFJFnWgxtv2v7u9Y2F0DsC2gjSuFvB1ZH123xDKMH1VC/gVKC0a WzMiIhoy66lYwZXNRr08VAv5I/EJJsYjKNe/OKwSKRVk3TPT6Jioa10mT6QoKGcYrXpM1Kt7nPSM U6dS9C5EkOQxB3uJ8UfrTKNaxTTfNFm2AgXjFnpAnEGRi5nxCGkcanJzXWlrbxysSd0Z1c6xgk1T rZopmsafUX0cK1BM7aPwaLCeiGQc7ZOnLfIq4S8KAuHFYBtttrmbfb/5lCKVn5nTyy7iqK1cahgD nddkD+SGVrTRXrRNha6LdHSERW0F7ArCMo86TdlokFZWVKP9E4YUapwJ2yiUx2UjYd3PD7+zH7Z7 +M0fb376/v6Hj6+wWPjr9ojU+dP8yLYiu/mJ+jZgFXz+zOarw5YtU5RWpA+n4zQrSyqJp8Z0DeYZ npCPRJLG9SvwssfBqhub+SE3NCUxvdjSSF5P6EnARiw1tdmDbIqqJ1RIBnI0M9nZgjpbQQ8oTlmc 9ntapFW2mkg4u3RLc89B/yy4US9OwXzNX0G5Bqvso1YcS78aN6/AKo+DJf0CpDpggkv62LVkI6aN Wem8AYoJegMolRrymoD227en43H37Zs3yzkyxlmDZStNjo/Wdv/pzZIq3A9vFqdztKFvAHnppBrA QNdF6O0bQxIPsjOujSo4bEplCpmRloyOALtSyujZhRq4EG6UzmXNYzZMk9YjwIq/IkLRXPCovT5X 7co8nGyB0y2yky2oJK8cAvatxJhXfxWpMZ+jT5qvNgxpw60FCIP0rHyuRxflCygealipH+uVeY3j YJXnuYFHd/RmTvJu/Z6OTeNeTVhNXYVGYW1zrvMmmgrKQONSCu+EMSwFd59RnrIU9aKo5pr/ma5P a3IkDumfKO7aHJ8OUxQR5LvRK+NpIe1XWXDzXPRA9HMdvZr09ThYlPCkKOkhYacdZsVk+RoSt1vN F3SF6uDtw2G7Smjp4uFZBldFxI/Jfr55noTzqkxTkdvI/zY1iYPmxcIkoiDJjSomsd/lMF/gHASr CKTHwTqm6wRRwU9HFAdhWQqFQ/stumFBBKhsCKWbRXAwQRcMB/yNsZeMeRK9EX9NjeYgQqL5JnZr uDyHok15/fxVRvMAxXlMEFYtVM4L68adTsIgmHmlkKKYkXtmqhG1acbMSUDig1qZXJmPMAoVGv8h LYjGf7QlYssWqcgoJZjlREZpkl05xUpHA+R+yXuao7b6wP4qWpZiZRka/Alt7Q7WX6eJD2TjGk8D q83FX9tJRR44oib6mQBqUGoe12hV6FqrKiYHVP+GkTfQ4Zp8bshQaQraL1diB9FAl3mQLct7hnsa Po1/NVEyNf6DTJlY7KNFdQ1Iy3JIS4HHlxQFHYloKUm7HfSekqbx8SD6FUkEDXY3/UbLv9lUQIVN tGr68qroxtRR21EdQNqZqR8PebvdPe/TT09HWk1ItUn8cmlllb6qYNQ4V1iurxLQuPAk4yiv29Og 1JRwWiFyQzTFw1FDmr16+aToSFiFQH28WWBXHhL5DqMlK3a/PyEPT7EXLZjucOoH9sowbNXcHLEt iqryD6IgbALHO2+xpQZl5Hibsn2QFcvnTjd0cKxALoHXElKPhKXCY4YWfU/b/QFB1ltMEMK0UIxw SPafk6U1RdSM3mkWUiUBU9CvgbkBjnyIcp1+UfPikwd7ddZlFCrho+WiltWY/itZHCl2Ocf771u/ 4CiKckM3YthEWxDzCqoQMW1gJwv3dWAvUYTooMiGewGvIGnxQ2pTrJoWipniPw/s5+TTRI2HVYGw xs9RZDNYaSFXsixhQppo0x+aPqJ7B+riG2rtLpdDKWYc5Hwif/C5FVOHa5TvHgEL+/8/p1kN8t+T Fbo8oCwLZkAI0Du5H1vsZrj0En/exkcBv4b5Bn3O0E5McyH7Q97JOauh6p4EP94YGvDGSLesXk1l 5Dijh9uUxcam1xqh+n1tuYB+JA82SYrFc+w6TTaHszKffcjzbJmGvKdhx4CsQX3BtheROuVWQwQT R0c89wtdij0ghqwe5FgXatnA4n5YCFWQTEweH8mdQEKDYhRaGsJ6n4b2UltUVNNfScQzbEh9Bmqk W5mtQh1QJud6OBg4pGNIaSENbxgv9Tf+RNsKbTEDIRPg83wG6rYIph5do0Hoh4IN947X14mpc+tx vai8BsUoiwoHDi3q4onr2+koO+7jQGOs59WuWg5eLBiH7dA48WpwdgmtIV+zBFH/CgGh+k/q0+Di 6Abc+ViogqXJ8HM47KgtQV8FOQJtiqxZ/lqy03yKrPFewaXN5qYE5/KQ+ja0PXZfHvFTycYquud/ P9zNPyWM/zZFNJ5XL6ghnGHZ6gpWNTscyULer+s2rBt40JSmrUUi05gdOvfZR7t5twNKkQI91+zU Ba4khC2aUug6SuIQ7OrOZE1TanQbuHRSVhdRbVTHXLJULZjz7bxUxkeYjYTN1DuqCluTHhfvtUKU x+FVILYExoUMyDS4WGjPNVddyN44Y0KbLjq3WVFH7ZNTg2jSpAr02Y0pncuiIPoX1iH2i2/hJ48T 3+wIOUXf0l/Vb58S2ZonOHCna5uVKgymDvwlnSMH+S7ES91cPtdIGflGDtZpbNdQsU1Nd02xzaCE WOwe0+d8CqnJC6GcUah2pwfqmCTaYaoGIiqvCk/tbpXMUQu1Tz6nyRcKhfBCfTxNzaPa2yaHY2TH p2Y31nbtSp1PfxwJyzExv0fBWmD3IvVgeH4tl9meZUtU1EA+b097tVJDeVis1mDfmOjDdhB9Gibx E1UK1gmzAb0cy/MiMwVFixH6WQ56obXjJLVS+eRQgfaikwMaNTluxRD2+4fmilHxB0QlRmtr08IQ joOFlLFon6TMG6zf7XaZ4J/1Dj05N8cDqlxEh2qsUD/ucficdjtbIyU4iX6oWmDqi0Xkfjn9yCMD h3aG4NDhgfphzvlBE3PB+XGw0s1idQKn36drtA8UFQjfvX/Hfs5yuuwItpOtzDpHP2RtbM7hdDkB 15SqcHDIBEdFAE7mzcgsOW4aKbyHDaL21t4U80/ePVCBGygDVi2Rein3GY34QjtGvwpdCsZYyHom tWKKsr5JZUYKpmHnFn7et2zq3InN8HSKwsSZVMdDv464YoT7p6rJVXEcLEq2Z+VBYsmXTlVSa3vk kFDnBZT5Ulv3pXBItqcj+zLf42xi9PucT+ORqgS9ovQ12F9sLg6oSWy59PwamD4KlmZYSQLqhlha ssGZ4q54Li9UcCQ1B5pZWvCbpr4VLXicABZEAZNsHmPJ6pnTRkvWlpMoZnzUVrlBfqiHBqXI93yd TIAToTHRVRx14mDBxnZyqpiufN7PH3AUAcJtOjyOPMspJmpV213BqHGulrttDlnbp8MPIu3+G6bD JXtze+Csuc0uJXCzhrsGbXZJDXHgrWiz67rU+xWvqWYeXWop7WjY3BZKM6OvlXr1+jEWOLPOvVlj WwGZ2rN2N+f2I5wRiwzADC1F0AsL/F7jRKLsPTTslu+t8J6PwxdjNExU7/kReqZy1GP4ODgVDVTx kXwHz0JfLXIYFvl76KyK4VGqgZ6lvokid5yIQt9UT7cDnByDglGFYeardxYMK5nIk4kWm/KuFd7D RhFO502p+2hHqS1wqaerd2Y5BnqWukthpWfl78kRFU9Xo1YYCnot2BP6lzvsC/sAYWFLfYmuuR+w E4chOI5ZDvzH9Uxcr3CNLmCClfQZ2Emr1lBEcEi9gpCjpXr2CT6m79BdHrrF0hfVE7CEz2O8ot+h K3wHdje7xnfIkaSHZndBIktPEK9cPIu+g+VQDkml38neV2jyJwik4tli1gY1qFE0xK7akLrQFErB F8RGy103EoJXvDeIKTPFlEI4SfBGCfGsEE6FQRNiibUsLAr/Srax99BMOKASNB/rYDgbh3gYoLcb iuGQD3JxkpVTjQG1JT47BjHEmcWWuCyeh69HYe4ahb64K/sjzZ2rTvP8wG7+/opB+hx2g9qd7CJV Fxt1MVcXOIA6u2f5apZdoIAlu4DhFI+5y5+Tfz2/wM2/sfu/ZTvwKfDrHYT0SIpB+LCHoQ8DYctJ 17OILHRI1F+KSeRCzy7TSY2PqwHnF29eYU0GBPTVJ2jPId7I78BqiU6k/JP84lv5HUcRNn+a+uG7 X8rUo6JIsjsx9WggEYpoFqYpL0QZC4tgdJ2I86oIdR5yLUXIx/Mggdoed1AYRyOFQpTkn/s17Z9B qJeRH6J0C/6CDmuM1s3/QBzwHkSAsxskBj12g/MGAnbz4RXz2Q3Gj/d/E9cgQUifVmSEw9ORgi4u PTSezw7plChLXqsvkm8NMKFZOcy/YHvkN8D0bxnOfy/9IDb6yGg10yzxgz6HjXBR8lwhSxM58t+5 +Y9SguT/AX4oCiAKZW5kc3RyZWFtCmVuZG9iago1IDAgb2JqCjYzMTcKZW5kb2JqCjIgMCBvYmoK PDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDYgMCBSIC9Db250ZW50cyA0 IDAgUiAvTWVkaWFCb3ggWzAgMCA2MTIgNzkyXQo+PgplbmRvYmoKNiAwIG9iago8PCAvUHJvY1Nl dCBbIC9QREYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9U VDMuMCAxMCAwIFIKL1RUNi4xIDE1IDAgUiAvVFQyLjAgOSAwIFIgL1RUNC4xIDEyIDAgUiAvVFQx LjAgOCAwIFIgL1RUNS4wIDEzIDAgUiA+PiA+PgplbmRvYmoKMTYgMCBvYmoKPDwgL0xlbmd0aCAx NyAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4K c3RyZWFtCngBnZZ3VFPZFofPvTe90BIiICX0GnoJINI7SBUEUYlJgFAChoQmdkQFRhQRKVZkVMAB R4ciY0UUC4OCYtcJ8hBQxsFRREXl3YxrCe+tNfPemv3HWd/Z57fX2Wfvfde6AFD8ggTCdFgBgDSh WBTu68FcEhPLxPcCGBABDlgBwOFmZgRH+EQC1Py9PZmZqEjGs/buLoBku9ssv1Amc9b/f5EiN0Mk BgAKRdU2PH4mF+UClFOzxRky/wTK9JUpMoYxMhahCaKsIuPEr2z2p+Yru8mYlybkoRpZzhm8NJ6M u1DemiXho4wEoVyYJeBno3wHZb1USZoA5fco09P4nEwAMBSZX8znJqFsiTJFFBnuifICAAiUxDm8 cg6L+TlongB4pmfkigSJSWKmEdeYaeXoyGb68bNT+WIxK5TDTeGIeEzP9LQMjjAXgK9vlkUBJVlt mWiR7a0c7e1Z1uZo+b/Z3x5+U/09yHr7VfEm7M+eQYyeWd9s7KwvvRYA9iRamx2zvpVVALRtBkDl 4axP7yAA8gUAtN6c8x6GbF6SxOIMJwuL7OxscwGfay4r6Df7n4Jvyr+GOfeZy+77VjumFz+BI0kV M2VF5aanpktEzMwMDpfPZP33EP/jwDlpzcnDLJyfwBfxhehVUeiUCYSJaLuFPIFYkC5kCoR/1eF/ GDYnBxl+nWsUaHVfAH2FOVC4SQfIbz0AQyMDJG4/egJ961sQMQrIvrxorZGvc48yev7n+h8LXIpu 4UxBIlPm9gyPZHIloiwZo9+EbMECEpAHdKAKNIEuMAIsYA0cgDNwA94gAISASBADlgMuSAJpQASy QT7YAApBMdgBdoNqcADUgXrQBE6CNnAGXARXwA1wCwyAR0AKhsFLMAHegWkIgvAQFaJBqpAWpA+Z QtYQG1oIeUNBUDgUA8VDiZAQkkD50CaoGCqDqqFDUD30I3Qaughdg/qgB9AgNAb9AX2EEZgC02EN 2AC2gNmwOxwIR8LL4ER4FZwHF8Db4Uq4Fj4Ot8IX4RvwACyFX8KTCEDICAPRRlgIG/FEQpBYJAER IWuRIqQCqUWakA6kG7mNSJFx5AMGh6FhmBgWxhnjh1mM4WJWYdZiSjDVmGOYVkwX5jZmEDOB+YKl YtWxplgnrD92CTYRm40txFZgj2BbsJexA9hh7DscDsfAGeIccH64GFwybjWuBLcP14y7gOvDDeEm 8Xi8Kt4U74IPwXPwYnwhvgp/HH8e348fxr8nkAlaBGuCDyGWICRsJFQQGgjnCP2EEcI0UYGoT3Qi hhB5xFxiKbGO2EG8SRwmTpMUSYYkF1IkKZm0gVRJaiJdJj0mvSGTyTpkR3IYWUBeT64knyBfJQ+S P1CUKCYUT0ocRULZTjlKuUB5QHlDpVINqG7UWKqYup1aT71EfUp9L0eTM5fzl+PJrZOrkWuV65d7 JU+U15d3l18unydfIX9K/qb8uAJRwUDBU4GjsFahRuG0wj2FSUWaopViiGKaYolig+I1xVElvJKB krcST6lA6bDSJaUhGkLTpXnSuLRNtDraZdowHUc3pPvTk+nF9B/ovfQJZSVlW+Uo5RzlGuWzylIG wjBg+DNSGaWMk4y7jI/zNOa5z+PP2zavaV7/vCmV+SpuKnyVIpVmlQGVj6pMVW/VFNWdqm2qT9Qw aiZqYWrZavvVLquNz6fPd57PnV80/+T8h+qwuol6uPpq9cPqPeqTGpoavhoZGlUalzTGNRmabprJ muWa5zTHtGhaC7UEWuVa57VeMJWZ7sxUZiWzizmhra7tpy3RPqTdqz2tY6izWGejTrPOE12SLls3 Qbdct1N3Qk9LL1gvX69R76E+UZ+tn6S/R79bf8rA0CDaYItBm8GooYqhv2GeYaPhYyOqkavRKqNa ozvGOGO2cYrxPuNbJrCJnUmSSY3JTVPY1N5UYLrPtM8Ma+ZoJjSrNbvHorDcWVmsRtagOcM8yHyj eZv5Kws9i1iLnRbdFl8s7SxTLessH1kpWQVYbbTqsPrD2sSaa11jfceGauNjs86m3ea1rakt33a/ 7X07ml2w3Ra7TrvP9g72Ivsm+zEHPYd4h70O99h0dii7hH3VEevo4bjO8YzjByd7J7HTSaffnVnO Kc4NzqMLDBfwF9QtGHLRceG4HHKRLmQujF94cKHUVduV41rr+sxN143ndsRtxN3YPdn9uPsrD0sP kUeLx5Snk+cazwteiJevV5FXr7eS92Lvau+nPjo+iT6NPhO+dr6rfS/4Yf0C/Xb63fPX8Of61/tP BDgErAnoCqQERgRWBz4LMgkSBXUEw8EBwbuCHy/SXyRc1BYCQvxDdoU8CTUMXRX6cxguLDSsJux5 uFV4fnh3BC1iRURDxLtIj8jSyEeLjRZLFndGyUfFRdVHTUV7RZdFS5dYLFmz5EaMWowgpj0WHxsV eyR2cqn30t1Lh+Ps4grj7i4zXJaz7NpyteWpy8+ukF/BWXEqHhsfHd8Q/4kTwqnlTK70X7l35QTX k7uH+5LnxivnjfFd+GX8kQSXhLKE0USXxF2JY0muSRVJ4wJPQbXgdbJf8oHkqZSQlKMpM6nRqc1p hLT4tNNCJWGKsCtdMz0nvS/DNKMwQ7rKadXuVROiQNGRTChzWWa7mI7+TPVIjCSbJYNZC7Nqst5n R2WfylHMEeb05JrkbssdyfPJ+341ZjV3dWe+dv6G/ME17msOrYXWrlzbuU53XcG64fW+649tIG1I 2fDLRsuNZRvfbore1FGgUbC+YGiz7+bGQrlCUeG9Lc5bDmzFbBVs7d1ms61q25ciXtH1YsviiuJP JdyS699ZfVf53cz2hO29pfal+3fgdgh33N3puvNYmWJZXtnQruBdreXM8qLyt7tX7L5WYVtxYA9p j2SPtDKosr1Kr2pH1afqpOqBGo+a5r3qe7ftndrH29e/321/0wGNA8UHPh4UHLx/yPdQa61BbcVh 3OGsw8/rouq6v2d/X39E7Ujxkc9HhUelx8KPddU71Nc3qDeUNsKNksax43HHb/3g9UN7E6vpUDOj ufgEOCE58eLH+B/vngw82XmKfarpJ/2f9rbQWopaodbc1om2pDZpe0x73+mA050dzh0tP5v/fPSM 9pmas8pnS8+RzhWcmzmfd37yQsaF8YuJF4c6V3Q+urTk0p2usK7ey4GXr17xuXKp2737/FWXq2eu OV07fZ19ve2G/Y3WHruell/sfmnpte9tvelws/2W462OvgV95/pd+y/e9rp95Y7/nRsDiwb67i6+ e/9e3D3pfd790QepD14/zHo4/Wj9Y+zjoicKTyqeqj+t/dX412apvfTsoNdgz7OIZ4+GuEMv/5X5 r0/DBc+pzytGtEbqR61Hz4z5jN16sfTF8MuMl9Pjhb8p/rb3ldGrn353+71nYsnE8GvR65k/St6o vjn61vZt52To5NN3ae+mp4req74/9oH9oftj9MeR6exP+E+Vn40/d3wJ/PJ4Jm1m5t/3hPP7CmVu ZHN0cmVhbQplbmRvYmoKMTcgMCBvYmoKMjYxMgplbmRvYmoKNyAwIG9iagpbIC9JQ0NCYXNlZCAx NiAwIFIgXQplbmRvYmoKMTkgMCBvYmoKPDwgL0xlbmd0aCAyMCAwIFIgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngB1V1bk9u2kn7Xr8DZs7sZ7/GhCd65l1PlONlT3q0k3ni28hDnQdZw PEo00kTS2PH++v0aNwIiRYGcIUdOqjwkREHNRnfj60aj8Tv7H/Y740kQiX/CMOQsLeIgY3lG/24r 9hNbsxevdpwtdiwMyqQMeZm1Xc12C5ZEWRDFGeNpHpQRnuNZEhQ8SVgW48uiw2v7N7OgSFhS5EGa 1Y/MnN9kIf5H37/jR3nJI3GvLnPqPUxALn44zvKILW7Z15csjsVT8s/s8pa9uLzkQcg4u7xmF+wZ u/yVfXsJQqzXbyXFff2ZFym8DHjIM0VKGIRhFrHLxSmi2ECyBFHE3CKL8vQYpwoMTJHEEctd8ro5 xcfgVInBCwsIwwEpvpwKGHu93m83V/eL/XKzZkHv/9mz2TABIKk6xek4gSimRf16sxaZZIcyGXty enaokkLQj6hHnILVBYb4gNPdg94uh0F00jqQJNrcETIXJfj1LChLKHocFLhVuosXuWaCWWQfWp+h lz1tLlwd7eJHbS44D4o4UyNzRPAaY8S8VbR1lGzWtBkzS0UFddKAzJzBatAUecoNTLm/WbU01KIE A6dM2QmaoKBfV+vqernfsc21Udbl+gN78+oNW67Zd5v3y1XFvq/2nzbb31hDgadSUFsKuvk8tn7a fHYo8Zy9HqKeYRnkcVR0qmfbM+OpZ5gEecYH6Oe4GlrGQRnDtrNcEahU1CiGO8c3lTXwnVBbDcix uZ2HaZCEOYyoQ5bS19kh9GiQBX39sdrtN1vSUEyt1XZd7dE0X9zMoafL/eemhtaT7kS66oqEoyKN FxpZWV0uO6SMp61C9kIa4yjIUkymmMISAN722VQ/ZM+4o6lrVuZBUp6vtir6eiur79w6TFkdqnro queE348oHgdhmuXMJWqIaD/QjeLAikXB4wNKjljYhrr9d1XdzVfLjxX7rtrt5h8q9sPdfnm7/L/5 SVdhGjvm6orD4IYZS8YYauMTPHyoB2AObcWyMg3iEpijy4qZhyayYiFiF2HS3ymYCHRkgOVEYG87 Nsp0aECHS1YPQ8a+XVfbD5/Z2/lHAh4NJ6CGGM2rqZTVEYmn1VZ78F2c2bCCj+bBG3UtioBHQBud 6qofmkZdiwgOdVKcr7oqAnur6yhmv1ZXh6w+6vr1fDVfLyryFTb3W1y83O2WH9a31Xp/SnknUldX JJ5UXV0uO6RMoa5hUMB/PqGu6qFp1DVPg6IcMrs+BAR5h9wyRZ5SVme8GrjMdz4dFnNzSVEKivWD 00G3Hz5W24/L6pOIulGk7ZvqbrX5LBTUDro9JPp9LAYRpQnWcHJ4EMMG+mggEEs1swFLNRQGPjX6 JlJ/QHP36KcPEchj7KtRuSOIU83zOlKf5XGQF5jnbZtAq4BWpL71mfFiC1kRZNGQaf4hw3RKckyo PlPkedkN34l9oN1wSOljN8hUvIXpqLbsm+VuscHF5x5ofKLJ3RWEJ9VRl9MOKeNN7kZHsyxII0zu XTra9syIOsqx4llG/aH4RDoqyfPSUV/rPlRHbVL66Oh337P5+ord3q/2y4dw7dgExBPEcPMCcbfM IbFbuP/qSQpNIU5SR1cmBU9BQRiVh6T4xgBvNrc94wnaX571TQjphzIUZ5WaOJxtYMzck7O9wrw1 yugzyJo7brrMgOCfsWBpGURI+OkyYC2PjGe/gF3D8mzTATJFnpf9yjzlZqD9ckjpY79+rPbb+Xp3 u0TMADk7rzbr3fKq2p4Oy8vY30QYwxWEJ9VQl9MOKRNgDJjgEt56t4q2PDOejmJ+Qubh2WIMRZ6X jvra9oE66pDSR0f/d73beJqPXtNOvabXRtrp/ITVcrHcV1d6SW+HuAYt8cFJOemlTGQ3XOF0lLUx sxdjsLie2V0WO6RMYDeSJChPuCYtj4xnNWKkNqXnO7Mr8ryshq/cDLQaDil9rMbb128uf2Avt4sb KOlifw+o31yvO94ykYa6guCoRUNDy3E11OW0Q8oEGhrnSB86MbO3PTOijkZBUgxYx3vIKPkH+GJB nZeG+srNUA21KOmjoC/v9zdYo1suJNg+U+gt+ezlG/vyuRdIqWdQe8QnD8Bjm0xcJJ25uLSVpvHM eOoZpUEURQPSYqbRT0WeUtAjMaKGiefhQ6g7FkQz+cGZQ5VS1tNANyC/eLG6Fy7y8SmTPhlnDa+g pCzEAIeNeTvFitEjxdaiII2xu2wYweNIQW1JXCmYeqaP4oDDY2aY8GFQ3DxhTCXk3mdtz4xnSjiy iM53KU9S19eQjJLRXxsSm6geduRttbjfUuK+M9vvTjvMUocfYl1OQas4UTo7SBr4KPyuVdbh99Qa i9znMIGudmls2zMjaixyhLBn71xX9rgkr6/OjpLYb+msTVUPpX398vuXAxX2oZDAX2kHCcToWutw fGq1DYsgz09MtG3PjKe2ITbv8+xsfWpFXl+19c27I746q820THsasztU9VDbl4vf1ptPq+rqQ0Wp drte4a+HIXlvtR0mEGOrrcvxydWWBylHsYqu2TZseWY0tU1LqhzAz3WNS5PXV219096Gqa1LVQ+1 /bG6rrZjRAF4FAZ5mJZsIGkVkuz7GpHpYLt+qZ6QcGRToqmSsjl11C4tUUGnG7e3PTKeISmQYJMP mf8n2sqWKgJ7m5KxNtCDX3FEtY8k45QYyWiiT9zu+832FuF17DsVZqWPCk/ha+v3OjOldbk90fyv 97SlqDrFc1GsKqBSVa0BMvOQDRJG1NsISS5DAMBkeisJ7K+3o7jcHFVJlN7adPUAAa/X10M1dxq9 HSQQfBRumyBZis1tJKbTTrZGb/MyKEPsHMe61FG1Vc9Mo7UoK5Un6YD6F2OgT7M1JVVk9ZzLaLV4 s919xV5eXW1RQ6Ebij5ECY555FEWBdjfAPzsMtaZHxoreu1Zys1qFL28jAj7KMIECU2alJ7MbFsR e8ig+/r7Lrkz71XRUSIstd1wJdIZz/EyX2i9QSx2pTkq5yRUj66xINZZBrKXxOAVZUVKbIZEWssD TGRTdJE34sa1unZRWISEqA6FdPvOMoSzB5bG7Aqx1aSkWJLUiwnO8E+jzjUhCXYj5yg72MITT0l8 tOGJscExLFolpebKNMMTY+MNaoR6JeGMYm/rAYrgUWftXJl6gDgyz0NUTm2RlakHSFThyzXSeFIN QoUxKj/WwpSJxycRpYTyc7BvSGMM+FnoT1JgRSzLzsHAJdhTnoUA7C2iMrH+JGJbbHYOM1BCG9xg 99u4MrUCic0+aasuTz1A2ByQw6s7gxkoEUnQ7VyZeoBEwid83VE1iFL/eAq3C9ml8gp+g247UmDa zNcJJZIBWksKj/gbDba9Ql7yc4Zao/MVapBa/337x90Szid7ebddrliUPmdRiJqAh//9/IYq/EW/ jOGFGq9FvdqoIslRmZ4f84drJiPkUVDpzxY5aPDWF5/1cyqAVcGYkiUdpDyezTDiZwSxj0hSyoVh lq9I6vK3nl66zb2ZOCFBa4whudanYwNsanMlhuTZ4SEGNVPVIQa+W+8b3muTqT4UqkCrorDnOsI3 2/k1aoQd/IeyI8TlIdV9ut6BzqFoK68eoWxvkQAn1lxuHBVxwOXZhS+XbTmQJ2U05OC06EYYfpxh ER9Q6Cu6qqj6AZdx+8Niv3mP4i6woeMGhjs4O5F90tGXRCRuGO0/4ilN4lXHtDicRjoZ6wgpPY8m aWi1V/wlRnC4pPJO9jR9bHkTMX5FFD84ccPTNvaiEYk48LIRkTmg0WHXxEIUYxUhp0o7LfNtbSmm ESIRu8x1aOaISaiJ0uL0sHXBYxOWWWOIFVleAlUfwHN5U7E3m+2ekl1xkMuKvdlu9pvFZvXza0e2 ZupkIo9YW5f8c6wzp0nJmSbXC8v5mv5+Yo5VrDiPsb9rGOe+CZbV/tphkj6+qcmkXpRBzgOkQKSH lHUroC+TGvNjV+g6QgIVT7J6vBzxOn2U0t3izpNDB2QJoo5mikYIj+Ikp4ORc/hTK6CyCoP50yXP UYzzHhKceqVJ6QnH3s892dNPgBLUkC/j0lDljNqxWaY2CrvqF/iBqw3KV87X7PWbjxnbbOnvKPmD eheKZmGbjZ96uslQE70w080RG98kytvG95L22sYPI+tms9uz/YYtlIm/2XzCyT8LWZvLHl12N1/8 ViFteo7lLVEkaDWnah8odzaKX6+P54rVe3lNBr7edC+NMY49jpTBVj2NM+TAn1YYIPsx9Lge+EFU IZ/m03x7hQF8/5nNGU6SEUc8zWU2gRlgqPa7i+9fXr57Rlq+W97erapRhhteX1TkmHDl25zFaCM2 TyUYfFB4bR/HH+5BZF0jUPcJdvvdxX/+9O7Zc1GlcL7abYwtZ9oSbORJHBUT54Ld7z9sqEwfZGCU cY/hCoqN9DgDj7h9DgOPGTI3C1Vno+aDqPrNHLRyKw9a2cFJfMlGSSDheRGEKOOD0wKHMHB7xf6O 4+hUrbk38+0eN7ub5R25Hb+iZA0sUfz3N2/ePRtHEKHCWQjcKIk/BzmEr53i2NRzM0DDyNIzzAKo 8b08dpBdbze3DFVP2P2uoiMI6ZKqHO+oQPqigqheIiR5vVzQYYTzcYYd0eewRDxDvdU5jHuEKC7t Lz6ziWcYWbfyDEk9/MsdRl/ByzlQJwGKP9jt8g8a/4/z7XJzv2N3Ks6wez7KmGMRLEFOMovVG53F mKNKI21OPbcxH0TW1fIam7bowJH53R3KAoqKRuQvXpGmbyEBNzhMCOmr0HAVDlfyIdyLcQY9Rw46 VbON5Cs9YNCbNXUb/gTityGWFujcvwIxLcwr5gLrHhGcGzplg8U8Cgo6hJpjj6XcmhRlSFGGizXK gboxInX4XR3kPuK71uGRqeKTiqye0o/aGSRkq89j+Fdme6DmmSLOCSQ1vXxPUg58fBZ2BdqwYo/y OSFkt41PpwNt1/MFQfhdhWKc8xVDbd97LNrv7hc3bA6FG8U9JREveYE4ZRvNp73m6231+z1ZkAaC fe6w+JFizyaNQJM7nnl49Ra2oAxTKthBS7pRmXBOhX/01dtX7sLoX9WWJzASVYLyPBDqyyPUQElh ShDuTNktc+9X7C3qgDvrq81uINEzfC1X3chOxF1c5sy3C/plfGkWxdgXrShRnaS4l928eLXjcsG1 0zCqUAuLcVQu6oEiZl4iU4/2fo9rFkPkmsNcq0E/G7OoyOppFnEwMCrrQ9Hfz/e4/kyxvd39Ldx6 VPSmObjaL0iHhqzod8a7gavKPMwxeoPYKZYvEWZCvXGKSN4u98sPCDGSV7AbJ+hkgg8uwY6Jb06G jv3RyzonMMFjKX0odAzGFUtlpK/Ova/GzvA1qfRIIxOdyLtYa+tpu0G/LJQ+AQ8VJaqTuK/S00Yi XiAJNioL7IcmWJQAoE+g9bC52Fl6dlovyeqp9XJWfy7858XmfoXArvCrr0iXELfd4rwgZkzDGBDb bAiLw0GMVV7B/SjVHpCtChNPeEQR93RwjihIMuxUOCDlyLTTwJgI2N/O1/MPwHStpqi5wqzQ5szM wl1m3Cy5PZxRTaPo4F7bKFLa1QAkRKPIyW4ACaWw4jBFgDT2va9RpG6EBUM3Agkp+5bHfZCQsqvI GpBISN8Do838KUH6m/VCmGLse3SDIp0+JjoBVpR8oRdSd8jz93shMov1l9QLmU4IdMoX6tyUJ8Z7 tmZekmcW2iKkX3CTdO+rF/4rL44ULnbd+QRmoW0YVc6Cqr2G6qzA3d/t9ttqfsuuqo9KqQdVYj2W ChSRKPCU5ljB2p5zHoKxtcOIpaAsqb0wIYzCN0EyCFI3WYKKDQi0UP1jJMMfbobsND1YBOIF4JdL 5RA81qSkEaPpoqQWRQx/iOBwz9nYXxZ7kVXL4jCyMHTI3dOr9wjACX9Arw2S8NFIB6OgA50NEynS lQg+6eBixQr1d54OCtRilsOghr13ZviL2YEe+pq8YWS93rPdjcag6w1q2iPPYH8z3zN3NcATvjRU pDN8ciyvHOc5RBki7JF6Jy/52w0lscu4IGYjU7A0KU8ngCZMd0CK75yLOH7lGz/sJYKmpMNAwu6w frxc3K/mvt6ETZ3YItI1grFOVzmg7ogx68w9PgGSxW6VRrjQgsu0nkCyTSUTIODYcwEhb57ZR7U1 Rc4kCh6ktLpong2DlOorjRxjizKEL+Mhxc7GUMF6IlVkeangK09SbFkSUc+u6H4JzBMWQEqaQw7U OB3dv5lv5ws49ssdBN7XXgkKbVw+xKRy2LEsjXNDuZdJ9TUXj2L1zXmpmrk9gS+FSxF/3FZA65Xn 6DcI15rn+Gw6qA8PkZdAzZpAZ/RPr5MMTy4cMuJmc5am1mvE92MwzuzC0qT0ZBwNqshl1ctiWCXb EyIWOMXAlzGgcJxiDSeO4Jq7NvHI7KEXYVu52Jw9GuJ3aqCFGsvZA4FY8nVQ/4VWX6SIUn/X2JSG RD3QC5rVQ15TTISoDuYaM8WEqOYiOzwdNmC9wwbgK8cp9D113B9EN1jbpdn1FKPI6imgy/XHCiad lkAolksGiOK4K1G9mtZzKVOK8qIIVI8hphFScbEoBm98GF+Xq0qklVd/7LG089MSBcvutSl41OBG jNo8IonrgNAh+vRocQOsXGJS176lxNM+5nzw9Ogni8PIosS8GlGLBUVzLPCOyUWH2/lnBl+Pkrc+ 4kMEE3bL7fz9SPniHAtgRQbZVC/kNRGNwtvah0cFswwZPT31fHTzM4ws6Cqy8xAMYuwt/mI4r+c4 1V7nbt1jpqQRR07Jmi3mlMC5rmCrqLYurBTm0h2WcscwSyZVAx6P4Pc5DD2CW9iocnZRwmFk7T7v 9tUtu54vVzgmdGcmGTLo1frjcrtZ0wkKkAx9bBFNR+Kk39pIjDv06sXOYegjLFqX56f1w8iyhrcV bj5weuSgKk5RrSdyyXNm6saCp6/Z7uV2owAY6kqXiIO4pPhGvpCuTMFMTy7ZpJ2MLnEArzJF8uhA 0qCmJp32ObbxfLXDfUV7vZAKICJ2c3a1WdyTEjv0P1YyXaRybTX9D1BTD/9GAx8T2IoyrCJZTgfl jtEAnEip7YXu61kf+cRhdH6mfxhZAG2L7fK9SBe9qxZL2nuB9LFFtV3v5HYNN4KPLYFXYp8GBfc/ Uch/FLtvAL56q1EE6mc42pz9AnG6kuvVdn6ClZ9ZZyr4ZWriVFaRn8BTuYgeURENytwUSVy+WQEz +hq+lMOXlklbMF3yTnZhlti7c8/TArsfsNI0i9FTjIIn6Ey3YU+4aluhLcXhVCXtE1dtVGQ/4dgY hyhukKYpncMgW2YxKvbFMe2ZM21ItKcyOZgYqS/9TahmQhHDunfkNpN6ahJmiBeIhgVDkBpLryBQ N63QhNJanLaYqaewvx41zokm3bPVIn9/Rj3ppzSd1JVpU29Td67fuKZAtaCvGwqGsE/sZykoTkyv NcUWi9k5QqQ85uC0uUY2CNJU8Ms0A9FnUSmuEqoCDMsv76iunbqOkxKclO1xBiGgx1UPyL3NQ9zR 79AVvoPovrzGd8gtFp2Kpygeg0C86kHeoW/6DjYGoLQEjRhdgy5NjelBUCr6piviBuUZd+YzU6En i9k4dKcUQme1KeHxGpRZY1BAhpaeWli9BHhWC6YWDFuAwSNBq0OXaZOzSZIg11Uc1C5OkUUYn7Sb x1hmh4Bh60daHs4rThW5sITwi7UZLAnisu4vw46QujBanoqn5B+FkLCKKGODP7OLH58xSF/ELhCl lheAJvJirS9QT0K2rPQFrLVs2egWYC3RzRvTj/m6ucDDv7DL/2LfXqoc85Mvoex1/RJpjC2iKSXA q/zaJCC2XF6ziz/VkISU6xH6tvmk3w/nk8o3NxcvnmFRDQxM9ScvFCvME6jKJb9zvJN/Vd+JNGPz w++8+c7mHkVBye6UdEYCQsLYDYTEQI71vBwlxrArEQk1UcIPRcgs5jnmRy0pKBFCqiMmnBzx0Dog AQ4vYPiFKKk/l7fsxeVlaonSK4wv+HALymPzB+KANogAZxcAjQm7wNnWGbv4+RlL2QU4g/ZfxDVY kNOnBzLCyUeSgi4uk7JEvVmOZF9FpZIRwt/Qg8sFdLlJJ1TLiPw/fyVoeneBHcHsr/j9f8EfEPkX 8B5/dCsylegWYoVH/kl8BeVe7Cf0k3+WzQH+4FEMP/4Nn83wZRIB3OgH0YurAI2Xk1YBQwAjAMut AgMQMBzIEfu8XES/Bc5ipza4LP8FYeB7Itrx8Qwfg5JCvBseguDiY/kQ3hYt8tN3F+LG6fAv4lm8 IobqT2Ig5U/Ib+DUdfQKxqE/+xdUF6rDyH5M/ix0CB3Kr2QNciRRbif/IN4G3/BlKDz/0l1GxhFu p6TlIv9H16o0BiwF6uA57QNu9A90cap/GODnYCAJHxkJsO3PeFloD1iUzC7w45Ce5wU+QlspHoSa yPHDw/+W0nNimNEFmIHrZgvSstCL/FT+mHzmOSQCH2Aw0Tlx1zxl96HIU5//u5YeX7bDpSNzXW9P beG6mpZsHSW+C82BDIIskhz6oxQ2l0r5HydHn6pwZWQrJBka/ncZCGLU5a9yjrLWmo77k2PDf+yp Eshdw3+ZrtwT/qeoPSngf4JaKch4pruB8B+7dfB9F/7rNhs96bYaK8EJyzm34T+i8Qm0UiAxDfWR jR0Ssrfhv6jtWdA3tXOBfa8hwSeN4GaxbrEdAN1mewC6rcaRunfdgr4UDTYC1bTaqE6/Ue0C6LfW aBN+ieLXcBeAHCTpAhBgJ85oAE9QHc6dAP3YpGC5ALQTT7sACcqaaReAyrW7LkBSUN4suQB0pV0A urZdAPGUAPemB3mHvrULIHf/SRfAUGNcAEGpci9oxHu7ABzbxFCCH6zQA4VNokqAvAbFcgHqQdEC BBuhBspLiC0XQNNguwCaVpuuuu3QBYBIEtwyHgB6jKEoQz0AlPrD9iptdGvwDBT15XgA6iVG8QC8 +35KD4BmfeFYaK+hywOACeMlTIHxABDDCBNUXB3oAWAfLXZhaxEi+AksM4YHAHiBiX2gB6CotDyA wgtz/Y3whERZwFIAExI3Cdg8QzsQscRCaAGEB7YCTMW/ztdkE8AuHpVdADngC0AueBQ+RjojLIEW IFoFXvCB7Ft+WfYNtGW+pn4ByAZk4NsKZh1u3FEeG4rFY+csRbrc8erygARRXgBHrz10AhwrobRP fJMAoY5volYRYRMRqMQFou41OnH8VKiDwN/1hnbRjYhvZjhwQwCcmCMYJe8aAKdj8zxlw2IhIErh RlNybl4gGxY0NdowKSLmw1FVQSTChkAv1ISBwM78+qvUdtAdQncUBPQPAGKpCVMSda42yNv36A2h NIKG5m1xT9ur1PP0uf19+nUKupkwkp75AHdQ2oTiB3ZEV7fZs6FuqyEd9vqhvH0KGKYiukASKMyG 9BXTxCJIaUH7dC1EF+GMySwrcAigRnQRHWlDYV9DlmmxEJ1psxCdaTOwwPSuW2aGBgvRaVLtOVq/ Tw3o9DvXgE631IDOR0oVwqKN0xptlU4wNwE3JJJLsA+xDuZCPQhhCYyXAr1DsuQ1lT12grkpou6y b7rSSI6u8R2Dw8RTArvRscGiB3mHvjWSo9+k71Aw11BjehCUCiRHV/2RXFQivQ8HkdlIrtdgWECu HgwtNzCGSpy9RLcGcpoEW3Q1pZaMGOpXamHQhF6jglPhXpxdqkO5AHJUpfBwEjYq2BmoxLZWpE6S Lt3SSQZfJo7TLzEGjvPv+wlwXKwjuSYM7IHjyHCFhLssHFciXa1ouAJ+kVwyeyizosKIFBXnYS6y CVtCIHYs95tKIBAE/BEOlNeI3gKmyOsrFYqiqN3piC0se5hR2nKDmrCIGjGyRhoHkgiXW/xKf9Ay G29RNqOIEtly0nWac3FMnQ6pnJ4O1KJspirfADpQD9RRT8yCLQBBEuFIcUIgOYftweZr1UZAQLYB CmBajhCmFLUWYMHwOxy/x3EIo/vYYXd9MUuJ5SdiB1aLiT3iFsSJ2xUrsaIomCVftcTRZOZhfGp/ 9zhciXBuA2CaE4EybZbNN20anACd5UEe2wvQUY5ho3Vg2+gjUz2FzthwBUt6iLkQzlEBKEpyTunY Oz3tzEyLDVf0UzZc0W0anIBbqnfdAoZJEmy0oim1pyL9PgaumHc2cMW0DIArGVCuhiu4duAKfSaB SIbDomq4AsUgGCEgCpSCYIS4zkOMuQNXcvBYwhW60nCFrm24Ip4SQMT0IO6obw1X6Dc1XDHUGLgi KBVwha4GwBXkWwgvywo8GbnxGo0ar1ijoQUHUqnk2Ut2LbyiJcKRXUWrTZemvwlY4DTRzorHAiwI tyf1AWZfKGBRLzEKYPHu+4sBLJCgAps9Hg2wZMDutKfILBg9KWBxqXHCKg2YgpBOf4SCAE84Gydt LMcuSxeh0Nzbc91IIxQOVIp5aghEiXCqcVHi2FwDRzClqDYbe9DGvBynnlgQJaLKPMhVch877K4v ROGhCosojCLva5CCd3VQCu4dmOJ+vwOnAOzEtB/OCqvQpCTabFuv22qckgKVpFgp1S0AFzhYKKaA rGmDZ46IG5a0Mab6OawH0VETZYwWDVSAT1G71sqUQxKXbLGBim6zgYpu07Ck7l23zAwNNlLRtNpz kH6jGqnot66Rim4ZgFRyZD1rpIJrB6nQZwqDoOZljVSgIIQgBDopsCypkUoRAXw5SAWbLhVSoSuN VOjaRiriKYFNTA/yDn1rpEK/qZFKrqkxSEVQKpAKXQ1AKkgfyWk91UYqvUbDQir1aNRIRbd5Sa+F VDQNjvQqWm0p0fQ3kQpksUBu+2MhFRQMAuwCj7/k0Ip6iVGQinffXwxSwYHPSYa5xIRWUCI2z9My P4zOeYZWRK4dmQMhQk8dWnGp6UYql2eGVAq1dqNjKQiZ9kcqBSY8gjvCcsubvrEUlPVHSBxABRno FGkXJQJFE0LhsglhE1wlCeYDJI6HJZAqNSG4gtQE56mDvvqClAw5AQiN4DRP8VbiFqsY4hbWV+QE ITYsg05pKQCK/tT5bgc+QcoaUtcSYppK7scMr9psC6/bLJRBxxxmlI6vl30wl/GUDKppQ2gMWCQV +Sr6ObRhYRmnt1r4BKt5nBC/pgGxMdVi4xPdZuMT3abRSN27bkFfigYbn2ha7ZkHGbPijWp8ot+6 xie6ZQA+KXAmpMYnuHbwCX2mUAjmvxqfQC0INwh8UsoIh7wGxnPxiZA9scBEVxqf0LWNT6SEkpiW ugeBT6hvjU/oNzU+wWnKkhqDTwSlAp/Q1QB8gkRlpOORxOkRgsQpyfEaDQuf1KOhJaen9Fr4RNNg S6+m1aarbjtI4SGZpUjVI638wMYAM37J2ITeYBRg4tfxE6ASk7qPPF3vxB2yhxEVcXosVEKuq5O3 85TrPQ4xDibB7o0Ztg/Ux9/tLEzy/x1CdDEKZW5kc3RyZWFtCmVuZG9iagoyMCAwIG9iago4NTYw CmVuZG9iagoxOCAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMg MjEgMCBSIC9Db250ZW50cyAxOSAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2Jq CjIxIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEg NyAwIFIgPj4gL0ZvbnQgPDwgL1RUMy4wIDEwIDAgUgovVFQ2LjEgMTUgMCBSIC9UVDIuMCA5IDAg UiAvVFQ0LjEgMTIgMCBSIC9UVDEuMCA4IDAgUiAvVFQ1LjAgMTMgMCBSID4+ID4+CmVuZG9iagoy MyAwIG9iago8PCAvTGVuZ3RoIDI0IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0K eAHVnVuX48Zxx9/xKVqKfbJKFIi4k8nJSaTVOnES24o1Pn6Q9MCd4ezQ5pAjkrPrzafPr/qGBjAk Ae5ih5LO2QGaQKO6u7r6X5eu/ln9r/pZJXmc6n8mk0miimkWl6oq5d/tQv1ZrdVXL3eJut6pSTzL Z5NkVj51Fe2uVZ6WcZqVKimqeJbyXFLm8TTJc1VmvKwrvA2/WcbTXOXTKi7K+pGo8U014X/q/pmP JrMk1ff2spLaJznk8uGsrFJ1fa++ueLJyaRM1dV1lGX6efvn6l59dXWVxBOVqKtb9UIp9YW6+ot6 dQVRQVd8IFlTemGaZ+m5ZM1Xu41arK83j9v5m4X67uV3avf48LDZ7tVyre43r5erhVov9u8227+q +U69W6xW8RdR34Y0x1T3z4H+TafTeDadZb4hkenfE73as0+jNnsdI6Ue6mQWJ5OktEPdICXqDHBP UjqcHvXiuiSJp7B7i+nUCZqGMF04Vpqmg3OhZrqzqLq6W+7U/eJ+o643bxfbnXBdz84bNI5JmcZV VU5V1SDzeJf9U09KBg1jUpZxOUnyFiVedpwYxu1iNd8vbuiu9W55s9jO90uuZIL2JHZQt6UQO8nh +ma3GWKjq+smsao9D5oyYxePQWKWVgh/BHmTxOMj+3RnxenJpchN0JK1I89hp8mMJSdH9BcVU7KK JxXLDhJmnPVmksdV6YWQ55nnXm/OI+vqbgHf7hcw8hiMkaTTOCsKlsOnyDvNvJu12tyqh8fXq+Xu brl+o/ZeViGz9iyVq/nrDRNwoe7nf9ls1XK3e1zsxlgQs2waw2nIDNuUC1gQy1kV52CrcBU63an9 oc8gOeVXofOounncmgFeqJvFw2rz/n6x3qv5+kbt7uZM5j2cur/bPL652+/ULUM9xiCnFdh3Npkq 2wY7xn6Sn5C1Dxtm0n45X6nHHfBtF0ypyIPtJxFmuNhrLHRwsc8ykO8UsdcksSFrO4tAX1l7cMCd rC1nRZzN0mktbNMSuX9a2B6s+Si4ZyxYWCb5xXH4WWR1EPwuVur7x+u7NpJ4t3lc3aiH7eYt8ELN 1cNGZPQWgTcG02d5GhcZiprt7EsQbNMUnREmvzDJdh5ZD/PtfrkQgMggLnYCHX98sYjfxE6h2zwI iNxsdz9+IYvaa1mTr1ePN2OMNrp5XGbTQpW2MQNlHMTDx0jj5Vb96VUg4dTPkTUnfKiEK9Dxpwi0 FoXniLguKWcKoqqIp7PLE0TnkYVkuRVDwnbx8+Nyu5CVVouizT3S5mb+sNcajUAvMUDw9H5zvVmp +yWLL9w5Blt6FaK0TboEKVRO4zK9PCl0Hlkoqsu3zN7b7ebe4OibzfWjjL1bheZKm5XM6oMQcr/r KT/uoNsmXcSgJ6gss6Y98QJAdXkWWbsFi482VoiB58cXrDCjWACSooiTtGJVadLZkNmf2EZXFnk8 mXkjXYOUGiFH1h7cWMmcYby7fHTsTL0sl2WOVSKZpR/A313DSGclw2A7AZxjJ4+nBeb64AIrL+gu mZRij6/ismApS6o0RtXBdAOEl8pO20v6qyneaFtms7gqsrIXzIAga59PEUo9h6TTD8eGRPfCFJ3Z 0dULYtZ0fbNYL26XqKAsjr9d77ebm8dr0VtloQQX/c5Y6H9vLPRjyMwUK2qalDPfgPF46uX3cNJs Ukyn2rqWpbM8SUT1c1ffv2z6Zv7JOmc0DqyqKp4KcdlsGheqytAyxMvUKVip77UHxr4s5vduRQxT lGHukIqSeDabTXVFUiCKsC7oWxEU8V5kFOjZLKioxJxCzb0rSgRNF1HQNlNSt3ZIVUJU0DqqOq95 5sWwfb6qRgNPub38bI/EA3hsVgWzPY3zqdPbnlXkpkWcpmk+WO4kSJ4/oqVttD2KOb7Y4nCjaH59 Nx9jRiezLM6qDIvOeSTjE1zu348hLJEzzPWEKWYps8KyMa6felVPpnHiMXmDkk+9qCess4jGXhx2 jud50MJWm18tWb0Wtpqs383X793yZR3MOyWG1/v5X2WBe9wtZM2bq9+gMb6br1ZiqRDVcHG9N+aA MeaGt7qXzc4+MO7OuT/GZKhl3AQjcYIf88KMU+eRdf2IqLsXt69WDOdr9bh+N0fq3Qi+MbIPUfhm udZqxH47v71dXiMjxXV0a3lhlKH3ZiDbsA8AOl0cP2hu+aEvWO6zgkiUyxr6M8nChfa4e2QqvxcD 9O3yzeOWUWdabxd/kVktk/xx/df15t0abPt684gzhgfX/KYd3jhnRhl4a492rbqEcZ/O4lRCFy5s 3M8ja7NmxDE53y8lqsiMq53XSPK5F55Rb4CoQ8SOAcQUp+k0r0pizExPDlw0xey42qzfaKfvPOBC GrDE44a4GoUVndO3RfY5y88HK/Apik8xI7ShqAh4QHNHGZMIiLE1+AJHwSRJnPGirzN0bDezI2vg nLTmz0WNY/Al//7rq6+++/oKz/Pb5fXCmh6iXrGBXkk6PQcYP0ITHd0DZwDLLWBMANn84WG1vLZB R8zXvbqer0fhfrcCt0gegfs/kqkhSZiwhUomOMkL9PrmfV9dPOI10bylGlOJuZtMBlgGdBURdgln 9bCVYl+gakNKEF17zHJn4QfzPo3LHFtMWhBmOr7pruDDVY5tMFz1CK09EQUx+sS3ZA2c+Dg0to/r tegyhBXpcBJZAtdEa+hJZJ1h1gG71er+a5xkTmCMMsMQCZMSQ22rq0eYYSaIuxeblQVB2VOVVqw3 2IlNQN1oBuKC2JJcGwrD8O3n5jFNVIPDTseUB/qS8BeimjhuAjngvN1iKyvLzrPg6wXxbIBtiWoK 2XAULstFa5kCvsKufl4eKwgMnCDKEkRZxU6Akb0QRTmJ88nliTJLVoPRTjsbRVR5lH5898IgPZfg +pi1fgqjmO4aSBfWAHRHsZMam6SXnd6UYKlGs/iIuoXFVecNMWBPfDeL9Rxhf9MEV1+NMxtNuJXr 4w9Qb0+oFB8PVOHkAEvhxLSgKrgfDKqoJgBVoKLBoCpBGXGUaGRGgcdUQ/jq+LaK2upTZJic7Vw4 IDY/iRu5yIlCIrj9A1jmo1nCANrl5GlPz8fzCEisKSvELMLnaK7E+2ivDuxcqocNuZDJXqwQvp4W ri/vFusvFR6f+QrZEPz36m8PCLid+vphu1yBwb9U6QTubf/3w3eycyv7aRTZ4TUy27ZROSHBnJ6c 3IBXpGwiLMfmBLfp48lwYVgxKyYzdYyUj+cc8gzoWTFgz5NMmQCnJy2m7OhUnRnkoGXPVT+MUtHO 2y7NpydSMinATBX2JktzL2bru2GrA0zOIxFrIh7KNol9bVTf4s3Ytyew2/92jv3nWCNkm+xT7Fvb Rpu8cWCl0T6u6EXffg5ZwezkdfJzAPtibIjZY5v5fm7I1NPsa8NiOj2t/nC937wmsh1Jmvbk7Q7j HLM7IxZMLLHj4adW8c5s6xt51Onbo1LK7VhGUsVVhi3crEsHhvnTAIoJ4RqVs+weoOSTOFVzvbHE d4qZwKcXazhqDLbxzvQzyTJ25J3V/0VdI6BEb+TY7q1SNIomlMLteZkoR7aV2H3FIcaI0LvPrkA8 grXuNsI2c7+bqUXxs7IiW9+T1gp9AZx4FlWhNv6l3k23v3skbYC2S603e3IJGJcvNqrHndhG/7pY PIwBXdNZKvkgSPmge3dcLHFsSfAbYCwlT4nhT7MiZBOsLCWc1qTkwGzt0DRfEc8v5mo9ZL2TWag/ R0Fej2M95RfPJn2Nudmhqq88Pm/tzKfEXJVEMYc63Wn80X+ZaJF13EJQLxPnkSXWXy9wd4vdjrAK xWawtQ6vITzDzFOUzseVTgDCFZlBrrEnz98yWYlCHsfx5wzGrrt7zda+Iz8IwHltPpetuROcXuHI X4BYPo+sxsivN+zyfHe3XIERdvslUTcyo0UYy2MuQMsF2yGvz5XPx4K5D2knWZrFeYJy/eQAdKYe anbUSLQj7rOeEK0199TkGJz2kYEtuhrSqafS37Wjdkjpdp0o/TYiHsVOuikjNQDdlBBEDpBNiD9m n4GNagdH3WpZqzd2u+3U8jCmk2A7teSukAkyyl6MnFQiRVo6++GBhabuNIf8xwbZlqyBU9vHKbqY xJ5sNkj+JAVGxEkK+zeJbLBZz0WwB5s5jvcMQhatHAsHbGSTm/Tcbw8Dn5FMKy+wp2DWfT5MVMt7 On42I3VIKO874sb2fL0/h80xLJ7/jfw08Oh3rKpij/3Dw355v/w/HTUzBp+kuCRIxQGfNOk+h0+6 NvqOOHJ88pQ9qe7CnPgNkUHPb2jI9aazwlkaLkbyWLIaTHYaVOhY+fnq3fx9mOKjzqfXHcBhMsdl zXG99tQAdmTO2QbBY7yEHhwnFVuiWqQcGMAOUeDZMFwNv4qkPViud3tCzEk6ZianZHl5SB8a8/Jj JRMg8DSdVnUDLgHKkhExkz2IoWg7zXX9lZhB3FYrMeeR1RxfCVB0QeUOxUrgroztOQb1Y/qpBMQS UJlbunuNbN9ZMqgLyX0W5znJKB0pA0dWFPlmaP275f5O0P9yO8qksBH2jtxePTeyegd+TogHurAp cRZVLj/nw4JtNaLKb2QTFUq7WFN1rCEjy54L9tpsF9cLseKQ72VDLCIa33aUPYY+vQZgUvrZjvgB Md7RAGTLT4MRD2+QHzRxXOohS1Wvda4vH56JmVDbpgUBaSEjHoKd9e65/rK5RZZefA8m+6pl83lk udhVcvU0mPJLkS3vTbY82Qmy3Nwsr0M74scN0GIneJEU6Ma2Fb3kzTiSeioxIexCd6Q0xvn0GmyU CotbJKPTOLPCxmu2iHxWXQIPsMRpXti0OIuqzZZcOM5wrm1ssv/jN39WrwnJ1WbVOTvc3so+kK/Z cIQNrvn7uea3Y1gmA8voSPDcNKnXFOkrCgfJ5Fp9lGjQpDXmp6dIf1E4iKxaFJ5HFuo/g34/f6/D se8ko7aoHW5/I24UGeg/vdKiER+t+GzX1+9lzzM/7MZJelUPuunqCxj1bIbCVBADHM705x/1M8ka 4BobxI0+UrpF13ER3XdJa2GE44ZwH6bVIuUAtuuo6HZJMxPjjhRv2vkEx4d4gHDto4G1gzovdWEK LYqfofNS4PCsmlSkhHmC7U/jPum8nhCgNajHgV9K1qS0JAvZmXQt1BsSFW313u6bjRJPPzu39/OR AIvbJtui9viA9l29Wh13fDb41StjwZhNu+dCNDcWdWZD/9WrRdbx8fSr15lkkX3j9nGlbub7eR3F cb3Z4hB+2Mg+oo36nGdWGNQ+x/4iFm+zcKnt/GY5TtpYl/TdNekSFi92Rldkrbm0xes8snYPZFrY Pt7rEWc4nQrnogB2xpz6z2Pg0VoAWdovYnRl/6uf0s8qXdgjmU1bjHZ6uRhdupxH1gZFZ7XamD3l Iji00EDAmWgTnXQhSBAha4nd1zh/uyFF9Y3abMdgwszFoWS2XZfAhOxcTFoD3wse9x/7QWCKHHFV MU1mih2eZxC2wisqyTP6hY8NogwzI3nFJ2WLsmedtoSDT2VPs1FuGqTURs9PEnrNziQ5Dcdy9AGw XtP0iUIxLFUD10/kx2/IoiE7P72+PJr2kGDCm5JXQTVpbYxlB9aNo3lNC9BGXhyjpB5By1V1ep3j GlULXtaxQ0+5/BOy6pDxNXGUDOQqHUjqjJrGAPKnVzo0WIt+YoMfHiX+cBwZb7bDNudDYzTrPnSz YAxxVWsOGVFSnC03cBIg30cX8edR9vIPv//9q5dXr74lupBMSV+qZYxtE++TOXdAgk5NGhlOsSIh OGn/1O0cl8H8npRfe2b0OONujdyZbdQlrO0pWrccKTXY9jX6yJ9H2W75hvwmmLTHmDA+NoQwyLDb GnO3I4lH1vpTosYqn729QUotRj7NAk8WZE6MuLTMJpklayCPS46Eu8XqQS8IpAl8JAhdDOYNQ7n3 JLq1RM2xupNUYT+KBPEGiGZPHxj0T7N2TEiuzgbLgb07kviorU7nkbVdMLzm4LV5ywemXuM+xlsm OqOELRj3iT1scJTRdptlMtuWgRhHmPV/lrdwLSw5hjj0u2UcgZYHGuz4qcUhnUZq6aY97ALMFOeR hWFi7ny0OCkaIkkbItTN8vaWvEuAFi+KfnyhfUBj7F3EU0smklzJPi7p5V4Ipq8mMkjVzkiAMsvw YjzVsaetE9oF9OMXo8wKd1xdi7TnnBUpCdcTH+R+QPXuztTeuyBaqltPz8B5VPmVVof61PwfRmWK rMYTtHmnJTVycP7mzXbxxh3yNIq0thGGtlG9ZkZfZDhoZnitLmUxnKBrXNjKfCZZNlIFTtMrtJJ4 UY4f2axJwCV5mv1U/qg5fG0SCEdzr1EdRd753RaOlIGjut8uH7RDdCvHmtkodBdz6/tO/e/HO7UT P7PeRecI7tV3I8+IipCui8tpnZ5FlQnQGudoqySLyRxYkQ8z7K9nXcB0Zk4fLd0gpaeW22MvWuc4 KXY82nOl2PBoBauS84gyOSRPktPKEeB9j98+U4yzIS7NenJtuC0sAzG+IiTizXv1vd48HUzzj7dz hxR5eTXN6JUGmY0R6iKLJ0k5MUJhcr9gK2q9KfX04UwiNDPJIQ65co6RHIQkt5G97Zvaj7ckDZ+8 paswN+zMWEX9TnbyFXB4nKHCVsGuR5cdkDYmM05eOHg8FOdASRt8Uxq3vZoiMlkOhfJNcTfSlJ6H VJkK6EHbFF9F3ZSjgVQt7Ngz2CUtqjjhqMqnVM6eAqG7Z61DyrH41Rpn5TPcM+Vws9eTk6BL1SCx QeZ6trRWiUotVU91UM/52CWl00Ea6R/I8uVtMS1S+qof3+rU9KSEkJ1BYHn1er4nc/B7iHBe+sXf lmQQeIdDnvMd/GHTo8B7t6vONeYS4AwqR5ld3Nks6XlkLdZvl9vNWh/N+yU7h/CsznfuvGiXMZoA oPnN2/n6GhvrjmxNnCAtmSuv41HG3ENY26JLGHM23hEbcnFK3Xlk2Sx5fnTxvO0Xa/UG2yrhfbsV m9o/5+Tw3377P684KPxesobww+JvPESScSMORhl5F94p+xyluy9h5NkjnQoeGOyqG2Wd4TyGqaSa Tc8jayWGadmOQF4fLvC9eqkeK4Drf24Q7P6kG6+xkrxrlPF2hk3XGjveB5aqGmBYF8uNOInG6Ga/ i9ER9nzLeY138DhOOJCjwYjPb2JPzyPr83dsVO05dC34c9zM6XcptAhraEY1J1kPbV/jUYuUE8Ey 5N/USWMdKQPZ+xEpbB1dtajGxEra+zXH5JmsTTrSQsSz30p2xUk9o8xWZ2FvNedAzx51g3Z1Tge3 f+C9RP1Ez94ofWxNqH9KLuEzDwfmhFZRQEmHwL/3Kk0kGoSIwcZBtY2Qp6fPBpYXeY2TS8wZwwma bH1vtLfguJ3DhxpLHqyU9DtpgTivyOqCw1wIaxeRAZyMQJyorSr4iUMTcnREUftnnJfsXoykqFXX St2R3ekH05WnW6YIs8jQyfVWadc2KSHWy56ovOIZrYH79usS0aUbzzTegrQ7rdP6LN/FFBulnMnB fpg4z2jQPYdVtctWlBWcf0kAnnsuKqa8kJDzqiJldEnOaJ7xJVQgCYyu67KSQ7hzidKXuuxzZMGC +XKqspWXKEy5nFfuSfAl14oYHYz5bFLzZSvK2LmdFJkvi0jJwMFlkGUr5xFX4CiQqmxZxTGTmlKp ypeZ9lCVrdy1mWcsCb7kWg9sqt41szx3+VXkDWc7466DN+xR1s172GZGhxQkXvHPpHIydcZWarYv z/hd7pg1E3gigmXlPscMIPfCifq+NHX4yrBN8QtflgtewliiL3leTAiMfqQfEXte7l7WN65meYkf 3ZflS/re02Xr8XRH+iO+FdJJYhQ6frA4c9CPgVhQSOACN9YDemysePPkWNFhnq38+D3B2TV/HuZs XZfjYkdrwEOe/pVN6pZjJCwlCFmYl1ETkZdknOOXIEem+TRzMtfJKz9DRVpMZmANfRi3ufS1VeL7 9Zkxq0I/ZP5YCwd2bCP9f1Av/viFHLKeqhes9uZi6S7Y025KCFU1Fyt3wSGLpgR4Zy5wUehqvvP1 +Nf9BQ//pK7+S+nz9Pq0wS7IdRuKjGBpsvvTpqt7RX7BPJZOubpVLz6r0crHqTrsJde6xDXXX3A0 jG534X75ynaEf4J85s0u8r/4i3+276SuW2ftd777Xdh3YjkU7p5JUq8S0UmyQOEfNj2RnV1N4aaS mdnmn6NHt1v+4YxvhAncV+PYZFLp0IFKcxLRBVKP6f4i4KRvGflMvYBHSs1NXO+/UIW7xhUJl7FH qVIv6M4mI3iLrjXuSr7RCYeNd4mZTFMNqkNiOoa7+dMOsy6qcXjRo5poFFRTsBwGqAYF0cCTvsbk SKOanF3iUkvCDg8yDMnNADwj53ekaCszMuxHIosqOeCJBciWaYO1LkOUk8y0Ik9HSTJ2lgmxeqfi 1pngb/GvSlm7uuGYphQEk2vng7RMbiNzK9iF1YZfbVO5lTbXvwbvHgQxUQmQSAsi8QIQ48sCUe/L AigCECg59d6VUFciAa4NDMPqiGlPQJ97TJUAQvATx2d5ECNuILqQEoOjInIXm5IQxLiyEMS4snod dLW7EuqyNISrpSU1XIDk29IevzD6NjsQU/dWbxAjcsJACaoPQEzEAmbuYRQHYnyZgSXE3wBiBIqw /Mkk0aDFghjyXFoQE5nfp2wj4jlfGWfgmi/LhQUxcsn3HPjQj5iR0C8DQmRYXM0WxPgvy5v8nnu6 XD013Rop2Zax4g8GMRVAcqa50Q0fMk5zFUA8KDo5VLxmGTvAMK6Mumrec8/V/OkYISjpMraltEGW o74LYWDTqWRl7oAYJ2IFxMgRNP1ATImPnZQjbhWqEUC99sAdxjrwASjGrszsi24u0R8HxbhGjAFj +tf9DDgmc/05GYJjZG8nQAYWsjhmRsrJqmS5Il3an1XPZPU1jkGpQjI6FgJQPCuQ6VDzi0QylWQ/ FtQg87xQFTanXPbgDUMyFTCe1wR+JIhzqrH3HTxz5JxaTASyfLD0cugX55pKzEGnKJSD9qla6PHV gjd4y6htEW5DyQomKrEr03I0LZtGCvnMJM85bsot8Oy8BQYEVgqosyXBAu/LggXel3nh72t3JdoY omkIF3hHa7hsuBbVK7xtdL3A24J6fe9vgdLLPAdBG1uDXfbdvSy7bpn3ZXrhBknKOOEUkSEXDgqX +WSCeiHv8hvZdFqGimQCSNXf1Vd2ldfXwTJvnpKl29VgFnqpWyMDfvHftYt8TZVb5GuqZZF3d+cs 8in7QXUMjBtBWNRwVmM1PTlanrPDJd4O4CowkZ3kbP/9kLPRrzSZq9qe4ovaJgrhUjQvv7oXaTyT OJOWZE5Ykf1JgQctFKU4x+qkCb/Qxd02YpTFvXfdwxb30i3HA4wU3nzhjBS5W9wrV5uzjnx92EjB acIciYdp3i/uGK3TokjONVJg564aDn+sQNeRNU4ctFG8xASFFeIeyjFP2D/YLSjDSpVoi0Uu9okI G8YP2nqR6/Kf9DVd0Mt6MZuhK+MuKC2VlkfEbzoVOjHfdm0pGP+MKQs8+2+yCQOivtQftzc/vsDA Er2IdRkjCKG/1mQxEDz7K10uw0XT7J9GNVjI+OXf9SvyYvTi66CS0j5rKga4YbmxRdip6Bp7w5sn bDfGrIntBn9IRga5oPVFn8Z/JrY0GgQNfDbjhj98liIBlpYU+SscyJ/PzJN0gLxGn0kPmBdsVfSZ /NSoS/iYMvuW/fONedC8LJ0IH9iXP5MO0F+3lFHue4IA8SAu0V4WYCR2fsIHtidqm9ok75qxrE0N PvB6zVcQQgNl3jLa/2j+MI5ChvnJtlbTRmvcX2kHnWD7yzwq7TAd48lueiic8a0eQKzzLpZQmJcD eHsw768SoQIKhWGhqYiFcO5hLb7PJNKcG/Hvv5gfiuYL9g6qeSS2tUjhcboL2RBYMLU4Hgi6Ldsd nWrSiVd/qQ3SbTukHNGI0woja1ildEXRi5UzYStabjlJ2mCGLpKxMqPFz39HsRs8bhlg/oWpKQuv xV7MD3Ut8kBFkJeUZq44o03HO8qrSJjFOAfGJ1LqP8SxsB0f/caM0a+gElJawwjz8Yh54iXPM5it J4Rk/0izDvOadAwPwALSYb+SecCt4SP7snSt5idhFvpMc31dqyXUUii1Ri9a/Pk5pX07DBsU55/b OYHlH0aY9ZFplXAxpJtBzWjXiS8STT/FyYeGYb44lJuD4OKu2dsp1N7sPY4zP5EULYG2SM+Jd3+Y rshLEhiApphk4HtzN0RPpAuNnhgVRBOIjSrQE11RoCe6oloDRH9Jk0mtJypwC6ZNWdmo3Lr8yHAE JKb2wBDM4odrBqd3rSemLAk5uqojirOqTQl1OSXNl1GX1+Tcc7WR0NfutQxHg67Luq4drbouX2Zb VNduu6YmwRRo7eeWyf1uQKSC0deSckJP+2ut41lfNnmzJlbjS8qZKIfuDnhkzb8YBrz/OuHkpYbt NyLQQd5hgugrpxdKaagX6qe0Xuhr0HdStzH+RsKk+h3RHj01Tic0lIo+qK96GXwlcqQeElKX0an0 RF1kuafXiKCb2fgCx5eBLuiKBnEv08Bwb6gLFpbMwJhQF5kzyLyDmRWDvDjYsL02SMEsKdKOoa6f rbeghbN6R2ZDHfzFeKxdI6ycrhvxEVzW/esepg5+FJ+1t/UKuNaucKcOHvFZi+iSSCmvDSbsqiB4 ssNB/VzWBYHJhJcEUHUsbZAuYxU/Txt0VAb6EEfF9ADUX9d6i4EQ/PsZoCWJNHIE8VjtxT5n/xit SDATT3yl4SEgSt7jdfuGufu7L6LjcERERloBdVwbAk2Go9nabbCzNtRof3Q0CoiFDAOErLrloOsA IMZqO2kl1ekFxGJ0Rmm/BqxWL4kFUEYWqVpY+W1sgaWFoA3MSQdTx7+eBHFiB8AOKMtyQGxvjeQi MJwY10MMV8pSzNLVb0efiVxgubehCyXeXnvXwXCHYzEldoG9pUQbZhKYBoqp8OuwS9GWEbtmy1b6 AE7OaNTnbxYzsJcUSfQmbzQea1c3OHah1HGUCWGeBp/q+8jeE70g1p+ibi330gnB7+H7hwMYchBS SpBjCFt9WbDy+zIPSXN8Trloqq4kyvGxSUcEuDXHlJtMkZ0Bbs3B6WzdCwIYBIUkRMF63KpxiS4J cKt/KsCtvszjH1+7K4k8DQFwcqQGiMS3x8NW32aHkmih7a3awdEwzbBEaSWfVFGE9RKtqP2DBkmW JsJXo0quG4hVfjM+ChnmGrEyPTxiJRqRXjRPVXwgjFaIEjJEWsQqVw6xynWIWPVTGqP6GswddTvE Kt+0Xgw2e1pqPGLVlGrEKlfDEauc/VmK0hJA1kGDUUPWYDC8vuPLerEuTg6rXzkSGqxrKQ15xFHf CVEQFrFxcs04S6cNDwuzzNHQk1Tm0r365krVgA/I8otBra4RY6DW/nU/J2rFvN8btYrgwiIYODE+ LNJSjoglvMGxECDhOSMUutT0ilC43Wzxozgj6lHI4ryF1uzERqFRoi2Tin5tQJa83nR/ejFwkIUo FKkkI0I+IZUfNwMRC5Kr4AQdliSUG5ALldkifYi0LlopYr/lE8QOsHeGPQqUENeVYUjy71HUrmoo WMmwgQkWwdikGyW3kb0FIMnBbHUrM0kr4h7m1/DdIzgFt4FEYwTWNTEZSFEo6m1RLdeJJ0B3C6xr ORmxMdM1rGtyQiXOfEFz9ZuYHSo5PtVb13I82hJcVy82piC0rblnQohiX3N4ROWu5rrEfj+0rDk6 oal+zrWmhii2wQ6h8KzulMCydponHXDIapNaxbWADWNSA15wb6EHzFoDFCaDByiSHt4BlCktCgGK ItxOaqiqSF85gCKlIUDRT2lI4mswd9RtAIqSCajfIekpdFlqPEDRlGqAIle9AAoKQB2kIEcQS6hN iE8sy/DV00MR4BM7NoFJ7SyWpUbDsrSmZk9LZkiSL2qZ1HKZl+LO9iY1uwfkTGxCn884hfyXjU1s I0bBJr3r/sVgE0QW1jQxyn6U6MmcXM55bZR9bmzSoaYXNiHXaw1NGlLWubpxgHLsF9aC5gcaJprO 9pIL213Cbg3BNz4oE9Eqy/kwEw0vGWhQzvA3yN5BW9IBPb1CMtlxgf9Sx7n7xdiXBXDAl3mxmXJ8 yYQDT2vNjzAhjMOiytYPibys2DoXwAFC9yXcBBulC8pMsfsUBQisJsGWUJdfj91Teu2wOwZ9mV9N XO31MgRoMTQERgtHaiDzXXv4oKvc9k29DvleqI0Ww6Iyo5TNx8IBYrvQ1zU0MPcaGqQV8ZUeGgjf 0BHmlylxsAYaROmUM/Aa0CAlisXWLVcWGujSABqYpwQMuBpMFCZKsrNdQIuBLfopT42DBppyvU9U X3WgwZP5zUJvW8q5LqmkfQ+wwZExYQRaYxKwhePgABz4cXqCg0N+NRwcsOsTHOwobbCKoR7DUwsf yPGE2tjg8YHeK8rOEadTDTNeoJYQPudz0jeMFzYMKVz4/uiUZMSp0ZaX7mLtLjiu3Py0ciU37mLj LrxnyNfjX/cXPPxT1GuTqGtEB+U0XG7RWbtEe9T9hJHHtc9v7PQXuA+ObhONdIhQw33m3/UXdQSm HQVxUTTeweUWeHIa20SFhaaNCEy0nlR297dieGuXW5hqzy2YIGb2LJMZT+I3c2/+EnzQcQPVm0R9 QFvvAEzZRGoCMHFg4WxxLrd+20ddAGaXyskTLrcn3FXO5WbD614Zp9GvzR/xm+JSk3g6PFnaE8cf XRr5CDzzrHXF2UdlvAggbbrirCfu73Xd5q3fyAciiZSjfn2jvU3yNR447qqzbnpGiPDyqc5zHGGf FPX5iabXMYd0MtuoiT392jbIku6INX8Nn9IG+2uzR4zHsfHTE0W2M36tw8PE/kaz3Fdsf7tbiZqS iC/7ylemtv9oFOroz8i5F20Fhq4nurZJsPtO2KtPhnLWvcqswa7OIqjNvtKtRyPAPOdXQgxNEQJp sA/X+wdTLK5I1w/1U5UmkHsIhCEkio6wXOE0ytxvtkZ5xHALv8E69Y35xXhcJTqQmuw7liYTZBg+ JpzKl8T5CVVIr4A2+5v5vK/K1OFoEseuJ4OKj/NswXbvspjBs7Z3rc7XgOFtVpU+8WbH/weKJ0yN CmVuZHN0cmVhbQplbmRvYmoKMjQgMCBvYmoKOTg2MQplbmRvYmoKMjIgMCBvYmoKPDwgL1R5cGUg L1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDI1IDAgUiAvQ29udGVudHMgMjMgMCBSIC9N ZWRpYUJveApbMCAwIDYxMiA3OTJdID4+CmVuZG9iagoyNSAwIG9iago8PCAvUHJvY1NldCBbIC9Q REYgL1RleHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDMuMCAx MCAwIFIKL1RUNi4xIDE1IDAgUiAvVFQyLjAgOSAwIFIgL1RUNC4xIDEyIDAgUiAvVFQxLjAgOCAw IFIgL1RUNS4wIDEzIDAgUiA+PiA+PgplbmRvYmoKMjcgMCBvYmoKPDwgL0xlbmd0aCAyOCAwIFIg L0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB1V1Zc9tIkn7nr6je2Y6VY2QY9+GIfdCo 3TO7EXZrLe32g+2YgCnIwjQPNUnZ7Q3H/vb9slAHCiCBAixIHHeHDRZJMFGZlfnlUVm/s/9ivzMv dHz+l+u6HovSwIlZEtPfm4L9ylbsxfnWY/Mtc50szFwvi/ddzbZzFvqx4wcx86LEyXx8zotDJ/XC kMUBvsxveFP/zdhJQxamiRPF+iMz4zeZi/9w79/xo17m+fy1uEzo7m4IcvHDQZz4bL5kf7nCJ103 9tnVfBYE/PPin6sle3F15Tku89jVDTthjD1jV/9gr65AVG0qvpOsFLOQhoE/lqwv6/vFNZvn99uC LddgQrEqNp++svWKbe/nt2xXbJblKl9sHcauiu2uXH0Cq+7Wm92WbW/XX9juNt89m9k+mMnjrvkO Ikx8ismU8z2r5rtnli3neNYUty5SNOu9zPFcLzZYP7uasx6irFk/iCzN+nFkCU7P16vt/fJuV4Ll 5ZZdb/Jlvivn+WLxFZy+vp8X1+xLubtld5v1Yr36hJfbYnUNQZiE7QHWWRqmLBEPdRRs95wUqqa+ 4I+B62OoKldY0Z/zBVvfsG35CSt7QUt6WWy3+adiy96JBTTrV1LttQy1m8Z+Eh3Sob7nO2EWZ2Au p13wVqnQnnX0P1fn37O8e6nzAydL3ERSV/F7Zkud77rJ319x7fn3c72mahTPlP3bq/Tb83loHgNM XxYoQgdO4wenRpO2yW2aBmmjAOs1SmPo64q3YrUYmnHWMop7KXEwlT3oYAZLXecnl6wExj9xMycJ /JRlmRP6oTTkUPc9YGDQw2qL4IZOEiuLMNHTOlnqBpnvQxbTCLAIwEReAK1kiZNEhHuyyMGnUua5 geOTCnX8GGBnqmeP8cNYzVZq0Vc4CBoAUGIv379TAvk8pF6GiRhD2F/yRb6aF+xtsV3fb3BxtiUF uSxWO4PamcCwbWpbGLYLVPgusKEfSGK/w8y1l4shy+eXtFTcKE35cgj8LPS8FGPy6vLcBLzPBeLl z5kkiZMScWGQOhH+dsHzLGOtgQW75LC2hpzbN4KszMIAEJxuxO9B1wGEyPbr+GL1lciJoCRmREc1 EOJO1nfJkth8Gj4A2sTjDbiRfpoMcyWeZmY3GVi79afBjMgB9TQwxA9lNpTWijMXvpMbfofQtaXf EDry4LqkX5OS+tDjUFbHBa7icWS9KXZf1pvfoAgqHbJlt/nngn0sihWrcDbQ8/V9wXZrdlvkn78K DEYQDPB6DhR2OgmqDuGzwjoz+VzHwPkkctLMDY+N8+PIWpS/AWJsit/vYS/A8Bzslqj6FPKw2+Sr 7bKEScE43tvBmYIdvCQf+3O+Kdf322kY7ztRAGwgnuoY+B6nTkzw5MhW/Diy7iu3KQfIIrRQ3sBz Xu3gOper+abIt7Syd7eF1AhT8NiPY8cNgUFj8QiCybaOSyFUUxUCgHjmCu88oPEJpGPfoNKAzMzO QXgw4xN7UIuZDOUZpFj6Km1SWiiQfJVDnpy2g1HouJkKMhik6FmZiViiYlBvJNHeqdSkhImDyKs/ ra4gV8WLEAsAEG1d9cVg4wBeXhTEAyX9/LZYnbJix3LSvbU/r/64K2Gz2dndplwwPzplgOdB7QPV 5bsLxEhY+GGKVazinY1nOyAJMqpsKQlNcObh+16/UAbw1lKpqQ1KHml5wFRgYuDSHabk4VZHWxDh cEvh7BVJP3J8Hy5W3awhLWDGtFrT9h8Uj1sVposp0yTdymXG0ySSPk2pvjpAs+dGTugmQAWCZquV /nykqGly9l0dJDGDh+J7TRJtbdpPm/xm11q/F+cX9BAzqxyMqTmVHOx5CEpH7UsZ+QgOpWECw2zK hrGQtPjyJT07sZ3nlp1pk9gvvr6LFZZQGMIk8cA8t8T39fpjuShaE83YL/Pd+mOxIT3qjxWcLgdS q0uTcGNuW+Taxp1ac2tnw73U8RSwNSjRXH4cE+4hQIh4j9XCtp2Upg2xdPARjESAVBqRSrCePnsS jyNLeG7sDrFClq/gzBcGzC9u4ACUxWrOM6jX+S5nN+vNl3xD+TL2/gRp1s0k6CEUfp54rO9gfE84 scrNV/FoHYaux6M933XiDMn2KAudEPaJ+RBHSlE7MDohiVFPLL61/Lo0gcKtUUZBDk/i1gMqTK9E CaGmiUar7KwkywAG/QuAJKx4/2yiWDnxKHGjDDyqJk1QZyitlvr82VKTt/jXpT49H7HOwI2bpBzg X4uo9YYVf+TLu0VxihqQHymxiWALrcOqrOGafSRvfLuDX26qugGR/M4A+naOzF4t7i0uUZQC9JpG lg+mBVOYiCo9C70xdtaZi3k/gE2CAOmHGJmkLgHQJDFvxotY9pLS1hgtAWjPH2ETkYoAiXyuXKBn 0hkUHEK0gEIaYiq5yuClQfuzGbWb9WczSNSjiLIZWYScJaUamwMz6/h/hPIjulHqICuS8hvxAQg1 BjK2sM0EiBvheyK/IgcCGkgptYFojLK5MX4lxDwpHes6UYLwQaVjaf5vMHkib9jW0wRZheJEFVbi ePRd30fOFClU27Qh5/KsVrNlp6ZTQPukAQj6HSVgzL3C1+0joZSM656D60Cr6XFkicIJJuqoeN6/ YJH74/8l7o9sk1+Xa0yTyCiWKKpaLwuGaGE+CQqAw+GnCaRCPMzA+AgFpBG3LCwnehAgVPE/SZuV xdnP8x6FU9cRNc2gFY6djvAij5KEGdS4SDU2RuzTjfgi1wrI0JOaQNZSjiACWekJy/Rp/YsRW87U fYzE5aic4V4jptEVMmKuh5rIzviGthjSzxm7bLWq+x08bFZj1pbtKLKqhZnPKeNGVW+5XqSUpwOA KFdI1RWrz+VmzWsATlm5/ChKBNY3tELGhBG6NKQ2yWKqvwPEt7XioMWquY6rJEQRSZ3r/eDVXlkP IktzfRxZShHnqrRDKG64caiDK9g56uHYZbG7v6PUHDThBJWtPuX8vQhYRzzFQC0NiX2b74r3J+eX l2/fPyM3VCnsh0zYCJeyQaXhIejlLp0pRUl3ZmIQ27U0AvWo+IryD5648DraS1RP2Hd9V2xQZbtG /SUl/m/KHRVYv6VyW16Iq5PEVahhsc5Rhctrtbe3JUKbVKs9hXCquFr1WMeggmKYNvf4VNA4sqQK 2lJciPEAUb004JR9uS1REjCvyvKpTqD8eL9DwcjtNOwWlaSReJpj4HcUIIpqGJyn310R7SWqd5Hv ymX5v3ydU1hC8h74H9UgnwoqLdxOUozrw7vHphSDakNxt6Io+4F2G0Zwn6++T6crtKMVd4haHyrP rWCEQYq2IRIyWtqQFild4EqTgjrG2E15TSO27xwg5XHMGbgU0N4dG3ClK2gDWIpfPqOKvyy+bEmu kNZiPxV3i/VXkijEuphIy4hytCnshB/7ju8hfR+JhzgGzYHgiR8/ab5abhIjf891G6w9giDHOLKu UMA0blF2B1+wlwp7BlCxPnK6fi4/3SPShUIG7ETb8jqrfDO/LXfFfEdvYG3kQEo8RYkcO5VmEsqi oMwUayLwEToLgFTk4xzDmuD7IZCDttExY3YrDkLy2oEbR5Zw2AUvBSAGfv5cXhfYpLYpFuTPw4Nf QQLKz+XuK1XaUv3d6zfOJCyXu15QpIJ9J4msSHpSs+KiaqexP/UIXPZRVF3k898KbDWl+kqBk3c7 BGZ2t5v1/adbVr3PLrFBcX77/uTiEv7w9XqJ6A3VV/Ok626atS694+qxjmClh3z7z9Gt9JFkvf7r r1DV+JtqqTd8CQM+3yE2V0Kdl7sS1Xqk3q+vMQz5WCzWcw60J1nlMq4uH0awW4UgemAkCsDX97R1 2tKIDtKpAQAtdr1hb7spAIYKemS8j6JBxzs69DOOKqry4KrnpthAJAkLSQODKM1HwAra3fH6DS8H IYFdrTdLvnua4sqTiCM2qoYeqiLFAx2D8klRARLH0sGrFsbTG51wHFl3a2yTnmKtqsrLBmHda3V0 RWCXbw75qSosG6Qc0GktBQKzat3Owiyl7KQKKbc09QKItiFQxgS1IgajJ6grYqBKZCQpT7fMVImM JGUgmufyzJDg+O2UGntUIUZSVdBQBI6vi5v8frHjVgo1mxSZnAovy7IT+SRPN6kqIhQmqFB03WOr UBxJ1puzqxc/wxP6QpmsKoxcoHsH2PqxQGhoV3xC4gEImrf0IBmgMDQPHmHwY3FbIps0QdIrEHhZ PtUx8B37piL/+GzWOLKIlTl68qDM7TpHn5ZCYBVAF14Lh6V+U65IZz903loEm0NBt+DsATuidbcI sXKkdM07C5Fft2b53d0Cm+goDTaJICq4bNJ7wMI8SiA4RB2aj6D0QLU+dZZ9JFkocUZ0eitTWct8 Rbumtvcft3Mks6CI6APlvJgkIOOHAe2jAzYWc3oMiiaiIp9IxvkNSWvhqpGBVl7rebDKTdu6EPUc 1C2tHg60ikvbC1s9L8P3KHWhLNW0IxxHGfyukX/UzqsprJ1sXiaf6hikEH0y4khJ4QAXjSbYEuwP ilyo8D+18BhB2rcG5/88CZEwE7GLhPRIIp+bf6Yg0ZeNq0aS+OfGPFYvJ5lN2blqJKXmXD639fsG SWUAd8ALvCa/u7W27WTVdSNvc9nlDCOd4GQR8kmN2TJI0YDqUdLn1CEnSDOZ57BFeVykppD9DD3b ArQ2wRxVhAnLZsxRy8hOwi5tyjpIabHLVoZbktNlVWuadRS7Ko1gO0uDlpfnp9ilBTPUYJitPeIq YApJ8tD2IExShJ5M9tkSRnPGLdIkxKVomEj7SUYSJzX8FLSpro4N2p5gCaIiBbuKvKpPGampgTjX 2qK0VmOXHq/Z58M6qqUYvlnyqkVKl2LwUaKQZJEW8oHeuvUEDdIJKJrAxiP0Vm5I0JClx9gk6krV OY0kTSAWS14OmzUk2bI007w0hL0/+cKVPDTWJPMWqBzVOG2qkd4UUxdg200coUZiJFcxdbbLcxBL a4jvsKZooRlb56ylKbqUlg4ZgJNIQBjCZRkxsGRdgy5O1cFQhgZ8o+j6Bhv94tsL/P327I01E0Gh fad4bMlyAteHrd5PYc9+BUi+/bwNoAoFmwltuxxH1Td2cclEPSkmj6LNk6wAH52d/Bg9A/aR2a/T SG1Yzt6ghemjPRd2RCQNsrohziTr0sdWY/RUgNbfL11mKUpLV3zj+SF75tXXZm8wz898OoJhJGkD eFenqneLb4AeN9i4OJYsWMhvZxcX2BVGYW16NYWAac1vsPUJBEwrfg9F+xH6eIyIFVtO0SA+as1v EmbMUQtG26KbBikcRB82QtRym1pNh4IUq/juJJpJu/rmrBwBdtau/jjSSCFMM2fK1R9HmHL1pVtt K2TDbI5yZsdROc3caWfWpMpYhW2zM04hdGe1tDNrklKJfj9GtZ6glm7oAs7amR1HFXfLrJ2yOmn9 9llu2pFqa6Bq5wty1Kz1k6ac2e+YtQHO7KB5087sOOLEvNlrs2HUKWd2HHUDnNk6Xf24S6UvTLoM TdGy16NBc1fYS2MaYMEklX3xDigKTZOs/pB63vyXdNpDF9N4yk0zKD0wZ4K+ScyPpxKfFSWGrrDz xLTcT2LGtSkaRSFXtJZ2aZjhVjUoo+gyhQyvpqBRO0UGjYactay4rZw11ES3FVcpYYOQw0tzZhyr VxMxfmk5V5xC29ZVKiNsUPgUU6U06mFKtPJ6nHwwbeH0xmlUS14NWnvaSRSEDVRbr9+8xLajasvo mzXqEqcg0qN2cZGPIJdJZLdI2eqBQatPWcaAGu9F2It7bN7+SMIQ3n1ZbfVlZ1WbJ7kb3m7bwiCp 89BvDQdzeTjKyJjFJ2UoNttmaWMfaL9TxK2PpdA3JM0ycB+MI+ziEivT2O9pSeUwTkr81aDySTmZ YG8xUtvHtzTHEYbkwUuhYv+KvQi/5l+n5aRJ5dNy0nfi5t7so1iTySjCqmTCS5UYOhPbca/otKNF vsPeEvwvt6PUuPxgR2EiV0QbD30WiCewisTamtJBqkOb0hgHMaZqvT6pwAFpeIqSA6C6hfNbHshE TojKlKKAr0Vmv4sp23+8VICt6vGxZZfzYkWHagmJQ1e8UR0x95/qgFKsAMCNCaKPQeBQbp5G6ii1 JxU4+L5IMw83VTXlMODAw27IodqNoMvSCKrOeGelEYT1RjvV5ttxhKFXJTV6qnb3YVsf732A3VPY 24n9ENhDJY8poM2d6DzwcX2PTezUJ3KKvQ6y6414lmNYDwF29nlqPVRqr1+fTKTltBSOI6tcVfyT O/nAZer4JbZZiW1+eoQ29d6ut7THE43vIQGTMF3u4w3EMx0D19G+3Kee6HUP9gi4Po4sUadBTU94 L6Ni8RWsPl9vqjYoorUN374tzo+k3bv5Z5wkuZFd4SbhvDxKFN37+XQfBeexwS5R5/gdzXr3R5FV afdTUuVVx1f0isWW/CVf9apxLLvnZ0u+Prs4ZRevXr1lUzBbHWGBomo+w4LZB4Ckjj2KxATA/9mb N7/895vzV5ZmdBDiVq1vJHli6T8pAMKx2TjV1tRCVi6e5QwNCrpo2zOOrPXdnIKg0DxnjBQRnW9a 36FNzYvRUGC5pOONqLvA5ibH0enL/Cu00RQSGciGa4F4oGNQPy62L9I5R0dmeMaRJdrpNffikwy8 RtNpdl1u5/f8HGO0NwKs3BTz9RKNR9HLGFv2eau2SRgvGkgE4qmOgu8o0qaDU46N76PIugOwgFcB 2IjmeTdrNFT7Qosa+/YtFdMg1e2lEWKaYcQC16C2W3XbppEbOrI7AamD9yYpB4xcK1qyJXwGybft 5FwnrtdTVDnurnnSdvdRcn4+kmyeewwdlH3YNxcuyBHYfT9BZYnlqUa6l3MIrUquW1VczH6Cbl2j yniigLjYyW6S2r3ibCOldaHu3disIqV+guwxHftVaVCDlMcW6hiZuyCWUn1g8WuidGnQFOpR4Tb0 J+JkDbQxQGsIF5Sfbnfi+EkcPLVAC0rEDrZFsaS2XznvcPfQ9UuqJlMS/nR2WvQlkoQYMwhA3rMN hxo6brf3OK0LIZSSemTVe6QZPB9wjmBXkVogPWtJ8dNNnV6gON4OJWl7F2jLEE6sK0JkejKlYZ9U VwCLxoE6afQAKVJDGLJy+GjvFnxqn+eMc/zkcd8HjnXUjMOW2iCOhvZpOL8tVqes2KGhLixT7c+r P+7QVG7Lzu425YL50Smd7BzUPlBdvrugXk/Rh0k8ANlUhyqsa882zfR7YB8ay+8/2VtPM7oZ+Jk6 Fc0g5ZHWB46zwKE9GU5vPEyKNlvfCxCVACpRpBP2Muy5x1kQ/bOFDvN+4yif/tiI6tRkV7lThyIc Xyv6NKX66gDNqlOrj8gX0WyljG39kwdZ6yqJ1CDRFrr8hM6Au9YKBholhTUGF3TNMx04uveQXLTW TkMkDOVDdENBrlNnJ7bzXBcFjkrbJPaLr49iyzjBjssGiQfmubXsRalLa6bZL/PdmvrhQZP6Y41E J6BQClPI8L65bZG734ofPnLzHVeUH+BjX7OOI3rJdonzfvuP36TF5uMYYBy/GQIA8wNwMeJRsgl7 9nHWOZ3aa3VIL78VvoivwdfAAb0Zzketrqvvc5r7TzWPUjTdhqsyi+H9unS8OQ4NFmNMjS0wFuG8 e3RqUWN0vm7oQcTjjDaGuwk/cZdGZjHqBt2UGqWrMRbH0OMhIBfdS34Ttfj4bTrYVd6d/AIf1X2S hhm6b1cjc4YkGNxi1HKqsQXGsJvTQ+cPNUa96VxOl7y7HMG9BA10L/kpSSvdS47JJ9J3l7MjadDz NWe3OJTYZ1/YO0gLuzb1wXNxyCfCujgpHkck8gi6n9Gea8AtOiQVx6YarzFDfoZ9QxGOR5afwQi9 inAEBg63rl7E6BFFvXPomGm8iXOScTaP6+GQ5+p1ir3dGFf3wpnKeIEfpgt8CTVG/BKf94GH6cb8 IxVD+JdnJK3qzvxLeB3KX6Zv0mtJlryNppp+Q76a0UxdomQFBzi7UZpCFvTi0VfQqJoRkMQo4EJZ G6uEC8+px/oZpgWXhLISejWGe2kRlKzWYirvrkek0NQFXNBq0CXpX0BEqFYnxBbNmEpaSFxT6s5M i98LcIYYtbDBlCAUjV77XOWQlTfwmpsBZPCzsrFUqYGauhsFjJQ7k0T8Q+KfqyXD1gLIRoWR3rGT t88YxNJnJzgRuboo5QU66VYjubxYyAucxlm9hYNHqguoVH6bC3Uf9XV1gVqlD+zqP9mrK/78MC49 zyAAiX6GKECRS0TCIuBe6NCk0LntP2jzQkb4+2+NWapujVmST+fJ51YXL57BumL6IvnOCzER6hOw e+YUqXfUxUvxnVDOZtj8zsXr+txV0oODlqnNaUyleHTwnIe+EgmsOKMTsLw4SVsQjIvCAZQi5Cdi cRLB9tSSe5hfRBIS/mXxTyVHUW2GzsFcTMMShAfqH8gCxsB/j50gFBPSRM5idvLuGYvYScLHP/Br zEDCp9kUkOaZyLCSVadKQaQQEIIpaK10NUeJZJtMrCnFyLMf+Y/ip5+Dpn/FPyAQe36eB7OTF3+p iK8+clq9EB/5oRr8N/5tMfbihbg4x0fxVNVHfojAREyByz8a4C38UPUW/x12IsbeP8N7+HW81/PQ 1coGZ3AMK+Tarz11lNk8deJUZAT8Nyt6QOKfQCkIeH+ingpv/amiSn5SvAmpxif/pboNmNVDcebS eS1NgjuZQ/Nw9Y9KN9QqGdugTEq1AmUwsxOAsgyqn7CUQGQZnR5KFtYKkQGFzuiLLEOLZg7kcBw6 Ou/p1y1gdtgKkl8BWw0fAi0FIxzVnqIJCVHWGiNrjwA4AQBs0kCxWszxA9YzLWj5VQ4KmrdbcORi j1q8kMzZLENATz0fjTA1sqAn5kfCyzngI4RQjc8Y3wJtFS5Qtk7Z5wiWF23d4jooVWM1my3HZspC RxBHL8JS0SNAnRlhiZrNpkOgM0TH66AU/bOcxMt83EuA0igBYqGNCpouOVIDpepTNVAqx2YKqci7 a+yiaKjhHiKa01rDOPKJcC8BeeVT414CGKsRDUoN7xRGiatXjUa5H0GgMEPOArKeVkJWe00CJtCo +gwHmBkqhlEwjBANfY3WDoefAo56bkyuDH/PczGnBhZFno1gLH6XXwk0yq8JVFZwdFZ9iiCmvkP1 Cvem7+Ad+bv0W/y1okqiUUk1wCzQqHyF7w9FozjTEY42SWONnx2cAl96OQVQrKVKSvseya7J8UHJ 5vcSrpWitS5Bkv4WGo3AfJyzBRgh0SjqUdIU611qXulOqjXaCbjQXgcH46rSEQ3mAF6FZ16HWmMB qcChgCEm2noYQCofYgpEan/v+jw9NiQl1MKRrvzhDkhKis2PNSClJo4xepU2BYi7L4dCqgqQklIM 4vpRa9AAvOh1D9irY9KfimcMMAdeC9BZdQ0UCuRZXV9zTPPy2cwKeeKwJjf2IzjATWpIfTWhZyvk tC0/rXAOyKED8towRzp/7+CqecBbFE2YAOZ4FGKt45yMIlK2IIejo1kGIMKxEUAONkpDDYvXLZCT uoij+3DPUmwlRYxBXQDiSNU3Q5gdOxng0NSiT2qsrg7l57RZB0DO4AIpBYl7oQYnIuWjxviR4QFS W4ahR0NDjwCbNvTIxQU1Oz8DxXygbubFUN3KiyFt5OWdayOBQ78PFa3HJJ11FS2fRpsO+cTayIsR Hk8ZFXmCXVV2nq45OhQ2nr8nrDbxVIabSGjI5pKt97yE4njiGjCpbttnnpdFwrbTlbTtdK1tO+5B n+LWnIqm+B2qV7h3ZdtxJ/ymsOu4FNRIu15RSjadX1nZc8LVNQZAuXlc6GpjQnismAIcIJGXZJMW ajZMgGvYVQpGXYDhi3BaDbrUWCO6RHKbUp/ouj1HRwrfb6pjS3tO24dFmP2f1JjTE0xiye1u/E9j xpFcQXyXkKCILCFL5IaItTQlx9KQIzaMPhpCdmBPp4ospTygMS6yhL79RGQtxpJGLfMuoo/1yNLf KGKCGAlCREAY4gVFTxBZEq8QUkKABbEngBIx9O99oRSKeAZwQWG16nTZh1L+H3mMUlkKZW5kc3Ry ZWFtCmVuZG9iagoyOCAwIG9iago3NTQzCmVuZG9iagoyNiAwIG9iago8PCAvVHlwZSAvUGFnZSAv UGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgMjkgMCBSIC9Db250ZW50cyAyNyAwIFIgL01lZGlhQm94 ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjI5IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4 dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMy4wIDEwIDAgUgov VFQ2LjEgMTUgMCBSIC9UVDIuMCA5IDAgUiAvVFQ0LjEgMTIgMCBSIC9UVDEuMCA4IDAgUiAvVFQ1 LjAgMTMgMCBSID4+ID4+CmVuZG9iagozMSAwIG9iago8PCAvTGVuZ3RoIDMyIDAgUiAvRmlsdGVy IC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNXVlz20a2fuevaNedWyPV2DDQ2KduHjSSk9FULMsS U6kpyw8QCVmckATDxY7n19/v9AaAFEkAcVtIqiwQJMHTZ9/69O/sPfudeYHDxT+u63osTHwnYnFE /y5z9iubs9fnK4+NVsx10iB1vTR66mqwGrGARw73I+aFsZNyfM6LAifxgoBFPr4sHvhQ/c3ISQIW JLETRuVHBrXfZC7+x7N/x496qcfFa3UZ09PdAODih/0o5mw0Y/8YMt8Xn5J/BsMZez0ceo7LPDZ8 YCfslA3/w94MAUhl+U+CUl/+oBEoXup4rhc9BQozoAz+JCjNsOJ5TuJHA4kU13HdiLPhqI6eEiaN HtYUQYNt/jgEVQLWSAKfs1hCpfAjoRochSpbsfVjzq7Pr9ltvvycLx3G/ll8yXH1kl2dDV//CK4p lrNsOv3KJis2zhfT4ms+ZpM5y04H3Qh+aD0+6Bwmka/Xo7BcY71d3DZkvVaYLaXADZw4MqzXFLXM NsG7gTWePNjAVho7cZh4KYu7gfWQL/P5Grw2zsGR2Vyw5duffgU/Dh83gkshFuBAYtd5Dg5cFyyf rza4i8+vrfBiwJ3QD8ySesCLEfAcQONXdc9xKbfNit2genvFPuVraJIHUjDrSQGVMp0WXybzT0Tl GVF4PFmNCigjlgkdtZI6ygqx3cTxPA6bKlHcC2K7sPtu8JTN+87mN0o4HI0gqTHejtHbBaqxDtxy ioRPsNdBMUavI1gfLhuqwC2omHvIV0l9J/X9MGFbUO2xXcpXedUVlENW1GhjDUpLZ+XCmeRrK3bC 464Tu2F6EEk7fNQZSYfoBWGHenfhIndj7sVo0Y12h5nb8yO4lOTc18F6Bjby/NRJeEmrllw0fhwt PrLVIh9NHiaw2PNslrNiQZp+RQ7kxT/Prz8HLJuP5WUEjW9FtfsJeC4tMdoH3R6HTpIa3d4XpzLq BpYx0xRIKCPN2OX6ryuW/wH6r8lfg+O2Ig6Y5SM4eJPVjNkgNuJjJ/KTkOmltGTaUbGZjtl9zjar fNxQvlvFFX6AoBohjgGwD+Y9SpyI98+8dwMLqmVW3E+mFCisvxTL3xzm/3R9rV8JL3OUrfMVu7xm 2Xi8zFcroYVwQcw6+Zzb4ExfhRORWlUftFDkgRdTneDpjRbqBtYiW0K/rBEtjDdLFUWw64trdndy nY1+Q6xxka0RSCyLdTEqpnenr68vrmrvWSE7j+HFUyZOraoPdA8Dx02RUuxZHNkNrCsp5XenbFTM 1/kfa5aREMuQcvGYrXLiAPABeRogObz6BUSd8g1gltlkXkyLT1+t0N7oerWyPtA+iB1km3sn893A gq73fxKE/Xn4xmh4pcgr5ntgEvINMtKHQisPsZWXIr8eKYBb+hcwLkil3p0isfVOZrl+efOS0hsX 16SONAvb4UaZz9qCfE9gofPWFSSWVY1dJLbygUxuNUKEEYf9U0TdwIKq0S4uHFyksb48TkaPlLXM f99AIU2FyilAbeWYIAqCBnrIRrljheBeSJnrGEUgieY+qB+fO0GiE0k13tsJ+5tWTFqlaUre46HD OTJ+VSPYg5xWN7Au12z1qGOXeSEjrgwWDmHX7Rre7sNmqsJsGxLNQ+R1At9jUR38wwS2ktfhsLVh FIPr66BI7/Y4ge/hMIx1XNAQV4IDB5Wa7iETgpQuinYxEoV1AA/jyrIweEh/9y8A7AQVvMCHyafN UjiAH25+PPd9L/wILQyxYKvNYlEsSTzuv8qwUCWoEBFSYkrGila0sY7/5KL6oIs910mSLQ3Yg3JS N7CyMXKLFNN/jqTGayi7rTwXL0TE7FJOtBuQU8o1nKmcw9kGCc9mXROtgOQeUkzcQw6sDuRhBWNH GSPf7wUR7EIdlKbKuCbLCONufz47O0ek9+HP4A2lrCTicbivAcY3tcAa0IM9QO/0I0DlBEnk/RkQ 94LmozkngaJ+Ep/HZfejHY4rk5o1jNV7Yhr6dw4/2jFFFZQqEYlgbkw1E1zEMYJbdC7FUaKbm9Ak cKRBqpV8lS6ki34uD79TdSGPE8F6Pb4bWFR9p7yoVKEqMSoaMHL2yxtKiCO8IVdSKDFRvYmEeY39 6CNDFd+K1TQMrxbVA7sZosbgh2ia6xfZO4IFQk/I9cmmrMyg1vSu4gG041BmDbly2YYjOcAK0XXO VC+pD0RPUoeTTukZ0buBZYp0omJnw1Lp4nHYDUDR6YOGQ9UA9BWJMSrMTak1MfuUs9FmKTrGFsti RD6VrdIxGlwjl6N/V1K/F4zIkcDtn/ZBu0IHsBbIf6H/S+QpHjZzJO5JE0Eh5QjF0PuXs7eKOwdt G4sPxeBc+6WhArsRYZu6yK28Cc7ROBS7MXisEwbvJ2iig2VGfQsdc//Nl0gwotBBiZ93NcEeqJb0 3eTtTgLtEOoQTWuZkPA+H+p87Rx0R10NQ7ppfxdDrShqvOEtsA7HX3YTPCGc1jhAGbJqvo4nw5q7 qls8dLjJyXTwdQRrln2lHg3F88UcrcGymHJTbKgAfDaGmVhPVvmMUu53JzdniBllxa8QkvHLGzsZ d91qpNfVSDaaUr4VE5ogBblQZNy36T6oMeNOCNuK7s23lpR0fxKoI/HisGCjbLn8ykBk1Q9MvcHG R6A6GrqKVR58TX3joDlyuXMrTqrOEkgE94LSrhO4RsZrFG4YfO9qvi25PtwDG6OPyA/dlIVRDZQ9 mZNdoJqKQiuoKlzXCarLskW9oblQ4A3MHq9DBtXjCcLJEE5mHWmH6dfUF2mFKQ/VOS9Ok21QmtJv iUJnvlqjx2+1Ii+dtmZANY+mmzGSB9jW8U60f7Ib9Tn5kpA66LBz7BBSfaOJFVL7IJ+hj2Ro3zTx k0Ad0cR3J+9u3sGkKnrrZiuZEahsJ2NXZc+vY4PMPEE+PqANlmIZfSBygM5eykVKR+uwEFtRd6Xl hwwgI7pj+48Qt5Xtr+7lbOrzdQPrJv+ULcea1VDmCeACZkvaqSi2Es2RGBDbFOfjiWzvlNpnzdDt hf1l1nIEuskrVOvqAxMiRvNpW2jV23/+xHTYDazifp3Bv4f5EFQ3LbsrSliuWfEgXHrq8Ks3ANrx +uBCRMCsXoui9h4LueNYU36joRPRyt1HiVv2+mi4+qB/sMOGR/3TP93AEplGdBbnyEtdztFIgNau DAHJKn8p+A9KaJlPkbdi2MlI2Rfd5IWsDL77eTK22lYeqlX1Qft4aDF1+6d9uoEldI6pjIjqx2G1 QyL+WjQaQx3NaUMBRN7GXnn0XHkJHIxQLawPpHfRaejH9TRTDwxPN7CQX7Khq832TETKVWwd9hXt BHyuh3kLHAFfHZQ95mwnYN8sSLeNcqUXRb7+ilF6bk6VGqhBUSyeKJ9MBYTGJbMiFqrPSq+oF1KB plczR0Xitg9C0QUqWDPlj5GNqztkyLWNdEfTty3XeAA1jZBXcgXMLZ2uSj9gpcadPVCqmFYB19EO J6qtfnWoa2K+4yA2DQlbeYcmJAzS0PHT3unnjmCd7+73QVen3Ff8kt0jSyxrY9T4mX3OJtPsHrsC adAE+2LLHdOtC3pJPVA/6Ld3kNnrWTDYDarVCNsoqOsoCsL0I1zxcsvxvg3mX0TnAPEArNGCBN6K sGtvTK2rF3RHf28U6VRUX+xOkHQCqyR0tS1E1P2QZKY4DNxwNoVOn6OV+3POvmRfV6pt5N4OyVG5 DzxUO/SK+kDzGC2JrlvP+T2/rxF0AwsB1AqKeol2fRuOuKm8dAQPvpDaT1BVQ6YeSVsMqCL5dxv6 xmS+Nex9YL4ockJuFE7N0dkJHZpStFUBq3R0QjRsIfldM3rP3+8Ao9UFrAJ2Tm1bZ3B6yu0tqqC2 wgbncyrIiM1LH4a3SAZBCXy0wngpp+mTTC+lD3yHXRlpigrq89dcggB9NjSks5p57wHfdQMLfHdx dSu5qqECVuLasPSt681baHtWzeHHTkTl+CeYqYzWvsuo0QDzXf0k7dusUQ1WjceP+xhnehbUCP0B 68dCTBEVk1loriPGOf6xpm4dKDK0DJRDAZFBEl1ctjp81YYavag+qDP4lTSKsKpCjqO3edm2VerA NM8EnaBaL7P5CtVXOEK6OQT1utKXF0EbHHczdbbcjmDDePkYk5v6MWYqCxT3gdgo3CUhBkr0jNrd wMJm2oZ2ohUTmox50A0smkAnN/iy/AGqhTaxYFMYceSEggtEkUIRQQvNst9U39Jjtljkczt9oiZL pNbTB0akvXOGD5/VAlNRwjOgNK1FNFeAWyFFw74VtBl1AesMmadHUoCV1MSqmG6oLCgmGtOY2yXK hJgLo3dDoNVhMkf9BKOLaGqiFU2oyiR6VT3gQD9Fv0CIYlS/VGFHsNAJiVZlaJbLKxsq0eQutsA7 LLh2iojai98Cpangnl1c3DhnN9dnbFzM0OlD6V3P9UNK716p6fOiyYv2taip9CKpa0UudB5XL6YP ggEnLE16V0D0u4GldhlDMsQ8UFFCXG3u0S4Deg9RjkMnjdztl2erydQGkTkSVW6Amf56CYrIezi2 DPvUVKyvOAkBiWbMjiNfAUp6M7vPl0rMv2nlE930ssljC9KamO/A1zS31soJM7k1P0bbAoZM9E1P dwML4QjqgvmUOntWxWiC4gGN7pqsH+ua+9uPkNN4bKRhmmruViTlcGlc7jMNSUuKloobjjPy9PP1 5IFS3tQfNRltppkdkdAbEDXUjfBnWyS4g7l6OmnUl1KbH3cC67/YUQdd/GOxRFImmy2m+UsrLkyY OMjacrBfDcyabvvOdQM/QoNEYnRbDZRSzX6X7B+mRONICp382wPJdxnTSEYoCc208hoo344+aEzB 0KIoxZwddYX5Lfrq2FlV6HbH5Je6SULa/cg2x/PHfP6SYed0NgW/V/5788cCMRlGNS2Wkynj4UsG VelXPiAvP1zTLqfISp2ltPxyaVa1nAc+8vYNHSoNP84mCHE0mDITlvhAhOP76K03GPoHQPl2cmrY zzBihTn3gaiPT/M5an3B7tbbI9tvLmkmKJzhhhq3mssYiOPktMgYmI+LkeeG2DkaB0zD3IjZOrsk u2htAiKwialm2yA2ddkvluj32xFgJKIJz112Hx5aBB3b99TRehyjH5MAakrj+SlJKtlXKPfBSVM8 V1lBniy4wwrH2ZcjDYgz/+ATdmPft3L0/g6m2btR99ljh3C9T2uZo+T0QhRPN2UYBHSk9HlDOWzl d5e6vY7k59CopbpCaYRmpz1/3dPHpBIcjpI00kKWHXsX1WCIUcvICOxvg29MMc7vBhbGuMnAlnZP YlQfoj/HfU3eruiRhMdTTNE5RykND+dtOkhdWti4wmMcTeqFsDZqFY3o3FQLthJE00WlQWlJ5zIC FlktZA5skL1UF3WyP6u6cOFfYPJfDWHP3+jidwOrLEiv5G4+mYlmY5wYQj1VTDYRox+RtqL+vULk b5YWKnOSagmNpMKKmjEOP8ehdp5pontOduNQfS6c/vbs1lwVV/0n4UofGjBhStIdIdP6tdn831ag mZPttkCr0a/0Mm2eRGiqVBqUlk6Y0a8Iz6+HN9Q44qjZhf6nxUJtsXWK5ScrdXqueh23oN+DyO+S i+GYsVOOoaxB0jAV02DALqpNLpwejnAhCXE6Oc4H1xeIbIQXgv4kHqVwzMW0XbgR2GCCk44ijB+y NW6XxyjAu71rjOoI1q/IPdH+JJT+c2xXQPmB3dyIgxHp+Bo0vmNf+XSCZpQdnrfhk5mZ13o1LQVV HrQm5LCZRmvlppmJeho6ZQYssP/5LXg9dUMajE/RMk8Dz6NJ0vrq9rwe2r+CG51iHKeYrhjDtRX9 Cz7ENISEIIcbshky3Pg7UC+n7Ja9b/YQOMriIeIR8gX4fzpo+QB0u0ko1CNwEBCTUNCEKpk2UiJf SnpV5JVHAFg4EIGcFvd9CDsOx5aDt7XIf6MZk6UDEqElxI90JNg0dm9u81uxoQm/sHIBVs0bOd6i ScVthGAy2EKQNWfFcvJpgv1KOXs//Pf1mx/OXrL35z+f3d7+cHnFqIOE5kmgYc2uyNeRXBOq0k04 aN12bcoOYrVNOcJgYejgfGBMcMdQA8zpVzaFnnZkhHvVRRLZr0PeW8lgIc7zwtmXLdWddQZTYLVk sB1TUapl6rDWO5NEgK/G6GDOrg3mMp5THb8WeKuqsCtquo3CJuJ7GI5KyjaGYiNdWX/dVGVD/2HB 8jHyIVLjpqnSt7Ws8NOmQz4CxiKVtkM/kk6m12qbzEfTcb6H2xtLSQhw2jNJ3PPn/zh6EyPf40oo uzDN7iDLHYXUTD/4qAeTU9ukJxHzkJWWDBGvoI2JGtZmm+l6UkkYHKJcKxjNSeE4XrQKYw1dKiYo IWuaRttRp4fKcnrY+xYke8z1DkyPBTqpmmbOqoAdjdKh2qksTP7KfhyVNu671PU55n1yeIx94G5O /T8NuRsf1T6A5ew27wbWGcVQkDoaP6OOgMVx4yR+6GChIR/wvOQBsdvjmV5SICaHStswhiZ/qxf2 J0i/39P6AOp47CPU2piJwbPfyDLijEQRy8SY2UyWkZPiESYuNPbouFkb0NfIvOJ0PmkZIZTyVRmJ yKrlwUgkTLDpHkmAATrFkQhBKDLD5Hx5D40a6t4U90KczQO7a+6FCQZheyi+0mGFaRRjaKi6M6AV xhgww0bmHpaZ0swZ2G39MeGTIv8SVh6O/RvY/Y/5SQYsfWfEUPuntAjWqe9NcQ/bfbzQL+/R1kdX gAWPVzxd3wHKJAj0KP0hDSk9St/T6ykfrvGgQSixNWKP8KQ5+8I+SFY5TjrGUxynyOMgIurjeiCu 0ReTYrJIiHHB4jVPxRUceNAH74lXUQycyuuUu0CmukYPn/iiesKAwmy8R79DV/gO/B95je9wOFXy ofQpEX+m+gnyFZ5N30HNEIe0xPQ74n6soTFPoFXIZ9MVYYNiaRPyP+VBUjW/RDa6cVDGJ7ar3FPs 04goA02UkjWJ7Tqx8KDkTc0YVRbWsFbhKu/JgCrAQcYRNXfRsXFuiMm1JN+ejwvxF8E3gq9fWXm6 Za1ZyE1hPnAeFxAnLsvHgdMjVHGV54Tj1uhT8o/yAHxtUT6wk5tTBneYsxNsIJMXcJrkBQZmyotM X0z1xfh0IN/C2Cl5gYKIeMy1eY75urnAhz+y4b+YmDlN/H90EUphl4sIESbEmLmIJQ1n7PVwGDiE luEDO3lROnvf6NlVPOn14Xg5uWBz8foU+SogMNLvvFaoMJ9AL0MdSbvvoLQlHsI1YoPt75y9rWKP AhFSOynteScOiqDvyB2EFEIJ4IhdPwm2GUiwy76+DcVAMDAwFWlSnVsE/KKjLxaMpP5I5CNnIJEP RjoHdYGFGeD2zR8wA+6BATx2gs6qgJ2w00HETnCOYMhOUnH/o7gGAmJ6d4tDRIpPsrm4DNIUc1Yw BkFDqTiEXF4YiOEIKb9dOCFXBs5L9NQCmn+If/9X/PZfBJR/PR0AJnmHKIZV/E18CPQE4GAv/OuK L/xP5f7dqfi2/J5/yvA13Bpg2Xcn4hWITS/kx9Q9+Tn5HUe+Lz9cPs1ICiqdKtVZxYPUHqCWOHLP NM4SHrCHfj8epKsNet0JkF4BFS+wTFrt3QlQ80rBSm8AR/Ty//QCcR3KW8DYKz44OccfUBPrwFsv xE39Sn0X+MJbfowP4oHqE8T+uEtrpbt3eADhSz1N/YT8pvqiuid/SD0FwBoc1bO6Cl0hMgs+onmD owqvIIW6H0eGV+5O8YvADGDBvyAaoJV3/gI5xQtCmLx3GJRSuHAKrV8exC3IJRKYR7j2hcKAxpnE hEIyOIjw+QIZJfor3wOPElH1e+r7PxxDGqpOmOnBSalISLXPfAhA+snhf6Ref///p0BHSwplbmRz dHJlYW0KZW5kb2JqCjMyIDAgb2JqCjU4OTkKZW5kb2JqCjMwIDAgb2JqCjw8IC9UeXBlIC9QYWdl IC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzMyAwIFIgL0NvbnRlbnRzIDMxIDAgUiAvTWVkaWFC b3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMzMgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9U ZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQzLjAgMTAgMCBS Ci9UVDYuMSAxNSAwIFIgL1RUMi4wIDkgMCBSIC9UVDQuMSAxMiAwIFIgL1RUMS4wIDggMCBSIC9U VDUuMCAxMyAwIFIgPj4gPj4KZW5kb2JqCjM1IDAgb2JqCjw8IC9MZW5ndGggMzYgMCBSIC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AdWdW5fbNpLH3/UpkJzdTXuno4h3avfsg8fJzHpm 7PHYnZOHOA+yxHZroktHUtvxfvr9FW4kJbWaok2bY5/TIiESKgCFwh91w2/qH+o3FcTDUP8ZjUaB SvJomKoslb+bQv2kVuq7J9tATbdqNBzH41EwTo9dDbZTFYfpMIxSFSTZcBzyXJDGwzyIY5VGvKwr vK7+ZjrMYxXn2TBJy0cGtd9UI/5T92/8aDAOQn1vLzOpfRRDLj8cpVmopkv1xyueHI3SUF1NB1Gk n7cfV0v13dVVMBypQF1dqwul1CN19U/1wxVEVbriI8nK6YU8jsK2ZC3vFrt5Q8IG+2N0qr+CUTKM R1m8T1itlwb7vfRtQ1IO2GVwYuiC0RhWCYN9UvzQqdNE3ayXxUy9vtjdFOrHH9SmOY3N2StI02E6 Cg66y9P4AHsV02L+rtiqyU4tisl2pyYr9fSFmsxmm2K7Vd+Z+3eput0U1/PfHw2asmJ9Vp4a8Shm YiR5OUMGZobUOlftj3jTWXEW85WTNRgPg1GQ1ibr4GpaH/FDohpP1rPIKidrO7Jui4168f1zNV2v VsV0N1+vXj8aKvX9/Pq62BSrnXr255/UhFm6mP9aLD6o3Vq9KdRku11P55MdPPx+vrvpduhtw3ox 9MEwZ4Goiuk+jHwbqorJ9EatrxUSaFvAAi+EBXbF7zsmdp0hmOcztZww9jd3SIPZu2Kzm2+LTgY9 YknM41xlgW5TH8Z8FA+ztH/TvR1ZMz+vXzx5obbFhsHcsg7dbeert8ILallMbyar+XapZsV2upm/ YY7PV/or5Py7bkYdTJOOABy2UXbY/UL1gGidr++2DRfQs2RrufrUO7u2+hzgjaarz1l4w68+6Tgb xkDRqggCKdZ76JCmxovPHlUaA90LYP3i046qbWXBeSosBtKYTrbFpZqoZ8/VzWTrlps3i0Iul5PV 5C0sKgDzliJ4uBN+jMNhEoH6TV/3QAil4xFwcxTXhv3LrzwtyXJiR9YVRtWDCQswrxfr9xpWaKFT yikWqA3I83a9miGsOhn4hJ1ZzvR2DevD0OchW0+WxOqM78HQtyOL4ZZF5iTcuNuy5PDgdLLZCOhA KrDtEK4YdjLoYcbckh28bVIfBj1LhvnYz/cvuuCk+TANPf/VSCk3OQOrkTi6DA/DBqqZfBSNQ9Qj wzxBSxMO3IUoT5B+wShFICfsuhmpJEI+sykchil3bE4e0MqcteqXS20asPkc17Uy98280GtlUrZP R7vhUC1zFl26E3KW/rQdXS+L3Way2i7n2y27vC4oDGK0bkmU7VNY4xmLTcr+atpZe8hEjU7qZ2Jg UpYjyY911n2AqSTqyXq1nc+KzUR2xA37ShM4qOgbT2k2ArBFMEZ9uEfgsb6qaPyOkvLA/HryShSe oyTPw5hpFYXjOAhyytzVqyd19eS3Vj+pNatZlg314hON82GiUnbjiShal4O9goV6pZWQ9mVRnt1X EQpTKsqHY/6ppYroi2SQ5LEpOLMieS9xtWj9b0y1g8a1pFlaa5faK1gMGrYrpadq7TIF1XYNREv7 YAeV70m73F0E7qe7TLv+MfCK70OxcjBTTjFiKe6SeDgaR2kflj9mL4r6ZpK3Mju6EbzlLqcdWY/V dAHGFWXLrHg3n6JSZUO9XL+Zs4VZFbv3682v6FVYxu62d5MFSrbb9XuUbx3q1kKYCRW2Sm2L+jDm 0XiYyareM5zbjqzFfDkX7eibyW5XgGLBBD+y7dmq9+u7xUwrUwXiAnXV9g5FHNvd6/UGhQz6mMlC zSYftp1gXbezta3qxbiHwzjv3fYmakOV6MLXdygxbiabt+xRLxXjufKj+r4omOjM/W2x2jLaouuA MZ5NVh86GexRPgyCUKyXujF9GOwwGYYhJPVskrcja3J7u5hPNUTcqtlardY7GdqZYmw3xnqmwNzX 1/OpKNe3u8lqt/jw32rezWhjB8+zXKW2MXa4mypRIa+YzC5le34UZB7CjLN2L16X6sizLNAG7x6S coB4Tu0NSsQDBA38zvaejvr8utRWVFkcgXRhvbmeTAs1R9TMQBjLNaZbY+hRu/lSJM6V1rTqleim WNzKSrSdvOvGouMsuIL36ew+CKEA3QJ7ob4JoXZkFati8/aDulstxCjP7AVHMvSzyW4iZntRlWqV 22K++lUGWqy32HnfifEWVngF+uhEHDmkYVvVh3EfoZ4I0t5BjXZksZrsCkEaq7eyodgCNUVvul65 LYWV4mw5H3INau6PEQYgiXHKxsES3WhYm3rgnLWghAGuIWHAhrtl/90W07mszCITN+rdZHFHP9ZN DMa56pP2YORNDOf0YFMd2Vk96NfBZCxeNvim9QuVtSQLGTdRq7vlG0aVZe8lInCtXhbbdRewJsjx UxC1TEti7zas1Cgbd5v1AjP8y5dPXj9SempvX19sC1m9keeTXSci2mkBHO2NJnPHrJij4c8+t4zG wJanYZbc56jpNUBJjTyUqdZRs25+L80i1lHzlTF0q3wYDsNO2DBKIQVH1TqBdbIOkWxDUs5C1wGq hTxkQtS6CqXn0a46oCn684sXP1+9gjXxCPkFgIJjwHqDJl6wy3LyO3qV/yu8WmUxvy4uu1joIueI 5JrxEXPjUD1/VExXmVAzHAg1wbc4yFCKxSjHxHnY+BB3ZfFKsICOUBn0bSFoR9Z89w04uNjONxPt PyKbHtSrBv7Od3OWe9CS1dB1IWDDJB9i1IwYRtOvjZioG7SUInkCgJsj5cwhdhppp8BeFcWsI58r 43uzR+eXVBMkAKUsxtBchUf3mRDbWCP25GtDn6uWZJkt4HSNUJ2vtAevuOFsP6ymN5v1CuEqu8Kn MnW0Osuj5LV4W3XkgGGtEa5FjaZJxzgkxX5c3yl++XiM5ChRDyzyP4lGAE86t0w2CBXx+8GBRM2c Mh4G4WiYjRLESpW02mQtwdBJH5EGOr3ThGAEjka4hmhCLAfdAzpKkiw+Q2uPIQYV7bTYrDDFLbbi fcTaAPQWHa/xRxJPtE3diaKLkIcop0vHrP3VltzTpS4QqCGQO4o77gO95fYwHRF2syf/7vODaSP/ ziKrxOLtyHpT3EzezdebYRd9VpkPtT6rDd8B5m0qyvbWidMeMOXw4S1FEJBZvGqEVOfBQAeUNeyT A0JOTc2SkBintiyOz5yczaPcWvKRJau2vD/M3iINBFy+XSEd6mKh9KHXCFMcHqcIEYJpxMa7KRZz AaRdIM5y21Lv63uH3cQRNhz2s/q3HHYEWjrqnYU3aUfWjNHDRv9BVEtmQfgNveFOG1X8MC/vMLl4 npBL/RB8sd3iwN7JyDs7i2tXH0BUhAOlBJJWgfPDM6vzCd+OrLvVbr4Qbw0ceLbXd+KnY4y8YmEx fumAiPWmi9ENUaqEKQ5RiaX9y41uiJMnbmJAvnbdOCswUC7nK+m168l8cbcpOlmKI3FUzFM233U6 a6Lwcy/FITb6dE8U9mAn2Y6sV9ZZSRtQ8GwSy+PW7BcNYAZQa722LIBeGhrv4y6AMyGDY5yPE9ua LzdFyqUvwI9x1D8B2I4sj5yvGE8ZdHFuwU16p03Ma+NtgCFytd4stRujtUizkZoV1xOCtroQjZHf L9lWfcS4N9DUDsd7gQroZE3EguyjSBoB1hHF7SgbphEKeRJHSAiBCVUQAPVAqAITxW+/ddKKZtCa dARZlDnf3ab73s5XWkvWmQDgmaj575YY7aoRC+pKWO71xbOXV68fXar5EE+WQPqaMEJCwrZAsC74 Sw9plCcMaas+/gmfQPX1qhPrY+RClxxtx3Z5Dde4Q96vseInCiIICMrAST6IcSTAuX1Qv2/ss89r 4msv1eAhb+4GQYT329lVRLomV4miEsIBbPRAJXPMqVlv5T0cwmRPFRFKdCYx7ENylcQdznl8MbLQ irv+THlN1ZkzXhv27pZfM5d3ejlhd/Xs5ffM8p14TPv9qY6fsAl/PlJjGBLTnccZGsNRm37EiXs6 EfdtZxGxTlXW3WreyTYgAsrqQPk6zTVIW1XqnNjdH073g9396aXOMX08joZEFMUqDMdDPjpe6eJx gk2tdyudI+tMvr9DuYxb3kb7qOAY7i3dHi7vtPPengJh240dhhmhPYhdY74kkvLshb53FLJlKqWq BH12JlUJRRgGUd+kqqXqTO76091G/EHFhUj7dRvHIo/aMX7rCHxB85XIULWb/MpGjgRVXcApL8Lq Hf1lRRiYhIxxoQqzgODG7mVYzp4hTfumCI8tWWdymewEL9X7mzlhTHpJ3CrRiotvJfEOJpZNhz/c LW8lmtaqSlne1ZZoGRbSN91wmtOIunZ9hDg7xBoHq2WjfVqc4YI8AhsescY0xOmHpNRwulhsGwU/ xGSHS0KC6o+QUmKILm22Xk0SS1g/JoKPGKBPB2fwtMrZsOMNiHuxgPi2y424/gQJLjcEWu9fSbbJ WiCwdeyqdAnKrHFSV50faAoZp0EtI+STm2JF0Jn4OTHN5J+Hzg96gdcTCx7SXGnHPdT7+P84MdSf vzc5g+SDGdiK5Aw7bYh/XTuKf/j9do7qXz2+3WAbCJNLFY6CSHd89c/PLyRtUfZLJwuqcyjfa0Kb FfVQtux3coDHQfCgx0Ac4zElCVSPyJbPJOawOeJqP1anSGko5g5ly4HEPdgq1dKXeCwbJcOEOV2X LVLZA0rB/VE4IlEenp2lbInQTULHmbPzqUSWEWbWUKJ8Epp9xte4TvNp5m7tQdlKgrhMsHskNlXI fE+A6K4qLPQ1pmXp50Gj1L51hfGpRty37nhliGvEsZlbThftdjS4aNrPh9PlcEEsWfqexQWN2pAU yZHaI/Gefj4QM89MvoWDnlZ/n+7WEiuC5O7EN99H/OwRXuPhA3LPWLjrw98M/GGWiCSX0BEBXQ7z 5wF/uPoTpN4L7BdEpAgHEoekD8/R5HaswY0DHKJID3OmIIaF28rgU5sU71jnyLLMYSbYw24bGGGu 528x55u8JZLMb82GD1OgMRaaHSJKLlRehcnv5wNRjWaiE3jkzIOuVb1gtBFmwpxt4BiVKRas9puM UwNaLviIzqx/bGaoOpPLZncmJ5eEbohfgVG/d+JBEtCBYYJPcVyjtI3cfgBCfiLjGs6VYhQbx5ih MIvp24G9bWwXy9n46kRT8qKuxd+P0uZZtSrVkLXfkFNWBJ22qk8Xm1xhd7R4gef32niVi9tJ1+nD 8TqEsycdAVwAF0AH51sW2lC2RD5nodT2AOY/AE2Npno0Fp4NnSrlHnB02AsdLymOrDMnuzia6Mij qv6wk8UvsHqAloTebtZ49C4lDH85mUkowdKkhmExnF9j1TRpnQTVd+H55MyCjvru1riqpJItZ4tc gkIclnpkAohbUu/t3TaWVNpyP5BKdBXaIWCch81dAIzpnyyMyAvJZ2h8CpjX3BoqznQAiEhFSPr6 Cn5sqzxsNtmRMuO8dy4AkSXrzMluXOS3yD0yb4oZXexTJEZDkek8Dd0jkivvdr3Do36uHc0k6RJv dDO3bDiOa1V3c8scUdTE0UQ4NR/JquK11J26mkQZrk+Ej9q292ZVsWSdyWjWmK4PtsHuOVsv9QaF ewIh33zA9EkyL2FAsWbJJ8n59gz1u3UnvOZUuXv9/UUQjIVTiGrEobh3fCYAk4VDslKeq5zsek8c WbLOZLVJ1RTqEntaMCOcZZL4SFTQnRy/I+EhGBIkuATh1gmLOa9416AzpzTC+GlrDfCpRc278TrC zuzpbzqKRrfnT+1RVZuRDXV3h3uKGsSvIquPyNIcSDIXoFWAN5aAmvp9Y2zFa4KnpBrAlbkDao0d MKoZL4+neXZVEMsqlNhKAH04jHW4+4tSDLd5/9YqS9aZbO2Egj54i7O6EBVLUFEZrq+zT3IC21qE h44v3M1npIO7dZuOTqSIU6rtdXZtWhxuMrvQWvpdP8fEke3UabSbKi07XzdaUSWBhQ7rek9AHTiD /H2s0Yrty0+amywkmj+I00DZvmwEdZsagQ4UKKdWgxCjwDgbZY6SM2eN1jCv35hzZuToMgL5BfVh q5eTRTwffkJ34sjmOzyn6zrRZFQmhESm+DNE+jMjWpHlYsnqB5iVk8RuAfUwE4+r0yyXFohOhKBL nyYGPunoRtOl4zEnODPDp92Y9Xoz5K2oqvmkvp+zT3sv6FOfWFjfj3WyGUPzT9afCGFoqD8TKBO/ 8FzUgdrEJRn8tLVCfCU74UW/c6wR+0XXY1LSJZxu3DdebEcW8SilhKlx5vUG/YFT8Fp5JAfYAcnk bFXcXDsZcEzHnErJAmnb0wfhw5YDLYFzbu2N9GlHVnn6JcmTJm/W7/CJd+7KjPdO8vhPLEq7Ty5d dzL0fq7bhvVi6HH4zHp3YAv5gduQZSQ342vzp89s+ISW3tUD1wlf1GfPH/pN1rb2D2bRYkccZVGu HL2NRrQT4O2PpXKknCm+68jbTpibNU7+T1cEik8WXexbIo/E7Hg36r+OkRiswQF+vROG7cg6Eon9 +uLpyyu/kzrtXX7W3s+7XUTtaCWBsihUcTcyh8aWuhK8Rdzxx0J4G+fKU5vWyCagcHT3gQt1GoL+ yeV2ZHlVCGcqzarZl2S3R17L7YQEAd7nrBrSZrcPnSzHLlNwZBvVi2HHNC/eJkfcOxtqqxssaY08 TUPWtuB4wFOpIPwsjqYhZukRcNmOj4Gnx0JqFCE15UmQGeDuR45r4qQffaLXM5PDa6u+t5nAumAq nBqIeo3UHs1fcj8X6iBJt57VKPncLKWjNHGbrGo5DgbykKjGPk574K1hPl4TPHo2WeRnNZ6MJuu/ eD08f3z13Z9+4vxz9hxvCr42p3zYY+M2xZs1B02xxNniLhjQm+Ncq3og1QhW5KDmz302wH3BTtrD T5LbtSTLuUtrA86lXs3cueiSelafI3aH3OlidH06OUd7I5lYpnZ1stDmM9ySlacYvtVOuJ8cVDls v0dqTQCVK8lJr87DNe0sYOo162FCVn7OxK4JoIcd5Lu2NbUk6/Hz53//8fmTH9Tf0VcZc+LrR6Ap p1ufr8ToKN4K+Fsv3Uliq+K99V5Yd6PlcLDKtaoPAkjHBvdPALUji9GcbzCO3d4ytpI96+pG9NXz JX8IIJ7ezDmsllHfTG7nM/zsd/YQE5P4tAux5PfxoW1RL8Ycf6Sod0dihJgbW5BlE25qTzczrmJq Jo0p6s3NB3jAohFJh+6Fu3hb2rS34s7cjV+SU2q6hvVh6AnXxcHB7aL6os8O25E1cSdOF6t3c056 WOI9e9mJDsz50rcklJRfpaKdMyjguSW5I8kmQlJln34Zo74cUNGJGLKmfEd/H1gx5Oiocf+kUDuy 5FiFd6T+1cfyoGaXM5/cqYXIIBFJDgqb47Ilz9rdqs4BnYy8l0K2Yb0YelEF9E8KoWpvQRbgweHN bmL2OOo6yMakC6vTV9suHKoGjuqx73fY/JltRqB+IdPOTOkQkarz5keExXAytsTFpJzYQC7JAKfJ MBD7Lmc6S4hKU+/NgbzFO6Q2kaMJlyrVx0Lb23MiWwZJztk8kmSVdZADynSozWHZgmOlEs5W5cf8 c3J0WRzgi0KqCXZL0Zi6fElo4qyn+oAz85QELRK0RyPL53AzjCRbUlm79AYJlSt02RI1JdVHjoKP nD2pK1tQRoh1kERlmSQEGWm6bO2DssTRIHW5pxJLq9Tly0yLKrXb3qEuR4Prr6m6IdQvVO/VzzCM mtXz/hx3nQ3HWTYA3pECCFaGC7inBfaeRDNjstQlfOXLQnkwjQMGKxjzvdwJ5XIxHej7jAOYR8JV 8j7FJGjRdfjKMpK661+SC3IZk3BeySXPyyYMNpDbgTBp+bK+cTXLS3zpf1nelHtPl6vH0U1lcpis a5n01StMSSNMZ4k+ovlYiBkJIsqhiIUwYcvKMJ41ZNS1N2QDYct9tm/E4hXWtTTouhzbO1qrrFSW mXjQmIJUvPZSMp6M5CRMkQCBpJLGdR8TUxjuKy1qOXlw0U61kQq4KpdlfbKnIljMKi047FJOdjIf ViCS2N/oT35WFy8fKXgzVBecBm8u5u5i5S4m7gKrrnlm9mhgLvCxNBcgTF3NC1+Pf91f8PAv6uov Sic7Ec/yBxth1+WyEUmE4xuZ32nS1VIU+PFQukUOtfmqFO6fqO5qP7n2Ba7B/uK7R7jx04Gp++Y7 2xX+CdKN1Dvp8Jv/su9ErmOz/XceP6v2noRTi8wbS/YlYSHNS3ImZ0byFA4gTUcxB4Xus9DJQ74s C7EKUU0kx1B6xTs9PCVuUrOS/TDdn1RY6QnjSz8soTzyH7ADZbBAoC4IKInVBdm7U3Xx8yOVqAs6 gvKR/vuLLqEjMnlmj1MCAcWaenMyJjNnSIpJkfeGVsspsnkjh/fVlHimQ2qZYJ7x//f1I03aN/pn X188UhCtywYXkb5JNFn/o5/6d/3UX/S1fdF+mG8YfBpii2AA2vlvPDy4ePJgS8hBwsoY+pbYXt+n XxLAefov+NWrf5qJVImsb4BkWJgEyQw+AZIRQg2SIfkASlMJ/rA4hpwCkve7KZDRr0lCA9DPQBIa pPbG1tAwPNdL81i4Iyfx5rKU8K6MKj3M8GUeirD4cZpIzukSDsQwjfRkqEp4JgcxCFBZATEYLFjN WHZ97REHu+nE9Z4uV0JdfjVyZdTlQYwv8+ufr70ssTTouixgcbTqunyZbZGv3bfa0+BKqKsdiGG4 wF4WwMg1WR883tDfaSgSjDmeVPCFvctQrZtrApAyqNbl8JBBPa4GcC7oQkMWfWUxi76ugBbzlACR sgZzR90GsmhGld+R8pIaB1cMpQJV9FUjmCKptspBIQYqx4JBV/iy8walRJZuUCDdM5Ava8TEJRL3 NFSQuCQR0LRWYEqlbA+mCEumMi8dStGfaR7sLzHNUAqpvQE5boUp13dE/L8MSLFt6AKjNK76C0CU 0EGU8RkQReQX2n7hHwtRwgQjL8lbUDr/pFZme/2QA6VHKBKkD8JxXgqs+t0iFINT2iEUR2sFocDv DRDKX//2V5Z5kARYEAwFqgChgJXigQYa4I1LMC9l5imQhuAuYAff/ME8/UfzlSm7NGVf6wf4QrC4 MePWojxtitqyr3EIifLa4UbJUfprCIWtRSRw6Fshkw8a8EfzwS9z81q3Qb79T1P8B/Nh3gGC0TS+ jMzTtJp3gGr8NSXmayCa1Ox+qKy0fI2qzI39+SGvULF5395Uq6Sv5HtTJJje1z+whfvtMlWZF+zb r+XR+l5nH8GW/ZuOJQbOhRUJgiV3aAP+KFsrmwVodt0wejSAaNlkeNp974OvKTTEPkwjQ88ki+oU 7iNT2Yadj0zdxPc6NotM1SdApjLVDDIFCsg5LyUyBRqcr2LjJZNqi1hnjS7OzhzjVvCBRNJmGiC4 IrrXFFXWdFfkUWjELmGcyil3DpdGaUDcUk4GqEoZromokOV0nPI50nKNorG8aVV30YiTPGJ0KSUF tqSGS91TVVzqyjy4iVztlRJDQxWXOlqruNS3yONS12gPS21Be1RKXm499KJWk+sqKtXfWbyJw5FH pcIwHpVKkKxDpSSrqOnRBmBIQbJSt1w5VCrXVVSqn9I41Ndg7qjbolL9mxaVkn7FUuNQqaFUUKm+ aoFK9UFFNVB61oiUmNQNUQWSuqKzuJdpYLhXg1urN4ssmVU86ov24SiciL43LPEoFUZohtriUeK3 0zJR6r8oILWN6ASRNq77C0BSrzXzijWnrjuhNYtQEiSidrWAFJsgx0Qdbmia6cwitMtB6YrdOSJF p8iK3xKRWlpLRBpgTWmAOJ6Bt9DdgZr4C+zJNZIIRuria63UA/3wBUgO1R7gQr4AmqDPM2+AP8ca x/L3YexhFOQJkY8yQP7UiDb46KvXQoGgIQ1FgYSikoVUgyujyHwKeHPPOIxknzCAqURctjp0v4wC 7eIvuFreNk/a7/dfA8EKTvNILbIAFiXjt4HDl4/1Q+ZVAaBWLykIz/ySocmhvT2cx3u/DKpK9vuB J0gIti21vKNDWG834x7eAeu/sjRDBRShKi3hssWhlX6EdvsEoJTHLQh3tPtx+crUVn/TdMGR3+FY LOlq2zn2JdlA8HNfmbf+au7+xgdP2jvzVdn9MhxspsrhMI2xDTRPVxiH2ss9TFN0j19rgEaonGsY e5rMtUuaRYcxy/hZSGEfKEpqGkPnSVdCGH/Nns78hQMpMc/+h3nUv1HWZWsxr18iOqlSpgM/QFfz lwGjyPw1JYaUSzb8fMEO4nTb5SDmjFPiCHOstb3xvuH0dpRosQwtVKVDz1P406O2L+lYegElPVKB jqPFlEhX8EHDEWKmyPw1JXQFfVB9gf7mSfPtpR4ZU8JksD/g6hGu52XztanIWB9Mif3amSIuHg14 3zxmy8xzQrNhBr4v6zw9KOV2k5zUYmyv9F8ybsKQGaTIVNcilCbRYsiQCSFzyG71hVCecbf6W91i 0xVWVAjd5kHaImXla4PKI7ZOEXCVOu3vM4wUPsyMeFSEGfmsonq7GzPjP/4fe8KXVwplbmRzdHJl YW0KZW5kb2JqCjM2IDAgb2JqCjc4ODkKZW5kb2JqCjM0IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9Q YXJlbnQgMyAwIFIgL1Jlc291cmNlcyAzNyAwIFIgL0NvbnRlbnRzIDM1IDAgUiAvTWVkaWFCb3gK WzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKMzcgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0 IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQzLjAgMTAgMCBSCi9U VDYuMSAxNSAwIFIgL1RUMi4wIDkgMCBSIC9UVDQuMSAxMiAwIFIgL1RUMS4wIDggMCBSIC9UVDUu MCAxMyAwIFIgPj4gPj4KZW5kb2JqCjM5IDAgb2JqCjw8IC9MZW5ndGggNDAgMCBSIC9GaWx0ZXIg L0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AdVdW3PbRrJ+x6+Y7MlWpF0FxuCOU+fFUZysd2NbiZTK g+UHiIQkJCTBkKAV/fv9em4AeAUhQ8JJqiwCBIY90z19754/2c/sT8Z92xX/OI7DWRB7dsiikP5d ZOw3NmOvzpecjZbMsRM/cXgSbvtkLUfMd0Pb9ULGg8hOXDzHQ9+Oue+z0MPLYsDb+m+GduwzP47s IKwesRq/yRz8j7H/xI/yhLviWn2MaHTHB7j4YS+MXDaasu+umOeJp+Qf62rKXl1dcdthnF3dshN2 yq5+Z2+uAEht+ltBaU7fagUKT2zu8FCB4tiOE7rsanQIKNYRLAHUzhWKgZDY91wWdQOrYOzqPl+C Ev5c5YtsyS7OL9gyW3zOFktWFrhfpvmM/TErHibZ+C5jxS0r7zP29uLU6rbIAnM78O05sc2565vZ WFvwzbri21on932gVKTHuR2D5iUkEt3WOro3YWL0X0tCPAqwJLKjIOYJ1qgLYOl4DDQvr0+y5fUp S2djNi8W5fUJXUnc5gs2muTZrFyy7HM2A7qL1d19H+gGB7FDLw70VF4O257j2H4otlGXRcWOeGT3 6eesD4R7Hrhg7Md6lYbAAx3fjsIuPLD9pqgLJ4uE077dWm2KbpAtspuiKLNxS/wdBRt3Y9sLArDo JmwNIVYxEOuJQmzfMhmmFmLB/CR8woaz3XVtYoOL2UnseIkLiW7HARSL2gfwf4Ey0hxi8HwXot31 oUJA/ke2GwYhjXZYlWjK75ZTd6DDOL6a+w75XeFDKxX9cHMjv8NEgnWknIH8bkmzG+jZt1pmP3UE 6zwF+pYQHJMxu8lYmf4BQTIrSlIp7rJZtkhLoHdSFOMlSZ3VLB+ly5K9fv/+w6/vz9/0IWw8L7Yj JwHBqZXuj/jPL0mBdoI4hirj2J6b+JzHtU+X501191ul7wpNPYoiOybgfEAcMD+kf5tXE3YpVNua xrw5BFGS70H1tmgIsVvVDdz27CRJYnbcQOI9Hy9a1UCuHZBVIQeqGRL7tr5iQ9j6UNoDN2ZuGNkh BJztRL7f386PXdgovlhbGBFH7Pz2UqvjLlOQHbn5p1Dk0rtsecYy+86mvTVdTcp8PsGOw95bQrsT 2+vde1ynJXvIaFeSco9d+cjSXraZD4rwiK03FnuHsNPMdSsPe7KIMXQWeXYUk4jRdNavhIkCO066 SJje6UxBdiSdVTahpKP7lAxGqTHZjF2uRveSmbNpKvVglrJxVi7yKcyIdNIrnTUX+2XpLAztwIVa 7PrQj2Ez9q3KgK+H7iAZmoLsSELLp/N0VLJixt5t5QibPpyj+C33Ejt2ExZ2g664ycFZ32flQ7H4 Y8mwCfJSUDzAnjxia4C55sSB01kG7tsL1cPLE8ShZ6bQnxIj/YGtxHiQ2C4cfK6b2FDoeyd6DnMq cY/X33vnrqGE7EiiV/pwDqqHKnyR3uWzOzZfFCPhpllmGZsWkNuQ30+hKGg+cehGwS5Xqxv4cNJG ESir0/peZqOSphDbru33sXlhssHVGcUGQLXMDY7f0he8qVnULXrhCie3a33NxPp48GaHitr9xI7I Wy2d1sJaxQu79gt5z406Erg2jyEmOBzjXkRigvReAqGNxWvVHPb7bLjK2AdqnWTNhdnKY91+x9TX r723JuwGmffjxcXHq0vXs53Q+QTH5W2xYPBYP7Kb/I7NVtMb8l5jM717bzdI0VKhkE05Uodf4H/f yrqha0PMQ5Ao+Pvjwl/IlOTkRAwAL7l9kgTm5PqdVpYgzRMvBnIoOYq4cL32pqQcwApdMAqyQash XY6BJSDHBG72R0iqbeBjn/Fkawypcvc8j/sNikgUeNr/doQl2iBnHdnbJOej1KLKB6XAOlKAwQel pNbtaialACJKxZzkQTqBZrRczSnIAKsTQmxZTDM2TxdlPlpN0gW8QmNYsE8RbbtEmucjaAhtCZHH xnI3JEaF+b226BOXuCJCD1Qfx0euMPhwe1Z8FO4rR18nwITfgV0t0tvbfMQ+3N72QZ8c7DaK4B9C gKbD4k2KdMx+0JR5fXL14QeIDAQ1L7MJlBZQ5dsLPYVeyBByyucOpIUE/wnC4otRoRvYrgvn5OCC mmE3yEB5As3pYnSfl8DqCsrU9YlQnMf5crRaLsGMwJQonAnmlC+XKwS78QnMZ7TIbxD66SOeHUA9 jMFv9LSGgHuOeAuiicNDfSfAsI+fwnPqKv62DBTsW0SLXM7COnRWW4mtraLoKTDukm/cRw5P4MFk q8Om/NqHUxSuT+G7u4LTYpxNcqE9i0jMspjkI+yhMdPuZfYg4ji3aT4B2+x3n8iZPGGbbJp2W+Vh He8Cx24I046HtuNjb0BZ9mGf1W27vQrp1p/YhbZKF+AIjFKIaIBbsRNkgrUikJc1ra4vpKZyD9gB eoCmBnQNda6lA2BTkG4YgMKq2JGnVKHQwRbkUE0kChugVJrls9gUAZJpvIBrv9gOUJ5FyQ1iME1S 2LasyjMjKEAYykFK2TZQnhtBoJrIR2bDllWpQHkeBCEOZlSABqV8OfTYSP3gQZhAVqpP4Kf606F9 FYTIx3LgUz6ONZ7fZzMEQ0uWTiDbav+9+WsushtfzxcQYm5wxtyucszMoZqN+URevm1ahAtJDQ9c wrbOa8MVB2qwGhmtDvdqk5EfP8Lmzlj8qQ/NwtN66xq8/ZAKB3/kB6VlEHjQW/fvY8atJyUA73P6 RYi1YV2AQwFIv7t4H5EdXikf8WdKpKhvnm1E1kybfjsrs8UsK7sSVBeYuRNgn0c+C5owNwhtgzl+ +7wgKgtgDcS2JsD3cI6UG7sXIXWahNUhS33fOu9kQAiexD5CDXoSh/YREumtk7brvKE7bYJYkwK7 eCRyv5Hh762DuGOdNwTVOxme3Vhp9mFUFggIMNfhblfC2ccYKmapaHjb2m6A29Zq3VjbVnppgNSx 0DF+xh3b6Xn0Ug/xRFQoPIFhtrDpdkfeiF0i4487MPACxBw4kkuRnYSc/t5TTQMXIUvkt7ZixNBT le4XQ3fpg1DFKsSo0tFwtdKuKrgu315cfWCvay62PqDkQWwnQNQ6lA0abrmdNgmnsZ3qwTViUB3y NGkJvYQyNBHWQvYPolni0lKXrcJqchBkaopBxBDyAinTE6tlqqcHVz4N4FAQjaBQlw4uFRSYo6mw 2p4vGgU0BzOVxmWrqRCpR4gymqnoC5pK26xV8Q5WUE3FDFFNZa83poFjSmNpxzI5woMOmILUmhrk Vmkgz8My4XSMkBjQim/U6t76YRsmPAjlV4DVim1UYF3ms1HGfkGwBZ4hxp0zRvF7tiwRA1zq2CDl vMD9+GwhGSQpeZADekpPEE6brqRu3sDAQXDLVDhKreewExfqTh9MuIbzLlDpcMz1iZAZlKGh42/j 7DafwbkMv/3HriY4aWN1B+5Wk9tFnVwSQJ2U63rkXtLZJX0srgsJB0eIAe3I/fTpDCvXrsJ1KyUe XDlkS6NGItYrJ8GD7Nha6FqxRqW9iJV7UgbYQQB12WBjy7QG0OFPWb1d1rdJT2sA1ToY88mmSIzY Lb1Ap1MhmtA1hNyX0am0vK0j0aW9iOo3UBS0LCjEDNXiSOFsBFhcIrsACXbbHyJSbpMdVy9n32e1 GRe+nwTYjYMTthqsI5mD4bNIvCkekKSMpNI5lVshQw71IYWKk4+yhajrLh/nCIND8JYqhQMJOj2V hahcHD2vAUhc5OHY3Ch8Q5G43aCC346y0kU2Fcq3C2haQDelpP/65pslarzzGfLqb5GAVaajeyrL 0N+nI0o0fooo3skSYfkjQdNFAwix0INAOUKHITwBddfoy2tZftwJLIV0uAvelmyErY5SS2A3R9m+ KPBaigQnUq1TlH0J/L/78Tf0daBisLwfnIPVC81aT2kISCfJ4kChGRjSu4F1lxV3i3R+j4pZ5Fa+ Kot5MSnu5BXtfKM+WMcZyfuEpat9s76C+UhtWnKjdCcvsvthP6pvwhrQDaVnQ33txZyqlA1RITY8 /tMNrKuHgn1OF3lKvUIgXJA6tKKk3yV6YcCyn2ej/DaXth6Z/L1g2Q1R0xWiA4+v5jAEhkMlInC/ K4bTILiWWvamV6GbV8sPOCq90Xyizvs2YoGbQLV2K6yBJVxth7sVdQSLbKQp+hEty0WWTsmFNBun izEy2OaT4lFoNQsks5FKO4PEo/ReKf0g9nqVetq80vMaAhFSDSr16KpjfgCqTjewXjHqKLEm+6DC rgm/rYKmF+HCA+qAEzFfzWcIGEezh5AazQwM493AqiwVkaYqUrXNLp8aLYf9bJkOdy2Y5n4tB/YK 3HLUNIPW8UglB6Xv6VwUAhfspijv4eYW/bV+unojZpChHK0XUtSNTdbgboid59Zz4ODxKNQ4NFLs BBZ1NaCypRL9DJZkZFG3vGxJOdIwshdV169eVG61lK0YTNuMja2O4V12vMsRA0hQ7uh3wypK+vPP 1PAnh5p48f0FGxVINfqrZK9w9b6PnewZK/SYxetZ9UcZELU2HNiO6AQVEDiT9d5nFMh5gDF6DwcE pC86IoBTk/NxBIyj4I/NsgdG6he1GizvV/hS3OqpgaROXPTlvFptmp7xDk0hJr/2wBDfDSzVPlJg UyKyag5DfihVXyVoQeaLkCk4K/pvB6P9y2peQ8A8vCbR8BDfCSrqzFLj1FVX4U2d6yjZgk66aGiC FmB+J7BksxgiQVCZpDd0Ny0mnyGnIZpTNrpPZ7JrreZB8FPUSLYXhcwwITmnQZAilpkbWmyohpvG f0tEr5n+LfNsvARJcdT0rc4PX94j0RGs1yLERg2AMtHrSvRAkaXvYHljuGWVlghjQLnr0a5NS8ll 0Qv96biLntMACNBDRklCLdjqWH95b0RHsOYF6olvqM1eAbVngcYjxarclrxEJfGiMBlaUspQec4Q ecvLx37QrvzdelJDQHuElDHqiDYwtHcDyyi1CJ7CE4mQara4TZHcRgF03PglHecFey0CqqJPWB9o FnkSlJ7jqUkoNLfNz6EocW5nNinuBPQ8Le8Vw4f5+uViRiYtfg3Ohux5ZreEF7l2OLwku45g3SDm n4kG7Zr04BCX8RdpbMHjJIsifoQUekgflRuK2NAYsRm0PuiDQD3VAVTPaghsKESOD3XcGhgb6gYW YhvS4tZJO5BCOrGHEJ/N0A8LSR3s/esr0RpLxPvVw5IGesW7mtUQ8I5MSz48tHeCSqbwwLkisQnO XYt6UWaPUC/o+wItV6kf5SKdLdFoiXJ9qEEamH0/aFeWN1ot0WIPAu1IpwmQbziw7Q67sANYv76R KBeHcSDLZ1aleOwX18cZ4kFAbfgDRnK7A5SlOCNmjTGBGperm9/hKiRNmeTO9QmYEvkFy15oUYdC 9CSGQIyo/Ub3qqHRYieoSF+U7bNIzjSFEHCtmpYCveguTs+Sz+X6RCsjP/z2CsjvF+9yWkNAO1WD 4eyqoeG9G1gUsVkUExwBpVFb+dBAB5Ruqj3D5O+9IbUUDcCzxVQUeyADuV+0q1kNAe9ogoz23033 1gAcHd3AmmbkQM2X01qjNDIcW3oIt0qgemXAtsodjk4LDrpjMtRj1paydX3HUkamWPAUIA/GQpvA HTr8rSUoR3lU4VZBySqHxG6skyo5OexRFU4LcO1xMVqR71L0A0MAR8Ruil46OXrGM9kEueETeB5/ tDlVq+PqQQx2Q+r+DDnTs3QNrMYKVV6TveWoB6qf9Zlaej9S7wix9yhYSRF0Tj3Qjm2FJkj46BbV oGM7iUxv3h2+rE3K6DlNsSNYlWF2JtSgmqxMx+i0V+bLSpCSjjQuYK2L45FwUBL5FfuJC2jHjFrs IUhLNOTGSSmDk5bdwEIpTbGiyhqovuR7odAA5T9TcEBpxGQD6RqtfvOhPTWHIWDZQUIdKl6VLtzg ZZt7uhtbbRt9pApEOpql7ho4LCvbl1mvifD93N6UWdP5kx3AurrHiU7w7WRnIqYtj+0U3GT2TcMg rzgQLHJ9LFsvKrludqxnNADycxNkXpls/KHU+XWDSia1g6fAn7LMREqVSUesd938YkmxHH1EeAKN QME7BHxi2zjottLYwy9vYrlNsPZzubYV/GvsRHI5rbHtMlJMo599IEGJbDYZfNuV8VJOtQZpVwMy bMEEB0fgqL89q1TptaKXwBMakNVBwiphN9Ra36iPpvX9Gkg7lM8KOKV0f28v5qOHPheNuw6OrAyS AS0aMlhxvJ+Dw56aeGy7aPPRvNcVgyNI9AheA6+xGStMPgeZ6UPH1iBqvWDTfP457HXN9PEKaxC+ 5Jqhli900O1zDaS2i0ZnXPa6ZDi4NKZzdNbge8kli1GQ5PrBOkhtl4xOSSioC3z3dYOuu6u3IxgZ 90PeHrimaPqEyMJnyldAlFMXmZIbEsft5ThDpiXIW72Ru0A2xwXvQ3FL46WFI4bsBC1DCSTdsdCN SXAijIBuaGhk3XtPehfO16pztySeAahWnaCqHwZSq1MACU3RekxYTKCrvx4/vu3DEnJRE5rwGBtS At9Kce6nfgcR3cj3sPs6LeP3dp6VvbiDTSpbE7AGF93YYm2XaKvmvGu3uzhzO+ABBM6WJTrsHuis 1ex3D7jom5LEibcGVWN9KmVGqaWd12dvaWTi2jHJ4wYtH5QtqiWY2GWfqOPIE9qW7UKdqfVqoq6x SBtE1DaAdRQRmS4PboRse2et1uswFfXtZOoIFhU7onk+3JgyYVSlmolTSkVbIbgioD0gjxRFYKoy UlVfLPK7e8Fo+2CwJlSi59WKw7bF/FHKQoX5EMUN6HA2NNdEN7DEUfELZAz+q3hA9tHiTKaYzXQD TzgecRC4SHrW/acm6WNPsX54SH2coIYz3OUSDwHbaHSLw+mGluPhdgMrp7TRqUggvj7pg1Oj15rN I5z42RFAedjgL6+/Y2+/R0tRsJ2bVT6hqtKMUWr+xGTBqgJjkevaU6aZiqXpqQyBGnEiMUruB8d7 uoGFREeEMMYQPKMSyawoul9R0BRIhx2IGppbdFuggxtRXvPAHnK0WwhYuUIZ1rKXsJrHEaDGUWuu ms0g8I1iBs8cbTQYWw07owNYr8fjXB4Ya+Kj6QR3IGGQo2J0EOB/ms41DeQ41gFpLIoM+lEyXPg7 ofiqWQ0B7zh/2aNDDOohzAHY6N3AAkIlRwezpiilsBWA40eUS6r9PhtNVuMMmcSkXwptY5LPUMRE 8qoXnOvuEWhkKFZaIb2tuSNlaB8S1NRUacgUDbyosePGtpussaEBGDvdwIJTkbqUSHVCqxF9oJIb F3cT0JdFJTVAMpylAcqGn2G7IbXb1fkRzgDOPsHLMGavzpecnV8ipTNxAnEEJtIfOp6+gWOMcfyG FSZcH23v0kmRdNg9HcvR+tAJegvv4GA8OPYtcSh9da2GEXBT3tz+42YCOG19sv9DaAthEmK09VsY MIDHPuQIIqincAM/zlEqgBJFaHIxGsRXd/Bs7OAkmepekGBwcgnTUOrNAEFND8F6M3aA7tY4Ap3u KJj0HQyFNGUE0lGKr+9hKJ8OMeLUN1+/SR3OHAJLD167ISEQQ6mHQrxPkIqhzD01HzO4nrKBQK/U iN2jzbfLHthHSSqNyO32Q0vcJMIZuJGDU0/Mx4nlJvCeBbA26Bs3ER8SQou6gIcdiE7YSF4nME4c x+GAWzycoJKA3tbDWDhLQD4gfsNc4XW0oGTmGq+TTUC/Y+4RiTIzIC4s82v0Or5Ev30JDb1O16jt FaDqscQk6IfoAy0SnQpjtg820ub2QRTBYCr0EYABfU/rt3YjyjqIKMBgKEojcw9JW7tJWoxkCF+C SWRoaEffkt3ffeyNkGq76LxTED/tde7hVNjARfzE9df9NsR0zOGCTgLmhkgLVk58NIOFpN5Vdeoo g6Kn5B/lPAT2MRCOF/zITn45ZSBFl52g9Zf8kOsPM/0B7VLkVxP9AUeMyzso4JIfwEPFMBdmHPO6 +YCHP7GrfzNxUhzthoOTUOpKNYnAQwkSDn3ClK6mdOifb9Oi0FGJX1Wy7QuNXV8nPT+cuCAnbD68 OgXNYgER2ZbfvFJLYZ7AWW3NRdr85n/VO55eWBw70Xzn9bv66lFxO1F2Qm0xiX4S2msUoI9w8hwD DeCQMMdbJyFBMLvcz4qEIG7Iu9E4shQrPLJgM9L76o9c/qBGSufAL9ZhCsg98wfkgHsgAc5OcB6j z07YqRWyE2QNBewEC4H7nvgXx3/iDhYiomfWKMUc9oQtRBoato2NFHwcR69grSm2fih0ti3QYn8Z wn/9jfjVv4t/kTD0LUB7T38s+YedfMAVIMLphuY7dvITrjC7n+Uf+TbhF0Bfn+IvJovpfCtmZdEf W94kfOK7tWfwfnNHrM+zwgmyEeO4cRBm0maaNjnA1A8DGvwg5nlGEFonX2PL4Ct5TyKB4MNj4gGx pcz3zinDvOVT8g0sIO7QfUu/oF7/P/Er8inaFhjxn/JP/Rf/I2/9pP7Kx3/CdlKjytXaDs053sVE JFDYcHhF/itH+VpNQA72N9xsu8zoueVHDRMA2+lqpKleEr/io3Vy+k5NXU5QXURiMRtz/uk/EsJ/ q0eAHgtrLDdCda/CSxN/ajW/VqhTL3wnxzwH88CiBOrumbx7pi7Vkh2xFsh1hk5bpzl0ZF1fC8WH 62txLckcmPsH0ITZEfKBIQAitoT3FYDAbWAP/3rywiMwiVIIdbitnlHbR938Tn5Hb1gnWF16/mt5 jzYh+Mr/4A9+Sr1WQSJ/RG1b9ZB6M5JQociKflc+qL4yPKIl+UDNQlcOczA2mdnHLpnXBO4MwNEi 0eocACKCfkzMXwOhLeo6I1ynXJru1e9SItcaprSwfSxj+1TKGz5tKm+X582DpCHWBJdDUj+OrUS0 WhwqKW0fSLCIjsaD+istH5zfd4zpYwnTBy/RsX10fB+sAtKE1R1pQbUzfSyjFAYc3mjiCTXbx9yr aYrmXmXDcKr/8wKMpa0a0dMPDq/K0KFjZBwOMqkZPz6C1BFO8qmsHz/hRk216KJm89BlzdyhS6N0 mpFqd9TvVUq1hYQBVMqT/WUeQ481AbtQM6QZpdfBmDpmxsbWsY60daDvJoRtsnvEZ7JZpLWDUxPx nbBgODVkMPYO0QimL7/xo0TbOdyH6VE3dBjHAUxibEt8UgaO+FwzbuRTQn8yI8grjK2sGvGb0qIB XBoabdJISMmmEZ82jJqt+wK5vLXFxs7hgsRq947ACYbSBrDGUs2sMXh6OrWiEFxC2iAVc2/NsgEp 2gHVqBjbBg5J5PZtaqakmB02bgL0742qwFBlF0Ax/X9j3OhJ9GHctB/7JY0bYyppq2qPcUMMjFOj K2PcoFg4doMg6Wbc0LFxTqOfd7/GDRR/KCndjBsNa824AZ9soYH9onQ+Uh6hDf1NwABRH1ikdJEF AKVUamQEnXpMvQQdn/Qv8YB6Wk4Caj3sIfnv308tfJZfy0dpeHZCWiYGhv6Ecf8JnRw/Bq0NF/j+ gAIj/SEB81FiEYf1s6ajuM2sQzUBCYmEWQLy9SlSyio4AKeEWX67DvkBMEnKUB7rJphtdT0ktm2o mkLDtZT66Sn9Uym1NC9SdQEo6YJKnVYmpfqjn/G+kmo1pky/oRRnD3b1/mkFIY6W8uDtVNM6Wnv8 L2k/OOYKZW5kc3RyZWFtCmVuZG9iago0MCAwIG9iago3MjIxCmVuZG9iagozOCAwIG9iago8PCAv VHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNDEgMCBSIC9Db250ZW50cyAzOSAw IFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjQxIDAgb2JqCjw8IC9Qcm9jU2V0 IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RU My4wIDEwIDAgUgovVFQ2LjEgMTUgMCBSIC9UVDIuMCA5IDAgUiAvVFQ0LjEgMTIgMCBSIC9UVDEu MCA4IDAgUiAvVFQ1LjAgMTMgMCBSID4+ID4+CmVuZG9iago0MyAwIG9iago8PCAvTGVuZ3RoIDQ0 IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHVXVtz20ayfsevmD27rpUqCgwM 7jl1HhTHcfnsyca71lYebD9QFGRxQ5EKSfny78/Xc8UQJDiABYmbVFkACA57enq6v+np7vmD/YP9 weI05OKfKIpilpVJmLMip39XNfuNLdjzF+uYTdcsCqu0iuIq33UVrKcs5XnIk5zFWRFWHO/FeRqW cZqyPMGXRYPXzd/MwzJlaVmEWW5fCZzfZBH+R9t/4EfjKubiXl0W1HqUglz8cJIXnE1v2Y8XLEnE W/JPcHHLnl9cxGHEYnZxzU7YKbv4N3t5AUIa3d9Jitv9wIuUuArjKM4VKVEYRTlnF9OdRHFDVBUy dn6/uakXm9l0spktF+zFcrGeXdUrcedJc7A9ZF3si6sCLMUIFC7NT8u+OCwhQjsGkpmBDL5xILuY YmUqSsMij/NAkrJnIC1RWrqYr3z1GqsSM6tME84KRZYjX8G2fLXIurip2cSVr9l6fV+z2YK9efGG zdZsdnu3XG0miw3bLNlk8ZUt74TwLT6eBsMmTBefE8hcVuaJ6ZDisyN8rW6Mwlsz5DkmRAo11Rzx w6xlI4/4MKoW9ebzcvX7+oxd1tPJ/bpWw7lcrdnVki2WG/aZxvp+0RCL+go6/4/7er1ZQwhGGfaU h1kCgyBZfRSDHsFoRekulfPItiMvOaxkWu4ixU6FR9F+eZGFZRWl4w5QmFQ8zvIKtr19dcjo53kZ 5jwteyroF7CxZ6zesMkcNrfx38svd7NVvWbnd6vZnPHsjPEoTjC5B2q/HV0y3SS0tAvR8JyHPAZD dOccXdSCERCKwMU2jf7g0hM1KKAXWKDXHg1D+j4wZhS6Jr3nuLx7M/lYs+qDJ829rGeSATGWMC2a tl0z7MEme4wZGu9jkzU2eRwmWbUTsz7SZMf8AWdI2CQpxzzZszSMqqQvGnu92NQrmMKhQtU1h/eN cBxlYRoVsHEuzd3I5vvHJbGCzePxNom+IPen1eR646oa3AFHUieCAUurLj7v1ZVAwmVaYOWo+Lxr UtuZJPB5cOLL5/bit6UTg4M6kUeYYgWH3nFJ3MPnlgb6ZXk5m9ctRjP263SzvKxXZKH4UMHpROdG YbqEOzLcIrenvbGOBa+VdZ4WIbwPT6kwtb8hT6qwyIw2criyJXH+/oZeFs2akYSHaakhoxSsI1iz DKJqulxsVss5gxtktmJ/P794/vNvjBala6xHr9jk6gr4bF2vgdteL9itnBx2obO5ma2HgrXOyaDX LLJT41rJLkLsoPMs5JzrNcvRjPowsqQjAsvU5S3gd72+q6ezyXz+teGRuIKnAl4JCAa7nkzhobiZ 0D81ux1pyHkBA0leSdUlr0H3tS29ZnqSwHWZR9yQssvMPbYqjsswNutUX2vWe0GiDYQwD3u9wMY1 lg+i6vp+MRX+1uU1e+FpSwU4CBqe8a5ZGyc5nMDkBB9E32S1msHSv1pNrmrSiezzbD5n6/pTvaox R67grFktvzJ4eFas/gKX3axeTOuhQKyrI4nWg7IfXlPCFxL0mhJWD8ZRWJbHpweHkUU2Tlkz63sN PUWyFwPjIgqxWQOJdPjn4JjHVikRdpziXAMZhxQLqR7F95VV2E3KYq4EfI96s0Q9kudfk+W4hA5D vdcbdjv5Khy+l7Vw78LLdcVm1xpPsU+T+exK7DK9++fPLxLsMHyg/YB6cb1cTenVxTioirhc5kz3 6wj0SVZiXVwYITwWXDWQLMJHSp+Mo0WAh+OiKrFn7LDNmbuPrEYyuNCjGNvET7+BmMFMFWnW12Xl j5J6qXyDkjRZfdXItcTb9fRmspitbxng0us3RodgK2mmLFXQd1+9C3NwDs9tmiMuweWmI2MtVTwK EOc8CasiKgwpPTm4vlsur2eLj6RbJ5dr7PSfCZberZaX8/rW2HnwzwRleEQldHFPI7ZezBsXsmU5 9li1lTemNegeT/85AQPnHz9i58ROonaGbNg4EkwA2jmn7VMzdl4RJXafpWvsYl7CPmac7ebYAeIa cSRyWX29Wt4KcXPXz9SD6RxLBu0if9DZa/aEZB+OwcLnQL4RFvbHtcefDSPr/clV/Wk2rd+fCgcZ DSaWgVgZsvcnP/+Gp/fre+FJUTv+N5NP8KOs7tcbdreqR0F18HjD/KaQWslorzEfRV8ncRxWCdS1 y1tH0zw2OskSWDNH9rz2dPvpF+02Ie0C18merWar/IYQBa/D5HI+W9+IkJG5WD2sb2Z38E5sblg9 md6wJfDnCq7aiyWWEut7RKYpRTNwP71LWZqxFn3xkrmRzVyK+IkCTp8j0zPDyGqECCEy8Yx9xlhO FqzGWEPXUHAR1ogDt/66htVCLkW318iOok04PMJFlSUsG8bCS/LuLFdsea8t7aH4017wnudVWOaI NN0ir1vb+XKqtRnatWHHC3hyqgjLwl2caum7lgpeXg9Vd51UlYhxSCnA2aXKYZBdSChH02AGdUp1 mYWIjIZlcqXaoGEX21milKNJiNJ6Ob8nt/XaXdoHKpr7oRYOLoV7mKUdYDvHLeTbceUtwQ6rMsLu OmK7wzJDiHnjAsZLGCpCFPCjZwTdOAx6RKGwIc+xvIZhORxU7kZyd42OcS5nCTbvo7JvfJn/WqXF hy6yrLlWZPW0LK+FgvYIe+9FVYUlcQIvHgZHMktR5QhKa4YPnlVdExwBpUVWxtU2KXtmVYuoy8lO 8fWYSF1UmWCgLQb5UgWjcVtPFgjH1Tueri0WeB8rAHIqwJHwCQkDVwKDIa4bxnkUiJ9qx607QZwx bymt3XDrgHJ48ZZSTaJM7PEg2oZXaRyXFC2qrt6+cMMov1eZIUILFkURitmbFGWYsZgjzC1jt8y5 nbO3YtGuvkgpHu1GSKoTtJYF1IhoAjdokResXwP0HagxdhuI9ug2w61sxMZfdipEpaFYxqswTeDr 5AU6hghmxMcAco6oEMmEJke3L4INciKrp0KkxXL9hbyZCDt9f1KHH0PEytOGKpx05Karv2zqBU2n 5Z0wtO9PAXxvKB6LMNwoi5iMMk6AC1SPng7tWsfNMOZ6Y7he1ibRURmaQU9nbUxUxhYpvnqdMNww eyOszd5VfWKVszMr9ijnzv3UtnJurQNayA0xkQrCAblZRYWNIkC1hqIi5EatHUBuvcTDIjeOlMb8 6ILismFkGaTPoKuuoH5oX09tGpDCMq4YUlqL+rNy8CE6xHhlRgqL0zhA9ctLXQ3CATL5tGuRYEQN lr9C8gbS5bACHXuFEMPiYiWiOr5n7rehkHdiRi/xtysERVZPgwjnxKomX079ZbbekDBJTzF59GDx lD0Uz8cBljzDjkeFaOnM5ese3dW56mzD9l68NHk4mpSevCRwcTkBLzFPN8vpcu6u0nXO9TdSaY2Q O+IOw1oLHd8Z6Cj7JhKnuPcBSJxYiNSmlIBzgvlKINi994bS+BqhZmoGYFzeBTHcO/5o3DSBUG5a FNh7rBUCScnDbcRa0xQhcjwpdFCAM1JtRbETIbTNcku0W2bZelaaDpUoosR7nvEwoSzwkVcPEQLV i6PTlZKqntP7nALSlc/7oV0qcQytUCLxMHNIcySlNadH8ajEiL0oogweFYeSPWauRZPjpjxj73YK c1sDQu20d/CRFlvmvMj2bWbF8O6WVbVNajfTXvtT5LoPCYIfpgiLOZ5mW8xzKMKEd9M3Bw8jeQ41 RfvypWJEacG7Cg+4z3BaZaTWCD+Fs3oz2DXvQyCPoSEqJL+6BG6zrFnN4xvyuZoUQayCnem4mItI k9sexD0zoMWyu+ndUBFrUrdvQO2WlDOgT8kveAtoD8qhx5dbrmNzGOO6F8fcbLz4ENhSaB+wALNe 1j4E+qYKJPCoFlGFvQ6HQGdEW2QNwnO0otpWY0KJUjR9BmCQ0Po5RlA2MuyhW0TpHbFeF07KJhzE pwoONoDhYccsmVzliU2RbdhwzIpbBcGcWdnhmAWiziLrmE1RgMcLTdLSTXli05gwZeOWIKpsBLrV Z/GZYjsEwDjd8nMQPDvg53CwNo2N+H9P5IYBkylQcFIZMHlwoukV08jrT01WT1Bl/RyIOzehdTaQ 7Yxq1cABi9ASgK+X52+UY1bUrllM5/fw1Y7iltUuNd2vY/BzpFjtRxxTlNMmAIH3UfdCkWEaxkfn 6FBU9ZQzuTMmBMwUuzHRkTKebmeG6dkowoUkdl4WJaqgNTnsaHyLK/QE3ml7vnldqH1oKbbLUAAO +0qP40ZLSziN81zXmjkaNabI6ileYhd2jcgM8pQhRpg8slNk3JAia24xA3A+TKyGKeM2kI9zqvWk s6mV/IsYdXY1u76eTe/n4+x2ASuKvNYtsp9Y9AFgS1KrKIBYwjkyslMkpVipKDq2GBNNVk/R30zW v1PA5+R36SWmonILyBby+m0lwzPEC9LHMOBjKFQTCKf74GWtfRfeLU9bF04zgXCalJ7sfPv6l+fE Jb9ylb1IS4DwU1LxW6Q5k6+10vDlUgvNimXZHjSL0mvKAqq54HDpcLjg+d/Onwth8mNTk7bgENJO ElT8KLEA6mKTNc9jBg2apaEmxUuufdeGLeHxXPCgvmuKQkINH/K4MDRH7Aw/PqSgyHIk93BmLiT3 r+2inBBQZOzcytAT+BvGyb7l2PaAqoQCcFnqKAAr2Qp4+iqAljh1qsk0odJelSGlJxsdPzOjtWPy 6s04WlPHn2imKUodprW0pu8cbGomVW5ZOh1sTMWu4IoUxZZRcDlH9WXgKb0SpMYO+Bx6DZL1OWQk ONhbh+MEpZYlWD8s62NHxabDyBo1PVpv5GzRNkRadm6TtDcl9m2PNEYPOVEVkgrl6Dmk2Nn+OFFB KQS2jCG4dplJ4YvjSW6KfGyqSn5kkjuMrF8XCC5Yrtcz5A6PlVQSo+IanAEJS10aHbFp6TtfI9HS d10oMc4QzhZxGAmXlD3OghZRrpHAwoSCqERV5GuqtbLYssMNzP1g63QTraG7cBQILoHTG/rgkXIq 0qQIc/ye6vqe0bOaSDu8dtvQtlbsZdNQKgKquYiZpmqXVmxJki8pvcTbxG5tkbKHQS2ippO7CUpF zjZf2fqeHORrAYLYq/NzxDa/qhcoCzXdPmDgfDW9mW3q6Qa5me9Px1iM2/WTO+6OAmmPdmP22VII D+feRGI9L4GUrI9n3EULzr5IykqH/OwZ0jYXxt6lUWT1NIciPF4UBRIS9u7ibYJNLx59gOPnLVXo m6iyFhQCJxN+Ra7obPFp+buIXR1H0NTGaeoy+4kFDR5OCkNF4Aq2SEcPR8VKPETqfW/d6qvR+ilX fWCFoqqnmLnBAKiXIpWbSXFC3DNZcHlExVKkmdMtnq1wrgFKR452gIGujOty+2kFLUYaXkoa7XES gWinvMzKo5M0RVZPUZNBzyRNMt65GTiPwzM2n2vAw3+9pAobY6guDoEqkMbFtrg6RKK+ERBxFHtG pZbCkNKTk8TDX179BkvwozpzhJ786+VOe/6NtJpEF802RavDthZO2q3q2tCiBd60P/SALybKsX1E Gt9sH42a6JKi2kqB0N0jW9EOoopiqy5pqjVUP3CGqvoLsWJX9yvaOKIq0cjNQ+br5v4OQSGyMBle GGN2Wre77NQxrNmSCiEf8SMu2iKkl8bHp+4VWT2l/6qe1x8nG1SantEpR6IYkhIyVXFc7oFj3UQQ VtZTotxP0mXyjXEETW81udx29Fl7kbBTtbb1WQu6aX0GB+6Okgs6EgTZOKhXBJcZh2KjvyOHGSXI DkE6wrFth2uyeksa1eYSqx8lZpAgkqntsKMlEoWofjNqeYyQVsx15RPdjfF02O6wUBsgyg6HhRJx cYp914wOtxCp8lv3XnGdGCqUQiHnlmiGEnzkHQ485H6hoTTa8ksBviRLB9hGKGK1f5ZQd3yycdMn 8AdV5e7zLK0O6HTTt+FVC9N0bcpZUgokLOFIqm8QmjYpLXXkSQoPUTZHb15IR8q+rSd7tCZqXDM6 TBMRohSWtVNjfiOJCI2UlXCTwiHRUd6eYLRNSmvguhzlduByOB1KcxCpQ8pjyxASO5HWpEToWBxg KFtDVPVU6qS/b00R3HGECaW8sNOxiz6EwxwolTpd3s+vAKSxOYTyFQg5pIM0JleoYSGddhTTh5MD 6OTHNQ5cG8PgmOIRqgfHoDqwyC6pRMpxrZToXLoBZKkVEEUpXwBSXNV38+VXRIxsKELePRaHzoeY rmaXGPzJ3d0cZwtLT9oo467Oh9C9OoZxR2xJgS3mIxv2QVRNFpP51/UMJ7rKJAg50z/OUNJVjbn2 hiI7Fdn6NNqzDYyHCieS50iPADDN6YqowkPcPoZxp1pxOBr82AZ+GFk6HwYnNKNQOOa5GErM/l/F Cc10pO9npfYXqF60YSKdQWwE3k1Gmen68OZEdainaV/hkPP7+WQ1hvm00ugy2wFAj43FkKTD03bZ c7fQY5so7y3ALYjYvcwwm81I2xtClhPOrY3QbX27VFK4mciNPoaz3OBUX+K86em9ME8kkqPII3a+ 0hgnmeoeHYMK4gi1Ksxxhd2rFVtVfuxAOaQzDyHLHXMRZUlIuAt6jOTMULVTdT+OYaSp5lBkZveT KpoI8TXw2im755Dy2Is+SiIujuKMTI683NiErDpMaetcT5u0pXFlNvXB+EvEnaB0baIBqUPKI48P F1l+2tW6hxIdf+XJlGF+HblrbU5xc0h5uPHRRwxTknrr1Pk9uSnGmYKcA5wH2ftgqN5nzUP7N/6T R6LH0YdRbKYOZNB9G1WT0onoh89E5xTLno8tCZ3uM30mehcpDzdT26LYEM+DQpnCUYTCOM4i53DC VM8z0ZuKTiRMtWkmB7+aUntoNmWQuaLZS9h8I4lbaseQYwmzV3tJBBimM9G3SPR1Vx7Xmei6E91A QKj3b6ih0+bzYfE1Z6JvkbiHzy0DoM9E9zRJDyK+JltK06zEdw/NVj9o+9lQ6uKyQXyv+PI2w525 t7OIkUmw1MR36wtLvNpfGnDWfJPpIpWpS+WaBfsWfQ4OaFG1O5LHY/PEa6uJw5WZo7S2l5ryJaWl pvxIwSZmQtVypQ/T4UprcviS0muALAqiyOnKHK64R/oVUY0NuBiuqrf1FOE7iE/HTpxNBl83JoIN 9W6PYi/WmWJw3KX3aVlHscC7R9FTtttRHXoU3wlw9QHidCXPfnrxFnr42+rmk7jhhHkqhhlTmBlV RuJ0lLUou0l/fPfhxdeoVic24wNRaDNXd6oJz7L3WQknT0TlqVAnLsdBIGis9QxNZqjylcdUC1C9 hyfIY6JMM7iEwzIq8JF5Ql3D4j2Y2mcpPiwo2oXaUt9M0WiGRGfTeApqigTpaoYE/QRNwdVHJ5RQ VRf11hzPEDQb4wAh84zygCIiSzfeeCApEE2plzJFKagy75n+mMZNnw0J+gnaukFKKGef2TspKh61 tXiFaNA4KQsafX2N0ly8QrmaDEe/is94Ja5wbDLGB5/RHWSGTdU1iuiCavkc0T3ii7qFACxBvKRo m67wHeQlM/EU3yEYTo3Kt6gWGQLfVAvyDm3Td9JSyCn9jnieaGpMC9QL2TZdETfo5IfOeUKV9yyz UQwtwnmuYEXjmRQfv0EJWoMCMoz86IFCW0bKzDMjiHrIA/tEC0ZDhDNNa1NY7DOZGZwivS+nTdG0 TJFcR4OZo8qTqF9GtSu3la6zhosqcEKUKUPyNi5NYziiBzPFGAnU7KS35B9lGsBHCYzesZN/ntJ5 G5yd4Mh6eYFzZOUFQjXkBcrmyIu5vkAktnyy1E9g+UQzb0w75uvmAi9/YBf/Kyu2kvQf7ISy/7YT GbJdChRyR5cubqkSZRoSWy6u2cmfrC17oLabfNL9i3WHzcXzUyh7MDDXnzxXrDBvcP1JqxHzyQ/q O6lmbLr9nfNfmtyj0sikdCpKqCX5QclaUusIFsoRoUP1qOO8KLdFqLOunRKhjFGhtYgCXM22LTiM wIdCiJL6I9mPF40ovcD4gg+3oDwxfyAOeAYRiNkJTl5L2Qk7DXJ2gnK0GTsBi/A8E/9+EE/AiILe 2ZIUUf9Qiru4xLQJkdAJba5o1UhxB42YVEpE/uaKSLvRkpQdklzdRglooQzvxRSlCtsssM0Xfz7Q PlU4zHBE0lb73a2+PdRogTOgOKSgTTQU+SGioQLC7zBiGAZMIAxV9kyMUnhGD4OTH+UtOEevoGTv 93jn7/KPusMb7rTe5qsVLLhfc0CI5vIt9SER8b+SgEKISihvwG4iEb8PeaPpBwr/Iv+gL1Kw6Jl8 4f3pT83PTJM/yqfPTgO0ovr5f/IZ7rp7RuXpc5T0pXKA1DE7Y1AcUITGdQrMD89A2sW/rULc5lzG URs8rgi0OJzrlphGo40S6m38qrXDDvzabZc940glfkUAKFydDfyKuFJYbZhZv5OfAoK9FEVKRz6J kFBzJ5voiV8DJIMi6gfqrYFfzbOG8TfPjKlPgLqiDNZIP0FbQJUYdvOEJcCeMfZdBIxQ6DUhTZ3R KeoaG8PKo2oIvqnhR2CeNOCredaAr+aZAUGmdf0EbSkaGvBJUdoAJKY3Br2aHmugZHk1GL1yUqgS vQbiuoFexb3ApTxC6V2DXkliCFUSkoUQGfQKOLqFXgEoFXoVVwq9iusGepVvES61Lcg7tK3Qq/hN hV4tNRq9SkoJGYur/ug1QTVDTpU/Gui1z5BY7GoGqYFdzTMv8bXYdYf4ajodQVG0z1VNGwM2SRgL LMsMcsU9apxnlVYtem76YdcEJQEKyt+SwMPCPlj+/xjsqjsxBnb1b/s/BbuS8kroVFGDXYHwy5Sn 8bYI+WFXigDHjpoWIUC3cbErYAcQxjDsqmltwCFUovVAbP8tETOKRtCPJwK3iRsBhoCrG4/YiXqN 1hqA3/IjQAS8Fgmopz74M6ATWnt/IuDUnwQcAtDCozOgKWAjfKcbDRmcl4j0y8b6AfD5IBoCEi0U eiOwB5iZgD78UQCNukFoDgTCM36iMKAEevLFrW+DXlD9V9GG+og6h+/KTwjr8eCkD9bjMSTL7Z0D xZSSskuCg+AdZ0JUWbbVpvDsenFsJ3b/EexAzzHS6Csh5uDkO8k7+Uj+K1/6C3jdParISKYktETT 6LXSAoc7cW2OxFmOTCDFy94zIP/OyCTk+Lwpn8HLi+0TRVX9fCufWYaTO02Yzv71HR0PYgazIaDE TkgmVvpWPqVQKdFV8ialkz4JTmi1greV3CpJTLRUy29LObbfslOCJil6KhoJ1A/r78r39Z0k6r8O DiucTUkK92KimNEYA3hOPbTQD8/gkvg+juSiC6qFuAIa4RCheUrTFg+fgRL6Sxyx76C73VJnxwpe ssipORlj2e9BHgczSygvoeNADNEinhSngaCSHA0YDTynwYBPQn4BCgNfA9V4qdkEPDJ4IpuQX6Om sUJuNI3hkV3Fv5hlaBNjY1qWpDTbkZ+CNYK4AL8rn0C/E1nQeOYnMaygVxLUbPp/DnEyQ+xMSefO YLSbnHQUl/KmGVmnfuoJ/I//B8b74s8KZW5kc3RyZWFtCmVuZG9iago0NCAwIG9iago3MTEyCmVu ZG9iago0MiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNvdXJjZXMgNDUg MCBSIC9Db250ZW50cyA0MyAwIFIgL01lZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjQ1 IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAw IFIgPj4gL0ZvbnQgPDwgL1RUMy4wIDEwIDAgUgovVFQ2LjEgMTUgMCBSIC9UVDIuMCA5IDAgUiAv VFQ0LjEgMTIgMCBSIC9UVDEuMCA4IDAgUiAvVFQ1LjAgMTMgMCBSID4+ID4+CmVuZG9iago0OCAw IG9iago8PCAvTGVuZ3RoIDQ5IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHN XdlyGzcWfedXoPRkV2k6DfReeZIte+ypsaORmHLVWHmgyZbFEUXKXOz47+eg1UA3egVAN8mkypES xT68uLjLuQu+kf+Qb4T6Dst+cV2XkiD2nJBEIf91nZJPZEl+e72hZLohrpP4iUuTsOmr0WZKfBY6 zAsJDSInYfg5GvpOTH2fhB7+5+w3vCv/maET+8SPIycIix8ZKX8mcfE3fu9v+ENpQln2ff5lxH93 1wdc/MFeGDEyfSSvxvhJ1w0ZGU9Hnpf9fP6P8SP5bTymjksoGd+RF4SQl2T8P/JmDFAlUewJK4YU Yt9jtrDGry6HgJVEThTENKnCUmQ0qslIH4qqLCOtg6OJQ10a5genQCESyig/LlsoejpEqRN74ehZ hVqQCMXRRDKq3iA9JK7vRKEUyrM2j8ZT0gSKSW2mzCHk/cXHC/J6tdzMZ+l6sp3jqyGw0jB0Qpf6 JFKxKggPrEshFNyHkek8wIOoUpi4sIOun+uSNEeNB2hjjoz0SpojAUuxkm16VcAa3883ZLaa7h7T 5ZY8Th7SDVmu4By+7dLNlqzuMqVzXo50LalqJ7quBPMCx/dh4AX0E7idYczgyvy4Sc8OrfFR4MSJ 6zdBObD1DMPYCZkfa6l8yWZ5sFkX04fl6scinX1NuYoJgzXq98n6mkSDwKEsCkgFqGKwCpkdxM6H IXW8IBFRiwLl0JoU+I6bIHSrBFCqxaqDMgmgyoeVBQetcV1hsexgje9TMtlt71frDfmx2i1mZDF/ SMl2Rbb3k+UDuZwsyaf58us5udnuJusteX2fbu7n6/R8CCPmubFDKUMQnH+aUzBifuQgkheq1x1i FK5AP2C29FB2sMbz9e5xskg3PyZrcp3OZj/PyRXOl/x7kNgnDpyI+TAldmjnSzJZzsh4siI3uyW5 W62hlul8TWbzzXS32SBm4z8wiCp6yJhi+C4B/RRU0UuQl1RMT39UMrgq2sGarh4zH+YMonnMdSI3 SJArKzI7qufwmOPHjdFQ4U4PE3WzwGGMiahbEUoB5TCencLkyxCx27qWgiEfwdB1epeu0+U0FWFQ HzVhZGkpTotGCQyAglCRVd3La+pyjS/SogBC6sImwT2eQN7mgvWioXEQ6zsUJ/dxtX5Exv09LZ/h AEkRjWLHhcUkoQpXOcQDK3yQgIALwM41HOKB9SmIE4dFobBILcl3HdTAoawlrM/vh7h8iecknhfE YHsVYbWoUG6+/2ELpSvFl6ykgKKVQRYh6aUzT7d3msjMbKXwtgKZlnJbC6nLWCJ7cALPDavnpavc T9MnTQlVbHh3nka9EEw76P0uCRWWaEg1ooiIYpZIJIZaxLNFUA/zaUaZ/qUIa5QXSBqrAuWkNlPz 1qSWQtNpgnqHENYJxN4BuCwXuamS9mvF3gi/xV+KsEQ1qS4sw7sXw58EDMKyQvhpstmkcMfLc/LB OSfvkORn39zgG558XTrkv6ACwACcXa04AbBabterxTA5V4ygPeHn/vxRTuHcUTmLfBTdynTPaZ27 HcKr9Wq7mq4W5PbF1eur25fkQrnY5EM6xbHPN0McNIsQPSYunGqO3dAGPZ6dD3GVGOgK1GEjCUvL jRkURlUT2OXGZL02CFGq6YnQ4DdG1WqtMDn4p6aocn82kjVsbqTB38chJ4Nb6sqUCetTx9l/S2br yd1WE16jUeyFB97Jj2KPlMXYU+o2CEvq9fdeQAGIbJd7Xxt57Ru/9aITtcoyuqOKK3IdtErYSUs/ lLPTrRhV8CRRj/KowhJsa/n08g6P/ruoxnVDXkqGAJSFYNTLOI8pOOZ7vKSjnqS24Fy6j7DaDCsL QGD6HrqMyoZCyTrribkmkErmQtwuT8RQigEGOMUykJZ0quaJbl/8WK0fCIj8p/Xq6zrdbG5fDuK7 PRahkQBxmgLTRl4O6+3u4vIq29LMC/ohAtcwcDzOqFDG0GYV48eyTiw0t/R0czWaoDblKEUHsI/u SUenoRXCP6bb1Zd0TZiLXh1NtTYSoaQGAxWgjcbUMzijG1acZuCBC28KOgtmgNBR1o+nKZMakC6C qQDio1si8kV9oP2y2zYJGh2VrHEHOSzDXEybGDRCVRCDKqpuBTIILvWThYIYVKG0nFvNbxgRg2WN GvFW1y6NopIYVJEpQiqUe1DaSxKDORTDnHPPaLLNlBfEYIeEaic2iBpJYlBFoqtFXyabVKUD2xmu shKhX7qHOw1iJwkY4kUVWLcSGaa9Ret2lz4XFtJDE5cb69W/Cgq+lJVXE/NfxZ3KhNwO4XOzzyXI P9npQzgV+Gq1m05mk/n6mSa8SpfLQZihhPE2eBLYoV+dk+uct7waJGzwfIbyQoGvyVnXbqu1KnbF 5SVVBKXAe+jLDCU6+vsb0kraaBJOjEpzDl2XpeCGPCuEN+niYb5+qBDPpEpcDsQFRhi1oAE/aQW8 YnQOfdJwYSyUHSS6hrl0zFWj02OhqyddznmapkyKE29C2s9BHJAPVAAek3ygkhFUIGnTD4fjBBV8 RxWZYAUVRNoS2zOS670EkhdU4B1VYJIZVCBpS4yHdpoeojGH6hMZsnzHZWDpFXjHlBjDsE7sR6CT FEjaEmPxPvJqSxYYyBDM7YCoVFEdwSkxijYmRoMqFF2n1EgMksFpHxm/7S/AvXhC0IM0BG8XoyGO DU8TUvSwuzJEPIK6FNGqi35cUKTm0armhTJKLQtqyQ6WNrVUQdVNuRfUkopKObfDsCYFtZRDMWRN jKilRt/RZgsLaqlDSLUAfRjiBMbkuedMhaJrC/UDkooa9fAmsudMhXUENZLUkp0Wze6nT7rUkpkS SWqpQ0Q1JRo4n3fh5OsD+ieUzlsBVAgkE1teTUJbDYJo9g6s8GEOCpxWiUBC49szGXZ2+e71Ffnj KRsR50NImuiNNFEGJgp45aoeWA/9BLXMxMZTlwgHTVFldk37oAXFaYkQ/auk3MrYwCjp3vDGI+7N dmB0vATpjop/1OIuCkefD+QMzpIwwX1VACraWINl4FrN+6YYkmrPx9IVFZJ2PjY0S4IVLk7oxUEF 3zFTWM9F5T1E0G8pMv2oxOoWeFgiknhRBd1RBUYxrRrSKiRtHeNRiqa9s5MYmGg3dKsHelSRiSlZ Sx1zg30E1hYJCF9aAaWYL01napHkM27eseABmu05LMHMx2GSfIyWOhhaVBLrfsq95Kv1iwON6tt2 GrIoYAewmSi6SZ+26aPSITTS2k2ldlV0la9YyBywXAm2bmWCPYFhBD/GAGiIPrPjzw76vIXfRQu/ cdVR88YbpbqSx7GENTCPU0GlGKIijhqy+0XyOALK6fE4ApmWchsEm+qN7yqpy9nBCpSWwLzmQvQj JiPlli1CFVhHUCPB4wgkhlqEHuC/fw5D5MBYR7zxViDT0iLdNK9yXN3sraS6fUxTBExaa10tsvLI lgm0HUKFyjknl7snzASek7fovGnlUHjCPUTDkIz18o9yCl464PMNFdd4WpGYHcJ89LPGl/B/8fdP 8na3nHKODA05A+xyKEiJHPxJnDRyWLQmKkHQIU+6j2oqYm90mRRIT4dqomJAz1cBtvi2nAEz8P7m VJNsyFEhadMAQ1NNcqGoiu+YNADNG3JURNoS04+bGhPP3ksgGnJUeEcVmGjIUSHpS4wbXM1Eykpm sv9FBXhMmTEsB8TiatDmiqnQltlAc3qiD6aCSjFgtUxhkMCTYdiC+iE48iYB9XcENzMtF7uvu81e Q9ptxJCHjdZBHNYO9Aii85jn+NQF12MnOpMxtUoy0V3Dl+GtiksRUY1BaNYuDSqT02HCmvIt9Vn4 wOcafR87YzCxi/3zPNzRnmo0SkuKxMnHzg2+FP8EaC4vckK+XeXEaC47WJ+v376mrhf8RciH1fRh 8pRu1/MNsjZkbmeXq8cJ5nSXk0dsrd7Ht7Tdd+aHTkJ5jUxFryhzzVQaxHr6TI+cru6ConmvNKY/ O2lmMV8toBhyKvPHp0W2DDrbx5StQxUPNWAttHyzYk+UhYHMz+4Usi+8lOHF0kw88yuHzL7aFL3I uuwQbp7S6fwu37B1htXL40tCvfO9LqUw622Yi+BBwaydKcKyEG5aBjEcYheCr2DTjvzOsXDy+3O1 CGvFomEGw0Q5W4XYbduaT1TDUfOgoXyi2elhoSvelYnxogo8NmDwfenanroxS2hTlsJTI27i+7pP wFGjeB8H2Bl3Yo7aDhZ31B4eDIGjfoVXJDB0+dbJtrFdOeRm8n21mMBhv19mCzXI2/lim675Em++ IPvDbrGdD0HAebL9IP9Mho7qfvWYzoYwDx7MA41x03xV2DZ3T8NNdlWQiouBZDWy0cYS+68pK6MY u3BNVgA/plu+z2UDp2SCjiwNt4oJPqkBZL+Df4VuzdjXxGdk9yg6OrzIQ5XJCpi20BpBle190/Cl GKJSsBn5b25xhhAbg+XAI2MKsNx59788hnnzyXp6j00wGMkaBJ1sLVQO1cZ6WHjujDrFy2yQDjoI Y1SNMBrEm4bKnjs7Wpe7d/FDinvn6tKzXqhCOmQJSev+1ZIVoxiCjsUeGEUkRXZ0kD3xXoLZ5wCj UscPNTx0myCMFJxAi1Tybg5DO2m4hsKLME2FJqVhszHerUwDdEIh36p91bIYUuqQFzEHOzWZYbSA 7RPLc5JuyWSBhfGlv978/YTnZzbk4mk9XxAWnPMdUV7pB7IvP19NvqaE0r8GiYREwFH5bC2asOf9 oPj/aW8k7vHNY7F8CU+BUuNUrJWyM/YBPY9QLCFdUAqrse/9qKsifJ1Qz16lRI8mlcLS7cx4v0Sc vUx1yfCyzc02JUl4BdDiqxbI1MW7bm6EhE5CHuHdTuV8C6HmqqbLmdXiDDuEaHfAKLBAaHjRL/kO WO0ltb8GsRiMy2VqiLhia5SYxGCLT4+sR00xngxAC21QXnFt04v8smHRs4K2Z/2H8qBtfrVKl6xX d2URUUWr6G7NNunqbvl2PT+5a4UwrymqCKVB6Kl3flh9mS/Sij7wb8tz7LnEf+kbfTLlVTVYkWzN Kuha/dod66KvCz8PpxgHzS8s1g5ZF0rtkDsdkHjjGNuQeDNgU6hYCGVf/6MnFFiaANG9uYXRvKdG ZyW7pL0clkKW9SfWz6yUF4KVulyvHlE44su2zm62k22KJ+U25PInqkfzKXm3wmun6Ba7m3/dPT+t K3vGBonHUFjCRQhh/RRxH/U6MHhFv7K5vV/Eqi0ZQgkkA+TZIbx9wcdh8V7ATbr+Pp8i8wTp+P7q e1jlhAxcIb9LvfQGFvxGCd5yErgN7xQvUIC7CYeQaTbywyc6BTbDi3UuspmhOA75sGYFoHJDNK20 BcnB+NmBXIJ88LKLj8Bb4S+4le/hL4zsXOGTGLoeI/l2p82n/VWEsIencfD+sOAvZIShRmz1I9CO jCuuMnOUrQxP4QnsYHFP4Meh7ubzMrb+nbHoqIpjpPSWIoN3+ohHbDh9MIZ7wltzs8cJXyP4Bt/d oFy+WeE/fcI3/HmbdyiorBZz/uTNIK5JDEiKD5NbLUUVi6BkT6qgcxdvcStc9LQgWDY0Uod0TXYI zz6m86/3X+CPLvE+LEq+65+5dyL4OnstNsRzN9xZ3b7k7mqPNvU+d4U37VGIjWJYumdpW7grgxtm ZB89qZSqnBWlrJki3bX95cueJWZdMbuHPa/Zk09CTHsE7RqOqRxo8Aa37JR40uKBZuEv65r6pezD 6i6uKN1A5M6IRZQb2N+gaXUDjRAWwSGWB1ggLI/lQrc0Yy1ArLfptzGeaCB7flOa7zcoQexW3mET Toa6IJUDPwqSwrYfJOFE74fjIg0ytDbQLM2zMjI0MswQsBSF78+GPo9v0GCCnQfDzAyKtV0VdMr5 1cygrqCMzKC0DAxLjKxeZC3ZBs2TtDMMdgDP/pku0/VkQa4m0wcUda4nmiCN1E2+G9kEsl/bZnM8 M58ntbcv/nl1fXP78nf5b2bpZrqeZ0ugft8ncGiza5LSy8GfQKDIIpR/edm53FPVL8eSKg5kV6Sb skQIxgrVQYYQ8F+7Jb4Y6pEZSYBXcB7VwoQITPnTRA2F9EM7qwBsADalnJqzymEZqv2zs8KOqoGd lYruqKqUTYVIVTLgNEomQtMRWHorO4R1d9XkG0i6xAup06z5fiP2Av7qLTSy65LlH+UU/AIewQi9 U34LmdkhfIPO2u/pjPy5nHPCAPHKOF2j2QRTMvj6esK14GI65aWOvBNykEhAzMWJT3EKR+6hvYQv rD7dUMAO4e2LN5oWyCwUFS0GeJOwLLhuc21d++6iWMTOlgoSXWv95/j64iPKPZNM77UfWzHL6cWD 7xWM3dIaJBMTXbQVJLrSMo4ny2liLzUuX06toFPkdOggjk+cJFT097VAOQixzVDucZmmkcIL8zko lEAYegzfL1HJfMQU3feUXKd36TqFb9+UjAM6cviP4heNolBXe4CksARgYwP/fxMuNlgKZW5kc3Ry ZWFtCmVuZG9iago0OSAwIG9iago0ODQxCmVuZG9iago0NiAwIG9iago8PCAvVHlwZSAvUGFnZSAv UGFyZW50IDQ3IDAgUiAvUmVzb3VyY2VzIDUwIDAgUiAvQ29udGVudHMgNDggMCBSIC9NZWRpYUJv eApbMCAwIDYxMiA3OTJdID4+CmVuZG9iago1MCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1Rl eHQgXSAvQ29sb3JTcGFjZSA8PCAvQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDIuMCA5IDAgUgov VFQxLjAgOCAwIFIgPj4gPj4KZW5kb2JqCjUyIDAgb2JqCjw8IC9MZW5ndGggNTMgMCBSIC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac1da3PbthL9rl+ByZebzPiyBMDn7Zf6kaZpm9Y3 1rSdG3c6rEzbjCVRpeSk7q+/BxRfICUKREyR7UwiJ4p9iF3snj27gP4i/yV/EWoZLP3FNE1KbI8b DnEd8WsSkl/Jknx1vqZktiam4Vu+SX1n16vJekYs5hiMO4TaruEzvI86luFRyyIOxz9Ov+Ft9Wc6 hmcRy3MN2ynfMpF+JjHxP773X/ih1Kcs/Tp76YrvblqAix/MHZeR2YKcTQnn6bu2v02mC/LVdEoN k1AyvSUvySsy/UheTwGk8vg7ociPP1GCQn2DmtTJoJiGaTqMTGeHQBFNWCmovSvkwSCexRlx9WB9 eNvHYvnc8Dm3vToqyW6ksNtka7d/60JpcyHfNVzbo34BZbJ1oT12K0FlznRhJKvZZ0Vkk/qGakNG mWm4pl0iU3Ju7UVqc27KLMPmJvaZnhetZivFFaqFnHbnptzB7kJ0qcEawI0o9w2Plbbq6EWrRbT6 5CiuUTcvcpjhuk77VmuEyH68yHEMx6QNc+3Zag1Q6zD5pLhE3dzIo4bn+6Xxdm20cuP3GY2oZxsu s+zCozv60U20nsWfwuTpd8WF6uRLjCFuu6ZboNu1UA2zaeY1YrZFpDLzUxgPlKM1ajcxkep/imuV OtWkQofao7dncNsWiVcH4Pvw5ubphEyNE3IZbKI5fsPL8/tgeZME6/AhSILlCXmPP8OfkAuD/Bot 707Eg0w0iE3bg3AOkuVZIoCkD5J55J4Y25FidXK/0uamZbhOjWJN6hSr3LE5qKrNVb2yE0LKcqPr IXxxeX5JrhDmwoRc5FuZfI429+Tt5SeLbJLg9jaakfj2dh4HN+Q2TshlEv/99Gqix2hbDW+BU9se kn72MCOwvAO6ZqGOqO72URleD+C7+M9oHgobOy9OvsgzUWR5DnPtfRUTzXOdBHSyJwU3thCCz+1G MVzu3DmH8DETdRrjRIbXHmw6kJVmaXkYEMKf5aI81XK9Ly0ODsJDkUAth8rwJkMuWE4S9BZMvVTQ 8y9uG5YFxUBCN+h6oXJgjs9kRBA7hG5wOLZ9eeVw0MVQQTDq+DLAQZcMhYRpIf9LRlResg51hJ6P IcZyC1KaBG/QBUNZASnOlREpL1hRVfQZ+TmkBbCNEYV+jkhmUbPm+MqrZtIvWa59CZxzJEjHrIcL KeA3y52dSAx2UPAVJVg1PqT0wWPQc33b4D7zoBtD7kT9lSmyELgOCLw7t9S+py0ov+ObUJZNa8zM Twvh9cvPcfJAoiVZJfFdEq7X169OyOnj3eN6Q8CGmJHZbtJVrW7j9syGtmhxEaK2qMfA7T0GV0Oh ObyG77g2FKGatw2v4WvC+vD+23OEDft3Qi6SeLHe6gZn8ePy5oR8Dwnhl3j+zwk5w6sfw0UMXSGV HcLkIVrizefGSS/lJfcgb/sIJdlij8EFHc9wWOGCqhxM0hW+qHzbFwcLYcHRQyhEop05oNn16hSf qYU2oc1BLPRwvTPIeZAsQ0hdLy6elsEC4sZ3MSLfeby8je4eE2hf8VJoHJt4Fs+F4NGvL2aPMQpf BIu0UReMV+twtBAKlYNcv7z47hwvrl/1LniAVlo+Mp2EVlnxQOxE55bafeweVhTvEjZlhono/Th/ Akswec4SDvW0O+1uVtRZMr6jkU2YTnA+x0aJjAkBzBCIDdE31bQtw/SLloLOwzajaq0hpdjcQMlm YN5CjgEj4CF6sAQPcSzbBw/5IU7u42UIqiH4x1UcLaPiq6zfIejIVfApngfbvwIn6Sf0Z+2NfK3H EPohCbl24YFjpCF6CM+Cjw/xCXkD0wpG8oPRDymBUkt9DBY5eijfRuvg4SGaByAlabJCccaTG/Im XIZbQtJHScaZiwo3nYPaWn8UjsgMy8srslH6oQ7AyyDZwJTr+2glqOXHcLYBIeFvLi+vX5HXCDmf whu0XWcP4YZcPa034QJ//frySpCVXmKQxZDohL+mTzMGwzPbYAw6z1Dksyo67Zr8KwsiCWknWidy UR+0jtqe4dsMEp2ErQutC5aPQSKYXan/PC+zo+jtMmrXIeqQHR0ZUfTJLQceD4mVCoJzJGpHPXTL 8nim87DPxuyoiamK2gYbAbPTg/VheoUJQdP0VMeOqnR4IiaL28TKYvrQkdFJ9itb1dl8liq1qEJJ h5zboJR6NEouTKB4WazepsaG/UpQh0dQJtkYtoKHtSEsA6MewhfZLEIS3EQxZOlNmNwGs5D8GDxh KIWTPvJfqUbrYV6vwlmEuZhULPoa2lESFnEdsnkx4f6FS1v2g2SYe/wwN3kBpX3avFNlXvih7Ysh HUzFD5WoDyqWmgiX4SZtjKArkkp/66/J1Sa4CwmHYISWkxjnF4yNTK/INvb0Q83yHmD+GCMgZ7YH OUSM9I7X5noIv39chv1xHpqPH9fWT9q+iq1ThUiiNL1qo+dl0mL7SlDK5HGUjGYjpriW7XTPaH0E uOLcSg6ro7ODkXCOEsZUZSSdwm/BSGroJPsd25UcjEbKMWEXH5nIR6Gk1pWiITPGNCmOhSnxEVsB X2PJXqSaC5pCp4+b+3C5yXI8OU1m99EGdfsjBg6uX745Pb1+9fVWoIlm4jGefQq6yAPpY4whCzim YZnQi8abBfQQnsXxZo1J59UKI+0NS5/B0mAAqASqDKAPVloMJNnZc3SMjNv4k87kKxw27BR/UDtv R7NzaJkTDBp/bJTysmA0rvijgK8Rf94FCDSdKEm34OhiDzOH2FVskhFBAmoRu1uQLs/uiiAtzuju UtPKcsLC4IuLE3XboFKHUj1HO9E/R9uWL0oomA9xTE+jwlZcoU47ruQjGayOYffDL9Nz9GndP15D eL57+gPzDevHxUpMN8gM5blkAByx5S73iC0vY5tF1U9Gd1q6ikXFXCzOIo83Y2G4UgPhi61RxdBK blQc0SGn88/B07rijZPnUiJYPjNuZ4CV+IjqOYlO1mWYAEK33Iejaa3dz0tyulrNM2K3FoOQv55f vDutLFubgNMJa3GUrYZV2hSNHKAtJKpVgBAvmFPrsTUSZxOUNnHvfIDR1kP401bAWYOsicCnOqCC /Nk8pLNXZILOkA731DAOalCKmQ2ziHISlGOX9CY6ydzNS/o9UI6jU5pobY7ifg4rnVzHga5WinMU yQWtdczOM6XgrRqFGgFRjOlTG8d3zB2vDvFBy0ObynGsjqXPOWr1E4LueTA3pED1+u9VhBl3hPwk mhNmi9hAufQWfPHhUgi9lP3eS1mH0XfqYS/Unq2f3UGxu+i+8FUwI8tFNwnts10+2Qz9iqmx0dhq zUcg29zGWZc2KM8XvpquiM597qgHnRJCrs3QPa7yyMMp863oZaGtoLF8aYuywFciLV/twUxNHDc0 XdxxlGFW2uvaRE0PIroJmAWoQ1RtaV6II8H1HUxwkF2ss44M1/YQ+wpYhiPq6SndfJ137aTSfdOU N3mpus6NndSEeNh9mYkt5uJocw3innVubPusL9tYafLzbBP/id6sGBZR9O1GkmiryBEWsoAp7zsp YDbgquarxtq2RilYOb3vC5M7YM27A2Zp5uMkcZsaPsZ9lHa26qp0MlCZRiy0cMS1a9XAePgIsdDW 42T9L3J6cyMOoIXVmvXZiq/iqAiOX1dRDupG3MXxFVzSMgIuiAko7vk5V98TFUrfzlm78rVxnVyq kLusDFZHl3oTQLoXLLCPgFRcjFYDN6gniUG20Y1zWVqozu+jZUC2+UbRflkUV2wJYsyVur6H6yKr izao+Sh0bxsj49XIeZhSIhl3W6Bcjk+T3OFLGy09WD/FGO4kvz0Gy8+PixCCWogTdVebJFQmv52C Bc1VmBrcQQ0KtuWOz55aqH6LZoikd+JGqE0SzToUMB2UNBzpsVwP7FSCOKwJqWHTEdpQC9ZZGH0U /Wx0rk3T5upho4sNs8O4uHukunJDGpH7kLdt3BMxrsCqCSvNjOqmq94e3B7xC52gBkwyXUn+jlLY cJBA33PHUNhwF0I27iCSvOhwYaOenjvlu4Ica8J6vQii+X/I6v7mDjT5mzvxpTGLF4qO1QkrdT3D xFlCUsMqOdaRi3fuMgOnLcdQdXEH19h4NK+6pFUpt1tea/VhoKJ4x1WLmGoenYtrofof+Aoudoj7 WDCsEU7OoGkgL5hkumM7NBQyzx7ddTFCuNOAdbTyr4ZvUAtiigG3ZEv5ZfjyD6MoGqiGqv5ktINa E/fC29CJx2ZOPVhHLf+4jHFQKzJo/NahkfZmqO9Zk+F6sI5Z/9UgDmtEdEfc0d1ggn6nDqwj1H8y MMl0JSE9Tv2HA6m4Ay8fwN0D5TjcGPNjuMwjrxi2zZER1H96sLL6bxbE/4AnfzMTcvsivQG8VgU+ 37xodqs2zwCPoFfJTfS73OKOG8m7mjFdsZDQayYzzErTUfSSGaQFEym447hV3zpHDkviU4e337v4 PljgJhXcNDkLboIoUbRiN4ED7Xdu4pN3aiAHdSiILvXzucNXE0wL1bf4oBEc/5+G81Bdokr3ofKg MYbZxUcnyfiGtR/0c3N03VzmasEaqh6swR3UoPgYQnwu4di6EJhh1IH1Plwuw7XqwcJqTjx81QrF aQ6c1CU1aJLxjsxDGT5MkuJW3rElxQxWx6QI0cs0e0mE+ahpvl4ZMMl0x2ZWuBweM02j23d6sLap UNF23bYdDmqkM7hMRibZ7tjbDpfSOZyOof2HaxHx6a46R90VjdWJcRbtP01YWfm32LJj48+cHX8T g2rdhZUa8Hmv/M8vG85hj6AIZLgHjonP9N0xf3nsUAXhxRSXDO+A0rrz/g+u/wkdCmVuZHN0cmVh bQplbmRvYmoKNTMgMCBvYmoKMzYxMwplbmRvYmoKNTEgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1Bh cmVudCA0NyAwIFIgL1Jlc291cmNlcyA1NCAwIFIgL0NvbnRlbnRzIDUyIDAgUiAvTWVkaWFCb3gK WzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKNTQgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0 IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQxLjAgOCAwIFIKPj4g Pj4KZW5kb2JqCjU2IDAgb2JqCjw8IC9MZW5ndGggNTcgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2Rl ID4+CnN0cmVhbQp4Ac1cW28TRxh9318xjyClw9xnlifSkFZIVE2R2z5UfXDchbjYcXAchPLre2zv xbNer2eXerwgBQMmPjvnu5zvMnwhv5EvhCsqNl8YY5xoJ6kh1qy/LjPyJ7knr64eOZk8EkZTlTKe mqZXyeOEKGGokIZwbWkq8D5uFHVcKWIk/vHmG37c/UxDnSLKWapN9ZbE+0zC8BPf+ws+lKdcbH6f v7Tr784U4OKDpbGCTObkxxGRcvOu7S/JaE5ejUacMsLJ6CN5QV6S0b/kegQgO4/fCMV//KQNiqNG apbWoTDKmBFkNDkG6iSoHPhwSoq+qP6YPv8znpHLWfbY7dCS0mba+OPCUan1Hrxz8FeaEk8pZ9zk phTOX08CN0Z10MIrAvvBeps9rR4ndxkZZbPs82JOLn8OJDKpO38rkdrRVAsQ6cM8L5GcOgSjbUgY Do99UI0W8+nk8+LrmAhE01c8kEME8PBgypWlyjoJDnchnpVCpqg1w/PFfrBuluNPTxlRFxeEIN+m hLFAHnv6og/znESaFLaF/D8sX+yH6uo5m9yRD9nD0+1sOglkcCOlkh0p1RpNZUqdSImP77z8MQg7 ppr0FSn1VfKd+qrtTEqpZ5yAklQuabWlClQh+khofu7kbGV+LmB5Jp7UZd8erJu7xX32OtCIOiHj LAVlgpMasrOakdXUpaUZDSUnm36wfhp/C2WuVkm1az6oT6qdcKSGy2OusqQ4XmdQ34jheV0Oq6PX Xc/H09lrMkZZQ79uSpw3q5P4oBHUWgMmfZwek3v16Q+BUGpGRVhbfcqNoYZxVOI+lFAfnC9up7OM Tp57gEvWvYO24C5g8UzIOjbvmKIbPEdpmoqhpRmzhdXR4H//8C40VHVMMkWo8nF5zO0ZeGgm7mTg lUDQirK0LPw8KLGNCCUV+mWFER2AUiiUQM/qRFB1KtCUVjefSmyCpKDKuSFoSaGpEELlTn5Wfrij XDUeSmx6OKPOiUFofYYuNDeF1j8nPzpFh1mj/XzSDjOVqeDapAkrXqHrnf/Z0Sa4dlD8a7WxWxkd L0Gu7rL7C5KtIIcoGhPVj+tvD9Nl9kguH5bTGRH6giBPy+rvt6/+uhl/ygiXf79M+nXV24QBOuqU O/BePNtJPZUjEvOAYxYI6qe2hDYtZ4tZA6qEg1D+v1RXGmBpijvmeWwyo5GBrMJ4Z9coj49D3t2v suV9FqrKd5XCRm3uYz7uSJxpqphVpMAcZGyhan0vbfeDmBf1NYgHVHxlA7nGeLscf+wrM3rhFYpq yUz9SEPxrurRhtxc3eQPkHQd37U9wHp62TRhFOihOmWrB2iK/7VjTl6E2sSu2W4HrEWs7+BqgiEc WFRPhU10dLVfNpXd3kET8utktbjNluuoL/oaTVhw92OEl+Yjix9t0KguMqgHZJfk5LvGyG1nUup1 bRiCkTZBMSi0oNqLQWFQtIQ0rVtVcvB0tkP24H4rnCB8SFX2W3UjqCND9vfjp2V2vyKju2l2O37q kF3CEZZjNA+hd1ixbVqh62qxhNEtBSMiBHp9LYy1dzcrBvvBupxNxqts1gPa0TYU55LC5SzRPjSP vCoO5I3X3sG+zfk4xz6Kg9ouoORxIDRxvn+awNADD6lTWOD5cKoA1pQQYxu4RAZkg+goaIn+HBZu hhC2ob2EKU9laznHy8Fwt+9kNpXb94MVYVCmfWSe18e2aI7GIcPe1sBCdj9YJx+UaR+Xx9xevO6Z 1TbR+uCeVqXbMHa10ha6LTRen9zrclieQR0PBvmgbLbVTXSV66Y341oSRi1W7pEGLFK2Zb6q4vJP 8gCpeWEbmoQ7xayqsup3erNNEqaTxfwUiVgoQ1PuNMHW6cbkhpCJGVr75RruAePfj6WnVpq9UHWY mXUSwOV4X3uwDth3lOm+SjWaI2XQOgAld7XQ+NnJ1cr4icEQ5WXi85Ds202gW9XoaR+U7yDBHMSY omzyoEROKspiDsLYEOYgCnsEWjSfSmyCNJqh0P1NcS82QZrTFAvQA5D9SqHhvr57sZWOntnGJkha atbr/Q1QYhOE+yfSpYUs806lghInwgm005rHq7H54WgMadzAGQA/aGJbN4RBvFpv3/HmQ4nMj0xR wWssAp6fH4n6PXV2CAFOWshdUV4K8Fw5NkFWUFPpXQ9KFVWiSDhpIOEcH0KAk7gMhP5lk9XG5gfr A06X+8Zn5UfJ9SroAASClFBwuDU5BH4EFJw6Nm+L4z8CCs4OYlVP4kIuluQbw35sB2JQcJhJN9lK 7ADHoOCsHIIHiRQKrrnuiMyPQFpmcOgB8COwlYTlswEEOGGh4NggFDYK5fWF+EZXjuw/AnfyOa5w DIEghfttafOpxHYgBQUnm5f5YhMkoeDMIDY+BO7li/X/tdBQeMQmCHmZiXJ/MFzC/Qfl2S0XCmVu ZHN0cmVhbQplbmRvYmoKNTcgMCBvYmoKMTgxMAplbmRvYmoKNTUgMCBvYmoKPDwgL1R5cGUgL1Bh Z2UgL1BhcmVudCA0NyAwIFIgL1Jlc291cmNlcyA1OCAwIFIgL0NvbnRlbnRzIDU2IDAgUiAvTWVk aWFCb3gKWzAgMCA2MTIgNzkyXSA+PgplbmRvYmoKNTggMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERG IC9UZXh0IF0gL0NvbG9yU3BhY2UgPDwgL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQxLjAgOCAw IFIKPj4gPj4KZW5kb2JqCjYwIDAgb2JqCjw8IC9MZW5ndGggNjEgMCBSIC9GaWx0ZXIgL0ZsYXRl RGVjb2RlID4+CnN0cmVhbQp4Ac2Vy26bQBSG9zzFv2wk6zA3zgzdtVGkLlsJqYuqC0IgcQsBA6na t+9go/iSSWI3klUs4QENc75z+88KX7CCNKTWNyGEROI0MSxP977EV9wjvhwkigGCUpMKmXJoFQ0F jGJSmiETS6ny+yQbctIYsPYfrw+sdm0yOQPjLCW83RLt2YTwP3/2yhuVqVTr53lpp9OF8bjesGar UDT4mEHr9a7NX5Q1iLNMkoBEVuEdLpD9wFXmQXbcD6Lsux8dhSJTkkJyCAWPKNEbUY6LipTkNEeB oGxJTgxKdFgTx5EIQ5bDQTlzfji1ZHwpboIiSAhWyIpXaubyrrxfoByR14Td6+p3t+zLAR+6flkf W1knBVEpTakVFiHy6JD8SWJVsoASUu9CT+tvn/Pb0rf997kbolO74aXE68R3qPP9NzP/ByXIqfDa JEyoL89dgk55MTQuhLLN31kkgm1CLhVmTtAz7bCFmtXi09jUaPL+50OHrm9vHoryBtd/0FfF/FZO IrhA/itf1vl1XaLq2wYX0b8p71RrPmSOlU1eHQbMjlgZd6JPd+PYvY/jsW3rgZblWFHb324e40e/ 4rd48By5Ur5bDEsckO+NsSc5CIsNqcMpHhSb3WDOU9RbZ0qUF2lpEtLTpN0MXK/4fmj/Ba2GyGAK ZW5kc3RyZWFtCmVuZG9iago2MSAwIG9iago0OTUKZW5kb2JqCjU5IDAgb2JqCjw8IC9UeXBlIC9Q YWdlIC9QYXJlbnQgNDcgMCBSIC9SZXNvdXJjZXMgNjIgMCBSIC9Db250ZW50cyA2MCAwIFIgL01l ZGlhQm94ClswIDAgNjEyIDc5Ml0gPj4KZW5kb2JqCjYyIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BE RiAvVGV4dCBdIC9Db2xvclNwYWNlIDw8IC9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUMS4wIDgg MCBSCj4+ID4+CmVuZG9iagozIDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvUGFyZW50IDYzIDAgUiAv Q291bnQgOCAvS2lkcyBbIDIgMCBSIDE4IDAgUiAyMiAwIFIgMjYgMCBSCjMwIDAgUiAzNCAwIFIg MzggMCBSIDQyIDAgUiBdID4+CmVuZG9iago0NyAwIG9iago8PCAvVHlwZSAvUGFnZXMgL1BhcmVu dCA2MyAwIFIgL0NvdW50IDQgL0tpZHMgWyA0NiAwIFIgNTEgMCBSIDU1IDAgUiA1OSAwIFIKXSA+ PgplbmRvYmoKNjMgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDYxMiA3OTJd IC9Db3VudCAxMiAvS2lkcyBbIDMgMCBSIDQ3IDAgUiBdID4+CmVuZG9iago2NCAwIG9iago8PCAv VHlwZSAvQ2F0YWxvZyAvUGFnZXMgNjMgMCBSID4+CmVuZG9iagoxNSAwIG9iago8PCAvVHlwZSAv Rm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9UUEtBUkgrQ2FtYnJpYSAvRm9udERl c2NyaXB0b3IKNjUgMCBSIC9Ub1VuaWNvZGUgNjYgMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFy IDgzIC9XaWR0aHMgWyAzMzggNTA0IDU1Ngo1MzEgMjIwIDM3NSAzMDMgNDE0IDQ4OCA1NDcgNTUy IDU1OCA1MjQgNDg4IDI3MSAyNzggNTA0IDgzMiA0MzAgNDk0IDU1MiA1NDcKNDQxIDc1MiAzNzUg MjA1IDU5MyAyMDUgNDIyIDYxMSA2MTEgMjY0IDMyNCA1NTUgNzc0IDQ4MyAyMjEgNTU0IDQ1NSA2 MjEgNjIzCjQ5NiA1NjggNTYzIDkyMSA2ODEgNjUzIDY0OCA1NzUgNjA0IDMzMiBdID4+CmVuZG9i ago2NiAwIG9iago8PCAvTGVuZ3RoIDY3IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJl YW0KeAFdlMtu2zAQRff6Ci7TRWBapOwaEAQUKQJ40Qfq9gP0oBwBtSzIysJ/33PHbopmcQVfDmc4 h9J49bT/vB+Hxa2+z+f2kBbXD2M3p8v5dW6Ta9JxGLN17rqhXe7O1tpTPWUrkg/Xy5JO+7E/u7LM nFv9IOWyzFf38Kk7N+mD1r7NXZqH8egefj0dbOXwOk2/0ymNi/NZVbku9ZT7Uk9f61NyK0t93HfE h+X6SNa/HT+vU3J0RMb61lJ77tJlqts01+MxZaX3Vfn8XGVp7N6F7glN377Uc1bmRcVmv3M8Oh65 51F7y7zveZdRBGXk2lx3Lvfr/zbH4tZQ0987yddVKXm/jRXn5ViE3clSTMJSpswjFnm/6WU3WMmv W9ktPxHRjexHLCI3l91hEdFCtsYiomvZBouwFm2xiM1J0Q6LsI1swiKs5fZYhFUbgbuVsEIIwElU VlcBOIloJwucRDTIAhfsyjdbWeDCjUgIARop91BjoZHAt1LQBCOiN6LQSN4XutgAjcSrsSahCUYU dJMBGsn7aAdBw7qs2ojQSN5THwuNRFSAZJgg0kERmmjvaGu50EREk7YZoogopYMobwLfKgMX7ZUV FgWOI3SQ7jkCJ0Gku4rASVh9GxE4ic0WBS4aYGFtABdvRLocMkzk6nUX0EjkmoWIBlSZe2ZG/n6t GheN9dsYtq/zzATa7NtwauiGMb39PUznSQVMfwBFaxpzCmVuZHN0cmVhbQplbmRvYmoKNjcgMCBv YmoKNTQzCmVuZG9iago2NSAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1l IC9UUEtBUkgrQ2FtYnJpYSAvRmxhZ3MgNCAvRm9udEJCb3ggWy0xNDc1IC0yNDYzIDI4NjcgMzEx N10KL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5NTAgL0Rlc2NlbnQgLTIyMiAvQ2FwSGVpZ2h0IDY2 NyAvU3RlbVYgMCAvWEhlaWdodAo0NjcgL0F2Z1dpZHRoIDYxNSAvTWF4V2lkdGggMjkxOSAvRm9u dEZpbGUyIDY4IDAgUiA+PgplbmRvYmoKNjggMCBvYmoKPDwgL0xlbmd0aCA2OSAwIFIgL0xlbmd0 aDEgMjE5NjAgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7bx5YFPXtS+89zmaJVtH s2R5OLIsybZsy7I8I9vHtmwMNmDAgM1oY5EYwgwZSAI4IQ7EEFKSUDI1oQ2ENu19EZDeQm+bOmma ktzQkg683nQINEmbJqGQ3E4kQXy/fSQxpOn3fX+89/56stba4zln7zXttdfZ8sb1Ny8jejJKeFI5 vGpoLZE/xVEkW4Zv2SimyubbCNE8ecPaG1elym4nIYa+G1duuiFVLikmpGzLyLKheKpMPkNaO4KK VJlWIy0aWbUR92GfwEqgUyvXDKfbi7+H8opVQ7eln09+g7K4emjVMqT4zPk6kLh2/bJ0O+0nxFSA ul4GWcRPcsUACZAbSDH+1pMS/OFSitZqMkHKyT6iIhwRSAhdiHYBruXRytqV/5hVptyfWGKM/pW4 Nagg5PgfHmli6Ymm3O1/qf6w2/6R8zyKWtwh9cF16seSDYQ45v+l+tIB+0fyndKNclJ9nIg0+bzW SaeKx+gnmczFTOYfmczfM5m/ZTIXMpnzmcyfM5lzmcyHmcwHmcwfMpl3M5l3Mpm3M5nfZzJnM5kz mczPM5mfZTJvZDI/zWR+ksmczGRez2T2ZzIPZDK7M5nxTGZHJrM9k7k3k1mQyczPZAYymf5Mpi+T 6c1kejKZ7kxmaiZTm8lUZjKhTKY8kynLZLSZjDqTUUqXZc79RcYfy/gjGV+Q8XkZn5PxhzJ+X8bv yvgdGb8t47My/p2M35Txr2T8cxmflPHrMn5Nxq/K+ISMX5HxyzJ+ScYTMv6BjL8v46MyPizj52R8 UMYHZLxfxrtlfL+Md8l4p4zHZXyfjMdkfI+MtwFLzVPFUbm0VcZbZLxZxktlPFPGvTLuknGbjLMZ NrYOK1pJASAEaAHMACwBrAFsBTwAeArwHOAHgJ8CssgS/n2o0ij/F/IlwH5AAjABOAU4A7gA0OCu Edw1grtGcNcI7hrBXSO4awR3jeCuEdw1QnQYQzV6V6N3NXpXo3c1elejdzVR46le8hbgPIAnRuAC QAtgCeAphVfyKi/8niYuTVziJi6dunTm0oVLilTCT1w+dfnM5QuXFWtbdQofhj0BfApwBnBB4ZMM ijMvXHiBk5Gx1aTw4MYeZoW4fvQ2Ap8BcHisjpUVmuep0U+NrW6FWi6rgLdyDrnvE6SAe4KEAC2A GYAlABV5C/g84DL3hDSbf+uM3ZH7i18C3XGn3X3Hna43fob8LbcCrVoLtHIN0E2r7e6bVm9dn7Px Zqst98YVQDcsB1o2YnUvGxlbl+PaYL+93eXZBHC1hrkHyaMAjuQCl7Ec9yj3GPc4MXD3c7u5B5CO czu5XcRA3NyjZCcAUwJ+CvAfgF8DFNxB9DlEsrincO1XkT6Ba58kWZff43YfsXobjiPzGMu05nB3 c5vB4iB3F3cnUSLdwt1OFEg3p9PbuXly/a3cjXJ6IzfviDIoHuPWHnGLDd/n1qOd9V+NegWrn3c0 HGnQtrZy64gL8CzaUYk+y1F6E7n3ADx3D7cJFA1yo0jZ9VuRsnHckU43cXPl9ts4tuoFuVuQsvab 0+mGdHpDut9GpKzfhnS6hpt7RB0sae1FmZJ7GeYWcYu5JSDhTG4WNxvpdG4G1wtS6rnpgJlExy0i k5AfQP4WwM0oP47yt5H+F1IdtxxX3ASCDuNOy5AO4k5LkS4nUW4YMAhYBJgJmA6IcVGZau2cCYwK clK63Iwym3UTZwLVOlttqKekE/gVAMdNQrsa7Q1IGZXq0v096K9mVI4csdgbWu1cKN1QkU7LkTI2 lqXLwXRaiguVwcmtbShTogQ+COAw3QjpBsRR2ghQcG2cID+6FSm7UwtSNvTGdH19Oq1NpzXpVEyn 1UjZdeF0WpmuL0mnxZyAKYy3rkaZkhzg41wVpuzgnJwLTNFzBi4LqYbTcjqZORowRw/iOzBaDZij B3P0YI4DzNGAOQ4wR4N2L67wgRl5uFMB0hzcKRepF4zIA+QAHAA9QEOidDadxmZGp6fTuXQhYwqd k07nIWXtb9JfwLYF6a/S6bv0DJshPZtOz9AP5PJ5pKz/h/QD0Fo6hkSrg7JNUMWRcDidgdIcuzzx /I8LxAb04I+UlTV8l/LMOzpSUOg9zrJHJ/LzvZnKvLxMZW7ulUq3O1NpzUnnRvWWdE7S6pDjKD0q 9e5EjuKOLNeqQyUhM0gBq2IpRkaO9M6RR0aOer1sROQ7efkN0ntutzzMPxb5GuYeoxrJQn/7K2Vw 0unu05yU0Gc1vDihDGIeUt1TFkuD9ESosuGJx2jw8ceUwcf2KILfeFQRfPRBPij9qCzc8OAePrhj zyN7OO2wc/jHw7w4nGXEzS88P7nA1/Cfx6hOyqWP7KXBuifpl/dyQec+f2mDYx8V9rZIDf+1l36P 1tIyrBdBWnnkpCJ4jIaOvM6S8iMneSRlrPJ7tIdOlftMPbJVGTxOF9A+6JWx1UX7MN0+wtF76Q6Z OduRMibfl0530AfkC3cjZfUPHB1TBltaDXQ/ofQn9HW58WdIoYb0Dfr6ERXjrPpIVVUDS57DGC5P HP1dvsxWyfQbZ07Dq6/xwddOKILSCU8ho+LREzaHnL4CarLyK/YclkreH5SHG3pngk4zQe93Ma13 3kbh7dLShpOvQ4Jeb4vJ/V8PBFj6ndcdOQ0vvU8xa+2RN+UHS5H3fb6Gt96n0svuvIajh5XBw2CM NNHU1DDxnCL48+eUwec2w1y/abY3/Oj7VNxNhd2UDWFnbb18652BoDyUqp249677lcH7xxXB+8aV wXHQ8S/n+eDH55XBj0a54IX9iuB5kEb6sKq6QfoQT2O32T9zVirtmJxK66Py7fT7wfi39tP9uJL1 exjyj1T6xSjoc9dWGtyCUW3GI84BfrWVbh3zFewYo8HtgHvwlG2AkrGGsSlj/A1jtHOM1o5R/xh1 19mctTZbjc1cbTNGbIYqmzZsU1Xa+JCNVNgufmIUL1Ze5PyB7OKAsTSYXRY0Fnqzi7zG/IJsscBI lIKSizZl66Mbo49GeaNgMmh1eoNKrTHwCqUBC4RBxccL1pZSYynVG7uNsBSTSIzfyH+T/Nqo0hM9 rzdOIpO0A/wC7S384+Rx7aPG/yKG41RPDVKp0U3zspzqnCyb4MgyK6xZoYtrLj51cf/Fn148dVHV clG6+NzFxMUzF5XkGNUfCV0MfZfqSQvVSxWKT6MXo3+P/jVaFi2NFkf90aJoYVSM5kfdUWfUFjVH jVFtVBXloyTaG+mjCXM36e5rS1go0tltiUiw+xgvzkpUBbsT2t4F/Ycp3T2A2gS3A/rcl1DsOMYh MbfPX9B/jLpY85j7OMSbJLoHx+4fCAbzEvHu2f2J0byBRBXLfClvgHQnqmYm3N624Bd9Nmy8Wa5G umFjqsOG4IZU5nCxvyNR2jGUKOsYjAUztXIb3YBPqn/6qmAmTV0rY9wzU7qSyVRcTdNNLKFyLdnI braRPXDjtXfd8EXPwBXk6r2uK8l3zMwq3YdkJpwqp1uv3uFfXHPdE1CQr6MMJ5yJFvDu8x0OaxkT e2e1Jbj2hd2J+KzuRH7vgsFEjretO3ECpdreBQmDtw3jYaTEB+nGDTcDMZBrDhOuve8wx5AKaMGC /tZhmiRx+gngIuAfgL8D/ga4ADgP+DPgHOBDwAeAPwDeBbwDeBvwe8BZwBnAzwE/A7wB+CngJ4CT gNcB+wEPAHYDxgE7ANsB9wIWAOYDBgD9gD5AL6AH0A2YCqgFVAJCgHJAGUALUAOU0vL4X+Ifxz+K X4ifj5+Lfxh/P/5u/J342/Gz8d/F34z/Kv7z+Mn46/HX4q/GT8Rfib8cfyk+Ef9B/Pvxo/HD8efi B+MH4vvju+P3x3fFd8bH4/fFx+L3xLfFR+Nb41vim+NL4zPjvfGueFs8O/55xvzvKUP1/k98iPJ+ ODBEOQcxmaAcMSEKB/LpD/+9VB7bq68QcvlCpj4562oeVx8mWXwTyWJ34WyXL3BniHB5/7U9Mtdd TXn0SZVYrIeBghXbyGaW4DOcSpCulXPMh//Xn5f+ddO/bPkJeZX8B9kmt3+PHCXfSvf8Fvk2GSMv ke+RVJRsAA7RPWQ/cB9q5pMpZA5ZTJaj9zpygBxMX7WUDJIw/ghpBkXH07WvkffIv9PP0O/xdM3V 5CE8ZT05hic9Tqbifs1kD2b7MPkmeYp0k3tRuvo5LWfPcENkBdlADpEEro2TEbl2GrmLdJGFGFsn mYsxrcbT55PnyPMIvR0mj6L+e2QWeVL1AtFwGxmnLv8313j5v8lOXP1lbiP2d7v5UbKR3EmeJL8j 2PKTB5Iv/b9z7+rA/mXuS+QRzOIeshs8nc838b384BXe/suL0g3fAb1eBG1uA1eeAV+eJF+iPvIY 2U42UwP5CvkerbqOOv9f9/ui9u+QXbj39Z8fkuOg20HwdzcotgF8+TpG33t9J4Qzi6kOcrOCzKfZ 5BOy5PPt/0vKayELt0Hi7sZz1mPm/YiYhsnNSEcAN2eeARe4mewA15+GUXwH9W1kC1lNPbSSvEJ2 UCe5Hf2/gtqHyXdpJfpuIM/TYnIRWrUAs/ynD+wB9FK2B2jTEGonP2G6yX/CuvLvZ+wBKzEZoUXk BCFX7QH10izI23fIs3j+18jj1E158ldyliRpiOaCcyXkDcAroNt3yYug34fo4ST/k+07Pv/5/Fhw xU7lMtlOoOs/jwXSfv+1Y4FeHCJPQL82Q4aeh66/SB4k/450F0r7oUH7yL9BBp6BLI1irFc+yvkk AhrcyLBMg2zyw7R9QpmfYPWX37h8krWmMMsld1/J/xLa/Gvocy9sxf/9/F8K/B+kAKf+7G3lW9wU pVFJL3+geFatSC6gf8UADkLjHwK+A383fvGA+Ev8e8rnLv9Z+d1km9KkLEquS96Jtex/kv8iPyU/ Im+Tn5NfktfIH/lK/kf8Wf5jxaBCpTyp/Br5tqKC3Eq+/Pm7KlYrRhQzFQcU8xUVygA0KJdMg12d h7VqkCwlN8GuEeWX1GHFg8q5yjj/Mf+J8hHcYyXs3r2wTQ/BkhFp/rL4ksWLFi6YP9A/p2/WtJ7u qVO6JnfG2ttapZbmpuikxob6utqa6khVuDJUUV4WLC0pDvh9Rd5Cj1iQn5frznE5HXab1WI2Ccbs LINep9WoVUoFj4BHGXUmnO39HSsSrvZB+M4xryAmDNMvTAsliNnt8ZrESGigPN0roQwmiKU7Ye3t P0yk+oGEKvj5LtMTvE/42IOLp7nFjoTCh6936lA8UTyr3+MVTruvtA/gtomc9n6Px53gfPhOQRO+ U4fEeELoRT0a5JopCdLbz+DY5d/Xo5LUewaAZ/Un8jPFAXa31FSuGeRx2KaJzw1zOh0XDhtc7bEE sR4mht8niI11u1APfyKaKMa20CcgJ9+NhBLU+nGCWhLUNg1Tuv4R7LIz9V9Ag474Cm9HfDkoGh+8 StMLKYp6xHFxfFa/KeL2eORBY+cys/+wXtfubV+mwyywtUQFOazTo0bPKsCWtYepoZnKGc7Q0XiY I5oskM/MhtvBYEVC2jmIjDcGuqHFcrUFkYVd1zYRXJbqRNBNzlH5mQlVe0KdGoS4PCENJchO8XDZ xPiuYwJZOhg0xL3xoYX9CX4IgzpMeF/HSF8it7t3PqowCMDgiMjYHZMRY57YMSKOo8z6DgJ7Y7j0 +vr4yLJBJiZ00BtDm7a9f7tnwo3teP/2joQpmMjC5Vm3v+Pmxzucy0VWHB/fLib2z+y/ttXD+kAI nOVl4niHF0/DzTpWtDGOha6wTZbGKXGZOdLOITExunQFaIbv0K6M/HvGhYThbx5wB/zBlUw7GIEZ xAdXsKmswJUKJOL4zmXyVHfJU4O8ih0rYgzYhZB+MgdXz+/vGPF2gJ7pB4IguJ73ff5ajyfhCrIL x8c72BCH4hg9owy+LuyIMYxUATrhDlKMpz0h9ckJ6ZN5gCdKQ7GBdFW6A1oU4ENCGowNDLBJpRiQ UPu2Kyu84ji7qdqXsAYFz8tomygv657V3xFj0omeXHt/0zmn+xzy3b1XqqkTfcZD5xiRWMtsb/fM lBSMMPowNNiXUmBQLc15dE33l+960uk+mXrCwv5Ob+fg+HinV+wcHxwfOnZ5dKlXFLzjhw2G8bUd g6Ks/hT1393pTnTuGkgIgyO0UeYQezwmx/s6sfu3zFzAWNUpjgyhBt8Wr6fe7TFd6QMr8sXNaZ2D 9EMHmM6NCx9i9gZYJ7fYyUwNIrL17oRQz1QWA5rTD50YxiM64jKCriAwxLmZ1vADvo7ls9PEcnvw SFl4mA2cma7FTTwepk87j0lkKQqJ0Zn9qbJIlrqPECkUBB8HWctEpsU2h7WMZlquXD7oBd+cLDAl y8e/km/Y9iuyPW7ymsUGZtgxOnynxBMTfZjjP+oTGlBMZr2lvZ93c6wLcpybZzldEMtDNOEIyhcy msBijgte8ZQ3IQQTyvb+CXd0QBRMMJYUfbrQkUmqcMr7KmV2lFiFBI0mqJ3VE9hVUA9231GPxiuC JHaMD6YF8NppoSvrHR+5okqpwUN32dwwe8EL1XWnyGAye9kMX2cCn1kYfJ1Mr8ASmVBTBxLZbL1L ZH8oI4zX3d4vwhJBc2fKGbFDHGHMToiDMdkkDLhZe6b62OUzgzFmAvshg+jiTos4BD1F2utFsbzs /6+gj0LQ79o1MNKIMUmlmIFYg8cyorf39afVTeaTrAR41hQ2levbr1Ax0weGDersSVTmvOqEoOY4 Za1O6e6VzmBCH2ZzhQHXPkxuy4gHG0miE+t/ygbII0tMlsvy3Flz1+eap2SaYT42u29HPyxkbYe9 dMfMwxLdMXt+/3FsvMQdff1HOMq1D7YNHC5CW/9xEU6QXIu43WAbq2RdRFYg3RR3O4IXYqy/+7hE yKjcqpAr5PIwAr1yXaoT6igZRtRXrhMy/TjUKVJ1klyH9QRD7HCOwLz1e8H0eELq7b9zYGR8cIAR m9hTAgjJ9jaTBOdtPkw5lSGh8y5rS+i9bay+hdW3pOpVrF7tbYP4QznEY1D18UEv1B8GuJ+46QAT YSblnE88dvkyLOhJWF5PQuVbCICB1QYHxITSNxX9JjMYRPXkxOjwEBsHE1Ncq/ZNGR5IaK7cEF2m JLS4gzZ9B/TolK/B8swuGoawDnnlLKqhHKMDiYEge2j/cjYiUYQ/1OVtTKj8qUEq/exBoYFxs7dK Xk5UvoTOtx1X4BlTZUMo17hRxMPYeoSv2oCRD3vRa3hQBAcUZHg2hFHhZ18d4xtqlmFVV/ixqAJ0 UGS5EecumOLrs3QJbQVuiC/L6ytwQ3zVAyAKm7xc2p7ugGcLCT1G5L+GlOkLQB00TWFjwXc7Bs+6 vshuM/MYmeW9LUFlisqPUqM5keWbMgRnIXW9HjVe+H2pi3EvjY9VsXu8nKpVs5kbZIe279jlQ95N TEkyn/Iyb4L09TPBJHjPQCQyMP75isQCGE7N52uz5OrxcU3WF1+Qopcm60rK7iJ2LIesEhFrCsio 8k8Z2llvri5XxsgLlO3oPyMqxTtkk2KU3Kp4DOnb5FbuEbJJuZ7crGxE3U7U/YNs4v9B1ipeIG3K EJmv+AWxq5cQO/8e6VUMkUp+O1muWEuW838kI9xKMoP/C06XrCAS10BmK6pwSqSMtKi+jvytgBb0 3UCmKAbJCD+DzObXksXct4lPcRPqNMSiqiJ5/O+IA3kr/zSZSQ8QJ15TP4t0lUpBLnJfJyv5IbKQ /ohMxsvg5YDJitWIchDodCp+YsDLyLUoexCj8OIIXgHJR0uY2FFjIyIpInkkh5iIm7iIj+SSQuIg TmImFlJOqkgZjv6U4mwez15p4lW/lfhxmK8S9yrB2UQOr9x1kFQBYSEtycaLbSOpwLPY5xb8nacb 6Vmcg/iAD/D7+HcUHYpTygHl8yqbaqdapz6hmaT5hrZU+7hO0F3S36N/07DZ8N2sb2Y3Zu8y5hof NF4WHhI+MC0xnTCPmM9bllt+Z9VZa63TraPWJ22cLWy7x/aGvQVPUpAXgO5V9mF2ZRhbNemWfLZQ dXFJGSnL04crqsv0FRX6smpFTS0pCVZGzBZLttNZEeZJy8mqEL4tvz19sspkpo6GED7CSeGkKSKc rBJ++0q4ktZUN3N1zXxNtd9bmM2pvTW1tZGqfM5mRSGbt9kcNm8NNXlMDLg6lb20yOF3G1ubxcoi l3Ywel9753BzrrEoWib6bWrzl+hnl1T80Gf19I92u6+0JuAKRRq83bOsRVX5d+dX5EU6S/zNTZ3l nrJAca5q9Ve/mnxH8dinNyj+/sm3MEFQXIW5/km5DHwsJJulmEbrKVTqdWJhdqHLWSh6CnlltjKn oKAo22HR6Autoo7X7ZGM4gyRM/Gi6DRTaz5vMpueiRF7tsqtNBc6FaQlEnJEgibiiJjMDc4Qdtc5 54ImM2loqMSGIRIxNwCZzI4GUyQibJ+YmGAQ9tQ0c6BKIOBRq1Q2q91h84A2dTRC8zmHjXp4Prcq 7BSMvmRFYY7Q1JKcUz87QL/6JO1z+qrLPztKv/ZCWOcMFhXOCN+1dGpPQbReGw5r144oZn96cPqs Cn2Yy+XGIHmbMOMViD/mQRJryU3SJLuttrS0lq/dI5Ua8kr3FFfmlfPle/KkPPpMLM9s8PP+PQbJ oH8mZuBNWzyesL3UtSUcri8NblWGzlZhMmdNDQyTliDJcQrngsSZySEbysw9XBlhMzRVV3CBGk+V HTEDlUptS6VevgoxhgrOW6hSm0z2SFUtin6/17upuTRL5/Cj5akXF7evnLNj16Y3Hy965KvlM1a2 +O8smDJ/257WyQ/f/XhYCHRN5Yc6Wry2rHBsbPm80b4ibck3b9nxrWncRw/t6lhQ61Bwlz65tFrd dtfQ0JZmptG3Xr6gMIP3IlkjCVYh29ZlNZqXmNeYebODwP+UKlEFIenFWaNTnELLc/mObD57j+Sw 5Kt41Z58RT5VqTgdtRzgzOZC3Zac0FnG27MQ/gZ8SYtMCxCAOIWXIQYNQeFlIGiBySvPFWJvlidb FzGpVN5CYqo2F0Wq7ArzsHPq0o4bv7qw5+GVs0Ymi8OLf3RLMvnZdqr69wWPKeuTH8y7sey+5Lkf vpz84P7QDcPJ37tctJ/OOU3xahozYzwuBY8ryPbjxIiX/91aQ5dRV1DgcHKcVqdz8GYJNWbHHklX UagDzwu9z8QKnbxzj1RYUf5MrELLa/dU8KYDRrPZSQ9wnNMjHigoqNQ5twbSTJc5L0+XzTPN6VR6 6ZWgLO/OEKgQEl5Jz1jh9ZgYZzFZNn2vyVPVzNdFeFnyU3KhEJcaxcKS+kDy5dNlVR7j4sXZhaHQ aVoXbiordFiHLZ8tTQuEck7yZ+GpVfn6S39xRaXkaLQp59IPTCVtk2PJr14nDBlOPwJOl5PbpZxi n98HffVTLe/3G7g8ZR6ft0eiSouR8bwEPDcSoVcYFE4J4LlgMNh42x6DwmYwaIQDJhNXvlUUQ67N GpnZZxtk+TfhmOY1bG6JMKkn0HRZ/Vk2XOlTB67lseNzMlDDBB6aYYMVVNROn9K6e+Gly2QXVR1e 9K3lw+6pN85YdWDBtEfW3LLeUllHHy4qsqiVtunFfhy4mftL2vZvtpzkufnLgruS5198Ofn+/Tfe FJ3fW5YdDhsKKtqbUzLBFUAmckiRZFZq1JpnYmqb2WJ+JmbhyVaDrL8YpzOUHq2VmZ1rWCMPjD6r tZVUJOenmUCfKQs49J+0Nxc5DeHrqB7W2z1tHYz2N1/+RMnjudWkXSpK0V7h8AtZVdVVz8Rys6t5 2yivcPAaTa07t5oXR8tCZx1MthwRWJQIs6MRDOqVqtSwqN3uiPg5EEs2I4xYJi8F4bx2s832T2Pm nygK52QpNRqbr4KOlPschs2Xfl5dZjGpVfJEHspMpIHLi86vb6I3PfizDqkQNiRssIrSlE+f4p+Z 1xuYllx14vUvmCVbQZgV+SFkS4AdCUoOeBbWPRKxaHP53D1aRdZmp7PQtFkZ+hOm9KerFiFcqSz0 Yx7VZix/GLqVU1HBDO0w11Rz8tLI7b7tR/dP23Hp0JH/vmPX5WTW0W+teqRn4LEb5t81JyDMOEQV 336LSoe+kvzpr99PvrCf+8/kyeTETmo4+iYtuLvv8d9gZMwK1IPy+fA1YpIvV+TFPVJuLuQmxX2Z 9yV8yR4L79hSVFReIItBlUm25SmVZkSXFzHIMyT4n+hbBSueDasdqEmZbGbV1PQbWe6KcHJKhrYX 3n+3657nh9c0bVz30PSKmWvbhqsuTeosceivF5mj3xl5ZkWFYvak+9bN3dCZp0jP4B+YQYhEyTKp JtdNwmHCh0FfMkldpFWpVc/EPH611fJMzDqJn7THypcWFLj9Przx2lJX1+wL061ZMFchNiUTlluY ZVlRmbVKi1ZmdvL6zCzzF85RXqgcDlklIGyBCt7Lw5bJKza4RZ/V2/3XqMX599/bt69pXs38QH1j ZfIDf8zTXxwJhsOr181bubCu9Z6187mZyW91tXqYoF27cj179L6JWo1r0dIDXT3FmnDN7S2Herry 9NzXL/0PV+fmBUu2tEGj1l6+wO+FxFWSMckYYutWqDyEeqJX2JkJi6LGbsGa4xSdo05FNu905uqL ihS55QpesUcqt1iYbFoUzgMzHNThKBbPGY2VxefU6ipyoDJl1SCsIFhoEVQws4YxAjEKyhbN3AAD j3ak4UpLPgfuy+arAhLNHDp7xroxT8YOuqXFxPQLa2zlnJs3V9+y6eYd7cv/c1vPnlXDjs7F3a03 RiMrV4zeP6Pt5qeHvnKS1vXfEL795u4b5kcb19w9be3B+UJu8uP+pYHKofbJS/uqpdX3L16+Z0FJ DTUzG9MGSb8TciKSOVK50WyCUTPxxgKaxRcUmLQu4uJdkBmeO8Bn6wqcbQUHRNGj2wrN9LBZsEX7 bJAKH5+F53Kd4Y6kjaHFA2PNY8XKCIeixpRyX9sUjUvtwcq6uq2yzNfB57Tot4SaqoOWYSxRB+bG q+2fkbS0qwVHUXNUQcwNy3sx6vmwHG9i1GESkXI1snZqLJbSct5usz8TC9r48H6/P5KzNTs1QlhD qKMjIo8RkmpVq9RM90DztFNly+ZsbIiyYJoyywlnUyyzWvzekYfjm/5tXZXOUhSmB+rLhJKpN/R0 rpicYwo00QcagwL91aoZ3Y3VU0pr7zh0F/fg9DrRAenM9nbOuhQdumeKJxx/8A5u3TypUAiHjUWx WZiBHTP4JWbgIXdKc1SiiU5Tibps2qNmWbWc1bCsRs5qJS3atKKRTtO6LWabiP0VXl7DzbQo84xO JeFztG53rsto9HqUxUaB9ihzQydlQTsJFkWguvCr0zTAgpo5fRakbOLwmC1U3ljIiyinxptytkbQ Nysq4Ta/TwtUBi1f10YPlFSFvcmhbcnn3MWV8JLCGmeZD17zZ6f4WktpcX5WtE4XDuv8fQs//ZZi wYJpAR0OnbC5XlQPYq4+suU4Xs6ckiBYtMdWybBZxvAZT0kNWjoNlXQa6ug0n9nGc2a9O5/XaLHg WnIV2cRZqNbyviKbLR9nY81mjdWCd+D5AQ0cJWajZCPFjC6y8oRTPHfIE2ZHliibGM8mmdonWLBF sDD1SzkPmDf/b8mJryV/a8ZZZg/9VnPYLLxK275OlR8GI5PoeH6RJ5CTfPgBxdxPn1Y0x+aGXdgo GCqD3sGmz95XrP50D/fpzklNtYwGruD8nk9fZatcL2xOgj+J/WoV+QMOMF5+73nGIEz5PUnHclwF zVMUI2gpxbTGrmK9PsAHviyt1Y/qE/oJvYLoBX2v/kv6/XqlgdfrXZW0QlHBVzwpKey+okMxn020 VFr2WxIWRSUQZ2EnVgOBsi6FxYqSK8uWZyu38VreJrgEXnjEJVisVk3+GNX7+Sr2UC2EqqqqunRM g9JRFDShINPrINwIJCeZHcNaBiccrvi64KJ12KJklD1j1NaldD+ITky4fLK75vfXVBf55M0I9ibe mmZoF/YsUDMe7hEvsyC1X+GeNs57dG7PxmYcDvEUz+2avsS5bXB0tG34tiinswbKkn82/OdrFZ2V sTXNDygGpk66qfPBp7JaR26rnzXr7qqQu+XubckDU5uqC+yGMD3BjSxvaHO13YDj+aQStL+o3Ido QgVZLPnKaIkSq/Y+SSmYbSa7kOXN8vLevVKWPcd1KJZDcql2m5/RL4vxxe+vFCoqcscsstvOKAKb fmXysOnOlpa00YOEUUd6ftibeQv9AXUApgWyBpcdE05ZeWb4bHSRonPR8KSbHp09/OI9U7d1dXbw WY5A5ONJ2Z6W6ZW33blufUPvDB9fQKe0eVe9+eTTZze4C5sERctgT02+WVut+/SNaQuiVZaXX37l x96pXRXQr+WY5SxImIfcKsVEHKXhEjgsXzBqmSwSs2AWzby2wEyNZurC5sVf0mU2Oo28cZ/ktBdg M7ZXKhAEQWcWLRYvzt97ddvc8grGDEeOC9gZImyaKaZjbTzN2LweW3PXOWxaTy5ah8nbUrsyrFny ilaH3R6IkF7R+KlbTVVt4c6VLc7Gwckdt0oNkekD8yLfP7H2tXtm7eQPvtHanT//2Nic++P1tbG2 +qYSy6fnHn73Tig3x+amCIKDhdhx3yhVmJ4VBOOhmGCLWEPOEB9ikygsKSgAV9k81KpDMTXRUN2Y 2VrIexkrmXh7vfVlbFZpqf48F1PCi9UBcxTexWyuMg6OvNpbF2CLRWY2DsZX7LZhNrFaKGp4RZp/ Kmuw9sOowdiyaHn0wJGNP7qjbWVDtqe+PTR67+q1ZY31je7sa7h4+/T2Ype+WndA0d5efPGDA++u tTmTh6cvlsqsJycmThg9jZXNsJ4cGQF3HwZ3XeDvbVKbaLHne0y86cuSx6O3k8niW67zLo64BJfo uuDCtstlV9h5+z6YB30+n79X0qPFYSYes7AtJ8drvkct0+Ejc8NpUwP4m2FrisXCafAWv+86Byt6 bQDCdw0F4Mp5mG8Cma7jmduqUvOj0k2j037ys5teuWvZ7jkh/tJ4zaahWdtab1KV9sVuvEP/bHtP 8O8f7X3nTmnNN3aYb/nqgqYOOmflfVMOPsrWhxmY5h+VTyBmtlISdWqN+lBMYxPMYLOd/jloJKIg iuKEeEpUZvEIG09IzkJfl4gwSxFf9OU8eG+c56AY5Mac2IZOHBXoNGMoGPmo6heM37IXxsSUCW3L uUgVk2Nmz8Dmq04JD6ekplmB6FqkCmE0hE8KsT2yRbjh81mukvLkjWV+m26T3+UwZSm0TTePzZ9R N2yJVHjK/e6s8/y8S0+3x7w2mH2DvVDq4BZF4F7kRCpW7RgM6L89KWz2S0t6luN4FmlJtvK/By+r SCuZTS5I89o8swIBnSakqeU1eydqqbG2oDZUy2tra0PGWXSWRARqgy0yCgVCSDgvXBaUXl4QQl0U t+DJn6Uqo6uL79oruXJDLXzL3pAQ0BkKe4oYkUpAiKKifE9bW0+HKFhoT0d+fh+nLQ4rSifdoxSg FkqlLYIfTvewVUBvRI8em21O5J5SWUBOBkE95uNhMUC8DQtBkK2xyKDhZBXix1dNQtoKyjLD5Ae2 4SQc3BCyWDtgKVlMpwEUD6jloBV2PbJ3G5EXBNlgyu5vHVsyamXMjKnDQ2UdY8E9cERlkZeMK9sl byH/++PagqJXj8+O9uS1xy6suLdh5es7lh26tbVvWqhWmtnV3bBsvLdrMl16aeoNg5GuclvV3Pol cVck8sBD8++KZQe6GvfO5Oep9QU3NT992NZY7/MLbWumLn5olrNhUWfLjQHL1KqGJU2lX1o4d+vs ElPy1OYdgdhAuP+Wui2fnfPPqZ0/p3J+NLem1AUZxr5KUQg71UhWSFGeUZcrBqIMEYYES5AvLik+ FDOX2EQqh07YOlRfdyhWTxqoYczpjBLvWGVahCtBdzlOdI2xYtv5tCfLVln4M/Kak4+NPNsqsJAD BFmmVdqdvVKXWonoKsX0BQORurmtJVZjYFLylkChI8s9Y3Kx1BdUW0uCyY1MzmVz9lEUK9CMFjGn ZtpNs5Lb57V44bsazGJ7jKrG7u/M7eoJJu+KNQZc2IrKUs93ZBYo2KzZUOs/4V0GD6s1Vyp1KFyK QzGXLWO9jdzwWp4a+bd4zsgvQcLzdBtnGeN0aRcEqazIulAw+PJZ4SwJLVq36FzKPme0F9FuXp4v c1XZKiuTgG49dkPA48hSOMPlf2oSyiPJ25Sxl1765BzG3tZJn5emhxyaGu2lmrnt3izZO0XkXhEF 5yRy33Fivvwec4HgRMmplW0Km1BRWtEkOtxKWxFfInF4KcEZcNbT6MoN8xWhikMxd8hmzD4UMxqb mw7FmolEs002V5GSlI7VpmdSy/jpgNbIDgQzQqktSXpXmHPSEYHXCjWROUsjVXWI9rFv2jtFwFfN IjhyaJvpA3bSCATKe8QM49NMXil6bK5oXUVIq/GV0ucqRur+QMWqmZXJ0RyXvrD81sI80V3PKLOh KmBSp7nNlau1wUgw6oJzXahC+FuqfjO5o60FRo03WY15Vc37y3MNF2SqhbNyA+211zAc8g8q0t+A inZSKdkU2F8dikHFLYdiVmLDe1UylpUmRFbKjUqRQbbDvmuFNzOHz4/vk3/5ZMiaagn/Os7tnZXm 6jVgls4JJG+WFKzIM8SxvRNliDCkiaic7siMWcramtpDsd6cGtuSZxcvXnQotthItcXBTmW7qp1v 35elErTlY1EmDbCmLJWYakej/ZYxo4e2vwV/lYksGpG+ByuKjGfpIOkaw7GNiaPYwCGVRYkdVWH9 +iHSEAWm28EgLKXslKACe1TmZ7NNquyGpAJ4kIq0SDB9ZwqPFcqeUvvUjvWqiitk9/LKRpuZgoor dczlTpmHlLrQNdnRaV0tnvgWZ/eiofr2ofYCncVfnryVmQStxV1Y4S/umFl0tU5n8xRW5JV0dftV WVafL3mb3+M0MC17v4kvVESbfMLCJT1dgcDM229Mbu9pFB0Ia6btxZw1bf5cQeyZVp186PqWgbWx Urve19lTlryvIVpos7A19DpFZf4BOKwIgcNRcovUVMEYUM4sahlDQYZcuVEcmuTgwlNbybPFxYFD sWJjmdlYydzcSqF2TKNpLiu1jhVim8nUG+nE84KJ9hSCByleyOEaiONV8svMSNlZT4Z0GXJeY21T 5FRftcRwjxShlGnVWNy+ykCgs88vG6KMXXq/SZ89dcGi6to5raU2jdUfyhCqc/2UkjxTQc/UyuTO lLxfT4ynFd2S11U9beXs5PaOZjAq7SHzp+FTZGGXM0UqIPAN90p4E5zD5+xVC3ZBT6fZt+lEA/RC l58NKfw2arK38UxuUclDH9lSD3x1SZdjrGnvnb1sun4d5qynfr3hxOjp36x+Lblj2+3tiyfltK7t 2nSX8NcLB99Zc/FPz7yzjn7yk9+2rt4z46GXFvwM68GU5CyFHhwsJvVkVCpl4Uc46m7ir/BjK7tX 8ttrcyIFET6yD06841k4CYdidmPhtnB6PUCKTRm0JxxuJM4cvn6MuXqSFjVGJg9w+IKp2DdS9jYN fnxma5baq8rbtZTf57sS7JZVRN6jgX9Msdhc4enzqV1MjZDasK3VOoKVyZGicqdGYXAEyj9oyjI2 d02bXHzwcPwH90y9rcrZNDu26fZ362f2evJ/3ir5nCwCYCvpbOTndzUV55i1NdqnFS0NfuHvfz54 dp2LLhkcaRVffZnu8E6fUir7+KCPCB7mI6I1X/Lny8JM3RWaUkMpX7pPMtjtRRYL3N29FsFpdAh2 15hGpgnb3YTDkcA2Y2p3EzmLd2ctbMcuT/jqzibl8abk+Bpf3u6oc8gWA3se5slnNjUKMTlSGXRo axetlw4e3vCT7ZPXRztjWkd5UfJtZ+P0mrvuW7OmdFLDpJzs5Cy8O/W1tNGBpikVf/vgmXfX5YlN wqe7J3UU23X8G4tumFxw6vvYzxQ2hth+RtZmvhxzDZC4lG93ObHzdtpYJMP/rM9opAaiETScldco Rw1s9TUL9i4EPgxKQavRlASoeSw/rcX5bEllMXeEKE7ih5HMy4f3iWW05d1rvHxZMzNOPbOZ/6S8 sIV1i1d1NIbWOWtDRZPbXPZIJLnqGvtm59unlar+UBsu7e2sTH5tQYfI4j7X2KlqHZvZYuzUdJhZ mDwq2UM5LTkzcvgf5ODfBQg5IrQxx59HmdR2me1dIWzQqdJvuMVwr4HzGWoMHE8MAl4W9xoGDUqt 0pBXYcPLtb2SzV6Bd0B7K4Scgy5XaRXFb7o0wlhhYUQzlvLTWbD5LBYJ9hYq45Ez5oMSSxaBGMzB WJQKOS9azzY9GT5fjS0j/BVh27lUTB5+RSYSzV0etEd76nqX+HuX3bCmpXbp9t6+J7uXulcsKuqo FYv7VixY3TLw9XVtdyzizkY7crtbK6LVwbKpS2MzVsbyXdY3Fs42eqPlEamm3N+1tH3WJinLwujk w+/wXlIchb2aK4UdAm8VLZI/1GWRDMYui7DPYed0RhU18Cq1pCNwrnR/VhstVq02X63Uj+FNcQNj +mkWmMJuLsP1hpZLp4NBbGhZWL0ZL0dtHpuHiTbbpjpktcYmz1fV7LXqd9P25PeFsvqy4s7C8slb Y3dteZgf1xS3LFnw92XJ9qENrbmegtqO5kef5vDDQ0qmIAbhw+8N8bNOqTDv2dxc96FYrg07Va+a V++TvHZLGS2Dp0ON9jExH1KbCqoZDBXcGOJ6sFPwA4qZ21HM7BQzthH5FR2zR1dCaVfCDwiZy8MG O1IhJLmcCkTI8/DLTn5gCs0zF7U1+jvn+lTZFm+A5qmspbXvNqmMs/f1LLilMcvXzH8vyd98e3Np fvfUML21oRGv+nThS3OmxdKhh/l9XQ/cTW/va/Gxf2thufw3hQ7zLECkRdJWWuBEVbK4s1pg4TCN jOFWIa912gVLPgtCH4ops0x2Nw7cWLLBobb8fNHl1Go9IkSyST6xgdeiVDgDhzd9sgOeL1ZV/PoZ P0S+En62yKcWPhd+/maF35KV/T9etwrlUXpLoLQ0L/ncLcmPcj0BcCOst4pu96RAUkXfrWx2l5Yh 4q7xTJYuubkPpjXkamRbk3f5U1UZZuQjL0lCtiAvF0CId8EPZA5bHjJWEcjEULa8ljCEKJPc4wJi 1aCAVWDYJGP5uiYjYtdWkWFTClt9PLURs1GHiLUcwlBkOXMLlRqjr8hqzbNw1GSy4I2LJi8P8WqI gBylZpFqEOr6eHUElEr5HSAQnD72g22WIjaHcMt10WvLNXTjWfg6P/nJzguOAgjDzsYSg+ErlN7/ ZiLbXF5LF0FsPa7kW9u5Dy4J3B+6JuUxXysQYCTkeNVnn9A/+TvyS3HaJaw25jVJl0RIhANBix+D fnUkfpyUXv4Hc57wrxH+IVUi4y4l2Qpvpdnm4wu9hZB/r1pXxYcqQwjfVBpJtrtUgUh+pdZnNjf4 UlPGsSYEE668jgml9kDsQI8sEhQ7nmv2O5b0fodVBa4e7cEpKEuGEFivHJzmbltOYRGd7J/R8NN3 wtMDydWzsy17HjNZfMXJI56auvJTvyyrLrPTHTNsdq71oDviduSrw2G9NDmZPNnWacRiXW3zu147 Yfc53F4FyFLUUId/O1IUrc3FVshQ5ajIZXbAmpwq60cF9KNZ7zTZu97V/1XPqSXkiFpQi2qE2dV6 Ca6O/puSIlckgt0WKOWdDiccUodRc1CttuNlt1hiT7EfZuzcFWLA4ZdjcDBor8N4BxfBkCnZUn3F OtfJb2VwmiD1yuYa3nNqTlM3snluXceAoagwPxTpCCbfc3v8Abov5DdnZR85YbKEGlM6NOvOx6Zn vVIiOuo3DnAfTWnMx1qmt3ly3I2BpJ6eKW7PC2Z0CXOeCQmYDQmwkickK87B6DicFbdyWl7UZnXx 2Ry2dWekEuSzlHq5xWjNJjhHx7l4nZLDmZ+9EqdnK5jeqD2oU7AVvQCyo8hiCpaly9Lx1oNEVjYc A2NpNg+pkP1RhIxCsJRBbP/llY2dh4Jjx44DCa9gnU+9SQ0uXoR3DjjzVkM9hdgl42wMjnxhLavj Z3+W5IqSH1U1VjvncX+79Fuqrq72F7loYfJ3Yb6xqG8yFao++7Hg7ZnFuOtMfkjb8ZvoLOKVzKoj E1kSm5VKncUd1uuN2fIS+8orVSQUzPkQL/RTh7ACbM0M0JrsyuULayMVVvV7nbHOjRs6miqn4STZ VObbPYubr8dZTB6nFiNSAZcgvMCLfC//JV5p5Hl1QlJRTvmcSqNVPVcMwyicjVTJh7/Y8bdzmBoC HRZ2tG/9iRMn+O3vv39p6L33MN5VuG8dxssTh6TjE6McfY7jlAp5nAS0whjZVXWvvYfu6HURv2jb J/dX48RkreTWE3ViVEdV2ud02UqqamPXGzAQVZZBvgnzKdLvdmHIc85V4Xds7JaeNNAfvsY9z754 APtgTCvpi1yUW4iniZKZozz3vEQotfFUoaSkuBHsS5/pw7Q8NR4umqykp+iLjzM6LcQg7Xg378OJ zmlSiajR2Ik/IRWzVxichzfbR+0QpwftCv9zJb5RQsw5W3Q6ODYh9qKCLapnT6cEJe0RhHIu/YRF LPGo1MnJTBgxfXKSRSKzebwHTp+cjOpcNeHGSE5pT9WMJeYd65+adttXJhvzKxom11RavSfo/sKS qobpTVMXDjdNu6l28eIDjRVdd84s6Wjr6Jzd3D25wXWM0RnnXvlv0IWgdDbxSYIa88/O1qtFDQ8p EowyYU9ffa1yEqOTQ6IqdSBl+2i7Iat43kBTuEJlUO7zTBfbblg+PTpp07z8WAfoupx/mafKr0NK 3fCfJAkHOyS7xqbOpVlZerVG73a7bKLdpT/Ku46aQh/97qyQeZpwOvMy53SV62RVjvMk+InzP8zZ Yw6SzerwXFfCfxLS64v6ZjbUBUxJ85UsfZt/uagnr2XZiim1nXcMtM+8roD/swFeTuaPco/INMgj dVKOxiGq7SSP5uW57Q53drYB/7zGfNTNHzWkRsg4KJxmGNbwF1UgDxtahi6yinmuK9GIXu+dPbuh xGs20T9fzSv3scHER3pqa6YubEkN7WqJcecuSNmrkLJislSKiHlms9bptGvy7HyO/XEpT6FVSoKl S1msKeaLn9K4XGatUq0Sd5nNpa5irda52xU6GwmxJTv00emqkywlIdkqvRJk1htHrdi+C6dm0ARt YWaIndJjgby6lHuNUz6pk7sp8VOpuRfC0SKbMMf02avBB+/dGKmvc1YOd/9H66ZNP+/77gu28p6F 614Y2G/ILQ8lf1O5/Dd7R9u6li8KdW9oOzXREHn68ZqBefEbb3s19QtXitAk3ofgo4L8kb7e7tZZ XcH2oVVL1y8f+n8ALmkfQQplbmRzdHJlYW0KZW5kb2JqCjY5IDAgb2JqCjE0NTExCmVuZG9iagox MyAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9YVUNT UVkrTHVjaWRhR3JhbmRlLUJvbGQgL0ZvbnREZXNjcmlwdG9yCjcwIDAgUiAvRW5jb2RpbmcgL01h Y1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTE2IC9XaWR0aHMgWyAzMzAK MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNjYwIDY2MCA2NjAgNjYwIDY2MCA2NjAgNjYw IDY2MCA2NjAgNjYwIDI0NwowIDAgMCAwIDAgMCAwIDAgNzEyIDc5MyAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDM3MSAwCjM3MSAwIDAgMCAwIDAgMCA2NjMgNTg2 IDAgMCAwIDAgMCAwIDMyNSA5NzAgNjU3IDYzOSAwIDAgMCAwIDQwNSBdID4+CmVuZG9iago3MCAw IG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9YVUNTUVkrTHVjaWRhR3Jh bmRlLUJvbGQgL0ZsYWdzIDMyIC9Gb250QkJveApbLTEwODYgLTQ0MCAxNzM0IDExNjldIC9JdGFs aWNBbmdsZSAwIC9Bc2NlbnQgOTY3IC9EZXNjZW50IC0yMTEgL0NhcEhlaWdodAo3MjMgL1N0ZW1W IDE1MCAvWEhlaWdodCA1MzYgL1N0ZW1IIDEwMCAvQXZnV2lkdGggLTUyMyAvTWF4V2lkdGggMTc1 MCAvRm9udEZpbGUyCjcxIDAgUiA+PgplbmRvYmoKNzEgMCBvYmoKPDwgL0xlbmd0aCA3MiAwIFIg L0xlbmd0aDEgMTI2NjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBvXoLfFTVue/6 1t573o89k5nJJJOQmQwBZMCEhACBVEaSQCRaw9MEjCSSYEDeIlVQicQIBqRQGKye0yO2tfblZSco TVBrqojWaosWgVZLKbVHW80VX5Uq2bn/tWcSIdd6vb/Tc/bMt771Xt/6Xmvttfa6tTc3MSdrYRKr XtCwegkznvw9jNGbi1c0rE6ms84DP7N4/bpwMm0rYEyZtGT1DSuSaXczY86iG5bfmmqf/RFjnnBz U0NjspyJ9hOakZFM03jg4c0r1t2STGf9O3D98lWLU+XZPUgXrmi4JTU+ewPp8MqGFU3AePIxHhuz etVN64wky/cBz129tilVn2oYs5xkhNwgW8Hc7GpmRkplBWwjY3K7swjzJaOcWGvkF6uWLHKXfkwh i9HdY9ueEfSyX57yn/2k+vxG52nrAtS1GvVFAfo1P6lXM+Zin1R/MsV5erBElIon2MXWxLrYDYA6 wJzY5bnsap6GeosQrgJsAnwT8CBAYYx7mQoIAwoAGkDhXpQFWMjAGf099Eb8Zqu95I+nA+lZx15D sPG2QGjjbRmvvIr4+m8gWLEawfJVCG5cGQgtWrlq5aaVEruRbly5aW3mupt9/qwbliFYshRBU7Mv tKp5U/M3myXWpDaFm7Sm001KTxM1Nbetycy4KbChLCNyK4Dzbr6XJx6fkqP381gX8QNA8S5iB222 krMJc+xyF5/CJ7MpLIeHeQ4zsRgfQX3gcKy/h2d3ejwlT/FsnpXKyOrMLyjpRklWZ0ZmKuJWUSVr sE1mZ1qaUZLZ6XShJAMlotcA9XWaYrbLC+g4I3qNXmWcxehYCv82hV9J4aMp/DI9b9R7KYV/lcIv AoNG+mUKv5DCR+j5Tjlmv9xKz0FeduSGALz/KB3unFACuo4jkhNJRXzpycgBq6vE/STdyXIAnGKd eyXw6pLOXQKNPLDLIliWd8BqKwGOHrA7DNyJdBeFOhORnC6KdO7KAQomkXwQrP0nHO/q74lP+U9v Wsnm3ZbY1oQc27WbYmwH7UjYYrsSUmx3gse+nSjMefA+Orr39N6ze6W9CYrFExmhkngCzO7iKzvv VGJdfHnn00pMCOP6AxBmyxO8khFSoQMjRoI+4EDAwJ0OpyEQf2c4NxVJD5Z08xD3d0qYGU/vDCCN pr5OqwMFPjrfaWjJ+QMgE1M+3wnV7aZTdF/nsAjSpzp9GSWX2+gZetqQzi9SuIeeRkN2+Wj6A1MB nIURFhixFvo55P4EdRktDqVwdwr/LIUPpvDjKdyZxP2nqavT4QINB6gDQ9ifoA5M9ihpA1LVBqSq daakqnVCqk9RK21mHpYDC9wseniSmmkpK4Sk0zs3mSDe0Z1tAo3q3CoDjei8S6DhB+7EPA5RLkjO PYAKmHRGZ8YwwSVEgga7EHF5oAE5cbU1ktN3Hrz8DIz9rAVa099z4JzfX2Jgj1fguOOc01ny94+l 2MctFqPCh4VFRoUPhw83Ktg/DGSWFHTEO6o7JKNBhydYEn9zbH6J+iaJnjozhxkVJ3SqnhJtvxLb 36bE1D9X/3nnn6XtbVDSMxkZJeEzU888eGb/mafPnD5jun0Tcu9wu0vuSI3ZMnmKMWZLauyW0WOS 6ZDR9YGWaJIWX4svWNLSxmM72+TYnehlE/oXRIW2TKsu2dJmi7WKAdvy8kribTk5CGAMl9/KJS5z hTnoEzpH/wD+iD6mvzMHvIvw2Tn0CZsKqAZI3E0fcw9zciva2IFNdI5bgN2slFsBJoDESlG3lD4C PEj76CH0uZv2UAJ4J+2ibwH/BPhR5qSHUf4I8HdR/n3gn6DNw4DviraA3YCdgEk0Bc4/h6ZQKX0N 7fOpgMYBj6GxdCnwDOAr0P5ylJcBX4byOPAMtL0ccBlgCiAfMCa+uzQ00R+c4PcX+73j/e4iv6PQ bx3nNxX4pXw/u9Q/YqRr1Ej36JhrTMydG3UNj7qH5bjCOW636nFYbXaHyWxxSLLiYMQdTPLm5EhX S09L/ZKc457qrnZLIcp2Bs2ZTr+a7vTKPueY0tGlo0pHlA4vzS0Nlw4rDZUGS/2l3lJ3qbXUVCqV stLqItK8Vaxq7jQtjYDnTNOKYlVdUni2Vhir0qzVC2s6iHbUIlfjW7EWzNXkrV0cyFu2YGENNF0U t4W6ofxMq6pvu7e2g7NpGm3VonNqBIrPqtHCW7tUNremg9O02tpabWJVNeJsWm0sW2usQrWW7Fqt UER2ZteyKm3yLC0UnRb7ouemmy7M7Rg1okIbXdGgjamoL7+w4P8dNzqiL6iHAYwxEKwbWnzR4J8n brrpC2syNE/S+38VD4zxeR+i7tDhYjEqqwnVCojFtKAWh3hAVYoHF7Cii06EK5aVd9HJJPpdEv0+ iV5PojcEMkha12EVwr1s9rQqzTIbUL1Qy4wi8QISE5BwRKeZYiwDe78XWDS50bk4lGeKUsb6/2CE bxnh64zpN/e/zZhpImIvibz/yiP2aALk/0onou1jbD4ovbL/x4h3szrEZ/R/7593Ctv9gMaTg4rZ q7Ddj2kUNoIj2AvYRoo59wGeRI6d/SrVRzf7K3uEvfDPexQl9IMLy+EvRoGWI2wV++TCfCP+KEIB nz93fh79ktg+NrCLfihZSxrLvVI7e5odYAl2akjLboy8h+3CwmVl71MelrBt9CSlsTfZK9g7b+M/ k+5mP0Kb7iHtRPIUflvRevChS9gn1MIuZyewAx/HDlCImthLhG0zewczfYO9wzazpylrkGeplkK+ 4pGZ/GhSo5Lp/4ZwI3j9HFv81XumUSRR8J/Vh2XkwT6kZPnn80im5RS3+2ET0DfDPozYlGQ59GEl dGAixsiiAHTNQhI7x94F909AK7rZTnYXu0XI06h3KeqFwVOVZOLsH+DqWfZz9sBALaw0jMUMLX+t /8eUx0Yi/dzASF+OlSWC7wP2bGGg45XPbU55LWXnSQv/aKAv/X0jdpAdZJ+y0+w99mtS2UHaDsqe Y89A37ZD6ttB4UZ2PfuQSGfSM5hXNX5f8ihZipjJxc9GtgezF9ayCrScopcx0hc9e6CPQ3TcVE2v DbEkxn4BO96H/i58fnphIhXfI93CPmIzLyp5E/N5hf+MbYPdbGYrjbJV8j65G6OMTv7i8dlXVJZO mVwyaeKE4vFFheMK8i8dOyY2+pJRI0fkDY/mRsI5w7KzQpkZwfSA35fm9ahul9Nht1ktZpMiS5zY GApqwbKaimVaRlk9XHF5VA1rjq+fvSpfY95QJOoJF+XXjk3V0pSYxtKqNB9WVBafVKuZYkOrfF2T 8tQPImh8VShcocl5+EdnNjRqo2bXRKLq8dBgeS261TLLaiKRkMbz8L8CRfjPbAg3amo18lFg5Fyh seoaAV39ZyYhk02K1CKcXaMNG0hiof8CIuFN+nuGkPl1alc7HBll5RrzdTDHGY35RbWzk5jGSrVR 2HjkqYgZvbF8jXwfaJSmkf8qTOniIUSz05O+gAcVjcuiFY1LwdHG+s95ejbJ0Ui4Pdw+u8ZTFIpE DKKxEM6q6bDbyqJlTTbMAlsSZLAOmx05dpEBsazuIMdlZES4o2Iy9jMWJ9jnFeRWCFimxbfVIxIt B99QkvZ5CTbH2y8sYmiWrMRQzYiRMaZmKtPMSSLCS7V4g8a2hTvG9LRvx37q+vqYozHa2HBtjSY1 gKgOJuVVNM/VsqqqFyALRADqm8NC3OVGIIQXrmgOtyMt6tYjjJaj6cX5jc1N9UJNqD5ajjJrWc2W SE8IG76aLRWaJ6Y50dy54c2Q1F4RXBoWyfb2LWFtHzZ6F5RGRB0oQXDsmHB7RRSjobOKZdOExPIH xWZo4xWNhnDi2xrCWsv1y8Az/Bu2D+h/pF3VHH+PQDqQD1oK6xAMFtBYv0xMZRlaykDh9m1NxlS3 G1ODvopNjwDRENrP5qH1gpqK5mgF+JkaEAxBeylvaNtIRMuIiYbt7RWCxIZGUC84g38GNmQgI5mA TYRiBHrKtPhcA7G5hgwwYryhvDaVlaqAEhly0OL15bW1YlJJAWjmvC3KpdFwu+jUnKf5YmrkMMp6 xo6pml1TUS60EzV5Wc3XeoOhXsSxjR7IpiDqtOf3CiaJkjnRqllJLWgW/BFB/dykAYNrKcmjaqq+ 0evLwdDLaDs9Or2+vX16NDy9vb69oau/5fpoWI22dzgc7asr6sOG5RPyD20LadO312pqfTNNhpCF vk3HBjJt1kIhnunh5gbk4D81GpkUinjQdbIOPMcXF6fsDBoPvRd21q6+ixk74JFC4enCvXTBK4Q0 dZIwU1AyrwZ2sBhDVDQaAewDLxE8JCxFqs2rWDonxaBQBEMaCiP83qxULjqJRIQNbeuKs+uR0Fpm 1STTYXZ9qJPF82OQXb0o6Rko8c8TJS0DJYPN66OQVVC8xBg68c90Gv58UJ/bPVFvuEQ4c1CH/xWN Ws9czPHcJM0CjhniTiurkUJcVEGMhyQRs8WwJJRq6TGjoeAJvGS7Gg0fjWpqTFPKanpCpbVh1QMH SYPKkOpRqKl6NPpLEk6U+VSNSjUKCLNicKpgI5x++iQUDjYMV7TXp7Tvwvmhqqjd2DxoR8lZwHDF JMEGNQq7DSX54fFGxVRfEtqeXOA0JW+6MCrIxuDYzFrNJRY7zfWuEWByobKaMNwQzHaWEQlXhJuF 1LVwfbnhD2pDonwgu6v/dH258H81UDRUCaX0G1oOtqVsIsWGqrk1A7HZNbeHNtSOxentmKouZsVK Kt54u6i/rYuVZ3fjPFhadB2K544JhyuWlmNAJOaNQcboCGLzx0A3herXRGvFSnJFY3tYKH8jpmVg FDS11+ZDX+fUwF/iRTiixWtDg9Gm2trJ6Oca0Q+aoHp7LXpYluoB2MjK70OlmjFV8FQjqmvgbFvK oejlwoQx3R5YVY+YsZhI7SCloPj2pcEUzQtAc+1olC9M9gJdbUEXte3tos85NVGoeXt7qB3zSKXx wj80I57K6GKiCSZe0UUt1WgLFDX2BxXRSFRwvrYcQ10Lvg94KZyRfzmHrxukGy0XgdrrDA7X/4s4 3PBVOHz9V+Lw4kFKL+JwI2heLDjc9MUc1viIL+HxhSyNJ1ka/wKWLrmIpTd8OUubBwkFVUtBXrPB 0mX/Ipbe+FVYuvwrsXTFIKUXsXQlaF4hWLrqi1n636G0qy/i8Jov5/DaQbpB5E2gdq3B4XX/Ig7f /FU4vP4rcfgbg5RexOFbQPM3BIdv/Z/j8IYLOIwrH2IcJzLKDLZEmUFh4N2AFwH1AB1wA+AjwA7A ZvqULVUOsDpTDevmeOMELFauYnWyxubzB1i3+RnWjTfJbiWLzZcuY1fiPS15B8hwumzCeRBjYTYP eV/+cNwaybizM+FO0YJVwMbsaD/0ceJ8+P/ncaPyxW+wHua9qIM05mN+3AcOPOmpyGQ2md3Bemgm neSl/IfSaGmHPF8+o7iUDcpx5ZwpbGo3M3OW+T/M71oqLTvRCm+T4Kq4dpQwByxuc3BHacnHIgew qF2MHQWINOLSG4gDy8ASsPIGO2Qcvs1HI1k9hLsYExNxrhaMi3ginjwEhBrn41LL+RaFfcbicgtq Lel/Xf6T0gtupbGieE6RjYo4lVqoVCZHgmWoCZPsaj1rJavf2yr51OO96qm6Xja1d2rvuII6PEou 86gsEhZhXtijRgD8O+f153DGjhnR1/Rn9fNk1vv0vjzsYmqpjn6qz9N/oH9Hn9/Nq3l1X0fffpxH h3GOcT/osLJrHjepGbmVuCl5O273BivNuBPwyglFXFLk5eRWKnF/sFIxyRYzybK5rZ7v5D24TuAq 1/hpfpYrPL9uTe+RIy+rL7Opf4jFeqf29YwriMUixRGPUpznifgpTKP0k3wWjXpULp/ZuefTHnGC R2w3aFgPGjLYU/G77/ZRVRq9nkZWhX6n0BKFpslUKG+WP5ClYmme9BfpY0n28zxezKXpynyFfy1w VYAHCgIZlRUmetz0mokvNVGJaanpfpOkBPyBHbLik2VlpkwBWfHL6XszvI5Ejp3s1oRLTma1krnV Ew9WB3kwZAdTKFM9XncEcKxX7U0vZFP7jteB8+mFVLdFVmNbbj88roDq1tStia2pYxDGGvFfU1dU PHHCVGLF4yO55uIJRYWy32dyk8kc8e9Wv3H7rRTTz33vxJnfvktZ7f+r8ZWRfMffAg+uuJEsz7+9 8ndz//jEnce2V/9w59/AEvDkRejHTuV/sxzWFb9zaQYtCVJtkKqyFmbxTPNo82SzVOAkk3+Cn1sd rizXGJfkCARGBCYEJCmLHNnLs2/L3p4tuyVXmourkjVhi/uG2RKFBSxBUmJYhjdR4CGPO+GTna3p ptbVobMhHopYM1bZNtm4zRPGDU09TrloNbXggC8MVqw5fqSusBCR3mPQQ4Mhfcd7YywzqF4FnaRF 19VdB1ZcV8cEEs/E4kBR4YRiNRItnhj2jI8OMEVVZI9PjuS++MY32x7S5yy8ir517nvdz578C0l6 N63Xj+n66/ZT87auoTxsMs2/nPNi2ZM/0D9dPl8/8vzbsFdWD315FmeLNnyrsT1+7Y3OjU6+xL7e zhWZmmTKkO+XuWx32ndIsk+SZAuZJTvtdThk5nXKkkWxyc5ptu05bBPj1Yyq2VGcFEqM2RdJ9Edc FPHVmLFUIGmSJEGl69YUFQnU+2ah2nOETS2a6i3J7+0p7FF7tiiDyoAKrA62XkwRT5E/6gGS0vqu 4o+Q+9FH+ybSS7TtlLTo/EOn9Jv5Ul5uyFiHjLdiHgF2T7wWhl9qvtbMJ3vphO8tH69RT6pvq9IU T5WHT1RmKNxcYHNW2iwJt9vOElPpapi5lPBnuPbaJSck6D3r5d6gy73DVoBbJopTNSTYQoq46HwM lkvp6vEYpNgn9Lr3sHAlQoiekvy+IzBTQ2J0gdByzbDYiBRmfiEr/ak7NiX0iRMmSLP77naj9xv0 I/p760wnrrjvTrrMyt/6m/4L/dN3fvepkM8NmNcvobt+FmHfjDdmOmimf4GfT6f5xKdnzs/k4220 wdpu5TODC4J8ZnhBmF/ihJDofh8pPr8vzyexjISbE+eunIQFznAqlDUN5nq1Z5FnlUfyBNrOKqTE M7IqlWgWa7Xnqsf7nhPz6z1cN2CtkNKaXhwtYlLGIwy1ro5gl5gSixqeM1KY7h8RzeU0HqHJ7xMK S/+27XdHSNaPvau/q79IDTR176kX93Ue5qa2tSsS31q/slXy/FD/7Pm/6ifoHrqO7qSfTDg5Tz/d 98h92r71//bzhwzZ4hRYfhuytbNd8VVLrOS35lkrrPOsTVbFLeVI+ZIUlMgkT5Cny9IVtlobN1vT rSOt0gYrHbL+3sqLpZsl/ldOxZystltt99gk5rUoe02SjDXJctYiWZxMKVDiSrWyWlEU++2bGM58 w4Ym59fV9R6pU2Gv4EXP1AEWwEsZ3qouchmlEdyy30J+KvJvPEHXntelj/Q/6AcfOU+T6bOzZ/Vd fSuOixVxB2R5FLJMY8PYaLLEl69ndzOOCS1x0lIPLZVoZt6CvAfypIrovChPmGmvlWKX0E8uoUQ2 7R5G84dRDg59fcNGD7MN28lG+xgbPYzl+GyjTcrwhDsjI6HISA0brTi8LKAGwgFJBDsD+wJyQCw9 s3KilYF7LA53Vk5WfpYkggez9mfJWXEUZN0Tx1pWj1tyLxtZP3L1SImNVEfuHCmNbD/rIMcYd2RV ZFNEyok8GOGRdmbYSEzof92aVHisrhdWoR4TocebXmIsscBbDMtWXYfVLS54e0N51tQN6FIdjSge P7yoEKfTZnh5OZo7vFglnGWn1EhK6RIyRtLB4+R6/deffEql+kufvqe/zpfv2dBYd9Na20MP3bZi 9+JvShn3Pv/T1w5++/D+hz999uwbj8FmPTe1zr9hwRWVK/Tf351Yt3d9zZXLZ0GtYFubIY8zWCuF bf3owCNmwvp8On6j01NZiyWP12aS5E3zlnnneG/ytnpNFcF5waagNDOTysJzwovD0s3uNjef7KYT 2WSXQ3JMlkwZCYvF52KJq7HwSQlfRg4MLcvUGvcQ85z1cE806UskCrThAyC78CfB7Ephc4a9gZFr +p4b9CfCOQ6xulhyKfAWm6K5WB1ZUdL2ctMMe0sy7ehT39//q3t/86z+dxr7N/LSRP1b+s/voba1 y/fsWr9ys/34VRT97EfkOvIWXaJv0H+kt+hVcsEDnd9d/52efeDLUiyau3BDI/ZwY+NBeb/ipv3M a9qvmLAz2U9xi5X2FxbEyFiv4LvVgd1UEXZpBFgqNifiFkU/KeWK0LDjuv7XlXqD35vj1yyUhJea Zyarmcjj8XCnO9vNHUFvemUA646JmlzU5KVbzFvNnO1S/eRP28XTbLvszl0W2c7UViUOM2XY2hZg 0ZGtEksPKMt5jILqEayfdZlYSlW4ZiyshnNOWi50L+me6/JMkUG3hWsSjr1fUeFEpf6Eflzfoy+j +2njB+/p7//sbzp5Pvz9qSn19ACtovW0u+T9RfoJ/T39I/2YcSHDxY2lch7+yQLLXhavvN5Oq1Sq llfLLfJOWV5oprkSLTQRviHxmjpNz5ikFW5y2rPt3Klmq9wqW3extLRdJDlbFesmFvcrq7iP3chx G28weJC7Yl8g3I5wPnjA7OQM8ooKvZ7xIy+lGHXz26mGVuq36d/TX/3PD9+rn3ao85Dygr5b/yGU 4MZXyUneY/c2iFsmYs9hA7kH9+5mlhP3KPcx+T5ikkl5bDW+2uQsv67vDz1QxXzsSNKwfkWxFj9H vzl5Uj9pnvPop+bkfnMx+ig0+sBGfU7sELqVjU07POghvAiYjYRi7Oalwd08dMRf5In6eaE+7sIO Oavrf0tOoD8Xvq+8PT5rvkptbtqRRrV+2uKnGpns+DQsxqu4bEsfhUVctvvsw+0SPLrq5U6F+YMU 2CsF3HZPwqo6mD3I2ly+VlM809XMM0xLPmdq31FMbmpvYaEByU0XW1QXS+24qC4iTIwXq96iwnSh 1oY7UqEj0vK1Hx8503/ip/fCfE7cuGHF5pN33fKbtylXJx9VbuXV/3hNit3yaoe+X1xng5PzMaeJ 8mKoqp/dFx/uwdc7zlnOV5x/cr7vVNpkSsgPyzzTRKagN1A5Q75G5nhxOBvPhCnMlGiDjRz3uT30 tOc3cCAel499WxXOPOxOq1Rd3+YBX8Kiqm4vWSVvq93hgWHYYQqYqjAFmAFW815ojpAlLCHWi0++ xNuFMIg1MXxFKrbba/JMYhWHP4EqRbyRwokUUaO58sTfPqX36s9Q9L33T/VdM4ymJJ7om0Ptj3fl XYZPlVz98C1H9Z/pRyro38XHCiRsgf4E+UksK+5ifihUG97SFNY26C/A9XEFwlF00yhT7B+vCR4Z 7cwB8CjEfhq3BawkmdJM3AoHeTTeaHVUvm0/Z+dT5Cr5dfkdWV5nvcu6xyqJgLv8zG/x7LVJwb2K Sm4L87nanFIIo+KrKDcjm+RnPmfTFF+bP77JT27/VP/TfmmfnzQQ50dxVrbfIA4sWrO2bo1hcjHD 1ES0D84NDBOqUnS0t2jqUbyHgW9rwLfrsIRhHn7sggLpE4rCGdinip05pmagbsrafPa2fd4Hfk9j 9Tc3t92hv9naeoc88zdvb1j5tv7Y+b/yg8/29M3gBw//om9GigfyHkNPGrqZuf9k3IaZc7fXzSW3 YITdl17JJa/EVdl4s8xG2i05jXnbmK3NylVM22ttxpdrTQOaLibA8nsMVY9hjrFFdZhBbIBw/+fU jtr1l90/1k/edu9mQeOhh86f408/8XzfVYM6/Bxos2OHfW18sstCLpnucd7v5Nj3uNzkSiObkyS7 g+x2bJnJpXgSJhWv3wFXq9XXKsWD1qU8XbrAAAfWjKRXW5TcTuFlPOnTjDCv0DOwC+B36/36KzSO TGSmcfqv9XP9W9bfvOXuDHzTYCYbjddf0s/pH+i/7qYtB44effzAq0m9urL/Lf6ekgfPfHW80GZh iTRPggdcil1JWNxOt0m2uy1ymrutXu6ROU4d5DD89k5csWvyadkiw1CwyRdL3BEV7yu9iIkVRX15 XIGwmAyKFhcV5/nFW4oProG/t+xr+qaNG2nUO+88PKLYlEPNfFp3d+7r3X1/eRHHNlwQhTvjSawx GRsSBpGWQGvyPCYdPjCDZcImslg2G4GvLC6DVs9glfjmpZrNYrPZNUZ7wnkOVkI8JrRgNfPK5syq jV158+KljQ0z1jasbGwaO23VcjFispao2QxYB7gLsAfwfcBjgMOAY4A3AR+hgQzwAYYDxgPKAXMB jYB1gLsAewDfBzwGOAw41p960AcbjBN21BenC4akxw1JFw5JFw1Jjx+SLh6SnjAkja/ELqJn0pB0 yZD05CHpsiHp8iHphUPS+PLrovEah6SbhqSXD0mvGJI2thsX8HPVkHLIg7H/A7K00nAKZW5kc3Ry ZWFtCmVuZG9iago3MiAwIG9iago3ODEzCmVuZG9iagoxMiAwIG9iago8PCAvVHlwZSAvRm9udCAv U3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9QSVRWRUwrTHVjaWRhR3JhbmRlIC9Gb250RGVz Y3JpcHRvcgo3MyAwIFIgL1RvVW5pY29kZSA3NCAwIFIgL0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIg MzMgL1dpZHRocyBbIDAgXSA+PgplbmRvYmoKNzQgMCBvYmoKPDwgL0xlbmd0aCA3NSAwIFIgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZDBbsMgDIbvPIWP3aEi6RkhTZ0q5bB2WtYH IOBESAsghxzy9jMs7aQh+cD/+zM/lufurQs+g/ygaHvMMPrgCJe4kkUYcPJBtCdw3ub9VjU7myQk w/22ZJy7MEZQSgDIT0aWTBscXl0c8KVoN3JIPkxwuJ/7qvRrSt84Y8jQCK3B4cjj3k26mhlBVvTY OfZ93o5M/XV8bQmBEzHR/kay0eGSjEUyYUKhmkary0ULDO6ftQPDuHeeWq1KNXxq/8MpaPniM5Jd iThN3UMNWgL4gM9VpZjKg7V+AG2acBAKZW5kc3RyZWFtCmVuZG9iago3NSAwIG9iagoyMjMKZW5k b2JqCjczIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL1BJVFZFTCtM dWNpZGFHcmFuZGUgL0ZsYWdzIDQgL0ZvbnRCQm94ClstMTA2NyAtNzM3IDE2NDEgMTE2Ml0gL0l0 YWxpY0FuZ2xlIDAgL0FzY2VudCA5NjcgL0Rlc2NlbnQgLTIxMSAvQ2FwSGVpZ2h0CjcyMyAvU3Rl bVYgMTAzIC9YSGVpZ2h0IDUzMCAvU3RlbUggNzcgL0F2Z1dpZHRoIC00OTAgL01heFdpZHRoIDE2 NDAgL0ZvbnRGaWxlMgo3NiAwIFIgPj4KZW5kb2JqCjc2IDAgb2JqCjw8IC9MZW5ndGggNzcgMCBS IC9MZW5ndGgxIDg5MjQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBvVoLeFRFlj5V t/PuTnceHZI0kNs0AeQGwsNHgi10Hp0RAthAwG5Q6IYOBBSIJLyRtGggNvgAH8ynjuLO7Hz7GOWm E8fOKiari5/sjjvI+prVBdTx8e3KDuM64je69P517+2GZDJ+7Ke7t3PqrzqnzqlTp07Vvbc77Zs2 N5OFIiSRb2modTVp1xgVULFqfahVbzu/BZau2tIu6+3cTKL0X65uXbNebxcOEFmmr7l9e1Jf9PO0 NIfCupyE/rUtYOhtdjVwbMv69m162/klMPP2jasM+ZhitNPXh7YZ49P7aMsbQuub9f5juoATWje2 tRvtoNbe1Gz0Z34i81Fi4HLaSla6iTLQstEU2kmUdtYyHfNlmjydpT8St3yxwur+A3NgWrh6O155 UeCJ0/bzF7b80WFxZs1DM0vrLwSwm/HiRR/mPPrClgt1FmdKIqTi4nG6Q4nTGtCtoEVKTS6YDWQD cerg9cT4LO6GnsJncneMKb97gd8A5g1oFJbRMchsIM72sa5YaZknzu7tsRVVU00u6yIbiLO7WSds KeweA/eyzhhXIi+wDpg9w3Z5VrMzZ4tGjHzzLRQ7dxU5rDvLdlbulHbuKnnjFFhbtqJY34ri9o0o bttQ5FixoeM2ftuGjk2l7ZsL7SPXrEOxei2K5pZCxwPNR5pPNkvNLZ13lJa0Fe2oK3FuB/E+aaE0 ByPbjkkN5ANx8kjVsZzc6r7EgFQVyzUqPVnmal9NjjSJmDRFmooVUPiX/L8oE/hR7CWuxPn7PS+F MVf+Xs/UGdUCY67xwgoqhYVa5Tex6dVGZeJko+J0GZURJUYlN0+rnIzlocIjfJtwr0bh7eQDcYT2 VtRuRS2HzyUH6DaQhFYjWo3E+QxuoiIq41XAfOA0PlUEm08xsBI4GvzJfGpsdJkcB+QXVfexC+yj mKRk18jsS2Lsd+w/hRY7Z+DnBv6HgZ+xT0UY2CdAE/BjIPon/pF91JMD12tGgcFoC8q9QsQeZoc0 gw8ZeIg9SOlQPAjMAD4AFAPezx7ElPv70WTUijIiBOzm2CGTEmeLYgcF3BQ7LODang5JQYJVx/KL q2uy2FhWrjllY3kamjzXf4vwfe37mns+KS2tfuxxSXnicZPy+OFs5SHYO3goXTkES4+AfnyYK48e lpQjh9lTh48e7j8svSjdKM0Wk5Nmxzq5IlKirseWV132koRNQGdFKV0jXY2oyTX50nSaAvKAfCCT NF0qFE5I0wyslArRs7IfTexCZI8M4vx87Fg68ufDWH+mGIJ/EBsxQUuBD2LIhTg/G9uXDfmZnn4T psrf6XGVi/x6J2bHoqH/qRhcqrHwV/lxEU/+Mh/Q8O8NPCB8f5Fv4VvFVPhWYyr8Dn0qfJOYilZ6 eDBpNBjLztGsr4iNKNYqy2Njr9IqSzW9mkK+TFMUpZXPQVnEZ9M4EKcsPolKQBzuKbE8u6Z3VY8l rxrZ5hLZdoyP4bJYbu7kcsyknIA9GWfIaJRic5XpUvYV+7W2kGfZcySTk51hz8XGOeU4OxMb7ayu KWX/xt7XsuY9A//VwN8Y+C57RzPwDntb6/c2exPZpfajydhb7E2N+S8ac21NDjuFefSJkp0yZG9o Mox4MoZDoA/5/WuR30o/+yn9DNQLkhJn2c9jBXYsA7uPHdAG3G9gFCjSeklsL44JtjgWkQBNsb1p gIWxfQIWxLoE+GJdQjY/1ilgrlioOKuK7RMwNdYvmGN0Zq4nB8I/fmNSvhGdEgOe7D+IxPyKnf2K iWZWt31ktedjpLxoTT5qsVbDU0+vrzfY29ob6R3oPdl7tvd8b1bv0XDZZ5+alHujGUp0f7pyAASV 5++fMq36/vswJNQL7xvtqr5vP1f2d2Yqe+4yKXeJOSQGeiJz5gn7PZFZdTpeXa3jhMnauObIKFd1 ZDdXOnZrVj3mO72zq+9EYzcsCdNyF0x3YYb7wNjbma7cfU+2cg+wtTPSyfs7WU22tEhqolzJJy1A OV+6SZQxKVxWs1iaK80jq+SQRkqjyCxZJZuUBzRLFikXOB54FVkkJ+Qu4GjIZeB4cktO0GiQA2QF mcnNn+HP8qNk5k/zv+A/BT7Jn+JHgH3AF8jCeyB/DqhCHgP2QacHpApd0NOgJ0F38T2Uy3fzDpS7 +J2i1PzdzHfwndgrNp7H82HXwnO5Fcg45xKZ2UWW4Lj34yTPo8dBXPTFWW+jp0D9oDOgNJzcFpoF 6gBJVMYuYt+UQNcBnwpg0w4sgR8FIBvIAkoHMXKjr5sdYy+xfozXzWKsB/gsO8pU4AngP5GFvQL5 ceAA5C8DT0DnFdCA0AV1g54FrWcb2EbohdhKtgq4nK1gQa29OjairKymlq2mWaAOkMS2Q7oT1tqg tRnYCq1NwO2w1AZqFRZBq0Eh0HJQBZtEVjaOjUc5gV1FuWwiU1AWsxJw8lkBykJmB6eIjUCZxtJR ciahxBYWpeevkCoXE1bHdfbia+32a+z5V9ut0+3mafasqfb0KXap0k6T7ePG504Yb52o5FYo1jGu 3LEu6+iyXLnMarXlmbOyc8zpGZlmyZRmRqTNJHkKSl0kFZSlSyPLyqyzrB1WSZZYmXST1C8lJJOD jbIUZ5Ra7LYRlnxToeVBB6twT3RPcI9zj3WPccvu0W6Hu9htd+e7re4sd7pbcpPbN52p+Y3U2FSr FjDgolp1utIYl+SF6jSlUc3yLfN3M3Z/AFyVd8UZNammrjgH5NctXeaPsxIh7nT0iXmrjcHO+wLd nGpV1qW6FvkFeBb4VbkrbqMmfzdntYFAQL2u0Yc61QaUUWq4Ed0iowLqNFF5cFSAGtUZC1SHq1YZ erUJRlu7Bpdk3RPGedWJ3pBa4Q3WX2IrCqEBh73qRW8ozrhrkDDZcYixJBvYhstoxvkub5zvgBm+ e3gzKb24NN8bl+aiq+QTXdvbWEo2TKWtHUymlUOl2uDtm+HIIAkYuNoQBqEq4qHBZYXmdpsuoMvF lLKU5CbxskEum7ZhU2i1KazO7wgoilqsupAkSQXDogAWZ7tk77r6OLtTh906dOgQ0eEuHfbocLcO 9+jQqcNeHfbp0KXDvQKMmeGp5HqNy9063KDDTB1m6eDRoUaHWh3qdKjXwatDgw4/EoC4YW5t3Vki +30LaxvVzIUg3zK11IXGa2hci4bZVUvpCpXgzeg1Kk+W+ouMXppmkngjo8R7WvlZsn5xc0KrE118 V/C+zyXevQSZvo8RoXuccKAmrk8cTHxJ/dRChYmaxI8Tnw9rdk9iN52hU3SCeukZepxOo36cXqI+ +lv6CPVXUXuGHqGV0P4Z/YQ6gX9DT9PDtAl8gYJz/E9tswmDeBfoAh1mNTQHOPR6GFYeHsr8s+1P EqXDyE4nxtAu2sU389/SZnweg8Vf0JHLeq5F/S+pDe+/x9k5WslepNWYTxeF6QHuS/x72gkqkrbh lWej6YjIhEHXo+Sn7RSWnkj8HnlizfDhpno08XvxLj3o+q5+GzF28uqjAyybdiNuU/Fm/hjVJgWD ETG8gDmswlz24HMYq9GDzy6Me/Dynun1opX0O5P0bE3mUZr4rgFX4lPQNq16XMTbyNgPaAtGcNMk vM5ZE2XImxsTzYntiZ8kjiEbxOr/3MiKfrT+mg6yw/BgJd1CS/iv8GInWhvRXkJz2ChmoSdh+xpt lFRh7CpJZ4gcF1fSP5MRRWNvwUv9SlyfrLFDuDFfoNfoFYpr/jxBhyhKEcShHfm9lHzwfQa+ltD7 fazlsPD8Up/l1ITcw4UcnIn5nE7aFpj2lrb3je9u/sQ/sfePSy/rOiKK+nUxWSF6HSup74YuRGMz 4rEKK3tB2z1i/Y5j1Z5GriVlS1LSV7W1Ff1n0jThRWJGYjdi/890M23kPXhguRt6XZeGStV+AW4y k4vpNJuZkgyufJ+834U9dJweHWSwk26l5kGcIY2h8RsiHqaZdg6Pjg9j1X6J8Xbis2uYTn3I7+OI 0w5aQDW0D+t4GvujBXs4jIifYjLW5w2cYsNdIdg9iVXZKK2WjFUerhsyRHyGudLO6cxMYiZkfip3 k1313E22BuHMNIneZfnIj4foXeTEM/Q8zpI1goss1q//3RrtoQ000fiQx7Nw9o3u62dUV1137TVX T582dUrl5EkVysSrJowfVz7WNcYpl40eNdJRWlI8osheWJCfZ7PmWsw52VmZGelpJgnP8xWsWC2u 83vXqSV1QdwL6102WTXPPz+vUqV8h9OVJ0+vDEwyeqlpikoFjWohnvnIUxVQ05WhXearUrntCyeU 5zlkr2oqx59rTiisTljod7psbztS8gDMqqV1fqfTofJy/M2GCH9zQnJYtfnAh0DjzFbJ5xcUT3xY BSZVOQMoF/rV0ckmHkWHcbIPO2pgiJvzWdTWbS6pq1epsJvMH6pkF93OVxFewtQJeDQut6GmWaNK lRV+obICldnnYUqDhxBqZ6uGiYE3vM7lDa9FRMPBSzE9r0fUKUfl6EJ/3nSH06k5jSeRBf7unOw6 V11zNmaBh2YwqDs7B5wcwcCytHYz80ymVbjZOwNP3JkWhC9fuOsVtE717A+i4qpH3CApuCTBS/KB y0UENb0ToZtWY9qYanqdmqE7Ia9VPSGV9svdFQPRA3jiXxlUzGFXOHSLX5VCcKqbpHJvS5M6stG3 FCw4AQq2yGK567VCLJ7sbZGjaIu+QZSueqgO5odbmoMiTVjQVQ9ZVp1/n3PAgVcS/z6vmqeoFqhb dvzWIUW9xWtl0YxG98nqEbyKXCZ1ij5IguJJFXLU68JoMOZdVytWrDK1bFo2zg5ri+PZH5LVyMp1 iBn+QgeS+e+M2lTzV06sDtYHmmJ3iAALCgfXiamsg6YJIEf3N2tTPaBNDfkqHjsFCUVkPy2G9lK/ t8XlRTyNAREQ6EvlQ3WdTrVEEYrRqFe4GArDexEZ/JXgYR1u6A3sCYfC4E+d6mnSgJq0NcCInlB9 wGAZHSAxYR1UT7A+EBCT0hdAzSjflzbZJUeF0YxytVCxOf8BsoFJFY0L/d56kZ3oyev8N5wrdpxD HS96STYrRp9o5TkRJCFZ5GpcoGdBi4iPKIJN+gZG1IyVR1ejv2b19WLH69BtcDUEo9EGl9wQDUZD 8URkpUu2uaLdZnO01RuUtZ3PwP+7/Q614UBAtQVb2Awsssi3BjzBFyxYJpanQW4JgYO/WS5nlcOZ B9N6H5wcw4uNfYaMR96LfRa1fY4Zm3EiOeQGcbzEcSo4VFuV2KbwZLEf+2AVhvCGtQL7A6+53CF2 ihQo965dZATI4cSQWsKIc2+BwYURp1Psof1xD61EQ40s8OttmVY6YuSpVLB2QSEZSErsi4UkkpSk 1IMurFWxeM3WcuLP5TTO81Q+R/Nc+XK1OMzhHf5mh9WBJszx6yo1ExHTlrugzi85uOiCGndIopat 4JbgVkcomqKICU7JqM0ln3SpNkVNq/MPONwB2ZaHA5KlksGwKNLUdtJ1golDlAptKnOrrEhsK8Kh ijDi0B9RBWFKUfZGg0b2XT4/dBW9wy2pfaTPAhtXTBJhsLmwbx16PPLyXWKqvxLZrt/g1LTyBrGp sDZaxOYE1Fxxs1NzP9cKTM5R55dxDGHbLtAqslduEauuysF67TwIOIQ8yY4nzgbrxfnnR6Khi8PI b2Q5wmbsCSMMjU3+ZG2h/07HjsAk/CpW0RinLNxJxXcycZbojFP9qD78ziatWA5xU4Use9fWY0A0 FleAMdGJ2pIK5KZIfb8rIO4ks8NRWSR/GNPSEILmaKAS+brIj/MSX9U4VU/Akao2BwIzYOdmYQcq 6B4NwMI6wwJQY1X+Nzr5KxpxUo3z+XHYRuqR6PViC2O6A9hVA2LGYiKBlKfw+M61xYbPS+FzYCLk y3QryNUITASiUWFzkd+FNI9GHVHMw2jjG56hDI/BiJNQwcS9cRbxQRfg0p4PvC6nS0Q+UI+hbkHc k6cUfnv87ggvT/kNzRXwdrkW4eAPFOHQlUR45RVFeFXK00ERDsPnVSLCzcNHWOXjviPGl4fUo4fU M0xIVw8K6ZrvDmlLylF4tRbutWghXfcDhfS2Kwnp7VcU0vUpTweFdAN8Xi9CunH4kP5fJG3roAjf 8d0R3pTyG062wdtNWoTbf6AIb76SCG+5oghvTXk6KMLb4PNWEeHt/38R3nFZhPHDJjNevFDRq2Yw zWCK/2RICmWSwcEbEr4hwAc/k2RQ4fPp3ESCKl9/83WtmDrFmefMK0fB8F74rUeKfBtJo2/IY4pA Ez/AaFeiCu+pw11Cro/I8EO7XkunAiLf7KYl3rnK3M2r1oZDP9oU2hDWXrv1HsKSDTQyYVyCkaob ff4HYlaBxgplbmRzdHJlYW0KZW5kb2JqCjc3IDAgb2JqCjQ3NDkKZW5kb2JqCjEwIDAgb2JqCjw8 IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1pST1FBTStBcmlhbE1U IC9Gb250RGVzY3JpcHRvcgo3OCAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJz dENoYXIgMzIgL0xhc3RDaGFyIDExMSAvV2lkdGhzIFsgMjc4CjAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAyNzggNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDI3OAow IDAgMCAwIDAgMCA2NjcgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDgzMyAwIDAgNjY3IDAgNzIyIDAg MCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCA1NTYgMCAwIDU1NiA1NTYgMCAwIDAgMjIyIDAgMCAy MjIgMCA1NTYgNTU2IF0gPj4KZW5kb2JqCjc4IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRv ciAvRm9udE5hbWUgL1pST1FBTStBcmlhbE1UIC9GbGFncyAzMiAvRm9udEJCb3ggWy02NjUgLTMy NSAyMDAwIDEwMDZdCi9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTA1IC9EZXNjZW50IC0yMTIgL0Nh cEhlaWdodCA3MTYgL1N0ZW1WIDk1IC9MZWFkaW5nCjMzIC9YSGVpZ2h0IDUxOSAvU3RlbUggODQg L0F2Z1dpZHRoIDQ0MSAvTWF4V2lkdGggMjAwMCAvRm9udEZpbGUyIDc5IDAgUiA+PgplbmRvYmoK NzkgMCBvYmoKPDwgL0xlbmd0aCA4MCAwIFIgL0xlbmd0aDEgMTY3OTIgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBjXsJYFTV9fe99703+/JmklkyGWbeZJJhGSAQAiEQyQskKEb2xYyS kgCRXcAAoqLEhcWIirbiWlGrFWyRIYk4LC1pRa0ohRZLq1VBi0ptEdpSqkIy3+/eSVj69/t/37yc e89d3t3Oueeec+7LsluWNxAbaSIS0Wctql9CxC+gI0rNWrFME0li9xNimHLTkjmLMumshUjfPGfh bTdl0rl9CSn4Zm5D/exMmlxAPGQuMjJpWow4f+6iZSsz6ZyPEM9euHhWV3ngG6SLF9Wv7Oqf8HLt 5vpFDZn6Ffw9bcnixmVd6XzEU5bc0tBVn9YQYv0loQTjIiTd9UOakBzyT1JGfkyMhBGVFJJphMg/ l3sQBWlerjin/3D3y0NnOMv+bco18dfJC3/p2YfHbz498/rvtnfMUYnJhqRZ1OcFeM84onMcGaWS 77Z/d7sqcnjBxV/OLjJF6tUa84cP75V6k+MAJvVuifcI75J6Sj1ahof1lBRtdXuKnBX9JA0tFopQ Q7gYsB2wDyCTGVIIpSrC1YAmwHbAPsBhgIEQhLxUAywGbAYcBxikHlKwRQurFT2lHLybg/k6JR85 DUgDJBJGWAgYD5gBeBiwGWAQ9XjOYsBqwD7AGYCB6JKv5dFBGLuv5QERtc5fWCSS9Znk9FqRbL0+ kYnHTszElWMy1YZlqg0szmT3H5mJe/bNxO6CoiY03mqxF7VXeCUvJunFwJcgpGw/cVJKwuQ5yUOS ACZhqCJHl9yt+bGizfskmVCJSZTMJuF0u0Rb7K6iCgtLs9PETcLsa3YqU8JOtTpcRZsrrmWfke2A fQCJfYbnU/YpWc2O8zVHWA7YDNgHOAQ4DTCw43iO4fmEfUKc7GNSCCgHzABsBuwDnAYY2ccIVfYR 5xgRcrwcwNhHCFX2Z0zrzwid7ENgH7IP0+3sSEtJadEugcQLu5BwQRfiy+1C3N6iFPt9y7e9wVEx UBoctUfKIyPIICmvpWBgOCX5W8rmhVPsL61aPPxcxQD2PkkCGEbyPnp+n2iACYA6wBKAAdhRYEdJ E2Aj4DlAEgAuQ6gCNHYA8B7gKBkA0AETACZ2uAXdpNihltjIcIWX/Za9TXxY8YPsNyJ+j70l4nfZ myJ+B3EI5QfYWy2hMKmwopzgHRWxirgQ5Qr7VWu+O5yucLF9WMEwwkJAOWA8YAbgYYCB7WN5LbPD bjSyhxzAHg6zFvJXEf+UvGAi+vywHhsFBtR4EBt2FTAEm7XNMabHNj2JJA9iDz0KjAex+zYA40Hs 9ruB8SC2cAUwHsRmzwfGg9gNM4DxIDZ+CjAEKfbs6/k9wyXjF1CtwsluxSrdilW6Fat0K5HZrfwh 38p8jE+39OmDFXtKj/fuE27aTZv20qZJtOkF2tRAm+6iTXfTpjLa9APaFKdNQdoUok06bdpDh2Ip mqjedkWyVPfTpgO0aRttaqRNMdpUQJvyaZNGS/QUi7SMwa5DVCWi1gq+6Vik9aoRkD5OFsGKRsDz EciEfQgPAdIipaOSlpepnBPicV5rn/JMuv+wosUV17A38OIbIMMb5BhABoHeABu9gUbeQHNOhOWA GYB2wGlAGmBA7TzM42EROhEWAsoBMwCrAacBBjGc0xgKI4sR8iFuFwMrRFgOGM9T7A08eXgiLKL3 UINqXL1GejhInSE6PpQOsRLi9UIwu10mV4rad/7H/s1/7MRcYWYPsYdJDxBiY1f8cMu3PcIp+kRL bE+4wkMfJyEZXEdLSYwWIB5KGkV6MAmaeH4xCbKfIS5qCU7Da86WWN/wburgb+0Mfxs8Ef5rMMWA ngzuCf9RS8m0JfwH5PxsZ/j94P3hdwpTJuTsjaUoot2aqLorODS87YCoejcKnmoJ38WjneE7g1eH FwRFQUOm4AeNSOnO8KTYDeFr0F5lcGZYb0SbO8PlwR+EyzK1BvN3doYHYAjxDNoHg+0dFJ1GQ6LB qSUpOlfva9xkrDGONw4xFhn7GiPGsLGHMdeYbXKbVJPDZDNZTCaTwSSbmImYslPp43qcn3rZBnH4 GcDQlMgCVyFhKBczCAmjJkauJcksqZpVTx5Jq5Pts0j1TC15bnI0RS0Tb0gq0ZE06a4m1VNGJofG q1PG9KRkSbw6aZxwY80OSh9KIDfJ1qcomVKTommetSY36R5Vs4tQ6lrzYC6Pe615MJEgfu+Kcn+5 e4SrdHTl9wR1IrOuMn7p57+Exv3xHslN1ZNrkq/0SCSLOJLukahO/nCyNr1mF/0nPVNVuYv+g0eJ ml3SCPrPqkk8XxpRmUhUp+g0UY9o9B+oB45BhHomHMy8HtFMoUy9pzL1CvA+6uXzCPXMZlIg6hWY zaKeTHm9HY35VZU78hGgjk8jjaJOo0+7vM6BAtQpQIA63iZyQNQ54G3idZIjRDPBIKqEEKAKDZCg qBKkAVFFjHyHqFLYVeX+i1XuFz1JmdGIOjxAM/bj3XXsx1HnsoX839GGkfE4bR2emDW9qiFaVRet agDUJR9YMdefbJqpaTtmJXiBlpRidTNnzeVxfUMyEW2oTM6KVmo7hov3/qt4Oi8eHq3cQaZXTanZ MV1vqGwZrg+vitZXJlqvnlBcckVf91/sq3jC9/Q1gTdWzPu6Wrz3X32V8OKreV8lvK8S3tfV+tWi LyJ4fELNDhMZmRgF+vG4lVkt4Ne63EhipFddMkIw7/CI/67c3dBWthBrPJG0RUcm7QDO1/0q+lXw IuwpXuRAtrOryH/X8Ejubrqlq0hFtis6ksSXLW9cTvxV8yozf434IWvZck6KTBjned/7Q5WqpF5f yXXr6mSfydXJ8ok31OwwGpFbV5lA3rDuPKu1KpVuz2T2R+YwXlGSLlbkeWU8z2zuqvg/eUGMCdlY nV1QNPa0Uj1El5HGhJQMVU9hEAVTbsAyTL+hZjd0KX5INCYwwUYap43drfF5CJxkcgim3dgNy5Z3 YV1rsawrFlUb4yTe2L0k3c3F+WKJQKzVsjhEm7Kb5AACysskR44RP6yKLwEnedw5L32Sl/OYfQVB l+oCQraQbXQe2Ub2kV/TM3hrO9lF2ghXgSrJM2QV+RFZh2PtBuTcTybhUZD/I5qTboNl8jwOzOfJ QdS9ntxFdhMv9af/SlaTNdIRvLWG2EkeqSATyGLyIL0uvZxMJ8fke0kJuY7cTJbQpnRN+qH0o+kX yUtkl/SbdAexkgCZhedg+mvlT+mPSD+88Rh5khyjj5pfIzp6aULNH5NbyFNSrUzTc9LfYQQRcivG IJOx5CBtZ3G03kC+pH66ShqFVn6STqb3o1aQ1JK55Cmymw6mV7OIMj09Nn2QeNHHSrT6JGkhO/Gk yC/Ih9SmnEm/mD4DS6wvGYP5tJHf0naps+PuznKsm4JV6k1KUbKY/JK8TQ7TKP0VW6zYlCJFV25P v0+yyUAyFaN9GW9+Qf/D7sKzWnpLHp0eSRxYl0f4apM3yac0QAvpeDqN9WaL2bPSLcSEHgfimU3m Yb2fQOufgI12Mhs7JP1E/pl83tCj83jaAYrEyNPkx+RX1I6ZarSR3kOP0r+wUWwGe5p9Jv1I3ir/ 3liPWf+ALCIPkp+R/1A3HUon0hvpXLqKrqOP0CfpQXqYnmQVbApbwE5Lc6Wl0i/kkXgmy43yvcpa 5QHDyc6azv2dv+v8T7oovZZMBD/cjdE/Rp7FzHaRQ+QDPMfIZ1ShVurAo9EInUrvwHMXfZC+QLfQ rbQNvRymn9G/4kj6Nz3PcNIyA8uF8sNVoCi7BRrmj9gz7BCew+zv7FvJJ+VJcWmwVCYlpMUY1Tpp I57XpE/lgHxITmOdi5RNymZli/Iz5dfKGYPNeA/O+Pcu/KSjT8cnnaRzfeemzpbOtvSnxAMa4vSA CVaG0dfjmQ96bwLHbSdHqA1rF6B96Ah6HVZmBp1Pl9KVWMn76FP0JTH2V+lerNIf6WmM2c6CYsz9 2WA2ko3H8wPWwJZCGXuUtbGj7DvJKFklp+SR+khXS7VSg7RMuk3aJCWl96SPpc+kc9IFPGnZIofl PDkmx+Wr5RnycvlZ+Uv5S2W68q7yucFiWGRYa0gZ/gGtZoRxgnGisdb4sHGn8X1THbjzDfIaeR0c ePFHj0t3S1XSa+QhNkjOgQnzW/DzDDJbGsvAqWwLXc/upG0sX1lpGM6G03HkjBzDWr/FNrNzbLg0 llbTyWQ+G5hp0JAtvwKsTH6DnJL3Ym6/RcsrDTZ6FzttsJEW6Eil0JHelAbIceld8qF0jBrl58mf ZQv10VPsZWkCuOAX8gilhkSkZ8ir0lJ6J3mNVRFiOW/aAD4eR1+BXJhCi+g3Uhpq8DhwUYn0F3Iv WcD+RE5hH68nj9PZ8hzyEBlEV5EvyU+xK3orNxv6GDz0HTZPbmZZtI0weStmV0rzqaRkk/torfSU 4TT7gCwnh2QL+UT6OUZ/iL0qjZXPKJPoXOyAO8lasjR9N7lNqZF/T+cQiU4jBfJxSLdVUpEcQbwa UmU6ZNpO7O7dkAMV0ljk+ME514EvpkJCPIXnCcgJGRw0D3v8ekix35I2wxSWInMUB4XUgafm3c5J 5Ib0T8mT6Tnk5vSjpB/kwbr0KrS4hXxOHiZb6JrOO8gSmJIfYG9fp4xmh5TR6X6smX3AJrNNV9IX q11A/eQrPK+CMiOUPaRZ/iOZTMrTG9J/AHf3goR9ksyEwnoCs/waPVwjtZNBnePYjvRoaQnme4xM TL+cDlMLmZteSMaTveQlo0LqjXHQOEl/j/neQRrYpPQyqaFzHtbhYayCjtVaDvlzvz5q6pQKvXzE VWXDh5UOLRlcPKho4IDC/v36xvv07tUzVpAfzYto4VCPYG4gx+/zerKz3C7V6bDbrBazyWhQZIlR 0rcqOrpOS8bqknIses01/Xg6Wo+M+ssy6pIaskZfWSep8ffqUXRFTR01b/qvmnqmpn6xJlW1MlLW r69WFdWSByujWoreMLEG+IOV0YSWPCXwsQLfKHA78EgEL2hV/rmVWpLWaVXJ0SvmNlfVVfbrS3dY LaOioxos/fqSHRYrUCuwpC+6ZAf1jaACYb6qYTsYMdkxxWQgWlmVzIniVTQjFVTVz05OmFhTVZkb iST69U3SUbOiM5OEa0pxUYWMEt0kDaOSRtGNNg86TpI8oO3o2968IaWSmXVx2+zo7PrpNUmpHm1U JV1x9FuZ9N1+wn8picahk627vDRXaq7yz9N45ebmdVryuYk1l72bG+EtJBJoA++ygtF1zaPR9QZQ qprr4km2JlGTpGvQJRTLAjGrzPwyWm9B3XwtaY6OjM5tnl8H0gSak2TSbZGWQEDflT5OAlVa85Sa aCRZnhtN1FcGd2ST5km3teboWs6VJf367lBdmYXd4XB2ITb75UgDFj1TJjBRnWPVky6uLOVjjI6B JpjUZmkYSU0UcxrKg4ahpHnWUBAAvwTFW8nZoMi8pHlUXbM6jOdjijSpFKhRrfnfBBwQPfX3K3Pq u3IMBeq/CS/kfHKR1ZK0vhtPxuPJPn04ixhHgaYY4wiRHtyv74oUi0aXqLCfudFAJmBt6xPDCrH8 kQgn8AMpncxEItk0sSaT1sjM3BaiF0K3ZnW8pL27xDOVlzR1l1x8vS4KTm7j9izxJE2xi39O1ZtV NXdYknr/l+KGTHn15Gg1VGOtqrmui2urp1yRypTzBcW6oawLS2aNqpFyGfI4xnIlUZrRkLurQF2u sSXlAvwZBFPPThlN4EqRQ7XRSbXumkyYsEQiXXvm//VSKn2GvyWiS691TSM5LN410Mywk8OvSF8x PFuzVD0FIodBs29utlxRBlbLjHJMVwSOh6Ef0UYlyVTszAL8weQYyiGRm9SxZCiZgl0kshO5Xckr KuZ2vZTAj3Nnv76jITObm0dHtdHNdc31qXTTzKimRpt3sV+zXzcvqYK0yzBOKr37gdzk6A0JrNhc Ogzbg5GRO6J0/cQdOl0/+YaaXXBxaOun1LQwykbVjUzsyEdZzS6NEF3kMp7LM3kVjSdINcUkW5hJ 1M/dpRPSJEplkSHSs+DdEHmZSsijZFaKZfLU7noMeXImTxd5fH5cxoyaUtNFFsEQfOuBh3BDg2a4 jsFBbiRTAccAZYBpgACA540F1AOgp5KpqLtLmZbuMLxCnlCmkWeVt8nzyL8WMBpQTd8m6wH3Al8H qCQEnfCNQXCLZCBc49Fgo2RyRPb3BAwWhAzN34BbGRPuVSywVWywby7/OS5PXIY7BQ4yENdluf8T dYusLGgWmZ9HRNwR6IMewn8ePGOhRz0J3eZpuVrpZcgyzDO2mg6azpsPWxusJ+0hxzpnvaqru11D 3bnuC/Bm4TUFD8ZvJCTiirgKEMDzRS5oUvsFXSHniSa38zWBnchKlSOoOXkXkdKftGSXslT6E13L Ln1cokzaLG3HRcUKQjFAioYlYpFOEnaSpujW10Cv1tv9cbVMPXtKPUXKy8rL1in947V3qvsHDqC1 8biHDqJ068bOmhzl79+hBUampr+UXUo77rh60Kk7wIdTanRLICQr2SG73WdOpU+2OZ1sKkf0HLsd mIvYeA7x2mwIbTyPFMImPojgICk/VX5q4IDcHYb/2dJZtGTgLX3RZrcL5Gs9x2oF5iIqzyGqzcZD nnexyUttthm0HDUIwYItYv0lDjUvwA1wwq04UzasY+ut653vOBSz0epnVVnXea7NGZU7JWu6Z3rO pNwFxgXWWVkLPQty6nJvY7caVlhvd64zPGHcpL7j/5AdNRy1/tkZuDjxRrMeiRYPMFNiVs3MvDHs aiQQJroDuRpUM0Y2ht5+AEt9rjZ+CsHSOJZbTJ3WLoWRO5T/KCCRyFLdQwYVeb1uj8oM0byesSzV O6hoiEuNRfOMhqkLjjy3omXZyPlHnn//tkd2bV21auvWu1ZdW8uOUJle9fMZrZ3pDzs7O9/Y9sTr 9Medj58+A8tx/tfz1nJeOQYCngftLGS7rkm63VW8QF7NHmZPmnBVSc3EoDDJrFAbowcsYvQWPidC NbwLV2ybqoJ0qfRXuksQNCgI6hAExSrrOZxc3TQR9AnYFN3uLFa6V2KAQjVY20zJse6mZXQN8cfH qSewGFiXLi8JEmVjO8pIebmvlLpKORuS2ngk6jIYjIOHDCkZxM63VRyZ8vhnhcvkO0asCr969YEZ fG5l4GUj5haib3fxktml2v1ZWYap9lT6bJvLJZCvdbOqAgtlKyHOoj5eIRTipaGgAyUhMCjCFNuj 25jF58PNposxLexylxa+f5CHB0nhKT7Ych7uh2qd27UNeIc2t5uJDnWz0wUs089x3erOYlND2TyP t92CpvlWsVrZVCB/18Uqfl9vfI/w/nhvojN9yHBluGGPss+wx/i26Z2gcYwtYZviWGCb7bjdfXvW /e697s8Dn+eeCdj2WV/PYrm4qOihhlTDL+EaMYL5TYjNoFYgZFFNBsOBYCA7GAyYggFIC1MgKNlD aoq92DreRXGN4X+Nz4CI5XBSZrM0+o5gtTmv0z3sbshglQ7Vba7XyuHCWMxWM5ntZvm4rHh4R4bZ IVfOxbl4gXDpKCs/1VF7wuXmlEWwztE/7oCoQQJ0FluA74ChpJbW3pJIFHgisRJQfMiQwcVgfYOx 5xC+LzzZ4AT8ycYLJcxX8JOnTm958o57nqG7sr753ZFz17z86xemh7Ztqyib1X7X/s9vWvDDZ5qz Dn3w1baaV/a+uL5+IDhlWvoL2QtOidNEF+GsOX6dc7E/SChn1bgNCdo7arE7bc6QxdLbEwrKod5B pbc9arf5cyhxaxA9bKpmjHEq8uqxQi7QDhbyh7hLy8tVSFRwy6m31Lfcper+eBEHMIveS7F77VX2 tXa5ynW9a0WuNMm7UJ2fPdu73H5b9lp7c/b9uS/ZLYom8dsPq9Vmd8hGin4pJ4uOCeyBcdmb2Ong NpvNI/t3sxdJDpur98QoFQzT7m6coS3WmObnnKw1GRtjQjbFKImpMYYRn32dl8Q29vOn6NCWnCN0 Nx2Kg6Rdt16SVn1T9NEuGsZPCSpymXU2XpuRWx0gIyanCnpmyImtChGG3UqXJrJKvFxmCcIZSy6i 3TTkRDR6EZJoXmxaW/ixBau3v3DnoOuy3dbG1Nr58zZkt0W+enXlgQU3zb5nY+fJo79K03v9T65L 3rPq+exn2co7Z91z333aa2/PaZk945n+oV881N757y8gYgOQAaqyG/LNTmP6EHeNba7tKdtW2zs2 5TrpOvuPZMkNHic2g2RULFbJSGzY7AckOVuSZMlOmM0uG6U9uNw14Qh+TrcQWUYVcsAip9hNryuK Re8RLrZ0S0Ig/GBiU4F8LU4oS4qW6HajnhctNjZFBhs3OnEUY1Xt2cWEqdDTJKSPi3eAnNjJqcBe c6ToBrHSf4/Ha4UgPMvFS5n6hSrkoHq27FyZq5Qvcmnpuv5xGVvG6XRiuYVv244z310KGfe+bh1U KuX1K5XkHj3KeBMJEAN19Gybbi21NU0otemxUlteEHG/Ul4hnoBaMZgOcg3yRF2Si7JNHfexH//w rbfaOgfTGS9JOy9c+1Ln89jUj3UsAOPxsz+i/BQydlpm5+BODPOz80WgQYcl5PEE3VxyWp2yHAra HZQY/TgvhEYgELHL+LnPdwk//8BEHfuxM/jG6O0WstcpwurAbT2ae2zKejnrDdtR259zTeYsv6NP QDIPUAZYd0OOSdgdapbF487KOuBwZjuysh1OO7aInsUHojueczCHw6l7aNegXnfK9AjfPpBqusaH 55qhLlZXqw+rsopN4hebxE+JX/UzDDazSfwbNfdeOhjffzwGphra4njt+zYLrmUv3yyXtkstDjIu 88REa12lhbUQCyfWmfrHFVCRCMEnZB5dCm3rim2DvZIV8UQkyDziyTZCE4hN/YXnyYX3tG3bcP2G XlsfYh90vD7+vkfaqWnZg2d/00Gb1OYH9r/wVMv4ci/7x887V0zvPPe7tx9pOc61trGgnAcyrwfp Q8d3Sb2wk4bhPpVobq+Qbqd2O47EXCUvlG23hCgpULEEGQ1ODflUfuD7hMzzgTzAuzS4g+8fVN/s pmTtKXV/LadkvwU5tNKoeypzKrUb3FO0BdJs42zTfPdsbZlpeXCNaW3wqOl9r8uo8R3QM7MnDFOj QuDxrIgoMPKCnlpUi/ACFx/lBDvDOHPpkRmckBB65u4xQ58dqrvJawWNqiCkig9roK9gFmde51qi urGvhYu5EC3VveW+Gb7FvtU+2Qel1DDV5+Wd+lIsvzWeUdKwE0/xk0vIvC6Jx08uEBDaqqAY3z5c 2iWoMdZTqGYGIz+g3PyAiuYRl1qClJdmX5KEBul8q7/vmAXTKqbOZBV757R13Hr4vk87T/z4/pPb Pu4oGf/QuFtefOGO21+RJzvmDxg7YMTXH82q6/zP75tP3QWX7yq69Vdbfn3h49pXEqlnn9i+HQtQ D3nnxc2RnSzRHfvtVMYfM8lmyDK+CwcwKptt9kZJYnxJxosjWmIBp6nR/DcyHrSfwaRyRIvpaiiP ORBEgovHqWdrl5aNPXtqnHqOa2PcMuCnd6lLyCDMf2lt1uCIx0AkgzE6xO0uqZde29B5qnqIc5d0 z7/ul7/btuGxTnfn+dSft9Gv6NvPcDtmMjgwBxzoI1F8q0IyPNhmI7mh/lxGQg9jU/v3d0dCBqVX yG0PmW38gIXyfxZiEkjcCUoKQQIkozhxRBQ6/Tgrzwj1VCCcWYF0sa+U77FxPcsjWvQI9vV0sW/G CrnMFAGF46dKoY50WSSvi4EI44MPBAgfyAlhmXBE5HX1z9VfdHtBz+MVebecuXiHPOQzvTS/7i2D vqiQh5mRCJuI76CSwV7a2zvGOyb2he2vAxTzADjl76Sr5GWmpdZbbMvtt/seIM10g7zWdLf1Ptta +4O+91xvZbnzsFNaglqAR5pWyKN+Gk7843qot2YjIT+xYRjP9aeXRhJq3Gem5hSbo6vxRqeuQeN3 UuJUncyZoo/sLPI3JiUqobwlv9HTrchrHt3DPBsHXjRpzmLvg2ugIXQpCO7S2kI+OX5ode0YrttB s1tKliYSNBYbXMz3x2WaAEFOVra3W28wSJdvHTp/ycIv9rV/tWDRugc7z33wQee5R2auXTB3zf03 zVk/bMzGyXdv2XbP6pel3N5PzH/uw2PP3fR477771+9N46ON9od/RafMve/eGbPW3XchPXbj+J82 3fPKlm5blvNkCFLx1YzV8Lo1jCOgwIUD4JwgMj8JxOEO5Izei1PU7xIkdQnr0+V39Y1be4WcjrBj vENyOLLJBEqFGmlXYVVQftJAqCqC4vvjtUVCiBSJhQHlOSOqXIp+/CZnOmFQXzaIS2en3kccni7B xf+XXq/s67+6Qk+XOtKLhwWu8+rRG73XR2+SFnoXBeZEbw/cGdoQeCD0lHdrYG/gK+8X2jkt6yrv s95tXmlY79kG1pOfu1Ewkz+iGbReofGOGfyQDfLp0SPcGwOR3MYHgQ+USokVEtl15bG6sS+X021c TLsu8pJLdzHXxi7JC/OYH5+clbjcvXh2dotdUruU1sJIFgrmCDa4uCeXtogJmAn3GNxkjlFhMHgE Ly3Z5l1VP/nOCUPokD2Ldl6gxrcePnXH7f944ecfsndfWrayZeuqO5+nk9Xbb75u9Z+W2PzTFlDT n45R9anOv3T+s/PLztZX90nFT+/c/8wGiFycpLtg/qzFTT33zAyFHgHvktHMDGWyVEYNsoWVQa8h TMNaPG96/gkY/NgVXH7CGhAkF9sha/AgjwTYdfDgQSlx8OCFlw8eJAx36URJQH81Egeds5M6nLC3 oSj+s60L+UYwInLO6gnOiFxGGqYqIixUB6hzTHPNdep6aaP6jvKWoV09o1pNSgIX1RPUudak+i/b v+z/cphlm2yXHRIuexRZhnVhMhiNNuAm3MjCn5RKf6M7hWWvGW3ZKGIShNo3OqQZpKom27Lxljmk KKaQQTKk2BLdjO+W/6rDU8l2Uys2nFV32zTSYJQmTcDF7zFZ2ihTGV+C6dYJtnbjMZu00UZtPK06 jYeMbLWxyciMP3Qe/WNmtXKwYvjzY8UCOSq4wF9eFjhVfqJMPYU/7p+KQ3da1x8fVXUZjziYStep +/c79u9fp2RiiJzqpBXfiYTgDG+TnZLJuBuGL0l/w6VQgt7C9S3+i8LDFZUiUlZEivU0GCU26Hes 5uOfdTz9/Af0H0+OzgsOUnZ/N5ru7axkN9BNu2598AEwAG4UicEJSqnsRLcmbEqf0618jUwOO6x8 UAlGARA4P77We3HM5ubFitMm4RNvZjJbHcRkZhargftVrPBoIUylv9vJa1lVEOKLbo/LN+LgQ84F YTxc4esqb29XDx9u5wZ1HGo0xZxItzstbNS4b8wgQkmEsggVEZrAW3qU12A4IXFkGTg/Mccl3rII 3oIilmE9vPCNHubnWQxuIs3iLnaKQLFJhDqsxGSiTFhDvDWB8KYse9g04sZaTdPtRHREREec1QRH E34Exs8Wwu4RPsiyzGSgSvLZiF/mC5xcfTVhTlM2yzXJK2xrbb/BUtrG2MY4pd5ygb2vo0a6UV5h X+lYZzdZmWIqtQ9xjGfVElRR01j7SIflCfaktMm4ybRFetlocDOnwzFAYdmKwkyQ6AMUE1CTbZJz EtXBzCaT2WK12u0OBz7MN7M6d5ObuXezLbADBrYomilFB+oWm9mi6bbVVmrdjUk6qBUlLIUtYMYh qjmXqBTelGmva0qd0qRISoptaXUNT/jjOZALZ2vL/B1gac7lwAMXEydqwfPlZWXwy158AtgJnPfX 3SlYHxFcJpdY/BfElj4P385RiJGjgsOrkzawfy+w/y5iT3+zw2HhfN9lMr6/M1Lq6BsRZuPOklJH UYlAX+uH3C7TMJ7AHiFL4YtJJAbB+ez1DSmhEVfUhQ9nXE/gFv/GAd4cWIlU2dM5bXtnjbL7/D8f uWbC09KF70bL754fLB8/r0FePgsdtQM7xQ5veIvet8G1IJtVq9XZN6o3ZstWG85NB/H5Q5AexOSO mSx8F5iERxfMdlbP5QxkCmgBir+A364JZ6TW5YnkR7RwSZ7L7Avsnswe7GIzpOEjgVOSn91oGlht zvDp3A3bxVe10GvHqUtreXpsl56LAxq5YD5o95h5kS/EPNksEnEB5y4NaPuRZ1nvR8cufDTxdec7 nevpHXufrb1u4H2d9yu7He6GnYv2dHZ0/FyiG1ZPv9eD6waG762Isg2r4Cd59IIecVsd1D0keEP4 JtOisGwWzmyTCI0izMfZiIFnPIkCsXE1RAiGbsSdSn/W6g4UIz7TmtezGOfpZ609ehbD4hExtFMR o/xPrT1imXLUF+WIebk+BkiB49rgtdpk6/TgouAt5pWO25xrLOudj9u3OlPOk44vnSrkgeZyZrtc TpfTZnbjG6CA12LAWWu3KX6z2esL5ITgxGzPOOd9PhLJE/T0+51OhykUczxj4Co7JxWQDKmAHNfz +IQMBk4XQ62WvyS/KV/Kz/P//9LYwKUMSPufbhp/003j6PAt3LMs/CggbC33KKuCxvGcE36QWWwr btNwfR9lZaWFwiuZcUpy25yTv4tHMhGXQMKbYjHpzlKnOszlHoasBF0q9pQDdy6BnFJXXk6pG+DQ g6VqXjYgDPBkvC2ozfmJO77g/vJ5fVlRqT8DO0UFawl3WeR51rz/vdsPHBnba+p16bO/nnrz9f0i 1Z/S59dsGvf4TzoHKLvH/+a2Z472KMgft7xzKR1434ahVmPHcmlQyW1Xz4WXH59Bp0/KQXkEvjIp Yf30vma7uU+OPdCnt71PHwhET0nusD5j+tTaa/vMt8/rUzeg2b6291PepwNb7Z5eGctKmOS4veHL +9OcV3rtzNnTa3/OoV6/93zcy1TppXCcn9WhhxqmunGidSsggzlFp/J02Bf2x/v2KS6VS/uOka/p O82UiN9kmhdfYVsHV9y39m/jrpJiB5XVwvxiX1Ek2z+j9+LerHew0FHueNix2ZF2KJsd2x2noU2L myMHdyHxHQ/krO7h/nuH0MAdBm5yQQGVYLu/stP/GDzZRjDEWT0gdn1VT0tRULL2rlfrCbgMkqIg gq31d9EYR+CaQ26+zPkQ6RPCHw/kLBADz/lIt/Lu8kVHSF8QrJafYjfqjp4696dqsQGx7TGllO9Y hwN+4FT66E6BDOR5uj0Eg6q0vZQ9V0pLsUvO6hW8RV+BP68wf5/hkIGFDeUGZnCI7YFpYUf4xb4Q RqtBnJcGXA9gjwiDwzBw6CXptRTKclyFsgz5VQvvbNevrCP++efc4DiBe4OMq1aUQBVdCoOM22RQ Rn3c6y6YXHifyNICrkpzuwxOd/5AuY4Jx/sIBuUaDOuBSu2LxmD2OyASuaWGSlLZ7F3zt++9uvGa wQs+nEMHVa1ffVuPpP/mw/evf2WCavbl7Q36Zu5fPL1o0by5L8R63Dt19M/WjLt7XLbDHsgvsNzc 76rEUv/SB6r1+mv7rzxzfs1VQ+nHvYJqr7GF19TdOP6qW8HRo9MnpWOQni5+56i/aGGyvcBebK+0 K4OzBwevZ1Msk7InB+ew2UqDeVZ2XbA9/L7yh6yPcz7P+jz7tO9vOZ/3OB5Oh73hcDxQ5i0LVAeW hDeGjf1Zvr2/dxgbbK9mVfbR2WOC11um2efYPzd86f2OnnWo1CM5rKqT5AatRhexeMBK/kHcOHQW qOphF1VhuNS5mlxyWOf+hbC4Q3C5OadCGGOLcJK6DJwZXPDFi9x/oipYy+XgTIBaXwuGAvKNPpLT 2LXMnb8PWvExY9ooh43l+E8JyRjizRsFVxhxywpccIVRbAKj4HVjTqh4wmUyr3bp2FMd3ewA3lgK PQPu5BOcKXANUw6HMriA0x+0J0sjgznlQXpx9ehzDXLBb3XJEB/asH/1H5bPf//euk2FrR3az5ev eGnLHSufX/vshvM/2Uyl5okVzPHdaOZ+78Cv3vrwvf1cClVDCoUghTyg2WTdFyZBD8yHWqXWPNXa IC1QFpsbrCb4E04IDRALcEKfxBegR5CHPd0fKN9lnwvIA93DcgYGK9xjAxXBiW7cywbr3YsC9cGV hpWec+ycX8Xny067zzfBW+ddgn/kCzo3qs/B7afKuUGLkexmr3AXtdjwwiaHTxC+QBjoj2UFZatP h9/8I6E7AMk48YF8JYgCpF039+xTnIRzNBBGqrUgVsxjvYJv6jANewep+UY9v09xN6WgVl+kFCYC 3MHJbcRVKUIvnxqnVMnllIqP7TgBFSQeh7MNP66FwOyNx7ucxmUdS8u6LMeMSoI6dOkt1Mc3K7yM sHuJK9sYEW5GGhG+SIP0g919v971187TNPujP+AL3wsnLS1rZm3o+JBNtA2ddv+qrXSa7ydt8P9K +Jy2V+cnnd+q2vbdc+lja0fN/Smotx5GThl2HLdyD+o/MA/h8xpv3mh+zpw0t5uPmc+YjcQcNi8x N5k3d2UdN6fNljBuwPF9Ke6RDdJdFDfKsIkNxgKFyJvl5+Sk3C4flw3t8hmZEVmTDyMly9wM4JsG yHe6j28XWJiQyDLUb4TZfAVRxs8AgXQKlkHOBejfWFd5nOlq8P5FqQhuvwVHO3dalmeM7i4nFHxP cWF6g7/Xt7W1yX87dOi8R46d/5DbdPciKBFz/stORUyY31u3lgwV99etxYMz8YCBmTivIHOvXeDx FTuVMD5sPqbI4xGcUaSwsgTqflrB/3ERC5MK+PW5aInHumfQ4OLNhLaTM1hpopHD5Di+7OheBSDf 6T34KhCxCkSsAhGrQEx8CVAjswRA0t26T9dakHHylWvBFwOXSWI5OP/wFP/hzsd1bxu3bfnc18FF +wV2q5feqWcpkiGLbVFT6l+kL7POSOeyDFjrM3qZ1V58m0qfUA/7j/vTflkzZTuyve6gYqQGr91i d9gc+X6dE9Iv5KG1F8et2XwqsGv/rrv4hrCKSVnzOGmRezYjD63ZfGJIf8uPZGAWfrIjfQ6+BJDY qg8aUpy2UvxZx8ET164HiocUJ/1n/GyJ/zl/0t/ul/2w3T1esdbncN2P9ePqPx+DWFLBWFcsqcwZ S5RBUgNjQmmQef/Ibdfd6PMMFuciicb5hGMqs4AIsapnoVfi9AVc/oOjAuxXBq8PXOZczI66Tfca XGaLyWK0SAY1hlMhlzot7lyKa+h4vM/d/CsQkIrfxHGvKD9rYWoVx/j563Gte2H5x3XPT1AtbX0W XNP4shx7fHvVkrFFd3Y0srU3L6p49L2OvVzmVkLm9gQV7SSHLtjpEfe/WVyn41OCvn9Sb+RYjihw Gy05tqsN15imGRKmOYZ5JlOxOsw9zDvYX6VWu6u9Vf7pynTzJLXWXeud5F+kLDLPVhe5F3ln+2+l HrNBsd8oTVGmWG60LZQalAbLQpvFF5SNrqDVmp2fK47CXMEGcB50fTBiFIegEcYd5CI4SihZAuGj Eging0CEvOREyMovKB4Av5RRNWo4Cgcey6W5PH8MF8HAHfnE5uBGoJtzF65rITgIBoFQiF4iVCdi ExtH3PYQHU2GuZeODAxwUcy/yen+nYIgrj1Xeynj0nc6/Jzkt6nmycpk80xlplmGaSz8Elniqge3 dEIkX+7Crnzx/jf/TL13/O2BY52ndrWsW9vSumZdCz6H7/nQis5POw7+7R4aovb33n3vd2++e4BL A/5L98T/OnzfLweZEjwp/GszD/GKL8z4f0rk4n8lepB8MoAMIoPxrdzV5Br8P814/O/EJLyBrxU4 E+NnwP+xkBsmjZ9YMTZeccu8+oVjp/wffphWaAplbmRzdHJlYW0KZW5kb2JqCjgwIDAgb2JqCjEx ODExCmVuZG9iago4IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFz ZUZvbnQgL1ZFR0lIQitDb3VyaWVyTmV3UFNNVCAvRm9udERlc2NyaXB0b3IKODEgMCBSIC9FbmNv ZGluZyAvTWFjUm9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMjYgL1dpZHRo cyBbIDYwMAowIDYwMCAwIDAgNjAwIDAgNjAwIDYwMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDAgNjAwIDAg MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAKNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAg MAo2MDAgMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAKNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAg NjAwIDAgNjAwIDAgNjAwIF0gPj4KZW5kb2JqCjgxIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3Jp cHRvciAvRm9udE5hbWUgL1ZFR0lIQitDb3VyaWVyTmV3UFNNVCAvRmxhZ3MgMzMgL0ZvbnRCQm94 ClstMTIyIC02ODAgNjIyIDEwMjFdIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgODMzIC9EZXNjZW50 IC0zMDAgL0NhcEhlaWdodCA1NzEKL1N0ZW1WIDAgL1hIZWlnaHQgNDIzIC9BdmdXaWR0aCA2MDAg L01heFdpZHRoIDYwMCAvRm9udEZpbGUyIDgyIDAgUiA+PgplbmRvYmoKODIgMCBvYmoKPDwgL0xl bmd0aCA4MyAwIFIgL0xlbmd0aDEgNDAyNDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFt CngBlL0JYFTVvT9+zrl3JrNm7uz7viWzZN+AhNwQAgoiQdYAIQFFxKJAwbVWcEVAhWpdUaF116oh AQ2gQlvbaq0Vd6v2iX2IS4vbQ6qVzPw+584EiLbv/f8Zzn7uveee8/1+z3c7l9U/vmAxMZC1RCDy mectXEGUP08nkjfPvHB1qFA2GAgpuf7sFUvOK5SttxOiWrZk2SVnF8re/YSsvficxQvPKpTJMaQN 56CiUKZ1SGPnnLf64kLZLRJCT1u2/Mxiu7cM9Q+dt/Di4vPJeyiHzl943uJC/7slpGUrlq9aXSjf dQrS51f8eHGxP51DiG57oe2kmCI/nUbIqeQqoiKMSKSSzCRE2KqaTUSUebuKkNTLv76xx9T8tUar US6+Nz5NGdfv9K/cky/512bxO00aDVqlP++B69QPD91BiPhSviT/qvjd8RblekTTd5MZ+X3Cvv6Z tfIgktFKMlAaq1mL4oDeqKT92trWtkphH1mB8ATCywgi6UG8plgjkCByrQi8dhOCSLYJe0gfwj6E /Qi8ZjdqdqNmN2p2o6ZVGCRUeEp4sj8WxAh2DLhjNZ+3eYQBkkdgws+EjSSMey8opj3FdBPSFOo3 F9MbhI39Y4KmNi3KlHyOOI/A8G539U+cWrNLyTQ2K5ktwzVbBlATbHMLd2FUd2FUd2FUd2FUnyOm uPsW1G9B/RbUb1HqtxCq3CpcXrxVMXNXv8lRrEGmTSd0CbNIDW4xp5jOFmb11wT3tvUKM3HrJ5R4 mzAD+U1K3KPEU5V4jdK6RskvV/LLlXyrkm8t5vm1lUq+EAeVvInHwhnCdFKOp08TJilpp9BB4ihP RZmnpwunKukUYaKSnoZ6F+onCx3EgnSSMEEpn4ryeJRPQZmnE4UJ/eODVW0rUO5BGyMmgdePx0jG YzHHY5J4zSaEbQjvKzU9iNcgvIwgKD2pMB6/dvzahDZcIeMeMlpkIggyfq34jRXGoqUFb9OCWBaa 8b5BxJUIrQhTEXoQ9iHsRygRmhGHhHpShSAjdCL0Iqhwnwyuy2BcGTwhI2RJDPcKs+uJDWmomAbZ RhJAOcA29geCcpuW7SCdCL0IKxDWsh39KoupzYZ+vG8lwlSEHoQ1CFsRnkDQkFbEaJH1rJW1ClPZ VEEEdJcPNDfXKGltQyH1+QupwVNjavuxUI5pKidbEQQMuRxDLserDpeCyDGATpLsRXgZ4X0EPuFJ TEYSk5HECyZxfVLppVb6fY5SHkEgyxGvQTi5D5+aJF45iWeduAuvLUNNGe5ZhmvKcL8yTOP7iKly BW/vRNiEsBeBt0XQtkmJWxFPRWC4RwRvwHMmxEEh0s+0pkHMLx1tamvEvE9FQCO7AbN5A+btBg4h mD3ANlpaiz02IX0CQSXswq8cvyR+ZfhF8AvjF8IviF8Aq7cZv0343YjfDfhdj99GrIbtifTeNOup X16/pn5T/db6J+r31pfsYQvx62W9so44HKCJFrPG0yYxkcwnRvovJX5MiX+sxLISO2XPfOPB+cbn 5xvvmG+8Zb5xznzj6fONE+YbK+cbB+ki2Zk2vps2bk4bZ6WNDWljfdpYmzaWp41tZtpFZxMjeVaJ xylxjRJHlNhPZ/cbifZpOo+ENYB4mtwRviL4YXhQpP3Bq8KDGiRXFkrzCskYXvlksCq8JJgp1CQK SSz8jIg7kJn0V6SEpuVMyQslPSVyyaiSipJsSVlJsiRaEiyxaSwaSVOqMWh0Go1GrRE1TEM0tsH8 ARnbCSU2NXY1StR8LySikpcYzyNCTBjVMDKJ9FmFyWzy9HF0ct++M8nkRaG+o9Ojg1Q3bW6fKjqO 9lkmk8kzxrn6GtOTB0vyZ/Q1pSf3aTvnzdlO6Y1dKPWx6wYpmTFnkOZ51TXePkv7nF2E0sw1N3iL aVcXv2bOdpHecEMXcVzY6mq1jDWPmjD+30S9SmXv+PSJP9eJbDrNR+Lvu3Xy9Dl9j/i7+mp4Ju/v mox5nh6aP2cXa2INHeN3sUaedM3ZpVvLmjrO4PW6teMxkOF+JIT68btImCdKPxLi/Ujoe/0CrJH3 i/Ok0C+g9AuM6Le9JdwxfnsYUaFPi9KnZWSfJSP7LFH6LCn2EZTxK7cYvk/JARJW+oRLDihjP7lP oPCs/7VP/N/2OWk6F487qfCDLN1FJtE3t7df2rE42tEb7ViM0Nu38cJzXH1rF4VCu0g7fZM3hfqE RO+iM8/h6cLFg/TN6OLxfe3R8aHtk5RLR7b3XcqbJ0XHbyeXdsyYs/1SefH4/knypI7owvFdAxMX ph4b8bj1w4/bnlr4w4f1LeQ3S/FnTVSu+96zHuPNE/mzHuPPeow/a6I8UXmWAvUASw0Z19U+v5AO ML0OANzrDXeNc0grxirQPCbsuty7WyT0IaJPd/UZouP6jAgc0LNt2TbeBCzjTaWoNhWbXJePCXt3 04eKTRKqzdFxxNWxdDz+rVpVzBSK/2e8atWq1QtWLUCyarXyb9XqC5DyNSOrCDhXvEGbQdnfgqDG nDZvRLheodHCqlVdq4myvqsuIPzpq3l0/KEnchfg5nTVyZBA+CNH/KGVpkkh4HarLqAYAx/GBYXr 6CqKRtwGl64u1oHmiB8h3ES8SAPCIuzYJP9+Mfwtd3mhPTeUz7O30HlGMSBRcjPILajDj04ppOQs 8jo5j/yM3Ia6Wvpn8jCRiQltrxOBEnDszeRmchF5g8zMf4naMLmXfE4yZBQ5J58jZrKG5OhPyb2U 8ZkiTeQ1sphsZs1CWvw7iGOKVgmP0itJFneZQW4lTvIy7pjK61AeYH7WjKtmkBeFHk0mX5X/iu4T X8gvIr+kzexN8XHyJ3KYRkSSuyq/Mb8lfxcpJUcE/9Bv89X583DVTNJLLiCXYQRryT3kJdrFWtje /HqMaQ7GsIY8RV6kaQBULzi6M9D7anI72UWeJS+Tt8mHlFITLaNr6Wv0dRUZei73XP7U/KL8ctJB TiedZC1a/TRO29hcYa7wmPDW0H/nDuQDuPcMciG5mPyEbCKbyaPkLfIX8i4VmI7NYDOFx4iXtJC5 ZBFm82aM6WHyAnmfamgdHU1lei39FbtQFIaeww4vEjtm8BTc7Sz03YI5vZ88QZ4j+8kruOeXmFOB urH4M+l8+lN6Db2R/pzeT39FH6d/Zyr2tiAIV4i/F/+eezOvy9+ZfxjP9RIfCYHXzWANTsN6vkQ+ xfulaIa20ldZmmUEKhqGcrna/MT8mvzv8m+RKEmibwv42g4yhczGqC+B/LWH/B7XvkT+TA6Rf2KW BKqjFsxFiEbpGXQ6vQCjeIx+ToeYA+vXxJaxfva6kBZeEmeLjw/tyNlz/bnPc/n8o/m+/G/zf1LW twHPaccKdJMVQDG+YjvxnN+Rg+QT8jWeoaZBjPUUOhnvezvu/z49BnDSsMvZr1ge3O9m4QXRLd6e Oz13Xu723EC+Lj8FsCWA6XKTOvxGA5pmki7c+0rM5r3kEazMAKDnTfIZddEAraKn0ll0Du2l59Dl dAVdSX9CL8OsPkx30D30Tfou/YyJTM3smKc0O5NdyW5mO9hz7E12UCDCdMgwK4WfCDcLO4T9wsei JGbEKnGK2CteIl6qAkumdmj+dMx57LyhRUN3Dv02V5Ebn/tRbmPu17k3c3/L6/N78x8SNanCGLvI Eozxp3j/a8mNZCvg4xGM8QPyEfk71vwrzIVAtdSDEQeVdWvHuKdg5LPBMp2N3zn0XMz/Wvoo7adP 03301/QF+iJ9lb5HP2cUo6/AbwywYCY7G+9wJ3uU9bG/4Pc1+1ZIgOuvEWohVfTibdYJ1+F9bhPe Ez4UmWgXq8Xp4hrxDypBdZbqVtUW1XOq51WfqiX1PEBo4VegH0os/In9WhwrLCPbIB0IwqfsVdZM f8q+ow8yP/01nuYXOoVO1s7GgDfaAyg/j9hKtqjD6jCzEamkl9+E3cGywmwxIRjIauAbYXPZtayX PECfJt+xUwBpFwovsW2sR9gi3iSOpW9Bvvg1VAFGepS0kTY6Fmv3GlmJFcoKT4h/5ndUaYRjqvOY Mb9O/EjFhFdBB1soE/5I59LDtJM5MFtj2I0kirJEDyM9FRj4F0D+LrCdTeIB4Xo2ib2LumXkZvpr vOMesoztob/EujQBH39MO+ldQjW5nK7EjIwi57KfkwhbwSKA55nkf+iV1A7M/Q5rE2NnE1EwsjPJ 66wLq76fWlgFvRxweh7ZSDeQDB2i+8if2M9IA10sPHvMPVTG6LHDdLtwCtlOvxNfEF8A8/0dZtIP yNVQGRByL2jETGBmWEgAapqIikGOAz71AtfN7Gt6GVtGltLbhU/o/ayNTCWLhVVsAr0197XYJtRi xnaDmrSrR2mIqlnlF+uw4h+RsYDGJdCQnCO+r7qS54XXhCP5rnw416Mqzb1HLsXsnALqthG4dAp5 hzroAjpNzLPJYj4/izzKnhDfyzupgYbJK3lgWG4nbaaxfIiuzOvpNED4Aq57ETeK14gXiJdhf/oO VPNachO5k/wGu8l92LeSmMfTMJvzQXuWYo+ogsagHm83lowDVToVbZ1kFuhpL6jk2eR8shKU927y K7IdO9RkzMcCXHc2ORf1q7BD/YRcDvxfR64HDbiVPEBeYY+wrZBxr2O/YxeypeQd8o7wB0Gms8jr 4npxDZkOGXgateLJjVilIK67Pv8anlZOvKD+dcBSQH7+7/k38w8NvYz7PYCx36QeR/6ubidlZCo9 KnqoSm6bIbeObWkeM3pUU2N9XW1NdVVlRTaTTpWXJRPxWDQSDgUDfp/X43Y5HXab1WKWTKVGg16n 1ZSoVaLAKMl0RCf0hvoSvX1iInrKKVleji5ExcKTKnr7QqiaMLJPX4hftxBNI3rK6Hn293rKhZ7y 8Z5UCjWT5mwm1BEN9b00PhoapHOnzUH+hvHRrlDfYSU/RclvVvJG5MNhXBDqcJ0zPtRHe0MdfRMu PGdDR+/4bIZu1+vao+2LddkM2a7TI6tHrs8ZXbGdOsdSJcOcHaO3M6Ix4hX7PNHxHX3uKC7FbYR4 x8Kz+jqnzekY7w2Hu7KZPtp+ZnRRH+FcYFrpQtqVx/Sp2/tKlMeElvbhbcjG0PbMvg3XD0pkUW/a cFb0rIXz5/QJC3GPjj5zGs8d3+e89KDrRBE3B7+57uRWr7Chw7U0xDtv2LAu1Ldt2pyTrvWG+R26 unAPXMviE3o3TMCjr8dKTeaSUh+7pmtOH70GjwTPHFfeqvB+BY4+3ntuqE8bHRc9Z8O5vVgaz4Y+ csYl4X6PR96VP0A8HaENM+ZEw32t3mjXwvG+7Tay4YxLBtxyyD2yJZvZLpkLE7u91FTMGIwnZxZj 0gttSk7pznOTzzg+s5SPMXpqnwyIOjOEkcyJ4p2aeLS4iWw4swkLgL8uiqv6zsKKLO3TtvdukEbz erwi7VPFpWhow9cEEBA9/I+RNQuLNeq49DXhjRxOjoNaH104nO9Lp/tSKQ4iJe1YU4xxrFKuz2Yu HGRLoyukEBIIRKQTc7uwa3Qlpj8c5gu8cVAmi1DoWzttTqEcIou8/USuhNzAennLvuEW+0zesna4 5fjlvVFA8g4wEYTY+zSJ4/9MksPacc7oPur4X5oXF9onT49OnjZ3TqhjQ28RaifPGFEqtPMJxbyh rZjrs7bPEbwMdTzHvILSCqCcP/d4FxTmGPrEOP6pFaA+a7BEA6hUamhoQp/Ue0oh7tKFw0Wc+b8u Gsx/wa9SkhOXFV+jb3S6ONDCsPvGjCiPGJ5hgzB5BkgOmzxj7oYNuhFtE0DMNmyYEA1N2NC7YeFg fu2iaEiKbtgFBiSxYUUHyFBhRQfzuzd6+yZc34VXOYeOBtwyMm57lF43bbtMr5s+d84uaFpC182Y 0w/Wpr13XFdXVnyJLEGANp/qkO5B+oH4EutGyts2I00j3Y30JaSHED5EOIjwKMJvEd5EeA7tFqSv IXyEvLXQnzahvBjhLQQzwmyENQj3IMxB2IqwFuFHCPy+/J5dCLzOhVCBcA7CQDHl1+xC2IQwHUFC iCN0IpyJ8AbG3oJnNyOPd+LjJ/w9+H0vR+D35WP5KcJMhGcQdiDsRcC7EzvCMoSfIfDreH9+7csI NyHMQxiDMPxetyB/GM/kz9sDwIdwh5jAqqQmzyMNkR6lhqu1YHxBEMFhq5GWQKOrJTqiR18jpDAT LDRmSFVWaI/txAGpjkBbzv/cxKNIIn6uR8YdwyQCOSNG4iSB3b4Me2uKpCGjZEkFbDxVpBo7fi04 I4J9H5YohEbs/6PA0Y/BntwCTqAVe30b+IF2RU6ZQCaCFzkV6rbJ4A6mQFabyrlHMg3hDAT+14jf RkhMg8wEPvg5dkQoFeqEDeKjqio1Vb9dcoEmppW19+n69PfpPzK0GK4x3ln6tGm3dKl5nMVuecu6 z/Yv+62OU51vu2T3vZ47vc/7rvb/NvDfwSdC6TAJfxa9N+5P1Cb+kaxI/ii5sWx9+ZyUKfVMen5G l/lb9pOKWRVvVF1e9XrNxNo5dYl6sf6zhqeaTE0Doy4YPbc52/L22Hzrltbfy1zuBe8lLlHxmS4h E7arSwapYQfYAZXIMwLRqVXIPCkIzKMt4XVPUuLWTP2JK326dKR5ylDz6dLR5inSEIwBzUPNPFRX 1ZrD5njYHF4ikmMhYd8xWUW+IyFxH/hwHXtQ+LX4KlbSTHq3l6oG2bWyjuq03Fqme0u7m91H9OxZ 2RAy7zW/bH7f/LlZZd5NHYSxZwc04L8H2X07qzTLoRt9mt2Btf+SdhJXWjrafeSwNHS0+/CRwxhH s9SMsVVX0bCgVkcjieSJDJ41QR1yu0NqukTJujwhlfhqzpMIBhP0UCEFvO3JfyzaxO8Aa05ASiM0 Y+Pkyc+7qTpCf6QpMFJgrrTBUDgSjcUTSW1ZwDUlGH0/yqLReiEyRXLvdzO3WxjTWJ9va6y0Nwp5 U6PW0GjCe+YtjepB+pEsjQ+MVZeNbWo0ZWgmP7axZpD9z1PjtaRSf+ajrjRpbaXS0cND3YcPSgcL GSIdHjrMg2VUZfdhsxJTs8U5yjmquqr9EnlGtp06m+vGlpHRDU1lVK5CblwFcpLGUkZKdYYyahOR czDkWmrHlNFRjYhaq9vKSHsWkbnEVEaNekRWlb2MOCmigppJ0REV1UhXXAHlsmP65L449h1ZO843 2ufwlfqa27T5g6Q1/w8iI5UQbPmDTcN/XWRlN7Xx1aiva6itcZTUJaIRtd3mqK1pUKkK9Y0NjXHe ZreVqIX/0Jcdum3pubfeeu65tzavmjZtFQ/0tGNHS0v05hKVRdCVanTIBG87d+lt6HRby3An4Ztl t9++bNltty2bvnr1dIT9Q6LFoNOp1cU0Jy277fYf8U4zVq2efsYFq6Hz/gDWi7+LHwFay2VJ9SSI 1ePsJvL4Jk1eAcApIEc5enoBAA8O4eUPnwx0H3AAC7sAa+JHQ/+TCodTuAHrzh2DrPgR6FOnnCw3 pCSmcpZadRaHWq2SnA6rfaxVNUWrtW4rjREQOEbcvj/upiriou5rOM51Txk60iwdlvA0oBuAYBRA YBQAgHbTOoulcXgCmd1m4bw+pjaZYAnW3fxI0lBqcZecv2DB+SVuS6kh/pBMv1pFGT0jqneZdYY/ 5gbvuz83+IJBZ3brI3RSDjOQzR1ja4qjLdcyrQdQ7RH5iLUWtdMhqdQYrU6HQWO8JhBbRjz++3bT KcPjPcrHexADVoY7YrQ2xkqGF95SX8eSBdBwOiwOtubfjvbLVbl87rGIwY3RvkBPue9+esofMVqX PpJ7EqOFLqxdbBGnYBjz5Gr3vGCQwILyoDRPfFBjmqfVanzvkXka5zyz2TVPkjR0XkmJ5r0qAzW4 Q5rOK4BylVSZYGV+MWQ+zVhVUBNM99BBpMhhos0F2DSHC8AcNisQbTeHOeiqo+xnLqvFlbs+4PEE 6Gqep6t5ngVz85W6+5xWq5P+kudzC3gecEHTudfZK7QCIFUru35DXiUHyBfY+p4U6f+wX5NXTTAR sZKn6e3YAM+j/hMwV8lH1E3DtDiVUMiYc295E+6oQCuG3q6JunVwx6BkNysRrWwN6LxHNpB9WCcV c4uc0pwO+nKIVE7hN7KH60XrsQfZmosvxpheyv8Nytcvsdv6QKX7NXrxbb279LxdNIDnY6qmYFVx VVzBWXW0gNxsZqypc1ojj76c2jT6dB7w/EP52cKnqvMA0ufJo7VaB3VrBeyx2gn0VO087Y+0F9KL tes167W30ju099OHtU+SJ+kf6AvaN+kh+on2KP1G69RrqX6QPr9T0I8l87SDtB+Dmqd5plKgwlvm Qbpn+9PYCo50D2EXOEiUeVnZ3Q29njKuRtpQQA3hwNB8s9fs1rF79bZSs1sV+9ecuNtksKsecpa6 TXqA8Id4749VXK9XSR8bsDBddHf+KyLkj/RnNeUgc1+RsvwRksz/kzgQ7Pl/Pukr1ZZqStnu/Deg fF/1+0uz/IpU/is5Wq7ylQZLI5bzNAGfhVTQpMoYiZaGWyyZFpVFpTJ6WrCr/enJ6lhLqbvqF7up GqiTUVB9ymHQfewDAD+Q/FFAczOPCsR+LquQEi630+1w2902t0rt8/q9AW/QK6qTibJEeSKVENV6 g86gNWgMJQaVWkhEzDGZhKwemabVcRncWqVMo6awTL1uRAlDRiYVDBGn87AB4C+Fv/QVZJiI0+GM kkI4kO3mgNXdaguYna1mHjkCAUtrZDD/nSwjk7T5zIi8EiK3CZGztDXKo6TNYUQOkWBDPyFg0bdm dYgcPOe3ucP8Jv+QnciYbM4gvyrYynSSeayTR4XRKUM8HvFhd1G7pNCUZCIBclIvKeTQ6XA4+YaT xC8aYXbsOk78amss9cLHVyy+c9JVFf4OkxO5yVdWBMZLjhntKXfZqIk3bGtPu8pGnXL9Nvbu/tyX 91w2pj58U8usVfupxPORm5pnrbnopZaoO5o7sG/XRX9uibhjNLyPY9tBMFQfi9+Aym/vt2i8g/lv ZJNZTTRar+zttHR6Ra1pN3uYGOgWWSsZDCbpWa2G8RoVaixUpWL0WU1RWVNi8dp2w4piZkueIiqt xuBmtj3sCnBQTvZnWUeWmM10CZGo9AxbAfX7L2A8USAIXBFIGDgGhSlqPXxY4RWINNQCzsFFpa+P PDeiUF1FuvnC0mFCdpy+ndif2WYa4nRraJlCyUK5z2xak1uncYvffDffCVLnslidYtUstdtsMmo4 V/coZuIt4FKahrarWfuMOU959WmVaCNkkM7bqTPYWiIqUJHWIc7IVFfBxuzI/5ec8cbqTjFdWnpt 8tqya8sfKHugfI9hR0prtOgc9YamlFgeTQXStmSgLGqw6TmkGD+1HHb8yzLkEMs0wzP53lPFiVQ9 Qw+CsOqpEURt3g6tVmfwDNJvdyjP3kPngc1jqNd8YG6JtxnZcggGTtQG0F/PzoOq9GfDWCkdBaN5 FASGb2iHD7difg9Kh2lxTgmfU4UV8wVjFpcjHkrYwy6ZWKNmmTqDNplaYoiK2HXFFYX5xpSTlXRl uqsxXOCN7KDCscaxrF7hkUrUxV2ySL/U6hJSMsSu4RvLsdcp+WrljODjPzn/Ebdaa5DMzqW7Ft79 t8S8C3Nv754R5ot0wWWHPlt+ztSyZQ9c3u0q0TmlqvsWvLNh9MJVq3Pv/YLD6m/zfxMxUQQLP7Cs iZJBUK3ampp68+jYqbFJ8famHxP1mvC1TbeIN9ff2nR//QNNu6y7nS9aX7S95HzX+lfnP6z/cuYr zfy6nbYIFs48iBX0IVOuMenTZWahEgNxEVXUR9yBUFki48bSD4RClswgvWEg0VJbinSnpUUdbWkY pEZZZ28RfL5Rgmd05W4sgY9d8ZTePapWpTb+YzddWwBuzh7zHejgwdOlQ4DnKRLn/flqDB1EkXPH nFwqIA/AMheIpq+uPha32kRVvC4qcyZXprH6hMzZYplzuliaK/CHpKl7ZRNpWkkdBRaKUxO+y3Oq 0YB1AR1RKpxKCZxsiSJp1NcV+S+1YF196deDyz6uMDklybblsZt+t/DJ7oDH7T5l5c13Xjb7poxk 1ptdsy+5c+ufFrFH63Yuuu2j+VWSRXKZVj21YvLm6RyX6IZ5CzY319m0TqmsZebeq2fcir3pTY5P 4Mj8kGpfkY3Yz0MsEFb5gz4HpvXQk37/sw6T3TJIe2VLaemz9lA4vIQJ4LUEFg5CvTrvKUEQVeGA MYB8P8ToQYb9yu/jaOAgJtQ57MIgu0o2UVXpEr8/SEwBClQI7GbnkzCdJ+uBQ9QdEUW7AbvVq1iO 2DWKtILlWDkFQtjKZkhgQ83gUKVmMFDN0mcKL6WIZUPN5lGqdRXpn0rPuSDOgAi93jycmqqrVtJw Pa01D/MTw5kiIao1m6NUEIZeo689MSHo8QQnKHHueZ6/O5ObTXsWCsljf+Jzl/t6mBrRHvb+UBhw /hyHc8xchvyXHNF7tb6Ittw92qXKlp9W3lN+fvnt5S+433X93aVxcyB2cCC2IuMNRTU2KRRzBD00 6A+TZzBRcU5HMBsHZa2/RRR1JBG3DtL/lrXOFp2nRSqhJbvZNaScLduJnkvisUH616ckdzYu6oZB +MScTTkCoRlSXXcBfDlLX6nIecgorD2HY4WouFw+ldanwv7t0iLyqv0ydWucJyAXKJxOd6+k5mFS wXn/70FuNFIgJ8NEnq6ZdF3LPW98seOi80+XEy7JbL2t/+Z9D6y96qqQEYz4JE5CxJtyi4PB/9r5 /Df18caww+K23PDCgzc+1iG5HCzL6RDIpwWz6wEViZIq+ohsqIjYYnWRQDoQDiR254/C8PI3ubRe HKNpFydrZopzNeo4JngA8xsqptjwUY7WxQbzr8s6Tj1wdUxjHMSVa0RR1NhEmyYhJjQp62jrZOs8 67nWS6zXWa+J7bHujL2jf8fyd6NVT1WakpA64TbFQvHw4tCZ4UvCl5StqlxRNRDZk3rT8DfdIYNl rgZMj2S2hKy2oD3g8DvdkssYITGjIa5P6GhVJavIYBcpL0mnVE51qTFWDRy5f2e2RRC03kH6X7Ij 2GJTJVu0RtcH6haSklKhVFVKTD3DXoIeKUZjxMAeeCrSUlVKS93Ve2gTvaJAsxThgu8dQ92KsIgN hK/1Qb7KfPcr7IAQ5H3xTCgsWiWT2WQxCWqDUW9k6oyYkmnIGhmkv5LtJKEDLxePlWlQmVZlZRo2 BXmLnsaNSZmUlyAqMnJSs8LJcbq2UtngOctU3HrSw1wxZ5I5pGDb4VSuKDdGI8RuA/tUIHocdOiy 0+9ffO3+Zx8875mG9taqbW9cNqPJ5TAbLeUtv83tdSfuXb5i67bFC+c2M+uq89+/79Zvr9342Kv3 XLd06+KIyW1x6my57R+FX3nyrieuv+pX0xuBla/lc8KbwEo7WbtdK3AWSA3SlWJqtcCe1RqMxiV2 YrPbiR3MhMGptxuIIFG2RK8zmySdKBn0u4GJlD20w6l1O7A/HGefD05RGJ9WiRMe0B2ngk0cmdaV VqRLOQX63r5N68PKe4NxDNvpMEEXrhh6gNMSQcg9rnGUWlxqcVlCQYut1373vMfsknQWUOGPIDN8 pMgMcVJN18njLQ9G/kg+I58ZRI/ot6ezs9OLmUpfKrq8pTbXBtfP6Z2aO/U3J7em78o+TO9N7mR7 dbsNu9Mv6f6Ytl5C7w+zalsWnE2/LxoYzP+1vypasTv/Vwgb3+wwa8rKgCV/7U+VRXZD3xLPf9qf jIQ5G2RJl8maaEt5udrfYlVVtqiNcP77iyyVlzukRIvwgael1THVwRyD9LCsrw21SB9kWrTumu+J HQDRI1yXxknRIc6cKXCq0KCqbLU3aLaLmoAlJBOfDXSoogQyQ5UK22jQDIrktSPKaiplUg0B44Qw wTfWH0oSpJt2ryQrIUvsIun8xwOQBvAiHw9ASOCpXAUZQeVCSeVCjvIc5TmVy2ZotbvQ3c7r7LzO zutAAU/8dR3fv7F7Nw6TQkB3ibrxJAWU9aS8YF36owPbth340bnzU6PfuPW210eXG39xwepfbL3w oq3OX61d+6vH1qx5jG2sfbD3lnfeuaXnwbr6UdMWbXj55Q2LOkd/smzLXecuuvnmXMny++47/8cP PQS6aAVddAIu4qSWdsrZEo2YKkmTikdiu2PqBCeS0QyiUhciY2mgps4QQVTjqM0kM3bOiZnmVX9o +Tb6P6kjFaq9hFZzKsmvGuSL7sD6f0pqME9ZXKW27ax+rvq1anGBxhgjiVJDUl+mTUH6Q86YQIVR NMXKW3QqTs9kXSUImi7c4jAmdoNmGdkDsi7WYvLUez4oack8wx4idSdIl3RkCIzW0SmHj3wIeFCo VmtBngCMnCBcyWRFJCrajaWGUqY2g52xSjZJVKviKS1gpEwPGEkmInbsh7+SrbRC5MKmphyVpYii Uhj1O0lWDbAZhpsTxIt0p8Epp1fS4zQMeQVJC6wZJDq+rgq3fNKeR+rrIAwe1zU2Ngh72wYWzL63 d++2Hz9d1z4qcfP8y6+bO8rjMhucydo3aI2t/u6lP/rlL88es6o2zH6/avVZvz73zqEb1z32Yf+F nbdWtkYkl9mpt9Laj1Jvv3jzjhvWD8hw0GUFXYmwCLoSL6mWtaZ+h17TT9SWPdBeu4lIHTv1erfb d0J5Aq15QYpQtIbDLI/CVlpHlE5SqChaFSUSFnU2jjmdh6FNx7UsjDblU/AV4qNwkTmyeV/p/tK3 pQOln0hflH4rlTjBpDwyUGWipkHqkbUYn+l/pF87xEHqkI36utJXTQ7qeMdN1MVREqigj3Qf4TsW mLnDyIIRgbJpxPAEqJ747oG9g82IN03tbEQ0bT7V5D60u82ukPqkof4pVxWxBOwGK1xtyGK6QVwK zxs+Y439JTGYSr6RvfaYSe/2+MWpFop/JkulpdUiWNy+osmhG+wlLA5QVw0d5QqrYRlVUb0JI0pi 9TFFShV+znmYk/LsKc6z8JB7javfFBUcI2/lL4ekaoa9ZyLt3gU9zr4BX6DOMpjfJ2stgTqjjKgV pQGk1mLqUlJXXTvv5bS46nZrnpaZRao0RiXhHE3IT1saRg3SUlnX0FDTQsWJY8f7BwWVrHVXZ0rf GztP1zIoCLJZzIwf79apYxm3PvT4qLEN4NMnyEaHbmx9Q2zsxBhcdCAYbe1vy8A8UynrHfZY1hHL dsJu8DT9CKaoP3AFMTeDgOGGfDoEJRhnKsGDS0e4WroVGMtFI6zkQSCsZZTCekvNpFsh6me0tsfr VK5Uujxdlk6mE2modW0Wm9km2UR1ZaI23qqFdcAVd/QQU5W9hxhr9GW0XYU6WTO2jDrT7h5iqyjt oYa60jI6Tj1+2GwwTIxTqQL3UaTMtL4IMQ21iozLRVy13Wyz1NYc118r/Ain2OaCEsdhNyuymDoK o07BbtAozHOnLD+5+7ePXHf2xNa0r6pj4PZbJ5sls6u5d0vnNVnf6ZLzumX3nLHhXJvNaHWNv/qW 8xaZ4zZaoRfF25f9ZPvC86+PuWOt26/K7fxN7p8TJZcUSrSMqQveOnraCvhZkV9e2fGLpUP7GNgb u5YeoFfOOO1sFT8JZobNbC98X1NQ5z0ppxvMmFHv2ExjdqLlVM9pmQlZqHgcPZ6eTGf2m5QpTVKp TAVlLKuTYL+SHcZNxq1G9r6RGsvNRqNk9uvMlmg5bypNJGpTiUR5yh9NZbQQw1ClVtcqzJBfy7Ju q1LlcMyyOBxWi99tMUd8vOqUIAmuDW4OCvuDNFjuDQahDYx4PZ5MKhXwemxer8diNgdYFnJgNhaN wu+H0EDaVBGEs16F1p3NJDzWBJT7nt1wjM3QsbItlfDKJm0rMVMTlIoHvF94RTC/mSerWMKcTVh2 07HEDFww61oh7u+TJfQ1mSkxT4XNLm8WoY/NDFR2LHMhvYZD5krAAsAP0MmzgEQYBLh0yHmMbgCr YrZbp1JEw3UVrvS6n0JC1BxXVn3ZvbIS+qqTKv5/FZWrS8AK8lBQmAtFKjYsXNKiSB8eJm/DDYIQ FYSfDL298hecjuR+z+M2uuobntIH6Z1tSvUfuBC67eaPgx/QdbmXhoVP4VNOXL77zXCZrmNnDt0N ER6erkTsAgz5YJGuoWfLzzyRejT9e93v9G/pVJtSG9J3h7bEt6Yfj6t/ElsTX5W+ILtJt8m2MbYp rpkpLZbW6FZIK8wrLCusJZNCU8Knxianry1V1ZjGhEaHR8dbU2PSHaaJkkZb6Q75wt64N+WtjJpS ac0l0tOxP1QKE0Knxi8MXRvaUHVL6P7QzpAmo4H6AOdM/A6mUaUp9WuqQqVCtKy0JpT0lyccyYQm 4A9U19Q4NMyhicZNhqCh0tBqmGroMSyHenmQXiWXZ+MEyMdM5s3mfeb95gPmL8xqs6cuWQYFAjdl fQF231076ZICTHBpaGXRgtytKA64rhvQoIjDUkGDU1RZjlQUKDQrEMtYbDq9NZGOp2zZLI3rolma sZTjTJk+kaUFZY6izuGWx5UrYQro7o6bhxdZsTIWCUpxoa1hUB+u3InCdl2j5JClZCVfXybd/bv7 r7q08/6FQ4ph53e0vGdqy/ifX5QboA9Pu3hs1z0bc6/OKCz3zkvv7Km8a8GMjYu4NpQ1RH3nNk69 5pjjlHNHyRePxSSsyb8vniY+Bh+D9+WLszZaCf+CqURQOeyOWc7FtrMcSytW2FY5Vrh2OHWNvoaq SY5JDfOc8+rPdZ5Tf43vjkpdbbUp5I3A+VhT6nA21oSiARM0QRZ9dEfaEm/UbxQD8XSjILK0tjSh 6Q0nEp7R3oSpOlhdWd1aLVa7R607aRGmHOac3dAQn37F1sD5koI8qpgbCjo0cHnY/MnkPj0svzFY fncRH6QTs41wEcSf/8dOaNl9LgfXIOOvi7P1wPRhjaZiMiso4Dm1L1FDC08gVh6n92AhkhVCfX2d BWo24e3Cvmx2MtWs1T9fOEtOjEv6qLRj2aOdZrvFkT7jpaXzFpyyYH3NNR+t2y8Gx/Al+iTocXln tHWlg9nTeybMufnp3N8X9NgdZmfl/O6o95RHfzb70csoP44Kn3giXgjc84PUGeTwjbr1+uss663r bdfbNwU3hTaEb0huKN+UMmCXS4bKfRBEDsjaO5I7w6xd4/Rzeqv3lBOPx0/8Tg3j5XpVuaJr9mvM FaZgwOHwB5yadECrZQENiyVMYLlMIRMzeSoygQANYbVh2M3uoaOo5oRu4AQycOUydEJKxLUDI/T0 IwoKLtSFUjp7qcloMpj0JlGdiCfjZfHyuKi2WmwWpg7HU7pYBQ3ZoxU0bkpX0IglWME5bL49w8JT VERDO3AyfnATCRYJSxUdpoQKVnB+OgmOOkz9ExUS+Ny5T1RMLff/+Jozr8w185ottPrcXd3u2LjY 9dNyLxeRYk5Tz7lTlq6+4qu54zhWbPj1gttPb+nqzJwKfJiD9ajEetRTi+zpCS5Xr1ELZn1p2mLx 6yO+YH006vcJWjXntUyBVp7KGZO7VT2LMb/W5nGmrVa/p66CAzirTtfX+yuSWa6XYal0IuHPQjGy TG72MJrQR2MJTz20dQFC9B6m10QSJh/93Jf3MV8bnJq1tFO7Tbtfe0D7hValrU8kKkhWyrLsIHZE Rzwew6apPcNaafnc8gVnShsmLVfsoN3NUw4Pca3nEb6TSd0rwSqvLFIzhQ1DhH+gYtDxfd39evPx TFEFqtSn08MNryt9oRrlJhmYY4pINGxwrj1OxYqW6HoQrOE+Bdt0PZ3JruU4dGwhX5GVCg0TVvGa oQeoorPDKrhYfS6o7GO5HXxRCuQr9z6/5KXc5B6e5j7jcQ9WaStWaTVWqY58KS/oVVGT1pCWJL82 7A3URyJ+b23WVBWsYlXpujp/FttIA99GLG572mz2uxMZUi6Vs/J0PO7PRKIJdx20Vwm4amFVtG6m 1dTFs/EEyUiZzowAu8BYOROLRQlNSJEE8Ya8rNO7zbtf4UNU3jPMIYkSaa20WfpCEiV3/dFdHI8U 9wi+pWDyMd/KegCN4JrUiiJngTlLPPSD2R9WQI9cnZMWASLPsLp0GBUKSwDqFf5f1uCugrEs5x1e A5M+INzNJ37opyMXYZg/UFbAqPv3S4A1WIud4xrsHM00ITddH7ozxCqlVmmqJJxqmBCbpe82zIo9 oH8g9rR6t0ErRp3RhCEZTcQaYuoGMmozGTWK+BvqKznBqjXV0JqGipqaygp/vU4TTEpZKw04Xdie sg2poF8Swt7mRENlouHsergEhOOlAti/pXLIZrOyVFzUBs6uqMgGKCWescmESROER4y7Zd3yE3u7 sq0ormHcV4WbykDPOLd38MT2UlBwKxIJ56FPomzdBeNkwVApwah20s7TpoNw9g+igg0+A/VHOUJZ /tOdMUfEER3ef7ABrezmG5CZixoVrLixOOsKqvGCno+TMW66AZkT+V40jGAqRZpUi5W9e3vWvXTj 1PWfXf/i9SVc9+eymJ1U/cpPVu+Z1kDJB6ddObuwVBQypmSj/bnb6xs6N/evv3MDVW1YXm0zeQLP Bt1O/8xli2/svvCOV46GymgjsNBFnVajowQr+iNg1XJgVTv9jWyw/MLxeOWAY2+lWBAV9MZ0UULw hPiqlUp+6k+H/f5Q2O/JwGEMVfBRqCyvraysqfVnmsfxKsnUCmN5a7q9tXVcu7+5IEfo1emiGFEQ IvSO8qIMkY4r94HXV1k6VlYWj/nTY+p5VTvsCU3puqam+jr/mGgkAKMHdIWJTCYdSnjiiXS6IDM0 jxmjg0BRG4jVBWLtsi9Yt7X9iXa2qf39dtY+yPbI3g5LIBw2B6qYjCPhOIe/n8Epsocth03qaRxw Gc+PpXL59Qike8XrBuQzzUVZyAjc64ZLCgAf/BBzEOJU9rgZuwgqqOZG7ZGl75m4fwhg//aq799D ERgUFWUlVwaYbK0OGVElNqKnSq0oIOKibRcN/8BkVWQ4h1UmcI38fs335BDhqqHXFHKde0+hvHVc sPhWoSAsuwImxOC3vKauQJ3Rxx1cwRpygREkRNFp5E6jOwp8FPYBx3A7YO5DCCCfAOaC5C05WylW qKKGkDFkC9krfZWBsapaQ5Wtyt7qaw2crmo3yDbZPtk31T81YOffDADvY2hQXBb8WndQKfsaiM8X JH53gRfSg/JzBwa/xmXh7Ul7g9lut5j9rmDCbUm4XYwlNKYE/LG4EGqeCs8Fd+j694d3UsWVlC82 X3XQ8f/grXDSUn5vkZXV+h69xgZZdNZSUBs+Wt/zYzjAJ5gpmiJx7InJKuyIfBK5pfxRUN8nMG8J 8pV82eXCGuultvXsemGTdYPtG4dGy/Q2vV24k91d8kjJR9KHtg8dalE6W3pSetIm1mgSoSi8i/0h d9D3rsvlD5aYLHq9GAoyC6ipy8lJqWw0w9HYILUeILBzg7SWmc4uDWg0JbyhhDeshWnRnbx7F32j uN2BheM0litnFRG76IuLyQNkQzX7PRurwi5GJAdT2x02xGaVCVTXpC6xCs4sldSgwQ5myRaYQ456 ac4dcgEKW2CBhy96uwkOWIW4vPS9mRWeOHhPz1PL+CZHp9w26YxTG+flnuIAy87mUyyOHfLccWD2 mbSBl3JfTZxYFrhxGjs0DKd46y5QxDswy+PYWXK3K+tq8LTFautrGxsmhue1LQkva7sofFnbBnlD 2x3ylrYn2va0vVhrNZGG2o7a2XWiKZJumFDXVj+r+rnW38r72jTeiLd6aWRp9c/rnsg+3PBx5Nvs tw26mnGEVA9Dc3oENJcSH/XVhgDQIb87VcUB2BHKbs6yqizNZjdXZ7NV1f5UNSnAeikcdlS1I8Bd D4anAO7lUX51Z8KUCCaqcPAgHeH7jb88Em6rkxvE1nGRamIhgXDEFg5HSLg6IoZoVSIVTaTKy93V kUgI+AKEcbGmxsTY1laNRkpAaQvl/aU7wmGXtmaQznkqNG5cNRmXqMHBdBwEvFR2yp3VvdUrqgUo oas7q4UD1V+AJ25r3AO9Tgj63AbZPD4c4ngHj6EvOOq1T9pNZ5wQQhSRvLnZLR3xDLlAh1d6uGMF J7oet0J7D7taPZyr4kY1RUDhWf4DtnKpEdZ97hnmJnKgGdDsa0TkrkHkzCKylbUqqv101zrVT5/D fZ2jXCcpdbq5Vuc/4Dynyid1rexeOaLv94l2SSlUPQWXo10kkj+AbxrVcUmuHymG0MXJhCKi/ieS XXTnjJqHNUPDNBxGJQhHwyUG//JZWziE57YpVFoh3rSX12xh4+fz9J+8IZKrWXJda6x3Ka/55dU7 1tE/5jYMU+UThGboO3gEg+DwkDszdfnqti94J7r0Ze4/jFPmRJwD7AiTZXIThKR6LiRxFhy0xQsh 6d2iTFTPZSKW0Hu5mGPSUq0H3HTAanFH7r9EIbUFafNQN7jjgilCccZQeODjrO8wZ4y5wsY17OZa oKQnpJACSaVvsArFJ6mXv+zzz/OYfshjTlDp6Xyjyi04IWYoRJXyExviPrxPE0vKo//mPxRgE8ik pn04g/4afdv3iv8oOUqP+nVxkvQnA4mmib7ZvocCuwKvk9fp6/5P6cd+45wANSgbjXUrF7ODELPL rSaTxeo3BBXWRiKRzgiLlCcikXjCH6xUmBt9Db7+U1Pf4K/U4xQCdjVNrajRqES/3mvnZetWFzW5 gi7mKre5XHab31tRxutLSboT57PLk+l0WdJfMZjfKPv8lIR8fn+AMhvlcaCJEKjLbKgCtvplfSCO 8wWBgM+fgJHDL0/y+bxNjUywJ7ysojLZkKis1OsNojVh0CSSTU3+QMDf2BCABf9lGkz2JJcnn0ju TaqS8BevS8qWelNyU3J/8kDyC9QNsg9kuz9IeyjbRF+GMzcVfT6RMRFqiktkhzUk4BxDYKr1Zev7 1s+totU96jdFmXUKR2KPWzrsMo+qLPzrXolidzq90iUd8kBQKtRyAUqRnBQhthl5LlqhwNkxhS3j alvoa9dpoLdVwbCehm/P8X17JF5+D2lHYPCIwg8vAxD+GDz9SnwCIPqfcLaWDmtv/00Xdk9v7hlp CwfJ3B95PLGex3/GOe5Rf+ZIWVfwJ3oRKvPgFgt3HPo+JzCUYa9zwD25nmMl1CniFYDiDF0uQ0VK tT63j/2BUT1Ve73U4RX1ZgXISsvhlGUGxsbTBWAC012eKStLZ/xxnah0KakVSkpEwa/z2JQytBtO pw3IHAvwciRc6w+HA35/zAunGxrweW2AJuol1nQiHg8kYjEopC590mtLAPNhG7gUTtJ6nY7i1EqA QhkvewnJyPF6U2ZqpiezPLMp835GnfFUMDjhenl3q6XHuty6yfqFVTRZqdWdHf2j40LdSq7pAGBw boPzHYcKzBoX7Tj5R4p/XGE1vAuYqAYUn9rMPkSSV7HOdymq/RMAMmLZ/3NhJEBwP0uFfIej9D8D wzCvPUzKRbZs6JYCrX6RL/gEhVa/x5YBKNzBAk8yUXQeaxlJlr/7SPjdMEnmlstzwAeeAyncSNz0 mJx/wfQ7N7McchxyfSt9azniOOJW/8HxF+kvljcdb7k+kT6xlHgkj8XucLjEP1j+ZTpqFe7W3mK4 jz2selh7n+GP6j9qNFex61U3aNYaoIS0/5xtUWka1Y2aWm2zYbRUa6l1jHZpUixtqJTilrij0jUG JwFMe6V+S7+1397n2Ova7dY8Znpcut/yS+u99vscT7gecWtmW6c5ul1bpVusNzvuct3h1nRYO+wd jkmu09xzTXOlMyyactdoU4O10T7KdbppktRh0ejVOo1X7dWUm5LWpB1ysZuKGqvJKJISJ5hUc1wn lMa5Kj+EQ3PbcEzqIlu8xD3gab9U2VGgBIMTG3cXUVTG3J2XK96Lundgbnc3OIOdDh28wmFWPTqA VIJr9IDF1Qp3u2/kUpu31eFy+FtdPNJisx6Amg9Nn/JUNZh/83hZb+Hl3wwgRT8lhU32NwNglOE2 caCYHpFLwTTb4ck21hpARLlrCRzW4VSmpIynkr3VUExhzv0KvLZ1LC1FZIjwHBfsRv4VGJh0F3Rz NgbtAqweUGU7LCV1jLuXc722RTznus/Xv5h7kda/uP6z9TM/e2b7d7Tk/mc+YxMeyn2wDV/SKMXp /jnbcn97+CU6IffCe5/m3qIdHLYGQEnmgZJESZZ8IbvgPOQtwSlGq9cSjHvrvR3eXWldypIczH8m Sxd4rvawpCaludlzS1D5ohuXzob52X8vjVUfZ08ziiwWJYG4xRRrjbFYzAWRrDwOjajPU5kFiyi5 K46eMBQMq6f5qQ8uXXTzbxTJppiMNYhBKkakN3E5uItzhiNE9P+M1RyPuUcHWQnHc2hripg6Us0G LZvCYyiu0PGibQYK6L7v69fAcXz82LsTayZ3jp6V+5Yauu+d/MiVuTfogdzqkRj9p/XTrow3eawz pl889kyYAzhOmxWcriCj6Qtyz7r0tVUb6m5L31H3UNkDqfsqNJZzq5fWMl1SSHuTtrQtmyCTqtrr 2htOHTV5dHdsbnxWsrtqeu3MutmN80bNH31W+qzqJXW9jY9X3Vu3rfGZqidr++v6GneN/n3691WR KkMjoP3J0boqTYxnj/RXa2qRyF1pQ1JTni0fVV/WmhqdHT3q1NjE9A2xjcmr0ldXXF21vmFLbEvy 5vTmiluq7mi4nzyQfi39yah/VR2tO9rwr9G+hsZRo8W62iohk4BpiASiERuO5PjPBo6C8M/q158N 74H1slWIO5ug6q6JlzvLhai29OwMXPG7++lheB1kZFd9ZZyrYUOZqsy2jCpzUX084R4DDFcMudzl mmM5fAxwLBGsYyXX6kH+HGa0S/L7+rVSXbrroPtDF+oV1qD0p8+doAiK+07BSISPmHDPL3lCtBnH QyrOgjdXugxRBacQDQFEdTxq4CdI6njUEEC/Bn6CpI5HDfwESR2P0jYg/khUJVDHdKtKYE1yKpKq wq8rEBSBFFbMwGmlMcHqOf5yLLaehMHsxyumN8yZ2RwePdFngOeifVJTQ+rnHdWnLG6xac0u554H PwdyA8Fz+989jt7hGeaQs9LitJr0rpC7wWA2w1HNJq0rp5M+5gifeyj3Ze7r3IPsrJPRnikWkGeB 9VnSSH+Br9jln5NPD4XHpm3QyM6rP7v6gmqhJD26elL1XM+c6tWh1ZmL62+ovz/1SPXLiTeCr4Xe T7yR/TxhhlKluiM4IXxx5prghszPgr8MPpp5PvRC+FDaGNiDo0lafD3s31GIkQLsmBMUIhhKpcPq SDYThcGooSiNZkmgsoIjPSKsWoXGVQ6RNcX1OcHd7FKSZdtkIw5A04BUG/eRBE0AvHau8W2CkWWQ lqEtQjsj2yL7I19ExAjnh01mWaKV0OUzyd00qegzMGwf7l55sPtgN9cEgevk56EUplPxGwAhHhZC FR2yAmQnsZ7/B9lpgk7ZUrRm9gcNod1QKIfzR3akDfWOIPan/roQ3O0+LcAqTgMUVMqAsv/IcRTJ FOTDk6RDHI8rmpXpzB/Kicfufuuau+auvUHmrOiKux5dnvv6w/MHpj18Se5FpstNGkm2/vDTuVvr x971Fa+lzmfrZ3Qua5pxO/jPXeBIbOBIxpN35VRL7WneqbXdtRc5rnWs86z3Xj/qjnG6U0MT2hgH iYfbHhr3hvOQ82tnCc4lHe23uhrgUwjaI5e3jPG4TCoboY2lNVVRoaKOW5XNeneiubnOHG+HXbli Y7IuHm6HaTmpCSvG5cZ4T2B5gAU8E2xxuToRTchty8vXlG8q31r+RLmq3N1x924aPKFemHLwMBhF zj8OW5yHTc5DkDYUBQLXCSg8pOISzY3OWAHK2YfvW5O59t5uCzBuqiy6LA878Cqy6nHPZW6xLPoE CjcXODmLk6ruvXrjfRWn9Z79aNvsrkO/ffcqPq0IaNlzzz1PTeiouv2V+fNfe6xPHOvjq/MmTrF4 Z1y7aWHNGbVBs8+f3LBg84vrq3jTx9z2PP+2e5aNWxKwe/D9nGuufpbLBZuwmzcru/mNcgoGs3pu MINJs4GbNGEjq+c2Mqvb0QAp3h21QPCAKUyDgxzLn5QkM6yUoNzL5ZDkq/T1+l72iSZfq2+qr8e3 Atj0hO99n8b3SZwLdFz7h2OrENMK54KHjVzHJfmRcj2X54sQenynHTZkQdAv2BDNbPM7/N2GFO3F O7mH+PQIj/HpG6kizf2V89L0otx6JYWegUwHPF6G966ikT3wE/iGBPPf9AclHz8g6QWnF7nIe1B9 yPdp8Fv2tfpr7zfB70JaPRPV1KsPXuPdolZbXFzYkYhdsjN7rdtud7n9loI6rpRAE1dOoIgj/pRZ pwhJxnKt0ajT+s0FndvERG1R1wZ9GhRq5eWuhEWXsJiZH3xsJAxl63KsDTPBEN/Dj8TWuD3Qs07V 9miXa9doN8H4664+Se6B2FOUego5xZ51XOD5/yLKjJReUOK8Md8KAdxFzSpc3RTTADcqFlQqUbNy Ph461qLNoFgvDP3jwRWPXwrze6khUJBatjx75fT1SxTZtlABReu47V8s+sPF7FmsmFHHl21o3Mbf nHbPmUqNol/CSkmAUL7zpGmX7MPJMlcVOc01Kd3rv0na7//W9W1a9xB5yM8MijBaKkm1dpxnsvsN dkckxaceBH5FgpGElOhN7MfxjEQ5bO6ptD+SJnrFgc21vITy08vLSyDXlrOSEoH59YyG3fzqU/3+ Wpff73b5wy6nHdqLAPAYuIzD2ATWSJvTiQ9WpRIRdyJsSxiEhD6Cr+8Y9IzA3gv3hUSVq9PV5/rC JYI9GSvrnSxRae+x77ULdpQH8GEw5256FVTa+wcyii/aWfBFO3KoG97tMDYdhu4LjOqwFoPbHCor h3UZ/8YF7fseZ0C5f6ORPFlFWVxmyKhYQO6mrCwtJ1U4LY3PXP6bWnb/BbmuNqfNaLQ56SiX1Vhq df6CXqumV2xz2VBw0aZCKotjtXaDwa4txMccwqcnlzn1gawm3oe1LWNfFvgz2WV3MYdTpcZBKE2Z x6ZOhAxMG2P28sLWybn2ZkwJJ8E4iylPX+5Z7l3uW+6/znGtc59qn+1jh7ZX6jX3Wnqt4suMSg7J KTtkp+hiXmfAHfQHysqdDazBUe2cwCY42pxddJ5jjvM650POF9jzjnfwWooHo1nqhOq53iZJVpvf aLOHoce6Tw7EQrEVMUZiUqwzti+2P6aKbS6LxZJl/nAZMaiVLlqTNqhlJu1e7fvaz7V5IOpmlVar VvkNKjHk4V1s/h4YSevdfr/HDWsLziY5nKHB3L/kOrsohGwqUQzYbThRYoOTasDlhnIPPghMoAGX E3knbJJUCMA6Yrc7WMI5yC6UA64ETJ/Q1gmiJpkIe/i/UMiaMKoTRgMO6tIMwZdnsEO5Mendcs3L bhp0U7ecqnfLdQ117rWVyERjdW45kaxzJ2RTWbCsp2xN2aayrWUvl31epinbwy6BCOIE++104DKH XImASx2yp97k+Fw5sDFnB5MT9VDuXNKvCtmfweNsRMCjRZqV7UEb3WejtoSkwqdbpqo2qV5WiTj1 CqcL0qFo9zngY484DJj9zC0dhHYvPbSSi7WuQ25paKXHdViRcVd2H0SrS/oMmFGkb0gK9tdmnErj 2KGBhg+p60SGVxTwBfc7WUevqPNPQogfOHH+sAJIBtI4uS8BxiwFN7On2FrmcXocHoVWdqHFc9wB jcEBjWmc+JTUdodUbFdU+t3dXWE4bUaFkXQzarXWWq3fqxPeuvqzT66+LMi3OtrEd7Dnlv/3FZ+c 9zulooFXBIXWY/jWZIFxgPIvIlQee0X4r+EyMK0TmLYWmNbOauVbLPV0dLgpWt8uG6Y6pla0NU0z 9Di6K6Y1LTSc7zi/YmHTPRWbmx6MDFoGw4N1g+3PW54PP1/3fPvb5B91n7cebv8nvmrzpRRx4bY1 1NJutrRHpQgOR+CzfjRcV9duscCcXgebUV1NFEcsAjiyQGkNA58twdSksyYsiXACFvpxifYEPv6T GFOdqEnAfeBi2Qc+XafxaMawFPu8jtYl2ttbm5pao9GKimQ7Z80trW0qKUGpymBQ+f0GuLGB/yiT zSZVpaoVcNWjUqk8HTUJHCoq25k8248n8XbdVODccr/gd4/fQxOKS5u98LES95QjLpBaN2LO87mn HHRBc1DQK7uRUxqVOjcKqC9UcqME90VUmMXDnGMcjjgAcpExIHGjksSNShI3Kkk4V9AqlRodiAy2 YVGQqxo5ZOKKXcSSf30A10Dz9PoALlNSXIn0Y7j0F8q4ntf3j7yFCX/Kfq3cpzb/pWwtxQcPTNBq mlV2HkGHxHVLshVVYRca23kkueAloNwfaQ3an0JqLoVMNyyqKqqkruNK62Fm7HsVDVBrF6F2WK74 QQW7g24KcZDNfcXja3P35x6+Vikf4a4ptXRD7joFxj/kEL2AjqfjFvDcId4nxGYPDXH2jptn6LO5 cYV8qUMNwvjRMJznuum9w3kA55mA+XMA8zX0Lm5g+2gAn2jAIc6P5Hpo2J6MUG1UW+OOumuWRpfW qOdaFjh6/HPDoiZ8VuTnkfsj4j/D30Thm6iN2sPuKL6HwGm3Hgwy/xqCX1vwdzEed3YJR9LV6DEg VdCKQfYbWV9TUVFd40/XFA2xerDSBacDt5V/RcrB+xx3kk/F+N1rk+loMhmL+lPRSIRKETMR3Nqa qLU6kY4l0qlQIuUJWyyKHzyY8GiiEy5Sg2zvTlD1hBmu+3tlUzhBLFMtm7jzX+3J/CEORnGFF3gK haUomEtgHwHkwgo5LNGcRBr5xxdOEMbvf4rh5CbOOf7nngpY4tOjk/vcIIv8i0wDxGV2FR1wVwK+ fsjp/9+wdPNxxt8dfCe3qYbDyEc8mo5vSNeecRxuapiUG38cbp5mFcPgkUvSvwznOSfyBjxOcoAV 7IzyqEsEalmoXWjvdazQrdSvcKgHhY/ZxyZBwxBMQcFpKmOVQhPDf9khrBEuMl0orWfXCaYCB6DX zipu+AU/phRkp8JZCMnEBLOoCpQamQWiE9WY5FC9SfYjuH11pgTMK5fKUXeB51+Ob+t4vOaEoS1E 6VR8j3kN/YKK1O3Bqhb8CCGpcpIFrSffGrGsBaUmP0daZPiVzz2MKCg7l/34/mTKf7WdlfK14L5o FNRjp8A/hAKl998GiulT0GMxwRTkh3S5xiqME/DHz6GacQ7VPmx4FXLH3mKPDL3CjazsjaFZ7Go+ w5cKz5T8ky8InXzRsXFaGud5HIhtyQ0Jt+BcrZlMkBOwE39FSI0eEudX2Cs0eh0+CUZoTCvpqnSd OkHntix++GQHHO6tN+JwPt7suMQ4rKT9f5V9CXgUVbp2napeq/fu6u70ku6qXpJ0ts7SgUCHpCAQ 3FhEEBDiwiaL3gDCOIpX4u9cxXEDERWXa+51uyMYMAHZdOAqIg6OOCM66jhD5Edn7gyOOD/D+Itp /vec6g5JZvR5/vCkqru6STp1zved73u/730Pv+Ed5mD6NBhW99C3++kn0v+JfkKMOmnK9fMPs8/Q rMrDP4PT4jaLCdKC2VH47d/Ru03bNYf/bv1AAlToNuFbjtDfTeRcHz1v04+lHSffsi4n/ESuH/qD uTgqNLYdxjnEokunNUWgIW1Auk3nnqH/W9ceDQT6jw5MWJ5bj/z1SqGTKwP1ap56+YvGZ6MvVgsl xmQ0q1vluTn4o1Cn9G/Bh6RNwS3GLunZYHd6p/FV+8vSjuCeyBH7mVqvCKnjciI87no4yK+p/mn1 E9Uv2rdUv1n7Qe3ntaYyoF7dajCZVpLJmBIrcxd7/KkRCjciRYR6q7kSZK8+9SqyrowT6xXBYlYo ILscfbGprNVaJj3pVIqN9AUbJ8sKeGItDoWklRZlinKN8rSyTdmvHFdMSrDR/2CNYqCvdxieNuw3 HDfoDIGR5fsGoNx2UjGp/ws6y0HJ0W490FxG74TAHO3ZZBzgATwGFIAh6BrryqR+h/IB9nNGJPeZ 86e5BnwHzp/pdZuqTYjK8IVSCXVRlDog4a37uAje4jl/gL4CWKddaUAZpUDjzFPC2AVIwgHABfcr v+4JtIMGhSmWF48UZu1679EX+34zet2Uzs55L8tmp1+0z39y6tM9y6kVvJn9ycW7rp9888ob982/ 5fHNHbe+4nCum7BolIguTtERLH9qfj+KuUDS/tPlnJKddtnimdfQSkAVxn4mZm2YKyOJl2nC0q1a nGmWrMRsYR997gmkvYGAzxsLR4wCscgl1nZIU83fWaKYZQUx03y1XAjD5xnNlmLFgTvPG4Ll8emc VfZKlFblkDqk4xKcQerqBwYPBx0E1stFiyxozKDBONaQwMkiytujdIzvBRvYYFjzg6FOX2omNZaa xMSyK8sWlP0s9lxiF9ljeTXySulB/RHTMd2nppP6P5lcPl0tqdOPsbSSKZaLI1eSGfp2Y7tlAVmk v8Gyml8jroncEr0nsjf6Wmxn0ocI53SPxVkGTPTlCGu0ZZ1hs6E3AfgcdS9QOLyFOKVgsYgyB8i3 pPyx3+wmhtzfd366kYXX+b70f//koYc+od8Qynv/UO5vrx/MnT70HI1FdM3Ul3x3+Onf/e5pfMOy aQ/epbDMcu70TkUEAI1y31m1Eg/e8n6a/Li0L9qn/Dn5p1JjwlvqGy9PSk4qnSG3J68qXepYGliS vCdgRT3xr+pNHmm250rvsuSi0rNBvQF9EN4gGtTdyeBPnU84HynaFHzO+xzeGwdo5AhIIUK5NoGw X0NEuXUuJWW09OoM4f/0K3GLPWua3RUl66MHonw0WCkpSPLMLV0lhLZ+rUfrV6Di4KBxhrWx7mjQ nigPDjpC+IcBphIQFPr0oxcatoYnGFSKEtH2O6zkBTINY09qzct5S2BGAvYzipENGRQzhDepO0ST MRg0hm0P73v9wxfnHZnmhT7QwmcOH8mdI5Yj/y3YwtRKfh4N+kMTO//06DPHLpoq+V0V45YR4a0j BKpxPHc77vYW2EIE9/uzVy4uX1yODRGoAbDGtzQLuWKmCMC6btUZSvtDoSJ/LCL6YmXmdhFm0Fum 4H7DHOSYIkU4q0UyIleGFpJZ7qR7XxASrEwqnQADdpP7eivKOzVjcJ5dwRZf0MJoqwk1BdppAqml k2eoHXyPETBYTdOmpB6p1449laiLuXR7wS72QJPtVI8slVIgsgQxa9yUCAz4qIElLs78kQbY1PkL U3mwTICO11zMQ5+t/NUtt/zqpk8fYc+Xf7TpkY8+emTTR7o/nLuR+pYXDt/Sd/OPj996mHyizeSu Tz/tojOZZ738aczkAMrp76lLRN9mL1/Hj+OnYe+HQ/whzy8Cn7g/CXwa+t9Fn0e/9dkC4fJwhm+M XBK6LDo3dFW0I3RD9PbQfaHN4c2RXXrHat/e8EHhoPvt8NsRg+lNV1CWsQK7ihW/Uae4LNbpwWwX R5bDgnaTz1V/TM6SbJdEOqT90lG4Ih0018q3XnBFKyYh66KAAevdp0sCjW/BuB50M3t8Erg4p3eE pGgElfRTA64ejXVEof2hQ+hd2szkjNSFG4y6qu/+y/f5z65+d6zHDuZtzd/u+Ch3nDgOv0vEmYEP Nm48FiRPPfNWc70j4HI562aS0Nu74Dn+zx33dm+9HzMIuxxwuqswMzPcETWpWqfqO/V3Wu+o7bL2 WHdUvF5xrEL0o+3NetjpjJkz1ZDkQPqgg4QnuAAm/W6iqkFCYqZEWYxLtqeUYo5zy4HqqiKD2SRC YuU+ELbRzCMHj7KpuUm1pb2qd7n3Pa/OG2hYvYe8k++/ncQoP00QUKRQYhMNEvuZoAtWysFRDEg/ hQusB9deXhHCgFZGuYpQKgq6IoHy1PfyTEbUgygNGx8oczCf6s3DwXyasD6W/g4azBx5hR5f2frA zXfXQxHD5Hl08b/cTO6hFwVb/8RCtM7vofNx7dInfSaf2+0X/DdMWKvFbTz3r7nbdbdjZpZCsyKi 1k6Qlkv8p8r7yVPKyeQ55UzCsCx1Y9X89Pz6W223pVbU35fqrH8qtaF+S6qrfm/EzpuoN5hHO2PT Zr3eZI7xXKSitkh2+mWMpT2ysVaRRagYbywxAoqAGjIpK5aJLIpOkK+2mwWHmQLx28xHge4FG6qV zvj6eFd8e1y3P3403hc/HdfFA5ny64ZMVhbE0D5GOAwaQLacpC6VhrGMMTDIYzAnMWgW70NB4gwX RBW+3IQc/ZueCFps8azSVENPKStK89/0VPnQ7V8oBeYnOo1cSEMhI3dJRjvUf7UwBrpgI0c0UC8C FTfQ2ge7DuEObe1LFC2fO4mxq76+5OZS390fvHTu3Esf3H3k/vt/8Yv77z/CH36ceYw908dVXl2G 2LSIXHZx+djv9hCycyfhcpc+/M4vNz78y1/CFmbAFm6ELTSSlWrV5uA5mdcRL1lgWG1YTx7mu8iz /HbSy4vPGZ437tDvNB4yfmQ8HjQGTS7Am/DbDikq8dJcFKr9RTFXCvwgBDyVc2sqK9M1sZQTFRbq 70FXn8uKLDGnFr9aknPz8Wsj0uRuNd6Qrm1oqKuNNRJKmtSlysow3I2czugUTWY5cLyIYJ14RrWM 5hS5dn/NUXDFdpM/946amB9Kmm2xJBrHvMtntV7X9zp8pMYXlgKaKF94NuQJXio0KBCQCCEuhVim rwfkZCTIs5lBOoMhvdGQDOnRBxY0hjWThE1iphRqxHs4w/kzO2VrVNKiH2RrNADS1LYuxKgFEMdF Ix/0GRRi14Hr+TlCpk3dOGfePXOvRvIRzX1F1+Kr71w9d2z6hsHEO2bZiIvOzZw44cEp/X8fsF9h zq1V8s39pwoXtFAJ68prmA0+6FgIiGDXquWxQF1ADUwLzA+sCvwkYPTYnLMkKWYzWM2z9PqY1RcO bPIijhXe5HeTh18JG2xWkcN+RLQsxiMNset0gJunAFwOFF++9kKOiHoYa/5rOQsLG5IqXvBzMA9v vMFTyBcLuVdhPeXX37aWXEL/7v4i6p7IJX+jnZd618cf5y7/jhW5aQwIT4VYhkYjO3K3C43sLyvm nlYrnGhhR8uAMMcxO4zoLrzK0cl1kk6+U9jksE82PWh62rQlvDesD5tCtLQfhjXrLabd5KVXdLqY RfuDVbvFEJwekN0eu28jQIPd5BrVBbE8IRK12uTi4imolAQie8lO8qu8x2elQAQh6YFya//JlrP9 +ZuABRLhGtQD2V8+8BcPptHqoRnIH7/tjpyNNh3yE2fNGjM99zd2A8zLfkL/+v7vmOXPX7a+KsoM /77rYeX7Ma4bYeWoAewB6e1AL/peUpQTC9UjelanQDv1es/zHv5ghpRL5cnqVHmmrGFUoiU5JtWS WSotjVsWeUjcM8LDV0hTUh8nP86cSp7KnEuey5hGJ0dnliaWNmyRtsQNCTBusfMV8wMDPjxMk9Yd 2Akzit6IA73oq6Nn1YnIOzo3Ho3G4rEwmtbqmbeoqWnL1NTUZ2JVmQaXhf0ge1q02y1izEX7q5FB ac3VRZtZd3UsJHkqS+j1ianU3GQqVZKMVSYTyURCbshIIO/FsWmNR+bi0A2Nc56GhKSPk1g2HPZm Q4aSbGV9tqqqspK3ZN0uzpQlvCjRFNrcgcLb48nEjIa9pItL4opteaYzw8uZmsy1GSFDvVHxSIjR uLH6LDd3mnmnWTbX4AFdhwzmwIh95Cl03BcRlE8K/Sis95nye6FmoeF9hfoIXWsKlG3wIHQMqd6D PPdYL6gQaE881gs2BDsDh2Zn4ND03HOBFkEoLwIKZVonddEg6O/rf6g/DvFxeHIBJhz+XmQP6eH+ cQhBwoOeyWAiQ/cb7XW4qL5NXw/OFJ+Gf0TV5UIEHUcELZmSVOA4c/4sXQsLXEsAAcg/pyL03sPF 0deZDGRk9jLt1KWQNymY/gB5oH6AXVGoeQ/DvuuBfb86KFl8kyysYLZio47juhx0ca6jj3Kn6dVs 7lHyo9xPB6WO35JK6j6oQeX+kptd8JbYzZDQ/SfQNfMHcBDa1cw8703eO70IPqyzaMyIKHEWjRDd Rd5NLheqMQgMOSK7nGDb7ncKzkBgsDek0d8PeMHv9YAbhvq/v1L/V0gdLvwRNN714rPuR0zWxper TY6Rjkb7KMdoR5NjjEN1tDommN0l1hHWHaGeSl0pGUH4GeF5xnnhVcZVYf0IY114gnFCeIZRX2Ma OYbZ5/HRZHRb8+jRY5pjI72A3rvViOwmU93vuftAbddxbqdbBcjdZne7HfaYNwmiHwIFLuYEj6It EotFI7HkCJCj6MV6Zz1f35aur69Jx0a0qfTiwuOtpLWtpbVVbYlVpQ2RkuqqsuKwgRjLR6pZrs1Q rghBxWwWjCCQJZNe0WaXUfiMNtT4OlHr/K6kOCKXltDnJZ3Qrv+umUvLLc0UyOKa9zcfxZbUgYnl L2lrkQZcwRJpK1j+hNGgRX0t+kPxsoC/g932fbSEIaY01FJASh3+aiGYMFAvzIKJ4UFFPqqQy1JF EGDX6S3JlK40SvSGgOjHNoP68igpsgK0pQB9BRU5Y/J47e0IN0J5DAc0Z/H8Xzgdvo3nP0Hs8Ql2 PX+/EHsSTTMP/Za9vmAz00bAGWHNgR6cmd2Sdo+XAgN+tB1QTcdCIBJnkcmFwER7PihSGY7h/HHZ DWPnKY03jZ4zYiLTfHhicn31orFt1OKemFJbVTmmlV0+QS9o7xDmzbhpQlvbhOxlV/XvpEbHP6pO n7CwH4JbeLyhdWZxaoH2hE5zLRnBLL8Bs3wmZnkjuVsd+YHhAxN/0HDQxD9j6jH0mIQVxk4jP9+4 wLQgJDwRes7Ar4n2kh28EI4ujaIlBLSXCOyVzUqHN4rGoTbWOBRzD49ptSXJzkGhsy2/KmkxrZNL OpP8sMDW1tCmBbZ12UYD2Uv6OBmIhqdY0RkR47oBJppFOXgcJX+6oDhZeLu+pgvhbYDGtmzloMAe ZqcWM7HJCQmkli8HpuPwGTYokh06G4e/sTAVvy+ulUJhaKJiQ2neAOnYKAmZwBai6SYldl6YbD3o IEAb4MshiTpsjvbso3cfkjnEq82eQdOnwP9iyN73h7czZz0w+9opjXPY1PiM+ui2/3XjFbeuGBzd steEeWtnj09F7r24/6uCe+aF2Wta/63/64HnLFulMeAGIFJNmCHYmYVcpDa6fTofFEqFt8nblg/4 3+p/Z/zAYlhmXOLiF/ILdUtMS8SlthtcCz2L/CavIjgUM+B0o1VBhgctkUALO6NSS8+qzduwnSNO cBuuRfC7m79bLXIDP8fbDCre0wEI/aihz3DaoMf+LSd6i+CCCupWWNzQFr0Ct7WCArc0EmBQSUEs Zx9Uzc9gQ5QzO5ySXfLvPX8CYcGJXlvEFWEGzW46ZdlqDdEWHyXLoHE4RNW1ziJYirRYJBxMIg5G esD1U2oxIj6jhFZcMI/dLT7J5W+W6MEj0ULzbnQRu/FAFBGsmeiBFZoI3d13yNdsQrHbAj7DhlXD FXVNuS8Bxv6FuA++TjwzPuvq+ox+k20HcqeJa/8BbDVx+r///ffHn3qy7zjGpgq4AbVeqoBapbbU io5RpfhuqLocciTttgUEY2JYZltF1pSvrLa8YTggfmz82PxJ6ce1Xxg+h4g8NgddY7xP2CxsxW6m 4C4hDQ2ki6GaWBzzaauUxX14yJI0NpbOr0YQU0s7st5wFt1j9rRiEVMK2agzctFs0lCiOEzEFKyv 5OxyxFE8hXUr6IoDdYPBd2qhjNjEdrVoYgDCP8MPhhjgsCdszAuRUk+ZtYbmHVWspdgmEzrqted/ 93JpfGDM2Yhj0mhWRptYKYhecNT/kDEOGhpSfunW1bf9+qZc/2uf3afV4Rj8k4fUn3r/sc3Hjm1+ 9Jgwb/OcuauOrtyZO78rZ6D2RMtcuiwLiJZsOPre+g3vHcXYdWLsXsTYxaEncRnVYj3b4xiFtOKs 2ugY1c29EOpOCtO4a4ILuH8JLlWwf27wR9V3cvcH76reXPJk5aPVPyvZWvl8tevZOHkitUXekhK0 /EHDifMwkOabLd7DebesueFp1A0XkgMuWFpVlHXTQN5epYShKwGEqBRYUQwCkQFzQO4UiUPsE0+j aBmsLVeo6F1XdHtUdzTaFz0dFaKBmgKIzAL2As5OyY4AFYAKUdYya24aCiT/sJcdOrBBTfQqjUA4 KVVSkd4yqQKCvC+nho2shtoPIET5BwPDCngIRpcYBg9tfZP6yuUMT85B8AGQ3r0nXs31E+Hnffce e+yxY/Sbf3szHcFz4KVpI0q+3QVg6JXzuUs3HD26YcN772E13YLV9CrhZnh7ryrdZieV5iniUvct 7nvcjxie8hhZRqdaoofz2VvIu5fvRrKjquZ8UkalQbrVKWWTmS5IrMJil9imoXqjDVuWSnanmEhm uQqD2OLEYohcjKZkIdFhPI3NaoJVnCQnHPGpcQ3AOx03xAOV/Q9cWBAh3U9bMCdpiRNGhckB0nHR Ijbo1XwPoDPM7n5wEcQq58qHVDs9kt3nDmtLHOhGbG3TOseZphVw6WGh+kCiwvPPPjPh0jsCHtHu iWcCI5/YT1bRceq/kWbxRxiBUJh37OEZC4MeoCzx4KwtuQwbHEjG8K/SwcKIHD1/XMjBysaTr9V1 Ukt4LO++DIIHS8ZvlbeO/I/Gdzxvj/u950Pfh82/Hfdnz8nMH8d95zmT+Wac2+Ix+PTN5nFRj9fn bQ6Nuze2KbPPYZnpuapxSePS7K2Nt2fvabwn+5zUI4kPZHdG+ctNFWBl1KpjmjLo6bcbvdZRXAZN /brqEQ67VRDR1x/IjhkDXYxW1Gkadggybawhj6jhkhGKwmWNM0YpUyK0tV9Aa3/t9Hg25VVUukr6 sB6qsztSBL39rUbBUCIqlqvzdRuK2rF9GdonnSEVlBdEcVnW6U/HmLE40ORFdQRYsSuvyc3qXqh5 MSCuceQ4txxOepL+Zm+Uy4ZGRclIGQf3ODz1tRRFOfRPjRld3IRYJphtaoyOiHLSWBcLpWlghWga B5pt4ovFOIXR35GVMmL41fN/4PyQDxoPs22WQL861RvzNdE5oX0x5boVlKm4h2vEGmtG2pGVcGik K24ROr2yEg7j6RI7XsKiOl4CBBKmPwd3hr5pFw0sJHrQPgQ9UrIg4yRQSTXE15SPoFWyKXlhANen jcEIr/KFvgHp9dKSBGsfRmHvNi2bpXW9xml33z8521Zz17bx113z7ltvrTV5bYzAEPDHN3c823X5 tNxb6y47trFbqCjGTF0fCfoCTaWNoyoamsrCDk9R/LaLlr2wMCbZg5GXMIm91dGallvHT06n5czi phvW0qzzIURbWfTtVHJvq4lzIWILBUP8s+JO8XXxffGkqP+R/S77Jvvz9kOWDy0Gv4nue9CNjtSV qtek0xlN6LKSzF4otbvckj5gTe0mz6iuSDaRMGYJ4QxWJWCR1kF++GeqVFkJjLhEOcSFnWEZ/Ib9 wO1285/3VtFED5PoJJwDIuiClBSln2uFUkoVGeImtPpKMCRaLEFzlBND1ij0TGh9hZWrsVeW1l0P nsPwElWhBb9Qb/F5Ee4zJYNc4+oVMw6NlGzYK0D++4qN3azV/gk6GMI8atz9v7p4Xr1so/veKJN+ uppP04tMW43exzm4j7OFeVwpPLFV1O308WU+EkSBigU51rTJajWbYg6tkGoJTc4XUksV+jokLUmi TU4kFDlWSnwOSVayXKnoL8pCU8BhMmch4CKhHQQVP86P9oRnVHPK6ZJNRyEWQwH2suEAO24kLTsz jiaMJd/YNKSu+gPLYQFLB7FcpUi6PARGd3uo3rdH54pyboOk3XnNDD15J/waROxPIR4+gY7ME7A5 2hzCGkCo2O9A6knHZuSFp/mlU7hr6+E16hUMFH9z8eRfbmHD8BVLI9Y82TprNR9hg3H/tKWvag81 HJmOQRar4UMYgzgg3totZIt7q0eQRdkiW2WbbJcdMjK3LGl0j/Ys4q93LZGWxLfhTS963GqUUDmu btWLdiKnLW0TbJOZLFcMwr3aIoq/FsDoBRiUam6haGIwzGWiW4CToItPL7UUOZioxOQB2NMF1oPs hvgxvuMch10pJI8HaCc2xMwDnCFnVhSyotkQzwLWXKpaPHw27WpxbXMJ2BxzKechZhXq1KTG3eHu AoSjc79GtmHOJImiQZdIPFd8wTgPGPZCXzdt6/5BusPw5u1h8OPwl+lzrRuxXeM7UCc2AOoxrsPg K/z2B3IvXEmjG5Klx3tJJkmqmbYqaaIVkRmCjQ4lG86JGkBAH9ORbDx/XvcwRrJMqFSfK/OV+u8S XvQ9h2LWHt8Ov4njnfxa34O+bb6f+477cj5TF7+dP8oLJp3JC6KIt4xP6cq8pf5GXaP3It1F3pm6 mdIs76zArLJFZJlusfd6//WB68vW6H7sfcz3iP95fovuv7xd/p38Pt1u73b/rsCusrd9b/l/6zvm /x/fSX+FxRfyQRDEV+G/O3B32VbfPt8h/SHpU98fyR/93/DnfN/4XVoPEcgzhSYijfHQrVYuTxAO rAc1IZymj7pAehCWJzoTPKVAgJG9mfEfYnn+Q7eauobRk4BSRlEkFb4yk22MCoELxGzezDojY3kq RLfqKi5OMx5EDDyITYwHcf4Sta7Ag0AvUp4HIQ/iQciDeBByngexH5iHn6zCbOrD7fcCSI/ruOng REzXiaVZJZiVPVmbIWtVZNlmsxo6UOl7I4Bayn1qCbcxoNaA/1BWAf5DEvwHtTiCQyCIAwDmQFa9 FhoY+8gLyEH85F4QIGbwau2oDE/fx9P38arTlUFx6gXVppevRUPkG5Juo5QF/f9AT00DPfU2jsqw pxXaU/wadhk/gZ3x/9kZP4yeVbfPn9Gr3oa1IErwlC/BgytxgksNspiz7dBByX99STkR7ZQyga9+ RphoLxAmKs6AP3GynSvSIEca5bBoFmQ8dKvQzVr/PykTw6wsDQhmxT/wjP7ZxTxvooA47CwzBUw6 yorIBzRkpWIUhNICJaKQlAymRBSuCesW79m9uDtF7fIP9LBsU++C3Q8upej0FzToLSN8GG0Ogyx0 ES/1n+JZxbpgpQvhb5fCSlv5h9RNUVfUzbsbXTNdfIhiLNHYteRGd4fSEb+29Q3yhvNd97vKO/F3 6l7PvN7qgJYn91hM+Gf0B0Z5kDXKA6NCyBoVgkc7iyMLR+nJurNKVs4Ga7N12UQ2ni0fl23NNmQz 2axaoDuUgu/QMluf2U2qd8itj6MfFzM6RGkPiuID9YHDNgigPjzu0HdgaoDwgNd744+XYlctvE95 vHS2ozidhxH0ID2IYlAsN2QNX+wlRtgIBM8HBcInKfkBclpDGBDtlOqAb8Qu4EBgBgW/LII0f57/ kD8HuaILxIcLj+j+WXlCwy+GERq29mqEhrO97jglHpzoBW6F8+97Qk3N2mweRIlQ484RlERROUCi EPHfnBHKXIgg4HXGBv4X5Lr+9SClQWiZ1k5Xkc2RqQejoQdnhLm0RsT0NvMMiRPYMsGCLSGBSuFd J9RL8MAl+vzNLiyZza1jQfIn9NA6Evx+Qg+tI8HvJ/TQSlukUW52tChisdycceBQJwVCzdhLxEtp FKeoZAf+KnbGzgsHe50SRb4PqjY8iDfhoNBDPgfIWzE7aRE5DcZJnUYZLiTjw8pOlHKhUfbqC1Yx jHKBjV67yB0lkPiM5v5KjeLe3J7cPraA5b6KBB2eEnJH7sWEB69/TtezBSREihdQE/qcvpogb+Ye NPoQsFMAnIzKvaVhnVAFRWJ6kYm9gvUu9xVxaeug1Qe9RG4TcJrHYFV15FUEE1yRuyhWYVP8aBp3 TbGp/nOe/xuzmLE/1iWxxWSx68eeH8fWedbF9rhe8+yNHYr9JmbHAuquc7vqPFpME7HZ0gPBTCgW 6cRWb5tjEaBqoVicci66d1TXsNzQnyddxCrqPGatCVCv36y1AJohVgiGKJYcfw1Il2kmWRQLeuoo 86JbvbG0NM2oFzFQLzx1ECxn2hQut1vmgD26PRypwwtubCBgiujd2OU9lg2FpGwwCIvmaeiTyJbX ZqFWbeciUyP88khf5DTNTDNT9SC8OfWyfrm+T39ab9AH6sv3Ehr3sD1UT7avAMawYgBkGBT85Dst IVrFNKsoTYjuCfUDRdThEc8wVz3wMkyaOL9uTzuHV2SNJmeTiW4/sKJdyZMwkGnkub7/ML0KSlb5 GarwN+RuDUSCNq+PcXZWkJlkGguEwehxStX9p+6krjrHqOrECN/sxrYVLHyawr+sTSFMrguIEY2k vkSP8l8wm/zc/6gidgiHCZrsIv8admyzoUNS5HQYPYsxzSSpYqKPhcHjPWmHB7uTxXx2wrt52WYH W9UOKqSd+Gy8ldgdMufH9l0ytp8l7bqsQ2wROyheF/C1d9DtlotW5/ECCtFNyvc7U+K6lonku2BH ARGAq6O0iT0cr5G30GZ4gJK32Bm+DuePeuCvqHEzXakhdIwhT3DbaYJPAIYRJZ9gG0G2GNjzS/iw /16+kfVb9HP8yv6zWnJ3af+YVfTGHr6Uf30lffAW2BWU2bABlWMbp+zBParH9jkcyXAJoylgzzMp gCfTZBW/Nr+XuaafB+VRzdA9Rbrub++mP1B/C9wHHY19ZDv2aD4O/PwW9ZKkqcScigizi5c6H3Pu SehMASKiduPUC77ikNVkEKNWJVpcPEc0SaJo4n6tzDF0e35tnRPqEIhD6BB4IVjqC5QM7PAMK8Cm OWfOQJMF+59hqlNRR9xiHFnLMT4oK9Nr05EiFAygMGqIBDa2ZKVE2tWJh8KfnUXdF1fNnTEqW1Qc jI8phl/3B8ctrk1NbVlYWzRxarHEP1nkjP9H/dQRMac0URH9LqcyraV0VHvxoqQVsR77AkNjOh4Q 7dmg4xV4LEBgyoQpaOGsnJ1zgKnu4twcYEfUwn2YsUXonA1i76AwdPwjHHpDuATuXAm6FstAey3n KoBaVEGZLY2CTi125qtHr2gDN4IbyWHfaQ65HteEvX6aOZUbx43nJnBt3ERspXMxdwl3KXcZN4mb DHGAqdzl3DTuCnzKGdyV2LNjFsC6q7g53FyuHcIB17HPDiIN++QGWqO/csLEiy8aV9HasXrlkoUr Jy+8eeoVk6Zz/w/8Ae6ACmVuZHN0cmVhbQplbmRvYmoKODMgMCBvYmoKMjc3NzMKZW5kb2JqCjkg MCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvQVFCTEJG K0NvdXJpZXJOZXdQUy1Cb2xkTVQgL0ZvbnREZXNjcmlwdG9yCjg0IDAgUiAvRW5jb2RpbmcgL01h Y1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTIyIC9XaWR0aHMgWyA2MDAK MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNjAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMAowIDAgMCAwIDAgMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgMCAwIDAg NjAwIDAgNjAwIDAgNjAwIDYwMCA2MDAgNjAwIDAgNjAwCjYwMCA2MDAgNjAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDYwMAo2MDAg NjAwIDYwMCA2MDAgNjAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgMCA2MDAgNjAwIF0gPj4K ZW5kb2JqCjg0IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0FRQkxC RitDb3VyaWVyTmV3UFMtQm9sZE1UIC9GbGFncyAzMyAvRm9udEJCb3gKWy0xOTIgLTcxMCA3MDIg MTIyMl0gL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA4MzMgL0Rlc2NlbnQgLTMwMCAvQ2FwSGVpZ2h0 IDU5MgovU3RlbVYgMCAvWEhlaWdodCA0NDMgL0F2Z1dpZHRoIDYwMCAvTWF4V2lkdGggNjAwIC9G b250RmlsZTIgODUgMCBSID4+CmVuZG9iago4NSAwIG9iago8PCAvTGVuZ3RoIDg2IDAgUiAvTGVu Z3RoMSAzNjk3MiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGsfXlgG8X1/8yubutY ybIu25JWl21JtmRbdmLHttZxHCcOiU1uA8ZOyMERcC4S7phyBEJpzH2VJrTlKi0odghOgCZtaQu0 KWmhEEpbhzYFWnATaBIKiaXfZ1aykwC/7+/7x0/ym2tn583OvPfmzZu38vq1Vy4netJPeCJddPmS 1UT+hJ5C9LuLNqz3ZvO2VYRojCtWr7w8m3dfR4i6a+Wqq1dk8yWHCVn5u4uXL1mWzZNTiGsvRkE2 TxOIAxdfvv6qbD54EPGBVX0X5a6XsPJLL19yVQ4/+TPy3iuWXL48W39AQhxd3bdufTa/dSfib69e uzxXny4mpMCSvXZGSJFOkM9IA7mZKAlHBBIjXXiSVco3iQJ5dl1JCPeTDxb0mBqOa7Qa+eYfLOhr Zolf5u2+KL3xy3OVj2p/ibpauT67gPtUT489RIhif3pjJq58dOIKu8o+iR2LPM2NCkpigDiAl1NJ pDoAPYBewBuAEcARgIZ4EbK6WwHbAOyKknj4DIkB4gCeJBH2AEYmcluR2gbYDjgKUBKJTw/lGas8 zW18GremyWrANoACt57OHZFLtuaubUfME5NCiWeJIUwCtgKOABTEy59CucCfJH2A7cgdAijQ+pfo EoOTpANxrwwnEZ8ie1F2AHAUoMvs4/87dO68KtLcwH+Bhr5AL78gnYDVgH5ACnAIgHFAGOPH8MRf oOExuVYv0gOAvcjvQ3wAwGrnoR1WYwwox8hzANbOeC1W4yhAC/RfDE65v2q3nDCY5cTxofqGqgPN Vv44nm1ADk0IY4AkoAOwFfAcQAU0xwa1evm+Y4N19VXN7JGOgbSqM/2I5yFGfujcuRh3NwqSgA4A u3gAoES7x9DJY8B0DI9wDKNnQrgVsA1whJWgic8Ga+tlLJ8Nzplf1TyHFZG35NY/I2/m4l25+Pu5 +NZcfEsuviIXX5yLF+bibC8/I025fGMuZk/B8FTl4spcHMzFvlzszcUeOf50cF71QHMZ/ymGr5f/ J2byn3jcf4KMOhGeWTKA/HZACrAPcACgJQMKBaGZfQjRL/5zbhFZQDzox1G53UL+qNzuR2j3I7T7 kdzuR2j3dMkA0tsBKcA+wAH+o0Gtxdss8TeDem7GpN2MvtyMoe7lH0Y7D6OdhzEBD6OEIBQAXkAc IAE6ASpceQdX3oGAOMS/Cfp5EymCUAB4AXGABFCeleP5X3A9ZBn49Ydc9+AyTwxkMAgyGAQZDKLv h/i30NZbcltvoa23cPdbaOsttPWW3NbpHM+fN8gv8wzzPx9sYdHPhsRlHlNzJd+C5ltASS14oBY8 hJefikHah/AQgANFTcXVqWhyKmpMxSNPJUq+jY+QEO5s4BaSGsRTkGdxPR+V47pcPJmPDNYAj4+P o5U4aDPOZAJfglwJciVyLoBcALkA4fk4wgBaKkFcjTjA+1kek+gdzHfKdOwdFIO5REVV1cu8yC0g U+Qq4lBrW1Vvcx5fhH4WofclfCF5B8Dh/sLByir5tsLB6W25BORHs5m3c6tkXAXcceIBTiviMsT5 udgz6J7q2U2bucWYBdJcyOsx2noMlR6jrcfQ6DHPegyPHmix9AEGANsBKcA+wAFeP2S0WKRh7rXB QPW2Pdyr5Aj3qrSA84p0m/KIktumOKLgtvFHeG4bd4Tj9qr2qjmPKqnqUfWptqqUHnVS3aPuU29V K5Ncku/gOniF1+31eUu8UW+bUnALouATSoSo0Kbqab6EuwyT2MP9mVDuz1wfFiEP6efeQ5mXexdh HKEE4EgvwtVyqh/hgJzajjAlp/YhzN7DrmK5QyjJKVbzAOAQgJfLWQnHvcutkrF5uYPAchC1DxKe O8g9JZcK3DvoAeMDFsYBEqAToODe4R6W6zzFvU2GAQcBPPc2dxkYy8P9cTBh8jSPcX/kFsr533K/ 5X6D7+v4vobvqxhQkwyvy0/1GtnHvUYyAKxwKO8FrAYMAPYBlBid1/Fs27nfIowhlAC9AFb/dbIV sBeAVRa1Y0gl5bZ6EFKyibuOXMPtAKZN3FWAqwHXAK4FA23i1gOuBGwAbJRLViO1BrAWsE4uWYXU 5YArAH1yycVIXQK4FHAZSvqAY7mMow84+oCjDzj6ZBx9wNEHHH3A0Sfj6ONWI7UGsBbAcPSBqPuA ow84+mQcfdzFSF0CuBTAcLQDB0V4FeBqwDUA9gztaL8d7bej/Xa5/Xa0347229F+u9x+O9pvR/vt aL9dbr8d7bej/Xa03y63Xy+3X4/269F+Pdqvl9uvR/v1aL8e7dfL7dej/Xq0X4/26+X269F+Pdqv R/v1XN8ORX1zBgjqgaAeCOplBDEZQQwIYkAQA4KYjCAGBDEgiAFBTEYQA4IYEMSAICYjiAFBDAhi QBCTHyCG9mNoP4b2Y3L7I3L7I2h/BO2PoP0Ruf0RtD+C9kfQ/ojc/gjaH0H7I2h/RG5/BO2PoP0R tD8itz+C9kfQ/gjaH5Hb38StBCE9A3gWpLaJuwiwDLAcsAITsQkLwCauF7AEsFQuOR+pCwDdgAvl kkVILQZ0Ac6TS+YhNR+wALAQJX3AcynwLJfx9AFPH/D0AU+fjKcPePqApw94+mQ8fdz5SF0A6AYw PH1YTvuApw94+mQ8fdw8pOYDFgAYnh7g6eGeJucBF4/URYBlgOUA9jw9wNMDPD3A0yPj6QGeHuDp AZ4eGU8P8PQATw/w9Mh4eoCnh5vfDEUVmHpkTB3A1AFM7TKmDmDqAKYOYOqQMXUAUwcwdQBTh4yp A5g6gKkDmDpkTB3A1AFMHcDUIWPqAKYOPFEH8HTIeJLAUw8cHATARYBlgOUA9jRJ4EgCRxI4kjKO JHAkgSMJHEkZRxI4ksCRBI6kjCMJHEngSAJHUsYRA46wjCMGHDHgiAFHTMYRA44YcMSAIybjiAFH DDhiwBGTccSAIwYcMeCIyThiwBEDjhhwxGQcI8DxJxnHCHCMAMcIcIzIOEaAYwQ4RoBjRMYxAhwj wDECHCMyjhHgGAGOEeAYkXGMAMcIcIwAxwjDwV1Hn+CupS5wyUlwy5fgmsfAG9vBI9vAK8vAM4vA GW3gkBZwSgM4Jg6+KAd/RMEnJeCXILjCB+4QwSVecIubW4k2V6DN5eRksx+9/hK9fwx93I6+bkOf l6Hvi9DDNvS0BT1uQM/j6F85+hlFf0vQ7yB650MvRfTWy82TnO77/7vMcztgLWANoBJQARimLqkG mtFJwHZAG6ABEAeUAIIAH8ALcAOIzYa9mcWskZrtXCMHPYAY6MtyuFUOvyOHG+XwHDlsk8N6yd5p eLnTsKXT0Ndp6Ok0dHUapnca6jsNL9I0uQGtfCgV32C47wbDrTcYLrjB0H6DYeoNhuYbDHU3GGpv MMSQ9tJPaAMqfl8O75fDu1hITsrhf+XwkBxeKIcNcuiVQzdtGDQQ7TA9Pig24rmPDYodiEYHxaWI nh4UE56X6BNExI7RQ384KF6I0h8MinMRrRwUaxCtGBQrEU0dFFsQNe8U454vxWEFlUye98W1nj+I 7Z6UWOd5jJUNerbJl/I8a8WIZ7kY9izLFi/KRi0s2uVpFJ/xlGdLotmSBfnafO3AMN0tVasHfq0e 6FUPxNUDEfVAWD0QUg8E1AMe9UCx2qqxaASNUaPX6DQajUqj0HAaorEOZw5JUba7tqoEFqmgO1Ci kNMCVHAKtmYh4aiGI+2kdw/XCDWhcQc3KZXPz+JmzZtKZ6X2XURmLfWmTszzD1PdueellP6pNGWZ RWbNnxpZ55iVcs6blZp37nmLh7nGVP+0WV58Us65cnbftK5USE4OU4J0VS4tIV2fS/cj3ZZLo35X alJk1rA6Mzc1OTIrpe08f/EOSr/ThVyKuw2tzF88TDOs6JbClKVl8W5CqeeWOwtZnLnlzq4uYtuQ dCQtTea66dO+IeiVC3unRU5/HKeTDHfn1ZLe86za06r2VKs9fjW7OmseCgeeVQ+0qgcwEdlCR3Hq /lnzFqcyxXiwXGIW5nGe94LFu7kk19g6bTfXxKKuxbud27lk61xW7tyOh5yoB+ZMoh54E5FcjwRZ PRL8Sj0f18TqlbAoW88n1/OdVW9Hm9g6bYeIIFunTa7Tdnad7WfX2S7X2Z6rw8v9l5sYbyd/MhHl OmL+ZLnvZ9bxZXH9j3VKvrHO6WH/Smr51K8UfHOW7iZz6ciOKRtal/tbe/2tywG9qTs2XOxI9S/1 eneTKXSEXfKm+FDv0osuZvGS5cN0xL98WmqKf5p3x1z51rOvpzawy3P903aQDa3zF+/YIC2fNjhX mtvqXzKta6hjZXLVWehuH0e3I7ny68hSK1ljSYarQ77vK7hWscsdDNcqhmsVw9Uhdci4Wi9h3Ne5 eIeGTO1quSAbD3F5OlB9b6HYNdUmrG6SWWCK6LihcA+2/k+RvEhXSu+fmjIAGHeUN5c3s0tgfHbJ iGJT7pLjhili4R76VO6SgGKzfyoBC3zt0zrt//93vfxZ97/4/G9qkvW5htY7Wi+ZduZfJMKeaH1k Hf4iV6KtbEXk1q1fTwBywfp1EYIxlvS9Jb3R3ja+190rcuvWdbHCl7GzYrsetr+iKKPrSSRCc4OE G3MftJtNEbS8DlWAcv061GMRPqypPTB73IBGuui69VeixpXoAIu/4TN+IRuzEICGxxNXRmAt/RBw NylE7OaXEjchmZEc/C19g3y9ID0G8f4OxPz+HCDCZwXZT0tQxr73kx8h7AJsJpvprdQpl95DnkZ8 DSy997KHJ5vYZhB24R+TMpS/SyJkIXkA3y+Qs5Bf4fr+zKdkKkxq8+X6pSh7APlX6PVcMefBUrNf ESRv0oziY2rhHycb6Cb6H74H7T+AFtLc3sxMMpfcQr6riWaeJSEikcvJdeQu8ig1UV/misy7MCTZ gLs183jmVbIEV3eQYfoTvlNxfWYb7pxHriB3k520QtGreG3s7+mbMn2ZP8ASfzt5guZRkUMHlOHM IlJEJpMkuYD8BljxpV5F2Vgm/ZfMDrQfIc1oaROw3kV+Tg6QT+k0+qYipCRpmvFkfpP5E1HD1HcB uY/y+ArUR6fTZzg7/wastEriIG24+wKynKwkfWQteRLfH6OXR2iC1tBp3DSum7uNu4/7BX+P4nrF DZiZTeRFSqiChqlEZ9F59Bn6B/oHjNbV/PVpmMSJF8/bQlrJOaQbz7sVM/Wq3Ot3yRil6MEK2kev p4/Q7XQ/fZ97hZ+vmKH4OLMiczMelsOs2IhISkgjWpiP+X2WDJHduP99YHSi79U0ief7FncOt4FP 8J38+fx1/AD/OP+WYpHi2XQi/e/MLZnHMi9l3s68lxlFe2biI+VkFkZ6PllMrsXM3UW+j1Z/Rt4h n1E/nUqvoN+i90Ij+wl9lr5E36ZpzsA9w9fy9/C7FFQhKe5T/CptTv8gPZw+kmnNdGVO4fmWkpvI beQe8gPyBChuJ1oboW30HHouPY/2osVb6e30SfoL+gmn4C7gnudD/Br+Gv5a/j7+uCKouEbxR+WG dHf6nvTuTDyzDj2+LfMv9NVEnGQSVJr55EJyCShjNdlArkKfr8OYfws9v0X+3okn+AlwvkBexLgc Ip+Q41RLDdRIi2kc38m0CU+1mK6n36YP0R/Sv9EP6eccRU8iXC03h1uJ+XyMe4V7k3ufn8//mH+J f5N/U2FTzFYsABU+qXhWSZRmVaPmtyffPfXc2INjD6e5dFm6O6POFGaKMm2Z5zK/yLyb+Tc410ui oMs54KnryACoZhgz9RtQ4AFw2j/Ih6AhJejNTAM0RGfTC+iNGOlbMdbfpT/A92lQznN0GN+X8N1H f0kPYPTfoYfoP+hJCuLlQlwMPb6AW8Fdyz3Fvcz9gkvzeXwh78d4NvDLMabX85v5J/AMf+A/5T9X GBX5ipBiimK54m7FM4qfKd5VnFS2KWcrN6rMqm+rtspUyPjnjA9t5RJon6Nd4H+YAsnz3K+4cnCE zGf/n8Pb6efkVTqV/IOOgcpvx/dG8hH4aBHXQj8AJX2fTqJ308c4Hjun2+k+sp08xv+Yvs3dRL4N 7q8gHyOk3MW0gt7GFUEa3sUNkb+DMvaDXz7l2pDej5l2kP38frqa/Jd+Ru8kR/AsvVwBWUn/QCbT 2+g0soorI36ynu4HheGjlBRUeT7k7UomexX3cf/i7qNHsDfbJj/9t+kSsp2Wgd720/PJc9yIolbx Mqh0OrjUhdpzORW9GrT5XU5BnuR+BdrdAT6bA654ANy7HXzSjF6XkvWkhZ4LffdzqiVmejuo/UJw 5u3ozzPkGTqGc6f9ZHpmjwwfcXFQ+n3kQXRvNwmQH2W+Q35Kl4KPd1Id+S55n5zDH1MUYNU4qihW tma49FJyMHMueR0SS+D/SmaQ9+gdkBszyJ+ojTySWZVJgBr3Z7rQz5vJxWSBslnphjRegt3rz9Tb VX9VNagqVVR5jXKZcq5ylrJFOUlZqSxTikqn0qTUwcr7F8UBxU8VP1R8C7xboShQ6Pm/Qn7u4B/i 7+D7+Nl8kq8ATRbzCu4L7t/cP2HAPcjt457mNtEUevle5tXMQ5nOTGNmUiY/nU4fT/8i/Wz6kfR9 6e+k+9Or071jr5z6y6k3T+049Tg9MXYQ8utn9PX0SawBV2bOy5yTOQF+s2buyTSm36Fb8YxBMgb+ +i3k6j2Ylx9ibBdDwkncDCqQNDlORjFCb+P6bvIUaGwj6SULVbCPYL5D4MybclS9HLL2SeR4zJUF K0ASI34O5uQC7Kx4WoKV9hXy48xj/AK0sUNmmSe5N6g3/QNSAilzBdanWeTvtIn8C9+dZOfYw8D2 lOpJYN2tepocVz2KE7/7kLuDa1WaFTHQ/BjXR+/MnJ8+HzLtWrJb8Q8c9RDpnMWLFi6YP2/uuZ0d c9pnJpsaG6bU102eVJOorqqMxyrKo5FwWWlJKBjw+0Svx11cVOhyOuy2Amu+xSyYjAZ9nk6rUauU Cp6jJNrqn97rTYV6U4qQf8aMcpb3L0HBkjMKelNeFE0/u07Ky+5bgktn1ZRQc8VXakrZmtJETSp4 G0hDedTb6vem9k/ze4fpeecuRvrOaf4ub2pUTs+W04qQnDEgI4q4w9vquHiaN0V7va2p6Rsu3tLa O608Snfk6Vr8Lct15VGyQ5eHZB5SKbt/9Q5qb6JygrO31u/giMaAZ0y5/NNaU04/bkUzfLB1ybJU 57mLW6cVimJXeTRFWy7yL00RpkhH5CqkRUaTUrWk1DIa7yUpPA65w7sjum/Lt4cFsrQ3ol/mX7bk gsUpfgnaaE2ZI8A7LWW/5rDjdBaNQ2XffObVQn5Lq+MSL6u8Zctmb2r7uYvPuLdQZC10daEN3MsF p/dumQ7U38ZUUUcMnWPdZ4+SfajsVijYe6k3pfVP9V+85dJeTIhrS4rMvVocdLmk3ZlDxNXq3TJ/ sV9MJQv9XUumFe2wki1zrx5ySl7n2VfKozsEc3Y0dxhNuYTecGZiOUY6e01OydVZatbcieGkrI/+ mSkJdHSRFz1Z7MeDTGbB8slky0WTMer4dFHclVqGabgkpW3p3SLUs3IMJU0pg4Lfu+U4wbT7Rz85 u2RJrkQVFMDJuMiIY4LAUnTJeDqFXUI4zOhC3YKJRB+b5HxNeXTDMLffv1rwIsJOknQuxm1d9TGM uSiyWb1jWCJLkUn1n7s4m/eSpYWDRIphv8X1siv7xq8ULGBX+sevTNze6wf57sSqCaeLlCY08WcS bPmtF9enqO1/uLw8e33WPP8sGGG8rVt6c6Q6a/5Zuex1NqAYN1zLpVL5LYv5Qo6RNlJcIS9fBSVe cN5EFWQW61OKIP5UMiUvG1ZrQIpyCfVOTwm9M7Jhl04Uc4zy/7ppOHOU3SVHp2/LPUaqPpLraLbb qSln5c/qnn4LP2s+BA03a/55W7bozrqWmhNJ6YMpbRB0kjIEU0Y5nR8ctBkXRLwpY28QksU0EbIk FRYsfgv7a+9ib2p+GJKlwXE0drQh1Ql2T+UFQa8sRHNoyySHaBcICoIpe9BBhYZTDXWNMceho6ya LsjQoxpCTTAlBFNmOW0LDjrNrAdmGbdlIkwhSb7WA9YBoeH/3Qcgwp89mHIGHURo0Jwiub7I8iFF szPWCfvBEshSPAn+lMEFi1MqeXjBU6iYHS88HfqPDuMv2+x88G2qI4I/cGnXjYwD5Q+G6MwPWuBD VJg5pTzqR4rIKW/Ijz+UMKL09oINg1smF/rFruFMBjzC8pgIrjeIUff2bulF0p+aF2ZXQ95CiIPe UBdu41F3OlalLVum+73Tt/RuWTKc6V/q9wr+Lbt5G2/bsroV60mWSYcze+4oTE3/dheo82JaD1HE kak7/PS2c3dI9LZ55y3eDTuo97b5iweh0Lf0Tu1iLMC1zF+cI0GZP+SH7CoHYyr2k5UAFr+k2E/f QPwU4GnAFYDNgIcANwMOAh4EsGvvKPZn/oC4ECABigFuALsXZZk/AY4iXQa4BsCubwLMBdgAXbj+ MeK1gCbAVMB9udiFuB/QCrgR9f6KuBqwEOkjiFcBHgDcC2A40ffMKcQRANNCsPVESKCrq8g+xF5y fq6ElX71w0G7QRPY56qwC9bA3UQHZyE97O1nf4zYewnYK457j+XjshVQAD3djj0ywc7MRQqxD//m TzF2Qx70RYT+xHwfgqgWglZeir1iGDt0+K1Be60gMRInlcjBxSbXUBXSs6HBHacbuBncmOICpV05 qPKoPlQ/rI3o6nTH8h43dBiOCXdbfpH/oXVZQZ3tTvu7jmecv3btLHypaH3xZe71niXePrFG/EXg s+CikotKJ5e+WpYJfx59uXxuhSVWXDmr2lQNmws0bqbhr4SrG4+xmCK5Veqj0JiUiqM80amUR3me c2nViqOUODWzrnVE5gjHGmaPNcwRTjTMFsYaSLJhrIFBZbzaLJqDollcqSCnvPy+U5KSnITf2j42 Oy/RjxRW7gfA4ZL02EkRl5I6Ff0PsfYOCx+Q2OzRyjhFdxXWU0/xi+lHL+Iu+kZmhOexV8kjoqTX 7uXzBDT1lsqp34MtZAWROzN7FOdzuDloVfl9oZpEbXWVjefnzpgxl8HK+jlz6gHsOZ/K/A32jxjm VCQPSrqZ1ja9srhNYRBf5C5EuwJ34fNA6vI7WF5LnMhrNFqn757dtCeLC088KoxmHx0J4GWYZ6VM MLTXcl5b0Bi0hApDqqAnWJDniJB8gxChRUpnBDYtMULtOmuEmk0IXOriCM6vEDBz2bgBDskbaYGV w3NwNTUJC57Eok6UhPw+taqgwGq3VVdNqq1RhD5857pnHvrgnWufeeR33TW93VO6LkwsuWBKF/fF +6+m776cBn/4/q9p36r0e48/eX3rOet+9P5T17EIj/g0ZroEI+Aiz+0mrsw+SXCKSbtrhWujiy9w BV2cC0vYoM2ZGMY1vY1qtLo8vcFoEsx7uIe5R7jvSgb3THJarR4vLXDPNG+yUqvUVmOVfMGEVYpV JazD9PLniVKr0dt/ys0CHxFuKXiJckslrblTGBC2C7zwEtcO/rmHvosBFk50N2BUhcOgqeQoBqO7 LhKpjJPImm4MGwajAFMsZue42qzOTfck7o032pPJ9rH7WPjGC1FbSV24RRk7+b26ivI6BvyiuL6p vCxmwQhgb6uwYgSCtGo3czyUprTVXO3d5N8UuC6oCOaV+SOBtsCtgV/pXslTz9ItIKvI8sDS4FZy Iqi2+AS/EBCCB3wH/AcCB4IaA0ZpqCmZYLFkqq/ZJu4zHDDw/TqqovwwPTxEeR5mjE92qvwBYh/m 8nYKbW6llt01tS0hx+fMk+PB+TXaYW72Lkra1Bq9YQ823SI17lqtoipXiXWYWylpXZ9qiFTSnCC5 2+V45jzkcVWn1Xo0W3FQ5gztgSHlwiy1djNyxTAKxxjJds8+BoIFo/4DRcnRUXNdHRXGGutiWF2P C6+QNWsjkR0qtmiwgXl7p1ZI6AQiVEe6wJhrugkmISgy5iooEGsI6DAh06ValZsH+ZJVpVbBwvWz oBibdOo8Lryu/qbLr5gZshsrA+HGvj9e//P/tm2+dL+7adbSd+lrN7U0zFon+VrCgYbShp2rPn5y wV39yzFHm8GnEuaokbwk5Wkhd7j/0s+dHHtiaXqsMvEWec/JqesdWnv9Jc4V5Vcrry64qm5No1ar 0RoTxNfmKYoXcUVFk9VGKc+QMBqtbWqDqdJTyVVWRtomKz0eNoiHhvxBeTB3OgoTpHSYu3BwyhT7 HnA+DzRaoSDB88lEIg9IdwnWBMmjebHuSHXMXB2LjFbHRqsjEXNdjCTHqmLdLIiYLXWxNaN1GKxI 95oI6V5DbYxgMTolWalktzEGZuNWgm+2bFITNzGOsvSalBtG/o7zz9v4txf+fVXLlHCxJ1rScMnQ 9u455ZdVT2qoWKEu7axct+7eOXZjgSvccMGtr/30g2ncT5p+sPzy3T3t4fpoo9WtM3YvSF7ptaj5 unC0gSqis8uaexY61XkN0dbmnoMPdtzOJCLzUrYojZAHxVy35NpUvLX40WK+oWihs7NohXO3U1nr pMVSfU0xVJOhyIIk4n1D1tJsXGplcb80/7zypMalLHa5ylz+4jpXu0sq7im+0nVv8ePFu4rfLjYG iiuLXy/mLZYin6swUSSFaop8eTVF7Zic64qotzhefK2LzyumFqLO7dcpGZcsTN4w+WPJtxbYMD2n pdD4Fl+jzpXucs90OoqKi4e5jZLe6bI6nS5Xsc1RXMjoxiwUJgvd1K122O1qqTCUUP+Um4tVXIOD cSMp4m6TDLBbmYx6Z4cj5eCwBJyLqwruVkmnoWq1ptBut5EXIcCKiAYCzFVEbF5b3CbZOm2rbf22 7bYDNi3LcraXuE6s+vfITCicWJMVadB45e9h4Vg3WzKTEHRjDekIKx0dizRQUE/d5oqI4npwoqWO HeNmeXFnURiMSGQmxM5lNynGDDS45RmQtJOKksWSVc9yfx3C2LJ4V6jGhSFmUyUZC4WkS8IFly/P yK7uG9KZs7WFAjneYYKMPf3pAqN3syxwSf6ifsx5kYQJL5Iw20WHMdNF/cBe1A/MRRLayt0qHy5J umKp0J8oZEEk0gWhIV+F5KBrqTkrvgvOluI1Yg3NN1P+nuampARoT48yKd459ib9eGr6HaXx1F/r ysvr59aXZ0X53Gf4aaf+Sv+b1kBO3CzLCSM0qS8lkzOPapykyAEiVPg0VH76AkeCflrYNsDTPpxx 7KFfwvuweNAfliWJ0eVPEslkRYABwvHLE0MBv0IYpvdI+oI2raGnpK9kUwlfsocOEAd3oWTpVa1W 9asGVIpeRJzKFaUvQk77wEcQz1gbvP64n4dfwT1SvscQM/QbBgyKuEEy9Bp4gzOyBwcUt2Xl8hqI YpksIJWRHj0MBWbsMEQzhqtBGBtb0z16GOtey9WSw+ZSaFwKR4TaNAicykIoEeoCpjVAZ7jxRgwx LYDEsEDQiONyZkLMMLWBCRWzmB10umdt98tfjqVPfnDrnMawf265tGzPbTet7PuO1xGdwq1jA69o PhZIp3/7hyOLqprLGlsM+RuvvXrLDLNUzXWylZTJjIMY9QWQzszK/xOpSeG2uts8C/IWmRZ5Nppu VzwQfDKoS3jp9LxFdFg3bHpV97rp7byR6OG8I9FjeWNRvdbkNLW72z0KMRzA4jVHMofbeF5rdnxa 1GZWBjDyJUwKF1DjkGrUIO7hZssjbF8tj+h2Q8pw1KAiBjayGNfyPTj22TIxrmP/EMYOy3rZ2GEm kLHMWSCSGQnirzY3VLJ+lbAEqquYvVCW0H4fVq58W05AI0efaL/1nMc+e/9njx249A+06HvXt5Y3 hB3lhc6lf5hdo/Jevnz55dfPabqTe6mpLkN+NvSX++nkfR/QyqcqxeryRoexb11netZViy89/+It 1zD998FMWpa0+eQ+KY+M2yUn5Nzz7naiy8sb5v4sVZqJ1WwmeflGHdyRPDRGObpdq1EY9WazWrda u0/LaV0FGqJerd6n5tVOK9TTiQWfqVDyspSEjr4GTLyTSq4axg0vgNzhz2NlHNsFsYPlf7OxIrJZ ef0rDhAbFbPreI1YQHMr+iS+Ph1R1EYr6vhr0jsLqgORRkHR3FDT1L5r/6lAU1lDiY15gD8NemA6 pRO7m0qSlhrVCo1OW6oKl5aURNoMl5VqrirdGH649O6wYrPyZu1zJc9FDisPa08oT2g1XaVd4csi fJvGKNlcCWPULHOmF2liDxFjWVuHn5r8Hv9WMJY/VtwGzQ1ruesl0IedGkmIu3CId1V7Wd6MfBT5 PGfVaX199qis+rCI6epjGJpurNF1TNyyBTvLZYnyykKPxabQaYPKkDvfGyFFBa4IrdBEIySuCkWo x1IcoYU2BOW6WIRUKhCcqbjfiA8jsTPWfHl9n5Rb5RmRlTB1SVVgZRSWf0aav72jY/nBm29+a3lH R+v0oy+9dLT1zo3LV2zcuGL5RscdK1fecdU1127ktjY+0r3yJ8uWPbui+5FGaaDz0b///dFzB/5y zmWXnTP7ssvGPjv3ppvmST09jD/fwXwsxHx4IBf/LnUbfEWhxL/0H5o+Dv9XeVJ/wnQyrN6suU1/ v+kJ00HlQf0fTR8pNQZ3sXuGZ7FnpWll6Walelj/vPdV/Z/1v/f+SRzVf6nX1Onb9V30Av2lJQ+Z nzKrjcRg4Lz+Mpl9fWVtMX4TvxcHH0f4DK/y4OSD43mLv02ndH5a3GYxeHM8PGgcDTHWtlGjVEiw mY2rJMhTZVasblelVEdVKhUTlRMs3b1m9uHRsbF/yAJylGlY3adZGgPejZ0BI1doUbLmZCkQmMyb 0LiqqwL5oYmB5zfP7m97/PMF69984G+X/uelQ9dNq5gScbhLIo9QFSfeOG/RNdd23MG5pk6imlce uv7Hz6ef2Z3+1U/vrhJro1NM1jfpe9/ZeMsV676DUcZpPFGcwolXGYjuAemyiGRyJ0ORSZGVkRsi WyOvRVT+CH3K/Hr0XYKzS+Ft80HnQdeH4c+dukXOldwl5hXOdfSq8IboZvO3nDdHbok+FL4/alCa DU5tWBmdbJ7klPCKQouhWZhhXsgtNhvCDrRvZkjgCPdXrOtFCcGHwMwCJ1vsJiNhd5ZxIXPYGXQF y0LhGmGyc7OgawhXR7mwjy104UgZjUYinFRAxzd2Ezu7F9wzpZBUKNlYYxaDpJX0kkEt+vyBYKik tIw0C1ndi7jJzMw+tnkkIUAhwAbQ4y69QXX6yGVcVTOjXZNk4E6fzYxfYaqdTz66KXS5nLlSdCMS NUc4bpi7TNIJZqsgmJ2RsjKW9bqcVtQ0R50JB2cJ+4gl6iMmOA+wcYkhHubGsGHwiaIO/XDuNw9z XZJWAYcZDpsgNNEl6YhLcAVcPS6F60XuU1heOK7rhYgwXfg59qLD3KdD5QOTsRE91j3KwFLnjHU7 Rtm2Sdbejq2JYN2W1bAoVCmoUFGM1hCwy/GsUDaGqsTyg1lhC3ErZO8JZ+8J5+6RY9wjx7iHxafv SR4e3ayEfL7+lc0VDhYRs6wWRiJqWE/VDQ05/TASNozrh2zfIX/AFmy7RkX1WZtmO5W3GLXVSppb +MY303kcvyRtrKpiKkD6k/bk1HPo1FtZhr5IH5xhr2iSS5PtVbc+/gRtvz67sa6o53hfXUVFHT1l FsTarIJG2+n96UuZLakQHPIAOMQLOZSg35IEtZHO1RCnq7Co2O3xEnomHXzdpCC5Z5rERLWEQa5m 81sd9SVYJsEyiajPsk2kJtEj9ojbxBFRyZJJsQPZEVElSpYacZi7QdJHwlFNJOrScC6Nie353KEE 4n5JF69KgHRMpnhomFv8vF7KExJ6jP/zlrykfn98D7yNLaBoszY/0WtZbeEsrtqwKCYSkWFuoaSj cazozpq5L8gGKGyzx2T6YJvsyOwxqHGypIpESDLJ7EXCMczMWplsxCwJiED1Ap5DzKnQXQ3Yp7O9 OluTsotSo79K57DmF+Tb8u35ClVFMBCsEuIBvtwRD9BSXShA/cZQgK80VweoEMuPBkhJXlmABg2+ ADZMMJgzZXLcshRmquIkc276s+qgmm1P1dB6Jmwq+bJ5CWsTbHjM0MRSr3gZGYAdDyVqlizxu0LV 9/aNPdGelGaOvn91Z+2KvvRxuvT66pKHB9Kf7s+Sw/47WzZU1T+ydE5LtTtcw2iF/rexrLH23FN/ DRYlmq7C2ElYo25TvAd/gTcl8apJ1MPE0ypyCV1Wsqzs0knX0o0F60uumrTbuas4L+aDXxGzldJG yZBfUsPrfs5zhSURLVafLsmkihmTxg5jj7HPuMmoMr7IdTGbLnfTUNBVB7tTF3QShxzGsZE3WRIe +MIM04+GJl/xhGxxijCTE2Zu9rGG0e6cSS85eliYsOv5ogmrqyJWHuNUBcHqkCvqCBNrwh4mzlhh mNiq8sNQxWULHhvlbuz8ZT0TZpKsZilv9rH0MwseFv9JtZOYGpobe7ZUyaY+6KI2/qn8chfYqLzM 6dSrC8ruab/g4Q3v7F3bUZHwBuxlTeHG3hu/u+vuDU/cRzX3dj2iuM3lamp/tj1ptyfD9vLazp3X 3XLvrzyWGm9+Uzgcn15aO6uB8g/dsZ0W3F/GNINicORl4MgicOT7kmu3+Jr+tRC/UFxUcpuBbyU2 u4MxJwb6TM78mqoq6d0z3VF7OKrm7JoAG28T8WMmBJMgObxJIuwTOOG30TD24QslM+aaFcLCzRFn RLo5yzERmWXALWzwwSUIGdnPShmZIdVTqi0wGPXGPKPOqFCFgiVBTmUx55utZh67HK+PU5VqA2Hq KfCHadBYFqY+szvMFDLMQhgfNg2ke5I5q30pq2x2N8dmA7SeMx8q2TzUwsQKO4zf/1228aQ/Wba3 PtoTX7w1uWxbehmonhr+dE3TuXOD9XddfhCkTevKIera6yL333vZ0m+9tskdA2nXU3/Fd9YsWTJz LVwWKNZGoliFEa7lXpLyTSFPaKSWt0Cxz9pQLfnjA5uPRbFY0knwWpKFIVtmX55YX9vZWmqj5RWx yqrqmtpa0qw/8xozAZAiADNf6vOgto7P0XjzBuwmTntD7J24mS3ceNtZ0uu4rP8EHj84flPA3W6p jYYsBGCCATsZ7Aj2BLcFR4JqlmVJRZAJVR+lXDTPH3VxeRpTkacoVsRnimhRk0lLBa1Xu1rL41WE KyRdheSsqShHUM6IJEQqQCTGkLc2XivVdtb21iottcPUvosGgjgWwdq9ULLmxy3bLdxWy14L12Gh FuekuVmCWQszSk7ICieYacJZKzlNydp+mwGB3YgAVpDafkhveQHskrfXESFyrHvN4e41MoVBRh9b 042bnw9KWlMymFuF5RjGIRYPYn1h90McMyTFhIlnBAZmKHAjQD0iFdYgka04vrZLxbWsKgL0h1Wt ZVURFCAorJH7FOnKRtiNssbzMP/m7AKgYV1BRpGL1blYlYuViKViVPCyWzwscLMALRhYC4ZktgVD rgVDMtuCIZltwZCUW7CgIlowsBYMrAXDuPUm27Fc2AUBZhaz5ygF5nENYXztUJqZVAvV1Ijm6qzK Dc7Kqdz0Xi6PiftTU9j64JVXDv7BydAQ0r6dJk9deZ3gra3zmOiX6Tf7ZFXjFVY9p0SkX4WTT/tl 6YOd9spk+yct9lilHZ5h8B4i8I18GfuZjyU7VEmX5JSCUFW1qtOnE82Ws2jcCTpnCmoQwJRU0DxT UiW9SS2LOOgfhP7v75ngrwmrpFNWap3oS7YnX1dudTBGQkvVajTmF7mFOGYTuIW7SA/8GTnZNqUF 5VKXeP+/mUA8AbVytiwJG5KH2TRgP/61845x3S1ry+H2n3noIae5y9iY8kdgMsOonjGybAaYdGIa 2TsYSUlxq7Tk5uqbptzceJfv3tjD8Xurn2x6zfd68lDseEwf9tVXtVd1VV3lu7pKRWLapprYbN/M +IjvTzG14CtKXt90a/zbTfdVPjrl0QZNgbhKekV8SzwsHhdV2kpdskW8WTwgvptUQcU5JCWj9QmL TyqtTzT4GmKP+h6K3R1Xxnwv+fY0vNj4Vkzpkwzm5KoYtQTEYNP3yCPic1VKfYO+Ud/ES/FYjOzB xGEyJb2dk52/oJNUV40LLLZ/OIMEBPiC4oQqtz9h+xJocCQfYAaYwN1GycAaFJAskvQvIQmNnJSy 9osN44ThhcXpIGtoCHMsn+zoTVxpWTgShTyOxZutZ1HamWjQLkNDjACglPRF+M2QcQe0Pdneyedn p6nl5TP7LBmdUpgb92nzoR8vy0duJvfMuBQjvhghUtu8hDywxuraBMHZFYL5y9gZ0GXSFtFnFdl4 ipIxP1kjThe7xMvETeId4qPiM+JvxPfEj8WTot4En5ak+IaoEEVfozeMmWHBFBY0epOtyCKYwoJG aXpbooEFU1jQKM2ahyyCKSxINjZUKaS4b4qimpYlnInSUgdXP2UKDmE0sKWegDld7BT7xQFRoRYp +pwanAWdHENfz6L+QfSQHSrMkR8IlmqzDh032BDorUlW8YV8Z1IUnZope+ij7BclJB0Kqn1Mpvrg Kz/UF6MxJhgtQl2MFcZjUuzaGPPrjw1zN0l566tpb/Xq6v5qvhrLzPNTRUK88iqjM8cFKjib5x45 rb4z/f1EdzcWCJw6jmLhGCVQxWPjgnHN2tHsFhDh4cOwHtnr7GfZzTcrKnLW7khks5Ft1mDPH38Z a7NgbLj+lfGzNR+EfV4Rm8Z9g4ihtuCADds1LAp4dQp2fDYS7MGMeKiGC7G4NfoQoOitIZzWsktD bJxYnBsqtnhUsTwbMnYUAG2axYOghvFHQNwF7XQNQMZUBTOC1mhP+iQE8kCWoPWIBOzlLIiyIOZD 4GOp7LizNSPOEMH8LyM0OVm+XzIi4WMz52MLE4r++gKI0BdFcEYHsskudqBLsaTDdn3W/rS6emKV yQo5v5lmdTh7zoBts9lzd/jZEVoJvatdXkdeO73g0EmspJ2u8jqS7b9HuiU9sPL56ZPY4rJHOqep bzZN/f0bBGT6AK2zlxbH6ulkqHXpn075bIjVeuiONSuxWOBtCaIYg+ys4n/7PHEIOCFiw1AaTWAY PtpVX1PpqK9Bcpf0CPSSSqacLKp6tepgFa+05zkL7IVOhcte4Azbg06FJc4EImFBnB2WExbEJZcX KQQmQh2muODwOiTHAYd6K9kav6PyjqptZFv8ocqHqp4lz8Z/XPnjqr1kb/yQ46hDWF55adUtqHBP 5cNVP6j8UdXble9W6d6y/9nxnvNPlSNVygkZaRLOlJzj+3Am77KHajjEh9VHJxklkwIWn6zEi5+t PUK2YRXFsnZarp0+kRt3vhVM400yET3uoyvCDJitq8XaGK9sq6SVbEteWpVAvG8oUZ+Nk/MQc+9J RQ6n1eFw2knVjCpa5UW1Kgl1qiRUqGIVqhx2VLA7K+NVdhqX5tVsw9aOsBhrnb2ySmNyeDBPDo09 YUu4Ek6uErd9JuXRqAamaSaoMIeHBntr5GheNurMRtOzUYMcDU1tSbA60qTJdQmFw+pY5rjXsdNx 2HHMobY6Ao75jpvlglccbzk0AUcCBawGy6odmEvGXUPQT2Uu00JHjcWSMQ5SChqvtx/LJUdEQfSK cQhlqQxykX4kwabjZZYt3EYl3CJLLqdgkqa2JkxSOJrYaqIeU8zEmZzVr2EnC68cZv2BlgwBBlkG i0PDGIRZgxNiDLyW40LiyJmyxk40JI8dO8wM4pBUlrq1EfxROcnOIfFZkzM95ZI5YTYuxRwgBENe IegWAZEDVIQkY64C43YoWdCg5pB/ehIDCDEhNifjEgLCAhRBypXbUYSAsCBbBGMYeISdzCFgRUMQ L/KlYoiYOJMzhAVVjjwLUgjQDUu2hoEZOtk5Rzx32MGe5awPO5iErwPMMxFoumdLoNye0U5pVuSo c8eWE2ow76ehrMz5T3uyqbl2UrL9fWqnlr+3JyfXNLMDzM9mJpMzZ308yMfHHj0tZ5STw9g9jj3A XQr5Ep6sPPXX8SNN7qKxo9DOMgjwLsHLJEx/u1tWeqbIWw4EamcHkZx8kISdNaTeqSgkVidX66gL T3XMDs91dIdXOC4Jj5Rqz+D005tJ7PnYZnLckFta9hVDLtNamILEFCVmyM1yuOqbOfy0f/04L9sh NATJLOUzsaHMmnOZJ/74dejBDhIOe+trwoxn7U4HzuUdDhouc24Fm86oryH9TgoL9rDkqq9x+sKO hN2XEEU7VxYOMx51xeTLMgMxQ/cQmMHJWMdbVtZburq0v5QvlaY0JEpd0W/gGJcJVonK6oRHiMMq IeU7ElvZ2h+RrpRZBvZcsIwg80xODc9mchZfttwL7CAxsgZ/7NTIInMHWCPLD+Ps4MwcegEmROJl QZYPuslaxgdfo7CcHm+nX1nszH664gzKkndPo5xeLqIGEJv0G75u7N4sSUXrx02vr3OXyDZYtmqd MsPKUgbb2hOwrRmIk2yXovfR+5QPax8yPGx6OP+Bggecmll476JVO0vfzS1Qzteer9c0mkvyeHsJ rzXCFDpEXIVwOFosGTzqDvxMEQ4YXVM2ZOXLbNlOJp+kydYxA4w1FdSpDSmDFp01QAS9MUBtCqQc HFL5GnOAmgwIClT2AHFSBIztZFsZ83SDoMCbKcwEZhbY6Q3hzzgXUzyRfvzw/sd/+9vH9x+m5+// 28DWv/1t68DfuAvTR9L3PfAiXo8Kv/QAXpX594vHT+zZc/wYnhwHrYrvgYN8BId3kv3+0ONBTuGB M3UZfkBg/MDD3Gw8S4NnGnseAAcYOdsIPNa+aXU7rbWP07bonuktwmlhIOrz4yRCyjPB0EUj8vEE jYJ2S9hAFnvhjiQVdRb1Fq0u6i8aKNpepB0o2gcPJVd5RBbrfjMRvCBQSegUeoXVQr/sG6cbgCXt gMB7GcFGh+n0HVlzM/QmZgthxmb4DoBQR5OH2cEms6WNgUIhxDHIsvuA21XmLvYUe4t5VZmrBMZh EUFpYRgv3hUHAuMWM/no8n/UxNRGzl+SdV3y++lRebeZnnaGznXwwH/KPHc9cN3Pf3rro5s2fEK3 v3la8snU+fcfnNfZcOWU/VcvmLEKM8Uskf/FTJWTyZxKWhpy17qnuxe6P6z8vFI1qXJ65fzKhVUX VSntvknRtuii6E3RW8rvr32idrf3Va/OGDFG1VXBSCRaVz7d316+0L8osty/zv94dFf011HTpuh3 olyFBkYCF5d9Qyjg93vGp+zsPePZug0oQdIb/y+6zddnH2ZQT6z8Jg+d76EeJpigxSEeHqquZ/F3 d8EF8pXsJUlqmZfwXFv+k/KXy/lyqaWm3NtWg8kvZ6ai8mgsa12KxirYklVRoXFMijony2QUjkSY EPTn2kf83aGKqoScBx4WS1Y03u/f5X8Fh+T7OyO9kf4IH8GFnfNqIv9JMBK0jpPeviJl0ef1sAfk DG65rVDdXBx6MQ3itJGtG15Ja0bl86RxWXgYFgrQFyM0dlYhn6HLchHktnYN2/Ew7pYJzxuvdbmr qiurOVWtKxGgcTeCmsJJAVpdHAsQmF/Y+QQz18JWC+2EHZ5/ZSX+yl5ADa8We+7Uys+VgBqZARfy wk/v+foe4MC7R1avaW6vmDPHWd7UfuUXP/zN9q7pFzZft/Fj+kY6/RXafOfh3kcb67rqrhY8k3FW ceOc/YWBzpL6i7A8bYIsnQtZOp3+/vkSRyCYgJXwI8kIz0HqQCDr+bKNwAmF31BEm1RTi4vMTbap Nxfe4t/SeO9UXRMcaiUIxkSRoDcltK68IkUjnISwR8MdjYilEBQZlw9BX+Ci5NWeTYEHnA827Kp+ zfSr6oOmt6s/aPyi8ESjEVX3SdW4B+Yv3DjFUagomOzwguYKWeDwgtoKs0F9jQPLrVylxhwYxrGJ t6ZE5JPlHeU95X3lW8tHylWxclr+8xAn6Tp1vTpeN0z5QZ7t2xuxfSuZpvUEYgEOt45KjioJm8+q UrszsQ1quOQFkVfFqjio0jdKujJTmGYgiZsK5CWjV1ot9UsDkkJyzTAyksWtiA8O4W6W34W7B4wU 68yNzws4GOTgUceOayaDRh2C2+vmjriPujl3k5rAN+ANFa/6vO2Z3VDqs77B0HBBgmtGmfLGxB/c OqDlgkhRMAoj7+jh5Gh3cnQNAGv2+AZd3q0zL2Ks9dBqQXZZZTiYc3iRHcZBXfLZTNY5swLuBOyM xi4f1OTOcdiGM+vBYbcpsmdnWMrplELREauriwUqXcbiexffvnhybWPpHU/9eNmJX3ZsnlRays5z QkU2m7l4/Tl9N9ZU++iUp1df9p0/L3gs4bUkZ25pT4a6BI8kldSFWmwml2fx9u57/uIPlCRnPoyT HfMKWyixcnKozWpsav/e5Q+efxVOcije3SWKqyA//XSKJMIW6oJl1AGRZ5Q3cHns6D7v9Io3LvzY qQPsppLu9KkDaS6aWA1x7CBbS5nl1A5wAJglldmzmAUVxw0TK6VB1ir1X18pT+M4/TbmOH63u90P McGEHgJr0uIrdDELqcsJuSt7MbwAq6jzI6GwiFG7nnGNhJKij+hpI6qE9y/w9ng/5QW6mg7AoHqA KikjNmZRHea+NRRk+6HsDgjkgsNXONWxAHJM9rFraGBnoxBU3yBy5LmGx9yEmZt7HTMErV5Wx26X LauKEBMgZ9tZf84qoTfpNSzxczZHNsiOPZijGGxVn6upGfufXcYaf7+xxo7koLEGnhYssmSjgmyU n43g5dEv+Y01AVQvBQQBJYAQYAQ/g3mEHFYd0ikrNc3MAmkFMP09nOmXLZDjOv2Zs8jqsZllRlEc HsHkaRz3qnU493KyyTNnO8Vt2DJAAZdtnniW8QmEJVKC3pp7u1anHS8vR7kVW4AiqVgKMwLrN8mb gixRFoI8LcLpl3Vz9lWQwUwhnCgrM3NFJQp4bWTt5JSdjBck6OeVDlnNN+uINg6XNym/IKH9PM4U d9lejuOcExF4szO/LsxvbkpbrpYCLi+nUeOHoziVx+v2cqpCpTNAinkxQF2aogDeukAAaSAfFson towaxj/s8MMKnRQiwJx90yA4bouSXbdwLH623q6Ykj6yr+fJW9qbm5pmMT0dxqeHVs24odR5WnPn j4y9+NP0iZZv3bmBa60vr5hMmVI09vQFd05rLpvCLZpQ4NkpbRfefXqQfxKeRZMgjmvCShqvoMpa W62/NhlORpLRxvLLjdcZtUpvgfcBzS9Ur3nfUh1WnajFL26O244nTDpWvJeRHw9P8hF6axktC09K 6C06xlsxtzchQPhjBejXcTqxJ0o7ojQaLbNK5XhzY7lFEN3qMl1/giZERZ4BBuZFO8UeH/Wxm5kJ w4fT9c3xYW6BZFGzFcKj9qrjbLcwObkrq0vAE4LtF9jRhjxLa3DMyw6+sCErPy8pMCmAIOuPOBph rl1rR/EOgmwzgKgZQiXWVeZdI8c4UMvGBXJ82lMGe7I6c53wCVNIWBqczbzv13SLNTlPRubomXOz z+6+xs/gx3UOHpIdr9jIb9jUTuI9s/ec8/jvqPqj7ms6+s6/q9ZdVmcN1J3zPWnvm342wUevvfj6 8yYXVi1qf3FmvKzsuUtv/Iu1sqI+YJhS4QrZhQLn41vT5zEhQfscjSWlxRaxvgo+Yx9nRhT3K83g sjAdkCqVnFar0/O7NL/SfKj5UqvwcILeExBCMc6rjwW8oY9DH4dPqU55MwFDgJ1YhuSxRyIg6fIS cs6BRKGk8BVK8AjR/F8c5cnEu/Hj/IrjK4PXUGrqh4VJ4YYTlkJt0pWKujwPm1ArUQvybErqTrUq paaH1JQdKOKtHV1SjW12EAv4Islqz7rAv2EbsR2xZWzqbTYqO4+xajZn5KLrZDqArZcRANuvwCYl 71hGQQlJc90azNfkcT/35w3MBYfJ8cGJLTSY2VUW9opKrYiXNmiZFoFX5fPQsKbUk2Nh5nk5c/7V khAqydOH9KV+RUle0E/0Bry8CgPP+FV/gOMDnM+v9OMVbfyQwcRVxvfwIyTY3DO3DFLAmD9UUpDb pU9oofSMrSldNuuRjj/S0vQHH859sO0o2wf5ZbrgFwze2D+4/e67H1Oa04nKyvSfDvw6fTxcViUv GBtZeOrhTanUdWvuugsrxFpw+h3g9Ag5Is1+1/ym9Z3AuyX/tHxg/SDwz5KT1pN+ncaq9XO1luXm lZblBStKT+pVeXpqmWmZXdJl+Yv13cDH1n8G1C6nQU+UqnxnoU1vELRCIS0cpuJOH7mmDBP15U5B LFPjRL5d0nIqm+jLU81xs9kUnDWr3YfcXKf7AFQuV3m+zMyrQ5SEvKF4aHVIEXJGf5edRLhhgpfT a+HehJez8NIb/NVhGRntZiwHGNex2CGGJGjYOY6OBVoWsPcvBiEi2FAz2xtT9r+iWI17xkKnl+1x 6pw3O0GOfyJYEsVxZri4wFFx7g13PffUL/rPjS/0hxu7t6RPHLllJw18vOBufqU/OfPm9iaHpa8w /qNvXXWHS5jdFJ7WeP5Ft3z4HvV4mWRtAv/9M8d/q6WYLk9jVBbwx4xUyPMUeLxC2JsXK4h5veH3 Qu+FZe4zj3lPBUw4NM9LhGUOQMLLeFHOOZAolPIZ9xn8eIl0wmzwNevb11nQ4Z6pu1Vjy2fcl6/W gPsMedBBPXgNbJFkIn3Qbbh9+M0bjrqi8LpYILk8QofQI/TBPjAiHBEygmavbMmauVVmM8ZZsklA ZjZBXhZlLhM+mWAx+JsICcaiZ7GYw19itPgtQQ8pMSIImMFgIdMZDJblr7Jwnj6cB/4q03v8NE83 wUEy93lFa4G3APwlWnG1wDZx9Qz+ylla/bJUJjUJNrn2mhyjnekSrWj0z5QgZac/NPfD9Ae09I+d D8+S+cufZa+7vq80n3yJcVMVnH/yfn2AhiorM8w95zR34f1ozPal4K5iEqCPSLphy7D1hcJfFyqw XzskzSxyJ5Zxq6y/Vr2jOmg96PxQ9ZH1I+d/uOOq/1hOWf/r+cJvqlW1qTjLJdZLHJe6LvWs8N/L bfMM+H/s+aH/S2desVrJ5+UH3FT2vMDZKYvx1pEv0a85oOGOanCB2p63uKXiGpnbTMVYcN1Ucve7 ua14D2mYOiT4kVjYOygiEkU1OGUy4cdY3sD7Z5ANOGVJQMkX2TKJAOd5ok2tEIU89zDXO0g24r20 fmZWl2M4kbL31CS9P5A4hBfVXKHARqjCvXCokfw1nvzV+Vy+ZDAl8p3BmauyUpk5Kh5mBIMJkl8M BEvLb7QxV0WUjcoR2Pl5t4RzQfYM7MUvOUan5dhvkeNBGOnZNEe6/i0fQQjsbSY73rqg2TNNLvMW lg570hNFgK3vW4OIWXUmCCB8xezWK8f4Cr9vnDawKSvIbrrUiktOveD9wR1rX57jLpvsLk2/vvVE +l2aPHD976tnxLx/jz14ycUPxumFnUsrrfXR0qJgC7X95iA1La5uv/ycZRsWL1q0GGN6Hwb0HvB/ NZ0tiepCe2FJ4aRCxUMhypkESzXsd3gz+et2HnYspoNSi6uK03uqM1yyYGGX90ZsjwRLIvYtCuYr EIfzFqFnm5iyl7/BxNTsnhmQWtsSAWn2PAQ19QigiAWWl4rFxLKsvJosK49GBUcch4Kdjl5Hv0Pl UJmWabXcMo2OROLHlcP0X5KenSFxoqsGxhnM/yJ4TAsFV+nTAjtG6hO2Cc8JewUFgZlxr/CGoBDw ni+lO8ZFPOjgsNAwiqNwRhezDyMDWY/305JrUAZ9G3KfvU4qf2DAQSFe+oaVG+5CWR154pRkfPXM bqPPeMcG745mq3LLaYCpUtm3dq9ZytJLX9u7YCQ5uSw/tGnpitm0gZVxe9NGxukM6GcsnHPrDs/k aGyK2tlYPocVQLJPTc9X/Iz/EXsDhd4p1RlLuEpOrbfrRUulZapl2DMsvup5Vfyi5IvKPKHQE/QW xoL36495TopflpyMHCs/XplXwqQ6O4eUtEiU9EPQI9cvGZBwSP6yQilW7M8yeTH833iFUqUGNYxr VDAFW+0hi9XmihXboqYy0a/GD4FTVUwszjMZQxtxwsEtGtQxN7dFkl+3Tfucdq/2Da2Cvc5zSMt7 tDFtB/zmXNWdll54G/8qKitiHm+Ht8fb513tVe71Uq+zaubKcWE/9kE3ZilnC8arhFiWIe4bYAGR jXTykgxVOHs+8byLSX72bs3Zkj9c4faFfVEPqXAjiIhlHlruiZ1WrbKSP15ZWFRZGPMr4kUhPy10 Tch2JvmNgdKSYJlfWRrAtSB25rLWJdv5s2pVzbjYh+OYyj9OGHgN9sxl4Ezpz8+ARpVs95//0oaP WOJvF1487c7232MhcP1+zp3JJ6+88kkGfEcjm/wx26rH1jPRv2LOsmiU2vf/jtrL0zPXPPHEmrWP P8724S5w/Y/B9ZPJJ5JzRIvXRWyqEhXPtqlcdgdsxzHzHvzTgvH327Nn37F4vPJrC3l274vXrTXj M88sytl9F947wBH36WbIZOZDzX6tKld3p3vmZOLFLzJLJnq8GEp3WWmp2SzonA5GFYKmQ0tXgzBA D1pXPRFZoTEe76+kHhyVO+s6spMPkxf73QXGo0jJP8DAXk5I4h2nrBhm2x8KppR1KVuBedxqyraz k2rtZji9Qt/CyWb25Td5Slh5bm7oPdJNLZc+cfkcR7yp/V8zk3Hn7EDsgmmXdHUwv7x/ticrHXPk 1Rg67qxQcMYjG9KbZOe+uorJHoHSdR3eSM3idP8ZZbys+oJP+zEXszAXPHyQf4GfOcaikmdo4hjb FSDRqaWSQTJy4+6y1oKzxWfW6sSd/mmvMydBMfEDYOOlOHuM4beLO/DDeXu4RfJ73QZjXRKvgpIi lUGvU76IUiteAVk0SK9SsOE2FRR4rXFrr5W3OovP+6HMbNi+CGPHwFbMfpRcg5URApAtbsyGUOCv +QYrUtZwwKWOUeEEI+GxNhaeeJxpNUrzu++mrx1rZsTLICvUQKetGJuHMDaVyjelx0j+wvyl+Vfm 9+dvsd9a/svy12Jv5r9n/0P5u5X/yP9npelHsVT+HvvO8j2xn+f/suA1u0aR/7D9vvLt+T8s+JH9 8XL1ciz5W8kW39bKu/JVQn6ksr6yhyzIP8/XU6k+lP+vyuP5vNZXgMWi1rdcvNX3mu8T37/8n8d1 Vv+AH84Iivg88TLrrZWv+V+NvwnPPi0RH7E+4nsw/hPrHv/u+BtWDewAhwbbapg5YLCdeXKxSDYO OM6ZnbAumFdjMRFjpYcUVeK3FvJP5Kth2No3FGlJMAPXUOdcFu+DS5hcPK2DZWdKtfNqfDgZ8YrN 3mninHin2BPfWri1aGvxVvdWT55Vwu2F1iK8+2ORzhTCzY4JGyZbi70AvGdBQC3yqR473WM2TPzj mZzrdD80Nd24A4zoG6cXZt7CW+jj9q0J8xbOuCukthqhwluxvSJVcbRCSSpGKrgKPIHkm1ozUkEr KuJ9tm3YCPPbbSlEh2wKj22r7TlsixXMzCfZQjU2SQuA54ZNqqux9TtrbDZrM+sj69d4n9kpJOsv XLzho8gGR9Kbtad/6W68q0b3TPizSRg45vDCzDOSNt9qzc+3+n0+loP6Za2sjPvEuFTEfo+DBTOc NfpK6rRusG6I8/mkEv6C/op4pa46m0ZSS53xvZT9bv/9WEmXEPzaDXffToslP7twGXVapkkQbW/W y5tZZ5xJ+Ycs4PXFYkmnF5JaZ5XPl1+5h/sS8vdzyZnvxe/rOwNu/7L4+xHtMk63zGxlPi3WPfRf JJ97QjJbiJm4VE5VWBfRUdij3txN/wyjP9a07OfYYZw4se8oA7AjzjspDqzAiewAH+aFBuED4cTo JzAv/5/Srj06qjq/33tnMu/MvXPnkZlJ5p2ZPCbzSJgJhATmJpAgUUgQwY1tBCtYESohe1ypnsoo CtuKK8cqqNtdPHt8sdpKEw0vd8Ha0tNVV7tnRbC7JLvlRFdL4XhQl3OaoZ/v797JQ+xfHQ6/3/3N nfvI7/l9fL6fXxW00ao2BkExAclSgYh6PYVQJdkhrIcgcKAPBFwcAhHHsCCkuFbWxsKRaDSGeuO4 yG7J1GHqgJwjdQyU3fwwtI4C78L6LuFeVE8/riXkHkQHaLvNDMSIqqCqoYGh2AGwcyFAHQmOYNou 0imWowxJmpVZjjKC9FmZ5SjXa2WWowy7DzvPcpTrtDLLUSaXIN2f5SizQemEAlFHTRejJMoS7Tqc LypR/DBLL+5SE3ijGMomWwSsxkUJ3WYUOR7DsOrs9mh0fA8cIWH+ouWSHQJUNooEf6+TvYdiRq9w KUjY22yBozxBWP16SuooCVISoKSGkqiCpJmSKDkAmimJkpmxmZIgJQFKatQiPGIBcovVUJKgpJ6S OkpYW/8/koHhJM309GHBA81RVBMbmGZCOEbxR4VRJ4fxNhxVHvvlAIzL+GzbNgyMw/Dwtm0wL5VF n5mD+YwDpCwfGfnyEVuo6/ifz7IsXXrOh8WYVpG2K3wfk4wRphc9y68pvUKriLrCTq14MFmdZsvK L0pn1BWmLnGSpKAHsbrcgNXFyz2gIP58Gg1RnlBIjJkxYMz+lpsG/ZS/BX7Pix9r0qzfIVFDMR2D UAzrwesD1cJXXj4ZKI05X1Aj3+p00ZbL975lrVTV/Jm/ECLDOXDT8rqXuS7dbYpnXORfNLwSeKXp eOBo8HjTe4F3mkwyGStH/TFmTVQi7lhO3hramt4R2pF+PPR4+kDoQHo8NJ62NJvGF4xjBy76NYhj FiBXnDiQgYvNcbl8K+B+QDR3/Ew4MAMsJywV9BnGMSragSWZdY7hpwhLRT4W+GCgw1eU+UlDwW/5 LWFPNF+NYpMrytSm6dQx9bYMLc51dSrEftrRrn07gsjIo/jBs0pNMNWY541d/oilMaK/12LsMuRz uXjcbQFnE1aBN6o8Sgv5mU6C8QSLT3Bhrmyt1a9nvCV7PXrZc4S/pDiC4VA2JIRoaghRe8IUfPNY nZzADZipuTaRT7AbJMYTFxNXE/r1MBEWE3thJqRrEnRNAnca4VJpXDrSIbXTc72J/IF2Xmx/rn28 faL9UnvF++xAx042gU+kXVlUAKK8syvXXlxCUPPrrscReJHalf6bkPzJYK7dt6SgmS3YsCK4wWAS DH6jW9v59qNCiVsC7MIAWwe+wjAlAY0sFwmaNujlRz0B1XpeiQey+SFBEwe72QDRbgx2UFTRG+Bv qSyw6qrCFR6aPjz0Qw/9hR76C9XnD7BHQCWmbs2E7wIJiKBUIHto91K8GjXQge5D9dhogV1DE8Jg eRkx4pWwfKjW7vIyAmt32BswVdbEbfFqczDABYImo89aFeADJn9A5630B3gSOZP0QNyNXFds5SlQ NWPmiRaRNFMSVUR5cTMl1LlHkGvvjevZJfQC+B29AOUYMOdGXdWsPIKcfg3rDJQIN1MiqiiFtqCB IWMOMoYjdHROeaaojmfNfcY3tqzKp77TmP+LtuFltyqLF/e+HY1FA/E8O4zFanuaFUxrRwlNSfhJ 3Z6FzfGmpqbkov6HSnkCSQq7M7Wyr7t0u1pIx1NL1GNVfKZvaYYDcx7zm+V5t1JNSt7+gG7cPB4S mKZXphAiDqEZFY0i2xuTqXQ6c42mV6YQNpuuOaWSDodDoeDse8FqxZiJM2ltnsQ4hZnvIGIgv6yG spc3wJYlSaKlykND02SGaZCJTDIM8arahwg6s38+KAPxA8WeThczfAjhDL7Wuaof6X6E6J2t/ZH6 xxq53MegW40wEYUwuQxqx9pyVitqzfTt6uC8cvPtX7C7b+yum6hpWBvVZm5dtvnGsi6Y9fapjdad zW675YnSTnXRgVqzc0mofv5AaacYXEiKzgKEfX3Bmkrg1sIyez8ssyK0wH9Sbj0sHDGctpy1fyx/ 6D7t/dD3cfWZmk/sXwtXDJWnfKeqBfmC87x70vd5tf5j7+maPwifGCYtn9v/IBs3eO+qeaHiJfOL 1p9WviwaNwl3GDZaNtvvkjd4DK6IzeiH6xJB/WsQ9c8R3GQCjI/HsQ9kkKsS1hwOmbKmIZPOdBTf BKBMX6D/zLlByh0+GCnANUdFM4AKSOCgR2CFGeBTBFYgVwcJadouA4yWmB9zNEz0HpWxT6P60N+/ szT12J6r3K7vX310D697+L1lt/340WNv/vXfvMm/8b3f7nzw3F/ef+H7j37+V7evHhq5Z/1LL8FP eBHWrKdQPwnEzZ9RMlOhy9GphqnU5ezlnMFQbUkIY5FTkTMNH6U+bZhMGULVcBlWhxN6OUVWKxaO QX5BmJ6T1UpLbdNs8ONcfRoWS4oF/fZ1/1pLqJ8ItrhdtclIwP+lb3vA6DW0RGoRfmoH0HGNEsuG lXB/WMeFpXA4PBHWHwrzYX9r9X3gbPBxiS9A2s3MXz4N7vi+5sgwHiBHRl7zF2ruwo5Jsi9KZKKG kYvhHGHfKsBCeUH6Lzb/aaYtmG2lHGgL55q2gvNy9Y3BWEMimmgM1oX4eTEk9aFkCP7slrKBi+ZQ zXuYbY7D59US0zfHMzFU/Bwbl9yUrq5JxdPVyVhFUw3Ol21g5F7UZtQsZlKSgvEiShVk3xTFwaQp SZFlMU0JG5/JAWYXG4yXfc/XGE3ZOIUjkqIqE/A7ar5pDwCY/J33kwxYAtVh2ed46bpnV/2Kr3/t icN9zwqupY+te+aWRa89+NA/bCsdYmMRpjEdY0Lsac6W/vPIOw/fneZ/kHxk4Lt9y2/84bOYN7F7 N+ttDfz2wwg5eNrAy7QuKHF/3iL1SsJr0msOyAX6Wdiiihnd+Rt2cNJdSYdVLTX6azFAJGdei1OA Q9pWaZId4VQm51A6lyGJxHMOu5+tUOBqYDnIGygfc/lyfIPdegTUdBE7mdEMfp+FM4UxoPtN6zGo DXvhfwGDDwd1kKZSR5SLkGm8P7I+MgR6CF/jLLs3ExvI5j0JYZ1MPCsYwwwaC4s5UgYrQD5nYnWq lGzMQCqLkqCTBHusQtQ5YpzkEMi9XHY/QxGlicQlkTThoIRJyg4SKahDINx2m7rMqua4qGqc+z8s 6kLHg091brhVWZRM3BRJvlKcY0RngBPdnuLg4t6WXNOiG7ZsKb0zPR8z2zmtk/sx+3ZgdlkmvKXk zbIh75M9+Tuyu7L7ss+nX0+/nT5t/rXldPOk+ZPmy7avMg4Lb6wwmo2t9dnWzLKGnoyplnrHEIGd CfFsAY2GKTafW9zQwxkyXKy2Pp/pySzb3by/+Qp3lf9jzCJXWHU2c8aWrbK6bAFvyOfPygsfsT6a /ZX1PzL2ybbfLbyS0YURwlNbpZuXtlk4fdJYG/HYfFkhHUbbZykBOccEIV8tWk5kHQglRJEydra1 TT2LnM6O9q+mMsvZ+d4+9TxydvUyuvoYrFh0T8W6JJ/Fw/V1XPdC7RmUg3izLrewQ2ezWI4IW5Tu bNqVzaZ1kfnYVG1H98Vundjd1y2EuvluBYDQbqU133160aIOQ5VSncpVbZfQ3yYiOg5xe0LktN9S F3FZFZhr1o90rgSXyBrFocK9DwHrPSEZJP9y43FhDWSZWnjvrMHAytC88LwshTCizs2RWG6e77o+ 1eObBIucxl1BSMgLzOUL8OP5JGRSyAKQkQsXiOKLKAVZV0b0QhkUST2PfYYdqvMeZ7Yx3Ax1Vj9H gX5LKOmhpJuSpZQwMwBy6gOjyEn1pTzC3g8HWRKhqdoVMwTnTBSWCDhcsXBqFgnVSMDmSrqG5ky6 h1KFAzzQUVhGCZ7qoKfOCV8svzLGDJi2EL4D92F5ciRuTbjPtUmzbja0cxrZSUQcRAw1nzAGTKQl jg42y+qWttzdcW9PqDG89d3+TcO3PXpuYH9BjMpZSC7xFnvm4bWPrYzn8y9+vXr14APvLtvZ4YzY GxdI4fnxBcLfhUJ1DiCHJLGmJv7Eqrt7N4eClfZCb3dvoaGlvqHJ4633+2V/7/LNdy/fUF1jx6mW JV4GweaexFg8pv8lmPReHfGZEPg1ooTi2OgoEY8HDOYvKyIO6xDCX3yuVEMDP2SbsAnUcxUzerwf jDCqVS4RCLo5F9mt+2G5HnIdcp10TbguuSwSvqQviq4KFxHl8Xy+TJQHgxmzmq2U/js5CGMa+kcG sx98wqTQwNd3nuG4Jdkp6HUQLfgAJzgrAgisYIoH/b2EwGYWCyOJP8BMlg0cGnXAtKcvV9245UeP zAvUt4ebS+O3nzjB5qleJr2z5Qw+vo1d7sgSf0cSAZh9L2zn36aTEDchc9IRZq0gauoZ3R6ugTcp UUsUphczWZcsdr99k2VT+KtwRYN9gf2BxDh/RvxUNFAtEX/xNXyiqo13Zl2aK9xHKxWP4mZYRhlB TYRfJEyjaJu9ZKnqA5wLkWCDz2C0oNkOgoH3y2DEZjVFo/DbrAeCYwibGE3wuiJq3Z8EttEMR1S1 ALHe4SjKYJQDu0XjXLF+ksk61C7M8Qp3TqGDrUDqyvM6XNDABLAYO1iVaGHSkInMk0Zde7oJHCpW sVzW+0lIf/s7z1238clkSIWwFToXP75JWzGmOkkyz9TXr7m+dRXPqnzqx52LmhX+J6z6Uf/46D9E /Uf5V8dECVZbmdyJigu0oh9wPEwms7ii59apzcyrlE8wrYJAQa09agYoO6x9sFxyP1O/h2gOCz6o vuFmLMufmjYF5xneglZzq0NyYfsuhwTqTSrDPO0CtTOM1DKIxOCaMwDIfhBWayxdOBhT+qVLCP46 IhgVS9ix+xKqfjeHEPKDryvrnDxgT0ZFCvdj6zL4gvrhojrEVeC+z43GdmCi9VFcpX9q0O+Fgj94 we9jh6T2axHhCAgzqVZm5F7NxoypqiwucGXJlPQwTK5vMLYyZge1i0EEd5LerVSlVNOoHQeSF6IB Twkww+cOl/WP6ekPmjkzb3BFnKJWGMVFLAdAg/JpFZ4fjDs1LjxNnojx+KcqfuwbzH7Cnb+9saoF 6GUfjbdo6eDp0sEAHfJOOP+8q6/wp+whpsPB29opnKAe0ZZuCyJOGXuecfp/R69I6H6vbN4r73UL ZkHUGeI+IaTzxPc7n3adFc7IH7lPxz8TPpU/cU/GpWf5fcI+5zOuZ+L7Egb5pHzSPc59IH/gvshN yBPuq9wl+Qu3lSsuXAfPBjE0F4FU5Yo1CBP0g1vcn3fiP2GlR5etyxF0mnKUT47iCpRZzso+tazs xAEBa4pyUXuUEeEnsuRex/XL/e4DHL23uVGIx9uE1vhyoSf+p47Vnoece1zv89iQXv5n57uuU+5/ iZ9MXOGvOlxwIAvmuCHh44OCI+5JtPPzEr380sRa/h7e/gE/7vzANU4TZtSNV8UfkAC0h6TWwzV5 T9C3MIc2/f0o8jjyw8gF+hLnFZtXI+WTHA75mPDCtDua2NIofLM2fkJ4fsYSWWbykTX1jZyc7DSz GqqYT1oStVth/IBoh2QYi9vjcuM/lwD32VnF7Hah6NIR5R5Oyg4XRg4cPtDVzir1NLZkZ2283pVw 6zycTqhzyryOdkRw6xIuzikBWuQUzOB6v0uRgsFAANR7oGyKY+s0i+eY8DHnED5GiAIG1hAbWhPc JcBLuTAbaXsx1gwcIsR/eRRbf2Gw0TIECeZ8OUxZta6xCMzMtg7m2kHC7Gwsg39Hi1KGkKPx5FGG EovPnNYRzQG1kyCnTjKCnIz6NCbL44qp+x4vPCFOL3gTgMD/BZS2YMHZikRlXUSAsjOKhBkF0ZAs wAUNee6w7C0IXiTlm+HWFNY0zAKopr/kVIOdG70Wj2G9FznrrVjLWO9Fzsp4A1ZGzsoY2qyMnJXx TqyMHOXiKN4KZZazMuQtVkbOfg9mCPZ75KyMd2Vl5FQesbZR8R+tpPFc8xngoRoN87TB3ozLAlOH 0znPWZ5gVOeFUYf55AdvvbqgrdB7ordQW923csdYsf8Gb7bQ+1ZvYX7ryz/n7yvtEk7o2pI0jaTD 3tJxfkVplO/W8AINbfqpTtJTkrCCvIy5JaUTlIe7xC3cd8Vdol4kWBRCxVtyawPfC+4SHwk+FagQ i/TlPiRiEcFQ3D4kQ+Lfij8Rj3Kvi6dEA5EU77bvs/9rsCLDp+0N0r7Ak8Hng2OBd7hTgcmgRQZl QFhsFjvFG8Ut4mvc34sXuYuiOSbmxR3cDvEJ8TecQUT9KPda801SItBh7xFvFm+Rbg5u5jbZ/zx4 H3ef/SB3UPyc+0y8wjmqJWcwxkftC8QecWnwDPdh0CyHzWFL2Bq2hSszcsaZcWXc5oyjgFYuOAuu grvP2ecy9Tn65D73Osc6eZ1znWud2ySKdlRFKiXRs202niBHRCZmF7+xxtp4jb0tEIBRUqVZIOZN IOwFxt9JsRzT9EWkhF8jGr1BSzJwkuxJOlJGyckhiZ2WOd518qSzSElJV/ZtBAPlR2JZTwUDMJ2C Mj0hpVLEZwxTtgsTg12ER+I34NTiXRwECF77HWdKYJIy4W0ScTtk1IPYJ/5pRQpI2A1uMxAju58D S2PJTiKWdSjAS4EdgYmADtxy+8d2QG6AdPUm/0PweBb4j9QosW1ALk75LoO2cxBk6wy0QYYkmjym F2p1hmC+YjZNEKcmOXtVwx8mAqJZ/3S0KkTe2V9rObOQwyt77jBWbCkqtiGi7dw0fToRpwPqrrI8 Uv3YcTXXi+EsFimhaqX1njsPC4DIEnxFahFOnRvDLUVl1uBTcdI0EHm4p7nhuEaEorkIMepmBqLB +E06T/5y6UctuULvcSzjS7+41IXF/K3lhdZ8qXEFDcRSJy3v7xphd11Qr7oLSw38R+rCjvH3P3+m jkWYjjAOsbuOPoVx6OE3KLV3WL62CG5LtUf40DJpEbqs3Z5T3L9Z9We5z6yC7LHbKglmdk6Jgtvf Srsv1HEJS8x6E7fWs9G60YO9dq6RyImsbmbPPq0ngQ/b6lHFO9FidVnAjc1ZPGabNQjj+VdjxObH c9DIv1LMXBCDwrjdDTdWBCSEVsnaZ91qfdy61zphNVqPYc8ZDidwC+d26AzmfjO8ArzZV0XSHWPN WHEewtzlQYah67gwCSgVwARTEL3beHBksxUGvYT6BppDWyXgT7cWqTlpztVy5ga3ktJKQhjDEVqL MPvBocQYeVjFED2FxUuXE+UlNbD2UVt8eBB7bDC1yh3J8xEtHG0+SLn/yN+JrRwAcX5YqCmdYhFD uv732jDPjv1UcLuIdOJ3oEojnDv7lGLYz5Hm0W9+ACvmdLCHOzgnBN7yTkblfYxojyJ1h6ImjCra lYj2JMpzreDqXMAtBUqpBzsDX8ctx36012NfyJWQrPq5VYhIXI1dG9dyN2PPyQHuFuwWOcgezENS UN/BQEi8zlVdN3T1JJdsvWd408bhlRvv7V+d6tq6ZcOKm/4Xpg1XcAplbmRzdHJlYW0KZW5kb2Jq Cjg2IDAgb2JqCjI0OTY0CmVuZG9iago4NyAwIG9iagooTWljcm9zb2Z0IFdvcmQgLSBkcmFmdC1j aGVuLXBjcC1tb2JpbGUtZGVwbG95bWVudC0wMi1yZXBlbm5vLmRvY3gpCmVuZG9iago4OCAwIG9i agooTWFjIE9TIFggMTAuNy41IFF1YXJ0eiBQREZDb250ZXh0KQplbmRvYmoKODkgMCBvYmoKKHJl cGVubm8pCmVuZG9iago5MCAwIG9iagooV29yZCkKZW5kb2JqCjkxIDAgb2JqCihEOjIwMTIxMTA2 MDU0ODAyWjAwJzAwJykKZW5kb2JqCjkyIDAgb2JqCigpCmVuZG9iago5MyAwIG9iagpbIF0KZW5k b2JqCjEgMCBvYmoKPDwgL1RpdGxlIDg3IDAgUiAvQXV0aG9yIDg5IDAgUiAvUHJvZHVjZXIgODgg MCBSIC9DcmVhdG9yIDkwIDAgUiAvQ3JlYXRpb25EYXRlCjkxIDAgUiAvTW9kRGF0ZSA5MSAwIFIg L0tleXdvcmRzIDkyIDAgUiAvQUFQTDpLZXl3b3JkcyA5MyAwIFIgPj4KZW5kb2JqCnhyZWYKMCA5 NAowMDAwMDAwMDAwIDY1NTM1IGYgCjAwMDAxNzU4NDkgMDAwMDAgbiAKMDAwMDAwNjQzMyAwMDAw MCBuIAowMDAwMDc4MTY0IDAwMDAwIG4gCjAwMDAwMDAwMjIgMDAwMDAgbiAKMDAwMDAwNjQxMyAw MDAwMCBuIAowMDAwMDA2NTM3IDAwMDAwIG4gCjAwMDAwMDk0NDEgMDAwMDAgbiAKMDAwMDEyMTEz NiAwMDAwMCBuIAowMDAwMTQ5Nzk0IDAwMDAwIG4gCjAwMDAxMDg1NzQgMDAwMDAgbiAKMDAwMDAw MDAwMCAwMDAwMCBuIAowMDAwMTAyOTc0IDAwMDAwIG4gCjAwMDAwOTQzOTEgMDAwMDAgbiAKMDAw MDAwMDAwMCAwMDAwMCBuIAowMDAwMDc4NTI3IDAwMDAwIG4gCjAwMDAwMDY3MDUgMDAwMDAgbiAK MDAwMDAwOTQyMCAwMDAwMCBuIAowMDAwMDE4MTM0IDAwMDAwIG4gCjAwMDAwMDk0NzcgMDAwMDAg biAKMDAwMDAxODExMyAwMDAwMCBuIAowMDAwMDE4MjQxIDAwMDAwIG4gCjAwMDAwMjgzNjggMDAw MDAgbiAKMDAwMDAxODQxMCAwMDAwMCBuIAowMDAwMDI4MzQ3IDAwMDAwIG4gCjAwMDAwMjg0NzUg MDAwMDAgbiAKMDAwMDAzNjI4NCAwMDAwMCBuIAowMDAwMDI4NjQ0IDAwMDAwIG4gCjAwMDAwMzYy NjMgMDAwMDAgbiAKMDAwMDAzNjM5MSAwMDAwMCBuIAowMDAwMDQyNTU2IDAwMDAwIG4gCjAwMDAw MzY1NjAgMDAwMDAgbiAKMDAwMDA0MjUzNSAwMDAwMCBuIAowMDAwMDQyNjYzIDAwMDAwIG4gCjAw MDAwNTA4MTggMDAwMDAgbiAKMDAwMDA0MjgzMiAwMDAwMCBuIAowMDAwMDUwNzk3IDAwMDAwIG4g CjAwMDAwNTA5MjUgMDAwMDAgbiAKMDAwMDA1ODQxMiAwMDAwMCBuIAowMDAwMDUxMDk0IDAwMDAw IG4gCjAwMDAwNTgzOTEgMDAwMDAgbiAKMDAwMDA1ODUxOSAwMDAwMCBuIAowMDAwMDY1ODk3IDAw MDAwIG4gCjAwMDAwNTg2ODggMDAwMDAgbiAKMDAwMDA2NTg3NiAwMDAwMCBuIAowMDAwMDY2MDA0 IDAwMDAwIG4gCjAwMDAwNzExMTEgMDAwMDAgbiAKMDAwMDA3ODI4NyAwMDAwMCBuIAowMDAwMDY2 MTczIDAwMDAwIG4gCjAwMDAwNzEwOTAgMDAwMDAgbiAKMDAwMDA3MTIxOSAwMDAwMCBuIAowMDAw MDc1MDQyIDAwMDAwIG4gCjAwMDAwNzEzMzIgMDAwMDAgbiAKMDAwMDA3NTAyMSAwMDAwMCBuIAow MDAwMDc1MTUwIDAwMDAwIG4gCjAwMDAwNzcxNTcgMDAwMDAgbiAKMDAwMDA3NTI1MCAwMDAwMCBu IAowMDAwMDc3MTM2IDAwMDAwIG4gCjAwMDAwNzcyNjUgMDAwMDAgbiAKMDAwMDA3Nzk1NiAwMDAw MCBuIAowMDAwMDc3MzY1IDAwMDAwIG4gCjAwMDAwNzc5MzYgMDAwMDAgbiAKMDAwMDA3ODA2NCAw MDAwMCBuIAowMDAwMDc4Mzg0IDAwMDAwIG4gCjAwMDAwNzg0NzYgMDAwMDAgbiAKMDAwMDA3OTUy OSAwMDAwMCBuIAowMDAwMDc4ODkwIDAwMDAwIG4gCjAwMDAwNzk1MDkgMDAwMDAgbiAKMDAwMDA3 OTc2NyAwMDAwMCBuIAowMDAwMDk0MzY5IDAwMDAwIG4gCjAwMDAwOTQ3ODcgMDAwMDAgbiAKMDAw MDA5NTA0OSAwMDAwMCBuIAowMDAwMTAyOTUzIDAwMDAwIG4gCjAwMDAxMDM0NTkgMDAwMDAgbiAK MDAwMDEwMzE0MCAwMDAwMCBuIAowMDAwMTAzNDM5IDAwMDAwIG4gCjAwMDAxMDM3MTQgMDAwMDAg biAKMDAwMDEwODU1MyAwMDAwMCBuIAowMDAwMTA4OTUyIDAwMDAwIG4gCjAwMDAxMDkyMTIgMDAw MDAgbiAKMDAwMDEyMTExNCAwMDAwMCBuIAowMDAwMTIxNjY2IDAwMDAwIG4gCjAwMDAxMjE5MDgg MDAwMDAgbiAKMDAwMDE0OTc3MiAwMDAwMCBuIAowMDAwMTUwMjU5IDAwMDAwIG4gCjAwMDAxNTA1 MDYgMDAwMDAgbiAKMDAwMDE3NTU2MSAwMDAwMCBuIAowMDAwMTc1NTgzIDAwMDAwIG4gCjAwMDAx NzU2NjcgMDAwMDAgbiAKMDAwMDE3NTcxOSAwMDAwMCBuIAowMDAwMTc1NzQ1IDAwMDAwIG4gCjAw MDAxNzU3NjggMDAwMDAgbiAKMDAwMDE3NTgxMCAwMDAwMCBuIAowMDAwMTc1ODI5IDAwMDAwIG4g CnRyYWlsZXIKPDwgL1NpemUgOTQgL1Jvb3QgNjQgMCBSIC9JbmZvIDEgMCBSIC9JRCBbIDwzOWJi NjUwNGNiMGQ5NTUzZTNkYmM2OGIxYjJmZTUzND4KPDM5YmI2NTA0Y2IwZDk1NTNlM2RiYzY4YjFi MmZlNTM0PiBdID4+CnN0YXJ0eHJlZgoxNzYwMDgKJSVFT0YK --_002_45A697A8FFD7CF48BCF2BE7E106F060413895Bxmbrcdx04ciscocom_-- From cheshire@apple.com Mon Nov 5 23:26:26 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A18FF21F875C for ; Mon, 5 Nov 2012 23:26:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F+aMrDHweJNw for ; Mon, 5 Nov 2012 23:26:26 -0800 (PST) Received: from mail-out.apple.com (mail-out.apple.com [17.151.62.49]) by ietfa.amsl.com (Postfix) with ESMTP id 3FAE421F8755 for ; Mon, 5 Nov 2012 23:26:26 -0800 (PST) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from relay11.apple.com ([17.128.113.48]) by mail-out.apple.com (Oracle Communications Messaging Server 7u4-23.01 (7.0.4.23.0) 64bit (built Aug 10 2011)) with ESMTPS id <0MD2002CC1YUV320@mail-out.apple.com> for pcp@ietf.org; Mon, 05 Nov 2012 23:26:00 -0800 (PST) X-AuditID: 11807130-b7fcc6d0000038e5-dc-5098bb8819a4 Received: from jimbu (jimbu.apple.com [17.151.62.37]) (using TLS with cipher RC4-MD5 (RC4-MD5/128 bits)) (Client did not present a certificate) by relay11.apple.com (Apple SCV relay) with SMTP id 4E.66.14565.88BB8905; Mon, 05 Nov 2012 23:26:00 -0800 (PST) Received: from dhcp-44f3.meeting.ietf.org (dhcp-44f3.meeting.ietf.org [130.129.68.243]) by jimbu.apple.com (Oracle Communications Messaging Server 7u4-24.01 (7.0.4.24.0) 64bit (built Nov 17 2011)) with ESMTPSA id <0MD200JVB1ZB7780@jimbu.apple.com> for pcp@ietf.org; Mon, 05 Nov 2012 23:26:00 -0800 (PST) From: Stuart Cheshire Date: Mon, 05 Nov 2012 23:25:59 -0800 Message-id: <8C13E205-F40B-495C-B1FC-4BA495E458CB@apple.com> To: PCP X-Mailer: Apple Mail (2.1085) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpiluLIzCtJLcpLzFFi42IRnG6nqtuxe0aAwc7LhhaTj/1mdWD0WLLk J1MAYxSXTUpqTmZZapG+XQJXxt9Nh9kKlvNUzLrdx9TAeImzi5GTQ0LAROL7sZPsELaYxIV7 69m6GLk4hARamST2vH7KApIQEtjJJLHlThSIzSagJfHi8xU2EJsZyF6/8zgThK0t8eTdBVYQ W1hAWaL5wA5mEJtFQFXi4o4/YHFeARuJix+2MoLYIkDLVj9+yAQRN5RYcn0L1BGyEjvvnGaZ wMg7C8mKWUhWzELSsoCReRWjYFFqTmKloaFeYkFBTqpecn7uJkZQyDQUGuxgXPuT/xCjAAej Eg+vsNiMACHWxLLiytxDjBIczEoivDu2AYV4UxIrq1KL8uOLSnNSiw8xSnOwKInzFvACpQTS E0tSs1NTC1KLYLJMHJxSDYyqM6ycBLUZ5H4waOWYyJvvvqJUnXlOM9NgdrGGq4uY2/dvCSvi Jy9h+X34w97K9V2/9GZplreHGp4odik2ULt4OSzlbDP3oT2dF99f7g5qWRDLzf4xxKH7aUpQ 9c87/xn2Hr3T3Wz24lqR9f37wtPbPP6pduhGHlfzEarbcXaFb/l/rskbW5RYijMSDbWYi4oT AfPS1IgVAgAA Subject: [pcp] draft-ietf-pcp-dhcp-05.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2012 07:26:26 -0000 Some comments on draft-ietf-pcp-dhcp-05.txt I found the document confusing and contradictory. In "Terminology" it says: > name may be structured as DNS qualified name or > be composed of strings such as can be passed to getaddrinfo > (Section 6.1 of [RFC3493]), including address literals, etc. but "Introduction" says: > Motivations for defining PCP option as a name and not an IP address > are discussed in Appendix A. I'm not sure which statement applies. > The domain name(s) is encoded as string. This is ambiguous. What kind of string? It should state explicitly that it's a as defined in RFC 1035. And what can it contain? An FQDN? Does it need to end with a trailing dot? Or does it need to *not* end with a trailing dot, because that would be redundant (but the client MUST add one before passing it to gethostbyname)? Can it contain a dotted-decimal IPv4 literal? An IPv6 literal? In square brackets? Are leading/trailing/interior spaces allowed? Or are they illegal? > When several names are included, a space character is used as separator. If there's more than one, they should be concatenated together as with an RFC 1035 TXT record. On the other hand, if only FQDNs are allowed, not address literals, then instead of s, it would be better to use the already-defined name list format from RFC 3397. > Once each Name conveyed in the OPTION_PCP_SERVER option is validated... How is a name "validated"? Stuart Cheshire From mohamed.boucadair@orange.com Tue Nov 6 03:42:11 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13FBE21F8457 for ; Tue, 6 Nov 2012 03:42:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.248 X-Spam-Level: X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gwh6J8eH3TMK for ; Tue, 6 Nov 2012 03:42:02 -0800 (PST) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 7877121F843C for ; Tue, 6 Nov 2012 03:42:01 -0800 (PST) Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm13.si.francetelecom.fr (ESMTP service) with ESMTP id 470D83243A5; Tue, 6 Nov 2012 12:42:00 +0100 (CET) Received: from PUEXCH71.nanterre.francetelecom.fr (unknown [10.101.44.33]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id 2D1404C063; Tue, 6 Nov 2012 12:42:00 +0100 (CET) Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.233.200.25]) by PUEXCH71.nanterre.francetelecom.fr ([10.101.44.33]) with mapi; Tue, 6 Nov 2012 12:42:00 +0100 From: To: Stuart Cheshire , PCP Date: Tue, 6 Nov 2012 12:41:58 +0100 Thread-Topic: [pcp] draft-ietf-pcp-dhcp-05.txt Thread-Index: Ac278ArKQdiUhvC4RIysPd5aeKdRygAIe1Ig Message-ID: <94C682931C08B048B7A8645303FDC9F36E6B369954@PUEXCB1B.nanterre.francetelecom.fr> References: <8C13E205-F40B-495C-B1FC-4BA495E458CB@apple.com> In-Reply-To: <8C13E205-F40B-495C-B1FC-4BA495E458CB@apple.com> Accept-Language: fr-FR Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: fr-FR Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.11.6.83345 Subject: Re: [pcp] draft-ietf-pcp-dhcp-05.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2012 11:42:11 -0000 Dear Stuart, Please see inline. Cheers Med=20 >-----Message d'origine----- >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De la=20 >part de Stuart Cheshire >Envoy=E9 : mardi 6 novembre 2012 02:26 >=C0 : PCP >Objet : [pcp] draft-ietf-pcp-dhcp-05.txt > >Some comments on draft-ietf-pcp-dhcp-05.txt > >I found the document confusing and contradictory. In=20 >"Terminology" it says: > >> name may be structured as DNS qualified name or >> be composed of strings such as can be passed to getaddrinfo >> (Section 6.1 of [RFC3493]), including address literals, etc. Med: The new text in my local copy is as follows: o Name is a string that can be passed to getaddrinfo (Section 6.1 of [RFC3493]), such as a DNS name, address literals, etc. The name MUST NOT contain spaces or nulls. > >but "Introduction" says: > >> Motivations for defining PCP option as a name and not an=20 >IP address >> are discussed in Appendix A. > >I'm not sure which statement applies. Med: The sentence above is to say the option is not encoded as an IP addres= s but as a name. The definition of the name in the draft allows IP address = literals to be conveyed as string in the name option. What about changing: OLD: Motivations for defining PCP option as a name and not an IP address are discussed in Appendix A. NEW: Motivations for not defining PCP option as an IP address are discussed in Appendix A > >> The domain name(s) is encoded as string. > >This is ambiguous. What kind of string? It should state=20 >explicitly that it's a as defined in RFC 1035. Med: 1035 encoding was abandoned as per the last IETF meeting. I added a re= ference to RFC3629. The new text is: The name is encoded as a UTF-8 [RFC3629] string. When several names are included, a space character is used as separator. > >And what can it contain? An FQDN? Does it need to end with a=20 >trailing dot? Or does it need to *not* end with a trailing=20 >dot, because that would be redundant (but the client MUST add=20 >one before passing it to gethostbyname)? Can it contain a=20 >dotted-decimal IPv4 literal? An IPv6 literal? In square=20 >brackets? Are leading/trailing/interior spaces allowed? Or are=20 >they illegal? Med: See the definition above. > >> When several names are included, a space character is=20 >used as separator. > >If there's more than one, they should be concatenated together=20 >as with an RFC 1035 TXT record. > >On the other hand, if only FQDNs are allowed, not address=20 >literals, then instead of s, it would be=20 >better to use the already-defined name list format from RFC 3397. > >> Once each Name conveyed in the OPTION_PCP_SERVER option=20 >is validated... > >How is a name "validated"? Med: This is detailed in this updated text: If the DHCPv6 client receives an OPTION_PCP_SERVER option from the DHCPv6 server, it extracts the name(s) conveyed in the OPTION_PCP_SERVER option. The DHCPv6 client uses the space character to identify each individual name. A name is considered as valid if it is a legal UTF-8 string which does not contain any spaces or nulls. The DHCPv6 client MUST silently discard non valid names. > >Stuart Cheshire > >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp >= From repenno@cisco.com Tue Nov 6 21:26:04 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D38311E809A for ; Tue, 6 Nov 2012 21:26:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.199 X-Spam-Level: X-Spam-Status: No, score=-10.199 tagged_above=-999 required=5 tests=[AWL=-0.400, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8, SARE_SUB_RAND_LETTRS4=0.799] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RBxKB9YG-YuY for ; Tue, 6 Nov 2012 21:26:03 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) by ietfa.amsl.com (Postfix) with ESMTP id BE29B11E8099 for ; Tue, 6 Nov 2012 21:26:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2700; q=dns/txt; s=iport; t=1352265964; x=1353475564; h=from:to:subject:date:message-id:in-reply-to:mime-version; bh=o6rWUtLVR5zedNCV+tejdP1SV/mA4kTe5Do6YRas5CY=; b=bSCWiRBWHjJYnKKv+/idAWnrO3ASQ4RYvt0l4jsx7JX5qprrY9kP/FVl vBDm5iwlzWq6wOEwQFDmtptx/DlTrlUGBp9YxtuoP7wzQUSfJQK4+a1A+ 3wayo13cUIR0ZQe1/JAmJxd1XunYaPWRVTEY3iWCngdWiwEEaZxtJk8Oe 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AqoIAKPvmVCtJXG//2dsb2JhbABEgknBHIEBB4IgAQQSAXgBDAEdC0slAQEEGxqHaJoAgSugHo8ZglBhA6RUgWuCb4IZ X-IronPort-AV: E=Sophos;i="4.80,726,1344211200"; d="scan'208,217";a="139600591" Received: from rcdn-core2-4.cisco.com ([173.37.113.191]) by rcdn-iport-8.cisco.com with ESMTP; 07 Nov 2012 05:26:03 +0000 Received: from xhc-aln-x10.cisco.com (xhc-aln-x10.cisco.com [173.36.12.84]) by rcdn-core2-4.cisco.com (8.14.5/8.14.5) with ESMTP id qA75Q3oT030006 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 7 Nov 2012 05:26:03 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-aln-x10.cisco.com ([173.36.12.84]) with mapi id 14.02.0318.001; Tue, 6 Nov 2012 23:26:02 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-ietf-pcp-upnp-igd-interworking-04 Thread-Index: Ac28o14Epyd9sM+yRaS2NP4CqQyCpQACg8eAAADVFoA= Date: Wed, 7 Nov 2012 05:26:01 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604139AF6@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604139ACC@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.72.24] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19344.002 x-tm-as-result: No--31.629600-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/alternative; boundary="_000_45A697A8FFD7CF48BCF2BE7E106F0604139AF6xmbrcdx04ciscocom_" MIME-Version: 1.0 Subject: [pcp] Comments on draft-ietf-pcp-upnp-igd-interworking-04 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 05:26:04 -0000 --_000_45A697A8FFD7CF48BCF2BE7E106F0604139AF6xmbrcdx04ciscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable One important comment as I review the draft: Section 5.9 needs to be rewritten taking into account that PCP can not dele= te a mapping on the far NAT if it is considered a LSN (LSN Req-9), but UPnP= Control Points expect to be able to delete mappings. Same for NAT-PMP? It is not clear to me at this point how to reconcile this behavior because= UPnP Control Points will not change their behavior. Therefore if UPnP trie= s to delete a mapping (as it is expected it can) PCP will not be able to= =85This is true if IWF also implements a NAT (NAT444 scenario) or not (DS-= Lite, etc). It seems to me this applies to chained Firewalls as well. Thanks, Reinaldo --_000_45A697A8FFD7CF48BCF2BE7E106F0604139AF6xmbrcdx04ciscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <966ADD2154EEAB4B8EE970151FE0B391@cisco.com> Content-Transfer-Encoding: quoted-printable
One important comment as I review the draft:

Section 5.9 needs to be rewritten taking into account that PCP can not= delete a mapping on the far NAT if it is considered a LSN (LSN Req-9), but= UPnP Control Points expect to be able to delete mappings. Same for NAT-PMP= ? 

It is not clear to me at this point  how to reconcile this behavi= or because UPnP Control Points will not change their behavior. Therefo= re if UPnP tries to delete a mapping (as it is expected it can)  PCP w= ill not be able to=85This is true if IWF also implements a  NAT (NAT444 scenario) or not (DS-Lite, etc).

It seems to me this applies to chained Firewalls as well. 

Thanks,

Reinaldo






--_000_45A697A8FFD7CF48BCF2BE7E106F0604139AF6xmbrcdx04ciscocom_-- From cheshire@apple.com Tue Nov 6 22:20:01 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 515B621F8B73 for ; Tue, 6 Nov 2012 22:20:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tf3jsc+8o3Qq for ; Tue, 6 Nov 2012 22:20:00 -0800 (PST) Received: from mail-out.apple.com (mail-out.apple.com [17.151.62.51]) by ietfa.amsl.com (Postfix) with ESMTP id 779F621F8595 for ; Tue, 6 Nov 2012 22:20:00 -0800 (PST) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; CHARSET=US-ASCII Received: from relay14.apple.com ([17.128.113.52]) by mail-out.apple.com (Oracle Communications Messaging Server 7u4-23.01 (7.0.4.23.0) 64bit (built Aug 10 2011)) with ESMTPS id <0MD3008HLTJY8X00@mail-out.apple.com> for pcp@ietf.org; Tue, 06 Nov 2012 22:19:28 -0800 (PST) X-AuditID: 11807134-b7fe96d000000e2b-6b-5099fd70f4eb Received: from jimbu (jimbu.apple.com [17.151.62.37]) (using TLS with cipher RC4-MD5 (RC4-MD5/128 bits)) (Client did not present a certificate) by relay14.apple.com (Apple SCV relay) with SMTP id 27.64.03627.07DF9905; Tue, 06 Nov 2012 22:19:28 -0800 (PST) Received: from dhcp-44f3.meeting.ietf.org (dhcp-44f3.meeting.ietf.org [130.129.68.243]) by jimbu.apple.com (Oracle Communications Messaging Server 7u4-24.01 (7.0.4.24.0) 64bit (built Nov 17 2011)) with ESMTPSA id <0MD30008ATKFHM70@jimbu.apple.com> for pcp@ietf.org; Tue, 06 Nov 2012 22:19:28 -0800 (PST) From: Stuart Cheshire In-reply-to: <94C682931C08B048B7A8645303FDC9F36E6B369954@PUEXCB1B.nanterre.francetelecom.fr> Date: Tue, 06 Nov 2012 22:19:26 -0800 Message-id: <67C94DFF-503C-47A3-8AC3-837C1CCD17D8@apple.com> References: <8C13E205-F40B-495C-B1FC-4BA495E458CB@apple.com> <94C682931C08B048B7A8645303FDC9F36E6B369954@PUEXCB1B.nanterre.francetelecom.fr> To: mohamed.boucadair@orange.com X-Mailer: Apple Mail (2.1085) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOLMWRmVeSWpSXmKPExsUiON1OVbfg78wAg4PnNCwmH/vN6sDosWTJ T6YAxigum5TUnMyy1CJ9uwSujF0Lz7AXtEhUvOmta2B8LtTFyMkhIWAisWrFaiYIW0ziwr31 bF2MXBxCAq1MEn/mbGWFcHYySbQ8escGUiUsoCtx9eQ8ZhCbV8BQYsn1LewgNrOAlsT6ncfB JrEB2S8+XwGr5xSIk3j8vg2shkVAVeLFhy4WiHoxib/zLjNB2NoST95dYIWYaSPRNbeVEWJx H6NEw6lesCIRAQWJfW39LBCnykrsvHOaZQKjwCwkd8xCcscsJHMXMDKvYhQsSs1JrDQ00Uss KMhJ1UvOz93ECAq+hkKTHYwHf/IfYhTgYFTi4W2KnBkgxJpYVlyZe4hRgoNZSYT3yCegEG9K YmVValF+fFFpTmrxIUZpDhYlcd7bW4BSAumJJanZqakFqUUwWSYOTqkGRr1FU8+X1hrweOf7 VV9XUDuoY1fU6FRqqxt886F1gGWO8YV1Hk7aU927ed+LRUW+adsYzqxSUntlcVOGK8uv/5oR XwOs/5Q9L3mrt+e08iTBDWl3EhP5k67opSWoz5iofaO1RXVVX84s00M3bEstJ7HssFXcarrk ccseGf/ArDgzG+OVh/8psRRnJBpqMRcVJwIAU6D8kToCAAA= Cc: PCP Subject: Re: [pcp] draft-ietf-pcp-dhcp-05.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 06:20:01 -0000 On 6 Nov 2012, at 3:41, mohamed.boucadair@orange.com wrote: > Med: The new text in my local copy is as follows: > > o Name is a string that can be passed to getaddrinfo (Section 6.1 of > [RFC3493]), such as a DNS name, address literals, etc. The name > MUST NOT contain spaces or nulls. It would be helpful to spell out exactly what strings are legal, for example: Dotted decimal IPv4 addresses - e.g. "10.1.2.3" IPv6 addresses in RFC 2373 text representation format - e.g. "FE80::A" - IPv6 addresses containing a scope identifier ("%en0") MUST be silently ignored Fully-Qualified Domain Names (ending with a dot) - e.g. "natgateway-7.isp.net." - Domain Names not ending in a trailing dot MUST be silently ignored >> Motivations for defining PCP option as a name and not an IP address >> are discussed in Appendix A. > > Med: The sentence above is to say the option is not encoded as an IP address but as a name. When I write the IP address "10.1.2.3" using ASCII characters it's still an IP address, not a name. Calling "10.1.2.3" a "name" is confusing to most readers. Call it an address. > What about changing: > > OLD: > > Motivations for defining PCP option as a name and not an IP address > are discussed in Appendix A. > > NEW: > > Motivations for not defining PCP option as an IP address > are discussed in Appendix A How about: Motivations for expressing the PCP option as a textual string rather than a 32- or 128-bit binary address are discussed in Appendix A. > Med: 1035 encoding was abandoned as per the last IETF meeting. I added a reference to RFC3629. The new text is: > > The name is encoded as a UTF-8 [RFC3629] string. When several > names are included, a space character is used as separator. I suggest Net-Unicode [RFC5198]. Is the string null-terminated like a conventional C string? Is there any precedent in DHCP for using space-separated strings in an option? I'm not aware of any DHCP precedent. I'd suggest specifying that it's multiple null-terminated Net-Unicode strings packed into the option. Alternatively, define the option to hold exactly one string (no need for null-terminator) and allow the DHCP message to contain multiple occurrences of the option if multiple PCP server strings are being specified. As a final observation, most existing DHCP options pass an IP address to the client rather than a name string, on the basis that the DHCP server is typically better connected than the DHCP client, so the server can look up a host name faster than the client can, and passing the resulting IP address to the client typically takes less space in the packet than the host name would have. The DHCP server configuration still uses a host name, but the DHCP server resolves it on demand and passes the resulting address(es) to the client in the DHCP OFFER. Is there a reason that the PCP DHCP option needs to be different? Stuart Cheshire From internet-drafts@ietf.org Wed Nov 7 07:09:47 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8035121F8C0A; Wed, 7 Nov 2012 07:09:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.2 X-Spam-Level: X-Spam-Status: No, score=-102.2 tagged_above=-999 required=5 tests=[AWL=-0.400, BAYES_00=-2.599, SARE_SUB_RAND_LETTRS4=0.799, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XJ0CMpKGv7o7; Wed, 7 Nov 2012 07:09:47 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24FC821F8C02; Wed, 7 Nov 2012 07:09:47 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.35 Message-ID: <20121107150947.26573.70596.idtracker@ietfa.amsl.com> Date: Wed, 07 Nov 2012 07:09:47 -0800 Cc: pcp@ietf.org Subject: [pcp] I-D Action: draft-ietf-pcp-upnp-igd-interworking-05.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 15:09:47 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Port Control Protocol Working Group of th= e IETF. Title : Universal Plug and Play (UPnP) Internet Gateway Device (= IGD)-Port Control Protocol (PCP) Interworking Function Author(s) : Mohamed Boucadair Francis Dupont Reinaldo Penno Dan Wing Filename : draft-ietf-pcp-upnp-igd-interworking-05.txt Pages : 24 Date : 2012-11-07 Abstract: This document specifies the behavior of the UPnP IGD (Internet Gateway Device)/PCP Interworking Function. A UPnP IGD-PCP Interworking Function (IGD-PCP IWF) is required to be embedded in CP (Customer Premises) routers to allow for transparent NAT control in environments where UPnP IGD is used on the LAN side and PCP on the external side of the CP router. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-pcp-upnp-igd-interworking There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-pcp-upnp-igd-interworking-05 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-pcp-upnp-igd-interworking-05 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From hartmans@painless-security.com Wed Nov 7 08:09:35 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B4E521F8C41 for ; Wed, 7 Nov 2012 08:09:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x17hhEbVWPkw for ; Wed, 7 Nov 2012 08:09:34 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 2C09421F8C3C for ; Wed, 7 Nov 2012 08:09:34 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-459e.meeting.ietf.org [130.129.69.158]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 8B6DA2026C for ; Wed, 7 Nov 2012 11:08:37 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id E1874412A; Wed, 7 Nov 2012 11:09:31 -0500 (EST) From: Sam Hartman To: pcp@ietf.org Date: Wed, 07 Nov 2012 11:09:31 -0500 Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [pcp] Agenda: When is the authentication discussion X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 16:09:35 -0000 so, I've seen some mail and discussion that perhaps the authentication discussion is moving to Friday. What's the status of that and when will be having it? I'm trying to balance PCP attendance against SAAG attendance. From internet-drafts@ietf.org Wed Nov 7 08:24:47 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF8F921F8C5D; Wed, 7 Nov 2012 08:24:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.558 X-Spam-Level: X-Spam-Status: No, score=-102.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f9xLEotElUdN; Wed, 7 Nov 2012 08:24:46 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 819F521F8C5E; Wed, 7 Nov 2012 08:24:46 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.35 Message-ID: <20121107162446.9396.12250.idtracker@ietfa.amsl.com> Date: Wed, 07 Nov 2012 08:24:46 -0800 Cc: pcp@ietf.org Subject: [pcp] I-D Action: draft-ietf-pcp-base-29.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 16:24:47 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Port Control Protocol Working Group of th= e IETF. Title : Port Control Protocol (PCP) Author(s) : Dan Wing Stuart Cheshire Mohamed Boucadair Reinaldo Penno Paul Selkirk Filename : draft-ietf-pcp-base-29.txt Pages : 107 Date : 2012-11-07 Abstract: The Port Control Protocol allows an IPv6 or IPv4 host to control how incoming IPv6 or IPv4 packets are translated and forwarded by a network address translator (NAT) or simple firewall, and also allows a host to optimize its outgoing NAT keepalive messages. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-pcp-base There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-pcp-base-29 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-pcp-base-29 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From repenno@cisco.com Wed Nov 7 08:28:43 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7435D21F8BE2 for ; Wed, 7 Nov 2012 08:28:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.499 X-Spam-Level: X-Spam-Status: No, score=-10.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x+MnhjgTb5+e for ; Wed, 7 Nov 2012 08:28:42 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id B49A521F8BCE for ; Wed, 7 Nov 2012 08:28:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=765; q=dns/txt; s=iport; t=1352305722; x=1353515322; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=6UWWiqjq9zkF1co6XzboaXaTiVyXSoWlZjxXf/apnlI=; b=ZzLdOZy8Y4bwKrGcykAEy5x3mfYct33IWBtguqPGLX/MQkxs0uEvrqCF kiYK0Y9+R6v8f9IswgcjmjEvRiF5QGfEp6kJLW178lfsJibn1HTRDR7gi WtA8oeRbiczC6hHCEJRJZGsV6Nf19V42/uMnL0QARMKjFsLMtK/Wy8qP7 E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AvsIAACLmlCtJV2Y/2dsb2JhbABEhVG+D4EBB4IeAQEBBBIBeAEZBAEBC1YdCAEBBBsah2gLmwaBK6AiBIwNhWZhA4glnC+Ba4Jvghk X-IronPort-AV: E=Sophos;i="4.80,730,1344211200"; d="scan'208";a="139572828" Received: from rcdn-core-1.cisco.com ([173.37.93.152]) by rcdn-iport-1.cisco.com with ESMTP; 07 Nov 2012 16:28:42 +0000 Received: from xhc-rcd-x12.cisco.com (xhc-rcd-x12.cisco.com [173.37.183.86]) by rcdn-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id qA7GSg1e006312 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 7 Nov 2012 16:28:42 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x12.cisco.com ([173.37.183.86]) with mapi id 14.02.0318.001; Wed, 7 Nov 2012 10:28:42 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: PCP WG meeting update Thread-Index: Ac28kwYS8eEpfzSRTy6/WW2NI0LX4AAb5fBgAAKtBYA= Date: Wed, 7 Nov 2012 16:28:41 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604139EEC@xmb-rcd-x04.cisco.com> In-Reply-To: <9B57C850BB53634CACEC56EF4853FF653B9074B2@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.82.124] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19346.005 x-tm-as-result: No--28.659300-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [pcp] PCP WG meeting update X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 16:28:43 -0000 From: Dave Thaler=20 Sent: Tuesday, November 6, 2012 9:53 PM To: PCP Subject: WG meeting update =20 Friday=B9s PCP meeting is moved to Salon C (was Salon B). This is so we ha= ve more time that day since we had more requests for time than we could fit into 3 hours this week. =20 At the request of SAAG, the PCP authentication discussion will be on Friday, as Thursday=B9s slot is at the same time as the saag meeting. =20 See=20 https://datatracker.ietf.org/meeting/85/agenda/pcp/ for the latest agenda. =20 If you asked for a slot and haven=B9t submitted slides yet, please do so by Wednesday night if possible. Thanks to those who already sent in their slides. =20 -Dave From dwing@cisco.com Wed Nov 7 08:29:28 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7605921F8B96 for ; Wed, 7 Nov 2012 08:29:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.558 X-Spam-Level: X-Spam-Status: No, score=-110.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yGZHMG1w9qj1 for ; Wed, 7 Nov 2012 08:29:28 -0800 (PST) Received: from mtv-iport-2.cisco.com (mtv-iport-2.cisco.com [173.36.130.13]) by ietfa.amsl.com (Postfix) with ESMTP id 1D25921F8B4D for ; Wed, 7 Nov 2012 08:29:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=543; q=dns/txt; s=iport; t=1352305768; x=1353515368; h=from:to:subject:date:message-id:mime-version: content-transfer-encoding; bh=apSeVmJLCzAESKoEsw52VqXYFvbWKSxAzhkqs5NracM=; b=Ff7HGwhK+dJLC0XDg11DgQTW0ji8DiZcRMd4hTHmdYgHSeS5VLVkhj4m ySZ2YMRQ/8YDQM0EibTb9r8aRDfbGCuF3Vrqwg5o25BPRG2ixXA1shayK zj+xWp4Y2NrDX6kzL8UD48a4jiYOEUKWn7wNOsD24hrBKBt8b5asggenU w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhoFAAKMmlCrRDoI/2dsb2JhbABEhVG+D4EIgiUIAggBJ0wFaD8BBB4FEodnDJsIgSugJo8vgyUDiFqFGogHgRyNPYFrgw0 X-IronPort-AV: E=Sophos;i="4.80,730,1344211200"; d="scan'208";a="63430915" Received: from mtv-core-3.cisco.com ([171.68.58.8]) by mtv-iport-2.cisco.com with ESMTP; 07 Nov 2012 16:29:06 +0000 Received: from DWINGWS01 ([10.21.74.136]) by mtv-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA7GT5lL016066 for ; Wed, 7 Nov 2012 16:29:05 GMT From: "Dan Wing" To: Date: Wed, 7 Nov 2012 11:29:05 -0500 Message-ID: <0e4b01cdbd05$01952490$04bf6db0$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: Ac29BGt4IEgMHpFsQUi4tVBXxgcNQQ== Content-Language: en-us Subject: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 16:29:28 -0000 Reinaldo pointed out that -28 still had a latent paragraph suggesting a PCP client could clear out old mappings. With the Mapping Nonce change made back in -27, the PCP client can't do that except in the unlikely scenario where it is the same PCP client restarting (with same Mapping Nonce) and with the same IP address. I just submitted -29, which removes that paragraph. http://tools.ietf.org/html/draft-ietf-pcp-base-29 http://tools.ietf.org/rfcdiff?url2=draft-ietf-pcp-base-29.txt There were no other WGLC comments. -d From hartmans@painless-security.com Wed Nov 7 10:22:01 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 062D421F8C95 for ; Wed, 7 Nov 2012 10:22:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qajnSzKi-+Ud for ; Wed, 7 Nov 2012 10:22:00 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 5811821F8C96 for ; Wed, 7 Nov 2012 10:21:58 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-917b.meeting.ietf.org [130.129.9.123]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id AC50E2026C; Wed, 7 Nov 2012 13:21:01 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 08597412A; Wed, 7 Nov 2012 13:21:56 -0500 (EST) From: Sam Hartman To: "Dan Wing" References: <0e4b01cdbd05$01952490$04bf6db0$@cisco.com> Date: Wed, 07 Nov 2012 13:21:55 -0500 In-Reply-To: <0e4b01cdbd05$01952490$04bf6db0$@cisco.com> (Dan Wing's message of "Wed, 7 Nov 2012 11:29:05 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 18:22:01 -0000 >>>>> "Dan" == Dan Wing writes: Dan> Reinaldo pointed out that -28 still had a latent paragraph Dan> suggesting a PCP client could clear out old mappings. With the Dan> Mapping Nonce change made back in -27, the PCP client can't do Dan> that except in the unlikely scenario where it is the same PCP Dan> client restarting (with same Mapping Nonce) and with the same Dan> IP address. I just submitted -29, which removes that Dan> paragraph. I thought we were not going to take this out because in the advanced authentication case or even with a server that implements a security mechanism for unauthenticated use, a server could permit a client to clear mappings. --Sam From repenno@cisco.com Wed Nov 7 11:04:34 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4D5C21F8B96 for ; Wed, 7 Nov 2012 11:04:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.513 X-Spam-Level: X-Spam-Status: No, score=-10.513 tagged_above=-999 required=5 tests=[AWL=0.086, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BprSgarv4LWc for ; Wed, 7 Nov 2012 11:04:34 -0800 (PST) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) by ietfa.amsl.com (Postfix) with ESMTP id 7E8D821F8B8E for ; Wed, 7 Nov 2012 11:04:28 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1202; q=dns/txt; s=iport; t=1352315068; x=1353524668; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=MYDKII1qTORL+kAYlGL5PFB0EBEe6DQzicJPJTbApr4=; b=JkA/LvQ76z8wZQ4Tgr/0JXId8pHIeUa4MTs+u4Dj+AfEKXHPrlDz/smY G7RNv6bya3RbKumUFzCFo5A4c/ypxFK7VfATyAeL+oTEWA2HpRbBT6YeL qzegMugry6BL+fw1NOGNQ8iKwnP/sWCTKXmrSEYZHWEW4AiCWhOwUfehv A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAPavmlCtJV2Z/2dsb2JhbABEw2iBCIIgAQQBAQEPASc0CxIBCCIUNwslAQEEAQ0FCBqHaAucLKA0BJFzYQOkVIFrgm+CGQ X-IronPort-AV: E=Sophos;i="4.80,731,1344211200"; d="scan'208";a="139884188" Received: from rcdn-core-2.cisco.com ([173.37.93.153]) by rcdn-iport-3.cisco.com with ESMTP; 07 Nov 2012 19:04:28 +0000 Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qA7J4ROE021429 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 7 Nov 2012 19:04:27 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.02.0318.001; Wed, 7 Nov 2012 13:04:27 -0600 From: "Reinaldo Penno (repenno)" To: Sam Hartman , "Dan Wing (dwing)" Thread-Topic: [pcp] pcp-base-29 Thread-Index: Ac29BGt4IEgMHpFsQUi4tVBXxgcNQQAEHVpyAAONXgA= Date: Wed, 7 Nov 2012 19:04:26 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413A23A@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.113.90] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19346.005 x-tm-as-result: No--40.082500-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: <46DA5D714CA6A043B5EC3F94EB63B39A@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 19:04:34 -0000 Hello Sam, The scenario as written in -28 is the following: - end hosts gets a new address when joins the network and want to clear old mappings associated with this address. Is there a way to do that? Thanks, Reinaldo On 11/7/12 1:21 PM, "Sam Hartman" wrote: >>>>>> "Dan" =3D=3D Dan Wing writes: > > Dan> Reinaldo pointed out that -28 still had a latent paragraph > Dan> suggesting a PCP client could clear out old mappings. With the > Dan> Mapping Nonce change made back in -27, the PCP client can't do > Dan> that except in the unlikely scenario where it is the same PCP > Dan> client restarting (with same Mapping Nonce) and with the same > Dan> IP address. I just submitted -29, which removes that > Dan> paragraph. > >I thought we were not going to take this out because in the advanced >authentication case or even with a server that implements a security >mechanism for unauthenticated use, a server could permit a client to >clear mappings. > >--Sam >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp From hartmans@painless-security.com Wed Nov 7 11:20:35 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C62821F8BC2 for ; Wed, 7 Nov 2012 11:20:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3sebLaWuilAi for ; Wed, 7 Nov 2012 11:20:35 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 1443B21F8BAB for ; Wed, 7 Nov 2012 11:20:35 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-917b.meeting.ietf.org [130.129.9.123]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 972322026C; Wed, 7 Nov 2012 14:19:38 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id D7C95412A; Wed, 7 Nov 2012 14:20:32 -0500 (EST) From: Sam Hartman To: "Reinaldo Penno \(repenno\)" References: <45A697A8FFD7CF48BCF2BE7E106F060413A23A@xmb-rcd-x04.cisco.com> Date: Wed, 07 Nov 2012 14:20:32 -0500 In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F060413A23A@xmb-rcd-x04.cisco.com> (Reinaldo Penno's message of "Wed, 7 Nov 2012 19:04:26 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 19:20:35 -0000 >>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: Reinaldo> Hello Sam, The scenario as written in -28 is the Reinaldo> following: Reinaldo> - end hosts gets a new address when joins the network and Reinaldo> want to clear old mappings associated with this address. Sure. Two ways: 1) it's an authenticated request it uses to do that. 2) The server implements authentication and thus falls under the advanced threat model. Its policy permits an unauthenticated flush request. --Sam From repenno@cisco.com Wed Nov 7 11:23:01 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21D3621F8C94 for ; Wed, 7 Nov 2012 11:23:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.524 X-Spam-Level: X-Spam-Status: No, score=-10.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x-MBWsWBH3Kq for ; Wed, 7 Nov 2012 11:23:00 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA5721F8B7A for ; Wed, 7 Nov 2012 11:23:00 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=745; q=dns/txt; s=iport; t=1352316180; x=1353525780; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=aj2zfR+X8jk8QP0NFUKy+0X0ClaZexYK5vNxCJ1RG68=; b=Mz5YhEOnCSXfd3wwhZcsEBth6IGQv0vZYveZCrFI8Awyw+H0DGCpAxq8 rVNT0sh43Ujq6aFTmeOwU2e0ws7Xal31jIsmeLDIOLAuMYHUjua9uZNDb xzqEE1jNZ0pUi7LfyY/AJSRBeYujJvatk7OHyprSM6LMCuYdRY8MJyOI1 M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AhoFAF20mlCtJV2c/2dsb2JhbABEhVG+GYEIgiABBBIBJz8SAQgiFEIlAQEEDgUIGodonDugOJFzYQOkVIFrgm+CGQ X-IronPort-AV: E=Sophos;i="4.80,731,1344211200"; d="scan'208";a="139640878" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-1.cisco.com with ESMTP; 07 Nov 2012 19:23:00 +0000 Received: from xhc-rcd-x03.cisco.com (xhc-rcd-x03.cisco.com [173.37.183.77]) by rcdn-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id qA7JN0Ic002992 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 7 Nov 2012 19:23:00 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x03.cisco.com ([173.37.183.77]) with mapi id 14.02.0318.001; Wed, 7 Nov 2012 13:22:59 -0600 From: "Reinaldo Penno (repenno)" To: Sam Hartman Thread-Topic: [pcp] pcp-base-29 Thread-Index: Ac29BGt4IEgMHpFsQUi4tVBXxgcNQQAEHVpyAAONXgD///PCKYAAEWqA Date: Wed, 7 Nov 2012 19:22:59 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413A27E@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.113.90] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19346.005 x-tm-as-result: No--32.290900-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: <22A28E9FBE73E24DB27EDD28E01FB9E5@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 19:23:01 -0000 On 11/7/12 2:20 PM, "Sam Hartman" wrote: >>>>>> "Reinaldo" =3D=3D Reinaldo Penno (repenno) write= s: > > Reinaldo> Hello Sam, The scenario as written in -28 is the > Reinaldo> following: > > Reinaldo> - end hosts gets a new address when joins the network and > Reinaldo> want to clear old mappings associated with this address. > >Sure. Two ways: > >1) it's an authenticated request it uses to do that. The nonce and IP addresses would not match, can these checks be relaxed? > >2) The server implements authentication and thus falls under the >advanced threat model. Its policy permits an unauthenticated flush >request. See above. > >--Sam From hartmans@painless-security.com Wed Nov 7 11:51:02 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC74821F8C8E for ; Wed, 7 Nov 2012 11:51:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RhfD7Ykp30Vl for ; Wed, 7 Nov 2012 11:51:02 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 31E1F21F8C8C for ; Wed, 7 Nov 2012 11:51:02 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-9178.meeting.ietf.org [130.129.9.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id B16B12026C; Wed, 7 Nov 2012 14:50:05 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 4BB42412A; Wed, 7 Nov 2012 14:51:00 -0500 (EST) From: Sam Hartman To: "Reinaldo Penno \(repenno\)" References: <45A697A8FFD7CF48BCF2BE7E106F060413A27E@xmb-rcd-x04.cisco.com> Date: Wed, 07 Nov 2012 14:51:00 -0500 In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F060413A27E@xmb-rcd-x04.cisco.com> (Reinaldo Penno's message of "Wed, 7 Nov 2012 19:22:59 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 19:51:02 -0000 >>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: Reinaldo> On 11/7/12 2:20 PM, "Sam Hartman" wrote: >>>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: >> Reinaldo> Hello Sam, The scenario as written in -28 is the Reinaldo> following: >> Reinaldo> - end hosts gets a new address when joins the network and Reinaldo> want to clear old mappings associated with this address. >> >> Sure. Two ways: >> >> 1) it's an authenticated request it uses to do that. Reinaldo> The nonce and IP addresses would not match, can these Reinaldo> checks be relaxed? We could permiwt nonce check to be relaxed in the advanced threat model. I'm OK with this text being dropped. Up to the WG though. From repenno@cisco.com Wed Nov 7 12:21:36 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A283521F8CC3 for ; Wed, 7 Nov 2012 12:21:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.532 X-Spam-Level: X-Spam-Status: No, score=-10.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9Das9EpjBDXf for ; Wed, 7 Nov 2012 12:21:36 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 78DDB21F8CB5 for ; Wed, 7 Nov 2012 12:21:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2083; q=dns/txt; s=iport; t=1352319690; x=1353529290; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=UDqbaXcINwOvgOEcjdd2d8wv7p4iHvOc6vNugHeglQ4=; b=amzEdKlU2yTmRSptiy6dwKmt06dFwFOWFLPA3FY4mczvzGzEb2LlJmRE JFvKwvLnunwlc/o0qQ62c7PbN7cD1FDVM5hi35qSifB7eCQQfGcg9n3a5 ISI8pIuAayk3IVZIUAWu3CCpt7Yofo4SBKQYNb7uNQ9aWp2wyc6gTWE3i w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EABvCmlCtJV2a/2dsb2JhbABEw2qBCIIeAQEBBAEBAQ8BJzQLDAYBCA4DBAEBAQoUCS4LFAkIAgQBDQUIGodoC5wwoC4EjA2FZmEDpFSBa4Jvghk X-IronPort-AV: E=Sophos;i="4.80,732,1344211200"; d="scan'208";a="139660091" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP; 07 Nov 2012 20:21:30 +0000 Received: from xhc-rcd-x07.cisco.com (xhc-rcd-x07.cisco.com [173.37.183.81]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA7KLUwF005679 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 7 Nov 2012 20:21:30 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x07.cisco.com ([173.37.183.81]) with mapi id 14.02.0318.001; Wed, 7 Nov 2012 14:21:29 -0600 From: "Reinaldo Penno (repenno)" To: Dave Thaler , Sam Hartman Thread-Topic: [pcp] pcp-base-29 Thread-Index: Ac29BGt4IEgMHpFsQUi4tVBXxgcNQQAEHVpyAAONXgD///PCKYAAEWqAgABe4oD//7F2gA== Date: Wed, 7 Nov 2012 20:21:28 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413A332@xmb-rcd-x04.cisco.com> In-Reply-To: <9B57C850BB53634CACEC56EF4853FF653B908790@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.72.3] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19346.005 x-tm-as-result: No--44.454800-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: <926FD5799123E0428CA6DFD21B1D61A4@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 20:21:37 -0000 I'm not sure how can we conclude from this text that the nonce is relaxed for Advanced. Couldn't one argue that since the "If.." precedes Internal address, that means that internal address does need to match in advanced thread model? I suggest we just add explicit text about this case if WG agrees. On 11/7/12 3:02 PM, "Dave Thaler" wrote: >The nonce is only used in the basic model. >In the advanced model, the nonce value is ignored. > >This was made clear in a recent change on page 46: >> If operating in the Simple Threat Model (Section 18.1), and the >> Internal port, Protocol, and Internal Address match an existing >> explicit dynamic mapping, but the Mapping Nonce does not match, the > >That is, the "If..." condition precedes the check for nonce match. > >-Dave > >> -----Original Message----- >> From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of >> Reinaldo Penno (repenno) >> Sent: Wednesday, November 7, 2012 2:23 PM >> To: Sam Hartman >> Cc: pcp@ietf.org >> Subject: Re: [pcp] pcp-base-29 >>=20 >>=20 >>=20 >> On 11/7/12 2:20 PM, "Sam Hartman" >> wrote: >>=20 >> >>>>>> "Reinaldo" =3D=3D Reinaldo Penno (repenno) >> writes: >> > >> > Reinaldo> Hello Sam, The scenario as written in -28 is the >> > Reinaldo> following: >> > >> > Reinaldo> - end hosts gets a new address when joins the network and >> > Reinaldo> want to clear old mappings associated with this address. >> > >> >Sure. Two ways: >> > >> >1) it's an authenticated request it uses to do that. >>=20 >> The nonce and IP addresses would not match, can these checks be relaxed? >>=20 >> > >> >2) The server implements authentication and thus falls under the >> >advanced threat model. Its policy permits an unauthenticated flush >> >request. >>=20 >>=20 >> See above. >>=20 >> > >> >--Sam >>=20 >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp From hartmans@painless-security.com Wed Nov 7 13:50:15 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A21B421F8C80 for ; Wed, 7 Nov 2012 13:50:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zfjg7aUdKBMD for ; Wed, 7 Nov 2012 13:50:12 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id F2C4A21F8B67 for ; Wed, 7 Nov 2012 13:50:11 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (dhcp-9178.meeting.ietf.org [130.129.9.120]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id E963E2026C; Wed, 7 Nov 2012 16:49:13 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 91ABA412A; Wed, 7 Nov 2012 16:50:08 -0500 (EST) From: Sam Hartman To: Dave Thaler References: <9B57C850BB53634CACEC56EF4853FF653B908790@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> <45A697A8FFD7CF48BCF2BE7E106F060413A332@xmb-rcd-x04.cisco.com> <9B57C850BB53634CACEC56EF4853FF653B90945E@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> Date: Wed, 07 Nov 2012 16:50:08 -0500 In-Reply-To: <9B57C850BB53634CACEC56EF4853FF653B90945E@TK5EX14MBXW603.wingroup.windeploy.ntdev.microsoft.com> (Dave Thaler's message of "Wed, 7 Nov 2012 21:44:41 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] pcp-base-29 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2012 21:50:15 -0000 >>>>> "Dave" == Dave Thaler writes: Dave> The draft says nothing about what the rule is under the Dave> advanced model. I think we said that could be specified in Dave> the pcp-auth spec eventually, since we might not know enough Dave> now to know exactly what the right rule is under that model Dave> until we know all the security properties of the solution. My personal hope is that gets left to the implementation. From repenno@cisco.com Fri Nov 9 06:12:57 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 577DD21F86B6 for ; Fri, 9 Nov 2012 06:12:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.465 X-Spam-Level: X-Spam-Status: No, score=-10.465 tagged_above=-999 required=5 tests=[AWL=0.133, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAgYcCFrMZAA for ; Fri, 9 Nov 2012 06:12:55 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id E0DA421F86AA for ; Fri, 9 Nov 2012 06:12:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7043; q=dns/txt; s=iport; t=1352470374; x=1353679974; h=from:to:subject:date:message-id:mime-version; bh=DJ9ZJMx8h8LokVWoLTcs2jukSsy8atBZ+WfewPSmtR0=; b=MDLzaTtzhVzxCG8tUPgTMT/WtxWf3kSdtVOE3EkdFwEQjIhGbGn5gB2G MPnMNDXKfSNoUB0R4URl4kRyrYc1iK2v9iBKqSxxp6RJMzOZI8/5tnXhP bgVIEMVBVJfB6ZZTYC89V4KzrwAPOojTD+KjMMV9wy2wqNdcVqfIVztQw c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EAP0OnVCtJV2a/2dsb2JhbABEgknBAYEIgh4BAQEEEgEaXgEIDgMDAQILHTkUCQoEARIIGodonSKgEowShWdhA6RTgWuCb4IZ X-IronPort-AV: E=McAfee;i="5400,1158,6890"; a="140355965" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP; 09 Nov 2012 14:12:35 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qA9ECZ8m020140 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 9 Nov 2012 14:12:35 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.02.0318.001; Fri, 9 Nov 2012 08:12:35 -0600 From: "Reinaldo Penno (repenno)" To: Dave Thaler , "pcp@ietf.org" Thread-Topic: Proposed text to add to pcp-base Thread-Index: AQHNvoRDBoEgLPV7uE6R/D61z6vSZA== Date: Fri, 9 Nov 2012 14:12:34 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413B47B@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.126.82] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19350.005 x-tm-as-result: No--33.359000-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: multipart/alternative; boundary="_000_45A697A8FFD7CF48BCF2BE7E106F060413B47Bxmbrcdx04ciscocom_" MIME-Version: 1.0 Subject: Re: [pcp] Proposed text to add to pcp-base X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2012 14:12:57 -0000 --_000_45A697A8FFD7CF48BCF2BE7E106F060413B47Bxmbrcdx04ciscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable From: Dave Thaler > Date: Fri, 9 Nov 2012 03:41:12 +0000 To: "pcp@ietf.org" > Subject: Proposed text to add to pcp-base Here=92s the text Dan came up with to address the keepalive incentive issue which the WG agreed to add text about. In Section 12.3, "Processing a PEER Request": OLD: Processing the lifetime value of the PEER Opcode is described in Section 15. Sending a PEER request with a very short Requested Lifetime can be used to query the lifetime of an existing mapping. NEW: Processing the lifetime value of the PEER Opcode is described in Section 15. Sending a PEER request with a very short Requested | Lifetime can be used to query the lifetime of an existing mapping. | So that PCP clients can reduce the frequency of their NAT and | firewall keepalive messages, it is RECOMMENDED that lifetimes of | mappings created or lengthened with PEER be longer than the lifetimes | of implictly-created mappings. This appears to match what we agreed to in the meeting. Let us know if there are any objections to the above wording. -Dave --_000_45A697A8FFD7CF48BCF2BE7E106F060413B47Bxmbrcdx04ciscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <7F1FDCD6360F0D4F99F9411B0DA0209E@cisco.com> Content-Transfer-Encoding: quoted-printable


From: Dave Thaler <dthaler@microsoft.com>
Date: Fri, 9 Nov 2012 03:41:12 += ;0000
To: "pcp@ietf.org" <pcp@ietf.= org>
Subject: Proposed text to add to pc= p-base

Here=92s the text Dan came up with to address the ke= epalive incentive issue

which the WG agreed to add text about.

 

In Section 12.3, "Processing a PEER Request&= quot;:

 

OLD:

   Processing the lifetime value of the= PEER Opcode is described in

   Section 15.  Sending a PEER req= uest with a very short Requested

   Lifetime can be used to query the li= fetime of an existing mapping.

 

NEW:

   Processing the lifetime value of the= PEER Opcode is described in

   Section 15.  Sending a PEER req= uest with a very short Requested

|  Lifetime can be used to query the lifetim= e of an existing mapping.

|  So that PCP clients can reduce the freque= ncy of their NAT and 

| firewall keepalive messages, it is RECOMMENDED = that lifetimes  of

| mappings created or lengthened with PEER be lon= ger than the  lifetimes

| of implictly-created mappings.

 

This appears to match what we agreed to in the me= eting.

Let us know if there are any objections to the ab= ove wording.

 

-Dave

 

 --_000_45A697A8FFD7CF48BCF2BE7E106F060413B47Bxmbrcdx04ciscocom_-- From repenno@cisco.com Fri Nov 9 06:12:57 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCF2021F86AA for ; Fri, 9 Nov 2012 06:12:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.539 X-Spam-Level: X-Spam-Status: No, score=-10.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KQaSJz0-vZku for ; Fri, 9 Nov 2012 06:12:57 -0800 (PST) Received: from rcdn-iport-9.cisco.com (rcdn-iport-9.cisco.com [173.37.86.80]) by ietfa.amsl.com (Postfix) with ESMTP id 31A1B21F86AD for ; Fri, 9 Nov 2012 06:12:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1177; q=dns/txt; s=iport; t=1352470377; x=1353679977; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=c8n0ShflS380xo5abNed4mTL7sih4p+EHcsYqpYGELA=; b=K8cPzgKF8uHJC4MAeyUihTZIMLoLkbfZ4+TbugiKYl/7VVJln6DpyrEd 3zDc1v+PbyGVLOAOdfxoZfFFIecUkcylYuR6loZX/IWtxyI120sjGpOhn rZVymw8ENqQnjuLSmte6TPlRRXgPDqJdqMphLMQTA6LB7D8pYLeQHrxWW Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmQJAJ4OnVCtJXHB/2dsb2JhbABEw0qBAQeCHgEBAQQSASdRAQgiFEIbAQYFBBMIGodom3aBK6ASkXlhA6RTgWuCb4IZ X-IronPort-AV: E=McAfee;i="5400,1158,6890"; a="137570416" Received: from rcdn-core2-6.cisco.com ([173.37.113.193]) by rcdn-iport-9.cisco.com with ESMTP; 09 Nov 2012 14:12:56 +0000 Received: from xhc-rcd-x08.cisco.com (xhc-rcd-x08.cisco.com [173.37.183.82]) by rcdn-core2-6.cisco.com (8.14.5/8.14.5) with ESMTP id qA9ECuTU016689 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Fri, 9 Nov 2012 14:12:56 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.200]) by xhc-rcd-x08.cisco.com ([173.37.183.82]) with mapi id 14.02.0318.001; Fri, 9 Nov 2012 08:12:56 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Consensus from the WG meeting today Thread-Index: AQHNvoRQkMPAaynDeUqFmE6cUEHVSg== Date: Fri, 9 Nov 2012 14:12:56 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F060413B488@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.126.82] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19350.005 x-tm-as-result: No--29.877600-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: <9DF174892209594DB53E01B4F0DB41E7@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [pcp] FW: Consensus from the WG meeting today X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2012 14:12:57 -0000 On 11/8/12 6:09 PM, "Dave Thaler" wrote: >The following three items had strong consensus (loud hums for, silence >against) >during the meeting today: > >1) Add text in pcp-base recommending that when the PCP server receives a >PEER, >it should give the flow a longer timeout than when PCP isn't used. >(Several other >documents, including requirements documents, have text that depends on >this >fact but it's not stated anywhere.) > >2) Adopt draft-boucadair-pcp-server-selection as a WG item. The actual >content >was recently separated out of draft-ietf-pcp-dhcp which was already a WG >doc. >(This is considered to be part of the existing milestone items, the WG >just decided >to split a milestone item into multiple docs.) > >3) Adopt draft-boucadair-pcp-nat64-prefix64-option as a WG item. This >is not >currently a milestone item. The chairs will confirm with the AD what >needs to >happen. > >If anyone on the list has a strong objection, let us know, as we plan to >move >forward with the above. > >Thanks for everyone's participation in these discussions at the meeting >today. > >-Dave > > > From alper.yegin@yegin.org Fri Nov 9 06:18:31 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7252621F84FC for ; Fri, 9 Nov 2012 06:18:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.598 X-Spam-Level: X-Spam-Status: No, score=-102.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gWwBdKQYLxUt for ; Fri, 9 Nov 2012 06:18:30 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id 5736521F8476 for ; Fri, 9 Nov 2012 06:18:30 -0800 (PST) Received: from [10.119.8.2] (rdns.ubiquityservers.com [173.208.90.180]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0Ln8s9-1Spn1a0fjJ-00hKkB; Fri, 09 Nov 2012 09:18:29 -0500 From: Alper Yegin Content-Type: multipart/alternative; boundary="Apple-Mail=_1726721E-D69C-4132-BCFA-D0B3F3CE2722" Date: Fri, 9 Nov 2012 16:18:27 +0200 Message-Id: <5AF1DAD6-8340-408B-A580-92D6B0F16C0C@yegin.org> To: pcp@ietf.org Mime-Version: 1.0 (Apple Message framework v1278) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:NJ/I5/1F6cXoRxMp7VwiQuvVJXen6MnhJRpeyi4sjeS 3AWpGDr+uY/CsM4u2WNG/BTd0lXsu/LGraKlCkEVdUcj/IWTMA bBIN+LTyrhhzo06Vfc+gTwD7iDbYeR2B7m6t7Oa4r3pH1pebKn o3ZY0OVGLqMrbVvEeSTHHURLqJuV0kMLGpc7OHI2DXhxJcuAN+ 1+qnMZ8MSZvPGgPWzqJ8dgqgcXZ6McK/fvnaBYw1v0ZzDkJx1Y 7uKsFrhtD7XyLp1MSqcz6rUPssg8kAcTCKpJim9XG2L17ku0Z5 swWj4Z8nhR8K42vd7Uh6bNiOvu3xDrMUp3hfu+hQzrtHzecpdo ilYdGxbyhKWnfeL0F1fGXWkzdxK2pxiDUQ4eatxUl Subject: [pcp] comments on Margaret's slides X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2012 14:18:31 -0000 --Apple-Mail=_1726721E-D69C-4132-BCFA-D0B3F3CE2722 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Let me highlight important issues with Margaret's slides, in preparation = for the meeting. PCP entities that do not implement PCP Authentication will see these = packets as having an unsupported version number =96 Errors will go back to PCP client in this case, not to PANA client =96 An unspecified capability discovery mechanisms mandated to avoid = this situation=20 Alper> Well, version -03 does define this. So, there is no issue such as = seeing an unsupported version being used. If the PCP server does not = support auth, it'll not be used. Alper> Regarding re-authentication timelines, it seems like you chose = very low lifetime to illustrate the issue. I'm familiar with EAP session = lifetimes such as 24hr, 80hr, etc. in network access application. Not = sure how realistic the short lifetimes you picked. PANA Model Requires support for server-generated requests =96 To support server-initiated re-authentication and retransmissions Alper> If "server-initiated re-auth" is deemed unnecesary, we can state = that it shall/should not be used when PANA is used for PCP. This is = trivia. Alper> Besides, I don't understand what the issue is. If PANA requires = rexmits, etc, it's PANA's business. It has no implication on the PCP = implementation.=20 =96 To support =93liveness=94 detection Alper> We can disable that too. It's not a must-use for PANA operation. = It's just one of the features. =96 Alternative is to update PANA to remove these things Alper> Nope. All we need is, for anything that we don't want to see = happen, we state so in the PCP spec. "When PANA is used for PCP auth, = PANA ping shall not be used", etc. Authentication and authorization tightly coupled =96 Supports ability to = drop mappings immediately when authentication expires Alper> Both loosely and tightly coupled is possible with PANA. Clients need to remain active on the network to retain their mappings =96 Mappings are removed if the client goes away or fails to respond to = re-authentication requests=20 Alper> Again, if we don't want this to happen on any deployment, = or on select deployments, we can clearly state so. It's not like PANA = does not work if PAA-intiated re-auth is not used. Some/many of these feedback is repeat from past discussions. Please take = them into account. Alper --Apple-Mail=_1726721E-D69C-4132-BCFA-D0B3F3CE2722 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Let = me highlight important issues with Margaret's slides, in preparation for = the meeting.


=09 =09 =09
  • PCP entities that do not = implement PCP Authentication will see these packets as having an unsupported version number

    =96 Errors will go back to PCP client in = this case, not to PANA client

    =96 An unspecified capability discovery = mechanisms mandated to avoid this situation 


Alper> Well, version = -03 does define this. So, there is no issue such as seeing an = unsupported version being used. If the PCP server does not support auth, = it'll not be = used.



Alper> = Regarding re-authentication timelines, it seems like you chose very low = lifetime to illustrate the issue. I'm familiar with EAP session = lifetimes such as 24hr, 80hr, etc. in network access application. Not = sure how realistic the short lifetimes you = picked.



=09 =09 =09

PANA Model

  • Requires support for = server-generated requests

    • =96  To support server-initiated = re-authentication and retransmissions

    • Alper> If "server-initiated re-auth" = is deemed unnecesary, we can state that it shall/should not be used when = PANA is used for PCP. This is trivia.

      Alper> Besides, I don't understand = what the issue is. If PANA requires rexmits, etc, it's PANA's business. = It has no implication on the PCP = implementation. 

      =96 =  To support = =93liveness=94 detection

      Alper> We can = disable that too. It's not a must-use for PANA operation. It's just one = of the features.

    • =96  Alternative is to update PANA to remove = these things

      Alper> Nope. All = we need is, for anything that we don't want to see happen, we state so = in the PCP spec. "When PANA is used for PCP auth, PANA ping shall not be = used", etc.

  • Authentication and = authorization tightly coupled =96 Supports ability to drop mappings = immediately when

    authentication = expires

    Alper> Both = loosely and tightly coupled is possible with PANA.

  • Clients need to remain = active on the network to retain their mappings

    =96 Mappings are removed if the client goes = away or fails to respond to re-authentication requests 

       Alper> = Again, if we don't want this to happen on any deployment, or on select = deployments, we can clearly state so. It's not like PANA does not work = if PAA-intiated re-auth is not = used.


Some/many of these = feedback is repeat from past discussions. Please take them into = account.


Alper


= --Apple-Mail=_1726721E-D69C-4132-BCFA-D0B3F3CE2722-- From yoshihiro.ohba@toshiba.co.jp Fri Nov 9 07:13:13 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F67621F870F for ; Fri, 9 Nov 2012 07:13:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.422 X-Spam-Level: X-Spam-Status: No, score=-5.422 tagged_above=-999 required=5 tests=[AWL=-1.333, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rJG7IWKFpiAI for ; Fri, 9 Nov 2012 07:13:11 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id DB20A21F852D for ; Fri, 9 Nov 2012 07:13:10 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qA9FDAtH011737 for ; Sat, 10 Nov 2012 00:13:10 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qA9FD9d5007139 for pcp@ietf.org; Sat, 10 Nov 2012 00:13:09 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id AAA07138; Sat, 10 Nov 2012 00:13:09 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qA9FD998018920 for ; Sat, 10 Nov 2012 00:13:09 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qA9FD9px024961; Sat, 10 Nov 2012 00:13:09 +0900 (JST) Received: from [133.199.16.4] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0MD800GIH7LL73D0@mail.po.toshiba.co.jp> for pcp@ietf.org; Sat, 10 Nov 2012 00:13:09 +0900 (JST) Date: Sat, 10 Nov 2012 00:13:01 +0900 From: Yoshihiro Ohba To: "pcp@ietf.org" Message-id: <509D1D7D.6040602@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-2022-JP Content-transfer-encoding: 7bit User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Subject: [pcp] An example of PANA implementation guides X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2012 15:13:13 -0000 Section 6.4.1 of http://tools.ietf.org/html/draft-ietf-lwig-guidance-02 describes light-weight implementation guidelines for PANA. The draft says that (i) PANA liveness test does not need to be supported and (ii) PAA-initiated re-authentication does not need to be supported. My point is that we can create similar guidelines for PCP use of PANA once the PCP authentication issues are resolved and PANA is chosen as the solution for PCP authentication. Regards, Yoshihiro Ohba From hartmans@painless-security.com Wed Nov 14 07:40:02 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 503F121F85FF for ; Wed, 14 Nov 2012 07:40:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6oyDAB1SdHeZ for ; Wed, 14 Nov 2012 07:40:01 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 5922221F85DB for ; Wed, 14 Nov 2012 07:40:01 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 4577E20178 for ; Wed, 14 Nov 2012 10:38:50 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id ED4AC4132; Wed, 14 Nov 2012 10:39:57 -0500 (EST) From: Sam Hartman To: pcp@ietf.org Date: Wed, 14 Nov 2012 10:39:57 -0500 Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Subject: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 15:40:02 -0000 A PCP server may wish to send an unsolicited message to a specific client in cases where it has no security association with that client. This can happen for a number of reasons: First, the server may never have had a security association with the client. For example the client may be using unauthenticated PCP. I think we can ignore that case in the rest of this message. If unauthenticated PCP was good enough to set up the mapping, it should be good enough for messages related to the mapping. Secondly, the security association may have timed out. That is, the MSK lifetime may have ended. Another possibility is that the server discarded security state. It's probably a bad idea for a server to choose to discard security state if that server sends unsolicited messages. However you can imagine cases (disconnect request from AAA, administrator action, server policy changes) where a server discards state. It's important to realize that especially in the case where servers are sending unsolicited messages to clients, they are not discarding security state to conserve resources. PCP is all about maintaining state on the server; the point of the protocol is to set up and manage state. It seems reasonable for servers to be able to discard security state for clients when they have no other state for those clients, but it also seems reasonable for servers to retain security state while they retain other state. The simplest thing for the server to do is to send the unsolicited message without authentication. So, what should the client do when it receives the message without authentication? That depends on client policy. Many clients will be able to act on an unsolicited message even without integrity protection. Remember these same clients would often be willing to perform unauthenticated PCP requests; authentication was triggered by server policy and an error in response to an unauthenticated request. Some clients may want integrity protection of the unsolicited message. My interpretation of the sense of the room was that supporting this is a requirement. The simplest thing for such a client to do is to go authenticate and to re-issue the request corresponding to the unsolicited message. As I understand it, unsolicited messages in PCP directed at a specific client correspond to map or peer responses. The client can solicit a response to such a map or peer entry by generating the corresponding authenticated map or peer request. In this model, the client decides whether it needs authentication for the unsolicited message. That's desirable because the client is the one acting on the information. It's not worth wasting authentication resources if the client will take no action, is sleeping, is temporarily not on the network, etc. It's not worth authentication if the client security policy would be just as happy as with an unauthenticated request. It's often not worth authentication if an attacker could use unauthenticated means such as a TCP RST to accomplish the same goal as the unsolicited message. However in some cases, integrity protection may be important; the client is in a better position to know when that's the case. Reinaldo has one concern about this approach. An attacker can force a client that does require authentication to perform needless authentications simply by injecting false unauthenticated responses. A way to resolve this is to compute an authentication tag that basically says "I threw away your state," using the old MSK and include this in an PCP option in unsolicited messages that are sent. This requires servers to retain at least the contents of this option. However, as we discussed, we're not trying to allow servers to discard security resources if they retain enough PCP resources to need to send unsolicited messages. A client receiving this option knows the server has discarded a security association and knows which association has been discarded. An attacker could replay this option but gains no advantage from doing so provided that the server never sends this option before it actually disables the security association. Another approach would be to simply retain the MSK past its expiration and send the standard PCP integrity option. I don't favor this approach because there are legitimate security reasons for retiring keys and security associations. It's something the WG could do if it wishes, although we will probably have to write up a fair bit of security considerations text explaining the impact and might have some challenges explaining how we meet the requirements of the EAP keying framework. The approach of sending an integrity-protected "I deleted the SA," message is easier to defend from a security standpoint. An implementation that has strict key lifetime handling--for example one with a hardware security module that enforces key lifetimes--can pre-compute the message while the MSK is still valid. So, in some ways this sounds a lot like server-initiated re-authentication. The server sends a trigger and later there is a new authentication. Here are some properties I consider important; other schemes that meet these properties might also be fine even if they look even more like server-initiated re-authentication. The biggest one is that clients can sleep or go away from the network for a period without disrupting their PCP state or PCP security associations. Clients choose whether the authentication happens; the server can indicate that re-authentication is required for future messages to be integrity-protected, but the client decides whether that protection is desirable. The client logic for making this decision is PCP-specific; even if a PANA approach is used, the PCP client rather than the PAC should decide whether it is desirable to re-authenticate, because only PCP knows whether the client will act on unsolicited messages or whether unauthenticated unsolicited messages even open important attack vectors. From margaretw42@gmail.com Wed Nov 14 09:03:09 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7CDC621F86CC for ; Wed, 14 Nov 2012 09:03:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.806 X-Spam-Level: X-Spam-Status: No, score=-3.806 tagged_above=-999 required=5 tests=[AWL=-0.208, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TFYkZJNaasvj for ; Wed, 14 Nov 2012 09:03:09 -0800 (PST) Received: from mail-qc0-f172.google.com (mail-qc0-f172.google.com [209.85.216.172]) by ietfa.amsl.com (Postfix) with ESMTP id ECC9821F85FD for ; Wed, 14 Nov 2012 09:03:08 -0800 (PST) Received: by mail-qc0-f172.google.com with SMTP id b25so453943qca.31 for ; Wed, 14 Nov 2012 09:03:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:content-type:from:in-reply-to:date:cc :message-id:references:to:x-mailer; bh=RvEN/vOBBFTGLPHny78GsGBsrXcNVuS6UKGElKb19yo=; b=IkWNzO4to0zxRl+ipD1IZVCWIm/nAvv0As6ZufRRL1IM41/wUM7K1m3An0DC4ZcDSQ nm0bpKr1R5XF7k8GGkSKBkhht/beBTNBKNIz3R+A9bHX5DVrLU4kdntZYd2xkWz2vzce d9KkaDs9IyKI625S+4xeLVyD7eZg9CqL9yNBqh6SklLySv1GrejnaCQxsW0r87AR1kpK K8yg75/pPK35+qGReBLixxzR4lWmDqaqMkR1nCAxqBxQ3sASw67Ue765P7Ip7BrVYst8 pNGV8887hN4HEXrz+6V7h3XDPjU/wE6YqVMH1xMAMvKdsdAQRWMhySNIx06026yynP8g AuEw== Received: by 10.224.191.6 with SMTP id dk6mr25579060qab.71.1352912588472; Wed, 14 Nov 2012 09:03:08 -0800 (PST) Received: from lilac-too.home (pool-71-184-79-25.bstnma.fios.verizon.net. [71.184.79.25]) by mx.google.com with ESMTPS id f12sm2109314qey.5.2012.11.14.09.03.06 (version=SSLv3 cipher=OTHER); Wed, 14 Nov 2012 09:03:06 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1084) Content-Type: multipart/alternative; boundary=Apple-Mail-6-943230783 From: Margaret Wasserman In-Reply-To: Date: Wed, 14 Nov 2012 12:03:05 -0500 Message-Id: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> References: To: Sam Hartman X-Mailer: Apple Mail (2.1084) Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 17:03:09 -0000 --Apple-Mail-6-943230783 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii On Nov 14, 2012, at 10:39 AM, Sam Hartman wrote: >=20 > Reinaldo has one concern about this approach. An attacker can force a > client that does require authentication to perform needless > authentications simply by injecting false unauthenticated responses. What is the alternative? If we support server-originated = re-authentication instead, we complicate the operational model of PCP = and the server can just do the same thing more directly by sending = unneeded re-authenication messages. Margaret --Apple-Mail-6-943230783 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
On Nov 14, 2012, at 10:39 AM, Sam Hartman wrote:

Reinaldo has one concern about this approach. An attacker can force a
client that does require authentication to perform needless
authentications simply by injecting false unauthenticated responses.

What is the alternative?  If we support server-originated re-authentication instead, we complicate the operational model of PCP and the server can just do the same thing more directly by sending unneeded re-authenication messages.

Margaret


--Apple-Mail-6-943230783-- From repenno@cisco.com Wed Nov 14 10:03:27 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FCC521F8651 for ; Wed, 14 Nov 2012 10:03:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.544 X-Spam-Level: X-Spam-Status: No, score=-10.544 tagged_above=-999 required=5 tests=[AWL=0.054, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1r6oGatqrJW3 for ; Wed, 14 Nov 2012 10:03:16 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id A5FAE21F85FD for ; Wed, 14 Nov 2012 10:03:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5694; q=dns/txt; s=iport; t=1352916196; x=1354125796; h=from:to:cc:subject:date:message-id:in-reply-to: mime-version; bh=52Sx4tviAqXOVQe/1UllkCc/WHrsaorFCgmng26ZA98=; b=I/BofXsAdu779SfQD1K9rginDro8kf41oTBe+XLkHUn8jF88qzynE9Zv MRNVTQwb0xQMMJ/SE7xor2FPdsz286sAEZl1lEhd6jGLnn2MBOGAX1goz amkiSL/3QLLGoTUE8LE9MQOHTSZbBzCjJV0zLDk+0ZYZY1VDvXyGCYxud M=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AgAFAJ/bo1CtJXG9/2dsb2JhbABEgknAd4EIgh4BAQEEAQEBDwFbCxIBCBEDAQILHSgGCxQJCAIEAQ0FCBqHVgMPC5sgljoNiVAEi0RphUthA5QnjQeDJoFrgm+BZBce X-IronPort-AV: E=McAfee;i="5400,1158,6895"; a="142387454" Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-6.cisco.com with ESMTP; 14 Nov 2012 18:03:16 +0000 Received: from xhc-rcd-x02.cisco.com (xhc-rcd-x02.cisco.com [173.37.183.76]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id qAEI3Ggc023451 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 14 Nov 2012 18:03:16 GMT Received: from xmb-aln-x04.cisco.com ([169.254.9.95]) by xhc-rcd-x02.cisco.com ([173.37.183.76]) with mapi id 14.02.0318.001; Wed, 14 Nov 2012 12:03:15 -0600 From: "Reinaldo Penno (repenno)" To: Margaret Wasserman , Sam Hartman Thread-Topic: [pcp] Unsolicited Messages to Client with no security association Thread-Index: AQHNwpJRPFF8wc6YukSP0Vn7wKgbTg== Date: Wed, 14 Nov 2012 18:03:15 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604142D3A@xmb-aln-x04.cisco.com> In-Reply-To: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.64.231] Content-Type: multipart/alternative; boundary="_000_45A697A8FFD7CF48BCF2BE7E106F0604142D3Axmbalnx04ciscocom_" MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 18:03:27 -0000 --_000_45A697A8FFD7CF48BCF2BE7E106F0604142D3Axmbalnx04ciscocom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hello Margaret, I believe one of the action items from meeting was for Sam to come up with = a proposal which I believe is his previous email in the thread. Other comments inline=85 From: Margaret Wasserman > Date: Wed, 14 Nov 2012 12:03:05 -0500 To: Sam Hartman > Cc: > Subject: Re: [pcp] Unsolicited Messages to Client with no security associat= ion On Nov 14, 2012, at 10:39 AM, Sam Hartman wrote: Reinaldo has one concern about this approach. An attacker can force a client that does require authentication to perform needless authentications simply by injecting false unauthenticated responses. What is the alternative? If we support server-originated re-authentication= instead, we complicate the operational model of PCP [Reinaldo] Well, these are the trade-off we are looking at. I believe suppo= rting unsolicited messages was the consensus. and the server can just do the same thing more directly by sending unneeded= re-authenication messages. [Reinaldo] How? Two points for consideration. 1 =96 Unsolicited messages are not reliable. They need to be retransmitted = 3 times, but still, not reliable. 2 - I believe the attack I described is much easier to perform than many ot= her attacks we discussed before. -RP Margaret _______________________________________________ pcp mailing list pcp@ietf.o= rg https://www.ietf.org/mailman/listinfo/pcp --_000_45A697A8FFD7CF48BCF2BE7E106F0604142D3Axmbalnx04ciscocom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <198AE11466F4FF4F923426033A8C21B6@cisco.com> Content-Transfer-Encoding: quoted-printable
Hello Margaret,

I believe one of the action items from meeting was for Sam to come up = with a proposal which I believe is his previous email in the thread.

Other comments inline=85

From: Margaret Wasserman <margaretw42@gmail.com>
Date: Wed, 14 Nov 2012 12:03:05 -05= 00
To: Sam Hartman <hartmans@painless-security.com> Cc: <pcp@ietf.org>
Subject: Re: [pcp] Unsolicited Mess= ages to Client with no security association


On Nov 14, 2012, at 10:39 AM, Sam Hartman wrote:

Reinaldo has one concern about this approach. An attacker can force = a
client that does require authentication to perform needless
authentications simply by injecting false unauthenticated responses.

What is the alternative?  If we support server-originated re-authentic= ation instead, we complicate the operational model of PCP


[Reinaldo] Well, these are the trade-off we are looking at. I believe = supporting unsolicited messages was the consensus. 

and the server can just do the same thing more directly by sending unn= eeded re-authenication messages.

[Reinaldo] How? Two points for consideration.

1 =96 Unsolicited messages are not reliable. They need to be retransmi= tted 3  times, but still, not reliable.
2 - I believe the attack I described is much easier to perform than ma= ny other attacks we discussed before. 

-RP

Margaret


_______________________________________________ pcp mailing list pcp@ietf.org http= s://www.ietf.org/mailman/listinfo/pcp --_000_45A697A8FFD7CF48BCF2BE7E106F0604142D3Axmbalnx04ciscocom_-- From hartmans@painless-security.com Wed Nov 14 10:09:17 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6EF421F865D for ; Wed, 14 Nov 2012 10:09:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9FAXqlaKjDPe for ; Wed, 14 Nov 2012 10:09:17 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 626A921F8502 for ; Wed, 14 Nov 2012 10:09:17 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 17CB220178; Wed, 14 Nov 2012 13:08:06 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 647314132; Wed, 14 Nov 2012 13:09:13 -0500 (EST) From: Sam Hartman To: "Reinaldo Penno \(repenno\)" References: <45A697A8FFD7CF48BCF2BE7E106F0604142D3A@xmb-aln-x04.cisco.com> Date: Wed, 14 Nov 2012 13:09:13 -0500 In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604142D3A@xmb-aln-x04.cisco.com> (Reinaldo Penno's message of "Wed, 14 Nov 2012 18:03:15 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 18:09:18 -0000 >>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: Reinaldo> Hello Margaret, I believe one of the action items from Reinaldo> meeting was for Sam to come up with a proposal which I Reinaldo> believe is his previous email in the thread. Reinaldo> Other comments inline? Right, and note that my original message has (just after where Margaret stopped quoting) my proposal for how to address both your concern and hers. Personally, I don't think attackers forcing a large number of authentications is a big deal; I think I'd disagree with your characterization that is easier than other attacks we've been discussing. However I also think it's easy to fix so I proposed a fix. --Sam From simon.perreault@viagenie.ca Wed Nov 14 12:06:01 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCD1521F86E3 for ; Wed, 14 Nov 2012 12:06:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.532 X-Spam-Level: X-Spam-Status: No, score=-2.532 tagged_above=-999 required=5 tests=[AWL=0.067, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fHNaltb0H4-J for ; Wed, 14 Nov 2012 12:06:01 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 2EDF321F8669 for ; Wed, 14 Nov 2012 12:06:01 -0800 (PST) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 26AA0414F9 for ; Wed, 14 Nov 2012 15:06:00 -0500 (EST) Message-ID: <50A3F9A6.4090200@viagenie.ca> Date: Wed, 14 Nov 2012 21:05:58 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: pcp@ietf.org References: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> In-Reply-To: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 20:06:01 -0000 Le 2012-11-14 18:03, Margaret Wasserman a écrit : >> Reinaldo has one concern about this approach. An attacker can force a >> client that does require authentication to perform needless >> authentications simply by injecting false unauthenticated responses. > > What is the alternative? If we support server-originated > re-authentication instead, we complicate the operational model of PCP > and the server can just do the same thing more directly by sending > unneeded re-authenication messages. There are two classes of clients: A) clients that don't listen to ANNOUNCE B) clients that listen to ANNOUNCE If the server sends a re-authentication message to the client, either the client ignores it (class A) or is willing and prepared to act on it (class B). Why not just send a re-authentication message? The goal is not complicating the class A clients. If class A clients are allowed to ignore the re-authentication request, then I think it's reasonable to expect the class B clients to implement the necessary stuff. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From hartmans@painless-security.com Wed Nov 14 12:31:41 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEF2921F8792 for ; Wed, 14 Nov 2012 12:31:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mK5kG3XNDFTn for ; Wed, 14 Nov 2012 12:31:40 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 71CB221F86A9 for ; Wed, 14 Nov 2012 12:31:40 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 4D3A420178; Wed, 14 Nov 2012 15:30:29 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 8ECD341CE; Wed, 14 Nov 2012 15:31:36 -0500 (EST) From: Sam Hartman To: Simon Perreault References: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> <50A3F9A6.4090200@viagenie.ca> Date: Wed, 14 Nov 2012 15:31:36 -0500 In-Reply-To: <50A3F9A6.4090200@viagenie.ca> (Simon Perreault's message of "Wed, 14 Nov 2012 21:05:58 +0100") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 20:31:41 -0000 >>>>> "Simon" == Simon Perreault writes: I was actually thinking more section 14.2 than 14.1, although this applies to both. Simon> If the server sends a re-authentication message to the Simon> client, either the client ignores it (class A) or is willing Simon> and prepared to act on it (class B). Why not just send a Simon> re-authentication message? The goal is not complicating the Simon> class A clients. If class A clients are allowed to ignore the Simon> re-authentication request, then I think it's reasonable to Simon> expect the class B clients to implement the necessary stuff. First, note that if we use PANA-level server-initiated re-authentication, the PAC cannot ignore the message according to the current PANA protocol. More generally, though, I think there are significant classes of clients that would benefit from implementing re-authentication but would not need to integrity protect unsolicited responses. I'm not worried about implementation complexity. I'm more worried about battery life, sleep states and the like. I think there are a lot of cases where the client will want to ignore re-authentication and I want to make it easy to do that. I went through the details of why I want to make it easy for clients to avoid re-authentication of unsolicited messages in my original long message. Would you be willing to respond to those specific points if you disagree after taking a look at them? --Sam From simon.perreault@viagenie.ca Wed Nov 14 12:51:19 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB45421F8825 for ; Wed, 14 Nov 2012 12:51:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.542 X-Spam-Level: X-Spam-Status: No, score=-2.542 tagged_above=-999 required=5 tests=[AWL=0.057, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7RNZfH8cIgk5 for ; Wed, 14 Nov 2012 12:51:19 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 2EA1021F8512 for ; Wed, 14 Nov 2012 12:51:19 -0800 (PST) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 7ECA8414F9; Wed, 14 Nov 2012 15:51:18 -0500 (EST) Message-ID: <50A40445.4020508@viagenie.ca> Date: Wed, 14 Nov 2012 21:51:17 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121016 Thunderbird/16.0.1 MIME-Version: 1.0 To: Sam Hartman References: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> <50A3F9A6.4090200@viagenie.ca> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 20:51:19 -0000 Le 2012-11-14 21:31, Sam Hartman a écrit : > I was actually thinking more section 14.2 than 14.1, although this > applies to both. Right. > More generally, though, I think there are significant classes of clients > that would benefit from implementing re-authentication but would not > need to integrity protect unsolicited responses. I'm not worried about > implementation complexity. I'm more worried about battery life, sleep > states and the like. But they're already listening for unsolicited messages from the server. How does adding server-initiated re-authentication affect battery life or sleep states? > I think there are a lot of cases where the client > will want to ignore re-authentication and I want to make it easy to do > that. Absolutely. > I went through the details of why I want to make it easy for clients to > avoid re-authentication of unsolicited messages in my original long > message. Would you be willing to respond to those specific points if > you disagree after taking a look at them? I don't disagree. I just wanted to point out that server-initiated re-authentication may be just fine if clients that don't listen to unsolicited messages anyway are allowed to ignore it. If I understand correctly, this avenue was not explored in your long email. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From hartmans@painless-security.com Wed Nov 14 13:00:15 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E87C21F8582 for ; Wed, 14 Nov 2012 13:00:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 77OoxTM1FTOA for ; Wed, 14 Nov 2012 13:00:14 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id A6B2621F84DB for ; Wed, 14 Nov 2012 13:00:14 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 6985F20178; Wed, 14 Nov 2012 15:59:03 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id EC60C4149; Wed, 14 Nov 2012 16:00:10 -0500 (EST) From: Sam Hartman To: Simon Perreault References: <28108D85-B8EA-4805-BE95-24B032297368@lilacglade.org> <50A3F9A6.4090200@viagenie.ca> <50A40445.4020508@viagenie.ca> Date: Wed, 14 Nov 2012 16:00:10 -0500 In-Reply-To: <50A40445.4020508@viagenie.ca> (Simon Perreault's message of "Wed, 14 Nov 2012 21:51:17 +0100") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Nov 2012 21:00:15 -0000 >>>>> "Simon" == Simon Perreault writes: Simon> But they're already listening for unsolicited messages from Simon> the server. How does adding server-initiated Simon> re-authentication affect battery life or sleep states? So, first, I can listen to unsolicited messages while awake, and ignore them while asleep. If I get to do the same to re-authentication, then I think re-authentication is not that harmful and I don't have a huge problem with it. I'd still like to avoid it. One reason is that it generates unnecessary traffic if you don't care about the integrity of unsolicited messages. Another is that if you happen to be using a credential such as an OTP or smart card that requires user interaction, it generates unnecessary user interactions. Asking the user to type something or insert a smart code just so you can ignore the integrity check on the resulting unsolicited message seems highly undesirable to me. I don't have a huge problem with a "you should consider re-auth now," message if it can be ignored by clients. I'd prefer to piggy-back it as an option on other unsolicited messages as I described, but I am not hugely attached to that. From repenno@cisco.com Wed Nov 14 16:51:31 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D81F721F857C for ; Wed, 14 Nov 2012 16:51:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.499 X-Spam-Level: X-Spam-Status: No, score=-10.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TDbe7FXjd1pi for ; Wed, 14 Nov 2012 16:51:31 -0800 (PST) Received: from rcdn-iport-8.cisco.com (rcdn-iport-8.cisco.com [173.37.86.79]) by ietfa.amsl.com (Postfix) with ESMTP id 16B8521F865C for ; Wed, 14 Nov 2012 16:51:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=2467; q=dns/txt; s=iport; t=1352940691; x=1354150291; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=xgYXU8HoHVuNaiQji9O+HVlGItJRpmdLhYxkcyDKRM0=; b=V6yyMbTX6xBHF7hzo0xkVmhSflWy+8+1+LfmzVHDgBHO5gz3qJ/KdQGL /xJQv/Hhy8ewXRd28olGu8pk7/xPGxfrgF2D1WoI77vtx4Fdp0P0yqZ9C vf7QuKi8pxThN/RdykUfEcxjhEjBI6YIg8GCCuj04qHIVvxnVSy5nekTa A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAD07pFCtJXG9/2dsb2JhbABEw0aBCIIgAQQBAQEPASc0CxIBCCIUNwslAgQBDQUIEQmHaQubQKAGBIwyhUZhA5IQkkSBa4Jvghk X-IronPort-AV: E=McAfee;i="5400,1158,6896"; a="142513708" Received: from rcdn-core2-2.cisco.com ([173.37.113.189]) by rcdn-iport-8.cisco.com with ESMTP; 15 Nov 2012 00:51:30 +0000 Received: from xhc-aln-x05.cisco.com (xhc-aln-x05.cisco.com [173.36.12.79]) by rcdn-core2-2.cisco.com (8.14.5/8.14.5) with ESMTP id qAF0pU7f001047 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 15 Nov 2012 00:51:30 GMT Received: from xmb-aln-x04.cisco.com ([169.254.9.95]) by xhc-aln-x05.cisco.com ([173.36.12.79]) with mapi id 14.02.0318.001; Wed, 14 Nov 2012 18:51:29 -0600 From: "Reinaldo Penno (repenno)" To: Sam Hartman , Simon Perreault Thread-Topic: [pcp] Unsolicited Messages to Client with no security association Thread-Index: AQHNwstZAmXWMGy26ku3yFp0iqptmQ== Date: Thu, 15 Nov 2012 00:51:29 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604153706@xmb-aln-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.121.249] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19364.000 x-tm-as-result: No--46.859800-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: <3DBD8942EB69C04FAB1A492C93FF4559@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Nov 2012 00:51:32 -0000 On 11/14/12 4:00 PM, "Sam Hartman" wrote: >>>>>> "Simon" =3D=3D Simon Perreault writes: > > > Simon> But they're already listening for unsolicited messages from > Simon> the server. How does adding server-initiated > Simon> re-authentication affect battery life or sleep states? > >So, first, I can listen to unsolicited messages while awake, and ignore >them while asleep. If I get to do the same to re-authentication, then I >think re-authentication is not that harmful and I don't have a huge >problem with it. > >I'd still like to avoid it. One reason is that it generates unnecessary >traffic if you don't care about the integrity of unsolicited messages. I do not believe this would be common case. If the client started the PCP session using authentication is because 1 - PCP Server only accepts authenticated PCP due to, say, policy or 2 - The "domain" to which client belongs does not meet simple security model=20 Otherwise, it is much simpler to just use non-authenticated PCP. Therefore one would=20 expect that a client that initiated an authenticated PCP session also thinks=20 it is important to receive authenticated unsolicited messages. If client will=20 process and a pass to a application is another issue. Another point to consider. Today unsolicited messages mean "something went very wrong". But let's suppose in the near future we have all kinds=20 of unsolicited messages. For example, unsolicited description update. You can have a configuration saying: - Process all ANNOUNCE and MAPPING Updates unsolicited messages - Drop everything else Or even something more fine-grained. >Another is that if you happen to be using a credential such as an OTP or >smart card that requires user interaction, it generates unnecessary user >interactions. Asking the user to type something or insert a smart code >just so you can ignore the integrity check on the resulting unsolicited >message seems highly undesirable to me. > >I don't have a huge problem with a "you should consider re-auth now," >message if it can be ignored by clients. I'd prefer to piggy-back it as >an option on other unsolicited messages as I described, but I am not >hugely attached to that. >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp From hartmans@painless-security.com Wed Nov 14 17:16:18 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A13721F8609 for ; Wed, 14 Nov 2012 17:16:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rHf3FrSrKag5 for ; Wed, 14 Nov 2012 17:16:17 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 714BD21F8542 for ; Wed, 14 Nov 2012 17:16:17 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id A41E420178; Wed, 14 Nov 2012 20:15:05 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 0D9994149; Wed, 14 Nov 2012 20:16:13 -0500 (EST) From: Sam Hartman To: "Reinaldo Penno \(repenno\)" References: <45A697A8FFD7CF48BCF2BE7E106F0604153706@xmb-aln-x04.cisco.com> Date: Wed, 14 Nov 2012 20:16:13 -0500 In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604153706@xmb-aln-x04.cisco.com> (Reinaldo Penno's message of "Thu, 15 Nov 2012 00:51:29 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Nov 2012 01:16:18 -0000 >>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: Reinaldo> On 11/14/12 4:00 PM, "Sam Hartman" wrote: Reinaldo> I do not believe this would be common case. My assumption is the most common case for why a client performs authentication is that it gets an authentication required error from the server. In that case, it is the server, rather than the client that desires the authentication. Many such clients will not need to check the integrity of unsolicited messages. For the most part, I'd only expect clients that forced authentication (even for servers that accept unauthenticated requests) to care about integrity of unsolicited messages. I agree we need to handle that case. M y suspicion is that: 1) Most clients/servers will not happen to use authentication even if they implement it. 2) When clients use authentication it will generally be because the server insisted on it. 3) A small minority of clients--typically under the direct control of an administrator or the like--will insist on authentication all the time. This is the class that cares most about integrity of unsolicited messages. I agree with you that future unsolicited messages may have different integrity profiles. In my mind that's yet another reason to allow the client to decide how much it cares about being able to authenticate them. From repenno@cisco.com Wed Nov 14 17:30:47 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E901221F8427 for ; Wed, 14 Nov 2012 17:30:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.549 X-Spam-Level: X-Spam-Status: No, score=-10.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id enwCqlKEOtVX for ; Wed, 14 Nov 2012 17:30:47 -0800 (PST) Received: from rcdn-iport-6.cisco.com (rcdn-iport-6.cisco.com [173.37.86.77]) by ietfa.amsl.com (Postfix) with ESMTP id 4149E21F851F for ; Wed, 14 Nov 2012 17:30:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1797; q=dns/txt; s=iport; t=1352943047; x=1354152647; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=JrxbEGZVJpebz0YGBh/Q9mMT9iq585CNQmTqg/zYU2g=; b=jeuFVK6SENenghdZbTI0mJY8AhN/dOu+hK8UYcfTlw37lWh0pmEuqVDD rHoHcSU/cm4bN3cZ+JM7Ha+28qimA1Ma+vqkyvAW1mRixoE2j/3459KId +kLcKjZO8CXeuNux6ESVInbfYKeiiR5SaLaKOLIc28c0OFp7nArt6AIu8 c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAEtEpFCtJXG+/2dsb2JhbABEw0aBCIIeAQEBBBIBJz8SAQgYChRCJQIEDgUIGodpm0WgApF4YQOkVIFrgm+CGQ X-IronPort-AV: E=McAfee;i="5400,1158,6896"; a="142522344" Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-6.cisco.com with ESMTP; 15 Nov 2012 01:30:46 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id qAF1UkZ0013034 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 15 Nov 2012 01:30:46 GMT Received: from xmb-aln-x04.cisco.com ([169.254.9.95]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.02.0318.001; Wed, 14 Nov 2012 19:30:46 -0600 From: "Reinaldo Penno (repenno)" To: Sam Hartman Thread-Topic: [pcp] Unsolicited Messages to Client with no security association Thread-Index: AQHNwstZAmXWMGy26ku3yFp0iqptmZfqGA0IgAAEAAA= Date: Thu, 15 Nov 2012 01:30:45 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.146.84] x-tm-as-product-ver: SMEX-10.2.0.1135-7.000.1014-19364.000 x-tm-as-result: No--35.028700-8.000000-31 x-tm-as-user-approved-sender: No x-tm-as-user-blocked-sender: No Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 Nov 2012 01:30:48 -0000 On 11/14/12 7:16 PM, "Sam Hartman" wrote: >>>>>> "Reinaldo" =3D=3D Reinaldo Penno (repenno) write= s: > > Reinaldo> On 11/14/12 4:00 PM, "Sam Hartman" > wrote: > Reinaldo> I do not believe this would be common case. > > >My assumption is the most common case for why a client performs >authentication is that it gets an authentication required error from the >server. In that case, it is the server, rather than the client that >desires the authentication. The same reasoning applies. If server thinks authentication is so important, it follows that unsolicited messages must be authenticated. > >Many such clients will not need to check the integrity of unsolicited >messages. The client has no way to distinguishing between mapping updates from regular responses.=20 > >For the most part, I'd only expect clients that forced authentication >(even for servers that accept unauthenticated requests) to care about >integrity of unsolicited messages. >I agree we need to handle that case. > >M y suspicion is that: > >1) Most clients/servers will not happen to use authentication even if >they implement it. > >2) When clients use authentication it will generally be because the >server insisted on it. > >3) A small minority of clients--typically under the direct control of an >administrator or the like--will insist on authentication all the time. >This is the class that cares most about integrity of unsolicited >messages. > >I agree with you that future unsolicited messages may have different >integrity profiles. In my mind that's yet another reason to allow the >client to decide how much it cares about being able to authenticate >them. From alper.yegin@yegin.org Fri Nov 16 15:05:25 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9514521F8715 for ; Fri, 16 Nov 2012 15:05:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.156 X-Spam-Level: X-Spam-Status: No, score=-102.156 tagged_above=-999 required=5 tests=[AWL=-0.443, BAYES_00=-2.599, HTML_FONT_FACE_BAD=0.884, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XQdtoviCsmyt for ; Fri, 16 Nov 2012 15:05:25 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id D05E721F866D for ; Fri, 16 Nov 2012 15:05:24 -0800 (PST) Received: from [10.119.24.8] (178-32-60-104.ovh.net [178.32.60.104]) by mrelay.perfora.net (node=mrus0) with ESMTP (Nemesis) id 0MBEMf-1TPuBY2jlV-00A2oN; Fri, 16 Nov 2012 18:05:23 -0500 From: Alper Yegin Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: multipart/alternative; boundary="Apple-Mail=_5051DFF6-54D7-4B82-8C34-B6F06B9903F2" Date: Sat, 17 Nov 2012 01:05:23 +0200 In-Reply-To: To: pcp@ietf.org References: Message-Id: <5BD1DCCC-774C-468F-8B34-9B23DDDF47FB@yegin.org> X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:lazW6Dimj9c83qUHLpHjJ/QJv/h0N6rxo/cdEf4O6Uu fTLrGiP+CZgLQ4FWi29riKLqnPKaihqilxwwcDmCdEoAs0D7nf mL04gwjoq7GyWT3NpKLe7d+O+vQM2xiomCvlC97LhJOLSKZfDp pUl2DS14iSLdELSGdSUce/OjLugTFwWwIAoGQJMzSrIDAqvPhH fclZZFxiwHvsCeX+xnytZ4o7EfcXhFprewcMVtwfXiPTDfbKGd OLFgWhcN4/Vi3cg1fM7k1eUJKJa+qPpuSAVOOm45taski8Rfl7 qvg9M/ZoYL93oTE4s6RIv7yf5DhnYBdU7bHkp8TpABoRapDl57 j7KirINDE0H+ZZw73kQg/1NIbymgwGrObyKrWFnetLR0n7+5Ak YnGwqudzzBHtw== Subject: Re: [pcp] issue#61: Unsolicited reauthentication X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Nov 2012 23:05:25 -0000 --Apple-Mail=_5051DFF6-54D7-4B82-8C34-B6F06B9903F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 >=20 > Would it be desirable to support unsolicited re-authentication? >=20 > =96 May depend on answer to issue #60 =96 is there a need to renew = authentication information when no requests are being issued? >=20 > Alper> As we discovered over the mailing list, there are cases where = the PCP server sends unsolicited messages to the PCP client (e.g., when = the mapping lifetime is updated). Such messages too need to be secured. = So, tossing the PCP SA as soon as the first PCP request/response is = completed after the EAP authentication does not work. PCP SA is needed = later too.=20 >=20 > Alper> Besides, I don't understand why you'd want to toss the PCP SA = away. Keep it around because you are likely to need it even at least for = the subsequent requests from the PCP client.=20 >=20 > Alper> And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP lower-layer.=20 >=20 >=20 Sam/Alan Dekok had pointed that EAP message carried in CoA can only be = an EAP Notification.=20 Correct, I missed that. Nevertheless, "RADIUS and Diameter support EAP re-authentication = initiated by the AAA server." still holds true. See below: Diameter (RFC 4072): "A home Diameter server MAY request EAP re-authentication by issuing the Re-Auth-Request [BASE] message to the Diameter client." For RADIUS, Termination-Action=3DRADIUS-Request is used for getting the = NAS to initiation re-authentication.=20 --Apple-Mail=_5051DFF6-54D7-4B82-8C34-B6F06B9903F2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252

Would it be desirable to support unsolicited = re-authentication?

=96 May depend on answer to = issue #60 =96 is there a need to renew = authentication information when no requests are being = issued?

Alper> As we discovered over the mailing list, = there are cases where the PCP server sends unsolicited messages to the = PCP client (e.g., when the mapping lifetime is updated). Such messages = too need to be secured. So, tossing the PCP SA as soon as the first PCP = request/response is completed after the EAP authentication does not = work. PCP SA is needed later too. 

Alper> Besides, I = don't understand why you'd want to toss the PCP SA away. Keep it around = because you are likely to need it even at least for the subsequent = requests from the PCP client. 

Alper> = And, finally, RADIUS and Diameter support EAP re-authentication = initiated by the AAA server. Unless we explicitly forbid that, they are = there to be supported by any EAP = lower-layer. 



Sam/Alan Dekok had pointed that EAP message = carried in CoA can only be an EAP Notification. 
Correct, I = missed that.

Nevertheless, "RADIUS and Diameter support EAP = re-authentication initiated by the AAA server." still holds true. See = below:

Diameter (RFC 4072):

"A home Diameter = server MAY request EAP re-authentication by = issuing
the =
Re-Auth-Request [BASE] message to the =
Diameter client."


For = RADIUS, Termination-Action=3DRADIUS-Request is used for getting the NAS = to initiation = re-authentication. 




= --Apple-Mail=_5051DFF6-54D7-4B82-8C34-B6F06B9903F2-- From alper.yegin@yegin.org Fri Nov 16 15:46:18 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06D5521F89E3 for ; Fri, 16 Nov 2012 15:46:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.488 X-Spam-Level: X-Spam-Status: No, score=-102.488 tagged_above=-999 required=5 tests=[AWL=0.111, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8UZq0QrCPn9y for ; Fri, 16 Nov 2012 15:46:17 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 5BEAD21F8924 for ; Fri, 16 Nov 2012 15:46:17 -0800 (PST) Received: from [10.119.24.8] (178-32-60-104.ovh.net [178.32.60.104]) by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis) id 0MaJDU-1TtFO70SSG-00Kc1Z; Fri, 16 Nov 2012 18:46:15 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=us-ascii From: Alper Yegin In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> Date: Sat, 17 Nov 2012 01:46:13 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> To: Reinaldo Penno (repenno) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:qpf1i0C3d3uWgr8oK0UVpmQZCqp0u9orEB3rZ2Uzumv igN5tvsjsblgIouxFgwymsfPLia0C9OpOjNhbOvM52hq7x85+S 8Xk1keGoWgjnBqSvfJhOdP4RUovJ5swcpsy+DzHLN2UJko+frj 2hILeq4cQ2We1fj5E+kmhfntfSQe3nVQ3I1iQNvEjfWeDJbOCv RS+u31A3C+c9tjR+zOMjyL5wBvHkXliCAORqb/w/MYfBDgD2v+ 4P2zSRKGv/xdZnDdZp/uBjupZadmRUlAB4ghZ/OZ4a7DH1zI2F elZwc+UZm6A4ngB/INmOH0752MMPWde/vlweB4PCHpnrwisdl+ PFQKjDyPPiXR8RpLMIRZUKFXihN8SkObRJj5AaKfwYMo3hcsn0 78sZksEV6oPnw== Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Nov 2012 23:46:18 -0000 Folks, If PCP is operating in authenticated mode, all the messages shall be = integrity protected. Allowing some messages be consumed w/o integrity/replay/origin = authentication is does not give us a secure solution. Does anyone = disagree? I don't understand why we should design such a thing.=20 I know Sam's desire is to avoid supporting server-initiated re-auth. I = don't understand why it's such a big deal that we should consider going = with an incomplete security solution. It's simple. When the server has a message to send to the client, if = there's no PCP SA available, the server initiates re-auth and = instantiates a PCP SA to send the message securely. Now, if the client is "sleeping", it won't wake up for auth. Auth will = not generate PCP SA, the PCP message will be tossed away (because the = PCP server cannot be sending an unsecure PCP message). [Same net effect = for the unauthenticated case as well. A sleeping client will not receive = the message from the server]. Alper On Nov 15, 2012, at 3:30 AM, Reinaldo Penno (repenno) wrote: >=20 >=20 > On 11/14/12 7:16 PM, "Sam Hartman" = wrote: >=20 >>>>>>> "Reinaldo" =3D=3D Reinaldo Penno (repenno) = writes: >>=20 >> Reinaldo> On 11/14/12 4:00 PM, "Sam Hartman" >> wrote: >> Reinaldo> I do not believe this would be common case. >>=20 >>=20 >> My assumption is the most common case for why a client performs >> authentication is that it gets an authentication required error from = the >> server. In that case, it is the server, rather than the client that >> desires the authentication. >=20 >=20 > The same reasoning applies. If server thinks authentication is so > important, it follows that > unsolicited messages must be authenticated. >=20 >>=20 >> Many such clients will not need to check the integrity of unsolicited >> messages. >=20 > The client has no way to distinguishing between mapping updates from > regular responses.=20 >=20 >>=20 >> For the most part, I'd only expect clients that forced authentication >> (even for servers that accept unauthenticated requests) to care about >> integrity of unsolicited messages. >> I agree we need to handle that case. >>=20 >> M y suspicion is that: >>=20 >> 1) Most clients/servers will not happen to use authentication even if >> they implement it. >>=20 >> 2) When clients use authentication it will generally be because the >> server insisted on it. >>=20 >> 3) A small minority of clients--typically under the direct control of = an >> administrator or the like--will insist on authentication all the = time. >> This is the class that cares most about integrity of unsolicited >> messages. >>=20 >> I agree with you that future unsolicited messages may have different >> integrity profiles. In my mind that's yet another reason to allow the >> client to decide how much it cares about being able to authenticate >> them. >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From simon.perreault@viagenie.ca Sun Nov 18 01:23:07 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 513DE21F84C0 for ; Sun, 18 Nov 2012 01:23:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.549 X-Spam-Level: X-Spam-Status: No, score=-2.549 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cdhe61W2PQmf for ; Sun, 18 Nov 2012 01:23:06 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id CA37C21F8434 for ; Sun, 18 Nov 2012 01:23:06 -0800 (PST) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id DC1F7414A1 for ; Sun, 18 Nov 2012 04:23:01 -0500 (EST) Message-ID: <50A8A8F5.7060306@viagenie.ca> Date: Sun, 18 Nov 2012 10:23:01 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121029 Thunderbird/16.0.2 MIME-Version: 1.0 To: pcp@ietf.org References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> In-Reply-To: <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Nov 2012 09:23:07 -0000 FWIW, I share Alper's understanding fully. Simon Le 2012-11-17 00:46, Alper Yegin a écrit : > If PCP is operating in authenticated mode, all the messages shall be integrity protected. > Allowing some messages be consumed w/o integrity/replay/origin authentication is does not give us a secure solution. Does anyone disagree? > I don't understand why we should design such a thing. > > I know Sam's desire is to avoid supporting server-initiated re-auth. I don't understand why it's such a big deal that we should consider going with an incomplete security solution. > > It's simple. When the server has a message to send to the client, if there's no PCP SA available, the server initiates re-auth and instantiates a PCP SA to send the message securely. > Now, if the client is "sleeping", it won't wake up for auth. Auth will not generate PCP SA, the PCP message will be tossed away (because the PCP server cannot be sending an unsecure PCP message). [Same net effect for the unauthenticated case as well. A sleeping client will not receive the message from the server]. -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From internet-drafts@ietf.org Tue Nov 20 04:21:40 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B89C821F8666; Tue, 20 Nov 2012 04:21:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.478 X-Spam-Level: X-Spam-Status: No, score=-102.478 tagged_above=-999 required=5 tests=[AWL=0.121, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UJVfy+WGmW4D; Tue, 20 Nov 2012 04:21:40 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5431021F85C1; Tue, 20 Nov 2012 04:21:40 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121120122140.2763.43845.idtracker@ietfa.amsl.com> Date: Tue, 20 Nov 2012 04:21:40 -0800 Cc: pcp@ietf.org Subject: [pcp] I-D Action: draft-ietf-pcp-server-selection-00.txt X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 12:21:40 -0000 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the Port Control Protocol Working Group of th= e IETF. Title : PCP Server Selection Author(s) : Mohamed Boucadair Reinaldo Penno Dan Wing Prashanth Patil Tirumaleswar Reddy Filename : draft-ietf-pcp-server-selection-00.txt Pages : 10 Date : 2012-11-20 Abstract: This document specifies the behavior to be followed by the PCP Client to contact its PCP Server(s) when one or several PCP Names are configured. Multiple Names may be configured to a PCP Client in some deployment contexts such as multi-homing. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-pcp-server-selection There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-pcp-server-selection-00 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From iesg-secretary@ietf.org Tue Nov 20 06:43:47 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3880821F86CF; Tue, 20 Nov 2012 06:43:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.548 X-Spam-Level: X-Spam-Status: No, score=-102.548 tagged_above=-999 required=5 tests=[AWL=0.051, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id REGx049+I+oF; Tue, 20 Nov 2012 06:43:46 -0800 (PST) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3665821F86F7; Tue, 20 Nov 2012 06:43:46 -0800 (PST) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: The IESG To: IETF-Announce X-Test-IDTracker: no X-IETF-IDTracker: 4.36 Message-ID: <20121120144346.8465.7507.idtracker@ietfa.amsl.com> Date: Tue, 20 Nov 2012 06:43:46 -0800 Cc: pcp mailing list , pcp chair , RFC Editor Subject: [pcp] Protocol Action: 'Port Control Protocol (PCP)' to Proposed Standard (draft-ietf-pcp-base-29.txt) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2012 14:43:47 -0000 The IESG has approved the following document: - 'Port Control Protocol (PCP)' (draft-ietf-pcp-base-29.txt) as Proposed Standard This document is the product of the Port Control Protocol Working Group. The IESG contact persons are Ralph Droms and Brian Haberman. A URL of this Internet Draft is: http://datatracker.ietf.org/doc/draft-ietf-pcp-base/ Technical Summary The Port Control Protocol allows an IPv6 or IPv4 host to control how incoming IPv6 or IPv4 packets are translated and forwarded by a network address translator (NAT) or simple firewall, and also allows a host to optimize its outgoing NAT keepalive messages. Working Group Summary At the outset, the WG looked at many other protocols that have been proposed in the past for doing similar things, but almost none have been successful in getting real deployment. The exceptions are NAT-PMP and UPnP-IGD. Between them, the WG concluded that NAT-PMP was more closely aligned with the intended scenarios and hence used NAT-PMP as the starting point for PCP. Document Quality Several PCP implementations exist, and some interoperability testing has already been done. Margaret Wasserman did a thorough security analysis and wrote the security considerations section. Many others (beyond the authors themselves), including a number of implementers, have also done reviews and are acknowledged in the document. Personnel The Document Shepherd is Dave Thaler and the responsible Area Director is Ralph Droms. From repenno@cisco.com Mon Nov 26 06:34:44 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12C0121F84B6 for ; Mon, 26 Nov 2012 06:34:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P-bbcnEXq+ti for ; Mon, 26 Nov 2012 06:34:42 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id E85CB21F8594 for ; Mon, 26 Nov 2012 06:34:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=8542; q=dns/txt; s=iport; t=1353940481; x=1355150081; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=HqZ12d19GiROmxHBFet2WNxvDlpEjRJQaS/PK2Q/gbI=; b=dnflDAhko4BZum6i+yaVbX52HuDlsN3TUwud8yHk/WvkB2xWV7yld6sG g/wu7ewVwHn29OVxuQ7QdKT0olJ/fk3DZH9GFk8qDIvbrDerher3W2Tdo XUKat2iPcDHGL3dL7E51iRdv6zEMF3C1khjSnK2EhSqzhA1zW0JV+rOpZ Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAA59s1CtJV2a/2dsb2JhbABEwCMWc4IgAQQdHTQdARgSFEIlAgQbE4dynk+hC4w3FgaDRGEDpkWCb4FgAR4GGA X-IronPort-AV: E=McAfee;i="5400,1158,6907"; a="145984032" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by rcdn-iport-1.cisco.com with ESMTP; 26 Nov 2012 14:34:40 +0000 Received: from xhc-rcd-x04.cisco.com (xhc-rcd-x04.cisco.com [173.37.183.78]) by rcdn-core-3.cisco.com (8.14.5/8.14.5) with ESMTP id qAQEYew4032688 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Mon, 26 Nov 2012 14:34:40 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.66]) by xhc-rcd-x04.cisco.com ([173.37.183.78]) with mapi id 14.02.0318.001; Mon, 26 Nov 2012 08:34:40 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: PCP MoM (THURSDAY, November 8, 2012) Thread-Index: AQHNy+MqY9qDbIAuGEiLsDm583scgw== Date: Mon, 26 Nov 2012 14:34:39 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F06041761DA@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041388C2@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.151.98] Content-Type: text/plain; charset="us-ascii" Content-ID: <1239AE80A9230E45835F889682B0008D@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [pcp] PCP MoM (THURSDAY, November 8, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 14:34:44 -0000 PCP THU 1510-1710 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Welcome, Agenda bashing (5, Chairs) Francis Dupont: Adopt DS-Lite document as WG document? Dave Thaler: Will post question on mailing list WGLC Results (30) draft-ietf-pcp-base (Dan Wing) Paul Selkirk: The restrictions about delete-all should only apply to the simple threat model, not the advanced threat model Dan Wing: We don't have the text for advanced threat model written yet Paul Selkirk: But the document still describes delete-all, and then says it doesn't work Dave Thaler: Document can reference what's allowed under advanced threat model, without specifying how advanced threat model will work Paul Selkirk: Disallowing delete-all is a loss of functionality compared to NAT-PMP Stuart Cheshire: But we decided that functionality was not a good idea Margaret Wasserman: Document should limit making educated guesses about what advanced threat model allows before we know how advanced threat model works. Dave Thaler: Document should explicitly state this explicitly, e.g. "If simple threat model, then nonce must match; advanced threat model is yet to be defined" draft-ietf-pcp-upnp-igd-internetworking Paul Selkirk: I have some minor editorial nits with this document, but overall it is complete, and has no wacky ideas. draft-ietf-pcp-dhcp (Mohamed Boucadair) Stuart: Why name rather than IP address? Ralph: Use RFC 1035 encoding for forward compatibility with changes to DNS, e.g. internationalization. Dave: RFC 1035 restricts us to DNS names. Strings are not DNS names, pass string to name resolver, not specifically DNS resolver. Stuart: We should make a decision, should not accept non-fully qualified domain names (including trailing '.'). Stuart Cheshire: Should fit in with existing DHC conventions Mohamed Boucadair: This issue is closed; this WG and DHC have already approved this Ralph Droms: Really? DHC discussed this only this morning. Stuart Cheshire: Whatever it says, the document needs to be unambiguous Pete Resnick: Is what the DHCP server hands out protocol, or is it presentation layer that gets translated into protocol? If it's protocol, define it tightly. If it's presentation layer, you have to deal with all kinds of translation issues. Dave: It's protocol. Stuart: If we require the client to validate the name, we have to say how, but it's okay to remove the restriction in the first place. Stuart: Happy to defer to DHC WG about how to convey multiple strings. (e.g. single option with null separators or space separators.) Dan: Embedded nulls make me nervous, because poorly-written clients pass strings to things like strcpy(). Ralph: Multiple options or multiple sub-options are the norm in DHCP (including v6). Dave Thaler: In DHCPv4, multiple options are concatenated, so even with multiple options a separator or length prefix is still necessary Med to consult with Ted Lemon. If no objection, adopt Stuart's proposal for length byte followed by string, optionally followed by more counted strings? Optimizing NAT and Firewall Keepalives Using PCP (10, Markus Isomaki) draft-reddy-pcp-optimize-keepalives Keepalive Incentive Issues (10, Dave Thaler) (draft-ietf-pcp-base, draft-reddy-pcp-optimize-keepalives) Dave: Should we recommend that middleboxes give longer mapping timeout as a result of using PCP than for connections without PCP? If so, in which doc? If not, what's the point of mentioning it in the spec? Gang: Reducing keepalives beneficial not only to power, but to reducing congestion on the air interface. Stuart: Usefulness of timeout detection algorithms is unproven. You're assuming the lifetime of two different mappings is the same. You're assuming there's a stable lifetime in the first place. PEER gives the client a defined, committed lifetime, so this gives you more reliability. Markus: Timeout detection algorithms are known to fail. This may make them more reliable. Reinaldo: This could give us a way to detect not just the first middlebox, but other on-path middleboxes as well. Simon: We don't have any operational experience with this, so making a recommendation may be premature. Dave: There are documents in the IESG that are requiring use of PCP for power saving. Q1: Should there be a statement in some document? Strong hum in favor, none opposed. =20 Q2: Should this statement be in pcp-base? Strong hum in favor, none opposed. Ask on list for objections. Using PCP to control NAT and Firewalls in Multihoming (10, Tiru Reddy) draft-patil-pcp-multihoming-00 PCP Server Selection (10, Mohamed Boucadair) draft-boucadair-pcp-server-selection Tiru Reddy: Propose merging the two documents Dave: draft-boucadair-pcp-server-selection is a new non-WG document, but all the text is from a prior version of the dhcp document, which was accepted as a WG document, so the assumption is that this will be accepted as a WG document. Dave: We could choose to combine these two documents, or say that server selection stands on its own, and the multihoming draft just covers use cases. Prashanth: In favor of merging documents. Will call on list for objection to adopting as WG document. Retrieving the Capabilities of a PCP-controlled Device draft-boucadair-pcp-capability (10, Tiru Reddy) Dave Thaler: Yes, this is a valid problem. Clients may need to tailor behavior depending on whether server is NAT or Firewall Margaret Wasserman: Question is not as simple as "NAT or Firewall?" Things are not strictly NATs or firewalls, and the lines can be blurred so much that you can't give a meaningful answer. Very seldom in favor of any capability-discovery mechanism because they cause unnecessary failures. Stuart Cheshire: Problem is interesting, but we need to get some operational experience before we can say what is the right answer Dan Wing: Agree that capability discovery is fragile. Taxonomy of NAT vs. Firewall is too simplistic. Learn NAT64 PREFIX64s using PCP (10, Mohamed Boucadair) draft-boucadair-pcp-nat64-prefix64-option Dave Thaler: BEHAVE WG has a heuristic for this, which may not work in all cases Dan Wing: Should we ask BEHAVE WG to reference this solution? Dan Wing: Have you done a comparison of the BEHAVE heuristic compared to the PCP message? Mohamed Boucadair: Haven't done a detailed comparison with heuristic. People agree PCP is better Dave Thaler: If DHCP and PCP answers differ, then trust the PCP server -- it ought to know Tiru Reddy: PCP version also gives you the lifetime Dave Thaler: Call for adoption: strong hums in favor, none against. Analysis of PCP in Mobile Networks draft-chen-pcp-mobile-deployment (10, Mohamed Boucadair) Margaret Wasserman: Why would we run PCP differently in mobile networks? What makes mobile networks different? Mohamed Boucadair: It's guidance for network operators Reinaldo: Server discovery may be different, may not be your default gateway. Gang Chen: Mobile networks are different Margaret Wasserman: What makes PCP server discovery different Stuart Cheshire: 3GPP does not use DHCPv4, so it's not that "mobile" is different, it's that we have to define how to do PCP server discovery on 3GPP Stuart Cheshire: Apple Airport will act on any PCP request it sees, regardless of destination addr/port. So the solution may be anycast. Using PCP To Coordinate Between the CGN and Home Gateway Via Port Allocation draft-tsou-pcp-natcoord-08 (10, Simon Perreault) Alain Durand: Is this for PEER or only MAP? Simon Perreault: Only MAP Alain: I don't buy the no-DHCP argument. Also, is this idempotent? Simon: If you retransmit the same request with the same nonce, you get the same port set. If you transmit a new request with a new nonce, you get a different port set. Dave: Is this only for NAT44, or can it be extended to NAT64? Simon: This works the same for NAT44, NAT64, NAT66, etc. Call on list for adoption. Dave: Thanks to Alain for his service. =3D=3D=3D END =3D=3D=3D From repenno@cisco.com Mon Nov 26 06:36:18 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77B9B21F84CD for ; Mon, 26 Nov 2012 06:36:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AkCuBnXe4mYg for ; Mon, 26 Nov 2012 06:36:17 -0800 (PST) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) by ietfa.amsl.com (Postfix) with ESMTP id 8EE0621F84B9 for ; Mon, 26 Nov 2012 06:36:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=6219; q=dns/txt; s=iport; t=1353940577; x=1355150177; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=brEKiCQy9TgSz4DC12ixAy7MuK2XQm4aKKG9N/LTaEs=; b=TI3Phe9qWuyKGcaUECOTvg2t7B7YzqlXTRJ3Aj5wpa2naIb/sGjCNmgk CUTIVi1t9V2DA1aBzoaYa8yGB6xFzTQUpLlnmWRfRTTOoQlWoAxBLjz+T WJfJHXxGhMvyi5HNqwljFAjjUoEen5EJXTdJjuSDt2xufmjIWcuiHy5e/ w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av4EAOd9s1CtJXG+/2dsb2JhbABEwCMWc4IgAQQdHVEBKhRCJQIEGxOHcp5VoQuMN4NgYQOmRYJvgh0 X-IronPort-AV: E=McAfee;i="5400,1158,6907"; a="146200963" Received: from rcdn-core2-3.cisco.com ([173.37.113.190]) by rcdn-iport-5.cisco.com with ESMTP; 26 Nov 2012 14:36:17 +0000 Received: from xhc-rcd-x04.cisco.com (xhc-rcd-x04.cisco.com [173.37.183.78]) by rcdn-core2-3.cisco.com (8.14.5/8.14.5) with ESMTP id qAQEaHhr002702 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Mon, 26 Nov 2012 14:36:17 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.66]) by xhc-rcd-x04.cisco.com ([173.37.183.78]) with mapi id 14.02.0318.001; Mon, 26 Nov 2012 08:36:11 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: PCP MoM (FRIDAY, November 9, 2012) Thread-Index: AQHNy+NgJQ6ymYe7QUWcXPDF1+Vorg== Date: Mon, 26 Nov 2012 14:36:10 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.151.98] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 14:36:18 -0000 FRI 1120-1330 (note new end time) =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Welcome, Agenda bashing (5, Chairs) PCP Authentication Open Issues (60) draft-ietf-pcp-authentication (Margaret Wasserman) draft-ohba-pcp-pana (Yoshihiro Ohba) draft-ohba-pcp-pana-encap Margaret Wasserman: Alper said that using PANA gives you a simpler PCP implementation. In reality there are no PANA servers on most networks today, so there's more code to be written, supported, and deployed. Alan Dekok: I agree with Margaret. I've done EAP over multiple protocols, and it's not hard. PANA is rather a lot more work. Alper's statement that RADIUS forces server-initiated re-authentication is incorrect. Alper: COA RFC permits server-initiated re-authentication San Hartman: Yes, COA RFC permits server-initiated messages, but the footnote explains that it's for EAP error reporting, not for re-authentication. There is no way for a RADIUS server to force server-initiated re-authentication. Joe Salowey: EAP authentication can derive keying material. Are we making use of the MSK when using EAP directly? San Hartman: Yes, every packet is integrity-protected. Alper: When using PANA the keys will be exported for PCP to use. At the end of PANA authentication, PANA does a key confirmation. Joe Salowey: As long as messages are integrity-protected, that's good. San Hartman: Would like to hear from PCP implementers about what they want. I believe re-authentication is harmful and unnecessary. We should choose whatever retransmission mechanism is easier for PCP implementers. My opinion is that EAP over PCP is by a large margin, easier to specify, implement, and deploy. Existing PANA implementations are not suitable for use as libraries. There's a lot of work to be done to trim out the parts of PANA that PCP doesn't need. The IETF has lots of experience defining EAP over lower layers. Stuart Cheshire: Strongly agree with everything Sam said. As an implementer, I prefer the minimal approach of using EAP directly. Margaret Wasserman: We don't need to push re-authentication down to the client Sam: Re-auth is harmful because it requires the client to be awake. Hannes Tschofenig: Would like to hear from people that have actually implemented PANA. Re-authentication is not mandatory. There's no harm in having to implement protocol features that are never actually used. Hannes Tschofenig: People should actually implement what they're proposing. Yoshihiro Ohba: PANA is adopted by ETSI M2M. One of the open-source PANA implementations is based on a library, so it's available. Alper Yegin: The server has to send unsolicited messages to the client, so it has to be able to force the client to re-authenticate so that the server can send a message to it. Alper Yegin: PANA is adopted by Zigbee IP. Zigbee IP implementation is plenty small. Alan Dekok: Doing EAP over anything is pretty simple. PANA is, pretty much by definition, more work to implement. Simon Perreault: Authentication of announcements MUST be supported Alistair Woodman: Fixed line operators use RADIUS, mobile operators use DIAMETER. PCP authentication has to work with both. San Hartman: All three proposals do work with both. Yoshihiro Ohba: Carrying EAP over a lower layer is not easy. It needs a transport protocol with a sequence number. Tina Tsou: Would also like to hear from operators about what they want. Alper Yegin: I agree with Yoshihiro Ohba. Carrying EAP over a lower layer is not easy. DHCP tried to carry EAP over DHCP and failed miserably. Stuart Cheshire: Are you saying that DHCP ended up deciding it would have been better to use PANA? Alper Yegin: I didn't say that. Dave Thaler: Show of hands Issue #60: Loosely vs tightly coupled 21 Loosely coupled 0 Tightly coupled Issue #61: Server-Originated Re-Authentication Dave Thaler: Should protocol support server-initiated re-authentication? 10 Yes 5 No Sam to post straw-man solution Issue #62: Retransmissions Answer is not as important as whether we're doing PANA or not. Dave Thaler: Show of hands 12 EAP Direct 6 EAP-in-PANA Dave Thaler: Show of hands (implementers only) 3 EAP Direct 3 EAP-in-PANA Alper Yegin: Why ask what implementers think? PCP Description Option (10, Jaqueline Queiroz) draft-boucadair-pcp-description-option Tiru: This is important work. Reinaldo: This is useful for debugging/testing. Will discuss with AD, because it will require re-chartering. Then call for adoption on the list. Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity draft-boucadair-pcp-rtp-rtcp (10, Jaqueline Queiroz) Stuart Cheshire: This seems wrong for PCP to take on additional responsibility for the sake of a single legacy protocol Dan Wing: We should ask the SIP WG what they think. Stuart Cheshire: NAT-PMP and IGD don't do this today, so how "essential" can it be? How do even/odd SIP devices work today? Why is it "essential" that PCP give them something new, which they currently manage without? PCP NAT64 Experiments (15, Jaqueline Queiroz) draft-boucadair-pcp-nat64-experiments Jaqueline Queiroz: Do we need to cite RFC 6250? Dave Thaler: As author of 6250, I think no. Radius Extensions for PCP (10, Roberta Maglione) draft-maglione-pcp-radius-ext Paul Selkirk: Have you thought about how you'll represent a list of names in the RADIUS message? Roberta Maglione: It will match how the PCP DHCP option works Using PCP to Update Dynamic DNS draft-deng-pcp-ddns (10, Cathy Zhou) Paul: This is very marginally related to this WG. Stuart: This is important work, that Apple have been working on for a while. Would like more people aware of this, but not PCP-specific. Dave: Suggest socializing this in dnsop. -- END -- From dwing@cisco.com Mon Nov 26 13:43:10 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62D4021F86CF for ; Mon, 26 Nov 2012 13:43:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id naOxFGYdKTZQ for ; Mon, 26 Nov 2012 13:43:09 -0800 (PST) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id D980C21F86F7 for ; Mon, 26 Nov 2012 13:43:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1979; q=dns/txt; s=iport; t=1353966189; x=1355175789; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=u0nSYTKMV9JMmoREiQtq3dyvz+NHm2qCBmn5jlPSBRQ=; b=lQX0K8qK7fhe6H6ocxXFUZgQUnFcExoeTKHgz9Oe+r7pntv7mx6SkGGI n9rh/aafsN6LvBN5tYVmN8bnzXb9TVQLKgrktwXY4DusV+NZQJduuhSH3 ZD5AXwQ9wpld8U3+Zv5BvLrHp9HtDBssIyexl/bKRIRK6z6ZBJcMNU9Vz o=; X-IronPort-AV: E=McAfee;i="5400,1158,6908"; a="62392835" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-3.cisco.com with ESMTP; 26 Nov 2012 21:43:09 +0000 Received: from DWINGWS01 ([10.154.161.73]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qAQLh9Cl001510; Mon, 26 Nov 2012 21:43:09 GMT From: "Dan Wing" To: References: <45A697A8FFD7CF48BCF2BE7E106F060413B488@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F060413B488@xmb-rcd-x04.cisco.com> Date: Mon, 26 Nov 2012 13:43:08 -0800 Message-ID: <071401cdcc1f$06b24010$1416c030$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQGJh4JiCg0264t3j4/GzNVKOvMUpZiFLkfA Content-Language: en-us Cc: pcp-chairs@tools.ietf.org Subject: Re: [pcp] FW: Consensus from the WG meeting today X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 21:43:10 -0000 > -----Original Message----- > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > Reinaldo Penno (repenno) > Sent: Friday, November 09, 2012 6:13 AM > To: pcp@ietf.org > Subject: [pcp] FW: Consensus from the WG meeting today > > > > On 11/8/12 6:09 PM, "Dave Thaler" wrote: > > >The following three items had strong consensus (loud hums for, silence > >against) > >during the meeting today: > > > >1) Add text in pcp-base recommending that when the PCP server receives > >a PEER, it should give the flow a longer timeout than when PCP isn't > >used. > >(Several other > >documents, including requirements documents, have text that depends on > >this fact but it's not stated anywhere.) There was no email discussing this proposal, so I guess folks agree. Text will be: "So that PCP clients can reduce the frequency of their NAT and firewall keepalive messages, it is RECOMMENDED that lifetimes of mappings created or lengthened with PEER be longer than the lifetimes of implictly-created mappings." -d > >2) Adopt draft-boucadair-pcp-server-selection as a WG item. The actual > >content was recently separated out of draft-ietf-pcp-dhcp which was > >already a WG doc. > >(This is considered to be part of the existing milestone items, the WG > >just decided to split a milestone item into multiple docs.) > > > >3) Adopt draft-boucadair-pcp-nat64-prefix64-option as a WG item. This > >is not > >currently a milestone item. The chairs will confirm with the AD what > >needs to > >happen. > > > >If anyone on the list has a strong objection, let us know, as we plan > >to move forward with the above. > > > >Thanks for everyone's participation in these discussions at the meeting > >today. > > > >-Dave > > > > > > > > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From hartmans@painless-security.com Mon Nov 26 14:32:06 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56E7221F853B for ; Mon, 26 Nov 2012 14:32:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j2H-JN8Os904 for ; Mon, 26 Nov 2012 14:32:06 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 8072B21F8724 for ; Mon, 26 Nov 2012 14:32:05 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (unknown [10.1.10.107]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 79866201E2; Mon, 26 Nov 2012 17:30:28 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id DE09D414A; Mon, 26 Nov 2012 17:32:03 -0500 (EST) From: Sam Hartman To: "Dan Wing" References: <45A697A8FFD7CF48BCF2BE7E106F060413B488@xmb-rcd-x04.cisco.com> <071401cdcc1f$06b24010$1416c030$@cisco.com> Date: Mon, 26 Nov 2012 17:32:03 -0500 In-Reply-To: <071401cdcc1f$06b24010$1416c030$@cisco.com> (Dan Wing's message of "Mon, 26 Nov 2012 13:43:08 -0800") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org, pcp-chairs@tools.ietf.org Subject: Re: [pcp] FW: Consensus from the WG meeting today X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 22:32:06 -0000 Dan, pcp-base has already been marked approved. Are you sending out old e-mail? From dwing@cisco.com Mon Nov 26 14:49:21 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF45821F8548 for ; Mon, 26 Nov 2012 14:49:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.599 X-Spam-Level: X-Spam-Status: No, score=-110.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6i8odKjcRhfp for ; Mon, 26 Nov 2012 14:49:21 -0800 (PST) Received: from mtv-iport-1.cisco.com (mtv-iport-1.cisco.com [173.36.130.12]) by ietfa.amsl.com (Postfix) with ESMTP id 553C321F8542 for ; Mon, 26 Nov 2012 14:49:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=508; q=dns/txt; s=iport; t=1353970161; x=1355179761; h=from:to:cc:references:in-reply-to:subject:date: message-id:mime-version:content-transfer-encoding; bh=cwH4cyrYp4r+Ij/Pz+Cp1m9U7Yk01Oj5uEWZfHgjNt4=; b=dg1yYMzss8JwifY4ovkh3bNhStciJSZb31M4sbMJJ7XYrToC+JWLQck2 FJrjJx7vmRGXHhzQZzwd3kgV08Ql7mOQYlc6RQ49Pj/1/C3+n5fYNfmI/ O3Q+Wa2J4s0L4lFGRFkbhrjdyolKCBToRChnF7YOYJEj1GGMZxzLFPEur w=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AlkFALvxs1CrRDoH/2dsb2JhbABEhWG6Q4EJgh4BAQEDAQgCMD8FBwEDAgkRBAEBKAcZLQgBCAIEEwsFh3cFwHuMNwsQhCYDiF6FGogJkESDEIFHFw X-IronPort-AV: E=McAfee;i="5400,1158,6908"; a="61865035" Received: from mtv-core-2.cisco.com ([171.68.58.7]) by mtv-iport-1.cisco.com with ESMTP; 26 Nov 2012 22:49:20 +0000 Received: from DWINGWS01 ([10.154.161.73]) by mtv-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qAQMnKdj005933; Mon, 26 Nov 2012 22:49:20 GMT From: "Dan Wing" To: "'Sam Hartman'" References: <45A697A8FFD7CF48BCF2BE7E106F060413B488@xmb-rcd-x04.cisco.com> <071401cdcc1f$06b24010$1416c030$@cisco.com> In-Reply-To: Date: Mon, 26 Nov 2012 14:49:20 -0800 Message-ID: <081a01cdcc28$45e38830$d1aa9890$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQGJh4JiCg0264t3j4/GzNVKOvMUpQHPaNzWAhYDidyYZhWZ0A== Content-Language: en-us Cc: pcp@ietf.org, pcp-chairs@tools.ietf.org Subject: Re: [pcp] FW: Consensus from the WG meeting today X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2012 22:49:21 -0000 > -----Original Message----- > From: Sam Hartman [mailto:hartmans@painless-security.com] > Sent: Monday, November 26, 2012 2:32 PM > To: Dan Wing > Cc: pcp@ietf.org; pcp-chairs@tools.ietf.org > Subject: Re: [pcp] FW: Consensus from the WG meeting today > > Dan, pcp-base has already been marked approved. -29 was approved, but it did not contain the change summarized in Reinaldo's email. I wanted to make it clear that text change will be happening. > Are you sending out old e-mail? -d From alper.yegin@yegin.org Tue Nov 27 09:55:25 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C9E321F870C for ; Tue, 27 Nov 2012 09:55:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.11 X-Spam-Level: X-Spam-Status: No, score=-101.11 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hws3cGrWazQn for ; Tue, 27 Nov 2012 09:55:24 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id 50E7F21F8455 for ; Tue, 27 Nov 2012 09:55:10 -0800 (PST) Received: from [192.168.2.9] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus4) with ESMTP (Nemesis) id 0MBW50-1TU1Ab3fde-00Af3W; Tue, 27 Nov 2012 12:55:03 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=us-ascii From: Alper Yegin In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> Date: Tue, 27 Nov 2012 19:54:45 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> To: Alan DeKok X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:JQAqoepAivwvzjCQl5KcfqHXD5yLRzm2nfSshOGOeGT BuwZQL9cKdFhfOEnwIKDjx+yUl+FWaV0MbzuzXbvOUlpyal6E8 tPOt1PurDP4nrGA3GO5PvWK4VyH326NgoaxBcB05H4ltRsMBNW qTiTM12rp1Pi0qvVuyCKPdE1Pd1QlfpqWw95X1VC5MReU6jTT/ QBY20oTAgRBdvcFHNlpAMeeyPLm81EtGwsAKj5l1GE5S/iNXa0 2JPlfmVUoDibV+JftVjEwZbHraGXgzRJSJ4i+/foT6TgBmIQSl Ms7PxcMqiXicEXTye2ZMwhJ7LTozniF0c/bgFS+unPyA1FcX3U iHPd2pU4UMXU4ZId6Bip3GLvkoHrtORwV9TWeODHamSC6WTLUw BEXznVMRmIVuw== Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 17:55:25 -0000 Hi Alan, > Alan Dekok: I agree with Margaret. I've done EAP over multiple = protocols, > and > it's not hard. > PANA is rather a lot more work. =20 Because? (Just don't be saying IP-Reconfig, and Ping -- which counts for = 50-60 lines of PANA code. And not the re-auth either, as lack of that = makes people jump lot of hoops and does not even give you a secure = solution at the end, see Sam's attempt). > Alan Dekok: Doing EAP over anything is pretty simple. PANA is, pretty = much > by > definition, more work to implement. Can you expand on this? Alper From alper.yegin@yegin.org Tue Nov 27 10:02:17 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 030D321F8673 for ; Tue, 27 Nov 2012 10:02:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.855 X-Spam-Level: X-Spam-Status: No, score=-101.855 tagged_above=-999 required=5 tests=[AWL=0.745, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GmUb4ZWrip9g for ; Tue, 27 Nov 2012 10:02:16 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id 4AD5321F881E for ; Tue, 27 Nov 2012 10:02:16 -0800 (PST) Received: from [192.168.2.9] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus0) with ESMTP (Nemesis) id 0MWUGg-1Tkgta09t4-00Y3Rn; Tue, 27 Nov 2012 13:02:14 -0500 From: Alper Yegin Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 27 Nov 2012 20:01:58 +0200 Message-Id: <57DA6287-6BCD-4000-9EC3-DC96040BDE8B@yegin.org> To: pcp@ietf.org Mime-Version: 1.0 (Apple Message framework v1278) X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:8gJ+sbr9dZBLEMcWz9Wh1IzDxHvXfEycQYAXeNuf9oi dPHqZ3yc7unwHLszz2VOSR9XoH+UNm4YoeMZ7ZGztHp0seED3q mFLLfXFqK9OeJK6j7CJta3fjVy37KHA/v3EQ1Ig6xCOKcaSUVA ZDpGWzkeAkdI1TB2Qppr+2qn4UAV7+ZzeuUTyR2Yx2y0AjT2sm Jxz6FSz0G0qUWDGvmbzlxwvL/BTroPNmFbrIGtswjIGEi52Ehx 6rym0U+SFRYPTQZIasJvP68xw/AvFMZMzlGhcXH7ENp4voODE5 ugs+U2FDTXdbpa7lAuSkgpUrEwoqymKH8XIG+eN+XL9b42aQEO XQE33sUFiP2amha1uIqcrk7/2yVHMl18/kYRPZopSvFixOyC4t CnN7RdkL8AMyA== Subject: [pcp] Server-initiated re-auth X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 18:02:17 -0000 Based on the latest discussions, can we agree that the protocol needs to = support server-initiated re-authentication, and move on? (quick recap: If we don't support that, then a server that does not have = a live SA has no way to instantiate one when it needs to send a message = to the client. Sam made an attempt as solving this issue without = requiring server-side re-auth, but it does not work. If Sam thinks = otherwise, or if Sam or anyone else have any other ideas, let's hear = that. Otherwise, let's progress the discussion forward.) =20= From hartmans@painless-security.com Tue Nov 27 10:06:56 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19E0021F861F for ; Tue, 27 Nov 2012 10:06:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIL0ry8yHlnw for ; Tue, 27 Nov 2012 10:06:55 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 6F40221F85E6 for ; Tue, 27 Nov 2012 10:06:55 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id D286120167; Tue, 27 Nov 2012 13:05:16 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 7CAF9414A; Tue, 27 Nov 2012 13:06:52 -0500 (EST) From: Sam Hartman To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> Date: Tue, 27 Nov 2012 13:06:52 -0500 In-Reply-To: <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> (Alper Yegin's message of "Tue, 27 Nov 2012 19:54:45 +0200") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org, Alan DeKok Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 18:06:56 -0000 >>>>> "Alper" == Alper Yegin writes: I don't know what Alan's specific issues are, but I expanded on this a fair bit in my implementation analysis mail. I think the simplest way to look at implementation issues like this is to actually look at implementations. You described the points I brought up as relatively easy to resolve. I disagree with that assertion. Similarly Reinaldo brought up a number of his implementation concerns. You again described them as relatively trivial, although Reinaldo and I disagreed. Alan did not go into specifics. Ultimately it doesn't matter. The IETF does not come to consensus on implementation issues. We do consider them in deciding between options. It's useful for people to provide details so others can judge the credibility of the claims they are making. However, we come to consensus on approach for the standard, not on specific issues like implementation complexity. Perhaps Alan will provide details. I suspect you won't agree with whatever he says. We're basically going to be left with myself, Alan, Margaret, Reinaldo and Stuart believing that there are implementation challenges with PANA greater than with a PCP lower layer. You, Yoshi and perhaps others disagree. Each member of the group can consider all the opinions expressed when coming to their opinion about what approach we should choose. From hartmans@painless-security.com Tue Nov 27 10:09:09 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B928521F86B5 for ; Tue, 27 Nov 2012 10:09:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SpKPQvHki4Ca for ; Tue, 27 Nov 2012 10:09:09 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 41C1C21F85E6 for ; Tue, 27 Nov 2012 10:09:09 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 11A8F20167; Tue, 27 Nov 2012 13:07:31 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id BEB2A414A; Tue, 27 Nov 2012 13:09:06 -0500 (EST) From: Sam Hartman To: Alper Yegin References: <57DA6287-6BCD-4000-9EC3-DC96040BDE8B@yegin.org> Date: Tue, 27 Nov 2012 13:09:06 -0500 In-Reply-To: <57DA6287-6BCD-4000-9EC3-DC96040BDE8B@yegin.org> (Alper Yegin's message of "Tue, 27 Nov 2012 20:01:58 +0200") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Server-initiated re-auth X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 18:09:09 -0000 >>>>> "Alper" == Alper Yegin writes: Alper> Based on the latest discussions, can we agree that the Alper> protocol needs to support server-initiated re-authentication, Alper> and move on? ( Hi. Last week had a lot of holidays here in the US. I plan on responding to your latest message within a day or so. From alper.yegin@yegin.org Tue Nov 27 10:28:38 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6CE8C21F86DF for ; Tue, 27 Nov 2012 10:28:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.227 X-Spam-Level: X-Spam-Status: No, score=-102.227 tagged_above=-999 required=5 tests=[AWL=0.372, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ll-fTIRmoc4k for ; Tue, 27 Nov 2012 10:28:38 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id BA08E21F86C7 for ; Tue, 27 Nov 2012 10:28:37 -0800 (PST) Received: from [192.168.2.9] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus4) with ESMTP (Nemesis) id 0M9bCZ-1TW1uT2VaB-00DBSe; Tue, 27 Nov 2012 13:28:35 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=us-ascii From: Alper Yegin In-Reply-To: Date: Tue, 27 Nov 2012 20:28:16 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <8DCFA82B-3003-4FE9-AA46-3545B2F3F526@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> To: Sam Hartman X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:GkXJ3RjI3xfR7+qIT2ZPUEsRSKTLKqjtcHKJKj1e2v1 g3fzjpNRZJpWIl0h55lo2YloLkiX7/m9TmdmzIQH9Fpjx2KOdL Ho9uU+hD1Jm+nXCg8cwgA5IottxzoEf8tRYLzQ0YgzOhP3g6Qj O/iT8MBJLr0+TUHo0rcZXsuGOn21X2/iQBgtRZbhkL9O6PM15i FS+hXfEWztICyzbvpippAq1lANqN1F0F2TAJLfWFy15dzgb9EZ wTIEortOD66BeH8w5YhMDOlhVQ6X0dbdC5ZRJKyUL6ZJuuZ53s fCH3vhmizXzD69v/2WUeU5/WWWUwsQcEGO/GZGgJ/4syGwEHuM +SqULiS7dz5AFsH6HC6sDrbhdN+okF37c3mVgkop/i7c/HU1wP F74YtixBmn4xQ== Cc: pcp@ietf.org, Alan DeKok Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 18:28:38 -0000 Well, claims are interesting to hear, but not as much as hearing the = technical facts behind them. Making umbrella statements like "I disagreed" without giving any = technical reasons is not helpful at all.=20 Obviously, this discussion style is not productive. Arguing back and = forth without someone driving the discussion forward is such a waste of = time, for everyone. I, once again, calling the chairs to more actively drive the discussion = forward. Either they can do it, or they designate a neutral party to = summarize the discussions towards making decisions. Honestly, this = excessive amount of back-and-forth on discussion points without someone = putting an end to it is wasteful.=20 On Nov 27, 2012, at 8:06 PM, Sam Hartman wrote: >>>>>> "Alper" =3D=3D Alper Yegin writes: >=20 >=20 > I don't know what Alan's specific issues are, but I expanded on this = a > fair bit in my implementation analysis mail. > I think the simplest way to look at implementation issues like this is > to actually look at implementations. >=20 > You described the points I brought up as relatively easy to resolve. I > disagree with that assertion. >=20 > Similarly Reinaldo brought up a number of his implementation > concerns. You again described them as relatively trivial, although > Reinaldo and I disagreed. >=20 > Alan did not go into specifics. >=20 > Ultimately it doesn't matter. The IETF does not come to consensus on > implementation issues. We do consider them in deciding between > options. It's useful for people to provide details so others can judge > the credibility of the claims they are making. > However, we come to consensus on approach for the standard, not on > specific issues like implementation complexity. >=20 > Perhaps Alan will provide details. I suspect you won't agree with > whatever he says. > We're basically going to be left with myself, Alan, Margaret, Reinaldo = and Stuart > believing that there are implementation challenges with PANA greater > than with a PCP lower layer. > You, Yoshi and perhaps others disagree. > Each member of the group can consider all the opinions expressed = when > coming to their opinion about what approach we should choose. From alper.yegin@yegin.org Tue Nov 27 11:18:48 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C6A8C21F85AB for ; Tue, 27 Nov 2012 11:18:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.302 X-Spam-Level: X-Spam-Status: No, score=-102.302 tagged_above=-999 required=5 tests=[AWL=0.297, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OBAstgHNYraf for ; Tue, 27 Nov 2012 11:18:48 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 3F9AA21F850B for ; Tue, 27 Nov 2012 11:18:48 -0800 (PST) Received: from [192.168.2.9] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus0) with ESMTP (Nemesis) id 0LkNmt-1T6qsq2f87-00bzfd; Tue, 27 Nov 2012 14:18:47 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=windows-1252 From: Alper Yegin In-Reply-To: <50B50B60.9000507@deployingradius.com> Date: Tue, 27 Nov 2012 21:18:11 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> To: Alan DeKok X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:Nv8QuJNbeLTbrjTIkzlg+Y27o5Z++qOhBFB/c2ELA7y n0A+p6EPD1Ovvueo/lD+CgEvKgFTB/Y9MRyRcUF9mrpIpX2CQi T3oVeKEd9JAi5Mx835qcl7wwit0PdQPCB3qdOj2exQ3yBEeOYY kyD3MjCkpH0wYPBcS/YrIUYUNvM0rRiV7mExvmN6RMWsuVtAFg t7X6vr/cGwaRgZzAUDPN4jx7PLk/VRHTBNk1KqbVjLppBvZFZp Mmheyu1ijA4xNNnzRvYkneUFqCyI71k5vm6cv1ezFXkqlFlIz8 98yKmiGzH4RECQEI6drGFtIo2S46hGVdX86YkE+UvQKSxn9pbp Bm4fLAponPCJALZCqkDs2fzwLZPu+rX7hXN0e84ZT3WKQL4Jdi lVKdv6OJVsMcQ== Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 19:18:48 -0000 Alan, I don't remember anyone saying "implementing PANA is trivial". The only claims on the table are like the ones from you. = Unsubstantiated. Your data below is less than useful. Why? Because first of all, we are comparing a multi-vendor implemented = interoperating IETF standard RFC with some uncooked solution.=20 Those numbers could make some sense, if any, when we have EAP-o-PCP = solution at the same level of maturity.=20 Besides, when providing such numbers you really need to be more = scientific and provide lot of background. Otherwise, I gotta tell you, = they look way too unrealistic and scary=85.. Alper On Nov 27, 2012, at 8:50 PM, Alan DeKok wrote: > Alper Yegin wrote: >>> Alan Dekok: I agree with Margaret. I've done EAP over multiple = protocols, >>> and >>> it's not hard. >>>=20 >>> PANA is rather a lot more work. =20 >>=20 >> Because? >=20 > Experience? >=20 > And reading the PANA specs... there's rather a lot more there than > just encapsulating EAP into another transport layer. RFC 5191 has = about > 40 pages of requirements, state machine, protocol encoding, etc. >=20 >>> Alan Dekok: Doing EAP over anything is pretty simple. PANA is, = pretty much >>> by >>> definition, more work to implement. >>=20 >> Can you expand on this? >=20 > I find it astonishing that anyone would claim that implementing PANA > is trivial. It would take anyone a fair bit of time to read the RFCs > and implement PANA. >=20 > As proof, I've looked at both OpenPANA and cpana. The "sloccount" > code metric tool says: >=20 > Openpana: > Total Physical Source Lines of Code (SLOC) =3D 6,912 > Total Estimated Cost to Develop =3D $ = 205,696 >=20 > Cpana: > Total Physical Source Lines of Code (SLOC) =3D 16,397 > Total Estimated Cost to Develop =3D $ = 509,500 >=20 > Which fits in with my earlier estimate. That's just the PANA = portion, > and doesn't include any EAP methods. >=20 > Alan DeKok. From aland@deployingradius.com Tue Nov 27 13:13:13 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5671D21F8797 for ; Tue, 27 Nov 2012 13:13:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 63oZEp2T0zqI for ; Tue, 27 Nov 2012 13:13:12 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 9B3DD21F880D for ; Tue, 27 Nov 2012 13:13:09 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 48E702240C5B; Tue, 27 Nov 2012 22:12:20 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JCoWQbxvvLGd; Tue, 27 Nov 2012 22:12:19 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 297BF22406D4; Tue, 27 Nov 2012 22:12:19 +0100 (CET) Message-ID: <50B52CB2.7090706@deployingradius.com> Date: Tue, 27 Nov 2012 16:12:18 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> In-Reply-To: <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2012 21:13:13 -0000 Alper Yegin wrote: > I don't remember anyone saying "implementing PANA is trivial". You keep saying things like "it's only 50 lines of code". That meets the definition of "trivial". I showed that a PANA implementation is more like 10K lines of code. And neither CPANA and OpenPANA are suitable for use as a library in a production environment. So the current available information shows it's not "trivial". > The only claims on the table are like the ones from you. Unsubstantiated. Only if "unsubstantiated" means "supported by data". > Your data below is less than useful. Nonsense. > Why? Because first of all, we are comparing a multi-vendor implemented interoperating IETF standard RFC with some uncooked solution. "We" are doing no such thing. I was trying to discuss the cost of a PANA solution (code, time, $$) using publicly available data. You're ignoring that data. Instead, you're using proprietary (i.e. secret) vendor data to support your position. But you aren't sharing that data with us. Are we supposed to believe you simply because you say you're right? That fits the dictionary definition of "unsubstantiated". > Those numbers could make some sense, if any, when we have EAP-o-PCP solution at the same level of maturity. Again, I have facts. As I said earlier, and as you well know from the discussions at the time, I have implemented EAP over other transport layers: $ git diff eapodhcp master | wc -l 462 That is ~500 LoC to implement EAP using DHCP as a transport layer, via an existing DHCP server. That code is *just* transport. All of the EAP work is done by the wpa_supplicant EAP library. That's hard data. Any PCP implementation can be extended to transport EAP with (ballpark) 500 lines of code. In contrast, PANA requires fixing the open source PANA implementations, with some unknown amount of effort. Or, it requires integration with proprietary vendor implementations, with some unknown amount of effort. Again, I have data, and you have unsubstantiated assertions. > Besides, when providing such numbers you really need to be more scientific and provide lot of background. Otherwise, I gotta tell you, they look way too unrealistic and scary….. Well... I'm a published nuclear physicist. I think I have some comprehension of scientific methods. Bald claims of "more scientific" and "provide more background" are meaningless. In addition, you've imposed arbitrary requirements on me, but avoided them yourself. I can play the same destructive game. You have provided no background for your claims of inter-operable implementations of PANA. I'm willing to agree that they exist, but you've provided no data about their complexity, cost of development, or cost of integration. By your own rules, your position is unsubstantiated by any data, and you need to provide more background. The only facts under discussion right now are the ones I have given. They are based on publicly available data, which can be independently verified by anyone. That is following the scientific method. I welcome public data to support your position. Until then, your position is based on appeals to authority, and zero data. Alan DeKok. From hartmans@painless-security.com Tue Nov 27 17:51:06 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3CC521F846E for ; Tue, 27 Nov 2012 17:51:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l48jS-dPhe3l for ; Tue, 27 Nov 2012 17:51:06 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 3F70B21F8460 for ; Tue, 27 Nov 2012 17:51:06 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 0FA02202C7; Tue, 27 Nov 2012 20:49:27 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 9155A414A; Tue, 27 Nov 2012 18:23:57 -0500 (EST) From: Sam Hartman To: Alan DeKok References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> Date: Tue, 27 Nov 2012 18:23:57 -0500 In-Reply-To: <50B52CB2.7090706@deployingradius.com> (Alan DeKok's message of "Tue, 27 Nov 2012 16:12:18 -0500") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 01:51:06 -0000 I agree with Alan's rough data. EAP over GSS-API is somewhat larger than Alan's EAP over DHCP, although I made no effort to trim out GSS bits unrelated to EAP from the data I reported. However it's definitely smaller than both open-source PANA implementations. In addition, once you have a production ready PANA implementation, you still need to write the glue between PANA and EAP. If you have a PANA library and if a couple other assumptions are true, that might actually be relatively easy. If you have a non-library PANA and need an IPC mechanism, that's likely to be moderately complex probably on the same order of complexity as an EAP lower layer for PCP. --Sam From yoshihiro.ohba@toshiba.co.jp Tue Nov 27 19:08:35 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B40AB21E8043 for ; Tue, 27 Nov 2012 19:08:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.089 X-Spam-Level: X-Spam-Status: No, score=-4.089 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tyR-zCR98JtV for ; Tue, 27 Nov 2012 19:08:35 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id D1D6721F8754 for ; Tue, 27 Nov 2012 19:08:34 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qAS38OYI025309 for ; Wed, 28 Nov 2012 12:08:24 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qAS38OHg007008 for pcp@ietf.org; Wed, 28 Nov 2012 12:08:24 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id NAA06998; Wed, 28 Nov 2012 12:08:24 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qAS38NQ2007867 for ; Wed, 28 Nov 2012 12:08:23 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAS38NID022220; Wed, 28 Nov 2012 12:08:23 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME600HK1GPZ53A0@mail.po.toshiba.co.jp> for pcp@ietf.org; Wed, 28 Nov 2012 12:08:23 +0900 (JST) Date: Wed, 28 Nov 2012 12:08:27 +0900 From: Yoshihiro Ohba In-reply-to: <50B52CB2.7090706@deployingradius.com> To: pcp@ietf.org Message-id: <50B5802B.4020907@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=windows-1252; format=flowed Content-transfer-encoding: 8BIT References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 03:08:35 -0000 Alan, Where is the EAP over DHCP specification that is implemented by you available? How the specification satisfies EAP lower-layer requirements? Who reviewed the specification? More information about the target protocol would be appreciated because it would make sense to discuss code size of a particular implemetation of a particular protocol only if everyone agrees that the protocol itself is properly designed. Regards, Yoshihiro Ohba (2012/11/28 6:12), Alan DeKok wrote: > Alper Yegin wrote: >> I don't remember anyone saying "implementing PANA is trivial". > You keep saying things like "it's only 50 lines of code". That meets > the definition of "trivial". > > I showed that a PANA implementation is more like 10K lines of code. > And neither CPANA and OpenPANA are suitable for use as a library in a > production environment. So the current available information shows it's > not "trivial". > >> The only claims on the table are like the ones from you. Unsubstantiated. > Only if "unsubstantiated" means "supported by data". > >> Your data below is less than useful. > Nonsense. > >> Why? Because first of all, we are comparing a multi-vendor implemented interoperating IETF standard RFC with some uncooked solution. > "We" are doing no such thing. I was trying to discuss the cost of a > PANA solution (code, time, $$) using publicly available data. You're > ignoring that data. Instead, you're using proprietary (i.e. secret) > vendor data to support your position. But you aren't sharing that data > with us. > > Are we supposed to believe you simply because you say you're right? > That fits the dictionary definition of "unsubstantiated". > >> Those numbers could make some sense, if any, when we have EAP-o-PCP solution at the same level of maturity. > Again, I have facts. As I said earlier, and as you well know from the > discussions at the time, I have implemented EAP over other transport > layers: > > $ git diff eapodhcp master | wc -l > 462 > > That is ~500 LoC to implement EAP using DHCP as a transport layer, via > an existing DHCP server. That code is *just* transport. All of the EAP > work is done by the wpa_supplicant EAP library. > > That's hard data. Any PCP implementation can be extended to transport > EAP with (ballpark) 500 lines of code. > > In contrast, PANA requires fixing the open source PANA > implementations, with some unknown amount of effort. Or, it requires > integration with proprietary vendor implementations, with some unknown > amount of effort. > > Again, I have data, and you have unsubstantiated assertions. > >> Besides, when providing such numbers you really need to be more scientific and provide lot of background. Otherwise, I gotta tell you, they look way too unrealistic and scary….. > Well... I'm a published nuclear physicist. I think I have some > comprehension of scientific methods. Bald claims of "more scientific" > and "provide more background" are meaningless. In addition, you've > imposed arbitrary requirements on me, but avoided them yourself. > > I can play the same destructive game. You have provided no background > for your claims of inter-operable implementations of PANA. I'm willing > to agree that they exist, but you've provided no data about their > complexity, cost of development, or cost of integration. By your own > rules, your position is unsubstantiated by any data, and you need to > provide more background. > > The only facts under discussion right now are the ones I have given. > They are based on publicly available data, which can be independently > verified by anyone. That is following the scientific method. > > I welcome public data to support your position. Until then, your > position is based on appeals to authority, and zero data. > > Alan DeKok. > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > From aland@deployingradius.com Tue Nov 27 20:18:20 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A240D11E8099 for ; Tue, 27 Nov 2012 20:18:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 32Uta5RQQEpP for ; Tue, 27 Nov 2012 20:18:19 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 3932721F867A for ; Tue, 27 Nov 2012 20:18:19 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 632EF2240C5B; Wed, 28 Nov 2012 05:17:16 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3GSU-nTytCct; Wed, 28 Nov 2012 05:17:12 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 8EED122406D4; Wed, 28 Nov 2012 05:17:12 +0100 (CET) Message-ID: <50B59047.2080503@deployingradius.com> Date: Tue, 27 Nov 2012 23:17:11 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> In-Reply-To: <50B5802B.4020907@toshiba.co.jp> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 04:18:20 -0000 Yoshihiro Ohba wrote: > Where is the EAP over DHCP specification that is implemented by you > available? The last code I published is at: http://git.freeradius.org/eapodhcp.html > How the specification satisfies EAP lower-layer requirements? Who > reviewed the specification? More information about the target protocol > would be appreciated because it would make sense to discuss code size > of a particular implemetation of a particular protocol only if everyone > agrees that the protocol itself is properly designed. Happily, we don't have to. As an implementor, Sam said his code was close, but a bit bigger than my numbers. So we have (again) more confirmation that I'm in the right ballpark. I'm sure Sam could product detailed numbers, if he wants. I welcome similar numbers from anyone else. And independent of numbers, anyone *still* has to convince me that EAP over PCP is more complex than EAP over PANA over PCP. Simple logic tells me that cannot possibly be true. Alan DeKok. From yoshihiro.ohba@toshiba.co.jp Tue Nov 27 20:56:32 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E848721F85E8 for ; Tue, 27 Nov 2012 20:56:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.089 X-Spam-Level: X-Spam-Status: No, score=-6.089 tagged_above=-999 required=5 tests=[AWL=2.000, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e1a4FdXLWYWp for ; Tue, 27 Nov 2012 20:56:31 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id A350B21F857D for ; Tue, 27 Nov 2012 20:56:31 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qAS4uJmR009577; Wed, 28 Nov 2012 13:56:19 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qAS4uJeH007206; Wed, 28 Nov 2012 13:56:19 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id PAA07205; Wed, 28 Nov 2012 13:56:19 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qAS4uIPg026623; Wed, 28 Nov 2012 13:56:19 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAS4uIHt002106; Wed, 28 Nov 2012 13:56:18 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME600H9YLPU50C0@mail.po.toshiba.co.jp>; Wed, 28 Nov 2012 13:56:18 +0900 (JST) Date: Wed, 28 Nov 2012 13:56:21 +0900 From: Yoshihiro Ohba In-reply-to: <50B59047.2080503@deployingradius.com> To: Alan DeKok Message-id: <50B59975.2030900@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=windows-1252; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 04:56:33 -0000 Alan, I appreciate your attempt to share more information with us. As you may know, you implemented the protocol (http://tools.ietf.org/html/draft-pruss-dhcp-auth-dsl-07) on which IETF did not reach consensus in 2010 to work on it, after a lengthy debate in both DHC WG and Intarea. Since I really don't think the protocol is properly designed (that is why it got a push-back), usefulfuness of the provided code size data on the protocol in the context of evaluating PCP authentication proposals is limited IMO. I believe a proper EAP transport design over UDP will look like PANA or IKEv2. Best Regards, Yoshihiro Ohba (2012/11/28 13:17), Alan DeKok wrote: > Yoshihiro Ohba wrote: >> Where is the EAP over DHCP specification that is implemented by you >> available? > The last code I published is at: > > http://git.freeradius.org/eapodhcp.html > >> How the specification satisfies EAP lower-layer requirements? Who >> reviewed the specification? More information about the target protocol >> would be appreciated because it would make sense to discuss code size >> of a particular implemetation of a particular protocol only if everyone >> agrees that the protocol itself is properly designed. > Happily, we don't have to. As an implementor, Sam said his code was > close, but a bit bigger than my numbers. So we have (again) more > confirmation that I'm in the right ballpark. I'm sure Sam could product > detailed numbers, if he wants. > > I welcome similar numbers from anyone else. > > And independent of numbers, anyone *still* has to convince me that EAP > over PCP is more complex than EAP over PANA over PCP. Simple logic > tells me that cannot possibly be true. > > Alan DeKok. > From yoshihiro.ohba@toshiba.co.jp Tue Nov 27 21:39:37 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B269421E8043 for ; Tue, 27 Nov 2012 21:39:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.089 X-Spam-Level: X-Spam-Status: No, score=-5.089 tagged_above=-999 required=5 tests=[AWL=-1.000, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0q8ItYeqOKq3 for ; Tue, 27 Nov 2012 21:39:36 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id 75C9821E803F for ; Tue, 27 Nov 2012 21:39:35 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qAS5dZt2004238 for ; Wed, 28 Nov 2012 14:39:35 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qAS5dYL5012627 for pcp@ietf.org; Wed, 28 Nov 2012 14:39:34 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id QAA12613; Wed, 28 Nov 2012 14:39:34 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qAS5dYuO026507 for ; Wed, 28 Nov 2012 14:39:34 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAS5dYrd006061; Wed, 28 Nov 2012 14:39:34 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME600HYXNPX53C0@mail.po.toshiba.co.jp> for pcp@ietf.org; Wed, 28 Nov 2012 14:39:34 +0900 (JST) Date: Wed, 28 Nov 2012 14:39:36 +0900 From: Yoshihiro Ohba In-reply-to: <50B52CB2.7090706@deployingradius.com> To: pcp@ietf.org Message-id: <50B5A398.9040602@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=windows-1252; format=flowed Content-transfer-encoding: 8BIT References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 05:39:37 -0000 Detailed cpana code size data is available at: http://www.lix.polytechnique.fr/hipercom/SmartObjectSecurity/papers/MitsuruKanda.pdf Regards, Yoshihiro Ohba (2012/11/28 6:12), Alan DeKok wrote: > Alper Yegin wrote: >> I don't remember anyone saying "implementing PANA is trivial". > You keep saying things like "it's only 50 lines of code". That meets > the definition of "trivial". > > I showed that a PANA implementation is more like 10K lines of code. > And neither CPANA and OpenPANA are suitable for use as a library in a > production environment. So the current available information shows it's > not "trivial". > >> The only claims on the table are like the ones from you. Unsubstantiated. > Only if "unsubstantiated" means "supported by data". > >> Your data below is less than useful. > Nonsense. > >> Why? Because first of all, we are comparing a multi-vendor implemented interoperating IETF standard RFC with some uncooked solution. > "We" are doing no such thing. I was trying to discuss the cost of a > PANA solution (code, time, $$) using publicly available data. You're > ignoring that data. Instead, you're using proprietary (i.e. secret) > vendor data to support your position. But you aren't sharing that data > with us. > > Are we supposed to believe you simply because you say you're right? > That fits the dictionary definition of "unsubstantiated". > >> Those numbers could make some sense, if any, when we have EAP-o-PCP solution at the same level of maturity. > Again, I have facts. As I said earlier, and as you well know from the > discussions at the time, I have implemented EAP over other transport > layers: > > $ git diff eapodhcp master | wc -l > 462 > > That is ~500 LoC to implement EAP using DHCP as a transport layer, via > an existing DHCP server. That code is *just* transport. All of the EAP > work is done by the wpa_supplicant EAP library. > > That's hard data. Any PCP implementation can be extended to transport > EAP with (ballpark) 500 lines of code. > > In contrast, PANA requires fixing the open source PANA > implementations, with some unknown amount of effort. Or, it requires > integration with proprietary vendor implementations, with some unknown > amount of effort. > > Again, I have data, and you have unsubstantiated assertions. > >> Besides, when providing such numbers you really need to be more scientific and provide lot of background. Otherwise, I gotta tell you, they look way too unrealistic and scary….. > Well... I'm a published nuclear physicist. I think I have some > comprehension of scientific methods. Bald claims of "more scientific" > and "provide more background" are meaningless. In addition, you've > imposed arbitrary requirements on me, but avoided them yourself. > > I can play the same destructive game. You have provided no background > for your claims of inter-operable implementations of PANA. I'm willing > to agree that they exist, but you've provided no data about their > complexity, cost of development, or cost of integration. By your own > rules, your position is unsubstantiated by any data, and you need to > provide more background. > > The only facts under discussion right now are the ones I have given. > They are based on publicly available data, which can be independently > verified by anyone. That is following the scientific method. > > I welcome public data to support your position. Until then, your > position is based on appeals to authority, and zero data. > > Alan DeKok. > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > From alper.yegin@yegin.org Wed Nov 28 00:17:25 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2577721F874A for ; Wed, 28 Nov 2012 00:17:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.362 X-Spam-Level: X-Spam-Status: No, score=-102.362 tagged_above=-999 required=5 tests=[AWL=0.237, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0tO7njNF0E-E for ; Wed, 28 Nov 2012 00:17:24 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.194]) by ietfa.amsl.com (Postfix) with ESMTP id EB96821F87B9 for ; Wed, 28 Nov 2012 00:17:23 -0800 (PST) Received: from [192.168.2.7] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus1) with ESMTP (Nemesis) id 0MFe8r-1TP6mS2lV7-00EdiJ; Wed, 28 Nov 2012 03:17:16 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=windows-1252 From: Alper Yegin In-Reply-To: <50B52CB2.7090706@deployingradius.com> Date: Wed, 28 Nov 2012 10:16:48 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <2143230D-69B2-4F79-9693-0CCA7AC19713@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> To: Alan DeKok X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:9T/F65Wj+638MrX1tt9xGiYDfQvdnq1Lh/lixnsLiZg k1CF8L484+DmQOLT0NJTO5GTil8mtUHL84YrEYps7oVNqXxOBq /CjGzXQtTq8g8M9fL5Ds6Bt2ruHp3kSI4UJ7muFV/oSlzBsYje Klgej+HTMFb2lkR6lmuxYJ4v736LgeYLt2n/NkBkX8zPTxUBB3 b91foJmNGiU4qI15MScdwOC2TcMxfV9LZF2R/Ue4rJwFsKEXT8 acfbHsJ8KEom1AzKPwj1Hzq8QosBq/6AL44jHyOPBvzJUvqbxV KpE8Bvxs8Vxf4Izd6a7Wc8zueKYYIPP8gK+WxukQmiNgD2tcyh t5S3/m1b8Aki4/+HRGcJhZaQdTM42bLzMHUrfu8yg3iLWVFzpu 25IemaixwLs9g== Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 08:17:25 -0000 Alan, Now I understand why you are under the wrong impression about PANA. You are benchmarking it against EAPoDHCP, a protocol work that was = half-cooked and broken when it was rejected by IETF.=20 Sure it'd have less number of lines=85. I'm not surprised at all.=20 Well, anyways, if you think some parts of PANA are not needed, let's = discuss that. We did discuss and agree on the PANA-Ping and IP-Reconfig = features, which did not have much impact on code size anyways. Re-auth = is proving to be necessary, so it's not something that can be yanked = out.=20 See below. > Alper Yegin wrote: >> I don't remember anyone saying "implementing PANA is trivial". >=20 > You keep saying things like "it's only 50 lines of code". That meets > the definition of "trivial". >=20 You must have misunderstood. The whole PANA implementation is not 50 = lines of code. I clearly stated that the agreed extra parts (ping and ip reconfig) are = 50-60 lines of code. > I showed that a PANA implementation is more like 10K lines of code. > And neither CPANA and OpenPANA are suitable for use as a library in a > production environment. So the current available information shows = it's > not "trivial". >=20 >> The only claims on the table are like the ones from you. = Unsubstantiated. >=20 > Only if "unsubstantiated" means "supported by data". >=20 >> Your data below is less than useful. >=20 > Nonsense. >=20 >> Why? Because first of all, we are comparing a multi-vendor = implemented interoperating IETF standard RFC with some uncooked = solution.=20 >=20 > "We" are doing no such thing. I was trying to discuss the cost of a > PANA solution (code, time, $$) using publicly available data. You're > ignoring that data. Instead, you're using proprietary (i.e. secret) > vendor data to support your position. But you aren't sharing that = data > with us. >=20 What data are you referring to? 50-60 lines of code is based on the open = source implementations. > Are we supposed to believe you simply because you say you're right? > That fits the dictionary definition of "unsubstantiated". >=20 >> Those numbers could make some sense, if any, when we have EAP-o-PCP = solution at the same level of maturity.=20 >=20 > Again, I have facts. As I said earlier, and as you well know from = the > discussions at the time, I have implemented EAP over other transport > layers: >=20 > $ git diff eapodhcp master | wc -l > 462 >=20 > That is ~500 LoC to implement EAP using DHCP as a transport layer, = via > an existing DHCP server. That code is *just* transport. All of the = EAP > work is done by the wpa_supplicant EAP library. >=20 > That's hard data. Any PCP implementation can be extended to = transport > EAP with (ballpark) 500 lines of code. >=20 EAPoDHCP is such a wrong benchmark. It's broken, it does not work, it's = incomplete, just a draft=85=85.=20 > In contrast, PANA requires fixing the open source PANA > implementations, with some unknown amount of effort. Or, it requires > integration with proprietary vendor implementations, with some unknown > amount of effort. >=20 > Again, I have data, and you have unsubstantiated assertions. >=20 >> Besides, when providing such numbers you really need to be more = scientific and provide lot of background. Otherwise, I gotta tell you, = they look way too unrealistic and scary=85.. >=20 > Well... I'm a published nuclear physicist. I think I have some > comprehension of scientific methods. Bald claims of "more scientific" > and "provide more background" are meaningless. In addition, you've > imposed arbitrary requirements on me, but avoided them yourself. >=20 > I can play the same destructive game. You have provided no = background > for your claims of inter-operable implementations of PANA. =20 PANA is in Zigbee IP spec, and it went thru multiple interop events = before the Zigbee IP spec is published. > I'm willing > to agree that they exist, but you've provided no data about their > complexity, cost of development, or cost of integration. By your own > rules, your position is unsubstantiated by any data, and you need to > provide more background. >=20 > The only facts under discussion right now are the ones I have given. > They are based on publicly available data, which can be independently > verified by anyone. That is following the scientific method. >=20 > I welcome public data to support your position. Until then, your > position is based on appeals to authority, and zero data. >=20 > Alan DeKok. From alper.yegin@yegin.org Wed Nov 28 00:29:51 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00B6621F84FE for ; Wed, 28 Nov 2012 00:29:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.401 X-Spam-Level: X-Spam-Status: No, score=-102.401 tagged_above=-999 required=5 tests=[AWL=0.198, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VXmbPgYEZ5pa for ; Wed, 28 Nov 2012 00:29:50 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id 6B0CB21F84E3 for ; Wed, 28 Nov 2012 00:29:50 -0800 (PST) Received: from [192.168.2.7] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus2) with ESMTP (Nemesis) id 0MC4Ay-1TUraC3Fvk-009Gi1; Wed, 28 Nov 2012 03:29:49 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=windows-1252 From: Alper Yegin In-Reply-To: <50B59047.2080503@deployingradius.com> Date: Wed, 28 Nov 2012 10:29:29 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <95F56524-9457-43DE-B02F-CD34D4335F37@yegin.org> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> To: Alan DeKok X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:Fr2yQmwIpvqpSDeso6hbVNN/mQkuMU027v/Ofx51H3q d8Em9gWw7kH0buqNtot0pESjQhwsSeYcgMe3aA1o2/fNPSs61+ ANehaAWd89fmlXwCPkT3JaetoVHULVXrqloo1yWbM3kzHD9IUM 6Q1nFqRl1ZzSQ35qcajzcL67NhjjFcuCuMz227Wnwz6IfYYOyN w44/B0atY0jly7yMbz6Ud18jTdzRoEIAG13RbBxhK3IiGaDnDn wgyLY0nl7Q+G7mFaB4xsttiNszjAmEZxRfb64XKV7Dl7eyXqxe lI/rbMWn9Waee3mnP9XQpLbxqwo3LfQJOJx8zkN7FDGJKFgC2L dXshvyBVTPJn7tn7gEhNklrUVe4qSMZR/MQh7TDABmNhCiJuJ9 6qyR6DLA7qVUw== Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 08:29:51 -0000 > And independent of numbers, anyone *still* has to convince me that = EAP > over PCP is more complex than EAP over PANA over PCP. Simple logic > tells me that cannot possibly be true. >=20 For PCP implementors, EAPoPCP is more complex than PANA over PCP because = they'd have to be building an EAP lower layer out of PCP. Having PANA in = between would shield them from such details. Authentication gets = offloaded to PANA.=20 This is true even if you consider an implementor who implements only PCP = in his life. If you consider an implementor (a person, team, or company) who needs to = deal with multiple platforms, having to deal with EAPoFoo, EAPoBar, = EAPoWhatever is more complex than dealing with PANA. Same concern for = IETF for its design and standardization effort=85. Why replicate the = work, when we can reuse existing standards.=20 If you consider design architects who also need to deal with an array of = protocols, once again dealing with single authentication protocol is = much simpler than dealing with N protocols. (Aren't these obvious to anyone who has at least some IETF experience = anyways??)=20 Alper From mohamed.boucadair@orange.com Wed Nov 28 01:31:15 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19FAB21F8232 for ; Wed, 28 Nov 2012 01:31:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.303 X-Spam-Level: X-Spam-Status: No, score=-2.303 tagged_above=-999 required=5 tests=[AWL=-0.055, BAYES_00=-2.599, HELO_EQ_FR=0.35, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p-cGtf6XAnKK for ; Wed, 28 Nov 2012 01:31:14 -0800 (PST) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id C091321F8231 for ; Wed, 28 Nov 2012 01:31:13 -0800 (PST) Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm10.si.francetelecom.fr (ESMTP service) with ESMTP id 1738B1D0155; Wed, 28 Nov 2012 10:31:13 +0100 (CET) Received: from PUEXCH21.nanterre.francetelecom.fr (unknown [10.101.44.28]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id E0AB44C06F; Wed, 28 Nov 2012 10:31:12 +0100 (CET) Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.101.44.8]) by PUEXCH21.nanterre.francetelecom.fr ([10.101.44.28]) with mapi; Wed, 28 Nov 2012 10:31:12 +0100 From: To: PCP Date: Wed, 28 Nov 2012 10:31:12 +0100 Thread-Topic: PCP-Reveal: draft-boucadair-pcp-nat-reveal Thread-Index: Ac3NSV6v6Op7in8bTUSwfpyrPeFADwAAQnpA Message-ID: <94C682931C08B048B7A8645303FDC9F36E98723114@PUEXCB1B.nanterre.francetelecom.fr> Accept-Language: fr-FR Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: fr-FR Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.10.24.110314 Cc: "draft-boucadair-pcp-nat-reveal@tools.ietf.org" Subject: [pcp] PCP-Reveal: draft-boucadair-pcp-nat-reveal X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 09:31:15 -0000 Dear all, We submitted this new I-D to discuss how to use PCP to reveal the host behi= nd a NATxy. Both the problem space and a solution proposal are included in = the document. Comments, questions, suggestions, etc are more than welcome.=20 Cheers, Med -----Message d'origine----- De : i-d-announce-bounces@ietf.org [mailto:i-d-announce-bounces@ietf.org] D= e la part de internet-drafts@ietf.org Envoy=E9 : mercredi 28 novembre 2012 10:18 =C0 : i-d-announce@ietf.org Objet : I-D Action: draft-boucadair-pcp-nat-reveal-00.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. Title : Using PCP to Reveal a Host behind NAT Author(s) : Mohamed Boucadair Tirumaleswar Reddy Prashanth Patil Dan Wing Filename : draft-boucadair-pcp-nat-reveal-00.txt Pages : 16 Date : 2012-11-28 Abstract: This document describes how to use PCP to retrieve the identify of a host behind a NAT. Two use cases are discussed and the PCP applicability is analyzed. This document extends PCP with a new OpCode: QUERY. The proposed mechanism is valid for all NAT flavors including NAT44, NAT64 or NPTv6. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-boucadair-pcp-nat-reveal There's also a htmlized version available at: http://tools.ietf.org/html/draft-boucadair-pcp-nat-reveal-00 Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt From repenno@cisco.com Wed Nov 28 05:47:40 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 905FA21F857B for ; Wed, 28 Nov 2012 05:47:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yCN3cPiHGOTD for ; Wed, 28 Nov 2012 05:47:39 -0800 (PST) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) by ietfa.amsl.com (Postfix) with ESMTP id C7D0221F8573 for ; Wed, 28 Nov 2012 05:47:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1609; q=dns/txt; s=iport; t=1354110459; x=1355320059; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=DC1JhAf1qAeCYBtYcz3DBPy2LSV7xE/tS5jQc+jrVis=; b=ShfAZSDHJtmnXiBLCxPPm3/jerHK25jXiNcrPmo3IWXbvbcwgj9QvlBm N1Z952OsETF3IFNLbVlIEmdR5HNaD0lLj+QlvCjlvgYSIs4MlRAsR/X0Z +Dg6oGHMu1CnSGiXrQI2EQvSqP8mKxRj164ZTmidKD173W4fJFeQpKJgY 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AkQLADQVtlCtJXG8/2dsb2JhbABFwBUWbAeCIAEEOlEBKhRCJwQbE4d0nS6hSYxUg0thA6ZFgnCBYz4 X-IronPort-AV: E=McAfee;i="5400,1158,6909"; a="147128075" Received: from rcdn-core2-1.cisco.com ([173.37.113.188]) by rcdn-iport-4.cisco.com with ESMTP; 28 Nov 2012 13:47:39 +0000 Received: from xhc-aln-x04.cisco.com (xhc-aln-x04.cisco.com [173.36.12.78]) by rcdn-core2-1.cisco.com (8.14.5/8.14.5) with ESMTP id qASDldQ1018137 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 28 Nov 2012 13:47:39 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.66]) by xhc-aln-x04.cisco.com ([173.36.12.78]) with mapi id 14.02.0318.001; Wed, 28 Nov 2012 07:47:39 -0600 From: "Reinaldo Penno (repenno)" To: "pcp@ietf.org" Thread-Topic: Comments on draft-tsou-pcp-natcoord-08 Thread-Index: AQHNzW7tUdQudtqM2EefCyX9WZI71g== Date: Wed, 28 Nov 2012 13:47:38 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604177EF0@xmb-rcd-x04.cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.148.68] Content-Type: text/plain; charset="us-ascii" Content-ID: <02433E4E1B582249AC2E542E6D1489AC@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [pcp] Comments on draft-tsou-pcp-natcoord-08 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 13:47:40 -0000 Hello Authors, I reviewed this draft and my general comments are below, mostly related to the motivation and proposed solution. The draft states the following: " 1. Application Scenario PCP can be used to control an upstream device to achieve the following goals: 1. A plain IP address (i.e., a non-shared) can be assigned to a given subscriber because it subscribed to a service which uses a protocol that don't embed a transport number or because the NAT is the only deployed platform to manage IP addresses. 2. An application (e.g., sensor) does not need to listen to a whole range of ports available on a given IP address. Only a limited set of ports are used to bind its running services. For such devices, the external port(s) and IP address can be delegated to that application and therefore avoid enforcing NAT in the network side for its associated flows. The NAT in the PCP- controlled device should be bypassed. 3. A device able to restrict its source ports can be delegated an external port restricted IP address. The PCP- controlled device should be instructed to by-pass the NAT when handling flows destined/issued to that device. " In both 2 and 3 NAT could be performed by PCP controlled device. There is no discussion of this aspect (maybe due to Lw4o6 drivers) but if the mechanism is to be generic, we need to define how it would work. As I think about it , it seems there are quite a few issues to be ironed out. Thanks, Reinaldo From aland@deployingradius.com Wed Nov 28 06:38:36 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C1AE21F8821 for ; Wed, 28 Nov 2012 06:38:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j3eTpsVorW-W for ; Wed, 28 Nov 2012 06:38:31 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2F0FD21F8811 for ; Wed, 28 Nov 2012 06:38:31 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id C212B22406D4; Wed, 28 Nov 2012 15:38:28 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IW3pla2VMxzV; Wed, 28 Nov 2012 15:38:26 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 2E05022404DB; Wed, 28 Nov 2012 15:38:26 +0100 (CET) Message-ID: <50B621E3.3040101@deployingradius.com> Date: Wed, 28 Nov 2012 09:38:27 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> In-Reply-To: <50B59975.2030900@toshiba.co.jp> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 14:38:36 -0000 Yoshihiro Ohba wrote: > As you may know, you implemented the protocol > (http://tools.ietf.org/html/draft-pruss-dhcp-auth-dsl-07) on which IETF > did not reach consensus in 2010 to work on it, after a lengthy debate in > both DHC WG and Intarea. Since I really don't think the protocol is > properly designed (that is why it got a push-back), usefulfuness of the > provided code size data on the protocol in the context of evaluating PCP > authentication proposals is limited IMO. Which is why I already said that Sam's numbers are more important. He said it was more than 500, but much less than 10K LoC. Alan DeKok. From hartmans@painless-security.com Wed Nov 28 06:45:51 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFDD021F84C0 for ; Wed, 28 Nov 2012 06:45:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6dWkDoApRmr8 for ; Wed, 28 Nov 2012 06:45:51 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 50DA421F84BC for ; Wed, 28 Nov 2012 06:45:51 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id C10762048B; Wed, 28 Nov 2012 09:17:36 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 3D241414A; Wed, 28 Nov 2012 09:19:15 -0500 (EST) From: Sam Hartman To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> Date: Wed, 28 Nov 2012 09:19:15 -0500 In-Reply-To: <50B59975.2030900@toshiba.co.jp> (Yoshihiro Ohba's message of "Wed, 28 Nov 2012 13:56:21 +0900") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 14:45:51 -0000 >>>>> "Yoshihiro" == Yoshihiro Ohba writes: Yoshihiro> Alan, I appreciate your attempt to share more information Yoshihiro> with us. Yoshihiro> As you may know, you implemented the protocol Yoshihiro> (http://tools.ietf.org/html/draft-pruss-dhcp-auth-dsl-07) Yoshihiro> on which IETF did not reach consensus in 2010 to work on Yoshihiro> it, after a lengthy debate in both DHC WG and Intarea. Yoshihiro> Since I really don't think the protocol is properly Yoshihiro> designed (that is why it got a push-back), usefulfuness Yoshihiro> of the provided code size data on the protocol in the Yoshihiro> context of evaluating PCP authentication proposals is Yoshihiro> limited IMO. I believe a proper EAP transport design Yoshihiro> over UDP will look like PANA or IKEv2. The EAP implementation in strongswan's charon (an ikev2 daemon) appears to be around 1200 lines. However, charon does not use a third party EAP library, so I'm having a bit of trouble pulling apart what counts as the EAP layer from what counts as the EAP lower layer. The EAP lower layer part may be as small as 800 lines of code. --Sam From aland@deployingradius.com Wed Nov 28 06:54:08 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1AD921F8842 for ; Wed, 28 Nov 2012 06:54:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8JKy8gVtmZGW for ; Wed, 28 Nov 2012 06:54:05 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 94F4C21F8485 for ; Wed, 28 Nov 2012 06:54:03 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id E150C22406D4; Wed, 28 Nov 2012 15:53:14 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uiTLClRWGqtf; Wed, 28 Nov 2012 15:53:14 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 1AB4C22404DB; Wed, 28 Nov 2012 15:53:13 +0100 (CET) Message-ID: <50B6255A.2090208@deployingradius.com> Date: Wed, 28 Nov 2012 09:53:14 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <2143230D-69B2-4F79-9693-0CCA7AC19713@yegin.org> In-Reply-To: <2143230D-69B2-4F79-9693-0CCA7AC19713@yegin.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 14:54:08 -0000 Alper Yegin wrote: > Now I understand why you are under the wrong impression about PANA. > You are benchmarking it against EAPoDHCP, Only if you ignore my repeated benchmarks of PANA implementations. > Well, anyways, if you think some parts of PANA are not needed, let's discuss that. We did discuss and agree on the PANA-Ping and IP-Reconfig features, which did not have much impact on code size anyways. Re-auth is proving to be necessary, so it's not something that can be yanked out. I've skimmed the PANA docs, and I think it's way too complicated for just EAP transport. I fail to see why PANA is necessary for UDP, but much simpler EAP state machines work for EAPoL. From what I can tell, there are *extra* requirements in PANA that are not needed when an application needs to carry authentication data. > You must have misunderstood. The whole PANA implementation is not 50 lines of code. > I clearly stated that the agreed extra parts (ping and ip reconfig) are 50-60 lines of code. I did see that. You're presuming that PANA is already being used, and treating it as zero cost. I'm trying (desperately) to talk about the cost of PANA. >> "We" are doing no such thing. I was trying to discuss the cost of a >> PANA solution (code, time, $$) using publicly available data. You're >> ignoring that data. Instead, you're using proprietary (i.e. secret) >> vendor data to support your position. But you aren't sharing that data >> with us. > > What data are you referring to? 50-60 lines of code is based on the open source implementations. I guess your references to VENDOR IMPLEMENTATIONS and my note that you had no DATA ABOUT THOSE IMPLEMENTATIONS went unnoticed. > EAPoDHCP is such a wrong benchmark. It's broken, it does not work, it's incomplete, just a draft……. It's real data. Unlike your VENDOR IMPLEMENTATIONS, for which you HAVE NO DATA. >> I can play the same destructive game. You have provided no background >> for your claims of inter-operable implementations of PANA. > > PANA is in Zigbee IP spec, and it went thru multiple interop events before the Zigbee IP spec is published. You are ignoring my next sentence: >> I'm willing to agree that they exist, You're looking at half of the data, and drawing false conclusions. That's not a scientific process. Alan DeKok. From aland@deployingradius.com Wed Nov 28 07:01:35 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F46921F8875 for ; Wed, 28 Nov 2012 07:01:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wG7pnez2vs7r for ; Wed, 28 Nov 2012 07:01:34 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id F0B3121F8874 for ; Wed, 28 Nov 2012 07:01:31 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 0A07B22406D4; Wed, 28 Nov 2012 16:01:31 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HqZf3mxS4fv4; Wed, 28 Nov 2012 16:01:30 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id E0C4222404DB; Wed, 28 Nov 2012 16:01:29 +0100 (CET) Message-ID: <50B6274A.4030608@deployingradius.com> Date: Wed, 28 Nov 2012 10:01:30 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <95F56524-9457-43DE-B02F-CD34D4335F37@yegin.org> In-Reply-To: <95F56524-9457-43DE-B02F-CD34D4335F37@yegin.org> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 15:01:35 -0000 Alper Yegin wrote: >> And independent of numbers, anyone *still* has to convince me that EAP >> over PCP is more complex than EAP over PANA over PCP. Simple logic >> tells me that cannot possibly be true. > > For PCP implementors, EAPoPCP is more complex than PANA over PCP because they'd have to be building an EAP lower layer out of PCP. Having PANA in between would shield them from such details. Authentication gets offloaded to PANA. > > This is true even if you consider an implementor who implements only PCP in his life. > > If you consider an implementor (a person, team, or company) who needs to deal with multiple platforms, having to deal with EAPoFoo, EAPoBar, EAPoWhatever is more complex than dealing with PANA. Same concern for IETF for its design and standardization effort…. Why replicate the work, when we can reuse existing standards. So far, we have the following non-standardized EAP transports: DHCP (EAPoDHCP) PCP (Sam) GSS-API (moonshot) The implementors seem to be fine with this cost. They seem to think that ~1K LoC for EAP integration is fine. The alternative is some unknown amount of code for PANA integration. Do you have numbers for the cost (LoC) to integrate PANA with a pre-existing application? As the PANA guy, I'm presuming you have such numbers at your fingertips. Is it less than 1K LoC? Does PANA solve issues which are not addressed in a simple EAP transport layer? If so, which issues? Please explain. Alan DeKok. From yoshihiro.ohba@toshiba.co.jp Wed Nov 28 07:45:05 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57CD521F88E8 for ; Wed, 28 Nov 2012 07:45:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.089 X-Spam-Level: X-Spam-Status: No, score=-8.089 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pq0d3yIPQf7R for ; Wed, 28 Nov 2012 07:45:04 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id 9D82421F88DE for ; Wed, 28 Nov 2012 07:45:04 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qASFitlY009397; Thu, 29 Nov 2012 00:44:55 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qASFit31019202; Thu, 29 Nov 2012 00:44:55 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id AAA19201; Thu, 29 Nov 2012 00:44:55 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qASFitEd012938; Thu, 29 Nov 2012 00:44:55 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qASFitNV025498; Thu, 29 Nov 2012 00:44:55 +0900 (JST) Received: from [133.199.16.154] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME7000BIFQJF950@mail.po.toshiba.co.jp>; Thu, 29 Nov 2012 00:44:55 +0900 (JST) Date: Thu, 29 Nov 2012 00:44:46 +0900 From: Yoshihiro Ohba In-reply-to: <50B621E3.3040101@deployingradius.com> To: Alan DeKok Message-id: <50B6316E.9000205@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=windows-1252; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B621E3.3040101@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2012 15:45:05 -0000 Alan, Sam's implementation data is about GSS-EAP which is totally different from the EAP over PCP proposal. Therefore, I don't consider the data to be a fair basis for the ongoing debate on PCP authentication proposals. GSS-EAP code size can be smaller than PANA because GSS-EAP relies on reliabilty provided by application. I suspect reliabilty part is excluded from the code size count. If this is the case, using GSS-EAP code size won't be a fair comparison. Similarly, EAP over DHCP does not provide orderly delivery of EAP message (so it does not satisfy EAP lower-layer requirements), and using EAP over DHCP code size won't be a fair comparison either. Regards, Yoshihiro Ohba (2012/11/28 23:38), Alan DeKok wrote: > Yoshihiro Ohba wrote: >> As you may know, you implemented the protocol >> (http://tools.ietf.org/html/draft-pruss-dhcp-auth-dsl-07) on which IETF >> did not reach consensus in 2010 to work on it, after a lengthy debate in >> both DHC WG and Intarea. Since I really don't think the protocol is >> properly designed (that is why it got a push-back), usefulfuness of the >> provided code size data on the protocol in the context of evaluating PCP >> authentication proposals is limited IMO. > Which is why I already said that Sam's numbers are more important. > > He said it was more than 500, but much less than 10K LoC. > > Alan DeKok. > From yoshihiro.ohba@toshiba.co.jp Wed Nov 28 16:54:07 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D132611E809B for ; Wed, 28 Nov 2012 16:54:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.756 X-Spam-Level: X-Spam-Status: No, score=-6.756 tagged_above=-999 required=5 tests=[AWL=1.333, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MUe5nGrQr1lB for ; Wed, 28 Nov 2012 16:54:07 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id 011ED21F8944 for ; Wed, 28 Nov 2012 16:54:06 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qAT0rsI7027419; Thu, 29 Nov 2012 09:53:54 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qAT0rsJT001162; Thu, 29 Nov 2012 09:53:54 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id KAA01156; Thu, 29 Nov 2012 09:53:54 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qAT0rrcI011653; Thu, 29 Nov 2012 09:53:53 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAT0rrdr022497; Thu, 29 Nov 2012 09:53:53 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME8000CT55SF7D0@mail.po.toshiba.co.jp>; Thu, 29 Nov 2012 09:53:53 +0900 (JST) Date: Thu, 29 Nov 2012 09:53:57 +0900 From: Yoshihiro Ohba In-reply-to: To: Sam Hartman Message-id: <50B6B225.9090600@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 00:54:08 -0000 Sam, Thank you for sending data for strongswan's charon keying daemon about IKEv2 which I consider a proper designed EAP transport. If your count excludes reliability function part of IKEv2, then I would claim that it is still not a fair basis for evaluating PCP authentication proposals. In this debate, I believe we can only make a meaningful apple-to-apple comparison by evaluating PANA and EAP-over-PCP implementations. What is missing is statistics on EAP over PCP implementation which does not seem to exist. Yoshihiro Ohba (2012/11/28 23:19), Sam Hartman wrote: >>>>>> "Yoshihiro" == Yoshihiro Ohba writes: > Yoshihiro> Alan, I appreciate your attempt to share more information > Yoshihiro> with us. > > Yoshihiro> As you may know, you implemented the protocol > Yoshihiro> (http://tools.ietf.org/html/draft-pruss-dhcp-auth-dsl-07) > Yoshihiro> on which IETF did not reach consensus in 2010 to work on > Yoshihiro> it, after a lengthy debate in both DHC WG and Intarea. > Yoshihiro> Since I really don't think the protocol is properly > Yoshihiro> designed (that is why it got a push-back), usefulfuness > Yoshihiro> of the provided code size data on the protocol in the > Yoshihiro> context of evaluating PCP authentication proposals is > Yoshihiro> limited IMO. I believe a proper EAP transport design > Yoshihiro> over UDP will look like PANA or IKEv2. > > The EAP implementation in strongswan's charon (an ikev2 daemon) appears > to be around 1200 lines. > However, charon does not use a third party EAP library, so I'm having a > bit of trouble pulling apart what counts as the EAP layer from what > counts as the EAP lower layer. > > The EAP lower layer part may be as small as 800 lines of code. > > --Sam > From hartmans@painless-security.com Wed Nov 28 17:01:59 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3669621F88C2 for ; Wed, 28 Nov 2012 17:01:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tmBDVuXX8F0r for ; Wed, 28 Nov 2012 17:01:58 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 4E46521F889F for ; Wed, 28 Nov 2012 17:01:57 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 8930720167; Wed, 28 Nov 2012 20:00:15 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 37109420E; Wed, 28 Nov 2012 20:01:53 -0500 (EST) From: Sam Hartman To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> Date: Wed, 28 Nov 2012 20:01:53 -0500 In-Reply-To: <50B6B225.9090600@toshiba.co.jp> (Yoshihiro Ohba's message of "Thu, 29 Nov 2012 09:53:57 +0900") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 01:01:59 -0000 >>>>> "Yoshihiro" == Yoshihiro Ohba writes: Yoshihiro> Sam, Thank you for sending data for strongswan's charon Yoshihiro> keying daemon about IKEv2 which I consider a proper Yoshihiro> designed EAP transport. If your count excludes Yoshihiro> reliability function part of IKEv2, then I would claim Yoshihiro> that it is still not a fair basis for evaluating PCP Yoshihiro> authentication proposals. In this debate, I believe we Yoshihiro> can only make a meaningful apple-to-apple comparison by Yoshihiro> evaluating PANA and EAP-over-PCP implementations. What Yoshihiro> is missing is statistics on EAP over PCP implementation Yoshihiro> which does not seem to exist. I understand your position. I don't actually expect that either you or Alper are particularly likely to be convinced that a PCP lower layer is the right approach. I expect you to continue to believe that PANA is the right approach. Also, as I mentioned early, we're not trying to come to consensus on questions related to what's easy to implement. I actually suspect that most of the PCP implementors can take the data Alan, you and I have provided and come to their conclusions. If any of them speak up asking for more help I'll jump back into the discussion. I agree with Alper that a lot of back and forth isn't going to help. So, unless someone explains how continuing this discussion is going to help them make up their mind, I think we've done what we can here. I am really happy to go on if it is actually likely to change someone's mind, but I think it's fair to the rest of the WG to ask people to speak up and say "yeah, please keep the mail coming; here's how this could help me." --Sam From cathy.zhou@huawei.com Wed Nov 28 22:31:50 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 853C621F8A05 for ; Wed, 28 Nov 2012 22:31:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MPKDXs8xumTN for ; Wed, 28 Nov 2012 22:31:37 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by ietfa.amsl.com (Postfix) with ESMTP id A814321F89F9 for ; Wed, 28 Nov 2012 22:31:36 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml203-edg.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.5-GA FastPath queued) with ESMTP id ANH91040; Thu, 29 Nov 2012 06:31:33 +0000 (GMT) Received: from LHREML403-HUB.china.huawei.com (10.201.5.217) by lhreml203-edg.huawei.com (172.18.7.221) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 29 Nov 2012 06:31:21 +0000 Received: from SZXEML447-HUB.china.huawei.com (10.82.67.185) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.1.323.3; Thu, 29 Nov 2012 06:31:32 +0000 Received: from SZXEML527-MBX.china.huawei.com ([169.254.3.147]) by szxeml447-hub.china.huawei.com ([10.82.67.185]) with mapi id 14.01.0323.003; Thu, 29 Nov 2012 14:31:22 +0800 From: "Zhouqian (Cathy)" To: "Reinaldo Penno (repenno)" , "pcp@ietf.org" Thread-Topic: Comments on draft-tsou-pcp-natcoord-08 Thread-Index: AQHNzW7tUdQudtqM2EefCyX9WZI71pgAKbrQ Date: Thu, 29 Nov 2012 06:31:22 +0000 Message-ID: References: <45A697A8FFD7CF48BCF2BE7E106F0604177EF0@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604177EF0@xmb-rcd-x04.cisco.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.77.118] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Subject: Re: [pcp] Comments on draft-tsou-pcp-natcoord-08 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 06:31:50 -0000 Hi Reinaldo, > In both 2 and 3 NAT could be performed by PCP controlled device. There is > no discussion of this aspect (maybe due to Lw4o6 drivers) but if the > mechanism is to be generic, we need to define how it would work. As I > think about it , it seems there are quite a few issues to be ironed out. Thanks for your comments. This document will focus on NAT Bypass case only.= =20 For the scenario when NAT is performed in PCP-controlled device, it is out= =20 of scope. And what are the issues you are thinking about? Best Regards, Cathy > -----Original Message----- > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > Reinaldo Penno (repenno) > Sent: Wednesday, November 28, 2012 9:48 PM > To: pcp@ietf.org > Subject: [pcp] Comments on draft-tsou-pcp-natcoord-08 >=20 > Hello Authors, >=20 > I reviewed this draft and my general comments are below, mostly related t= o > the motivation and proposed solution. >=20 > The draft states the following: >=20 > " > 1. Application Scenario >=20 > PCP can be used to control an upstream device to achieve the > following goals: >=20 >=20 > 1. A plain IP address (i.e., a non-shared) can be assigned to a > given subscriber because it subscribed to a service which uses a > protocol that don't embed a transport number or because the NAT > is the only deployed platform to manage IP addresses. >=20 > 2. An application (e.g., sensor) does not need to listen to a whole > range of ports available on a given IP address. Only a limited > set of ports are used to bind its running services. For such > devices, the external port(s) and IP address can be delegated to > that application and therefore avoid enforcing NAT in the network > side for its associated flows. The NAT in the PCP- controlled > device should be bypassed. >=20 > 3. A device able to restrict its source ports can be delegated an > external port restricted IP address. The PCP- controlled device > should be instructed to by-pass the NAT when handling flows > destined/issued to that device. > " >=20 > In both 2 and 3 NAT could be performed by PCP controlled device. There is > no discussion of this aspect (maybe due to Lw4o6 drivers) but if the > mechanism is to be generic, we need to define how it would work. As I > think about it , it seems there are quite a few issues to be ironed out. >=20 > Thanks, >=20 > Reinaldo >=20 >=20 >=20 >=20 >=20 >=20 >=20 >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From mohamed.boucadair@orange.com Wed Nov 28 23:18:29 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99B9C21F8A11 for ; Wed, 28 Nov 2012 23:18:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.298 X-Spam-Level: X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[AWL=-0.050, BAYES_00=-2.599, HELO_EQ_FR=0.35, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P9cWhpb2h6zA for ; Wed, 28 Nov 2012 23:18:29 -0800 (PST) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id 771D521F8A0D for ; Wed, 28 Nov 2012 23:18:27 -0800 (PST) Received: from omfedm08.si.francetelecom.fr (unknown [xx.xx.xx.4]) by omfedm13.si.francetelecom.fr (ESMTP service) with ESMTP id 88AF73242FA; Thu, 29 Nov 2012 08:17:36 +0100 (CET) Received: from PUEXCH11.nanterre.francetelecom.fr (unknown [10.101.44.27]) by omfedm08.si.francetelecom.fr (ESMTP service) with ESMTP id 6BC0B238055; Thu, 29 Nov 2012 08:17:36 +0100 (CET) Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.101.44.8]) by PUEXCH11.nanterre.francetelecom.fr ([10.101.44.27]) with mapi; Thu, 29 Nov 2012 08:17:35 +0100 From: To: "Reinaldo Penno (repenno)" , "pcp@ietf.org" Date: Thu, 29 Nov 2012 08:17:33 +0100 Thread-Topic: PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) Thread-Index: AQHNy+NgJQ6ymYe7QUWcXPDF1+VorpgAZbGQ Message-ID: <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> Accept-Language: fr-FR Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: fr-FR Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.10.24.110314 Subject: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 07:18:29 -0000 Dear all,=20 Below some answers for the questions raised for this draft.=20 >-----Message d'origine----- >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De la=20 >part de Reinaldo Penno (repenno) >Envoy=E9 : lundi 26 novembre 2012 15:36 >=C0 : pcp@ietf.org >Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) > >FRI 1120-1330 (note new end time) =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > >Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity >draft-boucadair-pcp-rtp-rtcp (10, Jaqueline >Queiroz) > >Stuart Cheshire: This seems wrong for PCP to take on additional >responsibility >for the sake of a single legacy protocol > >Dan Wing: We should ask the SIP WG what they think. Med: The procedure is not specific to SIP/SDP, it is even valid for non-sdp= protocols. Are you suggesting we send a message to mmusic WG for instance?= =20 > >Stuart Cheshire: NAT-PMP and IGD don't do this today, so how=20 >"essential" >can it >be? Med: Is this really a reason to not do it for PCP?=20 How do even/odd SIP devices work today? Why is it=20 >"essential" that PCP >give >them something new, which they currently manage without? Med: What we are proposing in this draft is very very simple. If this optio= n is not supported, we will continue with current practices (which have man= y drawbacks): * enable an ALG in the NAT (I'm more concerned about the CGN case) * or enabled some mechanism in the service side (e.g., SBC, Proxy Server) The proposed PCP option allows=20 * to remove any service-specific ALG handling RTP/RTCP traversal from the C= GN/NAT * Simplify the service access point (e.g., SBC): no need for hosted nat tra= versal * For the SIP case, there is even no need to use symmetric SIP, Symmetric R= TP, etc.=20 * No issue with unidirectional media sessions From rafa@um.es Thu Nov 29 01:05:29 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAC0921F8961 for ; Thu, 29 Nov 2012 01:05:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wO3VOxyCrCKZ for ; Thu, 29 Nov 2012 01:05:29 -0800 (PST) Received: from xenon14.um.es (xenon14.um.es [155.54.212.168]) by ietfa.amsl.com (Postfix) with ESMTP id 0A28D21F8A5C for ; Thu, 29 Nov 2012 01:05:28 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by xenon14.um.es (Postfix) with ESMTP id 27E985D5CE; Thu, 29 Nov 2012 10:05:27 +0100 (CET) X-Virus-Scanned: by antispam in UMU at xenon14.um.es Received: from xenon14.um.es ([127.0.0.1]) by localhost (xenon14.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id aYicwszPdYgF; Thu, 29 Nov 2012 10:05:26 +0100 (CET) Received: from eduroam_um-228-201.inf.um.es (eduroam_um-228-201.inf.um.es [155.54.228.201]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon14.um.es (Postfix) with ESMTPSA id 28CD55D628; Thu, 29 Nov 2012 10:05:25 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=windows-1252 From: Rafa Marin Lopez In-Reply-To: <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> Date: Thu, 29 Nov 2012 10:05:25 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <49D7823D-F68E-496D-A5E0-5E367DFBD10F@um.es> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> To: Alan DeKok X-Mailer: Apple Mail (2.1283) Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 09:05:29 -0000 Hi Alan: I really appreciate this analysis. In particular, I am interested in the = results about OpenPANA. Performing: sloccount state_machines/ include.h lalarm.* maincliente.* = mainservidor.* panamessages.* prf_plus.* panautils.* Total Physical Source Lines of Code (SLOC) =3D 3,687 If I include some xml processing (our implementation get config file = information from XML but others can implement it differently) I got:=20 sloccount state_machines/ include.h lalarm.* maincliente.* = mainservidor.* panamessages.* prf_plus.* panautils.* loadconfig.* Total Physical Source Lines of Code (SLOC) =3D 4,203 I excluded aes.c aes.h cmac.c and cmac.h since they are not part of the = standard. It is worthing noting that the pana state machine implementation of both = PaC and PAA implies: sloccount state_machines/ Total Physical Source Lines of Code (SLOC) =3D 1,660 Furthermore I would like to include some information about panatiki = which is a PANA Client (PaC) for constrained devices that we have = implemented. sloccount pana-state-machine/ pac.c ahi_aes.h include.h Total Physical Source Lines of Code (SLOC) =3D 741 Not sure if you run this command in the openpana.0.2.3.tar.gz (which = also implements PANA Relay, which is a different standard) or in the = trunk of openpana svn. I obtained similar data as yours if libeapstack is included (EAP methods = and EAP state machine) but you said you didn't include them. So I am = trying to replicate your analysis but I have not been able to do it. I = really appreciate if you send me the command you performed and where. Thanks! >>=20 >> As proof, I've looked at both OpenPANA and cpana. The "sloccount" >> code metric tool says: >>=20 >> Openpana: >> Total Physical Source Lines of Code (SLOC) =3D 6,912 >> Total Estimated Cost to Develop =3D $ = 205,696 >>=20 >> Cpana: >> Total Physical Source Lines of Code (SLOC) =3D 16,397 >> Total Estimated Cost to Develop =3D $ = 509,500 >=20 ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From yatch@isl.rdc.toshiba.co.jp Thu Nov 29 03:36:33 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43EC121F89A2 for ; Thu, 29 Nov 2012 03:36:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.289 X-Spam-Level: X-Spam-Status: No, score=-6.289 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, J_CHICKENPOX_21=0.6, J_CHICKENPOX_63=0.6, J_CHICKENPOX_65=0.6, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g+-b9lcDmE-I for ; Thu, 29 Nov 2012 03:36:32 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id 24F8121F89A1 for ; Thu, 29 Nov 2012 03:36:32 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qATBaUIK029941 for ; Thu, 29 Nov 2012 20:36:30 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qATBaUtA027505 for pcp@ietf.org; Thu, 29 Nov 2012 20:36:30 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id WAA27504; Thu, 29 Nov 2012 20:36:30 +0900 Received: from mx12.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qATBaUIj009379 for ; Thu, 29 Nov 2012 20:36:30 +0900 (JST) Received: from spiffy21.isl.rdc.toshiba.co.jp by toshiba.co.jp id qATBaThF021246; Thu, 29 Nov 2012 20:36:29 +0900 (JST) Received: from [133.196.16.99] (ncg-dhcp99.isl.rdc.toshiba.co.jp [133.196.16.99]) by spiffy21.isl.rdc.toshiba.co.jp (Postfix) with ESMTPS id 9AE0897CB9; Thu, 29 Nov 2012 20:36:29 +0900 (JST) Message-ID: <50B748BE.30000@isl.rdc.toshiba.co.jp> Date: Thu, 29 Nov 2012 20:36:30 +0900 From: Yasuyuki Tanaka User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: pcp@ietf.org References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <49D7823D-F68E-496D-A5E0-5E367DFBD10F@um.es> In-Reply-To: <49D7823D-F68E-496D-A5E0-5E367DFBD10F@um.es> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 11:36:33 -0000 Hi, I've confirmed the result of "sloccount" to "cpana (libcpana)" which is a library implementation for PANA itself. I've got the same result as described in the mail by using the latest cpana's source code (revision 10). > Cpana: > Total Physical Source Lines of Code (SLOC) = 16,397 > Total Estimated Cost to Develop = $ 509,500 However, "cpana" has not only C language source files but also shell scripts which are generated in build process. Here is the result of "sloccount" with "--details" option to "cpana." ---- [$sloccount --details cpana] 11 makefile cpana Makefile.am 32 ansic cpana avpcommon.c 747 ansic cpana ses.c 74 ansic cpana strlcat.c 97 ansic cpana log.c 357 ansic cpana auth.c 89 ansic cpana avp.c 416 ansic cpana ioinet6.c 932 ansic cpana pac.c 70 ansic cpana seq.c 70 ansic cpana ctx.c 882 ansic cpana paa.c 390 ansic cpana evsimple.c 36 ansic cpana debug.c 84 ansic cpana msg.c 193 ansic cpana hash.c 53 ansic cpana ev.c 281 ansic cpana msgsend.c 6 ansic cpana init.c 119 ansic cpana io.c 419 ansic cpana ioinet.c 145 ansic cpana msgparse.c 16 ansic cpana memdup.c 33 ansic cpana avpeap.c 17 ansic cpana rand.c 117 ansic cpana ses.h 16 ansic cpana cpana.h 45 ansic cpana postconfig.h 95 ansic cpana ctx.h 56 ansic cpana io.h 47 ansic cpana ev.h 6 ansic cpana util.h 61 ansic cpana types.h 29 ansic cpana constants.h 43 ansic cpana msg.h 45 ansic cpana preconfig.h 6 ansic cpana debug.h 56 ansic cpana ses_p.h 18 ansic cpana log.h 14 ansic cpana hash.h 38 ansic cpana avp.h 10 ansic cpana functions.h 344 sh cpana install-sh 1542 sh cpana config.sub 407 sh cpana depcomp 1232 sh cpana config.guess 6331 sh cpana ltmain.sh 281 sh cpana missing ---- Then, I extracted only C source files from "cpana" and categorized them into "PaC part", "PAA part", and "others." Here are results of "sloccount" to them. ---- [only PaC part] Total Physical Source Lines of Code (SLOC) = 3,350 Total Estimated Cost to Develop = $ 96,148 "PaC part" includes: auth.c avpeap.c constants.h ctx.h msgparse.c rand.c ses.h avp.c avp.h cpana.h msg.c msgsend.c seq.c ses_p.h avpcommon.c config.h ctx.c msg.h pac.c ses.c types.h ---- [only PAA part] Total Physical Source Lines of Code (SLOC) = 3,283 Total Estimated Cost to Develop = $ 94,130 "PAA part" includes: auth.c avpeap.c constants.h ctx.h msgparse.c seq.c ses_p.h avp.c avp.h cpana.h msg.c msgsend.c ses.c types.h avpcommon.c config.h ctx.c msg.h paa.c ses.h ---- [others] Total Physical Source Lines of Code (SLOC) = 2,121 Total Estimated Cost to Develop = $ 59,499 "others" includes: config.h ev.h hash.h ioinet6.c memdup.c strlcat.c debug.c evsimple.c init.c ioinet.c postconfig.h util.h debug.h functions.h io.c log.c preconfig.h ev.c hash.c io.h log.h rand.c ---- Best, Yasuyuki Tanaka (2012/11/29 18:05), Rafa Marin Lopez wrote: > Hi Alan: > > I really appreciate this analysis. In particular, I am interested in the results about OpenPANA. Performing: > > sloccount state_machines/ include.h lalarm.* maincliente.* mainservidor.* panamessages.* prf_plus.* panautils.* > > Total Physical Source Lines of Code (SLOC) = 3,687 > > If I include some xml processing (our implementation get config file information from XML but others can implement it differently) I got: > > sloccount state_machines/ include.h lalarm.* maincliente.* mainservidor.* panamessages.* prf_plus.* panautils.* loadconfig.* > > Total Physical Source Lines of Code (SLOC) = 4,203 > > I excluded aes.c aes.h cmac.c and cmac.h since they are not part of the standard. > > It is worthing noting that the pana state machine implementation of both PaC and PAA implies: > > sloccount state_machines/ > > Total Physical Source Lines of Code (SLOC) = 1,660 > > Furthermore I would like to include some information about panatiki which is a PANA Client (PaC) for constrained devices that we have implemented. > > sloccount pana-state-machine/ pac.c ahi_aes.h include.h > > Total Physical Source Lines of Code (SLOC) = 741 > > Not sure if you run this command in the openpana.0.2.3.tar.gz (which also implements PANA Relay, which is a different standard) or in the trunk of openpana svn. > > I obtained similar data as yours if libeapstack is included (EAP methods and EAP state machine) but you said you didn't include them. So I am trying to replicate your analysis but I have not been able to do it. I really appreciate if you send me the command you performed and where. > > Thanks! > >>> >>> As proof, I've looked at both OpenPANA and cpana. The "sloccount" >>> code metric tool says: >>> >>> Openpana: >>> Total Physical Source Lines of Code (SLOC) = 6,912 >>> Total Estimated Cost to Develop = $ 205,696 >>> >>> Cpana: >>> Total Physical Source Lines of Code (SLOC) = 16,397 >>> Total Estimated Cost to Develop = $ 509,500 >> > > ------------------------------------------------------- > Rafael Marin Lopez, PhD > Dept. Information and Communications Engineering (DIIC) > Faculty of Computer Science-University of Murcia > 30100 Murcia - Spain > Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es > ------------------------------------------------------- > > > > > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > From hartmans@painless-security.com Thu Nov 29 04:56:04 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B346521F89D7 for ; Thu, 29 Nov 2012 04:56:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kCViJ7LWZdXG for ; Thu, 29 Nov 2012 04:56:04 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id B848221F89D6 for ; Thu, 29 Nov 2012 04:56:03 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 0A57620155; Thu, 29 Nov 2012 07:54:21 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 927D4420E; Thu, 29 Nov 2012 07:56:00 -0500 (EST) From: Sam Hartman To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> Date: Thu, 29 Nov 2012 07:56:00 -0500 In-Reply-To: <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> (Alper Yegin's message of "Sat, 17 Nov 2012 01:46:13 +0200") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 12:56:04 -0000 Hi. First, we've gotten to a point where we agree that clients who will ignore unsolicited messages from the server can ignore unsolicited server-initiated re-authentication. If we also send the message requesting re-authentication at the time when the server has an unsolicited message to send, rather than when the SA expires, then I think we have a solution that does very little harm. So, if that is what we end up with, I'm OK. I think it's important to send the authentication solicitation at time when there's a message to send for two reasons: 1) The client may be absent from the network earlier and may return in time to receive the unsolicited message. If the client doesn't return, it will miss both the authentication request and the unsolicited PCP message, which is fine. 2) We don't waste batteries or resources doing authentication until we're going to use it. That said, I believe my proposal is a superior technical solution so I'd like to go for a couple more rounds of discussion. Alper> Folks, If PCP is operating in authenticated mode, all the Alper> messages shall be integrity protected. Allowing some Alper> messages be consumed w/o integrity/replay/origin Alper> authentication is does not give us a secure solution. Does Alper> anyone disagree? I disagree. It kind of misses the point of security analysis to make blanket statements like "that's secure," or "that's insecure." Nothing is absolutely secure, and spending resources focused on attacks that don't matter does not increase security and may decrease security because of bugs. As an example, I could go around screaming that all the solutions on the table are wildly insecure because they don't provide confidentiality protection for the PCP messages. Except disclosure of the contents of PCP messages is not a vulnerability in our threat model. So, that's not a weakness under the threats we care about, so I would be wasting the group's time if I said that the lack of confidentiality made PCP insecure. So, why do we care about authentication and integrity? Well we'll start by noting that a lot of the time we don't care about it at all. We fully expect unauthenticated PCP to be quite common. So here are the vulnerabilities we seem to be concerned about: 1) Some servers care about the integrity and origin of requests. The primary harm in if this security service is not provided to servers that care about it is that unauthorized service may be granted, or availability and integrity of the mappings may be impacted. 2) Some clients care about the origin and integrity of the requests they make. If an attacker could modify their requests, then an attacker could impact availability of the mappings. I.E. change the internal port being requested or the like. 3) Some clients care about integrity and origin of the response. If an attacker could modify the response the attacker could impact availability and integrity of the mappings. I.E. attacker tells the client the wrong external address. So from the above, we get: R1) Servers MUST be able to indicate that a request will not be processed without authentication. R2) Clients MUST be able to request authentication before sending a request even if the server would accept an unauthenticated request. R3) A client that sends an authenticated request MUST be able to verify the integrity and origin of an unsolicited response should it choose to do so. However, we don't seem to care about: z) From the standpoint of the server, nothing seems to care about the integrity and origin of the response. In particular, I can identify nothing bad that happens to the server if the unsolicited response is successfully attacked. So, the two security folks who have responded disagree with the claim that its inherently insecure if unsolicited responses to authenticated requests are sometimes not integrity protected. Jim pointed out an example of a security application (email verification) that works that way. While the client Jim worked on didn't do things that way, I've used several clients that do verify signatures only on request. Also, services like DNS Security permit clients to decide whether to verify; as an example the BIND name server has a configuration option about whether to validate signatures. Many TLS libraries permit applications to choose whether to verify server certificates; this is a widely used feature. So, yes, only verify integrity when you need it is a common security practice across a wide variety of technologies. Hope that helps. From tom.taylor.stds@gmail.com Thu Nov 29 06:39:22 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B46521F89E9 for ; Thu, 29 Nov 2012 06:39:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DmOSnnfS8n0v for ; Thu, 29 Nov 2012 06:39:21 -0800 (PST) Received: from mail-ie0-f172.google.com (mail-ie0-f172.google.com [209.85.223.172]) by ietfa.amsl.com (Postfix) with ESMTP id 7E2A221F89DD for ; Thu, 29 Nov 2012 06:39:21 -0800 (PST) Received: by mail-ie0-f172.google.com with SMTP id c13so15930789ieb.31 for ; Thu, 29 Nov 2012 06:39:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding :x-antivirus:x-antivirus-status; bh=nwntGIRMH0WuL52L6Pkoz9G8RHY+OXFf4vHiAmg+Dvs=; b=YPUP0V7vLI+/WpU65g2xc8rR+ORNINdouKStuLhQ/ruQmZOON5ifuqci1omEMvIQet tyz9iILsX/nUZR+UzLiPtDRf/toiNEpKDlMXz6oToPiOofnbjBZ3hBBn0S0b8sk1MpCS LW0PzPsIId/luk9iGvI0Hxcp5LJhiVn+L7Qof1S7gxYqJ0EE4w8mStvR1svgXdon6/mZ Ni5fWRJ81QqYYsJUPecX1xMgeQ7PW0YE5Dra2fVbu6xaWhmVtAEQpOcH6JbGlkTmige7 Wy3+rtNllaiNu2XjktevRmPLBl7VHhqg64fDUIkFSmzwxlsI+YpaehXaf1wyN43fV9ty mp4A== Received: by 10.50.37.133 with SMTP id y5mr22703633igj.8.1354199961092; Thu, 29 Nov 2012 06:39:21 -0800 (PST) Received: from [127.0.0.1] (dsl-173-206-165-144.tor.primus.ca. [173.206.165.144]) by mx.google.com with ESMTPS id hg2sm7308121igc.3.2012.11.29.06.39.18 (version=SSLv3 cipher=OTHER); Thu, 29 Nov 2012 06:39:19 -0800 (PST) Message-ID: <50B77396.6020901@gmail.com> Date: Thu, 29 Nov 2012 09:39:18 -0500 From: Tom Taylor User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: mohamed.boucadair@orange.com References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> In-Reply-To: <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Antivirus: avast! (VPS 121129-0, 29/11/2012), Outbound message X-Antivirus-Status: Clean Cc: "pcp@ietf.org" Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 14:39:22 -0000 I could add that back when we did the MIDCOM work, we included this capability in the MIDCOM semantics. For instance, see section 2.3.5 of RFC 5198. It seemed like an obvious requirement at the time, because VoIP was a major driver for a lot of what was going on. On 29/11/2012 2:17 AM, mohamed.boucadair@orange.com wrote: > Dear all, > > Below some answers for the questions raised for this draft. > > >> -----Message d'origine----- >> De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De la >> part de Reinaldo Penno (repenno) >> Envoyé : lundi 26 novembre 2012 15:36 >> À : pcp@ietf.org >> Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) >> >> FRI 1120-1330 (note new end time) ================================= >> >> >> Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity >> draft-boucadair-pcp-rtp-rtcp (10, Jaqueline >> Queiroz) >> >> Stuart Cheshire: This seems wrong for PCP to take on additional >> responsibility >> for the sake of a single legacy protocol >> >> Dan Wing: We should ask the SIP WG what they think. > > Med: The procedure is not specific to SIP/SDP, it is even valid for non-sdp protocols. Are you suggesting we send a message to mmusic WG for instance? > >> >> Stuart Cheshire: NAT-PMP and IGD don't do this today, so how >> "essential" >> can it >> be? > > Med: Is this really a reason to not do it for PCP? > > How do even/odd SIP devices work today? Why is it >> "essential" that PCP >> give >> them something new, which they currently manage without? > > Med: What we are proposing in this draft is very very simple. If this option is not supported, we will continue with current practices (which have many drawbacks): > > * enable an ALG in the NAT (I'm more concerned about the CGN case) > * or enabled some mechanism in the service side (e.g., SBC, Proxy Server) > > The proposed PCP option allows > > * to remove any service-specific ALG handling RTP/RTCP traversal from the CGN/NAT > * Simplify the service access point (e.g., SBC): no need for hosted nat traversal > * For the SIP case, there is even no need to use symmetric SIP, Symmetric RTP, etc. > * No issue with unidirectional media sessions > > > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 07:06:31 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16CD721F84C2 for ; Thu, 29 Nov 2012 07:06:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.089 X-Spam-Level: X-Spam-Status: No, score=-8.089 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8G2IOxUOXYiE for ; Thu, 29 Nov 2012 07:06:30 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id C12D321F84C1 for ; Thu, 29 Nov 2012 07:06:29 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qATF6S7d004331 for ; Fri, 30 Nov 2012 00:06:28 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qATF6SE4026963 for pcp@ietf.org; Fri, 30 Nov 2012 00:06:28 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id AAA26962; Fri, 30 Nov 2012 00:06:28 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qATF6SaG021602 for ; Fri, 30 Nov 2012 00:06:28 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qATF6RrJ016808; Fri, 30 Nov 2012 00:06:27 +0900 (JST) Received: from [133.199.16.228] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME9006PY8MG6M90@mail.po.toshiba.co.jp> for pcp@ietf.org; Fri, 30 Nov 2012 00:06:27 +0900 (JST) Date: Fri, 30 Nov 2012 00:06:15 +0900 From: Yoshihiro Ohba In-reply-to: To: pcp@ietf.org Message-id: <50B779E7.7070507@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 15:06:31 -0000 Sam, For clients who care about integrity and origin of the response, there must be another requirement: R4) A server MUST be able to send authenticated unsoliciated response if the client requested authentication. R4 is also required to satisfy R3 so that a client who chooses to verify the integrity of and origin of an unsolicited response can do so. So, you seem to actually agree with Alper. Or am I missing something? Yoshihiro Ohba (2012/11/29 21:56), Sam Hartman wrote: > Hi. First, we've gotten to a point where we agree that clients who will > ignore unsolicited messages from the server can ignore unsolicited > server-initiated re-authentication. > > If we also send the message requesting re-authentication at the time > when the server has an unsolicited message to send, rather than when the > SA expires, then I think we have a solution that does very little harm. > So, if that is what we end up with, I'm OK. > I think it's important to send the authentication solicitation at time > when there's a message to send for two reasons: > > 1) The client may be absent from the network earlier and may return in > time to receive the unsolicited message. If the client doesn't return, > it will miss both the authentication request and the unsolicited PCP > message, which is fine. > > 2) We don't waste batteries or resources doing authentication until > we're going to use it. > > That said, I believe my proposal is a superior technical solution so I'd > like to go for a couple more rounds of discussion. > > > Alper> Folks, If PCP is operating in authenticated mode, all the > Alper> messages shall be integrity protected. Allowing some > Alper> messages be consumed w/o integrity/replay/origin > Alper> authentication is does not give us a secure solution. Does > Alper> anyone disagree? > > I disagree. > > It kind of misses the point of security analysis to make blanket > statements like "that's secure," or "that's insecure." > Nothing is absolutely secure, and spending resources focused on attacks > that don't matter does not increase security and may decrease security > because of bugs. > As an example, I could go around screaming that all the solutions on the > table are wildly insecure because they don't provide confidentiality > protection for the PCP messages. > Except disclosure of the contents of PCP messages is not a > vulnerability in our threat model. So, that's not a weakness under the > threats we care about, so I would be wasting the group's time if I said > that the lack of confidentiality made PCP insecure. > > So, why do we care about authentication and integrity? > Well we'll start by noting that a lot of the time we don't care about > it at all. We fully expect unauthenticated PCP to be quite common. So > here are the vulnerabilities we seem to be concerned about: > > 1) Some servers care about the integrity and origin of requests. The > primary harm in if this security service is not provided to servers that > care about it is that unauthorized service may be granted, or > availability and integrity of the mappings may be impacted. > > 2) Some clients care about the origin and integrity of the > requests they make. If an attacker could modify their requests, then an > attacker could impact availability of the mappings. I.E. change the > internal port being requested or the like. > > 3) Some clients care about integrity and origin of the response. If an > attacker could modify the response the attacker could impact > availability and integrity of the mappings. I.E. attacker tells the > client the wrong external address. > > So from the above, we get: > > R1) Servers MUST be able to indicate that a request will not be > processed without authentication. > > R2) Clients MUST be able to request authentication before sending a > request even if the server would accept an unauthenticated request. > > R3) A client that sends an authenticated request MUST be able to verify > the integrity and origin of an unsolicited response should it choose to > do so. > > However, we don't seem to care about: > > z) From the standpoint of the server, nothing seems to care about the > integrity and origin of the response. In particular, I can identify > nothing bad that happens to the server if the unsolicited response is > successfully attacked. > > So, the two security folks who have responded disagree with the claim > that its inherently insecure if unsolicited responses to authenticated > requests are sometimes not integrity protected. > > Jim pointed out an example of a security application (email > verification) that works that way. While the client Jim worked on didn't > do things that way, I've used several clients that do verify signatures > only on request. Also, services like DNS Security permit clients to > decide whether to verify; as an example the BIND name server has a > configuration option about whether to validate signatures. Many TLS > libraries permit applications to choose whether to verify server > certificates; this is a widely used feature. > So, yes, only verify integrity when you need it is a common security > practice across a wide variety of technologies. > > Hope that helps. > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp > From aland@deployingradius.com Thu Nov 29 07:38:51 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C9A421F8A8B for ; Thu, 29 Nov 2012 07:38:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JapK1rxEk0ZM for ; Thu, 29 Nov 2012 07:38:51 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 0EC8721F8A8F for ; Thu, 29 Nov 2012 07:38:51 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 2CFD6224127D; Thu, 29 Nov 2012 16:38:50 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MRJPAxTdH-lG; Thu, 29 Nov 2012 16:38:50 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 8403A22409EA; Thu, 29 Nov 2012 16:38:49 +0100 (CET) Message-ID: <50B78188.8050403@deployingradius.com> Date: Thu, 29 Nov 2012 10:38:48 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> In-Reply-To: <50B6B225.9090600@toshiba.co.jp> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 15:38:51 -0000 So... you're not going to provide data to support your position, and neither is Alper. I see no reason to continue this conversation, because it's not a conversation. You're asking me to meet certain criteria, while refusing to meet them yourself. Alan DeKok. Yoshihiro Ohba wrote: > Sam, > > Thank you for sending data for strongswan's charon keying daemon about > IKEv2 which I consider a proper designed EAP transport. If your count > excludes reliability function part of IKEv2, then I would claim that it > is still not a fair basis for evaluating PCP authentication proposals. > In this debate, I believe we can only make a meaningful apple-to-apple > comparison by evaluating PANA and EAP-over-PCP implementations. What > is missing is statistics on EAP over PCP implementation which does not > seem to exist. From hartmans@painless-security.com Thu Nov 29 07:41:41 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5575421F889A for ; Thu, 29 Nov 2012 07:41:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OOQkYVTod2y1 for ; Thu, 29 Nov 2012 07:41:40 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id C261421F8A8B for ; Thu, 29 Nov 2012 07:41:40 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (unknown [10.1.10.105]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 95E79202C7; Thu, 29 Nov 2012 10:39:58 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id F2756420E; Thu, 29 Nov 2012 10:41:39 -0500 (EST) From: Sam Hartman To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> Date: Thu, 29 Nov 2012 10:41:39 -0500 In-Reply-To: <50B779E7.7070507@toshiba.co.jp> (Yoshihiro Ohba's message of "Fri, 30 Nov 2012 00:06:15 +0900") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 15:41:41 -0000 >>>>> "Yoshihiro" == Yoshihiro Ohba writes: Yoshihiro> Sam, For clients who care about integrity and origin of Yoshihiro> the response, there must be another requirement: Yoshihiro> R4) A server MUST be able to send authenticated Yoshihiro> unsoliciated response if the client requested Yoshihiro> authentication. Yoshihiro> R4 is also required to satisfy R3 so that a client who Yoshihiro> chooses to verify the integrity of and origin of an Yoshihiro> unsolicited response can do so. I think that I was too narrow in my statement of R3. I didn't simply mean that if the response happened to have a MAC, the client needed to be able to verify the MAC. I meant that a client needs to be able to follow some procedure for verifying the integrity and origin of a response if the client chooses to do so. Depending on what procedure we pick, that will likely constrain servers. Your requirement R4 is too broad. For example it's not a requirement that servers be able to send authenticated unsolicited messages to clients that will not verify the integrity of those messages. would you be willing to work with me to restate my requirement R3 to capture what I'm trying to express in this message? --Sam From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 07:55:04 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2366021F8B7D for ; Thu, 29 Nov 2012 07:55:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.089 X-Spam-Level: X-Spam-Status: No, score=-6.089 tagged_above=-999 required=5 tests=[AWL=-2.000, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 65sk1XG1YWvD for ; Thu, 29 Nov 2012 07:54:58 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id A0F6A21F8AB4 for ; Thu, 29 Nov 2012 07:54:57 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qATFsjR5014311; Fri, 30 Nov 2012 00:54:45 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qATFsjRQ018098; Fri, 30 Nov 2012 00:54:45 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id AAA18097; Fri, 30 Nov 2012 00:54:45 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qATFsiTV003421; Fri, 30 Nov 2012 00:54:44 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qATFsiDZ023963; Fri, 30 Nov 2012 00:54:44 +0900 (JST) Received: from [133.199.16.228] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME900619AV76MA0@mail.po.toshiba.co.jp>; Fri, 30 Nov 2012 00:54:44 +0900 (JST) Date: Fri, 30 Nov 2012 00:54:42 +0900 From: Yoshihiro Ohba In-reply-to: <50B78188.8050403@deployingradius.com> To: Alan DeKok Message-id: <50B78542.3030802@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 15:55:04 -0000 Both openpana and cpana data have been provided. Yoshhiro Ohba (2012/11/30 0:38), Alan DeKok wrote: > So... you're not going to provide data to support your position, and > neither is Alper. > > I see no reason to continue this conversation, because it's not a > conversation. You're asking me to meet certain criteria, while refusing > to meet them yourself. > > Alan DeKok. > > Yoshihiro Ohba wrote: >> Sam, >> >> Thank you for sending data for strongswan's charon keying daemon about >> IKEv2 which I consider a proper designed EAP transport. If your count >> excludes reliability function part of IKEv2, then I would claim that it >> is still not a fair basis for evaluating PCP authentication proposals. >> In this debate, I believe we can only make a meaningful apple-to-apple >> comparison by evaluating PANA and EAP-over-PCP implementations. What >> is missing is statistics on EAP over PCP implementation which does not >> seem to exist. From aland@deployingradius.com Thu Nov 29 08:20:30 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D70DB21F847F for ; Thu, 29 Nov 2012 08:20:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ytK2h589N0s for ; Thu, 29 Nov 2012 08:20:29 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id B63E821F8469 for ; Thu, 29 Nov 2012 08:20:29 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id D3D06224127D; Thu, 29 Nov 2012 17:20:27 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QHTR9FYPglZ5; Thu, 29 Nov 2012 17:20:27 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 2C45C22409EA; Thu, 29 Nov 2012 17:20:27 +0100 (CET) Message-ID: <50B78B4A.1080306@deployingradius.com> Date: Thu, 29 Nov 2012 11:20:26 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> In-Reply-To: <50B78542.3030802@toshiba.co.jp> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 16:20:31 -0000 Yoshihiro Ohba wrote: > Both openpana and cpana data have been provided. By which you mean *I* provided the data. Alper and you still haven't provided: a) the cost of proprietary vendor PANA implementations b) the cost of integrating those with an application c) the cost of integrating cpana or openpana with PCP Sam and I have both provided data around the cost of implementing PANA (cpana && openpana), the cost of integrating EAP with another protocol for transport (EAPoDHCP, Moonshot, EAP-IKEv2). Sam has alluded to the cost of integrating EAP with PCP (a bit over 500 LoC). All you've done is poke holes in other peoples arguments. You have supplied *absolutely no data* to support your position. Until you support your position, I think it's safe to say there is absolutely no reason to use PANA. Demanding that PCP use PANA based only on your say-so is not productive. Alan DeKok. From rafa@um.es Thu Nov 29 09:18:41 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF5E721F8B16 for ; Thu, 29 Nov 2012 09:18:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.099 X-Spam-Level: X-Spam-Status: No, score=-5.099 tagged_above=-999 required=5 tests=[AWL=-1.500, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tHRjdYbVnKqD for ; Thu, 29 Nov 2012 09:18:40 -0800 (PST) Received: from xenon13.um.es (xenon13.um.es [155.54.212.167]) by ietfa.amsl.com (Postfix) with ESMTP id 3F18521F8B0F for ; Thu, 29 Nov 2012 09:18:40 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by xenon13.um.es (Postfix) with ESMTP id B0BCC5D690; Thu, 29 Nov 2012 18:18:38 +0100 (CET) X-Virus-Scanned: by antispam in UMU at xenon13.um.es Received: from xenon13.um.es ([127.0.0.1]) by localhost (xenon13.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id NfWg288nytjw; Thu, 29 Nov 2012 18:18:38 +0100 (CET) Received: from inf-205-10.inf.um.es (inf-205-10.inf.um.es [155.54.205.10]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon13.um.es (Postfix) with ESMTPSA id 88E795D692; Thu, 29 Nov 2012 18:18:36 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1283) Content-Type: text/plain; charset=iso-8859-1 From: Rafa Marin Lopez In-Reply-To: <50B78B4A.1080306@deployingradius.com> Date: Thu, 29 Nov 2012 18:18:26 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <99712689-1952-41FE-B63C-40B81672B852@um.es> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> To: Alan DeKok X-Mailer: Apple Mail (2.1283) Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 17:18:41 -0000 Hi Alan Didn't you receive my previous e-mail to the PCP ML about OpenPANA data? = I think the data I sent about OpenPANA are the correct ones. I were not = able to replicate your data about OpenPANA.=20 Please check my e-mail in the link. I would really appreciate it. http://www.ietf.org/mail-archive/web/pcp/current/msg02631.html Best regards. El 29/11/2012, a las 17:20, Alan DeKok escribi=F3: > Yoshihiro Ohba wrote: >> Both openpana and cpana data have been provided. >=20 > By which you mean *I* provided the data. >=20 > Alper and you still haven't provided: >=20 > a) the cost of proprietary vendor PANA implementations >=20 > b) the cost of integrating those with an application >=20 > c) the cost of integrating cpana or openpana with PCP >=20 >=20 > Sam and I have both provided data around the cost of implementing = PANA > (cpana && openpana), the cost of integrating EAP with another protocol > for transport (EAPoDHCP, Moonshot, EAP-IKEv2). Sam has alluded to the > cost of integrating EAP with PCP (a bit over 500 LoC). >=20 > All you've done is poke holes in other peoples arguments. >=20 > You have supplied *absolutely no data* to support your position. >=20 > Until you support your position, I think it's safe to say there is > absolutely no reason to use PANA. Demanding that PCP use PANA based > only on your say-so is not productive. >=20 > Alan DeKok. > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From aland@deployingradius.com Thu Nov 29 13:26:08 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A34921F85C3 for ; Thu, 29 Nov 2012 13:26:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qM2BwvyGB8cK for ; Thu, 29 Nov 2012 13:26:08 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id F1B5E21F84F2 for ; Thu, 29 Nov 2012 13:26:07 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 7366F2241E9F; Thu, 29 Nov 2012 22:26:05 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q6cUHB9SfohE; Thu, 29 Nov 2012 22:26:05 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id D46622241B05; Thu, 29 Nov 2012 22:26:04 +0100 (CET) Message-ID: <50B7D2EC.9040202@deployingradius.com> Date: Thu, 29 Nov 2012 16:26:04 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Rafa Marin Lopez References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> <99712689-1952-41FE-B63C-40B81672B852@um.es> In-Reply-To: <99712689-1952-41FE-B63C-40B81672B852@um.es> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 21:26:08 -0000 Rafa Marin Lopez wrote: > Didn't you receive my previous e-mail to the PCP ML about OpenPANA data? Yes. The data is similar enough to what I posted earlier, that I don't see it as changing any of my conclusions. Alan DeKok. From dwing@cisco.com Thu Nov 29 15:41:56 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0439121F8B4C for ; Thu, 29 Nov 2012 15:41:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.224 X-Spam-Level: X-Spam-Status: No, score=-110.224 tagged_above=-999 required=5 tests=[AWL=-0.225, BAYES_00=-2.599, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mJnpaePp5DYM for ; Thu, 29 Nov 2012 15:41:55 -0800 (PST) Received: from mtv-iport-1.cisco.com (mtv-iport-1.cisco.com [173.36.130.12]) by ietfa.amsl.com (Postfix) with ESMTP id 42DA621F8B4B for ; Thu, 29 Nov 2012 15:41:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=3517; q=dns/txt; s=iport; t=1354232515; x=1355442115; h=from:to:references:in-reply-to:subject:date:message-id: mime-version:content-transfer-encoding; bh=UWgS7V+n70+0ZHBRS28yE0X4jQhAf1oTrzOnyKpxIps=; b=HRdfIq7sxLZhptxKkkYgCQlDxkBs3CmYF7m6TF7OvYwee65GRF+SlT5m 2tO/XTi2cBEnMt07Bsw5M+OMeQ06dsqws0OpUCBtDfQcF/qyQCZ7Ljqxy TYzODSbW/alTuChv73azAor1xN+X4UlC2uED/ro3O+bpzPMDn95I0sz3i c=; X-IronPort-AV: E=McAfee;i="5400,1158,6911"; a="62206081" Received: from mtv-core-4.cisco.com ([171.68.58.9]) by mtv-iport-1.cisco.com with ESMTP; 29 Nov 2012 23:41:54 +0000 Received: from DWINGWS01 ([10.156.17.137]) by mtv-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id qATNfs0Y008606; Thu, 29 Nov 2012 23:41:54 GMT From: "Dan Wing" To: , "'Reinaldo Penno \(repenno\)'" , References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> In-Reply-To: <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> Date: Thu, 29 Nov 2012 15:41:54 -0800 Message-ID: <074801cdce8b$1cb9b140$562d13c0$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQKd4K1embgpxqjensJXMmK2Y6gDrwJ3zMEVAlG+7FmWOwaoUA== Content-Language: en-us Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 23:41:56 -0000 > -----Original Message----- > From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of > mohamed.boucadair@orange.com > Sent: Wednesday, November 28, 2012 11:18 PM > To: Reinaldo Penno (repenno); pcp@ietf.org > Subject: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, > 2012)) >=20 > Dear all, >=20 > Below some answers for the questions raised for this draft. >=20 >=20 > >-----Message d'origine----- > >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De la part de > >Reinaldo Penno (repenno) Envoy=E9 : lundi 26 novembre 2012 15:36 =C0 = : > >pcp@ietf.org Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) > > > >FRI 1120-1330 (note new end time) = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D > > > > > >Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity > >draft-boucadair-pcp-rtp-rtcp (10, Jaqueline > >Queiroz) > > > >Stuart Cheshire: This seems wrong for PCP to take on additional > >responsibility for the sake of a single legacy protocol > > > >Dan Wing: We should ask the SIP WG what they think. >=20 > Med: The procedure is not specific to SIP/SDP, it is even valid for = non- > sdp protocols. Are you suggesting we send a message to mmusic WG for > instance? The port adjacency is (was) a need of RTP (RFC1889, RFC3550) which is now owned by AVTCORE. =20 A survey of endpoints that support a=3Drtcp (RFC3605) or send their RTP and RTCP over the same port (as being pursued by RTCWEB) would be valuable. The question comes down to: does the industry still need port adjacency, or by the time PCP standardizes this functionality and it gets deployed will it be relevant any more? It will take a couple of years. > >Stuart Cheshire: NAT-PMP and IGD don't do this today, so how > >"essential" > >can it > >be? >=20 > Med: Is this really a reason to not do it for PCP? It does demonstrate that there seems little _requirement_ for this functionality - or else it would have been implemented or been a must-have requirement. That is, there are some sort of workaround/workarounds the industry is currently using today. > >How do even/odd SIP devices work today? Why is it > >"essential" that PCP > >give > >them something new, which they currently manage without? >=20 > Med: What we are proposing in this draft is very very simple. > > If this > option is not supported, we will continue with current practices = (which > have many drawbacks): >=20 > * enable an ALG in the NAT (I'm more concerned about the CGN case) > * or enabled some mechanism in the service side (e.g., SBC, Proxy > Server) > > The proposed PCP option allows >=20 > * to remove any service-specific ALG handling RTP/RTCP traversal from > the CGN/NAT > * Simplify the service access point (e.g., SBC): no need for hosted = nat > traversal Would SBCs be de-installed if this feature is added to PCP? > * For the SIP case, there is even no need to use symmetric SIP, > Symmetric RTP, etc. > * No issue with unidirectional media sessions Those benefits are beyond what was presented at the PCP meeting. They are pretty interesting / valuable. Can the SIP and/or AVTCORE working groups help convince PCP that this is necessary / helpful / useful? -d >=20 >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From rafa@um.es Thu Nov 29 15:42:08 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02FCB21F8B4B for ; Thu, 29 Nov 2012 15:42:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.598 X-Spam-Level: X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j7TljdXDaikT for ; Thu, 29 Nov 2012 15:42:07 -0800 (PST) Received: from xenon13.um.es (xenon13.um.es [155.54.212.167]) by ietfa.amsl.com (Postfix) with ESMTP id BCEE121F8B53 for ; Thu, 29 Nov 2012 15:42:00 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by xenon13.um.es (Postfix) with ESMTP id 2C0B05D63B; Fri, 30 Nov 2012 00:41:58 +0100 (CET) X-Virus-Scanned: by antispam in UMU at xenon13.um.es Received: from xenon13.um.es ([127.0.0.1]) by localhost (xenon13.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id oPA063Qb-f8T; Fri, 30 Nov 2012 00:41:57 +0100 (CET) Received: from [192.168.1.67] (203.Red-88-9-202.dynamicIP.rima-tde.net [88.9.202.203]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon13.um.es (Postfix) with ESMTPSA id CF7D05D621; Fri, 30 Nov 2012 00:41:56 +0100 (CET) Mime-Version: 1.0 (Apple Message framework v1085) Content-Type: multipart/alternative; boundary=Apple-Mail-2-115676210 From: Rafa Marin Lopez In-Reply-To: <50B7D2EC.9040202@deployingradius.com> Date: Fri, 30 Nov 2012 00:41:54 +0100 Message-Id: <8D257884-2D62-415A-90A1-D3E2D389BB9F@um.es> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> <99712689-1952-41FE-B63C-40B81672B852@um.es> <50B7D2EC.9040202@deployingradius.com> To: Alan DeKok X-Mailer: Apple Mail (2.1085) Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 23:42:08 -0000 --Apple-Mail-2-115676210 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Alan, Maybe I am missing something, but the lines you posted (6,912) are = around twice the lines I provided (3,687) (apart from other data such as = the 741 lines for a PaC in constrained devices). Not sure how they are = similar. Thanks for your time. On Nov 29, 2012, at 10:26 PM, Alan DeKok wrote: > Rafa Marin Lopez wrote: >> Didn't you receive my previous e-mail to the PCP ML about OpenPANA = data? >=20 > Yes. The data is similar enough to what I posted earlier, that I > don't see it as changing any of my conclusions. >=20 > Alan DeKok. ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- --Apple-Mail-2-115676210 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii Hi Alan,

Maybe I am missing something, but the lines you posted (6,912) are around twice the lines I provided (3,687) (apart from other data such as the 741 lines for a PaC in constrained devices). Not sure how they are similar.

Thanks for your time.

On Nov 29, 2012, at 10:26 PM, Alan DeKok wrote:

Rafa Marin Lopez wrote:
Didn't you receive my previous e-mail to the PCP ML about OpenPANA data?

 Yes.  The data is similar enough to what I posted earlier, that I
don't see it as changing any of my conclusions.

 Alan DeKok.

-------------------------------------------------------
Rafael Marin Lopez, PhD
Dept. Information and Communications Engineering (DIIC)
Faculty of Computer Science-University of Murcia
30100 Murcia - Spain
Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es
-------------------------------------------------------

--Apple-Mail-2-115676210-- From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 15:54:36 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFA2821F8B20 for ; Thu, 29 Nov 2012 15:54:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.089 X-Spam-Level: X-Spam-Status: No, score=-7.089 tagged_above=-999 required=5 tests=[AWL=1.000, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KN3iuUq3y79i for ; Thu, 29 Nov 2012 15:54:36 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id 0B37821F8B1A for ; Thu, 29 Nov 2012 15:54:35 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qATNsJrW001282; Fri, 30 Nov 2012 08:54:19 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qATNsJNd026646; Fri, 30 Nov 2012 08:54:19 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id JAA26645; Fri, 30 Nov 2012 08:54:19 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qATNsIHm009699; Fri, 30 Nov 2012 08:54:18 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qATNsIsm001708; Fri, 30 Nov 2012 08:54:18 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME9006SMX2I6MF0@mail.po.toshiba.co.jp>; Fri, 30 Nov 2012 08:54:18 +0900 (JST) Date: Fri, 30 Nov 2012 08:54:18 +0900 From: Yoshihiro Ohba In-reply-to: <50B78B4A.1080306@deployingradius.com> To: Alan DeKok Message-id: <50B7F5AA.6020808@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 23:54:36 -0000 Alan, Cpana was developed by Toshiba (my affiliation), and its source code was published based on a request by ZigBee Alliance in order to facilitate ZigBee IP development. So it's basically a vendor PANA implementation. The person who posted cpana data is my colleague whom I asked to post it, so it's virtually coming from me. The cost of integrating it with an application is publically available in the following paper: "A key management framework for AMI networks in smart grid", Das, S., Ohba, Y. ; Kanda, M. ; Famolari, D. ; Das, S.K., IEEE Communications Magazine, August 2012. The target application is ANSI C12.22 smart metering application. The integration cost is 1.7KByte of code for so called universal key management function in the paper. The cost of integrating cpana with PCP is not available now because it is not implemented yet, but I expect it to be similar size. Lastly, I was not poking holes in other peoples arguments. What I technicaly claimed is the data for EAP over DHCP, EAP-GSS and IKEv2 is not a fair basis for comparing PCP authentication proposals on the table because EAP over DHCP does not satisfy EAP transport requirements and data for EAP-GSS and IKEv2 seem to exclude reliability function that would be additionally required for PCP to transport EAP. In other words, it makes little sense to discuss size of orange and grape when discussing size of two apples. Any technical counter argument is welcomed. Yoshihiro Ohba (2012/11/30 1:20), Alan DeKok wrote: > Yoshihiro Ohba wrote: >> Both openpana and cpana data have been provided. > By which you mean *I* provided the data. > > Alper and you still haven't provided: > > a) the cost of proprietary vendor PANA implementations > > b) the cost of integrating those with an application > > c) the cost of integrating cpana or openpana with PCP > > > Sam and I have both provided data around the cost of implementing PANA > (cpana && openpana), the cost of integrating EAP with another protocol > for transport (EAPoDHCP, Moonshot, EAP-IKEv2). Sam has alluded to the > cost of integrating EAP with PCP (a bit over 500 LoC). > > All you've done is poke holes in other peoples arguments. > > You have supplied *absolutely no data* to support your position. > > Until you support your position, I think it's safe to say there is > absolutely no reason to use PANA. Demanding that PCP use PANA based > only on your say-so is not productive. > > Alan DeKok. > From aland@deployingradius.com Thu Nov 29 15:58:37 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E59F121F8A73 for ; Thu, 29 Nov 2012 15:58:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RSq7NYmQckUq for ; Thu, 29 Nov 2012 15:58:37 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 57A6C21F88F2 for ; Thu, 29 Nov 2012 15:58:37 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 3DC932241E9F; Fri, 30 Nov 2012 00:58:35 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Is8Y584JJ-05; Fri, 30 Nov 2012 00:58:34 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 5BB592241B05; Fri, 30 Nov 2012 00:58:34 +0100 (CET) Message-ID: <50B7F6A9.5040809@deployingradius.com> Date: Thu, 29 Nov 2012 18:58:33 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Rafa Marin Lopez References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> <99712689-1952-41FE-B63C-40B81672B852@um.es> <50B7D2EC.9040202@deployingradius.com> <8D257884-2D62-415A-90A1-D3E2D389BB9F@um.es> In-Reply-To: <8D257884-2D62-415A-90A1-D3E2D389BB9F@um.es> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2012 23:58:38 -0000 Rafa Marin Lopez wrote: > Maybe I am missing something, but the lines you posted (6,912) are > around twice the lines I provided (3,687) (apart from other data such as > the 741 lines for a PaC in constrained devices). Not sure how they are > similar. The numbers for a full PANA implementation are well over 1K LoC. The difference between 4K and 7K is that the 4K number discounts a bunch of things which aren't "really" part of a PANA implementation. I'm not familiar enough with OpenPANA to divide the numbers that way, so I just counted the code I saw. The 741 LoC for a PaC in a constrained device is nice. But there was already the claim (not by me) that cpana && OpenPANA weren't ready for prime time. So presumably that number will grow as it becomes production ready. Alan DeKok. From aland@deployingradius.com Thu Nov 29 16:04:58 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1B5121F89C3 for ; Thu, 29 Nov 2012 16:04:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dh1ZJfUGrPys for ; Thu, 29 Nov 2012 16:04:58 -0800 (PST) Received: from power.freeradius.org (power.freeradius.org [88.190.25.44]) by ietfa.amsl.com (Postfix) with ESMTP id 34E9E21F89A2 for ; Thu, 29 Nov 2012 16:04:58 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by power.freeradius.org (Postfix) with ESMTP id 054B92241E9F; Fri, 30 Nov 2012 01:04:57 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at power.freeradius.org Received: from power.freeradius.org ([127.0.0.1]) by localhost (power.freeradius.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DhqjYyLR22GU; Fri, 30 Nov 2012 01:04:54 +0100 (CET) Received: from Thor-2.local (206-47-94-208.dsl.ncf.ca [206.47.94.208]) by power.freeradius.org (Postfix) with ESMTPSA id 1CE252241B05; Fri, 30 Nov 2012 01:04:53 +0100 (CET) Message-ID: <50B7F825.5070805@deployingradius.com> Date: Thu, 29 Nov 2012 19:04:53 -0500 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> <50B7F5AA.6020808@toshiba.co.jp> In-Reply-To: <50B7F5AA.6020808@toshiba.co.jp> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 00:04:59 -0000 I've responded to those points in prior messages. I'll also note that you previously claimed (Nov 27) that IKEv2 was a "proper EAP transport design", and a better metric for evaluation. Now you're claiming it's not. I also disagree with your claims about EAPoDHCP, but I see nothing productive coming from that conversation. Yoshihiro Ohba wrote: > Alan, > > Cpana was developed by Toshiba (my affiliation), and its source code was > published based on a request by ZigBee Alliance in order to facilitate > ZigBee IP development. > So it's basically a vendor PANA implementation. The person who posted > cpana data is my colleague whom I asked to post it, so it's virtually > coming from me. > > The cost of integrating it with an application is publically available > in the following paper: > > "A key management framework for AMI networks in smart grid", Das, S., > Ohba, Y. ; Kanda, M. ; Famolari, D. ; Das, S.K., IEEE Communications > Magazine, August 2012. > > The target application is ANSI C12.22 smart metering application. The > integration cost is 1.7KByte of code for so called universal key > management function in the paper. > The cost of integrating cpana with PCP is not available now because it > is not implemented yet, but I expect it to be similar size. > > Lastly, I was not poking holes in other peoples arguments. What I > technicaly claimed is the data for EAP over DHCP, EAP-GSS and IKEv2 is > not a fair basis for comparing PCP authentication proposals on the table > because EAP over DHCP does not satisfy EAP transport requirements and > data for EAP-GSS and IKEv2 seem to exclude reliability function that > would be additionally required for PCP to transport EAP. In other > words, it makes little sense to discuss size of orange and grape when > discussing size of two apples. Any technical counter argument is welcomed. From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 16:32:17 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 962DC21F8ADC for ; Thu, 29 Nov 2012 16:32:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.289 X-Spam-Level: X-Spam-Status: No, score=-7.289 tagged_above=-999 required=5 tests=[AWL=0.800, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BF1xz+Pyr5v6 for ; Thu, 29 Nov 2012 16:32:11 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id E1F5E21F8ADB for ; Thu, 29 Nov 2012 16:32:10 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qAU0W9CN016753; Fri, 30 Nov 2012 09:32:09 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qAU0W90A026442; Fri, 30 Nov 2012 09:32:09 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id KAA26438; Fri, 30 Nov 2012 09:32:09 +0900 Received: from mx.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qAU0W80t027129; Fri, 30 Nov 2012 09:32:09 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAU0W832020931; Fri, 30 Nov 2012 09:32:08 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME9006NKYTK6NK0@mail.po.toshiba.co.jp>; Fri, 30 Nov 2012 09:32:08 +0900 (JST) Date: Fri, 30 Nov 2012 09:32:08 +0900 From: Yoshihiro Ohba In-reply-to: To: Sam Hartman Message-id: <50B7FE88.1030406@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 00:32:17 -0000 Sam, It seems what you suggest is to have a policy to allow unauthenticated responses while requests are authenticated even if the client and server have agreed to authenticate each other. I see no benefit of allowing such a policy. It just introduces a DoS attack with false re-authentication triggers. Let's not do it. Yoshihiro Ohba (2012/11/30 0:41), Sam Hartman wrote: >>>>>> "Yoshihiro" == Yoshihiro Ohba writes: > Yoshihiro> Sam, For clients who care about integrity and origin of > Yoshihiro> the response, there must be another requirement: > > Yoshihiro> R4) A server MUST be able to send authenticated > Yoshihiro> unsoliciated response if the client requested > Yoshihiro> authentication. > > Yoshihiro> R4 is also required to satisfy R3 so that a client who > Yoshihiro> chooses to verify the integrity of and origin of an > Yoshihiro> unsolicited response can do so. > > I think that I was too narrow in my statement of R3. > > I didn't simply mean that if the response happened to have a MAC, the > client needed to be able to verify the MAC. > > I meant that a client needs to be able to follow some procedure for > verifying the integrity and origin of a response if the client chooses > to do so. > > Depending on what procedure we pick, that will likely constrain servers. > > Your requirement R4 is too broad. For example it's not a requirement > that servers be able to send authenticated unsolicited messages to > clients that will not verify the integrity of those messages. > > would you be willing to work with me to restate my requirement R3 to > capture what I'm trying to express in this message? > > --Sam > From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 16:49:25 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6991021F8B1B for ; Thu, 29 Nov 2012 16:49:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.422 X-Spam-Level: X-Spam-Status: No, score=-5.422 tagged_above=-999 required=5 tests=[AWL=-1.333, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZdyLvrYIGJA for ; Thu, 29 Nov 2012 16:49:24 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id A5B8A21F8B19 for ; Thu, 29 Nov 2012 16:49:24 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qAU0nFxW012334; Fri, 30 Nov 2012 09:49:15 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qAU0nEYQ027821; Fri, 30 Nov 2012 09:49:14 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id KAA27820; Fri, 30 Nov 2012 09:49:14 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qAU0nEL6028641; Fri, 30 Nov 2012 09:49:14 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAU0nEj9012460; Fri, 30 Nov 2012 09:49:14 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0ME90069RZM16MI0@mail.po.toshiba.co.jp>; Fri, 30 Nov 2012 09:49:13 +0900 (JST) Date: Fri, 30 Nov 2012 09:49:13 +0900 From: Yoshihiro Ohba In-reply-to: <50B7F825.5070805@deployingradius.com> To: Alan DeKok Message-id: <50B80289.5050304@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <3A4CA3B8-19F0-4A22-A7F2-CCD636394A9C@yegin.org> <50B50B60.9000507@deployingradius.com> <4411075E-6C4C-4953-9167-9F7BBFEF46D1@yegin.org> <50B52CB2.7090706@deployingradius.com> <50B5802B.4020907@toshiba.co.jp> <50B59047.2080503@deployingradius.com> <50B59975.2030900@toshiba.co.jp> <50B6B225.9090600@toshiba.co.jp> <50B78188.8050403@deployingradius.com> <50B78542.3030802@toshiba.co.jp> <50B78B4A.1080306@deployingradius.com> <50B7F5AA.6020808@toshiba.co.jp> <50B7F825.5070805@deployingradius.com> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] PCP MoM (FRIDAY, November 9, 2012) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 00:49:25 -0000 What I previously claimed is: "Thank you for sending data for strongswan's charon keying daemon about IKEv2 which I consider a proper designed EAP transport. If your count excludes reliability function part of IKEv2, then I would claim that it is still not a fair basis for evaluating PCP authentication proposals." Yes, IKEv2 is a proper designed EAP transport, but the data shown by Sam is not a a fair basis for evaluating PCP authentication proposals if it excludes reliability function part of IKEv2 in that case it is not going to be an apple-to-apple comparison. For IKEv2, what is needed for PCP discussion is data including reliability function. Yoshihiro Ohha (2012/11/30 9:04), Alan DeKok wrote: > I've responded to those points in prior messages. > > I'll also note that you previously claimed (Nov 27) that IKEv2 was a > "proper EAP transport design", and a better metric for evaluation. Now > you're claiming it's not. I also disagree with your claims about > EAPoDHCP, but I see nothing productive coming from that conversation. > > Yoshihiro Ohba wrote: >> Alan, >> >> Cpana was developed by Toshiba (my affiliation), and its source code was >> published based on a request by ZigBee Alliance in order to facilitate >> ZigBee IP development. >> So it's basically a vendor PANA implementation. The person who posted >> cpana data is my colleague whom I asked to post it, so it's virtually >> coming from me. >> >> The cost of integrating it with an application is publically available >> in the following paper: >> >> "A key management framework for AMI networks in smart grid", Das, S., >> Ohba, Y. ; Kanda, M. ; Famolari, D. ; Das, S.K., IEEE Communications >> Magazine, August 2012. >> >> The target application is ANSI C12.22 smart metering application. The >> integration cost is 1.7KByte of code for so called universal key >> management function in the paper. >> The cost of integrating cpana with PCP is not available now because it >> is not implemented yet, but I expect it to be similar size. >> >> Lastly, I was not poking holes in other peoples arguments. What I >> technicaly claimed is the data for EAP over DHCP, EAP-GSS and IKEv2 is >> not a fair basis for comparing PCP authentication proposals on the table >> because EAP over DHCP does not satisfy EAP transport requirements and >> data for EAP-GSS and IKEv2 seem to exclude reliability function that >> would be additionally required for PCP to transport EAP. In other >> words, it makes little sense to discuss size of orange and grape when >> discussing size of two apples. Any technical counter argument is welcomed. From hartmans@painless-security.com Thu Nov 29 18:19:30 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BE71421F889A for ; Thu, 29 Nov 2012 18:19:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LV-DI4yRZ-ic for ; Thu, 29 Nov 2012 18:19:30 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 4765721F87F5 for ; Thu, 29 Nov 2012 18:19:30 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 7556D2010D; Thu, 29 Nov 2012 21:17:46 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 47740420E; Thu, 29 Nov 2012 21:19:24 -0500 (EST) From: Sam Hartman To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> <50B7FE88.1030406@toshiba.co.jp> Date: Thu, 29 Nov 2012 21:19:24 -0500 In-Reply-To: <50B7FE88.1030406@toshiba.co.jp> (Yoshihiro Ohba's message of "Fri, 30 Nov 2012 09:32:08 +0900") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 02:19:30 -0000 >>>>> "Yoshihiro" == Yoshihiro Ohba writes: Yoshihiro> Sam, It seems what you suggest is to have a policy to Yoshihiro> allow unauthenticated responses while requests are Yoshihiro> authenticated even if the client and server have agreed Yoshihiro> to authenticate each other. I see no benefit of allowing Yoshihiro> such a policy. It just introduces a DoS attack with Yoshihiro> false re-authentication triggers. Let's not do it. I'm happy to discuss benefits once we agree on a security model. It sounds like you believe my statement of Z is wrong or that there's a new threat to availability with regard to the client. Can you clearly state that? In a form similar to how I stated 1-3 and Z? From yoshihiro.ohba@toshiba.co.jp Thu Nov 29 19:13:06 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08EF421F844C for ; Thu, 29 Nov 2012 19:13:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.232 X-Spam-Level: X-Spam-Status: No, score=-7.232 tagged_above=-999 required=5 tests=[AWL=0.857, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_HI=-8, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MVt20xvdpf4R for ; Thu, 29 Nov 2012 19:13:05 -0800 (PST) Received: from imx12.toshiba.co.jp (imx12.toshiba.co.jp [61.202.160.132]) by ietfa.amsl.com (Postfix) with ESMTP id 56BA121F8444 for ; Thu, 29 Nov 2012 19:13:04 -0800 (PST) Received: from arc11.toshiba.co.jp ([133.199.90.127]) by imx12.toshiba.co.jp with ESMTP id qAU3D2j5005302; Fri, 30 Nov 2012 12:13:02 +0900 (JST) Received: (from root@localhost) by arc11.toshiba.co.jp id qAU3D2b8002733; Fri, 30 Nov 2012 12:13:02 +0900 (JST) Received: from ovp11.toshiba.co.jp [133.199.90.148] by arc11.toshiba.co.jp with ESMTP id NAA02732; Fri, 30 Nov 2012 12:13:02 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp11.toshiba.co.jp with ESMTP id qAU3D2b8027482; Fri, 30 Nov 2012 12:13:02 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qAU3D2N4024127; Fri, 30 Nov 2012 12:13:02 +0900 (JST) Received: from [133.196.20.235] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0MEA00BIL69PLG50@mail.po.toshiba.co.jp>; Fri, 30 Nov 2012 12:13:02 +0900 (JST) Date: Fri, 30 Nov 2012 12:13:01 +0900 From: Yoshihiro Ohba In-reply-to: To: Sam Hartman Message-id: <50B8243D.7090605@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> <50B7FE88.1030406@toshiba.co.jp> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 03:13:06 -0000 (2012/11/30 11:19), Sam Hartman wrote: > > Yoshihiro> Sam, It seems what you suggest is to have a policy to > Yoshihiro> allow unauthenticated responses while requests are > Yoshihiro> authenticated even if the client and server have agreed > Yoshihiro> to authenticate each other. I see no benefit of allowing > Yoshihiro> such a policy. It just introduces a DoS attack with > Yoshihiro> false re-authentication triggers. Let's not do it. > > I'm happy to discuss benefits once we agree on a security model. It > sounds like you believe my statement of Z is wrong or that there's a new > threat to availability with regard to the client. > Can you clearly state that? False re-authentication triggers sent by an attacker can start re-authentication even if neither the client nor the server actually wants to re-key. Note that a client or a server may want to re-key independently of each other at any time even before the key lifetime expires whenever it thinks that the key is being weak. As a result, the client and server may end up with spending more resources for unnecessarily re-authentication exchanges caused by such false triggers. Detecting false re-auth triggers would require the client to verify MAC of the re-auth triggers, which can be considered another DoS attack, but the DoS is IMO managable and the impact is much smaller than going through unnecessarily re-authentications. Yoshihiro Ohba > > In a form similar to how I stated 1-3 and Z? > From repenno@cisco.com Thu Nov 29 19:45:41 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A8B921F88EC for ; Thu, 29 Nov 2012 19:45:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7PmoRLMjLUmm for ; Thu, 29 Nov 2012 19:45:40 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id AB88A21F88E0 for ; Thu, 29 Nov 2012 19:45:40 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1639; q=dns/txt; s=iport; t=1354247140; x=1355456740; h=from:to:cc:subject:date:message-id:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=qXjsBrkS3h/WwpRwXtUJPdvMCl20RmsLGjHBchnmoqA=; b=KbMPDSn67yy0NIDhnrHoOg00E9L2T5pH9tH1iz4PtJG6Ko7nUZJIQtLe 2KN55h9CnUQyhOOrUe4MqSczzWrRzUfCKsKpgL2N7nBmmlxC+nlZDn4VF jZei6NH7NrRE7+TtmHqtPFfYpKefgqw6eC5rwF/nhH2D9/UIBmKtyEZdi Y=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EALwquFCtJV2d/2dsb2JhbABEwAgWc4IgAQQBAQE3NAsSAQgiFDcLJQIEAQ0FCIgIDL8PBJAgYQOmRYJygiE X-IronPort-AV: E=McAfee;i="5400,1158,6911"; a="147592062" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-1.cisco.com with ESMTP; 30 Nov 2012 03:45:40 +0000 Received: from xhc-aln-x11.cisco.com (xhc-aln-x11.cisco.com [173.36.12.85]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id qAU3jeQs018210 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 30 Nov 2012 03:45:40 GMT Received: from xmb-rcd-x04.cisco.com ([169.254.8.203]) by xhc-aln-x11.cisco.com ([173.36.12.85]) with mapi id 14.02.0318.001; Thu, 29 Nov 2012 21:45:39 -0600 From: "Reinaldo Penno (repenno)" To: Sam Hartman , Yoshihiro Ohba Thread-Topic: [pcp] Unsolicited Messages to Client with no security association Thread-Index: AQHNzq0pDX2wGdWXNkeU1khbCoSJ4g== Date: Fri, 30 Nov 2012 03:45:39 +0000 Message-ID: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.13.0.110805 x-originating-ip: [10.21.76.66] Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 03:45:41 -0000 One point that I made earlier is that a client can not distinguish between a regular response and an unsolicited response. Both are exactly the same from a PCP perspective. Therefore it is my impression that any proposal that relies on a distinction between the two needs to define how a client can disambiguate them.=20 One can say that any response received by the client after the first is unsolicited. This holds true except in the case where the first response is lost, a change happens in the server which triggers an unsolicited response. From the client pov this would be the first response. Thanks, Reinaldo On 11/30/12 12:19 AM, "Sam Hartman" wrote: >>>>>> "Yoshihiro" =3D=3D Yoshihiro Ohba wri= tes: > > Yoshihiro> Sam, It seems what you suggest is to have a policy to > Yoshihiro> allow unauthenticated responses while requests are > Yoshihiro> authenticated even if the client and server have agreed > Yoshihiro> to authenticate each other. I see no benefit of allowing > Yoshihiro> such a policy. It just introduces a DoS attack with > Yoshihiro> false re-authentication triggers. Let's not do it. > >I'm happy to discuss benefits once we agree on a security model. It >sounds like you believe my statement of Z is wrong or that there's a new >threat to availability with regard to the client. >Can you clearly state that? > >In a form similar to how I stated 1-3 and Z? >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp From mohamed.boucadair@orange.com Thu Nov 29 22:40:08 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E95621F89BE for ; Thu, 29 Nov 2012 22:40:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.974 X-Spam-Level: X-Spam-Status: No, score=-1.974 tagged_above=-999 required=5 tests=[AWL=-0.326, BAYES_00=-2.599, HELO_EQ_FR=0.35, J_CHICKENPOX_14=0.6, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XJW+ZaXcgFsK for ; Thu, 29 Nov 2012 22:40:07 -0800 (PST) Received: from relais-inet.francetelecom.com (relais-ias91.francetelecom.com [193.251.215.91]) by ietfa.amsl.com (Postfix) with ESMTP id D948621F89B5 for ; Thu, 29 Nov 2012 22:40:06 -0800 (PST) Received: from omfedm07.si.francetelecom.fr (unknown [xx.xx.xx.3]) by omfedm14.si.francetelecom.fr (ESMTP service) with ESMTP id 9FD1522C459; Fri, 30 Nov 2012 07:40:05 +0100 (CET) Received: from PUEXCH81.nanterre.francetelecom.fr (unknown [10.101.44.34]) by omfedm07.si.francetelecom.fr (ESMTP service) with ESMTP id 8614F4C015; Fri, 30 Nov 2012 07:40:05 +0100 (CET) Received: from PUEXCB1B.nanterre.francetelecom.fr ([10.101.44.8]) by PUEXCH81.nanterre.francetelecom.fr ([10.101.44.34]) with mapi; Fri, 30 Nov 2012 07:40:05 +0100 From: To: Dan Wing , "'Reinaldo Penno (repenno)'" , "pcp@ietf.org" Date: Fri, 30 Nov 2012 07:40:04 +0100 Thread-Topic: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) Thread-Index: AQKd4K1embgpxqjensJXMmK2Y6gDrwJ3zMEVAlG+7FmWOwaoUIAAcv7g Message-ID: <94C682931C08B048B7A8645303FDC9F36E99E2D4A6@PUEXCB1B.nanterre.francetelecom.fr> References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> <074801cdce8b$1cb9b140$562d13c0$@cisco.com> In-Reply-To: <074801cdce8b$1cb9b140$562d13c0$@cisco.com> Accept-Language: fr-FR Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: fr-FR Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-PMX-Version: 5.6.1.2065439, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2012.11.30.41521 Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 06:40:08 -0000 Hi Dan, Please see inline.=20 Cheers, Med=20 >-----Message d'origine----- >De : Dan Wing [mailto:dwing@cisco.com]=20 >Envoy=E9 : vendredi 30 novembre 2012 00:42 >=C0 : BOUCADAIR Mohamed OLNC/OLN; 'Reinaldo Penno (repenno)';=20 >pcp@ietf.org >Objet : RE: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY,=20 >November 9, 2012)) > >> -----Original Message----- >> From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of >> mohamed.boucadair@orange.com >> Sent: Wednesday, November 28, 2012 11:18 PM >> To: Reinaldo Penno (repenno); pcp@ietf.org >> Subject: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, >> 2012)) >>=20 >> Dear all, >>=20 >> Below some answers for the questions raised for this draft. >>=20 >>=20 >> >-----Message d'origine----- >> >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De=20 >la part de >> >Reinaldo Penno (repenno) Envoy=E9 : lundi 26 novembre 2012 15:36 =C0 : >> >pcp@ietf.org Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) >> > >> >FRI 1120-1330 (note new end time) =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> > >> > >> >Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity >> >draft-boucadair-pcp-rtp-rtcp (10, Jaqueline >> >Queiroz) >> > >> >Stuart Cheshire: This seems wrong for PCP to take on additional >> >responsibility for the sake of a single legacy protocol >> > >> >Dan Wing: We should ask the SIP WG what they think. >>=20 >> Med: The procedure is not specific to SIP/SDP, it is even=20 >valid for non- >> sdp protocols. Are you suggesting we send a message to mmusic WG for >> instance? > >The port adjacency is (was) a need of RTP (RFC1889, RFC3550) which >is now owned by AVTCORE. =20 > >A survey of endpoints that support a=3Drtcp (RFC3605) or send their RTP >and RTCP over the same port (as being pursued by RTCWEB) would be >valuable.=20 Med: I checked https://www.sipit.net/SIPit29_summary and seems there is no = data for a=3Drtcp attribute. Real SIP deployments I'm aware of does not mak= e use of this atribute. This is why we mentioned in the draft the following= : [RFC3605] defines an explicit "a=3DRTCP" SDP attribute for some applications using a distinct port than RTP+1. Even though [RFC3605] defines a new attribute for explicitly specifying the RTCP attribute for the SDP based applications, but since it is not a MUST to use this attribute, there are still applications that are not compliant with this RFC. =20 The question comes down to: does the industry still need >port adjacency, or by the time PCP standardizes this functionality >and it gets deployed will it be relevant any more? Med: One of the major SIP-based deployment in Europe relies on a SIP agent = in the CPE + The CPE is beining controlled by the same provider. Integratin= g this option does require change only at the CPE side; no change is requir= ed at the service side. This option is more for legacy deplopyments. It will take a >couple of years. Med: Perhpas, but this option is IMHO trivial. Integrating it to an existin= g SIP UA is simple + there are already existing PCP servers which handle th= is option. All what we need is an official codepoint. PCP-base says: Additional PCP Option codes in the ranges 4-63 and 128-191 can be created via Standards Action [RFC5226], the ranges 64-95 and 192-223 are for Specification Required [RFC5226]=20 Why it is an issue to assign a codepoint in the 192-223 range for this opti= on?=20 > >> >Stuart Cheshire: NAT-PMP and IGD don't do this today, so how >> >"essential" >> >can it >> >be? >>=20 >> Med: Is this really a reason to not do it for PCP? > >It does demonstrate that there seems little _requirement_ for >this functionality - or else it would have been implemented >or been a must-have requirement. That is, there are some sort >of workaround/workarounds the industry is currently using today. > > >> >How do even/odd SIP devices work today? Why is it >> >"essential" that PCP >> >give >> >them something new, which they currently manage without? >>=20 >> Med: What we are proposing in this draft is very very simple. >> >> If this >> option is not supported, we will continue with current=20 >practices (which >> have many drawbacks): >>=20 >> * enable an ALG in the NAT (I'm more concerned about the CGN case) >> * or enabled some mechanism in the service side (e.g., SBC, Proxy >> Server) >> >> The proposed PCP option allows >>=20 >> * to remove any service-specific ALG handling RTP/RTCP traversal from >> the CGN/NAT >> * Simplify the service access point (e.g., SBC): no need for=20 >hosted nat >> traversal > >Would SBCs be de-installed if this feature is added to PCP? > >> * For the SIP case, there is even no need to use symmetric SIP, >> Symmetric RTP, etc. >> * No issue with unidirectional media sessions > >Those benefits are beyond what was presented at the PCP meeting. They >are pretty interesting / valuable. > >Can the SIP and/or AVTCORE working groups help convince PCP that this >is necessary / helpful / useful? > >-d > >>=20 >>=20 >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp > >= From alper.yegin@yegin.org Thu Nov 29 23:31:55 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 541AF21F899D for ; Thu, 29 Nov 2012 23:31:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.451 X-Spam-Level: X-Spam-Status: No, score=-102.451 tagged_above=-999 required=5 tests=[AWL=0.148, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y2s8Wyli5Jda for ; Thu, 29 Nov 2012 23:31:54 -0800 (PST) Received: from mout.perfora.net (mout.perfora.net [74.208.4.195]) by ietfa.amsl.com (Postfix) with ESMTP id B03D321F899C for ; Thu, 29 Nov 2012 23:31:54 -0800 (PST) Received: from [192.168.2.7] (88.247.135.202.static.ttnet.com.tr [88.247.135.202]) by mrelay.perfora.net (node=mrus3) with ESMTP (Nemesis) id 0Mh9uD-1TrlKN455d-00MygT; Fri, 30 Nov 2012 02:31:52 -0500 Mime-Version: 1.0 (Apple Message framework v1278) Content-Type: text/plain; charset=us-ascii From: Alper Yegin In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> Date: Fri, 30 Nov 2012 09:31:33 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> To: Sam Hartman X-Mailer: Apple Mail (2.1278) X-Provags-ID: V02:K0:SsdNYSG+QjIjnEIpMqXDYm8l73mWJUhdt9tWBml6QhC Nr8XC09i3riQeh/kV5Sqeg4h7hcigREipzZ55DPH5TK+1KhJAT Zwa5LCW19i3wXtHc8AYWTiw3vk765eQ+Vk18/24GF6mBpA9NuK 3GTUhUnruPDla9Mj1vLmpDfH9kJIi9jBQ8yY6PwWXpo5irJCdq Y0DG9iwZ9yUnbFbWY8o+eVluuJaaYhEycI7LVyWrIDa6ScgRnt 8wZty/2CTjgCA/8gdTbgN0Pq8JNRMozKaG5hTuQLugG9UqVihv WMUnlXZMKJim4vocqP+lypoccZ7Y3fn02QPTu/sQlxuYjqE+IY WDS+VoE2Og4QGtDphBLCDoNRSOTD1hCtmrRFRUMNq7PiVktLvI PNMeenf3XcgYQ== Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 07:31:55 -0000 Sam, Even if what you were saying made sense (which I strongly disagree for = the very reasons Yoshi has been explaining), it does not matter. Let me = explain: You are claiming there is a deployment case where unsolicited messages = from the server does not need to be integrity-protected. Nevertheless, there would also be deployment cases where server wants to = integrity-protect all of the messages. Therefore, "the protocol must support integrity-protecting unsolicited = messages".=20 If your claim were true, we'd simply say "it's the server's policy to = decide when to use that or not." But, nevertheless, protocol has to support it. Alper On Nov 30, 2012, at 5:45 AM, Reinaldo Penno (repenno) wrote: > One point that I made earlier is that a client can not distinguish = between > a regular response and an unsolicited response. Both are exactly the = same > from a PCP perspective. >=20 > Therefore it is my impression that any proposal that relies on a > distinction between the two needs to define how a client can = disambiguate > them.=20 >=20 > One can say that any response received by the client after the first = is > unsolicited. This holds true except in the case where the first = response > is lost, a change happens in the server which triggers an unsolicited > response. =46rom the client pov this would be the first response. >=20 > Thanks, >=20 > Reinaldo >=20 > On 11/30/12 12:19 AM, "Sam Hartman" = wrote: >=20 >>>>>>> "Yoshihiro" =3D=3D Yoshihiro Ohba = writes: >>=20 >> Yoshihiro> Sam, It seems what you suggest is to have a policy to >> Yoshihiro> allow unauthenticated responses while requests are >> Yoshihiro> authenticated even if the client and server have agreed >> Yoshihiro> to authenticate each other. I see no benefit of = allowing >> Yoshihiro> such a policy. It just introduces a DoS attack with >> Yoshihiro> false re-authentication triggers. Let's not do it. >>=20 >> I'm happy to discuss benefits once we agree on a security model. It >> sounds like you believe my statement of Z is wrong or that there's a = new >> threat to availability with regard to the client. >> Can you clearly state that? >>=20 >> In a form similar to how I stated 1-3 and Z? >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp >=20 > _______________________________________________ > pcp mailing list > pcp@ietf.org > https://www.ietf.org/mailman/listinfo/pcp From simon.perreault@viagenie.ca Fri Nov 30 02:58:55 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A76DD21F8712 for ; Fri, 30 Nov 2012 02:58:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j+iICH++S5Nl for ; Fri, 30 Nov 2012 02:58:55 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 2602121F870D for ; Fri, 30 Nov 2012 02:58:55 -0800 (PST) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id BAF574038B for ; Fri, 30 Nov 2012 05:58:49 -0500 (EST) Message-ID: <50B8915F.9090108@viagenie.ca> Date: Fri, 30 Nov 2012 11:58:39 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121029 Thunderbird/16.0.2 MIME-Version: 1.0 To: pcp@ietf.org References: <45A697A8FFD7CF48BCF2BE7E106F0604177EF0@xmb-rcd-x04.cisco.com> In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604177EF0@xmb-rcd-x04.cisco.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [pcp] Comments on draft-tsou-pcp-natcoord-08 X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 10:58:55 -0000 Hi Reinaldo, Le 2012-11-28 14:47, Reinaldo Penno (repenno) a écrit : > In both 2 and 3 NAT could be performed by PCP controlled device. There is > no discussion of this aspect (maybe due to Lw4o6 drivers) but if the > mechanism is to be generic, we need to define how it would work. As I > think about it , it seems there are quite a few issues to be ironed out. As mentioned in the presentation, there are ONLY TWO differences between MAP and MAP_PORT_SET: - MAP maps a single port, MAP_PORT_SET maps a set of ports. (Obviously!) - MAP_PORT_SET has the limitation that NAT is optionally applied to the address (as for MAP), but *never* applied to ports. If someone can find a way to make MAP_PORT_SET work with NAT applied to ports, please do suggest it. We have thought a lot about this and can't find a clean way to do it. We believe that the limitation is acceptable. Agreed? Thanks, Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From simon.perreault@viagenie.ca Fri Nov 30 03:11:56 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7BCA21F86EC for ; Fri, 30 Nov 2012 03:11:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UvF8ILWsYZ-H for ; Fri, 30 Nov 2012 03:11:56 -0800 (PST) Received: from jazz.viagenie.ca (jazz.viagenie.ca [IPv6:2620:0:230:8000::2]) by ietfa.amsl.com (Postfix) with ESMTP id 0E90D21F86BE for ; Fri, 30 Nov 2012 03:11:56 -0800 (PST) Received: from porto.nomis80.org (85-169-39-219.rev.numericable.fr [85.169.39.219]) by jazz.viagenie.ca (Postfix) with ESMTPSA id 05EAC4038B for ; Fri, 30 Nov 2012 06:11:53 -0500 (EST) Message-ID: <50B89473.1000508@viagenie.ca> Date: Fri, 30 Nov 2012 12:11:47 +0100 From: Simon Perreault User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121029 Thunderbird/16.0.2 MIME-Version: 1.0 To: pcp@ietf.org References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> <074801cdce8b$1cb9b140$562d13c0$@cisco.com> <94C682931C08B048B7A8645303FDC9F36E99E2D4A6@PUEXCB1B.nanterre.francetelecom.fr> In-Reply-To: <94C682931C08B048B7A8645303FDC9F36E99E2D4A6@PUEXCB1B.nanterre.francetelecom.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 11:11:56 -0000 Le 2012-11-30 07:40, mohamed.boucadair@orange.com a écrit : > Med: Perhpas, but this option is IMHO trivial. Integrating it to an existing SIP UA is simple + there are already existing PCP servers which handle this option. All what we need is an official codepoint. > > PCP-base says: > > Additional PCP Option codes in the ranges 4-63 and 128-191 can be > created via Standards Action [RFC5226], the ranges 64-95 and 192-223 > are for Specification Required [RFC5226] > > Why it is an issue to assign a codepoint in the 192-223 range for this option? I tend to agree with Mohamed. The draft is technically sound, short simple, and easy to implement. Yes it may address a corner case of RTP, one which we may want to see disappear quickly, but it appears to still be an important corner case in some deployments. And IMHO it's the IETF's responsibility to clean up after itself when it makes a mess. The WG should adopt this draft. Simon -- DTN made easy, lean, and smart --> http://postellation.viagenie.ca NAT64/DNS64 open-source --> http://ecdysis.viagenie.ca STUN/TURN server --> http://numb.viagenie.ca From hartmans@painless-security.com Fri Nov 30 03:58:24 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 762E721F86BE for ; Fri, 30 Nov 2012 03:58:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3PjTCoUS3Fem for ; Fri, 30 Nov 2012 03:58:24 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 08F6221F866E for ; Fri, 30 Nov 2012 03:58:22 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 6F7CE20180; Fri, 30 Nov 2012 06:56:38 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id 2F08A420E; Fri, 30 Nov 2012 06:58:20 -0500 (EST) From: Sam Hartman To: Alper Yegin References: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> Date: Fri, 30 Nov 2012 06:58:20 -0500 In-Reply-To: (Alper Yegin's message of "Fri, 30 Nov 2012 09:31:33 +0200") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 11:58:24 -0000 >>>>> "Alper" == Alper Yegin writes: Alper> Sam, Even if what you were saying made sense (which I Alper> strongly disagree for the very reasons Yoshi has been Alper> explaining), it does not matter. Let me explain: Alper> You are claiming there is a deployment case where unsolicited Alper> messages from the server does not need to be Alper> integrity-protected. Nevertheless, there would also be Alper> deployment cases where server wants to integrity-protect all Alper> of the messages. Alper, saying a thing again and again does not make it true. I claim there is no security reason for a server to want to integrity protect all its messages. That is precisely the disagreement, and asserting your position again and again doesn't move the discussion forward. I've provided you with a framework of threats and security requirements in which to argue about whether there is a reason for a server to require that responses be integrity protected. Please construct an argument rather than repeat yourself. If you don't like my framework, please propose your own. Alternatively, step aside and let us move on and get some work done. We both agree that clients need to be able to validate the integrity of responses. That means the response either needs to be sent with integrity, or the client needs to be able to solicit the same information with integrity protection. --Sam From hartmans@painless-security.com Fri Nov 30 04:14:36 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16D9B21F87AC for ; Fri, 30 Nov 2012 04:14:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0F8sVQVMncFN for ; Fri, 30 Nov 2012 04:14:30 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 5474721F87AB for ; Fri, 30 Nov 2012 04:14:30 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 1617520180; Fri, 30 Nov 2012 07:12:46 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id D04F8420E; Fri, 30 Nov 2012 07:14:26 -0500 (EST) From: Sam Hartman To: "Reinaldo Penno \(repenno\)" References: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> Date: Fri, 30 Nov 2012 07:14:26 -0500 In-Reply-To: <45A697A8FFD7CF48BCF2BE7E106F0604184E52@xmb-rcd-x04.cisco.com> (Reinaldo Penno's message of "Fri, 30 Nov 2012 03:45:39 +0000") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "pcp@ietf.org" Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 12:14:36 -0000 >>>>> "Reinaldo" == Reinaldo Penno (repenno) writes: Reinaldo> One point that I made earlier is that a client can not Reinaldo> distinguish between a regular response and an unsolicited Reinaldo> response. Both are exactly the same from a PCP Reinaldo> perspective. Reinaldo> Therefore it is my impression that any proposal that Reinaldo> relies on a distinction between the two needs to define Reinaldo> how a client can disambiguate them. I completely agree. I think clients need to make this distinction anyway in order to determine whether to retransmit. I suspect clients will do exactly what you propose in the next paragraph. Reinaldo> One can say that any response received by the client after Reinaldo> the first is unsolicited. This holds true except in the Reinaldo> case where the first response is lost, a change happens in Reinaldo> the server which triggers an unsolicited response. From Reinaldo> the client pov this would be the first response. So, if a response is lost and the client retransmits before the unsolicited response is generated, then the client will force a new solicited response. However, if I'm understanding what you're saying, there is a corner case. t = 0 request sent (retransmit timer fires at t=3) t = 1 first response sent and lost t = 2 change triggers unsolicited response Here the server thinks it is an unsolicited response and the client thinks it is solicited. I agree that solutions must handle this case gracefully. My proposal handles it as follows. If the server still has the SA (something we expect to generally be the case and almost always the case immediately after a request) then it sends an integrity-protected response at t = 2. The client never realizes that it was unsolicited; that's totally fine. If somehow between t = 1 and t =2 the server drops the SA, then it sends a response that is not integrity protected. The client desires integrity so it performs a reauth/resend of the request. We see here that a server that routinely deletes SAs shortly after request are received will be anti-social and will decrease client responsiveness and increase server load. Don't do that:-) Note that this case generates the same number of packets as server-initiated re-authentication. In that mode, at t t = 2, when the server realizes it has a message to send, it sends a re-auth start message. My solution has two key advantages: A) clients need not perform the re-authentication if they are going to discard the unsolicited response or otherwise ignore it. B) The server never needs to queue PCP responses to send. The server does need to have an EAP request buffer to retransmit the EAP request during the authentication phase as we discussed at length in another thread. However, it never needs to have a potentially long queue of unsolicited responses awaiting security associations to be negotiated. Clients that care about integrity of unsolicited responses need to maintain a bit more state, but I can think of two implementation strategies off the top of my head where the client's state is constant or scales with the number of mappings but not with the number of unsolicited responses. --Sam--Sam From hartmans@painless-security.com Fri Nov 30 04:19:57 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5C9621F86DB for ; Fri, 30 Nov 2012 04:19:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qFsF+kLbIenf for ; Fri, 30 Nov 2012 04:19:57 -0800 (PST) Received: from mail.painless-security.com (mail.painless-security.com [23.30.188.241]) by ietfa.amsl.com (Postfix) with ESMTP id 2253C21F86CE for ; Fri, 30 Nov 2012 04:19:57 -0800 (PST) Received: from carter-zimmerman.suchdamage.org (c-98-217-126-210.hsd1.ma.comcast.net [98.217.126.210]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "laptop", Issuer "laptop" (not verified)) by mail.painless-security.com (Postfix) with ESMTPS id 144CA20180; Fri, 30 Nov 2012 07:18:13 -0500 (EST) Received: by carter-zimmerman.suchdamage.org (Postfix, from userid 8042) id CCE61420E; Fri, 30 Nov 2012 07:19:54 -0500 (EST) From: Sam Hartman To: Yoshihiro Ohba References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> <50B7FE88.1030406@toshiba.co.jp> <50B8243D.7090605@toshiba.co.jp> Date: Fri, 30 Nov 2012 07:19:54 -0500 In-Reply-To: <50B8243D.7090605@toshiba.co.jp> (Yoshihiro Ohba's message of "Fri, 30 Nov 2012 12:13:01 +0900") Message-ID: User-Agent: Gnus/5.110009 (No Gnus v0.9) Emacs/22.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 12:19:57 -0000 >>>>> "Yoshihiro" == Yoshihiro Ohba writes: Yoshihiro> False re-authentication triggers sent by an attacker can Yoshihiro> start re-authentication even if neither the client nor Yoshihiro> the server actually wants to re-key. Note that a client Yoshihiro> or a server may want to re-key independently of each Yoshihiro> other at any time even before the key lifetime expires Yoshihiro> whenever it thinks that the key is being weak. As a Yoshihiro> result, the client and server may end up with spending Yoshihiro> more resources for unnecessarily re-authentication Yoshihiro> exchanges caused by such false triggers. Detecting false Yoshihiro> re-auth triggers would require the client to verify MAC Yoshihiro> of the re-auth triggers, which can be considered another Yoshihiro> DoS attack, but the DoS is IMO managable and the impact Yoshihiro> is much smaller than going through unnecessarily Yoshihiro> re-authentications. OK so, 4) Client and server availability might be impacted if an attacker can force clients and servers to re-authenticate when neither party actually desires re-authentication. R4) An attacker MUST NOT be able to force the client or server to perform re-authentication unless the client or server desires re-authentication. I think those are both reasonable, and I think they capture the point you're making. I'll want to analyze the solutions on the table, but I believe we can meet R4 for these. From ssenthil@cisco.com Fri Nov 30 05:50:42 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62E2021F8933 for ; Fri, 30 Nov 2012 05:50:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -9.999 X-Spam-Level: X-Spam-Status: No, score=-9.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdVLLBaSA+nP for ; Fri, 30 Nov 2012 05:50:41 -0800 (PST) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) by ietfa.amsl.com (Postfix) with ESMTP id 4E3A821F88FC for ; Fri, 30 Nov 2012 05:50:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4076; q=dns/txt; s=iport; t=1354283441; x=1355493041; h=from:to:subject:date:message-id:in-reply-to:content-id: content-transfer-encoding:mime-version; bh=S6zDLJ+OJJOexhx4tfItmBSbv2jCk3ZwVgAsJXutd7k=; b=QY8Lggc1r01HjO71nLjuC1hwkFXpOrUSjtTdWq7rrexUGmgI0P8s7r9Y l7cGQIihnD0VPEO8joetJJQE1jALSPNUqb18iatJbuYkPXb9l2T1D0Vn6 0FOZ54A240aHOFRg+c6vTF8NeFo4b7V0PPYJQAvTUbXTsD3TP6ISpy0P9 s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Av8EACW5uFCtJV2d/2dsb2JhbABEwA0Wc4IeAQEBBAEBARVWFwYBCBEEAQELHS4LFAkIAgQBEgiICAy/WASMQAqDVmEDiCieHIJygiE X-IronPort-AV: E=McAfee;i="5400,1158,6911"; a="147754679" Received: from rcdn-core-6.cisco.com ([173.37.93.157]) by rcdn-iport-1.cisco.com with ESMTP; 30 Nov 2012 13:50:40 +0000 Received: from xhc-rcd-x11.cisco.com (xhc-rcd-x11.cisco.com [173.37.183.85]) by rcdn-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id qAUDoe7S005606 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 30 Nov 2012 13:50:40 GMT Received: from xmb-rcd-x15.cisco.com ([169.254.5.148]) by xhc-rcd-x11.cisco.com ([173.37.183.85]) with mapi id 14.02.0318.001; Fri, 30 Nov 2012 07:50:40 -0600 From: "Senthil Sivakumar (ssenthil)" To: "Dan Wing (dwing)" , "mohamed.boucadair@orange.com" , "Reinaldo Penno (repenno)" , "pcp@ietf.org" Thread-Topic: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) Thread-Index: AQHNzwGu6vjFfIyBxEWPaEL+hLko+w== Date: Fri, 30 Nov 2012 13:50:39 +0000 Message-ID: In-Reply-To: <074801cdce8b$1cb9b140$562d13c0$@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.2.5.121010 x-originating-ip: [10.117.198.141] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <5139C0DF6063514DBECD61D7BBAFD76E@cisco.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 13:50:42 -0000 On 11/29/12 6:41 PM, "Dan Wing (dwing)" wrote: >> -----Original Message----- >> From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf Of >> mohamed.boucadair@orange.com >> Sent: Wednesday, November 28, 2012 11:18 PM >> To: Reinaldo Penno (repenno); pcp@ietf.org >> Subject: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, >> 2012)) >>=20 >> Dear all, >>=20 >> Below some answers for the questions raised for this draft. >>=20 >>=20 >> >-----Message d'origine----- >> >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De la part de >> >Reinaldo Penno (repenno) Envoy=E9 : lundi 26 novembre 2012 15:36 =C0 : >> >pcp@ietf.org Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) >> > >> >FRI 1120-1330 (note new end time) =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> > >> > >> >Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity >> >draft-boucadair-pcp-rtp-rtcp (10, Jaqueline >> >Queiroz) >> > >> >Stuart Cheshire: This seems wrong for PCP to take on additional >> >responsibility for the sake of a single legacy protocol >> > >> >Dan Wing: We should ask the SIP WG what they think. >>=20 >> Med: The procedure is not specific to SIP/SDP, it is even valid for non- >> sdp protocols. Are you suggesting we send a message to mmusic WG for >> instance? > >The port adjacency is (was) a need of RTP (RFC1889, RFC3550) which >is now owned by AVTCORE. > >A survey of endpoints that support a=3Drtcp (RFC3605) or send their RTP >and RTCP over the same port (as being pursued by RTCWEB) would be >valuable. The question comes down to: does the industry still need >port adjacency, or by the time PCP standardizes this functionality >and it gets deployed will it be relevant any more? It will take a >couple of years. It has been several years since a=3Drtcp has been defined and in the live deployments that we have seen, it is rarely used. I don=B9t see that rapidly changing in the next couple of years. > >> >Stuart Cheshire: NAT-PMP and IGD don't do this today, so how >> >"essential" >> >can it >> >be? >>=20 >> Med: Is this really a reason to not do it for PCP? > >It does demonstrate that there seems little _requirement_ for >this functionality - or else it would have been implemented >or been a must-have requirement. That is, there are some sort >of workaround/workarounds the industry is currently using today. Do we know what that workaround is? That can be helpful. Thanks Senthil > > >> >How do even/odd SIP devices work today? Why is it >> >"essential" that PCP >> >give >> >them something new, which they currently manage without? >>=20 >> Med: What we are proposing in this draft is very very simple. >> >> If this >> option is not supported, we will continue with current practices (which >> have many drawbacks): >>=20 >> * enable an ALG in the NAT (I'm more concerned about the CGN case) >> * or enabled some mechanism in the service side (e.g., SBC, Proxy >> Server) >> >> The proposed PCP option allows >>=20 >> * to remove any service-specific ALG handling RTP/RTCP traversal from >> the CGN/NAT >> * Simplify the service access point (e.g., SBC): no need for hosted nat >> traversal > >Would SBCs be de-installed if this feature is added to PCP? > >> * For the SIP case, there is even no need to use symmetric SIP, >> Symmetric RTP, etc. >> * No issue with unidirectional media sessions > >Those benefits are beyond what was presented at the PCP meeting. They >are pretty interesting / valuable. > >Can the SIP and/or AVTCORE working groups help convince PCP that this >is necessary / helpful / useful? > >-d > >>=20 >>=20 >> _______________________________________________ >> pcp mailing list >> pcp@ietf.org >> https://www.ietf.org/mailman/listinfo/pcp > >_______________________________________________ >pcp mailing list >pcp@ietf.org >https://www.ietf.org/mailman/listinfo/pcp From dwing@cisco.com Fri Nov 30 07:05:40 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EC95321F89C3 for ; Fri, 30 Nov 2012 07:05:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -110.179 X-Spam-Level: X-Spam-Status: No, score=-110.179 tagged_above=-999 required=5 tests=[AWL=-0.180, BAYES_00=-2.599, J_CHICKENPOX_14=0.6, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZRg2aAeteX9I for ; Fri, 30 Nov 2012 07:05:37 -0800 (PST) Received: from mtv-iport-3.cisco.com (mtv-iport-3.cisco.com [173.36.130.14]) by ietfa.amsl.com (Postfix) with ESMTP id 2C0AE21F8598 for ; Fri, 30 Nov 2012 07:05:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=5591; q=dns/txt; s=iport; t=1354287937; x=1355497537; h=from:to:references:in-reply-to:subject:date:message-id: mime-version:content-transfer-encoding; bh=NjMGaGd6CFeNUu07MmWlgL+eQCbM/KwkMh6VyLHKiJU=; b=U8ciVEgd9Hz7tN6Xb0eOMJvP8Olyu/1WaM66ann4cipWU1ZyEX2oW9Rp NHs46H5wD47aWdsw1Hxc5ZKxWpqu1GYCxBbfejm02DOPbCl/2WwQB7Q8w 5APQXFLkmPAkWpBIs8ug3rX2Yn8U7b3TXHI22An75FLID+52lt88tJIJT k=; X-IronPort-AV: E=McAfee;i="5400,1158,6911"; a="62805476" Received: from mtv-core-2.cisco.com ([171.68.58.7]) by mtv-iport-3.cisco.com with ESMTP; 30 Nov 2012 15:05:36 +0000 Received: from DWINGWS01 ([10.32.240.195]) by mtv-core-2.cisco.com (8.14.5/8.14.5) with ESMTP id qAUF5ZZx021963; Fri, 30 Nov 2012 15:05:35 GMT From: "Dan Wing" To: , "'Reinaldo Penno \(repenno\)'" , References: <45A697A8FFD7CF48BCF2BE7E106F06041761F4@xmb-rcd-x04.cisco.com> <94C682931C08B048B7A8645303FDC9F36E98AB1548@PUEXCB1B.nanterre.francetelecom.fr> <074801cdce8b$1cb9b140$562d13c0$@cisco.com> <94C682931C08B048B7A8645303FDC9F36E99E2D4A6@PUEXCB1B.nanterre.francetelecom.fr> In-Reply-To: <94C682931C08B048B7A8645303FDC9F36E99E2D4A6@PUEXCB1B.nanterre.francetelecom.fr> Date: Fri, 30 Nov 2012 07:05:35 -0800 Message-ID: <098e01cdcf0c$26bd9bd0$7438d370$@cisco.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQKd4K1embgpxqjensJXMmK2Y6gDrwJ3zMEVAlG+7FkBYneG/QHVvE/4liJF6qA= Content-Language: en-us Subject: Re: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November 9, 2012)) X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2012 15:05:40 -0000 > -----Original Message----- > From: mohamed.boucadair@orange.com = [mailto:mohamed.boucadair@orange.com] > Sent: Thursday, November 29, 2012 10:40 PM > To: Dan Wing; 'Reinaldo Penno (repenno)'; pcp@ietf.org > Subject: RE: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November > 9, 2012)) >=20 > Hi Dan, >=20 > Please see inline. >=20 > Cheers, > Med >=20 > >-----Message d'origine----- > >De : Dan Wing [mailto:dwing@cisco.com] Envoy=E9 : vendredi 30 = novembre > >2012 00:42 =C0 : BOUCADAIR Mohamed OLNC/OLN; 'Reinaldo Penno = (repenno)'; > >pcp@ietf.org Objet : RE: [pcp] PCP for RTP/RTCP (was RE: PCP MoM > >(FRIDAY, November 9, 2012)) > > > >> -----Original Message----- > >> From: pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] On Behalf = Of > >> mohamed.boucadair@orange.com > >> Sent: Wednesday, November 28, 2012 11:18 PM > >> To: Reinaldo Penno (repenno); pcp@ietf.org > >> Subject: [pcp] PCP for RTP/RTCP (was RE: PCP MoM (FRIDAY, November = 9, > >> 2012)) > >> > >> Dear all, > >> > >> Below some answers for the questions raised for this draft. > >> > >> > >> >-----Message d'origine----- > >> >De : pcp-bounces@ietf.org [mailto:pcp-bounces@ietf.org] De > >la part de > >> >Reinaldo Penno (repenno) Envoy=E9 : lundi 26 novembre 2012 15:36 = =C0 : > >> >pcp@ietf.org Objet : [pcp] PCP MoM (FRIDAY, November 9, 2012) > >> > > >> >FRI 1120-1330 (note new end time) = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D > >> > > >> > > >> >Reserving N and N+1 Ports with PCP: Preserving Parity & Contiguity > >> >draft-boucadair-pcp-rtp-rtcp (10, = Jaqueline > >> >Queiroz) > >> > > >> >Stuart Cheshire: This seems wrong for PCP to take on additional > >> >responsibility for the sake of a single legacy protocol > >> > > >> >Dan Wing: We should ask the SIP WG what they think. > >> > >> Med: The procedure is not specific to SIP/SDP, it is even > >valid for non- > >> sdp protocols. Are you suggesting we send a message to mmusic WG = for > >> instance? > > > >The port adjacency is (was) a need of RTP (RFC1889, RFC3550) which is > >now owned by AVTCORE. > > > >A survey of endpoints that support a=3Drtcp (RFC3605) or send their = RTP > >and RTCP over the same port (as being pursued by RTCWEB) would be > >valuable. >=20 > Med: I checked https://www.sipit.net/SIPit29_summary and seems there = is > no data for a=3Drtcp attribute. Real SIP deployments I'm aware of does = not > make use of this atribute. This is why we mentioned in the draft the > following: >=20 > [RFC3605] defines an explicit "a=3DRTCP" SDP attribute for some > applications using a distinct port than RTP+1. Even though = [RFC3605] > defines a new attribute for explicitly specifying the RTCP = attribute > for the SDP based applications, but since it is not a MUST to use > this attribute, there are still applications that are not compliant > with this RFC. Yeah, but I was hoping for more definitive information to help motivate the PCP working group. One other point in favor of your draft is that a=3Drtcp support is = needed on both the local and remote ends, and while a person can influence the local end (install PCP client, PCP server, and your PCP extension), = there is effectively no influence of the remote end, where a=3Drtcp support is also needed. > The question comes down to: does the industry still need > >port adjacency, or by the time PCP standardizes this functionality = and > >it gets deployed will it be relevant any more? >=20 > Med: One of the major SIP-based deployment in Europe relies on a SIP > agent in the CPE + The CPE is beining controlled by the same provider. > Integrating this option does require change only at the CPE side; no > change is required at the service side. This option is more for legacy > deplopyments. What does that network do, today? I am guessing, but I expect that it does latching (draft-ietf-mmusic-latching). What problem exists on that network today that would be solved by deploying PCP? Are there incentives in place to actually deploy the PCP solution and remove=20 whatever RTCP solution is used today? > >It will take a couple of years. >=20 > Med: Perhpas, but this option is IMHO trivial. Integrating it to an > existing SIP UA is simple + there are already existing PCP servers = which > handle this option. The complexity is that it continues a legacy of applications that=20 rely on certain ports, when we know -- due to NAT64, NAT44, MAP (A+P), and other IPv4 address sharing technologies -- that applications are less and less likely to be able to acquire certain desired ports. =20 That problem of acquiring a specific port was apparent a decade ago,=20 when a=3Drtcp was published in 2003. > All what we need is an official codepoint. >=20 > PCP-base says: >=20 > Additional PCP Option codes in the ranges 4-63 and 128-191 can be > created via Standards Action [RFC5226], the ranges 64-95 and = 192-223 > are for Specification Required [RFC5226] >=20 > Why it is an issue to assign a codepoint in the 192-223 range for this > option? Code point assignment is done by IANA, not by the PCP working group. =20 The specification required range exists for situations where a standard is not possible or is not desired. This may well be such a case, but I know that I don't know enough about how and why this extension would be used in the industry. -d From yoshihiro.ohba@toshiba.co.jp Fri Nov 30 16:06:31 2012 Return-Path: X-Original-To: pcp@ietfa.amsl.com Delivered-To: pcp@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7B6121F860A for ; Fri, 30 Nov 2012 16:06:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.422 X-Spam-Level: X-Spam-Status: No, score=-5.422 tagged_above=-999 required=5 tests=[AWL=-1.333, BAYES_00=-2.599, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0YLAXzNYEc8y for ; Fri, 30 Nov 2012 16:06:31 -0800 (PST) Received: from imx2.toshiba.co.jp (inet-tsb5.toshiba.co.jp [202.33.96.24]) by ietfa.amsl.com (Postfix) with ESMTP id 405B921F85FA for ; Fri, 30 Nov 2012 16:06:31 -0800 (PST) Received: from arc1.toshiba.co.jp ([133.199.194.235]) by imx2.toshiba.co.jp with ESMTP id qB106TPF005245; Sat, 1 Dec 2012 09:06:29 +0900 (JST) Received: (from root@localhost) by arc1.toshiba.co.jp id qB106TEj000759; Sat, 1 Dec 2012 09:06:29 +0900 (JST) Received: from unknown [133.199.192.144] by arc1.toshiba.co.jp with ESMTP id KAA00758; Sat, 1 Dec 2012 09:06:29 +0900 Received: from mx2.toshiba.co.jp (localhost [127.0.0.1]) by ovp2.toshiba.co.jp with ESMTP id qB106Toc015765; Sat, 1 Dec 2012 09:06:29 +0900 (JST) Received: from tsbpoa.po.toshiba.co.jp by toshiba.co.jp id qB106TTa021729; Sat, 1 Dec 2012 09:06:29 +0900 (JST) Received: from [133.199.17.6] by mail.po.toshiba.co.jp (Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004)) with ESMTPSA id <0MEB00CXLSAHZI90@mail.po.toshiba.co.jp>; Sat, 01 Dec 2012 09:06:29 +0900 (JST) Date: Sat, 01 Dec 2012 09:06:18 +0900 From: Yoshihiro Ohba In-reply-to: To: Sam Hartman Message-id: <50B949FA.70503@toshiba.co.jp> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7bit References: <45A697A8FFD7CF48BCF2BE7E106F0604153730@xmb-aln-x04.cisco.com> <87A8FD6F-BB3D-4545-B317-A19B7426D56F@yegin.org> <50B779E7.7070507@toshiba.co.jp> <50B7FE88.1030406@toshiba.co.jp> <50B8243D.7090605@toshiba.co.jp> User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 Cc: pcp@ietf.org Subject: Re: [pcp] Unsolicited Messages to Client with no security association X-BeenThere: pcp@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: PCP wg discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 01 Dec 2012 00:06:32 -0000 (2012/11/30 21:19), Sam Hartman wrote: > R4) An attacker MUST NOT be able to force the client or server to > perform re-authentication unless the client or server desires > re-authentication. The text looks like a requirement for an attacker's functionality, but I believe that is not your intent. How about this? R4) A client and a server MUST be able to detect and ignore false re-authentication trigger messages sent by attackers. Yoshihiro Ohba > > I think those are both reasonable, and I think they capture the point > you're making. > I'll want to analyze the solutions on the table, but I believe we can > meet R4 for these. >